MikroTik

Nuke

Lol. You didn't see any real operator class router if you are willing to name this board like that. "real operator class router" costs 10-20 times more. For me, CCR delivers good enough performance. Especially considering it's cost. I hear what you say, but I don't understand the problem....

Nuke

Ek is nie seker wat jy wil doen nie, maar jy kan seker VRF gebruik. Nie 'n virtual router nie, maar wel 'n virtual routing instance. Dis deel van die base software, deel van alle Mikrotik.

Nuke

Will add my vote too. I find mtr most usefull.

Nuke

so i think, that would be not a problem to encrypt 500mbps~ with those cores? or it will use one core per ipsec tunnel ? I have almost the same question but on using it for pppoe without encryption. Will the pppoe service run on 1 core or will it create a new service for each tunnel. Would really l...

Nuke

Or you could use a daughter board on the RB600.

The omni's signal patterns differ quite a bit, especially in 'signal elevation' I'll call it. The higher the gain of the antenna the less the elevation is normaly.

Nuke

Check the antennas signal pattern. But in you case I'll mount it lower. It will catch less noise and the chance of signal going over your clients is smaller. For hotspots I usually use a 12 db yagi pointed into the ground. If I was in your case I would use 3 yagis pointed 120deg from each other. as ...

Nuke

At 400-500m it should work fine. But the only thing you are going to do by putting an omni upside down is giving it a greater chance of getting its internals wet, because its not the way it should be mounted(not that I gonna care, the only good onmi is a broken one). (I'm a great hater of omni's, an...

Nuke

I agree with MyThoughts. Also using an omni is the worst you can do, more so in high noise areas. By swapping to 3x 120deg sector's I believe you will have alot less issues. I tested that with an omni I get far lower speeds than with a good quality sector. Less than 1mbps on the omni with 5 clients ...

Nuke

Some things I have found how to optimize for voice. I run nstreme without any stange configs. Disable noise immunity. For some reason I found it creates alot of jitter on links. I tested it on a long 43km link, at times the pings shot up to 300ms without any traffic going trough the link. Lock the s...

Nuke

Try it. I do about the same, exept I have 2 pppoe-servers that are redundant/loadbalancing. For that I also need to redistibute the route for each pppoe, because any user can authenticate on any pppoe server.

Nuke

It shouldn't have anything to do with NAT, I did a ping from the mikrotik that was doing the loadbalancing, and it started dropping pings after anything from 30s to 3min. When testing over 4 lines, after a while, it only replyed once in 4 pings, and I could see only one line recieving pings back(usi...

Nuke

It doesn't work correctly, its starts dropping packets after a while. But you can play with it using nth terms in mangle rules. Then get a routing mark from those mangle rules to do your routing from. Not going to go into the details, its anyway not working well. Here is the wiki guide http://wiki.m...

Nuke

0dbm is 1mW so it will still connect, try setting it to something in the minus range eg. -10dbm is 0.1mW

Nuke

Do you redistribute connected? Starting it for 192.168.3.0/24 is not going to help alot, seeing that ospf is very aware of subnet masks and the pppoe interface is a /32

Nuke

I would not use Mikrotik's dns servers for more than 5-10 users if I use it at all. I found that it starts to drop requests after a while. Clear the cache, problem is gone for a while. Rather get yourself a linux box and load bind9 on it, installation is pretty easy. Heres my "site" (if yo...

Nuke

Had the same problem, its a undocumented feature you can call it. When using a channel outside the normal band, you need to add that frequency(or range) in under "scan-list".

Nuke

We have a client that uses Nortel VPN client to connect to his workplace. Problem is the Nortel VPN stops responding after 5 seconds. It seems like the problem is with the masqurade rule, we tested it from our office where there is no internal PPPoEs or any firewalls. It only goes through 3 Mikrotik...

Nuke

I had the same problem, it started working again after I flushed the DNS cache. At first I tried pointing it to my squid as a parent proxy. Now I'm using the nat rule directly to my squid/dns server combo. Haven't had a problem with that setup in months.

Nuke

Under DHCP server make sure "Add ARP for Leases" is ticked. Then in the interface hotspot runs on set Arp to Reply-only. That should do the trick.

Nuke

If you don't have BGP peering with your provider you will almost always use masqurade on the last hop to the internet. the block of public IPs, how did your ISP assign it to you? I know InternetSolutions south africa gives you a /29 range, with the first usableIP being their router at your place, an...

Nuke

Haven't had much luck with MT dns sofar, works fine for a while then starts to drop random querys. eg. there is no way a certain client can resove a certain hostname, this I clear the MT dns cache. Its a problem with the cache, same reseon why I don't use MT proxy that point to my Squid as a parent ...

Nuke

Also had that problem, connections that goes though also get TCP_RST packets alot of the times, causing winbox/ssh/telnet to dc for router behind it(somethimes it cant stay connected for more than 30s). Thus I made sure OSPF only have one route to each destination by changing the path cost. Problem ...

Nuke

It seems like its a 'problem' with IIS sending packets far bigger than the mtu of you connection. I found some packets that was upto 55000 bytes long, split over multiple packets from IIS based webservers. Thus I'm guessing without the change MSS option it just doesn't reconstruct the packet correct...

Nuke

The main problem with that is "it just doesnt work, lets default and try again" is not good practice for production. Its fun to play with I agree, but things that stops working for no good reason is not accepable in my books.

Nuke

I played around a bit with wireshark to check on a few things. Seems like the header on an EoIP tunnel is 42(that includes the 20 byte IP header) bytes, and PPPoE is normally 8 bytes. So its seems like the Eoip MTU should be 1458 and the PPPoE mtu 1450. Though it works fine to use 1500 mtu on the Eo...

Nuke

I had that same problem in a few cases, and I'm yet to find a solution. In one case it worked fine till I added a new OSPF network, couldn't get it working again so far yet(good thing OSPF is not critical for me) I also had a problem earlier this week where OSPF stopped redistrobuting its default ro...

Nuke

I still don't exacly understand why you want a vlan per room. You will be able to see from the hotspot username what rooms are logged in. If you see user james.johnson is logged on and know in which room he stays its easy to identify the room?

Nuke

What switches do you use? It would be 10x easier if you use a Cisco switch and just to put every client-end port into protected mode. That way no 2 rooms can comunicate with each other.

Just do a conf t
int fa 0/10
switchport protected

Nuke

15 accounts.

Problem is a route must change the moment the account is capped. There is already 10 pppoe active in anyway(some for local, some for voip, some for dns, etc)

Problem with uncapped is its slower than capped. And for proper uncapped its R5000 for a 1mb line. Not worth it imo.

Nuke

I live in south africa where our telecom caps our adsl lines at a certain amount of usage. Sadly they don't disconnect the pppoe totally, it just stops to pass traffic. Now I'm looking for a command that graps the xxx "received-bits-per-second: xxx kbps" from this command "interface m...

Nuke

Hi, are you Gromit from PCF SA?

Set up firewall rule that blocks(drop or reject) port 8291 if the in-interface is the wlan interface. Should do the trick.

Nuke

I'm building a failover box for our network, launching 16 pppoe's over diffrent lines. I also want to redirect ports from the outside to a Win2003 server behind the failover box. But a want to be able to use every pppoe as a possible entry point(eg. if i connect on port 3389 on any of the pppoe's ex...

Nuke

Thanks alot, will try that. Will make my life much easier.

Nuke

Is the "interface based routing" already in the beta? Running beta9 on a test box and beta10 on a rb133c, but couldn't find anything. I have 5 adsl lines and all of then gets the same gateway, thus it will help me greatly. At the moment each line is on a diffrent router.

Nuke

Thanks its working now.

Strange thing is when I ping nic.changeip.net I get the IP, but when I type in :put [:resolve nic.changeip.com] it gives me 0.0.0.0.
Oh well, changed the dns server and its running.

Thanks again

Nuke

I'm trying to use the ChangeIP script, but the log keeps telling me the following :DDNS Begin :DDNS Sending Update :connect error Then i tried using the the following just to test the dns-update tool. tool dns-update name=xxxx.changeip.net address=41.242.245.175 key-name=xxxxxx key=zzzzzzz It also d...

Nuke

Ok thanx. Thought is was something like that. Will try that what no-one is online.

Nuke

Maybe a stupid question. I just want to know if its possible to make a virtual AP on a client in station mode?(on the same card). I already tried, and it says running, but I can't connect to it. Guess I can use WDS, but I want to route between the interfaces. Allready checked out the manuel, but I d...

Nuke

We also have problems with P2P, we use a M$ ISA behind our Mikrotik to try to block it. And even now some people get torrents out here and there. Good thing that our ISP shapes our traffic(I live in south africa) So the chances of P2P killing a line is pretty small. You general speed is 10KB/s on a ...

Nuke

He can run it Smile ... in same class but he must put all wlan1 and wlan2 in bridge ... Smile ... annd then evry link to be in wds ... it sould work .. i hope Smile Yes its possible, but not the best way of doing it. By bridging you put more stress on the RB, so your links will be slower. But if he...

Nuke

Im not from latvia but I hope this helps You cant run the wlan's on the same network class, try something like ether1 192.168.1.200 wlan1 10.0.10.100 | | | wlan1 10.0.10.101 ether1 192.168.2.200 wlan2 10.0.9.102 | | | wlan1 10.0.9.103 ether1 192.168.3.200 wlan2 10.0.8.104 | | | wlan1 10.0.8.105 ethe...

Nuke

Question 1: If i have a Senao with ssid=AANAME (for example) and i change this Senao for a MT ap... but assign the MT AP the same ssid (AANAME) as the Senao. Will my clients automatically connect to the MT AP or I have to manually and locally connect each one??? Yup it will work. I did it before, n...

Search found 42 matches

Re: CLOUD CORE ROUTER

Re: Cloud Core Router van Mikrotik

Re: Feature Request: MTR

Re: CLOUD CORE ROUTER

Re: Mount HP Omni upside down?

Re: Mount HP Omni upside down?

Re: Mount HP Omni upside down?

Re: Low Throughput - Why doesn't bandwidth get through?

Re: Advanced backhaul tweaking - best test procedure

Re: Am I doing it right with OSPF for PPPOE?

Re: aggregate links, how?

Re: aggregate links, how?

Re: Lowest Possible Tx-Power R5H

Re: Am I doing it right with OSPF for PPPOE?

Re: DNS server

Re: XR5 and Super Channels

Nortel VPN

Re: WEB Proxy problems

Re: How to force clients to use DHCP server

Re: Nobody helps on community support (general)

Re: how can i make Mikrotik an Internal DNS Server ??

Re: ECMP bug and workaround

Re: cannot open sites if change-tcp-mss=No

Re: Basic OSPF-question / no neighbour

Re: Best practice with pppoe+MTU

Re: Basic OSPF-question / no neighbour

Re: VLAN ID Range

Re: VLAN And Hotspot

Re: Script to change Adsl accounts

Script to change Adsl accounts

Re: Hotspot security

multiple pppoe - NAT problem

Re: load balancing with 2 same ip gateway

Re: load balancing with 2 same ip gateway

ChangeIP timeout (resolved)

Virtual AP on client