MikroTik

alexvdbaan

Thanks!
That did the trick!

alexvdbaan

Goodday all, I have recently upgraded my home network to ROSv7, I waited a longer time because I have a residential fiber setup with dual-stack and vlan/IGMP TV. I was happy to get everything up and running but now I am only left with flaky IPv6 config. After quite some testing and searching online ...

alexvdbaan

Yes, i have implemented this feature in a new version, check it out https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update Hi beeyev, Awesome script, thanks for the work and sharing it with the community here. I have a suggestion that you perhaps want to consider for a future versi...

alexvdbaan

Hi guys, Today I have runned into a weird issue at a clients network. We have a fiber connection onsite with a pppoe connection that supports RFC4638/MTU 1500 frames. Since we deliver a multitenant network each client is hosted in its own vlan. Today a client reported issues with a squarespace websi...

alexvdbaan

Since it looks like your setup is a little bit more complex i would go with the "easy" way. Add a second virtual configuration to your access points either with or without passphrase (WPA-Personal AND/OR WPA2-Personal) and setup access lists with mac-address matching rules. https://wiki.m...

alexvdbaan

Goodafternoon, My company is currently supporting a coworking space with several locations. Each location has roughly 30 separate units that host individual companies. We use a full MikroTik network stack assisted with the Kaplansoft TekRadius software to provide a wlan with dynamically assigned vla...

alexvdbaan

@MikroTik support, do you have any feedback on the question below? bridge - add dynamic CAP interface to tagged ports if "vlan-mode=use-tag" is enabled; Great work MT team! I was wondering if you could elaborate on the dynamic vlan function? I can see that the Caps interfaces are included ...

alexvdbaan

bridge - add dynamic CAP interface to tagged ports if "vlan-mode=use-tag" is enabled; Great work MT team! I was wondering if you could elaborate on the dynamic vlan function? I can see that the Caps interfaces are included in the bridge and that the active interfaces are tagged in the dyna...

alexvdbaan

Alex, were the 2011 powering AC CPEs?

Yes, in all cases they were providing power to wap ac

alexvdbaan

Chris,

You mention bridge but you don't show your /interface export. Could you please add a full export?

Thanks, Alex

alexvdbaan

When I get back in, I'll see if I can put together a script for this.

That would be great, thanks in advance.

alexvdbaan

Goodafternoon, I am trying to find a way to automate adress-list creation from the published IP ranges from Microsoft Office 365 services. Microsoft delivers an online json presentation that can also be downloaded. Was hoping that one of you might have some script or solution for this? Thanks, Alex

alexvdbaan

I have several clients with RB2011 and poe port broken. Thought it was a coincidence but it appears to be that the poe is shutting down more often than not.

alexvdbaan

Problem solved. I manually added the bridge on my router with STP enabled. As soon as I disabled STP on the bridge my ping kept going while enabling vlan-mode=secure

alexvdbaan

Hi guys, Today I setting up various vlan scenario's between MT devices that have full hardware offloading (CRS3xx switches) and devices that either don't support it. I have setup a small router to host vlans and transport those to my CRS326. In my first test I setup vlan filtering on my router to tr...

alexvdbaan

The problem with "Click Reconnect, then Winbox window disappears and after exactly 30 seconds automatically disconnect from device with Connection lost window appearing again" still persist (first time spotted in v3.14 https://forum.mikrotik.com/viewtopic.php?f=21&t=134940&start=5...

alexvdbaan

Hi Guys,

One of my clients VOIP vendors delivers their CPE with an interface with untagged voip traffic. They would like us to translate that untagged traffic to vlan 100. Does anyone have experience with this port based translation in the vlan aware bridge setup?

Thanks,

Alex

alexvdbaan

I have setup a HAP ac with CapsMAN locally setup, external radius and various vlan's. When I tag the wireless interfaces in the bridge it all works. Unfortunately I cannot get the setup to work on the clients premises by simply adding the wireless interfaces to the tagged interface list. Hope that o...

alexvdbaan

This post: viewtopic.php?f=2&t=133821provided me with a good hint, simply adding the dynamically assigned capsman interfaces to the tagged list. I have setup a test on a hap ac and that worked. I will let you know if the customer site will also be successful.

alexvdbaan

Hey guys, This question came up after attempts to make this config even 'better'. I quote the better because the setup is working according to client spec but it would be nice to get it done the way I like. So hope to gain some valuable insights and suggestions from the forum. Network is a multi-ten...

alexvdbaan

Sure thing! /interface bridge add fast-forward=no igmp-snooping=no name=bridge priority=0x1000 protocol-mode=none vlan-filtering=yes The docs I referenced uses pvid=1 for the bridge and for holding the VLANs, so my bridge sets no pvid. Instead, I've assigned the IP directly to a VLAN Thanks bjornr,...

alexvdbaan

Hi bjornr, If I look at your setup it seems that the primary difference is that you also list your bridge as tagged in the vlan port settings. Could you share your bridge default vlan setting? Mine is: /interface bridge add admin-mac=64:D1:54:DA:33:50 auto-mac=no name=#master protocol-mode=none pvid...

alexvdbaan

Hi Guys, I have been playing around with the CRS326 and the new bridge implementation. I am quite happy with the direction of the new bridge, everything should become a lot easier. However as a few people before me have posted, getting it all to work with the current info on the wiki is challenging....

alexvdbaan

Goodafternoon,

I have been trying to get a Dude Chart up and running that shows a label with 2.4Ghz Capsman connected clients and then the 5Ghz connected clients. Has any one of you already encountered this or have a suggestion on how I could implement this?

Thanks in advance,

Alex

alexvdbaan

Hi Michael,

I have looked into Duo combined with their LDAP proxy but did not get this properly connected to the RADIUS facility in RouterOS. Have you managed to get it working on the RouterOS platform?

Alex

alexvdbaan

Hi Guys, I would like to make a VPN setup that allows RoadWarrior users to utilize the remote gateway public IP address to connect to cloud services. Currently an SSTP setup is running with Radius authentication, however an additional factor is required. What would be the best method to combine indi...

alexvdbaan

Hi guys, Is there anyone here with experience with the WAP ac hooked up to long (80+ meter) UTP CAT6 cable lengths? Reason why I'm asking is because we are planning a rollout where we want to use the WAP ac with cable lenghts of up to 85-90 meter. Since we will only hook up less than 5 AP's we wante...

alexvdbaan

You can find the solution here: http://forum.mikrotik.com/viewtopic.php?t=92711#p463429

You need to change your queue type settings from from only-hardware-queue to default-ethernet. That will do the trick, good luck

Alex

alexvdbaan

Hi Guys, I recently purchased 2 hap ac lites for my home network and I am very happy with the results. Now I wanted to connect them to my Capsman setup but I noticed that certain options are missing in capsman. Currently I configured my ap's with the following parameters: 5Ghz-ac-only Frequency 5500...

alexvdbaan

Hi whitie, Thanks for your rule suggestion, it does seem to work when I enable my address list rule back for my device. However sites like adobe.com and a Dutch one at5.nl still wont work. I will try and test with another PIA country configured. Also see if it makes a difference if I use the PIA app...

alexvdbaan

Hi guys, Thanks for your work in this thread. I managed to get the NAT rules and my Private Internet VPn setup. However I have been noticing that some sites have been responsive and others simply wont reply any more. I have read online and on this forum to see what this could be. What would be a goo...

alexvdbaan

Hi withie, I am experiencing exactly the same issue on my CRS125 with PIA using L2TP/IPSEC. I have used this tutorial https://www.youtube.com/watch?v=aIUTfiGkmzk to set everything up. I have tried the suggestion to add my public IP to a new address list. But that didnt work unfortunately. 2015-04-02...

alexvdbaan

You can also implement port knocking in case the automation fails for any reason.

Thanks jarda, This can be a very interesting fall-back. Do you have experience with this technique?

alexvdbaan

If you put the list on a well-known password-protected ssl-protected URL and use fetch to pull that to flash, then use the contents to generate the address list..

ZeroByte, thanks. I will give this a try.

alexvdbaan

Hi There,

I had the exact same issue on UPC and my CRS125. problem was solved by changing the queue type from hardware-only to default-ethernet. Works like a charm.

See: http://forum.mikrotik.com/viewtopic.php?f=3&t=94296

Gr Alex

alexvdbaan

Goodevening everyone, I work for an IT company in Amsterdam, we manage over 200 mikrotik firewall at our clients premises. I am currently busy with an ISP/IP address migration for roughly most of our clients. During the migration we are also looking at the device health (primarily RB450(G)'s), filte...

alexvdbaan

Hi Quindor,

thank you for that suggestion, this solved my issue! I changed this setting on all my ports and it worked perfectly.

thanks for your help on this point

Alex

alexvdbaan

HI Quindor, I changed my cable and testes again, I found that I didnt get higher than 35Mbit. I booted my 450G up and connected my modem, speedtest immediatly gave me the full 121Mb and 12Mb down and up. This would rule out my modem I would say. Perhaps I have a faulty ether-1 port, that I could tes...

alexvdbaan

Hi Quindor, Thanks for your reply. Of course I can quickly swap a cable and I will definitely check out iperf so see my performance on the CRS125. However my feeling is that there is some other issue here. The cable has functioned over the last year and I do receive my normal connection speeds when ...

alexvdbaan

Hi everybody, I switched from a 450G to a CRS125, I experienced a massive drop in available bandwitch (normally 120Mb, now 30Mb) from my ISP (UPC, in the netherlands). I built the config up from scratch, I have added both configurations with this post. Can any one of you tell me if there is some har...

Search found 40 matches