MikroTik

goldclick

goldclick , i tried to call you so many times , i just need to know how can i apply the patch to squid ? i have fedora c8 .. Unpack the version of SQUID supported by the patch (I have tested up to 2.6 STABLE16). Change directory into its source tree directory and issue: patch -p1 < ../squid-2.6.STA...

goldclick

Thanks to all that has posted in this thread... Just reading through helped me in solving a very crucial design problem.

goldclick

step 3 are not working i can see any packets in my mangle here is mangle rule /ip firewall mangle print chain=output out-interface=lan tos=48 action=mark-packet new-packet-mark=proxy-hit passthrough=no i read the article on wiki says ! ZPH only works with routeros 3.0 waiting your positive response...

goldclick

It does not let you set an incomming interface for the nat rules. See error ingoing interface matching not possible in srcnat chain It will let you set it for outgoing. I have that done already. Tim Correct! in-interface is for dst-nat. Use out-interface for src-nat and specify the interface that a...

goldclick

Mikrotik with Squid.jpg Reference the attached image. Depending on your network, you can have varying configurations. All you need do is adjust the diagram to suite your configuration. In my case, RT1 is a cisco router connecting my network via satellite. MT1 and MT2 are present and SRV1 is Debian ...

goldclick

1. Per the main thread (upload failing), I have experienced a few issues too and I strongly suggest we keep testing, provide feedback to Mikrotik Support and look out for the improvments coming in next release. The re-written Mikrotik Web-proxy has great features worth implementing... 2. Per the hij...

goldclick

Yes, its possible to have another VAP with different SSID and running different hotspot. For light traffic, this might suffice. If traffic is high, run your hotspot gateway on a 2GHz server and implement VLAN. YOu can have many VLANS with hotspot with different pages. Your AP can have the VAP bridge...

goldclick

Alepo works great with mikrotik. The default NAS works but you will not be able to use certain radius attributes till you include the ones known by mikrotik. You need to create custom radius dictonary file for Mikrotik and modify the Nascfgdbs files under \RBSServ\raddb\ to point to this file. This ...

goldclick

Thanks much for the response, appreciate it. Another thing.... Im a bit chary of such a link though, in terms of speed and latency... Ill feel a bit more content with some real world scernarios, in other words im wondering if 5.8ghz can actually make the 13 mile link with a fair deal of bandwidth.....

goldclick

http://wiki.mikrotik.com/wiki/Queue_wit ... _Web-Proxy

Valens,

Nice one! This issue has bugged me for quite a while. will give this a shot!

Sonny.

goldclick

Sergejs, thank you for your assistance I was carried away by the fact that our former router software (WinRoute) didn't give the same result with sites like showmyip.com With WinRoute, only IP of proxy server / internet gateway is shown while with Mikrotik both (local and public) are shown. the 'x-...

goldclick

hi
i want to ask if any one use alepo in this forum ?

I do. Works great. let me know if you need help in anyway.

Sonny.

goldclick

Can you make your scenario a bit clearer?

goldclick

Although we only use the 8602 in production in 5GHz, we did test and run trials of the 8602 in 2.4GHz. The power output, when set to default, was 26dB. We had problems with the radios keeping clients associated, though, and after putting just a few into production, pulled them and replaced them wit...

goldclick

We have about 40 RB532s with 8206s installed and don't have any reboot problems with the tx-power set to default. If you set the tx-power, especially to something like 26, you will have problems. Setting it to default makes the RB532 operate stable AND you get 26db power (measured with spectrum ana...

goldclick

But why was my workstation able to get an IP address THROUGH the bridge (no WDS) yet not able to ping, or pass IP? It says to me that MAC layer was bridging but maybe it was an ARP issue - I tried PROXY-ARP but no avail (which I figured would "NAT" the internal MAC). It doesn't make any s...

goldclick

what exactly are the problems faced? explain some more so we can see how to help.

goldclick

Why do you need to mark the connection, then use that connection-mark to mark the packets? Why won't Mikrotik just let you mark the packets using packet-mark? Eric If you by any means NAT your connection (either DST-NAT; web-proxy redirect or SRC-NAT), then you must first mark the connections and t...

goldclick

I have something similar to yours that works for me. This will create vlan with id 1 for your customer (10.0.15.0/24): create vlan1 with id=1 on bridge interface in CLIENT-2. Ensure that ether1 in both CLIENT-2 and CLIENT-3 are not part of the default bridge. I assume bridge1 is the bridge set on bo...

goldclick

Yes, several other complain, esp. when u use vlan and have the 'bridge' window opened. see http://forum.mikrotik.com/viewtopic.php?t=8056

goldclick

I'm not sure how you came by that belief. Off hand, at one installation, I have 2 RB532s running 2.9.17, with 2 8602s each, running on 48v PoE, no problem. At another site (not using PoE here), I have one RB532 with 4 8602s, 3 with 3 each, and 4 more with 2 each, all running 2.9.11, all with up-tim...

goldclick

i had this same problem that made it difficult connecting to an RB532 for over a week. Winbox keeps crashing, no matter from what PC i connect from. I notice this with so many windows opened especially with the 'bridge' window. I finally got winbox working by quickly pressing the 'esc' key on the ke...

goldclick

Please test this new feature: http://talk.mikrotik.com/ the MikroTik talkrooms is a place where you can do just that - talk like you do here, but in a slightly different way. To log in - use your mikrotik.com account server login name please. Nice... at least for very quick answers. PLease make all...

goldclick

Hi all, I have setup a pptp connection in an attempt to remotely manage the linksys wireless access points that exist on a mikrotik hotspot. Hotspot internal ip is 192.168.1.1 I have given myself 192.168.1.11 when I sucessfully pptp into the router from the internet. I can't seem to connect ping or...

goldclick

Is there no single user on the forum from the Czech republic who is willing to invite Goldclick (if that's all that's required)?

Christian

Yup! thats all that's required... Any Nice User in the forum willing to invite me to Prague? Will be a great favour!

goldclick

How about that?

Everyone attending just put a short note in here...

(Yes, I WILL be there )

Best regards,
Christian

Wanna be there... paid the fees and even booked hotel... but embassy turned visa down... they need invitation from someone in Czech! too bad

goldclick

I don't know if RouterOS has anyway of telling you if there something is a cache hit or not. There is a a plugin for SQUID proxy though that will allow you to change the TOS on packets that are coming from the cache. You can then set different mangle and queue rules on the MT based on the TOS. It's...

goldclick

hello, i have done the upgrade of the firmware and routerOS but i now realised that the routerboards hangs during bootup, and when i removed the RouterBouard 71 from the PCI slot of the R230, the routeboard boots successfully. i ready through the manual,and i could deduced that one should disable &...

goldclick

So, we can't use now 2.9 :( but we have bougth some 532 router. Can we install Router OS 2.8 on them? 2.8 is x86 based and cannot be used for the 532 which is MIPS based. Do not try it. There is a special 2.9 version designed to run on the 532. What's the problem using the 532 just as you purchased...

goldclick

Hi taloot, Ive set the client proxy (on IE) to 10.5.50.1:3128 but it cannot resolve any site. Ive tried to take out parent-proxy on the /ip hotspot but the hotspot only allows the site on my walled garden setting (yahoo.com) and nothing else, any website would then be redirected to the hotspot capt...

goldclick

Why do you want proxy when MT doesn't cache content... Mikrotik's web-proxy package is squid based and does caching very well, probably the best simple to setup cache I've ever used. Remember that router OS has 2 proxy packages - the web-proxy (squid based and caches) and the basic ip proxy (Mikrot...

goldclick

bholler, Remember that every device behind the hotspot requires to login to the hotspot before traffic can pass. Your SIP phone will not work behind MT2 because the hotspot firewall rules redirects all the traffic untill authenticated. You can use the walled garden feature to allow your SIP phone re...

goldclick

yes, use routeros-x86-2.9.npk for PC or RB230 and routeros-rb500-2.9.npk for rb500.

Sonny

goldclick

What the difference bewteen this and regular webproxy package?

goldclick

I have RB500 with two miniPCI cards, (one SR2 and the other SR5) in low power 12-24v mode powered by a 24vdc solar (2 x 55w panels in series charging 4 batteries [2x12v 100AH in series, then paralleled]). Measured current with 16mbps tcp traffic and 100% CPU load is approximately 250mA.

Sonny

goldclick

but how can I cache all EXE.ZIP.RAR etc etc file downloading? All you need to cache EXE.ZIP.RAR should be all setup once you specify a cache drive, appropriate disk space to use and enable the web proxy. Objects/urls to be excluded from cache can be specified in the /ip web-proxy cache command. You...

goldclick

I'm from Nigeria and very interested. Great to have users meet, share ideas and discuss mikrotik...

sonny.

goldclick

The RB14 cannot supply enough current to power the four cards. I had this situation myself and support confirmed it will not work.

goldclick

Your config looks ok and I really cannot see a problem. Sure you don't have entries in Queue trees that might cause this? Do not create any rule in queue tree matching flow "hs-auth". Also ensure u don't have static mangle rules that might interfere with hotspot. If you're sure of this, tr...

goldclick

Hello Valony, I need more info on your setup. What's ur router OS version? Also send me the output of the following either telnet or terminal of winbox (preferably while a user is logged on): >/ip hotspot profile print >/queue simple print Let's see the output... we can then take this further. sonny.

goldclick

Valony,

It's strange that bps is not changing. is this setup on ver 2.8 or 2.9beta?

Sonny.

goldclick

great! if the bps is changing, then the system is managing bandwidth. You might consider using radius for hotspot authentication... you will better be able to specify different rates for download and upload.

Sonny.

goldclick

No I did not add any queie manually in the queie section. I'm just adding a user in hotspot section and I chose a profile that I have made with a 64kbps limit. When a user is online I check in the Firewall mangle it looks that a user is limited on 64kbps but there is no dst adress only src adress. ...

goldclick

Am looking at the new 400mW minipci from ubiquiti with interest. Am however not sure if MT has started supporting them. Anyone ever tried this on the RB230 board? Kindly share your experience and recommendations... thanks.

goldclick

Hi, I am using mikrotik hotspot gateway and th users are getting authenticated throw hotspot and getting ip addres throw dhcp. I have tried to limit their bandwidth but there is something wrong becouse they can still bypass the queie. When I add a hotspot user I put 65536 for 64 kbps limit and when...

goldclick

Is your proxy/cache on same MT unit or seperate Squid box? If using seperate squid, it is possible to patch squid to mark cached content with TOS of choice and then have the MT firewall mangle match packets with this TOS and flow mark for further processing in queue trees. Let me know your scenario....

goldclick

What I do is create a mangle rule with 'hs-auth' flow for the static IP I want unrestricted. This works great for me:

>ip firewall mangle add src-address=192.168.x.x/32 action=passthrough mark-flow=hs-auth

This assumes the ip you want to bypass the login page is 192.168.x.x

Sonny.

goldclick

Hello Daniel,

Thanks for posting the test results. It's impressive! What grade and length of cable do you have between the 5G/ABM and the antennas? Any amplifier?

Sonny

goldclick

Latest test results here at short range: 72Mbps sustained throughput half-duplex using MT bandwidth tester - Single AR5212 or 5211 radio @5.8GHz - 5GHz "turbo mode" - Nstreme enabled - 1GHz CPU utilisation ~60% (figures strongly suggest a 266MHz board won't do that throughput) Next tests ...

goldclick

afaik 2.8.16 wireless-legacy is identical with 2.8.13 wireless package.

(see change log too)

regards.
matthias

Ok. So I need only install the 2.8.16 wireless package, right?

Sonny

goldclick

Hello All,

I will appreciate if anyone can tell me the difference between wireless and wireless-legacy 2.8.16 packages and which to load. I am runing MT with Ath5212 and 5211 chipsets. Thanks

Sonny

Search found 51 matches

Re: Help with bandwidth control in mikrotik + external proxy

Re: Sectored Antani's on a tower

Re: Help with bandwidth control in mikrotik + external proxy

Re: Exclude different /24 space on same interface from NAT rules

Re: Help with bandwidth control in mikrotik + external proxy

Re: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail

Re: Does any one here use Alepo with Mikrotik???

Re: Mikrotik Chat

Re: Remotely manage access points behind hotspot

Re: Just for info: Let's create a "I'm at the MUM 2006&

Re: Wrong accounting in V2.9.2?

what is webproxy-test-2.9.npk?

Anyone tried the new 400mW 802.11a minipci on Mikrotik?

Re: Need urgent help - Can't limit hotspot users

Re: How to: Allow Computer Unrestricted Access In Hospot Se

Re: difference btw wireless & wireless-legacy?

difference btw wireless & wireless-legacy?