Community discussions

MUM Europe 2020

Search found 55 matches

by fbuster
Tue May 07, 2019 6:38 pm
Forum: Wireless Networking
Topic: Search for specific word in a packet
Replies: 0
Views: 279

Search for specific word in a packet

I want to look if a certain packet coming from one local device that contains a certain word and than react by sending an output pin high on the router or sending a packet to a local esp8266 to react upon. The word is "callStatus" and it is a HTTP TCP packet about 300-400 in size. How would i go abo...
by fbuster
Tue Apr 23, 2019 9:32 pm
Forum: Beginner Basics
Topic: Inspecting wan traffic with RB433
Replies: 1
Views: 216

Inspecting wan traffic with RB433

Hi,

I have an old RB433 I would like to use it to just capture packets in between my wan connection on an sd card.
Can someone help me in a config that would work as in my setup below:

WAN ------> ETH0 (RB433) ETH1-----> ROUTER B ---------> LAN
by fbuster
Tue Mar 19, 2019 9:00 pm
Forum: Scripting
Topic: Sounding the beeper when a LAN device pings the router
Replies: 2
Views: 459

Sounding the beeper when a LAN device pings the router

Could anyone help me with a script that sounds the beeper when a Lan device pings the router ?
by fbuster
Wed Feb 27, 2019 8:40 pm
Forum: General
Topic: hap Mini
Replies: 10
Views: 1126

Re: hap Mini

You can also consider installing through netinstall:

https://wiki.mikrotik.com/wiki/Manual:Netinstall
by fbuster
Tue Feb 26, 2019 9:08 pm
Forum: General
Topic: Possible misconfiguration of L2tp/ipsec roadwarrior
Replies: 2
Views: 527

Re: Possible misconfiguration of L2tp/ipsec roadwarrior

Is there noone that can take a look at my config and give some advice?
by fbuster
Sun Feb 24, 2019 12:51 pm
Forum: General
Topic: Possible misconfiguration of L2tp/ipsec roadwarrior
Replies: 2
Views: 527

Possible misconfiguration of L2tp/ipsec roadwarrior

I Use this config to view camera connected to MT at home network from remote vpn client. It works but i would like to resolve following things: - Now the home network and vpn tunnel are on the same subnet , and i have to use proxy-arp would it be better to have different subnet and if yes how can i ...
by fbuster
Sat Feb 23, 2019 9:41 am
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

- In my current config (see above) proxy-arp is enabled on the bridge but i still can't ping other devices in my lan from my vpn client
- The reason i chose to get them in the same range was to avoid adding routing to be able to ping from subnet A to subnet B.
- How can I change my config for that?
by fbuster
Fri Feb 22, 2019 11:57 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

# RouterOS 6.42.12 /interface bridge add admin-mac=B8:69:F4:8E:04:17 arp=proxy-arp auto-mac=no comment=defconf \ name=bridge /interface list add comment=defconf name=WAN add comment=defconf name=LAN /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add auth...
by fbuster
Fri Feb 22, 2019 11:44 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

still no access , no ping reply
by fbuster
Fri Feb 22, 2019 11:33 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

# Change to bridge below
/ip address
add address=10.0.0.1/24 comment=defconf interface=[b]bridge[/b] network=10.0.0.0

# Is this ok?
/ppp profile
set *FFFFFFFE local-address=10.0.0.1 remote-address=vpn
by fbuster
Fri Feb 22, 2019 11:00 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

I've read the links you provided but I'm still clueless.
Can you help me what I need to change in my config?
by fbuster
Fri Feb 22, 2019 10:28 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

But in my config above the vpn user has same subnet as my Lan and Lan is already in the bridge
/interface list member
add comment=defconf interface=bridge list=LAN
by fbuster
Fri Feb 22, 2019 8:50 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Re: Cannot access Lan devices over vpn client

Anyone that can take a look at my config?
by fbuster
Fri Feb 22, 2019 4:03 pm
Forum: General
Topic: Cannot access Lan devices over vpn client
Replies: 17
Views: 1346

Cannot access Lan devices over vpn client

I'm trying to setup a vpn connection over L2TP/IPSEC for vpn client access to my local network. (Road warrior) I can connect from my vpn client to the vpn-server running on mikrotik , but cant get access to the home network. Can someone take a look at this to help me? See my config below: # RouterOS...
by fbuster
Fri Feb 15, 2019 8:42 pm
Forum: General
Topic: Using L2TP/Ipsec vpn using same subnet as lan?
Replies: 1
Views: 478

Using L2TP/Ipsec vpn using same subnet as lan?

I'm setting up a L2TP/ipsec server from my mikrotik to be able to remotely login from my phone.

Can i choose an ip range for the vpn to be in the same subnet as the lan connected to my router?

I would like to connect to a camera on my lan from the remote vpn device.

Do i need to use proxy-arp ?
by fbuster
Fri Feb 01, 2019 5:42 pm
Forum: General
Topic: 2 bridges or vlan
Replies: 5
Views: 576

Re: 2 bridges or vlan

If I make a wan bridge , will it also use the switch chip?
by fbuster
Thu Jan 31, 2019 8:42 am
Forum: General
Topic: 2 bridges or vlan
Replies: 5
Views: 576

Re: 2 bridges or vlan

Yes i get multiple ips from isp.
Settopbox is required by isp and needs a public ip
by fbuster
Wed Jan 30, 2019 11:06 pm
Forum: General
Topic: 2 bridges or vlan
Replies: 5
Views: 576

2 bridges or vlan

Image

I would like a config where the modem hands out :
  • a public ip to internal wan dhcp client
  • a public ip to the settopbox
eth3 & eth4 & wlan are a 10.0.0.0/24 subnet

Can someone help me , i am poor in bridges / vlan / switch
by fbuster
Thu Jan 17, 2019 10:46 pm
Forum: General
Topic: Mikrotik as VPN-server access to 1 Lan Device
Replies: 6
Views: 509

Re: Mikrotik as VPN-server access to 1 Lan Device

nope , thx for the link.

Can i enter a fixed address voor de remote-address in place of an ip-pool?
by fbuster
Thu Jan 17, 2019 10:07 pm
Forum: General
Topic: Mikrotik as VPN-server access to 1 Lan Device
Replies: 6
Views: 509

Re: Mikrotik as VPN-server access to 1 Lan Device

Does anyone have a basic config for L2TP/IPSEC vpn server on a RB951 ?
by fbuster
Tue Jan 15, 2019 9:41 pm
Forum: General
Topic: How to use Mikrotik router as a “switch”?
Replies: 8
Views: 1739

Re: How to use Mikrotik router as a “switch”?

Its a switch now , it doesnt need ip.
switching is layer 2 (mac)
by fbuster
Tue Jan 15, 2019 9:27 pm
Forum: General
Topic: How to use Mikrotik router as a “switch”?
Replies: 8
Views: 1739

Re: How to use Mikrotik router as a “switch”?

depending on your model it can be a 4port or 5port switch Here's a sample config: /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1 ] name=ether1-To-modem set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 s...
by fbuster
Tue Jan 15, 2019 8:35 pm
Forum: General
Topic: Mikrotik as VPN-server access to 1 Lan Device
Replies: 6
Views: 509

Mikrotik as VPN-server access to 1 Lan Device

I would like to setup my router as a vpn-server for accessing a camera from a phone using a vpn-tunnel.

What steps should i take to only allow access to 1 device in my lan (camera) and not the rest of my local network?
by fbuster
Sat Mar 03, 2018 2:31 pm
Forum: Scripting
Topic: Remove reserved leases from the same device [SOLVED]
Replies: 4
Views: 666

Re: Remove reserved leases from the same device [SOLVED]

Thank you, I tried testing it in a terminal first before scheduling it, but it doesnt show the lease.
Might i be doing something wrong? I used the command below :
[rb951@MikroTik] /ip dhcp-server lease> :put [find mac-address~"^60:01:94"]        
*756;*757
by fbuster
Sat Mar 03, 2018 11:57 am
Forum: Scripting
Topic: Remove reserved leases from the same device [SOLVED]
Replies: 4
Views: 666

Remove reserved leases from the same device [SOLVED]

There is a device on our network that requests dhcp leases frequently with a new mac address resulting in a big list of reserved leases from the same android machine. My idea is to search for the mac address that starts with xx:xx:xx because it is unique to our network but always the same for that d...
by fbuster
Thu Nov 03, 2016 11:52 pm
Forum: General
Topic: Feature Request
Replies: 0
Views: 557

Feature Request

Grouping of firewall rules.

example:

Group="DDOS protection"
- Here are the filters rules for this group
by fbuster
Wed Oct 26, 2016 11:30 pm
Forum: General
Topic: USB flash disk not working
Replies: 0
Views: 339

USB flash disk not working

I have an RB951 running 6.34.6 with a U3 cruzer micro 2GB flash pendrive In /system/resources/usb I can see: 1 1:3 SanDisk U3 Cruzer Micro 480 Mbps In /disk there is nothing so I can not format it to use in in my router. Does anyone have a solution for me?
by fbuster
Sun Oct 23, 2016 11:03 pm
Forum: General
Topic: Use Packet sniffer from bridge on port
Replies: 0
Views: 508

Use Packet sniffer from bridge on port

Problem : some local client is making connection to an ftp server on the internet once a week and i would like to capture that data on a file on my mikrotik. Possible solution: Tools/packetsniffer: Is it possible to sniff for packets coming from one of my lan or wlan clients with a destination port ...
by fbuster
Fri Sep 30, 2016 6:12 pm
Forum: General
Topic: Routerboard RB951 as firewall only
Replies: 1
Views: 378

Routerboard RB951 as firewall only

Is it possible to setup a routerboard between a cablemodem and a router and just use the firewall function in the routerboard? How can I set this up in routeros using 1 port for the cablemodem and another port going to the router wanport? I just want to try some basic firewalling without messing wit...
by fbuster
Sun Sep 25, 2016 10:33 am
Forum: General
Topic: Cannot access IP camera from lan but from outside
Replies: 3
Views: 713

Cannot access IP camera from lan but from outside

I have an Ip camera inside my lan connected to my RB951 I have a port forward NAT rule to forward outside traffic to my camera. I have an app on my phone that points to myexternalip:port and that works fine from the internet. When i use the app to view my camera when i'm connected with my phone on t...
by fbuster
Sat Jun 25, 2016 11:15 am
Forum: Wireless Networking
Topic: View how wifi clients are connected in ros
Replies: 2
Views: 1628

View how wifi clients are connected in ros

Is there a way to view in routeros how several wifi clients are connected 802.11b 802.11g 802.11n ?

I would like to turn off 802.11b support but i need to find out if there are still clients using it.
by fbuster
Tue May 24, 2016 5:12 pm
Forum: Beginner Basics
Topic: Filter Rules question about chains
Replies: 4
Views: 527

Re: Filter Rules question about chains

Its a lot more clearer now thank you zerobyte
by fbuster
Tue May 24, 2016 3:44 pm
Forum: Beginner Basics
Topic: Filter Rules question about chains
Replies: 4
Views: 527

Re: Filter Rules question about chains

It's simple. Input chain is for packets going to router itself. It happens when their destination is address owned by router. They end up being processed by process running on the router (e.g. SSH or FTP server) or dropped/rejected if they go to closed port. t Does it matter if the packet comes fro...
by fbuster
Mon May 23, 2016 11:03 pm
Forum: Beginner Basics
Topic: Filter Rules question about chains
Replies: 4
Views: 527

Filter Rules question about chains

I found the explanation for the IN , FORWARD & OUT chains but I'm still a bit puzzled. For example IN means going to the router IP address but does that als count for a packet coming from a local address and a packet coming from the wan interface (internet)? The same question for the FORWARD chain d...
by fbuster
Sat Feb 13, 2016 5:24 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

BUT - if you want to be slick and make the switch have an IP address "inside" your LAN, you can do this - Create a new VLAN interface, name it mgmt, set the vlan-id to something, say 10, and put it on the master ethernet interface. Put a free IP address from your LAN on the mgmt vlan interface of t...
by fbuster
Mon Feb 01, 2016 10:45 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

I already have a router which is configured as lan and AP.

I really just need this one configured as switch to go to my other router , digicorder and rpi server.

See manual cad :D
network01FEB2016.jpg
by fbuster
Mon Feb 01, 2016 9:36 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

the modem hands out public addresses not private addresses.

I get max 4 public addresses from ISP
by fbuster
Mon Feb 01, 2016 9:29 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

Remove ether1-to-modem from the bridge, and set its master port to be ether2. (the master doesn't have to be the first port - that's just a convention) As for IP address - whatever IP range your ISP modem assigns to things is what you should use on the AP. If your computers and devices are getting ...
by fbuster
Mon Feb 01, 2016 9:20 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

So with your explanation my config as below is wrong ? I used eth2 as a master port for the switch and eth1 port is connected to my isp modem. I also dont know which static IP i should choose , since i dont want to interfere with the isp. /interface bridge add name="My bridge" /interface ethernet se...
by fbuster
Mon Feb 01, 2016 8:39 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

I read that page and i understand how the switching works but i still have no clue how to set a management ip
for this config.
by fbuster
Sun Jan 31, 2016 9:27 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

If I understand correctly the IP is only used internally and does not interfere with the clients IP's on port 2-5 or the wan IP on port 1? In config below what is the command to set the management IP: /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1 ] name=et...
by fbuster
Sun Jan 31, 2016 11:55 am
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

Where should I set the IP for managing the switch without interfering with the switch function itself?

on Ethernet port 1 my ISP modem is connected that has a dhcp that hands out public IP's.

port 2 to 5 are my clients that receives IP from ISP
by fbuster
Sun Jan 31, 2016 12:56 am
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

Is this correct as below ? Can I also make this a firewalled switch? /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1 ] name=ether1-To-modem set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 set [ find def...
by fbuster
Sat Jan 30, 2016 10:57 pm
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3342

Basic steps to configure RB951G as a 5 port gigabit switch?

I would like to use my RB951G as a 5 port switch with wifi disabled.

What would be the required steps to take? (using the onboard switch chip)

starting from a blank config.

thx
by fbuster
Fri Jan 15, 2016 3:16 pm
Forum: General
Topic: routeros versions and fixes
Replies: 1
Views: 362

routeros versions and fixes

Hi,

I'm still happily running 6.32.2
Since I only update when i really need a new feature or fix i'd rather stay with it.

But i wondered if an important security flaw is detected that also is exposed in older versions
do they fix this also in older releases or just in the current release?
by fbuster
Thu May 14, 2015 11:19 pm
Forum: Beginner Basics
Topic: downgrading from 6.28 to 6.27 on rb951g
Replies: 2
Views: 1341

Re: downgrading from 6.28 to 6.27 on rb951g

worked great thank you
by fbuster
Sat May 09, 2015 3:30 pm
Forum: Beginner Basics
Topic: downgrading from 6.28 to 6.27 on rb951g
Replies: 2
Views: 1341

downgrading from 6.28 to 6.27 on rb951g

How should this be done and where can i get the 6.27 files?
by fbuster
Fri May 08, 2015 1:41 pm
Forum: Beginner Basics
Topic: What are your bad blocks percentages and router age?
Replies: 5
Views: 1183

What are your bad blocks percentages and router age?

from /system resources

Write cycles 493325 bad blocks 0.1% RB951g-2HnD 2 weeks old. running 6.28
by fbuster
Fri May 08, 2015 1:36 pm
Forum: Beginner Basics
Topic: IP Masquerade question
Replies: 2
Views: 461

Re: IP Masquerade question

Did the clients already have an active connection when you disabled the rule?
.
Yes when i tried disabling the rule again i wasnt able to get a connection
from a client to the internet , maybe i was looking at some cached data
the first time.
by fbuster
Tue May 05, 2015 11:11 pm
Forum: Beginner Basics
Topic: IP Masquerade question
Replies: 2
Views: 461

IP Masquerade question

I've setup my router from an online website, it works great. Can someone please explain what exactly the rule below purpose is ? I thought it was for masquerading my clients ip address to public ip's for browsing etc , but when I disable the rule my clients can already connect to the internet. /ip f...
by fbuster
Sat May 02, 2015 1:00 pm
Forum: General
Topic: Sector writes
Replies: 11
Views: 2538

Re: Sector writes

I also have the same problem on an RB951g running 6.28
2 write cycles continuously when logged on using winbox.

Can other users confirm that downgrading to 6.27 fixes
the issue?