MikroTik

m4t7e0

Someone can have some information about tr069 working behind NAT such as XMPP or STUN server or Mikrotik is involved to evelop the USP support?

m4t7e0

I requested this of support, but I want to see TR-143 support as well.

+ FOR TR-143
+ FOR XMPP [Annex K of TR-069 Amendment 5]

Thanks

m4t7e0

Hi dear, i have a problem to netinstall routeros with same computer and settings i tryed to netinstall a hAP ac lite Confiugured PC Reset Button pressed - Starting the RouterBOARD in Netinstall mode Or Keep holding the button for 5 more seconds until LED turns off, then release it to make the Router...

m4t7e0

news?

m4t7e0

try with dst nat and not redirect if the dude server is different from router .

m4t7e0

UP! Mikrotik APs compliant with the wifi4eu minimum specs? As request from WiFi4EU 9.2.1 What are the technical requirements for the WiFi4EU Access Points? The technical specifications of the equipment are detailed in section 6.2.2 of the call text, as well as Article I.2 of Annex I of the Grant Agr...

m4t7e0

You're right, you can't do it like this. You can check if the L7 hack could help you, i.e. you would remove 10.255.255.254 from "/ip dns" and you'd only redirect selected queries there with L7. Great Guide, but it doesent work before the hotspot authentication... UPDATE 19:29: i change th...

m4t7e0

Mixing resolvers like this doesn't work reliably. RouterOS starts with first server, moves to next one on failure and keeps using it until another failure, when it moves to next one again (or to first if it was on last). Proper solution would be either ability to add also static CNAME records, or s...

m4t7e0

Hi dear i have a question for all DNS Expert! For a temporany solution i have to CNAME a single domain for allow hotspot (and it redirect all 53 upd to isself before autentication) redirection to my own page. Unfortunatelly it can't be an "A" record. So i create my own DNS server as proxy ...

m4t7e0

Displaying the device identity in RouterOS is not happening. The above instructions for Appearance only affect the Map diagram. How can the Device Identities be shown in the Device list under the RouterOS tab view? I would like this as well. The map can get a lot cluttered and we use the device lis...

m4t7e0

I will UP this post...
draw.io is a good solution, Dia, Google Draw, Network Notepad, Dude, Anyone Know one applucation that can simply match Newtork Monitoring and Network Draw, OpenSource,?

m4t7e0

Hi dear, i'm trying this two new prdocut:RBM11G with R11e-4G [long-term 6.42.10] in B42 LTE network, after some hour of tests with the not really good documentation (https://wiki.mikrotik.com/wiki/Manual:Interface/LTE), finally i've reached internet: /interface lte set [ find ] band=42 mac-address=0...

m4t7e0

It has come to our attention that a rogue botnet is currently using the same vulnerability in the RouterOS Winbox service, that was patched in RouterOS v6.42.1 in April 23, 2018 . Since all RouterOS devices offer free upgrades with just two clicks, we urge you to upgrade your devices with the "...

m4t7e0

My firewall report "strange" udp Packet outgoing src:5678 to 81.198.87.240:30000

81.198.87.240.JPG

Anyone know who is this IP and why ROS is sending packet to this host?

m4t7e0

Try like this video guide https://www.youtube.com/watch?v=GIijZ6_i55g or try holding for more time (like 40 second after the power on)

if not try with other PC (in my case i used old computer with windows xp and only eth devce.

m4t7e0

Which seguence are you using on the device? There is 2 Mode to boot in NetInstall mode. Trying factory defaults (push reset button for 20 second after it is swtiched on) after 5 minutes push the reset button for 60 second and wait 5 minutes Method 1 After this: Plug off Power Push and hold reset hol...

m4t7e0

i can sent you my configuration for route the facebook traffic via VPN, just change it it for your preferred site: In this there is not configuration about VPN client -> Just do it! :X There is 3 simple step Adding address List Routing mark the Address list Route configuration Adding address List /i...

m4t7e0

Please take a look to the WiKI. https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT I'm not sure about your request You have enabled PortForwarding in ISP Router:6881 to Raspberi Pi Port... But The networks are like: Case 1 ISP Router port 1 to Mkt port 1 ISP Router port 2 to Rapsberry Port or Cas...

m4t7e0

You can try to use SSTP VPN or other VPN, actually which VPN is configured?

m4t7e0

Close any other application,
disable any network interface leave enabled only ethernet.

m4t7e0

You can configure the p2p to mikrotik and set the pubblic ip to customer, you want the mikrotik on internet or not? it mean you must use one of this pubblic ip address.

m4t7e0

try with net terminal:

/ip service set winbox port=8291 disabled=no

if not try to export the configuration:

/export file=Backup.rsc

Copy the export to Backup.rsc to PC
Upgrade RoS

/system package update install

if not make support.rif and submit to support@mikrotik.com and factoryreset

m4t7e0

For Net install:
Disable any network interface on the computer (leave actived only the network), and than follow the step on the WiKi... https://wiki.mikrotik.com/wiki/Manual:Netinstall

m4t7e0

Not sure about network schema, bu try this: Example: /ip address add address=172.16.1.10/30 comment="ISP Private IP" interface=ether1 network=172.16.1.8 Solution 1 - /ip firewall nat add action=src-nat chain=srcnat comment="NAT Private to Public" src-address=172.16.1.10 to-addres...

m4t7e0

Hello, I am new to MikroTik and bought a Mikrotik hAP Lite Intern (RB941-2nD) and would like to configure the following: The router is behind a firewall I have no access to. To use VPN I have to use Port 443 and TCP. Hi dear, i'm so sorry i forgot about USING TCP 443 Port, the only avaiable VPN i t...

m4t7e0

+1 is a MUST

m4t7e0

Your wan is PPP or a is behind a NAT ? Please also send a traceroute to 8.8.8.8 for each WAN interface

m4t7e0

Did you check the wiki? [https://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless]
if yes i can see the configuration

m4t7e0

I think you also need to masquerate the the vpn traffic

m4t7e0

Hi, yes is possible, first step is setup your openVPN VPN you know hot to do it? Plese Read https://support.nordvpn.com/#/Connectivity/Router/1136267512/Mikrotik-Setup.htm than you can simple make a prerouting "NordVPN route" mangle rules with for all the traffic that you want to route on ...

m4t7e0

Why better? Could you explain?

vlan is a way for isolate different networks, bridge is the opposit situation, why you would to brigdge if your scope is isolate every network?

m4t7e0

RIF WIFI: Typically, the largest Ethernet frame that can be transmitted without fragmentation is 1500 bytes. PPPoE adds another 6 bytes of overhead and PPP field adds two more bytes, leaving 1492 bytes for IP datagram. Therefore max PPPoE MRU and MTU values must not be larger than 1492. You are talk...

m4t7e0

if you are interesse to some rb 10 36 contact me i found some discount

m4t7e0

You can change the "landing-page url" but your request depends at 99% from the smartphone... iPhone CNA don't permit using app during the autentication stage...

m4t7e0

you can use hw swtich instead the "bridge" or change the qos rules for single interface

m4t7e0

can you export the configuration??
I think you should add the routing mark on route for each mangle rules with distance > the primary link

m4t7e0

I think is better to add a new hotspot for each vlans... of trunk port to cisco switch!

m4t7e0

Anyone ever got this to work? im facing the same exact issue. the captive portal wont load and the gstatic connectivity returns net::ERR_CONNECTION_RESET

probabily depends on https site..
Try to load an http site instead https.

m4t7e0

Hi ottoemezzo,
i suggest you to edit this parameter per-connection-classifier= both-addresses-and-ports with something different, using this paramenter can generate some problem with some site (like banks) that checks the pubblic ip of requests.

m4t7e0

Waiting for your Network diagram / address, but probabily i think you miss the static route to each router.

m4t7e0

Ciao Ottoemezza!
can i take a lootk to your PCC Mangle Configuration?
Your mangle rules is getting traffics in stats?

m4t7e0

Hi, i will bet interessed to try B42/43 CAT 12 - 16 with carrier aggregation. You have any compatible board? I just found the newest B42 CAT4 without CA.

m4t7e0

Hi All, yesterday my Router RB750UPr2 with latest BugFix version was attached from something... Apparently just a DNS default server Change.. The device was opened to public ip *80 *8291 *21 *22 (i need to do leave it for see what this attack do to my router), so i get the first attack. After this c...

m4t7e0

Actually from me, no news about it!

m4t7e0

Thanks for the package, anyone know why mikrotik hide it?

m4t7e0

Hi dear,
i will try the btest application on windows, from the official site there is no exe.

Anyone know about the end of this software?

m4t7e0

On the client unable to connect or sometime for few second it reach 201 and after some second some other old established vpn go down...

m4t7e0

Yes, purchase higher level of license, L4 = 200, L5 = 500, L6 = unlimited, (Keep in mind which routerboard you have and resources available on it)

https://wiki.mikrotik.com/wiki/Manual:License

My routerboard is ccr1036 with l6.... Never see more than 201 connection

m4t7e0

According to the wiki, if you have enabled protected-bootloader mode you need to hold the reset button for a certain amount of time to restore the ability to netboot, though this will completely wipe the NAND including your config https://wiki.mikrotik.com/wiki/Manual:RouterBOARD_settings#Protected...

m4t7e0

MikroTik experimented with USB over IP in the past, but it was scrapped before it was finished, see e.g.:

viewtopic.php?f=2&t=61297
viewtopic.php?f=1&t=61368

No future possibility?

m4t7e0

I'm having the same issue but Netinstall does not work. I tell netinstall to "Install" the packages but after i press install it sits there for about 10 seconds like its doing something then tells me the router is "Ready". It doesn't reboot or anything. But maybe your netinstall...

m4t7e0

Hi Dear,
i have configured a "protected-routerboot enable" device, but i forgot about this option, and i have tryed to force netinstall via reset button and poweron the device.
Now the device reboot continuosly and is impossible to use it.
What i can do?

m4t7e0

Hi dear, someone have more than 200 sstp tunnel connected using ruoterboard as server?

m4t7e0

m4t7e0, thank you! This topic was reported to the support in one of the the initial request. Hope they will be able to fix the issue. Don't know when as Dude development is frozen/slowed. Thank you! Thanks you too.... I actually want to forward the port request via Nat rules .. I hope this can solv...

m4t7e0

Good Evening.

Sorry to flog a dead horse here, but is there any hope of this feature coming back?

+1

m4t7e0

Hi dear, i will access to usb device in other location.

VirUSB.png

is possible to able the access to USB device on MetaRouter device (i will try to install this package: "https://sourceforge.net/projects/usbip/")

Or there is possibile to do it with a new feature of mikrotik?

m4t7e0

The Dude Server si running on CCR1036-12G-4S 6.39.3 the device that i want to reach via dude monitorig is RB951 - 952 - Groove - CRS etc etc .. all these device have the same "port configuration".

Acctually i can't use the current version i prefer the bugfix version.

m4t7e0

Yes, i have the same problem explained on https://www.youtube.com/watch?v=_coYAsJlIPU .

For company needing i can't change it... i can only making a fake firewall rules for changing the port request... but is not compliant...

m4t7e0

Ok, so i will explain the problem: i have 500 mikrotik device (varius type without dude server installed on it) connected via VPN to one Mirkotik CCR where is installed the dude server. Actually the 500 mikoritk are manageble via ssh, telnet, api, winbox, but with different ports. When i try to add ...

m4t7e0

Hi dear, i will try to manage my mikrotik device via "The Dude v6.39.3" . during my network discover i have edited the probe "routeros management" changin it with the my default winbox port "20891" and not "8291". All the device are collected, but i can't acce...

m4t7e0

Hi Dear, i need you help for make a good firewall configuration on my RB. Actually i have this port config bridge1 -> connected to border router with private ip 172.x.x.2/32 and access to q.w.e.1/30 public ip bridge2 -> connected to manage router with private ip 172.y.x.1/24 bridge3 -> connected to ...

m4t7e0

My Last Configuration http://www.speedtest.net/android/3065900868.png http://www.speedtest.net/iphone/2186428919.png /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=6 band=2ghz-b/g/n basic-rates-a/g=18Mbps,24Mbps,36Mbps,48Mbps,54Mbps \ basi...

m4t7e0

Singal Client.PNG

Connection List.PNG

Traffic.PNG

Other Screen... Running 4 btest form desktop
1 udp tx
1 udp rx
1 udp tx rx
1 tcp tx rx

only one client connected

m4t7e0

Now is in testing mode on my laboratory (tryng with Android - Notebook - iOS)

As request
/interface wireless band=2ghz-b/g/n

Groove2.4Ghz.PNG

/interface wireles band=5ghz-a/n

Groove5Ghz.PNG

m4t7e0

Nothing Changed instead Ping.
Ping is 1ms... the upload is 23mbps but download still with a not good rate (after a lot of test the max reached is 10mbps)

m4t7e0

/interface wireless registration-table> print # INTERFACE RADIO-NAME MAC-ADDRESS AP SIGNAL-STRENGTH TX-RATE UPTIME 0 wlan1 10:66:75:F4:AD:BF no -41dBm@1Mbps 48Mbps 1h12m57s tell me if you need more information

m4t7e0

Use a sector antenna.

Sector Antenna? the device is at 4 meters from AP... And other AP works better without sector antenna...

m4t7e0

I will looking for a tips for improve my WiFi Performance on GrooveA 52hp /a. Here the current configuration: /interface wireless set [ find default-name=wlan1 ] antenna-gain=5 band=2ghz-b/g/n country=italy default-forwarding=no disabled=no distance=indoors frequency=auto frequency-mode=regulatory-d...

m4t7e0

I'm Looking a solution for improve my bandwidth rate, actually i have this solution: area 1 r1 (publi IP) - l2tp server eoip to r2 and r3 area 2 r2 (under 2 nat [i can't manage it]) - l2tp client eoip to r1 area 3 r3 (under 1 nat [usb 3g]) - l2tp client eoip to r1 bridge on r1 (eoip r1 to r2 & r...

m4t7e0

Hi, i have also one netinstall default script, but i have wasted the original scritp, is possible to recover the default custom script?

m4t7e0

What are 172.20.250.73/29 and 172.20.250.81/29?

@devi1 is a Point to Point Layer 2 services.
I need to srcnat to the public ip address.

m4t7e0

Hello! Double NAT is very bad. I think that you need to change design of your network. But this is some rules in /ip firewall mangle add action=mark-connection chain=prerouting new-connection-mark=WAN1_W-con src-address=10.0.0.1/29 add action=mark-connection chain=prerouting new-connection-mark=WAN...

m4t7e0

No reply? /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=WAN1_W src-address=10.0.0.1/29 add action=mark-routing chain=prerouting new-routing-mark=WAN2_W src-address=10.0.1.0/29 /ip route add distance=100 gateway=172.20.250.73 routing-mark=WAN1_W add distance=100 gatewa...

m4t7e0

Hi i have a question on Routing Mark.. my current configuration is the following: https://dl.dropboxusercontent.com/u/3248283/RB_Test/RB_multiGW_1from.PNG but i think the routing mark can help me to remove to device and have something like this: https://dl.dropboxusercontent.com/u/3248283/RB_Test/RB...

m4t7e0

It will be same as any other dipole

Thansk for the Replay..
i know that, but the dipole 3d radiaton that you post is ideological pattern, if it exit i need the real one..

Thanks in advance!

m4t7e0

Hi Guys,
I looking for the groove 6dbi 2.4 / 5 ghz antenna patter..

I have found only:
2.4Ghz Dipole 5dBi

Can anyone help me to find it?

m4t7e0

In order to get everything working well you need public fixed IP addresses on all sites. Another solution is to make VPN's to your central point if this is possible and then you're authenticating through a fixed connection with fixed IP address. Patrick Yes i know this solution, but is not good for...

m4t7e0

Dear, You have to setup Userman first. Or in the same router (not recommended) or in a separate router (device) or VM. Read the documentation of Userman how to setup subscribers, profiles, routers, users, etc... Then in the AP in winbox menu Radius put IP address of Userman + secret and rest of con...

m4t7e0

Do you want it in the balancing group ? If so add it into mangle just like the others and increment appropriately. Then to preference your voip you'll want to just classify the traffic (maybe port or port +destination, voip phone ips, dscp markings) what ever works for you. Then just mark that clas...

m4t7e0

Hi, i need to make a script that make this:
/system ssh address=192.168.1.1 user=guest
password: (i have put the password"
Enter ? for help.
CPE> reboot
CPE> Are you sure? [Y/n] no

Reboot CLI system!! Bye!

Is possibile to automate this process?

Thanks

m4t7e0

Nothing to do..

Search found 81 matches