MikroTik

nichky

Can anyone add some info here. According to MT wiki about Nv2 AP Synchronization "After Master AP is found the Slave AP will calculate the distance to the Master AP as it is possible that Master AP is located not on the same location". I got one Master-AP--ssid= test1 , and one Slave-AP-ssid= test2 ...

nichky

i go RB760iGS and yes it is LTE

https://www.bigw.com.au/product/optus-4 ... lsrc=aw.ds

nichky

i got LTE device plugged into my mt

im trying ti sent SMS which is unsuccessfully, any tips and tricks to solve this issue.

The error that i gething is "Modem unsupported"

nichky

would be better if you give us your topology

nichky

have you read wiki about that?

use-local-address:
By default, the DNS name will be assigned to the detected public address (from the UDP packet header). If you wish to send your "local" or "internal" IP address, then set this to yes

nichky

what you connecting?
what type of gadgets?

nichky

can anyone give me the link,which usb dongle are compatible on MikroTik.
i can't find my self

nichky

MikroTik is there any chance to add wireguard in v6?

nichky

set this by comand line

/interface/wireguard> peers/set endpoint=ip+port (e.g.13231)

nichky

since new features comes up on v6.47.0
l2tp-client
what is the difference between: (Use-peer-dns) yes , exclusively

nichky

Hi,
I am sorry but I am still having the same problem on this point :
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); any advice ?

need more info about this..can anyone add something

nichky

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

i can't properly see your picture, can you make bigger for us

nichky

lucky i didn't try to downgrade

please give me more info about 2 x SMA external antenna.
is that for 2.4 or 5?
Device opraithing with chain 0 and i add external antennas can play with chan 1?

is im correct?

nichky

RBD53G-5HacD2HnD-TC&EG12-EA

Does it work only with v7.0 and above?

nichky

My topology looks like that

i got R1------R2-------R3-------R4
ospf,mpls and VPLS between:
R1 and R2
R1 and R3
R1 and R4
when i disable VPLS between R1 and R2 all of them drops down.

My quastion is does anyone have similar issus?
if somone whant me to share my configuration im willing to do it

nichky

nichky

does anyone have Happy New Year -beeper-melody-script?

nichky

try to increase the distance of 0.1

nichky

with that i have issues for the last 6 years.
WOL it working well until you unplug/plug the cable.
One you do that WOL stops to work

nichky

use this:

/interface vlan set name=w1.vl100 interface=wlan1 vlan-id=100
/interface wireless set vlan-mode=use-tag vlan-id=100

nichky

one more recommendation

/interface wireless set preamble-mode=long

nichky

has been implemented
we will see the result

nichky

see what im getting.
but also that pass want to be sent to email

nichky

how can i combine that in my case?

nichky

Hi Jotne

one thing i found..interesting
When im activating the script by clicking manually the system/script it does work perfectly.

The problem is when i need to do by system/scheduler, then script sending same pasword..always and always.

i have no idea why..it does that?

nichky

i got issues with my nintendo-switch when im playing online.
somehow i'm getting disconnected, but i can't see disconnection happens from the router-itself.

nichky

i got CAPsMAN and i want to use package-path to upgrade my CAP. I can do upgrade to other cap from RB951Ui-2HnD no problem, but i can't do from RB760iGS im doing on same way but i notice the only differences is hEX doesn't have /pub i have created manually but still i can do upgrade to other cap, an...

nichky

Impossible to update in Hap Lite. smips.JPG please do /system resource print have you seen the issues? you got 6.8MiB free memory, and the new version itself has 11.4MiB What have you got in file? it seems like you have to remove something from there. Make sure you got enough free memory.

nichky

Impossible to update in Hap Lite.
smips.JPG

please do /system resource print

nichky

that i was looking for

nichky

yess,would be able to correct that one

:global ModeButton { [/caps-man interface get [find name="cap1"] disabled];
:if (gueststate = yes) do={
:log info "enabled"
/caps-man interface disable [ find name=cap1 ];
:log info "disabled"
/caps-man interface enable [ find name=cap1 ];
}

nichky

i want to enable/disable interface on CAPsMAN interface using /system routerboard reset-button.
@eworm is there any further help about this?

nichky

/ip firewall filter export

nichky

i got hEX S
im wondering does anyone have any useful script for

/system routerboard reset-button ?

nichky

@vecernik87

What does it do?

/ip cloud advanced set use-local-address=yes

can you give us an example, and on which causes can we use?

nichky

can we modificate the previous scripts to sent password weekly?
using website it seems like that will work temporary.

nichky

even like that im getting:

failure: closing connection: <503 Service Temporarily Unavailable> 104.20.45.7:443 (4)

nichky

im using 6.44.6 (long-term)

everything was fine until this morning..is not the version issus for sure

nichky

see what im getting...

nichky

Hi Jotne

after a while that script it stoops to work.
Currently it doesn't work at all.

im getting error :

<503 Service Temporarily Unavailable>

Why is so hard to tha script to send out email and change the sec-pass?
even the previous scripts..

nichky

*) ipsec - allow specifying two peers for a single policy for failover;
Oh wow, that's a killer feature I've been waiting for years!

give us more info about that

nichky

@lemeshuk92, when you get again cpu 100%
export us what you getting on tool/profile

nichky

Is global in QoS still working?
I got two vlans in separated bridge. Setting up QoS i have to do two Parents, i mean two-bridge interfaces

anyone experiencing same as me?

nichky

Thanks a lot Jotne does work.well done

nichky

need more info about:

*) ipsec - allow specifying two peers for a single policy for failover;
*) ipsec - added "use-responder-dns" parameter support;
*) ipsec - added "split-dns" parameter support for mode configuration;

nichky

can we see ospf /area/ network / interfaces and ip address

nichky

Why we are not able to use spectral scan/history??

also Current-Tx-Power i 0 for all rates

nichky

To get better detail about the field, use as-value. Try cut/past this script. Its part of my Splunk script to monitor all wifi clients. (see signature) { :if ([:len [/interface wireless find ]]>0) do={ :foreach logline in=[/interface wireless registration-table find] do={ :local output "$[/interfac...

nichky

Where can you read the result? paste this in the terminal put [/interface wireless registration-table get value-name=signal-strength 0 ] this read the signal strength for the station 0 Can you please give me more details about this rule in my case i got 0 wlan1m.vl101 DC:D9:16:9A:FD:F4 no -39dBm@1M...

nichky

hehehe i didn't put that.
My internet provider is TPG and i used mail.tpg.com.au
after reboot works fine

nichky

im not getting ip when im add
/ip firewall address-list
add list=smtp-server address=smtp.my-mail.mk

nichky

smtp.my-mail.mk..give more info..it doesn't work like that you wrote
currently im using 74.125.141.108

nichky

What we will do , when you will move away from this forum?

nichky

How can i send email from this script? This one it does work: :tool e-mail send to=$toEmail subject="$[/system identity get name]" body="test: $new"; :log info message="Emailed" Problem: Im able to ping to google only when in pinging with src-address of the lan. ping 8.8.8.8 i can't ping ping 8.8.8....

nichky

about WOL it work until you unplug/plug the cable.
Once you do that WOL stops to work

nichky

how you mean "open"?

you want to do winbox to MT and web to ubnt?

ff YES then you need to show us your config

nichky

do you want to see UBNT in MT-ip/neighbor?

nichky

if you play with ipsec you can't use FP

nichky

how your l2tp-server looks like?
i mean conf

nichky

yeyee
vlan-filtering=no
but i'm not able to set up ethertype, because that one goes if i tick vlan-filtering=yes.
Definitely i'm trying to avoid EoIP because of overhead.

nichky

Hi sindy - in may case i need to transfer vlan10, is this corect set up for that? /int vlan add name=br-vlan10 interface=br-vlan /ip address add address=10.10.10.x interface=br-vlan10 L2TP=BCP /interface l2tp-server server set allow-fast-path=yes enabled=yes max-mru=1460 max-mtu=1460 mrru=1600 /ppp ...

nichky

Hi Jotne,

can we do some more easy password?
The current one is much complicated..

nichky

Its more or less the same as I wrote above. Use code tags around your script. Select code and click the </> button.
please give me an example?

:put $pass
is not needed.

You need to create a schedule for it to run weekly.

nichky

i found this one it does work. Any update that you can do on this? it will work weekly? # Set your wifi profile :local wifiprofile set_your_profile # Set your email :local toEmail mail@gmail.com # Gets a new password :local pass ([/tool fetch url="https://www.random.org/passwords/\?num=1&len=20&form...

nichky

Then try :interface wireless security-profiles print to get then name of your profile. Then run after change your_profile to your profile :interface wireless security-profiles set your_profile wpa2-pre-shared-key="test" Does this work? YES it does work,any pass i put will change to test NB I do not...

nichky

yes im getting pass

nichky

it doesn't do anything

nichky

unfortunately..it doesn't work

nichky

i need some script which will send email and change wifi sec profile

nichky

What about 1.text after you have edited, would be fine?

at this point i need some script which will send email and change wifi sec profile

nichky

if i'll use the first you edit, it will work weekly?

second part that you have posted.
So far i don't have any particular website that i can put in

nichky

i'm using script for "random wifi password generator."

i got two scripts. Both of them are working.

if i ll run the script every 10-15 min it does work well.

Problem:
Weekly it doesn't work.
Script sending me same wifi password from the last ran.

i have attached both scripts.

nichky

sindy /ip address add address=x.x.x.x/22 interface=ether1 network=x.x.x.0 add address=192.168.50.17/29 \ interface=vlan2002 network=192.168.50.16 add address=192.168.100.10/24 interface=bridge1eoip-tunnel1 network=192.168.100.0 everything is fine: my point was because there already IP on bridge,so i...

nichky

Hi sindy,

just i wanted to jump in this conversation
what he need ip of vlan 2002?
that interface is already in bridge

nichky

wireless - added "U-NII-2" support for hAP ac2
ok, but where did U-NII-3 missing??

U-NII-2
what does that mean?

nichky

can i ask one more question. im doing Capsman with vlans, and of course local forwarding is enabled. im geting ip from the CAP pool, but can't ping out,from the CPE when im pingign to google src-address=local i can ping out. My config is: Capsman /caps-man provisioning add action=create-enabled mast...

nichky

correct

nichky

of course i'm pinging wireless client. from my laptop

nichky

i did that too,stil i can ping the client from my com

nichky

capsman local-forwarding=no is not same like
int wla local-forwarding=no?

nichky

i'm using capsman with local-forwarding=no
i have noticed i'm still able to ping clients connected to the AP.
any tips about that?

nichky

From your first post, i found that you are not able to get into AP, because it belongs to your ISP.is that corect? exactly then i wanna to limit from my router os editing script in wireless tab and disable all higher than 54mbps 40hz, to get max 54mbps from my radio script in wireless tab ,wahat sc...

nichky

From your first post, i found that you are not able to get into AP, because it belongs to your ISP.is that corect?

nichky

*) added Legacy Mode = means to get access to device which have older version ROS version,is that correct?

nichky

how is the distance of the link?
for stability pick 20Mhz, for bandwidth play with 40Mhz.

About HT MCS ,if you don't know how to play with it i'm strongly recommending leave as it is (default)

nichky

it seems like to me OSPF issues

nichky

What network type you using?

nichky

i got l2tp-tunnel separated with Ipsec (with certificate)
in my case i'm getting Dynamic IP from the provider.

i need script i case when the Dynamic is change on Server side by it self i want l2tp-tunnel to be disabled.

nichky

Does anyone have some script for changing WiFi password?
I got one from:

# Author: Bob Burley - April 25, 2011
# Modified: bakabuka - Jan 9, 2017,

Script does well, but for unknown reason weekly sending same password. If i will run every 5 min works fine

nichky

Yes, it was under 6.46. Although not particularly mentioning that files are now hidden. There were a few improvements in package updater. Maybe you need to give us more description regarding your changing. if you didn't give us more info about downloaded files,from here can we get that? *) upgrade ...

nichky

is there any secret command i want to do "reset counters" on virtual interfaces. Specifically on EoIP-tunnel.

nichky

channel width = 20 i need to get 20/40 mhz like channel with on wlan what is the right command for that? Do i see an MTCWE on your profile signature ? if you know the command that okey I have asked wich one does it feat to get 40MHz, you write 2 * 20MHz=which is doesent fit. And you ask me silly qu...

nichky

channel width = 20

i need to get 20/40 mhz like channel with on wlan
what is the right command for that?

nichky

i know that e 2 × 20=40
am asking which value will be match to get 20/40 mhz
2 × 20 or 2 * 20 doesn't match

nichky

i'm using standard channel default, so in this case i can't use 20/40 mhz?

nichky

in this box what do i need to type to match
/interface wireless> set numbers=0 channel-width=20/40mhz-Ce

nichky

what about from dude? can i do spectral-history. i didn't check that.
Also current tx power is disebled for AC

nichky

for home router it does work,but not for..outdoor antennas....hmmm..intresting

nichky

Why on NetMetal 5 i'm not able to use this features?
i really need because i'm running wireless

nichky

From the Jono Thompson presentation i found that: CRS1xx\2xx series switch support up to 7 bridges using hardware offloading. In my case i need up to 20 bridges will be supported hardware offloading, because im planing to do Q-in-Q. (different ethernet ports with different vlan) Does MikroTik have d...

nichky

however "push-button-5s and "push-button" are not working at all.

Only once time it was working. WPS-Accept only does work

nichky

how your wifi conf looks like
what the log said?

/system logging
add action=wlan prefix=wlan1 topics=wireless,debug

nichky

what's a differences between
"push-button-5s and "push-button"??

nichky

mnohokrat dakujem

nichky

i need script that will put user and password on "system user", but i want to remove any other wich existing.

Does anyone have that script?

nichky

i fixed.
Does anyone know what USR does?

there is no documentation regarding that.

nichky

i reset the router via button "reset/mode" "In case you wish to return the device to its original configuration, you can use the RESET button. Hold this button during boot time until LED lights start flashing, then release the button to reset RouterOS configuration." when im pluging the cable to the...

nichky

is there any cnance to get a list of wich RouterBoards protected-routerboot suports?

From MT Support i found that:
"older devices have no ability to upgrade the backup bootloader. only RB9xx and newer are supported."

For example MAP supports that features,what about hex s?

nichky

Regarding the Mikrotik wiki,i got one question about AC.
So from this picture my question is, does AC have effect if i'll tick HT-Supported MCS,because for it usually i'm using VHT Basic/Supported MCS

nichky

actually my question is should i upgrade step by step up to the latest version or directly to it.

nichky

The configuration is pretty simple. Just wireless configuration and bridge ports.
I had upgraded MT at home, and adter upgrade it didnt start up, i had to unplug /plug to porew point,after that evrything was okey.
That why im asking for.

nichky

Does anyone have bad experience upgrading SXT which currently has v6.3x to the latest version? im asking because i have to do remotely. Any suggestion are welcome.

nichky

*) wireless - include last frequency when manually setting frequency step in "scan-list";

what exactly will do for us?

nichky

get rid of band=b. Channel-width=20/40mhz-XX depending of the distance

nichky

i'm running VPN which is IKEv2 and with the ip address from modeconf (HQ) i'm running IPIP tunnel. Everything works fine i mean the tunnel and everything. I've just seen that when i'm accessing from the HQ side to the BRANCH office on ipip-tunnel adress i heve (see picture-and after min im lossing t...

nichky

*) winbox - added "revision" parameter to "System/Routerboard" menu;

what for?

nichky

and also Does it make sance?

"if you have DHCP, etc on the device, you will have to also add the bridge to tagged"
on the Router wich is running DHCP-Server

nichky

one question regarding this topic. So as soon as VLAN filtering is enabled traffic will go through CPU? i mean if i want to get ether and wlan i have to tick VLAN Filtering in my case i have 3 routerOS, and the thing is i need to run VLAN on ether and wlan. So acording that traffic will go through C...

nichky

use User Manager

nichky

Hi, for me the static ARP entry works great. Your case sounds to me like your server NIC isn't able to wake up the server upon receiving a magic packet after unplug / plug the network cable. Can you still wake up the server from within your LAN in this situation? When i ll do unplug / plug,i can't ...

nichky

@CapFloor does it work correctly?
in may case everything works perfectly until i unplug/plug cable from computer/server. From that time stopped to work. What about in your case?

nichky

Here is the configuration I used to test compatibility with NordVPN. However, it is not working yet with the latest public beta version (6.45beta45). You will need to upgrade to the next beta when it is released. I will probably make an official tutorial on wiki later. /ip ipsec mode-config add nam...

nichky

Questions regarding Power-Line
1. What is the max range that i can connect two Power-Line?
2. Can i connect more than 2 devices?
3. Is there any chance to block button? (for protection purposes)?

nichky

OK - what command will tell me what OSPF function the router is (IR, Backbone, ABR, ASBR )

/routing ospf lsa> print detail where type=
/routing ospf as-border-router
/routing ospf area-border-router

nichky

i modiface from msatter . i found it makes traffic ONLY when Speedtest.net is running, but what eals i found special dummy rules dont make traffic,even on connect-list fasttrack is 0. Do im getting fastrack for Speedtest? Filter add action=fasttrack-connection chain=forward comment="Speedtest fasttr...

nichky

msatter , good idea by port. i'm running torch on same time with speed test. There is millions of ports Speedtest.net is using destination port 8080 and my line in Mangle is then: /ip firewall mangle add action=fasttrack-connection chain=prerouting comment="Speedtest fasttracking" connection-mark=n...

nichky

speedtest.net uses normal http port on many different servers so nothing to match on (port is not unique and neither DNS name nor IP address are predictable).

So this kind of cheating won't work.

i was waiting for you. Which matching you recommending instead of Content?

nichky

currently my rules looks like that, im not happy because the metchers comes from Content,i found it doesn't need to be for this case - Filter - add action=add-dst-to-address-list address-list=Speedtest-List address-list-timeout=1d 00:00:00 chain=forward comment="Get SpeedTest IP-Address" content=spe...

nichky

i'm trying to to fastrack only on speed test for the problematic customers :) Currently i got this rules, it seems leke doesn't work any suggestions add action=fasttrack-connection chain=forward comment=FastTrack connection-state=established,related content=speedtest.net add action=accept chain=forw...

nichky

youtube.com or *.youtube.com or *youtube*

nichky

try Content instead of TLS-Host

nichky

update from MikroTik

This is not a bug, because when you set the WPA2 security profile the PSK key is generated passphrase+SSID and that is why the connection in this type of scenario is not possible.

Best regards,
Viesturs R.

nichky

im using Wake-On-Lan, by LAN IP, and everything working fine until unplug and plug the cable.

nichky

Three thing you have to have for your case:
- Crrect Configuration
- Enough Bandwidth
- RouterOS which supported ipsec acceleration

I can't tell you more according your post.

nichky

im so proud of you guys, how IPsec become so flexible. well done!!!

nichky

*) dhcpv4-server - added "client-mac-limit" parameter;

which number over here goes?

nichky

well done,it works perfect

nichky

raystream, nichky, LetMeRepair, proximus, Cha0s, 3bs, Vlad2, sterod, mserge, STEVEUK1, elgrandiegote - We can not seem to reproduce the problem with Winbox login. Can you provide more details? From which version did you upgrade your router? Do you, for example, use RADIUS for Winbox authorisation? ...

nichky

The only access i can get is via SSH. and i downgrade to 6.44.3,nothing happens

nichky

and how can we get access?
You can't That is the point of this issue. Only the admin himself could trigger the problem. it's not a serious issue, but we still fixed it.

So we have to replace the router? so fany

nichky

!) security - fixed vulnerabilities CVE-2018-1157, CVE-2018-1158; Fixed again? Both CVE's were fixed in the previous versions, but they could be reproduced differently if you had access to the www service and user account with "full" rights. We have removed this possibility as well. and how can we ...

nichky

it is my remote site!!!!!
any bug make sense....this one...hhhhhh

nichky

i upgrade my RB433AH after that...i couldn't access with current user and password and with admin????

nichky

can we see you config?

nichky

have a look , you can find something about DHCP Option 82

nichky

I will wait for couple of days,there already on this forum.

nichky

sindy, even with /interface wireless connect-list doesn't have any effect. however Thanks.

nichky

That how my config looks like. Keep in mind Sindy both side have to be APs,because wds-ignore-ssid=yes will work between APs In this case wds-ignore-ssid=yes will not work,if i switch security-profile=WPA2 to default, i can change SSID on both side and the link will established. With security-profil...

nichky

Sorry Sindy I couldn't get nothing useful from your message. My question was very simply, i will repeat again. So when i'm using "wds ignore ssid" (wiki: If this property is set to yes, then SSID of the remote AP will not be checked.) It works excellent without security profile, as asson i as do the...

nichky

In my case im using WDS. I found that i can change the SSID on the remote side and sill i can have connectivity by the futures "wds ignore ssid". Everything is okay..as long as those two sides are without encryption. As soon as i add encryption (WPA,NV2). The link will not connect at all. My questio...

nichky

Right now it works well.

Thanks

nichky

Is Backup-cloud stil working?
I use to since it comes up,but so fare i got some error.

on log says:
"Problem connecting with server"

nichky

if you don't know like trainer how you expecting from us

Just a joke. I did discovery about that. i found:
viewtopic.php?t=120951

Also i got presentation regarding DHCP Server and Option 82.
As soon as i find that i send on this forum.

nichky

Basically he was explaining how can you use the real interface and virtual interface, and from his experience he mentioned which one should be AP wich on Station

nichky

i'm wondering what sindy recommends about that.

nichky

Simple, just download the version you want from https://mikrotik.com/download (make sure correct version). - drag and drop to file - system package click downgrade (winbox) - reboot - sustem routerboard upgrate fimware. According what you wrote on your post, maybe you кnow maybe don't, but i want to...

nichky

of course it does, so my ether1 has public interface and my outgoing interface has local ip. You can see from my picture above. There is no interfaces and local IPs on your picture. Probably you're talking about some other picture? okay, so on ether1 is terminated pppoe connection. Outgoing interfa...

nichky

we do update the database regularly, so in most cases, this should be correct. Maybe sometime later it will clear the issue. Also, for the detection the IP address you are communicating with the server is used. As a result, if you use tunnels it might guess incorrectly. nichky : do your outgoing in...

nichky

janisk, what about in my case? did i do correct, did you see the picture above?

nichky

need your config

if you see two or three time out, that fine. In your case you saying that they don't ping each other at all.

nichky

clear all the files on /files then upload the npk, stop and clear cache on webproxy, it will give you little space. Are you REALLY running a webproxy on a hAP using the flash as the proxy cache???? :-o :-o :-o In my case, i didn't run web proxy, but still my routerOS has been freezed. After while t...

nichky

i got 2011UiAS-2HnD. After upgrading to 6.44.2 my RB is freezing. When im pinging the router from my computer it goes 1ms..10ms 600.ms..and timeout....over and over again

nichky

Can anyone give me more info what this does?
interface wireless spectral-history wlanx samples=xx

i know what spectral-history does, but what is the point when samples combaint each other

i couldn't find documentation what actually it does

Thanks

nichky

[admin@MikroTik] /ip cloud> print ddns-enabled: yes ddns-update-interval: none update-time: yes public-address: 82.x.x.x dns-name: 757bxxxxxxxx.sn.mynetname.net status: updated It displays public address, but will return local address in actual lookup. C:\>nslookup 757bxxxxxxxx.sn.mynetname.net Non...

nichky

I tested with an option Use IP Local Address but being with CGNAT but only returns the Public IP.

Can you give more info what for “ Use IP Local Address” . i haven't an idea how can i use.

nichky

You mean, local_address being "washington-street-bld-123-office-57a"?

like 192.168.88.1.sn.mynetname.net. And i was thinking that i ca use like public address

.To be honest

nichky

i thought that if i tick “use-local-address” is going to be local_address.sn.mynetname.net

nichky

Cen i get some info regarding Ip Cloud. Since new version 6.44.1 Ip Cloud has features “use-local-address” if i tick that domain names is not going to change, it's still *.sn.mynetname.net

nichky

What for *) winbox - added "use-local-address" parameter in "IP/Cloud" menu; What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS. If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return where will return? Sent from...

nichky

What for *) winbox - added "use-local-address" parameter in "IP/Cloud" menu; What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS. If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return where will return? Sent from...

nichky

What ealse have you got in your firewall?

nichky

What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;

nichky

This one you have to follow, not youtube from unknown persons

https://mum.mikrotik.com//presentations/ID14/aldi.pdf

nichky

tamagochi - Do you mean that e-mail settings were corrupted? I do not see how this would be possible by this upgrade. If you downgrade router back, then setting re-appears? Please test if when you downgrade device, set TO parameter, upgrade back and the setting is gone again; No, e-mail settings ar...

nichky

Just upgraded to 6.44 /ip ipsec identity add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfandega1 add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfan...

nichky

Just i need info about this: !) ipsec - removed "users" menu, XAuth user configuration is now handled by "identity" menu; Basically from now we have to use identity tab. Because USER has been replaced with it. I got PC clients using this features Does it will covered ? /ip ipsec identity add auth-me...

nichky

tick allow remote requests.
did you set up dhcp-server?

nichky

The easy way could be if you use default configuration just set up your WAN interface like you did. Plug at your WAN into ether1.

nichky

omberli, focus on wireless export, are you able to export like:

/interface wireless export verbose

nichky

Just i'm willing to know more dip what this script does. Like you have mentioned " if it couldn't reach the endpoint it would force the tunnel to restart". My quastion will be what exactly will restart? Because in IPsec you got features DPD, wich means: "One the DPD interval has met the Max Failures...

nichky

Sounds like Safe Mode

nichky

This features from which version will start up?

nichky

Try this one. Only one trying can get access. The rest of will be rejected. (until the limit expire) add chain=input connection-state=established,related add chain=input connection-state=new dst-address-type=local dst-port=23 limit=3/1h,0:packet protocol=tcp add action=reject chain=input dst-address...

nichky

Hi. Until recently I have been working fine with the l2tp / ipsec protocol. Now, I do not know why it fails and I get the following message in log: xx.xx.xx.xx failed to pre-process for ph2 packet xx.xx.xx.xx peer sent packet for dead phase2 In the ipsec window I get the following message: Unsafe c...

nichky

make filter accept for IPsec port=500,4500. And also L2TP

nichky

So what you want after 5 times connecting, would you like to stop processing the packets in your router?

It means no one can get access

nichky

*) ipsec - accept only valid path for "export-pub-key" parameter in "key" menu;

Can we have more info about that.

Thanks

nichky

what this ip address=192.168.98.0/24 does?

nichky

have you have any plan to get some certifications . Maybe it will help you to build up your network.

Like Redmor said: export your config

nichky

And also try to avoid b-standard. This days you don't need, it's too old method.
btw The purpose of antenna gain is to decrease the power.

nichky

i'm looking for info what does it make.
L2TP-Server
- One Session Per Host

nichky

Glad you figured it out....MTU can play havoc with an MPLS network. Two basic MTU rules to remember if you want to pass a 1500 byte frame in MPLS. Minimum MTU for MPLS (for 1500 byte frame) 1526 (L2 and MPLS MTU) - untagged frame 1530 (L2 and MPLS MTU) - tagged frame Can we have more info regarding...

nichky

Under Security Profiles, set your Group Key Update to: 01:00:00.

Why 01:00:00?

nichky

useful

Thanks

nichky

ognjen did you check country-list for your country?

PozZ iz Makedonie

nichky

sebastia is right ,just i want to show you deep how it goes

nichky

I think Country Debug it´s equal or better than old no_country_set. > interface wireless info country-info no_country_set ranges: 2402-2472/b,g,gn20,gn40(30dBm) 2417-2457/g-turbo(20dBm) 5170-5250/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(17dBm) 5250-5330/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(23dB...

nichky

I think Country Debug it´s equal or better than old no_country_set. > interface wireless info country-info no_country_set ranges: 2402-2472/b,g,gn20,gn40(30dBm) 2417-2457/g-turbo(20dBm) 5170-5250/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(17dBm) 5250-5330/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(23dB...

nichky

Like here, in this case you can play with none:

https://wiki.mikrotik.com/wiki/Manual:B ... interfaces

nichky

Depend on what you want to use it.

Search found 634 matches