MikroTik

nichky

The reason been , just i want to check/compare my result with @hpet. My throughput between VPN is 20m/10m , that because other site has limited bandwidth. My ESP Sequence is arount 1011. And about packets shuffled or really lost, that @sindy mentioned. Im not able to see that graph, so it seems like...

nichky

@sindy

zadnjo pitajne

kako da napravim pravilni sniffer, jas isto imam VPN ali moj je u tunnel-mode.

nichky

@hpet

jer moze ukratko, kako si reshio problem?

nichky

im not sure,
try on R3

/routing ospf area
add area-id=0.0.0.1 default-cost=1 inject-summary-lsas=no name=area1 translator-role=translate-always type=nssa

nichky

you can do email to support. They will give you maybe better answer.

From what i can see, i not sure what you want to achieve, but i think your topology is wrong. NSSA you can't use in this case.

Please see the folowing atachent to get an idea in which caisess you can play with NSSA

nichky

it was hidden ..all good

nichky

@sindy -molimte reci mi ovo:

i got router with hardware encryption, (hEX S RB760iGS)
and from /ip ipsec installed-sa print - i can see only E , can't see H. what im missing?

nichky

if you want me to post all config that would be a lot of things :) Basically is BGP with VRF

i found that route rule are pretty much similar to Mangle, and i'm thinking that i can make it work...
as i said it does work with ip route rule

nichky

im getting stuck, /ip route rule add comment=R4 routing-mark=cus src-address=192.168.4.0/24 table=main add dst-address=192.168.4.0/24 table=cus how can i make it work over the Mangle? /ip firewall mangle add action=mark-routing chain=prerouting comment=R4 disabled=yes new-routing-mark=main passthrou...

nichky

Thanks CZfan

that's what i have been looking for.
Now i need to think how can i make e.g. of those two features

nichky

thanks a lot sindy

nichky

sorry, i can't get you what you saying

nichky

vpls PW type tagged ethernet

please need more info of this.
In which scenario i can use this. wiki saying Pseudowire type,
which i'm not sure what exactly is the mining of that

nichky

what type on Mikrotik do you have?

nichky

about your experiencing drops out need to be monitored on real time, could be layer one issues, dont know. i will disable the followinf roule: /ip firewall filter add action=drop chain=forward comment="drop all else" log=yes log-prefix="Prohibido forward resto" about your vpn i w...

nichky

DavidGB

/export file=conf hide-sensitive

nichky

does anyone know in which cases can we use allow-sharedkey?

/interface wireless set allow-sharedkey=YES

i didn't get the point from the wiki

nichky

sorry, what this script does?

nichky

on apple phone you need to make use authentication to none

nichky

How you doing
/user ssh-keys import user=

nichky

@CZFan

and what Clamp mss in EoIP does?

nichky

in my case i have vlan configuration using /interface bridge> set numbers=0 vlan-filtering=yes. And i have noticed that i was able to see root port. (one site has priority 6000) Once i switced to vlans by using switch chip all interfaces in the bridge become designated port. Even if i play with prio...

nichky

can anyone give us more info about vlans mode. i mean in which scenario can i use check and fallback

nichky

@Nathan1 i made it work, but ONE important thing. i was getting script error!!! You know when you adding on MASTER : $HAInstall interface="ether8" macA="[MAC_OF_A_ETHER8]" macB="[MAC_OF_B_ETHER_8]" password="[A RANDOM PASSWORD OF YOUR CHOOSING]" then it pops u...

nichky

Can anyone add some info here. According to MT wiki about Nv2 AP Synchronization "After Master AP is found the Slave AP will calculate the distance to the Master AP as it is possible that Master AP is located not on the same location". I got one Master-AP--ssid=test1, and one Slave-AP-ssid...

nichky

Thanks xvo, appreciate your help

nichky

@xvo i got this working now. quick one: what exactly switch1 cpu does? do i need to add always on tagged and untagged traffic. /interface ethernet switch port set 1 vlan-header=add-if-missing vlan-mode=secure set 2 vlan-header=add-if-missing vlan-mode=secure set 3 default-vlan-id=202 vlan-header=alw...

nichky

@xvo don't worry about 8227 rb2011. i'm going to remove everything here, and i want to use 8327. Trunk port is ether1 on rb2011. what im missing here? vlan 99 cams from --951Ui-2HnD /interface ethernet switch port set 1 vlan-header=add-if-missing vlan-mode=secure /interface ethernet switch rule add ...

nichky

that is how my config looks like on rb2011 /interface ethernet switch port set 6 vlan-header=add-if-missing vlan-mode=secure set 7 default-vlan-id=202 vlan-header=always-strip vlan-mode=secure set 10 vlan-header=add-if-missing vlan-mode=secure /interface ethernet switch rule add disabled=yes ports=e...

nichky

@xvo

from your last can i get conclusion that we can't play around with different switch chips.
It must to be same, on both ends, and also how you mind differently?

nichky

you didn't get my point. I'm not using both switches on same time. I'm using only one, and i found with Atheros 8227 i can implement vlan configuration (obviously becouse 951Ui-2HnD has the same) and using - Atheros 8327 2011UiAS-2HnD. sw1 i cant make it work. So my quastios is, are they all swich c...

nichky

my lab is basic setup using switch chip. So when i'm doing VLAN implementation using "Atheros 8227" (both devices supporting same switch chip ) everything works as it should. i found difical when one site supporthing Atheros 8227 951Ui-2HnD and other site has - Atheros 8327 2011UiAS-2HnD. ...

nichky

nothing in bonding

nichky

just i want to know how can i solve that one.
I don't have nothing to bridge and it is showing that some of the ports are already in bridge
Even if it's like that i don't mind as long as will not make further issues I got vpn clients already connected

nichky

hmmm
i'm not going to that,because i'm running vpn.
Any other solution?

nichky

i don't care whether is bug or not.
i want t fix that one , any idea pls

RB760iGS
v6.48

nichky

my isp provide me exactly same thing.
vlanx for pppoe

nichky

@sindy quick one on same topic, i got ipsec-tunnel mode site to site. I have noticed that when im playing with RAW-table it goes mach more fatter than NAT, but also i have noticed that i cant ping other LAN2 with src=LAN1 , YES it works but i cant ping from LANs from MT. Is that because the packet d...

nichky

@Pozun

in my case to do that i'm using Mode Configs.
And i found that features works perfectly for apple and doesn't for windows. I haven't tested android yet.

nichky

@mafiosa make your life easily, play specially with ipsec with same vendors devices. I had unestablished tunnels with mikrotik on different version. When i upgraded to later version bum everything works well. i found dynamic routhing protocol are much more easy (i'm avoiding as much as possible) for...

nichky

*) ppp - store "last-caller-id" for PPP secrets;

how that one works?

nichky

just i want to add something here, if you want to use that features by using windows machine you would be not able to get , because windows doesn't support it

nichky

@IPANetEngineer

i was following your example and i wondering what exactly this does,because i'm able to ping remote site without adding this rules:

/interface vxlan vteps
add interface=VxLAN-VNI-100 remote-ip=100.127.1.2
add interface=VxLAN-VNI-100 remote-ip=100.127.1.3

nichky

@normis

but that feature works on both types of antenns.
when you saying non removable, you mean Internal antenna vs external antenna, is that correct?

nichky

/interface wireless set antenna-gain=x

one more thing
i've been asking multiple times about Spectral scan, i want that features to be implemented on 5 mhz

nichky

@sindy i got MikroTik SXT Lite5.

Based on what have you concluded...
- no connection to LAN/WLAN
- no beeps

by default "force-backup-boot" is disabled.
I'm going to enable and reboot it, and see what is happened :)

nichky

Thanks msatter

that is in production, so i'm wondering shall i follow with my assuming, or shall i wait for someone to give more tips...
sindy , what you saying ? :)

nichky

i did check wiki, thats why im asking here, i can tick this box and..how can i check whether im running on main or backup.
it is switching to backup by reboothing..or how that works.

nichky

baxik, disable all firewall filters and try again.

nichky

is my concept correct:

i noted that my main booter is corrupted and i want to switch over to backup loader.

for this purpose , the only thing to do is
1.
/system routerboard settings set force-backup-booter=yes
2.
system reboot yes

and then will run on backup mode.

is that correct?

nichky

What exactly want to say here:

*) upgrade - do not try installing packages if download was not completed;

nichky

RogerWilco

that is fine, just i'm trying to find out why i need to disable; enable LTE to bring it back to normal

nichky

SiB

it is running
firmware-upgrade lte1
installed: MikroTik_CP_2.160.000_v013
latest: MikroTik_CP_2.160.000_v018

do i need to update?

nichky

yes, issues is LTE itself,power-reset bus=X--solving the issus
i didn't put on my first post, my bad.

/interface lte firmware-upgrade lte1 upgrade=no show? -- im not sure what this does,and from where can i get the current resoult optios are yes/no,

nichky

We are using mikrotik LHG R 6.45.8 (long-term). with LTE Everything works properly for a period of time, then internet connection become poor, and as soon as i reboot anntena it self everything back to normal. is there any tips and tricke how can i avoide reboothing that is the current LTE resoulte ...

nichky

try with keepalive frames=enabled

nichky

i was about to ask same question

nichky

Can anyone add some info here. According to MT wiki about Nv2 AP Synchronization "After Master AP is found the Slave AP will calculate the distance to the Master AP as it is possible that Master AP is located not on the same location". I got one Master-AP--ssid= test1 , and one Slave-AP-ss...

nichky

i go RB760iGS and yes it is LTE

https://www.bigw.com.au/product/optus-4 ... lsrc=aw.ds

nichky

i got LTE device plugged into my mt

im trying ti sent SMS which is unsuccessfully, any tips and tricks to solve this issue.

The error that i gething is "Modem unsupported"

nichky

would be better if you give us your topology

nichky

have you read wiki about that?

use-local-address:
By default, the DNS name will be assigned to the detected public address (from the UDP packet header). If you wish to send your "local" or "internal" IP address, then set this to yes

nichky

what you connecting?
what type of gadgets?

nichky

can anyone give me the link,which usb dongle are compatible on MikroTik.
i can't find my self

nichky

MikroTik is there any chance to add wireguard in v6?

nichky

set this by comand line

/interface/wireguard> peers/set endpoint=ip+port (e.g.13231)

nichky

since new features comes up on v6.47.0
l2tp-client
what is the difference between: (Use-peer-dns) yes , exclusively

nichky

Hi,
I am sorry but I am still having the same problem on this point :
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); any advice ?

need more info about this..can anyone add something

nichky

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

i can't properly see your picture, can you make bigger for us

nichky

lucky i didn't try to downgrade

please give me more info about 2 x SMA external antenna.
is that for 2.4 or 5?
Device opraithing with chain 0 and i add external antennas can play with chan 1?

is im correct?

nichky

RBD53G-5HacD2HnD-TC&EG12-EA

Does it work only with v7.0 and above?

nichky

My topology looks like that

i got R1------R2-------R3-------R4
ospf,mpls and VPLS between:
R1 and R2
R1 and R3
R1 and R4
when i disable VPLS between R1 and R2 all of them drops down.

My quastion is does anyone have similar issus?
if somone whant me to share my configuration im willing to do it

nichky

nichky

does anyone have Happy New Year -beeper-melody-script?

nichky

try to increase the distance of 0.1

nichky

with that i have issues for the last 6 years.
WOL it working well until you unplug/plug the cable.
One you do that WOL stops to work

nichky

use this:

/interface vlan set name=w1.vl100 interface=wlan1 vlan-id=100
/interface wireless set vlan-mode=use-tag vlan-id=100

nichky

one more recommendation

/interface wireless set preamble-mode=long

nichky

has been implemented
we will see the result

nichky

see what im getting.
but also that pass want to be sent to email

nichky

how can i combine that in my case?

nichky

Hi Jotne

one thing i found..interesting
When im activating the script by clicking manually the system/script it does work perfectly.

The problem is when i need to do by system/scheduler, then script sending same pasword..always and always.

i have no idea why..it does that?

nichky

i got issues with my nintendo-switch when im playing online.
somehow i'm getting disconnected, but i can't see disconnection happens from the router-itself.

nichky

i got CAPsMAN and i want to use package-path to upgrade my CAP. I can do upgrade to other cap from RB951Ui-2HnD no problem, but i can't do from RB760iGS im doing on same way but i notice the only differences is hEX doesn't have /pub i have created manually but still i can do upgrade to other cap, an...

nichky

Impossible to update in Hap Lite. smips.JPG please do /system resource print have you seen the issues? you got 6.8MiB free memory, and the new version itself has 11.4MiB What have you got in file? it seems like you have to remove something from there. Make sure you got enough free memory.

nichky

Impossible to update in Hap Lite.
smips.JPG

please do /system resource print

nichky

that i was looking for

nichky

yess,would be able to correct that one :global ModeButton { [/caps-man interface get [find name="cap1"] disabled]; :if (gueststate = yes) do={ :log info "enabled" /caps-man interface disable [ find name=cap1 ]; :log info "disabled" /caps-man interface enable [ find name...

nichky

i want to enable/disable interface on CAPsMAN interface using /system routerboard reset-button.
@eworm is there any further help about this?

nichky

/ip firewall filter export

nichky

i got hEX S
im wondering does anyone have any useful script for

/system routerboard reset-button ?

nichky

@vecernik87

What does it do?

/ip cloud advanced set use-local-address=yes

can you give us an example, and on which causes can we use?

nichky

can we modificate the previous scripts to sent password weekly?
using website it seems like that will work temporary.

nichky

even like that im getting:

failure: closing connection: <503 Service Temporarily Unavailable> 104.20.45.7:443 (4)

nichky

im using 6.44.6 (long-term)

everything was fine until this morning..is not the version issus for sure

nichky

see what im getting...

nichky

Hi Jotne

after a while that script it stoops to work.
Currently it doesn't work at all.

im getting error :

<503 Service Temporarily Unavailable>

Why is so hard to tha script to send out email and change the sec-pass?
even the previous scripts..

nichky

*) ipsec - allow specifying two peers for a single policy for failover;
Oh wow, that's a killer feature I've been waiting for years!

give us more info about that

nichky

@lemeshuk92, when you get again cpu 100%
export us what you getting on tool/profile

nichky

Is global in QoS still working?
I got two vlans in separated bridge. Setting up QoS i have to do two Parents, i mean two-bridge interfaces

anyone experiencing same as me?

nichky

Thanks a lot Jotne does work.well done

nichky

need more info about:

*) ipsec - allow specifying two peers for a single policy for failover;
*) ipsec - added "use-responder-dns" parameter support;
*) ipsec - added "split-dns" parameter support for mode configuration;

nichky

can we see ospf /area/ network / interfaces and ip address

nichky

Why we are not able to use spectral scan/history??

also Current-Tx-Power i 0 for all rates

nichky

To get better detail about the field, use as-value. Try cut/past this script. Its part of my Splunk script to monitor all wifi clients. (see signature) { :if ([:len [/interface wireless find ]]>0) do={ :foreach logline in=[/interface wireless registration-table find] do={ :local output "$[/int...

nichky

Where can you read the result? paste this in the terminal put [/interface wireless registration-table get value-name=signal-strength 0 ] this read the signal strength for the station 0 Can you please give me more details about this rule in my case i got 0 wlan1m.vl101 DC:D9:16:9A:FD:F4 no -39dBm@1M...

nichky

hehehe i didn't put that.
My internet provider is TPG and i used mail.tpg.com.au
after reboot works fine

nichky

im not getting ip when im add
/ip firewall address-list
add list=smtp-server address=smtp.my-mail.mk

nichky

smtp.my-mail.mk..give more info..it doesn't work like that you wrote
currently im using 74.125.141.108

nichky

What we will do , when you will move away from this forum?

nichky

How can i send email from this script? This one it does work: :tool e-mail send to=$toEmail subject="$[/system identity get name]" body="test: $new"; :log info message="Emailed" Problem: Im able to ping to google only when in pinging with src-address of the lan. ping 8....

nichky

about WOL it work until you unplug/plug the cable.
Once you do that WOL stops to work

nichky

how you mean "open"?

you want to do winbox to MT and web to ubnt?

ff YES then you need to show us your config

nichky

do you want to see UBNT in MT-ip/neighbor?

nichky

if you play with ipsec you can't use FP

nichky

how your l2tp-server looks like?
i mean conf

nichky

yeyee
vlan-filtering=no
but i'm not able to set up ethertype, because that one goes if i tick vlan-filtering=yes.
Definitely i'm trying to avoid EoIP because of overhead.

nichky

Hi sindy - in may case i need to transfer vlan10, is this corect set up for that? /int vlan add name=br-vlan10 interface=br-vlan /ip address add address=10.10.10.x interface=br-vlan10 L2TP=BCP /interface l2tp-server server set allow-fast-path=yes enabled=yes max-mru=1460 max-mtu=1460 mrru=1600 /ppp ...

nichky

Hi Jotne,

can we do some more easy password?
The current one is much complicated..

nichky

Its more or less the same as I wrote above. Use code tags around your script. Select code and click the </> button.
please give me an example?

:put $pass
is not needed.

You need to create a schedule for it to run weekly.

nichky

i found this one it does work. Any update that you can do on this? it will work weekly? # Set your wifi profile :local wifiprofile set_your_profile # Set your email :local toEmail mail@gmail.com # Gets a new password :local pass ([/tool fetch url="https://www.random.org/passwords/\?num=1&le...

nichky

Then try :interface wireless security-profiles print to get then name of your profile. Then run after change your_profile to your profile :interface wireless security-profiles set your_profile wpa2-pre-shared-key="test" Does this work? YES it does work,any pass i put will change to test N...

nichky

yes im getting pass

nichky

it doesn't do anything

nichky

unfortunately..it doesn't work

nichky

i need some script which will send email and change wifi sec profile

nichky

What about 1.text after you have edited, would be fine?

at this point i need some script which will send email and change wifi sec profile

nichky

if i'll use the first you edit, it will work weekly?

second part that you have posted.
So far i don't have any particular website that i can put in

nichky

i'm using script for "random wifi password generator."

i got two scripts. Both of them are working.

if i ll run the script every 10-15 min it does work well.

Problem:
Weekly it doesn't work.
Script sending me same wifi password from the last ran.

i have attached both scripts.

nichky

sindy /ip address add address=x.x.x.x/22 interface=ether1 network=x.x.x.0 add address=192.168.50.17/29 \ interface=vlan2002 network=192.168.50.16 add address=192.168.100.10/24 interface=bridge1eoip-tunnel1 network=192.168.100.0 everything is fine: my point was because there already IP on bridge,so i...

nichky

Hi sindy,

just i wanted to jump in this conversation
what he need ip of vlan 2002?
that interface is already in bridge

nichky

wireless - added "U-NII-2" support for hAP ac2
ok, but where did U-NII-3 missing??

U-NII-2
what does that mean?

nichky

can i ask one more question. im doing Capsman with vlans, and of course local forwarding is enabled. im geting ip from the CAP pool, but can't ping out,from the CPE when im pingign to google src-address=local i can ping out. My config is: Capsman /caps-man provisioning add action=create-enabled mast...

nichky

correct

nichky

of course i'm pinging wireless client. from my laptop

nichky

i did that too,stil i can ping the client from my com

nichky

capsman local-forwarding=no is not same like
int wla local-forwarding=no?

nichky

i'm using capsman with local-forwarding=no
i have noticed i'm still able to ping clients connected to the AP.
any tips about that?

nichky

From your first post, i found that you are not able to get into AP, because it belongs to your ISP.is that corect? exactly then i wanna to limit from my router os editing script in wireless tab and disable all higher than 54mbps 40hz, to get max 54mbps from my radio script in wireless tab ,wahat sc...

nichky

From your first post, i found that you are not able to get into AP, because it belongs to your ISP.is that corect?

nichky

*) added Legacy Mode = means to get access to device which have older version ROS version,is that correct?

nichky

how is the distance of the link?
for stability pick 20Mhz, for bandwidth play with 40Mhz.

About HT MCS ,if you don't know how to play with it i'm strongly recommending leave as it is (default)

nichky

it seems like to me OSPF issues

nichky

What network type you using?

nichky

i got l2tp-tunnel separated with Ipsec (with certificate)
in my case i'm getting Dynamic IP from the provider.

i need script i case when the Dynamic is change on Server side by it self i want l2tp-tunnel to be disabled.

nichky

Does anyone have some script for changing WiFi password?
I got one from:

# Author: Bob Burley - April 25, 2011
# Modified: bakabuka - Jan 9, 2017,

Script does well, but for unknown reason weekly sending same password. If i will run every 5 min works fine

nichky

Yes, it was under 6.46. Although not particularly mentioning that files are now hidden. There were a few improvements in package updater. Maybe you need to give us more description regarding your changing. if you didn't give us more info about downloaded files,from here can we get that? *) upgrade ...

nichky

is there any secret command i want to do "reset counters" on virtual interfaces. Specifically on EoIP-tunnel.

nichky

channel width = 20 i need to get 20/40 mhz like channel with on wlan what is the right command for that? Do i see an MTCWE on your profile signature ? if you know the command that okey I have asked wich one does it feat to get 40MHz, you write 2 * 20MHz=which is doesent fit. And you ask me silly qu...

nichky

channel width = 20

i need to get 20/40 mhz like channel with on wlan
what is the right command for that?

nichky

i know that e 2 × 20=40
am asking which value will be match to get 20/40 mhz
2 × 20 or 2 * 20 doesn't match

nichky

i'm using standard channel default, so in this case i can't use 20/40 mhz?

nichky

in this box what do i need to type to match
/interface wireless> set numbers=0 channel-width=20/40mhz-Ce

nichky

what about from dude? can i do spectral-history. i didn't check that.
Also current tx power is disebled for AC

nichky

for home router it does work,but not for..outdoor antennas....hmmm..intresting

nichky

Why on NetMetal 5 i'm not able to use this features?
i really need because i'm running wireless

nichky

From the Jono Thompson presentation i found that: CRS1xx\2xx series switch support up to 7 bridges using hardware offloading. In my case i need up to 20 bridges will be supported hardware offloading, because im planing to do Q-in-Q. (different ethernet ports with different vlan) Does MikroTik have d...

nichky

however "push-button-5s and "push-button" are not working at all.

Only once time it was working. WPS-Accept only does work

nichky

how your wifi conf looks like
what the log said?

/system logging
add action=wlan prefix=wlan1 topics=wireless,debug

nichky

what's a differences between
"push-button-5s and "push-button"??

nichky

mnohokrat dakujem

nichky

i need script that will put user and password on "system user", but i want to remove any other wich existing.

Does anyone have that script?

nichky

i fixed.
Does anyone know what USR does?

there is no documentation regarding that.

nichky

i reset the router via button "reset/mode" "In case you wish to return the device to its original configuration, you can use the RESET button. Hold this button during boot time until LED lights start flashing, then release the button to reset RouterOS configuration." when im plug...

nichky

is there any cnance to get a list of wich RouterBoards protected-routerboot suports?

From MT Support i found that:
"older devices have no ability to upgrade the backup bootloader. only RB9xx and newer are supported."

For example MAP supports that features,what about hex s?

nichky

Regarding the Mikrotik wiki,i got one question about AC.
So from this picture my question is, does AC have effect if i'll tick HT-Supported MCS,because for it usually i'm using VHT Basic/Supported MCS

nichky

actually my question is should i upgrade step by step up to the latest version or directly to it.

nichky

The configuration is pretty simple. Just wireless configuration and bridge ports.
I had upgraded MT at home, and adter upgrade it didnt start up, i had to unplug /plug to porew point,after that evrything was okey.
That why im asking for.

nichky

Does anyone have bad experience upgrading SXT which currently has v6.3x to the latest version? im asking because i have to do remotely. Any suggestion are welcome.

nichky

*) wireless - include last frequency when manually setting frequency step in "scan-list";

what exactly will do for us?

nichky

get rid of band=b. Channel-width=20/40mhz-XX depending of the distance

nichky

i'm running VPN which is IKEv2 and with the ip address from modeconf (HQ) i'm running IPIP tunnel. Everything works fine i mean the tunnel and everything. I've just seen that when i'm accessing from the HQ side to the BRANCH office on ipip-tunnel adress i heve (see picture-and after min im lossing t...

nichky

*) winbox - added "revision" parameter to "System/Routerboard" menu;

what for?

nichky

and also Does it make sance?

"if you have DHCP, etc on the device, you will have to also add the bridge to tagged"
on the Router wich is running DHCP-Server

nichky

one question regarding this topic. So as soon as VLAN filtering is enabled traffic will go through CPU? i mean if i want to get ether and wlan i have to tick VLAN Filtering in my case i have 3 routerOS, and the thing is i need to run VLAN on ether and wlan. So acording that traffic will go through C...

nichky

use User Manager

nichky

Hi, for me the static ARP entry works great. Your case sounds to me like your server NIC isn't able to wake up the server upon receiving a magic packet after unplug / plug the network cable. Can you still wake up the server from within your LAN in this situation? When i ll do unplug / plug,i can't ...

nichky

@CapFloor does it work correctly?
in may case everything works perfectly until i unplug/plug cable from computer/server. From that time stopped to work. What about in your case?

nichky

Here is the configuration I used to test compatibility with NordVPN. However, it is not working yet with the latest public beta version (6.45beta45). You will need to upgrade to the next beta when it is released. I will probably make an official tutorial on wiki later. /ip ipsec mode-config add nam...

nichky

Questions regarding Power-Line
1. What is the max range that i can connect two Power-Line?
2. Can i connect more than 2 devices?
3. Is there any chance to block button? (for protection purposes)?

nichky

OK - what command will tell me what OSPF function the router is (IR, Backbone, ABR, ASBR )

/routing ospf lsa> print detail where type=
/routing ospf as-border-router
/routing ospf area-border-router

nichky

i modiface from msatter . i found it makes traffic ONLY when Speedtest.net is running, but what eals i found special dummy rules dont make traffic,even on connect-list fasttrack is 0. Do im getting fastrack for Speedtest? Filter add action=fasttrack-connection chain=forward comment="Speedtest f...

nichky

msatter , good idea by port. i'm running torch on same time with speed test. There is millions of ports Speedtest.net is using destination port 8080 and my line in Mangle is then: /ip firewall mangle add action=fasttrack-connection chain=prerouting comment="Speedtest fasttracking" connect...

nichky

speedtest.net uses normal http port on many different servers so nothing to match on (port is not unique and neither DNS name nor IP address are predictable).

So this kind of cheating won't work.

i was waiting for you. Which matching you recommending instead of Content?

nichky

currently my rules looks like that, im not happy because the metchers comes from Content,i found it doesn't need to be for this case - Filter - add action=add-dst-to-address-list address-list=Speedtest-List address-list-timeout=1d 00:00:00 chain=forward comment="Get SpeedTest IP-Address" c...

nichky

i'm trying to to fastrack only on speed test for the problematic customers :) Currently i got this rules, it seems leke doesn't work any suggestions add action=fasttrack-connection chain=forward comment=FastTrack connection-state=established,related content=speedtest.net add action=accept chain=forw...

nichky

youtube.com or *.youtube.com or *youtube*

nichky

try Content instead of TLS-Host

nichky

update from MikroTik

This is not a bug, because when you set the WPA2 security profile the PSK key is generated passphrase+SSID and that is why the connection in this type of scenario is not possible.

Best regards,
Viesturs R.

nichky

im using Wake-On-Lan, by LAN IP, and everything working fine until unplug and plug the cable.

nichky

Three thing you have to have for your case:
- Crrect Configuration
- Enough Bandwidth
- RouterOS which supported ipsec acceleration

I can't tell you more according your post.

nichky

im so proud of you guys, how IPsec become so flexible. well done!!!

nichky

*) dhcpv4-server - added "client-mac-limit" parameter;

which number over here goes?

nichky

well done,it works perfect

nichky

raystream, nichky, LetMeRepair, proximus, Cha0s, 3bs, Vlad2, sterod, mserge, STEVEUK1, elgrandiegote - We can not seem to reproduce the problem with Winbox login. Can you provide more details? From which version did you upgrade your router? Do you, for example, use RADIUS for Winbox authorisation? ...

nichky

The only access i can get is via SSH. and i downgrade to 6.44.3,nothing happens

nichky

and how can we get access?
You can't That is the point of this issue. Only the admin himself could trigger the problem. it's not a serious issue, but we still fixed it.

So we have to replace the router? so fany

nichky

!) security - fixed vulnerabilities CVE-2018-1157, CVE-2018-1158; Fixed again? Both CVE's were fixed in the previous versions, but they could be reproduced differently if you had access to the www service and user account with "full" rights. We have removed this possibility as well. and h...

nichky

it is my remote site!!!!!
any bug make sense....this one...hhhhhh

nichky

i upgrade my RB433AH after that...i couldn't access with current user and password and with admin????

Search found 691 matches