Community discussions

Search found 921 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 19
by Steveocee
Wed Feb 13, 2019 3:48 pm
Forum: Beginner Basics
Topic: RB4011 not working?
Replies: 2
Views: 144

Re: RB4011 not working?

Download Winbox and try L2 connection, no IP needed.
by Steveocee
Tue Feb 05, 2019 11:35 am
Forum: General
Topic: DNS resolution vulnerability
Replies: 7
Views: 365

Re: DNS resolution vulnerability

This just sounds like you didn't set up your firewall properly. Not a vulnerability. If you enable DNS cacheing then the router will do it regardless, it is up to you then as the user to ensure that only requests you want answered are responded to. Usually a dro pUDP-53 rule from the WAN interface i...
by Steveocee
Wed Jan 30, 2019 2:59 pm
Forum: RouterBOARD hardware
Topic: hap mini, is 'foot' removeable?
Replies: 5
Views: 324

Re: hap mini, is 'foot' removeable?

Forgot I made that video.
by Steveocee
Wed Jan 30, 2019 2:57 pm
Forum: Beginner Basics
Topic: DNS server behaviour
Replies: 5
Views: 242

Re: DNS server behaviour

Yeah your config sounds screwed up. With a drop rule there should be no need for an extra rule in there. Also after the drop rule there should be no hits on any input rules........ This. Unless you have an established & related rule and the requests are coming form the same hosts and by some wizard...
by Steveocee
Tue Jan 29, 2019 6:59 pm
Forum: RouterBOARD hardware
Topic: hap mini, is 'foot' removeable?
Replies: 5
Views: 324

Re: hap mini, is 'foot' removeable?

Yes it is. I have trouble keeping it on to be fair, the device is so light and once you have a cat5 and power cable plugged in it struggles to stand up with it's own weight.
by Steveocee
Mon Jan 28, 2019 5:36 pm
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 444
Views: 33151

Re: LHG 60G experience

Finally got my link up! 64Ghz wasn't cutting it but when I've tried out 66Ghz we now have a link. There is still some more panning that needs to be done, still not quite the 4Km touted recently.
66g1.JPG
by Steveocee
Wed Jan 16, 2019 4:20 pm
Forum: Beginner Basics
Topic: Test user on Desktop computer.
Replies: 3
Views: 158

Re: Test user on Desktop computer.

X86 isn't really a supported variant any more. "Real" hardware installations are now advised to be done using CHR through a Virtual Host.
by Steveocee
Tue Jan 15, 2019 12:29 pm
Forum: Beginner Basics
Topic: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)
Replies: 8
Views: 316

Re: Performance issue with Bell FTTH 940mbps/940mbps internet on Mikrotik CRS328-24P-4S+ (Bell Home Hub bypass)

CRS series are primarily switches with an amount of L3 capability. I think you'd need to use fast track and hardly anything else to get near the throughput you want. Ideally you'd need an RB3011 or upwards to route at those sorts of speeds.
by Steveocee
Wed Dec 26, 2018 11:18 pm
Forum: Virtualization
Topic: Problem buying a copy CHR
Replies: 1
Views: 224

Re: Problem buying a copy CHR

You don't buy CHR. You can buy a CHR license though, is that what you mean?
by Steveocee
Wed Dec 26, 2018 11:05 pm
Forum: Beginner Basics
Topic: Configure RB3011 to work with Comcast SB6183
Replies: 5
Views: 293

Re: Configure RB3011 to work with Comcast SB6183

Assuming Comcast work like most, you can connect a DHCP-client device to the modem and you're on the net. If so, reset the RB3011 to factory defaults and connect the modem to ether1. Should get you up and running (providing they don't have any weird MAC timeout restrictions on the services) and then...
by Steveocee
Mon Dec 24, 2018 11:52 am
Forum: RouterBOARD hardware
Topic: VDSL2
Replies: 5
Views: 475

Re: VDSL2

Not heard any mumbles of it.
The SFP approach is the closest yet but there will be little appetite in going for VDSL now with the general lean towards fibre to the premises.
by Steveocee
Sun Dec 23, 2018 10:18 am
Forum: Wireless Networking
Topic: Config RB952UI-2nd with 4 NMS2 for captive portail project
Replies: 1
Views: 136

Re: Config RB952UI-2nd with 4 NMS2 for captive portail project

This will be a LOT for someone to write for you a step by step guide. Maybe watch some YouTube tutorials first? Setting up router, then hotspot, then come back with any configuration issues or changes that need making?
by Steveocee
Sun Dec 23, 2018 10:11 am
Forum: Wireless Networking
Topic: Broadcast Storm avoiding
Replies: 1
Views: 247

Re: Broadcast Storm avoiding

Are you using client isolation? That would mitigate a lot for you, you should not get a storm across all ports though unless you add the ports to a bridge and then have a single pppoe server on the bridge.
by Steveocee
Sun Dec 23, 2018 9:58 am
Forum: RouterBOARD hardware
Topic: Problems with Mikrotik RB951Ui-2HnD
Replies: 2
Views: 242

Re: Problems with Mikrotik RB951Ui-2HnD

Your router has been hacked and likely has a script running on startup.

You need to do a netinstall to latest version and then re on figure securely before connecting back to the web.
by Steveocee
Sun Dec 23, 2018 9:55 am
Forum: RouterBOARD hardware
Topic: Ethernet flapping on RB3011
Replies: 5
Views: 467

Re: Ethernet flapping on RB3011

I’m on mobile but search this forum for the term “port flopping”. There is a large thread about it, why it is happening and how the problem hasn’t yet been fully solved.
by Steveocee
Sat Dec 22, 2018 11:08 am
Forum: Beginner Basics
Topic: Hairpin NAT is not working
Replies: 13
Views: 3078

Re: Hairpin NAT is not working

@Steveocee Thanks for wonderful and helpful video that you share in youtube, I am totally new user to Mikrotik but base on your guidance from the video, after some testing and reboot finally I able to get the loopback/ Hairpin NAT plus DYNDNS work perfectly with my Dynamic IP. Keep up the good job ...
by Steveocee
Wed Dec 19, 2018 1:55 pm
Forum: Beginner Basics
Topic: Locking down a Port Forward - noob question
Replies: 2
Views: 158

Re: Locking down a Port Forward - noob question

Do you actually need the port open? Could the traffic be part of your established or related chain instead? If you are "dialling out" to this company then you shouldn't need this rule.

Can you do an export (hiding the addresses of course) so we can see and help?
by Steveocee
Tue Dec 18, 2018 3:09 am
Forum: Wireless Networking
Topic: Newbie: LHG 5ac only hitting 100mbps
Replies: 30
Views: 1317

Re: Newbie: LHG 5ac only hitting 100mbps

Several people have already said, you are not missing anything. Your expectation of the product is too high. Either use an LHG60 to get gigabit or you will have to deal with the connection you are getting. The fact you are gettin 800+ burst rates is impressive to say the least, especially in the con...
by Steveocee
Tue Dec 18, 2018 3:05 am
Forum: General
Topic: Any alternatives for IP Cloud (DDNS)?
Replies: 1
Views: 217

Re: Any alternatives for IP Cloud (DDNS)?

It was only temporary downtime, not full shut down. The current version is quite stable also.
You can script the router to pull WAN ip from your interface if you really need it to on net watch up but that is very long way around an easily solvable problem.
by Steveocee
Fri Dec 14, 2018 4:52 pm
Forum: Beginner Basics
Topic: Blocking traffic on the same NAT doesn't work
Replies: 10
Views: 496

Re: Blocking traffic on the same NAT doesn't work

^^^^ Anav missed the easy solution. Although correct in that they are essentially in a L2 network, you can force L3 connectivity.

If the interfaces are in the same bridge you can use the bridge settings to use IP firewall or bridge filters and stop them from talking that way.
by Steveocee
Fri Dec 14, 2018 4:49 pm
Forum: Beginner Basics
Topic: Basic ROUTING [SOLVED]
Replies: 9
Views: 694

Re: Basic ROUTING [SOLVED]

Should be doable with a dst-nat rule I think.
Need a bit more info from your side to give you a more exact answer though.
by Steveocee
Fri Dec 14, 2018 1:10 pm
Forum: Beginner Basics
Topic: Web filter for Childs
Replies: 7
Views: 505

Re: Web filter for Childs

MikroTik Kid Control is brilliant for controlling who can access the net at what times and at what speeds across a grouped amount of devices.
No good for site control though.
by Steveocee
Fri Dec 14, 2018 12:34 pm
Forum: Beginner Basics
Topic: Mikrotik reserving some of my bandwith and I don't want that
Replies: 18
Views: 892

Re: Mikrotik reserving some of my bandwith and I don't want that

I want to stream 4k high bitrate media, to 4 devices around the house if its possible I'd like to do that from a big external HDD hooked up to the router via usb 3.0 or something faster via NFS or something similar. If I can do this it basically means I can avoid buying a NAS which would be amazing...
by Steveocee
Fri Dec 14, 2018 12:16 pm
Forum: Beginner Basics
Topic: Web filter for Childs
Replies: 7
Views: 505

Re: Web filter for Childs

Separate network for her devices and use something like OpenDNS to filter DNS requests?
by Steveocee
Thu Dec 13, 2018 5:13 pm
Forum: Wireless Networking
Topic: New 60ghz channel release expectation
Replies: 4
Views: 391

Re: New 60ghz channel release expectation

The channel is not something MikroTik are releasing, the channel itself is already there. MikroTik are enabling the use of the channel through firmware which currently is only in the RC version but will ultimately release to current (whenever that may be). It is the 66000 channel which moves further...
by Steveocee
Tue Dec 11, 2018 1:03 pm
Forum: Beginner Basics
Topic: Remove port from the default brige [SOLVED]
Replies: 17
Views: 763

Re: Remove port from the default brige [SOLVED]

Interesting
So I will then always set up bridges like this:
/interface bridge
add admin-mac=x[26AE]:xx:xx:xx:xx:xx auto-mac=no name=bridge
Where x are random[0-9A-F]
My MTCNA tutor taught to increment the first digit set by 2.
IE 00:AA:BB becomes 02:AA:BB
by Steveocee
Mon Dec 10, 2018 3:27 pm
Forum: Beginner Basics
Topic: Remove port from the default brige [SOLVED]
Replies: 17
Views: 763

Re: Remove port from the default brige [SOLVED]

What happens if you use MAC address rather than IP? I always use MAC where I can as it means I don't lock myself out with L3 problems.
by Steveocee
Mon Dec 10, 2018 1:13 pm
Forum: Beginner Basics
Topic: Remove port from the default brige [SOLVED]
Replies: 17
Views: 763

Re: Remove port from the default brige [SOLVED]

Are you plugged in to ether2 when you are doing this? If you are connecting to the router via IP, the IP sits on the bridge, if you remove the port from the bridge then you lose your IP connectivity.
by Steveocee
Mon Dec 10, 2018 8:56 am
Forum: Beginner Basics
Topic: DNS defaults to router gateway
Replies: 1
Views: 154

Re: DNS defaults to router gateway

IP>DHCP-SERVER>NETWORKS

Click into your network and then use the DNS box to full in the DNS servers you want to hand to DHCP clients.

That should work, do an ipconfig release and renew just in case.
by Steveocee
Mon Dec 10, 2018 8:51 am
Forum: Wireless Networking
Topic: wAP ac is slow with manager forwarding and high CPU
Replies: 9
Views: 603

Re: wAP ac is slow with manager forwarding and high CPU

Do you need to run the traffic locally through manager? The traffic is being tunneled back to the manager hence where the CPU usage is coming from, without tunneling you should get full speed.
by Steveocee
Mon Dec 10, 2018 8:48 am
Forum: Wireless Networking
Topic: Associate with two 5ghz networks at the same time in station mode(client) with SXTsq 5 ac
Replies: 2
Views: 213

Re: Associate with two 5ghz networks at the same time in station mode(client) with SXTsq 5 ac

You can't connect to two networks as a client regardless of version.

If you had a board with 2 of the 5ghz chips then yes but certainly not through virtual. It simply can't do what you are asking.
by Steveocee
Mon Dec 10, 2018 8:45 am
Forum: Wireless Networking
Topic: Wireless Wire 60Ghz PTP link: weather problems?
Replies: 7
Views: 1111

Re: Wireless Wire 60Ghz PTP link: weather problems?

80m should be fine even with heavy rain. Maybe use the upper channels if you can.

Performance on these is great and I find the quoted distances to be a minimum.
by Steveocee
Sun Dec 09, 2018 11:12 am
Forum: General
Topic: Allow only one country to access router [SOLVED]
Replies: 3
Views: 234

Re: Allow only one country to access router [SOLVED]

I use similar to exclude a few countries from reaching me and my router (and vice versa). Your router is most likely trying to reach DNS outside your country and updates will be coming from MT (Latvia?) so a different approach is probably needed. If this is for access control you would be better rea...
by Steveocee
Fri Dec 07, 2018 3:45 pm
Forum: RouterBOARD hardware
Topic: pleaaaas help :CCR1036 ether ports doen't respond
Replies: 6
Views: 484

Re: pleaaaas help :CCR1036 ether ports doen't respond

Serial into it and see if anything is amiss. We use a standard USB-Serial adapter and then a Dev/Null cable in between to get access. Console you will see if ports are disabled or not. Recently had a similar problem not being able to netinstall a CCR and I ended up leaving it connected for around 15...
by Steveocee
Fri Dec 07, 2018 3:42 pm
Forum: Beginner Basics
Topic: SXT LTE traffic Monitor
Replies: 2
Views: 203

Re: SXT LTE traffic Monitor

You could turn on graphing for the LTE interface, activate the www server (make sure you firewall it properly) and view it locally?
by Steveocee
Fri Dec 07, 2018 2:09 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: block p2p on router os version 6.4
Replies: 7
Views: 631

Re: block p2p on router os version 6.4

Very difficult in general now as most P2P uses encryption.
Hope they integrate IDS/IPS feature in RouterOS in v7.
I like your optimism.
by Steveocee
Fri Dec 07, 2018 2:06 pm
Forum: Beginner Basics
Topic: Ludvigs first experience with routeros, and Pihole.
Replies: 2
Views: 257

Re: Ludvigs first experience with routeros, and Pihole.

IP > DHCP-Server > Networks Change the DNS server you are handing out to the IP of your Pi-Hole. Done. Be careful with Pi-Hole though, I would be more inclined to statically set the DNS in the client devices rather than blanket the network as I've read recently it has been a bit flakey with provider...
by Steveocee
Fri Dec 07, 2018 2:01 pm
Forum: General
Topic: PoE passive on port 5, same voltage as input
Replies: 1
Views: 115

Re: PoE passive on port 5, same voltage as input

Hex can do 48v in and out but does not have WiFi chip built in. You would need a separate AP.
https://mikrotik.com/product/RB960PGS
by Steveocee
Fri Dec 07, 2018 1:56 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself
Replies: 29
Views: 1905

Re: RB4011: wlan1 disabling itself

Steveocee: The solution to this is to reduse the 2,4GHz transmit power a bit so that clients sees the 5GHz net as the strongest when close. This would reduce the 2,4GHz theoretical coverage, but normally not the actual/usable coverage, since coverage is normally limited by tx power on client. Yep, ...
by Steveocee
Fri Dec 07, 2018 1:31 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1217

Re: firewall is pushing the cpu

Are you sure it is not just somebody trying to attack your router and it's doing it's job? Does/Has the CPU usage subside(d)?
by Steveocee
Fri Dec 07, 2018 12:05 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself
Replies: 29
Views: 1905

Re: RB4011: wlan1 disabling itself

Are you using the same SSID name for both your 5G network and 2G network? Devices roaming from 5G to 2G would leave the 5G AP as running but not active. My P20 Lite is a PITA as it's dual band and I have done everything I can to get it to prefer 5G but it always ends up on 2.4G
by Steveocee
Fri Dec 07, 2018 11:48 am
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1217

Re: firewall is pushing the cpu

With firewalls my personal ethos is drop everything and allow only what you want. Your firewall was allowing what you want and dropping "some" stuff. Your rules can be much simpler if you set them up as per below and that may transpire into better CPU utilisation. Nobody has asked what model router ...
by Steveocee
Fri Dec 07, 2018 10:29 am
Forum: General
Topic: Interface-list VS firewall address-list best practices and approach?
Replies: 8
Views: 370

Re: Interface-list VS firewall address-list best practices and approach?

Its worthwhile stating that one can make up numerous Interface Lists (subset1, newlist23, etc) but the options for each list is fixed at interfaces. Valid entries are: WAN entries, LAN entries, dynamic entries, or No entries They are applied as an Inclusion Entry or an Exclulsion entry. So there is...
by Steveocee
Thu Dec 06, 2018 6:29 pm
Forum: Scripting
Topic: Need help to email ping results / mode button event
Replies: 1
Views: 222

Re: Need help to email ping results / mode button event

You will need to set up /tools email to work correctly but when done use the below to create a script and then run the script on mode button being pressed; #Define Email variables here :local toEmail toaddress@mikrotik.com :local fromEmail fromaddress@mikrotik.com #Ping Variables :local avgRtt; :loc...
by Steveocee
Thu Dec 06, 2018 5:21 pm
Forum: Beginner Basics
Topic: New hEX S setup, but no internet.
Replies: 1
Views: 172

Re: New hEX S setup, but no internet.

It is doubtful the router is faulty. Most likely a misconfiguration. Please post your config for us so we can see and advise.
Enter into terminal; export hide-sensitive=yes
This will export your config hiding most specific details, ensure to edit out anything else.
by Steveocee
Thu Dec 06, 2018 5:09 pm
Forum: General
Topic: Interface-list VS firewall address-list best practices and approach?
Replies: 8
Views: 370

Re: Interface-list VS firewall address-list best practices and approach?

I too do similar with my setup. Interface list as an example "WANs" for my 2 WAN interfaces which is good for firewall & NAT rules and make use of address lists in multiple ways. I think of it more as interface-list for hardware interfaces and address-lists for IP related. Sometimes both will suit a...
by Steveocee
Thu Dec 06, 2018 2:18 pm
Forum: General
Topic: Winbox question in regards to traffic
Replies: 6
Views: 380

Re: Winbox question in regards to traffic

There is a padlock in the top right corner of Winbox. If it is lit and locked you are encrypted. If not then you aren't.
by Steveocee
Thu Dec 06, 2018 12:27 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: block p2p on router os version 6.4
Replies: 7
Views: 631

Re: block p2p on router os version 6.4

Very difficult in general now as most P2P uses encryption.
by Steveocee
Thu Dec 06, 2018 12:05 pm
Forum: General
Topic: HELP MIKROTIK STATIC ROUTE
Replies: 3
Views: 223

Re: HELP MIKROTIK STATIC ROUTE

You can have multiple routes all with the same priority however RouterOS will prioritise more specific routes over others. In your instance you can set routes to those individual IP's through the relevant WAN interfaces and still have a generic 0.0.0.0/0 rule all with the same priority and them coin...
by Steveocee
Wed Dec 05, 2018 3:48 pm
Forum: General
Topic: pcc does not work with fasttrack
Replies: 4
Views: 231

Re: pcc does not work with fasttrack

It's useful in certain instances.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 19