MikroTik

tiran

In my mikrotik device, I need to add address list and allow access them to all my LAN devices. for that I have created firewall address list named as "Allow_Internet" and tried to match list with my masquerade. then I can ping those address. but when I try to access from browser it take to...

tiran

I have mikrotik l2tp VPN with 12 branch locations. each branch have two ISP connections and the main ISP connection connected to RB450 and use WAPR for Backup connection. I have configured VRRP for both routers and failover and other things working properly. each branch have 2 to 5 computers. Now I...

tiran

An absurd request...
There is already the firewall in the same device where you would install the container, what would be the logic in wanting another add-on?

@rextended

Can you explain how can I do with existing firewall

tiran

assume I have router RB450 as a gateway router of my LAN. I have added masquerade for LAN Internet from my RB450. it is working fine. but now I want to allow outlook mail, any desk, TeamViewer, Microsoft teams and some important services and block all other sites. how can i do it

tiran

As a service partner we install and provide connection to customers. we use RB450G4 as the main router and VPN. we do not provide login access to RB450 router for end clients. but if we can install firewall on docker we can give access to responsible person to manage their firewall.

tiran

I am looking for solution to control my branch LAN devices by basic open source firewall. I use RB450G4 devices for branch core router. is that possible to install a basic firewall in the RB450G4 as a docker container

tiran

jlpalacios, have you success with this?. i also seeking for that

tiran

/interface lte set [ find ] allow-roaming=yes band="" name=lte1 network-mode=3g /interface wireless set [ find default-name=wlan1 ] ssid=MikroTik /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no /interface wireless security-profiles set [ find default=yes ] supp...

tiran

Signal level is low. but i think it is enough to connect. LTE interface also running. but it will not connect internet. without any other changes it will work if I change only network mode to the LTE.

tiran

Finally we have found solution better it is good or not it is solved my issue.
my solution is schedule run and find dns cache that have any record with anydesk and add them to address list. already created masquerade that allow all traffic to gateway for defined address list

tiran

I Have WAP R Router and OS Version V7.4. ITE firmware is "MikroTik_CP_2.160.000_v020"
The LTE interface not working if I enabled 3G Only. in the previous OS version 6.49.6 that work 3G only. anyone have idea??? because there are some locations that not have LTE Signal.

tiran

Hi,
We have some branches connected through Mikrotik PPTP. we have disabled their Internet usage by disabling masquerade nat. but we need to allow anydesk connection for remote support. anyone have idea?
I found this from anydesk website add exception for *.net.anydesk.com how can i do that?

tiran

https://forum.mikrotik.com/download/file.php?mode=view&id=52510 We Have Main router that enabled pptp server and all client devices connected it to over pptp. i need a solution to if main router down connect all pptp clients to my another location. on the other hand i can accept solution that w...

tiran

Hi all,
I have stepped remote syslog server for all our mikrotik devices. I have little bit doughs that, if connection down, what happen to syslog data until connection up

tiran

Hi all,
We have Built VPN With mikrotik routers by PPTP and L2TP(60 Client locations Apx). Now I need to monitor all client interfaces (Not Client devices)by Dude. As a Example in my Main router I have all PPTP and L2TP Interfaces. I need watch and alert or beep if any interface Down.

tiran

I need to configure remote vpn users those who use apple device. I need to add certificates for authentication. I followed few guides nothing success.

tiran

Besides port 21 you have to forward a range of (passive) ports to make FTP work.

If you get this to work you might want to consider upgrading your VPN connection to something newer?

Can you explain little bit. it is better if you can provide example

tiran

I have Mikrotik router (172.1.1.1) in my head office and there are several branches (172.1.0.0/16) connected to head office by pptp vpn. there is a ftp server in the head office (192.168.1.20) i Need to upload branch mikrotik router backup via VPN to the head office ftp server. by following command ...

tiran

I Have issue with Vlan on RouterBOARD 1100x4 I Have added Vlan to the interface ether 5 ( VLAN ID 10) Added address 192.168.1.0/24 for ether 5 and 10.10.10.1/24 to Vlan Interface added separate masquerade for both networks with src address and out interface. (out interface is same) My issue is if my...

tiran

actually I am already use domain to my access URL and I have setup and allowed few users to access system through domain. but those users not keep detail secretly. our manager has idea about they will share secret detail. that's why I try to do something. actually I need solution to block device not...

tiran

as a example my router public IP = 124.10.20.201 LAN IP = 192.168.10.1 Server IP = 192.168.10.100:4000 My NAT rule = "action=dst-nat chain=dstnat comment="WAN login" dst-port=8585 in-interface-list=WAN protocol=tcp src-address-type="" to-addresses=192.168.10.100 to-ports=400...

tiran

I am new to Genieacs and TR069, i have followed mikrotik and genieacs documents to install and use of genieacs. basic functions are working properly. but i need to upload X MIKROTIK Factory Configuration File. but when i upload file genieacs says "faultCode: "9003" faultString: Invali...

tiran

i am thinking on something like that device certificate
do you have any idea

tiran

any one has any other option to fulfill my requirement? actually i need to manage outside devices who access to my server. urgent......

tiran

if there any other methods to limit allowed users to access NAT? . SRC-mac is not the client device mac if device will connect through the internet. i think it is better if there any way to access NAT through certificate or key

tiran

6.46.6 i have issue with API login. that show error message as user name and password wrong. but i can use my api without any changes in v 6.43.16 or older.where can be the issue

tiran

in the scrip it show as wrong when i add

dst-path=disk1/$filename

. but i can do like this

dst-path=disk1/myfilename.backup

.it is solved my problem. but it is better any way to add

dst-path=disk1/$filename

tiran

i have few mikrotik routers that connected to main mikrotik router through pptp server client method. now i need to automated backup upload from client routers to main router. script working perfectly. but storage is not enough so i attached usb stick to the main router for save backup files. now i ...

tiran

how can i set ftp server path = 192.168.88.1/disk1

tiran

i can access my required folder through web browser (ftp://192.168.88.1/disk1/). but i need to put file path inside of the script. when i do that script show that address wrong

tiran

i am using RB1100AHx4 router and i try to backup all my client router backups through ftp. that process working properly. but my problem is that when i backup file it will save file RB1100AHx4 router default file path. so i need to save them inside of M2 ssd of the RB1100AHx4 router. how can i set t...

tiran

i need report likes userman reports through API

tiran

/tool user-manager session> print where from-time=7/14/201
8 till-time=7/14/2018 customer=admin or like this?????

tiran

I need to filter dst-nat by device mac. My Nat as follows chain=dstnat action=dst-nat to-addresses=192.168.x.x to-ports=4000 protocol=tcp in-interface-list=WAN dst-port=8055 log=no log-prefix="" my requirement is to allow access or forward host to this dst-nat by allowed mac address. other...

tiran

How can i filter "tool/user-man/user print where last-seen= 12/12/2018" something likes that or "tool/user-man/user print where last-seen<= 12/12/2018". actually i need to filter users from winbox terminal.

tiran

I have two up links. one link is use to WiFi connection. now i need that, when user manager user reached user download quota i need to move user to use 2nd up link. is that possible or any other method? as a example : ISP 1 Up link connected to ether 1, ISP 2 up link connected to ether 2, LAN(hotspo...

tiran

i need thing like this userman user with 2 shared user. and two users can download until reach download limit. and also each device download limits are not equal. eg: total download limit with 500MB one device may can download 300 MB second device can download 200 MB

tiran

i have another question too. i have created profile limitation as 100 MB transfer with 2 shared users. now i can use username and password for two devices. but actually user name not shared. that means both device can use 100 MB transfer limit per each total amount is 200 MB. is that correct. in the...

tiran

this is the question in my case if user does not log offed user can use data more than user profile limitation.

tiran

in my hotspot when i create i add profile after that i connect device it show the profile automatically removed. and device can use unlimited data

tiran

how to run this code from api

/tool user-manager user> remove [/tool user-manager user find username=101]

tiran

i tried node.js Api. as example i can view ip address in terminal by running node js code. but i want to run node js script on click html button. var api = require('mikronode'); var connection = new api('192.168.5.1','admin','admin@123'); connection.connect(function(conn) { var chan=conn.openC...

tiran

actually i use limited packages such as 512MB, 1GB. i want to display a alert before end of this limits (ex. when user reach 480MB from 512MB, display massage ":dear customer you have 32 MB more".)

tiran

you need to add this code in scripts is there any possibility to implement it for PPPOE USERS (with userman) ? i also try to add user reminds or alerts about their usage. but i couldn't yet find a proper solution. actually i want to alert on web browser before end user allocated transfer limit or t...

tiran

i want to view available user profile when i load the api. it is better if i can insert profiles into combo box item

tiran

Remove the spaces in the profile line:
Code: Select all
mk.Send("=profile=general", True)

ok done. now i want to develop this code to create user batch

tiran

1.how to use listen command with visual basic 2010 API?
2. when i create new user, can i know just created new user details?
3. can i view available details from listen command or other command..?(eg view available user profiles)

tiran

Right. In Winbox's terminal, those are two different commands. Therefore, you need to send two separate sentences, e.g. mk.Send("/tool/user-manager/user/add", False) mk.Send("=customer=admin", False) mk.Send("=username=" & tb_name.Text & "", False) mk...

tiran

If your code is literally a "copy&paste", then the line mk.Send("=;create-and-activate-profile=" & tb_name.Text & "", False) is where the problem is at. Remove the ";" at the start there. Also... Isn't "create-and-active-profile" a separ...

tiran

mk.Send("/tool/user-manager/user/add", False) mk.Send("=customer=admin", False) mk.Send("=username=" & tb_name.Text & "", False) mk.Send("=password=" & tb_password.Text & "", False) mk.Send("=shared-users=3", False...

Search found 50 matches