MikroTik

zhup

The simplest way is adding ether1 to bridge. Don't forget to disable dhcp server and firewall on hap lite, that's all. Also u can change dhcp client from ether1 to bridge.

It works. It was so easy. Many thanks!

zhup

I don't see how OP's problem relates to VLANs. No anav, really, VLAN is not answer to just any question.

@zhup, how are the two devices connected, wired or wirelessly?

The connection is wired.

zhup

Hello, There two APs - hap ac lite (LAN 192.168.88.1, dhcp 192.168.88.10-254) connected to internet, - hap lite as a second AP - it is connected to hap ac lite (Internet: 192.168.88.10; LAN 192.168.99.1, dhcp 192.168.99.10-254). How to configure the second AP - hap lite - to be in the same LAN addre...

zhup

My guess is that the problem is actually somewhere else, because it's highly unlikely that upgrade would break something as basic as this. And even if it did, there would be many more people complaining. Does the rule's counter increase? If not, either no such packets are coming to router or they a...

zhup

If the goal is to reach inn to IP 192.168.88.189 on port 12000/tcp, try this instead. add chain=dstnat action=dst-nat to-addresses=192.168.88.189 protocol=tcp in-interface=ether1 dst-port=12000 PS change in-interface to your outside interface or use in-interface-list=WAN if you have an outside grou...

zhup

Hello,

After the upgrade (6.44.5) - the port forwarding is not working.

add action=dst-nat chain=dstnat dst-address=!192.168.88.189 dst-address-type=local dst-port=12000 protocol=tcp to-addresses=192.168.88.189 to-ports=12000

What is wrong with it?
Thank you in advance.

zhup

Hi there, it doesnt matter if you get your wan-ip via dhcp or if it's static. The idea of a DMZ is to separate the LAN in 2 pieces. LAN1 is your DMZ. That is a separate LAN, where you connect servers that need to be reachable from the internet (like webservers, mailservers etc). If somebody hacks y...

zhup

Hello,

How to configure the DMZ for dymamic IP (dhcp)?

The router receives the ip using the dhcp.
How to make the dmz between the internet interface and host in the lan (192.168.1.101)?

Thank you in advance.

zhup

You are welcome to change it as you like. I don't use flash drives in my routers. Could you please check if I made all necessary changes for using the pendrive? # Import Intrus Managed Filter Lists # (C)2016 David Joyce, Intrus Technologies :log warning "Blacklist update in 30 seconds"; :...

zhup

Hello IntrusDave,
Great work!

Could you please change the script? It would be good to write the lists to the pendrive instead of the nand.
Thank you in advance.

zhup

Mikrotik Hex
https://routerboard.com/RB750Gr3
Gigabit, cheap, it'll handle the load.

Thanks for advice.

zhup

Hello,

Are you going to release the HAP AC v2 with the more powerful hardware (CPU, more ram etc.)?

zhup

Hello,

I ma looking for ethernet router for LAN (about 30 PCs, neighborhood network, 200 Mb/s / 200 Mb/s).
It will not be doing the advanced firewall, only some qos rules.
Which RouterBOARD hardware should be suitable?

Thank you in advance.

zhup

... Or - probably better, just use a simple queue instead of queue trees. The simple queue will see the traffic before it gets masqueraded by the NAT table, so you can use the src-address as the classifier in the upload queue (as your example does). Is this it? /queue type add kind=pcq name=pcq_dow...

zhup

Hello, How to dynamically share the bandwidth the among users? Below you can find my proposal, but the user ZeroByte made some advises and comments to this: http://forum.mikrotik.com/viewtopic.php?f=13&t=111341&p=554197#p554043 . /ip firewall mangle add chain=forward src-address=192.168.88.0...

zhup

I believe PCQ queues would work good for what you want to achieve, and priority 1 when creating queues for specific host http://wiki.mikrotik.com/wiki/Manual:Queue How to prioritize the traffic of one host is now for me almost clear. Now I would like to know more about the dynamic share the bandwid...

zhup

...
Or - probably better, just use a simple queue instead of queue trees. The simple queue will see the traffic before it gets masqueraded by the NAT table, so you can use the src-address as the classifier in the upload queue (as your example does).

Sorry, I have no idea how to do it.

zhup

Both statements are true - because "equally" is a dynamic concept. When you set the pcq-classifier, you can configure it to consider each stream to be a sub-queue (specifying address and port number in the hashing function). What do you think about the rules below? Is this solution functi...

zhup

hi

my internet have 2 connection vlan 1 vlan2
when vlan1 download vlan2 work..

so can i make vlan 1-2 load balance internet and user same time

Vlan or WAN?

https://aacable.wordpress.com/2011/07/2 ... t-by-zaib/

zhup

Read the Wiki/Docs on PCQ. Basically, you want to implement a basic upload/download PCQ type which doesn't specify any limitations on the "subqueues" - just leave it alone so it will just "evenly" divide the bandwidth by the number of streams that it sees. You still use the limi...

zhup

...
Does this make sense now?

It makes sense. Almost clear. Thank you.

But, I have one more question: how to dynamic share the bandwidth the among users? e.g. for 5 computers connected to 45M/4M.

zhup

... The priority queue is basically going to get all of the bandwidth except up to whatever minimum you reserved for the "rest" queue because the priority queue will either be: a) below its guaranteed minimum, so it's going to get service no matter what in this case b) above its guarantee...

zhup

I strongly recommend a guaranteed minimum bandwidth for the "rest" queue. You don't want the priority host to be able to completely starve out the entire network for its own use. Give it limit-at=512K/1M Which one is better in your opinion? /queue simple add limit-at=512k/1M max-limit=471...

zhup

Is the squid able to log the HTTPs requests.

zhup

Hello,

Is there in routeros the possibility to log the users activity (logging users visited sites) and save the logs into the usb pendrive connected to routerboard?

zhup

The question is: how to give the higher priority to the traffic of one host without guarantee the bandwidth? You really can't. Priority only comes into play between queues which have already been given their guaranteed minimum bandwidth. I'd say do something basic like this - create two simple queu...

zhup

The question is: how to give the higher priority to the traffic of one host without guarantee the bandwidth?

zhup

Hello,

In my local network there is a server which provide a service on the one specific port (15555) for computers inside and outside my lan.
How to prioritize the traffic into and out of this server?

Thank you in advance.

zhup

Solution:
If you want to use the pptp or l2tp is good to turn off the fasttrack in firewall filter rules. You can try to also exclude vpn protocols from fasttrack.

zhup

Solution:
If you want to use the pptp or l2tp is good to turn off the fasttrack in firewall filter rules. You can try to also exclude vpn protocols from fasttrack.

zhup

Any new ideas?

zhup

If ping works but tcp doesn't, it's most likely an MTU issue.
try lowering the MTU on your VPN interface.
...

My vpn provider recommends to use MTU 1400 and I am doing like this.
When I had hAP lite http connection was working and now on hAP ac lite I met this problem.

zhup

My vpn provider recommends to use MTU 1400 and I am doing like this.
When I had hAP lite http connection was working and now on hAP ac lite I met this problem.

zhup

Hello, What is wrong in my config? It does not work, but after I connected to wlan3 my pings goes through vpn. My public IP is IP of vpn server (nslookup myip.opendns.com. resolver1.opendns.com), but I am not able to open any website. Please help. I fight with this since one week. /interface bridge ...

zhup

Coud someone please check why the routing wlan3 through vpn (pptp) does not work? /interface bridge port add bridge=bridge comment=defconf interface=ether2-master add bridge=bridge comment=defconf interface=wlan1 add bridge=bridge comment=defconf interface=wlan2 add bridge=bridge2 interface=wlan3 /i...

zhup

Ok, move vpn masquerade rule to the first position

Still does not work, but after I connected to wlan3 my ping goes through vpn. My public IP is IP of vpn server (nslookup myip.opendns.com. resolver1.opendns.com), but I am not able to open any website.

zhup

Try modify masquerade rules, set src address in vpn rule and in pppoe rule, remove duplicate pppoe rule Are you sure that masquerade rule for pppoe needs the src-address? The internet connection through pppoe works without src-address as below. I added the src-address (wlan3 users addresses) to the...

zhup

Could you please help me with this topic?

zhup

After I connected to wlan3 my ping goes through vpn. My public IP is IP of vpn server (nslookup myip.opendns.com. resolver1.opendns.com), but I am not able to open any website.
Where is the problem?

zhup

Hello, I am trying to configure a solution to route users connected to wlan3 through vpn (pptp). I created the second bridge, all users connected to wlan3 have separate addresses (192.168.89.0/24) with additional dhcp server. It does not work and I do not know where the problem is? Below you can fin...

zhup

Could someone check my config?

zhup

I use ssd SLC instead of MLC in my x86 server (debian). There is only one problem it does not support the TRIM.
http://www.ebay.de/itm/KingSpec-SSD-1-8 ... Sw8d9Uv7Ez

zhup

Hello, I am using the hAP ac lite. I created addtional wlan (wlan3, Virtual AP) with the second dhcp server for it and vpn connection - but it does not work. wlan1/wlan2 + brigde local - dhcp1 192.168.88.0/24 - this works. wlan3 + bridge2 + dhcp2 192.168.89.0/24 + VPN - it does not work (I got the i...

zhup

...
The dynamicBlacklist list that I posted does not write the list to the NAND. The dynamic rules are stored in memory.
...

But first the file "dynamic.rsc" is being saved into the nand.

zhup

That is what you get when you ask questions without giving complete information!
You did not mention PPPoE before. PPPoE does not use DHCP (you should delete the client).
Settings for PPPoE are under PPPoE client.

You right. Thank you. Now it works.

zhup

I restarted the router and my clients still get the ip of dns servers from my ISP (PPPOE), but I want the different one.
The dhcp client is searching nonstop, even if I changed the interface to bridge.
How to solve it?

zhup

Did you release and renew the lease? Or reboot the router?

How to do this without the router reboot?

zhup

Unfortunately it does not work.

zhup

I'm using it mainly to unblock tv show from restricted region.
Nope I don't own the vpn but there is many vpn that work with router.

PPPT works for me.

zhup

From what lists you create your dynamicBlacklist?

zhup

If you get DNS settings from DHCP client then set use-peer-dns=no and enter manually DNS servers in /ip dns settings.
Additionally to give out different DHCP servers, you can set DNS in dhcp server configuration

Thank you. I did it in terminal. But where I find the use-peer-dns option in winbox?

zhup

Hi,

How to change the dns server I got from ISP. I would like to use the different one.
How apply e.g 37.235.1.174 and 37.235.1.177 (https://freedns.zone) to be dns server for dhcp hosts?

Thanks in advance.

zhup

Use the RAW for this. It allows the router to block before a connection is processed. Lightens the load on the router. you can use the blacklist update script here: http://forum.mikrotik.com/viewtopic.php?f=9&t=98804 That will get you a current blocklist that includes the openbl.org list Could ...

zhup

Hello, I would like to use the block list from openbl.org to block unwanted access to my router. I have already imported the blacklist but I do not know if the rules below are correct to block the IP addresses from the black list: add chain=forward action=drop src-address-list=blacklist in-interface...

zhup

Hello, Which wireless networking is fastest: 1. 802.11n vs. 802.11n: RB951Ui-2HnD (dual chain, 2x2 MIMO, 2.5dBi) vs. hAP ac lite (dual chain, 1.5 dBi). How big can be the difference in %? 2. 802.11n vs. 802.11 ac : RB951Ui-2HnD (dual chain, 2x2 MIMO, 2.5dBi) vs. hAP ac lite (single chain, 2 dBi). Ho...

zhup

You would need to make an alias and switch it... Or you can use normal fully customizable and reliably working 3rd party ddns service instead of mikrotik ip cloud. I know that I can use 3rd paty ddns service providers, but I started using the mikrotik ddns service and I would like to continue with ...

zhup

Hi,

is there the possibility to transfer the DDNS address between the devices?

xxx.sn.mynetname.net

zhup

This below works. I changed in second rule the out-interface from pppoe into the bridge. chain=srcnat action=masquerade out-interface=pppoe-out1 log=no log-prefix="" chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address=192.168.88.0/24 out-interface=bridge log=no log-prefi...

zhup

It works only from outside, but if I try to access my WAN from LAN it does not work unfortunately. [admin@MikroTik] > /ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; defconf: masquerade chain=srcnat action=masquerade out-interface=pppoe-out1 log=no log-prefix="" ...

zhup

What do you think about the rule below:

add chain=dstnat action=dst-nat dst-address=!192.168.88.1 dst-address-type=local dst-port=8888 protocol=tcp to-addresses=192.168.88.10 to-ports=8888

zhup

Hello,

I have read many posts but i am not able to handle it.
How to forward port if the wan address is dynamic (pppoe)?

add action=dst-nat chain=dstnat disabled=no dst-port=8888 in-interface=pppoe-out1 protocol=tcp to-addresses=192.168.88.10 to-ports=8888

It does not work.

Thank you in advance.

zhup

Hi,

is there the possibility to transfer the DDNS address between the devices?

xxx.sn.mynetname.net

zhup

Hello,

I'm not an expert but could you humour me and add dst-address=your_WAN_IP in the NAT rule.

I had a funny case where I had what you had, but it was giving me strange results. Putting in the dst-address worked for me at least.

I have dynamic WAN IP. What should I put in dst-address?

zhup

Hi,

I am trying to redirect ports 12000 and 8888 to IP 192.168.88.10.
What I am doing wrong?
Thank you in advance.

zhup

Since I remember, you must create one security profile for each wlan.

You are right. I found this option/solution last night.

Anyway, thank you.

zhup

Hi, I created two addtional virtual AP and now I have three wlans, but I am struggling with authentication (WPA2 PSK). After I put the authentication for two wlans I am not able to make it for third wlan. How to make the authentication in simple way for all three my wlans? Different passwords. Thank...

zhup

@ZeroByte - I almost forget to thank you for help and a lot of knowledge, and for your time.

On the weekend I will do some queue bandwidth tests.
Now I have again problem with second dhcp server.

zhup

Just so I'm certain - you did disable rule 4, right?

Does the queue show any traffic in the statistics tab?

Rule 4 is off.
Queue1 is showing the statistics.

zhup

It doesn't work if the limit is in the queue types - Total limit in pcq-download-default and pcq-uploud-default.

The limit only works in simple queue - queue1 (Max limit). But I am not sure if it will adapt the users brandwidth to the current situaction.

zhup

I only found as below. Has a significant impact? How to change it?

What units should I use? Megabit per second or Bits per second?

zhup

Are you using fast track? That skips queues. I do not know. According to this: http://wiki.mikrotik.com/index.php?title=Manual:Queues_-_PCQ_Examples and this: http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ ... you seem to be doing it right. If you want to make sure the queue is even seeing the p...

zhup

... /queue simple add name=queue1 queue=pcq-upload-default/pcq-download-default target=\ 192.168.88.0/23 Then modify the values in pcq-upload-default and pcq-download-default under queue types. Are you sure that I should modify the values in queue types? I put for test the values less (in total lim...

zhup

...
Try making a simple queue, make the target 192.168.88.0/23, in advanced set the queue types to your PCQ-upstream and PCQ-downstream queue types, and then edit the queue types' configurations to set the bandwidth constraints to be the way you like. ...

Could you please give me the example?

zhup

I took these queues from http://www.mikrotik.com/testdocs/ros/2.9/root/queue_content.php#6.54.6.3 (at the bottom of the page). http://s13.postimg.org/7m60h2d53/Untitled.png So the WAN interface should be ether1-gateway, but what about the "user's" interface? There are few and I use wlan1, ...

zhup

@chechito - thank you. @ZeroByte - thank you for detailed explanation. Now I meet the following problem: [admin@MikroTik] > /queue tree add name=Download parent=Local max-limit=46080000 input does not match any value of parent The whole rules: /ip firewall mangle add chain=forward src-address=192.16...

zhup

Hello, How to adapt the queue below to work with two network: 192.168.88.0/24 and 192.168.89/24? /ip firewall mangle add chain=forward src-address=192.168.88.0/24 \ action=mark-connection new-connection-mark=users-con /ip firewall mangle add connection-mark=users-con action=mark-packet \ new-packet-...

zhup

Is your problem solved?

It is solved. Thank you for your help.

zhup

What routerboard? hAP lite: RB941-2nD-TC I would have like below: wlan1 + brigde local - dhcp1 192.168.88.0/24 - this works (it is default setting). wlan2 - dhcp2 192.168.89.0/24 - this doesn't work and after I connected I received the address from the first pool (dhcp1) not dhcp2. If I will connec...

zhup

Hi, I created addtional wlan (wlan2, Virtual AP) and I trying to make work the second dhcp server. I would have like below: wlan1 + brigde local - dhcp1 192.168.88.0/24 - this works. wlan2 - dhcp2 192.168.89.0/24 - this doesn't work and after I connected I received the address from the first pool (d...

zhup

Hello
I brought RB941-2n.
But I noticed that I cannot connect with some (cheap) phones and tablets.
I’m not sure about the reason but there is an issue with this board and some phones.

RouterOS 6.32.3 ? Wlan 2GHz-B/G/N, 20/40MHz ?

zhup

I would be grateful for the answer of someone who does it.

zhup

Could you please help me in this topic?

zhup

Is it possible in RouterOS that I will create two vpn clients (e.g. openvpn) for only two individual users? The rest of the users should use the standard route.

zhup

Hi,

Could you please help me if in the RouterOs I will be able to create two vpn clients (e.g. openvpn) for two individual users.
The traffic of rest of the users should go according to regular route.

Thank you in advance.

zhup

Hi,

is the hAP lite enough powerful for internet link 50Mbit/s / 5Mbit/s used by the five home users?

Thank you in advance.

Search found 85 matches