Community discussions

MUM Europe 2020

Search found 29 matches

by telnetpr
Mon Nov 28, 2016 12:39 am
Forum: General
Topic: Feature Req: IKEv2 server and client
Replies: 291
Views: 82557

Re: Feature Req: IKEv2 server and client

Anything yet? This post is from last year. Please we need it @mikrotik
by telnetpr
Fri Jan 29, 2016 5:47 pm
Forum: Forwarding Protocols
Topic: How to block ip address in MT
Replies: 19
Views: 82728

Re: How to block ip address in MT

Did you've tried enabling the rule? i mean disabled=no add action=drop chain=input disabled=yes dst-address=10.77.0.2 protocol=icmp \ src-address=10.76.14.13 Hi guys, I have a problem and maybe you can help me: I have a MK that is doing PPPoE server. It releases an IP address NAT 10.76.14.0/24. The ...
by telnetpr
Mon Jan 18, 2016 2:47 pm
Forum: Beginner Basics
Topic: Cannot route LAN traffic out WAN
Replies: 9
Views: 2298

Re: Cannot route LAN traffic out WAN

Thanks Yes i keep certain subnets off the internet, and i do that because is the way to allow only the subnets you want to be "natted" It's better to block traffic than to just break it by breaking layer 3..... (see below) Oh interesting, I never thought of doing that. Do you do this so you can keep...
by telnetpr
Tue Jan 12, 2016 2:40 pm
Forum: Beginner Basics
Topic: Cannot route LAN traffic out WAN
Replies: 9
Views: 2298

Re: Cannot route LAN traffic out WAN

Yes i keep certain subnets off the internet, and i do that because is the way to allow only the subnets you want to be "natted" Thank you for the help! It was in fact the masquerading that was missing. From my config you can see I configured it (since I read about it somewhere) but it looks like I n...
by telnetpr
Wed Dec 23, 2015 8:09 pm
Forum: Beginner Basics
Topic: Cannot route LAN traffic out WAN
Replies: 9
Views: 2298

Re: Cannot route LAN traffic out WAN

Thank you for the help! It was in fact the masquerading that was missing. From my config you can see I configured it (since I read about it somewhere) but it looks like I never actually enabled it. Once the rule was enabled then everything worked great. Telnetpr, while you're not wrong, this config...
by telnetpr
Wed Dec 23, 2015 7:18 pm
Forum: Beginner Basics
Topic: Routing based on dst-address
Replies: 3
Views: 604

Re: Routing based on dst-address

yes, I have this route: 0 A S dst-address=172.30.0.0/16 gateway=172.30.x.x gateway-status=172.30.x.x reachable via ether1-gateway distance=1 scope=30 target-scope=10 routing-mark=to-172 Try your masquerade only with the source address. And see what happen chain=srcnat action=masquerade src-address=...
by telnetpr
Wed Dec 23, 2015 7:14 pm
Forum: Beginner Basics
Topic: Access to WAN IP from LAN
Replies: 20
Views: 18133

Re: Access to WAN IP from LAN

Select your external interface or in. Interface
by telnetpr
Wed Dec 23, 2015 4:41 pm
Forum: Beginner Basics
Topic: Routing based on dst-address
Replies: 3
Views: 604

Re: Routing based on dst-address

Did you create the static route with the new routing mark ??
by telnetpr
Wed Dec 23, 2015 4:38 pm
Forum: Beginner Basics
Topic: Access to WAN IP from LAN
Replies: 20
Views: 18133

Re: Access to WAN IP from LAN

In the DST NAT RULE you need to specify your public IP address in the dst-address
by telnetpr
Wed Dec 23, 2015 4:35 pm
Forum: Beginner Basics
Topic: Transmit loop detected
Replies: 24
Views: 11903

Re: Transmit loop detected

Verify in the bridge settings in STP TAB is set to NONE, default is RSTP in bridge settings in STP tab i set NONE, yes. But it not resolved the problem. I understand that the loop can not be in my network, in this case tunnel go down only when connected to an access point wi-fi customers. Run a deb...
by telnetpr
Tue Dec 22, 2015 7:44 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

This are Public IP Address
https://192.254.6.50:8080 it open my monitoring map

try this...
ip firewall nat add chain=dstnat protocol=tcp dst-port=81 action=dst-nat to-addresses=192.168.0.5 to-ports=81
by telnetpr
Tue Dec 22, 2015 6:46 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

That's the way you want to use it... it works ahead port forwards... For example i can use my public ip address to access my services inside my network using port forwards.. For example: https://192.254.6.50:8080 it open my monitoring map https://192.254.6.50:8081 it open my UBiquiti Air Control Ser...
by telnetpr
Tue Dec 22, 2015 6:36 pm
Forum: Beginner Basics
Topic: How do I combine two separate networks from two different ISP?
Replies: 1
Views: 560

Re: How do I combine two separate networks from two different ISP?

You mean to create a ptp link between 2 routers with differents isp? You can use IPsec for security but cant use OSPF because IPSec dont allow multicast, or EoIP Tunnels.
by telnetpr
Tue Dec 22, 2015 6:27 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

in winbox you can do this like this
by telnetpr
Tue Dec 22, 2015 6:17 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

You need port forwards to forward the traffic you want using the public ip. You need to determine which port you need to forward for example PC 1 - 192.168.1.100 PORT: 5050 PC 2 - 192.168.1.101 PORT: 5051 and so on. You need to configure the devices you want to access with an static ip address. Then...
by telnetpr
Tue Dec 22, 2015 5:17 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

i dont really understand your needs

-You are at your home and you want to see your cameras using the private ip address? If this is the problem then you need a VPN(PPTP).

- If you are in your home and want to see your cameras using your public ip address then you just need a port forward.
by telnetpr
Tue Dec 22, 2015 5:12 pm
Forum: Beginner Basics
Topic: Access to WAN IP from LAN
Replies: 20
Views: 18133

Re: Access to WAN IP from LAN

I can use this port forward using my public ip from the inside of my network.
by telnetpr
Tue Dec 22, 2015 5:10 pm
Forum: Beginner Basics
Topic: Access to WAN IP from LAN
Replies: 20
Views: 18133

Re: Access to WAN IP from LAN

Well, a simple port forward should work...
by telnetpr
Tue Dec 22, 2015 5:06 pm
Forum: Beginner Basics
Topic: Seeing My CCTV from inside the network
Replies: 12
Views: 1612

Re: Seeing My CCTV from inside the network

If you want to see your CCTV from the inside you just need your private ip address of your DVR, if you want to see your CCTV from outside your network then you need to setup your port forwards..

So what exactly you need?
by telnetpr
Tue Dec 22, 2015 4:39 pm
Forum: Beginner Basics
Topic: LAN with Public and Private IP Address
Replies: 2
Views: 519

Re: LAN with Public and Private IP Address

i think you want to do is a 1 to 1 NAT ?

Or use a different public ip address for that private range range?
by telnetpr
Tue Dec 22, 2015 4:30 pm
Forum: Beginner Basics
Topic: Cannot route LAN traffic out WAN
Replies: 9
Views: 2298

Re: Cannot route LAN traffic out WAN

You need to configure a source address in your NAT RULE, like this
ip firewall nat add chain=srcnat src-address=192.168.1.0/24 action=masquerade
by telnetpr
Tue Dec 22, 2015 4:23 pm
Forum: Beginner Basics
Topic: Dual Wan and Port Forwarding
Replies: 1
Views: 575

Re: Dual Wan and Port Forwarding

the external ip address is configured in the router itself or is in another device? The troubleshooting for this is: telnet from the outside to that port Example: telnet 69.69.69.69 943 And telnet from inside to 192.18.1.101 943? whats the output ? Do you see a blank window? or just say the connecti...
by telnetpr
Tue Dec 22, 2015 3:28 pm
Forum: Beginner Basics
Topic: Policy based routing - what's wrong?
Replies: 4
Views: 1824

Re: Policy based routing - what's wrong?

Try this ip firewall mangle add chain=prerouting src-address=192.168.0.0/16 action=mark-routing new-routing-mark=TEST And the route ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 distance=2 routing-mark=TEST IP ADDRESSES ARE JUST FOR EXAMPLES YOU JUST USE YOUR GATEWAY AND IP ADDRESS BLOCKS A...
by telnetpr
Tue Dec 22, 2015 2:53 pm
Forum: Beginner Basics
Topic: Transmit loop detected
Replies: 24
Views: 11903

Re: Transmit loop detected

Verify in the bridge settings in STP TAB is set to NONE, default is RSTP
by telnetpr
Mon Dec 21, 2015 10:48 pm
Forum: General
Topic: Forgot My Mikrotik Winbox Password and Need to Recover it without Backup Configuration File
Replies: 7
Views: 18452

Re: Forgot My Mikrotik Winbox Password and Need to Recover it without Backup Configuration File

I forgot my Mikrotik Winbox password and I do not have a backup configuration file either. Can some please tell me how can I recover it in this scenario as I do not want to lose my configuration. There's no way, the only thing you can do is reverse engineering to write the current configuration and...
by telnetpr
Sat Dec 19, 2015 11:28 pm
Forum: Forwarding Protocols
Topic: How to route route via two different links between common end points
Replies: 2
Views: 951

Re: How to route route via two different links between common end points

in my opinion in your design right now policy routing is the best option
by telnetpr
Sat Dec 19, 2015 11:16 pm
Forum: Forwarding Protocols
Topic: Assign public IP's to computers in LAN
Replies: 10
Views: 2504

Re: Assign public IP's to computers in LAN

What about bridging your WAN with your lan port?
by telnetpr
Fri Dec 18, 2015 9:03 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29645

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Same problem with a Air Grid and a CC, i change Flow Control to ON in the CC interface and the packet loss stop locally and it stop the warnings.