Community discussions

Search found 66 matches

by riaanmaree
Tue May 08, 2018 8:13 pm
Forum: Wireless Networking
Topic: WAP60G 60 Ghz P2P Range and deployment advice
Replies: 22
Views: 3397

Re: WAP60G 60 Ghz P2P Range and deployment advice

We tested a WAP60G at the office to link gatehouse to the main building. This link is 50m and disconnects with the slightest sign of rain.

We replaced it with NSM5 again.

RBLHGG-60ad looks promising.

Also consider InfiNet's 60GHz equipment.

Sent from my SM-G950F using Tapatalk

by riaanmaree
Sun Apr 30, 2017 10:36 am
Forum: General
Topic: Where Can I Find Good Free Training Video/Articles on MTCNA Course?
Replies: 6
Views: 1915

Re: RE: Re: Where Can I Find Good Free Training Video/Articles on MTCNA Course?

Usually people lack general networking knowledge. Special mikrotik related things are understandable from documentation in other cases. If getting knowledge at official training is waste of time, everyone is free to get help in documentation, mum presentations and here of course. Google helps a lot...
by riaanmaree
Sun Apr 30, 2017 9:47 am
Forum: General
Topic: Where Can I Find Good Free Training Video/Articles on MTCNA Course?
Replies: 6
Views: 1915

Re: Where Can I Find Good Free Training Video/Articles on MTCNA Course?

I also believe Mikrotik will get more usage and better skilled users if Selfstudy training is released.

Most people in the IT field, like myself, find a training course to be slow paced and a waste of valuable time. MTCNA can be done in two days by some.

Sent from my SM-G925F using Tapatalk
by riaanmaree
Sat Jan 28, 2017 5:09 pm
Forum: Forwarding Protocols
Topic: Traffic Flow ( netflow) Autonomous system information
Replies: 44
Views: 12260

Re: Traffic Flow ( netflow) Autonomous system information

Yup. Still waiting for this feature...

Sent from my SM-G925F using Tapatalk
by riaanmaree
Sat Jan 28, 2017 5:07 pm
Forum: General
Topic: Radius Attribute for Local Address in PPPoE Profiles
Replies: 13
Views: 4464

Re: Radius Attribute for Local Address in PPPoE Profiles

This would be so simple to implement for Mikrotik. 1 or 2 days work at most.

Feels like bigger operators are being ignored...

Sent from my SM-G925F using Tapatalk
by riaanmaree
Sat Jun 18, 2016 7:07 pm
Forum: General
Topic: Feature request for v7.x
Replies: 269
Views: 63699

Re: Feature request for v7.x

AS & BGP info in Netflow v5 export.

Sent from my SM-G925F using Tapatalk
by riaanmaree
Thu Jun 16, 2016 11:18 pm
Forum: General
Topic: Feature request: More RADIUS reply attributes
Replies: 5
Views: 1909

Re: Feature request: More RADIUS reply attributes

Any of this implemented yet?

Sent from my SM-G925F using Tapatalk
by riaanmaree
Thu Jun 16, 2016 11:17 pm
Forum: Forwarding Protocols
Topic: Traffic Flow ( netflow) Autonomous system information
Replies: 44
Views: 12260

Re: Traffic Flow ( netflow) Autonomous system information

We also need this

Sent from my SM-G925F using Tapatalk
by riaanmaree
Mon Mar 14, 2016 11:37 am
Forum: General
Topic: Radius Attribute for Local Address in PPPoE Profiles
Replies: 13
Views: 4464

Re: Radius Attribute for Local Address in PPPoE Profiles

Still not possible. We have to make use of Secrets and different PPP Profiles across over 70x routers to do what we need to do without this feature. We would much rather prefer to assign local addresses, DNS, profile, etc using RADIUS replies...
by riaanmaree
Tue Sep 08, 2015 12:19 am
Forum: General
Topic: Need help with CRS and VLAN configuration
Replies: 1
Views: 428

Need help with CRS and VLAN configuration

We're setting up CRS switches in one of the DCs where we peer with multiple other networks, to increase the number of Ethernet and Fibre interfaces available on our CCR1072 routers. I'm having a problem with vlan's, trunking and Q-in-Q and hope there's someone that can assist with our configuration....
by riaanmaree
Fri Nov 21, 2014 12:10 am
Forum: General
Topic: Feature request: More RADIUS reply attributes
Replies: 5
Views: 1909

Feature request: More RADIUS reply attributes

Add more RADIUS-Attributes for use with dynamic interfaces such as pptp/pppoe/etc:

- VRF/routing-table
- local-address
- dns-server
- ppp-profile
by riaanmaree
Fri Nov 21, 2014 12:06 am
Forum: General
Topic: Feature request for v7.x
Replies: 269
Views: 63699

Re: Feature request for v7.x

I also vote for more Radius-Attributes/Replies such as:
- local-address
- dns-server
- VRF/routing-table
by riaanmaree
Fri Nov 21, 2014 12:02 am
Forum: Forwarding Protocols
Topic: vrf and dynamic interfaces
Replies: 10
Views: 3678

Re: vrf and dynamic interfaces

I also vote for the radius-attribute like 'Mikrotik-VRF' or 'Routing-Mark'. We need it for PPPoE.
by riaanmaree
Thu Nov 20, 2014 11:59 pm
Forum: General
Topic: Using MKT as a VPN SERVER with RADIUS and VRF
Replies: 3
Views: 1016

Re: Using MKT as a VPN SERVER with RADIUS and VRF

We need a proper RADIUS reply attribute to set the VRF to add dynamic interfaces to. Cisco supports this.
by riaanmaree
Thu Nov 20, 2014 11:49 pm
Forum: General
Topic: Radius Attribute for Local Address in PPPoE Profiles
Replies: 13
Views: 4464

Re: Radius Attribute for Local Address in PPPoE Profiles

We also need this feature. RADIUS replies required: - local-address - dns-server - reply to add dynamic interface to a specific VRF routing table to create L3VPNs - ppp-profile We are actally at a stage of having to make a decision if we need to change router brands at all our highsites because of t...
by riaanmaree
Thu Apr 18, 2013 10:34 pm
Forum: General
Topic: SRC NAT for output chain??
Replies: 2
Views: 957

Re: SRC NAT for output chain??

Oh yes! That'll work. Thanks!
by riaanmaree
Thu Apr 18, 2013 9:51 am
Forum: General
Topic: SRC NAT for output chain??
Replies: 2
Views: 957

SRC NAT for output chain??

Have have recently been assigned public IPs to our network and are using them for customers. We are still using a lot of private IPs inside our network, especially between highsites. We have a SRC NAT rule to still Masquerade all traffic leaving our network and coming from the internal private IPs. ...
by riaanmaree
Sat Dec 10, 2011 7:18 am
Forum: The Dude
Topic: Using the Dude to Remote Backup RouterOS Devices
Replies: 11
Views: 5215

Re: Using the Dude to Remote Backup RouterOS Devices

Any idea when this will be implemented?
by riaanmaree
Fri Jul 29, 2011 1:30 am
Forum: General
Topic: 2 3G modems
Replies: 3
Views: 687

Re: 2 3G modems

Will this work with USB 3G modems as well?
Not sure. We normally connect ethernet 3G routers (with USB dongle) onto the ethernet ports of a Routerboard.
by riaanmaree
Fri Jul 29, 2011 1:18 am
Forum: Forwarding Protocols
Topic: BGP and Route Reflection
Replies: 4
Views: 1944

Re: BGP and Route Reflection

I did not realize there's already an IGP (OSPF/RIP/etc) set up. Thanks.
by riaanmaree
Sat Jul 23, 2011 1:27 am
Forum: General
Topic: 2 3G modems
Replies: 3
Views: 687

Re: 2 3G modems

Do you have 3G modems/routers with ethernet ports? If you do, set them up as follow for equal cost routing (not the best way to use multiple WAN links, but a good place to start): 3G router #1: Ethernet IP: 192.168.254.1, 255.255.255.0 Enable NAT Plug into ether1 of Routerboard 3G router #2: Etherne...
by riaanmaree
Sat Jul 23, 2011 1:14 am
Forum: General
Topic: Routing Query
Replies: 2
Views: 534

Re: Routing Query

A router does routing on it's own. If you have two routers, you have two devices that can do routing...

What do you need to set up?
by riaanmaree
Wed Jul 20, 2011 2:07 am
Forum: Forwarding Protocols
Topic: BGP and Route Reflection
Replies: 4
Views: 1944

Re: BGP and Route Reflection

Route reflectors must be fully meshed between every other route reflector.
If that statement is true, please explain why at http://wiki.mikrotik.com/wiki/BGP_based_VPLS R5 could act as the route reflector if R1 and R2 are not connected directly to it? Or am I missing something???
by riaanmaree
Wed May 11, 2011 5:46 pm
Forum: Scripting
Topic: ChangeIP and Mikrotik 5.0
Replies: 22
Views: 9186

Re: ChangeIP and Mikrotik 5.0

I need the same... Before I renew my account at ChangeIP this needs to work.
by riaanmaree
Wed Oct 13, 2010 10:01 pm
Forum: General
Topic: Masquerade to dual WAN ports sets wrong source IP
Replies: 12
Views: 4927

Re: Masquerade to dual WAN ports sets wrong source IP

For everyone's info. The upgrade to RouterOS 5.0rc1 did not fix the problem. I've sent a new supout.rif to Mikrotik Support for further inspection. They also asked me to use Mangle and routing marks to route traffic over other connection, but I have tried this and it did not work. Will keep everyone...
by riaanmaree
Tue Oct 12, 2010 12:24 pm
Forum: General
Topic: Masquerade to dual WAN ports sets wrong source IP
Replies: 12
Views: 4927

Re: Masquerade to dual WAN ports sets wrong source IP

I know SIP headers include the SRC ADDRESS, but we're using IAX2 and not SIP. As far as I know IAX2 peers reply on the actual source address and not to any IP/Hostname in the packets itself. So we're using Masquerade (and tried src-nat specifying source IP to use) on the VoIP only PPPoE interface. T...
by riaanmaree
Mon Oct 11, 2010 9:23 am
Forum: General
Topic: Winbox don't connect - Retrieving preferences from
Replies: 5
Views: 2895

Re: Winbox don't connect - Retrieving preferences from

Try downgrading RouterOS to older version and test again. If you still have the same problem, take it back to your distributor. They should swop it out if they see the same problem.
by riaanmaree
Sun Oct 10, 2010 10:23 pm
Forum: General
Topic: Masquerade to dual WAN ports sets wrong source IP
Replies: 12
Views: 4927

Re: Masquerade to dual WAN ports sets wrong source IP

Yup... Looks like a bug, yes. Did it on v4.8 and v4.11. Will mail them.
by riaanmaree
Sun Oct 10, 2010 9:44 pm
Forum: General
Topic: remote logging - is there an option to buffer?
Replies: 5
Views: 764

Re: remote logging - is there an option to buffer?

Syslog uses UDP, not TCP. So the router has no way of knowing the log reached the syslog server on the other side.
by riaanmaree
Sun Oct 10, 2010 9:37 pm
Forum: General
Topic: Single Mikrotik connecting 2 subnets can't get to the intern
Replies: 1
Views: 612

Re: Single Mikrotik connecting 2 subnets can't get to the in

Where's your internet connection plugged in to? The best would be to have your internet connection on another port on the Mikrotik. Make sure all subnets' default gateway is the IP of the mikrotik port on their subnet. Make sure you have a masquerade rule that include all source ranges, or 3 separat...
by riaanmaree
Sun Oct 10, 2010 9:30 pm
Forum: The Dude
Topic: probe for Airmax Ubiquity device?
Replies: 2
Views: 1710

Re: probe for Airmax Ubiquity device?

Ubiquity devices support SNMP. You'll get everything through SNMP.
by riaanmaree
Sun Oct 10, 2010 9:29 pm
Forum: General
Topic: Winbox don't connect - Retrieving preferences from
Replies: 5
Views: 2895

Re: Winbox don't connect - Retrieving preferences from

What happens if you connect using the MAC address?
What about connecting to another ethernet port?
Another PC?
by riaanmaree
Sun Oct 10, 2010 9:28 pm
Forum: The Dude
Topic: 750G with Dude package.
Replies: 2
Views: 1129

Re: 750G with Dude package.

In Winbox go to 'Files' and check how much memory/drive space is available. If nothing is available, it could cause some issues. We saw that on routers running User Manager and the memory being filled up by logs.
by riaanmaree
Sun Oct 10, 2010 9:24 pm
Forum: Wireless Networking
Topic: Which 3 miniPCI will work OK with RB433AH.
Replies: 14
Views: 3412

Re: Which 3 miniPCI will work OK with RB433AH.

5.X GHz does not go through trees as good as 2.4GHz. Using MIMO would also help. But the 802.11n on the more crowded 2.4GHz spectrum needs 80% of the spectum to work properly. I would suggest using a 10MHz or 20MHz MIMO on 2.4GHz. Ubiquity or Mikrotik miniPCI cards would be fine. Also use narrower s...
by riaanmaree
Sun Oct 10, 2010 9:18 pm
Forum: General
Topic: Masquerade to dual WAN ports sets wrong source IP
Replies: 12
Views: 4927

Re: Masquerade to dual WAN ports sets wrong source IP

Anyone have a solution for me?
by riaanmaree
Fri Oct 08, 2010 12:50 am
Forum: General
Topic: Masquerade to dual WAN ports sets wrong source IP
Replies: 12
Views: 4927

Masquerade to dual WAN ports sets wrong source IP

We have a few customers that have two DSL lines. One for VoIP and one for everything else. This gives better voice quality. The problem is that the masquerade rule on the VoIP PPPoE client interface should set the source IP to the IP that's on that interface. Instead we're seeing a lot of traffic go...
by riaanmaree
Wed Oct 06, 2010 11:19 pm
Forum: General
Topic: Getting ovpn-client to work over a pppoe connection
Replies: 3
Views: 1381

Re: Getting ovpn-client to work over a pppoe connection

We had the same problem with OVPN when using the wrong "Auth" and/or "Cipher". It connected, but could not ping at all.
by riaanmaree
Wed Oct 06, 2010 11:13 pm
Forum: General
Topic: Limited bandwidth problem
Replies: 10
Views: 1122

Re: Limited bandwidth problem

Yes. ISP limiting would be my guess as well.

Try doing a multi-threaded connection/upload. Most ISPs' shaping will not limit by source IP, but rather per TCP/UDP connection.
by riaanmaree
Wed Oct 06, 2010 11:10 pm
Forum: Wireless Networking
Topic: Setup a Mikrotik CPE so that it acts as a cpe plus a link ?
Replies: 4
Views: 1277

Re: Setup a Mikrotik CPE so that it acts as a cpe plus a lin

Otherwise, you may be able to do something with multiple 0.0.0.0 gateways with different metrics.
marklodge; that would be the first place to start before going too advanced.
by riaanmaree
Wed Oct 06, 2010 11:06 pm
Forum: Wireless Networking
Topic: hide routeros version broadcasting
Replies: 16
Views: 4458

Re: hide routeros version broadcasting

normis, is this only the case with nv2 or nsteme enabled?
by riaanmaree
Mon Oct 04, 2010 1:52 pm
Forum: Wireless Networking
Topic: Setup a Mikrotik CPE so that it acts as a cpe plus a link ?
Replies: 4
Views: 1277

Re: Setup a Mikrotik CPE so that it acts as a cpe plus a lin

Do I understand correct?

You want the CPE to use your network as the primary connection and the ADSL on their premises as the backup/failover.

Other customers/CPEs should also use the ADSL at the highsite as the primary link and the one on the left of the image as the failover?
by riaanmaree
Mon Oct 04, 2010 1:38 pm
Forum: General
Topic: Limited bandwidth problem
Replies: 10
Views: 1122

Re: Limited bandwidth problem

When transferring to the NAT'ed machines. Do you have FTP servers running on them with port forwarding set up to reach them? Or did you mean that you're opening a ftp client session from a NAT'ed PC and downloading to it? Using NAT tells me you're sharing one public IP on a broadband connection. Whe...
by riaanmaree
Mon Oct 04, 2010 1:32 pm
Forum: Forwarding Protocols
Topic: rout two networks
Replies: 1
Views: 848

Re: rout two networks

I'm not sure what you mean by "see the server", but you probably can't ping the server from the host in the other subnet (ip range). The reason for this is because the PC trying to access the server sees that the IP you're trying to access is not in any of it's own subnets and passes it on to it's d...
by riaanmaree
Mon Oct 04, 2010 1:21 pm
Forum: Wireless Networking
Topic: hide routeros version broadcasting
Replies: 16
Views: 4458

Re: hide routeros version broadcasting

How is it broadcasting your RouterOs version? If you're taking about the Neighbour discovery function, simply disable discovery on the interfaces that you do not want to be discovered on. Go to IP > Neighbours > Interfaces and disable the interfaces you want to be discovered on. Make sure you know t...
by riaanmaree
Mon Oct 04, 2010 1:17 pm
Forum: Beginner Basics
Topic: Howto forward all traffic on a WAN-interface
Replies: 2
Views: 745

Re: Howto forward all traffic on a WAN-interface

What do you mean by "I do not want the interface to grab an IP"? Are you only running IP traffic on port 5? What device(s) are connected to port 5? I recommend adding an IP and DHCP to port 5 in a unique IP range then add a DST-NAT firewall rule to all traffic matching that source range to dst-nat i...
by riaanmaree
Mon Oct 04, 2010 1:11 pm
Forum: General
Topic: Getting ovpn-client to work over a pppoe connection
Replies: 3
Views: 1381

Re: Getting ovpn-client to work over a pppoe connection

You did not enable 'set default route' on the OVPN connection, which is fine.

After establishing the OVPN connection, check IP > Addresses to make sure you do not have the same IP range on different interfaces. All ranges/subnets need to be unique.
by riaanmaree
Mon Oct 04, 2010 12:12 pm
Forum: General
Topic: Compatibility
Replies: 1
Views: 426

Re: Compatibility

Should be fine when using X86 RouterOs.
by riaanmaree
Mon Oct 04, 2010 12:11 pm
Forum: General
Topic: PPoE-client can not connect
Replies: 1
Views: 1015

Re: PPoE-client can not connect

Please post the output of '/interface pppoe-client export' here. Remember to remove your ISP's password.

Tip: Do not enter a service name in the RouterOS pppoe client settings if your ISP do not require you to.
by riaanmaree
Mon Oct 04, 2010 11:46 am
Forum: General
Topic: Voice (VOIP) issues
Replies: 4
Views: 1745

Re: Voice (VOIP) issues

Have you tested the Cisco router yet? I'd like to know if it made a difference. Choppy voice calls it usually not because of speed/throughput problems, but because of jitter (differences in ping/latency). Try running pings to the different customers and other end-points on the network while there's ...
by riaanmaree
Mon Oct 04, 2010 11:41 am
Forum: General
Topic: latency in PPPoE connections
Replies: 3
Views: 873

Re: latency in PPPoE connections

We had the same problem when using encryption with PPPoE sessions. When disabling encryption it resolved it for us. We used a RB450G as the PPPoE server and Ubiquity devices as clients.
by riaanmaree
Sun Jul 04, 2010 9:33 pm
Forum: General
Topic: Share IP pool between multiple Routers
Replies: 3
Views: 885

Share IP pool between multiple Routers

Because a limited number of IPv4 addresses still available and the reluctancy of upstream ISPs handing out hundreds op public IPv4 adresses, we would like to set up a central IP pool for our whole network or segments op our network to be used on PPPoE. This means we do not have to guess the number o...
by riaanmaree
Tue Jun 08, 2010 12:49 am
Forum: Beginner Basics
Topic: Configure RB493 as "smart switch" with redundant paths?
Replies: 7
Views: 1757

Re: Configure RB493 as "smart switch" with redundant paths?

Let me understand your setup; Do you have the following: RB493 (A) ether1 -> AP (A) (bridged) -> Client (A) (bridged) -> RB493 (B) ether1 RB493 (A) ether2 -> AP (B) (bridged) -> Client (B) (bridged) -> RB493 (B) ether2 OR RB493 (A) ether1 -> AP (A) (bridged) -> Multiple clients RB493 (A) ether2 -> A...
by riaanmaree
Mon Jun 07, 2010 11:09 pm
Forum: General
Topic: Firewall Rules Problem
Replies: 1
Views: 597

Re: Firewall Rules Problem

Glad we could help :)
by riaanmaree
Mon Jun 07, 2010 11:06 pm
Forum: Beginner Basics
Topic: Configure RB493 as "smart switch" with redundant paths?
Replies: 7
Views: 1757

Re: Configure RB493 as "smart switch" with redundant paths?

I might be wrong, but having two APs on the same network (frequency) will cause interference between the two. One will have to be powered off and switched on some how if the one goes down. It should be easy on a wired network to do the automatic failover, but I'm not so sure about on wireless using ...
by riaanmaree
Mon Jun 07, 2010 11:01 pm
Forum: Wireless Networking
Topic: AP transmitting broadcast packets
Replies: 1
Views: 481

Re: AP transmitting broadcast packets

1 packet are sent over the air and all clients in same subnet accepts the packet. Clients in different subnet does not accept or reply to the packet. They just ignore it.
by riaanmaree
Mon Jun 07, 2010 10:56 pm
Forum: General
Topic: how can i show to all my customers when internet is down?
Replies: 30
Views: 4163

Re: how can i show to all my customers when internet is down

Just some advice: This all sounds and look very cool, but just make sure that you are indeed aware of the outage when it happens by monitoring it with The Dude or something like that. Users might be patient for days before phoning when they see a message saying "we are aware of the problem", but you...
by riaanmaree
Mon Jun 07, 2010 10:45 pm
Forum: General
Topic: OpenVPN client
Replies: 18
Views: 3782

Re: OpenVPN client

Glad I could help
:)
by riaanmaree
Mon Jun 07, 2010 10:00 pm
Forum: General
Topic: OpenVPN client
Replies: 18
Views: 3782

Re: OpenVPN client

I can ping it from mikrotik, but not from local network computers even with following route /ip route add gateway=10.88.0.1 dst-address=10.88.0.0/24 The problem is that the PCs on the remote network where the OpenVPN server is does not know where to get hold of your home network IP range. (1) Eithe...
by riaanmaree
Sat Nov 14, 2009 6:19 pm
Forum: The User Manager
Topic: Username without password using Hotspot
Replies: 14
Views: 20068

Re: Username without password using Hotspot

Thanks for the advice!
by riaanmaree
Fri Nov 13, 2009 11:53 am
Forum: The User Manager
Topic: Username without password using Hotspot
Replies: 14
Views: 20068

Re: Username without password using Hotspot

Thanks. That will work 100% for me.

Could you paste the HTML here to hide the password field if it has for example '12345' as the password?


Thank you
by riaanmaree
Fri Nov 13, 2009 12:40 am
Forum: The User Manager
Topic: Username without password using Hotspot
Replies: 14
Views: 20068

Username without password using Hotspot

Sorry for asking before trying; We would like to use Usermanager and Hotspot at various sites but generate vouchers. The vouchers will not be a username and password, but just a single 'voucher' field. Would we be able to create users (random voucher numbers) in User Manager without passwords and ed...
by riaanmaree
Fri Aug 28, 2009 2:11 pm
Forum: RouterBOARD hardware
Topic: possible bug in 3.28 + rb532
Replies: 1
Views: 521

Re: possible bug in 3.28 + rb532

I have also found that I cannot DST-NAT port 80 to an internal IP/host since upgrading to v3.28. All other ports are working fine with the exact same dst-nat rule. It worked 100% before upgrading. I think it used to be on v3.23 (may be wrong) --- /ip firewall nat add action=dst-nat chain=dstnat comm...
by riaanmaree
Thu Apr 10, 2008 1:53 pm
Forum: General
Topic: PPPoE LCP TIMEOUT
Replies: 3
Views: 3469

Re: PPPoE LCP TIMEOUT

I get the exact same problem with a different setup. We have a customer with a MikroTik RouterBoard 532 as connecting via a PPTP VPN to RouterOs v3.4 (Intel Hardware) at our office. It have been working for months until last night. Other customers can still connect to the PPTP VPN Server, but not th...
by riaanmaree
Thu Dec 06, 2007 8:56 am
Forum: General
Topic: Bridging Novell Networking
Replies: 4
Views: 761

Re: Bridging Novell Networking

To be honest with you, I really have no idea. The server runs on DOS and the Workstations on Windows 98 (very old setup).

Does the Novell version make a difference?

How can I check the version? I generally do not work on Novell at all.
by riaanmaree
Tue Dec 04, 2007 12:52 pm
Forum: General
Topic: Bridging Novell Networking
Replies: 4
Views: 761

Bridging Novell Networking

We have a customer using a combination of new and very old software. They are in the same building as another company. Each company have their own DHCP, DNS server, Gateway and IP range. For this the two networks have to be isolated from each other. Both companies however use the same Novell server ...