MikroTik

riaanmaree

We tested a WAP60G at the office to link gatehouse to the main building. This link is 50m and disconnects with the slightest sign of rain.

We replaced it with NSM5 again.

RBLHGG-60ad looks promising.

Also consider InfiNet's 60GHz equipment.

Sent from my SM-G950F using Tapatalk

riaanmaree

Usually people lack general networking knowledge. Special mikrotik related things are understandable from documentation in other cases. If getting knowledge at official training is waste of time, everyone is free to get help in documentation, mum presentations and here of course. Google helps a lot...

riaanmaree

I also believe Mikrotik will get more usage and better skilled users if Selfstudy training is released.

Most people in the IT field, like myself, find a training course to be slow paced and a waste of valuable time. MTCNA can be done in two days by some.

Sent from my SM-G925F using Tapatalk

riaanmaree

Yup. Still waiting for this feature...

Sent from my SM-G925F using Tapatalk

riaanmaree

This would be so simple to implement for Mikrotik. 1 or 2 days work at most.

Feels like bigger operators are being ignored...

Sent from my SM-G925F using Tapatalk

riaanmaree

AS & BGP info in Netflow v5 export.

Sent from my SM-G925F using Tapatalk

riaanmaree

Any of this implemented yet?

Sent from my SM-G925F using Tapatalk

riaanmaree

We also need this

Sent from my SM-G925F using Tapatalk

riaanmaree

Still not possible. We have to make use of Secrets and different PPP Profiles across over 70x routers to do what we need to do without this feature. We would much rather prefer to assign local addresses, DNS, profile, etc using RADIUS replies...

riaanmaree

We're setting up CRS switches in one of the DCs where we peer with multiple other networks, to increase the number of Ethernet and Fibre interfaces available on our CCR1072 routers. I'm having a problem with vlan's, trunking and Q-in-Q and hope there's someone that can assist with our configuration....

riaanmaree

Add more RADIUS-Attributes for use with dynamic interfaces such as pptp/pppoe/etc:

- VRF/routing-table
- local-address
- dns-server
- ppp-profile

riaanmaree

I also vote for more Radius-Attributes/Replies such as:
- local-address
- dns-server
- VRF/routing-table

riaanmaree

I also vote for the radius-attribute like 'Mikrotik-VRF' or 'Routing-Mark'. We need it for PPPoE.

riaanmaree

We need a proper RADIUS reply attribute to set the VRF to add dynamic interfaces to. Cisco supports this.

riaanmaree

We also need this feature. RADIUS replies required: - local-address - dns-server - reply to add dynamic interface to a specific VRF routing table to create L3VPNs - ppp-profile We are actally at a stage of having to make a decision if we need to change router brands at all our highsites because of t...

riaanmaree

Oh yes! That'll work. Thanks!

riaanmaree

Have have recently been assigned public IPs to our network and are using them for customers. We are still using a lot of private IPs inside our network, especially between highsites. We have a SRC NAT rule to still Masquerade all traffic leaving our network and coming from the internal private IPs. ...

riaanmaree

Any idea when this will be implemented?

riaanmaree

Will this work with USB 3G modems as well?

Not sure. We normally connect ethernet 3G routers (with USB dongle) onto the ethernet ports of a Routerboard.

riaanmaree

I did not realize there's already an IGP (OSPF/RIP/etc) set up. Thanks.

riaanmaree

Do you have 3G modems/routers with ethernet ports? If you do, set them up as follow for equal cost routing (not the best way to use multiple WAN links, but a good place to start): 3G router #1: Ethernet IP: 192.168.254.1, 255.255.255.0 Enable NAT Plug into ether1 of Routerboard 3G router #2: Etherne...

riaanmaree

A router does routing on it's own. If you have two routers, you have two devices that can do routing...

What do you need to set up?

riaanmaree

Route reflectors must be fully meshed between every other route reflector.

If that statement is true, please explain why at http://wiki.mikrotik.com/wiki/BGP_based_VPLS R5 could act as the route reflector if R1 and R2 are not connected directly to it? Or am I missing something???

riaanmaree

I need the same... Before I renew my account at ChangeIP this needs to work.

riaanmaree

For everyone's info. The upgrade to RouterOS 5.0rc1 did not fix the problem. I've sent a new supout.rif to Mikrotik Support for further inspection. They also asked me to use Mangle and routing marks to route traffic over other connection, but I have tried this and it did not work. Will keep everyone...

riaanmaree

I know SIP headers include the SRC ADDRESS, but we're using IAX2 and not SIP. As far as I know IAX2 peers reply on the actual source address and not to any IP/Hostname in the packets itself. So we're using Masquerade (and tried src-nat specifying source IP to use) on the VoIP only PPPoE interface. T...

riaanmaree

Try downgrading RouterOS to older version and test again. If you still have the same problem, take it back to your distributor. They should swop it out if they see the same problem.

riaanmaree

Yup... Looks like a bug, yes. Did it on v4.8 and v4.11. Will mail them.

riaanmaree

Syslog uses UDP, not TCP. So the router has no way of knowing the log reached the syslog server on the other side.

riaanmaree

Have a look at http://www.mikrotik.com/testdocs/ros/3. ... onding.php

riaanmaree

Where's your internet connection plugged in to? The best would be to have your internet connection on another port on the Mikrotik. Make sure all subnets' default gateway is the IP of the mikrotik port on their subnet. Make sure you have a masquerade rule that include all source ranges, or 3 separat...

riaanmaree

Ubiquity devices support SNMP. You'll get everything through SNMP.

riaanmaree

What happens if you connect using the MAC address?
What about connecting to another ethernet port?
Another PC?

riaanmaree

In Winbox go to 'Files' and check how much memory/drive space is available. If nothing is available, it could cause some issues. We saw that on routers running User Manager and the memory being filled up by logs.

riaanmaree

5.X GHz does not go through trees as good as 2.4GHz. Using MIMO would also help. But the 802.11n on the more crowded 2.4GHz spectrum needs 80% of the spectum to work properly. I would suggest using a 10MHz or 20MHz MIMO on 2.4GHz. Ubiquity or Mikrotik miniPCI cards would be fine. Also use narrower s...

riaanmaree

Anyone have a solution for me?

riaanmaree

We have a few customers that have two DSL lines. One for VoIP and one for everything else. This gives better voice quality. The problem is that the masquerade rule on the VoIP PPPoE client interface should set the source IP to the IP that's on that interface. Instead we're seeing a lot of traffic go...

riaanmaree

We had the same problem with OVPN when using the wrong "Auth" and/or "Cipher". It connected, but could not ping at all.

riaanmaree

Yes. ISP limiting would be my guess as well.

Try doing a multi-threaded connection/upload. Most ISPs' shaping will not limit by source IP, but rather per TCP/UDP connection.

riaanmaree

Otherwise, you may be able to do something with multiple 0.0.0.0 gateways with different metrics.

marklodge; that would be the first place to start before going too advanced.

riaanmaree

normis, is this only the case with nv2 or nsteme enabled?

riaanmaree

Do I understand correct?

You want the CPE to use your network as the primary connection and the ADSL on their premises as the backup/failover.

Other customers/CPEs should also use the ADSL at the highsite as the primary link and the one on the left of the image as the failover?

riaanmaree

When transferring to the NAT'ed machines. Do you have FTP servers running on them with port forwarding set up to reach them? Or did you mean that you're opening a ftp client session from a NAT'ed PC and downloading to it? Using NAT tells me you're sharing one public IP on a broadband connection. Whe...

riaanmaree

I'm not sure what you mean by "see the server", but you probably can't ping the server from the host in the other subnet (ip range). The reason for this is because the PC trying to access the server sees that the IP you're trying to access is not in any of it's own subnets and passes it on...

riaanmaree

How is it broadcasting your RouterOs version? If you're taking about the Neighbour discovery function, simply disable discovery on the interfaces that you do not want to be discovered on. Go to IP > Neighbours > Interfaces and disable the interfaces you want to be discovered on. Make sure you know t...

riaanmaree

What do you mean by "I do not want the interface to grab an IP"? Are you only running IP traffic on port 5? What device(s) are connected to port 5? I recommend adding an IP and DHCP to port 5 in a unique IP range then add a DST-NAT firewall rule to all traffic matching that source range to...

riaanmaree

You did not enable 'set default route' on the OVPN connection, which is fine.

After establishing the OVPN connection, check IP > Addresses to make sure you do not have the same IP range on different interfaces. All ranges/subnets need to be unique.

riaanmaree

Should be fine when using X86 RouterOs.

riaanmaree

Please post the output of '/interface pppoe-client export' here. Remember to remove your ISP's password.

Tip: Do not enter a service name in the RouterOS pppoe client settings if your ISP do not require you to.

riaanmaree

Have you tested the Cisco router yet? I'd like to know if it made a difference. Choppy voice calls it usually not because of speed/throughput problems, but because of jitter (differences in ping/latency). Try running pings to the different customers and other end-points on the network while there's ...

riaanmaree

We had the same problem when using encryption with PPPoE sessions. When disabling encryption it resolved it for us. We used a RB450G as the PPPoE server and Ubiquity devices as clients.

riaanmaree

Because a limited number of IPv4 addresses still available and the reluctancy of upstream ISPs handing out hundreds op public IPv4 adresses, we would like to set up a central IP pool for our whole network or segments op our network to be used on PPPoE. This means we do not have to guess the number o...

riaanmaree

Let me understand your setup; Do you have the following: RB493 (A) ether1 -> AP (A) (bridged) -> Client (A) (bridged) -> RB493 (B) ether1 RB493 (A) ether2 -> AP (B) (bridged) -> Client (B) (bridged) -> RB493 (B) ether2 OR RB493 (A) ether1 -> AP (A) (bridged) -> Multiple clients RB493 (A) ether2 -> A...

riaanmaree

Glad we could help

riaanmaree

I might be wrong, but having two APs on the same network (frequency) will cause interference between the two. One will have to be powered off and switched on some how if the one goes down. It should be easy on a wired network to do the automatic failover, but I'm not so sure about on wireless using ...

riaanmaree

1 packet are sent over the air and all clients in same subnet accepts the packet. Clients in different subnet does not accept or reply to the packet. They just ignore it.

riaanmaree

Just some advice: This all sounds and look very cool, but just make sure that you are indeed aware of the outage when it happens by monitoring it with The Dude or something like that. Users might be patient for days before phoning when they see a message saying "we are aware of the problem"...

riaanmaree

Glad I could help

riaanmaree

I can ping it from mikrotik, but not from local network computers even with following route /ip route add gateway=10.88.0.1 dst-address=10.88.0.0/24 The problem is that the PCs on the remote network where the OpenVPN server is does not know where to get hold of your home network IP range. (1) Eithe...

riaanmaree

Thanks for the advice!

riaanmaree

Thanks. That will work 100% for me.

Could you paste the HTML here to hide the password field if it has for example '12345' as the password?

Thank you

riaanmaree

Sorry for asking before trying; We would like to use Usermanager and Hotspot at various sites but generate vouchers. The vouchers will not be a username and password, but just a single 'voucher' field. Would we be able to create users (random voucher numbers) in User Manager without passwords and ed...

riaanmaree

I have also found that I cannot DST-NAT port 80 to an internal IP/host since upgrading to v3.28. All other ports are working fine with the exact same dst-nat rule. It worked 100% before upgrading. I think it used to be on v3.23 (may be wrong) --- /ip firewall nat add action=dst-nat chain=dstnat comm...

riaanmaree

I get the exact same problem with a different setup. We have a customer with a MikroTik RouterBoard 532 as connecting via a PPTP VPN to RouterOs v3.4 (Intel Hardware) at our office. It have been working for months until last night. Other customers can still connect to the PPTP VPN Server, but not th...

riaanmaree

To be honest with you, I really have no idea. The server runs on DOS and the Workstations on Windows 98 (very old setup).

Does the Novell version make a difference?

How can I check the version? I generally do not work on Novell at all.

riaanmaree

We have a customer using a combination of new and very old software. They are in the same building as another company. Each company have their own DHCP, DNS server, Gateway and IP range. For this the two networks have to be isolated from each other. Both companies however use the same Novell server ...

Search found 66 matches