Community discussions

Search found 23 matches

by marcrisse
Wed Jun 19, 2019 11:34 am
Forum: General
Topic: [Feature request] Wireguard
Replies: 94
Views: 22697

Re: [Feature request] Wireguard

+1 and €100 for coffee ;)
by marcrisse
Wed May 15, 2019 9:27 pm
Forum: Beginner Basics
Topic: [solved] VLAN-subnet over 3 devices / routing? switching?
Replies: 3
Views: 312

Re: [solved] VLAN-subnet over 3 devices / routing? switching?

it is up and running. i created one bridge for every VLAN and after switching to "proxy-arp" everything works. :)
by marcrisse
Wed May 15, 2019 9:35 am
Forum: Beginner Basics
Topic: [solved] VLAN-subnet over 3 devices / routing? switching?
Replies: 3
Views: 312

[solved] VLAN-subnet over 3 devices / routing? switching?

Hello, I have a problem understanding VLANs and routing/switching a subnet over all devices: My router MKT#1 gets a VLAN trunk from the gateway (Edgerouter 4 / ER4#1) with 4 VLANs. One of these VLANs should become the management VLAN (VID100, 192.168.100.0/24). On MKT#1 the VLAN runs wonderfully, I ...
by marcrisse
Fri Mar 08, 2019 1:08 pm
Forum: General
Topic: [Feature request] Wireguard
Replies: 94
Views: 22697

Re: [Feature request] Wireguard

+1 from me

I hate running Linux-VMs behind all my Mikrotik-Devices only for WG!
by marcrisse
Tue Feb 05, 2019 10:23 am
Forum: RouterBOARD hardware
Topic: CCR1072 with only 8GB RAM
Replies: 1
Views: 421

CCR1072 with only 8GB RAM

Hi,

our CCR1072-1G-8S+ has only 8GB of RAM instead of 16GB... What happened?

Best,
Marc
by marcrisse
Mon Dec 10, 2018 4:44 pm
Forum: The Dude
Topic: Query dude data
Replies: 0
Views: 389

Query dude data

Hi,

is it possible to query the dude for specific stats from external script? i like to find out how much traffic goes through an interface on different mikrotik devices. hat the dude an api or other interfaces to query by script?

Best
Marc
by marcrisse
Wed Aug 08, 2018 6:44 pm
Forum: Beginner Basics
Topic: Mixed vlan and non-vlan over one interface -> routing
Replies: 1
Views: 401

Re: Mixed vlan and non-vlan over one interface -> routing

here you can see the packets are forwarded to WAN (Interface WAN2-Unity): 17:38:28 firewall,info forward: in:VLAN-Gast(ether7-LAN) out:WAN2-Unity, src-mac b0:c1:9e:43:46:88, proto TCP (SYN), 192.168.89.100:46110->192.168.11.140:8880, len 60 17:38:29 firewall,info forward: in:VLAN-Gast(ether7-LAN) ou...
by marcrisse
Wed Aug 08, 2018 6:07 pm
Forum: Beginner Basics
Topic: Mixed vlan and non-vlan over one interface -> routing
Replies: 1
Views: 401

Mixed vlan and non-vlan over one interface -> routing

Hi, I am not able to route traffic between my normal lan and a guest-vlan. My Interface ether7 is part of my lan-bridge. it is connetced to an unifi-switch. on unifi site i have defined a guest vlan with id 111 and on mikrotik there is a vlan-interface (vlan-111) under ether7. an dhcp-server on mikr...
by marcrisse
Thu Aug 02, 2018 9:19 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 105861

Re: Blacklist Filter update script

Do you need some servers in europe? Perhaps I can help you?
by marcrisse
Fri Mar 16, 2018 8:25 pm
Forum: General
Topic: Feature request: Virtual Extensible LAN (VXLAN)
Replies: 27
Views: 11113

Re: Feature request: Virtual Extensible LAN (VXLAN)

+1! I don't want to buy Cisco or Cumulus ;-)
by marcrisse
Wed Jan 10, 2018 12:30 pm
Forum: Beginner Basics
Topic: Bonding Mode 0 (balanced-rr)
Replies: 4
Views: 461

Re: Bonding Mode 0 (balanced-rr)

Get a real switch!
Any suggestions?
by marcrisse
Wed Jan 10, 2018 12:24 pm
Forum: Beginner Basics
Topic: Bonding Mode 0 (balanced-rr)
Replies: 4
Views: 461

Bonding Mode 0 (balanced-rr)

Hi, I want to connect my PC with a NAS with 2 x 1Gbit/s over CRS125-24G-1S (ROS 6.41). First I created bond0 with ether21+ether22 to NAs and bond1 with ether23+ether24 to the PC. I added these to a bridge. Result: 460Mbit/s real, expected: 2000Mbit/s After some readings it is clear to me that balanc...
by marcrisse
Sat Nov 12, 2016 7:49 pm
Forum: Virtualization
Topic: Bind9
Replies: 3
Views: 1475

Re: Bind9

No, we have to forward different zones to different nameservers.
by marcrisse
Fri Nov 11, 2016 11:30 am
Forum: Virtualization
Topic: Bind9
Replies: 3
Views: 1475

Bind9

Hi@all, I need for our customers a bind9-service on the mikrotik router. I tried openwrt with metarouter. It is running, but I would ask if there is an easier solution to just provide full dns services on mikrotik devices. I only need zone forwarding to some windows ad servers. (RB1100 and RB2011) t...
by marcrisse
Tue Nov 08, 2016 2:24 pm
Forum: General
Topic: Convert dynamic to static IP address
Replies: 1
Views: 598

Convert dynamic to static IP address

Hi, I have to change one dynamic IP address to static because of an unstable DHCP service on my router (FritzBox). I cant add the given address as static because the address already exists. And I cant remove the dynamic IP because it is my internet connection with VPN, from where I have to configure...
by marcrisse
Sat Nov 05, 2016 2:06 pm
Forum: Beginner Basics
Topic: Routing - Interface missing
Replies: 1
Views: 397

Routing - Interface missing

Hi, I have a static route from one mikrotik to an other connected with SSTP. Sometimes after reestablishing SSTP one of my static routes are disabled because of missing interface. How can I reenable the static route automatically? I have to open the route in winbox, choose the gateway-interface agai...
by marcrisse
Thu Sep 29, 2016 1:26 pm
Forum: General
Topic: [solved] How to disable fastpath
Replies: 1
Views: 3701

Re: [solved] How to disable fastpath

easy solution:

adding allow-fast-path=no to the /interface eoip add command ;-)
[admin@mikro-vts-fw] > /interface eoip add comment="nach drueben" name="EoIP2drueben" local-address=1.1.1.1 remote-address=1.1.1.2 tunnel-id=0 ipsec-secret=blabla allow-fast-path=no
by marcrisse
Thu Sep 29, 2016 1:05 pm
Forum: General
Topic: [solved] How to disable fastpath
Replies: 1
Views: 3701

[solved] How to disable fastpath

Hi, I want to extend my router with ipsec-enabled EoIP, but i have to disable fastpath: [admin@mikro-vts-fw] > /interface eoip add comment="nach drueben" name="EoIP2drueben" local-address=1.1.1.1 remote-address=1.1.1.2 tunnel-id=0 ipsec-secret=blabla failure: cannot enable fastpath together with ips...
by marcrisse
Fri Mar 11, 2016 12:52 pm
Forum: Beginner Basics
Topic: CAPsMAN and revoked cert
Replies: 3
Views: 958

Re: CAPsMAN and revoked cert

Issued certificates on RouterOS can be removed only together with CA. You cannot remove only revoked certs.
The CA is removed already
by marcrisse
Thu Mar 10, 2016 12:03 pm
Forum: Beginner Basics
Topic: CAPsMAN and revoked cert
Replies: 3
Views: 958

CAPsMAN and revoked cert

Hi, I revoked a certificate which was gererated by CAPsMAN. But I am not able to delete it. When I let CAPsMAN create a new CA an cert, the old revoked is used. I can bind a WLAN-AP but after some minutes, the connection gets lost because of cert mismatch. How can I remove all certs and CAs without ...
by marcrisse
Thu Mar 10, 2016 11:52 am
Forum: Beginner Basics
Topic: Firewall rule with dynamic interface
Replies: 3
Views: 688

Re:

Why not to use static sstp interface binding linked to the user instead dynamic? the mikrotik with sstp-service dials in via DSL with a disconnect every 24h. the sstp-client is a linux server with permanent internet connection. the devicename <sstp-rootserver> doesn't change but it is lost every ni...
by marcrisse
Thu Mar 10, 2016 8:54 am
Forum: Beginner Basics
Topic: Firewall rule with dynamic interface
Replies: 3
Views: 688

Firewall rule with dynamic interface

hi,

how can i apply firewall rules to sstp-interfaces permanently? Every time after reconnect of sstp-client, my mikrotik says "unknown interface" and i have to reconfigure the rule.


best
marc
by marcrisse
Wed Feb 17, 2016 5:02 pm
Forum: Beginner Basics
Topic: SSTP-Inteface name changes after DSL reconnect
Replies: 0
Views: 270

SSTP-Inteface name changes after DSL reconnect

Hi, my sstp-interfacenames are changing from sstp-name to sstp-name1 and vice versa after 24h disconnect of my DSL. My monitoring software (check_mk) complaines about missing interfaces an i have huge gaps in RRD graphs. Should I schedule a script to rename the interface every morning or are there a...