MikroTik

olkitu

Still have issue on RouterOS v6.40.4.

olkitu

+ 1 for LDAP...

Radius yes working but it's unsecure.... so first need make some VPN to LDAP server... example. LDAPS is secure so better.

olkitu

Yes you can do that.

Make bridge and add VLAN's to bridge and that working.

olkitu

Hi there, I have been trying to test my CCR1009 connected to a 2Gbit fiber connection and I have tried both servers listed in this thread. I can consistently get 2GB's down (about 2.1-2.3 actually), but never really more than 1Gb up. Is there something I am doing wrong? I had the ISP come test, and...

olkitu

olkitu Re: ...Maybe need get up also similar speedtest server here for testing... So you thinking about setting up a public btest server ? I suspect it would be very useful to all Mikrotik admins - especially near your part of the world. North Idaho Tom Jones Yeah it's nice but let see when i have ...

olkitu

Nice testing server!

CCR1072-1G-8S+ and 10Gbps Fiber link just we open from Finland. Maybe need get up also similar speedtest server here for testing

olkitu

You have looked firewall settings? Could you print there your config?

olkitu

Netinstall fix that bootloop so i think you need find Windows computer... Or maybe you can run that on Virtualbox...

olkitu

RouterOS 6.38 and Firmware 3.35 and i get 850Mbps easily over NAT. Before 450Mbps about...

olkitu

Please post your wireless configuration. I have same device and get about 250Mbps max speed.

Please try force to WLAN N and remove not needed rates...

Try this setup, it helps 5Ghz WLAN Speed

olkitu

Remember wAP AC have 2.4Ghz and 5Ghz radio so you should only select AC on 5Ghz radio. I use automatic 20/40/80Mhz on 5Ghz and working well.

olkitu

Hi, I'm a little further now. Situation now. CAPsMAN configured and direct connect 1 CAP it is working. But I have also sites that are PtP connected or PTMP connected I have done this with WDS CAPsMAP is working over this links but the clients don't get IP addresses. I use Local forwarding. What is...

olkitu

If you use Capsman forwarding it use tunnel to Capsman controller so capsman controller should have VLAN configured correctly. With local forwarding you need configure to all AP VLAN settings. Yes, you should add management VLAN to all AP so easier manage and IP-address. Yes add VLAN id and interfac...

olkitu

Please post your all configuration. Seems very strange. Do you have DHCP configured correctly or ARP issue? Try clear ARP on Mikrotik router so then you can ping?

Client get IP address from DHCP? Can client 2 ping to client 1???

olkitu

There have everything: http://wiki.mikrotik.com/wiki/Manual:CAPsMAN You can make custom configuration what only allow N / AC, example 2.4Ghz configuration only N and 5Ghz only AC. If you use Capsman forwarding you do not need set up VLAN's to AP device. Capsman make own forwading default so it tunne...

olkitu

Please make some picture on your network setup so it's easier figure how your network should working. Okay i try figure how this shoud working, example: Site A - B connected with Ethernet cable, A (ether1) to B (ether2 what is also bridge1). Site B connected via ether1 to DSL modem ethernet port? Si...

olkitu

Yes, with Capsman you can push wireless AP settings to clients.

But i recommended make VLAN settings to WLAN AP because that eat less CPU and use local forwarding also.

olkitu

What is your provider? So maybe we can tell more how to configure.

Here is my instruction how to configure Sonera IPTV (Finland) to RouterOS: https://www.taisto.org/RouterOS_IPTV/en

olkitu

Sorry very late answer but try this. I fix my speed issue force only 54Mbps rate or force only AC.

olkitu

http://wiki.mikrotik.com/wiki/User_Mana ... e_sessions

olkitu

Thanks for the info, unfortunately the linked page asks me to "install multicast-6.24rc4-mipsbe.npk into the RouterOS operating system RouterOS#P.C3.A4ivitt.C3.A4minen following these instructions" which is a Finnish page that doesn't translate. Does that second page just tell me now to i...

olkitu

Please post your config. What is CPU status when you testing speed. I get 300Mbps on my hAP AC.

olkitu

Mikrotik RB3011 i have max speed about 500Mbps over NAT... hAP AC what i have, max speed 300Mbps i get. I think cannot get over 1200Mbps, (only 1G port, so max speed is 1Gbps)... But look your Mikrotik CPU when testing speed, if 100%, try remove firewall rules... Do you have device what support 1300...

olkitu

Hmm... What VPN protocol you like use? Mikrotik support many different VPN protocol.

I recommended you post your config here, you can export your config with /export command on terminal.

olkitu

I have Mikrotik 3011 and result over NAT, about basic firewall, few VPN tunnels, VLAN config...

So Mikrotik 3011 very good and i recommended that.

olkitu

Try this: https://www.taisto.org/RouterOS_IPTV/en

I maked this manual for Sonera IPTV, working...

olkitu

What you see on Windows Server RRAS log? I think you use RRAS?

olkitu

Do you have configured DHCP server to VLAN on router and you must configure VLAN:s to your end devices.

olkitu

Please read changelog. I recommended latest stable, 6.36.2 is ok. Please test

olkitu

Firewall? NAT? Post your config here...

olkitu

Why you do not deploy IPv6 to your local network?

olkitu

Using PPP connection such PPTP / L2TP / SSTP, you do not get Default GW IP Address. PPP connection use's /32 mask, there is no more available IP address. All connection normally routing to VPN gateway. It's good use different IP area than local network because then you have maybe routing issue. Plea...

olkitu

Do you have added "Cloud"?

You must connect Cloud to real network interface what have connected to internet.

Cloud must connected to switch what connected to internet

This is example about my instance.

olkitu

Do you have correct IP address on your PC and connected to router (ether2)? Can you ping your router from computer? If you can't, you can reset your router to default settings and then get connection to router. Router should by default have DHCP Server enabled and you get 192.168.88.254 IP. Router I...

olkitu

Is it possible to configure a hybrid port on the RB3011 with the switch chip? I am still trying to get an official response from MikroTik about this. You mean trunk? Multiple VLAN to one Ethernet port. Yes it's possible but devices must support that. Well... i think take time getting official resp...

olkitu

Hi, i think problem is native VLAN what is number 1. Normally not good use VLAN 1. Please use VLAN 2 ->

olkitu

client dev tun proto tcp resolv-retry infinite nobind remote vpn.example.org 1194 # #Root CA <ca> -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- </ca> # Client certificate <cert> -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- </cert> #Private Key <key> -----BEGIN PRIVATE KEY----- ----...

olkitu

http://wiki.mikrotik.com/wiki/OpenVPN#C ... figuration

Here is manual how to connect Windows and Linux to OpenVPN. You must create .ovpn config file where have connection settings. That setting use to connect to your OpenVPN Server (Mikrotik)

olkitu

Add ETH1, ETH2, ETH3 to same bridge what you like get public IP...First remove master / slave on ETH2-ETH3. Other port what you want use NAT, working normally.

Please post network image what you like do... I do not get full picture your network...

olkitu

You must disable iOS Settings "Force AES-CBC". That is reason i think.

olkitu

What you mean "drop from Mikrotik servers"?

If you want block some service please block all protocol and port connect to dst-address (phipson servers). I do not understand why you block only one VPN Service. I think it very difficult block because service uses multiple IP-address pool.

olkitu

I think you must look about wireless-rep package.

olkitu

Radius?

olkitu

ISP block that port? Can you ping to router? Do you have try use different port?

olkitu

Hi, yes you can connect two mikrotik with OpenVPN. Mikrotik support multiple OpenVPN connections.

olkitu

Hi, i think it's not possible hide 81.20.yy.xx because you using that IP to routing from customer to internet?

olkitu

That you mean: https://psiphon.ca/index.html ? I do not know why but you can block with firewall all psiphon IP-address.

olkitu

Add this to 10 10.10.1 Mikrotik Router:

/ip route add dst-address=8.7.1.0/24 gateway=10.10.10 5

Remove NAT on OpenVPN interface.

And add 10.10.10.5 Mikrotik Router:

/ip route add dst-address=192.168.0.0/24 gateway=10.10.10.1

olkitu

+1 this feature

olkitu

I've found out about MikroTik routers a bit less than a year ago. It was pleasant surprised that MikroTik is Latvian (local for me) company. So I decided to update my home network and buy one of Mikrotik routers. Now I have old version of TL-WR1043ND router, which can handle about 104 Mbit/s max by...

olkitu

I have issue on my hAP AC. I got max speed with wireless 10Mbps download and 50Mbps upload. Handshake speed with AP and my laptop is 780Mbps. With cable, speed is 1Gbps. I tried reset my reset, reconfigure it... Changing channel... Changing RoS version... CPU 4-5% max, no firewall / queue rule. Also...

Search found 51 matches