Community discussions

Search found 1765 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 36
by mkx
Wed Mar 20, 2019 11:00 am
Forum: Beginner Basics
Topic: Problem: Same mac address reserving more than one IP
Replies: 2
Views: 101

Re: Problem: Same mac address reserving more than one IP

This can be expected when there's a device with proxy-arp enabled. It will answer with own MAC address to queries for all of its "clients".
by mkx
Wed Mar 20, 2019 10:44 am
Forum: Beginner Basics
Topic: [Help] Access Bridged GPON modem in front of Mikrotik
Replies: 14
Views: 357

Re: [Help] Access Bridged GPON modem in front of Mikrotik

Default firewall configuration on recent ROS versions is quite decent one. It only needs some minor tweaking (e.g. some port forwarded), but basics are sound. If you can't ping GPON modem from router, then it might be due to some config on GPON modem itself. I can imagine config where if modem is se...
by mkx
Wed Mar 20, 2019 9:29 am
Forum: Beginner Basics
Topic: [Help] Access Bridged GPON modem in front of Mikrotik
Replies: 14
Views: 357

Re: [Help] Access Bridged GPON modem in front of Mikrotik

Can you ping GPON modem from hAP ac? Until you can, nothing else will work ... Firewall rules in your setup are slight mess ... so I suspect they come from a fairly old version of ROS. You might want to consider re-configuring hAP ac from scratch (export config using /export file=exported_config.rsc...
by mkx
Wed Mar 20, 2019 9:19 am
Forum: General
Topic: Need help routing public subnet IP to internal server
Replies: 22
Views: 505

Re: Need help routing public subnet IP to internal server

Did you change settings on your server as well? The IP address/route config there should mirror the one from router ...
by mkx
Wed Mar 20, 2019 9:09 am
Forum: General
Topic: Static IP not showing at DHCP server.
Replies: 8
Views: 2856

Re: Static IP not showing at DHCP server.

But, coudn't find its mac on dhcp/ arp table. That device is a ghost in the network. ARP tables get populated as devices make connections to each other. If you want to see MAC address of a LAN device in router's ARP table, you can ping the LAN device ( /ping <LAN IP> ). After that, consult ARP tabl...
by mkx
Wed Mar 20, 2019 8:56 am
Forum: General
Topic: Is the bridge admin mac "random"?
Replies: 2
Views: 124

Re: Is the bridge admin mac "random"?

Generally one can not just randomly pick up a MAC address If you look at MAC addresses in your screenshot, you'll notice that they are not entirely random: every listed MAC address has 7th bit (counting from most significant bit, i.e. from left) in first (most significant) octet set to 1. Which deno...
by mkx
Wed Mar 20, 2019 8:31 am
Forum: Beginner Basics
Topic: [Help] Access Bridged GPON modem in front of Mikrotik
Replies: 14
Views: 357

Re: [Help] Access Bridged GPON modem in front of Mikrotik

You don't want to allow discovery on isp-pppoe ... so remove this one: /interface list member add interface=isp-pppoe list=discover Addressing seems OK, so RB should be able to access GPON modem. You can verify by running command /ping 192.168.1.1 on router itself. If it is, then modem should be acc...
by mkx
Tue Mar 19, 2019 2:22 pm
Forum: Beginner Basics
Topic: Portfowarding not working correctly [SOLVED]
Replies: 6
Views: 198

Re: Portfowarding not working correctly [SOLVED]

Your additional src-nat rule is all wrong ... again, read posts about hair-pin NAT. Keys to understanding: src-address is the address of client that initiates connection ... if your case it's an address from 192.168.10.x subnet dst-address is the address where client initiated connection originally ...
by mkx
Tue Mar 19, 2019 1:54 pm
Forum: General
Topic: cannot port forward on internal LAN
Replies: 9
Views: 261

Re: cannot port forward on internal LAN

Oh, great, I've never met a guy who's moving his NAS around ... making wired LAN connection unfeasible. You'll have to set default-forwarding=no on your wifi interfaces ... so that wifi adapter won't directly forward packets between pair of wireless clients. I just hope that RB will, after performin...
by mkx
Tue Mar 19, 2019 12:45 pm
Forum: Beginner Basics
Topic: Portfowarding not working correctly [SOLVED]
Replies: 6
Views: 198

Re: Portfowarding not working correctly [SOLVED]

You have to read about hair-pin NAT. You'll have to change your current dst-nat rule and add a src-nat to make it work. Currently it doesn't work because when you try to connect to your WAN IP address while being in LAN, your connection doesn't come through interface pppoe-client, hence the dst-nat ...
by mkx
Tue Mar 19, 2019 12:43 pm
Forum: Beginner Basics
Topic: [Help] Access Bridged GPON modem in front of Mikrotik
Replies: 14
Views: 357

Re: [Help] Access Bridged GPON modem in front of Mikrotik

Add IP address from 192.168.1.x subnet to ether1 interface of your mikrotik. Then construct a src-nat rule for that particular interface.

If you want to get some concrete configuration examples, post complete configuration of your routerboard (/export hide-sensitive).
by mkx
Tue Mar 19, 2019 12:37 pm
Forum: Beginner Basics
Topic: Hardware Purchase Advice for VLAN support
Replies: 6
Views: 199

Re: Hardware Purchase Advice for VLAN support

As I wrote, my tests show that hAP ac2 is capable of switching wire-speed and CPU load remains well below 100%. My tests were done using iperf (single stream and multiple parallel streams). But then ... hAP ac2 is a ROS device and as such it's only too easy to mess with the configuration ... in a se...
by mkx
Tue Mar 19, 2019 12:25 pm
Forum: Wireless Networking
Topic: 50 km LINk
Replies: 6
Views: 287

Re: 50 km LINk

Yes, longest link is 32km, 36 dBm EIRP, 34 dBIDishes, 250MBit real TCP
That's 36 dBm Tx power or 2 dBm Tx power?
2 db tx power
Amazing. :clap:
by mkx
Mon Mar 18, 2019 9:23 pm
Forum: Wireless Networking
Topic: 50 km LINk
Replies: 6
Views: 287

Re: 50 km LINk

Yes, longest link is 32km, 36 dBm EIRP, 34 dBIDishes, 250MBit real TCP
That's 36 dBm Tx power or 2 dBm Tx power?
by mkx
Mon Mar 18, 2019 9:15 pm
Forum: General
Topic: cannot port forward on internal LAN
Replies: 9
Views: 261

Re: cannot port forward on internal LAN

OK. Next is to dump all your current NAT rules as they are just a heap of random garbage. Keep only add action=masquerade chain=srcnat out-interface-list=WAN If your WAN interface is lte1, then add lte1 to interface list WAN instead of adding another NAT rule. For making LAN to LAN port translation ...
by mkx
Mon Mar 18, 2019 7:56 pm
Forum: General
Topic: How to change SXT LTE imei?
Replies: 8
Views: 549

Re: How to change SXT LTE imei?

Everybody who's running their Pt(M)P devices with antenna gain set to 0 (instead of setting it to 14 or whatever real antenna gain). Everybody who's running their WiFi gear set to no_country so that country limitations (e.g. to 20dBm on certain channels) don't kick their arses.
by mkx
Mon Mar 18, 2019 7:49 pm
Forum: General
Topic: cannot port forward on internal LAN
Replies: 9
Views: 261

Re: cannot port forward on internal LAN

To do port forwarding for internal lan, you'd have to force all LAN traffic through router ... if all clients are wireless and samba server is wired, then this might be possible by setting
/interface bridge settings set use-ip-firewall=yes
...
by mkx
Mon Mar 18, 2019 7:35 pm
Forum: General
Topic: How to change SXT LTE imei?
Replies: 8
Views: 549

Re: How to change SXT LTE imei?

It is illegal to change the IMEI It's also illegal to transmit with EIRP higher than country limit and yet everybody seems to happily violate that. But to return to OT: probably it's not possible to change IMEI unless one re-flashes LTE card's permanent config area (which is left intact by normal f...
by mkx
Mon Mar 18, 2019 2:53 pm
Forum: General
Topic: Putty updated to 0.71
Replies: 12
Views: 460

Re: Putty updated to 0.71

Or a coffee LOL.
Remember: sleeping is poor substitute for caffeine.
by mkx
Mon Mar 18, 2019 2:31 pm
Forum: Wireless Networking
Topic: Big difference in the RX and TX signal rate
Replies: 4
Views: 164

Re: Big difference in the RX and TX signal rate

Did you check for any signs of water ingress? Or, after a while when water already dried, any oxidation/dust deposits?
by mkx
Mon Mar 18, 2019 2:28 pm
Forum: Wireless Networking
Topic: Antenna for Net Metal 3x3 chain
Replies: 6
Views: 816

Re: Antenna for Net Metal 3x3 chain

It's for more throughput ... effectively it's got 3 antennae built in, one vertical and two horizontal. AP device with 3 TX/RX chains is needed to take full advantage. It's not completely necessary that the other end is triple-chain as well, the link can benefit by employing Tx and Rx diversity on o...
by mkx
Mon Mar 18, 2019 2:18 pm
Forum: Beginner Basics
Topic: Radus server in my Mikrotik router
Replies: 6
Views: 225

Re: Radus server in my Mikrotik router

It is part of the extra packages, right? I have downloaded these files but how to install? Take needed .npk files out of ZIP archive and push them to root folder of files section (either scp, ftp or winbox files can do it). Reboot device afterwards and the packages should get installed. If they don...
by mkx
Mon Mar 18, 2019 12:03 pm
Forum: General
Topic: Inter VLAN routing problem
Replies: 2
Views: 103

Re: Inter VLAN routing problem

Is the posted config complete? If yes, then your router lacks LAN addresses ... on all 3 VLAN interfaces (vlan4, vlan15 and vlan99). Without them it's not aware of subnets behind each VLAN interface and can not properly route/firewall traffic.
by mkx
Mon Mar 18, 2019 9:17 am
Forum: General
Topic: bridging a VLAN onto a DHCP server
Replies: 4
Views: 169

Re: bridging a VLAN onto a DHCP server

Sounds like you've misconfigured the VLAN stuff ... post output of /interface export for us to check.
by mkx
Mon Mar 18, 2019 9:01 am
Forum: Beginner Basics
Topic: Hardware Purchase Advice for VLAN support
Replies: 6
Views: 199

Re: Hardware Purchase Advice for VLAN support

hAP ac² can switch wire-speed ... including VLANs. Not on all ports simultaneously though, it's limited by 2Gbps interconnect between switch chip and CPU. It could do it if things are configured in HW (including VLANs) but personaly I don't recommend it as my piece was unstable when I it. If VLANs a...
by mkx
Sun Mar 17, 2019 5:33 pm
Forum: General
Topic: Out of disk space - upgrading hAP Lite from v6.35 to v6.35.2
Replies: 20
Views: 7517

Re: Out of disk space - upgrading hAP Lite from v6.35 to v6.35.2

May be don't include modules disabled by default in RouterOS package for smips ? advanced-tools, hotspot, mpls, routing, security -- that modules can be uploaded separately. That's how I managed to resolve the problem. By only downloading the absolute minimum packages required for the next version ...
by mkx
Sat Mar 16, 2019 10:26 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 59
Views: 7253

Re: v6.44.1 [stable] is released!

Also, disabling packages does not free up HDD space. Uninstall it instead of disabling.
Unfortunately it's not possible to un-install bundled packages ... To be able to do that one has to perform upgrade by manually uploading only needed packages from "Extra packages".
by mkx
Sat Mar 16, 2019 6:58 pm
Forum: RouterBOARD hardware
Topic: [Bug] RB750Gr-3: Inaccessible after changing ipsec policy
Replies: 12
Views: 395

Re: [Bug] RB750Gr-3: Dead after changing ipsec policy

You can run openwrt on some routerboard models ... and that's all about how mikrotik relates to openwrt.
by mkx
Sat Mar 16, 2019 2:55 pm
Forum: RouterBOARD hardware
Topic: [Bug] RB750Gr-3: Inaccessible after changing ipsec policy
Replies: 12
Views: 395

Re: [Bug] RB750Gr-3: Dead after changing ipsec policy

You can run openwrt on some routerboard models ... and that's all about how mikrotik relates to openwrt.
by mkx
Thu Mar 14, 2019 10:57 pm
Forum: SwOS
Topic: Vlan Showing up in traceroute from internal and external
Replies: 3
Views: 166

Re: Vlan Showing up in traceroute from internal and external

Any kind of tunnel would do: GRE as the most simple kind would do nicely. If you have a whoke mesh of routers, you might want to think about MPLS ... it hides infrastructure and adds some useful functions ...

Why does it bother you so much?
by mkx
Thu Mar 14, 2019 10:51 pm
Forum: Beginner Basics
Topic: lost with a route!
Replies: 5
Views: 164

Re: lost with a route!

If other routers in the mesh don't have configured the route towards your LAN subnet 192.168.0.0/24, you have to configure SRC-NAT ... you haven't mentioned it so you may have it or not ...
by mkx
Thu Mar 14, 2019 10:43 pm
Forum: General
Topic: Firewall rules ignored for 1 IP for all google domains [SOLVED]
Replies: 8
Views: 217

Re: Firewall rules ignored for 1 IP for all google domains [SOLVED]

Add another set of filter rules, but set protocol=udp ... I'm not sure if it's worth bothering with action=reject with all of its attributes. Simple action=drop would do the job just as well ... and with that you could probably completely omit protocol= setting... making it match both TCP and UDP, s...
by mkx
Thu Mar 14, 2019 10:38 pm
Forum: General
Topic: Harpin NAT between two VLANs
Replies: 34
Views: 874

Re: Harpin NAT between two VLANs

So the reason the server sends it directly back to the originator is because it uses layer 2 connectivity first??? If the source is in a different subnet there is no layer2 window of opportunity!! 99.9% correct ... more precisely: server sends reply directly because it was made to believe it's got ...
by mkx
Thu Mar 14, 2019 10:27 pm
Forum: Wireless Networking
Topic: Wisp Insurance
Replies: 7
Views: 303

Re: Wisp Insurance

Probably the Irish guy's cousin is already in the US ... perhaps subcontracting tower operations? :lol:
by mkx
Thu Mar 14, 2019 10:22 pm
Forum: Wireless Networking
Topic: DHCP Server giving ip's on the middle of the range
Replies: 3
Views: 138

Re: DHCP Server giving ip's on the middle of the range

If DHCP is set up without static leases, then this indicates that assigned IP addresses don't matter, any random IP address from given subnet is just fine. So I don't get people whining about a particular order of IP address assignment ... Also I don't understand why post about DHCP server landed in...
by mkx
Thu Mar 14, 2019 10:08 pm
Forum: General
Topic: Firewall rules ignored for 1 IP for all google domains [SOLVED]
Replies: 8
Views: 217

Re: Firewall rules ignored for 1 IP for all google domains [SOLVED]

Command /export doesn't show dynamic settings ... to make sure ipv6 setup doesn't exist, one should check settings using print ....
by mkx
Thu Mar 14, 2019 10:00 pm
Forum: General
Topic: Block one IP dossnt seem to work
Replies: 8
Views: 221

Re: Block one IP dossnt seem to work

So only change the chain from input to forward. To fine-tune the rule you might want to add out-interface-list=WAN ...

Unrelated: it was aactually a wheel on the car roof failing to make car rolling uphill ...
by mkx
Thu Mar 14, 2019 9:57 pm
Forum: General
Topic: Block one IP dossnt seem to work
Replies: 8
Views: 221

Re: Block one IP dossnt seem to work

Address in your FW rule (10.215.81.105) is not a proper internet address. And even if it was, you're blocking communication between that particular host and router ( chain=input ... and that particular direction of connection establishment - src-address ) ... which might be already blocked by rule n...
by mkx
Thu Mar 14, 2019 9:31 pm
Forum: General
Topic: problem sending email and access some sites
Replies: 7
Views: 219

Re: problem sending email and access some sites

Any good reason for having set reduced MTU on some particular ether ports?
by mkx
Thu Mar 14, 2019 9:07 pm
Forum: General
Topic: Firewall Setup with new vlan setup
Replies: 2
Views: 140

Re: Firewall Setup with new vlan setup

Bridge with all vlans inside will isolate those vlans from each other if things are set correctly. The only path between vlans lead via IP: host10 <-> vlan10 <-> router's IP interface on vlan10 <---------+ firewall | routing host20 <-> vlan20 <-> router's IP interface on vlan20 <---------+ Using in-...
by mkx
Thu Mar 14, 2019 8:43 pm
Forum: General
Topic: VLAN groups and MSTP
Replies: 3
Views: 173

Re: VLAN groups and MSTP

It doesn't matter what you do on managed switch or router, it's the dumb switch performing a loop. Think about why you need it there, probably you're trying to abuse it.
by mkx
Thu Mar 14, 2019 8:27 pm
Forum: Beginner Basics
Topic: Help with PPPoE client setup
Replies: 2
Views: 127

Re: Help with PPPoE client setup

Assuming you have everything configured correctly on your managed switch, hooked to eth4 (DSL modem connected to access port for VLAN VID=200) it should work. And it shouldn't be necessary to have dial-on-demand=yes ... One test to be done with this regard: even if DSL modem is set to bridge mode it...
by mkx
Wed Mar 13, 2019 11:11 pm
Forum: Wireless Networking
Topic: Question for setting
Replies: 4
Views: 169

Re: Question for setting

Are you actually connecting both qrts to same sector of mant ... making mant act as PtMP? I guess you're suffering of the "hidden station" problem where stations A and C don't hear each other (if they did, you wouldn't need station B) and thus can't avoid collisions. Bringing whole channel performan...
by mkx
Wed Mar 13, 2019 10:36 pm
Forum: Wireless Networking
Topic: cAP-ac Throughput & High Ping Problems
Replies: 6
Views: 290

Re: cAP-ac Throughput & High Ping Problems

capsMan doesn't make cAPs to coordinate use of air time, they still operate independantly.
by mkx
Wed Mar 13, 2019 10:31 pm
Forum: Beginner Basics
Topic: Mikrotik as HUB (configuration)
Replies: 15
Views: 548

Re: Mikrotik as HUB (configuration)

I don't think you can emulate a hub properly using routerboards. The MAC address tables can be flushed which would make RB to work as a hub ... but only for a very short while. It'd soon learn addresses again.
by mkx
Wed Mar 13, 2019 9:56 pm
Forum: SwOS
Topic: Vlan Showing up in traceroute from internal and external
Replies: 3
Views: 166

Re: Vlan Showing up in traceroute from internal and external

It doesn't matter which addresses you advertise via BGP or OSPF or whatever. As long as your private IPs are used by equipment which participates in routing of packets across your network, it'll show on traceroutes. The only way of hiding it from the world would be by performing NAT on ICMP TTL EXPI...
by mkx
Wed Mar 13, 2019 9:44 pm
Forum: Wireless Networking
Topic: cAP-ac Throughput & High Ping Problems
Replies: 6
Views: 290

Re: cAP-ac Throughput & High Ping Problems

WiFi (or any other radio equipment) doesn't work well if there's excessive interference. By configuring all cAPs to use same channel you created lots of interference. You better configure cAPs to use channels 1, 6 and 11 alternately ... and do some planning so that the physical distance between cAPs...
by mkx
Wed Mar 13, 2019 8:31 pm
Forum: Beginner Basics
Topic: Mikrotik as HUB (configuration)
Replies: 15
Views: 548

Re: Mikrotik as HUB (configuration)

As I wrote: routerboards don't work as hubs. They can be made to work as switches.
by mkx
Wed Mar 13, 2019 5:45 pm
Forum: RouterBOARD hardware
Topic: Whats the best current home routerboard for a gigabit ISP?
Replies: 15
Views: 2036

Re: Whats the best current home routerboard for a gigabit ISP?

Apart from the PPPoE/VLAN bug I've had another issue with my RBD52G: stability. Being desparate I switched over from HW-based VLAN setup to the new bridge vlan-filtering setup. Which bypasses the PPPoE/VLAN bug ... probably also fixed the stability issue (one fellow forum member reported ether ports...
by mkx
Wed Mar 13, 2019 5:21 pm
Forum: General
Topic: VLAN groups and MSTP
Replies: 3
Views: 173

Re: VLAN groups and MSTP

The HP switch has no special configuration, just a "dumb" switch. When I make a connection between the HP and a port of each of the VLAN groups (like in the pic), MSTP will block one of the 2 connections although it would logically be a loop free topology. This would logically be a loop topology. A...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 36