Community discussions

Search found 19 matches

by zespri
Wed Sep 19, 2018 5:01 am
Forum: Beginner Basics
Topic: How to route between a bridge and a subnet?
Replies: 8
Views: 1824

Re: How to route between a bridge and a subnet?

Thank you this is most helpful. There is quite a lot to take in, but while I'm doing that: /ip firewall filter add action=drop chain=forward connection-state=new dst-address=192.168.88.0/24 in-interface=ether1 From my newbie perspective this line on the hAP ac Lite should achieve the desired separat...
by zespri
Tue Sep 18, 2018 11:51 am
Forum: Beginner Basics
Topic: How to route between a bridge and a subnet?
Replies: 8
Views: 1824

Re: How to route between a bridge and a subnet?

I cannot thank you enough, this explanation makes total sense. After adding 192.168.88.1 as the gateway on the hAP ac lite the virtual machines got internet access. Also thank you very much for taking time to explain why connection tracking gets confused, this is very educational. I'll try to google...
by zespri
Tue Sep 18, 2018 10:08 am
Forum: Beginner Basics
Topic: How to route between a bridge and a subnet?
Replies: 8
Views: 1824

Re: How to route between a bridge and a subnet?

Beware that default configuration of "consumer-class" mikrotiks is to have ether1 configured as WAN port. Firewall rules are set accordingly. In your case this is quite wrong and you need to remove all firewall rules and set them according to your needs. I did reset the router before attempting thi...
by zespri
Tue Sep 18, 2018 1:21 am
Forum: Beginner Basics
Topic: How to route between a bridge and a subnet?
Replies: 8
Views: 1824

How to route between a bridge and a subnet?

Hello all, I have a hAP ac Lite that I configured like a switch: I create a bridge, and I added ether2-ether5 to it selecting hw offload. This "switch" is connected via, say either4, but as I understand it should not matter since I can plug in "root" or uplink anywhere. So ether4 then is connected t...
by zespri
Fri Dec 01, 2017 10:01 am
Forum: Beginner Basics
Topic: MAC address whitelist - best practice?
Replies: 2
Views: 2380

Re: MAC address whitelist - best practice?

I'm guessing one way to do it is to refuse to give out dhcp leases to unknown MAC's like this: https://rbgeek.wordpress.com/2013/01/02/configure-mikrotik-dhcp-to-assign-ip-address-to-only-authorized-clients-2nd-method/ There are also guide like this one: http://systemzone.net/restrict-internet-acces...
by zespri
Wed Oct 05, 2016 9:24 pm
Forum: General
Topic: Monitoring vis Traffic Flow... discern between IPs?
Replies: 3
Views: 554

Re: Monitoring vis Traffic Flow... discern between IPs?

This is the reply I got from milrotik support:
Sergejs [MikroTik Support]
Hello,

Yes, the issue is caused by fasttrack.
We will release fix for for fast-track in 6.37.2, and the issue with the statistic will be fixed there.
by zespri
Sun Oct 02, 2016 2:48 am
Forum: General
Topic: Monitoring vis Traffic Flow... discern between IPs?
Replies: 3
Views: 554

Re: Monitoring vis Traffic Flow... discern between IPs?

I was just typing up a message similar to yours. I'm using nfsen/nfdump and I also tried ntopng/nprobe. I'm observing the same as you, there is no way to tell which local ip address is getting all this traffic. I'm looking forward for someone to comment if this could be configured at all. Similar (u...
by zespri
Sun May 08, 2016 7:11 am
Forum: General
Topic: Accounting seems to be broken in 6.35.2
Replies: 0
Views: 390

Accounting seems to be broken in 6.35.2

Home setup, no hotspot, hP ac Lite. /ip accounting used to correctly report usage in 6.34.3 After upgrade to 6.35.2 accounting still spits out some numbers but they are very small (even when the actual traffic is big). In the change log for 6.35 we can see: *) l2tp & pppoe - fixed user traffic accou...
by zespri
Sun May 08, 2016 3:07 am
Forum: Beginner Basics
Topic: Net install does not see router.
Replies: 2
Views: 1043

Net install does not see router.

Hello all,

I downloaded netinstall 6.35.2 and it does not see my hAP ac lite in net booting mode.
netinstall 6.34.3 can see it all right. Is there a reason for that?

Is it safe to flash routeros 6.35.2 with netinstall 6.34.3?
by zespri
Mon Mar 28, 2016 2:28 pm
Forum: Beginner Basics
Topic: Slave interfaces vs Bridge
Replies: 5
Views: 1166

Re: Slave interfaces vs Bridge

Switch cpu is purpose built to do packet switching, so it's supposed to be better. Router cpu is a general purpose CPU that does basically everything in RouterOS, so there must be overhead.
by zespri
Mon Mar 28, 2016 1:08 pm
Forum: Beginner Basics
Topic: Reading larger files
Replies: 0
Views: 424

Reading larger files

Elsewhere on the forum it was established, that it is not possible to read files longer than 4096 bytes. It's rather sad, as I need to download and import a file with static dns (/ip dns static add), which is longer than 4096 bytes. On schedule. I'd like to confirm that there is still no solution to...
by zespri
Mon Mar 28, 2016 1:02 pm
Forum: Beginner Basics
Topic: Slave interfaces vs Bridge
Replies: 5
Views: 1166

Re:

Thank you.
by zespri
Mon Mar 28, 2016 9:56 am
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 289
Views: 306859

Re: Tool: Realtime per IP traffic monitor for home/office

Hello, ken here. Does this work with windows 10 Os? I followed all the steps upto the install install sniffer service stage using command line. Some help please.
Yep, working fine here as per instructions.
by zespri
Mon Mar 28, 2016 7:55 am
Forum: Beginner Basics
Topic: Slave interfaces vs Bridge
Replies: 5
Views: 1166

Slave interfaces vs Bridge

Hello all, I would like to know what exactly is a "slave interface" on router os parlance. I've googled, and this term does not seem to appear anywhere outside of mirkotik/routeros context. This page http://wiki.mikrotik.com/wiki/Manual:Initial_Configuration for example talking about removing interf...
by zespri
Sun Mar 27, 2016 2:12 pm
Forum: Scripting
Topic: Webfig with HTTPS support?
Replies: 22
Views: 16240

Re: Webfig with HTTPS support?

Which RouterOS version?
6.34.3
by zespri
Sun Mar 27, 2016 5:08 am
Forum: Scripting
Topic: Webfig with HTTPS support?
Replies: 22
Views: 16240

Re: Webfig with HTTPS support?

This is what worked for me: https://blog.a2o.si/2015/08/11/mikrotik-how-to-generate-ssl-certificate-and-enable-https/ #1. Create CA certificate first: /certificate add name=my-rtr-ca common-name=my-rtr-ca key-usage=key-cert-sign,crl-sign #2. Sign the CA certificate: /certificate sign my-rtr-ca #3. N...
by zespri
Sat Mar 26, 2016 3:05 pm
Forum: Beginner Basics
Topic: Reflash gone wrong
Replies: 4
Views: 603

Re: Reflash gone wrong

and wondering why u not prefer to upgrade it through winbox interface than netinstall it
Well, I'd never done that before, so I figured I'd learn how to do this in case I need it later.
by zespri
Sat Mar 26, 2016 3:03 pm
Forum: Beginner Basics
Topic: Reflash gone wrong
Replies: 4
Views: 603

Re: Reflash gone wrong

What wireless package are you using? If you are on wireless-fp change it to wireless-cm2. On mine i have wlan2 only with cm2
Yep, that was it. Thank you very much, really appreciate your help.
by zespri
Sat Mar 26, 2016 1:51 pm
Forum: Beginner Basics
Topic: Reflash gone wrong
Replies: 4
Views: 603

Reflash gone wrong

Hello, I bought a new microtik hap ac lite (RB952Ui-5ac2nD), it came with version 6.30.4. I reflashed it with netinstall to the latest version (6.34.3) and the second wlan interface disappeared. How do I get it back? I tried to reflash back to 6.30.4, but netstall complained that the board does not ...