MikroTik

hanyassar

Ideally you can't - if trial is available then registered users could potentially use the trial period over and over - or you could move to something like MAC based auth/cookies to help avoid it - but then any secondary devices etc may need their own account - or in cases like iphones where they ch...

hanyassar

any ideas guys?

hanyassar

Hi guys, I have in issue in my mikrotik network. The situation is as follows: I have about 500 users which I created in the hotspot as users, all these users have account with traffic limit enabled for them. And I have just activated the trial in my mikrotik for users that are not already created in...

hanyassar

Oh, thanks for the notice.

hanyassar

It is complex. You are talking about more than 5 years of updated configurations due to several networks situations. One of the required updates is the vlan configuration. At the moment all I did is enabling the AP isolation from the Access Points to make sure that clients can't connect with each ot...

hanyassar

The main goal is to be more secure. In other words, to prevent users with rooted mobile devices to scan the network for mac addresses and try to bypass the hotspot. If the goal is to make sure wifi client does not talk to each other, then I would use this: /interface wireless set wlan1 default-forwa...

hanyassar

I have tried the suggested procedure, but It didn't work. No internet connection at all + took alot of time to acquire IP These are the configurations done in the mikrotik: # sep/16/2018 13:56:49 by RouterOS 6.43 # software id = U01F-YTS8 # # model = 2011iL # serial number = 52A5049D7B9E /interface ...

hanyassar

I will test your procedure and update you with the results. Thanks for the reply...The Access Points I'm using are TP-Links and and not Mikrotik. Do you suggest me trying your method? Is mine wrong? I'm not sure what you did configure and what might be still missing. If it's not working for you, you...

hanyassar

Thanks for the reply...The Access Points I'm using are TP-Links and and not Mikrotik. Do you suggest me trying your method? Is mine wrong? If APs are mikrotiks, then you may want to start using CapsMan. There are 3 steps when configuring VLANs: create necessary vlan interfaces on 2011's bridge (/int...

hanyassar

Hi guys, We are using Mikrotik RB2011iL as a hotspot in our network. The topology is as follows: ether1 is WAN port ether2 + ether3 + ether4 +ether5 is configured as a bridge Hotspot is configured to distribute via the bridge at the moment, everything is working fine, and I have more than 20 Access ...

hanyassar

Guys?

hanyassar

Hi guys, We have two ISPs as follows: ISP1: Gateway:192.168.1.1/24 ISP2: Gateway:10.20.16.1/24 (with parent proxy 10.12.0.32:80) And we have two LANs as follows: LAN1: 10.10.10.0 LAN2: 100.100.100.0 We are thinking about using mikrotik RB2011iL as a web proxy for LAN2 and a HOTSPOT Server for LAN1 a...

hanyassar

Of course you can - but it is transparently redirected to your proxy.
-Chris

Thanks for your time.

hanyassar

Perfect. In this case, you just need to add the other ports (3128,8080) to the rule. So all outgoing traffic to (standard) proxy ports will be redirected as well. -Chris Thanks for all your efforts. I added the ports to my nat rule, but I still can browse the internet by adding the parent proxy IP ...

hanyassar

/ip firewall nat add action=redirect chain=dstnat comment="force my proxy" dst-port=3128,8080,80 src-address<your desired subnet> protocol=tcp to-ports=8080 -Chris Thanks for your reply I have a nat rule to redirect traffic to my proxy. /ip firewall nat add action=redirect chain=dstnat ds...

hanyassar

Hi all, We are using Mikrotik RB1100AHx2 as a proxy solution. And we are serving at least about 120 users. We are using VPN and a parent proxy from out ISP to access the internet via their VPN. The pronlem is that if users configured their web browser with the parent proxy they bypassed our Mikrotik...

hanyassar

I don't know about the hotspot part, but generally you can either find address ranges used by given service and block access to them, or do your blocking using DNS. The trouble with first one is that people want to block e.g. Youtube, so they find Google's networks, block them and then they get ter...

hanyassar

Anyone guys?

hanyassar

Hi all We have a mikrotik rb2011 board and we are using it as a hotspot solution for users in our network. My boss wants me to block all social media applications and sites from 08:00 am till 13:30pm everyday for some users. And I don't want to use proxy feature in mikrotik to achieve that.The probl...

hanyassar

Basically depending on what you set your limit on. Right now it is set to 50 KiB which is the size of each PCQ-queue. you mutiply that by the number of individual queues you require (concurrent users you expect to have connected) ie 80 which gives you the pcq-total-limit= 4000KiB . you then need to...

hanyassar

/queue type add kind=pcq name=pcq-upload-1M pcq-classifier=src-address pcq-rate=1M pcq-total-limit=4000KiB add kind=pcq name=pcq-down-1M pcq-burst-time=8s pcq-classifier=dst-address pcq-rate=1M pcq-total-limit=4000KiB /queue simple add max-limit=10M/10M name=Subnet queue=pcq-upload-1M/pcq-down-1M t...

hanyassar

The dropped packets happen when the users queue is full ie they are exceeding there allocated bandwidth. TCP detects these losses and will re-transmit that packet. A certain amount of packet loss is required to reduce throughput or throttling the connection. Without the dropping of packets you woul...

hanyassar

/queue type add kind=pcq name=pcq-upload-1M pcq-classifier=src-address pcq-rate=1M pcq-total-limit=4000KiB add kind=pcq name=pcq-down-1M pcq-burst-time=8s pcq-classifier=dst-address pcq-rate=1M pcq-total-limit=4000KiB /queue simple add max-limit=10M/10M name=Subnet queue=pcq-upload-1M/pcq-down-1M t...

hanyassar

/queue type add kind=pcq name=pcq-upload-1M pcq-classifier=src-address pcq-rate=1M pcq-total-limit=4000KiB add kind=pcq name=pcq-down-1M pcq-burst-time=8s pcq-classifier=dst-address pcq-rate=1M pcq-total-limit=4000KiB /queue simple add max-limit=10M/10M name=Subnet queue=pcq-upload-1M/pcq-down-1M t...

hanyassar

Are you limiting each user to a certain speed. or to the 10 mbps total is the max a user can get.

Thanks for replying.

I want to limit each user to a certain speed. and the total of speeds for all users is 10Mbps.

hanyassar

Hi,

We have a 10MB internet connection and we are using mikrotik as a proxy server and a quota management solution. I need to distribute the 10MB for about 60 clients PCs. What are the recommended parameters should I use in PCQ?

Any detailed suggestions will be great.

Thanks

hanyassar

Have a look at the Wiki in regards of PCQ. If you want to share available BW on a fair basis, you'll need to set queues Queue tree using PCQ; if additionally you want to limit each user's maximum possible download rate, you'll need simple queues for it. Thanks for replying. The problem is that I'm ...

hanyassar

Thanks for replying...

hanyassar

Hi all,

I'm trying to use PCQ to divide the bandwidth equally between about 150 users. The total internet speed we have is 8M and I want to limit the download for every user to 4M. I'm confused between (Rate, Limit, Total limit) in the Queue menu. Can anyone clear it out for me?

Thanks...

hanyassar

Any think used to drop any website or application from firewall?

I didn't understand your question...

hanyassar

Hi all, We have a problem while trying to use TeamViewer in our network. We are using Mikrotik as our proxy for the entire LAN. The problem is when we try to use TeamViewer it connects and then after seconds it shuts down. I searched over the internet and all I found that how to block TeamViewer so ...

hanyassar

Thanks...

I'll try the MAC Cookie and notify you if the problem is solved.

hanyassar

Hi there, We have a mikrotik RB2011il router board. And it is configured to distribute internet access users via HOTSPOT. Each user has a unique user name that is linked to his device MAC address. The problem is that the user has to sign in everytime he leaves the WIFI coverage area. Is there a way ...

hanyassar

Hi there, We have a RB2011 mikrotik router board, and schedule configuration is set to enable and disabling few web proxy rules on time bases. But each time, at power failure the clock changes! I have tried to use NTP client to allow the router to sync time/date with a Domain Controller but it didn'...

hanyassar

Any ideas how I can fix this problem?

Thanks for the reply...

hanyassar

Hi all, I'm using a mikrotik rb2011il board. and I have activated web proxy and configured it to deny everything except for some sites. The problem is that I can't allow the user to access Hotmail, or Gmail even if I put their address in the dest. host field in the web proxy access list. What is the...

Search found 36 matches

Re: Prevent Created Hotspot Users from using trial

Re: Prevent Created Hotspot Users from using trial

Prevent Created Hotspot Users from using trial

Re: Different Vlans for every Access Point

Re: Different Vlans for every Access Point

Re: Different Vlans for every Access Point

Re: Different Vlans for every Access Point

Re: Different Vlans for every Access Point

Re: Different Vlans for every Access Point

Different Vlans for every Access Point

Re: WebProxy and HOTSPOT

WebProxy and HOTSPOT

Re: Prevent users from using parent proxy

Re: Prevent users from using parent proxy

Re: Prevent users from using parent proxy

Prevent users from using parent proxy

Re: Firewall Advise

Re: Firewall Advise

Firewall Advise

Re: PCQ Advice

Re: PCQ Advice

Re: PCQ Advice

Re: PCQ Advice

Re: PCQ Advice

Re: PCQ Advice

PCQ Advice

Re: PCQ Instructions

Re: PCQ Instructions

PCQ Instructions

Re: TeamViewer not working

TeamViewer not working

Re: HOTSPOT login

HOTSPOT login

Clock/Time problem

Re: Allowing Hotmail only using Mikrotik Web Proxy

Allowing Hotmail only using Mikrotik Web Proxy