MikroTik

korg

Ok...This 'lab' was just 'a basic how can i connect to the customers MT's' in order to support them. Meaning, if i have the customer which has 7 VLAN's than i will need to connect to all VLANs which means 'allowed-address=ALL VLANS SUBNETS'. Usually i have customers which have either 4g/5g connectiv...

korg

So, @anav... with other words... even ethernet ports which have WG connectivity from one router to another (example router1 ether 2 - router2 ether1) needs to be within the bridge. Example, in my case spine spine /interface bridge port add bridge=bridge1 interface=ether2 add bridge=bridge1 interface...

korg

Attention to detail my friend! SPINE 1. You need to add ether 2,3,4 to the bridge ports! ( assuming they are part of your LAN as you have no other ports or addressess delineated ) 2. If the Spine is behind another router fine, if not, pull the ethernet cable from the modem , as you have no firewall...

korg

@anav: great help! Tx again!!! only thing which i hopefully have understood is that i've added on spine to the fw rule: add action=accept chain=forward in-interface-list=LAN out-interface=wireguard-S but i do not see any traffic on that rule. LAN list is ether2-4. Here are scripts of the spine and l...

korg

Ok... so according to @anav, spine should be /interface wireguard peers add allowed-address=10.20.100.0/24,10.30.100.0/24,'whatever remote ip of the peer the spine should connect to' endpoint-address=public ip address resp. dyndns(cloud) address of the leaf(s) endpoint-port=13299 interface=wireguard...

korg

KISS?

korg

Tx Amm0.. i am using 4G connectivity as fiber for me resp for the town where i'm living is like future far away!

So, zerotier is no option for me

tx anyway

korg

just use zerotier + romon is much simpler and use routing if you need no reach LAN subnet, just my 0.2$

you mean... you have a 'ready to go' solution?

korg

1. so i should put ether2 out of the dhcp server? And should put the ip of the leaf1 (and 2 and 3) in the wg setup..something like this? /interface wireguard peers add allowed-address=10.20.100.0/24 endpoint-address=192.168.216.135 (or if the public ip address is dynamic, i put here cloud dns addres...

korg

This is my test setup. It is just simple setup with two goals: .get the wg connectivity running between spine and leaf1 and spine and leaf2. not between leaf1 and leaf2. .getting correct ip address of the VPC's on leaf1 and leaf2. 2024-04-02_12h56_03.png IP addresses: spine 10.10.100.0/24 leaf1 10.2...

korg

Hello to all, I am Looking for a easy and userfriendly support resp connectivity to my customers mikrotiks. To setup a ‘wg site to site’ connectivity from my to all customers mikrotiks would be an idea (the connection would not always be active. Only in a case od support issue). How are you supporti...

korg

anav: Yup too funny, good pickup...... add address=172.16.0.1/24 interface=wireguard1 network=172.16.0.0 me: :).. i was missing something :) anav: Vlan dont need routes? They get routes when creating the vlan (ip address). Do you mean a route out the router..... /ip route add disabled=yes dst-addres...

korg

anav: Yup too funny, good pickup......
add address=172.16.0.1/24 interface=wireguard1 network=172.16.0.0

korg

And also routes for each VLAN?

korg

@anav: do i miss the wg interface IP address in the 354-Spine config?: /ip address add address=10.10.100.254/24 interface=vlan100-corp network=10.10.100.0 add address=10.20.100.254/24 interface=vlan200-guests network=10.20.100.0 add address=10.30.100.254/24 interface=vlan300-cameras network=10.30.10...

korg

Ok.. i will check it with a real devices as i have two of them here.. and will let you know...

Again great help!

korg

Ok ... maybe I've explained clumsily...

i've implemented your configurations for both 354 and 326... not mine... and i saw .. testing in EVE.. that I could ping one client from 10.30.100.100 to 10.70.100.150

thats why i've metioned it

korg

Thanks again.

No device from vlan100-700 should be able to access or ping devices from another vlan unless accessing the network, i.e. any vlan from vlan999-mgmt. And on the vlan200 (guest network) i should isolate clients.

korg

Many thanks! This is now much better config! Thanks for this learning process! I have tested all ehters withing EVE test lab and they are getting the correctly assigned subnet. What i've seen though, is that those clients can still ping each other. 2024-03-22_17h20_32.png 2024-03-22_17h22_48.png Do ...

korg

WG-Diagram-more-routers-no-112v2.jpg CRS354 Spine # software id = # /interface bridge add ingress-filtering=no name=bridge-main pvid=999 vlan-filtering=yes /interface wireguard add comment="Wireguard for RW's" listen-port=13299 mtu=1420 name=wireguard1 /interface vlan add interface=bridge...

korg

anav : You claim APS 1-5 by your diagram and in orang text seem to indicate they are on ports 10-18 (9 etherports) carrying vlan100,200 So which is it FIVE APS on ports 10-14 for example, or 9 APs Heck your text in the middle block is different again it states or identifies only 3 APs on ports 6-8 ...

korg

1. on my eve lab the clients can ping one another: address 10.30.100.150 can ping 10.70.100.150.. which is not ok 2.i See 3.shouldn't it be? So i am telling that the bridge on 354 is carrying 999 as a mgmt. 4.done 5.adding a new diagram... 6.yes... typo.. corrected in the new script 7.done 8.done 9....

korg

What i've just noticed, playing with my EVE lab that no matter if i connect to the vlan100 or vlan700 or whatever lan, i can easily ping other subnets. Example: if i am in vlan 600 10.60.100.0/24 i can easily ping 10.10.100.0/24 or even 10.99.99.0/24 mgmt subnet. So, assuming i've done something wro...

korg

Guys, you've been just great! Great community! So happy to be a part of it! Let's continue. I've configured now the CRS326 part and i get VLAN accessed in the corret manner. This is the config (only crs354 and crs326 - no crs112) 2024-03-21_16h57_36.png Code CRS354 # mar/21/2024 15:58:24 by RouterOS...

korg

Is it too much to help me out on that config for CRS112?

korg

Ok, so you think, if i do 'the same config' on CRS326, with existing config of the CRS112 it should work? As.. i have never worked with the switch chip before...

korg

anav... great help, great learning process! Many thanks! I have something not from the my lab but from the 'real life' which i would like to ask you. I have an crs354 (in the script there are only 24 port not 48 as EVE is not allowing me to have a 48 port device) which does everything from the attac...

korg

anav.. many many thanks for your help! still.. i have few questions regarding your description.. 1.'Each RW should have a setup such that you have...' means what? 2.'IP address ---> as we assigned in the peers settings on the router....' i dont see the public dyndns address (as i will not have a sta...

korg

Hi, i've updated the diagram again. so, back to the initial question, is this (within the code) correct way to setup a wireguard config for multi users accessing only vlan which they suppose to access and for the connection behind the NAT? .where do i specify resp what would be the public address fo...

korg

Hi anav, so here is the clarification. I've updated the diagram a post above with more information's so pls check the new diagram picture. .Mikrotik router is connected as dhcp-client at ether1 port with 5G router given by internet provider and its public IP address is dynamic .vlan999 is my mgmt su...

korg

tx anav... i've edited my script upon your tipps and now it looks like this: # mar/18/2024 16:34:44 by RouterOS 7.9.1 # software id = # /interface bridge add ingress-filtering=no name=bridge1 pvid=999 vlan-filtering=yes /interface pppoe-client add add-default-route=yes disabled=no interface=ether1 n...

korg

Hi erlinden, tx for your answer. Here is a diagram of my config.

WG-Diagram-v3.jpg

I hope, I've made it understandable.

korg

korg

Hello MT community, i am setting up a config for a MT router which is behind NAT, has multiple subnets devided in VLANs. What i need is to setup Wireguard connectivity for different user to their own subnet/VLAN. Attached config is from my EVE lab and not online. Example 10.99.99.0/24 is mgmt subnet...

korg

Great input guys! :) thanks for that. Ok.. i'll will start my own thread... What i've done is setting up those VLANs which are working.. so i am now looking for the possibility for the connectivity outside the company for different providers (for the water pumps... for the dali electricians and so o...

korg

Hi Filament, i am planning to do such a config for my configs and would like to post complete setups here for both router A and router B. In my case, i will have something like 9 VLANs and will need to setup several Wireguard connections, one for each VLAN. The thing is i would like to use your basi...

korg

+1
korg_01@yahoo.de
tx

korg

Tx Merialoren34 for your answer.. but crs328 HAS L5 license integrated so i should be able to have those '50 sessions'... thats why i am asking it in the first place... one user resp one session is working.. but as soon as i add resp try to connect with another user.. i get an error message 'radius ...

korg

Hello to all, i have set up a RADIUS server for hotspot - guest wlan access. What i've noticed is that I could only connect to ONE user in ONE session. Even if i defined few other users i was not able to access the internet resp captive portal kept saying 'radius server is not responding'. Ok.. then...

korg

yes... true... so... i can not use 4 x 4 with this antenna...

The chipset is capable, does your mobile network support 4x4 mimo yet?
According to documentation LHG LTE18 have 2x2 mimo only.
4x4 mimo is for new ATL device..

korg

Yes.. i have direct visibility to the tower.. ok.. tx.. i'll try to 'play' with locking the B7 which country is it? i'm in Latvia.. and looks like you have very strong signal, but signal quality is so so.. SINR looks very bad.. do you have direct vision to the tower available? in my country CA works...

korg

Yes i can but i get much lower speeds.. especially in DL... Can you combine B3+B7? https://cacombos.com/device/RBD53G-5HacD2HnD-TC-EG18-EA The chipset is capable, does your mobile network support 4x4 mimo yet? https://halberdbastion.com/intelligence/mobile-networks/a1-hrvatska-vipnet < may have old ...

korg

which country is it? It depends.. there are so many factors involved.. so, LTE18 can do 4CA, if you have so much bands available, then you can use them in LTE18. i have LHG LTE18 for about two weeks now. in my place is get ~150/60 Mbit Down/Up. for me biggest improvement was upload speed, LTE18 can ...

korg

Hello, i just got my new LGH CAT18 antenna and i've tested it immediatelly. So, not so happy :(... this is with no bands chosen - default settings and i am getting like 25-30/60 DL/UL mbps 2022-10-27_17h01_24.png This is if i have chosen only band 7.. i am getting like 65/60 mbps DL/UL... 2022-10-27...

korg

ok.. thank you for your info ..

my current SXT LTE6 speed is like 50/40 and i am more into DL speed.. and hope that i will get over 100 mbps DL speed... definetely.. the UL speed is not to be disregard ..

tx again...

korg

Hmmmm ok... i see.. i have ordered one to test.. so i will let you guys know about my experience

korg

hi to all i was and still am using SXT LTE6 and in a quiet times (i mean times where there are not so many mobile users around the basestation i am aiming at) i get aroung 70-75 Mbps DL speed. I was wondering did any of you guys get the new LHG CAT18 device and how are your experiences with the DL/U...

korg

So, neither Normis or other MT guys have answered this thread so I am assuming that the next MUM Meeting will be held in 2023.

Pity... i was hoping for 2022 actually

...

korg

korg

Hello,

maybe the "general" topic is not the correct place for my questions but, i am sure lots of us are wondering weather MUM"s will be held this year somewhere in Europe. So, are you planing us a kind of (positive) surprise and MUM Meeting are planned for 2022?

tx a lot

korg

korg

Hi and tx for your answer.

i want to be able to admin their network.. like 'this is not working...' or 'pls change wlan password'...

sstp is less secure isnt it?

korg

Hello there, i was wondering, as I am on it to establish connectivity to all my customers MT's (to see weather the main GW is online, possibility to connect to that particular subnet...) what would be the 'best' (in a sense of a 'easy' setup, not using much resources and so on) way to define and use...

korg

Tx a lot. i'll try according to all those instructions

korg

korg

Hello,

i would like to install two R1-LTE6 mini PCI cards in the LtaP, bothe connected to the external antennas to achieve higher Internet speeds for my customers. Does someone have such experience? Can both card run simultaneously?

tx

korg

korg

Hello,

since winbox 3.30 all addresses resp saved clients under 'managed' are gone and even after importing the list, the list is not appearing under the managed devices.

Any help/tipp?

tx

Korg

korg

Hi there,

i had the same problem.. and hve resolved it with adding (always adding as soon as i connect via VPN) a statis route like

sudo route -n add -net (subnet of the local network to which you are connecting>)/24 (subnet of the vpn ip range - if any present)

i hope this will help

korg

korg

So, now at 17.11 i have tested my speed through your test server and it worked.

tx

korg

korg

Hi... 1. i have dynamic IP address... so i really dont know which IP I had at that time... i will try it and then send you my current IP.. maybe that will help 2. Neither nor. its a simple LTE connection and in the fw its just input allow and deny upon the connection status and for the forward as well

korg

Unfortunately i can not make it work..

i've entered your given IP address but... my MT is always 'connecting'.

korg

Screen Shot 2019-12-09 at 12.23.55.png

korg

Hi, my idea was to setup three different WLAN's on three different AP's but to use the same hotspot pool and hotspot server. i had following idea while setting up the hotspot .. why not use the same hotspot server resp same dhcp server but only on three different WLAN's with three different html's.....

korg

Hvala ti :)... I see.. Could you maybe.. upon your experience ... change my code with your suggestions? VLAN and so... My logic was.. ok.. i have a bridge and those two ports VLAN20_Office and VLAN30_Guests should be tagged... and MGMT not tagged... or... if you can... maybe to write me (a mail) wit...

korg

Hi roswitina,

did you see my topic which have the same subject?

korg

korg

Hi Sindy,

did you see my code?

tx

korg

korg

Hi Sindy, here is my code... GW: /interface bridge add name=WIFI-br0 protocol-mode=none add name=bridge1 /interface ethernet set [ find default-name=ether7 ] comment="AP 1" name=AP1-NET-eth7 speed=\ 100Mbps set [ find default-name=ether8 ] comment=AP2 name=AP2-NET-eth8 speed=100Mbps set [ ...

korg

Hi Sindy,

thank you very very much for your help... i really appreciate it ...

...

i haver configured the setup in a bit different way.. and will paste my config later today... i would be curious to hear it from you...

tx

korg

korg

Really? wow! thanks a lot....

could you post it here .. resp send me a pm?

tx

korg

korg

ok...

... i have understood the riddle

tx

korg

korg

i dont have MT AP's but UBNT.. two mesh pro. Which means the VLAN approach is mandatory. From what I have learned here at the forum, UBNT can link each SSID to a VLAN but the management must be tagless. So you need three subnets/VLANs - one tagless for management of UBNT, one tagged for "office...

korg

Thank you Sindy. I know .. its 'network basic'.. and i understand and know 'how and what' i need to config.. the issue is.. how.. i mean how must i config 3011 to act as a router, firewall, VLAN.. and so on...i know that i need to mangle traffic from every SXT to be able to define 'which traffic sho...

korg

Hello, i need to make the following setup: i have two SXT LTE's with two different providers (SIM cards). Each of those SXT's should provide internet connection for two different subnets: office and guests. 3011 should act as the router and should provide DHCP servers for those two subnets. Now, two...

korg

I've found one of the GDPR parts of secure MT's.. in this case its talking about SOHO NAS security... Port knocking is the subject.... they are using it in order to secure access for the winbox serivce... https://mum.mikrotik.com/presentations/BU19/presentation_6879_1560110235.pdf so, apart from the...

korg

Yes and no... so, if i .. for example enable logging in with facebook or some other social media... i do not need any 'extra' config within the customers fw? I am also thinking about.. do i need extra security for example.. to connect to the server only through VPN and not RDP port... 'must' i disab...

korg

Hi, i have several clients who are using MT as a FW. They are also having Hotspot functionality within their site. Is there any 'specific' FW setup in order to comply GDPR law? did anyone 'had' this issue... resp needed to 'correct' its config on the FW? tx for any tip and help and insight :) korg

korg

Hi,

thanks for your answer... but it does not... thats the problem.

i get the correct IP address resp subent... but i can not ping no IP address friom that range...

korg

korg

Hi, i have almost the same issue... My local IP subnet is 10.0.255.0/24. i have setup the L2TP VPN on my MT and within the profile of the L2TP to get a local IP address 10.10.10.1.and remote client 10.10.10.x/24 resp from the l2tp-pool. i get the correct conection but i am not able to see the local ...

korg

I could emulate such a configuration in GNS3?

korg

Ok.. tx.. i'll post a rsc file when i've set up this configuration but .. tx for your idea

korg

korg

Exiver,

tx a lot. I will try all three ways of 'allowing' or 'disallowing' a discovery.

tx

korg

korg

Hi,

i was wondering how can i make my MT 'invisible' from the winbox discovery interface? For example, i have two WLAN networks. If in first (in one subnet) my MT can be discovered, if another (different subnet) my MT does not show up.

How can i setup such a configuration?

tx

korg

korg

Hi,

i have a question. How can i setup a MT router with two different subnets so that each subnet uses its own SXT LTE antenna?

Screen Shot 2019-04-25 at 00.56.35.png

tx

korg

korg

Hi,

how did you setup a hotspot authentication via SMS? Is it possible to get a script for it?

tx

korg

korg

Hello, i am running high sierra and downloaded winbox app from jos's website... if I start the app.. i get immediately an error message .. could not save configuration Screen Shot 2019-04-13 at 20.45.34.png ... Even if i try do update the app.. its not letting me.. i did a chmod 777 on com.mikrotik....

korg

hello there, I was wondering if it would be possible to have for every hotspot user a different landing page? I know there is a file in hotspot html's where I can add a page which will be accessed after successfully connecting to the hotspot. and its valid for ALL users. Now, I would like to have a ...

korg

Hello, I know its pretty simple and basic question to to group but... ever since I have uploaded MT from 6.35.x to 6.44 I see some devices shown in Winbox twice like this... Screen Shot 2019-03-13 at 15.50.21.png I assume it has something with discovery interfaces or a new setup. So, what should I c...

korg

Filip,

you can contact me... I could help you

Zeljko

korg

@pcunite: could you please explain me this line # Set the port's egress behavior. How would you know this? /interface bridge vlan add bridge=B1 tagged=B1 untagged=ether1 vlan-ids=20 is this correct understanding of this line? I am defining a VLAN bridge (so all included interfaces in the VLAN bridge...

korg

Hi,

my domain name does not have name local in it and it still does not show pop up.

korg

korg

No one?

korg

Hello,

i am wondering why is my wAP LTE resp DHCP on it keep dissociating DHCP clients every 10-15 min. Myt ROS is 64 and it has very 'simple' setup...

Should I post rsc?

tx

korg

korg

OK....

sure... you're right...

tx

Korg

korg

And... how can i Limit only this one particular MAC address to connect to the WLAN network?

korg

korg

Tx a lot... I'll use your tipp

korg

korg

Hi, i have a question about allowing resp disallowing one certain IP address from the subnet to access nothing else but internet. So, i have a office subnet 192.168.0.x... i allowed one laptop to access this network .. but.. now it can see all network. How can i setup FW so that this IP has ONLY con...

korg

If Vigor is having DHCP client as well, just enable DHCP-CLient on your Mikrotik and add a route to it.

korg

Hi, My customers are experiencing connection issues with SXT LTE antenna meaning that every once in a while the lte connection drops. What they then do is restart the antena. Is someone aware why is that hapenning? The signal is pretty ok -75dB... if i restart the antenna everything works normaly. T...

korg

Hi, My customers are experiencing connection issues with SXT LTE antenna meaning that every once in a while the lte connection drops. What they then do is restart the antena. I was thinking maybe to use a script saying if no active lte connection then restart the antenna. Could someone help me in th...

korg

Tx to all...

so... 5 Ghz is 'working'... tje signal is approx -72-73 dB... i know this is on the edge .. but its working...

tx for all your inputs

korg

korg

Hi,

@mistry7.. it is a lot... actually .. there is no LOS whatsoever between those two locations...

i'll stick to 5G...

tx

korg

korg

Hi, i need to connect two remote places which are approx 70-80 M away from each other. If the LOS would exist.. this would be no issue to connect those to point by two 5 Ghz antennas via PTP. BUT... there are trees in between them.... i put the 'station' antenna like 6 7 m above the spot... but stil...

korg

No one?

korg

korg

Hi, i have a working hotspot and wanted to bypass login page for some users. There are lots of 'how to' videos and web pages around and they are all saying: .make a static IP address of the wanted device in DHCP leases .choose make binding .thats it! but.. it is not working.... My wish is to allow ....

korg

I see... even me.. i did not do any multiple bridges over single wireless link...

tx anyway

korg

korg

I have three disctinted bridges for each and every IP subnet. Via LAN it would be pretty straight forward to setup EOIP tunnels but here i have a wireless link between locations. thank you for the suggested link where is shown and described how to connect different VLANs but i have several things/is...

korg

So Sindy, if i understood correctly... i can establish wireless link between two SXT5 devices (through what? repeater option or PTP option?) and with one EOIP tunnel i could 'push' all other EOIP tunnels? Something like... .establish wireless link between two SXt5 antennas with repeater option .defi...

korg

@Sindy... sorry... i did not draw every MT device .. especially on the bottom right... SXT 5 is connected to PowerBox which will deliver PoE and act 'as if' a small switch/router. So, this is correct drawing Screen Shot 2018-07-01 at 11.31.39.png My question is and remains, how can connect those thr...

korg

Hi SIndy, tx for you answer... here is my drawing Screen Shot 2018-06-30 at 20.54.28.png So, i have 3 ip subnets... and i want to connect those sxt 5 via PTP with all three IP subnets... to be able to to have everywhere all three subnets available. Why did i mention unmanaged switch? because i have ...

korg

Hi, i want to connect two places with SXT 5 via PTP but... i have in my main gateway several EOIP tunnels. For different IP subnet i used different EOIP tunnel. In order to 'extend' those IP subnets via PTP links... should i connect only main EOIP tunnel or must i have connection .. lets say 3 EOIP ...

korg

Sure i have... with no help... on the contrary.. i had to redo all config of the router .. its is a 850gx2 as the device was unresponsive after update to 6.42.2...

but still it does not work...

korg

korg

Hi, i am having this issue since 6.42.. and have written to Mikrotik with not so big improvement. The config was done on 6.32.3 and it was working just fine until I have updated it to 6.42 and since then.. the same issues.. my Hotspot users are getting the correct IP address from the Hotspot pool bu...

korg

Hi... i have almost the same problem... after ROS upgrade to 6.42.1 the captive portal has not been showing anymore... on previously normal working three hotspot servers... As user Xcelsium i did not use wireshark to debug the network traffic... but i see that none of the Hotspot rules under NAT are...

korg

HI,

I have almost the same problem... my hotspot login pages are not opening at all... and this happened since update from 6.33 to 6.42...

did you get some workaround from MIKROTIK?

tx

korg

korg

I have tested it... if I put a MAC address of a device which has got an ip address from the dhcp hotspot server.. and put it into IP BINDING.. it works... so.. with other words.. hotspot is working... but.. why isn't it showing html login page any more?

korg

korg

Hi, till the update on 6.42... my hotspot was working fine but then the pop up page is not showing anymore. I have tried to downgrade my router where hotspot has been installed but no success. now my router is running on 6.33. Does anyone has an idea why the html is not showing on the logged devices...

korg

no one?

korg

Hi, i would like to connect wAP LTE Kit to existing network with and another ADSL pppoe internet connection. What i would like to do is use both internet connections LTE Kit and existing ADSL. 951 is acting as a router and dhcp. Now, am i not sure how should i connect LTE kit. Should i make a bridge...

korg

Hi, i have 3 hotspots on my 850gx and since update on 6.42.1 no one can access html page resp the login page does not show up. and what i see that all three bridges which are 3 hotspot connected.. all of them have the same MAC address. Here are some logs from 850. Screen Shot 2018-05-01 at 22.51.39....

korg

Tx guys...

what i did is ..i've added those two lines

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-out2-wanted

/ip route
add distance=1 dst-address=192.168.92.0/24 gateway=pptp-out2-wanted

and i could both ping and access remote 192.168.92.0/24 subnet.

tx again

korg

korg

Hi.. i need your help resp a tip where am i missing the point. I know that configuration is pretty simple but still its not working.. i have my local network 10.0.0.0/24 subnet... and have connected to the network 192.168.92.0/24 via VPN PPTP. I got the local address 192.168.92.125. I have put route...

korg

Hi, i am curious... all Android users don't get and see the splash login page for the hotspot and all iOS users do. Resp.. the splash login screen pops up automatically on iOS devices but not on Android devices. Is this a 'common' MT issue or just an Android thing? Even if I enter the IP address of ...

korg

are u totaly sure about the IPs and Subnets given ? /23 ? Yes... totaly sure pls provide full config or screenshot of firewall and NAT FW.png NAT.png Did you use Wizard ? Yes.. i did Lancom has DHCP-Server enabled on ETH4 ? No.. LANCOM has static IP address which i have given to the TCOM Technician...

korg

Hi, i have the following setup: Screen Shot 2017-12-15 at 16.25.44.png My MT 850 has gor two bridges: one for OFFICE users (192.168.0.x/24) and other for GUESTS user (10.5.50.0/23). MT Hotspot resp bridge guests has ip 10.5.50.1.MT is connected via Eth3 (which i put to bridge guests) to LANCOM route...

korg

Thank you, its working. So, no default authentication and Access list with those entries...

great

korg

korg

Hi,

i have put this code to wireless tables - access list but it does not seem to work. I wanted to setup 'if the signal drops under -75 then this client should disconnect from wlan'.

Any other suggestion?

tx

korg

korg

Hi, i would like to MT automatically disconnect resp 'delete' all entries from a registration list on my WLAN AP if the client is for example 10 minutes inactive or if the signal drops under 78dB or,,, Where is my issue? i have set wireless - advanced - max station count 30 and it 'fills up' very qu...

korg

Sash7... tx... Do.. setup a new DHCP only on WLAN... different than the actual bridge.. and in the firewall forward from one to another subnet... I'll try... But what i've noticed... if i setup a virtual wlan and put a queing on this Virtual AP interface.. it works fine... so... it looks like softwa...

korg

Hi...

thank you for your reply...

I have also a bridge in my setup.... but...thats the point.. i dont want to put whole bridge to queing .. only WLAN interface....

korg

korg

i was trying to out simple queue on the WLAN interface but it was not working... if i out though on lets say bridge1.. its working... Does it mean that i can not activate queue on WLAN interface... resp interfaces at all? Or there can or could be another way to apply queing on WLAN interface? tx korg

korg

Hi Sob, correct... my code is wrong.. i am blocking from WAN (no need to block) in order to log... not very elegant :)... i've deleted it ... so... my issue.. or better to say.. my wish is.. to log the MAC address of the device (laptop/pc...) which is generating 'traffic' on port 53 resp which is tr...

korg

Hi Sob,

i have blocked also as you've said input part too... this line is only line with which i tried to log IP's into address list in order to block them.

Is there a way to log MAC addresses from local machines to see who is causing this DNS issue?

Korg

korg

Hi, i have put a line in the FW to track weather 'someone' is trying to use port 53 in order to send SPAM messages. add action=add-src-to-address-list address-list=53Drop17 address-list-timeout=1d chain=input comment="Deny openDNS relay" dst-port=53 in-interface=pppoe-out1 log-prefix=53_dr...

korg

Hello, i need to allow to one certain device within the hotspot DHCP range.. resp one certain IP address to connect to the internet without this login page... I've read it here in one topic that i should enter something like this /ip firewall mangle add src-mac-address=<MAC here> disabled=no but.. c...

korg

Thank you jarda...

maybe I should concider this...

good point on two radios... i am havig like 20 AP's connected via LAN ... and i have set them all to the same frequency in a sense to have a 'roaming' WLAN.

is that correct?

tx

korg

korg

Hi all, i have setup the connection on a 951 taking the SSID from another 951. i got immediately the connection and 'i have an internet speed' but very very poor. on the 951 from which I am taking the 'connection' is connected with LAN to the network and has BW like 750 Mb/s (both send receive). if ...

korg

Hi,

sorry for a late answer... i did not manage to have it operational. i have used the telekom router and have put dhcp client on a port.

korg

Hi, so .. yes .. i've connected them as station bridge/ap bridge (wlan1/virtual ap) and on the other device also the same station bridge/ap bridge (wlan1/virtual ap). What i did also is that I used the same SSID for both 'parts'.. station bridge/ap bridge (wlan1/virtual ap) on both devices. in brid...

korg

This is what i did... on the first 951 i defined two wlan networks: first is ap bridge and the second is station bridge and on the second 951 vice versa.. first wlan is station bridge and the second is ap bridge...

korg

No one?

korg

korg

Hi, i have connected two routers 951 (first is a Gateway.. second should be as a repeater) via wireless-rep to one another (first 951: wlan1 station pseudo/wlan2 internet - second 951 wlan1 station pseudo/wlan2 internet), have put in the second 951 in bridge wlan1, wlan2, eth2, eth3 and as dhcp-clie...

korg

Again.. many thanks!

korg

korg

Thanks a lot...

Do you know maybe does T COM Deutschland uses VLAN 7 resp. do i need to set it up manualy in the MT or does the VDSL Modem does that?

tx

korg

korg

Hi, i need to connect a Mikrotik 850Gx2 with german VDSL connection with Annex J via PPPOE connection. Is it possible to get mikrotik connected to 'any' VDSL Annex J modem with PPPOE connection like .. for example with Annex B? is it like... i enter user: 81747372734732742#t-online.de pass.. as it i...

korg

No one?

korg

korg

Hello, I have activated proxy on my 951ui, and have added for ip -web proxy - access *rapidgator.net* host (in order to 'avoid' proxy) but everytime i try to download something from rapidgator (for example i am clicking on a link like this... http://rapidgator.net/file/60824e3ba6799a68c49913df3e6fa7...

Search found 141 matches