Community discussions

MikroTik App

Search found 14 matches

by rferroni
Tue Sep 23, 2014 10:54 pm
Forum: General
Topic: mark-connection VS mark-packet
Replies: 28
Views: 69128

Re: mark-connection VS mark-packet

Hi there! You can do it using just routing mark without problem. The only problem is you have to use IP address (not domain names). First in the firewall: Mangle table, chain=prerouting dst-address=IP action=mark-routing new-routing-mark=to_isp1 And then in your routing table you have to create a ne...
by rferroni
Thu Oct 31, 2013 10:46 pm
Forum: General
Topic: ovpn client disconnection
Replies: 0
Views: 423

ovpn client disconnection

Hi, We have arround 200 openvpn clients using routerboard 750 (v5.24 most of them) connected to a linux box running openvpn server on debian working fine until now! Some clients (maybe 20% of them) loss conectivity and reconnect to the server over and over again. We can probe the connection got lost...
by rferroni
Fri Jan 04, 2013 5:36 pm
Forum: General
Topic: Mikrotik DNS server issues with Amazon S3 - low TTL 60sec
Replies: 118
Views: 48750

Re: Mikrotik DNS server issues with Amazon S3 - low TTL 60se

thanks everyone!
we`ll start to upgrade a lots of mk`s!
by rferroni
Mon Dec 03, 2012 4:21 pm
Forum: General
Topic: mark-connection VS mark-packet
Replies: 28
Views: 69128

Re: mark-connection VS mark-packet

I`ve realized that I have the same problem.
I don`t wanna split into two different routesOS for now.
So I`m using mark-connection to ensure the flow through the proper interface.
And mark-packet alone for the queues (I`know this is not the best approach).
by rferroni
Wed Nov 14, 2012 7:30 pm
Forum: General
Topic: vlan passing through cisco switch
Replies: 7
Views: 1954

Re: vlan passing through cisco switch

Hi, Apparently after your test, you can guest that the mikrotik configuration is ok, so I recommend to check the cisco config: are the trunk port allowed vlans? Also, could you show us a brief graphic? Because I don`t follow you when you said that you connect directly (from/to what?) Hope I can help.
by rferroni
Wed Nov 07, 2012 2:54 pm
Forum: General
Topic: mark-connection VS mark-packet
Replies: 28
Views: 69128

Re: mark-connection VS mark-packet

sounds good news!!!
I`ll do some lab practice first because I have so many lines in the mangle that I`m a bit dizzy!
Yes, passthrough is very important I`ll check looking for mistakes.
thanks!
by rferroni
Tue Nov 06, 2012 5:05 pm
Forum: General
Topic: mark-connection VS mark-packet
Replies: 28
Views: 69128

Re: mark-connection VS mark-packet

Hi fewi, I got doubt about this marks. I`m using mark-connection in prerouting chain and then for two different reasons I`m using mark-packet (for queue tree) and mark-routing (to route through different wan`s) but I can`t use both, right ? I suppose that just can use or mark-packet or mark-routing ...
by rferroni
Thu May 24, 2012 10:53 pm
Forum: General
Topic: Mikrotik DNS server issues with Amazon S3 - low TTL 60sec
Replies: 118
Views: 48750

Re: Mikrotik DNS server issues with Amazon S3 - low TTL 60se

Today I have the problem in both dns servers. Feeling that I`m going backwards. As soon I have more time I will capture the packets and try to figure why, because works fine when I delete the second dns entry in the DNS configuration and flush the cache. But for now I`ll change the dns server in dhc...
by rferroni
Wed May 23, 2012 5:38 pm
Forum: General
Topic: Mikrotik DNS server issues with Amazon S3 - low TTL 60sec
Replies: 118
Views: 48750

Re: Mikrotik DNS server issues with Amazon S3 - low TTL 60se

hi, I´m having the same dns problem. it´s seem to be random. when I try to resolve several times I get not answer: :resolve dns.domain.com failure: dns name does not exist and then without doing nothing works fine (previous I flushed the cache). I can add some information but for now I can´t says wh...
by rferroni
Mon Jun 28, 2010 8:00 pm
Forum: General
Topic: feature request : ipsec with mode_cfg
Replies: 1
Views: 1105

feature request : ipsec with mode_cfg

Hi there, I've been working since a while with ipsec-tools and l2tpns in linux as a server vpn. The most of the client are windows, native connections (ipsec/l2tp) or using a client ShrewSoft (great soft!). Ipsec-tools let you simplify the connection using the mode_cfg (gather network information th...
by rferroni
Fri Jun 25, 2010 5:44 pm
Forum: General
Topic: IPSEC and NAT-T problem
Replies: 60
Views: 51843

Re: IPSEC and NAT-T problem

Me again, the last comment let me think and I just tried l2tp without ipsec and work great! I mean I can reach well from client to server IP tunnel and even more I can ping an IP address behind the server, after adding the necessary routes. So its let me know that l2tp isn't the problem, something i...
by rferroni
Fri Jun 25, 2010 5:00 pm
Forum: General
Topic: IPSEC and NAT-T problem
Replies: 60
Views: 51843

Re: IPSEC and NAT-T problem

I'm almost totally agree with siel. I'm trying to do the opposite, the client IPSec/L2TP RouterOS (v5.0beta3 and v4.10) and the server Linux with racoon and l2tpns. The client is behind the nat, the server has an IP Public (tipically roadwarrior scenario). The same happens, I have the SA's installed...
by rferroni
Wed Nov 11, 2009 9:51 pm
Forum: General
Topic: MikroTik User Meeting USA, Indonesia, Brazil and Argentina!
Replies: 16
Views: 5522

Re: MikroTik User Meeting USA, Indonesia, Brazil and Argentina!

greats news!!!
i just can't wait to see that!

/rodrigo
by rferroni
Thu Oct 01, 2009 10:23 pm
Forum: The Dude
Topic: Script for making automatic Dude backup's remotely
Replies: 15
Views: 12814

Re: Script for making automatic Dude backup's remotely

thanks!!! it's realy helpful.
/rodrigo