Community discussions

MikroTik App

Search found 62 matches

by kchris
Mon May 25, 2009 1:47 pm
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 80756

Re: New firewall matcher PCC

If gateway goes down and you have "check-gateway" in the routes - those routes will become inactive and packets will be routed by other available route. thx. Do You have any idea what performance can I achive with this config? I'd need more than 1-3Gbit/s.. I think with this I can impleme...
by kchris
Mon May 25, 2009 12:50 pm
Forum: General
Topic: operate server farm with mikrotik
Replies: 2
Views: 764

Re: operate server farm with mikrotik

I'd need to achive a throughput over 1-3 Gbit/s...
by kchris
Mon May 25, 2009 12:46 pm
Forum: General
Topic: New firewall matcher PCC
Replies: 298
Views: 80756

Re: New firewall matcher PCC

Nop, example is correct. No matter how many connections from address A to address B will be always marked the same aand sent via same gateway. what if that gateway goes down? how can I implement high availability? "add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping add ...
by kchris
Mon May 25, 2009 12:10 pm
Forum: General
Topic: operate server farm with mikrotik
Replies: 2
Views: 764

operate server farm with mikrotik

hi,

is SLB (Server Load Balancing) available in Mikrotik? Or Do I have to
create the necessary mangles by hand? (using random and masquerading to
create persistent links between the clients and the server in the farm)
What performance can it have?

thanx!
by kchris
Mon Jan 19, 2009 10:48 pm
Forum: General
Topic: how to distinguish "new gen" P2P traffic by alpha uTorrent
Replies: 1
Views: 651

how to distinguish "new gen" P2P traffic by alpha uTorrent

hi! I will be a little long, sorry but please take your time to read it, I think it will worth it... A few days ago we realised that packet numbers are rising, we torched to find out: it's UDP traffic generated by 2-3 customer (until now). The new alpha version uTorrent is generating UDP traffic, BU...
by kchris
Wed Feb 27, 2008 12:10 am
Forum: General
Topic: which packet goes in to wich queue type?
Replies: 1
Views: 660

which packet goes in to wich queue type?

I've a general question: my situation is the following: I've one main queue and it has a few sub-queues - the packets are divided based on traffic type. I'd like to maximize the rate based on the client IP addresses (I don't want that one client uses all of the bandwith of the wifi sector) - so that...
by kchris
Tue Feb 26, 2008 11:49 pm
Forum: General
Topic: randomize source IPs
Replies: 1
Views: 627

randomize source IPs

hi, I've the following situation: I have a few hundred PCs in my intranet. Because the web servers are limiting the active TCP connections, the popular web sites are blocking some of the clients.. I've ordered a few dozen public IPs for the firewall. How can I distribute evenly the public IPs among ...
by kchris
Fri Feb 08, 2008 1:30 pm
Forum: General
Topic: Public IP addr management with VERY much NATted PCs behind
Replies: 3
Views: 1052

Re: Public IP addr management with VERY much NATted PCs behind

NAT usually don't create this issue, as it tracks all the connections. You would have to have connection tracking on to even use nat. If this is the case, you normally would just NAT out via the first IP address entered on that interface. if you send some configs on your nat rules, we can look at t...
by kchris
Thu Feb 07, 2008 10:16 am
Forum: General
Topic: Public IP addr management with VERY much NATted PCs behind
Replies: 3
Views: 1052

Public IP addr management with VERY much NATted PCs behind

Hi, I have a few hundred PCs behind 4 public IP addresses. That's a problem because these PCs are using the web, and requesting pages from the same remote servers and these servers have limitation (reqest/sec from the same IP address I think), they are delaying to serve the reqests (banner servers f...
by kchris
Wed Sep 26, 2007 6:16 pm
Forum: General
Topic: forward users to fill out a web-form
Replies: 1
Views: 708

forward users to fill out a web-form

hi,

I'm an ISP and want my users to fill out a web-form and then make them able to continoue web-browsing. how is it possible?

previously i made address list and dst-natted all web requests to this form, but this solution is quite unstable.. Is there a better way to do this?
by kchris
Mon Sep 24, 2007 1:45 pm
Forum: General
Topic: what does SP in the reg table in the column data rate mean?
Replies: 1
Views: 1148

what does SP in the reg table in the column data rate mean?

in the wireless client registration table we had in 2.9 the datarate column, separated with /. For example 12Mbit/36Mbit. Now in 3.0rc5 in some cases SP appears in this column just like this: 12Mbit-SP/36MBit. What doeas this SP mean? This appeears mostly just after the client has connected and then...
by kchris
Mon Sep 24, 2007 1:39 pm
Forum: General
Topic: v3.0rc5 reconnection problems with clients
Replies: 23
Views: 4434

Re: v3.0rc5 reconnection problems with clients

update: this problem appears on other devices too: OsBridge, and not only on our RB333 but on two RB532s too... (we could downgrade the latter) we saw that clients stucked in the scanning phase appeared in the winbox wireless registration table with "SP" data rate.. (example 11Mbit-SP/36Mb...
by kchris
Sun Sep 23, 2007 2:06 pm
Forum: General
Topic: v3.0rc5 reconnection problems with clients
Replies: 23
Views: 4434

v3.0rc5 reconnection problems with clients

hi, we have a customer client device called 'wa2204a' (from Prague). In our case it cannot connect 3.0rc5, only if the AP (RB333) interface is restarted. If the client suffers a reboot or power loss, it stucks in state 'scanning'. If we restart the AP interface it connects in 5 secs. Is this a bug? ...
by kchris
Sun Sep 23, 2007 10:47 am
Forum: General
Topic: v3.0rc5 memory usage on rb532
Replies: 15
Views: 3345

Re: v3.0rc5 memory usage on rb532

after a simple reboot there is 12-15MB RAM free.. is a memory leak in it?
by kchris
Sun Sep 23, 2007 10:44 am
Forum: General
Topic: v3.0rc5 memory usage on rb532
Replies: 15
Views: 3345

Re: v3.0rc5 memory usage on rb532

it's working - there is 2.8Megs of RAM free... Why is it downloadable for RBs with 32MB RAM if its not enough for it??? :shock:
by kchris
Sun Sep 23, 2007 10:08 am
Forum: General
Topic: v3.0rc5 memory usage on rb532
Replies: 15
Views: 3345

v3.0rc5 memory usage on rb532

hi, we've installed v3.0rc5 on one of our rb532s (32MB RAM!). the traffic is better (packet loss,etc) but after two hours of operating, we couldn't login, we got only ping.. after several hours we saw the memory usage and it was on 100%. Has v3.0 mikrotikos memory requirement increased? and if this ...
by kchris
Sat May 05, 2007 10:20 pm
Forum: General
Topic: grouping connections
Replies: 5
Views: 1437

grouping connections

can anybody give some advice for the following problem: we priorize traffic based on traffic type (web,p2p,etc..) but this is not enough. if somebody starts several dozens of connections then he/she gets more BW than he/she should... in my opinion this is not fair.. if i set the queue type (or inter...
by kchris
Sat May 05, 2007 4:53 pm
Forum: General
Topic: fast browsing, shape download .avi
Replies: 2
Views: 1220

Re: fast browsing, shape download .avi

hi all can we shape when we downloading .avi? i want fast browsing, but shaping bandwitdh when we download .avi .mpg .mp3. Is it possible? thanx we've managed this problem via marking the connection - only connection bytes from 10MB for examlpe so when the user opens a connection the first 10MB of ...
by kchris
Fri Mar 16, 2007 8:28 pm
Forum: General
Topic: MT VPN server, WinXP client: Turn on compression
Replies: 4
Views: 1303

Which VPN you used in your lan?

the compress option in the VPN server setup of MT
I see 2 compress option in the MT setup: 'compression' and 'VJ compression'. I've tried with both on, only one of them on.. no good results...
by kchris
Fri Mar 16, 2007 10:34 am
Forum: General
Topic: MT VPN server, WinXP client: Turn on compression
Replies: 4
Views: 1303

Im a bit rusty here but XP has requiremenst that needs to be met before compression will take place... From what I remember, you must use MSCHAP2 for Authentication, and you must use 128bit Encryption. Should those be met, compression will follow suit... These requirements are met. The client is us...
by kchris
Thu Mar 15, 2007 3:12 pm
Forum: General
Topic: MT VPN server, WinXP client: Turn on compression
Replies: 4
Views: 1303

MT VPN server, WinXP client: Turn on compression

is it possible? It's enabled on both sides, however, windows shows that compression is turned off... are they using different protocols so they can not agree with one common compression method?
by kchris
Fri Aug 18, 2006 2:34 pm
Forum: The Dude
Topic: display wireless clients
Replies: 1
Views: 1546

display wireless clients

hi,

is it possible to display all wireless clients of all mikrotik devices 'installed' in dude? I rememember I could do that in beta2 but I don't find that in beta5.. this could be a great function, I't wouldn't need to browse through all mikrotik devices to find clients with bad SNR, etc...
by kchris
Sun Jul 02, 2006 10:58 am
Forum: The Dude
Topic: Dude 2.0b2 quite unstable?
Replies: 4
Views: 2311

In my experience V1.2 is quite unstable. V2, I imagine, would be very unstable.
thanks for the reply.. It would be no problem if XML reload would be possible because there is a lot of VERY important new features in V2 :(.
by kchris
Sat Jul 01, 2006 10:33 pm
Forum: The Dude
Topic: Dude 2.0b2 quite unstable?
Replies: 4
Views: 2311

Dude 2.0b2 quite unstable?

hi! i've spent my whole afternoon to play with 2.0b2 :(. I've drawed 3 times my network.. first time i've drawed it. then dudes.exe crashed all the times.. no export was possible.. then I've drawed it again - during the drawing I've exported it TEN TIMES in xml. then the crashing came again.. BUT: a...
by kchris
Sat Jun 24, 2006 10:23 pm
Forum: Wireless Networking
Topic: traffic invisible for mikrotik-torch
Replies: 5
Views: 2155

another news

we did some tests a few days ago: the selected routerOS uses the ip address of 10.3.0.0/16. Unfortunately we use open network, so anyone can connect to the AP (of course net is not accessible with these IP zone). The test was the following. Two laptops equipped with WiFi card - we set 192.168.0.1 an...
by kchris
Wed Jun 14, 2006 3:50 pm
Forum: Wireless Networking
Topic: traffic invisible for mikrotik-torch
Replies: 5
Views: 2155

We are seeing the same thing and it's not traffic going from one customer to another. We are running MRTG on the public interface and it's showing full traffic. Running torch on either the public OR private interface doesn't show the same level of traffic. Mikrotik interface graphs also show the tr...
by kchris
Wed Jun 14, 2006 3:29 pm
Forum: Wireless Networking
Topic: traffic invisible for mikrotik-torch
Replies: 5
Views: 2155

traffic invisible for mikrotik-torch

hi! I've a sector with much clients. the average uploading traffic is 2-300kbit/s. Sometimes it raises up to 5-6-700kbit/s - bringing the sector to an unstable state - PacketLoss/ping times are high, the net is unusable for the users. The interesting is that this traffic is visible at the interface ...
by kchris
Tue Mar 21, 2006 3:12 pm
Forum: General
Topic: configure UPnP/MSN video chat
Replies: 2
Views: 1026

How can I enable the UPNP in the network?? UPNP is properly running on the NATting server (GNU/Debian). I've downloaded several UPNP tester on my windows client. They can't detect my UPNP, either. I think that my network doesn't forward the required multicast packets. Does mikrotik filter multicast ...
by kchris
Sun Mar 19, 2006 2:00 pm
Forum: General
Topic: configure UPnP/MSN video chat
Replies: 2
Views: 1026

now i've installed Upnp on my linux device, added the requested broadcast route etnry... but my msn still says that I'm connecting through not Upnp-aware NAT server... what shoul I do now?
by kchris
Sun Mar 19, 2006 12:55 pm
Forum: General
Topic: configure UPnP/MSN video chat
Replies: 2
Views: 1026

configure UPnP/MSN video chat

What do we have to configure to make UPnP work? We have a Mikrotik for routing, Routing boards for APs. One debian/linux server does the NATting (And has our public IP). We have assigned the lowest priority to ports 2000-2020/etc. How can we force the MSN to avoid using the MSN relay service in USA/...
by kchris
Fri Jan 13, 2006 11:05 pm
Forum: Wireless Networking
Topic: signal levels are going down with time
Replies: 3
Views: 1431

It's a CM9...

any idea?
by kchris
Fri Jan 13, 2006 11:14 am
Forum: Wireless Networking
Topic: signal levels are going down with time
Replies: 3
Views: 1431

signal levels are going down with time

We have an interface: "[admin@KN3H, KN3A] interface wireless> print Flags: X - disabled, R - running 0 R name="xxx" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled disable-running-check=no interface-type=Atheros AR5213 radio-name="xxxxxxxxxxxxxx" mode=ap-bridge ssid="...
by kchris
Tue Dec 20, 2005 3:38 pm
Forum: Wireless Networking
Topic: cannot reconnect
Replies: 4
Views: 1430

after replacing the miniPCI and downgrading.. same results..
now clients can connect but the ping times are VERY big :(.
openWRT client shows -52/92 signal strength..
by kchris
Tue Dec 20, 2005 3:03 pm
Forum: Wireless Networking
Topic: cannot reconnect
Replies: 4
Views: 1430

cannot reconnect

we have one mikrotik: we had bad ping times/PacketLoss... tried to change the channel. After that, no client could connect to it! (despite the signal level was OK) After that we went to the tower to do something with the routerboard.. By the time we arrived in the tower many clients were connected, ...
by kchris
Fri Nov 11, 2005 10:53 pm
Forum: General
Topic: VPN error 619
Replies: 11
Views: 5175

I had the same problem! I had a win2k/xp client behind nat and could connect to EXTERNAL VPN server. I had to enable the PPTP/GRE/Protocol47 helpers! To work with VPN, on the server doing the nat the simple NAT is not enough! Nat needs PORTS and ports are on protocol TCP and UDP. VPN uses besides TC...
by kchris
Thu Nov 03, 2005 8:42 pm
Forum: General
Topic: how to make personal queue per IP?
Replies: 4
Views: 1421

I've a better question to this: I'm using PCQ to give my users fair BW. Now I'm using SQUID to make the BW "bursty". Without making a queue to every single user/IP by hand. Am I able to do this also with Mikrotik? I'd like to configure that every users has some burst fast and then slows do...
by kchris
Thu Nov 03, 2005 4:41 pm
Forum: General
Topic: VPN client not working after moving to MT
Replies: 6
Views: 1440

/ip firewall service-port helpers are needed for NAT traversal. yes i realised... this GRE protocol doesn't use the 'port', what's needed by NAT so without helper it won't go.. I think that this is the same situation, that behind NAT to be able to use active FTP ftp helper is also needed: ip_conntr...
by kchris
Wed Nov 02, 2005 9:36 pm
Forum: General
Topic: VPN client not working after moving to MT
Replies: 6
Views: 1440

mea culpa...

I had to enable the pptp and gre service ports in the ip firewall menu...

But IMHO this name "service port" doesn't mean that if this is disabled then drops the packets....
by kchris
Wed Nov 02, 2005 9:01 pm
Forum: General
Topic: VPN client not working after moving to MT
Replies: 6
Views: 1440

tried also to reduce the MTU size, now my computers MTU is 1200 bytes.
by kchris
Wed Nov 02, 2005 8:57 pm
Forum: General
Topic: VPN client not working after moving to MT
Replies: 6
Views: 1440

VPN client not working after moving to MT

Hi! Previusly we had a simple cheap ADSL Router. Then me moved to Mikrotik. I've created simple src-nat rule to share the connection. Everything is working - only the VPN clients behind the MT give error #619 when trying to connect to VPNs outside the office.. What's wrong? With the simple cheap ADS...
by kchris
Thu Oct 27, 2005 7:20 pm
Forum: General
Topic: ADSL sharing MTU problem
Replies: 2
Views: 1027

you can use the firewall mangle rules to fix this: 4 X ;;; change tcp mss for pppoe connections src-address=192.168.43.0/24 protocol=tcp tcp-options=syn-only action=passthrough tcp-mss=1360 as you can see I mangle it to 1360 - it seems to make the trafic floe nicely thank you, saved my life 8) . to...
by kchris
Thu Oct 27, 2005 4:57 pm
Forum: General
Topic: ADSL sharing MTU problem
Replies: 2
Views: 1027

ADSL sharing MTU problem

hi! I've a strange situation: I've created a simple config: sharing an ADSL connection with MT. ADSL has MTU of 1480. internal network ethernet card 1500. clients: 1500. some of the webpages don't load. If I modify the CLIENT's MTU to 1450 all problems go away. But: there are almost 30 clients - I d...
by kchris
Sat Oct 22, 2005 9:19 pm
Forum: General
Topic: limit connection count on a PER IP basis
Replies: 11
Views: 12652

limit connection count on a PER IP basis

hi! Is this possible to limit the tcp connection count (or syn packet count) on a per (source) IP basis without creating rules for each IP address? I think if I create a global limit (per block basis) then one host (with a virus or something that sends many SYN packets) can send most of its packets ...
by kchris
Mon Jun 06, 2005 7:13 pm
Forum: Scripting
Topic: Virus Attack
Replies: 21
Views: 18376

I wouldn't care about viruses if i shaped my users BW to 20-30kbit/s outgoing, but for a customer it's unacceptable..
and scripts to detect such behaviour.
could you share these scripts? I'd need only a script to detect high packet count per interface per period of time...
by kchris
Mon Jun 06, 2005 3:27 pm
Forum: Scripting
Topic: Virus Attack
Replies: 21
Views: 18376

Not that i know of. Personally i always shape bandwith both ways as most of my customer's customers use P2P software 24/7. ok, that's all right, BUT: if these customers send out SYN/any packets (these packets are small so the number of packets can be high even with low BW), that shaped BW is too hi...
by kchris
Mon Jun 06, 2005 1:03 pm
Forum: Scripting
Topic: Virus Attack
Replies: 21
Views: 18376

as long as there is no infected computers on the network I don't want to limit the upload speed of my customers. BUT if there is ANY virus-generated traffic on the network I want to block it's traffic. So I would like to automate this process. What I need is a script that checks the amount of incomi...
by kchris
Wed May 18, 2005 2:55 pm
Forum: General
Topic: VPN connection error
Replies: 1
Views: 936

Re: VPN connection error

Hi! First, I created PPPoE connection, then after disconnection I tried out the PPtP connection - but it fails. The login procedure (on the client XP) hangs up at "verifying username/password", then after a couple of seconds, an error message is displayed code 619. I can't imagine what co...
by kchris
Wed May 18, 2005 2:25 pm
Forum: General
Topic: VPN connection error
Replies: 1
Views: 936

VPN connection error

Hi! First, I created PPPoE connection, then after disconnection I tried out the PPtP connection - but it fails. The login procedure (on the client XP) hangs up at "verifying username/password", then after a couple of seconds, an error message is displayed code 619. I can't imagine what cou...
by kchris
Sun Dec 19, 2004 7:58 pm
Forum: General
Topic: Pool about the best combination for Mini-Ap Wireless
Replies: 3
Views: 1260

Re: Pool about the best combination for Mini-Ap Wireless

My question is: which is the best combination for networks in infrastructura? that is to say who are the best aps for approximately 10 clients as maximum for ap, I in the actuality use MIkrotik for big linkage, but for small urban zones: who are the best ap?, I would like to know that it marks and ...
by kchris
Thu Dec 02, 2004 11:14 am
Forum: General
Topic: simple queue problem, have to create 2 queues for 1 IP??
Replies: 1
Views: 934

simple queue problem, have to create 2 queues for 1 IP??

Hi! My MT has one gateway as 10.0.0.1. I've user 10.1.0.5, in another subnet, MT does the routing (not NAT!). I want to limit the user's traffic speed to 100kbit/100kbit. When I create a simple queue (this could be done in the DHCP server config in winbox) the target address is the user's IP. The pr...
by kchris
Wed Nov 17, 2004 3:26 pm
Forum: General
Topic: ACK timeout problem - users cannot connect or get kicked out
Replies: 5
Views: 2074

Re: ACK timeout in interface settings

did 2.8.19 or anything else solve the problem? (we have a similar problem, but changing ack-timeouts didn't help). regards. matthias we changed the ack timeout from dynamic to static and found out that 1-300us is the optimal but despite of that the network doesn't function properly, but the connect...
by kchris
Tue Nov 16, 2004 6:45 pm
Forum: General
Topic: SOCKS proxy support
Replies: 1
Views: 2903

I've tried FTP Commander, Total Commander, and WS_FTP Pro.
I set every ftp to use my MikroTik SOCKS proxy. The first two didn't work, only the last worked.

Total commander said unknown error(90). What's this?? Is MT's proxy incompatilbe or full of bugs????

Any other experience?
by kchris
Tue Nov 16, 2004 5:16 pm
Forum: General
Topic: SOCKS proxy support
Replies: 1
Views: 2903

SOCKS proxy support

Hi! Am I able to configure the MT to make users file transfers within ICQ/phone conversation in MSN possible? Look a simple config. I have a public IP outside the MT's network. My MT has one public IP. I enabled the SOCKS proxy and made access to everywhere from everyone. first When I configured fro...
by kchris
Fri Nov 05, 2004 11:43 am
Forum: General
Topic: ACK timeout problem - users cannot connect or get kicked out
Replies: 5
Views: 2074

Re: ACK timeout in interface settings

We have 2.8.16 with wireless-legacy and AR5213 mini-pci cards with 4-in-1 PCI
by kchris
Fri Nov 05, 2004 10:18 am
Forum: General
Topic: ACK timeout problem - users cannot connect or get kicked out
Replies: 5
Views: 2074

Re: ACK timeout in interface settings

[quote="kchris"]We have a ...[quote]

Additional info: the users with high ack timeout may have also excellent connection - tx/rx speed 24/36 mbit/s!!!!
by kchris
Thu Nov 04, 2004 6:36 pm
Forum: General
Topic: ACK timeout problem - users cannot connect or get kicked out
Replies: 5
Views: 2074

ACK timeout problem - users cannot connect or get kicked out

We have a problem with ap-bridge: ack-timeout is set to dynamic. We have around 15-30 users/sector. There are specific users - when these users connect the ACK-timeout raises to around 400us - and then the MikroTik sometimes kicks out one previously connected user and doesn't let new user to connect...
by kchris
Wed Nov 03, 2004 11:31 am
Forum: General
Topic: marking traffic by users - is it possible?
Replies: 3
Views: 1355

Seems like you need to read this: http://www.mikrotik.com/docs/ros/2.8/root/queue.content#6.54.7.2 I've done. I've configured now the mangles as follows: mangle passthrough: userIP - "net"IP , mark connection mangle accept: connection - mark flow But when I create a queue for this flow it...
by kchris
Mon Nov 01, 2004 7:01 pm
Forum: General
Topic: IP stealing problem
Replies: 2
Views: 1234

The easiest answer would be to require them to authenticate with a protocol like PPPoE, or PPtP, or use IPSec
We tried it months ago but it hadn't been the right solution because a little packet loss dropped the connection - all of the users tcp connections were reset. I see IPSec...
by kchris
Sun Oct 31, 2004 9:00 pm
Forum: General
Topic: marking traffic by users - is it possible?
Replies: 3
Views: 1355

marking traffic by users - is it possible?

I want to mark my users traffic by IP address. my situation is: I have one interface with public IP, I have another interface with internal IP addresses. Between them there's a Mikrotik with NATting enabled. When I set up 2 mangles: source addr: user IP dest addr: "net " and source addr: &...
by kchris
Sun Oct 31, 2004 1:38 pm
Forum: General
Topic: IP stealing problem
Replies: 2
Views: 1234

IP stealing problem

Hi! I have a problem. I want to limit my users. I have the following tools: drop all incoming packages with un-used ip address (with forward tables), and fix the ARP list so one user cannot use other user's IP. BUT. I have EthernetConverters (Netgear,Senao) and that equipment REPLACES the source MAC...
by kchris
Wed Oct 27, 2004 4:09 pm
Forum: General
Topic: Clients loosing connections in iregular intervals on 2.8.17
Replies: 14
Views: 4210

If you check the logs, you may see. If you send a supout file, we can see very low level logs and tell you why. It may be that there is water in the cable and that badly affects the physical (RF) part of the radio -- and it can go on and off. John thank for your reply, my collegaue sent the supout....
by kchris
Wed Oct 27, 2004 3:03 pm
Forum: General
Topic: Clients loosing connections in iregular intervals on 2.8.17
Replies: 14
Views: 4210

we have almost the same problem!!! ALL of our wireless clients reconnect after a specific time (a few seconds). We are using 2.8.18.