Community discussions

Search found 131 matches

by tangram
Thu Aug 08, 2019 2:10 pm
Forum: RouterBOARD hardware
Topic: Woobm-USB How Much Can It Do?
Replies: 31
Views: 4419

Re: Woobm-USB How Much Can It Do?

I have a lot on 109s with 8ports, they don't come with rack ears.

This is for about half rack in the same enclosure - I assume shielding will not be an issue.

Can anyone confirm if these:
https://mikrotik.com/product/k_65
Would fit RB2011UiAS-2HnD-IN ? :D
by tangram
Thu Aug 08, 2019 1:35 pm
Forum: RouterBOARD hardware
Topic: Woobm-USB How Much Can It Do?
Replies: 31
Views: 4419

Re: Woobm-USB How Much Can It Do?

Uhm..I was looking for a "cleaner" way than powered usb-hub with a bunch of serial to usb adapters - that's why i'm considering woobm. The alternative would be serial switch but costs would be too high. :lol: Would be nice to have a rack-mountable wireless device - like crs or a rb2011 chassis with ...
by tangram
Thu Aug 08, 2019 1:00 pm
Forum: RouterBOARD hardware
Topic: Woobm-USB How Much Can It Do?
Replies: 31
Views: 4419

Re: Woobm-USB How Much Can It Do?

Hi,

What's the behavior of the console port when woobm is plugged in ? Do you still have console connection over rj port ?
Since woobm can't follow the full boot cycle of the device, you'd use console port up to a point and then woobm ?
by tangram
Wed Aug 07, 2019 3:48 pm
Forum: Announcements
Topic: Newsletter #90
Replies: 51
Views: 14430

Re: Newsletter #90

About questions from tangram : The QSFP+ interfaces are as follows: qsfpplus1-1 qsfpplus1-2 qsfpplus1-3 qsfpplus1-4 qsfpplus2-1 qsfpplus2-2 qsfpplus2-3 qsfpplus2-4 The ports can be configured as you wish, for example you could connect Q+BC0003-S+ to 4 different CCR's, and just bridge the 4 interfac...
by tangram
Wed Aug 07, 2019 11:23 am
Forum: Announcements
Topic: Newsletter #90
Replies: 51
Views: 14430

Re: Newsletter #90

Hi,

About the Q+BC0003-S+. It says you can connect this to 4 other devices. How do the interfaces look like on the CRS326-24S+2Q+RM
when you connect this to 4 other routers ? The 40G ports acts like a switch? How would you set this up ?
by tangram
Wed May 29, 2019 5:37 pm
Forum: Forwarding Protocols
Topic: VRFs to transport PPP tunnels
Replies: 2
Views: 502

Re: VRFs to transport PPP tunnels

You set a script on ppp user's profile to assign the interface to the vrf when it comes up and remove it on down.
by tangram
Thu Apr 18, 2019 12:21 pm
Forum: Scripting
Topic: Fetch - How to access data variable?
Replies: 8
Views: 2131

Re: Fetch - How to access data variable?

any idea how to do this when you have multiple isps to get address of all providers ? mine are set with different distance in routes and mangle input/output to specific routing tables. so all traffic goes out the main isp, but the router can be reached over all isps. i tried with src-address but i a...
by tangram
Wed Apr 17, 2019 3:44 pm
Forum: Scripting
Topic: Fetch - How to access data variable?
Replies: 8
Views: 2131

Re: Fetch - How to access data variable?

How about this ?

:put ([/tool fetch url="https://api.ipify.org/" mode=http dst-path=ipcheck output=user as-value]->"data")
by tangram
Mon Apr 15, 2019 4:24 pm
Forum: General
Topic: Route instead NAT [SOLVED]
Replies: 3
Views: 315

Re: Route instead NAT [SOLVED]

Side question, could I also dstnat traffic towards WAN instead srcnat every single network towards WAN ? We also have static public IP. You can do masq over the wan interface, so that you don't have to list every network behind it. You can't do dst-nat 'cause your changing the src not the dst :lol: ...
by tangram
Fri Apr 12, 2019 4:31 pm
Forum: Forwarding Protocols
Topic: MikroTik and Cisco ASA
Replies: 5
Views: 623

Re: MikroTik and Cisco ASA

Buy/rent a public ip subnet depending on your needs and buy/rent an AS number - usually from a LIR: https://www.ripe.net/manage-ips-and-asns/resource-management/faq/independent-resources/phase-three/what-is-a-local-internet-registry-lir Something like this: https://apps.db.ripe.net/db-web-ui/#/query...
by tangram
Fri Apr 12, 2019 3:25 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 69927

Re: v6.45beta [testing] is released!

!) dot1x - added support for IEEE 802.1X Port-Based Network Access Control (CLI only);

Holy Jumpin' Jesus !
by tangram
Fri Apr 12, 2019 1:12 pm
Forum: Forwarding Protocols
Topic: MikroTik and Cisco ASA
Replies: 5
Views: 623

Re: MikroTik and Cisco ASA

No because you are not using public IPs. As long as you stick to RFC1918 you will need nat on your border.
Recommended would be to get some public IPs and set up peering with your providers on Mikrotik - which will handle routing - and keep nat on your firewall.
by tangram
Mon Apr 01, 2019 2:58 pm
Forum: General
Topic: VRRP and ARP
Replies: 3
Views: 308

Re: VRRP and ARP

Hi,

Can you try with /29 instead of /30 ? And use /32 on the vrrp interface?
by tangram
Fri Mar 29, 2019 11:49 am
Forum: General
Topic: VRRP and ARP
Replies: 3
Views: 308

Re: VRRP and ARP

by tangram
Fri Mar 29, 2019 10:13 am
Forum: General
Topic: VRRP instability, flapping
Replies: 4
Views: 711

Re: VRRP instability, flapping

Mikrotiks do not support VRRP owner, the virtual IP cannot be the same as the real IP, and are unlike other manufacturers implementations in that the mask on IPv4 VRRP interface should be /32. The /32 mask caught me out when I first set up VRRP, with /24 (matching the real IP mask) it worked most o...
by tangram
Mon Mar 25, 2019 5:21 pm
Forum: General
Topic: Interface list problem
Replies: 2
Views: 361

Re: Interface list problem

use scripting on the ppp profile to update the lists. you can add on-up and on-down scripts.
dynamic interfaces can seem difficult to work with, on the server side, but once you set the right scripts everything works well :)
by tangram
Fri Mar 15, 2019 1:17 pm
Forum: Beginner Basics
Topic: Can Mikrotik / RouterOS do multiple PPPOE trough same WAN cable ?
Replies: 23
Views: 1221

Re: Can Mikrotik / RouterOS do multiple PPPOE trough same WAN cable ?

But how do I tell the router to give one computer/cable one pppoe connection and the other computer/cable the other pppoe connection ? It depends a lot on what you're trying to achieve. You could do load-balacing - but in your case I don't think it would help. I mean you're using the same provider,...
by tangram
Wed Mar 06, 2019 4:32 pm
Forum: General
Topic: backup,critical error creating backup file, ROS 6.42.1
Replies: 29
Views: 5891

Re: backup,critical error creating backup file, ROS 6.42.1

I had the same issue after update from 6.42.9 to 6.42.12.
Regenerating ssh fixed it. Thanks guys !
by tangram
Sun Feb 17, 2019 11:00 am
Forum: Virtualization
Topic: RouterOS on OpenVZ7
Replies: 0
Views: 456

RouterOS on OpenVZ7

Hi, I'm really struggling to install RouterOS on OpenVZ and failing :lol: What I did was trying to adjust the script I used for other vps(e.g. DigitabOcean), downloading raw, convert, resize take ip and routes, writing to mounted image, etc. I've read on various topic about people that got this work...
by tangram
Fri Jan 18, 2019 3:50 pm
Forum: General
Topic: Mikrotik VRRP question
Replies: 4
Views: 413

Re: Mikrotik VRRP question

https://forum.mikrotik.com/viewtopic.php?t=87786 https://forum.mikrotik.com/viewtopic.php?t=122469 Also since this is a widely used protocol: https://community.cisco.com/t5/switching/vrrp-with-multiple-vlans/td-p/2986626 In practice i used it like this and it worked as advertised :) You can test th...
by tangram
Thu Jan 17, 2019 3:43 pm
Forum: General
Topic: Mikrotik VRRP question
Replies: 4
Views: 413

Re: Mikrotik VRRP question

Afaik VRRP works per interface - physical or virtual. So if you have 135 vlans and you want vrrp for the gateway in them, you'd have to set 135 vrrp instances, one for every vlan. Don't know how this plays if you have multiple ips per interface, never tried it. Now to the question, if you lose a rou...
by tangram
Wed Jan 16, 2019 2:30 pm
Forum: General
Topic: Large deployment suggestions for event
Replies: 13
Views: 972

Re: Large deployment suggestions for event

I'd go for router redundancy. Configure both the same and use vrrp.
You'd need this on the wan side, which doubles the count of links or requires some switch there. Else you're back at moving cables by hand -> downtime.
by tangram
Wed Jan 16, 2019 10:49 am
Forum: General
Topic: Large deployment suggestions for event
Replies: 13
Views: 972

Re: Large deployment suggestions for event

Do you think i need to consider putting 1 redundant router in the middle doing : PCC/Failover, PCQ, DNS DHCP, Hotspot etc and will be the failover of the 2 others ? I'm not aware of any physical Mikrotik device that can stack, albeit something can be achieved with some scripting you still need to m...
by tangram
Tue Jan 15, 2019 5:17 pm
Forum: General
Topic: Large deployment suggestions for event
Replies: 13
Views: 972

Re: Large deployment suggestions for event

Target : Deploy free wifi to everybody -> 2 Hotspot server radius (radiusdesk, coovachili) (hardware dell : r610) (2 hardware servers for redundancy) Hi, I'm not too familiar with this kind of event, but if you are providing free access why do you need radius/hs and so much hardware? Just for a lan...
by tangram
Mon Jan 07, 2019 12:41 pm
Forum: General
Topic: PWR-Line AP
Replies: 48
Views: 8259

Re: PWR-Line AP

Sold single, so you can purchase any number of them, depending on what you plan to build. Hi Normis, I've previously used the ones that work in pairs, but don't really understand how do these connect to each other. If you have 5 you'd be able to add 3 of them in a bridge and 2 in another or ... ? T...
by tangram
Mon Jan 07, 2019 12:19 pm
Forum: General
Topic: Need idea on setting up dual WAN connection
Replies: 6
Views: 718

Re: Need idea on setting up dual WAN connection

using 2 mikrotiks, i'd bond the links together with balance-rr. if you want hardware redundancy you would need 4 routers, do a full mesh between them with vrrp on the switch side. If you need routing ospf would work great, else you can use spanning tree - if it's the same subnet in A and B. although...
by tangram
Mon Jan 07, 2019 12:00 pm
Forum: General
Topic: Mikrotik behind HG8245H
Replies: 2
Views: 544

Re: Mikrotik behind HG8245H

Hi,

Check with you ISP or try to set the Huawei HG8245H in bridge mode. Will save you a lot of trouble.
by tangram
Wed Dec 19, 2018 6:08 pm
Forum: General
Topic: Mikrotik powered christmas tree
Replies: 2
Views: 509

Re: Mikrotik powered christmas tree

Got me laughing so hard :D
Thanks !
by tangram
Fri Dec 14, 2018 2:54 pm
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 40
Views: 7342

Re: hardware idea for a multiport switch

I get it why you would think of this...Mikrotik's switches and routers fill only a small portion of what is considered usable rack space when it comes to size. As others have pointed out, I don't think this design would be feasible in a standard rack. You could build your own cabinets, but that woul...
by tangram
Tue Nov 27, 2018 1:44 pm
Forum: The Dude
Topic: Adding Services to multiple devices?
Replies: 2
Views: 672

Re: Adding Services to multiple devices?

Only if you have these devices under the same network map, where you can select auto-discovery for specific services.
by tangram
Tue Jun 19, 2018 3:59 pm
Forum: General
Topic: Running RouterOS CHR as a VPN server
Replies: 7
Views: 1155

Re: Running RouterOS CHR as a VPN server

you're missing nat/masquerade over the wan connection or for the ip pool that you assign to your clients.

also, on client, make sure "use default gateway" box is checked under ipv4 advanced.
by tangram
Mon Jun 18, 2018 1:52 pm
Forum: Announcements
Topic: Winbox 3.14 released!
Replies: 77
Views: 24570

Re: Winbox 3.14 released!

whoever has a vertical screen resolution of 768 and below is faced with the No scroll issue. CLI is a work around, but it is still an issue in winbox
+1 - this is very annoying, please help.
by tangram
Tue Apr 24, 2018 10:26 am
Forum: General
Topic: Mikrotik and AD User Groups
Replies: 4
Views: 403

Re: Mikrotik and AD User Groups

not for wired users. for wireless you have 802.1q. See this https://wiki.mikrotik.com/wiki/802.1q_T ... s_P2P_Link
by tangram
Sun Mar 04, 2018 9:55 am
Forum: The Dude
Topic: Dude Telegram notification example
Replies: 56
Views: 25145

Re: Dude Telegram notification example

Why does the ? disappear when you paste in terminal ? /tool fetch "https://api.telegram.org/botblablabla/sendMessage?chat_id=-1111111111&text=thissatest" keep-result=no turns to /tool fetch "https://api.telegram.org/botblablabla/sendMessagechat_id=-1111111111&text=thissatest" keep-result=no ..can't ...
by tangram
Tue Feb 20, 2018 1:16 pm
Forum: General
Topic: Routing Problem
Replies: 33
Views: 1881

Re: Routing Problem

However, the computer (at different site) connecting using SmartVPN services, those are under 192.168.0.0/16.
Replace smartvpn with l2tp or something else and connect them to mikrotik ? or move smartvpn behind mikrotik ?
by tangram
Mon Feb 19, 2018 5:28 pm
Forum: General
Topic: Winbox OUI identify
Replies: 30
Views: 3699

Re: Winbox OUI identify

+1.
by tangram
Mon Feb 19, 2018 5:25 pm
Forum: General
Topic: Routing Problem
Replies: 33
Views: 1881

Re: Routing Problem

You just nat traffic over the link between mikrotik and cisco. That's what he currently does and obviously isn't happy about it. He's stated that he needs transparent routing between "legacy" and "new" parts of the network, and that doesn't work with the NAT in between the two. A why this is an iss...
by tangram
Mon Feb 19, 2018 9:58 am
Forum: General
Topic: Routing Problem
Replies: 33
Views: 1881

Re: Routing Problem

If I understand correctly, cisco belongs to the ISP and you have no control over it. If so, why does it matter if you can't access 10.0.x.x or whatever you have behind mikrotik from cisco?
You just nat traffic over the link between mikrotik and cisco.
by tangram
Wed Feb 14, 2018 10:44 am
Forum: Beginner Basics
Topic: DUAL WAN - routing game trafic to WAN2
Replies: 9
Views: 1077

Re: DUAL WAN - routing game trafic to WAN2

first you need to implement this:
https://mum.mikrotik.com/presentations/US12/tomas.pdf


when you get to the way the traffic is split, you choose the criteria that matches wot e.g. ports and source ip
by tangram
Wed Feb 14, 2018 10:20 am
Forum: Announcements
Topic: v6.41.2 [current]
Replies: 125
Views: 28430

Re: v6.41.2 [current]

Do you use latest winbox version?
Thank you, I was using 3.11. In 3.12 problem is fixed.
by tangram
Tue Feb 13, 2018 4:43 pm
Forum: Announcements
Topic: v6.41.2 [current]
Replies: 125
Views: 28430

Re: v6.41.2 [current]

Hi,

I don't know if it's a winbox or routeros bug, but it's easy to reproduce. Connected with winbox, if you have a script open for editing and you delete that script from script list the session is dropped.
Oh and it generates autosupout :)
by tangram
Mon Feb 12, 2018 5:11 pm
Forum: The Dude
Topic: The Dude SysLog limitation
Replies: 1
Views: 503

Re: The Dude SysLog limitation

I currently use graylog to monitor logs(syslog and netflow) for a couple hundred mikrotik devices. If you tinker a little with it, it doesn't require that much resources but it's a lot more than a service on a router.Hardware needs depend a lot on the number of generated messages. There are lots of ...
by tangram
Mon Feb 12, 2018 3:51 pm
Forum: General
Topic: Dlink LACP + Mikrotik Bonding CCR-1009 [SOLVED]
Replies: 6
Views: 1559

Re: Dlink LACP + Mikrotik Bonding CCR-1009 [SOLVED]

don't aggregate the ports on the switch in any way. just configure them as regular switchports and assign them to the vlan that you want(same vlan for both of course).
there's no loop, try it :)
by tangram
Mon Feb 12, 2018 2:11 pm
Forum: General
Topic: Dlink LACP + Mikrotik Bonding CCR-1009 [SOLVED]
Replies: 6
Views: 1559

Re: Dlink LACP + Mikrotik Bonding CCR-1009 [SOLVED]

use bond interface with balance-rr and no configuration on the switch.
lacp never exceeds the traffic speed of the interface. you can't get over 1g no matter how many interfaces you bond, but you can get more times 1g at the same time for different hosts. it's just the way lacp works.
by tangram
Tue Jan 09, 2018 5:04 pm
Forum: General
Topic: vrrp & ipsec
Replies: 5
Views: 466

Re: vrrp & ipsec

nope, because your failover router would also try to establish tunnel to your peer.
i guess you could use a script to have disable the whole ipsec config and enable it when the main router goes down.
by tangram
Tue Jan 09, 2018 3:47 pm
Forum: General
Topic: vrrp & ipsec
Replies: 5
Views: 466

Re: vrrp & ipsec

You can't do this with site-to-site. It's doable with ppp or ovpn.
Else you need 2 tunnels, to each peer, which renders vrrp useless.
by tangram
Mon Jan 08, 2018 3:18 pm
Forum: General
Topic: PCC load balancing problem
Replies: 8
Views: 2288

Re: PCC load balancing problem

Easiest way that I can think of is just let it split the traffic :) 2 ;;; Load-Balancing here // Split 1/2 chain=prerouting action=mark-routing new-routing-mark=RDS_Route passthrough=yes src-address-list=LAN connection-mark=LAN_WAN per-connection-classifier=both-addresses:2/1 log=no log-prefix="" 13...
by tangram
Mon Jan 08, 2018 2:46 pm
Forum: Beginner Basics
Topic: How to debug a script ?
Replies: 6
Views: 2119

Re: How to debug a script ?

also you can run "/system script print" to do a syntax debug.
by tangram
Mon Jan 08, 2018 2:16 pm
Forum: Beginner Basics
Topic: MikroTik Bonding do C3750
Replies: 4
Views: 537

Re: MikroTik Bonding do C3750

Hi,

Try channel-group mode on on switch and balance-rr on mikrotik.
by tangram
Fri Jan 05, 2018 3:22 pm
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

For a long time, Cisco switches have only supported PAgP or LACP, so whatever the above poster did with his Cisco 2960g it is not compatible with balance-rr. If you want to be compatible between a MikroTik and any "enterprise" level switch you have to use LACP on both ends. Otherwise, I believe you...
by tangram
Thu Jan 04, 2018 2:48 pm
Forum: Forwarding Protocols
Topic: RIP routers without next hop
Replies: 20
Views: 1429

Re: RIP routers without next hop

The network statement is required in order to activate an interface with RIP. It works like OSPF's network list, NOT like BGP's network list. In other words, interfaces whose IP addresses fall within a network=x.x.x.x/m range will become active in RIP. Just because you're seeing RIP packets in the ...
by tangram
Fri Dec 15, 2017 11:38 am
Forum: Scripting
Topic: [Ask]. Modify firewall order or add firewall with script.
Replies: 12
Views: 8681

Re: [Ask]. Modify firewall order or add firewall with script.

So why does it work when using ssh or winbox/terminal ?
by tangram
Thu Dec 14, 2017 5:26 pm
Forum: Scripting
Topic: [Ask]. Modify firewall order or add firewall with script.
Replies: 12
Views: 8681

Re: [Ask]. Modify firewall order or add firewall with script.

Because it is the wrong way to do operations with items in scripts.
Proper way is to use find command to get internal IDs and work with those IDs.
What do you mean by internal ID ? Is 32 in the example above internal id ?
If so, then /ip firewall filter move X Y doesn't work either in a script.
by tangram
Thu Dec 14, 2017 3:15 pm
Forum: Scripting
Topic: [Ask]. Modify firewall order or add firewall with script.
Replies: 12
Views: 8681

Re: [Ask]. Modify firewall order or add firewall with script.

After some VERY frustrating experiences with this task i stumbled upon this: https://gryzli.info/2015/01/18/mikrotik-managing-firewall-by-cli/ You MUST do /ip firewall filter print before actually moving the rule. Useless to say it's annoying when running batches with dsh or putty. So you rsc would ...
by tangram
Thu Dec 14, 2017 12:40 pm
Forum: Scripting
Topic: [Ask]. Modify firewall order or add firewall with script.
Replies: 12
Views: 8681

Re: [Ask]. Modify firewall order or add firewall with script.

This still doesn't work. If you try to change position with move or place-before the script returns no such item or similar error.
Both commands work in winbox, ssh, etc. It's just a problem on running them from scripts.
by tangram
Fri Dec 08, 2017 2:22 pm
Forum: General
Topic: Hotspot HA and load sharing with VRRP
Replies: 4
Views: 739

Re: Hotspot HA and load sharing with VRRP

Why do you need load-sharing on 2 RB1100 when one device could easily handle this setup? You can use the second in active/passive setup, with vrrp, and achieve what you need.
You can always bond interfaces, even if you get another uplink and want to move over 2Gb I think one 1100 can handle that.
by tangram
Tue Dec 05, 2017 3:01 pm
Forum: Beginner Basics
Topic: Two problem in 1 please help
Replies: 1
Views: 264

Re: Two problem in 1 please help

Use bridge mode, find your public ip, change the ipsec peers and policies to match that.
You need a static public IP for ipsec.
by tangram
Mon Dec 04, 2017 2:18 pm
Forum: Wireless Networking
Topic: big mistake [SOLVED]
Replies: 21
Views: 2880

Re: big mistake [SOLVED]

I use 3 x wapAC/floor at an office building with around 150 devices/floor for a total of around 500 devices.
We have various brands of notebooks among android and ios phones.
No issues so far.

Mikrotik is not what you call consumer grade, don't assume similar level of knowledge will suffice.
by tangram
Wed Nov 29, 2017 11:07 am
Forum: General
Topic: Bonding interface
Replies: 7
Views: 747

Re: Bonding interface

The problem is balance-rr itself. If TCP packets are coming out of order, congestion control system will kick in by retransmiting segments.
If you have the cpu power 802.3ad would do a better job in your case.
by tangram
Tue Nov 28, 2017 6:45 pm
Forum: General
Topic: [HELP] Problem. I need 2 hotspots with 2 radius servers on one Mikrotik
Replies: 4
Views: 441

Re: [HELP] Problem. I need 2 hotspots with 2 radius servers on one Mikrotik

Maybe you can use this to authenticate both user categories vs different matching policies.
I use this on windows domain with nps to match versus 2 groups. If policy for group A doesn't match then it checks for group B.
by tangram
Tue Nov 28, 2017 12:38 pm
Forum: General
Topic: How to achieve 2Gb transfer rate on CRS109
Replies: 1
Views: 245

Re: How to achieve 2Gb transfer rate on CRS109

IIRC crossing vlans means cpu not switch-chip. Considering the cpu in the crs I don't think you'll be able too. If you had all 3 PCs in the same vlan that would've worked for sure.
by tangram
Fri Nov 24, 2017 4:13 pm
Forum: RouterBOARD hardware
Topic: Dual SIM load balance options
Replies: 2
Views: 764

Re: Dual SIM load balance options

Why would you think that the LTE modems are different than other interfaces? I do load balancing over 2 ethernet interfaces and a 3g modem. The only difference is the weight associated to distribution of traffic. Everything else works the same.
by tangram
Fri Nov 24, 2017 4:04 pm
Forum: General
Topic: NAT table not cleared correctly [SOLVED]
Replies: 77
Views: 6618

Re: NAT table not cleared correctly [SOLVED]

In firewall connection tracking there are some timeouts you can play with. Talking about udp stream, timeout is at 3 mins and generic timeout at 10 min. Try to lower the stream timeout to let them "expire" faster. Maybe you'll find a "sweet spot" that you're happy with so that other types of traffic...
by tangram
Thu Nov 23, 2017 4:55 pm
Forum: General
Topic: NAT table not cleared correctly [SOLVED]
Replies: 77
Views: 6618

Re: NAT table not cleared correctly [SOLVED]

If you restart the modem from telekom instead of the mikrotik does it work ?
by tangram
Thu Nov 23, 2017 4:41 pm
Forum: General
Topic: drop all dns request from Internet to my network
Replies: 5
Views: 482

Re: drop all dns request from Internet to my network

drop input chain with dst port 53 protocol udp on outside interface.

and the generic approach drop input chain in outside interface not established.
by tangram
Wed Nov 22, 2017 1:36 pm
Forum: General
Topic: Open/Scannable Ports (slight concern)
Replies: 5
Views: 525

Re: Open/Scannable Ports (slight concern)

on what chain did you configured the IMPLICIT_DENY firewall rule ?
by tangram
Tue Nov 21, 2017 3:31 pm
Forum: General
Topic: SNTP client, unable to synchronize time, error: server-ip-mismatch
Replies: 24
Views: 4240

Re: SNTP client, unable to synchronize time, error: server-ip-mismatch

I had this problem too. In my case I've just added more servers and one of them finally synchronized. I've noticed that the ones added with ip don't always work, but between all of them you can get one to sync. /system ntp client set enabled=yes primary-ntp=98.175.203.200 secondary-ntp=66.219.116.14...
by tangram
Tue Nov 21, 2017 2:04 pm
Forum: General
Topic: Management inside a routing-table [SOLVED]
Replies: 6
Views: 1147

Re: Management inside a routing-table [SOLVED]

Would it be possible to do it the other way around ? I mean use main for management and vrf for everything else ?
by tangram
Tue Nov 21, 2017 1:05 pm
Forum: General
Topic: Mikrotik - limitations for enterprise solutions
Replies: 16
Views: 8369

Re: Mikrotik - limitations for enterprise solutions

I'll add on the list the need for 48 ports switches and some form of stacking. It can't be that difficult...
by tangram
Wed Nov 15, 2017 2:06 pm
Forum: General
Topic: Management inside a routing-table [SOLVED]
Replies: 6
Views: 1147

Re: Management inside a routing-table [SOLVED]

Hi,

just a thought, if i remember correctly you need at least one route in main routing table in order for the other routing tables to be active. Add something to populate the routing table, or try to connect using mac address.
by tangram
Tue Nov 14, 2017 2:03 pm
Forum: Scripting
Topic: Script to edit another script
Replies: 3
Views: 401

Re: Script to edit another script

Thank you, that would definitely work. I wish that a more 'elegant' approach would exist..like ->set-find-where-something-replace but whatever works :)
by tangram
Tue Nov 14, 2017 11:48 am
Forum: Scripting
Topic: Script to edit another script
Replies: 3
Views: 401

Script to edit another script

Hi guys, How do you edit a script from another script, without copy/paste the whole source ? For example, in the script below how could I change the value from +1 to +5 or whatever from another script? \n\t:if (\$PingFailCountISP2 < (\$FailTreshold+2)) do={\r\ \n\t\t:set PingFailCountISP2 (\$PingFai...
by tangram
Fri Nov 10, 2017 5:23 pm
Forum: General
Topic: IP SLA in Mikrotik
Replies: 2
Views: 2472

Re: IP SLA in Mikrotik

https://wiki.mikrotik.com/wiki/Failover_Scripting

I'm using this script with a scheduler running every 10s. It's very good :)
It's not cisco but with a little work you can get the job done.
by tangram
Wed Oct 11, 2017 2:51 pm
Forum: General
Topic: Wireless presence counter
Replies: 5
Views: 809

Re: Wireless presence counter

I have syslog and netflow connected to graylog plus prtg with snmp. The problem is that i'm not getting the data I need. And if you take into account there are a few hundreds of devices, ssh-ing into them every minute or so doesn't look like the optimal approach. Of course you can have a file to log...
by tangram
Tue Oct 10, 2017 3:05 pm
Forum: General
Topic: Wireless presence counter
Replies: 5
Views: 809

Wireless presence counter

Hi, I need to get some information for wireless devices in range of a mikrotik. The output i need is this: /interface wireless snooper snoop wlan1-wifi Flags: A - active, N - access-point # FREQ ADDRESS SIG SNR OF-FREQ OF-TRAF BW SSID 0 AN A0:F3:C1:C6:0D:3D -67 28 2% 12.3% 18.6kbps Hotspot 1 AN 50:6...
by tangram
Tue Oct 10, 2017 2:09 pm
Forum: Announcements
Topic: v6.40.4 [current]
Replies: 103
Views: 25362

Re: v6.40.4 [current]

After upgrade from 6.39.2 to 6.40.4 i get this in environment variables(in all of my routers): /system script environment print # NAME VALUE 0 lteDhcp 0 It doesn't seem to be harmful but could you shed some light over this ?
by tangram
Tue Oct 03, 2017 3:56 pm
Forum: General
Topic: Hotspot with Radius - ERR_CONNECTION_TIMED_OUT
Replies: 2
Views: 970

Re: Hotspot with Radius - ERR_CONNECTION_TIMED_OUT

Hi,

post configuration from hotspot ( server, profiles, etc) and post from logs the address assignment process.

Check this post, maybe you have the same issue:
viewtopic.php?f=2&t=125642
by tangram
Wed Sep 27, 2017 1:41 pm
Forum: General
Topic: Ovpn IP address assignment
Replies: 2
Views: 709

Re: Ovpn IP address assignment

Under OVPN server settings - change netmask to 32. Hi, I also had an email exchange with Emils about this issue and after looking more carefully, he's right. Before 6.40 the netmask setting there didn't work or at least not as it should. I left it at default (/24) always and it worked like a /32 ev...
by tangram
Mon Sep 25, 2017 11:14 am
Forum: General
Topic: Problem with Site-to-Site OpenVPN
Replies: 2
Views: 1294

Re: Problem with Site-to-Site OpenVPN

TLS failure is usually certificate related. Make sure your cert on client has KT(import crt and key) and that cipher and encryption match.
by tangram
Mon Sep 18, 2017 2:44 pm
Forum: Announcements
Topic: v6.40.3 [current]
Replies: 95
Views: 25960

Re: v6.40.3 [current]

Hi, I have a big problem updating from 6.39.2 to 6.40.3. I use ovpn to connect locations and after upgrade in don't see correct local/remote addresses and routes are not installed: Because of this dynamic routing fails and network breaks down. Addresses look like this: 6 D 10.91.21.254/24 10.91.21.0...
by tangram
Fri Sep 15, 2017 10:40 am
Forum: General
Topic: Hotspot+Radius problems with user profile
Replies: 0
Views: 622

Hotspot+Radius problems with user profile

Hi, Setup is as follows: - 2 SSIDs, both open, both using hotspot - SSID1, local auth, generic user (admin/admin) for customers or whatever - hostpot profile - pool A, subnet A(192.168.168.0/25) - SSID2, radius auth - hostpot-secure profile - pool B, subnet B(192.168.168.128/25) So 2 SSIDs, 2 server...
by tangram
Mon Aug 28, 2017 2:39 pm
Forum: General
Topic: Problem with DNS Comunication between VLAN-s
Replies: 1
Views: 457

Re: Problem with DNS Comunication between VLAN-s

what are your dns servers ? you use dhcp or static ?
by tangram
Mon Aug 28, 2017 2:34 pm
Forum: General
Topic: Problem with OPENVPN and mangle [SOLVED]
Replies: 6
Views: 1466

Re: Problem with OPENVPN and mangle [SOLVED]

As pukkita pointed out, that presentation is very good for your problem.

You need to isolate the traffic from lan to vpn and not pass it through your mangle rules.
Easiest way: mangle - prerouting src lan class - dst vpn class, set to accept.
by tangram
Thu Aug 10, 2017 8:50 pm
Forum: General
Topic: pppoe issue -doesn't establish session
Replies: 3
Views: 816

Re: pppoe issue -doesn't establish session

Try 6.39.2 - on server and on a few cpe. See how it handles.
I only have experience with the cpe side and things have gotten a lot better with the latest releases.
Check changelogs for the improvements to ppp.
by tangram
Tue Aug 08, 2017 1:09 pm
Forum: General
Topic: Best practice for loading template configs?
Replies: 6
Views: 1065

Re: Best practice for loading template configs?

Hi, I haven't managed to do this remotely. When I have direct access to device I use the rsc way. Reset, clear the default config and import the rsc. The rsc uses a lot of set [ find where...] for replacing default values and you can edit it with site specific parameters. Works great and it's fast ...
by tangram
Mon Aug 07, 2017 12:04 pm
Forum: General
Topic: pppoe issue -doesn't establish session
Replies: 3
Views: 816

Re: pppoe issue -doesn't establish session

Hi,

firmware version of this device please.
by tangram
Mon Aug 07, 2017 10:31 am
Forum: General
Topic: Best practice for loading template configs?
Replies: 6
Views: 1065

Re: Best practice for loading template configs?

Hi, I haven't managed to do this remotely. When I have direct access to device I use the rsc way. Reset, clear the default config and import the rsc. The rsc uses a lot of set [ find where...] for replacing default values and you can edit it with site specific parameters. Works great and it's fast t...
by tangram
Thu Jul 20, 2017 7:24 am
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 34594

Re: v6.39.2 [current]

I've found the issue: add action=mark-routing chain=output comment=A-ISP1-RT connection-mark=\ M-ISP1-ROS new-routing-mark=ISP1_Route passthrough=yes add action=mark-routing chain=output comment=A-ISP2-RT connection-mark=\ M-ISP2-ROS new-routing-mark=ISP2_Route passthrough=yes Connection mark should...
by tangram
Wed Jul 19, 2017 10:38 am
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 34594

Re: v6.39.2 [current]

I've managed to replicate this issue. The way load balancing was configured in 6.37 doesn't work in 6.39.2. Using https://mum.mikrotik.com/presentations/US12/steve.pdf leads to the same issue. How can I fix this so both WANs are accessible. If I change the distance for default route of ISP1 from 1 t...
by tangram
Tue Jul 18, 2017 12:50 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 34594

Re: v6.39.2 [current]

Hi, I upgraded from 6.37.3 to 6.39.2 and I have some problems. I'm load balancing 2 ISPs, before update I could ping both wan ips, after update only the primary works. If i disconnect ISP1 then ISP2 replies to ping. Connections from LAN->WAN balance over both ISPs and traceroute,ping work ok from LA...
by tangram
Thu Jun 29, 2017 11:39 am
Forum: Forwarding Protocols
Topic: RIP summarize/consolidate
Replies: 0
Views: 277

RIP summarize/consolidate

Hi, I have a hub and spoke network, spokes connected with ovpn to hub and rip configured. Each spoke has 3 connected networks that are advertised to the hub. The problem is that there are hundreds of spokes and there's some flapping going on - either spokes that get disconnected or interfaces that g...
by tangram
Mon Jun 26, 2017 10:56 pm
Forum: General
Topic: Why Mikrotik ???
Replies: 32
Views: 5971

Re: Why Mikrotik ???

I've been using Mikrotik for just a year but I wouldn't choose Cisco, or other vendors for that matter, if I find the device I need in Mikrotik products. To be clear, if i need a 48port switch, poe switch, an ids or advanced firewall I wouldn't go Mikrotik just because they don't have these - btw Mi...
by tangram
Wed Jun 14, 2017 5:02 pm
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

It's fixed now. I set the switch to static aggregation or whatever the hp equivalent term for cisco's etherchannel is. The bond interface works in balance-rr and there are no mac errors. Also I removed the bogus macs that I've previously set on mikrotik. To others, please be advised that bridge and ...
by tangram
Wed Jun 14, 2017 1:24 pm
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

I'm doing some more testing meanwhile. CRS109-8G with cisco 2960g switch and 6.39.2 works with balance-rr and there are no errors. I'm setting the cisco with etherchannel though..i'll try more tinkering with the other switch( hp 2410-24g)
by tangram
Wed Jun 14, 2017 11:44 am
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

I saw after i posted and changed that one too, but still no joy. I'll send the supout, thanks.
by tangram
Wed Jun 14, 2017 11:01 am
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

I don't have the setup to test full throughput but i get beyond the speed of one link. I download from a storage with around 1.3 gb and the traffic is balanced over the 2 interfaces in balance-rr mode. LACP works too but your limited per data flow at interface speed. I get max around 850mb per file ...
by tangram
Tue Jun 13, 2017 5:21 pm
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

Post a /interface print detail where !dynamic This is to double check there's no duplicated mac address. If there's no duplicated mac, I'd generate a supout while the problem is happening and email it to support. You were right, the bridge get's the bond interface's mac: 0 RS name="SFP-LANSwitch" d...
by tangram
Tue Jun 13, 2017 5:17 pm
Forum: General
Topic: VRRP on VLAN
Replies: 11
Views: 2098

Re: VRRP on VLAN

Thank you for explaining this :D
by tangram
Tue Jun 13, 2017 11:44 am
Forum: General
Topic: VRRP on VLAN
Replies: 11
Views: 2098

Re: VRRP on VLAN

hi, i still don't get the /32. Now i have 2 vrrps over the same interface configured on two routers. IPs are 1,10 for vrrp and 253,254 for the ethernet interfaces. 1 is held by one router and 10 by the other as master. Both work ok with addresses set as /24, I don't see abnormal cpu usage or traffic...
by tangram
Mon Jun 12, 2017 5:17 pm
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Re: Bond interface(balance-rr) and bridging

ROS version and firmware version? post an export so that all details can be taken into account. May not have anything to do with this, but FYI from 6.39.2 changelog: *) bonding - do not add bonding interface if "could not set MTU" error is received; ROS is 6.39.2 firmware is 3.35 I've narrowed down...
by tangram
Mon Jun 12, 2017 9:28 am
Forum: General
Topic: Bond interface(balance-rr) and bridging
Replies: 13
Views: 3918

Bond interface(balance-rr) and bridging

Hi, I'm trying to have ethernet ports and a balance-rr bonding interface in the same bridge but it doesn't seem to work - i get a message that the bond interface is receiving same mac on different port. The device is a rb3011, I have the sfp and ether1 in the bonding interface connected to a smartsw...
by tangram
Wed May 31, 2017 11:54 am
Forum: Beginner Basics
Topic: New MikroTik user struggling with port forwarding
Replies: 14
Views: 1461

Re: New MikroTik user struggling with port forwarding

You can also set in-interface to your wan interface if you have dynamic ip. There are a lot of options in configuring the firewall. Actually I DID have both the destination IP and In-Interface when I had the traffic coming into my static DSL internet connection. However as part of moving stuff over...
by tangram
Tue May 30, 2017 12:34 pm
Forum: Beginner Basics
Topic: New MikroTik user struggling with port forwarding
Replies: 14
Views: 1461

Re: New MikroTik user struggling with port forwarding

You can also set in-interface to your wan interface if you have dynamic ip. There are a lot of options in configuring the firewall.
by tangram
Tue May 30, 2017 12:17 pm
Forum: Beginner Basics
Topic: Setting Up Load Balancing
Replies: 2
Views: 406

Re: Setting Up Load Balancing

Hi, You first make 3-way load balancing over the 3 interfaces and in your mangle, where you split the traffic from lan you do this: add chain=prerouting dst-address-type=!local in-interface=SALES-LAN per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=IS...
by tangram
Wed May 17, 2017 12:44 pm
Forum: General
Topic: Monitoring Network
Replies: 3
Views: 724

Re: Monitoring Network

Hi, I used this tutorial but there are a lot more out there: https://aacable.wordpress.com/2011/11/29/howto-save-mikrotik-logs-to-remote-syslog-server/ You can use elastic search and other tools based on that: https://www.digitalocean.com/community/tutorials/how-to-centralize-logs-with-rsyslog-logst...
by tangram
Tue May 16, 2017 11:20 pm
Forum: The Dude
Topic: Device login with radius credentials
Replies: 7
Views: 1542

Re: Device login with radius credentials

I only got it working with reversible encryption, sorry. But now i face another issue: i can't open a terminal. It requires login and if i input the radius credentials again it does not work. I can alter any other settings, except opening a terminal in winbox. Any ideas ?
by tangram
Tue May 16, 2017 11:29 am
Forum: General
Topic: Problems with netinstall
Replies: 1
Views: 823

Re: Problems with netinstall

Ok, i think i got it working. If you click the error, the compatibility check from windows appears and running with the recommended settings seems to do the job. So select windows xp service pack 2 mode :)
by tangram
Tue May 16, 2017 11:19 am
Forum: General
Topic: Problems with netinstall
Replies: 1
Views: 823

Problems with netinstall

Hi, I get error during netinstall discovery phase. I'm guessing it's when the router makes the request. Error states: bind tftp general failed: Only one usage of each socket address (protocol/network address/port) is normally permitted - 10048. There's no service using tftp ports, I run the program ...
by tangram
Tue May 16, 2017 10:34 am
Forum: General
Topic: OVPN Server and Client
Replies: 4
Views: 440

Re: OVPN Server and Client

Hi,

Post the ppp secret and ppp profile parts of the config.
by tangram
Mon May 15, 2017 12:35 pm
Forum: General
Topic: How to block Youtube and facebook Android App in router Mikrotik
Replies: 30
Views: 70313

Re: How to block Youtube and facebook Android App in router Mikrotik

Hi,

Drop any dns requests using l7 list.

;;; Drop Blacklist - DNS
chain=forward action=drop layer7-protocol=blacklist protocol=udp dst-port=53

If they don't use ip instead of name you're covered.
by tangram
Fri May 12, 2017 11:08 pm
Forum: General
Topic: Policy-based routing with dual WAN - Mikrotik update fails
Replies: 5
Views: 1390

Re: Policy-based routing with dual WAN - Mikrotik update fails

You need routes for the main table. If you want load balancing or stuff like that, use magle. For starters do something like this: add distance=1 gateway=192.168.178.1 add distance=2 gateway=192.168.2.1 add distance=1 gateway=192.168.178.1 routing-mark=to_WAN-DSL add distance=1 gateway=192.168.2.1 ...
by tangram
Thu May 11, 2017 1:24 pm
Forum: General
Topic: Nat forward on Bond interface.
Replies: 9
Views: 852

Re: Nat forward on Bond interface.

. I create a rule like IP_WAN_BOND:88->IP_LAN:80. This rule not working.
If I disable BOND interface that rule works without problem.
Try setting rule with interface like bond:88->ip_lan:80
by tangram
Thu May 11, 2017 1:07 pm
Forum: General
Topic: Policy-based routing with dual WAN - Mikrotik update fails
Replies: 5
Views: 1390

Re: Policy-based routing with dual WAN - Mikrotik update fails

You need routes for the main table. If you want load balancing or stuff like that, use magle. For starters do something like this: add distance=1 gateway=192.168.178.1 add distance=2 gateway=192.168.2.1 add distance=1 gateway=192.168.178.1 routing-mark=to_WAN-DSL add distance=1 gateway=192.168.2.1 r...
by tangram
Mon May 08, 2017 10:59 am
Forum: Beginner Basics
Topic: HELP !!!!! How to protect Router automatic Mac generate
Replies: 42
Views: 18088

Re: HELP !!!!! How to protect Router automatic Mac generate

Hi, If you set route with interface as gateway it's normal that the source does arp for all destinations out that interface. Intefaces with dhcp-client act like this. So, as stated by others, there are a couple of ways to make things working: 1. your dhcp-server has proxy-arp so all those destinatio...
by tangram
Thu May 04, 2017 9:54 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS-RM and POE injector
Replies: 9
Views: 2089

Re: RB3011UiAS-RM and POE injector

[ So you are connecting a 48v power supply to a router that requires 24v? Why are you expecting it to work when it's clearly not going to? You have been told 3 times already that the RB3011 requires a 24v power supply like the adapter that is included with it provides. You can buy a PoE adapter if ...
by tangram
Thu May 04, 2017 1:23 pm
Forum: General
Topic: Networking Problem
Replies: 4
Views: 723

Re: Networking Problem

Try ping clients from mikrotik with source ip 192.168.0.10, check ip arp table and if possible post configuration.
by tangram
Thu May 04, 2017 10:31 am
Forum: RouterBOARD hardware
Topic: RB3011UiAS-RM and POE injector
Replies: 9
Views: 2089

Re: RB3011UiAS-RM and POE injector

Hi, what power injector is compatible with this router ? Anything 24v passive such as the MT gigabit one and UBNT ones. You mean this one: RBGPOE-CON-HP - MikroTik 48 to 24V Gigabit PoE Converter I'm asking because I have a 802.3af/at injector and it doesn't work. I tried crossover cable too - the ...
by tangram
Wed May 03, 2017 9:15 pm
Forum: RouterBOARD hardware
Topic: RB3011UiAS-RM and POE injector
Replies: 9
Views: 2089

Re: RB3011UiAS-RM and POE injector

Hi, what power injector is compatible with this router ?
by tangram
Thu Apr 20, 2017 4:16 pm
Forum: General
Topic: Config migration question
Replies: 7
Views: 1622

Re: Config migration question

I don't use timed pushes, I do it manually. Sure you could can use cron or something to do that. This being said I have created a user with rsakey attached on each managed device and so i can log in without prompts. This tutorial was very useful: https://bl0gg.ruberg.no/2014/02/securely-managing-mul...
by tangram
Sat Apr 15, 2017 10:02 am
Forum: General
Topic: same config but different routing issue
Replies: 7
Views: 675

Re: same config but different routing issue

Shouldn't you have routes for 192.168.117.0/24 and 192.168.118.0/24 with gw 192.168.2.254 on client 1 and 2 ? There's something else i don't understand: 5 ADC 192.168.118.0/24 192.168.118.1 bridge1 0 and 0 192.168.118.1/24 192.168.118.0 ether2-master The ip isn't suppose to go on interface bridge1 i...
by tangram
Fri Apr 14, 2017 10:57 am
Forum: General
Topic: same config but different routing issue
Replies: 7
Views: 675

Re: same config but different routing issue

Have you checked the server? Maybe there's a route missing to your second site - 192.168.117.0/24.

Do traceroutes from both sites, compare and see last hop where it get's stuck.
by tangram
Fri Apr 14, 2017 10:43 am
Forum: General
Topic: Layer7 Protocol filter doesn't work right
Replies: 6
Views: 1865

Re: Layer7 Protocol filter doesn't work right

As a principle of course you are right but my users don't have access to change the hosts file - i doubt they even know about it.
You adapt to your target audience, if you expect "resistance" buy a more advanced or specialized device :)))
by tangram
Wed Apr 12, 2017 12:59 pm
Forum: General
Topic: Layer7 Protocol filter doesn't work right
Replies: 6
Views: 1865

Re: Layer7 Protocol filter doesn't work right

You guys are great, I got it working by filtering dns traffic and using the l7. Requests are blocked so you can't resolve sites not included in the regexp.
by tangram
Wed Apr 12, 2017 10:05 am
Forum: General
Topic: Layer7 Protocol filter doesn't work right
Replies: 6
Views: 1865

Re: Layer7 Protocol filter doesn't work right

I will test this regarding the first packets. It's true I've set the filter on dst port 80/443 - i'll try to filter others protocol too and see how that goes. Tbh dns would work too because if you can't resolve you can't access by name :)

Thank you guys.
by tangram
Wed Apr 12, 2017 9:40 am
Forum: General
Topic: Config migration question
Replies: 7
Views: 1622

Re: Config migration question

Winbox is much easier to use when you have only a couple of them because, to me, it's much faster and intuitive. When the device number rises ssh is the way to go because you can use tools like dsh to push command or run scripts on all devices in the same time. i usually test on 1-2 devices, make a ...
by tangram
Tue Apr 11, 2017 9:23 pm
Forum: General
Topic: Config migration question
Replies: 7
Views: 1622

Re: Config migration question

I've had issues importing a backup on the same hardware. For instance i had a lot of rb951 and on restore the wifi interface would be disabled and it's settings would get screwed up, among other things. That is because on source the interface would be wlan5 and on restore wlan2 or anything else. I f...
by tangram
Tue Apr 11, 2017 3:50 pm
Forum: General
Topic: same config but different routing issue
Replies: 7
Views: 675

Re: same config but different routing issue

Can you post the routing table of both routers ?
by tangram
Tue Apr 11, 2017 1:37 pm
Forum: General
Topic: Layer7 Protocol filter doesn't work right
Replies: 6
Views: 1865

Layer7 Protocol filter doesn't work right

Hi, I'm trying to set up access to a bunch of sites and deny all others. I've gone the layer7 route, created the list and it kinda works. What I mean by that is if in filter rules i set drop traffic things work, and no sites on that list are allowed. But if i check inverse match (!) nothing works - ...
by tangram
Thu Nov 17, 2016 11:30 am
Forum: General
Topic: L2TP Server + Radius | Tunnel drops
Replies: 1
Views: 740

Re: L2TP Server + Radius | Tunnel drops

I just tested on Windows 7 with the same setup and the session doesn't drop. Tested PPTP with w10 and this works.
I knew windows 10 is still buggy, but this...

Also tried with w10 1511 / 10586 still no luck.
by tangram
Wed Nov 16, 2016 10:30 pm
Forum: General
Topic: L2TP Server + Radius | Tunnel drops
Replies: 1
Views: 740

L2TP Server + Radius | Tunnel drops

Hello, I've set-up a L2TP server on RB1100AHx2, router OS 6.37.1. with radius authentication. Everything works fine except that my tunnel drops after a couple of minutes. I'm connecting from Win10 1607 build 14393.447. The logs from mkt show only terminating..hung-up. I tried changing the keepalive,...