MikroTik

tiger4020

What info do you need?

Sent from my COR-AL00 using Tapatalk

tiger4020

Hello everyone.. I have an ongoing issue with clients side VPN not being able to connect. My setup: CORE ROUTER > PPP Router > Switch > Clients Most of our users are unable to connect to their VPN. It works fine with other ISP's using the same wifi router. I am unable to pinpoint the problem. Need t...

tiger4020

Hello Everyone,
We have 4 uplinks all using BGP to connect and 8 ppoe routers.

What is the best solution in this scenario?

Using one core router or any other solution please suggest.

Thank you.

Sent from my COR-AL00 using Tapatalk

tiger4020

Didn't work.

Its the IP routes creating issues.

If the Link A static routes is disabled and Link B static route is active only then traffic flows via Link B

Sent from my COR-AL00 using Tapatalk

tiger4020

Hello Zach,
Leave aside what I am trying to achieve.

First thing there is no traffic flowing from Link B using the PCC rules.

Sent from my COR-AL00 using Tapatalk

tiger4020

I have added them all. Followed exactly as per this manual:

https://wiki.mikrotik.com/wiki/Manual:PCC

Sent from my COR-AL00 using Tapatalk

tiger4020

Looks like its a IP route issue. As per the PCC method I hace added the IP routes. / ip route add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_ISP1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=10.112.0.1 routing-mark=to_ISP2 check-gateway=ping add dst-address=0.0.0.0/0 gateway=10...

tiger4020

Right now no traffic is flowing from Link B

Sent from my COR-AL00 using Tapatalk

tiger4020

So now I have a different issue.

Unable to keep both WAN links on same time.

Sent from my COR-AL00 using Tapatalk

tiger4020

I have added just the first rule to mark all the traffic pf the website x coming in.

/ip firewall mangle
add chain=prerouting src-address=websitex action=mark-routing new-routing-mark=test

Need help how to mark this traffic to Link B

Thank you

Sent from my COR-AL00 using Tapatalk

tiger4020

Hello Zach,

Thanks.. I need help with the script fpr tgis please.

I can mark the traffic to the website but how do I route it to the Link B. Do I add another rule? Add the interface (in or out)

Please help.

Thanks

Sent from my COR-AL00 using Tapatalk

tiger4020

Hello,
I have 2 ISP links.
Link A
Link B

There is a website (website x) which works well with only Link B.

All our customers are connected over Link A and Link B is only a fail over.

How do I redirect website X to open via Link B?

Thank you.

Sent from my COR-AL00 using Tapatalk

tiger4020

Yes but our dns works fine on Site A.

Sent from my COR-AL00 using Tapatalk

tiger4020

Hello.. I have a weird and serious problem. Network: Core Router> Site A & Site B My DNS is sitting on the core router. Problem: Site A works fine using my own DNS. Site B when using my own DNS all users get forwarded to some site 5231.xgenxxx before their requested site loads. And the user needs to...

tiger4020

@IParchitech will definitely lookup your link and buzz you for professional help.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Thank guys.. Currently I have set the ipsettings to loose earlier it was set to "no" with test this feature if it works.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Hello.. I have a similar question and a problem I am facing for a while and have not received a proper solution. We have 2 bgp peers. Problem faced: No pages load all of a sudden no pages load. If we shutdown one peer everything works great. The only solutions is to restart the router. What it looks...

tiger4020

its 2 bgp peers? - use distance

Yes two bgp peers.

I tried using distance but face routing issues.

The TX goes from one peer and the RX goes from other Peer.

Can you please guide me to a page with rules so I can what if I have done something incorrect.

Thank you.

tiger4020

I am having 2 inputs.

What is the best solution for a fail over for BGP?

I want input 2 to switch over once input 2 goes down.

Thank you.

tiger4020

The configuration is the same as Neski but the only thing you need is write your subnet address instead a IP direction.

Regards

I tried using the entire subnet.. in my case it is 172.16.1.0/24

I am trying to open steam (gaming server) ports, but still unable to do so.

tiger4020

Yes, your settings are correct. Thx :) Hello.. For the same above scenario if I want to open ports for all private IP's how would that be. Thank you. Can you explain your question better? Regards Neski forwarded a port for only one single ip 192.168.20.2 If o would want to open a port for 192.168.2...

tiger4020

Yes, your settings are correct.
Thx

Hello..

For the same above scenario if I want to open ports for all private IP's how would that be.

Thank you.

tiger4020

Hello Members,
I have used filter rules / NAT rules to open port 27015 but it still says port closed.

This port is for steam server and lot of my customers have brought up tgis issue.

Please help.

Thank you

tiger4020

Ping times will not be reported correctly.
• Because of the MPLS ICMP behavior, the only ping you will see for all hops is the full roundtrip. (from doc.)

OK.

So how do I access these AP's on Router B?

tiger4020

Thanks guys.. Now my next problem arises. Router A - Router B Everything works fine users are able to get internet, ppoe works fine. Problem is I am unable to ping the AP's and clients stations. I tried adding an IP on thr VPLS/Bridge still nothing. Please help. Thank you. Sent from my SAMSUNG-SM-G9...

tiger4020

Hello Everyone,
How do I test if my MPLS is working.

I can see neighbors and Lables for each IP.

But just to confirm how do I?

Thank you.

tiger4020

You need to use policy based routing, either by using policy rules: /ip route rule add src-address=172.16.1.11 action=lookup table=ISP01_OUT or via the mangle facility in the firewall: /ip firewall address-list add list=ISP1_CLIENTS address=172.16.1.11 /ip firewall mangle add chain=prerouting actio...

tiger4020

Thanks...will do that and let you know.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

How do I do that?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Mikrotik does have that option. Well you are correct a switch is a switch unless it can transport large packets. So what do the problem be here? Sent from my SAMSUNG-SM-G935A using Tapatalk I think I may know what you are doing. Please know that all of the options under MPLS or VPLS are for routers...

tiger4020

Mikrotik does have that option. Well you are correct a switch is a switch unless it can transport large packets. So what do the problem be here? Sent from my SAMSUNG-SM-G935A using Tapatalk I think I may know what you are doing. Please know that all of the options under MPLS or VPLS are for routers...

tiger4020

Mikrotik does have that option.

Well you are correct a switch is a switch unless it can transport large packets.

So what do the problem be here?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Option a. Incorporating a switch between teo MPLS LDP routers. At first I only connected the CSS326 right from the box. MPLS did not work. Then upgraded the firmware still did not work. Next I enabled VPLS on one port of the switch it worked. After a few minutes it went down. If the port had no VPLS...

tiger4020

Something is probably wrong with your config

The switch config? I haven't done any config apart from enabling VPLS on each port.

tiger4020

If it goes down with a switch in between either: a) the switch is limiting the MTU below what you need for VPLS, or b) there is another issue unrelated to the switch and the tunnel would go down even without the switch The tunnel works fine on my other cisco switch. But the moment I connect to CSS3...

tiger4020

Switch chip can pass traffic at wire speed, so as long as you pick the switch with desired wire speed there will be no congestion.

Installed mikrotik CSS326 but MPLS/VPLS goes down.. what am I missing?

tiger4020

Mikrotik CRS line is not expensive at all. Additionally you will be able to manage them using Winbox as any other routerboard. Of course, any routerboard with switch chip will do also. I am using Mikrotik for the routers but as I will be having only 1 P2P which will be carrying main BW and user dat...

tiger4020

Thanks Petrb.. got this resolved by changing the MTU on Tenda routers.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Hello Members, Need help with load balancing. I have setup ECMP: WAN 1 - 2.2.2.2 WAN 2 - 3.3.3.3 LAN 1 - 1. USER 1 - 192.168.1.10 2. USER 2 - 172.16.1.11 3. USER 3 - 172.16.1.12 4. USER 4 - 172.16.1.13 5. USER 5 - 192.168.1.14 What I want to achieve is USER 1 & USER 5 to always reach WAN 1 as these ...

tiger4020

Hello Members, Need help with load balancing. I have setup ECMP: WAN 1 - 2.2.2.2 WAN 2 - 3.3.3.3 LAN 1 - 1. USER 1 - 192.168.1.10 2. USER 2 - 172.16.1.11 3. USER 3 - 172.16.1.12 4. USER 4 - 172.16.1.13 5. USER 5 - 192.168.1.14 What I want to achieve is USER 1 & USER 5 to always reach WAN 1 as these ...

tiger4020

The PowerBox Pro (RB960PGS-PB) has the same board inside as hEX PoE (RB960PGS) does, it's just the housing that differs. You can find the block diagram for both devices here . All ports are completely independent, i.e. you can use all 6 ports for whatever purpose you need at the same time. Thank yo...

tiger4020

On the product page it doesn't say anywhere that the SFP port is shared nor it has a block diagram to confirm how the SFP port is actually connected. https://routerboard.com/RB960PGS-PB The model is RB960 meaning the 9th series with 6 wired interfaces and 0 wireless interfaces. https://wiki.mikroti...

tiger4020

Guys need an urgent answer.

On the Mikrotik Powerbox Pro can I use Port 1 ans SFP port simultaneously?

Thank you and looking for a quick reply.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Hello everyone, Router A - Router B Connected via MPLS VPLS Router A is also a ppoe server Router B is connected to Ubiquiti AP's Problem faced: Users having Dlink routers everything works just fine. Users having a Tenda router certain websites will not open. Please help on what I am missing on. I c...

tiger4020

You also want to make sure the switch in between supports at least a 1530 byte frame size to be able to leverage all the features of MPLS like VPLS. Most switches do, but there are still some out there that don't

This helps thank you.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Mikrotik CRS line is not expensive at all. Additionally you will be able to manage them using Winbox as any other routerboard. Of course, any routerboard with switch chip will do also. I am using Mikrotik for the routers but as I will be having only 1 P2P which will be carrying main BW and user dat...

tiger4020

It depends on the switch. A decent switch will be "transparent" to MPLS. A "el cheapo" one (software based, like most included on ISP routers, or *-link brands) won't be so transparent and you can expect funkyness... Give me an example of a decent switch please. Sent from my SAMSUNG-SM-G935A using ...

tiger4020

Hello Members,
Please help me understand if this would be a correct scenario to run MPLS.

Mikrotik > Switch > Mikrotik

Would the switch create any problem for the packet flow if I am running MPLS to connect two nodes?

Thank you.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running. Can you help me identify which rule it may be ? Thanks Sent from my SAMSUNG-SM-G935A using Tapatalk The rule that was causing your headaches is: add action=drop chain=input comment="Drop everyt...

tiger4020

you must have some rules to allow ospf in firewall like

$IPTABLES -A INPUT -i eth1 -p 2 -j ACCEPT # IGMP
$IPTABLES -A INPUT -i eth1 -p 89 -j ACCEPT # OSPF

(its protocol 2-egp and 89-ospf, NOT tcp ports)

Here eth1 is the outgoing port of OSPF correct?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

I added this rule to my firewall to allow ospf
Code: Select all
add action=accept chain=input comment=OSPF dst-address=224.0.0.5

Let me try this.. thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

He has network just for link. Look at the last line.

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running.

Can you help me identify which rule it may be ?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

I dont see your network under /routing ospf network you need to add the networks to the area in order for ospf to work. Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running. Can you help me identify which rule it may be ? Thanks Sent from my SAMSU...

tiger4020

Guys.. it was my rule that was not allowing OSPF. I diasbaled all my filter rules and it OSPF is running.

Can you help me identify which rule it may be ?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

In my experience you need to have a network under ospf network that covers the inter connectivity between routers. then on each of the routers you should put the network that is behind that router that you would like to share. from what I can see you have missing networks on the routers. https://wi...

tiger4020

He has network just for link. Look at the last line.

So what am I doing wrong?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Main router 1: /interface bridge add name=loopback /interface ethernet set [ find default-name=ether2 ] name=ether2 set [ find default-name=ether3 ] name=ether3 set [ find default-name=ether4 ] name=ether4 set [ find default-name=ether1 ] comment=wan name=WAN-ether1 set [ find default-name=ether5 ] ...

tiger4020

Router 2: /interface bridge add name=bridge1 add name=loopback /interface ethernet set [ find default-name=ether2 ] name=ether2-master /ip neighbor discovery set ether1 discover=no /ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254 /routing ospf instance set [ find default=yes ] redi...

tiger4020

As in? Sent from my SAMSUNG-SM-G935A using Tapatalk Simply type export in a terminal window. https://wiki.mikrotik.com/wiki/Manual:Configuration_Management#Exporting_Configuration /export Ok will. Can you tell me if I can run OSPF on the same router as the PPoE server? That is what I am trying to d...

tiger4020

Can I run OSPF on my PPoE router?

What is the right config:
1. PPoE + OSPF > Switch > Clients
2. PPoE > OSPF > Switch > Clients

Thank you.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Can I run OSPF on the same PPoE router?

Sent from my SAMSUNG-SM-G935A using Tapatalk

Can you post export for both routers?

As in?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Case studies here should give you a starting point. https://wiki.mikrotik.com/wiki/Manual:OSPF_Case_Studies I have tried using these http://wiki.mikrotik.com/wiki/Manual:OSPF-examples But on my tower 2 router I see a neighbor but won't see neighbor on my core router. Sent from my SAMSUNG-SM-G935A u...

tiger4020

are the lan ports connected to the switch and ptp links in the same lan as the lan ports of the AP's. can you share a bit more information about you setup. We understand your router lan connects to the switch but need to know further information so we can give you an example. Here is my setup: Offi...

tiger4020

I am sure it went bad..

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Yes I can ping the CCR LAN facing interface from Tower2 RTR. Help me understand with the above example. R1 - ether 2 where is this connected to? R1 - ether 3 where is this connected to? R2 - ether 1 where is this connected to? R2 - ether 3 where is this connected to? Sent from my SAMSUNG-SM-G935A us...

tiger4020

Case studies here should give you a starting point. https://wiki.mikrotik.com/wiki/Manual:OSPF_Case_Studies I have tried using these http://wiki.mikrotik.com/wiki/Manual:OSPF-examples But on my tower 2 router I see a neighbor but won't see neighbor on my core router. Sent from my SAMSUNG-SM-G935A u...

tiger4020

@Rudios I have not setup any IP's or areas.
Ether 2: x.x.x.218 (WAN IP)
Ether 3: x.x.x.10 (PPOE server)
Ether 4: connected to switch (users connected to switch)

How do I start?

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Hello everyone,

This is my current setup. I recently installed RB450 at Tower 2 and its running in bridge mode.

How do I setup OSPF in my case?

Thanks

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

It was a switch problem.. installed a new mikrotik in bridge mode.. Everything is back to normal.. but with the increasing number of users on tower 2 I need to setup OSPF.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

I tried OSPF but at the main router I won't see the tower 2 router under main router neighbor list.

Sent from my SAMSUNG-SM-G935A using Tapatalk

tiger4020

Hello everyone, I have https://uploads.tapatalk-cdn.com/20170223/d813721c867436281fead31f09523b03.jpg The radios at tower 1 are connected fine to tower 2. I get speeds of above 35Mbps. But the data being pulled at tower 2 when I connect the ptp to the AP's (via a switch) does not exceed 6Mbps. Getti...

tiger4020

mag2020,
You were correct. Its now fixed.

Thanks.

tiger4020

Hello Every One,
I have a similar problem.. In my case the user has been assigned the public IP everything works fine however when he checks on checkmyip.com he gets the WAN IP.

Please help.

Thank you

tiger4020

The PPoE users who have signed up for public IP still show them the WAN IP:

This how it shows up interface window:
Local Address: (shows WAN IP)
Remote Address: (shows the public IP they have signed up)

What needs to be done to show the public IP gateway on local address?

Thanks..

tiger4020

Found the rule..Thanks that helped.

Now I need to allow my PPOE auth server to sync with Mikrotik. I added the SSH port 22 on DST port for my rule. But it still wont sync.

tiger4020

Yes it may be a firewall rule. I had added couple of them due to DDoS attack.

Any easy way to spot a rule which has blocked IP access to mikrotik?

Thanks.

tiger4020

winbox PORT: 8291 enabled
port 80 & 443 is disabled.

tiger4020

So this is what I want to do. I have two ISP's providing me bandwidth. If one ISP fails I want a switch over to ISP2 for only specific IP's. For eg. user 1 IP: 192.168.1.61 user 2 IP: 192.168.1.62 user 3 IP: 192.168.1.63 user 4 IP: 172.17.1.61 user 5 IP: 172.17.1.62 The above is a list of clients co...

tiger4020

Hello Everyone,
Seasons greetings!!!

We are unable to access mikrotik via public IP. Only Mac address login works.
Where can I find the settings to change this.

Thank you.

tiger4020

Hello everyone,
I want to create a fail over for only a specific IP Pool. Please guide me to the right discussion or post or documentation.

Thank you.

tiger4020

I am sure it was the attack. I added basic firewall rules and its fine now. Phew..

Thank for the help.

tiger4020

Yes... Its to some german servers and alibaba servers.

None of this traffic with high Tx is coming from my users. My LAN Rx is way less compared to my WAN Tx.

What I mean is: There is a lot of upload from my WAN and this is not from any of my users.

tiger4020

Hello All,
I have a lot of unidentified outgoing traffic from my WAN. They are not reaching any of my servers or users just from Tx of my WAN port.

Please help.

Thank you.

Search found 83 matches