MikroTik

satman1w

Google knows...

https://wiki.mikrotik.com/wiki/Manual:I ... e/Wireless

satman1w

Without seeing router configs, I can speculate about the cause of your problem, but I am about 99,99% sure that you have misconfigured something.
My advice would be: reset both routers to the factory settings and start from scratch.

satman1w

L2TP VPN is a PPP style protocol in which the IP handed out is not a subnet but a /32 technically - so no broadcast and ARP learning exists, and the client machine does not generally enable a route for the remote subnet. route.png ...as you can see, L2TP interface is up and the auto route for remot...

satman1w

If you clear "Use default gateway on remote network", only the traffic destined to remote subnet will be routed through tunnel and the rest will stay the same as before. So you will be able to ping your network and all other traffic will be routed will be router through your default gatewa...

satman1w

https://wiki.mikrotik.com/wiki/Hairpin_NAT

satman1w

IP address that router will be giving out to L2TP connections should be within the same subnet as all other local users, and when configuring the windows client (in Networking->IPv4->Properties->Advanced) clear "Use default gateway on remote network"...

nothing else..

satman1w

When running traceroute using .250 or .251 as the source address, it shows my default gateway .249 being the first hop.

... the idea was to trace route to your public subnet from internet, not from your router, but it does not matter now..

satman1w

If you try to ping "internet" from your broadcast address it works!
You've made me investigate :)

Nice job :-)

I was preparing to do the same... just for fun, but now... you ruined it :-D

anyway, the traceroute test will give the right answer, don't you think?

regards

satman1w

@satman1w, I don't think they have a /30 mask at their side as in such case, even the .251 should have problems, and the failure would have to happen on the PC as well. No, it should not... If you try to ping "internet" from your broadcast address it works! ...and this looks exactly like ...

satman1w

Is it possible that the subnet given by ISP is not /29 but /30 ?

satman1w

I'm working in hospital, isolated part is public pharmacy. They are isolated so that they do not see the rest of the network. :-) This is miles away from your initial question, and if you, as member oh hospitals IT staff, have to ask for forum advice, this is going completely the wrong way. ASAP hi...

satman1w

how exactly is the "network isolated by mikrotik"??

satman1w

1. connect server to ether1, set IP address to 192.168.39.254, set def.gateway on your server accordingly
2. connect pc to ether2, set IP address 192.168.41.254, set def gateway on your pc accordingly

try ping to each other....

that's it

satman1w

connecting...
disconnected.

In most cases the problem is on providers side...

Try to ask support to reset the connection or enable another MAC address...

satman1w

1. You can supply rb 411 with 9-28 V via Power Jack
2. you have 4S lipo batteries with output voltage between 14 and 17V.

Isn't it obvious?!?

satman1w

Hi,

There are public btest servers you can use for the purpose...
Read this:
viewtopic.php?t=104266

satman1w

What interface do you see? the one onboard or add-on card?

I suspect that chipset on your onboard ethernet requires additional drivers depending on OS installed and is not recognized by ROS...

satman1w

My problem is I can't found a tutorial how to create VPN only for 1 ethernet...

Please explain

satman1w

Haha satman that is an amusing link, and torture at the same time LOL

you didn't disappoint me...

Your clever comment was expected

satman1w

This is the "wrong way" which works excellent....

http://wiki.tuturutu.eu/doku.php/networ ... eless_vlan

satman1w

add action=dst-nat chain=dstnat dst-port=80 in-interface=(your interface) protocol=tcp to-addresses=192.168.1.25 to-ports=80

this should work...

satman1w

try other ethernet port...

satman1w

You should put all your hardware in private subnet, configure two ISPs and script a simple failover for them (you will find a lot of examples how to do it) In this case, your machines will always have the same addressess (local subnet) and will not even know that you have changed ISP. Not to mention...

satman1w

you have created DHCP servers on VLAN interfaces and users connected to ethernet ports cannot get the IP addresses?? How could they? Ethernet ports and VLANs are in no connection. Ether3 and VLAN "staff" should be in separate bridge - move the IP address and DHCP server from the vlan to th...

satman1w

Add 2 Static DNS Entries for cloudflare-dns.com to Address: 104.16.248.249 and 104.16.249.249.

satman1w

Google "Mikrotik Multiple ISP routing" and you will find a number of solutions... except, I dont think that any of them will bridge your private network to ISP (that is not ussual way to do it) but rather route your private subnet to different ISP.

regards

satman1w

@satman1w
I tried the ip ###.###.18.114, but it's the same result, no internetconnection...

...one more just to be sure..
I would try to disconnect EVRYTHING fom providers equipment, then connect ONLY Mikrotik (different ethernet port...) and set it up from scratch..

satman1w

@satman1w Yes, it is a cable-modem. I don't need to setup pppoe. On all the routers / linux-boxes I fill in the correct IP, subnetmask, gateway and dns-addresses and then I have a internet-connection outside my network. So, I think it has to do with another setting, but I don't know what? If everyt...

satman1w

Because software archaeology is not a popular hobby, so it would be too much effort spent on Mikrotik side just to satisfy you and the other two guys practising it :) I’ve always wondered why people who can’t contribute anything useful to the discussion have a need to write Hmmm,@sindy is in the to...

satman1w

There would be easy way, since they already have files on server in some directory structure, they could simply show it, with enabled automatic directory indexes. Nothing fancy, but friendly enough and no extra maintenance required.

exactly! Browsable folder would do the job!

thumbs up

satman1w

I would open it, but I would not recomend it... :-)

satman1w

As I can see you have some kind of Cable modem from your provider and it is in a bridge mode so it is not "dialing a connection" by itself. If it is anything like adsl modem you have to etup pppoe on modem to connect it to provider, OR if it is bridged (it looks that yours is), you have to...

satman1w

I'm sure it's more than three, but yeah, probably something like that. But as far as I can tell, old RouterOS versions are not that interesting. It's mostly like current RouterOS, only some features are missings. And WinBox before 5.x looks slightly different. If you just want to have a look (I dou...

satman1w

Because software archaeology is not a popular hobby, so it would be too much effort spent on Mikrotik side just to satisfy you and the other two guys practising it :)

I’ve always wondered why people who can’t contribute anything useful to the discussion have a need to write

satman1w

tell me (or draw) how exactly are connected your router, providers equipment and the "linux box", please.

Everything else seems ok...

satman1w

O.K. let's start from beginning your router has address x.x.18.118/29 on ether1. ether1 is connected to your provider. without any additinal routes you sgould be able to ping Def.Gw. on your prowiders network ping x.x.18.113 - can you? if you can, add default route 0.0.0.0 to x.x.18.113 now you shou...

satman1w

I repeat: @satman1w: This is a method to create it automaticaluy via scritp, or you want that the router call you when it need to create a directory ? [/quote] You're right, but I never had a need to create folders dynamically on Mikrotik router... When that will happen, I will definitely use one of...

satman1w

I appologise for not answering your question... I was not aware of your post..

By now you have probably find a solution?

satman1w

Thanks!

I don't realy need it in testing environment, but nevertheless... is good to know!

:-)

BTW, do you have an information when we can expect next, improved beta?

regards

satman1w

...or you can create folder on your desktop and just drop it in your Winbox / Files wherever you want..

satman1w

Did you configure NAT?

satman1w

...does nothing!

RIP window does not open.... no error message...

satman1w

Thanks for the reply, although i think it took you more time to search and copy-paste from wiki than to actually answer my question.
A yes or no would be better since i've already read the wiki about NAT.

Oh, I am very sorry, won't happen' again !

So, the answer is NO!

satman1w

Mikrotik Wiki explains it very nice... Network Address Translation is an Internet standard that allows hosts on local area networks to use one set of IP addresses for internal communications and another set of IP addresses for external communications. A LAN that uses NAT is referred as natted networ...

satman1w

of course it is possible.
google "mikrotik split tunnel" and you will find out how to do it!
ok?

satman1w

Thanks,

Still confused why there is not some more "comfortable" way to access it, but...

thanks again

satman1w

I am looking for very old versions of ROS (mipsbe), prefferably last vesions in 3.x, 4.x and 5.x (with netinstall - of course :-)).
Is there some kind of archive on official web site or any other site ?

thanks

satman1w

I don't see trunk interface ?!?

see this - http://wiki.tuturutu.eu/doku.php/networ ... eless_vlan - just ignore wireless...

satman1w

Manual, tutorial, guide, help doc, but dont worry there is no manual because satman1 said so. As if he/she is the keeper of knowledge of every document published on the net. My bad he may know Mr Frey personally and was told directly no there is no companion manual to my tutorial................ If...

satman1w

Is there an echo in here, or do you just like to hear yourself type @satman

I would like to hear myself sometimes, but you are so loud...

satman1w

What manual are you speaking about? Can you give a link?

not a manual, a short tutorial... just google Frey wireguard...

satman1w

There is a good tutorial here from Rick Frey

I would not say that it is good...
There are a lot of questionable settings and it just does not work as described!

satman1w

Enter the bridge menu - create bridge - add interfaces that you want to be bridged... that's it! Do not forget to move IP adress (if there was one on one of the interfaces) to the bridge... also if there was a DHCP server defined on one of the bridged interfaces, move it to the bridge instead... enjoy

satman1w

use winbox or ssh!

satman1w

The new user/pass created will be known when we create the script. So it will be a backup plan in case the user can't login with his user/pass. O.K. let's thik about it a little.. "automatically create a new user after a few unsuccessful login attempts from a known user." What does it mea...

satman1w

Note: SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. This way there is no need for Default Gateway on the device itself. source: https://wiki.mikrotik.com/wiki/SwOS/RB250_RB260 Wrong, Switching operates at layer 2 of th...

satman1w

I am very confused !!

You have a user that has forgot his usr/pass and now you want automatically create a new user to help him?
How does the user know the new usr/pass? Hod do you you know that he (user) will not forget it too?

Bad idea IMHO...

satman1w

The answer on such a fundamental question can be found on thousands of web sites, you just need a google a little...
Try youtube...
https://www.youtube.com/watch?v=chlBlRfsnq0

https://www.youtube.com/watch?v=NDVImep5UBI

......

satman1w

after 5 seconds of googling...
http://gregsowell.com/?p=1290

satman1w

In advanced tcpip settings of your vpn connection ad your domain...

pic.png

satman1w

Create folder "different location" and export...

export file="/different location/filename"

different location.png

satman1w

Let's assume that ports on your router has a following addresses for three different subnets subnet 1 ->192.168.100.0/24 subnet 2 ->192.168.200.0/24 subnet 3 ->192.168.250.0/24 Just add those addresses to address list a name it "MySubnets" /ip firewall address-list add address=192.168.100....

satman1w

No!

A simple script will fill in right address every time it changes..

Tested on numerous installations..

regards

satman1w

You can use IPIP or GRE tunnel with IPsec!

It will do the job perfectly

regards

satman1w

Check this link:

http://wiki.tuturutu.eu/doku.php/networ ... eless_vlan

regards

satman1w

Hi

Is'n it simpler just to put IP addresses from your country to the address list and block all others?

satman1w

Very well, Rb3011, ether1 link wan PPPoE, ether2 LAN with DHCP Server, without VLAN. From eth2 port goes to a switch / 1gb is not manageable. Unifi is connected to this switch. Release time of dhcp 10hrs. At unifi 2 networks, a guest with 1mb control per device and a business one. O.K. so there is ...

satman1w

Not saying it wouldn't work nor that its not a valid approach, but unless there is a valid reason, simpler/cleaner is usually better and easier to manage?? I do like your diagram skills! :-) When you are doing it for yourself, it could be done simpler, I agree. But whe you expect someone else to wo...

satman1w

To be frank Satman your example is overly complicated (I would use the term butt ugly) for what I see to be no gain?
you only need a single bridge on each device.
All subnets separated by Vlans. Ports assigned as trunk or access as required.

OK!

satman1w

A bit more info about the configuration details would help...

satman1w

What is "...local network of 192.168.88.0/24..." and what is "... their network ..."?

Why are you using the default configuration?

Why do you have "local" and "their" network??

give us some more datails...

satman1w

Hi,

I think that in attached link you will find enough information to solve your problem.

If there is something else - ask!

regards

http://wiki.tuturutu.eu/doku.php/networ ... eless_vlan

satman1w

did you set up NAT?

satman1w

/ip service
set www port=8080

satman1w

/ip firewall nat
add chain=srcnat src-address=192.168.88.0/24 dst-address=192.168.88.99 protocol=tcp dst-port=80 out-interface=(your out interface) action=masquerade

satman1w

/ip firewall nat
add action=dst-nat chain=dstnat comment="RDP" disabled=no dst-port=3389 protocol=tcp to-addresses=(PRIVATE IP of RDPhost) to-ports=3389
This is as detailed as it can be...

satman1w

ether2 and ether3 should be in bridge and dhcp server set on the same bridge!

Is this the case in your configuration?

satman1w

Only ports and services you enable throug NAT would be exposed (you will protect them with passwords and so on...) everything else wil be behind nat, ergo - unacessible. Also there are a numerous possibilities to configure your firewal rules which will additionaly help to secure your network. ragards

satman1w

Best solution is to ask your provider to put their device in bridge mode and disable wireless. Then you can enable wireless and NAT on your router and your devices can be accessible from anywhere not just from your intranet.

Regards

satman1w

Hi Kevin, I have done everything by the book (certificates in the right place and so on..) and after few days of pain I have successfully started one vpn on one computer, but not on all of them (for this experiment I am using two physical machines and three virtual Machines in VMware WS 14). So unti...

satman1w

Hi,

I wonder if you ever find an answer to your problem?

I am asking because I have stumbled to the same, and have no idea how to solve it. All answers I found are about placing the certificate to the right folder, which already is...

best regards

satman1w

It will help. Because new RouterOS has a completely different Cloud implementation which uses DIFFERENT DNS SERVERS on MikroTik side. Please do what was suggested. Hi Normis, But I did! My routers are all on last stable revision of ROS.(6.43.7)! If everything works fine I should be able to resolve ...

satman1w

You are missing the point!
How exactly will I help google dns to be aware of mynetname.net if I upgrade router ??

The problem is that domain is not resolvable! None of the DNS servers are aware of it.

ok?

satman1w

Have you tried to set up a vpn client in office 1 and coonect it to the office 2??

It should work without any problem...

satman1w

All ports on RB1100AHx4 are separated by default (to be sure, start /system reset and after reboot do not accept default configuration if offered). You can create bridges as you want and connect them with physical ports as you want You can also put the separate subnet on each and every port and deci...

satman1w

something like this will prevent user with address 192.168.1.11 to access anything but Gmail...

Code: Select all

/ip firewall address-list

add address=mail.google.com list=Gmail



/ip firewall filter

add action=drop chain=forward dst-address-list=!Gmail src-address=192.168.1.11

satman1w

If you use an old RouterOS version, the service no longer works. Make sure to update your RouterOS, stop the IP cloud service then start it again. EDIT: Actually it seems like a service outage, ns1.kissthenet.net and ns2.kissthenet.net are both failing. Never mind the router and the ROS version (wh...

satman1w

Hi, What is happening with IP Cloud? None of my routers are able to update their addresses. mynetname.net cannot be resolved.... Since a few of my tunnels depend on this, I would like to know, what is happening. Thanks nslookup says: C:\Users\user>nslookup mikrotik.com Server: google-public-dns-a.go...

satman1w

Try to find a presentation by Mohamed Khomeini from MUM Indonesia 2013 "VLAN in MilroTik"

I think that his explanation will be most understandable for you.

Enjoy

satman1w

Hi,

I have disabled access to my router for all public addresses except x.x.x.x which is fine but I cannot get the ROS updates.

I would like to know which address or address range do you use for updates so I can exclude them from filter.

Thanks

satman1w

Maybe the ICMP is blocked by your provider ?!

By default the WebFig is enabled on port 80 of your router. Can you access it via web browser through your public address ??

satman1w

What is your current public address ?

satman1w

They are not antenna connectors, but factory test points. We do not provide any detailed documentation, but most devices do have repair manuals available through our distributors. I did not expect detailed documentation but more something like "board description" like the one you gave abo...

satman1w

Hi!

Is there a way to access more detailed routerboard documentation !!

For instance,I have hAPac lite with RB952Ui which has three antenna connectors, and I would like to know their purpose.

Do you have a document that describes it, which you are willing to share.

Regards

satman1w

I am always amazed when someone refuses to read the release notes, then posts here trying to shame and insult MikroTik for the end user ignorance. The only thing you have accomplished is showing us that you have no place in the I.T. field, and that you will not take responsibility for your own acti...

satman1w

unless it is checked, sending a file by email or ftp will not work Scheduler needs at least the same permissions as your user. This is quite logical. Previously there was a bug that was fixed now. We will add an improvement where the Log will throw an error, so you can easily catch the issue. Thank...

satman1w

clever observation...

satman1w

Hi guys, I would really like to know why do you want to look and feel more and more like Microsoft? Why do you publish new versions of ROS that very often fuck up something in the old configs ?? Few days ago I have updated some of my routers from 6.17 to newest version, and suddenly they stop to upl...

satman1w

There is no point in looking into your config without knowing what was your intention.
So, the question is: What would like to do?

Forward what (ip:port) where (ip:port)...

regards

satman1w

what amazes me the most is how did you get so far (conected all your servers and devices to router) without solving the problem with router first ??? The right path towards solving this mess is to disconnect everything from router, leaving a link to your provider only. Set the right IP to your wan i...

satman1w

complete mess! Default gateway on subnet 192.168.3.0/24 is "wireless modem router" 192.168.3.2 and all the trafic not destined to the local network is trying to acces its destination through GW !! Is your default GW aware of existance of your mikrotik router which is connected to the other...

satman1w

..on Mikrotik router, try another ethernet port... (eth2 instead of eth1...)

regards

satman1w

So, your public IP on MT WAN interface is 80.xxx.xxx.xxx ?? and you expect the the traffic to port 3099 ??? and you want to forward it to some IP:port on your private network ??

or I missed the point ?

regards

satman1w

... hopefully here you will find the answer to your question...
http://wiki.mikrotik.com/wiki/Tunnels

If you still will have the question, please post your configuration so we can discuss it ...

regards

satman1w

When I am replying with ROS command, due to complexity I don't write out of my head. So, I did it on my router and tried it before posting.

If it does not work for you, there must be some other problem. Try to post your complete configuration maybe we'll find out what is wrong.

Regards

satman1w

You need to setup HairPin NAT or Split Horizon DNS. Using first solution is simpler but generates traffic and uses router CPU. The second is more complicated but better if you expect large traffic from local network to your servers http://wiki.mikrotik.com/wiki/Hairpin_NAT https://en.wikipedia.org/w...

satman1w

RTFM

"....It is possible to connect GSM modem to RouterOS device and use it to send and receive SMS messages...."

http://wiki.mikrotik.com/wiki/Manual:Tools/Sms

satman1w

add action=dst-nat chain=dstnat comment=WEB disabled=no dst-port=8081 protocol=tcp to-addresses="your ip" to-ports=80

satman1w

You can use whatever IP addresses you want, but you should not !!

On you private network you should use addressesses reserved for private use.
If you are not sure, consult google, wiki...

https://en.wikipedia.org/wiki/Private_network

satman1w

..it can be done, and it is not complicated...

Consult "wiki" and search for vlan-s....

regards

satman1w

I'm trying to understand why would you like to put ROS on the hardware you have mentioned??? Mikrotik has a large number of hardware variations and you will certainly find something for you like... :) RB951G-2HnD/RB493G - very low performance RB1100AHx2 - very high price RB3011 - not for sale (stil...

satman1w

delete ":set actualIP $newIP;"
and put ":global actualIP $newIP;" at the end (after /tool e-mail....)

put ":global newIP;" at the begining so you can trace the state of variables in "Environment" tab

regards

satman1w

We would like to help, but there is no question??

Where is the problem??

satman1w

??? it depends on your DHCP server configuration!

You cannot change IP addresses of devices on your network by running a mikrotik script !!

Post your DHCP configuration...

satman1w

I'm trying to understand why would you like to put ROS on the hardware you have mentioned???
Mikrotik has a large number of hardware variations and you will certainly find something for you like...

satman1w

...again, why would you want to avoid PPPoE on MTik?? It works nice. 1. put your thomson router in bridge mode (if your ISP manages the router - ask them to do it because on the next reset it will be back in router mode) 2. create PPPoE interface (you have to have username and password (ask your ISP...

satman1w

......problem is that they can't access over different subnets.....

They cannot access what???

satman1w

satman1w

If you already have a router, why would you like to have another (mikrotik) behind the first one? If you would like to use a mikrotik instead of the router provided by your internet provider, the best way is to put the one you already have in bridge mode and then set your mikrotik as ppoe client and...

satman1w

First of all this is the question for the Dell and not for the Mikrotik forum IMHO, and second, the right question to google, makes miracles...

http://en.community.dell.com/support-fo ... 98615?db=5

enjoy

satman1w

If the client connects to IP and doesn't want to connect to url than it probably cannot resolve the name to IP or urls are not supported in dst address.

What client do you use to connect to vpn?

satman1w

Hi !brainz
The best way to solve your problem is to buy four or five more wireless routers !!!
than you will be able to cover 3 floors with good signal and 160 users with appropriate throughput....

satman1w

??? Why would you like to use another router for that purpose ??? Just connect your second subnet to free ethernet port of your curren router and configure it the same way as the first one. If you want those subnets to be isolated from each other, create a firewall rule and block the traffic between...

satman1w

i was using fortigate and i setup the port forwarding to one of my pc. after i switch to RB951G-2HnD, i can no longer access to the pc Via remote desktop even with the port setup. my cctv port forwarding works good thou. what do i miss? thanks PS: i got it work now. but i have 2 pc to do the remote...

satman1w

So, sorry for beginner question, what exactly those 1.1.1.1 and 1.1.1.2 addresses in sample? http://wiki.mikrotik.com/wiki/Manual:Interface/IPIP Internal IP ranges on networks I connect is 192.168.33.1/24 an 192.168.99.1/24 If I want to make sure I can look into either network from any side, what s...

satman1w

What I need is a clear, no nonsense instruction on setting up a VPN for folks who have an office at home and that wants to connect from anywhere in the world where the IP address is unknown. I have been wanting to have this done two years now and have been grossly disappointed with Mikrotik support...

satman1w

I am new to MikroTik and am having trouble opening port 443, I have gone into services and enabled it and even tried port forwarding it but to no avail, what am I missing, any help would be appreciated Hi, What do you mean by "opening the port 443" ?? You want to access your router throug...

satman1w

Hi! Thank you for reply. However, sample provided doesn't cover my scenario. On one end I have dynamic IP. My office MT has static IP and my home MT has dynamic IP. Is there any instruction on how this can be done? Hopefully without any scripts or DNS lookups (because there is no dynamic DNS at hom...

satman1w

Hi,

Here is a PPTP solution... http://wiki.mikrotik.com/wiki/PPTP_VPN_ ... tal_Office

and here is a L2TP IPsec http://wiki.mikrotik.com/wiki/IPSec_VPN ... ys_BEFVP41

...just disregard the Linksys part....

simple and efficient

satman1w

export your configuration and post it here...

satman1w

:local myip [:resolve 3131314.badsites.net];

and you have resolved IP address in "myip" variable...

ok??

satman1w

E, Kraljek, Kraljek.... Google je tvoj prijatelj !!!

Potraži malo "mikrotik, voip, qos, simple queue....." i naći ćeš 300 primjera...

...ali budući ti se ne da... evo ti jedan...

http://wiki.mikrotik.com/wiki/Voip

probaj, nije teško

satman1w

...too much information in your export... What I wold do first is try to be sure that I have only one problem, so I would backup my router and start from scratch. No bridges, no firewall ..... just basic configuration needed to connect private network to internet (ip addreses, dhcp, nat, default rou...

satman1w

Hi, In my opinion, to fulfill all your requests, the best (and simplest) choice is the IPIP tunnel. http://wiki.mikrotik.com/wiki/Manual:Interface/IPIP (read the article and you will understand all the advatages) I'm not sure if mikrotik ipip implementation suports url's instead IP's in source or de...

satman1w

Manual improvements ?? What manual?? Mikrotik hasn't had a decent manual since version 2.9 !!! And that's a fact. Yes, I am frustrated with lot of stuff concerning your recent software and hardware products, but my intentions are pure, so please, bear with me till the end of this post and maybe you ...

satman1w

There is a complete cook book for your situation at:
http://wiki.mikrotik.com/wiki/PPTP_VPN_ ... tal_Office

Notice the end of text and description of communication between remote locations.

regards

satman1w

I have the same problem on two different sites and no one else has ever seen it ??

Strange...

satman1w

Hi, all! Set up port forwarding to some services on the LAN: /ip firewall nat add chain=dstnat protocol=tcp dst-port=9700-9800 in-interface=ether1-gateway action=dst-nat to-addresses=192.168.1.200 to-ports=9700-9800 Everything is fine when accessed from outside on the WAN-address (DDNS). But being ...

satman1w

Hi, I put this Script into Mikrotik : :log info "backup beginning now" :local backupfile ([/system identity get name] . "-" . [/system clock get time]) /tool user-manager database save name=$backupfile :log info "backup pausing for 25s" :delay 25s :log info "backu...

satman1w

can anyone give me any videos explain how to config router board fro A to Z

What exactly do you want to do? Home network with PPPoE, VPN or something else..?

satman1w

I understand the your idea. But at Cisco there is following: You can learn for exam alone, at home. You don't have to go to training. If you have read the Cisco theme then you can to go for online exam in a accredited exam center where they check identity card, your identity and etc. You can pay th...

satman1w

Hi all, I have a situation with one wireless installation and I would appreciate any suggestion that will lead to solution. I have 6 cAP -s, RB450 and Cisco 2950 switch. drawing-02png_Page1.png On every cAP , there are two SSID -s ( "Private" on physical interface- wlan101 , and "Publ...

satman1w

Hello I've done plenty of searching and trying the suggestions with no luck. I have an SmartRG SR505N DSL Modem setup in Bridge mode with IP 192.168.0.2. My current subnet is 192.168.5.XXX. I've added the follow NAT rule: ;;; NAT access to adsl modem chain=srcnat action=src-nat to-addresses=192.168...

satman1w

Hello everybody, I have PPTP server enabled with a few user name set. In the log I see the following at random time and random IP (mostly from china): Log pptp, info - TCP connection established from <IP> And here is the list of IPs for last 24 hours 112.193.88.167 175.184.153.152 110.241.68.223 18...

satman1w

I looked up for portforwarding on my RB750G and this worked -> /ip firewall nat add chain=dstnat dst-address=69.69.69.69 protocol=tcp dst-port=5900 \action=dst-nat to-addresses=192.168.1.101 to-ports=5900 Thanks Hi ! You do not need to specify dst-address !! /ip firewall nat add action=dst-nat chai...

satman1w

Thanks for ur reply!!! I want to open the Router in subscriber side with dhcp gateway, for example my subscriber side will get the ip 192.168.215.14 Subnet 255.255.255.0 Gateway :192.168.215.1 So i need to open from the subscriber side through the winbox with ip of 192.168.215.1 I did not quite und...

satman1w

Hi all, I am trying to set up a script for updating dyndnslike service. The script itself is more or less identical to the DynDNS updating script, but there is the catch. The server which I am connecting to for update, has a host header defined and you cannot connect it just with IP address. You hav...

satman1w

Hello, I have an RB750 with OS 6.0RC12 i try the scripts that found in this topic but no success. Can some one confirm if the scripts work with OS 6.0RC12? Try this.... it is slightly modified, but tested yesterday on V.6.rc11 (remember, your pppoe interface must be renamed to "ADSL" and ...

satman1w

I own quite a lot of MT routers, and sooner or later ability to update them with new versions of ROS will expire. I do not care much about small home routers, but I would like my RB 1000 routers to be up to date as long as possible. Question is: will I be able to buy license upgrade for my "exp...

satman1w

Why would you like to use service like "privateinternetaccess.com" if you already have a Mikrotik router which is perfectly able to act as any kind of VPN server you can possibly imagine??? :-) Configure dinamic dns client (find script on wiki.mikrotik.com) so you can access your router wh...

satman1w

If there is a DNS record on your DNS server your traceroute will show exactly what it is written there. For starters, open your hosts file and add a line: 74.125.235.3 sin01s04-in-f3.1e100.net Next time you start tracert, it will show: 1 <1 ms <1 ms <1 ms sin01s04-in-f3.1e100.net [74.125.235.3] but ...

satman1w

Hi! I am running Latest 6.0 RC version on several locations and different hardware(RB1000, RB450G, RB2011...), and on all of them there is a same problem. After opening and editing any of my scripts and applying changes, they are sometimes applied and sometimes not. After unsuccessful apply, you can...

satman1w

If you don't want to mess with routing or NAT, you can put an EOIP tunnel over the VPN. That will join the 2 network segments, however you have to be careful with DHCP because you probably have it on both netowks and now they will conflict with each other ... so you may want to switch to manual con...

satman1w

This is a pretty common scenario...usually you will NAT one side only for traffic that is destined across the VPN. A few mangle rules should fix it up for you. I did not quite understand the idea, can you be more specific. If I was not clear enough, there is only one Mikrotik router, at the "A...

satman1w

Hi all, Situation: Location "A": RB450 as PPTP server on bridged ADSL and private subnet 192.168.10.0/24, MS Server, AD..... Location "B": same subnet (192.168.10.0/24) and single windows PPTP client connecting to location "A" and accessing terminal server (RDP). As you...

satman1w

Hi, didi you allow port 500 udp and esp protocol on both mikrotik (input chain)? Yes, /ip firewall filter> prin Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=accept protocol=udp dst-port=500 1 chain=input action=accept protocol=ipsec-esp 2 chain=input action=accept protocol=ips...

satman1w

Thanks for the reply. Yes, you would think that would work, but fetch with mode=ftp and upload=yes is not robust and does not appear to deal properly with valid ftp server connect response texts. It gives "Unrecognized FTP server response" each time. I suspect it is not waiting for the 22...

satman1w

Hi I need help please with a script. I need to make a script that change the username and password for a PPPOE connection on a specific date.. Can someone please assist me ? I am new to scripting and have no idea how to do it. Thank you Create script as follows: :global ddatenew [/system clock get ...

satman1w

I am trying to find a way to regularly export backup files from my router (5.16) to a server on the LAN the router is connected to. The server has a working FTP server installed, and I have tried the router FTP client, but that seems quite broken because it always responds with "Unrecognized F...

satman1w

.... the gateway cannot ping the edge, nor the other way around. However the routers themselves are able to ping each other when using the built in ping utility ??? which is it now, can they ping each other or not? draw a simple map to specify what is "pingable" and what isn't.. Regards

satman1w

How Can I Do this? Please Help me with command details. You can src-nat user's private address (ports 0-65535) to one public address (ports 0-65535) and dst-nat the same address back to his private address. Customer will be accessible by the public address and all his outgoing traffic will be "...

satman1w

@Andys Follow this example: http://wiki.mikrotik.com/wiki/Hairpin_NAT , and use your DynDNS script to change '1.1.1.1' from above example to resolved 'myserv.dyndns.org'. HTH, Wiki article was written by user "Fewi", and since I do not know for any other way to acknowledge his contributio...

satman1w

Some time ago there was a topic with similar name but... In last six months I had more than 15 dead RB 450 RouterBoards. The cause of dead on all of them were the 3 or 4 leaky capacitors 500 (560?)uF, 6.3V I have repaired them all, but not without problem. First, there is the problem with pulling th...

satman1w

Hi all, I have ROS L6 installed on Flash IDE disk which, in last two months, failed to boot a few times. It is fair to assume that one of thees days it will fail completely. I am aware of Mikrotik licensing policies, but nevertheless I'm asking: Is there a way to transfer a license to another media,...

satman1w

Smart answer, but the question was for Normis, because Branding maker is not enabled on my account...

satman1w

What do I have to do to get access to branding maker?

Best regards

satman1w

You must get at least MTCNA, MTCTCE certificated (two different trainings) and then you can go to the Train-the-Trainer course which will give you MTCTR certificate and official listing on our site as trainer. Ask local training facility for more info, course dates are on http://training.mikrotik.c...

satman1w

what exactly is NOT TRUE? It is not true that ChangeIP and DynDNS are the same !! I don't even want to compare and to suggest which is better but it is a fact that DynDNS exists, that people want to use it, that lot of routers have a built-in support for it, and so on. And - you are missing the poi...

satman1w

Every now and then someone is asking about DynDNS support in Mikrotik and all you can get is the answer from "ChangeIP" that " we do the same thing as dyndns. we are even better and cheaper : ) ". NOT TRUE ! I do not know why the guys in Mikrotik avoid to deal with it, when it is...

satman1w

Few days ago I have posted a video called "outsorced" (should be "Outsourced"...) on TikTube. It should be categorized as "Server Room" and named "Server Room 2" as it is the sequel of "Server room 1". If it is not too much trouble.... please. Thanks...

satman1w

Thanks for "all the help", I did it by myself.

satman1w

Hi..

Glad to help you out.

You have my vote, also, to receive free license, so you can stop using cracked 2.9.27!!!

)

Have Fun !!!

satman1w

I have RB 1000 handling Internet access, two IPIP tunnels, 140 L2TP VPN connections to remote locations with ADSL, PPTP for "RoadWarriors", and now I am trying to enable HotSpot on one of the Ethernet ports. Everything woks fine if I create user on the router, but when I try to authenticat...

satman1w

satman1w - You should post this on the MT wiki - a lot more folks will see it..... I only ran across it as I was seeing if I could offer some guidance on using MT in general (posts with no answers). R/ Thanks, but I am not so sure that it is important enough to be on the wiki pages. If anyone think...

satman1w

Configuring my Company's router, I have stumbled across few problems, fortunately solve them ("with little help from our friends.."), and now I would like to share the solution and maybe help someone with the same problem. I have central location connected to Internet with 10 Mbit link, pu...

satman1w

satman1w

A question for Normis or Uldis... As I am trying to "improve" my Server Room (http://www.tiktube.com/2007/08/09/server-room-1/) to make it even cooler 8) , I would like to put a huge MikroTik logo on the door. For that purpose I need a vectorized MT logo or better quality bitmap image so I...

satman1w

I have several Linksys BEFVP41 routers connected via ADSL to Draytek Vigor 3300 which handles VPN IPSec tunnels. Now I would like to replace Draytek with MikroTik. Does anyone have any similar experiences to share, or perhaps can advise where to find more info about the subject. regards Satman

satman1w

Hi satman1w I tried your MSS rule, and it really seems to have made a huge difference. I really have to thank you for adding that rule. Could you perhaps provide some info on how you got to that rule? I would like to understand the working of MSS a bit better, as the MT Manuel doesn't say much abou...

satman1w

thanks! here it is: http://www.tiktube.com/2007/08/09/server-room-1/

anyone else who wants a Level6 license, head down to your server room and make a similar interesting video! This months topic - server rooms. So who wants free licenses?

Got the license

Thanks

satman1w

Hi, Thanks for your time and reply. But it seems that does not solve it. I did add a dst address to it but it still seems to be the same tho. How are you connected to Internet, (leased line, ADSL, Cable....)? If It is ADSL you may have a problem with MTU. Basic principle to Connect your Home Networ...

satman1w

anything mikrotik related. you could show us your installation towers, or how you set up your antennas - as long as it's interesting to the mikrotik users, it's good ! Videos about The Dude are also welcome, simple tutorials and stuff like that. Just make sure the small details can be seen in a sma...

satman1w

Hi, I am trying to configure a HotSpot with RADIUS auth om Mtik 2.9.2, and I have few problems. :? I have router with 5 ethernet ports. One is connected to ADSL, one to local network, and one I would like to configure as HotSpot. Planet wireless AP is connected to the ether3 and HS is configured but...

Search found 183 matches