Community discussions

MUM Europe 2020

Search found 394 matches

  • 1
  • 2
by tneumann
Sat Nov 12, 2005 11:58 pm
Forum: General
Topic: Radius Accounting On/Off Notification
Replies: 4
Views: 1199

Re: Radius Accounting On/Off Notification

Does MikroTik have the ability to inform the radius server when the accounting is on or off due to system restart or unexpected outages? I don't think that any router (MT or other) could do this, because in case of an unexpected outage (like loss of electricity, hardware failure etc.) how should th...
by tneumann
Sat Nov 12, 2005 11:02 pm
Forum: Wireless Networking
Topic: PPPoE server: ether1, bridge1 or both should set proxy-arp?
Replies: 4
Views: 1452

On which interface do you have an address for 192.168.1.0/24 ?

--Tom
by tneumann
Sat Nov 12, 2005 9:55 pm
Forum: Wireless Networking
Topic: PPPoE server: ether1, bridge1 or both should set proxy-arp?
Replies: 4
Views: 1452

You told us nothing about your IP configuration on these interfaces (ether and wlan-ap), or even if you have configured IP for these interfaces at all.
Since proxy-arp is a Layer 3 / IP concept, your question is meaningless without this information.

--Tom
by tneumann
Sat Nov 12, 2005 9:45 pm
Forum: Wireless Networking
Topic: VLAN and 2 Wireless Radio Interface Problem
Replies: 7
Views: 2109

I think what the person is trying to do is something like turning off "Default Forwarding" for a wireless interface, except between TWO wireless interfaces. That's what I think, yeah, and VLANs should in fact fine to solve this, but as of now we still don't know if he has (mistakenly) bridged both ...
by tneumann
Sat Nov 12, 2005 3:41 pm
Forum: Wireless Networking
Topic: VLAN and 2 Wireless Radio Interface Problem
Replies: 7
Views: 2109

Can you show us a picture / network plan of your setup and post the config of the MT and the Cisco router?
There are a lot of details missing from your description.

--Tom
by tneumann
Fri Nov 11, 2005 11:03 pm
Forum: Wireless Networking
Topic: VLAN and 2 Wireless Radio Interface Problem
Replies: 7
Views: 2109

So you have IP routing configured on VLAN interfaces on the Cisco router? Then you can
just use access-lists on the Cisco to restrict traffic between both VLAN interfaces (or more
advanced stateful firewall features, if your IOS version supports it).

--Tom
by tneumann
Sat Sep 24, 2005 12:49 am
Forum: General
Topic: Dual Gateway (OSPF, NAT and Transparent web proxy)
Replies: 3
Views: 1398

For BGP, I'd recommend that you read the book "Internet Routing Architectures" by Sam Halabi, ISBN 157870233X. It's one of the standard books on the subject, but everything is explained in terms of Cisco configuration. Anyway, it describes the concepts very well. Once you have read that book, then r...
by tneumann
Fri Sep 23, 2005 9:43 pm
Forum: General
Topic: Dual Gateway (OSPF, NAT and Transparent web proxy)
Replies: 3
Views: 1398

OSPF is usually not useful in finding the shortest path to any destination on the internet beyond your autonomous system (AS). That's because OSPF is an IGP. To determine the shortest (not necessarily with the best performance!) path through your uplink ISPs you'd use BGP. Use OSPF to tell everythin...
by tneumann
Thu Sep 22, 2005 7:16 pm
Forum: Wireless Networking
Topic: Does wpa-psk work with non mikrotik stuff ?
Replies: 1
Views: 1334

I have WPA-PSK working with Windows clients to a RB500 access point running 2.9.3/2.9.4,
but only aes-ccm is stable, TKIP has some issues in high-throughput scenarios (clients get disconnected).
This is already being investigated by support@...

--Tom
by tneumann
Tue Sep 06, 2005 12:55 pm
Forum: General
Topic: Samba Server
Replies: 2
Views: 2939

Unfortunately you did not tell us anything about your network topology, so this is all just guessing, but maybe
the following discussions are relevant to your problem:

http://forum.mikrotik.com/viewtopic.php?t=3449

-and-

http://forum.mikrotik.com/viewtopic.php?t=3546



--Tom
by tneumann
Wed Aug 31, 2005 9:39 am
Forum: General
Topic: How to limit number of established connections ?
Replies: 10
Views: 9494

by tneumann
Tue Aug 30, 2005 7:17 pm
Forum: General
Topic: How to limit number of established connections ?
Replies: 10
Views: 9494

So, how to limit the UDP connections?...
Uhmm.... UDP is connection-less by design. There is no such thing as an "UDP connection" ...

--Tom
by tneumann
Fri Aug 26, 2005 5:28 pm
Forum: Wireless Networking
Topic: 2.9 and Hotspot
Replies: 2
Views: 1777

Why not create separate virtual AP's, one for hotspot operation and one exclusively for static IP routing? That would IMHO be a much cleaner separation of things, as it gives you two independent IP interfaces in the router to work with, and you could more cleanly differentiate who should be able to ...
by tneumann
Fri Aug 26, 2005 1:31 pm
Forum: General
Topic: L2TP Server
Replies: 7
Views: 1555

Hence my preference for PPTP until MT support NAT-T. It's a lot less trouble. For completeness, let's just mention that client-side PPTP isn't exactly NAT friendly either. If the PPTP client is located behind a NAT device, that device needs to have special support for PPTP in its NAT code when more...
by tneumann
Fri Aug 26, 2005 9:37 am
Forum: General
Topic: L2TP Server
Replies: 7
Views: 1555

there is nothing to support, l2tp is NAT friendly by it's nature. it is not like pptp. so your comment is not true.
L2TP is NAT friendly, yes, but once it gets encapsulated inside IPsec, and that's what Andrew is talking about,
you'd have to argue about the NAT friendliness of IPsec ...

--Tom
by tneumann
Wed Aug 24, 2005 3:10 pm
Forum: General
Topic: EoIP tunnel needs packets fragmented?
Replies: 11
Views: 4887

I am trying to build an EoIP tunnel on top of an existing PPPoE link
I don't understand why you would need to create an EoIP tunnel because to get PPPoE itself going you'd
already have a working transparent ethernet connection that the PPPoE can run over, dont't you?

--Tom
by tneumann
Sat Aug 13, 2005 1:33 am
Forum: General
Topic: WPA on a VAP
Replies: 1
Views: 653

Re: WPA on a VAP

I do not see anywhere that you could assign which adapter to apply the encryption on. Any ideas?
The encryption settings are tied to the security-profile. You may set individual security-profiles
for each AP interface, including virtual ones.

--Tom
by tneumann
Thu Aug 11, 2005 2:01 pm
Forum: General
Topic: Suggestion : Web API
Replies: 8
Views: 2603

Take a look at Juniper's XML based JunoScript API for some very advanced ideas...
by tneumann
Thu Aug 04, 2005 4:41 pm
Forum: General
Topic: Wireless Trace
Replies: 3
Views: 907

You could use a spectrum analyser for this.

--Tom
by tneumann
Thu Aug 04, 2005 2:13 pm
Forum: General
Topic: 2.9 RC1 - WPA-PSK
Replies: 7
Views: 2134

Oooh, i am using this feature (TKIP with Intel PROset) with my home gateway. Could you share a copy of that wireless package?
Sure, email me at tn.expires.20050830(at)gosingen.net and I'll send you the package.

--Tom
by tneumann
Wed Aug 03, 2005 10:59 pm
Forum: General
Topic: 2.9 RC1 - WPA-PSK
Replies: 7
Views: 2134

Just to revive an old topic, here's an update on WPA-PSK. It turned out that despite my former statement that I got a working WPA-PSK/TKIP connection, I was wrong. After some more intesive testing I found out that it almost always worked for a few minutes, but then major dropouts and disconnects cam...
by tneumann
Tue Aug 02, 2005 11:14 pm
Forum: General
Topic: Clone Routing ! something weird
Replies: 3
Views: 811

Could you please be more precise in what you're trying to achieve?
If you want to give the same 200.1.1.1 address that is used
by the ISP-provided SDSL router to your MT box: You can't, that will never work.

Again, what are you trying to achieve with this setup?


--Tom
by tneumann
Tue Aug 02, 2005 11:09 pm
Forum: General
Topic: Gateway problem!
Replies: 2
Views: 860

OrCAD, I assume that 10.10.0.1 is a stand-alone ADSL router? Or are you using a dumb ADSL modem that only converts ADSL to ethernet and 10.10.0.1 is an address of RB1 itself? If 10.10.0.1 is not on RB1 but is a seperate ADSL router, then I'd think your problem is that the ADSL router might not know ...
by tneumann
Mon Aug 01, 2005 1:49 pm
Forum: General
Topic: horizontal or vertical polarisation for p2p-links ?
Replies: 5
Views: 1199

Can't say that one is better than the other. It all depends on if there are other RF signals around that will cause interferences. If there are, you need to find out if they are vertically or horizontally polarized and then use the other polarization for your link. That will usually reduce the inter...
by tneumann
Sun Jul 31, 2005 3:10 pm
Forum: General
Topic: OSPF summarize externals
Replies: 1
Views: 1184

OSPF summarize externals

Using 2.9rc7, is it possible to configure RouterOS to export a summary LSA for external (static, connected) routes? I'd like to advertise a pool of IP addresses that is used for incoming PPTP connections into OSPF, but I don't want every single PPTP session to be advertised as one host route but wou...
by tneumann
Fri Jul 29, 2005 4:57 pm
Forum: Scripting
Topic: ipsec dynamic ip script
Replies: 11
Views: 6996

However if you use 2.9 version there is a much shorter and simplier way to accomplish this.
Which, I assume, would be generate-policy=yes ?

--Tom
by tneumann
Mon Jul 25, 2005 12:37 pm
Forum: General
Topic: Router send traffic in both directions
Replies: 3
Views: 965

Huh? There should not be any problems at all with the setup you are describing. As long as the computers on both sides of the router have correctly set their netmask and their default gateway is the respective interface of the router, it will just work (make sure you don't have firewall filters on t...
by tneumann
Sun Jul 24, 2005 11:32 pm
Forum: General
Topic: proxy-arp assistance.
Replies: 8
Views: 2615

We don't have the entire class C it's just how our provider is routing.. We have a small block of IP's with a subnet of class C tho. Ok, so ask your provider to assign an additional network (of the size that your wireless customer would like to use) to you and have it routed by your provider via yo...
by tneumann
Sun Jul 24, 2005 12:48 pm
Forum: General
Topic: proxy-arp assistance.
Replies: 8
Views: 2615

marvin, can't you just subnet the 66.15.99.0/24 that's currently completely on the WAN side of your router, lets say split it into 66.15.99.0/25 and 66.15.99.128/25 and only use 66.15.99.0/25 on the WAN side while you then can route addresses from 66.15.99.128/25 on the LAN / wireless side? That way...
by tneumann
Tue Jul 19, 2005 8:55 pm
Forum: General
Topic: nlos wifi in campus
Replies: 18
Views: 3655

why would you use G for nlos?
Because OFDM has better NLOS behaviour than DSSS.

--Tom
by tneumann
Mon Jul 18, 2005 9:11 pm
Forum: General
Topic: tx-power-mode
Replies: 1
Views: 1282

tx-power-mode

With the tx-power-mode parameter on wireless interfaces, what is the difference in setting tx-power-mode=default vs. tx-power-mode=all-rates-fixed ? Reading the 2.9 manual I fail to clearly see a difference between the options. Both seem to make the card use the power value given with tx-power=xx on...
by tneumann
Mon Jul 18, 2005 8:58 pm
Forum: General
Topic: pptp and vlan
Replies: 3
Views: 955

If the IP addresses of your internal network are assigned to the VLAN interface,
then you only need proxy-arp on the VLAN interface and not on the physical ethernet interface.

--Tom
by tneumann
Mon Jul 18, 2005 2:25 pm
Forum: General
Topic: scan-list and frequency settings
Replies: 3
Views: 3079

normis,

thanks for the information. I assume what you wrote is for routers running as station?

What about the AP side?


--Tom
by tneumann
Mon Jul 18, 2005 12:04 am
Forum: General
Topic: scan-list and frequency settings
Replies: 3
Views: 3079

scan-list and frequency settings

I've a general question about the wireless interface parameters scan-list and frequency . My problem is that I do not fully understand how frequency and scan-list are related to each other (and are they related at all?) and how exactly the scan-list parameter operates. Is scan-list only relevant for...
by tneumann
Sun Jul 17, 2005 9:07 pm
Forum: General
Topic: pptp and vlan
Replies: 3
Views: 955

piotr,

Proxy-ARP is only needed if the IP address you're assigning to the PPTP client
overlaps with your internal network.

It's hard to tell what causes your problems without seeing your router configuration.
In any case, it should not matter that your internal network is on a VLAN.

--Tom
by tneumann
Sun Jul 17, 2005 10:40 am
Forum: General
Topic: 2.9 RC7 is out ...
Replies: 4
Views: 1746

Well, OK, could not get the WPA-PSK/TKIP stuff to work. Here's what is logged by the router 09:32:33 wireless,info wlan1: 00:04:23:76:D7:6C connected 09:32:34 wireless,info wlan1: disconnected 00:04:23:76:D7:6C, decided to deauth: group key update timeout (16) 09:32:34 wireless,info wlan1: 00:04:23:...
by tneumann
Sat Jul 16, 2005 3:57 pm
Forum: General
Topic: 2.9 RC7 is out ...
Replies: 4
Views: 1746

The RC7 Works like a lightning with the special wierless npk file ! While it might be fast, I'm seeing issues with the wireless-test package and WPA-PSK/TKIP connections. I tested the wireless-test package on a RB500 in ap-bridge mode against WPA-PSK/TKIP Windows-XP clients and could not get the cl...
by tneumann
Wed Jul 13, 2005 10:27 pm
Forum: General
Topic: how to block mac in firewall?
Replies: 14
Views: 2960

add chain=forward src-mac-address=00:30:F1:10:2E:3C in-bridge-port=bridge1 \ out-bridge-port=bridge1 action=drop comment="" disabled=no Try using the physical port (interface) that is a member of the bridge (i.e. ether3 or wlan1 or something like that) instead of bridge1 for out-bridge-port and in-...
by tneumann
Wed Jul 13, 2005 8:44 pm
Forum: General
Topic: Hotel AP Recommendations
Replies: 6
Views: 1559

but need to know what ap/antenna would have the best coverage.
That question, especially regarding the antenna, can not be answered without seeing the building and doing a site survey and some testing. So you decide...

--Tom
by tneumann
Wed Jul 13, 2005 7:49 pm
Forum: General
Topic: Long Distance Links
Replies: 8
Views: 2121

New wireless package is ready to download: Regular (i386) http://www.mikrotik.com/download/wireless-2.9rc7.npk RB500 (mips) http://www.mikrotik.com/download/wireless-2.9rc7-ns.npk Is this the wireless package that is included in the routeros-2.9rc7 download, or is it different and must be installed...
by tneumann
Sun Jul 10, 2005 8:33 pm
Forum: General
Topic: block dhcp for specific ip range?
Replies: 4
Views: 1063

Ok, let's assume the wireless interface that your 192.168.50.0/24 network is running on is wlan3 . Just add a firewall filter rule to the forward chain that blocks everything coming in via wlan3 from being forwarded through the MT to networks on other interfaces, like this (RouterOS 2.9 syntax) /ip ...
by tneumann
Sun Jul 10, 2005 11:53 am
Forum: Scripting
Topic: Balancing on one interface
Replies: 6
Views: 2225

ghm, I think this example is similar to your situation, check it:
http://www.mikrotik.com/docs/ros/2.9/ip ... t#8.48.3.1
How would this be done if the gateway addresses are not static but all ISP connections are using dynamically assigned gateways (i.e. PPPoE)?

--Tom
by tneumann
Fri Jul 08, 2005 11:34 pm
Forum: General
Topic: block dhcp for specific ip range?
Replies: 4
Views: 1063

Re: block dhcp for specific ip range?

We would like to setup dhcp for our internal network for ip ranges 192.168.50.0/24 but be able to block that particular ip range for dhcp from going out across the wireless connection. So your LAN is bridged with your wireless segments? If they are not bridged but seperated by routing, DHCP will no...
by tneumann
Sun Jun 26, 2005 11:26 am
Forum: General
Topic: Dynamic DNS update problems (TSIG)
Replies: 8
Views: 4228

Look at the rest of that dns update packet ... if the id is not 0 then you have found your problem. That '0' should be the dns id from the header of that same packet. If they do not match then you have a broken signature. You're on the right track. The Transaction id of the DNS update packet differ...
by tneumann
Sat Jun 25, 2005 11:26 pm
Forum: General
Topic: Dynamic DNS update problems (TSIG)
Replies: 8
Views: 4228

Sam, The bind logfile contains the following when I successfully update using nsupdate from a UNIX client Jun 25 21:24:36.355 update: client 212.23.xx.yy#24036: updating zone 'tmr-vpn.net/IN': deleting an rrset Jun 25 21:24:36.355 update: client 212.23.xx.yy#24036: updating zone 'tmr-vpn.net/IN': ad...
by tneumann
Sat Jun 25, 2005 7:26 pm
Forum: General
Topic: Dynamic DNS update problems (TSIG)
Replies: 8
Views: 4228

Sam, thanks for your suggestion. I know that the time on both devices needs to be correct. I have both the MikroTik router and the DNS server synchronised by NTP, in fact the DNS server is also the NTP server the MikroTik gets its time from. I've checked the time to be correct on both devices, inclu...
by tneumann
Sat Jun 25, 2005 3:06 pm
Forum: General
Topic: Dynamic DNS update problems (TSIG)
Replies: 8
Views: 4228

Dynamic DNS update problems (TSIG)

I'm trying to get a MikroTik router running 2.9rc6 to send a dynamic DNS update to one of our own nameservers (running bind 9.2). Analyzing the traffic between the router and the nameserver shows that the router is sending a TSIG signed UPDATE query signed with HMAC-MD5. That's fine, because that's ...
by tneumann
Mon Jun 20, 2005 12:44 am
Forum: General
Topic: Broadcast traffic in routed network
Replies: 9
Views: 3561

Re: Broadcast traffic in routed network

WINS works. [...] Each segment must elect master browser which redistributes data to WINS Good advice, and this has already been pointed out in a related thread (see http://forum.mikrotik.com/viewtopic.php?t=3449 ) . I believe his problem might be that, as you say, each segment elects a master brow...
by tneumann
Sun Jun 19, 2005 11:42 pm
Forum: General
Topic: L2TP tunnel authentication
Replies: 11
Views: 2897

Unfortunatly, i think you might have to go for one of the big boys toys. Unless you can live with doing hacks which will probably cost you more than getting the right gear in the first place. Or the people at MikroTik implement. *hint* *hint* I'm not having a huge problem with this because we alrea...
by tneumann
Sun Jun 19, 2005 7:06 pm
Forum: General
Topic: L2TP tunnel authentication
Replies: 11
Views: 2897

But why would you want to use something that AFAIK can't transport the L2TP packets over without reducing MTU for tunneled traffic? Because everyone and their horse are shoving this up my behind :shock: Like I said it's just the way the access provider wholesale industry interconnects. If I want to...
by tneumann
Sun Jun 19, 2005 11:28 am
Forum: General
Topic: L2TP tunnel authentication
Replies: 11
Views: 2897

wildbill442, thanks for the pointer. I've read that part of the documentation, but I am still not sure how this will help me. The scenario shown in the docs at http://www.mikrotik.com/docs/ros/2.8/interface/l2tp uses L2TP to implement a simple, single point-to-point tunnel. Basically you could have ...
by tneumann
Sat Jun 18, 2005 6:16 pm
Forum: General
Topic: L2TP tunnel authentication
Replies: 11
Views: 2897

L2TP tunnel authentication

I'm just checking out the L2TP server of RouterOS 2.9rc5, and I can not find any information on how to set authentification parameters for an L2TP tunnel itself (not for the PPP sessions running within). I am used to working with L2TP tunnels on Cisco and Redback systems, and when we're receiving L2...
by tneumann
Tue Jun 14, 2005 11:51 pm
Forum: General
Topic: Can anybody Help - IP Address Blocking
Replies: 6
Views: 1921

onubah,

could you please describe in more detail what you mean by in use ?

--Tom
by tneumann
Sun Jun 12, 2005 12:23 pm
Forum: General
Topic: Passing NetBIOS traffic (again)
Replies: 10
Views: 5032

If you have only one WINS server (as I assume you do), you might try to assign that DHCP server as primary and as secondary WINS server to clients. This sometimes helps, for details see http://www.windowsitpro.com/Article/ArticleID/15238/15238.html If it still not works, then I think it would be the...
by tneumann
Sun Jun 12, 2005 1:17 am
Forum: General
Topic: Passing NetBIOS traffic (again)
Replies: 10
Views: 5032

Clearly that wins is working on clients but only for it's own subnet. Help... Have you checked that you're assigning the WINS server by DHCP also to clients within the network that does not contain the WINS server? Can clients from both networks ping the WINS server? Do clients from both networks c...
by tneumann
Fri Jun 10, 2005 10:46 pm
Forum: General
Topic: NTP Client
Replies: 5
Views: 1779

Works OK for me with 2.9rc5 on RB500, NTP server is ntpd 4.x on Unix.

--Tom
by tneumann
Fri Jun 10, 2005 1:33 pm
Forum: General
Topic: Passing NetBIOS traffic (again)
Replies: 10
Views: 5032

The WINS is OK idea only if You use Microsoft servers. Is there a freeWINS server?
Of course. Samba can do this. See http://us1.samba.org/samba/docs/man/nmbd.8.html

--Tom
by tneumann
Fri Jun 10, 2005 1:24 am
Forum: General
Topic: Passing NetBIOS traffic (again)
Replies: 10
Views: 5032

Netbios browsing by broadcasts sucks. Set up a WINS server that is used from both networks via unicast (and change the netbios node type of your clients accordingly while you are at it), or have them find their network resources in an ADS if available. Netbios broadcasts are a 10 years old concept t...
by tneumann
Fri Jun 10, 2005 12:58 am
Forum: General
Topic: MT Wireless Newbie Question
Replies: 5
Views: 2090

Re: MT Wireless Newbie Question

I have just fitted CM9 cards to two RB532 boards runing 2.9RC5. [...] (I have assigned each interface an IP address on the same network). So you have both wireless interfaces put together in a bridge? Otherwise it won't make sense to have an address out of the same network on both interfaces. Can y...
by tneumann
Wed Jun 08, 2005 1:12 am
Forum: General
Topic: dst-nat help
Replies: 2
Views: 1379

Is it really your intention that your dstnat rules have disabled=yes ?
by tneumann
Mon Jun 06, 2005 1:34 am
Forum: Scripting
Topic: please help with NAT
Replies: 1
Views: 1280

It's all explained in http://www.mikrotik.com/docs/ros/2.9/ip/nat Basically, just do something like /ip firewall nat add chain=srcnat out-interface=<your_inet_iface> src-address=192.168.0.0/29 action=masquerade to-addresses=222.222.222.221 add chain=srcnat out-interface=<your_inet_iface> src-address...
by tneumann
Mon Jun 06, 2005 1:12 am
Forum: Scripting
Topic: resolve revdns
Replies: 3
Views: 1706

Ah, OK, I see what you mean.

Seems that it is not possible right now, since the :resolve
command has no way to specify that you're asking for a
PTR record, all it seems to do is A records :(

--Tom
by tneumann
Mon Jun 06, 2005 1:08 am
Forum: General
Topic: Critical Bug
Replies: 8
Views: 1628

STP is not enabled, should I enable it? whats that for anyway? STP is the Spanning Tree Protocol. Its purpose is to avoid traffic loops in Layer 2 (i.e. bridged) networks. Simply stated, STP does this by disabling ports if it detects a network loop. You can read more about it in any good book on ne...
by tneumann
Sat Jun 04, 2005 3:52 pm
Forum: Scripting
Topic: resolve revdns
Replies: 3
Views: 1706

Re: resolve revdns

it is possible to get revdns names from ip on MT?
What are you referring to? The builtin DNS cache of RouterOS?
Or where do you want to see reverse DNS resolution?

--Tom
by tneumann
Sat Jun 04, 2005 3:45 pm
Forum: General
Topic: Bridge drop arp
Replies: 1
Views: 1700

I think this is because the first rule cuts off all other cases, like this: Lets assume the client address in question is 10.10.10.249, which I assume you want to allow. But the first rule matches on !10.10.10.248, and 10.10.10.249 surely matches !10.10.10.248/32 , so it immediately drops and the fo...
by tneumann
Sat Jun 04, 2005 3:35 pm
Forum: General
Topic: Does bridge actualy work???
Replies: 2
Views: 1351

Re: Does bridge actualy work???

Does any of these interfaces bridge combinations work with RC4 or 2.8.27

ethernet/ethernet
ethernet/wireless
wireless/wireless

Actualy I'am unable to make it work properly.
Sure it works. It would help if you'd show us your configuration...

--Tom
by tneumann
Fri May 27, 2005 9:30 pm
Forum: General
Topic: Problem in routing traffic from wireless network to ethnet
Replies: 4
Views: 1000

Does your default gateway (10.1.1.254) have the necessary route to the
wireless network 192.168.0.0/24 pointing to your MikroTik router?

--Tom
by tneumann
Fri May 27, 2005 7:09 pm
Forum: RouterBOARD hardware
Topic: RB532 upgrade / upload of file sooooo slow! Anyone else?
Replies: 10
Views: 3225

So the ether1 is defective... :(
I've seen performance problems like this when there is a duplex mismatch (full vs. half, one side doing auto-neg, the other not) on the ethernet (not RB500 specific, just in general).

--Tom
by tneumann
Fri May 27, 2005 4:53 pm
Forum: Scripting
Topic: How to Log?
Replies: 9
Views: 3447

forward in-interface=wlan1 out-interface=ether2 packet-size=50-1500 action=log Now, I want to unsend same packet (x user) in log for limit occupation band... i.e. send only new packet or new connection estabilished from user. If it's OK for you to only monitor TCP connections then try to add this t...
by tneumann
Thu May 26, 2005 2:27 pm
Forum: General
Topic: Virual AP
Replies: 5
Views: 1240

I suppose my last question is how do I prevent all machines in the 172.16.0.2-172.16.0.254 range from accessing any machnies on my network expect the default gateway ? Use the firewall capabilities of the MikroTik router, see http://www.mikrotik.com/docs/ros/2.8/ip/firewall Note that you probably d...
by tneumann
Thu May 26, 2005 1:02 pm
Forum: General
Topic: Virual AP
Replies: 5
Views: 1240

Do I assign the lan ip 192.168.3.11 and the wlan2 ip 192.168.3.12 and then create the bridge and add these two interfaces to the bridge ? Does the bridge itself not get an IP ? You can do it either way, i.e. have IP addresses from the 192.168.3.0/24 on both physical interfaces, or on only one of th...
by tneumann
Thu May 26, 2005 11:51 am
Forum: General
Topic: Virual AP
Replies: 5
Views: 1240

Re: Virual AP

Essentially I want to have a network address fom my lan ie 192.168.3.6x on wlan2 (virtual AP). I read that for this I must have bridging turned on ? correct ? Yes, that's correct. Also If this works how can I stop client using 172.16.0.x ip from accessing anything but specific ip on my lan , I want...
by tneumann
Thu May 26, 2005 12:23 am
Forum: Scripting
Topic: How to Log?
Replies: 9
Views: 3447

if a malicious user, in my network, damage one url or other, after (x es.:)1month where find: - user name - source ip - destination ip damaged - time - mac of user Well, the basic info such as the clients assigned address and MAC address are logged by the MikroTik router, such as 12:55:46 dhcp,info...
by tneumann
Wed May 25, 2005 11:51 pm
Forum: Scripting
Topic: How to Log?
Replies: 9
Views: 3447

You want to log the NAT translations per hotspot user? I don't see how this could even make sense unless you configure your hotspot to do one-to-one NAT between external and internal addresses (but then, why NAT at all?) If you masquerade, then the externally visible IP address will always be the sa...
by tneumann
Wed May 25, 2005 9:22 pm
Forum: Scripting
Topic: How to Log?
Replies: 9
Views: 3447

Re: How to Log?

I need to log, in file or snmp or vs IP, completly path of all user's,
now, how to send this information?

What exactly do you mean by "complete path"?


--Tom
by tneumann
Wed May 25, 2005 12:31 pm
Forum: General
Topic: force firewall connection timeout
Replies: 1
Views: 742

Re: force firewall connection timeout

In my firewall "connections" I have all my connections and they count down if they are not being used. Some of them have a timeout of 120:00:00

Is there a way to force a timeout on these?
Did you try
/ip firewall connection
print
remove <num-of-connection>
--Tom
by tneumann
Thu May 19, 2005 5:57 pm
Forum: The Dude
Topic: "The Dude"
Replies: 55
Views: 24070

BTW, why's it called "the dude" ?
I suppose in reference to http://www.imdb.com/title/tt0118715/

The Dude abides :lol:
by tneumann
Wed May 18, 2005 9:13 pm
Forum: General
Topic: OSPF-Routes outside network/area being redistributed
Replies: 6
Views: 2659

I actually reverted back to a single 10.0.0.0/8 network and it worked that way as well, but switched it back to defining the individual network / interfaces since that appears to be the recommended method. Yes, 10.0.0.0/8 works in your case because the network that you wanted to hide was 192.168..s...
by tneumann
Wed May 18, 2005 7:26 pm
Forum: General
Topic: OSPF-Routes outside network/area being redistributed
Replies: 6
Views: 2659

gheers, this might work for you right now, but I think that using undocumented features (like the quagga hack you did) should be avoided and probably makes it harder to support your configuration in the future, but that's of course up to you. Anyway, two things should be noted here - In RouterOS 2.9...
by tneumann
Wed May 18, 2005 2:49 pm
Forum: Scripting
Topic: Expect isn't working properly - it's not sending commands.
Replies: 5
Views: 4537

Try to end the commands that you send with \r instead of \n just like you do when you send the password.

--Tom
by tneumann
Wed May 18, 2005 10:49 am
Forum: General
Topic: OSPF-Routes outside network/area being redistributed
Replies: 6
Views: 2659

Re: OSPF-Routes outside network/area being redistributed

I think you should turn off redistribute-connected and just explicitly configure the networks that you want to propagate.

--Tom
by tneumann
Tue May 17, 2005 10:07 pm
Forum: General
Topic: 2 mikritik as redundancy router include their configuration
Replies: 5
Views: 1611

well we cant just copy if we use vrrp or ospf because ip addressing will be the same or other conflicts and u cant do it If you were to copy an entire configuration then of course there would be IP address conflicts and maybe other problems, but you could export/import selected sections of the conf...
by tneumann
Tue May 17, 2005 6:30 pm
Forum: General
Topic: 2 mikritik as redundancy router include their configuration
Replies: 5
Views: 1611

redundancy

Neither VRRP nor OSPF replicate configuration settings, and they are not supposed to do this.

You might be able to come up with a (probably not very elegant) solution with export and import commands and FTP or something...

--Tom
by tneumann
Tue May 17, 2005 11:40 am
Forum: General
Topic: Will MT ever substitute a radius server?
Replies: 2
Views: 1270

Re: Will MT ever substitute a radius server?

Im using mikrotik for pppoe server, still keeping the secrets on the MT, but i plan on using Radius for better menagement, like adding a user on monthly bases, or for an amount of hours. Is this ever planed to be added on MT new features? Did you read http://www.mikrotik.com/docs/ros/2.8/guide/aaa ...
by tneumann
Fri May 13, 2005 6:30 pm
Forum: General
Topic: Routing Worked then Stopped
Replies: 5
Views: 1290

Yes, I'm surprised. Without using proxy-arp? Yes. The gateway is the next hop address. The client has to be able to reach it with a layer 2 broadcast in order to determine where to send the ethernet frame. That's correct (for non point-to-point links, anyway) but some routing platforms have a mecha...
by tneumann
Fri May 13, 2005 12:42 am
Forum: General
Topic: 2.9 RC1 - WPA-PSK
Replies: 7
Views: 2134

Re: 2.9 RC1 - WPA-PSK

Does anyone succeed in getting WPA-PSK work with 2.9 RC1? Yes. I am using WPA-PSK/TKIP succesfully with Windows XP, though I am not using Windows' own WPA support but instead Intel ProSet Wireless (on Centrino Notebooks with integrated Intel-based WLAN cards) or the Odyssey Client from Funk Softwar...
by tneumann
Thu May 12, 2005 11:36 pm
Forum: General
Topic: new firewall rule
Replies: 3
Views: 1119

2.8 doesn't support that. I may stand corrected, but I believe 2.9 does. Only for a continuous range of ports (dst-port), you can't specify a comma-separated list of ports for it as far as I can see, so it wouldn't be useful in this case. Feature request to MT: Implement port-list (just like addres...
by tneumann
Fri May 06, 2005 12:34 am
Forum: General
Topic: HELP ROUTERS HELP HELP HELPP
Replies: 7
Views: 2312

Re: no ping to o ROUTER CISCO on stations

C:\Documents and Settings\Administrador> "ping to 200.100.200.169 (CISCO ROUTER) no respond" Disparando contra 200.100.200.169 com 32 bytes de dados: Esgotado o tempo limite do pedido. Esgotado o tempo limite do pedido. Esgotado o tempo limite do pedido. Esgotado o tempo limite do pedido. Estatísti...
by tneumann
Thu May 05, 2005 10:44 pm
Forum: General
Topic: HELP ROUTERS HELP HELP HELPP
Replies: 7
Views: 2312

Re: res

/interface print Flags: X - disabled, D - dynamic, R - running # NAME TYPE RX-RATE TX-RATE MTU 0 R vlan02 ether 0 0 1500 1 R vlan03 ether 0 0 1500 2 R router ether 0 0 1500 [admin@MikroTik] interface> Do you want to run vlan02 and vlan03 as VLAN (as per 802.1q) interfaces, or are these supposed to ...
by tneumann
Thu May 05, 2005 9:06 pm
Forum: General
Topic: HELP ROUTERS HELP HELP HELPP
Replies: 7
Views: 2312

Re: HELP ROUTERS HELP HELP HELPP

Necessary to make with that traffic on network 200.100.200.176/29 you the 200.100.200.169/29 that it is one another net, that this in my to router CISCO. Necessary to make with that traffic on network 200.150.140.0/26 you the 200.100.200.169/29 that and ' my to router CISCO. Should basically work, ...
by tneumann
Thu May 05, 2005 8:35 pm
Forum: General
Topic: Invalid service-port
Replies: 2
Views: 1781

Have you got Connection Tracking turned on? Yep, I do (it's on by default) [admin@MikroTik] > /ip firewall connection tracking print enabled: yes tcp-syn-sent-timeout: 2m tcp-syn-received-timeout: 1m tcp-established-timeout: 5d tcp-fin-wait-timeout: 2m tcp-close-wait-timeout: 1m tcp-last-ack-timeou...
by tneumann
Thu May 05, 2005 12:03 am
Forum: General
Topic: Invalid service-port
Replies: 2
Views: 1781

Invalid service-port

Hi, running 2.9rc1, if I do [admin@MikroTik] > /ip firewall service-port print Flags: X - disabled, I - invalid # NAME PORTS 0 I ftp 21 1 I tftp 69 2 I irc 6667 3 X h323 4 quake3 5 mms 6 X gre 7 X pptp [admin@MikroTik] > Some service-port entries are marked as 'invalid'. What does that mean and how ...
by tneumann
Mon Apr 18, 2005 12:42 pm
Forum: General
Topic: Wireless features
Replies: 4
Views: 1274

Re: Wireless features

As Normunds wrote, the manual is quite extensive here... But to give you a head start... ;) Thanks, appreciated. This question was already asked here: http://forum.mikrotik.com//viewtopic.php?t=1448&highlight=virtual+change+mac . There was no answer until now, but you can change the MAC of a virtua...
by tneumann
Sun Apr 17, 2005 5:27 pm
Forum: General
Topic: Wireless features
Replies: 4
Views: 1274

Wireless features

Hi, I'm currently evaluating Mikrotik for deployment in our city-wide wireless network. We're currently using Nomadix systems, so I'm especially comparing Mikrotik to some of the features we're using now with Nomadix. 1) Hotspot-Gateway / Walled-Garden I gather from the manual that Mikrotik can do t...
  • 1
  • 2