Community discussions

Search found 435 matches

  • 1
  • 5
  • 6
  • 7
  • 8
  • 9
by tabate47
Fri Sep 06, 2013 5:38 pm
Forum: General
Topic: Using MikroTik as Router behind another Router
Replies: 2
Views: 1038

Using MikroTik as Router behind another Router

I have come across Verizon Fios which supplies their own router which must be used for certain things like their tv service. You cannot put the modem in bridge mode. I would like to use the MikroTik router, however, to run the network outside of the tv service. I can put the MikroTik router in the D...
by tabate47
Sun Aug 25, 2013 9:09 pm
Forum: General
Topic: Router Identity Variable [SOLVED]
Replies: 8
Views: 4133

Re: Router Identity Variable

I figured it out with some trial and error. Here is what I found works: /tool netwatch add comment=device-ip-monitor disabled=yes down-script="/tool e-mail send to=to\ ny@xxx.com subject=([/system identity get name] . \" Device Down\")\ " host=10.0.1.3 interval=30m timeout=1s up-script="/tool e-mail...
by tabate47
Sun Aug 25, 2013 7:15 pm
Forum: General
Topic: Router Identity Variable [SOLVED]
Replies: 8
Views: 4133

Re: Router Identity Variable

Thanks. What I would like to do is monitor several ip devices, and add the router name in the email subject for all ip devices. I would like to accomplish this in as few steps as possible. Right now I would have to do your suggestion every time. Is there a way to do it only once? Maybe store the var...
by tabate47
Sun Aug 25, 2013 5:04 pm
Forum: General
Topic: Router Identity Variable [SOLVED]
Replies: 8
Views: 4133

Re: Router Identity Variable

I tried the script, but it is giving me an expected end of line error and a few other errors. Maybe the syntax is incorrect? I'm so new to this, I'm not sure. If anyone can shed any light on this I would appreciate it. I bet it's something really simple. Thanks.
by tabate47
Fri Aug 23, 2013 6:37 pm
Forum: General
Topic: Router Identity Variable [SOLVED]
Replies: 8
Views: 4133

Re: Router Identity Variable

I'm not sure. Is there a constant variable for the system identity that I can just plug in? I see what you are doing. Here is my little script: /tool netwatch add disabled=no down-script="/tool e-mail send to=tony@xxx.com subject\ =\"Host down!\" body=\"The host is down!\"" host=10.0.1.2 \ interval=...
by tabate47
Fri Aug 23, 2013 5:39 pm
Forum: General
Topic: Router Identity Variable [SOLVED]
Replies: 8
Views: 4133

Router Identity Variable [SOLVED]

I would like to set up netwatch to email me when a device goes down every 30 minutes. I would like to include in the subject the router identity so I can easily determine which router is sending me the email. Can this be done? Also, I would like netwatch to email me when the device is back up, but o...
by tabate47
Wed Aug 14, 2013 9:10 pm
Forum: Scripting
Topic: Script to Reboot IP Device
Replies: 2
Views: 786

Re: Script to Reboot IP Device

Very true. So the only option here is a rebootable ip power supply. I get it.
by tabate47
Wed Aug 14, 2013 8:49 pm
Forum: Scripting
Topic: Email upon No Ping Response Script
Replies: 5
Views: 4832

Re: Email upon No Ping Response Script

I figured it out. In your post you have quotes around the send to email address. That is the problem. You can't have quotes around the email address. Once I removed them, everything worked fine.

Thanks for the help.
by tabate47
Wed Aug 14, 2013 8:48 pm
Forum: Scripting
Topic: Script to Reboot IP Device
Replies: 2
Views: 786

Script to Reboot IP Device

Is it possible to write a script to reboot a device that has locked up? For example, let's say a WAP stops responding to pings. After 3 non-responses the script would somehow reboot the WAP. Is this possible?

Thanks.
by tabate47
Wed Aug 14, 2013 6:11 am
Forum: Scripting
Topic: Email upon No Ping Response Script
Replies: 5
Views: 4832

Re: Email upon No Ping Response Script

Thanks for the help. I tried to input what you suggested, but the email portion doesn't seem to be working. Do I have to do anything else besides enter my email address? I don't have email configured anywhere else in the router.

Thanks.
by tabate47
Tue Aug 13, 2013 6:42 am
Forum: Scripting
Topic: Email upon No Ping Response Script
Replies: 5
Views: 4832

Re: Email upon No Ping Response Script

Is that the best way to do it? I don't mind learning the best way even if it takes more work. Thanks.
by tabate47
Tue Aug 13, 2013 12:05 am
Forum: Scripting
Topic: Email upon No Ping Response Script
Replies: 5
Views: 4832

Email upon No Ping Response Script

I would like to set up a ping monitor for a device on my network. The ping should be every half hour or so. If the ping fails, the script would send me an email. Are there any examples of this?

Thanks.
by tabate47
Mon Aug 12, 2013 5:00 am
Forum: General
Topic: Mikrotik Errors
Replies: 9
Views: 1686

Re: Mikrotik Errors

I understand the text that is written, but I don't understand how the script is processed, so that is why I was asking where the language needs to be placed in the firewall. If anyone knows, I would appreciate it.
by tabate47
Sun Aug 11, 2013 4:00 pm
Forum: General
Topic: Mikrotik Errors
Replies: 9
Views: 1686

Re: Mikrotik Errors

Does it matter where I place the ssh programming language in my firewall?
by tabate47
Fri Aug 09, 2013 11:57 pm
Forum: General
Topic: Mikrotik Errors
Replies: 9
Views: 1686

Re: Mikrotik Errors

I added this: add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \ comment="drop ssh brute forcers" disabled=no add chain=input protocol=tcp dst-port=22 connection-state=new \ src-address-list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist \ add...
by tabate47
Tue Aug 06, 2013 7:23 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

You were so persistent figuring out the hairpin in your previous posts that you have motivated me to dive into this and try to figure out a way to have one hairpin nat for all devices. Maybe there is a way.
by tabate47
Tue Aug 06, 2013 7:09 pm
Forum: General
Topic: Mikrotik Errors
Replies: 9
Views: 1686

Re: Mikrotik Errors

Ok. I understand. Do I need to have ssh open at all?

What is the best way to secure ssh?
by tabate47
Tue Aug 06, 2013 6:50 pm
Forum: General
Topic: Mikrotik Errors
Replies: 9
Views: 1686

Mikrotik Errors

Every time I log into my terminal, I have many errors. Here is the current list: (1405 messages not shown) aug/06/2013 07:57:06 system,error,critical login failure for user debug from 182.1 8.18.197 via ssh aug/06/2013 07:57:09 system,error,critical login failure for user baby from 182.18 .18.197 vi...
by tabate47
Tue Aug 06, 2013 6:44 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

What if I have several devices that need port forwarding for access? For example, let's say I have 4 ip cameras, 1 nas drive, and an ip enabled reboot device. Is there a way to encompass all of these devices into the hairpin nat WITHOUT having to create a rule for each device? I know that I will nee...
by tabate47
Tue Aug 06, 2013 2:51 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

It worked! You did it!

How did you figure this out?

This should be a sticky.

Thank you so much.
by tabate47
Tue Aug 06, 2013 2:34 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

I know I can write a script. I am trying to avoid scripts if at all possible. So, my question is, is it possible to accomplish this without scripts and wan ip addresses? I am able to get it to work when I remove the in interface on the port forward rule, but that messes up some other things. If anyo...
by tabate47
Tue Aug 06, 2013 2:17 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

I know I can use my wan... but that's my point. I want to be able to do this without using my wan, because when my wan changes, I lose connection! Isn't there a way to do this without using my wan? I don't have a static wan ip from my isp, so I need to find a way to do this without using my wan addr...
by tabate47
Tue Aug 06, 2013 1:45 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

I cannot access my cctv cameras with my dyndns address from inside my network while on my own lan. I can access them while I'm on another network. Here is the info you wanted: /interface bridge settings set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\ no /interface ethe...
by tabate47
Tue Aug 06, 2013 1:17 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

I was not able to get this working. Here is my firewall and rules: /ip firewall filter add action=accept chain=input comment="default configuration" disabled=no \ protocol=icmp add action=accept chain=input comment="default configuration" \ connection-state=established disabled=no add action=accept ...
by tabate47
Mon Aug 05, 2013 6:22 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

For whatever reason, it is not working. I will have to look at it some more.

Once I nail down this hairpin nat, I have solved most of my basic learning curve with Mikrotik.

Then I can get into more detail.

Thanks.
by tabate47
Mon Aug 05, 2013 4:17 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

you mean my lan, right?

I will give it a try.
by tabate47
Mon Aug 05, 2013 3:58 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

That's true.

I tried the config you posted, but it did not work. I think it may have something to do with out-interface=bridge-local. What is bridge-local? I don't seem to have that option.
by tabate47
Mon Aug 05, 2013 3:40 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

Ok, I understand. Is it safe to allow all public ip's? What I am trying to do is to make it work the safest way possible. Is your way the safest?

Thanks.
by tabate47
Mon Aug 05, 2013 6:05 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

Do you mean only one wan, not Dual wan, or a static wan ip?

How come my rules work?

Are yours better?

Thanks
by tabate47
Mon Aug 05, 2013 12:29 am
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

Ok, I'll adjust that, but, why is this working without putting in my wan ip address? Am I opening myself up too much on the firewall?

Also, if I do need to input my wan ip address, how do I keep it updated? My isp does not give me a static ip.

Thanks.
by tabate47
Sun Aug 04, 2013 9:14 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Re: Hairpin Nat

Here is my entire firewall: # aug/04/2013 14:12:32 by RouterOS 5.20 # software id = TFAT-LBEY # /ip firewall address-list add address=10.0.1.0/24 disabled=no list=Localnet /ip firewall connection tracking set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \ tcp-close-wait-tim...
by tabate47
Sun Aug 04, 2013 4:57 pm
Forum: General
Topic: Hairpin Nat
Replies: 30
Views: 6166

Hairpin Nat

I am struggling with hairpin nat. I have never had this issue before until I started using Mikrotik. I have tried all suggestions on this forum and searched google, but nothing has worked for me, and I'm not sure if I have a total understanding of it. What I am trying to do it access my security cam...
by tabate47
Sun May 19, 2013 11:18 pm
Forum: General
Topic: Can't access Device on PPTP VPN
Replies: 0
Views: 370

Can't access Device on PPTP VPN

I have created a pptp vpn that works. I can ping all remote devices on the remote network. I am using a pc client to connect to the remote vpn. I cannot, however, connect to a device that is forwarded to port 9192 on the remote mikrotik router. I can ping it fine, but I cannot type in the network ad...
by tabate47
Thu Mar 14, 2013 6:13 pm
Forum: Beginner Basics
Topic: Some Basic Beginner Questions
Replies: 1
Views: 612

Some Basic Beginner Questions

I am new to Mikrotik. I have a few questions. If anyone can help out, I would appreciate it. I prefer using webfig, but any method to get things done is ok with me. - is there a way to assign the router a name that will show up during a network scan? - is there a way to assign static dns (I like to ...
by tabate47
Wed Mar 13, 2013 5:26 am
Forum: Beginner Basics
Topic: Router Backup Question
Replies: 1
Views: 394

Router Backup Question

I will be using the same model # router, the 750gl most of the time. Is it possible to make a master backup image and then use it on each new router that I get? This way it has the basic settings that I need and I don't have to input them every time. Almost like automating a windows installation. Is...
  • 1
  • 5
  • 6
  • 7
  • 8
  • 9