MikroTik

tabate47

It seems like even when you start with the default setup, the quickset page is not correct.

Can someone from Mikrotik chime in and confirm?

tabate47

Has anyone experienced this? I'm pulling my hair out trying to figure out why it's happening. It doesn't seem to be happening on older rb750gl routers.

tabate47

I have used several different models of MikroTik routers, and they all have shown the correct info on the quickset page. We recently set up 3 CCR1009-8G-1S-1S+, and the Quickset page is not showing what is actually programmed into the router. We don't use the Quickset page at all for setup, we use a...

tabate47

Ok, thank you.

It was never that loud at all.

tabate47

Wow! Can you guys read? I asked if anyone knew why they discontinued it. We have a lot of them in the field and I want to know if there is an issue with them.

tabate47

does anyone know why they discontinued the router?

tabate47

We need gigabit wan to lan speed.

We have a firewall with about 40 rules.

tabate47

Why did they stop making that model?

How about the new RB3011UiAS-RM?

Can it do gigabit wan to lan?

tabate47

Anyone know why they stopped making the CCR1009-8G-1S? We used it all the time. What is the best model to replace it with? Our only concern is that it will pass gigabit wan to lan speeds. As long as it can do that, we are open to any Mikrotik router. We would prefer something in the same price range...

tabate47

I upgraded an rb750gl from 6.3x to 6.34. I have a template that I load for each router that includes a configuration and a few scripts. After upgrading to 6.34, when I load the template in the terminal window, I am getting errors in my firewall and scripts, and in turn the areas with errors are not ...

tabate47

Where can you get the dude that runs on a windows machine?

tabate47

With 1 dude server, do you enter the ip address of each individual router?

Do you need to do anything to the routers themselves in order for them to be monitored by the dude?

tabate47

I've never used the dude.

Is this correct:

You need the server on each router you want to monitor, and then you use the client to actually view the monitoring?

tabate47

Something like:

all dynamic ip addresses listed here

for each dynamic ip address ping it

if ping good reset back to 0 bad pings - if ping bad 3 times in a row device down- email device name down last seen at x time

Can someone help me write this in code?

tabate47

We have all of our clients on some type of MikroTik router. I would like to be able to enter all of the routers cloud ip addresses into my MikroTik router and ping them every fifteen minutes or so. If a router goes down, I want to receive an email that the internet is out at that location. I can't s...

tabate47

Thanks Eric I'll try. Good to see you back.

tabate47

I am trying to export only static ip addresses from the lease table. So far I have this that includes everything, but I just want the leases that have an actual static lease. /ip dhcp-server lease :foreach i in=[find] do={ :put ([get $i comment].",".[get $i mac-address].",".[get ...

tabate47

My firewall is similar to the one by efaden in this post:

http://forum.mikrotik.com/viewtopic.php ... 99#p396742

tabate47

Anyone have an example of this?

tabate47

So I would have to accept 192.168.254.0/24 and forward it?

Do you have an example of this?

tabate47

I am using 192.168.1.1 as my main network. I have an ip camera system which uses 192.168.254.0/24. The addresses are given out by the nvr, not the router. I want to be able to ping the 192.168.254.x addresses to monitor them. Right now my firewall is blocking this. I know this because if I disable t...

tabate47

Can someone post a step by step on how to do this with an example?

tabate47

And this can be prevented with what you mentioned above?

tabate47

Correct, but if they do that, the programming that was on the router is gone, and they cannot access that specific programming, right? They only have a factory defaulted router?

tabate47

I want to make sure the MikroTik's we install are secure. If they are password protected, is there any way someone can get into the OS while on site if they don't know the username and password? Are there any backdoors or is there any other way to get in? Can someone pull the programming off the rou...

tabate47

Ok, then in theory, the new hex should be able to handle 300mpbs with little problem.

tabate47

How do you read the speed chart that is put out by Mikrotik? There are three different levels of speed: 1518 byte, 512 byte, and 64 byte. Which one is the real number to go by?

tabate47

Can the new Hex router handle 1000mbps wan to lan speed?

If not, what has anyone tested it to handle?

Right now we have 300mbps download speeds in our area, but gigabit speeds are on the way.

tabate47

I don't see anywhere on the forum where we can post jobs to create scripts. I'm sure some members would love to make money creating scripts so it might be a good idea. I need a script that will ping each device in the lease table that has a static ip address, and if there are 5 consecutive bad pings...

tabate47

I'm trying to make a template that I use over and over. I want to avoid manually typing it in. Can anyone help out?

Thanks.

tabate47

Can anyone help out on this?

tabate47

I am trying to paste this script into a terminal window, but it is not working. I think my syntax is wrong, but I'm not sure how to correct it. If anyone can help out, I would appreciate it. /tool netwatch add down-script="log warning \"Internet Down\"" host=8.8.8.8 up-script=&qu...

tabate47

Is it possible to monitor a device if it is not on a subnet in the router? We are using just add power video distribution. They use static ip addresses not assigned or even in the router. Is there a way to use netwatch to ping these devices even though they are on a separate subnet not in the router...

tabate47

I think this is all too much to ask when you purchase a brand new unit. It should work out of the box with no issues. I can understand possibly trying a net install, but anything beyond that should not have to be done under warranty. I am going to try the net install, and if that does not work I am ...

tabate47

I successfully completed a netinstall on a spare rb750gl. Will this be all I have to do on the ccr unit on Monday? You mentioned "(Or you may want to format the NAND from RouterBoot, then net install)" How do I format the NAND, or is this done automatically on the net install? Thanks for t...

tabate47

I have never done a net install. I am going to try one today.

Is there anything in particular I need to do with the net install, or is it just a run and it takes care of everything?

tabate47

I have not done a net install yet. I will give it a try on Monday.

How do you know if the net install is successful, and will not stop working in a few days like it did before?

Thank you for taking the time to help. I appreciate it.

tabate47

It happened again even on 6.27. The unit cannot be accessed, and the whole config is lost. I'm guessing this is not a common problem, and I most likely have a bad unit. Can anyone confirm this? Thanks.

tabate47

What is a flash issue? Is this common? Would I be better off sending the unit back for a replacement?

tabate47

Has anyone else experienced their router rendered inaccessible after a restart on version 6.29? Has anyone tried to pull the plug and see if they can get back in once powered back up?

tabate47

Can you set up the dude on a remote server and monitor multiple sites at once?

tabate47

by static ip's I mean from the dhcp table. Any address that is static in the dhcp table.

tabate47

Can someone from MikroTik jump in here and confirm my findings? I want to make sure I don't have a bad unit. Basically, on OS 6.29 once the router is customized with your particular setup it will work until the power cord is disconnected. Once this happens, you can no longer log in to the router, an...

tabate47

After 4 hours of troubleshooting, it turns out that there is something wrong with OS 6.29. I went back to 6.27 and it worked.

I love MikroTik, but I wish they would test this stuff out before the release it.

tabate47

I am having an issue where I am installing my normal os setup with dhcp server, firewall, etc, and when the router loses power, I can no longer access the router unless I do a reset with the "res" button on the front of the router and reset it back to factory defaults. Everything is fine u...

tabate47

That is great! Thank you very much. It's exactly what I was looking for.

tabate47

I'm trying to copy the dhcp lease table into a spreadsheet. I can't find a way to copy it. Can this be done?

tabate47

That's not what I'm looking for. I am monitoring 8.8.8.8. If the ping times out twice, the device is considered down. At the second timeout, I want to mark the time. I think the only way I can do this is with a variable. Then, when 8.8.8.8 is back up, I am sending an email with the time the internet...

tabate47

I'm creating a script to monitor if the internet is up or down. When the internet is back up from being down, I have an email sent. In the email, I want to include the time the internet went down. Is there a way to set a variable to the time the internet goes down so I can use it in the up email?

tabate47

What is the best way to have the system email when it regains a lost connection to the internet?

I've tried a few things, and i've noticed that when the internet is down, emails do not wait to send until it's back up, and therefore are never received.

tabate47

What is the best way to run this script on a new router? I'm trying to cut down on my steps when starting out from scratch. Is there a way to run one script that will do everything, including a reset, and a reboot? /system reset-configuration no-defaults=yes y # set router's identity (for “cosmetic”...

tabate47

How can I add html coding to an email? I would like to add some html to the body of an email.

/tool e-mail send to= «Email» subject=(\"«Device» Offline\") body=(\"«First_Name\")

Thanks.

tabate47

Is email not working on OS 6.27?

I have several monitoring scripts that used to work. There are no error messages in the log, but I am not getting the emails.

tabate47

would the CCR1009-8G-1S do the trick?

tabate47

Barkas,

Do you think the 850g2 will do 1000mpbs wan to lan when it becomes available?

tabate47

So the 850g2 should in theory be good for 300mpbs wan to lan with no problems.

What would in theory be good for 1000mbps wan to lan with no problems?

tabate47

Thanks. The thing I am concerned about is I have a feeling the cable company is going to start offering 600mpbs and even 1000mbps speeds soon. Which would be the best router for these type of speeds?

tabate47

Ok, all of my residential clients are now getting 300mpbs download speed from the cable company. They all have the rb750gl. With the rb750gl at best they are getting around 240mpbs download. They want to get the full 300mpbs speed. Which router can a use for them that will be the least expensive and...

tabate47

I still can't figure this out. It only happens with certain modems. I can get 300mpbs direct from the modem, but when connected to the router, I only get 100mbps. I checked the wan negotiation, and it only has 100mpbs connection. How can this be? I tried to manually change it to 1000mpps, but when I...

tabate47

Thanks for the input. I appreciate it. I'm going to give it a try.

tabate47

I would like to try the CRS125-24G-1S-RM. 1. Can I have all ports other than the wan be "dumb" and operate like an unmanaged switch? 2. With the rb750gl I can get around 240mpbs download on a 300mpbs wan connection. Can I do better with the CRS125-24G-1S-RM? 3. Are there any disadvantages ...

tabate47

I use the rb750gl for most home installs. I use the same config on all of them. For 300mbps clients I normally get between 200-280mpbs out of the router. For some reason, only on 1 or 2 routers, I can only get up to 40mpbs, even though there service is 300mpbs out of the modem. Same router, same os,...

tabate47

Is there a way to vpn into routeros and run a remote speedtest like speedtest.net?

tabate47

What about this simple solution from another poster on this forum: # Qos Script Lite v1.0 # September 7, 2013 # Compatible with RouterOS 6.3 # Rename ether-WAN and ether-LAN to match your environment # Mark all UDP traffic for an IP-PBX. /ip firewall mangle add chain=forward action=mark-connection p...

tabate47

Any answer on this? I would like to use the static ip address table, not the firewall table to run the script.

tabate47

I am looking for a Mikrotik router with a built in switch that will operate like a normal unmanaged switch. Something on par or better than the rb750gl. What is my best option? Thanks.

tabate47

If anyone can help me on this one I would appreciate it. I know it's a simple thing, but I'm just not sure how to do it. Thanks a lot.

tabate47

Got it. How do you tell the cisco to allow vlan 102?

tabate47

Can the script be modified to to look at the static ip address table rather than the firewall?

tabate47

I normally set up a vlan on the Mikrotik for wifi addresses so they are on a separate subnet. I am using a cisco sg200 switch, and for some reason the vlan is not working. Is the cisco switch interfering with the vlan somehow? I don't have this problem when I use an unmanaged switch.

tabate47

Is there a way to upgrade router os to the latest version, and then reset the configuration, and then add my script to configure the router so I can vpn back in, and, do this all remotely?

tabate47

I have always set up a vpn on all of my routers. Very simple pptp like this: /ppp profile set 0 change-tcp-mss=yes name=default only-one=default use-compression= \ default use-encryption=default use-mpls=default use-vj-compression= \ default set 1 change-tcp-mss=yes local-address=192.168.1.1 \ name=...

tabate47

I would be very interested in this as well. If anyone has a working script for qos with magic jack I would appreciate it.

Thanks.

tabate47

I see that most of the routers have a listing of their speed performance with 25 "simple" firewall rules. What is considered a "simple" rule, and would 40 rules cut the performance dramatically? Beside firewall rules, what else can slow the performance of the router? I have aroun...

tabate47

Ok, how do you add a static route to 10.0.1.0/24?

It would need to be a route so that anything from 172.16.0.0 can see and talk to anything on 10.0.1.0.

Also, do I need to do anything with my firewall to make it work?

tabate47

The default gateway is 10.0.1.2, which is the main switch.

tabate47

I have done that, but I cannot ping anything in the 172.16. range.

tabate47

Any help on how to set up a static route with a different ip range and subnet range? The ip range is static and not assigned by the router. There are about 15 devices with ip's in the range of 172.16.

tabate47

I am setting up a just add power video matrix. It uses a Cisco sg300 switch with connected transmitters and receivers. The main lan is 10.0.1.1, and the transmitter and receiver LANs are in the 172.16.0.1 and 172.16.128.1 range. The router does not hand out the 172.16 addresses. They are static addr...

tabate47

While we're at it, time Warner in Los angeles plans to have 1g wan speeds over coax.

Is there a mikrotik router that can do this?

tabate47

Ok,

How does the cheap arris modem pass those speeds?

What other routers besides the ubiquiti can do 300mbps?

Thanks.

tabate47

What do you mean by getting close? Do you mean it has the specs. It the software hasn't caught up?

I would prefer a rack mount solution.

Do you think the RB2011iL-RM will be able to handle it?

If not, what is the next rack mount that can do it?

Thanks.

tabate47

Yes I do.

Is there a mikrotik router that will better handle 300mbps on the wan side so I actually can receive that speed as I do from my modem?

I can't not have a firewall and nat and rules, etc.

Thanks.

tabate47

I am getting 300mbps speeds when connected directly to my modem. However, when I connect to my mikrotik router, I am only getting about 150mbps. What might cause this? Is the TB750gl capable of passing 300mbps? If so, maybe my configuration is slowing it down? Or something on the network? Thanks for...

tabate47

My NVR assignes a separate subnet to the cameras out of the box, but the NVR is on the main subnet.

I am going to set it up and monitor the cpu usage.

tabate47

I had a feeling that was the case.

In that case, how do you keep the nvr and ip cameras on a different subnet, and still be able to pull up the cameras while on the main subnet?

tabate47

This is a great question. I would love to know the answer as well.

tabate47

I will try that as soon as I get the cameras set up.

So in theory you think the rb750gl will be fine for my setup? I don't mind stepping up to something else, but if I don't need to then why do it. Thanks for all the help.

tabate47

I have about 50 devices on the network, including 14 ip cameras.

I am using an rb750gl.

Is there a better router that will give me much better performance near the price range?

tabate47

I'm getting so confused. I was always told that by using different subnets traffic will not affect the other subnet. It seems like you are saying it will.

What is the advantage to using a separate subnet for the ip cameras then if I need to use 2 routers?

tabate47

I have a subnet of 192.168.4.x setup for the poe switch connected to my ip cameras. My NVR is on the main subnet of 10.0.1.x. Right now I cannot see any of the cameras. I don't think the camera subnet can talk to the main subnet. I would like to keep the two subnets seperated so there is no traffic ...

tabate47

For me it's more a question of traffic, not security. Since that's the case, in a perfect world, what is the best solution?

different subnet on port 3?

Vlan?

same subnet for everything?

tabate47

Are you saying I can use the main subnet 192.168.1.1 for everything, and because I am sending the ip cameras and nvr to a poe switch there will be no effect whatsoever on the network? If that's true, why do people put things on different subnets and vlans? You could just have each system go to a swi...

tabate47

You are right. If I have to bridge them to make them communicate, then it's not worth it.

Does anyone know if I will have to bridge them?

tabate47

No more than 16 cameras at max 3mp each. I see your point about trunking. I would never need to trunk because I'm going direct to the poe switch which is connected to the NVR and ip cameras. In theory, is my way (like I invented it!) a better solution for bandwidth and traffic separation, or does it...

tabate47

Why not put the cameras on a lan... say you make port 3 a different subnet for the cameras, like 192.168.2.1, and connect it to a switch. Port 2 would be 192.168.1.1, which would be normal traffic. Port 3 would be on it's own subnet for the cctv. Wouldn't they still be able to communicate? Why do yo...

tabate47

I plan on connecting the ip camera port to a poe switch which will connect to the nvr and the ip cameras. The switch will not have any other traffic.

Does this also help with easing traffix on the 192.168.1.1 subnet?

tabate47

Yes, I believe that is correct.

My question remains, if I do that will it ease the traffic on subnet 192.1681.1?

For those of you that do this with ip cameras, is this how you are doing it?

Thanks.

tabate47

I would like to set it up regardless.

If anyone can help me out with what I am asking I would appreciate it.

tabate47

The network is not bottlnecking... I don't have the ip cameras set up yet.

I just want to do it right from the beginning so I don't have any bottlenecks.

tabate47

My router is set up with a 192.168.1.1 address scheme. I would like to create a separate subnet on port 4 of 192.168.2.1 just for ip cameras. The reason I want to do this is simply to keep the ip camera traffic away from the main subnet so the cameras don't slow down the network. I would like the 2 ...

tabate47

I have 2 vlans set up on ports 3 and 4. They are also bridged and trunked to port 5. I would like to add 2 more vlans, but I don't want them on physical ports. I just want them available on the trunk port 5. Can you add vlans without assigning them to a physical port, and if so, what is the best way...

tabate47

I agree, the network admin should set it to what works best for the environment.

Tim, I usually don't have many more than 20-30 static ips.

tabate47

Thanks tim. On the same note, if I am running a script to ping all static ip addresses every 5 minutes, will this also tax the network, or is ping so minimal it doesn't matter?

tabate47

got it. But by shortening the lease time to 10 minutes, doesn't this tax the router and add network traffic? I wonder how it affects performance?

tabate47

can you point me to the area I need to focus on in the article? It's really long!

tabate47

This script does not work. I'm on 6.19. When I paste it in, there are errors.

tabate47

The ip does not change, but the dns name does. Cloud ip always shows my correct public ip address, it's just when you ping the dns it's wrong. You may be on to something with the thread you pointed me to. If this is true, it means the cloud ip needs to be reworked.

tabate47

I see that in 6.20 the leases are changed from 3 days to 10 minutes. Could this cause devices to lose their ip address and temporarily lose connection? Im' a little confused how this works.

tabate47

cable modem with public ip into wan. public ip shows up in mikrotik. The correct public ip shows up in ip cloud, but when I ping my dns is gave me it's wrong.

tabate47

I have an rb750gl with ip cloud enabled. It seems like the time is correct, but for some reason it is updating to the wrong public ip address. It is updating to a public ip address, just not mine! Is there any way to fix this? Thanks.

tabate47

This is really annoying. I can't figure it out. Somehow, the only thing I can think of is the modem is giving out 192.168.0 address range. This would mean it's not really bridged? Has anyone ever had this problem with DSL? It's not ppoe, it's a connection just like a cable modem. You don't need to d...

tabate47

Hi have a verizon dsl modem set to transparent bridge mode. It is connected to the mikrotik router. The mikrotik gives out addressees in the 192.168.1.1 range only. Whenever I have the modem connected, I am getting addresses in the 192.168.0.1 range. I am certain the modem is in bridge mode. Why is ...

tabate47

Now that the cloud can update your public ip and time, is it still necessary to set up ntp servers?

tabate47

Thanks. I will remove the policy all together. Full permissions is fine for my script.

tabate47

I am getting an error when importing scripts created for os 5.26. I understand there is an issue with protocols. My question is, do I completely eliminate protocols, or just certain parts of the protocol? Here is an example: /system scheduler add interval=5m name=«Device»Schedule on-event=«Device» p...

tabate47

Do you need to be on a certain os for this to work?

Can you explain exactly what this does?

Thanks.

tabate47

Thanks for the answer.

I checked the cpu during the pings and it only went up to around 2-3%.

I think I will be ok.

Thanks again.

tabate47

If i have a script that pings 20 to 30 devices all at once every 5 minutes, does this have any effect on the router performance, and can it slow down network traffic any way, or are the scripts totally independent of network performance?

Thanks.

tabate47

Got it. So, if you have a script that will run every 5 minutes, and ping a device until it has 5 bad pings, you would have to use global variables, because each time the script runs, the local variable gets erased. Is that correct?

tabate47

With a global variable, you can set it to a value of zero if the value has not been set:

:if ([:typeof $pingFailure] = "nothing") do={:set pingFailure 0}

How do you do this with a local variable?

tabate47

I have several scripts. Can I have a local variable named "ball" in each script and run the scripts at the same time with no cross interference with one another? Or, do I have to have variables with different names?

tabate47

Paul Netwatch can't do what I want (At least I don't think so).

tabate47

Is there another forum where novices like myself can post things like this and get answers? I think my questions are so basic that they get overlooked.

tabate47

I was asking this question in another post that had to do with another issue. To avoid confusion I have created it's own post. I am working with a script that will ping a device for status. After 5 unsuccessful pings the device is considered "down", and will send an email. At this point th...

tabate47

:local WANInterface ether1 :local pingTarget 8.8.8.8 :local failureThreshold 3 :local pingResult :global pingFailuresWAN - I think these all define variables. - Rather than use a variable for ping target and failure threshold, can I just use the numbers? - I am going to have 20 or 30 of these scrip...

tabate47

I'm still thoroughly confused. I have to learn this. I'm just not that familiar with the code.

tabate47

Eric, I just went over the script. I get the concept, but I'm confused about it. I wrote some notes below, but they don't really make sense. If you have time can you comment on what the lines mean in the script? I would appreciate it. If I know what each line means then I can grasp how to put togeth...

tabate47

Thanks E. I just got this. The forum was down last night. I could not get on. Do you know if it's just me, or was it a problem?

I will try this out tonight when I get home.

I'm going to have to figure out line by line what it does.

Thanks.

tabate47

maybe something like this: if ping good, and variable "x"=down, send email device up set "x"=up set "z"=true if ping bad, set a counter to increment by 1 each time script is run if script runs 5 times and ping still bad, (if variable "z"=true send email device...

tabate47

If you can find it I'd love to take a look. I just realized that I only want to send 1 email that the device is down, not 1 every 30 minutes. How can I have the script send only 1 email when the device is down. Right now it looks like it will send it every time the device pings out after 5 attempts....

tabate47

Instead of the delay, how about just pinging every 5 minutes for 30 minutes. So the script would: ping address if ping good, and variable x=false, send email device up set x=true if ping bad, ping every 5 minutes for 30 minutes if no good pings, create variable x=false, send email device down, go ba...

tabate47

Here is what I am thinking:

ping address

if ping good, and x=false, send email up
set x=true

if ping bad, delay 30 min
ping again
if ping bad, create variable x=false, send email down, go back to start

Is this the best way to do it?

tabate47

I am trying to write a script that will monitor all devices. If they go down, I want it to ping it several times for 30 minutes. If after 30 minutes the device is still down, then it sends an email.

There are other things too. I am working on it today.

tabate47

What if it's not netwatch, just say another script that runs.

tabate47

Someone must know if delays cause issues with the network?

tabate47

I would like to add a delay of 5 minutes to my netwatch script. Does adding a delay to a script effect network performance in any way? Does it slow down the network, or in any way effect the router? If so, I will not use it. Thanks.

tabate47

I tried. Once you get over 9 it doesn't work. Is there a special way to enter 24 seconds?

Also, does this bog down any resources and slow down the router?

Thanks.

tabate47

I found the variable. Here is what I have: :local i value=0; :while (($i <10) && ([/ping address=x.x.x.x interval=3 count=1]=0)) do={:set i value=($i+1)} ; :if ($i=10) do={ :log info message="Warning: 10 unsuccessful pings to IP x.x.x.x." :if ([/system resource get uptime] > 5m) do...

tabate47

Is there a variable for how long the system has been up?

If so, I can tell the script not to email if the system has not been up long enough.

tabate47

I found my error. I was typing email instead of e-mail. That's why it wasn't sending out the email. Here is what I now have that works: :local i value=0; :while (($i < 10) && ([/ping address=x.x.x.x interval=3 count=1]=0)) do={:set i value=($i+1)} ; :if ($i=10) do={ :log info message="W...

tabate47

Ok, I put this in my "down" area in netwatch: :local i value=0; :while (($i < 10) && ([/ping address=x.x.x.x interval=3 count=1]=0)) do={:set i value=($i+1)} ; :if ($i=10) do={ :log info message="Warning: 10 unsuccessful pings to IP x.x.x.x"; /tool email send to="ton...

tabate47

You guys are confusing me.

Can I put these scripts in the up and down area of netwatch, or do they need to go somewhere else?

tabate47

I don't have as much knowledge as most of you here at the forum, but is there a way to: create a variable to count the number of pings. on up, send an email on down, ping the device 3 times before an email is sent Basically I am trying to prevent false alarms. I'm sure there are many scripts out the...

tabate47

Thanks for writing me back. Do you mean something like this: Down: :if ([/ping 10.0.0.1 count=2] = 0) do={ /ip firewall nat set enable 0; /ip route disable 0; /tool e-mail send to="person@email.com" subject="Gateway Down" body="Pinged out."; } Up: :if ([/ping 10.0.0.1 c...

tabate47

I have been using netwatch with good success, however, some devices simply reboot themselves and then go right back online. I get an email saying device is down, and then seconds later that it is up. I want to eliminate this. What is the easiest way to have netwatch ping a device more than once to a...

tabate47

Without becoming annoying I would graciously like to ask again...

I have searched the forums with no answer to this question.

tabate47

Does anyone know if this is possible?

tabate47

No it does not. Have you ever gotten it to work? Maybe I'm doing something wrong.

tabate47

I have read the forums and I cannot find an answer to this. If any mods are listening, can you advise me if this is possible? Thanks.

tabate47

What if I set up 20 or 30 devices and have net watch ping them every 10 seconds? Does that in any way effect the network? I don't want to cause any loss of speed or bottlenecks. Thanks.

tabate47

Is there a way to test the isp speed within router os? I want to periodically test the isp speed, and if it drops below a certain point, email me a message. Can this be done? If so, can it be done with no effect on the network speed? Thanks.

tabate47

I am setting up net watch to keep an eye on a few of my network devices. If I set it to ping each device every 10 seconds, will that effect my network in any way? If so, what ping interval should I set it to so that my network is not effected? Thanks.

tabate47

I am still trying to do this. Can anyone help?

tabate47

Is there a way to export the static dhcp table to excel? I tried to copy and paste, but it does not work.

tabate47

Is it possible for router os to run an internet speed test every so often, and if the speed drops below a set number send me an email? Would this take too much bandwidth?

tabate47

Eric,

I am going to hold off on this for now. I want to wait until version 6 (or 7) becomes more stable. I am going to stick with version 5 for now. For now I will just use net watch.

Thanks for all of your help as always.

tabate47

Eric, Thanks for doing this. I am on version 5.26. I haven't upgraded yet because I'm not sure of the stability of the newer versions. Do I need to upgrade to make this work? Next, is the script going through all of the ip address on the network, or just the static ip addresses? Next, does this scri...

tabate47

You have to write it for me then. I won't take no for an answer! Just kidding. Can you point me in the right direction on the variables for the name in the comments section? I can't find any info on that at all. The other stuff I can probably put together. Maybe you can check it as i go along. Thanks.

tabate47

Ok, can you show me a similar script so I can learn from it and try to reverse engineer it?

I don't know where to start.

tabate47

I would like to create a script that would take all static ip addresses and monitor them for up or down status. Upon a change in up or down, the script would email me the device status. I would like the subject to include the name of the device, and I would like the name to be whatever I have named ...

tabate47

Mike how would that work with more than 2 emails?

tabate47

Wow that's too easy. I'll try it. Thanks.

tabate47

Here is my script:

/tool e-mail send to= mikrotik@***.com subject=([/system identity get name] . " Printer Up")

It's in the up portion of the netwatch. How would I add another address?

tabate47

Right now I am sending an email to myself. I need the email to also go to another address. Is there a way to set it up so that the notification email will go to two separate addresses?

Thanks.

tabate47

Any input from anyone?

tabate47

I would like to know if it's possible to create a script using netwatch or something similar that would ping all devices on my network, and send me an email if any of the devices goes up or down. Maybe it would try to ping several times before sending the email. I would like it to use the comments i...

tabate47

Thanks Eric.

tabate47

Eric, You did it again! All I did was change my vpn ip range into the .4's and add your code: /ip firewall filter add place-before=0 chain=input src-address=192.168.4.0/24 add place-before=0 chain=forward src-address=192.168.4.0/24 add place-before=0 chain=input dst-address=192.168.4.0/24 and, it wo...

tabate47

I would need to add this too, correct?

ros code

/interface bridge
add name=bridge-vpn
 
/ip address
add interface=bridge-vpn address=192.168.4.1/24
 
/ip pool
add name=vpn-pool ranges=192.168.4.2-192.168.4.254

tabate47

Maybe its a good idea to stick to the pptp and get my original firewall going.

Then, we can attempt the lpt2.

Ok?

Thanks Eric.

tabate47

Will this fix the firewall issues I'm having?

tabate47

Ok let's try it

tabate47

Yes, it is possible. Is that a more secure vpn? If so, I am open to use it. Is it more difficult to set up?

tabate47

As far as I know, yes. Very basic.

Do you suggest something else? I want to be able to vpn in from the iPhone and iPad.

tabate47

I have tried so many things I can't even remember. Nothing has worked. One change I made is putting my vpn addressees in the same subnet as my lan addresses. I don't think that's necessary though. Here is my compact export: /interface bridge add comment="Local Bridge" l2mtu=1598 name=bridg...

tabate47

I tried to add your suggestions to my firewall, but it did not work. I changed my vpn ip to my lan ip. I thought this might help, but it didn't. I still cannot access the devices on my lan from the vpn, and I cannot access inbox from the vpn. What am I missing? I have been reading so much my eyes ar...

tabate47

Thanks for the reply and the help. I will give it a try in the next couple of days when I have time and let you know what happens. I appreciate it.

tabate47

Thanks Eric. I read a lot last night, and saw things like proxy-arp, and some others, but I don't think any of them apply to my situation. It seems like the proxy is for when you are on the same subnet as the local, which I am not. What would be blocking winbox access? When I look at it it's almost ...

tabate47

I tried the first one and it did not work. I attempted to try the second one but I just did not understand it. I have not had time to sit down and grasp what you are doing with the firewall, but it seems like you are making a list of things to "jump" to, and if things are not on that list ...

tabate47

I will give them both a try and let you know. Thanks as always for the help.

tabate47

I never tried google hangouts. I will check it out.

Should I try both of your suggestions, or is one better than the other. I know you said you never tried the second suggestion.

tabate47

Ok, here is what I discovered: The default drop for the input chain prevents me from accessing winbox when logged in via vpn. The default drop for the forward chain prevents me from accessing local ip addresses when logged in via vpn. For example, I can't log into my printer from outside the network...

tabate47

Sure thing. As soon as I get home I'll do it. I'm pretty sure the vpn ip's are in the 192.168.10.x range.

tabate47

Eric,

Thanks for checking in.

I am running a pptp vpn. Does that make a difference? Do I still need to do what you said?

No rush on this. When you get back if you have time take a look and let me know.

Have a great time. Thanks again.

tabate47

Here is my current firewall: /ip firewall filter add chain=input comment="Connection State - Established" connection-state=\ established disabled=yes add chain=input comment="Connection State - Related" connection-state=related \ disabled=yes add action=drop chain=input comment=&...

tabate47

Eric, I discovered something tonight. I tried to vpn into my router from outside my network at someone else's house. I was able to connect via vpn fine. However, I could not navigate to any local ip addresses on my home network except those that had forwarded ports. I disabled the firewall, and then...

tabate47

That's the way the modem works. If the isp has an ip address it sends that. If the iso loses the address or drops it, then the modem switches to a private ip address.

tabate47

Didn't someone post a problem with hairpin nat on 6.5, or maybe that was 6.6

tabate47

I tried all types of router configurations, even the default, and nothing helped. Maybe it's something in the router build? I am on 5.26. I don't want to change right now until a 6.x version is rock solid.

Google servers work fine, it's just weird that time warner's don't.

tabate47

I have time warner as my isp. When I connect directly into the modem I can use the time warner dns servers with no problem. When I connect the modem to the mikrotik, websites load slow, and sometimes don't load all the way, and sometimes it even looks like my internet is out. If, however, I change m...

tabate47

So it's normal, and nothing I should be concerned about?

tabate47

I keep getting this error: nov/22/2013 01:29:20 dhcp,critical,error dhcp-client on ether1-gateway lost IP add ress 172.251.52.151 - received NAK from dhcp server 192.168.100.1 Does anyone know what this means? Could this have anything to do with Safari not loading pages and having errors? Thanks.

tabate47

Seems like it is mostly affecting Safari.

I changed my dns to 8.8.8.8 and it seems to have fixed it.

Are you of the camp to use googles servers, or do you like to stick with those from your iso?

I have heard both ways.

tabate47

I am getting "Safari can't find the server" a lot. Many web pages are not showing up all the way, for example images are being left out. Do you think this has anything to do with the firewall, or just my internet provider having issues today? It's a coincidence, but could there be anything...

tabate47

Eric should I be on 5.26, or something else?

tabate47

Everything seems to be working that I have tested so far. I am going to go over the firewall line by line to learn it and understand what is going on. Thanks for all the help.

tabate47

Eric,

I made the mistake. I changed the port to 8181 and I did not update the ip address in the forward area. It now works!

Thank you.

I will test everything and post the final export.

tabate47

So far that is the only thing I have found is not working. Once that is working I can check the hairpin nat. here is my current firewall export: /ip firewall filter add chain=input comment="Connection State - Established" connection-state=\ established add chain=input comment="Connect...

tabate47

I'm losing my mind! I mean 8090

Search found 510 matches