Community discussions

MikroTik App

Search found 371 matches

  • 1
  • 2
by acruhl
Thu Nov 24, 2016 6:04 pm
Forum: General
Topic: ipsec whitelist?
Replies: 6
Views: 1334

ipsec whitelist?

Is there a recommended way to implement an ipsec "whitelist" so that my router only accepts ipsec negotiation attempts from known peers? I was auditing my external traffic and noticed some entity I don't know is trying to use ipsec (ipv4) with me. I'm sure it won't work but it would be bet...
by acruhl
Sat Nov 05, 2016 1:52 pm
Forum: Announcements
Topic: MikroTik News November 2016 (Issue #73)
Replies: 27
Views: 19131

Re: MikroTik News November 2016 (Issue #73)

What does the mode button do?
by acruhl
Wed Oct 26, 2016 6:55 am
Forum: General
Topic: Inbound icmpv6 - not working
Replies: 2
Views: 676

Re: Inbound icmpv6 - not working

Replying to myself yet again. Sometimes I feel like I'm the only one who doesn't know this stuff.

Google "mac stealth mode". They block icmp by default it seems.
by acruhl
Sat Oct 22, 2016 10:56 pm
Forum: General
Topic: Inbound icmpv6 - not working
Replies: 2
Views: 676

Re: Inbound icmpv6 - not working

Nevermind. Seems to be a Mac issue. Works with Linux. Works with Windows. Don't know why.

Hopefully someone else will search on this and see it before asking again.

Still amazed at what a $22 router will do.
by acruhl
Sat Oct 22, 2016 5:40 am
Forum: General
Topic: Hacked DVR's
Replies: 12
Views: 4604

Re: Hacked DVR's

Define "hack attempt" please. This is interesting.
by acruhl
Sat Oct 22, 2016 3:56 am
Forum: General
Topic: Inbound icmpv6 - not working
Replies: 2
Views: 676

Inbound icmpv6 - not working

I need a little help with inbound icmpv6. I set up a tunnel using the exact instructions found here: http://wiki.mikrotik.com/wiki/Manual:Hurricane_Electric_Tunnel_Broker_Example_for_Home It works. I can access IPv6 web pages from a Mac client. However, inbound icmpv6 doesn't work to the network adv...
by acruhl
Mon Oct 17, 2016 1:40 am
Forum: General
Topic: IPv6 router advertisement not working
Replies: 7
Views: 3113

Re: IPv6 router advertisement not working

I have an update on this. I have a hAP AC Lite router that was also showing under ipv6 nd prefix that the prefix was invalid. I reset the configuration, set it up again, and now it works. This really seems like a bug. I'm not sure what I can do to make a prefix invalid if it's the only prefix that e...
by acruhl
Sun Oct 16, 2016 8:43 am
Forum: General
Topic: IPv6 router advertisement not working
Replies: 7
Views: 3113

Re: IPv6 router advertisement not working

They actually aren't in the same /64, one is aa3, the other is aa4.

If I change the address to /128 or just delete it, I get no change. ipv6 nd prefix still shows invalid for the one that ends in 254.

Almost seems like a bug.
by acruhl
Sun Oct 16, 2016 8:26 am
Forum: General
Topic: IPv6 router advertisement not working
Replies: 7
Views: 3113

Re: IPv6 router advertisement not working

/ipv6 address add address=fd9c:944d:aa3:3342:192:168:0:254 interface=ether2-master-local add address=fd9c:944d:aa3:1000:10:99:0:1 advertise=no interface=andy-xxx-gre add address=fd9c:944d:aa4:3342:172:16:1:1 interface=vlan4 /ipv6 firewall filter add action=drop chain=input in-interface=ether1-gatew...
by acruhl
Sun Oct 16, 2016 8:08 am
Forum: General
Topic: IPv6 router advertisement not working
Replies: 7
Views: 3113

Re: IPv6 router advertisement not working

Update. If I go to "ipv6 nd prefix" and look there, it shows the prefix for the bridged interface is invalid. The previx for the vlan interface is not invalid. I don't know why this is.

Thanks.
by acruhl
Sun Oct 16, 2016 8:02 am
Forum: General
Topic: IPv6 router advertisement not working
Replies: 7
Views: 3113

IPv6 router advertisement not working

(Sorry if this has been asked before, I'm getting too many false hits while searching.) I have a RB750GL running 6.37.1. Long story short, I thought IPv6 advertisements were working for the bridged interface ether2. I turned on Wireshark from my Mac laptop and found out the router advertisement is a...
by acruhl
Mon May 30, 2016 3:23 pm
Forum: Wireless Networking
Topic: Need help with tmobile 3G USB dongle
Replies: 0
Views: 576

Need help with tmobile 3G USB dongle

I've been trying to get a T-Mobile (tmobile ? ) Rocket 2.0 device to work on my new hAP ac lite. So far I can only make it work under Windows XP using the software that comes with the USB dongle. I have tried Lubuntu and Fedora as well. If I use the setup GUI for it using as many settings from Windo...
by acruhl
Mon Mar 28, 2016 5:21 am
Forum: General
Topic: Config lost on hAP lite after switching from CPE to Home AP on Quick Set page?
Replies: 6
Views: 1133

Re: Config lost on hAP lite after switching from CPE to Home AP on Quick Set page?

I'm not here to discuss the relative merits of the quick set page. It has caused me issues before and I understand that it's convenience has tradeoffs. In this case however, it nearly bricked the router. If mac telnet didn't work, I would have had to figure out something else, maybe netboot? Seems l...
by acruhl
Sun Mar 27, 2016 4:28 pm
Forum: General
Topic: Config lost on hAP lite after switching from CPE to Home AP on Quick Set page?
Replies: 6
Views: 1133

Config lost on hAP lite after switching from CPE to Home AP on Quick Set page?

(Sending this as email to the support email address as well.) For whatever reason, my Quick Set page switched from Home AP to CPE after I made some changes. I liked what that page looked like in Home AP mode so I backed up my config and switched it back. Not sure if this is relevant, but I had just ...
by acruhl
Sun Mar 27, 2016 12:46 am
Forum: General
Topic: hAP lite 3.29 firmware upgrade?
Replies: 5
Views: 2590

Re: hAP lite 3.29 firmware upgrade?

Thanks normis! 3.29 is not included yet though.

I figured "firmware" was the bootloader.
by acruhl
Sat Mar 26, 2016 5:08 pm
Forum: General
Topic: hAP lite 3.29 firmware upgrade?
Replies: 5
Views: 2590

hAP lite 3.29 firmware upgrade?

I'm sorry if this has been posted before, but it's hard to search on because searching on "firmware upgrade" or "3.29" turns up thousands of results and the top hits are not relevant. I noticed in System -> Routerboard my hAP lite had a firmware upgrade from 3.27 to 3.29. Are the...
by acruhl
Sun Dec 06, 2015 6:32 am
Forum: General
Topic: EOIP Tunnels, only tunnel id = 0 works - Fastpath allows pings (3 - RB953GS-5HnT)
Replies: 13
Views: 4420

Re: EOIP Tunnels, only tunnel id = 0 works - Fastpath allows pings (3 - RB953GS-5HnT)

I can confirm that eoip tunnels with an id greater than 0 starts working after disabling this rule: ;;; default configuration chain=input action=drop in-interface=ether1-gateway log=no log-prefix="" If I re-enable the rule the tunnel still has an "R" next to it (even after disabl...
by acruhl
Sat Jul 25, 2015 8:19 pm
Forum: General
Topic: Connection to WAN IP from inside nat network: connection refused
Replies: 0
Views: 789

Connection to WAN IP from inside nat network: connection refused

Hello all. If I do something like this from a machine on the internet: ssh -p <port> user@host.domain (<- my WAN IP's DynDNS domain) It works. If I do it from underneath my MikroTik router on my NAT network (192.168.0.0/24), I get this: ssh: connect to host host.domain port <port>: Connection refuse...
by acruhl
Sat Jul 25, 2015 7:51 pm
Forum: Beginner Basics
Topic: Need proper default config for hAP lite
Replies: 5
Views: 1927

Re: Need proper default config for hAP lite

Yes thanks. My problem was only that I needed to set the dropdown on the "quick set" page correctly. But it's fixed now in the new code level.

Really enjoying the hAP. What a deal. Just need to learn RouterOS better now.
by acruhl
Fri Jul 03, 2015 7:37 pm
Forum: Beginner Basics
Topic: Need proper default config for hAP lite
Replies: 5
Views: 1927

Need proper default config for hAP lite

I recently bought a hAP lite wireless router from Amazon. I was working on configuring it, and I made a mistake so I needed to use the reset button. I held it for 5 seconds after power on as the instructions said, and it came back up. But it didn't come up with the same config as it shipped with. Fo...
  • 1
  • 2