When I go into to /usr active and do a print, the list shows 25 users logged in under the same account from ip 0.0.0.0 and they all logged in 2-3 minutes apart and have been logged in for days. Anyone else experiencing this? I know there is no one actually logged in to the router. It is locked down like fort knox. Just thought I would run this by the list.
Dan
This means that the user is connected locally, for example, form the console. You can check how he is connected to the router, there is a VIA column. For more info on active users you could look in the manual:
http://www.mikrotik.com/docs/ros/2.8/guide/aaa.main.4
You could also look in the log file when he logged in the router.
Thats the thing. There is no monitor or keyboard attached to the router. It is running headless. How it that possible then?