y0d4
October 24, 2013, 8:05pm
1
Hello,
is this still valid how to:
http://wiki.mikrotik.com/wiki/Use_Metarouter_to_Implement_Tor_Anonymity_Software
?
because when i try to add interfaces i get:
[xyz@MikroTik] /interface bridge port>> add interface=ether2 bridge=natBridge
input does not match any value of interface
If not, is there any valid how to which working?
i have: RB751G-2HnD (mipsbe)
thank you.
Caci99
October 25, 2013, 11:18am
2
You need to have a bridge interface which is named “natBridge” and also an interface named “ether2”. The response from router that no such value of interface exists indicates that one of the two interfaces does not exist.
normis
October 25, 2013, 11:19am
3
Yes, basically, first go one level up, and create that bridge.
/interface bridge add name=natBridge
y0d4
October 25, 2013, 12:19pm
4
i did first part of how to and pass fine, i create that two bridge, with name tor and nat bridge.
They exist in interfaces list as bridge.
@caci99
and also an interface named “ether2”.
i cannot create interface, getting “input does not match any value of interface” as i said in first post.
normis
October 25, 2013, 12:22pm
5
Please Post your router config from this command “/export compact”
y0d4
October 25, 2013, 7:36pm
6
Hello normis, thank you for help, here is config (i mask sensitive data)
oct/25/2013 21:24:37 by RouterOS 6.0
software id = 342G-2XBV
/interface l2tp-server
add name=xxx user=xxx
/interface bridge
add name=natBridge
add name=torBridge
/interface ethernet
set 0 name=Lan1
set 1 master-port=Lan1 name=Lan2
set 2 master-port=Lan1 name=Lan3
set 3 name=Lan4
set 4 mac-address=xxx name=WAN
/interface wireless
set 0 antenna-gain=12 country=serbia disabled=no frequency-mode=
regulatory-domain l2mtu=2290 mode=ap-bridge name=Wifi ssid=xxx
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk,wpa2-eap mode=
dynamic-keys wpa2-pre-shared-key=xxx
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des,aes-256 pfs-group=none
/port
set 0 name=usb1
/interface ppp-client
add apn=xxx data-channel=2 info-channel=2 name=3G password=xxx
phone=*99# port=usb1 use-peer-dns=no user=xxx
/ppp profile
set 1 dns-server=192.168.x.40,8.8.4.4 use-encryption=required
/snmp community
set [ find default=yes ] security=private write-access=yes
add addresses=192.168.x.0/24 authentication-password=xxx encryption-password=xxx
name=xxx
/interface l2tp-server server
set authentication=mschap2 enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=192.168.x.1/24 interface=Lan1 network=192.168.x.0
add address=192.168.x.1/24 interface=Wifi network=192.168.x.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=WAN
/ip dhcp-server
add address-pool=lan disabled=no interface=Lan1 name=lan
add address-pool=wifi disabled=no interface=Wifi name=wifi
/ip dhcp-server network
add address=192.168.x.0/24 dns-server=192.168.x.40,85.126.4.170,77.93.223.198
gateway=192.168.x.1
add address=192.168.x.0/24 dns-server=77.93.223.198,85.126.4.170 gateway=
192.168.x.1
/ip firewall filter
add chain=input connection-state=established in-interface=WAN
add chain=input connection-state=established in-interface=3G
add chain=input connection-state=new dst-port=xxx in-interface=WAN
protocol=udp
add action=drop chain=input in-interface=WAN
add action=drop chain=input in-interface=3G
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“NMAP NULL scan” protocol=tcp
tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=input comment=“dropping port scanners” src-address-list=
“port scanners”
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
add action=masquerade chain=srcnat out-interface=3G
add action=masquerade chain=srcnat connection-type=“” out-interface=Lan1
add action=dst-nat chain=dstnat dst-port=xxx in-interface=WAN protocol=tcp
to-addresses=192.168.x.40 to-ports=xxxx
add action=dst-nat chain=dstnat disabled=yes dst-port=xxx in-interface=WAN
protocol=tcp to-addresses=192.168.x.40 to-ports=xxx
add action=dst-nat chain=dstnat disabled=yes dst-port=xxx in-interface=WAN
protocol=udp to-addresses=192.168.x.40 to-ports=xxx
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip ipsec peer
add exchange-mode=main-l2tp generate-policy=port-override hash-algorithm=sha1
nat-traversal=yes secret=“xxx”
/ip pool
add name=lan next-pool=lan ranges=192.168.x.10-192.168.x.254
add name=wifi next-pool=wifi ranges=192.168.x.10-192.168.x.254
/ip route
add check-gateway=ping distance=1 gateway=WAN
add distance=2 gateway=3G
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=
set winbox port=
/ppp secret
add local-address=192.168.x.1 name=xxx password=“xxx”
profile=default-encryption remote-address=192.168.x.1 service=l2tp
/snmp
set contact=xxx enabled=yes location=xxx trap-community=xxx
trap-version=2
/system clock
set time-zone-name=Europe/Belgrade
/system leds
set 0 interface=Wifi
/system logging
add topics=e-mail,debug
/system ntp client
set enabled=yes primary-ntp=85.252.162.7 secondary-ntp=213.151.89.43
/system ntp server
set broadcast=yes broadcast-addresses=192.168.x.1 enabled=yes
/tool e-mail
set address=193.243.x.x from=x password=xxx user=> xxx@xxx.copm
/tool sms
set channel=2 port=usb1
And if you have some suggestions for everything in configuration, please advice
y0d4
October 25, 2013, 8:17pm
7
Also i try like described in:
http://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
and got same resut:
add bridge=natBridge interface=ether2
input does not match any value of interface
Caci99
November 3, 2013, 9:30pm
9
Look at the config you posted, under /interface ethernet there is no interface named ether2, and that is why it gives you that error, it can not find it.
You either name the interfaces ether1, ether2…, ether5, or in the line you are trying to add substitute the value of the ethernet interface with the appropriate one form your config:
add bridge=natBridge interface=Lan1