Community discussions

MikroTik App
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Help with the dude

Wed Oct 30, 2019 6:01 pm

Good afternoon.

I have a problem with The Dude, I need to manage, monitor and even update my mikrotiks with this monitor but I can not establish connection with the device, every time I try to reject the connection throwing this error ("connection timeout (6), next attempt at 15:59:28 ") I have read several forums and also seen tutorials but still the connection is not established.

It should be noted that I am using the correct ports and my devices do not have firewall rules that interfere with the connection.
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Help with the dude

Wed Oct 30, 2019 7:13 pm

How do you see these devices? Through VPN?
Are those devices in your local network ?
Provide more details.. It's really easy to add a device in Dude...
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Wed Oct 30, 2019 10:51 pm

Hello, my equipment is routed locally, I can add the equipment without any problem to the dude and consult snmp, ping among other qualities, my problem is when I try to connect the dude to an MK either to update or manipulate it.

It gives me error as in the image that I show you, it should be noted that my IP address, user and password are correct and there are no firewall rules that prevent the connectionImage
You do not have the required permissions to view the files attached to this post.
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Help with the dude

Wed Oct 30, 2019 11:37 pm

Go to services and tell me what service is down...
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Thu Oct 31, 2019 12:24 am

Does the user you are using to login have "dude" permission?
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Thu Oct 31, 2019 8:59 pm

Does the user you are using to login have "dude" permission?
Hello, thanks for your prompt responses, I don't know how to verify if the final team has permission, where can I verify it?

Basically I want to drive the Mikrotik from The Dude? Is that possible ? How do I do it?

I have seen that it is possible to update it from The dude according to the wiki manual but I cannot establish communication at that level between the dude and the device
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Thu Oct 31, 2019 9:56 pm

Do
/user print
and
/user group print
on the router you are trying to connect to.
And see, if the user you are using to login from dude server have the necessary rights.
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Fri Nov 01, 2019 2:17 pm

Do
/user print
and
/user group print
on the router you are trying to connect to.
And see, if the user you are using to login from dude server have the necessary rights.


Good day,

If the user I am using has "full" permissions but still can't connect, do you know any other way or steps I should follow?

because I have a lot of equipment and I would like to handle them from one place and update them at the same time instead of doing a manual job one by one
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Fri Nov 01, 2019 2:25 pm

Check that your device’s firewall accept connections on default winbox port 8291 from the address of your dude server.
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Fri Nov 01, 2019 2:29 pm

Check that your device’s firewall accept connections on default winbox port 8291 from the address of your dude server.
I already have a rule that accepts all the protocols and ports of the server dude network
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Fri Nov 01, 2019 2:38 pm

Is there anything valuable in the device’s logs when dude is trying to connect?
Does winbox run on the default port?
Can you confirm with torch, that dude packets are reaching the device?
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Fri Nov 01, 2019 2:46 pm

Is there anything valuable in the device’s logs when dude is trying to connect?
Does winbox run on the default port?
Can you confirm with torch, that dude packets are reaching the device?
How to change the query port from 8291 to another?
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Fri Nov 01, 2019 2:52 pm

You can’t.
The only way is to perform nat from 8291 to your custom port.
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Fri Nov 01, 2019 3:10 pm

You can’t.
The only way is to perform nat from 8291 to your custom port.
And how can I do that?
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Fri Nov 01, 2019 4:10 pm

You can’t.
The only way is to perform nat from 8291 to your custom port.
And how can I do that?
Add this on your device:
/ip firewall nat add action=dst-nat chain=dstnat dst-address=YOUR_DEVICE_IP dst-port=8291 protocol=tcp src-address=YOUR_DUDE_SERVER_IP to-p
orts=YOUR_CUSTOM_PORT
 
luisjoosee
just joined
Topic Author
Posts: 14
Joined: Tue Sep 17, 2019 4:34 pm

Re: Help with the dude

Mon Nov 04, 2019 9:27 pm

You can’t.
The only way is to perform nat from 8291 to your custom port.
And how can I do that?
Add this on your device:
/ip firewall nat add action=dst-nat chain=dstnat dst-address=YOUR_DEVICE_IP dst-port=8291 protocol=tcp src-address=YOUR_DUDE_SERVER_IP to-p
orts=YOUR_CUSTOM_PORT

Good afternoon, sorry for the delayed response time.

the problem is that there are more than 500 final devices that had to be set that firewal rule.

There is a way to put a rule on the "dude" server that works, try several ways dst-nat and src-nat but they didn't work.
 
User avatar
xvo
Forum Guru
Forum Guru
Posts: 1237
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Help with the dude

Mon Nov 04, 2019 10:45 pm

As unfortunate as it is, for now there is no other way to do this, other than performing dst-nat.
And you can't perform dst-nat for the packet originated from the router itself.

Instead of doing it on all 500 end devices you can place additional router between dude server and the network, to do it in one place (or use existing router, if all the traffic to end devices is routed through it).
Another possible workaround is to loop the traffic back to the dude server connecting two of it's ports with a patchcord (of course if it is physical device, not a CHR).

Who is online

Users browsing this forum: No registered users and 14 guests