Community discussions

MikroTik App
 
simco999
just joined
Topic Author
Posts: 5
Joined: Thu Jul 22, 2010 4:59 pm

Feature request - Winbox connection timeout

Wed Aug 17, 2011 5:09 pm

Hi Guys

Would it be possible to allow a setting for Winbox to timeout its connection to RouterOS after xxx mins etc.

Thanks
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: Feature request - Winbox connection timeout

Thu Aug 18, 2011 10:30 am

There is no plans for such feature.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8421
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature request - Winbox connection timeout

Thu Aug 25, 2011 2:44 pm

what about a feature to disconnect current logged users? =)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
cwade
just joined
Posts: 18
Joined: Sat Mar 20, 2010 4:12 pm
Location: Massachusetts, USA

Re: Feature request - Winbox connection timeout

Fri Aug 26, 2011 1:22 am

what about a feature to disconnect current logged users? =)
I'd like to add my vote to Chupaka's suggestion. This is a significant concern with MikroTik security since there is no way to force logout an active user. The list of active users can be printed, but there is nothing that can be done with these entries. Presumably, if we had this feature, then we could then create a script to log out any active user after a period of inactivity, though that would also require having some way to determine how long since the last entry from an active user.
 
DjM
Member Candidate
Member Candidate
Posts: 111
Joined: Sun Dec 27, 2009 2:44 pm

Re: Feature request - Winbox connection timeout

Fri Aug 26, 2011 10:33 am

I'm also voting for one of these options:

1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment

2) Remove active user session
- the same as option (1)
 
BelWave
Member Candidate
Member Candidate
Posts: 184
Joined: Wed Aug 04, 2004 12:49 am

Re: Feature request - Winbox connection timeout

Tue Mar 27, 2012 10:13 pm

I'm also voting for one of these options:

1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment

2) Remove active user session
- the same as option (1)
Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.

I can log in to the router using a different user name, but do not see any command to kick or remove these stale "Active Users". Any suggestion other than rebooting the router?

Thanks,

Brad
 
dragon2611
Member Candidate
Member Candidate
Posts: 154
Joined: Fri Sep 25, 2009 12:06 am

Re: Feature request - Winbox connection timeout

Tue Mar 27, 2012 11:57 pm

I'm also voting for one of these options:

1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment

2) Remove active user session
- the same as option (1)
Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.

I can log in to the router using a different user name, but do not see any command to kick or remove these stale "Active Users". Any suggestion other than rebooting the router?

Thanks,

Brad
If you can determine their IP pop a Reject rule in the firewall perhaps?

Not sure if you'd also need to drop their existing connections from the connection tracking table.
 
BelWave
Member Candidate
Member Candidate
Posts: 184
Joined: Wed Aug 04, 2004 12:49 am

Re: Feature request - Winbox connection timeout

Wed Mar 28, 2012 1:27 am

I'm also voting for one of these options:

1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment

2) Remove active user session
- the same as option (1)
Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.

I can log in to the router using a different user name, but do not see any command to kick or remove these stale "Active Users". Any suggestion other than rebooting the router?

Thanks,

Brad
If you can determine their IP pop a Reject rule in the firewall perhaps?

Not sure if you'd also need to drop their existing connections from the connection tracking table.
Thanks for the idea, but already tried it. These "Active User" sessions are not actually active to anywhere...just hung there still showing active when in fact they aren't.

Brad
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8421
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature request - Winbox connection timeout

Thu Mar 29, 2012 5:33 pm

then just upgrade - it was already fixed
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
BelWave
Member Candidate
Member Candidate
Posts: 184
Joined: Wed Aug 04, 2004 12:49 am

Re: Feature request - Winbox connection timeout

Thu Mar 29, 2012 5:45 pm

then just upgrade - it was already fixed
Care to share the command? Looking at a router running v5.14 and still don't see a way to kick an active user. Show me how to kick active user "0".

admin@Test Router] /user active>
Lists all users that are currently logged in.

.. -- go up to user
find -- Find items by value
get -- Gets value of item's property
print -- Print values of item properties


[admin@Test Router] /user active> prin
Flags: R - radius
# WHEN NAME ADDRESS
0 mar/24/2012 08:44:28 admin 216.1xx.xxx.xxx
1 mar/24/2012 08:44:28 admin 216.1xx.xxx.xxx
2 mar/29/2012 09:37:24 admin 216.1xx.xxx.xxx
[admin@Test Router] /user active> /sys reso prin
uptime: 2w1d18h35m28s
version: 5.14
free-memory: 1920020KiB
total-memory: 1943356KiB
cpu: Intel(R)
cpu-count: 2
cpu-frequency: 2926MHz
cpu-load: 1%
free-hdd-space: 1848972KiB
total-hdd-space: 1921188KiB
write-sect-since-reboot: 3936
write-sect-total: 3936
architecture-name: x86
board-name: x86
platform: MikroTik
[admin@Test Router] /user active>


Thanks!

Brad
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8421
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature request - Winbox connection timeout

Thu Mar 29, 2012 5:51 pm

I'm telling about 'hung' sessions
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
andressis2k
Member Candidate
Member Candidate
Posts: 104
Joined: Mon Apr 18, 2011 12:47 am

Re: Feature request - Winbox connection timeout

Fri Mar 30, 2012 3:08 am

I've checked that, if I've a user loged in (me), and in Firewall > Connection kill the active connection... the session still works!

No new connection is opened, but Winbox still works!

Why???

If I kill the connection, the session must die... I think

PD: Of course I'm connecting by IP, not by MAC
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8421
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Feature request - Winbox connection timeout

Fri Mar 30, 2012 2:43 pm

if you NAT that connection - then it will be dropped. if you're dropping packets of invalid connections - it will be dropped

but if you don't have anything of this - it will continue to work :)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.

Who is online

Users browsing this forum: Google [Bot], tdw, troybowman, wispmikrotik and 86 guests