Hi A few years ago I wrote a script to detect and restart IP Sec tunnels. (I know there was DPD but I didn't like the lack of logging) Recently I have got back into Mirotik, and found that when I am using Wireguard, if a peer dropped at times the tunnel wouldn't re-establish even with keepalive etc....

Find the fix-space-6.47-smips.npk file on the net, copy it to your device and reboot it. After that there will be enough free space for updating. This problem appeared and was solved back in 2020-21. Apparently your device has been in the distributor's warehouse since then PS https://forum.mikrotik...

Sorry if this has been asked before, but I've got a new project underway after a long break, I am looking at using mikrotik routers in a captive portal wireless system I would like have a payment gateway, PayPal or other for users to pay for internet access with. I believe that usermanager can do th...

looking at that script id say you have been hacked, if you try to go to a website on port 80 you should get an error page appear

You sir are a gent,

I had one client set to unique and the other set to require, set them both to unique and bang all working

Thank you

Hi All, I am sure this may have been asked before, however I don't seem to be able to find anyone trying to achieve exactly what I am trying to do. I have 3 Mikrotik's as follows 1 X CHR Router hosted in the cloud with a public IP address eg 1.1.1.1 2 X Mips devices these will be used as clients beh...

I do not think you need this script, just use address=urlofremote instead of address=ip

Whilst you are correct I can use the url of the remote site in the IPsec peer configuration, unfortunatly the SA Dst Address has to be an IP address and you are unable to use a url

Hi All Please see my Dynamic IPsec script below, this is a customisation of other peoples scripts, The tunnel ID is what you have writen in the comment section. I hope you find it useful. :local Remoteaddr "urlofremote" :local TunID "in comment section of peer and policy" #####DO...

Glad the script was of use to you both, the other good thing about the script, is generates interesting traffic to Start/Keep tunnels alive

Hi All a little help with a Loop I have the below to detect if the /ip cloud has updated correctly after i had a problem with it not updating when my public ip changed. As I am trying to learn scripting I thought id try and write a solution and came up with the below. This works perfectly except id ...

Hi Thanks for your reply. No I have not missed the safe mode option but we have had instances in the past where safe mode didn't operate as expected unfortunately, so the idea is to create a script that will make it idiot proof in fact the only way to lockout would be to backup the config to a backu...

I'm after a script that will work as a anti lockout script e.g. 1, administrator logs in to Mikrotik, 2, admin makes changes to firewall rules or address lists Nat table and either kills the internet connection or removes remote access 3, script schedule reads log file detects a change, then checks ...

Hi All, Please forgive me if I have re-invented the wheel! But I have been looking for a Script that would monitor an IPSec tunnel and if it couldn't reach the endpoint it would force the tunnel to restart, unfortunately I couldn't find any script to do quite what i wanted, so I borrowed some people...

Thanks for the advice everyone I've cleaned up my config as you can see below, According to Amolis there is no way I can ping the internet using the LAN interface, it dose make seance what hes saying, in other words when the ping tool uses the LAN interface to ping the outside world it's not applyin...

Hi All I've been having some ping problems with the Ping Tool, I can connect a laptop to the Mikrotik Lan or WIFI interface and ping 8.8.8.8 or any other address on the internet without a problem I can use ping tool and select the PPOE interface and it works fine but if I select the LAN interface or...

Hi All, after some frustration due to Cisco to Mikrotik VPN's I decided to replace my existing router indoors with a RouterBOARD mAP 2nD so I can learn more about them, whilst I was configuring the device I was having the similar issues I was experiencing with the VPN, eg I could not ping the outsid...

Hi thanks for your reply, Ping is enabled on both Cisco ASA routers unfortunately I don't have control over the CISCO ends, and I am sure that my policy's and firewall rules including the SRC Nat are all setup correctly is there anymore commands I can run to see what exactly is going on I've been lo...

Hi All, I have an issue we have 4 sites, the tunnels come up between the two main offices and two branch offices without a problem but, one of our main offices cant ping anything on the two remote offices and viscera versa we have checked our policy's and they are correct, the policy's are identical...