MikroTik

boxybh

Not required at all unless using BTH, which should only be used if both ends do not have a public IP or the ISP router cannot forward ports to the MT device. Otherwise advise avoiding all that nonsense. i agree. i have routers at remote sites which have static ip and connected to my router and i ha...

boxybh

Zach, you are indeed correct for 2/3 models of 2004, unfortunately I grabbed the one to compare which has a CPU frequency of 1.2 GHz ( Amazon Annapurna Labs Alpine v2 CPU with 4x 64-bit ARMv8-A Cortex-A57 cores. While this CPU is running at 1.2 GHz, the router can be 3x as fast than the previous ge...

boxybh

any experience with CSS610-8G-2S+IN

if i can use it as a switch and vlans and have a 10g sfp copper rj45 and a 10g card in the computer and use that as chr

Are the van here hardware based. i mean no slowdowns right

boxybh

in dhcp client added wan1 and wan2 and use peer dns and default route = no
Instead, just remove or disable them.

did try both the option but the problem is the network is on the same subnet. router == locked
network cannot change subnet yet

boxybh

ok so tried with a new 750gr3 and latest hardware version same speed 220up 350 down, came back to the old one downgraded too 6.49 and 290up and 250down. back to my proxmox chr 340down 350up and the speed test needle rises in second. one more thing i have noticed , as a backup i have 4g modem on wan2...

boxybh

Zach, you are indeed correct for 2/3 models of 2004, unfortunately I grabbed the one to compare which has a CPU frequency of 1.2 GHz ( Amazon Annapurna Labs Alpine v2 CPU with 4x 64-bit ARMv8-A Cortex-A57 cores. While this CPU is running at 1.2 GHz, the router can be 3x as fast than the previous ge...

boxybh

When they changed from vers6 to vers7 many of the existing older routers throughput was reduced significantly. i have a 750gr3 new one at the office, that will come to me tomorrow and then it will be clear if age has some effect or not. i even opened the old one to check the power capacitors if the...

boxybh

Zach, you are indeed correct for 2/3 models of 2004, unfortunately I grabbed the one to compare which has a CPU frequency of 1.2 GHz ( Amazon Annapurna Labs Alpine v2 CPU with 4x 64-bit ARMv8-A Cortex-A57 cores. While this CPU is running at 1.2 GHz, the router can be 3x as fast than the previous ge...

boxybh

Nope, you want the throughput, ......... any other router of same ilk will cost far more. Trying to find an alternative, the best TPLINK ER8411 is on par with the 5009 (matches 1518 byte throughput approx 9k Mbps throughput) but it does have amuch higher VPN throughput but at easily double the pric...

boxybh

Nope, you want the throughput, ......... any other router of same ilk will cost far more. Trying to find an alternative, the best TPLINK ER8411 is on par with the 5009 (matches 1518 byte throughput approx 9k Mbps throughput) but it does have amuch higher VPN throughput but at easily double the pric...

boxybh

thanks for the fast reply. anything cheaper than ccr2116 i just used and old router and put openwrt in it. did vlans and routed to proxmox chr router and there created vlans too. (works) just experimenting because these days economy motherboards have lesser slots and lots of fake intel or defective/...

boxybh

3 internets 1Gpbs 1 lan pcc Loadbalance / src address 500 users i had 750gr3 here and since the internets were 200Mbps till then they were fine. now i have put proxmox and VM CHR with 4 lancards with 6thgen i3 intel well this got good. by anyone's experience what would be a good router for above sce...

boxybh

Why not suffice just NOT put the WANs in the LAN and remove the DHCP clients from WAN ports? What configuration horror do you have? we its simple pcc load balance and when you remove them from addresses, they come back, because the internet routers are locked from the isp side and cannot disable th...

boxybh

lan ip 192.168.1.0/22 pppoe on wan 1 and wan 2 dhcp on lan everything works well but when wan1 and wan2 modem are reset from the isp remotely they enable dhcp and in addresses i can see 192.168.1.xx for wan1 and wan2 to stop this either i do vlan or change my ip range or firewall firewall that i hav...

boxybh

Excellent catch tdw. I tried that before but I never went below 1400. 1350 and 1200 both does it for me.

Solved

Thanks

boxybh

i have mikrotik connecting to another mikrotik via l2tp vpn and ipsec secret yes A mik client(192.168.2.0/24) B mikrotik Server side (192.168.10.0/24) on server side i have a server which has windows microsoft sql , uniserver Apache windows webserver and hyper v in which another windows with mssql a...

boxybh

3 wan,2 lan s 3 internets + lan 1 192.168.50.0/22 + lan2 192.168.60.0/24 in pcc line should it be lan1 ,3/0 wan1 lan1 ,3/1 wan2 lan1 ,3/2 wan3 after all lan are finished till output make another on for lan2 lan2 ,3/0 wan1 lan2 ,3/1 wan2 lan2 ,3/2 wan3 or lan1 3/0 wan1 lan1 3/1 wan2 lan1 3/2 wan3 lan...

boxybh

phase1 negotiation failed due to time up 192.168.2.200[500]<=>103.91.103.34[500] 5c6801f09fbbcb3e:b74e9171340a253a -both site modems static ip, -stie 2 lt2tp enabled, pool made, secret made, profile made -l2tp client from site1 dials and creates a tunnel to site 2 and i can access the computes on st...

boxybh

I think that's the CPU limitation of the hex. I was also surprised by WG speeds on a hex. It's because WG traffic which is also encrypted, needs to be processed by the CPU. Offloading your WG tunnel onto another device, or getting a more powerful router/CPU should solve this same thoughts here. thi...

boxybh

iperf from site1 to serverwin10 iperf site 2 on win10 [ ID] Interval Transfer Bandwidth [ 4] 0.00-30.01 sec 308 MBytes 86.0 Mbits/sec sender [ 4] 0.00-30.01 sec 306 MBytes 85.6 Mbits/sec receiver site 1 160Mbps down 194Mbps up site 2 497Mbps down 276Mbps up both are static ips copy file from site 2 ...

boxybh

Wrong question by previous poster. Correct response....... Please provide full config. /export file=anynameyouwish ( minus router serial number and any real public WAN information ) I will note your explanation is contradictory?? On one hand you state that the ISP device is giving you a public IP a...

boxybh

Did you fill in 223.178.222.199 or 223.178.222.199/24 as IP address? It should be the latter. 223.178.222.199 223.178.222.0 223.178.222.199/24 223.178.222.0 tried both of them. actually, i have configured this way's in many routers at different sites but no problems, this one something is wrong.

boxybh

OK so I have an isp modem , they configured it at bridge mode. they gave a static ip example ip - 223.178.222.199 (223.178.222.199/24) subnet - 255.255.255.0 GW - 223.178.222.1 dns - 8.8.8.8 when i wire directly on to my computer and put these ip addresses the internet works and i am able to ping th...

boxybh

I guess I was expecting more out of the RB1100AH and Gigabit Interfaces. You are doing the test wrong. Btest generates random data, so to generate this random data for the test, you are maxing out the CPU. You can't run the test on the same router which you are testing. Find a 12 core Xeon PC to ge...

boxybh

why dont ya let webpage make a txt file there itself and let mikrotik read that file periodically and accordingly run a script ont he values retrieved.

boxybh

Wait - are both PCs at the same site, i.e. from the perspective of the server, do they connect from the same public IP address?

Yes both pcs are at same site same public ipadress correct

boxybh

ok another develpoment

win 10 pc 1 , with registry mod
win 10 pc2 , without registry mod
(pc1 pc2 using same internet and same lan)

try connecting pc2 to vpn on wan2 = no success

connect pc1 to wan2 vpn and it succeeds -> now connect pc2 (which is without registry mod and it is a sucess)

boxybh

" so no dst-nat rule should be necessary for UDP port 1701. " without this, but with windows regstry hack i can connect to the vpn. but i want to avoid registry hack . one way is bridging the modem and dial from mikrotik as my wan1 does, this is on wan 2 through modem of isp and for wan2 r...

boxybh

well the connection by miktoik does get established but what is not being forwarded by modem -> mikrotik for windows to see it right?

boxybh

ok so tried with this https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/l2tp-ipsec-vpn-client-connection-issue setting it to 2 works with this registry hack i can connect to the vpn of the router but this one did not work " /ip firewall nat print chain=dstnat where !dynami...

boxybh

(either to change registry settings on every single Windows client you use)

i know this but avoiding it

(or to put up the public IP also on the Mikrotik an "un-dst-nat" the incoming IPSec connections back to that IP address, see viewtopic.php?p=738129#p738129)
can try this

boxybh

hahah i tire the html hack see the password as text but its encrypted or some isps lock the macaddress of the dialing modem so that any other modem on th line with correct username and password would not dial

boxybh

Are WAN1 and WAN2 actually different ISPs? Yes, Different ISP's (both have public , static ip. Can ping them from outside. mikrotiks firewall mangle is configured fully to preroute -> new connection mark preroute -> new connection mark -> new routing mark output -> new connection mark -> new routing...

boxybh

2 static ips wan1 wan2 wan1 pppoe dial to modem (bridge) wan2 modem dials and ip given to wan2 port lets say 192.168.20.10 and modem is 192.168.20.1(gw), dmz done in modem to the 20.10 ip and ipsec and vpn ports also forwarded to 20.10(mikrotikwan2) vpn server made in mikrotik dial to wan1 ip from o...

boxybh

Another potential bug, when upgrading from V7.1rc7, all roads lead to v7.1 [.0]. Is upgrading to V7 a one-way road? Since I don't have any V6 downgrade options anymore...e.g. selecting "long-term", "stable", and "testing" all seem to want to use v7.1). Selecting "...

boxybh

+1 from my side

boxybh

I can see mipps ubiquity already has this , why not Mikrotik i had a router lying around 1043nd of tplink did openwrt and installed zerotier. this was a year ago. https://zerotier.atlassian.net/wiki/spaces/SD/pages/654999556/Ubiquiti+Routers We are happy to announce ZeroTier support for ARM architec...

boxybh

Example 1 Failover With Firewall Marking This example demonstrates how to set up failover with a firewall mangle, filter and NAT rules. Detailed Section Overview IP address In this example, our provider assigned two upstream links, one connected to ether1 and other to ether2. Our local network has t...

boxybh

I usually use these routers on sties and the internet is there with dual natted from the isp side. Wifis are usually eap series tplink and beautifully accessible from cloud of tplink but why has Mikrotik not put together such kind of service till now?

boxybh

ok solved it The mangle routes are important and the below code worked /ip firewall mangle add action=mark-connection chain=prerouting comment=R1 connection-mark=\ no-mark in-interface=pppoe-out-wan2 new-connection-mark=WAN_2_conn \ passthrough=yes add action=mark-routing chain=prerouting comment=R2...

boxybh

As said earlier, you need no NAT to enter a Router that has a Public IP assigned to one of its interfaces ... Check your NAT rules again ... The only reason why you would need NAT, is if the MikroTIK is behind another Router... In that case yes you would need NAT from the Router that is before the ...

boxybh

As said earlier, you need no NAT to enter a Router that has a Public IP assigned to one of its interfaces ... Check your NAT rules again ... The only reason why you would need NAT, is if the MikroTIK is behind another Router... In that case yes you would need NAT from the Router that is before the ...

boxybh

the cloud updates to fixed ip and i gave you the result of that ok, so where is the problem ? this is the log input: in:WAN_2 out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto TCP (SYN), 103.72.xxx.xxx:1059->182.76.xxx.xxx:8291, len 52 and winbox does not connect. but i know the packet is hitting t...

boxybh

OK so my code + those marking rules you gave to update the cloud. firewall-> chain input protocol 6(tcp) dst port 8291 accept and i logged it input: in:WAN_2 out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto TCP (SYN), 103.72.xxx.xxx:1059->182.76.xxx.xxx:8291, len 52 thats what it is so far cannot p...

boxybh

If you create a Route with a Routing Mark, the Route will not be used unless you Route traffic specifically to that Route, by using Mangles for example... I would suggest you to add the Route and give it some time... it might take some time to update the IP of the Cloud.. normally it should be 60 s...

boxybh

I see no Routing Marks in your Routing Table...

removed them and kept it simple as only one route will be used at one time so did not

but did make them mangle one for cloud as we discussed earlier

boxybh

That is not an error... Somewhere in your Firewall you have enabled the Log and it actually shows input traffic to port 8291 (MikroTik)... /interface ethernet set [ find default-name=ether1 ] name=WAN_1 comment=wan1_interface set [ find default-name=ether2 ] name=WAN_2 comment=wan2_interface ((((fi...

boxybh

ok, so the cloud is updated but you can not access the device nor you can ping it, correct ? There must be something wrong in your configuration ... Maybe you should post your configuration with hide-sensitive ... ok will do that if you see at fixed ipadress Mik input: in:WAN_2 out:(unknown 0), src...

boxybh

You need no NAT, i already said that before... If the Cloud is updated with a public IP, it is accessible... Check in your firewall the Drop rules in the Input chain.. Or just creat an accept rule on chain input for 8291 and place it on top (we always prefer VPN Tunnels to access our Devices)... Ca...

boxybh

1) why distance 10 and not 1. That is a route with a Routing Mark, in my case there was no reason to set it to 1 or 100... When you update the IP address successfully you will be able to access your Router through your static IP... Ofcorse you should allow TCP 8291 on your Firewall (not good for Se...

boxybh

There is something wrong with your configuration then... Working example: Routing Table: /ip route add check-gateway=ping distance=10 gateway=192.168.33.1 routing-mark=Test Address List: /ip firewall address-list add address=cloud.mikrotik.com list=Cloud add address=cloud2.mikrotik.com list=Cloud2 ...

boxybh

On the Mangles Facility create a Rule on the output chain, with destination address cloud.mikrotik.com or cloud2.mikrotik.com (depends on the device ROS version) and then create a new Routing Mark to the WAN you want to use (that Routing Mark should ofcorse exist in your Routing Table)... You could...

boxybh

OK so here it is Wan1 = internet 1 no fixed ip double natted by isp provider Wan2 = internet 2 fixed ip provided by isp provider Wan3 = internet 3 no fixed ip double natted by isp provider Router 1 Wan1 -> on failure Wan2 ->on failure Wan3 How do i make Mr Mik Route the cloud services to Wan2 so tha...

boxybh

vpn server mikrotik 192.168.100.254/24 all setup and my vpn sounds like this ip pool add name=PPTP-Pool ranges=192.168.99.10/24 ppp profile add change-tcp-mss=yes local-address=PPTP-Pool name=PPTP-Profile only-one=yes remote-address=PPTP-Pool use-encryption=yes dns-server=8.8.8.8,8.8.4.4 ppp secret ...

boxybh

ok so this works / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=ISP1 add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=ISP2 / ip firewall mangl...

boxybh

ok so I coded the base txt file to have <html></html> and <body></body> and I used the ftp mode to fetch to and fro and it works

boxybh

OK so I wrote a core in script section to see how much rx tx I have used today as I have 4gb limit a day. I need to make this file in html but this mikrotik likes txt :) I have tried fetch command tooo :local TxtFile "disk1/a.txt" :local InfFile "disk1/b.html"; /tool fetch addres...

Search found 57 matches