MikroTik

Term

Thank you. Will try it and will give you info.

Term

It's 5-port TP-Link switch. Forgot to say I replaced it for another 5-port TPlink, same result.
Anyway from the time I replaced switch for RB, there are no problems.
It's really strange

Term

Yesterday evening I made 1 change. There was simple unmanaged TP-Link switch connected to eth5. From switch were devices connected. I replaced that switch for RB750Gr3 and from that time there is no ether5 down/up so it's stable now. So you think the switch is damaged? It was connected to eth5 for m...

Term

Hello, have RB4011 at home for about 3 years. Last days I found there is a problem with flapping ethernet 5 port. Ether5 is down for 2-3 seconds and back up at random times between 30-60 min. eth2-10 are in bridge What I tried to do: - change old FTP (indoor) cable to to new one FTP indoor cable (ca...

Term

Thank you. 1. I already tried to disable all ports and leave 1 porty only with my computer. Same result. Tried to disconnect my computer and connect another computer, same result. 2. in connections I see some src addresses of my computer and a lot of src address 192.168.1.250 (don't know why). 3. wi...

Term

Hello, yesterday my ISP blocked my port automatically because of spoof. He told me my router sends about 600 connections per second. How can I investigate what's going on? Have RB4011 with the latest ROS. WAN1 = ISP WAN2 = tplink switch (computer, unifi AP etc.) WAN3 = dlink switch (playstation, tv,...

Term

Yes I'm using RB4011

Term

today I found, all kid control items are deleted. Checked logs and I see, kid control started ad 22.00 by schedule and after some seconds rb deleted all items automatically..

Term

Yes sorry, my bad. Have 7.11. Changed topic title too.

Term

Already read changelog. As I wrote, RB is 7.1.1

/system/package/print
Columns: NAME, VERSION
# NAME VERSION
0 container 7.11
1 routeros 7.11

Term

any help please?
btw have RB4011. Today I tried factory reset of RB, kid control still doesn't work so I restored a backup backup.

Term

Hi, have a problem for some weeks. Just found kid control doesn't work for me. - if I change times, after some seconds all times revert to previous or change to 00:01:00-1d 00:00:00 - if I enable some kid control, after some seconds revert to disabled state In logs I see "kid-control user test ...

Term

Which MikroTik router do you have? You can probably connect your TV to a different port on the router, but then you will need a dedicated cable from the router to the TV. And you will need to either remove the port connected to the TV from the bridge, or for a bit more flexibility, you can configur...

Term

I tried to setup vlan 111 to bridge. All ports are in bridge. Connected my laptop to the unmanaged switch, still getting wrong IP address (not from subnet of VLAN)

Term

Hello, is possible to use multiple VLANs without managed switch? Have 3 vlans at home. For example, basic LAN devices has no vlan. Want to set VLAN 111 to TV device. My connection is: routerboard -> tplink switch (unmanaged) - port 1 TV, port 2 computer. So I want to set VLAN 111 TV only. Is it poss...

Term

oh yes my bad, fixed (I think)

Term

Thank you so much. Can you recheck if it's ok?

Monday: 6.00 - 22.00
Tuesday: 6.00 - 22.00
Wednesday: 6.00 - 22.00
Thursday: 6.00 - 22.00
Friday: 6.00 - 1.00 (19 hours)
Saturday: 6.00 - 1.00 (19 hours)
Sunday: 6.00 - 22.00

Term

tried it before..

Couldn't not change Kid <kid1> - invalid time-allowed: seconds are not supported (6)

Term

seems it works fine while testing. Just a question. How can I add time from 8.00AM to 1:00AM? mtik shows me error about wrong time. I know I can fix that by adding more times in days, for example I want to allow internet in friday from 08:00:00AM to saturday 01:00:00AM (17 hours) friday: from 8:00:0...

Term

Why not use Kid-Control menu, which is optimised for this use and works very well?

yeah just found it, testing.. sorry

Term

Hello, trying to setup simple rule in my fw to block mobile device of my child at the night: add action=drop chain=forward src-mac-address=AA:BB:CC:DD:EE:FF time=22h-8h,mon,tue,wed,thu,fri Rule will enable at 22h but problem is rule will stay enabled after 8h. I must manually disable rule. Any idea ...

Term

:local email "my@email.com" :local rscfn "$info-$date-$time" :local bakfn "$info-$date-$time" # or :local email "my@email.com" :local rscfn ($info . "-" . $date . "-" . $time) :local bakfn ($info . "-" . $date . "-" . $...

Term

Hi, thank you for this script. Works fine. Just note, how can I change name of files? now I have backup.rsc , bin.backup want to have for example $info.backup, so it will be ie RB4011.backup Tried to add it, script stopped work for me. Thank you :local email "my@email.com" :local rscfn &qu...

Term

don't expect. never did any scripting so I believed someone shows me the right way.

Term

Have this now in scripts but it doesn't work of course..

:foreach i in=[/queue simple find where max-limit="100M/100M"] do={/ip hotspot host remove $i}

Term

any help please?

Term

Hello, need to check simple queue for 100M/100M. If there are some records, need to remove that records from hotspot (fore reconnecting). How can I do that? Know how to print records, currently have this only: [user@my-router] /queue simple> print where max-limit="100M/100M" It shows me re...

Term

thank you. can you be more specific please? really don't know how to do that..

Attaching small screenshot as visualisation

Term

as I wrote in first post. have RB. eth1 is WAN, eth10 is connected to switch. I have VoIP connected to eth2. That VoIP need to connects to our company through VPN.
Want to use VPN only for eth6. So for example computer will not route through VPN.

Term

Hello,
it worked fine. I reseted MT because of a lot of stuff was there. I created everything again (dhcp, vpn etc). My problem is I can't found a tutorial how to create VPN only for 1 ethernet...

Any help please?

Term

Hello, have mikrotik at home. ETH1 = PPPoE to my ISP ETH10 = cisco switch I want to connect voip phone to ETH2. Have connected VPN to our company. All I need is traffic thru VPN only for voip phone (eth2). All other devices like computer, laptop, mobile will go thru my ISP, not VPN. Possible to crea...

Term

Hello,
there is winbox 3.25 on website. Where can I download older versions like 3.24? Thank you

Term

have clean routerboard now. Trying to setup it from scratch.

All I have are vlans and dhcp server. And masquerade for pppoe

Term

Hello, I have RB4011 and managed Cisco switch. I created vlans 10,11,12,13,14 and 15 (for management). Vlans are assigned to ether10 in RB. There is cisco swich connected. Created DHCP servers. But have 2 problems. 1. internet doesn't work in devices connected to cisco switch. I can ping devices fro...

Term

Ok I followed your guide. Doesn't work. Still can't connect to compan without VPN in computer

Term

Yes but I don't want to make VPN connection in computer because of another VPN.

Term

Hello,
I'm trying to create VPN from my home's mikrotik to work. How can I do that?
I already created VPN connection but my computer still can't access to company's network.
Have more computers at home but want to be able to access company's network from one computer only.

Thank you for your tips.

Term

Just found how it works. Seems it's ok now.
Thank you

Term

Can you help me with this?

Term

Hello, have some rules like drop ssh after x attempts, block winbox after x attempts etc. I want to add IP address to "block everything" address list if someone tries to access to winbox, ssh, ipsec etc. Currently it works: - someone tries to access to winbox -> IP added to "winbox_bl...

Term

Thank you, didn't know RB4011 has some problems with SFP+ and WiFi.
So will wait some weeks and will see if I will change CCR for something other.

Thank you

Term

So I still don't know what to buy.

Want RB4011 for wireless. Currently have CCr1009-7G-1C-PC + 2x UniFi Pro. CCR will sell. Maybe will stay with RB4011 as main router and wifi + RB962UiGS for wifi in another room?

Term

both. Need LAN and WIFI

Term

Currently have CCR1009 + 2x Unifi AP Pro.
Want to leave that devices and buy new 2x RB with Wifi. Have 1gbps connection at home (pppoe)

Term

Hm so rb with wifi6 support will be available maybe in 1 year? 2 years? Need to buy rb in next days/weeks.

Term

Hello,
need to buy new routerboard. My question is: can I buy RB4011 or wait for RB with wifi 6 (802.11ax) support? Don't know where will be RBs available with wifi 6.
Thank you.

Term

Doesn't work. Still not getting IP address.

If anybody will connect to my computer via teamviewer, will be very thankful. Just PM me.

Term

tdw: thank you. Tried it but it still doesn't work, same result.

Term

Hello again, today I tried to create VLAN 30 for multimedia like IPTV boxes, apple tv, synology nas, TV's etc. IPTV boxes and apple TV are connected to gigabit switch (unmanaged) I found no devices get IP address, don't know why. VLAN 20 works fine with UniFi devices. Any help please? /interface bri...

Term

Thank you so much guys, works perfect! Guests are isolate now so if I'm connected to guests wifi I can't reach my local network devices like NAS etc. So I'm so thankful. Just changed add bridge=bridge tagged=bridge,ether5,ether6 vlan-ids=2 There was vlan-ids=2, changed it to 20. So if I will want to...

Term

Hello, have CCR1009 at home. Have 2x UniFi AP. eth1: WAN (pppoe) eth5: unifi 1 eth6: unifi 2 Have bridge and there are eth2-eth7 (all ethernets) In Unifi I created guests wifi network with vlan 20. My question is how can I make bridge for vlan20? Created vlan in mikrotik too for bridge-wifi-guests. ...

Term

You don't understand me. I'm looking for similar solution like Pi-hole but for mikrotik. Some script.

Don' want use adblock, ublock etc in my computers and mobile devices.

Term

I'm talking about pc browser, not mikrotik. Want to block ads in browsers via mikrotik

Term

ie letemsvetemapplem.cz, idnes.cz etc.

Term

Hello, are you using Mikrotik to block ads? I know there is i.e. Pi-hole but I'm afraid pages loading will work slower if there will be requests to raspberry. Found https://stopad.hook.sh Tried it but it seems to not work for me, maybe I skipped something. IP - DHCP - Networks - added IP of my mikro...

Term

Thank you guys. Added one rule and seems it works.

/ip firewall filter
add action=drop chain=input comment="drop attackers ip pools (vpn)" src-address-list=block_attackers

in block_attackers address list have 216.218.206.0/24

Term

I don't think I can do this. I'm connecting to VPN from work and from a lot of other IP pools (a lot of places)

Term

Hello, every night someone trying to connect via vpn to my mikrotik. It's going on for about last 1 week. Have enabled L2TP/IPSEC. IP address is 216.218.206.201, 216.218.206.206 etc. (changed every night) 1.jpg Just added this rule but don't know if it will be ok. /ip firewall filter add action=drop...

Term

This was my first idea how to do that.
So in RB962 I removed DHCP server, leases, addresses. I added ether1 to bridge too. Now I see all devices from RB962 in dhcp leases of CCR. I left only DHCP client to bridge1. Hope it will be ok.
Perfect, thank you so much!

Term

You saved my life! I'm an idiot :-) Just last problem. My computer has IP 10.31.0.101. My printer is connected wirelessly to RB962 and has IP 10.31.10.10. My problem is I can't ping printer from computer and from CCR. I know it's something about routing but I really don't understand it. Any help ple...

Term

I had it there

Term

Wireless devices got: IP address: 10.31.10.18 Mask: 255.255.255.0 Router (gateway): 10.31.10.0 (it's gateway of RB962, maybe this must be 10.31.0.1?) DNS are automatic but I see there correct DNS Added ARP in DHCP server, internet still doesn't work. I found DHCP client in RB962 got correct gateway,...

Term

Hello, have CCR1009 (10.31.0.1 with pool 10.31.0.101-10.31.0.150) and RB962UiGS (10.31.0.100 with pool 10.31.10.1-10.31.10.20) CCR is main device with PPPoE. RB962 is second device connected from CCR Eth6 to RB962 Eth1 (want wifi). Devices connected to CCR work fine, internet is ok but devices conne...

Term

Hello, some changes. have CCR1009-7G-1C-PC at home right now. My friend recommended me it for better speeds. My ONT is in bridge mode again, PPPoE is in CCR. Speeds are slow again. There must be something in settings. Have fasttrack enabled. Any idea please? I made a decision. Will pay $10 someone h...

Term

Sorry, forget to answer.

- tried port forward (500, 4500) in Huawei ONT, didn't help
- can't switch ONT to bridge mode because of slow PPPoE speeds in Mikrotik
- have Telekom ISP
- as I wrote if I had ONT in bridge mode, VPN works perfect. Now it doesn't work in WIN10 only.

Term

any other ideas please?

Term

I already have it in regedit. Didn't help. Can't switch ONT to bridge mode because of slow speeds of PPPoE

Term

Term

Hello, have VPN in my mikrotik. Worked perfect. Some days ago my ISP changed ONT mode from bridge to Route mode so I enabled DMZ in ONT to my Mikrotik. Problem is VPN doesn't work. If I'm connecting from apple devices (iPhone, iPad, MacBook Pro) it works fine but if I want to connect from Windows 10...

Term

after fasttrack added and accept established seems it works better. Not the best but better.
Thank you.

Term

tested with the same ftp cable cat5e cable.

directly from ONT of my ISP

via mikrotik with the same cable

Term

of course: # may/18/2018 19:37:35 by RouterOS 6.42.2 # software id = ZKE3-331Q # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = 830608306462 /interface bridge add fast-forward=no name=bridge1 /interface ethernet set [ find default-name=ether1 ] comment=gateway speed=1Gbps set [ find defau...

Term

OK I found traffic is still slow. Tried to reset mikrotik and setup it again, same results. 300mbps max. if I'm connected via mikrotik with FTP cat5e

Term

cpu usage while speedtest is 94%. Just called with friend (mikrotik trainer), he told me, if I have PPPoE, mikrotik will go with about max 300mbps so I think the right way is setup ONT to router mode really.

Term

Hello, I have a problem with my home connection. My ISP is Telekom. Have ONT Huawei HG8245H Mikrotik RB962UiGS (6.42.1) FTP cables everywhere. My DL speed is 250-300mbps via cable. Tried to speedtest via MacBook Pro 2017 (gigabit ethernet) and via Lenovo laptop with gigabit ethernet too. Telekom's s...

Term

yeah that was a problem. App was not running. After running port works fine. Thank you

Term

Hello, have RB962UiGS (v6.41.4). In NAT have some rules and port works fine (added ports some weeks ago). Today I need to open port 55010 (for one app service in Synology) but it doesn't work. IP of Synology is 10.31.0.102. IP - Addresses Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWO...

Term

Already found a problem. My ISP blocks access to huawei because it's in bridge

So this problem is fixed for me.

Term

Now ping works fine to 192.168.1.1.
I added to IP - Firewall - NAT:
add action=dst-nat chain=dstnat dst-address=192.168.1.1 to-addresses=10.31.0.100

10.31.0.100 is IP of my computer

But I still can't access to huawei webadmin. Maybe it's not possible via this way?

Term

Hello,
trying one thing:
Have ONT Huawei with IP 192.168.1.1
In Port 1 have connected RB962 (with IP 10.31.0.1) so I have ip pool 10.31.0.2-....

I need to do some changes in Huawei. How can I get access to 192.168.1.1 please?

Term

Please show your configuration.

I already deleted rules because don't work. Maybe synology has option to do that but I want to use limit it via mikrotik.

Term

Hello,
have Synology NAS. DSM (webmin) is running on port 7580. All I want is acess to this webmin from lan only so I want to block it for access from WAN.

Synology: 10.65.1.10
PC in LAN: 10.65.1.15

I tried some rules but don't work. Can you show me the right way?
Thank you.

Term

as far as my knowledge goes, social sites, i.e. facebook is encrypted (https) and router can't see inside the packets

It works because no device can access to facebook after applying that rules. So it works but I need to allow that sites for 1 IP.

Term

Term

Hello, I need to block social sites like facebook etc for all users but I need to allow sites for 10.65.0.101. Tried two rules but it didn't work. Tried this: /ip firewall filter add action=drop chain=forward comment="Block Social Sites" layer7-protocol=\ "Social Sites" src-addre...

Term

Interface was in NAT. I changed it and it works perfect now. Thank you

Term

Hello,
today I found I can't connect to mikrotik via MAC address (neighbors) under VirtualBox. I'm MAC user. Any help please? Winbox can't find any mikrotik devices via neighbors.

Thank you.

Term

Please note I've included an "in-interface" in the drop rule there as well so it doesn't drop anything from your LAN /ip firewall filter add chain=forward connection-state=established,related action=accept comment="allow already established & related connections" add chain=f...

Term

Hello, another question about firewall from me :-) I'm too paranoid so I want to block everything I don't use. Have RBRB962UiGS. Using PPPoE from my ISP, SSH on another port, winbox. Curently I have ssh access only from LAN. Using p2p torrents too but I don't want to block them. Curently have this: ...

Term

I made something like this, don't know if it's ok. I somebody try to ssh 4 times in 15 seconds, it will block him. What do you think? add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \ protocol=tcp src-address-list=ssh_blacklist add action=add-src-to-address-list ad...

Term

I don't need to access to my mikrotik from outside (using VPN). My local dhcp is 10.31.0.0/24 My VPN pool is 10.31.10.0/24 So I added these pools in IP - services - ssh and winbox. But I want to see in some lists that somebody tried to access to my mikrotik from outside. Is there any way? karlisi: t...

Term

Hello, I'm new in Mikrotik but need to learn it because my new work :) Have RB962UiGS at home. Need to block SSH after 3 unsuccessful logins. I know there is a wiki with example but there are a lot of lists before it. I need if somebody will try login firewall will add him to SSH_Blacklist for 10 da...

Search found 92 matches