Hello everyone, I have been doing some research and looking on the forums and on Mikrotik Wiki Page. On how to do a static IP ARP MAC binding. I want to do this on a Mikrotik 4011 that is converted over into a Switch. This is what I have done so far, I go into Winbox > IP > Arp > Add = IP Address > ...

Hello everyone, Has anyone experienced this issue? I am running a Mikrotik 4011 as a switch, I do my configurations by WinBox, when I enter the Main Static IP address to be used in Quick Setting, than I go into IP>Address and I enter a new Static IP address for a different port to use (I have this o...

Hello all, I have come across this problem myself, what happens is its the clients end, you normally see a MAC Provided address and what interface or in this case if your using the Wireless its going to say bridge. You will have to track down the client down with their MAC address and get there IP A...

Thank you all so much, this really helps me out a lot. Going to try these, thanks

Hello everyone, I saw this on Mikrotik Wiki on how to help prevent people from using Port Scanners to find out what ports we use on our routers. My Question is if I use this rule (Below), and use the Forward Chain command, will this automatically drop those IPs that are trying to scan on our network...

I'm coming back trying to solve this on my router... I have 2 WANs. One has a /30 gateway connection and a /24 of public space assigned to me. It is the primary WAN that all traffic should flow over. WAN 2 has a DHCP address on the WAN side and no public space. My LAN port has a handful of VLANs on...

In order for you to have a fail over, lets say Site 1 were you want the Fail over to be in place has 2 WANS you are allowing in. So Site 1 Router, will need some setup. Lets say we are using a new Router 4011 with 10 ports. :) So Site 1 has an IP Address with the Network 192.168.254.0/24 Site 2 Rout...

Ah, thank you

Hello everyone, I have a Hex PoE Router: RB960PGS: I was curios to know if anyone knows how to Convert the default WAN Port Ethernet 1 to be used for Port 2, so we can use PoE for our Bach Haul. I already have taken the Port 2 off the Bridge and changed in the interface list for WAN to be ethernet 2...

Hello everyone, I am wondering if anyone else is experiencing this issue, we deploy ePMP 1000 SM (Subscriber Modules) to bring internet service to the customers home. Lately with storms and such and when the customers SM gets hit by lighting, it will create a loop in our mikrotik router. Is there an...

Hello everyone, I been keeping tabs on what has been going on with these botnet attacks and I took notice to my Mikrotik routers, I wanted to let you all know about these IP addresses that I found in my Logs in my Router OS. IP Addresses: 185.153.198.228 and 183.131.109.25, These two IP address have...

Please listen to the people saying this is not possible. If anyone could redirect HTTPS, what's to stop anyone on the internet doing that to google or a banking website? Redirecting HTTPS is only possible if you also own all the client devices and have installed a MITM root certificate into the OS....

Create group in address list and move customers(who not pay) to this group. In firewall do "redirect" to you web-server with message "Pay for services" . Could you give an example of how to do this and create the group and how to redirect them. Would be very appreciated. Thanks.

When you change www in IP->Services to some other port, it only affects http server on router. It has absolutely nothing to do with other http servers. Also to access WebFig on this new port, you don't need any dstnat, just allow it in input chain (whether it's the best idea to have WebFig accessib...

Hello everyone, and a big thank you to all of you for your wonderful tips and help, I still cannot access the customer's DVR through the other ports 10554. 8000, and 81, even though I know I have the configurations setup correctly. However, I can get into the customers DVR with Port 80. What I had t...

You have to specify ports in chain and in action too like below: ip firewall nat add chain=dstnat dst-address=XXX.XXX.XXX.XXX dst-port=81 action=dst-nat to-addresses=172.xxx.xxx.xxx to-ports=81 XXX.XXX.XXX.XXX your router public IP Retype this for all ports. Don't forget that ports should be open o...

Hi Sob,

Sorry, yes the x.x.x.99 (private Class B address) is on the mikrotik router its the LAN and its private, for security reasons I cannot give the full encapsulated IP address.
x.x.x.72 is the WAN IP address this address is a public address which is used for the mikrotik router.

Hello everyone and thank you for taking your time in reviewing my struggle with my port forwarding woes. We have a customer that needs his DVR Camera port forwarded from our network, we gave him a statci address for his DVR Camera System with X.X.X.99 (class b) and his DVR Tech people have it setup ...

look here https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Destination_NAT Ask DVR guy to change ports from 80 to eg. 40080 and follow above examples for port 40080. You can also redirect external 40080 to port 80 on DVR to have DVR working. Thanks Bartosz, the link you provided is just how I ...

Hi Squeeze, and thanks for your reply, ya I understand that port 80 is the default for http (non secured sites), but that's what I was told by the customer from his DVR tech support guy! If you could provide a demonstration on how to set that up in mikrotik it would be awesome, I am very new with Mi...

Hello everyone and thanks for taking your time to review my submission. I had to setup in the mikrotik firewall under NAT rule for a customers camera system they have installed at their premises. They have a DVR that they can login to view the live stream at all times. Currently I have the customers...

I know this forum is old and outdated and I hope you got your OSPF up and running, You have a HQ Router, that HQ router has to have those networks built into its router system so it can send off the network packets so the other routers can see each neighbor, they have to have a main station HQ that ...

Thank You, that is helpful, but, I was told that you could create a splash page with out using hotspots from my boss. You setup some port forwarding rules and a dst-nat to be redirected to a splash page. Basically what we want to do is if the customer needs to update their payment information, it wo...

Hi Crazyleg, I am curious did you ever find your solution to this? because I would like to do the same thing to.