MikroTik

Thanks nickshore! We're also really looking forward to hosting this event again next year. We had a standing ovation at the closing ceremony last time which made all the stress and hassle of setting this up worthwhile. We already have about half a dozen already applied to present, but we are still l...

Thank you, what a pleasant surprise and especially that the event is held in cozy Prague. Cheers! There is a very good reason why we chose to host this event in Prague. Not just because the city is beautiful and the beer is good. :D It is actually because the very first MUM in the world was at the ...

Any updates on this? or at least for 2024? Apologies for the blatant spam... For many of us it has now been over 5 years since the last MUM. A few of us 'old guys' have had a number of meetings with senior MikroTik staff and they have no plans (at the moment) to deliver any MUMs this year. They are...

https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-wireless/client-load-balance.htm?Highlight=wifi%20roaming : "the wireless controller selects the least busy access point that is closest to the new client and this access point is the one that responds to the client and the one th...

Is it possible to set OSPF to react quickly when 60GHz link is broken, and react slowly before reverting from 5GHz when 60GHz link is up again - because it might be up just for a few seconds or couple of minutes? I believe it can, as already stated. "create a script that examines the link qual...

though the problem on how to force 60GHz to be detected as failed when link suffers but doesn't drop remains... would require netwatch or traffic monitor, definitely not the cleanest implementation when OSPF is the tool to cope with link states. Indeed - there is sadly no feedback about how "g...

True and a good point. But I can’t see any other way of doing failover reliably and achieve high speed without him having a router at end just as you also suggested but use L3 routing not L2 somehow. Using L2 bonding will only get you a system throughput speed of the slowest of the two links unless ...

This is Scotland and we get very heavy rain which has shown itself to be capable of cluttering sufficiently to make the 60gHz link drop out. We have customers in Scotland using LHG60's at 1.4km and they do not drop out. The throughput drops admittedly, but they don't drop out. We assisted them with...

Hi

If you're in the UK, give us a call on Monday - we may be able to help you get into the router and reset passwords etc without losing the configuration. But please don't play with the reset button, you may end up wiping the whole thing

Ron

WOW! Sounds like a lot of folks are stuck in Wifi 4 (Wifi 6 was just announced by WFA this Monday)! Wifi can do roaming, seamlessly with the phones which are in the market since 2-3 years! Its offered by couple of retail MESH solutions which work well, and is becoming part of EasyMesh standardizati...

No, with the more expensive systems that do "seamless roaming" it is the AP/controller that decides where the client is served. Of course that system also has some disadvantages and also the systems in the price segment where MikroTik operates do not offer this (AFAIK). I believe you are ...

In the MikroTik world, roaming is still "up to the client to do" In the whole world with every AP vendor and every client device, roaming is ALWAYS "up to the client". To clarify that - the client always makes the decision based on information it has learnt from the RF environme...

Totally agree with all of the above, however the question was "theoretical maximum"

When operating in 802.11 wireless mode, RouterOS conforms with the 802.11 standard, which sets a theoretical limit of 2007 clients per radio.

Regulation is the EU law.
But how to read "current tx power" values? On AC hardware is not displayed

It’s on Status tab for AC chipsets

By default, the value is left at zero on upgrade. Changing to Regulatory Domain mode, selecting a country, leaving the value at zero and clicking on 'Apply' generates a pop up error message. I've not been able to make it show me "3" by default. Plus... Since when is the antenna gain depend...

In your first post you stated "In Cisco it's called no enforce-first-as." Searching on this forum gave me this https://forum.mikrotik.com/viewtopic.php?t=43498#p221428 However from your further description in a later post it's not very clear that "no enforce-first-as" is actually...

I'll be arriving on the Sunday late afternoon, early evening, but I'm staying elsewhere nearby as I'm delivering an MTCRE on the three days straight after the MUM a short distance away. Seems I'm first on after the MikroTik 'New Products' intro. Which leaves me free for the rest of the day to man ou...

I can see the problem immediately. You are running far too high a transmitter power, setting all data rates to use the same high power regardless of MCS rate and as a result the transmissions are all going out distorted (google EVM) causing even short distance and nearby located devices from not wor...

MikroTik (normal wireless or CAPsMAN) does not support 802.11r fast roaming, therefore the RSN IE's are not transmitted by the AP in the first place

For anyone looking for the 'perfect setup' PLEASE do not use this. For a start, use "scan-list=2412,2437,2462" The scan-list shown in that post contains a list of 20MHz wide channels on Ch1, Ch3, Ch5, Ch7, Ch9 and Ch11 (which all overlap and interference with each other). Only ever use Ch1...

Thanks - I have edited my post to show the correct method.

If you enable radius, debug logging on the router does it reveal any clues?

no response yet but still with 3 day SLA. I am not aware that MikroTik offers any kind of SLA, let alone a 3 day one. If you want someone to assist you with this problem may I suggest you contact a Certified Consultant in the UK? If you purchased the MikroTik equipment from ourselves we would be ve...

The string is "MikroTik-Group=full" not "Mikrotik-Group=full" (and '=read' of course)
Try making that change and re-test

However, with the last firmware updates Mikrotik configured narrower radiation lobes with higher gain. I had to reduce power for my 30 m link. Maybe they should have the units retested with the new firmware. They’ve managed roughly 3dB more gain from tweaking the antenna beam forming algorithm. The...

Thank you for your praise. Always good to get positive feedback. Antenna gain is directly proportional to aperture size. Therefore to get a higher gain antenna, you need a bigger antenna. You can make some extra gain by increasing the efficiency of a dish antenna but you’re not going to get much mor...

part of the technical requirements for all outdoor usage in the UK is a 30dBi antenna. Firmware upgrades can't fix that. As a member of UKWISPA we took part in the Ofcom consultation process. The case was made that the 30dBi antenna limit should be removed. We can only wait and see what Ofcom decides.

did you make the changes I suggested? Also your images are not working

They've gone.

Just use this instead https://mikrotik.com/calculator

Appears I had the case of the group wrong. By me stating you use =Full or =Read, the MikroTik RB was trying to match the group name exactly. There is no security group called "Full" or "Read". It is "full" or "read". Apologies. I have edited my post to correct...

3.19 The 60 GHz Spectrum will be available for FWS applications across the UK on a licence exempt basis, subject to technical conditions and with the exception of three small geographical areas to protect MoD radiolocation systems against likely harmful interference from outdoor FWS applications. T...

After reading the MikroTik Wiki on AAA with Radius, some googling on setting up Windows Server IAS for Remote Access Policies, I worked out this... When you create the two Remote Access Policy Profiles on the windows server (one for full access and one for read access), in the Advanced tab of the pr...

Yes, design a skin for the user. Create a new end-user security group, assign that skin you have designed to that end-user security group, assign a new customer username and password to that security group - you can even test the look and feel without having to constantly keep logging in and out to ...

do u have the issue with the interface name which start from ether0 but not ether1 ?

In the router's device Template, on the network tab, under Name Format, change it to "ether{port1}" instead. Then the name and numbering will be consistent with MikroTik's default naming

Is there a way to clarify that warning?

I have corrected the Wiki

It now states:
"Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will not be applied for FastTracked traffic"

Hi Phil

If you give the supplier who sold you those two Hex 750Gr3's a quick phone call, they'll be more than happy to help you set this up and try to get it up and running for you asap!

You'll find our details below

best regards

How do I do that? You mean a backup of the config? In Winbox, click on "New Terminal". At the command prompt, type in "/export file=" and then type in some suitable filename to save the config to. Then in Winbox, click on Files, drag the saved file you just created to your deskt...

I suspect it's more likely to be due to MTU than a software version. Check your PPPoE Client MTU, MRU settings match those of the provider, remove the MRRU setting and check that the MSS mangle rules are correctly set. That said, you should always upgrade the RouterBoot Firmware to the latest sugges...

What's new in 6.38rc52 (2016-Dec-21 10:44):
*) ipv6 - fixed "accept-router-advertisements" behaviour;

All looks ok, except the MPLS MTU seems high - maybe it does not like that? The max size a MPLS packet can become with RouterOS is equivalent to 3 added labels worth, so I set MPLS MTU to 1526 as I can't see how an MPLS packet can ever get larger than 1526. One remaining thought is that MPLS/LDP wil...

export everything under /mpls and dump here. I'm guessing / hoping for a mis-config on the LDP settings.

But we had way more participants than space in the room.
It was a successful first MUM in the Netherlands.

Looks like it'll be the same in London. Over 350 registered already and probably of those, 250 will turn up. It's going to be full!

Sent from my iPhone using Tapatalk

As I am now about to leave for London and therefore may not be regularly updating this with any more posts before the MUM, here is the latest on the evening meal... I will be in the Hyatt's Hotel front Foyer / reception area from around 18:30 on Sunday evening onwards. For those coming in from overs...

busla
Please create a new topic, this conversation is not in any way related to this "New packet Flow Diagram" topic. Thank you.

Possible location? Flat Iron Denmark Street?
https://www.tripadvisor.co.uk/Restauran ... gland.html

I'm suggesting that if anyone wants to meet up for an evening meal on the Sunday, that we all meet up in the foyer of the Hyatt's Hotel at say 7pm? Any thoughts on a suitable nearby restaurant? A few of us have already requested a "steakhouse". I'm happy to find somewhere and make a bookin...

Where is placed "IP - Firewall - Raw" menu ?

Exactly where MikroTik said they put it. Just here...

Screen Shot 2016-10-24 at 13.05.02.png

Chris - We use IPv6 every day. Have done for years. It's actually quite easy once you get passed the initial scary "much bigger numbers than IPv4" stage :) However using IPv6 all the time does not guarantee you know what exactly MT will test us on! We've seen the syllabus, we have training...

I was on the agenda for 3pm now I'm 11:15am Also, it might change on the day itself again as well! Always very important that all speakers keep an eye on the board immediately outside the conference room at a MUM which will list who is on when or keep in regular touch with MikroTik staff throughout...

Hi to everyone attending, or thinking of attending the MikroTik User Meeting in London, UK! If you haven't already registered - do so now as available space is getting severely limited! http://mum.mikrotik.com/2016/UK/info/EN I thought it might be a good idea if anyone attending discuss anything 'Lo...

You have so many mistakes in your config it's hard to know where to start. But I'll try. You have based your config on the factory default one. The factory default config bridges ethers2 and 6 into a bridge interface called bridge-local. In turn, ethers 3, 4 and 5 are switch slaved to ether2 and eth...

No need to be so aggressive guys :) for a village it may be not so hard. OK, as per original request here is the flowchart: https://drive.google.com/file/d/0ByN8sxrVCg1_MjQyLXlXMXBYUzg/view?usp=sharing Here is the list: Broadband Modem - usually supplied by the ISP. MikroTik do not make Modems. Opt...

But atleast give me some basic idea of equipment and its cost

This is the same as saying, "Please supply me the list of parts I need to build a house. Thank you"
My thoughts on this: https://blog.linitx.com/wisp-box/

It does not appear to be supported. Please write to support@mikrotik.com for feature requests.

Please make these types of requests by sending an email to support@mikrotik.com. This is a user to user support board. There are no guarantees that MikroTik Staff will read your post. Always best to contact them direct and ask them to add SHA-2 digests.

now to find that special frequency. Also, is there a way to easily upgrade router os and install the rep package without doing 1 radio at a time? Once you have surveyed the radio spectrum for other stations and interference/noise, you may have an answer as to why your radio system is operating so ...

You mean, we can do OSPF + MPLS on a 850Gx2 also ? Can it handle per port 300-400Mbps even ? The performance specs clearly states that it can handle more than 300-400Mbps, so yes in answer to that - but you can read that for yourself on the link provided. Also all RouterBOARDs run RouterOS and Rout...

Nothing magical as far as I can see on our own WISP setup. I would suggest checking your spectrum quality. Do you have high noise levels from physically close by radios? Are you using excessive power levels? Is anyone else running excessive power levels close to you within the same radio band? See s...

If only I can get your email normis, I'll just be fine. Most of the time, I need replies asap but it doesn't due to the forum rules. I'd like to have your contact normis. I can learn a lot from you.

His direct email address is support@mikrotik.com

As InoX states, 'Bridge' mode only allows Point to Point connections. But there is also 'AP Bridge' mode. It allows multiple connections and the interfaces are bridged on L2 if also using 'Station Bridge' mode on clients.

If the AP has a Level 4 licence then set it to 'AP Bridge' mode and all the clients are set to 'Station Bridge' mode, you can have almost as many devices connected as you wish. No need for WDS at all. This is how we run PPPoE through to our customer's routers in our WISP. One Radio in AP Bridge, all...

No, not at the moment.

I doubt it. It has been said many times by various MT staff. Once they stop using the routing engine embedded in the Linux kernel and rewrite all their own routing code, they can then add the code to support IPV6 Routing marks. Yes, we were first promised it was coming in v6. Now we're being told v7...

Nick is correct. Also, if multiple routes have the same identical distance then the choice of order becomes: 1st - Connected Route, 2nd - Static Route, 3rd - Dynamic route (usually from a dynamic routing protocol)

Sadly the crystal ball is away for repair at the moment, but making a LOT of assumptions I am guessing you have tried something like this : /ip firewall nat add action=dst-nat chain=dstnat dst-port=8080 in-interface=pppoe-out1 protocol=tcp to-addresses=192.168.0.234 add action=dst-nat chain=dstnat d...

noviy - can you get in touch with us as we would like to print these professionally as posters?

Email me at shop (at) linitx.com

Hi Ostech.
Yes, you can contact us via LinITX.com or MultiThread Consultants. See signature below.

Hi Ostech Please call us. This is exactly what we do! :) Not only do we advise and supply WISPs with the equipment they need, we also run Training courses on how to use it. We also run our own WISP so we do quite literally 'practise what we preach'. Do please get in touch and we can save you a lot o...

I can definitely confirm that v6.7 fixed port flapping for a number of our customer's CCR1016's

Periodic Calibration enables the Atheros chipset to determine the current average Noise Floor level and also the (genuine wireless) signal levels on the channel, which in turns allows it to correctly set the Adaptive Noise Immunity system (if enabled), it also assists with calibrating a correct IQ b...

The forum is not the correct place to submit support requests to investigate potential bugs. You need to contact support@mikrotik.com with supout file so that they can gauge how large the problem is. I have this exact same problem with Usermanager on v6.6 in all browsers and OS platforms and submitt...

See also http://forum.mikrotik.com/viewtopic.php?f=10&t=73813 Normis - I cannot give you remote access to a 6.1 system as with it not working, we had to go back to 5.25 very quickly, where it works some of the time. We still get a lot of timed out errors but if the customer creates a new account...

Hi paka There are a few problems with the UI of UM which has been there since v5. Sometimes you log in, and all the tables are blank. Well, the cells are all drawn across the page, but there is no user data populated into each cell of the table! You log back out, log in again, "bang" all t...

Neither do I know what was changed, but we had the same problem and had to quickly go down back to 5.25 before we lost too many more customers! :-( We were stupid enough to do this just before a busy weekend when we had a large number of visitors to the Marina. It wasn't until two days later, on Sun...

Not possible via the web interface sadly, but you could try this from a script? :local text ("This is a message I want every one to get"); :local recipient; :set text ($text . "\n"); :foreach i in=[/tool user-manager user find disabled=no] do={ :set recipient ([/tool user-manager...

This may help you understand just a small part of the problems you will have:

http://blog.linitx.com/wisp-box/

you mean, do something like supout viewer in your MT account, but with GUI?.. Yes, so I can click around full GUI and look at settings, see everything just at the moment it crashed or generated the supout file. Sometimes user is not happy to always allow us full live access, sometimes the config cr...

This has been acknowledged by MT as something that will be fixed in the next release.

Thanks for thinking about this. When you say the file would be very large, you mean Winbox will become very large? If so, then I agree as of course it has to be included inside the files onboard the RB to be downloaded and that would be difficult to find the storage room for, but some kind of "...

While talking with some guys at the MUM in Zagreb about supporting remote users with unstable or non-working configs, it suddenly occurred to me that it would be very useful indeed if it was possible to take a supout that a client could email to us, and we then could load that into winbox as a "...

Im sure there is a wireless MIC that the presenter can clip onto thier shirt, and plug directly into the camera. The problem for MikroTik is how many different models would they have to carry with them? Every Country has it's own local laws about what equipment can be used on what frequency, for wh...

Not yet anyway. It's not in v6rc12 that's for sure. Also, be careful to compare this against the likes of Ruckus! "Apples and Pears"

Here is a sample of the HD video of last year European MUM: http://www.tiktube.com/video/JDfF3elHclmLlHoEnoDxLvHumlKomKJm= What improvements do you wish for? Sound is good, video is good, you can read the slides. What is missing in your opinion? What purpose is for multiple camera angles if all you...

Can someone from MikroTik PLEASE bring along an audio cable to connect the TikTube recording video camera to the Hotel's Audio PA system used for the presentations this time, if the hotel cannot guarantee they have one? I am tired of hearing the audio being recorded from the built-in microphone of t...

Thanks for that info so far. Reading on other forums I now see that some guys have had whole batches of these with sticky relays and early failure of the case cooling fan. I am hoping that this exactly that, a batch problem, which has now been resolved.

About to roll out a large network where we will have multiple Mikrotik radios, about 6-8 of them per site, depending on sectors required and backhauls etc. Been looking for solutions to not only power them all, but control/monitor the power remotely. I have seen these Digital Logger guys mentioned o...

shame you are not using telnet then! Like I said, I do not believe the api command will ever complete as the scan will break the api connection. Which I believe is the reason why you cannot make it work with api.

Yes, Telnet WILL work, but try connecting to the SU with winbox or SSH while it's scanning. I am sure it will disconnect you. I find Telnet is insecure, but very good for making a remote scan. All other and more secure connections always drop before the scan is complete I find.

Then if the developers knew this limitation of the chipset, why not remove this option from the command set and winbox to stop you trying to set it?

Is this limitation documented in the wiki? I can't see it anywhere.

Probably because when the SU scans for occupancy of the spectrum it disconnects from your server and therefore as you no longer have communication with the SU, it returns no data ?

I have no idea, as I have no information on your setup.

Hi Normis So, to clarify, the black circle on the right is the actual physical DC socket mounted on the outside chassis itself or a hole in the chassis through to the inside DC socket on the PCB inside? Also, the metal clips stamped out of the casing are there to wrap the cable around to reduce the ...

I've had TheDude running on RouterOS under vmware 3 and 4. Not used v5 yet. Not needed to upgrade the vmware box. "It works"

The RouterOS is actually v5.15, with the dude v4beta3.

just tried a few various ideas and it looks like a "feature"

Even greater fun when the customer rips open the lid with brute force and pulls off the tiny delicate LCD ribbon cable off the LCD. I think the PSU lead is not a good design. I know the business reasoning "make this as cheap as possible, it's a CPE" and "stop the customer from acciden...

Do you really need windows? If you install TheDude onto RouterOS I find it is very reliable. My v4beta3 is very stable on v5.x. Normis stated a few months ago that TheDude was written in the MikroTik's engineers' spare time and is due to have a new version release 'soon'. But I guess the launch of t...

what happens when you use

/ip dhcp-server lease remove [find host-name=""]

Yes, simply add firewall filter rules in the forward chain and match the in-interface of the hotspot, match destination IP range of your domain IP subnet and add an action of drop. Now no traffic can be sent from your hotspot network to your domain network. If you want to make the rule complete then...

If you're not using NAT, why even have connection tracking on? Are you using mangle rules with connection mark perhaps? (there are other things that stop working with connection tracking off but usually if you don't need NAT, you can turn it off) It may help? Definitely I can 100% guarantee to you t...

just waiting for routing marks on ipv6 to be implemented (and work) and I'll deploy....

Until then, I have to stay on 5.22 "stable"

5.22 packagesare available on download page.

Nope. Sorry. You've removed every other version! They have all gone. They are no more. They have ceased to exist. (I could go on, but that would infringe the Copyright of Monty Python! LOL)

Edit: And, they're back again. As if by magic!

I would rather fly directly into the city I wanted to go to, than fly into another country with EasyJet LOL (Having flown many times with EasyJet and "BrianAir" I am no longer keen on any of them) Mind you, BAA are just as bad with their "London (insert name of city that is no where n...

I think that mikrotik need to look for a solution because the PPPoE interfaces are dynamics and don't need to be exported. Unless you raise this as a support ticket, Mikrotik will not know it is a problem. You cannot guarantee that they read every post on here. If I was of some help, please raise m...

Deejam - If you want to obtain statistics on what private IP addresses are used, e.g. (stupid number picked at random) that 192.168.0.1 is used by millions of people and as a percentage that comes out to 90% of all the Private IPs used... what is the purpose you need that data for? To know which IP ...

NAB: http://forum.mikrotik.com/viewtopic.php?f=8&t=63338&p=340728#p341323 Release date depends on how much free time they have - if it's like my free time availability, it ain't going to be any time soon! :-( I love the Dude... couldn't do my job without it. But the bugs (sorry, undocumented...

took some googling... as even the ITU has the wrong details for this Member State's Regulatory Authority!

http://www.anac.cv/index.php?option=com ... 2&Itemid=9

Both 2.4 and 5.8GHz is available licence free. However you must register your frequencies and locations of intended usage to ANAC. I don't have specific details of the exact channels permitted. But if you contact ANAC, I am sure you will (eventually!) get a response.

Is this is a PPPoE Server? If so... this is 'normal' :P It is trying to enumerate all the PPPoE client interfaces and export them. Which it then forces the RouterOS to go into 100% CPU and eventually the command takes so long to perform that it times out. Disable the PPPoE Interface, wait a few secs...

NAB said "I won't leak anything here", but Ron had no problems with that ;) Oops! Well, the 'official' announcement email from Mikrotik I had, didn't actually say there was an embargo! Sorry. Normis, I'll get you a beer at the meet and greet as an apology..... oh hang on, it's free anyway...

Errr.... because it is under 'Useful Tools and Utilities' and not under 'RouterOS'? Do you store your kitchen cooking utensils, pots and pans in your garage?

The things that I do for you guys!

Screen Shot 2012-11-14 at 12.57.53.png

We are definitely attending! I cannot agree with you more. I have thoroughly enjoyed every single MUM I have attended (although some have been in the middle of nowhere with limited bars/restaurants nearby :-( ) Let's hope this is at somewhere like the Westin Zagreb Hotel and not miles outside the ci...

Didn't you read this? Yup - sure did. Which is why I made the comment. I find it crazy that a software developer could create an error message that makes no sense. That is not a 'small bug'. That is poor quality control. But like you, I am entitled to my opinion and as I am getting older, I can mor...

Yeah, there is a small bug in the way this error is displayed, but what did you expect to upgrade to? This IS the latest version after all, of course it fails :) I would expect the error to actually correctly identify the real error which is "you are already at the latest version" - feel ...

v-sat. We bought Radius Manager (v3) a couple of years back, but we were never able to get our billing method to work with it. We were assured again and again in emails it would do it (and Viktor IS very good at support) however despite all the assurances, it did not do what he told us it would. I b...

This is affecting more than Mikrotik UM users... http://support.shopsite.com/KBase/questions/2548/ and http://www.tipsandtricks-hq.com/forum/topic/paypal-ipn-changes-as-of-oct-1 and http://www.lexiconn.com/blog/2012/09/drop-paypal-standard/ This is also a useful page to reference : https://ppmts.cus...

I can't move any of our clients that are currently using bonded ADSL lines over to IPv6 for this very reason, the lack of routing marks on IPv6

Plus, time is running out.

There are two very different products here. Centralised management of a large number of APs where you can make one change in one place and it is replicated to every other AP. That is not the same as a centralised controller which takes the raw packets from each AP and processing them in one location...

It's not a PTP connection. It's an Access Point. He's trying to secure traffic from people who have knowledge of the pre-shared key. What I said still stands, which is; knowledge of the Preshared Key does not provide access to the data from another client connection (and yes, agreed if forwarding i...

How can someone 'join the network' if the connection is a point to point WPA encrypted wireless connection? Sniffing does not allow one to obtain the clear text from the cipher stream, even if one was on the same wireless network. Despite your statement, even using the same password will create a co...

If you are using WPA, then every client gets a uniquely different encryption stream, therefore knowing the passphrase key is not enough to decrypt the traffic. Try to use AES not TKIP! It is more secure and provides a higher data throughput.

CAN I ATTEND THIS COURSE FROM MY OWN PLACE THANK YOU We are not conducting the MTCWE training at your location. We just did one at the MUM in Warsaw and our next one will be in the UK. If you want training in your own country we can do this, however the cost would be prohibitive unless there were a...

and for those who really can't wait any longer to find out the colour of the shirts... It's like this one :-D http://www.fruitoftheloom.eu/images/imprint2012/product_shots_cached/61-036-ZU_RGB_tb_front.jpg There are two types of shirt, one with routerboard, one with Mikrotik logos. If you are really...

http://mum.mikrotik.com/presentations/US07/v3.pdf

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy

developed, i said "engine"
http://www.mikrotik.com/documentation/m ... proxy.html

That was in version 2.5! We are now on v5.

The Atheros chipset makes available to the OS what pulses it sees on the Physical RF layer - it is then up to the OS to decide how to interpret those messages. But different chipsets provide different levels of data, some better than others. So it is also hardware dependent as well as down to the OS...

RouterOS uses squid

That's no longer correct. It's been completely rewritten and is now completely Mikrotik source code, not squid.

I've now arrived and can report some potentially useful info... When you come into the foyer of the Airport on your way to outside, you will be approached by a large number of taxi drivers asking for your business. I was warned that you can't guarantee these are genuine licensed and insured taxi dri...

in apparent violation of 802.11 protocol I was not aware that it was mandatory for beacon Management Frames to have a valid incrementing sequence number. Only that it has one. Which it has, except that it does not increment. Have you got any reference material to show that a "genuine" inc...

I believe that without some scripting, Dynamic DNS updates from the DHCP server is not possible

I have a Microsoft ISA Server 2006 in front of my LAN, and all the traffic going to the Internet is directed through ISA Server; so I have a NAT rule only for my ISA (srcnat src.add:172.18.90.19(ISA) action:masquarade). I have two ISPs, one is connected via a Mikrotik port (ether4) (ISP1) and the o...

we can integrate the Mikrotik router with Windows 2k8 Active Directory?

what do you mean 'integrate'? It can't replace the DNS server within 2k8, no.

and for the benefit of the many thousands that may visit this forum again in the future, the solution was.....?

yes, there is some more info I need, the answers to my questions? ;-) and stop using screen shots, use the export command on the various different parts I'm asking for details on :-) I can also then copy and paste them into test rigs I have here to simulate what is going on with your network here in...

TKITFrank : OK, thanks.

NetworkPro : Our intention is similar, to identify the traffic and then we can place the traffic into appropriate priority queues.

/ip firewall layer7-protocol add name=HTTPS regexp="^(.\?.\?\\x16\\x03.*\\x16\\x03|.\?.\?\\x01\\x03\\x01\?.*\\x0b)" add name=GNUTELLA regexp="^(gnd[\\x01\\x02]\?.\?.\?\\x01|gnutella connect/[012]\\.[0-9]\\x0d\\x0a|get /uri-res/n2r\\\?urn:sha1:|get /.*user-agent: (gtk-gnutella|bearsha...

I can't see any problems at all. Just do it. If your set up is "simple" I see no problem. If the server is a domain controller, make sure the scope options are the same as what you would get on the dhcp server on the 2K3 server. I.e. Set DNS scope pointing to the DC server and domain name ...

the problem is that the WDS protocol is based on a modified packet header to add the extra MAC address needed, but no one really nailed it down as to exactly how the header was to be modified to add it. :-( So, each manufacturer did it a different way. There are some common ways, because there was o...

I'll be there , looking forward to the talks , especially Ron's on OSPF.

gosh!

After a few seconds looking at that, I am concerned with some of the logic behind the routing. On PES 10.10.2.1 you have a default gateway (0.0.0.0/0) pointing at itself. It is also pointing to a bridged interface bridge1. Please list the ports that make up that bridge interface. Also you state that...

:local date
:local day

:set date [/system clock get date]
:set day [:pick $date 4 6]

:if ([$day] = "03" ) do={ :log info "This runs" } else={ :log info "Does not run" }

I might think about it.

create a username and password in the hotspot, then add those username and password fields as hidden fields in the login form.

What we have done is set a daily scheduler that runs a script that checks what day of the month it is and only runs if it's the right day of the month to process the remaining part of the script, if it isn't, it just exits.

I believe if you use a single name such as "srv" it will look for the IP via NETBIOS and will fail. If your server has a fully qualified domain name, such as srv.local and then were to add srv.local in the Mikrotik DNS server, I think you will have better luck as it will then use DNS corre...

You've got roughly 10dB difference between Tx and RX on both clients and also although they are the same distance, they have a 15dB difference in signal strengths. I would say it is a problem with the RF side itself, could be cards, coax, aerial... who knows without a lot more diagnostics and info f...

I presume this is with a 3G USB dongle? Does the dongle firmware not do this by itself?

We can't see over your shoulder - help us, to help you, by telling us your config ?!

you haven't posted every part of your config, but one suggestion is to say that the rule you have for forcing non-paid users to be redirected does NOT apply if they are trying to get to the PayPal whitelist of addresses, like so : /ip firewall nat add action=dst-nat chain=dstnat comment="redire...

We sometimes attend the regular monthly meetings in Oxford, England called "Oxford Geek Nights". English pub full of geeks, free beer (usually from Google), a lot of talking about IT, technical micro-presentations (some only lasting a few minutes), socialising and meeting new people in tec...

He can go to the bottom of the API wiki page as you suggested, but it is still the same URL and the file has been removed from their web server, as it is the same URL he printed above. :-( I have searched around the website and it has been pulled. Maybe as they sell the software, they did not want t...

I will support NetworkPro's suggestion. I have tried various ROS versions, upgrade/downgrade but always a problem. Then, changed it for a NIC with an Intel based chipset, no more problems. Might be a problem with the hardware chipset, might be a ROS driver problem. Who cares, I now know to stay away...

You are going to have to provide a heck of a lot more information and as this is a free forum, any solution is going to take some time to resolve. So bear with everyone?! If your needs are urgent, I really think that if you don't know how to fix this fast, you would be best to hire in the service of...

Hi, can someone please tell me what are the differences between Wireleless Distribution System and Virtual Access Point??? thanks Roughly the same difference as between an Orange and a Baseball Bat. ;-) WDS is a system whereby two access points can be set up to allow them to pass traffic between th...

I have problems with a RouterOs5.12 R310 to install ... I get error when I try it from the CD. Can not find the disc. Posting multiple times in multiple forums will not get you a faster or better response. :-( Post just the one time in the best forum after some careful thought or create a whole bra...

Add a new address list of every website and IP address that paypal uses, including all their cookies and adverts (search the forums for many complaints of PayPal not working correctly in Hotspot!) Make this addresslist become a bypass rule as if the customer had paid, for those destination addresses...

How about changing the Destination IP address for an in-interface? /ip firewall nat add action=dst-nat chain=dstnat disabled=no dst-port=81 in-interface=ether1-public protocol=tcp to-addresses=192.168.123.65 to-ports=81 Although, this does not help if you're allocated say a /29 block. A netmap might...

Is the data from here http://www.countryipblocks.net/country-blocks/cidr/ or your own live constantly up to date creation?

Would you like to share how it was # I mean was it just general questions regarding mikrotik networking, topics like chain,routing,firewall,queuing etc? # at which location you gave the exams ? in which countries this exams is available ? # What was the fees ? See here... http://www.mikrotik.com/tr...

This guy says he is not even getting a return packet from the server? So the client is not even seeing any reply?

Some ideas to try... In winbox, when you click on the [...] button, does your routerboard show up? That will tell you if you have connectivity to the router. Try all the different ether ports in case there is some kind of firewall rule on the router. Turn off any firewall on your PC. If the router d...

the link does not work

then, bottom line.. run packet sniff and analyse data with wireshark, something is going wrong here, if you think there is nothing blocking it, why is it not getting reply?

In my case, I pretty much think this is a bug, as the error message is that the client is getting a message from the server that the time is not synchronised, when it is! For you, if you're using a Microsoft server, there are some tweaks you have to make in the Registry. Search the forums, there are...

There is no example exam. The purpose of the exam is to test your knowledge, not to test if you can pass the exam by knowing what questions will come up. :-) If any questions were ever to come into the public domain, they will be removed from the question pool anyway by MT, so you will not see those...

Odd - I'm getting the same! (RB493G v5.5) Except mine is trying to talk to another MT, an RB1100 on v5.5 E.g.

NTP.png

Re: Fruit of the Loom "eh? each MUM gets their shirts made elsewhere."
Because when I looked at T shirts I had from previous MUMs, they were all from that supplier!

But I understand that maybe like bad capacitors, you got a bad lot and switched suppliers.

and the log says? Or if you attach serial cable and watch boot sequence, is there more information?

Saudi Arabia permits WLAN services on 5GHz (Cisco claim on channels 100,104,108,112,116 132,136,140 149,153,157,161) subject to some conditions See also http://www.volny.cz/horvitz/os-info/saudi.html and more importantly from the Kingdom of Saudi Arabia's National Frequency Plan itself.... http://ww...

no, it's only function is to make files available in the local network, for accessing from Windows computers via file sharing. you can attach a USB drive to the routerboard, and store some files there, to be accessible from your connected PCs This is perfect for Training and makes it much simpler f...

I'm still stunned by the simplicity of this. The amount of hours I must have wasted over the years having to remove all the default 'rubbish' from a config. Thank you Mikrotik!

Check under IP > Services that api is actually enabled.

Good call as by default API service is disabled.

but here it goes:
http://wiki.mikrotik.com/wiki/Manual:IP/SMB

Thank you

two colors you missed: http://mum.mikrotik.com/gallery/v/US11/DSC02402.jpg.html I discounted this one as it did not appear to me to be from Mikrotik. I have included it in the "Mikrotik MUM T Shirt Lotto colour chart"! http://mum.mikrotik.com/gallery/v/EG07/picture-24.jpg.html (this is no...

If the remote device has a fixed IP and you are worried that some bad guy unplugs this good device, then changes his laptop to the same IP as the good device, it is very easy to block him from getting internet. :-) Look in ARP table (IP/ARP) change the dynamic ARP entry for the 'good device' to a st...

It can't be harmonics unless the UHF Two way radio frequency is exactly one half of the frequency of the 900MHz signal. More likely is 'blocking'. In which case there are two solutions, distance and filtering. Distance, make the two antennae, coax cables boxes and DC power leads for the two systems ...

If you can physically get access to the board's connection at the bottom of the tower via it's CAT5 connection, have you tried connecting via MAC-WInbox? Does it get listed when you click the [...] search button in WInbox?

The time does not matter. They will be looking for PCI codes and driver info etc. But also see my edited info

It's quite possible that the CF card is not supported. I had this with a CF microdrive on my RB532A as well. Took many hours to 'format' and really it was doing nothing. So, if you get nowhere with this, try sending supout to mikrotik they can quickly tell you if it is supported or not. Here was the...

1. Can the web server ping the router ok? (proves the physical connection is ok)
2. Create a new php file with just:

<?php phpinfo(); ?>

- Does that work ok? (proves php is installed and working ok)

just that some OIDs has been changed to comply with publicly available MIB files

Which ones?

Re: SMB Support.
No documentation.

E.g. http://wiki.mikrotik.com/wiki/Manual:IP/SMB

whats wrong with this script.....

What has this to do with detecting a fake virtual Mikrotik? You should not 'hijack' an existing post thread that is nothing to do with your problem. Please create a completely new forum post.

I have the wlan4 and wlan5 set to station mode If your intention is that the Mikrotik will broadcast like a normal AP, then you need to change the wlan cards to AP mode, not station. There will likely be more to change, but this is your first and biggest change so that you can start to see the sign...

I meant for connection directly to mobile clients, as you suggest, like mobile phones. Of course, it is always possible to use 900MHz for a point to point fixed link, whether it is a backhaul or a client. From the original posting I got the idea he wants to connect to many users over a large area (h...

OK, let's join in with the game! Colours used so far that I know... http://www.fruitoftheloom.eu/images/imprint2012/product_shots_cached/61-036-30_RGB_tb_front.jpg http://www.fruitoftheloom.eu/images/imprint2012/product_shots_cached/61-036-47_RGB_tb_front.jpg http://www.fruitoftheloom.eu/images/impr...

That makes no sense at all! You said you had removed default configuration of 192.168.88.x yet, you are adding a route to this network, which is on the pppoe interface?

Well, OK, if it works and you're happy, that is most important thing I guess.

So maybe you can now help everyone else and tell us what you found?

I have no idea...

Ask Mikrotik support?

Really looking forward to the MTCWE http://www.nestwireless.co.uk/ Ron !
Nick

The things you'll try to get a discount! Thanks anyway.

In fact the new APC UPS that has the blue LCD (eg 1500VA models) and both the RJ45 with RS232 DB9 adaptor and USB socket can output to both connectors at the same time. So if you have two windows servers that need protection with Powerchute, you can connect both cables. Before with the old models, t...

http://www.flickr.com/photos/35916008@N07/sets/72157628858340471/ what is THAT ? A photo of my mobile phone while I was a few hundred feet below the surface inside the Salt Mines with full signal and connected to phone network! Of course, there are MT staff who take some much more interesting photo...

The new APC UPS now has a new 'secret' and completely new protocol, they have refused to license the protocol to anyone, even Microsoft, so there are no details as to how this new protocol works. :-( But, if you have a APC UPS with a USB connector, then you are still in luck if you have a RB with a ...

If this were overshoot, how come he can get a really good signal when he's right under the antennae, yet when he walks away it gets weaker and weaker? If it were overshoot, it would be the reverse in that as he got further away, the signal would start to increase but be very weak when he's right und...

OK - just export the whole entire routerOS config here please - otherwise this could go on forever!

I gave up on backup/restore years ago. Except for when I am making changes and 'playing' with new configs as then it is a fast way to go back a stage. Our network backups every night using export. We still need to edit the text file created to remove MAC addresses and such like if we are going to re...

Wierd? Yes, Security hole? No. A "feature". Probably!

There is no need to specify both the interface and the address. Get rid of the address, leave just the outgoing interface. I said before "you must change src-nat to your pppoe interface". (Also, stenlyto said the same) :-) Your config shows you have now changed your masquerade to your wire...

I would be interested to see what happens when you add logging to the rules immediately before your first rule.

/ip firewall filter
add action=log chain=input disabled=no dst-port=500 in-interface=pppoe-out protocol=udp src-port=500

Search found 725 matches