MikroTik

victorsoares

Your options are, MAC telnet, MAC Winbox, serial port or reseting and running a backup you might have.

victorsoares

For BGP I recommend Cisco, Juniper or VyOS for a cheaper solution.

victorsoares

You should post your DHCP configuration so we can help you further.

victorsoares

Working fine here, except for the upload/download option.

victorsoares

Anyone else having issues resizing windows? Every time I try to resize any windows on Catalina the app crashes. Am I doing something wrong or is this a real issue.

victorsoares

Victor, macOS has a built in tool "Automator". It's very powerful and you can create apps easily. Like this for example:

Screenshot 2019-10-15 at 16.03.07.png

Thanks normis!

victorsoares

I know it's probably something dumb, but how do I create a shortcut for this on Catalina? I always used PlayonMac to do this things, but for now the app doesn't work on 10.15.

victorsoares

While you are waiting for the new 64bit exe file to be released soon, you can already prepare your macOS catalina systems according to these instructions: If you have used Wine previously, we recommend you first delete the previous Wine application and the Wine settings directory in your home folde...

victorsoares

While you are waiting for the new 64bit exe file to be released soon, you can already prepare your macOS catalina systems according to these instructions: If you have used Wine previously, we recommend you first delete the previous Wine application and the Wine settings directory in your home folde...

victorsoares

Screenshot 2019-10-11 at 15.12.52.png

=O I want it sooo bad. MacOS beta Developer here, I would be happy to send feedback on it.

victorsoares

>> As the acronym states "Wine Is Not an Emulator" and thus if the OS kernel doesn't allow 32-bit code execution nothing AFAIK can be done. Codeweavers is working on a Crossover version that executes 32bit. But it seems to be hard. https://www.codeweavers.com/about/blogs/jschmid/2019/9/10...

victorsoares

Finally some light on this subject. Winbox is great, but unfortunately it's days are counted as it is now. I really hope that a 64bit version is close to us.

victorsoares

Well, right now I'm running macOS Catalina with a VM running Windows 7 just with Winbox running. It seems like a huge waste of resources, but it's the only way I found to run this application without having to ditch my beloved OS. If Codeweavers or Mikrotik could find a way to make this work it woul...

victorsoares

Well, end of the line for me. I just updated my MacOS to Catalina and said good bye to Winbox running on Wine. Tried installing the beta version of winehq 64 but had no success. If anyone here is in the same situation and had more luck than me please share your solution. Right now I'm using a VM to ...

victorsoares

Well, from my experience the only sure way to get videogames to work without any NAT problems is using IPv6 or giving the client a valid and public IP address. My guess is that whoever designed this network used NAT to distribute the connections but forgot that the connections also arrive there on ...

victorsoares

I agree with Anumrak, default firewall is the best solution for 90% of the cases, on the other 10% it's a solid base as well. So unless you have some specific needs on your firewall, default will do you just fine.

victorsoares

Yep, that's an old thing with Winbox. It works fine on the web GUI, but not on Winbox. I usually do the graphing on an external solution, like Zabbix or Observium, and that's what I think it's the best solution.

victorsoares

I use 4 of them for BGP. If I could choose now I would use 1036`s instead, for the processing capabilities regarding BGP. I've seen people using full route on them, but I found, at least with my experience, that this usually is not a good idea with mikrotiks. I run an average of two BGP sessions on ...

victorsoares

One way to solve this is using NetWatch, and set a ping to 8.8.8.8 or some other address that you want. Then set the script to change de default route to the second ISP if the ping fails. If possible ask your internet provider to set your routers on bridge, this way you can avoid double NAT and also...

victorsoares

My solution for this was to set the alarm systems that I have on my remote switches to be able to turn the electrical plugs on or off. That way I can set routines on the alarm or just do it from my mobile phone, plus, I can monitor current and all other sort of things in the environment, such as A/C...

victorsoares

I honestly don't care much for this feature, never had any luck with it. I know that there is a post here somewhere and they explained how they define if there is internet connection or not. I just turned this off on my routers.

victorsoares

Let's not leave this post to die. I'm pretty sure that a lot of us use either MAC or Linux, and a "MACbox" or "Linuxbox" would be of great use for lots of us. I don't think that it's too much to ask for our dear developers.

victorsoares

From my experience you better of without full route on mikrotiks, or try a different solution like the colleague said. I personally like VyOS, it works very well, is open source and very smart with resources.

victorsoares

My guess is that your Winbox version is too recent to authenticate on 3.19. As the colleagues said, upgrading your ROS should be the first step, but just to login you should be fine with an older version of Winbox.

victorsoares

This looks to be a common problem with this version, at least for what I've seen. I myself didn't have this problem on my RB750GR3, but also didn't have the balls to upgrade my CCRs on the ISPs that I run. I think that next steps for you would be to put a static IP on your PC and try to connect dire...

victorsoares

What version of Winbox are you using? Try the latest one (3.19). If that doesn't work, there is always NetInstall.

victorsoares

Can you post your ppp server settings and interfaces so we have a better understanding of what might be going on?

victorsoares

Same concern here, I use Mac and rely heavily on two 32bit applications, Winbox and Google Earth. Both of them will not work with the next update for Macs, therefore upgrading my machine is not possible for me at this moment. I really hope that Mikrotik will eventually make an UNIX based Winbox that...

victorsoares

You may want to check this information with official Mikrotik distributors in Brazil. Here you can find them: https://mikrotik.com/buy/latinamerica/brazil I work with ISP`s in Brazil that use Mikrotik heavily and never had any problems with ANATEL. And I've been visited by them, so I don't think its...

victorsoares

Tank you so much @normis, the biggest concern is the possible performance issues, but coming from someone from the inside makes it easier for me to argument with the executives about the best solution.

victorsoares

UPDATE

Ok, new error now. I managed to make the .img file bootable using dd command. I get a message that says "Initializing" and then another one saying "Starting with initdr". And then the server shuts down.

victorsoares

I tried the ISO, I used Unetbootin and Rufus to make a bootable USB stick but when I try to start the installation I get a CD-ROM error.

victorsoares

Hi, I've been working with mikrotiks for a couple of years now, and I'm most used to CCR`s. Recently one of my clients asked me to put a new PPPoE concentrator on his network, given that the other ones are starting to suffer from the high processing demand. He has a PowerEdge server, that I think it...

victorsoares

I would definitely want to check a MikroTik OLT, but I don't know if I would trade my Fiberhome for a company that's new to the market. When it comes to ISP grade equipment, it's really hard for new players to enter the game. Companies will prefer to invest in brands that had proven over the years t...

victorsoares

Had you check your DNS servers?

victorsoares

Well, from my experience the only sure way to get videogames to work without any NAT problems is using IPv6 or giving the client a valid and public IP address. My guess is that whoever designed this network used NAT to distribute the connections but forgot that the connections also arrive there on a...

victorsoares

Well, just an update. I managed to get the equipment back and running after upgrading the firmware to the latest version. After a week or so problems started again. I'm sending the equipment to repair now.

victorsoares

Another thing I just noticed is that the users I created to administrate the router get deleted. I can't find anything on logs about who did it, but only default user with default password was kept, and I had disabled it and changed its password when I did the netinstall on it.

victorsoares

I have the export of the equipment, it was just after a netinstall that the problem appeared. I might try this, but since its a production equipment with about 2000 clients on it. I`ll better make sure its the on the red eye shift.

victorsoares

Hello everyone, recently my CCR 1036 decided to restart constantly. I managed to do a NetInstall with the latest RoS and everything went back do normal. But I noticed that I cannot save or create any files on the router. I'm now sending daily backups to an ftp server just to make sure I don't loose ...

victorsoares

I think he meant this because of processing, depending on what kind of equipment you are using and how much users are hanging in this router. And if you have fast track and queues on the same box, queues wouldn't work properly.

victorsoares

I'm from Brazil actually. The thing is that being that all connections go to the same place, it doesn't matter how many fibers you have there if they come from the same PON port on their OLT, because that port will only deliver 2,5Gbps to all clients on it. Now if you don't plan on using the full ca...

victorsoares

Basically yes, prepend is going to do the job, of course you have to check other methods just to be on the safe side. There is a lot of detailed information on https://wiki.mikrotik.com/wiki/Manual:S ... link_setup if you want.

victorsoares

Just so you know, one fiber is not going to be enough for 3x 1Gbps connections, because most OLT`s are 2,5Gbps (2,35Gbps + headers) per PON maximum. Just make sure you confirm that information with your ISP before expending money on an equipment that is not going to give you the end result that you ...

victorsoares

Hello everyone! I come here today because I can't think of nothing else. I have 3 BGP sessions, 2 from other link providers and 1 that connects our prefixes to the next city, where we have another base. In one of the cities I have 3 CMTS (coaxial) connected, and I wanted them to use a specific BGP s...

victorsoares

Hi, I just bought a new phone with the android one thing, a Xiaomi MI A2 Lite, running android 8.1.0, on my last phone the app was working great, but on this one I'm able to log in to any equipment except CCR's. It gets stuck on "Downloading plugins" and if I check the log it says that I s...

victorsoares

Depending on the version that these mikrotiks are running, you might want to try an older version of winbox too.

victorsoares

It sounds to me that you have a second equipment on port 5, if you just want to communicate with that equipment you can create a static route to this equipment. Again, I don't know your layout, but maybe you can change the 192.168.254.254/30 IP to something in your DHCP range as well? There are many...

victorsoares

I had the same issue a while ago. I managed to get it working installing on my (Linux Mint Tara) strongswan with network-manager-l2tp. I'm using L2TP with IPSEC, just make sure to insert on your Linux what encryption algorithms you are using.

victorsoares

Usually I do the firmware upgrade first, since it waits for you to reboot, and then I do the software upgrade. Only after that I'll reboot the system. I never had any problems doing this, but I'm not sure if it is the correct way.

victorsoares

As you mentioned on your post, you are from a third world country. I'm too from a third world country, and in my case it's pretty easy to find used quality mikrotiks on the internet. I had a similar case to yours, and a RB2011 iLS was more than enough horsepower to pull through all the queues, firew...

victorsoares

It looks like you get your internet through PPPoE. In that case MTU varies between 1480 and 1492 normally. Also, try clamping your mss with your pmtu with a simple rule like this: /ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu out-interface="WAN" passthrough=...

victorsoares

I think the easiest solution would be to export your queues to a file and, with a good text editor, just select and substitute whatever you might want to change. Then just delete your queues and import the edited ones.

victorsoares

I'm not seeing an "/ip dhcp-server configuration" in your export. Do you have one?

victorsoares

tumblr is not a good example, it blocks ping requests, as some other sites do too. can you navigate on those sites? Also, please put your firewall rules (ip firewall filter export hide-sensitive) so we have a better idea of what might be going on.

victorsoares

Nevermind the BGP AS Patch field, you will set this on your BGP Peers, as for the local pref, Mikrotik works only with positive numbers, it does not understand negatives or positives. You might want to go with something like 100 for your main ISP and 10 to your secondary, if there is any. If there i...

victorsoares

I'm not quite sure if I understood exactly your setup, but if you want to access both equipment you will need to set different IP's for them, or else you will only see the first device next to you.

victorsoares

Well if this is a site that contains only one host IP it's easy, but if it is something like facebook, with multiple hosts, just mark the connection and then create a log rule on firewall over this connection mark, like so: /ip firewall mangle add chain=forward action=mark-connection new-connection-...

victorsoares

Do you get a public IP from your ISP? Use something like iptracker on that IP to check if it really belongs to your internet provider. My guess is that your ISP is doing some messed up NAT and that might cause this issue. Just to be clear, most sites will think that you are a robot if there are too ...

victorsoares

Is this solved? I myself got a headache with this, being a certified MK consultant with years of experience I was starting to doubt my abilities. What solved for me was a simple rule. The big problem with this thing is that Microsoft doesn't show on it's support page the correct ports to be redirect...

victorsoares

May I ask why downgrade to such a vulnerable version? Wouldn't be better to upgrade the other equipment if having the same version on all hardware is important? I wouldn't have any of my mk's on anything below the latest bugfix these days.

victorsoares

Do you have any ICPM rules? Try posting your /ip firewall here so we can help you.

victorsoares

Still not sure of what was going on there, but today I re enabled the filter that gave me the dynamic route 0.0.0.0/0 and everything is working fine. Link provider told me everything was good on their end, but I still think that they found something like redrawn error and fixed, and now they won't a...

victorsoares

@Vooray You use multihop for bgp - is route to peer address stable? Yes, it's stable. You use update source vlan_nip_ubatuba. Is it stable? Yes, stable too. Do you have anything interensting in your logs? Yes! time=14:13:38 topics=route,bgp,debug,packet message=" WithdrawnRoutes=0.0.0.0/0"...

victorsoares

Hi everyone and sorry for the capital letters on the post, but I really don't know what to do now. It's been two days since the dynamic route of one of my BGP connections appears and disappears constantly. I have a static route for this too, but still this is causing me some trouble, since this BGP ...

victorsoares

Hi everyone,

Is it possible to make Netwatch ping an IP through an especific interface, like we can do with /ping interface=eher1 10.1.1.1?

victorsoares

Thanks so much for the answer, it really helped me. I do not work with NAT now, only public IPv4's for all my clients, and I want to keep it that way, that's why I don't want to go the CGNAT route. My traffic providers already work with IPv6, so that's pretty much covered. Now what is left for me is...

victorsoares

Hello! I currently have about 2000 pppoe clients in a CCR 1036+ and two BGP sessions on a CCR1072. All is fine and working, but the time to migrate from IPv4 to IPv6 is upon us, and I wonder what kind of moddifications are in place to go this way. Is the equipment going to be able to handle IPv6? Is...

victorsoares

Thank you for your help. I already tried prepending, and it got me to a certain point, but I think that the de-aggregation might be the best way. I'll try this and see how it works. Thanks again for the help!

victorsoares

Traffic coming upstream, downstream is pretty much sorted at this point. I just want that RX on my links goes to BGP 1 (superimagem)

victorsoares

I'm sorry, completely forgot to talk about the issue itself. The thing is that when both sessions are up, BGP 2 (NIP) gets more traffic that BGP 1, and it should be the opposite.

victorsoares

Hello everyone. Let me try to explain my scenario. I have two BGP sessions from two different AS coming to my CCR1072-1G-8S+. Both of them are active and working. They both have the same speeds (3Gbps full). I want to make BGP 1 (superimagem) primary and BGP 2 (nip) secondary. I have set BGP weight,...

victorsoares

Hi everyone, I have a VLAN that goes through two CCR1072+ on a SFP+ 10Gb fiber. This is for a failover that I have and it works great, I can push 10Gb with no problem when I need to. The thing is that I can see in live production working, but I can't do a bandwith test that shows this. I tried nPerf...

victorsoares

I think CGNAT would be the way to go, or try setting up manually different IP ranges and srcnat them with each one of your public IP's.

victorsoares

Hi everyone and thank you for reading this, I have two routers in an ISP that I control. The first one is a border router, an CCR1072 and after that one I have a CCR1036+ that handles my pppoe clients. My doubt is, witch of the routers has to have firewall rules? Both? Are they going to be the same ...

victorsoares

Well, anyway. Problem solved by scheduling a reboot during the night. Everything working fine now. Thanks again.

victorsoares

Hi everyone. Something strage happened this morning with my CCR1072-1G-8S+ running RoS 6.37.4. No changes were made in anyway, and everything seems to work fine as usual, but I can't ping any IP unless I use ARP ping. I tried disabling my firewall rules and changing my DNS but had no success. Has an...

victorsoares

Hi everyone, I'm trying to make a script that copies all my pppoe interfaces and make them static, so I can monitor them on a Zabbix server. So far I had no success doing it, but I'm not very good with it anyway... This script should do that only for connections that have not been copied already, so...

victorsoares

Hello again everyone, I'm setting up a Zabbix server here, and everything is working fine. I have two CCR1036+ and two CCR1072. I'm running the same templates on everyone of them but with one CCR1072 I'm not having any response to snmp. Community is set to the default public and I already tried disa...

victorsoares

Do you have this virtual machine set to dynamic ip? if so, then you need to change de value on ip-addresses set on your mikrotik. If you have a range of IP's on your mikrotik (assuming you have one) set to the interface that your physical machine is connected, then you need to change the ip on the a...

victorsoares

Have you tried v2c public?

victorsoares

Can you post your snmp settings and firewall settings?

victorsoares

It might be possible if you find an unencrypted backup of this RB somewhere.

victorsoares

Hello everyone. Maybe you guys can shine a light on this for me. It isn't exactly a problem, it's more of an annoying thing. I have a script that runs every 30 sec on my CCR 1072. It's just pinging an IP and spitting a enable=yes ou no depending on the result. It works fine, but I get the memory log...

victorsoares

I'll try that, thanks for the help!

victorsoares

Hello, I've put together a setup in my house for testing, and it's working, but I think it could be better. It's basically a dedicated IP that comes from the ISP where I work at. It comes home throught an ONU and then to a RB2011. After this I have a simple router in bridge mode to provide a wireles...

victorsoares

I've tried routing, but for some reason when I enabled full route with BGP CPU usage on my CCR went up and eventually crashed. I found that having two BGP's running full route at the same time is too much for the poor thing.

victorsoares

The basic setup would to set the /27 public IP on the mikrotik, and then put this IP's on the pppoe pool. I don't know how to set this on your radius server, but the main thing is to get MK to receive those IP addresses so they can be used.
Can you post your NAT rules?

victorsoares

Hello everyone, and thanks in advance for any help. I have two BGP sessions on my CCR 1072 for redundancy. Right now I have a script working that deactivates BGP-2 if BGP-1 has ping. I don't like this solution because it screws with my history. And I don't think that is the way to go anyway. Is it p...

victorsoares

Finally I found out what was going on. I was missing a rule to change mss. After the rule was applied everything started working fine. Here is how I put the rule. /ip firewall mangle print detail Flags: X - disabled, I - invalid, D - dynamic 0 chain=forward action=change-mss new-mss=clamp-to-pmtu pa...

victorsoares

Is there a way to analyze that? I tried creating a change MSS rule but had no success either.

victorsoares

I'm using Google's DNS, 8.8.8.8 and 8.8.4.4. Tried Cloudflare's DNS too, but no success.

victorsoares

Another thing, I can ping to websites like www.crucial.com from the RB and from my desktop, but cannot access the website never or less.

victorsoares

Hi everyone, I'm testing a rB2011 iLS with a dedicated IP address that the company I'm working with is going to provide to some customers. Everything works fine, but I can't access some websites like netflix.com and clarin.com. I have no ideia of what is going on. I have no rules set on my firewall....

victorsoares

Hi everyone, Let me explain my scenario, I'll put the diagram below for better understanding. I have two cities connected. City 1 has a link connected to a CCR1036-8G-2S+ (BGP) City 1 has a BGP to City 2 City 2 has a proxy that can be turned into a link when requested (BGP as well) City 2 has a CCR1...

victorsoares

"Full Link" means that you have the same Tx and Rx speed on the interface.

victorsoares

Hi everyone, how are you? I'm having a problem in the last few days where some PPPoE clients are created and after a while they disappear. In history and in the log nothing is shown, so I don't actually have a way of knowing what exactly is going on. This are my configs, I'm using a CCR1036-12G-4S r...

victorsoares

I think he meant RBSXT-5nDr2, that thing should be good for 10km, I personally never gave it a try, but by the specifications and by some posts here it seems possible. I would use CPE for this.
Maybe this will help you: viewtopic.php?t=48885

victorsoares

Have you tried to use another fiber? I've had problems with brand new fiber cords already, where for some reason they atenuate randomly. Check the temperatures and voltages on the doors too.

victorsoares

The thing is I'm not in the company very long, and I don't know who exactly uses the Mikrotik, neither my bosses are 100% sure (there are several people and several MK's in different parts of the country). That's why I needed to inform the user when he logged in.

victorsoares

Hi everyone, I was told by my bosses to set an automatic backup daily for our MK's. I configured an GMail account and it works fine. Then I moved to the scripts. It seems like everything is working fine, but I only get sucess in 1 out of 10 tries. The other times I get an timeout error while sending...

victorsoares

Hi everyone, I have a situation where a CCR1036 is used by a lot of people, but there is only one user. That makes reading a log and finding out who did what almost impossible. The simple solution is to create users for everyone, but some of the people that use this MK aren't exactly "reachable...

victorsoares

victorsoares

Hello everyone, I tried to find out more about it but couldn't find much information. I have a CCR1036-8G-2S+ that I use for my PPPoE clients. Everything works fine, but I'm having some security issues with some of my clients lately. I think that a couple of my PPPoE clients are infected and are now...

victorsoares

I've downloaded btest a week ago from Mikotik's website, yesterday I tried to download the exe again in a client and didn't find it. Softpedia still has it available. I hope that this isn't the end of the application.

victorsoares

Hi everyone, I was wondering if anyone could help me. I have a RouterOS 6.39.1 that takes our 3Gbps link and distributtes to the PPP clients and other things. The 'problem' is that we usually have a graphing on the interface opened up so we can see if we need to buy more bandwith or not. The graphin...

Search found 106 matches