MikroTik

sdischer

do not use Local and Remote Addresses on PPTP or L2TP server config when bridging both ends or it won't pass DHCP. I don't know why.

sdischer

Trying to revive this thread! I want to jump in and make a few observations to better make the case for TR-069. First, as we all know, RouterOS is about solving problems. If there isn't a built in function, we write a script. Always a work around! However, we can't think about a workaround for TR-06...

sdischer

Did you find anything? I am interested too.

sdischer

I have posted a few MikroTik HowTo's on my blog: RoMON http://stevedischer.com/mikrotik-romon-feature-added-to-routeros/ Another Way to do Automatic Failover with MikroTik RouterOS http://stevedischer.com/another-way-to-do-automatic-failover-with-mikrotik-routeros/ Improve MikroTik CAPsMAN Roaming P...

sdischer

I just posted this how to example for RoMON on my blog.

http://stevedischer.com/mikrotik-romon- ... -routeros/

sdischer

I just posted this how to example for RoMON on my blog.

http://stevedischer.com/mikrotik-romon- ... -routeros/

sdischer

Example: Ceee if 5400 is selected freq this means 5400+5420+5440+5460 for 80mhz will all be used. If using a smaller channel size, there're less "e"'s or extension channels. Example, 40 MHz bandwidth with Ceee and 5400 selected means 5400+5420 will be used. e to the right of C earns above ...

sdischer

Is there a cli command equivalent? I have hundreds to do and it is not where I would expect to find the command.

sdischer

There is a more elegant way. Hotspot has an option to set DSCP bit for hits. Then create a mangle rule that mangles traffic where DSCP = X and then give that traffic it's own queue.

sdischer

I am bashing my head trying to find a reliable layer 7 matcher for Hulu. There is one or two floating around the web that, well, don't work. This one was working on some videos and not others: ^\\\\x03.+\\\\x14.+\\\\\x02.+\\\\x07.(connect)\\\?.+(app)\\\?\" I stink at Regex, for all I know that ...

sdischer

http://blog.ispsupplies.com
http://www.youtube.com/user/ISPSupplies
http://www.learnmikrotik.com

sdischer

Thanks for the sanity check. Now, I need a solution to quickly configure 1000 routers!

sdischer

Has anyone been able to make this work with the 751? I emailed support and they assured me the 751 devices will boot the first time in flashfig mode, however, I have been through 10-15 devices (all new) none of which come up in flashfig mode.

Sanity check anyone?

sdischer

Try this one: http://learnmikrotik.com/book

sdischer

If you haven't tried WebFig lately, please give it a try before posting here, I think you will be impressed. This is a great step forward and the Design Skin gives you the ability to customize or "dumb down" the UI for your customers. I think this is what we have asked for and it works ver...

sdischer

I am sure you have heard of the MikroTik 750GL, a powerful, low cost and high power routing solution but today I will have the opportunity to test the newest model, not yet available to the general public, the RB750C (c stands for cake). Features include: • Five 10/100/1000 Mbit/s, non functional Gi...

sdischer

We bridged a V5.5 link using station psuedobridge mode (yes, I know but it was unavoidable for this particular application) and standard 802.11 protocol. A Windows laptop connected to the bridged Ethernet port pulled an IP from DHCP server on the AP Wlan without an issue. A Linux machine on the same...

sdischer

You can bridge the ap in ap bridge mode or bridge mode. You can not bridge the station without using station wds mode. Search the wiki fir transparent bridge. Mpls and EOIP tunnels are also options but a bit harder to set up.

sdischer

MikroTik RouterOS supports wds mesh, it is detailed in the wiki and easy to set up. Give it a look.

sdischer

Check the wiki, it has a very informative description of the QOS in nv2. Basically you mark the TOS bit and the highest priority packets get the best chance of accessing the wireless media. It is a quick read and very informative.

sdischer

Use a link calculator and approach this from an engineering standpoint. Link reliability in the absence of noise is all about gain and margin. You can put gain in antennas or gain in the card, your choice based on tower capability. Any high quality card will do the job. Cheap cards and cheap antenna...

sdischer

Really, this isn't a big deal. I have lots of clients who have routers running 100 percent CPU for a good portion of the day every day and they haven't gone to the effort of upgrading. It certainly isn't a desirable condition but 100 percent CPU for a few seconds isn't anything to be concerned about...

sdischer

I have had good success with the Ubiquiti sectors. They are dual polarity so you can do two n chains or split your clients between the two poles. I would use a 433 for the ap. Nv2 would give you a great and scalable platform. I can give you more direction if you email me info (at) learnmikrotik.com.

sdischer

We use a wireless ap inside the building and a laptop on the roof logged into the CPE via the wireless ap/bridge.

sdischer

We have a batch on the production line. Email me and I can get some in white. Steve at learnmikrotik.com.

sdischer

Another method is psuedobridge which I do not recommend, but a preferred method is using EOIP tunnels which is a documented method. In summary wds or EOIP are best options.

sdischer

Usermanager is a great way to centralize AAA on your network. In addition, it also has facility to allow users to buy credits on your network through hotspot, however, the only limitation it can automatically create is a time limitation. You can create packages that allow access for a day, week, mon...

sdischer

After a long dry spell due to chip shortages, the RB1100 is back out in distribution. These are great units if you haven't owned one yet.

sdischer

As a long time user of the XR5 card for my back haul links and access points, I must confess that the expense for these cards is no longer justified with the introduction of the R52HN. With a long link that has often experienced fade on humid, cool mornings, we decided to use the R52HN card with a d...

sdischer

I had same problem, replaced the RB600 and it did same thing. I have heard there were a batch with bad capacitors. I replaced with a 433AH and problems are gone using same config and OS version.

sdischer

Can someone point me to it?

sdischer

With NSTREME 40-50 is the MikroTik recommendation. I agree, more than that and ping times go really high.

sdischer

Ok, this has to be one of two things: 1. A microwave "corner turner" (get it, grid points 90 degrees to the panel). 2. A cheapo ISP that wont buy weatherproof enclosures. Its one way to get rid of those antiquated Tranzeos. MikroTik baby! http://www.learnmikrotik.com/images/MikroTikForumIm...

sdischer

I have heard that China has the largest MT user base, unfortunately only a handful have licenses.

sdischer

There is now a site for anyone that has MikroTik skills and wants to post a resume or for those looking or admins with MikroTik experience. It's free...

http://www.mikrotikjobs.com/

sdischer

Yep, need filters, that is unless I configured it wrong. Router C [admin@RouterC] /routing bgp network> pr Flags: X - disabled, A - active # NETWORK SYNCHRONIZE 0 A 208.91.8.0/22 yes [admin@RouterC] /routing bgp aggregate> pr Flags: X - disabled 0 instance=default prefix=208.91.8.0/22 summary-only=y...

sdischer

You were spot on. With 3.28 I entered a dummy route unreachable for the /22 and filtered the /32's out and it worked fine. On 3.30: I used a filter to discard the /32's advertised then used BGP NETWORKS and synchronize setting to push the aggregate out without the dummy route. Thanks for the tips! s...

sdischer

Thanks for the tip I will give it a whirl. I found very little documentation and only some really old posts about route aggregation. Even the wiki was lacking any real detail.

sdischer

Im seeing the same thing on 3.28. I tried using an out filter and aggregation and it drops the entire network, the aggregate is not being advertised.

sdischer

Nasty!

sdischer

I have used Darwine for some time and had issues with compatibility through different versions with Winbox. However, I tried Crossover today and have to say it is well worth the $35. I had great success using Winbox (via MAC too), Bandwidth test tool, etc. I may never start my Parallels Windows VM a...

sdischer

Anyone have a Darwine version that lets you connect Winbox via MAC? I am running 1.0b (1.0) which works fine via layer 3 but not layer 2. I am running it on a Macbook under Snow Leopard. Thanks in advance Mac fans!

sdischer

Attaching an APC UPS is what I wanted to do. Hard to find them with serial any more. Thanks.

sdischer

Explain what you mean by "controlled"?

sdischer

USB to serial adapters are common and I own several. I am stating that so no one says "Buy a USB to serial converter"...

That being said, does anyone have a solution for connecting a UPS with only a USB cable to a RouterBoard with a 9 pin serial?

sdischer

I have a 4.5 mile link I set up for testing. I have -69 signal strength and tried all the settings in the wiki but am only able to get about 18 megs throughput UDP. I suspect noise but I have 2 adjacent clear channels I am using. I am using dual polarized antennas on each end. Any ideas?

sdischer

This one is on a 200 foot coal boiler which vibrates profusely. We are wondering how legal those amplifiers are? :( The good news is the provider was terminated and is no longer there to pollute the spectrum. http://www.learnmikrotik.com/images/MessBox2.JPG http://www.learnmikrotik.com/images/MessyB...

sdischer

I'm stoked, ready for September. Czech Republic MUM set the bar high, wonder if there will be beer?

sdischer

Ok thanks!

sdischer

I'm using syslog server on Dude to collect from my Linux and RouterOS hosts/routers. I set up a Regex expression to snag logins and email me. When I set up the email notification, the standard fields for the email body are: [probe.name] on [Device.Name] is now [Service.Status], etc. When I get the a...

sdischer

Did you get this working? If not email me sdischer[ at ]gmail.com. I have done it many times.

sdischer

sdischer

I cant remember the exact config settings for squid but do a search for "transparent squid proxy" and you will find the settings that will fix that.

sdischer

GoDaddy has cheap certs, try them or another provider, less than $20 per year US.

sdischer

From the Wiki. LOOK CLOSELY AT THE TEXT IN RED BELOW, THE ORDER THAT YOU IMPORT IS VITAL. FOLLOW THESE INSTRUCTIONS CAREFULL AND IT WILL WORK. HTTPS connection enabling [edit] Creating certificate Trusted SSL Certificate can be bought from trusted authorities, for example, VeriSign. An unsigned cert...

sdischer

FYI: With nstreme, MikroTik recommends 30-50 clients max. More than that and ping times will go way up due to the polling.

sdischer

Is snmp enabked on the MT device? Does the snmp community o the dude match the one on the MT device?

sdischer

Is this a/b/g? Need more info on wireless configuration.

sdischer

Tis is basic networking draw out what you want to accomplish, assign the ips for each of those subnets you want and then configure your router. If tat is over your head, then start with a basic configuration that works for one of the subnets and get comfortable with it, then start adding the others,...

sdischer

any time you change an interface, it has a new MAC and the old config desn't recognize it/ go through your config and fix the interface everywhere it is referenced, dhcp, ip's, etc. it just needs helping knowing what interface to associate those configuration items with.

sdischer

A tunnel, dhcp relay, bridge, mseveral ways, look at these topics in the manual.

sdischer

This may help:

http://wiki.mikrotik.com/wiki/How_to_ma ... _web_proxy

sdischer

There are may answers to that question depending on how your network is build. Look at dst-nat in the firewall section of the manual. Masically what you will do is make a firewall nat rule that redirects a port on the external interface of the router to the corresponding port the camera or other dev...

sdischer

Simply find a city in that list that is in the same time zone as you. This is a pretty standard Linux setup. Winbox would be ab easier way to find your time zone.

sdischer

Because the DHCPDISCOVER message is a broadcast message, and broadcasts only cross other segments when they are explicitly routed, you might have to configure a DHCP Relay Agent on the router interface so that all DHCPDISCOVER messages can be forwarded to your DHCP server. Alternatively, you can con...

sdischer

To monitor my radius server, to ensure it is alive?

sdischer

This turned out to be an asymmetric routing issue with one of my providers. Problem solved.

sdischer

Does anyone know of any help on the radius probe? I am trying to monitor my radius server and it times out. I suspect I need to add a user/pass on radius sever to get a meaningful response but I can't figure it out and help on the topic is hard to find. Thanks.

sdischer

I have been running PPPOE for several years with private IP clients, natting at the pppoe server. Today I added some public addresses to a new pool and assigned that public pool to my pppoe server. Everything worked as planned until customers tried going to secure sites or yahoo. The symptom is simi...

sdischer

I would likely agree. We have moved to smaller cells, shorter towers with 900.

sdischer

MT suggests upgrading BIOS.

sdischer

I tried a Ubiquity cavity filter, it helped a bit. I worked with the local utility who was causing the interference. Better now.

sdischer

I put in a cavity filter today, helped a little. It probably didn't help $300 worth. The AP is 200' feet up and running HPOL.

sdischer

I have 40 or so clients on 900 using MT and SR9. Everything was fine until one day everyone's ping times jumped to 4 digits. I have tried changing channels (2 only with 802.11b which is another issue) but no help. Noise floor is a -94, not great but customers have -80 signals or better yet poor ping...

sdischer

If you want a full service solution including end use tech support for hotspots try http://www.nnu.com. They support MT.

sdischer

Defactowireless has the best standoffs, heavy duty, stay stuck, great quality and inexpensive.

http://www.defactowireless.com

sdischer

I have 40 2.9 clients with SR9's connected to a 2.9 AP. I tried to upgrade the AP to 3.7 and the clients would not reassociate. All clients are MT. I reverted to 2.9 and they call came back. I then set up a test with a 3.7 AP and a 3.7 client, both with SR9, but client can't see the AP (next to it o...

sdischer

PPPoE and MAC ACL's.

sdischer

As you found out you can't do that. Don't mix vlans and bridges this way. .1Q relies on tagging and untagging the frames and when you bridge the subinterfaces, it confuses this. Why would you want to do that? Maybe I am missing something but I bet there is a better ay to do this if I knew what you w...

sdischer

Sounds risky, like one of those "fixes" that one day stops working for no apparent reason and you spend half the night driving from tower to tower. Good luck!

sdischer

Use WDS. Follow the instructions in the manual. Basically on the AP, add a bridge, put WLAN1 and ETHER1 on the bridge. Enable WDS with default bridge1. On the CPE, use WDS Station mode, put the WLAN and ETHER in the BRIDGE, enable WDS, default bridge1 and now you have a transparent bridge. This is s...

sdischer

Upgrade to version 2.9.45 and it should get well.

sdischer

Processor speed is going to be the bottleneck.

sdischer

I would use dst-nat like: chain=dstnat in-interface=ether1 protocol=tcp dst-port=80 action=dst-nat to-addresses=address_of_your_proxy to-ports=proxy_port replace address_of_your_proxy and proxy_port with your information. Add additional parameters as needed to restrict what gets natted.

sdischer

Be aware that some cards are Main=A and some are Main=B. If in doubt, try one or the other.

sdischer

If you don't need NAT try turning off connection tracking. Also, tell me about your wireless cards and configuration.

sdischer

If you are reading this post, don't waste your time with the ACK=350 workaround, go here:

http://forum.mikrotik.com/viewtopic.php?f=7&t=17523

Looks like it is really fixed. Thanks.

sdischer

I edited my post, I should have said 350 not 35. My bad. You are right, 35 would be a bad idea...

sdischer

Setting ACK to 350 FIXED IT with version 2.9.44 as well. Thanks Uldis, thanks MT! Sleeping better tonight.

sdischer

I understand your frustration Jose and I empathize, but in the spirit of resolution I do not mind dedicating my resources to solving a problem. If we were dealing with some other manufacturers, there would be no response, no forum, no interaction with the developers, etc., just a one way call to a t...

sdischer

Good observation Uldis, I think you are on the right track. There are several of us on this forum that are more than willing to contribute time, resources, whatever to help figure this out.

sdischer

Changing max station count seems to help but is not a workaround solution as every time you incriment and apply, it disconnects all the clients there defeating your purpose. I tried turning off default authenticate, disabling everyone in the access list and then enabling them one at a time. Unfortun...

sdischer

We are going to try a test. We are going to turn off Default Authenticate and remove all MACS In the ACL and add them back in one at a time. Our theory is that the problem has to do with too many clients trying to associate at the same time. Another option which could be scripted easily as a workaro...

sdischer

Good data points, thank you kbyrd. Here's a brief summary of what I believe to be true based on our experience and these posts: 1. This is a Atheros AP to Atheros client problem. 2. The problem is not limited to NSTREME, as kbyrd is not using NSTREME. 3. The problem is not limited to MT AP to MT cli...

sdischer

Today I experimented, I changed frequencies and to get the clients to re-asssociate, I changed from 2.4-B to 2.5-B/G. Then enabling and disabling the interface they all came back on. Unfortunately going back to B was not as easy but eventually by enabling and disabling, I got them all back on. Disab...

sdischer

I have heard this comment about the Dude several times. Wonder what the Dude has to do with it? Is is possibly the SNMP polling the dude does of the AP? The Pinging? Anyone have a clue about this?

sdischer

A few questions I would have for you: 1) Does the problem persist without NSTREME? Not sure. Since it is PtMP I am runing nstreme throughout so to do such a test would be difficult. 2) Have you tried different channels? Extensively. This tower is out in the middle of nowhere. 3) If you are using al...

sdischer

That has worked for me too, sometimes, other times no.

sdischer

What is the maximum numbers of users on one AP? Are you running nstreme?

sdischer

All Compex is not something I have tried but that's a good idea. 2511's are not an option because they are prism based and they won't do nstreme which I run exclusively. If it weren't for nstreme I would gladly drop the 2511's in because they definately don't have this problem.

sdischer

I have been following the previous closed post viewtopic.php?f=7&t=15647&hilit=sr2+problem but feel it is necessary to reopen this subject. In summary, based on my experience using Atheros AP's, Atheros clients, on an all Mikrotik network running NSTREME. If an AP has less than 10 clients on...

sdischer

This is a data point, not sure if it is important but I too have experienced this and it is frustrating and a bit concerning. I am running pure MT AP's and Clients, all running NSTREME and polling. My clinent cards are all WLM54G's and my AP's are SR2 and Engenius cards both of which see this proble...

sdischer

Thanks for the response. I would love to use Prism but they don't support Nstreme do they?

sdischer

Since no one has any ideas I will post some more info. This is not a good solution, "rxa-txb"... While it appears to have fixed the signal strength, ccq's went into the toilet and uploads are terrible. I did some channel searching and found another channel with less activity and now I am g...

sdischer

I havean AP sector twith 17 clients up for a year with signal strengths ranging form -55 to -75. One day everyone lost 10-15 db and many could not associate at all. I tried changing boards, radios cards, coax and antenna. Now, everything on the tower is new, same problem. I tried scanning for interf...

sdischer

anyone know why this script wouldn't work:

/routing ospf network print
/routing ospf network enable 0

Works from a terminal window but not as a script.

sdischer

Only Administrator can run Dude since I installed latest version. Any other user starts it it crashes and exits. If a normal user runs it as Administrator, no crash. Here's part of crash.txt file: STACK OVERFLOW at: 6d23f3 eip=6d23f3 eflags=10206 edi=33438 esi=185f408 ebp=33418 esp=33404 eax=1014 eb...

sdischer

Normis, can you confirm that:

1. OSPF is not stable -or-
2. We should be using routing-test?

BTW: I too keep static defaults in place and disabled for just such an occasion.

sdischer

I have 10 MT routerboards participating in OSPF in a ring configuration. The Gateway router (GW) redistributes default as Type 1 and the other 9 get their default from the GW Router. If I reboot the GW router, OSPF routes continue to propogate throughout but the neighbors lose and do not get back th...

sdischer

Wow, that would be freaky. We have thought of water, thermal creep, etc.. Thanks for the reply. Any idea what would cause the plating to break down? No problems with any 2.4 gear.

sdischer

I have been experiencing a strange problem. A 5.8 backhaul with a signal strength of -60 degrades over about a 30-45 day period until it eventually will not associate, that is signal lower than -90. This backhaul is way out in a rural area and I have a -101 noise floor and clear channels. Replacing ...

Search found 111 matches