MikroTik

ilja

Hey, gentleman.

Thank you so much for all your comments and help! Unfortunately, i have been a little caught up with work the past week. Will try to implement all your recommendations during the weekends and get back to you.
Thank you!

ilja

Copy & paste from another thread: You can't have dstnat rules with in-interface=ether1, they can't work from inside, because connections will be coming from LAN interface. The best is dst-address=<public address>, but if it's dynamic, you can use dst-address-type=local instead and it will match...

ilja

For port forwarding you need to make a dst nat rule for each port forwarding you would like to accomplish. To allow port forwarded traffic through the firewall, a single FORWARD chain rule needs to be in place. The default firewall rules already contain this rule last time I checked. Quite separate...

ilja

Just use the local IP inside the LAN 192.168.88.10:8123 Alternatively you might be able to use “hairpin NAT” or loopback. Thank you, @chuckt, for your answer. I would still want/need to make it work internally with the same public ip(it's more of a domain). Thank you for referring to Hairpin NAT, i...

ilja

Hey all. Can some please help me to setup simple port forwarding which i really don't get. :? Came from D-LINK where it was super simple out-of-box UI and am a little frustrated with Mikrotik firewall settings. All i need is to do a port forwarding the following way: WAN(10.10.10.10) --- Mikrotik --...

ilja

Default wireless configuration is like not really optimized... To get best performance: - use 20MHz bandwidth - choose channel manually, either 2412/2437/2462 (perform a scan to get least used channel) - set encryption on aes-ccm Besides...what are you expecting? And what made you choose the RB2011...

ilja

Hey all. Can please someone help me understand what could be the problem in my simple configuration, when my WiFi is incredibly slow? Came to a point of replacing home router to Mikrotik RB2011uias-2hnd-in (RouterOS v6.46.3 (stable)). Did a factory configuration reset and have just set SSID and WEB2...

ilja

Hey all. I think i have came across a very annoying bug with hotspot html file path. I have got a USB stick(16gb) and moved my log files to that. I have formated usb stick to ext3, so MT sees it as 'disk1': [admin@MikroTik-router] > disk print # NAME LABEL TYPE DISK FREE SIZE 0 disk1 usb-flash ext3 ...

ilja

Hey all. What is the best free traffic flow analyzer in 2018? I have been looking around and can find many great solutions but they all requires you to pay for subscription. I need to monitor all the devices connected to my LAN network to have an understanding what is "eating up" our netwo...

ilja

Ok, really you have 2 LAN segments and the same applies! You would have to separate the 192.168.92.0/24 from the Hotspot by using a separate device for the Hotspot or possibly by (I have not tested) moving the Hotspot to a separate bridge and use mangle/routing marks to send the desired traffic thr...

ilja

Maybe a network diagram and post contents /export hide-sensitive file=export.rsc from the .rsc? You can download the file and edit it with a text editor. Sure, sorry for that. Here is a network diagram 2018-04-16 15_57_47-network_diagram - draw.io.png And export rsc file - https://paste.ubuntu.com/...

ilja

There is not a way that I am aware of on your current setup. If you want the Hotspot only for Internet access and not controlling LAN, you can move the LAN to separate device (or possible create a LoopBack to same device) and filter WAN through Hotspot. Thank you, 2frogs. I think i have misinformed...

ilja

Hey all. I have Mikrotik hotspot + userman. It works fine and keeps user data usage. I want to limit all users to 400MB a day (400MB from global web). I can do that with userman limits+scripting to reset traffic counters. But in my system i have an office scanner/printer under static IP 192.168.88.5...

ilja

--- abandon due to inactivity ---

ilja

Any help?

Is there anything i can do to make it work normally?

ilja

any help?

ilja

Hey all. I have hotspot+userman running together. I've created multiple profiles and activated signup page. When i visit signup page it asks me to choose a profile from the dropdown list. How can I only provide specific profile(s) to be chosen for signup registration? I have seen the "solution&...

ilja

To my knowledge, there is no way to change the location of the umfiles. Even if you copy them to another location, it will never look there for the files. If you have a computer to run a CHR instance on, you might try the free version and see if it will run UserManager. I have not tried it so I am ...

ilja

Thank you, 2frogs and mkx for your messages. @2frogs, yeh, now i start to understand that hEX lite was a poor choice. I wish i could do something about it :/ @mkx, here is the output: [admin@MikroTik-router] > /ip firewall export hide-sensitive # apr/03/2018 13:52:48 by RouterOS 6.41.2 # software id...

ilja

Thank you, 2frogs. It's unfortunately too late for me to change the devices. Do you think there are any alternative solutions? I was thinking of making a script which could just copy umfiles directory from flash(where i can safely store it) to "/" directory. I am not good at scripting and ...

ilja

Hey all. I very much need someone's help over here. I have installed and deployed hostpot service in the office as on this diagram: 2018-04-03 09_39_11-network_diagram - draw.io.png We have three Mikrotik devices. Router hEX poe lite and two access points - MikroTik cAP lite devices. The hostpot+use...

ilja

Anyone please?

ilja

--- Abandoned due to inactivity ---

ilja

C'mon, is there really no one who can help? :/ Even MikroTik support?

ilja

Can anyone please help?

ilja

Under Hotspot Server Profiles, you can select the location for your files. In winbox, you should be able to drag & drop the hotspot folder to flash storage. You didn’t mention which device you are using, but if it one that didn’t have much flash space I suspect that this was intended and not a ...

ilja

any help?

ilja

---abandoned due to inactivity---

ilja

any help?

ilja

Hello, I have some issues with making MT to work with OpenVPN server (Ubuntu). I can make successful connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. Setup : IMG_1474.JPG MikroTik configuration /interface print Flags: D - dynamic, X - disabled, R - ...

ilja

Hey all. I am trying to write a script, which could just copy a local directory "/flash/umfiles" to "/umfiles" by using fetch tool from localhost to localhost :local LOCALfolder "flash/umfiles" :local FTPserverAddress "192.168.88.1"; :local FTPuser "admin...

ilja

Hey all. I might be wrong, but i think i have came across a bug. Follow up story: I need to make hotspot signup only show one specific profile, not all of them. I found on https://wiki.mikrotik.com/wiki/User_Manager/4/User_Signup that i can do that by custom sign up page. When i navigate to the root...

ilja

Oh, can anyone please help?

ilja

Hey all. I need to make hotspot signup only show one specific profile, not all of them. I found out that i can do that by custom sign up page. When i navigate to the root of router i see two directories: "umfiles" and "flash". Under umfiles directory are all default templates for...

ilja

Please?

ilja

Anyone please?

ilja

Any experts in IPSec?

ilja

Hey all. I am trying to connect RouterOS to VPN server, but it keeps giving me error 'failed to get proposal for policy. I have VPN server vpn.opt.example.co.rw which is set up and working. I have a bunch of Rapsberry Pi which are connected to that VPN server and works totally fine. I know and can s...

ilja

Found a working solution!

Check out - viewtopic.php?f=2&t=86552&p=647763#p647763

ilja

Awesome, thank you, Muqatil!

Can't express how grateful i am for your help!

If you dont mind, could you please explain the trick with DNS entry? Why shall we add it and what does it do?

Thank you!

ilja

Create a directory called maintenancePage and put there your html with the maintenance page files. No external references, a simple html page with few images would work. Add fake DNS resolution (depending on ROS version, one of them will fail) /ip dns static add address=1.2.3.4 comment=MAINTENANCE ...

ilja

Has anyone succeeded in making it work? :/

ilja

Has anyone solved this problem? :/

ilja

Ops, i m sorry. Here it is(from capsman hEX router): [admin@MikroTik-router] > /interface bridge port print Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload # INTERFACE BRIDGE HW PVID PRIORITY PATH-COST INTERNAL-PATH-COST HORIZON 0 H ether3 bridge1 yes 1 0x80 10 10 none 1 H ether4 brid...

ilja

What does "/interface bridge port print" say? Hey, Sindy. Thanks for you answer. It was automatically generated I believe 0 R ;;; created from master port name="bridge1" mtu=auto actual-mtu=1500 l2mtu=1598 arp=enabled arp-timeout=auto mac-address=6C:3B:6B:76:DC:75 protocol-mode=...

ilja

Hello, everyone. I have been searching this forum and trying many things mentioned here and there, but was not able to solve my problem. I have 1 router(my CAPsMAN) and 3 AP (wAP, 2 x cAP Lite) devices. I need to create 2 AP, one for office use, one for guests. And make office AP to run by hotspot. ...

ilja

Solved.
I figured out that there is a default created firewall rule to block all traffic coming from LAN. Disabling that rule made it work!

ilja

Anyone, please?

ilja

Hey all. I have run into a problem, when WinBox cant see or connect to my wAP after I make it to be both CAPsMAN and CAP. My setup: I have three units total, one wAP (being CAPsMAN) and two cAP(CAPs). When wAP is configured as default router(CAPsMAN) and two cAP(CAPs) - i can connect to all of them ...

ilja

If you are using hotspot then you won't be able to ping between devices. Disable hotspot and you should find it will start working. Ou, but is there any way to make it work still using hotspot? I need users connected to hotspot to be able to connect to my local web server(on static PI) :/ Not toget...

ilja

STOP DUPLICATING POSTS
viewtopic.php?f=7&t=131299

Sorry man, but what shall i do if i', not getting any replies and it seems that forum is not very active :/

ilja

If you are using hotspot then you won't be able to ping between devices. Disable hotspot and you should find it will start working.

Ou, but is there any way to make it work still using hotspot? I need users connected to hotspot to be able to connect to my local web server(on static PI) :/

ilja

Hey everyone! I have MikroTik wAP. I have configured hotspot, so my network diagram looks like that: 2018-02-26 12_13_32-network_diagram - draw.io.png My Raspberry Pi is added to hotspot's "IP Bindings" section to bypass authorization. From WinBox I can see that both my PC and Pi are conne...

ilja

Hey everyone! I have MikroTik wAP. I have configured hotspot, so my network diagram looks like that: 2018-02-26 12_13_32-network_diagram - draw.io.png My Raspberry Pi is added to hotspot's "IP Bindings" section to bypass authorization. From WinBox I can see that both my PC and Pi are conne...

ilja

anyone? What's even more weird, that without doing anything it worked for some time and I was able to both ping the Pi and connect to web server over wifi from my laptop, but it worked for like 10-15 mins... And it doesn't anymore.... I cannot ping, i cannot connect. IP is assigned i can see from Wi...

ilja

Hey all. I have recently got MiktoTik wAP for our work office and i love it! However, i need a little help setting it up. What i need : Raspberry Pi running local web server, which is accessible for all users, who connect to my wi-fi network, without need of hotspot authentication. I have a link &qu...

Search found 56 matches