MikroTik

Zetera

Sadly it doesn't appear that adjusting the authoritative delay in any direction made a difference. Do we happen to have any other suggestions that I can test out? A temporary fix appears to be sending a boot request via DHCP using he IP-Scan tool on the MikroTik then rebooting the device. But I'm de...

Zetera

Im sorry - i have missed your configuration. It looks like you have set "authorative=after-2sec-delay" to your client vlans. This means the router will ignore all dhcp-requests from a device if the requests are not coming in smaller time intervals than 2 seconds. If we look at your screen...

Zetera

From an external view your setup is relatively complex. This means without seeing your configuration it would be just a guess into the blue. And that does not help at all since it just wastes your and our time ;-) If you expect help - post your complete configuration. Please see the attached files ...

Zetera

See Attached:

Zetera

In our deployments, we are experiencing significant DHCP issues. These usually occur after RADIUS outages; we can’t be entirely sure, but the common symptom is that the DHCP server function of our MikroTiks ceases to work as intended. The most common method to initiate communication between the devi...

Zetera

I'm experiencing some peculiar issues on 6.40.9 (we haven't upgraded just yet. We definitely plan to.) Surely the above should be the first step before asking help? We've upgraded it on a few MikroTiks. It possibly fixed it; as the problem disappeared. But so has rebooting the equipment in other ca...

Zetera

I'm experiencing some peculiar issues on 6.40.9 (we haven't upgraded just yet. We definitely plan to.) But as it stands MikroTiks are ignoring DHCP discovers. Granted the devices don't even bother asking for DHCP until we run an IP scan via the MikroTik (BOOTP Request.) Any ideas as to why the Mikro...

Zetera

Does anyone have any suggestions? My expect script is recovering most of these but some don't have their RSA keys (and their passwords are all different.) Which is making things difficult to recover the last few.

Zetera

I would've not used copy paste if it weren't for the lack of memory on the MikroTik. uptime: 5w3d14h16m21s version: 6.40.9 (bugfix) build-time: Aug/20/2018 07:46:49 factory-software: 6.34.2 free-memory: 16.1MiB total-memory: 64.0MiB cpu: MIPS 74Kc V5.0 cpu-count: 1 cpu-frequency: 720MHz cpu-load: 3%...

Zetera

0 eleven.auto.rsc script 0 jun/07/2019 13:41:11 1 flash disk dec/31/1969 20:00:00 2 push.auto.rsc script 334 may/02/2019 21:42:42 3 push.auto.log .log file 16.0MiB may/03/2019 03:56:35 4 flash/skins directory dec/31/1969 20:00:01 5 flash/hotspot directory jan/01/1970 20:15:51 6 flash/hotspot/alogin....

Zetera

So I've seemingly made a terrible mistake. I assumed that the RAM was anything outside of the Flash folder. I had a log file outside of the Flash folder which managed to fill up the remaining memory. Now I can no longer send auto.rsc files to certain MikroTiks under my purview. I've been testing SSH...

Zetera

That certainly was it... Wish I noticed that sooner. Thanks!

Zetera

Attached is an issue I've been experiencing with some of our pieces of MikroTik equipment. It seems that there are multiple entries in the ARP table for the same IP addresses. I've also added it below. What would be the reasons that this might occur? The reason this is an issue is that it often caus...

Zetera

Bump (don't really want this to get forgotten

Zetera

I am trying to find out if there is a tool or command that would allow a mikrotik to see the MAC address of a modem that it is using as its WAN connection. Here is a printout of its ARP table showing the LAN facing MAC address of the modem. # ADDRESS MAC-ADDRESS INTERFACE 0 DC 184.153.32.1 00:17:10:...

Zetera

thanks sob! This helped loads!

Zetera

This is my current configuration. # apr/03/2019 11:49:21 by RouterOS 6.44.1 # software id = IF8Y-2BLH # # model = CCR1036-8G-2S+ # serial number = 6AAE05716373 /interface bridge add name=bridge1 /interface list add name=WAN add name=LAN /ip pool add name=dhcp ranges=192.168.88.2-192.168.89.254 /ip d...

Zetera

This is my current configuration. # apr/03/2019 11:49:21 by RouterOS 6.44.1 # software id = IF8Y-2BLH # # model = CCR1036-8G-2S+ # serial number = 6AAE05716373 /interface bridge add name=bridge1 /interface list add name=WAN add name=LAN /ip pool add name=dhcp ranges=192.168.88.2-192.168.89.254 /ip d...

Zetera

Is there an example config to work from that you'd be able to send my way please? If not that's fine I can probably move from here. Thanks either way.

Zetera

Any possible assistance on this? Or can anyone point me in the right direction?

Zetera

Currently, yes.

Zetera

Need to configure a mikrotik to reflect the following: What is needed is one port as a WAN uplink thru which one can assign a static public to the Mikrotik, and a second port that is also "connected" to the circuit to which will connect to a switch to be used to connect devices that will u...

Zetera

Need to configure a mikrotik to reflect the following: What is needed is one port as a WAN uplink thru which one can assign a static public to the Mikrotik, and a second port that is also "connected" to the circuit to which will connect to a switch to be used to connect devices that will u...

Zetera

Figured it out. The settings needed to be contained in a string

/system package update
:do { set channel="bugfix" } on-error={ set channel="long-term" }
check-for-updates
:delay 3s;
:if ( [get status] = "New version is available") do={ install }

Zetera

/system package update :do { set channel=bugfix } on-error={ [] } :do { set channel=long-term } on-error={ [] } check-for-updates :delay 3s; :if ( [get status] = "New version is available") do={ install } The purpose of this script is to update both MikroTiks that are at 6.40.9 and at 6.4...

Zetera

So I have a network where I want AP management on VLAN 11, switch management on VLAN 10 and several other hundred VLANs for residents that are dynamically assigned by other equipment and software. Our typical brocade configuration that functions is the following but we are looking to replace them wi...

Zetera

Router -> Brocade -> Mikrotik via SFP1

Zetera

I didn't want to give you all redundant information so I trimmed the config down in the previous config but it does include the following vlans that I am pasting here. I ran a show mac-address command on a brocade switch that the MikroTik is uplinking to and discovered the following. MAC-Address Por...

Zetera

Currently whenever I need to ping a mikrotik on this network it only receives pings if it is directly pinging the device. For example the router cannot even see the mikrotik unless the mikrotik is actively pinging said router. Here is the config of the mikrotik acting as a switch. Please let me know...

Zetera

-----------------

Zetera

Edited that to reflect disabled=no.

No joy. the problem persists.

Zetera

Also check PC Firewall. Connection Profile might be public instead of private then windows firewall will be more restrictive My outgoing firewall has connected to thousands of MikroTiks before. I'm not entirely sure what you might mean by 'PC' in this case; and there is no receiving PC on the other...

Zetera

/interface ethernet set [ find default-name=ether1 ] name=ether1-wan-master /interface ethernet set [ find default-name=ether4 ] master-port=ether1-wan-master /interface ethernet set [ find default-name=ether5 ] name="ether5 trunk" /ip neighbor discovery set ether1-wan-master discover=no ...

Zetera

Winbox is not limited to any range via IP service or the firewall rules that isn't mirrored (I've triple-checked) on other ports that are accessible. Didn't know that you could limit users to certain ranges (good to know) also the user was not limited to any ranges either. I've done a Masscan and co...

Zetera

Connecting via WAN. Winbox is enabled as a service on port 8291. It does allow me to connect via port 80 into the MikroTik and Yes I created an allow all firewall rule and it still does not allow me access. /ip firewall filter add action=accept chain=input dst-port=8291 in-interface=ether1-wan-maste...

Zetera

Cannot remotely connect via WinBox. Winbox service is enabled on port 8291 Firewall Rules should allow it through. (I literally created an allow all input firewall rule and it still would not allow it.) I can connect to several other MikroTiks via WinBox just fine. The offending MikroTik allows HTTP...

Zetera

Zetera

Attached is a screenshot of the filter rules we keep seeing whenever we turn our hotspot server on. Does anyone have an inkling as to why this is occuring?

Zetera

Got this reply ten minutes after my last reply. Darn should've checked here. I discovered this for myself. This did happen to be the case. Thanks though!

Zetera

The error one of the tenants gets when they try to connect to nsecu.org is "The requested url was rejected. Please consult with your administrator" id 10250750231298463641

Zetera

/ip firewall filter :do { add chain=input action=accept protocol=tcp src-address-list=Placeholder in-interface=ether1-WAN dst-port=80 comment="allow webfig" }\ on-error={ add chain=input action=accept protocol=tcp src-address-list=Placeholder in-interface=all-ethernet dst-port=80 comment=...

Zetera

As stated in the title the following line does not run on reset in a MikroTik :if ([/system resource get board-name] = "RB750GL" ) do={ :do { certificate import file-name=AddTrustExternalCARoot.CRT passphrase="" }\ on-error={ certificate import file-name=AddTrustExternalCARoot.cr...

Zetera

Normally the only safe way to handle things like this in scripting is to use the do { statements } on-error={ statements } construct. Otherwise when an error occurs during expression evaluation the script simply stops, so you cannot test for conditions like nonexisting items safely. Wish I knew thi...

Zetera

I got it to work!

:if ( [ :len [ /file find name~"flash" ] ] >0 ) do={ /certificate import file-name=flash/example.crt passphrase="" } else={ /certificate import file-name=example.crt passphrase="" }

Zetera

It seems to work just fine on R1s (my old script worked on R1s. But on R2s and newer it can't seem to find the file at all.

Zetera

Hey Chupaka. I would really appreciate your help on a script I was trying to run. I made a topic in the script topic for the forums. Please help!

Zetera

Basically "If flash folder exists; do 'this set of commands'; else 'this set of commands'.

any way to get this to work will be much appreciated. (An explanation would be awesome as well!

Zetera

:if ( [/file find flash] = yes) do={ certificate import file-name=flash/placeholder passphrase="placeholder" certificate import file-name=flash/placeholder passphrase="placeholder" certificate import file-name=flash/placeholder passphrase="placeholder" certificate impor...

Zetera

Is there any guides on remotely accessing them, that you can link me?

Zetera

Can you use NetInstall remotely?

Zetera

Again. Any help would be great.

Zetera

I have a few affected MikroTiks that I cannot remotely access due to the malicious program that hit anything with a RouterOS version of lower than 6.38.5 . I was wondering if there was any way I could get into them if it will not allow me to use WinBox or the WebFig. It will allow me to remote into ...

Search found 52 matches