MikroTik

JazzMaster

MBIM stands for "Mobile Broadband Interface Model" look it up on Google for a detailed explanation.

JazzMaster

I believe this you tube video may help you with your problem.

https://youtu.be/swXS4sO8smE?si=FLjr_yvvbSeXWsGZ

JazzMaster

Is your ISP providing VLAN 30?

JazzMaster

If autoupgrade = no then it will not upgrade automaticly.

Please type this in a terminal session just to verify.
system/routerboard/settings/print

JazzMaster

Do you think you could post your config?
/export hide-sensitive file=anynameyoulike

JazzMaster

It should be easy to unscramble but we do need to see your config.
/export hide-sensitive file=anynameyoulike

JazzMaster

I don't know this for sure, but isin't there a drastic drop of band speed when the 317 switch is used in router mode? If that is true there might be a unacceptable speed drop on the CCR. Will this be true?

JazzMaster

Let's start over. You have a CRS310-8G+2S+IN that you are unable to connect to. Is that correct? you need to connect a laptop or computer set with thee IP of 192.168.88.10 (or anything other than 1) to any port on the CRS. If that port lights up you have a connection. if you get connectivity open a ...

JazzMaster

You should try the download again after you disable FASTRACK.

JazzMaster

One quick question, Are you using the CRS310-8G+2S+IN as a router or as a switch? You do understand that the default address of the switch is 192.168.88.1?

JazzMaster

I have one that I use every day. I have right now, port 1 as my input. I am in the process of setting up a full 10gig network so I will move the input to sfp+1. how have you tried to access the switch for setup?

JazzMaster

do you think you could supply the config of your router?

JazzMaster

[urlhttps://youtu.be/GTDgeZLc190?si=efi-oVaDP9q10Cl4][/url]
This Video may help also

JazzMaster

Please post your full configuration. It helps to resolve your issues.

JazzMaster

By adhearing to the rules, I have progressed into becoming better and better at Mikrotik each day. I realy do appreciate all the help I have recieved in this forum.

JazzMaster

Might I ask what made you get the RB3011?

JazzMaster

Did it solve your problem completly? If so please mark "Solved"

JazzMaster

Try this to see if it does what you want.

In WINBOX go to IP....DHCP Server.....Leases
There is a "FIND" window in the top right.

Enter your wildcard string in that line and see if that will work for you.

JazzMaster

Have you tried it yet? If so what command did you use?

JazzMaster

In Terminal type "/ip dhcp-server lease print" that will display what you are looking to accomplish, as I understand what you are wanting to see.

JazzMaster

In WINBOX go to IP....DHCP Server.....Leases and you will see your list of MAC addresses for the DHCP along with the clients attaached to that DHCP Server

JazzMaster

Could the address be 192.168.88.1?

JazzMaster

I woul like to know what you think of the AC3 WAP's. i am trying to decide on Mikrotik or RUCKUS R850 for a quality Access Point

JazzMaster

I Agree, The RB5009 would be a wise investment.

JazzMaster

I also have a 3011 and I am in the process the setup to a new MikroTik Cloud Core Router CCR1009-7G-1C-1S+.
I hope this turns out to be a fairly simple process. Does anyone know if there is anything I need to do before attempting to load my current config into the CCR?

JazzMaster

I hope to start with you have the AT&T Gateway in "Passthrough Mode".

JazzMaster

My choice is with TP-Link EAP660 HD.WIFI 6 and a host of other features . https://www.amazon.com/TP-Link-EAP660-HD-High-Density-Deployment/dp/B08PW34WPX?tag=georiot-us-default-20&geniuslink=true&ascsubtag=trd-us-1378641934407020800-20&th=1 Description from AMAZON TP-Link EAP660 HD | Omad...

JazzMaster

Can you say...."Single Point of Failure"? One 48 port switch working at 50% or less would be very expensive to replace not to mention the downtime in getting a new one setup and configured. I believe that the two 24 port switches would be preferable in your case. They are cheap enough so t...

JazzMaster

Mikrotik is a quality product line that provides a secure network in an unsecure world.

JazzMaster

What you do have all the customers on vlans and the smart devices have IPs on the management vlan and thus not accessible. In other words not on the same subnet. Best suggestion is not to corner yourself into a twisted solution by deciding the config before articulating the requirements. Write down...

JazzMaster

Is it possible to configure Queues for various upload and download speeds. EXAMPLE: 1) 30M Download x 7M Upload 2) 50M Download x 7M Upload 3) 75M Download x 15M Upload 4) 100M Download x 30M Upload 5) 100M Download x 50M Upload The Wan Connection we Have is 1Gb x 1Gb dedicated Fiber Can anyone prov...

JazzMaster

In Winbox do this..... "System" "Packages" "Check for updates" This will populate your 1009 to the latest upgrade packages. After this is done go to..... "System" "RouterBOARD" "Upgrade" If all goes well you will have all the correct packag...

JazzMaster

Have you ever seen the "Router On A Stick" setups?

JazzMaster

I agree with anav, Assign VLANS and do it correctly, then you just might have a working network.

JazzMaster

If it were me I would set your switches to static addresses IE: 192.168.100.3 and 192.168.100.4. I would also setup a static reservation up to 192.168.11.10 with a dynamic range of 192.168.100.12-192.
168.100.254.
Then you might see how that works.
Just my low knowledge opinion.

JazzMaster

You might want to watch This Video.
https://www.youtube.com/watch?v=3BCKGvi6xlA

JazzMaster

I have a CRS326-24G-2S+ and want to quickly set it up as a router with different subnets in the 10.x.x.x/8 range.

I have the internet plugged in to port 24. Why doesn't the WinBox UI allow me to choose that one in the quick set wizard?

eth1.png

Don't use quickset.

JazzMaster

Just to show you what the possibilities are for Mikrotik and Ubiquiti and Cisco combinations.My Network.jpg I have no doubt, that there are almost endless combinations with MicroTik and other vendors, such as Cisco and Ubiquiti. But I can’t see how your schematic would help or enlighten me? I clear...

JazzMaster

Isthere anyway to stop the log file or just maybe pause it on a CCR?

JazzMaster

Just to show you what the possibilities are for Mikrotik and Ubiquiti and Cisco combinations.

My Network.jpg

JazzMaster

I was thinking of setting up a dedicated L2TP tunnel from the CCR to a RB3011 as a server to client setup.

JazzMaster

Greetings,
Is it possible to have more than one L2TP Server on one Mikrotik Router such as the CCR?

JazzMaster

Well I did have an ulterior motive..........
I wanted to hear .......... INDIANA WANTS ME ...... ;-)))))))

You have been very helpful to me .I do appreciate your help.

JazzMaster

SUCESS!!!! The firewall is back to normal and I have tested all VLANS on the router and switch for proper communications and blocking of inter-VLAN communication. I have a management network set and that works flawlessly on the switch. My next task is to fully understand the firewall setup in order ...

JazzMaster

Thank you so very much for the input. I will perform the changes requested and let you know how it goes. Again, thank you very much.

JazzMaster

UPDATE ON MY ISSUE After a reset of RB3011 and removing factory config I was able to create a completed VLAN configuration on the router. I also have a CSS326-24g setup to accept my VLANS from the RB3011. All is well with this setup. I have been able to understand the VLAN setup in the RB and the CS...

JazzMaster

Why reset something that works?

He stated he has already done that and it doesn't work. A possible error in the reset method.

JazzMaster

Did you do your reset using this method? How to hard re-set a RB250GS, RB750/750G back to factory default Unplug all LAN and power cables Locate the "Reset" button, it's at the back right beside the power, use a sharp object, press and hold (make sure you can feel the press down!) Insert p...

JazzMaster

This can be set to NONE, known to cause issues........ /interface detect-internet set detect-interface-list=WAN Still dont see your DNS server settings.......... /ip dhcp-server network add address=100.100.11.0/24 gateway=100.100.11.1 dns-server=100.100.11.1 add address=100.100.12.0/24 gateway=100....

JazzMaster

This can be set to NONE, known to cause issues........ /interface detect-internet set detect-interface-list=WAN Still dont see your DNS server settings.......... /ip dhcp-server network add address=100.100.11.0/24 gateway=100.100.11.1 dns-server=100.100.11.1 add address=100.100.12.0/24 gateway=100....

JazzMaster

Oh in that case, please read this excellent reference. https://forum.mikrotik.com/viewtopic.php?f=23&t=143620 I personally use Vlan's for all subnets and the only thing the bridge does is bridging. Here is my new config file with the VLANS working. I would appreciate it if you could look at it ...

JazzMaster

Oh in that case, please read this excellent reference. https://forum.mikrotik.com/viewtopic.php?f=23&t=143620 I personally use vlans for all subnets and the only thing the bridge does is bridging. I applied your instructions and it is working just fine now. I guess I messed up when I attempted ...

JazzMaster

Why is your WAN connection setup with DHCP and pool, and even on bridge etc.................. ?? It is dhcp client only........ DHCP server networks are missing dns-server= add address=100.100.11.0/24 gateway=100.100.11.1 dns-server=100.100.11.1 Interface list members is missing all the vlans list=...

JazzMaster

I have a RB3011 that has 5 VLAN's setup on port 6. I am able to pass these VLAN's to my CSS326-24g Switch wit no problem. The issue I have is that I am able to aquire the correct VLAN address on the proper switch port on the CSS but I get no internet connection. I do get the following....... IP Addr...

JazzMaster

so for now i have this.I did not use vlans.Basically i want 2 seperated networks ,Main and Iot network .I want all 3 house to comunicate with each other mainly couse of my freenas/plex so. I created a bridge for ether2-3 called MainBridge with ip 192.168.2.1/24 and Iot bridge on ether4-5 with 10.0....

JazzMaster

I think the concept has merit but I would worry about cooling. The application of this high density switch worries me due to a single point of failure.

JazzMaster

Here is another option, A CCR-1009-7G-1C-1S+. This is a very robust router that offers expandability and options for your existing and future network. The cost is around $425.00.
This is just an option I thought I would throw out for you to review. I hope this helps.

JazzMaster

The .CBC file has all your saved connections not sessions in it (register Manged) or its empty, if you haven't one. The easiest way would be to File -> Save As... to save it in a Folder of your choice and delete the other from your desktop. Well here it is one more time... Steps Performed to create...

JazzMaster

What's the name of the file?

winbox3.22.CBD is the file name

JazzMaster

I am using Windows 10 Pro. It is a .CDB file

JazzMaster

I have moved the WINBOX .exe file to my UnRaid Server. I also moved the Sessions folder to a separate directory on my UnRaid Server. Still the same result, A small text file is generated and placed on my desktop each time Winbox is opened.

JazzMaster

Each time I use WINBOX there is a small text file that is generated and placed on my desktop. This happens on each computer I use for WINBOX.
WINBOX Version on each box.....6.48.1

Is there some setting to stop this?

JazzMaster

Nope...That didn't work.

JazzMaster

OK I'll try that but it has been working just fine until the last update.

JazzMaster

Each time I use WINBOX there is a small text file that is generated and placed on my desktop. This happens on each computer I use for WINBOX.
WINBOX Version on each box.....6.48.1

Is there some setting to stop this?

JazzMaster

Is the ISP modem in Bridge Mode?

JazzMaster

What type of ISP service and equipment do you have?

JazzMaster

Is there anyone that has any idea what to try to get this fixed?

JazzMaster

Hi, Try resetting the network on your computer: Settings> Network & Internet> Network reset but be careful that this will reinstall all your network interfaces and bring your settings to the default. You will need to reset all network settings for wifi, ethernet and VPN. Best regards, Geo I hav...

JazzMaster

I am sorry but I am confused about how to turn on logging for IPsec.

JazzMaster

I am having issues with a L2TP connection. Each time I attempt to connect via Windows VPN Client I get the attached error. I have been able to get right into the VPN connection before but something happened to block me from it now I have verified all settings in my VPN and have even gone to a new lo...

JazzMaster

Here is the attachment

JazzMaster

I am having issues with a L2TP connection. Each time I attempt to connect via Windows VPN Client I get the attached error. I have been able to get right into the VPN connection before but something happened to block me from it now I have verified all settings in my VPN and have even gone to a new lo...

JazzMaster

Thank you. I will look at that.

JazzMaster

Something I was thinking about. Is there a simple schedule on one port to shut internet down say from 10:30pm to 5:00am? I thought this might work on an HEX 750GR3.

JazzMaster

Is there any simple method to stop attacks from other countries? This applies to CCR If you only allow trusted networks access to the CCR services with firewall filter input rules you don't have to block by country. Blocking by country has very minimal impact. disable unused services in /ip service...

JazzMaster

Hello, you can add the following lines into a script which will create and address-list will all the IP address from Bulgaria ( just an example ) and based on that you can create a firewall rule to drop the connections from those ip's. /tool fetch url=http://www.iwik.org/ipcountry/mikrotik/BG /impo...

JazzMaster

Is there any simple method to stop attacks from other countries? This applies to CCR

JazzMaster

I'm keeping the changes on the AP to a minimum. Really not much there as far as I remember. i set this up years ago and it's been solid, haven't changed anything till the VLANs this weekend. Nothing fancy, there are 3 SSIDs over 2.4/5GHz, all internal, and each one specifies a VLAN. It's running th...

JazzMaster

@JazzMaster, is there an easy way to extract that kind of like /export? I did the settings backup but that looks like a binary file.
I would like to know if you have VLANS setup on the AP?

This issue is very interesting to me.

JazzMaster

@JazzMaster, is there an easy way to extract that kind of like /export? I did the settings backup but that looks like a binary file.

I would like to know if you have VLANS setup on the AP?

JazzMaster

Would it be possible to see your config on the Ubiquiti AP-LR?

JazzMaster

On your Ubiquiti AP are you running the latest firmware? UniFi firmware 4.0.80 for UAP-AC-Lite/LR/Pro/EDU/M/M-PRO/IW/IW-Pro We have a 3011 working with no issues in a 10 story residential apartment using 10 24 port Cisco switches. Each switch is loaded at about 60% fill. The AP-LR is a robust AP to ...

JazzMaster

Absolutely do not transfer the backup. Print the setup and enter the values in the TIK manually.

JazzMaster

I have a cable modem that is installed by my ISP. It is in BRIDGE MODE to allow passthru communications. That runs into my 3011 that is used for Routing/Firewall and distribution to other networks like Home Office Network....Home Network....WIFI AP......IOT Devices. All this works great. The key is ...

JazzMaster

I have a new Hex RB 7500 that I would like to setup a simple L2TP connection. What are the requirements to accomplish this?

JazzMaster

A big Thanks for a simple answer!

JazzMaster

I have a connection to a CCR that has Dude 6.4.13 installed but it is disabled. Should this be enabled before a remote local installation of Dude is setup?

JazzMaster

Here is a very good link to help you with the config. I have used this for several configs and it is very easy to follow.
https://www.youtube.com/channel/UC_vCR9 ... exICys6z4w

JazzMaster

I agree. Static is always better in management use.

JazzMaster

The Mikrotik CCR is a quality choice for your application. We have one setup that we use along with network segmentation using Mikrotik CSS326-24G-2S-RM Switches. These switches are a very cost effective item that provides a very simple setup with total port isolation. This is a benefit in public is...

JazzMaster

I am a USAF veteran that also loves Mikrotik products. It sounds like you have the same setup I have in place in my home with the exception of the ISP. I am blessed with a solid 500mb x 50mb cable connection. If you are interested in sharing communications with a fellow Mikrotik user please contact ...

JazzMaster

Hi. I have a problem. My client has a server inside a LAN. I created a tunnel to connect to another server connected to MikroTik and everything works fine. Now they have another server connected to a TP-Link router, but the client wants to connect to this server over VPN. MikroTik ping the server, ...

JazzMaster

Look at my project for using Syslog to monitor Mikrotik Router using Splunk.

viewtopic.php?t=137338

That is a very impressive and detailed post. This is why I am getting better with Mikrotik, all the quality help available. Thank you.

JazzMaster

Yes
Code: Select all
/log print file=log.txt
A remote syslog might b a better option depending on intended use.
https://wiki.mikrotik.com/wiki/Manual:System/Log

Thanks, I knew the command was a simple one. I am going the setup a syslog server so I can more readily track the messages.

JazzMaster

My simple question is …..Can the Log File be exported so I can document it?

JazzMaster

Code: Select all

What type of Unifi equipment are you using for the network associated with the cloud key?

JazzMaster

I figured this problem out myself by trial and error. I had the check marks in the wrong column for my application of my wan from my RB750. As soon as I changed this I was ablee to get the proper and complete port isolation from the switch.
I hope this will help someone else.

JazzMaster

The Port Isolation menu can look confusion from the start, you almost need trial and error to wrap your head around. However, some more description and examples are now added to Wiki. See if this manual looks better now. I have setup my CSS326-24G Switch using the following settings in "Port I...

JazzMaster

The check marks are the ports that the CAN be communicated with. For example, in your screen capture, port 1 can communicate with all other ports.

Thank you so very much for the down to earth answer. It never fails that the simplest thing trip you up.

JazzMaster

OK. Naming your bridge "Static IPs" is somewhat confusing - it appears to actually be your WAN, and it is included in your LAN interface list which will allow more external access to your Mikrotik than you may wish for. The /ip dhcp client entry for sfp1 is the cause of your DHCP requests...

JazzMaster

Here is what you requested. I am so sorry for the delay but personal problems come first. I do hope you can help. I have discovered that the address that is requesting is the MAC address from the Mikrotik 3011 port ether2. What could cause the port itself to request a DHCP address when one is alread...

JazzMaster

Swos_portisol_css326.png What do the Check Marks Stand For? I need to isolate each port on the switch to prevent port to port communication. 1: Port 1 =Unchecked All other ports checked. Would this mean that port one cannot communicate with any other port? I know that this is a basic question but I...

JazzMaster

No, the whole config - to see all of the interface and IP configuration

I guess I am confused. Is there a specific script to run to accomplish what you need?

JazzMaster

Is this what you wanted? [code/ip dhcp-server add add-arp=yes address-pool="CB Pool" disabled=no interface=ether2 lease-time=\ 1d30m name="CB DHCP" add add-arp=yes address-pool="McCurdy Pool 1" disabled=no interface=ether6 \ lease-time=1d30m name="McCurdy DHCP 1&qu...

JazzMaster

I'd post the output of /export hide-sensitive with any public IPs, etc, obsfucated. Rather than multiple screenshots, either save as a file and copy to your computer, or use <right-click> Copy All in the terminal window. Paste here in a code tag (the [] icon above the reply box). Ok I’ll get to my ...

JazzMaster

Here is the result of the server and client request

My Results.PNG

JazzMaster

results.PNG

JazzMaster

Log File.PNG

JazzMaster

I have attached a visual of my problem. The MAC and I/P addresses do not exist on the network yet the DHCP Server keeps offering and loading up the log file.

JazzMaster

Code: Select all

I have a problem with a DHCP Server. It keeps offering two addresses to something that no longer exists on the network. I am unable to remove the address from the DHCP Server Leases Tab or the ARP table. Is there a method to acomplish this?



Dennis

JazzMaster

It most definitely is a fun assignment. As for the question "needs to be isolated from any other port" I must assign a separate network address in a dynamic range so each port has a private network. That is why I wish to use VLANS. I will assign vlan 101 thru 120 to ports 1 thru 20 retrosp...

JazzMaster

I do need help with this question.

JazzMaster

Here goes my first post for help.I have a task that I am not certain how to start. Here is a list that might help. Configure CCR1009-8G-1S-1S+ router to provide VLAN setup for one phone VLAN 2 and whatever is necessary to provide private vlan configuration to a CSS326-24G Switch CSS 326-24G configur...

JazzMaster

Here goes my first post for help.I have a task that I am not certain how to start. Here is a list that might help. Configure CCR1009-8G-1S-1S+ router to provide VLAN setup for one phone VLAN 2 and whatever is necessary to provide private vlan configuration to a CSS326-24G Switch CSS 326-24G configur...

Search found 115 matches