MikroTik

DottorT86

You're great!
I'm using 7.10.2 and it doesn't work but using 7.8 it's ok!
Thank you very much!!!

DottorT86

Yes, using the password it works but I would like to use it with RSA without a password because I would like to use ssh-exec.

DottorT86

Hi everybody, As you can guess from the title I have a problem connecting two Mikrotik using SSH with RSA inside Winbox. I did a lot of tests and I try to summarize them. I generated the RSA key pair with PuTTY Key Generator: Type of key generated: RSA Number of bits in generated key: 2048 I exporte...

DottorT86

I'm already using The Dude.
Until version 6 I updated all Mikrotik devices through The Dude.
Now I have had to update many devices to ROS 7 and The Dude won't let me update devices that use ROS 7.
At the moment I update about 180 Mikrotik Routers using The Dude.

DottorT86

Thanks for the reply.
Yes, I mean exactly the "Auto-Upgrade" item found in the "System" menu.
I'm surprised too since it's all perfectly documented here in the official Mikrotik support page.
Is there an alternative to mass update ROS 7?

DottorT86

Hi everyone, recently I've discovered the Auto Upgrade feature. I followed the step by step guide using ROS 7. I configured everything as written in the guide but but when I click on Refresh it doesn't work. The packages that can be downloaded or updated do not appear. Has anyone tried this works in...

DottorT86

To create my configuration I followed the example proposed in the official Mikrotik guide but I cannot in any way make it work. Is there something wrong? How is it possible that by going from version 6.49.2 to 7.1.1 nothing works? This is the original configuration: /interface bridge add name=bridge...

DottorT86

Hi everybody, recently I tried to upgrade my CRS326-24G-2S + RM from version 6.49.2 to version 7.1.1. I use the CRS326 as a switch. The configuration is quite simple but upgrading ROS from 6.49.2 to 7.1.1 nothing works anymore. The only thing I can do is log in with Winbox. This is my configuration:...

DottorT86

Thank you so much for your answer!

DottorT86

I think that now I've solved. Creating Client certificate in key usage I've selected "tls client" instead of "tls server".
Now it seems to work using Client certificate.

DottorT86

I made a new attempt. On the server router: - I enabled "Verify Client Certificate" - I exported the CA certificate with passphrase; - I exported the Client certificate with passphrase; - I loaded CA.crt, CA.key, Client.crt and Client.key on the Client router In the Client router: - I impo...

DottorT86

All certificates have flag "trusted=yes". I've exported CA certificate without passphrase and Client certificate with passphrase. I've uploaded CA.crt, Client.crt and Client.key to Client router. In Client router: I've imported CA.crt; I've imported Client.crt using the passphrase; I haven...

DottorT86

I tested using certificates but it still doesn't work... This is the working SSTP config: # Server side /ppp secret add local-address=192.168.255.1 name=Client password=\ "12345678" profile=default-encryption \ remote-address=192.168.255.2 routes=192.168.2.0/24 service=\ sstp /interface ss...

DottorT86

Can I use the same Key Usage for Server and Client certificates?

DottorT86

To create a Client certificate which "Key Usage" should I use?
In the CA certificate I used:
"crl sign"
"key cert. sign".

In the Server certificate I used:
"digital signature"
"key enciphrement"
"tls server"
Is that okay?

DottorT86

Thank you for your answer. I was able to set up a very simple SSTP site to site VPN. I have followed various guides that I have found online, everything seems to work, but I don't know if my setup is correct. Most of all I don't know if my setup is safe and reliable. Is there a step-by-step guide to...

DottorT86

I have found many examples of site 2 site VPN setup using IPSEC but from what I understand IPSEC requires public IPs on both sides of the VPN. Is it correct? What type of VPN do you recommend me to use? I would like to use OpenVPN but I havn't found any example of VPN site 2 site setup on Mikrotik w...

DottorT86

Hello everyone. This is my problem: I have two sites: - site 1 with static public IP (RB1100AHX2) - site 2 with dynamic private IP (NATted) (hAP mini) In site 2 I have an IPCAM that I would like to reach from the internet through my smartphone but unfortunately site 2 has a private IP address. Site ...

DottorT86

Thank you so much for your answer! Problem solved!

DottorT86

Hello everyone, a few days ago I decided to take full advantage of the switch chip of my CRS326-24G-2S + RM by configuring the VLANs with the new method (after ROS 6.41 version). Following some online guides I configured almost everything but for now I can only access with MAC-Winbox. With the old c...

DottorT86

Since the ccq tx changed, do the throughput changed too?

DottorT86

Hi, I have seen that about 3 years have gone by without receiving a reply. I would also be interested in the same question. I hope someone will answer sooner or later.

DottorT86

You do not need to test both wifi interface since you always change them at the same time.
But if for some reason interface are not the same status, you change is ok.

I made those changes for this reason.

Sorry for the previous quote. I just removed it.

Thank you again

DottorT86

Thank you so much for your reply!!! I have made some changes to your script to suit my needs and now it seems to work perfectly! Thank you very much! :if ([/interface wireless get wlan1 disabled]=no or [/interface wireless get wlan2 disabled]=no) do={ /interface wireless set wlan1 disabled=yes /inte...

DottorT86

Hi everybody, I know this topic has been raised many times but I have not been able to find a solution to my case. I would like to use the "mode button" to activate / deactivate the wifi on my hAP AC2 following these rules: - if wlan1 or wlan2 or both are enabled then disable both of them ...

DottorT86

Hi everyone! Is there any possibility to discover "username" and "password" used to attempt to login to my Mikrotik router? If anybody try to access to my router using wrong "username" and/or "password", is it possible to discover those wrong "usernames&q...

DottorT86

Hi everybody, For a couple of weeks I have been doing some tests with CAPsMAN and I finally managed to make it work. I would like to know if it is possible to use ACL or MAC address filtering with CAPsMAN. Is it possible to allow access only to the mac addresses that are in the list? Before using CA...

DottorT86

I have probably found the solution! I've added the Src. Address to the Masquerade. These are the masquerade rules before the change: add action=masquerade chain=srcnat comment="defconf: masquerade (NEW)" ipsec-policy=out,none out-interface=pppoe-1 add action=masquerade chain=srcnat comment...

DottorT86

Hi, I reopened this old post as I would like to ask a question regarding this configuration. I state that I have already done research in this and other forums and in the mikrotik wiki but I have not been able to find an answer, probably because I am not sure what to look for. I would like to make s...

DottorT86

Thank You so much for your reply!
I tried to search for this topic within Mikrotik Wiki but every link I found brought me to a blank page.
As soon as I can I try to perform the configuration following the explanation of Chupaka.
Thank You again!

DottorT86

Thank you so much for your reply Sob!
I solved my problem!
I have one last question regarding this configuration.
Would it be possible to ping an IP address (for example google DNS servers or Open DNS servers) for checking failover instead of the IP address of the PPPOE connection?

DottorT86

Hi everybody, A few days ago I activated my second internet connection, and I thought of using both connections at the same time via PCC lod balance. Both connections are PPPOE type and have dynamic IP but the second connection is behind NAT so i can't use DDNS services to reach my IP address remotl...

DottorT86

I would suggest you use L2TP/IPsec, it will be easier for you...

I have already configured the L2TP server with IPsec on Mikrotik and it works perfectly but now I would like to use OpenVPN.

DottorT86

https://wiki.mikrotik.com/wiki/Hairpin_NAT

Thank you so much for your answer!
I solved my problem!

DottorT86

Hi guys, I am trying to configure an OpenVPN server on my RB951 to remotely access my home network. To configure the server on the RB and the Windows client I followed this guide but it doesn't work. The client connects to the server and the OpenVPN icon turns green but I can't ping any devices in m...

DottorT86

Hi guys, I'm trying to solve a redirection problem. In my internal network I have some ipcameras which I access remotely through ddns. For example: IPCAM 1 - something.com:1234 IPCAM 2 - something.com:4567 IPCAM 3 - something.com:7890 I would like to access IPcameras from my local LAN network using ...

Search found 36 matches

Re: SSH RSA Mikrotik to Mikrotik not working [SOLVED]

Re: SSH RSA Mikrotik to Mikrotik not working [SOLVED]

SSH RSA Mikrotik to Mikrotik not working [SOLVED]

Re: ROS 7 - Auto Upgrade not working

Re: ROS 7 - Auto Upgrade not working

ROS 7 - Auto Upgrade not working

Re: CRS326 upgrade from 6.49.2 to 7.1.1 switch not working

CRS326 upgrade from 6.49.2 to 7.1.1 switching not working

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Re: Private IP site through public IP site [SOLVED]

Private IP site through public IP site [SOLVED]

Re: DHCP Client and RoMON on CRS326 using post 6.41 VLAN switch configuration [SOLVED]

DHCP Client and RoMON on CRS326 using post 6.41 VLAN switch configuration [SOLVED]

Re: Good signal but unstable tx ccq.

Re: WPS on virtual access point

Re: hAP AC2 - Mode button to enable/disable wifi [SOLVED]

Re: hAP AC2 - Mode button to enable/disable wifi [SOLVED]

hAP AC2 - Mode button to enable/disable wifi [SOLVED]

Discover username and password used to try to access my routerboard

MAC address filtering with CAPsMAN

Re: PCC load balance (2 WAN + 6 LAN) but LANs can no longer communicate each other [SOLVED]

Re: PCC load balance (2 WAN + 6 LAN) but LANs can no longer communicate each other [SOLVED]

Re: PCC load balance (2 WAN + 6 LAN) but LANs can no longer communicate each other [SOLVED]

Re: PCC load balance (2 WAN + 6 LAN) but LANs can no longer communicate each other [SOLVED]

PCC load balance (2 WAN + 6 LAN) but LANs can no longer communicate each other [SOLVED]

Re: OpenVPN server on RB951 + Windows Client configuration

Re: Redirect url:port to local lan ip:port

OpenVPN server on RB951 + Windows Client configuration

Redirect url:port to local lan ip:port