MikroTik

nathanscottgrey

Many Thanks!

nathanscottgrey

I downloaded the torrent of RouterOS 3.0 and see there are 4 different types:

ppc
mipsbe
mipsle
x86

Which do I use for a routerboard 500?

nathanscottgrey

I have to believe there is a way to point traffic at either of the addresses that lead to the two different modems.

nathanscottgrey

No can do. I need to put specific traffic through each of the two modem gateways hooked up to the MT. I need to channel traffic to each of the addresses.

nathanscottgrey

To all:

I have a router that has two lines to the internet. We'll call the gateways 1.1.1.1 and 2.2.2.2.
I need to proxy so traffic to 3.3.3.3 only goes out 1.1.1.1 and also proxy 4.4.4.4 so it only goes out 2.2.2.2.

How do I do this?

-Nate

nathanscottgrey

My best guess is I need to proxy all traffic to the two sites in question through specific gateways, as even when one goes down, the pings still complete and show as up.

nathanscottgrey

Does anyone have any ideas?

nathanscottgrey

Here is my routes table. /ip route pr Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE 0 ADC 10.1.10.0/24 10.1.10.150 ether2 1 ADC 10.2.10.0/24 10.2.10.152 ether1 2 ADC 10.5.50.0/24 10.5.50.1 wlan1 3...

nathanscottgrey

I have a router with two pipes out to the internet, on ports eth1 and eth2. I have set up ECMP and it is working, to a point. More importantly, I can winbox or telnet in through the line in eth1, but not the line in eth2 despite having the proper ports forwarded (8291, and 1723 for our VPN). Is ther...

nathanscottgrey

I followed the wiki instructions and have ecmp set up and working on eth 1 and eth 2. Eth1 address 10.1.10.150, gateway 10.1.10.1 Eth2 address 10.2.10.152, gateway 10.2.10.1 My ECMP setup is per the wiki. My Netwatch is set up as such: #1 Host: (off-network IP address #1) interval: 00:00:30 timeout:...

nathanscottgrey

I didn't realise I had to add the IP address to the bridge. In my case, I have 6 devices that need to plug into 4 ports. How do I enter an IP address in a bridge port when the port plugs into a switch to connect three machines to the network? Can I enter three IP addresses?

nathanscottgrey

There is no doubt all interfaces are bridged. The problem is when they try to communicate with each other, it isn't by IP address, it is by workgroup name, and that's not resolving.

Since teh communication is by workgroup and not IP, do I need the DNS entries for the workgroup names?

nathanscottgrey

Question. I have three computers on a network. They are part of a windows workgroup. When I have them plugged into a switch and then the switch into the router, they can communicate fine. When I plug each of them into the router (eth ports on a bridged network) they can't communicate with each other...

nathanscottgrey

The ports in question are being forwarded. They are 12536 and 12546.
The ISP isn't blocking them as they'll work through a generic router.

It is noted that I see the information being sent on port 10018. Do I need to do any src-natting to send out on ports 12536?

nathanscottgrey

I have a customer using a Point of Sale machine that needs to communicate out and in on two specific ports using an MSWINSOCK protocol. These packets can communicate through their modem and generic router without any issues. However, it seems as if the traffic that uses the MSWINSOCK protocol can't ...

nathanscottgrey

Could be time warner, comcast, verizon, the list goes on. I want to do this at multiple sites and most have different isps.

nathanscottgrey

I am trying to do a combination of OpenDNS and a content filter. I need the fallback as my customers who ask for it are all using DHCP on their connections and I have no way to constantly update the entries remotely as I have to register with OpenDNS using their public IP address (when I log into th...

nathanscottgrey

I have two Mikrotik routers set up at two different locations. I operate at location A. The remote Mikrotik is at location B. In order to do some web based updates in the remote system, I need to complete a web form updating some of our web based services but it has to tag my public IP as the public...

nathanscottgrey

There is no commonality to the syntax beyond the vast majority being .com sites. Is the issue that the Mikrotik just can't handle that many rules (despite there being enough storage space to do so)? Or, do I need to make the .rsc files smaller and import it in minimal chunks? If I can get it done th...

nathanscottgrey

This is about content filtering for Public Wi-Fi access. I can't only allow a few sites. The amount I am trying to block is far less than the amount I am trying to leave open access to.

nathanscottgrey

In order to update services on some of my sites, I need to check into a website using the public IP the router is on. I can't be at the sites specifically. Which of the services (VPN, src-natting, or proxying) should I use to make my computer go through a mikrotik here in the office and out the remo...

nathanscottgrey

Is there a limit to the number of rules that can be imported through an .rsc file?
how many is too many?

nathanscottgrey

I have chopped off the first 50,000 rules. I am attempting to import it in that size batch. So far, I entered import domains1.rsc at the Terminal Prompt. This hasn't crashed with an error, but 2 hours later it is still hanging in the terminal screen. A new terminal doesn't give me a command line. Is...

nathanscottgrey

The MT in question has 2.9.44 installed.
There are 527,171 rules on it. Do I need to chop that into pieces? If so, how small a batch of pieces?

nathanscottgrey

This is the specific error message if it helps.

Console has crashed or maybe system is completely buys; please log in again

nathanscottgrey

When importing the .rsc file (which was originally saved as .txt and I only changed the file extension) what is the specific command? The file is named domains.rsc and when I try the command
/import domains.rsc
or
import domains.rsc

I get a system crashed error.

Where in here is my error?

nathanscottgrey

The theory is to plug a sprint broadband card into the Mikrotik and pay for a broadband subscription and let that be my internet connection. Is that possible?

this is the crux of everything I am trying to do. If this is possible, Success! If not, Defeat.

nathanscottgrey

Should I assume the answer is no?

nathanscottgrey

Is there a way to configure a Mikrotik so that it can be installed in a vehicle (i.e. a Limo or Bus) so as to be a roaming hotspot? This would be designed solely to provide the vehicle's passengers with access. Is there a specific model of Mikrotik that would be best suited for this application? Is ...

nathanscottgrey

The one option seems very simple, assuming static IPs. The two modems in question are not. The primary is PPPoE and the failsafe is dynamic. How would I adjust the gateway failover rule of: /ip route add gateway=192.168.1.1 check-gateway=ping /ip route add gateway=192.168.2.1 distance=2 When I won't...

nathanscottgrey

Hello all: I have a client for whom I am installing a MT wireless solution. My client has two hi-speed internet modems with different carriers. He wants to plug them both into the Mikrotik and wants to have WAN access switch from the primary to the secondary should the service of the primary go offl...

nathanscottgrey

Many thanks to all of you. The law is fuzzy as whether our business falls under the CALEA shell. Everything points to yes, I would rather be safe than sorry.

nathanscottgrey

I just sat in on a web conference on CALEA (Communications Assistance for Law Enforcement Act) compliance in the US. According to the conference, a hotspot provider needs to be CALEA compliant in the US. To be CALEA compliant, we need to do the following things: 1. Identify and isolate CII (Communic...

nathanscottgrey

I assume the entry in the text editor will read as such:
ip proxy access add action=deny dst-host=<urladdress>

is this correct?

-NSG

nathanscottgrey

Is there a way in a mikrotik to load a list of websites (i.e. from urlblacklist.com) to provide for content filtering? I read about something to do with the HTTP proxy that could accomplish this, but I am not sure about the syntax. The same goes for writing a script to block specific websites withou...

nathanscottgrey

There are three machines hooked up to a linksys router that I am trying to replace with a mikrotik. Hooked to the linksys router everything works. Each of the three machines can access the shared folders on each other machine. Hook up the mikrotik in the place of the linksys and plug in the three ma...

nathanscottgrey

Problem solved - It was never how it was traversing the router. The proprietary software needed to be accessed form te outside to re-synchronize with the home server. All I had to do was open ports.

Many thanks to everyone who chimed in trying to help.

nathanscottgrey

That makes sense. How do I do it? The manual is a bit confusing to me.

nathanscottgrey

I need NAT when I leave WLan-1 and one of the eth ports, as I have a machine on the Lan side that needs internet access. Is there a way to allow NAT for the WLan and a specific ethernet port?

nathanscottgrey

How would I change it so only it's traffic to the other machine on the network isn't NATted? My concern is I don't override the masquerade settings for the wired connections.

In essence I understand what I have to do, but not what the effect will be.

nathanscottgrey

here's my exports: /ip address export # jun/13/2007 12:00:44 by RouterOS 2.9.43 # software id = IEDG-3TT # / ip address add address=10.5.50.1/24 network=10.5.50.0 broadcast=10.5.50.255 \ interface=wlan1 comment="hotspot network" disabled=no add address=192.168.1.254/24 network=192.168.1.0 ...

nathanscottgrey

I have a setup with a Point of Sale (PoS) machine[192.168.1.11], a file server [192.168.1.10], and the mikrotik router. Before, the PoS and file server were both plugged directly into the modem on the same private address scheme and all was well. With the install of the router, they can no longer co...

nathanscottgrey

One thing I noticed while watching traffic is that the PoS machine in question (.11) doesn't try to communicate directly with the file server at its address (.10). It sends out broadcast traffic (to 192.168.1.255). Is there something in the Mikrotik stopping the broadcast traffic from going to the f...

nathanscottgrey

/ip add export / ip address add address=10.5.50.1/24 network=10.5.50.0 broadcast=10.5.50.255 \ interface=wlan1 comment="hotspot network" disabled=no add address=192.168.1.254/24 network=192.168.1.0 broadcast=192.168.1.255 \ interface=bridge1 comment="Private Network 1" disabled=n...

nathanscottgrey

I have the interfaces eth2-eth5 set to bridge mode. So all wired connections are on the 192.168.1.0/24 network. Do I need to take the two machine network and plug it into a switch and into the router? Isn't there a way to have the ports communicate with each other through the router? It seems silly ...

nathanscottgrey

I should have been more clear. The .10 is in port ether2 and the .11 is in ether4. This is how they are connected - through the router in the address scheme I have set up in NAT masquerading. For some reason, instead of communicating with each other, they just broadcast to 192.168.1.255. They won't ...

nathanscottgrey

What I have may be simple, but I am a rookie dealing with routers. I have a Point of Sale (PoS) machine on the network at 192.168.1.11 that needs to communicate with the fileserver at 192.168.1.10 on the network. How do I set up a default route that 192.168.1.11 sends directly to 192.168.1.10 withou...

Search found 47 matches