MikroTik

creatin

Managed to configure it

creatin

Thanks, this old RB433AH needed some maintenance so I replaced 2 of leaked capacitors. For 50 USD, got the routerboard and 3x PCI cards with pigtails. One of the cards is connected to a pannel antenna (client) while the other one is connected to a small omni antenna (AP), third card is removed since...

creatin

They don't mind, I got 4-5 mbit/s max during testing period but I need maybe couple of kbit/s non-continuous since sensors update data every 10 min.
Anyway I'll go with RB433 and 2x 2.4 GHz network cards, one as a client and the other as AP.

creatin

thank you

creatin

Hi,

I have an oportunity to get RB433 (for 50$) with 2x 2.4 GHz cards for project of replacing existing equipment on site. My question can RB433 be configured as a client on one card and as access point on another card?

creatin

Hi again, after exploring all the options I have, nothing worked. No LTE connection, no Wifi 2.4 GHz / 5 GHz link possible but what I found is a lot of open WiFis in the building where garage is placed. So I did a bit of research went to couple of bars in the building, got couple of wifi passwords a...

creatin

scripts are ran through Terminal which is not available on IOS. Not sure why IOS bans use of Terminal in MT app. Scripts can be run by clicking the Run Script button. Scripts can be edited in the app also. You don't "need" terminal to run scripts. I'm using scripts to provide me some data...

creatin

I can try with 5 GHz link and high gain antennas but don't think it'll work, if 2.4 Ghz didn't go through concrete, 5 Ghz wouldn't go either.

creatin

I'm using a lot of scripts on my MT devices, scripts are ran through Terminal which is not available on IOS.
Not sure why IOS bans use of Terminal in MT app.

creatin

Unfortunately garage is in another building, I'm not allowed to put anything on the walls/roof of the building.
Garage space has a main entrance door and from there it is 15 meters to my garage doors.
Since WIFI doesn't pass through concrete I'll test if I can establish connection with LTE/cell modem

creatin

Thank you all for proving me I was not right. I couldn't get 2.4 GHz signal out the underground garage. Tried with 2 panel antennas and later with 1 panel and Ubiquiti 13 dbi omni antenna. Since I can't get UTP cable between 2 buildings another solution (maybe) is a GSM/LTE model in the garage, depe...

creatin

Why isn't there Terminal in IOS version? Are there any other functionalities missing on IOS but can be found on Android?

creatin

search tag # rextended send whatsapp notification I use this for receive notification on WhatsApp: CallMeBot.com for send message, to MY WhatsApp on the phone, The Dude alerts: /log warning "callmebot 392*******: Service [Probe.Name] on [Device.Name] is now [Service.Status] ([Service.ProblemDe...

creatin

Hi, thanks everyone for comments and suggestions,
I've purchased one TPLINK and DLINK access points, 2 panel antennas 16 dbi each, will test the connection in following days and update.

creatin

Could you share with us what are the no-name version models, maybe a link where you bought them?

creatin

Mixed solution? Wireless bridge across road and utp cable from road to first client in garage? Unfortunately only wifi is an option :( Gladly a wireless bridge is...wireless. I agree, you really want to use a point to point connection with line of sight. What are the requirements? No needed for hig...

creatin

Mixed solution? Wireless bridge across road and utp cable from road to first client in garage?

Unfortunately only wifi is an option :(

creatin

Hi, I've been using so far wireless equipment only between clients with minimum obstacles but now I have a need to connect two clients apart 40-50 meters, one is in the garage (one level underground) and the other client is on a building across the street on the second floor. If there would be no co...

creatin

Try to add pause of 2-3 seconds between importing each line

creatin

Probably stupid question since I don't know the layout of your network, could it be someone connected a wire to ether1? Not sure where you keep this equipment, while I was in a rehabilitation we had very bad wifi reception so I looked around and found one of the switches opened, you could use 10 met...

creatin

Second it is advertised as GPEN, which should be mostly ISPs area, less Enterprise area and almost none of Home area, but it is not usable for ISPs and Enterprise scenarios. I think they are targeting a different kind of ISP than you have in mind... which more resembles home usage than enterprise u...

creatin

Try to use it in Germany :)

creatin

Will try it with B715 next year :)

creatin

No price for LTE18?

creatin

Usually ISP put restrictions on the speed once you use let's say 100 gb of traffic, after that it limits your speed to 5 mbit/s,
first time I hear ISP is limiting speed if you use full provided and I assume paid bandwidth

creatin

Overheating?

creatin

You'd like your connections to go to european servers?

creatin

Why don't you use Powerline Ethernet adapters instead of Repeater?

creatin

Easier if you have Wifi modem which supports 5 GHz, no conflicts with keyboard and mouse

creatin

My case, running DHCP on one of the routers, each MAC (client) always get same IP. If I want to deny service to a client (IP address), I do the following: 1. In IP - DHCP Server - Leases, right click and "Make Static" IP address for the client you want to deny service 2. Then double click ...

creatin

Which kind of ISP counts number of connections and based on that limits the service or even denies it? What would happen if you had one computer which is connected to the internet through this ISP? When you open Chrome from browsing, in a second you'll have more than one connection. So what is the b...

creatin

Here's possibility: create many virtual APs on every physical AP, one SSID per apartment. Use VLANs to merge SSIDs from different APs and to separate clients from different SSIDs. Each VLAN is different IP subnet served by separate DHCP servers. Having all SSIDs on multiple APs allows client roamin...

creatin

Thank you for very detailed explanation and great example, it was clear at the first line "when wireless client roams to another AP with same SSID, it will not reconfigure IP settings. And if different AP is in different subnet, this will break client's connections" :) Currently hAP AC2 is...

creatin

You want to limit number of connections per client? Run this command from terminal, it will add firewall rule to limit number of connections to 50 per each client IP on subnet 192.168.88.0/24 /ip firewall filter add action=drop chain=forward comment=\ "Limit number of connections to 50 for 192....

creatin

So you have 30 mbit/s or 2 gb/s link? Take into consideration if your link is really saturated due to high usage from user side (video streaming or downloading) and your script sees available bandwidth is around 100 kb/s it will automatically initiate disable/enable command. Can you run ping towards...

creatin

If I name all of SSIDs with same name, will clients connect to whichever has better signal? Yes. With a gotcha: wireless interfaces on all APs have to be members of same L2 network, being served by same gateway and same DHCP server. If they're not, all kinds of weird things can happen. If a client ...

creatin

Why not disabling and enabling interface let's say every couple of hours for 1 second?

creatin

If I can follow up on the subject.
I have HAP AC2 and 3 HAP AC Lites, all of the have dual Wifi 2.4 and 5 GHz.
Right now I have 8 SSIDs, separate for each band and each router.

If I name all of SSIDs with same name, will clients connect to whichever has better signal?

creatin

Where do you get IP address from? From DHCP of your MikroTik or is it from some other router or server?

creatin

Can you export your configuration

creatin

5. UTM - I don't know that we'll see this anytime soon. UTM requires a lot of development resources. Trying to manage the ability to detect and mitigate at L4 - L7 using signatures and other automated mechanisms requires constant care and feeding by a dev team. This doesn't seem consistent with Mik...

creatin

I have a Huawei B715 LTE modem which has web filtering included, if I enable it for a specific website by simply entering domainame.com, that site will be blocked in seconds, why does it have to be so complicated with Mikrotik? Because you have not envisioned all the possible ways to circumvent tha...

creatin

BTW all this wont work on most new phones like Samsung etc as they by default generate new MAC address every time they connected, just keep that in mind..

Xiaomi phones as well.

creatin

If you are assigning IP addresses for each MAC by DHCP, than go to IP - DHCP Server - Leases and you have a list of all active IP addresses, double click on the address and enabled Block access option.

creatin

I have a Huawei B715 LTE modem which has web filtering included, if I enable it for a specific website by simply entering domainame.com, that site will be blocked in seconds, why does it have to be so complicated with Mikrotik?

creatin

Check which outside IP address has been assigned to your ISP modem and compare it with IP address you get on https://whatismyipaddress.com/
if these addresses differ then you are behind a NAT and can't access router from outside. You need to contact your ISP to assign you public IP address.

creatin

If you meant that email for Downtime has not been sent, it is because you are missing line for sending email in downtime script

creatin

If the rubber seal is positioned at the bottom of the device, you can improvise with bicycle inner tube,
cut a piece of it and glue it, make a hole in the center and you have the rubber seal with a hole for the cables.

creatin

You got HEX for 50$ and you complain about memory

What would you expect 1 gb of memory?
Come on, devices are designed for putting everthing needed on them.
If you go to Files and you see over there some bigsize files (couple of mb), delete them and try the upgrade once again.

creatin

Disable services you don't need, disable guest user account (if exists), rename default admin account to something else. Restrict access to your router only to local LAN, you can narrow it down to a specific address. Deny acces sto UTP and TCP protocols on ports 53,2000,80,443 and 161. My router is ...

creatin

creatin

Thanks and greetings from Croatia

creatin

System - Users - Groups tab, you see there's no separate permission for managing WiFi only

creatin

From which server are you pulling test file?
How does it work?

creatin

creatin

Do you have fasttrack enabled?

creatin

Nice looking bit of kit but sadly about twice the price of the Huawei B535 in the UK Shame they don't have a plain 4G LTE modem.

Tell your friends your ISP offers 1 tb of traffic for 30-35 EUR/month, check A1 site for prepaid service.

creatin

Check your inbox

creatin

I would suggest HAP AC2, cheaper but more powerful than HAP AC (which I own).

creatin

Does IP address on your modem (in settings) match IP address you get on https://whatismyipaddress.com ?

creatin

same for /system identity print no output when calling through ssh from other mikrotik

creatin

Hi, did someone encounter something similar as below? running /interface wireless registration-table print from 1st MT outputs as below: # INTERFACE RADIO-NAME MAC-ADDRESS AP SIGNAL... TX-RATE 0 wlan1 12:AC:D5:BE:55:21 no -56dBm... 72.2... from 2nd MT I call same command through ssh from 1st MT got...

creatin

Thanks for the tip, Mikrotik on which on which user test is set and to which I'll be connecting by ssh doesn't have any firewalls enabled,
it's running as AP only.

creatin

Agree with you

how big of a risk if user test is created on Mikrotik with read rights only, no password.
Login to this user will be available only from a specific IP (which can be configured in user properties) through ssh from another Mikrotik

creatin

One more question, on each HAP AC lite, running /interface wireless registration-table print gives output as below: [user@HAP_AC_LITE] > /interface wireless registration-table print # INTERFACE RADIO-NAME MAC-ADDRESS AP SIGNAL-STRENGTH TX-RATE UPTIME 0 wlan2 12:AC:D5:BE:55:21 no -49dBm@6Mbps 433.......

creatin

My new setup is made of 1x LTE modem connected to HAP AC, from HAP AC cables to 3 HAP AC lite. DHCP is running on HAP AC while HAP AC Lites serve as access points for clients, no separate VLANa, DHCP configured for single subnet. If I'm connected to HAP AC is there a way to check which client is co...

creatin

If you want to detect any intrusion by just a script running on the Mikrotik itself, what will not make you happy is that the fact of the intrusion may not be noticeable in the configuration at all. The configuration is just a front-end to the linux running below, and some vulnerabilities in the pa...

creatin

I was thinking of creating a script which would check number of users, their names, number of scripts, when were they created/modified (if possible).
Script would run every 30-60 seconds and if there's a change it would send an email notification.

creatin

My new setup is made of 1x LTE modem connected to HAP AC, from HAP AC cables to 3 HAP AC lite. DHCP is running on HAP AC while HAP AC Lites serve as access points for clients, no separate VLANa, DHCP configured for single subnet. If I'm connected to HAP AC is there a way to check which client is con...

creatin

Found a lot of topics related to hacking of Mikrotiks. How do you know or suspect your Mikrotik has been hacked or tampered with? Any examples of MTIKs which were hacked or tampered with by someone other than local admin? New scripts were added? New users created or existing ones modified? New firew...

creatin

I am trying to upgrade my hap lite but i get the ERROR: not enough disk space, 7.3MiB is required and only 0.3MiB is free . Last time i got the same error i used Netinstall to reformat and install OS. Now i need to update again but i get the same error, using every time the netinstall and reformati...

creatin

I would say the same for Windows which are killing me with their weekly updates and fixes but here I'm still using them

creatin

You at least get B618 while we in Croatia struggle with ZTE CAT4 modems providers insist on and we have to buy ourselves better CAT9 or higher category modems in order to get decent speeds.
Maybe they block by modem MAC address not by IMEI

creatin

I've given my input, I know my limitations when it comes to using MT (barely good enough to deploy at home), takes others longer to figure it out I guess.

By the posts and advice you write I believe your knowledge of MT could be used in some companies

creatin

Does URL filtering works for you?

creatin

Creatin, what a stupid answer! He is absolutely right about making us beta testers where MT is used in many production environments. MT software development is an example how to make it wrong with no respect to users. It would be interesting to find out how they (not) test their software before rel...

creatin

Ok, I understand. Network admins are to blame for using Mikrotik! Agree ! You can do your own tests before putting switch in production Yes, I can. But many times, problems come after a while, after you make test -> instability. Another thing: you buy some products and on tests you realise that the...

creatin

Official mobile application for MT devices is obviously "Mikrotik", playstore is full of clone apps like DroidBox, Mikro Winbox Pro, WinboxMobile Pro (Port Knocking implemented) and others.

Any comments, suggestion which one you prefer and why?

creatin

If the price is a problem, check local ads and portals for people selling Mikrotik equipment.
I've purchased all Mikrotik equipment brand new for 45-50% lower price than in a shop

creatin

I've put a Mikrotik for testing purposes in the DMZ of ISP router and allowed only Winbox to be accessible. All other services on Mikrotik ssh, ftp, HTTP... are disabled, only way in is Winbox on a non-default port. Username and password are very long and contains alphanumeric + special characters. ...

creatin

These kind of testings are subject to cpu power, while you want to test network performance. Therefor I don't need it. The bandwidth test is not sufficient for you? In that case isn't bandwidth test subjected to CPU power as well? As WeWiNet wrote, a simple speed test would be enough, server side o...

creatin

I red a lot complaints about Mikrotik's low Wifi coverage, that's why I got 3 RB952Ui-5ac2nD (HAP AC lite) to cover 3 separate apartments, 50 m2 each. HAP AC lite works on both 2.4 GHz an 5 GHz, if your concrete walls interfere with 5 GHz link, 2.4 will go through them without a problem. From my exp...

creatin

Can you share your solution with us?

creatin

Unfortunately I have similar case with my LTE provider which is covering internet connection in a remote location. It provides decent speeds with a 100 gb traffic package limit after which speed is decreased to 2 mbps. The 100 gb package is counted in period from 10:00 - 00:00, while period from 00:...

creatin

You can of course attach an 8-port switch to one of 24 ports on MT, in that case you'll have 24-1+8 available ports (one for uplink to the plain switch won't be of any use). Each MT port is separately manageable, take into consideration when you connect plain switch you won't have same manageability...

creatin

Why is the hap ac3 so more expensiv than the hap ac2. only an additional lte mode can not justify +150€, or?

good question, for 140 EUR you get Huawei B715 cat9 modem + hap ac2 fo firewalling/routing

creatin

I disabled all the services on MTiK except Winbox access.
Winbox port changed to a random one, disabled all guest accounts and created new ones for admins, let's say it's difficult to guess username since it contains alphanumerics

creatin

Try to put a delay of 5 seconds before and 10 seconds after fetch command

creatin

The interface menu retains total bytes/packets in/out for each interface. You can copy out the numbers on the first of each month than zero it for next month. If router is not rebooted for all month :) One nice thing I will never hesitate to say about using MT gear over the past 12 years is that gr...

creatin

Try this script - it will check does test.txt exist, - will list all the files into a test.txt file in order to create the file - 3 seconds delay - it will replace previous text in the file with 1.1.1.1., or you can put nothing instead of 1.1.1.1 and you'll have an empty file :if ([:len [/file find ...

creatin

I have a script which is exporting RX/TX values twice a day to a file on MTiK.
When I need statistics, just download the file on my computer and process it within excel to get information needed.

Since MTiK file size shouldn't be more that 4 kb, another script warns me when file reaches 3.5 kb.

creatin

Hi, I don't understand how does someone know when a router is exposed to the internet? Are they constantly scanning standard ports on all IP addresses around the world? I've configured couple of MikroTik devices and they are connected to the internet for remote access, didn't ever see anyone trying ...

creatin

Check do you have some additional users created on your MikroTik device,
change passwords for existing accounts.

creatin

Did it work?

creatin

Fasttrack is disabled?

creatin

This this: :local tx ([/interface get [find name=ether1] tx-byte) I'm using this for converting to GBs: :local tx (([/interface get [find name=ether1] tx-byte])/1073741824); same applies for rx-byte on ether1 or: :local txp ([/interface ethernet get ether1 driver-tx-byte]); :local rxp ([/interface e...

creatin

For me it worked only once during initial setup and nothing after.

creatin

For this specific device, DL speed is up to 300 mbps but ethernet port can handle only 100 mbit, what's the point in purchasing this device then? Easy, all person who are not in city who are happy when reach 20/5Mb. For them and me a limit of 100Mb is not problem. I have R11e-LTE6 with 2xCA and now...

creatin

For this specific device, DL speed is up to 300 mbps but ethernet port can handle only 100 mbit, what's the point in purchasing this device then?

creatin

MikroTik DDNS service didn't work for me, each time ISP changed the address, MTiK service didn't update it. I created a script (below), it's running every 5 minutes and sending an email with OLD and NEW IP address delay 5; :if ([:len [/file find name=currentIP.txt]] = 0) do={ :local myfile "cur...

creatin

Hi, maybe you don't have to use portforward. My cable modem/router has portforward option but it doesn't work. I added IP address of my Mikrotik to DMZ of the modem/router so it's entirely exposed to the internet. I've closed all services and ports on Mikrotik which I don't need. Before you continue...

creatin

Using src-address~"$adr" is not exact enough because it will also count IP addresses in one go like 192.168.88.1 192.168.88.11-19 and 192.168.88.100-199 To avoid this you need to add a 'separator' the first character after the last digit of IP address and that is here the ":" in...

creatin

Thanks, I'd like to avoid writing to a file. Right, run my solution. It prints to the screen the way you wanted. added additional lines to remove garbage :) :put ("\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r...

creatin

Thanks, I'd like to avoid writing to a file. Still a new user and red a lot on how not to use local storage as much as possible, although I'm creating a backup of router each day in a file, anyway.... I came up with following: { /ip dhcp-server lease :foreach i in=[find] do={ :local adr "$[get ...

creatin

This lines although it should be a variable, it prints number of connections:

:local con [/ip firewall connection print count-only where src-address~"$adr"];

trying to figure out how to bypass it

creatin

Unfortunately, same output, still not sure why

creatin

Not sure I understand, probably doing something wrong, changed the code: { /ip dhcp-server lease :foreach i in=[find] do={ :local adr "$[get value-name=address $i]"; :local con [/ip firewall connection print count-only where src-address~"$adr"]; :put "connections:$con";...

creatin

Hi, new to Mikrotik, browsed through forum last couple of weeks, learned a lot about scripting (and still learning). One of complaints from different users is Mikrotik lacks list of number of connections per each IP. "/ip firewall connection print count-only" will show number of connection...

creatin

Hi,

I know it's an old thread, is this information still needed?
Do you have a quota of 50 gb on your download only or on total traffic (download + upload)

creatin

This one works: before you run the script create a file in Windows called currentIP.txt , write inside some IP address like 1.1.1.1 , save file and upload it to your router. Run script below: :local filename "currentIP.txt" :local ip [file get currentIP.txt contents]; delay 1 :local cip ([...

creatin

Or:

:put [:resolve myip.opendns.com server=208.67.222.222]

Search found 111 matches