MikroTik

Viroslash

Hello guys, I need to know if this hardware is compatible with RouteOS: -Motherboard: Asus M3A -Micro: AM2 5200 2.6GHz -RAM Memory: Kingston 2GB 888MHz -HDD: SATA2 80GB and 320GB, 7200RPM Hitachi -Net cards: Linksys (by 3COM) 10/100/1000Mbps -Graphics card: PCI-E G-Force 7200GS RouterOS RAM top limi...

Viroslash

OK, thank you guys!

Viroslash

But is this normal? I want to know if is a normal procedure... Because y have only 64MB dedicatred to proxy... Thank you for your time.

Viroslash

I hope you can help me... I have configured a transparent proxy, all works OK. But the RAM system memory goes decreasing until the free RAM is under 5MB, in this moment the cache disk starts to work continuously during five minutes aprox, like as the RAM is downloaded to a cache disk :? when this pr...

Viroslash

Somebody have information about this error? I have configured the hotspot and the the default rules created are invalid. This happen in 3.6 version, I have installed in AMD 386 PC.

Viroslash

No bridging, like in the manual. PPPoE server is running y "local" interface.

Viroslash

Yes, the problem was in the Hardware flow control (manual don´t say anything about that), I see in another post later.

I reinstall ROS 2.5 whit netinstall again and problem solved. Thank you and sorry.

Viroslash

I have connected the RB112 with a serial cable, when start hyperterminal y press any key whitin 2 seconds and nothing happends. Any idea?? Regards. RouterBOOT booter 2.12 RouterBoard 112 CPU frequency: 175 MHz Memory size: 16 MB Press any key within 2 seconds to enter setup.. loading kernel from nan...

Viroslash

Hello people. Simple question: where can I find a hardware list compatibility with 3.x versions?

This list if out of date:
http://wiki.mikrotik.com/wiki/Supported_Hardware

Regards.

Viroslash

My mistake, Netbios port is 135-139. Try blocking ports 135 to 139. In chains INPUT and FORWARD and UDP - TCP protocols.

Viroslash

What caind of traffic do you want to block? This rule bloks shared folders (NetBIOS)

Viroslash

Then block port 137 to 139 TCP and UDP (NetBIOS), if you want to block traffic between client APs then disable the "default forward" option in your wireless interface.

Viroslash

Good data, thank you guys!

Viroslash

Block ports 67 and 68, in TCP and UDP.

http://www.comptechdoc.org/independent/ ... tdhcp.html

Viroslash

Thank you, Jordan, I don´t know that. The antenna is Hyperlink Omni 15dBi.
Please if somebody have the link post it. Regards!

Viroslash

Hello guys. A simple question... What do you recommend me? Set up the tx-power by default or set up according to the card specification (28dbm)? (XR2 in RB 112 48v 2A)
Thanks very much, you are the best!

Viroslash

I have this problem too... Any idea guys?

Viroslash

this is not my real password... micontraseña=mypassword and miusuario=myuser in spanish. Thank you muchachos!!

Viroslash

Anybody knows why the DNS udate script doesn't work in RouterOS v3? [admin@MikroLAN_Base] /system script> run dyn_dns; expected end of command (line 3 column 13 :log info "DDNS: Begin" :global ddns-user "miusuario" :global ddns-pass "micontraseña" :global ddns-host &quo...

Viroslash

Thank you!! Good explication man.

Viroslash

Disable compression , VJ compression and encryption in default profile and users profile.
Enable Change MSS and Only One in default profile and users profile.
Try to run PPPoE server without service name.

I wanna try this. I'm runnung ROS 2.50. Gracias!!!

Viroslash

Please, anybody can help me?

Viroslash

Hello guys, I want to know what is the refresh interval of the NTP Client, How can I know if the NTP client is not synchronizing. Gracias.

Viroslash

Thank you for reply. In log I see "pppoe-0 waiting for call", and then "pppoe-0 terminating or disconnected" Is a random problem, no customer specific. When the RB strart failing I have aprox. 30 clients. No more clients can connect to the pppoe-server. (I have 60 clients) Hardwa...

Viroslash

OK, sorry. Here is the output of the export command PPPOE SERVER [viroslash@Gateway] > interface pppoe-server server print Flags: X - disabled 0 service-name="pppoe" interface=mendoza max-mtu=1480 max-mru=1480 authentication=pap,chap,mschap1,mschap2 keepalive-timeout=10 one-session-per-hos...

Viroslash

Hello guys, ussualy I see in pppoe active connection pppoe-0 pppoe-1 pppoe-2 pppoe-3 etc, etc at the same time, these connections are clients trying to login, but they cant do it. Wireless registrations are OK, not bad strenght, good ccq. pppoeserver problems? the configuration is the same in the Ro...

Viroslash

I've a little forum in spanish about MikroTik, all you are welcome.
www.foromikrotik.com.ar

Viroslash

apt-get install wine

Viroslash

Do you setup firewall rules? Check the free memory when the pc freezes

Viroslash

The Routerboard is running MikroTik RouterOS 2.9.32 (original) # NAME VERSION 0 routeros-rb500 2.9.32 1 system 2.9.32 2 ntp 2.9.32 3 X rstp-bridge-test 2.9.32 4 routerboard 2.9.32 5 X wireless-legacy 2.9.32 6 X webproxy-test 2.9.32 7 X hotspot 2.9.32 8 wireless 2.9.32 9 X ppp 2.9.32 10 X routing 2.9...

Viroslash

I have a RB112 in ap-bridge mode:

dec/31/1999 21:00:18 system,error,critical System rebooted because of kernel failure

Can anybody explaind me this message?

Viroslash

Check the connection number in

/ip firewall connection print count-only

If you have a lot of connections (more than 2000) probably the problem is this.
In this case you must limit connections using firewall rules.
Can you specify your hardware?

Viroslash

Check "max-sessions=" value in pppoe-server interface. 0= infinite

Viroslash

Read this:

http://wiki.mikrotik.com/wiki/Bandwidth ... and_Queues

Viroslash

Why is impossible? / ip dns static add name="mail.cgp.gba.gov.ar" address=10.10.128.194 ttl=1d Z:\>ping mail.cgp.gba.gov.ar Haciendo ping a mail.cgp.gba.gov.ar [10.10.128.194] con 32 bytes de datos: Respuesta desde 10.10.128.194: bytes=32 tiempo<1m TTL=128 Respuesta desde 10.10.128.194: by...

Viroslash

With this rule you can know who is this trying to login. Put it in previous to the others.

/ip firewall filter
add chain=input protocol=tcp dst-port=20-23 action=add-src-to-address-list address-list=trying_to_login address-list-timeout=1d comment="remote_logins" disabled=no

Viroslash

Bruteforce login prevention (FTP and SSH) From MikroTik Wiki allows only 10 FTP login incorrect answers per minute /ip firewall filter add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop add chain=output action=accept protocol=tcp content="530 Login incorrect&quo...

Viroslash

Then... my PII sucks!

Viroslash

You can set a static dns:

/ ip dns static
add name="webserver.yourdomain.com" address=192.168.1.50 ttl=1d

And... set in the clients dns server with the MikroTik webproxy IP address. But I don´t know how redirect when the link is down (script?).

This work for you?

Viroslash

try with:
/ip firewall filter add chain=forward protocol=udp dst-port=0 action=drop

Viroslash

Do you want a pppoe server with bandwidth control?

Viroslash

U can use 48V 2A power supply

Viroslash

Check this:
http://wiki.mikrotik.com/wiki/Supported_Hardware

Viroslash

Use 48V 2A power supply

Viroslash

Masquerading networks

/ip firewall
add chain=srcnat src-address=192.168.1.0/24 action=masquerade
add chain=srcnat src-address=10.10.10.0/24 action=masquerade

Viroslash

Use quality connectors and cables, check your data rates, basic rates, TX power, and noise floor, configure these values according to your minipci card.

Viroslash

Like Linux

Viroslash

Check this:

http://wiki.mikrotik.com/wiki/Supported_Hardware

Viroslash

The mode should be "station", not "ap bridge". I'm right?

Viroslash

I found this description in Google:

WLAN High-Power 802.11a/b/g mini-PCI Module
(Atheros AR5414A / 400mW / Commercial Temp.)

Viroslash

See system users list: /user print You can't see passwords... [admin@MikroTik] > user export # oct/02/2007 08:33:25 by RouterOS 2.9.27 # / user add name="admin" group=full address=0.0.0.0/0 comment="system default user" disabled=no / user group add name="read" policy=lo...

Viroslash

you would have to use a subject relative to the content of your
question... ¬¬

Viroslash

I´m from La Plata too! :D In Spanish Creo que puedo escribir en español ya que nos entendemos... Yo empezaria por lo facil, tirale ping al cliente continuamente y fijate que pasa cuando no tiene transferencia, o sea, ver si en ese momento se pierden paquetes. Otra cosa, revisa el CCQ de la señal del...

Viroslash

Just add a schedule task:

/ system scheduler 
add name="reboot" on-event="system reboot" start-date=jan/01/1970 start-time=03:00:00 interval=1d comment="" disabled=no

Viroslash

Export your pppoe server configuration and paste here...

Viroslash

Try leaving "interface" value in blank. The list must be first and the rule that blocks this list at next. (1º Rule) / ip firewall filter add chain=input protocol=tcp dst-port=20-23 connection-limit=1,32 action=add-src-to-address-list address-list=blacklist_ssh address-list-timeout=1w comm...

Viroslash

Paste this rule and try again...

/ip firewall nat add chain=scr-nar action=masquerade

Check the default gw, if this don't work try to setting ip addresses form the same network to all interfaces, then check ping.

From the MT console make ping to your PC and to the 10.0.10.10 (don't use DNS names)

Viroslash

what is "net-cut"??

Viroslash

Set up the BIOS whit LBA in your hard disks and reinstall RouterOS

I SUPPOSE THAT YOU ARE USING AN ORIGINAL VERSION OF MIKROTIK.

Viroslash

You can add a nuw srcipt in system/script

Viroslash

Use quality connectors and cables, make sure that antennas are perfecly assured. Enable periodic calibration and configure correctly data rates and basic rates in the wireless interface.

http://www.viroslash.com.ar

Viroslash

Yes, is not neccesary have MK on the client side. In your 532 you can create queues and control bandwidth for every costumer that is connected to your MK.

Viroslash

Set security encription in your wireless interface or active the MAC list filtering.

Viroslash

Yes, is possible, using the access list. Here an example: / ip web-proxy access add url="proxyfi" action=deny disabled=no add url="porn" action=deny disabled=no These rules blocks all web pages that contains the words "proxyfi" and "porn". You can also apply t...

Viroslash

Check your supported rates and basic rates in the wireless interface, put those values in default and try again.

Viroslash

mmm, if you paste the export info in the console, many values (as firewall rules, ip address, etc etc) can be duplicated. As I see, NOT is the same.

Viroslash

Check the CCQ signal value in each registered AP, perhaps your signal strength is good, but your CCQ is low (Signal quality), this value must be higher to 40 for be an acdceptable quality. Example: Good CCQ: 60 - 100 Bad CCQ: < 40 Check this too... http://wiki.mikrotik.com/wiki/Wireless_Debug_Logs

Viroslash

Try this...
Paste in the console:

/ ip firewall nat 
add chain=dstnat protocol=tcp dst-port=12341 action=dst-nat to-addresses=10.0.10.10 to-ports=12341 comment="redirection rule 10.0.10.10" disabled=no

Make sure you can ping 10.0.10.10 from your computer.

Greetings...

Viroslash

yep... this should be work... paste your export configuration please.

Viroslash

What sort of problem? if you dont want accept udp0 simply make a filter rule that blocks this protocol and port...

/ ip firewall filter 
add chain=forward protocol=udp dst-port=0 action=drop

Viroslash

You can set te Upload and Download in each profile, this profile must be associated in te pppoe secret of the user, then when the user log in a dynamic queue will be created limiting upload and download that you specified in the profile. Example: This profile set 128k upload and 256k download / ppp ...

Viroslash

You can create a firewall mangle rule marking udp packets, then make a queue rule specifying in the option "Packet mark" the name of this rule. Marking packets: / ip firewall mangle add chain=prerouting protocol=udp dst-port=!53 action=mark-packet new-packet-mark=udp_packets passthrough=ye...

Viroslash

This information avoided many questions!

Viroslash

OK, my idea is use Netwatch for ping a host and when this host is down the alarm script in Netwatch is turned on. I need log in a file the date, hour and ip of the host: My script: :for c from=1 to=10 step=1 \ do={ \ :set i 15 :set x 1900 :do {\ :beep length=400ms frequency=$x; :delay 25ms :set i ($...

Viroslash

And if I want to create a logfile of these information how can I do it?

Search found 75 matches