MikroTik

gacopl

+1 for port forwarding. when you are using for egz campus network when almost everything is blocked, besides the standard 80 port and SSH for outgoing connections. the only way to administer your network is to tunel OpenVPN over SSH. then you gain access to unlimited internet and/or local resources ...

gacopl

again it's not surprise to not get an answer here

shall i forward this to support?

gacopl

NO, unfortunately i was assuming things too quickly, i was right it itsn't accepting port ranges correctly: root@ns1:/etc/lms# ./mtik_tty.pl -m 10.255.0.2 -u admin -p xxxxx <<< /ip/firewall/mangle/add <<< =chain=forward <<< =protocol=tcp <<< =src-port=445-460 <<< >>> !trap >>> =category=1 >>> =messa...

gacopl

okay i have to give you back your honor, the problem was that MT got smarter in newer versions and can accept port ranges only for tcp and udp as far as i recall, and not giving parameter of protocol=tcp was the cause... and as far as i recall you mentioned this new behavior in changelog, soo I APOL...

gacopl

okay i've made an effort and debugged it, it seems that api dosen't accept src-port=445-65535, in fact it doesn't accept any range of ports for dst-port and src-port, this happens in ROS 3.11 and above... if I hashout directives with port-ranges my script works fine... now it's your turn to fix or g...

gacopl

use .id to remove entries, in this case, do print and get a list of rules with .id numbers, then parse the result and get what rules you want to remove. also when you add a rule, you get the .id number of the rule, so if in the same session you want to remove the rule you can use returned .id numbe...

gacopl

ok i solved i had to enable api service on MT

B/R
Michal

gacopl

Hello

Thank you for doing this wrap for perl, however i cannot get it to run it gives me no socket: Connection refused :/

Please help

Michal

gacopl

Hello

Yesterday i installed dude on one of my MT machines (x86), i have there 256MB CF card yesterday i had around 200 MB free after 16 hours, there's only one MB left!!??

I'm probing 12 devices every 30 seconds

Help! Please

P.S. I use dude 3.0b7

gacopl · Re: Ip addressess try 192.168.0.2-192.168.0.3 cheers

try 192.168.0.2-192.168.0.3

cheers

gacopl

you have right i didn't notice it before but yes if you don't have route in main table even if it's pointing on strange gateway, system won't check alternate routing tables.

Thanks for clarifyin

Cheers

gacopl

Thank god

gacopl

There should be possibility to run certain scripts when user connects like ip.up ip.down in linux, this would be really appreciated in MT

Cheers
Michal

gacopl

downgrading to v3.4 temporairly fixes the problem

Cheers
michal

gacopl

At least one more problem was found with test build. Problem will be fixed in next build and at this point it looks like it will be the last - so, please, wait for the release of 3.7 Yeah, tell that to my users ;) I think i have a little more patience in me, hopefully my users too :) Cheers Michal

gacopl

Just do ospf, and if you pppoe pptp or whatever point to point, then you can assign public ips without loosing them on creating small network and broadcasts adressess. there's another thing you can do is to try to deploy proxy-arp, then you can set a public ip, but this is not recommended. PPPoE + O...

gacopl

Hello

Please send supout file to support@mikrotik.com, you seem to be not the only there, i had same problem downgrade to 3.4 fixes the problem

Cheers
Michal

gacopl

Sorry to jump in, Sergej but wasn't there problems with tcp-mss=yes?, i remember topic about that and everybody said that chang-tcp-mss should be no and that the best is to put separate firewall rules to change mss.

I'm Lost

B/R
Michal

gacopl

Hello

Tell me guys is it so hard to put this build somewhere? Can't you see that there some desperate guys here, that really need to try this out? Please put it somewhere and share this can't be that hard.

Cheers
Michal

gacopl

Ok now i still have problem, thing that has changed, that it seems that i don't have this problem in bavckbone area anymore, however other areas still have this problems, those areas mostly look like this: area3 E ------ Z E-router that is part of backbone area and area3, (PC, v3.6) Z-router that is...

gacopl

I use default values 10/40. As I use cisco and other devices too, I do not dare to play with the defaults ;-)). I think using such low values you get a lot of ospf traffic and very short outages lead to recalculation of routes. If the interface goes down the router should see it immediately. Stefan...

gacopl

Hello

And like i thought nothing has changed :/, well at least i got rid of those br interfaces

Now i'm thinking that maybe there is something with my hell-interval and dead-interval, i always had it respectivily 1s and 4s (to make sure that use won't feel it when some router dies)

Cheers
Michal

gacopl

Ok i'm changing my links according to the scheme you proposed, ap/station without bridge. Maybe you also know answer to my question regarding traceroute ?

cheers
Michal

gacopl

Hello There are 2 reasons, 1st is that whenever somethings f* up, when you have to change your card or whatever, you just do it and just add that card to proper bridge port and everything is setup;) Other more important reason, is that when i first deployed ospf in my network, somehow this wasthe on...

gacopl

make your queue matching rule with dst-address=!10.0.0.0/8 (if you use private ips from this subnet) and not dst-address=0.0.0.0/0

Cheers
Michal

gacopl

I did like janisk said, i upgraded all my routers to 3.6, but this still remains the issue :/, i never had such a problem before with v2.9

Cheers
Michal

gacopl

Hello

Please look below, and see this is not something that, i've made up, and this is not something that can be acceptable.

ospf2.jpg

Cheers
Michal

gacopl

Hello in order to make your server run correctly under ubuntu 7.10 all you have to do is just not to start whole Dude, but just dude.exe --server and then connect to it from other machine. Normal start of dude.exe does not bring up the server !!

cheers

Michal

gacopl

maybe this is somehow possible in v3?
anyone knows?

cheers michal

gacopl

delete the lookup rule i route table, mangle rule for routing does what's needed, and and table lookup just messes things, remmber to reboot after that, i had the same situation i removed route lookup and rebooted and it started to working. Also if you have multiple ips, and you want to start connec...

gacopl

Hello Okay i'll try to present it, below you have a quick draw of my backbone: ospf.JPG Now here's the config for A router: /routing ospf area add area-id=0.0.0.0 authentication=md5 disabled=no name="backbone" \ type=default /routing ospf set distribute-default=never metric-bgp=20 metric-c...

gacopl

What I would really like to see is SNMP-write support please

gacopl

Then please share this beta somewhere or give us link to it or whatever

gacopl

You can easily do it by creating two VAP on for hotspot and on for standard users, create two new security profiles (one with WEP and other without) then assign those security profiles to proper VAPs, and leave the defualt profile alone

cheers
Michal

gacopl

yeah we could really get use of that, even of that beta version you say is working correctly, so please if someone can please share.

cheers
Michal

gacopl

Ok now i see hope in you, you see i don't have area ranges specified,i have just area backbone, and between my routers i have 5ghz wireless links each of wireless card has it's own bridge (let say interface is Ni-K and the bride for it is ni-k-br, to this bridge is attached only that one interface) ...

gacopl

CERTAINLY NOT, YOU CANNOT AUTHORIZE USERS BY MAC, THIS TOTALLY MISUNDERSTANDING NOWADAYS MAC SPOOF IS JUST FEW CLICKS AWAY, I suggest you to authorize by login and password (strong passwords) with at least chap pppoe handshake.

Cheers
Michal

gacopl

I have this same problem since version 2.9.50, so rollback didn´t solve my problem. But with older versions (2.9.4x) works fine. You see, this is what worries me for me packet losses stopped as soon as i rolled back to 2.9.51, OMG maybe i have different problem :( Don't wory, 3.7 seems to be really...

gacopl

OSPF is a must in every modern network, especially if you have many pppoe conentrators (on every AP), unless you want to distribute routes by your self ;), besides that close your backbone network (make it round) turn ospf on and be happy with redundancy and some sort of LB :) After that there's jus...

gacopl

0.0.0.0/0 is the only proper way of ip description of 'Internet', basicly it means all ip addresses, but as friend earlier said you could also just don't put dst-address option and it would work the same way as well

cheers
Michal

gacopl

Hello Well, i really don't have any problems with ospf in 2.9.51 and 2.9.50, it really worked spectacular til yestarday (with previous version like 2.9.4x there were problems with ospf you talk about). I'll try later to post here a config, maybe i really have some shitty conf ;), but anyway when som...

gacopl

Hope that "7" will be lucky number I have same problem, but i rolled back to 2.9.51. I can't afford this to happen in my net.

Cheers
Michal

gacopl

Your welcome

gacopl

Hello Okay now i say my story, yesterday i upgraded all routers to 3.6, pcs boot up properly and everything was fine but i still encountered some problems with ospf, even when link was down for just a second when it came back, the devices couldn't talk to each other, i again had to fiddle with setti...

gacopl

I hope that you are just doing stupid mistake cause i am about to implement dynamic ips through radius as well

Do you have interim update interval set? maybe that is the problem.

Cheers
Michal

gacopl

there was no mpls presentation ...

And this was the biggest shame of this MUM, many people there was really unhappy because of that :/

Cheers from Poland
Michal

gacopl

yes, i tried filters but only matcher that i found working is prefix matching, which in case when you get same two prefixes but from different routers you are unable to distinguish them. Maybe someone knows how to handle this in correct way?

gacopl

Can anyone help? pretty plz.

Maybe you have some other solution to achieve this?

Cheers
Michal

gacopl

One thing came up to my mind, i always download all packages and install them onto routers, so even if i don't use say dude package it's nevertheless installed, maybe that's what i'm doing wrong, maybe some additional package causes the problem? Is that possible?

Best Regards
Michal

gacopl

Do not warry...3.6 is working just fine on x86. So please tell me what is this topic about?: http://forum.mikrotik.com/viewtopic.php?f=2&t=22689 But before you upgrade check that your routers work with 3.6, because it needs more cpu capacity than 2.9.51. The worst i have is couple RB133, but i ...

gacopl

Do the same but on output chain this should help, i do mark-routing on output chain and set a src-address filter to the public ip MT has, and then when you ping that MT from the world it responds, however this rule doesn't make MT to use this routing mark to get outside (ie when you do ping yahoo.co...

gacopl

i would certainly do that, as i always try to use the ros version on all routers, but i have 3 x86 machines in my network, and i'm too afraid to upgrade them to 3.6 as therewere many reports of crashes on them. And i have pretty hard access to those sites so i can't afford to accidently cut off over...

gacopl

Hello Everyone Hope somebody can help, does anyone know how to distribute route with routing mark lets say that two routers have access to let say 1.1.1.0/24 network in one of his routing table i want to put routing mark let's say 'gw1', another router also has access to this 1.1.1.0/24 network but ...

gacopl

Hello everyone Yesterday i upgraded my RB 411 and RB532r5 to ros 3.6 (before there was 3.3 for rb411 and 2.9.51 for rb532r5), OSPF just gone crazy. I had to change attributes of AREAs to make it work, then when i rebooted one of them, it didn't work (the status of neighbor was changing, like 5 times...

gacopl

Hello everybody Currently my network is using OSPF routing everything is ok as i have one default gateway, and the routes are propagates correctly. But what i need to achive is to propagate another default gateway in to ospf cloud but i want that this new default gateway will have a routing mark so ...

gacopl

yes yes i need it

i can't wait

gacopl

Hello

Thanks for your reply. Well i know tha another script would be a solution however in ROuterOS 2.9 there's no option or i can't find it to reset the counter, /system script set 0 run-count=0 says there's no argument like run-count. Does anybody know what to do??

Best Regards

Michal

gacopl

Hello I have script which runs itself every 2 seconds and checks something. Of course it increases the run count by couple thousands a half-day. Is there a way to reset it? i can't manage it by issuing set (number from print) run-count=0 says that there's no run-count argument. I have RouterOS 2.9. ...

gacopl

anyone ?? please??

gacopl

hello since you are using pppe server, just add to it ospfd (dynamic routing), and on MT (if your provider doesnt route all block) on Wan interface switch on proxy-arp. This will work certainly, as it works for me.Honbestly i can't imagine right now networking without dynamic routing. The redundancy...

gacopl

Hello Like i thought i couldn't count on noone so i Made a script myself. it is tested. And it's unexpectedsystemrebootproof. So there shouldn't be any problem with it ( itested it for 2 days). Hope someone could have use of it 1. Code of main program that triggers subprograms pppup pppdown: :foreac...

gacopl

Hello Got one problem: Is there any way to trigger a defined script when pppoe connection starts and pppoe connection ends? Because i need that for some advanced QOS, which in order to do it i have to operate mangle rules, since people get dynamic addresses all i can do is to match rules against ppp...

gacopl

Hello everyone Here's the thing : 1. I have turned on hotspot on interface Local. The other interface is a backbone. Behind that interface i have a usual AP, with address let say 10.10.0.10. I want it to make it accessible from the backbone side, and the MT itself. I don't need and NAT, all i need i...

Search found 63 matches