MikroTik

Andrew162

Actually, MikroTik can have a lot more than one peer per interface. My best guess is that the IP address used on the client is incorrect. But it requires the configuration of both MT and peers.

Can you send example correct configuration?
for 2 users/peers?

Andrew162

Sorry this is an MT forum not a fortigate forum. It was Mikrotik issue Wireguard cant get more then one peer ... per interface WG "according to some other posts in mikrotik formum" So i create another wg interface with diffrent port even then new peer asociated to new interface and all wo...

Andrew162

Hello i add routes But no success After i connect to wireGuard i cant access /ping any device but after i enter peer click on my profile/peer and just click apply (like i double agree Allowed Address 0.0.0.0/0) All start to work after disconnect and connect again.. no need repeat the process of Appl...

Andrew162

I think i solve it. not 100% sure now but i can ping and enter switches on vlan 20 etc. The miss part was In peer of wireguard the allowed address was empty. [xxxx@DudeCCR] > interface/wireguard/peers/print Columns: INTERFACE, PUBLIC-KEY, ENDPOINT-PORT, ALLOWED-ADDRESS # INTERFACE PUBLIC-KEY ENDPOIN...

Andrew162

Hello

How that static route should look for vlan20 for example?
What dst address ? ( 192.168.20.0/0)????
gateway ? (wireGuardVPN)???

please send come examples

Andrew162

Hello My Topology look like this https://img001.prntscr.com/file/img001/u-XHEbHZQ1qYkt5Z-EVAFw.png I want access my network from extra internet - if fortigate blow up for example So we got backup access to manage network etc. Internet for that mikrotik got static IP I got working WireGuard - user ca...

Andrew162

I just realized .. that at the end of my code... it's something very suspicious

/tool sniffer
set streaming-server=78.8.213.193:http

Andrew162

Up to you want you want to do with the information.........

If you produce a cleaner version I can have a look and comment............

I will clean as mach i can and send you back in next couple of days new"more fresh config"
Thank you for help

Andrew162

Continue... I got many Forward chain rules in NAT becaouse i use a lot External servers like plex,torrent,openMediaVault, FileServer, Minecraft and other. Some is running all the time Some i enable and disable as need add action=masquerade chain=srcnat src-address=192.168.32.0/24 add action=masquera...

Andrew162

1) /interface detect-internet set detect-interface-list=all[/i] You are right i correct this 2) Wireguard is my VPN to home So i can watch my cameras , servers, etc. 0.0.0.0/0 becaouse Phone LTE switch all the time IP so i set access to all xxxx is ofcors some real looong Key for access 3) My config...

Andrew162

# dec/30/2022 19:16:22 by RouterOS 7.6rc3 # software id = 5QPU-AP8A # # model = RB3011UiAS # serial number = xxx /interface bridge add admin-mac=xxxxxxxxx auto-mac=no comment=defconf name=bridge add disabled=yes name=dockers /interface ethernet set [ find default-name=ether2 ] comment=Ultron name=&...

Andrew162

Yes, I have a quad-port NIC already mounted..How do I get the license and do I pay for it? On the issue of power consumption, this is just a test PC and will not place it on my network, only for testing purposes License need only For Dude if want fast speed load - FOR SURE - without is 1Mb max And....

Andrew162

I think he is aware of the power consumption Best will be Some new/old ATOM cpu , laptop cpu , or downvoltage CPU on MB in that CPU I do similar thing to my first/now old PC .. he is running now 24/7 i7 3770k, 16GB ram, no GPU . after tweaks .. i got 34W on iddle . 50W on medium work (no downclocing...

Andrew162

Hello I got mikrotik's for arround 1y+ Like many users.. i try many "ready" firewall codes and other settings I already found the firewall rule who make my internet super slow ( from 1000Mb/s to max 200Mb/s) But if rule fasttrack is high in FW rules internet back to 1Gb but got issue with ...

Andrew162

I don't know the Fortigate thing, but does it work all in browser? Something like console in iLO? If so, it seems highly unlikely that MikroTik would add it, because it would require to have all RDP/VNC/whatever code in router, it's too far from RouterOS is. But it should be possible to do it using...

Andrew162

Hello Mikrotik I hawe a dream that Mikrotik got feature like Fortigate VPN WEB connectivity In simple (After before propebly configured Mikrotik) User can access via other computer WEB browser to WAN IP ( or DDNS) to his mikrotik and login using credentials from system->users /or new settings for th...

Andrew162

Hello Mikrotik I have a request :) a couple of them 1) Can you make up your mind finaly and choice how to setup VLAN's on mikrotik? :) There is at least 4 method's and all is confusing . Vlans should be the MOST easy parts of networking work- For example in SwitchOS they look realy OK 2) Is there a ...

Andrew162

My CCR2116 is unable to update to this version, there's nothing in the logs, 42MB free diskspace. It downloads the 7.6beta4 image, reboots and comes up again with version 7.5. 2-Partition setup, user-manager and zerotier extra packages are installed. I got RB3011UiAS-RM it also got 128MB memory onl...

Andrew162

Im not sure what you mean by... do i can see ip clients in PiHole
All devices "react" and work with that Pihole if that what you are asking for

Andrew162

To start using Pihole Go to ip DHCP server networks Double click on your and change DNS server to.. what you use for pihole after off on wifi and off on lan.. its should start using pihole After some update - tested on 7.6 beta6 updated code /interface/veth/add name=veth1 address=192.168.1.30/24 gat...

Andrew162

After add'ing and enabling that policy /ip firewall filter add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state=established,related hw-offload=yes Internet back to 90-95% of "should be" speed CPU 75% Its could meen i need faster mikrotik i...

Andrew162

Enough, for me you are too grumpy, make do with others, if they help you. I'm sorry if my statements / answers are not very logical for you, but I know little about mikrotik. Even though my code says otherwise. But it's taken many weeks of work / reading, watching and testing to get all I have to w...

Andrew162

I disable all Scripts and schedules.
So no need check that "code"

Andrew162

The problem came back. If the problem came back when you install 7.6beta, revert to 7.5, and on your "slow" configuration, are present only scripts, no firewall rules or other relevant things. On 7.6 and 7.5 same issue But i back to 7.5 to be 100% sure and same situation I also disable ma...

Andrew162

user=<CENSORED>
is a my login and password to my PPPOE

"system export hide-sensitive file=slow"
So password etc are hidden .

Andrew162

SLOW - with all my firewalls etc what i need # sep/16/2022 18:43:01 by RouterOS 7.6beta6 # software id = 5QPU-AP8A # # model = RB3011UiAS # serial number = <CENSORED> /system clock set time-zone-name=Europe/Warsaw /system identity set name=Tikimyki /system package update set channel=development /sys...

Andrew162

You are really annoying, several times you have been asked from other users to see the configuration, not to read any novels from you.

Can you please remind me how to print config with password *
I know there is a command.. and i will "working" and "my config" (Found it)

Andrew162

Hello The problem came back. Now only the "super clean" config with very basic settings like bridge ,login password pppoe and masquarada... make my internet 1Gb I try screen shot some pppoe settings.. check HW.. Even copy all Firewall rules and nat to "clean config" and internet ...

Andrew162

BUT im wondering Why mikrotik eat almost 100% CPU in speed test when DNS pihole Mikrotik is enabled. after back to Raspi pihole still getting 100% cpu and max 450Mb download on speedtest.net ( My internet 1Gb) Before easy reach 800-990Mb hmmmm its look like HW off?? Update : https://i.ibb.co/J5hPmF3...

Andrew162

According to my knowleadge...
its getting 4-5MB

Andrew162

"(for example my model is RB3011UiAS)" + Audience
like my signature

Andrew162

Check my error and at the same solution https://forum.mikrotik.com/viewtopic.php?t=189091 The most issue of my situation was.. copy paste... terminal of mikrotik dont like "paste" do it manualy and also check subnets etc on My post i write solution for my errors Working on 7.6beta6 ( did n...

Andrew162

My solution : #Type all manual to terminal in mikrotik# 192.168.1.27/24 ( use your subnet .. for example start subnet 192.168.88.27 or what you got at the moment) /interface/veth/add name=veth2 address=192.168.1.27/24 gateway=192.168.1.1 /interface/bridge/add name=dockers /ip/address/add address=192...

Andrew162

i Change /bridge port veth 2 to bridge ( main bridge)
and
/interface veth veth2 to primary subnet 192.168.1.0 with gateway 192.168.1.1
and .... its look like its working i think

(on 192.168.1.26 got real raspi4 with pihole also)

Andrew162

Hello
I just folow the instruction from
https://help.mikrotik.com/docs/display/ROS/Container

My subnet is 192.168.1.0/24
The Docker Pi-hole is 192.168.10.26

How i can ping/connect that 2 subnet / get access to 192.168.10.26

Andrew162

Sadly i dont solve it
I pay to one "Master of mikrotik" to solve for me
Becaouse the problem was got ultra priority in company.

I was quite sure.. that somethink wrong was in firewall... but cant figureout by myself
But anyway im suprise how "not many" was need to make it work

Andrew162

adding this policy . solve all

Andrew162

After couple of answer and questions.. i found the main problem of that situation Why mikrotik dont forward ports -websites or zenmap who check that also.. dont see any of my port open https://i.imgur.com/tsDxSXL.png Where i should look of problem Firewall (in forwarding) are set correctly 226->22 2...

Andrew162

Wireguard sound quite good from your words. The problem with him.. will be.. A lot users from many countrys(fortigate tunels) will want get access to the cameras (for example) of that zone going that way.... every "zone" will start to hawe diffrent VPN etc.. They will kill me :D and i as a...

Andrew162

Yea i dont like capsman too. .. for now :P Wireguard ? i dont hear about that before i think. Keep in mind that i need access subnet 192.168.220.0/24 from my place to other .. and devices in 220.0 . We got powerfull mikrotik in our server (localy) if we will need it.. ok .. i see wireguard... but i ...

Andrew162

https://i.postimg.cc/2yt6H70x/Screenshot-1.png They are disable anyway But yes.. sorry now i see :) i will try enable them and set correctly after fix. and enable that policy firewall PS C:\Users\Unitron> ssh 83.1.221.xxx -p 226 ssh: connect to host 83.1.221.xxx port 226: Connection timed out I als...

Andrew162

I just talk with second network Admin . who got similar network with same devices
But he never forward ports on mikrotik when he is on ipsec tunnel.

After almost 1h talking.. no clue why its not working

Andrew162

I hide the last portion of IP.. so i write xxx

this is a WAN IP

Andrew162

# aug/30/2022 16:13:21 by RouterOS 7.4.1 # software id = 3762-TKCZ # # model = RB750r2 # serial number = <CENSORED> /ip firewall address-list add address=192.168.220.6 list=InterOptima add address=83.1.221.xxx list=WAN /ip firewall filter add action=accept chain=forward comment=InterOptima disabled...

Andrew162

Hello Yes im testing also from outside of the network = at the moment im in home = so for sure its best test. Mikrotik got public IP 83.1.221.xxx sub 255.255.255.252 gate 83.1.221.xx But in description they also add Ipv4 lan 217.xx.xxx.128 - 217.xx.xxx.131 =i dont understand .. for what that is Fort...

Andrew162

Hello Im low knowleadge Mikrotik Admin (That previous topic could be helpful) https://forum.mikrotik.com/viewtopic.php?p=952679#p952679 The mikrotik ver 7.41 Mikrotik got ipsec->Fortigate Main problem is ... forwarding ports dont work The packets counts when i try for example enter http://wanip:2016...

Andrew162

I make Clean "default" config fill Quick set and set pppoe And work 1gb After 1h .. i try to copy firewalls ports.. scripts.. but it was too many i Copy clean working 1gb config .rsc use backup to previus And paste And its work. Topic close But im anyway curious what was STOPPING internet..

Andrew162

Hello Im from Poland and got Mikrotik RB3011UiAS-RM as a Core switch arround 7 month ago after update ( not sure what version ) My internet slow down from 1Gb to max 200Mb and cant go faster even more then 1bit Internet is Netia Poland Fiber After 6 month of talking with ISP Netia ... today i was ta...

Andrew162

Its work thank you :)

Andrew162

http://i.prntscr.com/4GY81KsoRCacJ4dQVP4eiA.jpeg

Hello In job
and now in home i got problem with dude
When i start it ... its like trying to update
then its close
so i download new Dude from official web site and same issue
What can be wrong?

Andrew162

https://prnt.sc/12vfby3
https://prnt.sc/12vfcdd
https://prnt.sc/12vfd0w
https://prnt.sc/12vfdb3
When i make for example port 800 i can ofcors enter webpages normal
but my host is like xxxxx.ddns.net:800/owncloud

Andrew162

http://prntscr.com/12m3qyv
cant use port 80 when i do by your method
- for example make that screenshot - need disable for start working

Andrew162

Hello Month ago i configured Owncloud on rasspberry pi 4 4GB server its working but its work on port 80 when i make firewall port 80 to Owncloud i got problem opening the webpage .. what i think its normal.. becaouse the port is used http://prntscr.com/12lymwq My NAT http://prntscr.com/12lynza and f...

Andrew162

Warning!!! Try paste this command line: :delay 1ms You will get a warning like this: Warning: value of delay-time was rounded down to 0s And this is not a good thing. Look at CPU load. My router goes from 0-1% to 25% CPU usage. 16 devices connected - so its have some "load" and 0% .. rare...

Andrew162

{:global run :local LogInfo :local LogLength :local LogTopic :local LogMessage :local PrevLogLength 99999 :while ($run=1) do={ :set LogInfo [:toarray [:log find ]] :set LogLength ([:len $LogInfo]-1) if ($PrevLogLength<$LogLength) do={ :for Loop from ($PrevLogLength+1) to $LogLength do={ :set LogTop...

Andrew162

freemannnn

But its work for new device i guess?
I need for every device difrent sound

Andrew162

{:global run :local LogInfo :local LogLength :local LogTopic :local LogMessage :local PrevLogLength 99999 :while ($run=1) do={ :set LogInfo [:toarray [:log find ]] :set LogLength ([:len $LogInfo]-1) if ($PrevLogLength<$LogLength) do={ :for Loop from ($PrevLogLength+1) to $LogLength do={ :set LogTop...

Andrew162

its seems to not working i think
CPU 0%
no beep sound ( in code i also not recognise any beep sound )
the script counter dont "count" also

but i COUNT on you to make it done to work flewless :)

Andrew162

dont work for now.
System-> Scripting + then
https://prnt.sc/10yzk2o
Its look like this

then i press Run Script
then in terminal
:global run "1" (enter)

i unplug cable eth4
in log show ether4 link down
but no sound

Andrew162

for Wifi
but i was think it will work also for ethernet
Will be also cool if some device disconnect ( ethernet)
will beep (ether1 ) 1 ( ether2 down ) beep twice /or difrent music

but most important is Wifi connect sound / dissconnect sound

Andrew162

acording to your script (becaouse im in job right now (have only eth with beeper)- dont have here mikrotik with wifi and beeper in home i got audience = got speaker :global run :local loginfo :local prevlog :while ($run=1) do={ :set loginfo [/log find time>([/system clock get time] - 2s) topics~&quo...

Andrew162

im tootaly noob in this its will look somethink like that?? # Check if log message how this (in this situation ethernet port 5 disconnect) :local scheduleName "scheduleName" :local startBuf [:toarray [/log find message~"ether5link up"]] :local removeThese # Do this - play song :i...

Andrew162

Hello
Is there a way to make mikrotik make a sound/music when wifi device connet and disconnect?
for example i connect phone by wifi to mikrotik and he play beep song
i disconnect and play sad song (mario die)
its will be awesome :)

Andrew162

Check do you hawe ip adress local
In IP-> Addresses

Andrew162

Hello
i'm new here
I configure mikrotik etc
but when i plug 1TB HDD (fat32) to RB3011UiAS-RM the option "Files" become empty
What could be wrong?
After unplug HDD the "Files" show again
Disk is recognise and can enter only Via FTP
With SMB they are also problem

Search found 65 matches