MikroTik

dwright

I just did an upgrade from 3.24 to 3.25 using my above mentioned post and everything went flawless. I even added a second drive and was able to copy the user-manager settings from the main drive to the second drive. It's not enough to just copy system.npk over. You have to copy every single .npk pa...

dwright

We have had the same issue on two of our routers as well. 1 411AH and an X86 router. It happened a day after upgrading to 3.25. On the 411AH it disabled the discovery protocol on all the interfaces and the IP address detached itself from the interface it was assigned to. Good thing that it was acces...

dwright

Anyone using the User Manager for a Radius server for a dialup portmaster(analog terminal server)?

dwright

You could use virtual wireless AP's using different SSID's. One for hotspot and the other for PPPOE connections. Just a thought.

Dan

dwright

Have a RB230 that has been working for a little over a year and just stopped working. Hooked up a serial cable and found that it hangs at "Starting Services". Nothing was change prior to this problem. Found a thread about same problems with RB500's and followed some of the solutions to tha...

dwright

Does your hardware have a CF(compact flash) module or is it a routerboard running on the onboard flash?

Where did you purchase your hardware?

Dan

dwright

[admin@mikrotik] > interface wireless print [admin@mikrotik] > interface wireless set <interface #> default-forwarding=no If your using the accesses list, you need to turn it off for each client there as well. [admin@mikrotik] > interface wireless access-list print [admin@mikrotik] > interface wire...

dwright

You might have to reinstall.

What hardware are you running?

Dan

dwright

That would be excellent. Also. Torch filtered by queue would be awesome job.

Till then, you may use IP firewal connection list. It shows packet marks.

Thank you for pointing that out. The only downside is that it only shows connection marks.

Dan

dwright

Would it be possible to add a filter based on a mangle rule to torch?

This might be a good feature to have.

Dan

dwright

Figured it out. From the documentation for those also interested. Priorities When a leaf class wants to send some traffic (as they are the only classes that hold packets), HTB checks its priority. It will begin with the highest priority and the lowest level and proceed until the lowest priority at h...

dwright

I have a question that I hope can be answered. In the documentation on HTB they show an example where there are multiple leafs with multiple parent classes. http://www.mikrotik.com/docs/ros/2.9/graphics:queue_demo-1.jpg Refering to the picture, what if there was multiple classes in level one that ea...

dwright

Is this correct? The routeros-x86 package says its 2.9rc9 but I have 2.9.8 installed.

D~

dwright

Haven't tried 2.9.7 but just upgraded from .6 to .8 today. 5Ghz P2P link 8 Miles -63db signal. RB532 and CM9 card. 2.9.6 - No nstreme/turbo Solid 22Mbps udp @ 54Mb Tx data rate Solid 14Mbps udp @ 24Mb Tx data rate 2.9.8 - No nstreme/turbo - Not using the wireless-test package Solid 24Mbps udp @ 54Mb...

dwright

I had problems with the exact "deauth: class 2 frame recieved error" Mikrotik - Still would like to know what this error means.. This would happen when we loaded the link. Switched channels and the errors and disconnects went away. Might be interference. Try a different channel if you have...

dwright

i have rule chain=dstnat dst-address=xx.xx.xx.xx protocol=tcp dst-port=1402 action=dst-nat to-addresses=192.168.201.19 to-ports=1402 Good this is the port forward rule you need to send all 1402 traffic to .19 inside of nat firewall. chain=src-nat src-address=192.168.201.19 protocol=tcp src-port=140...

dwright

Not free and haven't used it, but this is a web based radius manager for mikrotik.

Radman

Dan

dwright

This might help you in understanding the queue features of mikrotik. Its talks about giving voip priority.

http://wiki.mikrotik.com/wiki/Bandwidth ... and_Queues

Dan

dwright

Assuming you are running the web service on port 80 and v2.9

 [admin@mikrotik] > ip firewall filter add chain=input protocol=tcp dst-port=80 action=drop

Dan

dwright

Depends on what you are using mikrotik for. On a wired network both . I would personally go with 2.9 for its new features and tools. On a wireless network 2.8.28 is stable but doesn't run on the routerboard. 2.9 was very buggywhen first released, but most of the kinks have been worked out. There are...

dwright

Not without running WDS on the mt client in which case you would need a AP that supports wds. You can not bridge the traffic when running in station mode. Its a limitation of the 802.11 mac protocol. Other products get around this by using mac/nat which mikrotik doesn't support because it not RFC co...

dwright

Seeing the same thing on our 532's running 2.9.6-2.9.8.

On the wrapboards, sector writes are being displayed.

Dan

dwright

Do you have default authentication turned off?

under /interface wireless:

set wlan1 default-authentication=no

Dan[/code]

dwright

I want the traffic between Local and Wireless to be like plugged into a switch or like a linksys router to where everything is open between them. 1. Create a bridge interface 2. Assign your ip to this interface 3. Add the wireless and ethernet interface to this bridge under >interface bridge port A...

dwright

[1] Using nstreme, Mikrotik is said to have removed the limitation on distance and that distance won't degrade the throughput of the link. When making long distance links you need to factor in the curvature of the earth, and antenna height. A good program to use would be Radio Mobile . [2] Assuming ...

dwright

Search the forums. I believe that people have been having problems due to power issues. I know this has been talked about, but haven't been following the thread. I don't use SR2/SR5 cards.

Dan

dwright

What kind of client hardware are you using? The clients should be following the AP when changing channels. The only way to know if 5.8 in your area has any clear channels is to do a sight survey with a Spectrum Analyzer. You can find places on the internet that will rent one for a reasonable price. ...

dwright

have you tried upgrading to 2.8.28?

Support will probably tell you the same thing, and then send a suppout to them. That is your best for getting to the bottom of your issure.

Dan

dwright

Not sure what exactly you are trying to accomplish. Are you saying that you want all your wireless customers on your ap to go through the firewall when establishing connection with each other? have you tried setting the default forward on the wireless off? If your using the access list, make sure yo...

dwright

Is it correct to say that a higher db omni will have a longer range than a lower db omni. However the higher the db the flater the cone will be. And thus using a lower db omni will be shorter range but have better non-line of sight chacteristics? Not sure about the better non-line of sight characte...

dwright

maybe something like this. http://www.mikrotik.com/Documentation/rosmE.pdf

Scroll down to "Wireless Configuration Examples" and take a look at "Wireless WDS Repeater or Point to Point Link"

Dan

dwright

Strange. I have never had that problem. There shouldn't be anything to configure to allow passive ftp. Are you using NAT or Masqerade in this router? Any potential firewall rules that might be blocking your access? The only thing I can think of is that you have something configured in either the fir...

dwright

Under ip firewall's service tab. Do you the ftp helper plugin enabled? Have you tried your computer not going through the router to the ftp server to see if it works? The ftp server you are trying to connect to might not be configured to handle connections from a web browser. I believe you need to h...

dwright

no problem.....

Glad it works for you.

dwright

I though about setting up a site with configuration examples. Great to see you guys did the work for me. :wink: I think that once this site starts to get populated with info, people will start to use it more. When I get a chance, I would like to do some tutorials on questions I see a lot of. Keep up...

dwright

Have you reference a null modem cable pinout diagram.

Here is one. Null Modem Pinout

Also make sure that you turn the flow control off.

setting should 9600 8N1 if IIRC.

Dan

dwright

Ok, Just remove all the ip addresses from all the interfaces except the bridge, and remove the masquerade rule. Then change the ip address on the bridge interface from .29 to .30. This will give you an ip address on the bridge interface, that can be reached by either ether1 and wlan1. The masquerade...

dwright

Some more question I should have asked before. Sorry!! The reason that you are seeing the AP ip address is because of the masq. rule. You cannot nat and bridge the same subnet at the same time. Are you running a hotspot? What is the gateway for the 10.0.0.2/19 network and where does it live? On your...

dwright

No license is needed is needed for 900Mhz. Its license exempt spectrum. We have had good luck with Trango Broadband , and a friendly neighboring wisp has been using Motorola Canopy . There is also Wave Rider , but don't have any experience with that. Througput is just under 3Mbs for all. I read a gr...

dwright

nstreme or nstreme the problem exists. I was able to get to the ethernet side of the link today to try some different settings other than the ones that we configured on the units before they went up, and when I changed the channel it fixed the problem. Now I am having another problem with poor perfo...

dwright

802.11G is still 2.4Ghz. It groups 2 adjacent channels together creating more bandwidth. G is not really meant for outdoor and won't help through trees.

D~

dwright

Are you posting the config of the RB500 or of your Main Router?

dwright

Not sure exactly what you want to accomplish. Are you saying that you want all of your clients to go through the firewall rules when attempting to connect to each other except for these two clients? Are you using the access list to authenticate your clients? If so, you can set up forwarding in the a...

dwright

What interface are you adding the vlans on? You might want to try add two bridges. Add VLAN1 and WLAN1 to one, and VLAN2 and WLAN2 to the other. This should make the cisco do the routing. Or you can add firewall rules to forward chain to keep the two networks from seeing eachother. Hope this helps. ...

dwright

Those are pretty high gain omni antennas in your configuration. Note that the higher gain an omni is, the flatter the rf pattern. Think of a pancake as opposed to a doughnut with lower db levels.If your antenna is two high off the ground, you have the possibility of shooting signal over your potenti...

dwright

Anyone seen this before? Anyone know what it means?

Running 2.9.6 with CM9 cards. Link is 7.6 miles -65 signal. As soon as you pass traffic, link drops and get this error in the log. I am running nstreme on this link.

Any help would be greatly appreciated.

Dan

dwright

45 mbit's each way you say? That's 90mbit's aggregated throughput. That's what you get out a turbo link isnt it? Have we forgotten it's a half-duplex medium? I believe he meant that he was getting 45mbps both ways, one way one each test. Example, when doing a receive test he was getting 45mbps, the...

dwright

Have you contacted mikrotik support with a suppout file?

dwright

I would refer to the documentation and try WDS between your two routerboards. The client routerboard to your AP won't be able to bridge traffic from the clients on the ethernet do to the limitation of the 802.11 protocol. If you are running 2.9, on the documentation page, they have a pdf of example ...

dwright

I have been reading that analyst are suggesting that IT departments should start prepairing there staff to implement ipv6. Here is one such article . I understand that ipv6 will take a while to completely replace ipv4. I was just wondering if Mikrotik has an idea of when they will introduce ipv6 int...

dwright

Are you trying to create a transparent bridge over this wireless link?

What is a parabola? You mean a parabolic dish(antenna)?

please post what your current config is on wireless interface and bridge interface.

Dan

dwright

Here is are the results that I got in the lab with RB500's and CM9 cards. CPU's set to 333Mhz Running 2.9 stable release. Includes default wireless-test package. Point to Point using WDS All other wireless setting default Signal level is at -48 and Tx/Rx rate is at 54Mbs Running bandwidth test on 2 ...

dwright

Check this forum thread

Dan

dwright

Are you putting these cards on a riser card? We had the same problem. We could only put 1 card in the riser. It would load the driver, but wouldn't show up in the interface list. Try putting them in the pci slots and see if they show up.

Dan

dwright

I believe the only T1 cards that are supported are the cyclades cards. These either come in 1 or 2 port versions.

If you are looking at the digium or sagnoma 4 port cards, these are not supported by mikrotik.

Dan

dwright

Now that we have a supported release, I'm struggling to see the advantages over v2.8. There are a lot of "nice to have" features in Winbox etc. but what are the fundamental differences? From MT home page: Full release V2.9 is out! [Documentation] New features include: Best wireless perfor...

dwright

Thanks for the post mojiro. I will take a look and give my feedback.

D~

dwright

Ya I haven't had the chance yet, but this is definately the next thing I am diving into. I am starting to realize the power of scripts!!!!!!!

dwright

Cmit,

That did the trick. I don't understand why this wouldn't work.

/ip firewall filter remove chain=input

Anyway, this works just as well. Thanks for the help.

D~

dwright

There are multiple ways to skin a cat.

I thinking adding this feature would make it the easiest of all of them.

dwright

A work around I see would be to add into the script

/ip firewall filter

print input

remove $rule numbers go here.

That seems crude, is there a way to say remove all in input chain with out having to print, and then designate each rule?

D~

dwright

Is there a way to flush the firewall rules using a script? I noticed that if I make big changes to the firewall script from the export option and then re-import it, All the rules get added, so now each chain has double the rules. If there was to add a command to the top of the script to remove all t...

dwright

I know. I think it would be helpful to specify a list of specific ports, so you can sometimes combine multiple firewall rules into one.

D~

dwright

Are you in CST? If so you use -5:00 when "in" daylight savings time, and -6:00 when "not in" daylight savings time. I have not seen an option to automatically switch between the two in the software. I am running rc10 and it is working ok for me. What NTP servers are you pointing ...

dwright

Is it possible to add the mport like option to the firewall? That way we can match multiple ports to one firewall rule.

For example: dst-port=

add protocol=tcp dst-address=192.168.0.1 dst-port=22,25,80 action=accept

Thanks,

D~

dwright

Hi Matt, Yes you need to bond from both sides of the link. Mikrotik router at your end of the connection, and at the providers end. Or if you have a fatter pipe to the internet at a different location, you could put the mikrotik router there, and bond between this location and the location that you ...

dwright

Anyone? Someone surely has tried this product.

D~

dwright

About a year ago I posted this about the radius hotspot manager by DMASoftlabs. Anyone have any experience using this? Please share anything you have to say if you have. Mikrotik- Your hotspot manager has been in beta for just about a year. What direction do you see it going, and what exactly can we...

dwright

are you sure that your firewall is turned off the server?

as root:

/sbin/service iptables status

to shutdown:

/sbin/service iptables stop

to permanately disable, try:

/usr/sbin/ntsysv

Then uncheck iptables and save.

Note** Can't remember if Redhat 9 came with ntsysv

D~

dwright

I was looking at the demo router for 2.9's firewall rules and there is one rule in the input chain that I am not understanding and was hoping that someone is able to fill me in. 6 ;;; drop all that is not to local chain=input dst-address-type=!local action=drop Anyone care to take a stab at what thi...

dwright

Thanks for the link.

D~

dwright

Where can I find examples of the hotspot pages for 2.9? I look in under files and there is nothing there. In 2.8 they are listed under files. I would like to customize the pages.

Thanks,

D~

dwright

Figures. As soon as I post this message, without any other changes made. I reboot the router again, and now it is working. I must have rebooted the router 5 or 6 times with the same configuration and had no luck getting it work. So I guess this is a big.........Nevermind !!!!!

D~

dwright

I was wondering if the dymanic drop all firewall rule that gets added to the hs-unauth chain is supposed to there. It blocks all connections. I can't even get to the login page, or ping the gateway till I remove the rule. It assigns me a lease but doesn't allow any traffic through. Is this a bug or ...

dwright

Not that I am aware of.

You could allow access to telnet/ssh from a certain ip. Maybe like an Ip that only you would have. If you are using dhcp, you could set a static lease to your mac address. That is what we do.

D~

dwright

Was your setup the same before making the ip address switches and you had no problems at that time?

D~

dwright

Have you tried it without the Linksys router in place? could be a CPE issue... They may not have the necessary ports forwarded. I'd have the user try using the phones directly connected to the internet connection. Well, he says that he has tried that, but it still didn't work. This is also a custom...

dwright

why would I need to remove rule # 1. Rule #0 matches this customers src-address, and anything else gets matched by rule #1.

Could you elaborate more on your post?

D~

dwright

Thanks for the replys. The customer is using AT&T Call Vantage. I just enabled the h323 helper in the firewall, but I think they use SIP. While doing some research, I've read that port forwarding needs be done, but these were all old articles/posts. Does anyone know if this still needs to be imp...

dwright

Well we just cut over to private ip address for our customers, and are using 1:1 Nat for a few of our business customers. When adding this in one of our customers using VoIP no longer has the service. This is the setup ------ Wan Ip-------- MT----------- Private Add.------ Linksys----- Customer Net....

dwright

I guess I should explain a little more about why I am asking. We have a point to point link using the atheros ar5212 cards. Signal for the link is -73/-78. According to the receive sensetivity of the atheros card we are using, it should be linked up at 48Mbps on each side. We have the supported-data...

dwright

Anyone using this? We recently replaced our old karlnet AP's with Mikrotik, and was wondering what exactly the pros of using this setting were? We also use trango and it has a similar setting but never really tested if it makes a difference. I did read somewhere that it helps the ap determine the pr...

dwright

as always: please make a supout.rif file at the time the problem is happening and send the file to support along with detailed description of the setup. make sure you are running the latest version.

Will do!!!!!

dwright

I have a comment. Looking at the change log I don't see any wireless fixes. We have a routerboard that was running 2.9beta19 setup up as an ap-bridge using the atheros AR5213 card. All customers have 26db "SNR"(We used a spectrum analyzer on the sector to get the noise level) or better on ...

dwright

Can you give us a date? I am hoping that there will be some fixes for the Wireless in 2.4Ghz AP mode. We have 3 RB532 waiting to go in, but clients won't stay associated in 2.9beta18/19. We have another type of SBC that we downgraded to 2.8.27 that doesn't have this problem.

~D

dwright

Not sure if this is the problem or not, but if you are using the 172. network for private ip addressing, the problem could be that that ip address is not a reserved network address. The 172 range goes from 172.16.0.0-172.31.255.255. I can actually ping 172.168.0.1 from my network so it is a valid wo...

dwright

That mac address is registered to Breeze Com also known as Alvarion. BreezeACCESS™ II systems which operates in Time Division Duplex (TDD) mode utilizing Frequency Hopping. Could be the reason that it is filling up your log file. They also carry a line called the BreezeNet which is DS. Do you have a...

dwright

Now here are the main questions: - can buildings see each other; will the windows sharing work between buildings; Depends on the netmask you use. If you used a /22 which includes 4 class C's then yes. But then you would have to add a bridge and bridge all the building into one big network which can...

dwright

Have a new disconnect error in the log jan/01/2000 04:53:34 West 2: unauth or missing data sender, 00:30:1A:00:3f:B2 Cmit, Is this the error you were refering too? I am getting this error on an Airbridge. Mikrotik, I can associate multiple clients in the lab with 2.9beta, but when out in the field a...

dwright

Well, downgraded to 2.8.27 and hooked it up and no user disconnects. Seems like a bug in 1.9beta19 going to send an email to support or is there a beta email address to send bugs to?

dwright

We are going to the site today to downgrade to 2.8 and try that. We are also going to try a different wireless card if there are still issues. The clients associate fine on the old AP and the noise/interference on this sector is minimal and all clients have enough signal strength. We had the default...

dwright

Anyone?

dwright

We had a RB230 unit running v2.8.11 that was up for more than 165(3960 hrs.) days. Not sure how much longer, but that is where it was at the last time I checked before we had to reboot it after an upgrade. Forgot to check that before the upgrade then it was to late. Can't say the same for the 5.3Ghz...

dwright

Having a problem switching out an access point to MT. We have about 12 users on this particular sector, and switching over to the MT AP, we only see about 6 user showing up and disconnecting every 20 seconds or so and then they come back and disconnect again. The two different errors that we get in ...

dwright

check your firewall rules to make sure you are allowing the ftp service.
Also make sure that you are using the proper transfer method. Passive ftp.

D~

dwright

I was trying to upload it to a routerboard 500. I then later saw that it was compiled for the i386 platform.

I would still like to know what the difference is.

D~

dwright

No problem. That setup is for internet facing routers for administration.
Any internal routering is done on non routable ip ranges so they can not be accessed from outside the network unless you vpn as well.

D~

dwright

I am not sure what you are referring to as far as phone calls from customers with this setup? Can you elaborate?

dwright

What I do is not allow any connections on the internet interface except for VPN connections, udp and pings. If I am outside the network, then I VPN first, then login through ssh or winbox. There is no need to have any open ports on the internet. I guess it all depends on how security conscious you a...

dwright

How do you know that you have a 333Mhz version? Is this one of the pre-mass production boards with the low voltage, and missing daughter card connector? I received mine today and the print out that came with it says that it is a 266 Mhz board. Upon reading the manual, I see that you can change the c...

dwright

What is the difference between the regular routing package and this one? I tried to install the routing-test package and it wouldn't take. Just wondering what other features might be added

D~

dwright

I know that the Routerboard supports cellular Internet access using CDM
A. Does anyone know if it supports the faster EVDO? If so what card will work.

dwright

what does your routes table look like?
Do you have any routing rules that could be overriding the default table?

dwright

Under an atheros interface, under the advanced tab, what does the periodic calibration do?

Thanks.

Dan

dwright

why not look into using an up convertor?

dwright

Fixed the problem. For future refernence for people in the same situation I was in, if you want to log with linux and syslog, in the /etc/syslog.conf file you need the following: *.info;mail.none;authpriv.none;cron.none;user.none /var/log/messages This line should be already in the config file but y...

dwright

hello all, having a bit of a problem logging firewall rules from a MT router. I have a linux server running syslog to catch the firewall logs from the MT and I am getting the logs but they are being written to /var/log/messages. How do I set it up to log to a different file. Here is a sample of my s...

dwright

Try putting a switch inbetween the Wap54g and the mikrotik hotspot interface. I seem to remember having the same problem connecting two Mikrotik's together(both were in bridge mode), and the only way that I could get them to talk was putting a switch inbetween them. Not quite sure why this made a di...

dwright

Its been a while since I looked at the documentation about it, are you running this through a vpn link? IIRC there was something about running it through a vpn tunnel. I'll have to look at the documentation as see what I can make of it. Can you post your configuration so far?

Dan

dwright

http://www.webopedia.com/TERM/D/DoS_attack.html

dwright

try an ftp transfer over the the tunnel or use the bandwidth test server in mikrotik

http://www.mikrotik.com/docs/ros/2.8/to ... st.content

Dan

dwright

You could get another mikrotik router for your noc and setup your ap to route all unknown traffic through an eoip or vpn tunnel back to it and then on to the hotspot gateway. Actually any vpn concentrator should work.

Dan

dwright

You need to disable client to client communication. I am still not clear which of your devices is acting as the ap. If it is the mikrotik, under the wireless device that is acting as the ap, there is a setting called default forward. You need to disable that. If you are using a different device to a...

dwright

yes I know but it would be nice to able to see what bandwidth each and every customer is using. Can't do that with PCQ.

dwright

Here is a suggestion that I think would help. How about adding profiles to the queues. You could set up a profile like "residential 256" where download/upload could be 256k using whatever queue type. then all you would need to do would be to add the client ip to the simple queue and select...

dwright

what version of the MT are you running. They changed the way queues work in 2.8

Dan

dwright

Could you explain your setup a little more in detail?

Are you saying that you have router behind a wireless bridge, or that you have a mikrotik router set up as a wireless bridge/AP.

Please be more specific so that we can help.

Thanks,

Dan

dwright

From the change log...... What's new in v2.9beta1: *) reduced disk space requirement by 50%; *) improved ip firewall with many more matchers, chains in NAT and mangle and more actions; *) improved bridge firewall with more matchers, tables and chains; *) increased speed of PPPoE, PPTP and L2TP conne...

dwright

i have the same problem and i need help desperately.... i have changed so much i have no idea anymore what's right or wrong.... my mail server is on the private LAN .... 192.168.0.30/32 and trying to NAT to the public ip of 68.150.192.222 but i can't seem to be ableto open port 25 ... it can't seem...

dwright

The best way to set up rules for servers IMO is to have special chains for each server. For example in an email server setup. add a chain for the server: ip firewall>add name=mail In the forward chain you would have this rule: ip firewall rule forward>src-address="0.0.0.0/0" dst-address=&q...

dwright

From 5100/5200 to 5700/5800 I lose 10 db's. I thought it was the antennas we use, seems you have a similiar problem. What db antennas give you -69 on 30+ k's? The pigtails that some of you may be using are only rated to 3Ghz. This might explain why you are seeing a 10db drop from 5100/5200 to 5700/...

dwright

Mikrotik has come out with a Mikrotik Hotspot Manager. It is in currently in beta. You can find out more about it from these
links.

http://www.mikrotik.com/forum/viewtopic.php?t=1414

http://www.mikrotik.com/forum/viewtopic.php?t=1479

http://www.mikrotik.com/download.html#hotspot

Dan

dwright

I have heard lately that there are problems with some of the 5Ghz pigtails. The genuine Horise pigtails are supposed to be the way to go. You can get them from one of these guys listed below. Quotes from one of my mailing lists....... I have to second Larry's motion. I tested quite a few pigtails fr...

dwright

Yes we are currently beta testing for you guys. I am just looking for alternatives. We would like something that we can host, so we are not relying on other people's network except our own. I do like what I see from you guys so far. But, what it comes down to is how you guys will offer it.

Dan

dwright

Anyone using this for Managing hotspots?

Comments?

Dan

dwright

Will this be eventually available for download, or is this something you will be hosting from your servers for free/subscription?

Just wondering where this will be going for future reference.

Dan

dwright

John, What kind of hardware have you tested with these numbers? I understand that running the bandwidth test from the board will add cpu utilization. Just wondering how much cpu would be needed to run those numbers? We are looking to get 50Mb/s half duplex, but would like room to grow, possibly addi...

dwright

Hello All, Have a customer that needs to connect two building about 400' apart and needs a total throughput of about 50megs. Everyone posting seems to talk about these long links and nstreme doing these great bandwidth numbers, but what about short links. I wondering from those of you who have links...

dwright

Make sure that your channels are not overlapping. You could have interference taking out the other link.

Dan

dwright

make sure the rule is in the input chain. From the manual: To protect the router from unauthorized access, we should filter out all packets with the destination addresses of the router, and accept only those which are allowed. Since all packets with destination to the router's address are processed ...

dwright

As far as I know, MT does not report snr values. Look into rrdtool. I know that it will do negative numbers. I believe you just port your cfg's from mrtg and allow rrdtool to read them and output your graphs.

Dan

dwright

If I remember correctly, it might be because of your max bits. Mikrotik reads the value as a negative number. Read the Mrtg documentation about - number values. I think there might be some more you have to do in your cfg.

Dan

dwright

What we do is put a firewall rule to only allow certain ip address to connect to winbox from our network. If we are outside our network, we vpn in.

Dan

dwright

Mag wrote: sorry, but it was a "no". within ethernet a station cant have more than one MAC (afaik). You cannot bridge IEEE802.11 stations because of limitation of the standard - an AP only accepts packets from a station which has the same MAC address that the station has. Some manufacturer...

dwright

I forgot to add that all users behind your cpe must use the same username and password.

Dan

dwright

If I understand you correctly the answer is yes. You need to set ppoe to allow more than one connection. Under ppp profile, set only-one=no. Make sure that any user you add uses this profile. That should allow multiple logins to the pppoe concentrator to allow multiple logins per mac address.

Dan

dwright

we are using WDS for a point to point link that is 1.2 miles. Our throughput is 13megs not using turbo mode and setting the basic rates between 6-18megs. When i ran the bandwidth-test the link was set to 18Mbps and the cpu was at about 98%.

Dan

dwright

I am running fedora core 2 and found dia was already installed. This is exactly what I was looking for. Thanks guys.

Dan

dwright

What program did you use to make the drawing? I am looking for a program that can do drawing's like this and run on linux. Any suggestions?

Dan

dwright

Check your forward chain rules. We had the same problem and found out it was because we were blocking potential virus ports that email and web browsing were using. Especially xp machines. The reason that it comes back after you restart the machine is because it starts back the port counter. Everytim...

dwright

sure, what's your email address?

dwright

You could try using ydi's calculator to find up and downtilt angles of both sides of the link at the distance and heights you are shooting for. http://ydi.com/calculation/antenna-downtilt.php Then use a digital level to get the antenna's positioned at there up or downtilt angles, and move the antenn...

dwright

Here is a quote from wisp-router's website A1 = Primary 802.11a/5GHz antenna port A2 = Diversity 802.11a/5GHz antenna port G1 = Primary 802.11b/g/2.4GHz antenna port G2 = Diversity 802.11b/g/2.4GHz antenna port You should have the pigtail plugged into one of the "a" ports if you are using ...

dwright · I have 2.8-2.11 if you can't find it. Dan

I have 2.8-2.11 if you can't find it.

Dan

dwright

If anyone else is wondering, this may be why You cannot bridge IEEE802.11 stations because of limitation of the standard - an AP only accepts packets from a station which has the same MAC address that the station has. Some manufacturers implement a workaroud to this problem by masquerading MAC addre...

dwright

I am wondering the same thing. My set up is this: <b Mikrotik router acting a border gateway to internet going to wired side of RB1 which is in bridge group with wireless card connected to RB2 Wireless card with same setup as RB1. RB1's ethernet is connected to another Mikrotik router. So MT/router-...

dwright

Thats the thing. There is no monitor or keyboard attached to the router. It is running headless. How it that possible then?

dwright

When I go into to /usr active and do a print, the list shows 25 users logged in under the same account from ip 0.0.0.0 and they all logged in 2-3 minutes apart and have been logged in for days. Anyone else experiencing this? I know there is no one actually logged in to the router. It is locked down ...

dwright

Need more information on your setup. Is this bridge inbetween your gateway to the internet and your users?. Please be specific in what your network layout is and your ip address scheme.

Dan

dwright

http://forum.mikrotik.com/phpbb2/viewtopic.php?t=129

here's a start

dwright

http://forum.mikrotik.com/phpbb2/viewtopic.php?t=129

here's a start

dwright

http://forum.mikrotik.com/phpbb2/viewtopic.php?t=129

here's a start

dwright

>Create the VLan(s) on the MikroTik and specify the interface hooked to >the uplink port as the "VLan Host" for each VLan.

Just wanted to make sure that you were using different vlan-id's. I didn't see anywhere that you guys had mentioned doing so.

Dan

dwright

Is there a way to have certain ip's not effected by the pcq? For example business customers have different upload/download rates. I would gather you would just mangle that specific traffic and put the queue in before the pcq rule? Is this right?

Dan

dwright

Thanks Butch,
That is how I had it set up but fat fingered the private ip address and put it on the wrong interface. I like the fact that you can put firewall rules in the forward chain to allow access from certain nodes on the network. Works like a charm. Thanks again.

Dan

dwright

I was wondering the same thing about putting the ap's on a private ip's for management and was wondering how some of you are doing this. We a have a mikrotik router as our border router, which splits our class C into two segments. One for our servers, and one for our Wireless. From there the wireles...

dwright

Also make sure that you are bridging ip and arp and that you added your interfaces to the bridge.

dwright

Hey Yazzy,

Try to put a switch or hub in between the two and see if you can pass traffic. I had the same problem with a router board bridge eth and wireless and was connected to another Mikrotik router which acted as our gateway. Couldn't explain it either.

Dan

Search found 158 matches

Re: 3.25 problem

Re: 3.25 problem

User Manager as Radius server for dialup

RB230 hangs at starting services

Feature Request: Mangle filter in torch

Queue Tree: Priority with Multiple Classes w/Children

Package list

Re: port forwarding

Re: Verify Wireless Setup

Re: Antani, Power and freqency

got deauth: class 2 frame received(6)

IPV6 support

flushing firewall rules

feature request for firewall rules

radius manager for hotspot

Firewall rule explanation

custom html pages for hotspot ?

Hotspot in 2.9rc7 bug?

1:1 Nat killing VoIP Service

noise-floor-threshold setting?

Re: Basic router setup

Wireless user disconnect

routing-test-2.9beta16.npk

Routerboard Support EVDO?

Feature function?

Mikrotik Remote Syslog

Queue Profiles

Radius Manager for Mikrotik

Mikrotik Hotspot manager

Short link Max throughput. Nstreme the answer?

Active User list problems