MikroTik

AlexPebody

Sad. No any answer me... ( here is answer:

:local renewcert [ /certificate get [find common-name=example.domain] name ]; ip ipsec identity set [ find peer=ike2_peer ] certificate="$renewcert,lets-encrypt-r3.der"

AlexPebody

Hi Guys, need help... I have some script for renew LE cert, but in my Mikrotik - ipsec identities peer is changed every time to "ca" name, when this script was running... Need get renew cert LE name and set this new name to ipsec identities peer setting. Certs renew name like: letsencrypt-...

AlexPebody

Hi guys ) Could you tell me please... I am using Mikrotik VPN to access external servers like 78.140.200.18 (for example) and the same for internal lan 192.168.150.0/24 (for example) and Windows OS working fine all routes pushes and no any troubles, but on Macbook not working if I using Split Includ...

AlexPebody

Hi guys, need your help... I have OpenVPN tunnel from side a (pfsence client ovpn) to side b (mikrotik server ovpn), please look at schem bellow: https://imgtr.ee/images/2023/06/10/KlyvJ.jpg You can see OVPN on side a pushing 172.16.100.0/24 to side b and side b Mikrotik pushing 5.132.64.25 via VPN ...

AlexPebody

Thx, but don't worry, this is fake addresses.
Then you lied in your opening post stating "My external address is".

Is it lying - for example my ip address...? It's just example...

AlexPebody

Please remove your PUBLIC IP from your posting. This is in your own interest.

Thx, but don't worry, this is fake addresses.

AlexPebody

Hey guys, I need a help... I have Mikrotik 7.9.2 ROS and for SIP, for example, I need send out to IP 5.49.132.66:5060 from LAN bridge with NAT exactly from 5060 port. For example, my external address is 178.49.185.13 and inside the LAN bridge I have 192.168.0.0/24 addresses and all 5060 SIP signal p...

AlexPebody

Thanks, better than I expect

Ok, the problem is clear: RouterOS, not the file download section...

Yeah, maybe something with boot and VPN issues... Maybe, I try with another upgrade ver.

AlexPebody

Can you have the patience to zip the file and put it on forum? (on attachments section of the new post) I want compare what your routerboard downoad and the correct file on the mikrotik site. Thanks. Yes sure, here is URL: https://drive.google.com/file/d/1DBAYM-5tSTrODXG82z_npIRGUWFJwnVS/view?usp=s...

AlexPebody

PLEASE, try this on terminal and see what is inside the test.txt file, and if is downloaded of the right size... /tool fetch ur="https://download.mikrotik.com/routeros/7.9.2/routeros-7.9.2-arm.npk" dst-path="/test.txt" All is ok as I see. https://imgtr.ee/images/2023/06/01/S0CT4...

AlexPebody

I deduced from the logs, probably the RouterBOARD doesn't use the VPN (or annoys it) compared to the other devices on the network...

Yes I thinked about it... Will try next time! See ya and thx!

AlexPebody

system package update Try with this: https://download.mikrotik.com/routeros/7.9.2/routeros-7.9.2-arm.npk without any windows open, drag&drop the file inside winbox, and reeboot. If this upgrade after reboot, probably something corrupt update file on direct download from winbox/webfig Thx! Yes i...

AlexPebody

You try with drag&drop file & reboot, or only with system package update?

system package update

AlexPebody

Current RouterBOOT version? (firmware) ? The logs just after the reboot? What method you use for upgrade? I do not see any space or memory problem... I am using default, select packages and stable channel and find upgrade and download and upgrade... https://imgtr.ee/images/2023/06/01/S01MR.jpg 20:4...

AlexPebody

Upgrade 4011 from 7.9 did not go well. The router got stuck at firmware boot prompt, and I had to connect via serial to get it boot. SFP GPON was not recognized after the router booted. Firmware upgrade and multiple reboots did not help. Had to downgrade back to 7.9 and physically powercycle the ro...

AlexPebody

Hello. Some troubles with upgrading to 7.9.1 (I upgraded with Netinstall manually) and now to 7.9.2 too. Mikrotik 4011 with WiFi, just reboot and nothing, the same version Firmware... What can I do and why can it be? Thanks.

AlexPebody

Hi guys, could you tell me please, for CHR ROS for my virtual machine, what lic I must choose root or 2023?

Thx! )

AlexPebody

In short, just don't mark routing for traffic destined to LANs. I have some rules with 80 and 443 ports mangle to another routing table and the same I have local LAN web sites, and if I do not add rules for LAN to LAN all my traffic to 80 and 443 goes to 0.0.0.0/0 and do something rules for exactly...

AlexPebody

I added this rules and added new Routing Table specially for LANs, who know, is this best way? ) /ip firewall mangle add action=mark-connection chain=prerouting comment="LAN to LAN Mark" dst-address=192.168.0.0/16 in-interface-list=!WAN new-connection-mark=LanToLan passthrough=yes src-addr...

AlexPebody

Hi guys, please tell me on CCR1009-7G-1C-1S+ ROS 6 Mangle LAN to LAN working fine, after upgrade to ROS 7.6 LAN ro LAN prerouting not working, please look rules below, thx! On ROS 7.6 with LAN to LAN preroute mangle no any ping and wifi capsman not working too mecause dns and gw main CCR1009-7G-1C-1...

AlexPebody

Anybody know, can help please?

AlexPebody

Good day, everyone. If anyone knows, please ask for advice. I have many WiFi access points and they are controlled from one device, through CAPsMAN. We also have a HOTSPOT which is formed through a guest bridge and goes to a separate provider, everything I am going to talk about is set up on one CRS...

AlexPebody

Larsa so thx, but I seen all this URLs and manuals, and EAP-MS-CHAP v2 - not working yet. Microsoft says about 1. EAP-MS-CHAP v2 is available only with PEAP. And as I said need cert 99.9% and it's so sad... but true. If anybody can set without cert, please let me know? Thank you!

AlexPebody

Friends, anybody know, how configure with just EAP-MSCHAPv2 only please?

AlexPebody

But if using EAP (PEAP) - all is WORKING normal, but phones and other devices tells about - not trusted cert, but I am not need this message for users, I need auth EAP-MSCHAPv2 only, how can I do this? All screens and logs I put this topic.

AlexPebody

NPS auditing is enabled and as I said, I got the same error every time: 6273 - this is error cert. My question about - can I using and gow configure EAP-MSCHAPv2 without cert? If choice EAP-MSCHAPv2 password in policy = Reject for any way, what you any do and any other trying settings = REJECT and w...

AlexPebody

Results: 1. With EAP (PEAP) - need cert CA for example - DC1 selfsig, and then I choosed EAP-MSCHAPv2 = all worked, but on phones and other device pop up message about not trusted cert; 2. With EAP-MSCHAPv2 without cert NOT working ever! WHY? How I can using EAP-MSCHAPv2 without using cert? All scre...

AlexPebody

I seen more than 20 videos on youtube and i saw where dude connect without cert and all is ok, I doing exactly the same settings and = reject, but when trying login to MT = RADIUS is ok. WTF and WHY? I am using MS_CHAPv2 for EAP because EAP (PEAP) need a cert, but I won't using cert for all phones a...

AlexPebody

Larsa so thx, I got this code num: 6273 without code 16 and I am not using cert, but I am add regedit like here: https://rapididentity.my.site.com/support/s/article/Device-Certificate-Validation-Fails-in-Netmotion-Unattended-Mode-Skip-to-end-of-metadata and the same issue. I think trouble in parame...

AlexPebody

Thx, but I have working RADIUS with auth MT and all is ok, but WiFi EAP won't auth and I don't know why? All logs is normal on NPS, could anybody tell me good solution for configuration NPS for EAP with auth MT? Please? I has created new Active Directory at home and got the same issue... ( Reject fr...

AlexPebody

Hi guys, please, need help ) I can't configure authorized WiFi by EAP RADIUS by NSP Windows 2019 Server, was read many posts and do all, but nothing... ( Pelase could anybody help configure EAP for authorized to WiFi with Active Directory? Not need using any certs, just EAP auth. But I have godd wor...

AlexPebody

As often happens to answer my own question, here are the right rules in all respects Mangle, overlapping Input and can be used in the case of Input for the Mikrotik and other cases: /ip firewall mangle add action=mark-connection chain=prerouting comment="Preroute Mark ISP1" disabled=no in-...

AlexPebody

The task: we need to make a complete Mangle set, so that the input on each ISP comes out of the same ISP, and that the NAT ports respond and conduct to where the default route is now, and the route can change depending on which ISP is alive or not at the moment. These are all the requirements. There...

AlexPebody

https://www.youtube.com/watch?v=Gwl-0bRxOY4
How to combine 2 markings??? In - Out 7:34 and Pre - Out 15:07 markings???

AlexPebody

Good time to all. Colleagues have a question, ask for advice: 3 ISP, mangles brand connets on input and output solve only the task of giving input and output to the specified ISP, there are problems in NAT, advise how to make a complete list of Mangle sequence along with Preroute, Input, Forwarding,...

AlexPebody

Like this https://www.fluxbytes.com/network/autom ... e-updates/

AlexPebody

Hi guys, I've try sind good anwers, but can't... I have CAPsMAN manager configon 4011 WiFi 2.4 + 5 Ghz and on my cAP the same CAPsMAC conf, how I can enable mode button on my cAP ac as WSP for example 2.4 my CAPsMAN WiFi? How can I do this? Thank you.

AlexPebody

Thx. Sad.

AlexPebody

Hi guys. Please anybody, could help? Need script for schedule shutdown and wake up mikrotik, can this idea will live in to Mikrotik? Like 02:00:00 AM going to sleep/shutdown and 10:00:00 AM wake up itself Mikrotik board? As shutdown I know and I know about Linux into Mikrotik just sleep and do not p...

AlexPebody

You are not forced to use v7 on board born when only v6 exist...
If work better for you, why update?

wireguard )

AlexPebody

Sad but true... 8-( As I mind. Thx.

AlexPebody

Hi guys.

Anybody know rb4011iGS+5HacQ2HnD-IN, Router OS 7.3.1, cpu freq decrease is unvailable any more? How decrease cpu freq?

Thx.

AlexPebody

Thx so much.

AlexPebody

Hi guys.

If anybody have that expirience, please tell me, can I using cAP ac as home router for 1pc direct ethernet + 2PC wifi and some few devices like smartphones...

what about memory and cpu load? Can't find video and total info in Internet.

Thanks.

AlexPebody

mkx, thx )

AlexPebody

On detail, but I'm not english and is hard to explain, on gigabit all pairs are used for transmit signals, but ALSO at the same time voltage is provided at blue+ and brown- pairs. This added voltage do not destroy signals (and vice-cersa) for various electric reason better described on dedicated si...

AlexPebody

Thx. I've try belive :lol: (etc "The Matrix") 2) 10th port work on 100M because the port is 100M, and not because that port provide poe out. 4011 have all 10p = 1gbps, but you can get just 100mbps with 2 pair UTP cable, because Passive PoE take 2 pair for power + and power - and I am inter...

AlexPebody

Yes, I've understood you every time, but do your best not to understand what @mkx has already replied to you in the 2nd post... Is better you change your cat food brand... :roll: rextended I understand what's problem ) I am not totally understooding last words from post: RB4011 doesn't perform any ...

AlexPebody

Hello Friends. Could somebody tell me: 1. I want connect 4011 using RBGPOE what shipped with cAP ac and as I know, cAP ac have compatibility with 802.3af/at, RBGPOE have 1gbps port and if I plug in cAP with this PoE adapter + PSU cAP ac, I really can take 1gbps line data with 4011 and cAP? Because P...

AlexPebody

I am haven't experience with PoE and ask help with it, please. I don't understand what rate of voltage will send 4011 from 10th port to HAP ac2, because in specification 4011 I saw - up to 57v. Can you understand me?

Thanks.

AlexPebody

What you mean? Can I select voltage rate In Winbox? I mean if I just plug 10th port to my HAP ac2 PoE IN and switch on PoE out, all be normal? 4011 send 24v or 57v to my HAP ac2?

AlexPebody

Really Sorry, but again, I am NOT plug in PoE IN, I will using standard PSU what have complect with 4011 and what you mean "what comes in, goes out", if I using PoE in like 48v then I have the same voltage on PoE out, but I mean another situation - I am NOT using PoE IN, I need get PoE OUT...

AlexPebody

So thx. Yes sure, I'll use standard power supply with 4011 and I'll connect HAP ac Lite or HAP ac2 only 1 of it, I was need info about total output voltage from 4011 Poe out. For example if I using standard PSU with 4011 what voltage will go out from 10th port for power on HAP, 18-24-28-57 volt? Or ...

AlexPebody

Good day Friends. Could anybody tell me, RB4011iGS+5HacQ2HnD-IN have PoE Passive out - up to 57v, but RB952Ui-5ac2nD-TC and RBD52G-5HacD2HnD-TC have PoE Passive input - Passive PoE 18-28 V, this is automatic controlled by RB4011iGS+5HacQ2HnD-IN what voltage send to HAP ac Lite and ac2, or RB4011iGS+...

AlexPebody

Hello to all. Please need a help, I've got error: Cannot resolve dns... On my RouterOS (this is not hard Mikrotik, just RouterOS on my Data Center) I have configured my RouterOS and i can get resolv ya.ru or other site from ping tool from WinBox and from my PC in my Mikrotik LAN. I have prepaid key,...

Search found 55 matches