MikroTik

rz8168

Can you try this? /ip firewall mangle add chain=prerouting src-address=10.0.0.144/32 action=mark-routing new-routing-mark=mt-p2p p2p=all-p2p /ip firewall mangle add chain=prerouting src-address=10.0.0.144/32 action=mark-routing new-routing-mark=mt /ip route add gateway=10.0.0.253 routing-mark=mt-p2p...

rz8168

Here's the config from my firewall. I substituted the real ips with 123.123.x.x. This config will limit each IP to 1600K/256K on an DS3 pipe. [sysadmin@LAX-Firewall] queue simple> pr Flags: X - disabled, I - invalid, D - dynamic 0 name="Global Traffic" target-addresses=123.123.121.0/24,123...

rz8168

oh by the way, if you want to just limit per connection to 512Kb/128Kb, you can use simple queue or queue tree. Add two PCQ queue type download-limit 512K upload-limit 128K In simple queue, add target-address subnet (your client ip subnet say 123.123.123.0/24), setup Upload Limit queue type to "...

rz8168

I have the same card in supermicro superserver 1u running 2.9.23 but no problems so far.

rz8168

I'm trying to set up like what you are requesting but unfortunately, no success. And as far as I know, no one has done that. I'm trying to set up PCQ 1.5Mbps/256Kbps per connection and within that, limit P2P down to 128K/128K.

rz8168

Just a question.... Is it doable if i want to get Mikrotik to limit like this p2p (limit at 128k) web (limit at 1Mb) other (limit at 1Mb) ----------------------- But total bandwith limit per IP connection is 1Mb disregard the total queue limit combined. Say if I have a pcq queue for p2p say 256k and...

rz8168

Does anyone ever have Machintosh users connect through Mikrotik???

rz8168

Is anybody having problems with MacOS getting ip from DHCP Server on Mikrotik? Mac based systems seem to have trouble getting IP address from Mikrotik. 1/4 of our 1100 tenants complained about this issue then we immediately switched to Windows based DHCP server to fix this problem. I also have a sta...

rz8168

I'm having similar problem with 3 routers out of 10. One of them is brand new, it rebooted 3 times within 8 hours. 2 of them is running on 2.9.6 and the new one is 2.9.7

rz8168

Has anyone tried them? I'm worry about their quality. Currently I'm using intel nics. But we are about to deploy a new firewall... and I just saw Supermicro released their new products - 5014C-MFB. Its 1u blade server with intel chipset board but Broadcom based NICs. I like their design, it is just ...

rz8168

I downgraded it to .19 as well to see if problem exists.... and yes it still exists. Right now, I'll stop managing firewall rules at this point now until a fix comes out.

rz8168

I have same problem! Two of our router just crashed after upgrading to 2.8.23. It happened while I'm working on firewall rules especially mangle rules then it caused kernel panic.

rz8168

Use PCQ which I've did to my clients. Don't use MAX-Limit, because it will apply to whole flow instead of per client wise. Also, bursting won't be supported as far as I concerned.

rz8168

can someone explain to me what doese limit-burst really mean? I don't understand about it regards the limit-count/limit-time. My english isn't that good.

what does limit-burst have affect to limit-count and limit-time? Can someone give me an example or explaination please? Thanks.

rz8168

I have bridged network. 7 buildings, each of the building has a MT box bridged to have clients able to use the public ips. we have 4 subnets of public ips but appears to have minor to critical broadcast storm. 0 ;;; Drop all broadcast mac-src-address=00:00:00:00:00:00 in-interface=all mac-dst-addres...

rz8168

Thx, but can you help me understand one thing about it... about action=return My MK is a bridge to client with filtering support..... Here's my forward chain already looked like: 4 src-address=216.x.x.0/24 action=jump jump-target=admin-out 5 src-address=208.x.x.0/24 action=jump jump-target=tenants-o...

rz8168

Does anyone has tested a firewall rules that can prevent DoS or DDoS attacks?

rz8168

Thanks for the advice, guys. Is there anyway you can tell how many cycle it has written? I'm getting 256MB Flash IDE for bandwidth queuing and firewalling, will there be any problems with write cycle? I also do a lot of packet sniffering in firewall too to hunt down hosts with viruses and worms.

rz8168

Has anyone used Transcend Flash IDE DOM? or Similar Flash IDE (DoM)?

Are they any reliable than standard HDD IDE drive? Did anyone had any problems with it?

rz8168

I've been using AMD lately... and I'm looking for 1U solutions for MT Boxes and I decided to go with 1U barebone Supermicro 5013C-M. Here's my questions: What is the recommeneded or minimum required pentium 4 CPU to handle 1,000 users with intensive bandwidth queuing and firewalling? Is Pentium 4 2....

rz8168

Two type of chipset had failed my firewall, they are onboard nvidia and onboard VIA LAN chipsets. So far, I have other firewalls with 4 port NIC from mikrotik, intel dual port nic, and few 3com (integrated and add-on pci) works flawlessly. I would personally recommend intel and 3com chipset.

rz8168

mikrotik doesn't work with msn video and voice conferencing. UPnP doesn't function properly. Mikrotik doesn't seem to care....

rz8168

as topic said

rz8168

We are ISP for student housing, and we provide public internet access to internal and external as we promised to students.

rz8168

Why not use just throttle bandwidth by IP address? I started routing public addresses recently using a bridged interface and limiting bandwidth in this way is working very well for us. So are you saying it would be better to use bridge and PCQ? I don't understand what do you mean by throttle bandwi...

rz8168

Anyone? Or it's not possible?

rz8168

Our real public ip addresses start with 64.x.x.x and 208.x.x.x. I'm using 10.10.x.x as example, not our actual public ips.

rz8168

<LAN> --> <MT> --> <CISCO Router> --> <DS3/internet>

I have 5 subnets of public ip addresses.

10.10.10.0/24
10.10.11.0/24
10.10.12.0/24
10.10.13.0/24
10.10.14.0/24

rz8168

I have bridged network allowing LAN to use public IP addresses. PCQ seems to be malfunctioning when mt connected directly to cisco router. mt -> cisco -> internet with PCQ 768k/256k limit enabled, our clients are getting very low speed at 120kbps/245kbps, then I filtered all p2p protocol, speed back...

rz8168

I'm currently using bridges say.. interface "public" and interface "local" are on bridge1 they work flawlessly but I encounter one problem which is bandwidth limitation. I couldn't get it to work with bridge using PCQ. My question is, is there any other way to let local network t...

rz8168

as subject above and traffic load balancing doesn't work too in the form of gateway=x.x.x.x,y.y.y.y

MSN video conferencing, not MSN webcam

Please help.

rz8168

I see what your problem is, you need to mark your packet action=passthrough, not action=accept

rz8168

can you post your firewall rules? you may need to turn on the connection tracking in order to get your router work properly.

rz8168

did you add static route to bridge?

rz8168

No.. not yet. Tried gateway=x.x.x.x,y.y.y.y form but still no luck....

rz8168

Have you try Terminal in Winbox under left-side menu?

rz8168

shouldn't anyone from mikrotik give us a hand on this issue?

rz8168

also check your firewall input and forward rules

rz8168

are you logging in from WAN or local? if from wan, make sure you add gateway in /ip route. can you post your mt configuration? try do /system reset, which reset everything back to default. make sure all interfaces are enabled

You have exact same hardwares with my mt so you shouldn't have any problem.

rz8168

please... I manage 10 routers... and firewall policies change frequently... I have to update all of them almost everyday... really pain in.....

rz8168

I just started a thread questioning how to setup load balancing in mktk. But as far as I know, gateway should be in x.x.x.x,y.y.y.y form but that doesn't seem to work as I tried. I do get traffic balanced out in 1 out of 500 balancing tests. Most the time, traffic go through one interface instead of...

rz8168

I have a mt router functioning as firewall, bridge, and bandwidth manager. I use PCQ on per ip basis. Here's the spec of the router. Athlon xp 2500+ (1.8Ghz) - $75 Asus matx mobo - $65 Case - $36 Lan cards x 2 = $30 Ram 512MB = $90 40GB = $50 approx cost of our firewall is $350 and managing against ...

rz8168

I added gateway=x.x.x.x,y.y.y.y but it doesn't seem to work. I have dual WAN connections and all traffic is going through 1 interface. In very rare occasion, it would balance the traffic in sudden and then it stopped (going through 1 interface) again.

Search found 43 matches

PCQ Question

DHCP and MacOS problem

Broadcom NICs

limit-burst

question about bridging

How to prevent DoS/DDoS attacks in mikrotik?

Transcend Flash IDE?

Hardware recommendation?

I would love to see Mikrotik support MSN video conferencing.

Weird

How to put LAN to use public IPs without bridge?

MSN video conferencing doesn't work in NAT

How do I setup load balancing?