MikroTik

msorensen

Unfortunately, that does not solve the issue.

The router restarts with an IP address of 0.0.0.0 but will not allow WinBox to connect via MAC.

msorensen

All I want to do is remove the default config, start from scratch, and program the router the way that I want to program it. But, the board seems to retain a lock out of WinBox access except within the default subnet. When you remove the default config, the RB750 has an IP of 0.0.0.0 and will not al...

msorensen

Thanks for the posts on this subject..... We had placed (4) RB450's into seemingly light duty on a shelf, in a rack with other computer equipment, in an air conditioned area. In about 18 months we had 3 out of the 4 RB450's fail..... Not good. QUESTION for Mikrotik.... has the reliability issue been...

msorensen

the radio is disabled at first boot. you dont need an antenna

True.

Plus, we always keep a 2.4/5GHZ N-connector rubber duck, and a 2.4/5GHZ Ufl-connector rubber duck antenna on the test bench for use in initial configurations and testing.

msorensen

It has probably been thought of and mentioned before, but a great suggestion for a new RouterBoard Product: Take the RB750 and build in a low power 2.4 RF card (a la RB411R) with ROS level 4 or 5 to function as an AP. Build on a small omni antenna. That would make a great wired & wireless custom...

msorensen

What is the latest news on the availability of the RB/750?

I've had some on backorder for more than a month....

msorensen

I don't care about the pretty box either. That gets thrown away. My point is that bosses tend to like something that "looks like a router", not something I've put together out of an off-the-shelf metal box and some switches. I'm not making any comment on the actual build quality of the ca...

msorensen

That definately stopped the log-in, log-out activity.... Thanks

Curious as to why?

What purpose does checking "Router OS" accomplish?

Why does the Dude log-in and log-out when that attribute is checked?

msorensen

OK.... I've searched the forum and can not find it... I'm sure that there is a thread on it ;-) Running Dude 2.2 on the WinXP machine... Some of my mik RBxxx routers, sometimes have a ton of "system info account user xxxx logged in from [dude ip address] via winbox" log entries.... It imme...

msorensen

True... However..... you might also consider another approach to limit access to your router. Create a Firewall address list consisting of the IP Blocks and/or IP addresses that you might want to access your router(s) from. Then implicitly allow access from that list to the router on TCP Ports 21-23...

msorensen

Dang.... well that solution works some of the time... I can not seem to find the ryme or reason in when the config of columns stays and when it does not....

msorensen

Problem: winbox viewing V3.x device fails to display columns and column sizes as they were set on previous session. EG: In Winbox I set winbox view of simple queues to include tx, rx, total tx bytes, total rx bytes, and resized queue name and IP address so that it was fully readable…. Close the WinB...

msorensen

Problem: winbox viewing V3.x device fails to display columns and column sizes as they were set on previous session. EG: In Winbox I set winbox view of simple queues to include tx, rx, total tx bytes, total rx bytes, and resized queue name and IP address so that it was fully readable…. Close the WinB...

msorensen

I supose that you could use a 433 to replace a 133...... but, a 411 would be closer equivilent.

http://www.routerboard.com/comparison.html

msorensen

same user for each subnet I admit that I missed this part of the problem. You're right, that does complicate things... the only approach that I can think of to address this would be to not specify an IP in usermanager, and then set up a static ip reservation to that MAC in each of the (2) different...

msorensen

then you specify the IP that you want to be assigned to that MAC address. http://wiki.mikrotik.com/wiki/User_Manager/DHCP_Example my testing suggests that the DHCP server will assign the IP address specifiied in the UM user record. It does even need to be within the designated DHCP scope - it will g...

msorensen

do not set a static ip for the user.

have a dynamic pool configured.

If no static IP is specified in UM, then the DHCP will use an IP from the pool associated with that interface and that DHCP server.

msorensen

Perhaps the remote router needs to be configured as a DHCP relay server? exactly. Currently, the DHCP clients are broadcasting DHCP requests onto their local subnet. Currently, there is no way for those requests to get to the DHCP server. also.... be sure that your FW rules allow the DHCP conversat...

msorensen

We’ve been considering moving to UM. I want to be sure that I have this correct.... What dictates the maximum number of sessions? -The License Level of the device running User Manager? -The License Level of the device making the inquiry to the UM data base? Example, lets say that we have the followi...

msorensen

I've tried to find a solution for this a few times over the years without success... Is there a way to build a T1 router on a Routerboard? Obviously, the item lacking (or at least I can not find) is a mini-PCI T1 interface... Consiquently, we keep using other stand alone T1 (or whatever) routers, th...

msorensen

First…. I would advise upgrading to 2.9.51 / ip firewall mangle add chain=forward protocol=tcp connection-limit=130,32 action=log \ log-prefix="Ex-Con" comment="Log and add-src-addr Too Many Connections" disabled=no add chain=forward protocol=tcp connection-limit=130,32 \ action=...

msorensen

Here’s the approach that I learned…. 1. mark the P2P connection in pre-routing 2. mark the P2P packets in pre-routing. 3. set up a simple queue to limit the flow of those packets…. / ip firewall mangle add chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=p2p-conn passthrough=y...

msorensen

No question in my mind; I would put 3 radio cards on 1 433AH board. Particularly if all 3 were to have the same ESSID.... Think about ARP tables for a moment :lol: I can not think of one advantage to having 3 boards, unless the 3 sector antennas where some distance apart, like on different portions ...

msorensen

use MacTelnet... http://www.mikrotik.com/testdocs/ros/2.9/guide/winbox.php Connect your computer directly to an operational ethernet port of the RB411; Open WinBox and press the button with the "..." to the right of the ip address; wait for Winbox to find the RB411; select the RB411 by its...

msorensen

check firewall rules in the path from where you are attemping to access the router to the input rules of the router itself. port 8291 needs to be open. common pratice among most folks is to limit such access to the router to an access list of specific IP's and/or IP blocks via input chain firewall r...

msorensen

You should not be dropping more than 2.5 volts (@ 1A) accross a span of 200 feet of cat5. http://www.demarctech.com/techsupport/poecalculate.htm it would seem that something is wrong... yea, you knew that ;-) I would test it using a separate 200' Cat5 cable to see if you get the same result. If a di...

msorensen

yes to can assign multiple IP addresses to a single interface on a router.

However..... without more information about the 'big picture' (the network configuation) it is difficult to know if this approach will accomplish your goal, or lead to trouble.

msorensen

address lists is useful where you need frequently changing list of addresses I would disagree.... It is for convienience.... when you have a list of addresses which you plan to treat with firewall rules (for example) in the same way.... It's a heck of lot easier to just refer to the variable (the a...

msorensen

/system check-installation

might yield more clues or information.....

msorensen

Another possibility is a bad SWR (Standing Wave Ratio) being presented to the output of the card.

Meaning that there may be a problem somewhere from the RF connector of the card up to and possibly including the antenna itself.... eg: bad pigtail, connector, coax or antenna.

msorensen

so this means once you have 10 clients on a the same time that has taken up your 10 active sessions i presume? I have not yet deployed usermanager... but that is my assumption. It is not clear to me exactly how an "active session" is defined...it is probably in a Wiki someplace:-) It woul...

msorensen

Last night I transferred dude-3.10-mipsle.npk to my router so that I could begin using DUDE to monitor my network. hopefully the router itself is running v3.10. Assuming that there are no version conflicts, I would try to downgrade to a lower version, and then re-upgrade. Otherwise....... it may be...

msorensen

...How many users can i have on user-manager with a level 4 license...

v2=10
v3=20

http://www.mikrotik.com/pricelist.php?sect=1

msorensen

When working form the comand line interface this is true. Working from winbox is not so easy. I already admitted to being lazy ;- ) Just had a case this morning on a drop rule.... wondering what was triggering it.... On a Checkpoint FW I would have reached in and flipped "ON" the logging f...

msorensen

Or...... be able to select different saved device lists to segregate the different groups. Along these lines, it would be great if an IP address sort of the WinBox Device List would actually sort in IP order. Today it performs an Alpha sort rather than a sort by IP address. As an example... Today th...

msorensen

DNS names should be resolved against a DNS server. When and how often would RouterOS do it? Rely upon the existing DNS Cache and existing Caching function of RouterOS running on the router itself. Presumably the TTL of the DNS record influences how often re-resolution occurs. To conserve resources ...

msorensen

Add a Firewall Rule Logging (yes/no) attribute. Today, a completely separate rule must be written to write to log… Consequently you must right a rule to trigger logging, then a separate rule if some action other than passthrough is desired, and make sure that you place the log rule ahead of your act...

msorensen

I know of one undocumented (that I could find) issue that I stumbed across is that the MAC address in the record in the user manager MUST be in capital leters.

The examples in the docs use MAC's which happen to be all numeric.... Alpha charachers must be caps.

msorensen

My oppinion is that if don't need any function which is only in 3.x then use 2.9.51 for rb1xx series router boards. I agree. I just downgraded another RB133c yesterday... CPU useage was frequently hitting 100%, access to the Routerboard via WinBox was slow and erratic, and I wondered about its thro...

msorensen

sounds like you are wanting to "Bridge" rather than "Route" traffic through the AP.

No problem....

Create the AP, and bridge the two (or more) relevant interfaces within the AP.... That will be bridging AP.

msorensen

When we have set these up in the past we always had the outgoing rules before the deny and everything worked fine. I just wonder if it's something with using the bridge. I think that one problem with the bridge is that from the perspective of the forward firewall chains, all packets come in from th...

msorensen

We are trying to block anything except for what we explicitly open that is the correct approach for a protective firewall. it looks like your current rules where an effort to allow ANYTHING from your internal network (you're calling it a DMZ). And are allowing ANYTHING from 216.234.27.0/24. And the...

msorensen

That is an odd set of FW rules.... In fact, reading this one: add action=accept chain=forward comment="Allow all outgoing" disabled=no \ out-interface=bridge1 ..... makes me wonder if that rule would accept everything... because in a bridge all "foreward" packets come in from the...

msorensen

For reasons that I do not understand, those rules did apply to bridged traffic on versions of RouterOS... until version 3. Now you have to specifically enable firewall rules on the bridge. From WinBox/Bridge, Bridge Tab, Settings button, check "use IP firewall" Or: /interface bridge settin...

msorensen

This was a change with version 3.0 vs earlier versions.... as I recall..... on an AP that I coverted from v2.9.51 to v3.something where (in this case) the Ethernet was bridged to the wireless interface.... ... suddenly the queues no longer applied (or at the least the traffic counters did not advanc...

msorensen

one other thought is that if you are bridging, you must enable the firewall rules on the bridge, before they will apply to the bridge. From WinBox/Bridge, Bridge Tab, Settings button, check "use IP firewall" I know that this issue applies for forewarded packets.... I do not know if the &qu...

msorensen

next step would be to attempt to reinstall RouterOS with Netinstall

http://wiki.mikrotik.com/wiki/Netinstall

msorensen

I have lots of RB133c’s associating with hidden SSID’s on AP’s without a problem. But I wonder…. I would expect the described problem behavior IF the RB133c client SSID was blank. ssid (text) - the ssid of the AP. If none set, all ssid's are accepted. Different ssids will be meaningful, if the ssid ...

msorensen

suggestions for RB532 replacements:

RB333 or RB600
http://www.routerboard.com/comparison.html

msorensen

curious if you have noticed one more symptom? Does this RB532 reboot itself once or twice per day? I recently deployed an RB532 with (3) R52s and v3.6 as an AP... noticed the frequent 100% CPU, also noticed that the RB was rebooting itself periodically. Immediately after a reboot, go to console, not...

msorensen

We're about to add a T1 to a wireless POP site, and looking for a T1 interface for a router board. One bit of advice I received was that Mikrotik does not support any current T1 interfaces. Is this true? If so, what are the suggestions?... Other than purchasing a separate Non-Mik router with T1 inte...

msorensen

I just built a couple of AP's for subscribers using RB133's (not RB133C)... Still too expensive to compete with off the shelf cheap-o wireless routers, but OK when some special needs exist. RB133's come with Level 4 license. Early versions of the RB133C came with Level 4, though I believe that they ...

msorensen

That's a bummer

Under "Logging on and Passwords":
http://wiki.mikrotik.com/wiki/MikroTik_ ... ions_-_FAQ

http://www.mikrotik.com/testdocs/ros/2. ... notfound=6&

http://forum.mikrotik.com/viewtopic.php?f=2&t=16300

msorensen

I never have found a very good explanation of this... here's my best shot. Firstly, what is meant by last burst time? Isn't their only one burst time? My understanding is that the router looks at the average usage measured over the time interval as defined by the burst time. So, if the burst time is...

msorensen

I prefer to do in in the "Input" firewall chain. General Methodology is to only allow certain specific protocols/ports from certain specified IP ranges "allowed" in the INPUT chain of the router. Everything else is dropped via a final "drop everything" FW rule. Input Ch...

msorensen

From the RB532r5 user guide http://www.routerboard.com/pdf/rb500r5ugQ.pdf … JP3 and JP4 choose input voltage (1-2 for 25..60V DC, 2-3 for 6..22V DC). Note that because of wire resistance, PoE requires higher voltage (it is recommended to use 11V minimum). The low voltage mode has overvoltage protect...

msorensen

http://portaone.com/2007/05/03/mikrotik/ MikroTik Rauter OS Certified to Work Together with PortaOne’s Range of IP Telephony Solutions and Products Coquitlam, BC, May 3, 2007. - PortaOne Inc., a leading global communications software infrastructure vendor, today announced the completion of comprehen...

msorensen

I'd say that the announcement of another stocking Distributor is relevant and good information for a post here!

This 4-year Electro-Comm customer is glad to hear it!

msorensen

Can you post the rules you added to make this work? Because most impementations of chains are very restrictive (for security reasons) My guess is that he was not allowing the output of DNS in his output chain. Example, if you wanted to allow DNS inquires to the DNS Cache from the 10.10.10.0/24 subn...

msorensen

Don't know... but, I would try deleting the two queues. And then rebuild each one from scratch...

msorensen

Why does adding a simple queue to the END of the chain with a target address of 0.0.0.0/0 or simply no target address seem to shape ALL traffic, INCLUDING traffic that is targeted by IP in the chain above it? In my experience, it doesn't. My first implementation of MT was to create an MT replacemen...

msorensen

Another important consideration of Simple Queues is that traffic that does not find a rule match among the simple queues is uneffected, and unlimited by any simple queue. Its kinda like having an unwritten final Firewall rule that says "everything-allow". The "default" is unlimit...

msorensen

my understanding of and experience with Simple Queues is that they do process packets in the chain order. So, if you have a simple queue for each assigned IP, you would just have a final (last) simple queue covering the entire subnet with your desired default speed. I have one situation where that i...

msorensen

I am also a newbie working my way through the learning curve. The documentation is "interesting" :roll: I frequently find the Wiki to contain the missing link between the docs (devoid of any application examples) and some actual real world application examples, and some discussion of the m...

msorensen

Winbox would not talk to it (period).

setting the flow control DID fix my serial communication problem - THANK YOU!

And, I will go in and correct the WIKI so that the next poor fool does not trip over some incorrect information :- )

msorensen

The seemingly simple goal is to connect to a RB112 2.9.40 via the serial port. I lost ethernet communication with it during initial config. Only the blue LED is lit. So, I thought I would try a net install. 115200bit/s, 8 data bits, 1 stop bit, no parity, hardware flow control. From the Serial Conso...

msorensen

yes, the "server" needs to the IP address of an available SMTP server that will accept an SMTP connection from the machine running the Dude. And, of course it would also require that any intervening firewalls, routers, etc, between the SMTP server and the machine hosting the Dude must allo...

msorensen

snmp would be wonderful

for devices being "tested" merely by a ping: Maybe it's there somewhere, but I do not see method of setting some number of retries before DUDE classifies it as a failure.

Search found 68 matches