MikroTik

Egate

This is really bad for backward compatibility if no NV2 and personally would not be able to replace AP, because we have significant amount of rural clients having long range links to AP, but only functioning acceptable with NV2 enabled. I understand AX does not allow for NV2, but the radios does als...

Egate

Hi Normis. Problem with no Nv2 backward compatibility, is that it would be almost impossible to upgrade to AX AP. We have hundreds of CPE's using NV2 with only some newer once AC CPE's and i am sure other WISP's as well. Only way forward that i see is to re program al CPE's to be able to use 802.11 ...

Egate

These work for me on netPower16P

Egate

Great, thanks. Much appreciated.

Egate

Thank you Mikrotik !! RoS 6.47.1 [admin@crs112-8p-test] /system health gauges> print oid 0 name=.1.3.6.1.4.1.14988.1.1.3.100.1.2.7201 value=.1.3.6.1.4.1.14988.1.1.3.100.1.3.7201 type=.1.3.6.1.4.1.14988.1.1.3.100.1.4.7201 1 name=.1.3.6.1.4.1.14988.1.1.3.100.1.2.7202 value=.1.3.6.1.4.1.14988.1.1.3.10...

Egate

Hi PCunite Thanks so much for the response. Had to read through your original QOS post regarding this and in the end i made changed to my QOS in according yours and bharrisau testing and setup in post 139. Every thing is working flawless now. Have a 400Mb/s fiber that max out at 395Mb/s. With new se...

Egate

Thanks.

Egate

Yes do agree, but i have to drop around 100Mb/s of 400Mb/s data to be able to start controlling this. Have watched quite a bit of videos and tutorials on QOS and all indicated around 10% From our discussion, dropping TCP traffic will eventual decrease the download data from the upstream provider. Dr...

Egate

Hi. Thanks for the response. Yes talking about increase of round trip time and understand what you are saying. Without congestion, pings would normally be around 25ms and would increase to around 80ms if we hit 395 Mb/s. This is however what is confusing me. If i implement QOS at 360Mb/s max downloa...

Egate

Hi. Since Covert lock down, our max download has almost double. Should get a second fiber in two weeks to resolve this problem but wanted to implement a queue tree QOS system to prioritize pings and browsing. Also added speed test as priority 2 to test the effect of the Queue tree. Implemented this ...

Egate

Does anybody know of a radius server with auto bank reconciliation capability’s. I have found quite a few cloud based solutions but no solution with a on site server and/or once off payment. Our exchange rate is just too unstable for us to make use of a month USD payment plan. Or perhaps billing sof...

Egate

Thanks. Looks like Netinstall it is.

Egate

Hi Thanks for the quick response. Nothing strange in logs. Only some OSPF error logs. Probably just a route that changed. Found a strange script about two weeks back. Upon investigation i found it to be the socks hack, but did not find any scheduler or php file or other changes, mentioned in the for...

Egate

Hi. This morning our CCR1016-12G was attacked but i have no idea how. It has the latest firmware installed. Did this after i found the router was compromised using the socks attack. Also changed the password when i installed the firmware and disabled socks as well as all other services except winbox...

Egate

We are rural, don’t have fiber yet. :( Actually our WISP has, but at a price that bleeds you dry. :D We used to run nv2 without password and then started running into problems when the competitors also started using nv2, we started using password. Did not find any significant change in speed. Also r...

Egate

Can also try setting TDMA Period size to 3ms instead of auto.

Egate

I hear you and can't agree more.

Egate

I am sure that is also part of it. Can imagine it is difficult to develop your software around what the radio chipsets is capable off. Most of the other vendors do their own hardware development, giving the possibility to change the radio as well. In my opinion, all of them is using some form of Lin...

Egate

When we started up, many moons back, we were the only WISP and Atheros chips were great. Then things started getting more and more crowded and data usage sky rocketed. Would today at any given time scan around 35 different AP's of whom i am aware of 5 WISP's. Handling interference/filtering in my op...

Egate

Have always been an adamant Mikrotik supporter and still is. Will always be using there switches and routers. Nothing out there with same capability’s at the price. Unfortunately they do not develop their own radio equipment in house, which is where the problem is, especially in noisy environment. T...

Egate

Hi Have a link running on 8035 for many years. Suddenly starting to drop. If doing wireless snoop there is all of a sudden four clients on this frequency, but if doing a Wireless packet sniffer there is high bandwidth users not showing in scan or snoop. Not sure what to make of this? Still have Mikr...

Egate

Google "Mikrotik PCC" lots of examples to load balance two wans using PCC.

Egate

Dont have to use it. Only if you have a server that also need publick ip? Normaley would be ok if you use one ip and route rest of trafic through Mikrotik with nat.

Egate

ECMP use either one route or the other. Is baiscley alreadey fail over. If one is dead, onley one will function. That said, ECMP is not very good for load ballancing. Rather Google "mikrotik pcc" Much better for load balancing with fail over build in.

Egate

Just Google "mikrotik simple queues" or "mikrotik qos". Will find plenty examles.

Egate

Hi Idlemind.

Currentley using Radius Manager. Is software based on freeradius.

Egate

Thanks for the responce. As you mentioned, would not help me much, but is always interisting to see how other people accomplish this. We recieve a lot of internet banking payments into our account, causing the bank to send a automated email of payment or once every twelve hourse a csv file of all tr...

Egate

Anybody know of a free standing, not cloud based, billing system that can import payments from a bank statement. Any, suggested/info would be appreciated.

Egate

Was in the process of testing Mikrobill.com when they abruptly closed. Do not know what happened but found it to be exceptional software. Does any body know of other radius software that integrates into Quickbooks accounting software? Any info would be appreciated.

Egate

Would probably need to add some kind of counter. If, as an example three pings is not successful, disable VLan.

Egate

This might help. Put in script. Need to modify do a bit, to soot you.

:local pingTarget 8.8.8.8
:local pingResult

#########################################################

:set pingResult [ping $pingTarget interface=pppoe-out1 ]
:if ($pingResult = 0) do={

Egate

Best solution i can think off is instead of using switch put small router like RB750. Give PC1, PC 2 and server ip in different sub-net range. This will function as required.

Egate

Haven't got a answer to your question, but what do you want to accomplish?

Egate

Just Google. There is scripts that ping an ip through a pre determined gateway, normally DNS server ip. Use the PPPoE interface as gateway.

Egate

Google PCC load balancing. Will actually make use of both connections and if one drop just us the one connection.

Egate

Don't know about the 2 munit, but i have a queue set up for VOIP in order to allow VOIP at max speed. Have a script running every few sec moving this queue to the top of the list. This kind of setup should accomplish what you want except that it allows data to your server at higher speed.

Egate

Google PCQ load balancing. Better way of doing this without breaking secure connections. Lots of howto's. Also, yes. Possible to do on same router. Actually easier this way. Only difference you would use PPPoE interface instead of ether interface in load balancing.

Egate

Hi. Thanks for the feedback, but found the problem. One of the router's passing through was incorrectly set up with masquerading. This caused the PPPoE server to drop the request because it appeared not to originate from the radius server ip.

Egate

Hi. Use Mikrotik Hotspot with DMA Radius to authenticate and disconnect users. Works good. Also have some AP's set up as PPPoE server with user connecting to AP using PPPoE client to authenticate with radius. Works good, but prolem is, radius does not disconnect PPPoE client. If i do this manual, th...

Egate

Don't have to connect to AP1. Your original proposal would still function except that you would connect with the client WIFI /Wlan2 to the next AP Bridge / Wlan1 and so forth.

Egate

Sorry.
On AP 2 set WLan1 to station and connect it to main AP. Set WLan2 to to AP Bridge.
On AP 3 set WLan1 to station and connect it to main AP. Set WLan2 to to AP Bridge.
On AP 4 set WLan1 to station and connect it to main AP. Set WLan2 to to AP Bridge.

Egate

It will work, but not necessary if you have two WLan's. Set WLan1 on AP connected to router to AP Bridge lets call it Main AP. On AP 2 set WLan1 to station and connect it to main AP. Set WLan1 to to AP Bridge. On AP 3 set WLan1 to station and connect it to main AP. Set WLan1 to to AP Bridge. On AP 4...

Egate

Personally only use RB433AH and some RB912 but none with R11E-2HPND. However, if you go into winbox under wireless you would should find wlan1 and wlan2 which would be your two wifi cards. The first RB, connected to the LAN, with mode = ap bridge, the other in station bridge? This would be the corre...

Egate

Yep, would definitely have to use WDS in order for this setup to function, however, this is a very bad way of doing this. Every time you jump a AP further away from the AP connected to the router, your pings will double. Do not know your RB used as AP, but if possible, rather add an extra card to ea...

Egate

Can confirm, the RB 912 does run rather hot. Although we only use 24Volt. Personally i believe this is coming from the radio. Normally the more power, the more heat. Had a similar problem with watchdog. Replaced RB912 replaced with another RB912. Same problem. Eventually i found that the switch the ...

Egate

Have to admit, have got no idea what you are saying. Made a bit of a drawing? What i can say, you should not need WDS and also make sure the station is set to same protocol as the AP bridge. Only thing that would do this, unless you fiddled with security profiles and settings.

Egate

Sounds like routing problem. Don't need rules to accomplish this, maybe masquerade rule with ether 2 as out interface, because most printers can only set gateway. Create route in pc using 192.168.0.0/24 (actual ip of router) as gateway for destination ip 192.168.1.0/24.

Egate

Bridge and queue normally does not play nice. One thing to keep in mind is that you can actually only control speed of data going out of router. You don't have control of data coming in. Can drop packages and TCP will a just, but will always try and increase speed. With most queues you would hav a b...

Egate

Ok, my bad. Assumed equipment was mikrotik equipment. Which make modem and what mikrotik gear do you have?

Egate

Add this to firewall nat, should function if you enter 192.168.6.1:808 in browser. Read explanation again. add action=dst-nat chain=dstnat comment="Publick IP" \ disabled=no dst-address=192.168.6.1 dst-port=808 protocol=tcp \ to-addresses=192.168.0.100 to-ports=80 add action=masquerade cha...

Egate

Unfortunately mikrotik is a bit more hands on. If you want it done, you have to tell mikrotik to do it. This is what makes it powerful, but also give it a bit of a learning curve. In your case, you most probably did not set up a default route. Do some reading on that as well. :-) In IP - route creat...

Egate

Only have 6.2 but unless something changed, you would not see hits. If you put something, as example website url, in wallet garden and you can access it when not logged into hotspot, it is functioning.

Egate

Fortunately, or unfortunately there is so many ways to do this. M y suggestion is use simple queue for each ip, but read this http://wiki.mikrotik.com/wiki/Bandwidth ... and_Queues some examples, but there are so many more.

Egate

Yes.

Traffic to address 192.168.120.250 on port 80 from src-address-list=test add src-address to address list named test2.

Egate

Forwarding port 80 is almost always a bad idea, because there is so many things using port 80, not least of all web pages. In this case you would create a firewall rule in access point firewall dst-nat with dst ip 192.168.6.1 and action dst-ip = 192.168.0.100 This will route all traffic coming in on...

Egate

Hi RB912 is has dual chain radio. This means you can use two aerial cables, connected to the RB912. Connect one to one dish and other to second dish. Do the same on other side. that is it. Just make sure that one dish is horizontal polarized and second dish vertical, on both sides.

Egate

Hi. Woknew, your idea is sound. but i would only be able to accommodate one client per PPPoE. Very officiant way of doing it. Have no Vlan out. This brings me to MovingNetworksFwd. The VPN is actual a very good idea, almost perfect, exept for the fact that we are in South Africa without any local VP...

Egate

Even if it is a bridged network. If your routing is set up correct, you should still be able to see the route/hops taken when running trace-route. Also maybe to clarify. If set up in a bridge environment. Data coming in on one port, will be retransmitted on all other ports that is part of the router...

Egate

http://wiki.mikrotik.com/wiki/Manual:Queue

Egate

Probably masquerading. In firewall - nat create rule using src-nat, out interface the PI is connected and action masquerading. Is actually a way around routing, which is the actual problem.

Egate

Standard setup. Can put 8.8.8.8 in hotspot DNS. IF user enters hotspot.mysite.com he wil get log in. If he enter hotspot.mysite.com, after logged in, will have the option to log off. If chosen, he would be able to log in with another PC. Only problem is because there is written a cooky into browser,...

Egate

Perhaps i miss interpret, but no different setup for 1 wan or for 5 wan. Authentication happens in hotspot, connecting to radius. Does not matter how many internet connections.

Egate

Sorry, not something you can tip on. If you disable the bridge, you would have to static add routes, in order to route traffic from one router to the next, or make use of automatic routing protocol like RIP or OSPF. This normally is used in bigger networks.

Egate

Sounds like you have a bridged network. Needs to be routed in order for this to function.

Egate

What is the problem? What do you want to set up? If you want to set up mikrotik to use radius, just create radius in mikrotik with radius ip and secret. Is documented in DMA documents.

Egate

Try this http://wiki.mikrotik.com/wiki/Manual:PCC

Egate

Only QOS you will be able to do is on the output chain, for uploads. Won't be able to do control on incoming data, (download) What this come down to is that it does not really matter if it is before or after PCC, because you do not use output chain in PCC.

Egate

Hi Rick. Thanks for the response. Two problems. First of the ADSL is PPPoE connections with public ip's, but not static. Change when ever connection is lost. Second this is the only public ip's available, only 30. Did have a look around and found a provider that will supply 5 static ip's per PPPoE c...

Egate

Trace route tells you exactly this. Ping only tells you if a packet went through. If you want a more graphical version, try the software VisualRoute.

Egate

There is examples and wiki of this. Just Google with mikrotik as part of search.

Egate

Is possible. Did it few years back, but is a shlep. Search google with those topics and include mikrotik as part of search. There is lots of examples, just need to chose what fits you.

Egate

Best solution would be using trace route, under tools. Will indicate ip path as used.

Egate

Have a look at ques and bursting. By setting bust limit, you can set data to be set back to limit if using more than allocated. Normally set up for few seconds, but guise would work for minutes. Lots of examles and WIKI on this.

Egate

Create L2TP link between two pannels. Route traffic from lan over this instead of Wlan. Will actually be over Wlan but using L2TP which is encrypted. Create Vlan2 with id2 using L2TP on bouth routers. Any Vlan2 traffic entering one pannel will be accessible other pannel. Creating Vlan or L2TP wil be...

Egate

We only have access to 4Mb/s ADSL lines. In order to function as a WISP, we have 30 of these lines set up in a PCC setup and of cause using masquerading on the WAN side. Our clients has a SXT panel that is also set up with masquerading and sub-net /29 to supply them with 5 ip's. Classic double natti...

Egate

Hi Thanks for the reply. Haven't got users with problems to play games. Problem is access is indicated as strict, which according to PS and games like battlefield is because ports is blocked. This cause gamers not to be able to view all the game servers. I of cause does not block any ports but have ...

Egate

Any body solved this? From what i gather this is because of double natting or because a client does not have a public ip. Sure public ip would resolve this, but this means you would have to have few 100 publick ip's.

Egate

Did you resolve this? Have a client with COD, same problem.

Egate

Try this one, bit newer way of doing it. http://wiki.mikrotik.com/wiki/PCC

Egate

A question if a may Emboro. What is the max users you ave connected to a AP?

Egate

What i found was in the wireless security profile, the radius - mac authentication option was enabled. When i disabled this option, every thing was functioning as expected.

Egate

Just to test this, i added the clients mac to the access list. It immediate associated with AP. This AP has default associate on, this should not happen, but is clear now. We upgraded these AP software to to 5.25 in December. Only reason why all the clients could still associate to Ap was that by ch...

Egate

Hi Uldis Thanks for the response. If possible try to reset the wireless interface configuration on the AP and on the non-working station and then configure the settings you only need. Wont be able to reset AP, production AP, but it does function with other clients, including Also please upgrade the ...

Egate

No ideas? Got 40 of these units, did not want to send them back to the supplier if it is something i could fix.

Egate

Is fine if you want to use it that way. This is MT, many ways to do this. Only reason for modem ip is to maintain modem with HTTP but actuate ip used for internet is ip assigned by PPPoE client. Personaly i would always use the PPPoE interface. MT sort the ip's.

Egate

How do you authenticate users? Hotspot, radius, userman ? Most of them has a time option.

Egate

Don't know your exact problem , but the solution. 8) Works for me. Create rule in mangle and mark all sip packets or sip server destination address. Then mark all connections using packet mark as qualifier and then use connection mark as qualifier to crate routing mark. Create route using routing ma...

Egate

No need for bridge. Can assign ip to Ether interface modem is connected to and of cause to modem. Will be able to access HTTP of modem. IN MT the PPPoE will be gateway interface to access internet.

Egate

Try radius manager.

Egate

Create bridge and add Ether 1 and Wlan1 as ports. This will create transparent link comparable to having lan cable between two points.

Egate

Ok. Went to the neighboring town, about 90km away. Carbon copy of main site, a bit newer hardware but again RB433 with two PCI radio cards. OS 5.23. Took SXT Light and standard SXT. Both connected perfect. This is really confusing. :? Have eight AP on our main site and latest stock SXT Light does no...

Egate

No info is displayed in AP log when client try to connect. The AP not associated to export. # jan/10/2014 14:18:25 by RouterOS 6.7 # software id = VWY0-E9UM # /interface wireless set [ find default-name=wlan2 ] band=5ghz-a/n country="south africa" \ disabled=no frequency=5580 ht-rxchains=0...

Egate

HI. Upgraded both to OS 6.7 and reset to client to default and set up again. Does not want to associate with these AP's. However got it to associate wit a PTP link that is about 10km further and -83b signal. The problem though is that the AP is RB433AH with two RB52 HN radio cards on each. The PTP i...

Egate

Strange one. Got few of this Lite units. They do not want to associate to AP. In log it say "failed to connect , on 5580000 not allowed" and also on some "failed to connect , on 5300000 not allowed-too many clients" Have on average 30 users connected using this AP's. Give this me...

Egate

Thanks

Egate

Hi Fewi

Trying to do the same but was wondering. If the ip can't be reached through the specified route, wont it fall back to the default route and ping the ip any way?

Egate

Hi cicserver. Did you ever find a working solution for this?

Egate

Ok. If you say dyn dns i am guessing modem. Need more inf on network. How does your users connect? Do you use hotspot or mikrotik any where?

Egate

What do you want to manage?

Egate

Have Radius manager running. Was experimenting a bit with authentication of WIFI panel onto a AP. Use the radius to authenticate users onto a hotspot at which time a simple queue is automatically created for the user, dependent on the radius manager settings. What i am wondering is if it would be po...

Egate

Thanks. That explains it. Appreciated.

Egate

Hi thanks. if i understand correct. If you use the no-mark option the rule will not assign the connection a new connection mark if it already has a connection mark?

Have a (unknown 20) connection mark if i look in firewall connection although it appears to be only ospf protocol.

Egate

Hi. A lot of scripts use no-mark as a connection mark. Is this a special mark or does it just have the meaning you should not add a routing mark?

Egate

support at egate dot co dot za

Egate

Any body that could suggest a consultant, capable with scripting?

Egate

Don't know exactly what model router board u use. On the older once, 433 they had a way of disabling the WIFI it self. Normal the same once that did it and was very rare. Eventual wrote a script that checked, if the WIFI was disabled it just re enabled it. Have nod found any thing like that on the S...

Egate

Only way i know of is by using analog to sip convertor. Small black box, almost looks like POE power supply. Plug phone in on one side and lan cable on the other.

Egate

Google Mikrotik PCQ examples. WIKI dedicated to this.

Egate

This indicate your wireless link is not created. Scan from station side to be sure you can view the AP.

Egate

Hi. Looking for a consultant that would be capable of creating mikrotik scrip, probably having to manipulate arrays. Will of cause pay for someone with this expertise. Has to do with multi wan manipulation .

Egate

Thanks Skot . Gave it a quick try. :local list :local count 1 :foreach i in=[/ip firewall address-list find] do={ :if ($count = 1) do={ :set list ([/ip firewall address-list get $i list]); } :set count ($count + 1); } /ip firewall address-list { remove [find list="$list"] } /ip firewall ad...

Egate

Ok, this is wher i am at. :local list :local count 1 :foreach i in=[/ip firewall address-list find] do={ :if ($count = 1) do={ :set list ([/ip firewall address-list get $i list]); } :set count ($count + 1); } /ip firewall address-list { remove [find list="$list"] } :log info "First li...

Egate

Hi Skot, hanks. Works perfect, now for the rest.

Egate

Have been trying to write a script to use the oldest entry in an address list. What i found was that if you do a print, no 0 entry in address list will be the oldest. Using the script below i am able to retrieve the last entry an also the amount of entry's in the address list. Have been trying to us...

Egate

Depends on your setup of router, but if they know your lan ip, probably. Many ways to preventa basic firewall rule blocking data from on interface to another. Lets say Lan is on Ether1 and AP is Wlan1 the you would make rule with in interface Wlan1 and out interface Ether1 and action set as reject. ...

Egate

To little info, but sounds like routing problem to me. Make sure you can ping all equipment both ways.

Egate

if i use only new-connection-mark. i will have 6 rules with new-routing-mark per-connection-classifier = src-address-and-ports: 6/0 new-connection-mark = W01 per-connection-classifier = src-address-and port : 6/1 new-connection-mark = W02 per-connection-classifier = src-address-and port : 6/2 new-c...

Egate

per-connection-classifier = src-address-and-ports: 6/0 new-connection-mark = W01 per-connection-classifier = src-address-and port : 6/1 new-connection-mark = W02 per-connection-classifier = src-address-and port : 6/2 new-connection-mark = W03 per-connection-classifier = src-address-and-Port: 6/3 ne...

Egate

Disable nating on firewall and add it on on router doing load balance. Can actually use one router for load balancing and firewall.

Egate

Can try WPA EAP with Tkip group and Tkip unicast.

Egate

Should maybe post network diagram. Only way to count data, is if data go through login server. Not possible if servers is on network before login.

Egate

1 ip that connecting to load balancing router. it is firewall router

Will only have one ip if you nat/masquerade your traffic before going to load balance.

Egate

Thanks for the reply. My 433AH only have 61 Mb. At this time i am actually running it on a RB493AH that has 126 MB, but i am running out of space.

Egate

Just ad the game, tv server on the network side before authentication.

Egate

This is Mikrotik. You can set it up any way you like.

Go to interface add a vlan connected to each of the interfaces with the ID you want and port 8 just don't add a Vlan interface attached to port.

Egate

Just use RIP. Go to routing click rip add interface all go to networks and add network. Defaults will be fine. Do this on all router boards. At the router board connected to you internet you go to routing RIP, Rip settings and in drop down box select always. This will auto set up routes, much less o...

Egate

If you click wireless there will be a security profile tab. Create a new profile with the encryption you need. Click on interface tab, double click Wlan, click wireless tab and select the security profile you just created.

Egate

Took RB711 and installed a 1 Gig usb compact disk. Installed V5.14 and Dude. Moved Dude and proxy in /stores to the usb and activated. Have a exported dude file that i want to import into Dude. I opened Dude and import file but not possible. If i have a look in system/resources, it is clear that the...

Egate

Unfortunately this is the luck of the draw. This happen even with more Wan's. Can manually give a routing mark to heavy users and balance them this way.

Egate

Hi Peson. Thanks. Mark "Use IP Firewall" in bridge settings. Is enabled. If you want to you can filter the DHCP traffic from the EoIP tunnel with bridge filters and have DHCP servers on both sides. Also did try this before. Did not actually function, because my filter, filtered DHCP on bri...

Egate

Thanks for the reply. That is what i thought as well, however because of the bridge it is not that easy. Also Mikrotik A give ip's and is also the gateway. Did try to mark packages and route out ether 2 instead of EOIP, but you cant mark ether1 data. It is part of the bridge and the bridge just forw...

Egate

Hi. Have similar setup as EOIP setup example hear. http://wiki.mikrotik.com/wiki/Testwiki/Virtual_Private_Networks eoip.gif In example there is Mikrotik A and B. My setup include Mikrotik C, D and E. All linking back to Mikrotik A with Mikrotik A having a DHCP and also acting as gateway for all the ...

Egate

Jip. Omnitik is in rural town and SXT is farm house next to town. Was suppose to be a grid dish, but dew to a mix-up, the technician installed the SXT. When we discovered the fault and wanted to fix it, the user was quite happy and preferred to keep it that way. If i have a look in the logs, there a...

Egate

This is called routing. Chuck the bridge.

Egate

I run both RIP and OSPF on all my interfaces. OSPF will always be the preferred route, before RIP. Routing on RIP is set on never on every thing except for the router with the actual default route on it. This is set to always.

Egate

Most anything mikrotik equipment will do that bandwidth these days. The biggest problem that most people ignore is the Freshen zone. Mess with it and you will get a great signal , but horrible throughput. This was not calculated, bit of thump suck, but on 40 km you would need about 150m height on on...

Egate

Google mikrotik one on one nat.

Egate

Got a SXT connecting at -82 db to a OmniTik that is 11km away.
No, do not know the throughput.

Client needed 3 Mbs. Not a problem.

Egate

Great. Enjoy.

Egate

Thanks. Something to keep me busy.

Egate

Will try, but my very confusing. What you need to be sure of is that you could ping the radius from any of the ip's. Use tracert to see where problem happens. Would probably only be a routing problem, and most probably your radius that does not have the right routing info. As a test, add a rule in n...

Egate

Sorry, wanted to read, but my head heart. :-) The thing coming to mind is KISS. Keep it simple, don't mean to offend, will leaf that part. :) Looks to me like your data also gets confused and at the end end up using your default route if it exist. This usually cause the delays you talk about. First ...

Egate

Looks good.

Egate

Then it would probably be a routing problem. In firewall/ nat, Masquerade using the Vlan as the incoming interface. Not the right way , but should eliminate routing problem.

Egate

Sorry, thought i did include this. Have to use src address as classifier.

Egate

Hi. Sorry, bit short on time to have a decent look, but maybe look at this http://blog.butchevans.com/2010/06/when ... proxy-arp/ sound like this might be your problem

Egate

What i found, when using 802.11 the max users capable of using a AP is around 30, can push a bit more. With NV2 this increased dramatically and depending on the ping times you would probably be able to do 60 users, maybe a bit more. This is for normal WIFI usage. Multicast should eliminate the bandw...

Egate

add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=WAN-OUT add chain=prerouting dst-address=192.168.3.0/24 action=accept in-interface=WAN-OUT WAN-OUT will be your interface name and wont be the same. Perhaps WAN-OUT1 and WAN-OUT2. Now to the quiestion, prety much yes, exept ...

Egate

Nice, now try 10km.

Egate

After Test
i've got a new range 10.0.1.1-10.0.1.254
a new pc connected to the network and got 10.0.5.1

Does not seem as though new pc ip is from pool?

Egate

Unfortunately, not a easy answer, to many variables. What i have found to be the biggest factor is processing power and Fresnel zone. With Fresnel, especially, any obstacle in the zone will have a perfect link strength, but horrible throughput on link.

Egate

Have a look at www.mikrotik.com at the downloads. Have standard RB1100's with 5.6, very stable.

Egate

Is there any way to view address list in browser. As an example, lets assume a user is put in heavy download address list. I would like to publish it on a web server in order for the user to verify, whether he is shaped or limited or what ever the need may be. Anny suggestions would be appreciated.

Egate

Hi. Found this old post of yours while searching for the best solution. Did you ever implement this? What i have been trying is to detect heavy user or downloader, especially on uncap users and move user to uncap ADSL lines and when user is not downloading any more, move them back to normal ADSL lin...

Egate

In hotspot, but most browsers block this these days beckase of pop up blocker.

Egate

Set gateway of Wlan 3 as default gateway.

Egate

Ok, never thought of it that way, thanks.

Egate

Thanks for your response, but you miss understand. When the color change to red

76% - 100% available traffic used - red

there must be a bit set somewhere in a registry and i want to get the status of this and use this in a script

Egate

I want to sum how determine when a simple queues color change to red in a script. Can’t seem to find this anywhere. Anny suggestions?

Egate

What i am trying to accomplish is to make use of the connection bytes / connection rate function in the firewall to determine users downloading. This works fine. Then i want to move the users to another wan port, by changing their route. However if just changing it, things like emails and so forth g...

Egate

Few ways. Use script to monitor data or maby make use of traffick monitor in tools to triger reachng the data. Next mark all traffick with connection mark and then routing mark. Create two routes using the routing mark to the diffrint gateways. Enabel route to firs used line and disable second one. ...

Egate

How is WIFI bridge set up? Will probably have to use wds or bridge Ether and Wlan on each mikrotik.

Egate

Guising you make use of masquirading. Google simple quies with masquirading. There is a wiki to address this.

Egate

If you make use of hospot on mikrotik. Hotspot will try to use radius to authenticate user and if not possible will look at hotspot user.

Egate

Sounds like routing problem. The dirty way to fix this is to set nat rule with ether 1 as out interface and action as masquerade. Would be better to fix routing though.

Egate

In nat rule set out interface as lo0 and masquerade as action. Should do the trick.

Egate

Hi. Have a look at RB250. Small Vlan capable switch, probably designed for something like this..

Egate

Just Google miKrotik scrips and you would find this. http://wiki.mikrotik.com/wiki/Scripts

Egate

Found that some sites, in my case Adope have ip range that is routed back into my lan. Resolved this by adding statick route in my routing table. Maby do trace route to mail server and see if traffick is routed correct.

Egate

Sounds like routing problem. Can you ping the ip?

Egate

Would be even better, that way you also lighten the load on your network since traffic is limited before it reach your backbone. Just a bit more logistically intense, you would have to access each cpe and put code on it and also if you want to change any thing, it might become a shlep.

Egate

Remove this. add action=mark-connection chain=output disabled=no new-connection-mark=pppoe-out1_conn passthrough=yes per-connection-classifier=both-addresses:3/0 add action=mark-connection chain=output disabled=no new-connection-mark=pppoe-out2_conn passthrough=yes per-connection-classifier=both-add...

Egate

Sounds so familiar. :) Maybe this will help. Haven't rely played with mesh that much but have been toying with something similar where you make use of OSPF to route TX data on one channel and RX on the other channel and if one should go down the one still up, will run all the traffic. Somebody did w...

Egate

Did nor see your ppp configuration hear, but sounds to me as though you default routes is enabled in PPPoE client. Disable them and create a default route manual and see what happens.

Egate

1. Between two 5.4Ghz GRID parabola antennas with both having 21dBi gain the better antenna is the one with bigger grid? Does the fact that they both have 21dBi gain make them comparable in performance? Exactly, same gain means exactly that, will get exactly the same signal strength, no matter how ...

Egate

Just have a look at mikrotik scrip's. Somebody already wrote a scrip to do exactly that.

Egate

You don't need to use WDS, that said, yes, if you use bridge, any interface you want be in bridge should be added as port for the bridge.

Egate

The problem would have been if you used scr-address, this would appear to the load balancer as though all traffic was from the same ip and all port 80 traffic would go through the same ADSL line Load balancing should be ok with both address. If you put proxy before limiter you would have a problem i...

Egate

Since this is mikrotik, there is a few ways to accomplish this. :) First of i read bridge, but think, probably routed. If this is the case you would set two default gateways in your mikrotik. The primary route with distance set lower than secondary and also check gateway enabled on both. If primary ...

Egate

Could just use simple queues as suggested on you concentrator and disable bandwidth control on your pppoe. Unfortunately you would have to create queue for each pppoe.

Egate

Would suggest you put two radio cards on 433. One set up as station and one set up as AP. Just connect the station to next AP or even better all to central AP. No sweat.

Egate

Don't nat each lan just masquerade the data exiting the wan and see what happens.

Egate

Sounds to me like a routing problem. Quick fix would be to put interfaces into a bridge, but don't, and i repeat. Don't use it permanent. Routing is the way to go and to get from a bridge network to a routed network is a shlep.

Egate

Just a quick question. Are you using src-address as qualifier in your load balancing?

Egate

You do understand that a bridge just retransmit all data it receives, including windows data? This will kill your network in no time if it starts expanding a bit. You should seriously look into routing your traffic. From your diagram, by the way, nice diagram, :) it appears it will take some work to...

Egate

Just some ideas to get to problem. Try disabling popup blocker and also put ip of hotspot in browser and see what happens.

Egate

Firewall wont block any thing unless you tel it to. Maybe you are natting something?

Egate

Most of the time it is a hardware problem, CPU just max out before you reach that speeds.

Egate

Had something similar. Made use of netinstall and re installed 5.5. This fixed the problem. Might work for you as well.

Egate

Hi Fewi. Thanks for the reply. Did not post any rules on Router 1, because at this time there is nothing on it except for the ip on lan going to router 2. That said, appears i got it to function with this rule. ip rout rule print Flags: X - disabled, I - inactive 0 dst-address=193.168.125.0/24 actio...

Egate

Hi Fewi. Thanks for the response. Would just like to try and figure why this is not working. I striped it down to the very basic. If i can get this running the rest should just be copy and paste. Attached a schematic. I created two PPPoE client on router 2 connecting through the Vlans and the respec...

Egate

Hi. Spend my weekend to try and fix this. :shock: Time to ask the big guns for help. :) As a test i have got a mikrotik router_1 connecting to another mikrotik router_2 on Ether 1. Ether2 on router_2 is connected to a switch. On this connection i have added 4 Vlans going to the switch in turn, conne...

Egate

Thanks for response. Had only one more problem. The default PVID of port 16 is 1, which is the default of the default VLan. This killed the connection. Changed PVID of port 16 to VID of Vlan 1 , this functioned , but VLAN2 that is suppose to make use of modem on port 2 also made connection through m...

Egate

Thanks for the reply. Jip, did test it, actual just deleted Vlan10 on switch and placed all ports untagged in the default group. Had to remove the cabel from port 23 with which i interface onto the switch, before the PPPoE made a connection. Switch info. http://www.planet.com.tw/en/product/product_o...

Egate

Thanks for the reply. Is connected to VLan. The setings as requisted. /interface print detail Flags: D - dynamic, X - disabled, R - running, S - slave 0 R name="ether1" type="ether" mtu=1500 l2mtu=1526 max-l2mtu=1526 1 R name="ether2" type="ether" mtu=1500 l2m...

Egate

It is all about routing. You could also create bridge with ether 1 and Wlan 1 as ports of the bridge. This must be done on both SXT. This will create transparent bridge, functioning similar to a lan cable, however, routing is the way to go if you ever want to use this for more than just a simple link.

Egate

What is the function of the netgear?

Egate

What do you want to use the mikrotik for?

Egate

Want to set up a PPPoE client on mikrotik to connect through with Vlan through Ether1 connecting to a Planet switch Port1 and part of the Vlan group on switch is Port2 connecting to a ADSL modem without Vlan capability. Is this possible, maybe with another make of switch? My setup is Vlan1 with ID 5...

Egate

However if you want to force MT to use one link more then other, for example WAN4, you can add more PCC lines but assigning the same two marks to a specific link , something like Thanks for reply. Have actually got a setup with 8 lines balanced using PCC, understand what you say. If you have a look...

Search found 556 matches