MikroTik

akram

For others brought here by searching for similar issues, the Mikrotik is a virtual one and the virtualization environment strips VLAN tags on reception. it was the issue with my vmware workstation that have mikrotik on it and after the help of my friend sindy ,i used Vmware esxi instead and the vla...

akram

is it ok for you to anydesk my router and see it by urself ,if u don't mind?
i am really tried everything but still failed
OK, give me the number.

thanks you
here is anydesk id
899287472

akram

I am not averse to assigning multiple vlans to a single port.............. AKA bridging is not necessary. It just makes sense if multiple vlans are going over multiple ports. Sindy, you should use port vlans more often ;-) Vlan tagging is overrated....... is it ok for you to anydesk my router and s...

akram

Create vlans on Mikrotik in bridge section @anav is popular for this approach of asking the OP to redo the configuration completely just to make it match the "perfect" one, regardless the actual needs. The OP has no bridge in his configuration, and there is no need to add it since he's go...

akram

Create vlans on Mikrotik in bridge section, enable vlan filtering on bridge and attach ports (tagged, untagged) to this vlans. Add interface bridge as tagged to every vlan you created if you want to share vlan between ports are in bridge. Also If you attached untagged (access) port, go to bridge-po...

akram

Post the complete configuration of the Mikrotik, except the public address(es) and serial number: /export hide-sensitive file=somename . Also post the configuration of the Cisco trunk ports - 208 may not be among allowed-vlans somewhere. If ether2 is a member port of some bridge, you cannot attach ...

akram

i have attached the mikrotik export file here is the cisco IT Switch ! spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! ! interface FastEthernet0 no ip address no ip route-cache ! interface GigabitEthernet0/1 ! interface GigabitEthernet0/2 ! interf...

akram

i have 1 Router Mikrotik and two Cisco Switchs Layer 2 and 1 Access Point in IT Room router ip address : 10.0.50.253/24 Cisco server room : 10.0.50.169/24 Cisco IT room : 10.0.50.75/24 AP IT Room : 192.168.208.54/24 Cisco Server room : Created Vlan 208 Created Vlan Interface 208 with Ip address 192....

akram

Smells more like MTU issue on the PPPoE link. I recall long time ago I had the same, some HTTPS sites would just not work. you were right it is MTU issue ,I called the ISP and they give me MTU on ISP Router to put on in it and then I put the same MTU on my Bridge settings ,it's fixed guys thanks gu...

akram

i called the ISP and it was MTU ,then I put this MTU on the ISP router and on the Bridge too then it fixed my problem

thanks guys

akram

i did with the bridge and I got a problem with some sites ,I'm still working to fix it
Thanks guys

akram

in my Mikrotik i have Two LAN and 1 WAN ,i'd like to Make Both LAN in same Subnet as one. in Range 12.12.12.0/24 with DHCP enabled
and for the WAN network is 192.168.100.0/24 , and Enable NAT as Masqurade ,is there a solution to merage the two LAN
here is my design for Network :-

Diagram.jpg

akram

Smells more like MTU issue on the PPPoE link.
I recall long time ago I had the same, some HTTPS sites would just not work.

but it work when i put an IP address in the WAN range and the sites open

akram

ok i upgrade to 7.1.1 and remove all the mess up of the firewall. still the same issue I cannot open the yahoo site and some other sites. so u accept to check with me by anydesk and we can contact by whatsapp if it's not against any rules here is the code now:- # jan/29/2022 17:02:35 by RouterOS 7.1...

akram

# jan/28/2022 23:00:34 by RouterOS 6.44.3 # software id = 88D3-XQ8U # # model = 750 # serial number = 467704411B41 /interface bridge add admin-mac=4C:5E:0C:76:F1:BF auto-mac=no comment=\ "created from master port" disabled=yes name=bridge1 protocol-mode=none add name=bridge2 /interface et...

akram

# jan/28/2022 23:00:34 by RouterOS 6.44.3 # software id = 88D3-XQ8U # # model = 750 # serial number = 467704411B41 /interface bridge add admin-mac=4C:5E:0C:76:F1:BF auto-mac=no comment=\ "created from master port" disabled=yes name=bridge1 protocol-mode=none add name=bridge2 /interface et...

akram

I believe we have a disconnect, when I said read, I a meant understand the information provided and take some actions based on those readings! To enable us to help you, you have to HELP YOURSELF, by providing enough clear information that will lead us to a fast and clear solution. Did you post your...

akram

Please have a look at the first LINK provided here ( HAVING ISSUES AND NEED HELP READ THIS FIRST - viewtopic.php?t=182373 )

I read that but did not solve my issue

akram

i got 1 bridge for two LAN ,called Bridge2 and Ipaddress is 12.12.12.1/24 and there 1 WAN for internet and I have NAT masquerade and it works fine but somesites didn't work like yahoo,com and other sites I need fix that ,any help? i test my PC in the wan address range and put a switch as a test ,yah...

akram

thanks i found that i was making all Interface on Bridge1 only I didn't realise that and I put Ip address for the Bridge2 that I created for the two LANs and removed the ipaddress from LAN1 and make my dhcp on Briidge2 and Disable Brigde1 everything is now work perfect. i accept your answer as u sho...

akram

There should be only one DHCP server, and that DHCP server should be on the bridge. The bridge has also the IP address 12.12.12.1 ( IP address not on Lan1 !) LAN interfaces connected to bridge (ports). They have no IP address, no DHCP client or no DHCP server, Bridge in the "LAN interface list...

akram

Guys i need ur help I have three interface 2 Lan 1 wan Everything work fine but i need to use bridge As conbine both 2 Lan as one switch and one dhcp When activate bridge , my dhcp not working on both lans how can i fix that so both lan take same range My lan is 12.12.12.0/24 Lan1 12.12.12.1 So i pu...

akram

at last i found the code for arp print <?php use PEAR2\Net\RouterOS; require_once 'PEAR2_Net_RouterOS-1.0.0b6.phar'; define('TYPE_DATA', '!re'); define('TYPE_FINAL', '!done'); define('TYPE_ERROR', '!trap'); define('TYPE_FATAL', '!fatal'); try { $client = new RouterOS\Client('put ur ip', 'put ur user...

akram

all i want is simple command /print log or /print arp or /print interface how can i do it in php? i saw this code but i don't know did i do it correctly <?php use PEAR2\Net\RouterOS; // require_once 'pear2\src\PEAR2\Autoload.php'; require_once 'PEAR2_Net_RouterOS-1.0.0b4.phar'; //IP MIKROTIK //Usuar...

akram

i have Mikrotik OS on Test Virtual Machine VMware ,can i make port mirroring on it? when i try the command /interface switch , i cannot find it. the purpose of this test that i can port mirroring on VMware to Winshark to capture the data or on LANgaurdian to Capture SPAN Or Port Mirrioring ? if exis...

akram

thanks but this is just let me know that he open facebook now as url ,but what i need can i capture every page url he access by mikrotik is it possible or not?

akram

Dear all , How to Monitor Specific ip address and his URL that he visits every minutes . for example : 1:00 AM 192.168.1.10 www.facebook.com 1:00 AM 192.168.1.10 www.yahoo.com/a/mail/ so on.. like url logging for every url he visits or even uses whatsapp or facebook or messenger or viber or whatever...

akram

https://www.youtube.com/watch?v=dnLKyu4_md8
This is for 2 WAN but with same config you can use 3 or 4 WAN links!

Thanks ,it works with me the 2 WAN put together

akram

i'm in a hotel and i'm confused to do the following :- 1st i have problem that my 10M internet sometimes goes slow when we have 300 Clients ,so i want to put a solution to fix that slow cause by youtube and streaming of cource 2nd i want to add more internet Lines so i can have more two Lines each 1...

akram

i'm sharing how i did block on facebook and youtube here is how 1-add in firewall Layer7 ip firewall layer7-protocol add name=Blockface&youtube regexp=^.+(facebook.com|youtube).*$ 2-add in address list the allow list ip firewall address-list add address=192.168.1.5 list=allow_face_youtube 3-add ...

akram

hello i have 1 network card and i want to use mikrotik with adsl router , as make the default gateway of all network as 10.0.50.1 for all workstations and the adsl router as 10.0.50.252 so they they access the internet with no problem i add rule in firewall dst nat to redirect port 80 to 8080 and en...

akram

also u can use the bridge mode on the adsl router ,so u can make the dial from mikrotik

akram

i did that and it's working
now the problem i cannot access this ip from outside
i put src-nat and dst-nat
and it's not working
when i stop the ip route for this ip address i can access the server from outside
what can i do?

akram

on winbox
it's on the interfaces ---> your WAN interface or LAN interface double click ---> ARP (choose) Proxy-arp

akram

hello , i need to make only 1 ip(our mail server) to go throught 2nd Line internet and all network to the 1st line internet i made that work fine but now i need to make that mail server to send and recive thought one public ip address i make src-nat and dst-nat for certian ip address ,now this serve...

akram

SLAN : it;s my lan - ip address : 192.168.1.2/24 SWAN : 1st internet line : 1.1.1.1 SABWAN : 2nd internet line : 2.2.2.2 i have 2 internet lines i want to all to have internet on 1st line - this works fine but this one not working - only 1 IP address will take the 2nd internet line with srt and dst ...

akram

i really don't understand
all i did ,that make it bridge mode and i can access it through internal ip address like http://192.168.1.2

akram

ok thanks

akram

i have netgear DG834g as Modem Mode to be as bridge and connect it to it's Lan Port to the Lan Port Of Mikrotik as Ether2 my problem when i made the pppoe and put user name and password of my ADSL ISP Provider but it didn't connect at all i read this http://wiki.mikrotik.com/wiki/How_to_Connect_your...

akram

perfect ,thanks very very much here the hole script for everyone who want it :local text "" :local MB :set MB " MB" /ip firewall filter { :foreach i in=[find] do={ :set text ($text."src-address=".[get $i src-address]." dst-address=".[get $i dst-address]. "...

akram

i tested and it works thanks with \r\n\r\n
i wanna do something else

i want the bytes appear in MB

like src=192.168.1.3 bytes = 195 MB

how can i do that ,how to muliteply the byte to 1024 and add MB in the line

plz help

akram

i works 100 % but i need to add enter better each line
is it possible?

akram

thanks alot
it works

akram

sorry i don't understand where i can put the line u mean

but i tried but still give me all the lines same the last line

can u edit my script and tell me?

akram

here is the script :local text :set text [/ip firewall filter {:foreach i in=[find] do={:put ("src-address=".[get $i src-address]." dst-address=".[get $i dst-address]." bytes=".[get $i bytes]);}} ] :log info "testing - $text" /tool e-mail send server="192...

akram

i'd like to make a quota for all the network ,so i can know who has the biggest quota in downloading like ip : 192.168.1.5 quota usage : 20 GB ip : 192.168.1.6 quota usage : 12 GB and so on , is there anything i can do on mikrotik can make me this small report and send it to me daily usage to my ema...

akram

i tried everything but there is something missing or wrong ,cause i made virtual machine with mikrotik and for windwos 2003 active directory with IAS ,but still no success

can anyone help me in the remote access permissions on windows 2003 ,how to permit without any reject?

akram

i have tried to configure the hotspot with the windows 2003 Active Directory i read http://wiki.mikrotik.com/wiki/AAA_with_Active_Directory and http://forum.mikrotik.com/viewtopic.php?f=2&t=12180&hilit=hotspot+and+ms+radius but the problem with the IAS server cause i get this access-reject i...

akram

i have 2 internet lines , i'd like to get people to have internet from 1st line and other people to the 2nd line here is my cofiguration please help IP address : # ADDRESS NETWORK BROADCAST INTERFACE 0 ;;; WAN Leased Line Addresses 1.1.1.1/28 1.1.1.x 1.1.1.x SWAN 1 ;;; WAN - ADSL 2.2.2.2/29 2.2.2.1 ...

akram

great , i'll test and let you know

akram

great but how to do it in webproxy

akram

i have to sites inside my network
192.168.1.12 on ssp.domain.com
and 2nd one 192.168.1.15 on ggm.domain.com

i want to publish both on same public ip but the header is different ?
public ip is xx.xx.xx.xx
can i do it?

akram

thanks alot guys
i'll test the proxylizer

akram

does the webproxy can do this in MT?

or can i use net flow to a Pc have a netflow software which can give me the log i need about the users?

what do u think?

akram

hi guys

i have a question

can i have log and monitor all users activity ?

for example

i have visit today www.yahoo.com and www.google.com at 11 AM and another time and so on
most sites this ip have visit and so on

akram

ok
but tell me which topic exactly to read about?

akram

hi guys , i need help ,i have MT 3.20 ,and i have a problem that internet goes slow ,if someone begin to download i have 30 users , i can know the user who is downloading make the internet slow ,so i use simple queue to slow his download and fast it for others. i heard that i can use mangle to do QO...

akram

i'm sorry ,how do i make upload and download for each user , can u give it to me step by step ,cause i don't get it?

akram

i got ur problem

all i want to learn from u how did u see bandwith usuage of any user in my network (down + up) at realtime.
i'd like to learn from u how to do it on MK

akram

I like my solution. I can see bandwith usuage of any user in my network (down + up) at realtime.

how did u do that?
i'd like to know how can u see bandwidth usage of any user in ur network (down + up) at realtime?
plz help and show me how u did it

akram

if i disabled masqurade , there will not be any internet for the netwok ,so is there any solution to give internet to ppl after i disable the masqurade

akram

1 ;;; Backup1 : Internet Throught SWAN -To Leased Line Router - Not ISA -No> DSL chain=srcnat action=masquerade out-interface=SWAN this is the masquerade for internet to ppl here the src nat 5 ;;; test chain=srcnat action=src-nat to-addresses=196.219.31.39 src-address=192.168.1.12 6 ;;; Test2 chain=...

akram

i add the src too but nothing ,still goes to mikrotik router webpage

akram

3 ;;; port Forward - Public to private server to ssp.salis-it.com chain=dstnat action=dst-nat to-addresses=192.168.1.199 to-ports=80 protocol=tcp dst-address=196.219.31.41 in-interface=SWAN dst-port=80 4 ;;; port Forward - Public to private server to ssp.salis-it.com:8888 - Ad> istration chain=dstna...

akram

i have intranet website ,i can acess it from outside http://xxx.xxx.xxx.xxx:80 it works fine and when i access it insde http://192.168.1.12 it works fine too but when i try http://xxx.xxx.xxx.xxx from inside ,it give the website of mikrotik? ,what can i do it make it work from inside when i access h...

akram

thanks ,i'll test and feed you back

akram

internal LAN : SLAN
External WAN1 : SWAN
External WAN2 : SABWAN

akram

[admin@MikroTik] > /ip address export # feb/10/2009 15:57:06 by RouterOS 3.20 # software id = 0RWQ-ZYN # /ip address add address=192.168.1.2/24 broadcast=192.168.1.255 comment="LAN Address" \ disabled=no interface=SLAN network=192.168.1.0 add address=196.219.31.37/27 broadcast=196.219.31.6...

akram

it works i tested it and it works i have made an ip route on the MT that 192.168.1.6 is it's gateway now MT is the default gateway for all ppl and the ISA is the default gateway to internet this is what i want and it works now i have another issue ,i'd like to do i put 2nd LAN card on the MT to anot...

akram

thanks for your fast reply you are right , but i'd like to simple my question now for example : MT ip : 192.168.1.2 - it's Gateway 192.168.1.6 in future MT 2nd LAN ip : xxx.xxx.xxx.xxx - NAT to internet ISA 2006 Server Internal IP : 192.168.1.3 - no Gateway ISA 2006 Server External IP : xxx.xxx.xxx....

akram

thanks
can i know what wifi for laptop is supported?
in PCMCIA

akram

hello , i have a problem i install mikrotik on my old laptop to use it a AP , the lan works fine but the wireless is not working at all in windows it works fine ,but on mikrotik not working ,does it to install driver or something ,please help me guys my laptop modle is asus M2N here is the link of t...

akram

Hello , i have MT 3.2 and ISA 2006 server ,i wanna Use both but i need to configure the MT right , here is the situation , ISA is the internet Gateway and have alot of publishing on the internet to internal websites so i'd like to make the mikrotik as the default gateway to all pc internaly and it f...

akram

hello all ,

i'd like to know how to configure voip on mikrotik
for example i have want to call my internal pc from internet or inside the network or anywhere
only voip no need for jacklines ,is it possible to work on mikrotik?

akram

http://wiki.mikrotik.com/wiki/How_to_link_Public_addresses_to_Local_ones i have read this link and i got all the answers i need here is the rules that i need to fix my issue ;;; Remote desktop allow chain=dstnat action=dst-nat to-addresses=192.168.1.3 to-ports=3389 in-interface=Wan dst-port=3389 pro...

akram

hello , i tried alot to open the port 21 for ftp and port 3389 for ms remote ,but always failed can any one tell me what can i do about this public ip : 111.111.111.111 for example on interface WAN internal ip : 192.168.1.28 for MT on interface LAN the server that i want to connect to is server ip :...

akram

thanks you guys , i read more about masqurading and i found i can use src nat and dst nat just 2 entries and i got a public ip here is the example : /ip firewall nat add chain=dstnat dst-address=10.5.8.200 action=dst-nat \ to-addresses=192.168.0.109 /ip firewall nat add chain=srcnat src-address=192....

akram

u got me wrong guys , i just wanna use masqurade with same configuration , i just want to do masqurade to all workstation but for the my workstation got public ip ,is it possible to do it or cann't be?

akram

i have mikrotik with 5 public ips , i only use 1 for mikrotik and 4 free ips , i'd like to use 1 public ip for my workstation on the mikrotik i put 2 ethernet 1 for public 1 for private i use masqurade for interner for all workstations so i want my pc to take one of the public ips i don't know how t...

akram

yes i use masqurade

akram

i tired it but still the same

akram

ok i'll try it and post the result

akram

i tried it but still lowid

akram

where r u now salah , i mean what country?

akram

i have add the udp Line too

;;; Emule Akram UDP
chain=dstnat dst-address=84.36.214.134 protocol=udp dst-port=4721 action=dst-nat
to-addresses=172.16.1.202 to-ports=4721

same low id ??

i was working fine but now i dunno what happen

any help

akram

i have open emule port on my router but suddunly i found that i'm taking low ids ,i delete the NAT line and recreate but till the same low id i dunno what happen? this is the NAT Line for my ip ;;; Emule Akram TCP chain=dstnat dst-address=84.36.214.134 protocol=tcp dst-port=4711 action=dst-nat to-ad...

akram

i did that but i wanna see how to use the users in user manager in wireless to access internet on ether1?

akram

Can u tell me what did u do to solve your problem?

Search found 88 matches