MikroTik

northman

Or put the 3.13 NPK in the /files and go to system package downgrade.

thank you.
It helped.

Now there is the question to see if Torch of v 3.13 is the same like it was in 3.10 ...
I can not understand why it's behaviour was changed? Or it's a bug?

northman

guys, since i tried v 3.20 and later till 3.25 for RB450 it looks like Torch in those versions is absolutely crazy. Looks like it put interface in promiscuous mode so it's listening all the shit from network. My boss liked to use this tool since we started to use MT with ROS v 3.10 . How can I downg...

northman

northman

hello. I was trying to simulate link failures two ways: 1) by disconnecting cable directly from MT's eth port and watching routing table in parallel. Of course this way it reacts fast and switches to backup route. But ping and ssh tests stops and freezes forever anyway. 2) by braking link before ADS...

northman

thank you, guys! It works, :) BUT it is not 100% fallover. :? Let me tell you about some results of my tests. For example: when I test it from LAN side by pinging some remote I-net address or doing ssh-session, and then I break one of two ISP connections then I have the results as follows: if the se...

northman

currently it's ROS 3.23,
but it is not a problem to upgrade to 3.24

northman

Hello. It's happened we signed contract with one more new ISP. They give us one public IP and their GW. Let it be 210.22.33.3, GW: 210.22.33.1 We have: - RB450 connected to LAN 192.168.5.0/24 (eth2 IP:192.168.5.3), to I-net (eth1 IP: 209.11.22.3), GW is 209.11.22.1 - default GW for this router -- th...

northman

I didn't know about such a tool. Will try near days, thanks.

try running fiddler from MS to see if you can tell what the browser is requesting, maybe its an alternate port you can't see because its an inline control or something.

northman

thanks for reply. I'm afraid I can't change something like site code, etc, because it is Ubuquity Power Station's firmware, who serves that web-interface to setup and control the unit. In the last version of firmware upgrade they coded that damned redirection. :-( The usual problem in this applicati...

northman

is it trying to redirect you to a hostname (instead of ip) or something similiar? Or possibly redirecting you to another port. I believe it's redirecting to another port. But anyway, I think the problem is not 80 -> 443 redirection itself. Inside the local network it is possible to go directly to 4...

northman

hello! We have RB450 which is sitting between I-net and local network and doing traffic shaping, firewalling, port forwarding and some more functions. We have many units inside our network who has http-access to give the possibility of control. To give the http-access to these units from outside (I-...

northman

thank you, normis the last one question: how RB411 would work together with NanoStation2 on the other side for the same installation? I suspect that there is still small possibility of unstability problem with just USB wi-fi stick on the other side (5th floor window), so I consider to solve it by us...

northman

We have: - two balconies on the same side of beton building. One on 1st floor and another on 5-th floor, horizontal distance is about 80m. - an unexpensive Wi-Fi USB stick external adaptor. To catch the signal more effectively, I connected it to PC with ~1.5m length USB cable and put this stick on ...

northman

The first rule is incorrect. It needs to be the ip of the interface on "Mom" /ip route print EDIT: I am tired also. Been a long day. Here is the correct entry. set 0 gateway=192.168.54.3 The second rule looks good now. oh, I really need to have a break of it. :) In "reality" it'...

northman

The interface "bridge1" is just etherX renamed? If it is, the interface may need to be bridge1 on that second route. . . . ADD: Since this is a "new" box, would you please show me "/ip address" on this child box? oh, sorry.. It's my fault. :( That one was just changed ...

northman

That is what I thought. If we would have continued that last dance, this would probably be solved now. This is what you need: /ip route set 1 distance=0 interface=ether2 If ether2 is not correct, change it to the interface assigned the ip/netmask. Without that, it does not know what interface to us...

northman

deleted

northman

If you are certain of the cable placement, then the "non-localnet" port must be on the other end. Can you please show me your "/ip route print" from one of the child boxes? Pick one of them, so we can get the bugs out of it. [admin@RouterXXX] > ip route pri Flags: X - disabled, ...

northman

OK, one more dance, just for old time's sake. :D oh, yes :) I would find that more than annoying. It is malfunctioning. I agree. I don't know if MT ROS developers consider it as a bug... The srcnat rules are still being applied? (implies non-localnet port) yes. Unable to ping except by mac? (implie...

northman

p.s. MT people anwer on support@mikrotik.com ;) yes. Well, it's solved now by upgrading to ROS 3.20 and adding the IP of eth2 of "Mom" as a default gw to others (child routers). At least TCP bandwidth test is working well now, but the UDP bandtest works only half-way... And, for example, ...

northman

Stop all the dancing, my friend. :) I've found THE BUG! I have two spare routers at my office, so I configured similar environment and was testing, playing, etc... Now here is the evil : /ip firewall nat add action=src-nat chain=srcnat comment="" disabled=no src-address=192.168.54.0/24 \ t...

northman

So if you tell "Mom" which interface to use, the ping is successful, but if not, it fails? As you see... I think, by adding "interface" parameter to ping command it involves MAC ping instead of TCP (... What MT people can tell about this? ). Anyways, normal ping doesn't works, a...

northman

I don't know what you mean by neighbor. that implies peer. If they are on a private net, they are more like "children". So "Mom" has ether1 on the internet, and ether2 is the 192.168.54.3/24 local net. That is where the "children" servers and routers, including the unp...

northman

Is there anything in /ip firerwall filter in the MT boxes that would stop a ping? It's in main router (192.168.54.3) (just to prevent ssh and ftp brute force attacks, as in wiki..): [admin@RouterZZZ] > ip firewall filter pri Flags: X - disabled, I - invalid, D - dynamic 0 ;;; drop ftp brute forcers...

northman

SurferTim, ether1 -- connected to Internet, ether2 -- to our network. Here are router's settings ( IPs are changed for security reasons ;) ): > ip addr pri Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 222.11.123.3/24 222.11.123.0 222.11.123.255 ether1 1 192....

northman

Hello! We have several RB450 (OS v. 3.10) connected to the same network 192.168.1.0/24. One of routers serving as main router between our network and Internet, doing NAT, band shaping, ... Before this we did /system reset-configuration for this router, then configured it from scratch. Now the router...

northman

Hi. We have MT RB450 router: - eth1 connected to I-net and it has NAT on it and public IP say 22.33.44.1 - eth2 connected to LAN, say 192.168.2.0/24 Inside the LAN there are several boxes with web-enabled control interfaces (via http, port 80) We need to have access to these boxes from outside and I...

northman

you can also configure NAT on your Public interface (connected to Internet), it will cut 99% of P2Ps

northman

But there are people that dont use wine, Is hard to make it for linux? yes it is very hard to make it for linux. there are people who don't use your favourite flavor of linux. It's not necessary to have it for each flavor of Linux. It's possible to have one binary for all Linux. ..But, as soon as i...

northman

(added 6 hrs later) ( .....deleted, and added 6 hrs later) ...Well, EoIP, and the whole your idea works for me!! :D Thank you again, thadem . 2All : New question: it's appeared that my boss wants some nodes, for exapmle Node2 or/and Node4 (pls see the plan) could benefit the bandwith from both conne...

northman

Thank you, thadem . Good idea. If I understood correctly, I need to configure EoIP tunnels between all the routers, so it will give me an extra address space (let's say for exapmle 192.168.1.0/24 ) where all the routers will be in the same subnetwork, so the public IPs of the end points will be tran...

northman

Guys, I can't believe that nobody has no such or similar experience. Pls, give a clue, I don't need too much explanations. There are two major questions for me: 1. How to make these End Points with public IPs accessible from I-net through the private address space? - The first simple idea is to mant...

northman

Hi!

Yesterday we received from Xagil Communications 10 more MTs RB450. Would it make sense to do the same test for one of them? I guess it's made of the same quality components...

northman

Hello to everybody! I have some good news. We are small Canadian company making access control electronic systems for army, government and for civil organisations as well. As we have some special equipment to test our hardware to ensure its quality and reliability, our boss decided to test one of MT...

northman

Hello! We have WAN consisting of several small nodes linked together with long distance radiolinks (...it's not wi-fi). We bought several MTs RB450 and now we want to restructure our netwrok. Due to nature of radio, area topography and weather condition our network have some kind of instability: som...

Search found 35 matches

Re: HOW to downgrade to 3.13?

Re: HOW to downgrade to 3.13?

strange behavior of torch

Re: 2 different ISPs, 2xGW, srcnat. Howto load balance/failower?

Re: 2 different ISPs, 2xGW, srcnat. Howto load balance/failower?

Re: 2 different ISPs, 2xGW, srcnat. Howto load balance/failower?

2 different ISPs, 2xGW, srcnat. Howto load balance/failower?

Re: dst-nat/dst-port and HTTPS redirection problem

Re: dst-nat/dst-port and HTTPS redirection problem

Re: dst-nat/dst-port and HTTPS redirection problem

dst-nat/dst-port and HTTPS redirection problem

Re: Choosing right RB for domestic wireless net.

Choosing right RB for domestic wireless net.

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Re: Weird bug in RB450

Weird bug in RB450

nice port forwarding idea. ..Is it possible? how to?

Re: how to stop any p2p

Re: Winbox on Linux?

Re: many RB450, mesh and two addr spaces. ...Need an idea PLS.

Re: many RB450, mesh and two addr spaces. ...Need an idea PLS.

many RB450, mesh and two addr spaces. ...Need an idea PLS.

RB433 extremal temperature test 8)

RB433 extremal temperature test 8)

many RB450, mesh and two addr spaces. ...Need an idea PLS.