MikroTik

bobertperry

Ugh, that's scary...

bobertperry

Upgrade did the trick. Thanks~

bobertperry

I'll try that but It will have to wait until early morning. I've routed the vlans/subnets though an intermediate router for now.

bobertperry

Winbox originally but it also doesn't show up in the command line.

[rob@Boman Router] /interface vlan> :put [ /interface vlan get [ /interface vlan f
ind where vlan-id=120 ]]
no such item

It also dosn't show up with just a /interface vlan print

bobertperry

Help! We had at least two vlans disappear last night! * Nothing out of the ordinary shows up in the log or history. * I can't add a new vlan interface with the same interface/vlan-id. I get the error message: "Couldn't add New Interface - already have such vlan (6)". * This happened once b...

bobertperry

We are in nearly the exact same situation as LigntnetBarry. Anyone know of any plans in the near future to increase this limit? See attached image, > 90% of 2GB of RAM used, 404K BGP prefixes. No iBGP prefixes (yet). No IPv6 BGP prefixes (yet). Looks like we'll have to buy Cisco, which is a shame si...

bobertperry

Firewall: more control and more options, takes more resources
Router: takes fewer resources, can only drop

Makes seance. I'll just keep what I have. Thank you.

bobertperry

What are the pros and cons of using the firewall vs routes to stop private IPs from being routed outside of your network? I'm currently using: /ip route add disabled=no distance=10 dst-address=10.0.0.0/8 type=unreachable add disabled=no distance=10 dst-address=172.16.0.0/12 type=unreachable add disa...

bobertperry

Hard to say without seeing your configuration but if I was you I would disable all firewall rules and try again to see if that is where your problem lies.

bobertperry

*) pcq - added burst settings, like in "/queue tree" and "/queue simple";

Very excited about this. Thank you.

bobertperry

Thanks, I set the local address in the profile and things work as expected.

bobertperry

/ppp profile set default change-tcp-mss=yes comment="" name=default only-one=default \ use-compression=default use-encryption=default use-vj-compression=default /interface pppoe-server server add authentication=pap,chap,mschap1,mschap2 default-profile=default disabled=\ no interface=ether1...

bobertperry

What attributes do I need to set in my Radius server to allow a client to connect? Sofar I have: Framed-Protocol == ppp Framed-IP-Address == 10.255.255.253 Framed-MTU == 1500 Service-Type == Framed-User Framed-IP-Netmask == 255.255.255.255 When I try to connect I get: "Could not determine remot...

bobertperry

Thanks.

I knew I could do this on the router's CPU as well but for some reason unknown to myself I want to do this on this switch chip. Though it looks like I will probably end up doing it this way or actually routing with the router.

Thanks for the pointers

Rob

bobertperry

I must be missing something. Just to test I want to add vlan tag 34 to anything coming in port 2 that is not tagged and and treat port1 like a trunk port. /interface ethernet set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\ "" disabled=no full-duplex=yes l2mtu...

bobertperry

Print displays an x next to there line of they are disabled. Have your code look for that. Or use export, not print.

bobertperry

Lol. Exactly.

bobertperry

NetFlow Analyzer worked great for our purposes when we had it set up for our cisco router. It needs a decently fast computer.

bobertperry

The tool we use is not free for most uses, but it is was for what we used it for (its only free for two streams). It is called NetFlow Analyzer. We just set it up and only for our outbound routes for the mikrotik today. A google search for "free netflow" returned this link, worth checking ...

bobertperry

I was going to say that I have seen this too and was curious.

bobertperry

I had two replys open and mixed the two... Sorry if I confused anyone.

bobertperry

Wont let me add php files. Here is the contents: <?php /* * RouterOS API * Based on the code of SpectatorCN at http://forum.mikrotik.com/viewtopic.php?f=9&t=32957 * Modified by Ali Damji * Free to modify, distribute, do whatever. * */ # Basic Functions function routeros_connect($host, $username,...

bobertperry

Never used dude but you can telnet into Mikrotiks. It's easy to make scripts that automatically telnet into whatever and do what you want. Attached is some code if you wanted to do this in php. Found it somewhere on this forum. Here is how to use it: <?php include "telnet.php"; $ips = arra...

bobertperry

The tool we use is not free for most uses, but it is was for what we used it for (its only free for two streams). It is called NetFlow Analyzer and I have not set it up for any of our Mikrotiks so not sure if it will even work. A google search for "free netflow" returned this link, worth c...

bobertperry

You could do this with just a Mikrotik, give each company there own interface on the router or set up a mangle rule then look at how much has been used on that interface every month. This counter is reset when the router reboots so I suggest buying a good UPS if you want to do it this way. I am posi...

bobertperry

My experience with the RB750 is that it maxes out at about 10MB/s. It is probably much more if you use the built in switch chip instead of having the CPU do the bridging. I don't see the need to buy a RB450 any more unless you want a serial port and metal case. The PC Wont have any problem but will ...

bobertperry

So. I have clients who want to play Modern Warfare 2. Apparently even if I have a one to one translation for the clients it still tries to use UPnP. My problem is that the dynamic rules UPnP creates have the wrong Dst. Address (our gateway's IP). I was able to fix this by changing the rule to masque...

bobertperry

Have a similar feature in RouterOS: "Cisco IOS NAT will translate the addresses that appear in DNS responses to name lookups (A queries) and inverse lookups (PTR queries). Therefore, if an outside host sends a name lookup to a DNS server on the inside, and that server responds with a local addr...

bobertperry

Did the swap about 1/2 an hour ago. Everything worked as expected except two things. One (not as important if I can get the second thing to work): "Cisco IOS NAT will translate the addresses that appear in DNS responses to name lookups (A queries) and inverse lookups (PTR queries). Therefore, i...

bobertperry

Oh ya, my bad. If you do it in one rule everything would be forwarded to port 80. My bad.

bobertperry

Okay. Thanks. So just to make sure the RB750G will do what I want, correct?

bobertperry

I wanted to set up a RB750 to just be a layer two switch. I want one trunking port and the other ports to tag vlan info onto any packets. First thing I did was try to mark packets coming in ether5 with vlan tag 43. /interface ethernet switch rule add ports=ether5 new-vlan-id=43 switch=switch1 When I...

bobertperry

Make sure you have port 20 and 21. Also no need for another rule, just separate each port with a comma.
ie:

/ip firewal nat chain=dstnat action=dst-nat to-addresses=192.168.100.55 to-ports=80 dst-address=80.xxx.xxx.218 dst-port=20,21,80 protocol=tcp

bobertperry

Perfect. Mikrotik OS is quickly becoming my favorite router.

bobertperry

I am new at this too and am probably wrong but it looks like you have things a little backwards and don't need some things. Things happen in order, this needs to go below the src-nat(which you dont need). /ip firewal nat chain=srcnat action=masquerade src-address=192.168.100.0/24 out-interface=Wan Y...

bobertperry

Is it possible to insert my messages into the log? I cant find anything like this in the documentation but maybe I am looking in the wrong spot.

bobertperry

ah, nice~
I wrote a small java program that printed the commands i needed to the console. Just copied and pasted that to a terminal window. I will read up on scripting though. Sounds very handy.

bobertperry

Worked like a charm. Your awesome fewi. Now to add about 500 overloaded ip addresses...

bobertperry

Not at work so I cant try this but I was thinking it probably has to do with arp. Do I need to enable proxy-arp on the outgoing interface?

bobertperry

add action=masquerade chain=srcnat comment="Test Nat" disabled=no \
    out-interface=ether1

Works, things work.

add action=src-nat chain=srcnat comment="Test Nat" disabled=no out-interface=\
    ether1 to-addresses=10.180.0.4-10.180.0.7

Things do not work.

What am I missing?

bobertperry

Thanks for the quick response. Re nat in interface: It cant be every interface but the address list idea would be perfect! I think I'll just need two addresses in my address list: 10.0.0.0/8 and 192.168.0.0/16.

Thanks again
Rob

bobertperry

Hello, I just want to make sure I am doing things correctly. We are going to be replacing our mostly maxed out Cisco 3825 router with a RB1000. I am porting our Cisco config to MikroTik and want to make sure I am doing it correctly. Please correct me if I am wrong. Here is a sample sub-interface on ...

bobertperry

Hello I am bridging two Ethernet interfaces which have a number of vlans running over them. I want to be able to set up a destination nat for addresses in an address-list. At first I did not know about the setting "use-ip-firewall-for-vlan" in /interface bridge settings so the only way I g...

bobertperry

Here i1s my plan. Let me know if...what i am missing. First set it up for transparent traffic shaping: / interface bridge add name="bridge1" / interface bridge port add interface=ether bridge=bridge1 add interface=ether3 bridge=bridge1 / interface bridge settings set use-ip-firewall=yes / ...

Search found 44 matches