MikroTik

techguy79

Thanks you for responding, I ended up modifying my javascript function on the login page to convert any text in input box to lower case rather than upper case as it had previously been setup.

techguy79

OK I figured it out... This works but is there anyway to convert the 3 character representation of the month to uppercase as I use a javascript function on our portal page that converts the password field to uppercase to avoid case sensitive issues ? :local date [/system clock get date]; :local day ...

techguy79

I know this has to be easy to do compared to some of the other hotspot pw change scripts I've seen out there. We have a new company we are taking over support on(hotel). They insist we follow the same hotspot password change context they currently have in place. The current system in place is going ...

techguy79

I'm hoping this will help others with this problem. Today I had my laptop internet go out while connected to our office Mikrotik (RB450G running ROS5.25)via winbox it closed my connection to the mikrotik obviously. I ended up unplugging then replugging my laptops network cable and my internet came b...

techguy79

Ah yes,
Skot you nailed it on my other 3 deployed Mikrotiks the constant portion of the hotspot password was only the first four characters.
In this new hotel mikrotik the constant is 5 , thanks so much for the help.

techguy79

The below script I have deployed and working at 3 hotels all running ros v 4 software. I just have to set the initial password to the value that corresponds to the current week # out of 52 weeks in the year. I have the scheduler set to run this every 7 days essentially changing my hotspot password e...

techguy79

I'm having the same password problem.
Only in my case the new password I set had no special characters....
its a RB450 g just threw 5.13 on there it previously had 5.12.
I'm currently locked out of the mikrotik and tried resetting via the pinhole button on the rb, to no avail.
Please help.

techguy79

I've looked this over many times, it doesn't really explain why traffic seen over individual interfaces isn't seen over the bridge interface they're a part of. The diagram is great for needing to know where to mark and apply actions to traffic, but doesn't explain where in the flow the traffic seen ...

techguy79

We run MRTG to graph bandwidth everywhere we have a Mikrotik. I noticed today we have a location with 5 interfaces. Eth 1 and 2 are in a bridge1 Eth 3 and 4 are in a bridge2 When I initially set up MRTG to graph this location I added to our main MRTG config file only the 2 bridge interfaces. The cre...

techguy79

a Network diagram might help us understand topology. I know from my experience you need to have a route on your office (onsite where you are) forcing traffic to go over the vpn tunnel. we usually use static routes to accomplish this. post export of your ppp secrets for your remote mikrotik. usually ...

techguy79

I may have identified part of the problem.. The way it was configured dhcp had its own ip pool as should be. when i set up the address pool on Hotspot > Servers i set the ip pool to be the separate subnet allocated as hotspot pool which is the way I believe it should be. If you then go under Hotspot...

techguy79

I have a Mikrotik rb 450g I'm configuring with a hotspot given the strict implication that users should be able to get out to the internet without the ability to have to modify their network settings on their laptops. Sounds like what Mikrotik hotspot is supposed to be able to do. The problem I'm ha...

techguy79

Nevermind I figured it out below is the modified script with the email function which sends an email. :local currentPassword [/ip hotspot user get [/ip hotspot user find name="user1"] password]; :local number [:tonum [:pick $currentPassword 4 6]]; :local newPassword ($number + 1); :if ($ne...

techguy79

An addendum to this. How could i write a script that will email the new weekly password to our support email address so we can provide it to the customer. I'm sure it'd be a separate script scheduled to run maybe 10 minutes after the pwchange script runs. I also believe the beginning of the script w...

techguy79

This was all configured by our former net admin, I'm not sure as to why he did it this way, maybe only way he could figure out. I personally don't understand how we could run the ibgp and ebgp on same instance given it appears you can only have one remote id, but again I can be completely wrong here...

techguy79

South Network Edge Router Jorie BGP instances 0 ;;; EBGP name="default" as=33317 router-id=xxx.xxx.xxx.58 redistribute-connected=yes redistribute-static=yes redistribute-rip=no redistribute-ospf=no redistribute-other-bgp=no out-filter="" client-to-client-reflection=yes ignore-as-...

techguy79

Below is configs for both edge routers North Network Edge Router North BGP instances 0 ;;; IBGP name="default" as=33317 router-id=172.16.16.3 redistribute-connected=yes redistribute-static=yes redistribute-rip=no redistribute-ospf=no redistribute-other-bgp=yes out-filter="" clie...

techguy79

I have setup a bgp monitoring tool which sends me alerts by email. I constantly receive alerts which I cant make any sense of. The BGP we have in place was configured by our former net admin. We have a /20 allotted to us by Arin however we have opted to use 8 /24's at each of our edge routers(2 edge...

techguy79

Thanks so much Fewi, you are brilliant and most helpful. I know between the different versions of router os there have been changes to scripting syntax, hence why I ask about version. We have a lot of routers deployed running ros 2.9 which im concerned this may not work on, these routers are only up...

techguy79

is that really all to the script or do i need to create these lines for each week?
I'm alittle unclear about this line
:if ($newPassword < 10) do={
:set newPassword ("0" . $newPassword);
and what it does.
Also is this script specific to and version ros version or greater?

techguy79

Well It'll be CASS then a number referencing what week it is in the year for example in the first week of January it'd be CASS1 1 indicates week 1 of 52 in a year , second week in January would be CASS2 etc.only the number portion of the password would change to reference what week out of 52 weeks i...

techguy79

I've been asked to come up with a method to change hotspot passwords on a weekly basis. I've been using a script which does this on a monthly basis. My concern here is that mikrotik's system clock doesn't seem to keep track of weeks, so how would I then use that as a variable in my script? Has anyon...

techguy79

I tried clearing my connections ask you said, the only way i could get the laptop going back out the proper interface was by disabling connection tracking, which kicked me out then i had to unplug the 2 wan cables to be able to winbox back in and reenable connection tracking.... this lead to my lapt...

techguy79

firstly I'd love to see a writeup and your scripts ok my next question to you kind sir, is lets say with this same setup would there be any way to say send outgoing port 25 traffic out the backup wan interface all the time and then during failover scenario where if the backup wan link drops out this...

techguy79

Ok I apologize I didn't mean to be dismissive I was just hoping I wouldnt have to clear out connection -tracking after each failover. I haven't yet tried this I setting up my laptop and be try it shortly If this does indeed solve the problem have you found any kind of workaround for this situation o...

techguy79

the router itself goes back to using the primary wan route i've confirmed this running trace route from mikrotik winbox. my laptop which is plugged into the lan interface is what isn't switching back to using the primary wan connection route. what your saying would make sense if the router itself di...

techguy79

I configured pcc from manual on wiki site. Aside from having to upgrade packages to 3.30 to open up this functionality everything is fairly straightforward. Now with finished configuration when I unplug the secondary wan cable i see in the routes table everything failover flawlessly when i run my tr...

techguy79

thanks as usual you guys have been a great help.

techguy79

...
Ok for some reason i was thinking it was 3.2.2 Thanks hopefully this router will be upgradeable to 3.22

techguy79

I appreciate your response but the router in question is running ros 3.7 so this version is after v3.22...
I'm not sure why the feature wouldn't be in v3.7.

techguy79

I'm following the pcc manual guide. Ive added my addresses, 2 input rules and 2 output rules to mangle, When I get to the 2 prerouting rules where you enter in the per-connection-classifier parameter I can't find this field in mangle under any of the tabs, I also tried to type out the command in ter...

techguy79

sorry its been awhile since ive been back here to check this thread but i would like to thank you both for being helpful. at this point in time owner is neglecting wisp side of business now, I am putting myslef back on the job market and trying to find employment where network layout is done the rig...

techguy79

Since atm really all we can do at our edge would be to qos download traffic destined for our customers i tried just setting a max limit on the parent queue of 20 meg figuring this is the size of our smallest pipe internally i figured this is a good number since anything over the size of the smallest...

techguy79

bump ... anyone? I can understand no response if I'm constantly asking for help everyday but come on I ask for help maybe once every six months.

techguy79

I have found the following link http://www.mikrotiktech.com/node/13 I pretty much copied this configuration and used it on our edge router. We've had alot of complaints about voip service so I'm trying to resolve this by implementing some form of qos. i used this on our edge because other then a few...

techguy79

Just an update I figured out the problem, When I was creating the address list rules I created a blacklist called bruteforce_blacklist and another blacklist called brute_force_blacklist. The firewall rule that checks to see if your on bruteforce_stage2 and adds ip to bruteforce_blacklist had the act...

techguy79

anyone ideas? I'd of thought this particular set of rules would have been widely deployed by the community, I've searched and it seems no one else has had this issue. I don't understand how the brute force attemptees aren't being added to brute force_blacklist and being dropped I can see them in the...

techguy79

Ok took me abit to change our addresses I assure you the brute force attempts are not coming from any of the addresses that are x.x.x.x I know probablyy more info here then needed but rather disclose full picture. I can see ip addresses being added to the stage 3 list but none of them ever make it o...

techguy79

bump anyone?

techguy79

I've implemented the tiered address list firewall rules to try to drop brute force intrusion attempts to our email server. I've followed the rules seen on this page. http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention_%28FTP Only adjustment I've made was changed the ports from just port 21 to ...

techguy79

good luck my friend

techguy79

I havent checked this post in a while as I had reposted my situation on broadband reports. I just got myself mikrotik certified last week! Anyhow I do have a never die attitude I refuse to let this place be the end of me so to speak. I've implemented a ton of firewall rules on our bridged mikrotiks ...

techguy79

thank you for the info, Time for me to dissect the code you provided to try to understand the inner workings.
I'm driven to learn mikrotik api/scripting.

techguy79

that works too bad no way to consolidate but if it works sweet.
thanks surfer tim i guess i really should try to Keep It Simple Stupid

techguy79

Hello I'm trying to alter our existing netwatch on down event script to simply send an email to 5 recipients. I've tried using a comma and or semi colon to separate each recipient. Im using ROS v 3.30 Here's my existing script code copied from netwatch down event window in winbox. /tool e-mail send ...

techguy79

ok ill copy my original post to that forum.

techguy79

we're not using pppoe our edge routers route traffic for 7 /24's apiece public ip's in each set of 7 /24's we allocate a /24 for management devices 3 /24's for dhcp pool and 1 /24 for static ip residential customers and 2 /24s we divide into smalls ip blocks for businesses. our moto canopy equipment...

techguy79

I've found these forums to be a great resource. With that said I have a few issues I work for a small WISP I've inherited the task of network administration. We have about 500-800 customers, We are a moto canopy shop we have about 40 AP's deployed in mainly clusters of 5-6. We are just outside chica...

techguy79

I just discovered this.. if i comment out the following line: <!----<input type="hidden" name="password" value="password" /> i can login to hotspot and it does appear to check user inputted password as i tried random passwords and received invalid user or password error...

techguy79

ok im copying my code below when i try testing the hotspot i am getting invalid username or password error. I can't log in i think it has to do with the value for password being set to password, i could set it to the current password for user1 but that would mean every month i'd have to hardcode the...

techguy79

fewi thanks again you've been most helpful. but I'm still left wondering where does the password go when they submit it? How does typing the monthly password in the box then submitting using the button actually interface with the mikrotik and check to see if the password is right? Is this the respon...

techguy79

fewi thanks alot this seems to work for me other then syntax i noticed theres a local declaration which i didn't have initially. My question to you is on the other deployed mikrotiks we are using the script the way it was and the script works w/o the :local line of script I'm wondering why it worked...

techguy79

we have a few mikrotiks deployed at hotels with hotspot setup on those units we have the following script. this is copied from a mikrotik where the script is in fact working. :set date [/system clock get date] :set month [:pick $date 0 3] :set day[:pick $date 4 6] :set year[:pick $date 7 11] :if ($m...

techguy79

ok sounds good one thing ima bit worried about is in the guide you linked to me earlier, I there are certain elements that we haven't employed nor do i think our mt has the capability / ip firewall mangle add chain=input in-interface=wlan1 action=mark-connection new-connection-mark=wlan1_conn add ch...

techguy79

i'd actually be willing to pay you the 20 bucks out of my own pocket if you would teach me how you fix it. teach me obi wan lol. let me know if you have some way to accept payment from me. I'm hungry and want to learn mikrotik that guide you linked to me looks like what my colleague used to base his...

techguy79

ok i read this article http://wiki.mikrotik.com/wiki/Load_Balancing_Persistent and i found this. "With all multi-gateway situations there is a usual problem to reach router from public network via one, other or both gateways. Explanations is very simple - Outgoing packets uses same routing deci...

techguy79

we have a mikrotik router deployed at a customers business which we implemented as a load balancing/ failover solution. they recently called us to add some dst nat rules to my dismay when i went to login to the wan ip i cant get in at all. i tried logging into the 2nd wan ip and same result. we cant...

techguy79

i figured it out. one router had a bridge filter rule dropping all traffic so i made rules allowing from test cllient ip and put the rule above the drop rule. that got one side working. then i setup secondary ip within same subnet as the primary bandwidth test server. this was on the router not ment...

techguy79

i can ping from one router to the other no problem. both routers are using public static ips. i tried setting up both routers as a bandwidth server. then tried to test from each client to each server. i added a firewall rule which allows udp traffic from their respective bandwidth test client.(mikro...

techguy79

My company recently acquired some dragon wave licensed backhauls. These devices have no way to test throughput. We deployed a mikrotik on each side of each backhaul. We followed instructions from here http://www.mikrotik.com/testdocs/ros/2.9/tools/btest.php and we keep receiving message can't connec...

techguy79

bump bump
looking through some settings on an already setup pptp server do you just choose local address and remote address randomly?
also local address should be same for all the users in secret?

techguy79

ok i tried that I can now communicate with the router from wlan or ether1 i had to turn on wlan interface for one then adding the ip address to the bridge instead of eth2 worked. sadly i cant really test the wan stuff as the static ip address is on my company arin chunk and wouldn't be routed by my ...

techguy79

i will try that

techguy79

I have a customer that needs a mikrotik to be configured like a linksys soho but also function as pptp server. ROS 3.23 the customer has a static public ip which i setup on eth1. eth 2 is setup as 192.168.1.1 (lan gateway) this mikrotik has built in wireless interface which i need to configure to wo...

techguy79

bump bump

techguy79

I work for an wisp we have 2 nocs where our bandwidth comes in at each noc we have a mt setup as edge router. We don't have routers setup at each tower/cluster only the 2 nocs and our office. We've had several complaints that traffic appears to be trying to go through some of our business customers ...

Search found 66 matches