MikroTik

CristianDeluxe

PHP API is available at Mikrotik WIKI: http://wiki.mikrotik.com/wiki/API_PHP_class Changelog: [Fix] Uninitialized variable error in function "read" The last edit by user "Eugenevdm" causes a syntax error (missing $ before variable name) Thanks also to Daniel Machado for report th...

CristianDeluxe

why '(protocol = udp && dst-port=53)'? :) maybe, '(dst-address-list = DNS && dst-port=53) || protocol=udp'? the main problem is that there's no syntax for logical expressions Because you cannot check the port if you don't know the protocol so i follow winbox "guidelines", ...

CristianDeluxe

Sorry for the delay it should be done this way - pseudo code: if (connection state == new && src-address-list=TEST){ mark connection with this mark - test, and pass through} if (connection state == new && dst-address-list=TEST){ mark connection with this mark - test, pass through} if...

CristianDeluxe

we are considering to allow to enter domain name instead of IP address. but the problem start when this IP is entered in somewhere like firewall where a lot of traffic and it has to be resolved over and over again. that goes for logging and firewall. So in these 2 and similar places, it most probab...

CristianDeluxe

Current situation: If i want to mangle all traffic from an address list (from "x" address list and to "x" address list) i need to make 2 mangle rules: /ip firewall mangle add action=mark-packet chain=postrouting disabled=no new-packet-mark=MYMARK passthrough=yes src-address-list=...

CristianDeluxe

I also suggest that when the Mikrotik team updates the dictionary again it would be nice if you can send the updated file to: dictionary@freeradius.org as specified here: http://freeradius.org/features/vendors.html So it will be included in repositories of linux distributions, making easier have an ...

CristianDeluxe

NP : ) i like to help

CristianDeluxe

Yep and also in Wireless encryption Original file: # MikroTik Values VALUE Wireless-Enc-Algo No-encryption 0 VALUE Wireless-Enc-Algo 40-bit-WEP 1 VALUE Wireless-Enc-Algo 104-bit-WEP 2 VALUE Wireless-Enc-Algo AES-CCM 3 VALUE Wireless-Enc-Algo TKIP 4 Modified for debian (note "Mikrotik-" bef...

CristianDeluxe

Hi, i'm using Freeradius in a Ubuntu Server, the default package for Freeradius have an old Mikrotik diccionary that don't have even (relatively old) wireless comments. They try to warn you that, if you modify the dictionary with the one offered by Mikrotik will not work. # Do NOT follow their instr...

CristianDeluxe

Really thanks it works : ) I have got a default pool with private addresses and I assign public pool addresses by static router's mac entries so this little change worked for me: /ip dhcp-server lease print count-only where active-address~"1.1.1." I can use this perfectly for get the value...

CristianDeluxe

Hi, I'm using a router OS as my main DHCP Server, i have various pools, some of them privates IP and others public IP ranges. I would like to set up some cacti graphs for know (and demonstrate to RIPE) the use of our public IP pools. I've tried in SNMP but i've not got the answer I expected. snmp.PN...

CristianDeluxe

Hello,

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer

I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly.

CristianDeluxe

Thanks janisk, I've sent the email requesting the wiki user : )

Rivera your method looks really smart, I'm implementing my script with netwatch and it works better than scheduler, really thanks

i will post your method in the wiki as soon as I have access to it

CristianDeluxe

Hi i would like to add an update of this script: http://wiki.mikrotik.com/wiki/Hurricane_Electric_IPv6_Tunnel_-_IPv4_Endpoint_updater I made some changes based on original author script: * Check if WAN interface IP and "6to4 Tunnel" Local Address are the same, if they are equal script don'...

CristianDeluxe

Really thanks jandafields!! now all websites are working correctly. I owe you a beer : )

CristianDeluxe

No, iphone settings are: "Use HTTP Proxy=NO"

Webproxy on RB433 disabled.

CristianDeluxe

Email also works.

Ah, my RouterOS version is 5.8 and iPhone version 4.3.2

CristianDeluxe

Sorry i manually deleted from .rsc file some pools that i was using before, here the new "cleaned" config: /ip pool add name=home ranges=192.168.2.100-192.168.2.150 /ip dhcp-server add add-arp=yes address-pool=home address-pool6=test always-broadcast=yes \ authoritative=yes disabled=no int...

CristianDeluxe

Hi, thanks for your reply. I've tested it, before do the "PPPoE passthrough" i've my Mikrotik configured with a bridge between wlan1 and ether1 and my ISP router did the nat, with same config (WPA Security, DHCP Server, DNS, etc...) iphone works correctly but if i do NAT in Mikrotik it doe...

CristianDeluxe

Hi, as always sorry for my bad English. I've been using Mikrotik at my work some years and it's amazing! Now finally I've my own RB433 at home (for play better : D ). I've a DSL connection and my ISP router is a Zyxel P660HW. I've configured my router WAN in "bridge mode" and "PPPoE p...

CristianDeluxe

I've updated from 5.0 to 5.1 this morning and now i have cpu 100% all time with low traffic, same config and clients working with 5.0 with CPU at 1-10%, i'am alone with this issue?

CristianDeluxe

Same problem here, from 4.16 to 5.0 with a RB433AH all wireless settings (also WDS, virtual interfaces) are lost.

I made a backup before upgrade and i can recover all settings pasting it again in the console.

CristianDeluxe

Thanks again! i was asking in my last post the command for check if the mangle rule is enabled or not, here is the command thats now works for me: /ip firewall mangle get value-name=disabled [/ip firewall mangle find comment="filteronoff"]; And after check if the rule is enabled or not wit...

CristianDeluxe

Before enable or disable my (accept all) rule i first check if mangle rule is enabled. If mangle rule is disabled i make another checks and if the traffic in a interface is high i disable this rule and the router start to mark and filter packet. So i make this check first with: :local savelog true; ...

CristianDeluxe

i tried this: Mangle rule: add action=accept chain=prerouting comment=filteronoff disabled=yes Test Script: :local TestVar [/ip firewall mangle find comment="filteronoff" disabled]; :if ($TestVar = true ) do={ :log warning "true"; } else={ :log warning "false"; } And al...

CristianDeluxe

Thanks!, ill try to do it this way

CristianDeluxe

More info, if i put in my script:

"/ip firewall mangle enable numbers=0;"

Occurs an error in the log that says:

"ppp -> script error: no such item (4)"

CristianDeluxe

Hi, i have a script that enable or disable the packet mangle filtering if traffic is low. One of my scripts enable a mangle rule that accepts all packets, if i use "/ip firewall mangle enable numbers=1;" in console, it works correctly but if i use this same command in a script, it enable t...

CristianDeluxe

I have not had time to test it, but I think it may be the solution.

As soon as I try, I will comment here the results

Thanks

CristianDeluxe

I use two different VLANs for public area and local area.

You mean to queues on the same switch?

My switch is a cisco catalyst and not have those features, but thanks for your help!

CristianDeluxe

Hi, I have a RouterOS level 6 I'm using to prioritize traffic on a cable network. Until now I only had to prioritize one traffic flow to a single ISP (100Mbps connection). Now we have upgraded our network with a RB433H and we have a fiber connection to another ISP for WiFi connections (50Mbps connec...

CristianDeluxe

Ok i found the answer:

:local chkenabled

:set chkenabled [/ ip firewall mangle get number=1 disabled]
if($chkenabled) do={
# Rule is disabled
} else={
# Rule is enabled
}

CristianDeluxe

Hi, how can i check if a mangle rule is enabled or disabled using scripting?

CristianDeluxe

I also could insert the proxy between my switch and the ros, and could limit the bandwidth used by the proxy. Is that correct?

CristianDeluxe

if I set it up as you tell me I could not prioritize traffic from the proxy, or control the download speed, no?

CristianDeluxe

Hello, I have my RouterOS (version 4.5) configured in bridge mode, with traffic prioritization (mangle rules, queues) But now I'd like to insert a transparent squid proxy to cache the client traffic. This image explains how I configured my network proxy.PNG I already have a server running squid in t...

CristianDeluxe

Tech support guys told me:

"[...]
Cause of the crash is frequent interface status changes. This bug is fixed in v4.6, wait for next RouterOS release.
[...]"

I'm waiting impatiently for this update, but it's good to know they have controlled this bug.

CristianDeluxe

ok, I got it, I will send to technical support.

Thanks for the help

CristianDeluxe

I can not create the supout.rif file, the router can not export the (ip route) settings correctly and stays "frozen".

CristianDeluxe

Hi, sorry for my bad English. I have 2 licenses Microtik (Level 6) installed on 2 pcs, and on both machines the same thing happens. Ips routes stop working and the router loses connectivity over IP, I can only access using the MAC. I have recorded a screencast that you may see exactly what is happen...

CristianDeluxe

I tried to make a graph of my router with another utility (rrdtool) without using cacti and the result is the same, when resetting the statistics, these traffic peaks appears, even occurs in ethernet and bridge interfaces. ejemplo_problemas_snmp.PNG Is there any solution available? (apart from not t...

CristianDeluxe

Any idea how to implement this? a link, or whatever please!

CristianDeluxe

Hello and sorry for my bad English I have a 100MB ATM circuit and I need to limit 30Mb, 30Mb and 25M per subnet, but is more complicated, I need all the traffic to be marked through the mangle rules and make a priority (QOS) for each subnet in the tree queue For example: Subnet 1) Ips: 1.2.0.0/28 Pa...

CristianDeluxe

Did you test your ATM speed ? if your are sure its 28Mbits Dedicated try to add a new queue type let say bfifo and set the bfifo-limit=9999999999. I noticed you have high P2P traffic is it normal to you to have p2P taraffic 4-5 mbit avg ? I make a queue type with bfifo-limit=9999999999 and assign i...

CristianDeluxe

Hi, sorry for my bad English. I've got a Router OS v3.30 (level 6) working with a 28Mb ATM, i'm using ROS as a traffic shaper, I've setup all my mangle rules and every connection and packets is marked very well, but i have problems prioritizing this traffic. After read lot of documentation and posts...

CristianDeluxe

I'm using this template: http://forums.cacti.net/viewtopic.php?t ... sc&start=0

and a plugin "Aggregate" for draw all queues graphs together

CristianDeluxe

Hi, sorry for my bad English I'm currently graphing my queues data with cacti, and all works OK like you can see in this screenshot: queues.PNG But... when i reset all the queue counters in my winbox, graphs shows me more than 300 Mb of traffic!! (I have 2 Ethernet 10/100Mb PCI cards, so its suppose...

CristianDeluxe

Thanks for alternatives!!

CristianDeluxe

Any response?

CristianDeluxe

Hi, i use Winbox and " IP->Firewall->Connections " tool it's very useful for me. At the bottom of this window I can see: " 2057 items out of 15000 | Max Entries: 524288 " How can i see the others connections? or show only marked connections that i want? (ie: all p2p connections) ...

CristianDeluxe

6. Auto-size all columns within each window I agree with this point. Others things that i like to see in winbox: 1) Ask for confirm the action when you press (accidentally) remove buttons :roll: 2) Ability to categorize mangle rules, lists works very well when you have fews rules but when rules sta...

CristianDeluxe

When i set this rule to my Router: /ip firewall nat add action=redirect chain=dstnat dst-port=53 protocol=tcp to-ports=53 DNS cache are filled with DNS entries but in PC's i can't resolve DNS so i can't open any website. I try other rule from http://wiki.mikrotik.com/wiki/NetworkPro_on_firewalling :...

CristianDeluxe

-
Please erase this post

Search found 53 matches