I've done some more testing with this and the issue seems to be isolated to OS X and ROS code newer than 6.10 There's been an issue with OS X since 2011 that Apple has not addressed. https://discussions.apple.com/thread/3275811?start=0&tstart=0 http://simon.heimlicher.com/articles/2011/03/17/cis...

I turned up logging and was able to capture this when my session abruptly ended after 48+/- minutes: 08:36:09 ipsec IPsec-SA expired: ESP/Transport 1.1.1.1[0]->2.2.2.2[0] spi=15416181(0xeb3b75) 08:36:09 ipsec IPsec-SA expired: ESP/Transport 2.2.2.2[0]->1.1.1.1[0] spi=95088246(0x5aaee76) 08:36:14 ips...

I've got a RB2011UiAS running 6.19 code with L2TP/IPsec VPN access. Clients(OS X) can connect fine, but active VPN sessions disconnect after 45-60 minutes. The only error I'm seeing before the connections die is. "ipsec,error failed to begin ipsec sa negotiation" /ip ipsec policy print Fla...

Anyone?

I've got a RB2011 configured with ether1-WAN interface with 3 public IPs(ex: 1.1.1.1, 1.1.1.2, 1.1.1.3) I'd like to use the 1.1.1.1 as a management IP and have www-ssl(tcp/443) and ssh(tcp22) access. 1.1.1.2/.3 will be NAT'd to ether2-LAN and have web servers(tcp/443) running behind them. When I ena...

There have been other threads on this, but just uncase this one turns out differently

+1 for vmnext3 support.
and vmtools support as well

I have paid for all of my vm's

+1 for full support for VMware virtrualization

I started experimenting with metarouter on a RB450G running ROS 6.2, very cool stuff. If I build a MR running ROS or even openwrt how would I move it to another host or even backup the metarouter? I don't see anything under the Files menu and don't see an option to backup/export the metarouter VM.

Turns out the RSA RADIUS server we're using only supports PAP, EAP-PEAP-GTC, EAP-TTLS-PAP, and EAP-TTLS-GTC protocols for authentication. I'm guessing when I telnet in it uses PAP? If it set both the PPTP server and client to use PAP, it works! BUT VERY INSECURE! Looks like the Mikrotik VPN servers ...

I'm trying to setup a RB450G(ros 5.24) with PPTP VPN/RSA SecurID token authentication. PPTP connectivity works with local user authentication, but errors out with RADIUS. I've enabled AAA authentication for router admin login and I can telnet into the RB450G fine: 16:18:44 radius,debug new request 0...

Update: I can also reproduce the "ether1-WAN link down" behavior by running a bandwidth test to another MT router(RB450G running v5.4). The test indicates I'm getting the full 5MB/s from the ISP, but the link will go down after 3-5 minutes of running the BT.

I've got a RB493G running v5.18 that configured with ether1 as the WAN port and ether9 as the LAN port. Basic firewall rules and NAT with a FTP server on the LAN. If I start a FTP transfer, it will begin then anywhere from 3 to 5 minutes later fail. Logs on the router indicate that "ether1-WAN ...

I ran your script and it gave me an incorrect result for today. It's Thursday February 9, 2012 and your function says it's Friday???

I'm stupid!

Changed to SSTP listening port in mikrotik to 4430 then in the VPN setup on Windows 7 you can specify a port number in the server address ex: vpnserver.domain.com:4430

Works fine now. Thanks for all the responses and making me think!

Getting another IP from my ISP isn't really an option. Guess I'm just stuck...

Have you read about it in the wiki?
http://wiki.mikrotik.com/wiki/Manual:Sc ... repository

Please take a look at this post http://forum.mikrotik.com/viewtopic.php?f=2&t=59029 and help me test the code. I get bad results with the script from the wiki as well.

I've tried the script here http://wiki.mikrotik.com/wiki/Script_to_find_the_day_of_the_week for calculating the day of the week from a given date and it doesn't seem to give me the correct answer. Is it broken, am I doing something wrong? So in an effort to improve my scripting skills and using that...

Can't do that the SSTP client software is "hard-coded" to run through port 443.

Two things that I've done in my config seemed to have helped a lot with this issue.

1. Disable DPD on the Mikrotik
2. Make sure the Lifetime in IPsec Peer and IPsec Proposal match what's configured on the Cisco, in my case it's 08:00:00

I've got SSTP VPN server running on ros5.11, been working fine for months now. Question is can I run a webserver behind the router which also uses TCP port 443? They want to fight each other. Here are my firewall/NAT rules: 20 ;;; Allow SSL to webserver chain=forward action=accept protocol=tcp in-in...

If you're new to AT&T U-Verse service, you will learn to hate their modem/router. If you're not new, you probably already do! It doesn't do bridge mode and you must use it as the gateway router to access their network. And forget about setting anything up with public static IPs as it never works...

You could try a "system reset-configuration" (caution will wipe the settings), then try to connect with the MAC address.

Anyone have a U.S. vendor for 5V power supplies that fit the Mikrotik 5VUSB?


5V power injector for USB (RB/411UAHR and RB/493G). IMPORTANT! 5VUSB is just injector cable, 5V power supplies must be sourced locally- we don\'t sell those.
Accepts DC Plug, 1.1MM x 3.5MM.

You're on the right track! First you need to disable DHCP and set the DSL modem to bridge mode, this will allow the Mikrotik to handle the PPPoE connection and routing on the LAN side(firewall, DHCP, DNS, etc.). You should be able to search the Internet on exact steps to take to get your specific DS...

I made a trip to my local electronics store and got 2 more cards to "try". This $12.99(USD) 2GB PNY card delivered inconsistent results, sometimes the board would see it sometimes not. Part # on package is P-SDU2GB-EF/BG Printed on chip is SD-C02G http://i480.photobucket.com/albums/rr165/s...

I've tried 3 different SanDisk 8GB microSDHC (part #: SDSDQ-8192) in 2 different RB450G(v4.5) routers with poor results. Half the time they don't show up on boot. I've tried reseating, reformatting, and even the boot delay setting mentioned earlier in this thread. Anyone have a specific Brand/Part #...

Thats ok. I added an additional method to contact me. You may go to my website http://www.murderdev.com and contact me that way. I would give out my email but I really don't need anymore spam. That contact page goes directly to my mail box.

Thanks for adding that!

Email sent...

"You are not authorised to send private messages."

Once again, stuck on the outside looking in...

I was just think this morning how useful an app would be! Keep us posted on your progress!

Need beta testers?

sam7, I tested and was able to accomplish I think what you want. I was able to "forward" tcp port 80 requests going to mypublicIP to another public IP(in this case www.google.com) 0 chain=dstnat action=dst-nat to-addresses=74.125.47.147 to-ports=80 protocol=tcp dst-address=mypublicIP dst-p...

I have the same issue... We host our own web/FTP site (setup & works fines NAT, port forwarding, etc...) and clients on the LAN cannot access it by public IP. Unfortunately I do not have write access to our router :( , only our ISP does :( They seem to think that employing the below solution wil...