MikroTik

matthysdt

While researching Mikrotik wifi coverage performance I found the following three reviews on a site called batna24. Judging from the heatmap, it seems the Audience is not a good option for a single-router solution in a multi-story setting from a coverage perspective. Here are the three reviews: ac2 -...

matthysdt

Can the Mikrotik Audience be meshed only with other Audience devices or can other Mikrotik devices also be used to extend the (meshed) network via CAPsMAN? If other devices are also supported, what feature do they need to support meshing with the Audience, or is there a compatibility matrix availabl...

matthysdt

I would appreciate any fix of "inline comments". It is very annoying to me when connecting to dozen of boxes couple time a day. :D I would like to add my weight to marsark's request. Please give us an option to have inline comments as a default view. On our one router, we have +/-80 pptp ...

matthysdt

We have one Mikrotik that I setup to flow control data to and from all our servers, this router sits at the heart of our system and is a critical component tasked with handling each of the countless requests directed at our servers. I cannot be more pleased with its performance, it just keeps on goi...

matthysdt

After reading up quite a bit, I decided on the following solution. I have added two sets of filters: -> drop all incoming packets (udp & tcp) on port 53 not originating from the local area network. - This prevent outside sources to use your DNS server. -> drop all forward packets that are outbou...

matthysdt

from the post you linked:
attackers find a foothold largely due to open resolvers
disallow requests from the internet to get to your local resolvers. Protect your router.

Are you referring to the "Allow Remote Requests" tickbox under DNS Settings?

matthysdt

I strongly expect that one of my clients was a victim of a DNS Amplification Attack for two days in May 2013. More on this attack, which made the local news here: http://mybroadband.co.za/news/internet/78368-slow-adsl-it-could-be-a-cyber-attack.html Symptoms: * My client reported the internet to be ...

matthysdt

Ok, with "like a charm" I meant that the first time I ran it, I got an email with a list of recent logins. But if I run it again, I get that same list, again. Eventhough no logins occured since I ran it the last time. Also, would be nice if the email could include the time of the login eve...

matthysdt

Hi, I tried following this topic but I still have no such thing as an API port. I'm running RouterOS 5.8 on a RB433UAH. [admin@MT] > ip firewall service-port print Flags: X - disabled, I - invalid # NAME PORTS 0 ftp 21 1 tftp 69 2 irc 6667 3 h323 4 sip 5060 5061 5 pptp EDIT: I just got it fixed, tha...

matthysdt

Have you tried to specify the gateway as interface? It works for me on similar setup (2x DSL in bridge mode.. same ISP provider ie. mostly same gateway to the ISP) Hi huntah, thank you for responding. I have tried that without success, I would however like to see your mangle rule for marking ISP1's...

matthysdt

Explained with a diagram:

matthysdt

I assume this is not do-able?
Could someone please just reply then and confirm this?

The reason why I need to do this is because I want to load-balance a VPN connection (pptp-client).

Anyone, with any know-how, please respond.

matthysdt

Try upgrading to the latest RouterOS: http://www.mikrotik.com/download
Copy the appropriate NPK file to your router and reboot it.

matthysdt

Here is more-or-less what I'm trying to achieve: On a single RB750: pptp-out1 -> use pppoe-out1 as gateway to connect to VPN server at 1.2.3.4 pptp-out2 -> use pppoe-out2 as gateway to connect to VPN server at 1.2.3.4 Extra Info: pppoe-out1 physically connects to ADSL modem on ether5 pppoe-out2 phys...

matthysdt

Ran this on RouterOS v5.8, works like a charm!
Thanks!

matthysdt

Remove the "use peer dns" from the pppoe settings, and set manually some public DNS servers, like the google DNS server for example. I'll try that thanks, the only reason I've been avoiding this option is because our ADSL lines may become capped and then only local traffic is allowed by t...

matthysdt

I have a RB411UAHR with 2 WAN interfaces: * ADSL (pppoe-out1) * 3G (ppp-out1) Both from different ISP's, both use different DNS servers. "Use Peer DNS" is enabled on both interfaces. "IP/DNS/allow-remote-requests" is enabled. This is a failover solution with both ADSL & 3G pe...

matthysdt

Hi I would like to bond 4 pptp (vpn) connections that terminate at a single cisco router. My scenario is best explained with a diagram: http://img59.imageshack.us/img59/5316/networkx.jpg Currently our users select which ADSL line they want the software to run on, but I would rather give them only on...

matthysdt

I'm hosting a PPtP server on a ADSL line. This morning, I noticed the following lines appearing in my interface list: <pptp-0> <pptp-1> Screenshot: http://img507.imageshack.us/img507/5742/captureshh.png These do not match any of my current secrets, when I remove them, they simply re-appear. Resettin...

matthysdt

I'm attempting to create a config that will allow me to reboot a router remotely via SMS. So far so good, I'm receiving SMS's and I have a script (below) that I intend to modify to do the reboot part for me. (This script: http://forum.mikrotik.com/viewtopic.php?f=9&t=61068#p312202 ) BUT I have t...

matthysdt

Ooops, my bad :oops: psamsig you are right, 'sa-dst-address' should be set in 'policy', not 'peer'. Of course peer address must be 'a.b.c.d/32'. Regards, Sorry, but I think you're both wrong. The Winbox interface allows me to specify a IpAddress and not a NetAddress. Besides, my peer IP's are WAN I...

matthysdt

I am unable to use a script to modify my IPSec Peer's address. I can however modify the port... why is this? See here: This works: ip ipsec peer set 0 port=600 But this not: ip ipsec peer set 0 address=10.0.0.1 Any idea? When using the Find method I get the same result. This works: ip ipsec peer set...

matthysdt

Thank you huigezi Here is my working solution: :local dnsname "mysite.dyndns.org" :local dnsip [:resolve $dnsname] :set dnsip "!$dnsip" #:log info ("DNSIP : "."$dnsip" ); :local currentip [/ip firewall filter get [find comment="MyFilterMarkerComment"...

matthysdt

use the code :do { :local com "drop" :local ip [:resolve mysite.com] /ip firewall filter :foreach a in=[find comment=$com] do={ :local cuip [get $a src-address]; :set cuip [:pick $cuip ([:find $cuip "!"]+1) ([:len $cuip])] :if ($cuip!=$ip) do={ set $a src-address=("!"....

matthysdt

/ip firewall filter
add action=drop chain=forward comment=drop disabled=no src-address=!10.10.10.10

That doesn't work! This "!" disappears when running the Resolve Script.

matthysdt

can not use the "!" so

My English is not good to express much

I'm so sorry

Ok, Thanks.

So how to use the "!" ?

matthysdt

add a rule at [ip firewall filter] for example: /ip firewall filter add action=drop chain=forward comment=drop disabled=no src-address=10.10.10.10 the comment must be "drop" Of course you can modify their own then copy the script to scheduler and set 1m-10m interval for exambple the code ...

matthysdt

hi to say ,what you're going to do I want to change the src-address in a filter rule to the new dynamic IP Address of the given DNS. Since RouterOS immediately resolve mysite.com when the rule is created, I need to periodically update the address. Note: "mysite.com" is just a random DNS I...

matthysdt

This works: src-address = [:resolve mysite.com] But I need scr-address to be ! mysite.com Tried these, all unsuccessful: ! src-address = [:resolve mysite.com] src-address = [:resolve ! mysite.com] src-address = [:resolve ! mysite.com] src-address = ! [:resolve mysite.com] src-address ! = [:resolve m...

matthysdt

A more reliable way is to use the API . There are clients for various languages listed at the bottom. If your language of choice is not in there and you make your own client (or you make a better implementation with an existing langauge), I'm sure MikroTik users will appreciate it if you share it :...

matthysdt

I need to create a super simple application that will allow a client to switch their internet connectivity between 3G and ADSL on their router. I don't want to give them any other access to the router. What I need is to be able to log in to the router programmatically (with an app I create) and run ...

matthysdt

I have to decide between 2 Routers, the RB1200 and the RB1100. The RB1100 range has an "Ethernet Bypass Mode" which sounds intriguing.... In the device's manual it states the following: Bypass mode is used to cross-connect the two RJ45 connectors (Ether11 and Ether12) electrically thus cre...

matthysdt

You also need to enable extension channel as well... also upgrade to the latest routers as well... sounds like you need help in the newbie forum... CPU on the routerboard should not be at 100%..... Thanks, I'll check out the extension channel you mentioned. P.S. The CPU should be at 100% when runni...

matthysdt

Matt, Did you make any progress on this? I've been in your same boat for a few months. I struggle to get marginal performance out of something that should be so simple. I had the same card in my Thinkpad T61. I'm not sure if that's the problem or your config. I gave up and bought a router/access po...

matthysdt

do your problem is solved or not ?

can i help you ?

Yes, it's working! Thank you!

matthysdt

If i Correct Think About Your idea , You Can Do This With Destination Nat ... i explain that with this example : you want , if anybody use X.X.X.X:X , that body redirect to X.X.X.X:Y or Y.Y.Y.Y:Y . Solution can be done with Destination Nat and is very Simple : ip firewall nat add action=dst-nat cha...

matthysdt

I drew up an example to explain this more clearly. This network already has fully functional Leased-line with 3G failover in place. What I'm attempting is to add a faster (less reliable) line, like DSL, and use it for only one specific program , without tinkering with the existing solution. http://i...

matthysdt

This is a simple one (I hope), just need a nudge in the right direction. I want to forward data on the http/https protocol to a specific server depending on the port being used. For instance, say my local MikroTik's IP address is 192.168.88.1 If a PC on my network attempts to access say, port 500 , ...

matthysdt

Then You should uncheck all the HT basic rates and try to connect again. In this case you should have only 1Mbps and 6Mbps basic rates enabled. That also prevent devices from connecting. Not sure if I understood you correctly, but I didn't change anything on the HT & HT MCS tabs. I only uncheck...

matthysdt

I suggest to disable the supported B rates from 2-11Mbps. Then try again. Also how you measure the throughput? Report back what rates you got when you were transmuting/receiving. I did as you suggested, as a result I could not connect to the Wireless network at all. So I had to set it back to defau...

matthysdt

Hi, I'm still stuck on this topic.

Is there a simple way of running diagnostics on the Radio card and the antennas?

matthysdt

It all depends on if you want to pay for a collector/analyzer or if you want a free one. There are tons of pay for ones, but they tend to get rather pricey the more nodes you add on. (Intermapper, Scrutinizer, etc) On the free side I've set up Ntop and NFSen and both work fine. Ntop was designed as...

matthysdt

http://wiki.mikrotik.com/wiki/Manual:IP/Traffic_Flow

Thank you!

I had a look at Traffic-Flow and Netflow applications to utilize this feature of MikroTik.

Can you recommend a good, free TrafficFlow analyser that runs on Windows?

matthysdt

I need a way to log data usage, here is my scenario: RB433UAH Eth1 -> LAN Eth2 -> Bridged DSL Router (Via PPPoE) PPTP -> VPN via default route (PPPoE) I currently have Connection, Packet & Routing marks to distinguish between International, Local & VPN traffic. My employer has tasked me with...

matthysdt

What ROS Version are you using?

The problem is that you aren't connecting at 802.11n rates. You are getting good speeds for 802.11g but that's not what you want.

Hi, sorry was away for a few days.

I'm running ROS 4.11

matthysdt

try whitout authentication.

iam not shure, but wireless n does not support wpa psk tkip ?

I had the same problem whit my wireless lan and this solved it. i had to run wep keys.

I tried your advice by disabling authentication, but it had no effect on the speed.
Thanks anyway!

matthysdt

As a test, go to data rates tab and set it to manual config. Then uncheck ALL the rates and apply. That should leave ONLY the N rates as available options. See if your laptop connects at N rates and has better speeds. Report back and let me know. O.k, I tried that and as a result I was unable to co...

matthysdt

What is the wireless card you are using in the laptop? Your laptop is not connecting at 802.11n rates; it is using 802.11g rates. My laptop's wireless hardware is: Intel Centrino Advanced-N 6200 AGN ( http://download.intel.com/network/connectivity/products/prodbrf/323016.pdf ) Any idea how to get i...

matthysdt

O.k, after enabling Chain1 (for TX & RX), and setting the ack timeout to indoors, my speed went down a little bit, to about 18Mbps avg. Here are ALL my tabs as they are set at the moment. http://i1180.photobucket.com/albums/x407/matthysdt/2wireless.png http://i1180.photobucket.com/albums/x407/ma...

matthysdt

Hi Colebert Thanks again, so far so good, changing the HW retries to 15 pushed my speed up to 20Mbps. That's already a great improvement! I just enabled my second antenna as you instructed now, will do another bandwidth test to see the affect. Also just set the Ack timeout as well. Herewith, my REGI...

matthysdt

Hi Thank you for the reply. I read that post before posting this one, but it's a different scenario (from a newbie's perspective). :) As far as I know, Nstreme is a MikroTik proprietary protocol used mainly for long distance links. My network is meant to serve multiple devices (non-MT) in an open pl...

matthysdt

I recently installed a R52Hn with two antenna's on our RB433, but, using the bandwidth test tool, the best speed is 6-9Mbps. The two antennas are: 2.4GHz - Dipole Antenna - 9dBi - N-Type Male I'm running the WLAN in AP Bridge mode on the 2GHz-b/g/n band. The bandwidth test station is a laptop with a...

matthysdt

Thank you for confirming that!

Still curious, why can't I source RB21's anywhere?
Do they exist?

matthysdt

We need a board with the following: 1 x mini-PCI 1 x mini-PCIe 2 x LAN Unfortunately, the only board fitting this description is the massively expensive RB800 :( BUT, a normal RB433 and RB21 combo can provide this solution at a fraction of the price! However, I can't find a RB21 anywhere... do Mikro...

matthysdt

Can someone assist me with a script to detect when a PPPoE interface status becomes "Connected" ?
(or I can even check when it's route becomes active...)
This is all part of a greater failover system, and this is the last little bit I'm stuck with.

Regards!

Search found 55 matches