MikroTik

ProCon

Hi, I purchased a LTE mpci for my RB912R-2nD that will work with verizons network and the card will not show up in the LTE devices after I install it. The card is a Telit LE910. I have tried running /system routerboard usb set type=mini-PCIe and /system routerboard settings set init-delay=5s without...

ProCon

Hola,

Verizon stated that they would not support the r11e-lte us that it had to be one of their approved mini-pcie cards. That being said, will this card SysCONNECT Modem CZ1, which can be found
https://opendevelopment.verizonwireless ... evice/9674 work in the mikrotik?

ProCon

I was looking for a backup internet connection essentially. I at this location I can't speed test over 60-70mbs down anyway so it doesn't matter. Will this device do as I would like?

ProCon

I was considering buying some of these units and I wanted to get some information before my purchase to make sure that this device is going to do what I need it to. Say I purchase the LtAP mini 4G kit. Will it work with a Verizon sim card? If so, am I able to bridge the lte connection to the etherne...

ProCon

Suggestion
You can use L2TP IpSec

See if this material helps you https://mehmetkaplan.wordpress.com/2015 ... ipsec-vpn/

Leoservices thank you very much sir! That doc is perfect!!

Sent from my XT1650 using Tapatalk

ProCon

Hi,
I wanted to create a site to site VPN using a mikrotik and a SonicWall tz400... Is this possible and if so what settings should I use on each device.

Thanks in advance!!

Sent from my XT1650 using Tapatalk

ProCon

Ah I see. True. Thanks!

Sent from my XT1650 using Tapatalk

ProCon

So I couldn't use the cloud setting to VPN in?

Sent from my XT1650 using Tapatalk

ProCon

Idea.jpg Hi, I know my way around the mikrotik slightly and I was wondering if it would be possible to use the cloud feature at the "office1" location to connect and be a part of the network of the virtual AP at the office two location. I was thinking it would need to be a VPN but I wasn'...

ProCon

Yep. Just put IPv6 on it, and then only enable IPv6 on the client devices you want speaking IPv6. Be sure to configure your IPv6 firewall rules because as your first post mentions - the addresses are now all public, so you need to make sure to have some protection in place. ZeroByte thank you. So i...

ProCon

You can easily put both protocols onto the same devices at the same time - this is called "dual stack." When I say they can't connect, what I mean is that there's no general-purpose way to make a v4-only host knowingly communicate directly with a v6-only host. A dual-stack host can talk t...

ProCon

Even though they're both named 'IP' - they're pretty much parallel universes. You could even have a single LAN with two routers - one is IPv4 only and one is IPv6 only. The two topologies don't have to mirror each other at all. (although it makes sense to keep them close to the same, obviously) So,...

ProCon

Hello

I was wondering if it was possible to have a private ipv4 network and issue public ipv6 addresses.

Sent from my HTC6535LVW using Tapatalk

ProCon

Ah my mistake. Thanks for your help guys.

ProCon

Hello, I just purchased a CloudCore CCR-1036 8G2S and I can't set any master ports on any of the ethernets. Has this feature been disabled from this router? My 1100AHx2 seems to do it just fine. When I try to set the master port in the terminal it says "master port and bandwidth settings not su...

ProCon

Hello, I have an SBS 2008 and I would like to run some VLAN's. I have a MTRB 750GL that connects to the server. The server has a DHCP server set on it with a scope of 192.168.20.10-254 I would like to VLAN to my AP's which are VLAN capable. I would like to add another DHCP Server to the SBS2008. Is ...

ProCon

Thanks to CelticComms, the issue has been resolved. Him and I were communicating via email. Thanks for all the help guys!

ProCon

No matter what encryption I use I get the same result. no sa's

ProCon

The SA still doesnt show anything

ProCon

Here is the rest of them. I was going to just copy and paste the but it didnt seperate the lines and it was very hard to read.

ProCon

After I rebooted the router I was able to get this shot

ProCon

I have no idea on what i am to look for; There is nothing there saying it has failed or anything of the sort. Perhaps I am fighting firmware issues? I have v6.11...? Does it have issues with IPSEC? Nope. Downgraded to 6.7 and it didn't make a difference... Also tried 5.26 with same results Ive also ...

ProCon

Didnt work. Tryied killing connections and rebooting routers and still no change.

ProCon

192.168.10.x router /interface ethernet set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 set [ find default-name=ether5 ] master-port=ether2 /ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \ mac-cookie-ti...

ProCon

settings for 192.168.10.x router /interface ethernet set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 set [ find default-name=ether5 ] master-port=ether2 /ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \ ...

ProCon

Ok I tried that and still no success

ProCon

Can you check that you have routes for the remote LAN pointing to the remote WAN address? The configs didn't seem to show such routes. The SAs won't be created until traffic causes an IPSEC attempt. I think I am a bit lost here. So you want me to take the 24.x.x.x router that hosts the 192.168.10.x...

ProCon

Hi, I am trying to connect 2 networks via ipsec ad when i goto remote peers it tells me its established yet there isn't any Installed SA's working and I cant ping locally either. Ex) i cant ping from one office to the other. Likes I cant ping 192.168.10.1 from 192.68.11.1. Below are my settings and ...

ProCon

Yes they do now. Phase 2 timer was set different. I put them all to the same now. There seems to be a heck of alot more Installed SA's now after this update. Is that normal?

ProCon

Interesting. I flushed the SA's and BAM it came back online.... what the heck does that mean?

I would like to change to something for stable for sure!

ProCon

I did send ya an email.

Also, the Mirotik just stopped pinging the attached network that runs through the IPSec. I still see installed SA's but I cant get to the other side. Now the phone wont dial out to the other office.

ProCon

I'm going to have to wrap my head around all of that. Your firewall seems slightly confusing to me... you also have a bunch of dst-nat stuff that isn't necessary. So you said it connects, but no traffic goes across? or what is the exact behavior? Do you see SA's installed (IP -> IPSec -> Installed ...

ProCon

I'm going to have to wrap my head around all of that. Your firewall seems slightly confusing to me... you also have a bunch of dst-nat stuff that isn't necessary. So you said it connects, but no traffic goes across? or what is the exact behavior? Do you see SA's installed (IP -> IPSec -> Installed ...

ProCon

# feb/03/2014 16:37:15 by RouterOS 6.7 # /interface ethernet set [ find default-name=ether1 ] comment="Gateway Port" set [ find default-name=ether2 ] comment="LAN 192.168.20.x" set [ find default-name=ether3 ] comment="Switch In GW Room" \ master-port=ether2 set [ find...

ProCon

Ill get it to you as soon as I can. It may take a few days.

ProCon

I thought I did that but perhaps I am missing something?
Attached is the setup I need the Mikrotik to connect to. Ideas on how to do it and make it work? Perhaps I screwed it up.
I tried to follow this example http://wiki.mikrotik.com/wiki/MikroTik_ ... wall_IPSEC
EHHH

ProCon

That is my ideal outcome with the two mikrotiks. See the offices are far away and I cant have them down for that long as I as the transition. Both of them at the moment are using the Cisco's. I would like to use one mikrotik to connect to the cisco as it buys me time to drive to the other location t...

ProCon

So that will connect to the other side which is the cisco rv042?
If so how would I do that.
Also do I need any firewall or nat rules for the exchange server and voip server?

ProCon

Hola, I recently purchased a few RB1100ahx2's and did the upgrade 6.7 fw upgrade and I am having a buggar of a time trying to connect rb to an exsisting network. Here is what I have. I have 2 offices office A and office B. They are currently running Cisco RV042's and using IPSec and currently workin...

ProCon

Hello, I currently have 2 networks connected through a VPN using some Cisco RV042s (and they are crap). The idea is to use 2 Mikrotik's in there place. My question is (being that the physical locations are far) will a CISCO VPN router connect to a Mikrotik VPN? Or is this going to create alot of odd...

ProCon

Hello, I was wondering if anyone had a generic fw written that would act as a sonicwall. What I mean by that is prohibit users from access certain websites ect. I am aware that I could make my own firewall to block certain things but I was just looking to see if there would be an easier way. I work ...

ProCon

Good Morning all! I had a question about VLanning. If I wanted to implement a VLAN for some VOIP phones, how difficult would that be? As of now I have a Mikrotik as my gateway. I was watching some how to videos on vlan's and I understand I would have to tag my data. My question is, the network is fu...

ProCon

Did u ever get my email?

Sent from my SCH-S720C using Tapatalk 2

ProCon

Alright. I'll email you.

ProCon

What are you looking for? I can post that. The whole thing is quite revealing for my customers and I rather not do that.

Do you need FW rules and routes?

ProCon

I think what is going on; when a device outside the nat goes to communicate with the public ip it goes trough because of the srcnat and dstnat rules provided in the link above but when a device within the nat tries to communicate with the public ip the gateway (mikrotik) doesnt know how to pass it? ...

ProCon

It is going to the gateway and stopping there. When i type the ip address in it goes to the gateway instead of the router it needs to goto.

Sent from my SCH-S720C using Tapatalk 2

ProCon

I tried that too and that didn't work at all. I just omitted the ports (being that its not a webserver) and it still failed

ProCon

So, I wanted to get a public IP to a router within our internal network. I got the IP to work externally but internally however, it doesn't seem to work. I was following the steps in this post http://forum.mikrotik.com/viewtopic.php?f=13&t=64789 which got me that far. Here is what I have NET---(...

ProCon

Went to your site and emailed through there.

Thanks again

ProCon

That is exactly what I need.

Thank you very much. Just wish there was a MTCNA I could take in the states or even ontario canada. I live in NY so it wouldn't be to bad to travel across the border if I needed to :-\

ProCon

I have read Learn RouterOS by Dennis Burgess and RouterOS by Example by Stephen Discher. Which both were nice to learn some of the options within the mikrotik. But both books are very entry level. I guess your right about the training. I see you have been to some of the training courses. How are they?

ProCon

I have been poking around these forums for awhile and I do understand the basics of networking. But I need to improve my routing and firewalling. I was wondering if there were any books someone could recommend or perhaps some online webinars based on mikrotik. I have purchased the two books written ...

ProCon

Personally I found that routeros by example to be more informative. but he is right the books are entry level. the wiki and forum boards have some really good insight on qos.

ProCon

Ive read both Learn RouterOS and RouterOS by example. Ive read the parts of the wiki as well. I guess im looking for some books that would explain networking better. I mean I get the basic ideas of switching, bridging, but routing is a bit blurry. There seems to be alot more to it than I can just fi...

ProCon

Hello, I currently am making a wireless network and I was wondering if there are any books I could read that you guys may recommend. I have currently read both the MikroTik books. I am into networking and understand bridging, switching, and some routing. Although I do need to brush up on my routing ...

ProCon

Ok cool. thanks

ProCon

it was never blue before. One of my APs running ROS 5.8 isn't blue... Or is the blue txt just the new way?

ProCon

I updated my MT AP to 5.14 and when I did that my Default profile for the security of the wireless device turned blue. Why? and how do I fix it?

ProCon

Nevermind I figured it out m8
Thanks for your assistance

ProCon

I thought seeming how the DHCP Sever for the relay is in the first router I would be able to queue it... but i guess not.
How would i accomplish what your telling me and still have it be a DHCP relay?

ProCon

Alright what I want to do if possible is to queue certain hardware within a relay. Here is what I have MTRB(DHCP Sever)------UBNT(AP WDS) ~~~~~~UBNT(Station WDS)-----MTRB(DHCP Relay) The MTRB(DHCP Sever) has 2 severs set in it. DHCP1=10.1.1.x DHCPRelaySever=10.1.2.x The UBNT's have a 10.10.1.x addre...

ProCon

I was looking at that. Thanks man. Is it a good book?

ProCon

Ive had this happen to me before. After you delete your default config on your mikrotik and it reboots, some NIC adapters take a long time to resolve and IP though windows. If you want to avoid this down time just set your windows machine to a static IP and login to the MTRB with the mac.

ProCon

Its in the bridge. Did you bridge both ports on B together? Give the IP on B to the Bridge interface.

ProCon

Heres a setup that might help you that I have done in the past. Lets assume A is CPE Lets assume B is the Wireless AP Lets assume C is our gateway. Lets also assume we are using all Mikrotik devices loaded with RouterOS. Setup1 A is to be set in Station mode (Now you can set this up with a DHCP if y...

ProCon

I was browsing the Mikrotik website and I seen that people can get Mikrotik certified though the offered courses. I had a few questions and didn't know where to go so here I am (once again) :lol: When you goto these courses... is it just the exam or do the teachers/professors train you? Is the exam ...

ProCon

What is the max amount of memory for MicroSD slots on the RB1100AHx2

ProCon

Thank normis
Used the wiki

http://wiki.mikrotik.com/wiki/Payment_Reminders

and it worked like a charm

ProCon

Guess i used the wrong term. Basically i want a site to show no matter what site somebody types in. Like say they type in www.mikrotik.com i want that to be redirected to another site. The idea is to cut people off when they don't pay there bill. But i want to let them know that they didn't pay thru...

ProCon

I was wondering how i would set up a splashscscreen in a mikrotik and also deny traffic. I have a rb1100 as my gateway and my dhcp server. Say i want to take an ip on that dhcp and have a splashscscreen pop up and have that screen also deny traffic, what would be the best way to do this? Could i hos...

ProCon

They have it locked down

I dont think I can do that.

ProCon

This is absolutely amazing. A+

ProCon

Well where to start, Alright here goes. I have a Billing Sever made by Powercode. Which seemed to work wonders when I had there BMU. But there oh so magical BMU added a high amount of latency to our systems and was locked down so much I couldn't really do what I would like to do. So I got rid of tha...

ProCon

Thank you. This was very informative

ProCon

Here is my firewall /ip firewall filter add action=drop chain=forward comment="drop invalid connections" \ connection-state=invalid disabled=no protocol=tcp add action=accept chain=forward connection-state=established disabled=no add action=accept chain=forward comment="allow related ...

ProCon

Nah its not a comp firewall. Hmmm. Everything is mangled by prerouting rules. so Is there a way to make an exeception via port or ip?

ProCon

So in theory I should be able to access a 10.10.0.x from a 10.10.1.x? because I cant =(

ProCon

I have an RB1100 with a few ranges set up and my problem I want to create a port which I can plug into that can access all the other ports and ranges. This is what I have Eth1 10.10.1.x Eth2 10.10.2.x Eth3 10.10.3.x Eth4=net out Eth5 is what I would like to be able to get into all the other ranges. ...

ProCon

thats why i posted. I was seeing some stuff about vlans but i didnt wanna go gung ho on something if i was going in the wrong direction.
So what policy should i be using to reach my goal?

ProCon

I have 2 ISP connections and what I would like to do is put them down one wireless pipe and put them out 2 eth ports to have them be 2 seperate APs. Heres the idea ISP1(eth1) ISP2(eth2)MTRB1---(wirelesspipe)---MTRB2---(eth1)ISP1----AP1 (eth2)ISP2-----AP2 Is there any way to do this with mikrotik?

ProCon

Will I be able to EoIP over this connection or do I need a true MT link?

The idea is to give CPE that connects to the MT AP a public IP.

Any ideas?

ProCon

Feklar, Thank you so much for your help. I did figure something out here. My issue was the TLS and I can use a free email provider. I just used gmail to send me an email saying "whoaza"

i needed to have tls=yes and use that port.

Once again thanks for all the help

ProCon

Seems like no matter what email i use I always get invaild FROM address

ProCon

Alright. I went to gmails website and found this; Outgoing Mail (SMTP) Server - requires TLS or SSL: smtp.gmail.com (use authentication) Use Authentication: Yes Port for TLS/STARTTLS: 587 Port for SSL: 465 I have tried both ports and neither will allow me to send. port 465 gives me the error; SMTP i...

ProCon

tried that still didn't work. I am thinking the address I am using from godaddy's email maybe wrong... Is there any way I could use a gmail account for this?

ProCon

set from="\example@example.com\" password=password123 \
server=72.***.***.80:25 username=\
"\example@example.com\"

ProCon

Same error

I don't know if it'll make it simpler, id set up a gmail account for this if it would make this process faster.

ProCon

I get the following error "failure: recipient address required" Does this mean the email i have set up in the MT has incorect data?

ProCon

I have no idea how to do that

Im very new to these routerboards and new to this setup.

ProCon

Alright, This maybe something really simple but I think I'm goofing up something somewhere. I want to use the Netwatch that is built into the RouterOS and I cant seem to get it to work the way I want it. I have went to the wiki and tried applying those scripts and failed. What I want to do is when a...

ProCon

My apologies on such a late response, I was on vaca.
Yes I believe they are routed to us. They gave us a router as well... So how should I set this up?

ProCon

Yes I have about 10 pub ips. As of right now 5 are usable. So I should check the router that Comcast gave me?

ProCon

I think im getting lost here. I read some of the documentation on how to use different public IPs on a network. Well heres the issue. I have a private nat network and I want A single piece of CPE I have to be public. Is this possible? Here is my network layout (Comcast Router)----Public IP----Eth01(...

ProCon

I have quite an interesting issue here. We have a few users on our network that have Xbox360s and want to play on live and cant. Now they can play with other users on live but not with each other. So I am assuming its something wrong with the network setup here its just that I can't figure it hit. I...

ProCon

The reason why I wanted them routed this way is because I want to be able to log into all the equipment when need be. I wanted to create a routed network because the broadcasts when alot of people connect to the ap's seem to be a real big problem. This is just a single segment of the network that I ...

ProCon

Alright I am racking my brain here and maybe I'm just missing a basic setting. I am new to the RouterOS so bare with me. I am trying to connect 2 MTRB750's together and I cant seem to get the IP addressing correct. In MTRB750 B everytime I try to address eth4 to 10.10.2.28 the route for that IP come...

Search found 97 matches