MikroTik

zimbofury

Hi Ditto! thanks again for the response. I managed to get the initial idea with radius working. it seems to be something to do with using the same name (eg students) on all the profiles relevant settings/names. (address lists, user profiles and user manager limitations) however i am still interested...

zimbofury

i have managed to get the address lists working without radius. [admin@MikroTik] /ip hotspot user profile> print Flags: * - default 0 * name="default" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 transparent-proxy=no 1 name="addlist" address-pool=de...

zimbofury

Hi! Thanks for the response. I did research and was sure it was something to do with that. However i haven't played with address lists too much. I have been tinkering and haven't been able to succeed; below is my config [admin@MikroTik] /tool user-manager profile limitation> print detail 0 name=&quo...

zimbofury

hello I have a scenario at a university where 4 profiles for various users on the lan are needed. I have students, staff, admin and server room. using hotspot, is there anyway that you can specify, if you log in via a certain profile (eg students), that they will get an ip in a certain range? i want...

zimbofury

I tried with and without pass through for testing. reconfirmed that this morning. When i specify ether 2 for icmp, dest. host unreachable errors come from the ip assigned to that interface.

any ideas? thanks for the help so far.

zimbofury

Hi. I have tested and have been unsuccessful. For testing purposes i am using icmp in the code below instead of smtp. Included in this is my PPC settings. When i try to ping through ether2 from the mikrotik i get timeouts and dest host unreachable errors. I find it strange that the route dealing wit...

zimbofury

In queues there is a section that stores the total RX an TX packets and bytes going through the specific queue. Once the router is rebooted or loses power, there counters are reset. Is there anyway to store this information on the router?

Thanks in advance.

zimbofury

Thanks so much! will be trying this tomo. will get back to you.

zimbofury

Please give specifics on your the problem and maybe what you have tried so far. Firstly i recommend upgrading the FW version to 5.1*. Also take a look at http://wiki.mikrotik.com/wiki/Manual:PCC . Works like a dream. If you are talking about bonding 2 dsl lines to make them one, there are other tuto...

zimbofury

with this, is there anyway to mark whatever i like (say smtp to a specific IP) and send it through a specific gateway only? i dont want load balancing as such. The one ISP is blocking other ISPs smtp and certain sites. I want to use WAN2 to handle the blocked traffic (which i will mark in mangle) on...

zimbofury

sorry, being a bit of a nab myself i have been unable to get it working correctly. I have so far marked the connection, packet and route for smtp in mangle. Please could you send step by step info on how to get only smtp traffic through ether 2. that being said, I will need other specific web addres...

zimbofury

Hello, I have a local ISP connection that is failing to tracert to a certain ip address. The traffic to this ip address uses a specific port. My setup is as follows. Ether 1 : 10.0.0.1/30 (WAN1) Ether 2 : 10.10.0.1/30 (WAN2) Ether 3 : 192.168.10.1/24 (LAN) Ether 1 is the local ISP that is failing to...

zimbofury

Good day

I have a clients unit which was deactivated via disabling their mac in the access list. since then it sends multiple requests to the ap and really just floods my logs.

Is there anyway to block the mac from even trying to connect, say after 4 tries?

Any help is greatly appreciated

zimbofury

I have a similar problem. My AP stops responding altogether on ether1 and on the clients end logs show 'authentication timeout'. Would enabling wpa fix this or does mac auth come first? @sten : would hide ssid work? surely that feature is only to hide from people. ie if i guessed the ssid and the ap...

zimbofury

Hi.

Just wanted to know if there is anyway to get your graphs to record more often than just the 5 min option. Also, how accurate does everyone find these graphs? I am sure our ISP is trying to dupe meh.

Ty in advance.

zimbofury

Thanks for the posts guys. :D There does seem to be a hitch though. All works fine but then mails stop sending the device needs to be rebooted and everything then comes right. The link is on a VSAT connection with just less that 550kbps and i was wondering if it had more to do with that and the load...

zimbofury

Yes. It seems to be an ISP issue. the DSL lines give issues at random between each other. If say one connection is timing out, will the router still choose that path? is there a way to make the router check if the connection is stable or not and cut it off till it stabilizes?

Thanks in advance.

zimbofury

can anyone help with this pls :S

zimbofury

Good day I have setup load balancing with the following. /ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 10.33.0.2/24 10.33.0.0 WAN1 1 10.34.0.2/24 10.34.0.0 WAN2 2 10.35.0.2/24 10.35.0.0 WAN3 3 100.10.0.1/24 100.10.0.0 LAN /ip firewall mangle> print Fl...

zimbofury

Hi. this is what i have done.

# INTERFACE ALLOW-ADDRESS STORE-ON-DISK
0 all 0.0.0.0/0 yes

regards

zimbofury

Good Day

I have graphing set up on my routers and that works 100s. My issue is how can i have the graphs automatically saved to the router? whenever the router reboots it loses all the previous graphs.

Thanks

zimbofury

oh well. it works for those who dont have 'my server requires authentication.' at least we wont be visiting every customer.

the smtp server is unfortunately controlled by the isp and they only allow us to use their server.

Thanks anyway

zimbofury

Good day I have setup redirect on DNS and SMTP for my clients so that they use the ISPs settings without having to go to each and every client. all is working except for those that have SMTP servers that require authentication. It fails unless that button is unchecked. Is there a way for the mikroti...

zimbofury

hi all i have created a simple firewall to block p2p for an internet cafe. is this practical? wondering what other services are used mostly for me to add to the accept range. [admin@MikroTik] > ip [admin@MikroTik] /ip> firewall [admin@MikroTik] /ip firewall> filter [admin@MikroTik] /ip firewall filt...

zimbofury

thanks for the reply i had this setting enabled before as this is a standard setting in the transparent traffic shaper setting as per http://wiki.mikrotik.com/wiki/TransparentTrafficShaper. the only thing i did not do was the mangle as that is for type of traffic shaping whereas i am using it only f...

zimbofury

i have done the following [admin@MikroTik] /ip proxy> print enabled: yes src-address: 0.0.0.0 port: 8080 parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: bsat max-cache-size: none cache-on-disk: no max-client-connections: 600 max-server-connections: 600 max-fresh-time: 3d serialize-co...

zimbofury

i have a mikrotik acting as a traffic shaper on a network. the main router is a cisco which is managing vpn. is there a way to get the trasparent shaper to also act as a transparent proxy?

cisco - 192.168.2.64
mikrotik transparent shaper - 192.168.2.254
lan - 192.168.2.0/24

zimbofury

thanks this worked well. just a problem with people who have accounts with domains that are not stored on the local linux server. ill just try add accept rules for those b4 the forward rule.

zimbofury

Hello. I have been having some problems with getting my routing correct. What is needed is all traffic on port 25 and 110 forwarded to the mail server that is on the lan. Also if someone leaves the lan and uses an alt internet connection, they should be able to reach the webmail server and normal se...

zimbofury

hi. coming back to this, please could you link or further explain "of course if you want to be strict, you can make a NAT rule to forward all web traffic to the transparent proxy, and drop all other traffic, that would impact p2p users for sure."

thanks!

zimbofury

good day. i have been struggling with getting userman to work with hotspot. i tired myself and then followed an online tutorial. unfortunately both are coming up with the same error. that being login failed: RADIUS server is not responding. the hotspot and userman are the same router so i used 127.0...

zimbofury

thanks for the reply. unfortunately it is not what i want.

surely there is a way to record in a blacklist of sorts people who visit certain websites. im not wanting to log entire proxy

the network im working on is very simple.

thanks

zimbofury

Sorry. please could you be a bit more specific! thanks!

zimbofury

good day

i ahve my mirkotik transparent proxy already up and running. is there a way to log if someone has tried to access a website. say i allow facebook but wanted to know which ip/mac accessed the site. i dont wish to redirect or deny the website.

thanks in advance

zimbofury

hi. thanks for the reply. unfortunately i have isolated this possibility by replacing my rb400 and have another site that is experiencing the same issue. authentication timeout. i cant even access the unit from it ether 1 port. any other ideas? what of too many wireless connections? if i have many c...

zimbofury

hello all.

i am having a problem with an access point of ours that we are using as an ISP service. attached is a screen shot of the problems ive found and am stumped as to what to do next.. PLEASE HELP!!

((((((((((

zimbofury

yes. i also forgot to mention that one ssid will sometimes disappear completely. but the other one one the same board will be broadcasting. it broadcasts but still cant connect to it.. also the system will go up and down at various intervals without any changes being made.

zimbofury

hi mahnet this weekend i changed the mini PCI cards to a diff brand in hopes that that was the cause.. but it is still doing it. :( i ahve checked power and all seems to be ok. but the electrician did warn me that power can be fine and then the next second it could change for worse. thing is i have ...

zimbofury

hello all :) i was wondering if anyone knew about the max number of wireless clients that can be connected to a mikrotik wireless router. the client units are rb411 cpes and the main ap is a rb433 with 2 17dbi sector panels attached. i have 50 clients on this specific site at the moment. the 433 uni...

zimbofury

Hi!

tested and working! thanks so much. just one q. how does the router know how to limit the up and down bandwidth per queue? could you specify the in and out interface on the device?

thanks

zimbofury

hello! i have a problem with a client who already has a VPN installed with Cisco equipment. I have been told not to touch any of their equipment and must add a mikrotik router/box to the network to control bandwidth per ip and connection limits etc. Is there some sort of way i am able to let the cis...

zimbofury

hi all thanks for the input. it seems that it was a power based issue as we had to add a UPS to the current setup. (which was just an inverter) all is well now! XD and talo1019, we only managed to fit 2 in with one of the mikrotik r52 cards in. bit of a squeeze. but since i have removed the third r5...

zimbofury

when you say new is this the frequency they use or what? one thing i know is here in zimbabwe we dont have most new things. for a bit of perspective, we have no fiber optic in most parts of the country and blackberry features dont work on our cell networks. is there any information from the problem ...

zimbofury

hi all i have a high site that is experiencing a strange problem. It has been running now for 3 years and has never had a problem. But within the last few months, the router board i have installed (rb433uah) just stops responding. winbox cannot detect it and we can still see that the ssids are avail...

zimbofury

ok ill be working on creating a new firewall with your recommendations. definitely similar to what our supplier from south africa suggested. but is there a way to actually log who is doing what traffic? the problem is we need to show the client that we caught them. otherwise we will be liable. so fa...

zimbofury

my company provides bandwidth via satellite to many customers around zimbabwe as well as installing mikrotik products to enable them control. just the other day we had a clients site marked for a claimed infringement for downloading movies via bittorrent. I have setup mangle rules to mark bittorrent...

zimbofury

The cache server is mikrotik based and is a transparent proxy. Attached is a screen shot of the web proxy settings.

zimbofury

Good Day I run a small ISP in a small town cut off from most comms. I have a simple setup that goes from a satellite modem (10.10.0.1) to my cache server/firewall (10.10.10.1). Then from there it goes to a high site (172.16.101.1) which just limits the clients traffic and connections. The problem is...

Search found 48 matches