MikroTik

CyberT

its not perhaps your firewall on your tik?

It could very well be your ISP by the sounds of it.

CyberT

that statement is flawed, traffic will always leave the interface that has the lowest metric for the dst in the routing table, thats how you can send traffic to one WAN or the other based on routing, so with that you can easily create an issue where trafic comes in the one interface and leaves the o...

CyberT

Its Caused when your data comes in the one interface, and leave via the other interface(taking a different path back), that in theory can happen/and does happen on the internet, but when you have secure sessions a lot of the security is based on the session that requires the data to come from the or...

CyberT

Hi

Please review
http://wiki.mikrotik.com/index.php?titl ... d_Hardware
especially under the 802.11 section

I have had it before that if the cards are not seated deep enough that it could cause that issue.
You can also look under system IRQ and those areas to see if the card loads at all.

CyberT

If that option existed you would very easily force cyclic data, Its better for the Tik to communicate back out the interface it receives the data especially for secure data.

CyberT

The Issue should not be related to Ip Cloud, but can be checked with a dns resolution to see if your WAN Ip matches the DNS reply from your DNS server. If you fear that your ISP is blocking the port, you can always change the port, and that will give you a resolution, if it is a small ISP they may b...

CyberT

This may not be the most elegant way, But you can have a look at the server that the IpCloud speaks to and create a route for that out the first interface, the issue i would guess is that the wan2 device has a 0.0.0.0/0 in the main table that has a higher preference\lowwer metric than the wan2 devic...

CyberT

make it open source or open source module based. It has huge potential that software even though its freeware. So many cool things can be done with it. like user login to dude = to the user login used for winbox \ [always been an issue when you create the map with a poweruser and someone else monito...

CyberT

+1 Please

CyberT

ok, Well if you can tell me what you are stuck with then i can assist you? you will have an edge router, and advertise it as such, that router will contain your 0/0 to you internet, (there may be a few of these depending on your network, the rest is easily accomplished by following the ospf manual, ...

CyberT

Its no small task, but very do able. Your design needs to be done proper,

What is your aim?

CyberT

I think that server is actually sitting inside the MTN-Buss Infra, and i don't think that those 2 ISP's are the only ones that use that server for statics, Its a pity that they haven't sorted it out yet. Not sure why they havent. I saw a few releases ago they did work on the module to add more encod...

CyberT

Hi Guys I have a instance where i'm using Omnitiks for a network infrastructure, What i want to know is rather simple, at the moment i have it very simple and easy and it works well. Unit A <=> Unit B (AP) <> Unit C, So as you can see A and C is clients, there is now a requirement to add a unit D, T...

CyberT

Thanks Mr Yan. Not sure where this leaves the topic thou. Would be great if this can be resolved.

CyberT

I believe it is exactly what you found. on the following posts a Mikrotik Support - MrZ stated RouterOS does not support tunnel password which is used for LAC/LNS. http://forum.mikrotik.com/viewtopic.php?f=3&t=75800&p=386736#p386736 in the v5.07 release notes it did hint that it is already s...

CyberT

They Use Juniper i think, I did email support about this about, http://forum.mikrotik.com/viewtopic.php?f=3&t=75800&p=386730#p386730 Is the same request, I think this is also from south-africa looking at the thread, If you need additional information then i can provide you with everything yo...

CyberT

I had a mail from them saying that they will put it on a future release, but as of yest nothing, i see this feature request has been around for a long time, Im not using as much Mikrotik devices anymore as they do not conform. I'm starting have a pile of death here for them, and at a stage i believe...

CyberT

well the easiest would be for you to disable all firewall and nat rules on the TIK for now for testing, you dont have to have anything really set up on the tik under the firewall for you to access it, the only requirement from a clean config would be 1) Ip with route to internet You can also try to ...

CyberT

Hi Guys

Is there a way we can support the following as it is required in South Africa For static IP's over ADSL?

http://www.afrihost.com/site/page/stati ... n_settings

https://www.axxess.co.za/staticip.php

CyberT

Will it be supported at a time? As it is the latest craze in South Africa if an static IP is required over ADSL?

CyberT

ok I found the following:

What's new in 5.7 (2011-Sep-14 10:54):

*) ipsec - new exchange mode (main-l2tp) for l2tp tunnel users to allow
FQDN as a peer ID with preshared key authorization in main mode;

But how to use that, I dont know...

CyberT

Hi cyberT Sorry my mistake the tab is secrets not security Gys Is there way you can test this from your side, as far as i can see that only relates to incoming users, and does not relate to outgoing users at all, I have tried it in a way, but all that i can do is match the interface to the name, so...

CyberT

Hi CyberT Please try the following Add the L2TP interface under the PPP menu On the security tab add the h3lp password there and change the service to l2tp, please make sure you have the correct profile selected as when you created the l2tp client ie (default/default-enryption) don't know if you sh...

CyberT

OK I'm Busy with just about the same thing: http://www.afrihost.com/site/page/static_ip_configuration_settings I will let you know when i have it running. I get to more or less where you are at the moment, I have the same result, Are you running the latest ROS? My one router is stuck on 5.25 at the ...

CyberT

Hi SamCt

You had any luck with this so far?

If you have more details pertaining to the tunnel then perhaps we can assist you with setting this up?

CyberT

There is a way to power the cards directly with 5v, I personally wouldnt recommend it, but ive seen a few people swear by it, there is a diode that needs to be removed so that you open the the power circuit to the main board ( so that no power can run back into the board ( they say this is optional...

CyberT

There is a way to power the cards directly with 5v, I personally wouldnt recommend it, but ive seen a few people swear by it, there is a diode that needs to be removed so that you open the the power circuit to the main board ( so that no power can run back into the board ( they say this is optional ...

CyberT

http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server

will give you what you need

it sounds like the address pool that you need to change,

CyberT

thanks for replay but this method used before merge did used after merge on routerboard !

I actually don't know what you are trying to say.

CyberT

what you can do is use your log files better, so that you send all the pppoe to an remote server for troubleshooting if required, you can also in the log change parameters and so forth, it is a bit of a pain, but like i said a lot of things can be disabled if you use the log system correctly you can...

CyberT

Do you want an PPPOE server or client (client is the one that you use to connect to the internet to)

http://wiki.mikrotik.com/wiki/PPPOE_Server

http://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE for the client.

if you have any other questions please ask.

CyberT

if you dont see them on all the routers there could be a few reasons. 1) snmp isnt polling correctly 2) username password could be incorrect, confirm that when you double click on the device you can see all the details under the SNMP tab, thats a great first step, what ver Dude are you using? rememb...

CyberT

when i do the same test, then mine works perfectly.

CyberT

you can in return do an different type of bandwidth management like an garden zone with an purchase more bandwidth for people that exceed the limit, you can disable the logging if its an huge issue, but its supposed to be there in my opinion.

CyberT

can you ping anything on the internet?

have you done the masqurading?

what are you using the dhcp for, its not advised to run camera's on dhcp.

CyberT

Could be a better solution. i think this model just takes usb 3g, and to be honest, the internal (laptop 3g) cards can be hard to source for the 411usb from time to time.

CyberT

http://wiki.mikrotik.com/wiki/Manual:Interface/Gre On encryption i just normally use l2tp tunnels and let them use def encryption, i am not the paranoid type, any software package that sends sensitive data encrypts it itself. << i know this is a hugely debatable topic >> IM not sure about your quest...

CyberT

there is a few things, firstly you allow, one port then forward another i dont see the allow for the port 81, since thats your redirect, i would rather redirect the correct port from the outside to the inside, some recorders forward the "port" as an embeded message in the connection stream...

CyberT

try to flush your dns cache on the tik, i have seen this before sometimes, are you running proxy or anything else?

face book is mostly on https so the proxy shouldn't interfere.

CyberT

load balancing is a beast that you should take on later, the conceptual basis of the fail over is easier, there is 2 ways, the one is to make all the devices part of a routing protocol, like using ospf or bgp, the second would be to use an device as gateway, and let that device decide what device to...

CyberT

read how to use shadow proxy, with the built in proxy, then have no cache but use the proxy to block those sites with the deny function. please read the proxy manual as well so that you secure your proxy by only allowing internal ip's access to it. http://wiki.mikrotik.com/wiki/How_to_make_transpare...

CyberT

RouterBoard 411USB L4 would be the one that you are after, it supports every thing u want ( u will just need the correct radio card/antenna and the correct 3g card and antenna.) Look into your config, there is no reason that you should be hitting 100% unless you moving huge amounts of data. I run so...

CyberT

1) it sounds like a routing issue. but thats hard to say with the information that you have given, i came to this conclusion because all your L2 protocals seems to work, and your dhcp subnet seems to work, (asuming ur dhcp is ur dns and so forth) but ur l3 wont route, aka iether u dont know how to s...

CyberT

@cyberT: So, if I see (and that is sort of common on all my PtP and PtmP networks) regular update times in the region of seconds only it would mean that lots of my radio time is wasted? as far as i understand, To test a certain speed, you need to change the timing frame (poll time) aka listen and s...

CyberT

What is exactly the meaning of the "Last Measrued" time in the registration table data of connected client for each of its connection rates? Signal strength doesn't get measured all the time as it waists "radio time" , so if you have a stable link, you will find that only the ac...

CyberT

Please explain what you are trying to achieve.

Are you just trying to share an single Ethernet connection?

aka /IP firewall masquerade.

CyberT

i have seen this before, it happens when you have your ping timeouts and your ping retries close together, aka ping timeout 2 seconds, and poll every 2 seconds, with a down count of 1 or 2, to make it better, you would want to increase your down time, and have a poll time of at least double your tim...

CyberT

i would guess that it must be an dhcp somewhere, can you supply an "/ip ad pr" so that we can have a look at the ips? or a screenshot of the ip's then i would be able to direct you further?

CyberT

bump?

CyberT

also, if there is no routing required, then its not the mikrotik stopping the print service, so if you tracert to that printer, and there is just 1 hop aka the printer, then you will not even be passing thru the mikrotik.

CyberT

i would say it because you are running in 2 different subnets, if you want the nasty work around then bridge the 2 ports on the 750, as it seems like you have different switches for the different subnets, then let the pc's share via netbios/ipv6 that will make it work, but is really a nasty work aro...

CyberT

Hi please send your configuration and then we can better help you my friend. in general when get gateway timout error its a problem between mikrotik and the destination web server or site... I have the same reason for this error since ros 5.09 before that there was one or 2 things that you could do...

CyberT

please read the page that i linked, at the bottom the picture clearly shows "repeat intervals" :: from the page:=> Note: If you would like different notification behaviors for different groups, create different notifications. For example you might have Siren for Servers and Siren for Print...

CyberT

CyberT

Check for tx/rx drops on your Ethernet in the stats to see if the cable somewhere isnt damaged, if everything is bridged then i'm actually stumped.

if all else fails then reset the config on all the routers and try again, there is no reason for this.

CyberT

Change preamble-mode=long on AP

i found this helps a lot as well.

CyberT

Change preamble-mode=long on AP and then try

CyberT

ok when you use winbox on any of the pc's can you see all the mikrotik devices? also check, in you ip neighbors if you can see al your devices, there is a few things you can test with, try putting all the radios in wds mode maybe, could also make a diff for you, also the mac ping tool can do magic t...

CyberT

you running routing protocols on it?
disabling the watchdog is a overall bad idea?

CyberT

remove most of the ips, and bridge everything together.

if you need more details you can message me again.

CyberT

the mipsbe or mipsl packages are generally always the same, so if its a mipsbe then its it will be the same, do you have any idea why its crashing, can you still telnet (mac-telnet) into it, does it do a watchdog reboot?

CyberT

try changeing the serialized connections. i have found that that does sometimes have an influence, also make sure that your dns is correct on the tik, proxy has a few things that could influence it, but i run a quite a few native once without cache around a lot of our clients.

CyberT

ok try this
http://wiki.mikrotik.com/wiki/Manual:Th ... ifications

<- Karma

CyberT

you can try some form of address list where if an address is part of the address list it forwards you to the internal server, but even that is a long shot, i would rather consider pptp works well from most phones ive tested, so i would investigatory that.

CyberT

ok so you will see the difference as you go along, but for the problem that you have its because you running different packages, so when you download the "full package" the single package then it will be better, once everything is standard it will go easier, you dont need all the different...

CyberT

so you have 2 isp's? bonding across both is going to be a problem if you want pure rate, aka 8x1mb = 8mb what i can recommend trying is nth type with a download manager, that's prity much the closest, but then you have to track secure connections or you will have trouble, that way your chance of hav...

CyberT

check that all the packages are enabled, looks like there might be an certificate issue, that error should be clear if you do a /sys reset [y] i have one router that is in the field with that problem, i just never investigated, its been like that for quite a while and quite a few ros vers, to be hon...

CyberT

yes, you can set that up, just use the one to serial to the other, i believe you would have to swap the tx and rx pairs 2 and 3.

CyberT

you will most likely lose connectivity if there is no routs to it, is it a flat or routed network?

CyberT

is there something plugged in? otherwise it will show I, i would be careful of adding ports to a bridge that enable and disable a lot, esp with pppoe dialer.

CyberT

i would recomend the 435GAUH is a super powerful unit that will let you take advantage of the 20mb/s for your isp that will be natted and your lan/wifi bridge, i would recomend getting an nice r52hn radio card for local wifi, with the correct antenna array, maybe an ceiling mount MIMO 2.4ghz antenna...

CyberT

I have not seen any way to get around this, its a safety catch, for the TIK so that you dont storm an AP that has an password or ACL, ive found a way to "hack around this" if you change the wireless type to nv2, and then back then it sometimes resets this flag after trying 2 connect to an ...

CyberT

http://wiki.mikrotik.com/wiki/Manual:Queue use queues with Burst rates, thats almost the best advice i can give you, i like doing something like 4mb burst with 128k queue, that way you let someone burst for 10 seconds they can get 40mb of data, allowing them to load any website with ease, but when t...

CyberT

rather try this as a bridge, its much more effective and supports full N rates.

http://wiki.mikrotik.com/wiki/Transpare ... using_MPLS

CyberT

you can look up the snmp id's by doing an snmp walk and then displaying them by editing the icons display, or the def display.

CyberT

look on the made for mikrotik website http://www.mikrotik.com/mfm one of the suppleirs there should have something for your needs, or might be interested in making them for you, as they MFM and if there might be a need they might be willing to assist.

CyberT

try building the message first as a variable and then sending that string, i managed to do this once for the device to sms me its current ip. think your script this way must look more like message="tx = "&$tx&" rx = "&$rx if i'm not mistaken. could also have to includ...

CyberT

ask your isp if they support MLPPP, or line bonding, that's the neatest way, further you have to try ecmpr and so forth, but getting it to work properly is hard. There is a few load balancing manuals around, the ebst by far is if you can have equipment at your isp, then you have many more options.

CyberT

i have had the same result.

CyberT

when you reconnect to them, then they will show the right ver.

I'm just talking from my experiences.

CyberT

well, the issue is that the dude is not connected to the devices via the winbox port. When the device is connected u will see the ver at the right, if dude cant decide what system it is aka x86/misbe/mipsle then it cant know what software to push. if that makes sence, when u in the device can you se...

CyberT

That red x means it's not connected, right click say reconnect, then see that it changes to an check mark before upgrading, it just means that there is no winbox connection available from the Dude server.

CyberT

Cool don't forget my karma

CyberT

As the key within 2 seconds then u can change the boot loader settings, you can netinstall via com port.

CyberT

us the "jump" or so forth for the services you want to exclude? as rule 1 2 and so forht before you drop the traffic, i suppose the right thing to do is remove the blocks between the lans, and then test that everything works before you continue? if you read the firewall manual you will see...

CyberT

http probe.

check the source for the http code, perhaps you can copy it to check the other page, the def source send an http get command and waits for a reply, and then disconnects

the default send command is
HEAD / HTTP/1.0\r\n\r\n
and then it has an expected return of
^HTTP/1\\.

hope this helps.

CyberT

if it reboots each min it might be that you have a netwatch or something like that that was configed, you can from the terminal force it to netinstall, worst case you can netinstall via com, i had an issue with netwatch before that had similar results.

CyberT

skype is extremely hard to match in any way. https://support.skype.com/m/en/faq/FA10278/how-should-i-plan-to-manage-quality-of-service-within-my-own-network http://www.pcworld.com/businesscenter/article/212867/how_to_optimize_your_router_for_voip_and_video.html is the ones i found, i was trying to b...

CyberT

in the terminal

/ip add add=10.0.x.x/24 int=ether1 comment=server
/ip add add=192.168.y.x/24 int=ether2 comment=lan

also read the ip manual on the tik manual page.

CyberT

try to export to pdf and other formats, if that doesnt work enable the web server, go to the map on the webserver and save the picture,

for the list you go under the tree +devices under there you should be able to export that into a list. with the [csv] button

Dont forget my karma

CyberT

2 ways / 2 steps 1) add an static dns entry to the tik (if both the lans use the tik as dns) for the www.domain.com to 1.1.1.2 that way both the lans will just pop strait back in for the dns request. 2) allow 1.1.1.2:80 from lan2 the base is to allow the :80 between to 2 lans as well. so in your dro...

CyberT

def forward has to be on for 2 devices on the same wlan to talk to each other.

further than that i would start playing with the "/sys telnet <phone> 9999" command and so forth to check if the tik can access the ftp, its a very strange issue, to me it sounds like a firewall.

CyberT

1) ok so i would recomend OSPF as it handles ECMPR better, (some form of load balancing) (although u can get away with bgp-mpls as well.) 2) VRRP 3) Vlan 4) not sure what you mean Not sure about the sub, further than that, if you read the following manuals 1)ospf 2)vrrp 3)vlan then you will be sorte...

CyberT

well your best result will be achieved by having a isp that provides ML-PPP that way you dont have to do 2 much, and you will just have one big "link" if that cannot be achieved then you will have to look at load balancing with tracking with nth type balancing. there is no if you using rj1...

CyberT

rather use the following menu to upgrade, under the tree view => devices => router os
then there is a status bar showing what its doing.

if i remember even if you right click then the details will be displayed here.

CyberT

from your description it seems perfect, since you say. LAN1 and LAN2 is separated, no traffic is allowed between them. so if you want just one service to avail from lan2 then you could do an jump rule before your "drop" rule, as i would assume you drop all data from the one lan range with ...

CyberT

you will hear the sound at the station, you have to enter the mac address for the ap you want to allign to in the Audio monitor, with the range, its a nice idea and ive used it on rb433 before, but at the end of the day the actual reassurance of winbox/telnet is the best way to do it. the audio can ...

CyberT

have you tried the built in /tool fetch command to see if you have any luck, i for no reason see why you cant access it, unless you have done something interesting in your wifi like disabling def-forwarding, or not have your ether and wlan in a bridge if you connecting from lan->phone. Have you trie...

CyberT

Hi Guys I would like to suggest an "notes" menu item in router os that displays when u log into winbox/telnet reason would be very close to "comments" on links and so forth, we have a multitude of admins in our network, and it would be nice to have an function like 1) "last ...

CyberT

i have a similar issue with a pair, to me it feels like the one polarity is giving me issues, if you look under registration from both sides and you have that listed side by side does both show all the rates unlocked when u have it set to rate selection=advanced and all of them on auto?

CyberT

it could be power related, i have had a similar issue with R52HN cards, then splitting it over more than 1 RB solved the issue for me, but there could be a lot of things that could impact this all the way from CPU, to interference, You will have to start a testing process, whats the AVG cpu usage on...

CyberT

i have not had much issues with any nic's not being supported in RBPC's or so forth, cant say much for the performance thou.

CyberT

have a look at the mikrotik HWMP you cant do this with 1 device, since a phone cant transmit 2km.

CyberT

you should be able to copy and paste the devices, they just look like xml in the memory. you will just have to manually add the map, but after that it should be an copy and paste, i think the history of the 50 devices will be lost, otherwise you can go play with the exported files and copy the map p...

CyberT

/system reset-configuration
then say yes, after reboot the option will apear

CyberT

ok so there is a few things, firstly its seems you are over complicating something to the max here, ive dont his before and vlans and all that is not required unless they are on the same ip range and so forth, so what you should do is on the one have a route that uses the 3g modem as a def gateway a...

CyberT

http://wiki.mikrotik.com/wiki/Manual:License router needs to be able to get online dns and def gate needs to be set, ping http://www.mikrotik.com from the command line to make sure its all fine. New 8 symbol SoftID Since RouterOS 3.25 and 4.0beta3 new SoftID format is introduced. Your license menu w...

CyberT

are you trying to configure vrrp or just 2 gateways? if you have 2 gateways 192.168.0.1 and 192.168.0.2 then you can say ip route add dest=0.0.0.0/0 gate=192.168.0.1 dist=1 check=ping ip route add dest=0.0.0.0/0 gate=192.168.0.2 dist=2 check=ping if gate 1 is unavailable then it will use gate 2 sinc...

CyberT

the device is fine, what antenna are you planning to use with it? you would have to install some type of an Omni directional antenna

CyberT

so you have bgp peering to both your ISP's?

look into ECMPR and so forth,

http://wiki.mikrotik.com/wiki/PCC#Policy_routing to track connections the same way as they come in, then just iether Nth them out or balance them with ECMPR

CyberT

i cant see the relation between disconnecting and reconnecting the modem, as its a standard serial interface, and rebooting it would serve the same purpose, its not as if the slave modem can have any "sense" if it connected or not, nor is the tik capable of tracking if there is something c...

CyberT

have a look at
http://www.mikrotik.com/testdocs/ros/2.9/ip/route.php the eCMPr part, the table should be more like
3 A S 0.0.0.0/0 10.0.0.2,10.0.0.1

also read
http://wiki.mikrotik.com/wiki/Manual:IP/Route

CyberT

18:30:16 wireless,info WLAN: data from unknown device XX:XX:XX:XX:XX:XX, sent deauth === Another 70 lines with the same messahe, every 5sec=== when you rip out the mac's its hard to tell you what the issues is, rather just make it dev1mac,dev2mac,dev3 if you want to keep animosity, country=no_countr...

CyberT

""I have a wireless network all controlled by OSPF and everything is running well."" You could do one of the following, let ospf offload trafic to the closest dsl line, this doesnt balance it as per say, but that does get you around a lot of trouble that you are going to run into...

CyberT

Forgot to ask.

2) Ensure you are allowing all traffic outbound from the LAN to the Internet and all "established" connections back to the LAN.
How do I allow this?

Ip -firewall - connection - tcp-state

CyberT

please show your configuration for the firewall and arp print, what do you want to achieve with this?

CyberT

you want to post the script so that we can have a look?

CyberT

Hi, Firstly you need to break apart the questions in here, you ask a question then answer it 3/4 so there is a few things, having 2 antenna's ruining does work on HN We have run a link with one H-Pol and one V-Pol (with a virtual ap) and that worked just fine, Hidden node problem you will find with ...

CyberT

you need to run snmp and then make the time field available for a pull, but it will update once on a time slot/update freq on dude, so it wont run like a clock but like a data field, i havent tried this yet, but you can push any field into snmp, and u will have to do the snmp walk to find the field ...

CyberT

I think this is advanced. I have about a dozen or so routers all interconnected through ospf with one router as the gateway to my fiber. I'd like to put in a rule at the border router to protect all the routers behind it from things like ssh, telnet etc. But all of the routers have multiple public ...

CyberT

3 things i would love to see 1) Notes. <- A simple manual entry log by admins that go , ##date time $user, "disbaled wilan2 - Grid removed for maintenance" <- or something like that just so that if you login to a router you can see what someone else has done, 2) "Better flow tracking ...

CyberT

Hi Guys Ive searched the forum a bit and have been unable to come up with an reasonable answer. I am looking for the optimal BGP Hold timer over a wireless network, our network is starting to "mesh like" with a lot of p2p Links that some devices have up to 7 links with up to 4 Mikrotik dev...

CyberT

if you cant do an test with the bt test server then i would recommend that you attempt the following do a combination of the tool http get with a script to put it either into an email and mail it to you, drop it to a static file on the tik or so forth, the http get should use the max bandwidth, i wo...

CyberT

yes you can use a recombination of the HTTP get import and if really required ssh environments. You can use SSH to send an terminal command to the Routerboard without having to log into the routerboard each time I use Putty to achieve this and by creating a command line for putty to pass to the Rout...

CyberT

Any chance that the IP address has been moved to the wrong interface?

Its a really hard thing to troubleshoot from one line like that, what happens if you Mac-Telnet and reboot both sides?

Have you done any hardware changes
Firmware updates

or so forth?

CyberT

you can also netmap on other ports to your internal routers provided there is one router that can see both sides.

Dst-Nat tcp port 5000 to srver:correct port u want to use

CyberT

There is a workaround that i did find. Install Vmware on your current windows PC then use the X86.iso as the disk, and give Vmware Direct access to the SATA drive u want to install it onto, reboot the VM let the iso install, reboot the vm again, select the modules u need, finish install, reboot Vm, ...

CyberT

Here is a snapshot of a conversation, sorry i didn't reformat it, sorry abt the spelling basically an idea about a dedicated p2p protocol, that can have a lot of advantages, but i guess there is a reason it hasn't been done. was in a response to the hidden node concept that we experience on sectors ...

CyberT

HI Johan can you please define "the routerboard becomes unstable." I am running a 433AH with 2 x r52Hn's and 1 x R52 , and an RBPC with 2x RH2HN (Both Dual Pole) and one generic card for a 2.4AP Both Seem rather stable, I have had some issues with 3xr52Hn's in an 433 and after a lot of res...

CyberT

Your best approach would be to do an RBPC (router board P C), The bandwidth requirement for that amount of pppoe connections, and the management thereof would be challenging, I use an RBPC for wireless, The extremely strong and stable as long as you stick to the approved hardware, on unproved hardwa...

CyberT

The reason is that Discovery INterfaces need to be enabled, and by Def they are disabled for Wi-Lan Devices, and for Tunnels, If u are Bridging all the way then you will see them provided there is bridges to LAN

In other words Discovery is only enable on Ether interfaces By default.

CyberT

there is a better guide as well out there.

I wanted to ask if this 5V power will resolve the Mikrotik RB433AH with 3xR52HN cards issue (where 3 R52HN cards dont work well together in a 433AH), or if that issue is also related to CPU requirements.

CyberT

I would test the card for Failure first, I have had a card with the same issue from scoop, Card would get very warm in a day or 2 was related to the High-Amp and i tested it easy enough. A very good guide is available from http://kumpulan-tutorial-mikrotik.blogspot.com/2011/02/manualwireless-card-di...

CyberT

Do you want to do an FTP put command from the Tik?

I would recommend the easiest way is to get a FTP pull application or a FTP client that can frequently check the device for changes?

CyberT

Noise Floor overides the detected noise floor, if you put the noise floot to -50 and your signal is -50 the device will percieve the SNR as 1 or 0, that will directly impact the algorithm for speed selection, therefor it makes perfect sense, Noise floor should really only be tampered with if really ...

CyberT

I would recommend the following. Boot the device Access the Prompt Via Serial Enable Ether 2 Plug in Ether Cable Hold White button on the side while Netinstall is active with the Boot Catcher. Netinstall the device with latest Firmware. Then Check. I personally run 2 Rb433AH's with 3 Radios each, an...

CyberT

what Ver Dude did you install, And please define "links are not displayed" Links will be auto plotted if the devices are scanned, and form part of the same IP range they will link back to the Iprange "cloud" the Link speeds and thruput will only be displayed if the devices suppor...

CyberT

Hi can you please do the following for me:

[admin@CybertAP] > system ntp client print
enabled: yes
mode: unicast
primary-ntp: 172.16.15.1
secondary-ntp: 172.16.2.130
status: synchronized

And follow that with either a trace to u'r NTP or a ping from the ntp?

CyberT

If you are running ros 5 please confirm the CPU readings with Profiler, I am running a RB750G as a proxy i dont have any trouble, i am unable to find the ralationship between the ICMP times that increase while using the Proxy since they are completely unrelated? U can have a look at the "serial...

CyberT

there is a few guides you going to have to follow.

It might be easiest to use Raduis for the traffic and limiting the speed for each, the other options require traffic shaping and so forth.

Regards

CyberT

remote connection does work provided that there is a TIK internal that is available external, another brutal option is to have Nat forwards on the tik that can see external and internal.

CyberT

Have found with Win7 that the UAC has an issue with some of the calls that the dude makes, if u disable windows UAC the ping and scan functions seem to work perfectly again.

CyberT

you have to limit them, there is some guides, if you want better guides on this Google Traffic Shapping Mirotik, there is also a good youtube vid explaining it nicely, it seems your problem there is related to not having limit at set to a value, even if the value is higher than the 1mb/s. Do u want ...

CyberT

display all the variables at the top, normally there is an error in the box if the list doesn't load, I have had a Router that had excessive bad blocks that did that, a Net install sorted that out, I also had a RB532 that i was using as a proxy and the Flash Disk went bad after a year or so, was har...

CyberT

have u tried to clear the Cache under the connect button, i have found that sometimes the dll's/packages get corrupted during transfer. Good Luck, We've just gone ros 5.1 on a 140 client user group and we have not had those problems, i had a similar issue a while ago and clearing the cache and then ...

CyberT

there is more effective ways of doing this, than with a file, For the DNS you get 2 functions that work really well, the one is the HTTP GET command to load one of those :global myip :set myip [/ip address get [/ip address find interface=<<yourdialer>>] address]; then u can write that to the file an...

CyberT

is there an estimated release date for the next release, Webfig was great for getting around the MACbook Winbox issue. (aka there is no winbox for mac pc's)

/me goes off to find the est release date

CyberT

Ok i found a work around for you guys for now. what you can do is under tools add a new tool called winboxreadonly winboxfull winbox client and so forth under the commands for them do the following for read only I:\Users\admin\Desktop\winbox.exe [Device.FirstAddress] <<DeviceReadOnlyUser>> <<DEVICER...

CyberT

Hi i would like the ability to set a default [Device.UserName]&pass before a scan or a defualt [Device.UserName]&pass for adding a new device, as with many networks i am sure you guys don't use admin without an password to manage your devices. Either one of the following will work great for ...

CyberT

Its a manufactured unit, doubt the pigtales can come loose as my understanding is that the antenna is soldered onto the card?

This thread was continued here
http://forum.mikrotik.com/viewtopic.php ... 41#p256341

where we used the exact same hardware for testing.

CyberT

This is linked to http://forum.mikrotik.com/viewtopic.php?f=2&t=48804 and is Exact same hardware used for the testing from the original link, now on a avg 1.8KM link (pure LOS) http://www.wug.za.net/newlos2.php?fl=22375&tl=17726

Regards

CyberT

CyberT

on p2p there is not much to optimize on the nv2 side except that the cell raduis is set in KM, the other setting is for Latency VS thru put as you might have guessed, Just as a concept, Putting up a link between 2 devices has very little value, If you had to say put a P2P link with Identical devices...

CyberT

hmmm you could probably do it with a script that you fire every 5 mins or after a media state change, if you need help with a template i can try and assist you.

CyberT

ITs gona be challenging to format the drive that its booting from, since there is some protective measures in to avoid that, the right thing to do is to have the boot order set right, the real issue is the partition on the drive is set to active, This is propedbly going to cost you a site visit, sin...

CyberT

You are looking for the WDS functionality, It should be fairly easy to set up using the guide on the wiki, It will display as one AP,If i understand correctly you have 1 Device with 3 cards, and they are on sectors? Then WDS will be the right way to go, please be aware that WDS is not fully compatib...

CyberT

If the settings arent saved for some reason, although unlikely. Create a script :Foreach i in [/interface find] do {/system lcd enable [/interface number=$i]} Check the script, I don't have an LCD to play with so you going to refine the script so that it works. Then run a scheduler to run that with ...

CyberT

nv2 does support QOS in its own way, TDMA period size deals with that, as i understand that it will not exceed the tdma period size, cell radius also deals with that, as NV2 will reserve an addition time slot for "further" clients. NV2 is aimed at P2MP environments but i have had great res...

CyberT

Depending on the application of your networks, If its point to point connections then there is no difference, if you have point to multi point connections then its not advised in my opinion. If it aint broken, dont fix it! the 2 settings are similar you can read more about them in the manual section.

CyberT

Confirm that you are running the latest Firmware on all the towers, that will increase your chances of having the same frequencies, The Regulatory Domain will have the Std Freq, If you go super channel it will unlock all freq for every 5mhz jump, be careful with those thou, you could easily drop rem...

CyberT

Please refer to the Web Proxy config, where i would recommend you start looking for the issue is [admin@cybert] /ip proxy access> print detail Flags: X - disabled 0 src-address=192.168.88.0/24 action=allow hits=30274 1 src-address=!192.168.88.0/24 action=deny hits=4856787 Also remember not to use yo...

CyberT

For the wireless link its rather easy, I would use the net watch command, and let it fire a script to kill of all the Mangle rules for the one side, and then on net watch up, make them live again, Might have to monitor the endpoint of the wireless link for that, But thats all the same, On the Local ...

CyberT

is your receive-enabled: yes secret is only for if you want to run scripts with the sms to device "cmd: <<pass>> script $nameofscript <aka reboot> [admin@cybert] > tool sms pr receive-enabled: yes port: usb2 channel: 3 secret: "" allowed-number: "" keep-max-sms: 20 be sure t...

CyberT

I do know of a problem: If you upgrade from 4.x+exp NV2 to ROS 5, then you could end up loosing all your Wireless interfaces due to the fact that ROS 5 does not have a package called wireless exp nv2, i found this out doing a local upgrade, so at-least it wasn't an issue for me, always do 1 closest,...

CyberT

Your best bet is to research Nth packet load balancing, its the closest load balancing there is without the ISP supporting ML-pppoe, ML-pppoe is by far the best way, Nth in my opinion is the second best. There are many eg. on Google.

CyberT

If its users from other networks i don't see the need for you to receive the passwords, just as a hint most pppoe services can be traced back to the mac, i wouldn't even attempt to try and use any of these, but for educational purposes the way that you would get to these details would be a a L2 pack...

CyberT

i see this is rather old and you have most likely figured this out, but on wireless modes select the advanced button at the bottom right, then under the wireless tab at the top be sure that you set the country correct, i take it it should be set to "South Africa" if u dealing with ICASA. P...

CyberT

i would recommend looking into your queue trees, and perhaps moving your hot spot users onto there as well, that way you can set the limits on the local interfaces for ftp and http to 200mb or unlimited.

Not sure thats what you after, but that would be where i would start

CyberT

I used the windows work around as suggested,

Set up the 1 mikrotik to pull group dns
set the 2nd mikrotik to get Inet dns (aka PPP dialer)

In windows
Set Pri DNS to mikrotik 1 (groupdns)
Set sec dns to mikrotik 2 (Inet DNS from Inet Dialer)

CyberT

SurferTim Thank you for the reply, There is a rather large repository of dns's for the local group, as its over 400 sites, and looking into a script to update all local dns adresses could be a viable option, I will firstly try and use the windows workaround, and test that. What i have found works fa...

CyberT

Will update when we can test again.

Regards

CyberT

Good afternoon Gentlemen. I am currently busy testing 2 brand new out the box sxt's and i am having a hard time. I need to know what information all is required to get some assistance on this. I have read a lot about DP links, and 802.11N I am able to get 108mb/108mb when i run: SXT <=> 31DB Grid Th...

CyberT

Hey Guys I have been a mikrotik Fan for quite some time, and have been working with mikrotik for a long time, I have recently come across the following problem with DNS, But firstly the network infrastructure. We have a wireless user group with close on 600 nodes, as with anything this size we relie...

Search found 172 matches