I've got a Mikrotik CCR1036 with routeros version 6.49.7 working as VPN server. Now I'm trying to authenticate users against a radius server (a windows domain controller). I configured the mikrotik side like this: /radius add accounting-backup=no address=192.168.123.123 domain=zz.local realm=zz.loca...

There is no need to add any percentage. Just write PPP interface name in that field.

Ohh. I see you are talking about winbox. I barely use winbox. I don't see the need for using a custom program having a great web interface... well... it was great in 6.x versions...

Set show columns to show "routing table"

Where is "show columns"?

En 6.x versions in the ip/routes page there was a drop-down menu for choosing the routing table to show. In 7.4 routes can't be filtered by routing table and the routing table name is not shown on the list so it's not possible to know if a route is stored in main table or some alternative ones. I al...

There is no need to add any percentage. Just write PPP interface name in that field. I tried removing the percent sign and the web interface reports "Invalid value in Gateway" and refuses to save. I see another problem. I went to ppp and changed the name of the vpn connection. In ip/route...

Just copy your PPP interface-name into "gateway" field, it will work flawlessly.

When migrating from previous config, it adds a % before the name. I assume it's needed also.

But some valid configs can have interface as gateway (PPPoE, WG, ...) and being able to select it without typing the name was nice. In v6 it was possible. Did doing the same become significantly more difficult in v7? If not, it would be nice to return it. This is exactly my case. I have some VPN co...

I just upgraded to 7.4 stable.

I see in web interface, that in ip/routes, there is no more drop down menu for choosing interface for route destination.

+1 (please)

After doing this, speed is much increased. Keep in mind: do that for both sides, unless doing it, the speed will slow in that direction. Other way is setting queue size for "default" queue to 250. (on both sides) Please refer if that helps. I'm trying this. I set up a new queue in the cli...

I am using openvpn to connect one mikrotik to another. Documentation says it is faster than l2tp, but with the same routers, l2tp is 10 times faster than openvpn 200Mbit with l2tp, 20Mbit with openvpn). Same config, some firewall rules, same ip profile on the server, just disconnecting from one and ...

Hello. I have 2 sections on my LAN with same subnet but linked via wireless link. I want to configure one dhcp server on each one (serving different groups of ips on each side). For avoiding conflict between this two dhcp servers, I am passing the traffic through a bridge on Mikrotik and trying to f...

Each new version I check if there is something new about it.
Openvpn server on mikrotik works really well. I have 100+ clients connected via openvpn witout any problem... except when I need to add a new route...

Routeros openvpn server needs a way to push routes to the clients.

...

Unless you made a typo with pasting here, your pool3 has a very strange range

/ip pool
add name=pool3 ranges=162.168.30.120-192.168.30.159

AHHH!! Thank you. This must be the problem!!

But the mikrotik records in its log it is assigning hte IP, and the IP appears in the leases list of the mikrotik... Yes but it says it is using server dhcp1 while you post the config for dhcp (without 1) Hummm... dhcp1 is the name of the dhcpserver. The name of the pool is "dhcp". /ip dh...

post an export... maybe wrong netmask definition? But... the dhcp server should serve ips only in the range configured in the pools... Here the relevant parts of the export: /ip address add address=192.168.30.200/24 comment=LAN interface=ether13-lan network=\ 192.168.30.0 add address=192.168.31.200...

It looks like you have a second server, dhcp1, maybe it is configured somewhere on a bridged network?

But the mikrotik records in its log it is assigning hte IP, and the IP appears in the leases list of the mikrotik...

I have dhcp server configured to lease ips in the range 192.168.30.x but sometimes it assigns ips like 192.168.29.x The dhcp server uses pool "dhcp" Pool dhcp is 192.168.30.42-192.168.30.90 and next pool is pool1 Pool pool1 is 192.168.30.15-192.168.30.20 and next pool is pool2 Pool pool2 i...

Your routing with a switch! The CRS is not designed to route your maxing out the CPU.

Bridge it don't route in a CRS, or use a MT router, CCR, etc

OK. Thank you. What about RBxxx routers?

I am having issues with NAT. The setup is this: Router Mikrotik CRS1128G4SIN symetric 100Mbit internet ---> ether1 -> NAT -> ether8 ->LAN Speed tested with PC connected directly to internet: 80/90Mbits Speed tested with the same PC connected to ehter8 ( NAT ) (disconnected from LAN): 40/45Mbits The ...

My scenary is this: +-------------------mikrotik-----------------+ | | | bridge1 192.168.100.1 | | +--------------------------------------+ | | | +-------- switch --------+ | | | | port1 |port2+port3+port4+port5 | | | | | | +--------------------|---+ | | | +---|----------------------------|-----+ | ...

I configured PCC load balancing with a routerboard 750. My problem is it does not detect when one of the routes are not working. It sends pings to the gateway, but the gateway is always up because it is a local router. If the ADSL line is down, the gateway answers the pings but the internet connecti...

Hello anv, what is that version? I can't find it neither among the the official tarballs, nor among the snapshots. I guess that is some CVS revision plus some special patch: where did you find it? Thanks, Giampaolo This is fue mandriva packet. You may download the source code if you want. Just goog...

Hello, we also had same problem and trying to tame it we made some test. We found that keys generated with openssl 1.0.0 do not get imported properly. Everything works if keys and certificates get generated with openssl 0.9.8. AFAIK, something has been changed in key file format between 0.9.8 and 1...

[admin@MikroTik] > /certificate [admin@MikroTik] /certificate> import file= MexGrande.pem passphrase: certificates-imported: 0 private-keys-imported: 0 files-imported: 0 decryption-failures: 0 keys-with-no-certificate: 0 0 keys imported... this means the file has no info about keys that can be impo...

Few ways to accomplish this. What i would probably do is not bridge anything in mikrotik. Give public ip to mikrotik and internal ip to other port of mikrotik and router. Then in mikrotik first do dst-nat port 80 to mikrotik ip. Then do dest nat to route every thing to router internal ip and do mas...

I am trying to pass all packets but redirect the port 80 You don't have to route port 80, this is default in router board. Just put ip address assigned below in browser address bar. What I want to do is to pass the internet ip address directly to a computer or router but keep the port 80 (or anothe...

I am trying to configure a mikrotik router in order to act as a transparent bridge but in a way it can be accessed for remote monitoring. For testing purposes I am trying to pass all packets but redirect the port 80 to the router itself. I created a bridge, added the ports 4 and 5, and assigned it a...

Same Problem :( driving me crazy In the same boat. Unable to import any keys. Just solved the problem: the documentation is wrong. You must not upload the private key in .key format, you must upload a .pem format. Just do this: openssl rsa -in client1.key -out client1.pem and upload and import the ...

I followed the instructions on http://wiki.mikrotik.com/wiki/OpenVPN#Creating_Certificates_with_Easy-RSA. I created the CA and the certificates source vars ./clean-all ./build-dh ./pkitool --initca ./pkitool --server myserver ./pkitool --pass client1 I uploaded the files to the router: ca.crt client...