MikroTik

cicserver

I have Mikrotik Routerboard ccr1036-8g-2s+em with 1500 online pppoe users with avg overall traffic of 1.5 - 1.8 Gb (no natting, conn track turned off) with Firmware 6.44.6. User traffic is controlled by dynamically simple queue via radius. We are also marking packets going to CDN server via mangle a...

cicserver

My ISP provides PPTP dialer which I connect first in order to use internet. Can I connect multiple pptp dialers on same mikrotik to do load balancing using PCC. I have worked with PCC but only with pppoe dialer (either via direct mikrotik ethernet or using vlan interfaces or static gateways , but wi...

cicserver

I have /30 public IP assigned on my mikrotik WAN interface & one /24 (example 2.2.2.2/24) routed public ip pool for my pppoe users. subscribers number have increased to 500, therefore I am thinking to do 1:2 src-nat using CGN concept for law compliance, I am unable to get more public iP at a mom...

cicserver

this was my question.
is dynamic simple queues for each user is better?
or should I mark traffic for different package users,& control them using PCQ base simple queues

cicserver

Pardon me if this have been already replied in the forum. I have CCR router configured as pppoe server with 2000 active pppoe clients connected with it. I used Mangle to mark there download/upload. What is more efficient approach for controlling each under bandwidth ? Dynamic Simple Queue for each u...

cicserver

Scenario: I am running pppoe server with about 2000 active pppoe subscriber. All users gets public IP & there is no NAT rule in place. Connection Tracking is set to AUTO, and in ip/firewall/Raw , I added rules for NO track for src/dst of my public ip users to avoid CPU hiking on ppp sessions dis...

cicserver

I have acquired 2 ISP's connection, and configured BGP in it, its working, But when I enabled 2nd ISP, all traffic shifts to 2nd ISP link, My task is to perform policy base routing so that I can mark one pool to go via 2nd ISP. My BGP config /routing bgp instance add as=XXXXX client-to-client-reflec...

cicserver

I am using 2 ports bridge inside mikrotik. port 1 > ISP , port 2 > LAN Users without any dhcp ip all lan users dial pppoe to isp to get internet Dueto some frequent problems at ISP for some specific dns records, Can I redirect pppoe users DNS traffic inside BRIDGE to some external dns like 8.8.8.8 ?...

cicserver

I am using Mikrotik as PPPoE Server , along with Freeradius as a Billing system. After expiry user gets ip from EXPIRED pool which redirects him to an EXPIRED page (hosted locally on radius). This part is working fine. At some ISP I seen that the expired page also greets that particular user by firs...

cicserver

thank you all for your valuable replies. Appreciated.

cicserver

Without looking at it, conceptually you could create a static placeholder queue which does nothing at 0. Then your static everything else queue. Dynamic rules would be added after 0. I want to have this static queue at end all the time so that dynamic queues must remain on above this queue. ok I gu...

cicserver

In mikrotik I have pppoe server , & multiple dynamic queues for each user created , which is generated via freeradius according to user profile. I want to insert a STATIC queue that should remain @ the LAST number. Example: any user that connects, and if it don't have any profile/queue, then he ...

cicserver

I have some confusion. What is difference between `mark connection` vs `mark packet` vs `mark routing`? For example. I want to mark a `src-ip` for bandwidth shaping so i should first mark connection from this ip then mark packets for these marked connections, then used them in queue ? For Routing, I...

cicserver

so what should be the correct way to achieve this ? if user is downlaod big file lets say 1 GB via internet download manager, then at first minute he gets 512kb, then after a mnt, he gets back to actuall bandwidht that is 256kb, then after one minute he should gets back to 512kb and so on.

cicserver

i would love to use simple queue but problem is that if the user starts downloading big file, he starts with burst value, but after burst time (1 minute) , It gets back to max-limit and remains there until unless user stops download and remains idle forburst-time. i guess this is by design. my queue...

cicserver

but my queues are dynamic provided by Freeradius billing system. workaround?

cicserver

Task: User Package: 1mb Burst Allowed : 2mb Burst allowed duration timings : 1 mnt Now what I want is that if user is downloading , he should get 1mb for 1 minute, then 2mb for second minute, then again on 3rd minute he reverts to 1mb, then again on 4th minute he gets 2mb. like per minute burst then...

cicserver

I used this one with some modification & it worked well

,

cicserver

:if (($VAR1 = "YES") && ($VAR2 = "NO")) do={

cicserver

what rules I can make to DROP or REJECT the flooding (so that it may not pass to other) ?
is DROP better or REJECT?

cicserver

Are you on dynamic ip? if so try resetting your modem to get a new ip.
And as mentioned, make sure you don't provoke it again in future.

I am static public IP, it is required for some services. Getting public ip is very difficult here, after many months of requests I am now able to get public ip.

cicserver

You cannot stop incoming traffic. Only ISP could do this. Your Mikrotik could however filter it out and do not pass to LAN.

How ISP's block such traffic , using what technique?

cicserver

Right now I donot have any FIREWALL in place. In TORCH i can see on IP address with UDP traffic , traffic reaching upto 80-100 mbps which chocks the whole bandwidth. Even if block this ip in INPUT/FORWARD chain , still the traffic is reaching upto 80-100mbps. Some one told me about UNICORN UDP flood...

cicserver

I have single PUBLIC ip on WAN interface of Mikrotik. From yesterday I am continuously being hit by various public ip with UDP attack. this results in WAN link usage to 100% and chocking. the src and dst ports (udp) are different. I tried to block ports, i tried to block source ip's in INPUT/FORWARD...

cicserver

Following is my current scenario. only 1 CCR which is configured as PPPoE Server. it have public ip interface and few dsl links too. So all is running in one box. I am using mark routing to distinguish users , like if user have private ip he will nat via dsl, and if he has public ip, he will go via ...

cicserver

the guide saying more about radutmp/checkrad. In my opinion checking the NAS will be slow in heavy production Mikrotik NAS.
All should be done at Radius level.I m using SQL.

cicserver

Scenario: I have Mikrotik 6.39 / 6.40 Hotspot Server. Freeradius 2.2.0 on Ubuntu is installed. Problem: Users can login to hotspot from multiple devices simultaneously. Requirement: There should be no simultaneous logins per single account/username. Already did the following but to no avail. Create...

cicserver

IP routing is enabled on Cisco switch vlan2 ip 1192.168.2.1 user get ip 192.168.2.2 , gw 192.168.2.1 vlan3 ip 1192.168.3.1 user get ip 192.168.3.2 , gw 192.168.3.1 Vlan 2 & 3 users share heavy media files with each other & they access each other PC using local vlan provided ips like 192.168....

cicserver

I have following network topology. LAN clients gets ip's from main Cisco switch dhcp which have vlan assigned and intervlan ip routing is enabled. all vlan clients can communicate with each other using there dhcp ips because all clients have there default gateway pointed to there local vlan interfac...

cicserver

Greetings, Recently I configured simple basic VLAN setup on Cisco 3750 switch and connect it with Mikrotik Router board using trunk port. VLAN setup is as follows. Mikrotik Router LAN Port = 10.0.0.0.1/24 [Connected with Cisco 3750 Port 1 , trunk] Cisco 3750 Port 1 = Trunk, connected with Mikrotik P...

cicserver

I have RB450G, and internet connection from my upstream provider via FIBER wire with one public IP on Port-1. As a backup they have provided me with second fiber which I have inserted in rb450g port 2. Right now I have added same ip on both interface and keep one interface disable. When primary fibe...

cicserver

I am also looking for this from long time.
I provide quota base packages to users, and when they download from out local FTP Media server, it counts too

How can we exempt any website/or our ftp server from accounting?

cicserver

I have mikrotik as pppoe server along with freeradius as billing system,
How can I exclude my local ftp media servers from radius accounting quota limit. How can I do it ?

cicserver

Scenario: I have mikrotik router board and acquired ISP connection via Fiber. They provided me one /30 public pool which i configured on my Mikrotik WAN. I acquired /24 public ip pool from APNIC and asked my ISP to route the /24 pool to my /30 mikrotik wan ip, and all is ok and my clients get public...

cicserver

I would suggest to use OPENDNS, its free and works very well [99.99%] to block porn. you dont require static ip to block porn. here are there dns servers. 208.67.222.123 208.67.220.123 Make sure you redirect users dns request either to open dns or to your mikrotik where dns is configured to use open...

cicserver

I am using mikrotik as pppoe server and provide public ip (Routed Pool) to users. Mikrotik WAN IP = 1.1.1.2/30 Users Pool = 2.2.2.0/24 Now I wan to add SQUID as TPROXY (So that users real ip should preserve). How can I connect squid box? how many interface would i be requiring in the squid box? shou...

cicserver

Please..

cicserver

I have 2 wan PCC configured and working ok. Now I want that any traffic going to destation 1.2.3.4 should *ALWAYS* route via WAN2 link only. (actually 1.2.3.4 is remote hosting SMTP server and they accept connection only from wan2 link) I made following rule. /ip firewall address-list add address=1....

cicserver

I have HOTSPOT configured with following scenario. LAN +DHCP = 192.168.0.1/24 WAN = 1.2.3.4 HOTSPOT Config: Address Pool = None , Genera masquerade rule in place to allow internet (with no src-addres ) . Hotspot is working fine with this config. no issue. Now I want to assign users different pool fr...

cicserver

I have PCC configured in RB to load balance 4 wan links and working fine. now i want to mark few traffic from client, Example - Few ips mark as VIP - Few ips mark as Low End Users - Few downloads based on connection bytes My questions is , Can I do packt/routing marking with the PCC? as I can see th...

cicserver

Is there any way I can route few extension like exe or mp3 files to second WAN link ? will this routing work? Hi, Just some of my idea you can try to nat by layer7 or content: ip firewall nat add chain=srcnat content=".exe,.mp3" out-interface=Wan2 action=masquerade place-before=0 or: ip f...

cicserver

I guess routing extension will not work. Ok I found 'connection-byte' marking method. but how it will going to work in following? I want to route files above then 100MB to second wan link , will this work? how it will work, it will route to second wan link after initial 100mb transfer or will it sen...

cicserver

OK I pulled all IP from ASN 15169 , now YT routing to second WAN link, Primary objective achieved.
But now issue is that its dragging many other services like Gmail / Dropbox, apps etc. is there any way I can route only YOUTUBE ? how can i found just YOUTUBE IP Address list only ?

cicserver

Is there any way I can route few extension like exe or mp3 files to second WAN link ?
will this routing work?

cicserver

OK I pulled all IP from ASN 15169 , now YT routing to second WAN link, Primary objective achieved.
But now issue is that its dragging many other services like Gmail / Dropbox, apps etc. is there any way I can route only YOUTUBE ? how can i found just YOUTUBE IP Address list only ?

cicserver

thx, it worked ok.

cicserver

if (condition) and (condition) do= Example: variable stored in script environment are var1 = up var2 = down I want if both variables value is equal to DOWN, then print "net is down" :local var1 [/sys scr environment print value where name=status1]; :local var2 [/sys scr environment print ...

cicserver

How can i match two statements and if BOTH equals to xxx, act accordingly.
Example:

If variable 1 and Variable 2 values in environment are equal to DOWN, then execute script.
I search forum and google, but found only one statement match examples.

cicserver

I have two WAN links. the L7 works fine, the Queue works fine for these marked packets. but the problem is that when i try to route these marked packets to another WAN link, the VIDEO doesn't play. Other websites routing is working fine. its just YT videos not play when route packets. Is there any m...

cicserver

Ok. is there any way we can get IP Address list for youtube and all of its CDN ? doesn't matter if it catches other traffic as well. but I really want to divert youtube traffic to different wan. Is there any possibility we can mark traffic based on extension for youtube? like flv mp4 etc? will it wo...

cicserver

I have tried to mark Youtube traffic by Layer7 using googlevideo and youtube reg expression.
Queuing works fine , but when I try to ROUTE these marked packets to another wan link, video doesn't play.

Have any one successfully route YOUTUBE to another WAN link ?

cicserver

I have setup freeradius 2.x with mysql as Billing system and Mikrotik as NAS (pppoe server). I have managed to configure few modules like time limit, expiration etc. but unable to configure volume QUOTA limit , e.g 100MB for user. I tried to take various examples from the google/forum but none of it...

cicserver

I have Huawei E/173 usb modem connected with the mikrotik CCR.
SMS sending working fine. I am trying to running USSD code but its always giving error. I tried different channels as well but no use.
how can i solve it?

MT.PNG

cicserver

ok I found that it was some compatibility issue of the toner.
on another printer, i am able to get the correct toner stats using following.

TONER [string_substring(oid("1.3.6.1.2.1.43.11.1.1.9.1.1"))] % Remaining %

t.PNG

cicserver

What OID or formula I can use to show Toner used % in dude. SNMP is enabled on printer. how to do it please? i tried to use following TONER [oid("1.3.6.1.2.1.43.11.1.1.9.1.1")/0.6000*100] % Remaining but its showing wrong. i have replaced with new toner (also tested half used toner but no ...

cicserver

I downgraded to version 6.29 for test purposes, and now the queue is changing on the fly properly without disconnecting the active users.

(both hotspot and pppoe working ok now)

cicserver

Try this:

/ip firewall layer7-protocol add name=youtube regexp="^.+(youtube.com).*$"
/ip firewall filter add chain=forward protocol=tcp dst-port=80,443 layer7-protocol=youtube action=drop comment="Block YouTube"

.

its giving following error

mterror.PNG

cicserver

Is there any way I can mark traffic for youtube ?
(so that i can route it to second gateway)

I saw few posts on forum as well but most guys telling that not working. any working solution for it?

cicserver

exactly what I needed. Working Gr8. thanks for the sharing.

cicserver

Hi, I am using hotspot and linux base freeradius billing system. I have enabled login by mac and created users in radius with mac address. Problem is that when user tries to browse internet, he still see login page for first time, and in mikrotik logs, i can see user logged in by mac successfully. w...

cicserver

Greetings, I am facing a big issue related to DDOS attack. there is a web site name "http://quezstresser.com/index.php". few of my opponents are using this site to send DDOS attack to my mikrotik. I tried to make many firewall rules from wiki and here there, but still i am unable to stop i...

cicserver

i also faced this issue for about 2 weeks, but now its working.

cicserver

Sorry, I forgot to reply again here. # set some parameters for fetching dynamic walled garden entries :local server [:resolve "myserver.com"]; :local url "/prepare_walled_garden.php"; :local fileName "walled-garden.txt"; # set the comment marker that distinguishes dyna...

cicserver

any solution for lopp issue? i am using this script and its working perfect in 5.x version, but with version 6.33 its LOOPING and keep adding same hosts again n again until i stop it

cicserver

I am trying to use this method (but for importing hotspot walled garden list). on version 5.x it works fine BUT on 6.33 version, it goes in LOOP, means the file contains just 4 entries, but the script keep adding them again an again until i stop it manually. how can I remove this looping bug for 6.x...

cicserver

is there any possibility that i can monitor remote linux services" Like squid/mysql is running or not?
I am using it for windows base system but no idea for linux.

cicserver

In any version below 6.32.
So in 6.31.x it works.

Thank you I tried 6.29 and it worked !

cicserver

In which 6.xx version it works ?

cicserver

ok what i have noticed so far is that when i try to send many sms one by one via command or script, it eventually gives this error. After rebooting mikrotik, i dont send sms manually, and it works fine via scripting like different alerts sms works fine. I tested it for about weak and so far sms are ...

cicserver

I have following script /system reboot OR /system reboot; but when i execute this script manually it asks for confirmation. how can I auto input Y so that i dont have to press key manually? Task is to reboot mikrotik from the script ON DEMAND (from the linux ssh execution, i can successfully ssh and...

cicserver

same here. (ver 6.32 / 6.29)

/too sms print

action timed out - try again, if error continues contact MikroTik support and send a supout file (13)

cicserver

I have cloud core series and gsm usb modem attached with it. ON frequent basis i receive this error [admin@mikrotik] > /tool sms print action timed out - try again, if error continues contact MikroTik support and send a supout file (13) I tried ver 6.32.2 and 6.29 as well, but with same problem. I h...

cicserver

is there any way i can get details report on mikrotik via sms (and email) like health, system, internet status, ?

cicserver

Create global variable with some value (username1) :global variable username1 Use $variable in your script. When you need, simply change the value of specified variable: :global variable username2 This way you will be able to run same script, by only changing one variable. Ok I got it. Every time i...

cicserver

IMHO the only way is to use global variables http://forum.mikrotik.com/viewtopic.php?f=9&t=23041 Thank you for your reply. I already read that before posting, but its not a neat solution. I wanted to pass simple variable like we do in bash. Example: /sys scr run Myscript username1 /sys scr run ...

cicserver

how can i pass my dynamic variable from command to script?
example:

/sys script run MYSCRIPT MYVARIABLE

(MYVARIABLE can be dynamic like user1 or user2 etc)

cicserver

Greetings, I have dual wan PCC configured with src-address as classifier. My requirement is to print connection mark of this ip, so that I can know on which wan user connection is going via. Example: I can print specific ip connection via /ip fir conn print where src-address~"192.168.0.1:"...

cicserver

Nice Tip! but username must be then COMPLEX enough so that guessing should be impossible for guest. IMO username should be 10-12 characters long.

cicserver

If I understand what you're trying to do, maybe you could add a blackhole route for the same destination with a higher distance. When the lower distance one becomes unreachable, the blackhole route will become active. For example: /ip route add disabled=no distance=1 dst-address=4.2.2.1/32 gateway=...

cicserver

I created two static routes like this /ip route add disabled=no distance=1 dst-address=4.2.2.1/32 gateway=pppoe-out1 scope=30 target-scope=10 add disabled=no distance=1 dst-address=4.2.2.2/32 gateway=pppoe-out2 scope=30 target-scope=10 Now in ip > route > rules , i added rules like this /ip route ru...

cicserver

/ip route rule add action=lookup-only-in-table dst-address=8.8.8.8/32 table=pppoe-out1 This will affect client traffic as well, unless you narrow it down with a src-address as well, but it is a way to force that destination to only ever use ppoe-out1. Otherwise what happens is if there is no active...

cicserver

Can anyone please help ?

cicserver

how can i get specific value only from the command ? Example i want to get only IP address of radius server from this command /radius print admin@TEST] > rad print Flags: X - disabled # SERVICE CALLED-ID DOMAIN ADDRESS SECRET 0 ;;; radius ppp 1.2.3.4 radsecret i want to print value of 1.2.3.4 only. ...

cicserver

hmmm i wish if userman can integrate mysql DB in it

cicserver

you can put a router with pppoe-out1 then send an ip to your mikrotik this router will be your gateway as WAN1 we dont want to add another hop/router, dialing must be done via mikrotik. modems will act as bridge only. any other solution? I if I mark routing in OUTPUT chain it will solve my problem?...

cicserver

Hi... /ip firewall mangle add action=mark-routing chain=prerouting dst-address=8.8.8.8 new-routing-mark=WAN1_route /ip route add distance=1 gateway=1.1.1.1 routing-mark=WAN1_route change 1.1.1.1 with your WAN1 gateway @ronix when i run traceroute from mikrotik using both wan links, i see same gatew...

cicserver

you need to add this code in scripts

is there any possibility to implement it for PPPOE USERS (with userman)
?

cicserver

Hi
I have userman on 6.3.x rb series. I want to print users whose expiry is after 3 days. is there any code / script i can use to get such users list from script command? the goal is to get those users list and send email or sms alert ?

cicserver

Greetings all, I have two dsl links wan links on my routerboard. both dsl modems are configured in Bridge mode and dialing is being done by pppoe-client from RB by pppoe-out1 and pppoe-out2 . I have configured a WAN monitor script which monitor Primary wan link by ping to 8.8.8.8. I have create fixe...

cicserver

Almost... add "url" to that, and escape the "?": /tool fetch url="http://KANNELIP:13013/cgi-bin/sendsms\?username=kannel&password=passwordto=0123456677889&text=Welcome+Message+This+is+test+message" Thank you @boen_robot It worked perfectly ! in the mean while, ...

cicserver

Hello all, Hope every one is doing good here :) I need some help in scripting. at my home I have mikrotik router with pptp client which dials into my office network linux base pptp server. problem is that my home wan connectivity is very poor and frequently it gets disconnect and quickly re connect ...

cicserver

I have an email server hosted behind mikrotik. I forward port 25 from WAN interface to internal mail system using nat rule. at email server i also have Symantec anti spam installed. Yesterday I faced issue that my public ip got listed in BLACK LIST at barracuda and another spam list , I know my user...

cicserver

Can KANNEL accept requests from HTTP (based on which it would send an SMS)? If so, you should be able to use "/tool fetch". To send sms via kannel we use following in linux or via browser curl "http://KANNELIP:13013/cgi-bin/sendsms?username=kannel&password=passwordto=012345667788...

cicserver

How can I send SMS from Mikrotik using KANNEL (hosted on my radius box on same LAN ) ?

Example: I want to send some alerts like mikrotik status, health or others , generated by various scripts using KANNEL gateway?

cicserver

Greetings to All, I have user manager with various profiles and quota limits for users. Is there any possibility that the system can send warning email/sms alert to users who reaches 80% of there quota limit? Can we do it with any script or likewise? The email should be send only one time when user ...

cicserver

To write all android devices' MACs and hostnames to the router log: :foreach dev in=[/ip dhcp-server lease print detail as-value where host-name~"android\\-"] do={ /log info ("Device with MAC address" . ($dev->"active-mac-address") . " has the hostname " . ($...

cicserver

Is there any possibility that I can get MAC Addresses of Mobile devices like ANDROID / IPHONE from the Mikrotik DHCP Leases ?

I want to get there HOSTNAME name and MAC Address (or mac addresses in ADDRESS LIST or file or whatever possible

)

cicserver

How can I recover password from my backup file (taken from ROS 6.28). Most of the sites which can show password from backup file donot work any more with these new backup files.

Is there any way I can get the password back from my backup file ?

cicserver

How can I display total time of downtime? example above script shows only from - till time, how can i show lets say "router was down for 36 hours" or "router was down for 1 day 16 hours"?

cicserver

the operator asked to save pages in mikrotik internal memory which is by default not possible (to host html pages in mikrotik like web server). thin link spacemind posted requires web server hosted locally or externally. I used this on a small local network and it worked Howto install APACHE web ser...

cicserver

Don't know how , but it worked perfectly

Thank You All !

cicserver

actually what i want is to see the last tie when was router ok. so something like lastseen value and the current one on RB. so i can calculate difference for how long the RB was down.

cicserver

How can I print Specific Environment value only? Example I have script which updates an environemtn variable with current date time, now i want to print this variable only (without other details. for example if i try to get value from varibale it shows 3 lines and then in logs it doens't show any th...

cicserver

Hi, I have a requirement that I want to know when router reboots, it should ECHO in LOG that when was last time router rebooted or powered off and how much time it was off by comparing it with current date/time. Example the script should show in LOGs as following Router last reboot (Value-A) : xx-da...

cicserver

Hi, I have 10 vlans configured in mikrotik. Now my task is to 1# Print number of active users on each LAN , example is vlan1 = 20 (20 is active number of users) vlan2 = 10 vlan3 = 15 2# Print specific vlan connected users numbers like vlan1 = 20 I tried to print like /interface vlan print brief from...

cicserver

is creating such rule will be fine ? any side effects of it?

/ip firewall filter
add chain=forward comment=to_WAN" out-interface=WAN
add action=reject chain=forward comment="Block vlan subnets in forward" reject-with=icmp-net-prohibited src-address=\
    192.168.0.1-192.168.255.255

cicserver

Greetings to all, I need some help. I have configured an cisco 3750 switch to create vlan and connected with mikrotik. Mikrotik have no firewall/nat rule at a moment. Configuration of switch is as follow Port 1 trunk = Connected with Mikrotik Port 2 = Laptop-A Port 3 = Laptop-B Mikrotik vlan interfa...

cicserver

Both ideas are great and as I can see from the snapshots, they are actually working. thanks for sharing the scripts, it helped me a lot because most of the time at remote locations, I don't have internet do its a very good and quickest way to get information from my Mikrotik System attached with the...

cicserver

Thank You

cicserver

I am trying this

/ppp active print count-only file=activeuser.txt

but it's not creating file. I have tried it in 5.x and 6.x versions.

cicserver

ssh admin@192.168.1.1 /log warning \"hi hello\"

Thanks a lot. It worked Gr8!

cicserver

I have configured password less login to mikrotik. Now I want to print an log entry in mikrotik LOG by ssh from my linux box but its not letting me print any text if it contains spaces For example this is not working ssh admin@192.168.1.1 /log warning "hi hello" expected end of command (li...

cicserver

I have mikrotik acting as pppoe server for user. DUAL WAN (wan links are pppoe client) PCC is also configured on same RB. At one separate port I have connected my radius server in it. inside LAN I can access it but from the internet its not accessible. I created config to do port forwarding but its ...

cicserver

If you want ssh, wouldn't it be better to use ssh instead of telnet?

/system ssh address=192.168.1.1 port=1234 user=yourusername

it worked! strange I searched google and mikrotik forum but couldn't find or maybe couldn't see it

Thanks @Sob

cicserver

From my mikrotik box, I am trying to ssh to linu xbase host which have non standard port for ssh like 1234, but it gives following error after connecting /sys telnet 192.168.1.1 1234 Trying 192.168.1.1... Connected to 192.168.1.1. Escape character is '^]'. SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.4 [an...

cicserver

got it

:put [/tool user-manager user get value-name=actual-profile  number="test"]]

cicserver

I want to get actual-profile name of specific user only. I tried /tool user-manager user print where username="test" but it gives lots of details, I want to print only the PROFILE name user "test" is belonged to like 512k how can I get this value? without any other details.

cicserver

Thanks, It worked perfectly. Ok one more question. Is there any command I can use to print specific user profile ONLY? Example this command /tool user-manager user print but this command prints lots of data, I only want to see what profile user currently have? like 512k Flags: X - disabled, A - acti...

cicserver

I have User Manager with different profiles. I want to know that is there any possibility that I can renew a user account via command? (not via userman gui)? example if a user account is expired , I want to refresh it via command,

Any help would be appreciated

cicserver

BUMP

cicserver

Any one ?

cicserver

I know you have given right info, but dueto my lack of knowledge, I am unable to understand. Can you please give some rules examples :( does these two accept rules are necessary? I ahve just copied the pcc script from the internet and working fine, its just PORT FORWARDING issue :( I understand - b...

cicserver

Greetings to all, I need some help in routing specific destination request to go via specific wan in PCC. I have dual wan PCC working fine. Both ISP's have there own media portal and both have restricted that there ftp can be accessed only if the requests comes from there assigned IP subnet series. ...

cicserver

I know you have given right info, but dueto my lack of knowledge, I am unable to understand. Can you please give some rules examples

does these two accept rules are necessary? I ahve just copied the pcc script from the internet and working fine, its just PORT FORWARDING issue

cicserver

Greetings to all, My setup is as follows. 2 DSL links, modems are configured in bridge mode. Mikrotik is dialing the ISP Wan connection which are pppoe. This server is also configured as pppoe server for client end. I have configured PCC (source base address approach) for load balancing the wan link...

cicserver

I am looking for help on Asterisk IAX2 Trunking one-way voice issue. I am using free pbx v1.4 in linux server and install Asterisk v1.8.11.1 mikrotik meta-router. now when using IAX2 trunk mode getting one-way audio. But working fine with sip/ without IAX2 trunking. On other hand, we have installed ...

cicserver

How can we simulate pppoe connection on routerboard? example is i have CCR model and I want to have an idea/test of resources / performance of RB as pppoe server by somehow simulating 1000 or 2000 pppoe connection? how can I do it ?

cicserver

Perhaps other users can share their successful experience by routing skype over different gateways. But as skype can use 80 and 443 ports for data/voice/etc, it might be difficult to handle it.Another approach for this setup, - forward all traffic over second (slower gateway), including skype and o...

cicserver

Ok thank you very much for the update, I will test this in lab at weekends, and will post updates.

cicserver

Dear DjM,
I was looking for it since long. Can you please provide more information? What ROS version you are using? Can you please provide any sample script in which we can pass variable?

cicserver

Greetings to all,
In my RB, i have two wan links. Is there any way I can route only SKYPE traffic to second wan link ? like skype chat/file send/voice/video ?
Have any one successfully done it ?

cicserver

check this: /ip address :foreach i in=[ find interface=wan] do={ :local ip [get value-name=address $i] :local status [ get value-name=disabled $i] :if ($status = false) do={ :log error "ip address $ip" } } change the interface name.. Working Great Thanks man. I want to give but where the ...

cicserver

@cicserver the solution you are looking for is not very mature. Either you should try some tunneling to hide the traffic so that ISP cannot detect it, or contact ISP for some proper solution. In the meanwhile try this.Following script is for for 8 Public IP's. :D Its working like a charm :) thanks ...

cicserver

I have Wan interface with 4 ips (means 4 ips are assigned to single interface and only one ip is active rest are disabled) I am using followign script to print WAN ip in LOG window :global externalInterface "ether1" :local currentIP :set currentIP [/ip address get [find interface="$ex...

cicserver

Thank you @skot But the problem is that after applying what you posted. when internet is down , it changes ip to second one, but if the 2nd ip is also not working then it dont jump to 3rd or 4th, in short, if the net is down, it simply changes ip to second one, but if the second ip is also not worki...

cicserver

Finally got it working with following: :local ddnsuser "CHANGEIP_USERNAME" :local ddnspass "CHANGEIP_PASSWORD" :local ddnshost "CHANGEIP_YOUR_DOMAIN_NAME" :local ddnsinterface "WAN_INTERFACE" :global ddnslastip :global ddnsip [ /ip address get [find interface=...

cicserver

Ok. And what you already did for that? i am using a script (from blog) which can change ip to second only. example is here: BUT THE ISSUE IS IT CAN CHANGE IP TO 2ND IP ONLY, I HAVE /29 POOL AVAILABLE I WANT TO JUMP TO SECOND ONE 3RD ONE AND SO ON. i am using a script (from blog) which can change ip...

cicserver

@eternal0
After running this script, I am getting error "invalid internal item number"

cicserver

I have a 4 public ips available, e.g: 1.1.1.1-1.1.1.4 I have configured only 1 wan ip on mikrotik wan interface i.e 1.1.1.1 Now I have a problem that my ISP some times block my wan ip address for one hour dueto some grey traffic passes sometimes from my LAN which is a requirement for my users. (this...

cicserver

I recently upgraded mikrotik from 5.20 to 6.24 , now the ddns script for changeip.com is not working.
can one please post the updated changeip.com script for ver 6.xx?

cicserver

I think the best way is to block these kind of sites by dns filtering. First you need to setup a transparent dns redirecting: /ip firewall nat add chain=dstnat action=redirect to-ports=53 protocol=udp dst-address-type=!local dst-port=53 add chain=dstnat action=redirect to-ports=53 protocol=tcp dst-...

cicserver

I believe many admins are searching for this. Howto effectively block the HOTSPOT SHIELD software. I have tried the method described in this forum/wiki and other places. But non work :( Is there anybody who have successfully blocked this Evil application? 8) any complete ip address list which hotspo...

cicserver

i was having the same issue but found the same solution as @rmmccann mentioned,
I got it from https://aacable.wordpress.com/2014/11/1 ... sconnects/

cicserver

How can we simulate pppoe connection on routerboard? example is i have CCR model and I want to test the resources / performance of RB as pppoe server by somehow simulating 1000 or 2000 pppoe connection? how can I do it ?

cicserver

How can we silumate pppoe connection on routerboard? example is i have CCR model and I want to test the resources / performance of RB as pppoe server by somehow simulating 1000 or 2000 pppoe connection? how can I do it ?

cicserver

Ok I have managed to get this cable with coupler. but he issue is that its showing LINK OK , light on sfp port is also ok, but no data is passing.
(to show LINK OK message on sfp, i have to set it to 1gb manual (no auto negotiate), tried all the options but no luck,
What could be the reason ?

cicserver

I have a mikrotik routerboard for my local network. Now I want to establish vpn connectivity with another office who have CISCO ASA 5510 with VPN. currently I have to use Cisco vpn client in order to connect to there office. Is there any way I can connect my Mikrotik to there Cisco VPN ?

cicserver

I am also facing this issue that only pages which are in DNS cache of mikrotik or client windows pc, then maintenance page comes ok, other wise fail to display. I added static entry for all sites pointing to a ip, but when internet comes back, user have to do flushcache , any proper work around to s...

cicserver

Ok I found solution for it.
instead of adding dynamic pptp interface in route, I added route in ppp section and now its working. thx to aacable guide as he wrote on my request.

cicserver

have you find any solution for it ?

cicserver

I have configured a VPN Server on Head office mikrotik router. At branch mikrotik I configured it as vpn client. connectivity is working ok at both end and clients can directly access each other with out natting as proper routes are setup. BUT when branch mikrotik goes offline/power off, and when it...

cicserver

fiber cable from ISP end cannot be replaced dueto lack of support from there end. I must find an solution to somehow connect (isp) SC connector to CCR. What converters or sfp modules I would be require? can you please name or part no that i can order?

cicserver

I recently acquired cCCR1036-12g-4s. I have two ISP's fiber connection which are connected with media converter then cat5 cable is inserted in mikrotik. I want to direct insert Fiber cable of ISP into CCR. I purchased S-53LC20D and its not compatible. Which sfp module i required to purchase to inser...

cicserver

have you found any solution for it ? i am suffering the same here.

cicserver

Hello, I am running pppoe server on mikrotik 6.21 Recently I acquired public ip pool from my local ISP to provide it to users. All thing working ok so far. the problem is every time the user connect to PPPoE server , he gets the same IP address as last connection IP address, while the IP pool has un...

cicserver

Hello Everyone, I am trying to configure a Site to Site branch connectivity using Mikrotik RB at both end. But the problem is that both sites have same subnet running at each other. e.g: SITE A users have 192.168.10.0/24 and SITE B also have same series. I cannot modify the IP addresses series at bo...

cicserver

I want to redirect expired users to a non payment reminder page. Everything is working ok, but for the payment reminder html page, I am using external web server. To save resources, is it possible i can upload/host the html page on mikrotik rb (in hotspot folder or similar) ??

cicserver

@plisken After showing this to my friend, he said that if you create bridge this way, you will not get wire speed, or lot of load on cpu, is it true? if yes then ? [keeping in mind that this is quite a heavy traffic network dueto lot of media sharing here there) also will this create fail over also ...

cicserver

Hi, I have two questions for mikrotik switches. 1- Does mikrotik switches support STP ? (Like Cisco does to prevent looping) 2- In these switches, how can I create ring network for high availability. for example I have a main switch at remote area, and I have provided two uplinks from different rout...

cicserver

I have main mikrotik acting as pppoe/hotspot server. Now i have acquire Mikrotik 24 ports switch.Now I want to implement VLAN to isolate user area. For example users from VLAN1 should not be able to communicate with VLAN2. CRS Example: Port 1 = Connected with Mirkotik RouterOS LAN port. Port 10= Are...

cicserver

I am interested to know it too

cicserver

I have configured pptp server on my mikrotik so that I can can connect from outdoor locations for some lan management and other purposes. (at home i have different isps with dynamic ips) Problem is that I see a lot of attempts from so many public IP addresses trying to connect with pptp server, How ...

cicserver

I have dual PCC on RB.(and at some places four wan)
I wan to setup VPN server on same RB so that some remote users can dialin and get access to LAN.

Does VPN Server with PCC work? or what config would be required?

cicserver

I have three RB (rb750gl, rb1100ahx2,etc) with 5.26 firmware. all are working at different sites as a simple router configured as pppoe+hotspot server for lan users. all of them are having strange issue of HIGH cpu usage and in profile, it shows that IPSEC is chocking the CPU. there is no vpn or nay...

cicserver

Hi, I am trying to display ping ms delay result in LABEL/APPEARANCE. for itneret hosts, its showing ok result like for gogole its showing 125ms. but for some LAN where I get 1ms delay, dude is showing 0, how can I show the right result ? using following code in label [array_element(ping(device_prope...

cicserver

Finally got it. I think I had to add " getTemperature() " in AVAILABLE section too. attached is image of working config. Thank you every one for your suggestions and guidance which encourage me to solve the issue :) , So I guess encouragement is the key to success ;) final_resukltok.JPG

cicserver

yes i m getting value in appearance using the FUNCTION. but unabel to get DIVIDED value in the FUNCTION/PROBE

temp.JPG

cicserver

Try to use that function in the label display, to see if the function returns a correct value.

Yes I am getting value in appearance / label. something like

temp.JPG

cicserver

I created FUNCTION as you suggested, but still I am not getting DIVIDED value. see the snap of my Function & PROBE.

1234.JPG

123.jpg

cicserver

I have a Temperature & Humidity monitoring device (Emerson IRM-S02TH) I can get its value via snmp, but it gives value like this temperature, 1.3.6.1.4.1.13400.2.62.2.1.2.0 = 2220 so to show it correctly in Dude DISPLAY, i use this Temperature: [oid("1.3.6.1.4.1.13400.2.62.2.1.2.0")/10...

cicserver

I dont want to configure BRIDGE for a 24 port mikrotik switch.
is there any native option option to enable rstp for all ports?

cicserver

Greetings, Two buildings are connected with each other via Fiber link. I also have P2p2 wireless connectivity between both ends. now I want that if Fiber link goes down, the link should auto switch Wireless link and when revert back if fiber link restore. Some one told me that I can do it with creat...

cicserver

I have a small network with un managed switches. How can I prevent Broadcast storm ? or loop broadcast?
in cisco , it shutdown the effected port, how can it be done automatic on mikrotik switches? any link for it ?

cicserver

Great Thank you

cicserver

I have few mikrotik boxes with old 5.x which dont have check upgrade option
Is there any way I can download the file on mikrotik directly by command ? (so that I dont have to manually upload the file on that box, because usually at my site, my UPLINK is very slow)

cicserver

Can we load balance DNS server requests with other servers in Mikrotik? like in round robin style ?

cicserver

yes both wan rules packets are counting in mangle, but as i mentioned previous, WAN-1 is counting fine, but wan-2 mangle rule is counting very less packets ratio is something like
packets for wan1 = 100 ,
wan2 = 5 or 10

cicserver

I am using both-addressess-and-ports classifier so it should auto load balance requests among both wan, I am testing by putting maximum load from LAN side, using IDM to download multiple big files, but still it downloads from WAN-1 only. and if power of wan-1 , then the wan-2 starts to utilize fully.

cicserver

Dear all, I am stucked in a situation and I need your help. I have a mikrotik RB acting as a PCC (gateway) load balancing two wan links. both links are of same quality. I have tested them separately and they work fine equally. Issue is that only one WAN-1 link is used and second WAN-2 remains idle, ...

cicserver

I just want to have proper logs of users browsing, either via Mikrotik web proxy, or route them to SQUID proxy.

cicserver

I have pppoe server, I want that when user login, he should be redirected to one of my ad page, after that he can continue browsing, like I can do it in hotspot using

$(link-orig)

code.

cicserver

How can I log users browsing with there user name ? (instead of ip address)

cicserver

How can I log users browsing with there user name ? (instead of ip address)

cicserver

Hi, "Allowing less secure apps" on gmail don't assure that the mail will be sent. Sometimes it is sent and sometimes not, I don't know why. Are the people here COMPLETELY SURE that upgrading to 6 solves the problem and that this is the only solution? Anybody has had 100% success sending m...

cicserver

4.PNG

cicserver

Hi, I am using DMASOFTLAB Radius Manager (freeradius backend) along with Mikrotik as hotspot and pppoe server. I have following two issues Issue # 1 Some time a user is shown active on PPPoE as well as on hotspot, mac address shows for both sessions are are different , which means a single user is u...

cicserver

Is not one issue, gmail one day decide to mark as insecure all the clien who are not supporting some crypto protocols. 6.x as the new protocols, but on 5.x are not presents and for this are considered unsecure. Simply go on gmail and change the option as I write before. I have already checked this ...

cicserver

in RouterOS v6.17 this command works fine: [admin@normis] > /tool e-mail send server=173.194.66.108 port=587 user=mygmailid password=mygmailpassword to=myinbox@hotmail.com subject=test body=test from=mygmailid@gmail.com start-tls=yes (I am using "start-tls" because syntax is different in ...

cicserver

I have tried every one suggestions , but no results, I still get INVALID FROM ADDRESS. It seems its picking subject as a from address, strange. If I change subject, it gives this address as invalid from address.

As showed in the image below...

cicserver

Hmm then I must ask for the confirmation before upgrade, as there are so may RB's with 5.26.

Is Gmail mail send support not working with 5.26 ?

Can other members confirm this?

cicserver

in RouterOS v6.17 this command works fine:
(I am using "start-tls" because syntax is different in v6.17)
So maybe time to upgrade?

So are you saying that now i cannot send email using gmail id in mikrotik 5.x ? Do I have to upgrade must ?

cicserver

I am using Mikrtoik 5.26 at various branches, and have configured gmail account which sends me mikrotik backup and other alerts daily. It was working fine from past few months BUT from 23rd July, it have stopped sending me emails, and seeing errors in logs like error sending e-mail <test>: invalid F...

cicserver

I have a old mikrotik 3.3x box running in a network with User Manager which have around 1500 users.
Now I want to upgrade, How can I migrate User Manager (MT) 3.x users to 5.x ?

cicserver

If I disable the interface or ip address on fiber link, then how come script will know the main fiber link is up and it should switch back ?

cicserver

Ok as a workaround I have made a script which check ISP gateway and internet host, if it found no response, it disables the fiber interface, and enable the wireless lin interface which have same ip configured as fiber link. It then sends me an alert email so that I get aware of link down, and when f...

cicserver

I would ask for a different subnet for the second link and use two default routes with cost 1 and cost 2.If they set you up with a wireless backup to your existing fiber one, I bet the both terminate in the same router, assigning a different subnet to a second interface won't be that painfull.cheer...

cicserver

I am afraid this would require some scripting. The way I am thinking about it, is assign the IP to the two interfaces, but leave the backup interface disabled like: /ip address add address=1.1.1.1/24 interface=wlan1 add address=1.1.1.1/24 interface=sfp1 /interfaces set wlan1 disabled=yes Then, if t...

cicserver

I have main fiber link with one public IP address. Yesterday the ISP have provided me wireless backup link, it uses the same IP/GW , just the transmission medium is different that is Wireless. I want to put both cables in mikrotik RB and if Fiber goes down it should automatically use the wireless li...

cicserver

thank you both of you

cicserver

You can not ping http://www.google.com on script, you must resolve first the DNS to IP... Is strange: where you have put the script? I am not using google.com, I am using PUBLIC IP addresses for test purpose like isp gateway IP and 8.8.8.8. I add the script in SCRIPT section like I use to add other...

Search found 303 matches