Installing a new RB411 4.16 with an XR2, using NAT. Everything was great until I enabled WPA, all of the interfaces went away in Winbox. I replaced the XR2 with another one and all seemed good. Then after a few minutes after enabling WPA, the interfaces went away again. Both interfaces seem to disap...

Did a 'lil more work on this today, I had to install 4.17 on it to get it going. Then after working on it a bit, the interfaces went away again. Took out the wireless card and had the Ethernet interface back. Installed a different XR2 card and had both interfaces back. Then setup WPA and all the int...

programming up a new rb411 with 5.1 on it. Was all done, and was setting up WPA and things starting acting weird. I rebooted and my interfaces went away, there is nothing in the interface list. But there is still information in the DHCP server, routes tabs and such, under interface, it says unknown....

[admin@MikroTik] > /ip address print detail Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Public Static address=199.X.X.X/28 network=199.X.X.X broadcast=199.X.X.X interface=Public actual-interface=Public 1 ;;; Internal Privates address=10.X.X.X/24 network=10.X.X.X broadcast=10.X.X.X interface=...

I tried to PM you with the info as I'm not totally comfortable with posting all of my info in this thread, but it says I'm not authorized to do so. How else can I get the info to you?

One more thing:

With this rule in I can now get into my workstation via RDC from an outside connection.

Now my workstation on the inside is the only one that cannot connect via RDC out to a remote desktop.

Thank you, I was missing the "in-interface=WAN"

How do I port forward RDC (3389) from the wan side to a private address on the inside? Also and https (443)?

I have no idea if this will help or not since we are running all StarOs on our AP's. I have experienced the same issues as you have described, and determined that it was one customer that was causing the issue. He has a -79 signal, and only happened when he was uploading to many different hosts. I k...

Got my list created and all looks good there, however when I type in the last line I get the following: [admin@www.mikrotikrouter.com] /ip firewall filter> add chain=forward protocol=t cp port=25 connection-state=new dst-address=!OK-smtp action=drop value of range must have ip address before '-' [ad...

You want to block any new connections from your localnet clients to other email servers than yours for outbound email? This should do: /ip firewall filter add chain=forward protocol=tcp port=25 connection-state=new dst-address=!xx.xx.xx.xx action=drop Replace xx.xx.xx.xx with your email sever ip. T...

Destined to certain servers. We just want to drop everything that isn't meant for our specific mail servers. destination of the email message is inside the message. filtering based on that can only be done if you are the SMTP server that sends it. not possible on RouterOS We changed out our core ro...

I did what you suggested, with the exception I changed the address subnet in my list to make it easier. I just used a 192168.10.128/25. When I have the rules in the mangle tab enabled, the traffic comes to a crawl for the entire ap, almost nothing. When I disable them, traffic comes back to normal. ...

Ah, like I say, still learning. But I did get it figured out and working with your help, Thanks,

Eric

Destined to certain servers. We just want to drop everything that isn't meant for our specific mail servers.

We need to add a rule that would block/drop all outgoing mail except destined for certain mail servers. What is the best way to do this? Still new to MT, but learning lots!

Eric

I guess the manual is wrong then.

http://www.mikrotik.com/testdocs/ros/2. ... r2peer.php

I am having trouble typing in the following text at the command line that I copied off of the wiki: [admin@MikroTik] ip firewall mangle> add src-address=10.0.0.0/24 mark-flow=p2p-out \ \... p2p=all-p2p action=passthrough [admin@MikroTik] ip firewall mangle> add dst-address=10.0.0.0/24 mark-flow=p2p-...

I am having trouble typing in the following text at the command line: [admin@MikroTik] ip firewall mangle> add src-address=10.0.0.0/24 mark-flow=p2p-out \ \... p2p=all-p2p action=passthrough [admin@MikroTik] ip firewall mangle> add dst-address=10.0.0.0/24 mark-flow=p2p-in \ \... p2p=all-p2p action=p...

New to Mikrotik: I see a Radius section, can I set this up as an actual Radius server? I would be authenticating wireless users via Mac addresses. Have you picked out a radius server yet? I have tried many in the past years, and even developed my own the past couple of years. I would be willing to ...

I am attempting to setup a Queue to limit P2P uploading from our customer base. Seems simple enough to setup, however, If I set the upload to 1m and the download to 2m, the user can only download 1m. So I swap the upload to 2m and the download to 1m and the user can still only download 1m. If I set ...

We hand out privates to our clients. Currently we are shaping bandwidth at the ap using non Mikrotik products (for now). Just installed a Mikrotik Core router which we are NATing at. I would like to bandwidth shape our customers as follows: Range 192.168.10.75 - 192.168.10.30 512K Then we specify in...

New to Mikrotik:

I see a Radius section, can I set this up as an actual Radius server? I would be authenticating wireless users via Mac addresses.

Just purchased a PowerRouter 732 and am setting it up on my network as a core router. I have 4 different legs that go North South East and West. I am going to use one Ethernet port for each leg. I am also using different networks on each leg, and it is a statically routed network. The 5th port will ...

I ordered in a RB750G and a couple of RB411U's (all I could get) and some radios and am wanting to setup both of the 411's as AP's for the guests. I would like to set them both up with the same SSID's so that there is less confusion. I looked at the hotspot setup, and I don't think that's what I'm a...

New to Mikrotik, thought I would check out a few of the tools available, and may implement Mikrotik in our network. I installed the latest version of Dude, and it found all of my network with the exception of the segments running OLSR. I'm guessing that OLSR is not supported? This would not be good ...