MikroTik

djfrancis

There is no way to avoid this? I need to put correct OID in our network monitoring software and this is not valid. If i write in AP console "/interface wireless registration print oid" i get this oid: signal-strength=.1.3.6.1.4.1.14988.1.1.1.2.1.3.228.141.140.20.29.177.3 tx-signal-strength...

djfrancis

Hi guys, why i get an invalid oid??

MIKROTIK-MIB::mtxrWlRtabRxStrengthCh0.'l;k.IO'.1

it is possible to correct this? Thanks!

djfrancis

Hi BartoszP, may be the problem was the same, but in my case, all infected CPE are now PPPoE server with AC-NAME=Mikrotik and service name=server.

When i try to log in to CPE i get invalid username/password..

If you need additional info, please tell me.

Thanks.

djfrancis

Hi, since last update to v6.42 severals SXT on our network, was infected/modified creating PPPoE server itself, and now our pppoe-clients are connected to "false" servers with http redirects to "Your Internet Connecion has been Hacked"!! If i make a PPPoE scan on a CPE client, i ...

djfrancis

Thanks for your reply blajah. In this case the only thing that i need is create 2 mangle rules to change tcp mss to 1452 or 1440 right? In my case: Ether2 MTU: 1500 Vlan100 (over Ether2) MTU: 1500 PPPoE Server: - Max MTU: 1480 - Max MRU: 1480 And then, create this 2 rules on firewall: /ip firewall m...

djfrancis

Hi guys i have a little question about MTU .. I need to run to PPPoE Server over to single VLAN in our CCR1036 to our clients and i have a question about set MTU on interfaces to avoid fragmentation problems. The basic diagram is this: CCR1036 ---------- (eth cable) ---------- SWITCH ------- (eth ca...

djfrancis

Up! I like to know this also!

djfrancis

Hi, disable or remove your xbox rules and try this rules to "make a DMZ". I use them and works very well: /ip firewall nat add chain=dstnat protocol=tcp dst-port=!8291 in-interface=YOUR_WAN_INTERFACE action=dst-nat to-addresses=YOUR_XBOX_IP comment="Redirect all TCP traffic except Win...

djfrancis

The configuration is the same as Neski but the only thing you need is write your subnet address instead a IP direction.

Regards

djfrancis

Mikrotik devices dont support WOL. If you shutdown the device, you will have to power on manually.

Regards

djfrancis

Yes, your settings are correct.
Thx
Hello..

For the same above scenario if I want to open ports for all private IP's how would that be.

Thank you.

Can you explain your question better?

Regards

djfrancis

Isn't mandatory. You can change if you like or leave as default

Regards

djfrancis

djfrancis

Try turn on logging in all deny firewall rules log=yes

Yours respectfully!

Hello kujo i was try to disable all firewall rules few days ago without success..

Any other tip or probe?

Thanks!

djfrancis

Up Up Up

djfrancis

Hello Adephx, your rules seem to be good. If you cant make work with your rules, try this code: 192.168.178.0/24 is your WAN network (Connected to your Ether1) 192.168.190.0/24 is your LAN network (Bridged) /interface bridge settings set use-ip-firewall=yes /ip firewall filter add chain=forward src-...

djfrancis

You're welcome

djfrancis

Yes, your settings are correct.

djfrancis

I have the impression that looking for a better channel can improve but I read on the internet and I do not achieve to give a correct interpretation to the reading of the NF in the tool of search of use of the frequency of mikrotik in synthesis I can not interpret when it is good and when it is bad...

djfrancis

Hi guys, i have a little problem/question about traceroute.. We have a /23 subnet of public IP from our ISP and i decided to split it in two smaller subnets (2 x /24), one subnet for Wireless clients and another subnet for cable clients: ISP subnet: 10.0.0.0/23 Wireless subnet: 10.0.0.0/24 Cable sub...

djfrancis

Anyone??

djfrancis

I think that you have a simple routing problem in this scenario..

Please, create a static route on main router (DHCP Server) with destination 10.10.10.0/24 and gateway 192.168.1.12 (wan interface of second router) and try now to ping between different subnets.

Regards.

djfrancis

djfrancis

Configure your AP and clients with nv2

https://wiki.mikrotik.com/wiki/Manual:Nv2

djfrancis

Hi, try this: /ip firewall addresss-list add list=WAN1 address=192.168.88.100 add list=WAN1 address=192.168.88.184 add list=WAN2 address=192.168.88.2-192.168.88.99 add list=WAN2 address=192.168.88.101-192.168.88.183 add list=WAN2 address=192.168.88.185-192.168.88.254 /ip firewall mangle add chain=pr...

djfrancis

Go to "System > Identity" on winbox and change the name or you can use this command on a terminal:

/system identity set="YOUR DEVICE NAME"

Regards

djfrancis

Find in mikrotik wiki... https://wiki.mikrotik.com/wiki/Manual:Nv2 Nv2 is supported for Atheros 802.11n chips and legacy 802.11a/b/g chips starting from AR5212, but not supported on older AR5211 and AR5210 chips. This means that both - 11n and legacy devices can participate in the same network and i...

djfrancis

Hi macdo, To get 300Mbps wireless link you need to set data rate to "default" or select from 0 to 15. At MCS 12 you only will get 180 Mbps max with a short guard interval. To get best performance, try to set your wireless link to "nstreme" protocol and to stabilize your link, cha...

djfrancis

In this case and searching in datasheet of this antenna the range in wich operates is 4900 - 5800 MHz. Im recommend you to use the frecuency 5120MHz at 40 MHz and try again your link throughput.

Regards

djfrancis

why? Check your Ethernet cable on ether4 If you have an Ethernet cable tester , then test it If you have a crimping tool, cut off both ends and make new ends. How long is the Ethernet cable ? Make sure both sides are set for auto auto You are right, when ethernet goes down and up all time the probl...

djfrancis

Do you have any rule under /ip firewall filter? This situation its very strange because you have 3 correct routes, one static with distance 1 and two connected with distance 0. With this routes you dont should need nothing more to have connectivity between subnets. Please check that all interfaces h...

djfrancis

now that I see this part of the frequency usage as it should read or interpret the part of floor noise? when it is good when it is bad what would be appropriate for a link as that greetings stay tuned :o Hello macdo, what antennas are you using with basebox (manufacturer and model)? This informatio...

djfrancis

Hello All, the only question i have today is , how many clients can a Mikrotik Hex handle ? There is no clients limit in mikrotik devices but yes tunnel limit by license. Your device is Level 4 and support up to 200 tunnels of each kind (200 PPPoE, 200 PPTP, ...) The performance depends of how devi...

djfrancis

I think as you, the masquerade rule may be wrong. Try this rule instead: /ip firewall nat add chain=srcnat action=masquerade src-address=10.10.10.0/24 If you have default route created, you dont need specify output interface in your masquerade rule. Please post here your "/ip routes". Rega...

djfrancis

You should take care with the tx-power of SXT because this CPE have 1000mW of power and in a indoor enviroment this may be a big problem because CPE may causes interferences itself. You can use this device but you need to set tx-power to a few dBm's to avoid saturation of clients and interference pr...

djfrancis

Hello Fires, try this code: /ip firewall filter add chain=forward action=drop src-address=192.168.66.100 dst-address=!192.168.66.0/24 add chain=forward action=drop dst-address=192.168.66.100 src-address=!192.168.66.0/24 The first rule allows to server to comunicate only with 192.168.66.0/24 subnet. ...

djfrancis

Please post your config or paste an export to help you.

Regards.

djfrancis

You are welcome, if you need some help about this you can use this forum.

Regards.

djfrancis

hola gracias por la sugerencia. Tengo un problema con un enlace de netmetal5 dual chain. Es un link de 18 kms. En laboratorio a 10 metros me dejo pasar los megas de mi proveedor de fibra que son 300mbps simetricos, un ccq de 98%, ruido de piso -102dbm todo bien hasta alli. Pero ya en campo resulta ...

djfrancis

Please, respect that this is English only forum. Rewrite your post in English. Thank you.

Ok Jarda, i will rewrite in english, sorry.

djfrancis

Hi ziltoid, please post your config to help you. To do this, open winbox, access to your router, open new terminal and write this:

export compact

Regards

djfrancis

Hi macdo, i think that you have a signal interference problem. If you have 100% of CCQ on Chain Tx this doesn't mean that you will have 100% CCQ in Rx Chain also.. Think in this scenario: ** Point A (AP) *** Used frequencies: - 5180 - 5200 - 5220 - 5240 - 5500 - 5520 - 5540 ** Point B (ST) *** Used ...

djfrancis

WAN and LAN interfaces on hEX are valid only if you use factory configuration of Mikrotik. This device uses LAN1 as WAN interface and LAN2-5 as LAN interface. If you configure your hEX as bridge will actuate as "switch" and if you want to use integrated firewall, you should enable it using...

djfrancis

To reset a Mikrotik device, follow this:

https://wiki.mikrotik.com/wiki/Manual:Reset

Cheers

djfrancis

Hi, try this: On NetMetal: /interface vlan add name=Vlan100 vlan-id=100 interface=ether1 /interface bridge add name=Bridge arp=proxy-arp /interface bridge port add bridge=Bridge interface=wlan1 /interface bridge port add bridge=Bridge interface=Vlan100 On RB1100AH: /interface vlan add name=Vlan100 v...

djfrancis

Hi, you can do this using EoIP tunnel, VLAN or another kind of layer2 tunnel. In AP: 1.- Create L2 tunnel over ether1 2.- Create bridge 3.- Add "wlan1" and "tunnel" interfaces to that bridge In RB1100: 1.- Create same kind of L2 tunnel as AP in ether2 2.- Create your PPPoE server...

djfrancis

Hola Diego, en principio si los dos routers están conectados directamente a internet sin pasar por ningún tipo de NAT, con habilitar el puerto 1723 TCP y el protolo 47 (GRE) en el router que hace de servidor PPTP es suficiente para poder establecer el tunel. Si puedes postea un pequeño diagrama de c...

djfrancis

Hi, please post your config to help you

djfrancis

The order is correct because HotSpot first need to verify client before gets internet. If you put srcnat rules at top, your clients will bypass hotspot rules created in NAT tab.

djfrancis

Hi, try to follow this steps: 1.- Check that ethernet cable are correctly connected to your laptop and you have "link" with your SXT 2.- If cable is ok then power off your SXT for some seconds, press RESET button inside SXT and power up your antenna with RESET button pressed. When USR led ...

djfrancis

Hi everyone, i have a little problem with this scenario. We have running a pppoe server on a bridge wich includes Eth7, Eth6 and Eth5 for wireless clients and everything works ok. Since a few weeks we started to deploy FTTH network that needs a PPPoE server also. This Fiber network are connected to ...

djfrancis

I got it! The problem was in my PC that are using GNS3 under NAT... (Internet Router)--192.168.0.1---------------192.168.0.2--<wlan>(Laptop)<loopback>--192.168.137.1-----------------192.168.137.2--<ether1>(ASBR in GNS3) I test my diagram in a real enviroment and works perfectly!! jejeje Thanks for a...

djfrancis

Thanks for your reply!

Ok, I will try this. thanks!

djfrancis

Your setup does not make sense with what you are saying - you say you only have one PPPoE server but your diagram shows two? It looks like it is not fully bridged because you show an area border router with a PPPoE stub area. This also just seems a bit of a bizarre layout - I would not connect cust...

djfrancis

Hi everyone! I have some questions about OSPF areas and PPPoE. Im training with a virtual lab using GNS3 before deploy it in a real enviroment. We have the next scenario: https://i.imgsafe.org/4ff23800cd.png Our network are in bridge mode with only one router (Gw Router) acting as a PPPoE Server for...

djfrancis

Hi all, i was search about this but i can't find anything... The problem is that if i send the command "/interface/wireless/registration-table/print" command in vb.net i dont get any response from router and vb.net throws an overflow at this line: count = BitConverter.ToInt32(New Byte() {t...

djfrancis

Zero thank you very much. I'll set up a few routers that I have in the lab with OSPF to see how it gives me hehehe

Thank you again, if I had any questions I'll ask here

Cheers

djfrancis

Good evening

Thank you very much for your help ZeroByte. I'll try what you told me in a virtual machine.

The only router that has to redistribute routes is "Router0" or should be distributed routes other routers too?

Thank you!

djfrancis

Goodnight ZeroByte. Thank you so much for your time to resolve my doubts. The IP addresses that appear in the image are just an example. I explain how my situation and to guide me if you please. Currently our network is in bridge mode as pictured below and we want to make a routed network using OSPF...

djfrancis

I've been doing some tests with the information you gave me and I have some questions that do not quite understand Question 1: Following the example of the previous image, it is possible that a client connected to the backhaul on Router 1 (172.80.1.0/22) whose IP address is 172.80.1.75 to ping a cli...

djfrancis

This is very possible....take a look at the first OSPF example in the wiki below:

http://wiki.mikrotik.com/wiki/Manual:OSPF-examples

Thanks IPANetEngineer, I will look closely at the wiki. If I have some questions I ask: D

djfrancis

note that 1.1.1.4/30 , 2.2.2.4/30 , and 3.3.3.4/30 are invalid IP addresses for /30 subnets. . . 1.1.1.X / 1.1.1.Y valid addresses are: x / y 1 / 2 5 / 6 9 / 10 13 / 14 17 / 19 etc.... Also 172.80.1.0/22 isn't valid CIDR: 172.80.0.0/22 ( ranges up to 172.80.3.255 ) 172.80.4.0/22 ( ranges up to 172....

djfrancis

Good afternoon, everyone.

I wonder if it's possible with OSPF what I show in the picture attached and if you can help me or guide to configure it.

Thank you!

djfrancis

Yes of course /ip firewall mangle add chain=prerouting src-address-list=CLIENTESA1 dst-address-list=!MYIPS action mark-routing new-routing-mark=ADSL1 ... add you PPPOE users IP addresses to MYIPS address-list and then for all mangles set dst-address-list=!MYIPS Good Luck Hassibi thank you very much...

djfrancis

Do I have to change the first three rules (routing-mark)? Or all the other rules (ping, rdp, pop3, ...)?

Thanks
i think best way is you change all of the mangles with chain prerouting.

Sorry, but i dont understand you.

Can you show me an example please?

Thanks!

djfrancis

hmm let me get this straight.... you have 3 Adsl connections and want to assign public ip to clients of yours? Theres a lot of IP public on your pool, how did u go these with ADSL? if the ISP only give us one public ip per connection.. Mi ISP gives me a /29 block for each ADSL, and another /28 for ...

djfrancis

Hello Hassibi, I tried what you said and it worked by changing the prerouting chain to output in the first three rules (mark routing). The problem I have if I change that, is that all customers leave for internet on the same DSL connection (ADSL_1), and the other two connections are not used, and t...

djfrancis

Hello Hassibi, I tried what you said and it worked by changing the prerouting chain to output in the first three rules (mark routing). The problem I have if I change that, is that all customers leave for internet on the same DSL connection (ADSL_1), and the other two connections are not used, and th...

djfrancis

I've tried but not working.

Thanks

djfrancis

Someone can help me please?

djfrancis

Hi hassibi. I think that the firewall is not the problem, as from a another company adsl can connect perfectly. The problem may be the routes, or ip addresses in address list, because instead of having the public IP address 212.4.xxx.155 has the internal ip address 172.10.0.2. When I do a tracert fr...

djfrancis

For my personal computers, playstation 3, etc...

djfrancis

Hi guys. I have a big problem to asign some public ip address to my clients. My clients can not connect to another of my clients through the public IP address. For example, a client that have the public ip address 212.4.xxx.155 can not connect to a windows server of other client that have the ip 212...

djfrancis

Hi all. I have several questions arise when I want to open ports for my equipment. I have my local network as follows: http://www.inavarro.net/images/networkmap.jpg I wonder how I can make the following settings: 1 .- Open UDP port 25000 to the IP address 10.50.0.2 and vice versa. 2 .- If a connecte...

djfrancis

Thank you very much for your response 0ldman.

That was the problem.

I had configured the WPA and WPA2 security TKIP, I have configured the WPA and WPA2 encryption aes ccm and now it works perfectly to 300Mbps, xDDD

Thank you very much.

djfrancis

Hi for all. I was buy two days ago a RouterBoard RB751U-2HnD with 802.11 b/g/n atheros chipset. I have an acer 5750 laptop with atheros chipset (AR5B97 b/g/n), but when i connect to routerboard, the maximum speed of connection is 54Mbps (Wireless G) instead 300Mbps (Wireless N). The configuration th...

djfrancis

Thank you very much changeip

djfrancis

Hi all. I have the following questions. I have created a list called "access" in mailing lists, in which I have added 10 xxxxx.dyndns.org hosts and they have dynamic IP. I would like to help me build a script that automatically update all hosts every 30 minutes for example. Some time ago I...

Search found 78 matches