MikroTik

dlopez

Router OS 7.1 on an RB3011iUAS-RM - OpenVPN in UDP mode will cause random lock ups of VPN clients requiring disconnect/reconnect to pass traffic, this has ben observed from the Android OpenVPN client, Linux OpenVPN package and Windows OpenVPN client (all latest versions) I also observed this on 7.1...

dlopez

Hi, I was wondering if there's any reason why I see that if a Download Queue Tree has as Parent "global" I get like 30Mbs of traffic and if I change the Parent of the same Queue Tree to an Interface it works as it should and gave me all the traffic, in this case arround 100Mbs.

dlopez

I thought about doing that but I was wondering if there was any other solution using something like MME or some dynamic routing protocol.

dlopez

I have the following scenario : LAN ----> RB2011 --------------------> ISP ROUTER | / SAME-----> RB751 -------------------/ LAN In order to do that I have bridged the RB2011 Lan With the RB751 Lan using an PPTP Tunnel, and for the Lan all works just fine. The problem I find is that when a Client con...

dlopez

Just let you know that after updating a RB2011L-IN and a RB2011UAS-2Hnd the activity led of every port is blinking.

dlopez

Yeah, I know that as long as it works that's what matter but I don't think that the solution for this is to disable and enable the interface that holds the route. In any case, now I have to check the VPN options since in this routers I use OVPN and every time I restore a backup I lost the certificat...

dlopez

I've just figured a way to do this using netwatch. /tool netwatch add disabled=no down-script="/interface ethernet disable ether1 \n\r\n /interface ethernet enable ether1" host=172.16.0.1 interval=00:00:05 timeout=1s up-script="" With that the connection is drop and I have 2-3 pa...

dlopez

Can you do a test using scenario 2 ? Open a cmd and type "ping -t 8.8.8.8" for a continous ping. Once it has started pull from the RB the cable of the ISP1 and see what happends. The desired effect is that the RB automaticly detects that the ISP1 path is down and rerouted the connection th...

dlopez

Yes, I've tried changing the default route when I disconect the ISP1 link but with no joy. I've setup an event on the Slave RB on the VRRP3 interface that onces it becomes master makes the other VRRP interfaces also master setting the priotity to 250. Now the problem is that if using the Slave or th...

dlopez

I've 2 ISP both connected to 2 RB2011 and this two also conected to the same Lan with VRRP on the three interfaces. The problem is that if I do a ping from the Lan to the WAN and what I lose is the WAN connection with Distance 1 then, I've to drop the connection, wait around 10s and then start again...

dlopez

No, I've 1 Lan -> 2 MT -> 2 WAN, the problem is that if the WAN connection with distance 1 gets down, until the connection is severed it will try to get out through the same route.

dlopez

I also put this question on the General forum but since no one has an answer for it I'm going to try here : I've 2 ISP connected to an RB2011LS-IN both working correctly on failover, using diferent distances on the route table, however if I've a connection already established until it ends it wont s...

dlopez

Hi, I've 2 ISP connected to an RB2011LS-IN both working correctly on failover, using diferent distances on the route table, however if I've a connection already established until it ends it wont switch to the secondary route in case the first one died. I know is a delay of about 10 seconds but after...

dlopez

Thanks for your answer dobby. I've this setup already working. What I did was, using an smartswitch between the WAN connections an the RBs, I setup one vLan for each WAN and configured the same vLans on the RB. For the failover what I did was setup a Netwatch script that checks if the Master RB is a...

dlopez

Is it possible to create a Bridge between two MT using SSTP?

According to the wiki it's possible, but when I create the bridge the SSTP interface can't be added.

dlopez

Won't it be easier if you setup you DSL routers with NAT and DMZ to the MT, with a Switch in the middle, and then using Connection and Routing Marks in the Mangle table, choose through what DSL would be your client's traffic go ? Something like : DSL1 (172.16.0.1/24) ------\ | DSL2 (172.16.1.1/24)--...

dlopez

As far as I can tell, using torch to do a little digging, I can see how the connection between 1.1.1.1 and 2.2.2.2 is made, and how is redirected to 172.16.0.1 but it looks like the connection doesn't have any way back route.

Any ideas of what I'm missing ?

dlopez

Hi, I'm trying to setup a remote access to my dsl router from the internet. The DSL router has in DMZ the MT and what I want is that if I try to connect to port 81 of its public IP get redirected to the port 80 of the private IP of the DSL router. 1.1.1.1 (Internet Client) -------> 2.2.2.2 (Internet...

dlopez

Hi, I have a network that has 4 internet connections and what I would like to do is have 2 RB750 as gateway in failover, which means that one of the RB750 would be running as master and the other would be on standby until the master breaks. I was thinking on attaching all four internet connection to...

dlopez

Sure, here is my config. First the MT Server Config : OpenVPN Server Config : interface ovpn-server server print enabled: yes port: 1194 mode: ip netmask: 24 mac-address: xx:xx:xx:xx:xx:xx max-mtu: 1500 keepalive-timeout: 60 default-profile: OpenVPN certificate: Server require-client-certificate: ye...

dlopez

The rules on the mangle table are created on the Hotspot chain but, at least for me, there was no rule to make the traffic go through that chain which is why I add those two rules.

Any how, is working now.

dlopez

Hi, I'm trying to setup an Openvpn tunnel using two RB750. I've done the basic setup, the client MT connects to the server MT, the link is stablished and the server MT add a Route for the client Lan that I've setup on the PPP - Secrets. Now the problem is that in the client MT there is no route to t...

dlopez

Set the user local ip (or poll) on ppp - secrets on the mikrotik server.

dlopez

I ended up using the Hotspot feature with mac-address authentication and using the packets mark to do the filtering on the firewall. BTW, at least on 5.12, the package mark rules are created on the mangle table BUT there's no rule to jump to the hotspot chain so, if you don't manually create them, t...

dlopez

Ok, using both rules maked it work. Thanks.

/ip firewall nat add chain=dstnat in-interface=LAN1 dst-address=192.168.0.10 protocol=tcp port=25 to-addresses=192.168.0.2 to-ports=25 action=dst-nat
chain=srcnat action=masquerade src-address=192.168.0.0/24 dst-address=192.168.0.2

dlopez

Ok, I've changed that but still no joy.

dlopez

Yes I have a global masquerade rule :

chain=srcnat action=masquerade src-address=192.168.0.0/24 out-interface=eth1-wan

dlopez

Hi, I want to forward the traffic from my LAN to the MK on port 25 to a local IP : Client IP ( 192.168.0.1 ) -----> 192.168.0.10:25 (Mikrotik) ------> 192.168.0.2:25 (MailServer) I've been try to do the following using the DST-NAT chain using something like : /ip firewall nat add chain=dstnat in-int...

dlopez

Hi, until now I've been using a linux machine as a firewall (shorewall) and to control the internet access for the computers I've been using rules based on the mac addresses. Now, I know the router os doesn't have a mac list feature, whichi'd love, but is it possible to use another approach for the ...

Search found 29 matches

Re: v7.1 is released!

ROS 6.x Queue Tree Parent

Re: Bridged Network and Gateway Selection for clients

Bridged Network and Gateway Selection for clients

Re: 5.23 released!

Re: 2 WAN Route switch slow

Re: 2 WAN Route switch slow

Re: 2 WAN Route switch slow

Re: 2 WAN Route switch slow

Re: 2 WAN Route switch slow

Re: 2 WAN Route switch slow

2 WAN Route switch slow

2 WAN Route switch slow

Re: 4 Wan connections, 2 RB750 and 1 Lan

SSTP Bridge

Re: Route clients to a 5th & 6th DSL line using 2 RB750s?

Re: Remote Access DSL Router

Remote Access DSL Router

4 Wan connections, 2 RB750 and 1 Lan

Re: Openvpn Lan-Lan

Re: RB750 Firewall ACL

Openvpn Lan-Lan

Re: OpenVPN

Re: RB750 Firewall ACL

Re: DST-NAT Local IP to Local IP

Re: DST-NAT Local IP to Local IP

Re: DST-NAT Local IP to Local IP

DST-NAT Local IP to Local IP

RB750 Firewall ACL