Hello, after updating the system I cannot sign the client certificate. In the console it ends with the message: failure: bad CA key!
Winbox shows no error

ROS 7.12.1 CCR1036

Hello I use /tool fetch upload=yes url="sftp://192.168.120.2/backup/test.txt" src-path="test.txt" user=******** password=******** and get error: status: failed failure: connection timeout but the file was uploaded! From Windows I was try winSCP and working OK. Tested on 6.49.2 an...

If you cannot change the setup of the right side, and it doesn't accept additional traffic selectors proposed by the peer at the left, your only chance is to src-nat the traffic from 192.168.4.0/24 to some address(es) from 10.0.5.0/24, as below: /ip firewall nat add chain=srcnat place-before=as-app...

Hello, I have an ipsec tunnel on the left side of the mikrotik on the right, I don't know. Mikrotik<====> some router 10.0.5.0/24 <===> 192.168.2.0/24 I need to set up an additional network on the left side but cannot access config the network on the right side. From both subnets from left side I mu...

Hello, in ccr1009 you have an outgoing sfp port as tagged which goes on crs125. On CRS125 you must have two physical tagged ports: one inbound from ccr and the other outbound to crs326. On these ports, you tag your vans, eg 100,200, to go on to crs326. CCR1009 and CRS326 you must configure in bridge...

Thanks great, works!

hello, I have a few ip on the public interface and on the fourth one I connect to ipsec
xxx.xxx.xxx.1 - lan
xxx.xxx.xxx.2 - web
xxx.xxx.xxx.3 - free
xxx.xxx.xxx.4 - ipsec

The problem is that the tunnel wants to connect over the first ip (xxx.xxx.xxx.1)
How to fix this error.

Hello, if I have CHR licenses, can I use it for several routers in GNS3 for learning?


Greetings

Hello, how can I connect the android to the ovpn server on mikrotik, the client on the windows connects but the android does not.

Ok thanks to everyone.

The office is currently on one floor. The cables are laid out in every room, and the AP will be at the central office. About 15 people will work (95% of employees prefer wifi)

Hello, i need advice. I need to buy access point to the company where they send big files (programmers) so I care about speed - of course mikrotik but which version

Ok, thanks. So independently what kind of router is on other side that should work? The rest of config (nat, route) NAT chain=srcnat action=accept src-address=192.168.7.0/24 dst-address=192.168.10.0/24 log=no log-prefix="" chain=srcnat action=accept src-address=192.168.7.0/24 dst-address=1...

Hello is this config ok? 1 src-address=192.168.7.0/24 src-port=any dst-address=192.168.10.0/24 dst-port=any protocol=all action=encrypt level=unique ipsec-protocols=esp tunnel=yes sa-src-address=x.x.x.x sa-dst-address=y.y.y.y proposal=proposal1 priority=0 2 src-address=192.168.7.0/24 src-port=any ds...

Hello, how to set up this connection.
IPSEC between r1/r2 and r1/3r works
Router r2 and r3 have this same network (I do not know how to solve connection to r1)
network from r2 and r3 must have access to 192.168.40.4
r1 is mikrotik

How it works in data center ?

Ok, thanks. Is there another possibility to increase throughput in this case?

Hello I bonding ether23,ether24 (crs) and ether11,ether12 (ccr) and max speed is ~1000M. When I run BT to CCR on two laptops speed is divided into this laptops example: ~600M and ~400M. I think it should be about 2000M globally.

Hello, how to catch traffic coming from the server's tidal (wimp). I would like to let this other link.

Hi, A make like this:

chain=srcnat action=masquerade src-address-list=lan dst-address-list=lan
log=no log-prefix=""


And address-list name "lan" with all ip
10.0.1.0/24
192.168.3.0/24

It's work for me perfect. I can ping between network and pptp client

Hello, I have problem with hotspot http://www.fotosik.pl/pokaz_obrazek/cedac57697c60732.html I was write http://www.domain.com to walled-garden. When I connect to hotspot (but no log-in) can't open webside cause hotspot redirect to login page. When I write any webside from internet to walled-garden...

Hello, I have problem with hotspot http://www.fotosik.pl/pokaz_obrazek/cedac57697c60732.html I was write http://www.domain.com to walled-garden. When I connect to hotspot (but no log-in) can't open webside cause hotspot redirect to login page. When I write any webside from internet to walled-garden ...

New facts!
When client 1 is mikrotik I can ping it client 2 (windows), but not vice versa.
From client 2(windows) i can ping only serwer 192.168.5.250.
From client 1(mikrotik) I can ping serwer and client 2 (windows)

I set before and didn't work

Yes, why can't I send a ping from the client 1 to client 2

Hello, I have Mikrotik RB2011 with 1 port WAN (eth1 77.X.X.X) and LAN on bridge (eth 2-5 192.168.5.250). On the router running pptp server and clients connect remotely to the network (and it works well)I have a problem with ping between remote clients (client to client). How it should look like. Mik...

Hello,I will describe the patient: ether4 - wan ether 6 - lan on LAN interface is server voip with address 192.168.5.222 ports 8100-8200 and 192.168.5.223 with ports 5060 chain=srcnat action=masquerade out-interface=ether4 chain=dstnat action=dst-nat to-addresses=192.168.5.222 to-ports=8100-8200 pro...

Hi, this is answer from Mikrotik:
Hello,

there is nothing we could do as we use ppp type connection for 3g/4g for those
modems and not ethernet type connections as it requires a separate driver and
currently we are not planning to add support for it.

Regards,
Uldis

Hello, you must turn off auto cd. I found command AT AT^SETPORT="A1,A2;1,2,3,7" and this working with my e398.I have problem only with speed, perhaps when I plug usb hub then speed will go up. My routerboard is rb433uah.

Hi, sorry for my english. First disable pin (not in mikrotik but in software of huawei) I have this same problem. Solution: connect modem to windows, login modem, then quickly switch to mikrotik. This is "half solution" but in my mikrotik (rb433)working. When I want s to connect by mikroti...