Community discussions

MikroTik App

Search found 29 matches

by costel
Sat Dec 28, 2024 3:37 pm
Forum: General
Topic: [solved] Restrict IPv6 access
Replies: 7
Views: 1109

[solved] Re: Restrict IPv6 access

I just reading about SLAAC :) first local auto-generated address (fe80::/64), check for duplication (DAD), get the prefix from the router and construct the address via mechanism you describe.
Already wrote the rules and it is working fine.
Thank you!
by costel
Sat Dec 28, 2024 2:49 pm
Forum: General
Topic: [solved] Restrict IPv6 access
Replies: 7
Views: 1109

Re: Restrict IPv6 access

Yes, mobile phones are configured to use real MAC addressees, randomization is disabled. Don't know much about SLAAC only that is not DHCP in a regular way and is stateless, does not keep evidence of who's who or who received previously a specific address (leases). Regardless, RA-SLAAC are layer 2 a...
by costel
Fri Dec 27, 2024 9:22 pm
Forum: General
Topic: [solved] Restrict IPv6 access
Replies: 7
Views: 1109

Re: Restrict IPv6 access

I'm afraid I don't understand, that rule will block all IPv6 trafic, including for legitimate devices. Are you suggesting rules like: /ipv6 firewall raw add action=accept chain=prerouting src-mac-address=x0:y0:x0:y0:x0:y0 add action=accept chain=prerouting src-mac-address=x0:y0:x0:y0:x0:y1 ... add a...
by costel
Fri Dec 27, 2024 11:55 am
Forum: General
Topic: [solved] Restrict IPv6 access
Replies: 7
Views: 1109

[solved] Restrict IPv6 access

Hello, What is the best way to restrict access to IPv6 clients to Mikrotik router and, obviously, Internet ? Setup: All LAN interfaces have ARP set to reply-only, IPv4 DHCP-Server has AddressPool set to static-only and IPV4 ARP list is populated with allowed mac addresses. But a new, "rogue&quo...
by costel
Thu Sep 12, 2024 10:00 pm
Forum: General
Topic: Plain rsync using rose package
Replies: 3
Views: 748

Re: Plain rsync using rose package

Found out that an sdcard it is not the best storage for what I need. During portage sync, with more than 500 files, it stuck. I believe that is router sdcard interface, as the same card on Pi 5 is working fine.
Thank you for your support!
by costel
Thu Sep 12, 2024 11:32 am
Forum: General
Topic: Plain rsync using rose package
Replies: 3
Views: 748

Plain rsync using rose package

Hello, Wondering if I can replace a Raspberry Pi with Mikrotik RB450Gx4 for rsync and small file storage. Currently, on Raspberry Pi rsynd, ssh and nginx are running to provide small, LAN Gentoo Linux infrastructure. The workflow is: 1. Main Gentoo portage rsync is done on Pi and other machines sync...
by costel
Mon Oct 30, 2023 9:01 pm
Forum: Beginner Basics
Topic: Static IPv6 DNS entries
Replies: 12
Views: 3505

[solved] Re: Static IPv6 DNS entries

First, sorry for the delay. I managed (finally) to find time to study a lite bit more scripting language and solved the issue. I remained at parsing neighbor list, the DNS names and MAC addresses are in a array where hostname is the key and MAC the value, it's easier in case that mainboard is change...
by costel
Sun Oct 29, 2023 11:01 am
Forum: Beginner Basics
Topic: Static IPv6 DNS entries
Replies: 12
Views: 3505

Re: Static IPv6 DNS entries

@accarda Thanks. I was under impression that I tested the solution, but... it seems that full regex syntax does not apply here. Ended up with :if (!$ADDR~"fe80") do={ Kentzo I'm afraid that I'm not understand your solution - where the variables come from: Available variables for dhcp-clie...
by costel
Sat Oct 28, 2023 9:28 pm
Forum: Beginner Basics
Topic: Static IPv6 DNS entries
Replies: 12
Views: 3505

Re: Static IPv6 DNS entries

I am interested only about addresses in LAN so the filter will be interface=bridge. More addresses per interface is not a issue. Mikrotik scripting have a very uncommon syntax and rules, so bear with me, is the second script for me: # Global variable to keep the old IPv6 list. Update run only when i...
by costel
Sat Oct 28, 2023 5:27 pm
Forum: Beginner Basics
Topic: Static IPv6 DNS entries
Replies: 12
Views: 3505

Re: Static IPv6 DNS entries

It is possible to archive the goal. The IP assignments are in IPv6 Neighbors, machines MAC address are known, so I can add static DNS entries for IPv6 address. What I don't know how to solve is the trigger of IPv6 change. To parse periodically /ipv6/neighbor/print it does not seems as the most effic...
by costel
Sat Oct 28, 2023 1:55 pm
Forum: Beginner Basics
Topic: Static IPv6 DNS entries
Replies: 12
Views: 3505

Static IPv6 DNS entries

Does Mikrotik support static DNS entries for IPv6 ? I am interested to assign to my internal machines static IPv6 names. Already doing this for IPv4, but I have no ideea how to do that for IPv6. More, for IPv4 addresses are static, assigned by me (i.e. 192.168.x.y), for IPv6 address are given by my ...
by costel
Thu Jun 17, 2021 10:15 am
Forum: General
Topic: DHCP v6 error
Replies: 2
Views: 1220

Re: DHCP v6 error

Hello! /ipv6 dhcp-server print Flags: D - dynamic, X - disabled, I - invalid # NAME INTERFACE ADDRESS-POOL PREFERENCE LEASE-TIME 0 DHCP_LAN_ipv6 bridge static-only 255 3d [costel@MikroTik_850Gx4] > /ipv6 pool print Flags: D - dynamic # NAME PREFIX PREFIX-LENGTH EXPIRES-AFTER 0 D ipv6pool 2a02:2f0c:c...
by costel
Mon Jun 14, 2021 6:28 pm
Forum: General
Topic: DHCP v6 error
Replies: 2
Views: 1220

DHCP v6 error

My Mikrotik 850Gx4 log is flooded with "pool6 refused acquire: bad preferred prefix! (1)".
It make impossible to view any usefully log entry, as the error repeat itself every second.
Received addresses are /64 prefix.
by costel
Mon Apr 12, 2021 5:09 pm
Forum: General
Topic: Static route - connect to a secondary LAN
Replies: 2
Views: 2708

Re: Static route - connect to a secondary LAN

Yes, the return route was the problem. As I have to access only one host from existing LAN adding the route and a firewall rule are sufficient.
Thank you for your support!
by costel
Mon Apr 12, 2021 2:53 pm
Forum: General
Topic: Static route - connect to a secondary LAN
Replies: 2
Views: 2708

Static route - connect to a secondary LAN

Hello, I have a location where is no Internet. Have to add Internet and connect to already existing LAN and offer internet to a smart TV. So I have - Tenda LTE Modem - RB750Gr3 Mikrotik router Actual configuration: - ether1 is WAN IP 192.168.0.182 obtained via DHCP from Tenda - ether2 to ether4 in b...
by costel
Mon Jan 01, 2018 10:23 pm
Forum: Beginner Basics
Topic: [solved] Bridge, CPE or CapsMan, other solution ?
Replies: 3
Views: 1413

Re: [solved] Bridge, CPE or CapsMan, other solution ?

It is working. Thank you!
But it would be a lot easier if default dhcp settings included at least a gateway... I lost a lot of time diagnosing this problem.
by costel
Tue Dec 26, 2017 9:39 pm
Forum: Beginner Basics
Topic: [solved] Bridge, CPE or CapsMan, other solution ?
Replies: 3
Views: 1413

Re: Bridge, CPE or CapsMan, other solution ?

So, the second option. Didn't think about disabling firewall rules. I'll try tomorrow and report back.

Thank you!
by costel
Fri Dec 22, 2017 5:04 pm
Forum: Beginner Basics
Topic: [solved] Bridge, CPE or CapsMan, other solution ?
Replies: 3
Views: 1413

[solved] Bridge, CPE or CapsMan, other solution ?

Hello all! For home, I use an RB850Gx2 for ethernet connections and an mAP L-2nD for wireless. Which is the best solution to "bond" them together in one single network IP class ? Right now, RB850Gx2, for LAN, have assigned 192.168.78.0/24 and, in this local network, 192.168.78.252 is assig...
by costel
Tue Sep 23, 2014 10:11 pm
Forum: RouterBOARD hardware
Topic: I need a recomandation
Replies: 8
Views: 2141

Re: I need a recomandation

Well, I have to convince my friend first. How do I see things: mikrotik has a higher price that a small pc, but: OS is already installed, I can handle configurations (dhcp, simple queues and basic firewall) and it is more fiable. Overall administration time it is much, much lower - something like se...
by costel
Tue Sep 23, 2014 6:34 pm
Forum: RouterBOARD hardware
Topic: I need a recomandation
Replies: 8
Views: 2141

Re: I need a recomandation

Ok, 1100ahx2.
Should I worry about 200 mac/ip rules and 200 simple queues or it is able to handle that load ?

Thank you!
by costel
Tue Sep 23, 2014 5:21 pm
Forum: RouterBOARD hardware
Topic: I need a recomandation
Replies: 8
Views: 2141

Re: I need a recomandation

Ok, RB1100AHx2-LM - no need for rack mount. From routerboard.com: Routing 25 simple queues 654.0 429.0 616.0 2,611.8 258.0 3,170.3 Routing 25 ip filter rules 278.0 182.4 262.0 1,110.9 243.0 2,986.0 How much 250 simple queues will slow down throughput ? Also 250 mac filter rules ? Will it handle that...
by costel
Tue Sep 23, 2014 12:26 pm
Forum: RouterBOARD hardware
Topic: I need a recomandation
Replies: 8
Views: 2141

I need a recomandation

For my home network I have an RB-450G and I like it. It's running for almost 3 years already without problems. A friend of mine running a small ISP service in the town. His actual server it's an old PC and it seems to fail. I make him proposal to replace it with a Mikrotik Routerboard. We need a rou...
by costel
Sat Mar 09, 2013 8:05 pm
Forum: RouterBOARD hardware
Topic: What to do when even NetInstall does not help ?
Replies: 6
Views: 2954

Re: What to do when even NetInstall does not help ?

Ok. Done that.
Hope that Mikrotik people will take suggestions into consideration.
by costel
Thu Mar 07, 2013 2:54 pm
Forum: RouterBOARD hardware
Topic: What to do when even NetInstall does not help ?
Replies: 6
Views: 2954

Re: What to do when even NetInstall does not help ?

I solved it! Thank you very much! It seems that I should press reset button for at least 10 seconds to activate second boot loader. Less than that - no effect - that was the issue regarding no output on serial console. After that a simple boot loader reset and a restore of boot order to nand-if-fail...
by costel
Tue Mar 05, 2013 7:20 pm
Forum: RouterBOARD hardware
Topic: What to do when even NetInstall does not help ?
Replies: 6
Views: 2954

What to do when even NetInstall does not help ?

I tried to upgrade firmware on RB450G and it failed, almost bricked the device. Commands was /system routerboard upgrade /system reboot No error was issued during procedure, but, after reboot, NIC leds were off and both blue and green leds were solid on. Previous firmware version was 2.40 and new on...
by costel
Sat Jun 02, 2012 11:38 am
Forum: Beginner Basics
Topic: 2 two DSL lines for RB750
Replies: 8
Views: 2913

Re: 2 two DSL lines for RB750

Yes, I'm using this configuration rigth now.
I have a configuration file attached to this thread: http://forum.mikrotik.com/viewtopic.php?f=13&t=61787
by costel
Fri Jun 01, 2012 5:02 pm
Forum: Beginner Basics
Topic: Two ISP - load balancing for a single internal IP
Replies: 4
Views: 2402

Re: Two ISP - load balancing for a single internal IP

Hello! Yes, glady, but my setup it's changed. Now, I'm using QoS so I have to take other aproach for load balancing. I attached my current configuration. Sorry, didn't cross my mind to keep the old one. The current setup: - two ISP - ether1-WAN1 and ether3-WAN2 - two internal networks - ether2-LAN1 ...
by costel
Thu May 10, 2012 8:08 am
Forum: Beginner Basics
Topic: Two ISP - load balancing for a single internal IP
Replies: 4
Views: 2402

Re: Two ISP - load balancing for a single internal IP

Well, in the end, I accomplished to fully setup the router.
For this last problem I used PPC and Load Balancing.
Thanks for pointing me in the right direction.
by costel
Mon May 07, 2012 3:20 pm
Forum: Beginner Basics
Topic: Two ISP - load balancing for a single internal IP
Replies: 4
Views: 2402

Two ISP - load balancing for a single internal IP

Hello! I bought a RB450G a week ago. I was told I can use QoS, shaping and make load balancing with it. My networking knowledge is limited to basics. I already did bandwidth shapping - fixed bandwidth equaly distributed to connected users and implemented QoS prioritization. I need some advice for th...