Did you ever get this working? I'm struggling to even get FreeRADIUS to authenticate against the MS SQL Server database.

my purpose to add RB750 in Layer3 Switch because if user manually give wrong class ip address in his NIC if that class route exist in RB he can access ftp how this can be possible? If you assign each subnet to a different port on the router, then only a valid IP address on that subnet can connect t...

Are you torching your LAN or WAN interface on your router? When I torch my WAN interface on our border router DST and SRC always seemed reversed with DST showing the router address, and SRC showing the remote hosts. Am I correct to assume you have a srcnat masquerade rule active on your WAN interface?

Sorry, I've had a busy week that took me out of town for awhile. Here is the relevant configuration information from the routers. I've omitted some information that is not pertinent to this particular issue for the sake of clarity. House (main) router ------------------------ /ip address print # ADD...

how would this be different from having multiple maximized winboxes, and clicking on the taskbar buttons (start menu bar)? It's a simple convenience thing. Do you use tabs in your Web browser? One could argue that you could simple open every Web page in its own window, and switch between pages as w...

Sorry if my previous post showed up. I deleted it, because I realized after reading through your post a couple more times that it was not the solution you needed. You run into a little bit of a tricky situation here in that I assume you don't want to divert ALL your traffic from the Telekom subnet o...

If you setup an interface for each subnet on your router, then any of the networks should be able to talk to each other. You could, for example, you setup ether1 with IP address with 192.168.10.1/24 and connect your FTP server to it. Then you could configure ether2 with IP address 10.0.0.1/24 and us...

Do you have any dstnat rules enabled on your firewall which might be forwarding traffic through to your second router?

I would agree that a multi-tab version of Winbox would be great! Nice suggestion.

Not a problem. Glad to help!

Post your exports from the two mikrotik boxes. I'll take a look at the configs. It should work, but one question. With the current setup it seems that you have to double nat packets. Why not just pass the VLAN packets from one router to the other and let all of the NAT be done in one place? Hi efad...

add action=mark-connection chain=input comment="3 - WAN 1" disabled=yes \ in-interface=1WANcon new-connection-mark=WAN1_conn passthrough=no add action=mark-connection chain=input comment="4 - WAN 2" disabled=yes \ in-interface=2WANwel new-connection-mark=WAN2_conn passthrough=no...

Maybe you could use the netwatch tool to watch for a specific host on that route to go down. That will at least let you choose a different interval, though I'm not sure you can specify a certain number of timeouts.

I can't fully answer your question with a "this option is best" kind of answer, but I will put in my two cents for your consideration. I found that MikroTik's built-in Web proxy was a bit limited. I instead setup a VM on one of our servers running the full version of the Squid proxy server...

My organization is serving in a part of the world where Internet access is limited. We have a VSAT system for Internet access at one of our staff houses. We operate a small WISP for other organizations in the area as well, and connect our office, other staff homes, and WISP clients to the network vi...

Sorry Oliver, I'm not seeing a definite answer on this one (admittedly, I haven't worked much with VLANs though). Reviewing the manual though, I'm not sure why it isn't working, unless I'm not fully understanding some of the options. I'm hoping someone else can chime in to help.

Can you post the IP addresses for the server, the client machine, and all addresses assigned on the MikroTik? Also, the route table from the MikroTik.

Rockyboa, did you ever get an solution for this? I'm trying to do something similar (one interface, two IP addresses), and can't seem to get it to work correctly.

Well, I've been using a parent SFQ simple queue (type wireless-default) for a few days now. I've also set some small limit-at values for each queue. I really can't say conclusively if it's helping significantly, but in theory it's working. If we get to a point where we can power the server 24-7, the...

P.S. all individual clients having cFosSpeed will also help if they can afford the license / get discount. P.S.2 you should be making plans and establish partnerships with near/far WISPs to bring more connectivity by nstreme/NV2 links. NetworkPro, I can't help but think you may be a salesman for cF...

Thanks everyone for the suggestions. I think I should elaborate a little more, because my situation probably doesn't fit into most of your paradigms for a typical setup. I'm with a non-profit in eastern Congo. Our client base is pretty much NGOs, missionaies, and a few churches, and our total number...

Thanks for the helpful clarification Caci99 (and sorry for my rediculously late response). Since PCQ is not going to work due to fluctuating throughput, would there be another mechanism that would help allow equal access to the available bandwidth? After reading a bit more I was thinking that maybe ...

Hello. I'm a technician operating a small WISP, and I'm currently trying to make some improvements to our infrastructure. The network we have currently has 40-50 clients. At present, our system is using simple queues for each user to set maximum upload/download speeds for each user. The limits for e...