MikroTik

sveno

I have the same issue with cAP ax + 2017 Macbook 12". Tried all kinds of Routeros versions. No issues when restricting to ac or when using other Apple products. Wireless,debug also just says "disconnected" after 1-2 minutes. It seems like a driver crash on the Mac.

sveno

Hi Does your bridge have an IP address assigned to it? Does the bridge have ARP enabled? The DHCP client interface is the bridge yes. Everything is default and by default ARP is enabled everywhere. How come it works for some hours and then doesn't work for some hours? If I hard reset the device it ...

sveno

I have the exact same problem on many devices using latest ROS

Default config + ports in bridge = doesn't accept IP from DHCP server. Tried non MT DHCP server too, same result.

sveno

Wow, I would have never guessed it! Thanks!

sveno

I got 3x SXTsq ac and set them up 1 as an PTP Bridge AP and other 2 as PTP Bridge CPE. The problem is that only one client can connect at a time. The second client gets the "medium-access timeout" error. If I disconnect the 1st CPE then the second connects successfully and the 1st CPE will...

sveno

The only idea I have is to make a script:
1. delete all interfaces in the bridge to keep it tidy
2. add necessary interfaces to the bridge

sveno

I have the same issue. Is there a known workaround for this?
Is there another way to add a vpn server binding to the bridge or have the VPN client connections be part of the bridge?

I have this on a RB running v6.40.4 - haven't tested elsewhere.

sveno

The same problem occurred again. It was fixed by disabling and reenabling this: add address=1.1.1.2/29 interface=ether1-gateway network=1.1.1.0 It happened out of the blue - no changes to the router. 1.1.1.2 was unreachable the internet and 1.1.1.2 (192.168.1.2) couldn't access the internet. When I ...

sveno

Thanks for your feedback tslytsly. I am thinking that by some weird bug or other problem Winbox was showing me the incorrect (or old) rule order and that the rule order was indeed wrong with the masquerade rule being above src-nat.

sveno

Got it. You need to have BOTH of these in the masquerade rule:

add action=masquerade chain=srcnat out-interface=ether1-gateway \
src-address=!192.168.1.2 dst-address=!192.168.1.2

I thought the NAT table also has a rule priority like the Filer list but it doesn't. Doh!

sveno

Running on a V6.37.1 I have the following: LAN 192.168.1.0/24 RB is 192.168.1.1 PC is 192.168.1.2 (should have 1.1.1.2 as public IP) WAN 1.1.1.0/29 1.1.1.1-1.1.1.5 assigned for me. 1.1.1.6 is the ISP gateway /ip address add address=192.168.1.1/24 comment="default configuration" interface=e...

sveno

That is already taken care of.

Btw thank you R1CH for your input!

sveno

What causes the 100% CPU load? What Mikrotik device do you use, and in what environment? 750UP. Looking at the profile tool, it is spending most of the cycles on the firewall (incl conn+packet marking) which also peaks really high together with networking, dns is up to 1-15% Most of the time the CP...

sveno

Couldn't find anything regarding this - what does happen when CPU is over limit (100%)? Is there a process priority? I do know that VoIP does not like it at all but what decisions are made in the router I don't know. Can somebody explain?

sveno

In Estonia 3 and 7 are used for dense population areas. Recently Tele2 also added band 1 (2100). In rural areas (even just outside Tallinn!) band 20(800) is most popular. For example 10-15km from Tallinn centre Tele2 and Elisa often only have band 20 in use. So I cannot use SXT LTE here. Very little...

sveno

I have tried many LTE sticks both pppoe and hilink but they are all kind of unreliable. I don't mean the LTE connection which is super reliable - the sticks hang and reboot! I know that one option is a Routerboard with minipci LTE. What else is there to buy in EU? Reliable sticks? some wired LTE rou...

sveno

I have the same problem with 951G-2HnD (6.31) and E3372-153 - under stress it disconnects and the LTE router interface (hilink www) is not accessible, does not reconnect (at least in 20 minutes) - USB power reset helps and its working in 15 seconds or less.

sveno

This is already in place. I wouldn't be able to ping Server IPs otherwise (192.168.1.1 and 10.0.0.1) I made an accept rule on the server for icmp, OVPN interface and it does get hits so the problem is in sending replies. No outbound ICMP reply hits. Any clues how to locate the problem? EDIT. RB-SERV...

sveno

Hi, what I want is simple: I want the guest subnet (or bridge-guest) to be eating leftovers of LAN (bridge-local) only but my LTE uplink is unrestricted. This means I can have 70/30 and sometimes it's just 7/10Mb/s. How would you set this up? I don't care if there is nothing left for the guest netwo...

sveno

Server RB - 192.168.1.1 (192.168.1.0/24) Client RB - 192.168.2.1 (192.168.2.0/24) PPP pool - 10.0.0.0/24, server is 10.0.0.1, client gets 10.0.0.10 Internet access (NAT) works on both routers, they can ping each others LAN IPs over OVPN Only server can ping client LAN addresses when I add a route: a...

sveno

Great filters thank you.

I have a odd problem though: although the drop rule on the forward chain gets 200 hits/second - the packets are still forwarded and NOT dropped. What could cause this?

sveno

Do you mean that it doesn't work as a LTE nor as a ppp-client interface?

sveno

I would also like to know whether OpenVPN works with LDAP for client authentication.

sveno

Actually I haven't looked at 3G for a while, all LTE these days: throughput and latency. Sometimes also better signal. 3G is cheaper. Sierra Wireless is a solid bet, Huawei isn't bad either. Look at the supported HW list to avoid problems: http://wiki.mikrotik.com/wiki/Supported_Hardware#3G_cards_an...

sveno

Here, read this: http://blog.serverfault.com/2011/12/12/a-studied-approach-at-wifi-part-1/ Compare transmission power. Some are super high-power and I advise to turn those down to optimal levels. High RF pollution is a source of stress. Live testing is where the optimal AP solutions are found. Easy ...

sveno

My preference is:
Primary link? PCIe - reliable and fast.
Backup? USB - cheap, often even free with contract. Easily repurposable.

sveno

Ok. A really weird thing happened. I switched the local address to another server ..and voila it is responding. I changed both the scr-nat and the dst-nat to say 192.168.1.6. The weird thing is that the src-nat still has 0 hits. So the masquerade is using 1.1.1.1 and 1.1.1.2. What is going on? EDIT:...

sveno

Got the Dst-Nat working by adding the external IP (1.1.1.2) to addresses: 0 192.168.1.1/24 192.168.1.0 ether2-master-local 1 1.1.1.1/29 1.1.1.6 ether1-gateway 2 1.1.1.2/29 1.1.1.6 ether1-gateway Still no hits on src-nat (first in table below). Specifying TCP and a port (443) didn't change anything. ...

sveno

Agree with ebreyit- you need someone who bonds the other side too, a gateway where your inbound connections that you desire to bond, are routed through.

sveno

I don't see an address pool associated with your DHCP server. Pools are under /ip pool

sveno

Bump. I'm still stumped over this. Is there anything wrong with my config or are these lines ok and the problem is elsewhere?

sveno

How is you DHCP and addressing set up?

sveno

Now I have the following under nat: chain=srcnat action=src-nat to-addresses=1.1.1.2 src-address=192.168.1.5 out-interface=ether1-gateway log=no chain=srcnat action=masquerade out-interface=ether1-gateway log=no chain=dstnat action=dst-nat to-addresses=192.168.1.5 dst-address=1.1.1.2 log=no addresse...

sveno

Hi, I have a public IP NATed with masquerade but I want an address of the same local subnet to use another public IP. Can I do this or do I need another network for this machine (like DMZ)? Edit: I tried to use !192.168.1.5 as source address in the main src-nat to exclude it but still the 192.168.1....

sveno

I have the RB750UP running v6.21.1. Using the Huawei E3272 that only works as a ppp-client. Status is connected and I have an IP. Don't know if related but yesterday the LED on the modem said LTE (established) but Info window showed 3G. EDIT: Ended up reseting the router because I really needed to k...

sveno

Basically I opened the info window in Winbox yesterday for the USB modem but today its not working in winbox, neither through terminal. Removing the USB modem did not help and I am not restarting the router. What can I do?

sveno

Did you try with RouterOS 6.8? Did you add dhcp client for lte interface?

sveno

I am looking for a router board as a router for 50 machines that does the minimum of: wired WAN wired LAN 3G backup, preferably mini pcie with SIM slot Extras would be: WLAN, Gig LAN, PoE. Edit: Maybe the best route is to use a 3G ethernet bridge and a 4/5 port router? What 3G device would you get t...

sveno

I have the same problem.

OSX 10.7.4 and RB450 v5.16

using 3des enc and sha hash with mod1024 as OSX should prefer.

Does anyone have a clue what osx wants?

Sven

sveno

I'm now using easy-rsa generated keys and get the same result on win7 with openvpn 2.2.2 as client. The client says this: Sat May 19 18:20:29 2012 us=50000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Sat May 19 18:20:29 2012 us=50000 WARNING: --ping should normally be used ...

sveno

Hi, I have a router running 5.16 set up according the openVPN Wiki guide (http://wiki.mikrotik.com/wiki/OpenVPN) using cacert.org and tun (ip) mode. the openvpn gui shows this error: Mon May 14 20:40:36 2012 TLS: Initial packet from ( server ip ):1194, sid=f0fc6eab 56522674 Mon May 14 20:40:36 2012 ...

Search found 41 matches