MikroTik

hassibi

About your clients...how they connected to your servers? and send your queue configuration.

hassibi

Hi
Please send your configuration and network diagram then i can help you better.RouterOS queue do not have any problem my friend.

hassibi

So what is your problem? what do you want to do exactly?

hassibi

yes they are

hassibi

Hello

you can find it in http://mikrotik.online.ir/
its a collection of MikroTik RouterOS

Good luck

hassibi

Hello Create a bridge in your mikrotik /interface bridge add name=bridge1 protocol-mode=rstp then add eth3 and eth4 to your created bridge interface bridge port add bridge=bridge1 interface=ether3 interface bridge port add bridge=bridge1 interface=ether4 then set an ip in range 192.168.11.0/24 on br...

hassibi

Hello its because you use TCP protocol for bandwidth test.use UDP and test again. when you use TCP protocol RouterOS must to generate a big traffic for your bandwidth test and then your CPU load will be increase up to 100%. for give a better result i think if you use windows bandwidth test tools (yo...

hassibi

Because by default RouterOS check connection and its state. its recommended that disable connection tracking if not use that feature... Good Luck Features affected by connection tracking NAT firewall: connection-bytes connection-mark connection-type connection-state connection-limit connection-rate ...

hassibi

OK

use netinstall and be careful about:
1-connect your PC that netinstall running on it with Ethernet cable to ether1 directly (not use switch)
2-Unplug power of your RB and plug it and Press reset button for 30 Sec

Good Luck

hassibi

Hello
I think its Connection Tracking...Disable it and check your router profile again.

Good luck.

hassibi

Hi
why you can't use Netinstall for installing RouterOS?

hassibi

Hello
what is your problem guy?
we can help you if you have any problem with your mikrotik

hassibi

Hello
i think you can do this with scripting.

hassibi

Hello
Please send your configuration then i can help you better.

hassibi

Hello
you want to your users can access https://mail.google.com without any authentication first time?

hassibi

Yes of course

/ip firewall mangle add chain=prerouting src-address-list=CLIENTESA1 dst-address-list=!MYIPS action mark-routing new-routing-mark=ADSL1
...

add you PPPOE users IP addresses to MYIPS address-list and then for all mangles set

dst-address-list=!MYIPS

Good Luck

hassibi

So if I ping 10.10.1.x having a source address 10.10.2.x,
the process adopted by MikroTik will send to the default route 10.10.2.x, not
10.10.1.x send directly through the interface, as a directly connected route?

Yes that's right.

hassibi

Hello
i think ip-ip or GRE tunnel is better for you.check it...

Good Luck

hassibi

Hello
you can do this with one mikrotik my friend.if you need help for configuration we are here...

Good Luck

hassibi

Hello
yes you must use wireless wds or mesh for your scenario but how many user you think your network is?

hassibi

Hello
what exactly your configuration?please send your filter rule...

hassibi

Hello.
Yes its very important.please keep it in RouterOS V.6.

hassibi

Which setting are you changing on them? The best solution is mentioned above, change AP setting to AES. This will increase speed, reduce load, and increase security ... and also solve any Apple problems.

Yes I agree.

hassibi

Hi
what type are your internet connections?

hassibi

Hi
can you send your configuration?its better way to help you.

hassibi

Hello
what interface you run hotspot on it?
please send your configuration then i can help you better.

hassibi

Hello
what version of routeros you use?

hassibi

Hi
Are you enable java script on IE? when java script was enable IE use http-chap for authentication.

hassibi

you don't need to drop bogon IPs for input chain

hassibi

check this

/ip firewall filter
add chain=forward action=drop protocol=tcp any-port=25

hassibi

Do I have to change the first three rules (routing-mark)? Or all the other rules (ping, rdp, pop3, ...)?

Thanks

i think best way is you change all of the mangles with chain prerouting.

hassibi

Hi
Please add fault tolerance feature with keeping connections.
and a solution for aggregate internet links from different ISPs.

hassibi

Hi
i think if you want to change cost of a few PPP link you can add dedicated server interface for each user you want and then you can change their OSPF interfaces costs.

hassibi

Hello
i am using routeros 6 for x86 architecture and i run vpls tunnel between two routers and my x86 routers reboot when they statring up.

thanks.

hassibi

Hello Hassibi, I tried what you said and it worked by changing the prerouting chain to output in the first three rules (mark routing). The problem I have if I change that, is that all customers leave for internet on the same DSL connection (ADSL_1), and the other two connections are not used, and t...

hassibi

even i disable the default forward , i can able to ping my neighbour cpe. i disabled in Default forward & also in access list when you unchecked the default forward your wireless clients unable to have layer 2 connectivity together...but you can connect to all of them...be careful when you unch...

hassibi

I didn't see anywhere in that where it talked about bonding. All I saw was load balancing.

yes me too..

hassibi

Hello
is any traffic match with your filter rule?
where you check to telnet to your server?

hassibi

so your problem will be solved with checked and unchecked

hassibi

mikrotik usermanager is GOOD but i think you need better radius server for 10000 users. usermanager for big scale is not recommended (because its not completed and stable yet)
But it is just my opinion.

hassibi

i think your mangles is your problem...disable your ping mangles and then check again. when your clients connect their PPPOE's their add a connected route to your router.but when you use prerouting chain in mangle and mark for example ICMP packets that's packets skip main routing table and then they...

hassibi

i am suing webproxy in routeros for many years but have not any problem...its work very well.

hassibi

OK.you can do this in webproxy.you can filter domain names in webproxy for any src-address you want.

hassibi

Hi
check this

/interface wireless set 0 security-profile=profile1

hassibi

Hi
you want to use user manager for 10000 users?
i think if you use other radius server like free radius your result is better.

hassibi

send your network diagram and say what you want exactly then i can help you better

hassibi

that's right.although we can use many subnet for one ip pool.
next pool is very useful when you have many subnet of public ips and you want to assign this subnets for your clients.

hassibi

Hello
i think its possible.

hassibi

Thanks Mikrotik.its useful feature.

hassibi

Hello
its a simple DHCP configuration with radius authentication.my radius server in this scenario is a UserManager and i create a user with mac address as username in this format --:--:--:--:--:-- and no password.

Good Luck

hassibi

Hello
i think if you use dst-nat for you local clients to access your wan ip address you problem will be solved.check it..

hassibi

Hello
i think best solution for your scenario is mirkotik Hotspot
you can allow to your users to access your website without any authentication (/ip hotspot walledgarden) and for using internet their need to be authenticated.

Good luck.

hassibi

Hello
when you create a separate routing table for source address then main routing table will be ignored for that source address in rules.

hassibi

Hello
do you check it in other system?

hassibi

add your LAN address to an address list and then in your mangles in advance tab in DST-address-list select your created address list and check ! (not)when you using mangle prerouting chain and add a routing mark to packets the connected routes in your MikroTik is not work because their packet skip m...

hassibi

Hi
please send your configuration and then we can better help you my friend.
in general when get gateway timout error its a problem between mikrotik and the destination web server or site...

hassibi

Hello

i have 3 internet link from 3 different ISPs.each link have 2Mbps bandwidth.
can i have 6Mbps download speed on one client?
everybody have any idea?

hassibi

Hello my friend
its very nice!

hassibi

Hello
i think if you add a dst-address of your mangle except your LAN IPs your problem will be solved.check it.

Good Luck

hassibi

Hi
how many cpu/memory usage is on your mikrotik ?

hassibi

Hi
i think this command is useful for you
/ip hotspot active get 0(active user index value) uptime

Good Luck

hassibi

hey guy.What is your problem?send more information

hassibi

Hi
i think you cannot do this with mikrotik.best offer for you is IPSec.run it between your routers.

Good Luck

hassibi

Hello
you can use "rate limit" option in /ppp profile for your scenario.

Good luck

hassibi

Hello
you can use webproxy for your solution.if you need i can send an example for you.

hassibi

Hi
please send more information about your problem then we can help you...

hassibi

Hi

i think you can use
/ip firewall filter add chain=forward (or any chain you want) protocol=icmp icmp-options=5:1

Good Luck

hassibi

Hi
i think you can't do this because your request send from on public ip and your answer is coming the same public ip..

hassibi

Hi
if you want use x86 architecture you can i think if you use dual core processor (1GHz minimum) and 1GBps NIC and 2GB of ram theirs can handle your needs...

if you want to use routerboard you can use RB1100AHx2.

Good Luck

hassibi

Hello
please send your configuration then i can he you.

hassibi · Re: 16/32/48 ports mikrotik must have a powerfull switch

mikrotik must have a powerfull switch

hassibi

Hi
are you use UDP Protocol for sip registration or TCP?

hassibi

Hi guys
i am using RouterOS in esxi 4,5 for many years.
i am haven't any problem and their will be work very well...
thank you mikrotik

hassibi

Hi AES CCM is better than TKIP encryption method.so What are you worried about? i have same problem but my problem will be solved with TKIP and uncheking AES CCM. be careful for connecting to device if both of TIKP and AES CCM will be checked AES CCM is selected for connection encryption because its...

hassibi

your client must be connect together.check your pppoe client firewall maybe your client have an active firewall so deny icmp requests...

hassibi

Hi you cant config web-proxy for each interface. i think if you use /ip proxy access for filter your clients and don't want to limit your laptop ip in proxy create a accept rule in /ip proxy access for src-address of your laptop for example: /ip proxy access add src-address=192.168.1.10 action=allow...

hassibi

Hello
what is your meaning for word "Expand"?

hassibi

Hi
in unicast cipher and group cipher select tkip and unchecked aes ccm in your security profile.maybe your problem will be solved...
if not give me model of your Motorola AP to check it.

Good Luck

hassibi

Hello i think best way for limit your client in this sites is that you add address-list for ip address of this site or use "content" add add sites with content facebook or youtube and dynamicly add dst-address of this packets to an address list and then create a queue for this address-list...

hassibi

Hello
how many bandwidth for internet you have?

hassibi

Hi
reserve ip address for your clients in /ip dhcp-server leases .i think if you use that your problem will be solved

Good luck

hassibi

Hi
why you use that dst-nats?

hassibi

Hi
no that rule in not work for your problem.
/ip firewall can be used for layer3 filtering but you say to me that your users in the same broadcast domain.

hassibi

Hi
i am sorry but i don't know about your problem...
deny icmp packets except echo request and config filter rule for deny ping flood and then check your MikroTik for timeout.

hassibi

i checked your send image
i don't see any abnormal thing in that picture...

hassibi

Hi
check radius client state and see how many request send to your radius server and how many of them accepted or rejected or timeout
if you see timeout counter is not 0 you have a problem in connecting to your radius server.

hassibi

Hi

just copy your scripts text to /system scripts and give that a name.
for schedule you scripts go to /system scheduler and then in On Event type the name of your script for launching

Good Luck

hassibi

Dear Hassibi Thanks for your early response. Will you please let me know more details? I need to allocate different bandwidth for different users, if you please let me know the process in details it will be very much helpful for me. Regards Halimul Alam Hi you can change your mangles for each user ...

hassibi

if your client and their Radios are in the same broadcast domain your mikrotik can not help you...

hassibi

EOIP is grate but it use more hardware resource than VPLS.use VPLS for bridging your networks...

hassibi

Hello
are you using X86 architecture ?
if you use that reinstall your routeros with ISO file and for question "keep old configuration?" type "yes"
if you use routerboard install routeros with netinstall and select keep old configuration

Good Luck

hassibi

Hello
i think you must set priority in /bridge filter.check it...

hassibi

Hi
you want to control your controller via Public ip address?
excuse me i don't understand you meaning ...

hassibi

Hi
you can use this card?is it interface add on /interface menu and you able to change interface setting?

hassibi

Hello
when ping goes down check your interface traffic.
maybe anyone send big traffic to your router.

hassibi

Hello
see http://forum.mikrotik.com/viewtopic.php?f=9&t=62630 topic.you can use my answer for your problem.

Good Luck

hassibi

Hello my friend
i think its impossible. please send your /ip proxy print.

hassibi

Hi
we can't see this in /ip firewall addresslist (or i don't know

)

hassibi

Hello
if you check Dst.Address in torch window you can see that.(if i understand your meaning

)

hassibi

Hello Q1 :best solution for file sharing is that you use SMB in /ip smb. Q2 :i think its not possible in mikrotik.(I don't know :) ) Q3 :if you want to set bandwidth for your client download from mikrotik you can use mangle with chain output with destination of your clients and mark their packets.th...

hassibi

Hello my friend
i have 5000 active PPPOE session on Mikrotik without any problem.
peer not responding log usually happen when client have low bandwidth or error.
and i have a question.are you upgrade your router? and what license you use?

hassibi

Hello
i think best simple solution for your problem is that set your modem to Bridge mode and create PPPOE client in your MikroTik.

Good Luck

hassibi

Hello
Send your network diagram then we can help you better

hassibi

Hello
Please send your network diagram...

hassibi

Hello My English is bad too...don't worry my friend :D i think you want send your selected traffic to your GateDefender and other traffic NOT ! you can use mangle and mark routing to send selected traffic to your GateDefender.that mean you can set default gateway for your selected traffic to your Ga...

hassibi

Hello PPTP use TCP port 1723 for connection establishment and use GRE Protocol (IP protocol ID 47). PPTP is using for layer 3 communication so you can use layer 3 protocols on that link. You can use Torch tools to see what was send or receive on your Link.(right click on your PPTP link and select to...

hassibi

Hello

you can use /tools traffic monitor for your scenario.check it...

Good Luck

hassibi

hello you can use mangle for match traffic except your local traffic and marking connection and their packets and finally use this mangle for your simple queue example /ip firewall mangle add chain=forward dst-address=!192.168.11.0/24 action=mark-connection new-connection-mark=internettraffic passth...

hassibi

Hi

install usermanager in router 2 and in router 1 add radius client in /radius and set address to router 1 ip address

Good Luck

hassibi

Hello if ether2 is not member of bridge then use /ip firewall mangle add chain=prerouting src-address=192.168.101.0/24 action=mark-routing new-routing-mark=wlanUsers /ip route add routing-mark=wlanUsers gateway=ether2-isp2 /ip firewall nat add chain=srcnat src-address=192.168.101.0/24 out-interface=...

hassibi

Hello.
if you want to layer 2 connectivity between two remote network you can use BCP.BCP allow you to bridge two remote network via PPP interface.

hassibi

check this command on your clients...

hassibi

hello your CCQ is low.try to get better signal (for example change TX power) i think you cant get 100mbps throughput when using wds because CSMA/CA is working and decrease your wireless throughput. for getting best throughput , check you HT chains (enable all of them) and check MCS (enable just 14 a...

hassibi

is eth1 a member of a bridge?

hassibi

Hello you can save dude data , webproxy-cache , usermanager data to usb storage. i test RB751uHnD usb port and connect my WD 1TB hard disk and my router detect it! but i do not format it because i need my data :-) for printing log i think best way is sending log to a Syslog server like kiwi or dude ...

hassibi

Hello
i was problem like this.
i install new version with ISO file and save my configuration.
my problem was solved
try it...

hassibi

Hello
what is your configuration?

hassibi

Hello
when you get request timed out from one client to your mikrotik
check this command

arp /d
ping your-server-ip
arp /a

can you see your Router mac-address?

hassibi

I have this problem.export your Dude configuration and import it when your dude configuration reset

hassibi

Hello
You can use /ip proxy cache and add a rule with deny action.example:

/ip proxy cache add dst-address=10.0.0.2 action=deny
/ip proxy cache add dst-host=www.yahoo.com action=deny

hassibi

Hello everyone
i have a mikrotik proxy server for my LAN.
my web proxy stop working after a few minutes.
when i check proxy connection there are many connection with stat "Connecting"...

Search found 121 matches