Is there any way to create a static route on a WAN that gets it's IP via DHCP? I need to load balance between two WANs that are DHCP, but I can't create a static route with a routing mark because you cannot use the interface as a gateway like you can with a pppoe-client. The only way I can create a ...

I'm in kind of a weird scenario where I need to create the following set up but not sure how to go about doing it. The reason I need to do this is that i'd like the CCR to act as the capsman for the access points behind it, which means that if I want the wireless to go through the firewall, I need t...

I think my issue was actually that the first time it was set up, I believe I had it on "create-enabled" instead of "create-dynamic-enabled" as I was still playing with all the settings. Because of this, when the AP checked in, it pulled it's settings once and was done. When I unp...

I've found the issue. Because I connected the CAP the first time before making the provisioning rule, it would not apply retroactively. I had to delete all the "remembered" interfaces and CAPs in the remote cap, then when it checked in again for the "first time", it pulled the pr...

I'm trying to test how useful this capsman thing is, but so far, I can't seem to find any way to make it so that when an access point joins the capsman for the first time, it automatically pulls the default configuration. I have the configuration set up, and it works totally fine if i go into the ca...

I did a bit more investigating, and the issue I'm seeing with the apple devices that aren't working shows up in the dhcp debug as:

[dhcpserver] client [mac address] declines IP address [ip address]

I'm not sure how to resolve, and I'm assuming it's probably the same issue as the original poster.

I am having the exact same issue at one of our clients. They have a CCR-1009-8G-1S acting as a router, a cisco sg300 switch, with a CAP-2n access point hooked up to the switch which is hooked up to the router. The devices seem to stay connected to the wireless (I watched the registration table on th...

Is there any sort of up to date guide on setting up OpenVPN on a Mikrotik and having a windows client connect to it? I've gone through what I think is the correct steps on the mikrotik, but I can't figure out how to connect a windows client to it at all. I'm getting stuck at the very first steps (Op...

> The 1100AHX2 does not have a quickset menu You're most likely on an old firmware then, I don't know of a good reason not to update. > I can set my adsl router into bridge. If it's in bridge, you'll need to add a PPPoE client (again, assuming your DSL is like every DSL in my area and uses PPPoE), y...

This really should be posted in one of the other help forums btw. Really, we need more information. I'm assuming you want to use the 1100 as the main router and not just as a switch. In which case you have an issue where your DSL modem is probably acting as a router since it appears to have the defa...

I'm running the dude 4.3 beta in Debian 7.4 under Wine 1.4.1 without issue. For things like winbox, you'll need to install the microsoft fonts for some things like the terminal to look correct, or you could just ssh in. I didn't notice any other issues. Long story short: install fonts, works perfect...

Was able to get them reflashed, had to toy around a few times but eventually it took.

All of them are now working.

another addition: I tried adding the 433UAH to it and was able to transfer it, it's showing an upgraded firmware as available. However the upgrade doesn't work and it's still stuck at what appears to be a corrupt version of 2.38 More interesting additions: after trying twice, it rebooted and showed ...

also, there is no fwf file posted for the 433 uahl, am I able to use the one for the 433 UAH?

I believe I've been able to get one of them up and running through resetting firmwares, I can now get in to winbox on it, however it won't upgrade and still doesn't behave properly with netinstall. So routeros looks fine, but the rest not so much. I'll keep playing with this, but console access woul...

I'm having a few issues with these 433 UAHL's. Out of 12 that I received, 3 of them don't boot properly. I'm able to get them to show up in Netinstall by holding the reset button, but whenever I try to reinstall, they just get stuck on "sending offer". There's no console port on these anym...

I just received 4 RB433L's and I'm having a problem with one of the boards (the other 3 seem fine) where it is very slow to boot up (and seems to only boot up properly about 75% of the time) and when it does, even without doing anything, it will reboot itself within 15-30 seconds even with no intera...

There's probably a better way, but to do this, I've used drop rules in IP > firewall > filter rules. It's easy enough to do src address as something on ether5 and dst address as something on ether2-4 and then have the action just be drop. You could also do packet/connection/route marking to just for...

If you're using winbox, you should be able to go to IP > DNS and then manually add the servers with the down arrows to add lines.

Are you trying to use only dns from google? or do you want your ISP dns + google dns?

If it's like the PPPoE client, instead of using the "add default route" checkbox (which always adds as 1). What you do is don't add a default route (uncheck that box), and then in ip > route add a route manually with distance of 5 using the l2tp connection as the gateway.

holy crap

the second i make a post it started working. I think something may have been goofed in the cache.

In any case, for anyone having a similar problem, it is important that the routing mark take place in the output chain and not prerouting

Hate to revive an old thread, but I had trouble doing that and getting it to work, I largely wrote it off, but now I'm having actual issues and can't get it fixed. What I tried doing was adding the following: in the mangle rules, I added a new rule on the input chain, with the in interface being the...

I have a router with 2 net connections - a cable and a dsl. The cable connection is the primary and is used for the PC's, while the DSL is used solely for VOIP phones. The routing is done by simple mangle rules and routing marks and everything works peachy. My problem is, we used ping tests from out...

I mean, it is small hardware issue with RB2011. Shutdown ROS, disconnect RB from the wall AC outlet, only then connect USB stick and power on again. Then I have everything worked fine. RB2011UAS-2HnD-IN/Huawei E367/ROS 5.22 I meant to come back earlier and say it started working. This was exactly w...

For the life of me, I can't get the USB port to even show up in the port listings. The serial port shows up, and on every other model of router I've had with a usb port, the usb will show up there too. None of my RB2011's show a usb port. What do I have to do to get it to work? I've tried plugging i...

I'm having a problem setting up an IPSec tunnel to another company. This VPN works perfectly fine on a netgear router they installed, but I'm trying to switch their netgear with a mikrotik. The information I was given was this: PSK: *password here* Local ID: *company name* Services: PCAnywhere TCP/U...

"Their router" is definitely calling out. Their server is the VPN "host". I've also tried setting up "my router" without using dst and src natting because I assumed it would switch to nat-t and just work, and I've tried setting it up with one of the two and both which i...

Apologies, this is a double post, I'm new to the forums and misread the thread approval.

Please reply to http://forum.mikrotik.com/viewtopic.php?f=2&t=62816

We have a payment company that has a somewhat unique set up in that they install a router behind ours that establishes a VPN connection with their server. It's an IPSEC VPN (I'm assuming using L2TP). So the set up is like this: their server <--> internet <--> my router <--> their router I used to ha...

A payment company has a unique set up where they install their own router behind our router that has an ipsec vpn (my assumption is that its also L2TP) to their server, and all the payment systems are then just hooked up to their router. So the set up is as follows: their server <-> internet <-> my ...