MikroTik

yuridee

Panasonic FM Series Capacitors - 10V 680uf Low ESR
something like those: https://www.ebay.ca/itm/131508785129

Yuri

yuridee

Same with ccr1016, fan speed and temperature error

yuridee

Hi, Forgive me if I'm repeating the issue with CCR1016. I did a quick search and didn't see topic about fan noise/speed related to capacitors C1442 and C1443 on CCR1016, though similar problem was discussed here: https://forum.mikrotik.com/viewtopic.php?p=838845#p838845 For apparent no reason fans o...

yuridee

confirming, had to do the same on two units

yuridee

vasilaos, you are super...

I will try IKE configuration for sure.

Thank you, thank you!

yuridee

Thank you Vasilaos,

I didn't think to check CPU utilization, I wouldn't know if i can adjust it. Is your IKE2 is site2site or Client to Site? Can you please steer me where i can look up ready IKE2 configuration, steps, example.

Many thanks,
Yuri

yuridee

Hi, sorry if i couldn't find the answer by searching this nice and useful Forum. I have a question about L2TP/IPSEC settings for remote client. Main office and remote locations are on 1Gbps internet and client needs to transfer big files over VPN. Site to site VPN is not doable, has to be MacOS and ...

yuridee

Switch it is then...
Thank you.

yuridee

Thank you chechito , may i ask this: 1. can I do SimpleQueues and/or "port speed" limit on CCR1072 to 5G ( i don't have 1072 to test ) 2. what is the best way using CCR1036->[switch] to limit: 10.10.1.0/16 to 5G 10.20.1.0/16 to 2.5G 10.30.1.0/16 to what's available including not used by ab...

yuridee

Thank you Steve for prompt reply,

CRS will be running SwitchOS and will do only "switching". As I mention,
On CCR i would have several VLANs and simple QoS to control the speed, bandwidth

Thank you,
Yuri

yuridee

Hi Folks, Anybody who has this equipment please confirm that the following solution will work before I purchase. 10G ISP link — [sfp+ 1] CCR1036-8G-2S+ [sfp+ 2] — S+DA0001 — [sfp+ 1] CRS317-1G-16S+RM (running switch os) On CCR i would have several VLANs and simple QoS to control the speed (no much o...

yuridee

+1

ip/service available from "address-list"

yuridee

How should we address this? Appreciate any input

https://medium.com/tenable-techblog/mik ... d46398bf24
https://nvd.nist.gov/vuln/detail/CVE-2019-3924

thank you

yuridee

Very nice,
Product code +1 (cAP ac - RBcAPGi-5acD2nD)

yuridee

I think when it closed once you can open it again and use it. Don't know for sure, I rarely use QuickSet.

Try it and let folks here to know

Best,
~Y

yuridee

i had something similar with hap ac2, in my case "quick set" opened window was causing disconnection (still don't know why). as soon as connect i hit ESC to close windows, problem was solved

~Y

yuridee

some here:

http://disnetern.ru/play-mikrotik-beeper-melody-script/

yuridee

Further search the forum pages I stumble upon this post: CAPsMAN multiple SSIDs https://forum.mikrotik.com/viewtopic.php?t=66314 --- Unread post by dudleyrees » Mon Jun 05, 2017 7:03 am I spent a whole weekend trying to work out why I couldn't connect to one of my SSIDs until I found this post - THA...

yuridee

Hello, I’m seeking help with capsman running on ccr-1016 v6.41and 10 dual band APs. I tried all different scenarios and searched internet/forums for a few days on this problem with no positive result. My delema is that from 3 SSID i can only use TWO and it doesn’t matter master or slave. So, after r...

yuridee

this is what helped me:

/ip firewall connection tracking set udp-timeout=300s
/ip firewall service-port disable sip

yuridee

+2 on 12 port SFP+

yuridee

Finally I've got one, tested. Like Normis said, fibre on one side and rj-45 on the other. Everything i've tested works just like using straight through cable

yuridee

Hello there, In one place i'm using sg200 with Firmware Version:1.3.7.18 and Mikrotik 6.23. You may want to post part of your mikrotik and sg200 config for us to assist you better. In Mikrotik (ether11 with multiple VLANS): 1.jpg In sg200 VLAN settings: 2.jpg sg200 Port to VLAN (GE25 goes to mikroti...

yuridee

[ ]

exactly, how didn't i see this!

yuridee

Thank you, but what about sfp? I'm trying to catch last but one character and insert '0' if interface number is less then 10, like so: script (ether1, ether2,..,ether11,ether12,sfp1,sfp2) to (-e01,-e02,..,-e11,-e12,-s01,-s02) I can't figure out why (:pick $portname ( [:len $portname] - 2 ) = "1...

yuridee

Same with mine, ROS-6.25. Purchased to play in the sandbox with 2.4 card

yuridee

nobody can script, can we? help!

yuridee

anybody?!

yuridee

bump.... Ok, in other words, how can i script (ether1, ether2,..,ether11,ether12,sfp1,sfp2) to (-e01,-e02,..,-e11,-e12,-s01,-s02) To be use in the following script (would really like to calculate $portvlanID): # ROS6 -- add new subnets (IP,NAT,Bridge,VLANport) # no VLAN if port name is "" ...

yuridee

Hello, Can somebody open my eyes on where is my mistake, please. "If" doesn't work for me in the following example. Where I'm trying to create short string from port name: portname to portvlanID ether1 to -e01 ether2 to -e02 .. ether10 to -e10 ether11 to -e11 :local portname "ether9&q...

yuridee

http://forum.mikrotik.com/viewtopic.php?f=1&t=60793 Just like it mention in the topic above, I have about dozen vpn connections to a different sites or I use dst-nat. But it would be so much ease to just "right click". The nature of my business is to setup offices for short term 3-8 m...

yuridee

Sorry, tried to search, didn't find at first

ADMIN, please remove this topic!

yuridee

I was thinking about BaseBox but I would still need to convert from fibre to coper (going into big warehouses 40000 - 60000 sq ft). Also, I'm thinking of making vertical and horizontal orientation.

Y

yuridee

Hello, I was trying to find an answer by searching here and google. Sorry if I'm repeating, Is it ok to use different dbi antennas on one device or expansion card? For example, on RB922UAGS-5HPacD with R11e-2HPnD installed in StationBox® InSpot I can put 4 x 2dbi antennas but there is not enough roo...

yuridee

Hello,
It is very nice to have telnet ability in the winbox. Really helps when looking in the ip/neighbors, right click and telnet (mac telnet) to device. I think it would be a big treat if we can right click and "winbox" neighbor device within winbox.
Warmest,
Yuri

yuridee

Hello everybody, I have PPTP server enabled with a few user name set. In the log I see the following at random time and random IP (mostly from china): Log pptp, info - TCP connection established from <IP> And here is the list of IPs for last 24 hours 112.193.88.167 175.184.153.152 110.241.68.223 183...

yuridee

I guess, I will stay with my old approach:

- export compact configuration
- do all the necessary changes
- apply new configuration on the second partition
- test new config

yuridee

Hello, Is it possible to have RB running on the first partition (active) while making multiple changes on the second partition (passive) and then simply reboot into passive partition. And, if all is well make it active? Sort of, I'm going to make lots of changes now but reboot at night time to test....

yuridee

Hi Normis,
Sorry to bother you, but would like to know for sure that VLAN tagging can go through and when its going to be available?
Thank you,
Yuri

yuridee

http://routerboard.com/RBFTC11

wondering about specs: transparent, switch, vlan-tagging, etc.

All the best,
Y

yuridee

Thank you kindly, lambert. I will defiantly try suggested queue "kind" and study further...

All the best,
Yuri

yuridee

used: Queue Type - default Total Queue Type - default-small tested to simple queue to 50 on 100mbps and to 80 on 200. No drops in Total Statistics, no complains from client transferring huge files between the servers over vpn connection Also, as a side note, on this speeds multiprocessor routers to ...

yuridee

Thank you lambert. I do understand how queue works. I would really like to know how ISPs are shaping without me "dropping". Here is the test I've done on one of the live networks: From ISP 100mbps up/down 1. ftp server 192.168.0.2 set to 50/50 and upload is running all the time. from comp1...

yuridee

yuridee

Alper, i have similar network scenario with the few of my clients. I chose DMZ root (double NAT). This way if for some stupid reason ISP decides to replace, upgrade or reset the modem/router the only thing I have to do after is to set DMZ again On ISP Router (lan-192.168.1.0/24) I would put DMZ to 1...

yuridee

Hi. On the 200Mbit/s I have CCR1036 to distribute internet access to 20+ offices. I limit bandwidth using 'simple default queue type' and I have no complains from clients. However, when I limit one customer on that router to 50 Mbit/s they get enough dropped packets to loose online licenses, which r...

yuridee

Using Wine to open winbox I would really like to have "Save as.." in Files
(files are can be "dragged" between winboxes though)

+1 for Global Inline comments

yuridee

More here:
http://mum.mikrotik.com/presentations/US12/tomas.pdf

yuridee

Here is the answer from here: http://forum.mikrotik.com/viewtopic.php?f=2&t=35035&view=previous#p308712 First, make accept rules for each subnet (src to dst) like: /ip firewall filter add chain=forward action=accept src-address=192.168.0.0/24 dst-addresss=192.168.0.0/24 Then, make one list o...

yuridee

I didn't have that problem running RB2011 on the same place. After upgrading to CCR I had to add a lot of subnets and never looked on Neighbor List until now. Perhaps it's one of the minor "bug" on CCR ruining 6.7. Because everything what I need works I'm not upgrading to latest OS ...

yuridee

It has something to do with Bridge settings - "Use IP Firewall". When checked neighbors will not show device IP, when unchecked all is fine. I checked its not hairpin NAT.

Only discovery on the bridges doesn't show real IP. I don't know if this is normal, but sure inconvenience

yuridee

Hello,
Why would in Winbox, Neighbors List all devices on one bridge will show gateway address instead of real IP?

Screen 2.jpg

yuridee

Check this: http://mum.mikrotik.com/presentations/US12/steve.pdf

yuridee

Based on this http://mum.mikrotik.com/presentations/US12/steve.pdf i've made my configuration recently. Hope this will help you.

yuridee

Read the slide of mum on venice 2014 mum.mikrotik.com

Probably because was late at night, but I can't find it

Looked in here: http://wiki.mikrotik.com/wiki/MUM_2014_IT

yuridee

Rextended, thank you for prompt reply. Actually, today test showed me somewhat balanced traffic, though WAN1 busier then the other two.

By any chance would you happen to know how can I split my lan to two networks 192.168.10.0/24 and 192.168.20.0/24 with 20%/80% of total wan1-3 capacity

Y

yuridee

Hello, I can't find what's wrong with my config, only WAN1 shows active in /ip route /ip firewall mangle # manually force local traffic to connected networks to stay in the main routing table add action=accept chain=prerouting disabled=no dst-address=192.168.201.0/24 add action=accept chain=prerouti...

yuridee

Anybody?!

yuridee

On three PPPoE modems I have 25/7. I'm assigning DMZ on each modem to 192.168.2.2 192.168.3.2 192.168.4.2 Following steps from http://mum.mikrotik.com/presentations/US12/steve.pdf I have 3 wan going to 1 lan. So, how can I split the traffic to 2 lans (ether4 and ether5). Don't care about dyndns anym...

yuridee

Hello, Please steer me in the right direction to build the following: -- 3 x 25/7 internet lines to be used on two networks 192.168.50.0/24 and 192.168.150.0/24 -- load balancing and speed limit to 192.168.50.0 to 10/5 the rest goes to the second network -- if any of the isp lines go down priority i...

yuridee

Wow, i haven't seen any mikrotik crashing, but these CCRs looks to have many problems

Indeed. Never had any freezing/crashing problems with mipsbe boards...

yuridee

I have exactly the same problem. Did you resolve it? Thanks. No. So far I had total three crashes on two routers in 1 month since the installation. Though, I did put extra logging to be saved on disk. I hope this will help when I will have to pull the power plug again. Also, Wachdog is set on both ...

yuridee

You could also use the 'not' parameter.

Not sure I understand. I know what "not" or "!" is, but where and how I can use it?

yuridee

Hello, For some unknown reason two of CCRs crashed (different locations, different ISP). What would be the best approach to troubleshoot? What logging I should turn on and save to disk? As the side note, I had Juniper SSG 5 running at those locations without problems for long time without "free...

yuridee

Thank you. That was easy...

yuridee

Hello,

Is there better way to block traffic between 20 subnets on CCR other then creating (20+19+18+..+1) firewall filter rules like this one:
add action=drop chain=forward dst-address=192.168.21.0/24 src-address=192.168.22.0/24

(subnets are not in sequence, but all listed in IP/Adressess )

yuridee

On rb2011 I have 6 subnets, with simple queues to 10/10 mbps and rules to drop any traffic between local networks.
CPU stays less the 50% so far... CPU goes up only when queues are working hard in "red" to keep the limit

yuridee

Works... # dec/10/2013 19:53:09 by RouterOS 6.7 # software id = S5B0-UNL7 # /interface ethernet set [ find default-name=ether1 ] comment=WAN-mip name=Ether01-WAN1 set [ find default-name=ether3 ] comment=Office name=ether03 set [ find default-name=ether12 ] comment=management /interface vlan add int...

yuridee

Yes, and remember to have 192.168.0.10 before 192.168.0.0/24

yuridee

Hi there, Offices are rented for short period (2-8 month). Landlord is providing internet access in the offices and depend on the price I "simply queue" the speed. The following is not exact setup I have. I just simplified to 4 networks to explain my dilemma. Up until now I had 100M of com...

yuridee

Hi there, I've got fibre ripped between two offices (about 500 feet apart). I have a few RB951G-2HnD on hand and need to build temporary transparent bridge with fastest possible connection. Both offices are on the same 10.0.32.0/23 network, connection was 1G. In the remote office there are 20 statio...

yuridee

Thank you WiFiGuy.

Brain fart

I did not see the forest for the trees!

yuridee

Hi there, For some reason I can only connect one device to this access point. When I created VirtualAP I was able to connect one device to wlan1 and second device to VirtualAP. THATS IT! No meter what I tried I can't get it to connect multiple computers. PLEASE HELP!!! I have three of them mounted a...

yuridee

routing are in "/ip firewall nat" and with "/ip dhcp-client" enabled system will create route automatically from wiki page - http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Client The MikroTik RouterOS DHCP client may be enabled on any Ethernet-like interface at a time. The client w...

yuridee

I would do something like this, where: queue simple - is to limit speed on each network to 1 mbps up/down ip firewall filter - is to make each network private Note: I didn't go to the extend of testing the following code in the lab, but I used similar configuration in a few offices /interface ethern...

yuridee

Hi deviant2, My question is more about expanding existing IP range but at the same time limiting the internet speed separately on two half's of that network How can I keep all static ip settings It is not about how to make static, it's about how not to change IP's. I'm trying to avoid changing the 1...

yuridee

Hi there, Currently customer has 192.168.2.0/24 network with the pool from 50 to 250 used on two south and north wings of the building. Both sides are sharing resources and should continue to do so (like 2 xerox copiers, 3 different network printer, shared NAS, etc). How can I keep all static ip set...

yuridee

Thank you, that make sense, I failed to see...

yuridee

Hi there, I'm wandering, how can I add "vlan-manag vlan-id=1" and "vlan-corp vlan-id=2" to the eth4-trunk interface? See the code below: Thank you, Y /interface vlan add interface=eth3-trunk l2mtu=1594 name=vlan1 vlan-id=110 add interface=eth3-trunk l2mtu=1594 name=vlan2 vlan-id=...

yuridee

Hi, I re-did nonworking bridges and all is fine. Something funny happened to the bridges when I was assigning admin. mac addresses. Redoing bridges without touching MAC addresses made rb. to assign new MACs and all works now. Is it better just to let OS to assign new MAC address for each new bridge? Y

yuridee

Hi Normis,
It doesn't work with 5.22 on rb2100. Any way i try it always puts CPE after using restore
Y

yuridee

Bump.

For some unknown reason only 4 vlans are working out of 8 assigned to port 3 on RB2100.

!

yuridee

Thank you, that works...

Quick question, on rb2100 can I do 8 DHCP servers, 8 VLANs trunked to one port, 8 bridges with two or three ports attached (vlan, eth, wlan), about 500-600. I've done 3 trunked vlans, 300 devices on rb751 with no problem. Just wondering if rb2100 will be good to use.

Y

yuridee

From the main router connection goes through fibre to two buildings/routers 192.168.254.10 and 192.168.254.30. I linked public IP addresses to local. Everything works fine from public side (pptp vpn, port forwarding, etc to 1xx.xxx.xxx.181 or 1xx.xxx.xxx.183) but from private side still shows that I...

yuridee

Thank you

yuridee

When I try to use restore on the clean (no config) RB2011UAS-2HnD-IN v.5.21 on the quick setup I get CPE instead of AP. :( How can I make sure that restore will do AP so I don't have to go through the headache of reconfiguring? I tried using "compact export" but it get errors here and ther...

yuridee

Now ISP is telling me that they did P2P IP forwarding of /29 through /30. In worst case scenario I will have to ask them to remove /30 and use one of the IP from /29 as a gateway. This way I'm going to be down to only 4 public IPs unless I can do something else with RB configuration

Best,

yuridee

eth1 - public ip, has internet 111.222.114.26/30 eth2 - private, internet using 192.168.88.1/24 (nat masquerade) eth3 - public ips 111.222.115.105/29 (unreachable) Only on monday I can talk to ISP's network designer to make sure that 111.222.115.105/29 is routed to 111.222.114.26 on their end. For n...

yuridee

On my first post I put what I've got from ISP. And according to ISP they did route on their end and now I have to do it on mine.

eth1 is plugged in to their media converter (internet through fibre)
eth2 i'm using for now to have internet in the office
eth3 should be my 111.222.115.104/29 network

yuridee

Ethernet ports are not slaved. I'm trying to route to eth3 (previous posts shows eth2) /interface ethernet set 0 name=Eth1-gateway set 1 name=Eth2 set 2 name=eth3 set 3 name=eth4 set 4 name=eth5 /ip address add address=192.168.88.1/24 interface=Bridge-eth2-wlan1 add address=111.222.114.26/30 interfa...

yuridee

Tried, didn't work. In the route list shows:
DA - 111.222.115.104/29 - eth2 unreachable

Instead of computers its going to be 4-5 routers connected through fiber, buildings are about 50 to 150 meters apart

yuridee

Hello, here are the settings Network1: 111.222.114.24/30 (Point to Point IP) ISP interface: 111.222.114.25 (Your Gateway) Customer interface: 111.222.114.26 Netmask: 255.255.255.252 Network2: 111.222.115.104/29 (This range is Routed to Customer interface: 111.222.114.26) Customer Useable: 111.222...

yuridee

I'm successfully using single RB2011L router with multiple srcnat rules and "chain=forward action=drop" between subnets, speed shaping is done through "simple queues" on "target address", CPU Usage: Max: 45%; Average: 9%.

Thank you all.

yuridee

Another russian pages, настройка Mikrotik на русском языке:

http://notme.org.ua/manual-po-nastrojke ... om-yazyke/
http://mikrotik-pc.pp.ua/mikrotik/mikro ... sanie.html

yuridee

Here is something else I was told by my lovely ISP. From ISP demarcation point they told me to put a 8 port switch, run the cable to each location and install something like RB751 there with its own public IP address. Would this setup work ok? Do I have to worry about any traffic/discovery problems...

yuridee

Here is something else I was told by my lovely ISP. From ISP demarcation point they told me to put a 8 port switch, run the cable to each location and install something like RB751 there with its own public IP address. Would this setup work ok? Do I have to worry about any traffic/discovery problems ...

yuridee

Thank you CelticComms, Here is more: - By using srcnat I will also have to put dstnat rules, right? - What about RB2011L performance if I have 50/50 mbps ISP connection, each office gets 10/10 and up to 10 vpn connections total? - Can I do DHCP pool for /22 or /20 network ( during conferences I may ...

yuridee

I would like to know if all possible on RB2011L-IN: - from ISP i have 6 static IP addresses (multiple IPs ont Eth1) - Eth5: IP 192.168.50.0/24, NAT to first public IP (first office) - Eth6: IP 192.168.60.0/ 20 , NAT to second public IP (second office) - Eth7-9 like Eth5 but with public IPs 3rd-5th p...

yuridee

MANY thanks!!!
I 'm using Wine v1.2.2 on Lion with inbox.exe...

Search found 99 matches