MikroTik

tonyd

Hello all, I would like to contribute to this discussion what it is I found necessary to get TFTP network boot to work for those struggling. I hope this helps out. Best As a foundation, I am using a server w/ Proxmox 8.0.4. I've set up a LXC container running Docker and the netboot.xyz image to serv...

tonyd

I too ran into this issue w/ a new RB4011iGS today and spent an unnecessary amount of time chasing a friggin squirrel for no good reason! I've only worked with Mikrotik for 15yrs. If I missed an announcement, shame on me. Otherwise, WTH? Mikrotik has every right to alter their products as they see f...

tonyd

Thanks @mkx You are absolutely correct in your comment regarding "random" youtube videos. You do have to know your hardware and the context of both your hardware and what you are trying to accomplish. But, we all have benefited by research and using youtube as a resource so I don't want to...

tonyd

Thanks @tdw A few questions if I may. First question, I've seen some youtube vids ( @TheNetworkTrip & @Inquirinity ) showing how to set up Vlans using the Switch instead of setting them up using the Bridge->VLANs which uses the cpu. This passes the traffic directly using the switch chip vs going...

tonyd

Hello, I am upgrading my existing home network/lab, a CRS109-8G-1S-2HnD. I wanted to set up 10G between my Router, Switch, NAS(s), Proxmox Servers and workstation. My physical connection needs don't require a router or switch with a lot of ports. So I just got a CCR2004-16G-2S+ and a CRS305-1G-4S+. ...

tonyd

Super old post... but ran across it doing another search. PerfSonar and it's One Way Ping will give you that info.

https://software.internet2.edu/owamp/
https://github.com/perfsonar
https://github.com/perfsonar/owamp
https://www.perfsonar.net/

tonyd

I had the same issue. I'm way late to this party but thought I would add to it in case someone had this issue and found this forum thread looking for a solution. After disabling a Drop on Input firewall rule I realized that it must be a firewall issue, not an IP -> DNS configuration issue. I found t...

tonyd

Spectacular! Thank you! That solved my issue. I new I had to be missing something. I added that additional srcnat rule below my dstnat and all is well. Thanks again!

tonyd

Hello, I'm looking for a way to route a publicly resolved domain to an internal IP, sourced of course, from my internal network. I host several servers for personal use that resolve to my public IP address, i.e. nextcloud.mydomain.com, smokeping.mydomain.com, cacti.mydomain.com, homeassistant.mydoma...

tonyd

Hello, I am trying to setup Freeradius + Mikrotik to authenticate MAC Address. We have many different wireless technologies, we don't use the Mikrotik as the wireless AP. So we would like new CPE to connect to AP, pull DHCP, and in doing so, the Mikrotik would first authenticate the MAC associated w...

tonyd

Hi All, Thank you for your responses and additional efforts to test. I've been out of the states for a couple of weeks. I will review your comments and let you know how this works out.

!! =)

tonyd

Hi bkuhn, Sorry for any confusion. Let me see if I can better explain. There are no mikrotik wireless links in this equation nor does the router itself have a wireless card. All links from the router are either a UBNT, Cambium, Siklu, or Dragonwave. These are APs or PtP links connected to eth ports....

tonyd

Hello,

Does anybody have an idea of how this would be accomplished? Or this this not possible with the Mikrotik product?

Thank you very much

tonyd

Clarification, not so much how to set up a vlan, I know the procedure. But how to use a bridge and/or a vlan to accomplish my functionality?

Thank you

tonyd

Greetings, I'm wondering how you might go about setting up a common management vlan so that all backhaul radios would be on a single IP block while having a dedicated IP Block (DHCP) for each interface? So I want to be able to configure all backhaul radius on any interface to all be managed from a s...

tonyd

Hello, As much as I want to go f...ing off, I will attempt to keep my tone civil. I've got two CCR1036-12G-4S which I shelled out $1000+ each. Both serving a single channel of an etherchannel link between my core router and edge router. They ran flawlessly for 6ish months. Now they lock on me. I've ...

tonyd

@lambert: I've connect via MAC and IP. I am directly connected. It does disconnect me when changing config; /interface ethernet set [ find default-name=ether1 ] comment="WAN" ... /ip address add..., /ip firewall mangle add..., /ip firewall address-list add..., /ip firewall filter add... (f...

tonyd

Hello all, I have a new CRS125-24G-1S. Can any tell me why this unit using keeps disconnecting on me? I can be in the middle of a configuration operation or pasting some config from the the cli and it stops responding and disconnects. I've upgraded to 6.20 after seeing some posts regarding Firmware ...

tonyd

Hi bajodel,

I honestly am a little unclear on the passthrough option. Does it mean... I've hit this rule, don't process any other rules to follow? At least that's how I understood it. Check box and "continue" to "pass through the remaining rules".

Thank you,

tonyd

Hi All, I'm really struggling with getting traffic to route to specific gateways depending on the internal IP Block/Network. My company has acquired a WISP that was designed and deployed by a couple of individuals not really familiar with Networking. So I've inherited a network set up with no routin...

tonyd

BUMP...

Has there been any movement toward addressing this issue? I too do not want to maintain a user list of clear text passwords, this is counter to any good security policy.

Thank you,

td

tonyd

BINGO! SurferTim, thank you so much. I've got to look into the called-Id and why this prevented the MTR from making a call to the Radius server. I admit, I'm not yet very familiar with Radius. My gratitude and appreciation for helping me troubleshoot this!

=)

tonyd

I do have debugging enabled. Seeing the "no radius server found" is what seems to be at the root of the problem. However, how can the MTR conclude the server is unreachable if it never "apparently" makes an attempt to reach the server as shown by the torch? =) Selection_011.png

tonyd

Hey SurferTim, Here's the hostpot output. I tried removing the domain from the radius config, unfortunately no change. Regarding the hotspot, I do have that checked in the Radius config, but not using it. Not yet past getting user login to work. Thanks so much! [admin@MikroTik] > /ip hotspot profile...

tonyd

Hi, I have verified that I have all the radius ports open with the proper protocol. That's what's so strange. Torching the traffic on my WAN interface shows no traffic to my radius server, no udp port 1812, and the radius statistics don't increment. I'm stumpted. =) Before login attempt [admin@Mikro...

tonyd

Please anyone, I could sure use some assistance why the Mikrotik believe the Radius server isn't reachable when it just send and received an Account-Request.

Thank you very much

tonyd

Greetings, I'm at a loss as to why I'm seeing this error and unable to attempt User login authentication via Radius. I'm at a development stage in setup and testing. I've reviewed a number of posts both related to User Manager and FreeRadius and have not found any information to shed light on this p...

tonyd

Hi, This is a topic I'm interested, could you recall the tut that you indicated you found and post a link?

Thanks

td

tonyd

Please, anybody with thoughts on what I'm missing here?

Thanks =)

tonyd

SOLVED I finally solved my routing problem. Despite every reference I found to Policy Route where you add a Mangle Rule and a 0.0.0.0/0 Route with a Marking Route, none of the information I found on policy routing was a solution. In the end I ended up having to first mark the packet with a mangle r...

tonyd

hey nmaton, These, of course, are the names I gave them; it do not come new with them. New, out of the box, it had two ether1 interfaces. I could not, as you pointed out, have two interfaces with the same label. Trouble is this, 1) why the h3LL does a new RB come this way? I've used Cisco for many y...

tonyd

Hi, Can anyone tell me why I am seeing two Ether1 interfaces? Neither I am able to delete. So I have one disabled. My Cacti graphs work for all interfaces, except Ether1. It will graph for a while and then stop. This is a brand new RB1100AHx2 running 5.22. No mods to the CPU speed, etc. Also very st...

tonyd

All of the above. RT1 to cisco switch to Canopy AP --/to/-- Canopy AP to RT2. I was wondering the same. I thought I understood MTU to be an issue with OSPF.

tonyd

Ok, think I have it configured correctly, but still only see one neighbor... strange. ether2 Local is a ptp to RT2 via a Cisco switch. See Pics

tonyd

samsung172, Thanks for the super fast response. I haven't worked with ptmp mode, but I'll take a look. I have lookbacks in place so good to go there.

Grats!

tonyd

Hi all, I've inherited a network made up of Mikrotik routers of various models, approx 20. The network design is made up of a number of /24's with ALL routers having an IP on one or more of the /24's. All routes are Static. My goal is to redesign the network so that I have /30's between my hops and ...

tonyd

Ok, I seem to have my VPLS Tunnel up and running and VLANs operating over the tunnel. If I connect a laptop to access port on switch 2 and modem to access port on switch 1 (both vlan 520) I can pull DHCP, and browse pages, send email, etc. However, pinging the other side of the /30 I do get packet f...

tonyd

Topo

Cisco Catalyst 2960G
Ports facing routers are trunked and ports facing a laptop to test vlan connectivity are access ports

Selection_062.png

tonyd

Hello, I'm new to the Mikrotik world so I would greatly appreciate any help you might be able to lend me. I have to say that I've had an eye opener having dug into what RouterOS can do, wow! I am trying to set up (LAB) a configuration to transport several vlans over a VPLS Tunnel. I can/have set up ...

tonyd

I here you, but don't see where the there is an issue with the return path. I can traceroute to the 10.9.10.1 network and the path is via the 192.168.1.185 interface. So the route from the 10.9.10.0 to the 192.168.1.0 and back would follow the same path. It hits my 192.168.1.0 gateway. The gateway h...

tonyd

SOLVED: But don't understand why I had to configure this way to get it to work... I had to NAT the 192.168.1.0/24 Network I wish to thank you for your assistance. And if you can shed some light on why I had to NAT this private to private it would be appreciated. tonyd add action=src-nat chain=srcna...

tonyd

I cannot ping 192.168.1.185 from the 10.9.10.0/23 Network ARP from 192.168.1.200 host root@WorkStation:/home/tonyd# arp 10.9.10.1 10.9.10.1 (10.9.10.1) -- no entry root@WorkStation:/home/tonyd# arp 192.168.1.185 Address HWtype HWaddress Flags Mask Iface 192.168.1.185 ether 00:0c:42:df:64:ce C eth0

tonyd

Still no worky... Thanks guys @SurferTim - Made the suggested change to the NAT config on the 10.9.10.0 network /ip firewall nat add action=src-nat chain=srcnat disabled=no out-interface=ether1 to-addresses=216.19.25.198 @CelticComms - From a pc on the 10.9.10.0 network (10.9.10.7) traceroute: C:\Us...

tonyd

EDIT: Small typo on my diagram. The ip on eth2 of the Mikrotik is 10.9.10.1, not 10.1.10.9. @SurferTim - But vlan 192 does not traverse the Zentyal Firewall at all. Technically, eth3 is plugged directly into the 192.168.1.0 network my means of vlan 192. And since eth3 is on the same subnet, the last...

tonyd

Please find the attached PDF Visio drawing. It's stripped down to just the key elements relative. I can ping the Mikrotik's Interoffice GW IP from the 192.168.1.0/24 network as mentioned. So I have a route back to the remote 10.9.10.0/23 network. The problem is I can't ping from the 10.9.10.0/23 net...

tonyd

I'll put something together.... =)

tonyd

@CelticComms - No IP/Firewall rules. I am NAT'ing the 10.9.10.0/23 network. The default GW for 0.0.0.0/0 is 216.22.22.197 @SurferTim - You're correct, it is the GW for the 10.9.10.0/23 network. I use Zentyal as my internal Gateway/Firewall. It's gateway to the world is 192.168.1.55. With respect to ...

tonyd

Thanks CelticComms... I believe the answer is that it does. From the Mikrotik's perspective; shown in the "Routes" list; both ways. Eth3 is simply connected to an access port on a vlan that is part of the 192.168.1.0/24 network. Question, is the reason I can ping ip addresses on the 192.16...

tonyd

Greetings, I'm new to the Mikrotik world and trying to get my arms around the RouterOS from both the GUI and CLI side. But I have a specific problem/question. I cannot figure out why traffic is not being routed to a specific IP block/interface. The network is there, the route is there. I can confirm...

Search found 49 matches