Hi to All, I'm having some problems with the https hotspot: I have for many of my networks an hotspot with http pap and https option enabled, and an internal DNS address set. The https part use a certificate signed by letsencrypt. When a device try to load an http page (like the static one from the ...

Hi to All, I've updated the main router in my school this week from the 6.x to last 7.x version (7.4) and I've started noticing some problem that I haven't noticed in my lab environment: I'm using from many years the "reply-only" arp option on the interfaces of the laboratories of my schoo...

Dear community members, I need an help troubleshooting some problems I'm having in the last period with the hotspot/web-proxy modules. I'm using a CCR1036-8G-2S+ in the school where I work as the main router and firewall, and for many of the vlans that my network have I'm using the hotspot module to...

Hi to all, I'm trying to find a way to obtain the last mac addresses that have requested an ip address to a dhcp server that is set to be static-only, to add it manually. I know that I can temporary enable an address pool to see which address do the request and convert to static, but I doesn't want ...

Hi to all, I'm creating a particular setup where a server is present on different vlan with an ip per vlan, to communicate directly with the devices in that vlan, without passing from the gateway. I want to know if there's any way to create a set of static DNS for the server, with the same name, but...

Haven't considered the broadcast flooding :uhm: I've see the example above Here's a real case I've: vlan 1 -> 10.1.0.0/16 <- current vlan vlan 20 -> 10.1.20.0/24 <- new sub vlan vlan 30 -> 10.1.30.0/24 Should this work? Or does the new vlan to be in a different class to work? If I have to change the...

Okay - the solution for you is not bridging, but proxy arp. on the "original" vlan, set arp=proxy-arp Then as you add new vlans, just configure the subnet directly on the vlan interfaces in your router. Then reconfigure the hosts in each vlan with the correct subnet mask and default GW. I...

Your goal is unclear. Are you trying to do host isolation? Are you trying to subnet the /16 into smaller IP networks? If you're trying to subnet the /16, then you shouldn't use a bridge. You should put the various subnets of your master prefix onto the various VLAN interfaces. e.g.: 10.0.1.0/24 int...

Nobody can help?

Hi to all, I'm currently working with a big network (/16) that I want to splice in different vlans. There are many switch and all are attached to a trunk port on my ccr1009. At the moment I've only one vlan interface, with the vid 1 on that trunk port, and all the LAN traffic come from that. I'm usi...

Hi to all, We have just bought 2 crs125-24g-1s-rm to try how they work and if we can change our current switches. I've red the manual and example document, and have tried some function, and after some day of testing I've some question about some function that I cannot found or cannot set correctly. ...

Uhm... I don't think that this could be done only with mikrotik (at the moment). If someone call google.com, and the mikrotik answer, the certificate from mikrotik couldn't be valid for google, so te browser drop the connection before receving web data from the mikrotik (and a redirect to an other i...

Hi to all, I use a mikrotik as an hotspot on my network. I'm trying to fix up the problem with the un-auth client calling an https page. At the moment, the browsers of the client doesn't accept the connection because of the certificate (I've red the discussion about the problem with the certificatio...

Hi to all, I'm trying to configure an advanced setup for my network: I've a mikrotik router (v 6) with different networks, one for interface (at the moment I've 5 different networks/interfaces for the lan). The mikrotik is the router and also the dhcp server in all this networks. Two of this network...

Hi, I've started using a routerboard 450g from november in one of the my office. I've installed it as the main router of the office, with a dhcp, firewall rules, nat masqueration and some other little thing. I've put the wan connection (from my isp) on the first port, on the second there's the main ...