Community discussions

MikroTik App

Search found 18 matches

by kalto
Mon May 03, 2021 10:20 pm
Forum: The Dude
Topic: Unable to connect Dude client since upgrading to 6.48.2 [SOLVED]
Replies: 2
Views: 16566

Re: Unable to connect Dude client since upgrading to 6.48.2 [SOLVED]

That's weird. As usual, after upgrading the server, I went and ran the dude as an administrator. It downloaded the update. I restarted the app thinking it had updated but clearly not. I downloaded it from mikrotik.com and ran it manually and now it connects.

Thanks for the hint!
by kalto
Mon May 03, 2021 5:19 pm
Forum: The Dude
Topic: Unable to connect Dude client since upgrading to 6.48.2 [SOLVED]
Replies: 2
Views: 16566

Unable to connect Dude client since upgrading to 6.48.2 [SOLVED]

Hi, One of our client is running a CHR (on vSphere) just for The Dude to monitor some devices in their network. We realized that the CHR hadn't been updated in some time, it was running 6.46.x if I remember well. Since the client was still running on the trial, we had them buy a P1 license to be abl...
by kalto
Tue Jan 26, 2021 4:28 pm
Forum: General
Topic: Slow VPN performance?
Replies: 9
Views: 7202

Re: Slow VPN performance?

Just an additional note, I tried using low encryption (md5, des and modp768). I got as far as 7Mbps and 30% CPU usage. I don't know if these are the lowest encryption available on the Mikrotik though.
by kalto
Tue Jan 26, 2021 1:48 pm
Forum: General
Topic: Slow VPN performance?
Replies: 9
Views: 7202

Re: Slow VPN performance?

I know that the HAP ac lite doesn't have hardware acceleration for encryption. Which is why I was expecting much slower performance on encryption. Still, with no dedicated ASIC for encryption, I was expecting the CPU to max out doing the encryption, but I'm still stuck at 5Mbps but with only 20-30% ...
by kalto
Tue Jan 26, 2021 1:15 pm
Forum: General
Topic: Slow VPN performance?
Replies: 9
Views: 7202

Re: Slow VPN performance?

Ok, problem is clearly with IPsec.

If I disable IPsec and just go L2TP, I'm getting 40-42Mbps.

I would definitely prefer to keep the IPsec though....
by kalto
Tue Jan 26, 2021 12:59 pm
Forum: General
Topic: Slow VPN performance?
Replies: 9
Views: 7202

Re: Slow VPN performance?

Well, 21Mbps would be ok for me. But I'm far from getting that.
by kalto
Tue Jan 26, 2021 1:05 am
Forum: General
Topic: Slow VPN performance?
Replies: 9
Views: 7202

Slow VPN performance?

Hi all, I recently bought a RB952Ui-5ac2nD (HAP AC lite) to connect the cottage to my home lab with a VPN. The home lab is running a 3011UiAS. The cottage has a 100Mbps down and 15Mbps up link. The home lab has a 300/300Mbps link. I have around 100ms latency between the sites. I was not expecting th...
by kalto
Wed Dec 30, 2020 6:45 pm
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

Tried it, didn't change a thing. Except that everything between the VLAN suddenly got NATed between them. One thing I didn't mention, thinking that it wouldn't have any impact (but it clearly has, see below) is the fact the that network that I am trying to bridge is located (L3 speaking) behind a co...
by kalto
Wed Dec 30, 2020 5:14 pm
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

Yeah, that's what I am trying to do. The bridging (either with EoIP or BCP) works. The problem is, everything located at the REMOTE site can't access the internet. From a layer 2 perspective, they access the Internet through the router at CENTRAL (by going through the bridge between site) but for a ...
by kalto
Wed Dec 30, 2020 4:01 pm
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

Did some more testing this morning. The problem is clearly in the masquerading and I can't figure that out. The Mikrotik at CENTRAL has a VPN to another location that can be used to route some stuff through the internet at that other location. I'm doing PBR using routing mark and mangle rules to rou...
by kalto
Wed Dec 30, 2020 2:13 am
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

I already did that. It all ends up at the mikrotik in CENTRAL.
by kalto
Wed Dec 30, 2020 12:39 am
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

I switched to BCP and got it working, at least to the same point as EoIP.

Still won't NAT when going through CENTRAL....
by kalto
Wed Dec 30, 2020 12:27 am
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

Well, I was testing with EoIP. As I was saying, this is a lab.

Also, I guess that I will have the same problem with BCP...
by kalto
Wed Dec 30, 2020 12:08 am
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Re: Device on other side of EoIP are not being NATed to the Internet

I've added two firewall rule with idea of logging packet: /ip firewall nat add action=masquerade chain=srcnat comment="NAT out" log=yes out-interface=pppoe-bell1 src-address=10.72.0.58 /ip firewall filter add action=passthrough chain=forward log=yes src-address=10.72.0.58 And the result is...
by kalto
Tue Dec 29, 2020 11:54 pm
Forum: General
Topic: Device on other side of EoIP are not being NATed to the Internet
Replies: 11
Views: 1992

Device on other side of EoIP are not being NATed to the Internet

Hi, I am playing with EoIP. I have two sites, let's call them CENTRAL and REMOTE. Note that this is a lab and not a production environment. I want device in REMOTE to be on the same subnet as those in CENTRAL. I also want the device from REMOTE to go through CENTRAL to access the internet, so the la...
by kalto
Tue Jan 28, 2014 4:16 pm
Forum: General
Topic: /ip address get not working anymore?
Replies: 2
Views: 1613

Re: /ip address get not working anymore?

Thanks for the tips! I'm still having trouble though. So, here is what I did: I first deleted the global variable currentIP to make sure that the script would run. Then, in a terminal, I ran this: [adminROUTER] > [ [... :global currentIP; [... :put $currentIP; [... :local newIP [/ip address get [fin...
by kalto
Sat Jan 25, 2014 11:58 am
Forum: General
Topic: /ip address get not working anymore?
Replies: 2
Views: 1613

/ip address get not working anymore?

Hi, Updated to 6.7 recently. Not sure if this is the cause of my problem but it seems to match about the time this problem started. I'm using a scheduler to check if my external IP address has changed and if it has changed, update my dyndns. Here is the scheduler script (run every 30 seconds): :glob...
by kalto
Fri Jan 24, 2014 5:16 pm
Forum: General
Topic: Strange behavior on a RB2011
Replies: 2
Views: 1082

Strange behavior on a RB2011

Hi, I've been pulling my hair (and I don't have many left...) for some days now. I'll explain the setup and then explain the problem. Recently, I added a layer 3 switch to my home network to be able to route between my different lab VLAN. My RB2011 was doing that job before but as I've added quite s...