MikroTik

patrikg

It's working today, but maybe not tomorrow.
Take a look at this answer from Mikrotik Own Support Technician.
viewtopic.php?p=1114268#p1114268

patrikg

But don't do it in prod.

It's only for HO.

patrikg

After it finished, netinstall did not quit. Eventually I quit it with Ctrl-C. The router was unaffected and is now operating with defaults, ready for me to try reconfiguration again. *) netinstall-cli - added "-o" option to install devices only once per netinstall run; Have seen in the Ch...

patrikg

Please don't use L2TP for VPN for prod. nowadays. Weak cryptographic standards, Vulnerability to brute-force attacks on pre-shared keys, Potential backdoors or compromises in IPsec, and Poor performance compared to modern protocols. If you're using a VPN, it’s better to opt for OpenVPN, WireGuard, o...

patrikg

Can it be that the dhcp authoritative is not set or set to invalid value.

https://help.mikrotik.com/docs/spaces/R ... Properties

patrikg

Maybe you just missed the options keep-result=no

https://help.mikrotik.com/docs/spaces/R ... 2/REST+API

https://help.mikrotik.com/docs/spaces/R ... 8514/Fetch

patrikg

You could look at the first three bytes of the mac address, to see that mac address is from TP-Link device If that's any clue for you ?? https://maclookup.app/macaddress/a86e84/mac-address-details Maybe some one have put a TP-Link router into your network, that also answer to your clients dhcp reque...

patrikg

Have you tried to take it from a another angle, use another app like curl and get it working first.
And then use Mikrotik tool fetch command to do the same.
So you slice the/your problem into two steps.

patrikg

You have to be more creative with the tool fetch command and use some of the options to do a correct POST. https://help.mikrotik.com/docs/spaces/ROS/pages/8978514/Fetch#Fetch-Sendinginformationtoaremotehost If you search a little bit of the web you could find some example of this POST with the curl ...

patrikg

Hi @Vladimir22

Check out wiki:

It's the isp way of nat aswell like you.

What "public" ip do you have ??
Is the range like this
https://datatracker.ietf.org/doc/html/rfc6598#section-7
https://en.wikipedia.org/wiki/Carrier-grade_NAT

patrikg

CGNAT ?

patrikg

Change the name :

# Send the initial config file. routerOS expects filename to be autorun.scr.

patrikg

What dns are you using with the pc ? Do you use the router dns ?? That answers to *.teamviewer.com to ip adress 127.0.0.1. If you using another dns you circumstance this block. You can also make a mangle rule i think, to direct all udp 53 traffic to the router ip. So the clients can't use another dns.

patrikg

Do you self a favor and do it with the KISS method first.
With defaulted devices and only with the admin user.
And after it's working, you do more and hardening your system.

patrikg

Do you import them into the correct user ?
Or do you only using admin as username.

patrikg

Have you seen this:

https://youtu.be/8tt7fSvdFRM

patrikg

Please don't only use username and password as credentials, please also use PKI.

patrikg

Using windows i see(yoda), maybe the files are treated different, you may not use the correct end line char then. puttygen may produce wrong there for Mikrotik Linux way of end lines. So if you take the file into some editor or use the Linux command dos2unix to convert the files. You could also test...

patrikg

Is you doing like this ??
https://help.mikrotik.com/docs/spaces/R ... 50014/SSH
https://help.mikrotik.com/docs/spaces/R ... our+router

patrikg

Is 3CX traffic using specific dest port ?
Maybe you can mark the traffic and do the LTE route.

patrikg

If you search a little bit in this forum I think you have lots of answers.
search.php?keywords=iOS+18

patrikg

ON Windows. First, press Windows Key + X to access the quick menu and launch Windows Terminal (Admin). Now run the following command to list down all the network adapters: netsh interface { ipv4 / ipv6 } show subinterfaces Now note down the Interface name for which you want to change the MTU. Next, ...

patrikg

Some one want to control the computer and some one want to be controlled by the computer.

patrikg

Yeah and you loose the sd card interface.

patrikg

Hej!! Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems ...

patrikg

So this should be my final tool fetch line so you overwrite the incorrect value. /tool/fetch keep-result=no mode=https http-method=post url="https://rocket.example.com/api/v1/chat.postMessage" http-data="{ \"channel\": \"CHANNELID\", \"text\": \"test...

patrikg

Maybe the next thing to do is to get into the RouterBoot and(don't forget to take a copy of your licens key, so you have to enter it by hand from your screenshots): e - format nand r - reset the booter configuration You getting...error... rename: Read-only file system When netinstall have you tick t...

patrikg

Here you go.. if that is the file you looking for and is correct for your hardware(boot code for arm32). Dependencies: * curl * python3 * unsquashfs (maybe in package squashfs-tools) This is of course in Linux command line: mkdir firmware cd firmware curl -O https://download.mikrotik.com/routeros/7....

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Do some testing and troubleshooting with localhost and the pc you running from, first to see the differences. Also you get some more headers with Mikrotik like "Accept-Encoding: deflate, gzip" And like @rextended says you have to get the correct spaces places. Space | !Space. Like Hamlet: ...

patrikg

On the demo router from Mikrotik the "Time Zone Autodetect" is disable.
You can try setting it manually with your timezone, to get rid of the log message.

patrikg

This is HOTEL Mikrotik, you can never leave!!

Or even a Casino, there you are lost and can't/shouldn't find the exit.

patrikg

You need to run netinstall with sudo or with root user.

patrikg

I think the RouterBoot version 6,xx,xx something could not boot version 7.xx.xx of RouterOS. So you need to update to the latest 6 RouterOS, before you could upgrade to version 7 RouterOS. And of course when you have the latest ver of 6 you press update firmware(RouterBoot), and then you upgrade the...

patrikg

Strange thing to request, but there are something you can enrich the mac address with is the vendor code translation to vendor name.

https://standards.ieee.org/products-programs/regauth/

patrikg

@mkx You have make this table before, maybe this can bring more light to the frequent confusing case.
And reuse/recycle some computer bytes

viewtopic.php?p=1080113#p1080113

patrikg

I think you can even upgrade the RouterBoot from serial. With g command in RouterBoot Menu, but you need the fwf file(RouterBoot Code) TIP: And get all board info before you doing something, if you don't have the license key in file or printed out. I think I can see the key in your screenshots, so y...

patrikg

Sorry wrong forum

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

I don't know but can you set the sim card wrong, backwards?
So the LTE interface will not appear if there is not any working sim card detected.
And with Mikrotik devices you need to upgrade two things.
But with LTE you have to upgrade also the LTE modem.

So you have the latest and greatest

patrikg

Have you tried to use the interface name instead of ip address ?
Like this:

./netinstall-cli -r -i enp1s0 ../../Downloads/routeros-7.16-arm.npk

patrikg

How is the power ?? If you using some faulty PS ? If the modem needs more power than the Router.

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

If you add a static arp entry from mac address to some bogus ip like localhost address 127.0.0.1, they could not connect to each other.

But if the device is like IPhone it's more tricky because of the change of it's mac address all the time.

patrikg

The new way of doing netstat is via command ss, so this can be done with:

sudo ss -tnlp

That
t=tcp.
n=don't do dns lookups.
l=only listening ports.
p=what program/process is open this port.

patrikg

Maybe you installed some popup blocker and ad blocker, that uses the proxy approach.
Or even some vpn apps like tor ?
Or like mkx says it's some antivirus app.

patrikg

Have you read the fine wiki (RTFW)

https://wiki.mikrotik.com/wiki/Use_SSH_ ... ey_login)
https://wiki.mikrotik.com/wiki/Manual:S ... t#SSH-exec

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Sounds like you need to add some static routes.
If you can provide some diagram of what you want to achieve, it is a little easier for the members of the forum to help you.

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Please don't use username and password,it is't safe anymore use keys instead.

https://wiki.mikrotik.com/wiki/Use_SSH_ ... ey_login)
https://wiki.mikrotik.com/wiki/Manual:S ... t#SSH-exec

patrikg

Maybe this is because, how the ext4 drive partitioned gpt mbr ? My suggestion to try to wipefs (linux-command) or even use windows diskpart and do "clean" first and the try to format the drive in Mikrotik device. So the partition will be created on the Microtik device, not any another equi...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Maybe the printer needs/requests some dhcp options, that not the offers have.
I don't know if you can enable more debug logs, for the dhcp server, to see what the printer requests.

patrikg

I think you need to read little more about the api and the fetch command.
https://help.mikrotik.com/docs/display/ROS/Fetch

https://help.mikrotik.com/docs/display/ROS/REST+API

You need some more settings like http-method http-header-field http-data.

patrikg

Please delete the double post.
I am writing this on the first post.

And talking about python, have you seen this repo.
https://github.com/dvtirol/pynetinstall

patrikg

https://help.mikrotik.com/servicedesk/servicedesk/

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Sounds like you need something like hairpin nat.

https://help.mikrotik.com/docs/display/ ... HairpinNAT

If you can provide some picture of your setup it will be much better to this community to solve your question.
With ip addresses, not the puclic one, just your private one.

patrikg

If you are using Linux you could take the same route as I have.

Take a look at this thread and the last post, that solved my problem:

viewtopic.php?t=194537

patrikg

@mkx Thx,
I am not the best regex script kiddies

But if Mikrotik device count is false, it's also removes all the lines with hash tags.
But i not getting it with this low value 17266. Maybe it's not getting the hole file.

patrikg

Lets see: curl -s https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts | grep -v '#' | sed '/^$/d' | wc -l 154749 It's not correct because it removes the lines with hash tags even if the hash tag come after correct value. Like this lines. 0.0.0.0 iesnare.com # See http://www.codingthewhe...

patrikg

Have you tried to snmptranslate the hole Mikrotiks own mib.
To see if there is the field that you looking for.

curl -O https://download.mikrotik.com/routeros/7.15.2/mikrotik.mib
snmptranslate -Tz -m ./mikrotik.mib

patrikg

Have you tried to do it in webfig ? Not just in cli.

patrikg

without seeing the config........................... /export file=anynameyouwish (minus router serial number, any public WANIP info, keys etc. ) Hello @anav. When you request the forum user the config, could you also add how to use the forums code tags to the message. Don't you have any work to do ...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Have you exported the config from root of the system.
Type in this first in the terminal:

/export file=config verbose show-sensitive

Like this:

[admin@MikroTik] > /export file=config verbose show-sensitive

And then you can get the config.rsc file from the File menu.

patrikg

The main reson was you using POST instead of PUT.

patrikg

LANG=C date --date="@$(echo '2^31-1' | bc)" Tue Jan 19 04:14:07 CET 2038 From 2K Y problems to the new dooms day for Linux :) Dont get it, don't know why they don't goto 64bit LANG=C date --date="@$(echo '2^55+31739239172709231' | bc)" Wed Dec 31 23:59:59 CET 2147485547 Sorry to...

patrikg

Speaking of the issue of certificates.....
Since are completely useless becaues you can not do nothing, what matter?

Just want to be nice and let M know that their cert has expired nothing more

That is precisely why you should add a script that does it automatically.

patrikg

Speaking of the issue of certificates.
Mikrotik has not even done a renewal either on there demo routers.

https://demo.mt.lv/
Went out the door at 23 May 2024 07:41:48...

https://demo2.mt.lv/
Goes out the door at 18 June 2024 08:37:45...

Mailed Normis and nothing happend.

patrikg

When it comes to slow connections, you have to use commands like traceroute and use looking glasses thru diffrent isp's and to see if its the traffic someway take another ways. And using ppp you also need to think of the packet size, try to ping with diffrent sizes. So you can see if there being som...

patrikg

Here some links old one first:
https://wiki.mikrotik.com/wiki/Manual:S ... our_Router

https://gregsowell.com/?page_id=951

patrikg

And now you goto Files menu on the left side in winbox and you may have a file to click <Download> to download.

patrikg

Sorry to say!!

This question should be send to Mikrotik support department

Email:
support@mikrotik.com

Or make a support ticket on this link:
https://help.mikrotik.com/servicedesk/servicedesk

patrikg

Yes that's recomended, and you can also set that it doing that automaticly.

If you tick in "Auto Upgrade" in the menu RouterBoard and then key Settings.

You can do this because the boot code is within the RouterOS npk package file as fwf file.

patrikg

Here you have some words Mikrotiks: In Mikrotik linguistics: Name Mikrotik World PC World --------------------------------------------------------------------- Operating System RouterOS Windows 11 Firmware RouterBoot Bios/UEFI So if you click Upgrade in the RouterBoard menu you upgrade the RouterBoo...

patrikg

disappears, sounds like power issues.
Have you checked the power supply ?
Is the devivce running from POE ?
Have you checked the POE source ?

patrikg

If using OpenWRT or simular non Mikrotik OS, you may swithed the RouterBoot(Firmware) from BOOTP to DHCP. And Netinstall doesn't support that. You have to do like i have done in this thread. https://forum.mikrotik.com/viewtopic.php?p=1044565#p1044565 To switch back to BOOTP so you can use Netinstall...

patrikg

In the Interfaces menu at the modem.

patrikg

Please stop using passwords use ssh keys instead.

The thread is about SwOS, which doesn't support SSH.

Thanks @tangent i didn't know that, Mikrotik should implement that, add it to the christmas wish list

.

patrikg

Please stop using passwords use ssh keys instead.

patrikg

Just run netinstall on Linux not Windows.
Look at this:
viewtopic.php?t=182850

patrikg

The hope is not over. There is lot you can do. If you using windows, there lot's of problems being using that. If you are knowing how to use your comporter with another OS, you should try: To write usb flash stick with some Linux Live cd. Then booting this up and then download netinstall for linux a...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

You can click on this link and get to netinstall pages and print that if you want.

https://help.mikrotik.com/docs/x/DoB6AQ

After visiting the page Just press <CRTL><P>

patrikg

You will wear out the flash doing this.

patrikg

New package:

https://www.youtube.com/watch?v=AkBIQxi-VKs

https://help.mikrotik.com/docs/display/ ... s+packages

patrikg

Why not get the request header and the data ? So you see that is correct format from your app. You could use nc like this sudo nc -l 80 and change your file like this gw_client.BaseAddress = new Uri("http://127.0.0.1:80/rest/"); So you see like the header Content-Type: application/json Or ...

patrikg

You don't replaced with:
https://help.mikrotik.com/docs/display/ROS/REST+API

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

ok i see..i think you need to change the content type like this... http-header-field="Content-Type: application/json" /tool/fetch url=https://192.168.1.211:10443/rest/system/scripts/reboot check-certificate=no mode=https user=admin password="mypassword" http-method=get http-heade...

patrikg

You have curl.exe and ssh.exe and scp.exe in windows, and you have at.exe... at 23:00 /every:M,T,W,Th,F cmd /c "curl.exe https://192.168.1.211:10443/rest/system/scripts/reboot" And you maybe start the Scheduler. net start "task scheduler" And you view the scheduler task just run ...

patrikg

And if you are dealing with sub options you can do it like me code them by your self, and like @Amm0 says the best thing you have to sniff the traffic to get a know how...then you can do it trough the mikrotik device, You can use the mikrotik device and mirror some port to your computer and run like...

patrikg

Use the tools you have in the Windows environment you have.
Like scp like something this from command prompt:

scp admin@192.168.88.1:/usb1/adguard .

And for the zero bytes file, i think you have to stop the container before the you could access the files.

patrikg

Here some value ref for how to code the correct options with correct syntax. Look for value, and you can see how the line option being decoded. And if you are knowing the hole raw byte stream you could also check what the value being encoded to in the raw options in hex of course. And the best thing...

patrikg

Have you tried to set the router switch not to auto sense the duplex and speed ? If the Foscam have difficult to auto negotiate it's speed and duplex. https://demo.mt.lv/webfig/#Interfaces.Ethernet.1 Maybe you also can change the value on the interface in the Foscam. Also don't forget to to test ano...

patrikg

Double posted thread.

viewtopic.php?t=207417

patrikg

In the error message says cant get the server in ipv6,
You could try to force ipv4.

apt-get -o Acquire::ForceIPv4=true update
apt-get -o Acquire::ForceIPv4=true upgrade -y

patrikg

You should try to netinstall the device.

https://help.mikrotik.com/docs/display/ROS/Netinstall

patrikg

On what version is RouterOS the device you try to connect to ?

patrikg

Is Wireguard using some certs to connect ?
Haven't worked with WireGuard myself,
Maybe the certs have run out of date, best before date.

patrikg

You welcome and thanks for telling me it's working again. And when you are at it. don't forget also to upgrade the RouterBoot to it's newer version. It's very easy to do that, just press upgrade button on the RouterBoard menu in webfig. Or like you said in the cli. So you can use the newer version o...

patrikg

First of all your ip is in the range of... NetRange: 44.0.0.0 - 44.191.255.255 CIDR: 44.0.0.0/9, 44.128.0.0/10 NetName: AMPRNET NetHandle: NET-44-0-0-0-1 Parent: NET44 (NET-44-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Amateur Radio Digital Communications (ARDC) RegDate: 1992-07-01 ...

patrikg

You have to hold the reset button in when power the device and keep holding it after a while you will see that the device will get its RouterOS. And do you have some another interfaces on the linux computer like wifi. Disable that, and do you have any firewall settings on the Linux box. Disable that...

patrikg

Thanks for reporting this.

Have you checked the validity period of the ca cert ? Maybe 5 years have passed.
Maybe the ca cert was revoked.
It's great that you found what the problem was, but if you also can ask cloudflare them self.

patrikg

I am sorry to say... Have you tested the beta ? And is it only Windows the problem exist ? Windows can be little angry about the smb version, M$ have disable old versions, because of easy hacking issues. And what I can see my Linux mount, mounts at version 3.1.1 see my another thread. If you are ver...

patrikg

Can you provide some errors error code, debugging info ??
Is the dev the same in x86 and ARM ?? /dev/sda
And funzip ???

patrikg

In Mikrotik linguistics:

Name                        Mikrotik World     PC World            
---------------------------------------------------------------------
Operating System            RouterOS           Windows 11        
Firmware                    RouterBoot         Bios/UEFI

patrikg

You missed and mention how many vpn connections you will be running at the same time.
And what speed are we talking about ? Do you need sfp or sfp+ ports.

And there are Mikrotiks Distributors that can provide these figures for you.
https://mikrotik.com/buy

patrikg

I have also seen this new thing in some of the settings menus.
There you can expand the view.

expand.png

Maybe Mikrotik has forget to add these in some menus.

patrikg

@pimmie

Thanks for this link, many of none experience users need to read this.

patrikg

You can change the webfig behavior if you want, just click here:
Design skin

design.png

patrikg

Do you plug in something else in the usb port ?
Maybe some power issues.
If I getting problems with them I always putting a active usb switch between, to gain more power to the connected devices.

patrikg

I didn't even think about the use (), i'm kind new to scripting, thanks for the hint! If you know Linux/UNIX, the [] are similar to `` backtick to run a command and replace result in-place. Yes and the new way of doing this in UNIX/Linux, not using back tics chars. is like this. Use dollar sign and...

patrikg

Thank you for your reply, and please you can now mark this thread as solved.

At board style: Canvas

At board style: prosilver

patrikg

Is it new, or does there maybe be any old setting in the device ?
First step you should try to download winbox from this site, if you have Windows and run it, to see if you can connect to the device.

Windows 64Bit.
https://mt.lv/winbox64

Windows 32Bit.
https://mt.lv/winbox

patrikg

My suggestion is not to use ftp, make i vpn server on the router, and make a vpn connection into your network.
It more secure and more newer and trendier.
And only open up one port to the router.

patrikg

When using ftp you may consider learning about how ftp works, and how to use it properly.
It open up port's that not being open.
Try to enable/disable PASV(Passive mode), first in you client app.
Then you can see in this picture how the traffic goes

ftp.png

patrikg

Great you can now also mark this thread as solved as well, if you have now resolved what device you have.

viewtopic.php?t=206271

patrikg

Yes the firmware(RouterBoot) is in the RouterOS, you can update just pressing Update in the Routerboard menu. There like you say also RG750.. when i read the specs on RG750G I can read this. The UP have USB port. It’s probably the most affordable MPLS capable router on the market. With compact desig...

patrikg

Have seen this when you have removed names from userlist and they are pointed at from another setting.
So if you remove something you get the pointer *4 *5 *6 and so on.
I think Mikrotik have to script something when removing names or maybe just warn you there are pointers pointing to nothing.

patrikg

Have you tried unicode ?

/interface/ethernet set [find default-name=ether1] comment="\01\F4\80"

/interface/ethernet set [find default-name=ether1] comment="\F0\9F\92\80"

Have tested my self and seeing thats not working

patrikg

I have looked at this now, and found that you also have user and password in disk in the terminal window. Don't know if these uses in the smb config ?? I don't have Windows so i can't check that. /disk set sd1 disabled=no parent=none slot=sd1 smb-encryption=no smb-password="user1234" smb-s...

patrikg

Sorry, but my ideas have also run out, I think.

patrikg

I think we have come a bit further when it comes to troubleshooting smb on Mikrotik routers

patrikg

Maybe the Windows uses smb3 to connect and linux uses smb2 to connect.
I don't know how you can determine what version being used in the routeros.

patrikg

On windows it should be something like this:

net use h: \\172.16.0.1\share1 /user:"domain\user" "user1234"

patrikg

I have format the sd card with gpt, and 1 ext4 partition, with my linux.
Not with the router.

And when i see your config, i see duplicate user guest..

patrikg

Don't forget to upgrade the firmware the RouterBoot, if you have very old version.

patrikg

Have you read my thread changes in this thread.

viewtopic.php?p=1067532#p1067532

patrikg

I my find the bug, when exporting the config I see that the user that have access to the share is declared as *4. The correct user for me would be test. It is working with the guest account. add directory=sd1-part1 name=test require-encryption=yes valid-users=guest,*4 smbclient -L 192.168.88.1 --no-...

patrikg

What format is sd1 format as, and can you see that "user" have the correct rights to that folder.
There lots of things that can be the culprit.

patrikg

If you read the title it says testing. Change channel stable = 7.14.2 testing = 7.15beta9 development = 7.15beta8 Not so sure about that. Read first post in this thread. There you will find " What's new in 7.15beta8 (2024-Mar-21 09:12): " posted in testing channel as well. So here I think...

patrikg

None of these specifies the domain. smbclient //172.16.0.1/share -U user%pass nxc smb 172.16.0.1 -u 'user' -p 'pass' --shares smbclient //172.16.0.1/share --user=user --password=pass --workgroup=home nxc smb 172.16.0.1 -u 'home\user' -p 'pass' --shares And what I am seeing this line using MikroTik a...

patrikg

If you read the title it says testing.
Change channel

stable = 7.14.2
testing = 7.15beta9
development = 7.15beta8

patrikg

First of all, you are using NAT addresses out of range. The 192.168.0.0 is a B CIDR 16 address space. 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) And if you are not reaching the devices, with ping the first you should check if the device respond to ping and also check if your netmask in all de...

patrikg

May I ask you if your journey to upgrade the RG750 to newer RouterOS and RouterBoot if it went well and resolved ?? I can't get it from your messages, and have a Happy Easter. As for the routerboot you can even reset the routerboot settings with holding the reset button in in 10min. If you have the ...

patrikg

Don't be sorry. There are 4 versions of RG750 RB750 https://mikrotik.com/product/RB750GL https://mikrotik.com/product/RB750UP https://mikrotik.com/product/RB750G And your device haven't any specs of what ARCH being used. And the best of the thing is that you can do lots of stuff with the device and ...

patrikg

The RG750 is mipsbe device.

https://cdn.mikrotik.com/routeros/7.14. ... mipsbe.npk

Not arm

patrikg

Please posting config with the code tag.

[code]

Ending with

[/ code]

Without the space

patrikg

Have you read this:
normis recommend to upgrade
viewtopic.php?t=182708

patrikg

Oohhh I get it, thanks for that, but i have to make some tools for hold the reset button in in 10 min. reformat-hold-button-max: 10m That have solved my own problem very early with I have change the routerboot from bootp to dhcp, and not get it back to bootp to enable use of netinstall-cli. https://...

patrikg

Like eval in another script languages ?

patrikg

You can see that on the latest ver 7.14
And if you login to MT demo router you can see that as well.

https://demo.mt.lv/

https://help.mikrotik.com/docs/display/ ... ding+to+v7

https://help.mikrotik.com/docs/display/ ... stallation

patrikg

In webfig you can find the settings here:

Menu: PPP
Key: OVPN Server

ovpn.png

patrikg

In OpenVPN its something called push route.
I think i have seen some changelog saying it's now supporting push route.

So if you going into "OVPN Server" you have "Push Routes" there you have to add the another network.
So it's added into the client routing table.

patrikg

Please use the code tag, to avoid Cool smile face when posting code pre formatted.
Key </>

patrikg

I did the same thing and with --best but that also don't shrink the size down very much.
But i see very useful using upx with go compiled code. like gitea.

patrikg

Quick update, I noticed a huge container size increase with the new version, appears the linux netinstall binary itself is quite large now days, so have released some older versions of netinstall Eg. 7.14.1 is 55.7MB, 6.49.13 is 36.8MB Have you tested to upx the netinstall-cli ? To shrink the size ...

patrikg

How about to check to Mikrotik the version. Like something like this and download the npk automatically. #!/bin/bash echo Mikrotik Versions of firmware. echo Ver 6 echo long-term = $(curl -s http://upgrade.mikrotik.com/routeros/NEWEST6.long-term | cut -f1 -d' ') echo stable = $(curl -s http://upgrad...

patrikg

Netinstall will format the flash, so it's the way of erasing all.

patrikg

If it's dhcp relate, you can connect to pc and try to if windows run as administrator
cmd, and run ipconfig /release

patrikg

Windows firewall ? Maybe when you run winbox (v3.40) first time you disable it in the firewall. And now when you running (v3.35) it's not disable in the firewall. Or maybe like lots of windows stuff need to run as administrator. And using winbox, you can connect two ways, via mac or via ip. In your ...

patrikg

test=123 Should that just declare some int, and when you reading it with snmp, you just get int like char value of 123. I think you should try to assign a string instead. test="test" I am not any expert of RouterOS scripts, but like another programming lang and script lang. You can try to...

patrikg

Yeah, my point exactly. Bambenek went paid. I pay for it and its not that expensive. couple hundred a year. we strip RFC1918 addresses from all lists. As well as 0.0.0.0/0 and ::/0 as I've seen those show up before. I just whitelist Loopback and Multicast ranges if needed. Every implementation shou...

patrikg

The Chinese Xiaomi has released BE3600 WiFi 7 router for RMB 249 which is about $35 USD. How can Mikrotik compete with these companies? With a great community like this, and with a company that are very adoptive to our wishes, and of course lots of updates of there software with new features and bu...

patrikg

YouTube Jeff, the Raspberry/Ansible guy has also now some new videos with AMPERE CPU now with building with ASRock board.

https://youtu.be/Hz5k5WgTkcc

patrikg

Thank you for confirm that my hypothesis worked for you, and maybe also for others. :) Sorry to say this solution isn't 100% like also @DarkNate says. Because you can always use like vpn or another trix to circumstance these blocks. Like use of another DNS, you can block these DNS requests with forc...

patrikg

Sorry

Secure warning !!

Be careful if you download images other than from the official Mikrotik one.

patrikg

Why not take the Mikrotik router and make that as mirror switch. And then hook up a pc and sniff the trafic with wireshark. https://help.mikrotik.com/docs/display/ROS/Switch+Chip+Features#SwitchChipFeatures-PortMirroring And I think google is your best friend. https://www.sweclockers.com/forum/trad/...

patrikg

Maybe it's time for Mikrotik to develop two versions of RouterOS, one for "business" and one for "home" use. And even split packages when we have like OpenWRT.
When we have our own choice what we have this great hardware to.

patrikg

Have you also test with username & password ??

net use r: \\192.168.88.1\routerdisk /user:"ogi" "password"

And i think you can also use the net view command to see more about smb.

net view \\192.168.88.1

patrikg

When using smb, what dns is defined in the client ??

And what command for mapping ??

net use r: \\192.168.88.1\routerdisk

patrikg

The first thing comes to mind, do you need a public ipv4 address ?? Let's Encrypt certificates is internet facing certs so you need public ip for these. And these certs have a very short life span, you have to renew them a lot. First of all, I think you can easily check your WAN ip on your router if...

patrikg

May I ask you what cable have you tried ???

patrikg

@DarkNate What happens if the software uses port TCP:443 for the relaying of the connection? Or use randomised DNS hostnames that flow over encrypted DoH of the client software itself? You can't just “block” everything without some downsides. Please don't feed the trolls with food. You can even say ...

patrikg

That's another story, to tell Mikrotik that there missing some fields in there snmp. This question shouldn't be in the Scripting section, this question should be transferred to the section with all the expansion of functionality of RouterOS. Have seen some indication of asking for moderators in this...

patrikg

Do you know how teamviewer get it's endpoint ip from ? You have some serialnumber ID, and the client uses that to the server to get it's endpoint ip. So if you block this connection to the server, the client can't get it's endpoints ip. Maybe also teamviewer has some static ip to the server, in ther...

patrikg

You need to be logged in to be able to press and see this bar, and you must press the thread answer that solved your problem. In this case, your own answer. @holvoetn So we as the community of solving these problems don't have to read already solved problems. And maybe in the feature the AI will get...

patrikg

Why not using the mib to figure out... curl -O https://download.mikrotik.com/routeros/6.48.6/mikrotik.mib snmptranslate -Tz -m ./mikrotik.mib | grep -I LTE "mtxrLTEModem" "1.3.6.1.4.1.14988.1.1.16" "mtxrLTEModemTable" "1.3.6.1.4.1.14988.1.1.16.1" "mtxrLTE...

patrikg

We are very pleased to hear you solved the problem, but we would be even more pleased if you also hit this bar to mark this thread as solved.

patrikg

I think this could be done with dns, so you reply with some bogus ip. Because teamviewer connect to the server to get to the end point, so if you get all dns request names to the teamviewer servers you can block these. Standard query 0x84b9 A router7.teamviewer.com Standard query 0x3743 AAAA router7...

patrikg

And for correct routing with routers you need to provide the correct netmask.
Have you checked you have the correct netmask in all your devices.
It's so easy to forget this part.
In your diagram I am only can see one netmask /24

patrikg

Are you on CGNAT maybe ? So you don't get a usable public ip ? And can you describe a little more what you want to achieve? And in Mikrotik devices, the hotspot should only be reachable from the inside (LAN) Do you get something like this ?? CGNAT has its own reserved IP range between 100.64.0.0 and...

patrikg

Have also seen some ISP, don't want there customer use a router just use a modem.
They check that with the ttl, so a workaround to that will be to mangle the ttl.

Now you can press this bar to mark your thread as solved.

patrikg

Here some way of not using netinstall.

https://github.com/dvtirol/pynetinstall

patrikg

And talking about drawings, what program or app or web app do you use ??
I have to web apps to share links to:

https://app.diagrams.net/

https://excalidraw.com/

patrikg

Read about port mirroring.
https://help.mikrotik.com/docs/display/ ... tMirroring

patrikg

When i read this, i get a feeling of that your isp only lease out only one ip. So when you tries to test your router, your public isp ip has already been leased out to your computer. So how to get this working, you have to release the ip from from what equipment that have the ip. With Windows comput...

patrikg

You can prioritize the default gw vpn traffic with the metric value on the interface.

https://forums.openvpn.net/viewtopic.php?t=9191

There also some another options like autolocal.
Like this

redirect-gateway autolocal

patrikg

You can test to format the drive within the Router.
Because you get "Permission denied" error i suspect there something about the format or user permissions.
What user have created this dirs ?
You could try to make this dirs as root on your another system.

patrikg

May I ask you what file system format do you format the drive with ?
ext fat ntfs....???

patrikg

Here you have lots of scripts to do vm's and lxc's in proxmox.
But little off topic, but it has also script for Mikrotik CHR.
https://tteck.github.io/Proxmox/

https://github.com/tteck/Proxmox/raw/ma ... outeros.sh

patrikg

How many people today steal a SIM card ?
SIM cards locks today do not serve any purpose, because
the mobile phones themselves lock with a different code or face or thumbprint.

patrikg

Now you can press this bar to mark your thread as solved.

patrikg

Now you can press this bar to mark your thread as solved.

patrikg

Have you tried turning off password login and running the slightly more secure login model via pki, check this link on how to import your public key. https://help.mikrotik.com/docs/display/ROS/SSH#SSH-EnablingPKIauthentication You should try not to use passwords, and apply a more secure login. And c...

patrikg

Now you can press this bar to mark your thread as solved.

patrikg

Now you can press this bar to mark your thread as solved.

patrikg

Why go the script way of doing this ?
I think it should be lots easier to go to the snmp way to monitor the traffic.

patrikg

And even look at cgnat ?
If your isp uses that.
https://help.mikrotik.com/docs/display/ ... AT(NAT444)

patrikg

Now you can press this bar to mark your thread as solved.

patrikg

Yes you can, I think you need to look at this site. https://help.mikrotik.com/docs/display/ROS/RouterBOOT https://help.mikrotik.com/docs/display/ROS/RouterBOARD#RouterBOARD-UpgradingRouterBOOT https://help.mikrotik.com/docs/display/ROS/RouterOS+license+keys And be careful, so you don't loose your Li...

patrikg

When i read this, something says me that your app even tries to connect to your wan ip.
If so you should look and enable the function hairpin nat.

https://help.mikrotik.com/docs/display/ ... HairpinNAT

patrikg

Have you seen this one ?
Maybe this one is for just for the server, haven't seen it myself.
But knows this site is a great source.
https://gregsowell.com/?p=5748

patrikg

Have you considered reading the mib ? And with it's correct version of your device firmware ? https://download.mikrotik.com/routeros/7.13.3/mikrotik.mib And you maybe can read out mtxrHlVoltage(V) and mtxrHlCurrent (mA). And you can then calculate the power for your self. snmptranslate -On -m ./mikr...

patrikg

What dest ip should the Mikrotik router forward this port to ? If you using two routers, are you also doing double nat ? If so, my best suggestion is to disable the routing in the Mikrotik if you can do so from your isp cpe. So the Mikrotik just become a switch/bridge And your own asus router will s...

Search found 370 matches