MikroTik

cylent

I have to correct myself. I wrote using source adress was not possible on a single router/device and that was not correct. I am using more than one tunnel at the same time so I never was able to use source address. In your case you have to choose one of them, and as you use a range of your local ne...

cylent

You was mixing routing and connection marking. I would start again with the info page of Mikrotik self and only use connection marking. i dont think so. nevertheless, i may reset the router and start again. cause this is just frustrating me. [admin@...] /ip firewall mangle> print Flags: X - disable...

cylent

Change to: /ip ipsec mode-config add connection-mark=nord name=NordVPN responder=no /ip firewall mangle add action=mark-connection chain=prerouting new-connection-mark=nord passthrough=yes src-address=192.168.88.10-192.168.88.254 Offered a router setup to put yours in. i added the parameters you ex...

cylent

This is not the solution, but you should not use mark-routing when using a single router. Only Connection marking (mark-connection) is to be used. The IKEv2 joins the WAN and has so no separate interface and only uses the dynamic NAT to get the traffic to the WAN. so whats the solution then? the ma...

cylent

can someone assist me in this. i dont know what i am missing or doing wrong. i followed the guide here and was successful to every part BUT i am not sure why theres no connection or what i am missing to make this work. https://support.nordvpn.com/Connectivity/Router/1360295132/Mikrotik-IKEv2-setup-w...

cylent

This should be simple but I am not having any success. I formatted the router and plugged in the lan cable and accepted the default configuration mikrotik suggests. The lan cable coming in from the adsl modem into port 1 on the mikrotik router. Wireless and internet works. Now, I want to add a clien...

cylent

all the mikrotik professionals have no answer?

how odd.

cylent

I am curious and some providers have claimed that they can detect clients that take advantage of using pcc... Is this possible?

cylent

What i want to do is very simple for some but is confusing for me. Basically I have 3 pppoe (WAN) connections. I have a local Hotspot subnet of 192.168.99.0/24 I want to split these guys up so a range of 192.168.99.2 to 192.168.99.50 goes to PPPOE1 192.168.99.51 to 192.168.99.100 goes to PPPOE2 and ...

cylent

Whats a good way to share two gateways (routers) on one LAN? What i mean is i have two WAN connections. One static IP and one PPPoE ... right now i am running off the Static IP and all is well. I want to add the second connection which is the PPPoE and have my LAN benefit from both. At times the PPP...

cylent

ok the subject says it all. i'll explain. i've been struggling with the wifi on my routerboard which has a AR5213 mini-pci card. when the wifi (AR5213) on the routerboard is active and i use it from my laptop and i ping the routerboard i get mad crazy pings of 100's to 500's to 1000's and even lots ...

cylent

Thanks for the reply, JP_Wireless

as i said this is also the same exact problem on the rb2011 which has a built in wifi. they are both (the rb600 and the rb2011) using version 6.7....

cylent

This is a weird one. at least for me. I am having trouble with switching my wifi to anything other than B mode. if i switch to G my ping rockets from 1-10ms to 200ms+ with freezes randomly on the laptop/android/anything. if i switch to B/G/N same thing N by itself. same thing. The only thing that wo...

cylent

This is an odd one.

In my /tool torch i see traffic being generated from "SRC Address: 255.255.255.255" and "Dst Address: 0.0.0.0/0"

What could this be and how do trace/fix?

please advise.

cylent

quick question ... i have a bridge type setup in my environment. almost all of my routers are merely bridges. so for example my main router that does everything (hotspot and pppoe + provide internet) has ports 2-6 bridged. then i have a 9 port rb2011 connected to the main router above via cable. the...

cylent

RB751: /interface bridge add admin-mac=D4:CA:6D:80:B7:FF ageing-time=5m arp=enabled auto-mac=no disabled=no forward-delay=15s l2mtu=1600 max-message-age=20s mtu=1500 name=bridge-local priority=\ 0x8000 protocol-mode=rstp transmit-hold-count=6 /interface ethernet set 0 arp=enabled auto-negotiation=ye...

cylent

Please first see attached picture. The problem: The RB751 Access point is getting a Lan cable from the router above. All ports on the access point are bridged (wifi also) ... I've given the bridge on the RB751 an IP address on a different subnet though, 192.168.160.5/24. There is no route or any co...

cylent

I am trying to follow the example at the end of this page : http://www.mikrotik.com/testdocs/ros/2.9/root/queue_content.php#6.54.6.3 for my router. Now. the question remaining is this: ok so i setup that example for an 11meg up 11meg down connection. i have a boss who wants to be ONTOP of these rule...

cylent

ether5 is 192.168.8.2/29

server is 192.168.8.1/29

cylent

The server (192.168.8.1) is on an interface thats no where near the hotspot/pppoe on the mikrotik.

Ether1 is for net.
Ether5 is for the server (192.168.8.1)
ports 6-11 are bridged to make one port and thats what the hotspot/pppoe is on.

cylent

I don't want to sound rude but that's not much help. I've already created that rule missing only the external ip as in the example 69.69.69.69
The problem here is how can a simple cheap routes be it tp_link or linksys do what's needed so easily while I can't do it in RouterOS

cylent

I've been fighting with this issue for a few days now. I have a server behind my RB1100 that has HotSpot/PPPoE. All seems to be working just fine for the MTRouter which is great. I just need to port forward port 8787 so when i type my external IP with port 8787 (1xx.224.27.xxx:8787) it sends me to m...

cylent

I have an odd problem thats somewhat confusing. One mac addresses connected with different IP addresses issued from the DHCP server. The MAC address database says its a "Sony Ericsson Mobile Communications" device. So i figured it's a phone. But why does it have so many IPs and all of them...

cylent

Ok this should be simple and straight forward. /ip firewall mangle chain=prerouting action=mark-routing new-routing-mark=facebook passthrough=n> in-interface=Users-br-6-10 content=facebook basically we are looking for packets that contain the work "facebook" and mark routing for them then ...

cylent

Whats the easiest way to copy the config from a rb493 to a rb1100 without doing everything manually?

i know the export command however the port numbers and mac address are different on the two routers.

please advise.

cylent

I need to setup wifi at a house thats actually more of an office. every room is an office... somewhat. so signal is literally very important. I wanted to have dual radios (a/n and b/g/n) in a few routerboards ... the only one that looks/is easy to setup is the rb2011-wifi but thats only 2.4 and i ne...

cylent

Are you trying to use some kind of free service? If the bearer circuit can support 30 x PPPoE then it would be a lot easier if you could just pay the ISP for 30x bandwidth on one session.... its not free service. unfortunately the guy in charge says its a system wide policy and not worth the hassle.

cylent

What do you want to achieve? - Your goal is to deliver ISP logins to your network, is it correct? - Once router is added between your clients and your ISP, I guess you can simply add PPPoE client to outgoing interface and setup PPPoE server on router and provide clients with PPPoE service (locally ...

cylent

anybody got any ideas? this is soo frustrating.

cylent

Ok this is somewhat a mess... i expected it to work and it isnt working. i have 30 virtual ethernet ports. all in one bridge with ether1 this is bridge1. i then created pppoe-dialout-client accounts. on each pppoe-client account i chose vif1, vif2 and so on. but it cant find the pppoe server. only i...

cylent

I'm not sure I correctly understand your description. However, if ISP PPPoE server has restrictions for one mac and single login, it is more correctly to contact them and ask about possible solutions. If you have your own router between ISP and clients, put PPPoE client on public interface and dist...

cylent

anybody?

cylent

I purchased a RB1100AH today in hopes it'd be sufficient for what i want. i installed on it 6.0rc6 however i noticed a few oddities. 1) In the interfaces menu there is no "Virtual Ethernet" option. Its simply is not there.... its missing. on my home rb2011 the menu IS there. why is it miss...

cylent

Hello All. After some time trying to figure out the reason to my multiple-pppoe gateway issue i found the problem to be "one session per host" is enabled. On my test bed I created a pppoe server and my test router. Obviously i wanted to make it as close to what the provider has as possible...

cylent

i am so happy i found the problem. on my test pppoe server i had "one session per host" selected and thus it wasnt allowing multiple pppoe sessions to work at the same time. now my fear is the ISP may have that option selected also and i am probably sure they do. is there a way to have eac...

cylent

Ok i rearranged everything into one subnet. still having the same 1 pc pauses while another goes then the other pauses. my question is in the nat rules do i have to specify the "out-interface" to be the pppoe-out connection corresponding to that rule? also in the mangle rules should the in...

cylent

ok ok ok now i understand. one subnet 192.168.10.0/24 and separate mangle rules with "src-address=192.168.10.2-192.168.10.5" for each mangle rule and then go with that. this is great! no need to worry about dhcp problems and only one gateway as you said. i'll proceed to try this. in refere...

cylent

As far as I see the 3 different subnets are all on the same physical network so quite what purpose they server is a mystery to me. You can specify IP ranges in the Src Address field of a mangle rule - so why not keep it simply and just use one subnet? I suspect that you went down that path because ...

cylent

part1: ok great i'll have to try again. i figured each subnet would be a pppoe-out connection. and it makes life easier on the mangle and nat rules in the src address box. for each subnet i want to have 3 pcs (192.168.10.2-192.168.10.5) 20.2-20.5 and so on. i am not sure i follow you on one subnet ...

cylent

i appreciate you assisting me on this issue, CelticComms lets pause on that routing issue for a minute and delve into the dhcp networks one. obviously i'd want a dhcp server with multiple pools to server the users. i can setup a dhcp server with a starting pool and have pool1 be next and pool2 and s...

cylent

e.g. add disabled=no distance=1 dst-address=192.168.10.0/29 gateway=LAN-Bridge routing-mark=\ 10users scope=30 target-scope=10 add disabled=no distance=1 dst-address=192.168.20.0/29 gateway=LAN-Bridge routing-mark=\ 20users scope=30 target-scope=10 add disabled=no distance=1 dst-address=192.168.30....

cylent

I suggest that you add routing entries to the relevant 192.168.x.y subnets with the appropriate routing marks

I don't understand can u pls show example

cylent

heres the problem so far. one machine would continue working and the would drop yet on the winbox it shows both PPPoE connections (clients) as connected. As if its giving machine B priority and ignoring machine A. They should both be working together. Yes. All PPPoE connections are going out on the ...

cylent

i am not sure about pcc.
the thing is each bunch of clients have to go via one pppoe link cause each pppoe link only has so much bandwidth thus the next 3 or 4 people have to be on a different pppoe link.

cylent

Ok here goes I would like your feedback if this is possible with RouterOS on a RB600 (as an example) To start with I have 16 users at the work location. Then i have 4 PPPoE accounts for internet access from the provider. What i want is to create 4 subnets each allowing ONLY 4 (ips) users. so i figur...

cylent

anybody want to help with this please?

can anyone help me with the mangle rules, please?

cylent

i tried to mark packets and apply a queue using mangle and content on "au.download.windowsupdate.com" and the mangle rule had hits but it didnt work. example sites: ardownload.adobe.com a1410.phobos.apple.com au.download.windowsupdate.com swcdn.apple.com a474.phobos.apple.com wl.dlservice....

cylent

this may sound too easy for some but its not something i can figure out. lets say i want to block windowsupdate.com or download.windowsupdate.com or phobos.apple.com the problem is these sites dont have one ip address. most have 10 or even more and theres no way to figure them all out to drop traffi...

cylent

how do you type the following for layer7 regexp matching?

http://www.yahoo.com/

or

http://www.facebook.com/

or

http://live.login.com

?

cylent

I am trying to use wireshark to sniff the traffic so i can fill in the mangle content field properly. i am basically trying to see what the packet says for yahoo and by the picture attached i am seeing its separating things. when i type the word in the "mangle content" box. do i type in &q...

cylent

very nice.

now i get to catch all those .cab windows updates machines!

cylent

this is a wonderful solution...

dont know how people wont start abusing it because you maybe giving priority to lets say facebook.com and all of a sudden they are feeding crap from that.

it would also be nice to unify or lessen the rules?

cylent

anybody got any feedback on this?

again; i want to basically give www.msn.com or whatever.com full speed instead of the limit set on the user.

is this even possible?

cylent

is it possible to mangle a website location for example http://www.gmail.com and give it to the user at higher speed?

unfortunately because i have disabled masquerading and i am forwarding all my clients to my squid cache its not an option to use the web proxy which will probably do what i want...

cylent

like this?

X ;;; proxy is NOT a Open Proxy
chain=input action=drop protocol=tcp in-interface=Net-5 dst-port=8080

cylent

thanks, i actually referred back to your guide and it worked wonderfully.

except not for pppoe users.

cylent

does nobody know how to filter this so it wont show?

cylent

ok so i am configuring my squid box to cache files that are large in size. for example, .exe, .dmg, .ipa and so on. the only problem is the mikrotik router downloads these files to the user at regular speeds. since they are from my local network i need them to be at full speeds. can we set a rule th...

cylent

tjc: wow. literally. wow! this feature is absolutely amazing! it found two servers on my network instantly!!!! a tp-link and a netgear. but i am 100% sure i disabled those after finding them. i wonder ... now for the scripting. can you show us by script on how to block these two macs? please :D :mrg...

cylent

in my system logging i have:

10 account memory

yet i keep seeing these annoying messages that filling the log window :: (see attached)

cylent

wow what a disaster

mt really has no simple way to do things for those inexperienced.
you have to do 4 things to perform 1 task.

prerouting, postrouting, in, out, ..... does it end?

cylent

whats the ! do i never quite understood that?

cylent

i assume /32 makes it only one pc?
do i really need to put /32? cant it just be 192.168.5.15 ?

cylent

i am trying to basically use my pfsense installation to do some, if not, most of the firewalling for me and my users. currently i am forwarding all http traffic by mangling it to pfsense to keep track of users activity via these rules: /ip firewall mangle chain=prerouting action=mark-routing new-rou...

cylent

what about disabling forwarding on the wireless link ? or is that irrelevant?

cylent

wow thanks for that great reply, jvr. this would be my very first time working on vlans... doesnt sound all that difficult.. i think option 3 would be to work on creating a firewall filter on the sxts. currently i have the system setup like this: main office internet --sxt bridge <--> sxt station br...

cylent

Feklar: sadly the most powerful managed switch my company has is a poweredge 2748 and it doesnt have anything near that feature. jvr: yes. via switch so (question-1)what i dont understand still is this: i have a dhcp server running on my network for hotspot. the clients all have dhcp ips issued to t...

cylent

thank you for the quick reply. i have done this so far... i have enabled authoritative=yes on my dhcp server in routeros then i set a filter rule ;;; rogue dhcp chain=input action=drop protocol=udp src-address=192.168.0.0/16 src-port=67-68 whats funny about this rule is i am seeing traffic grow rapi...

cylent

hello all. today i had a problem wtih rogue dhcp traffic from users plugging in their routers returning dhcp onto my hotspot causing a problem. i found this in the wiki however i dont use a bridge as in the example. can someone help please? http://wiki.mikrotik.com/wiki/Bridge_Filter_-_Blocking_DHCP...

cylent

how can i disable nat for one specific user on the network? for example my hotspot network is 192.168.5.0/24 well i have user 192.168.5.15 who i need to disable masquerading for because i am creating a mangle rule to mark routing for and pass it elsewhere. the problem is the main masquerading rule i...

cylent

I have somewhat succeeded in this but half way i am trying to push out whats in the proxy cache at full speeds to the user over-riding their speed limit. first, i have hotspot and pppoe on my router. i have then enabled transparent proxy with: ;;; transparent proxy chain=dstnat action=redirect to-po...

cylent

can someone please demonstrate by example a simple script to change port speed at a given time?

so for example at 8am change ether1 to 2Mb speed.

cylent

it wont be 3 links = 1 speed.
it'll be "pick the best one" or "random" at times.

the sad answer is: it'll never work. and you'll always end up using the slowest link out of the 3 or you'll end up overloading one and the other 2 get unused.

cylent

its absolute rubbish. i wasted a whole day messing with it and it did what for me? NOTHING! hardly did it ever cache anything. it kept saying every website i went to had dynamic content and is not cache'able. and thats true because the web today is all dynamic. gone are the days of yahoo.com or msn....

cylent

hmm. didnt know it had that feature. i'll give it a shot.

cylent

so in the end... whats the working solution ?

cylent

ah. so its a script. now i know why when you google thundercache you get so many results...

i dont care about youtube caching. i want a script that opens concurrent sessions.

cylent

what would be the best way to perform the following?

a user to type in "logout" in the address bar for internet explorer, chrome, firefox, and get the hotspot logoff page?
so i type in "logoff" and i get sent to http://192.168.0.50/logout

is this a static ip or a proxy redirect?

cylent

ok so i decieded to transfer all my users database to a radius server (Radius Manager 4). and while its a great product i feel like i am lacking the ability to keep track of the logs. if i enable in the logging "Radius --> memory" i cant keep track of anything! i mean fine i can enable hot...

cylent

cool idea. keep up the good work.

cylent

Hi, Squid see the IP 192.168.7.5 because you are routing your client. try to do this modify at your settings: chain=srcnat action=masquerade src-address=192.168.99.0/24 dst-address=![IP of your squid server] out-interface=Net-5 so this replaces the other masquerade rule ? and all the other rules in...

cylent

I am trying to accomplish this and i have followed Syed Janazaibs' guide on how to do it except on my setup i only have ONE external and thats going directly to my untangle filter. In the guide he has two externals -- one going to the proxy and one going to the net. my setup is simple: we have Hotsp...

cylent

this is a great product and it puts usermanager to shame. of course who was expecting usermanager to be anything but a toy is in for a surprise.

still though what other products are there to compete with RADman?

cylent

how funny.

posted jan 24th and today is march 8th. still no reply.

this is very awful from mikrotik.

still though the answer is its probably a bug. log out, log back in and it shows users.

cylent

1 A sessions
&
1 A users

even though there is no one logged in and i forced the user off (disconnect) it still shows that ...

only after i logout and log back in does it correctly show 0.

is this a bug or a feature? shouldnt it refresh the number when no user is active?

cylent

I am having trouble adding rate limits into user manager profiles. These rate limits work fine under hotspot profiles. i am merely trying to duplicate them so i can use user manager instead ... for some reason however its failing to add the queue. also, why is it a small "k" isnt acceptabl...

cylent

doesnt matter. went ahead and did it and it worked.

cylent

hello all.

quick question,

is the illustration in the diagram attached workable?

multiple pppoe users + hotspot + dhcp bridged over two sxts ...
workable?

cylent

the only difference i have is nat masquerade set to source ip 192.168.10.0/24.

what do you mean : nat on ppp-out interface? can you show rule please?

cylent

you'd think this would be easy to setup... but its not. i am dedicating a full routerboard to be a pppoe client for my home network. i've setup pppoe client with the proper username and password i've enabled NAT masquerading and i've setup a small dhcp server. the only problem is it sits there sayin...

cylent

can anyone help me with the mangle rules, please?

cylent

Sure. For DHCP just set several dhcp pools and set them in chain ' when one is used up it will switch to next. To route specific users to specific pppoe interface you have to use mark routing. It's pretty much basic setup that you may learn form manual. In principle, you use mangle to set routing m...

cylent

I would like your feedback if this is possible with RouterOS on a RB600 (as an example) To start with I have 16 users at the work location. Then i have 4 PPPoE accounts for internet access from the provider. What i want is to create 4 subnets each allowing ONLY 4 (ips) users. so i figured i'd use th...

cylent

odd problem ;; on my routeros i have configured a rule to make transparent proxy redirect all traffic via web-proxy. then on web-proxy i enabled parent proxy and put in my TMG (Forefront Threat Management Gateway) ip and port. now. everything started to work and i can see all traffic working fine vi...

cylent

This is interesting for me too cause i need to limit rx and tx.
tx limiting is not an issue because i can limit that and that works.
however rx. why cant we limit rx?

is there another way around this though? perhaps a simple queue?

cylent

[[update: i disabled the master port setting on the ports and added them all to one bridge. its working as intended and traffic is passing through just fine.]]

cylent

ok i have to admit this is a cheap and lame way of turning a Mikrotik 493G device into a "managed" switch but i am limited when it comes to money. the problem is this: on the ports it doesnt show the traffic. it only shows the traffic on master port for the port selected. so if i am passin...

cylent

Assign f.ex 192.168.6.0/24 as the extra network on the wan side, change the rb250 to 192.168.6.0/24 network. But yes, it does not make any sense to have the 192.168.5.0/24 on both sides of of the firewall. You either have to change the the network on the wan or lan side, or make another solution wi...

cylent

Do you use the same subnet on both sides of the firewall. Change to a different subnet on rb250 and assign one extra address to the firewall on the wan side. i was thinking about that... changing the ip on the rb250 however to what? the rb250 is on the external interface for the TMG box. what do yo...

cylent

the subject says it (sort of) the setup for my network is a simple one. i am using the rb250g switch to be the main source for the internet. so internet --> rb250g switch --> firewall tmg switch --> domain --> users. even if i log into the firewall tmg machine i cant ping the rb250g switch! it has a...

cylent

It will work as one switch, but actually its two switches bridged together: switch <-> bridge <-> switch. i did a bandwidth test and the CPU rose to the roof (100%). good news is i was getting 400mb (50MB). not the best but still a useable number. certainty does defeat the name "Gigabit port&q...

cylent

by the way the blink button doesnt do anything . ... i assume a cable has to be plugged in for it to do its function? back to the subject; for ether 1 i slaved 6,7,8,9 for ether 2 i slaved 3,4,5 then i bridged ether 1 and ether2. this should work... Right? now i have one switch? second question; i n...

cylent

Ether1,ether6-ether9 ports are connected to switch-chip1, ether2-ether5 are connected to switch-chip2. Any of the port from switch-chip1 or switch-chip2 can be configured as master-port by assigning assign other port from the same switch as its slave port. There can only be one master-port per each...

cylent

It is not possible to switch 8 ports in single switch group. However you can make ether1+ether6-ether9 and ether2-ether5 switch groups and then bridge the master-ports. can you please explain this part a bit more? so ether1 and ether6 are the master ports and 7-9 are slaves to 1 2-5 are slaves to 6...

cylent

that worked. thanks.

cylent

so i just picked up a 250gs today. Its a cute little box for a cheap price. i tried to upgrade it to the latest 1.6 software however it keeps sitting there saying: Upgrading...(Please do not interrupt) this goes on for like an hour or so. also, is the firmware upgrade file, swos-1.6.lzb supposed to ...

cylent

The RB600 has no switch chip. Why you want to set master port?

Sent from my GT-N7000 using Tapatalk

interesting. yet it still works as a switch by grouping all ports into a bridge.

cylent

My opinion: If you need a switch, buy a switch.

i want to make the routerboard into a switch so i can use it somewhat like a cisco.
cisco switches are very very expensive.

cylent

well this is interesting.

i have a rb600a unit. i upgraded it to 5.9 and all went fine.
except in the interface settings i am missing a lot of options.
for example theres no master port option to create a switch

theres just so many options missing.

why?

cylent

It is not possible to switch 8 ports in single switch group. However you can make ether1+ether6-ether9 and ether2-ether5 switch groups and then bridge the master-ports. thats interesting. i was considering purchasing this rb for this purpose. now if i bridge ALL ports will it make all ports a switch?

cylent

hello all. after a recent arp attack i had happen on my LAN i was advised to use a routerboard as a fancy "Cisco" switch. the idea of course is to monitor traffic via torch or any other means... although still somewhat a bit of a new area to me and after searching i figured out its a simpl...

cylent

i know this is an old topic but i just had to point out how this idiot (akram) has a cracked version of routeros 3.22 running (in the screenshot). should be banned from the forums as far as i am concerned.

cylent

thanks for the help so far.

anybody want to help out on this one, please?

cylent

sorry its not working for me. the minute i disable masquerading i cant open any website then or ping or anything. both your rules are 17 & 18 in the attached picture... masquerading is disabled and i have no net. if 17 & 18 are both enabled i get nowhere ... if even one of them is enabled i ...

cylent

If you need the Untangle server to see the real IP address of the Hotspot client you have to exempt the Hotspot network from having its source IPs translated when being forwarded to the Untangle server. Add this: /ip firewall nat add chain=srcnat dst-address=192.168.5.1 src-address=192.168.99.0/24 ...

cylent

ok heres the problem. most of my junk rules i have disabled and deleted so all that stands now are the hotspot rules made by the routeros system and your rule. my untangle box here is 192.168.5.1 [admin@MikroTik] > /interface print detail Flags: D - dynamic, X - disabled, R - running, S - slave 0 na...

cylent

doesnt work. in the web filter log it'll only show the routeros box external ip.
routeros isnt passing through the private ip for the filter to see.

cylent

It's not masquerading. Masquerading is source NAT. You're trying to change where the packet is going to, so you need destination NAT. Assuming the web filter server has inside IP address 1.1.1.1: [code]/ip firewall nat add chain=dstnat protocol=tcp dst-port=80,8080,8888 action=dst-nat to-address=1....

cylent

hello all. i am installing a new untangle web filter server to basically do some filtering for web content. my plan is to set it up like this: internet <--> untangle <--> routeros <--> users. obviously the untangle box will have the public ip for the internet and the routeros will be inside of a pri...

cylent

hello all i have new router that i bought (rb493ah) that i want to replace my rb600. I want to move ALL my settings to the new one. i was thinking of doing it by hand but thats so tedious. is there any easy way to do this? i looked at /export but the mac addresses are different and can cause a mess ...

cylent

What time is set for Lease?

3d 00:00:00

cylent

this is very frustrating and i cant figure out why the cpu is always rising ... i have my RB600A setup for basic PPPoE server and i have hotspot on it too but most my users (no more than 30) logon via PPPoE. maybe 2 or 3 via hotspot. [admin@MikroTik] /system resource> print uptime: 1d6h24m38s versio...

cylent

can someone help me figure out why this is happening... i am getting messages in the log like: dhcp1 deassigned 192.168.99.9 from <MAC ADDRESS> dhcp1 assigned 192.168.99.9 from <MAC ADDRESS> and so on... why is this happening and how to fix it? this is on a RB600 with RouterOS 4.16 Thanks

cylent

hello all. i am considering upgrading my current x86 4.11 router to 5.x due to webcfg interface. i like it and would like to take the plunge. i also wanted to ask (since i use the current web proxy).. has it improved in 5.x? is the web proxy more efficient? (this is a x86 pc as i said) please advise.

cylent

hello all. quick question .... i have an internal 172.16.0.0/24 pppoe network and i am using opendns filtering. it works great but because i am natting all ips show up as one. is it possible to forward the internal ip to opendns so that when i see the opendns report i see the 172.16.0.x ip that was ...

cylent

I am using this on a production router v3.30 Is this an issue that has been fixed in the newer versions, 4.10 maybe ?

no

cylent

this happened to me too. i called the isp and was complaining why my net was so slow. they said my upload was pretty much full (i had 3.25down/.75up) ... it was very very counter-productive. my version was 4.5 and i am on a RB600A ...... i dont know if this issue is reflected on version 5beta? this ...

cylent

anybody?

cylent

hello all. i tried to get some help from the untangle people for this but no one knew how to get this done. untangle has a mode called bridge mode, as demonstrated on their website; http://wiki.untangle.com/index.php/Introduction#Untangle_Server_as_a_Bridge setup is simple: net -> mikrotik router ->...

cylent

Ok this one is a difficlut one for me and I really am having trouble setting it up. Basically what i want to do is the following: setup a basic PPPoE server on my X86 Mikrotik Router system. for each two users on the pppoe server I want them to be routed via a PPPoE out client account. so for exampl...

cylent

ok i got it.

thank you very much!!!

cylent

although this one seems logically a simple one to solve its confusing me. what i want to do is block a partial part of the website via the web proxy. for example lets say i have http://www.msn.com/news/ all i want to do is block /news/ what i have done so far in the "ACCESS" page for the w...

cylent

never mind. it started to work.

i just played around with enabling and disabling the firewall NAT rule for the transparent proxy. it makes 0 sense but whatever. RouterOS Bug i guess.

cylent

Ok this is ridiculously lame because for some reason i have no idea why its not working. My system is very very basic... nothing fancy. RB600 with Hotspot (no logon just a page with info) (10.1.1.1/24) i then have PPPoE server (172.16.0.0/24) both the above networks are bound to ether2 ether1 is for...

cylent

hi all i obtained the r52n minipci module and was told it was similar to the r52h but when i plugged into the 433ah and booted it up (after upgrading to 4beta and updating key) its tx power in 5ghz mode is only 18dBm. from what i know 18 = 65mW ... this makes it nothing but a r52 with n capabilities...

cylent

ether1, 2, 3, 4 or however many + the wlans need to be part of the bridge.

cylent

still new to the whole 5.8Ghz channel spectrum thing and was wondering if anyone had a graph or pic of the non-overlapping channels ?

thanks

cylent

Thank you. That makes sense.

I always wondered what i should populate the scan-list box with. now i know and i am able to use more channels.

cylent

hmm. thats funny. when i do this i get a virtual ap added thats disabled.
even if i enable it i cant see an ap that i set to 5745 for example. what gives?

cylent

Chupaka, Thanks for the clarification. I did the "Update.." key and it then said the router needs to be restarted. i assume that did it ... no way to verify yet since i dont have a r52n card at this time also, i noticed one of my routers had the "Old software ID" field with a num...

cylent

it's 'Buy a new key...', I think... 'Update License Key' do not ask any info... it just updates a key automatically The button label has been changed. in 3.x you had: Buy new key Update licnese key well now in 4.x you have: Upgrade/Get new key Update License key essentially though the "Buy new...

cylent

You also need to upgrade the ROS to 4.0beta3. Older versions do not support 802.11n cards. Can you ping the internet from your routerboards? If not, assign then IP addresses to them and put a gateway for that network on your router. We assign private networks to our bridged radio groups and each ra...

cylent

i am glad i made you laugh but the fact of the matter is i am not too keen on the routerboard operating system and wireless stuff as much as you. i am still learning. i also find the ros very lacking in documentation. i mean this isnt like a regular os where i can buy a book online or whatever and l...

cylent

what do u mean? doesnt "n" work with only one antenna?

this is getting annoying .. the fact that we need more than one antenna for nstreme and now "n"

cylent

so is 4.0b3 enough for n and level 4?

cylent

the thing is running as a bridge so it has no net access...

cylent

I have purchased two R522 (outdoor routerboard 433's in flat panel enclosure) and they came with level 4 license.

I am considering getting two R52n's to take advantage of the n technology.

do i need to upgrade both of these to level 5 now?

pls advise!

cylent

with or without using proxy?

i dont know u tell me which way works better?

cylent

load balancing is when some connections go through one link, another - through other one

ya but can you make the router split up loading a web page into two links?

cylent

so how does load balancing work exactly?
if i setup two pppoe connections and then through my lan i begin to load a web page on a computer does the router force both pppoe connections to assist in loading the web page?

cylent

Thanks I doubt these guys know how to even enable such option though. is there a simple way for me to find out without asking them? in the document it says: " To enable Multilink PPP, simply specify multiple interfaces in “interfaces” property, it will bundle them together, if PPPoE server allo...

cylent

Is it possible to setup a router to do Link aggregation as in combine two OR more PPPoE connections then Nat them to the local Lan ?

Thanks!

(if possible pls provide example)

http://www.ecessa.com/pages/solutions/s ... dwidth.php

cylent

anybody? not even a link?

cylent

where i can see about the features in version 4?

Thanks

cylent

rstp

http://en.wikipedia.org/wiki/Rapid_Span ... e_Protocol

enable it under bridge settings.

i think that should fix it...

cylent

so after i do a full reset of the board there usually is no bridge?

then what?

cylent

Hi I currently use the RB433ah for a hotspot system. well just now i downloaded a firewall/hotspot system and i need the rb433ah to be nothing more than a wireless ap / pass traffic. i'll have the real server do everything else like hotspot/dhcp/virus scanning and so on so how to accomplish this by ...

cylent

anybody?

cylent

hi i would like to know if theres a way to pass the http request that goes through the routeros with the internal ip address. my setup is like this: Hotspot system --> untangle router (for filtering and such) --> internet the problem is when i look at the logs at the untangle router it shows the ext...

cylent

and the advantage to all this "headache" is ???

cylent

first make sure your device supports v2.9 - most new RB models dont

does rb433ah support 2.9?
also, where can i download 2.9 from?
the main download page on the mikrotik.com page doesnt have anything old. all new.

cylent

I'll jump in on this if i may.... I think the faq doesnt exactly tell you what to do. it gives you a very vague answer to very common questions. for example: What is CCQ and how are the values determined? Client Connection Quality (CCQ) is a value in percent that shows how effective the bandwidth is...

cylent

i am using wep.
not because its better
not because its not crackable
but because it puts less overhead on the data stream going to the clients
last thing i need is a bottleneck

and because hotspot is basically hackable so i have no choice but to do encryption.

cylent

but i do want clients to connect to wirelessly. isnt that what station-wds is supposed to be for? to expand the network by having multiple antennas in different locations? Expanding wireless network, you can use station-wds. One peer uses mode [ap-]bridge, second peer station-wds on one wireless in...

cylent

WDS-Slave is identical to AP-Bridge with the single exception that the WDS-Slave will first scan around like a station to see if it finds an AP with the appropriate SSID and then uses that frequency for running in AP-Bridge mode (yes it's running as an ap-bridge even through you have it set to WDS-...

cylent

the distance is about 1km between the station (rb333) and the ap-bridge (rb433). its not far at all but where i live theres lots of interference caused by people blasting wifi amplifiers. When i said i couldnt connect i was standing on the same roof as the vertical antenna (on the right side of the ...

cylent

What exactly is the real difference between "Station-WDS" and "WDS-Slave" ? the description in the manual is rather vague. I currently have a WDS system and my main 433 is set to AP-Bridge. The 333 is set to Staion-WDS Would it be safe to switch the station-wds to wds-slave and n...

cylent

anybody?

cylent

today i ventured into the wds arena where i created my first near working system. basically i got everything working. my problem is this: if i stand on the roof near the omni antenna (the vertical one on the right side) with a laptop in my hand i can see the signal very strong however it comes and g...

cylent

ok well i managed to get this working and it was rather easy! for some reason i was having a problem with both routerboards having identical mac addresses for the interfaces. very odd and i have no idea how it happened. after reseting the mac addresses and each RB having its own proper mac address f...

cylent

the stickers were different but both routerboards had identical macs.

i reset the macs both by doing /interface ethernet ether1 reset mac command on all interfaces and on both.

now they are ok ... they have different macs

cylent

ok this one maybe simple for some but its giving me a headache. any help is greatly appreciated. heres the deal. i have a rb433ah acting as a hotspot server and a pppoe server. its working fine and the net works ok. now. i want to add a rb333 to the mix. i want ether1 on the rb333 to be the net port...

cylent

this sounds very weird but its true i have a routerboard 433ah and a rb333 i have in my winbox the mac address for my rb433ah which i log into all the time today i connected my old 333. i looked on the back at the mac address sticker and the macs are the same as those of the 433ah what is going on h...

cylent

anybody?

cylent

Ok so i have the following: RB433AH with a R52 going to a 14db omni antenna. i also have a rb333 with another omni antenna. i want the the rb333 to work with the 433ah since the 433 is my main hotspot (everything). i created a virtual AP on the 433AP and made it dynamic WDS. Now on the 333 I put in ...

cylent

i had a feeling you guys were going to say that (about him not being on my access list) but guess what? hes not on my customer list and even the mac address is random ... in other words, its a fake .. it doesnt show up here: http://www.coffer.com/mac_find/?string=00:4F:62:1A:15:A0 all valid mac addr...

cylent

I am using a wep key on my wireless hotspot system. i know its only 64bit and i really dont want to go with anything higher like 128 or wpa ... i looked at my log today and i found a huge repetition of someone trying to connect. could this be someone trying to break my key? 13:17:48 wireless,debug w...

cylent

fine.

so now...

if i get a xr2 would i notice better performance with my wireless clients vs the engenius card i have now?

cylent

There are lot of wireless cards that doesn't have correct tx-power value written in the cards eeprom. Thats why the they have this offset 10db or some different number. Currently we don't have any plans to add this offset in our driver for other wireless cards. in other words you're being biased! u...

cylent

i tried doing that (the acl list part) and it doesnt work. i set a private key like so and it doesnt care even if the user has a different key it still allows him to connect 2 ;;; tester mac-address=00:02:6F:4D:AA:FA interface=wlan1 signal-range=-120.120 authentication=yes forwarding=no ap-tx-limit=...

cylent

i am trying to do this myself but i am unsuccessful. i disabled "Default authenticate" from the interface (wlan1) then i added a access list profile with a private key for user1. i enabled "authenticate" in the access list for the user even though my key is different he is still ...

cylent

i hate to bump this again but this is a real problem for me and its definitely causing me serious issues.

anybody?

cylent

we live in a place where nothing is stable. power outages happen that cause the device to reset. unfortunately with that goes my web-proxy microsd setting. i dont know why but when i re-enter the winbox program the web-proxy no longer shows microSD as an option. i assume this is due to file corrupti...

cylent

Hello, Please i use the mikrotik router OS ver3.1 on my routerboard 230. Please i really don't understand the cache hit DSCP (TOS) what value is best to be used. I use an external cache memory of 1Gb via USB port. Thanks you don't have to use DSCP unless there is a specific reason. what exactly do ...

cylent

depends on the proxy device speed and cache drive speed. note that these days, a very big part of the internet is server dynamically. there are no static content. all is taken from databases and served via php files, and you can't cache that. you could cache images, but that's about it. the device ...

cylent

ok fine. forget youtube videos.

how about regular cache like pics on a web page.

i am finding the proxy even with my above settings not working so well. it even causes slow downs some times.

cylent

i wasnt aware of that part ..
but isnt the video file in flv format and there is a special code on the URL? i've noticed that part doesnt change.

cylent

bump ?

cylent

I'd like to know if its possible i can use my microSD card plugged into my rb433ah to cache files effectively especially youtube videos. currently my cache settings like look this: [admin@Mikrotik] /ip proxy> print enabled: yes src-address: 0.0.0.0 port: 8080 parent-proxy: 0.0.0.0 parent-proxy-port:...

cylent

actually it doesnt work.

in the ip->dhcp relay-> status tab i see the requests but 0 responses so it never worked.

cylent

an odd setup i have to say from the start. something i've never done. currently the way i have it is like this: Smoothwall gateway: RED interface: public ip GREEN interface: 192.168.0.0/24 connected to that is the RB433ah ether1: 192.168.0.3 ether2 (hotspot): 10.5.50.1 ether3 not used all works grea...

cylent

i have a rb433AH and i added a microsd card to it for caching purposes. i am on satellite internet so its vital i am able to use the cache... my two questions are: if i enable: Always from cache will this screw up some times? also, how do you figure out what the best value for the "Cache hit DS...

cylent

this would be great if someone can show some rules on how to set it up?

cylent

thanks guys.

that worked. my clock is finally working right.

cylent

thanks.

so i set up NTP Client for broadcast?

where does it get its time settings?

pls advise.

cylent

I dont know what i am doing wrong here but i gave up on this and left it as is. well now is the time when i need my rb333 clock to be correct. so what i have done is this: I goto System ->clock and set the time then hit apply/OK and when I reboot the router it resets back to JAN/01/1970 I am so sick...

cylent

can someone please give an example of how to set this up?

thanks

cylent

i guess you're right

if i disable the route i cant ping anything from the /tools ping option
it would say "no route to host"

but on client pc i can browse and do anything else.

hmm....

cylent

You don't need the static route...

Ya i wouldnt need one if i had bridge1 as a dhcp-client but since its a static ip now i guess i have to...

cylent

Thanks .. got it working had to do manual stuff for the bridge ip and added a static route. [admin@MikroTik] /ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.5.3/24 192.168.5.0 192.168.5.255 bridge1 [admin@MikroTik] /interface wireless>...

Search found 383 matches