MikroTik

Ghassan

You haven't said if the /28 is presented as a /28 on your WAN link or routed to you via another link network. That plus information on what the network elements are between your main router and the customer's router would probably allow a better answer describing the options. The subnet is presente...

Ghassan

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#1:1_mapping I think with the solution that you provided let the customer to use only private ip assigned but linked to a public ip address. I still want the customer to just add his public ip address on his router . It seems that I am asking a re...

Ghassan

Maybe you need use your router as switch and give him real ip from your IP pool ? Simple add user interface as slave to master port WAN. I think switching is the same like bridging . Right ? I guess the customer would get his real ip and he can also use my ips which i dont want him to use my ips at...

Ghassan

You would assign the IP address to the [private-interface]. Either that or assign the address to the customers gateway device. To make sure they stay inside their own IP address, create a masquarade rule. Give this wiki a shot: http://wiki.mikrotik.com/wiki/How_to_configure_a_home_router. Hello aga...

Ghassan

Hello everyone, I have /28 public subnet by my isp [WAN-Inetrafce]. I would like to assign 1 public ip address directly to one of my customers through [Private-Interface] and I do not want him to use the rest public ips . How can I allow my customer to use one of my public ip addresses through Priva...

Ghassan

Maximum Gain between 2000Mhz ~ 2400Mhz

Gain.png

Ghassan

What I noticed is the far in position between 3 antennas placed on RB751U-2HnD .. the narrower the diagram of horizontal but wider vertical diagram which raise the gain of the signal. By placing 2 antennas parallel and each one has different source voltage (I mean different amp) , youll get about ha...

Ghassan

Same positions .... but using Modified RB751U with External 5dBi Omni Antenna & the client was a laptop having the same NLOS distance inside the room ( Indoor). I believe Chain 1 has an issue or needs to be refined but I will try to mode another router to see but im sure that everything is fine ...

Ghassan

To everyone with above modifications - do the new external antennas provide better signal? Please comment on the improvements you found. Dear Normis, My attached pictures will answer your questions ... Internal PIF Antennas (Indoor): Noise Floor (Indoor): -97dBm Hw.Retries : 15 I have tested betwee...

Ghassan

Hello Normis, Do you know anything that might help me to know more about the RX chain as I also sent an email to MikroTik Support and I hope to get an answer :( . My question is ... What is the output power of (CHAIN 0 - RX) Connector? usually the TX Power at TX is @+27dBm but Im thinking of doing ...

Ghassan

Regarding RB751-2HnD , what i have already noticed is that CHAIN 0 is higher than CHAIN 1 .. Why ?? because now we are attaching 5dBi for TX CHAIN 0 + 5dBi for RX chain 0 and cant be compared with CHAIN 1 because chain 1 has only 5 dBi Bi-Directional so CHAIN 0 would get more range! and for your in...

Ghassan

HI ghassan .. I interested about your idea. But i have some question about antenna gain. If you get output gain from wireless card 30 dBm, and then you use 3x10 dBi, whether you will get the output gain of 10 dBi or 30 dBm ? I still dont understand from what you said "If you get ouput gain fro...

Ghassan

Hi, It seems like my router is defective.. Today it started flashing all leds and I can't even reset it... I'm really disapointed. Regards seems that you have overheated and soldered really badly thats why you have a corrupted internal antenna which made it really worst . Try to disable chain 0 or ...

Ghassan

Hello Normis, Do you know anything that might help me to know more about the RX chain as I also sent an email to MikroTik Support and I hope to get an answer :( . My question is ... What is the output power of (CHAIN 0 - RX) Connector? usually the TX Power at TX is @+27dBm but Im thinking of doing s...

Ghassan

My problem was solved by marking packets through FORWARD CHAIN .. by adding 2 rules as first rule which has "ADDRESS LIST" as SRC without restricting through interface & for the second rule which has "ADDRESS LIST" as DST . Upload speed worked perfect when i added a parent qu...

Ghassan

Hello again, I already did that before I post here as I already have 3 interfaces .. PORT 80 are forwarded to 3128 ( External Cache Server ) I can easily limit my customers through download and i have made sure to classify dst-address as DOWNLOAD and src-address as UPLOAD but I only can succeed to l...

Ghassan

Mr Ghassan, need help from you, i already mod may rb751u-2hnd and put 2 9dbi antenna at chain 0 and 8dbi antenna on chain 1 and set as AP Bridge (to share internet access wt my neighbour). I put inside water proof box and install at my house rooftoop about 10 meter high. The good thing I got very g...

Ghassan

i see total TX Power as 30dbm with antenna -a and total TX power as 30 dbm with antenna -b enabled. I don't understand how it swaps from 500 mW to 1000 mW. No I dont think that you are able to get 1000mW or 30 dBm from a single chain and here is my proof : http://www2.microsemi.com/datasheets/LX551...

Ghassan

and what happens if we connect a 4th antenna to the mmcx connector. does it make a difference?? or does connecting antenna to MMCX (antenna-b, chain 1) disable antenna-a, chain 1 No , it wont increase anything because Antenna-B is disabled and you can not enable ANT-A with ANt-B. What I understood ...

Ghassan

so u mean to say u have 3 sma connectors which goes like (when u have MMCX to the extreme right): 1. SMA1(first from left): -Centre lead to TX of chain 0 -Outer covering to ground of chain 0 2. SMA2 (second from left): -Centre lead to RX of chain 0 -Outer covering to ground of chain 0 3. SMA3: -Cen...

Ghassan

Why 3 antenna? Is it because u have one sma connector for RX on chain 0 and one sma connector for TX on chain 0 and then one antenna combining TX & RX on chain 1. I guess u r not using the MMCX connector at all. Yes, I am not using MMCX Connector at all because .. For example , if you try to bu...

Ghassan

good job. Mikrotik thinking :lol: Hello, I thought of doing like that because my target was to find a product with high power. When I bought this product at first I was thinking that we can install it for our customers to achieve inside their homes which made me think of installing it as AP Client ...

Ghassan

What about some photos of your soldering job...?

Sorry for the delay but I only made 3 products and the 3 products are placed somewhere and I cant grab them to take pictures inside but hopefully I would do it again next week.

Ghassan

can you put a picture with these 3 x SMA pigtails soldering positions on the routerboard? Please look at the attached photo "RB751U-D.jpg" and look at it carefully and then you will notice that the each of three PIF antennas has 2 legs which i commented on each leg AS "RX & TX&qu...

Ghassan

Hello, 3 Ethernet Interfaces - WAN (4Mb/12Mb) - Public - Local - Peer ( Interface connected to an external Proxy Cache Server ) I have Dedicated 4Mbps/12Mbps through WAN Interface and I thought of using a contention ration 1:50 using PCQ which means I want to share 12Mbps with about 450 clients. How...

Ghassan

Hello Normis , I only improved this product to focus on using it as Access Point Client :lol: You must see my scanning lists :D PLEASE FOCUS ON THE NOISE FLOOR HOW IT CHANGES! This was in a hard area between walls and I was scanning from inside the house using the internal 3 PIF Antennas. rb751u-2dB...

Ghassan

IMG_6018.JPG I have 3 x 5dBi antennas and I couldnt take a picture of the other board that has 3 x 10dBi antennas . SO the Middle Antenna has TX ONLY which transmit the signal anyway if you configured RB751U to use CHAIN 0 then the middle antenna will transmit the signal which means your other prod...

Ghassan

IMG_6023.JPG

IMG_6024.JPG

IMG_6026.JPG

Ghassan

IMG_1936.jpg There's no need to confuse yourself .. Hope this picture helps! The only thing and the easiest way .. to use 500mW .. remove the CHAIN 1 - ANT A and solder the cable pigtail directly . If you want DUAL 500mW to yield 1 watt then you really need to remove the 3 pif antennas and then app...

Ghassan

Well , if you really want to use this product for outdoor use then it is so easy. Just follow my last attached picture then youll be able to use it for outdoor use .. For Example .. If you want to use it as "AP BRIDGE" then all you need is to work around on ANT700 , ANT702 .. Using this me...

Ghassan

well, that's the correct one which i had to test it yesterday but what ihave found is that chain 0 is not like chain 1 .. chain 1 can see more neighbours with a noise floor at "-108 dBm" but chain 0 can see only very few neighbours with a Noise Floor "-98 to -99 dBm" very strange...

Ghassan

Hello yoyoxcomputer, There is no need to confuse yourself .... My attached picture is totally wrong but sorry I couldnt have time to fix it anyway I still do not know what are you planning to using your pictures above ? I guess you want to extend your coverage but the confusing thing is why you had ...

Ghassan

Hello Amos, I have already removed the 3 PIF Antennas and replaced them with short cables attached SMA connectors to the case and finally it is working as I expected and for sure as i noticed the small pif antenna's legs are between groud and positive (tx) . Yes I know it would be burn if i have mis...

Ghassan

Thank you Amos for the link you gaved to me and I have already saw it and I have noticed the one you qoute it to me but still needed your confirmation about what I have attached . every chain is on ground points .. Is it possible to have an antenna from negative only ? so you want me to solder the c...

Ghassan

yes, there are three antennas, like you can see in the manual: http://routerboard.com/pdf/357/rb751U-2HnD-ug.pdf you can just use the external antenna, why solder anything? The software shows TX Power as 27dBm which seems to be 500mW so I thought maybe every chain has the half 1 watt TX Power but t...

Ghassan

Hello, I thought of soldering 2 Antennas ( the first one is connected to CHAIN 1 & the Second antenna is connected to chain0 ) but actually its confusing to me when I see 3 aluminum metal connected to the PC Board internally at the circuit and the one which also confuses me more that the antenna...

Ghassan

Hello, I bought "RB751U-2HnD" couple days ago and I have noticed that the software only shows the TX Power as 27dBm but the website http://www.routerboard.com shows that its TX Power is 30dBm . I tried to override the settings to 30dBm but the softwre only shows 27dBm even if we played wit...

Ghassan

No, it doesn't support G-turbo mode. You can use N client that support extension channel then you can use 2x20mhz channel option. I have R52H at the first Point with Turbo Mode Transmitting the signal but the second Link Point has R52Hn .. Is there by any chance of using 40Mhz Channel between N Car...

Ghassan

Hello,

I am eager to try this product bas I was wondering if this product works on 802.11g(Turbo Mode).

Ghassan

Ghassan

The main use I have seen for TX-A/RX-B is to flex some of the FCC (and possibly other governing bodies) regulations. FCC regulations only limit the output power of the transmitter, it does not cover the receiver. To stay under the legal power, you might be limited to a 23dBi directional in a theore...

Ghassan

You are not gaining anything as you are transmitting on only one antenna and only receiving on one antenna. Therefore the total increase in gain is zero. All you have is the gain of the antenna, minus the loss in cables etc of course. I.e. you gain nothing from this setup. Except some redundancy if...

Ghassan

I think I have made it! If we installed 2 antennas in parallel , the load will be splitted into 2 as here we are gaining dB not loosing because they are in the same direction . The doubling of the output power means an increase in the signal. Note the dichotomy: · If the antennas point in different ...

Ghassan

What happens if you have a card with TX Output power 1Watt configured on RB433AH as ANtenna Mode : tx-a/rx-b which means (Antenna A is connected on TX OutPut [MAIN CONNECTOR] & Antenna B is connected on RX Output [AUX CONNECTOR] SAME CARD ) . The 2 sectorial panels are directed to the same area!...

Ghassan

Hello, Hope at least if someone can guide me to match a website : Usually when we work on PERL & REGEX .. We try to match http://www.google.com/ by writing: ^http:\/\/www\.google\.co(m|.uk)\/$ With my example I am matching only www subdomain for Google. so I would be glad to know about the Layer...

Ghassan

Hello, Is there anyway I can automatically control my users through scripts or something else!. so If I can change the priority and speeds of users that are downloading and uploading large files. Say after 200 megs of downloads the priority gets dropped, and the speed is slowed, 500 megs its priorit...

Ghassan

have a look at http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy

specifically the very bottom example.

Thanks but this was solved from before few months ago

Ghassan

ghassan, ana mini ISP :D bi north lebanon, w 3endi good experience bel mikrotik. ma ba3ref iza n7allet mechkeltak wala ba3ed. anw b3atli chu badak bel tefsil 3a maili, w ill c wat i can do. w bima2eno enta btet3amal ma3 l SkyDSL, 3endi elak Q yaret fik tse3edni fi. ana ekhed Downlink men l SkyDSL, ...

Ghassan

Hello, I was planning to change my network design due to the bad weather as it is really affecting on cables .. always we have to replace cables at our customers side .... we are in the city ..My plan is to broadcast my SSID into whole 2 Kilo Meters with huge building as they re next or so close to ...

Ghassan

Hello, We have RB433AH that has 2 mini pci [XAGYL 2.4 GHZ 1333mW limited 1W] and the third mini pci is R52H 350mW .. Do you think that the board can handle those cards working together? The First Cards uses Frequency 2312Mhz TurboG and the second uses 2350Mhz TurboG but the third has TurboG SuperCha...

Ghassan

Thank you guys for your information I will re-install it again and test it

Ghassan

that card has a really great offset tx power :| Hello are you sure it has a great power but why im seeing its tx power as 17dBm? or i should not worry about its power or the Mikrotik software decreases its tc power to 17 dBm thats why im really confused about it ,, my first time i use this kind min...

Ghassan

Hello all, Ive ordered for 2 cards Xagyl FLR24G30 ( 2.3 GHZ ~ 2.7 GHZ B/G ) 1000mW internally limited up to 1333 mW I have tested the card on Rb433Ah but I've found before i put it online that this card only shows the TC POWER RATES as 17dBm im confused why its showing like that but the card is 31dB...

Ghassan

chain=forward action=drop tcp-flags=syn protocol=tcp src-address=44.83.15.0/24 dst-port=3128 connection-limit=11,32 I did like that and it helped me decreasing TCP requests .. my problem is Total TCP Requests being sent to the SQUID Proxy. I thought if i can add this option in Mikrotik "connec...

Ghassan

Hello, I was wondering if someone can help me to add a rule at the firewall using ROS V4.6 to limit sessions if the customer exceeded the 300Kilo BYtes surfing status!! because im seeing about 150 TCP item from a customer using torch tool and that was killing my bandwidth. I meant I can give Unlimit...

Ghassan

I tried to test the Hyper Terminal Program and the settings you told me about was its default settings .. seems like it stays connected like i can connect and disconnect anytime whether the routerboard plugged or not plugged .. is it normal ? Or i have a different cable ! I plugged the cable into th...

Ghassan

I installed Hyper Terminal but it tells me to dial a number !

I also cant connect using ip address since its not showing .. I only can hear the routerboard when it starts but i cant hear it when the routeros starts .

is there any manual for connecting to routerboard through HyperTerminal?

Ghassan

Hello normis,

I have the rc cable but i dont know how to see it cause it's my first time that i have this prob .. how to check it ?

Ghassan

Hello, I have RB532A with RouterOS 3.22 .. I updated to v3.30 .. updated my license too .. i also checked for any available upgrade for the firmware but i found that i have the latest firmware so i didnt do anything .. I tried to upgrade to Router OS v4.2 then i found that the routerboard isnt booti...

Ghassan

Hi It sounds like you have Masquarading (a.k.a. NAT) setup on our outgoing (192.168.3.2) IP - do you have this setup in your routeros firewall? Also, without the NAT, will your win2000 server know how to route back to your 44.172.16 networks? Derek so what do you suggest me ? btw.. I have another s...

Ghassan

Hello All, I have MikroTik RouterOS v3.22 x86 that has 4 network ethernets : the first ethernet is connected to my Windows 2003 Webserver that has IIS installed also is a client on MikroTik too with ip 192.168.3.1 but Mikrotik has 192.168.3.2/30 and the second ethernet at Mikrotik is connected to th...

Ghassan

btw... did anyone try to setup one station serving more than 100 ap clients .. the client has D-link 2100 .. some of ap clients has about more than 3 users per DLINK . well I succeeded with it serving distances 3 km with a clear line of sight and the latency is good as I played with the R52H power s...

Ghassan

Alright one more question to ask .. What do you think I can handle such traffic or guaranteed .. does NSTREME handles about 50 Mbps Real time using ptmp with a distance up to 13 Km ? and what band should I use to get this performance

Ghassan

This can be done - actually we have done this on several projects already. The limit on the AP is related to limitations on the protocol (CSMA) rather than throughput - when it comes to customers to be served. The practical limit we have found is around 40 subscribers pr AP - not that much related ...

Ghassan

I was afraid of having a big network then I cant have a chance to handle that traffic so thats why I asked this question because we are getting many requests from heaps of customers so thats why we are moving to a high mountain to serve all users as they are all in 90 degrees area .. I was thinking ...

Ghassan

seem like you have at least to install 6 x 60 degree sector antenna to serve all the client. But, you may facing some issue if you customer distance more than 3 KM (is 90 user connected concurrently) Do you have any solution for big network ? What rb should I install or what wireless card should I ...

Ghassan

Hello, We are planning to move to a higher mountain far from our targets ( starting from 3 Km ~ 13 Km ) but it has a very clear sight . What do you suggest to use or to just handle such 500 ap clients connected to our station . For example , each Ap-bridge can handle about 90 ap clients if we are se...

Ghassan

I imagine that to be the most broken and inefficient way to do DNS forwarding. However you might have good reasons, other than efficiency and correctness. Any reason why BIND or something similar can't be configured to do the same? With an open-source solution you could even modify the DNS server c...

Ghassan

Hello All, I Hope I can find a solution for this script if we can update it or not ! I was working using this script since late 2005 but we found heaps of problems , like all host names are changing quitely every month , sometimes we see facebook.com changes its ip addresses every day . If somebody ...

Ghassan

Dear All, Every 6 days , our web-proxy have to crash and we are using MT RouterOS v3.16 . We tried v3.13 to v3.16 so could any one suggest us which version is stable and no crashes with MikroTik Http Web-Proxy though I am still wondering if v2.9.51 is better. ! please be noted that our web-proxy has...

Ghassan

I really need this help , everyday webproxy crashes too . we did the upgrade to MikroTik RouterOS V3.15 but few buggy things I noticed from this version .. Another thing , when we reboot the router .. CPu still 100% and DNS still not started yet until 27 minutes counts .. after that everything start...

Ghassan

At that volume you should be using a squid cache and DNS such as bind running on it's own linux machine.

Assuming we have to use Squid Cache and DNS like BIND ... What hardware should I use and How big for HDD I should have ?

Ghassan

Dear All, I am suffering from a problem , it starts when my dns cache increase day by day and I have to mention that Mikrotik DNS always crash because of the big static list which is more than 100,000 items and I really need it because we did some automatic scripts every 1 hour to add all dynamic dn...

Ghassan

If no how can we add a service for our users so they can have local calls between each others and of course free service .

Is there any software we can use ?

Ghassan

Hello,

I know that MT v2.9.27 has IP telephony package but new versions v3.x does not support ip telephony .. How can we work with ip telephony ?

many thanks for taking time reading and replying to my post .

Regards,
Ghassan

Ghassan

Hello Guys,

I am trying to reset the rb411 because my friend or my co-worker has disabled its LAN interface and we cant enable it .. Can anybody help me with this problem if you dont mind !

Note : I tried to reset it but its not resetting .. why ?

Thank you .

Regards,

Ghassan

Ghassan

Dear All, I have 2 lines connected to my router .. different ISPs Ethe0 = 10.0.0.2/30 Ethe1 = 192.192.1.2/30 I am using the line 10.0.0.1 as gateway from my router but I dont want Web-Proxy to get HTTP Traffic from 10.0.0.1 , I only want Web-Proxy to get HTTP Trrafic from gateway 192.192.1.1 direct ...

Ghassan

Nstreme is not "necessary" but it does improve things in certain situations. It doesn't matter what technology you will use, but never go higher than 50 clients per AP - you will start to get problems no matter on what system. 100 is the practical maximum, but better keep it below that. T...

Ghassan

As I wrote before, we have 50+ customer at one AP wlan interface, using NStreme. It's a mix with some custmer which get less bandwith and some which get more. Also a mix between business customer (working all over the day) and private customer (working more in the evening). But all CPEs are always ...

Ghassan

It make sense to use NStreme if you want to connect so much customer to an AP in an outdoor PtMP installation, so you would not run into the "Hidden Station Problem" which kill lot of 802.11 traffic. A CPE on RB/411 base is also very cheap and have support for all the stuff a WISP need. R...

Ghassan

Hello All, I have a routerboard Rb33 with 3 mini PCI wireless Cards .. I also have R52H as ap bridge on TURBO MODE .. For each customer has DLINK client cnnected to our station but we only have 66 access point clients , but I noticed something that everytime we add another client then our power will...

Ghassan

By The way , I disabled all packages except system , routerboard , advanced tools but still the same .. I am using 2 mPCI cards .. first one is 600mW (XR2) and trhe other is 64mW senao .. I disabled and unplugged 64mW .. still the same ..
any solution you can help me with ..

Thank you

Ghassan

Hello,

I am trying to downgrade RB112 from v3.1 to v2.9.51 but I cant nothing is working , anyway I decided to downgrade due to the high CPU 100% all the time ..

If anyone can help me doing some stpes to move for V2.9.51 ..

I appreciate your help.

Kind Regards,
Ghassan

Ghassan

You've inserted a new variable which makes this more difficult. Move it back to B and get it working correctly before changing to G When I was on B-Mode , everything was ok except clients that has long distances I was suffering from Ack.timeout as 400 time .. but changing to G-Mode solves it .. Whe...

Ghassan

Many times the Ack values will do this when there is a signal problem or interference. If you look at each connection on the registration table it will tell you the individual Ack timeouts. Find the problem client(s) and look at their signal strength, etc. You may need to up grade their antennas or...

Ghassan

try to use B/G mode...
check if there any interferance and try change the channel..
check the way how radio signals are ditributed..

as long as I know B mode can travel more than B/G or G mode , am I correct ?

but how many clients I can connect to Rb532A ?

Ghassan

Dear All, We have about 35 Access Point Clients (DLINK 2100) connetced to our station which is Rb532A . My question is some of my customers I can see them at my registration table as Ack.Timeout = 403 .. im totally confused but they are only 200 meters far from the station . For your infromation I a...

Ghassan

Amplifier is almost never any good. It's just good marketing. Basically the only time when you would use an amplifier is when the signal is perfect and there is zero noise. Hi Normis , at what situation we could get noise equal to zero .. and I have one last question , I have rb532a with 2 min pci ...

Ghassan

let me think .. They are putting amps on AP bridge mode and aving more ap clients more than 50 clients .. how could it be safe .. and assuming we are using rb532a with 48V 3.3 A .. It can handle 2 mini pci wireless cards .. the first card is Pretty good but the second one is 400mW ... though first i...

Ghassan

Hello,

I just heard from many people that they are satisfied using Amplifiers 2.4 ghz .. though 4 Watts can get more noise ..

I really appreciate if anyone can explain ...

Regards,
Ghassan

Ghassan

It seems that I have one mistake

, Ihave to bridge it , I thought it saved my old settings if *** , anyway Thank you Guys .. But I can see it only can broadcast on 2.4 ghz , better performance , Thanks

Regards,

Ghassan Gharabli

Ghassan

yes everything now has changed to default ... and also Antenna_A is selected to UFL antenna connector ... also I have 2 SR2 CARDS .. the two of them with the same performance , now my customer can see the SSID but no ping , also got it better but I was supposed to get a better power or better signal .

Ghassan

I am using its main (u.Fl) ...

Ghassan

this settings are new , I changed them since yesterday , but before it was default , everything by default , also I have changed the card SR2 , afraid if it damaged , the same ..

Ghassan

Change the antenna connection on the card to the outside port (u.Fl) see the data sheet: http://www.ubnt.com/downloads/sr2datasheet.pdf I will assume that you have tested the antenna cable and the antenna polarization with a known good card. do you want me to change the cable or pig tale , or chang...

Ghassan

Here is my Export settings : /interface wireless security-profiles set default authentication-types="" eap-methods=passthrough group-ciphers="" group-key-update=5m interim-update=0s \ mode=none name="default" radius-eap-accounting=no radius-mac-accounting=no radius-mac-...

Ghassan

So on the client side it reads -62 but very weak on the AP? they can register at this signal , but they can only stay connected for only 5 seconds and then register again and again , at client side I can only see the signal as very weak ...poor signal , by replacing from Sr2 to NMP+ everything work...

Ghassan

I already tested NMP+ cards with antenna 24dB , the same things are with SR2 .. They told me that this card works only for 2.4 ghz from channel 1 to channel 11 , anyway I already tested it with 2.3 ghz and 2.4 ghz , the same ..very weak signal and no ping .. customers can register -62 but no ping , ...

Ghassan

Please anyone can help ?

Ghassan

Hello Guys , i have a router board 532a with one SR2 Card . I cant broadcast with SR2 , I dont know why :( Can anyone help us why we can not broadcast with SR2 . BEfore I start with SR2 , i was broadcasting with NMP+ 200mW but its up to 400mW , anyway my power supply now is 19V , 3.17A DC ... on NMP...

Ghassan

Thank you guys , I got support from the Mikrotik Support , they gaved us extra channels

Ghassan

Hello , I am eager to upgrade my license from level 4 to level 5 but I am confused , my target is to have the extra channels , can anyone tell me where I can find its url that can upgrade rb532a to have the license of using extra channels , also does level5 has extra channels ? I already logged in t...

Ghassan

Hello,

I have rb532a with level4 and I cant move to 2.3 ghz frequency until I buy extra channels , please if anyone can help I appreciate your help.

Regards,

Ghassan

Ghassan

notice that I have a delay with the time , it seems that I am facing such interference , I ran Snooper and I noticed that my SSID is getting almost 100% of traffic with bandwidth 227K why ?

Ghassan

And once again my posts are deleted because they reference MT's shortcomings. It's sounds like you are using prisim based clients. Switch out the radio card to a NMP-2511 card and it should fix the problem. We have more than 40 AP Clients .. every 3 seconds I can see about every 3 seconds more than...

Ghassan

Notice that I shall disable the interface many times and enable it so I can establish a connection with clients , also I already tried to chnage the wireless card and I have failed , the same results .

Ghassan

But I really want to know why do i have many problems .I want to see a stable ping .. Is it from the Wireless Card NMP-8602+ (rb532a).. Most of time I can see its SSID but with no internet connection .. with high ping delay starting from 800 to 3000ms . What is wrong ? I already changed pigtales , s...

Ghassan

Dear All, Last week , i bought rb532a with 2 NMP-8602 cards ... I am facing a problem , It was setup as AP Bridge .. Most of time we can see the SSID as 76% but we can't ping the station also there is no internet .. Note : we can see it from the LAN card .. another problem is that we are facing anot...

Ghassan

What if you only want to deny sites? We use MT WEB-PROXY only for filtering web content. The problem is that most of the web servers (including my company's) will accept https connections by default wich then bypasses my proxy and the user can visit the forbidden site anyway... Can this be done? An...

Ghassan

I will give you all my results . First I tried to add more than 8000 websites ( porn - ie.ads - spam - spywares ) at web-prroxy access list . we blocked about 8000 harmfull sites without any complains from our customers but the problem is CPU Usage with unstable percentage starting from 20 % up to 8...

Ghassan

I think we have a problem with the configuration at Mikrotik ..

Can anyone help me with the best solution for us .

Thank you again.

Ghassan

Ghassan

Hello All, Our customer has a complain . He has a Mikrotik PC with 3 Wireless PCI Cards and 2 ethernet cards . He installed Hotspot on the all 3 wireless cards and of course on the Local Network Ethernet . For now he is using all wireless interfaces to serve as "AP BRIDGE" point to multi p...

Ghassan

I am using the AMOS 9 :wink: and for this calculation to change to 2.7 ghz all i have to do is calculating it to new : You can make scaling of almost any antenna if you multiply all dimensions of antenna by scaling factor. Scaling factor is ratio of design and new frequency. For instance: k=2450/270...

Ghassan

The antenna is a centre-fed broadside array antenna, based on the Franklin Antenna http://www.idotspot.com/Franklin.jpg http://www.idotspot.com/WifiSectorAntenneUSBClient.jpg http://www.idotspot.com/3InvAmosa7c.jpg This antenna is suitable for use in Computer Radio LANs conforming to the IEEE 802.11...

Ghassan

are you sure that we can have 2.6 ghz using ar5212 cards ?

Ghassan

anyway I am wondering if it is real like this post :
http://forum.mikrotik.com/viewtopic.php?t=13227

Ghassan

In the stated environment I would suggest that higher frequencies are better. You are dealing most with reflection. Use Lower power with higher number of APs for coverage. Use a radio with as poor a receive sensitivity as possible. The Higher frequencies will attenuate quicker than low frequencies,...

Ghassan

well my maximum frequency would be 2.7 so I can use 2.6 ghz if it is available

what should I use wifi cards ?

Ghassan

yes I made my antenna finally but If I can not use 2.7 ghz right now I can change my calculation of doing antennas so I can make it lower than 2.4 ghz so If I can use the 900 Mhz at WIFI it would be great for mine to do the antenna but I think it will take time to think of doing antennas . can you g...

Ghassan

can you give us any wireless card that can lower my frequecny and what is the best frequency that can make my None Line OF Sight to be better ... because I can build any sector with my own frequency , my latest sector that i had , it was 2.7 ghz but I am searching for a good wireless card that can t...

Ghassan

What I tried to say was that I think you'll at least run into a bunch of problems trying to do what the original poster asked for. Of course it CAN be done, but then you'd probably have to install a ridiculous high number of APs across the area, which will most probably make it too exensive/complex...

Ghassan

Are you talking for a NLOS

with radius ..

if your clients has a low power then you can not because I already tried , right christian ?

Ghassan

well , you can not

do this .. I already tried and I have faced a billion of problems .. but It was my idea from the beginning ..

few meters can achieve a little .

Ghassan

by the way i finally finished my antenna that can be on 2.7 ghz so I really need the card .

Ghassan

Hello All, please I need help and I want to buy a new router board + wireless card and i am just wondering .. Is there any wireless card that we can use it on Router Boards ... Also what should I use router board if we have 100 clients connected to our station . I heard of Atheros chipset .. AR5212 ...

Ghassan

Access-list at werproxy Just create rule to drop any address with xxx in ir (path= *xxx*) and then even google search for xxx will not work We already had this before and it was not success because we had many complains about blocking many sites that have some unwanted words . But I have for now ab...

Ghassan

Ghassasn khayeh! kifak? question if possible ;) !! let's say i have 2 wan connections and an internetal network, and I want to make a load balancer for both two connections. but my 1st WAN is limited by quota and the 2nd WAN is unlimited. I wanna follow the instructions of the example on WIKI http:...

Ghassan

Mikrotik RouterOS transparent web-proxy without caching. Only thing thats necessary is to create an access-list and drop all sites with typical words in them - you will need to addjust the list for some time, but it works like a charm do you mean that if we create access-list at web-proxy .. or fro...

Ghassan

yes but our isp , how come they share 4 ips with a reliable connection for home for example ... !! Sorry, I don't see a connection here! what do you mean by "reliable connection"? How do you know that ISP didn't use static queues? Our ISP told me that they are delilvering a connection to ...

Ghassan

This may be a dumb question but I recently replaced a router on a customers network with a MT router. After doing this and setting up all of the NAT's to their web servers as DST-NAT's, their log files on their web server show all connections coming from the IP of the router instead of the external...

Ghassan

Dnsmasq is especially suited for small networks that share a single Internet connection, behind a NAT firewall. You probably wouldn't want to use it to power an ISP, but then this article isn't aimed at gigantic mondo users with complex needs anyway: Think branch office. for BIND, the only reason i ...

Ghassan

First You can not block porn sites using many words because we had many suffers from using these rules but the best idea is to make blocked-list for ips or for domains and sub domains using web-proxy but what if we have many rules for about more than 3000 rules then we are out of memory / cpu ... so...

Ghassan

but I am wondering if there a rule that captures all ports or nat by ip which ends 23 .

Ghassan

look I have tried it at my MT and everything is working 100 % , try to check your configuration or move all dst-nat to be the first rule .

Ghassan

me too i have tried using winbox on windows vista but Windows vista has a great firewall locally and over the network .

Ghassan

But for P2p , you can't block it , you can only limit most of them because there is many ports .... for mine I allow my ports needed then drop everything .

after that i can add or trust ip one by one

Ghassan

what I am sure is that you are redirecting incoming requests by any port to your router ip which is 71.153.22.23 .

I think this rule should not work ..

add chain=dstnat dst-address=71.153.22.22 protocol=tcp dst-port=80 action=dst-nat to-addresses=10.1.2.20 to-ports=80

right or am I wrong ?

Ghassan

use the same way like p2p ,

mark your port 5100 then you can limit it from Queue Tree ...

but this must have a changes with prerouting to forward chain

here is the link :
http://www.mikrotik.com/testdocs/ros/2.9/ip/mangle.php

Regards,

Ghassan

Ghassan

yes but our isp , how come they share 4 ips with a reliable connection for home for example ... !!

Ghassan

make sure they are : ;;; for pcq download name=pcq-download" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier="dst-address" pcq-total-limit=2000 ;;; for pcq upload name=pcq-download" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier="src-address" pcq-total-limit=2000 Ghassan

Ghassan

Skynoc.

you are not answering the question!

read carefully .

Ghassan

also when do we use QUEUE TREE ?

and i think if we shared it , we should use pcq , right ?

Ghassan

yes now i remembered , thank you normis

Ghassan

Thank you ashish ..

let us assume we have ISP then if we want to give our customers 64K upload / 256K down and we share it over 4 .

Is our ISP did like this settings or there might be a new way of burstable issues .

Ghassan

I assume it as Yahoo Webcam .. I am glad to help you .

but notice that if your gateway is not available by arp or by ping then it will use your second gateway which is your default gateway .

Ghassan

Hello, Let us assume that we have 2 isps or 2 interfaces ( 2 gateways ) the first interface is ISP1 and the second interface is ISP2 . all default ports are done through ISP1 but we might want to mark yahoo port to route from ISP2 then do the following : /ip route add gateway="your isp's gatewa...

Ghassan

normis.

if we install web-proxy-test so how can we go to web-proxy test or what is the directory for this package .

does like ..

IP WEB-PROXY-TEST > or IP PROXY >

Thank you

Ghassan

Ghassan

normis is right ..

now you have 2 different ways to do it .

Ghassan

Ghassan

I know that we are not able to help you here but please do not post unliked posts . you will be able to get the squid-graph program to run and you must have an apache web server running but I'm not sure how to enable squid-graph to run and monitor your proxy traffic continuously and report this to a...

Ghassan

----
They will stop working when you have stronge router login ID

regards
Hasbullah.com
----

yes but for mine .. I only drop tcp 21 which comes from outside and allow only my trusted ips to connect ..

Ghassan

hi guys i have already made this before you can run your web proxy in the mikrotik box , /ip web-proxy - check on the transparent proxy - in the parent proxy type the ip address of the external squid - in the parent proxy port type the port of the external squid too now you have your MT webproxy ru...

Ghassan

interested with this question .

Ghassan

can you send me this configuration to my email please ...

but without comments .

ghassan.gharabli@lebol.net

Thank you .

Ghassan

did you means that you has converted MT ROuter to ant spam , it is a good choice . great job .. great idea .

Kind Regards,

Ghassan

Ghassan

to customize your firewall or ro make sure you are protecting your customers completely , you can allow your using port then drop everything unwanted .

Ghassan

Ghassan

I am not sure but I can tell you ,.. you can block infected users or spammers for any port you want by adding a rule that send its ip address to address-list then make a new rule that gets all ips from address-list and block them . or if someone has a huge traffic on any port then you can drop it . ...

Ghassan

I am searching for many things related to thiss subject .

I have customers and i want to make sub queue or parent as 64K upload / 256K down and shares it on 4 users , how can you help me .. I also read all related informations but i only want some information from you .

Thanks,

Ghassan

Ghassan

PCQ is better for your situation or you must give each client no more than 16k/64k as i m doing 64K is more quicker than dial up but I am sure that i have a good way of delivering reliable connection to your customers which load their pages quicker but i do not know if 64K is fast as you want your ...

Ghassan

I am sure it is good idea but if you are out of bandwidth , because of how many users you have ...

Ghassan

Ghassan

Hello,

this is related to
http://forum.mikrotik.com/viewtopic.php ... w=previous

Regards,
Ghassan

Ghassan

Accept Established , RElated , UDP , ICMP , SOURCE ADDRESSES or LOCAL NETWORK then DROP everything ..

or if you want to stop all FTP CONNECTION that comes from Outside your Router just drop it at INPUT CHAIN ...

/ip firewall filter add chain=input protocol=tcp dst-port=21 action=drop

Ghassan

Ghassan

and for the host files , lol there is no need for host files if you did like mine . /ip dns static add name=example.com address=192.168.0.1 then make sure to flush your Mikrotik DNS Cache also for your Computer .. just clear dns cache at your computer side . ping example.com to see if you got 192.16...

Ghassan

forward all your dns traffic to your MT DNS , if someone put any dns , it will not see your dns ... i am sure you can use it .. forward all 53 ports TCP and UDP to your dns 53 . /ip firewall nat add chain=dst-nat protocol=tcp dst-port=53 action=dst-nat to-addresses=(your Mikrotik IP) to-ports=53 add...

Ghassan

umm , well at my MT Router , I used to open my used ports then drop everything unwanted ports , this configuration decreased my traffic also protected our customers but for the input chain : http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php and if you want to forward ports or to make sure your ...

Ghassan

umm , yes it is related to how many ips you want to limit or subnets at how many sessions , right ?

Ghassan

We had this problem before but i regret to tell you that there is no password recovery so you need to install your Router again but make sure not to forget your password and do not connect to your router from Un-Known Compurters . They might have a key logger .

regards,
Ghassan

Ghassan

Good Question ...

I will try testing WEB-PROXY TEST to see if redirect-to is availabe .

Ghassan

Hello All, I tried this configuration before and it was great for mine .. I can add any domain or sub domain to my custom IP address to DNS . but my first day , it was bad for me to configure it because MT Router is getting all reversed dns from our ISP , another thing I added or I changed the reser...

Ghassan

check your computer for the worm w32.sality it did the same you are talking Worm.Sality does not affect winbox though if w32.Sality found on a computer , it crashes winbox.exe file and all exe files found on your computer drivers but you will notice double clicking on winbox file .. not reacting or...

Ghassan

As long as I was using this configuration ... port forward helps you to open up a port in your router or firewall so that you can access your application safely but If you want to access your web server , users can not reach the ip of web server , they'll still see it as ip of router that is because...

Ghassan

I suggest (SKYHOME) up to 4 Mbps , you can use it on about 3 computers , UNLIMITED but its shaping for HOME not Business Users . 90 $ VAT NOT INCLUDED ( Up to 4 Mbps ) by Dish - size starting from 100cm . to get the best performance , I am sure you will need my help with Mikrotik Routers . N.B : we ...

Ghassan

can u help me , or give me a number of the skydsl thing plz ????? Sure I can help you . For SkyDSL , I think we can give you a test account and I beleive you have net cafe so you can choose : B2B ( Business to Business ) Packages These tariffs are created specially for the requirements of business ...

Ghassan

elitper. I suggest blocking the ip from WEB-PROXY , you can block it from source ip address or destination not from firewall but i beleive this should be asked at Scripting thread because it is related to scripts . SkyDSL. Our customers get connection from SKyDSL by Dish .. its size should be at lea...

Ghassan

I am impressed what I saw , all people are lebanese but it is more important to block websites via web-proxy not from firewall filter .. We've finished our project of doing content filter . Customer will be redirected to IP address which is IIS website . This will tell our customers to pay or to sho...

Ghassan

Hello, Read it carefully... I beleive you want to limit target address that control the speed . Limit-At > minimum allocated speed for the queue. Max-Limit > maximum allocated speed for the queue. Burst-Limit > speed limit allowed above maximum. Burst-Threshold > speed at which the time counter star...

Ghassan

Hello nowires,

i regret to tell you that no one can help us , i do't know why .. it seems that it is difficult for them and i am still searching for a experts with limitation .

anyways i changed my idea .

Ghassan

Hello All, i want to block for example : example.com and all subdomains also without www .. ex: add url="example.com" action=deny comment="" disabled=no add url="*.example.com" action=deny comment="" disabled=no how can i combine 2 of them into one rule ? Than...

Ghassan

thank you janisk but i do not know how to mark all connections with 2 interfaces upload and download and i want to use somethig like shared connections for all my users so for example every 4 usfers i want to put them at 32Kupload/256K download .. how can i use this or who can explain it to me .. at...

Ghassan

thank you for your reply but i already read the manual , MT manula is for one isp not 2 isps .. i usually have 2 isps the one that i take a proxy at 2 Mbps and th eother that has 64K upload . my problem is how to mark all connection upload and download to a queue result . for example : i want to put...

Ghassan

Hello ALL, I have a project to do and do not know what to do ... I have MT 2.9.27 with 3 ethernet interfaces. .. 1) WiFi which is Local 2) ISP1 3) ISP2 I have a connection 64K/64K via ISP1 and a connection 2 Mbps via ISP2 my job is to mark all traffic upload and download and do parent queues and chi...

Ghassan

but it is better to back up your MT .

we use import or export if we want to save current settings for web-proxy or any scripts we had done .. any package we had changes with it .

Ghassan

Hello ,

to export all your current settings :

first open new terminal window and put this command ...

[admin@Mikrotik] > export file=settings

this file will be saved at File List Directory .. / FTP

To import back :

[admin@Mikrotik] > import settings.rsc

Ghassan

so you mean that if I have one sector with 180 degrees - 18db ( ap station ) . any configured clients using a directional antenna 18db will get at least 7 km LOS , right ?

our isp has tested 10km LOS by WiMax ..

Ghassan

Another question please . any ideas please .. let us consider that I have one sector to cover 180 degrees , right ? and forget hotspot right now .. How can we cover about 10 Km using WiFi , any our clients maybe access points , not laptops ... So if my sector has gain 18db and its degrees 180 .. and...

Ghassan

Thank you and I appreciate your help but when it comes to networking , I think i can handle that ... but my questions were discussed for a great coverage at HOTSPOT WIRELESS using WIFI or have a discussion about what is more important which gives a reliable connections by wireless using hotspot so t...

Ghassan

Hello All,

Thank you for your help .

At least I want to cover 1 km so If I put like 2 sectors with 180 degrees or to put OMNI directional antenna and what should I use .. which router board ?

My clients are standard Laptops .

and what do you mean by IMHO ?

Ghassan

Can you give me URL of SR2 so I can buy it or a snapshot of it and should I use 400mW Cards to cover powerful places .. how many Kilo Meters can I guarantee ... What should I install antennas ?

Thank you

Ghassan

what should I install antennas or equipments to make hotspot covers from 2kilo meters up to 10 kilo meters with Only Line OF Site ?

and what should I use router board or can I use 400mW to cover all that ?

Please help me .

Ghassan

Hello All, I am searching or asking for HOTSPOT Coverage .. what should I install antennas or equipments to make hotspot covers from 2kilo meters up to 10 kilo meters with Non Line Of Site (NLS) I heard that DigitalSkys has recently launched and implemented its first series of towers, that will see ...

Ghassan

But if I changed my settings to Transparent Mode = no and apply new settings for clients by putting the same proxy for all protocols : Http , Secure , FTP , Socks ... after changing , i found some changes with HTTPS , much faster than before ... so i knew that is from cache since you can manage acce...

Ghassan

Interested to hear from you the answer because I am from lebanon and I would like to get your solution for linking from cyprus to lebanon .

Ghassan

So do you mean that all versions do not support Transparent FTP .

Is there any idea to cache https , actually not all https but only pictures or extensions like exe as it seems that most websites are securing their files by HTTPS .

any solution for FTP !

Ghassan

If you redirect port 443 it will not actually proxy the request - the proxy will merely pass on the request and not cache it. There is probably no benefit in caching HTTPS. Also how would your users feel knowing that there might be a chance of their secure transactions being cached (even if you kno...

Ghassan

https is using port 443. You must redirect port 443 traffic in order to pass https to web-proxy. I already used this rule before I post this topic , i got msn and everything uses SSL down ... Notice that if I made some settings at our clients or If i put proxy for explorer and passes through local ...

Ghassan

Another thing is that I am using Parent Proxy IP at my web-proxy

Ghassan

I disabled all firewall filter rules , input , forward ..etc / ip firewall nat add chain=dstnat protocol=tcp dst-port=80 src-address-list=Non-Paid \ action=dst-nat to-addresses=44.83.16.2 to-ports=82 comment="REDIRECT \ NON-PAYED CUSTOMERS" disabled=no add chain=dstnat src-address=44.83.16...

Ghassan

Notice that if I put for my client a proxy which is my MT proxy IP , it forwards everything to web-proxy or I get https from the web proxy but if I user is on port 80 he can gets only HTTP port 80 but HTTPS got directly .. they told me that i want to forward my https to web proxy so how can we forwa...

Ghassan

Hello , I searched forums and everything I done but actually my problem is confusing me , I do not know what is the problem .. I tried to disable my firewall rules , everything in route table but i still ca not redirect my unpaid customer to my webserver also my network is using subnet 30 for each u...

Ghassan

I read it before I post this topic and I tested it , what i want is for the first 8 seconds it will be 512K then after it finishes its time burstable , it will be back to its default limitation 64K ... after all .. my idea is to give our clients a reliable service for opening pages and for the downl...

Ghassan

Hello All, I am facing a problem , I disabled all my firewall rules ... I have 3 interfaces at my MT the first interface : ISP-1 which is a proxy source i use only HTTP traffic . the second interface is : ISP-2 which is my gateway source . and the third is my LOCAL interface . I am using PARENT PROX...

Ghassan

Hello All, How can I forward https connection to proxy since I have 3 interfaces . first interface = Local 2nd interface = ISP-1 3rd interface = ISP2 ISP-1 is for HTTP only that I am using . ISP-2 is my gateway and it appears that HTTPS are coming from ISP-2 not from my web-proxy . Another thing is ...

Search found 213 matches