MikroTik

rcourtney

Connect laptop to cable.modem get 935 mbps.
When tested again through CRS112-8P-4S-IN
get 12 mbps.

Cat 6 3 ft cables.

What else should I check?
Will be powering RB2011 and AC APs

rcourtney

Ran across a few used and want to setup for a private EPON network.

I do not see anything though IP-SCAN. MT and the OLT sees the link as active and MT can read the NVRAM.

I must not be doing the scan correctly or something not set.

Tried doing a OLT OMCI reset command.

rcourtney

That was it. Out of space to save pools.

rcourtney

The pool was created, shows in print, and is in the dropdown.

rcourtney

I am a bit rusty as they run for years without touching!
Can't get a DHCP server added - No such address pool

Anyone have their morning coffee and can see something missing?

rcourtney

Has anyone investigated using these devices to cool the processor rather than just a fan?
example
https://tetech.com/peltier-thermoelectr ... r-modules/

rcourtney

Security flaw discovery released by Google Project Zero does it affect our gear?

rcourtney

I believe we already have a web SERVER in the mikrotic, what we need is a web BROWSER, really badly. Homer Yes, there is a webserver that you can get access to by installing the Hotspot module. Then change the firewall back to a normal use. You can go to your router ip then the sub folder hotspot o...

rcourtney

Port knocking
mum.mikrotik.com/presentations/US10/discher.pdf

rcourtney

You could write a Python script to query Mongo and see packets transfered. If it drops below a level you set, then SMS a message to your phone.
It would not necessarily be running on your Miktotik gear.

rcourtney

Locate "port knocking" in a MUM meeting presentation a few years back.
It hinders port scanning as a benefit.

rcourtney

I have never tried that. You should be able to look at the netmask assigned to your router and figure out your remaining IPs
the cable modem will support. Assign fixed IP on the devices. Do not NAT those devices.
You may also need to add route entries to the ports those devices are attached to.

rcourtney

We like port knocking. You must access a port other than your desired port to load the list then test to see if you are in the list before accepting.
If someone is scanning ports around the knocked port, you clear the list.

See old MUM presentations for details.

rcourtney

Interesting. These devices usually are running a low end linux OS. It is not hard to insert code into ram and then execute it.
Being a part of a security system that allows strangers to get access to cameras is also disturbing.

rcourtney

/ip route add dst-address=192.168.X.0/24 gateway=X.X.X.X (Replace X.X.X.X with appropriate gateway) On A add a route to 192.168.3.0/24 On C add a route to 192.168.1.0/24 Customer A 192.168.1.1=======CPE 192.168.245.3 Customer C 192.168.3.1=======CPE 192.168.245.5 On B add a route to 192.168.4.0/24 O...

rcourtney

Here is the API wiki
http://wiki.mikrotik.com/wiki/API_in_C_Sharp

rcourtney

Cgaspar:
This sounds like an issue another user is having. By chance is your full user the default local profile too?

This might be a bug. What are the version of your firmware?

rcourtney

Try this: <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="pragma" content="no-cache" /> <meta http-equiv="expires" content="-1" /> <meta name="viewport" content="width=device-width; ini...

rcourtney

If I understand your situation the routers will use the local user database first and if not found will then ask your Radius server. Logging will show the local user in the local log. Remove the local user. However, if you need access when the Radius server is down, you won't be able to get in unles...

rcourtney

Set the default user profile to the value you desire on each Mikrotik. I believe um-named profiles will use "default".

Other than that, use wireshark and capture the database requests to see which data dictionary pairs you need.

rcourtney

Is the unlimited users the one named "default"?
If so change it to limit max to test a theory please.

rcourtney

As others have mentioned, check on each router the IP -> Hotspot -> User Profiles tab for Shared Users count. My default profile has 2 for max users per user sign-in and is working correctly. We allow the user to sign-in for their main computer and their phone only for basic service. If they try mor...

rcourtney

The best method in my opinion is to setup a RADIUS server. It will have a list of validated usernames and passwords that allow your customers to use your WiFI service. User Manager that is built-in is a simplified RADIUS server. You run it on only one of your gear and all others connect to it. It mu...

rcourtney

Has a satellite tech checked the gear? A misaligned dish. Bad coax connections. Sun outages due to sun in same position as satellite occurs twice a year.
Too many users as mentioned. User being FAPped as they near bandwidth limits.

rcourtney

Hi...i am using a Hotel Management Software(HMS) at one Resort.I am using OS V3.16 WITH User Manager feature.I want User payments to be feed automatically to HMS User Data base without manual interaction(for prepaid users).For this,how can my Mikrotik user manager commnicate to HMS.Plz guide me... ...

rcourtney

Can we do wrap here?
It's not very clear.

rcourtney

Survey is paramount! There is special feeder cable called "Leaky CoaX". We used LCX cable in a tunnel between buildings and worked fine. Thick concrete along with all the iron strength rods with corners ("Z" shaped) in the tunnel made multiple APs too costly. The cable was plac...

rcourtney

Most who use pokemon go use mobile data so perhaps you would want a jammer as well.

Perhaps a set of low power local GPS transmitters that point the student to the principal's office where they
can find Pekachu! - LOL

rcourtney

Do you really need create a username/password? If you only want user accept term to access hotspot service you can try create a local username/password without shared users limit and edit form to user this username/password. Yes, the original poster is using "open_net" for both the userna...

rcourtney

I am thinking the name cannot be empty when adding a mac entry in the hotspot user list. Password is not used if method ( login-by ) is mac. Name could be generated from the current date time by the client php code. So the user only needs to accept terms. The two important fields ( mac and name ) ar...

rcourtney

The challenge is to execute a CGI program or script from an external web server that does not expose API controls to the user. I would almost say write a program in C++ C# .NET etc that acts as a web server. Once the user posts the Accepted terms, issue API or telnet commands to add a local user. U...

rcourtney

Look up user LEDs in the manual there are five you can program. They can be used for antenna alignment (signal to noise) and activity etc. http://wiki.mikrotik.com/wiki/Manual:System/LEDS There are clear plastic tubes called lightpipes to get the LEDs to show outside the case. http://www.mouser.com/...

rcourtney

If you run a separate router without wireless and use MAC authentication on it, they would not need to enter user/pass. NATting on the router closest to fiberlink.
Then radius records should be gathered for reporting. Haven't tried it but first thing that came to my mind.

rcourtney

I am thinking users connected through the other routers are NATted.

Do you need the hotspot on just the one Mikrotik?

More details are needed.

rcourtney

If you read up on using the terminal functions you can issue commands and have the raw output saved to a local file. (print) Then that file can be parsed to create a comma delimited file for you to grab later. Either by visiting the site with a USB stick or using FTP. You can supply more details wh...

rcourtney

Could the user 61792721 have saved the wrong password on their browser and simply needs to correct it?

Too many failed attempts right after each other could indicate a script trying to guess passwords.
I don't think this is the case.

Nothing to get worried about yet.

rcourtney

You can buy printer mechs OEM. They are pretty cheap on the web and if you have the ability, use an Arduino. http://bildr.org/blog/wp-content/uploads/2011/08/thermalPrinter.jpg http://bildr.org/2011/08/thermal-printer-arduino/ https://www.sparkfun.com/products/10438 I designed mine for a hotel tha...

rcourtney

You can limit using either Unifi or RouterOS.
Unifi might be easier.

rcourtney

If I could crowdfund the project I could see using Microsemi's IGLOO® nano low-power FPGAs http://www.microsemi.com/images/soc/products/igloo/IGLOO_3x3_finger.jpg and Analog Devices AD9364 http://www.analog.com/-/media/analog/en/evaluation-board-images/images/ad-fmcomms4-ebz_front.ashx?h=270 perhaps...

rcourtney

Can you try single pinging a destination PPP address using a scheduled script.
If the ping times out, set an environment flag.
On next ping that you get a response and the flag is set, make your changes and clear the flag.

rcourtney

Every 10 seconds may get you blacklisted by the site returning your Public IP. Consider this, have your remote APs ping a central Miktotik and use address lists. You can pull the count in a script and email or SMS your changes. Set this in your central AP to capture IPs instead: /ip firewall filter ...

rcourtney

One thing to consider is which servers need to be exposed to the Internet. Web servers that collect payment data should behind your firewall in a vlan so that real users only can purchase time. We get SYN attacts occasionally to our wifi routers. Mostly to ports 80 and 23. We don't use those ports a...

rcourtney

If this is not dark fiber then I am thinking you might need the same units at both ends
and your provider has conditioned the strands for their gear.

rcourtney

With the 1310/1550 one plugged in the rb2011 I get green light on connection - with the 1550/1310 one I get nothing.

Is there a chance that tx and rx use the same wavelength? (if double strand)

rcourtney

Ok since your order shows SMOF (Single Mode Optical Fiber) we are further along. They are testing the light path with the same wavelength by looping and then measuring the loss for round trip. Still good so far. We still are guessing on the wavelength. Are you paying for dark strands? (they just con...

rcourtney

Many hotels. Limit the number of devices per login and charge extra.
So you may not get too far. We block NATed connections to be fair to
All paying guests.

In general you want bridge mode.

rcourtney

Singlemode and Multimode is how light internally travels through the glass strand. On the outside of the yellow cables you should see some markings. If you can post what is marked we can tell you if single or multi-mode. What is on the other end of the bulkhead connector in your photo? I will say th...

rcourtney

Can you draw us a picture of your setup?

Are you running the hotspot on your Mikrotik device or some other device?

Are you wanting to interconnect multiple Mikrotik devices together?

rcourtney

If I understand what you are referring to, the client router must
communicate with usermanager over a secured link.
That is not the user link to associate with the AP.

Edit: Creating the virtual AP looks like the best way to go if you
need user groups that are separate and secure.

rcourtney

The only thing I can think of is a virtual AP.
I haven't tried this so can't be much more of assistance.

http://wiki.mikrotik.com/wiki/Manual:In ... #VirtualAP

rcourtney

You can use normal user/password and use the same "word" for both. In html or javascript you would post the same value. I'll try to include an example later if needed. $(if chap-id) <form name="sendin" action="$(link-login-only)" method="post"> <input type=&qu...

rcourtney

Using the basic setup for a hotspot will allow multiple users. You can download the Winbox program for Windows and manage the list of users allowed on your network. If your roomate does not pay, remove his/her profile. However, he/she can ask your other roomate for their credentials, bypassing your ...

rcourtney

The closest would be using the API for the language you code in. C, C++, etc.
Winbox is far as I know is not open source.
.

rcourtney

I would let to see global environment variables to be visible from scripting in hotspot.

Example:
http://forum.mikrotik.com/viewtopic.php ... AA#p514019
$longitude $latitude $weather $voltageà
All that are created in scripts.

rcourtney

Thanks for taking time to help. I looked at the stickers and decided to dynamically build the login page hourly. I am bench testing now. login.html was divided into two parts and reassembled with the information. :global login1 [/file get [/file find name="hotspot/login1.txt"] contents]; :...

rcourtney

Not directly. An icon (fog, rain, sunny, snow, etc) is named in the xml. It could be copied in the script to the hotspot folder. I could dynamically build the login.html file as a last resort in the script each hour. Was hoping there was a "secret" way to get the scripting environment vari...

rcourtney

I have written a script to grab current weather information. (See below) I would like to present the global environment variables to the user login page. I am not seeing them appear. $(weather) Any hints? /tool fetch url="http://w1.weather.gov/xml/current_obs/KIOW.xml" mode=http :global fi...

rcourtney

Your post helped.
/ip/hotspot/user/getall getall instead of print
I need to filter either by numbers (I use bin position in place of the apartment number)

Thanks

rcourtney

I will be using the API to upload users/passwords to the routers for apartment buildings. So far the path /ip/hotspot/users/add with numbers=n,name=userid,password=userpass (n is a number 0 to 31 reflecting bins for tennants) adds new users. /ip/hotspot/users/remove with numbers=n removes the bin en...

rcourtney

Does anyone have a template to print a batch of vouchers on paper card stock for laser printers?
Just to get the spacing 10 per page. So far every example looks like pin fed continuous
paper.

rcourtney

I have Win7 laptops that I would like to process USB memory sticks that we use on RB2011's.
Anyone have success with a driver or program to allow this?

Search found 61 matches