MikroTik

simogere

About polling function, I made some tests: For example if we have: Polling: Probe Interval = 10 seconds Probe Timeout = 5 seconds Probe Down Count = 3 Ping probe: Retry count = 3 Retry interval = 1s You will receive a message that service is down at 00:00:23 Poll 1= poll from 00:00:00, failed at 00:...

simogere

For example if we have: Polling: Probe Interval = 10 seconds Probe Timeout = 5 seconds Probe Down Count = 3 Ping probe: Retry count = 3 Retry interval = 1s You will receive a message that service is down at 00:00:23 Poll 1= poll from 00:00:00, failed at 00:00:03 due to ping probe settings Poll 2= po...

simogere

Hi @eriitguy, I made some tests and it seems not correct with ping probe: For example if we have: Polling: Probe Interval = 10 seconds Probe Timeout = 5 seconds Probe Down Count = 3 Ping probe: Retry count = 3 Retry interval = 1s You will receive a message that service is down at 00:00:23 Poll 1= po...

simogere

Hi devrand, how did you resolve this?

simogere

♫♫
And I'll rise up
I'll rise like the day
I'll rise up
I'll rise unafraid
I'll rise up
And I'll do it a thousand times again
♫♫

simogere

Updated to 6.49.8 stable.

We'll see...

simogere

Hi, any help about this problem? https://i.ibb.co/qdGT3HJ/Screen-Shot-05-22-23-at-10-38-AM.png I've just installed a brand new RB1100AHx4 Dude Edition that I use for monitoring my network and remote sites. I'm running RouterOs 6.49.6. As you can see, after about 12 days the free memory is almost gon...

simogere

Ok, clear now! Thanks

simogere

I cannot clearly understand what do you mean, be patient. I'm trying to log in my routerbord with winbox with a "dude_write" group user (ftp, read, write, test, winbox, dude) and I haven't a fully permission but for example I can change IP, firewall. And without "winbox" policy, ...

simogere

Hi, I'm seeing that the only way to login with dude client is with "winbox" policy turned on. This means that a user that can "write" in dude, can also "write" in winbox too. Is there any way to separate them? I just need a dude user with write permissions but that cann...

simogere

Tried but i cannot see any "G6" mib. The mibs I uploaded to the dude server were been downloaded from the microsens switch

simogere

Ok, I'm doing a little test: I'm monitoring a G6 Microsens switch. All mibs are already uploaded and known by my dude server (I can see them form mib nodes tab). https://i.postimg.cc/hPFRCVRp/Screen-Shot-01-26-23-at-02-50-PM.png But if I do an snmpwalk on the device (a Microsens switch) I cannot see...

simogere

Hi @stmx38, thanks for the example.

A little question: why I have to download the specific mib? Can't the oid() function read the value without mib?

simogere

Hi @rememberme, thanks for sharing you experience!
Can you attach some screenshots of your dude settings mentioned above?

simogere

That's been my issue too. The simplicity and visual appearance of the Dude has always been a strong draw card. The ability to pick it up and do the basics immediately is great and really, with a little more time, custom probes and graphs aren't too far away. With our dude we've been plagued with dr...

simogere

Hi @stmx38, thanks for the tips.

A simple question:

Why the backup db is half the size of the original db?

simogere

Hi, I need a little info: my wAP ac is connected to a hEX PoE. The wAP is powerd only if the setting of Poe on hAP port is setted up to "forced on". With "auto on" it does not work. Reason?

Thanks, Simone

simogere

Hi, I need a little info: my wAP ac is connected to a hEX PoE. The wAP is powerd only if the setting of Poe on hAP port is setted up to "forced on". With "auto on" it does not work. Reason?

Thanks, Simone

simogere

It's just a little hard to believe that you need to access all those port from anywhere (whole internet). SSTP, PPTP, sure, if you use router as VPN server. Even WinBox or http for WebFig can make sense (just make sure that you don't have outdated RouterOS version, there are some very ugly vulnerab...

simogere

Yes, it's bad, the whole thing is almost useless. Input chain specifically allows to access pretty much everything running on router from everywhere, except DNS from WAN. There is drop rule at the end, to block connections from other sources than LAN bridge, but it's not very useful when it's after...

simogere

Hi anav, thanks for the reply.

The context is my home router. One ISP, one wan ip, a lan bridge with few ethernet ports, a dhcp server running on it and a masquerade of the lan network. That's all.

What's wrong with the DNS? The rules drop the external dns requests

simogere

Try those rules:

chain=forward action drop protocol=tcp src-address=10.10.10.0/24 dst-port=!3389
chain=forward action drop protocol=udp src-address=10.10.10.0/24

simogere

Hi, I need a hand with my firewall rules. Am I missing something basic? /ip firewall filter add action=drop chain=input connection-state=new dst-port=53 in-interface="sfp1 - WAN" protocol=udp add action=drop chain=input connection-state=new dst-port=53 in-interface="sfp1 - WAN" p...

simogere

Have you tried running the "/tool fetch" command manually? Does it work? If not - can you put the output here?

It doesn't work manually too.

With filezilla it works.

status: failed

failure: connection timeout

simogere

Any solution?

simogere

Hi, I read the wiki and I just want to know if my firewall rules are ok or something is wrong or missed /ip firewall filter add action=accept chain=input comment="Accept input established and related connections" connection-state=established,related add action=accept chain=input comment=&q...

simogere

Waiting for the "old style" syslog...

simogere

Nobody?

simogere

Hi, I have a hAP AC and a hAP AC lite My target is to create a CAPsMAN on hap ac in order to manage 2,4 / 5 radios of the same hap ac and 2,5 radio of hap ac lite. The 5 ghz radio of the hap ac lite should be used to connect to 5 ghz CAP of the hap ac. hAP AP is my router, with dhcp server and all L...

simogere

"I know that station-bridge will not work"

Why?

simogere

Actually L2TP+IPsec configuration is not too difficult. 1) Enable L2TP server, /interface l2tp-server server set authentication=mschap2 enabled=yes 2) Configure PPP profile, /ppp profile add change-tcp-mss=yes local-address=192.168.17.1 name=ipsec+L2TP remote-address=ipsec-pool use-encryption=yes /...

simogere

When you add NEW DEVICE ( NAS ) in user Manager it only allows one unique NAS ip address, if you try add the same, User manager will not take it. I have not played with ID, real, etc. parameters, i heart it is possible but i don't know how to do it. What i have done i have had created 3 user manage...

simogere

Thanks!

simogere

You can use domain in hotspot and radius configuration

Ok, but how? Hotspot profiles are 2. Radius server is only one!

simogere

Hi, I'm trying to find a solution to this problem: on my rb1100 I have 2 hotspots with their hotspot profile (with "use radius" flag option). /ip hotspot profile add hotspot-address=10.0.0.1 html-directory="HS1 -Ospiti" name=\ "hsprof1 - Ospiti" use-radius=yes add hotsp...

simogere

Me too. Any solution?

simogere

Hi, my RB951G-2HnD is configured like a router: - port 1 wan - bridge with port 2, 3, 4 , 5, wlan1 - dhcp, masquerade (nat) and a static route (the gateway) Anyway, on wan port arrive 2 different vlans: a default untagged vlan (the one I'm using) and a tagged vlan. So, I added a second masquerade ru...

simogere

Maybe that's because of CSS's caches.
It happens a lot.
Just delete you're browser's cache and cookies and every thing.... and Login into UM again.
This should work. all the time for me.

No, no problem with css. The same problem appears on every client I use to see the UM.

simogere

Hi guys, is happening to me for two days that I can't see from the web gui of UM the active users and sessions. Nothing is changed. There are logs about authentications (ok and fails) but no more sessions registered and no more active users and sessions too. The hotspot stil working without problems...

simogere

Hi, I have to clone the configuration of a user manager. I installed manually the usermanager in the new RB450 and with a simple "export file=namefile verbose" I' exported the configuration from the old RB450. Removed all the mac-address from the src file and run it from the terminal of th...

simogere

Hi, even if I add to the walled gardens of the hotspot:
- www.youtube.com
- https://www.youtube.com
- m.youtube.com
- https://m.youtube.com
- ytimg.com (the player)

i cannot see youtube site but the rb redirects to the captive portal.

Any tips?

Thanks in advance, Simone.

simogere

Hi Craig inbound RDP connections works fine outbound RDP connections not work to all RDP connections regardless of destination Same problem: it happens if you set up a 3389 ingoing NAT. The solution is specify, for that rule, the interface that receive the ingoing rdp request. http://oi61.tinypic.c...

simogere

and the rest of the config? Hi, i don't know why but today i have just 1 "no response". It's so strange.... What does "Radius accounting request not sent: no response" means? Another question: I use user manager + on board radius on my RB450G. I have some profiles on um like No ...

simogere

Hi guys, I need a hand, sorry

Look this screenshot please

Why there's all those "no response"?

Thanks in advance, Simone.

simogere

I was reading here http://forum.mikrotik.com/viewtopic.php?f=10&t=24631&hilit=user+manager+time+zone http://forum.mikrotik.com/viewtopic.php?f=2&t=50648&p=258491&hilit=user+manager+time+zone#p258491 http://wiki.mikrotik.com/wiki/User_Manager/QA/Incorrect_time_shown_for_sessions_a...

simogere

With this one works fine:

/system logging
set LogServerNotice2 prefix=INFO topics=info,!firewall

My syslog is a pc with The Dude 3.6

simogere

I think I found the problem:

/system logging
set 0 prefix=INFO topics=info,!firewall

Set 0 not working:

[admin@MikroTik] /system logging> set action=
LogServerInfo2  LogServerNotice2  disk  echo  memory  remote

Which one I have to use?

simogere

Mine is RB450. Damn, I can't find where is the problem...

simogere

RouterOS version? Mine is 6.15

simogere

Ok, I don't uderstand

Any tips about hotspot logs that not working?

simogere

ci sono due regole apposta, la prima logga le connessioni, la seconda (add action=LogServerNotice2 topics=hotspot,info,!debug) logga gli utenti, così rimane la corrispondenza tra utente e mac address/IP >>>- I can't see logs in log shell of rb. How i can do it? (without storing them) /system loggin...

simogere

Hi thanks for the post. I'll try it tomorrow. What are the differences between this method? [admin@Test-HotSpot] > ip firewall filter add chain=forward action=log connection-state=new [admin@Test-HotSpot] > system logging add topics=firewall action=remote [admin@Test-HotSpot] > system logging actio...

simogere

Hi thanks for the post. I'll try it tomorrow. What are the differences between this method? [admin@Test-HotSpot] > ip firewall filter add chain=forward action=log connection-state=new [admin@Test-HotSpot] > system logging add topics=firewall action=remote [admin@Test-HotSpot] > system logging action...

simogere

Those rules not only log the firewall, but also the pppoe autentication. ALL THIS RULE ARE VALID ONLY FOR "PPP" CLIENTS, for HotSpot the method is different... For HotSpot I suggest you to use "Cloud4Wi"... Hi rextended, thanks for the conf. What about hotspot loging configurati...

simogere

Hi guys, I have a question about VLANs.

What is the difference between:
- create a VLAN "A" applied on ether2
- add an ip address on ether2

and

- create a VLAN "A" applied on ether2
- add an ip address on VLAN "A"

Thanks in advance, Simone.

simogere

Thanks

Search found 56 matches