The reason we wanted to restore dynamic leases is, when we change router we want to keep the down time minimum and not have ip conflict too. so If I back up and restore, restore does not put correct ip address on corrrect interface. so one has to go on CLI and configuer all the ports and DHCP server...

Good point. But when you do backup on the router it does take all the dynamic lease too. Since the back up script is able to take the dynamic enery there has to be a way to collect those dynamic enetry.

Hi, I have been trying to export dynamic lease without any sucess. Here is what I have tried: [admin@big-tower-164-1] ip dhcp-server lease> export # jan/01/2000 06:19:35 by RouterOS 2.9.34 # software id = xxxxxxx # / ip dhcp-server lease add address=10.1.181.191 mac-address=00:13:10:64:E4:3D client-...

There is no firewall on the computer. Well, I have 1 to 1 mapping, I do see the data comming to the router but it does not establish the connection. It has to do with ip address being part of the data. Apperently netmeeting computer has to be configured with the public ip address and if we are doing...

Hi, I have a customer that want to use netmeeting. I have given him fixed ip address via, 1 to 1 public to private ip mapping. Everything wroks except the netmeeting. When somebody makes call using netmeeting I see the call come to the router port where his computer is connected but it will just not...

Thanks for the reply

What is the password for the demo router?

Tushar

One more thing when I did packet sniff, it did not show me any mac address?

How can I see the MAC address using packet sniff? DO I have to run the the sniffer for long time to see the MAC address?

Tushar

Hi, We have been getting attack 2 times a day. Under the tourch I see protocol src-address dest-address Tx Rx icmp 0.0.0.0 one of the interface address 0 512K rate We are running 2.8.3 After going through 2.9 manual I configered following to stop icmp attack in the forward and input chain. It seems ...

Hi, I have been trying to figer out why two of the adjusent router won't talk with each other all of sudden. it was working fine for months. Now both are stuck at 2-way state. I have tried removing the network and adding it. rebooting the router. no matter what I do it just doest not communicate. it...

Oppes!.

I forgot to put my name at the bottom.

Thanks for the help.

Tushar

Hi, I have two locaiton which were connected via ipsec for over 1 year. Recently one of the location needed extra bandwidth so we got second WAN connection. We implemented policy as discribe in the docs: admin@PB-Router] ip firewall mangle> add src-address=192.168.0.0/24 \ \... action=mark-routing n...

I figered it out

[admin@wb] > :for e from=14 to=15 do={
{... queue simple add name=("ip-60-" . $e ) \
{... dst-address=(10.1.60. . $e . "/32") \
{... max-limit=256000}
interface: wireless
interface: wireless

I am trying to get variable in the name is it possible.

:for e from=14 to=15 do={
{... /queue simple add \
{... name=ip-60-$e-dl \


I am on 2.7, and this is the fisrt time I am trying to write any script at all

How can ip-60-1, ip-60-2 ... can be achived?

Tushar

We want to do bandwidth limit using MAC address. I had seen document that had example, but I can't seem to find that any more.

Can soebody please tall me how to do it or tell me where I can find it?

Tushar

That did the trick. Thank you very much.

Tushar

I just setup the MT as ppttp server and used win2K client to connected to MT server. It works fine as long as I don't specify data encryption. So, it appears that data are not getting encrypted, but when I look at the document from MT, in the diagram it indicates that it is encrypted tunnel. Can som...

MT as pptp server and win 2K as clinet,

When I make connection does it encrypt the data over the pptp connection?

Tushar

That did the trick. It works now.

So to summerise the solution:

2.7.2 <------> 2.7.2 (ip ipsec peer excahnge-mode set to aggressive works)


2.7.2 <---------> 2.8.12 (ip ipsec peer exchange-mode need to be set to main)


Thanks for the solution.

Tushar

I have put xxx on the real ip address Here is the config 2.8.12 / ip ipsec policy add src-address=10.10.11.0/24:any dst-address=10.10.10.0/24:any protocol=all \ action=encrypt level=require ipsec-protocols=esp tunnel=yes \ sa-src-address=216.141.xxx.xxx sa-dst-address=24.173.xxx.xxx \ proposal=defau...

Is it possible that IPSEC betwwen 2.7.2 and 2.8.12 not compatible?

I can setup IPSEC between two 2.7.2 just fine but when one end is 2.8.12 exact same setup just does not work.

anybody at mikrotik know if this is the problem or code has changed.

Tushar