MikroTik

niren

I have configured mikrotik router 750GL with broad band connection. I tried access delete method of any site but I get access denied as result, If I try same delete method through other router then I can able to access the site(I get some response but not like access denied). I used chrome's postman...

niren

I'm able to connect VPN client to mikrotik's VPN server. VPN i'm using is SSTP so windows client can able to connect to SSTP server of mikrotik server. Now the windows client has access to our office network. I have made port forwarding for window client to access their system. After windows client ...

niren

This is what I tried as per the link shown above. [niren@MikroTik] /ip dns static> print Flags: D - dynamic, X - disabled, R - regexp # NAME ADDRESS TTL 0 mysite.com 192.168.2.14 1d and dns servers is [niren@MikroTik] /ip dns> print servers: 202.83.21.12,202.83.20.101 dynamic-servers: allow-remote-r...

niren

How do I enable dns in mikrotik router? this is the dns settings which is already exists. [niren@MikroTik] > ip dns print servers: 202.83.21.12,202.83.20.101 dynamic-servers: allow-remote-requests: yes max-udp-packet-size: 4096 cache-size: 2048KiB cache-max-ttl: 1w cache-used: 21KiB and then no idea...

niren

I have 10 systems in our network, I have assigned static IP(private IP) for all systems manually. There is a web server running in our network with private IP say 192.168.2.15. What I want is instead of type http://192.168.2.15 in browser and access webserver, everyone(only LAN users) should use a n...

niren

I have two independent networks one is LAN network over Mikrotik router and another is wifi network over belkin router. Both are having independent internet connection. I want to make bridge between to networks( e.g, server in the LAN would be accessible for Wi-Fi user). How do I do it?

niren

Solved I had to add route as

[niren@MikroTik] /ip route> add dst-address=0.0.0.0/0 gateway=xxx.xxx.16.1

niren

now: 2 D 106.51.183.234/32 106.51.128.1 pppoe-out later: 2 D 106.51.66.6/32 106.51.128.1 pppoe-out Is your Dynamic IP, in the future if you got Fixed IP, simply do NOTHING and use 106.51.66.6 for nat rules. I got static IP and trying to configure in mikrotik router. Check this link http://forum.mik...

niren

I want to have bridge like connection between LAN and Wifi networks. My setup is www -> Mikrotik router -> LAN(nearly 10 systems connected over 2 eight port switches) and www->Wifi modem -> Wifi devices(laptops and tab). There is a server running in LAN and it is accessible for all LAN system. What ...

niren

Problem solved. Office systems windows firewall was turned on, my bad I didn't think in that way. I turned off windows firewall in office system then I got port forwarding work.

niren

I have disabled windows firewall. These are the rules I have in mikrotik router > ip address print # ADDRESS NETWORK INTERFACE 1 192.168.2.1/24 192.168.2.0 ether2 2 D 106.51.150.148/32 106.51.128.1 pppoe-out2 > ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; srcnat LAN priv...

niren

are you behind an ISP based NAT or DO you have a modem performing NAT Duities

I have mikrotik router to performing NAT rule. I configure it myself.

niren

As the given image shows I can say the NAT rule is working but partially. The highlighted line in the image is Src. Dst. 192.168.2.4:3389(ms-wbt-server) 27.34.253.98:52246 https://s3-ap-southeast-1.amazonaws.com/uploads-ap.hipchat.com/29784/201183/c7Ib3J2eMRz0yRa/Capture.PNG That line is coming when...

niren

Have you got an allow in your firewall on both your computer and the mikrotik. Try turning windows firewall and anyother firewalls off and disable the rules in the mikrotik firewall I tried disable all firewall rule in mikrotik router and have disabled firewall in home windows system, still no luck.

niren

add action=dst-nat chain=dstnat comment="Remote SSH Access" dst-port=\ 22 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.0.164 \ to-ports=22 Here is an example DST NAT with Dynamic IP see instead of using Packets IP I read which port the packet comes in on i have added this...

niren

My setup is private network system(192.168.2.4) <---(LAN)--->(192.168.2.1)Mikrotik (123.201.xxx.xxx)<---(WAN)---> Internet 123.201.xxx.xxx is public IP but not static IP, if disconnect and connect internet back the IP would have changed. There is a NAT rule to allow outbound traffic: srcnat LAN priv...

niren

I have mikrotik router connected with broadband connection. Right now we don't have any static IP but I have applied to get Static IP, so I'll get static IP soon. As of now my mikrotik configuration is Broadband -> Mikrotik router -> Switch -> 10 systems(over LAN) /ip address> print # ADDRESS NETWOR...

niren

Thank you all guys. Finally I got it work by change DNS address in my system to ISP DNS.

niren

I have done set as you said. now from my system I can able to ping 8.8.8.8, but when I try to open www.google.co.in in my browser the page is not working.

niren

You have to change the pppoe iface and modifiy add-default-route=yes then add a masquerade in your firewall /ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-out Should I change pppoe iface, you mean interface?. It is already set to ether1-Input where I connected broadband cab...

niren

Thank you all guys for reply I got connected to broadband, I confirmed it as interface pppoe-client> monitor pppoe-out status: connected uptime: 13m17s idle-time: 2m41s active-links: 1 service-name: ac-name: ser-8-G61BQ251 ac-mac: 00:30:88:1F:5B:B3 mtu: 1480 mru: 1480 local-address: 106.51.134.124 r...

niren

I tried as you said but no luck. Is there any way to make it work?

niren

I have posted another question, check this out http://forum.mikrotik.com/viewtopic.php?f=13&t=83329

niren

I have mikrotik router 750GL, broadband connection and username & password from broadband provider for PPPoE connection. I tried this link http://wiki.mikrotik.com/wiki/Manual:Interface/PPPoE to setup PPPoE client in Mikrotik router. /interface pppoe-client add name=pppoe-user-mike user=user pas...

niren

Regardless of DSL or ADSL you need a modem.

You mean Apart from Mikrotik router I need a modem?

If so the structure would be

Broadband -> modem -> Mikrotikrouter -> switch -> PC

what kind of modem do I need then, I already have belkin wifi router, would it be useful to me?

niren

So far we used to have leased line internet connection, now we are switching to Broadband connection. we got a connection also with username and password from broadband provider. I don't know to configure broadband connection with mikrotik router. I called the provider to help me, he asked that my m...

niren

Right Now we are using Leased Line connection which give us 13 Static IP, Since it is costlier we are planning to switch to Broadband connection. But with broadband connection we will get only One Static IP. So what I think is assign the single static IP to Mikrotik router, If any one want to connec...

niren

Right now our internet connection: Connection type: Leased Line Router: Mikrotik router No of Switches: 2 Wifi router: Belkin In mikrotik router 1 port is used for Input and two ports are used for output( LAN + Wifi connection), so final gatway is mikrotik router. Leased Line connection gives us six...

niren

I wanted to use DynDNS:http://dyn.com/dns/ but this link: http://wiki.mikrotik.com/wiki/Manual:Tools/Dynamic_DNS says that mikrotik router doesn't support DynDNS. Which one would be good to use with mikrotik router?

niren

I want to know how to set dns name for a system which has dynamic IP. As of now we are using Leased line internet connection for our office which give us 16 static IP's, so all the system has static IP. Now we are intend to change to broadband connection there we won't have static IP's. What I want ...

niren

SSTP is not working as I expected. I have created certificate Manually as per this link: http://wiki.mikrotik.com/wiki/Manual:Create_Certificates#Import_certificates Certificate Installed in SSTP server: server.crt + ca.crt Certificate Installed in SSTP client: client.crt + ca.crt Certificated selec...

niren

@all if any one doesn't understand please let me

niren

I have implemented SSTP server in our mikrotik router by these links http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP and http://wiki.mikrotik.com/wiki/SSTP_step-by-step . Right now it is working fine, but I can't implement multiple clients with different certificates. As of Now: For Mulitple cli...

niren

Try the solution described here http://www.vpnonline.pl/forum/viewtopic.php?p=213

this solution worked for me thank you.

niren

I setup SSTP server in mikrotik router. it is working successfully. I tried with window 7 laptops and systems as client to conect to mikrotik routers SSTP server, they are working fine. Then I tried with windows 8 laptop it is through me error 631 the user disconnected the modem . As per this link h...

niren

I want to block all incoming traffic to my network and allow all outgoing traffic from my network. I tried this rule in miktotik's firewall filter chain=forward dst-address=xx.xx.xx.xx/28 connection-state=new action=drop Where xx.xx.xx.xx/28 is our network addresses contains 16 Static IPs This rule ...

niren

I try to upload created certificate to mikrotik from Ubuntu system for SSTP connection with Windows client as mikrotikuser@MikroTik] /tool> fetch address=123.456.789.101 src-path=/home/certificate/server.crt user=ubuntuuser mode=ftp password=syspassword dst-path=server.crt port=21 host="" ...

niren

Is it possible to create vpn over ssh in mikrotik router?

niren

Block all the traffic in firewall filter except ports 80,443 and 3389 only over VPN pptp. Whenever client want to connect to system behind mikrotik router they need to connect to VPN server of mikrotik router and then make RDP to system. Client need username and password that used in router's /ppp s...

niren

@troy thanks a lot. its working. I need to study wiki documentation as you said.

niren

It is working by these rules add chain=forward action=accept protocol=tcp dst-port=80 comment="Allow HTTP" add chain=forward action=accept protocol=tcp scr-port=80 comment="Allow HTTP" add chain=forward action=accept protocol=tcp dst-port=443 comment="Allow HTTPS" add c...

niren

I want to do allow 3389 port(RDP) only through VPN connection, not normally. How can I do this? I have configured VPN server in Mikrotik. I have blocked all traffic except http and https by firewall filter. I allowed 3389 by filter rule and right now other systems(outside of our network) able to do ...

niren

Block all ports except 80 and 1723. how do I do? I tried these codes to block all but 80 /ip firewall filter add chain=forward action=accept src-address=192.168.0.0/24 protocol=tcp dst-port=80 add chain=forward action=accept dst-address=192.168.0.0/24 protocol=tcp src-port=80 add chain=forward actio...

niren

As the title says I need to block all the connection to mikrotik router from outside except connection to VPN server. Then allow Remote desktop to LAN's system over VPN(either L2TP/IPSec or PPTP) from outside LAN. What would be the rule in Mikrotik router's Firewall to block all the connection excep...

niren

Please let me know, If you guys don't understand my question.

niren

I have configured and working Mikrotik router 750GL in our office. We have cloud server in another country, I try to provide secured tunnel between our cloud server and our Mikrotik Gateway, I choose PPTP vpn connection. I have setup vpn-client in Mikrotik router as per this link says http://www.wif...

niren

I tried to connect squid3 in my network to use high anonymity proxy. This is how my network is right now WAN LINK | ------------- --------------------------- | Mikrotik Box | | Ubuntu Server with squid3 | ------------- ---------------------------- | / | / ---------------------- | Switch ( Cheap one ...

niren

You can connect to a vpn like strongvpn

I have no idea about setup vpn, but some days before I came across vpn over LT2P + IPSEC, but this is for one-to-one connection. How can I achieve "hide IP to outside" with vpn, can you elaborate your answer?

niren

How are you connected to the internet.
If you are running pppoe on ether1, use pppoe as out-interface

I don't run pppoe, as a newb I don't know why and how to pppoe, so there is no pppoe in Mikrotik router.

niren

Maybe is not having a NAT rule the issue.
Hoe are you connected to the internet and how is your IP setup?

ether1-Input:
Address = 10.0.0.2/30 Network= 10.0.0.0

ether2-LAN:
Address = 121.222.121.193/28 Network = 121.222.121.192

IPs specified are not correct. I pick some random number.

niren

"Elite" squid + peering with http://squidproxies.com/private-proxies/ ? Granted these days there is no such thing such as security or privacy .The NSA just turn up at the facility and put a M16 in your anonymizers mouth , and get the logs dedicated to your connection. Thank you for reply ...

niren

I try to masquerade my IP address as this link says http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT but it's not working I used this rule /ip firewall nat add chain=srcnat action=masquerade out-interface=ether1-Input from above mentioned link, where ether1-Input is interface get Internet connec...

niren

I want to setup proxy server for my Mikrotik router. There is inbuilt web-proxy for Mikrotik router but I can extend this upto transparent proxy(kind of proxy server) only. We need High anonymity proxy so that we can hide our LAN static IPs(we don't have private IP) from outside Intruder/hackers. An...

niren

Check your filter rules and if you have a default gateway for the router

I don't have any filter and NAT rules. What else I need to check?

niren

your ISP may be blocking ICMP

I have contact my Internet Service provider about this issue, they told me this is problem with mikrotik router and they don't have enough experience with Mikrotik router, they couldn't help me.

niren

Like in your earlier posts you just do not get it. Routeros is the operating system. It can run on pc hardware or routerboard hardware. Eitherway the system needs to be configured. This can be done on various ways like telnet, ssh or winbox. You can not use routeros to configure another routeros in...

niren

I have Routerboard 750GL and RouterOS in it. Right now I use Winbox from my local windows system to configure RouterOS. I have a CPU of 256mb ram, 80gb harddisk and pentium 4 processor. I want to use this CPU to configure routerboard's RouterOS. but I don't know how to merge it. One way I know is in...

niren

I try to ping outside internet from Mikrotik terminal but I can't. I tried to ping gmail.com IP as gmail.com IP is: 74.125.236.53 > ping 74.125.236.53 output: timout But If I ping my local system I can able to do as > ping xxx.xxx.xxx.206 output: connected Why can not I able to ping outside my LAN c...

niren

not possible integrate anonymous proxy.

best way - Anonymous VPN + Mangle.

Can you elaborate what Mangle rule should I establish and How can I use anonymous VPN with Mikrotik router.

In this case shouldn't I need web-proxy integration with mikrotik router?

niren

I can able to set web proxy server with Mikrotik router, but I want to setup high Anonymity proxy with Mikrotik router. I have searched in wiki mikrotik but I don't but any material.
Can I integrate High Anonymity proxy with Mikrotik router or should I need other software?

niren

Many ISPs use as WAN IP routable not verify your address do a tracert and see where your package is.

I can able to do traceroute as per @ranpha says. Then what should I do, I don't understand

see where your package is.

niren

Many ISPs use as WAN IP routable not verify your address do a tracert and see where your package is.

tracert command is not working in Mikrotik terminal, this is what I tried

[myuser001@MikroTik] > tracert www.google.com
bad command name tracert (line 1 column 1)

niren

I try to setup proxy server with Mikrotik router but I face problem, this is what I tried. I did every thing through Winbox GUI not Mikrotik terminal. 1. /Sytem stores added New store with type=web-proxy Disk=system Activate=yes. 2. /ip web-proxy enabled=yes Max. cache size=Unlimited cache-on-Disk=y...

niren

can you post your firwall filter output from the router ? do you have anything in input/output chains ? This is in my firewall filters: 0 ;;; PortScanner: Port scanners to list chain=input action=add-src-to-address-list protocol=tcp psd=21,3s,3,1 address-list=port scanners address-list-timeout=2m 1...

niren

is the resolved IP the same in your Windows and also in your Router? Paste both outputs please This is in my windows: C:\Users\Infratab Bangalore>tracert www.gmail.com Tracing route to googlemail.l.google.com [74.125.236.118] over a maximum of 30 hops: and I try ping in windows: C:\Users\Infratab B...

niren

When I try to do www.google.com, www.facebook.com, etc in Mikrotik terminal gives me timeout, But If I ping it from my own system I can able to ping. my system ip is xxx.xxx.xxx.194 and default gateway is xxx.xxx.xxx.193. I do open winbox to configure Mikrotik router. I can able to ping my IP xxx.xx...

niren

Doesn't any one understand my question, please leave me comment If you guys don't understand my question, I'll try to make it better.

niren

No that's not what I meant. I accidentally typed the word 'add'. I meant that some routerboard are equipped with a serial port that can be used for configuring. A routerboard always runs RouterOS. My routerboard has serial port and it has RouterOS as you mention then why I couldn't use the RouterOS...

niren

Thank you for clarification

And add some routerboard devices are equipped with a serial console port.

you mean the routerboard come without RouterOS in it, doesn't it?

niren

I have done as per this video says http://www.youtube.com/watch?v=fVsNdJ2OwPg Difference is: I don't have primay-master and primary-slave, I have only one drive which has memory of 126.9Mb and free memory of 73.9mb. apart from this difference every thing I did is same as the video shows. After I did...

niren

I did another check as well, try to block a website that I have done with Winbox but its not working with "RouterOS installed system". I have done as > ip firewall filters add chain=forward content=www.google.co.in action=drop The same command working with Winbox but not wiht RouterOS, so ...

niren

When I use /export, I see output something which run for 5 sec. I can't see full output. I guess they are already configured settings.

niren

RouterOS, as it's name says it's the Operating System of the router you're using. you may be referring to something else. If that is the case why there is a link http://www.mikrotik-routeros.net/install.aspx says I can install RouterOS separately to access Router configuration, So Installed RouterO...

niren

As the title says I want to access Routerboard configuration from RouterOS since I read that accessing Mikrotik router via winbox,webFig, ect are not secure, So I wanted to use RouterOS. Our Mikrotik routerboard is RB750GL. I wanted install RouterOS v 5.26 in our dedicated PC which has 256 MB ram, 8...

niren

I am using Mikrotik RouterBoard 750 GL. I want to configure my Gateway(Router) for security management, Should I use RouterOS for my requirement or can it be done by winbox. If it is done by Winbox then what is the purpose of RouterOS. Basically my question is I guess I can use winbox to access Mikr...

niren

I am new to Networking. In our organization we try to setup gateway for security purpose. All I know is gateway is a device. What we have is the LAN setup, Mikrotik router (to assign static IP for every computer in our company). The details I know is default Gateway, subnetmask and assigned IP addre...

Search found 76 matches