MikroTik

michalkos

I was install Dude 3.4 on RB600. In torch I have reversed IP address - It's normal?
When I used torch in WinBox, IP addresses are OK, but in Dude not.

torch.jpg

Correct IP address is 192.168.5.105 !!!

michalkos

I have HotSpot whitch work fine. When I enable Radius auth., logged user can red error message: no free IP address

Why?

Without RADIUS hotspot work fine, user get valid IP address.
In user mng., I red in log : authorization success

I don't know where is the problem.

Thank's.

michalkos

W1,W2 is not bridget port.
Rule no. 36 is test rule not correct, I know.

Bridge contain: DMZ, Lan, CoWW, CoWW2 interfaces.

michalkos

YES! I have set it. ... use-ip-firewall=yes I know this set. Some rules used bridge port work fine, but some not. Example: When I use combination bridge port W1 (eth) and DMZ (bridge port) rule not work ! or LAN (bridge port) and CoWW (bridge port) not work wery well. Hmm. It's mystics :o) When I us...

michalkos

Look:

michalkos

... or when I use src.address or dst.address filtering instead bridge port filtering ... filtering work fine.

... but bridge port filtering ... problem

michalkos

I try it! ... on ROS 2.9.xx work fine ! I use these rules on more firewalls 2.9.xx and bridge filtering work fine. On ROS 3.x I have problem. Some packets catch on this rule, but some not. I try your example as first think, last week. I find out, that some traffic like as "not new connection st...

michalkos

yes :o) look: I need filter traffic from interface W1 (ethernet) to Bridge on port DMZ (I need enable all). When I enable all traffic using rule: ... chain=forward action=accept connection-state=new in-interface=W1 out-bridge-port=DMZ ... chain=forward action=accept connection-state=established chai...

michalkos

) I try say something else

)

hmm, traffic:

chain=forward action=accept connection-state=new in-interface=W1 out-bridge-port=DMZ
chain=forward action=accept connection-state=established

not same as:

chain=forward action=accept in-interface=W1 out-bridge-port=DMZ

!!! This is bug, I think so.

michalkos

Sorry, I wrote (I know this settings): "I have ROS 3.3 with this bridge configuration: Settings: use-ip-firewall: yes use-ip-firewall-for-vlan: yes " I have problem with bridge filtering. I try this on three ROS and filtering doesn't work correctly. I have 4 and more ethernet interfaces in...

michalkos

When I use this IP Firewall rule:

chain=forward action=accept connection-state=new in-interface=W1 out-bridge-port=DMZ

it doesn't work correctly!

When I cut "connection-state=new", then work fine !
It's BUG?

michalkos

I find out where is the problem !

When you use "connection-state=new" bridge port filtering doesn't work correctly !

Please correct this bug.

Thanks.

michalkos

I have created "FW_LAN1.LAN2" ! When I use in-bridge-port or out-bridge-port in filter rule, this rule sometimes work, sometimes not without change. After reboot ROS, rules work fine, but after time doen't work again! This rule still not work: chain=forward action=accept connection-state=n...

michalkos

Hello, I have ROS 3.3 with this bridge configuration: Bridge: R name="Bridge" mtu=1500 arp=proxy-arp mac-address=00:16:17:16:DF:80 protocol-mode=rstp priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m Settings...

michalkos

I try create PPP profile with assigned Bridge, this function not work ! I monitored bridge ports and no new ports was created! When I assign FW filter to PPP profile and I dialed VPN, new PPP chain was created, but couters was blank and no data flow over this chain. Why? >>> I need secure dynamics V...

michalkos

YES ! I have checked this options

)

michalkos

Hmm, I have same problem, FW rules not work very well with bridge !

I can't control interfaces included in bridge ! 2.9.xx versions work well. I turn on IP firewall on bridge settings.

michalkos

I try use filter for securing my VPN clients in PPP profile - not work.

I used Incoming filter, and in filter I used LOG rule.
I didn't see any log messages in log viewer.

Bridge option didn't work too.

michalkos

I have 2 interfaces A,B in bridge.
I need control access from A to B inside bridge.

I was enable IP firewall in Bridge and I was set firewall filter:

In. bridge port: A
Out. bridge port: B

- it doesn't work ! Why? It's wrong?
In 2.9.xx it was working.

michalkos

WORKING !!!

RC11 work well. Tkank's.

michalkos

Cool, I will test it.

michalkos

Problem with L2TP, PPTP connection is not resolved.

Som my l2tp connection doesn't connect to other mikrotik 2.9.xx and 3.0rcxx versions !
When I change L2TP server settings on 3.0rc10 I lose some static VPN interface in PPP !!!

michalkos

I have problem connect to L2TP server. This is MT <-> MT L2TP connection, whitch work on 2.49.xx version ! When I change MTU and MRU under 1270, connection work well, but from my notebook doesnt! One of more connections write to log - "problem with sync" Other one write to log - "Wait...

michalkos

Yes

)

I have similar "fix" - [:pick $ddnsip 0 ([:len $ddnsip] -3)]]

Because why it on 3.0rc6 work and 3.0rc8 don't !
Is it "bug" or "repair" change.

michalkos

It's not true !

When you run:

:global ddnsip [ /ip address get [/ip address find interface=$ddnsinterface] address ]

you get IP address with format xx.xx.xx.xx/xx

If I get IP with this format, i need put them to other input with this format! Old versions support this format.

michalkos

I have this row in script (DDNS script) and after update 3.0rc6 -> 3.0rc8 this row add bad IP address to address list !

/ip firewall address-list add list=Test_IP address=192.168.99.10/32

this row real add this address list value: 0.0.0.0-255.255.255.223

michalkos

I have 5 L2TP tunels (without IP sec) from MT to MT. On version 2.9.xx this work fine, but on RC5 and RC6 (x86) work fine 3 of 5 tunels.
Why?

I try change MTU, Auth mode (chap, pap, mschap2), a more other things. I have rule in mangle for changing MSS - clamp to pmtu.

michalkos

I need use dynamic variable: :local a "b"; :local $a "My text"; > "$a" represent "b" variable :log info $$a; > wtite "My text" Last row don't work. Do you now how is correct syntax for get value of "b" variable? I need use dynamic syntax (a...

michalkos

I have very simple config ! I try reset it !
I can't make RIF file because when my MT was broken, this options didn't work!

michalkos

I know, but for testing sometimes suffice block of packages. When I find out, that system package load CPU on 100% - I know what I must test.

michalkos

Yes ! I agree. I need this future, too.
I have same problem with CPU !

michalkos

I try RC1 to RC4 - this version are not stable, used more CPU time than 2.9.xx.

michalkos

) I think so. It's slow, unstable !

michalkos

I don't use web proxy and I use Flash drive as my system and boot medium.
I return my stable 2.9.xx versions.

3.xx version is it not stable today !
I try something for resolve this problem. I didn't resolve it.

I am wait for new RC5 or 3.0 stable final version.

michalkos

My HW is OK

) When I red this forum, many peoples has same problem. I try RC4 on:

3x PC
1x RB133

on 2.9.xx version on some HW - no problem !!!!!!!!

michalkos

I wrote (top), that I don't use dude and calea package!

I disabled this packages! But this issue don't resolve my problem.

michalkos

Passthru traffic bandwidth is about 1400kbs - slow DSL connection, other MT has about 3000 kbs. This is no problem with limitation of bandwidth. When my MT routers hangs up, traffic id 0 kbs, I can't ping it, I can log on to console, but resource monitor showd me that CPU is on 100%. There is proble...

michalkos

No I try RB133 and PC with 2GHz Celeron.
I have same problem with both platforms.

michalkos

I use DHCP with Win2003 server - with RIS server. This is my config - it works. 0 PXE 66 66 server IP address 1 PXE 60 60 PXEClient 2 PXE 67 67 OSchooser\\i386\\startrom.com (file path) 3 PXE 43 43 01 04 00 00 00 00 FF

michalkos

I put new configuration - manualy (not import) - still problem with 100% CPU usage ! Please, repair this important bug! Why mikrotik doesn't have resource monitor by packages? I need see how many memory, cpu take some packages, for example: CPU MEM dude 10% 1250kb dhcp 1% 200kb system 25% 125kb ... ...

michalkos

Uf. It's hard work, but I try it.

michalkos

I update to RC4 - same problems !
My CPU was hangs up with 100% CPU load !

michalkos

I have still problem with 100% CPU load on i386 platform without calea and dude packages ! This version is a RC version, not beta. I don't find out who service load my CPU to 100%. I can logon to console, but any network services is down. How i find out whitch service load my CPU to 100% ?! I try la...

michalkos

Ok. I upgrade it now to rc4

)

michalkos

I try RC3 version and after time (15min - 3 hours) my router was break down ! I can't ping it. I try it on 2 PC - whitch work ok with ver. 2.9.xx with same configuration !
I uninstalled Dude and calea package because it hang my MT pernamently !
My router hang again! It's unstable!

Plase help me.

michalkos

I need shape all connection by protocol: download (on local) to 1500k upload (on side wan from my LAN ) to 512K When I connect (for example FTP) from WAN and "download" from my LAN server a use limit DSL 512, but when i connect from LAN PC to some public FTP i need limitation 1500K - DSL l...

michalkos

I should drink ! It miss me

michalkos

)

OK It's work, but I have second problem with this solution

I use (shaping) FTP ->
1. client from LAN to WAN a need limit 1500Kbs
2. client from WAN to LAN a need limit 512Kbs

=> DLS line type

Thanks for help.

michalkos

I have DSL line. Via this line I use this connection: - 2x IP tunel - L2TP connection - PPTP connection :o) I need use shaping for this services (for example): - RDP - Http - Smtp I don't know, how I mark packets for this services. I need set services as independe on connection, because, all connect...

Search found 49 matches