MikroTik

moazdabsheh

can you please guide me how to do it since i'm a newbie in Mikrotik ?

moazdabsheh

i still haven't solved this !
any help? someone?

moazdabsheh

I'm sorry moazdabsheh I didn't have the right code earlier post. Here is code I just used on my RB1100AHx2 and it works perfectly. I have two 30M connections and I get the full 60M on speedtest.net with this code. PCC Rewritten for per packet load balance with the use of nth. / ip address add addre...

moazdabsheh

worked very well with Router OS 5.26

moazdabsheh

thanks Chupka for the assistance, worked very well for me

moazdabsheh

HI i am a beginner on mikrotik i have to connect to WAN-s gateway (192.168.0.1 & 192.168.1.1) and three LAN-s(192.168.35.1 & 192.168.45.1 &192.168.55.1) i actually have configured it simple with both gateways at IP-> routes but i have some problems during work and the main problem is fo...

moazdabsheh

what about me ? i have mikrotik configured as pppoe server with usermanager, and pcc is not working, i noticed that wan2 has no activity for pppoe users though i don't have hotspot enabled !! this is my config: /ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interf...

moazdabsheh

aboard where ?

moazdabsheh

i did checked the link weeks ago. while some Egyptians showed that speed merge can be achieved but they are using hotspot for authentication. i noticed when i go to (IP - Firewall - Connections) that only pppoe users don't have connection mark (either wan1_mark or wan2_mark) while manually static ip...

moazdabsheh

Syed said he would help when he get some free time.
anyway, have you try bonding interfaces ?
does it merge both interfaces speed into one and make it look like one line with both speeds ?

moazdabsheh

what about UserManager ?
will this PCC work well with UserManager?
I used it but the problem all traffic are going through WAN1 only !!!

moazdabsheh

Try adding Nth 2/1 and Nth 2/2 to these two mangle rules you have. add chain=prerouting dst-address-type=!local in-interface=local per-connection-classifier=both-addresses-and-ports:2/0 Nth 2/1 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes add chain=prerouting dst-address-typ...

moazdabsheh

no i'm not proxy on mikrotik, but i will later after i accomplish the PCC method to achieve 2 wan lines bonding, though all traffic goes through wan1 and wan2 is always on low traffic. the ip address config was a typing mistake at the forum, check my print in the following post to see my settings., ...

moazdabsheh

it works well but i noticed something like a bug. https connection aren't blocked or redirected, such as facebook and google. anyone who have faced this issue or have a solution ? You can simply create a Filter Rule to block the https port 443 for the expired users ip pool to ensure misuse. enlight...

moazdabsheh

Switch wan1 off and check if wan2 works.

yes it works.
i'm using user manager to authenticate users.

moazdabsheh

these are my settings: /ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 ;;; static ip clients 192.168.0.1/24 192.168.0.0 local 1 10.0.0.100/24 10.0.0.0 WAN1 2 5.5.5.200/24 5.5.5.0 WAN2 3 D 192.168.0.1/32 10.10.10.199 <pppoe-ah5> 4 D 192.168.0.1/32 10.10.1...

moazdabsheh

Are you sure that network and broadcast addresses correspond to address of wan2? Yes, this is the ip addresses /ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 ;;; static ip clients 192.168.0.1/24 192.168.0.0 local 1 10.0.0.100/24 10.0.0.0 WAN1 2 5.5.5....

moazdabsheh

i applied this scenario on mikrotik v 5.26 on x86 machine /ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=local add address=10.10.10.0/24 network=192.168.0.0 broadcast=10.10.10.255 interface=local add address=10.0.0.100/24 network=192.168.1.0 broadcast=10...

moazdabsheh

it works well but i noticed something like a bug.
https connection aren't blocked or redirected, such as facebook and google.

anyone who have faced this issue or have a solution ?

moazdabsheh

what about blocking trace route ??

moazdabsheh

what about blocking only the trace ?? is it possible ?

moazdabsheh

An even more elegant solution: change the TTL to a constant value.

please guide me how to do that.

moazdabsheh

what about blocking the trace only while keeping icmp unblocked ?

moazdabsheh

yes it can ping 8.8.8.8
i take off the wan cable so netwatch will go down and run the down script (beep)
but when i put it back, netwatch change status to up and the beep wont stop, even though netwatch says up

moazdabsheh

routerboard x86
router os 5.26

moazdabsheh

this is the export /tool netwatch add disabled=yes down-script=":global soundAlarm1 value=[:tobool true];\r\ \n:while (\$soundAlarm1) do={\r\ \n:beep frequency=2000 length=500ms;\r\ \n:delay delay-time=1000ms;\r\ \n:beep frequency=4000 length=500ms;\r\ \n:delay delay-time=1000ms;\r\ \n}" h...

moazdabsheh

i did exactly as your example, same issue, when it beeps it never stops, the test is set to 15 seconds, when down happens it starts beeping after 15 seconds then if it goes up it never stops beeping !!

something is missing in your script, maybe the up script.

moazdabsheh

what do you mean by variable ?
can't you give me something easy to copy and paste ?
i have only one netwatch trigger to test ping on 8.8.8.8

moazdabsheh

i just copied and pasted from your first post to up and down events.

but i noticed in your second post there is a number 1 in it which wasn't in your first post.
i will test it later when i'm on the mikrotik.

moazdabsheh

well i'm aiming at fooling unskilled windows users who thinks linux is another brand of computers such as macbook

what about route filters over here? someone told me they can do it over cisco routers.

moazdabsheh

i did what you gave me rextended but when up the beep wont stop !!.
how to make the beep stop when it's up ?

moazdabsheh

i want to use this script in netwatch when a host is down to beep the mikrotik { :local count :local freq :for c from=1 to=50 step=1 \ do={ \ :set count 15 :set freq 1900 :do {\ :beep length=400ms frequency=$freq; :delay 25ms :set count ($count - 1); :set freq ($freq +35) } \ while (($count <16) &am...

moazdabsheh

what about tracing, the tracert command how to make it go through specific wan interface ?

moazdabsheh

is using L2TP better than PPTP for VPN connections ?

moazdabsheh

i don't have a domain and i don't think my ISP will agree.
that's why i was looking for a solution around.

moazdabsheh

business secrets i don't want to share with the customers.
do i have to buy a subnet of real ip addresses in order to make this work or this is a method anyone can help with ?

moazdabsheh

this the scenario i have in mind. i have 2 ISP WAN 1 = 8 Mbps DSL WAN 2 = 30 Mbps PPOE i'm trying to use both on 1 mikrotik device, but i don't want customers to find out what's WAN 2 isp when they go to http://www.speedtest.net any ideas or suggestions ? So let me see if I have this correct. You w...

moazdabsheh

how about forwarding some websites through a specific WAN interface i define, such as http://www.speedtest.net ?? The way are: know what are the pool of address used by speedtest.net add each pool on addtess-list called list-speedtest on mangle use mark route on prerouting, mark route as "spee...

moazdabsheh

how about forwarding some websites through a specific WAN interface i define, such as www.speedtest.net ??

moazdabsheh

i changed the ip address, after pptp client connect i can ping 192.168.4.1 but i can't ping the others on the same subnet !!!
what would be wrong now ?!

moazdabsheh

any other ideas included in Mikrotik since it looks like a complete system ?

moazdabsheh

so what do to ?

how can i use my DSL wan to be as the only ip showing for customers while using both WAN's bandwidth ?

moazdabsheh

this the scenario i have in mind.

i have 2 ISP
WAN 1 = 8 Mbps DSL
WAN 2 = 30 Mbps PPOE

i'm trying to use both on 1 mikrotik device, but i don't want customers to find out what's WAN 2 isp when they go to www.speedtest.net

any ideas or suggestions ?

moazdabsheh

Thank you I got it working!!!

aren't you suppose to share your solution with the rest of the forum members so everyone would benefit ?!

moazdabsheh

i will change my home router dhcp and gateway settings to 172.20.7.x/24 when i get home and give it a try.

moazdabsheh

at home i have linksys wrt54g router.
at work we use d-link dsl router.

the mikrotik router is on a network not related to these networks, that's my whole point of vpn, to be able to access the devices connected to the mikrotik while i'm home or at the office.

moazdabsheh

when you say (localnet) you mean the network i'm connected to other than mikrotik's network, right ?

moazdabsheh

yes.

at the office i'm on 192.168.1.x/24
and at home i'm on 192.168.5.x/16

what do you suggest? change something ip address?

moazdabsheh

Sometimes i'm in the office which is another city, and sometimes i'm home. Thats why i need to access 192.168.4.x devices on the mikrotik's lan to view it's performance remotly as i'm there. 192.168.4.x for wireless access points and pptp clients. 192.168.0.x for static arp clients 10.10.10.x for pp...

moazdabsheh

no i didn't know.
that's my point of vpn.

what's the solution in this scenario ?
how do I access the 192.168.x.x devices that are connected to LAN 1 interface ?!

I'm trying to access these devices while i'm not on that mikrotik's network.

moazdabsheh

yes, here is mine:

moazdabsheh

i just did that and test it and the result is the same, no ping at Ubiqutie access points or even the mikrotik itself.
i noticed that i get subnet for my vpn connection /32 such as 255.255.255.255 !!!

moazdabsheh

the vpn client, whenever i connect to pptp from outside the network i can't access the devices nor ping it, but when i'm connected to the LAN i can easily even without pptp connection.

moazdabsheh

i have mikrotik 5.26 on x86 i'm using user manager for pppoe authentication and static ip addressing for some clients with reply-only for arp on lan card. i'm trying to access wireless devices on the lan to that mikrotik throug h pptp, pptp connection established but i can't ping nor access the wire...

Search found 54 matches