MikroTik

signal

It is important to keep in mind the delay involved in the link, since TCP is limited by delay, independently of the speed of the link. For example, and this is just for example, I have no idea what type of delays you can acheive on the gear your looking at: If you take the receive window of TCP as 6...

signal

Say you have 2 mikrotik routers, that are configured with ethernet lan interfaces, and both are connected via wlan interfaces. Can you build an EoIP session between these two routers and use the existing wlan IP's to terminate the EoIP tunnels? I ask because in the documentation they typically build...

signal

If you have a mikrotik with a SINGLE ethernet interface for the LAN, and the WAN side is wireless, can you bridge ONLY IPX traffic, and still route the IP on that LAN interface? or would this require 2 ethernet LAN interfaces, one that is bridging (say using EoIP over a PPTP tunnel) using forward-pr...

signal

where do you set the Mikrotik to encryption=required? Are you talking about where you set the authentication to mschap2?

Brian

signal

I tried to connect to an MT v2.8.11 with PPTP but get the following with mschap1 configured on the MT: Sep 16 14:26:43 Brians-G4-at-Work pppd[1575]: pppd 2.4.2b1 started by root, uid 0 Sep 16 14:26:43 Brians-G4-at-Work pppd[1575]: PPTP connecting to server '24.153.172.158' (24.153.172.158)... Sep 16...

signal

I think OSPF may be broken in 2.8.11 as far as some functionality: From the Mikrotik Docs for 2.8.11 OSPF: "There can be Point-to-Point networks or Multi-Access networks. Multi-Access network can be a broadcast network (a single message can be sent to all routers)" "You should set the...

signal

changeip, The reason its not logged, is because its broke, or its an undocumented feature. ICMP is most DEFINITELY an IP protocol. In fact, its IP Protocol 1, it is in no way, shape or form not part of the IP protocol: icmp, igmp, tcp, igrp, udp, etc these are all part of IP protocol, and should be ...

signal

Yes, your right, but it still does not seem to capture packets to/from the router of type icmp: [admin@BIOMED_MAIN] tool sniffer> print interface: all only-headers: yes memory-limit: 2000 file-name: file-limit: 10 streaming-enabled: no streaming-server: 0.0.0.0 filter-stream: yes filter-protocol: ip...

signal

I am trying to do some basic packet sniffing. I setup my sniffer: [admin@BIOMED_MAIN] tool sniffer> print interface: all only-headers: yes memory-limit: 2000 file-name: file-limit: 10 streaming-enabled: no streaming-server: 0.0.0.0 filter-stream: yes filter-protocol: ip-only filter-address1: 192.168...

signal

Whats the neighbor output show for the other side of the link?

Brian

signal

What does MT show for ospf neighbor print? There must be something misconfigured somehwere.

Brian

signal

You only run OSPF on links/networks that are talking to an OSPF neighbor. So in your diagram you posted, you should NOT be running OSPF on the 192.168.x.x. networks. You should instead run OSPF on the 10.x.x.x network. Then you do: /routing ospf set redistribute-connected=as-type-1 metric-connected=...

signal

I am a little unclear on what your asking, please try to be as clear as possible. You say you have a DC route to 10.0.0.0/24, yes you should always have this. Then I think your saying you have a DIO route but your wanting to know what about this DIO route? Understand, the network in question, 10.0.0...

signal

Is there a way to view standard diagnostics counters on interfaces in Mikrotik? For example viewing things like late collisoins, fcs, alignment errors, collisions, CRC's, etc?

If not, then there should be.

Brian

signal

Ok now i understand. I am willing to bet there is no way to do this in current MT.

Brian

signal

You have two interfaces bridged, and you assigned ip's to the bridged interface itself right, not the interfaces that you are bridging? My point is, make sure your assigning the IP's to the bridge interface, not its seperate components. Also, you say you have multiple subnets, I assume assigned to t...

signal

Ok, I am confused. Your asking if you can queue traffic to and from your MT. The answer is yes. How do you do it? You use queueing. You use queueing just the same as if you were trying to queue anything else. The only difference is you will only be able to work off the 1 interface, since we are talk...

signal

Whats wrong with using normal Queueing? Web proxy traffic is between the user and the MT. Just match it and limit it.

Brian

signal

Personally, I don't see load as a problem. Whether your masquerading 2000 people behind 1 address, or your one to one mapping 256 IP's outside to 256 IP's inside, a translation is a translation. It is not uncommon for translation tables of routers to have thousands or tens of thousands of mappings. ...

signal

the mangle lines look correct, maybe its a problem with your queue commands, post those.

signal

I think you would need 20 individual statments. It would be nice if it supported the ability to dst-nat entire networks., so you could dst-nat network a.a.a.0/29 to b.b.b.0/29 with one statment. Then a.a.a.1 would be natted to b.b.b.2, and a.a.a.2 would be natted to b.b.b.2 etc.

signal

Did you do /driver add name to add the appropriate driver?

Brian

signal

Well if they were all in one subnet, then you could just have the MT reply-only to ARP. The servers imho should be off a different interface than the customers are behind.

signal

The short of it, is you need to go back and read the hotspot docs at mikrotik.com and pay careful attention to detail. For example, the first rule in your input chain jumps to "hotspot"..........there should be no "jump" in your input chain like that, especially at the beginning,...

signal

You just make rules to allow the networks you want to communicate, and then deny the rest. It would be very helpful if you would post what you have as far as rules.

Brian

signal

I would be interested in knowing how this is done. I do not believe its possible with MT. Although the MT can mark/mangle IP Precedence bits, etc. I don't know that it in fact acts upon them (acting on marked traffic is not something IP handles inherently, its up to the router to do something with i...

signal

You are a bit confusing here.

You say you are "opening a range", which to me is allowing your users to do something. yet you say you are doing it to "unable" them to see eachother.

Can you explain in terms of what rules are you using and in which chains?

signal

That would go thru the "output" firewall chain. If you have nothing in this chain, then your golden. If you are putting rules in this chain however, then make sure you are allowing syslog traffic to your server. I would suspect however, that you probably have nothing in the chain.

Brian

signal

Are you using a MTU/MRU of 1480?

Brian

signal

Yeah, I didn't know you were filtering redistribution. Now if they will just support true ASBR..........hmm

signal

What you describe is usually remedied by DNS Doctoring, as described here: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aee.shtml#int To my knowledge, the Mikrotik does not support this. I have also seen similar stuff to this accomplished by routing to a loopb...

signal

You cannot filter LSA's in a Link State Protocol, this breaks the design of the protocol itself. Every router in the OSPF area must maintain a copy of the same link state database. Now that I have said that, there ARE vendors who have done some hacking to allow some filtering on OSPF, but once again...

signal

Sir William,

You want 0.0.0.0/0:25, not 0.0.0.0/8:25

so use a dst-address of 0.0.0.0/0:25

Search found 33 matches

EoIP question

Bridging only IPX traffic

PPTP does not work to Mac OSX 10.3

OSPF broken?

Is packet sniffing broke in 2.8.11?

A way to view CRC, FCS, Late collisions, etc on interfaces?

Re: My Hotspot Won't Work