MikroTik

cyon

Got it working by selecting the packages that I need to install.

cyon

Hello.

I follow the steps but I'm not winning.

I have an RB750 and I have updated it to Ver7, the router is so unstable and very slow.

I want to downgrade it to 6.49..
routeros-mipsbe-6.49.7.npk I do the commands and reboot but not winning.

What els can I do?

cyon

Thank you.

I'm now so happy it works.

cyon

Thank you.

so I got it working, but what is funny, I can't ping the router1 from router2 but I can ping pc1 on network2 from pc2 on network1

cyon

I made a lab on eve-ng and the same problem. maybe your eyes see something..? R1 /interface ethernet set find default-name=ether3 disabled=yes set find default-name=ether4 disabled=yes /interface wireless security-profiles set find default=yes supplicant-identity=MikroTik /ip ipsec profile add dh-gr...

cyon

Hi.

I have tried again and following the https://wiki.mikrotik.com/wiki/Manual:I ... ed_traffic. IPsec connects but no luck on the traffic. I have added a nat rule and still no pings.

cyon

I have the same problem.

cyon

Good day so I have created a VPN Connection to my House and it works great. {to connect to my CCTV and alarm} My VPN IP Is (10.59.15.0/24) But at my office(10.59.0.0/24) I have a program that works on a different subnet, (192.168.200.1) that routes through the office firewall. How can I get the IP(1...

cyon

Hello @erkexzcx

I'm looking for a VPN for my iPhone to my Mikrotik?

cyon

Too much time has elapsed and too much changes have been done during that time. Post the current configurations.

I delete everything and starting from the beginning. Will post everything when done.

cyon

Going to start over!
Is it the new version that is causing not to get the traffic passing trough the nat? as I did all the steps that you sent.

cyon

I'm also/still having Issues.

cyon

You may think I am paranoid, however the sad truth is that even if no one may be interested in your data and network in particular, botnets crawl the net automatically and try to seize every device they find.

Can you send some good firewall rules?

cyon

ok, Now I learned alot. Thank you

cyon

/ip firewall nat remove [find !(action~"masquerade")]

why remove this>?

cyon

[/quote] OK, so you've attempted to use an EoIP tunnel to connect the sites rather than using an IPsec policy to directly match the traffic. This is also a possible approach (which costs a couple of bytes per packet more), but as EoIP is an L2 tunnel, you cannot use the tunnel name as a gateway of a...

cyon

Here is the config of eash router

cyon

I have done that and no winnings. I miss something, I have played with nat and Routes.

router.PNG

cyon

Apologies, but I'm lost now. I have fixed the nat rules, Router A /ip firewall nat add action=src-nat chain=srcnat dst-address=10.22.22.2 to-addresses=10.22.22.1 add action=masquerade chain=srcnat /ip ipsec policy group add name="My group" /ip ipsec policy set 0 disabled=yes add dst-addres...

cyon

Router A @*****VM > export # nov/30/2020 09:00:04 by RouterOS 6.47.8 # software id = # # # /interface bridge add name=loopback /interface ethernet set [ find default-name=ether1 ] comment=MirotikSW-Router disable-running-check=no name=ether1-external set [ find default-name=ether3 ] comment=ISSA-VM ...

cyon

Hope the log will help.

cyon

Hey, I got it working, Thank you.

so Noob question: Router A is 192.168.1.0/24 and Router is 10.59.10.0/24. if I add the Nat I can't ping the Linux box on 192.168.1.18 from 10.59.10.40.
How do I go about this with the IPsec?

cyon

Check my guide: viewtopic.php?f=23&t=169538

I think you are missing bridge/interface for VPN server as well as NAT rule for internal networks. I've mentioned everything there.

Not Working!

cyon

I did add the nat rule, ?

cyon

Check my guide: https://forum.mikrotik.com/viewtopic.php?f=23&t=169538 I think you are missing bridge/interface for VPN server as well as NAT rule for internal networks. I've mentioned everything there. I have followed the guys setup. https://www.informaticar.net/how-to-establish-site-to-site-v...

cyon

Hello all. I have set up the IPsec and I don't get the traffic passing. I have done Firewall Nat and no luck. Please can you help me what am I missing? Thank you Router 2 /ip ipsec> export # nov/27/2020 13:49:56 by RouterOS 6.47.8 # /ip ipsec peer add address=1.1.1.1/32 exchange-mode=ike2 local-addr...

cyon

Come Right!

Thank you!

cyon

so the people have put a wireless device in the roof but never done the setup, so its plug in the ether 3 port, and it has a DHCP 192.168.0.1/24.
I want to connect to the Wifi web interface that is on 192.168.0.1. The Mikrotik network is 192.168.1.0/24 where that PC on.

cyon

Thank you I have removed the bridge 2 from ether3 and I got it working. so either 2 network is on 192.168.1.0/24, ether 3 - I have a device that needs to get in the web interface that is in 192.168.0.1. how can I get on to the web 192.168.0.1 on the client PC that is on 192.168.1.25 I just need to c...

cyon

Your port is member of a bridge. Put the dhcp client on the bridge.

I don't understand. I can do it on Ether 1 but I can't do it with Ether 3?

cyon

Good day all

I busy setting up erth3 DHCP Clint but I can't.
"couldn't add new DHCP client - can not run on slave interface"
we on 6.47 firmware on Mikrotik, how do you fix the port not to be a slave anymore?

What can I do?

cyon

Good day I have a problem. I got 2 Internet connections(WAN1 & WAN2) with ECMP and I make use of cloud DDNS, for the VPN Connection to this router. so when the DDNS updates, it takes that WAN2 public IP Address and that WAN2 IP points to a diffrent Router with no VPN setup. Is there a way I can ...

cyon

what VPN are you running?
PPTP- and OpenVPN-clients both work fine. OpenVPN server in UDP mode works as well (just tried it)!

IKEv2 to ios 12.4?

cyon

Whoa! Just installed 7.0beta1 on a hAP ac^2. Wireless/EoIP/VPN all work.
Routing stack seems to have changed quite dramatically though!
I lost BGP, but I gained /routing/pimsm and /routing/fantasy, although I have no clue what that last one does yet.

what VPN are you running?

cyon

I can't read that!

cyon

Hi all Can someone help me? I have been searching the internet and can't find why the iPhone - ios12 drops after 8mins. I have change encryptions and test. The firewall filters is working, can get out to the internet and the local lan. I just can't get it to stay connected. # sep/03/2019 22:07:56 by...

cyon

Hi Imperia

Did you come right with this?
I can connect to the VPN and ping only the router but none of my services on the LAN.

cyon

Thank you

speed is much better..
will save now for a better router to get the full fiber speed.

Capture.PNG

cyon

Thank you so much vodokotlic! it is working awesome.

cyon

Hi understand.

Fast track is on! I can't afford to buy some new.

What until will worth saving for? More then 8 ports / rack mount and have an lots of power two. Need to connect vpn as well do lots of firewall rules

cyon

Hi

Here is the screenshot.

so I need to add more rules in the firewall?

Untitled2.png

cyon

Hi, I haven't confi the firewall. nothing in the bush. Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload # INTERFACE BRIDGE HW PVID PRIORITY PATH-COST INTERNAL-PATH-COST HORIZON 0 H ether3 Skynet yes 1 0x80 10 10 none 1 H ether4 Skynet yes 1 0x80 10 10 none 2 H ether5 Skynet yes 1 0x80 ...

cyon

Hi All. Hope you can help. I had this device for almost 3 years. I understand it is not a Router, But at that time I received it as a gift. CRS112-8G-4S I always had ADSL 12mbps and now My work installed me 100mbps Fiber. I reconfigure the unit and I only get 22mbps (Speedtest) out of the unit. I ha...

cyon

Hi, all the Mikrotik lovers!

I need your help?
I'm looking for a best practice for the Mikrotik Firewall Filer Rules.
Maybe someone has a best practice for the Firewall filter rules in one place. This will help me a lot.

Thank you
C

cyon

Just an update, so I change the DNS server to a different server and the connection never drop one's un till now 8 am this morning. I could see it gets a new key every hour.
I'm getting new internet installed soon. maybe the line speed is just too small.

cyon

I don't understand why! Here is the log 14:48:01 ipsec,info purging ISAKMP-SA 1xx.xx.xx.xx[4500]<=>1xx.xx.xx.xx[11659] spi=59bd8xxc0a02160c:2181ecxxxx57. 14:48:01 ipsec,info ISAKMP-SA deleted 10x.xx.xx.xx[4500]-1xx.xx.xx.xx[11659] spi:59bd8xxc0a02160c:2181ec3xxxxc57 r ekey:1 15:34:03 ipsec,info ISAK...

cyon

Hello. I'm really struggling with this. I connect with no problem and then after some time, it starts to "dying" out and disconnect. What can I do to keep the connection going? or did I miss something? 13:09:12 ipsec,info ISAKMP-SA dying 10x.xx.xx.xx[4500]-100.xx.xx.xx[4219 3b7:xxxxxxxxxc5...

cyon

Hi All I try to set up an L2TP with my Iphone8 (12.4) to Mikrotik 6.45.2 connection I google it but all the content is for older Mikrotik, some of the settings is not anymore in Mikrotik 6.45.2 or on diffrent places. Can someone help me? I keep getting this error: 12:09:54 ipsec,info respond new pha...

cyon

Block ICMP packets and allow router to show as a hop on traceroutes; /ip firewall filter add action=drop chain=forward disabled=yes icmp-options=8:0 protocol=icmp Doesn't Work! Of course, disabled=yes is a very effective way to make non-working firewall rules :) I did see that LoL. but still not wo...

cyon

Block ICMP packets and allow router to show as a hop on traceroutes;

/ip firewall filter add action=drop chain=forward disabled=yes icmp-options=8:0 protocol=icmp

Doesn't Work!

cyon

Good day I have a RouterBOARD 750UP, I've Hard reset the unit, log-in and select 'No Default Configuration' and then it reboots. After reboot, I can't get back in with the MAC Address. Then after restart the eth port 2 to 5 just goes ON and OFF every 10 sec. Then I have Hard Reset the device again a...

cyon

Think as we are not the same country.

I do more work on it

cyon

So I did some digging and saw that TeamViewer Connect to a domain, 188.172.217.0/24

cyon

Did anyone get this right? I want to mark the packages for QoS.

cyon

Hi

What happened with CRS125-24G-1S-RM unit?

see it is discontinued! why?

Thank you

cyon

I understand the situation that you have.

Lucky enough I'm the firts call tech support for the family.

Thank you.

cyon

Still no CRS354 switches..
Announced more then year ago. Another RouterOS v7?

I'm waiting as well!

cyon

Well, sometimes the situation can be tricky. For example, for me it is not possible to get fiber, but for the people across the street it is. My street is the border of the area where you can get fiber. If I would get internet from the people across the street (I don't, I have my own VDSL connectio...

cyon

Thank you for your support.

cyon

Hi, Did you come right? I also want to know. Hello guys, i need to setup up a hotspot with router os but after i really want to know if access point ubiquiti (UNIFI) is compatible with capsman router os, if is the right configuration, i have the following scenario: 1x RB2011iL 4x UNIFI AP is possibl...

cyon

Hi

So I re-did everything and still have some problems with the DNS.

Got it working.

cyon

Hi all. let's hope this post will stay! So I'm still an n00b when it comes to Mikrotik. Hope someone can help me with this problem Last week my Neighbors told me that I can connect to their fiber across the street. So I thought to go VLAN but then my Friend comes up with a diffrent way. I got everyt...

Search found 62 matches