I tried checking the firewall logs and even narrowing the search to the one (static) IP related to the PC on which the Hikvision software is launched, but I could never find anything. I will try opening the outgoing ports as you suggested. For NAT/tracking verification what specifically do you recom...

No clues?

Is the firewall too bad to solve?

Is it better to fix the firewall rules before delving into the matter, or can some logs be investigated to make the cameras operational and in parallel proceed with the rules?

For this firewall certainly needs to be checked and cleaned. For the NAT, however, I do not need any rules. As I had anticipated, streaming is done via a video application that downloads the video stream via an https connection. I do not need to connect to a DVR/NVR. Before proceeding with the firew...

True, you are right, but I was hoping for an indication of how and what to check in the logs.

I attach the file as requested: Thank you.

Hi, I am writing to investigate a problem I am having with the display of some video surveillance cameras. The cameras and NVR are from Hikvision and are in a remote location. There is no connection (such as a VPN) between my office and the remote site. To access the video stream I use Hikvision's i...

Hello, I'm trying to understand what type of routerboard I need to buy in order to use it with no perfomance issues with 10, 20 o 30 PC on the LAN. I've tried a RB450Gx4 on a LAN with 10 PC with no problem (100/20Mbit DSL). I've used the same routerboard on a LAN with 20 PC with a 100/20 Mbit DSL an...

No suggestions?

This throughput problem with VPN is a big concern for me. A quick serach in the forum ( http://forum.mikrotik.com/viewtopic.php?t=84918 and http://forum.mikrotik.com/viewtopic.php?t=84918 ) made me realize that (at least until the 1016 model) routerboards are not very great with multiple VPN servers...

I have also another question: can I use the Routerboard also as a Firewall or I need to implement a separate hardware for the security?

Thank you.

For the idea to implement the HA on each site I was thinking to use two CCR1009-8G-1S or also two CCR1009-8G-1S-1S+.

Some suggestions?
Two CCR1009-8G-1S-1S+ are too oversized?
The final HA configuration wil be in master/backup or with both router active using some load balancing?

Thank you checito for the reply. i think only you know the budget avaliable I can dedicate for a single routerboards a budet of 350/400 €. If the CCR1009-8G-1S has a maximum kpps of 907 and considering the SHDSL and Fibre Optic in the B.O. #1 maybe I need something more powerfull? And why the maximu...

Hello all, I've decided to implement MikroTik RouterBoards to manage VPN link between three sites (headquarter and branch offices). I need also the possibility to have roadwarriors with the possibility to connect via VPN to the headquarter. Here the actual situtation: Headquarter SHDSL 8Mbit ADSL 7M...

Thank you guys I have a more precisely understand of the routerboards hardware. When you say 100/1000/... Mbps of traffic is intended as the total in and out traffic plus the internal (switched) traffic? The ZyXel USG 60W has fetures like: - Wlan Controller: it's possible to manage and configure up ...

Hi all, I've some experience with the ZyXel firewall specially the USG-60W, USG-40W and USG-20W. I was wondering if there are RouterBoards that can replace them in terms of performance/functionalities. For example if I have three sites with 5 / 10 / 25 users what are the right Mikrotik models I need...

No advice?

Thank you vitaly.

I used "route 192.168.111.0 255.255.255.0 172.21.0.1"

192.168.111.0 is the LAN subnet on the routerboard
172.21.0.1 is the local IP address for the VPN (the one configured in PPP -> Pofiles as Local Address)

I still get the same error.

Hi all, I've configured a RB951G-2HnD with this officila tutorial http://wiki.mikrotik.com/wiki/OpenVPN_Configuration_Step_by_Step but I'm not able to maket it works. I want a Windows client able to reach a remote Windows File Server. I don't need to use the RouterBoard as a Internet gateway. This i...

Thank you for the reply. Then it means that your computer does not ask for Mikrotik as first DNS. Have you checked that you don't block by mistake the MT DNS port (53/udp)? Do you mean in the firewall? I've addes this lines: /ip firewall filter add chain=input protocol=udp dst-portaction=53 accept c...

That's the excatly configuration I have and it works from the routerboard itself.

It doesn't work from PC client both with static IP (with IP of the routerboard as DNS server) or dynamic IP via DHCP.

I've checked the ip routes and it's all ok:

ether4 -> LAN: 192.168.100.x
ether2 -> WAN: DHCP Client with IP 192.168.0.x and route Dst. Address 0.0.0.0/0, Gateway: 192.168.0.1

Other suggestions?

Hi all, I'm having trouble with my first MikroTik. I've read some basic docuemnts in the wiki and some threads on the forum but I'm confused about this problem. I want to configure the DNS server so the LAN PCs could: a. resolve IP addresses outside the LAN with static hostnames b. resolve the LAN P...

Configuration modified, up and running. Thank you.

Yes I already have ether2 configured with: IP address, DHCP Server, firewall rules.

The only thing I need is just to:

go in /interface address - /ip dhcp-server - /ip firewall filter
and there -> edit #number_entry interface

Is that correct?

Thank you for the suggestion on use-ip-firewall too.

Hello all, I have a LAN 192.168.1.1/24 behind the ether2 interface. I have firewall rules for the ether2 interface. I want to add wireless clients to the LAN. What is the best configuration? This is the one I thought to set up: 1. Create a bridge interface (with use-ip-firewall=yes) 2. Assign interf...

Thank you.

Hi all, I'm playing with a new RB915G-2HnD RouterBoard (RouterOS 6.23). I've set a dual wan configuration (on ether1 and wlan1) with a DHCP Server on ether5 with a basic firewall configuration. I've exported the configuration and I started to study the commend line. This is the part I do not underst...

Hi plisken,
I've tried all of this.

The problems are:

• I do not have any SSID from routerboard.
  I can't connect to 192.168.88.1 to any of the ethernet ports.

I've already reset the router.

Hello, I'm trying to connect to a 951G RouterBoard with no success. When I powered on the board for the first time I didn't see the wireless SSID as stated on the user guide. I've tried to reach the router via ethernet using the DHCP or a static 192.168.88.x IP but still with no result. I've reset t...