MikroTik

Syleri

Anyone?

Syleri

Hello, I have notice in several hotspots (RouterOS 6.42.6), that in iOS, both on iPhone and iPad, the mac-cookie is not working and the user must enter again the username and password. I have found the problem is the Safari. If they the users install the Chrome it is working properly the mac-cookie....

Syleri

At the log it doesn't show any error message, just the interfaces is Up and the router have reboot. That's it! No, I haven't try the netinstall. I only have try to update from the System > Packages > Package List --> Click "Check for updates" and then it downloading the new version and the...

Syleri

Hello I have a RB1100AHx2 at the version 6.32.2 and I cannot update to the latest version. Please tell me what information you need to provide in order to help me

Thanks

Syleri

Hello, I have a 951Ui-2HnD which is my vpn server, where are connecting 3 remote sites with vpn's(pptp and l2tp). I would like to block the Internet access(but allow specific sites) on the local network of 951Ui-2HnD, with out affecting the vpn's connections. I have think the following rules: /ip fi...

Syleri

Hello, I have an RB2011il with RouterOS 6.31. I try to upgrade to the latest version, but it doesn't do nothing, simply a reboot! At the log also doesn't show any error! Can you help me? Any other information you need, please tell me!

Thanks for your attention and time.

Syleri

You need to make your NAT rules a little more specific in the client router. If the VPN creates a tunnel interface when it connects (I believe L2TP does this) then it's pretty easy. Make sure the srcnat chain rule with action=masquerade is configured as follows: chain=srcnat action=masquerade out-i...

Syleri

Here is an image from my client L2TP :

Instead of Src. Address: 192.168.1.254, I would like to have the 192.168.1.24, which is the the Src. Address before the NAT. That is my problem.

Thanks.

Syleri

I have also have the the following rules at the firewall on both sides: /ip firewall filter add action=accept chain=input comment="l2tp port 500" dst-port=500 \ log-prefix="" protocol=udp add action=accept chain=input comment="l2tp port 4500 nat traversal" \ dst-port=45...

Syleri

Hello, I have create an VPN Tunnel L2TP with IPSec between RB2011iL(L2TP Server) and hEX PoE lite( L2TP Client). My problem is at the client side (hEX PoE lite) I have NAT, but I don't want it. At the Server side(RB2011iL) I don't have NAT. Server side have the 192.168.1.0/24 network and the client ...

Syleri

Problem solved. I have to add the SNTP Client and now it works.

Syleri

But when the time is up! It is automatically deactivated.

Syleri

Hello, I have the following rule to block a mac address, based on time, but when the time is come it isn't automatically activated. I have to disable the rule and enable again to start working. My rule is: chain=forward action=drop src-mac-address=00:00:00:00:00:00 time=10h40m-10h45m,sun,mon,tue,wed...

Syleri

See the dude.

Thanks for your answer! I will take a look.

Syleri

Hello, I have multiple routerboard SXT in facility, it is possible to manage all the from a central point ? What a mean is, to have a central point to have the status of each SXT wireless. Mikrotik have something like a controller ?

Sorry for my English!
Thanks for your attention and time.

Syleri

Hello, I am trying to update the RB1100AHx2 from 6.32.2 to 6.35.1, the check for update, it is downloading all the packages, and after the reboot. Nothing happened! Also at the log doesn't show anything about the installation.
Please guide me, how to solve this!

Thanks

Syleri

What is still confusing me, is how I can forward from Mikrotik to the ISP router(which is not bridged) and then to the Internet, the EoIP or L2TP or PTPP the Protocol.

network_design3.png

I don't know if I make myself clear.

Syleri

There are several ways to do that.

Ipsec between 2 mikrotiks is going to be the easiest to search for.

As long as you don't need broadcast traffic between the sites... the tutorials are pretty spot on.

Gotsprings if I need to broadcast traffic between the sites ? What I must use?

Syleri

There are several ways to do that.

Ipsec between 2 mikrotiks is going to be the easiest to search for.

As long as you don't need broadcast traffic between the sites... the tutorials are pretty spot on.

Thanks for your answer! Can you point out any tutorial!

Syleri

Updated Network diagram:

network_design2.png

Syleri

Hello, I have a Central office and multiple remote office like the following image:

network_design.png

I would like to connect the remote Lan's with the Central Office lan.
Is that possible through Mikrotik and how? I want to point me the direction.

Thanks for your attention and time!

Syleri

BartoszP, I review my nat's again, I try your configuration and it's works!!! Thanks again!

Syleri

Thanks for your detailed explanation! I try your example still it doesn't working!

Syleri

Hi, please post the output of the /export command. Thank you. Ape Here is my configuration: # nov/25/2015 14:12:55 by RouterOS 6.31 # /interface pppoe-client add add-default-route=yes interface=ether11 max-mru=1480 max-mtu=1480 mrru=\ 1600 name=username password=password user=username add add-defau...

Syleri

Hi, this is an example port forwarding for port 80: /ip firewall nat add action=dst-nat chain=dstnat disabled=no in-interface=<your wan interface> dst-port=80 protocol=tcp to-addresses=<IP of host> to-ports=80 /ip firewall filter add action=accept chain=forward connection-state=new \ disabled=no ds...

Syleri

Hi,

the port forwarding is just one thing to do.
Propably you must also add a firewall rule in the forward chain to allow the incoming traffic.

Ape

Can you give me an example, please?

Syleri

Not that you cant but not sure why you are trying to nat 5900, 3389, etc to dst port of 22. Is your dst host actually listening on 22? Can you test internal and see if there is any response on 22? The port 22 is just an example! 3389 I have test it internally and is working fine! The ISP is not blo...

Syleri

Have you tried a different incoming port? 5900 is the standard VNC port and you ISP may be blocking?

I have tried 3389 and 65000. But the problem remains!

Syleri

Looks like from your diagram the Mikrotik is handling the PPPoE, if so change your in-interface to the PPPoE interface not the physical interface.

I have tested! Same result!!

Syleri

Hello, I am looking to make port forwarding 5900, from bridged router(PPPoE client), connected at the ether12, to my server at the ether10, port 22. Take I look at the following picture. portForward.png And use the following line: /ip firewall nat add chain=dstnat in-interface=ether12 protocol=tcp d...

Syleri

I'm not familiar with your free radius. I'm just gonna ask Can your users login and logout without problem and when they connect are they shown in your active section of Hotspot in your winbox? Yes! I find another way to disconnect users from mikrotik, through the Java API( https://github.com/Gideo...

Syleri

Hello guys, I am new to the Mikrotik world, I would post my problem, because I cannot disconnect a user from my command line with radclient. I am using this Mikrotik rb2011uias-2hnd-in ( RouterOS 6.18) and the freeradius installed on the debian. Here is my command: cat packet.txt | radclient -x 192....

Syleri

Hello guys, I am new to using the mikrotiks, I have freeradius and a Mikrotik (Router OS 6.18) rb2011uias-2hnd-in, from the console of my debian use the following command: cat packet.txt | radclient -x 192.168.40.103:3799 disconnect 'secret' And I am getting this: Sending Disconnect-Request Id 30 fr...

Search found 33 matches

Re: Hotspot Problem with iOS

Hotspot Problem with iOS

Re: RB1100AHx2 unable to update!

RB1100AHx2 unable to update!

Block internet access expect the vpn connections

RB2011il cannot upgrade!

Re: VPN nat problem

Re: VPN nat problem

Re: VPN nat problem

VPN nat problem

Re: Firewall filter based on time

Re: Firewall filter based on time

Firewall filter based on time

Re: Manage multiple SXT

Manage multiple SXT

RB1100AHx2 can't update!

Re: Connect multiple LAN's.

Re: Connect multiple LAN's.

Re: Connect multiple LAN's.

Re: Connect multiple LAN's.

Connect multiple LAN's.

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Re: Port forwarding problem

Port forwarding problem

Re: Disconnect user with radclient

Disconnect user with radclient

Cannot disconnect user