MikroTik

pietroscherer

Hello,

Any plans to add IPv6 support for l3hw?

pietroscherer

Happy holidays and thank you for all your work to bring RouterOS 7 for us.

pietroscherer

Are static routes supposed to be created in routing-table (to be advertised on BGP) during the migration process?
The address-list "bgp-networks" was succesfully created and mentioned on BGP connection, but the static route was missing.

pietroscherer

*) dhcpv6-server - fixed DUID generation with timestamp;

Thanks MT. I´ll test it.

pietroscherer

Hello,

No, just using MT routers.

The Speed Test is an easy test tool for measuring ping, jitter, TCP and UDP throughput from one MikroTik device, to another.

pietroscherer

Hey! Here it is a very useful manual abou VLANs on CRS devices:

https://help.mikrotik.com/docs/display/ ... s+switches

pietroscherer

And it seems you have more than one tile package. I suggest you to remove all these packages and use check for updates on System > Packages menu.

Furthermore, you can read this: https://wiki.mikrotik.com/wiki/Manual:U ... g_RouterOS

pietroscherer

You have a /29 wan prefix. For your setup, you need a LAN (routed) prefix to assign inside your network. However, you can assign another IP address of this block on the same wan port, and use NAT rules to forward the traffic to the client. https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Forwar...

pietroscherer

Set RoMON on all devices for example .

+1 for RoMON!

https://wiki.mikrotik.com/wiki/Manual:Tools/RoMON

Or simply:

/tool romon set enabled=yes secrets=qwe123

on both routers.

pietroscherer

It's not so simple

We used API to get rOS version

version.gif

pietroscherer

Try this:

/ip neighbor print where version ~"^((!6.44.5).)*$"

pietroscherer

This CRS is Mipsbe, as you can check on website:

https://mikrotik.com/product/CRS326-24Splus2QplusRM

You can check it under ”/system resources” on your device as well.

And yes, I think it is a little bit confusing if you follow only the downloads page.

pietroscherer

Answering the topic question: Yes, you can. And how it will affect the CPU, depends on how much traffic you will be running on it, how many firewall rules it will have, etc. Bonding feature just aggregate two or more network interfaces in a virtual interface and it’s controlled by CPU. https://wiki....

pietroscherer

Anyone tested on 6.45.x ?

pietroscherer

Currently, RouterOS doesn't have BGP info through SNMP. We are expecting anxiously for this feature.

By the way, if you are using Zabbix, you can find some ways to monitor you BGP sessions here:

https://share.zabbix.com

Thank you!

pietroscherer

It seems you have a static DNS entry in your router.

Check It on:

/ip dns static print

pietroscherer

Hi pietroscherer, Thank you for your suggestion. I already sent support.rif. I haven't tried 6.45.6 yet, because I always use long-term channel. Are there difference of IP cloud between 6.44.5 and 6.45.6 ? hEX PoE and hEX S are running in our environment. 743 of 773 hEX PoE(960PGS) work fine. 30 do...

pietroscherer

Hey guys, I tested now on my RB951Ui-2nD and it's works fine. I'm running 6.45.6. Actually, I even disabled/enabled the service and I could see stop/start working again. I recommend you send an e-mail to support@mikrotik.com, with a supout.rif. https://wiki.mikrotik.com/wiki/MikroTik_Support#Support...

pietroscherer

Did you try disabling/enabling IP Cloud after upgrade? /ip cloud set ddns-enabled=no /ip cloud set ddns-enabled=yes Force update can help you as well: /ip cloud force-update * Look this topic: https://forum.mikrotik.com/viewtopic.php?f=2&t=135603&p=743056&hilit=Cloud+ddns#p667827

pietroscherer

Which OS are you running Winbox?

pietroscherer

Try L2TP instead PPTP and see if there is any difference. L2TP should be faster, because it uses UDP.

pietroscherer

I've got an hAP AC2 running 6.456 beta23. My ether1-out has a gigabit connection (confirmed by its performance, also visible in WebFIG if I click into it). But, in terminal it shows with "speed=100Mbps". Does this look like a bug? /interface ethernet print detail Flags: X - disabled, R - ...

pietroscherer

+1 for draw.io

If I would run a lab in a live presentation, for example, I'd rather Eve-ng instead of GNS3.

pietroscherer

Hello, Seems that you don't have routes to reach the network. I recommend you to use a /30 format on VPN configuration, like: Local Address: 192.168.254.1 Remote Address: 192.168.254.2 On "Matriz", create a route pointing the subnet of "Filial" (for example, 192.168.200.0/24), th...

pietroscherer

Totally agree with those guys above, and if you need to compare two products:

https://mikrotik.com/products

And just to help you, if you want to hire a Consultant, MikroTik website helps you:

https://mikrotik.com/consultants/latinamerica/brazil

pietroscherer

The problem with "Click Reconnect, then Winbox window disappears and after exactly 30 seconds automatically disconnect from device with Connection lost window appearing again" still persist (first time spotted in v3.14 https://forum.mikrotik.com/viewtopic.php?f=21&t=134940&start=5...

pietroscherer

Nice project! I'll starting to test soon

pietroscherer

Hello, Which network did you use for PPTP? In the tutorial, they used "192.168.99.10-192.168.99.200". If you used the same, you must accept it in your firewall input chain. add action=accept chain=input comment="DNS udp PPTP" dst-port=53 protocol=udp src-address=192.168.99.0/24 T...

pietroscherer

any news about IOS version?

+1

pietroscherer

Running fine on a RB941-2nD (hAP-lite) as SOHO (L2TP + IPSec).

pietroscherer

I think that you're trying to disable all leds with one command, and if yes, you can use:

/system leds disable [find]

Thank you!

pietroscherer

Prior to 4.x Mikrotik were using Quagga, but I believe the current BGP implementation was developed in-house. I would not be surprised if Mikrotik are using parts of Quagga with some additional in-house developed modules, the zserv API makes that easy.... I was talking about this with a friend, a f...

pietroscherer

Hello, For Vlans: https://wiki.mikrotik.com/wiki/Manual:CRS_examples Basic Firewall Script: https://wiki.mikrotik.com/wiki/Basic_universal_firewall_script VDSL: https://wiki.mikrotik.com/wiki/How_to_Connect_your_Home_Network_to_xDSL_Line DHCP (Server I guess): https://wiki.mikrotik.com/wiki/Manual:I...

pietroscherer

Did you tried to add the bonding interface to bridge, instead of ethernet interface, right? In the wiki link, ether1 and ether2 are inside bonding, and bonding goes inside the bridge. Add the bonding interface to the bridge is not the problem. But until the ether interfaces are not be able to add, ...

pietroscherer

Did you tried to add the bonding interface to bridge, instead of ethernet interface, right?

In the wiki link, ether1 and ether2 are inside bonding, and bonding goes inside the bridge.

Sent from my iPhone using Tapatalk

pietroscherer

This is the best manual for vlans in RouterOS, in my opinion:

https://wiki.mikrotik.com/wiki/Manual:CRS_examples

pietroscherer

Some people wait for v7 only, and not for the features, or more specifically for new routing engine.
Sometimes I think that if new routing engine will be implemented in v6, somebody will stills waiting for v7 because of the version number.

pietroscherer

pietroscherer - Glad to hear that you resolved the problem. As far as I understand, you can not tell if problem was caused by this particular release. Is that correct? Strods, It's Hard to say if was a problem caused by this particular release. OSPFv3 neighbors are running oldest versions than this...

pietroscherer

pietroscherer - Does problem go away if you downgrade router to 6.40.5 version and appears once more if you upgrade back to 6.40.6? Hello Strods, I didn't do this test yet. One of the neighbors that wasn't working, becomes to work after update (6.23 -> 6.41.2). The other one still non working (no u...

pietroscherer

pietroscherer - Does problem go away if you downgrade router to 6.40.5 version and appears once more if you upgrade back to 6.40.6? Hello Strods, I didn't do this test yet. One of the neighbors that wasn't working, becomes to work after update (6.23 -> 6.41.2). The other one still non working (no u...

pietroscherer

Hello guys, Did you got problems with OSPFv3 on this version? After update a RB1100AHx2, some OSPFv3 neighbors doesn't reach the full state. Neighbors that are running is because I disabled / enable OSPFv3 interface. I've done the same with all neighbors, but some doesn't worked. https://i.imgur.com...

pietroscherer

Interesting. +1

pietroscherer

I have a video which should explain what you need. You need hairpin NAT bit your port forwards need to be done in a specific way;
https://youtu.be/_kw_bQyX-3U

Very nice!

pietroscherer

Ah ok, I'm sorry! Hairpin NAT is here if you want to read more about it: https://wiki.mikrotik.com/wiki/Hairpin_NAT To your example, you can use: /ip firewall nat add chain=srcnat src-address=198.168.0.0/24 dst-address=198.168.0.50 protocol=tcp dst-port=88 out-interface=LAN action=masquerade Change ...

pietroscherer

I think that you need Port Forwarding:

https://wiki.mikrotik.com/wiki/Manual:I ... nation_NAT

Being more specific:

/ip firewall nat add action=dst-nat chain=dstnat dst-address=247.250.211.96 dst-port=88 protocol=tcp to-addresses=198.168.0.50 to-ports=88

Hope I can help you!

pietroscherer

nstreme-plus ? What is it ?

+ 32984920

pietroscherer

Yes. Look for the run-after-reset parameter, of /system reset-configuration command:

https://wiki.mikrotik.com/wiki/Manual:C ... tion_Reset

Hope I can help you!

pietroscherer

It's a lot slower to open compared to 3.11. 3.11 is virtually instantaneous. 3.12 takes about 1.5 seconds. Connecting to a router with 3.11 takes about 0.25 seconds. With 3.12 it takes about 0.75 seconds. Edit: 5 minutes later, and having done nothing, it is now working properly, so I expect it was...

pietroscherer

Hello,

Static link aggregation on CRS112-8P-4S-IN refers to non switch mode, correct?

Thank you.

pietroscherer

Hello,

The network interface of Virtualbox is in bridge mode?

I use Winbox on my macOS using CrossOver https://www.codeweavers.com/products/crossover-mac, but you can use Wine to run Winbox too.

pietroscherer

No, they didn't gained access (yet, rsrs). It's a PPTP try or a scan on port 1723, but read Normis' post, where he tells about basic security: https://forum.mikrotik.com/viewtopic.php?f=21&t=129548 And here is link to Wiki, with a lot of examples to secure your router adding firewall rules and d...

pietroscherer

I think you can use a NAT rule: /ip firewall nat add chain=srcnat src-address=192.168.10.10 action=log log-prefix=tablet- /ip firewall nat add chain=srcnat src-address=192.168.10.11 action=log log-prefix=chromecast- Remember to change the src-address to your devices IPs. This rules needs to stay abo...

pietroscherer

The syslog feature was removed from dude. I would like to have it back with at least all previous features. Thank you for this information, Jarda! We're expecting for this feature back again. Not important messages was removed using "setting > polling" instead of regex. Best regards,

pietroscherer

Unable to upgrade using "check for updates" menu, on my hAP-lite. I received a message of no enough space (7,2 MB was necessary and 7,2 was free).
Droping the main package to router worked without problems.

The hAP-lite seems to works fine for now.

pietroscherer

Hello all, It's possible to change the color of log messages? In Dude 3.6 was possible to see in green, messages for states OK, and in red, messages for states down. 2017-12-21 at 17.41.png And about Regex, I need to exclude of log messages, a line that contains the word "Unstable", becaus...

pietroscherer

/ip dns static add address=192.168.88.1 name=router.lan It's just an entry of default configuration. I think you can try to use less Tx Power in both sides, because 32 dBm is too much for 100 meters. After this, try to run a "Freq. Usage" on AP side, to choose a channel with less interfer...

pietroscherer

How are you doing the Speedtest between the Metals? What is the distance between them? And the Tx Power of each?
Did you performed a "Frequency Usage" to choose a channel without or with less interference?

pietroscherer

*) firewall - added "tls-host" firewall matcher (CLI only);
Sweet. No more Layer 7 for HTTPS blocking
How it works? Which packet matches? Does it support wildcards?

+1

pietroscherer

Hello,

I was learning more about CAPsMAN and found this case study made by Uldis:

https://mum.mikrotik.com/presentations/BR14/Uldis.pdf

Hope this can help you!

pietroscherer

Try the export (.rsc) file if you have it.
I generally use the .backup file just for the same hardware, and running the same version that backup was generate.

pietroscherer

I was always under the impression you can only forward the packets through NAT to 1 host. This seems to be backed up by it not allowing you to put in a range or subnet. Can't you give your individual devices different IP's then assign varying port numbers so you can access all of them? I thought th...

pietroscherer

And it's not just one. We can see a many Routerboards in the Data Center.
Nice news!

pietroscherer

Could you please be more specific? What do you need to do?

pietroscherer

Yes. 8) CCR support conditions are met Does the position of the rule important ? (for me dummy=0, fasttrack=1) /ip firewall filter> print Flags: X - disabled, I - invalid, D - dynamic 0 D ;;; special dummy rule to show fasttrack counters chain=forward action=passthrough 1 chain=forward action=fastt...

pietroscherer

Did you tried UPnP?

https://wiki.mikrotik.com/wiki/Manual:IP/UPnP

Also, you can try netmap:

https://wiki.mikrotik.com/wiki/Manual:I ... :1_mapping

pietroscherer

For my ubuntu 17 it works, no idea about 16.04

Well then it should work on 16.04. I'll try it
Do share if it works for you.

Yup it worked.

Worked for me too, using Ubuntu 16.04.3. I installed the required Mysql version (5.6).

pietroscherer

Did you tried https://mikrotik.com/download/archive, and download the "all-packages-[your-hardware-arch]"?
You'll find the ntp package, that contais server and client.

Regards,

pietroscherer

Read Wireless Networking in the Developing World.

I didn't know. Very good!

pietroscherer

Strange.. I have a hAP lite for more than a year, and works well and "quietly".
If you make a support.rif, this noise occur? If not, maybe it's become from the wlan.

pietroscherer

Sorry for the delay, last week was hectic. I found some time today and tried the configuration again. By default Mikrotik chooses Etherenet2 as master when I was working with wizards so I tried Ethernet2 instead of Ethernet1 as the master in config process and wallah, it's working. I'm not sure wha...

pietroscherer

It's possible Crossover isn't compiled with IPv6 support.

Thinking on this way too. However, I mailed CrossOver Team asking an info.

Thanks!

pietroscherer

Thanks for your feedback. I'll try another solution.

pietroscherer

Hello,

Anybody using CrossOver to run Winbox on macOS Sierra? (If not, how are you use Winbox?)

I can't see IPv6 address of my router in Winbox neighbor table. IPv4 is ok.

Thanks a lot.

pietroscherer

Hi, Can someone show me or give an example of how to make a reflector router using mk x86? Or would you rather have some video material on that subject?

Hello,

Wiki has this article:

https://wiki.mikrotik.com/wiki/Manual:B ... _Reflector

Hope I can help you!

pietroscherer

Start with blank config. Switch all ethernet ports (set master-port=ether1 for all except ether1). Create a bridge and add ether1 and wlan1 as its ports. Configure wlan1 as you want (set SSID, password, ...). And this is all what's needed for transparent AP for employees. Add an IP address for mana...

pietroscherer

Use firewall rules to your guest network.

pietroscherer

http://openspeedtest.com/speed-testing- ... ebsite.php
I've deployed this years ago. You can now use ARM board to do this in a very low cost.

Interesting!

pietroscherer

How about a small web server? Only to host some warning/blocking/sponsor pages.

pietroscherer

Very nice!

Any plans to add an export button with the link info (like a report)?
What about add the information of coordinates of each side (azimuth)?

Thanks!

pietroscherer

+1

pietroscherer

Is fast-path enabled? It could leak MAC addresses.

Could you tell more about this?

Thanks!

pietroscherer

Another Tip: Try the Consultants page, in MikroTik web site:

https://mikrotik.com/consultants

pietroscherer

Try using band N instead of band A.

pietroscherer

Hello, Port forwarding docs and examples can be found here: https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Port_forwarding_to_internal_FTP_server About access your MikroTik Router from Internet, it's possible if you have a public IP address. If not, you can ask your ISP for a port forwarding ...

pietroscherer

Thanks @mrz

pietroscherer

Curious too. Anybody know?

https://wiki.mikrotik.com/wiki/Manual:IP/Settings

In Wiki, we have no description

pietroscherer

Crossover can be an anternative too:

https://www.codeweavers.com/products/crossover-linux

pietroscherer

Hello @nichky, Does it mean something around 26xx. Im right? Yes, but remember that you're using superchannel. In this case, some devices will maybe not work with some channels because their compatibility. And also on what is the command to specify frequency on range? ranges [2412; 2577] i was tryin...

pietroscherer

My curiosity is why can't you order them? I think what pietroscherer is trying to say, is in the RAW tab, on the very left if you notice that your numbers are not in order (1...2...3...4... etc) then you will not be able to move the rules around since they are not in order. If you click on the &quo...

pietroscherer

Make sure that your rules are already ordered. If not, you're no able to move the rules.

Click on "#" to ordering your rules.

raw.PNG

pietroscherer

Try using the wireless tools, to find good channel to use:

https://wiki.mikrotik.com/wiki/Manual:Spectral_scan

https://wiki.mikrotik.com/wiki/Manual:I ... ss#Snooper

Sent from my iPhone using Tapatalk

pietroscherer

What OS are you using? I had the same experience with Windows7. On Linux it's ok for me.

pietroscherer

+1 for iPerf compatibility

pietroscherer

Try tunneling the traffic to Radius Server over a L2TP + IPSec.

pietroscherer

Dude server is not availble for RB2011.

https://wiki.mikrotik.com/wiki/Manual:T ... er_package

pietroscherer

Specify limits for a good performance is not possible once that you have many other things running in a router. You can have firewall rules using part o CPU, and then your limit of Hotspot users can be lowest. Otherwise, how much bandwidth each Hotspot will have? The performance will be different in...

pietroscherer

Public IP address is mandatory for this. Alternatively, you can solicit to your ISP, a port forwarding from a public IP of ISP, to yout private IP.

pietroscherer

It seems that Fasttrack is enabled in your router.
Could you paste the following output?

/ip firewall filter export

pietroscherer

Please help me how to post in forum site ?

Some tips:

viewtopic.php?f=3&t=45259

pietroscherer

About the VPN, the following link will help you to choose what service do you need:

https://wiki.mikrotik.com/wiki/Category:VPN

.

pietroscherer

Here you can find the presentation slides and the video.

https://mum.mikrotik.com/2017/EU/agenda/en

pietroscherer

I think that you should try Netinstall in this case.

https://wiki.mikrotik.com/wiki/Manual:Netinstall

pietroscherer

Tell us what did you try for upgrading RouterOS.

Try the Wiki guide:

https://wiki.mikrotik.com/wiki/Manual:U ... g_RouterOS

pietroscherer

Dear all,

Creating this topic to share this tool:

https://phpipam.net/

This IPAM supports IPv4 and IPv6, separate by sections, and many other useful things.

I hope that helps you organize your IP address documentations.

Thank You.

pietroscherer

Same result here, using hAP lite. Tested on 6.38.5 and 6.39rc80. E-mail to support@mikrotik.com, please. Hello Tomasi, Correcting the post.. to get the values of Tx and Rx Rates, you need to lookup in Registration Table. /interface wireless registration-table print oid And use the Tx and/or Rx Rate...

pietroscherer

I prefer a decentralized environment with multiple PPPoE servers. Maintance windows and some possible failure will affect a specific region, and not all clients.

pietroscherer

Hey, thanks for the warm welcome and a wise piece of advice. I ll definitely try to be a useful member here for everyone.

This can help you too:

viewtopic.php?f=3&t=45259

pietroscherer

Does anyone having a problem with "find tool" (Ctrl + F)?
At 6.38.5 is not possible to search using IP Address (nothing is found), only by device names.
In partial change logs, nothing about this was said yet.

pietroscherer

You can use skins configuration:

viewtopic.php?t=52184
https://wiki.mikrotik.com/wiki/Manual:Webfig#Skins

pietroscherer

Nice to see an upgrade to RB1100. I thought it was dead.
Looking forward to seeing the CRS317, too

pietroscherer

My suggestion:

Try using a SNMP Tool (example: PRTG SNMP), running locally (Windows machine directly connected into the router). If SNMP responses are ok, RouterOS is ok. Then, you can run the same tool into your remote PRTG Server.

pietroscherer

Your router seems to receiving SNMP packets..
Some applications can use SNMP over TCP. Accept too the TCP rule for ports 161 and 162.

* Note that don't specify the src-address os these rules can be dangerous, once that SNMP can be used for DDoS attack amplification.

pietroscherer

Try Traffic Generator:

https://wiki.mikrotik.com/wiki/Manual:T ... _Generator

Bandwidth Test uses only one CPU of the router, according Mikrotik Team.

pietroscherer

SNMP is answered locally? Can you see the accept rules in input chain, counting packtes?

pietroscherer

Make sure that your accept rules for SNMP protocol is above the drop rule of input chain (if exists).
Make sure too, if your ISP allow SNMP through it.

pietroscherer

Very useful

pietroscherer

Ok, I hope that helps you. Please, consider ZeroByte's post too. He told about have about another outgoing interface.

pietroscherer

Try to hide the option "fragment=no" in extra tab of dst-address rule.
You can try disabling the mangle rule of ether3 too, for test:

add action=mark-routing chain=prerouting in-interface=ether3 new-routing-mark=G_NET

pietroscherer

Paste your router config here, please.

/export hide-sensitive

pietroscherer

Try using rules in icmp chain of basic firewall script.

https://wiki.mikrotik.com/wiki/Basic_un ... all_script

Adjust the jump rule to input or forward, according of the issue.

Sent from my iPhone using Tapatalk

pietroscherer

hi, P.S. Also your 2nd rule add chain=input connection-state=established,related was it a typo when you post your config here, i mean is missing "action" parameter ? I would modify it to be add action=accept chain=input connection-state=established,related ( double click the rule, into Ac...

pietroscherer

Can you paste the configuration of your router here, with the rules that you used?

/export hide-sensitive

pietroscherer

Following the Wiki, the initial configuration doesn't mention any interface, and "fasttrack" all lan traffic:

https://wiki.mikrotik.com/index.php?tit ... figuration

But, It can depends of each situation.

pietroscherer

Normis,

Thank you for reply!

No. We clean the system as such, we do not speculate if a certain file came from this malware or from elsewhere.

This procedure will become a routine in every new release, to warranty that the system will be always free of any suspicious file?

Thank you again!

pietroscherer

Get the MAC of specifc IP address, and use the following command in a terminal:

/interface bridge host print where mac-address="XX:XX:XX:XX:XX:XX"

And replace the XX with the MAC address.

pietroscherer

I hope this can help:

https://ipinfo.io/AS2906#blocks

pietroscherer

In this case, port forward can be used:

https://wiki.mikrotik.com/wiki/Manual:I ... ernal_host

pietroscherer

Somebody with performance problems on 6.39RC38? Neither updates it's possible to do

I think that netinstall is needed.

https://drive.google.com/file/d/0B1G8TB ... sp=sharing

* I'm using hap lite and system resources are ok. CPU at 2% and RAM at 50%.

pietroscherer

In this case, downgrade RouterOS version to the last stable, and e-mail "support@mikrotik.com", reporting this problems in RC version.

pietroscherer

Did you try reboot AP side? Unfortunately is that you can try on AP side, once that you only updated the system.

* Make sure that the station side is running properly, after update.

pietroscherer

I think that my question was a little bit obvious, but.. Considering that we're talking about PPPoE sessions, depends of some points: - How much traffic will be forwarded through the router? - How many firewall rules will be on it. - Connection tracking is enabled or not. hEX RB750Gr3 has 2 CPU, 880...

pietroscherer

Are you talking about customers using PPPoE, or users that can manage the router?

pietroscherer

Partially such info you can get from Webproxy logs, but you need transparent proxy and remote syslog server. So what syslog server would you recommend and can you give me the steps on how to configure it? http://forum.mikrotik.com/viewtopic.php?f=2&t=117509&p=580750&hilit=splunk#p580750

pietroscherer

Hi, I sthere a way to export administrator passwords in cleartext view ? If i use the export command no config for admin user data is exported right ? If i use the backup method to export my config can i view the user passwords somehow ? Thanks Hello, I sthere a way to export administrator password...

pietroscherer

Nice!

https://www.graylog.org/ is an alternative, if you need more than 500 MB of logs per day.

pietroscherer

Cloud feature may be useful in this case.

http://wiki.mikrotik.com/wiki/Manual:IP/Cloud

pietroscherer

It would be nice to have iCloud integration, to have the router list in more than on iDevice

pietroscherer

Hello guys, We have a scenario that is hard to implement this fail-over via OSPF because of many reasons, so, I'll ask a question about RSTP and before you start saying do via OSPF, I need to do via layer 2 (RSTP) [ correct me if I am wrong ] We have this scenario and we want to make possible to ...

pietroscherer

Winbox 3.8, RB750GL 6.39rc12 - can not change/set firewall NAT rule's dst-port, src-port by winbox. Fields are grayed out/disabled whatever I do. On existing NAT rules and new ones as well. Already reported to support@mikrotik.com did you specified a protocol?? I upgraded Winbox on 3 Win10 Home (up...

pietroscherer

*) routerboot - show log message if router CPU/RAM is overclocked;

It's possible to have a info message, when the router's CPU/RAM is out of factory/default value?

pietroscherer

Current requirements for Userman:

http://wiki.mikrotik.com/wiki/User_Mana ... quirements

pietroscherer

- new CRS317 with 16 x SFP+ ports, coming Q2/17 This completes CRS family :D Except for the 48 port versions and the GSP (PoE) versions providing power on more than 4 ports. I am tired of buying UBNT switches where Mikrotik is MIA. PoE is very important too. I think that is next feature for Mikroti...

pietroscherer

- new CRS317 with 16 x SFP+ ports, coming Q2/17

This completes CRS family

pietroscherer

Please post feedback on the new features added in the latest RouterOS v6 release candidate branch. Simply upgrade RouterOS to the RC branch. - Dude configuration interface in Winbox (Requires latest Winbox version 3.7) - Dude configuration interface in Webfig - Maps are viewable in web mode. - Now ...

pietroscherer

Hello, My router connects to internet and a Branch office LAN, I have static routes for the Branch office, but because of the NAT rule, it does not work, if i disable the NAT rule it works with branch office connectivity but internet does not, how can i bypass so connection between 172.0.1.0/24 and...

pietroscherer

Try logging through mac address, using winbox. If problem persists, check about some issues here http://forum.mikrotik.com/viewtopic.php?t=36156.

If you're using SO Windows, try run winbox as Administrator.
If you have Virtual Box, try disable the virtual interfaces.

pietroscherer

I received in my whatsapp

rOS7.png

pietroscherer

hey! any news about v7 release?
still no. you'll notice that. forum will be drunk for about a week...

In rOS v7 release, a DDoS attack of "Its time for the party!" will exist.

pietroscherer

Hello, You're using NAT Masquerade without exceptions: /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 Try adding in this rule an specific src-address or a src-address-list, to masquerade more specifically: /ip firewall nat add action=masquerade src-address=10.x.x.0/24 chain...

pietroscherer

running webfig v6.34.3 This is our first MikroTik router. we have a server sitting at 192.168.1.50 that has l2tp/ipsec setup on it to accept VPN connections. We have configured the NAT tab of firewall like this.... /ip firewall nat add action=dst-nat chain=dstnat in-interface=ether1 protocol=ipsec-...

pietroscherer

Thank you guys! According to the wiki example. I tried to follow step 2: /queue type add name="PCQ_download" kind=pcq pcq-rate=64000 pcq-classifier=dst-address /queue type add name="PCQ_upload" kind=pcq pcq-rate=32000 pcq-classifier=src-address (Is working) But adding the simple...

pietroscherer

Hi, I want to limit every users bandwidth (DOWN 3Mbit/UP 256KB). How can I do this? Every user gets an IP from DHCP server. I tried to do this with PCQ, but I only achieved to limit the total bandwidth for an IP range. This is not what I am looking for :) What do I need? Thank you! Hello, MikroTik ...

pietroscherer

the dude version 6.34 any body can confirm that the dude which installed on CHR only able to use 1 CPU although we've already assigned 4 CPUs to the VM ? [admin@deDudeVM] > system resource cpu print # CPU LOAD IRQ DISK 0 cpu0 1% 1% 0% 1 cpu1 0% 0% 0% 2 cpu2 100% 1% 0% 3 cpu3 0% 0% 0% thank you. Hel...

pietroscherer

Excelent!

pietroscherer

I'm playing with find and where but I'm missing something. #works /ip route print where dst-address="0.0.0.0/0" # don't work /ip route find where dst-address="0.0.0.0/0" /ip route find dst-address="0.0.0.0/0" Aim is to search for comments by using wildcards. Do I miss ...

pietroscherer

Hello, Testing Loop Protect feature, in CHR: /interface ethernet print detail Flags: X - disabled, R - running, S - slave 0 R name="ether1" default-name="ether1" mtu=1500 mac-address=00:AC:04:0E:53:00 orig-mac-address=00:AC:04:0E:53:00 mac-address=00:AC:04:0E:53:00 arp=enabled a...

pietroscherer

Hello, Testing Loop Protect feature, in CHR: /interface ethernet print detail Flags: X - disabled, R - running, S - slave 0 R name="ether1" default-name="ether1" mtu=1500 mac-address=00:AC:04:0E:53:00 orig-mac-address=00:AC:04:0E:53:00 mac-address=00:AC:04:0E:53:00 arp=enabled ar...

pietroscherer

Hi to all, I would like to know if it's possible to configure the Mikrotik as switch on the wan side. We have ONE public ip address and the idea is to put the MT on the WAN side and configure it as a switch and use some of the capabilities of the switch. We want to use RB2011iL-IN like this: PRIVAT...

pietroscherer

Hi guys, I'm new in MicroTik RouterOS world. My question is about the meaning of all options in "Actions" menù in NAT section. I need to route my LAN (network 192.168.88.0/24) by ISP' public static IP (example . 1.1.1.1.), that I assigned to sfp interface. So what option I must use in NAT...

pietroscherer

Version 6.35rc35 has been released. Changes since previous version: *) chr - fixed kernel crash when virtual ethernet was not connected to anything in Hyper-V; *) chr - implemented kernel crash saving to autosupout.rif (will utilize additional 24Mb of RAM); *) romon - fix romon discovery after of r...

pietroscherer

Hi guys we need new software for rb sxt lite 5 to connect and work well in wds station with new ubnt xw firmware cuz old ubnt XM firmware was working well with sxt lite 5 but new XW firmware doesnt so plz help us cuz almost of 5.5 Ghz Access points in our region stores sell ubnt products and SXT 5....

pietroscherer

I have to run RSTP on all bridges (point-to-point) or at all mikrotikach (even end-customers providing internet)? how to set priorities? or can someone show an example? RSTP will avoid broadcast storms only where you have it enabled. To avoid loops in end-customers, you'll need to enable there too....

pietroscherer

I have to run RSTP on all bridges (point-to-point) or at all mikrotikach (even end-customers providing internet)? how to set priorities? or can someone show an example? RSTP will avoid broadcast storms only where you have it enabled. To avoid loops in end-customers, you'll need to enable there too....

pietroscherer

Hi, I'm having a issue with package IPv6. When I enable it in CHR 6.32 using Qemu, the router crashes. Somebody else with the same problem? Thanks. I'm getting this issue as well. Windows Server 2008 R2 CHR version 6.34rc19 GNS3 ver 1.3.11 Qemu ver 2.4.0 (included version) If I run the image in Qem...

pietroscherer

Hi, I'm having a issue with package IPv6. When I enable it in CHR 6.32 using Qemu, the router crashes. Somebody else with the same problem? Thanks. I'm getting this issue as well. Windows Server 2008 R2 CHR version 6.34rc19 GNS3 ver 1.3.11 Qemu ver 2.4.0 (included version) If I run the image in Qem...

pietroscherer

Hi,

I'm having a issue with package IPv6. When I enable it in CHR 6.32 using Qemu, the router crashes. Somebody else with the same problem?

Thanks.

pietroscherer

To enable redundancy for Layer 2, you have to activate rstp on all bridges, and choosing a root bridge, lowering the priority of the chosen router. Usually chooses the router with more redundant outputs. If you can not choose the root bridge, the router with the lowest MAC, will be chosen. Enviado d...

pietroscherer

Very good!

Enviado do meu iPhone usando Tapatalk

pietroscherer

"switch" is about hardware functionality. This menu should be removed on CHR, I think It appears that the person is asking for us to add such "virtual switch", it is not there currently, because you are right, Switch is a hardware feature Normis and Pavel, you're right! Normis, ...

pietroscherer

Hello,

Is there a way to use switching functionality CHR ?

switch.JPG

Thanks!

pietroscherer

Hello, When I run the CHR-vm, I get the following error: Demo License expired! Please reinstall... And the CHR-vm goes down. Any fix? Thanks you have to make sure that your virtual machine management system exposes virtualization bit to the guest os. Hello Janisk, I updated my Vbox version to 5.2 a...

pietroscherer

Hello,

When I run the CHR-vm, I get the following error:

Demo License expired!
Please reinstall...

And the CHR-vm goes down. Any fix?

Thanks

pietroscherer

Hello everybody, Do you know how much is the overhead of EoIP? Mikrotik Wiki says: Note: EoIP tunnel adds at least 42 byte overhead (8byte GRE + 14 byte Ethernet + 20 byte IP) In MTCRE Training, the trainer said: The EoIP overhead is about 256 bytes, so, you will have problems to get more of 30 Mbps...

Search found 174 matches