MikroTik

gradash

Sorry I missed something, why does a bridge need a 100 IP DHCP range? Because that's exactly where your suppose to apply the DHCP server if you add a bridge to a physical interface port( because the physical becomes a slave interface), furthermore if you add a vlan to a bridge or physical interface...

gradash

Why this can happen ? It pings, it works with main router, it gives internet, but i can connect to it only directrly with lan cable. Config is almost default, just maked bridge with only one erher1 port, added ip address (10.12.12.1), and turned on DHCP server with pool 10.12.12.100-10.12.12.200 for...

gradash

hi, i have fresh 6.34 mikrotik configured internet, l2tp, ipsec... all working, except one. how to ping all /23 network ? for ex. 192.168.4/23 if i got ip from pool 192.168.4.* - i can ping only 192.168.4.* if i got ip from pool 192.168.5.* - i can ping only 192.168.5.* but i need to ping all networ...

gradash

Hi, i have configured web proxy by some manuals, and it working... i can block some sites, and allow some sites, BUT i cant allow any local address, i have some sites like http://ens or http://register e.t.c i need to allow only this sites i created next access rules src 0.0.0.0/0 dst.host "ens...

gradash

Hi, i have configured L2TP server, users, profiles - all ok. But connected user have access to all LAN, how to allow just few IP addresses in LAN ?

gradash

I often see in logs somebody from USA, China, Korea etc. trying to connect to my vpn, all ipsec negotiations failed, but... how to secure this more ?
for now i drop any ipsec-esp and ipsec-ah connections, except Vpn Allow list..

gradash

hi, most likely your remote users have firewall between them and their device (PC or otherwise), check their firewall and see if there is anything like "allow IPSEC passthrough" and also allow all IPSEC related ports like UDP 500, 4500 as well as L2TP port 1701 UDP to be forwarded via the...

gradash

got it... seems like someone from china trying to connect to my vpn... as i see...

but what about time ? between first packet and errors - 2 hours..

Capture.JPG

gradash

if i enable my vpn tunnels, all working, and L2TP users working also... if need

gradash

Help, what is this ? I have configured some VPN tunnels, but they are disabled until need... and i have L2TP with IPsec configured, but no one trying to connect, and no one connected...

error spam...

Capture (1).PNG

Capture.PNG

gradash

hehe...something new ! ^)

Capture.PNG

gradash

wason 6.27....now on 6.33rc11....same... ok i got working L2TP, but this error spam in log, wtf ? no vpn connections, just trivial internet usage...

Capture.PNG

gradash

Hi, i have configured PPTP client interface, it connects, and appears reachable route. Now i need to forward one IP address from local net through this route, to another country, how to do that ? I have idea only about mangle...

gradash

Help, i dont know what to do, if i connect from intranet to l2tp - all ok, even if i connect from phone's 3g - all ok. But that's all, all other external users got that error, i don't understand, my 3g internet also external, but it works ! how ?... Capture.JPG /interface bridge add arp=proxy-arp na...

gradash

dadoremix, i have this errors spam in log on 6.27

gradash

i have 6.27 now.... will try to upgrade to 6.33.3..

gradash

Hi, some two weeks ago mikrotik started spamming with that errors... but all working as usual... what is this ?

gradash

sry, that error

phase1 negotiation failed due to time up Y.Y.Y.Y[500]<->X.X.X.X[500]

gradash

Hi, i have configured and working mikrotik, with L2TP server started. And one problem... can't connect to it from home (no any ip addressess blocked on mikrotik) it write "phase 1 negotiation failed due to timeout" if i connectiong from phone (3g internet) - all ok other computers in other...

gradash

Any increasing counts on your drop firewall rules while you try to connect? and I don't see any accept rules? Is that export correct?

i tryed many firewall configs... now i have first 3 rules accept all input,output,forward

gradash

Also I suggest you don't use PPTP and instead follow this guide:
https://www.nasa-security.net/mikrotik/ ... ith-ipsec/

hmm.... L2TP working.... but ok, good
now just NEED to know what about PPTP

gradash

nothing in log... just appears\disappears connection to pptp port in Torch (previous screenshot)

there is log settings and log part when connecting

log.PNG

log2.PNG

gradash

can it be because this turned off ?

Capture.PNG

gradash

tryed disable all ISP2 settings (address, interface, route) - and again nothing

gradash

same problem, VPN work from LAN side and not working from net side.... i have two ISP's, configured as failover (with distance 1,2 and ping check) Capture.PNG maybe trouble in routes ? because firewall setting is basic (trying with and without many rules), NAT settings also basic, just masquerading ...

gradash

very dificult... because i have 24\7 office... but must be reason, why it working from LAN and not working from internet, maybe some specific PPTP routes or mangle rules need for 2 ISP's...

gradash

TCP port 1723 and IP protocol GRE - allowed.

gradash

same trouble, what wrong ?, my firewall /ip firewall filter add chain=input comment="Allow gre" protocol=gre add chain=output protocol=gre add chain=input comment="Allow port 1723" dst-port=1723 protocol=tcp add chain=output dst-port=1723 protocol=tcp add chain=forward comment=&q...

gradash

Hi, i have CCR and need to configure PPTP access from remote pc. All configured as written in many manuals but connection working only from LAN Maybe i have missed some firewall rule or NAT ? what i need to do to connect to PPTP from outter internet ? export compact # may/21/2015 11:48:36 by RouterO...

gradash

in Torch when trying to connect i see this, but only two seconds... then dissapears

Untitled.png

gradash

maybe i need some NAT rule ? or route ? help pls

gradash

Hi, i have CCR and need to configure PPTP access from remote pc. All configured as written in many manuals but connection working only from lan I have missed some firewall rule or NAT ? what i need to do to connect to PPTP from outter internet ? export compact # may/21/2015 11:48:36 by RouterOS 6.27...

gradash

Hi,

I have CCR, version 6.27, two offices with VPN connection (separate ubuntu openvpn), i can ping and rpd all pc's both side, but cant RDP virtual windows machines on esxi server, ping ok. Firewall allowed all subnets.

LocalNet - address list with all subnets

Capture.PNG

Search found 33 matches

Re: Can't login by IP to LHG LTE18

Can't login by IP to LHG LTE18

L2TP + ipsec - no ping to /23 LAN

Web-Proxy block all except some local sites

PPP user access control

VPN Security

Re: L2TP working like magic...

Re: CCR1009-8G-1S Error spam in log

Re: CCR1009-8G-1S Error spam in log

CCR1009-8G-1S Error spam in log

Re: v6.33rc release candidate

Re: v6.33rc release candidate

How to forward one local PC through VPN ?

L2TP working like magic...

Re: v6.33rc release candidate

Re: ipsec error spam

ipsec error spam

Re: L2TP connection failed

L2TP connection failed

Re: Mikrotik PPTP config.

Re: Mikrotik PPTP config.

Re: Mikrotik PPTP config.

Re: Mikrotik PPTP config.

Re: PPTP Server w/Windows 7 PPTP Client PLEASE HELP!!

Re: PPTP Server w/Windows 7 PPTP Client PLEASE HELP!!

Re: PPTP - external connection not working

Re: Mikrotik PPTP config.

Re: RB2011 PPTP Help. External users cannot connect

PPTP - external connection not working

Re: Mikrotik PPTP config.

Re: Mikrotik PPTP config.

Mikrotik PPTP config.

CCR cant RDP to virtual maxhines