MikroTik

fbuster

I've experienced that my wifi camera no longer connects to my router. The Router log contains a lot of deauth messages with my camera's mac address, how can I inspect where they are coming from? I've enabled debug/wireless logging but there arent any details. Updated my RB951 to 6.47.9 but no differ...

fbuster

I want to look if a certain packet coming from one local device that contains a certain word and than react by sending an output pin high on the router or sending a packet to a local esp8266 to react upon. The word is "callStatus" and it is a HTTP TCP packet about 300-400 in size. How woul...

fbuster

Hi,

I have an old RB433 I would like to use it to just capture packets in between my wan connection on an sd card.
Can someone help me in a config that would work as in my setup below:

WAN ------> ETH0 (RB433) ETH1-----> ROUTER B ---------> LAN

fbuster

Thank you for sharing

fbuster

Could anyone help me with a script that sounds the beeper when a Lan device pings the router ?

fbuster

You can also consider installing through netinstall:

https://wiki.mikrotik.com/wiki/Manual:Netinstall

fbuster

Is there noone that can take a look at my config and give some advice?

fbuster

Anyone?

fbuster

I Use this config to view camera connected to MT at home network from remote vpn client. It works but i would like to resolve following things: - Now the home network and vpn tunnel are on the same subnet , and i have to use proxy-arp would it be better to have different subnet and if yes how can i ...

fbuster

- In my current config (see above) proxy-arp is enabled on the bridge but i still can't ping other devices in my lan from my vpn client
- The reason i chose to get them in the same range was to avoid adding routing to be able to ping from subnet A to subnet B.
- How can I change my config for that?

fbuster

# RouterOS 6.42.12 /interface bridge add admin-mac=B8:69:F4:8E:04:17 arp=proxy-arp auto-mac=no comment=defconf \ name=bridge /interface list add comment=defconf name=WAN add comment=defconf name=LAN /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add auth...

fbuster

still no access , no ping reply

fbuster

# Change to bridge below
/ip address
add address=10.0.0.1/24 comment=defconf interface=[b]bridge[/b] network=10.0.0.0

# Is this ok?
/ppp profile
set *FFFFFFFE local-address=10.0.0.1 remote-address=vpn

fbuster

I've read the links you provided but I'm still clueless.
Can you help me what I need to change in my config?

fbuster

But in my config above the vpn user has same subnet as my Lan and Lan is already in the bridge

/interface list member
add comment=defconf interface=bridge list=LAN

fbuster

Anyone that can take a look at my config?

fbuster

I'm trying to setup a vpn connection over L2TP/IPSEC for vpn client access to my local network. (Road warrior) I can connect from my vpn client to the vpn-server running on mikrotik , but cant get access to the home network. Can someone take a look at this to help me? See my config below: # RouterOS...

fbuster

I'm setting up a L2TP/ipsec server from my mikrotik to be able to remotely login from my phone.

Can i choose an ip range for the vpn to be in the same subnet as the lan connected to my router?

I would like to connect to a camera on my lan from the remote vpn device.

Do i need to use proxy-arp ?

fbuster

If I make a wan bridge , will it also use the switch chip?

fbuster

Yes i get multiple ips from isp.
Settopbox is required by isp and needs a public ip

fbuster

I would like a config where the modem hands out :

a public ip to internal wan dhcp client

a public ip to the settopbox

eth3 & eth4 & wlan are a 10.0.0.0/24 subnet

Can someone help me , i am poor in bridges / vlan / switch

fbuster

nope , thx for the link.

Can i enter a fixed address voor de remote-address in place of an ip-pool?

fbuster

Does anyone have a basic config for L2TP/IPSEC vpn server on a RB951 ?

fbuster

anyone?

fbuster

Its a switch now , it doesnt need ip.
switching is layer 2 (mac)

fbuster

depending on your model it can be a 4port or 5port switch Here's a sample config: /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1 ] name=ether1-To-modem set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-por...

fbuster

I would like to setup my router as a vpn-server for accessing a camera from a phone using a vpn-tunnel.

What steps should i take to only allow access to 1 device in my lan (camera) and not the rest of my local network?

fbuster

fbuster

Thank you, I tried testing it in a terminal first before scheduling it, but it doesnt show the lease.
Might i be doing something wrong? I used the command below :

[rb951@MikroTik] /ip dhcp-server lease> :put [find mac-address~"^60:01:94"]        
*756;*757

fbuster

There is a device on our network that requests dhcp leases frequently with a new mac address resulting in a big list of reserved leases from the same android machine. My idea is to search for the mac address that starts with xx:xx:xx because it is unique to our network but always the same for that d...

fbuster

Grouping of firewall rules.

example:

Group="DDOS protection"
- Here are the filters rules for this group

fbuster

I have an RB951 running 6.34.6 with a U3 cruzer micro 2GB flash pendrive In /system/resources/usb I can see: 1 1:3 SanDisk U3 Cruzer Micro 480 Mbps In /disk there is nothing so I can not format it to use in in my router. Does anyone have a solution for me?

fbuster

Problem : some local client is making connection to an ftp server on the internet once a week and i would like to capture that data on a file on my mikrotik. Possible solution: Tools/packetsniffer: Is it possible to sniff for packets coming from one of my lan or wlan clients with a destination port ...

fbuster

Is it possible to setup a routerboard between a cablemodem and a router and just use the firewall function in the routerboard? How can I set this up in routeros using 1 port for the cablemodem and another port going to the router wanport? I just want to try some basic firewalling without messing wit...

fbuster

I have an Ip camera inside my lan connected to my RB951 I have a port forward NAT rule to forward outside traffic to my camera. I have an app on my phone that points to myexternalip:port and that works fine from the internet. When i use the app to view my camera when i'm connected with my phone on t...

fbuster

Is there a way to view in routeros how several wifi clients are connected 802.11b 802.11g 802.11n ?

I would like to turn off 802.11b support but i need to find out if there are still clients using it.

fbuster

Its a lot more clearer now thank you zerobyte

fbuster

It's simple. Input chain is for packets going to router itself. It happens when their destination is address owned by router. They end up being processed by process running on the router (e.g. SSH or FTP server) or dropped/rejected if they go to closed port. t Does it matter if the packet comes fro...

fbuster

I found the explanation for the IN , FORWARD & OUT chains but I'm still a bit puzzled. For example IN means going to the router IP address but does that als count for a packet coming from a local address and a packet coming from the wan interface (internet)? The same question for the FORWARD cha...

fbuster

BUT - if you want to be slick and make the switch have an IP address "inside" your LAN, you can do this - Create a new VLAN interface, name it mgmt, set the vlan-id to something, say 10, and put it on the master ethernet interface. Put a free IP address from your LAN on the mgmt vlan inte...

fbuster

I already have a router which is configured as lan and AP.

I really just need this one configured as switch to go to my other router , digicorder and rpi server.

See manual cad

network01FEB2016.jpg

fbuster

the modem hands out public addresses not private addresses.

I get max 4 public addresses from ISP

fbuster

Remove ether1-to-modem from the bridge, and set its master port to be ether2. (the master doesn't have to be the first port - that's just a convention) As for IP address - whatever IP range your ISP modem assigns to things is what you should use on the AP. If your computers and devices are getting ...

fbuster

So with your explanation my config as below is wrong ? I used eth2 as a master port for the switch and eth1 port is connected to my isp modem. I also dont know which static IP i should choose , since i dont want to interfere with the isp. /interface bridge add name="My bridge" /interface e...

fbuster

I read that page and i understand how the switching works but i still have no clue how to set a management ip
for this config.

fbuster

If I understand correctly the IP is only used internally and does not interfere with the clients IP's on port 2-5 or the wan IP on port 1? In config below what is the command to set the management IP: /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1...

fbuster

Where should I set the IP for managing the switch without interfering with the switch function itself?

on Ethernet port 1 my ISP modem is connected that has a dhcp that hands out public IP's.

port 2 to 5 are my clients that receives IP from ISP

fbuster

Is this correct as below ? Can I also make this a firewalled switch? /interface bridge add name="My bridge" /interface ethernet set [ find default-name=ether1 ] name=ether1-To-modem set [ find default-name=ether3 ] master-port=ether2 set [ find default-name=ether4 ] master-port=ether2 set ...

fbuster

I would like to use my RB951G as a 5 port switch with wifi disabled.

What would be the required steps to take? (using the onboard switch chip)

starting from a blank config.

thx

fbuster

Hi,

I'm still happily running 6.32.2
Since I only update when i really need a new feature or fix i'd rather stay with it.

But i wondered if an important security flaw is detected that also is exposed in older versions
do they fix this also in older releases or just in the current release?

fbuster

worked great thank you

fbuster

How should this be done and where can i get the 6.27 files?

fbuster

from /system resources

Write cycles 493325 bad blocks 0.1% RB951g-2HnD 2 weeks old. running 6.28

fbuster

Did the clients already have an active connection when you disabled the rule?
.

Yes when i tried disabling the rule again i wasnt able to get a connection
from a client to the internet , maybe i was looking at some cached data
the first time.

fbuster

I've setup my router from an online website, it works great. Can someone please explain what exactly the rule below purpose is ? I thought it was for masquerading my clients ip address to public ip's for browsing etc , but when I disable the rule my clients can already connect to the internet. /ip f...

fbuster

I also have the same problem on an RB951g running 6.28
2 write cycles continuously when logged on using winbox.

Can other users confirm that downgrading to 6.27 fixes
the issue?

Search found 56 matches