MikroTik

monkeybike

Hi, Is there a way you look at upload figures and download figures that pass through the unit. I have a locked down unit, that is set to only allow ports we allow out (ip - firewall - filter) as a Chain forward - source is LAN Subnet (192.168.1.0/24) Dest is 0.0.0.0/0 protocol is tcp and port is 443...

monkeybike

Thanks for info.

It came back on in the night and no longer says RX-Lose, will keep a eye on it, as could also be a power problem at other end then maybe.

Richard

monkeybike

I uploaded a picture here

https://drive.google.com/open?id=0BxNwc ... nA1NHVHU0E

Richard

monkeybike

Hi, Have a CRS switch with SFP modules in. One of them in Winbox when you look at the interface and go into the properties, one of the tabs which shows details is ticked rx-lose What does that mean, in isn't explained in the manual, and you cant un-tick it. All the other SFP's do not have the tick i...

monkeybike

Hi, Does anyome know if the CRS switches have issues with Fibre as getting very odd problems. Or if there is a specific setting. Have configured the unit as a switch (as all I want to use it for is link cabinets together via fibre, as a switch), so have a Master Port on SFP and all the others are sl...

monkeybike

Thanks for answers, looks like then I do need to add marking rules to route. Was looking for a simple way of just writing a rule to send via a specific gateway based on source IP.

Will try the routing mark method.

Richard

monkeybike

Hi All, Is there a really simple way to say if traffic want to go out to the internet and comes from 192.168.1.x it goes out WAN1 Then if it comes from 192.168.x it goes out WAN2 Everything I can find involves mangles, marking, lists etc. Surely there is a really easy way to do it. Regards Richard

monkeybike

Hi, I have a odd problem with Open DNS. as in it doesn't filter every interface. So I have a LAN thats DHCP from Router. Using Router as DNS. in DNS Opn DNS servers are the forwarders. This filters fine. I then have a VLAN for a Wifi Hotspot. The VLAN issues IP's via DHCP from the router. It says to...

monkeybike

Hi, Thanks for taking time to reply. I tried a few bits you suggested but couldn't get it to work. When I was looking at Multi WAN and mangling everyones examples assumed a router was being used on public side. But in UK. PPPoE with a modem is popular with FTCC ISP's, they assign you a public IP on ...

monkeybike

Hi ZeroByte, I posted this question and your answer helpded, but becuase I used PPPoE it became confusing. So I have got it working. However I cant PPTP in myself for VPN dial in, nor can I create a inbound rule to a internal webserver. Yet my rules on other Mikrotiks for inbound (that are not mangl...

monkeybike

Hi, Does anyone have a working example config file of a connection that uses 2 PPPoE internet connections for Multi Wan? Where by the first person who goes out uses PPPoE1 and locks onto it, then second person who connects uses PPPoE2 and the third to PPPoE1 and so on? So it loads balances between t...

monkeybike

Thank you for the reply, so if I setup the mangle as you described.

How would I write my inbound rule to allow port 80 in on the public IP assigned to ISP4 (eth4)

Regards

Richard

monkeybike

Hi Experts, I have a unit that has 3 External internet connections (long story), each with static IP ranges. I want to create a inbound rule to pass from one of my external Public IP's on Eth4 to pass to the server inside the LAN on a internal IP. I have a range of public IP"s to use that are a...

monkeybike

Hi, Hi Experts, I have a PPoE connection that on dial up gets a DHCP address from ISP. But on that line I have a Static IP range. How do make my connection show one of my static IP range when I go out. Rather than the DHCP one assigned via ISP. On another make of firewall I use, I do it by on the po...

monkeybike

Thank you for you help.

I can see that now.

Richy

monkeybike

Hi, Thank you for the replies. I couldn't post a config as shortly after logging call the Unit seem ed to stop routing traffic on a VLAN. So ended up deleting the policies and it came back to life. I do need to get this working, but had another idea on how to do it. can a routerOS, dial another rout...

monkeybike

Hi All,

Is there a way to monitor a portport?

As I am trying to see if port 8883 is being blocked out. Or if a device on my LAN is successful in connecting out to that port on a external server.

Richy

monkeybike

Hi, I have 3 sites 1 Central Mikrotik. So Site 1 talks to Site 2 over iPSEC VPN So brought on Site 3 Copied the settings for IPSEC VPN I used to connect to site 2 And I can establish a VPN, but I do not get the Install SA Keys, and cant route traffic over the VPN. Yet have put the firewall rule in N...

monkeybike

Sorry if being a bit behind here, So this part / ip firewall mangle add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN I would change to be / ip firewall mangle add chain=prerouting dst-address=...

monkeybike

Sorry if being a bit behind here, So this part / ip firewall mangle add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN I would change to be / ip firewall mangle add chain=prerouting dst-address=P...

monkeybike

Thanks Cormacs,

But what is the Syntax you use in your config when its PPPoE

as the examples in the Wiki are more like a leased line / Wan Network example.

http://wiki.mikrotik.com/wiki/Manual:PC ... _Balancing

Regards

Richy

monkeybike

Hi experts,

The other curve ball is both my WANs are PPPoE

So not sure how you would alter the example configs in the Wiki for PPPoE

As they refer to a destination address being 10.111.0.0/24 being the WAN Network.

Regards

Richy

monkeybike

Thanks for the answers,

In the Example it keeps calling a interface "local"

If I want it to apply only to a VLAN should I change it to say the name of the VLAn interface.

VLAN Interface are the Wifi users who are browsing the internet, its those users I want to balance outbound.

Richy

monkeybike

Hi Experts, Is there a simple way to share 2 internet connections. I do not mean use one for HTTP and another SMTP etc. So not splitting outbound policies to say which WAN is used. I mean when the first computer goes out it users WAN1, then second user connects and uses WAN2, then 3rd connects and u...

monkeybike

Hi,

Thanks for suggestion.

I basically made a bridge called bridge,

Then added in Ethernet 5 and 6

plugged laptop into 6 and it doesnt work. But in the bridge it says on port 6 is a disabled port

So added in 7 as well and it says the same.

Richard

monkeybike

Hi, I have a question. I have setup my routerboard to use Ethernet 5 and issue a DHCP address. Classed as my internal LAN How do I make Ethernet 6 be part of Ethernet 5 (internal LAN). So in effect give me extra ports to plug things into on my internal LAN and be issued with DHCP Address. Regards Ri...

monkeybike

Is that under

Ip / services?

Then just add in network ranges?

Then what would the firewall rule look like to drop connections?

Dont want to get it wrong then lock myself out

Richy

monkeybike

Hi,

What is the simplest way to make sure I can admin the routerboard only via IP's in a safe list?

Regards

Richy

monkeybike

Thanks DG

That worked a treat.

Richy

monkeybike

Thanks that has worked.

Richy

monkeybike

Hi, Hope someone can help How do you stop traffic routing between networks? So Have a Microtik with 3 LAN's sharing same internet connection on ethernet 1 But how do I stop traffic so each internal LAN is seperate i.e Ethernet 2 cant see the traffic on Ethernet 3 So ethernet 2 = 192.168.1.0/24 ETher...

monkeybike

Sorry,

Yes the Backup Booter,

Once you select it, you have to press another key, to make it boot into it.

Richy

monkeybike

Hi, I know different devices operate differently. But if you operate a Wifi Hotspot, how do you make the Web Browser pop up and ask you to authenticate after you joing the WiFi. As I see now that people use Apps more than a web browser on their phone or tablet., such as facebook or Youtube etc. They...

monkeybike

Hi All, Very new to Microtik but have used other firewalls in the past. So have the basic concepts. What I want to do is. Block all outbound ports except DNS queries, Http and Https on my Wifi LAN Hostpsot I am running on ethernet 5 So way the unit is set Ethernet 1 is WAN (internet connection Ether...

monkeybike

Hi, Thought I would update my own question into how I fixed it. Apparently its a know issue on my model of box, that a firmware upgrade can break it. Also Netisntalling it didnt work either. It would net install OK, but when it rebooted would have same fault. So used a Null modem cable to get on it....

monkeybike

Hi, I want to upgrade the Router OS to 6.22. But how do you know what version to download from the Microtik Site. I was using Winbox, downloaded what I thought was correct, put it root folder, and rebooted. Now the unit seems to be broke. Just has a green flashing light. But then wondered was it sup...

Search found 36 matches

Upload / Download

Re: Winbox SFP ticked says RX Lose , what does it mean

Re: Winbox SFP ticked says RX Lose , what does it mean

Winbox SFP ticked says RX Lose , what does it mean

CRS 212 Cloud Switches and Fibre Problems

Re: 2 LANs with 2 WANS

2 LANs with 2 WANS

Odd Open DNS issue not filtering on VLAN

Re: Inbound Rule for internal webserver

Re: Inbound Rule for internal webserver

PPPoE and MultiWan Working Example

Re: Inbound Rule for internal webserver

Inbound Rule for internal webserver

Set Outbound IP

Re: Monitor a port

Re: 2nd IPSEC VPN not Working

Monitor a port

2nd IPSEC VPN not Working

Re: Multi WAN Load Balancing

Re: Multi WAN Load Balancing

Re: Multi WAN Load Balancing

Re: Multi WAN Load Balancing

Re: Multi WAN Load Balancing

Multi WAN Load Balancing

Re: Make a Switch

Make a Switch

Re: Simplest Way to only let certain IP ranges use Winbox or SSH

Simplest Way to only let certain IP ranges use Winbox or SSH

Re: Block all outbound ports except DNS, Http and Https

Re: Stop traffic between Ethernet ports

Stop traffic between Ethernet ports

Re: OS upgrade Routerboard RB1100AHX2

WiFi Hotspot POP UP TO AUTHENTICATE - mOBILE PHONES ETC

Block all outbound ports except DNS, Http and Https

Re: OS upgrade Routerboard RB1100AHX2

OS upgrade Routerboard RB1100AHX2