MikroTik

tonny

World is full of custom, free and commercial dynamic DNS services and protocols, but RFC2136 should be first to be implemented.

Sure, build-in would be best, but plenty of mikrotik scripts out there for updating DNS servers.

tonny

found/fixed a bug .... (must delete from external before removing from mikrotik)

tonny

Thnx. It seems to work but on one router i've seen unspecified script errors in the logs so there might be updates. To keep track of changes I added it to github stating the base is not mine. https://github.com/tonoitp/mikrotik-dhcp-to-dns If one of the previous coders object to this, let me know an...

tonny

The original script adds hostnames to the mikrotik static DNS section when an IP gets leased. I do not use the mikrotik DNS but an external one. Therefore I added the "/tool/fetch" commands which puts out a call to the technitium dns server's API. It has a config part at the top (just the ...

tonny

I added updates to an external (technitium) DNS to the script # External DNS config # add the api url here. t.ex. 192.168.1.10:5380 # if empty, no externel dns updates will be tried :local DnsServer "" :local ApiToken "YourApiTokenHere" # Internal DNS config :local DHCPtag "...

tonny

I continued the idea by expanding an existing script which is here :

viewtopic.php?t=119469

tonny

Thnx! I was aware of needing the else block but did not built any because I lacked a remove command. I tried an update to "0.0.0.0" but in the script above the hostname isn't always (strange, sometimes, not always) found so it doesn't work. Also, when trying to ping a host that resolves to...

tonny

Hi, Maybe a mix-up in terms then. I refer to Dynamic Updates where the DHCP server informs the DNS about which host leased which IP (and for how long). Which works fine with the "/tool/dns-update" command. ip dhcp-server add address-pool=dhcppool1 dhcp-option-set=MyOptSet interface=\ bridg...

tonny

And in addition .... adding works with /tool/dns-update zone=$domain name=$hostname address=$leaseActIP dns-server=192.168.1.100 ttl=$ttl but as I understand, the DHCP server is responcible for removing the name at the DNS server. but there does not seems to be an option for that in the /tool/dns-up...

tonny

Hi! I have a script (ddns update) configured on the dhcp server which runs nicely when an IP is leased. But on lease renew it doesn't run, which I would like it to. The plan is to drop the dynamic hostnames from the dns after the TTL (the DNS doesn't know the client is still there) so it needs to be...

tonny

Hi, Same here, have four 2116 running MLAG on 7.11 Ran the upgrade to 7.12.1. First pair went okay, but with the second pair I got burnt. They made a loop in the network, lost contact with the local unit on the secondary link until after power down/up. Eventually I managed downgrade all back to 7.11...

tonny

Does anyone else have issues with their release policy? We *used' to have all our units on the same version and upgrade them all when needed/required. Nowadays we have six different versions in the field. just because every unit we now buy seems to have only the latest software and can't be downgrad...

tonny

found *the* (or at least a) solution to be to have same vlan i mikrotiks and do the vlan translation in cisco nexus

tonny

Hi For a VM migration i need to create three EoIP tunnels between two sites, but the vlan's at both sites have different ID's site-a - vlan 344 <-- eoip --> site-b vlan 684 site-a - vlan 345 <-- eoip --> site-b vlan 685 site-a - vlan 346 <-- eoip --> site-b vlan 686 At both sites the vlans are confi...

tonny

you're right. but at least the looked like a mac address

tonny

Hei, I've got three RB4011 that won't update ddns in IP/CLOUD. The config is correct, i've tried it on other routers. They run on version 6 long-term Also ran a packet capture on UDP/15252 and traffic goes out and gets answered. But no update of time not device cloud ddns name The thing is/might be ...

tonny

the idea is to be able to t.ex. "/system script run vrrphaschanged" in the 'on master' and 'on backup' then in the vrrphaschanged script have two variable that refers to which vrrp interface and to the (new-)state For now i've worked around it with :global variables but that's kind of an i...

tonny

Hi,

The VRRP interfaces have an "on-master"/"on-backup" script trigger.
Is there a variable that specifies the vrrp interface that triggered the script?

Kind regards,
Ton

tonny

Sure, i'm not happy about DDNS not functioning, but the way I see it, it's an free/courtesy service from Mikrotik and FAIK the first outage since the feature is introduced . (Note: I use my own ddns provider and was not impacted) That is the way to go if it's business critical, so you have control o...

tonny

yes, something like that. and now registrar needs actual proof that malware is removed :) Thnx for the update. Please let the world know if it was a false positive or that there really was malware (if so which) We will all benefit from everyone being open about it so we can check our equipment and ...

tonny

Does anybody have an ETA?

see above .... they chosen twitter to inform us about it......my guess if there is any, then it would mentioned there
(though I would agree it's odd since this forum is on their website below 'support' as where twitter isn't)

tonny

no idea, but I bet they are aware of it and got a great many tickets on this one
would been nice if they put out a statement. even a short one will do

tonny

Hi,

Thnx for the suggestion. It would however impact all subnets behind it, but .... since i need it to pick ROS software from a specific host the idea worked because that's that one hosts sole purpose.
(think it would would be neat if you could specify the source ip to use for upgrades)

Thnx

tonny

Hi, I got an RB4011 which got an peer to peer connection for uplink. The default route point at the remote peer. This works fine for the internal subnets. Checking for a upgrade however does not. The RBseems to selects its P2P address to do so for it lies in the default route subnet, but the remote ...

tonny

Thnx. At least I did not overlook some "easy" answer.
So, probably scripting it will be

tonny

Hi, I use a VPN service, and based upon a named list in "ip firewall address-list" certain clients go through the tunnel. Just because sometimes it needs to, sometimes it don't. For the wife to easy switch to, I told her to browse to the router on a port. That puts her laptop on that list ...

tonny

Thnx! Indeed I overlooked MSS Added these two, now all goes as plenned /ip firewall mangle add action=change-mss chain=forward new-mss=1200 passthrough=yes protocol=tcp src-address-list=via_proton_vpn tcp-flags=syn tcp-mss=!0-1360 /ip firewall mangle add action=change-mss chain=forward dst-address-l...

tonny

Hi, I am testing now with a (free)proton vpn account. When I use it as open vpn client on the kodi machine itself, it works fine. Then I disabled openvpn and configured the ipsec on a routeros. The vpn comes up, in firefox on the kodi machine i see the public IP indeed changed to the VPN exit point....

tonny

I don't think so. To my knowledge, it's best practice to have the first rule to be allow access from you management network. The firewall is statefull, so once logged-in you can work on your FW rules without issues or losing contact (you can even turn on safe mode). Just open a second session to tes...

tonny

Hi, When having a routeros without any firewall rules at all, there is an implicit allow, which I think is okay. But, IF one create an firewall rule to allow specific traffic, the implicit allow does not turn itself into an implicit drop. So, unless there is a "drop all" at the end, none o...

tonny

Thnx, Think I missed prefix-length as a range

will be testing tomorrow

update: now I know i missed specifying the prefix as a range. Works perfectly now.

tonny

Hi, When I try to upgrade router(s) from the dude, I get an error on missing packages https://i85.photobucket.com/albums/k53/944317/it%20forum/error_zpsnflznno1.jpg comparing the installed packages (router) and available (dude) it matches https://i85.photobucket.com/albums/k53/944317/it%20forum/file...

tonny

Hi, We use OSPF to distribute connected and static routes, which works pretty well. All networks varies between /22 and /27 and are both, public and private nets. I't nice to distribute connected nets, because it greatly cuts down maintenance. The thing is .... we don't want the public nets be be di...

tonny

Thnx for the suggestion. By coincidence, I found another solution that does work too


/routing ospf instance add metric-other-ospf=21

tonny

tonny

Hi, We have a number of routers which are interconnected and share routing info over OSPF which works great. Most -if not all- take vpn tunnels over IPSEC. Some routers are Cisco ASA's and even thought I hate to say it, they have one great feature: "Reversed route injection". That makes su...

tonny

Hi,
I configured traficflow and it all works well. However, one thing I'd like to see in there too, are de FW drops.
Yes....it's contradictory, when it's dropped there is no flow to report. Any ideas to make drops visible in netflow analyzers?
Thnx.
Tonny

tonny

Thnx!! I like that trick .... it does it nicely and each vrrp instance is in interface so all one can wish for

tonny

Hi, My ISP gives me up to 5 (public) IP's, but all based upon DHCP. I want to use at least 3 inbound (using DDNS), outbound office and outbound guests. Off course you can have only one dhcp client on an interface. Any other idea's then using multiple interfaces? (Yes, i tried vlan 1 attached to the ...

tonny

I upgraded my 2011UiAS-2HnD to 6.42.7 Afterwards i wanted to add extra packages. I just dragged the lot into winbox and rebooted. After reboot, not all packages where installed. Log says omitting dhcp package since it exist. After i deleted the dhcp package file out of the files folder and rebooted,...

tonny

Thnx for a little background on how gsm works. I sent the question (and rif file) to support indeed.

tonny

I've had some issues if you want to connect this low-level with an RB while having a virtualbox network adapter enabled. So, if you have oracle virtualbox installed, disable them and retry

tonny

Hi, We have an wAP-lte(kit) which we want to send out some alert SMS notifications. Since it's only intended to send SMS, they provided me with a simcard with only an SMS bundle on it. I tested it first in a cellphone, and that works well. In the wAP however, it will not. The log gives me : 08:41:42...

tonny

+1 for TACACS/TACACS+ support

tonny

Ho, can we get

<meta http-equiv="refresh" content="300">

in the graphings ( http://mydevice/graphs/iface/etherx ) ? we have a customer who likes to put it up on a wallboard

Kind regards
Tonny

tonny

scheduled device upgrades
scheduled config backups

tonny

Thanks for the suggestion but reversing it and do manual frequency etc is not the way i would like it to use or work. I'll stick to dual radio
Especially for my main application later on. I will be re-using an RB433 for which i have radios to spare.

tonny

Got it all up and running nicly, but after some real usage i found a flaw in the design The connection list only works on the "real" wlan interface in station mode. The virtual wlan interface (in AP mode where i connect my devices to) will not work unless real wlan is running, which requir...

tonny

I'd like to have import/export between winbox ( Addresses.CDB / addresses.WBX ) and Dude. We have multiple engineers installing devices. Every once in a while we merge the winbox addresses so we all know each customer box(es). For firmware updates dude will be more effective. Also access to multiple...

tonny

Hi, I am carrying an mAP as my personal ap which also builds a encrypted tunnel to my home router. For internet access the mAP is using a set of security profiles and a connectionlist to connect itself to a known available WiFi network. Every now and then i need to add a profile and connection. I wa...

tonny

Thanks, that got me going.
Looks like it can't be done on a virtual wlan interface (found that the hard way)

tonny

do you mind sharing the config ?

tonny

Hi, I often have got an mAP with me. I make it connect to an available WiFi network, and have my devices connected via the two eth ports. However, i want to get rid of each time entering the ssid/psk. I would like to have a list of SSIS/psk pairs in the mAP and the mAP connect automatically to an av...

tonny

Thnx, maybe that explains why i never get above 2Gb ..... i'll try traffic-gen

tonny

Hi, we have got 2 CCR1009-8G-1S-1S+ connected with 10Gb fiber modules. We reset the routers and only put an IP on each SFP+ interface.
UDP bandwithtest never gets above 2Gb. Any suggestions on how to test Bw up to 10Gb ??

tonny

Hi, I have a script that cycles the sniffer every 10 minutes which looks like this : /system scheduler add interval=10m name=Dumpcap on-event=":local timestamp [/system clock get date] \r\ \n:local DAY [ :pick \$timestamp 4 6 ]\r\ \n:local timestamp [/system clock get time] \r\ \n:local HR [ :p...

tonny

i've just logged in to look for exact the same thing. I've managed the software updates which is nice, but indeed, i would like to use the dude for config changes as well. Going over 108 devices for each and every change is not funny, and instead of writing scripts that simulates console login and t...

tonny

after some testing ..... the value running does not represent the fact the vrrp is enabled, but represents master (1) of backup (0)

tonny

@Sob, thanks, indeed it works.

Does anybody know by chance how to test the VRRP state in mikrotik script language ? I would like to doe something like :
if "vrrp_1_state = backup" then {
if "vrrp_2_state = master" then {
}
}

tonny

native winbox for Ubuntu/linux

+1

tonny

Hi, In all VRRP examples you see the VRRP address in the same subnet as the routers individual IP address. But is that mandatory ? For the connection to an external party, a /30 subnet is used, so i don't have addresses to do so. Is the config below a valid solution to get around that ? [Router 1] /...

tonny

Hi,

We have installed the i386 router o/s (lic. level 4) as virtual machine which works fine. However, we added new networkcards, but they don't show up in winbox not even after reboot

Any suggestions ?
Thnx, Tonny

tonny

a bit of fiddling with the bindings (ethernet as first card), disable virtualbox and tab network cards ....
can get it to work when really needed but still has me puzzled

tonny

Hi,
After "upgrade" to win10 it seems i can no longer use the mac-telnet to mikrotik. I asked someone else who recently switched to win10 and he has the same issue. Any sugesstions ho to fix that ?
( I would expect something you need to tweak in powershell

)
Thnx,

tonny

Thanks, i thought along the same lines, and I tried is again with your suggestions, but ..... nope still no route summary as i would like to see it

tonny

Hi, We've created a network of 50 (and growing) Mikrotik routers. Each router has 3 local networks with subnets 10.x.10.y /24 10.x.60.y /24 10.x.80.y /24 where x represents the location number and y is assigned by dhcp in the mikrotik. All mikrotik's can see each other via the wan interface using 17...

Search found 66 matches