MikroTik

deadManN

Since Mikrotik updated SMB version, I have issue copying file, the file keep on uploading and after few seconds it halt, and cause error, then I have to hit retry. I first though its for Mikrotik, so I restart it, then I though its for my OS, but now I have same issue on another windows machine as w...

deadManN

If they limit it why should I pay for higher gain? I know it is contra-intuitive. Higher gain does not yield a stronger signal, if the limit comes from the regulator, based on EIRP (strongest direction, regulated as if it was in all directions (I = isotropic) The higher gain in an antenna comes wit...

deadManN

Almost 1.5 years later this thread gets resurrected.... Are both devices running the same ROS version and same country settings ? There have been quite a bit of changes in ROS versions w.r.t. legal limits on how much power the radio can use for transmitting depending on country and channel used. Al...

deadManN

I wonder why my PC signal strength with the older device is better...

Screenshot 2023-04-04 145353.png

I expected this device to be more reachable in distance and fill more black holes with more than twice the gain of the antenna... but it has almost same reachability

deadManN

But it's also true that OpenVPN suggests that certfificates should be created with specific usage: https://openvpn.net/community-resources/how-to/#important-note-on-possible-man-in-the-middle-attack-if-clients-do-not-verify-the-certificate-of-the-server-they-are-connecting-to But still, it shouldn'...

deadManN

To me, "works with original OpenVPN" is pretty good argument why it should work with RouterOS too... Yeah, that's a good point, that nobody seems to care about... Like in my cases, in programming there are things that people say hey it's bad practice... but it's bad when something is happ...

deadManN

Any chance you could try different router? Or if you don't have any, it's possible to use virtual RouterOS (called Cloud Hosted Router, can be downloaded from https://mikrotik.com/download) and run on your PC in e.g. VirtualBox (https://wiki.mikrotik.com/wiki/Manual:CHR_VirtualBox_installation) or ...

deadManN

Is the D-Link device transmitting beacons stably on same frequency? It could be that it's playing games ... When MT looses connection, is there anything in logs? The fact you can't (or your don't know how to) set things on D-Link in predictive manner doesn't exactly fill me with confidence in that ...

deadManN

Frequency 2462 is channel 11. So as starting point configure MT to 20MHz channel width and channel 2462. 40MHz in 802.11 is 20+20 and AP reverts to 20 (single channel) for devices not capable of 20+20. If that works, try setting frequency layout to XX and channel width 20/40. It works for a period ...

deadManN

Frequency 2462 is channel 11. So as starting point configure MT to 20MHz channel width and channel 2462. 40MHz in 802.11 is 20+20 and AP reverts to 20 (single channel) for devices not capable of 20+20. If that works, try setting frequency layout to XX and channel width 20/40. Yeah that was the way,...

deadManN

It's entirely up to driver and management software of mentioned D-Link card as to what can be set. As to the rest, I simply mentioned constraints and possible work arounds (and those are mostly due to how hardware works, not much that software can change). Whether you can adapt your setup to work a...

deadManN

Remember that slave interfaces share same radio with master interface. And only master interface can influence on some of crucial radio parameters, such as frequency selection. Meaning that there are generally two possibilities to make such scenario work: configure master interface to run in mode=s...

deadManN

I looked for this before and now again, and i'm disappointed that my router own two individual antenna, but i can't configure two separate (AP / Station) at same time... i want to carry the hAP lite on my bag while traveling connecting it to a power bank... and receive signal from portable WiFi-AP,...

deadManN

I have a VPN which offers IPSec/IKEv2 connection. I set it up on Mikrotik and it is working but... I would prefer to use AES-256-GCM-SHA384 connection over what I have now AES256-CBC-SHA512. AES-256-GCM is much much faster than AES-256-CBC. Any chance of implementing this? Or workarounds? Thanks, I...

deadManN

Any chance you could try different router? Or if you don't have any, it's possible to use virtual RouterOS (called Cloud Hosted Router, can be downloaded from https://mikrotik.com/download) and run on your PC in e.g. VirtualBox (https://wiki.mikrotik.com/wiki/Manual:CHR_VirtualBox_installation) or ...

deadManN

Any chance you could try different router? Or if you don't have any, it's possible to use virtual RouterOS (called Cloud Hosted Router, can be downloaded from https://mikrotik.com/download) and run on your PC in e.g. VirtualBox (https://wiki.mikrotik.com/wiki/Manual:CHR_VirtualBox_installation) or ...

deadManN

Any chance you could try different router? Or if you don't have any, it's possible to use virtual RouterOS (called Cloud Hosted Router, can be downloaded from https://mikrotik.com/download) and run on your PC in e.g. VirtualBox (https://wiki.mikrotik.com/wiki/Manual:CHR_VirtualBox_installation) or ...

deadManN

Okay, I'm not so sure about the SoftEther, but since the other server is running on that, and I had the experience of using OpenVPN client with SoftEther server,... I did mention that it may be a SoftEther application.

Screenshot 2022-11-28 135014.png

deadManN

Okay, I'm not so sure about the SoftEther, but since the other server is running on that, and I had the experience of using OpenVPN client with SoftEther server,... I did mention that it may be a SoftEther application.

deadManN

then I hope it won't take another week for support to answer...

deadManN

I did quick test with SoftEther server (that thing is... interesting) and no luck, I'm seeing exactly the same problem as you do. I wasn't able to find yet if it has any useful logs. Btw, you may want to remove some screenshots you posted (hint: I was able to find out what software runs on your ser...

deadManN

I did quick test with SoftEther server (that thing is... interesting) and no luck, I'm seeing exactly the same problem as you do. I wasn't able to find yet if it has any useful logs. Btw, you may want to remove some screenshots you posted (hint: I was able to find out what software runs on your ser...

deadManN

I have the same problem. I tried everything and still stuck LINK ESTABLISHED.
I think the problem is with VPN SERVER, because my Mikrotik connects to another vpn server, but no traffic passes through it.
Sorry my English!

That was fine for me, I got you

deadManN

Well we work remotely, that's why the company provides such a server, and after a recent accident, everything getting blocked, including all proxies and VPNs... with few exception that hardly work, the good thing is the server is inside the country and is not checked, while it is placed in a datacen...

deadManN

It's for the company I work for, and I do not have access to the direct creator... and even if I do, I'm not sure due to the recent condition of my country, we have many options when running a VPN as many people are cut off from the internet BTW, thank you very much, reading all my post, staying to ...

deadManN

It makes two of us. I'm afraid I'm running out of ideas. The only unusual thing is that one certificate for everything, but if it works in Windows...

profile 1.png

profile 2.png

My last hopes... are my profiles correct?

deadManN

That's sad :'( I hope Mikrotik works more on their connectivity... but if certificate are issue, it would throw error faster, and before nothing about negotiating tls in time, it would just said tls failed or something...

deadManN

Well, it doesn't seem understandable at all to me
[ LOG FILE REMOVED DUE TO SECURITY REASON ]

deadManN

You have wrong time in router, it thinks that it's 1970, it matters for TLS.

1. Time fixed.png

deadManN

You have wrong time in router, it thinks that it's 1970, it matters for TLS.

Shoud i configure NTP if im not wrong?
Do you know any server I can use?

deadManN

i noticed the value of cert and ca are same in *.ovpn file... but the file it self in windows works

deadManN

You have three things (two certificates and one key): <ca> - certificate of CA (certificate authority) that issues other certificates, you need this for Verify Server Certificate option to work <cert> - your client certificate, this is presented to server, so that it can verify that you have access...

deadManN

There's nothing clearly incompatible. How about certificates? After importing them, you should have two, one with T flag (trusted) without key, and another also with K flag (has private key). In OVPN client, did you select the one with key? You should also have Verify Server Cerificate enabled, but...

deadManN

i read my open vpn file, and did all the thing, still not working...
Only VPN working in my country currently are either very rare and special VPNs, or some OpenVpn and SoftEther... with both mikrotik wont support

:'(

deadManN

I really need this, could anyone help?

deadManN

Dear folks, I have this OVPN configuration: dev tun proto udp remote <server IP> 1433 cipher AES-128-CBC auth SHA1 resolv-retry infinite nobind persist-key persist-tun client verb 3 auth-user-pass <ca> -----BEGIN CERTIFICATE----- <Removed for the server owner security> -----END CERTIFICATE----- </ca...

deadManN

What is need to be known: I set up my mikrotik upside down... I don't use Ether1, use Ether2~3 for my PC within a Bridge, and I use WLan as separate interface with station configuration. First: it seem you said you had fixed issue of rapidly assign and deassign IP address using DHCP... Well I faced ...

deadManN

Dear folks, Our company have lot of AP's with different network and internet, and they refuse to create a good one unite network. Due to that I bought an hAP-lite, so i shall be able to change network, without having to modify my project configurations... and also send some packets over another netw...

deadManN

I looked for this before and now again, and i'm disappointed that my router own two individual antenna, but i can't configure two separate (AP / Station) at same time... i want to carry the hAP lite on my bag while traveling connecting it to a power bank... and receive signal from portable WiFi-AP, ...

deadManN

there are lot of counter within the mikrotik, but i want to know when they start logging? and how many day passed?

mikrotik.PNG

deadManN

Dear folks, Is there any way to do some route marking, or other functionality, based on domain address, without checking the IP in which packet sent to? the middle DNS returned blocked data, and if you request an IP address even setting your DNS to some global DNS, the route you'll receive is differ...

deadManN

then how can we install MMIPS inside such router that already has MIPSBE? how to change OS? And does this architect, support wireless? i own RB951G-2hnd

deadManN

dear folks, i have RB951g-2hnd router device, using ether one as "wan1" for connecting to the network, and then ppp / pptp (in case there is issue with accounting server like currently) for connecting to the ISP.... my country does block all stuff, with many ways including addresses, IPs, ...

deadManN

neu as per another post...... I am confused the link you set in regard to some of the settings........ DSL MODEM IP’S DSL MODEM 1 = 192.168.1.1 DSL MODEM 2 = 192.168.2.1 /ip route add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 check-gateway=ping add dst-address=0.0.0.0/0 gateway...

deadManN

$WAN is a placeholder for you to put your own WAN interface name in. It will only apply to traffic coming up your WAN interface. and for exceptions, like WinBox Service, or Port Forwarding ... add action=accept chain=input comment="ACCEPT ICMP" in-interface="$WAN" protocol=icmp ...

deadManN

Maybe try something like this for some basic protection? Ensure you edit the $WAN for your WAN interface name though. /ip firewall filter add action=accept chain=forward comment="ACCEPT established & related" connection-state=established,related in-interface="$WAN" add actio...

deadManN

Can you paste your firewall rules? Its hard to help without seeing your rules. /ip firewall filter export just as she said, the first three were the very begin attacker, but more IP added up... [admin@MikroTik] > ip firewall filter export # apr/16/2018 21:03:05 by RouterOS 6.41.3 # software id = X1...

deadManN

thanks folks, although since i need to access my router from outside, as i'm beginner and there are things that i do not understand i need helps for, i go with filtering unwanted address, till allowing specifics... BTW both ways are the answers Disable unneeded services & properly setup your fi...

deadManN

thank you every body your tough came handy and useful... i wished i could mark more post as answer

deadManN

thanks folks, although since i need to access my router from outside, as i'm beginner and there are things that i do not understand i need helps for, i go with filtering unwanted address, till allowing specifics... BTW both ways are the answers Disable unneeded services & properly setup your fir...

deadManN

[admin@MikroTik] > 22:45:34 echo: system,error,critical login failure for user service from 177.45.14 9.205 via telnet [admin@MikroTik] > 22:45:36 echo: system,error,critical login failure for user ubnt from 177.45.149.2 05 via telnet [admin@MikroTik] > 22:45:41 echo: system,error,critical login fa...

deadManN

any help?

deadManN

Dir Sirs, At first i wrote whole thread about it, how should i do a load balancing, but no luck with answer, after noticing more into people thread, i though i maybe share at wrong section, so please come and visit: https://forum.mikrotik.com/viewtopic.php?f=13&t=132990 if moderator see it neces...

deadManN

I just followed this tutorial and.... https://www.youtube.com/watch?v=ThYBtmo_bcs i end up with these: (i share one of firewall tab on terminal since i couldn't open two tab at the same time) PCC_LoadBalancing.jpg Yet still i have two question: the man did not set any local `masquerade` NAT to conne...

deadManN

Dear sirs, I own a RB951G-2HnD, a UBNT Radio, and a ADSL Modem from older times, ... currently i'm using radio as a bridge to connect to the ISP, and then i connect to Mikrotik for PPPoE, and then i connect it to wireless modem, or pass to other ADSL modem which is connected to my PC and Mikrotik, w...

deadManN

any answer?

deadManN

Dear Folks, I own RB951G-2HnD router box, and i configure it long ago, i'm not advance mikrotik user, just did it as my first attempt using internet, and left it beside... But i need two config.... my connection is like this: ISP <- RADIO <----|---> RADIO -----> ROUTER ------> SWITCH/WiFi User -----...

deadManN

not for me...

deadManN

i want to be able to monitor my UBNT....
But i can't access it.

i also just now, notice that if i ping through interface eter 1, i have timeout though the 192.168.1.1 is behind eter 1. but on bridge i have ping

deadManN

dear guys, i have a radio (UBNT) behind my mikrotik device, and long ago i had it as router, putting pppoe over it. i had no problem accessing it through my mikrotik. but since i moved the pppoe for some reason to my mikrotik, and set the radio as bridge, i can only access my radio when i connect th...

deadManN

i think this time i really love to see things on your whiteboard, i'm not sure if it is complicate or it's duye my weak english, but i'm getting confiused...
BTW, the home router doesn't have any wan port. the wan is only for ADSL and phone line

deadManN

I'm wonder if I can ask you one more question before take it, if it does sense to forum. Think of this: Multiple DHCP Configuration, which give a way IP based on Last connected node IP Address, which I mean, as you saw my interfaces, and later, even my neighbor connect to my router (as the radio onl...

deadManN

it's cheap surely, but if my salary was in dollar, 80~100 K $ yearly, not around 2K $ :D and the second one isn't programmable, so won't listen to data. and nice BTW, old ago, when I were apprentice I had my period in one of big ISDP company through my own city, and they used these small box in many...

deadManN

it worked, but it somehow didn't open some website, like mikrotik or 4ward.it, also network became slower, maybe creating multiple interface generate a loop, and some website run out of hop to travel. BTW it still had another issue, which was that my gateway still pointed to 192.168.1.2, not 1.1, th...

deadManN

The thing is i want to some time take my router out, but don't want to reconfig whole network, i tried to put IP x.x.1.0 on bridge between eter1 and 2 already, but didn't tried to put it on interface 2 master... (BTW i think, they still, again gonna be seperate network, i mean what you explain is li...

deadManN

so if i give interface 192.168.1.2 to my router, doesn't it make it on it too? like when you give multiple IP to a computer, it can use them all through one port... so this is why i cant find my TP-link modem, it somehow detect the other network and try to find another compatible ip address... what ...

deadManN

hello folks, I'm just the noobie, and i just bought a mikrotik RB951G-2HnD device. with firmware version of 6.30.2 my device map is like this: My Configuration 2.jpg In here i have too issue, First... i cant get my computer to use any of these device as Gateway on range 192.168.1.0 no matter if i se...

deadManN

I had same issue, but I found it, the graph it self bring nothing inside the page to be shown, you have to create it.
Under tools -> Graphing, you can add the graph you wish to see, then the page provide you with them

Search found 68 matches