MikroTik

lacibsd

Thank you sindy for doing all this, I'm sorry for your trouble with ctrl+c
I'm going to do more debugging and try what you suggested.

Ps: I'm very busy in the past few weeks, it might take some time. Once I have a result I'm updating this post.

lacibsd

Update: I have an openvpn client configured on the Mirkotik, if I disable it the clients behind the NAT can connect to the internet. The openvpn connection though works, so I see no relation between the two. Also, only traffic marked as "vpn_traffic" should go through this, which are the f...

lacibsd

I found out and upgraded to RouterOS 7, then spent the last half hour finding out why my internet doesn't work :lol: Current status: Router OS 7.15.3 is installed, the router is connected to the internet but NAT does not work, none of my computers can get out to the internet, they can still ping the...

lacibsd

I'm trying to enable the wireguard interface but I'm not finding it. Do you have any idea what am I missing? [user@mik] > interface wireguard print bad command name wireguard (line 1 column 11) [user@mik] > interface .. -- go up to root blink -- bonding -- Interface bonding bridge -- Bridge interfac...

lacibsd

eth2-master has an Airport Extreme connected working in AP mode. If the Airport is in AP mode you need to feed in vlan1003 for it's guest network. Quick reply get rid of all the garbage firewall rules and stop with this apples and oranges crap. The one subnet that is giving you fits is the only one ...

lacibsd

I have 3 networks defined on my router, on one the networks one client, it can be any random client, is keep having issues. The client still receives an IP and can ping the gateway (Mikrotik) but can't get out of the LAN, can't ping or reach on TCP anything else. It's always just one random client a...

lacibsd

routerOS: system package update check-for-updates channel: stable installed-version: 6.49.4 latest-version: 6.49.4 status: System is already up to date I already determined it is caused by the open-vpn client/interface - see my comment above. Next step is to find how to stop this from using up the m...

lacibsd

Confirmed, once I disabled the openvpn client my memory usage dropped: https://i.ibb.co/LtHM1PN/Screen-Shot-2022-03-12-at-12-20-56.png The follow up question is, how can I stop openvpn client from using up so much memory? :) Thank you, I use OpenDNS with DoH for more than a year now and didn't notic...

lacibsd

Thank you, I use OpenDNS with DoH for more than a year now and didn't notice issues. I have an openvpn client on my router, so far seems this is using up the memory, I just disabled it and going to keep an eye on the graphs. I do use DoH. See https://forum.mikrotik.com/viewtopic.php?t=174836 . The n...

lacibsd

memory or flash ?

-> my memory us running low, if that's what you meant

No backups right now on disk
If I disable graphing how do I check the progress?

memory or flash ?

If flash
- turn off graphing
- delete all of your backups ( then create a new backup )

lacibsd

Update from today > :put [:len [/ip firewall address-list find]] 53 > :put [:len [/ip firewall connection find]] 425 > :put [:len [/ip firewall address-list find]] 51 > :put [:len [/ip firewall connection find]] 318 I'm going to get new numbers in a few hours/tomorrow I do use DoH. What is the outpu...

lacibsd

> :put [:len [/ip firewall address-list find]] 51 > :put [:len [/ip firewall connection find]] 318 I'm going to get new numbers in a few hours/tomorrow I do use DoH. What is the output of the following commands if you run both now and then both e.g. 8 hours later? :put [:len [/ip firewall address-li...

lacibsd

ipv6 is disabled
I did check for new firewall roles, I do have a script which dynamically generated them but there were not too much more than before, maybe extra 10 rules
DNS has 15 static record.

lacibsd

I wonder if there is a way to check what's using up my memory? Something like "ps aux" on Unix :-) Attached graphs will show why would I like know. When it went down the router actually crashed and rebooted. Log's were not too useful, unfortunately. . https://i.ibb.co/brGfpwC/mikrotik-memo...

lacibsd

You are right, I made the swap: add action=drop chain=input comment="defconf: drop all not coming from LAN" disabled=yes in-interface-list=!LAN add action=accept chain=input comment="accept all not coming from WAN" disabled=yes in-interface-list=!WAN add action=drop chain=input c...

lacibsd

I changed it like this: add action=drop chain=input comment="defconf: drop all not coming from LAN" disabled=yes in-interface-list=!LAN add action=accept chain=input comment="accept all not coming from WAN" in-interface-list=!WAN Now it works! Yay, thank you! Yes, safe mode is aw...

lacibsd

Maybe it's line 75 that's blocking the connection?

add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN

lacibsd

Understood, please see the export below, I did remove a few irrelevant lines:
https://private.sparky.red/?24f0434ef0e ... Qe7yWtRKET

lacibsd

My MikroTik is reachable on 192.168.10.1 for ssh and web, the LAN is 192.168.10.0/24 Clients connecting from the internet via MikroTik's VPN are getting an IP from 192.168.89.0/24 I'd like to make 192.168.10.1 reachable on 22/tcp, 80 and 443 tcp from 192.168.89.0/24, how can I do it? As of now I ca...

lacibsd

Copy that, thank you!

lacibsd

I can test from macOS, Windows and FreeBSD

lacibsd

What is the best way to test my speed between my computer and a Mikrotik device?
AFIK iperf isn't working.

lacibsd

@Belikearu, In Winbox or webintraface you can place it under System->Scripts
@dasiu, awesome script, I was looking for a pushover integration

lacibsd

At this time the VPN server is having issues and I wasn't told an estimate for remediation.
Therefore I can't try further settings yet.
Thank you for your help!

lacibsd

I was able to remove the route, however now I can't get out of the LAN from 192.168.88.0/24, while I can still reach my gw on L2TP server and the internet from the MikroTik (L2TP client) [user@MikroTik] <SAFE> ip route remove numbers=0 [user@MikroTik] <SAFE> ip route print Flags: X - disabled, A - a...

lacibsd

If I try to disable it I get:

ip route disable numbers=0
failure: can change only static routes

lacibsd

Hi, This is what I have now, where 1.2.3.4 is the VPN server's public IP ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 192...

lacibsd

router-A is connected to router-B via L2TP/IPSec. I can connect successfully to router-B, I receive the local network's IP, I see the active connection on router-B. I want to send all traffic from router-A via this connection, I tried a few things for the past hour, none seems to be working. Do you ...

lacibsd

Thank you, I stepped away for now. I’m going to take a look probably later this week.

lacibsd

Zacharias thank for your presistent help!! "make sure there is no other L2TP Client active on your Network..." - check "make sure Change TCP mss is set to yes" - I'm not seeing seeing such an option or to disable encryption option Your Firewall is fine... When you try to connect ...

lacibsd

Please find below, this is from the L2TP client Mikrotik [admin@MikroTik] > ip firewall export hide-sensitive # apr/26/2020 18:17:35 by RouterOS 6.46.5 # software id = PRS2-615N # # model = 951Ui-2nD # serial number = 5D450151BDDA /ip firewall filter add action=accept chain=input comment="defco...

lacibsd

Hmmm, interesting Just to be sure we are not misunderstanding each other here is a topology: L2TP server <---Internet---> WAN-Router-LAN-192.168.88.1/24 Computer-192.168.88.10, Phone-192.168.88.11, MikroTik-192.168.88.12 I though the same rules apply to all three devices Your computer is not handled...

lacibsd

I see. The computer/phone is behind the same firewall as MikroTik, using the same IP class On the Client, since you ve tested with another device and the server works... If for example on your firewall you have any strange rules on top blocking in the Input chain ports essential for the L2TP/IPsec t...

lacibsd

On the server or client side?

A non properly configured firewall could be a reason for that...

lacibsd

I'm trying to connect to an L2TP server using IPSec with my MikroTik hAP (RouterOS 6.46.5) but I can't. The same credentials work on my computer/phone. These are the setting on the router /interface l2tp-client add connect-to=l2tp-server ipsec-secret=******* keepalive-timeout=disabled name=l2tp-out1...

lacibsd

Very good one. Thank you!

lacibsd

I'm still looking for the answer

lacibsd

I'm trying to print traffic that does NOT including specific IP or port but couldn't seem to work I'd like something like: all traffic from source or port X where destination it is NOT $ip, in Unix world you'd do grep -v The followings does NOT work, what am I doing wrong? ip firewall connection pri...

lacibsd

The interface had arp=enable, once I changed it to arp=proxy-arp ping was working again.
Thank you very much!

lacibsd

OS: 6.46.2 Scenario: from remote location I connect to my mikrotik via L2TP/IPsec. I am able to ping the local IP of the router (10.1.1.1) but nothing else on the network (10.1.1.2, 10.1.1.3, etc). My L2TP VPN IP is from the same subnet (10.1.1.39). I tried connecting from a different device with a ...

lacibsd

Thank you Njumaen! I didn't know about this issue with IPsec and same source IP, however I did try connecting from cellular and Wi-Fi, I had the same issue. Then changed the DHCP pool assigned to L2TP to another one, with the new pool I don't have the multiple user/one connection working only issue ...

lacibsd

I have L2TP via IPSec connection setup running on 6.46 (stable) Scenario: user1 is connected, everything is good, as soon as user2 connects user1 can't reach the gateway and after ~1 minute gets disconnected. user1 and user2 receives different IP's, I haven't seen errors in l2tp, ppp and route logs....

lacibsd

That’s nice, thank you!

lacibsd

yhfung, and what download/upload speed did you achieve?

lacibsd

I'd like to use 5GHz only

lacibsd

Btw, do you have any idea what is the maximum speed one can have between two devices connected over 5GHz?

lacibsd

Does anyone know if the hAP ac² can do WiFi Access Point and WiFi bridge mode in the same time?
In case not this device then which one?

lacibsd

ntop worked out nicely for me, has lots of useful information!

lacibsd

I was looking into ntopng, that's a very nice thing however requires an nprobe which isn't feasible for me.
However I can look into the other things you posted, thank you!

lacibsd

What is the best way to measure sent/received traffic on an interface divided by month or week?
If I go to Interfaces then scroll to the bottom (on web interface) then I can see the data but I don't know since when did that traffic occur.

lacibsd

This worked, all good.
Thank you for your help!

lacibsd

Thank you for your fast replies! I've tried the exact firewall rules mentioned above but something is still wrong, I can still reach other devices on LAN from the IP I'm trying to isolate. I've tried moving the rules to different positions on the firewall, no affect. I hope I'll have some more time ...

lacibsd

What is the best way to isolate an IP on wired or wireless network?
The goal is for that IP to be able to connect to the outside world/internet but nothing on the LAN

lacibsd

Thank you very much for the quick answer!
It isn't port 5.
Do you use Auto Negotiation for duplex speed or set it manually?

lacibsd

I have a RB951-2n for more than a year. I have 50/50Mbit bandwidth, after random while my speed drops to 10Mbit (1Mbyte) from LAN to the internet or internet to LAN (both upload/download). Connection speed between devices in LAN are not affected. I have graphs for CPU and RAM usage of the router, CP...

lacibsd

This helped me as well

/ip firewall nat add action=masquerade chain=srcnat dst-address=!192.168.100.0/24 src-address=192.168.100.0/24

lacibsd

rubensx, I have the same issue, have you figured out how to fix it?

lacibsd

Okay, thank you!

lacibsd

Any ideas?

lacibsd

I know there is no way to save the graphs to USB HDD/thumb drive, but is it possible to request/suggest such a feature?
Thanks!

Search found 60 matches