MikroTik

nicutdk

Hello Mikrotik I know it has been discussed before but I want to draw attention. I have been using mikrotik for many years but I didn't think I'd be so disappointed with how they evolved. Many manufacturers have introduced mu-mimo, Mikrotik wait for......what? I have clients who reproach me that his...

nicutdk

Hello,

It is possible to add more storage on RB4011iGS+5HacQ2HnD-IN ? Default have just 512MB

Regards,

nicutdk

Hi,

I see on wiki mikrotik 3 php API

in PHP #1 (recommended)
in PHP #2
in PHP #3

Why #1 is recommended ?

What is #2 and #3 ?

Regards

nicutdk

Did you run Speedtest on the same device?
If yes the Speedtest eats your CPU not the Tunnel

Just a simple speed test site

From my PC to http://www.speedtest.net/
One test with SSTP and one test with L2TP

nicutdk

Hi, I bought that router for CPU for VPN and SSD... I read on mikrotik site in the router's specifications that it has very good VPN performance I make just 1 tunnel with SSTP protocol from LAN to router for testing. I try speed test on external site and with SSTP maximum speed is ~45 mbps . In rout...

nicutdk

Hi Sindy and thank you for your support. I love mikrotik and every time I can do this I recommend mikrotik for my clients but they must adapt to the competition of cheap producers. I'm glad because with your help and mikrotik support I resolved pppoe problem and my clients now is happy. :) I could g...

nicutdk

OK. The reason why you need the default route without routing-mark: the connections originating from LAN do not get any connection marks, so don't get any routing marks, so need a route with no routing-mark. But the last /ip firewall mangle rule in your configuration, action=mark-routing chain=prer...

nicutdk

Hi,

I have a lot of LtAP mini LTE kit.

It is possible to integrate DUDE with GPS of LtAP mini LTE kit ?
I want to store in DUDE maps and show position on map of LtAP mini LTE kit.

Regards,

nicutdk

Have you obfuscated the actual public IP addresses in the configuration but not in the log? because the log shows: Jul/17/2018 08:14:01 firewall,info Test: prerouting: in:pppoe-out3 out:(unknown 0), proto TCP (SYN), 62.32.81.83:52837-> 82. 76 .164.184 :443, len 44 ... Jul/17/2018 08:14:01 firewall,...

nicutdk

If you've tried exactly that and the dstnat (port forwarding of requests coming to WAN to servers on LAN) did not work, the cause must be something else than the multi-wan setup. Recreate the complete configuration which didn't work and post it so that we could check for the other issue. add distan...

nicutdk

Hi,

I want to make a suggestion for IP cloud
So...

Will be nice to have feature to associate IPcloud from routerOS with Mikrotik Account to manage all mikrotik router.

For Example I have many clients and I make my own structure to manage. If I forgot to add is to hard to put again.

Regards,

nicutdk

The routing itself ( gateway=10.0.0.1%pppoe-outX ) is fine but as PPPoE is a point-to-point interface, the interface name alone is actually sufficient as route's gateway (the ip.add.re.ss%interface-name syntax is necessary only for point-to-multipoint interfaces). However, if you want your port-for...

nicutdk

Hi, I try in different way to make that config to work but without succes. I have public IPs just from PPPoE. I make in exact way like wiki example https://wiki.mikrotik.com/wiki/Manual:Load_balancing_multiple_same_subnet_links but without success I make the internet work from lan but dst-nat no. I ...

nicutdk

hi,

I try to make that but after reading wiki and forum NOTHING WORK.

Maybe...someone can help with that please.

Regards

nicutdk

i think this can help https://wiki.mikrotik.com/wiki/Policy_Base_Routing Thank You for your answer but it is not for PPPoE. I read on wiki and I found that: /ip route add distance=1 gateway=10.0.0.1%PPPoE-1 routing-mark=WAN1 add distance=1 gateway=10.0.0.1%PPPoE-2 routing-mark=WAN2 Now problem just...

nicutdk

Hi, Now problem is router. Unable to work with DNS. When I ping at google.com host not found but when I ping at 8.8.8.8 work. This is my configuration. Please can anybody help me ? /interface bridge add fast-forward=no name=bridge1-LAN /interface pppoe-client add disabled=no interface=ether1 name=PP...

nicutdk

Hi try that.

My problem is PPPoE because I don't hav IP for default gateway

nicutdk

Hi, My ISP offer multiple IPs just with multiple PPPoE user. So....I have 3 PPPoE users from ISP with on IP on each user. My problem is when I try to ping to all IPs I have response just from one. I try with change distance default route but not working. Can anybody help with that ? Best Regards,

nicutdk

Hi,

I have an Orange Huawei E3372H with Revision 21.200.07.00.141.

I connected to internet via ppp interface.
How can verify if it is connected on 4G network ?
My speed test is ~15-20 Mbps.

I read on forum, this modem work as an lte interface. I try with indication from forum but not working.

nicutdk

Hi,

I see have many type of wifi.

I want to know if mikrotik have an equivalent products for that https://www.ubnt.com/airfiber/airfiber24/ ?

Regards,

nicutdk

I use graylog and works like a charm with netflow

nicutdk

Hi,

Is this true ???

https://arstechnica.com/information-tec ... h-routers/

nicutdk

router os v6 not use all core on vmware. i try on vmware and not working at gigabit speed

nicutdk

Hello,

Now we are in the 2018 year. We have for a couple years "RouterOS v6 RC and v7 BETA" topic.

Mikrotik can you tell us or can you think this year in this TOPIC we will see a V7 ?

Best Regards,

nicutdk

Hello, I want to install more wAP LTE on cars. I want to monitoring but provider don't offer public ip. I know can create vpn from wap to what i want but I think not good principle. I see Ubiquity have possibility to add into cloud and can manage centralized. I see the mikrotik have cloud but just f...

nicutdk

There is a wiki page with the user tested hardware, but it's not very popular. Let's make this page useful and add tested stuff in there - you will help others, and others will help you! http://wiki.mikrotik.com/wiki/Supported_Hardware Hello, Does anybody know why this page was deleted ? Regards,

nicutdk

Hi,

Thank you for your answer. I think the red color means BAD.... So... I think now is good

nicutdk

Hello, This usually happens when your interface is slaved, to a bridge for example. Since I think your posted config is partial, check that out. If that's the case, dhcp server needs to be assigned to the bridge IF wlan1 has to be slaved to the bridge. Regards, Sent from Tapatalk Hi, That configura...

nicutdk

Hello , I have a very simple configuration on Metal G-52SHPacn With this configuration DHCP server not working # model = Metal G-52SHPacn /interface wireless set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=MikroTik /interface wireless security-profiles set [ find default=yes ] suppli...

nicutdk

+100 for this feature...

With that feature will prevent SPAM. I use and after one month SPAM reduce with ~30%

Regards

nicutdk

Hello,

I make other test with CCR 1016 and works fine. Router use all core with PPPOE

screen.png

Regards

nicutdk

Hello, I have an RB3011 and connect to ISP 1gb/s with pppoe client. Problem is the speed and it is maxim ~650mb/s without fast track. I bought this powerful router for not using it fast track Strange problem is CPU because use just 1 core 100% P.S. I make another test without pppoe and works fine (C...

nicutdk

Hi,

It is possible to make a PPTP tunnel over SSH ? I try with ssh portforwarding but not working because use GRE protocol.

http://stackoverflow.org/wiki/PPTP_over_SSH

Regards,

nicutdk

Hi,

I have a question:

Why metal 52 ac have just ~50Mb/s ?

Regards ,

nicutdk

Hi, I try to understand the difference AC wifi device. I want to recommend to my clients the device for there needs. Some client ask me what is the maximum speed for wifi. They look to other vendor and they see 1200Mb/s, 900MB/s or 450Mb/s. With that I don't tell anything just I see one mikrotik pro...

nicutdk

Hi,

I see mikrotik wireless products with different specs like G/N/AC
If for G/N is clearly for AC I don't understand.
I see product apparently the same specs but one products specs is 540 Mbs.

How can find the speed for wireless AC for mikrotik products ?

Regards,

nicutdk

Why NetBox 5 with 2 chain in specification have 540 Mbs speed ?

Regards,

nicutdk

Hi,

I have Metal 52 ac.

What is the maximum wireless sped ?

On my speed test is ~52Mbs. That's correct ?

Best Regards,

nicutdk

Hi,

Does anybody know if mikrotik have an equipment equivalent with UBI-UAP-AC-PRO

Regards,

nicutdk

Hello,

I try to find how can Log/Audit admin command and send to log server but I don't see something else.
I found just /system/history but the information is not enough.

Does somebody know how can log everything user/admin command on router ?

Best Regards,

nicutdk

I understand that, but I have a mail server on forward connection.

So it is correct that rules ?

Regards,

nicutdk

Hello,

I want to want to help me to understand this firewall rule. I see on router example for spammers.

Screenshot from 2017-06-19 13-53-16.png

Somebody can explain more detailed that ?

Regards,

nicutdk

Asking as moderator:
Could you be so kind and DO NOT cite full post if you answer it. If you need to pertain to particular words then just cite them. Not all.

Sorry for that...I understand

nicutdk

Hello, I want to buy more pieces of CRS125-24G-1S-2HnD-IN but I see they NOT have rack mount kit. Does anybody know if exist and what is the part number for buy ? Regards, why this? it is not for rack, use CRS125-24G-1S-RM https://mikrotik.com/product/CRS125-24G-1S-RM it is the same (but only witho...

nicutdk

Hello,

I want to buy more pieces of CRS125-24G-1S-2HnD-IN but I see they NOT have rack mount kit.

Does anybody know if exist and what is the part number for buy ?

Regards,

nicutdk

Don't forget , the proxy on mikrotik it is not compiled to use multi core....
So if you use proxy the performance is very poor.

Regards

nicutdk

Hi, I tried some way to monitor traffic per IP and generate graph. I try with script but scripting for me..... :? I make a firewall rule add action=add-src-to-address-list address-list=LanIP address-list-timeout=3d \ chain=forward connection-state=established,related in-interface=\ bridge2-LAN After...

nicutdk

What exactly do you want to achieve?

I want to make ssh tunnel with mikrotik ssh client

nicutdk

Hi,

I want to upgrade my router from rb2011 to ccr1009.

It is possible to save my graph and import to new CCR1009 ? I have graph for two years and I want to import in ccr1009.

Best Regards.

nicutdk

Hi,

It is possible to connect mikrotik router at a host with ssh port forwarding ?

I see the mikrotik have SSH server with port forwarding but I want to connect mikrotik as a client .

Regards,

nicutdk

Hi, I read mikrotik documentation and on Mikrotik wiki for netwach script and I don't find script for monitoring ISP. In mikrotik exists Netwach but I don't set up the number of ping. It is just ONE ping and timeout settings. I want to send 1 SMS if ISP is down and 1 SMS is ISP is up. Can anybody kn...

nicutdk

I have static dns address and I want to add at the comment the address for that ip.

Regards

nicutdk

Hi, I try to add queues from address list and add to comment host name from dns. To add queues from address list works fine. Problem is to add HostName from DNS. :local hostip :local list :local testvalue :local hostdns :log info "******************** starting - address list queue create ******...

nicutdk

Even using OS 64-bit, winbox runs like a charm in Wine 64-bit. charm ??? Try to use a second monitor and you will see on that monitor not working keyboard. charm ??? Long line in terminal and go to left with cursor and you will see the "charm" I use WinBox in linux about 4 year and in 4 y...

nicutdk

Even using OS 64-bit, winbox runs like a charm in Wine 64-bit. charm ??? Try to use a second monitor and you will see on that monitor not working keyboard. charm ??? Long line in terminal and go to left with cursor and you will see the "charm" I use WinBox in linux about 4 year and in 4 y...

nicutdk

Hi,

Please make a Winbox version for linux.

I know it works with wine because I use it.

Problem is with graphics. When Use terminal from winbox it is so hard to use cursor because character not coresponding.

Regards,

nicutdk

I am running chr instances in vmware workstation easily maxing the gigabit port on the server. When I am ready to run esxi I will move them there too... Course ....with with vmware WORKSTATION should be work because the driver is from host os. ESX use vkernel and it is totally different driver... P...

nicutdk

How does it matter how many people running chr on esxi are you able to see?

Hi,

Please try and you will see.
Maybe I don't know but the response from support must to clarify that.

P.S. Maybe work on old server with esx installed.

Best Regards,

nicutdk

Hi, I have a strange problem. I Have a router CCR1016 and use queue. If I use port forwarding to connect with teamviewer every 55 second connection freeze. I look at traffic graph and seem to have timeout at every 55 second. Does anyone know about that problem ? Regards Screenshot from 2017-05-08 14...

nicutdk

... While others are able to run CHR with 10G and provide it publicly for your testing.... https://forum.mikrotik.com/viewtopic.php?f=2&t=104266 course ...but how many people install on ESX ? I see 2-3 people and speed .... This is from Mikrotik support team > > > > In that case unfortunately t...

nicutdk

Hi,

I bough license p1 and have same problem.
Mikrotik support tell me that problem will resolve in V7.

One month spent time to try esx 5.5 sp3 without success. No more than 600mb speed.
Kernel driver from mikrotik not good enogh for gigabit....so....10gbit....

Good luck to you

nicutdk

Too few info. Outbound traffic works normally? Check the routes... My outgoing traffic work fine. My config is: WAN1 and WAN2 have same network and same gateway outgoing traffic work fine and PORT FORWARDING work fine WAN1 86.5.5.2 gw 86.5.5.1 WAN2 86.5.5.3 gw 86.5.5.1 In this scenario port forward...

nicutdk

You need filter rules to secure your router and network.

Hi,

My question was for my port forwarding problem.
Course we need a firewall but I want to resolve port forwarding on Bond interface.

soo... Please can help me with that problem ?

nicutdk

Hi

I think the problem is capsman. Maybe have bug with 2.4 auto.
Same problem with ccr 1016 and ccr 1036 with capsman with auto freq.

If you define manual freq and chose in provision that freq works fine.

Regards

nicutdk

If you set port forwarding rule in nat, you need to allow that traffic in filter if you use general drop rule. Hard to guess what is set in your router... In firewall I don't have any rules in filter. Now I test and I have just 2 rules in NAT. One rule for masquerade and one rule for port forwardin...

nicutdk

I try but just in 5G on auto band.

If i put manual freq work. With auto freq in 2.4 NOT working.

Regards,

nicutdk

Check the firewall filter rule allowing natted traffic.

What kind of rules ? I have One interface Bond1 and one ether3 on LAN like this:

Bond1 85.186.5.3/24
Gateway 85.186.5.1

Ether1 192.168.0.1/24

Regards

nicutdk

Hi There hoping I correctly understood your needings ... one way is to define from CAPsMAN->Configurations tab a new configuration where you specify the band you want. Then you apply to your controlledAp that configuration , clicking again from CAPsMAN choose the wanted Interface double click on it...

nicutdk

Hi, I have a strange problem. I have a CCR 1016 router. I have 1 provider but with 2 physical fiber connection. On ether1 I have 1 link and in ether2 second link. Both link is connected on internet provider in same switch to the provider. I create one Bond interface with ether1 and ether2. The inter...

nicutdk

Hi, I have wAp ac with 2.4 and 5G configured with capsman with auto freq. I put a new Groove 52 ac. This device have 1 wifi with 2.4 or 5G. My capsman put AUTO in 5Ghz on Groove 52 ac and I want to 2.4 AUTO as first configuration. How can configure that device with AUTO freq in 2.4 Ghz ? Best Regards,

nicutdk

Hi.

ip firewall filter add chain=forward dst-address-list=facebook action=drop

here you have IP of Facebook ASN

http://bgp.he.net/AS32934#_prefixes

Regards

This is IP block not AS block.

If fb add a new IPs class must to verify manually that.

Regards,

nicutdk

Hello,

I have seen for some time on this forum RouterOS v6 RC and v7 BETA but I've never seen on the site version7.

Why exist the post with that version ?

Regards,

nicutdk

Nobody know ?

nicutdk

If you are working with BGP you can make routing-filters to block this AS.

With hotspot is easier to make an address-list in firewall filter with Facebook AS IP address.

Hello,

Please can you explain how can block Facebook AS IP address ?

Regards

nicutdk

You will also need to enable all wireless chains, set correct wireless protocol and many other settings. NO config means all settings are set to lowest. You can use this command to view what the default config contains: /system default-configuration print For example: [admin@Jebal] > system default...

nicutdk

Hello, I have a HAP AC mikrotik. I make same test and I see that. so... My version is 6.38.3. First test: I reset to default with NO default configuration. I configure wireless and I see the signal is pretty low. Second test: I reset to default with WITH default configuration. I see the wireless sig...

nicutdk

Hello,

I have a ccr router. I want to know if in Transparent proxy" use all cores ?

Regards,

nicutdk

Hello

missing user manager.

nicutdk

great...

....but where is the User Manager package ???

nicutdk

Hello,

How can I use Dude for netflow traffic ?

Best Regards,

nicutdk

Zabbix and ntop work's perfectly for me. Explain better how you are using these tools? Hello, I want to store user log like: user(not IP) traffic per day/month user log traffic (not url just destination IPs) I try ntop but that don't have retention and i try zabbix but I read zabbix don't have netf...

nicutdk

Hello,

I searched on forum, on internet how to log users traffic remotely. In radius server if I deleted an user I will not show traffic history.

I try with nagios core free, with zabbiz, ntop but not working.

Does anyone know a free solution for that ?

Regards,

nicutdk

Hello,

I want to suggest to add a simple led light at wap ac to see if power on.

If you work alone it is so hard to verify if wap ac is powered on.

Regards,

nicutdk

when enable PPPoE and when will make a speedtest the router crash/rebooting That should not be happening. It's either a faulty hardware, or a software bug. Please report it to support@. As to the performance, your test results somewhat surprised me. I was under the impression that since FastPath su...

nicutdk

Not working with full gigabit.

nicutdk

I have 6.38.3 version Unfortunately I try to do a test but with the current configuration router crash (when enable PPPoE and when will make a speedtest the router crash/rebooting) This is almost default configuration # feb/25/2017 09:51:00 by RouterOS 6.38.3 # software id = VLA8-ER5A # /interface b...

nicutdk

FastTrack is NOT enough. What do you mean? Simple test: Mikrotik router with Static IP on WAN the CPU is ~45-55 at 500mb speed test (in lan just 1 NAT client) Mikrotik router with PPPoE on WAN the CPU is ~75% at 500mb speed test (in lan just 1 NAT client) Bouth with FastTrack With Gigabit test 100%...

nicutdk

In my country we have 3 big provider and one of this (more than 45%) have PPPoE auth and your HAP AC with PPPoE and without FastTrack the processor is 100% at the ~300MB at speedtest. What's wrong with FastTrack when it comes to a home router use? What those other routers you've mentioned can do th...

nicutdk

Hello, Also I have a misunderstanding. Why mikrotik don't produce router like other vendor for home with REAL gigabit support...They have just one with wireless it is Hap ac but not working with 1GB speed In my country internet speed it is very high an cheap (for example with 10 euro/month we have 1...

nicutdk

Hello,

It is possible to add in wallet garden AS Number ?

It is easy to add for example AS32934 for all facebook IPs.

Best Regards,

nicutdk

Hello, More than a month I see you have a little problem with your site. So... On page https://mikrotik.com/support you have a link to forum https://forum.mikrotik.com/ Your https link not working. For me it is not problem but for mikrotik imagine maybe it is....more than one month you have that lit...

nicutdk

Did you buy a license for your CHR? Did you contact support via e-mail? Remember this is a user forum, not an access to MikroTik support. However, I can tell you: there IS a way for end-users without expensive support contracts to actually get support. This is not true for Cisco, I know from a lot ...

nicutdk

Hello Mikrotik, Unfortunately if you have problems you will stay with them. Mikrotik will not give support for everything you need, like Cisco does. With Mikrotik, you are on your own. Ofcourse cisco price is bigger but the forum is free. P.S. Nowhere in the documentation for CHR it is not specified...

nicutdk

Hello, I tried to install and tried to resize hdd with "Hosted Cloud Router" After 3 days after dozens of attempts I failed to install as described in the documentation or the forum. I try to describe what have I done. I use Vmware ESX 5.5 sp3 and Vmware workstation 12 on windows. 1. I dow...

nicutdk

Hi, I read on the forum and i try some way but without succes to add profile to a user 1. <?php use PEAR2\Net\RouterOS; require_once('lib/PEAR2_Net_RouterOS-1.0.0b5.phar'); $util = new RouterOS\Util($client = new RouterOS\Client('192.168.1.150', 'admin', 'admin')); $client->sendSync( new RouterOS\Re...

nicutdk

Hi, I make a simple app with a function to make very easy to create any page with API. If You want to make a new page you need just tu put in array what you need. For example: $dhcpMain=getRouterData('/ip/dhcp-server/lease/getall'); //it is from API function $dhcpOutInfo= [ "address"=> [ '...

nicutdk

the built in proxy will never support the speed you want. The box was not designed to work only as a proxy. If Proxy is what you want, build a Linux box and use Nginx. The box have proxy server in settings and sufficient ressources. The proxy is compiled to use JUST 1 core. I think that is the prob...

nicutdk

Hi, I have a CCR1016 and configuration is very simple: 1GB-Internet->CCR1016withProxy->LAN so.... I use that router JUST with proxy WITHOUT NAT/MASQUARADE The speed JUST with proxy is maximum 150-180 mb/s A I see what is the problem but I can't resove myself. THE PROBLEM IS: WEBPROXY WHO USE JUST 1 ...

nicutdk

Hi, I have a problem with EoIP and firewall I make a EoIP over SSTP and works fine. I want to block access to same server and I need to use firewall. First I put in bridge to use firewall. After that EoIP not working. Any Ideea ? This is a very simple config # nov/02/2016 16:28:28 by RouterOS 6.37.1...

Search found 99 matches