MikroTik

kchris

If gateway goes down and you have "check-gateway" in the routes - those routes will become inactive and packets will be routed by other available route. thx. Do You have any idea what performance can I achive with this config? I'd need more than 1-3Gbit/s.. I think with this I can impleme...

kchris

I'd need to achive a throughput over 1-3 Gbit/s...

kchris

Nop, example is correct. No matter how many connections from address A to address B will be always marked the same aand sent via same gateway. what if that gateway goes down? how can I implement high availability? "add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping add ...

kchris

hi,

is SLB (Server Load Balancing) available in Mikrotik? Or Do I have to
create the necessary mangles by hand? (using random and masquerading to
create persistent links between the clients and the server in the farm)
What performance can it have?

thanx!

kchris

hi! I will be a little long, sorry but please take your time to read it, I think it will worth it... A few days ago we realised that packet numbers are rising, we torched to find out: it's UDP traffic generated by 2-3 customer (until now). The new alpha version uTorrent is generating UDP traffic, BU...

kchris

I've a general question: my situation is the following: I've one main queue and it has a few sub-queues - the packets are divided based on traffic type. I'd like to maximize the rate based on the client IP addresses (I don't want that one client uses all of the bandwith of the wifi sector) - so that...

kchris

hi, I've the following situation: I have a few hundred PCs in my intranet. Because the web servers are limiting the active TCP connections, the popular web sites are blocking some of the clients.. I've ordered a few dozen public IPs for the firewall. How can I distribute evenly the public IPs among ...

kchris

NAT usually don't create this issue, as it tracks all the connections. You would have to have connection tracking on to even use nat. If this is the case, you normally would just NAT out via the first IP address entered on that interface. if you send some configs on your nat rules, we can look at t...

kchris

Hi, I have a few hundred PCs behind 4 public IP addresses. That's a problem because these PCs are using the web, and requesting pages from the same remote servers and these servers have limitation (reqest/sec from the same IP address I think), they are delaying to serve the reqests (banner servers f...

kchris

hi,

I'm an ISP and want my users to fill out a web-form and then make them able to continoue web-browsing. how is it possible?

previously i made address list and dst-natted all web requests to this form, but this solution is quite unstable.. Is there a better way to do this?

kchris

in the wireless client registration table we had in 2.9 the datarate column, separated with /. For example 12Mbit/36Mbit. Now in 3.0rc5 in some cases SP appears in this column just like this: 12Mbit-SP/36MBit. What doeas this SP mean? This appeears mostly just after the client has connected and then...

kchris

update: this problem appears on other devices too: OsBridge, and not only on our RB333 but on two RB532s too... (we could downgrade the latter) we saw that clients stucked in the scanning phase appeared in the winbox wireless registration table with "SP" data rate.. (example 11Mbit-SP/36Mb...

kchris

hi, we have a customer client device called 'wa2204a' (from Prague). In our case it cannot connect 3.0rc5, only if the AP (RB333) interface is restarted. If the client suffers a reboot or power loss, it stucks in state 'scanning'. If we restart the AP interface it connects in 5 secs. Is this a bug? ...

kchris

after a simple reboot there is 12-15MB RAM free.. is a memory leak in it?

kchris

it's working - there is 2.8Megs of RAM free... Why is it downloadable for RBs with 32MB RAM if its not enough for it???

kchris

hi, we've installed v3.0rc5 on one of our rb532s (32MB RAM!). the traffic is better (packet loss,etc) but after two hours of operating, we couldn't login, we got only ping.. after several hours we saw the memory usage and it was on 100%. Has v3.0 mikrotikos memory requirement increased? and if this ...

kchris

can anybody give some advice for the following problem: we priorize traffic based on traffic type (web,p2p,etc..) but this is not enough. if somebody starts several dozens of connections then he/she gets more BW than he/she should... in my opinion this is not fair.. if i set the queue type (or inter...

kchris

hi all can we shape when we downloading .avi? i want fast browsing, but shaping bandwitdh when we download .avi .mpg .mp3. Is it possible? thanx we've managed this problem via marking the connection - only connection bytes from 10MB for examlpe so when the user opens a connection the first 10MB of ...

kchris

Which VPN you used in your lan?

the compress option in the VPN server setup of MT

I see 2 compress option in the MT setup: 'compression' and 'VJ compression'. I've tried with both on, only one of them on.. no good results...

kchris

Im a bit rusty here but XP has requiremenst that needs to be met before compression will take place... From what I remember, you must use MSCHAP2 for Authentication, and you must use 128bit Encryption. Should those be met, compression will follow suit... These requirements are met. The client is us...

kchris

is it possible? It's enabled on both sides, however, windows shows that compression is turned off... are they using different protocols so they can not agree with one common compression method?

kchris

hi,

is it possible to display all wireless clients of all mikrotik devices 'installed' in dude? I rememember I could do that in beta2 but I don't find that in beta5.. this could be a great function, I't wouldn't need to browse through all mikrotik devices to find clients with bad SNR, etc...

kchris

In my experience V1.2 is quite unstable. V2, I imagine, would be very unstable.

thanks for the reply.. It would be no problem if XML reload would be possible because there is a lot of VERY important new features in V2

.

kchris

hi! i've spent my whole afternoon to play with 2.0b2 :(. I've drawed 3 times my network.. first time i've drawed it. then dudes.exe crashed all the times.. no export was possible.. then I've drawed it again - during the drawing I've exported it TEN TIMES in xml. then the crashing came again.. BUT: a...

kchris

we did some tests a few days ago: the selected routerOS uses the ip address of 10.3.0.0/16. Unfortunately we use open network, so anyone can connect to the AP (of course net is not accessible with these IP zone). The test was the following. Two laptops equipped with WiFi card - we set 192.168.0.1 an...

kchris

We are seeing the same thing and it's not traffic going from one customer to another. We are running MRTG on the public interface and it's showing full traffic. Running torch on either the public OR private interface doesn't show the same level of traffic. Mikrotik interface graphs also show the tr...

kchris

hi! I've a sector with much clients. the average uploading traffic is 2-300kbit/s. Sometimes it raises up to 5-6-700kbit/s - bringing the sector to an unstable state - PacketLoss/ping times are high, the net is unusable for the users. The interesting is that this traffic is visible at the interface ...

kchris

How can I enable the UPNP in the network?? UPNP is properly running on the NATting server (GNU/Debian). I've downloaded several UPNP tester on my windows client. They can't detect my UPNP, either. I think that my network doesn't forward the required multicast packets. Does mikrotik filter multicast ...

kchris

now i've installed Upnp on my linux device, added the requested broadcast route etnry... but my msn still says that I'm connecting through not Upnp-aware NAT server... what shoul I do now?

kchris

What do we have to configure to make UPnP work? We have a Mikrotik for routing, Routing boards for APs. One debian/linux server does the NATting (And has our public IP). We have assigned the lowest priority to ports 2000-2020/etc. How can we force the MSN to avoid using the MSN relay service in USA/...

kchris

It's a CM9...

any idea?

kchris

We have an interface: "[admin@KN3H, KN3A] interface wireless> print Flags: X - disabled, R - running 0 R name="xxx" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled disable-running-check=no interface-type=Atheros AR5213 radio-name="xxxxxxxxxxxxxx" mode=ap-bridge ssid="...

kchris

after replacing the miniPCI and downgrading.. same results..
now clients can connect but the ping times are VERY big

.
openWRT client shows -52/92 signal strength..

kchris

we have one mikrotik: we had bad ping times/PacketLoss... tried to change the channel. After that, no client could connect to it! (despite the signal level was OK) After that we went to the tower to do something with the routerboard.. By the time we arrived in the tower many clients were connected, ...

kchris

I had the same problem! I had a win2k/xp client behind nat and could connect to EXTERNAL VPN server. I had to enable the PPTP/GRE/Protocol47 helpers! To work with VPN, on the server doing the nat the simple NAT is not enough! Nat needs PORTS and ports are on protocol TCP and UDP. VPN uses besides TC...

kchris

I've a better question to this: I'm using PCQ to give my users fair BW. Now I'm using SQUID to make the BW "bursty". Without making a queue to every single user/IP by hand. Am I able to do this also with Mikrotik? I'd like to configure that every users has some burst fast and then slows do...

kchris

/ip firewall service-port helpers are needed for NAT traversal. yes i realised... this GRE protocol doesn't use the 'port', what's needed by NAT so without helper it won't go.. I think that this is the same situation, that behind NAT to be able to use active FTP ftp helper is also needed: ip_conntr...

kchris

mea culpa...

I had to enable the pptp and gre service ports in the ip firewall menu...

But IMHO this name "service port" doesn't mean that if this is disabled then drops the packets....

kchris

tried also to reduce the MTU size, now my computers MTU is 1200 bytes.

kchris

Hi! Previusly we had a simple cheap ADSL Router. Then me moved to Mikrotik. I've created simple src-nat rule to share the connection. Everything is working - only the VPN clients behind the MT give error #619 when trying to connect to VPNs outside the office.. What's wrong? With the simple cheap ADS...

kchris

you can use the firewall mangle rules to fix this: 4 X ;;; change tcp mss for pppoe connections src-address=192.168.43.0/24 protocol=tcp tcp-options=syn-only action=passthrough tcp-mss=1360 as you can see I mangle it to 1360 - it seems to make the trafic floe nicely thank you, saved my life 8) . to...

kchris

hi! I've a strange situation: I've created a simple config: sharing an ADSL connection with MT. ADSL has MTU of 1480. internal network ethernet card 1500. clients: 1500. some of the webpages don't load. If I modify the CLIENT's MTU to 1450 all problems go away. But: there are almost 30 clients - I d...

kchris

hi! Is this possible to limit the tcp connection count (or syn packet count) on a per (source) IP basis without creating rules for each IP address? I think if I create a global limit (per block basis) then one host (with a virus or something that sends many SYN packets) can send most of its packets ...

kchris

I wouldn't care about viruses if i shaped my users BW to 20-30kbit/s outgoing, but for a customer it's unacceptable..
and scripts to detect such behaviour.

could you share these scripts? I'd need only a script to detect high packet count per interface per period of time...

kchris

Not that i know of. Personally i always shape bandwith both ways as most of my customer's customers use P2P software 24/7. ok, that's all right, BUT: if these customers send out SYN/any packets (these packets are small so the number of packets can be high even with low BW), that shaped BW is too hi...

kchris

as long as there is no infected computers on the network I don't want to limit the upload speed of my customers. BUT if there is ANY virus-generated traffic on the network I want to block it's traffic. So I would like to automate this process. What I need is a script that checks the amount of incomi...

kchris

Hi! First, I created PPPoE connection, then after disconnection I tried out the PPtP connection - but it fails. The login procedure (on the client XP) hangs up at "verifying username/password", then after a couple of seconds, an error message is displayed code 619. I can't imagine what co...

kchris

Hi! First, I created PPPoE connection, then after disconnection I tried out the PPtP connection - but it fails. The login procedure (on the client XP) hangs up at "verifying username/password", then after a couple of seconds, an error message is displayed code 619. I can't imagine what cou...

kchris

My question is: which is the best combination for networks in infrastructura? that is to say who are the best aps for approximately 10 clients as maximum for ap, I in the actuality use MIkrotik for big linkage, but for small urban zones: who are the best ap?, I would like to know that it marks and ...

kchris

Hi! My MT has one gateway as 10.0.0.1. I've user 10.1.0.5, in another subnet, MT does the routing (not NAT!). I want to limit the user's traffic speed to 100kbit/100kbit. When I create a simple queue (this could be done in the DHCP server config in winbox) the target address is the user's IP. The pr...

kchris

did 2.8.19 or anything else solve the problem? (we have a similar problem, but changing ack-timeouts didn't help). regards. matthias we changed the ack timeout from dynamic to static and found out that 1-300us is the optimal but despite of that the network doesn't function properly, but the connect...

kchris

I've tried FTP Commander, Total Commander, and WS_FTP Pro.
I set every ftp to use my MikroTik SOCKS proxy. The first two didn't work, only the last worked.

Total commander said unknown error(90). What's this?? Is MT's proxy incompatilbe or full of bugs????

Any other experience?

kchris

Hi! Am I able to configure the MT to make users file transfers within ICQ/phone conversation in MSN possible? Look a simple config. I have a public IP outside the MT's network. My MT has one public IP. I enabled the SOCKS proxy and made access to everywhere from everyone. first When I configured fro...

kchris

We have 2.8.16 with wireless-legacy and AR5213 mini-pci cards with 4-in-1 PCI

kchris

[quote="kchris"]We have a ...[quote]

Additional info: the users with high ack timeout may have also excellent connection - tx/rx speed 24/36 mbit/s!!!!

kchris

We have a problem with ap-bridge: ack-timeout is set to dynamic. We have around 15-30 users/sector. There are specific users - when these users connect the ACK-timeout raises to around 400us - and then the MikroTik sometimes kicks out one previously connected user and doesn't let new user to connect...

kchris

Seems like you need to read this: http://www.mikrotik.com/docs/ros/2.8/root/queue.content#6.54.7.2 I've done. I've configured now the mangles as follows: mangle passthrough: userIP - "net"IP , mark connection mangle accept: connection - mark flow But when I create a queue for this flow it...

kchris

The easiest answer would be to require them to authenticate with a protocol like PPPoE, or PPtP, or use IPSec

We tried it months ago but it hadn't been the right solution because a little packet loss dropped the connection - all of the users tcp connections were reset. I see IPSec...

kchris

I want to mark my users traffic by IP address. my situation is: I have one interface with public IP, I have another interface with internal IP addresses. Between them there's a Mikrotik with NATting enabled. When I set up 2 mangles: source addr: user IP dest addr: "net " and source addr: &...

kchris

Hi! I have a problem. I want to limit my users. I have the following tools: drop all incoming packages with un-used ip address (with forward tables), and fix the ARP list so one user cannot use other user's IP. BUT. I have EthernetConverters (Netgear,Senao) and that equipment REPLACES the source MAC...

kchris

If you check the logs, you may see. If you send a supout file, we can see very low level logs and tell you why. It may be that there is water in the cable and that badly affects the physical (RF) part of the radio -- and it can go on and off. John thank for your reply, my collegaue sent the supout....

kchris

we have almost the same problem!!! ALL of our wireless clients reconnect after a specific time (a few seconds). We are using 2.8.18.

Search found 62 matches