MikroTik

sergeda

Any suggestions apart from backup/netinstall/restore?

EDIT:Does this mean all Mikrotik routers that log to something disk will eventually become unusable and have to be netinstalled?

I'm also ran in this problem.
May be something changed and we can delete log files now?

sergeda

you can look here:
http://wiki.mikrotik.com/wiki/Scripting

and look some scripting examples on the wiki or forums for RouterOS 4.x

That red means syntax error, some extra space or something.

Thank you.
But where can I find info about diffrences in script language between 3.30 and 4.17?

sergeda

open in winbox new terminal, or simple login through ssh or telnet, open your script in there, like, /system script edit myscript source and using F5 key refresh the highlighting. Where highlighting stops most probably you have an error, since scripting was updated from 3.x to 4.x Thank you but thi...

sergeda

Hi all. We use this script to connect remote offices to main office even if main link in main office down. This script working fine on 3.30 but on 4.17 it fails and highlighting equals sign in red. I can't find what wrong. Can somebodey help me with this? :if ([/ping [/interface l2tp-client get offi...

sergeda

Thank you a lot.
I had a filling that I missed something

Everything works now.

sergeda

its exactly the way you just said. after mangle all known traffic create a mangle without any options and just with a packet mark (packetmark=other) add chain=prerouting (or forwarding chain) action=mark-packet new-packet-mark=other_in passthrough=no comment="unmarked traffic" disabled=no...

sergeda

you cannot limit encrypted connections. but you may try to drop them. or you may limit all except known (http, ftp, etc) Can somebody tell me how to do this in simple way? I've already marked known traffic, but I can't find simple way to mark all other traffic. To add rule to mark all without mark....

sergeda

disable/enable connection tracking

Wow, what a simple solution!
Thank you a lot.

sergeda

Well.
I can't remove connection even if it is closed.
But I need to remove established connection to apply rule wich disables p2p.
I schedule disabling of p2p in firewall rule but established connections still dowloading.
How can help

/ ip fire conn track

in this situation?

sergeda

No one know?
The same thing on ROS 3.17.
I can't remove connection, the same error.

sergeda

Thank you Normis.
Now I'm happe customer

sergeda

Hi all. I am wondering to wich version RB433AH upgradable? According to this http://routerboard.com/comparison.html#powerSeries RB433AH have license level 5. The same thing I see in my routerboard: system license print: upgradable-to: v4.x nlevel: 5 Also it tells that it upgradable to v4, but when I...

sergeda

FULL ACK
It would be great.

sergeda

After upgrading to 3.15 the problem has gone.
Also CPU load has droped.
Good work guys!

sergeda

Thank you fosben for your help. It was that.
But how can I place my rule on top of rules?
I've tried using:
/ip proxy access print
/ip proxy access add dst-host=*yahoo.com path=* action=allow place-before=0
No luck.

sergeda

Thank you janisk for your reply. I don't have any limitation on input queue when packet come from internal interface. What details about configuration should I post? Config simple: Mikrotik with two external interface, one interface works like backup interface. One internal interface. No hotspot, on...

sergeda

Hi all. I'm wondering is it normal to lost packets on internal interface of Mikrotik? I've run MTR from inside lan pinging internal interface of my Mikrotik and have got this result: |------------------------------------------------------------------------------------------| | MTR statistics | | Hos...

sergeda

Hi all. I'm trying to use auto.rsc to mass update config on Mikrotiks. I've upload this script: /ip proxy access add dst-host=*yahoo.com path=* action=allow place-before=0 after this on router appeared file autoexecute.auto.log with this content: Opening script file autoexecute.auto.rsc Script file ...

sergeda

I've found that removing connection failed not only from script. It also failed from winbox with error
ROS 3.14
Is this a bug?

sergeda

Hi all.
I need some way to count traffic on external interface and if amount of traffic for mounth bigger some value - send email alert.
What the best way to get the result? Is it possible? Is it possible without external server only using Mikrotik?

sergeda

I have the same problem. How to reset all connection in script. It seems must be simple task but I can't. I tried / ip firewall connection {:foreach r in=[find tcp-state=established] do={remove $r}} It simple does nothing. No errors, but no effect. I tried / ip firewall connection {:put [find tcp-st...

sergeda

I think it's clear that we need to be able process big files and Mikrotik please add this as future request. Until that working with file is imposible, what if today file small and processed but tommorow it will be a little bigger and everything will be broken?

sergeda

Thank you SurferTim for your help.
It was the size of file, when I edited it to 2049 bytes the script correctly processed it and added to address list. But how this limit can be overcomed? I need this big list of networks.

sergeda

Hi to all. Can somebody help me with this script? I'm trying to modify it to process file from http://www.colocall.net/uaix/prefixes.txt For fetch script I use "/tool fetch address=www.colocall.net src-path=/uaix/prefixes.txt host=www.colocall.net mode=http" and it works and creates file p...

sergeda

Thank you mrz
But what I actually want to achieve is to make something like:
:if ( condition = true ) do={
< command wich brakes execution of script >
}

I just don't want to use multiple nested if but if it is the only way, I'll try.

sergeda

Hi all.
I'm trying to make simple check at start of my script and if check fail just interrupt script execution. I can't find a command to do this in manual. Exit, quit or something else? Can somebody help me with this?

sergeda

Thank you JJCinAZ. If I can't figure what happend with duplicate name of interface I'll go the way you suggest.

sergeda

Hi all. I've got a problem on some my RB150 with ROS 3.9. On some of them doesn't work Changeip script from Wiki. I've found that it is because default getway on this RB duplicate name of interface (see pictures) notwork2.jpg notwork.jpg [admin@mikrotik1] > ip route print Flags: X - disabled, A - ac...

sergeda

system script add source=":global variable \"sdfsdfdgf\"" name=test

Thank you a lot

sergeda

I'm trying to add simple script to system through terminal and it marks every quotation marks in source in red and doesn't allow me to add script. Example: system script add source=":global variable "sdfsdfdgf"" name=test It marks quotation marks before value of variable. What is...

sergeda

Thank you normis. It's good news.

sergeda

Hi all.
I have number of RB150 on remote places where power is switching off nightly.
I'm wondering is it safe to switch off power on RB150.
It doesn't have proxy cashe on disk.

sergeda

Yes, thank you. I've upgradet to 3.9 and now it working fine.

sergeda

Thank you. Looking forward for new version.

sergeda

add source=":local i 0; {:do {:set i (\$i + 1)} while i<5) && ([/ping 192.168.61.2 interval=3 count=1]=1)}"

Thank you a lot.

sergeda

It's really easy.. Lets say you have a RB153 and you want to make ports 3,4, and 5 into a switch. Open interfaces, double click on ether4 and set the master port to ether3 and click OK, then double click on ether5 and set the master port to ether3 also. That will switch together ports 3,4 and 5. Ju...

sergeda

Hi all. I have a problem with my rb150. It doesn't have battery and lose time on reboot, so I should use ntp client. I've setup the client and recieving updates but my clock is one hour behind. I've set DST +1 hour but it only applyied when I hit Apply button on Winbox interface. Then clock shows co...

sergeda

The same happen to me in 3.7
I've got error when I try to run this script from console and it doesn't work with scheduler. But when I run it with winbox I 've recieved email backup despite that run counter says 0.
I can't find working script for backup for 3.7

sergeda

Hi to all. I'm trying to use part of code from example "Improved Netwatch" from Wiki in my script. The script I'm trying to add is: system script add name="test2" source=":local i 0; {:do {:set i ($i + 1)} while i<5) && ([/ping 192.168.61.2 interval=3 count=1]=1)}&qu...

sergeda

Sorry to all.
I was wrong about bug in Mikrotik.
I use snifer today and found that it was some configuration problem on the provider side.
I set another provider dns server and everything works like a charm.

sergeda

Which version of RouterOS? 2.9.51 Greetings! Before we use "bug", let's use "setup". In your /ip dns settings, do you: have the correct primary and secondary dns servers? have allow-remote-requests=yes ? I've set it all allready. My investigation show that not only Mikrotik dns ...

sergeda

Hi all. I have a problem with DNS server built in Mikrotik. A lot of page doesn't load because can't resolve. I just google and trying to open link one by one. Half of links doesn't open. But if I change ip address of dns server on client to my provider's dns everything opens. I've tryied to disable...

sergeda

youre already entering the routes in the ppp secret, why not enter the remote ip address as well ? not sure if in 3.x you can use an interface name instead of a next hop ip in that routes field, but either way, your already manually entering the routes on the secret, so just enter their Ip as well....

sergeda

I don't know if I understood you well, but if you want your ppp routers to have a static IP from the IP pool, just at the ppp secret as remote address assign an IP form the pool, and this router will connect using the same IP always. Faton No, I don't want to assign ip address for every ppp secret ...

sergeda

Hi all. I'd like to configure ppp profile with ip pool and use it to connect remote routers. But problem is I should add route to remote network in ppp secret and if I use ip pool I can't do this because remote-address assigns dynamically. Is there some way to ovecome this? Maybe some keyword to put...

sergeda

wcn

Thank you a lot

sergeda

Hi all.
When you install hotspot you can see in winbox bandwidth allocation by every host on network in realtime.
I want to be able to see this without using hotspot. What the right and simplest way to do this?

sergeda

What's new in 3.6:
*) added support for ZTE AC8700 USB modem;

Thanks guys

sergeda

I'm intrested in support of 3G usb modem ZTE AC8700 http://zteit.com/ennewzte/product/produ ... 4981840005

I have sent supout.rif file to support but no answer until now.

Regards.
Sergey

sergeda

Hi. I have a 2 wan links. One I use for failover. I need to setup VPN server to connect remote offices. But when main link goes down VPN connection can't be established because they made by ip. Is it possible to configure vpn connections on remote sides to use dns name? Now when I enter domain name ...

sergeda

It is also possible to use bridge chip functionality on RB150, RB192, RB153 and use several ports as one - this way traffic is not going trough the CPU - so even on RB100 you can get 100Mbps full duplex without any problems.

Wow.
Can you give more detailes? How could I get this result?

sergeda

Thank you a lot.

sergeda

Hi all.
Is it possible to configure routerboard with 5 ethernet port to be a switch and router all in one? Say 4 ports configure as switch and one as Wan link? It will be good small router for home or small buisness.

sergeda

jwcn

wired

sergeda

If they are isolated in VLANs, no, it will affect the one VLAN and nothing else - that's the whole idea of VLANs...

Thanks for your help.

sergeda

Hi all. I need to setup Mikrotik to give internet to wired clients. As I assume from infos from forum to isolate clients I need to setup vlan for each client. That's no problem. But I want to know what will happen if some client setup ip address of the router in his notebook? Will it brake internet ...

sergeda

Hi all. I am trying to achieve exactly what you are discussing here. Isolate clients in wire network. As I undestand I need to setup different vlan for each port wich will be used by client and setup Mikrotik brige in front of them. Can somebody tell a bit more about this solution? I wan't to use ho...

sergeda

I have only one queue.

sergeda

Hi everyone. I am trying to use queue tree to equally share bandwigh between users on hotspot. My setup is: [admin@MikroTik] > ip firewall mangle print 0 chain=forward src-address=10.1.1.0/24 action=mark-connection new-connection-mark=all-user-con passthrough=yes 1 chain=forward connection-mark=all-...

sergeda

Just try it yourself.
It doesn't need any additional settings on Wireshark.
You will see packets not destined to your workstation.

sergeda

Newermind. I've found what I need to be able to use transparent proxy and bandwidth sharing together. Just added 2 rules to mange to mark traffic going through proxy: 3 chain=input dst-address=10.1.1.2 protocol=tcp dst-port=8080 action=mark-connection new-connection-mark=all-user-con passthrough=yes...

sergeda

The problem was connection not being marking because I've redirected 80 port to proxy on Mikrotik. After I've disabled this redirection all connections going to right queue. Now the question how to make it work with redirection to proxy.

sergeda

Hi everyone. I am trying to setup sharing bandwidth example from the manual in my network. Everything looks ok, but when I look at queue tree in Winbox I see that my Upload queue allways have rate bigger than Download queue. It's impossible. Even when I initiate download, grows my Upload queue. That...

sergeda

Well, thank you for advice. I have disabled that rule but still can use my DNS server from external world.
I've lost.

sergeda

Thank you sergejs
It works.

sergeda

3 ;;; Allow UDP DNS chain=input in-interface=External protocol=udp src-port=53 action=accept you are accepting connections destinated to router from outside Well, in this rule I've allowed connections with src-port 53, not destination port 53. I think this rule only for udp reply from external DNS ...

sergeda

Hi. I have this set of filters in firewall: [admin@MikroTik] > ip firewall filter print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Drop Invalid connections chain=input in-interface=External connection-state=invalid action=drop 1 ;;; Allow inbound SSH chain=input in-interface=External protoc...

sergeda

Hi all. I'm trying to configure Netwatch to ping servers behind hotspot interface. Servers added to IP wallen garden and can freely ping outside world. But ping servers from Mikrotik failing until I initiate ping from server to Mikrotik. Then Netwatch sees that server's up and I can ping servers fro...

sergeda

Thank you a lot.
It works.

sergeda

Hi all. I'm trying to use packet sniffer and forward sniffed traffic to streaming-server as described in http://www.mikrotik.com/testdocs/ros/2.9/tools/sniffer.php but in document no word about setup of streaming-server. I've been tried to install Ethereal and Packetyzer witch mentioned in help on W...

sergeda

I have found problem finally. The problem was in firewall rules: 5 ;;; Emule chain=input in-interface=External protocol=tcp dst-port=4662 action=accept 6 chain=input in-interface=External protocol=udp dst-port=4662 action=accept 7 ;;; MSTSC chain=input in-interface=External protocol=tcp dst-port=777...

sergeda

I did the same but no luck again.

sergeda

Thank you balimore for reply. I've changed my rule chain=dstnat in-interface=External protocol=tcp dst-port=7777 action=dst-nat to-addresses=10.1.1.17 to-ports=3389 as you suggest and now it looks like: chain=dstnat dst-address=xxx.25.199.xxx protocol=tcp dst-port=7777 action=dst-nat to-addresses=10...

sergeda

Hi. I'm trying to setup dst-nat on hotspot interface to be able connect to local computer with RDP and using Emule. I've added local ip to wich dst-nat-ing to ip wallen-garden in hotspot. And added this rules: [admin@MikroTik] > ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 ;...

sergeda

Thank you for reply.
But it not acceptable for me. This server is terminal server and I want only RDP traffic to be bypassed. But user should be authenticated for working in internet. Is it possible?

sergeda

Hi. Can somebody help me with this problem? I have setup Hotspot on gateway and it works. But now I need to forward some ports to internal server. I have a little knolege how work firewall chains and can't undestand rules wich was created by Hotspot. I have tried to add rules for dst-nat and on othe...

sergeda

Thanks for reply janisk.
Can you tell a bit more about this option? Do you meen I should pay for IDE option to Vmware? Or I have this by default in ESX 3?

sergeda

Hi.
Jörgen,
what version of ESX you are running?
I've been trying to edit config in ESX 3.01 and it was unsuccessfull. It said wrong config when I've tried to add VM.

Search found 78 matches