MikroTik

TroyQ

Okay, I got this working with a bit more trial and error. If anyone wants the info let me know. Ta! MIKROTIK MAP LITE In wireless security profile: GENERAL tab WPA EAP / WPA2 EAP unicast/group ciphers aes ccm / tkip RADIUS tab nothing checked EAP tab EAP Methods = passthrough TLS Mdoe: dont verify ...

TroyQ

Hi , I know this is a long time after, but did you get this solved? I now have the exact same problem with a CapLite

Thanks in advance

TroyQ

Thank you! @rextended You are a genius! :D I just needed to turn the students WiFi off at night and leave the Faculty WiFi on. This is what I ended up with using a script in scheduler: This turns it off in the evening /caps-man provisioning set slave-configurations="" [find where comment~&...

TroyQ

Thank you for the quick response.
It did not work either.

1.jpg

As you can see no results...but print shows all the AP's

2.jpg

Hope this helps.
Thanks

TroyQ

Hi Guys I need to use the find where command in a script. I am trying to write a script where I need to turn off a guest wifi in my my CAPS-MAN at certain times. I have over 90 CAPS and I only need to turn off only the ones where the names start with BTH. (examples: BTH indoor, BTH Outdoor, BTH room...

TroyQ

True, i was (still am) also running latest OS. Thats when the problem started.

TroyQ

Thank you bpwl I think you are right, recreating the original bridge did reset something. Just to note, that my filtering was off (set to no) initially when the VLAN on the wifi stopped working. The tagging was set on the v-wlan interface as always. I turned the filtering to yes after a recommendati...

TroyQ

Thank you for all your help, my VLAN filtering was always off so even turning it on did nothing. It turned out something was wrong with my DHCP. Removed and recreated it and problem solved. Nothing was wrong with my initial setup. I had to remove the whole bridge for some reason and create it again ...

TroyQ

You need to specify which tagged VLANs are made available to the various bridge ports, including the bridge itself as a bridge has two roles - a switch-like role for transporting packets between ports, and a port-like role for transporting packets between the bridge and other functions provided by ...

TroyQ

You have set the bridge to be VLAN-aware but not configured any bridge VLANs, so no tagged traffic will pass through the bridge. See https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering I read through that wiki, I'm sorry I still don's know what I am missing. Please be more ...

TroyQ

This the working 6.45.6 config file. Is the 6.47.4 identical ?? Please elaborate on: "vlan stops working". What's happening ? Yes config is identical. Vlan stoped working after update to 6.47.4. Mine also stopped working, it does not work. Does not give out DHCP. Does not travel on my net...

TroyQ

Hi mkx Thank you for the reply. Here is the export. I removed the VLAN from the bridge but still no change. [admin@OHS Core Router] > /export hide-sensitive # oct/19/2020 11:23:03 by RouterOS 6.47.4 # software id = TI6T-J0B7 # # model = CCR1016-12S-1S+ # serial number = 4CB302FDFA9D /interface bridg...

TroyQ

Hi Guys For some reason my VLAN dhcp is not going through to my client WLAN, it used to work but something went wrong and I cannot locate the problem. My apologies for my config that looks a bit messy, but over the last year a lot has changed. Basically my main router has dhcp for my admin network, ...

TroyQ

I have the exact same problem. Do you have a solution yet?

TroyQ

Hi Everyone, I dont know anything about mikrotik scripting so I am turning to you, the experts, to please help. We would like to limit the bandwidth to all android and iphone devices in our company (mostly students). I need to mark or group some sort of address list, based on the device name in the ...

TroyQ

Hi Everyone, I dont know anything about mikrotik scripting so I am turning to you, the experts to please help. We would like to limit the bandwidth to all android and iphone devices in our company (mostly students). I need to mark or group some sort of address list, based on the device name in the D...

TroyQ

I dont think you have to move your dhcp BUT your default gateway has to be your mikrotik's address.
Then just add mangle rules, to mark packet and mark connection of your traffic and the turn on which ever queue speeds you need.
....

TroyQ

That just sucks balls

Then how do I stop employees from playing facebook games all day. The company uses facebook so I cannot block facebook itself.

TroyQ

I tried adding the apps.facebook.com in content and it did not work. Please any ideas?

TroyQ

I dont think its the firewall
I have the exact same problem and on all my PC's the firewall is completely turned off. No Antivirus firewall either. I am struggling for weeks now to get the interfaces to talk. Have done a complete factory reset of the Mikrotik and started over. Still does not work.

TroyQ

This is still not working for me, and i have tried on more than one mikrotik :cry

TroyQ

Has anyone solved this? I am so tired of mikrotik and giving me this problem at alot of my clients...Please help I also need to route between two inerfaces with dhcp and its not working

TroyQ

/ip firewall filter add action=add-src-to-address-list address-list=Src address-list-timeout=1h \ chain=forward connection-bytes=40960000-0 disabled=no protocol=tcp \ src-address=192.168.0.0/24 add action=add-dst-to-address-list address-list=Dst address-list-timeout=1h \ chain=forward connection-byt...

TroyQ

Hi serkand93 Keep your modem in router mode, and just enable DMZ on your modem (should be in security or port settings). This will allow you to use all the functions you need from the mikrotik without using ppoe-out. All requests will then be handled by the mikrotik, the modem just passes everything...

TroyQ

Hi all Is it possible to set the mikrotik to ask for a username and password before it forwards you to the internal desktop machine? The reason I am asking is this PC is windows 10 home edition and it does not have the option for rdp to ask credentials before showing you the actual desktop. (i manua...

TroyQ

Hi,
You can use:
/ip dhcp-server lease print file=lease terse
or
/ip dhcp-server lease print file=lease detail
to get all variables (indlude status and host-name)

THANK YOU

TroyQ

/ip dhcp-server lease export file=lease

but, that won't give you lease status.

Cap.JPG

TroyQ

Hi Everyone. I am trying to export my current dchp leases to a txt file for admin purposes.
I have tried "/ip dhcp-server lease print file=lease" and it works but the host names seem to be cut off, now I cannot create my document.
Please see pic attached. Any ideas?

ohs dhcp.JPG

TroyQ

Hello! Isti: You are all most done!! :) follow this steps. login in to winbox click on ==>System ==>Logging ==>Double Click on Web Proxy rules Click on Topics "down Arrow" click square box put NOT sign ! then select topic debug Click OK You are done. ( check attach Image ) by the way. kar...

TroyQ

Another unsolved problem with mikrotik

I might as well not use them if it cannot solve my problems

TroyQ

From a PC on 192.168.50.0/24 I can ping the interface eth3 which has the address 192.168.50.235. From the same PC I cannot ping the routers main address 10.80.8.8 (sfp1) Also cannot ping anything on 192.168.0.0 range From mikrotik 2 (this secondary one) 10.80.8.8, I can ping Both networks 192.168.50...

TroyQ

First, disable all nat rules and firewall rules. I see that you assigned 192.168.50.0/24 on two separate interfaces that isn't bridged? Is 192.168.0.0/24 behind 10.80.8.1? If so you will need to add a route on 10.80.8.1 pointing back to the 192.168.50 network On 10.80.8.1 route 192.168.50.0/24 is a...

TroyQ

I made some changes but still nothing.... :cry: :cry: :cry: :cry: :cry: # jan/18/2017 11:11:11 by RouterOS 6.38 # software id = ZYPM-RMMD # /interface ethernet set [ find default-name=ether3 ] comment=Klas35 set [ find default-name=ether5 ] comment=Klas26 set [ find default-name=sfp1 ] comment="...

TroyQ

First, disable all nat rules and firewall rules. I see that you assigned 192.168.50.0/24 on two separate interfaces that isn't bridged? Is 192.168.0.0/24 behind 10.80.8.1? If so you will need to add a route on 10.80.8.1 pointing back to the 192.168.50 network On 10.80.8.1 route 192.168.50.0/24 is a...

TroyQ

Do you have a working knowledge of IP networking?

Yes but im still a beginner with mikrotiks, i have done the 1st course. Will do the rest this year. In the mean time I need help connecting these two networks

TroyQ

Hi Every one, I have two mikrotiks with two different networks. 192.168.0.0/24 and 192.168.50.0/24 The mikrotiks can communicate and ping each other fine but the pc's will not see each other at all :-( see my export below. (just to add, please ignore references to internet as this is not supplied by...

TroyQ

Hi Chris, sorry for only getting back to you now. Holiday season and all keeping me busy. The 10.80.8.1 gateway is another mikrotik with its own network. No physical pc's on the network has a 10.80...address. Only the mikrotiks. Also the 10.80.8.1 network will not be accessed from my 192.168.49/50.....

TroyQ

OK, here is my new config: But the only thing that has changed is that I can now ping the mikrotik from both sides to both mikrotik addresses...49.254 and 50.254 from either network. I cannot acces the server from 49.0/24 or ping either networks pc's.... # dec/22/2016 12:44:17 by RouterOS 6.37.3 # s...

TroyQ

Your netmasks in the two networks don't match. Your address on the interface states that it's a /24 network, the DHCP is telling the clients, it's a /22 network. In a /22 both are in the same subnet, so they won't use a gateway. Adjust it in /ip dhcp-server network to be /24 and it should work. An ...

TroyQ

If I understand correctly you do the routing outside of this mikrotik. If so , those routers need to have static routes for 192.168.50.0/24 and 192.168.49.0/24 to this mikrotik. Correct yes, but that is a seperate network on sfp1. What do I need to add to the other mikrotik and where? Also I have n...

TroyQ

Hi Everyone, I hope someone can help me, I have been trying to figure this out for two days. I have dhcp running on two ports for two networks. But they need to be able to see each other for server purposes. They unfortunately have to have seperate ip ranges for security reasons. How can I get inter...

TroyQ

So no-one can see the problem here? I need help please

TroyQ

-192.168.49.0/24 and 192.168.50.0/24 are difference networks. -For any route is needed gateway address, not interface! Again you are not correct Paka. interface as a route works perfectly on my other mikrotiks. Remember this is not for internet access, it is for connection between to ports. This is...

TroyQ

Hi, you have wrong entries in Route List and Firewall. Regards Paka Actually no I have the correct entries in route list. Those are dynamic addresses assigned to port 3 and 5 and the mikrotik creates the routes automatically. They cannot be removed. The firewall list is also correct, even though th...

TroyQ

Please post whole configuration so we can see what could the problem be. Please note my 192.168.0.0//24 network is a separate network, its working fine on its own for now. Internet is supplied from a different mikrotik for the 192.168.0.0 network, and a separate router 192.168.50.2 for interface 3 ...

TroyQ

/interface bridge add comment="Network Bridge Between Admin and Replica Server" mtu=1500 name=Replicator-Admin protocol-mode=none /interface ethernet set [ find default-name=ether2 ] comment="Klas35 - Replica Server" set [ find default-name=ether3 ] comment="Klas35 Network /...

TroyQ

If you use windows machines, you need to alter your widows firewall settings to accept requests from the other network. Or simply add a masquerade entry for each of the ethernet interfaces 3 and 5. The windows machines can ping each other fine when I put the networks in a bridge but it breaks my dh...

TroyQ

make two changes to your rule

/ip firewall filter add chain=forward dst-address=192.168.30.1 action=drop

TroyQ

did you ever get this resolved? i now am stuck with the same problem

TroyQ

Hi There. I need help with the following: Here is my setup... address list.JPG route list.JPG firewall rules.JPG I have DHCP set up on both ports 5 and 3, so I cannot add them to a bridge. I need the pc's to be able to access each other on both networks. What am i missing? I cannot connect from eith...

TroyQ

Why do jump over the Mikrotik by using the 10.0.241.1 gateway for the clients?

that means i have to set the mikrotiks ip address as 10.0.241.1....I think that might just create a loop and break the internet. but i catch your drift and it would have been a great idea

TroyQ

You cannot use a port-3128 proxy as a transparent proxy where you forward all traffic and expect it to be proxied. When you are forced to use this proxy you need to configure it on all your clients. When you cannot do that, this is where the story ends. No internet via this connection. Actually a s...

TroyQ

Try using a NAT - dst-nat - action masquerade that conveys all traffic with destination ports 80,443 to the proxy on 10.5.56.193 on port 3128. For your clients use gateway 192.168.1.254 Thanks msatter, this seems to work in a way, but on my browser I now get the message "invalid url" and ...

TroyQ

The redirect is not enough. You must reconfigure proxy to transparent mode.

As I mentioned busla, the company does not have access to reconfigure the proxy...the company that sponsors it also will not, because they use the exact same setup at all their sites.

TroyQ

I got it partially working with a NAT rule to forward all traffic to the proxy, and on my connections on the mikrotik I saw it was going out...had trouble comming back in tho...also I think I might have forwarded everything including local data to the proxy... Please someone help me. I know this mik...

TroyQ

so no-one knows how to do this?

TroyQ

Hi Everyone I have a working internet connection from my mikrotik and its connected to a switch that uses a proxy. Here is my setup: Mikrotik: 192.168.1.254/24 (gateway on bridge) Mikrotik Dhcp - 192.168.1.100-192.168.1.200 (on bridge to clients) 0.0.0.0/0 - 10.5.56.223/29 (connected on ether 1 and ...

TroyQ

Ok I had another idea and got it working...well half way there. (Hi Chris, yes its a home adsl router so cannot add anything on it) I changed my adsl routers ip address to 192.168.0.254 and added the address of the router to the mikrotik 192.168.0.1. Now both networks can see each other...BUT the in...

TroyQ

I have the same problem, two networks connected to ether 1, and other ports ether 2-24 are bridged for the dhcp. If i add ether 1 to my bridge it brakes my dhcp clients (dhcp on 2nd network has its own dhcp server and no i cannot change either networks ip because they both have servers. I need both ...

TroyQ

I am still struggling with mine, i need both sub nets communicating.

I cannot change the networks because both have servers and software set up for them.

TroyQ

Anyone? Please

TroyQ

There is only one Mikrotik router. I am basically joining the old net work 192.168.0.1 to the new network, 192.168.1.254. Both networks plug into the mikrotik on ether 1. I just want ether 1 not to have DHCP and also to be the gateway to the wan.... How do i get 192.168.1.254 and 192.168.0.1 talking...

TroyQ

Hi Everyone I am new here and still new with mikrotiks so go easy on me please :) So far these things are amazing. Here is my question: I have two networks and for a good reason, so I cannot change either ranges. 192.168.1.0/24 and 192.168.0.0/24. on ports 2 through 24 I have dhcp running 192.168.1....

Search found 63 matches