MikroTik

atuxnull

my main router in the house is a Mikrotik 750G. i would like to use a managed switch to pass some vlans in a different room. i got available a 2nd spare router Mikrotik 750. is there a way to use it as managed switch? so the setup will be: -main router's eth5 trunk port that connect's to 2nd router ...

atuxnull

for troubleshooting reasons, i would like to have the eth5 of my 750G as dhcp client. Then be able from my LAN to access the network on eth5. how could i add eth5 as dhcp client and be able to see whatever network is attached in there, please? current config: # 2023-12-10 08:49:48 by RouterOS 7.13.2...

atuxnull

i got a hap mini lite and i would like to use it as a repeater. Which option from the menu do i have to use to create the repeater, please?
i tried the CPE and it connects to the desired wifi, but it does not create a wifi for me to connect.

hap_mini.png

atuxnull

Hi. Running ROS 7.8 in my SoHo and i have wireguard setup between the router and my smartphone and laptop, by following the guide https://youtu.be/vn9ky7p5ESM , so far so good. In a remote site i have another setup with mikrotik router. I would like to add this remote router to my wireguard vpn, but...

atuxnull

the main wifi is an ISPs router (unbranded).
so you are telling me that i could not use the hap mini as a repeater?

atuxnull

in the basement of my house there is no cabling for ethernet and i would like to connect a few devices. There is sufficient coverage over the 1st floor wifi, but i have to attach some evices over wired.so i bought a hap mini lite in order to configured to get over the wifi to my main 1st floor wifi....

atuxnull

i have a few queues and i would like to create a shortcurt to my desktop PC (Win 10) so i could enable/disable a particular queue, without user interaction.
I have basic programming training, nothing special. So even a bat file would do the trick. Is there a way to do this please?

atuxnull

not really a programmer. i am using win 10 and i would like to have something like a bat script for enable and one for disable of a particular queue.

atuxnull

i have a few queues and i would like to create a shortcurt to my desktop PC (Win 10) so i could enable/disable a particular queue, without user interaction. Is there a way to do this please?

atuxnull

i am facing issues as it does not connect. Here is my setup. site A (server) -pppoe to the ITSP and it has an ip>cloud. i am giving a fake one for security reasons. -It has 2 different VLANs 172.16.5.1/24 and 10.0.0.1/24 on different ports. config: [i]/interface bridge add name=bridge1 add name=brid...

atuxnull

thanks for the reply. i have seen this page, but i got confused from the tons of info. i would like to ask if you are aware of any guide on how to configure it, since the wiki has so many options.

atuxnull

i would like to create an IPsec VPN for my Mikrotik routers but i am stuck since none of the sites have a static IP and one is behind a CGNAT (4G network). the VPN will consist: -one central point which has dynamic dns. Mikrotik router -one remote point which has dynamic dns. Mikrotik router -one re...

atuxnull

I have been given an ovpn key without passwd to connect to a remote site. I used it in a Windows laptop through openvpn gui and i can successfully connect to the remote site. I would like to use that same ovpn key in Mikrotik and have access to the remote site from all of my LAN. Hiw can i achieve t...

atuxnull

not sure how to send these commands to the modem and what to expect. Yes it is a ppp-client.

atuxnull

i have a RB750 (mipsbe) in 6.49.2 and i would like to use netinstall. for some strange reason the routerboard does not go into ether-boot mode and i am unable to use the netinstall tool. i have tried to type the /system routerboard settings set boot-device=try-ethernet-once-then-nand without success...

atuxnull

the traffic is from a user behind the Mikrotik to someone in a different country. No idea how to fix that so snmp could show the correct traffic.

atuxnull

Also i have created the following: Target[Mikrotik750_bridge1-in-out]: .1.3.6.1.2.1.31.1.1.1.6.1&.1.3.6.1.2.1.31.1.1.1.10.1:public@192.168.177.1 LoadMIBs: /usr/share/snmp/mibs/mikrotik.mib MaxBytes[Mikrotik750_bridge1-in-out]: 100000000 Title[Mikrotik750_bridge1-in-out]: Mikrotik bridge1 PageTop...

atuxnull

i got it working for CPU, but for memory, it shows wrong info. Here is what i have to poll Mikrotik via SNMP to get the % of memory used: #Mikrotik memory used LoadMIBs: /usr/share/snmp/mibs/mikrotik.mib Target[Mikrotik_mem]: ( .1.3.6.1.2.1.25.2.3.1.6.65536&.1.3.6.1.2.1.25.2.3.1.6.65536:public@1...

atuxnull

As said iny initial post, i have the OIDs. I need a way to use them. Could someone help me configure the mrtg.cfg for Mikrotik, please?

atuxnull

thanks for the reply. i am aware of the internal feature of mikrotik, but i am already using for my LAN a Linux box to monitor everything. The Linux box is inside my LAN. Everything is monitored within my LAN region. I got the snmp enabled and i am getting from Mikrotik router the CPU % usage. My co...

atuxnull

I got a Linux server in my LAN that runs MRTG and i monitor all Linux boxes for ethernet traffic, cpu, ram. I would like to add my Mikrotik Router in the MRTG and monitor traffic for each port, CPU, RAM. I got confused how to write the mrtt.cfg for each element eg from a Remote Linux machine: Target...

atuxnull

Hi.i have a Mikrotik 750G that has 5 ports.The ports are allocated like: eth1:Internet provider eth2:Subnet 192.168.2.0/24 eth3:Subnet 192.168.3.0/24 eth4:Subnet 192.168.4.0/24 eth5:Subnet 192.168.5.0/24 I would like to have 5 more ethernet ports so i could assign 2 to the new internet providers and...

atuxnull

could you export your firewall rules and post them over here, so we could check what goes on, please?

atuxnull

What issues do you currently experience with the firewall rules?

atuxnull

so have to leave the config of the server as it is and what do i have to do in the client, please?

atuxnull

After setting an openvpn server in my Mikrotik, now all remote users can connect to the Internet through the Mikrotik, based on https://forum.mikrotik.com/viewtopic.php?f=13&t=177639&p=874464#p874464 I would like to create a new installation and have the openvpn server in the mikrotik and se...

atuxnull

I would like to create an EOIP between 2 points.
Site A has dynamic IP through xDSL and it makes use of DDNS
Site B is using 4G to connect and it is behind CGNAT.

Is it possible to create an EOIP between Site A & B, please? I yes, how?

atuxnull

@sindy thanks a lot for the reply, but it is a USB 4G stick, so there is nothing in

/interface LTE

Anyway that i could see the signal of the 4G, please?

atuxnull

Someone that could help me with the LTE signal please? Where could i get the info from?

atuxnull

@JoeAmick. just to make sure i got it right, what you need. I miss a couple of things. you have a router with a LAN eg 192.168.1.0/24 and an internet connection. The LAN is NATed to the Internet interface. What is the one that you are looking? Do you have another LAN(eg 10.10.10.0/24) in a separate ...

atuxnull

@MickeyT

I am stuck at step 7 (Remove Password from Client Key). I should get the MikrotikCA, Client1 and which one is the client key, please? How do i download them? In the files list i see only two files

cert_export_Client1.crt

&

cert_export_Client1.key

.
Which ones do i need?

atuxnull

As already mentioned by fellow co-forum members the hap lite has 100Mbps ports and the wifi is pretty unclear about speed. What i would do in the LAN, forget ISP, is set iperf in a PC_A through wifi with a decent/new wifi card. Then from another PC_B use iperf and do a speedtest over the wifi. Be pr...

atuxnull

ask your provider if they support pppoe-passthrough. If yes, you will not need to configure anything on the provider's router. Then in your RB2011 you create a new pppoe-client and use your provider's credentials. It might sound strange to have pppoe over fiber, but many providers do that in Europe,...

atuxnull

i am running my Mikrotik with altered, but since everyone is having its own rules, i was thinking to create a thread and post good firewall setups and rules to block bogus/malicious IPs.
So everyone could be helped from this and get an idea.

atuxnull

@xperiments2021, we can point you to gazilion tons of guides, papers, tutorials & videos for Mikrotik training, but you will be lost. In my honest opinion, if i were you, i would start with small bits and start building up. Ideally, get your mikrotik in working state for a small network and acce...

atuxnull

In a remote rural place there is not any phone circuits for DSL technology, so i use a USB 4G dongle to have Internet access. Everything is OK, but i would like to know the signal strength and the connection status. Is there any way to see this information in Mikrotik, please? So i would know in whi...

atuxnull

Could you elaborate a bit more what isaues do you experience with bufferfloat?

atuxnull

Could you give us a bit more of information of what needed to be done, please? I got a couple of colleagues that are certified in MTCRE and myself as MTCNA, all with working experience.

atuxnull

Mikrotik's configuration cannot be used as any other commercial router, due to its configuration and abilities. In your case make a drawing with the simplest network diagram that you have i mind and and how to access the Internet. Once you got that, then start thinking what else you need, features p...

atuxnull

I suspect that there is an issue with a switch of mine and some times i get issues in Video/Voip. I would like to ask if there a bandwidth test from Router to Client (WIndows 10) directly so i could see different stats.

atuxnull

i do not have a clue what to do with the scripting.

atuxnull

I am running Mikrotik with a USB 4G stick to provide data to a remote site. Everything works fine. i would like to know the signal strength of the LTE connection and see it somewhere nicely in the Winbox. Also, i would like to get an idea of the quota. LTE is volume based in the contract that i have...

atuxnull

Just to point out that you are using Public IP addresses in your LAN and doing a NAT. This should cause an issue. You mention that your LAN is 11.10.10.0/24, while if you would like to check that private IP addresses are 10.0.0.0 – 10.255.255.255, 172.16.0.0 – 172.31.255.255, 192.168.0.0 – 192.168.2...

atuxnull

Hi. in my home i have a Mikrotik thaat has the pppoe and the dhcp, firewall and time server. In the LAN there are 10 PCs/laptops/tablets/smartphones that run either Windows or Android. The circuit is VDSL at 50Mbps and i have queues that it is based on the needs of the devices (max 15Mbps/device) bu...

atuxnull

Thanks @DarkNate. In the guide you provided, i have to substitute the example.com with my ip/cloud domain name, correct?

atuxnull

Could someone point me to a tutorial and what to change, please?

atuxnull

Looking to setup an OpenVPN server in Mikrotik at my home, so i could have access from my phone when mobile. At home the Mikrotik has a pppoe-client that connects through it to the Internet and i enabled the IP>cloud domain name, due to the fact that i have a dynamic IP that changes every night. I h...

atuxnull

Usually the mobile carriers provide a NATted IP (e 10.x.yz).
Please check what is the IP provided from the mobile carrier in IP>addresses.

atuxnull

Hi. running Mikrotik in a x86 machine (Alix from PC engines) and i cannot see the IP>cloud setting.
is it hidden and needs to be enabled by some commands?

atuxnull

Not sure what you mean atux??
You have to enter in the config not me LOL.
(the notes and notes symbols are not part of the config if that is what is confusing you!)

All i am saying is, if it' s possible to edit your post and put the comments as coding [ ] since it is not easy to read.

atuxnull

Thanks for @anav for the post. Could you edit the post and put the coding format, please?
Also i am adding a pppoe-client connection to a 2nd WAN. What other changes do i need to do?

atuxnull

They are complete garbage.
Your best bet is to learn tons more before adjusting the default.
Put the default back in!

I do not have the default since i removed the default config. May i ask for it, please?

atuxnull

I have a small network and i would like to ask if my firewall is OK. My setup has a pppoe connection through eth1 and it is named pppoe-out1. Then i have bridge that has ports eth2-5 and it is named bridge1. here are my firewall rules /ip firewall filter add action=drop chain=input comment="Dro...

atuxnull

In one of the sites i have a LAN that i would like to restrict each user that gets an IP to certain bandwidth, except from some certain IPs in that range (that got static lease from dhcp). for example the range is 192.168.1.150-199 and i would like to restrict it to each user get 2Mbps down/512kbps ...

atuxnull

That was in 2012 and now 'they' use HTTPS instead of HTTP.

Which means that i do not stand a chance? If yes, then it makes it strange for me to believe that Mikrotik has left this area untouched.

atuxnull

I would like to restrict all traffic to/from Youtube and some sites at certain bandwidth. Ideally i would like to give 1Mbps down/512Kbps up per user. if its not possible per user, then i would say 3Mbps down/1Mbps up totally for all users and those sites. I am not familiar with queues and i would l...

atuxnull

trying to block permanently some sites for the users by using a RB750G. The sites are: Facebook Tiktok Twitter Instagram some_other_pages_that_i_have_seen_they access_ i have tried to use the L7 functionality of Mikrotik as in https://rbgeek.wordpress.com/2012/05/29/how-to-block-facebook-in-mikrotik...

atuxnull

Why would you want to cap the bandwidth the ISp provides. Seems like paying for 5 steaks and throwing away 2 of them. It's not that simple. The ISP has a fine on speed. so if i keep my speed under those levels then i will keep the bandwidth until the end of the billing cycle. Otherwise they impose ...

atuxnull

I have multiple WAN interfaces

pppoe-out1

pppoe-out2

lte1

lte2

eth1

and i would like to add a bandwidth limit to each one of them as in

pppoe-out1=10Mbps

pppoe-out2=unlimited

lte1=3Mbps

lte2=5Mbps

eth1=20Mbps

How would your code look like, then?

atuxnull

Thanks a lot for the reply. That seems to be something in the way that i am looking. The difficult part is the implementation. Since i am not very familiar with Mikrotik, may i ask if you could elaborate a bit more in the code please?

atuxnull

/queue simple add dst=pppoe-out1 max-limit=10M/10M name=queue1 queue=default/default target=eth1

Thanks a lot for the reply. Apart forbthe queues code, do i need to add anything else on the firewall or anywhere else?

atuxnull

I do have a RB and i would like to put a bandwidth Limit on the WAN interface to 10Mbps. This is pppoe-out1 and it is on eth1.
May i have some help please?

atuxnull

Lets start with those that cannot change their MAC and we will move on that direction aftewards.any idea on how to do it for fixed MAC, please?

atuxnull

Hi. I do have a RB750g that acts as myain router and i would like to restrict access to certain sites (tiktok, Facebook, some others) for x minutes for each MAC. As an example, when one of the MACs in the list Access one of the websites in the list, then start a counter for 20inutes and then block a...

atuxnull

I am a MTCRE and i would like to ask if there is a known site for remote works/projects. In my search i have found only for full/part time jobs, but i am looking for remote work only.

atuxnull

trying to setup dual wan load balancing in my Mikrotik. I have two 50M from same ISP and it provides pppoe. Always uses only 1 connection, never the 2nd, even if i disconnect the cable from 1st pppoe. Here is my config /interface bridge add name=LAN /interface wireless set [ find default-name=wlan1 ...

atuxnull

Trying to create an openvpn server so when i will be out of home, i could join the LAN securely. i have followed this link to start https://grzegorzkowalik.com/mikrotik-openvpn-server/ But i am getting the following error: [admin@MikroTik] /certificate> sign CA-Cert name=CA-Certificate action timed ...

atuxnull

For lan purposes i have created a dns server in my lan that has a fake domain (abc.x). The zone serves for primary, secondary,... for service. The dns server runs in linux and it does not forward anything to upstream dns providers as the domains are local. I would like to ask if it ia possible to im...

atuxnull

No success. I have changed ALIX board, CF cards and Windows PC. I have tried in Win 7 64bit and in Win10 64 bit, both with disabled firewall. I have tried 2 different methods. i have 5 ALIX 2D13 boxes that i would like to engage and have them as Mikrotik routers. Netboot Netinstall utility to PXE bo...

atuxnull

Up yo now i have followed two methods, that both failed:
-netinstall software to create a cf card. Fails to create MBR on device
-netinstall software to netboot to Alix. PXE error
No idea how to solve both of the issues

atuxnull

Any solution to the problem, please?

atuxnull

Thanks for the reply. This is what i have followed. The problem is the error code PXE-E79.
It has failed both for PXE boot and CF install.
No idea how to proceed. Is there an image ready to download and burn it to the CF?

atuxnull

Also i have tried netinstall by PXE boot, without success.
Here is the error https://ibb.co/9pghrHY

atuxnull

I am getting error that it cannot create MBR in disk.
https://ibb.co/YkppN3j
The whole idea is to create a bootable CF card for an ALIX 2d13 (pcengines)

atuxnull

Do i have to download each package individually?

atuxnull

trying to install from netinstal and once the software starts, there are no packages available to select. i am using version 6.45.6. i am trying to install in a CF card. i have chosen the cf card, i pressed on install, but a message pops up that mentions "there are not any packages selected&quo...

atuxnull

Looking to create a project as proof of concept, to see if it fits my needs. i am looking to create a small lab of 5 routers, by making use of old PCs and ALIX 2d13 boxes (pcengines). i cannot afford to buy 5 licenses in order to see if the project is viable or not. So i would like to ask if there i...

atuxnull

i have a remote site that it does not have a fixed access, but only mobile. The mobile carrier offers me a nice packet with Voice, SMS and Internet through 3/4G. I have a voice enabled usb 3G stick. I have tried it in a linux PC with Asterisk and it has voice and sms, ok. I would like to use this us...

atuxnull

thanks a lot for the reply. i was waiting for more than 2 days before posting to the forum, not only 5 minutes.
regarding the start-time=startup what do i have to put there?
Is it something wrong with my config and it does not update automatically. it works only if i press the run script button

atuxnull

I am afraid that i have the name correct, but it does not update, unless i run it manually.

Any ideas please?

atuxnull

hi. i am running a mikrotik 750 in my home and i have a ddns service from dynu. i did follow the guide from this link https://www.dynu.com/DynamicDNS/IPUpdateClient/Mikrotik-Dynamic-DNS and it worked at once. the only problem is that the mikrotik it does not update the script, unless i issue it on w...

atuxnull

hi. i am looking for a way to disable an ethernet interface eg eth1 for 30 minutes. Ideally i would like to invoke the script from my android tablet. is there a way on doing that easily?

Search found 82 matches