imho it would be helpful to have the opportunity of entering dns-names instead of ip-addresses in destination-fields, e.g. configuring tunnel-, ppp-type-clients. of course only if dns-cresolver is configured.
most operating systems allow this too for there vpn-clients and it becomes essential for use with dyn-dns based destinations, were the ip-address changes regularly.
(probably this could be done by some scripting, but i would prefer the simple method)
regards
matthias
Re: DNS names
yes, right, but i didn't say to change everything from ip-addresses to dns-names, only to have the option to use dns-names too.This is unsecure...
(by now, mikrotik ros is mostly unusable for dyn-dns based connections, and due to t-dsl we have lots of them in germany...)
This feature request has been posted several times. The main problem always is the discussion, when name resolution should occur: When entering a DNS name into a configuration (one-time resolution, then storing the ip address) - which is more for convenience issues while configuring. Or during "runtime", i.e. every time a rule or whatever containing a DNS name is used. This would be necessary for your request ("dyn-dns vpn"), but would potentially put a huge DNS resolution burden on the RouterOS system. Or something in between like the second option above but caching DNS resolution results for some time.
At that point discussions always stopped, if I remember correctly...
At that point discussions always stopped, if I remember correctly...
We've provided a mikrotik script in one of the forums here that will update your ddns records when an interface receives a different IP address. This is working well and we have a few clients using it at this time. Mikrotik supports the RFC ddns updates - but none of the current ddns providers support this update method. We've written the script to allow you to find your routers using a ddns name instead of trying to find the dhcp'ed address you receive on dsl / cable. It watches the interface IP address and sends an email to our ddns proxy account to perform the update, just as any other http client would.
Sam
ChangeIP.com
Sam
ChangeIP.com
yes, i have seen this script, but i dont think it helps for the task i had in mind.We've provided a mikrotik script in one of the forums
...
to explain: in germany there is a growing number of highspeed connections (3mbit) over telekom dsl, it is quite cheap so a lot of business customers do use it. together with VPN-techiques it is easy to build up a company network, but no static ip-addresses on the WAN are provided, i.e. the router must be able to build up VPN-tunnels with (dynamic) DNS names on both tunnel endpoints.
i am using draytek routers for that task (they are cheap and good) for years but they lack the cpu power, firewall- and QoS-features mikrotik ROS has. (their wireless features are poor, too). but their ability to build up various VPN-types with dynamic adressing is a feature i liked to see on the mikrotik ROS.
would it be possible to write a skript, building up a vpn-connection based on a just-in-time from DNS-resolved ip-addresses?
on the other hand, the resolver is build in yet, hence it should not be to complicated to make DNS names usable.
regards.
matthias
I can see a use for it my side as well...
Shouldn't be too difficult to add the ability to use name addresses with a disclaimer saying it's all at your own risk.
Or perhaps support a couple of the more popular Dynamic DNS companies out there?
I'm seeing quite a few of the budget type 'Broadband Routers' supporting this already (so far all are only supporting DynDNS) so it can't be a lot of code to add...
Anyways...I have a horrible hack-like solution already, but something more elegant would be nice ;)
Shouldn't be too difficult to add the ability to use name addresses with a disclaimer saying it's all at your own risk.
Or perhaps support a couple of the more popular Dynamic DNS companies out there?
I'm seeing quite a few of the budget type 'Broadband Routers' supporting this already (so far all are only supporting DynDNS) so it can't be a lot of code to add...
Anyways...I have a horrible hack-like solution already, but something more elegant would be nice ;)
I know exactly what you mean ... even in the ddns update script that we wrote we could not specify the mail server by name, we have to hard code the IP address of the sending SMTP server. I know that the the routeros can resolve names so it should be easy to add ... and i tried parsing it using a script but could not get it working. Ie, ping host.domain.tld -> then grab the resolved IP and use it in a variable.
We're not talking about doing reverse DNS lookups on log entries, etc - just specifying a hostname to use on outbound connections to vpns, mail servers, etc. I think I posted this request a few months back already.
Sam
We're not talking about doing reverse DNS lookups on log entries, etc - just specifying a hostname to use on outbound connections to vpns, mail servers, etc. I think I posted this request a few months back already.
Sam
...on board
i would like to see this feature too which should be quite easy to implement .
Code: Select all
:put [:resolve www.example.com]
i am not sure. does it mean i can resolve a dns name in a script? does it mean too, i could configure dns-name-based vpn-connections only by scripting? (or can i put the command into the ip-address field?)Doesn't it say you something? :)Code: Select all:put [:resolve www.example.com]
thx.
matthias
1) Certainly, yes.
2)
2)
Code: Select all
/ip address add address=([:resolve www.example.com] . "/24") interface ether2
/ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
7 192.0.34.166/24 192.0.34.0 192.0.34.255 ether2
i tried a simple VPN (using PPTP) with DNS-name instead of ip-address, but afaik it cant't not work this way.
this is the running configuration:
then i tried with dns-name:
as one can see, the resolve-command just puts the current ip-address into the config-line. this does not solve the problem, as the address will change many times a day and has to be resolved every time the connection activates.
i could see a work-around by writing a scheduler, checking for the current ip-address and changing the config if necessary. this might work with a few vpn-connections but with tens or hundreds it adds way to much complexity just to work around the simple direct usage of dns-name in the configuration. (many cheap routers can do this already).
thx.
matthias
[/code]
this is the running configuration:
Code: Select all
interface pptp-client pr
Flags: X - disabled, R - running
0 X name="pptp-client" mtu=1460 mru=1460 connect-to=x.y.129.62 user="test" password="******" profile=default add-default-route=no allow=mschap2,mschap1
Code: Select all
interface pptp-client set 0 connect-to=[:resolve pptp-server.domain.de]
interface pptp-client pr
Flags: X - disabled, R - running
0 X name="pptp-client" mtu=1460 mru=1460 connect-to=x.y.129.62 user="test" password="******" profile=default add-default-route=no allow=mschap2,mschap1
i could see a work-around by writing a scheduler, checking for the current ip-address and changing the config if necessary. this might work with a few vpn-connections but with tens or hundreds it adds way to much complexity just to work around the simple direct usage of dns-name in the configuration. (many cheap routers can do this already).
thx.
matthias
[/code]
Mag,
how did you try it with Tab button? Maybe DND settings are incorrect in your router. Try, for example:
/ip address add address=www.example.com<press Tab now>
the line will be substituded with:
/ip address add address=1.1.1.1/
where 1.1.1.1 is IP of http://www.example.com in this example.
Edgars
how did you try it with Tab button? Maybe DND settings are incorrect in your router. Try, for example:
/ip address add address=www.example.com<press Tab now>
the line will be substituded with:
/ip address add address=1.1.1.1/
where 1.1.1.1 is IP of http://www.example.com in this example.
Edgars
edzix - you don't get the idea. the ip address changes all the time, your TAB solution doesn't work here. you will have to change the rule all the time by yourself.
we will make a solution where the DNS names will be resolved within some intervals, configured in DNS Settings or somewhere else.
problem could be with dns names that resolve to multiple IP's, but I hope people will use this for services like no-ip.com and not enter yahoo.com (which really does resolve to multiple ip's).
we will make a solution where the DNS names will be resolved within some intervals, configured in DNS Settings or somewhere else.
problem could be with dns names that resolve to multiple IP's, but I hope people will use this for services like no-ip.com and not enter yahoo.com (which really does resolve to multiple ip's).
...-
-
stephenpatrick
Forum Veteran
- Posts: 702
- Joined:
- Location: UK
- Contact:
Yes most operating systems allow this, and it's a nice feature,
.. but what about current generation commercial routers (Cisco etc) -
Do they offer this feature?
I guess I'm asking is such a feature "ahead" or "catching up with" current commercial routers. It always helps when talking to customers to have a long list of advantages
Regards
Stephen
.. but what about current generation commercial routers (Cisco etc) -
Do they offer this feature?
I guess I'm asking is such a feature "ahead" or "catching up with" current commercial routers. It always helps when talking to customers to have a long list of advantages
Regards
Stephen