MikroTik - Search

se232

Hello Sindy,

thanks a lot for the support!
Now it's up and running

se232

你好,辛迪,我was playing around and had to found out that the fasttrack causes this instability. Once disabled, the mangle rules work as expected and the respond is received immediately. With fasttrack on, the problem appears again. Is the fasttrack rule wrong? 1 X ;;; fasttrack chain=forward acti...

se232

Hello sindy, thank you for the quick answer. I now implemented the rules exactly according your proposal. Access from outside can be established, but not predicatable, and the performance is very poor. A new access takes up to several seconds, when it is established at all (typically it take a few s...

se232

Hello Sindy, this should be the complete configuration. The public IPs are 1.2.3.4 (gw 1.2.3.1), 2.3.4.5 (gw 2.3.4.1), 3.4.5.6 (gw 3.4.5.1) and 4.5.6.7 (gw. 4.5.6.1) # oct/22/2022 09:45:01 by RouterOS 7.5 # software id = DIE2-NY0V # # model = 1100AHx2 # serial number = /interface brid...

se232

Hello Sindy, the access from outside works in general. At the moment I have a static routing rule to add the routing mark rtab-ether02-WAN when the internal server wants to answer (back) into the internet. I want to change this to the mangle rules, but no success so far. What information do you need...

se232

你好*。* I tried the updated rules by sindy... Flags: X - disabled, I - invalid; D - dynamic 0 D ;;; special dummy rule to show fasttrack counters chain=prerouting action=passthrough 1 D ;;; special dummy rule to show fasttrack counters chain=forward action=passthrough 2 D ;;; special dummy rule to...

se232

你好*。*

regardless how I order/arrange the rules, I do not get a working scenario.
BTW: Why is it necessary to have one rule twice?

regards

se232

你好*。*

we have a CRS326-24G-2S+ and a Grandmaster PTP master clock.
We need to set the domain to value 128. Is there any possibility to change the domain? A parameter would be nice

regards

se232

Hello I tried the rules on my router, but no success... chain=prerouting action=accept connection-state=established,related connection-mark=no-mark chain=prerouting connection-state=established,related in-interface=ether02-WAN chain=prerouting action=mark-routing new-routing-mark=rtab-ether02-WAN co...

se232

你好*。* what might be of interest (or not) is: I checked my other devices (which are continously working) and found a difference. All the other devices have a fixed IP address given, and just pull DNS, NTP server information via DHCP. 10.1.4.4 has no IP address given, it get's all necessary inform...

se232

你好*。*我意识到似乎sw 7.5 ROSitch off an active interface after several days of working. Setup: I have several Mikrotik routers installed, but I have an issue with 2 of them: 10.1.1.1 = 1100AHx2: firewall to the internet, 2 networks/bridges (one for work 10.1.0.0/16, one for gue...

se232

Ok, thanks!

Was reading(?) too fast

se232

Hello sindy, thanks for the answer! I found out, too, that the internal servers have different addresses, so I implemented already a routing route that they leave the local net over 2 different ways. Just for curiosity... Is it possible to have just one internal server and the answers go back over t...

se232

Hello gotsprings, thanks for the quick answer. I am not that much in mangle options, so I need some help/clarification... there are different mangle type to select (forward, input, output, postrouting and prerouting). Do you mean an input mangle rule at ether02-WAN? Action shall be mark packet? How ...

se232

Hello forum, I have a mikrotik router (1100AHx2) running ROS 7.5 with 2 WAN interfaces (2 WAN IP addresses), all the other interfaces are internal. router has the internal address 10.1.1.1/16 (bridge) ether01-WAN = 80.x.y.z (outgoing traffic is masquerade) ether02-WAN = 62.a.b.c (outgoing traffic is...

se232

Thanks for the replies! I have already a DC/DC converter installed for the SXT 5HPnD from >=9V to 24V, but somewhen in the middle of the night the battery runs out of energy and the 24V supply will drop in anyhow. So the Mikrotik devices do not check the input voltage and have a predictable behavior...

se232

你好*。* I have a satellite location, which is only powered by solar (no other current available). Very cloudy or rainy days cause a later voltage decrease below the working voltage.range during the night. Until now, I have already 2 routerboards bricked at this location in short time (2 month). hA...

se232

Try to switch off your Fasttrack rule in your Firewall section of the mikrotik router.

se232

Try to switch off the Fasttrack rule(s) in your Firewall section. I had similar problems (long time ago).

se232

How is it with updating the documentation? Would avoid others to fall into the same trap

se232

Somehow I don't get it completely.... Referenced page says: IPv4 FastTrack is active if following conditions are met: * no mesh, metarouter interface configuration; * sniffer, torch and traffic generator is not running; * ****removed****no active mac-ping, mac-telnet or mac-winbox sessions****remove...

se232

Hello, I have a problem with fasttrack and mange rules. I have a mangle rule to mark all packets (mark routing) from selected IP sources to route it differently (ip route to 0.0.0.0/0 with routing mark set shall go to a different router) Whenever I switch on fasttrack, it seems either the special ro...

se232

I have a problem, which fits to this topic: Usually I use on travels a D-Link DIR-505 (travel router) to connect to the hotel WiFi network (2.4 GHz) and connected to the DIR-505 a mAP as AP lite to spawn a local WLAN with direct VPN to the company network. This works in general fine, but awfully slo...

se232

Hello, I have a quite similar problem. Since a couple of days the Internet is lost approx. every 15 mins and coming back after approx. 1 minute. The log file is only full of lte1 link up link ok, ipv4: ..., dns:.... item added item added lte1 link down item removed item removed ... and then repeatin...

se232

I have troubles with my mAP (RBmAP2nD) after the installation of 6.38.1 (I am not quite sure if they were present with 6.38) The router works somehow, reacts very slowly to the webfig page (i.e. firewall rules appear after 5-10 seconds) and finally stops being accessable from wifi after a couple of ...

se232

Hello Discmandj, found the backup files, but... the mikrotik one is encrypted and I cannot read it, the Bintec one is a Textfile, but no clean structure in it. Maybe following fragment helps you a little bit: [...] ikeProposalTable;ikePropIndex;ikePropNextChoice;ikePropDescription;ikePropEncAlg;ikeP...

se232

Hello Discmandj, It's quite long time since I used the miktrotik with the bintec router. As far as I can remember, the phase 2 topics were solved by selecting the correct encryption on both sides. I will take a look, if I find the old backup files of the routers. It took me some days to find the rig...

se232

Hello Marcus, thanks for the hint! The only difference I found so far compared to the given guide is that I use static instead of static mesh (According the Mikrotik manuals the static should be the correct version. Nevertheless I will try to change) As mentioned on a sidenote in the guide I have si...

se232

OK! I changed all logging types to disk now. I will come back in some days, with the important information about the lost connections

Thanks!

se232

你好*。*, I replaced my hAP plus UMTS stick with the SXT LTE. At the beginning I was quite happy with the product (up to 40 MBit/s in the countryside was quite promising). Unfortunately the SXT LTE hangs up itself and needs a reboot after several weeks. This never happened with the hAP plus UMTS st...

se232

Hello experts! I am now running the system for some month, the only help I got was to add a watchdog, by trying to ping the google-dns server (8.8.8.8). I checked now the uptime of the nodes and it seems that they are resetting in approx. 10 to 20 hours (less than a day). How can I find out what is ...

se232

2 out of 3 are lost during the night, so the connect list did not solve the issue (same behavior as before).
Again after switch off and on of the WLAN interface the connections to all 3 was again enabled.

What can I do to no lose the connectivity to some nodes?

lg

Stefan

se232

Yes, the involved Interfaces are set as static. Do I have to set the virtual AP as static, too? (Does not makes sense according my understanding) I added now in the connect list all peer nodes (AP at 10.3.1.1 has 3 peer APs, the AP 10.3.4.1, 10.3.4.2 and 10.3.4.3 have only the 10.3.1.1 as peer node ...

se232

Hello pukkita, I changed now to static WDS and the performance increased dramatically - thanks for the information. but...I had to reboot the APs to start to talk to each other. ...and this morning the accesspoints lost connectivity completely. A reboot of the "master" node (the only one w...

se232

Hello pukkita, thank you for the quick answer. I purchased the wAPs for this special reason, so I don't want to change to a different type now. The virtual APs were not used when I performed my ping and throughput tests, so they should not influence the values significantly. Is it necessary that the...

se232

Hello experts! I am struggling since two weeks to get a wireless Network with 4 nodes running properly in a 3 floor living building. I have one hap (10.3.1.1), which is connected to the Internet, 2 wap (10.3.4.1 and 10.3.4.2), and 1 map lite (10.3.4.3), where the last 3 (10.3.4.x) are not connected ...

se232

Hello there, I was not able to setup a L2TP/IPSEC tunnel between 2 MT routers. The IPSEC is enabled on the server side, but regardless the settings on the client, both (client and server) report to have MPPE encryption instead of IPSEC. When I connect with an iPhone the server reports AES encryption...

se232

I think my problem description was pointing clearly to a dedicated problem. Instead of getting a detailed answer I had to find a working solution by trial and error.

se232

I just solved the problem by disabling the fasttrack rule(s). Then everything runs fine.

se232

你好!L2TP / IPSEC unfortuna教程tely deleted from the examples page :( I tried to setup a L2TP/IPSEC tunnel between 2 Mikrotik routers as clients and a Mikrotik router as server but cannot ensure, that the IPSEC is really working. The L2TP status page shows MPPE128 stateless encryp...

se232

I have 2 networks connected with each other via IPSEC. All the relevant traffic is routed between both locations over IPSEC. All other traffic is going directly out into the internet. That works fine. Network 1: 10.1.0.0/16 Network 2: 10.2.0.0/16 Now I need one single computer on network 2 (e.g. 10....

se232

玩了几个星期之后,我终于找到了missing switch: it is the fasttrack. Whatever this feature is for, it destroys TCP packages for the IPSEC tunnel. Switched it off, and everything works as expected. (This explains also the finding that the IPSEC was running ok on the mAP: the mAP ha...

se232

Is there nobody who was able to setup an IPSEC tunnel between a Bintec RS123 and a Mikrotik hAP that works proberly and who wants to share his/her knowledge with me?

se232

Yes, I can ping without problems.
How can I get the firewall statistic information, you requested?

se232

I have problems to get a working connection between a Miktrotik hAP and a Bintec RS123 router. The VPN connection itself is enstablished, but I cannot make a TCP connection between a computer in the network of the Bintec router and a NAS in the network of the Mikrotik router. Setup is as following: ...

Search found 45 matches