Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.

learn more… | top users | synonyms

1
vote
2answers
4k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
0
votes
2answers
1k views

Web server behind MikroTik and dynamic dns

I recently purchased a MikroTik router, it works great! However, I haven't been able to make my web server work from outside my lan I'll explain better: I have two domains in my disposal, before I ...
1
vote
2answers
3k views

Redirect private LAN traffic to internal server when DNS answers with external IP

I have a mikrotik RB2011 router/firewall. Inside the firewall I have a web server that has an private IP (lets say it's 192.168.1.5) On the WAN side of the firewall I have a static IP (assume it's ...
0
votes
0answers
38 views

Configure Mikrotik WPA-EAP to authenticate against local user database

Is it possible to configure a Mikrotik router (RouterOS 6.20) to perform WPA-EAP authentication against the local user database on the Mikrotik? Documentation indicates that all authentication ...
0
votes
1answer
26 views

Firewall Rule One way smb in two network

Im trying to make an one way smb firewall rule in a MikroTik firewall rule The thing is I have two network one on 192.168.1.0/24 and one 192.168.3.0/24 192.168.3.0 is the network that should be able ...
0
votes
1answer
90 views

Windows 8.1 VPN error 800 when connecting to Mikrotik VPN router

After creating a new VPN connection on a Windows 8.1 machine, to a VPN server (using Mikrotik router), the connection times out and an error no 800 is displayed.
0
votes
2answers
1k views

OpenVPN tun routing (can ping tun interfaces) with mikrotik and NAT on both ends

Problem The Mikrotik site is unable to ping anything on the server site. The Server site is less important right now. OpenVPN Server config is on LINUX port 1194 proto tcp dev tun ca ca.crt cert ...
0
votes
0answers
77 views

Site-To-Site VPN: Remote Windows Server Can Ping But Can't Share Resources?

I have a site-to-site VPN tunnel between two MicroTik routers in two separate locations. Location A where the server is located is on the subnet 192.168.33.0 and Location B is 192.168.1.0. The VPN ...
0
votes
1answer
179 views

mikrotik joining two subnets

I have two subnets which are geographically separated, connected by a wireless point to point link (5Mbps). Both networks are connected to internet through their own separate ILL WAN links which are ...
0
votes
0answers
78 views

unicast to multicast using Mikrotik

I'm looking for a way to do NAT on a mikrotik router so that a unicast stream received on one interface goes out another interface as Multicast. I've done this on Cisco before, but my company is ...
-1
votes
1answer
1k views

MikroTik on HP ProLiant DL360 G6 [closed]

Has anybody installed MikroTik RouterOS v4.4 on DL360 G6 server? Thanks.
0
votes
1answer
672 views

Can a virtual mikrotik box bridge a hyper-v internal network with a hyper-v external network?

I am trying to set up a Mikrotik router as a transparent firewall on my network. I got the machine working on a hardware MT box, but my boss wants the MT virtualized. I have been trying the set up ...
0
votes
1answer
292 views

Block Outgoing SMTP Except for Mail Server

Masters, Our ISP ask to solve a problem. They said we send many SPAM from our server. (they only give our router IP address, so we don"t know if we have SMTP flooders from infected cllient, our we ...
0
votes
0answers
1k views

OpenVPN Route Issues w/ Mikrotik & Windows 7

I'm having (what I suspect is) a route issue with an OpenVPN implementation and a Windows 7 client. The VPN connection looks to establish itself just fine, and the route is available however efforts ...
0
votes
1answer
731 views

zabbix, dicovery rule for smnp device not working

Perhaps you can help I have quite a few mikrotik out in the field. They all connect to one 1 have in our data centre via l2pt or pptp. Im using zabbix to monitor them, its discovery rule for the ...
0
votes
1answer
508 views

Mangling traffic from a Mikrotik Router

I have a MikroTik powered Router in the house with a couple of internet connections (2 200/10Mb Cable modems and a 100/20Mb VDSL Line). I am using Mangle rules to set routing marks and NAT rules to do ...
1
vote
1answer
117 views

How to exclude LAN traffic from IPSEC policy

I am trying to replace a Firewall/VPN appliance (Snapgear SG300) with another (Mikrotik RB951G-2HnD). My current router works, but, for the new mikrotik router, when I add the phase 2 tunnel, I can ...
1
vote
2answers
1k views

On Mikrotik RouterOS, is it possible to get Netflow information from a bridged connection?

I have a RouterOS box set up to bridge two ethernet connections. I have use-ip-firewall=yes in the bridge configuration, so that the ports go through the firewall. I've enabled netflow reporting via ...
0
votes
1answer
5k views

Routing from mikrotik two IP addresses to same gateway

I have 2 static addreses (a.b.c.72/24 and a.b.c.128/24) on gateway1 and gateway2 interfaces. ISP have one gateway a.b.c.1 . I can use a.b.c.72 only on gateway1, a.b.c.128 only on gateway2. How to ...
0
votes
1answer
1k views

Mikrotik route syntax to create a new routing table

I want to replace my linux gateway box to Mikrotik. But I never found how to write this linux's iproute2 command in mikrotik's way: ip route add default via 10.1.1.1 table browser ip route add ...
1
vote
2answers
871 views

Mikrotik, script

I have Mikrotik 3.3, I have a dyndns script, which not works, because of this line: /tool fetch mode=http address="checkip.dyndns.org" src-path="/" dst-path="/dyndns.checkip.html"[/b] bad-argument ...
5
votes
2answers
8k views

Mikrotik and NAT/Routing issue

I have basic NAT/Routing problem with Mikrotik RB750 that I've been unable to solve over the past days. From our ISP we have 26 IP addresses: 10.10.10.192/27, with 10.10.10.193 being the gateway and ...
1
vote
1answer
120 views

Cannot ping from client to internet via IPv6 tunnel

I'm facing an odd issue with my IPv6 setup. I've configured it as follows: /interface 6to4 add comment="SixXS 6to4 tunnel" local-address=zz.yy.xx.94 (my wan ip) mtu=1280 name=6to4-sixxs ...
0
votes
1answer
866 views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflows?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...
2
votes
0answers
137 views

Mikrotik Download Limited

I have a Mikrotik routerboard RB2011UiAS. I have an issue that when downloading we only get between 10mbit (1000pps) - 13mbit(1200pps) when connecting directly into the ISP provide with the Mikrotik. ...
2
votes
1answer
3k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
2
votes
0answers
1k views

IP Conflicts from mikrotik router for multiple ip addresses (that it isnt assigned)

I have a point to point wireless connection using two mikrotiks. When I plug the mikrotik into a switch with just my laptop I get an IP address conflict on my machine no matter what IP I am assigned. ...
0
votes
0answers
589 views

Configure Reverse Proxy on MikroTik RouterOS with different web application ports

Let us say I have two dns records: a.example.com b.example.com I configured my routeros to act as a reverse web proxy for these two urls and forward the traffic to the local ip address of the server. ...
0
votes
2answers
748 views

mikrotik total traffic limit

I am running PPPoe in mikrotik.... I can use speed rate limit per user but i want to limit of total traffic per month.... for example i want to limit a user for 10GB traffic at 1mbps speed after 10GB ...
0
votes
2answers
302 views

DNS Server, DHCP Client and Server works fine, but request time out occurs when using MikroTik as an access point for a modem

I use 2 Mikrotik wireless router, the first one is connected to modem and it works perfectly (SSID: server-one (hidden)). Second router ID: ether1: 192.168.1.1 wlan1: dhcp-client wlan2: ...
0
votes
2answers
235 views

NAT vs Proxy server

I have installed squid proxy server to hide our network ips after some time it becomes slow then I read through NAT rules to achieve what I want by proxy server. As per this link the difference ...
1
vote
3answers
4k views

Use MikroTik Bridge as a Public IP Firewall for Public Hosted Servers

We want to do this: Internet<->MikroTik in Bridge Mode with Firewall Filter<->Hosted Server The primary objective is to allow RDP and FTP in from the outside but block everything else from ...
0
votes
0answers
69 views

bgp and incomming requests

I have IP pool, 2 providers and BGP on RouterBoard. First provider is default. Second is backup. If first provider falls - outgoing connections works on second. But incoming still routed to broken ...
0
votes
0answers
101 views

how to use key to authenticate VPN client

Block all the traffic in firewall filter except ports 80,443 and 3389 only over VPN PPTP. Whenever client want to connect to system behind mikrotik router they need to connect to VPN server of ...
1
vote
2answers
650 views

Allow RDP only over VPN

I want to do allow 3389 port(RDP) only through VPN connection, not normally. How can I do this? I have configured VPN server in Mikrotik. I have blocked all traffic except http and https by firewall ...
1
vote
0answers
782 views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
-1
votes
1answer
676 views

How do I set up domain names for IP's on my LAN? [closed]

I have a LAN with 50 clients and my company has made me do a local WebApp. This is new territory for me, but as I see it, the individual internal IP's are regulated by MikroTIK. I was wondering, how ...
1
vote
1answer
3k views

Mikrotik queues and limiting total upstream bandwidth

With a Mikrotik router (form of embedded Linux) I have created simple queues per machine matched by source IP address. Each of the 4 machine queues has an unlimited burst 3Mbps/3Mbps for Tx/Rx. ...
1
vote
1answer
388 views

MikroTik beep on RDP

I am a newbie in MikroTik RouterOS. How can I add a rule or script to beep when some one tries to connect to a special port on one of interfaces? For example I need to know if someone is trying to ...
0
votes
1answer
2k views

Prevent RDP logon brute force in mikrotik router via winbox

Masters, I need help, how to config our router to block RDP brute force attacks I would like to set our router to only allow RDP connection from a specified country (our specified IP ranges), plus i ...
0
votes
1answer
2k views

Mikrotik 750G configuration backup

I have two Mikrotik RouterBoard 750G device. I would use the another as a cold backup replacement of the active one. But if I upload the configuration to the backup router I lose control above it, ...
-3
votes
1answer
294 views

AWS VPN server cost [closed]

This question is probably naive - please bear with me, I'm still getting my head around how VPNs work. TL;DR - if I host a VPN server on an EC2 instance (standalone, not VPC), will I pay $.05/hr for ...
0
votes
2answers
707 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
1
vote
3answers
8k views

How do I set up RouterOS to use web proxy on another machine?

The RouterOS docs show how to transparently proxy all web traffic via the HTTP proxy built into RouterOS: /ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect ...
1
vote
1answer
337 views

Mikrotik API reference for `passthrough=no`

In several parts of the Mikrotik API Manual there are references to the passthrough=no and passthrough=yes. e.g.,: Manual: Transparent Traffic Shaper Manual: "/ ip firewall mangle" But nowhere have ...
3
votes
1answer
4k views

Setting HTTPS Proxy in Winbox for MikroTik

I am using MikroTik router model RB750, I need to use HTTPS proxy method for some of my clients. The Proxy Server (VPS) is in another country and i have the IP address and the Port Number and a ...
2
votes
1answer
122 views

Issues with connecting to network resources after segmenting network

I've created network segments with my MikroTik RB1100 including 3 client LANs, a phone LAN, a trusted network (servers, printers, etc) and a DMZ. These are not VLAN's per-se as there is no tagging ...
1
vote
1answer
771 views

MikroTik not accepting VPN connections over wifi

I'm using MikroTik RouterOS v5.18 x86 on a Dell PC. I have done the following: Set Addresses Set PPPoE Client & Server Set PPTP/L2TP Server Make Profiles and Secrets SRCNAT MASQUERADE the IPs of ...
0
votes
1answer
554 views

MikroTik RouterOS 5.18 Does not connect to internet after restart

I am setting up a RouterOS on an x86 machine. The router is configure and is connected to internet via PPPoE internet connection. I am distributing it to 5 PCs and a Router via RouterOS PC. The setup ...
0
votes
1answer
2k views

MIKROTIK - set proxy authentication

Is it possible to set mikrotik authetication to be used for set the connection of other applications to internet using mikrotik proxy? For example connect miranda IM using mikrotik proxy server: ...