Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.

learn more… | top users | synonyms

5
votes
2answers
7k views

Mikrotik and NAT/Routing issue

I have basic NAT/Routing problem with Mikrotik RB750 that I've been unable to solve over the past days. From our ISP we have 26 IP addresses: 10.10.10.192/27, with 10.10.10.193 being the gateway and ...
3
votes
1answer
3k views

Setting HTTPS Proxy in Winbox for MikroTik

I am using MikroTik router model RB750, I need to use HTTPS proxy method for some of my clients. The Proxy Server (VPS) is in another country and i have the IP address and the Port Number and a ...
3
votes
1answer
1k views

Error handling in Mikrotik scripts

I have RouterOS 5.14 on RB493G. I need to write script, that launches /tool fetch ... Execution of fetch may result in error, this is OK(URL may be sometimes unavailable). Script hangs on error. Is ...
3
votes
1answer
891 views

Help me make sense:VLAN, Hyper-V, Intel VMLB

I have serious problems getting VLANS working on a Hyper-V host with an Intel network card. The hardware: A router / switch (linux software bridge) which is a Mikrotik 1100 AH, Router OS 5.1 A ...
3
votes
2answers
798 views

Manually set IPv6 neighbor's MAC address in Mikrotik's RouterOS

I have an interesting problem. An ISP of ours started providing native IPv6 on their network. They provided us with a /56 prefix and a /126 linking segment (::1 being their endpoint and ::2 being ...
2
votes
1answer
640 views

Sharing Internet connection between people in apartment blocks

I am currently trying to choose hardware for two projects. The first project: there is a five-storey apartment block, which receives Internet connection through Wi-Fi. It is planned to place a grid ...
2
votes
1answer
105 views

Issues with connecting to network resources after segmenting network

I've created network segments with my MikroTik RB1100 including 3 client LANs, a phone LAN, a trusted network (servers, printers, etc) and a DMZ. These are not VLAN's per-se as there is no tagging ...
2
votes
1answer
3k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
2
votes
0answers
123 views

Mikrotik Download Limited

I have a Mikrotik routerboard RB2011UiAS. I have an issue that when downloading we only get between 10mbit (1000pps) - 13mbit(1200pps) when connecting directly into the ISP provide with the Mikrotik. ...
2
votes
0answers
1k views

IP Conflicts from mikrotik router for multiple ip addresses (that it isnt assigned)

I have a point to point wireless connection using two mikrotiks. When I plug the mikrotik into a switch with just my laptop I get an IP address conflict on my machine no matter what IP I am assigned. ...
1
vote
8answers
3k views

MikroTik vs. Cisco for WiFi bridge application

A local vendor is proposing a wireless bridge solution using MikroTik. I had never heard of MikroTik before but it seems they have a following. My usual first choice is Cisco, however the price ...
1
vote
2answers
483 views

Allow RDP only over VPN

I want to do allow 3389 port(RDP) only through VPN connection, not normally. How can I do this? I have configured VPN server in Mikrotik. I have blocked all traffic except http and https by firewall ...
1
vote
1answer
355 views

MikroTik beep on RDP

I am a newbie in MikroTik RouterOS. How can I add a rule or script to beep when some one tries to connect to a special port on one of interfaces? For example I need to know if someone is trying to ...
1
vote
3answers
7k views

How do I set up RouterOS to use web proxy on another machine?

The RouterOS docs show how to transparently proxy all web traffic via the HTTP proxy built into RouterOS: /ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect ...
1
vote
3answers
2k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
1
vote
1answer
287 views

Mikrotik API reference for `passthrough=no`

In several parts of the Mikrotik API Manual there are references to the passthrough=no and passthrough=yes. e.g.,: Manual: Transparent Traffic Shaper Manual: "/ ip firewall mangle" But nowhere have ...
1
vote
3answers
492 views

Road Warrior VPN Setup

I apologise up front for the rather open ended nature of this question but I've got well out of my depth and could really do with some pointers. I need to set up a road warrior VPN solution which ...
1
vote
2answers
666 views

MikroTik as PPPoE server

I'm working at ISP and we provide internet over PPPoE. Our servers are running on FreeBSD and we are considering some improvement to enhance the administration of the server. We've thought of moving ...
1
vote
2answers
855 views

Mikrotik, script

I have Mikrotik 3.3, I have a dyndns script, which not works, because of this line: /tool fetch mode=http address="checkip.dyndns.org" src-path="/" dst-path="/dyndns.checkip.html"[/b] bad-argument ...
1
vote
1answer
90 views

Cannot ping from client to internet via IPv6 tunnel

I'm facing an odd issue with my IPv6 setup. I've configured it as follows: /interface 6to4 add comment="SixXS 6to4 tunnel" local-address=zz.yy.xx.94 (my wan ip) mtu=1280 name=6to4-sixxs ...
1
vote
1answer
2k views

Mikrotik queues and limiting total upstream bandwidth

With a Mikrotik router (form of embedded Linux) I have created simple queues per machine matched by source IP address. Each of the 4 machine queues has an unlimited burst 3Mbps/3Mbps for Tx/Rx. ...
1
vote
1answer
756 views

MikroTik ipv6 Tunnel

I've got a MikroTik router set up with the latest stable OS on it, and I just set up an ipv6 tunnel with Hurricane Electric, but I'm having an odd issue with it. I can't ping anything until I first ...
1
vote
2answers
1k views

On Mikrotik RouterOS, is it possible to get Netflow information from a bridged connection?

I have a RouterOS box set up to bridge two ethernet connections. I have use-ip-firewall=yes in the bridge configuration, so that the ports go through the firewall. I've enabled netflow reporting via ...
1
vote
1answer
464 views

What information do I need for initial setup of BGP?

Hey guys, I will be installing a MikroTik BGP capable router into a datacentre tomorrow, I have almost no idea how to do this but luckily there is an identical mikrotik router that has already been ...
1
vote
1answer
88 views

How to exclude LAN traffic from IPSEC policy

I am trying to replace a Firewall/VPN appliance (Snapgear SG300) with another (Mikrotik RB951G-2HnD). My current router works, but, for the new mikrotik router, when I add the phase 2 tunnel, I can ...
1
vote
1answer
3k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
1
vote
0answers
640 views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
1
vote
1answer
674 views

MikroTik not accepting VPN connections over wifi

I'm using MikroTik RouterOS v5.18 x86 on a Dell PC. I have done the following: Set Addresses Set PPPoE Client & Server Set PPTP/L2TP Server Make Profiles and Secrets SRCNAT MASQUERADE the IPs of ...
1
vote
1answer
2k views

Redirect private LAN traffic to internal server when DNS answers with external IP

I have a mikrotik RB2011 router/firewall. Inside the firewall I have a web server that has an private IP (lets say it's 192.168.1.5) On the WAN side of the firewall I have a static IP (assume it's ...
1
vote
3answers
4k views

Use MikroTik Bridge as a Public IP Firewall for Public Hosted Servers

We want to do this: Internet<->MikroTik in Bridge Mode with Firewall Filter<->Hosted Server The primary objective is to allow RDP and FTP in from the outside but block everything else from ...
1
vote
1answer
1k views

How come the netflow data isn't showing up on the server?

I have a mikrotik router and it is sending trafficflow (fully compatible with netflow) data to my debian server that is running cacti. But after installing cacti's flowviewer plugin, cacti doesnt ...
1
vote
0answers
349 views

Windows Authentication over site-to-site VPN

We have recently opened up a satellite office about 500 Km away from our main office. The office consists of 2 staff, and some of our office workers make their way out to this office every once in a ...
0
votes
1answer
1k views

Prevent RDP logon brute force in mikrotik router via winbox

Masters, I need help, how to config our router to block RDP brute force attacks I would like to set our router to only allow RDP connection from a specified country (our specified IP ranges), plus i ...
0
votes
1answer
1k views

Mikrotik route syntax to create a new routing table

I want to replace my linux gateway box to Mikrotik. But I never found how to write this linux's iproute2 command in mikrotik's way: ip route add default via 10.1.1.1 table browser ip route add ...
0
votes
1answer
3k views

Routing from mikrotik two IP addresses to same gateway

I have 2 static addreses (a.b.c.72/24 and a.b.c.128/24) on gateway1 and gateway2 interfaces. ISP have one gateway a.b.c.1 . I can use a.b.c.72 only on gateway1, a.b.c.128 only on gateway2. How to ...
0
votes
2answers
189 views

NAT vs Proxy server

I have installed squid proxy server to hide our network ips after some time it becomes slow then I read through NAT rules to achieve what I want by proxy server. As per this link the difference ...
0
votes
1answer
2k views

MIKROTIK - set proxy authentication

Is it possible to set mikrotik authetication to be used for set the connection of other applications to internet using mikrotik proxy? For example connect miranda IM using mikrotik proxy server: ...
0
votes
1answer
2k views

Mikrotik 750G configuration backup

I have two Mikrotik RouterBoard 750G device. I would use the another as a cold backup replacement of the active one. But if I upload the configuration to the backup router I lose control above it, ...
0
votes
1answer
330 views

zabbix, dicovery rule for smnp device not working

Perhaps you can help I have quite a few mikrotik out in the field. They all connect to one 1 have in our data centre via l2pt or pptp. Im using zabbix to monitor them, its discovery rule for the ...
0
votes
1answer
258 views

Mangling traffic from a Mikrotik Router

I have a MikroTik powered Router in the house with a couple of internet connections (2 200/10Mb Cable modems and a 100/20Mb VDSL Line). I am using Mangle rules to set routing marks and NAT rules to do ...
0
votes
2answers
492 views

mikrotik total traffic limit

I am running PPPoe in mikrotik.... I can use speed rate limit per user but i want to limit of total traffic per month.... for example i want to limit a user for 10GB traffic at 1mbps speed after 10GB ...
0
votes
1answer
2k views

How to assign a public IP to a server behind a Mikrotik rb1200, without NAT?

I have a fiber connection with 5 public ips. The ips are like this: 200.195.169.xxx/29 The Internet Link is connected to ether2. One of the public ips is used to the LAN. ...
0
votes
2answers
224 views

Windows VPN not authenticating from ADSL to Wireless link

I have a normal windows VPN on a computer connecting to a 196.201.x.x/24 IP. If this VPN tries to connect from any address in the 41.x.x.x range it cant get there. The server is a normal windows 2008 ...
0
votes
1answer
268 views

Extending the wired internal network to wireless by using PoE Access Points

Today we're running a Mikrotik 1100AHx2 at our office where we've four floors on different subnets. Now I'm looking in to setting up a Wireless network spanning across these floors using Access ...
0
votes
1answer
213 views

Mikrotik Integration with ERP-LIKE systems?

I'm looking to integrate a mikrotik server in my ERP-LIKE application, but I have no idea to start such a thing. What do I need to know about mikritik to do such integration? In my system actually I ...
0
votes
1answer
845 views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflows?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...
0
votes
0answers
16 views

Site-To-Site VPN: Remote Windows Server Can Ping But Can't Share Resources?

I have a site-to-site VPN tunnel between two MicroTik routers in two separate locations. Location A where the server is located is on the subnet 192.168.33.0 and Location B is 192.168.1.0. The VPN ...
0
votes
0answers
31 views

unicast to multicast using Mikrotik

I'm looking for a way to do NAT on a mikrotik router so that a unicast stream received on one interface goes out another interface as Multicast. I've done this on Cisco before, but my company is ...
0
votes
1answer
89 views

Block Outgoing SMTP Except for Mail Server

Masters, Our ISP ask to solve a problem. They said we send many SPAM from our server. (they only give our router IP address, so we don"t know if we have SMTP flooders from infected cllient, our we ...
0
votes
1answer
564 views

OpenVPN tun routing (can ping tun interfaces) with mikrotik and NAT on both ends

Problem The Mikrotik site is unable to ping anything on the server site. The Server site is less important right now. OpenVPN Server config is on LINUX port 1194 proto tcp dev tun ca ca.crt cert ...