Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.

learn more… | top users | synonyms

6
votes
2answers
15k views

Mikrotik and NAT/Routing issue

I have basic NAT/Routing problem with Mikrotik RB750 that I've been unable to solve over the past days. From our ISP we have 26 IP addresses: 10.10.10.192/27, with 10.10.10.193 being the gateway and ...
4
votes
1answer
10k views

Setting HTTPS Proxy in Winbox for MikroTik

I am using MikroTik router model RB750, I need to use HTTPS proxy method for some of my clients. The Proxy Server (VPS) is in another country and i have the IP address and the Port Number and a ...
3
votes
2answers
5k views

Download exported Mikrotik config

I've read how to, and successfully created and export of my configuration. The documentation says the exports can be downloaded via FTP, but provide no details. Anybody know how to download an ...
3
votes
1answer
116 views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
3
votes
2answers
858 views

Mikrotik simple queue, Limiting range of IPs

I'm using a Mikrtotik RB201UiAS to manage my network. To avoid creating simple queues for every IP i have created queues for ranges of IPs. Target: 172.16.2.0/25 Dst: ...
3
votes
1answer
294 views

Issues with connecting to network resources after segmenting network

I've created network segments with my MikroTik RB1100 including 3 client LANs, a phone LAN, a trusted network (servers, printers, etc) and a DMZ. These are not VLAN's per-se as there is no tagging ...
3
votes
1answer
2k views

Error handling in Mikrotik scripts

I have RouterOS 5.14 on RB493G. I need to write script, that launches /tool fetch ... Execution of fetch may result in error, this is OK(URL may be sometimes unavailable). Script hangs on error. Is ...
3
votes
1answer
1k views

Help me make sense:VLAN, Hyper-V, Intel VMLB

I have serious problems getting VLANS working on a Hyper-V host with an Intel network card. The hardware: A router / switch (linux software bridge) which is a Mikrotik 1100 AH, Router OS 5.1 A ...
3
votes
0answers
76 views

Only able to ping WiFi AP for about 60 seconds, then is full access after

I have 3 x Mikrotik RB951Ui-2HnD router board (RB) running 6.31 with wlan1 bridged with ethernet 2. STP is disabled on the RB bridge (protocol mode set to None). I have a HP ProCurve 2520-24-PoE ...
3
votes
1answer
319 views

Mikrotik Download Limited

I have a Mikrotik routerboard RB2011UiAS. I have an issue that when downloading we only get between 10mbit (1000pps) - 13mbit(1200pps) when connecting directly into the ISP provide with the Mikrotik. ...
3
votes
2answers
1k views

Manually set IPv6 neighbor's MAC address in Mikrotik's RouterOS

I have an interesting problem. An ISP of ours started providing native IPv6 on their network. They provided us with a /56 prefix and a /126 linking segment (::1 being their endpoint and ::2 being ...
2
votes
1answer
843 views

MikroTik beep on RDP

I am a newbie in MikroTik RouterOS. How can I add a rule or script to beep when some one tries to connect to a special port on one of interfaces? For example I need to know if someone is trying to ...
2
votes
2answers
2k views

Allow RDP only over VPN

I want to do allow 3389 port(RDP) only through VPN connection, not normally. How can I do this? I have configured VPN server in Mikrotik. I have blocked all traffic except http and https by firewall ...
2
votes
1answer
881 views

Sharing Internet connection between people in apartment blocks

I am currently trying to choose hardware for two projects. The first project: there is a five-storey apartment block, which receives Internet connection through Wi-Fi. It is planned to place a grid ...
2
votes
2answers
876 views

NAT a single IP using 2nd WAN Internet

I have a mikrotik RB750 (6.22) acting as a gateway for my LAN. Here is the basic configuration: Ether1-WAN1 (1.1.1.10/24) IPs are hidden for privacy Ether2-WAN2 (2.2.2.20/24) Ether5-LAN ...
2
votes
3answers
12k views

How do I set up RouterOS to use web proxy on another machine?

The RouterOS docs show how to transparently proxy all web traffic via the HTTP proxy built into RouterOS: /ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect ...
2
votes
2answers
1k views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
2
votes
1answer
3k views

MIKROTIK - set proxy authentication

Is it possible to set mikrotik authetication to be used for set the connection of other applications to internet using mikrotik proxy? For example connect miranda IM using mikrotik proxy server: ...
2
votes
2answers
1k views

Mikrotik, script

I have Mikrotik 3.3, I have a dyndns script, which not works, because of this line: /tool fetch mode=http address="checkip.dyndns.org" src-path="/" dst-path="/dyndns.checkip.html"[/b] bad-argument ...
2
votes
2answers
10k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
2
votes
1answer
10k views

Mikrotik queues and limiting total upstream bandwidth

With a Mikrotik router (form of embedded Linux) I have created simple queues per machine matched by source IP address. Each of the 4 machine queues has an unlimited burst 3Mbps/3Mbps for Tx/Rx. ...
2
votes
2answers
11k views

Redirect private LAN traffic to internal server when DNS answers with external IP

I have a mikrotik RB2011 router/firewall. Inside the firewall I have a web server that has an private IP (lets say it's 192.168.1.5) On the WAN side of the firewall I have a static IP (assume it's ...
2
votes
1answer
5k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
2
votes
1answer
84 views

Logging NAT mappings on a Mikrotik router

I am looking for suggestions on how to configure a Mikrotik router to log NAT session setup and ideally teardown. However, setup only is sufficient for my immediate needs. I found a method to log ...
2
votes
0answers
2k views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
2
votes
0answers
501 views

Windows Authentication over site-to-site VPN

We have recently opened up a satellite office about 500 Km away from our main office. The office consists of 2 staff, and some of our office workers make their way out to this office every once in a ...
2
votes
1answer
2k views

IP Conflicts from mikrotik router for multiple ip addresses (that it isnt assigned)

I have a point to point wireless connection using two mikrotiks. When I plug the mikrotik into a switch with just my laptop I get an IP address conflict on my machine no matter what IP I am assigned. ...
1
vote
1answer
5k views

Prevent RDP logon brute force in mikrotik router via winbox

Masters, I need help, how to config our router to block RDP brute force attacks I would like to set our router to only allow RDP connection from a specified country (our specified IP ranges), plus i ...
1
vote
1answer
19k views

Routing from mikrotik two IP addresses to same gateway

I have 2 static addreses (a.b.c.72/24 and a.b.c.128/24) on gateway1 and gateway2 interfaces. ISP have one gateway a.b.c.1 . I can use a.b.c.72 only on gateway1, a.b.c.128 only on gateway2. How to ...
1
vote
3answers
3k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
1
vote
1answer
59 views

Prioritize traffic going to different interfaces

For example, we have regular clients sitting on wlan1 and Bittorrent client sitting on eth2. They access Internet via eth1. Bittorrent download traffic should be given lowest priority. So, that ...
1
vote
1answer
486 views

Does exist a curl equivalent command in routeros?

Just starting with routeros and after searching the official docs just fetch appears I need to do a POST request to REST API but I cannot find any curl like command. Is it possible to install curl ...
1
vote
1answer
1k views

How to make connections answer from the same gateway they entered in RouterOS?

I have a MikroTik RouterOS 6.23 device, and my network is as follows: Router | |-- bridge1_LAN (wlan1 + ether1) (192.168.0.210) -- LAN (192.168.0.0/24) | Here is where computers are. Those ...
1
vote
1answer
821 views

Mikrotik API reference for `passthrough=no`

In several parts of the Mikrotik API Manual there are references to the passthrough=no and passthrough=yes. e.g.,: Manual: Transparent Traffic Shaper Manual: "/ ip firewall mangle" But nowhere have ...
1
vote
3answers
757 views

Road Warrior VPN Setup

I apologise up front for the rather open ended nature of this question but I've got well out of my depth and could really do with some pointers. I need to set up a road warrior VPN solution which ...
1
vote
2answers
905 views

MikroTik as PPPoE server

I'm working at ISP and we provide internet over PPPoE. Our servers are running on FreeBSD and we are considering some improvement to enhance the administration of the server. We've thought of moving ...
1
vote
1answer
2k views

Mikrotik RB951G-2HnD - wi-fi drops or hangs connections [closed]

We've bought Mikrotik RB951G-2HnD in our company (about 20 - 25 clients in network) with 50 Mbps channel from the ISP-side. Mikrotik Wireless drops connection or getting very low speed often as more ...
1
vote
2answers
3k views

Use Mikrotik as a switch and route subnets through another router

I've got the following network configuration: Comtrend 5813 FTTH Router, connected to WAN, let's say in 192.168.50.x (being .1 router's address) and a DHCP server active, giving addresses from .150 ...
1
vote
1answer
2k views

MikroTik Wireless Bridge - Bad Ping With Load

A technician has set me up the wireless bridge between two houses but I have problem with ping under load. I have two MikroTik RB/SXTG devices in server/clint mode. They see each other (no obstacle) ...
1
vote
2answers
3k views

NAT to two different servers on the same port via hostname with Mikrotik RB2011

I have a Mikrotik RB2011 router, running RouterOS which connects to the internet via a static IP. In my lan I have two different servers, one that is on IP 192.168.89.11 and another on 192.168.89.12 ...
1
vote
1answer
420 views

Cannot ping from client to internet via IPv6 tunnel

I'm facing an odd issue with my IPv6 setup. I've configured it as follows: /interface 6to4 add comment="SixXS 6to4 tunnel" local-address=zz.yy.xx.94 (my wan ip) mtu=1280 name=6to4-sixxs ...
1
vote
1answer
1k views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflow?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...
1
vote
2answers
2k views

On Mikrotik RouterOS, is it possible to get Netflow information from a bridged connection?

I have a RouterOS box set up to bridge two ethernet connections. I have use-ip-firewall=yes in the bridge configuration, so that the ports go through the firewall. I've enabled netflow reporting via ...
1
vote
1answer
485 views

What information do I need for initial setup of BGP?

Hey guys, I will be installing a MikroTik BGP capable router into a datacentre tomorrow, I have almost no idea how to do this but luckily there is an identical mikrotik router that has already been ...
1
vote
0answers
18 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik ...
1
vote
1answer
69 views

MikroTik - Traffic flow (Netflow) Octets Counter wrap

I am using Traffic Flow with pmacct (nfacct) to do IP Accounting. I've noticed that if a flow exceeds ~4GBytes in less than a minute (which is my active-flow-timeout) the exported flow Octets counter ...
1
vote
0answers
101 views

Build IPv6 over IPv4 tunnel between server and home network

On one side I have an Ubuntu server in a data center that has IPv6 connectivity. The eth0 interface has a public IPv4 and also a public IPv6 /48. From that server I can ping IPv6 addresses OK. On the ...
1
vote
1answer
205 views

Mikrotik: how to properly setup IPV6 routing/dhcp server

I have the following configuration in my network: ISP Router <- eth1 -> Mikrotik Router <- eth2-5 -> Internal network My ISP router receives a /64 IPV6 block that is dynamic, changing ...
1
vote
0answers
118 views

IPv6 only server PXE provisioning

We are currently preparing for IPv6 only network deployment and struggle to find a unique server identification. In our previous setup, we used mac address as servers primary identification. We were ...
1
vote
0answers
673 views

How to get OpenVPN Client (Mikrotik RouterOS) <-> OpenVPN server (Debian/Linux) setup to work

I have some issues with making MT to work with OpenVPN server (Debian). I can make successfull connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. ...