Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.

learn more… | top users | synonyms

6
votes
2answers
17k views

Mikrotik and NAT/Routing issue

I have basic NAT/Routing problem with Mikrotik RB750 that I've been unable to solve over the past days. From our ISP we have 26 IP addresses: 10.10.10.192/27, with 10.10.10.193 being the gateway and ...
4
votes
1answer
632 views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
4
votes
2answers
3k views

Mikrotik simple queue, Limiting range of IPs

I'm using a Mikrtotik RB201UiAS to manage my network. To avoid creating simple queues for every IP i have created queues for ranges of IPs. Target: 172.16.2.0/25 Dst: ...
4
votes
1answer
11k views

Setting HTTPS Proxy in Winbox for MikroTik

I am using MikroTik router model RB750, I need to use HTTPS proxy method for some of my clients. The Proxy Server (VPS) is in another country and i have the IP address and the Port Number and a ...
4
votes
1answer
3k views

Error handling in Mikrotik scripts

I have RouterOS 5.14 on RB493G. I need to write script, that launches /tool fetch ... Execution of fetch may result in error, this is OK(URL may be sometimes unavailable). Script hangs on error. Is ...
3
votes
2answers
6k views

Download exported Mikrotik config

I've read how to, and successfully created and export of my configuration. The documentation says the exports can be downloaded via FTP, but provide no details. Anybody know how to download an ...
3
votes
1answer
324 views

Issues with connecting to network resources after segmenting network

I've created network segments with my MikroTik RB1100 including 3 client LANs, a phone LAN, a trusted network (servers, printers, etc) and a DMZ. These are not VLAN's per-se as there is no tagging ...
3
votes
1answer
1k views

Help me make sense:VLAN, Hyper-V, Intel VMLB

I have serious problems getting VLANS working on a Hyper-V host with an Intel network card. The hardware: A router / switch (linux software bridge) which is a Mikrotik 1100 AH, Router OS 5.1 A ...
3
votes
1answer
168 views

Logging NAT mappings on a Mikrotik router

I am looking for suggestions on how to configure a Mikrotik router to log NAT session setup and ideally teardown. However, setup only is sufficient for my immediate needs. I found a method to log ...
3
votes
1answer
778 views

Mikrotik: how to properly setup IPV6 routing/dhcp server

I have the following configuration in my network: ISP Router <- eth1 -> Mikrotik Router <- eth2-5 -> Internal network My ISP router receives a /64 IPV6 block that is dynamic, changing ...
3
votes
0answers
266 views

IPv6 only server PXE provisioning

We are currently preparing for IPv6 only network deployment and struggle to find a unique server identification. In our previous setup, we used mac address as servers primary identification. We were ...
3
votes
0answers
83 views

Only able to ping WiFi AP for about 60 seconds, then is full access after

I have 3 x Mikrotik RB951Ui-2HnD router board (RB) running 6.31 with wlan1 bridged with ethernet 2. STP is disabled on the RB bridge (protocol mode set to None). I have a HP ProCurve 2520-24-PoE ...
3
votes
1answer
345 views

Mikrotik Download Limited

I have a Mikrotik routerboard RB2011UiAS. I have an issue that when downloading we only get between 10mbit (1000pps) - 13mbit(1200pps) when connecting directly into the ISP provide with the Mikrotik. ...
3
votes
1answer
2k views

IP Conflicts from mikrotik router for multiple ip addresses (that it isnt assigned)

I have a point to point wireless connection using two mikrotiks. When I plug the mikrotik into a switch with just my laptop I get an IP address conflict on my machine no matter what IP I am assigned. ...
3
votes
2answers
1k views

Manually set IPv6 neighbor's MAC address in Mikrotik's RouterOS

I have an interesting problem. An ISP of ours started providing native IPv6 on their network. They provided us with a /56 prefix and a /126 linking segment (::1 being their endpoint and ::2 being ...
2
votes
1answer
975 views

MikroTik beep on RDP

I am a newbie in MikroTik RouterOS. How can I add a rule or script to beep when some one tries to connect to a special port on one of interfaces? For example I need to know if someone is trying to ...
2
votes
2answers
3k views

Allow RDP only over VPN

I want to do allow 3389 port(RDP) only through VPN connection, not normally. How can I do this? I have configured VPN server in Mikrotik. I have blocked all traffic except http and https by firewall ...
2
votes
1answer
5k views

Prevent RDP logon brute force in mikrotik router via winbox

Masters, I need help, how to config our router to block RDP brute force attacks I would like to set our router to only allow RDP connection from a specified country (our specified IP ranges), plus i ...
2
votes
1answer
22k views

Routing from mikrotik two IP addresses to same gateway

I have 2 static addreses (a.b.c.72/24 and a.b.c.128/24) on gateway1 and gateway2 interfaces. ISP have one gateway a.b.c.1 . I can use a.b.c.72 only on gateway1, a.b.c.128 only on gateway2. How to ...
2
votes
1answer
912 views

Sharing Internet connection between people in apartment blocks

I am currently trying to choose hardware for two projects. The first project: there is a five-storey apartment block, which receives Internet connection through Wi-Fi. It is planned to place a grid ...
2
votes
1answer
751 views

Does exist a curl equivalent command in routeros?

Just starting with routeros and after searching the official docs just fetch appears I need to do a POST request to REST API but I cannot find any curl like command. Is it possible to install curl ...
2
votes
2answers
1k views

NAT a single IP using 2nd WAN Internet

I have a mikrotik RB750 (6.22) acting as a gateway for my LAN. Here is the basic configuration: Ether1-WAN1 (1.1.1.10/24) IPs are hidden for privacy Ether2-WAN2 (2.2.2.20/24) Ether5-LAN ...
2
votes
3answers
13k views

How do I set up RouterOS to use web proxy on another machine?

The RouterOS docs show how to transparently proxy all web traffic via the HTTP proxy built into RouterOS: /ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect ...
2
votes
1answer
2k views

How to make connections answer from the same gateway they entered in RouterOS?

I have a MikroTik RouterOS 6.23 device, and my network is as follows: Router | |-- bridge1_LAN (wlan1 + ether1) (192.168.0.210) -- LAN (192.168.0.0/24) | Here is where computers are. Those ...
2
votes
2answers
1k views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
2
votes
1answer
907 views

Mikrotik API reference for `passthrough=no`

In several parts of the Mikrotik API Manual there are references to the passthrough=no and passthrough=yes. e.g.,: Manual: Transparent Traffic Shaper Manual: "/ ip firewall mangle" But nowhere have ...
2
votes
1answer
3k views

MIKROTIK - set proxy authentication

Is it possible to set mikrotik authetication to be used for set the connection of other applications to internet using mikrotik proxy? For example connect miranda IM using mikrotik proxy server: ...
2
votes
2answers
970 views

MikroTik as PPPoE server

I'm working at ISP and we provide internet over PPPoE. Our servers are running on FreeBSD and we are considering some improvement to enhance the administration of the server. We've thought of moving ...
2
votes
2answers
1k views

Mikrotik, script

I have Mikrotik 3.3, I have a dyndns script, which not works, because of this line: /tool fetch mode=http address="checkip.dyndns.org" src-path="/" dst-path="/dyndns.checkip.html"[/b] bad-argument ...
2
votes
1answer
2k views

Mikrotik RB2011U vlanning

I am having trouble getting port based vlanning/trunking working on a Mikrotik RB2011U. I have been following the guide located here: ...
2
votes
1answer
4k views

Configuration of Mikrotik to allow communication with wireless clients

I'm managing an relatively small office and my basic network setup is as follows: All LAN computers are connected to a central switch which is connected with a Mikrotik Router. LAN subnet is ...
2
votes
2answers
11k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
2
votes
1answer
12k views

Mikrotik queues and limiting total upstream bandwidth

With a Mikrotik router (form of embedded Linux) I have created simple queues per machine matched by source IP address. Each of the 4 machine queues has an unlimited burst 3Mbps/3Mbps for Tx/Rx. ...
2
votes
2answers
13k views

Redirect private LAN traffic to internal server when DNS answers with external IP

I have a mikrotik RB2011 router/firewall. Inside the firewall I have a web server that has an private IP (lets say it's 192.168.1.5) On the WAN side of the firewall I have a static IP (assume it's ...
2
votes
1answer
5k views

Accounting setup in freeradius with mikrotik and the “always” module

I have a freeradius setup that is being used to provide authentication for users on a wireless network. The access points are all Mikrotik hardware and the users are connected 24/7. We've been ...
2
votes
2answers
2k views

On Mikrotik RouterOS, is it possible to get Netflow information from a bridged connection?

I have a RouterOS box set up to bridge two ethernet connections. I have use-ip-firewall=yes in the bridge configuration, so that the ports go through the firewall. I've enabled netflow reporting via ...
2
votes
0answers
2k views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
2
votes
0answers
525 views

Windows Authentication over site-to-site VPN

We have recently opened up a satellite office about 500 Km away from our main office. The office consists of 2 staff, and some of our office workers make their way out to this office every once in a ...
1
vote
1answer
2k views

Mikrotik route syntax to create a new routing table

I want to replace my linux gateway box to Mikrotik. But I never found how to write this linux's iproute2 command in mikrotik's way: ip route add default via 10.1.1.1 table browser ip route add ...
1
vote
3answers
3k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
1
vote
1answer
69 views

Prioritize traffic going to different interfaces

For example, we have regular clients sitting on wlan1 and Bittorrent client sitting on eth2. They access Internet via eth1. Bittorrent download traffic should be given lowest priority. So, that ...
1
vote
3answers
831 views

Road Warrior VPN Setup

I apologise up front for the rather open ended nature of this question but I've got well out of my depth and could really do with some pointers. I need to set up a road warrior VPN solution which ...
1
vote
1answer
2k views

Mikrotik switched VLAN configuration

With Routerboard 450G I want to configure the 5 Ethernet ports as follows: ether1: vlan3, untagged ether2: vlan1, untagged ether3: vlan2, untagged ether4: vlan2, untagged ether5: vlan1-vlan3, tagged ...
1
vote
1answer
3k views

Mikrotik RB951G-2HnD - wi-fi drops or hangs connections [closed]

We've bought Mikrotik RB951G-2HnD in our company (about 20 - 25 clients in network) with 50 Mbps channel from the ISP-side. Mikrotik Wireless drops connection or getting very low speed often as more ...
1
vote
2answers
4k views

Use Mikrotik as a switch and route subnets through another router

I've got the following network configuration: Comtrend 5813 FTTH Router, connected to WAN, let's say in 192.168.50.x (being .1 router's address) and a DHCP server active, giving addresses from .150 ...
1
vote
1answer
2k views

MikroTik Wireless Bridge - Bad Ping With Load

A technician has set me up the wireless bridge between two houses but I have problem with ping under load. I have two MikroTik RB/SXTG devices in server/clint mode. They see each other (no obstacle) ...
1
vote
2answers
3k views

NAT to two different servers on the same port via hostname with Mikrotik RB2011

I have a Mikrotik RB2011 router, running RouterOS which connects to the internet via a static IP. In my lan I have two different servers, one that is on IP 192.168.89.11 and another on 192.168.89.12 ...
1
vote
1answer
459 views

Cannot ping from client to internet via IPv6 tunnel

I'm facing an odd issue with my IPv6 setup. I've configured it as follows: /interface 6to4 add comment="SixXS 6to4 tunnel" local-address=zz.yy.xx.94 (my wan ip) mtu=1280 name=6to4-sixxs ...
1
vote
1answer
1k views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflow?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...
1
vote
1answer
485 views

What information do I need for initial setup of BGP?

Hey guys, I will be installing a MikroTik BGP capable router into a datacentre tomorrow, I have almost no idea how to do this but luckily there is an identical mikrotik router that has already been ...