Questions tagged [mikrotik]
Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.
251
questions
0
votes
1answer
21 views
Ansible error with auto provision Mikrotik router
I have a problem that I cannot understand how to solve ...
From my ansible central machine I have written a routine for Mikrotik, to execute a series of configuration commands and thus auto provision ...
0
votes
0answers
13 views
How to assign different ip address to LAN port of mikrotik
I have connected mikrotik router as secondary router,main router IP is in range of 192.168.1... Now i want to assign different ip address like 192.168.10.... to LAn port of mikrotik,after assigning ...
0
votes
1answer
78 views
Manually subnet an IPv6 Prefix Across Multiple MikroTik Routers w/out Prefix Delegation
I want to configure my network so hosts can IPV6 auto-address Global Unicast Addresses ("GUA") using SLAAC. I have a ::/48 (assigned by Hurricane Electric) that I want to divide into subnets and ...
0
votes
1answer
20 views
MikroTik: Set scan-list in RoS to ONLY use 2.4 GHz non-overlapping channel frequencies
How do I set the scan-list in MikroTik RouterOS to use only 2.4 GHz non-overlapping channel frequencies?
4
votes
2answers
170 views
WiFi: Frequencies that map to non-overlapping 2.4 GHz channels 1,6 & 11
I'm configuring a wireless router. I know the non-ovelapping channels are 1,6 & 11. However, my router only specifies frequencies that I can select, not channels. What are the frequencies that ...
0
votes
1answer
21 views
Dual Wan mikrotik connection force route
I have two WAN connection to my Mikrotik One for me (ADSL) and another for the family(PPPOE)
I want my devices (2 Laptops, & 2 Smartphones) to go through interface 2 ADSL Connection
192.168.1.10/...
0
votes
1answer
28 views
MikroTik. NAT forwarding is not working for local network
I try to access my external IP address from the local network, but instead of reaching my webserver behind NAT - the webfig page shows up.
NAT forwarding is working when accessing from the internet.
...
2
votes
1answer
58 views
Too long TCP handshake while doing NAT
I've installed Mikrotik hEX at location 'A', Mikrotik hAP AC^2 at location 'B', and connected each with OVPN L2. Both two routers have their NAT features turned on, and have their private network.
hEX ...
0
votes
0answers
55 views
Cloudflare 522 error while proxied, not on DNS only
I have set up cloudflare to access my website. I am forwarding port 443 to a server from a Mikrotik router to an Ubuntu server running NGINX. It works fine with DNS only. It gives a 522 when switching ...
0
votes
0answers
68 views
HotSpot and cAP ac with RB4011
I've got an RB4011 as my main office router, setup fine, all working. I then have a cAP ac wireless access point I want to use to give Staff access and a HotSpot that authenticates against a Radius ...
0
votes
0answers
103 views
Isolate virtual machines from each other and from the internet (VLAN, Mikrotik SwOS)
There is a virtualization server where some of them VMs are assigned a different VLAN ID.
There is a switch running Mikrotik SwOS and the virtualization server is connected via one single Ethernet ...
0
votes
0answers
36 views
MikroTik VPN With Multiple External IP Addresses
I have a MikroTik CCR1009-8G-1S that is providing the Internet connection for two separate but co-located businesses. Both businesses have VPN configured on their servers and the MikroTik passes the ...
0
votes
1answer
321 views
DNS-over-HTTPS for Windows DNS server forwarding?
Is it possible to configure DNS Forwarding of Windows Server 2019 AD DNS servers using DNS-over-HTTPS, or do I need to use an intermediary server internally to resolve using DoH and return regular ...
0
votes
0answers
23 views
Apache supplying OR PHP return false (different) IP address
I am using $_SERVER["REMOTE_ADDR"] to get the client IP address and give my web app access to some specific IP addresses. But the $_SERVER["REMOTE_ADDR"] variable return the false (Different) client ...
2
votes
2answers
198 views
NAT Public IP to Public IP with Mikrotik
My target is to route: 192.0.2.1 (public IP) to 192.0.2.2 (another public IP out of my network). I want to route all the ports and protocols, so Mikrotik will just send all the packets there.
I have ...
0
votes
1answer
35 views
How to connect from one bridge to another?
I have Mikrotik router and two bridges.
private-bridge: eth1, eth2 (10.20.0.0/24)
public-bridge: eth3, eth4, eth5 (192.168.88.0/24)
I have on printer on eth1 and I want be able to connect from eth4....
1
vote
0answers
389 views
VLAN Config on Mikrotik RB4011
I'm trying to configure the router to have two subnets 192.168.1.0/24 and 192.168.2.0/24. The first subnet is the default and all ports should use this as the default IP range, the second subnet ...
1
vote
0answers
39 views
Route trafic from one wAP to VPN
i have two mikrotik routers.
One router - 2011 (main) has public static IP address and has L2TP over ipsec vpn server running on it. I can connect to it from laptops and mobiles. When i connected, my ...
0
votes
0answers
247 views
how to extract certificate from .ovpn file
I'm using road warrior openvpn server. As end-point client configuration I have .ovpn files. I want to setup openvpn client on Mikrotik 4011 router, but it seems only work with certificates and ...
0
votes
2answers
331 views
How to forbid DHCP-server to lease specific IP address on Mikrotik's routerOS?
My Mikrotik router is running a DHCP server in /24 network, I would like to prohibit it to lease some IP addresses (I would like to use them statically on a couple of devices). Are there any ways to ...
0
votes
0answers
26 views
Mikrotik automate simple queue packet mark
i have Queue that is done by my billing system. iam trying to add packet mark on every single queues. Billing system create queue when a new customer is created.
is there anyway that this can be ...
0
votes
0answers
73 views
IKEv2/IPsec. Strongswan server static external ip-address. 2 pcs of Mikrotiks as clients. Routing (or what?) Mikrotiks LAN-subnets
Strongswan 5.7 on Debian 10. Static "white" ip address.
2 Mikrotiks with grey ip addresses from ISPs' and NAT:
/ip address print
2 D 10.141.170.32/16 10.141.0.0 ether1
Mikrotik "A" LAN ...
1
vote
0answers
191 views
route internet traffic through vpn failed (mikrotik, tried ikev2 & gre tunnel)
want to route some internet traffic through vpn, from local site to remote site router(R2)
R1: LOCAL site (750Gr3): LAN / 172.16.1.1/24, gre over ipsec tunnel ip: 192.168.8.1/24
R2: Remote site (CHR, ...
0
votes
0answers
22 views
Configure mikrotik to allow communication between WIFI clients and LAN Clients
i have a client connected using LAN interface to mikrotik hap lite
and mikrotik is connected to wifi access point
and my laptop also is connected to wifi access point i want to configure mikrotik to ...
1
vote
1answer
38 views
How to route a file to specific gateway?
I have Windows 8.1 Enterprise
I am connected to two internet connections on my PC with this gateways:
192.168.1.1 = my isp gateway
192.168.43.1 = my mobile usb tethering gateway
Now I want ...
0
votes
2answers
107 views
Mikrotik HPE SFP interconnect
Can I connect a Mikrotik Router (hEX S, for instance) to HP/Aruba switch (J9776A, for instance) via SPF? What modules should I use?
I can easily find compatibility table of HPE SFP modules and ...
0
votes
1answer
936 views
Mikrotik - Route Specific IP over VPN
I have a PPTP VPN connection setup on my Mikrotik router. I would like to route only one IP on my local network over that VPN Connection. All traffic for that IP address can be routed over VPN.
How ...
0
votes
1answer
477 views
Mikrotik CAPsMAN Client to Client forwarding not working
I am trying to set Mikrotik CAPsMAN to allow wifi users communicate between each other
On CAPs server I have allowed "Local forwarding" and "Client to Client forwarding", pushed configuration but ...
0
votes
1answer
2k views
MikroTik EAP-TLS WiFi Config using Certificates
What are the upsides and downsides of using EAP-TLS authentication with certificates for WiFi client connections? How is this superior than just using standard WPA2 password authentication?
How do I ...
0
votes
1answer
69 views
Mikrotik NAT works on RDP but not on ports 5555 or 8787
I Have a router with some simple NAT rule that allowed me to remotelly connect to my remote desktop (now disabled), the problem is that the NAT does not work on ports 5555 and 8787 with similar ...
1
vote
2answers
425 views
Mikrotik - lots of tcp retransmission packets
I have a ubuntu server with ip 192.168.10.144, in this server I have a docker network using ip range 10.0.0.0/24. I need connect my computer to some services running in docker, so I've added a route ...
-2
votes
1answer
239 views
Can MikroTik block certain YouTube channels? [closed]
I want to block some adult content from YouTube.
Can MikroTik routers block certain Youtube Channels? Or certain content from YouTube?
0
votes
0answers
512 views
Mikrotik IPSec Multi Site VPN
We have a multi-site network with a "Central" facility and multiple "Sites".
On each site, we installed a router with capabilities for VPN but always connect to internet through an ISP router.
Also, ...
0
votes
0answers
36 views
Echo result only displays IPs from “ADDRESS” (Mikrotik)
I have PHP script that displays the results of commands from Mikrotik as below:
if ($ ssh = ssh2_connect ('10 .10.10.5 ', 22)) {
if (ssh2_auth_password ($ ssh, 'USERNAME', 'PASSWORD')) {
$ ...
0
votes
1answer
99 views
Cannot pppoe if not connected to the bridge of provider's mikrotik
my italian provider open fiber just installed in my rack a new optical fiber GPON connectivity.
They passed into my office's walls an optical cable that ends into a zte zxhn f601 converter sc to rj45....
0
votes
0answers
63 views
openvpn - routes issue on client side
i have configured openvpn in my ros and this is my openvpn client config :
client
dev tun
proto tcp
remote sub.domain.tld 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls ...
0
votes
1answer
612 views
How i block all websites except gmail & google using mikrotik
I've tried many tutorial how to block any website and except some website.
I can block Website except Google, Youtube, drive.google, google Document (Gsuite Solutions) and Gmail in Bridge-HIS ...
3
votes
2answers
1k views
Can't get a serial console on MikroTik RB4011iGS+
I am trying to connect to the serial console of my MikroTik RB4011iGS+.
I might be missing something obvious, but I can't seem to get a terminal (or anything else).
Relevant documentation page:
...
0
votes
0answers
715 views
Mikrotik hEX port forwarding doesn't works
I have an hEX Mikrotik router, factory default settings, latest firmware.
By default it comes with eth2 to eth5 bridged, and eth1 as the "WAN" port, plus a few Firewall rules. By default the bridged ...
1
vote
2answers
2k views
How to set a default page within hotspot MikroTik to be open automatically after wifi connect
I'm trying to set a Default HTML Page to be opened after wifi connects automatically.
Kinda like the Login page. I've tried writing a few javascript lines to make the redirect work but after redict, ...
0
votes
0answers
38 views
Free traffic to apps
I have a question! in my internet provider I have several hotspots where clients hire for example 5GB of internet, for this to work I use the Total Bytes Limit in the hotspot settings. but I wanted ...
0
votes
2answers
263 views
How does hostname resolution work without hosts file?
The company I work at has a lot of local server accessible via hostname (ABCSRVDC01 for example). To connect to one of them over SSH I don't need to use the ip address of the server, but instead use ...
0
votes
0answers
614 views
Strongswan CentOS 7 to Mikrotik Router L2TP VPN “NO_PRPOSAL_CHOSEN”
I have reviewed existing Q&A on this issue and, maybe there's a hook I'm not seeing, but I don't know what else to try.
I get this output when attempting to launch VPN from CentOS "client":
[...
0
votes
0answers
459 views
Mikrotik L2TP/IPSEC VPN setup
Issue: Setting up L2TP VPN using IPSEC and the connection fails after getting an IPSEC key (and establishing).
Steps taken:
Reloaded and reconfigured using different instructions (several
times)
...
0
votes
0answers
437 views
How to block communication between two bridges on MikroTik router?
I am using specific bridges for MikroTik CAPsMan WiFi and LAN, and the idea is to block traffic between the two.
I tried
/interface bridge filter
add action=drop chain=forward in-bridge=WiFi out-...
0
votes
1answer
2k views
Mikrotik - Using bridge for WAN/DMZ
I'm not sure I'm going about this the right way....
I have 3 static IP's from my ISP that are all in the same subnet with the same gateway. One address is used for the router (RB3011 - 6.43.8) on a ...
1
vote
0answers
173 views
How to allow responding to broadcast pings on Mikrotik RouterOS?
By default, most systems don't respond to broadcast ping requests. However, there exist ways to explicitly allow responding to broadcast ICMP requests on multiple systems, such as Linux.
How can I ...
1
vote
1answer
799 views
How to debug Mikrotik bridge filter forward rules not having any effect?
As part of diagnosing a different problem were trying to add a bridge filter rule that will stop all traffic from forwarding between two interfaces on a bridge.
The router has two interfaces ether1 ...
0
votes
1answer
234 views
Traffic not going through vpn
I have a Mikrotik(DC), acting as a l2tp server
and a CentOS7(Office) OS connected to that server.
The problem is that I can ping the mikrotik from the centos and from the network behind it, and I can ...
1
vote
1answer
2k views
MikroTik Capsman is trying to push network channel configurations that are not allowed by access points
According to information from allowed-channels command on my Access Point the allowed channels are the following:
5180/20-Ceee/ac,
5260/20-Ceee/ac/DP,
5745/20-Ceee/ac,
5750/20-Ceee/ac,
5755/20-Ceee/...
