Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [mikrotik]

Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.

0
votes
1answer
41 views

DNS requests with the term “router” in a subdomain always redirected to local router

It seems that my router (Mikrotik RB2011UiAS) is somehow hijacking DNS request that have the subdomain "router" in them and forwards them to itself. router.google.com, router.amazon.com, you name it,...
0
votes
0answers
21 views

Mikrotik AWS tunnel DUP ack

I would be really thankful if someone could help here. We have a LAN connected to the internet through a ONT connection. The ONT router is set to bridge mode, and the ISP pppoe configuration is set ...
0
votes
1answer
22 views

Route traffic to the internet through router and Mikrotik firewall

I would like to request your help to understand whether my diagram is correct, at least conceptually. Im trying to set a network environment from almost scratch. We have a fixed IP provided by ISP. ...
1
vote
2answers
115 views

Trying to get VLANs working between Mikrotik HAP AC and RB4011iGS+

Here is the network diagram: I have set up 3 vlans: vlan1: 192.168.9.0/24 vlan11-lan: 192.168.11.0/24 vlan22-guest: 192.168.22.0/24 vlan1 is working perfectly. Every host in 192.168.9.0/24 network ...
0
votes
1answer
59 views

Administration of multiple sites (tunneling) - MikroTik & NAT

I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
0
votes
0answers
88 views

Mikrotik backup using rancid

I'm trying to do a backup of a new Mikrotik using Rancid. To be more specific, Rancid is installed on a Ubuntu Server, that I can access via ssh using puTTY. I can access the Mikrotik via ethernet ...
0
votes
0answers
104 views

Freeradius 3.0.15 Fair Usage Policy doesn't work

I am running on the freeradius 3.0.15 on Ubuntu 16.04 almost over 4 month. But still I couldn't figure out how to deploy fair usage policy. I just want to reply Mikrotik-Rate-Limit to user when they ...
0
votes
0answers
49 views

OpenVPN server can't reach client (Mikrotik) subnet

I have VDS machine with Windows Server 2016. So far I've managed to install, configure and run OpenVpn server. My router Mikrotik is configured as client for OpenVPN. Lan behind Mikrotik is 192.168.1....
0
votes
0answers
34 views

Switch https traffic to another route reject all other traffic

I have this config on my Mikrotik: >/ip firewall mangle print 16 ;;; SQUID HTTPS chain=prerouting action=mark-routing new-routing-mark=SQUIDS passthrough=yes protocol=tcp src-...
0
votes
0answers
366 views

Configuring VLANs in Mikrotik RouterBOARD 750 r2

I'm having a hard time trying to configure VLAN tagging in a Mikrotik router. The same has 5 interfaces which I'll describe below: Interface 1 and Interface 2 --> ISPs Interface 3 --> Uplink to a ...
0
votes
1answer
47 views

IPTABLES not blocking EoIP Tunnel

So I decided to play with EoIP Tunnels today on two VMs which I installed free trial RouterOS on them. I set rules on iptables on the hypervisor (which is Proxmox) that prevents any input to vms ...
-1
votes
1answer
107 views

Router work as IPsec client to Cisco ASA

Is it possible to configure mikrotik as IPsec vpn client to Cisco Asa? I have ASA connected with static IP to the internet and want to connect mikrotik router behind dynamic IP internet connection to ...
0
votes
1answer
56 views

Configuring MikroTik RB 750 GL to have switch as WAN and Ether1 as NAT to LAN

My ISP allows me to have multiple static IP addresses. I want to use a RouterBoard 750GL to attach multiple publicly addressable servers to the internet using Ether[2-5] in switch mode, and use Ether1 ...
0
votes
1answer
109 views

Mikrotik reverse NAT

Hi, I have attached my current network diagram. I have having problems on how to NAT my public IPs so that each client will use 2 different public IP. My ISP routes 3 public IP to my router over PPPOE....
0
votes
0answers
102 views

How to connect VPN external protected by password to GCP?

I already followed a video tutorial about connect VPN external from AWS to GCP. Actually my VPN external not from AWS but mikrotik (using email and password for login) different with that's video ...
0
votes
1answer
129 views

Mikrotik - 5GHz AC - only 110Mbps

I just bought Mikrotik hAP AC^2 and I configured it's WiFi to be controlled by CAPsMAN. The problem I have is that when I connect to it with my laptop (MacBook Pro 2016 Touchbar) I cannot achieve more ...
0
votes
0answers
35 views

Tcpdump receives packets but they are not delivered to firewall

I am working with Proxmox, OpenVPN and Mikrotik Router. When I try to connect from OpenVPN client (192.168.10.13) to VM (192.168.1.19) hosted on Proxmox I don't get any response. Proxmox host (192....
0
votes
1answer
151 views

how to use src-address in mikrotik script 'find'

:foreach i in=[/ip fi man find chain=forward ] do={:put [/ip fi man get value-name=src-address $i] } I get: 192.168.1.99 192.168.1.100 192.168.1.101 192.168.1.102 :foreach i in=[/ip fi man find ...
0
votes
0answers
72 views

Restrict User login based on Service Type in Freeradius

Scenario: We have Freeradius v 2.2.8 along Mikrotik as Mikrotik Router as PPPoE / HOTSPOT NAS server. When we create user in freeradius, user can connect via pppoe dialer or hotspot web login both. ...
1
vote
1answer
1k views

How to reserve a static-ip on Mikrotik router for a device that is attached to a fixed router's Ethernet port

I am trying hard to figure out how can I force any DHCP client device connects to the port ETH10 on Mikrotik router get assigned a fixed IP-address. Please note that the device MAC address is unknown ...
0
votes
0answers
126 views

NetInstall Mikrotik RouterBOARD 1100 AH X2

I'm having an issue with my Mikrotik RouterBOARD 1100AHX2 and I think reintalling its OS may help. My question is, do I connect my PC that is running NetInstall to port Eth1 or port Eth13 on the ...
0
votes
0answers
224 views

Wifi-as-WAN with a Mikrotik RB941-2nD-TC?

I'm attempting to use a Mikrotik RouterOS device as a router for several devices on an internal LAN, with a WiFi hotspot device on the WAN side. This is a mobile setup, so I have several cellular Mifi ...
1
vote
1answer
143 views

Make a Mikrotik Router behave as a separate router on each port

We use Mikrotik routers for many points in our system, but we have an odd need for one location. We would like to use one router (example: RB960PGS-PB), where the main Internet connection comes in on ...
0
votes
2answers
515 views

Mikrotik: can't access to port from outside

I exposed web-service on my local machine to the external IP via Mikrotik and can access it via MY_EXTERNAL_IP:5000. But my nginx-server can't access to MY_EXTERNAL_IP:5000. Logs: 14:09:53 firewall,...
0
votes
1answer
1k views

How to set up QoS on MikroTik RouterOS?

I'm aware that this is a common question but I've invested two days now to learn this and still could not find a clear explanation... Recently I bought a Miktotik hEX (RouterOS 6, Level 4), used as ...
1
vote
1answer
269 views

Mikrotik routing VPN packets to wrong interface

I'm trying connect my network to AWS VPC using Static IP AWS VPN. I've followed the instructions of AWS and configured correctly my MikroTik router and can ping the Ubuntu instance I've attached in ...
0
votes
1answer
50 views

Routing between 3 interfaces in 3 separate networks

Prologue Greetings network engineers out there! I would appreciate your help in following scenario. I did some research, and I figured out only two solutions. And because one of them is not suitable ...
0
votes
0answers
1k views

Mikrotik RouterOS(OpenVPN client) connecting to OpenVPN server(Ubuntu)

I have some issues with making MT to work with OpenVPN server (Ubuntu). I can make successful connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. Setup ...
0
votes
1answer
799 views

Mikrotik - NAT behind NAT

I have two routers, one given by the internet provider, which I cannot control ( only they can ) and the second is my Mikrotik HAP ac (RB962UiGS-5HacT2HnT). My router was primary before, and I had ...
0
votes
0answers
234 views

Unable to ping IP from same broadcast domain/subnet

I can't seem to get my head around this (hopefully) simple problem. I have 1 brocade and a Mikrotik router both connected each other have an IP address from the a /28 Public facing subnet. The brocade ...
0
votes
2answers
2k views

How to set up IPSec Xauth RSA client on Mikrotik/RouterOS?

I would need to configure IPSec Xauth RSA client on Microrik. I have such client working on Android. I have all necessary certificates provided along with Username/Password. Is it ever possible? If ...
0
votes
0answers
81 views

Freeradius Restrict User Auth Request Based on VLAN

Scenario: We have Mikrotik as NAS and Freeradius as billing. VLAN are configured for each dealer's area. We have few reseller/frenchise managers, like Dealer-A, Dealer-B. They can create there own ...
0
votes
0answers
1k views

CAPsMAN configuration for multiple vlan and multiple SSIDs

I have a problem with wireless configuration by CAPsMAN using vlans. My network: CCR ---- TRUNK (vlan: 250, 10, 20) ---- CRS ---- (vlans U:250, T:10, 20) ---- wAP ac My CCR is a gateway, DHCP ...
0
votes
1answer
67 views

Route traffic from one VPN tunnel to the other

I have three sites with the following interconnections: Site1 connected to Site2 and Azure site. Site2 connected only to Site1. I need to establish a route that goes from Site2 to Azure through ...
1
vote
0answers
81 views

RouterOS sending malformed packets

I have a Routerboard 951G-2HnD which runs latest stable: RouterOS v6.50.5 Firmware v3.41 The board acts as the WiFi AP in WPA2-PSK mode. Recently I have noticed unhealthy amount of traffic sent from ...
1
vote
1answer
352 views

TCP Initial Handshake Incomplete (ACK Missing)

I am irritated about the following scenario: I am running a MVC application on an IIS 10 Webserver. While calling the URI, it takes about 10 seconds until the application starts to get called (IDLE ...
2
votes
1answer
568 views

Mikrotik strictly specify masquerade NAT ports range

I want to limit TCP/UDP ports which can be used for masquerade NAT on my Mikrotik router. For example, I want to use only 40000-65535 TCP ports range and 20000-65535 UDP ports range for masquerade. ...
1
vote
3answers
385 views

Order of external DNS servers on Router OS DNS Server

We have DNS server on our Mikrotik (RouterOS 6.36). [admin@xxx] /ip dns> print servers: 10.0.10.3,8.8.8.8 dynamic-servers: allow-remote-requests: yes max-udp-packet-...
1
vote
2answers
657 views

How to disable TCP timestamps on a Mikrotik router?

I'm using OpenVAS as vulnerability scanner and I completed a local network scanning which also involves a MikroTik router as default gateway. The router shows a weakness, better known as "TCP ...
0
votes
1answer
250 views

Pitfalls of remote access to mikrotik router

We are getting some configuration work done, through a remote contractor on our Mikrotik router (as we don't have expertise in-house) Considering the router is the essential part of our network, I am ...
0
votes
1answer
622 views

MikroTik Router: PoE-In doesn't work

I'm trying to install a MikroTik Cloud Core Router CCR1009-7G-1C-1S+PC. Our internet comes from an antenna and the main cable (from the antenna) first connects to a PoE injector (Phihong POE61U-560DG)....
1
vote
1answer
710 views

Mikrotik IPV6 dhcp client

The DHCP client in my mikrotik router never obtains a ipv6 address or prefix, when connected to internet. I understand I need a prefix, so the devices on my lan can get a valid external IP. However ...
0
votes
2answers
5k views

Mikrotik - Changing/removing a master-port disconnects from a router

I have a Mikrotik router with 5 ports. By default ether2-master is a master port for the ports 3-5. If I try to change it - I'm disconnected from the router, so I have to reset it to get the ...
1
vote
0answers
518 views

Mikrotik port forwarding - no access to server

I need your help concerning port forwarding with Mikrotik's RouterOS! I have executed this command : /ip firewall nat add action=dst-nat chain=dstnat comment="Owncloud in NAT" dst-port=8079 in-...
0
votes
3answers
363 views

openvpn dynamic (downloadable) configuration

I have a mikrotik router working as openvpn server. My problem is mikrotik can't push routes to the clients. Then, I'm wandering if it is possible to add to the client configuration some kind of "...
0
votes
1answer
145 views

Rewriting HTTP request contents that are going through Mikrotik RouterOS VPN

I need to pipeline through all the requests from my VPN clients connected to Mikrotik OpenVPN gateway, but when request being made is and HTTP request and is targeting particular destination, I want ...
0
votes
1answer
59 views

Why static route can be ignored?

I'm trying to route all traffic to 10.2.0.0/24 via OpenVPN client(10.7.0.2) Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...
-2
votes
2answers
52 views

intra ethernet interface of a router

Please I need some clearification. Is it possible to ping from one interface of a router to another interface of thesame router ? Assuming router R1 with LAN interfaces e1 and e2. can i ping e2(...
0
votes
1answer
67 views

Connecting with local server machine from the internet

I have a MikroTik router with dynamic IP. I also have one of PCs connected to that router via cable. That machine has a TCP socket server program running on it. Previously I was testing the server by ...
-2
votes
1answer
652 views

how to get IP address list of Social Network [closed]

I'm newbie sorry for my poor English I want block range IP of Social networks and Game server in Mikrotik router . I need IPs of below social network : Telegram Clash Of Clans Instagram i google ...