Questions tagged [mikrotik]
Latvian manufacturer of computer networking equipment, known for the Linux-based operating system known as MikroTik RouterOS.
216 questions
1
vote
1answer
38 views
+50
How to debug Mikrotik bridge filter forward rules not having any effect?
As part of diagnosing a different problem were trying to add a bridge filter rule that will stop all traffic from forwarding between two interfaces on a bridge.
The router has two interfaces ether1 ...
0
votes
1answer
51 views
Traffic not going through vpn
I have a Mikrotik(DC), acting as a l2tp server
and a CentOS7(Office) OS connected to that server.
The problem is that I can ping the mikrotik from the centos and from the network behind it, and I can ...
0
votes
0answers
30 views
MikroTik Capsman is trying to push network channel configurations that are not allowed by access points
According to information from allowed-channels command on my Access Point the allowed channels are the following:
5180/20-Ceee/ac,
5260/20-Ceee/ac/DP,
5745/20-Ceee/ac,
5750/20-Ceee/ac,
5755/20-Ceee/...
0
votes
1answer
38 views
VLAN not working in MikroTik RouterBoard HAP
I'm currently having some problems configuring the VLAN in our network.
Description: get the VOIP phones in to the VLAN2 with the MikroTik RouterBoard HAP. VPN configuration is on this device for the ...
0
votes
0answers
38 views
Mikrotik Port Based Bandwidth Limtation CPU 100% for 1/5gbps limit
I am using Mikrotik CCR1072-1G-8S+ as my main router. What I want to accomplish is to limit bandwidth of port X to 5 Gbps.
Issue is when I use queue (almost all types of it) the CPU overflows. It ...
0
votes
1answer
54 views
Mikrotik routeros maximum number of filter rules
We need to deploy a service using Mikrotik routerboard CCR. We need to know how many filter/mangle rules a Mikrotik device can support: hundreds, thousands ?
What about performance, cpu and memory ...
0
votes
1answer
54 views
DNS requests with the term “router” in a subdomain always redirected to local router
It seems that my router (Mikrotik RB2011UiAS) is somehow hijacking DNS request that have the subdomain "router" in them and forwards them to itself.
router.google.com, router.amazon.com, you name it,...
0
votes
1answer
75 views
Route traffic to the internet through router and Mikrotik firewall
I would like to request your help to understand whether my diagram is correct, at least conceptually. Im trying to set a network environment from almost scratch.
We have a fixed IP provided by ISP. ...
1
vote
2answers
513 views
Trying to get VLANs working between Mikrotik HAP AC and RB4011iGS+
Here is the network diagram:
I have set up 3 vlans:
vlan1: 192.168.9.0/24
vlan11-lan: 192.168.11.0/24
vlan22-guest: 192.168.22.0/24
vlan1 is working perfectly. Every host in 192.168.9.0/24 network ...
0
votes
1answer
137 views
Administration of multiple sites (tunneling) - MikroTik & NAT
I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
0
votes
0answers
34 views
Switch https traffic to another route reject all other traffic
I have this config on my Mikrotik:
>/ip firewall mangle print
16 ;;; SQUID HTTPS
chain=prerouting action=mark-routing new-routing-mark=SQUIDS passthrough=yes protocol=tcp
src-...
0
votes
0answers
434 views
Configuring VLANs in Mikrotik RouterBOARD 750 r2
I'm having a hard time trying to configure VLAN tagging in a Mikrotik router. The same has 5 interfaces which I'll describe below:
Interface 1 and Interface 2 --> ISPs
Interface 3 --> Uplink to a ...
0
votes
1answer
60 views
IPTABLES not blocking EoIP Tunnel
So I decided to play with EoIP Tunnels today on two VMs which I installed free trial RouterOS on them.
I set rules on iptables on the hypervisor (which is Proxmox) that prevents any input to vms ...
-1
votes
1answer
225 views
Router work as IPsec client to Cisco ASA
Is it possible to configure mikrotik as IPsec vpn client to Cisco Asa? I have ASA connected with static IP to the internet and want to connect mikrotik router behind dynamic IP internet connection to ...
0
votes
1answer
146 views
Configuring MikroTik RB 750 GL to have switch as WAN and Ether1 as NAT to LAN
My ISP allows me to have multiple static IP addresses. I want to use a RouterBoard 750GL to attach multiple publicly addressable servers to the internet using Ether[2-5] in switch mode, and use Ether1 ...
0
votes
1answer
182 views
Mikrotik reverse NAT
Hi, I have attached my current network diagram. I have having problems on how to NAT my public IPs so that each client will use 2 different public IP. My ISP routes 3 public IP to my router over PPPOE....
0
votes
0answers
109 views
How to connect VPN external protected by password to GCP?
I already followed a video tutorial about connect VPN external from AWS to GCP. Actually my VPN external not from AWS but mikrotik (using email and password for login) different with that's video ...
google-cloud-platform
0
votes
1answer
282 views
Mikrotik - 5GHz AC - only 110Mbps
I just bought Mikrotik hAP AC^2 and I configured it's WiFi to be controlled by CAPsMAN. The problem I have is that when I connect to it with my laptop (MacBook Pro 2016 Touchbar) I cannot achieve more ...
0
votes
0answers
61 views
Tcpdump receives packets but they are not delivered to firewall
I am working with Proxmox, OpenVPN and Mikrotik Router. When I try to connect from OpenVPN client (192.168.10.13) to VM (192.168.1.19) hosted on Proxmox I don't get any response. Proxmox host (192....
0
votes
1answer
244 views
how to use src-address in mikrotik script 'find'
:foreach i in=[/ip fi man find chain=forward ] do={:put [/ip fi man get value-name=src-address $i] }
I get:
192.168.1.99
192.168.1.100
192.168.1.101
192.168.1.102
:foreach i in=[/ip fi man find ...
0
votes
0answers
116 views
Restrict User login based on Service Type in Freeradius
Scenario:
We have Freeradius v 2.2.8 along Mikrotik as Mikrotik Router as PPPoE / HOTSPOT NAS server. When we create user in freeradius, user can connect via pppoe dialer or hotspot web login both. ...
1
vote
1answer
2k views
How to reserve a static-ip on Mikrotik router for a device that is attached to a fixed router's Ethernet port
I am trying hard to figure out how can I force any DHCP client device connects to the port ETH10 on Mikrotik router get assigned a fixed IP-address.
Please note that the device MAC address is unknown ...
0
votes
0answers
181 views
NetInstall Mikrotik RouterBOARD 1100 AH X2
I'm having an issue with my Mikrotik RouterBOARD 1100AHX2 and I think reintalling its OS may help. My question is, do I connect my PC that is running NetInstall to port Eth1 or port Eth13 on the ...
0
votes
0answers
293 views
Wifi-as-WAN with a Mikrotik RB941-2nD-TC?
I'm attempting to use a Mikrotik RouterOS device as a router for several devices on an internal LAN, with a WiFi hotspot device on the WAN side. This is a mobile setup, so I have several cellular Mifi ...
1
vote
1answer
264 views
Make a Mikrotik Router behave as a separate router on each port
We use Mikrotik routers for many points in our system, but we have an odd need for one location.
We would like to use one router (example: RB960PGS-PB), where the main Internet connection comes in on ...
0
votes
2answers
691 views
Mikrotik: can't access to port from outside
I exposed web-service on my local machine to the external IP via Mikrotik and can access it via MY_EXTERNAL_IP:5000.
But my nginx-server can't access to MY_EXTERNAL_IP:5000.
Logs:
14:09:53 firewall,...
0
votes
1answer
2k views
How to set up QoS on MikroTik RouterOS?
I'm aware that this is a common question but I've invested two days now to learn this and still could not find a clear explanation...
Recently I bought a Miktotik hEX (RouterOS 6, Level 4), used as ...
1
vote
1answer
316 views
Mikrotik routing VPN packets to wrong interface
I'm trying connect my network to AWS VPC using Static IP AWS VPN. I've followed the instructions of AWS and configured correctly my MikroTik router and can ping the Ubuntu instance I've attached in ...
0
votes
1answer
52 views
Routing between 3 interfaces in 3 separate networks
Prologue
Greetings network engineers out there! I would appreciate your help in following scenario. I did some research, and I figured out only two solutions. And because one of them is not suitable ...
0
votes
0answers
1k views
Mikrotik RouterOS(OpenVPN client) connecting to OpenVPN server(Ubuntu)
I have some issues with making MT to work with OpenVPN server (Ubuntu). I can make successful connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration.
Setup ...
0
votes
1answer
1k views
Mikrotik - NAT behind NAT
I have two routers, one given by the internet provider, which I cannot control ( only they can ) and the second is my Mikrotik HAP ac (RB962UiGS-5HacT2HnT).
My router was primary before, and I had ...
0
votes
0answers
322 views
Unable to ping IP from same broadcast domain/subnet
I can't seem to get my head around this (hopefully) simple problem. I have 1 brocade and a Mikrotik router both connected each other have an IP address from the a /28 Public facing subnet. The brocade ...
0
votes
2answers
2k views
How to set up IPSec Xauth RSA client on Mikrotik/RouterOS?
I would need to configure IPSec Xauth RSA client on Microrik. I have such client working on Android. I have all necessary certificates provided along with Username/Password.
Is it ever possible?
If ...
0
votes
0answers
2k views
CAPsMAN configuration for multiple vlan and multiple SSIDs
I have a problem with wireless configuration by CAPsMAN using vlans.
My network:
CCR ---- TRUNK (vlan: 250, 10, 20) ---- CRS ---- (vlans U:250, T:10, 20) ---- wAP ac
My CCR is a gateway, DHCP ...
0
votes
1answer
69 views
Route traffic from one VPN tunnel to the other
I have three sites with the following interconnections:
Site1 connected to Site2 and Azure site.
Site2 connected only to Site1.
I need to establish a route that goes from Site2 to Azure through ...
1
vote
0answers
140 views
RouterOS sending malformed packets
I have a Routerboard 951G-2HnD which runs latest stable:
RouterOS v6.50.5
Firmware v3.41
The board acts as the WiFi AP in WPA2-PSK mode. Recently I have noticed unhealthy amount of traffic sent from ...
1
vote
1answer
428 views
TCP Initial Handshake Incomplete (ACK Missing)
I am irritated about the following scenario:
I am running a MVC application on an IIS 10 Webserver. While calling the URI, it takes about 10 seconds until the application starts to get called (IDLE ...
2
votes
1answer
625 views
Mikrotik strictly specify masquerade NAT ports range
I want to limit TCP/UDP ports which can be used for masquerade NAT on my Mikrotik router. For example, I want to use only 40000-65535 TCP ports range and 20000-65535 UDP ports range for masquerade. ...
1
vote
3answers
476 views
Order of external DNS servers on Router OS DNS Server
We have DNS server on our Mikrotik (RouterOS 6.36).
[admin@xxx] /ip dns> print
servers: 10.0.10.3,8.8.8.8
dynamic-servers:
allow-remote-requests: yes
max-udp-packet-...
1
vote
2answers
770 views
How to disable TCP timestamps on a Mikrotik router?
I'm using OpenVAS as vulnerability scanner and I completed a local network scanning which also involves a MikroTik router as default gateway.
The router shows a weakness, better known as "TCP ...
0
votes
1answer
298 views
Pitfalls of remote access to mikrotik router
We are getting some configuration work done, through a remote contractor on our Mikrotik router (as we don't have expertise in-house)
Considering the router is the essential part of our network, I am ...
0
votes
1answer
782 views
MikroTik Router: PoE-In doesn't work
I'm trying to install a MikroTik Cloud Core Router CCR1009-7G-1C-1S+PC. Our internet comes from an antenna and the main cable (from the antenna) first connects to a PoE injector (Phihong POE61U-560DG)....
1
vote
1answer
843 views
Mikrotik IPV6 dhcp client
The DHCP client in my mikrotik router never obtains a ipv6 address or prefix, when connected to internet. I understand I need a prefix, so the devices on my lan can get a valid external IP.
However ...
0
votes
2answers
6k views
Mikrotik - Changing/removing a master-port disconnects from a router
I have a Mikrotik router with 5 ports. By default ether2-master is a master port for the ports 3-5. If I try to change it - I'm disconnected from the router, so I have to reset it to get the ...
1
vote
0answers
618 views
Mikrotik port forwarding - no access to server
I need your help concerning port forwarding with Mikrotik's RouterOS!
I have executed this command :
/ip firewall nat add action=dst-nat chain=dstnat comment="Owncloud in NAT" dst-port=8079 in-...
0
votes
3answers
415 views
openvpn dynamic (downloadable) configuration
I have a mikrotik router working as openvpn server. My problem is mikrotik can't push routes to the clients. Then, I'm wandering if it is possible to add to the client configuration some kind of "...
0
votes
1answer
171 views
Rewriting HTTP request contents that are going through Mikrotik RouterOS VPN
I need to pipeline through all the requests from my VPN clients connected to Mikrotik OpenVPN gateway, but when request being made is and HTTP request and is targeting particular destination, I want ...
0
votes
1answer
59 views
Why static route can be ignored?
I'm trying to route all traffic to 10.2.0.0/24 via OpenVPN client(10.7.0.2)
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...
-2
votes
2answers
53 views
intra ethernet interface of a router
Please I need some clearification. Is it possible to ping from one interface of a router to another interface of thesame router ?
Assuming router R1 with LAN interfaces e1 and e2. can i ping e2(...
0
votes
1answer
70 views
Connecting with local server machine from the internet
I have a MikroTik router with dynamic IP. I also have one of PCs connected to that router via cable. That machine has a TCP socket server program running on it. Previously I was testing the server by ...
