Questions tagged [routeros]
Linux-based operating system known also known as MikroTik RouterOS that runs on x86 and RouterBOARD systems.
82
questions
2
votes
1
answer
100
views
Port forwarding fails with two DHCP Servers/routers on the same network
TL;DR I have two routers and a switch, and have forwarded port 80 on both routers to the switch, but depending on which router gives the switch its IP, it'll have that as its default gateway, and I ...
- 141
0
votes
0
answers
28
views
RouterOS 7: Configure the Wireguard server to support connections by different WAN access IP
RouterOS 7 router with two WAN ports, WAN2 and WAN3(I can access Winbox with both of these WAN IPs without any issues), and set up a Wireguard (WG) service. I can successfully connect to WG by the ...
- 709
1
vote
0
answers
40
views
Scripting with variables in RouterOS
I seem to be at a complete loss as to how Global variables work in RouterOS. My goal is to create a script which will make calls to other infrastructure components when DHCP leases are changed.
For ...
- 685
0
votes
0
answers
25
views
RouterOS 7, how to fair-share per interface
I'm configuring fiber for my office. Every floor is rented by someone, and I want to share the internet fairly. We've got one incoming 1Gbps fiber link, into a modem, followed by a Mikrotik router. ...
0
votes
0
answers
38
views
RouterOS - how to make diffrent IP to access the Internet through different gateway
I want to make 192.168.1.2/24->192.168.1.1 to access the Internet, but 192.168.1.3/24->192.168.1.100 to access the Internet.
I don't know how to do it.
[admin@RouterOS] /ip/route> print ...
- 1
0
votes
1
answer
361
views
DST-NAT for port tcp/80 on Mikrotik router
I am trying to redirect the incoming traffic to tcp/80 of the public IP interface of Mikrotik router to the internal server with reverse proxy.
No matter what I do, the NAT rule does not work with tcp/...
- 1
0
votes
1
answer
664
views
Why are certain TCP connections extremely slow, except while running a packet capture on the router?
I have a weird issue with my MikroTik RouterBOARD hEX - RB750Gr3 (running Router OS 7.8).
Certain TCP connections are extremely slow, for example this 93 KB file takes ages to download from the ...
- 416
1
vote
0
answers
273
views
Packet forwarding for L2TP/IPSec VPN
I have 2 Server:
Server 1: MikroTik RouterOS (Setting up L2TP vpn server) [out of my country]
Server 2: Fresh Ubuntu 20.04 OS [in my country]
I can't connect to Server 1 via L2TP connection (protocol ...
- 11
0
votes
1
answer
475
views
One port 2 external ip linked to MAC split by LAN ports
The provider issues 2 static addresses linked to the MAC address of the device on one port. Is it possible to divide the ports of the Mikrotik router into traffic exchange through each address?
For ...
- 1
0
votes
0
answers
134
views
IP Tunnel - First router is not sending traffic to the second one
I'm a beginner when it comes to Mikrotik . I'm trying to run an IP tunnel between 2 RouterOS .
First Router is set up as PPTP and L2TP server and clients can connect and use the internet but what I ...
- 33
0
votes
0
answers
884
views
Mikrotik CCR1009 ROS 7 dual WAN configuration
i have a CCR1009 (ROS 7.2.3) configured with the COMBO port as WAN_1 and the eth1 to eth5 ports as LAN, VOIP, and 3 SERVER with different subnets.
The ISP is fastweb (mixed fiber 100/100) which ...
- 1
0
votes
0
answers
454
views
MikroTik - configure NAT behind NAT
I have primary Mikrotik router connected to Internet provider and serving internal network 192.168.88.0/24. I also have second Mikrotik router which I want to plug into my internal network of the ...
- 117
0
votes
1
answer
223
views
AWS middlebox appliance routing doesn't work
I have installed and configured EC2 instance with routerOS which I want to use as main point of connection for branch networks. It has 1 interface, resides in subnet 172.20.1.0/24. Subnet 172.21.1.0/...
0
votes
1
answer
161
views
mikrotik route appear and removes every second automatically
Mikrotik OS v6.48.2 has routes
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 193.168.1.1 1 <<<<<<&...
- 1
0
votes
0
answers
622
views
Ubuntu Installation on Qemu/KVM Black Screen
I'm trying to install Ubuntu or higher on KVM.
I have tried installing 14.04.6 LTS / 16.04.7 LTS and 18.04.5 LTS
First i create Qemu Disk Image :
qemu-img.exe create -f raw hdd.img 5G
and when i boot ...
- 101
0
votes
1
answer
372
views
Can I filter IPv6 ospf-v3 routes in Mikrotik RouterOS v6?
When setting up an ospf instance, in-filter and out-filter allow us to control which filter chains will be used to decide what routes get added to the routing table, propagated without adding them to ...
- 25.3k
1
vote
2
answers
2k
views
How to access subnet from Open VPN server (Ubuntu), VPN client RouterOS?
Here's the setup:
[OpenVPN server] --- WAN --- [RouterOS client] --- [Local subnet client]
10.5.0.0 10.5.0.14 10.10.10.2
$ route -n
Kernel IP routing table
...
- 11
0
votes
1
answer
79
views
Simple routing not working
I have a problem with my virtual environment. On this picture you can see my configuration:
I have a total of three subnets. Where one router with 192.168.1.1 is physical and one virtual router and ...
1
vote
2
answers
3k
views
UDP NAT traffic but no response on MikroTik RouterOS
I have a MikroTik router with v7.1beta2 firmware installed
It's WAN (eth1) has an IP address of 192.168.7.122
There are two devices connected to its LAN
Device #1 is a webserver, communicating on ...
- 111
2
votes
0
answers
1k
views
Why is port forwarding in Mikrotik RouterOS stuck at SYN_RECV?
I'd like to set up port forwarding of tcp port 8000 -> 192.168.1.16:4200 on my Mikrotik RouterOS.
I've done the following:
/ip firewall nat add dstnat chain=dstnat action=dst-nat to-addresses=192....
- 285
0
votes
0
answers
183
views
Mikrotik RouterOS - How to prevent all devices in a VLAN from initiating any connections outside of the VLAN? [duplicate]
I'm using a RouterOS device as a router on a stick.
I'd like to isolate a certain VLAN from the outside world so that the VLAN cannot instantiate any connections to other VLANs or to the Internet (WAN)...
- 285
0
votes
1
answer
697
views
Ansible error with auto provision Mikrotik router
I have a problem that I cannot understand how to solve ...
From my ansible central machine I have written a routine for Mikrotik, to execute a series of configuration commands and thus auto provision ...
1
vote
1
answer
4k
views
Manually subnet an IPv6 Prefix Across Multiple MikroTik Routers w/out Prefix Delegation
I want to configure my network so hosts can IPV6 auto-address Global Unicast Addresses ("GUA") using SLAAC. I have a ::/48 (assigned by Hurricane Electric) that I want to divide into subnets and ...
- 365
0
votes
1
answer
664
views
MikroTik: Set scan-list in RoS to ONLY use 2.4 GHz non-overlapping channel frequencies
How do I set the scan-list in MikroTik RouterOS to use only 2.4 GHz non-overlapping channel frequencies?
- 365
4
votes
2
answers
488
views
WiFi: Frequencies that map to non-overlapping 2.4 GHz channels 1,6 & 11
I'm configuring a wireless router. I know the non-ovelapping channels are 1,6 & 11. However, my router only specifies frequencies that I can select, not channels. What are the frequencies that ...
- 365
0
votes
1
answer
36
views
Access to private resources with VPN
i have following setup:
192.168.0.1 - my router base on routerOS with public static ip X.X.X.X. on router i have nat rules for redirect all incoming request to 80,443 port to server in LAN (192.168.0....
0
votes
2
answers
2k
views
How to forbid DHCP-server to lease specific IP address on Mikrotik's routerOS?
My Mikrotik router is running a DHCP server in /24 network, I would like to prohibit it to lease some IP addresses (I would like to use them statically on a couple of devices). Are there any ways to ...
- 55
3
votes
2
answers
8k
views
Can't get a serial console on MikroTik RB4011iGS+
I am trying to connect to the serial console of my MikroTik RB4011iGS+.
I might be missing something obvious, but I can't seem to get a terminal (or anything else).
Relevant documentation page:
...
0
votes
1
answer
5k
views
Mikrotik - Using bridge for WAN/DMZ
I'm not sure I'm going about this the right way....
I have 3 static IP's from my ISP that are all in the same subnet with the same gateway. One address is used for the router (RB3011 - 6.43.8) on a ...
- 1
1
vote
0
answers
767
views
How to allow responding to broadcast pings on Mikrotik RouterOS?
By default, most systems don't respond to broadcast ping requests. However, there exist ways to explicitly allow responding to broadcast ICMP requests on multiple systems, such as Linux.
How can I ...
- 163
1
vote
1
answer
6k
views
MikroTik Capsman is trying to push network channel configurations that are not allowed by access points
According to information from allowed-channels command on my Access Point the allowed channels are the following:
5180/20-Ceee/ac,
5260/20-Ceee/ac/DP,
5745/20-Ceee/ac,
5750/20-Ceee/ac,
5755/20-Ceee/...
- 161
0
votes
1
answer
478
views
Mikrotik routeros maximum number of filter rules
We need to deploy a service using Mikrotik routerboard CCR. We need to know how many filter/mangle rules a Mikrotik device can support: hundreds, thousands ?
What about performance, cpu and memory ...
1
vote
1
answer
176
views
Simple router with two ethernet interface no static route needed?
Normaly, for two subnets connected with one router, i always used to create two routes
per example:
subnet 1: 192.168.1.0/24
subnet 2: 192.168.2.0/24
router interface 1: 192.168.1.99
router ...
0
votes
1
answer
884
views
DNS requests with the term "router" in a subdomain always redirected to local router
It seems that my router (Mikrotik RB2011UiAS) is somehow hijacking DNS request that have the subdomain "router" in them and forwards them to itself.
router.google.com, router.amazon.com, you name it,...
- 973
0
votes
1
answer
364
views
IPTABLES not blocking EoIP Tunnel
So I decided to play with EoIP Tunnels today on two VMs which I installed free trial RouterOS on them.
I set rules on iptables on the hypervisor (which is Proxmox) that prevents any input to vms ...
- 27
0
votes
1
answer
674
views
Configuring MikroTik RB 750 GL to have switch as WAN and Ether1 as NAT to LAN
My ISP allows me to have multiple static IP addresses. I want to use a RouterBoard 750GL to attach multiple publicly addressable servers to the internet using Ether[2-5] in switch mode, and use Ether1 ...
- 101
0
votes
1
answer
1k
views
DNS entry always preferring wildcard entry instead of explicit entry
I have a Mikrotik Router with Router OS where I need to set a static DNS entry. I have set
a url exhibitorsearch.test.intern.customer.com to an ip with the ending .92
a regexp .*\.test\.intern\....
- 115
0
votes
1
answer
1k
views
how to use src-address in mikrotik script 'find'
:foreach i in=[/ip fi man find chain=forward ] do={:put [/ip fi man get value-name=src-address $i] }
I get:
192.168.1.99
192.168.1.100
192.168.1.101
192.168.1.102
:foreach i in=[/ip fi man find ...
- 240
1
vote
1
answer
5k
views
RouterOS push static route for IPSec IKEv2 VPN
Can't find a solution how actually I can push a static routes to VPN clients, when they connect via VPN.
Configuration from here
RouterOS, IPSec, IKEv2. Clients mainly macOS users via standard soft.
...
- 143
1
vote
1
answer
2k
views
Make a Mikrotik Router behave as a separate router on each port
We use Mikrotik routers for many points in our system, but we have an odd need for one location.
We would like to use one router (example: RB960PGS-PB), where the main Internet connection comes in on ...
- 13
0
votes
1
answer
10k
views
How to set up QoS on MikroTik RouterOS?
I'm aware that this is a common question but I've invested two days now to learn this and still could not find a clear explanation...
Recently I bought a Miktotik hEX (RouterOS 6, Level 4), used as ...
- 443
1
vote
0
answers
688
views
RouterOS sending malformed packets
I have a Routerboard 951G-2HnD which runs latest stable:
RouterOS v6.50.5
Firmware v3.41
The board acts as the WiFi AP in WPA2-PSK mode. Recently I have noticed unhealthy amount of traffic sent from ...
user218324
1
vote
3
answers
2k
views
Order of external DNS servers on Router OS DNS Server
We have DNS server on our Mikrotik (RouterOS 6.36).
[admin@xxx] /ip dns> print
servers: 10.0.10.3,8.8.8.8
dynamic-servers:
allow-remote-requests: yes
max-udp-packet-...
- 137
0
votes
1
answer
170
views
Why static route can be ignored?
I'm trying to route all traffic to 10.2.0.0/24 via OpenVPN client(10.7.0.2)
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...
- 113
0
votes
1
answer
743
views
Cannot share the internet connection with dual wan setup on RB2011UiAS-RM
I have a bit trouble with setting up multiple WAN connections on my RB2011UiAS-RM. Recently we have bought this router to replace an old proxy server in our company, which could fail/broke at any ...
- 1
0
votes
1
answer
234
views
Custom Microtik Configuration
In short, i'm trying to load a custom RSC configuration into a Microtik Router
However after loading it in on the restart with:
/system reset-configuration no-defaults=yes run-after-reset=flash/vpn-...
- 103
4
votes
1
answer
4k
views
IPv6 subnetting a dynamic /56 prefix
I read How does IPv6 subnetting work and how does it differ from IPv4 subnetting? but my question was not answered there.
I'm upgrading our IPv4 network to IPv6. Currently, our NAT gateway splits our ...
- 1,455
0
votes
3
answers
3k
views
How can I forward network packages to an interface in Mikrotik?
I want to forward all TCP packets to one interface (a dedicated Internet connection only for downloads) and all UDP packets to another one (a dedicated internet connection only for streaming and ...
1
vote
1
answer
12k
views
How to setup route to gateway on different subnet with MikroTik Routers?
We have the following setup which I need to get working:
Location A:
Subnet 1:
Network: 192.168.1.0
Mask: 255.255.255.0
Default Gateway: 192.168.1.1
Subnet 2:
Network: 192.168.2.0
Mask: 255.255....
- 201
1
vote
1
answer
3k
views
Mikrotik: Firewall dropping packets even though rule seems to match
I set up an L2TP VPN server on my Mikrotik. Connecting to the VPN when I'm behind the router works, but once I'm connecting from the WAN side, it doesn't. I logged my firewall to see if I was dropping ...
- 16.9k