Questions tagged [routeros]

Linux-based operating system known also known as MikroTik RouterOS that runs on x86 and RouterBOARD systems.

Filter by
Sorted by
Tagged with
3
votes
2answers
160 views

Can't get a serial console on MikroTik RB4011iGS+

I am trying to connect to the serial console of my MikroTik RB4011iGS+. I might be missing something obvious, but I can't seem to get a terminal (or anything else). Relevant documentation page: ...
0
votes
1answer
477 views

Mikrotik - Using bridge for WAN/DMZ

I'm not sure I'm going about this the right way.... I have 3 static IP's from my ISP that are all in the same subnet with the same gateway. One address is used for the router (RB3011 - 6.43.8) on a ...
1
vote
0answers
107 views

How to allow responding to broadcast pings on Mikrotik RouterOS?

By default, most systems don't respond to broadcast ping requests. However, there exist ways to explicitly allow responding to broadcast ICMP requests on multiple systems, such as Linux. How can I ...
1
vote
0answers
868 views

MikroTik Capsman is trying to push network channel configurations that are not allowed by access points

According to information from allowed-channels command on my Access Point the allowed channels are the following: 5180/20-Ceee/ac, 5260/20-Ceee/ac/DP, 5745/20-Ceee/ac, 5750/20-Ceee/ac, 5755/20-Ceee/...
0
votes
1answer
135 views

Mikrotik routeros maximum number of filter rules

We need to deploy a service using Mikrotik routerboard CCR. We need to know how many filter/mangle rules a Mikrotik device can support: hundreds, thousands ? What about performance, cpu and memory ...
1
vote
1answer
62 views

Simple router with two ethernet interface no static route needed?

Normaly, for two subnets connected with one router, i always used to create two routes per example: subnet 1: 192.168.1.0/24 subnet 2: 192.168.2.0/24 router interface 1: 192.168.1.99 router ...
0
votes
1answer
164 views

DNS requests with the term “router” in a subdomain always redirected to local router

It seems that my router (Mikrotik RB2011UiAS) is somehow hijacking DNS request that have the subdomain "router" in them and forwards them to itself. router.google.com, router.amazon.com, you name it,...
0
votes
1answer
139 views

IPTABLES not blocking EoIP Tunnel

So I decided to play with EoIP Tunnels today on two VMs which I installed free trial RouterOS on them. I set rules on iptables on the hypervisor (which is Proxmox) that prevents any input to vms ...
0
votes
1answer
298 views

Configuring MikroTik RB 750 GL to have switch as WAN and Ether1 as NAT to LAN

My ISP allows me to have multiple static IP addresses. I want to use a RouterBoard 750GL to attach multiple publicly addressable servers to the internet using Ether[2-5] in switch mode, and use Ether1 ...
0
votes
1answer
71 views

DNS entry always preferring wildcard entry instead of explicit entry

I have a Mikrotik Router with Router OS where I need to set a static DNS entry. I have set a url exhibitorsearch.test.intern.customer.com to an ip with the ending .92 a regexp .*\.test\.intern\....
0
votes
1answer
368 views

how to use src-address in mikrotik script 'find'

:foreach i in=[/ip fi man find chain=forward ] do={:put [/ip fi man get value-name=src-address $i] } I get: 192.168.1.99 192.168.1.100 192.168.1.101 192.168.1.102 :foreach i in=[/ip fi man find ...
0
votes
1answer
2k views

RouterOS push static route for IPSec IKEv2 VPN

Can't find a solution how actually I can push a static routes to VPN clients, when they connect via VPN. Configuration from here RouterOS, IPSec, IKEv2. Clients mainly macOS users via standard soft. ...
1
vote
1answer
671 views

Make a Mikrotik Router behave as a separate router on each port

We use Mikrotik routers for many points in our system, but we have an odd need for one location. We would like to use one router (example: RB960PGS-PB), where the main Internet connection comes in on ...
0
votes
1answer
4k views

How to set up QoS on MikroTik RouterOS?

I'm aware that this is a common question but I've invested two days now to learn this and still could not find a clear explanation... Recently I bought a Miktotik hEX (RouterOS 6, Level 4), used as ...
1
vote
0answers
247 views

RouterOS sending malformed packets

I have a Routerboard 951G-2HnD which runs latest stable: RouterOS v6.50.5 Firmware v3.41 The board acts as the WiFi AP in WPA2-PSK mode. Recently I have noticed unhealthy amount of traffic sent from ...
1
vote
3answers
601 views

Order of external DNS servers on Router OS DNS Server

We have DNS server on our Mikrotik (RouterOS 6.36). [admin@xxx] /ip dns> print servers: 10.0.10.3,8.8.8.8 dynamic-servers: allow-remote-requests: yes max-udp-packet-...
0
votes
1answer
61 views

Why static route can be ignored?

I'm trying to route all traffic to 10.2.0.0/24 via OpenVPN client(10.7.0.2) Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...
0
votes
1answer
510 views

Cannot share the internet connection with dual wan setup on RB2011UiAS-RM

I have a bit trouble with setting up multiple WAN connections on my RB2011UiAS-RM. Recently we have bought this router to replace an old proxy server in our company, which could fail/broke at any ...
0
votes
1answer
148 views

Custom Microtik Configuration

In short, i'm trying to load a custom RSC configuration into a Microtik Router However after loading it in on the restart with: /system reset-configuration no-defaults=yes run-after-reset=flash/vpn-...
3
votes
1answer
1k views

IPv6 subnetting a dynamic /56 prefix

I read How does IPv6 subnetting work and how does it differ from IPv4 subnetting? but my question was not answered there. I'm upgrading our IPv4 network to IPv6. Currently, our NAT gateway splits our ...
0
votes
3answers
1k views

How can I forward network packages to an interface in Mikrotik?

I want to forward all TCP packets to one interface (a dedicated Internet connection only for downloads) and all UDP packets to another one (a dedicated internet connection only for streaming and ...
1
vote
1answer
6k views

How to setup route to gateway on different subnet with MikroTik Routers?

We have the following setup which I need to get working: Location A: Subnet 1: Network: 192.168.1.0 Mask: 255.255.255.0 Default Gateway: 192.168.1.1 Subnet 2: Network: 192.168.2.0 Mask: 255.255....
1
vote
1answer
2k views

Mikrotik: Firewall dropping packets even though rule seems to match

I set up an L2TP VPN server on my Mikrotik. Connecting to the VPN when I'm behind the router works, but once I'm connecting from the WAN side, it doesn't. I logged my firewall to see if I was dropping ...
1
vote
2answers
7k views

Export vs Backup

Basically self-explanatory. Mikrotik's RouterOS has two distinct functions, one which backs up the router and one which exports the configuration of the router. What exactly is the difference, and ...
3
votes
1answer
7k views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
1
vote
1answer
855 views

MikroTik - Traffic flow (Netflow) Octets Counter wrap

I am using Traffic Flow with pmacct (nfacct) to do IP Accounting. I've noticed that if a flow exceeds ~4GBytes in less than a minute (which is my active-flow-timeout) the exported flow Octets counter ...
0
votes
1answer
1k views

Couldn't add New Bridge NAT Rule - ip matchers valid only for ip ethernet protocol

I am following this tutorial to set up port forwarding. However, when I attempt to apply my rule, I get the above error message. Here is the rule that I am trying to add: see this image
1
vote
1answer
8k views

Mikrotik switched VLAN configuration

With Routerboard 450G I want to configure the 5 Ethernet ports as follows: ether1: vlan3, untagged ether2: vlan1, untagged ether3: vlan2, untagged ether4: vlan2, untagged ether5: vlan1-vlan3, tagged ...
-1
votes
2answers
513 views

Load balancing ip conflict in Mikrotik

I have a rb433 connected in pcc to 3 wifi wan routers that all give 192.168.1.1 cant access these routers to change the dhcp Any sugestions to avoid conflict? config img here http://postimg.org/...
2
votes
2answers
1k views

RRAS Server 2012 R2 Not Assigning Network Info or if it does not passing NAT

I wouldn't bother with this for any other reason than the fact that the speeds I get are worth it. Cable Modem (Bridge mode) - Server 2012 R2 (RRAS) - Linksys EA2700 (Bridged as Switch) My issue is ...
0
votes
1answer
36k views

MikroTik - can't access webfig from external / can't SSH into router from external ip

Ok, here's the deal. Let's say that my public facing IP is 10.0.01. I can't webfig into 10.0.01 from external and can't SSH into mikrotik router from external IP. I can do it if I am physically ...
2
votes
1answer
4k views

Does exist a curl equivalent command in routeros?

Just starting with routeros and after searching the official docs just fetch appears I need to do a POST request to REST API but I cannot find any curl like command. Is it possible to install curl ...
4
votes
2answers
9k views

Use Mikrotik as a switch and route subnets through another router

I've got the following network configuration: Comtrend 5813 FTTH Router, connected to WAN, let's say in 192.168.50.x (being .1 router's address) and a DHCP server active, giving addresses from .150 ...
4
votes
1answer
9k views

How to make connections answer from the same gateway they entered in RouterOS?

I have a MikroTik RouterOS 6.23 device, and my network is as follows: Router | |-- bridge1_LAN (wlan1 + ether1) (192.168.0.210) -- LAN (192.168.0.0/24) | Here is where computers are. Those ...
2
votes
2answers
8k views

NAT to two different servers on the same port via hostname with Mikrotik RB2011

I have a Mikrotik RB2011 router, running RouterOS which connects to the internet via a static IP. In my lan I have two different servers, one that is on IP 192.168.89.11 and another on 192.168.89.12 ...
0
votes
1answer
56 views

dnat rule for ups web server. Which port?

In order to access a web server from the internet located on a private lan, we need to resort to the concept of dnat. My understanding is that dnat is kind of port forwarding. If someone on an ...
0
votes
1answer
23k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In the ...
0
votes
0answers
2k views

Redirect to another gateway in same subnet / route to another router in same subnet

There's this network: The computer 192.168.10.4 wants to access a VPS server which has an OpenVPN server running on it, configured to use the subnet 192.168.20.0/24. The computer's subnet also ...
0
votes
1answer
2k views

Mangling traffic from a Mikrotik Router

I have a MikroTik powered Router in the house with a couple of internet connections (2 200/10Mb Cable modems and a 100/20Mb VDSL Line). I am using Mangle rules to set routing marks and NAT rules to do ...
2
votes
1answer
39k views

Routing from mikrotik two IP addresses to same gateway

I have 2 static addreses (a.b.c.72/24 and a.b.c.128/24) on gateway1 and gateway2 interfaces. ISP have one gateway a.b.c.1 . I can use a.b.c.72 only on gateway1, a.b.c.128 only on gateway2. How to ...
0
votes
1answer
211 views

bgp and incomming requests

I have IP pool, 2 providers and BGP on RouterBoard. First provider is default. Second is backup. If first provider falls - outgoing connections works on second. But incoming still routed to broken ...
3
votes
2answers
16k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
2
votes
1answer
2k views

MikroTik beep on RDP

I am a newbie in MikroTik RouterOS. How can I add a rule or script to beep when some one tries to connect to a special port on one of interfaces? For example I need to know if someone is trying to ...
0
votes
2answers
4k views

GRE keepalive with Linux and RouterOS

I have a Linux host and couple of routerboadrs. I created a GRE tunnel, but Linux does not answer keepalive packages. Then router mark gre connection as unreachable, so I cant send to Linux host from ...
2
votes
1answer
8k views

How do I configure routing for an IPSEC tunnel between Openswan and RouterOS

I am trying to create a site-to-site VPN between a Linux router that runs openswan and shorewall (host A, serving subnet 10.10.0.0/16) and a MikroTek RouterBoard running RouterOS 6.3 (host B, serving ...
1
vote
0answers
3k views

RouterOS on Hyper-V (v3/2012) - any way to get it working?

Trying to set up a small VPN point to connect into a remote Hyper-V cluster using ROuterOS. Anyone got it working ON Hyper-V with the latest builds of RouterOS? It seems the legacy network adapter is ...
3
votes
1answer
7k views

MIKROTIK - set proxy authentication

Is it possible to set mikrotik authetication to be used for set the connection of other applications to internet using mikrotik proxy? For example connect miranda IM using mikrotik proxy server: I'...
1
vote
3answers
772 views

bridge between vlans

We have a somewhat exotic setup. Some devices connected to a cisco switch must be administered by a third party and we don't want to give this third party full access to our network. There devices do ...
3
votes
2answers
2k views

Manually set IPv6 neighbor's MAC address in Mikrotik's RouterOS

I have an interesting problem. An ISP of ours started providing native IPv6 on their network. They provided us with a /56 prefix and a /126 linking segment (::1 being their endpoint and ::2 being ours)...
2
votes
1answer
2k views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflow?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...