Re: [Mikrotik Users] Two routers without double nat

2017-02-11 Thread Scott Reed via Mikrotik-users
50% isn't bad. I would think filling up queues or something similar is a likely cause. To answer your questions you shouldn't have to do anything other than move the queues, etc. to the inside router. Give it an address out of a /30 and the edge router the other address from the /30 and

Re: [Mikrotik Users] Firewall vs IP Services

2016-10-05 Thread Scott Reed via Mikrotik-users
IP services determine whether or not the router responds to requests on that port. Input firewall rules block packets from even getting to the IP Service. On 10/5/2016 1:12 PM, Matthew Brendle via Mikrotik-users wrote: > What is the difference in using Firewall Rules and the IP Services Rules?

Re: [Mikrotik Users] OSPF errors on router

2016-12-14 Thread Scott Reed via Mikrotik-users
My experience is that has almost always been a configuration error. Often related to Router ID, but not necessarily the one reporting the errors. One thing MT appears to not like is Router ID of 0.0.0.0. Duplicate IP addresses can cause this message. The packet actually came from somewhere

Re: [Mikrotik Users] OSPF errors on router

2016-12-14 Thread Scott Reed via Mikrotik-users
Time synchronization ranks up at the top as well. Doesn't usually cause OPs error, but it is critical. On 12/14/2016 8:51 AM, Kevin Myers via Mikrotik-users wrote: Just wanted to echo and reinforce the comments that Justin Wilson made about every router that participates in OSPF needs to

Re: [Mikrotik Users] Missing wireless?

2016-12-15 Thread Scott Reed via Mikrotik-users
I have seen funny things when the upgrade firmware is lower than the current. Put a new version of ROS on it, upgrade the firmware and see what you get. On 12/15/2016 12:39 PM, Roy via Mikrotik-users wrote: Hi, Maybe I am getting to old or had too much eggnog last night We just received a

Re: [Mikrotik Users] maplite

2017-04-13 Thread Scott Reed via Mikrotik-users
The default configuration is a series of rules. It is fairly standard across the SOHO lines. The first time you connect to the mAP via wireless it will ask you if you want to remove the rules or list them. So you could just delete them and then configure from either port. On 4/13/2017

Re: [Mikrotik Users] Cloud Core Router reboot with no log entries???

2017-03-02 Thread Scott Reed via Mikrotik-users
Open a terminal window. If it was a power outage, under the banner it will say something like reboot without proper shutdown. Also, the very beginning of the log after power up may have some help. The part you are showing looks like OSPF getting started. On 3/2/2017 2:11 PM, Brough Turner

Re: [Mikrotik Users] Am I just blind?

2017-07-11 Thread Scott Reed via Mikrotik-users
They were showing some new stuff at WispAmerica. I think they are going to have something bigger than the 8-port, but I don't remember what all I saw. On 7/11/2017 1:54 PM, Jesse Dupont via Mikrotik-users wrote: The PacketFlux SiteMonitor2 has a 5-port remotely operable, DIN mounted PDU you

Re: [Mikrotik Users] OSFP considerations for WISP

2017-06-27 Thread Scott Reed via Mikrotik-users
And PtMP is for Point to MultiPoint. So, topology defines what you use. Each network type has its place. Also, you will want all of the routers to be time-synched from the same source. On 6/27/2017 9:49 AM, Dennis Burgess via Mikrotik-users wrote: I would suggest contacting a MT

Re: [Mikrotik Users] OSFP considerations for WISP

2017-06-27 Thread Scott Reed via Mikrotik-users
...@wispa.org] *On Behalf Of *Scott Reed via Mikrotik-users *Sent:* Tuesday, June 27, 2017 9:48 AM *To:* mikrotik-users@wispa.org >> Mikrotik Users *Subject:* Re: [Mikrotik Users] OSFP considerations for WISP And PtMP is for Point to MultiPoint. So, topology defines what you use. Each networ

Re: [Mikrotik Users] Am I just blind?

2017-06-24 Thread Scott Reed via Mikrotik-users
Their latest newletter also announced a couple of switches that can boot SWOS or ROS. On 6/23/2017 9:06 PM, Blair Davis via Mikrotik-users wrote: Exactly what I want! Thank you! I searched under RouterBoard, not under integrated solutions/ethernet routers. Thank you all again! -- On

Re: [Mikrotik Users] [OffList: Mikrotik Users] OSFP considerations for WISP

2017-06-27 Thread Scott Reed via Mikrotik-users
I am a consultant that can help with this. I have helped several other networks move from bridged to routed and implement OSPF as well. Let me know if you are interested in some services and we can work out how I can best help you. On 6/27/2017 8:57 AM, Robert Dillon via Mikrotik-users

Re: [Mikrotik Users] manage setting on hAP?

2017-09-21 Thread Scott Reed via Mikrotik-users
Why shouldn't it differ, they expect different hardware to be used for different roles? I am pretty sure MT does not use the same default settings across hardware platforms, though they are similar. I have not run into one that is not completely cleared when told to not use it after first

Re: [Mikrotik Users] Bonding Configuration

2017-09-26 Thread Scott Reed via Mikrotik-users
This may not be the cleanest so hopefully someone will have a better solution. This assumes local end has static addresses. Create a PPP (like PPTP, L2TP, OpenVPN, etc.) tunnel from the remote end to the local end. Run your PPPoE tunnel over that. On 9/26/2017 2:33 PM, Nick Bright via

Re: [Mikrotik Users] Dude, howto, where?

2017-11-16 Thread Scott Reed via Mikrotik-users
Yes, probably device. Forget the PPP stuff. Just use the new out facing IP Address. I have never seen a place to put PPP info in the Dude. It deals with IP Addresses. On 11/16/2017 3:43 PM, Jan Van Kort via Mikrotik-users wrote: If I knew I wouldn't be here asking.  I'm calling them POPs,

Re: [Mikrotik Users] Queuing for half duplex

2017-11-01 Thread Scott Reed via Mikrotik-users
Yep. I would suggest searching for the HTB queuing stuff. There are a couple of MUM session recordings and some examples available. On 11/1/2017 1:52 PM, Josh Luthman via Mikrotik-users wrote: Would queue tree with a parent of global maybe do something for that? Josh Luthman Office:

[Mikrotik Users] Detecting Virus/Malware

2018-06-18 Thread Scott Reed via Mikrotik-users
While we are getting everything on a network upgraded to avert the infection threat on RouterOS, is there anything we can see to know that the device is infected? -- Scott Reed SBRConsulting, LLC Network and Wireless Consulting WISPA Vendor Member IN UMC Associate Lay Leader SLI Coach Trained

Re: [Mikrotik Users] Questing regarding bypassing hotspot.

2018-01-22 Thread Scott Reed via Mikrotik-users
Instead of putting the MAC in the HotSpot, put it in RADIUS as the user ID. If the Hotspot is setup to to MAC authentication, it will pass the MAC to RADIUS, just as if the user logged in. On 1/21/2018 6:45 PM, ralph via Mikrotik-users wrote: I have a lot of sites using MT Hotspot with an

Re: [Mikrotik Users] How to disable switch feature on PowerBox?

2018-08-01 Thread Scott Reed via Mikrotik-users
They will show red if the ports are down or disabled. On 8/1/2018 13:00, mike.lyon--- via Mikrotik-users wrote: > I’ve taken the master-port assignment off of all ports and have assigned IP > addressess to eth1, eth2 and eth3 and have also removed all bridges. > > I can setup a DHCP server on

Re: [Mikrotik Users] Exploit in ROS 6.41.3/6.42rc27

2018-08-06 Thread Scott Reed via Mikrotik-users
It will also change device identity, change admin password, add Admin, add 5 firewall filter rules to redirect forward traffic, change DNS server, enable DDNS, add IP Web Proxy rules and more, but that is all I remember off the top of my head. On 8/5/2018 20:57, Bob Pensworth via

Re: [Mikrotik Users] Exploit in ROS 6.41.3/6.42rc27

2018-08-06 Thread Scott Reed via Mikrotik-users
. On 8/6/2018 6:55, Tim wrote: This has been detected in devices with earlier versions of ROS. *From:*mikrotik-users-boun...@wispa.org *On Behalf Of *Scott Reed via Mikrotik-users *Sent:* Monday, August 6, 2018 5:58 AM *To:* mikrotik-users@wispa.org *Subject:* Re: [Mikrotik Users] Exploit in ROS

Re: [Mikrotik Users] Multiple NAT targets

2018-08-09 Thread Scott Reed via Mikrotik-users
I am pretty sure you can do ranges (with a -) or a comma separated list.  Just be sure to check when you are done that it does what you want. On 8/9/2018 12:44, Nick Bright via Mikrotik-users wrote: > Is there a way to specify multiple to-address in a dst-nat rule? > > This may not even be the

Re: [Mikrotik Users] Upgrade from 6.35.x to 6.42.6

2018-08-20 Thread Scott Reed via Mikrotik-users
Mikrotik has been know to make change to the syntax, so the new make look different that the old. I have upgraded 100s of units from as low as 4.15 incrementally to 6.42.8 without losing anything.  Not that they have much, but upgrades just work. You may not be able to copy the export to

Re: [Mikrotik Users] Site-to-Site VPN

2018-03-12 Thread Scott Reed via Mikrotik-users
About the same here.  I have pptp connections to several remote networks.  Setup routing in the local MT to know how to get to the address ranges of each network. Everything just works.  I can WinBox to anything on any network, browse devices on private addresses, etc. On 3/12/2018 11:28 AM,