General • Re: RSTP "TCHANGE start/over" continuously
Hi, I was looking for a way to log stp-related events and stumbled upon this post. How do you actually do it? I want to investigate what I think is an stp related issue but bridge filters don't seem...
View ArticleBeginner Basics • Re: Same address pool in WAN/LAN
Pools shouldn't go through subnet boundaries.You can do something like the following.Set a static IP address on the Wan side of the second router.One of the following should be fine.192.168.1.2/25 (0...
View ArticleGeneral • Re: Wireguard - branches to main site - one works, other not
No problems......(1) One does not need input chain rule on the routers that are Client for Handshake. Only the Server for handshake requires input chain rule.No issues with the single wireguard...
View ArticleScripting • Re: Adaptation to RouterOS 7.13.3
In case anyone comes here interested in the thread, I leave you the appropriate script:Code: :local tminutos 1:local thoras 0 :local tdias 0:local atime [ /system clock get time ]:local adate [...
View ArticleGeneral • How to log new mac addresses on wired ports?
WiFi interfaces does logging of the new wireless connections with MAC address of the device connected. Is there a similar options with bridge or wired interfaces?Maybe it is possible to log changes in...
View ArticleForwarding Protocols • Re: Dual WAN but second WAN only working inbound
Senario 2 X WAN connections- 1 X Ethernet 1 X PPPoE (both fixed IP's)Ethernet connection is the primary connection for the LAN PPPoE services all the DMZ traffic and acts as failover for the ethernet...
View ArticleBeginner Basics • Re: Routing 2 networks with DHCP ip address
Make sure `ether2` and `ether3` aren't in the bridge: https://help.mikrotik.com/docs/display/ROS/EthernetSet appropriate IP addresses, i.e: `ether2 -- 172.16.200.1`, `ether3 -- 10.20.10.1`:...
View ArticleBeginner Basics • Re: login associating MAC with user by time
I will leave the solution that worked for me for now. If anyone else has another please share it.1. First, you need to obtain the MAC address of the user's device. You can do this using the Code:...
View ArticleBeginner Basics • Re: Switch works, except for internet
I assume that your gateway is `192.168.241.1`, right? Do you see its mac address in ARP? Can you ping it?Since Mikrotik works as plain L2 switch here (and doesn't do any routing) I doubt that it...
View ArticleBeginner Basics • Re: EAP+PSK ipsec VPN
You can create CA on Mikrotik itself, then create certificate for server (and sign it using CA), then create client certificate (and sign it using CA), export client certificate (protected by...
View ArticleContainers • Re: Support for Containers on MIPSBE Processors
MIPS is dead,not worth to do anything more.Statistics: Posted by mantouboji — Sun Feb 11, 2024 5:13 am
View ArticleGeneral • Re: Host unreachable on only one client
Do PI and other machines on the network see each others' mac addresses in arp?On Linux, try Code: ip neiOn WindowsCode: arp -aStatistics: Posted by IlKa — Sun Feb 11, 2024 5:27 am
View ArticleGeneral • Re: Dual WAN parallel setup for only one subnet?
It seems, that you need to solve 2 problems:1. Disable route if gateway is unreachable. You already done it with `check-gateway`2. Use different route for different source. This is called "policy...
View ArticleBeginner Basics • Re: Pi-Hole and Mikrotik - DNS - Pi-hole only show my...
I have the same problem, but after installing Pi-Hole on the container - according to the manual from Mikrotik (https://help.mikrotik.com/docs/display/ ... atenetwork)Previously I used Pi-Hole on a...
View ArticleBeginner Basics • Re: Drop invalid FW forward
to me ,it no longer works using firefox ,chromium and ROS 7.12.1Statistics: Posted by frank333 — Sun Feb 11, 2024 9:28 am
View ArticleGeneral • Winbox on Mac always false-starts?
First off, let me say how delighted I am to have finally gotten WInbox (64-bit) and Dude (32-bit) running under a common installation of Wine. I can finally stop paying forever for Parallels. (I don't...
View ArticleGeneral • Re: wireguard only working locally
Hello,This topic might help you... viewtopic.php?t=198625Maybe something from the firewall configuration itself is also useful. Everything is nicely described thereStatistics: Posted by johnson73 —...
View ArticleGeneral • WireGuard Tunnel: VTO+VTH (SIP Dahua)
Not in the habit of asking for help on the forums, but hit a wall, need a push in the right direction, help who has a minute of time.There is a call panel Dahua DHI-VTO6221E-P it acts as a SIP server...
View ArticleGeneral • Re: WireGuard Tunnel: VTO+VTH (SIP Dahua)
What I understand is you have TWO Wireguard devices basically acting as wireguard clients to CHR wireguard server.Are these Wireguard devices (assuming different locations) behind ISP routers?...
View ArticleGeneral • Re: LHG LTE6 pingable, but can't connect
Thanks. I did try that, connecting with the MAC address did not work either. Not on VLAN 1001, and not on VLAN 1.I'm puzzled, because the device *is* pingable on that VLAN 1001 using the management...
View Article