- Public - talk.mikrotik.com.au

Re: [MT-AU Public] simple queue
by Alex Samad - Yieldbroker 17 May '16

17 May '16

Okay another attempt /queue simple add comment="guest to yb network is max" dst=10.0.0.0/8 name=guestYB target=10.172.202.0/24 add comment="YBGuest to internet" max-limit=10M/10M name=guestInternet target=10.172.202.0/24 no other rules, remove the mangle rules the bottom works, everything gets limited. The top one is meant to capture guest to internal ip addresses but it doesn't seem to work. A -----Original Message----- From: Alex Samad - Yieldbroker Sent: Tuesday, 17 May 2016 11:47 AM To: public(a)talk.mikrotik.com.au Subject: simple queue Hi Trying to limit up / down from 10.172.202.0/24 to the internet http://wiki.mikrotik.com/wiki/Manual:Queue#Queue_Types http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle /queue simple remove [ find where ! dynamic ] add comment="ratelimit for yboGuest network and only for marked packets" max-limit=10M/10M name=guestToInternet packet-marks=guestInternet target=10.172.202.0/24 /ip firewall mangle remove [ find where ! dynamic ] add action=mark-packet chain=forward new-packet-mark=guestInternet dst-address=10.172.202.0/24 src-address=!10.0.0.0 place-before=0 comment="Internet to guest" add action=mark-packet chain=forward dst-address=!10.0.0.0 src-address=10.172.202.0/24 new-packet-mark=guestInternet place-before=0 comment="Guest to internet" I can see packets matching the mangle rules but not in the queue. Also I am using fastconnect which is why I have the pattern matching mangle rules above the fastconnect rules ... if that matters ! Do I have to turn of fast connect or what am I doing wrong !!! A

3 7

simple queue
by Alex Samad - Yieldbroker 17 May '16

17 May '16

Hi Trying to limit up / down from 10.172.202.0/24 to the internet http://wiki.mikrotik.com/wiki/Manual:Queue#Queue_Types http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle /queue simple remove [ find where ! dynamic ] add comment="ratelimit for yboGuest network and only for marked packets" max-limit=10M/10M name=guestToInternet packet-marks=guestInternet target=10.172.202.0/24 /ip firewall mangle remove [ find where ! dynamic ] add action=mark-packet chain=forward new-packet-mark=guestInternet dst-address=10.172.202.0/24 src-address=!10.0.0.0 place-before=0 comment="Internet to guest" add action=mark-packet chain=forward dst-address=!10.0.0.0 src-address=10.172.202.0/24 new-packet-mark=guestInternet place-before=0 comment="Guest to internet" I can see packets matching the mangle rules but not in the queue. Also I am using fastconnect which is why I have the pattern matching mangle rules above the fastconnect rules ... if that matters ! Do I have to turn of fast connect or what am I doing wrong !!! A

3 3

interpreting sniffer logs
by Mike O'Connor 10 May '16

10 May '16

Hi All I'm looking at a sniffer log and trying to understand what a ':' in vlan id might mean, as seen below. I've not been able to find a reference to this else where. 5 time=436.901 num=461 direction=rx src-mac=00:1B:D5:8A:63:9C dst-mac=01:00:0C:CC:CC:CC vlan=2001:5 interface=AAPT protocol=802.2 size=503 cpu=1 fp=no Cheers Mike

3 2

Router Recomendation for 400/400 link
by Ben Jackson 09 May '16

09 May '16

Hi all, Does anyone have a recommendation for the cheapest possible MT router that will support a symmetrical 400mbps fibre link without compromising the available bandwidth. As far as I know there should be no complex firewall rules involved - just basic port forwarding / NAT masquerade. Thanks, Ben Jackson eLogik m:0404 924745 e: ben(a)elogik.net w: www.elogik.com.au [image: http://www.elogik.com.au] <http://www.elogik.com.au>

4 4

Multicast
by Alex Samad - Yieldbroker 06 May '16

06 May '16

Hi Trying to work out an issue with multicast routing. Trying to connect to 2 sources 233.71.185.130 233.71.185.146 /routing pim> export # may/06/2016 13:56:54 by RouterOS 6.33.3 # /routing pim interface add igmp-version=IGMPv3 interface=MCasx add igmp-version=IGMPv3 interface=Management /routing pim rp add address=203.0.119.247 comment="233.71.185.128/28 and 233.71.185.144/28" group=233.71.185.0/24 Inbound (upstream is MCasx) /routing pim> igmp-group print Flags: v1 - IGMPv1, v2 - IGMPv2, v3 - IGMPv3, I - include, E - exclude, F - forward, D - don't forward INTERFACE GROUP SOURCE TIMEOUT v3E Management 224.0.0.2 0.0.0.0 4m16s v3E Management 224.0.0.13 0.0.0.0 4m16s v3E Management 224.0.0.18 0.0.0.0 4m16s v3E Management 224.0.0.22 0.0.0.0 4m16s v3E Management 224.0.0.252 0.0.0.0 4m18s v3I Management 233.71.185.130 0.0.0.0 0s v3F Management 233.71.185.130 203.6.253.212 4m19s v3I Management 233.71.185.146 0.0.0.0 0s v3F Management 233.71.185.146 203.6.253.214 4m18s v3E Management 239.255.255.250 0.0.0.0 2m13s v3E MCasx 224.0.0.2 0.0.0.0 2m24s v3E MCasx 224.0.0.13 0.0.0.0 2m24s v3E MCasx 224.0.0.22 0.0.0.0 2m24s v3I MCasx 233.71.185.130 0.0.0.0 0s v3F MCasx 233.71.185.130 203.6.253.212 2m16s tcpdump on the MCasx shows packets coming in. tcpdump on the Management doesn't show any packets leaving /routing pim> join print Flags: RP - (*,*,RP), WC - (*,G), SG - (S,G), SG_rpt - (S,G,rpt) GROUP SOURCE RP WC 224.0.0.0 203.0.119.247 203.0.119.247 SG 224.2.2.3 0.0.0.0 SG 239.225.100.100 0.0.0.0 SG 239.255.255.250 0.0.0.0 SG_rpt 224.2.2.3 10.32.50.52 SG_rpt 233.71.185.130 203.6.253.212 203.0.119.247 SG_rpt 233.71.185.146 203.6.253.214 203.0.119.247 Any suggestions ??

1 1

mesh network using MikroTik?
by Karl Auer 02 May '16

02 May '16

Has anyone on the list run a mesh network with MT hardware? We've been playing with OpenWRT and BATMAN IV, it's been pretty good, but I notice that my MT units have some meshy command sets in there :-) We have a mesh application in mind for which we need a two-radio unit with at least two independently configurable ethernet interfaces and mesh-capable software. Two radios is so that we can put the mesh on one radio and users on the other OR use the same units as backbone nodes. Wondering if the MikroTik is worth looking at more closely. The chance to chat with someone who's actually done it would be great. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 6D59 8AE6 810D 44E3 7626 7040 4DD6 F89F 3053 4774 Old fingerprint: 9DCA 0903 BCBD 0647 BCCC 2FA7 A35C 57A1 ACF9 00BB

4 6

Universal Firewall
by Josh Oberin 29 Apr '16

29 Apr '16

Hi Guys, I'm trying to build a starter universal firewall so people can load it on their routers and then add onto it as needed, or even as just to use as an example. I uploaded it to pastebin as 50 lines is a little too much to slap into an email. http://pastebin.com/Fp05Cwng Let me know of any suggestions you have. Thanks, Josh

6 7

SIP Problem
by QCS Group - Infrastructure 26 Apr '16

26 Apr '16

Hi All, Does anyone have any issues with Mikrotik dropping any SIP traffic after a 10min active call happens? This happens constantly, just wondering what I have to tweak to get this resolved. SIP ALG is off. Firmware version is 6.34.4 Thanks Marius ________________________________ Thinking of updating your phone system? Ask us about our "Cloud Based PABX" solution before you do anything. ________________________________

3 2

Active Directory Reversible Encryption
by Dave Browning 26 Apr '16

26 Apr '16

Hi Guys, Is there ANY way to use AAA with AD and not have to do the reversible encryption thing in AD? If not, will there be in the future? Dave Browning | Network Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

3 5

Re: [MT-AU Public] RB SXT LTE
by Thomas Jackson 25 Apr '16

25 Apr '16

As a very belated followup to this, I've finally got the SXT-LTE mounted on the TV antenna mast at home (previously was inside the roof where there was a fair bit of attenuation from the insulation - wasn't really an issue since it was just being used as a backup link - but it is nice to get full use of it). Speedtest is now showing roughly 63Mb/sec down and 23Mb/sec up - which beats what I get on my Optus HFC (with Speed Pack) connection! If it wouldn't send me broke with the excess usage fees, I'd move over to the SXT LTE as my primary link in a heartbeat. I'm sure I could squeeze a bit more out of the link if I was to spend some time properly aligning it, but I've run out of time to tinker today. -----Original Message----- From: Thomas Jackson [mailto:thomas@thomax.com.au] Sent: Tuesday, 2 February 2016 12:01 PM To: MikroTik Australia Public List Subject: RE: [MT-AU Public] RB SXT LTE Received the sample earlier today - I've only had a couple of minutes to test, but it worked perfectly first go on Telstra - didn't even need to do any configuration - just dropped in a SIM and plugged it in. >From our office (a known Telstra black-spot) I was able to get 7 mbit down / 9 mbit up with Speedtest.net using the highly scientific method of holding it by hand and pointing it out the window in the rough direction of a Telstra tower. Given that we struggle to get a solid voice call out from here, I'm pretty happy with those numbers. The final destination for this unit is at home (where I get very good Telstra signal) - I'll post the results from that too once I've got it in. -----Original Message----- From: Thomas Jackson [mailto:thomas@thomax.com.au] Sent: Friday, 22 January 2016 4:57 PM To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> Subject: RE: [MT-AU Public] RB SXT LTE I've got a unit on order now, hopefully will have it in the next week or two. According to the ACMA register, there is a Telstra band 3 station about 800 metres from home, so it should work there if it is going to work at all. Will post back once I have tested it out. -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Matt Perkins Sent: Friday, 22 January 2016 3:03 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] RB SXT LTE I would be interested to know if they work to. Band 3 and 7 both are both used by Telstra and Optus. But i would be a bit worried that the new 700Mhz band is not there. So you would miss out on the new (old analog TV) which is being rolled out in regional areas. Matt. On 22/01/2016 11:00 AM, Andrew Gilbett wrote: > Hi Thomas, > > I asked exactly the same question of duxtel. And am interested in > testing one as well but also have not commited to buying one from > overseas yet. So any feed back is welcome. > > Andrew > On 22/01/2016 9:23 AM, "Thomas Jackson" <thomas(a)thomax.com.au> wrote: > >> Good morning all, >> >> Just wondering if anyone has tested out an RB SXT LTE in AU yet >> (specifically with Telstra)? From my understanding, all three >> networks have band 3 and/or band 7 coverage in metro areas, so I suspect it will work. >> >> I've had a chat to Duxtel and they advised that they're not planning >> on bringing it in at this stage (unless I want to special order a >> carton of them); it would be nice to know if it might work before I >> order one from overseas. >> >> Regards, >> >> Thomas >> >> >> >> _______________________________________________ >> Public mailing list >> Public(a)talk.mikrotik.com.au >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com >> .au >> > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au -- /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt(a)spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */ _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0