The official Mikrotik router thread

[Peon]

okay. will do. the below is current list. wont internet stop working if i disable port 80?

View attachment 1317490

No. Think of these services in how your mikrotik can be accessed by. So to test. Open your mikrotik by browsing its IP in Chrome or Firefox. Then go and disable the www 80 service and try access your mikrotik again using Chrome or Firefox.

EDIT: Im browsing through briefly and havent checked. Have your updated you mikrotik to latest version and its firmware as well?

 

[nad_isa]

No. Think of these services in how your mikrotik can be accessed by. So to test. Open your mikrotik by browsing its IP in Chrome or Firefox. Then go and disable the www 80 service and try access your mikrotik again using Chrome or Firefox.

EDIT: Im browsing through briefly and havent checked. Have your updated you mikrotik to latest version and its firmware as well?

okay i understand. done the test - not reachable via browser after i disabled it. disabled everything except for winbox via local subnet

no i have not done so yet. still on v6.

 

[nad_isa]

Nadisa, you need to essentially create your firewall rules until that simple test passes, all green blocks. Your Winbox service you need to allow access only from your LAN IP range.

The admin user account. Create another user account and grant it full or admin access then disable the old standard admin account. This new user account also should be specified to only login from local LAN IP range.

It looks like you wanting to learn so keep at it until those tests pass.

okay so did this the hard way by manually adding in some default firewall filter rules. my fault for removing the default config in the first place

thanks guys - was a mission for me as i dont know mikrotik and nor do i fully understand the filter rules i applied but i have to start somewhere...

 

[LandyMan]

These aren’t pretty but do the job.

Gizzu 60W DC 65Wh Mini UPS - Black available to buy online at @TAKEALOT We offer fast, reliable delivery to your door.

Takealot.com: Online Shopping | SA's leading online store

South Africa's leading online store. Fast, reliable delivery to your door. Many ways to pay. Shop anything you can imagine: TVs, laptops, cellphones, kitchen appliances, toys, books, beauty & more. Shop the mobile app anytime, anywhere.

www.takealot.com

Same as the Ratel 860p units. I have 2 of those and then one Ultralan powering Wifi through the house during loadshedding

 

[LandyMan]

I am back ladies/gents/fighter jets

Currently using the Mikrotik RB750 (old gen) which is only 100Mbps. Please recommend a replacement that is 1Gbps (I am looking at the MikroTik hAP ac2 Dual Band 5 Port Gigabit WiFi Router | RBD52G-5HacD2HnD-TC). Alternative suggestions are welcome.

Also, will I be able to export config from the existing one, and import into the new one (don't want to get the ISP involved to reconfigure the setup).

Thanks!

Any other comments on these two units, apart from @yogidabear's

 

[nad_isa]

okay, me again. Question on simple Queue

So i setup a simple queue on my second subnet (192.168.20.0/24) to limit upload and download.

This subnet has DHCP server and setup on eth9. I tested and it worked when i plugged cable from port9 into laptop directly. it limited both upload/download.

I then plugged in a old asus dsl router from eth9 to WAN port of asus router. the asus router has its on DHCP setup on 192.168.1.0/24 for its local lan.

when connecting to the asus wifi SSID - it does not seem to be limiting upload/download. should i remove DHCP setup on the ASUS and allow it to be set from mikrotik?

 

[Leno]

okay, me again. Question on simple Queue

So i setup a simple queue on my second subnet (192.168.20.0/24) to limit upload and download.

This subnet has DHCP server and setup on eth9. I tested and it worked when i plugged cable from port9 into laptop directly. it limited both upload/download.

I then plugged in a old asus dsl router from eth9 to WAN port of asus router. the asus router has its on DHCP setup on 192.168.1.0/24 for its local lan.

when connecting to the asus wifi SSID - it does not seem to be limiting upload/download. should i remove DHCP setup on the ASUS and allow it to be set from mikrotik?

Check that you have disabled the fasttrack rule in your filter table else queues wont work

 

[nad_isa]

Check that you have disabled the fasttrack rule in your filter table else queues wont work

okay thanks. will have a look.

 

[LandyMan]

Hhmm, I've been seeing quite a few of these since upgrading to the V7 firmware

 

[nad_isa]

yes im going to need 2. I already have 1 powering the ONT (12v). Its the gizzu dual dc and can only output 12v.

so i think my best bet is to then sell this one and get 12 units. one for 48v poe and another for 24v dc.

a schlep but will see if i can flog it to my tenant.

will this unit be enough to power the RB4011?

Takealot.com: Online Shopping | SA's leading online store

South Africa's leading online store. Fast, reliable delivery to your door. Many ways to pay. Shop anything you can imagine: TVs, laptops, cellphones, kitchen appliances, toys, books, beauty & more. Shop the mobile app anytime, anywhere.

www.takealot.com

it says 24v1A output - looking at the RB4011 its power adapter supplied is 24v1.5A so im thinking it will be to light as i have an AP powered via POE.

 

[Hamish McPanji]

will this unit be enough to power the RB4011?

Takealot.com: Online Shopping | SA's leading online store

South Africa's leading online store. Fast, reliable delivery to your door. Many ways to pay. Shop anything you can imagine: TVs, laptops, cellphones, kitchen appliances, toys, books, beauty & more. Shop the mobile app anytime, anywhere.

www.takealot.com

it says 24v1A output - looking at the RB4011 its power adapter supplied is 24v1.5A so im thinking it will be to light as i have an AP powered via POE.

Max power consumption 33 W
Max power consumption without attachments18 W

PoE in input Voltage18-57 V
DC jack input Voltage12-57 V

Too little , methinks

 

[nad_isa]

Check that you have disabled the fasttrack rule in your filter table else queues wont work

thanks. when i disabled fast track it worked again.

after some research if i add the below before the fasttrack rule it works while keeping fasttrack enabled

/ip firewall filter
add action=accept chain=forward connection-state=established,related src-address=subnet
add action=accept chain=forward connection-state=established,related dst-address=subnet

 

[nad_isa]

Max power consumption 33 W
Max power consumption without attachments18 W

PoE in input Voltage18-57 V
DC jack input Voltage12-57 V

Too little , methinks

I'm going to check if I can then power the rb4011 via poe in. There are a few units that do 24/48v.

 

[nad_isa]

I'm going to check if I can then power the rb4011 via poe in. There are a few units that do 24/48v.

Okay, update:

I am am powering the RB4011 via poe In using ultralan mini UPS (24v) - which is in turn powering my Unifi AC-LR via poe out - will monitor the battery usage when in loadsheddling

 

[LandyMan]

After some increases in memory failures and reboots on my Original RB750, I pulled the trigger on the MikroTik hAP ac2 Dual Band 5 Port Gigabit WiFi Router | RBD52G-5HacD2HnD-TC from Takealot (R999 on special)

Should give some overall improvement due to the Gigabit ports and new tech

 

[PhireSide]

After some increases in memory failures and reboots on my Original RB750, I pulled the trigger on the MikroTik hAP ac2 Dual Band 5 Port Gigabit WiFi Router | RBD52G-5HacD2HnD-TC from Takealot (R999 on special)

Should give some overall improvement due to the Gigabit ports and new tech

How long did you have the RB750 for?

 

[LandyMan]

How long did you have the RB750 for?

This last one I probably had for 4 odd years.
I have been through 5 in the last 9 years (before FTTH it was CAT5 to the local "kiosk", so every time lightning struck, I lost a router through the spike over CAT5).
This last one has also been hit, but just "damaged" one of the ports, not killed the whole unit.
But after this last upgrade to ver 7 of the software, I get memory leaks and reboots almost daily

 

[PhireSide]

This last one I probably had for 4 odd years.
I have been through 5 in the last 9 years (before FTTH it was CAT5 to the local "kiosk", so every time lightning struck, I lost a router through the spike over CAT5).
This last one has also been hit, but just "damaged" one of the ports, not killed the whole unit.
But after this last upgrade to ver 7 of the software, I get memory leaks and reboots almost daily

I think it deserves a hero's funeral after what it's been through.

When are you getting your new one?

 

[LandyMan]

I think it deserves a hero's funeral after what it's been through.

When are you getting your new one?

It is being delivered tomorrow ... then I can retire the RB750 and the hAP lite that is feeding 2.4Ghz for the security cameras

 

[PhireSide]

It is being delivered tomorrow ... then I can retire the RB750 and the hAP lite that is feeding 2.4Ghz for the security cameras

Sounds like a nice weekend project...good luck with transferring the config.

If your interface names are the same it should go smoothly