Questions tagged [routeros]

Linux-based operating system known also known as MikroTik RouterOS that runs on x86 and RouterBOARD systems.

Filter by
Sorted by
Tagged with
2 votes
1 answer
124 views

Port forwarding fails with two DHCP Servers/routers on the same network

TL;DR I have two routers and a switch, and have forwarded port 80 on both routers to the switch, but depending on which router gives the switch its IP, it'll have that as its default gateway, and I ...
DrLime2k10's user avatar
0 votes
0 answers
40 views

RouterOS 7: Configure the Wireguard server to support connections by different WAN access IP

RouterOS 7 router with two WAN ports, WAN2 and WAN3(I can access Winbox with both of these WAN IPs without any issues), and set up a Wireguard (WG) service. I can successfully connect to WG by the ...
timy's user avatar
  • 709
1 vote
0 answers
71 views

Scripting with variables in RouterOS

I seem to be at a complete loss as to how Global variables work in RouterOS. My goal is to create a script which will make calls to other infrastructure components when DHCP leases are changed. For ...
Matt Clark's user avatar
0 votes
0 answers
26 views

RouterOS 7, how to fair-share per interface

I'm configuring fiber for my office. Every floor is rented by someone, and I want to share the internet fairly. We've got one incoming 1Gbps fiber link, into a modem, followed by a Mikrotik router. ...
Daniël van den Berg's user avatar
0 votes
0 answers
49 views

RouterOS - how to make diffrent IP to access the Internet through different gateway

I want to make 192.168.1.2/24->192.168.1.1 to access the Internet, but 192.168.1.3/24->192.168.1.100 to access the Internet. I don't know how to do it. [admin@RouterOS] /ip/route> print ...
Kurei's user avatar
  • 1
0 votes
1 answer
429 views

DST-NAT for port tcp/80 on Mikrotik router

I am trying to redirect the incoming traffic to tcp/80 of the public IP interface of Mikrotik router to the internal server with reverse proxy. No matter what I do, the NAT rule does not work with tcp/...
japol's user avatar
  • 1
0 votes
1 answer
760 views

Why are certain TCP connections extremely slow, except while running a packet capture on the router?

I have a weird issue with my MikroTik RouterBOARD hEX - RB750Gr3 (running Router OS 7.8). Certain TCP connections are extremely slow, for example this 93 KB file takes ages to download from the ...
aaronk6's user avatar
  • 416
1 vote
0 answers
283 views

Packet forwarding for L2TP/IPSec VPN

I have 2 Server: Server 1: MikroTik RouterOS (Setting up L2TP vpn server) [out of my country] Server 2: Fresh Ubuntu 20.04 OS [in my country] I can't connect to Server 1 via L2TP connection (protocol ...
sMohammad14's user avatar
0 votes
1 answer
487 views

One port 2 external ip linked to MAC split by LAN ports

The provider issues 2 static addresses linked to the MAC address of the device on one port. Is it possible to divide the ports of the Mikrotik router into traffic exchange through each address? For ...
Serrver's user avatar
0 votes
0 answers
905 views

Mikrotik CCR1009 ROS 7 dual WAN configuration

i have a CCR1009 (ROS 7.2.3) configured with the COMBO port as WAN_1 and the eth1 to eth5 ports as LAN, VOIP, and 3 SERVER with different subnets. The ISP is fastweb (mixed fiber 100/100) which ...
Gianluca's user avatar
0 votes
0 answers
470 views

MikroTik - configure NAT behind NAT

I have primary Mikrotik router connected to Internet provider and serving internal network 192.168.88.0/24. I also have second Mikrotik router which I want to plug into my internal network of the ...
ivan.ukr's user avatar
  • 117
0 votes
1 answer
228 views

AWS middlebox appliance routing doesn't work

I have installed and configured EC2 instance with routerOS which I want to use as main point of connection for branch networks. It has 1 interface, resides in subnet 172.20.1.0/24. Subnet 172.21.1.0/...
Pascal_tgn's user avatar
0 votes
1 answer
170 views

mikrotik route appear and removes every second automatically

Mikrotik OS v6.48.2 has routes # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 193.168.1.1 1 <<<<<<&...
Master's user avatar
  • 1
0 votes
0 answers
630 views

Ubuntu Installation on Qemu/KVM Black Screen

I'm trying to install Ubuntu or higher on KVM. I have tried installing 14.04.6 LTS / 16.04.7 LTS and 18.04.5 LTS First i create Qemu Disk Image : qemu-img.exe create -f raw hdd.img 5G and when i boot ...
Amr SubZero's user avatar
0 votes
1 answer
381 views

Can I filter IPv6 ospf-v3 routes in Mikrotik RouterOS v6?

When setting up an ospf instance, in-filter and out-filter allow us to control which filter chains will be used to decide what routes get added to the routing table, propagated without adding them to ...
Falcon Momot's user avatar
  • 25.3k
1 vote
2 answers
2k views

How to access subnet from Open VPN server (Ubuntu), VPN client RouterOS?

Here's the setup: [OpenVPN server] --- WAN --- [RouterOS client] --- [Local subnet client] 10.5.0.0 10.5.0.14 10.10.10.2 $ route -n Kernel IP routing table ...
inbxa's user avatar
  • 11
0 votes
1 answer
79 views

Simple routing not working

I have a problem with my virtual environment. On this picture you can see my configuration: I have a total of three subnets. Where one router with 192.168.1.1 is physical and one virtual router and ...
Jonas Aeschlimann's user avatar
1 vote
2 answers
3k views

UDP NAT traffic but no response on MikroTik RouterOS

I have a MikroTik router with v7.1beta2 firmware installed It's WAN (eth1) has an IP address of 192.168.7.122 There are two devices connected to its LAN Device #1 is a webserver, communicating on ...
CenterOrbit's user avatar
2 votes
0 answers
1k views

Why is port forwarding in Mikrotik RouterOS stuck at SYN_RECV?

I'd like to set up port forwarding of tcp port 8000 -> 192.168.1.16:4200 on my Mikrotik RouterOS. I've done the following: /ip firewall nat add dstnat chain=dstnat action=dst-nat to-addresses=192....
adamsfamily's user avatar
0 votes
0 answers
183 views

Mikrotik RouterOS - How to prevent all devices in a VLAN from initiating any connections outside of the VLAN? [duplicate]

I'm using a RouterOS device as a router on a stick. I'd like to isolate a certain VLAN from the outside world so that the VLAN cannot instantiate any connections to other VLANs or to the Internet (WAN)...
adamsfamily's user avatar
0 votes
1 answer
706 views

Ansible error with auto provision Mikrotik router

I have a problem that I cannot understand how to solve ... From my ansible central machine I have written a routine for Mikrotik, to execute a series of configuration commands and thus auto provision ...
Fabio Orefice Amez's user avatar
1 vote
1 answer
4k views

Manually subnet an IPv6 Prefix Across Multiple MikroTik Routers w/out Prefix Delegation

I want to configure my network so hosts can IPV6 auto-address Global Unicast Addresses ("GUA") using SLAAC. I have a ::/48 (assigned by Hurricane Electric) that I want to divide into subnets and ...
F1Linux's user avatar
  • 365
0 votes
1 answer
688 views

MikroTik: Set scan-list in RoS to ONLY use 2.4 GHz non-overlapping channel frequencies

How do I set the scan-list in MikroTik RouterOS to use only 2.4 GHz non-overlapping channel frequencies?
F1Linux's user avatar
  • 365
4 votes
2 answers
494 views

WiFi: Frequencies that map to non-overlapping 2.4 GHz channels 1,6 & 11

I'm configuring a wireless router. I know the non-ovelapping channels are 1,6 & 11. However, my router only specifies frequencies that I can select, not channels. What are the frequencies that ...
F1Linux's user avatar
  • 365
0 votes
1 answer
36 views

Access to private resources with VPN

i have following setup: 192.168.0.1 - my router base on routerOS with public static ip X.X.X.X. on router i have nat rules for redirect all incoming request to 80,443 port to server in LAN (192.168.0....
Anatoly Kryzhanovsky's user avatar
0 votes
2 answers
2k views

How to forbid DHCP-server to lease specific IP address on Mikrotik's routerOS?

My Mikrotik router is running a DHCP server in /24 network, I would like to prohibit it to lease some IP addresses (I would like to use them statically on a couple of devices). Are there any ways to ...
Ivan's user avatar
  • 55
3 votes
2 answers
8k views

Can't get a serial console on MikroTik RB4011iGS+

I am trying to connect to the serial console of my MikroTik RB4011iGS+. I might be missing something obvious, but I can't seem to get a terminal (or anything else). Relevant documentation page: ...
Valmiky Arquissandas's user avatar
0 votes
1 answer
5k views

Mikrotik - Using bridge for WAN/DMZ

I'm not sure I'm going about this the right way.... I have 3 static IP's from my ISP that are all in the same subnet with the same gateway. One address is used for the router (RB3011 - 6.43.8) on a ...
con-guy's user avatar
1 vote
0 answers
779 views

How to allow responding to broadcast pings on Mikrotik RouterOS?

By default, most systems don't respond to broadcast ping requests. However, there exist ways to explicitly allow responding to broadcast ICMP requests on multiple systems, such as Linux. How can I ...
TheNavigat's user avatar
1 vote
1 answer
6k views

MikroTik Capsman is trying to push network channel configurations that are not allowed by access points

According to information from allowed-channels command on my Access Point the allowed channels are the following: 5180/20-Ceee/ac, 5260/20-Ceee/ac/DP, 5745/20-Ceee/ac, 5750/20-Ceee/ac, 5755/20-Ceee/...
SiliconMind's user avatar
0 votes
1 answer
482 views

Mikrotik routeros maximum number of filter rules

We need to deploy a service using Mikrotik routerboard CCR. We need to know how many filter/mangle rules a Mikrotik device can support: hundreds, thousands ? What about performance, cpu and memory ...
Luciano Denti's user avatar
1 vote
1 answer
186 views

Simple router with two ethernet interface no static route needed?

Normaly, for two subnets connected with one router, i always used to create two routes per example: subnet 1: 192.168.1.0/24 subnet 2: 192.168.2.0/24 router interface 1: 192.168.1.99 router ...
Jonas Aeschlimann's user avatar
0 votes
1 answer
888 views

DNS requests with the term "router" in a subdomain always redirected to local router

It seems that my router (Mikrotik RB2011UiAS) is somehow hijacking DNS request that have the subdomain "router" in them and forwards them to itself. router.google.com, router.amazon.com, you name it,...
vic's user avatar
  • 973
0 votes
1 answer
365 views

IPTABLES not blocking EoIP Tunnel

So I decided to play with EoIP Tunnels today on two VMs which I installed free trial RouterOS on them. I set rules on iptables on the hypervisor (which is Proxmox) that prevents any input to vms ...
Amin Vakil's user avatar
0 votes
1 answer
684 views

Configuring MikroTik RB 750 GL to have switch as WAN and Ether1 as NAT to LAN

My ISP allows me to have multiple static IP addresses. I want to use a RouterBoard 750GL to attach multiple publicly addressable servers to the internet using Ether[2-5] in switch mode, and use Ether1 ...
user2121874's user avatar
0 votes
1 answer
1k views

DNS entry always preferring wildcard entry instead of explicit entry

I have a Mikrotik Router with Router OS where I need to set a static DNS entry. I have set a url exhibitorsearch.test.intern.customer.com to an ip with the ending .92 a regexp .*\.test\.intern\....
mles's user avatar
  • 115
0 votes
1 answer
1k views

how to use src-address in mikrotik script 'find'

:foreach i in=[/ip fi man find chain=forward ] do={:put [/ip fi man get value-name=src-address $i] } I get: 192.168.1.99 192.168.1.100 192.168.1.101 192.168.1.102 :foreach i in=[/ip fi man find ...
Ta Coen's user avatar
  • 240
1 vote
1 answer
5k views

RouterOS push static route for IPSec IKEv2 VPN

Can't find a solution how actually I can push a static routes to VPN clients, when they connect via VPN. Configuration from here RouterOS, IPSec, IKEv2. Clients mainly macOS users via standard soft. ...
Alex Ivasyuv's user avatar
1 vote
1 answer
2k views

Make a Mikrotik Router behave as a separate router on each port

We use Mikrotik routers for many points in our system, but we have an odd need for one location. We would like to use one router (example: RB960PGS-PB), where the main Internet connection comes in on ...
JasonP's user avatar
  • 13
0 votes
1 answer
10k views

How to set up QoS on MikroTik RouterOS?

I'm aware that this is a common question but I've invested two days now to learn this and still could not find a clear explanation... Recently I bought a Miktotik hEX (RouterOS 6, Level 4), used as ...
Udo G's user avatar
  • 443
1 vote
0 answers
692 views

RouterOS sending malformed packets

I have a Routerboard 951G-2HnD which runs latest stable: RouterOS v6.50.5 Firmware v3.41 The board acts as the WiFi AP in WPA2-PSK mode. Recently I have noticed unhealthy amount of traffic sent from ...
user avatar
1 vote
3 answers
2k views

Order of external DNS servers on Router OS DNS Server

We have DNS server on our Mikrotik (RouterOS 6.36). [admin@xxx] /ip dns> print servers: 10.0.10.3,8.8.8.8 dynamic-servers: allow-remote-requests: yes max-udp-packet-...
pagep's user avatar
  • 137
0 votes
1 answer
172 views

Why static route can be ignored?

I'm trying to route all traffic to 10.2.0.0/24 via OpenVPN client(10.7.0.2) Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...
danilabagroff's user avatar
0 votes
1 answer
750 views

Cannot share the internet connection with dual wan setup on RB2011UiAS-RM

I have a bit trouble with setting up multiple WAN connections on my RB2011UiAS-RM. Recently we have bought this router to replace an old proxy server in our company, which could fail/broke at any ...
K.Madura's user avatar
0 votes
1 answer
235 views

Custom Microtik Configuration

In short, i'm trying to load a custom RSC configuration into a Microtik Router However after loading it in on the restart with: /system reset-configuration no-defaults=yes run-after-reset=flash/vpn-...
zanderwar's user avatar
  • 103
4 votes
1 answer
4k views

IPv6 subnetting a dynamic /56 prefix

I read How does IPv6 subnetting work and how does it differ from IPv4 subnetting? but my question was not answered there. I'm upgrading our IPv4 network to IPv6. Currently, our NAT gateway splits our ...
Old Pro's user avatar
  • 1,475
0 votes
3 answers
3k views

How can I forward network packages to an interface in Mikrotik?

I want to forward all TCP packets to one interface (a dedicated Internet connection only for downloads) and all UDP packets to another one (a dedicated internet connection only for streaming and ...
Aldo Astupillo's user avatar
1 vote
1 answer
12k views

How to setup route to gateway on different subnet with MikroTik Routers?

We have the following setup which I need to get working: Location A: Subnet 1: Network: 192.168.1.0 Mask: 255.255.255.0 Default Gateway: 192.168.1.1 Subnet 2: Network: 192.168.2.0 Mask: 255.255....
TylerDurden's user avatar
1 vote
1 answer
3k views

Mikrotik: Firewall dropping packets even though rule seems to match

I set up an L2TP VPN server on my Mikrotik. Connecting to the VPN when I'm behind the router works, but once I'm connecting from the WAN side, it doesn't. I logged my firewall to see if I was dropping ...
Lucas Kauffman's user avatar
1 vote
2 answers
8k views

Export vs Backup

Basically self-explanatory. Mikrotik's RouterOS has two distinct functions, one which backs up the router and one which exports the configuration of the router. What exactly is the difference, and ...
Dessa Simpson's user avatar