Hotspot Mikrotik, Limit Bandwith And Dvr-Cctv

[Anonymous]

Any Body Help me Pls..

I’m newbe in Mikrotik, just read tutor from google search and trying to RB-750GL for my working place one week ago,

“”my Problem here” before using mikrotik I can acces My-DVR HOME using ip public and port.

Now I can’t access to my DVR-(at home) via mikrotik at working place, but We can browse internet, download,mail,game,chating,etc but cannot connect to my DVR-Home, usually BEFORE using mikrotik I just input public ip:port (36.77.XXX.XXX:88) I can login to my DVR-home.

Tried acces without mikrotik and I can connect to DVR again, connect using phone with GPRS. I Know any wrong in my configuration, but Where’s wrong, I have no Basic Mikrotik system, maybe all my setting is BIG WRONG,just read&try, try, try until my head sick (sorry for my Bad English )

## at HOME-DVR/CCTV

Line ISP—-> ADSL Modem—-> DVR using LAN/RJ45

ADSL Modem : TP-LINK-TD-W8101-G Mode:PPPoE,and added NAT:DVR 192.168.1.111 and port 88

DVR : ip 192.168.1.111 and port:88

IP Public : Static- 36.77.XXX.XXX

## at WORKING PLACE

Line ISP—-> ADSL Modem—-> Mikrotik —->PC Using RJ45 and WIFI

ADSL Modem- TP-Link TD-8817(mode :bridge)

Mikrotik RB-75O-GL (5 port)

IP public is Dynamic

set IP->Addresses

ether1 =ip 192.168.1.2/24 to adsl modem and as Dialing Adsl Modem ,192.168.1.1)

ether2 =ip 10.20.30.1/24 to Hub 8port Rj45

ether3 =ip 192.168.100.1/24 To Wifi router(Linksys=192.168.100.2)

ehter4 & 5 unused

using PPPoE Client dialing to ether1, we connect using hotspot login username and password (LAN cable and WiFi) same limit bandwith for all user, if without Mikrotik I can download with 300 Kb/s using IDM, here’s export setting on my virtual mikrotik the same config at working place I’m sure (my RB750 leaved at working place)I’am at Home Now..

---

/interface ethernet

set 0 arp=enabled auto-negotiation=yes cable-settings=default comment=

“Adsl Modem” disable-running-check=yes disabled=no full-duplex=yes

mac-address=08:00:27:4B:3E:67 mtu=1500 name=ether1 speed=100Mbps

set 1 arp=enabled auto-negotiation=yes cable-settings=default comment=

“RJ45 HUB” disable-running-check=yes disabled=no full-duplex=yes

mac-address=08:00:27:A3:4B:EF mtu=1500 name=ether2 speed=100Mbps

set 2 arp=enabled auto-negotiation=yes cable-settings=default comment=WIFI

disable-running-check=yes disabled=no full-duplex=yes mac-address=

08:00:27:CA:2E:5E mtu=1500 name=ether3 speed=100Mbps

set 3 arp=enabled auto-negotiation=yes cable-settings=default

disable-running-check=yes disabled=no full-duplex=yes mac-address=

08:00:27:BC:6B:8F mtu=1500 name=ether4 speed=100Mbps

/interface wireless security-profiles

set [ find default=yes ] authentication-types=”” eap-methods=passthrough

group-ciphers=aes-ccm group-key-update=5m interim-update=0s

management-protection=disabled management-protection-key=”” mode=none

name=default radius-eap-accounting=no radius-mac-accounting=no

radius-mac-authentication=no radius-mac-caching=disabled

radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username

static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=

none static-key-0=”” static-key-1=”” static-key-2=”” static-key-3=””

static-sta-private-algo=none static-sta-private-key=””

static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=

none tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=

“” wpa2-pre-shared-key=””

/ip hotspot profile

set [ find default=yes ] dns-name=”” hotspot-address=0.0.0.0 html-directory=

hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=

cookie,http-chap name=default rate-limit=”” smtp-server=0.0.0.0

split-user-domain=no use-radius=no

add dns-name=”” hotspot-address=10.20.30.1 html-directory=hotspot

http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap

name=hsprof1 rate-limit=”” smtp-server=0.0.0.0 split-user-domain=no

use-radius=no

add dns-name=”” hotspot-address=192.168.100.1 html-directory=hotspot

http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap

name=hsprof2 rate-limit=”” smtp-server=0.0.0.0 split-user-domain=no

use-radius=no

/ip hotspot user profile

set [ find default=yes ] idle-timeout=none keepalive-timeout=2m name=default

shared-users=1 status-autorefresh=1m transparent-proxy=no

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof1

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof2

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof3

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof4

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof5

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof6

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

add advertise=no idle-timeout=none keepalive-timeout=2m name=uprof7

open-status-page=always rate-limit=512k/512k shared-users=1

status-autorefresh=1m transparent-proxy=yes

/ip ipsec proposal

set [ find default=yes ] auth-algorithms=sha1 disabled=no enc-algorithms=3des

lifetime=30m name=default pfs-group=modp1024

/ip pool

add name=hs-pool-2 ranges=10.20.30.2-10.20.30.254

add name=hs-pool-3 ranges=192.168.100.2-192.168.100.254

/ip dhcp-server

add address-pool=hs-pool-2 authoritative=after-2sec-delay bootp-support=

static disabled=no interface=ether2 lease-time=1h name=dhcp1

add address-pool=hs-pool-3 authoritative=after-2sec-delay bootp-support=

static disabled=no interface=ether3 lease-time=1h name=dhcp2

/ip hotspot

add address-pool=hs-pool-2 addresses-per-mac=2 disabled=no idle-timeout=5m

interface=ether2 keepalive-timeout=none name=hotspot1 profile=hsprof1

add address-pool=hs-pool-3 addresses-per-mac=2 disabled=no idle-timeout=5m

interface=ether3 keepalive-timeout=none name=hs-ether3 profile=hsprof2

/ppp profile

set 0 change-tcp-mss=yes name=default only-one=default

remote-ipv6-prefix-pool=none use-compression=default use-encryption=

default use-ipv6=yes use-mpls=default use-vj-compression=default

set 1 change-tcp-mss=yes name=default-encryption only-one=default

remote-ipv6-prefix-pool=none use-compression=default use-encryption=yes

use-ipv6=yes use-mpls=default use-vj-compression=default

/interface pppoe-client

add ac-name=”” add-default-route=yes allow=pap,chap,mschap1,mschap2

dial-on-demand=no disabled=no interface=ether1 max-mru=1480 max-mtu=1480

mrru=disabled name=Dialing-Up password=Passworduser profile=default

service-name=”” use-peer-dns=yes user=11115010xxxx@isp.net

/queue type

set 0 kind=pfifo name=default pfifo-limit=50

set 1 kind=pfifo name=ethernet-default pfifo-limit=50

set 2 kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5

set 3 kind=red name=synchronous-default red-avg-packet=1000 red-burst=20

red-limit=60 red-max-threshold=50 red-min-threshold=10

set 4 kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5

set 5 kind=none name=only-hardware-queue

set 6 kind=mq-pfifo mq-pfifo-limit=50 name=multi-queue-ethernet-default

set 7 kind=pfifo name=default-small pfifo-limit=10

/routing bgp instance

set default as=65530 client-to-client-reflection=yes disabled=no

ignore-as-path-len=no name=default out-filter=”” redistribute-connected=

no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no

redistribute-static=no router-id=0.0.0.0 routing-table=””

/routing ospf instance

set [ find default=yes ] disabled=no distribute-default=never in-filter=

ospf-in metric-bgp=auto metric-connected=20 metric-default=1

metric-other-ospf=auto metric-rip=20 metric-static=20 name=default

out-filter=ospf-out redistribute-bgp=no redistribute-connected=no

redistribute-other-ospf=no redistribute-rip=no redistribute-static=no

router-id=0.0.0.0

/routing ospf area

set [ find default=yes ] area-id=0.0.0.0 disabled=no instance=default name=

backbone type=default

/routing ospf-v3 instance

set [ find default=yes ] disabled=no distribute-default=never metric-bgp=auto

metric-connected=20 metric-default=1 metric-other-ospf=auto metric-rip=20

metric-static=20 name=default redistribute-bgp=no redistribute-connected=

no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no

router-id=0.0.0.0

/routing ospf-v3 area

set [ find default=yes ] area-id=0.0.0.0 disabled=no instance=default name=

backbone type=default

/snmp community

set [ find default=yes ] addresses=”” authentication-password=””

authentication-protocol=MD5 encryption-password=”” encryption-protocol=

DES name=public read-access=yes security=none write-access=no

/system logging action

set 0 memory-lines=100 memory-stop-on-full=no name=memory target=memory

set 1 disk-file-count=2 disk-file-name=log disk-lines-per-file=100

disk-stop-on-full=no name=disk target=disk

set 2 name=echo remember=yes target=echo

set 3 bsd-syslog=no name=remote remote=:: remote-port=514 src-address=0.0.0.0

syslog-facility=daemon syslog-severity=auto target=remote

/user group

set read name=read policy=”local,telnet,ssh,reboot,read,test,winbox,password,w

eb,sniff,sensitive,api,!ftp,!write,!policy” skin=default

set write name=write policy=”local,telnet,ssh,reboot,read,write,test,winbox,pa

ssword,web,sniff,sensitive,api,!ftp,!policy” skin=default

set full name=full policy=”local,telnet,ssh,ftp,reboot,read,write,policy,test,

winbox,password,web,sniff,sensitive,api” skin=default

/interface bridge settings

set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=

no

/interface l2tp-server server

set authentication=pap,chap,mschap1,mschap2 default-profile=

default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled

/interface ovpn-server server

set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=

default enabled=no keepalive-timeout=60 mac-address=FE:C6:B9:8B:CF:19

max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no

/interface pptp-server server

set authentication=mschap1,mschap2 default-profile=default-encryption

enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled

/interface sstp-server server

set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=

default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=

disabled port=443 verify-client-certificate=no

/interface wireless align

set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=

00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300

frames-per-second=25 receive-all=no ssid-all=no

/interface wireless sniffer

set channel-time=200ms file-limit=10 file-name=”” memory-limit=10

multiple-channels=no only-headers=no receive-errors=no streaming-enabled=

no streaming-max-rate=0 streaming-server=0.0.0.0

/interface wireless snooper

set channel-time=200ms multiple-channels=yes receive-errors=no

/ip accounting

set account-local-traffic=no enabled=no threshold=256

/ip accounting web-access

set accessible-via-web=no address=0.0.0.0/0

/ip address

add address=192.168.1.2/24 disabled=no interface=ether1 network=192.168.1.0

add address=10.20.30.1/24 disabled=no interface=ether2 network=10.20.30.0

add address=192.168.100.1/24 disabled=no interface=ether3 network=

192.168.100.0

/ip dhcp-server config

set store-leases-disk=5m

/ip dhcp-server network

add address=10.20.30.0/24 comment=”hotspot network” dhcp-option=””

dns-server=”” gateway=10.20.30.1 ntp-server=”” wins-server=””

add address=192.168.100.0/24 comment=”hotspot network” dhcp-option=””

dns-server=”” gateway=192.168.100.1 ntp-server=”” wins-server=””

/ip dns

set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB

max-udp-packet-size=4096 servers=””

/ip firewall connection tracking

set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s

tcp-close-wait-timeout=10s tcp-established-timeout=1d

tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s

tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no

tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s

/ip firewall filter

add action=passthrough chain=unused-hs-chain comment=

“place hotspot rules here” disabled=yes

/ip firewall nat

add action=passthrough chain=unused-hs-chain comment=

“place hotspot rules here” disabled=yes to-addresses=0.0.0.0

add action=masquerade chain=srcnat disabled=no out-interface=Dialing-Up

add action=masquerade chain=srcnat comment=”masquerade hotspot network”

disabled=no src-address=10.20.30.0/24

add action=masquerade chain=srcnat comment=”masquerade hotspot network”

disabled=no src-address=192.168.100.0/24 to-addresses=0.0.0.0

/ip firewall service-port

set ftp disabled=no ports=21

set tftp disabled=no ports=69

set irc disabled=no ports=6667

set h323 disabled=no

set sip disabled=no ports=5060,5061 sip-direct-media=yes

set pptp disabled=no

/ip hotspot service-port

set ftp disabled=no ports=21

/ip hotspot user

add disabled=no name=admin password=”” profile=default

add disabled=no name=ts1 password=ts profile=uprof1

add disabled=no name=ts2 password=ts profile=uprof2

add disabled=no name=ts3 password=ts profile=uprof3

add disabled=no name=ts4 password=ts profile=uprof4

add disabled=no name=ts5 password=ts profile=uprof5

/ip neighbor discovery

set ether1 disabled=no

set ether2 disabled=no

set ether3 disabled=no

set ether4 disabled=no

set Dialing-Up disabled=yes

/ip proxy

set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4

cache-on-disk=no enabled=no max-cache-size=none max-client-connections=

600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0

parent-proxy-port=0 port=8080 serialize-connections=no src-address=

0.0.0.0

/ip service

set telnet address=”” disabled=no port=23

set ftp address=”” disabled=no port=21

set www address=”” disabled=no port=80

set ssh address=”” disabled=no port=22

set www-ssl address=”” certificate=none disabled=yes port=443

set api address=”” disabled=yes port=8728

set winbox address=”” disabled=no port=8291

/ip smb

set allow-guests=yes comment=MikrotikSMB domain=MSHOME enabled=no interfaces=

all

/ip smb shares

set [ find default=yes ] comment=”default share” directory=/pub disabled=no

max-sessions=10 name=pub

/ip smb users

set [ find default=yes ] disabled=no name=guest password=”” read-only=yes

/ip socks

set connection-idle-timeout=2m enabled=no max-connections=200 port=1080

/ip traffic-flow

set active-flow-timeout=30m cache-entries=4k enabled=no

inactive-flow-timeout=15s interfaces=all

/ip upnp

set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes

/ipv6 nd

set [ find default=yes ] advertise-dns=no advertise-mac-address=yes disabled=

no hop-limit=unspecified interface=all managed-address-configuration=no

mtu=unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m

ra-lifetime=30m reachable-time=unspecified retransmit-interval=

unspecified

/ipv6 nd prefix default

set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d

/mpls

set dynamic-label-range=16-1048575 propagate-ttl=yes

/mpls interface

set [ find default=yes ] disabled=no interface=all mpls-mtu=1508

/mpls ldp

set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no

lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0

use-explicit-null=no

/port firmware

set directory=firmware ignore-directip-modem=no

/ppp aaa

set accounting=yes interim-update=0s use-radius=no

/queue interface

set ether1 queue=ethernet-default

set ether2 queue=ethernet-default

set ether3 queue=ethernet-default

set ether4 queue=ethernet-default

/radius incoming

set accept=no port=3799

/routing bfd interface

set [ find default=yes ] disabled=no interface=all interval=0.2s min-rx=0.2s

multiplier=5

/routing igmp-proxy

set query-interval=2m5s query-response-interval=10s quick-leave=no

/routing mme

set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m

gateway-selection=no-gateway origination-interval=5s preferred-gateway=

0.0.0.0 timeout=1m ttl=50

/routing pim

set switch-to-spt=yes switch-to-spt-bytes=0 switch-to-spt-interval=1m40s

/routing rip

set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1

metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no

redistribute-connected=no redistribute-ospf=no redistribute-static=no

routing-table=main timeout-timer=3m update-timer=30s

/routing ripng

set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1

metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no

redistribute-connected=no redistribute-ospf=no redistribute-static=no

timeout-timer=3m update-timer=30s

/snmp

set contact=”” enabled=no engine-id=”” location=”” trap-generators=””

trap-target=”” trap-version=1

/system clock

set time-zone-name=manual

/system clock manual

set dst-delta=+00:00 dst-end=”jan/01/1970 00:00:00″ dst-start=

“jan/01/1970 00:00:00” time-zone=+00:00

/system console

set [ find vcno=1 ] channel=0 disabled=no term=linux

set [ find vcno=2 ] channel=0 disabled=no term=linux

set [ find vcno=3 ] channel=0 disabled=no term=linux

set [ find vcno=4 ] channel=0 disabled=no term=linux

set [ find vcno=5 ] channel=0 disabled=no term=linux

set [ find vcno=6 ] channel=0 disabled=no term=linux

set [ find vcno=7 ] channel=0 disabled=no term=linux

set [ find vcno=8 ] channel=0 disabled=no term=linux

/system console screen

set blank-interval=10min line-count=25

/system gps

set channel=0 enabled=no set-system-time=no

/system hardware

set multi-cpu=yes

/system health

set state-after-reboot=enabled

/system identity

set name=MikroTik

/system lcd

set contrast=0 enabled=no port=parallel type=24×4

/system lcd page

set time disabled=yes display-time=5s

set resources disabled=yes display-time=5s

set uptime disabled=yes display-time=5s

set packets disabled=yes display-time=5s

set bits disabled=yes display-time=5s

set version disabled=yes display-time=5s

set identity disabled=yes display-time=5s

set Dialing-Up disabled=yes display-time=5s

set ether4 disabled=yes display-time=5s

set ether3 disabled=yes display-time=5s

set ether2 disabled=yes display-time=5s

set ether1 disabled=yes display-time=5s

/system logging

set 0 action=memory disabled=no prefix=”” topics=info

set 1 action=memory disabled=no prefix=”” topics=error

set 2 action=memory disabled=no prefix=”” topics=warning

set 3 action=echo disabled=no prefix=”” topics=critical

/system note

set note=”” show-at-login=yes

/system ntp client

set enabled=no mode=unicast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0

/system ntp server

set broadcast=no broadcast-addresses=”” enabled=no manycast=yes multicast=no

/system resource irq

set 0 cpu=auto

set 1 cpu=auto

set 2 cpu=auto

set 3 cpu=auto

set 4 cpu=auto

set 5 cpu=auto

set 6 cpu=auto

set 7 cpu=auto

set 8 cpu=auto

/system upgrade mirror

set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=

0.0.0.0 user=””

/system watchdog

set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=

none watchdog-timer=yes

/tool bandwidth-server

set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=

100

/tool e-mail

set address=0.0.0.0 from=<> password=”” port=25 starttls=no user=””

/tool graphing

set page-refresh=300 store-every=5min

/tool mac-server

set [ find default=yes ] disabled=no interface=all

/tool mac-server mac-winbox

set [ find default=yes ] disabled=no interface=all

/tool mac-server ping

set enabled=yes

/tool sms

set allowed-number=”” channel=0 keep-max-sms=0 receive-enabled=no secret=””

/tool sniffer

set file-limit=1000KiB file-name=”” filter-ip-address=”” filter-ip-protocol=

“” filter-mac-address=”” filter-mac-protocol=”” filter-port=””

filter-stream=yes interface=all memory-limit=100KiB memory-scroll=yes

only-headers=no streaming-enabled=no streaming-server=0.0.0.0

/tool traffic-generator

set latency-distribution-scale=10 test-id=0

/tool user-manager customer

add backup-allowed=yes disabled=no login=admin parent=admin password=””

paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no

permissions=owner signup-allowed=no time-zone=-00:00

/user aaa

set accounting=yes default-group=read exclude-groups=”” interim-update=0s

use-radius=no

---

Help me to corret and reconfig it,still cannot acces to host name (ip public) and port my HOME-DVR

[Dimitrios]

We cannot assist with such questions. You should contact Mikrotik support (support@mikrotik.com) and a certified Mikrotik consultant can help you.

We can only help you configure your router to set up a hotspot using a hotspotsystem account, as described in our tutorial(http://hotspotsystem.com/en/hotspot/install_guide_mikrotik.html). We cannot assist you with detailed Mikrotik configurations.

[Anonymous]

thanks for your time…