Mikrotik Tutorials
Most system admins are facing issues on connecting through API to Mikrotik. Mikrotik has done changes in the API Login mechanism.
I’ve updated the old Mikrotik RouterOSAPI library Login function. It allows you to connect all Mikrotik versions.
public function connect($ip, $login, $password)
{
for ($ATTEMPT = 1; $ATTEMPT <= $this->attempts; $ATTEMPT++) {
$this->connected = false;
$PROTOCOL = ($this->ssl ? ‘ssl://’ : ” );
$context = stream_context_create(array(‘ssl’ => array(‘ciphers’ => ‘ADH:ALL’, ‘verify_peer’ => false, ‘verify_peer_name’ => false)));
$this->debug(‘Connection attempt #’ . $ATTEMPT . ‘ to ‘ . $PROTOCOL . $ip . ‘:’ . $this->port . ‘…’);
$this->socket = @stream_socket_client($PROTOCOL . $ip.’:’. $this->port, $this->error_no, $this->error_str, $this->timeout, STREAM_CLIENT_CONNECT,$context);
if ($this->socket) {
socket_set_timeout($this->socket, $this->timeout);
$this->write(‘/login’, false);
$this->write(‘=name=’ . $login, false);
$this->write(‘=password=’ . $password);
$RESPONSE = $this->read(false);
if (isset($RESPONSE[0]) && $RESPONSE[0] == ‘!done’) {
$MATCHES = array();
if (preg_match_all(‘/[^=]+/i’, $RESPONSE[1], $MATCHES)) {
if ($MATCHES[0][0] == ‘ret’ && strlen($MATCHES[0][1]) == 32) {
$this->write(‘/login’, false);
$this->write(‘=name=’ . $login, false);
$this->write(‘=response=00’ . md5(chr(0) . $password . pack(‘H*’, $MATCHES[0][1])));
$RESPONSE = $this->read(false);
if (isset($RESPONSE[0]) && $RESPONSE[0] == ‘!done’) {
$this->connected = true;
break;
}
}
}
$this->connected = true;
break;
}
fclose($this->socket);
}
sleep($this->delay);
}
if ($this->connected) {
$this->debug(‘Connected…’);
} else {
$this->debug(‘Error…’);
}
return $this->connected;
}
public function connect($ip, $login, $password)
{
for ($ATTEMPT = 1; $ATTEMPT <= $this->attempts; $ATTEMPT++) {
$this->connected = false;
$PROTOCOL = ($this->ssl ? ‘ssl://’ : ” );
$context = stream_context_create(array(‘ssl’ => array(‘ciphers’ => ‘ADH:ALL’, ‘verify_peer’ => false, ‘verify_peer_name’ => false)));
$this->debug(‘Connection attempt #’ . $ATTEMPT . ‘ to ‘ . $PROTOCOL . $ip . ‘:’ . $this->port . ‘…’);
$this->socket = @stream_socket_client($PROTOCOL . $ip.’:’. $this->port, $this->error_no, $this->error_str, $this->timeout, STREAM_CLIENT_CONNECT,$context);
if ($this->socket) {
socket_set_timeout($this->socket, $this->timeout);
$this->write(‘/login’);
$RESPONSE = $this->read(false);
if (isset($RESPONSE[0]) && $RESPONSE[0] == ‘!done’) {
$MATCHES = array();
if (preg_match_all(‘/[^=]+/i’, $RESPONSE[1], $MATCHES)) {
if ($MATCHES[0][0] == ‘ret’ && strlen($MATCHES[0][1]) == 32) {
$this->write(‘/login’, false);
$this->write(‘=name=’ . $login, false);
$this->write(‘=response=00’ . md5(chr(0) . $password . pack(‘H*’, $MATCHES[0][1])));
$RESPONSE = $this->read(false);
if (isset($RESPONSE[0]) && $RESPONSE[0] == ‘!done’) {
$this->connected = true;
break;
}
}
}
}
fclose($this->socket);
}
sleep($this->delay);
}if ($this->connected) {
$this->debug(‘Connected…’);
} else {
$this->debug(‘Error…’);
}
return $this->connected;
}
In this tutorial we route youtube.com to other dedicated wan link.
We need to classify the traffic through ROUTE MARKING.
There are following 4 simple steps
Step # 1 “Script”
Lot of people want to do something with connections to Google and YouTube, but they change IP addresses so often and make problems to track. One of the solutions is to dinamically update address lists on your Mikrotik router.
This script create Prefect youtube address-list
:foreach i in=[/ip dns cache find] do={
:local bNew "true";
:local cacheName [/ip dns cache all get $i name] ;
# :put $cacheName;
:if ([:find $cacheName "youtube"] != 0) do={
:local tmpAddress [/ip dns cache get $i address] ;
# :put $tmpAddress;
# if address list is empty do not check
:if ( [/ip firewall address-list find ] = "") do={
:log info ("added entry: $[/ip dns cache get $i name] IP $tmpAddress");
/ip firewall address-list add address=$tmpAddress list=youtube_dns_ips comment=$cacheName;
} else={
:foreach j in=[/ip firewall address-list find ] do={
:if ( [/ip firewall address-list get $j address] = $tmpAddress ) do={
:set bNew "false";
}
}
:if ( $bNew = "true" ) do={
:log info ("added entry: $[/ip dns cache get $i name] IP $tmpAddress");
/ip firewall address-list add address=$tmpAddress list=youtube_dns_ips comment=$cacheName;
}
}
}
}
Step # 2 “Scheduler”
Create a Schedule to update the address-list
/system scheduler add name=youtube start-time=startup interval=0 0:00:20 on-event="/system script run youtube-script"
Step # 3 “Firewall Mangle”
Now we mark route for youtube
/ip firewall mangle add chain=prerouting protocol=tcp dst-port=80 dst-address-list=youtube_dns_ips action=mark-routing new-routing-mark=youtube_route passthrough=yes
Step # 4 “Route”
Now Add Route For youtube.
/ip route add comment=”Youtube Route Traffic admsln.team@gmail.com" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=197.1.1.2 routing-mark=youtube_route scope=255 target-scope=10
/queue simple name=”Day” target-addresses=197.1.1.0/24 dst-address=0.0.0.0/0 interface=ether2 parent=none direction=both priority=8 queue=default-small/default-small limit-at=256k/256k max-limit=256k/256k total-queue=default-small name=”Night” target-addresses=197.1.1.0/24 dst-address=0.0.0.0/0 interface=ether2 parent=none direction=both priority=8 queue=default-small/default-small limit-at=512k/512k max-limit=512k/512k total-queue=default-small /system scheduler #name=”Day” on-event=Day policy=read,write start-date=jun/11/2011 start-time=17:45:29 interval=1d #name=”Night” on-event=Night policy=read,write start-date=jun/11/2011 start-time=17:50:29 interval=1d
If you want to provide PING / ICMP high priority so you wont get any high delay in ping reply Use the following Code.
/ip firewall mangle add chain=prerouting protocol=icmp action=mark-connection new-connection-mark=icmp-con passthrough=yes comment="" disabled=no add chain=prerouting protocol=icmp connection-mark=icmp-con action=mark-packet new-packet-mark=icmp-pkt passthrough=no comment="" disabled=no /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1024k max-limit=2048k name=Hi-Prio-to-icmp-aacable packet-mark=icmp-pkt parent=global-in priority=1 queue=default
Admins Line 