https://twitter.com/bad_packets/status/1050533001824595968 Was ~275K a few days ago. A forum post is nice but do you have a mail campaign to warn customers of these vulns? I seem to only get emails regarding conferences/training sessions and seldom get emails for software upgrades and the like. Augu...

Maybe this is of interest to XS users:

https://support.apple.com/en-us/HT209084

Jotne, just wanted to post a note of thanks again for Splunk integration and that I successfully upgraded from 1.1 in place without too many hoops to jump through. Added script and scheduled it on MikroTik device and data was visible in Splunk immediately. I had edited some of the accounting scripts...

Thanks. I will look into using vlan-filtering. I also currently have services limited based on network but no fw rules on the wap itself and can only see those services from approved networks. I'm also satisfied with filter rules already in place on rb2011 to prevent access on guest network to LAN a...

Thank you for the reply. But just to be sure I understand, per wiki: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering The main VLAN setting is vlan-filtering which globally controls vlan-awareness and VLAN tag processing in the bridge. If vlan-filtering=no, bridge ignores...

Question about best practice/security recommendations: I have recently setup my first Mikrotik wAP that consists of a LAN ap bridge and guest AP bridge (vap) for both 2.4 and 5ghz. All 4 interfaces are connected to single bridge. wlan1 & 2 share same SSID for LAN with LAN sec profile and wlan3 &...

I'm looking to extend a network to rear of property probably no more than 30 meters using two of these devices, one as bridge and the other as base station. Am I correct in assuming that all that would be required additionally would be to provision one (base station) with license level 4 to use as A...

... DHCP pool information Need SNMP to work ... First, thank you for all the work you have done. All views are working with the exception of DHCP pool info. mikrotik_dhcp_pool_information.sh seems to be calling a script that simply doesn't exist on my MikroTik device: /system script run DHCP-Pool-i...

Auto-negotiation set to enabled. Everything seems to be normal now but I will keep an eye on it.

So everything seems to have taken care of itself. I defaulted the router out and still had issues. Loaded previous config and re-opened a ticket with my ISP but didn't bother to check speeds for a couple days. Consistently now getting ~850-880mbit/sec without much deviation after last two days acros...

Thank you for replies. @pukkita - Yes, the btest on rb2011 itself. I presume this is to be expected? The browser-based speed test never pushes CPU past 75% at current speed results. @toxicfusion I do have rule to drop incoming connections: ... 26 ;;; default configuration - drop unsolicited chain=in...

Did you set up ntopng to use nprobe as collector? nprobe -G --zmq "tcp://*:5556" -i none -n none --collector-port 5900 and in ntopng config set nprobe collector: ... -i=tcp://127.0.0.1:5556 ... I'm unsure of commands of top of my head but in Winbox you need to also set the port (5900 in my...

RB2011UiAS-RM 6.38.5 ether1 = WAN ether2 = MASTER (Cisco SG300-10), 6 virtual ints as gateway for corresponding DHCP scopes ether3 = SLAVE2 (HP ProCurve 1810g) ether4 = SLAVE2 (260GSP) I am seeing this as well since at least 6.37.4 bugfix. I also moved over to current 6.38.5 to see if there was any ...