MikroTik

wispmikrotik

Hi,

Total disaster:

All current versions affected :(

long term: v6.47.9
stable: v6.48.1
testing: v6.49beta11
development: v7.1beta4

Regards.

wispmikrotik

Hi,

SUP-43694

Confirmed a new bug in OSPF NSSA convert LSA type 7 to type 5:

viewtopic.php?f=14&t=173212&p=847007#p847007

Regards,

wispmikrotik

Hi,

Confirmed is a BUG

v6.46 - OK

v6.48.1 and v6.49beta11 not working

Regards

wispmikrotik

Hi, Thanks for the answers, yes, I have a ticket open to mikrotik for 7 days without an answer. Regarding the topology, I was testing ospf in mikrotik, as for the network is not correct, why? This same network you change R2 for a cisco, vyos, junos and it works perfectly, it is broken in translate-r...

wispmikrotik

Hi, Following RFC 1587 "4.1 Translating Type-7 LSAs Into Type-5 LSAs", and according to mikrotik's own documentation "https://help.mikrotik.com/docs/display/ROS/OSPF+Case+Studies+and+Solutions" Section LSA Types: "type 7 - type 7 LSAs are used to tell the ABRs about these ex...

wispmikrotik

Hi,

Good,

I use this provider and I have no problem. On its website it explains how to configure the service.

Check if I loaded the certificate, check the username / password.

Contact support.

Regards.

wispmikrotik

Hi,

Error, sorry.

Regards.

wispmikrotik

Hi, https://i.imgur.com/p1kPePk.jpg R1 (mikrotik CE1) => PE1 (cisco) => VRF100 R2 (mikrotik CE2) => PE1 (cisco) => VRF200 R1: LAN 10.4.4.0/24 R2: LAN 10.3.3.0/24 R1 is intended to know R1's LAN 10.3.3.0/24, with cisco it works with mikrotik no. 1) PE CISCO: I am going to give you the example with th...

wispmikrotik

Hi,

RADIUS Disconnect-Request messages supported for IPsec.

RFC 3576
40 - Disconnect-Request [RFC2882]
41 - Disconnect-ACK [RFC2882]
42 - Disconnect-NAK [RFC2882]
43 - CoA-Request [RFC2882]
44 - CoA-ACK [RFC2882]
45 - CoA-NAK [RFC2882]

Regards,

wispmikrotik

Description
Device: mAPLite
Version: v7.0beta4
Issue: OpenVPN with UDP not working.

UDP does not work properly, you can connect, but you do not browse, and it disconnects only within a few seconds.

wispmikrotik

Solved:

viewtopic.php?f=14&t=154057

wispmikrotik

You need to send more than the username. I believe the IP as well. What if their are two users with the same username logged in Hi, Thanks for answering. Not that, mikrotik support @Emils told me, that at the moment ipsec ikev2 eap radius, does not support disconnection method, they will look to im...

wispmikrotik

Hi,

Support #SUP-1932

Waiting ...

Regards.

wispmikrotik

nobody?

wispmikrotik

Hi, Right now I have configured freeradius as a radius server, and mikrotik IKEv2 + eap radius. The problem is when disconnecting users, skip error 503: root@sv10-lab:/home# echo user-name=mk10 | radclient -x 2.2.2.2:3799 disconnect nas1234 Sending Disconnect-Request of id 252 to 2.2.2.2 port 3799 U...

wispmikrotik

Hi, I have a mikrotik router with ppp (openvpn, pptp, sstp, l2tp + ipsec) + DMARadius, working correctly. If the user expires, the radius disconnects him through the UDP / 1700 port correctly. Now we have implemented IKEv2 (eap radius) + DMARadius but it does not disconnect users: Error 503 mikrotik...

wispmikrotik

When using a wildcard than add also the bare domain to the SAN. Maybe that solves it.

It works!! Thank you very much!!

wispmikrotik

IPsec IKEv2 configuration for multiple servers with a single CA root certificate? 1.1 - WIKI: * Common name should contain IP or DNS name of the server; It is possible to use an example DNS: "*.domain.com" that includes server1.domain.com and server2.domain.com? * SAN (subject alternative ...

wispmikrotik

HW: mAP Lite ROS: 7.0beta3 OpenVPN UDP: The connection to the server occurs, but it is not navigated through the VPN. Configuration: [admin@rt01_v7] > /export hide-sensitive # oct/24/2019 09:40:35 by RouterOS 7.0beta3 # software id = # # model = RouterBOARD mAP L-2nD # serial number = 73B207163703 /...

wispmikrotik

Hi, Log: Jan/01/2002 03:21:06 wireless,debug wlan1: must select network Jan/01/2002 03:21:06 wireless,debug D8:68:C3:44:3F:89: on 2462 AP: yes SSID TocToc caps 0x411 rates 0xCCK:1-11 OFDM:6-54 BW:1x SGI:1x HT:0-7 basic 0xCCK:1-11 MT: no Jan/01/2002 03:21:06 wireless,debug 80:29:94:F4:8A:7C: on 2437 ...

wispmikrotik

Version number; : ROS 7.0beta3 Router's model; : mAP Lite Not working wireless, It disconnects constantly. There is no parameter that stabilizes the connection. @MikroTik] > /system/resource/pr uptime: 36m4s version: 7.0beta3 (development) build-time: Oct/22/2019 09:34:17 factory-software: 6.36 free...

wispmikrotik

Hi, all! I can confirm, that 5ghz band does not work on RouterBOARD M33G with Athereros 5008 pci-e card installed. Also upgrade of any of my mipsbe (mAP 2n,mAP L-2nD) platform fails, because ipv6 package is broken. ----------------- Mar/23/2019 10:54:24 system,error broken package system-6.45beta19...

wispmikrotik

Hi,

The file system in mikrotik does not allow creating folders from the console.
To create folders you must do it from SMB and then make folders from your Windows Explorer.

Regards.

wispmikrotik

I am not familiar with 1.1.1.1 is that a legitimate DNS server?? Overall your setup is missing so many things and most of all any firewall rules. I suggest you download the latest stable firmware 6.43.8 and reset to defaults. For example missing an IP pool missing a DHCP-SERVER NEWORK no firewall f...

wispmikrotik

Please post your config /export hide=sensitive file=mylatestconfig It will help determine how your DNS and firewall rules are setup. We may also want to consider redirect NAT rules for DNS. Hi anav, Thanks. export: # jan/18/2019 20:37:41 by RouterOS 6.44beta54 # software id = 06GQ-R3YM # /interface...

wispmikrotik

Hi, I am seeing in my mikrotik router some connection to dns "k3yhol3.ddns.net", this dns has the IP 0.0.0.0. Linux (nslookup): Non-authoritative answer: Name: k3yhol3.ddns.net Address: 0.0.0.0 ping web: https://i.imgur.com/Cegqrsk.png What's up with this domain? I do not understand anythi...

wispmikrotik

Hi, In the official mikrotik wiki, talk about this rule: /ip firewall mangle add out-interface=pppoe-out protocol=tcp tcp-flags=syn action=change-mss new-mss=1300 chain=forward tcp-mss=1301-65535 https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle#Change_MSS 1-) Where do these values come from ...

wispmikrotik

Damn! Haven't touched this topic for a while, but FINALLY someone came up with a working OpenVPN implementation! Finally, 2018, some hope for Mikrotik! SaferVPN.com https://support.safervpn.com/hc/en-us/articles/115004435985-Setup-OpenVPN-manually-on-Mikrotik-Router Another provider that has suppor...

wispmikrotik

just to know, do you know an approximate release date? I would not wait all 2019 ...

Maybe @normis can say a date, will it be before 2020?

wispmikrotik

2019?
Router OS v7 is never going to happen.

Well ... so let's get routeros v8.0.0 ...

wispmikrotik

2019?

wispmikrotik

The software bug is the cause of the issue described here. This software bugfix should be enough to reevaluate the above decision, but that's for the legal deparment to sort out. I can only say, that this is an ongoing matter and MikroTik continues the work to fully resolve this.

Thanks.

wispmikrotik

Nobody from mikrotik gives the face?
@normis

wispmikrotik

@normis
???

wispmikrotik

Not yet, but soon

Do you know anything about the "soon"?

I say it to know if to continue investing money in mikrotik or move to another brand ..

Regards.

wispmikrotik

Looks to me like host configuration problem. I can see from CHR all other CHRs and other devices in neighbor list, Winbox discovers all CHRs with no problems: [admin@MikroTik] /ip neighbor> print # INTERFACE ADDRESS MAC-ADDRESS IDENTITY VERSION 0 ether1 2.2.2.2 08:00:27:8B:66:7F MikroTik 7.0beta......

wispmikrotik

I bought a Mikrotik router to have an all-round router that is very configurable and extensible. Unfortunately, I quickly reached its limits. I tried to secure my internet traffic via the microtic router with a VPN provider. I have set up trial accounts with several VPN providers such as NordVPN, E...

wispmikrotik

I bought a Mikrotik router to have an all-round router that is very configurable and extensible. Unfortunately, I quickly reached its limits. I tried to secure my internet traffic via the microtic router with a VPN provider. I have set up trial accounts with several VPN providers such as NordVPN, E...

wispmikrotik

Good, I expose my problem together with a network scheme. I have a CCR1009, in the ether7 port I have a hotspot configured, at the other end there is an AP WIFI. The hotspot is limited to one user per mac. The problem is that the mikrotik CCR1009 detects the MAC of the AP (FF) and the users connecte...

wispmikrotik

When the tool gets your password, it has full access and installs some kind of tools. That is kind of strange, because when I know the password of my router I still cannot install that kind of tools! So there are multiple faults here. On MT specific hardware and using WINBOX -- winbox -- gains root...

wispmikrotik

We have discovered a new RouterOS vulnerability affecting all RouterOS versions since v6.29. How it works : The vulnerability allowed a special tool to connect to the Winbox port, and request the system user database file. Versions affected : 6.29 to 6.43rc3 (included). Updated versions in all rele...

wispmikrotik

1.Set user name and password with combination with cyrillic alphabet after that remoove or disable user - admin ! 2.Change the port numbers for ssh , winbox etc. 3.Set strog crypto for ssh 4.Set ACL 5.Set 3 attempts login to black list and deny attempts with RAW 6,Disable all other non-useable serv...

wispmikrotik

just to stop the attackers, create a whitelist IP address for example call Support and the the raw firewall /ip firewall raw add action=drop chain=prerouting dst-port=22,80,8291 log=yes protocol=tcp src-address-list=!Support Hello, I had configured that at 3 attempts d access blocked the ip, but ha...

wispmikrotik

I have already notified the mikrotik support, I could not send the support file because the router is blocked.
@normis, mikrotik team can you check this immediately?
this is very serious.

wispmikrotik

Hello everyone, The same thing happened to me today. https://i.imgur.com/qhhClKy.png What's happening mikrotik team? Any security problem not notified? bug or backdoor? AS131149 103.1.220.0/23 LJ Hosting Co., LTD IP Address 103.1.221.29 Hostname 103-1-221-29.static.ip.net.tw Name Servers a.g-dns.com...

wispmikrotik

To tell the truth, I'm little lost in the description in first post. You have jump in prerouting and target chain has only one rule with action=passthrough, so it basically does nothing, only increases counter for passthrough rule, reaches end of chain and returns to prerouting, where it continues ...

wispmikrotik

It is not assumed that the action=passthrough should to be " if packet is matched by the rule, increase counter and go to next rule" And action=accept stops processing and does not go to next rule , so that's major difference. Hi, Of course, that's what I do not want, that does not pass t...

wispmikrotik

Hello, What's your question and what are you trying to achieve? Ad you said, passthrough is only for accounting, nothing more. Regards Envoyé de mon LG-H812 en utilisant Tapatalk Hi, I need that when you get from rule 0 and make the jump and go to rule 2 action=passthrough follow the following rule...

wispmikrotik

Hi, I have the following problem with the mangle and the action=passthrough , I am routing all the traffic through the VPN, but with a JUMP rule I avoid using the VPN to get to the WEB Server. I put the network scheme: https://i.imgur.com/MVbPZwk.png - Config RB850gx2: [rtc@wispmikrotik] /ip firewal...

wispmikrotik

Hi,

I have a few units of these and they work perfectly. As the partner says, can it be your defective unit?

Regards.

wispmikrotik

Hi, Greetings to all, I wanted to know what is the ambient temperature and the normal CPU temperature on this board, and above all at what time should I worry about the high temperature? [xxx@wispmikrotik] system health print voltage: 23.7V temperature: 57C cpu-temperature: 64C Regards.

wispmikrotik

https://i.imgur.com/Czgv7bd.png Hi, I am trying to configure a public ip from a VPS to my office router. Redirect the traffic of an IP Public X.X.86.175 through a VPN to the mikrotik of my office without success. VPS: IP Public: X.X.86.175 IP VPN to Office: 10.8.8.1 Office: IP VPN to VPS: 10.8.8.2 ...

wispmikrotik

Setup new CHR install and get it connected to your Mikrotik account. Log into Mikrotik account and click on CHR licenses. Find desired license and click transfer. Transfer to system ID has a drop down box that lists all applicable ID's on your account. You should see your new ID from the new instal...

wispmikrotik

Good,

I have a VPS server running a router mikrotik CHR, after fault in the server, have decided to change hardware, so I lost the license.

Is it possible to transfer the license to the new server?

Regards.

wispmikrotik

why mikrotik shows the total traffic in bytes?
in the traffic tab of the Ethernet interface 1, the total tx / rx bytes. It means that the brand is 60Gbytes is equal to 480 gbits?

the total actual traffic measured in bits would be that? 480Gbits?

Regards.

wispmikrotik

Good, I wanted to ask if it is possible to make a link of 11.5km with the following equipment: 1 -) Metal 52SHPacn + RF-Elements Direct 21-5G https: //www.landashop.com/wrl-rf-d215.html 2 -) LHG 5ND Se I'm not going to use a protocol AC but I do not care. OK, easy to calculate: 9dBm from Metal + 21...

wispmikrotik

What is your allowed EIRP?

1W maximum

wispmikrotik

What are your Needs for this Links?

With 10 mb is enough, the question is whether the link can be made. Bandwidth is not a problem.

wispmikrotik

40 clients is quite a lot.
Why are you looking for the smallest/cheapest possible device with small antennas and targeted as personal AP?
What is the area of your clients? One big room? One floor? Several buildings?

Thanks, discarded the mAP Lite, I will use a more powerful model.

wispmikrotik

Good, I wanted to ask if it is possible to make a link of 11.5km with the following equipment: 1 -) Metal 52SHPacn + RF-Elements Direct 21-5G https: //www.landashop.com/wrl-rf-d215.html 2 -) LHG 5ND Se I'm not going to use a protocol AC but I do not care. And on the same link connect 1 km: 1 -) Meta...

wispmikrotik

Thanks @pukkita

wispmikrotik

Good, I currently have five bank branches routed with five rb850gx2, I have come up with the need to implement a small pbx (asterisk), with five sip extensions and two simultaneous calls, and I thought I could do it with metarouter, but ohhh I find that ppc multicore does not support Metarouter. I r...

wispmikrotik

Good morning everyone, I bring a question about the mANT 19S product: 1 -) I have a FTTH of 150Mb / 150Mb: - The bandwidth limit and QoS is performed on an rb3011 with PCQ + Adress-List 2 -) Bandwidth calculations for 80 clients: Group A: 70 users, 80% CIR, 3 overbooking, 6Mb per user: ABw = { CIR /...

wispmikrotik

Good morning everyone, I bring a question about the mAP Lite product: 1 -) I have a FTTH of 50Mb / 50Mb: - The bandwidth limit and QoS is performed on an rb3011 with PCQ + Adress-List 2 -) Bandwidth calculations for 40 clients: Group A: 30 users, 80% CIR, 3 overbooking, 3Mb per user: ABw = { CIR / o...

wispmikrotik

Is router has a default configuration? Are there default firewall rules? What mode Quick set is imposed? AP, Wisp? He should not get hot No. It is configured accordingly, no default configuration or fast configuration. Optimized in packages, in configuration, does not exceed 1% of CPU and is burnin...

wispmikrotik

Or is the usb just to power the router?
It is just for power.

//A

Thanks

wispmikrotik

You don't have to remove the magnets. The previous poster referenced an old issue in the first production batch where the magnet could cause ethernet packet loss when attached to a ferrous surface. It only affected a few units, and has been fixed a long time ago. The usb can be used for a 3G dongle...

wispmikrotik

i'm using a couple of them and i'm not complaining. very good product. You don't need to power through both ports. only one is enough. also check this thread : https://forum.mikrotik.com/viewtopic.php?t=104540 I removed the magnets of mine. Then it is solved by removing the magnets? Then what kind ...

wispmikrotik

CPU frequency is not at default setting? How do you power them? Poslano z mojega X1030X z uporabo Tapatalk The CPU frequency is factory default. They are connected both by POE and by usb that the routerboard brings. With both it gets too hot. I have also noticed that it costs a lot to upload youtub...

wispmikrotik

Good morning everyone, I just purchased 2 mAP Lite ( https://mikrotik.com/product/RBmAPL-2nD ) for two rooms in a small hotel. http://i.imgur.com/W74HjFP.jpg The "problem" is that the small routerboard is very very hot , I understand: - That this is normal because of its small size? - Affe...

wispmikrotik

Good to all, First of all, excuse my language. I have some doubts about the mangle in routerOS v6. I have a WAN interface ether1 (ftth 120/10) and 3 LAN interfaces (ether2, vlan 10 and vlan 11). I am trying to configure a QoS system in version 6 + HTB, the problem I encounter is when using the globa...

Search found 71 matches