Community discussions

MikroTik App

Search found 172 matches

by wispmikrotik
Thu Mar 28, 2024 9:38 am
Forum: Forwarding Protocols
Topic: VRF Route Leaking between VRF network and Main [SOLVED]
Replies: 16
Views: 965

Re: VRF Route Leaking between VRF network and Main [SOLVED]

Hi,

How do I solve it? Can you add the configuration you are working on?

Regards,
by wispmikrotik
Thu Mar 21, 2024 10:43 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 471
Views: 107241

Re: v7.15beta [testing] is released!

... is necessary to have QCA9984 which is only for RB4011iGS+5HacQ2HnD-IN ...
... and for RBD25G-5HPacQD2HPnD (Audience). Admittedly Audience has flash larger than 16MB as well.
He is right, I didn't see him.

Thank you.
by wispmikrotik
Thu Mar 21, 2024 9:48 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 471
Views: 107241

Re: v7.15beta [testing] is released!

Hi, Mikrotik L009 port 1 of the switch disappears, adding the port on a bridge makes it have no HW. [tuPrima@core01_plzva01] > /interface/ethernet/switch/port/print Flags: R - RUNNING Columns: NAME, SWITCH # NAME SWITCH 0 ether2 switch1 1 ether3 switch1 2 ether4 switch1 3 R ether5 switch1 4 R ether6...
by wispmikrotik
Fri Mar 15, 2024 10:27 am
Forum: General
Topic: VPN IKEv2 MacOS - Disconnect after 24 minutes
Replies: 5
Views: 444

Re: VPN IKEv2 MacOS - Disconnect after 24 minutes

Hi, What version is it? Sonoma or Ventura? If it is Sonoma, Apple decided at some point without "warning" to start establishing the PFS and when the rekey occurs it does not match its policy (DH2048) and drops the connection. I installed a profile from appleconfigurator according to my con...
by wispmikrotik
Wed Mar 13, 2024 9:37 pm
Forum: General
Topic: L009 boot up problem
Replies: 4
Views: 1719

Re: L009 boot up problem

Hi,

Have they opened a support ticket for mikrotik?

https://help.mikrotik.com/servicedesk/s ... on=portals

Regards,
by wispmikrotik
Tue Mar 05, 2024 11:15 am
Forum: General
Topic: VRF Bug in v7.14
Replies: 3
Views: 607

Re: VRF Bug in v7.14

Hi,

BUG reported in several threads, including in the launch thread, mikrotik support indicated that it is recognized and they will work on it.

Regards,
by wispmikrotik
Fri Mar 01, 2024 1:43 pm
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 555
Views: 125789

Re: v7.14 [stable] is released!

RouterOS version 7.14 have been released in the "v7 stable" channel!

What's new in 7.14 (2024-Feb-29 09:10):

Some kind of mechanism to import/export routes from one vrf to another within same router --> Thanks!
by wispmikrotik
Tue Feb 27, 2024 5:36 pm
Forum: General
Topic: [Discussion] MikroTik configuration abstraction complexity
Replies: 72
Views: 5393

Re: [Discussion] MikroTik configuration abstraction complexity

Hi, For those who are interested, since the issue of including the WAN port in the same bridge is discussed (although I don't know if it is in this topic). Ask support about vlan configuration on L009 and RB5009: Both the RB5009 and L009 block diagram shows that the SFP port plugs directly into the ...
by wispmikrotik
Tue Feb 13, 2024 7:49 pm
Forum: RouterBOARD hardware
Topic: L009UiGS-2HaxD hardware accelerated IPsec?
Replies: 5
Views: 3508

Re: L009UiGS-2HaxD hardware accelerated IPsec?

Hi,

@Normis, Do we have progress? When can we see IPsec hardware acceleration for the L009?

Thanks,
by wispmikrotik
Thu Jan 04, 2024 2:38 pm
Forum: Forwarding Protocols
Topic: ipsec Preformance
Replies: 2
Views: 1284

Re: ipsec Preformance

Hi,

As they already told you, you should look at other manufacturers (cisco, juniper for example).

Regards,
by wispmikrotik
Wed Dec 20, 2023 5:31 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 153692

Re: v7.14beta [testing] is released!

*) system - expose "lo" interface;
Nice

Image

Regards,
by wispmikrotik
Fri Dec 08, 2023 1:19 pm
Forum: Wireless Networking
Topic: Mikrotik is blocking few sites
Replies: 8
Views: 2316

Re: Mikrotik is blocking few sites

Hi,

There is talk of adjusting the TCP MSS to avoid some path with the PMTUD broken (possible icmpv4 block).

MSS != MTU.

Leave the MTU on the ethernet interface = 1500.

Regards,
by wispmikrotik
Wed Nov 29, 2023 1:52 pm
Forum: General
Topic: IPsec tunnel stablished but no traffic [SOLVED]
Replies: 3
Views: 1511

Re: IPsec tunnel stablished but no traffic [SOLVED]

Hi, What position is that src NAT rule in? Do you have fasttrack? To help you, can you show us the following command? /export hide-sensitive As Sindy always indicates: between [ code ] and [ /code ] tags, after removing any additional sensitive information not suppressed by hide-sensitive (public ad...
by wispmikrotik
Mon Nov 27, 2023 9:06 am
Forum: Virtualization
Topic: CHR on GGCP slow download
Replies: 6
Views: 5071

Re: CHR on GGCP slow download

Hi,

Same issue ....

Regards,
by wispmikrotik
Mon Nov 27, 2023 8:42 am
Forum: RouterBOARD hardware
Topic: RB750GR3 worth to cahnge to RB3011UiAS-RM
Replies: 5
Views: 2288

Re: RB750GR3 worth to cahnge to RB3011UiAS-RM

When I setup all my settings on my RB750GR3 and started speedtest it have 80-90% CPU usage on 300Mbps.
Hi,

Review the following information:

https://help.mikrotik.com/docs/display/ ... -FastTrack

Regards,
by wispmikrotik
Tue Nov 21, 2023 11:13 am
Forum: General
Topic: hEX S high CPU load, ether switch shuts down
Replies: 3
Views: 1039

Re: hEX S high CPU load, ether switch shuts down

Hi, I attach temperatures of some of my hex s managed and without any problem in years: Routerboard: routerboard: yes board-name: hEX S model: RB760iGS Temp CPU: 0 voltage 23.8 V 1 temperature 57 C Temp SFP: sfp-temperature: 70C sfp-supply-voltage: 3.265V sfp-tx-bias-current: 15mA sfp-tx-power: -6.4...
by wispmikrotik
Fri Nov 10, 2023 6:42 pm
Forum: General
Topic: Power consumption L009UiGS-RM
Replies: 3
Views: 719

Re: Power consumption L009UiGS-RM

Hi, No no, his is because of stupid customer requirements... I have no possibility now to try it for myself (2 weeks of stock with my supplier). - We request the consumption of the router in "empty" only on. - It asks us for the routing consumption with the 8 fully linked 1Gb Ethernet port...
by wispmikrotik
Fri Nov 10, 2023 6:22 pm
Forum: General
Topic: Power consumption L009UiGS-RM
Replies: 3
Views: 719

Re: Power consumption L009UiGS-RM

Hi,

Any charitable users with an L009 that can measure consumption? :(

Thank you so much.
Regards,
by wispmikrotik
Thu Nov 09, 2023 2:08 pm
Forum: General
Topic: Power consumption L009UiGS-RM
Replies: 3
Views: 719

Power consumption L009UiGS-RM

Hi, I know that the "official data" is found on the mikrotik description page, but the question is for users who already have said device to know in a real environment what power consumption it has in real life. Someone?, Power consumption: - with usb? - with SFP? - How many 1Gb Ethernet p...
by wispmikrotik
Wed Nov 08, 2023 12:01 pm
Forum: General
Topic: IPsec Dead Peer Detection Best Practice
Replies: 7
Views: 13238

Re: IPsec Dead Peer Detection Best Practice

Normal ;)

It has already rained a lot since then.

Thanks for answering!
by wispmikrotik
Wed Nov 08, 2023 10:17 am
Forum: General
Topic: IPsec Dead Peer Detection Best Practice
Replies: 7
Views: 13238

Re: IPsec Dead Peer Detection Best Practice

I normally use 30 seconds and 3 failures for fast response. I think indeed it may be fatal when the DPD interval * retries at one side is smaller than the DPD interval at the other side, but I am not sure. I am investigating a problem where one user cannot maintain the connection and is reported as...
by wispmikrotik
Tue Oct 10, 2023 12:48 pm
Forum: General
Topic: RouterOS
Replies: 1
Views: 515

Re: RouterOS

Hi, RouterOS (https://help.mikrotik.com/docs/display/ROS/RouterOS): RouterOS is a network operating system based on the Linux kernel, pre-installed on RouterBOARD devices. It can also be installed on a PC, turning it into a router with a firewall, VPN server and client, and wireless access point. Th...
by wispmikrotik
Wed Sep 06, 2023 12:58 pm
Forum: Announcements
Topic: Newsletter #113 | May 2023
Replies: 103
Views: 42903

Re: Newsletter #113 | May 2023

@normis No newsetter?
by wispmikrotik
Mon Aug 28, 2023 3:39 pm
Forum: Beginner Basics
Topic: RB750GR limiting download a 400mp
Replies: 4
Views: 1404

Re: RB750GR limiting download a 400mp

Hi,

Please read this article carefully, it may be useful to you.

https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

Regards,
by wispmikrotik
Wed Aug 23, 2023 3:00 pm
Forum: General
Topic: Slow TCP/UDP since 7.11 update on RB760iGS
Replies: 9
Views: 1535

Re: Slow TCP/UDP since 7.11 update on RB760iGS

Hi,

Did you read the release thread for the version? viewtopic.php?t=198641

Regards,
by wispmikrotik
Mon Aug 21, 2023 3:56 pm
Forum: RouterBOARD hardware
Topic: All interfaces shutdown randomly
Replies: 5
Views: 3744

Re: All interfaces shutdown randomly

Hello,

I had similar problems (now under observation) with the same version 7.10.2 on a hAP ax lite.

Currently on version 7.11 with no crashes in 3 days.

Image

Regards,
by wispmikrotik
Tue Jul 25, 2023 4:36 pm
Forum: General
Topic: GPON Fiber & MikroTik Router with SFP Module
Replies: 3
Views: 1033

Re: GPON Fiber & MikroTik Router with SFP Module

Hi,

What do you intend to achieve?

Remove the router and ONT from the ISP and directly connect the fiber to the mikrotik?

If so, I'm sorry to tell you that that SFP module is useless for this. You need a SFP GPON ONT.

Regards,
by wispmikrotik
Mon Jul 17, 2023 10:27 pm
Forum: General
Topic: Migrating routes when a central node goes down
Replies: 15
Views: 908

Re: Migrating routes when a central node goes down

Hi,

Of course. RIPv2 is the routing protocol for "small networks".

It's not as scalable as BGP or OSPF and its convergence times aren't as good, but it will work in your scenario.

Regards,
by wispmikrotik
Mon Jul 17, 2023 3:48 pm
Forum: General
Topic: Migrating routes when a central node goes down
Replies: 15
Views: 908

Re: Migrating routes when a central node goes down

Hi, For such a simple scenario, you could, as indicated, prioritize with static routes and better AD. If you want to use routing protocols, see scheme: https://i.imgur.com/ZXsAYUw.png Each office will receive the routes from the other locations via OSPF or BGP. To prioritize the routes of the primar...
by wispmikrotik
Mon Jul 17, 2023 12:51 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 971

Re: help!!! received a warning that the authorization is invalid

I removed unnecessary report but you answered in the meantime so I leave your comment to nonexisting post. Hello @BartoszP, Thank you, as indicated, I think Normis and I wrote practically at the same time, if you see that my comments do not contribute anything (they do not) you can delete it :). Th...
by wispmikrotik
Mon Jul 17, 2023 12:41 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 971

Re: help!!! received a warning that the authorization is invalid

Hi, Contact support (I think you already did) regarding any key related issues. forum members can't help you . Regards, Why SPAM ? What does your post add that @Normis didn't already write??? To be honest, I didn't see Normis's, if you notice we wrote almost at the same time. What doesn't contribut...
by wispmikrotik
Mon Jul 17, 2023 12:30 pm
Forum: General
Topic: Migrating routes when a central node goes down
Replies: 15
Views: 908

Re: Migrating routes when a central node goes down

Hi,

Do you have a network design?

Will the second central (backup) node be on LAN with the primary central node?

Regards,
by wispmikrotik
Mon Jul 17, 2023 12:13 pm
Forum: General
Topic: help!!! received a warning that the authorization is invalid
Replies: 10
Views: 971

Re: help!!! received a warning that the authorization is invalid

Hi,

Contact support (I think you already did) regarding any key related issues. forum members can't help you .

Regards,
by wispmikrotik
Tue Jun 27, 2023 5:00 pm
Forum: Virtualization
Topic: Renew License Filter Rules [SOLVED]
Replies: 3
Views: 2548

Re: Renew License Filter Rules [SOLVED]

Hi,
/ip firewall address-list add list="License_Mikrotik" address=license.mikrotik.com

/ip firewall filter add action=accept src-address-list=License_Mikrotik chain=input

Move that rule, before the last one (drop all).

Regards,
by wispmikrotik
Tue Jun 27, 2023 4:26 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 106938

Re: v7.11beta [testing] is released!

In this case, it's against a VPN provider (surfshark in this case), which I don't know will use on your side.
by wispmikrotik
Tue Jun 27, 2023 4:13 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 106938

Re: v7.11beta [testing] is released!

Hi, So we're in the same problem, it seems (SUP-120165). I am experiencing disconnections every 30 minutes, which matches the "Lifetime" of phase 2 (proposal) even though I have "PFS Pool" set to none. In previous versions I did not notice this behavior. IPsec-SA expired before c...
by wispmikrotik
Tue Jun 27, 2023 4:02 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 106938

Re: v7.11beta [testing] is released!

IKE2 is broken since 7.10, can't get site to site working properly. Created SUP-117869 two months ago but issue still persists.
Hi,

What happens to him? What is your setup?

Regards,
by wispmikrotik
Thu Jun 22, 2023 5:53 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 106938

Re: v7.11beta [testing] is released!


What's new in 7.11beta2 (2023-Jun-21 14:39):

*) netwatch - added "src-address" property;

Thanks!!!!!! Finally, no more mangle rules for doing this.
by wispmikrotik
Tue Jun 20, 2023 2:06 pm
Forum: Announcements
Topic: v7.10, 7.10.1 and more [stable] are released!
Replies: 366
Views: 130353

Re: v7.10 [stable] is released!

https://forum.mikrotik.com/viewtopic.php?t=196170 We have introduced several improvements regarding the AX stability. It is still a work in progress, but in order to gather more feedback as soon as possible, here is a link to the latest alpha version that contains these fixes. The fixes are mainly t...
by wispmikrotik
Wed Jun 14, 2023 9:22 pm
Forum: Announcements
Topic: v7.10rc is released!
Replies: 183
Views: 53771

Re: v7.10rc is released!

Hi,

What is the change here?
What's new in 7.10rc6 (2023-Jun-13 10:52):

!) route - added BFD;

What's new in 7.10rc3 (2023-Jun-02 09:43):

!) route - added BFD;
Regards,
by wispmikrotik
Tue May 23, 2023 2:43 pm
Forum: RouterOS beta
Topic: v7 and BFD, any ETA?
Replies: 149
Views: 27694

Re: v7 and BFD, any ETA?

viewtopic.php?p=1003732#p1003732

!) route - added BFD (CLI only);
by wispmikrotik
Tue May 23, 2023 2:07 pm
Forum: Announcements
Topic: v7.10beta [testing] is released!
Replies: 249
Views: 52852

Re: v7.10beta [testing] is released!

Thank you very much mikrotik!
by wispmikrotik
Wed Apr 19, 2023 1:20 pm
Forum: General
Topic: Understand ipsec tests [SOLVED]
Replies: 6
Views: 1008

Re: Understand ipsec tests [SOLVED]

Thank you so much @mkx

Resolved. Everything else contributes nothing.
by wispmikrotik
Wed Apr 19, 2023 12:41 pm
Forum: General
Topic: Understand ipsec tests [SOLVED]
Replies: 6
Views: 1008

Re: Understand ipsec tests [SOLVED]

??
????
by wispmikrotik
Tue Apr 18, 2023 10:20 pm
Forum: General
Topic: Understand ipsec tests [SOLVED]
Replies: 6
Views: 1008

Understand ipsec tests [SOLVED]

Hi, On the page of each product, in the section "IPsec test results" https://mikrotik.com/product/RB750Gr3#fndtn-testresults What does the mode column mean? Mode - Single tunnel - This is a site to site tunnel, a tunnel or is it referring to SHA1?. Mode - 256 tunnels - Is this 256 tunnels ...
by wispmikrotik
Mon Apr 17, 2023 11:59 am
Forum: General
Topic: RB4011 + ZTE F6005 GPON not link at 2.5Gbps
Replies: 6
Views: 1375

Re: RB4011 + ZTE F6005 GPON not link at 2.5Gbps

Hi,

Did you check the features of the router before buying it?

https://mikrotik.com/product/rb4011igs_rm

There is no 2.5Gb port. Ether1 is 10/100/1000 (like the rest of the ports except SFP+).

Regards,
by wispmikrotik
Sun Apr 02, 2023 10:34 am
Forum: General
Topic: Internet speed cut in half after Hex, direct to modem gets full
Replies: 27
Views: 1865

Re: Internet speed cut in half after Hex, direct to modem gets full

And see what really applies?

With your ISP's modem do you really get the speed?
by wispmikrotik
Sun Apr 02, 2023 8:24 am
Forum: General
Topic: Internet speed cut in half after Hex, direct to modem gets full
Replies: 27
Views: 1865

Re: Internet speed cut in half after Hex, direct to modem gets full

Hi,

What is the contracted speed with your ISP?

Export settings and share:

/export hide-sensitive

Regards,
by wispmikrotik
Thu Mar 30, 2023 2:37 pm
Forum: Announcements
Topic: v7.9beta [testing] is released!
Replies: 118
Views: 26390

Re: v7.9beta [testing] is released!

Sorry :(

Thanks!
by wispmikrotik
Thu Mar 30, 2023 2:33 pm
Forum: Announcements
Topic: v7.9beta [testing] is released!
Replies: 118
Views: 26390

Re: v7.9beta [testing] is released!

My ticket re: SUP-111720 has been confirmed as a bug by support after sending them a supout, they will look into it.
Since my device already has a functioning config, there is no further problem for me. I already knew that.
Can you give us details?

Thanks!
by wispmikrotik
Thu Mar 30, 2023 2:32 pm
Forum: Announcements
Topic: v7.9beta [testing] is released!
Replies: 118
Views: 26390

Re: v7.9beta [testing] is released!

IKE issue SUP-111669, please reply!
Can you give us details?

Thanks!
by wispmikrotik
Sat Mar 25, 2023 12:01 pm
Forum: Announcements
Topic: v7.9beta [testing] is released!
Replies: 118
Views: 26390

Re: v7.9beta [testing] is released!

Hi, Problems with DNS (DoH) in chrome browser, All queries give: DNS_PROBE_FINISHED_BAD_SECURE_CONFIG With mozilla there is no problem, back to version 7.8 everything is fixed. /ip dns set allow-remote-requests=yes cache-size=4096KiB use-doh-server=https://dns.nextdns.io/<loquesea> verify-doh-cert=y...
by wispmikrotik
Sun Mar 05, 2023 2:20 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi,

What is the identity of your peer (digital signature)?

Can you attach the mikrotik log when you try to connect?
/system logging add topics=ipsec,!debug

Regards,
by wispmikrotik
Sat Mar 04, 2023 3:58 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi,

In order to help you, we need you to attach the following:

- Screenshot of the settings applied in macOS.
- Mikrotik router configuration:
/ip ipsec export hide-sensitive
- Mikrotik and macOS logs when the failure occurs.

Regards,
by wispmikrotik
Sat Mar 04, 2023 9:47 am
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi,

Is the certificate marked as trust in macOS?

What is your setting on the mikrotik?
/ip ipsec export hide-sensitive
Regards,
by wispmikrotik
Fri Mar 03, 2023 6:32 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi, Thank you all, I solved my problems. In my case it was a matter of the EAP configuration of the radius server, I needed to have the CA and SV certificate (which the mikrotik already had and it worked before.....). @cklee234 Can you attach screenshots of the configuration in the macOS and the log...
by wispmikrotik
Thu Mar 02, 2023 12:47 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi, Thanks. I managed to get the IKEv2 client working with certificates. But when it gets involved in the EAP process for radius, it doesn't work: NEIKEv2Provider: (NetworkExtension) [com.apple.networkextension:] IKEv2Session: Processing response for message 5 NEIKEv2Provider: (NetworkExtension) [co...
by wispmikrotik
Wed Mar 01, 2023 9:09 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

OK, thanks a lot!

I have the same and it still doesn't work.

I'll keep checking.

Thank you so much.

Regards,
by wispmikrotik
Wed Mar 01, 2023 5:32 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

With username/password + certificate?
With certificate only (User Authentication: None, Machine Authentication: Certificate).
Hi,

Self generated certificates? RSA2048? ECDP?

Thanks!
by wispmikrotik
Wed Mar 01, 2023 11:26 am
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

I successfully connect to IKEv2 VPN on macOS 13.2.1 M1 Max CPU both to 6.x branch and 7.x branch. Try also watch logs of IPsec in macOS Console.app.
With username/password + certificate?

Without certificate working.

Note: Support opened last 21/02/2023 with no response.

Regards,
by wispmikrotik
Sat Feb 25, 2023 12:33 pm
Forum: RouterOS beta
Topic: MacOS IKEv2 VPN client not working with routerOS
Replies: 29
Views: 7751

Re: MacOS IKEv2 VPN client not working with routerOS

Hi, Are you still having the same problem? I am experiencing this issue on macOS ventura 13.2.1. Config mikrotik server: /ip ipsec mode-config add address-pool=pool_full name=cfg_ikev2 /ip ipsec policy group add name=group_ikev2 /ip ipsec profile set [ find default=yes ] dh-group=modp1024 enc-algori...
by wispmikrotik
Wed Feb 08, 2023 11:05 pm
Forum: RouterBOARD hardware
Topic: Know if the product is new - rb5009 [SOLVED]
Replies: 13
Views: 3211

Re: Know if the product is new - rb5009 (scam?) [SOLVED]

Ok, thanks pcunite!
by wispmikrotik
Wed Feb 08, 2023 6:48 pm
Forum: RouterBOARD hardware
Topic: Know if the product is new - rb5009 [SOLVED]
Replies: 13
Views: 3211

Know if the product is new - rb5009 [SOLVED]

Hi, I have just received a RB5009, supposedly new, but I am suspicious of 2 things: - The product has on one side, which comes out of its interior a kind of oil. https://i.imgur.com/b3RTRcX.png - The factory version and the current one loaded do not match: Factory software: 7.4.1 Version: 7.6 (stabl...
by wispmikrotik
Mon Dec 19, 2022 12:21 pm
Forum: Announcements
Topic: v7.7rc is released!
Replies: 259
Views: 90109

Re: v7.7rc is released!

*) ipsec - improved IKE payload processing;
Reported on ticket SUP-100760. In less than a week resolved. Thanks mikrotik!

Regards,
by wispmikrotik
Wed Oct 26, 2022 4:48 pm
Forum: Announcements
Topic: v7.7beta [testing] is released!
Replies: 322
Views: 124638

Re: v7.7beta [testing] is released!

Very thanks!
by wispmikrotik
Thu Jul 28, 2022 2:58 pm
Forum: Announcements
Topic: v7.5beta [testing] is released!
Replies: 138
Views: 46936

Re: v7.5beta [testing] is released!

BGP: sessions screen in winbox (3.37) shows an uptime of 497d 02:23:00 shortly after the reboot at installation, ticking DOWN instead of UP!
+1

Image

Regards,
by wispmikrotik
Wed Jul 27, 2022 9:52 am
Forum: Announcements
Topic: v7.5beta [testing] is released!
Replies: 138
Views: 46936

Re: v7.5beta [testing] is released!

😍 Thanks!
by wispmikrotik
Wed Jul 13, 2022 10:52 am
Forum: Announcements
Topic: Newsletter 106
Replies: 29
Views: 18253

Re: Newsletter 106

rb5009 PoE 😍😍😍
by wispmikrotik
Fri Jul 08, 2022 11:58 am
Forum: Announcements
Topic: v7.4rc is released!
Replies: 116
Views: 30564

Re: v7.4rc is released!

Request for src-address is logged in our system.
Thanks!
by wispmikrotik
Fri Jul 08, 2022 11:12 am
Forum: Announcements
Topic: v7.4rc is released!
Replies: 116
Views: 30564

Re: v7.4rc is released!

What's new in 7.4rc2 (2022-Jul-07 15:29):
*) netwatch - added support for more advanced probing;
@emils

Possibility to set the src-address?
VRF support?


Thank you very much!
Regards,
by wispmikrotik
Fri Jun 24, 2022 2:32 pm
Forum: Announcements
Topic: v7.4beta [testing] is released!
Replies: 189
Views: 61530

Re: v7.4beta [testing] is released!

New beta today with BFD support, full VRF support and reported bug fixes?

:)
by wispmikrotik
Wed Apr 20, 2022 1:59 pm
Forum: General
Topic: IPsec connection unstable [SOLVED]
Replies: 8
Views: 2884

Re: IPsec connection unstable [SOLVED]

Hi, Log: 09:51:18 ipsec,error can't verify peer's certificate from store Are you following the supplier's instructions? Does the certificate of the provider certification installed? https://hide.me/en/vpnsetup/mikrotik/ikev2/ /tool fetch url="https://hide.me/downloads/hide.me.pem" /certifi...
by wispmikrotik
Wed Mar 16, 2022 12:43 pm
Forum: Announcements
Topic: v7.2rc4 is released!
Replies: 143
Views: 42505

Re: v7.2rc4 is released!

@pe1chl Do you like it better like this?
by wispmikrotik
Wed Mar 16, 2022 11:40 am
Forum: Announcements
Topic: v7.2rc4 is released!
Replies: 143
Views: 42505

Re: v7.2rc4 is released!

@strods
Sat Mar 05, 2022 8:30 am
Do we have a date for the new rc with bug fixes, and possible feature additions?

Regards,
by wispmikrotik
Sat Mar 05, 2022 9:46 am
Forum: Announcements
Topic: v7.2rc4 is released!
Replies: 143
Views: 42505

Re: v7.2rc4 is released!

Thanks Mikrotik!

We are eagerly awaiting the next RC with the bug fixes.
by wispmikrotik
Sun Jan 30, 2022 12:23 pm
Forum: Announcements
Topic: v7.2rc2 and v7.2rc3 is released!
Replies: 222
Views: 85800

Re: v7.2rc2 and v7.2rc3 is released!

Hi,

Failed to disable IP > Firewall > Service Ports :(
[admin@r1] > /ip/firewall/service-port/disable [find]
failure: module udplite is built-in and cannot be individually disabled
DCCP, STCP and udplite not disabled.

Regards ...
by wispmikrotik
Mon Dec 27, 2021 11:04 am
Forum: Announcements
Topic: v7.2rc1 is released!
Replies: 240
Views: 160688

Re: v7.2rc1 is released!

Hi,

High CPU on mAPLite:

Only IKEv2 + Cake.

V7rc2: 100%
V7.1.1: 8%

Regards,
As indicated in other posts, if I have more than X entries in the address lists, the CPU goes to 100%.

Regards,
by wispmikrotik
Wed Dec 22, 2021 12:29 am
Forum: Announcements
Topic: v7.2rc1 is released!
Replies: 240
Views: 160688

Re: v7.2rc1 is released!

Hi,

High CPU on mAPLite:

Only IKEv2 + Cake.

V7rc2: 100%
V7.1.1: 8%

Regards,
by wispmikrotik
Fri Dec 03, 2021 8:25 pm
Forum: Announcements
Topic: v7.1 is released!
Replies: 785
Views: 226589

Re: v7.1 is released!

https://help.mikrotik.com/docs/display/ ... col+Status

Some kind of mechanism to import/export routes from one vrf to another within same router. N/A
Please implement a similar route targets from Cisco to VRF-Lite.

Regards,
by wispmikrotik
Tue Oct 26, 2021 4:28 pm
Forum: RouterOS beta
Topic: v7.1rc5 [development] is released!
Replies: 167
Views: 49082

Re: v7.1rc5 [development] is released!

Perfect! thank you very much mikrotik!
by wispmikrotik
Tue Oct 19, 2021 1:33 pm
Forum: Wireless Networking
Topic: CAPsMAN and TX Power [SOLVED]
Replies: 2
Views: 6210

Re: CAPsMAN and TX Power [SOLVED]

Hi, I answer: Which is the one used if both are configured? Order of priority: 1- Configuration 2- Channel I could only find on the AP in the Winbox on Wireless Tables/Wifi Interfaces/Status, where the Channel field shows some dBm value: 2412/20/gn(5dBm) Unfortunately this not, what I have configure...
by wispmikrotik
Tue Oct 12, 2021 5:44 pm
Forum: Wireless Networking
Topic: mAP Lite positioning
Replies: 5
Views: 3901

Re: mAP Lite positioning

Hi, Thanks @normis, I attach some tests, same device, same distance: Horizontal: https://i.imgur.com/Bai2eI0.jpg Vertical: https://i.imgur.com/qB90J8z.jpg 1X1 Horizontal: https://i.imgur.com/zyK2MpP.png 1X1 Vertical: https://i.imgur.com/ZITjimX.png 2X2 Horizontal: https://i.imgur.com/wn5o6SZ.png 2X2...
by wispmikrotik
Tue Oct 12, 2021 2:13 am
Forum: Wireless Networking
Topic: mAP Lite positioning
Replies: 5
Views: 3901

Re: mAP Lite positioning

We hope to see what the rest of the experts say!

Regards,
by wispmikrotik
Mon Oct 11, 2021 10:49 pm
Forum: Wireless Networking
Topic: mAP Lite positioning
Replies: 5
Views: 3901

mAP Lite positioning

Hi,

I know this is a stupid question but how should the mAP Lite sit?, vertically or horizontally?

Being an integrated omnidirectional antenna (2 chains), it will have a specific polarization and the "donut" will be more efficient horizontally or vertically.


Greetings
by wispmikrotik
Sun Sep 12, 2021 6:49 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 148
Views: 45532

Re: Feature Request: IPSEC Improvements

Any news from VTI?
by wispmikrotik
Wed Sep 08, 2021 7:27 pm
Forum: RouterOS beta
Topic: Zerotier to Mipsbe??
Replies: 109
Views: 34422

Re: Zerotier to Mipsbe??

+1 mipsbe
by wispmikrotik
Tue Aug 31, 2021 7:52 pm
Forum: General
Topic: Feature Request: zerotier vpn
Replies: 32
Views: 17383

Re: Feature Request: zerotier vpn

by wispmikrotik
Tue Aug 31, 2021 2:24 pm
Forum: RouterOS beta
Topic: v7.1rc2 [development] is released!
Replies: 194
Views: 44422

Re: v7.1rc2 [development] is released!

Kernel failure 5mins after setting cake to my simple queue..I sent you supout (SUP-58379)
Hi,

Can you share your settings? I have something similar and I don't have that problem. I would like to try it, thank you!

Regards,
by wispmikrotik
Tue Aug 31, 2021 12:47 pm
Forum: RouterOS beta
Topic: v7.1rc2 [development] is released!
Replies: 194
Views: 44422

Re: v7.1rc2 [development] is released!

No it is not the same as you can see by the build time.
Ok, thank you so much!!

Regards,
by wispmikrotik
Tue Aug 31, 2021 12:44 pm
Forum: RouterOS beta
Topic: v7.1rc2 [development] is released!
Replies: 194
Views: 44422

Re: v7.1rc2 [development] is released!

Hi,

The RC2 that we receive by support email, is it the same RC2 as the one you publish? or should we re-update?

Regards,
by wispmikrotik
Mon Aug 23, 2021 1:38 pm
Forum: RouterOS beta
Topic: v7.1rc1 [development] is released!
Replies: 344
Views: 77982

Re: v7.1rc1 [development] is released!

RouterOS version 7.1rc1 has been released in public "development" channel! What's new in 7.1rc1 (2021-Aug-19 13:06): !) added support for IPv6 NAT (CLI only); !) added support for L2TPv3 (CLI only); *) added "expired" user status with suggestion to change password (WinBox v3.29 ...
by wispmikrotik
Fri Aug 06, 2021 11:44 am
Forum: General
Topic: ipsec Mikrotik PFsense
Replies: 4
Views: 1051

Re: ipsec Mikrotik PFsense

Hi,

Paste the command output:
 /ip firewall export hide-sensitive 

Regards,
by wispmikrotik
Thu Aug 05, 2021 10:28 am
Forum: General
Topic: ipsec Mikrotik PFsense
Replies: 4
Views: 1051

Re: ipsec Mikrotik PFsense

Hi,

When you ping from mikrotik itself, indicate in the source an IP address that matches the ipsec policies.

Example:
Mikrotik: 192.168.1.1/24
Pfsense: 192.168.2.1/24

Routeros> ping 192.168.2.1 src-address=192.168.1.1

Regards,
by wispmikrotik
Wed May 19, 2021 5:37 pm
Forum: RouterOS beta
Topic: v7.1beta6 [development] is released!
Replies: 377
Views: 243249

Re: v7.1beta6 [development] is released!


What's new in 7.1beta6 (2021-May-18 14:49):

!) ported features and fixes introduced in v6.49;

All the features of v6.49beta46?

Regards,
by wispmikrotik
Fri Apr 23, 2021 4:11 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 171
Views: 90518

Re: v6.49beta [testing] is released!

Hi,

This new beta already includes the changes from the v6.48.2?

Or are they 2 totally independent versions?


Regards,
All 6.48.2 version changes are in this beta build as well.
Thanks!!!
by wispmikrotik
Fri Apr 23, 2021 11:42 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 171
Views: 90518

Re: v6.49beta [testing] is released!

Hi, This new beta already includes the changes from the v6.48.2? For example: *) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests; *) ike2 - fixed DH group negotiation with EAP; *) ospf - fixed type-7 LSA translation to type-5; Or are they 2 totally independent versions? Regards,
by wispmikrotik
Sat Mar 06, 2021 10:42 am
Forum: Forwarding Protocols
Topic: OSPF area NSSA LSA type 7 to type 5
Replies: 8
Views: 5453

Re: OSPF area NSSA LSA type 7 to type 5

Hi,

Total disaster:

All current versions affected :(

long term: v6.47.9
stable: v6.48.1
testing: v6.49beta11
development: v7.1beta4

Regards.
by wispmikrotik
Sat Mar 06, 2021 10:18 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 171
Views: 90518

Re: v6.49beta [testing] is released!

Hi,
SUP-43694
Confirmed a new bug in OSPF NSSA convert LSA type 7 to type 5:

viewtopic.php?f=14&t=173212&p=847007#p847007

Regards,
by wispmikrotik
Sat Mar 06, 2021 10:12 am
Forum: Forwarding Protocols
Topic: OSPF area NSSA LSA type 7 to type 5
Replies: 8
Views: 5453

Re: OSPF area NSSA LSA type 7 to type 5

Hi,

Confirmed is a BUG

v6.46 - OK

Image

Image


v6.48.1 and v6.49beta11 not working

Regards
by wispmikrotik
Sat Mar 06, 2021 9:11 am
Forum: Forwarding Protocols
Topic: OSPF area NSSA LSA type 7 to type 5
Replies: 8
Views: 5453

Re: OSPF area NSSA LSA type 7 to type 5

Hi, Thanks for the answers, yes, I have a ticket open to mikrotik for 7 days without an answer. Regarding the topology, I was testing ospf in mikrotik, as for the network is not correct, why? This same network you change R2 for a cisco, vyos, junos and it works perfectly, it is broken in translate-r...
by wispmikrotik
Fri Mar 05, 2021 6:15 pm
Forum: Forwarding Protocols
Topic: OSPF area NSSA LSA type 7 to type 5
Replies: 8
Views: 5453

OSPF area NSSA LSA type 7 to type 5

Hi, Following RFC 1587 "4.1 Translating Type-7 LSAs Into Type-5 LSAs", and according to mikrotik's own documentation "https://help.mikrotik.com/docs/display/ROS/OSPF+Case+Studies+and+Solutions" Section LSA Types: "type 7 - type 7 LSAs are used to tell the ABRs about these ex...
by wispmikrotik
Mon Aug 17, 2020 11:36 am
Forum: General
Topic: Ovpn and vpnptp.com
Replies: 2
Views: 1014

Re: Ovpn and vpnptp.com

Hi,

Good,

I use this provider and I have no problem. On its website it explains how to configure the service.

Check if I loaded the certificate, check the username / password.

Contact support.

Regards.
by wispmikrotik
Wed May 20, 2020 11:47 am
Forum: Announcements
Topic: Winbox v3.24 released!
Replies: 103
Views: 89417

Re: Winbox v3.24 released!

Hi,

Error, sorry.

Regards.
by wispmikrotik
Sat May 02, 2020 12:42 am
Forum: Forwarding Protocols
Topic: BGP and VRF lite not working
Replies: 0
Views: 1852

BGP and VRF lite not working

Hi, https://i.imgur.com/p1kPePk.jpg R1 (mikrotik CE1) => PE1 (cisco) => VRF100 R2 (mikrotik CE2) => PE1 (cisco) => VRF200 R1: LAN 10.4.4.0/24 R2: LAN 10.3.3.0/24 R1 is intended to know R1's LAN 10.3.3.0/24, with cisco it works with mikrotik no. 1) PE CISCO: I am going to give you the example with th...
by wispmikrotik
Tue Feb 18, 2020 2:12 pm
Forum: RouterOS beta
Topic: [Feature Request] - RADIUS Disconnect-Request messages supported for IPsec
Replies: 0
Views: 2899

[Feature Request] - RADIUS Disconnect-Request messages supported for IPsec

Hi,

RADIUS Disconnect-Request messages supported for IPsec.

RFC 3576
40 - Disconnect-Request [RFC2882]
41 - Disconnect-ACK [RFC2882]
42 - Disconnect-NAK [RFC2882]
43 - CoA-Request [RFC2882]
44 - CoA-ACK [RFC2882]
45 - CoA-NAK [RFC2882]

Regards,
by wispmikrotik
Tue Dec 17, 2019 11:35 am
Forum: RouterOS beta
Topic: OpenVPN with UDP not working beta3
Replies: 3
Views: 12896

Re: OpenVPN with UDP not working beta3

Description
Device: mAPLite
Version: v7.0beta4
Issue: OpenVPN with UDP not working.

UDP does not work properly, you can connect, but you do not browse, and it disconnects only within a few seconds.
by wispmikrotik
Sat Nov 23, 2019 11:28 am
Forum: Forwarding Protocols
Topic: Radius "Session Context Not Found" - PoD [SOLVED]
Replies: 4
Views: 12080

Re: Radius "Session Context Not Found" - PoD [SOLVED]

You need to send more than the username. I believe the IP as well. What if their are two users with the same username logged in Hi, Thanks for answering. Not that, mikrotik support @Emils told me, that at the moment ipsec ikev2 eap radius, does not support disconnection method, they will look to im...
by wispmikrotik
Fri Nov 22, 2019 11:49 am
Forum: Forwarding Protocols
Topic: Radius "Session Context Not Found" - PoD [SOLVED]
Replies: 4
Views: 12080

Re: Radius "Session Context Not Found" - PoD [SOLVED]

Hi,

Support #SUP-1932

Waiting ...


Regards.
by wispmikrotik
Tue Nov 19, 2019 11:20 pm
Forum: Forwarding Protocols
Topic: Radius "Session Context Not Found" - PoD [SOLVED]
Replies: 4
Views: 12080

Radius "Session Context Not Found" - PoD [SOLVED]

Hi, Right now I have configured freeradius as a radius server, and mikrotik IKEv2 + eap radius. The problem is when disconnecting users, skip error 503: root@sv10-lab:/home# echo user-name=mk10 | radclient -x 2.2.2.2:3799 disconnect nas1234 Sending Disconnect-Request of id 252 to 2.2.2.2 port 3799 U...
by wispmikrotik
Tue Nov 19, 2019 3:58 am
Forum: General
Topic: Ikev2 eap radius + DMARadius not disconnect properly users [SOLVED]
Replies: 1
Views: 1372

Ikev2 eap radius + DMARadius not disconnect properly users [SOLVED]

Hi, I have a mikrotik router with ppp (openvpn, pptp, sstp, l2tp + ipsec) + DMARadius, working correctly. If the user expires, the radius disconnects him through the UDP / 1700 port correctly. Now we have implemented IKEv2 (eap radius) + DMARadius but it does not disconnect users: Error 503 mikrotik...
by wispmikrotik
Tue Nov 19, 2019 2:01 am
Forum: Forwarding Protocols
Topic: IKEv2 SAN / DNS several subdomains [SOLVED]
Replies: 2
Views: 10461

Re: IKEv2 SAN / DNS several subdomains [SOLVED]

When using a wildcard than add also the bare domain to the SAN. Maybe that solves it.
It works!! Thank you very much!!
by wispmikrotik
Tue Nov 19, 2019 12:05 am
Forum: Forwarding Protocols
Topic: IKEv2 SAN / DNS several subdomains [SOLVED]
Replies: 2
Views: 10461

IKEv2 SAN / DNS several subdomains [SOLVED]

IPsec IKEv2 configuration for multiple servers with a single CA root certificate? 1.1 - WIKI: * Common name should contain IP or DNS name of the server; It is possible to use an example DNS: "*.domain.com" that includes server1.domain.com and server2.domain.com? * SAN (subject alternative ...
by wispmikrotik
Thu Oct 24, 2019 11:01 am
Forum: RouterOS beta
Topic: OpenVPN with UDP not working beta3
Replies: 3
Views: 12896

OpenVPN with UDP not working beta3

HW: mAP Lite ROS: 7.0beta3 OpenVPN UDP: The connection to the server occurs, but it is not navigated through the VPN. Configuration: [admin@rt01_v7] > /export hide-sensitive # oct/24/2019 09:40:35 by RouterOS 7.0beta3 # software id = # # model = RouterBOARD mAP L-2nD # serial number = 73B207163703 /...
by wispmikrotik
Wed Oct 23, 2019 7:09 pm
Forum: RouterOS beta
Topic: wireless not working mAP Lite - beta03
Replies: 19
Views: 11155

Re: wireless not working mAP Lite - beta03

Hi, Log: Jan/01/2002 03:21:06 wireless,debug wlan1: must select network Jan/01/2002 03:21:06 wireless,debug D8:68:C3:44:3F:89: on 2462 AP: yes SSID TocToc caps 0x411 rates 0xCCK:1-11 OFDM:6-54 BW:1x SGI:1x HT:0-7 basic 0xCCK:1-11 MT: no Jan/01/2002 03:21:06 wireless,debug 80:29:94:F4:8A:7C: on 2437 ...
by wispmikrotik
Wed Oct 23, 2019 6:52 pm
Forum: RouterOS beta
Topic: wireless not working mAP Lite - beta03
Replies: 19
Views: 11155

wireless not working mAP Lite - beta03

Version number; : ROS 7.0beta3 Router's model; : mAP Lite Not working wireless, It disconnects constantly. There is no parameter that stabilizes the connection. @MikroTik] > /system/resource/pr uptime: 36m4s version: 7.0beta3 (development) build-time: Oct/22/2019 09:34:17 factory-software: 6.36 free...
by wispmikrotik
Mon Mar 25, 2019 2:42 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 304
Views: 157700

Re: v6.45beta [testing] is released!

Hi, all! I can confirm, that 5ghz band does not work on RouterBOARD M33G with Athereros 5008 pci-e card installed. Also upgrade of any of my mipsbe (mAP 2n,mAP L-2nD) platform fails, because ipv6 package is broken. ----------------- Mar/23/2019 10:54:24 system,error broken package system-6.45beta19...
by wispmikrotik
Mon Jan 21, 2019 10:28 am
Forum: General
Topic: pub folder removed accidentally
Replies: 3
Views: 3114

Re: pub folder removed accidentally

Hi,

The file system in mikrotik does not allow creating folders from the console.
To create folders you must do it from SMB and then make folders from your Windows Explorer.

Regards.
by wispmikrotik
Fri Jan 18, 2019 8:54 pm
Forum: General
Topic: DNS xxx.ddns.net
Replies: 9
Views: 4044

Re: DNS xxx.ddns.net

I am not familiar with 1.1.1.1 is that a legitimate DNS server?? Overall your setup is missing so many things and most of all any firewall rules. I suggest you download the latest stable firmware 6.43.8 and reset to defaults. For example missing an IP pool missing a DHCP-SERVER NEWORK no firewall f...
by wispmikrotik
Fri Jan 18, 2019 8:41 pm
Forum: General
Topic: DNS xxx.ddns.net
Replies: 9
Views: 4044

Re: DNS xxx.ddns.net

Please post your config /export hide=sensitive file=mylatestconfig It will help determine how your DNS and firewall rules are setup. We may also want to consider redirect NAT rules for DNS. Hi anav, Thanks. export: # jan/18/2019 20:37:41 by RouterOS 6.44beta54 # software id = 06GQ-R3YM # /interface...
by wispmikrotik
Fri Jan 18, 2019 7:46 pm
Forum: General
Topic: DNS xxx.ddns.net
Replies: 9
Views: 4044

DNS xxx.ddns.net

Hi, I am seeing in my mikrotik router some connection to dns "k3yhol3.ddns.net", this dns has the IP 0.0.0.0. Linux (nslookup): Non-authoritative answer: Name: k3yhol3.ddns.net Address: 0.0.0.0 ping web: https://i.imgur.com/Cegqrsk.png What's up with this domain? I do not understand anythi...
by wispmikrotik
Thu Jan 17, 2019 1:33 pm
Forum: Forwarding Protocols
Topic: VPN - MTU - Change MSS - Wiki
Replies: 2
Views: 19341

VPN - MTU - Change MSS - Wiki

Hi, In the official mikrotik wiki, talk about this rule: /ip firewall mangle add out-interface=pppoe-out protocol=tcp tcp-flags=syn action=change-mss new-mss=1300 chain=forward tcp-mss=1301-65535 https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle#Change_MSS 1-) Where do these values come from ...
by wispmikrotik
Thu Jan 10, 2019 11:16 am
Forum: General
Topic: VPN provider recommendations
Replies: 17
Views: 13522

Re: VPN provider recommendations

Damn! Haven't touched this topic for a while, but FINALLY someone came up with a working OpenVPN implementation! Finally, 2018, some hope for Mikrotik! SaferVPN.com https://support.safervpn.com/hc/en-us/articles/115004435985-Setup-OpenVPN-manually-on-Mikrotik-Router Another provider that has suppor...
by wispmikrotik
Fri Jan 04, 2019 12:31 am
Forum: General
Topic: Feature Request: OpenVPN [ovpn] udp tunnels
Replies: 249
Views: 139389

Re: Feature Request: OpenVPN [ovpn] udp tunnels

just to know, do you know an approximate release date? I would not wait all 2019 ...
Maybe @normis can say a date, will it be before 2020?
by wispmikrotik
Wed Jan 02, 2019 8:29 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 257201

Re: RouterOS v7.0 beta1 - when?

2019?
Router OS v7 is never going to happen.
Well ... so let's get routeros v8.0.0 ...

:lol: :lol: :lol: :lol:
by wispmikrotik
Wed Jan 02, 2019 10:28 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 257201

Re: RouterOS v7.0 beta1 - when?

2019?
by wispmikrotik
Thu Dec 20, 2018 12:07 pm
Forum: General
Topic: Omnitik 5 retired from Spain
Replies: 8
Views: 2912

Re: Omnitik 5 retired from Spain

The software bug is the cause of the issue described here. This software bugfix should be enough to reevaluate the above decision, but that's for the legal deparment to sort out. I can only say, that this is an ongoing matter and MikroTik continues the work to fully resolve this.
Thanks.
by wispmikrotik
Thu Dec 20, 2018 8:36 am
Forum: General
Topic: Omnitik 5 retired from Spain
Replies: 8
Views: 2912

Re: Omnitik 5 retired from Spain

Nobody from mikrotik gives the face?
@normis
by wispmikrotik
Wed Dec 19, 2018 1:38 pm
Forum: General
Topic: Omnitik 5 retired from Spain
Replies: 8
Views: 2912

Re: Omnitik 5 retired from Spain

@normis
???
by wispmikrotik
Wed Dec 12, 2018 11:41 am
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 46634

Re: v6 RC and v7 BETA

Not yet, but soon
Do you know anything about the "soon"?

I say it to know if to continue investing money in mikrotik or move to another brand ..

Regards.
by wispmikrotik
Wed Oct 31, 2018 8:36 pm
Forum: Virtualization
Topic: CHR neighbour discovery problem
Replies: 13
Views: 12743

Re: CHR neighbour discovery problem

Looks to me like host configuration problem. I can see from CHR all other CHRs and other devices in neighbor list, Winbox discovers all CHRs with no problems: [admin@MikroTik] /ip neighbor> print # INTERFACE ADDRESS MAC-ADDRESS IDENTITY VERSION 0 ether1 2.2.2.2 08:00:27:8B:66:7F MikroTik 7.0beta......
by wispmikrotik
Wed Oct 31, 2018 8:20 pm
Forum: General
Topic: Mikrotik does not support IPSec, L2TP or OpenVPN connections to any VPN provider
Replies: 12
Views: 14516

Re: Mikrotik does not support IPSec, L2TP or OpenVPN connections to any VPN provider

I bought a Mikrotik router to have an all-round router that is very configurable and extensible. Unfortunately, I quickly reached its limits. I tried to secure my internet traffic via the microtic router with a VPN provider. I have set up trial accounts with several VPN providers such as NordVPN, E...
by wispmikrotik
Fri Oct 26, 2018 4:05 pm
Forum: General
Topic: Mikrotik does not support IPSec, L2TP or OpenVPN connections to any VPN provider
Replies: 12
Views: 14516

Re: Mikrotik does not support IPSec, L2TP or OpenVPN connections to any VPN provider

I bought a Mikrotik router to have an all-round router that is very configurable and extensible. Unfortunately, I quickly reached its limits. I tried to secure my internet traffic via the microtic router with a VPN provider. I have set up trial accounts with several VPN providers such as NordVPN, E...
by wispmikrotik
Fri Jul 13, 2018 8:33 pm
Forum: General
Topic: Problem with hotspot
Replies: 2
Views: 1107

Problem with hotspot

Good, I expose my problem together with a network scheme. I have a CCR1009, in the ether7 port I have a hotspot configured, at the other end there is an AP WIFI. The hotspot is limited to one user per mac. The problem is that the mikrotik CCR1009 detects the MAC of the AP (FF) and the users connecte...
by wispmikrotik
Mon Apr 23, 2018 5:24 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 203
Views: 259027

Re: Advisory: Vulnerability exploiting the Winbox port

When the tool gets your password, it has full access and installs some kind of tools. That is kind of strange, because when I know the password of my router I still cannot install that kind of tools! So there are multiple faults here. On MT specific hardware and using WINBOX -- winbox -- gains root...
by wispmikrotik
Mon Apr 23, 2018 2:59 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 203
Views: 259027

Re: Advisory: Vulnerability exploiting the Winbox port

We have discovered a new RouterOS vulnerability affecting all RouterOS versions since v6.29. How it works : The vulnerability allowed a special tool to connect to the Winbox port, and request the system user database file. Versions affected : 6.29 to 6.43rc3 (included). Updated versions in all rele...
by wispmikrotik
Sat Apr 21, 2018 8:32 pm
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 27919

Re: winbox vulnerable! Unusual login to routers [SOLVED]

1.Set user name and password with combination with cyrillic alphabet after that remoove or disable user - admin ! 2.Change the port numbers for ssh , winbox etc. 3.Set strog crypto for ssh 4.Set ACL 5.Set 3 attempts login to black list and deny attempts with RAW 6,Disable all other non-useable serv...
by wispmikrotik
Sat Apr 21, 2018 1:50 am
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 27919

Re: winbox vulnerable! Unusual login to routers [SOLVED]

just to stop the attackers, create a whitelist IP address for example call Support and the the raw firewall /ip firewall raw add action=drop chain=prerouting dst-port=22,80,8291 log=yes protocol=tcp src-address-list=!Support Hello, I had configured that at 3 attempts d access blocked the ip, but ha...
by wispmikrotik
Sat Apr 21, 2018 1:43 am
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 27919

Re: winbox vulnerable! Unusual login to routers [SOLVED]

I have already notified the mikrotik support, I could not send the support file because the router is blocked.
@normis, mikrotik team can you check this immediately?
this is very serious.
by wispmikrotik
Sat Apr 21, 2018 12:49 am
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 27919

Re: winbox vulnerable! Unusual login to routers [SOLVED]

Hello everyone, The same thing happened to me today. https://i.imgur.com/qhhClKy.png What's happening mikrotik team? Any security problem not notified? bug or backdoor? AS131149 103.1.220.0/23 LJ Hosting Co., LTD IP Address 103.1.221.29 Hostname 103-1-221-29.static.ip.net.tw Name Servers a.g-dns.com...
by wispmikrotik
Thu Apr 12, 2018 7:16 pm
Forum: Forwarding Protocols
Topic: Firewall Mangle - Action [passthrough vs accept] [SOLVED]
Replies: 7
Views: 9054

Re: Firewall Mangle - Action [passthrough vs accept] [SOLVED]

To tell the truth, I'm little lost in the description in first post. You have jump in prerouting and target chain has only one rule with action=passthrough, so it basically does nothing, only increases counter for passthrough rule, reaches end of chain and returns to prerouting, where it continues ...
by wispmikrotik
Thu Apr 12, 2018 12:55 pm
Forum: Forwarding Protocols
Topic: Firewall Mangle - Action [passthrough vs accept] [SOLVED]
Replies: 7
Views: 9054

Re: Firewall Mangle - Action [passthrough vs accept] [SOLVED]

It is not assumed that the action=passthrough should to be " if packet is matched by the rule, increase counter and go to next rule" And action=accept stops processing and does not go to next rule , so that's major difference. Hi, Of course, that's what I do not want, that does not pass t...
by wispmikrotik
Thu Apr 12, 2018 12:53 pm
Forum: Forwarding Protocols
Topic: Firewall Mangle - Action [passthrough vs accept] [SOLVED]
Replies: 7
Views: 9054

Re: Firewall Mangle - Action [passthrough vs accept] [SOLVED]

Hello, What's your question and what are you trying to achieve? Ad you said, passthrough is only for accounting, nothing more. Regards Envoyé de mon LG-H812 en utilisant Tapatalk Hi, I need that when you get from rule 0 and make the jump and go to rule 2 action=passthrough follow the following rule...
by wispmikrotik
Thu Apr 12, 2018 1:33 am
Forum: Forwarding Protocols
Topic: Firewall Mangle - Action [passthrough vs accept] [SOLVED]
Replies: 7
Views: 9054

Firewall Mangle - Action [passthrough vs accept] [SOLVED]

Hi, I have the following problem with the mangle and the action=passthrough , I am routing all the traffic through the VPN, but with a JUMP rule I avoid using the VPN to get to the WEB Server. I put the network scheme: https://i.imgur.com/MVbPZwk.png - Config RB850gx2: [rtc@wispmikrotik] /ip firewal...
by wispmikrotik
Fri Apr 06, 2018 1:26 am
Forum: RouterBOARD hardware
Topic: mAP Lite WiFi problems out of the box
Replies: 4
Views: 1897

Re: mAP Lite WiFi problems out of the box

Hi,

I have a few units of these and they work perfectly. As the partner says, can it be your defective unit?


Regards.
by wispmikrotik
Fri Apr 06, 2018 1:21 am
Forum: RouterBOARD hardware
Topic: RB850GX2 temperature
Replies: 1
Views: 1308

RB850GX2 temperature

Hi, Greetings to all, I wanted to know what is the ambient temperature and the normal CPU temperature on this board, and above all at what time should I worry about the high temperature? [xxx@wispmikrotik] system health print voltage: 23.7V temperature: 57C cpu-temperature: 64C Regards.
by wispmikrotik
Mon Mar 26, 2018 9:19 pm
Forum: General
Topic: NAT 1:1 VPS
Replies: 1
Views: 1039

NAT 1:1 VPS

https://i.imgur.com/Czgv7bd.png Hi, I am trying to configure a public ip from a VPS to my office router. Redirect the traffic of an IP Public X.X.86.175 through a VPN to the mikrotik of my office without success. VPS: IP Public: X.X.86.175 IP VPN to Office: 10.8.8.1 Office: IP VPN to VPS: 10.8.8.2 ...
by wispmikrotik
Sat Sep 23, 2017 8:47 pm
Forum: Virtualization
Topic: Transfer license [SOLVED]
Replies: 2
Views: 23072

Re: Transfer license [SOLVED]

Setup new CHR install and get it connected to your Mikrotik account. Log into Mikrotik account and click on CHR licenses. Find desired license and click transfer. Transfer to system ID has a drop down box that lists all applicable ID's on your account. You should see your new ID from the new instal...
by wispmikrotik
Sat Sep 23, 2017 8:28 pm
Forum: Virtualization
Topic: Transfer license [SOLVED]
Replies: 2
Views: 23072

Transfer license [SOLVED]

Good,

I have a VPS server running a router mikrotik CHR, after fault in the server, have decided to change hardware, so I lost the license.

Is it possible to transfer the license to the new server?


Regards.
by wispmikrotik
Sat Sep 23, 2017 3:50 pm
Forum: RouterBOARD hardware
Topic: Bytes o bits - Traffic total mikrotik
Replies: 1
Views: 1909

Bytes o bits - Traffic total mikrotik

why mikrotik shows the total traffic in bytes?
in the traffic tab of the Ethernet interface 1, the total tx / rx bytes. It means that the brand is 60Gbytes is equal to 480 gbits?

Image

the total actual traffic measured in bits would be that? 480Gbits?


Regards.
by wispmikrotik
Mon Sep 04, 2017 11:44 am
Forum: RouterBOARD hardware
Topic: Metal 52 + RF elements [PtP] [SOLVED]
Replies: 6
Views: 2457

Re: Metal 52 + RF elements [PtP] [SOLVED]

Good, I wanted to ask if it is possible to make a link of 11.5km with the following equipment: 1 -) Metal 52SHPacn + RF-Elements Direct 21-5G https: //www.landashop.com/wrl-rf-d215.html 2 -) LHG 5ND Se I'm not going to use a protocol AC but I do not care. OK, easy to calculate: 9dBm from Metal + 21...
by wispmikrotik
Sat Sep 02, 2017 9:19 pm
Forum: RouterBOARD hardware
Topic: Metal 52 + RF elements [PtP] [SOLVED]
Replies: 6
Views: 2457

Re: Metal 52 + RF elements [PtP] [SOLVED]

What is your allowed EIRP?
1W maximum
by wispmikrotik
Fri Sep 01, 2017 10:45 pm
Forum: RouterBOARD hardware
Topic: Metal 52 + RF elements [PtP] [SOLVED]
Replies: 6
Views: 2457

Re: Metal 52 + RF elements [PtP] [SOLVED]

What are your Needs for this Links?
With 10 mb is enough, the question is whether the link can be made. Bandwidth is not a problem.
by wispmikrotik
Fri Sep 01, 2017 9:48 pm
Forum: RouterBOARD hardware
Topic: Simultaneous clients - mAP Lite [SOLVED]
Replies: 2
Views: 2152

Re: Simultaneous clients - mAP Lite [SOLVED]

40 clients is quite a lot.
Why are you looking for the smallest/cheapest possible device with small antennas and targeted as personal AP?
What is the area of your clients? One big room? One floor? Several buildings?
Thanks, discarded the mAP Lite, I will use a more powerful model.
by wispmikrotik
Fri Sep 01, 2017 9:43 pm
Forum: RouterBOARD hardware
Topic: Metal 52 + RF elements [PtP] [SOLVED]
Replies: 6
Views: 2457

Metal 52 + RF elements [PtP] [SOLVED]

Good, I wanted to ask if it is possible to make a link of 11.5km with the following equipment: 1 -) Metal 52SHPacn + RF-Elements Direct 21-5G https: //www.landashop.com/wrl-rf-d215.html 2 -) LHG 5ND Se I'm not going to use a protocol AC but I do not care. And on the same link connect 1 km: 1 -) Meta...
by wispmikrotik
Fri Sep 01, 2017 9:33 pm
Forum: RouterBOARD hardware
Topic: Simultaneous clients - mANT 19S [SOLVED]
Replies: 3
Views: 2887

Re: Simultaneous clients - mANT 19S [SOLVED]

Thanks @pukkita
by wispmikrotik
Fri Sep 01, 2017 1:41 am
Forum: RouterBOARD hardware
Topic: RB850gx2 - PBX
Replies: 0
Views: 973

RB850gx2 - PBX

Good, I currently have five bank branches routed with five rb850gx2, I have come up with the need to implement a small pbx (asterisk), with five sip extensions and two simultaneous calls, and I thought I could do it with metarouter, but ohhh I find that ppc multicore does not support Metarouter. I r...
by wispmikrotik
Fri Sep 01, 2017 1:28 am
Forum: RouterBOARD hardware
Topic: Simultaneous clients - mANT 19S [SOLVED]
Replies: 3
Views: 2887

Simultaneous clients - mANT 19S [SOLVED]

Good morning everyone, I bring a question about the mANT 19S product: 1 -) I have a FTTH of 150Mb / 150Mb: - The bandwidth limit and QoS is performed on an rb3011 with PCQ + Adress-List 2 -) Bandwidth calculations for 80 clients: Group A: 70 users, 80% CIR, 3 overbooking, 6Mb per user: ABw = { CIR /...
by wispmikrotik
Sat Aug 26, 2017 6:57 pm
Forum: RouterBOARD hardware
Topic: Simultaneous clients - mAP Lite [SOLVED]
Replies: 2
Views: 2152

Simultaneous clients - mAP Lite [SOLVED]

Good morning everyone, I bring a question about the mAP Lite product: 1 -) I have a FTTH of 50Mb / 50Mb: - The bandwidth limit and QoS is performed on an rb3011 with PCQ + Adress-List 2 -) Bandwidth calculations for 40 clients: Group A: 30 users, 80% CIR, 3 overbooking, 3Mb per user: ABw = { CIR / o...
by wispmikrotik
Fri Aug 25, 2017 11:31 pm
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Re: Product mAP Lite - Very HOT [SOLVED]

Is router has a default configuration? Are there default firewall rules? What mode Quick set is imposed? AP, Wisp? He should not get hot No. It is configured accordingly, no default configuration or fast configuration. Optimized in packages, in configuration, does not exceed 1% of CPU and is burnin...
by wispmikrotik
Thu Aug 24, 2017 10:33 am
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Re: Product mAP Lite - Very HOT [SOLVED]

Or is the usb just to power the router?
It is just for power.

//A
Thanks
by wispmikrotik
Thu Aug 24, 2017 2:09 am
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Re: Product mAP Lite - Very HOT [SOLVED]

You don't have to remove the magnets. The previous poster referenced an old issue in the first production batch where the magnet could cause ethernet packet loss when attached to a ferrous surface. It only affected a few units, and has been fixed a long time ago. The usb can be used for a 3G dongle...
by wispmikrotik
Wed Aug 23, 2017 4:24 pm
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Re: Product mAP Lite - Very HOT [SOLVED]

i'm using a couple of them and i'm not complaining. very good product. You don't need to power through both ports. only one is enough. also check this thread : https://forum.mikrotik.com/viewtopic.php?t=104540 I removed the magnets of mine. Then it is solved by removing the magnets? Then what kind ...
by wispmikrotik
Wed Aug 23, 2017 12:36 pm
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Re: Product mAP Lite - Very HOT [SOLVED]

CPU frequency is not at default setting? How do you power them? Poslano z mojega X1030X z uporabo Tapatalk The CPU frequency is factory default. They are connected both by POE and by usb that the routerboard brings. With both it gets too hot. I have also noticed that it costs a lot to upload youtub...
by wispmikrotik
Tue Aug 22, 2017 7:38 pm
Forum: RouterBOARD hardware
Topic: Product mAP Lite - Very HOT [SOLVED]
Replies: 10
Views: 4378

Product mAP Lite - Very HOT [SOLVED]

Good morning everyone, I just purchased 2 mAP Lite ( https://mikrotik.com/product/RBmAPL-2nD ) for two rooms in a small hotel. http://i.imgur.com/W74HjFP.jpg The "problem" is that the small routerboard is very very hot , I understand: - That this is normal because of its small size? - Affe...
by wispmikrotik
Tue Apr 25, 2017 10:54 am
Forum: General
Topic: Mangle v6
Replies: 0
Views: 1368

Mangle v6

Good to all, First of all, excuse my language. I have some doubts about the mangle in routerOS v6. I have a WAN interface ether1 (ftth 120/10) and 3 LAN interfaces (ether2, vlan 10 and vlan 11). I am trying to configure a QoS system in version 6 + HTB, the problem I encounter is when using the globa...