MikroTik

wispmikrotik

Hi,

Version? 7.20ab2XX?

wispmikrotik

I did it. Currently both of L009 are working on 7.16.2. I downgraded directly from 7.18.2. With 7.18.2 routers rebooted after 15-20 minutes. With 7.16.2 they are working already 3 hours 12 minutes and no error and crash. One of routers has constant stream of data over IPSec (around 50Mbit). I notic...

wispmikrotik

Hi, L009 --> IKEv2 with aes256-CTR router reboot with kernel panic Constantly in a boot loop. All LEDs light up, then reboot. Removing the WAN cable to prevent the IKEv2 peer from establishing itself resolves the issue. Supout - SUP-182901 ---------------------------------> UPDATE <-----------------...

wispmikrotik

Here an update... Oskars K. 23 minutes ago Hello, its under the development. Best regards, Hi, If this were implemented in the next 2 months (maximum), we could submit an offer with the manufacturer MikroTik for a lot that we have won in Spain with a public administration for the registration of 35...

wispmikrotik

Did you upgrade both RouterOS and firmware, @wispmikrotik?

Yes, both (I always do).

I also tried only updating routerOS with the same result, the office started its service and I had to leave it with v7.12.2

Regards,

wispmikrotik

Any news in this topic? I am using about ~300-400 HEX S in my network and only some of them has problem as described. Unfortunately I didn't find solution yet. Hi, I encountered this issue this morning. Updating a Hex S from 7.12.2 to 7.18.2, all ports started flapping, not just the SFP. The router...

wispmikrotik

Many issues with the SFP in hexS, constant down/up.
It had to be downgraded after 10 minutes.
Which SFP modules are having issues?

For example:

wispmikrotik

Hi,

Many issues with the SFP in hexS, constant down/up.

It had to be downgraded after 10 minutes.

Regards,

wispmikrotik

Can you share your config? Just to be sure... /ip dns export ip dns set cache-max-ttl=5d cache-size=5000KiB doh-max-concurrent-queries=5000 max-concurrent-queries=5000 max-concurrent-tcp-sessions=50 servers=192.168.2.2 verify-doh-cert=yes @matiss sent supout Hi, If you don't use DoH why do you have...

wispmikrotik

There has been at least one "sensitive data handling" bug that I was able to discover and it is partially fixed, but it is questionable that there are no other bugs related to data handling which cannot either leak data or corrupt the configuration on managed device. This is much bigger p...

wispmikrotik

It looks more like the MAC of a VRRP group.

wispmikrotik

Thanks!

wispmikrotik

Of course, you cannot change distance on remote machines. Distance is a local parameter.

Hi,

How is this translated in mikrotik?

router rip
  version 2
  redistribute bgp 65000 metric 200
 exit

I am interested in the redistribute BGP metric

Thanks!

wispmikrotik

Hi, I need to change the distance of BGP and RIP routes in the "OUT FILTER" output and the following syntax does not work: For example, I need the routes advertised to my RIP or BGP neighbor to set the distance to RIP 200 and BGP 5: /routing/filter/rule add chain=RIP_OUT disabled=no rule=&...

wispmikrotik

Hi,

They will be IP in IP >Firewall>Address-List. Otherwise, he'll be completely crazy xD

Regards,

wispmikrotik

Hola, Esto es un foro de habla inglesa, nadie te ayudará en español. De todas formas, adjunta la configuración aplicada y un esquema de red para que la gente te pueda ayudar. /export hide-sensitive=yes This is an English speaking forum, no one will help you in Spanish. Anyway, please attach the appl...

wispmikrotik

Subtle advertising?

wispmikrotik

Hi,

Time to try this version, I like subversions .2 or higher.

Thanks team mikrotik.

Regards,

wispmikrotik

Correct, I am not a native, and my language cannot be understood properly.

wispmikrotik

wispmikrotik Strange things - how device mode affects to wireguard and sstp? In one place i managed cold power cycle 4011, but nothing changes. Thanks MT! Now I'm waiting for darkness to come out of my shelter and walk around the points with equipment. Good job! That is a question for mikrotik, nob...

wispmikrotik

Looks like I'm screwed. There were two remote sites(4011 and 941), updated to 7.17.1, now they don't connect via wireguard to chr, that was updated a little earlier to 7.17.1(and all works with 7.17.1 and 7.16). No remote hands, no way to reach them now. Worse, there was a backup sstp connection, w...

wispmikrotik

Hi,

Try protocol=udp

Can you test the LAN ip with src-addres? both ping and traceroute?

/ping 8.8.8.8 src-address=<IP_LAN>
/tool/traceroute scr-address=<IP_LAN> 8.8.8.8

Regards,

wispmikrotik

Hi,

Try /tool/traceroute protocol=icmp 8.8.8.8

Regards,

wispmikrotik

Hi,

Do you have an ip addressing on the sfp+1 physical interface?

Without the configuration we can only guess... possible problems.

Regards,

wispmikrotik

There should be no "thick borders every x lines". Post what screen resolution, DPI, zoom you have in your system and also whether you are using zoom in winbox itself.

Beta 17 fix issue. Very thanks!

wispmikrotik

Hi, hex constantly rebooting itself. Only has IPsec tunnel configured for lab. Confirmed, in v7.18beta2 the IPsec tunnels are established but no "traffic" passes through them and the router restarts by watchdog without creating a supout automatically. Reverting to v7.17 resolves the probl...

wispmikrotik

Hi, hex constantly rebooting itself. Only has IPsec tunnel configured for lab. MikroTik RouterOS 7.18beta2 (c) 1999-2025 https://www.mikrotik.com/ Press F1 for help (7 messages not shown) 2025-01-21 16:29:20 system,error,critical router was rebooted without proper shutdown by watchdog timer 2025-01-...

wispmikrotik

Ouhhhhh thanks!

wispmikrotik

Ok, I have serious problem with DHCP client after upgrade to 7.17, as it drops default route on multiple type of devices (RB4011, SXTsq 5 ac). I experienced this on RCs and betas too. Routers creating autosupout.rif file after dropping def route. I try to figure out what triggers this issue. Where ...

wispmikrotik

I respect that you want to be a MikroTik beta tester, but in a network with real network administrators and managers and hundreds of users to explain to if a software update goes wrong, this is something not everyone can afford. I believe there’s been a misunderstanding. I’m not looking to be a bet...

wispmikrotik

Yeah and some random guy here dreamed *THIS* will be a long-term, because it took so long... LOL This is a typical MT point-zero release, 3 steps forward and 5 back... The long-term is as far away as with the v7.0 release. This is because many people wait for the final release to pull the trigger: ...

wispmikrotik

Hi,

Arggg it seems like there are too many bugs in this version ...

wispmikrotik

Hi,

Mikrotik when will we see the stable v7.17 version? We need certain changes/improvements in ipsec applied in v7.17.

Regards,

wispmikrotik

There should be no "thick borders every x lines". Post what screen resolution, DPI, zoom you have in your system and also whether you are using zoom in winbox itself. Hi, Attach. Winbox: https://i.imgur.com/n3CSTHg.jpeg Windows 10: https://i.imgur.com/b12k3C9.png Thanks. Regards,

wispmikrotik

I don't like these "thick borders" every few lines. Is this a rendering bug or on purpose (it looks ugly and distracting)?

+1000 It's horrible and useless, it makes you lose yourself in what you're visualizing.

wispmikrotik

New beta 7.18 for christmas?

wispmikrotik

What's new in v4.0beta13:

*) implement opened windows list
*) implement global menu search

Very thanks.

Regards,

wispmikrotik

Hi,

And in v7.16.X there are still problems with ipsec policies, resolved in v7.17rc1.

Surely you are already working on the new v7.18 beta.

Greetings

wispmikrotik

Do I understand that in previous versions the data was fictitious?

wispmikrotik

What's new in 7.17rc1 (2024-Nov-22 11:42):

*) health - removed board-temperature on RB5009UPr+S+IN device;

Why is it deleted? Is this value going to come back?

wispmikrotik

Hi,

New version usable with all the things pending for Christmas?

Regards,

wispmikrotik

New beta? When?
Normis said that the development should be fast after developing it from the beginning..

Vlan tree, qos tree, missing ...

wispmikrotik

WinBox 4 is great in a lot of ways, but in one particular way it is a HUGE regression..... TABS! +1000 Along with: Missing tree view of sub-items in tables, like VLANs, Queues, etc. This should be very "agile" to implement as Normis indicated, since they have programmed it from the beginn...

wispmikrotik

Next will be the improved hex S?

We need the sfp port and better ipsec performance, although I don't think the improvement will be significant.

wispmikrotik

Hi,

We need to show you your configuration.

Is NAT applied? Have you tested the policies level=unique?

You need to provide more details.

Regards,

wispmikrotik

Need colors in log. Like Red for errors and other. +2 still not (re)implemented and also finally a TIMEOUT when moving the mouse between menu items on the left (like, not instant. a short delay when moving between e.g. MPLS and Routing entries +3 It also needs to be implemented as soon as possible:...

wispmikrotik

Hi,

That's what I thought, thanks for confirming.

Regards,

wispmikrotik

Hi, L009 no inter-VLAN hardware offload. I'm doing lab tests with a L009 for vlan-filtering and it only gets the wire speed if both ports are on the same vlan. If they are on different vlans, it tops out at ~300Mb (I know the product's test pages), I want to know why it doesn't do "switching&qu...

wispmikrotik

RouterOS version 7.16 have been released in the "v7 stable" channel! *) ike1 - removed unsupported NAT-D drafts with invalid payload numbers; *) ike2 - improved performance by balancing multicore CPU usage for key exchange calculation; Hi, Version v7.16 and v7.17xx are totally broken for ...

wispmikrotik

Hi Normis, Do you have an ETA for adding the following features? - Missing tree view of sub-items in tables, like VLANs, Queues, etc. - Log, Ping etc. windows don't automatically go to end of entries As you indicated in your first post, the changes must be "agile" since you programmed it f...

wispmikrotik

Hi, v7.17Beta2 and v7.17ab57. They cause me a "high" CPU consumption, IPSEC process. Reverting to v7.16 "stabilizes" the CPU, but policies may become stuck again, we'll see over the weekend. *) crypto - improve crypto speeds; 🤔 Hi, Of course, now a l009uigs-rm has the H flag in ...

wispmikrotik

Hi,

Filter "Archived"

Regards,

wispmikrotik

Hi,

v7.17Beta2 and v7.17ab57. They cause me a "high" CPU consumption, IPSEC process. Reverting to v7.16 "stabilizes" the CPU, but policies may become stuck again, we'll see over the weekend.

Regards,

wispmikrotik

ab57 is newer than beta2

Thanks Normis, have a nice weekend and thanks for your hard work.

Regards,

wispmikrotik

Hi,

Does it have the same changes as the v7.17ab57 version provided by the MikroTik team for a possible IPsec policy solution?

Regards,

wispmikrotik

They have already modified it, now these are the real results. CRS304-4XG-IN CRS304-4XG all port switching results Mode Configuration 1518 byte 512 byte 64 byte kpps Mbps kpps Mbps kpps Mbps Switching Non blocking Layer 2 throughput 3251 39,480.1 9,398.5 38,496.3 59,523.8 30,476.2 Switching Non bloc...

wispmikrotik

Hi, Some of these 3 changes (I would discard the DPD) is making after a while, several polycy stop working between a remote hexs and L009. The polycy is "established" but traffic stops passing to the tunnel, with a Disable/enable of the Policy everything works again .... I have not suffere...

wispmikrotik

That's what I meant when I asked about the test results... it's like having a Ferrari with a 90 HP Renault engine.

wispmikrotik

Hi,

CRS304 switching results are they correct?

Regards,

wispmikrotik

Hi,

@normis, Is there any timeline for implementing this?

 Missing tree view of sub-items in tables, like VLANs, Queues, etc.

Thanks!

wispmikrotik

Hi,

Do you have more information on which devices it is available? or how to check?

*) qos-hw - added H and I flags to queues;
*) qos-hw - added new monitoring properties for ports and global QoS stats;

Regards,

wispmikrotik

Hi,

From my point of view, it seems "impossible" to work with the new winbox until we have the following:

Missing tree view of sub-items in tables, like VLANs, Queues, etc.

Thank you.

wispmikrotik

:) Wow, thanks a lot for the effort Mikrotik team!!

wispmikrotik

Hi, No problems with a PoE version. https://i.imgur.com/wG0fNNe.png /system/resource/print uptime: 11w6d2h15m57s version: 7.15.2 (stable) build-time: 2024-06-26 11:42:37 factory-software: 7.4.1 free-memory: 850.0MiB total-memory: 1024.0MiB cpu: ARM64 cpu-count: 4 cpu-frequency: 1400MHz cpu-load: 5% ...

wispmikrotik

Hi

We are not in a hurry xD, we only saw that in its official documentation and we were surprised to see v7.17 with green markers.

wispmikrotik

I am wondering the same. This cycle does take really long... My guess is that they are doing some internal changes to polish behavior with new Winbox 4, but - who knows...

Hi,

New stable?

Regards,

wispmikrotik

Hi,

Problem CLI:

When you use "~" the legitimacy of the letter is lost, you don't know if it is writing or not.

Winbox 3 = OK

Regards,

wispmikrotik

Hi,

How do I solve it? Can you add the configuration you are working on?

Regards,

wispmikrotik

... is necessary to have QCA9984 which is only for RB4011iGS+5HacQ2HnD-IN ...
... and for RBD25G-5HPacQD2HPnD (Audience). Admittedly Audience has flash larger than 16MB as well.

He is right, I didn't see him.

Thank you.

wispmikrotik

Hi, Mikrotik L009 port 1 of the switch disappears, adding the port on a bridge makes it have no HW. [tuPrima@core01_plzva01] > /interface/ethernet/switch/port/print Flags: R - RUNNING Columns: NAME, SWITCH # NAME SWITCH 0 ether2 switch1 1 ether3 switch1 2 ether4 switch1 3 R ether5 switch1 4 R ether6...

wispmikrotik

Hi, What version is it? Sonoma or Ventura? If it is Sonoma, Apple decided at some point without "warning" to start establishing the PFS and when the rekey occurs it does not match its policy (DH2048) and drops the connection. I installed a profile from appleconfigurator according to my con...

wispmikrotik

Hi,

Have they opened a support ticket for mikrotik?

https://help.mikrotik.com/servicedesk/s ... on=portals

Regards,

wispmikrotik

Hi,

BUG reported in several threads, including in the launch thread, mikrotik support indicated that it is recognized and they will work on it.

Regards,

wispmikrotik

RouterOS version 7.14 have been released in the "v7 stable" channel!

What's new in 7.14 (2024-Feb-29 09:10):

Some kind of mechanism to import/export routes from one vrf to another within same router --> Thanks!

wispmikrotik

Hi, For those who are interested, since the issue of including the WAN port in the same bridge is discussed (although I don't know if it is in this topic). Ask support about vlan configuration on L009 and RB5009: Both the RB5009 and L009 block diagram shows that the SFP port plugs directly into the ...

wispmikrotik

Hi,

@Normis, Do we have progress? When can we see IPsec hardware acceleration for the L009?

Thanks,

wispmikrotik

Hi,

As they already told you, you should look at other manufacturers (cisco, juniper for example).

Regards,

wispmikrotik

*) system - expose "lo" interface;

Nice

Regards,

wispmikrotik

Hi,

There is talk of adjusting the TCP MSS to avoid some path with the PMTUD broken (possible icmpv4 block).

MSS != MTU.

Leave the MTU on the ethernet interface = 1500.

Regards,

wispmikrotik

Hi, What position is that src NAT rule in? Do you have fasttrack? To help you, can you show us the following command? /export hide-sensitive As Sindy always indicates: between [ code ] and [ /code ] tags, after removing any additional sensitive information not suppressed by hide-sensitive (public ad...

wispmikrotik

Hi,

Same issue ....

Regards,

wispmikrotik

When I setup all my settings on my RB750GR3 and started speedtest it have 80-90% CPU usage on 300Mbps.

Hi,

Review the following information:

https://help.mikrotik.com/docs/display/ ... -FastTrack

Regards,

wispmikrotik

Hi, I attach temperatures of some of my hex s managed and without any problem in years: Routerboard: routerboard: yes board-name: hEX S model: RB760iGS Temp CPU: 0 voltage 23.8 V 1 temperature 57 C Temp SFP: sfp-temperature: 70C sfp-supply-voltage: 3.265V sfp-tx-bias-current: 15mA sfp-tx-power: -6.4...

wispmikrotik

Hi, No no, his is because of stupid customer requirements... I have no possibility now to try it for myself (2 weeks of stock with my supplier). - We request the consumption of the router in "empty" only on. - It asks us for the routing consumption with the 8 fully linked 1Gb Ethernet port...

wispmikrotik

Hi,

Any charitable users with an L009 that can measure consumption?

Thank you so much.
Regards,

wispmikrotik

Hi, I know that the "official data" is found on the mikrotik description page, but the question is for users who already have said device to know in a real environment what power consumption it has in real life. Someone?, Power consumption: - with usb? - with SFP? - How many 1Gb Ethernet p...

wispmikrotik

Normal

It has already rained a lot since then.

Thanks for answering!

wispmikrotik

I normally use 30 seconds and 3 failures for fast response. I think indeed it may be fatal when the DPD interval * retries at one side is smaller than the DPD interval at the other side, but I am not sure. I am investigating a problem where one user cannot maintain the connection and is reported as...

wispmikrotik

Hi, RouterOS (https://help.mikrotik.com/docs/display/ROS/RouterOS): RouterOS is a network operating system based on the Linux kernel, pre-installed on RouterBOARD devices. It can also be installed on a PC, turning it into a router with a firewall, VPN server and client, and wireless access point. Th...

wispmikrotik

@normis No newsetter?

wispmikrotik

Hi,

Please read this article carefully, it may be useful to you.

https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

Regards,

wispmikrotik

Hi,

Did you read the release thread for the version? viewtopic.php?t=198641

Regards,

wispmikrotik

Hello,

I had similar problems (now under observation) with the same version 7.10.2 on a hAP ax lite.

Currently on version 7.11 with no crashes in 3 days.

Regards,

wispmikrotik

Hi,

What do you intend to achieve?

Remove the router and ONT from the ISP and directly connect the fiber to the mikrotik?

If so, I'm sorry to tell you that that SFP module is useless for this. You need a SFP GPON ONT.

Regards,

wispmikrotik

Hi,

Of course. RIPv2 is the routing protocol for "small networks".

It's not as scalable as BGP or OSPF and its convergence times aren't as good, but it will work in your scenario.

Regards,

wispmikrotik

Hi, For such a simple scenario, you could, as indicated, prioritize with static routes and better AD. If you want to use routing protocols, see scheme: https://i.imgur.com/ZXsAYUw.png Each office will receive the routes from the other locations via OSPF or BGP. To prioritize the routes of the primar...

wispmikrotik

I removed unnecessary report but you answered in the meantime so I leave your comment to nonexisting post. Hello @BartoszP, Thank you, as indicated, I think Normis and I wrote practically at the same time, if you see that my comments do not contribute anything (they do not) you can delete it :). Th...

wispmikrotik

Hi, Contact support (I think you already did) regarding any key related issues. forum members can't help you . Regards, Why SPAM ? What does your post add that @Normis didn't already write??? To be honest, I didn't see Normis's, if you notice we wrote almost at the same time. What doesn't contribut...

wispmikrotik

Hi,

Do you have a network design?

Will the second central (backup) node be on LAN with the primary central node?

Regards,

wispmikrotik

Hi,

Contact support (I think you already did) regarding any key related issues. forum members can't help you .

Regards,

wispmikrotik

Hi,

/ip firewall address-list add list="License_Mikrotik" address=license.mikrotik.com

/ip firewall filter add action=accept src-address-list=License_Mikrotik chain=input

Move that rule, before the last one (drop all).

Regards,

wispmikrotik

In this case, it's against a VPN provider (surfshark in this case), which I don't know will use on your side.

wispmikrotik

Hi, So we're in the same problem, it seems (SUP-120165). I am experiencing disconnections every 30 minutes, which matches the "Lifetime" of phase 2 (proposal) even though I have "PFS Pool" set to none. In previous versions I did not notice this behavior. IPsec-SA expired before c...

wispmikrotik

IKE2 is broken since 7.10, can't get site to site working properly. Created SUP-117869 two months ago but issue still persists.

Hi,

What happens to him? What is your setup?

Regards,

wispmikrotik

What's new in 7.11beta2 (2023-Jun-21 14:39):

*) netwatch - added "src-address" property;

Thanks!!!!!! Finally, no more mangle rules for doing this.

wispmikrotik

https://forum.mikrotik.com/viewtopic.php?t=196170 We have introduced several improvements regarding the AX stability. It is still a work in progress, but in order to gather more feedback as soon as possible, here is a link to the latest alpha version that contains these fixes. The fixes are mainly t...

wispmikrotik

Hi,

What is the change here?

What's new in 7.10rc6 (2023-Jun-13 10:52):

!) route - added BFD;

What's new in 7.10rc3 (2023-Jun-02 09:43):

!) route - added BFD;

Regards,

wispmikrotik

viewtopic.php?p=1003732#p1003732

!) route - added BFD (CLI only);

wispmikrotik

Thank you very much mikrotik!

wispmikrotik

viewtopic.php?t=195733

wispmikrotik

The same here.

wispmikrotik

Thank you so much @mkx

Resolved. Everything else contributes nothing.

wispmikrotik

??

????

wispmikrotik

Hi, On the page of each product, in the section "IPsec test results" https://mikrotik.com/product/RB750Gr3#fndtn-testresults What does the mode column mean? Mode - Single tunnel - This is a site to site tunnel, a tunnel or is it referring to SHA1?. Mode - 256 tunnels - Is this 256 tunnels ...

wispmikrotik

Hi,

Did you check the features of the router before buying it?

https://mikrotik.com/product/rb4011igs_rm

There is no 2.5Gb port. Ether1 is 10/100/1000 (like the rest of the ports except SFP+).

Regards,

wispmikrotik

And see what really applies?

With your ISP's modem do you really get the speed?

wispmikrotik

Hi,

Did you try fasttrack?

https://help.mikrotik.com/docs/pages/vi ... -Fasttrack

Regards,

wispmikrotik

Hi,

What is the contracted speed with your ISP?

Export settings and share:

/export hide-sensitive

Regards,

wispmikrotik

Sorry :(

Thanks!

wispmikrotik

My ticket re: SUP-111720 has been confirmed as a bug by support after sending them a supout, they will look into it.
Since my device already has a functioning config, there is no further problem for me. I already knew that.

Can you give us details?

Thanks!

wispmikrotik

IKE issue SUP-111669, please reply!

Can you give us details?

Thanks!

wispmikrotik

Hi, Problems with DNS (DoH) in chrome browser, All queries give: DNS_PROBE_FINISHED_BAD_SECURE_CONFIG With mozilla there is no problem, back to version 7.8 everything is fixed. /ip dns set allow-remote-requests=yes cache-size=4096KiB use-doh-server=https://dns.nextdns.io/<loquesea> verify-doh-cert=y...

wispmikrotik

Hi,

What is the identity of your peer (digital signature)?

Can you attach the mikrotik log when you try to connect?

/system logging add topics=ipsec,!debug

Regards,

wispmikrotik

Hi,

In order to help you, we need you to attach the following:

- Screenshot of the settings applied in macOS.
- Mikrotik router configuration:

/ip ipsec export hide-sensitive

- Mikrotik and macOS logs when the failure occurs.

Regards,

wispmikrotik

Hi,

Is the certificate marked as trust in macOS?

What is your setting on the mikrotik?

/ip ipsec export hide-sensitive

Regards,

wispmikrotik

Hi, Thank you all, I solved my problems. In my case it was a matter of the EAP configuration of the radius server, I needed to have the CA and SV certificate (which the mikrotik already had and it worked before.....). @cklee234 Can you attach screenshots of the configuration in the macOS and the log...

wispmikrotik

Hi, Thanks. I managed to get the IKEv2 client working with certificates. But when it gets involved in the EAP process for radius, it doesn't work: NEIKEv2Provider: (NetworkExtension) [com.apple.networkextension:] IKEv2Session: Processing response for message 5 NEIKEv2Provider: (NetworkExtension) [co...

wispmikrotik

OK, thanks a lot!

I have the same and it still doesn't work.

I'll keep checking.

Thank you so much.

Regards,

wispmikrotik

With username/password + certificate?
With certificate only (User Authentication: None, Machine Authentication: Certificate).

Hi,

Self generated certificates? RSA2048? ECDP?

Thanks!

wispmikrotik

I successfully connect to IKEv2 VPN on macOS 13.2.1 M1 Max CPU both to 6.x branch and 7.x branch. Try also watch logs of IPsec in macOS Console.app.

With username/password + certificate?

Without certificate working.

Note: Support opened last 21/02/2023 with no response.

Regards,

wispmikrotik

Hi, Are you still having the same problem? I am experiencing this issue on macOS ventura 13.2.1. Config mikrotik server: /ip ipsec mode-config add address-pool=pool_full name=cfg_ikev2 /ip ipsec policy group add name=group_ikev2 /ip ipsec profile set [ find default=yes ] dh-group=modp1024 enc-algori...

wispmikrotik

Ok, thanks pcunite!

wispmikrotik

Thanks!

wispmikrotik

Hi, I have just received a RB5009, supposedly new, but I am suspicious of 2 things: - The product has on one side, which comes out of its interior a kind of oil. https://i.imgur.com/b3RTRcX.png - The factory version and the current one loaded do not match: Factory software: 7.4.1 Version: 7.6 (stabl...

wispmikrotik

*) ipsec - improved IKE payload processing;

Reported on ticket SUP-100760. In less than a week resolved. Thanks mikrotik!

Regards,

wispmikrotik

Very thanks!

wispmikrotik

BGP: sessions screen in winbox (3.37) shows an uptime of 497d 02:23:00 shortly after the reboot at installation, ticking DOWN instead of UP!

+1

Regards,

wispmikrotik

😍 Thanks!

wispmikrotik

rb5009 PoE 😍😍😍

wispmikrotik

Request for src-address is logged in our system.

Thanks!

wispmikrotik

What's new in 7.4rc2 (2022-Jul-07 15:29):
*) netwatch - added support for more advanced probing;

@emils

Possibility to set the src-address?
VRF support?

Thank you very much!
Regards,

wispmikrotik

New beta today with BFD support, full VRF support and reported bug fixes?

:)

wispmikrotik

Hi, Log: 09:51:18 ipsec,error can't verify peer's certificate from store Are you following the supplier's instructions? Does the certificate of the provider certification installed? https://hide.me/en/vpnsetup/mikrotik/ikev2/ /tool fetch url="https://hide.me/downloads/hide.me.pem" /certifi...

wispmikrotik

@pe1chl Do you like it better like this?

wispmikrotik

@strods
Sat Mar 05, 2022 8:30 am

Do we have a date for the new rc with bug fixes, and possible feature additions?

Regards,

wispmikrotik

Thanks Mikrotik!

We are eagerly awaiting the next RC with the bug fixes.

wispmikrotik

Hi,

Failed to disable IP > Firewall > Service Ports :(

[admin@r1] > /ip/firewall/service-port/disable [find]
failure: module udplite is built-in and cannot be individually disabled

DCCP, STCP and udplite not disabled.

Regards ...

wispmikrotik

Hi,

High CPU on mAPLite:

Only IKEv2 + Cake.

V7rc2: 100%
V7.1.1: 8%

Regards,

As indicated in other posts, if I have more than X entries in the address lists, the CPU goes to 100%.

Regards,

wispmikrotik

Hi,

High CPU on mAPLite:

Only IKEv2 + Cake.

V7rc2: 100%
V7.1.1: 8%

Regards,

wispmikrotik

https://help.mikrotik.com/docs/display/ ... col+Status

Some kind of mechanism to import/export routes from one vrf to another within same router. N/A

Please implement a similar route targets from Cisco to VRF-Lite.

Regards,

wispmikrotik

Perfect! thank you very much mikrotik!

wispmikrotik

Hi, I answer: Which is the one used if both are configured? Order of priority: 1- Configuration 2- Channel I could only find on the AP in the Winbox on Wireless Tables/Wifi Interfaces/Status, where the Channel field shows some dBm value: 2412/20/gn(5dBm) Unfortunately this not, what I have configure...

wispmikrotik

Hi, Thanks @normis, I attach some tests, same device, same distance: Horizontal: https://i.imgur.com/Bai2eI0.jpg Vertical: https://i.imgur.com/qB90J8z.jpg 1X1 Horizontal: https://i.imgur.com/zyK2MpP.png 1X1 Vertical: https://i.imgur.com/ZITjimX.png 2X2 Horizontal: https://i.imgur.com/wn5o6SZ.png 2X2...

wispmikrotik

We hope to see what the rest of the experts say!

Regards,

wispmikrotik

Hi,

I know this is a stupid question but how should the mAP Lite sit?, vertically or horizontally?

Being an integrated omnidirectional antenna (2 chains), it will have a specific polarization and the "donut" will be more efficient horizontally or vertically.

Greetings

wispmikrotik

Running Doom on CCR1072's LCD is on the roadmap /s

wispmikrotik

Any news from VTI?

wispmikrotik

+1 mipsbe

wispmikrotik

Here it is!!

viewtopic.php?f=1&t=178063

wispmikrotik

Kernel failure 5mins after setting cake to my simple queue..I sent you supout (SUP-58379)

Hi,

Can you share your settings? I have something similar and I don't have that problem. I would like to try it, thank you!

Regards,

wispmikrotik

No it is not the same as you can see by the build time.

Ok, thank you so much!!

Regards,

wispmikrotik

Hi,

The RC2 that we receive by support email, is it the same RC2 as the one you publish? or should we re-update?

Regards,

wispmikrotik

RouterOS version 7.1rc1 has been released in public "development" channel! What's new in 7.1rc1 (2021-Aug-19 13:06): !) added support for IPv6 NAT (CLI only); !) added support for L2TPv3 (CLI only); *) added "expired" user status with suggestion to change password (WinBox v3.29 ...

wispmikrotik

Hi,

Paste the command output:

 /ip firewall export hide-sensitive

Regards,

wispmikrotik

Hi,

When you ping from mikrotik itself, indicate in the source an IP address that matches the ipsec policies.

Example:
Mikrotik: 192.168.1.1/24
Pfsense: 192.168.2.1/24

Routeros> ping 192.168.2.1 src-address=192.168.1.1

Regards,

wispmikrotik

What's new in 7.1beta6 (2021-May-18 14:49):

!) ported features and fixes introduced in v6.49;

All the features of v6.49beta46?

Regards,

wispmikrotik

Hi,

This new beta already includes the changes from the v6.48.2?

Or are they 2 totally independent versions?

Regards,
All 6.48.2 version changes are in this beta build as well.

Thanks!!!

wispmikrotik

Hi, This new beta already includes the changes from the v6.48.2? For example: *) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests; *) ike2 - fixed DH group negotiation with EAP; *) ospf - fixed type-7 LSA translation to type-5; Or are they 2 totally independent versions? Regards,

wispmikrotik

Hi,

Total disaster:

All current versions affected :(

long term: v6.47.9
stable: v6.48.1
testing: v6.49beta11
development: v7.1beta4

Regards.

wispmikrotik

Hi,

SUP-43694

Confirmed a new bug in OSPF NSSA convert LSA type 7 to type 5:

viewtopic.php?f=14&t=173212&p=847007#p847007

Regards,

wispmikrotik

Hi,

Confirmed is a BUG

v6.46 - OK

v6.48.1 and v6.49beta11 not working

Regards

wispmikrotik

Hi, Thanks for the answers, yes, I have a ticket open to mikrotik for 7 days without an answer. Regarding the topology, I was testing ospf in mikrotik, as for the network is not correct, why? This same network you change R2 for a cisco, vyos, junos and it works perfectly, it is broken in translate-r...

wispmikrotik

Hi, Following RFC 1587 "4.1 Translating Type-7 LSAs Into Type-5 LSAs", and according to mikrotik's own documentation "https://help.mikrotik.com/docs/display/ROS/OSPF+Case+Studies+and+Solutions" Section LSA Types: "type 7 - type 7 LSAs are used to tell the ABRs about these ex...

wispmikrotik

Hi,

Good,

I use this provider and I have no problem. On its website it explains how to configure the service.

Check if I loaded the certificate, check the username / password.

Contact support.

Regards.

wispmikrotik

Hi,

Error, sorry.

Regards.

wispmikrotik

Hi, https://i.imgur.com/p1kPePk.jpg R1 (mikrotik CE1) => PE1 (cisco) => VRF100 R2 (mikrotik CE2) => PE1 (cisco) => VRF200 R1: LAN 10.4.4.0/24 R2: LAN 10.3.3.0/24 R1 is intended to know R1's LAN 10.3.3.0/24, with cisco it works with mikrotik no. 1) PE CISCO: I am going to give you the example with th...

wispmikrotik

Hi,

RADIUS Disconnect-Request messages supported for IPsec.

RFC 3576
40 - Disconnect-Request [RFC2882]
41 - Disconnect-ACK [RFC2882]
42 - Disconnect-NAK [RFC2882]
43 - CoA-Request [RFC2882]
44 - CoA-ACK [RFC2882]
45 - CoA-NAK [RFC2882]

Regards,

wispmikrotik

Description
Device: mAPLite
Version: v7.0beta4
Issue: OpenVPN with UDP not working.

UDP does not work properly, you can connect, but you do not browse, and it disconnects only within a few seconds.

wispmikrotik

Solved:

viewtopic.php?f=14&t=154057

wispmikrotik

You need to send more than the username. I believe the IP as well. What if their are two users with the same username logged in Hi, Thanks for answering. Not that, mikrotik support @Emils told me, that at the moment ipsec ikev2 eap radius, does not support disconnection method, they will look to im...

wispmikrotik

Hi,

Support #SUP-1932

Waiting ...

Regards.

wispmikrotik

nobody?

wispmikrotik

Hi, Right now I have configured freeradius as a radius server, and mikrotik IKEv2 + eap radius. The problem is when disconnecting users, skip error 503: root@sv10-lab:/home# echo user-name=mk10 | radclient -x 2.2.2.2:3799 disconnect nas1234 Sending Disconnect-Request of id 252 to 2.2.2.2 port 3799 U...

wispmikrotik

Hi, I have a mikrotik router with ppp (openvpn, pptp, sstp, l2tp + ipsec) + DMARadius, working correctly. If the user expires, the radius disconnects him through the UDP / 1700 port correctly. Now we have implemented IKEv2 (eap radius) + DMARadius but it does not disconnect users: Error 503 mikrotik...

wispmikrotik

When using a wildcard than add also the bare domain to the SAN. Maybe that solves it.

It works!! Thank you very much!!

wispmikrotik

IPsec IKEv2 configuration for multiple servers with a single CA root certificate? 1.1 - WIKI: * Common name should contain IP or DNS name of the server; It is possible to use an example DNS: "*.domain.com" that includes server1.domain.com and server2.domain.com? * SAN (subject alternative ...

wispmikrotik

HW: mAP Lite ROS: 7.0beta3 OpenVPN UDP: The connection to the server occurs, but it is not navigated through the VPN. Configuration: [admin@rt01_v7] > /export hide-sensitive # oct/24/2019 09:40:35 by RouterOS 7.0beta3 # software id = # # model = RouterBOARD mAP L-2nD # serial number = 73B207163703 /...

wispmikrotik

Hi, Log: Jan/01/2002 03:21:06 wireless,debug wlan1: must select network Jan/01/2002 03:21:06 wireless,debug D8:68:C3:44:3F:89: on 2462 AP: yes SSID TocToc caps 0x411 rates 0xCCK:1-11 OFDM:6-54 BW:1x SGI:1x HT:0-7 basic 0xCCK:1-11 MT: no Jan/01/2002 03:21:06 wireless,debug 80:29:94:F4:8A:7C: on 2437 ...

wispmikrotik

Version number; : ROS 7.0beta3 Router's model; : mAP Lite Not working wireless, It disconnects constantly. There is no parameter that stabilizes the connection. @MikroTik] > /system/resource/pr uptime: 36m4s version: 7.0beta3 (development) build-time: Oct/22/2019 09:34:17 factory-software: 6.36 free...

wispmikrotik

Hi, all! I can confirm, that 5ghz band does not work on RouterBOARD M33G with Athereros 5008 pci-e card installed. Also upgrade of any of my mipsbe (mAP 2n,mAP L-2nD) platform fails, because ipv6 package is broken. ----------------- Mar/23/2019 10:54:24 system,error broken package system-6.45beta19...

wispmikrotik

Hi,

The file system in mikrotik does not allow creating folders from the console.
To create folders you must do it from SMB and then make folders from your Windows Explorer.

Regards.

wispmikrotik

I am not familiar with 1.1.1.1 is that a legitimate DNS server?? Overall your setup is missing so many things and most of all any firewall rules. I suggest you download the latest stable firmware 6.43.8 and reset to defaults. For example missing an IP pool missing a DHCP-SERVER NEWORK no firewall f...

wispmikrotik

Please post your config /export hide=sensitive file=mylatestconfig It will help determine how your DNS and firewall rules are setup. We may also want to consider redirect NAT rules for DNS. Hi anav, Thanks. export: # jan/18/2019 20:37:41 by RouterOS 6.44beta54 # software id = 06GQ-R3YM # /interface...

wispmikrotik

Hi, I am seeing in my mikrotik router some connection to dns "k3yhol3.ddns.net", this dns has the IP 0.0.0.0. Linux (nslookup): Non-authoritative answer: Name: k3yhol3.ddns.net Address: 0.0.0.0 ping web: https://i.imgur.com/Cegqrsk.png What's up with this domain? I do not understand anythi...

wispmikrotik

Hi, In the official mikrotik wiki, talk about this rule: /ip firewall mangle add out-interface=pppoe-out protocol=tcp tcp-flags=syn action=change-mss new-mss=1300 chain=forward tcp-mss=1301-65535 https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle#Change_MSS 1-) Where do these values come from ...

wispmikrotik

Damn! Haven't touched this topic for a while, but FINALLY someone came up with a working OpenVPN implementation! Finally, 2018, some hope for Mikrotik! SaferVPN.com https://support.safervpn.com/hc/en-us/articles/115004435985-Setup-OpenVPN-manually-on-Mikrotik-Router Another provider that has suppor...

wispmikrotik

just to know, do you know an approximate release date? I would not wait all 2019 ...

Maybe @normis can say a date, will it be before 2020?

wispmikrotik

2019?
Router OS v7 is never going to happen.

Well ... so let's get routeros v8.0.0 ...

wispmikrotik

2019?

wispmikrotik

The software bug is the cause of the issue described here. This software bugfix should be enough to reevaluate the above decision, but that's for the legal deparment to sort out. I can only say, that this is an ongoing matter and MikroTik continues the work to fully resolve this.

Thanks.

Search found 239 matches