MikroTik

obscurus

About 5 -10 per day.
Has anyone had similar experiences?
You are not alone. If you are on Cloudflare I noticed the same thing.
DoH.png

The same issue "DoH server connection error: Idle timeout - waiting data" with Cloudflare Doh after upgrade to v7.13

obscurus

After update to v7.10 on RB5009 and BFD enable i see OSPFv2 crypto sequence invalid spam in log every 2-5 second, but i can't see any problem with ospf. ospf-1 { version: 2 router-id: 192.168.77.1 } ospf-area-1 { 0.0.0.0 } interface { p2p 172.16.18.1%wireguard3 } neighbor { router-id: 192.168.100.2 ...

obscurus

The OVPN service is unstable, and it will cause a Kernel crashes after 2,3 hours of uptime. SUP-96432 The same issue, but without Kernel crashes and any errors in log. RB5009, udp ovpn client, BGP. After 2 hours of uptime, traffic stops going into the ovpn-tunnel (ovpn client shows "Connected&...

obscurus

The OVPN service is unstable, and it will cause a Kernel crashes after 2,3 hours of uptime. SUP-96432 The same issue, but without Kernel crashes and any errors in log. RB5009, udp ovpn client, BGP. After 2 hours of uptime, traffic stops going into the ovpn-tunnel (ovpn client shows "Connected&...

obscurus

For obscurus: note that likely nothing further will happen unless you make a ticket about this (either by mailing it or by directly creating the ticket in the support system). Bugs reported in the release topics are usually not picked up by MikroTik staff, unless a developer of a particular piece o...

obscurus

But what about other ftp client that connect without issue? This problem appeared after upgrade to version 7.3.1
Please paste exactly what a commandline ftp client shows when you logon to that server.

Please see attachments.

Proftpd 1.3.7a

obscurus

But what about other ftp client that connect without issue? This problem appeared after upgrade to version 7.3.1

obscurus

fetch has been broken with ftp connect in 7.3.1 and 7.4: failure: Unrecognized FTP server response: The local time is: 230 User user logged in Does the FTP server send that response "The local time is: " without numeric prefix (220)? Then it is the FTP server that is broken. A proftp serv...

obscurus

fetch has been broken with ftp connect in 7.3.1 and 7.4: /tool fetch address=ip port=21 user="user" password="pass" upload=yes mode=ftp src-path="backupfile.backup" dst-path="/path/Backup/Mikrotiks/MY/backupfile.backup" status: failed failure: Unrecognized FTP...

obscurus

RB5009 and DoH error

obscurus

fetch has been broken with ftp connect after 7.3.1 update: /tool fetch address=ip port=21 user="user" password="pass" upload=yes mode=ftp src-path="backupfile.backup" dst-path="/path/Backup/Mikrotiks/MY/backup-2022jun19.backup" status: failed failure: Unrecogn...

obscurus

BGP prefix count still 0.
RB5009,750Gr3 and x86 update is ok

obscurus

No release info on update

obscurus

The problem was present even when one of the peer was disable. Only after removing it, the problem is no longer observed.

obscurus

oh, that's very funny. I found a solution to the problem. I had two peers configured on Mikrotik on the same wireguard interface (/24 net) with one port and two the same allowed address 0.0.0.0/0. But one of the peer was disabled by me all the time. What i did: 1) remove the disabled peer 2) reconfi...

obscurus

Nope. If client starts connection, mikrotik will know where to go back to. It does not initiate, it responds. Big difference. Are you saying you are effectively seeing this happen ? Yes, it is. I imagine it the same way. But for some reason, after turning on the Mikrotik after a reboot, the peer be...

obscurus

No, it's normal with the Tik having peers with dynamic addresses. It can not know where to start. The clients will start, Tik will follow. If dynamic address of client changes, Tik will follow shortly after. That's the beauty of Wireguard. Yes, client will start, but mikrotik will not start (no tra...

obscurus

On your phone the issue will never occur. The program will refuse to start wireguard when it can not resolve the endpoint name. At that same time, there is no problem on the server since no request has been send Try it on your phone :D The endpoint is configured on the phone only. On Mikrotik, this...

obscurus

It is very strange but holvoetn recomendations works only if both side (client and server) is mikrotik device. If one of the peers for example is a phone with the wireguard program (the server is configured in Mikrotik) , then the connection will not occur unless the peer on the server is manually d...

obscurus

The same issue. Only manual disable/enable peer on server help to resolve.
No connection even i do it after 110s after Mikrotik start via script. Only manual disable/enable peer.... No DNS name on server configuration.
ROS 7.1rc3

obscurus

Upgraded from 7.1.1 and my wireguard connections no l longer worked. No connection was being made and disabling and reenabling the interface had no effect. Rolled back to 7.1.1 and all was well again. Literally nothing in the config changed between both versions. EDIT: realized I didn't state what ...

obscurus

After upgrade to 7.1.1 from v6 i have an issue with l2tp+ipsec with error

<ip>: authentication failed: peer didn't respond to CHAP challenge

obscurus

Any ideas to fix it? Or it is a bug? Dear Mikrotik team help us!

obscurus

I have exactly the same issue "DoH max concurrent queries reached" on a small home network (RBM11G + LTE). It can be repeated once a day, or maybe in a week. Increasing the values in the DNS settings does not solve the problem. Also noticed that a simple reboot of the miktorik sometimes do...

obscurus

Not working Adguard doh dns ( https://dns.adguard.com/dns-query ). Error in log like: DoH server response not OK: 301: <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html> how to configure mikrotik ...

obscurus

We always keep working on new products. In future, we will also have outdoor LTE products with Gigabit.

Good news, normis. Do not forget about new cpu with ipsec acceleration. I think all these components will be appreciated by all new and existing Mikrotik users.

obscurus

SXT LTE6 kit it is one OUTDOOR all in one router and antenna . Other products is or not outdoor (not allinone) or without max antenna gain, or with huge of ports.
That is why I have to use RBM11G with terrible case and outdoor 12 dbi antenna. It is very expensive, uncomfortable, and not allinone.

obscurus

Its would be perfect to see in future a new SXT LTE6 kit with arm cpu and 1000Mbit Ethernet port. I do not understand why existing SXT LTE6 kit has two 100mbit ports and miniPCI-e card with carrier aggregation support (up to 300 Mbps).

obscurus

adguard doh dns does not work with many errors on log.
1.1.1.1 doh - working now well
8.8.8.8 doh - working now well

obscurus

Doh! but how i can config it? no wiki page

obscurus

I want to know if its posible to do at R11e-LTE also?

obscurus

Is it possible to use "at-chat" command AT*MRD_IMEI to change imei? If it is possible, please explain how to change imei with it.

obscurus

I have the same issue with RBM11G and R11e-LTE - no lte interface...
I have latest routeOs 6.42.5 and empty output /system resource pci print .
I wrote the email to support...

obscurus

Grickos and karlisi, many thanks for good ideas! I could not disable capsman interfaces because in provisioning rules was set action "create dinamic enabled". First i changed action to "create enaled" in provisioning rules and then run the follow script /caps-man interface set [ ...

obscurus

When i disable manually all provisionig rules and then execute provision on all radios - appear unnamed provisioning rules (cap1,cap2...) and i see hide ssid (not my ssid) on wifi sniffer. Then i enable provisioning rules and execute provision on all radios - no result... i see the same hide ssid an...

obscurus

Yes,all interfaces in capsman /caps-man interface print Flags: M - master, D - dynamic, B - bound, X - disabled, I - inactive, R - running # NAME RADIO-MAC MASTER-INTERFACE 0 MDBR 2G-Mik-1 6C:3B:6B:44:83:CF none 1 MDB 2G-Mik_netmetal-1 4C:5E:0C:11:7F:D9 none 2 MDB 5G-Mik-1 6C:3B:6B:44:83:CE none 3 M...

obscurus

i also can connect to the wifi even if i disable local forwarding and disable provisioning rules via script

obscurus

/caps-man channel add band=5ghz-a/n/ac extension-channel=Ce name=channel5 tx-power=27 add band=2ghz-b/g/n extension-channel=disabled name=channel2 tx-power=25 add band=2ghz-b/g/n extension-channel=disabled name=channel2_netmetal tx-power=27 add band=5ghz-a/n/ac extension-channel=eC name=channel5_ne...

obscurus

No, i have correct configuration, because wifi roaming are correct in my network. Maybe it is because i have local forwarding enable?

obscurus

Only the first enabled provisioning rule will be in effect, if no additional filtering parameters (hw-supported-modes, identity-regexp, etc.) are set. If you want to disable all 4 provisioning rules at once, try my scripts: /caps-man provisioning enable numbers=[find] :delay 1 /caps-man radio provi...

obscurus

My script is: /caps-man provisioning disable 0; :delay 1; /caps-man radio provision numbers=[find]; /caps-man provisioning disable 1; :delay 1; /caps-man radio provision numbers=[find]; /caps-man provisioning disable 2; :delay 1; /caps-man radio provision numbers=[find]; /caps-man provisioning disab...

obscurus

I have 4 provisioning rules and if i add its in script (0,1,2,3) - only first rule has been disabling. How i can disable all?

obscurus

Please, explane me how i can enable/disable wlan wifi interface on capsman via scripts.
I have tried disable provisioning rule but without results - my phone can connect to wifi

obscurus

The same issue after upgrade RB951G-2Hnd - lost configuration and access to router at all.
I can repair it only with netinstall on win7 32bit (netintstall does not see router on windows 10 64bit).

Search found 44 matches