Hello What would be the best solution for a Capsman router which can handle about 25 "CAP ax" and 250 devices? Is the "CRS328-24P-4S+RM" a good "all in one" appliance, also because it can supply POE to the CAPs? Or is Capsman all handling in CPU and we need a potent CCR...
+1 for the issue reported by Ocean. After updating to 7.10.1 from 7.10 OVPN has stopped working, Connection initially established but no traffic through tunnel, and then connection gets dropped due to inactivity timeout (ping restart) UPDATE: Just checked and am getting the same OVPN issue in relea...
I have tested with Google Authenticator and Microsoft Authenticator and both work fine when manually adding the base32 OTP. I would imagine that any other app that allows you to manually paste the OTP will work as well. I have implemented TOTP for vpn l2tp and opnvpn user this way. Works fine and g...
Hi I have a problem with opnvpn accounts where Usermanger handles the login. In Usermanager I can configure an attribute "Mikrotik-Group" which can also be a PPP profile for PPP vpn logins. (https://help.mikrotik.com/docs/display/ROS/User+Manager#UserManager-Attributes) That works for l2tp...
Normal login with Radius and User Manager works. (I had to configure the official IP, not 127.0.0.1) Found the problem. I have two radius and two routers in user manager configured, one with 127.0.0.1 and one with the official IP. Seems they are doing auth overcross. Disabling the 127.0.0.1 radius ...
Great guide. Unfortunately I still can't get it. Normal login with Radius and User Manager works. (I had to configure the official IP, not 127.0.0.1) Then I created a base32 encoded OTP secret and add it to the user. I configure the same base32 string in a TOTP client. I stick on the 6 digits to the...
Just upgraded from 6.49.3 to 7.13 Home Router RB4011 becomes unreachable with "wrong" MTU size on L2TP over IPSEC connection to Mikrotik Gateway CCR1016. After using the L2TP connection for ssh to a server and typing something on it the RB4011 becomes completely unresponsive. LEDs are on a...
Hello We have a CRS326-24S+2Q+RM where maybe the temperature analysis goes wrong. System health shows a device temperature of 88°, the SFP+ Modules show 80° or 78° or 82°. But if we plug out a module it is only hand-hot. Also the airstream is only lukewarm. Is it possible the temperature readout is ...
Hello We have a CRS326-24S+2Q+RM where I have the question if the temperature analysis goes crazy. System health shows a device temperature of 88°, the SFP+ Modules show 80° or 78° or 82°. But if we plug out a module it is hand-hot. Also the airstream is only lukewarm. Is it possible the temperature...
Hi On one of our five CRS326-24S+2Q the device temperature can be monitored via SNMP (Zabbix) since ROS 6.48.3. On the other 4 CRS it is "not supported". They have the same newest Router OS, the same Firmware (6.48.3), the same firmware type (qca9531L) and the SNMP settings on the monitori...
Hi We have a strange phenomena. On an IPSec connection pings goes through fast. But if we open a webserver site on that line it last minutes the content arrives. With Wireshark we can see much packet loss. We played with the MTU, but this doesn't change anything. But if the sniffer is enabled and th...
In contrast to RouterOS SwitchOS offers minimal informations on SNMP. I can't find any values for CPU, Temperature, VLAN IDs and so on. Has anyone a functional MIB?
Hi I want to use a new CRS326-24S+2Q+ with RouterOS but all (Q)SFP+ Port in switch mode with full 40G speed possible. I know it would be easier to use SwitchOS but I want the benefit from RouterOS Tools. What I did as-yet: Delete all RouterOS packages apart from system package and advanced tools Rem...
does anyone know if the "Q+85MP01D" 40G module or the "Q+DA0001" cable build in the new "CRS326-24S+2Q+RM" are compatible with Mellanox "ConnectX-3, MCX313A-BCCT" network cards?
It costs me many hours so I will share it with you. The situation: German AVM "fritzbox" as a little telephone switchboard at home. At the company a "unify" (formerly "Siemens") telephone switchboard witch offers SIP. I want the FritzBox to work as a SIP client on the c...
>> As the acronym states [i]"Wine Is Not an Emulator"[/i] and thus if the OS kernel doesn't allow 32-bit code execution nothing AFAIK can be done. Codeweavers is working on a Crossover version that executes 32bit. But it seems to be hard. https://www.codeweavers.com/about/blogs/jschmid/201...
Upgrade CCR1016-12G. We have massive packet loss on an IPSEC connection. The bigger the packet size, the more packets are lost. - up to 45%.
Downgrading to 6.44 solves the Problem !!!
Another solution without mirror-policies and a supernet config to bypass the mikrotik one network limitation on IPsec policies: http://biplane.com.au/blog/?p=406
[quote=Dejan post_id=682915 time=1535608660 user_id=79483]
Please read thread. We are talking about problem with combination Mikrotik<->Windows ...
[/quote]
Why didn't Mikrotik talk to Microsoft directly to dispose this incompatibility ?
[quote=sindy post_id=682621 time=1535468868 user_id=110692] [quote=indnti post_id=682612 time=1535466477 user_id=10406] Other Mikrotik router don't hangup Strange [/quote] Nothing strange about Mikrotik not hanging up - it simply renegotiates continuation of the IPsec session when it is about to exp...
Same. After >>> exact 27387 seconds <<< the connection is disconnected. You can see the this number of seconds in sindys article: "18:58:53 l2tp,ppp,info,account dedecek logged out, 27387 24129137 55951331 123213 10683" My Router: 15:54:27 l2tp,ppp,info,account xxxxxx logged out, 27387 495...
CSS326-24G-2S+ v 2.7 doesn't see the upgrade on the upgrade page.
After upgrading manually from 2.7 to 2.8 the switch boots into 2.0p - from that version I can upgrade manually to 2.8 ...
It can not be true that one be forced to use rc20 till the end of lifetime of that hardware! You are not forced to use rc20. Use netinstall to install version. What about that experience: Bricked RB3011UiAS-RM by updating from rc20 To rc27. LCD shows always "starting services"... Netinsta...
Answered many times before! The old version is the one that performs upgrade. We can't fix a released and installed version. If you bring out a version that *bricks* hardware you must consider that it will not happen. maybe a special intermediate version to repair version rc20-24. It can not be true...
As it was mentioned several times before in this topic. Upgrade happens on old version 6.42rc17 - 6.42rc24 are bad versions, so if you want to upgrade from these versions, use netinstall from the beginning. Will there be no fix that is ist possible to upgrade from one of this versions? Or what a bo...
Switch OS 2.7 displays no hosts anymore because of a javascript error:
Firefox: ERROR: SyntaxError: missing ] after element list
Safari: ERROR: SyntaxError: Unexpected token ')'. Expected either a closing ']' or a ',' following an array element.
Edge: ERROR: SyntaxError: Expected ']'
When will the fan problem with CRS 317 be fixed in switchos? The fan is going off and on every few seconds. If the temparature on a SCP module reaches 40° it goes on and if it goes down to 39.9° the fan goes off - and so on. I think that reduces the lifetime of the fan dramatically!
When will it be fixed in switchos? The fan is going off and on every few seconds. If the temparature on a SCP module reaches 40° ist goes on and if it goes down to 39.9° the fan goes off - and so on. I think that reduces the lifetime of the fan dramatically!
Arstechnica writes that "researchers have discovered a potentially catastrophic flaw in one of the Internet's core building blocks that leaves hundreds or thousands of apps and hardware devices vulnerable to attacks that can take complete control over them." http://arstechnica.com/security...
FYI: RouterBOARD RB/912UAG-2HPnD and Mini-PCI-Express R11e-5HacD doesn't work together in a satisfying way. There are regular kernel failures, hangs and reboots...
Hi [quote="iqt"] Login after 20:00 is working (as expected) but at midnight User Manager is sending a [b]Disconnect-Request 6[/b] and [u]removes[/u] the profile from the user. [/quote] Same problem here - after the limitation time is reached, the profile is removed but shown as active. We ...
I can't establish an IPSEC VPN from ros 6.25 to the new pfSense 2.2 (StrongSwan) "error failed to pre-process ph2 packet." The paramter seem to be equal 22:13:29 ipsec,debug,packet IDci matches proposal. 22:13:29 ipsec,debug,packet IDcr prefix/ulproto does not match proposal. 22:13:29 ipse...
[quote]Please note that "brick" here is a strong word. The damage is not irreversible. Just use Netinstall to downgrade to an older stable version of RouterOS, like 6.22, and your 1100AH will be back up and running.[/quote] Till now we are not able to bring the router up via netinstall. Th...
Hello
Is there anything to pay attention for setting up capsman, hotspot and usermanager together on the same router?
I found the option "interworking (; Default: ) IEEE 802.11u, Hotspot 2.0 related settings" in the capsman manual, but this option isn't available on ros 6.22 with capsman v1
It's great that one can upgrade the caps now! But how is the upgrade and package-path configured? Have I upload the packages to "files" manually? /caps-man> manager print enabled: yes certificate: none ca-certificate: none package-path: upgrade-policy: suggest-same-version require-peer-cer...
This is crazy... MT I would rather wait months for updates if you guys would test them properly! If you need BETA testing, make a different BETA branch for the firmware! Lost connection to Userman database after upgrading from 6.20 to 6.21.1 :( Had to set the path to the database and repair it. /to...
Hi Please, can anyone explain how to get Capsman Manager and a Capsman Client play together NOT with auto configuration but self generated certificate on the Manager router. I can't get this right. I try miscellaneous constellations. I leave system/certificates blank on the AP. I install the CA cert...
A Ipsec Policy can't be configured because the priority isn't set "ingeger in range [0;-1] expected", even it is set to "0". The config with Winbox 2 oder webfig shows the correct priority without errors.
Did someone upgrade the CCR 1016/36 to a dual power machine? How could I do it? There is not enough space for a second PSU inside. Do you buy two new smaller PSU and make a second hole for the power cable tail in the chassis? Or do you take an external PSU and wire it to the internal connector?
[quote="efaden"][quote="pingus"]I went back to my Cisco L3 Switch .... Mikrotik should stop selling them![/quote] I have it partially working... there are some bugs currently though. There are a bunch of fixes in 6.12 and supposedly there will be more examples documented.[/quote]...
[quote] all prior RouterOS releases are not affected by this issue as older OpenSSL libraries where used.
6.12 will have newer OpenSSL with this vulnerability patched. [/quote]
Is Router OS 6.x effected or not? And if so, where can I download Version 6.12 ?
Very nice work to reduce the Usermanager to a practical interface for hotel employes and others. But how will it be configured with router os? There is only an example for freeradius on your webpage.
And it would be nice to have the possibility to print out user access and session data.
It seems that 6.2 Proxy has problems with a parent one. If I try to configure a parent in Winbox, a error messages appears that the I can't insert that IP, because it is not in the same address family as the source. If I configrued it in the terminal it goes - but parent proxy doesn't work, the requ...
[quote="MiKeDaDoC"]Hi Folks, Problem was that only on IPSec Peer would establish correct SAs, randomly, that means it doesn't matter if it was the netgear or a RB2011xx. Analysing the problem showed that one had to deactivate all but one peer, this peer would come up perfectly. Then activa...
I have one DSL cabel with one modem, but I need to run two pppoe client sessions parallel. At the moment there is a vigor modem/router with the first pppoe acoount, behind the vigor the mikrotik handels the second pppoe (the vigor is able to passthrough pppoe). I want to configure both of the pppoe ...
RC3 and RC4 doesn't work for us. The router RB433UAH has an UMTS Connection on USB port. It's a Huwai/Vodafone K4505. The router reboots if watchdog is enabled or stops working on both the UMTS and lan interface. There is no informative entries in the log about this failures. I will send a supot fil...
I've changed the channel to "3" and no the modem dials correctly /interface ppp-client> print Flags: X - disabled, R - running 0 R name="Vodafone" max-mtu=1500 max-mru=1500 mrru=disabled port=usb2 data-channel=3 info-channel=3 apn="web.vodafone.de" pin="" user...
Hi I'm trying to get a Vodafone K3765-Z ATI Manufacturer: ZTE INCORPORATED Model: K3765-Z Revision: BD_VDFP673A1V1.0.0B02 IMEI: 353679034292957 +GCAP: +CGSM,+FCLASS,+DS OK ATZ OK working on ROS 4.11 and 5.0RC1 on RB 433. But after dialing the connection is droped and the usb/serial port is inactive....
[quote="Chupaka"] [b]what did I paid for?!.[/b][/quote] I paid for a release, not for a beta. But I think MT needs the FEEDBACK of betatesters. If they need more information I will try to provide them, but communication is not a one way road. I will help to make MT 3.0 OS good and stabil b...
We have the same problem with 3.0rcxx With 2.9.xx pptp works fine. Hardware is a Soekris 4801 board 15:50:55 pptp,ppp,info <pptp-1>: initializing... 15:50:55 pptp,ppp,info <pptp-1>: waiting for call... 15:50:55 pptp,ppp,info <pptp-1>: terminating... - disconnected 15:50:55 pptp,ppp,info <pptp-1>: di...
We have related problems with pptp connections. After two or three days of using pptp by about 10 users the pptp server goes crazy. Only rebooting Router OS solves the problem 15:50:55 pptp,ppp,info <pptp-1>: initializing... 15:50:55 pptp,ppp,info <pptp-1>: waiting for call... 15:50:55 pptp,ppp,info...