Wireguard is a design disaster in every aspect if used on a router. I'm going to name some: 1. You can't just route packets across a wireguard tunnel using the routing table (which is the base of every router), but you have to have some sort of "key" attached to that route. All the dynamic routing t...

Wake up man, you can't run any proper routing protocols on wireguard due to its awkward design, so there is literally no use to implement it on a router. To those who want to argue: yes there are some patches allowing wireguard peer routes to be added/removed dynamically but they just make wireguard...

I need to put a router in a PC chassis for various reasons, but there is no commercially available product that meets my needs, so I ended up drawing a PCIe to 12V DC Jack adapter board and put some mounting holes on it so it can mount RB450/RB850/RB750 series RouterBOARDs. BrainPower_v0.2_front_ren...

Please send supout.rif files from both devices to support@mikrotik.com
Also tell us how the two devices are connected, is it a SFP DAC or maybe using a S-RJ01 or S+RJ10 module with a Ethernet cable?

Sent with Ticket#2018052622000298\

Also, tried DAC and optical module, the result is the same

I have a CRS317 which behaves in exactly the opposite way: if I enable RSTP I lose network. Disable STP and everything worked again. Maybe we should connect our CRS317s together so they can come to a happy resolution. P.S. I see you used bonding; try disable it (either do not use bonding in software...

Tried to insert a Cisco DS-SFP-FC-2G-SW to an RB962UiGS-5HacT2HnT and the RB cannot boot. The RB keeps boot loop and cannot enter OS; Netboot can identify the RB but cannot write any packages into it.

The exact module didn't damage a CRS317-1G-16S+ although cannot be recognized.

Thinks there are some information missing here. If you need inter-vlan routing (i.e. layer 3 feature) on bridge: bridge must disable VLAN filtering create VLAN interfaces on bridge interface then use these VLAN interfaces to config layer 3 features (IP, routing, etc.) this will NOT be hw-offloaded I...

I've been using EM7430/EM7455 (the M.2 version of MC7430/MC7455) for a while steadily on RB3011. To disable DirectIP modem mode: plug the card into your computer (any adapter will be OK; you might need to download driver on Sierra Wireless website if you are using Windows, Linux is fine). Find the c...

on your RouterOS... You will be seeing some useful IPSec log. the default log explains nothing.

can reproduce on my wAP ac 6.42.1 wireless auth (WPA2 Enterprise)
https://twitter.com/zhjits/status/994051405307559936

I temporary mitigated the problem by filtering ARP on the switches the router connected to. Still waiting for bug fix.

Update: got message from support, turn off detect-internet (set all option to none) resolved the issue

Carefully disable arp on users interfaces(I hope you connecting to router not on this interface) and see arp requests ends or not. If yes, manage dhcp arp inspection with arp reply-only property and create dhcp server with "Add arp for leases" option. After it dynamic arp records will appear only a...

Do you have proxy arp enabled on some of interfaces in users direction? If users connected to your network with IP network without PPP, they must put IP address of gateway, not interface. Tried proxy-arp/enabled/reply-only but no effect. Also I didn't set IP on separate ethernet interfaces, only br...

Did you bridged eth interfaces in bonding interface and bond interface itself? If so, I suppose you shouldn't do so. There are single eth interfaces and bonding interface must be bridged.

No, I only added the bonding interface to bridge, no separate ethernets.

Maybe you sould try set static admin mac on a bridge in order he will not send request from multiple macs. But better way, i think, is to switch off ports till this crap is over. And think what can do host behind that port. I have set static admin MAC on the bridge long before this is happening. Al...

I have a bridge, added multiple ethernet ports to it, forced MAC address using admin MAC and only added IP address on the bridge itself. Some devices randomly cannot ping gateway so I captured ARP messages on the bridge. I noticed the routerboard is sending ARP requests from multiple MAC addresses f...

I bonded 2 SFP+ port with 802.11ad mode (layer 2 hash). There are other MikroTik devices running RSTP in the same layer 2. When enabled RSTP, the 2 SFP+ ports are immediately entering blocked mode. This is the case on RouterOS 6.42.1. Tried SwOS also, when all ports are set to passive and 2 SFP+ phy...

Update: it seems to be a CRS317 issue: when I reboot CRS317 after rebooting RB3011 it works; otherwise it won't work. Tested on 6.42.1 on both device.

Software bonding seems to be working. I have a SFP and a Ethernet port bonded with multiple VLAN interface on it. RB3011 is not replying any ARP requests from devices under CRS317. My setup: RB3011 - SFP + Ethernet bond - CRS317 RB3011 has a bonding interface and multiple VLAN interfaces configured,...

Also option to disable active route check...

I get a some issues with bonding 802.3ad interfaces. First between BR3011 and CRS326. There is no traffic if bonding is configured with two activated interfaces. If I release one interface, traffic will pass the bonding interface and all is fine. When I reconnect the second interface, traffic is in...

OK I've found the answer. My IPv6 provider uses ND only so I have to use link-local address in routing table everywhere... But that is another story. The solution to the specific problem described above is that I wrote a wrong routing filter (didn't enable prefix length option causing it to be an ex...

Yes I'm having this problem too. IPSec established but no data. I have 4 GRE over IPSec tunnels to 4 servers with the exact settings but only one tunnel works.

I have a /48 global IPv6 addresses on a public RouterOS router (A), and I wanted to allocate a /64 range to another RouterOS router (B) with only IPv4 connectivity to WAN. Here is what I did: Set up a SSTP tunnel between 2 routers on A, add a new IPv6 route, set dst-address=xxxx::/64, gateway=sstp-s...