MikroTik

npeca75

> [stable] is released!

far from stable ...

rb760igs
crs326-24g-2s+

both have same problem
few hour after update, one of CPU core goes to 100%, dhcp leases are not served any more, login from winbox show EMPTY windows in IPv4 dhcp server/network/leases
after reboot, everything is back to normal

npeca75

*) wifi - added multi-passphrase (PPSK) support (CLI only);

any documentation ? example ?

npeca75

7.16b2

lots of SNMP errors
SNMP engine sometime stop and won't start until reboot, or disable/enable snmp
cAPGi-5HaxD2HaxD

npeca75

*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge; what a mess i put by hand both WIFI interface as wifi24 tagged 2,98,100 on br1 wifi58 tagged 2,98,100 on br1 and after first station is connected, no matter on what vlan, vlan entry are AGAIN dynamically...

npeca75

any chance to implement ANY information with new WIFI CapsMan and SNMP ?

in old wireless capsman, there was at least some basic info, but now ... null

npeca75

woooa
CHR, 7.14.3 -> 7.15
free memory decreased significantly

npeca75

is there ANY chance that MT implement DPSK on WIFI ? Dynamic selection of VLANs based on passphrase ? don't care if it is old-wireless, new-wireless, capsman, call-it-as-you-want WIFI->Access List -> allow use multiple empty mac address and use combination of passphrase+vlanid until then, we are doo...

npeca75

*) media - added support for DLNA; the most pathetic thing is that DLNA is intended for home users, and most of home users running smaller MT devices which simply does not fit with 16M flash OK, you could at least run DLNA on your backbone router with 40 or 100G links .... :) how sad is this decisio...

npeca75

I feel like Mikrotik tries to be like a FRITZ!Box and do everything in one box. They also have this same exact Media Server feature and they had it about 4 years ago. i could only smile on this operating dozen of DynaDish5 G-5HacD r3 for distant links [sarcasm] i am soooo excited to have Media serv...

npeca75

Same for cAP AC. This should be a dumb AP.

looking at my HaP AC2 dumb APs ...
kernel 5.15.x, Owrt 23.05
snmpd
lldpd
dual band wifi k/v/r
firewall for MGMN vlan
one SSID with dynamic vlan support based on passphrase
ntp client
remote syslog
etc

still 8 M free space on flash

:)

npeca75

They dangle the carrot in front of you, but you can't actually use it

it is time for MT to release stripped down "DumbAP" (Openwrt terminology) image for HaP AC2
only switch/firewall/dhcp v4 & v6 client/ AC wifi
and finally put HaP AC2 to place where it belong

npeca75

it will be much MUCH better for MT to name this release v8 after all, wireless packages are radically changed, ROS does not fit anymore on old devices, many bugs, etc ... anybody who work with relative stable 7.12.2, and blindly push update button, will be in big big trouble so, please MT move this ...

npeca75

In my case, 4 SSIDs config is already over-complicated which could be very easy to solve with OpenWRT / dynamic VLANs per passphrase. So, one SSID and numerous passwords for each vlan this setup work very nicely on OWRT / hap ac2 / DumbAP i opened this question few month ago on forum, but there is ...

npeca75

(CHR 7.11.2) https://wiki.mikrotik.com/wiki/Manual:CHR#CHR_Licensing 1 mbit if no licence it is paid lincenced CHR have the same MTU settings hi @anav yes, they are same yes, i tried clamping, but clamping is for TCP, not UDP if i remember right ... so, as i see, only solution is to have independen...

npeca75

If that is your config no wonder it doesnt work but since you seem to know best............ good luck ohh, mr guru :) if you think it is MTU-1420 and > TFTP running with --blocksize=1468 believe me, i tried to adjust TFTP server to fit in WG 1420 same thing and tried to lower WG MTU, but same

npeca75

Using TFTP as speed benchmarking tool is ... innovative :wink: The way you describe the problem it could be just anything. Hi no, it is NOT innovative ... it is must ! do i want to use TFTP ? No ! do i need to use TFTP ? yes ! do i have choice ? No ! so i have problem with WG tunnels and speed betw...

npeca75

Hi i have two WG tunnel concentrated on one WG HUB (CHR 7.11.2) today i tried to transfer 6MB file over TFTP between two tunnels and ... i was disappointed so, starting server is Debian TFTP running with --blocksize=1468 on same switch, Debian -> PC (1Gbps) tftp> get wrt.bin getting from 192.168.0.2...

npeca75

Without RADIUS I think it's not possible... I was also interested in this. the problem, as i see, is this /caps-man access-list add action=accept allow-signal-out-of-range=10s disabled=no private-passphrase=vlan2-test ssid-regexp="" vlan-id=2 vlan-mode=use-tag add action=accept allow-sign...

npeca75

The Wireless package (legacy driver) The Wifiwave2 package (new hardware) Sorry, but your answer have no sense for me again i try to make dynamic VLANs on Mikrotik WIFI 1 SSID multiple VLANs based on PSK2 password on this single !!! SSID it is doable in OpenWRT with per VLAN psk passphrase how to a...

npeca75

Hi i try to reproduce following situation from OpenWRT where i have 1 SSID and vlans are tagged based on wpa passphrase config wifi-iface 'wifinet0' option device 'radio0' option mode 'ap' option ssid 't-WIFI' option encryption 'psk2+aes' option key 'SomeUnusedPass' option wmm '1' option short_pream...

npeca75

We are very sorry if you felt offended in some way. i saw that all old beta forum topics are erased i reported few time when v7.10 betaX started to show, that WG with IPv6 and non /64 suffix have a problem in 7.11beta topic there was also another user with same observation, and i clearly remember t...

npeca75

What's new in 7.11rc2 (2023-Aug-03 10:50): *) wireguard - fixed peer IPv6 "allowed-address" usage; Is it fixed-fixed now for all platforms? You've been fixing it since February 2022. at least on rb5009 arm64 i could use again /112 hope that @strods will show this post to mr Oskars K. from...

npeca75

So I've been having issues with IPv6 over Wireguard on wAP (arm) from ROS 7.10 ongoing. In "allowed-networks" I had /48 networks. I got this to work again by replacing those with /64's. Issue is ongoing, SUP-120497. you are nor alone i am using v6 /112 and v6 /32 on some platforms it is w...

npeca75

IPv6 wireguard broken on

CHR
RB5009
HEX S

working on
RB450G
HEX

same configs & network work as expected on 7.9.2

npeca75

Looks like Mikrotik staff really does not like wireguard & IPv6 CHR, rc5 wg peer (fdff:255::2) is pingable from router (fdff:255::1) wg network is unreachable behind wg peer (fd00:2:1::1) same config work in v7.9.2 peca@eleservice-mkt] > ping fdff:255::2 SEQ HOST SIZE TTL TIME STATUS 0 fdff:255:...

npeca75

It's indeed standard :)

I'm using LibreNMS (which is an fork of Observium) and it only detects this SNMP tree if bgpLocalAs is present. For that reason I really wish Mikrotik will add this with the next release :)

+1 for LibreNMS compatibility

npeca75

still no IPv6 / WireGuard on ARM rb3011 ipv6/route/print Flags: D - DYNAMIC; A - ACTIVE; c, s, y - BGP-MPLS-VPN; + - ECMP Columns: DST-ADDRESS, GATEWAY, DISTANCE # DST-ADDRESS GATEWAY DISTANCE DAc fdff:255::/112 wg: Mgmn (NMS) 0 ipv6/address/print Flags: X, D - DYNAMIC; G, L - LINK-LOCAL Columns: AD...

npeca75

looks like beta5 break wireguard IPv6 on ARM IPv4 works fine # model = RB3011UiAS # serial number = 783D085F624D /interface wireguard peers add allowed-address=fdff:255::/112,169.254.255.192/26 endpoint-address=xxx.yyy.224.42 endpoint-port=8000 interface="wg: Mgmn (NMS)" persistent-keepali...

npeca75

Using the latest I received from support the issue is resolved on my system. All peers get the correct IPv6 assigned and work as expected.

yes, it is working , at least tested on MMIPS

npeca75

well, maybe it is too early for joy, but looks like WireGuard IPv6 spoke&hub finally working on mmips
it was known problem that only last enabled WG peer will route properly IPv6, others will be lost, but now ...wooow

npeca75

*) snmp - fixed several OIDs that were returning empty values (introduced in v7.9beta4); looks like it is working as expected ifPhysAddress.1 = 6c:3b:6b:c2:37:a4 ifPhysAddress.2 = 6c:3b:6b:c2:37:a5 ifPhysAddress.3 = 6c:3b:6b:c2:37:a6 ifPhysAddress.4 = 6c:3b:6b:c2:37:a7 ifPhysAddress.5 = 6c:3b:6b:c2...

npeca75

well, please don't fix SNMP anymore :( LibreNMS could not read port MAC address yepp, same on beta4 and rc1 ifPhysAddress SNMP['/usr/bin/snmpbulkwalk' '-v2c' '-c' 'COMMUNITY' '-OQUst' '-m' 'IF-MIB' '-M' '/opt/librenms/mibs:/opt/librenms/mibs/mikrotik' 'udp:HOSTNAME:161' 'ifPhysAddress'] ifPhysAddre...

npeca75

well, please don't fix SNMP anymore :(

LibreNMS could not read port MAC address

npeca75

hi @cdemers

after desoldering transformer to get a clear measuring without transformer coils interference, sadly i realized that passive components are OK
furthermore, even without transformer, MT reporting link UP
so, next step is AR8033 al1a PHY

npeca75

Hi to all unfortunately, my crs309 got a spike from CATV modem and standalone ETH port is burn out it is showing link present even without attached cable i like to ask, is there anyone who tried to service this/similar problem ? soldering is not a problem, but for now, i try to find any schematic or...

npeca75

yessss

after so many v7 iterations ...

1. SFP data is back
2. SLAAC address show as expected
3. RA route show as expected
4. SNMP readout of SFP values as expected
rb760igs

npeca75

Any news on fixing SFP DDM / SFP details on "hEX S" RB760iGS? It worked in V6 but stopped working in V7 with many reports. Can someone at Mikrotik acknowledge or confirm the issue? looks like they solved it This is an automated message. Our bug tracker reports, that your issue has been fi...

npeca75

It was just a reply to your "dear god" mr Znevna. it is my right to be salty constant messing with dhcp, then ssh keys, lldp, missing sfp info and similar basic functionality ... it could be called v7 inhouse, or v7 lets-get-fun, or pre v7 or ... anything but not "stable" but on...

npeca75

Imagine how often (if ever) admins change interface names in production systems. ok, you are right MT knows better and you known better rest of us who want to occasionally change ifName ... well, we are all amateurs after this comment, mr Znevna, i will (again) resign and left to You and other old ...

npeca75

another SNMP have a running 7.4.1 -> OK tried to get LLDP data from switch attached to MT -> OK renamed interface on MT facing to switch tried to get LLDP data from switch attached to MT -> NOK MT send old interface name on LLDP after MT reboot, LLDP is OK with new lldpNeighborPortIdDescr same in v...

npeca75

another SNMP

have a running 7.4.1 -> OK
tried to get LLDP data from switch attached to MT -> OK
renamed interface on MT facing to switch
tried to get LLDP data from switch attached to MT -> NOK
MT send old interface name on LLDP
after MT reboot, LLDP is OK with new lldpNeighborPortIdDescr

npeca75

*) sfp - fixed "eeprom" reading on single SFP port ARM devices;

maybe one day rb760 igs SFP port will have (again) SFP status ?

npeca75

as MT DEVs could see

UEFI client asked for IP and totally wrong answer came from MKT
lpxelinux.0 instead of grubnetx64.efi.signed

clearly, Class-Id = "PXEClient:Arch:00007:UNDI:003000" does not match in DHCP server

bravo !!!

npeca75

well, dear MT staff /ip dhcp-server vendor-class-id add address-pool=Lan-200-UEFI name=UEFI-200 server=Lan-200 vid=PXEClient:Arch:00007:UNDI:003016 /ip dhcp-server vendor-class-id add address-pool=Lan-1000-UEFI name=UEFI-1000 server=Lan-1000 vid=PXEClient:Arch:00007:UNDI:003016 /ip dhcp-server vendo...

npeca75

Maybe MT staff started to implement new Controller on existing infrastructure ??? and it is too much ?

npeca75

Whole day (today: monday) cloud is having problems :do { /system backup cloud print } on-error={} :do { /system backup cloud remove 0 } on-error={} script error: Server error: Backend error. Try again later. Winbox -> files -> cloud backup, right click, remove will fail silently tested with 6.47.x, ...

npeca75

Only for record ...
Konica Minolta 224c going nuts because of rearranged DHCP order
yes, i know it is solved in 7.4b5

npeca75

Still missing SFP info on RB760igs :(

npeca75

so what would be the thing you will use Docker support for on a router and why? Docker container, which run linux, which run VirtualBox, which run ESXI and on top of this setup, PhotonOS and docker host ... as proof of concept how to waste your time ... :) my personal opinion is: router for routing...

npeca75

That looks like a visual issue in WinBox. RB760 iGS does not support L3 HW Offloading.

all my hopes are gone now :(
i was excited that after L2 HW, small 750/760 will be gifted with L3 HW like big brothers

tnx for reply

npeca75

https://help.mikrotik.com/docs/display/ROS/Switch+Chip+Features Bridge HW vlan-filtering was added in the RouterOS 7.1rc1 (for RTL8367) and 7.1rc5 (for MT7621) versions. The switch does not support other ether-type 0x88a8 or 0x9100 (only 0x8100 is supported) and no tag-stacking. Using these feature...

npeca75

RB760 iGS

switch -> L3 HW Offload

it is some mistake?
or 750gr3/760igs will be "special" in small device category ?

npeca75

Ok but wouldn't that be something that just 3 people really would want to have, and that would just be there to confuse 99% of the other users? Oh, please, don't make assumptions look in OpenWRT forum DHCP v6 client is default ON and it is working !!! PD,stateful,stateless, 3in1 after few years of ...

npeca75

Ideally it could be done by selecting an interface list to be used for SLAAC, ... I'd prefer something similar to DHCP client, which you could add per interface, would have on ovents script, etc. You could do anything with that, so anyone would be happy, no matter how crazy use cases they would hav...

npeca75

In normal operation within a reasonably managed network you do not need SLAAC on a router. No, but one might want to accept RA on management interface of an AP (but not the rest of interfaces). Since in MT world proper DHCPv6 doesn't exist ... And no, it's not possible to educate ISPs (most of them...

npeca75

to be honest, MT is popular because of Winbox most of admins who operate on small or mid sized net love winbox because they don't need to learn CLI on black&white terminals from this point of view: IPv6 enable SLAAC is burried in abnormal place in MT (openwrt: accept RA per interface, linux: acc...

npeca75

You can do that using a firewall rule, right? well, for sake of simplicity, if it is visual, and bound to interface menu ... then you could not miss it then the position of firewall rule is not important, one rule will not mess with another, etc, etc using smart switches a lot in my work and there ...

npeca75

It is really nice how finally a RouterOS device that gets its IP via SLAAC will show that IP under IPv6->Addresses, thank you for finally doing this (I realize it was done in 7.3.x and not 7.4.x, but still, it is a new feature that I have been requesting for years now). However, the default route b...

npeca75

whatever they do, client need to be really tiny footprint. 100-200k
if they want to fit in 15.2 MB space and be available on every (client) device
how secure & bullet proof will be client code with such a tiny space ?

npeca75

If MT ever make this Controller , maybe the best route will be a (hated) cloud why ? there is still many device with low amount of flash/ram so MT mantra that every device must run every version of ROS is breaking this way then, messing with NPK versions then, exporting hidden database from device, ...

npeca75

create this as a package that can be run in High-Availiability on MT routers. you want another brick ? my MT vX.xx work with Contr vY.yy, but not with vZ.zz and yeah, my other MT will crash with this NPK, but if i first downgrade, then skip 2 version, then go one down, then it will work and no, onl...

npeca75

maybe the best idea will be to MT bring up own cloud for Controller APP and devices simply connect to personal account ? this way, updates on Controller program could be in "in place", no more downloading new app, stopping,starting web,container,syncing versions on all computers, etc ... s...

npeca75

my only hope is that MT will hire some new developer for this .. APP ? whatever, and leave alone existing DEVs to finish v7 this year so we could start 2023 with stable v7

npeca75

ahhh, another bug, this time on LLDP there is NO mac cc:2d:e0:3d:b6:18 on my rb3011 but MT send this MAC in LLPD packets it is unusable this way, could not match ifName because bridge/ifName notation and could not match with non existent MAC address looked at every interface, every bridge, simply, t...

npeca75

export file=myconfig show-sensitive Please before you reply to post, read the WHOLE post as you could see, and hopefully read, you will notice that after crash, WG key was missing from export AFTER modifying WG key, it was exported as expected so, yes, i know how to export sensitive things, like pa...

npeca75

well there is no other way :( my recipe for WG Mgmn network: 1 pcs of old plain rb750 with OpenWRT 19.07.10, custom compiled with WG, no Luci, no WIFI this way, approx 15 pcs of WG peer with avg 2-3 mbps traffic working very well Network is designed for two way SNMP, SSH, Winbox and (T)ftp, Monitori...

npeca75

suddenly after 4 day uptime, device rebooted with kernel failure and, WG Private key was lost !!! it generated a new key furthermore ... exported the "new" config, and WG private key is missing from export!!! /interface wireguard add listen-port=8000 mtu=1420 name="WG: MGMN" the...

npeca75

to my big surprise ...
clean 7.2.3, factory
config created from scratch, from winbox
RB951G

suddenly after 4 day uptime, device rebooted with kernel failure
and, WG Private key was lost !!!
it generated a new key

so, MT statement that config lost is solved in 7.2.3 is maybe not so accurate ...

npeca75

HAP AC2, ROS 6.49.6 (and 6.48.6), system consists of individual packages. Tried upgrading from Packages and uploading an upgrade image. Same with 7.2.2 In my case, it was enough to uninstall Wireless and PPP packages HAP ac2 6.49.6 -> 7.2.3 so if your remote device could live without them, it is po...

npeca75

Yeah but that is only your point of view. Because you apparently are interested in wireguard (only). if you be kind to read whole post HOME users = WG not me !!! And about kernel, half of kernel in ROS is patched in house, custom this, custom that ... not a big deal anyway, back to v7, i looking fo...

npeca75

...This is know by most people who works in the industry and semi-professional private users BUT not the regular end user for home usage which is a total different matter. Also, a regular home user would never cope with Netinstall. As there is so much off-topic, so, here is my 5c from my point of v...

npeca75

well, same with latest beta rb760 "central" MT could ping all peers from /112 but "side" peers could not reach other peers and only last peer could ping "central" MT so confusing back to CHR everything is working config was imported line by line to 760, so no chance for...

npeca75

Hi, Nice to ear. Could you post piece of your config? I guess we do WireGuard in other way than you. For example one interface per tunnel? Thanks Sorry to disappoint you, but, after all, you are right, sort of ... out of curiosity, i tested same config transfered to RB750gr3 and, god damn it no joy...

npeca75

hi to all

since 7.1.5 works for me
12 total WG peer
9 MT
3 ubuntu
hub is CHR/esxi
whole NMS is on pure IPv6
total of 98 device behind 9 MT

so it is stable and reliable

npeca75

rb760 iGS
still no SFP info

npeca75

Hi MT Devs maybe i am wrong, but ... [IP-FORWARD-MIB::ipCidrRouteIfIndex] => 0 why i have a feeling that this should to point to intermediate gateway ??? BTW, still need to use -Cc on both IPv6 and IPv4 routing table :( [169.254.105.0] => Array ( [255.255.255.0] => Array ( [0] => Array ( [169.254.25...

npeca75

Upgraded HEX S with SFP module from 6.49.5 to 7.2 and now all information about SFP module is gone.
Anyone else seeing this?

+1
to be precise , +3

3 pcs of rb760igs
3 different type of multimode gigabit fiber module

and all info was gone
winbox = blank,
snmp = blank

npeca75

... and second HAP ac2
same dumb AP config, only v4 and v6 vlan254 addr are different

update 7.1.5 -> 7.2
everything is intact, working fine

so, no, there is no logic

npeca75

HAP ac2 netinstall 7.1.5 simple config eth1 trunk, 3 pcs vlan 1 bridge, vlan filtering device is used as dumb AP every vlan have corresponding SSID on 2.4 and 5Ghz static v4 addr on vlan254 for mgmn static v6 addr on vlan254 for mgmn upgrade to 7.2 static v4 default route is invalid pointing to righ...

npeca75

I fully understand it may not be your choice but it remains the appropriate color for that message. oh, no it is not red color - > log, error do we have error on PPTP interface ? no blue color -> log, warning informative, please use other vpn so, no, no, and no if we start using random colors for r...

npeca75

I disagree. That's the right color for that sort of message. well, mister @holvoetn i understood this approach when you, for example build a new network but, no it is not my choice to use pptp and if you think, that someone could call the multi/hyper/giga/mega company and tell them: you know, my MT...

npeca75

Please MT make this ugly red line at least blue, informative or take it away when PPTP is disabled it is irritating, annoying, and at first look, when you open winbox, you start to panic what went wrong now?? some of my interfaces are red, ooo dear god then, you realize, nah, it is only pptp :( so p...

npeca75

7.1.3 -> 7.1.5 rb3011 aprox 50% of static IPv4 DHCP lease entry was lost could not find any logic in every vlan (separate dhcp server) some entry was lost every entry has same type of comment, room number - device name and no, no funny chars in dhcp lease or in comment no logic at all history ? 6.47...

npeca75

Hi MT Devs i don't know if this is right place, but, .. lets try few years ago, when VLAN filtering is introduced, Bridge, port, PVID field become essential. but ... it is always hidden in new Winbox session and yes, it IS annoying to every time right click, show columns, select PVID ... and when yo...

npeca75

I did upgrade a hEX S and no problems. I tried a CRS326 and no matter what I did I got not enough space for upgrade. If i remember correctly, on ARM devices only way to upgrade is from bundled system other platforms work well, v6 bundled package or v6 individual packages upgrading to v7 but ARM , n...

npeca75

Almost working ... CHR 7.1.3 only 'OID not increasing' error left to be polished. nice, nice !!! This problem has been in RouterOS for ages, but you can work around it by passing the option -Cc to the snmpwalk call. will wait for next release ... if there is no fix, well, i need to send PR to Libre...

npeca75

Almost working ... CHR 7.1.3 only 'OID not increasing' error left to be polished. nice, nice !!! SNMP['/usr/bin/snmpbulkwalk' '-M' '/opt/librenms/mibs:/opt/librenms/mibs/mikrotik' '-v2c' '-c' 'COMMUNITY' '-OQXUte' 'udp:HOSTNAME:161' 'IPV6-MIB::ipv6RouteTable'] Exitcode: 1 ["Error: OID not incre...

npeca75

7.1.2, CHR SNMP readout constantly flood my LibreNMS with errors on WG IF .1.3.6.1.2.1.2.2.1.2.12 = STRING: "WG: Android" .1.3.6.1.2.1.2.2.1.2.13 = STRING: "WG: Asus" .1.3.6.1.2.1.2.2.1.2.14 = STRING: "WG: Dell" .1.3.6.1.2.1.2.2.1.2.15 = STRING: "WG: Lenovo" ....

npeca75

[admin@RB5009] /interface/ethernet/switch/rule> add switch=switch1 ports=ether3,ether4 mac-protocol=lldp copy-to-cpu=no redirect-to-cpu=yes mirror=no This makes sure the CPU gets incoming LLDP for /ip/neighbor book keeping, but restricts any forwarding. You are a King !!! working, but only in CLI tnx

npeca75

Ok so it is something different than "does not work on CHR" because for me it DOES work on CHR. But I tried it with a static route, maybe that is different. and, after all ... even dynamic IPv4 routes like WireGuard does not appear in SNMP there is no diplomatic words to describe my feeli...

npeca75

So maybe you don't have IPv6 configured on that CHR.

nope, devices working as it should rb760, 3011 ...
but CHR does not .

npeca75

to correct my self
no, it is NOT working on CHR, 7.1 & 7.2 RC both broken on CHR
But it is working fine on 7.2rc3 on my RB4011

yes, when i tested, i tried only CHR on RC
that was a reason for confusion
devices stayed on 7.1, CHR on RC

npeca75

7.2rc3 broken IPv6 SNMP SNMP['/usr/bin/snmpbulkwalk' '-M' '/opt/librenms/mibs:/opt/librenms/mibs/mikrotik' '-v2c' '-c' 'COMMUNITY' '-OQXUte' 'udp:HOSTNAME:161' 'IPV6-MIB::ipv6RouteTable'] IPV6-MIB::ipv6RouteTable = No Such Object available on this agent at this OID 7.1 working as expected SNMP['/us...

npeca75

Not sure but this may fixable (or should be at least) by using /system/device-mode . I can see perhaps in mode=home providing this kind of error, but mode="enterprise" the message ideally should be suppressed. The specific behavior of using device-mode set pptp=yes is undefined in the doc...

npeca75

7.2rc3 broken IPv6 SNMP SNMP['/usr/bin/snmpbulkwalk' '-M' '/opt/librenms/mibs:/opt/librenms/mibs/mikrotik' '-v2c' '-c' 'COMMUNITY' '-OQXUte' 'udp:HOSTNAME:161' 'IPV6-MIB::ipv6RouteTable'] IPV6-MIB::ipv6RouteTable = No Such Object available on this agent at this OID 7.1 working as expected SNMP['/usr...

npeca75

it is unusable this way
even if pptp is disabled, and only used when needed
the red color always suggest that there is error in interfaces ... but, no, no error
at least, change color to blue, like warnings in LOG

npeca75

how to remove annoying warning about PPTP ????

it is not my choice to use PPTP
so i don't see any reason to throw annoying red errors in something i could not change

npeca75

Connecting several peers just leaves the last one touched with a functional IPv6 connection. I think this is what is still broken. (Did not yet test myself.)
This behavior is described in SUP-67181. Please have a look and fix this, it hurts me as well.

+1

npeca75

CRS326-24G-2S+
could not enable Watchdog
upgraded from rc6
tried from Winbox and from CLI

npeca75

I have noted that on any of the rOS v7.1 the function of the switch vlan is not woking.

If i remember correctly ... cpu port need to be set to "secure" to switch start to work
at least in v6

but maybe i am wrong

npeca75

Hi to all i want to make bonding on rb3011, using 2 eth interface ok, it is working my question is: what is the best practice to spread equally IRQ-s on both CPU ? as i look at diagram, both CPU have 2 lane, one for each SWITCH chip so should i use eth1+eth2 ? or eth1+eth6? how to decide which CPU s...

npeca75

... compared to price. wait @Jotne from your writings, it is legal to MKT make again and again and again same mistakes because it is "only" 200 USD in compare to , lets say, Cisco or Juniper 1000 USD? so, the expectation to bugs and features which are stable remain stable in 6.x branch is...

npeca75

working fine

7.1 rc4 CHR

one WG interface, 8 peer
all at once

router to peer OK
peer to peer OK

npeca75

Yes, I hope you like my script....

Hi

sorry for late reply

yes, it is working fine
tested on 6x and 7x

ok, two different approach for same problem

thank you

npeca75

search tag #rextended fqdn2encdns FQDN to DNS encoding DNS encoder

after all, it was the whole point of my post
to learn, and to induce people to make it better

it is so sad that users need to implement missing features

npeca75

The script not work if the fqdn have one part with more than 9 characters, like www.thisismydomain.com hi @rexetended www.thisismydomain.com -> 0x01037777770E7468697369736d79646f6d61696e03636f6d00 i dont see problem here 0x0F is maximum between dot's (15) yes, it is limited, but not on 9 as you say...

npeca75

Hi to all last night i realized that MKT does not have Option 39 in dhcp v6 client :( so, here it is script implementation #ascii chars :local ascii1 ("0123456789") :local ascii2 ("abcdefghijklmnopqrstuvwxyz") :local ascii3 ("-") :local ascii ($ascii1 . $ascii2 . $ascii...

npeca75

CHR rc2 -> rc3 could not upgrade config is erased could not import rc2 export into rc3 binary backup, same ... i am out of game dear Mikrtotik this is obvious that even simple things which are reported here are untested it is RC -> release candidate, and no, it it far far from that status from my po...

npeca75

well ... from my point of view, rc2 is unusable (yes, now everyone could drop a stone on me) same config, on two device, rb750gr3, hapAC2 (without WIFI) nothing special inter vlan routing, 4 WG peers, ipv4, ipv6 firewall, dhcp server and this is it load under 20%, memory 70% free started from scratc...

npeca75

rb750gr3

still no temperature reading
still 0.5v voltage reading

npeca75

Anyone noticed that L2TP clients can no longer login after upgrade from rc1 to rc2?

hi @dksoft

did you upgrade client or server to rc2 ?

npeca75

Hi Mikrotik i like to ask, is there any chance to solve issue/problem with "hidden" ipv6 address/route ? here i mean, IPV6 -> Settings -> Accept router advertisements -> YES it is sooooo confusing, that there is no v6 address and no v6 route listed so, when you are in hurry, and things are...

npeca75

If it's not too complicated for you, you can check the current endpoint address and port from CLI. Hi @Znevna when i said "like in OpenWRT" ... here i mean, GUI way after all, most of user use some GUI in most cases, and in Winbox, wireguard endpoint address/port is blank yes, i know ther...

npeca75

about WireGuard ...

what i like in OpenWRT is that actual peer endpoint address/port are shown in wireguard status, for each peer

is it too complicated for MT to implement this ?

npeca75

My RouterOS v7 test lab consists of 3x RB3011.

They are all happily running with OSPF + LDP with no lockups or reboots.

@nz_monkey

you are lucky one
my problem started with 6.48 and port flapping, now rc1 freeze
but it work perfectly on LTS
so, downgrade & coffee & happiness

npeca75

Rb3011 uias-rm

uptime 23h
idling
no traffic
no CPU usage
no memory leak
it only sitting on desk and idling

after 23h, it is frozen
LCD does not respond, frozen at last screen
Watchdog does not kick in
could not access over network
serial console does not respond

after power cycle, it is live again

npeca75

Since WireGuard uses fixed ip addresses anyway, could you just set up a netwatch entry for the remote host and implement the functionality in up/down scripts? hi @nescafe2002 yes, there is always a "scripting way" to make a things work but i like to avoid this approach because, IF UP/DOWN...

npeca75

rb750 gr3

rebooted after 4 hours

cpu 6%
free mem 70%
no fancy queues
only few wireguard and one bridge with 6 vlans

npeca75

Hi to all currently i have dozen of L2TP dialin interface, which i like to change for wireguard ok setting up wireguard is easy, but one thing what is important for me is missing on L2TP i could "hook" script on UP/DOWN event, so i could generate traps, send emails, whatever i like on inte...

npeca75

rb750 gr3

system/health

temperature is missing
voltage is 0.5v

both, winbox & SNMP

npeca75

Which exactly CRS326 model do you have? If it is CRS326-24G-2S+, then its 98DX3236 switch chip does not support Fasttrack and NAT offloading.
L3HW Device Support

hi @raimodsp

yes, you are right
CRS326-24G-2S+

so, i am out of luck

npeca75

Hi to all i try to enable L3HW on very very simple setup routing between two vlan's on CRS326 according to docs, CRS326 is supported so, here is the config /interface bridge add name=BR-Switch vlan-filtering=yes /interface vlan add interface=BR-Switch name=vlan99 vlan-id=99 add interface=BR-Switch n...

npeca75

So, i was reported same issue in 7.0 b4 if i remember correctly and it was fixed in 7.0 b5 but, looks like programmers working at Mikortik forget what was done and when so in next 7.1 b it was lost again here is the original post https://forum.mikrotik.com/viewtopic.php?f=1&t=154630&p=775998...

npeca75

6.47.9 LTS

still not working
error: bad address or dns name

i tried to enter ipv6 address with and without square bracket "[ ]"
tried with valid AAAA dns hostname ...
nothing, no IPv6 endpoint address in pptp/l2tp

npeca75

Is it now possible to update to this latest 6.49 directly using GUI? Or still too big to fit this way on a hAP ac2 without Netinstall?

yes, without problem

from LT 6.47.9 to beta

npeca75

Same HAP AC2
same cable
same switch on other side
same PSU

ether1 is rock solid

npeca75

HAP AC2

unstable ethernet

in prev version, 1G was normal
in this version, speed is variating

npeca75

[/quote] Completely irrelevant! It is your own responsibility to ensure that you can operate your equipment at sufficient availability for your network. That includes being responsible for backups, rollback possibilities, spare hardware in case it breaks, and also if software is suitable for your pu...

npeca75

When you have a router like that in production, you should partition it so you can always go back to a stable situation without problem. Of course enabling partitioning in a device in production is a risk as well, it will require at least one reboot and it may further disturb the device, so it is b...

npeca75

could not upgrade from 48 to 48.1 kernel failure in previous boot rb3011 Did you do any reboots with 6.48 before this upgrade? The reboot failures with various models (RB3011 and CRS9x) is issue related to the first 6.48 release. I have not yet tested if fresh install of 6.48.1 reboot bricks these ...

npeca75

could not upgrade from 48 to 48.1

kernel failure in previous boot
rb3011

And, after all, the 48 -> 49b11 -> 48.1 was worked

So i am SICK !!! from stable branch
Please, rename it to Beta

npeca75

could not upgrade from 48 to 48.1

kernel failure in previous boot
rb3011

npeca75

SNMP -> Trap send report an error /snmp send-trap oid=2.1.1.1 type=integer value=1 log: error - contact MikroTik support and send a supout file (3) trap are sent, and correctly received host: UDP: [169.254.2.2]:59262->[169.254.101.212]:162 ip: UDP: [169.254.2.2]:59262->[169.254.101.212]:162 .1.3.6.1...

npeca75

I think the moral to this story is to avoid majors (6.48) and wait until the first minor (6.48.1)

Moral of this story:

1. MKT was forced by sales department to release "new" (7b/6b) versions before christmas without testing
2. Never trust blindly and install anything on holiday season

npeca75

rb3011 flapping, 1500 linkdowns for about 30 minutes rb4011 seems to be fine Hi @rushlife I like to ask you, did you upgrade FW (bios) on your 3011 ? I ask this because my 3011 is up with v6.48 and it is stable - NULL link down's , all ETH ports 1G, up without problems but i forgot to update FW (bi...

npeca75

rb3011 flapping, 1500 linkdowns for about 30 minutes rb4011 seems to be fine Hi @rushlife I like to ask you, did you upgrade FW (bios) on your 3011 ? I ask this because my 3011 is up with v6.48 and it is stable - NULL link down's , all ETH ports 1G, up without problems but i forgot to update FW (bi...

npeca75

What are "Port Extensions"

No single word in any Mikrotik wiki...

Hi
You could find useful info here:
https://help.mikrotik.com/docs/display/ ... t+Extender

npeca75

Hi @Mikrotik

is there any chance to implement custom UDP port for sending SNMP traps in next Beta?

now it is impossible to set any port value in traps destination in any IPv4 or IPv6 form
tried from winbox and from CLI

npeca75

Hi is there any chance to one setup custom port as destination for snmp traps ?? eg: 169.254.102.252:165 i tried from winbox and from CLI port 162 is occupied by another program on server so i use 165 for snmptrapd Other network equipment working fine with custom port, even cheap TP-LINK only MKT is...

npeca75

IPv4-mapped IPv6 addresses

ROS v6
::169.254.101.1/96

OpenWRT
::169.254.101.103/96

ROS v7.1b3
::169.254.101.199/96

v6 could ping own adress and .103. Ping to v7 does not work
OpenWRT could ping .1 and own adress. Ping to v7 does not work

v7 could NOT ping own address
v7 could NOT ping .1 or .103

npeca75

You forget that there still is a use-case for the classical meaning of a VPN, a virtual private network. It is e.g. a network between a company and its branches or employees working from home. no ! @pe1chl YOU forget that world is not made by MKT There is plenty other network equipment from other v...

npeca75

So someone who is happy with 20Mbit VPN is pretty normal. If they now use TCP OpenVPN with v6, then new v7 with UDP OpenVPN is good example of useful improvement. And WG even better. Hi @Sob TCP and UDP OpenVPN are both (almost) useless in MKT There is millions,billions,zillions OpenVPN servers wit...

npeca75

I am not that interested in wireguard, but its proponents always claim that it is so much faster than IPsec, so when they are right it should be useful. IPsec on those devices will do like 20-30 Mbit/s and that is usually okay for the normal usages of a VPN. Ok we are talking about 20/30 mbps as MA...

npeca75

This is not an issue with MikroTik als the RB750 or RB2011 you bought nearly 10 years ago still gets a new firmware version every month or so, and adds more and more new features, fixes bugs, etc. Ok, then tell me the new firmware, what is the use ov rb750/2011 with OpenVPN ? or with wireguard? doe...

npeca75

Exactly. WinBox and long software support is what makes RouterOS so great. I assume that I wouldn't be the only customer who would be seriously disappointed, if after just few years I'd have to choose between no new features and bugfixes, and throwing out perfectly functioning and otherwise suffici...

npeca75

So ... it is friday and still no new release

I am still using OpenWRT with DSA on MT7621 because
Ros 7.1b2 does not work with vlans on RB750gr3/RB760igs
Ros 6.x does not have Wireguard

so if i want both "feature" i need to use OpenWRT

any chance for new beta?

npeca75

Hi @msatter as i said, HW offloading working well in v6.xx (without rstp) so, i know what is the difference between old master-slave and new /interface ethernet switch i am talking about ROS v7.x and kernel v5 very simple config # model = RouterBOARD 750G r3 # serial number = 6F38085A9ED2 /interface...

npeca75

Hi to all
after many hours testing i found out that kernel v5 and mt7621 simlpy does not work with integrated switch chip

same setup with HW offload was working in ROS v6.x

Does Mkirotik have in plan to fix HW issues with mt7621?
or we are doomed to use SW switching?

npeca75

In my experience, most people who want to deploy stateful DHCPv6 (like me previously) expect that it does more than it actually does Ok, one single question In your SLAAC environment, how you would decide which device will be routed to linkA, linkB, which device have acces to LanA, which device hav...

npeca75

It would be a huge waste of time for MikroTik to implement this feature at the expense of other crucial features. If they have spare time later, sure, So now i see how things works in MKT I see many posts where forum veterans/trainers say, noooo, you don't need this no, the LZO is silly stuff, no, ...

npeca75

I'm sure they will add it eventually. Unfortunately, so far IPv6 wasn't the biggest priority for them. They added some stuff, but it's not like they are pushing things forward very much. And they only respond here in forum when they feel like it, and that's not very often. Nope, they won't As OpenV...

npeca75

Now i am realy don't understand this everytime when topic came to V6 dhcp, there is bunch of forum guru/veteran who say: noooo, you actualy don't need that please, is stateful dhcp v6 part of RFC? yes ! does MKT implement full dhcp v6? no ! does i asked for help how to build v6 net? no ! if i make a...

npeca75

DHCPv6 does not store the MAC or the Hostname of the client system hmmm, last time i checked OpenWrt is was doing exactly this Linux & Windows hosts have they hostnames and addresses was assigned through IPv6 server as i stated before, production LAN and Android does not belong to production / ...

npeca75

hi @krisjanisj

another issue with rb760igs

temperature sensor is missing
no such item in Winbox and also sensor is missing from SNMP

:( pitty

npeca75

Even Google is against DHCPv6: https://www.nullzero.co.uk/android-does-not-support-dhcpv6-and-google-wont-fix-that/ ... And if google and facebook say so, it is then right??? google will soon or a later implement dhcp v6-pd client in Android and i was read somewhere that FB is use same at they inte...

npeca75

Is there a plan for resolving DNS peer names in WireGuard properties?
or we are doomed to script/resolve/set wireguard peer endpoint?

npeca75

@npeca75 & @tpedko - Is it possible for You to send supout.rif files to support@mikrotik.com, referencing this forum thread, so we can troubleshoot this further?

Ok
supout was sent today
SUP-25925

npeca75

rb 760igs
if i try to make any change on PoE / eth5 router is rebooting with kernek failure message
PoE does not work with "auto", aways say "too low"
in prev v6 release this was worked without problem

npeca75

Hi to all
i noticed that option 23 in dhcp v6 does not work anymore

i have
0x2a00ad0010001f000000000000000002 as value for opt 23
but it is not pushed to clients

older version work vell

npeca75

RB760igs
tried to upgrade from 6.47.1

wooow, RB is dead
only Netinstall could help

shame

npeca75

SLAAC is the standard method, almost nobody uses DHCPv6 to assign addresses don't get me wrong i don't want to argue :) but if someone explain me how to solve these questions, maybe i will consider using SLAAC for example ComputerA is going "out" on gateway1 ComputerB is not allowed to vi...

npeca75

I never required IPv6 dhcp to make IPv6 work... do you? Well, if you look from this point, ... there is always a manual method of assigning v6 address to some workstation or other network equipment but, then, why Mikrotik does not ERASE/DELETE v4 DHCP? what is the use of this anyway? only waste of ...

npeca75

Hi Mikrotik it there any chance that IPv6 will be implemented fully on v7? here i mean stateful DHCP yes, i read it many times, that stateless is enough for home use, but... is OSPF and BGP and L7 filter and EoIP and ... whatever, is they for home use? NO ! they are for routers and stateful IPv6 DHC...

npeca75

Hi to all i using Winbox under *buntu18.04 & wine from 3.22 and now in 3.23 i have an annoying problem with inner window resize what bother me is INTERFACE window it is stretched to MAX horizontal (width) whenever i open Winbox i tried to delete session and save again, but nothing. It is really ...

npeca75

hi @strods

i like to report that
0x0bda / 0x8153 USB Ethernet controller working fine in V7b5

thank you !

npeca75

still same error in ROS 7 beta 4

status: failed
failure: ssl connection error: ssl: fatal alert handshake (6)

npeca75

Hi Mikrotik developers i have a really serious problem with ROS7 in many home installations i have used Realtek USB-ETH adapter for WAN connectivity Maybe you would laugh, but there is a good reason In case of lightning, when electric charge are high i don't want to risk burning out routerboard atta...

npeca75

Hi to all i have this lines in "old" v6 setup's, and working very well :log info "Dynv6: update $host" :local str "api/update\?hostname=$host&ipv6=$Wan6IP&ipv4=$WanIP&token=$ddnspass" /tool fetch address="dynv6.com" host="dynv6.com" src-p...

npeca75

first, you need 2 dhcp client [Codebox] /ip dhcp-client add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=WAN2 script="{\r\ \n # interface name\r\ \n # WAN1 or WAN2\r\ \n :local intf \"WAN2\"\r\ \n #\r\ \n # chk adress. 8.8.8.8 for WAN1, 8.8.4.4 for WAN2\r\...

Search found 169 matches