Community discussions

MikroTik App

Search found 104 matches

by olivier2831
Wed Sep 23, 2020 11:33 am
Forum: Beginner Basics
Topic: Can't add Unifi Switch
Replies: 4
Views: 326

Re: Can't add Unifi Switch

Have a Mikrotik hEX RB750Gr3 that I am trying to plug a Unifi 8 port switch into. The Unifi is a managed switch that should get a ip via dhcp. When I connect it to the Mikrotik it never shows up. I have other non managed switches and when I plug them in devices that are plugged into those switches ...
by olivier2831
Wed Sep 23, 2020 11:06 am
Forum: General
Topic: [FEATURE REQUEST] 802.3bt (PoE++) Switch
Replies: 1
Views: 174

Re: [FEATURE REQUEST] 802.3bt (PoE++) Switch

Would love to see Mikrotik release a PoE++ switch. Is there any plans to release such an item?
+1
by olivier2831
Tue Sep 08, 2020 2:01 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 137
Views: 52575

Re: v6.48beta [testing] is released!

Version 6.48beta35 has been released.
...
*) discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only);
Is this feature enough to automatically assign IP Phones to specific VLAN (ie configuring a VoiceVLAN per port) ?
by olivier2831
Wed Aug 26, 2020 9:26 am
Forum: RouterOS v7 BETA
Topic: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN
Replies: 13
Views: 1165

Re: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN

Thanks for the insights!!! Seems that Mikrotik is going in the right track on these features :). My main priorities are ZTP and VSS to have first above the others. Same priorities here: ZTP and VSS. And an other feature not mentioned before: LLDP-MED I would very curious to read about the later one.
by olivier2831
Wed Jul 29, 2020 9:51 am
Forum: General
Topic: Which >96W 48V power supply for netpower16P ?
Replies: 2
Views: 750

Re: Which >96W 48V power supply for netpower16P ?

Thank you @nz_monkey for the tip: I ordered a Meanwel 48v, 240W DIN-mount power supply and will test it soon. By the way, has anyone ever tried to "split" the output of such power supply for several devices ? On one hand DIN-mount power supplies are quite compact and dedicating one for each device m...
by olivier2831
Tue Jul 28, 2020 12:52 pm
Forum: General
Topic: Which >96W 48V power supply for netpower16P ?
Replies: 2
Views: 750

Which >96W 48V power supply for netpower16P ?

Hello, Netpower16P datasheet mentions "316W max power consumption". Which available power supply would you recommend to get a 150W, 200W or more total output PoE (802.3af/at) budget ? If I'm not mistaken, largest current Mikrotik 48V power supply only provides 96W which means less than 6W per Netpow...
by olivier2831
Tue Jul 21, 2020 11:34 am
Forum: RouterBOARD hardware
Topic: Hardware Wishlist
Replies: 18
Views: 6165

Re: Hardware Wishlist

- cAP ax
- 802.3BT switches
For curiosity's sake, which current AP (any brand or model) do comply with this "802.3bt daisy chain" ?
Being able to both pass data (>1 Gb/s) and power (>802.3af) from one AP to next AP would greatly simplify cabling.
by olivier2831
Tue Jul 21, 2020 11:06 am
Forum: General
Topic: mUPS/mUPS Pro plans
Replies: 1
Views: 611

mUPS/mUPS Pro plans

Hello,
I can't see any reference to mUPS (nor mUPS Pro) among official Mikrotik hardware pages.
What are current plans for both ?
Best regards
by olivier2831
Tue Jul 07, 2020 9:30 am
Forum: General
Topic: [OT] Which IPFIX collector on Debian ?
Replies: 3
Views: 689

Re: [OT] Which IPFIX collector on Debian ?

Thank you very much for replying.

I'll give nfdump a try.
Thanks again
by olivier2831
Mon Jul 06, 2020 11:51 am
Forum: General
Topic: [OT] Which IPFIX collector on Debian ?
Replies: 3
Views: 689

[OT] Which IPFIX collector on Debian ?

Hello,

Mikrotik devices can produce IPFIX data.
Which Debian installable IPFIX collector would you recommend to collect this data and store in SQL database ?

Best regards
by olivier2831
Mon Jul 06, 2020 11:34 am
Forum: RouterBOARD hardware
Topic: mUPS Pro?
Replies: 1
Views: 640

Re: mUPS Pro?

yes, there is another thread, it's over 6 months old so time for new!

Is this product going to see the light of day?
Yes, an official statement about mUPS Pro plans, if such still exists, would be very welcome.
by olivier2831
Fri Jul 03, 2020 4:15 pm
Forum: RouterBOARD hardware
Topic: Hardware Wishlist
Replies: 18
Views: 6165

Re: Hardware Wishlist

- 802.3BT switches
May I add that, if my understanding is correct, 802.3bt also brings multi-gigabit (2.5, 5 or 10Gb/s).
Maybe a simple Midspan 802.3bt would also make sense as devices such do not exist, yet.
by olivier2831
Thu Jul 02, 2020 7:56 pm
Forum: General
Topic: Questions about NAT44/RFC7422
Replies: 3
Views: 600

Re: Questions about NAT44/RFC7422

Thank you very much for you very informative answer And what if you have 5000 users ? Deterministic NAT is a poor man's workaround for small networks where you cannot log connection initiation events on an external storage. 1. Alternatively, how can you log connection initiation events on an externa...
by olivier2831
Thu Jul 02, 2020 2:40 pm
Forum: General
Topic: Questions about NAT44/RFC7422
Replies: 3
Views: 600

Questions about NAT44/RFC7422

I've very recently discovered RFC7422 that deals with deterministic NAT. I'm thinking of using RFC7422 to reduce logging requirements when serving 500 devices through a single (or double) Internet connection (FTTH). The way I see this is: "Whenever IP 192.168.0.17 from 192.168.0.0/23 network is NAPT...
by olivier2831
Wed Jun 24, 2020 10:32 am
Forum: Announcements
Topic: MikroTik Newsletter June 2020 (#96)
Replies: 29
Views: 9270

Re: MikroTik Newsletter June 2020 (#96)

Hi,

Netpower16 is very welcome addition.

Do we have anything new concerning the CSS610-8P-2S+,announced during MUM2019.
This one would still perfectly fill a need between 5 ports PowerBox and 16 ports Netpower16.

Best regards
by olivier2831
Fri Jun 12, 2020 2:05 pm
Forum: General
Topic: How to keep people from connecting PC instead of Access points or Cameras ?
Replies: 4
Views: 701

Re: How to keep people from connecting PC instead of Access points or Cameras ?

802.1X is then the only way to go. But it depends on the sort of "endpoint" what capabilities are. If the endpoint has a supplicant you can work with username/password/certificates but for real dumb devices MAC "authentication" is a minimum. In *additional* to that, specific filtering indeed to con...
by olivier2831
Fri Jun 12, 2020 1:28 pm
Forum: General
Topic: How to keep people from connecting PC instead of Access points or Cameras ?
Replies: 4
Views: 701

How to keep people from connecting PC instead of Access points or Cameras ?

Hello, How would you secure your network if you have devices (Wifi Access Points, Cameras, ...) installed in locations where physical access protection can't be provided (corridors, common rooms, ...) ? Those devices have the common properties: - most if not all are PoE powered, - they hold a tag or...
by olivier2831
Tue Jun 09, 2020 4:51 pm
Forum: General
Topic: How to drop all traffic except traffic to the Internet ? [SOLVED]
Replies: 5
Views: 1144

Re: How to drop all traffic except traffic to the Internet ? [SOLVED]

If you want it to be done exactly as you described (based on ip address ranges) use switch chip access rules: https://wiki.mikrotik.com/wiki/Manual:CRS3xx_series_switches#Switch_Rules_.28ACL.29 Or bridge firewall: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Firewall Another possib...
by olivier2831
Mon Jun 08, 2020 12:31 pm
Forum: General
Topic: How to drop all traffic except traffic to the Internet ? [SOLVED]
Replies: 5
Views: 1144

How to drop all traffic except traffic to the Internet ? [SOLVED]

Hello, For a building hosting students, I'm trying to replicate current wireless policy with Mikrotik switches. Currently, a student guest WiFi device can only communicate with non-RFC1918 devices (all traffic to RFC1918 addresses ie 192.168.0.0, 172.16.0.0, 10.0.0.0 is discarded by WiFi AP). How ca...
by olivier2831
Fri May 29, 2020 12:22 pm
Forum: General
Topic: How Eth interface for DSL upstream access in PPPoE setup ?
Replies: 1
Views: 460

How Eth interface for DSL upstream access in PPPoE setup ?

Hello,

I've got the following setup:
Internet --- ISP --- DSL Modem --- Mikrotik router --- LAN

How can I configure WAN ethernet interface for both:
- acting as PPPoE client as required by ISP
- acting as DHCP client to configure DSL Modem

What are the basic steps for this ?

Best regards
by olivier2831
Tue Feb 18, 2020 3:57 pm
Forum: RouterOS v7 BETA
Topic: CRS3xx MC-LAG in RouterOS 7
Replies: 19
Views: 5994

Re: CRS3xx MC-LAG in RouterOS 7

EVPN multihoming is better than MC-LAG
MC-LAG is dead.
I've never heard about EVPN before.
After reading about it, it does seem to be very interesting.
Thanks for mentioning it here !
by olivier2831
Fri Jan 31, 2020 9:08 am
Forum: Announcements
Topic: MikroTik newsletter January 2020 (#93)
Replies: 26
Views: 24375

Re: MikroTik newsletter January 2020 (#93)

I hoped to hear news about:
CRS354-48P-4S+2Q+RM (with PoE)
CSS610-8P-2S+ (announced last year)

Maybe, next time
by olivier2831
Mon Dec 30, 2019 3:58 pm
Forum: RouterOS v7 BETA
Topic: CRS3xx MC-LAG in RouterOS 7
Replies: 19
Views: 5994

Re: CRS3xx MC-LAG in RouterOS 7

We are researching ways how to implement MC-LAG
@Reinis:
Hi,
Do you have any specific information about this MC-LAG feature ?
Should it come with RouterOS 7 first as this thread title implies, or may it come with 6.4X ?
Thanks in advance
by olivier2831
Fri Nov 29, 2019 9:43 am
Forum: General
Topic: The sad state of OpenVPN
Replies: 12
Views: 3205

Re: The sad state of OpenVPN

1) OpenVPN client with weak cyphers and password auth
Yes but ciphering can be quite CPU-intensive and RouterOS covers a wide range of hardware.
by olivier2831
Thu Oct 17, 2019 5:30 pm
Forum: General
Topic: LLDP-MED support in RouterOS 6.46 or 7
Replies: 0
Views: 459

LLDP-MED support in RouterOS 6.46 or 7

Hello,

Is there anything to mention about LLDP-MED support in either RouterOS 6.46 or later 7 ?

Best regards
by olivier2831
Mon Aug 26, 2019 6:05 pm
Forum: Beginner Basics
Topic: How to effectively configure 6 hEX units ?
Replies: 5
Views: 1204

Re: How to effectively configure 6 hEX units ?

Configure 1 how you want it. Do an /export and then do a full reset on the others and import the .rsc file you made from the first one. Which would cover all but last two OP's points (SSH keys and password) ... those two are only possible to automate by using (binary) backups which should not be us...
by olivier2831
Mon Aug 19, 2019 7:24 pm
Forum: Beginner Basics
Topic: How to effectively configure 6 hEX units ?
Replies: 5
Views: 1204

How to effectively configure 6 hEX units ?

Hello, I need to configure 6 hEX PoE UNITS as basic "VLAN enabled switches". Configuration details i need to set, are: - custom settings: - fixed private address (eg 192.168.1.221/24) replacing factory-set 192.168.88.1/24 - common settings: - do not act as DHCP or DNS server - no DNS cache - ether1 ...
by olivier2831
Mon Aug 19, 2019 2:50 pm
Forum: SwOS
Topic: Support for MC-LAG/Port bonding across chassis?
Replies: 3
Views: 4774

Re: Support for MC-LAG/Port bonding across chassis?

I am planning my core switch with 10Gbps, and need MC-LAG or similar function which can bond port across two switch chassis for HA or redundancy. If aggregating bandwith is not required (ie having one port in standby mode is acceptable) maybe alternatives that do not depend on switch features can b...
by olivier2831
Mon Aug 12, 2019 12:30 pm
Forum: Announcements
Topic: Newsletter #90
Replies: 55
Views: 25279

Re: Newsletter #90

Though I'm also really interested in the new outdoor switches (CSS610-8P-2S+, CRS318-16P-2S+, CRS318-16Fi-2S), is there any prediction as to when they'll be released?
+1 for outdoor switches availability prediction
by olivier2831
Fri Jul 26, 2019 6:30 pm
Forum: General
Topic: Feature Request TR-069 CPE
Replies: 85
Views: 32131

Re: Feature Request TR-069 CPE

For ISP - it is not a problem. For ex. you have 30000 rb951ui and tr-069. But some of them - under the NAT. So, you have 2 options - vpn and stun. I prefer stun. Clear?
Yes, I agree, TR069 and Zero-touch configuration are not to be confused.
by olivier2831
Thu Jul 25, 2019 6:53 pm
Forum: General
Topic: Feature Request TR-069 CPE
Replies: 85
Views: 32131

Re: Feature Request TR-069 CPE

+1 for STUN
To keep plug-n-play feature of TR069-Annex G-enabled router, a public STUN server address or hostname should, by default, be configured in Mikrotik router default config, right ?
Does such public STUN server exist or do you think Mikrotik should operate its own STUN server ?
by olivier2831
Tue Jul 23, 2019 6:18 pm
Forum: General
Topic: LLDP
Replies: 130
Views: 51552

Re: LLDP

Agree 100%. It is a fundamental requirement in any enterprise switch.
+1 for LLDP-MED which really simplify things.
by olivier2831
Mon Jul 08, 2019 2:58 pm
Forum: General
Topic: CSS610-8P-2D+OUT availability
Replies: 3
Views: 874

Re: CSS610-8P-2D+OUT availability

Considering the only reference to that part number I can find is this one thread, you'll have to be more specific at what device your looking at. Do you have a link to the announcement for it? Yes, I should have been explicit on this. My question relates to the product announced in page 38 of the [...
by olivier2831
Mon Jul 08, 2019 11:48 am
Forum: General
Topic: CSS610-8P-2D+OUT availability
Replies: 3
Views: 874

Re: CSS610-8P-2D+OUT availability

Can we have a rough estimee of its availability ?
Anyone ?
by olivier2831
Tue Jul 02, 2019 7:18 pm
Forum: General
Topic: CSS610-8P-2D+OUT availability
Replies: 3
Views: 874

CSS610-8P-2D+OUT availability

Hello,

I read announcement of CSS610-8P-2D+OUT switch.
I find it a very attractive product in WiFi setups where it could simplify a lot cabling topologies.

Can we have a rough estimee of its availability ?

Best regards
by olivier2831
Mon Jun 17, 2019 5:27 pm
Forum: Beginner Basics
Topic: Explain RSTP priority and path-cost [SOLVED]
Replies: 1
Views: 985

Explain RSTP priority and path-cost [SOLVED]

Hello, I'm currently testing RSTP between two 6.44.3 instances. I'm not familiar at all with STP and the likes. I looked at first example (the one involving switches SW1, SW2, SW3 and SW4 and hosts A and B) in RSTP Wiki page (see [1]). 1. I can read that SW1 settings rely on priority while SW4 rely ...
by olivier2831
Mon Jun 17, 2019 9:51 am
Forum: Wireless Networking
Topic: How replace a failing Wireless Wire Dish unit ?
Replies: 2
Views: 675

Re: How replace a failing Wireless Wire Dish unit ?

Besides admin users, IP addresses, for normal management, etc,you will have to configure the following as a minimum to get the link up: 1. Mode: "Bridge" or "Station Bridge" depending which one you replacing 2: SSID 3: SSID Password Yes I forgot the last two ones. In a couple of days, I'll export b...
by olivier2831
Sun Jun 16, 2019 5:43 pm
Forum: Wireless Networking
Topic: Configuring a Wireless Wire Dish as a switch ?
Replies: 2
Views: 815

Configuring a Wireless Wire Dish as a switch ?

Hello, I hope my question will not sound too stupid for experienced people but in a PtP setup linking a secondary building to a main one where all resources (DHCP server, WAN, ...) are located, is it possible to configure both master and slave units of Wireless Wire Dish as switches ? WAN ---- Main ...
by olivier2831
Sun Jun 16, 2019 5:34 pm
Forum: Wireless Networking
Topic: How replace a failing Wireless Wire Dish unit ?
Replies: 2
Views: 675

How replace a failing Wireless Wire Dish unit ?

Hello, My first Wireless Wire Dish is about to enter production in a couple of days. Both "dishes" arrived pre-configured : one unit as master, the other as slave. What should I prepare in case master or slave unit has a non-recoverable hardware issue ? Ideal steps include: - configuring spare devic...
by olivier2831
Sun Jun 16, 2019 5:11 pm
Forum: Beginner Basics
Topic: Interconnecting two CRS324 through two different links
Replies: 0
Views: 497

Interconnecting two CRS324 through two different links

Hello, I'm about to install two CRS324 units in two buildings :one CRS324 in main building, one in secondary building. Main building hosts two WAN connections while secondary building has none. Both building can be interconnected through two different dedicated links: - one made of a Wireless Wire D...
by olivier2831
Fri Jun 07, 2019 4:43 pm
Forum: Wireless Networking
Topic: Experience with PtP Wireless Wire Dish link
Replies: 3
Views: 1298

Re: Experience with PtP Wireless Wire Dish link

Complementing my previous message, I installed a 130m PtP Wireless Dish Link.
Rough measures (with iperf and a pair of PCs) showed 900Mb/s throughput, with a sunny weather.
This link will enter production at the end of June.
by olivier2831
Wed May 29, 2019 7:14 pm
Forum: Wireless Networking
Topic: Experience with PtP Wireless Wire Dish link
Replies: 3
Views: 1298

Experience with PtP Wireless Wire Dish link

Hello, I've read in this [1] thread, some kind of survey regarding PtMP W60g performance. Some commented their own experience in a PtP setup. 1. Can I ask here, to sum up here your experiences with a Wireless Wire Dish link in Point-to-Point setup ? Do you have disconnections ? How often ? Do they r...
by olivier2831
Mon May 27, 2019 12:54 pm
Forum: Beginner Basics
Topic: Advice on backing a 60GHz link with a private DSL line
Replies: 2
Views: 759

Re: Advice on backing a 60GHz link with a private DSL line

With 60m clear LOS you van espect 1GBit with Wireless Wire you don’t need the dish
What are the technical downsides of using a Dish instead of a Wire ?
by olivier2831
Fri May 24, 2019 4:48 pm
Forum: Beginner Basics
Topic: Troubeshooting Performance testing
Replies: 3
Views: 728

Re: Troubeshooting Performance testing

This will send traffic from TG, through DUT and back to TG.
Am I correct this only involves one DUT interface ?
When would prefer to use such traffic as opposed to traffic going in through one interface and leaving through another ?
by olivier2831
Fri May 24, 2019 3:46 pm
Forum: Beginner Basics
Topic: Troubeshooting Performance testing
Replies: 3
Views: 728

Re: Troubeshooting Performance testing [SOLVED]

I could at last get some positive testing. Referring to [1], I simply had to run both r12 and r21 traffic to have "quick tx-template ..." command stop displaying "100% Lost". (Previously, I ran r12 traffic alone, as a first step). I hope this would help others [1] https://wiki.mikrotik.com/wiki/Manu...
by olivier2831
Fri May 24, 2019 3:36 pm
Forum: Beginner Basics
Topic: Advice on backing a 60GHz link with a private DSL line
Replies: 2
Views: 759

Advice on backing a 60GHz link with a private DSL line

Hello, I'm designing a setup for which a 60GHz radio link will be installed between two buildings. One building host ISP lines while the "remote" has no ISP line at all. Building are 60m from each other and I expect a 300Mb/s throughput through this 60GHz radio (Wireless Wire Dish). There is a priva...
by olivier2831
Fri May 24, 2019 1:46 pm
Forum: Beginner Basics
Topic: crs125-24g-1s-2hnd 100% cpu load when i am doing speedtest
Replies: 6
Views: 1084

Re: crs125-24g-1s-2hnd 100% cpu load when i am doing speedtest

...
For self-switch test:
http://prntscr.com/nqzskg
I'm currently doing load testing with CRSXXX devices.
Which command did you use to produce the above report ?
by olivier2831
Wed May 22, 2019 11:12 am
Forum: Beginner Basics
Topic: Troubeshooting Performance testing
Replies: 3
Views: 728

Troubeshooting Performance testing

Hello, I'm discovering https://wiki.mikrotik.com/wiki/Manual:Performance_Testing_with_Traffic_Generator . I tried to reproduce these tests in my lab but failed miserably Before defining tests with /tool traffic-generator packet-template commands, what are the appropriate set of commands to run on Tr...
by olivier2831
Tue May 14, 2019 4:00 pm
Forum: Beginner Basics
Topic: Re-phrase o a warning on Wiki PCC page
Replies: 3
Views: 568

Re-phrase o a warning on Wiki PCC page

Hello, Reading [1] again and again, I still don't understand the following sentence: With policy routing it is possible to force all traffic to the specific gateway, even if traffic is destined to the host (other that gateway) from the connected networks. This way routing loop will be generated and ...
by olivier2831
Mon May 13, 2019 11:34 am
Forum: Beginner Basics
Topic: 6.44: DHCP server becomes invalid when removing ether2 from bridge
Replies: 8
Views: 971

Re: 6.44: DHCP server becomes invalid when removing ether2 from bridge

BTW, my friend @anav has a point here.... CRS3xx can HW offload VLAN filtering and using VLANs to simply partition the switch into several L2 domains might be actally better than using several bridges (I'm not sure if limit of single bridge per device being HW accelerated applies to CRS3xx as well)...
by olivier2831
Sat May 11, 2019 6:41 pm
Forum: Beginner Basics
Topic: Questions on Wiki's PCC page [SOLVED]
Replies: 8
Views: 976

Re: Questions on Wiki's PCC page [SOLVED]

1) LAN means local network, it depends on what your config uses. With default one, it's bridge. 2) Same thing, you can use both bridge as individual interface, or interface list if it's defined (I think default config has it). 3) Passthough tells router, when rule matches, if processing stops (pass...
by olivier2831
Sat May 11, 2019 6:11 pm
Forum: Beginner Basics
Topic: Questions on Wiki's PCC page [SOLVED]
Replies: 8
Views: 976

Re: Questions on Wiki's PCC page [SOLVED]

Do you really want me to post here to PCC examples of PCC where in one case passthrough = no is used for everything and in the other passthrough = yes for everything from legitimate sources. IMHO, posting those examples should be helpful at least for me, as I couldn't successfully the referenced on...
by olivier2831
Fri May 10, 2019 7:44 pm
Forum: Beginner Basics
Topic: Questions on Wiki's PCC page [SOLVED]
Replies: 8
Views: 976

Re: Questions on Wiki's PCC page [SOLVED]

May I add the following question: add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \ per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn ... add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-...
by olivier2831
Fri May 10, 2019 7:29 pm
Forum: Beginner Basics
Topic: 6.44: DHCP server becomes invalid when removing ether2 from bridge
Replies: 8
Views: 971

Re: 6.44: DHCP server becomes invalid when removing ether2 from bridge

At the first impulse I'd change the order of execution of points 1. and 2. But I'm not sure about inner working in RB. On a lab box, I tried my suggested process before posting and it worked OK apparently but I'm far from being convinced by this single test. I've been so many times beaten that I pr...
by olivier2831
Fri May 10, 2019 7:20 pm
Forum: Beginner Basics
Topic: Questions on Wiki's PCC page [SOLVED]
Replies: 8
Views: 976

Questions on Wiki's PCC page [SOLVED]

Hello, I'm learning PCC reading [1]. May I ask the following questions: / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN 1. Shall I read "interface=bridge" anywhere "interface=LAN" is written or shall I use values such as "interface=ether1" ? add chai...
by olivier2831
Fri May 10, 2019 4:38 pm
Forum: Beginner Basics
Topic: 6.44: DHCP server becomes invalid when removing ether2 from bridge
Replies: 8
Views: 971

Re: 6.44: DHCP server becomes invalid when removing ether2 from bridge

Bridge by default assumes MAC address of the first active member port. Highly likely that's ether2 in your particular setup. If you remove "MAC donor" port from bridge, it looses MAC address. Solution: on bridge set auto-mac=no admin-mac=uu:vv:ww:xx:yy:zz where the set MAC address is one of port MA...
by olivier2831
Thu May 09, 2019 11:00 pm
Forum: Beginner Basics
Topic: 6.44: DHCP server becomes invalid when removing ether2 from bridge
Replies: 8
Views: 971

6.44: DHCP server becomes invalid when removing ether2 from bridge

Hello, I've just noticed the following behaviour on a 6.44.3-equiped CRS328-24P: - CRS328 is set in router mode with ether1 as a DHCP-configured WAN port - all other etherXX, sfpplus-XX interfaces belong to bridge-named bridge - a dhcp1 DHCP server is running on this "bridge" interface. When I remov...
by olivier2831
Mon Apr 29, 2019 2:21 pm
Forum: Beginner Basics
Topic: hEXr3, 6.44.2 bridge mode [SOLVED]
Replies: 27
Views: 5331

Re: hEXr3, 6.44.2 bridge mode [SOLVED]

This issue was reported with other devices as well. Has this issue been acknowledged as such (ie as being an issue) or do Mikrotik evaluates this as a feature that should be kept ? Current deafening silence on this topic is a bit worrying as QuickFig is the first tool that newcomers as myself, do u...
by olivier2831
Mon Apr 29, 2019 10:32 am
Forum: General
Topic: Classes in DHCP server
Replies: 1
Views: 484

Classes in DHCP server

Hello, I'm currently using ISC dhcp server's classing features (see [1]) on a Linux server to allocate DHCP clients in specified address pools. For instance: - clients with MAC address ending with aa are assigned an address in address pool 192.168.11.10-254, - clients with MAC address ending with ab...
by olivier2831
Wed Apr 24, 2019 11:24 am
Forum: Beginner Basics
Topic: Clarify VLAN0/VLAN1 roles in CRS1xx/2xx wiki page
Replies: 1
Views: 384

Clarify VLAN0/VLAN1 roles in CRS1xx/2xx wiki page

Hello,

In [1], VLAN0 tagging is described as Untagged.
At the same time, in 6.44, Untagged is assigned to VLAN1.

What could best improve this documentation ?

[1] https://wiki.mikrotik.com/wiki/Manual:C ... s_examples
by olivier2831
Tue Apr 23, 2019 12:44 pm
Forum: Beginner Basics
Topic: hEXr3, 6.44.2 bridge mode [SOLVED]
Replies: 27
Views: 5331

Re: hEXr3, 6.44.2 bridge mode [SOLVED]

Yes it looks like the "bridge" template is not really OK, probably almost nobody uses it and it receives little attention. (normally people who want a 5-port bridge will buy a switch instead!) hEX PoE has unique PoE passthrough capabilities (you can power it with PoE while it PoE-powers up to 4 dev...
by olivier2831
Thu Apr 18, 2019 1:55 pm
Forum: Beginner Basics
Topic: Advice on WAN failure detection
Replies: 0
Views: 477

Advice on WAN failure detection

Hello, I'm preparing a 6.44.2-powered CRS328 I intend to use a switch or a router with an enabled OpenVPN client for its remote management. It will be directly connected to 2 xDSL routers, both connected to the same ISP through PPPoE or DHCP. I installed a second xDSL line as I intend to dedicate it...
by olivier2831
Thu Apr 18, 2019 12:13 pm
Forum: Beginner Basics
Topic: DHCP Server with specific gateway for specific gateway
Replies: 2
Views: 1142

[SOLVED] Re: DHCP Server with specific gateway for specific gateway

You can add IP address reservations for MAC addresses. And then you can add different config for addresses/subnets in "/ip dhcp-server network". Thanks to the above advice, I could specify a specific gateway address for specific MACs, using the following WebFig steps: - in IP/DHCP Server/Option for...
by olivier2831
Wed Apr 17, 2019 6:49 pm
Forum: Beginner Basics
Topic: DHCP Server with specific gateway for specific gateway
Replies: 2
Views: 1142

DHCP Server with specific gateway for specific gateway

Hi, With 6.44.2 on a CRS328-28P, is it possible to configure one (or several) DHCP server(s) so that: - some LAN devices (IP phones) identified by MAC address, are assigned a specific gateway (one WAN link dedicated to IP phones) - the other devices are assigned a default gateway - all devices belon...
by olivier2831
Wed Apr 17, 2019 11:49 am
Forum: General
Topic: Feature Request: 802.1X over ethernet
Replies: 40
Views: 14150

Re: Feature Request: 802.1X over ethernet

When to expect 802.1x support in RouterOS? Strong need in wired 802.1X MAJOR CHANGES IN v6.45: ---------------------- !) dot1x - added support for IEEE 802.1X Port-Based Network Access Control (CLI only); ---------------------- Shall we hope for Radius assigned VLAN with this promising feature ?
by olivier2831
Wed Apr 17, 2019 9:29 am
Forum: Beginner Basics
Topic: Best practices to copy config from one device to another
Replies: 3
Views: 718

Re: Best practices to copy config from one device to another

2. you would want to check the config over, remove any MAC address. unfortunately if you set admin-mac=xxx on a interface, this part of the config will be in the export. Yes, unfortunately, there is no variable in RouterOS scripts, it seems. You can't have lines like /globalvar set serialnumber "ba...
by olivier2831
Tue Apr 16, 2019 5:35 pm
Forum: General
Topic: DHCP client on bridge does not work?
Replies: 19
Views: 13967

Re: DHCP client on bridge does not work?

I waste so many hours and finally found this thread. @2frogs solution works for me - just disabled RSTP!
How did you exactly do this ?
protocol-mode=none in bridge setting ?
Loop-protect in interface ?
Something else ?
by olivier2831
Tue Apr 16, 2019 5:28 pm
Forum: Beginner Basics
Topic: Best practices to copy config from one device to another
Replies: 3
Views: 718

Best practices to copy config from one device to another

Hello, I'm quite new in Mikrotik RouterOS world. What are the best practices to copy config from one RB device to another one ? To simplify things, source and destination devices both have the same hardware and software. I know /export and /backup tools exist but: - /backup produces files that can't...
by olivier2831
Tue Apr 16, 2019 2:46 pm
Forum: Beginner Basics
Topic: hEXr3, 6.44.2 bridge mode [SOLVED]
Replies: 27
Views: 5331

Re: hEXr3, 6.44.2 bridge mode [SOLVED]

problem identified, manually fixed and ticket opened. Mikrotik is adding a default rule that nobody outside of the LAN can access. But for the bridge this is not working. Disabling this rule made the hEX bridge accessable. Hi, I also can across this one as setting an hEX into bridge mode, in my tes...
by olivier2831
Mon Apr 15, 2019 12:38 pm
Forum: Beginner Basics
Topic: Need some recommendation for hardware
Replies: 5
Views: 823

Re: Need some recommendation for hardware

As I already wrote: none of Mikrotik devices support xDSL upstream ... If the third-party xDSL SFP modules (there are a few that in principle work with MT) don't work with particular ISP (and chances that they won't work are higher than 50%), then one will always have to use some (slightly more sop...
by olivier2831
Fri Apr 12, 2019 7:19 pm
Forum: Wireless Networking
Topic: Recommended device to give game console access to WPA2 Enterprise
Replies: 0
Views: 510

Recommended device to give game console access to WPA2 Enterprise

Hello, I'm looking for a device I could lend/rent/sell to game console or smart TV owners allowing them to access to a WPA2 Enterprise network : WPA2 Enterprise network <---2.4/5 GHz ----> Device <--- Ethernet ---> Game console/Smart TV/Whatever My requirements are: - dual 2.4/5 Ghz radio uplink - l...
by olivier2831
Fri Apr 12, 2019 4:36 pm
Forum: Wireless Networking
Topic: Recommendation for a 100m PtP link ?
Replies: 3
Views: 716

Re: Recommendation for a 100m PtP link ?

With a slightly bigger budget, this unit is probably overkill but excellent for a one pair solution https://mikrotik.com/product/wireless_wire_dish I forgot to mention it in my original post but when writing it, I had this Wireless Wire Dish in mind. In secondary building, I expect 50 connected stu...
by olivier2831
Fri Apr 12, 2019 11:43 am
Forum: Wireless Networking
Topic: Recommendation for a 100m PtP link ?
Replies: 3
Views: 716

Recommendation for a 100m PtP link ?

Hello, I'm working on a new project for which I must provide Internet access services to users living in two different buildings. I can get FTTH lines on main building but I can't get any FTTH line in secondary building. Both buildings are close to each other (<100 m) with clear Line of Sight when c...
by olivier2831
Mon Apr 08, 2019 3:24 pm
Forum: Beginner Basics
Topic: How to properly 802.1Q-tag DHCPDISCOVERs ?
Replies: 1
Views: 442

How to properly 802.1Q-tag DHCPDISCOVERs ?

Hello, I'm working on a remote setup that involves a 6.44.2 hEX box. This box has an ether1 uplink to another switch and an ether2 downlink to an IP camera. My setup involves a VLAN2 network. I'm trying to configure this box to act as a casual VLAN-enabled switch (routing is done elsewhere). By "cas...
by olivier2831
Wed Mar 13, 2019 11:14 am
Forum: Beginner Basics
Topic: Which tool for traffic receiving ?
Replies: 0
Views: 429

Which tool for traffic receiving ?

Hello, I'm about to do some performance testing and I'm discovering RouterOS 6.44 long Tools list. 1. It seems Traffic Generator can generate some outbound traffic on specified interfaces. Which tool should be used to read inbound traffic and display related statistics ? 2. Before testing one device...
by olivier2831
Wed Mar 13, 2019 10:19 am
Forum: General
Topic: Feature Request: IPerf
Replies: 56
Views: 15301

Re: Feature Request: IPerf

Hello, we already have a bandwidth testing tool which is fully integrated into RouterOS and works properly with the RouterBOARD ethernet drivers. The tool is called 'Traffic generator' (available both in WinBox and from the command line interface). Please take a look. We hope you like it - https://...
by olivier2831
Mon Mar 11, 2019 10:51 am
Forum: General
Topic: NbaseT questions
Replies: 1
Views: 610

NbaseT questions

Hi,

1. What about NbaseT support (see [1]) in Mikrotik products ?
2. Is possible for 10GbaseT ports to support 2.5 or 5G one day (with cat5 cables) or does NbaseT requires a different implementation ?

Best regards

[1] https://en.wikipedia.org/wiki/2.5GBASE-T_and_5GBASE-T
by olivier2831
Fri Mar 08, 2019 9:31 am
Forum: Beginner Basics
Topic: Can't access to RB960PGS in bridge mode (latest 6.44)
Replies: 8
Views: 2485

Re: Can't access to RB960PGS in bridge mode (latest 6.44)

A couple of things that might make a difference or not: Remove ether1 from WAN interface list, add it to LAN interface list. Add bridge to LAN interface list. Move IP address from ether2 to bridge. Probably most of firewall rules are not needed any more or should be reworked (I see a ppp interface ...
by olivier2831
Thu Mar 07, 2019 7:50 pm
Forum: Beginner Basics
Topic: Can't access to RB960PGS in bridge mode (latest 6.44)
Replies: 8
Views: 2485

Re: Can't access to RB960PGS in bridge mode (latest 6.44)

Summary: With a 6.44-powered RB960PGS, as soon as I apply Bridge mode: - I cannot access to the RB960PGS through its web app and any Ethernet port - I can connect to it with Winbox and its MAC address - the box replies to pings. Here is the (anonymized) config (/export file=/disk1/allconfig). What s...
by olivier2831
Thu Mar 07, 2019 6:09 pm
Forum: Beginner Basics
Topic: Can't access to RB960PGS in bridge mode (latest 6.44)
Replies: 8
Views: 2485

Re: Can't access to RB960PGS in bridge mode (latest 6.44)

Huh, I've always though you can transfer a file also when using MAC winbox connection. Are you saying it doesn't work?
Not exactly: after searching in Winbox GUI, I couldn't find a way to do it.
Either this feature doesn't exist anymore, or I simply didn't find it.
by olivier2831
Thu Mar 07, 2019 10:25 am
Forum: Beginner Basics
Topic: Can't access to RB960PGS in bridge mode (latest 6.44)
Replies: 8
Views: 2485

Re: Can't access to RB960PGS in bridge mode (latest 6.44)

The exported config file should be visible under Files menu ... and you should be able to download it from there. I could insert a USB key in RB960PGS and export a file there. Anyway, when IP communications are broken and you don't have any USB key or slot at hand, how would you proceed to download...
by olivier2831
Wed Mar 06, 2019 8:12 pm
Forum: Beginner Basics
Topic: Can't access to RB960PGS in bridge mode (latest 6.44)
Replies: 8
Views: 2485

Can't access to RB960PGS in bridge mode (latest 6.44)

Hello, I'm setting up a brand new RB960PGS (hEX PoE). I intend to use it as a switch. After unboxing, I uploaded latest 6.44 using QuickFig web app. I then selected Bridge mode with using QuickFig. Just after doing this, I can't access the box anymore: - the box replies to pings (100% sure), - but I...
by olivier2831
Wed Mar 06, 2019 8:07 pm
Forum: Beginner Basics
Topic: show config
Replies: 5
Views: 56680

Re: show config

Psst rightclick the winbox terminal and select "copy all"
How exactly (I'm using Winbox 3.18) ?
by olivier2831
Wed Feb 20, 2019 9:40 am
Forum: General
Topic: How to allocate one ONT to two different routers
Replies: 6
Views: 1021

Re: How to allocate one ONT to two different routers

The issue is not ISP availability its failure of the router unit as I read it. Yes, you correctly read my issue: it's about router failure. I can quite difficult to rack and configure one such router though they are not so expensive. Having two routers backing each other would give me enough time t...
by olivier2831
Tue Feb 19, 2019 11:38 am
Forum: General
Topic: How to allocate one ONT to two different routers
Replies: 6
Views: 1021

Re: How to allocate one ONT to two different routers

For me, a dedicated Ethernet Bypass switch would make a lot of sense within Mikrotik portfolio as alternatives seem quite expensive and Mikrotik masters involved technologies (PoE, bypass, ...).
by olivier2831
Tue Feb 19, 2019 11:08 am
Forum: General
Topic: How to allocate one ONT to two different routers
Replies: 6
Views: 1021

Re: How to allocate one ONT to two different routers

I think that the RB1100 (any version) has 2 ports with bypass, meaning that you can connect the ONT to the Eth11 and other router on Eth12. You should put your dhcp client, ppeoe client or whatever yo use to acquire IP from the telco on both routers. While the RB1100 is on, the IP is acquired by th...
by olivier2831
Fri Feb 15, 2019 10:39 am
Forum: General
Topic: How to allocate one ONT to two different routers
Replies: 6
Views: 1021

How to allocate one ONT to two different routers

Hello, Telco often provide and maintain an ONT to terminate their fiber Internet access services. This ONT has a single fiber uplink port and a single Gigabit downlink port. In my quest for higher resilience, I can subscribe to a second Internet access and install two routers but if a router ever fa...
by olivier2831
Fri Dec 28, 2018 2:52 pm
Forum: General
Topic: How about adding VLAN in QuickFig's PPPoE settings ?
Replies: 2
Views: 446

Re: How about adding VLAN in QuickFig's PPPoE settings ?

With QuickFig, it really has to be "Less is More". VLAN is not for total beginners and those should spend some time figuring out RouterOS. There are plenty of topic threads in this forum discussing VLANs, including many miss-conceptions (about both ROS and VLAN). The next request that might come is...
by olivier2831
Fri Dec 28, 2018 12:57 pm
Forum: General
Topic: How about adding VLAN in QuickFig's PPPoE settings ?
Replies: 2
Views: 446

How about adding VLAN in QuickFig's PPPoE settings ?

Hello, Looking at v6.43.8 QuickFig form, it seems impossible to specify a VLAN tag for a PPPoE client. Though this can be configured with WebFig or alternate means, would you qualify this as a welcomed addition to QuickFig ? To me beeing able to set this through QuickFig is a very nice feature as VL...
by olivier2831
Tue Dec 18, 2018 5:53 pm
Forum: Beginner Basics
Topic: What is WebFig VLAN forms for ?
Replies: 2
Views: 611

Re: What is WebFig VLAN forms for ? [SOLVED]

In any case you have to put either "bridge" or "switch1-cpu" on the list of tagged members of selected VLAN. Using WebFig, - I added a "bridge.2" VLAN interface, build on "bridge" interface - I re-assigned 192.168.2.254/24 address to "bridge.2" interface - I added "switch1-cpu" on the list of tagge...
by olivier2831
Tue Dec 18, 2018 4:19 pm
Forum: Beginner Basics
Topic: What is WebFig VLAN forms for ?
Replies: 2
Views: 611

What is WebFig VLAN forms for ?

Hello, I'm discovering RouterOS 6.43.7 with a CRS112. Please, forgive me if bellow questions seem too easy or incorrectly worded but: 1. What are WebFig Bridge/VLANs and Switch/VLAN forms for ? 2. How do set "CRS112 LAN ports" (ie all LAN Interface List members) to be tagged members of VLAN 2 while ...
by olivier2831
Tue Dec 18, 2018 12:11 pm
Forum: Beginner Basics
Topic: Why should one need to add a new bridge ?
Replies: 2
Views: 577

Re: Why should one need to add a new bridge ? [SOLVED]

Bridge VLANs are new since ROS 6.41 ... until then, one could live without any bridge at all. Where now one uses bridge port one used to use master-port . If the ports were not switched, then configuration was done directly on ports, including VLAN configuration. And if one wanted to bridge multipl...
by olivier2831
Mon Dec 17, 2018 1:53 pm
Forum: Beginner Basics
Topic: Why should one need to add a new bridge ?
Replies: 2
Views: 577

Why should one need to add a new bridge ?

Hello, RouterOS v6.43 default config includes a bridge named bridge and all ports belong to this default bridge. My understanding of bridge is use bridge as synonymous of switch. In another hand, documentation (see [1]) mentions creating a new bridge1 bridge as a first step when creating VLANs. Why ...
by olivier2831
Wed Dec 12, 2018 5:51 pm
Forum: Beginner Basics
Topic: Recommendations for router/LAN performance testing
Replies: 2
Views: 637

Recommendations for router/LAN performance testing

Hello, I'm about to deploy a new setup in a remote location. This setup includes: - two WAN connections (with two different ISPs) - one main router (either a CRS112 or a CCR1009) - one server (mostly for logging) - one LAN switch (CRS328) - 24 WiFi AP All connections are Gigabit expect main router t...
by olivier2831
Wed Dec 12, 2018 3:38 pm
Forum: Beginner Basics
Topic: Firewall Killing Bandwidth
Replies: 2
Views: 734

Re: Firewall Killing Bandwidth

There is an upper limit to the speed you can achieve with a single session.
What is it meant by "single session" ?
All traffic from a single Ethernet source targeted to a single Ethernet destination belongs to such session ?
by olivier2831
Wed Dec 05, 2018 2:38 pm
Forum: Beginner Basics
Topic: Recommendations for 10Gb:s server connections
Replies: 0
Views: 534

Recommendations for 10Gb:s server connections

Hello,

What would you recommend to connect a Linux server with 10Gb/s link to a CRSXXX switch or router ?
What about using an Intel x520-da nic with a SFP+DAC cable (as server is at close range from CRSXXX switch or router) ?

Best regards
by olivier2831
Wed Nov 28, 2018 10:02 am
Forum: Beginner Basics
Topic: Update Manual:CRS1xx/2xx_series_switches with CRS112-8P-4S-IN data
Replies: 0
Views: 478

Update Manual:CRS1xx/2xx_series_switches with CRS112-8P-4S-IN data

Hello,

CRS112-8P-4S-IN is not currently listed in [1].
Could it be added ?

[1] https://wiki.mikrotik.com/wiki/Manual:C ... tch_models

Best regards
by olivier2831
Tue Nov 27, 2018 3:36 pm
Forum: Beginner Basics
Topic: Explain what a Master/Slave interface is
Replies: 6
Views: 10106

Re: Explain what a Master/Slave interface is

CRS112 is definitely not for you unless you want to start a thread now asking why it won't route at the correct speeds! With that kind of connectivity I would strongly suggest looking at something like a CCR1009.
I ordered one CCR1009, this morning.
Thanks for this advice.
by olivier2831
Tue Nov 27, 2018 9:29 am
Forum: Beginner Basics
Topic: Explain what a Master/Slave interface is
Replies: 6
Views: 10106

Re: Explain what a Master/Slave interface is

If you WAN links are more than 100/100 then I'd recommend getting a dedicated router and switch rather than the CRS112 I'm currently targeting routing between dual Gigabit WAN links (800/200Mb/s for download/upload on each) and 20 WiFi access point. Which product withing [1] Mikrotik routers range ...
by olivier2831
Mon Nov 26, 2018 11:06 am
Forum: Beginner Basics
Topic: Explain what a Master/Slave interface is
Replies: 6
Views: 10106

Explain what a Master/Slave interface is

Hello, I'm quite new to RouterOS. My ultimate goal is to configure a 6.43 CRS112 as a gateway to two different ISP. When trying to configure such setup, I realized I don't understand some basic notions. I would be very pleased to get some explanations on them. What is a slave interface ? How do you ...
by olivier2831
Fri Nov 23, 2018 2:13 pm
Forum: Beginner Basics
Topic: Triggering DNS updates when WAN link fails or recovers
Replies: 2
Views: 530

Triggering DNS updates when WAN link fails or recovers

Hello, I've read this [1] document and found it very interesting. Though, I still have a remaining question: which is the simplest way to trigger a DynDNS update script whenever a WAN link status changes (either becomes up or down) ? Having updated DNS records would help to keep connections coming i...
by olivier2831
Thu Sep 14, 2017 12:04 pm
Forum: RouterBOARD hardware
Topic: How to reset RB2011
Replies: 3
Views: 31949

Re: How to reset RB2011

Hello,
Using Winbox, I could connect to my unresponsive RB2011 and reset its config.
Thanks you very much for you all, for your precious advices.
by olivier2831
Mon Sep 11, 2017 1:03 pm
Forum: RouterBOARD hardware
Topic: How to reset RB2011
Replies: 3
Views: 31949

How to reset RB2011

Hello, After editing a firewall rule in a Routerboard RB2011Ui AS-RM config, I lost access to its config webapp. I'm trying to gain access back but met no success yet using the reset button on the box back. 1. Can someone recommend (and detail) a reliable reset procedure either using this reset butt...