Community discussions

Search found 19 matches

by berzerker
Fri Oct 25, 2019 4:26 pm
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 131
Views: 57698

Re: v6.46beta [testing] is released!

*) wireless - updated "united-states" regulatory domain information;
Can you elaborate on this?
bump at 'tik devs?

Edit: Well I answered my own question, still no 160MHz support for US models. Is this *ever* going to be implemented?
by berzerker
Tue Oct 22, 2019 4:46 am
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 131
Views: 57698

Re: v6.46beta [testing] is released!

*) wireless - updated "united-states" regulatory domain information;
Can you elaborate on this?
by berzerker
Wed Aug 21, 2019 2:35 am
Forum: General
Topic: IKEv2 w/ iOS and macOS: an unexpected error occurred
Replies: 1
Views: 451

IKEv2 w/ iOS and macOS: an unexpected error occurred

Has anyone recently tried to set up an IKEv2 connection for roadwarrior setups for iOS/macOS? I'm getting an odd error, almost immediately after trying to turn on the connection, an error on the device pops up "an unexpected error occurred." Not very informative, but seeing almost no logs on the rou...
by berzerker
Sat Aug 17, 2019 8:10 pm
Forum: General
Topic: AT&T Fiber Gateway Passby
Replies: 3
Views: 401

Re: AT&T Fiber Gateway Passby

According to https://forum.mikrotik.com/viewtopic.php?t=137193 , both the RB4011 and CCR1009 perform well bypassing an AT&T Gateway. You'll probably need a BGW210-700, though. The Paces have issues with keeping EAP connections alive and require constant pings on other solutions. See if you can get ...
by berzerker
Fri Aug 16, 2019 4:56 pm
Forum: General
Topic: AT&T Fiber Gateway Passby
Replies: 3
Views: 401

Re: AT&T Fiber Gateway Passby

According to https://forum.mikrotik.com/viewtopic.php?t=137193 , both the RB4011 and CCR1009 perform well bypassing an AT&T Gateway. You'll probably need a BGW210-700, though. The Paces have issues with keeping EAP connections alive and require constant pings on other solutions. See if you can get y...
by berzerker
Fri Aug 16, 2019 4:47 pm
Forum: General
Topic: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?
Replies: 77
Views: 9474

Re: Anybody ues AT&T Gigabit Fiber with Mikrotik RouterOS?

I have successfully implemented the bypass method both to a stand-alone ONT (bypassing a BGW210) as well as using a SFP fiber module to a Ciena eMUX 5150 series (bypassing a NVG595) and it is running very well. Additionally, I have created a script that automates the startup in case of a reboot (e....
by berzerker
Wed Jul 24, 2019 3:50 pm
Forum: Wireless Networking
Topic: 160MHz support for US RB4011
Replies: 4
Views: 733

Re: 160MHz support for US RB4011

I'm a bit confused, but why doesn't the US model of the RB4011 w/ WiFi support 160MHz channels? Sorry, but we are still in the process of certifying for US (U-NII-2), that's why you cannot choose any frequencies with the 160MHz configuration when country is set to united-states-3. Regarding 80MHz+8...
by berzerker
Wed Jul 24, 2019 6:05 am
Forum: Wireless Networking
Topic: 160MHz support for US RB4011
Replies: 4
Views: 733

160MHz support for US RB4011

I'm a bit confused, but why doesn't the US model of the RB4011 w/ WiFi support 160MHz channels? The option is selectable in the interface settings, and the output for the allowed channel list for "united states3" which is my only option says ac160 and ac80+80 are supported for both indoor and outdoo...
by berzerker
Tue Jul 02, 2019 4:19 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 74996

Re: v6.45.1 [stable] is released!

As far as I understand you are trying to configure server. Server requires RADIUS server with EAP support. Locally on the router it is not supported.
Ok...so that goes back to my original question. Will this be supported without the requirement of RADIUS, locally on ROS?
by berzerker
Tue Jul 02, 2019 4:08 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 74996

Re: v6.45.1 [stable] is released!

!) ike2 - added support for EAP authentication methods (eap-tls, eap-ttls, eap-peap, eap-mschapv2) as initiator; Since this is "as initiator," can I assume this isn't supported for running as a roadwarrior config? If so, when is support for that coming, if at all? Road warrior client is always an i...
by berzerker
Tue Jul 02, 2019 5:56 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 74996

Re: v6.45.1 [stable] is released!

!) ike2 - added support for EAP authentication methods (eap-tls, eap-ttls, eap-peap, eap-mschapv2) as initiator;
Since this is "as initiator," can I assume this isn't supported for running as a roadwarrior config?

If so, when is support for that coming, if at all?
by berzerker
Mon Jul 01, 2019 7:11 pm
Forum: General
Topic: Remote vs Memory Logging Inconsistencies
Replies: 4
Views: 344

Re: Remote vs Memory Logging Inconsistencies

UDP is used to send messages to syslog, and there is no buffering. So the sntp-related event is the first one which could be actually delivered as all those before happened while networking wasn't up yet. This makes sense. Is there no way to buffer logs to then send once networking is up? What woul...
by berzerker
Mon Jul 01, 2019 5:54 pm
Forum: General
Topic: Remote vs Memory Logging Inconsistencies
Replies: 4
Views: 344

Re: Remote vs Memory Logging Inconsistencies

UDP is used to send messages to syslog, and there is no buffering. So the sntp-related event is the first one which could be actually delivered as all those before happened while networking wasn't up yet. This makes sense. Is there no way to buffer logs to then send once networking is up? What woul...
by berzerker
Mon Jul 01, 2019 5:23 pm
Forum: General
Topic: Remote vs Memory Logging Inconsistencies
Replies: 4
Views: 344

Remote vs Memory Logging Inconsistencies

I've noticed some issues with regard to local vs remote logging. I have a syslog server set up (graylog) taking in logs from my devices, the following is the example of output from a CRS112: 10:12:34 system,info router rebooted 10:12:36 interface,info MGMT link up 10:12:40 bridge,info hardware offlo...
by berzerker
Sat Jun 08, 2019 9:26 pm
Forum: General
Topic: GoogleFiber
Replies: 16
Views: 1373

Re: GoogleFiber

Support just got back to me and set to set the chain in Mangle to OUTPUT. That seems odd. Hello, In RouterOS you can set QoS priority 3 to outgoing VLAN packets using this rule: /ip firewall mangle add chain=output out-interface=GoogleVLAN action=set-priority new-priority=3 Best regards, Follow up ...
by berzerker
Mon Feb 11, 2019 6:12 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 86229

Re: v6.44beta [testing] is released!

CRS328-24P-4S+RM: I'm unable to log into the console on 6.44beta61, anyone experiencing a similar issue? Tried with multiple cables. Couple of CRS112s I have on 6.43.8 work fine.
by berzerker
Thu Oct 26, 2017 5:10 pm
Forum: General
Topic: IKEv2 setup on 6.40.4
Replies: 5
Views: 10242

Re: IKEv2 setup on 6.40.4

All looks good. Make sure you are properly importing the certificate on Windows as shown in the manual. Also, please post full IPsec debug logs. So it actually works on Windows 7, but not on Windows 10. I suspect it might have something to do with the EKU on the cert. I can't access my LAN network ...
by berzerker
Thu Oct 26, 2017 8:57 am
Forum: General
Topic: IKEv2 setup on 6.40.4
Replies: 5
Views: 10242

Re: IKEv2 setup on 6.40.4

Here you can find complete tutorial for IKEv2 with RSA auth between RouterOS and Windows. https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_Ikev2_RSA_auth That's the guide I was following. I realized my "can't get private key" error was caused by me forgetting to replace the certifi...
by berzerker
Thu Oct 26, 2017 7:18 am
Forum: General
Topic: IKEv2 setup on 6.40.4
Replies: 5
Views: 10242

IKEv2 setup on 6.40.4

I'm having an issue, seemingly with certificates to setup an IKEv2 VPN w/ certs. I've followed the steps to create the certs, self-signed, using both on-router methods (/certificate add) and openssl on linux. I might be having an issue on the client side (testing on Windows 10) since I'm converting ...