MikroTik

berzerker

They did fix it on the 328, but it's still not working on my 309. My ticket is also silent with replies. Hopefully they'll address it in the next couple versions.

berzerker

Latest 7.11 release? And what switch are you using? I just tested this with 7.11 release version and mine are still not working. I suspect this may have to do with mine being EA models at this point, but not sure. Edit: well it does actually work in my CRS328, but not in my CRS309. Not sure what's g...

berzerker

How should I go about when I receive dynamic IP and gateway addresses from the PPPoE Client? Unlike the DHCP client (under advanced) there's no option to use a script for the PPPoE client.

In the PPP Profile, there's an area to set a script "On Up" or "On Down"

berzerker

Sorry can you elaborate where Mullvad comes into play? Isn't the client connecting directly to your CCR? Mullvad is set up as a Wireguard Peer. I have policy routing set up to mangle packets to a routing table, which then gets routed out the peer via /ip/routing. Basically, a very standard policy r...

berzerker

Configured a wireguard interface on my CCR2004 using mullvad for some downstream clients, experiencing very poor upload performance via speedtest: Latency: 3.42 ms (1.22 ms jitter) Download: 48.65 Mbps (data used: 69.8 MB) Upload: 0.02 Mbps [=====- ] 28% Standard config w/ fasttrack disabled (specif...

berzerker

I'm interested as well. Did anyone manage to get these working? They worked out-of-the-box in a Intel X520-DA2, I thought they'll just work on Mikrotiks, but CRS309/310 seem to see them (I can see the model, vendor, etc.) but no link, in either autoneg or forced 10G. Running 7.8. I have a ticket op...

berzerker

Another bump, any feedback from 'Tik?

berzerker

Bumping this to see if anyone has any other experience/ideas/suggestions.

Thanks!

berzerker

Oh, I was reading on my phone on a rooftop, and I thought I saw 7.8 on the CRS309 instead of 7.6. (Guess it's time to get glasses.) Have you tried setting it to 2.5Gbps or 10Gbps without auto-negotiation? When I'm done with my outside work today, I'll have to take one of those and try it on a 309 i...

berzerker

Oh, I was reading on my phone on a rooftop, and I thought I saw 7.8 on the CRS309 instead of 7.6. (Guess it's time to get glasses.) Have you tried setting it to 2.5Gbps or 10Gbps without auto-negotiation? When I'm done with my outside work today, I'll have to take one of those and try it on a 309 i...

berzerker

And under System Routerboard the firmware also 7.7?

7.8b2 has a warning that it's not for CRS300 devices.

7.6 firmware. I'm not on 7.8b on any device. Didn't think 7.6 firmware mattered since you mentioned the fixes were 7.4.1

berzerker

What version of RouterOS are you running? What version of firmware is on the switch/router? There were some SFP+ updates in 7.4.1 and later I believe. I have a couple of the EA versions of those and they seem to work fine. The switch (or router, in my case a CCR2004) seems to negotiate 10G to the S...

berzerker

I doubt its a priority unless they have customer, (talking in the $100,000+ range) that requests that functionality............. If that were the stipulation, IPv6 would have been supported in RouterOS 5 lol. This doesn't seem like a huge deal to implement. Like I mentioned, it's based on a newer r...

berzerker

Hello, I have a few of these UACC-CM-RJ45-MG new "multi-gig" NBASE-T RJ45 transceivers and they do not appear to be working in any of my SFP+-supported Mikrotik gear. I get no link activity with both autonegotiation and manual speed negotiation. This device seems similar to the S+RJ10, jus...

berzerker

Any reason you're not just using LACP? 802.3ad is a much better LAG protocol since it has support for both aggregation and failover. It's a dynamic protocol that will work even with some ports disconnected as a "psuedo-failover" mode.

berzerker

Exactly??? with 3 { one for each line??? Working concept: { :local array { "item1"="value1"; "item2"="value2"; "item3"="value3" } :foreach x,y in=$array do={ :put "$x=$y" } } It's morning here, you'll have to forgive me :P edited...

berzerker

The code example do not work at all, first, you can not directly declare one variable with $ on name second, this is not one array, missing all ; between items. the correct code, regardless the final purpose, is :local array { "item1"="value1"; "item2"="value2&quo...

berzerker

Hello, I have the following code example: :local $array { "item1"="value1" "item2"="value2" "item3"="value3" } I would like to reference, say, "value2" specifically as a single value in a specifically created new variable. So I wo...

berzerker

Just want to say that I also had success with this container! Thank you again for your work.

Just a note that the VLANs should be changed/specified in *both* the run.sh file and the Dockerfile. I initially missed that and was wondering why the ethernet interfaces weren't getting created correctly.

berzerker

DHCP client, but I believe I did get this figured out. I'm using NetWatch instead, and using two static routes for each gateway as a ping monitor, then modifying the static routes distances. I believe this is the "older" method, but it works for executing scripts in the event a failover oc...

berzerker

Hi, is there a method for using this with 2 Dynamic WAN addresses? I tried setting the gateways to interfaces, but that doesn't seem to be working. I'm unable to ping 1.1.1.1 when the static route for 1.1.1.1/32 is set up

berzerker

Any update on 160MHz support for the RB4011?

berzerker

Miro, a South African distributor for Mikrotik has this PDF on their website:

https://www.miro.co.za/wp-content/uploa ... 4S2QRM.pdf

No pricing yet, though, and it turns out this isn't PoE anymore. Original announcement was for a 48P, this is a 48G.

48P maybe coming later, then.

berzerker

It's been quite a while since we've heard anything about the CRS354 and CRS332, any updates on those?
"CRS332" was released long ago as CRS326-24S+2Q+RM: https://mikrotik.com/product/crs326_24s_2q_rm

Must have missed that. Nothing still on the CRS354 though.

berzerker

It's been quite a while since we've heard anything about the CRS354 and CRS332, any updates on those?

berzerker

*) wireless - updated "united-states" regulatory domain information;
Can you elaborate on this?

bump at 'tik devs?

Edit: Well I answered my own question, still no 160MHz support for US models. Is this *ever* going to be implemented?

berzerker

*) wireless - updated "united-states" regulatory domain information;

Can you elaborate on this?

berzerker

Has anyone recently tried to set up an IKEv2 connection for roadwarrior setups for iOS/macOS? I'm getting an odd error, almost immediately after trying to turn on the connection, an error on the device pops up "an unexpected error occurred." Not very informative, but seeing almost no logs ...

berzerker

According to https://forum.mikrotik.com/viewtopic.php?t=137193 , both the RB4011 and CCR1009 perform well bypassing an AT&T Gateway. You'll probably need a BGW210-700, though. The Paces have issues with keeping EAP connections alive and require constant pings on other solutions. See if you can ...

berzerker

According to https://forum.mikrotik.com/viewtopic.php?t=137193 , both the RB4011 and CCR1009 perform well bypassing an AT&T Gateway. You'll probably need a BGW210-700, though. The Paces have issues with keeping EAP connections alive and require constant pings on other solutions. See if you can g...

berzerker

I have successfully implemented the bypass method both to a stand-alone ONT (bypassing a BGW210) as well as using a SFP fiber module to a Ciena eMUX 5150 series (bypassing a NVG595) and it is running very well. Additionally, I have created a script that automates the startup in case of a reboot (e....

berzerker

I'm a bit confused, but why doesn't the US model of the RB4011 w/ WiFi support 160MHz channels? Sorry, but we are still in the process of certifying for US (U-NII-2), that's why you cannot choose any frequencies with the 160MHz configuration when country is set to united-states-3. Regarding 80MHz+8...

berzerker

I'm a bit confused, but why doesn't the US model of the RB4011 w/ WiFi support 160MHz channels? The option is selectable in the interface settings, and the output for the allowed channel list for "united states3" which is my only option says ac160 and ac80+80 are supported for both indoor ...

berzerker

As far as I understand you are trying to configure server. Server requires RADIUS server with EAP support. Locally on the router it is not supported.

Ok...so that goes back to my original question. Will this be supported without the requirement of RADIUS, locally on ROS?

berzerker

!) ike2 - added support for EAP authentication methods (eap-tls, eap-ttls, eap-peap, eap-mschapv2) as initiator; Since this is "as initiator," can I assume this isn't supported for running as a roadwarrior config? If so, when is support for that coming, if at all? Road warrior client is a...

berzerker

!) ike2 - added support for EAP authentication methods (eap-tls, eap-ttls, eap-peap, eap-mschapv2) as initiator;

Since this is "as initiator," can I assume this isn't supported for running as a roadwarrior config?

If so, when is support for that coming, if at all?

berzerker

UDP is used to send messages to syslog, and there is no buffering. So the sntp-related event is the first one which could be actually delivered as all those before happened while networking wasn't up yet. This makes sense. Is there no way to buffer logs to then send once networking is up? What woul...

berzerker

UDP is used to send messages to syslog, and there is no buffering. So the sntp-related event is the first one which could be actually delivered as all those before happened while networking wasn't up yet. This makes sense. Is there no way to buffer logs to then send once networking is up? What woul...

berzerker

I've noticed some issues with regard to local vs remote logging. I have a syslog server set up (graylog) taking in logs from my devices, the following is the example of output from a CRS112: 10:12:34 system,info router rebooted 10:12:36 interface,info MGMT link up 10:12:40 bridge,info hardware offlo...

berzerker

Support just got back to me and set to set the chain in Mangle to OUTPUT. That seems odd. Hello, In RouterOS you can set QoS priority 3 to outgoing VLAN packets using this rule: /ip firewall mangle add chain=output out-interface=GoogleVLAN action=set-priority new-priority=3 Best regards, Follow up ...

berzerker

CRS328-24P-4S+RM: I'm unable to log into the console on 6.44beta61, anyone experiencing a similar issue? Tried with multiple cables. Couple of CRS112s I have on 6.43.8 work fine.

berzerker

All looks good. Make sure you are properly importing the certificate on Windows as shown in the manual. Also, please post full IPsec debug logs. So it actually works on Windows 7, but not on Windows 10. I suspect it might have something to do with the EKU on the cert. I can't access my LAN network ...

berzerker

Here you can find complete tutorial for IKEv2 with RSA auth between RouterOS and Windows. https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_Ikev2_RSA_auth That's the guide I was following. I realized my "can't get private key" error was caused by me forgetting to replace t...

berzerker

I'm having an issue, seemingly with certificates to setup an IKEv2 VPN w/ certs. I've followed the steps to create the certs, self-signed, using both on-router methods (/certificate add) and openssl on linux. I might be having an issue on the client side (testing on Windows 10) since I'm converting ...

Search found 44 matches