MikroTik

r00t

It's very likely Huawei modem will work without any problems, they all use similar interface and are pretty much compatible. Note that some Huawei modems in HI-Link mode will appear as a USB network card in Mikrotik and you have to use modem web interface to configure it. It will auto-connect to LTE...

r00t

That looks like a bug, that field should say something.
Also if you switch it to Required, it will not connect unless encrypted.

r00t

Use packet sniffer to sniff start of the PPP connection, then load it into Wireshark. There you will see what protocols and features are negotiated and how (if it's turning of the MPPE128, you will see why, if it's client or server that does that). But if your PPP profile requires encryption, link s...

r00t

The new Mikrotik Audience uses same QCA radio for 2nd 5GHz WIFI (for inet distribution). Will be interesting to see if it also have problems. If it works on Audience but not on RB4011, it's clearly hardware issue of RB4011 design. Could be as small thing as missing capacitor somewhere or having too ...

r00t

yes... at least in ideal world that would just work.... But in reality you will have to carefully adjust tx power on all APs to they only cover wanted rooms/parts of the building. Because often client doesn't want to roam and can hold on to signal that's from other end of the building, even if it's ...

r00t

Why use some weird USB switch solution instead of standard USB 2.0 hub chip?
I had good application for LtAP with two LTE cards (for main and a backup links) and USB for external sensors, but this switching totally kills it. Great!
Lately design choices for new Mikrotik devices are just plain weird...

r00t

no, that will not work. You would need some device that converts serial over USB into normal serial port. It can probably be done with with raspberryPI, but that's quite a overkill... Maybe even some small microcontroller would do the job, I remember Atmel have tech-note how to do something like thi...

r00t

-65 isn't that great, in many clients scenario weakest clients slow everyone down.
Also check the SNR, not just absolute signal level (and the noise floor). There might be some interference on the channel causing errors and client disconnects...

r00t

Console port is serial/UART but if your UPS have USB cable, so it will not work... unless you can switch UPS into serial mode somehow. RB4011 is really missing the USB ports and sadly Mikrotik have not implemented them. Probably saved <$5 of the $200+ this device costs by not having USBs... it's a s...

r00t

You have to email MIkrotik support and request GPL code/patches. You even had to pay shipping fee because they insisted on sending you a CD/DVD. That seems to have changed, see: https://forum.mikrotik.com/viewtopic.php?f=2&t=100803 But you have to directly ask support for it, there is no download li...

r00t

Is LoRA already supported in all versions of ROS or do I need specific beta one?
Is it supported on all platforms? Can I use mini-pcie to usb adapter and connect it to RB3011 or SXT USB port?

r00t

yes, I have replaced some chips on RBs before, usually it fixed the issue unless there was some other serious damage to board tracks. I can say that there are no other "gotchas" like on some other boards, if you replace CPU on RB711, it should work again. But you need hot air rework station, tools a...

r00t

It's damaged, probably over-voltage or static on cable... usually rx path is dead and so it's ready for trash bin...
As there is no external ethernet phy, you would have to replace the CPU chip to fix it...

r00t

Look for the used hardware, 4xx routerboards can be had for next to nothing (with L3 or L4 licenses), also often DOM modules or CF cards with Mikrotik license on them are available for cheap (they can even be used in modern server, using IDE to SATA adapter... it's the license that matters).

r00t

good stuff floaty, thx

Still would be good to identify the switch chip used so we can find the datasheet for it with exact specs...

r00t

If network interfaces are UP, they should respond to MAC telnet/MAC connection from winbox, even with no IP address on them. I had similar situation, but network interfaces were not up and I had no console or keyboard... solution was to use USB to lan adapter. After I plugged it in and ROS booted up...

r00t

thanks for explanation doneware ... yes, form factor compatibility often sucks like this, been there, done that But really, for new hardware, please consider routing out as many interfaces as possible. USB is very handy, you even have the PLC box now, but there are many devices you can't connect it ...

r00t

Mikrotik doesn't use any custom radios (like Airfiber, custom FPGA based), doesn't even use enhanced versions of some radio chipsets like other manufacturers do (enhanced versions have features like spectrum scan and modulation phase plane display, also non-standard higher order modulations, custom ...

r00t

What chip is that? Marvell 88e8041? It's hard to read from the image... But that's a huge chip for such simple device, probably have like 4 ports or even MII interface... If it does have more ports, maybe there could be GPER version with more than two connectors? So you could branch off cable to the...

r00t

that one USB port is dedicated for mPCIe card for LTE.

Fair point.

However:

SOC still also have one USB 2.0 port they could use
Or just add an USB 3.0 HUB chip... would probably cost $2 instead of $1...
And back to the RB 450Gx4, it doesn't even have mPCIe slot, so no excuses here

r00t

Too bad Mikrotik again saved a $1 instead of giving us USB port. The huge price difference would have probably made this device completely overpriced... According to the datasheet , CPU have one USB 3.0 port . Just route it out to the connector.... but that's too much to ask for probably. Same CPU i...

r00t

Interesting device!

Hope the 5GHz behaves better than on RB4011, it uses same QCA9984 radio chipset...

Also interesting construction, with these inverted dishes creating sector "corner" antennas:

r00t

Does it learn MAC addresses (SVL or IVL?), drop bad frames and add some delay (store and forward), auto-negotiate (possibly different speeds to both ends) like a switch? Or is it a true layer 1 repeater, nothing more? Also, does it allow 802.3af/at PoE detection/classification with the device at th...

r00t

I see two really good and interesting use cases: 1) VOIP over challenging links. Like from a car, driving in a country side, where LTE may not be available and drops down to 3G or GSM. This is challenging even for VoLTE and normal cellphone handovers. But it could be even as simple thing as trying t...

r00t

Wifi6/802.11ax have TDMA as a part of the specification, so there should be no need to implement any proprietary TDMA protocol for it. It can even do much more than what supposed NV3 would ever do, like splitting bandwidth into multiple streams for different clients at the same time (at OFDM carrier...

r00t

It's not possible to see actual filesystem from MIkrotik itself and there is no tool that would tell you flash usage by different parts of the system either. Only way around this is to network boot OpenWRT and then you can mount the RouterOS filesystem to see what's actually going on... And no, sadl...

r00t

Now that there will be multiple vendors selling 60G radios, probably huge numbers for quite cheap, important question is: Will you be able to scan and see them on the air? Or will past repeat again and just like years ago with AirMax, when these networks were completely invisible to normal WIFI gear...

r00t

This is quite common for data acquisition, scientific computing, etc. where FPGA cards are used, to have custom ethernet protocols for minimal overhead and ease of implementation, just absolute minimum to make the ethernet frames switchable. Usually you configure source/destination MACs for the devi...

r00t

What do you recommend for an office for 20-25 people? (the question is not to holy war) now I have one new project (sample office 20-25 people, ~25-35 connections) and I don't want to make a mistake again, I had to pay for the last one out of my own pocket. I think about old solution hAP AC. Use 3-...

r00t

not until now; actually, it's a work in progress to obtain at least wlan1 stability... RB4011 have been available for a year and it still can't do what's written on the box and all the ads. I'd call it false advertising, you are buying device for the specs you need and it's not a cheap device eithe...

r00t

Has anybody actually managed to get 160MHz AC mode running, with all chains enabled, on RB4011?
And not just running empty AP, actually connect with phone/notebook so it shows in registration table it actually uses 160MHz x 4 chains?
Anyone?

r00t

All these topics about blocking this, blocking that, not blocking something else... No, you can't block websites selectively anymore. Get over it. If you really need to, you have to go the "total big brother" route: HTTPS proxy that decrypts and inspects all traffic, but then you have to have your o...

r00t

Sounds like very weird bug and something out of MIkrotik control... To debug, run sniffer on wlan interface in Mikrotik router, forwarding all packets to PC where you are running wireshark. Then try to use translate on a phone a see what's going on. Are packets blocked? do they reach google servers?...

r00t

The MIkrotik PCB is actually 5GHz ready, just chips are not soldered in. They must have though about it being important enough to implement it, but then it never made it into final version (why? regulation? compliance tests?). Now Ubiquity have a product with a feature MIkrotik doesn't have... it's ...

r00t

tinyfecvpn is great and yes, I would love to see it in the ROS There are many scenarios where you may find it useful: VOIP, GSM/LTE, links with bit of interference and packet loss, mesh networking, AP handovers, link redundancy Used it to get live video from the portable sender as it was roaming acr...

r00t

But main issue here is that without 802.11d you get problems with some devices to connect. And it can't be fixed in any other way, you can't just tell your clients to buy different notebook or phone. Good luck explaining to your boss why he can't connect to your WIFI with his macbook... 11d is stand...

r00t

Measure voltages on big capacitors, you should see 3.3V, 2.5V,1.8V etc. If these are not present, it's probably PSU/voltage regulators that failed. This can possibly be fixed by replacing mosfets and their controller chips... If all caps have good voltages and you still don't get any output on rs232...

r00t

Coming

Certainly good news... but would be nice to know if it's weeks, months or years before it's available... at least give us some timeframe, like Q1-2020 etc.

r00t

At least all this "sent from blahphone using tapatalk" spam will be gone from the forum.
Good riddance.

r00t

yes, NSTREME needs some love, be it normal or dual version. For p2p links NV2 is just worse in all aspects, the latency is just unacceptable, throughput is lower. Now that LHG XL with dual radios was announced, it would be possible to have one made with two 5G radios for real full duplex link. Asyme...

r00t

You really don't want to have 6 SSIDs on a single radio, especially if you want many clients connected. Having them all on a single channel and single radio will create total mess. If you are covering some big hall or multiple rooms, it's always better to have multiple APs scattered over the place i...

r00t

10 minutes freezes? You must be really patient person to keep using it...
At $160, it's not exactly cheap either. I would just use 4 port USB hub and 4x FT232 based cables that work.

r00t

For XMODEM and better terminal features, you can use TCP port server (system/ports/remote access). Then connect with teraterm or any other terminal program you want to use. Or can even map the port as a virtual COM port on a client PC and using RFC2217 capable client, you can even remotely change ba...

r00t

make it more about proper implementation of existing features that needs to be fixed in hardware: SFP+ slot that's not picky and supports SFP/SFP+/passive DAC/GPON modules without any issues Switch chip that supports at least 8 ports at 0.01/0.1/1/2.5/5Gbit/s with hardware VLAN filtering and other f...

r00t

After it crashes or reboots, generate and send supout to support@mikrotik.com - that's the ONLY way how to get any official support and to help them fix this issue.
Posting here on forum does nothing, except maybe informs other users about it.

r00t

It's just USB to TTL UART converter connected to ESP8266 WIFI chip. So it will appear as USB serial adapter if you plug it in normal PC. In linux, you can easily enable console on it and use it same way as it works for mikrotik. But for Cisco, I don't think they have drivers even for simple USB seri...

r00t

Here are some offline scripts to decode supout.rif files: https://github.com/farseeker/go-mikrotik-rif
Much better than uploading it to some shady server for analysis... supout may contain various private info.

r00t

yes, if you will have license problem if you completely replace flash chip. License is probably locked to some CPU ID or other HW ID. It might be possible to read contents from the bad chip and copy over the hardware information block (with MAC addresses and other stuff, probably some license stuff ...

r00t

It's good to do netinstall instead of updating from the ROS when going from some old version.
Export the configuration and then reconfigure it again manually.
Updating the system as it is may result in invalid configuration and you may be locked out in some cases...

r00t

You can use sniffer to actually sniff the packet and analyze it in wireshark, to see what it really is.

r00t

Really?? You probably mean that there is no need to send the ACK packets from a TCP connection over the same link, but does this solution also send the ACK packets at 802.11 level over the other link? It's Mikrotik proprietary protocol, it doesn't use 802.11 ACKs at all, only data frames with custo...

r00t

LHG XL 52 ac ... possible FDX download for 5Ghz interface & upload for 2,4Ghz interface ? Real FDX? Many places / towers don't have free spectrum for UPLOAD. That's what original NSTREME dual was used for. And it will probably work in this way too, you can use two different interfaces and set one t...

r00t

Just connect the pads where button was with a short wire or end of the screwdriver...

r00t

Probably not, ROS uses custom drivers and all hardware is Atheros. Many features like NV2 probably depend on HW specific functions so I see it very unlikely to ever have intel wireless support. Even in Linux they seems to be more "high level" then Atheros, allowing less custom modulation settings etc.

r00t

You can use USB to serial adapter for console, however console will not be spawned on it by default. So in case where you already have inaccessible device (like after FW misconfiguration) you can't just plug in USB to serial cable and get console, it has to be first configured to run like that. WOOB...

r00t

Is it that hard to just add a warning to a changelog about not working SFP on 4011? If you don't want to pull the release, at least do the absolute minimum? It will be week old soon and people are still installing it on their devices, breaking the functionality. These are your customers, that bought...

r00t

Connect RS232 null modem cable to it and in bios boot menu select boot from LAN while running netinstall.

r00t

Before you buy RB4011, check the forum threads about 5GHz wifi issues and some SFP issues. Especially the 5GHz WIFI that just randomly stops working is still not fixed and no one knows when it will be. RB4011 hardware isn't bad, but the wired vs. wireless version price difference is big enough to ge...

r00t

Sysadmins that know Mikrotik well also know not to update anything for a few days after release or to do updates on non-critical test HW first. It's always nice to see a new release, but then I always have to check the forum to see how broken it actually is... that's the reality. But Mikrotik is als...

r00t

"Stable" ? More like "Totally untested". Glad I checked the thread before updating RB4011, I would have lost remote access by doing that. This really raises the questions... do Mikrotik actually test the release version in their lab before releasing it? If it was some exotic bug that happens when ru...

r00t

NTP server seems to be listening on all interfaces. Have to use firewall to limit access...

r00t

In most cases where Mikrotik HW failed, it have always been due to damage from thunderstorm or similar disastrous event. In remaining cases it was all due to bad capacitors on board that bulged and had to be replaced. This happens mostly on RB4xx series. After replacing them the board continues to w...

r00t

Can't be easier: create bridge and add both ports to it. Just make sure you update other settings so it uses bridge interface instead of ETH2.

r00t

Mikrotik started enforcing compliance and power levels for selected country. If you don't care about these limits, you have following options: 1) set country to no_country_set and then you are free to do anything you want with power and channels. But note that some clients will be unable to connect ...

r00t

yes, you can disable the chains in wireless configuration. Also you can choose different combination for receiving and transmitting. Not 100% sure about connector numbering, but you can easily test that: select only one chain and then run Snooper on the interface - it only listens, not transmits, so...

r00t

12V is perfectly fine, even with some loss on the cables. Groove internally converts the voltage to 3.3V and lower, so it really doesn't need high voltage on POE input. But you have to make sure it's solid and doesn't drop when more current is drawn when transmitting etc. Datasheet for Groove says 1...

r00t

Nothing changed

r00t

Here are the UART pins on the PCB (2x2 in the middle): .jpg They are labelled, so you know where to connect what: You need GND, RX, TX. Board RX ===> USB2TTL TXD Board TX ===> USB2TTL RXD Board GND ===> USB2TTL GND And you want to use USB 2 TTL adapter like this: a.jpg It should have a jumper to sel...

r00t

I suppose you can't RMA them (it's too late), so it's time to open them and look inside: Inspect all electrolytic capacitors on board, closely (with magnifier). Any signs of bulging, leaking or discoloration of PCB around them means they have to be replaced. You can also try hooking up TTL UART to g...

r00t

Each container will work as it's own faraday cage, blocking all (or most of the) outside signals - which is ideal. Also for such short range, make sure you don't over-do it with tx power (you want to just fill the container, but not to be heard far outside). Frequencies can then be reused easily. Fo...

r00t

Sadly there is UART on the board (you could solder the connection) but it's not enabled in ROS and thus not usable by user.
So only way is to use usb to serial converter and after it appears in Ports, enable Console on it.

r00t

There is no such command to magically free memory. If it's being used, it's probably needed for what router is doing. Memory might be used by some interfaces or functions (conntrack), so it's possible that disabling interfaces or some functions may free some memory, but that will also break what is ...

r00t

16Mb Flash is maximum for QCA9531 Qualcomm CPU.

This really sucks.
Maybe look at the possibility of having microSD slot or moving ROS system partition to USB stick (and having USB port on the device itself in a first place...)?

r00t

yes, you never know what you are going to get. Same case might contain various types of PCB or even same design with various "compatible" chips. I have seen some online reviews of USB LAN adapters and some were REALLY bad (worked, but linked only at 10Mbit/s and actual speed was a few kilobits/sec):...

r00t

I have two adapters that do work (note: tested on x86 ROS, drivers on other platforms may vary): usb2eth.png The moschip one is Hama 00049244-V2 Hama USB-2.0, I bought years ago in a store and it wasn't cheap (30 euro?). You can still find it but it's expensive: hama.jpg Second one is very cheap usb...

r00t

Nice. Now bring two GigE LAN ports to all 60GHz gear. WAP ltAC shows how it can be done.

r00t

Firmware version is not same as ROS version. There are no known vulnerabilities in firmware. Also you don't have to update it if everything is running fine, it's normal to run firmware with version different to ROS system version.

r00t

Also running tunnels over TCP is bad for performance and latency. Try IPSEC and results should be much better... hardware crypto offload will work and there will be no TCP to cause issues.

r00t

It might be fun exercise to netboot metarouter from network, loading only small PXE client locally...

r00t

beta of ROS might be released by end of the year... but no one knows what boards or hardware it will support (could even be CHRlike test with no wireless), so answer is "some time in the future", no official ETA was ever given

r00t

Many recent drivers aren't included in x86 ROS, it haven't been updated for a long time and I don't expect this to change. Buying hardware that is supported is like playing Russian roulette, there isn't even official list of supported hardware. There is small hope that ROS 7.x will use more modern k...

r00t

Use netinstall to recover it. That should help unless it's some hardware damage (failed nand chip etc.)

r00t

Limited support was in ROS v5 (or was it v4?), but that was removed. And I don't expect it to ever return. There's so many usb wifi devices and Mikrotik insists on writing their own drivers. I would rather see them focus and spend all their time on hardware they are selling (RB4011 5G WIFI fix when?...

r00t

interesting idea... few points: 1) when looking for rotator, you have to deal with wind loading as well, so unless it's quite small dish, usual PTZ mounts will not do (they might work for <0.5m dish, but not more) 2) heavy-duty az/el rotators are quite expensive (google "SPID rotator" and you will s...

r00t

Often for VMs, disk serial numbers aren't really unique, so if you are lucky, newly created one will be same as the old one. You can try imaging complete old disk (some part of license is stored somewhere on disk as well, it must match the disk) and then restoring it into exactly same new one (boot ...

r00t

State of OpenVPN in ROS 6.x is pretty much WONTFIX and other long OpenVPN UDP thread got locked up.
For any new features we have to wait for ROS 7.x (who knows how long) or just buy other hardware that does what you need today...

r00t

60ft tower will be picking up static electricity from all around, especially if there are no other tall buildings around. Basic steps are making sure radio is grounded, use shielded cables (STP) and antennas that are electrically shorted. If you search "grounding" here on forum, you will find some o...

r00t

For routerboards, it's only used when updating BIOS and only on some models that do have HW RS232 port. Many recent boards do have UART pins on PCB, but no BIOS and doesn't even spawn console on it, so it's completely useless... And you are correct, AFAIK you can't upload files to ROS (like update p...

r00t

New drivers haven't been added to x86 ROS for ages. Yes, there's a lot of hardware that simply doesn't work.
I don't expect this to change in any way for ROS 6.x, only hope is that 7.x will have better drivers, but who knows when that will be released...

r00t

Set up serial tcp server in Mikrotik, then you can use any terminal that can do XMODEM and other transfers, like terraterm, to connect and do the job... It's even possible to create virtual COM port on windows PC that forwards all traffic to/from the Mikrotik box, very handy if you have to use some ...

r00t

You'd be in much better position with an (overkill) RB4011 WiFi and RouterOS 6.45, which enables all four chains correctly.

RB4011 have it's own set of quirks and issues, 5GHz WIFI is very much broken as you can see here: RB4011: wlan1 disabling itself

r00t

Is fq_codel implemented in MikroTik RouterOS? no, it's not And answer to all problems and current issues is still exactly the same, like it was in the year 2015: thanks for the suggestion, we are looking into it for v7. currently you can use SFQ, which is also very good Four years later and we are ...

r00t

RB4011 is best matching device for your requirements, at least on the paper. However as written above, make sure you check all the specifications as there are some small details that may break your config completely, like the switch chip capabilities. Also state of 5GHz WIFI on RB4011 is still bugge...

r00t

monitor command can only hex-dump eeprom addresses 0000 - 00ff

r00t

Native CHR would be great and all they need to do is to build CHR with full Linux kernel with all modules that are available. Yes, it will make it much bigger, but we aren't talking embedded here. It's perfectly fine to have big fat kernel or thousands of modules. This would enable support for all m...

r00t

if i'll change the original 2.4ghz minipcie adapter with, let's say, an intel 7260... will ROS recognize it? No, Intel wlan chipsets are unsupported in ROS. Only Atheros may work. Re same MACs: While this is probably another bug in RB4011, it's not the culprit for 5GHz WLAN troubles, because they h...

r00t

This should have been fixed long time ago. Bug like this just kills entire product. Meanwhile MK is still selling RB4011 WIFI version that's clearly flawed and part of it (5GHz WLAN) is completely unusable. It's easy to just say "if you don't like it, just RMA it and you get your money back"... yeah...

r00t

If it's really the antenna gain setting, then manually lowering tx power would fix it as well. Antenna gain just limits maximum power to obey regulatory domain.

r00t

Yes, this is the problem with TZSP and UDP. Often some packets get lost, meaning IDS can't inspect all of them. Also wireshark doesn't like it and some filters apply to the UDP TZSP stream instead of sniffed packets. It would be better to have an option to do port mirroring for bridges in ROS, where...

r00t

I think your only hope is to read it out from other device. Mikrotik BIOSes can be downloaded as .fwf files and they are also stored in flash as such, but what you probably need is the "bios loader" code that loads these. Flash/NAND can be fully dumped from LEDE/OpenWRT and that can be booted of net...

r00t

Just short these two pads sticking out from the damaged button base, it should work. Make sure you don't touch anything around.

r00t

All Mikrotik 60G hardware is so far compatible, so you can mix LHGs and WAPs as you like. But don't expect it to work with other vendors, even if it uses common 802.11ad platform. Everyone is playing on it's own playground, there is no intercompatibility due to customized protocols and different ven...

r00t

Can't guarantee this to work, but it should as SIM card usually uses very low rate (kilobits/s) to communicate: add extension between the socket and SIM card, just wire them together over 50m of STP cable. Get two SIM card extension cables from China, then solder cable between them to make them long...

r00t

I really hope they use v4 kernel, but MIkrotik is still selling devices with 16MB of flash (WHYYYYYYY you do this?!!!!)... so it's not looking good.

r00t

If you only do the bridging, no CPU will be a bottleneck. Both groove and rb433 can do more than 50mbit/s in a bridge setup like this.

r00t

According to the https://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards ethernet can handle jumbo frames, but wireless can't. So you can't just bridge them, that will not work. You have to create PPPoE server on one side and client on the other, configured to pass the jumbo ...

r00t

Nice to see at least some reply regarding v7. Just want to say when it's ready enough to release some alpha version, please do so. Even if it's missing some features or doesn't work on some hardware, it would still be great to get some real world testing results. I can imagine wireless and various e...

r00t

Best VPN is one you make yourself, host CHR somewhere and use native Mikrotik protocols (EoIP,IPIP,etc.) Generally avoid TCP based protocols (SSTP,OpenVPN) for performance reasons (single TCP connection), always prefer UDP ones (PPTP,L2TP,...). Obviously it all depends on what you are trying to do, ...

r00t

For 802.11ax, there should be no need for any custom TDMA protocol, because standard itself already have what you can call NV2 on steroids: Not only it's TDMA, it can also assign different parts of spectrum to a different users for each timeslot... over multiple MIMO beams. And all this is handled b...

r00t

For ground links it's often easier to mount the dish upside down.
Searching for "inverted dish wifi" on google images will give you some good results.
One example with diagrams and good read: https://www.ab9il.net/wlan-projects/wifi3.html

r00t

It's likely CHR doesn't have drivers for your hardware (disk) so it can't find root filesystem and fails to boot. Sadly there are no kernel messages so you don't really know what's happening.

r00t

Dev boards and dev kits are always super expensive, the BOM cost is probably closer to $188 than $1888. No one expects Mikrotik to have this hardware ready and selling right now. But at least to acknowledge 802.11ax exists and that they are working on it... maybe have a board like this running ROS a...

r00t

Mikrotik have known about this for a year and have done nothing to fix it.

If this is true, then WTF are they even thinking?!
This only sends all the bad messaging: If you want a bug to be fixed, release it as zero day exploit. Doing it nice and proper way gets you nowhere...

r00t

Disable everything cloud and use NTP Client for clock updating instead.

r00t

Sadly there is no official list of supported hardware or list of drivers, or their versions, included in various ROS releases. Drivers/kernel modules differ even between platforms. You can try to unpack the main package (7zip does the job) and look for the kernel modules of interest. They usually ha...

r00t

For WAPs and mesh targeted hardware, it's not that important, but LHGs should have had 5GHz backup from the beginning! It's a shame LHGs still doesn't have backup radio. There is even place for all the RF chips on the board, but it's not populated. It probably failed to pass FCC tests or there is so...

r00t

Also "CH0 5G" - 5GHz backup, unpopulated again

r00t

That's how it was, not that long ago. Routerboot had own version number and it was easy to tell if you have to update it or not. Also most routerboards had working serial console you could easily use to enter routerboot menus, check version, update it using xmodem... Then someone though: "Let's make...

r00t

Yes, so far I had no issues with FTDI usb to serial converters. They just work and while usually costing bit more, they have all RS232 signals for full hardware handshaking that some equipment may require. Sadly it's sometimes hard to find what chipset cable uses before you buy it (often same lookin...

r00t

Beacon interval is 100ms, not sure about DTIM

r00t

If you search the forum you will find these can't be set and have been requested for a long time... yet Mikrotik doesn't seems to be listening or there is some hidden reason why these can't be changed (their own wireless drivers?). Especially beacon interval would be handy to modify, but NOPE.... no...

r00t

I can't care less about kid control or internet detect, these are just taking space.
BTW, I found that enabling Internet detect shows graphs of your WAN interfaces =)

I would rather not have to join the botnet just for the privilege of seeing interface graphs...

r00t

Please make initial screen after connect (dashboard?) configurable. I can't care less about kid control or internet detect, these are just taking space. Instead, having last 10 log entries, graph of traffic on selected interfaces, list of registered wifi clients, or DHCP clients... or simply shortcu...

r00t

While Terragraph sounds interesting, it certainly can't replace P2P links (whitepaper says range is about 250m, using small antennas).

r00t

On 60GHz WAP radio PCB, there is place for 5GHz radio chips, but it was never used. Mikrotik appears to be just sleeping, while competition is creeping closer and closer and may beat them at their own 60GHz game... Hopefully this will be a wakeup call and we will see some new 60GHz gear soon. They m...

r00t

I haven't tried it with jumbo frames, but PPPoE can pass bigger packets over link with smaller MTU. See https://wiki.mikrotik.com/wiki/Manual:M ... iple_links
PPP is only link that can do this, AFAIK no other tunnel can reassemble/unfragment packets.

r00t

The powerline adapter is basically entirely new powerline modem, with it's own CPU. There is no magic "microusb" that can forward powerline signal to the mAP, that's impossible. The external box would probably appear as a USB device when plugged into phone or PC (existence of drivers to actually use...

r00t

It seems like Mikrotik is expanding into new technologies lately (LTE,Powerline,GPEN,...). Which would be great, but it feels like it's at the expense of "traditional products" like WISP wireless. Yes, we got 60GHz stuff that's really great, but just look at the state of the WIFI on RB4011... or eve...

r00t

It's only about the software and that's what will take a lot of time for Mikrotik to get working, lagging behind competition probably by 1-2 years. Hardware wise, Qualcomm/Atheros provides reference design boards, some APs are just that in a custom box, for example: https://wikidevi.com/wiki/Compex_...

r00t

Good to see the miniPCI LORA card to be offered standalone, hopefully it will not be priced with premium compared to wAP with lora built in.
There is already RAK833 LORAWAN miniPCI card on the market, with price around $100, hoping Mikrotik version will be competitive...

r00t

Silence around 802.11ax is deafening... and disappointing.
I guess in the end we will be happy if 160MHz channels are actually fixed and working on RB4011 year after it launched... wave2 is already lost cause... 802.11ax not even planned

r00t

Do a quick check of the USB voltage coming from hEX. If you have one of these USB power meters, check that it doesn't drop when loaded. The Woobm WIFI part should boot and work even when plugged in power-only port (like USB power-bank). So if that's not even working correctly on hEX, it looks like i...

r00t

Maybe try a different USB2Serial cable with different (non Prolific) chip. I have had very bad experience with pl2302 based cables, they often stopped working for no reason and were very sensitive.. for example, when connecting it to the managed switch, USB stopped working every time switch was powe...

r00t

If it can be abused, it WILL be abused by bad ISPs. It's simple as that. They can smell money from every slide of that presentation. "Hi Dave, looks like you just connected another phone to your home WIFI! For just $5/mo, it will be able to access internet" This is going back 20 years, when you had ...

r00t

There is no wlan on usb support in any current mikrotik version. You will have to buy one that have all your required wireless options. But if you only need more LAN ports and your chosen mikrotik board have USB, you can use USB to LAN adapter. Even the cheap ones from Aliexpress (black with two LED...

r00t

I think if Mikrotik had bounties for exploits, it would be much better. If you don't want to offer money, maybe you could offer free devices as prices?

r00t

*) winbox - improvements in connection handling to router with open winbox service; Nice, so this actually IS quite serious security hole that have been silently patched. Proper changelog should have been something like: *) winbox - fixed vulnerability allowing access to devices behind router with ...

r00t

This shows that current winbox authentication code is flawed. Winbox server should not accept any commands until you log in with valid user and password. Checking if user is logged in for every function call is not a good practice, it needs to be fixed globally. User must authenticate itself before ...

r00t

Note that you can't use winbox license update anymore, the URL it used isn't valid anymore. Make a supout file and send it to the support@mikrotik and they will give you a new key for your RB. Also last time I did this on RB600, I ended up in a bootloop somewhere after updating to v6, so had to neti...

r00t

No USB wireless is supported. None, on any platform.
For CHR, there is no wireless support at all.
You have to run normal Mikrotik for that and only Atheros based PCI/PCI-E cards work.

r00t

Would be great if Mikrotik released at least minimalistic roadmap, something like: 802.11ax work in progress, expected ~2019Q3 Same for Wave2 and other features. No need to be more specific, just confirmation of "yes, we are really working on it". This might be enough to delay investment and buying ...

r00t

If it appears in USB devices, it's correctly plugged in and working. Just Mikrotik is missing the driver (it's not recognized and available as LTE device).
You best bet is to write to support, describe your problem, give them USB IDs of the modem and it may be supported in one of the next versions...

r00t

Not a bad idea, but to get even smaller idle data size, another idea: Use scripting+scheduler to try to connect to special TCP port on your router (using telnet). If this fails, do nothing - only data sent is SYN request, just a few bytes. When you want remote router to dial in, simply open this por...

r00t

This is quite troubling situation, as for WiFi4EU you need these features and no Mikrotik device supports them. So even if you love Mikrotik, you can't use it. And these are often big projects, paid partly by EU money. If Mikrotik had suitable device, they could sell good amount of them. Instead all...

r00t

LOL... Good luck with that, I'm sure manufacturers are really thrilled to publish all their secrets so they can make less money... this is simply not going to happen. Only possibility is if TDMA is part of the future official 802.11something specification. And it's a good question why this wasn't do...

r00t

If nv2 compatibility vs. older hw is the issue, why not just call it nv3, change the timings and whatever is needed for it to work on ARM and clearly state it only works on the new hardware and it's incompatible? If the compatibility is in the way, fine... but at least have a new protocol that's sta...

r00t

Also 60GHz hardware with SFP+ port is badly needed... channel capacity is so much higher than what we can use currently.

r00t

Sadly on most modern routerboards and devices, it's pretty much impossible to use UART for anything useful. There is no bios and no console is spawn on it. Unless you enable it manually beforehand, you will not get any access, just a few debug messages during boot and that's it. And because bootload...

r00t

Use NETINSTALL to netboot and install the new routeros to it. You don't have to configure anything on the router itself (it's already trying to boot from the network). Just run netinstall on the PC and it should work.

r00t

Other vendors offer "band steering" that usually works well and can move devices that support 5GHz to that band, freeing 2.4GHz for devices that can't work anywhere else. See https://forum.mikrotik.com/viewtopic.php?f=7&t=127742 for more info and actual implementations used. Sadly Mikrotik doesn't s...

r00t

So far everytime I had non-booting routerboard, it was caused by bad capacitors on board or some serious external damage (lighting/overvoltage from antenna). So first thing to check would be the capacitors on board, if any are bulging or doesn't look good, replace them (maybe better replace all elec...

r00t

!) telnet - do not allow to set "tracefile" parameter;
After some digging, it turns out this is actually to fix an exploit that enables privilege escalation to root or damage to system files. Why is this not labelled as a security fix?

https://cxsecurity.com/issue/WLB-2018120151

Nice find.

r00t

Bad choice of switch chips plague Mikrotik devices for some time. It's really bad decision to not spend maybe a few $ more on a chip that would do all the VLAN stuff and not suffer from port flopping either. On $250 device you expect some level of functionality and if using proper switch chip meant ...

r00t

Yes, this really doesn't seems to be worth using. The website says for cache miss (and that will happen for HTTPS or any encrypted protocol all the time) penalty is 10%. So with usual traffic where most is encrypted (including bandwidth hogs like youtube and other streaming services) you will be los...

r00t

Main issue with radar detection is the unreliability. If it only detected WX radars and nothing else, it would be fine. But for that, radars would have to transmit some digitally signed beacon that could be verified to be 100% reliable and avoid the spoofing. Currently entire detection algorithm rel...

r00t

But it's really sad you have to use additional switch to get features that should work on RB3011 itself, only because someone decided to save like $1 BOM cost on switching chip in RB... and this mistake was never fixed and RB3011 is still being manufactured with this flaw today.

r00t

thanks for heads up... it would really suck to upgrade now before Christmas to this version and break everything

r00t

It's sad when features like "Kid control" have higher priority and are implemented sooner than band steering that's been requested for years...

r00t

Workaround might be to use virtual AP and create different APs for different clients. That way you would have separate interfaces you can sniff on. There might be some way to force devices to only connect to their AP using access lists (and virtual APs can all have same SSID).

r00t

Hopefully it being limited to 2.4G and 802.11n will mean it will sell as badly as possible. Powerline technology makes one big antenna from all your house wiring, creating a jammer killing any signals from 0-80MHz or even higher. Unless you live in a bunker or a faraday cage, just please don't use i...

r00t

This SFP mess is really annoying! Why can't it just work? If I connect cheap TP-Link switch to Cisco, auto negotiation on SFP works. Same with even cheaper Realtek cards, various Dell servers and other equipment. But no, for Mikrotik, you have to manually set the speeds on both ends. Where's the pro...

r00t

You can try writing installer to the usb flash drive and booting from it instead. It will install ROS to the first harddrive.

r00t

It's part of the beacon frame information and it can't be disabled AFAIK

r00t

r00t , So your port has been restored after the netinstall firmware? No, eth1 is still dead. My board was damaged by lighting or static, no amount of firmware updating can fix that. But I was just able to netinstall the board using eth2 and use it for home AP/router (with limitation of one port not...

r00t

Sadly bios can only netboot from first ethernet port and no other... so it's pretty much bricked. The netinstall kernel can recognize all router interfaces and use them, but problem is how to load it in the first place. I fixed RB600 with bad eth1 this way by booting netinstall kernel from CF card a...

r00t

There is no point having MCS12 when we are limited by GigE interface. Also reducing modulation speed to get more channels would be nice, there is no point wasting entire current 2GHz channel to serve a few 100Mbit/s clients.... Oh, and by the way, you want 500Mhz channel and don't see why MCS12 wou...

r00t

There is no point having MCS12 when we are limited by GigE interface (I'm sure current hardware can do it, but there is no point why go that high). Instead of making cheap 100Mbit/s CPEs, Mikrotik should release SFP+ version or something like wired 5Gb/s. Also reducing modulation speed to get more c...

r00t

Yes, you can use AT command and at-chat for that. Commands are: 1) First check that pin is enabled: AT+CPIN? +CPIN: SIM PIN 2) Disable pin (this is the only command really needed) AT+CLCK="SC",0,"<SIM CARD PIN>" OK (example: AT+CLCK="SC",0,"1234") 3) verify it's disabled now: AT+CPIN? +CPIN: READY T...

r00t

Search for "winbox" and you will find old versions here: http://www.mikrotik.co.id/download.php
Winbox used to be just a small loader for DLLs from router that was on built-in web server...

r00t

Don't use "all rates fixed" unless you really know what you are doing and have equipment (spectrum analyzer) to see the resulting signal. Reason is that more complex modulations (ie. higher MCS levels) require more linear power amplifier and as a result, it can't be driven as much as when using simp...

r00t

Now this would be a nice CPU for RB5011 or Super-hAP. Too bad it will probably take years for Mikrotik to have such product and by then, 802.11ax will be already old and replaced by something even better...

r00t

It's harder to find network cards that are supported in x86, but once you find one that works and gets the job done for you, it just works. License is bound to the disk, so best is to buy some good quality USB flash drive, overprovision it greatly (64GB drive, create 256MB partition for ROS) and pur...

r00t

Seems like you only need new wpasupplicant to use WPA3 handshakes, some preliminary support is already implemented. New driver and hardware is needed to support new 192/256bit GCMP encryption, but that's not a mandatory and WPA3 can use 128bit AES for traffic, same as for WPA/WPA2.

r00t

SFP or 5 or even 10GigE 60GHz model is badly needed . The capacity of 60GHz channel is much more than what can be utilized right now using GigE connection (max PHY radio rate is 7Gbps... so currently we can only use 1/7th of the available bandwidth while wasting entire channel ). This really needs t...

r00t

Sadly this seems to be a "normal" for NV2. Latency is a total mess, even on low frame time (2-3ms) it's very ugly. Try nstreme or 802.11 with full cts/rts, that may or may not work better for you. But it all depends on many things, like interference on channel, number of clients, possibly ROS versio...

r00t

Why not at least hash it? If you really need to send username to prevent spoofing or for some other reason, hash would work as well. It would at least not be visible in the packet in clear. I agree that if someone is already sniffing your connection you have a bigger problem, but still... why make i...

r00t

Actually this is quite handy to repurpose old routerboards to run things like usb device sharing server and not losing all mikrotik features in the process (like when you install LEDE instead, wiping everything). There will always be a way to do this if you have hardware access to the device - netbo...

r00t

Even if passive DACs were limited to the shortest ones, it would be enough to have RB4011 sitting on top of switch. Even very short 10cm DAC would be enough in that case, no need for meters long cable... And why is the RJ01 not supported? And this is another good question... seems a lot like softwar...

r00t

Interesting indeed... wonder about other SFPs as well.
Being able to use passive DAC is great news, even if it might be limited to shorter cables.

r00t

Sadly Mikrotik doesn't want to update and release it anymore. It would probably be quite easy to do so, but where there is no will... If Mikrotik had iperf compatible server, this would be completely different story. But as it is now, you have to have extra mikrotik hardware if you want to do bandwi...

r00t

*) routerboot - fixed RouterOS booting on devices with particular NAND memory (introduced in v6.43); It would be really helpful if you listed affected devices or at least product ranges. Is CCR affected? Or just MIPS maybe? Do I have to update wireless wire? This is quite important information you ...

r00t

You can use USB to serial adapters. There are drivers for them on all platforms. Not sure about stability, but just get various modules from different vendors and try them out. Otherwise USB 2.0 should have enough bandwidth for quite a lot of modems...

r00t

FEC tunel is really awesome, I have played with tinyfecvpn and it can make bad connection usable for VOIP and other realtime services. You trade in bandwidth for better and smoother latency and no packet loss. Sadly there are many similar features that would be nice to have (just look into "Feature ...

r00t

Get (or make) a null-modem cable and RS232 to USB converter (unless you still have very old PC with RS232 port). You should get BIOS in terminal when booting and then use it to boot from LAN and do the netinstall. If you don't even get BIOS on serial, you can try using backup booter (not sure if RB1...

r00t

Same on RB600 that was updated slowly over the years from v3.3 to current version now. On another similarly old RB800 it only changed to modern page after I did netinstall. So if it really bothers you, do the clear new mikrotik install using neinstall and it should be fixed...

r00t

For such places it's useful to add ESP01 with esp-link firmware on UART/serial port. That way you can access the bootloader remotely over wifi. It's same as WOOBM, but allows you to access bootloader menu. Similar would be adding one of these cheap HC-05 bluetooth modules, but they are less secure -...

r00t

Mikrotik marketing and device design needs some more consistency: First, they release WOOBM and say it's a best thing to manage your routers, just perfect solution everyone should buy and use... ...then they release new router with great specs, but with no USB port to plug WOOBM into. And it's not j...

r00t

You can use Woobm for management (but all you get is console). Or USB2LAN adapter that will appear as a new interface and you can use it just like another LAN port, for winbox or anything else...

r00t

Frenquensy probleem!!!

That's just a warning that you are running overclocked CPU. If it's stable and not overheating, you can just ignore it (That is if you need this higher speed. If not, just lower it to default value). Same message is also output in the log every time router starts.

r00t

otoh adding 8 ports and a mpcie slot would result double sized pcb - so less efficient logistics, therefore higher prices. Just put the ETH ports on both sides of the box, not just along the one long side. This is SOHO router so it's perfectly acceptable to have wires coming out from all directions...

r00t

More than 5 ports, 8 would be nice. Preferably 5Gbit/s as these standards are becoming really common. Software switchable per-port POE out would also be nice addition. Also if these CPUs have pci-e 1x, please put the slot in there, so you can plug in wifi or LTE pci-e modem - this would make it far ...

r00t

HomeplugAV200 uses OFDM carriers between 2 and 32 MHz. Newer HomeplugAV standards extend to 85 MHz or more. Quality Brands will apply a PSD-mask to their devices to circumvent the 27 MHz ham band. Powerline communication is absolutely worst use of radio spectrum ever. While pretending it's only wir...

r00t

I think somewhere it was stated that 3 channel limitation is from the used 802.11ad radio chip, so that's probably not going to change unless they upgrade hardware.
Or it would be nice to get new 60GHz radios with SFP or new 2.5/5Gbit/s wired ports so full channel capacity can be utilized.

r00t

No, tx-sector 29 means +0.6 degrees azimuth, -0.2 degrees elevation. tx-sector is just a sector (beam configuration) identifier that translates to some predefined azimuth/elevation combination, as output to the console.

r00t

Would be really nice if Mikrotik published list of VID/PIDs of supported hardware in RouterOS. Be it MiniPCI, MiniPCIe or USB devices... all of them. I wonder when some card works in x86 build of Mikrotik (you can test that on an notebook, just install ROS on USB stick) if it will also work on ARM b...

r00t

6.42.1 has caused a noticeable bump in disk usage on CCR1009-7G-1C.
Is that normal (expected?)

Can see the same on RB600, big jump in disk usage:

weekly.gif

Used automatic download from packages in Winbox to update it.

r00t

Sadly USB sharing was tried long time ago and abandoned by Mikrotik for being too unstable or something like that. If you really need to share non-standard USB device you have to use additional Raspberry Pi zero (or Orange Pi or other SBC) running http://www.virtualhere.com/ server (it's free for on...

Search found 197 matches