MikroTik

r00t

There's probably hard limit on number of LTE interfaces or USB devices in ROS. Also that's quite crazy! What's your use case to have 80(!!) LTE modems connected to a single ROS? There is no way there will be enough bandwidth for all of them to run at the same time unless you also added like 10 USB h...

r00t

Probably related to these SMB changes:

What's new in 7.14 (2024-Feb-29 09:10):

!) rose-storage - moved SMB service to the RouterOS bundle;
!) smb - removed legacy SMB service (replaced with newer and faster ROSE SMB service, compatible with SMB 2.1, SMB 3.0 and SMB 3.1.1);

r00t

There is qca9888_pci.ko kernel module in wireless-7.13.npk so that may work...

r00t

No. First problem is that Asus card uses Intel wlan module and that's not supported in ROS. Only Atheros/Qualcomm WIFI drivers are in ROS. And even if it was 802.11ax Qualcomm card, it would not work because Mikrotik simply doesn't include any newer drivers in x86 ROS, best wireless that's supported...

r00t

All these models probably have same board inside, that's easy way to upgrade products. But it's all good only for setting up outdoor APs for regular devices. None of this would work in WISP scenario without bridge mode, TDMA, not even basic WDS. There could be some workarounds for that using tunnels...

r00t

Entire Mikrotik WISP segment is "dead man walking" at this point. There have been no new devices announced for years and now with new wifi driver that's 100% consumer oriented and can't even do basic WDS, it's all just legacy products. And 60GHz is included in the "legacy" wifi p...

r00t

WPA2 PSK is very secure if you use maximum length key with high entropy. Bruteforcing such key is impossible in any reasonable time even using dedicated hardware. As for actual data encryption, you can always use shorter re-key intervals so AES CTR keys rotated more often (ie. before there is even a...

r00t

That's really nice miniPcie card, perfect to upgrade to AX. Too bad there is no wifiwave2 on x86.Maybe it would work in RBM33?

r00t

This is really interesting idea, especially for all these new laptops that lack proper network card. Using stupid dongle is annoying and it gets really expensive when you want more than 1Gbit/s. And USB4 or TB3 to 40Gbit/s QSFP adapter? Just google it, price is in complete WTF range... So nice mikro...

r00t

It's better to do install locally in a VM (use same size/type of virtual disk as later in real machine) then after setup finishes, shut it down and DD the disk contents to a real machine disk. It should boot and even without any special autorun.scr it should be accessible over LAN for further config...

r00t

Last time this happened, I contacted support and they gave me updated license code.
They will want supout from the router and maybe also photo of the board stickers...

r00t

It's likely your original dish was less than 24dBi (they are often overrated) or there was some additional loss in N connector. Using LDF or SXT is far more efficient (no cables with loss, all is integrated on a PCB). LDF should be even better than SXT as it's optimized to illuminate offset dish exa...

r00t

No. Mikrotik 60GHz products will only work with other Mikrotik products. There is no compatibility with hardware from other vendors.

r00t

1) HUBs work and you can connect more devices that way. But there seems to be hard limit in number of USB endpoints devices can have in total - 32 is maximum for all devices. See https://forum.mikrotik.com/viewtopic.php?t=136227 for more details. Simple devices like USB to RS232 converters usually j...

r00t

Yes, LDF2 will be able to use both chains to SXT unlike Metal that's limited to single chain. I'd say go for it, LDF is cheap and with 90cm dish you get ~25dB of gain by antenna alone + the two chains. You have enough SNR to probably run 100Mbit/s real throughput if both chains are used and there's ...

r00t

Do the same again and then generate supout.rif and send it to Mikrotik support. It's probably a bug in USB or UPS driver.

r00t

If device is not even in resources/USB then it's not connected to router or not getting power. Try connecting any other USB device if it appears in resources (it should even if it's unsupported, like PC mouse). If that doesn't work, try self powered hub or some self powered USB device for a test (fo...

r00t

Yes, ROS supports USB to ETH adapters and your use is exactly what they are good for. RTL8152/8153/etc adapters seems to be well supported, with exception of 8156 that may be supported soon (see https://forum.mikrotik.com/viewtopic.php?t=182606). Just be aware there's plenty of Chinese clones of the...

r00t

Yeah, it really sucks SFP+ and fiber in general is not more widespread as it's clearly superior. But good luck finding non-server motherboard with SFP+ instead of metallic 10GbE, even in $500+ range. Fiber is still seen as premium and server only by manufacturers, but in reality 2nd hand SFPs are di...

r00t

Well, it's possible, but not easy. Depends on how valuable such deleted files might be... if it's worth the effort, here's a brief howto: 1) Do not touch or boot or do anything with that device, all usual rules for data recovery apply 2) You will have to netboot the correct OpenWRT image for your de...

r00t

Currently, AX wireless NICs are not supported, for example, on x86 WifiWave2 package is only meant for CAPsMAN usage. That's REALLY disappointing. I was hoping that with wifiwave2 being based on Qualcomm driver, it would increase compatibility of wifi chipsets and supported hardware, but instead we...

r00t

Yes, writing to flash just to save LED state is quite silly. I think this should be optional and have it's own parameter ("save=yes" or something like that). In most cases when you are toggling a LED from a script, you are doing that to show some current state and having it saved is actual...

r00t

If built-in telnet client or http get command had connect timeout, it could be used for this via scripting... just let it send the SYNs and instantly timeout.
And connect timeout would be useful for other things, not just port knocking.

r00t

As for VM route: 1) Create new VM, configuration mostly doesn't matter, something basic like one core with 128MB ram and set CDROM to load ROS ISO. 2) Then make sure you remove the disk drive (if it forced you to create one). 3) I usually then boot it into BIOS, there is menu option for that. While ...

r00t

If you have the hardware then it's quite viable option and with ROS now being able to run containers, it's quite interesting option. Even power consumption wise, underclocked/undervolted PC will be very similar to regular router... And yes, L4 will be good enough for pretty much anything you do. Hig...

r00t

Another way to install to USB key is to use VM (I use VMware), boot it from Mikrotik install .ISO and have USB flash shared with VM (as USB device). Once files are copied to flash, shut down VM and insert it into target machine. This skips NetInstall (and any of its bugs) completely.

r00t

The big RS232 connector pins go nowhere (there is missing level shifter IC under it) so that will not work. You can also see two small 0 ohm resistor links on the left under UART pads that route RX line to the pads (as opposed to level shifter IC if they were in other positions). So UART pads on PCB...

r00t

I suggest you do all testing with different SSD just to see what is actually bootable and what isn't before you wipe/reinstall the old one. You can also do this with USB flash drive. And when you decide to finally reinstall it, make sure you have full disk image backed up - that way you can always g...

r00t

There's plenty of skins available for phpBB and every user can choose what skin he wants to use in his personal forum settings. Some may like white backgrounds, some dark themed skin, some default prosilver... it will not be possible to satisfy everyone no matter what Mikrotik chooses as default. Bu...

r00t

No. All Qualcomm Atheros chipsets (QCA) exist only in PCIe variants and original Atheros (AR) chips doesn't support AC.
There are some PCIe to PCI adapter cards (PCI1PEX1) but none with miniPCI connector and realistically it's not worth the money... just get RBM33 or other Mikrotik instead.

r00t

Changed back to Canvas in user settings and everything seems to be working (so far)...

r00t

So only way to get some action response out of Mikrotik is to threaten to release it as zero day after 6 months?
Does Mikrotik really wants to be in "that" group of companies?

r00t

The question is about configuring a single module to operate simultaneously in both frequency ranges. That's not possible, all supported chipsets can only server single WIFI channel. Yes, the modules supports both 2.4 and 5GHz bands, but there is just one local oscillator that can run on one or the...

r00t

This one seems particularly bad vulnerability, especially if it's in the router advertisement/neighbor discovery as described, as these are active by default and left enabled by most users: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mi...

r00t

I can't figure out how to configure both the 2.4GHz and 5GHz bands to work on this single module. Are you completely new to Mikrotik? It sounds like you have no idea how things even work. Time to RTFM, maybe watch some videos on how to configure and work with WISP hardware, otherwise you will keep ...

r00t

But KNOT can work with bluetooth. Bluetooth in KNOT is part of the used Qualcomm CPU, it's internal to the platform, not external USB module. So the driver will not work with anything other than that one specific SoC. As for antennas, you can have two sectors connected to two chains, but if they do...

r00t

yes, of course. You can turn off chains in advanced options, can even assign different ones for TX/RX... As for bluetooth, completely forget about it ever working in ROS, it's not going to happen. Only possibility is if USB pass-trough ever makes it into containers subsystem, it might be possible to...

r00t

Yes, ONLY chipsets with specific drivers (ie AR5211, AR5212, AR5416, AR9300, AR9888, QCA9888, QCA9984, WIL6210) have chance to work. No other will be recognized at all like you show on your screenshot, even if it's similar family or generation. Devices listed in PCI resources are just that: list of ...

r00t

I tried to install Routeros on R86S with the message "No harddrives found"

I suggest you just boot it off flash drive, it pretty much works every time on every machine as usb drivers are stable and universal.
Then you can check what hardware can ROS actually see on R86S platform...

r00t

It was long long time ago, maybe 5.25 or similar super old version, maybe just beta. It was quickly removed because it only supported one specific Atheros chipset that was pretty much obsolete anyway. And that version will simply NOT run on RBM33G anyway. So just forget about using USB for WIFI, it'...

r00t

Some mini PCs have eMMC drive to boot from (like Intel Compute Stick and others), same for SD card... so maybe that? ROS would need some drivers for that I think, never tried that.
Or maybe trying to ask if you can boot ROS from M.2 drive and it got lost in translation somewhere?

r00t

have you compared the 4011 v6 and v7 boards side by side? Yeah, that's lovely you have internal revisions of HW like v6 or v7... but why it's not on the box or sticker or in product name?! Really, this is pretty stupid... at least add a letter to a product number or somewhere on the sticker that sa...

r00t

If it's running OpenWRT it's likely someone also applied patch to enable UART console for bootloader (it's described on openwrt wiki). In that case you should get MIkrotik bootloader on start and do the nand wipe from it. Then follow with netinstall and hope license is restored. If not, constact sup...

r00t

This is really good idea, because usually people keep using in browser bandwidth tests and these are far more influenced by CPU throttling and and general overhead. Being able to simply test bandwidth from phone to router would show to a lot of users that problem is not the wifi bandwidth. As for be...

r00t

Well, short answer is NO... ... but there is a way to accomplish what you want: Use arduino to interact with the console directly (log in, issue command, log out). Can use special account with restricted access just for what you want to do. For more complex things it's even possible to have full acc...

r00t

Well, best is to just test all of these protocols and use what's best for you in your specific case. Try pinging just both ends of the link first, in case it's some GW problem. For nice visualization of link latency I like to run PingPlotter with interval 0.001sec (ie 1000 pings/sec). Any interferen...

r00t

AR9280 seems to be problematic, another older thread about it: https://forum.mikrotik.com/viewtopic.php?t=68188 I think it may be down to radio EEPROM contents, the ROS wireless implementation is rather specific to work just with Mikrotik hardware and it may need some extra data/fields in there. Bes...

r00t

CHR will continue to work without any limitation, you will just have to update it manually if you choose to do so (export config, reinstall, import it)

r00t

Well, it can be jammed, like any other radio link... there is simply no protection against this type of attack, given you use enough power. That said 60GHz is far harder to jam than any lower bands as hardware to find out the frequency and generate the jamming signal is rather expensive (besides usi...

r00t

x86 ROS have same drivers as other platforms, so this means only specific Atheros and Qualcomm radios are supported. To list kernel modules in routeros-xxx.npk use 7zip to extract it and you get following kernel modules: AR5211 AR5212 AR5416 AR9300 AR9888 QCA9888 QCA9984 WIL6210 You can then check w...

r00t

If Mikrotik really wants to be compliant to that directive, they can't just put random passwords on regular access and leave say API open with default passwords. That will just not be possible. Any login method that allows you to configure and use router in any way must be using random passwords to ...

r00t

Just do a full disk image backup before upgrading. That way you can always go back to old version if upgrade doesn't work.
License is bound to the disk drive, but as long as you have the original disk image, it will stay the same after you write it back from backup.

r00t

Contact mikrotik support directly, only they can fix this

r00t

Yeah, fiber runs so much cooler, as they regulate power to minimum.
If only new motherboards came with SFP+ cage instead of stupid wired ethernet. $600 "workstation" board from ASUS with dual NICs and still no SFP+... C'mon!!

r00t

There is Ubiquity SFP+ module that runs at normal temps, but it's not supported by ROS at the moment, see viewtopic.php?t=193137

r00t

The S+RJ10 will get super hot (not the RB, that will stay the same). Especially if there is no forced airflow over S+RJ10 it can reach 90 degrees C.... it's pretty bad.

r00t

Make sure you have dumb switch between PC and RB, so PC network interface doesn't come up/down/up/down... during RB reboots. If it does, it can miss the time window to initiate netinstall procedure, because especially newer windows versions are super slow to bring up the interface.

r00t

The netinstall procedure would be fine if it was possible to initiate it without having to press any buttons on the device itself. Only then it could be automated. Think of something like having user "netinstall" with fixed password "Run_it_now!" that can only login once after re...

r00t

As long as routerboot is working (seems to be), you should be able to initiate netinstall procedure and recover the device. Note that reformat and netinstall (netboot) are two completely different things and you don't need to reformat flash/nand to be able to do netinstall...

r00t

That's the advantage of RB800, it does have both mini-PCI and also one mini-PCIe slot you can use for these experiments...

r00t

Yeah, it's rather annoying there is not a single 60GHz product with SFP+ from Mikrotik... really... come on... 60GHz products were released 5 years ago... Yet they keep releasing more and more outdoor switches with SFPs, even CRS504-4XQ-OUT now with 100GbE you can put on your roof... but no radios t...

r00t

First of all connect the console to know what's going on. It may be bootlooping for various reasons (corrupted nand, bad caps, ...). On these older boards bad caps were common problem, for a quick check you can solder some new caps in parallel to the old ones and see if that helps (much faster than ...

r00t

You can also try 6.4x version of ROS in case that changes anything. Hardware wise only thing that might be different is radio EEPROM, maybe ROS driver looks for something in it that's non-standard? Comparing it with contents from radio that works (like from NetMetal5) would be interesting... but don...

r00t

Lack of spectral scan is not related to wave2 but because Mikrotik started using cheapest grade of 802.11ac/ax chips that doesn't support that feature. Just look what's Ubiquity doing with exactly same radio chipset with advanced features enabled: Spectrum scans, QAM constellation views, TDMA, ... A...

r00t

It's been like 3 years, so sorry I can't give you exact HW details. But I had some PCIe risers to play with so first I tried miniPCIe to single PCIe slot riser with Intel ethernet card in it. It showed in PCI resources, but no driver for it in PPC ROS. Next I tried some D-Link 802.11n Atheros based ...

r00t

Unless there is some specific limitation in wifi2 package, I don't see any reason why this would not work. You probably could even use mining pci-e riser and run multiple cards off that slot... at least I tried it some time ago with RB800 and all cards were detected and usable...

r00t

Forget about RB411 or RB333, they are too weak for anything like this. But RB600 and especially RB800 with miniPCIe slot still have plenty of power for 802.11ac traffic, especially if you don't need routing and just want AP. As for supported radios, easiest is to list kernel modules in routeros-xxx....

r00t

Also with 60GHz it might be possible to reuse the frequencies if you possibly can locate links in such way that they can't see each other. For example let's imagine two office buildings say 10 floors high. If you put one 4xlink on the roof, sitting just a bit above the roof floor, it will not see th...

r00t

60GHz will be ideal for this use case, but sadly Mikrotik STILL doesn't have a single 60GHz product with SFP+ slot or faster than 1GbE ports. So even if radio rate could do ~5Gbps, there are no ports to actually fully utilize the bandwidth. For a few gigabits, you can perhaps use multiple wAPs bonde...

r00t

Main problem is that the radar detection is by definition completely unreliable and prone for false positives. There is no definite ID that would identify signal as radar. It's something as simple as "if there's 10 pulses of signal on the frequency spaced X ms apart, radar is detected". Th...

r00t

That's good to know it works in X520 without any problems. I was looking for alternative to S+RJ10 because that runs as hot as fusion reactor... and X520 under full load is already plenty hot even with fan. So might give this one a try.. at least for X520 for now. Having it supported by ROS would be...

r00t

During 24h you should have full set of features and there should be no limits on what you can do. If the wifi doesn't work, it will likely not work when you buy the license key. Hard to say where problem might be, QCA9980 should work. Maybe try 6.49.7 just to check. You can try decrypting the supout...

r00t

For wireless in ROS, only Atheros/Qualcomm hardware is supported. No Realtek or any other vendor will work. It's that simple. As for actual chipsets and radios that are supported, you can usually assume that if there is official Mikrotik product with some ARxxx or QCAxxxx chip then non-Mikrotik card...

r00t

Yes, try the netinstall. If that doesn't work, LAN port is damaged (can't receive the server) or there is some other problem.
And no, this is no license related..

r00t

NV2 is not always better than NSTREME. Main problem with NV2 is latency increase at all times and setting TDMA period to minimum (2ms) reduces throughput too much (while 2ms is STILL not that low..). For P2MP that might be a trade-off you can accept under some circumstances, but I find adding 5ms of...

r00t

My only valid reasons to upgrade are: Security issue fix Fix for bug in feature that's actively used Significant improvement in performance of feature that's actively used When device is doing what it should be doing, it's stable and there are no known security vulnerabilities on it, why upgrade it?

r00t

Clever workaround using container with QEMU!
But it's sad to know that if Mikrotik really wanted, they could just release <100kb .npk package with netinstall server for pretty much any architecture out there...

but they don't

r00t

If you want to see any official feedback, contact Mikrotik support directly.
But don't expect any quick fix, unless it's something really trivial. Then it might be fixed in one or two next ROS versions...
If you need this working ASAP for a job, get a supported transceiver instead.

r00t

+1
Enabling internal UART to be actually usable would be great. Especially for boards with no USB, where UART is only way to connect anything...

r00t

Looks like on RB5009 situation is more complex. If you want to go down the rabbit hole:
https://openwrt.org/toh/mikrotik/rb5009ug_s_in
https://github.com/adron-s/aux-loader2

r00t

Soft-disabling UART console on most of the devices is one of the most stupid decisions Mikrotik made. Thanks to it devices that could be repaired are tossed into e-waste (or regular) bin for no reason. Also with no console you can't even see what's going on during netinstall. So many people are fail...

r00t

Remember, good antenna is your best amplifier. Unless you have mobile setup, using omni antenna is just a waste of power. Patch, yagis or directional dish antenna with proper gain would give you much better results...

r00t

I got a reply re connectivity -> USB-serial-nullmodemcable-serial-usb contraption should work no problems. It can be made even easier from two USB to TTL boards (super cheap from China, <$1, just get FTDI chips as they are least problematic), connect RX->TX, TX->RX, GND->GND and it's done. Easiest ...

r00t

Only x86 ROS includes variety of drivers. All other platforms generally only include drivers needed by hardware on that specific platform and Mikrotik hardware. Nothing else. Unless Mikrotik decides to include the driver/kernel module in MIPSBE build, it's not going to work. It's same with any other...

r00t

That's some good info, thanks. Also nice mod. As a bonus you now have two more USB ports usable for something else (sensors, serial ports, etc.).

r00t

SDRs need raw USB transfers, none works with just serial port (that's too low rate for anything usable). So yes, full USB pass-trough would be needed to run say SpyServer in a container... I have ran it before on RBM33 with OpenWRT, RB5009 should have plenty of CPU power to handle SDR without proble...

r00t

Or just install it on any other PC or VM then move the disk to headless setup. As long as CPU is in the roughly same class there will be no problems, there is nothing machine specific configured/installed during install. License is only bound to the drive you install ROS to. I have several ROS insta...

r00t

This is very interesting! I have never seen counterfeit Mikrotik device yet... so, what actually happened here, if it's completely different HW inside that runs ROS? Or perhaps hacked license on official Mikrotik board? It all seems like a lot of effort someone would go to actually make a compatible...

r00t

Proper solution would be management VLAN and SFP that's sending errors or log entries using syslog traps to your server/router/desktop/whatever. Or SSH in via the management VLAN to SFP to check the status. Reality is that many PON SFPs use horribly botched firmware made by some Chinese intern that'...

r00t

There is no standard when it comes to UART console access to SFP modules. Only SFP network signals are routed to the connector, so any special UART communication is not possible in any of the Mikrotik HW. In general such access is only used for factory programming or when setting up SFP, not in inst...

r00t

Not having full nmap due to size constrains is understandable. But simple port scanner is such a basic troubleshooting tool it really should be included in basic ROS. Nothing fancy, just regular SYN scan of list or port ranges. Port scanner tool have been requested over and over again, just see the ...

r00t

Good old RB411 with R52n in a box does the job nicely, had one just for scanning needs in the past. And yes, only N radios can do scans, so no AC gear. Spectral scanning is one of those features that's just absent on any newer Mikrotik gear for no official reason. So if you need it, don't buy Mikrot...

r00t

Also it's still possible the PCIe bus is disabled somewhere in firmware or bootloader etc. Still would be interesting hack. I thought about it some more and cleanest way would be to make mod board that on one side fits the ASM pinout (with small pads with golden plated castellated edges for needed p...

r00t

Nice boxed version.

Too bad the PCIe bus on CCR can't be flipped in software somehow (so CCR acts as host). Having 8 PCIe lanes for more interfaces or SSDs would be nice.

r00t

Can't see all PCB traces on the photo, but it looks like all traces from ext connector go to the ASM1042A. The L2001 are just interference reduction chokes and D2001 are ESR protection diodes. U2002 is clearly SPI flash for ASM configuration. Area around U2003 is DC-DC switching converter (probably ...

r00t

Yeah, this really sucks. On cheap board I might understand some cost cutting reasons to save the last $1... but this is almost $500 router.
I haven't opened it, but maybe there is USB header inside? Or unpopulated USB connector? I can't find high res image of the PCB anywhere.

r00t

DC jack is just no nonsense connector... and if anyone wants to use USB-C to power the device, adapter from USB-C to DC jack that negotiates voltage costs <$2 on aliexpress. Really, it's that simple to use USB-C to power Mikrotik products if you want.

r00t

No. Only custom hardware supported is x86/x64. On all other architectures you need Mikrotik hardware to run ROS.

r00t

If there is ever revision 2 of this card, adding optional external power (either jack or POE or internal connector) would help. That way it would be possible to run it at all times, no matter what's the state of PC. Or even use it as a "router on a stick" like some users tried (and fried) ...

r00t

Typical max PCIe slot power is 75W and it's quite common for GPUs or things like AI/Crypto accelerators to use all of it... continously. Mikrotik card should not be consuming so much power. And any brief spikes should be smoothed out by capacitors on board. So I'd say the hardware side of this probl...

r00t

If you ask nicely and have a bit of luck on who handles your support request, you might get replacement license. Send them photos of the device, board serial number stickers, supout.rif (ideally old and new) and maybe dump of old NAND if not completely dead. Be nice, polite and show that you know wh...

r00t

It would be best if Mikrotik just added option to toggle USB devices between LTE and NIC modes (let's say add button in System/Resources/USB to do that). Because this seems to be never ending cycle: 1) Someone complains modem appears as regular network iface 2) It's fixed in next version, now it's L...

r00t

You may also have stolen it LOL... seriously, no sane person would do the NAND chip swap just to fix that kind of a problem. Anyone who fixes Mikrotiks knows you can just read the reformat timeout value from the chip. There is really no need to replace it in that case. I've done that many times, fi...

r00t

Last time I did this was about 2 years ago and the license update servers were down. I had to generate supout and contact support to get new license files.
It's always good to backup old license as well as generate supout before upgrading just in case something doesn't work...

r00t

You can contact support, they will tell you the default passwords if you send them device details. But I agree this is really stupid if everything depends on a sticker, it can fall off or be removed by customer. There just needs to be some better way to deal with this problem. At least there should ...

r00t

If it's just two points you need to connect (not multiple stations) then use dish antennas and antenna rotators to steer them accordingly. You may only need to do the azimuth if it's a ship on the sea (difference in elevation will be minimal, probably within beamwidth). You would need some another l...

r00t

There might be two possible issues here: 1) You can check if the ROS can actually see the PCI device in system/resources/pci. If the device is there, it means the M.2 slot have all necessary pci-e signals for this to work. If the device is not there, the M.2 is probably only meant to be used for LTE...

r00t

From W25Q128JV datasheet:
Advanced Security Features
– 64-Bit Unique ID for each device
– 3X256-Bytes Security Registers with OTP locks

So it's likely these features are used for soft-id. Even if you dump and clone regular flash contents, you can't clone chip Unique ID.

r00t

I replaced the broken button using same button from another dead routerboard, so everything looks like nothing happened...

r00t

yes, solder a switch from 1 to 2

r00t

Choose one depending on your board: LX5530 is for 5GHz board, LX5535 is for 2.4GHz version RB711.

r00t

Just buzzed the board with multimeter and:
Pins 1 and 2 are actual switch pins (open when not pressed, connected together when button is pressed).
Pins 3 and 4 are for metal bracket and they are connected together at all times.

r00t

Congrats on successful fix!

PA is https://www.microchip.com/en-us/product/lx5535
If you search LX5535 on Aliexpress you will find some, best deal is for 20pcs for $20, but even 10pcs for $15 is OK...

r00t

No. License is bound to the boot hard drive serial number and other identifiers. They will be different for every HDD and always different from ones used by VM, so license will be lost. Other than that, moving ROS from VM to real HDD would be as easy as converting VMDK to raw disk image and writing ...

r00t

You can try emailing support if they could give you some details. But generally if it affects just TX power (and RX sensitivity is fine) it must be caused by PA or possibly antenna switch chip. Because signal goes from antenna to switch and then there are separate RX and TX paths. On RX path there i...

r00t

Connecting two dishes is pretty much out of the question at these frequencies. That would be possible if it was 5GHz, but at 60GHz, the attenuation of any type of feed + cable + feed or even just waveguide is too much for this to work. So flat metal piece is only way how to possibly do this on 60GHz...

r00t

I considered getting one for SSD NAS build, but no FreeBSD/TrueNAS support just kills that use case.
It's a shame because it would be interesting hardware to test and play with...

r00t

+1 for proper serial console port, not just for management but also control of other devices. It's sad all devices from Mikrotik come with UART pads on PCB... but we can't use them in ROS, they are not software enabled - yet fully functional if you boot OpenWRT. If having <$1 in BOM cost of RS232 po...

r00t

Just because containers so far are huge doesn't mean you can't have single purpose one that's just a few kB in size. In the end container can be as small as you can make statically linked executable. No, you are not going to run pihole or your web server on it. But for something like port mapper or ...

r00t

You can use it as transparent serial to tcp bridge. If you add RS485 convertor it may do MODBUS or any other protocol.
But don't expect any MODBUS functions from ROS like on KNOT, it will only really do the raw bytes forwarding from/to UART port, no data manipulation.

r00t

Yeah, proper file/dir operations in winbox are badly needed: create directories, change permissions, usual basic stuff that's still missing... Also it would be nice to have button to download directory as .tar.gz and to upload (and unpack) .tar.gz archive. Because on windows you can't easily copy an...

r00t

There would have to be drivers for it in ROS for that platform. Without drivers you will see it in system/resources/pci but that will be all. Unlike x86 ROS that includes drivers for most common hardware (so intel/realtek cards work) builds for other architectures are slimmed down and doesn't contai...

r00t

Re WDS, Mikrotik ROS refuses to link with any non-Mikrotik device in WDS mode. For more details see: https://forum.mikrotik.com/viewtopic.php?t=177451 I have reported this to Mikrotik and they looked into it (sent them Wireshark captures and more info from lab testing), but actual fix was never impl...

r00t

+1 for OpenWRT minimal container. It's very lightweight and there is already package manager and other good features available for all architectures ROS runs on. Also maybe make minimal containers with just busybox for different architectures. Something that can be easily used for doing scripting or...

r00t

No, it's not possible to auth to google using user and password. They removed this option and "Less secure access" was forcefully turned OFF by google last month on regular accounts.
Another reason not to have email handled by google...

r00t

Also you can use comma to separate multiple port values, there is really no need to have so many rules, each for one port. Ommit the to-ports so destination port is the same as source.

r00t

Yeah, ROS console is really missing simple zmodem/xmodem download/upload functionality, for getting backups, certificates and other files to/from device with just serial port. Currently this is not possible. Only way to transfer files over serial is to set up PPP connection over it instead of consol...

r00t

This could be implemented very easily: See that blue bar on the left that says "RouterOS Winbox"? Simply allow user to pick new hue tint for saved profiles and on connect, adjust hue of this bitmap accordingly. No need to mess with GUI or do anything else. I have done this in one of my pro...

r00t

I had tried using Prolific usb to serial chips in the past and they were nothing but trouble. Fake chips everywhere, old chips not supported by new drivers, newer chips causing windows driver to BSOD on removal, chips dropping data at higher baudrates, ... etc etc. Prolific = Avoid at all costs!! If...

r00t

I think there is reset hole near end of the PCB from the back side near screw, just above where it says "3.3V AUX VOLTAGE" (for reference, here are some photos of the board: https://www.reddit.com/r/mikrotik/comments/urag6j/ccr20041g2xspcie_hand_on/) As for UART, I wouldn't be surprised if...

r00t

RouterOS does not store configuration in one plain text configuration file. But it stores configuration in binary structure that can be backed up/recovered. So provide the tools to convert this binary into text configuration and back. it's like registry on windows, where currently there is no way t...

r00t

Sadly this is not possible, Mikrotik currently doesn't even have simple port mapper tools. There have been requests to support port mapping and have tools like UDPXY for a long time... so far without any official reply. Too bad, because most of the cases could be handled by including socat in ROS, e...

r00t

If it was any regular embedded Linux machine, you would simply connect UART console and get some kernel bootlog with error messages that would tell you exactly why it's not booting. But this is Mikrotik and they do everything to block this type of access, so it's just a black box: It either works or...

r00t

...not true, as I am using IOMMU/vt-d with real, Intel based NICs on my KVM based machines....CHR pics them up just fine. CHR / ROS v7 supports newer NIC models than v6, though. Good to know they are supported now. I must have been unlucky with my NICs being not yet supported before by CHR so I alw...

r00t

Seems like you are directly forwarding IO to VM, instead of sharing it with CHR from Hypervisor as Virtio interface. The CHR doesn't have any drivers for hardware, it depends on virtualized interfaces presented by your Hypervisor. So the problem here is your Hypervisor software is either misconfigur...

r00t

Maybe with Docker, we might get USB passthrough support at some time so interfacing USB devices directly will be possible. As for USB over IP, I needed this years ago and simply flashed some older RB4xx boards with OpenWRT and ran Virtualhere USB server and it worked great. It was much more stable t...

r00t

I think there is good chance it will happen at some point, outdoor SFP products like "netPower Lite" point in that direction. But with Mikrotik no one ever knows... but I agree it's badly needed and competition already have it. Fiber is cheaper than ever and it solves all EMC and protectio...

r00t

Basically as long as it can run any of the current ROS releases, it's still supported. AFAIK only "officially announced" obsolete devices that can't run recent ROS are MIPSLE devices (RB532 etc.). Mikrotik doesn't block updates to old devices depending on their release date like some other...

r00t

First of all, be careful! Before you try to do ANY disk checking or run any tools on that drive, make sure you have full disk image. ROS license depends on some magic bytes in the MBR and system partition and if they are modified by any software, you lose the license FOREVER. Reinstalling ROS will o...

r00t

Thanks for "heads up". Hopefully it will be fixed in next 7.2 release (or is the bug in 7.1 making it impossible to be updated?).
And it's always good to backup the disk image before updating in case something happens... with Mikrotik you never know what may happen.

r00t

With regular ROS (non CHR) it's more complicated, especially when running in VM. License is locked to things like drive manufacturer, name, serial number, etc. If it was regular hardware drive, then these values would be inherently static and unchangeable. But with VM, every VM software may set thes...

r00t

I tried to Google for AiMesh to see if it uses one or more of the protocols you quoted but I think is some proprietary protocol. It's common for different vendors to use some custom "secret sauce" for this under different names, but in most cases it simply means they enabled and use every...

r00t

Roaming on Mikrotik greatly depends on how intelligent are the client devices in detecting APs are part of the same network. As Mikrotik doesn't support any of 802.11k/r/v/w/... roaming extensions, there is nothing to tell clients how to roam faster/better. If client depends on any of these extensio...

r00t

lol @ "poop stool" ... I really hope this is not how all new marketing will look like in the future.
Mikrotik currently have some nice "design language", that looks very professional and clean.

r00t

Try running backup routerboot (there usually is extra button or pad on PCB to force loading of backup routerboot).
It's possible this is bug in current version of routerboot.

r00t

I would expect non-supported HW to just not work, but I see no reason why R11E would not work. ROS does have drivers for it, it works on other ARM boards, you can see it in PCI devices list.... weird. From my ROS analysis I haven't seen any signs of hardware whitelist of allowed cards for different ...

r00t

Sadly Routerboot (bootloader) will simply not allow you to boot from any other interface, so that's impossible. There is also no way to load firmware over UART connection (and it's disabled by default anyway). But you aren't completely out of luck, because it uses small SPI flash chip that can be fa...

r00t

Here is some more info about that ATL:
viewtopic.php?t=183342

So it seems to be CAT18 LTE/5G modem with 60GHz radio...

r00t

If you have Mikrotiks on both ends, then EoIP with IPSEC should give you best "wireline compatible" link.

r00t

UART is disabled by default in factory config mtd block. You can reenable it by patching a byte in it, details are on OpenWRT page: https://oldwiki.archive.openwrt.org/toh/mikrotik/rb941_2nd#how_to_enable_serial_port (But I have only done that on ARM boards, 711 is MIPS so YMMW...) But whatever you ...

r00t

If it's really directly related to user logging it, then it looks like software issue. Probably IO blocking causing issue in ROS... I can think of something like writing to flash on user login somehow stalls all IO or something like that... but that's just speculation. But if it's really related to ...

r00t

Just name the directory "ramdisk", anyone knowledgeable enough to be able to use winbox will surely know any file put there is temporary. And this thread is from 2017, it's clear there is demand for this feature... but NOPE. I really just don't understand what's the problem here for Mikrot...

r00t

If it's still under warranty period and you can return it, return it. If not, then you can try opening it and using UART pins on the PCB to connect UART to USB serial converter ($1 on ebay) and you will get some output. Sadly console is disabled, as is the bootloader menu, but if there are any error...

r00t

Yeah, it doesn't say XL in firmware or PCB. Only difference is in size of the parabolic reflector, it's clearly bigger if you compare it to non-XL version. The diameter is in the spec sheet.

r00t

AP handover on Mikrotik is super slow because ROS doesn't support any roaming extensions to 802.11 protocol. So clients basically do full reconnect on handover, this usually means full association and DHCP request etc. as if it was completely new network. Some clients may be little bit more clever, ...

r00t

Yes, that how it should work. After netinstall, it should be that all written blocks were replaced if needed and so all written data should be good. This process will continue on any NAND write operation in the future in case bad block is found. There is bad block counter in ROS (under system/resour...

r00t

Thanks Normis! Nice to see times have changed at Mikrotik.

r00t

Depends on gain of these antennas, but probably not much... entire unit is smaller then SXT that had 16dBi antenna... so likely 10-12dBi maybe. So not really usable on any longer distance, unless band is completely clean (ie. forget it in the city unless it's short hop like 200m). Sure, it's possibl...

r00t

Isolated DC/DC converters exist exactly for this reason. And they are pretty much standard when it comes to proper (active, not cheap passive) POE equipment.

r00t

Misspelled it as Mirkotik in video title screen

r00t

I wonder how flexible this PCIe interface is, can it be completely customized? If yes, then it could be changed from ethernet to something else. Something like Infiniband, have shared memory available to host and let the controller do all the heavy packet lifting to synchronize it across network. Ju...

r00t

There is nothing really preventing you from loading different OS into it (no stupid locked bootloader or anything like that). But building suitable linux kernel and system may be hard... at least until Mikrotik releases updated GPL code package. (And good luck getting it... last time you had to writ...

r00t

NAND memory does have some unused blocks for repairing/replacing failed sectors. This happens on write, when attempting to write bad block, it will be redirected to reserved memory and replaced with good block instead. And everything will work just fine, as long as the corruption is not widespread a...

r00t

Set fixed IP on network interface as instructed.
Use switch between PC and router when doing netinstall, so network interface doesn't go up/down all the time.

r00t

It's very interesting product... especially if it's really just 150e. That's about same as original synology 2x 5GbE card to put that in perspective on how cheap that is. Perfect card for SSD NAS or VM server. I'm sure there will be some clever uses of the router CPU as well. There are only two thin...

r00t

Also check that port is configured correctly in system/ports. You can also try no handshaking as some boards only connect RX/TX and nothing else.

r00t

How is PPTP any less secure than running IPIP, EoIP or any other VPN protocol with no cipher enabled that will show no such warning? And what's next? All open WIFI interfaces will show red warnings too? ROS is supposed to be for professionals that know how to use it and what limitations each of thes...

r00t

Also using "auto" channel selection on Mikrotik is quite bad, because it evaluates channels based on number of APs, not signal strength. So it will choose channel with least amount of APs and happily select channel with one super strong AP. I haven't tested wave2 if it's any different in t...

r00t

There really needs to be some official statement on DUDE from Mikrotik. All this silence for months, then such simple reply in completely unrelated thread... This is not how professional company communicates with it's customers! If it's not supported anymore, say it clearly on the website. Is the de...

r00t

So with "2ghz-ax" and "5ghz-ax" we can guess that something is coming, lets hope that this something comes soon :-) Well, there were some signs of something in the firmware strings and supported hardware by wave2 etc. but we have seen all these for years without Mikrotik even me...

r00t

Not work on Windows XP

I got worried as I use small rugged milspec notebook that's great for field work, but super slow under win7, so still running XP on it. And just tested 3.34 and it works fine on XP here, no problems.

r00t

Every time I had these "dim leds" symptoms on MIkrotik hardware, it was because of bad caps or PSU problems (undervoltage, unstable voltage under load, etc.) It would be very unfortunate if brand new RB5009 was already suffering from bad caps... As these are hardware problems, doing netins...

r00t

It's possible to load netinstall kernel using regular BOOTP/DHCP+TFTP server, the kernels are stored as EXE resources, easy to extract. Just skip first 4 bytes from each as that's size/checksum/something else. I have more details here: https://www.r00t.cz/Misc/MikrotikNetinstallFromCF But for next s...

r00t

it's hard to get a point across to someone who just doesn't want to even listen... now there are no arguments left by rfc1149, just insults. As for actual devices, here is a good example: https://mikrotik.com/product/rbm33g MT7621A CPU RS232 port, nice bootloader menu anyone can access to unbrick it...

r00t

I think you misunderstood. On-board diagnostic ports and protocols like UART/JTAG/ISP/SPI offer closer access to privileged busses. This exposes an attack surface that makes it trivial to dump the firmware of a device without using it as intended. .. As for the RS232, that's exactly what it's inten...

r00t

I have done that (PPP over serial) long time ago and it worked, speed is fine for winbox work... and you can run short serial cable almost at 1MBit/s speeds. On windows you can configure it as dial-up, it will "call" the ROS, establish PPP link, get IP and then you can access router using ...

r00t

Using mikrotik tools should preserve it, but it's always good to just make a disk image in case something happens... with x86 and regular drives it's easy... then you can always roll back.

r00t

USB to LAN adapters do work with ROS and I have tried several of them with success, mostly Realtek chipsets. Some USB2USB cables may work as well if they are visible as network interface in windows (so they support RNDIS or other standard USB classes). Only issue with some of these adapters might be...

r00t

no, that's currently not possible with Mikrotik ROS.
As you have found, running sniffer disables the interface for regular use, so it's not possible to run it together with regular AP or client.
You would have to use second radio to make this work with Mikrotik.

r00t

All these "How to block XYZ" threads are so pointless. Unless you have complete control of client devices or only allow limited access to whitelisted IPs, it's impossible to block anything. DNS filtering? pointless, just use DoH or IP address Restricting ports? SSTP on regular HTTPS port Y...

r00t

Devices with 16MB flash might have been OKish for low end products few years ago, but it's really not good to get the same limited resources on new hardware introduced in 2021 that cost $200+. There have been some excuses how used Qualcomm chipset/cpu can't use more than 16MB flash... but there are ...

r00t

Well, best solution for you is to return Mikrotik hAP while you still can and buy something else. While Mikrotik is doing some baby steps towards better WIFI, it's all still years behind even the cheapest competition. It will take years before situation improves at this pace, so if you need good WIF...

r00t

We can only dream about Mikrotik device with these specs:
802.11 a/b/g/n/ac/ax 4X4 MU-MIMO, OFDMA, 1024-QAM, BSS-Coloring, WPA3

r00t

I mostly use winbox GUI + console, but as for "other": Serial console - It may be old-school method, but when you need it, YOU NEED IT. It saved me having to go to remote sites many times. I always wire console from one ROS to another using null modem cable, so it's possible to access boot...

r00t

I'm running dozen of servers from USB flash drives, be it x64 ROS or TrueNas and never had any problems. USB booting is widely supported, it's easy to image the drive for a quick backup and for ROS it also means license is bound to the drive, not a server so HW upgrades are easy. As long as you buy ...

r00t

Hopefully one day we will get USB pass-through into containters, so it will be possible to interface with any devices and run USB over IP server if one wants that...

r00t

There are some weird choices on some Mikrotik boards, like pretty much every SoC CPU nowadays have USB host support... but sometimes they just choose not to make it available. Usually when I mentioned, I heard "every $0.1 matters for low cost HW" argument, but why not at least have PCB hea...

r00t

FCC internal photos is a good source of inside HW info, quality is usually good enough to read what's written on the chips... Also looking around OpenWRT wiki and forum often reveals internal photos and more info about used chipset and platform. You can do all this research before spending money and...

r00t

Some CPUs used in routers have dedicated pins for SDIO, ie they have hardware support for things like faster transfers using multiple bits/clock and can offload some of the workload (CRC). In other models SD is connected just over generic SPI bus, so it's much slower. Sadly there is no official info...

r00t

If Mikrotik wants anyone to take their WIFI products seriously, they really need to do this. Just look at the WIFi alliance page, all other vendors are there with certified products, even cheap TP-Link and NETIS are certified. It would also mean Mikrotik will finally have to implement some required ...

r00t

you can use "/interface wireless info country-info" command to give you details: ETSI: ranges: 2402-2482/b,g,gn20,gn40(20dBm) 5170-5250/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(23dBm)/passive,indoor 5170-5330/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(20dBm)/dfs,passive,indoor 5250-5330/a,an...

r00t

If you download wave2 .npk for ARM and unpack it, you can see list of supported Qualcomm Atheros wlan chipsets: IPQ4019 - integrated SoC with 802.11ac radio IPQ5018 - integrated SoC with 2×2 MU-MIMO 802.11b/g/n/ac/ax WiFi 6 IPQ6018 - integrated SoC with dual band 2x2 802.11ax Wi-Fi 6 IPQ8074 - Impre...

r00t

You need secondary radio. In ROS it's not possible to run sniffer and AP at the same time... and then you would still be limited to just single channel. But if you only need to get nearby APs, you can use wifi scanner with "background scan" option, that works even when AP is running and sc...

r00t

Ouch... the routerboot fix should have been in this version, it's rather important!

r00t

What is actually considered stable depends on what you use. Some users may not have any issues... while for others it's just unusable. I think most important is to get all functions that are currently present in v6 working without issues in v7. While there's many cool new features in v7, they can wa...

r00t

Before upgrading x86 ALWAYS make full image of the card/usb flash/HDD/etc. as a backup as license ID is stored there somewhere (I think partition table or boot sector or something similar). Unlike for HW routers, this ID is partially randomly generated when installing ROS on a blank disk, meaning if...

r00t

Sob: this is very good point, sadly Microsoft is to blame and developers have to spend their time to make workarounds. Remember how in win7 you could simply install windows theme that nicely applied skin to everything? Then came win10 and M$ completely ruined everything, you only get to choose if yo...

r00t

Also now that we have this awesome netFiber box, what about releasing some 60GHz links with SFP slots? This is long overdue!

r00t

There is really no danger here, as long as it's stable. You can open the hAP and check CPU temperature to see if it's not getting too hot, but as long as it stays below about 60 degrees it will be OK.

r00t

I like the netFiber 9, will there be a desktop version of it as well? There is currently no comparable desktop or rack mount switch available. CRS212-1G-10S-1S+IN have just one SFP+ and CRS328-4C-20S-4S+RM is far more expensive. If indoor version of netFiber 9 without all the outdoor mounting ended ...

Search found 708 matches