Community discussions

MikroTik App

Search found 6192 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 21
by mrz
Mon Mar 01, 2021 9:56 am
Forum: Forwarding Protocols
Topic: OSPF priority for dynamic Interfaces
Replies: 4
Views: 344

Re: OSPF priority for dynamic Interfaces

If there is no static entry in OSPF interface configuration, then parameters are taken from "all" entry. So you can adjust priority there to have all dynamic interfaces needed priority,
by mrz
Sun Feb 21, 2021 1:23 pm
Forum: RouterOS v7 BETA
Topic: REST API basic help [SOLVED]
Replies: 4
Views: 400

Re: REST API basic help [SOLVED]

Handshake can fail if there is a problem with certificate chain. Have you set certificate for www-ssl service on the router and have you imported CA certificate (used to sing the www-ssl service certificate) on the client device?
by mrz
Thu Feb 18, 2021 10:30 am
Forum: RouterOS v7 BETA
Topic: IPv6 firewall counters are very strange
Replies: 3
Views: 326

Re: IPv6 firewall counters are very strange

It means that one of parameters used in your firewall rules are not working. Send supout file to to support.
by mrz
Tue Feb 16, 2021 12:20 pm
Forum: RouterOS v7 BETA
Topic: VRRP sync-connection-tracking setup
Replies: 5
Views: 916

Re: VRRP sync-connection-tracking setup

Currently there are several centralised configuration management options: TR069, API, SSH, and now even REST.
by mrz
Mon Feb 15, 2021 5:54 pm
Forum: Scripting
Topic: /ip/kid-control/pause kid1 not work
Replies: 6
Views: 326

Re: /ip/kid-control/pause kid1 not work

API is not the same as CLI syntax. You need to get ID and then perform action with the ID,
See api documentation and examples:
https://wiki.mikrotik.com/wiki/Manual:API
https://wiki.mikrotik.com/wiki/API_command_notes
by mrz
Fri Feb 12, 2021 10:58 am
Forum: RouterOS v7 BETA
Topic: ROS7, announce single address [SOLVED]
Replies: 2
Views: 398

Re: ROS7, announce single address [SOLVED]

With output networks in a bgp template. The example is here:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Wed Feb 10, 2021 4:52 pm
Forum: Scripting
Topic: Global Variables
Replies: 5
Views: 3143

Re: Global Variables

They are global, you need to declare them before accessing, read this:
https://wiki.mikrotik.com/wiki/Manual:S ... #Variables
by mrz
Wed Feb 10, 2021 4:19 pm
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 534

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

Be more specific what exaclty is not working what errors you get and so on. Here is an example of traffic monitor, it works as expected: $ curl -k -u admin: -X POST 'https://10.155.101.214/rest/interface/monitor-traffic' --data '{"interface":"sfp12","duration":"2s&...
by mrz
Wed Feb 10, 2021 2:38 pm
Forum: RouterOS v7 BETA
Topic: rpki verify in new routing firewall rule
Replies: 4
Views: 366

Re: rpki verify in new routing firewall rule

In currently released beta (v7.1beta4) it is not possible to add rpki validation. We will finish routing filters release and then update documentation with new syntax.
by mrz
Wed Feb 10, 2021 1:53 pm
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 534

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

It is not clear what you are not able to do.

Have you tried to run
POST 'https://x.x.x.x/rest/tool/traffic-monitor' -data '{"interface":"wlan1","duration":"2s"}'
by mrz
Wed Feb 10, 2021 11:11 am
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 534

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

Check "Timeout" section in that manual. It has an example on how to use similar commands to "monitor-traffic"
by mrz
Mon Feb 08, 2021 10:08 am
Forum: Scripting
Topic: "\$(HOSTNAME)_\$(FIRMWARE)_\$(DATE)-\$(TIME)"
Replies: 5
Views: 408

Re: "\$(HOSTNAME)_\$(FIRMWARE)_\$(DATE)-\$(TIME)"

file="$HOSTNAME_$FIRMWARE_$DATE-$TIME"

keeping in mind that all of those variables are actually defined.
by mrz
Mon Feb 08, 2021 10:02 am
Forum: Forwarding Protocols
Topic: How Donot Change Community In bgp
Replies: 3
Views: 319

Re: How Donot Change Community In bgp

RouterOS does not change or remove communities unless you explicitly tell it to do this with routing filters.
by mrz
Mon Feb 01, 2021 9:35 pm
Forum: Forwarding Protocols
Topic: BGP Peer without default route
Replies: 2
Views: 280

Re: BGP Peer without default route

It is possible with a script that checks BGP peers status and disables/enables default route accordingly.
by mrz
Tue Jan 26, 2021 10:04 am
Forum: RouterOS v7 BETA
Topic: v7 Beta and VRF config changes
Replies: 4
Views: 625

Re: v7 Beta and VRF config changes

Interface list was added to address issue with large amount of dynamically created interface issue. v7 routes has routing table parameter, so you can determine to which table route belongs the same way as in ROS v6. [admin@arm-bgp] /ip/route> print det where dst-address=192.168.123.0/24 Flags: D - d...
by mrz
Tue Jan 26, 2021 9:57 am
Forum: RouterOS v7 BETA
Topic: Will Mikrotik v7 support L2MTU for x86?
Replies: 4
Views: 589

Re: Will Mikrotik v7 support L2MTU for x86?

If mpls MTU is set up correctly, then it does not affect VPLS at all.
For vlans on physical interfaces limitation is the same as on physical interface (only router originated non-tcp traffic can have problems )
by mrz
Mon Jan 25, 2021 4:59 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

As it is discussed in many topics in this forum you can use /32 instead of /31. Using /32 instead of /31 will not work only in specific setups.
by mrz
Mon Jan 25, 2021 4:50 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

/31 is not supported and there are no plans to support it.
by mrz
Mon Jan 25, 2021 10:53 am
Forum: RouterOS v7 BETA
Topic: Will Mikrotik v7 support L2MTU for x86?
Replies: 4
Views: 589

Re: Will Mikrotik v7 support L2MTU for x86?

If you increase MTU and, for example, set MPLS MTU to 1504, then there will be no fragmentation for mpls (assuming that forwarded ip packet is 1500bytes). There will not be MTU problems also for forwarded IP packets over the routers since packet size is determined on packet originator. There can be ...
by mrz
Thu Jan 21, 2021 10:17 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 527

Re: using fetch tool on ppp on-up script [SOLVED]

Add a script in system scripts menu
/system script add name=myScript source={ :log info "****** $user Connected"; }

Then set:
on-up=myScript
by mrz
Thu Jan 21, 2021 10:15 am
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

See here how to use routing filters:
https://help.mikrotik.com/docs/display/ ... ingFilters
by mrz
Wed Jan 20, 2021 10:13 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 527

Re: using fetch tool on ppp on-up script [SOLVED]

If a script is executed from PPP on-up, then the user variable will be available.
by mrz
Tue Jan 19, 2021 3:14 pm
Forum: General
Topic: Disable PPP IPCP client-side??
Replies: 1
Views: 170

Re: Disable PPP IPCP client-side??

AFAIK you can't say the client to request only BCP
by mrz
Tue Jan 19, 2021 10:56 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 527

Re: using fetch tool on ppp on-up script [SOLVED]

ppp on-up script has limited permissions.
You need to add a script with "dont-require-permissions" set to yes and execute it from ppp on-up.
by mrz
Mon Jan 18, 2021 10:31 am
Forum: RouterOS v7 BETA
Topic: IP Route In RouterOS V7
Replies: 7
Views: 1612

Re: IP Route In RouterOS V7

Here is explained the difference between v6 and v7 with the example:
https://help.mikrotik.com/docs/display/ ... icyRouting
by mrz
Mon Jan 18, 2021 10:28 am
Forum: Forwarding Protocols
Topic: BGP Advertise specific route only to a specific peer
Replies: 5
Views: 503

Re: BGP Advertise specific route only to a specific peer

You will need to set up routing filters for each peer.
by mrz
Fri Jan 15, 2021 11:15 am
Forum: General
Topic: /31, RFC 3021
Replies: 2
Views: 333

Re: /31, RFC 3021

by mrz
Wed Jan 06, 2021 12:08 pm
Forum: General
Topic: Output chain question
Replies: 9
Views: 571

Re: Output chain question

Typically you use output only if you do not want specific packets originated on the router to be sent out. BTW your listed output rules do nothing but add load on the CPU.
by mrz
Mon Jan 04, 2021 5:47 pm
Forum: Forwarding Protocols
Topic: Filter Spesific OSPF routes?
Replies: 1
Views: 216

Re: Filter Spesific OSPF routes?

set prefix-length=8-32
by mrz
Sat Jan 02, 2021 4:00 pm
Forum: RouterOS v7 BETA
Topic: REST
Replies: 11
Views: 1542

Re: REST

The REST API will be available when we release v7.1beta4.
by mrz
Wed Dec 30, 2020 12:32 pm
Forum: Scripting
Topic: Torch via API
Replies: 2
Views: 285

Re: Torch via API

Solution for what? The second post on that topic states that Torch works.
by mrz
Mon Dec 28, 2020 3:46 pm
Forum: RouterOS v7 BETA
Topic: v6.48 bug.
Replies: 1
Views: 478

Re: v6.48 bug.

by mrz
Tue Dec 22, 2020 5:00 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

Look a few posts above
by mrz
Tue Dec 15, 2020 1:09 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 4566

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

0.0.0.0 is not the same as 0.0.0.0/0
by mrz
Wed Dec 09, 2020 9:18 am
Forum: RouterOS v7 BETA
Topic: OpenVPN Server Clarification needed
Replies: 8
Views: 981

Re: OpenVPN Server Clarification needed

True
by mrz
Tue Dec 08, 2020 8:03 pm
Forum: RouterOS v7 BETA
Topic: OpenVPN Server Clarification needed
Replies: 8
Views: 981

Re: OpenVPN Server Clarification needed

No.
No.
Yes.
Yes.
No.
by mrz
Tue Dec 08, 2020 2:49 pm
Forum: Forwarding Protocols
Topic: BGP Route distinguishers reversed
Replies: 4
Views: 523

Re: BGP Route distinguishers reversed

It is safe to confirm that this problem will be solved in next v6.48beta version.
by mrz
Sat Dec 05, 2020 9:51 pm
Forum: RouterOS v7 BETA
Topic: Problem with bfd export on 7.1beta3
Replies: 1
Views: 580

Re: Problem with bfd export on 7.1beta3

BFD is not yet fully implemented. Export will throw an errors.
by mrz
Fri Dec 04, 2020 5:53 pm
Forum: Scripting
Topic: Fail Variable declaration sintax from manual
Replies: 6
Views: 458

Re: Fail Variable declaration sintax from manual

local variable lives only inside scope, and each command line is in its own scope.
Either put whole script in curly braces or use global variable

and :set $var value does not solve the actual problem either.
by mrz
Thu Dec 03, 2020 8:04 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

One thing i instantly noticed is that /export never terminates. Tried to reset to an empty configuration, same thing. When i run /export verbose the last thing that gets displayed is /radius incoming set accept=no port=3799 and then it hangs forever. Export problem is known, /routing menu export is...
by mrz
Thu Dec 03, 2020 8:01 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 43121

Re: v7.1beta3 [development] is released!

How does the BGP related config migration work? Is this done automatically as part of the upgrade process? Yes it is part of the upgrade process, but keep in mind that routing filters are not converted yet and some of the config might still be missing. So it is recommended to make a backup of ROSv6...
by mrz
Thu Dec 03, 2020 12:34 pm
Forum: Forwarding Protocols
Topic: BGP Manual Refresh
Replies: 2
Views: 310

Re: BGP Manual Refresh

What do you mean by hard refresh. Tear down the session and restart? If so then peer disable/enable.
by mrz
Thu Dec 03, 2020 9:45 am
Forum: Forwarding Protocols
Topic: Disable ECMP on OSPF?
Replies: 7
Views: 540

Re: Disable ECMP on OSPF?

I am not saying ECMP is not asymmetric. Turning off ECMP might be useful but not in the case you are referring. You will not get consistency you are asking for.
by mrz
Wed Dec 02, 2020 1:14 pm
Forum: Scripting
Topic: To retain variable's values after reboot
Replies: 20
Views: 5324

Re: To retain variable's values after reboot

Why in the earth does not the RuterOS retains the global variable after reboot. Can you show any other scripting language or programming language where defined variables magically restores their values from previous script instance, without saving data to file, registry or database? If you want to ...
by mrz
Tue Dec 01, 2020 4:40 pm
Forum: Scripting
Topic: To retain variable's values after reboot
Replies: 20
Views: 5324

Re: To retain variable's values after reboot

Write variables in scheduler startup script is a better option than writing variables in l7 rules and other crazy stuff.
by mrz
Tue Dec 01, 2020 11:10 am
Forum: Forwarding Protocols
Topic: Disable ECMP on OSPF?
Replies: 7
Views: 540

Re: Disable ECMP on OSPF?

You cannot turn it off.
And even if you could in your scenario it will introduce other mentioned problems, like asymmetric routing unpredictably. Only right way that fits your described scenario is to adjust interface costs.
by mrz
Mon Nov 30, 2020 1:37 pm
Forum: RouterOS v7 BETA
Topic: Routing RIP
Replies: 2
Views: 352

Re: Routing RIP

Use CLI for now
by mrz
Fri Nov 27, 2020 5:10 pm
Forum: Forwarding Protocols
Topic: Blackhole
Replies: 3
Views: 373

Re: Blackhole

/routing filter add chain=your_chain prefix=x.x.x.x/32 set-bgp-communities=65535: 666
by mrz
Fri Nov 27, 2020 12:15 pm
Forum: Forwarding Protocols
Topic: Blackhole
Replies: 3
Views: 373

Re: Blackhole

add prefix in BGP networks
and set community in out filter.
by mrz
Thu Nov 26, 2020 4:38 pm
Forum: Forwarding Protocols
Topic: BGP Peer within VRF route advertisement
Replies: 5
Views: 421

Re: BGP Peer within VRF route advertisement

There is no menu to show vpnv4 routes advertised to specific peer.
by mrz
Wed Nov 25, 2020 3:55 pm
Forum: RouterOS v7 BETA
Topic: /import safe-mode (feature request)
Replies: 2
Views: 418

Re: /import safe-mode (feature request)

Enable safe mode and then run import.
by mrz
Sat Nov 21, 2020 9:19 am
Forum: Forwarding Protocols
Topic: BGP Peer within VRF route advertisement
Replies: 5
Views: 421

Re: BGP Peer within VRF route advertisement

advertisements is only for ipvx routes. vpnv4 routres are in vpnv4 menu
by mrz
Tue Nov 17, 2020 9:30 am
Forum: RouterOS v7 BETA
Topic: V7 bgp peer in_filter and out filter config?
Replies: 3
Views: 438

Re: V7 bgp peer in_filter and out filter config?

Then it is not clear what exactly you are unable to find, because there is an example that shows how to specify out filter:
/routing/bgp/template
add name=myAsTemplate as=65500 output.filter=myAsFilter
by mrz
Tue Nov 10, 2020 10:50 am
Forum: General
Topic: find from API
Replies: 2
Views: 157

Re: find from API

Because there is no find in api, use queries:
https://wiki.mikrotik.com/wiki/Manual:API#Queries
by mrz
Mon Nov 09, 2020 10:05 am
Forum: RouterOS v7 BETA
Topic: [REQUEST] IPv6 routing mark
Replies: 2
Views: 2184

Re: [REQUEST] IPv6 routing mark

Already supported in v7beta
by mrz
Fri Nov 06, 2020 6:23 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 3928

Re: ROS 7.0beta5 mark based routing BOOTLOOP

@main is not mandatory, but is useful to know, because v7 allows to resolve gateways in other tables than main
by mrz
Fri Nov 06, 2020 3:53 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 3928

Re: ROS 7.0beta5 mark based routing BOOTLOOP

You should look at the article again, it explains everything: The same example as in the manual with plugged in your table name and gateway /routing table add name=to_WAN1 fib /ip route add dst-address=0.0.0.0/0 gateway=192.168.1.1@main routing-table=to_WAN1 Hope you will figure out how to change va...
by mrz
Thu Nov 05, 2020 12:14 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 3928

Re: ROS 7.0beta5 mark based routing BOOTLOOP

routing-marks can be used the same way as it was in v6, with one difference, you need to add table first in /routing table menu.
This is mentioned in the first sentence:
https://help.mikrotik.com/docs/display/ ... icyRouting
by mrz
Tue Nov 03, 2020 4:24 pm
Forum: Announcements
Topic: v6.46.8 [long-term] is released!
Replies: 38
Views: 13906

Re: v6.46.8 [long-term] is released!

Hey guys. I could be wrong, but it seems that DOH is unavailable on this release. Could you please check this? Thanks. Of course it is not available, in v6.46.x because it was implemented only in v6.47 MAJOR CHANGES IN v6.47: ---------------------- !) dns - added client side support for DNS over HT...
by mrz
Mon Nov 02, 2020 1:12 pm
Forum: RouterOS v7 BETA
Topic: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334
Replies: 9
Views: 4996

Re: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334

You can get received attributes and their values by accessing "options" variable on script event.
Example on how to use script on DHCP event and access variables can be seen here:
https://wiki.mikrotik.com/wiki/Manual:I ... pt_example
by mrz
Mon Nov 02, 2020 1:05 pm
Forum: General
Topic: OpenVPN 2.5.0 Upgrade
Replies: 4
Views: 564

Re: OpenVPN 2.5.0 Upgrade

BF-CBC is not the only cipher that ROS supports, so I do not see any reason why you should not be able to connect to new server with disabled BF.
by mrz
Wed Oct 21, 2020 1:38 pm
Forum: General
Topic: Mikrotik CCR as Console server for cisco ?
Replies: 6
Views: 388

Re: Mikrotik CCR as Console server for cisco ?

I have used to connect from MT router to connect to Cisco serial port. Works fine.
by mrz
Fri Oct 16, 2020 5:05 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 97358

Re: v7.1beta2 [development] is released!

From v7 changelog:
-) Winbox does not show all features, use CLI for most functionality
by mrz
Fri Oct 16, 2020 2:54 pm
Forum: General
Topic: PHP APi Connection
Replies: 15
Views: 704

Re: PHP APi Connection

there is no need to send /login again with md5 hash
by mrz
Fri Oct 16, 2020 2:31 pm
Forum: General
Topic: PHP APi Connection
Replies: 15
Views: 704

Re: PHP APi Connection

as described in the link I provided.

send /login =name= =password= in first message
by mrz
Fri Oct 16, 2020 2:10 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 97358

Re: v7.1beta2 [development] is released!

OVPN over UDP works great for me on CHR I did notice when I try to add a routing mark I cant type any New Routeing Mark , It only have one option and that is to choose main, Probably this will help you to set up routing tables: https://help.mikrotik.com/docs/display/ROS/ROSv7+Basic+Routing+Examples...
by mrz
Fri Oct 16, 2020 2:00 pm
Forum: General
Topic: PHP APi Connection
Replies: 15
Views: 704

Re: PHP APi Connection

https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

see notes in login process post-v6.43
by mrz
Thu Oct 15, 2020 10:40 am
Forum: Forwarding Protocols
Topic: OSPF2 network-type
Replies: 5
Views: 391

Re: OSPF2 network-type

In RouterOS v6 only network type that works without multicast is NBMA.
by mrz
Thu Oct 15, 2020 10:39 am
Forum: Forwarding Protocols
Topic: Default Route forwarding via eBGP
Replies: 4
Views: 383

Re: Default Route forwarding via eBGP

Default route is special case, you will need to enable default-originate on all routers along the path to advertise default route.
by mrz
Tue Oct 13, 2020 3:53 pm
Forum: RouterOS v7 BETA
Topic: how to understand routi9ng in v7
Replies: 7
Views: 1093

Re: how to understand routi9ng in v7

I know my VPN tunnel,s are workjing as i can access the hosts behind then from the ROSv7 device itself fine.. I can ping the hosts from a laptop just no access.. it seems something in this wierd routin g method is causing me issues.. my /ip route i nthe gUI changes all the time.. If ping works and ...
by mrz
Tue Oct 13, 2020 8:13 am
Forum: Forwarding Protocols
Topic: Graceful restart
Replies: 7
Views: 3211

Re: Graceful restart

Yes, in ROSv7.
by mrz
Mon Oct 12, 2020 5:11 pm
Forum: General
Topic: BGP Filter by communities
Replies: 3
Views: 324

Re: BGP Filter by communities

/routing filter
 add  chain=<Your_out_chain> prefix=<your_prefix> set-bgp-communities=174:970
by mrz
Mon Oct 12, 2020 4:25 pm
Forum: General
Topic: BGP Filter by communities
Replies: 3
Views: 324

Re: BGP Filter by communities

According to docs you should be advertising with 174:970 community.
by mrz
Fri Oct 09, 2020 2:29 pm
Forum: General
Topic: ECMP balancing sometimes breaks TCP connection
Replies: 9
Views: 603

Re: ECMP balancing sometimes breaks TCP connection

Don't trust anything written in the forum, wiki has correct answer :))
by mrz
Mon Oct 05, 2020 3:42 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 988

Re: VRF status with RouterOS v7

Since we now have IPv6 VRF support, I do not see the reason why not.
by mrz
Mon Oct 05, 2020 1:46 pm
Forum: Scripting
Topic: Torrent blocking working in y2020
Replies: 20
Views: 6701

Re: Torrent blocking working in y2020

The Torrent system on it's own is not illegal.
Downloading copyrighted content is illegal.
by mrz
Mon Oct 05, 2020 1:31 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 988

Re: VRF status with RouterOS v7

Yes of course, it will be implemented.
by mrz
Mon Oct 05, 2020 1:30 pm
Forum: Forwarding Protocols
Topic: OSPF / PTMP no subnets
Replies: 5
Views: 481

Re: OSPF / PTMP no subnets

You use PtMP on non broadcast networks where hosts in the same L2 network cannot reach each other directly.
by mrz
Thu Oct 01, 2020 1:23 pm
Forum: RouterOS v7 BETA
Topic: fq_codel or cake in v7
Replies: 63
Views: 21081

Re: fq_codel or cake in v7

++1
by mrz
Thu Sep 24, 2020 3:00 pm
Forum: General
Topic: Re-sorting mangle rules order [SOLVED]
Replies: 1
Views: 354

Re: Re-sorting mangle rules order [SOLVED]

From terminal use "move" command
Or winbox drag and drop
by mrz
Wed Sep 23, 2020 3:31 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 57
Views: 15058

Re: IPv6 Routing Mark in Firewall > Mangle Rules

Already supported in v7 beta
by mrz
Tue Sep 22, 2020 12:25 pm
Forum: General
Topic: Ripple20 - Treck stack vulnerabilities
Replies: 6
Views: 1233

Re: Ripple20 - Treck stack vulnerabilities

MT products are safe against Ripple20. And we do not use Treck IP stack anywhere.
by mrz
Mon Sep 21, 2020 6:26 pm
Forum: Scripting
Topic: Export over api differs from export over terminal [SOLVED]
Replies: 5
Views: 550

Re: Export over api differs from export over terminal [SOLVED]

It is not the lib problem. Unfortunately at the moment API behaves like this.
by mrz
Thu Sep 17, 2020 2:38 pm
Forum: Forwarding Protocols
Topic: unable to delete/rename default bgp
Replies: 3
Views: 349

Re: unable to delete/rename default bgp

Items are hard coded if other default configuration might depend on existence of such items.
by mrz
Thu Sep 17, 2020 10:49 am
Forum: Forwarding Protocols
Topic: unable to delete/rename default bgp
Replies: 3
Views: 349

Re: unable to delete/rename default bgp

Default items cannot be renamed or deleted.
If you want your custom instances then add new ones and disable default.
by mrz
Tue Sep 15, 2020 10:00 am
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 97358

Re: v7.1beta2 [development] is released!

What kind of weirdness? Known issue is that ospf route can appear twice in routing table.
by mrz
Mon Sep 14, 2020 4:08 pm
Forum: General
Topic: IPv6, No routing to default gateway possible on my CHR
Replies: 2
Views: 341

Re: IPv6, No routing to default gateway possible on my CHR

Adjust scopes, default route will not be able to recursively resolve the gateway if scopes and target scopes are exactly the same as values of route over which you want to resolve
https://wiki.mikrotik.com/wiki/Manual:I ... hop_lookup
by mrz
Mon Sep 14, 2020 12:00 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 988

Re: VRF status with RouterOS v7

You cannot find those parameters because VPNv4 is not implemented yet.
by mrz
Thu Sep 10, 2020 9:52 am
Forum: RouterOS v7 BETA
Topic: IGMP-Proxy missing in v7.1beta2?
Replies: 2
Views: 545

Re: IGMP-Proxy missing in v7.1beta2?

There is no multicast package, it is now part of system package, however IGMP-Proxy is not available in ROSv7 at the moment.
by mrz
Wed Sep 09, 2020 3:24 pm
Forum: General
Topic: Migration of CA
Replies: 11
Views: 917

Re: Migration of CA

ROS also supports automatic certificate enrolment protocol (check SCEP) so for large amount of clients it can be used.
by mrz
Wed Sep 09, 2020 2:29 pm
Forum: General
Topic: IPv6 routing
Replies: 2
Views: 390

Re: IPv6 routing

You can assign /128 address from /112 subnet on the server and route to to destination using link-local gateways
by mrz
Wed Sep 09, 2020 11:24 am
Forum: Scripting
Topic: dhcpv6-client receive dns name from options
Replies: 7
Views: 606

Re: dhcpv6-client receive dns name from options

In dhcp clients script you can get options variable, which contains array of all received options. So you can extract option 40 with ($options->"40")
by mrz
Mon Sep 07, 2020 2:07 pm
Forum: General
Topic: Migration of CA
Replies: 11
Views: 917

Re: Migration of CA

You cannot load backups between different type of devices, there may be unexpected results.
And even if backup loads, after loading config you will still need to decrypt private keys with passphrase. It is made that way for security reasons.
by mrz
Mon Sep 07, 2020 9:16 am
Forum: Forwarding Protocols
Topic: BGP Blackhole not working
Replies: 4
Views: 1285

Re: BGP Blackhole not working

Winbox already lists only unicast and unreachable for IPv6 routes the same as CLI.
by mrz
Mon Sep 07, 2020 9:14 am
Forum: RouterOS v7 BETA
Topic: Gateway State is "unreachable" in RouterOS 7
Replies: 1
Views: 462

Re: Gateway State is "unreachable" in RouterOS 7

There is no ip/nexthop menu in ROS v7.
Instead you can check forwarding path: /routing/forwarding-path/print
by mrz
Fri Sep 04, 2020 4:34 pm
Forum: General
Topic: New router (CCR2004-1G-12S+2XS) - can't set up LAN
Replies: 12
Views: 867

Re: New router (CCR2004-1G-12S+2XS) - can't set up LAN

It is possible that public IP subnet is actually routed to you over local addresses. But only ISP can give you definite answer.
by mrz
Fri Sep 04, 2020 1:44 pm
Forum: Forwarding Protocols
Topic: BFD Open port on default conf
Replies: 5
Views: 1834

Re: BFD Open port on default conf

You can set raw rules to accept packets from known destinations.
by mrz
Fri Sep 04, 2020 12:57 pm
Forum: RouterOS v7 BETA
Topic: Feature request : Ping check Gateway
Replies: 2
Views: 413

Re: Feature request : Ping check Gateway

You can do this recursively.
viewtopic.php?t=157048
by mrz
Fri Sep 04, 2020 12:00 pm
Forum: General
Topic: Disable ICMP From Outside
Replies: 5
Views: 438

Re: Disable ICMP From Outside

Of course it will drop incoming ICMP packets because you added rule to drop all incoming ICMP packets.
Read the article I provided earlier to at least understand the basics of how to set up firewall rules.
by mrz
Thu Sep 03, 2020 1:11 pm
Forum: General
Topic: Disable ICMP From Outside
Replies: 5
Views: 438

Re: Disable ICMP From Outside

See basic firewall examples in the manual:
https://help.mikrotik.com/docs/display/ ... gtheRouter
by mrz
Tue Sep 01, 2020 11:51 am
Forum: General
Topic: BGP spamming updates
Replies: 5
Views: 561

Re: BGP spamming updates

Since there is not a lot of info provided. I assume you are trying to advertise probably some connected or maybe other IGP routes which are flapping in routing table. My suggestion would be to add prefix that you want to advertise in BGP networks without synchronize, disable all redistribute-xx in b...
by mrz
Mon Aug 31, 2020 3:03 pm
Forum: Forwarding Protocols
Topic: using prefix lists in bgp filters [SOLVED]
Replies: 2
Views: 536

Re: using prefix lists in bgp filters [SOLVED]

Your mentioned Prefix list is used only for RIP. There is no functionality in ROSv6 to specify list of prefixes in one filter rule.

However there is a plan to implement use of address lists in ROSv7
by mrz
Mon Aug 31, 2020 2:42 pm
Forum: RouterOS v7 BETA
Topic: IPv6 Mangle routing-mark?
Replies: 2
Views: 591

Re: IPv6 Mangle routing-mark?

Works as expected, note that routing table should be able to add routes in FIB: [admin@MikroTik] /routing/table> add name=test fib [admin@MikroTik] /routing/table> /ipv6/firewall/mangle [admin@MikroTik] /ipv6/firewall/mangle> add action=mark-routing new-routing-mark=test chain: input [admin@MikroTik...
by mrz
Mon Aug 31, 2020 2:34 pm
Forum: RouterOS v7 BETA
Topic: v7.1 recursive routes
Replies: 3
Views: 1423

Re: v7.1 recursive routes

Adjust scopes correctly.
/ip route
add dst-address=9.9.9.9/32 gateway=192.168.1.1 scope=11 target-scope=10
add gateway=9.9.9.9 target-scope=11
by mrz
Tue Aug 18, 2020 9:39 am
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 4566

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

Now again, look at this line from the manual (character by character)
/ip route add dst-address=8.8.8.8 gateway=172.16.1.1@main routing-table=myTable
And compare to what you are trying to set

Hint (again from the manual):
(as per user requests v7.0beta9 adds back 'routing-table' parameter)
by mrz
Mon Aug 17, 2020 10:58 am
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 4566

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

!!!!!!
/routing table add name=IRT-TEST fib
!!!!!
by mrz
Mon Aug 17, 2020 10:57 am
Forum: Forwarding Protocols
Topic: BGP - Convert origin ‘egp’ to ‘igp’ [SOLVED]
Replies: 3
Views: 837

Re: BGP - Convert origin ‘egp’ to ‘igp’ [SOLVED]

In ROSv6 it is not possible, but v7 has some new filter features including origin change.
by mrz
Mon Aug 17, 2020 10:55 am
Forum: Forwarding Protocols
Topic: Only one route active with 3 BGP peers [SOLVED]
Replies: 1
Views: 518

Re: Only one route active with 3 BGP peers [SOLVED]

Because BGP is designed to use only one best path by default.
by mrz
Thu Aug 13, 2020 9:48 am
Forum: Scripting
Topic: Problems when parsing routing table and prefixes change
Replies: 1
Views: 438

Re: Problems when parsing routing table and prefixes change

Find returns array of route ids that were matched by criteria (this can take some time if table is large) Foreach then goes through returned array which also takes time if array is very large. And if routing table changed after find returned the result you may get unexpected results. If route was re...
by mrz
Wed Aug 12, 2020 11:16 am
Forum: Scripting
Topic: Python API doesn't connect
Replies: 2
Views: 672

Re: Python API doesn't connect

If port is open, check this working Python client:
https://wiki.mikrotik.com/wiki/Manual:API_Python3
by mrz
Thu Aug 06, 2020 10:28 am
Forum: Scripting
Topic: help getting id in python api
Replies: 3
Views: 1201

Re: help getting id in python api

NatRule.get(comment=RDP')[0]["id"]
by mrz
Mon Aug 03, 2020 10:01 am
Forum: Scripting
Topic: API Links
Replies: 138
Views: 110634

Re: API Links

API does not support such feature. You can only use queries to filter returned items by specific criteria, but no paging.
by mrz
Fri Jul 31, 2020 9:11 am
Forum: General
Topic: something wrong on the wiki
Replies: 6
Views: 1404

Re: something wrong on the wiki

Yes should be correct,
by mrz
Fri Jul 31, 2020 9:09 am
Forum: RouterOS v7 BETA
Topic: CCR and RouterOS V7.1. BGP very slowly.
Replies: 3
Views: 1536

Re: CCR and RouterOS V7.1. BGP very slowly.

Please contact support, we will investigate why it is so slow on your router.
by mrz
Thu Jul 30, 2020 5:17 pm
Forum: Forwarding Protocols
Topic: VRF Interface Limit
Replies: 14
Views: 3958

Re: VRF Interface Limit

Not really but almost. Total amount of tables is limited to 65k (this is including policy routing tables and vrfs in total).
by mrz
Thu Jul 30, 2020 4:39 pm
Forum: General
Topic: something wrong on the wiki
Replies: 6
Views: 1404

Re: something wrong on the wiki

192.168.0.0/16 was added by mistake.
Also fixed title form IPv4 to Ipv6.
by mrz
Thu Jul 30, 2020 8:59 am
Forum: Forwarding Protocols
Topic: VRF Interface Limit
Replies: 14
Views: 3958

Re: VRF Interface Limit

v7beta does not have this limit.
by mrz
Tue Jul 28, 2020 1:59 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1887

Re: winbox interface too small

No, session is saved, next time you connect to the router zoom is restored from saved session.
by mrz
Tue Jul 28, 2020 1:57 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1887

Re: winbox interface too small

Settings->Zoom-in
by mrz
Mon Jul 27, 2020 2:09 pm
Forum: RouterOS v7 BETA
Topic: /ip/route/check command disappeared?
Replies: 5
Views: 1900

Re: /ip/route/check command disappeared?

You can get route that resolves specified destination: /ip route print detail where x.x.x.x in dst-address and active DAd dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=10.155.101.1 immediate-gw=10.155.101.1%bridge type=unicast distance=1 scope=30 target-scope=10 From there y...
by mrz
Mon Jul 27, 2020 12:33 pm
Forum: RouterOS v7 BETA
Topic: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]
Replies: 4
Views: 1514

Re: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]

You are asking to add feature for v6 in v7beta forum? :D

An to answer the question, no v6 will not have ipv6 policy routing support.
by mrz
Mon Jul 27, 2020 11:08 am
Forum: RouterOS v7 BETA
Topic: BGP inside VRFs
Replies: 4
Views: 1821

Re: BGP inside VRFs

Yes, at the moment BGP in VRF does not work, we will try to make it work until next beta release.
by mrz
Mon Jul 27, 2020 10:34 am
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3034

Re: ROSv7b8 and RPKI

Hello, Which RFC you are referring to? If you mean something like this: https://rpki.readthedocs.io/en/latest/about/faq.html#what-if-the-rpki-system-becomes-unavailable-or-some-other-catastrophe-occurs-will-my-signed-prefixes-become-unreachable-to-others-will-other-prefixes-my-routers-learned-over-b...
by mrz
Mon Jul 27, 2020 10:06 am
Forum: Virtualization
Topic: MetaRouter removed ???
Replies: 1
Views: 849

Re: MetaRouter removed ???

Metarouter is supported only on single core mips devices.
by mrz
Mon Jul 27, 2020 10:02 am
Forum: Scripting
Topic: Loop through submenus [SOLVED]
Replies: 3
Views: 1112

Re: Loop through submenus [SOLVED]

No, you cannot use variable values as menu names or parameter/variable names.

One workaround is to use :parse
by mrz
Mon Jul 27, 2020 9:59 am
Forum: RouterOS v7 BETA
Topic: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]
Replies: 4
Views: 1514

Re: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]

How to use routing rules in v7 is described here:
https://help.mikrotik.com/docs/display/ ... icyRouting

Rules work for both ipv4 and ipv6.
by mrz
Mon Jul 27, 2020 9:58 am
Forum: RouterOS v7 BETA
Topic: /ip/route/check command disappeared?
Replies: 5
Views: 1900

Re: /ip/route/check command disappeared?

Check is not implemented in ROS v7.
What does check give you that "/routing route print" does not?
by mrz
Thu Jul 23, 2020 5:15 pm
Forum: RouterOS v7 BETA
Topic: OSPF routes marked invalid
Replies: 8
Views: 2182

Re: OSPF routes marked invalid

FYI problem is only on P2P interfaces (not ospf interface type but actual P2P interfaces like l2tp etc. )
We will fix the problem as soon as possible.
by mrz
Wed Jul 22, 2020 4:51 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 43534

Re: v7.1beta1 [development] is released!

Show output of
/routing/route/print detail
by mrz
Wed Jul 22, 2020 3:00 pm
Forum: RouterOS v7 BETA
Topic: OSPF routes marked invalid
Replies: 8
Views: 2182

Re: OSPF routes marked invalid

Does it start to work if you change interface type from point-to-point to broadcast?
by mrz
Wed Jul 22, 2020 12:40 pm
Forum: General
Topic: Slow ovpn cpu 100%
Replies: 5
Views: 1019

Re: Slow ovpn cpu 100%

Single core on ARMs (CCR2004 or RB4011) has a bit better single core performance, but do not expect magic. You will still not be able to do 600 / 600Mbs over OVPN.
by mrz
Wed Jul 22, 2020 10:58 am
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 43534

Re: v7.1beta1 [development] is released!

CRS317 supports up to 4096 NAT entries. To clarify it is not about how many rules you have, but how many connections can be offloaded.
by mrz
Wed Jul 22, 2020 10:34 am
Forum: General
Topic: Slow ovpn cpu 100%
Replies: 5
Views: 1019

Re: Slow ovpn cpu 100%

One CCR core can encrypt/decrypt ~150Mbps, one tunnel is tied to one core, so it sounds about right.

If you want faster tunnel use ipsec which can use HW acceleration.
by mrz
Wed Jul 22, 2020 10:01 am
Forum: RouterOS v7 BETA
Topic: Enable BGP on ROSv7
Replies: 14
Views: 4856

Re: Enable BGP on ROSv7

Be more specific what exactly is not working.
by mrz
Wed Jul 22, 2020 9:41 am
Forum: RouterOS v7 BETA
Topic: IPv6 BGP routes unreachable [SOLVED]
Replies: 4
Views: 2073

Re: IPv6 BGP routes unreachable [SOLVED]

Please contact support. Add supout file and packet dump to see what exactly that edge router is sending.
by mrz
Tue Jul 21, 2020 9:48 am
Forum: Forwarding Protocols
Topic: Balanced ECMP on IPv6
Replies: 3
Views: 1250

Re: Balanced ECMP on IPv6

RouterOS v6 does not support IPv6 ECMP.

This feature is implemented in ROS v7 beta.
by mrz
Mon Jul 20, 2020 12:48 pm
Forum: RouterOS v7 BETA
Topic: CRS317 routing speed with pppoe and L3 offloading
Replies: 6
Views: 1662

Re: CRS317 routing speed with pppoe and L3 offloading

BTW CRS317 CPU has enough power to handle 1Gbps PPPOE traffic, probably on the edge but should handle it.
by mrz
Mon Jul 20, 2020 10:23 am
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

in routing filter the is a bug! i created two chain: in-v4 and out-v4 Going in templates, the two chain are allowed to be chossen by input.filter but not by out put filter [admin@test-100G] /routing/bgp/template> set 0 input.filter= in-v4 out-v4 Output requires selection rules: /routing filter rule...
by mrz
Mon Jul 20, 2020 10:12 am
Forum: RouterOS v7 BETA
Topic: CRS317 routing speed with pppoe and L3 offloading
Replies: 6
Views: 1662

Re: CRS317 routing speed with pppoe and L3 offloading

L3 offload will not work with pppoe.
by mrz
Tue Jul 14, 2020 2:26 pm
Forum: General
Topic: CHR + AWS + IPv6
Replies: 16
Views: 3253

Re: CHR + AWS + IPv6

fe80::430:xxxxxxxxxx%ether1-WAN is link local address and it should be reachable unless blocked by service provider.
You can always disable "add-default-route" in dhcp settings and add static one.
by mrz
Mon Jul 13, 2020 9:51 am
Forum: RouterOS v7 BETA
Topic: OSPF problems
Replies: 4
Views: 2292

Re: OSPF problems

Please contact support with attached supout files. And at the moment do not use winbox for any tasks related to routing protocols.
by mrz
Mon Jul 13, 2020 9:49 am
Forum: RouterOS v7 BETA
Topic: Can’t recursive gateway using pppoe client
Replies: 1
Views: 757

Re: Can’t recursive gateway using pppoe client

If you specify interface as gateway then these routes cannot be used to resolve recursively.
by mrz
Wed Jul 08, 2020 1:52 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

Hi there, Just wondering if anyone is successfully using BFD as a gateway check on a static route? I am assuming this can be configured as a standalone option (as in, does not require BGP or other protocols as well) but packet captures show no BFD packets are sent (RB1100). Packet captures shows BF...
by mrz
Tue Jul 07, 2020 11:06 am
Forum: Forwarding Protocols
Topic: Mikrotik L2TPV3
Replies: 11
Views: 6485

Re: Mikrotik L2TPV3

Could you please tell me - are there any plans for implementing of any other multi-vendor EOIP capable technology? i.e. vxlan/gretap
VXLAN is already supported in ROSv7
by mrz
Tue Jun 30, 2020 3:47 pm
Forum: Forwarding Protocols
Topic: BGP Ram useage?
Replies: 3
Views: 846

Re: BGP Ram useage?

1Million routes can easily fit in 256MB of RAM, so what you have told is not true. Not to mention that SD card cannot be used to extend RAM.
by mrz
Tue Jun 30, 2020 3:44 pm
Forum: Beginner Basics
Topic: fw does not drop winbox mac-telnet [SOLVED]
Replies: 8
Views: 1583

Re: fw does not drop winbox mac-telnet [SOLVED]

See packet flow diagram
https://wiki.mikrotik.com/wiki/Manual:Packet_Flow

mac telnet is not layer3 connection, so from in-interface it goes directly to local-in
by mrz
Tue Jun 30, 2020 10:00 am
Forum: Beginner Basics
Topic: DHCP relay
Replies: 5
Views: 1015

Re: DHCP relay

RFC already describes scenario when it should be used: "Relay Agent Information option is inserted by the DHCP relay agent when forwarding client-originated DHCP packets to a DHCP server. Servers recognizing the Relay Agent Information option may use the information to implement IP address or o...
by mrz
Mon Jun 29, 2020 4:24 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

It would be like asking MikroTik to make QUIC available. It is already available. Well, RouterOS can be client as well, so for example fetch command could benefit. It's not a big win there, though. It's probably not only the RouterOS traffic alone that would benefit from MPTCP. If one uses a WAN up...
by mrz
Mon Jun 29, 2020 2:50 pm
Forum: Beginner Basics
Topic: DHCP relay
Replies: 5
Views: 1015

Re: DHCP relay

by mrz
Fri Jun 26, 2020 12:14 pm
Forum: General
Topic: Multiple Road Warrior L2TP/IPsec clients behind NAT - solved
Replies: 73
Views: 38475

Re: Multiple Road Warrior L2TP/IPsec clients behind NAT - solved

Post ipsec policies and installed SAs from version where it works and from version where it does not. Multiple l2tp/ipsec connections behind one NAT router will work if at least one of the following conditions apply: *) each client gets NATed behind unique public IP address; *) each client uses uniq...
by mrz
Fri Jun 19, 2020 1:53 pm
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3034

Re: ROSv7b8 and RPKI

I can confirm the problem, we are looking into it.
by mrz
Thu Jun 18, 2020 10:08 am
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3034

Re: ROSv7b8 and RPKI

@schadom What was your setup? Which validator were you using? With all of the cries out on the forums for RPKI, I find it hard to believe that we are the only two people to have tested this? Post the rules that is not working. Did you run through verify rule with (rpki-verify=xxx) before trying to ...
by mrz
Tue Jun 16, 2020 12:52 pm
Forum: RouterOS v7 BETA
Topic: Mark Routing & IP Route in v7.0beta8
Replies: 4
Views: 1616

Re: Mark Routing & IP Route in v7.0beta8

@pe1chl In that example replace this: /routing rule add dst-address=8.8.8.8 action=lookup-only-in-table table=myTable with this (the same rule as you would use in ROSv6): /ip firewall mangle add chain=prerouting dst-address=8.8.8.8 action=mark-routing new-routing-mark=myTable As stated in the manual...
by mrz
Mon Jun 15, 2020 1:11 pm
Forum: Scripting
Topic: Script for If enivorment = then do
Replies: 14
Views: 2408

Re: Script for If enivorment = then do

Variable name contains arithmetic character. I would suggest to avoid creating such variable names, but if you still do then remember that such names must be always in double quotes, like in this example:
:global "not-good-var-name" "x"
:put $"not-good-var-name"
by mrz
Fri Jun 12, 2020 9:05 am
Forum: Forwarding Protocols
Topic: OSPF issue
Replies: 1
Views: 572

Re: OSPF issue

You have to adjust interface costs on all links along available path.
by mrz
Fri Jun 12, 2020 9:03 am
Forum: Forwarding Protocols
Topic: MPLS forwarding table issue
Replies: 2
Views: 777

Re: MPLS forwarding table issue

ECMP is not supported, MPLS will use only one path
by mrz
Wed Jun 10, 2020 8:31 am
Forum: Forwarding Protocols
Topic: [SOLVED] BGP Route Filters match-chain not working
Replies: 5
Views: 1431

Re: BGP Route Filters match-chain not working

chain returns true only if action=accept. If you set action discard in match chain it will never return true, Discard in this case means discard prefix from match chain. To translate your rules: * chain ASTEROID-IN-v4 gets prefix with AS 6939 * rule nr.2 sends pefix to be matched in DISCARD-UNWANTED...
by mrz
Tue Jun 09, 2020 2:02 pm
Forum: Forwarding Protocols
Topic: [SOLVED] BGP Route Filters match-chain not working
Replies: 5
Views: 1431

Re: BGP Route Filters match-chain not working

@alex
it does not work that way. match-chain is the name of the chain which is used to evaluate the route. If the chain accepts the route, 'match-chain' property produces a true match
by mrz
Tue Jun 09, 2020 8:42 am
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4041

Re: ROSv7 documentation/ config guides

and if you added the network to advertise to the networks list as passive you would get a regular type 2 or 3 LSA V7 is the same, if you add network it is advertised as type2 or 3 LSA Passive and authentication parameters are there but not working at te moment, so it will not be a step back. BTW we...
by mrz
Mon Jun 08, 2020 4:36 pm
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4041

Re: ROSv7 documentation/ config guides

Some basic stuff to start with ROSv7 routing config:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Sat Jun 06, 2020 6:32 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

IP Acccounting is deprecated and removed from ROS v7. What do I use then to get traffic data from each client that I do use in Splunk for MikroTik? SNMP is not an option. Script will then fail 100% if some do an upgrade to 7.x, since on-error seem to not handle this situation. . On-error catches on...
by mrz
Fri Jun 05, 2020 10:59 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

IP Acccounting is deprecated and removed from ROS v7.
by mrz
Fri Jun 05, 2020 9:11 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

Where is CAKE?!?!?!?

Literally everyone expects it, yet there's nothing about it from mikrotik..

Kind of pathetic on their part tbh.
You can find cakes here:
https://majaskukas.lv/
Even trendy gluten free ones, which probably you like the most.
by mrz
Fri Jun 05, 2020 9:03 pm
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4041

Re: ROSv7 documentation/ config guides

There is no equivalent. If you did not specify output filter chain in the templae, then all routes from the routing table is being advertised.
If you specify output chain then by default chain blocks everything. You need to configure filters to accept prefixes you want to advertise from routing table.
by mrz
Fri Jun 05, 2020 1:43 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

Those parameters are subject to change, so no manual for now.
by mrz
Fri Jun 05, 2020 12:28 am
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4041

Re: ROSv7 documentation/ config guides

At the moment there is none because configuration can and probably will change.

What exactly you were not able to set up?
by mrz
Thu Jun 04, 2020 5:28 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

@pe1chl this message typically will appear when there is no local address set or not piicked automatically.
by mrz
Thu Jun 04, 2020 5:22 pm
Forum: RouterBOARD hardware
Topic: ARP TABLE ENTY FROM AN INTERFACE DISABLED
Replies: 1
Views: 583

Re: ARP TABLE ENTY FROM AN INTERFACE DISABLED

That is static entry that you have added. If you dont like it remove it.
by mrz
Thu Jun 04, 2020 5:05 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69161

Re: v7.0beta8 [development] is released!

IPv6 works a lot better in v7, ipv6 policy routing and ECMP coming soon
by mrz
Thu Jun 04, 2020 5:00 pm
Forum: General
Topic: RPKI
Replies: 48
Views: 14807

Re: RPKI

Yes,
RouterOS implements RTR client. You connect to the server which will send route validity information.
This informaton can be used to validate routes in route filters against group with "rpki-validate".
ANd then further in filters "match-rpki" can be used to match exact state.
by mrz
Thu Jun 04, 2020 4:49 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 4566

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

/routing table add name=IRT-TEST fib /ip route add dst-address=0.0.0.0/0@IRT-TEST gateway=10.10.54.161@main check-gateway=ping distance=10 add check-gateway=ping distance=10 dst-address=1.1.1.1/32 gateway=10.10.54.145 /routing rule add dst-address=8.8.8.8 action=lookup table=IRT-TEST firewall the s...
by mrz
Thu Jun 04, 2020 3:47 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 4566

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

First add table in /routing table menu

THen you can add routing rules in /routing rule menu

and routes in specific table
/ip route add dst-address=x.x.x.x@table gateway=y.y.y.y@main
by mrz
Fri May 29, 2020 9:28 am
Forum: General
Topic: API for C#
Replies: 3
Views: 885

Re: API for C#

In the same topic look at "Class with SSL support", it has new authentication method.
by mrz
Mon May 18, 2020 10:04 am
Forum: RouterOS v7 BETA
Topic: beta5: Is this an error in the script parser? [SOLVED]
Replies: 2
Views: 1547

Re: beta5: Is this an error in the script parser? [SOLVED]

First you are trying to use undeclared variable gArr Then you are declaring global variable with the same name in 'if' scope. I assume that you want to access already existing global variable and if it does not exist or is empty then add first entry, in that case script should look something like th...
by mrz
Wed May 13, 2020 8:04 pm
Forum: RouterOS v7 BETA
Topic: beta5: script parser error [SOLVED]
Replies: 2
Views: 1446

Re: beta5: script parser error [SOLVED]

It is not related to beta version and as far as I know never supposed to work. What you are doing in script is run first loop which returns internal id (for example *1 for ether1) In next loop you are trying to find IP address with interface equal to "*1", obviously it will fail because th...
by mrz
Mon Apr 27, 2020 10:14 am
Forum: Forwarding Protocols
Topic: OSPF disabling all ports on 'state change from Full to Down'
Replies: 12
Views: 4263

Re: OSPF disabling all ports on 'state change from Full to Down'

CCR does not work correctly with half duplex links, it is hardware limitation. For interface not to hang completely it is occasionally flapped. Regarding RB3011, if switch group is overloaded it will reset the switch group One workaround is: /interface ethernet switch set switch1,switch2 cpu-flow-co...
by mrz
Tue Apr 21, 2020 1:33 pm
Forum: RouterOS v7 BETA
Topic: FEATURE REQUEST: Add Basic Firewall Rule Wizard
Replies: 71
Views: 15057

Re: FEATURE REQUEST: Add Basic Firewall Rule Wizard

Very similar to default config is described in first time configuration
https://help.mikrotik.com/docs/display/ ... gtheRouter
"ProtectingtheRouter" and "ProtectingtheClient" sections
by mrz
Wed Apr 15, 2020 1:12 pm
Forum: Forwarding Protocols
Topic: Problems with MPLS IPv4 VPN
Replies: 70
Views: 25209

Re: Problems with MPLS IPv4 VPN

Regarding Issue1:
RDs should be unique, so this is not a RouterOS bug, but misconfiguration.

Regarding Issue2:
Yes we are aware of route selection problems in VRFs, unfortunately you will have to wait for ROS v7 updates.
by mrz
Wed Apr 15, 2020 8:44 am
Forum: RouterOS v7 BETA
Topic: Question: Multi-thread BGP
Replies: 9
Views: 3834

Re: Question: Multi-thread BGP

Load distribution between cores can be done without multithreading.
https://www.youtube.com/watch?v=NbfKplzda7I
by mrz
Tue Apr 14, 2020 6:07 pm
Forum: RouterOS v7 BETA
Topic: Question: Multi-thread BGP
Replies: 9
Views: 3834

Re: Question: Multi-thread BGP

All I can say is tht it will not be multithreaded. AFAIK none of currently existing implementations are fully multithreaded.
by mrz
Tue Apr 14, 2020 6:03 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: BGPQ3 Automated Routing Policies
Replies: 2
Views: 1855

Re: Feature Request: BGPQ3 Automated Routing Policies

You should ask BGPQ3 devs not MT.
by mrz
Tue Apr 14, 2020 11:29 am
Forum: RouterOS v7 BETA
Topic: Cannot set routing-mark or table for routing rule
Replies: 11
Views: 9098

Re: Cannot set routing-mark or table for routing rule

Yes, routing marks do not work at the moment.
by mrz
Tue Apr 14, 2020 9:34 am
Forum: RouterOS v7 BETA
Topic: mangle and routing-mark can not work for RouterOS v7
Replies: 9
Views: 3672

Re: mangle and routing-mark can not work for RouterOS v7

THere are several problems with routing marks in beta5. Wait until beta6 is released.
by mrz
Thu Apr 09, 2020 3:03 pm
Forum: General
Topic: RB133 Slow internet speed test
Replies: 3
Views: 1633

Re: RB133 Slow internet speed test

mipsle support is dropped (last fully supported version 6.32.3 and 6.32.4)
by mrz
Thu Apr 09, 2020 12:07 pm
Forum: RouterOS v7 BETA
Topic: V7 Routing Protocols Option [SOLVED]
Replies: 3
Views: 4001

Re: V7 Routing Protocols Option [SOLVED]

no, it is in-house development.
by mrz
Thu Apr 09, 2020 11:28 am
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 8261

Re: Feature Request - BGP RPKI

Currently work in progress
by mrz
Thu Apr 09, 2020 11:28 am
Forum: RouterOS v7 BETA
Topic: V7 Routing Protocols Option [SOLVED]
Replies: 3
Views: 4001

Re: V7 Routing Protocols Option [SOLVED]

RouterOS is not using quagga and will not use FRR
by mrz
Thu Apr 09, 2020 11:25 am
Forum: Forwarding Protocols
Topic: How to redistribute OSPF Metric to BGP Local Pref.
Replies: 1
Views: 1718

Re: How to redistribute OSPF Metric to BGP Local Pref.

RouterOS v6 does not have such functionality.
by mrz
Wed Apr 01, 2020 12:10 pm
Forum: Forwarding Protocols
Topic: OSPF disabling all ports on 'state change from Full to Down'
Replies: 12
Views: 4263

Re: OSPF disabling all ports on 'state change from Full to Down'

OSPF goes down because physical links are flapping, it can be seen in your logs. Logs are written asynchronously, so when difference between events are in milliseconds interface flap may appear after OSPF message.
by mrz
Wed Apr 01, 2020 9:34 am
Forum: General
Topic: Correction request : Authority flag for Import CA Certificate Autority in RouterOS
Replies: 11
Views: 3421

Re: Correction request : Authority flag for Import CA Certificate Autority in RouterOS

This certificate have "Authority" flag and was show in WebFig under Certificate > Sign menu as CA and you can use to TRY to sign certificate, but you CANNOT sign another certificate because there is NOT the private key. There is specific flag that indicates whether private key is imported...
by mrz
Fri Mar 27, 2020 9:35 am
Forum: Forwarding Protocols
Topic: Loopback as MPLS Interface [SOLVED]
Replies: 2
Views: 3390

Re: Loopback as MPLS Interface [SOLVED]

MPLS interface entries are required to correctly determine MPLS MTU on interfaces participating in MPLS packet forwarding. Without these entries MPLS will not work properly, I would suggest to leave default "all" enabled.
by mrz
Thu Mar 26, 2020 9:08 am
Forum: RouterOS v7 BETA
Topic: FEATURE REQUEST: Add Basic Firewall Rule Wizard
Replies: 71
Views: 15057

Re: FEATURE REQUEST: Add Basic Firewall Rule Wizard

That is why we have quickset where you can disableenable default firewall ruleset or default NAT rules.
by mrz
Wed Mar 25, 2020 7:52 am
Forum: Forwarding Protocols
Topic: OSPF loses default-route with virtual-link
Replies: 2
Views: 1619

Re: OSPF loses default-route with virtual-link

default route over virtual link does not work in v6. This problem is fixed in ROSv7.
by mrz
Fri Mar 20, 2020 10:37 am
Forum: Scripting
Topic: PHP API Login Method Example [Help Please] [SOLVED]
Replies: 13
Views: 6072

Re: PHP API Login Method Example [SOLVED]

I do not know anything about php api, but shouldn't it be like this?
$this->write('/login', false);
$this->write('=name=' . $login, false); 
$this->write('=password=' . $password);
by mrz
Fri Mar 20, 2020 10:17 am
Forum: Scripting
Topic: PHP API Login Method Example [Help Please] [SOLVED]
Replies: 13
Views: 6072

Re: PHP API Login Method Example [SOLVED]

send in initial login message
/login
=name=user
=password=xxx
by mrz
Mon Mar 16, 2020 4:19 pm
Forum: General
Topic: Feature requests
Replies: 1302
Views: 311952

Re: Feature requests

Thanks, If you find anything else strange with history report to support.
by mrz
Wed Mar 11, 2020 12:38 pm
Forum: General
Topic: How to raise "upgradeable to"?
Replies: 26
Views: 5925

Re: How to raise "upgradeable to"?

See the date of original post. A lot has changed since then. mipsle devices are deprecated.
by mrz
Wed Mar 11, 2020 11:34 am
Forum: RouterBOARD hardware
Topic: CRS354-48P-4S+2Q+ and orther
Replies: 8
Views: 5534

Re: CRS354-48P-4S+2Q+ and orther

Power supply to power 48 POE ports is huge. Physically there is no space to put second PSU.
by mrz
Tue Mar 10, 2020 10:43 am
Forum: Forwarding Protocols
Topic: Where is igmp-proxy?
Replies: 1
Views: 2090

Re: Where is igmp-proxy?

install multicast package.
by mrz
Thu Mar 05, 2020 2:20 pm
Forum: General
Topic: ip-sec between MikroTik and Cisco ASA not passing traffic
Replies: 23
Views: 4857

Re: ip-sec between MikroTik and Cisco ASA not passing traffic

By looking at installed SA counters my guess is that RouterOS matches packets against policy properly, encapsulates and sends them to remote peer.
Either remote peer is dropping incoming packets or does not send a reply.
by mrz
Thu Mar 05, 2020 12:18 pm
Forum: General
Topic: ip-sec between MikroTik and Cisco ASA not passing traffic
Replies: 23
Views: 4857

Re: ip-sec between MikroTik and Cisco ASA not passing traffic

Do you have any fasttrack rules or other routing tables than main?
by mrz
Tue Mar 03, 2020 6:05 pm
Forum: Beginner Basics
Topic: Default firewall rules and connecting using PPPoE
Replies: 5
Views: 2364

Re: Default firewall rules and connecting using PPPoE

No, default firewall rules won't protect if a new pppoe WAN interface is added afterwards.
This is false information. Default configuration for quite some blocks access on interfaces that are not in either LAN or WAN interface lists.
by mrz
Tue Mar 03, 2020 6:03 pm
Forum: Forwarding Protocols
Topic: OSPF Drops when adding a comment?
Replies: 13
Views: 4305

Re: OSPF Drops when adding a comment?

Changing comments on interface and address does not trigger any reconnects.
You know how it goes, if you have encountered a problem on specific interfaces then contact support with request to fix it.
by mrz
Tue Mar 03, 2020 3:34 pm
Forum: General
Topic: DHCPv6 DUID change - bug?
Replies: 15
Views: 6022

Re: DHCPv6 DUID change - bug?

RFC states: The DUID is designed to be unique across all DHCP clients and servers, and stable for any specific client or server - that is, the DUID used by a client or server SHOULD NOT change over time if at all possible; for example, a device's DUID should not change as a result of a change in the...
by mrz
Tue Mar 03, 2020 3:15 pm
Forum: Forwarding Protocols
Topic: OSPF Drops when adding a comment?
Replies: 13
Views: 4305

Re: OSPF Drops when adding a comment?

No it is specific to protocols. For example BGP in v7 will have parameters that will not reset connection.
OSPF should also have parameters that will not reset adjacencies.
by mrz
Tue Mar 03, 2020 12:00 pm
Forum: Forwarding Protocols
Topic: OSPF Drops when adding a comment?
Replies: 13
Views: 4305

Re: OSPF Drops when adding a comment?

BTW OSPF in v7beta is already implemented, so if you have any complains or suggestions about v7 OSPF feel free to send them to support while it is in beta state.
by mrz
Tue Mar 03, 2020 11:42 am
Forum: General
Topic: TTL expires in transit.
Replies: 2
Views: 1429

Re: TTL expires in transit.

You have a routing loop somewhere. Run traceroute to see where.
by mrz
Mon Mar 02, 2020 2:12 pm
Forum: General
Topic: ProtonVPN on Mikrotik
Replies: 56
Views: 14098

Re: ProtonVPN on Mikrotik

SHA512 is not supported and UDP is supported only in ROS v7
by mrz
Mon Mar 02, 2020 1:23 pm
Forum: General
Topic: ProtonVPN on Mikrotik
Replies: 56
Views: 14098

Re: ProtonVPN on Mikrotik

Unfortunately, Mikrotik routers do not support OpenVPN client connection, therefore, it is not possible to set up a ProtonVPN connection on it. We're sorry for the inconveniences.
BTW OVPN is also supported, maybe they require some specific OVPN feature?
by mrz
Mon Mar 02, 2020 12:26 pm
Forum: General
Topic: ProtonVPN on Mikrotik
Replies: 56
Views: 14098

Re: ProtonVPN on Mikrotik

By looking at this example:
https://protonvpn.com/support/linux-ikev2-protonvpn/

it is very similar to nordvpn config, so you can use NordVPN RouterOS setup example as a reference:
https://wiki.mikrotik.com/wiki/IKEv2_EA ... d_RouterOS
by mrz
Mon Mar 02, 2020 11:57 am
Forum: Forwarding Protocols
Topic: BGP VPN4 Issues
Replies: 1
Views: 2107

Re: BGP VPN4 Issues

You need either fullmesh (all peers connected to each other) or set for example R2 as route reflector.
by mrz
Fri Feb 28, 2020 11:57 am
Forum: RouterOS v7 BETA
Topic: 7beta5 Bricked my HAPAC2
Replies: 2
Views: 3094

Re: 7beta5 Bricked my HAPAC2

How old was bootloader? Very old bootloader will not work with v7. Try to load backup booter and then reinstall with netinstall.
by mrz
Fri Feb 21, 2020 11:39 am
Forum: RouterOS v7 BETA
Topic: Feature request: RPKI integration/validation
Replies: 1
Views: 2065

Re: Feature request: RPKI integration/validation

Use search, there are already several topics about RPKI.
In short, we are working on it.
by mrz
Thu Feb 20, 2020 2:36 pm
Forum: Forwarding Protocols
Topic: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network
Replies: 4
Views: 2288

Re: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network

Yes, confederations are used to migrate to new AS while still keeping the old AS during migration process. In terms of setup you just need to specify "confederation-as" and "confederation-peers" in BGP instance configuration.
by mrz
Thu Feb 20, 2020 1:59 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 91
Views: 24996

Re: Feature Request: IPSEC Improvements

That would require to store large CA database on the router.
by mrz
Thu Feb 20, 2020 10:21 am
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 91
Views: 24996

Re: Feature Request: IPSEC Improvements

It works if you do not use IP unnumbered (at least on Cisco)
by mrz
Wed Feb 19, 2020 4:40 pm
Forum: General
Topic: IKEv2 IPsec VPN and IPv6
Replies: 7
Views: 3376

Re: IKEv2 IPsec VPN and IPv6

But in my case it would be connections made FROM various IPv4 devices (PCs and phones) TO a router that sits behind a NATTED IPv4 and only has public IPv6 visible to the internet... Don't know how that would work (I remember reading that the new IP CLOUD already has IPv6 support, so maybe it could ...
by mrz
Thu Feb 13, 2020 12:33 pm
Forum: Scripting
Topic: API for Disabled Users
Replies: 1
Views: 1639

Re: API for Disabled Users

receive all disabled hotspot users via API query and count them in your app.
by mrz
Mon Feb 10, 2020 11:22 am
Forum: Scripting
Topic: logs mikrotik CGNAT NETMAP
Replies: 1
Views: 2223

Re: logs mikrotik CGNAT NETMAP

Set log=yes for that NAT rule and set up logging in /system logging menu to send all firewall logs to remote syslog server.
by mrz
Mon Feb 10, 2020 11:06 am
Forum: Forwarding Protocols
Topic: Selective filtering of BGP routes distributed into OSPF not working?
Replies: 2
Views: 1888

Re: Selective filtering of BGP routes distributed into OSPF not working?

OSPF-in chain is used only when routes are received from other OSPF neighbors.
To control what external routes will be sent to other OSPF neighbors you need to use OSPF out.
by mrz
Tue Jan 28, 2020 12:03 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 8261

Re: Feature Request - BGP RPKI

ROS didn't use Quagga and no there will not be FRR.
by mrz
Mon Jan 27, 2020 2:34 pm
Forum: Announcements
Topic: v6.46.2 [stable] is released!
Replies: 121
Views: 37003

Re: v6.46.2 [stable] is released!

Auto upgrader will not try to install if at least one package is missing or not finished downloading.
by mrz
Tue Jan 21, 2020 2:08 pm
Forum: General
Topic: Simple Queues script to change type [SOLVED]
Replies: 9
Views: 1693

Re: Simple Queues script to change type [SOLVED]

If you have more than one item with total-queue="default-small" then you need to iterate through find results.
For example using foreach
:foreach i in=[find where total-queue="default-small"] do={set $i total-queue=wireless-default }
by mrz
Tue Jan 21, 2020 11:30 am
Forum: General
Topic: Simple Queues script to change type [SOLVED]
Replies: 9
Views: 1693

Re: Simple Queues script to change type [SOLVED]

set [find total-queue="default-small" ] total-queue=wireless-default
by mrz
Tue Jan 21, 2020 9:52 am
Forum: Announcements
Topic: v6.46.2 [stable] is released!
Replies: 121
Views: 37003

Re: v6.46.2 [stable] is released!

Sometimes I just get the files from the mikrotik.com download section, collecting the main package and some optional packages, then I FTP the whole thing to the router and reboot. This is in fact the only way to add one or more optional packages. Of course after doing the FTP I first list the Files...
by mrz
Mon Jan 20, 2020 4:48 pm
Forum: RouterOS v7 BETA
Topic: IP route table display
Replies: 7
Views: 4179

Re: IP route table display

You can do print on the same menu and you will see parameters related only to static IP routes. Routing route should be used to monitor all routes (including filtered ones) and their protocol specific parameters. eally breaking an old Mikrotik tradition of changing stuff on a menu level (in this cas...
by mrz
Mon Jan 20, 2020 12:13 pm
Forum: Forwarding Protocols
Topic: Further BGP improvements?
Replies: 4
Views: 2245

Re: Further BGP improvements?

Yes, we are working on BGP at the moment. First beta with enabled BGP is coming soon.
by mrz
Thu Jan 16, 2020 7:15 pm
Forum: Scripting
Topic: API enable\disable ip sec peer
Replies: 2
Views: 1972

Re: API enable\disable ip sec peer

Please read documentation on how to use API
https://wiki.mikrotik.com/wiki/Manual:A ... escription
by mrz
Thu Jan 16, 2020 2:22 pm
Forum: RouterOS v7 BETA
Topic: IP route table display
Replies: 7
Views: 4179

Re: IP route table display

v7 have completely reworked routing table with completely different flags. v7 Has 3 Flag columns: * shows if route is dynamically added by any protocol * route status flag (active, inactive, disabled) * protocol flag (bgp, osf,static,connected etc.) I would suggest to use /routing/route menu to moni...
by mrz
Mon Jan 13, 2020 12:28 pm
Forum: Forwarding Protocols
Topic: OSPF Networks
Replies: 2
Views: 1888

Re: OSPF Networks

@marcocamza If you mean add /12 in OSPF network configuration so that OSPF runs on all matching networks, then yes you can do it.
If you mean to advertise /12 instead /24 then no, unless you run those networks in area, then you can do summarization on ABR.
by mrz
Thu Jan 09, 2020 1:01 pm
Forum: Forwarding Protocols
Topic: does Mikrotik support RFC5549
Replies: 2
Views: 2258

Re: does Mikrotik support RFC5549

At the moment, no, it is not supported.
by mrz
Thu Jan 09, 2020 12:58 pm
Forum: Forwarding Protocols
Topic: Default Route from BGP to OSPF
Replies: 21
Views: 10244

Re: Default Route from BGP to OSPF

Yes, that particular problem from 2017 is fixed. If you have the same symptoms contact support.
by mrz
Wed Nov 27, 2019 11:48 am
Forum: RouterOS v7 BETA
Topic: how add multiple route tables, route rules in v7 beta [SOLVED]
Replies: 12
Views: 6407

Re: how add multiple route tables, route rules in v7 beta [SOLVED]

We are open to suggestions while v7 is in beta state.
by mrz
Tue Nov 26, 2019 5:28 pm
Forum: RouterOS v7 BETA
Topic: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334
Replies: 9
Views: 4996

Re: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334

We will try to add some functionality to read options in the script.
by mrz
Tue Nov 26, 2019 4:28 pm
Forum: Scripting
Topic: Can't specify log buffer as variable
Replies: 2
Views: 1640

Re: Can't specify log buffer as variable

Do not use the system parameter names as variable names and everything will work as expected:
https://wiki.mikrotik.com/wiki/Manual:S ... able_names
by mrz
Tue Nov 26, 2019 4:13 pm
Forum: RouterOS v7 BETA
Topic: how add multiple route tables, route rules in v7 beta [SOLVED]
Replies: 12
Views: 6407

Re: how add multiple route tables, route rules in v7 beta [SOLVED]

/routing table
add name=G-2 vrf=main
add name=G0SQ vrf=main
add name=CIR vrf=main

/ip/route
add gateway="EXTRA PPPOE@main" dst-address=0.0.0.0/0^G-2
add gateway=192.168.100.1@main dst-address=0.0.0.0/0^G-SQ
add gateway=103.225.xx.xx@main dst-address=0.0.0.0/0^CIR
...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 21