Community discussions

MikroTik App

Search found 6254 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 21
by mrz
Thu Jul 22, 2021 7:47 am
Forum: General
Topic: ospf failure to receive valid multicast 224.0.0.5 Hello
Replies: 4
Views: 275

Re: ospf failure to receive valid multicast 224.0.0.5 Hello

Change to NBMA, if OSPF start to work then, then your wireless link is dropping multicast.
by mrz
Fri Jul 16, 2021 1:10 pm
Forum: RouterOS v7 BETA
Topic: v7 launch date
Replies: 124
Views: 14058

Re: v7 launch date

If anyone is interested testing new filter syntax and send some feedback, you can contact support and request a test build.
by mrz
Fri Jul 02, 2021 5:31 pm
Forum: RouterOS v7 BETA
Topic: v7 launch date
Replies: 124
Views: 14058

Re: v7 launch date

If it was routing related config that was lost then yes it is possible when downgrading from newer betas. As it was already mentioned always export your current config before any upgrade/downgrade from/to beta version.
by mrz
Fri Jul 02, 2021 8:43 am
Forum: RouterOS v7 BETA
Topic: Firewall TCP rules are missing
Replies: 1
Views: 551

Re: Firewall TCP rules are missing

TCP flags are there:
/ip/firewall/filter> add protocol=tcp tcp-<tab>
tcp-flags  tcp-mss
There are no IGMP options on v6 too. If you meant ICMP options then those are available too:
/ip/firewall/filter> add protocol=icmp icmp-options=
by mrz
Tue Jun 22, 2021 4:34 pm
Forum: Scripting
Topic: Syntax error in script file due to encoding?
Replies: 16
Views: 993

Re: Syntax error in script file due to encoding?

Copy your code in system scripts and run print in the terminal, it will highlight all the syntax errors you have.
by mrz
Tue Jun 22, 2021 2:59 pm
Forum: Scripting
Topic: Syntax error in script file due to encoding?
Replies: 16
Views: 993

Re: Syntax error in script file due to encoding?

Did you open file with text editor? What exactly is on line 281 column 10?
by mrz
Tue Jun 22, 2021 11:37 am
Forum: Scripting
Topic: API get tx-rate/rx-rate of hotspot hosts in response using Pear2/RouterOS
Replies: 4
Views: 1212

Re: API get tx-rate/rx-rate of hotspot hosts in response using Pear2/RouterOS

You can calculate your own tx rates or rx rates from bytes and packets varaibles (just as winbox does it)
by mrz
Thu Jun 17, 2021 10:14 am
Forum: Scripting
Topic: API get tx-rate/rx-rate of hotspot hosts in response using Pear2/RouterOS
Replies: 4
Views: 1212

Re: API get tx-rate/rx-rate of hotspot hosts in response using Pear2/RouterOS

tx-rate and rx-rate parameters does not exist in that menu.

List of available parameters:
https://wiki.mikrotik.com/wiki/Manual:I ... tspot_host
by mrz
Wed Jun 16, 2021 8:43 pm
Forum: Forwarding Protocols
Topic: How does "Set BGP Prepend Path" work?
Replies: 2
Views: 639

Re: How does "Set BGP Prepend Path" work?

AS path manipulations should be done on the AS edge router. iBGP does not change AS path.
by mrz
Tue Jun 08, 2021 4:32 pm
Forum: RouterOS v7 BETA
Topic: OSPF routing syntax
Replies: 10
Views: 1360

Re: OSPF routing syntax

BFD is not implemented and default route is not special case anymore, set distribution of protocol routes which installs default route and use routing filters to accept prefixes you want to advertise (0.0.0.0/0 if you want to advertise only default route) and set type and costs.
by mrz
Tue Jun 08, 2021 3:06 pm
Forum: RouterOS v7 BETA
Topic: OSPF routing syntax
Replies: 10
Views: 1360

Re: OSPF routing syntax

You can start from here:
https://help.mikrotik.com/docs/display/ ... figuration

To enable redistribution use "redistribute" parameter in instance.
by mrz
Mon Jun 07, 2021 4:15 pm
Forum: General
Topic: cli search omitting known data
Replies: 2
Views: 358

Re: cli search omitting known data

It is a regular expressions so you can match multiple substrings, or use negative lookaround to exclude string.

If you do not know what regexp is, you can start here:
https://medium.com/factory-mind/regex-t ... 9dc1c3f285
by mrz
Mon Jun 07, 2021 1:48 pm
Forum: RouterOS v7 BETA
Topic: Need help configuring a simple bgp filter in ROSv7
Replies: 2
Views: 868

Re: Need help configuring a simple bgp filter in ROSv7

For output you need to configure /routing/filter/select and set it as output chain in bgp connect settings.
by mrz
Fri Jun 04, 2021 11:25 am
Forum: Forwarding Protocols
Topic: BGP communities for 32 bit ASN
Replies: 2
Views: 769

Re: BGP communities for 32 bit ASN

It is a limitation of BGP. Extended communities and large communities support 32bit ASNs. Large communities is a new feature which is added only in ROS v7
by mrz
Thu Jun 03, 2021 11:50 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

try [find type="A"]
by mrz
Thu Jun 03, 2021 10:02 am
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

In v7 gateway can be only one "IP/interface", you need to add two route entries and that will form ECMP route.
by mrz
Wed Jun 02, 2021 1:05 am
Forum: General
Topic: VRRP still invalid ip address
Replies: 3
Views: 393

Re: VRRP still invalid ip address

Obviously R01 is a master and only on the master router IP will be active.
by mrz
Wed Jun 02, 2021 1:03 am
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

Please be more specific, in general route filters are working.
by mrz
Tue Jun 01, 2021 4:24 pm
Forum: Forwarding Protocols
Topic: BGP problem with best route
Replies: 7
Views: 1035

Re: BGP problem with best route

Both peers run on the same instance?
by mrz
Tue Jun 01, 2021 11:46 am
Forum: Forwarding Protocols
Topic: OSPFv3 + DHCPV6 Relay Not Routing Correctly
Replies: 3
Views: 932

Re: OSPFv3 + DHCPV6 Relay Not Routing Correctly

RouterOS has a simple relay implementation it does not track bindings and in this case it is not possible to reliably add routes to bound prefixes. To install routes, relay must become smarter and track all requests and store its own lease/binding information similar as server, that is the plan for ...
by mrz
Sat May 22, 2021 8:33 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

What exactly is not working with IPv6?
by mrz
Fri May 21, 2021 10:45 pm
Forum: Beginner Basics
Topic: How do I get a IPv6 address from my ISP using SLAAC?
Replies: 2
Views: 518

Re: How do I get a IPv6 address from my ISP using SLAAC?

Stateless address is not received by DHCP. If accept-router-advertisements is enabled and ISP is actually sending stateless address, then RouterOS will install it, but it will not show in Ipv6 address list. Only way to check if it actually works is to try to ping some ipv6 address in providers netwo...
by mrz
Fri May 21, 2021 10:02 pm
Forum: RouterOS v7 BETA
Topic: Route filter for BGP not working v7.1 beta 6
Replies: 3
Views: 997

Re: Route filter for BGP not working v7.1 beta 6

Problem is not with actual filters. To redistribute static routes now you need to enable redistribution in connection settings.
And set up routing filter selection chain and set it as output.filter
by mrz
Fri May 21, 2021 6:41 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

Magically some think it gets done for free and by prayer, or smoking much ganja.
Everyday life in testing:
Image
by mrz
Fri May 21, 2021 1:23 pm
Forum: Forwarding Protocols
Topic: BGP unequal cost Link
Replies: 7
Views: 1114

Re: BGP unequal cost Link

You cannot balance downstream with single /24 prefix, because now minimum prefix that ISPs accept is /24 For upstream you can use several features policy routing, or if you want to use BGP then play with routing filters and adjust nexthops (for ECMP), or set weights or local prefs to prefer specific...
by mrz
Fri May 21, 2021 10:49 am
Forum: Forwarding Protocols
Topic: BGP unequal cost Link
Replies: 7
Views: 1114

Re: BGP unequal cost Link

You want to balance upstream or downstream traffic?
by mrz
Thu May 20, 2021 6:50 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

Anyone who has some problems with OSPF please contact support with attached supout files and brief description on what exactly is not working. "OSPF not work" doesn't help much.
by mrz
Thu May 20, 2021 6:45 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

Hello can anyone from mikrotik confirm if route filters and ospfv3 is working or not?
Route filters are working
by mrz
Wed May 19, 2021 6:34 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta6 [development] is released!
Replies: 341
Views: 48346

Re: v7.1beta6 [development] is released!

Do you know if it is already possible to set costs for OSPF?
Yes, now you can set cost in interface template
by mrz
Wed May 19, 2021 4:13 pm
Forum: RouterOS v7 BETA
Topic: Request Feature : BGP dynamic neighbors + BGP flowspec
Replies: 2
Views: 790

Re: Request Feature : BGP dynamic neighbors + BGP flowspec

Dynamic BGP neighbours are already supported in ROS v7
by mrz
Wed May 12, 2021 9:14 am
Forum: Scripting
Topic: Multiple IF Statement match and action accordingly
Replies: 14
Views: 6920

Re: Multiple IF Statement match and action accordingly

If it is not a fragment, then it is not supposed to work. Script doesn't know anything about all those undefined variables you are trying to use.
by mrz
Wed May 12, 2021 9:07 am
Forum: Forwarding Protocols
Topic: OSPF with FRR Zebra
Replies: 2
Views: 821

Re: OSPF with FRR Zebra

OSPF in ROS v6 does not support unnumbered interfaces. LSAs received from such routers will show up without gateway.

Feature to support such setups is added in ROS v7.
by mrz
Thu May 06, 2021 3:00 pm
Forum: Scripting
Topic: Documentation about do={<script>} in monitoring commands
Replies: 3
Views: 1207

Re: Documentation about do={<script>} in monitoring commands

Regarding documentation, wiki has several examples, for example:
https://wiki.mikrotik.com/wiki/Manual:S ... imitations
by mrz
Wed Apr 28, 2021 3:43 pm
Forum: Forwarding Protocols
Topic: OSPF re-distributing other OSPF routes when set to no
Replies: 2
Views: 889

Re: OSPF re-distributing other OSPF routes when set to no

redistribute-other-ospf setting affects only distribution between OSPF instances.

Regarding filters, you can filter only external routes (type-5 lsas).
by mrz
Fri Apr 23, 2021 6:58 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

Yes, in v7 all security stuff is integrated into system package.
by mrz
Fri Apr 23, 2021 12:31 pm
Forum: Scripting
Topic: ! Variables in firewall filters [SOLVED]
Replies: 4
Views: 952

Re: ! Variables in firewall filters [SOLVED]

As error says you cannot logically negate string. by specifying !"string" you are trying to perform logic operation on string and then apply it as a value. To pass ! as part of the value you should pass it as a part of string "!$your_var" [admin@MikroTik] /ip/firewall/filter> add...
by mrz
Fri Apr 23, 2021 12:17 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

3.Routing-mark cannot add new mark routing name
You need to add routing table first, see example here.
https://help.mikrotik.com/docs/display/ ... tingTables
by mrz
Thu Apr 22, 2021 1:13 pm
Forum: Scripting
Topic: Why is there a "*" in front of the interface number
Replies: 7
Views: 866

Re: Why is there a "*" in front of the interface number

Mikrotik does not write why they add a * in front of an ID, but here you see some info.
So that you'll never confuse internal ids with temporary ids generated by console print.
by mrz
Tue Apr 20, 2021 6:49 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

If, as you say, you have default route, then there is no need to add static routes to nowhere, you can use address lists /ip firewall address-list add list=unreachable address=10.0.0.0/8 add list=unreachable address=172.16.0.0/12 add list=unreachable address=192.168.0.0/16 /ip firewall filter add ad...
by mrz
Tue Apr 20, 2021 2:19 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

As far as I understood you were thinking to add blackhole route and filrewall rule and expect that ICMP replies for blackholed traffic would be sent? That of course would not work.
If you do not add blackhole route, but just add firewall rule for specific destiantion then it will work.
by mrz
Tue Apr 20, 2021 1:38 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

v7 uses new Linux ip-nexthop which supports only "blackhole" nexthop.
But there is still an option to add firewall rule to send ICMP unreachable for specific destinations.
by mrz
Sat Apr 17, 2021 11:28 am
Forum: Forwarding Protocols
Topic: Mikrotik Add BGP network with ROUTE-MAP like cisco
Replies: 4
Views: 1011

Re: Mikrotik Add BGP network with ROUTE-MAP like cisco

Yes, it is called routing filters.
by mrz
Wed Apr 07, 2021 11:16 am
Forum: Forwarding Protocols
Topic: Fault-finding OSPF error "Discarding packet"
Replies: 4
Views: 1201

Re: Fault-finding OSPF error "Discarding packet"

If connection tracking is enabled, then add RAW firewall rules for OSPF traffic (in both prerouting and output chains) with action=notrack. Other common causes: * Multiple neighbors has the same router-id * Actual layer2 loop in the network * If switch is used in between, bad switch may acts as hub,...
by mrz
Fri Apr 02, 2021 6:03 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

Selection does not work in current beta. For filtering you can set testrule directly in bgp configuration.
by mrz
Fri Apr 02, 2021 4:36 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

sadly, some of these elements are non-existing in the current ROS7 ecosystem, at least not yet. what i'd like
...
- RFC 6286 unique as wide BGP ID
RFC 6286 is implemented in ROS v7
by mrz
Tue Mar 30, 2021 11:38 pm
Forum: Forwarding Protocols
Topic: Keep using firewall rules with VRRP
Replies: 5
Views: 1456

Re: Keep using firewall rules with VRRP

Conntrack synchronisation is now available in ROS v7.
by mrz
Fri Mar 26, 2021 1:49 pm
Forum: Scripting
Topic: I need to convert Content imported from file.txt to a number value
Replies: 4
Views: 858

Re: I need to convert Content imported from file.txt to a number value

if that is considered time, then [:totime $cap]
by mrz
Thu Mar 25, 2021 3:29 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

We will add cost back in next beta.
by mrz
Thu Mar 25, 2021 12:43 pm
Forum: Forwarding Protocols
Topic: OSPF bug with IPs containing 255
Replies: 3
Views: 1075

Re: OSPF bug with IPs containing 255

The key here is "connected over an ISP-provided L2 WAN link."
by mrz
Tue Mar 23, 2021 2:16 pm
Forum: RouterOS v7 BETA
Topic: IPv6 bgp network
Replies: 5
Views: 963

Re: IPv6 bgp network

You put the name of the address list
by mrz
Tue Mar 23, 2021 1:40 pm
Forum: RouterOS v7 BETA
Topic: IPv6 bgp network
Replies: 5
Views: 963

Re: IPv6 bgp network

To advertise prefixes from specified address list. Replaces "/routing bgp network" configuration of ROS v6
by mrz
Mon Mar 22, 2021 8:37 am
Forum: Forwarding Protocols
Topic: OSPF vlan without internet when I activate redistribute-connected-routes = no?
Replies: 1
Views: 958

Re: OSPF vlan without internet when I activate redistribute-connected-routes = no?

Router1 cannot know how to route traffic to vlan networks if there is no routes. Distribute vlan routes in your local network or masquerade vlan networks on router2.
by mrz
Sun Mar 21, 2021 12:38 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

Option to set gateway will be added in next beta.
by mrz
Sat Mar 20, 2021 6:15 pm
Forum: Forwarding Protocols
Topic: Routing over ipsec
Replies: 8
Views: 1972

Re: Routing over ipsec

gre over ipsec.
by mrz
Thu Mar 18, 2021 10:43 pm
Forum: RouterOS v7 BETA
Topic: Bug: RouterOS beta 7.1beta4 - RFC3021 - does not route out on a /31 - but accepts traffic from a /31
Replies: 15
Views: 2353

Re: Bug: RouterOS beta 7.1beta4 - RFC3021 - does not route out on a /31 - but accepts traffic from a /31

It says that /31 is not supported, so that people stop asking whether /31 is supported or not.
by mrz
Thu Mar 18, 2021 8:01 pm
Forum: RouterOS v7 BETA
Topic: OSPF redistribute and routing filters in v7
Replies: 9
Views: 1247

Re: OSPF redistribute and routing filters in v7

Some more info on new filter syntax now is available here:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Thu Mar 18, 2021 2:02 pm
Forum: RouterOS v7 BETA
Topic: OSPF redistribute and routing filters in v7
Replies: 9
Views: 1247

Re: OSPF redistribute and routing filters in v7

Firsts reject default route and then accept static,connected

or you can write in one rule
if ([prfx-value is=!dst<equal>0.0.0.0/0] || [protocol static] || [protocol connected]) { ospf-ext-type type1; action accept}
by mrz
Wed Mar 17, 2021 5:34 pm
Forum: RouterOS v7 BETA
Topic: OSPF redistribute and routing filters in v7
Replies: 9
Views: 1247

Re: OSPF redistribute and routing filters in v7

Just need to specify chain in instance and add one rule.
/routing ospf instance set <xxx> out-filter-chain=myChain
/routing filter rule add chain=myChain rule={ if ([protocol connected]) then={num-value ospf-ext-metric<assign>10; ospf-ext-type type1; action accept}}
by mrz
Wed Mar 17, 2021 3:39 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta5 [development] is released!
Replies: 293
Views: 47563

Re: v7.1beta5 [development] is released!

I just uploaded it to EVE-NG and am working through adding some config I used with previous beta versions. It looks like the routing filters have changed slightly. What string value is expected? Now routing rule has script-like syntax. Try routing filter rule add rule={ <tab> to see possible parame...
by mrz
Wed Mar 17, 2021 9:27 am
Forum: RouterOS v7 BETA
Topic: V7.1beta4 unable to add routes
Replies: 4
Views: 875

Re: V7.1beta4 unable to add routes

You can find basic examples on how to add routing tables and routes here:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Tue Mar 16, 2021 11:57 am
Forum: RouterOS v7 BETA
Topic: V7.1beta4 unable to add routes
Replies: 4
Views: 875

Re: V7.1beta4 unable to add routes

There is no "routing-mark" parameter in ROSv7
by mrz
Thu Mar 11, 2021 11:16 am
Forum: RouterOS v7 BETA
Topic: Bug: RouterOS beta 7.1beta4 - RFC3021 - does not route out on a /31 - but accepts traffic from a /31
Replies: 15
Views: 2353

Re: Bug: RouterOS beta 7.1beta4 - RFC3021 - does not route out on a /31 - but accepts traffic from a /31

/127 is different topic (completely unrelated to RFC3021), and BTW /127 is suppoerted and works in ROSv7
by mrz
Mon Mar 01, 2021 9:56 am
Forum: Forwarding Protocols
Topic: OSPF priority for dynamic Interfaces
Replies: 4
Views: 1132

Re: OSPF priority for dynamic Interfaces

If there is no static entry in OSPF interface configuration, then parameters are taken from "all" entry. So you can adjust priority there to have all dynamic interfaces needed priority,
by mrz
Sun Feb 21, 2021 1:23 pm
Forum: RouterOS v7 BETA
Topic: REST API basic help [SOLVED]
Replies: 4
Views: 1136

Re: REST API basic help [SOLVED]

Handshake can fail if there is a problem with certificate chain. Have you set certificate for www-ssl service on the router and have you imported CA certificate (used to sing the www-ssl service certificate) on the client device?
by mrz
Thu Feb 18, 2021 10:30 am
Forum: RouterOS v7 BETA
Topic: IPv6 firewall counters are very strange
Replies: 3
Views: 762

Re: IPv6 firewall counters are very strange

It means that one of parameters used in your firewall rules are not working. Send supout file to to support.
by mrz
Tue Feb 16, 2021 12:20 pm
Forum: RouterOS v7 BETA
Topic: VRRP sync-connection-tracking setup
Replies: 5
Views: 1639

Re: VRRP sync-connection-tracking setup

Currently there are several centralised configuration management options: TR069, API, SSH, and now even REST.
by mrz
Mon Feb 15, 2021 5:54 pm
Forum: Scripting
Topic: /ip/kid-control/pause kid1 not work
Replies: 6
Views: 850

Re: /ip/kid-control/pause kid1 not work

API is not the same as CLI syntax. You need to get ID and then perform action with the ID,
See api documentation and examples:
https://wiki.mikrotik.com/wiki/Manual:API
https://wiki.mikrotik.com/wiki/API_command_notes
by mrz
Fri Feb 12, 2021 10:58 am
Forum: RouterOS v7 BETA
Topic: ROS7, announce single address [SOLVED]
Replies: 2
Views: 1003

Re: ROS7, announce single address [SOLVED]

With output networks in a bgp template. The example is here:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Wed Feb 10, 2021 4:52 pm
Forum: Scripting
Topic: Global Variables
Replies: 5
Views: 3881

Re: Global Variables

They are global, you need to declare them before accessing, read this:
https://wiki.mikrotik.com/wiki/Manual:S ... #Variables
by mrz
Wed Feb 10, 2021 4:19 pm
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 1276

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

Be more specific what exaclty is not working what errors you get and so on. Here is an example of traffic monitor, it works as expected: $ curl -k -u admin: -X POST 'https://10.155.101.214/rest/interface/monitor-traffic' --data '{"interface":"sfp12","duration":"2s&...
by mrz
Wed Feb 10, 2021 2:38 pm
Forum: RouterOS v7 BETA
Topic: rpki verify in new routing firewall rule
Replies: 4
Views: 851

Re: rpki verify in new routing firewall rule

In currently released beta (v7.1beta4) it is not possible to add rpki validation. We will finish routing filters release and then update documentation with new syntax.
by mrz
Wed Feb 10, 2021 1:53 pm
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 1276

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

It is not clear what you are not able to do.

Have you tried to run
POST 'https://x.x.x.x/rest/tool/traffic-monitor' -data '{"interface":"wlan1","duration":"2s"}'
by mrz
Wed Feb 10, 2021 11:11 am
Forum: RouterOS v7 BETA
Topic: 7.1beta4 monitor-traffic restApi [SOLVED]
Replies: 6
Views: 1276

Re: 7.1beta4 monitor-traffic restApi [SOLVED]

Check "Timeout" section in that manual. It has an example on how to use similar commands to "monitor-traffic"
by mrz
Mon Feb 08, 2021 10:08 am
Forum: Scripting
Topic: "\$(HOSTNAME)_\$(FIRMWARE)_\$(DATE)-\$(TIME)"
Replies: 5
Views: 853

Re: "\$(HOSTNAME)_\$(FIRMWARE)_\$(DATE)-\$(TIME)"

file="$HOSTNAME_$FIRMWARE_$DATE-$TIME"

keeping in mind that all of those variables are actually defined.
by mrz
Mon Feb 08, 2021 10:02 am
Forum: Forwarding Protocols
Topic: How Donot Change Community In bgp
Replies: 3
Views: 840

Re: How Donot Change Community In bgp

RouterOS does not change or remove communities unless you explicitly tell it to do this with routing filters.
by mrz
Mon Feb 01, 2021 9:35 pm
Forum: Forwarding Protocols
Topic: BGP Peer without default route
Replies: 2
Views: 700

Re: BGP Peer without default route

It is possible with a script that checks BGP peers status and disables/enables default route accordingly.
by mrz
Tue Jan 26, 2021 10:04 am
Forum: RouterOS v7 BETA
Topic: v7 Beta and VRF config changes
Replies: 4
Views: 1162

Re: v7 Beta and VRF config changes

Interface list was added to address issue with large amount of dynamically created interface issue. v7 routes has routing table parameter, so you can determine to which table route belongs the same way as in ROS v6. [admin@arm-bgp] /ip/route> print det where dst-address=192.168.123.0/24 Flags: D - d...
by mrz
Tue Jan 26, 2021 9:57 am
Forum: RouterOS v7 BETA
Topic: Will Mikrotik v7 support L2MTU for x86?
Replies: 4
Views: 1067

Re: Will Mikrotik v7 support L2MTU for x86?

If mpls MTU is set up correctly, then it does not affect VPLS at all.
For vlans on physical interfaces limitation is the same as on physical interface (only router originated non-tcp traffic can have problems )
by mrz
Mon Jan 25, 2021 4:59 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

As it is discussed in many topics in this forum you can use /32 instead of /31. Using /32 instead of /31 will not work only in specific setups.
by mrz
Mon Jan 25, 2021 4:50 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

/31 is not supported and there are no plans to support it.
by mrz
Mon Jan 25, 2021 10:53 am
Forum: RouterOS v7 BETA
Topic: Will Mikrotik v7 support L2MTU for x86?
Replies: 4
Views: 1067

Re: Will Mikrotik v7 support L2MTU for x86?

If you increase MTU and, for example, set MPLS MTU to 1504, then there will be no fragmentation for mpls (assuming that forwarded ip packet is 1500bytes). There will not be MTU problems also for forwarded IP packets over the routers since packet size is determined on packet originator. There can be ...
by mrz
Thu Jan 21, 2021 10:17 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 1056

Re: using fetch tool on ppp on-up script [SOLVED]

Add a script in system scripts menu
/system script add name=myScript source={ :log info "****** $user Connected"; }

Then set:
on-up=myScript
by mrz
Thu Jan 21, 2021 10:15 am
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

See here how to use routing filters:
https://help.mikrotik.com/docs/display/ ... ingFilters
by mrz
Wed Jan 20, 2021 10:13 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 1056

Re: using fetch tool on ppp on-up script [SOLVED]

If a script is executed from PPP on-up, then the user variable will be available.
by mrz
Tue Jan 19, 2021 3:14 pm
Forum: General
Topic: Disable PPP IPCP client-side??
Replies: 1
Views: 267

Re: Disable PPP IPCP client-side??

AFAIK you can't say the client to request only BCP
by mrz
Tue Jan 19, 2021 10:56 am
Forum: Scripting
Topic: using fetch tool on ppp on-up script [SOLVED]
Replies: 6
Views: 1056

Re: using fetch tool on ppp on-up script [SOLVED]

ppp on-up script has limited permissions.
You need to add a script with "dont-require-permissions" set to yes and execute it from ppp on-up.
by mrz
Mon Jan 18, 2021 10:31 am
Forum: RouterOS v7 BETA
Topic: IP Route In RouterOS V7
Replies: 7
Views: 2228

Re: IP Route In RouterOS V7

Here is explained the difference between v6 and v7 with the example:
https://help.mikrotik.com/docs/display/ ... icyRouting
by mrz
Mon Jan 18, 2021 10:28 am
Forum: Forwarding Protocols
Topic: BGP Advertise specific route only to a specific peer
Replies: 5
Views: 985

Re: BGP Advertise specific route only to a specific peer

You will need to set up routing filters for each peer.
by mrz
Fri Jan 15, 2021 11:15 am
Forum: General
Topic: /31, RFC 3021
Replies: 2
Views: 567

Re: /31, RFC 3021

by mrz
Wed Jan 06, 2021 12:08 pm
Forum: General
Topic: Output chain question
Replies: 9
Views: 774

Re: Output chain question

Typically you use output only if you do not want specific packets originated on the router to be sent out. BTW your listed output rules do nothing but add load on the CPU.
by mrz
Sat Jan 02, 2021 4:00 pm
Forum: RouterOS v7 BETA
Topic: REST
Replies: 11
Views: 2240

Re: REST

The REST API will be available when we release v7.1beta4.
by mrz
Wed Dec 30, 2020 12:32 pm
Forum: Scripting
Topic: Torch via API
Replies: 2
Views: 544

Re: Torch via API

Solution for what? The second post on that topic states that Torch works.
by mrz
Mon Dec 28, 2020 3:46 pm
Forum: RouterOS v7 BETA
Topic: v6.48 bug.
Replies: 1
Views: 904

Re: v6.48 bug.

by mrz
Tue Dec 22, 2020 5:00 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

Look a few posts above
by mrz
Tue Dec 15, 2020 1:09 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 5949

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

0.0.0.0 is not the same as 0.0.0.0/0
by mrz
Wed Dec 09, 2020 9:18 am
Forum: RouterOS v7 BETA
Topic: OpenVPN Server Clarification needed
Replies: 8
Views: 1579

Re: OpenVPN Server Clarification needed

True
by mrz
Tue Dec 08, 2020 8:03 pm
Forum: RouterOS v7 BETA
Topic: OpenVPN Server Clarification needed
Replies: 8
Views: 1579

Re: OpenVPN Server Clarification needed

No.
No.
Yes.
Yes.
No.
by mrz
Tue Dec 08, 2020 2:49 pm
Forum: Forwarding Protocols
Topic: BGP Route distinguishers reversed
Replies: 4
Views: 1198

Re: BGP Route distinguishers reversed

It is safe to confirm that this problem will be solved in next v6.48beta version.
by mrz
Sat Dec 05, 2020 9:51 pm
Forum: RouterOS v7 BETA
Topic: Problem with bfd export on 7.1beta3
Replies: 1
Views: 978

Re: Problem with bfd export on 7.1beta3

BFD is not yet fully implemented. Export will throw an errors.
by mrz
Fri Dec 04, 2020 5:53 pm
Forum: Scripting
Topic: Fail Variable declaration sintax from manual
Replies: 6
Views: 734

Re: Fail Variable declaration sintax from manual

local variable lives only inside scope, and each command line is in its own scope.
Either put whole script in curly braces or use global variable

and :set $var value does not solve the actual problem either.
by mrz
Thu Dec 03, 2020 8:04 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

One thing i instantly noticed is that /export never terminates. Tried to reset to an empty configuration, same thing. When i run /export verbose the last thing that gets displayed is /radius incoming set accept=no port=3799 and then it hangs forever. Export problem is known, /routing menu export is...
by mrz
Thu Dec 03, 2020 8:01 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50617

Re: v7.1beta3 [development] is released!

How does the BGP related config migration work? Is this done automatically as part of the upgrade process? Yes it is part of the upgrade process, but keep in mind that routing filters are not converted yet and some of the config might still be missing. So it is recommended to make a backup of ROSv6...
by mrz
Thu Dec 03, 2020 12:34 pm
Forum: Forwarding Protocols
Topic: BGP Manual Refresh
Replies: 2
Views: 797

Re: BGP Manual Refresh

What do you mean by hard refresh. Tear down the session and restart? If so then peer disable/enable.
by mrz
Thu Dec 03, 2020 9:45 am
Forum: Forwarding Protocols
Topic: Disable ECMP on OSPF?
Replies: 7
Views: 1049

Re: Disable ECMP on OSPF?

I am not saying ECMP is not asymmetric. Turning off ECMP might be useful but not in the case you are referring. You will not get consistency you are asking for.
by mrz
Wed Dec 02, 2020 1:14 pm
Forum: Scripting
Topic: To retain variable's values after reboot
Replies: 20
Views: 6023

Re: To retain variable's values after reboot

Why in the earth does not the RuterOS retains the global variable after reboot. Can you show any other scripting language or programming language where defined variables magically restores their values from previous script instance, without saving data to file, registry or database? If you want to ...
by mrz
Tue Dec 01, 2020 4:40 pm
Forum: Scripting
Topic: To retain variable's values after reboot
Replies: 20
Views: 6023

Re: To retain variable's values after reboot

Write variables in scheduler startup script is a better option than writing variables in l7 rules and other crazy stuff.
by mrz
Tue Dec 01, 2020 11:10 am
Forum: Forwarding Protocols
Topic: Disable ECMP on OSPF?
Replies: 7
Views: 1049

Re: Disable ECMP on OSPF?

You cannot turn it off.
And even if you could in your scenario it will introduce other mentioned problems, like asymmetric routing unpredictably. Only right way that fits your described scenario is to adjust interface costs.
by mrz
Mon Nov 30, 2020 1:37 pm
Forum: RouterOS v7 BETA
Topic: Routing RIP
Replies: 2
Views: 747

Re: Routing RIP

Use CLI for now
by mrz
Fri Nov 27, 2020 5:10 pm
Forum: Forwarding Protocols
Topic: Blackhole
Replies: 3
Views: 1032

Re: Blackhole

/routing filter add chain=your_chain prefix=x.x.x.x/32 set-bgp-communities=65535: 666
by mrz
Fri Nov 27, 2020 12:15 pm
Forum: Forwarding Protocols
Topic: Blackhole
Replies: 3
Views: 1032

Re: Blackhole

add prefix in BGP networks
and set community in out filter.
by mrz
Thu Nov 26, 2020 4:38 pm
Forum: Forwarding Protocols
Topic: BGP Peer within VRF route advertisement
Replies: 5
Views: 900

Re: BGP Peer within VRF route advertisement

There is no menu to show vpnv4 routes advertised to specific peer.
by mrz
Wed Nov 25, 2020 3:55 pm
Forum: RouterOS v7 BETA
Topic: /import safe-mode (feature request)
Replies: 2
Views: 828

Re: /import safe-mode (feature request)

Enable safe mode and then run import.
by mrz
Sat Nov 21, 2020 9:19 am
Forum: Forwarding Protocols
Topic: BGP Peer within VRF route advertisement
Replies: 5
Views: 900

Re: BGP Peer within VRF route advertisement

advertisements is only for ipvx routes. vpnv4 routres are in vpnv4 menu
by mrz
Tue Nov 17, 2020 9:30 am
Forum: RouterOS v7 BETA
Topic: V7 bgp peer in_filter and out filter config?
Replies: 3
Views: 906

Re: V7 bgp peer in_filter and out filter config?

Then it is not clear what exactly you are unable to find, because there is an example that shows how to specify out filter:
/routing/bgp/template
add name=myAsTemplate as=65500 output.filter=myAsFilter
by mrz
Tue Nov 10, 2020 10:50 am
Forum: General
Topic: find from API
Replies: 2
Views: 260

Re: find from API

Because there is no find in api, use queries:
https://wiki.mikrotik.com/wiki/Manual:API#Queries
by mrz
Mon Nov 09, 2020 10:05 am
Forum: RouterOS v7 BETA
Topic: [REQUEST] IPv6 routing mark
Replies: 2
Views: 2577

Re: [REQUEST] IPv6 routing mark

Already supported in v7beta
by mrz
Fri Nov 06, 2020 6:23 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 4579

Re: ROS 7.0beta5 mark based routing BOOTLOOP

@main is not mandatory, but is useful to know, because v7 allows to resolve gateways in other tables than main
by mrz
Fri Nov 06, 2020 3:53 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 4579

Re: ROS 7.0beta5 mark based routing BOOTLOOP

You should look at the article again, it explains everything: The same example as in the manual with plugged in your table name and gateway /routing table add name=to_WAN1 fib /ip route add dst-address=0.0.0.0/0 gateway=192.168.1.1@main routing-table=to_WAN1 Hope you will figure out how to change va...
by mrz
Thu Nov 05, 2020 12:14 pm
Forum: RouterOS v7 BETA
Topic: ROS 7.0beta5 mark based routing BOOTLOOP
Replies: 11
Views: 4579

Re: ROS 7.0beta5 mark based routing BOOTLOOP

routing-marks can be used the same way as it was in v6, with one difference, you need to add table first in /routing table menu.
This is mentioned in the first sentence:
https://help.mikrotik.com/docs/display/ ... icyRouting
by mrz
Tue Nov 03, 2020 4:24 pm
Forum: Announcements
Topic: v6.46.8 [long-term] is released!
Replies: 38
Views: 16123

Re: v6.46.8 [long-term] is released!

Hey guys. I could be wrong, but it seems that DOH is unavailable on this release. Could you please check this? Thanks. Of course it is not available, in v6.46.x because it was implemented only in v6.47 MAJOR CHANGES IN v6.47: ---------------------- !) dns - added client side support for DNS over HT...
by mrz
Mon Nov 02, 2020 1:12 pm
Forum: RouterOS v7 BETA
Topic: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334
Replies: 9
Views: 5816

Re: DS-Lite (dual stack lite) internet connection as defined in RFCs 6333 and 6334

You can get received attributes and their values by accessing "options" variable on script event.
Example on how to use script on DHCP event and access variables can be seen here:
https://wiki.mikrotik.com/wiki/Manual:I ... pt_example
by mrz
Mon Nov 02, 2020 1:05 pm
Forum: General
Topic: OpenVPN 2.5.0 Upgrade
Replies: 4
Views: 929

Re: OpenVPN 2.5.0 Upgrade

BF-CBC is not the only cipher that ROS supports, so I do not see any reason why you should not be able to connect to new server with disabled BF.
by mrz
Wed Oct 21, 2020 1:38 pm
Forum: General
Topic: Mikrotik CCR as Console server for cisco ?
Replies: 6
Views: 596

Re: Mikrotik CCR as Console server for cisco ?

I have used to connect from MT router to connect to Cisco serial port. Works fine.
by mrz
Fri Oct 16, 2020 5:05 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 107762

Re: v7.1beta2 [development] is released!

From v7 changelog:
-) Winbox does not show all features, use CLI for most functionality
by mrz
Fri Oct 16, 2020 2:54 pm
Forum: General
Topic: PHP APi Connection
Replies: 16
Views: 1571

Re: PHP APi Connection

there is no need to send /login again with md5 hash
by mrz
Fri Oct 16, 2020 2:31 pm
Forum: General
Topic: PHP APi Connection
Replies: 16
Views: 1571

Re: PHP APi Connection

as described in the link I provided.

send /login =name= =password= in first message
by mrz
Fri Oct 16, 2020 2:10 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 107762

Re: v7.1beta2 [development] is released!

OVPN over UDP works great for me on CHR I did notice when I try to add a routing mark I cant type any New Routeing Mark , It only have one option and that is to choose main, Probably this will help you to set up routing tables: https://help.mikrotik.com/docs/display/ROS/ROSv7+Basic+Routing+Examples...
by mrz
Fri Oct 16, 2020 2:00 pm
Forum: General
Topic: PHP APi Connection
Replies: 16
Views: 1571

Re: PHP APi Connection

https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

see notes in login process post-v6.43
by mrz
Thu Oct 15, 2020 10:40 am
Forum: Forwarding Protocols
Topic: OSPF2 network-type
Replies: 5
Views: 859

Re: OSPF2 network-type

In RouterOS v6 only network type that works without multicast is NBMA.
by mrz
Thu Oct 15, 2020 10:39 am
Forum: Forwarding Protocols
Topic: Default Route forwarding via eBGP
Replies: 4
Views: 838

Re: Default Route forwarding via eBGP

Default route is special case, you will need to enable default-originate on all routers along the path to advertise default route.
by mrz
Tue Oct 13, 2020 3:53 pm
Forum: RouterOS v7 BETA
Topic: how to understand routi9ng in v7
Replies: 7
Views: 1458

Re: how to understand routi9ng in v7

I know my VPN tunnel,s are workjing as i can access the hosts behind then from the ROSv7 device itself fine.. I can ping the hosts from a laptop just no access.. it seems something in this wierd routin g method is causing me issues.. my /ip route i nthe gUI changes all the time.. If ping works and ...
by mrz
Tue Oct 13, 2020 8:13 am
Forum: Forwarding Protocols
Topic: Graceful restart
Replies: 7
Views: 3886

Re: Graceful restart

Yes, in ROSv7.
by mrz
Mon Oct 12, 2020 5:11 pm
Forum: General
Topic: BGP Filter by communities
Replies: 3
Views: 465

Re: BGP Filter by communities

/routing filter
 add  chain=<Your_out_chain> prefix=<your_prefix> set-bgp-communities=174:970
by mrz
Mon Oct 12, 2020 4:25 pm
Forum: General
Topic: BGP Filter by communities
Replies: 3
Views: 465

Re: BGP Filter by communities

According to docs you should be advertising with 174:970 community.
by mrz
Fri Oct 09, 2020 2:29 pm
Forum: General
Topic: ECMP balancing sometimes breaks TCP connection
Replies: 9
Views: 860

Re: ECMP balancing sometimes breaks TCP connection

Don't trust anything written in the forum, wiki has correct answer :))
by mrz
Mon Oct 05, 2020 3:42 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 1436

Re: VRF status with RouterOS v7

Since we now have IPv6 VRF support, I do not see the reason why not.
by mrz
Mon Oct 05, 2020 1:46 pm
Forum: Scripting
Topic: Torrent blocking working in y2020
Replies: 34
Views: 12098

Re: Torrent blocking working in y2020

The Torrent system on it's own is not illegal.
Downloading copyrighted content is illegal.
by mrz
Mon Oct 05, 2020 1:31 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 1436

Re: VRF status with RouterOS v7

Yes of course, it will be implemented.
by mrz
Mon Oct 05, 2020 1:30 pm
Forum: Forwarding Protocols
Topic: OSPF / PTMP no subnets
Replies: 5
Views: 1003

Re: OSPF / PTMP no subnets

You use PtMP on non broadcast networks where hosts in the same L2 network cannot reach each other directly.
by mrz
Thu Oct 01, 2020 1:23 pm
Forum: RouterOS v7 BETA
Topic: fq_codel or cake in v7
Replies: 66
Views: 24926

Re: fq_codel or cake in v7

++1
by mrz
Thu Sep 24, 2020 3:00 pm
Forum: General
Topic: Re-sorting mangle rules order [SOLVED]
Replies: 1
Views: 481

Re: Re-sorting mangle rules order [SOLVED]

From terminal use "move" command
Or winbox drag and drop
by mrz
Wed Sep 23, 2020 3:31 pm
Forum: General
Topic: IPv6 Routing Mark in Firewall > Mangle Rules
Replies: 57
Views: 16193

Re: IPv6 Routing Mark in Firewall > Mangle Rules

Already supported in v7 beta
by mrz
Tue Sep 22, 2020 12:25 pm
Forum: General
Topic: Ripple20 - Treck stack vulnerabilities
Replies: 6
Views: 1403

Re: Ripple20 - Treck stack vulnerabilities

MT products are safe against Ripple20. And we do not use Treck IP stack anywhere.
by mrz
Mon Sep 21, 2020 6:26 pm
Forum: Scripting
Topic: Export over api differs from export over terminal [SOLVED]
Replies: 5
Views: 802

Re: Export over api differs from export over terminal [SOLVED]

It is not the lib problem. Unfortunately at the moment API behaves like this.
by mrz
Thu Sep 17, 2020 2:38 pm
Forum: Forwarding Protocols
Topic: unable to delete/rename default bgp
Replies: 3
Views: 794

Re: unable to delete/rename default bgp

Items are hard coded if other default configuration might depend on existence of such items.
by mrz
Thu Sep 17, 2020 10:49 am
Forum: Forwarding Protocols
Topic: unable to delete/rename default bgp
Replies: 3
Views: 794

Re: unable to delete/rename default bgp

Default items cannot be renamed or deleted.
If you want your custom instances then add new ones and disable default.
by mrz
Tue Sep 15, 2020 10:00 am
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 107762

Re: v7.1beta2 [development] is released!

What kind of weirdness? Known issue is that ospf route can appear twice in routing table.
by mrz
Mon Sep 14, 2020 4:08 pm
Forum: General
Topic: IPv6, No routing to default gateway possible on my CHR
Replies: 2
Views: 465

Re: IPv6, No routing to default gateway possible on my CHR

Adjust scopes, default route will not be able to recursively resolve the gateway if scopes and target scopes are exactly the same as values of route over which you want to resolve
https://wiki.mikrotik.com/wiki/Manual:I ... hop_lookup
by mrz
Mon Sep 14, 2020 12:00 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 1436

Re: VRF status with RouterOS v7

You cannot find those parameters because VPNv4 is not implemented yet.
by mrz
Thu Sep 10, 2020 9:52 am
Forum: RouterOS v7 BETA
Topic: IGMP-Proxy missing in v7.1beta2?
Replies: 2
Views: 860

Re: IGMP-Proxy missing in v7.1beta2?

There is no multicast package, it is now part of system package, however IGMP-Proxy is not available in ROSv7 at the moment.
by mrz
Wed Sep 09, 2020 3:24 pm
Forum: General
Topic: Migration of CA
Replies: 11
Views: 1141

Re: Migration of CA

ROS also supports automatic certificate enrolment protocol (check SCEP) so for large amount of clients it can be used.
by mrz
Wed Sep 09, 2020 2:29 pm
Forum: General
Topic: IPv6 routing
Replies: 2
Views: 500

Re: IPv6 routing

You can assign /128 address from /112 subnet on the server and route to to destination using link-local gateways
by mrz
Wed Sep 09, 2020 11:24 am
Forum: Scripting
Topic: dhcpv6-client receive dns name from options
Replies: 7
Views: 798

Re: dhcpv6-client receive dns name from options

In dhcp clients script you can get options variable, which contains array of all received options. So you can extract option 40 with ($options->"40")
by mrz
Mon Sep 07, 2020 2:07 pm
Forum: General
Topic: Migration of CA
Replies: 11
Views: 1141

Re: Migration of CA

You cannot load backups between different type of devices, there may be unexpected results.
And even if backup loads, after loading config you will still need to decrypt private keys with passphrase. It is made that way for security reasons.
by mrz
Mon Sep 07, 2020 9:16 am
Forum: Forwarding Protocols
Topic: BGP Blackhole not working
Replies: 4
Views: 1822

Re: BGP Blackhole not working

Winbox already lists only unicast and unreachable for IPv6 routes the same as CLI.
by mrz
Mon Sep 07, 2020 9:14 am
Forum: RouterOS v7 BETA
Topic: Gateway State is "unreachable" in RouterOS 7
Replies: 1
Views: 814

Re: Gateway State is "unreachable" in RouterOS 7

There is no ip/nexthop menu in ROS v7.
Instead you can check forwarding path: /routing/forwarding-path/print
by mrz
Fri Sep 04, 2020 4:34 pm
Forum: General
Topic: New router (CCR2004-1G-12S+2XS) - can't set up LAN
Replies: 12
Views: 1184

Re: New router (CCR2004-1G-12S+2XS) - can't set up LAN

It is possible that public IP subnet is actually routed to you over local addresses. But only ISP can give you definite answer.
by mrz
Fri Sep 04, 2020 1:44 pm
Forum: Forwarding Protocols
Topic: BFD Open port on default conf
Replies: 5
Views: 2652

Re: BFD Open port on default conf

You can set raw rules to accept packets from known destinations.
by mrz
Fri Sep 04, 2020 12:57 pm
Forum: RouterOS v7 BETA
Topic: Feature request : Ping check Gateway
Replies: 2
Views: 622

Re: Feature request : Ping check Gateway

You can do this recursively.
viewtopic.php?t=157048
by mrz
Fri Sep 04, 2020 12:00 pm
Forum: General
Topic: Disable ICMP From Outside
Replies: 5
Views: 577

Re: Disable ICMP From Outside

Of course it will drop incoming ICMP packets because you added rule to drop all incoming ICMP packets.
Read the article I provided earlier to at least understand the basics of how to set up firewall rules.
by mrz
Thu Sep 03, 2020 1:11 pm
Forum: General
Topic: Disable ICMP From Outside
Replies: 5
Views: 577

Re: Disable ICMP From Outside

See basic firewall examples in the manual:
https://help.mikrotik.com/docs/display/ ... gtheRouter
by mrz
Tue Sep 01, 2020 11:51 am
Forum: General
Topic: BGP spamming updates
Replies: 5
Views: 706

Re: BGP spamming updates

Since there is not a lot of info provided. I assume you are trying to advertise probably some connected or maybe other IGP routes which are flapping in routing table. My suggestion would be to add prefix that you want to advertise in BGP networks without synchronize, disable all redistribute-xx in b...
by mrz
Mon Aug 31, 2020 3:03 pm
Forum: Forwarding Protocols
Topic: using prefix lists in bgp filters [SOLVED]
Replies: 2
Views: 1185

Re: using prefix lists in bgp filters [SOLVED]

Your mentioned Prefix list is used only for RIP. There is no functionality in ROSv6 to specify list of prefixes in one filter rule.

However there is a plan to implement use of address lists in ROSv7
by mrz
Mon Aug 31, 2020 2:42 pm
Forum: RouterOS v7 BETA
Topic: IPv6 Mangle routing-mark?
Replies: 2
Views: 871

Re: IPv6 Mangle routing-mark?

Works as expected, note that routing table should be able to add routes in FIB: [admin@MikroTik] /routing/table> add name=test fib [admin@MikroTik] /routing/table> /ipv6/firewall/mangle [admin@MikroTik] /ipv6/firewall/mangle> add action=mark-routing new-routing-mark=test chain: input [admin@MikroTik...
by mrz
Mon Aug 31, 2020 2:34 pm
Forum: RouterOS v7 BETA
Topic: v7.1 recursive routes
Replies: 3
Views: 1714

Re: v7.1 recursive routes

Adjust scopes correctly.
/ip route
add dst-address=9.9.9.9/32 gateway=192.168.1.1 scope=11 target-scope=10
add gateway=9.9.9.9 target-scope=11
by mrz
Tue Aug 18, 2020 9:39 am
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 5949

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

Now again, look at this line from the manual (character by character)
/ip route add dst-address=8.8.8.8 gateway=172.16.1.1@main routing-table=myTable
And compare to what you are trying to set

Hint (again from the manual):
(as per user requests v7.0beta9 adds back 'routing-table' parameter)
by mrz
Mon Aug 17, 2020 10:58 am
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 5949

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

!!!!!!
/routing table add name=IRT-TEST fib
!!!!!
by mrz
Mon Aug 17, 2020 10:57 am
Forum: Forwarding Protocols
Topic: BGP - Convert origin ‘egp’ to ‘igp’ [SOLVED]
Replies: 3
Views: 1408

Re: BGP - Convert origin ‘egp’ to ‘igp’ [SOLVED]

In ROSv6 it is not possible, but v7 has some new filter features including origin change.
by mrz
Mon Aug 17, 2020 10:55 am
Forum: Forwarding Protocols
Topic: Only one route active with 3 BGP peers [SOLVED]
Replies: 1
Views: 1274

Re: Only one route active with 3 BGP peers [SOLVED]

Because BGP is designed to use only one best path by default.
by mrz
Thu Aug 13, 2020 9:48 am
Forum: Scripting
Topic: Problems when parsing routing table and prefixes change
Replies: 1
Views: 541

Re: Problems when parsing routing table and prefixes change

Find returns array of route ids that were matched by criteria (this can take some time if table is large) Foreach then goes through returned array which also takes time if array is very large. And if routing table changed after find returned the result you may get unexpected results. If route was re...
by mrz
Wed Aug 12, 2020 11:16 am
Forum: Scripting
Topic: Python API doesn't connect
Replies: 2
Views: 859

Re: Python API doesn't connect

If port is open, check this working Python client:
https://wiki.mikrotik.com/wiki/Manual:API_Python3
by mrz
Thu Aug 06, 2020 10:28 am
Forum: Scripting
Topic: help getting id in python api
Replies: 3
Views: 1368

Re: help getting id in python api

NatRule.get(comment=RDP')[0]["id"]
by mrz
Mon Aug 03, 2020 10:01 am
Forum: Scripting
Topic: API Links
Replies: 141
Views: 116392

Re: API Links

API does not support such feature. You can only use queries to filter returned items by specific criteria, but no paging.
by mrz
Fri Jul 31, 2020 9:11 am
Forum: General
Topic: something wrong on the wiki
Replies: 6
Views: 1562

Re: something wrong on the wiki

Yes should be correct,
by mrz
Fri Jul 31, 2020 9:09 am
Forum: RouterOS v7 BETA
Topic: CCR and RouterOS V7.1. BGP very slowly.
Replies: 3
Views: 1795

Re: CCR and RouterOS V7.1. BGP very slowly.

Please contact support, we will investigate why it is so slow on your router.
by mrz
Thu Jul 30, 2020 5:17 pm
Forum: Forwarding Protocols
Topic: VRF Interface Limit
Replies: 14
Views: 4543

Re: VRF Interface Limit

Not really but almost. Total amount of tables is limited to 65k (this is including policy routing tables and vrfs in total).
by mrz
Thu Jul 30, 2020 4:39 pm
Forum: General
Topic: something wrong on the wiki
Replies: 6
Views: 1562

Re: something wrong on the wiki

192.168.0.0/16 was added by mistake.
Also fixed title form IPv4 to Ipv6.
by mrz
Thu Jul 30, 2020 8:59 am
Forum: Forwarding Protocols
Topic: VRF Interface Limit
Replies: 14
Views: 4543

Re: VRF Interface Limit

v7beta does not have this limit.
by mrz
Tue Jul 28, 2020 1:59 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 2086

Re: winbox interface too small

No, session is saved, next time you connect to the router zoom is restored from saved session.
by mrz
Tue Jul 28, 2020 1:57 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 2086

Re: winbox interface too small

Settings->Zoom-in
by mrz
Mon Jul 27, 2020 2:09 pm
Forum: RouterOS v7 BETA
Topic: /ip/route/check command disappeared?
Replies: 5
Views: 2291

Re: /ip/route/check command disappeared?

You can get route that resolves specified destination: /ip route print detail where x.x.x.x in dst-address and active DAd dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=10.155.101.1 immediate-gw=10.155.101.1%bridge type=unicast distance=1 scope=30 target-scope=10 From there y...
by mrz
Mon Jul 27, 2020 12:33 pm
Forum: RouterOS v7 BETA
Topic: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]
Replies: 4
Views: 1745

Re: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]

You are asking to add feature for v6 in v7beta forum? :D

An to answer the question, no v6 will not have ipv6 policy routing support.
by mrz
Mon Jul 27, 2020 11:08 am
Forum: RouterOS v7 BETA
Topic: BGP inside VRFs
Replies: 4
Views: 2040

Re: BGP inside VRFs

Yes, at the moment BGP in VRF does not work, we will try to make it work until next beta release.
by mrz
Mon Jul 27, 2020 10:34 am
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3460

Re: ROSv7b8 and RPKI

Hello, Which RFC you are referring to? If you mean something like this: https://rpki.readthedocs.io/en/latest/about/faq.html#what-if-the-rpki-system-becomes-unavailable-or-some-other-catastrophe-occurs-will-my-signed-prefixes-become-unreachable-to-others-will-other-prefixes-my-routers-learned-over-b...
by mrz
Mon Jul 27, 2020 10:06 am
Forum: Virtualization
Topic: MetaRouter removed ???
Replies: 1
Views: 1573

Re: MetaRouter removed ???

Metarouter is supported only on single core mips devices.
by mrz
Mon Jul 27, 2020 10:02 am
Forum: Scripting
Topic: Loop through submenus [SOLVED]
Replies: 3
Views: 1263

Re: Loop through submenus [SOLVED]

No, you cannot use variable values as menu names or parameter/variable names.

One workaround is to use :parse
by mrz
Mon Jul 27, 2020 9:59 am
Forum: RouterOS v7 BETA
Topic: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]
Replies: 4
Views: 1745

Re: [FEATURE REQUEST] IPv6 Route Rules [SOLVED]

How to use routing rules in v7 is described here:
https://help.mikrotik.com/docs/display/ ... icyRouting

Rules work for both ipv4 and ipv6.
by mrz
Mon Jul 27, 2020 9:58 am
Forum: RouterOS v7 BETA
Topic: /ip/route/check command disappeared?
Replies: 5
Views: 2291

Re: /ip/route/check command disappeared?

Check is not implemented in ROS v7.
What does check give you that "/routing route print" does not?
by mrz
Thu Jul 23, 2020 5:15 pm
Forum: RouterOS v7 BETA
Topic: OSPF routes marked invalid
Replies: 8
Views: 2496

Re: OSPF routes marked invalid

FYI problem is only on P2P interfaces (not ospf interface type but actual P2P interfaces like l2tp etc. )
We will fix the problem as soon as possible.
by mrz
Wed Jul 22, 2020 4:51 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 46033

Re: v7.1beta1 [development] is released!

Show output of
/routing/route/print detail
by mrz
Wed Jul 22, 2020 3:00 pm
Forum: RouterOS v7 BETA
Topic: OSPF routes marked invalid
Replies: 8
Views: 2496

Re: OSPF routes marked invalid

Does it start to work if you change interface type from point-to-point to broadcast?
by mrz
Wed Jul 22, 2020 12:40 pm
Forum: General
Topic: Slow ovpn cpu 100%
Replies: 5
Views: 1176

Re: Slow ovpn cpu 100%

Single core on ARMs (CCR2004 or RB4011) has a bit better single core performance, but do not expect magic. You will still not be able to do 600 / 600Mbs over OVPN.
by mrz
Wed Jul 22, 2020 10:58 am
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 46033

Re: v7.1beta1 [development] is released!

CRS317 supports up to 4096 NAT entries. To clarify it is not about how many rules you have, but how many connections can be offloaded.
by mrz
Wed Jul 22, 2020 10:34 am
Forum: General
Topic: Slow ovpn cpu 100%
Replies: 5
Views: 1176

Re: Slow ovpn cpu 100%

One CCR core can encrypt/decrypt ~150Mbps, one tunnel is tied to one core, so it sounds about right.

If you want faster tunnel use ipsec which can use HW acceleration.
by mrz
Wed Jul 22, 2020 10:01 am
Forum: RouterOS v7 BETA
Topic: Enable BGP on ROSv7
Replies: 14
Views: 5341

Re: Enable BGP on ROSv7

Be more specific what exactly is not working.
by mrz
Wed Jul 22, 2020 9:41 am
Forum: RouterOS v7 BETA
Topic: IPv6 BGP routes unreachable [SOLVED]
Replies: 4
Views: 2459

Re: IPv6 BGP routes unreachable [SOLVED]

Please contact support. Add supout file and packet dump to see what exactly that edge router is sending.
by mrz
Tue Jul 21, 2020 9:48 am
Forum: Forwarding Protocols
Topic: Balanced ECMP on IPv6
Replies: 3
Views: 1547

Re: Balanced ECMP on IPv6

RouterOS v6 does not support IPv6 ECMP.

This feature is implemented in ROS v7 beta.
by mrz
Mon Jul 20, 2020 12:48 pm
Forum: RouterOS v7 BETA
Topic: CRS317 routing speed with pppoe and L3 offloading
Replies: 6
Views: 1932

Re: CRS317 routing speed with pppoe and L3 offloading

BTW CRS317 CPU has enough power to handle 1Gbps PPPOE traffic, probably on the edge but should handle it.
by mrz
Mon Jul 20, 2020 10:23 am
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

in routing filter the is a bug! i created two chain: in-v4 and out-v4 Going in templates, the two chain are allowed to be chossen by input.filter but not by out put filter [admin@test-100G] /routing/bgp/template> set 0 input.filter= in-v4 out-v4 Output requires selection rules: /routing filter rule...
by mrz
Mon Jul 20, 2020 10:12 am
Forum: RouterOS v7 BETA
Topic: CRS317 routing speed with pppoe and L3 offloading
Replies: 6
Views: 1932

Re: CRS317 routing speed with pppoe and L3 offloading

L3 offload will not work with pppoe.
by mrz
Tue Jul 14, 2020 2:26 pm
Forum: General
Topic: CHR + AWS + IPv6
Replies: 16
Views: 3517

Re: CHR + AWS + IPv6

fe80::430:xxxxxxxxxx%ether1-WAN is link local address and it should be reachable unless blocked by service provider.
You can always disable "add-default-route" in dhcp settings and add static one.
by mrz
Mon Jul 13, 2020 9:51 am
Forum: RouterOS v7 BETA
Topic: OSPF problems
Replies: 4
Views: 2565

Re: OSPF problems

Please contact support with attached supout files. And at the moment do not use winbox for any tasks related to routing protocols.
by mrz
Wed Jul 08, 2020 1:52 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

Hi there, Just wondering if anyone is successfully using BFD as a gateway check on a static route? I am assuming this can be configured as a standalone option (as in, does not require BGP or other protocols as well) but packet captures show no BFD packets are sent (RB1100). Packet captures shows BF...
by mrz
Tue Jul 07, 2020 11:06 am
Forum: Forwarding Protocols
Topic: Mikrotik L2TPV3
Replies: 11
Views: 6997

Re: Mikrotik L2TPV3

Could you please tell me - are there any plans for implementing of any other multi-vendor EOIP capable technology? i.e. vxlan/gretap
VXLAN is already supported in ROSv7
by mrz
Tue Jun 30, 2020 3:47 pm
Forum: Forwarding Protocols
Topic: BGP Ram useage?
Replies: 3
Views: 1072

Re: BGP Ram useage?

1Million routes can easily fit in 256MB of RAM, so what you have told is not true. Not to mention that SD card cannot be used to extend RAM.
by mrz
Tue Jun 30, 2020 3:44 pm
Forum: Beginner Basics
Topic: fw does not drop winbox mac-telnet [SOLVED]
Replies: 8
Views: 1856

Re: fw does not drop winbox mac-telnet [SOLVED]

See packet flow diagram
https://wiki.mikrotik.com/wiki/Manual:Packet_Flow

mac telnet is not layer3 connection, so from in-interface it goes directly to local-in
by mrz
Tue Jun 30, 2020 10:00 am
Forum: Beginner Basics
Topic: DHCP relay
Replies: 5
Views: 1186

Re: DHCP relay

RFC already describes scenario when it should be used: "Relay Agent Information option is inserted by the DHCP relay agent when forwarding client-originated DHCP packets to a DHCP server. Servers recognizing the Relay Agent Information option may use the information to implement IP address or o...
by mrz
Mon Jun 29, 2020 4:24 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

It would be like asking MikroTik to make QUIC available. It is already available. Well, RouterOS can be client as well, so for example fetch command could benefit. It's not a big win there, though. It's probably not only the RouterOS traffic alone that would benefit from MPTCP. If one uses a WAN up...
by mrz
Mon Jun 29, 2020 2:50 pm
Forum: Beginner Basics
Topic: DHCP relay
Replies: 5
Views: 1186

Re: DHCP relay

by mrz
Fri Jun 26, 2020 12:14 pm
Forum: General
Topic: Multiple Road Warrior L2TP/IPsec clients behind NAT - solved
Replies: 73
Views: 44208

Re: Multiple Road Warrior L2TP/IPsec clients behind NAT - solved

Post ipsec policies and installed SAs from version where it works and from version where it does not. Multiple l2tp/ipsec connections behind one NAT router will work if at least one of the following conditions apply: *) each client gets NATed behind unique public IP address; *) each client uses uniq...
by mrz
Fri Jun 19, 2020 1:53 pm
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3460

Re: ROSv7b8 and RPKI

I can confirm the problem, we are looking into it.
by mrz
Thu Jun 18, 2020 10:08 am
Forum: RouterOS v7 BETA
Topic: ROSv7b8 and RPKI
Replies: 10
Views: 3460

Re: ROSv7b8 and RPKI

@schadom What was your setup? Which validator were you using? With all of the cries out on the forums for RPKI, I find it hard to believe that we are the only two people to have tested this? Post the rules that is not working. Did you run through verify rule with (rpki-verify=xxx) before trying to ...
by mrz
Tue Jun 16, 2020 12:52 pm
Forum: RouterOS v7 BETA
Topic: Mark Routing & IP Route in v7.0beta8
Replies: 4
Views: 1928

Re: Mark Routing & IP Route in v7.0beta8

@pe1chl In that example replace this: /routing rule add dst-address=8.8.8.8 action=lookup-only-in-table table=myTable with this (the same rule as you would use in ROSv6): /ip firewall mangle add chain=prerouting dst-address=8.8.8.8 action=mark-routing new-routing-mark=myTable As stated in the manual...
by mrz
Mon Jun 15, 2020 1:11 pm
Forum: Scripting
Topic: Script for If enivorment = then do
Replies: 14
Views: 2669

Re: Script for If enivorment = then do

Variable name contains arithmetic character. I would suggest to avoid creating such variable names, but if you still do then remember that such names must be always in double quotes, like in this example:
:global "not-good-var-name" "x"
:put $"not-good-var-name"
by mrz
Fri Jun 12, 2020 9:05 am
Forum: Forwarding Protocols
Topic: OSPF issue
Replies: 1
Views: 766

Re: OSPF issue

You have to adjust interface costs on all links along available path.
by mrz
Fri Jun 12, 2020 9:03 am
Forum: Forwarding Protocols
Topic: MPLS forwarding table issue
Replies: 2
Views: 982

Re: MPLS forwarding table issue

ECMP is not supported, MPLS will use only one path
by mrz
Wed Jun 10, 2020 8:31 am
Forum: Forwarding Protocols
Topic: [SOLVED] BGP Route Filters match-chain not working
Replies: 5
Views: 1806

Re: BGP Route Filters match-chain not working

chain returns true only if action=accept. If you set action discard in match chain it will never return true, Discard in this case means discard prefix from match chain. To translate your rules: * chain ASTEROID-IN-v4 gets prefix with AS 6939 * rule nr.2 sends pefix to be matched in DISCARD-UNWANTED...
by mrz
Tue Jun 09, 2020 2:02 pm
Forum: Forwarding Protocols
Topic: [SOLVED] BGP Route Filters match-chain not working
Replies: 5
Views: 1806

Re: BGP Route Filters match-chain not working

@alex
it does not work that way. match-chain is the name of the chain which is used to evaluate the route. If the chain accepts the route, 'match-chain' property produces a true match
by mrz
Tue Jun 09, 2020 8:42 am
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4552

Re: ROSv7 documentation/ config guides

and if you added the network to advertise to the networks list as passive you would get a regular type 2 or 3 LSA V7 is the same, if you add network it is advertised as type2 or 3 LSA Passive and authentication parameters are there but not working at te moment, so it will not be a step back. BTW we...
by mrz
Mon Jun 08, 2020 4:36 pm
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4552

Re: ROSv7 documentation/ config guides

Some basic stuff to start with ROSv7 routing config:
https://help.mikrotik.com/docs/display/ ... g+Examples
by mrz
Sat Jun 06, 2020 6:32 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

IP Acccounting is deprecated and removed from ROS v7. What do I use then to get traffic data from each client that I do use in Splunk for MikroTik? SNMP is not an option. Script will then fail 100% if some do an upgrade to 7.x, since on-error seem to not handle this situation. . On-error catches on...
by mrz
Fri Jun 05, 2020 10:59 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

IP Acccounting is deprecated and removed from ROS v7.
by mrz
Fri Jun 05, 2020 9:11 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

Where is CAKE?!?!?!?

Literally everyone expects it, yet there's nothing about it from mikrotik..

Kind of pathetic on their part tbh.
You can find cakes here:
https://majaskukas.lv/
Even trendy gluten free ones, which probably you like the most.
by mrz
Fri Jun 05, 2020 9:03 pm
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4552

Re: ROSv7 documentation/ config guides

There is no equivalent. If you did not specify output filter chain in the templae, then all routes from the routing table is being advertised.
If you specify output chain then by default chain blocks everything. You need to configure filters to accept prefixes you want to advertise from routing table.
by mrz
Fri Jun 05, 2020 1:43 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

Those parameters are subject to change, so no manual for now.
by mrz
Fri Jun 05, 2020 12:28 am
Forum: RouterOS v7 BETA
Topic: ROSv7 documentation/ config guides
Replies: 14
Views: 4552

Re: ROSv7 documentation/ config guides

At the moment there is none because configuration can and probably will change.

What exactly you were not able to set up?
by mrz
Thu Jun 04, 2020 5:28 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

@pe1chl this message typically will appear when there is no local address set or not piicked automatically.
by mrz
Thu Jun 04, 2020 5:22 pm
Forum: RouterBOARD hardware
Topic: ARP TABLE ENTY FROM AN INTERFACE DISABLED
Replies: 1
Views: 660

Re: ARP TABLE ENTY FROM AN INTERFACE DISABLED

That is static entry that you have added. If you dont like it remove it.
by mrz
Thu Jun 04, 2020 5:05 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 73443

Re: v7.0beta8 [development] is released!

IPv6 works a lot better in v7, ipv6 policy routing and ECMP coming soon
by mrz
Thu Jun 04, 2020 5:00 pm
Forum: General
Topic: RPKI
Replies: 48
Views: 15924

Re: RPKI

Yes,
RouterOS implements RTR client. You connect to the server which will send route validity information.
This informaton can be used to validate routes in route filters against group with "rpki-validate".
ANd then further in filters "match-rpki" can be used to match exact state.
by mrz
Thu Jun 04, 2020 4:49 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 5949

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

/routing table add name=IRT-TEST fib /ip route add dst-address=0.0.0.0/0@IRT-TEST gateway=10.10.54.161@main check-gateway=ping distance=10 add check-gateway=ping distance=10 dst-address=1.1.1.1/32 gateway=10.10.54.145 /routing rule add dst-address=8.8.8.8 action=lookup table=IRT-TEST firewall the s...
by mrz
Thu Jun 04, 2020 3:47 pm
Forum: RouterOS v7 BETA
Topic: routing-mark and table and mangle in RouterOS v7 BETA 7
Replies: 15
Views: 5949

Re: routing-mark and table and mangle in RouterOS v7 BETA 7

First add table in /routing table menu

THen you can add routing rules in /routing rule menu

and routes in specific table
/ip route add dst-address=x.x.x.x@table gateway=y.y.y.y@main
by mrz
Fri May 29, 2020 9:28 am
Forum: General
Topic: API for C#
Replies: 3
Views: 1166

Re: API for C#

In the same topic look at "Class with SSL support", it has new authentication method.
by mrz
Mon May 18, 2020 10:04 am
Forum: RouterOS v7 BETA
Topic: beta5: Is this an error in the script parser? [SOLVED]
Replies: 2
Views: 1839

Re: beta5: Is this an error in the script parser? [SOLVED]

First you are trying to use undeclared variable gArr Then you are declaring global variable with the same name in 'if' scope. I assume that you want to access already existing global variable and if it does not exist or is empty then add first entry, in that case script should look something like th...
by mrz
Wed May 13, 2020 8:04 pm
Forum: RouterOS v7 BETA
Topic: beta5: script parser error [SOLVED]
Replies: 2
Views: 1627

Re: beta5: script parser error [SOLVED]

It is not related to beta version and as far as I know never supposed to work. What you are doing in script is run first loop which returns internal id (for example *1 for ether1) In next loop you are trying to find IP address with interface equal to "*1", obviously it will fail because th...
by mrz
Mon Apr 27, 2020 10:14 am
Forum: Forwarding Protocols
Topic: OSPF disabling all ports on 'state change from Full to Down'
Replies: 12
Views: 5067

Re: OSPF disabling all ports on 'state change from Full to Down'

CCR does not work correctly with half duplex links, it is hardware limitation. For interface not to hang completely it is occasionally flapped. Regarding RB3011, if switch group is overloaded it will reset the switch group One workaround is: /interface ethernet switch set switch1,switch2 cpu-flow-co...
by mrz
Tue Apr 21, 2020 1:33 pm
Forum: RouterOS v7 BETA
Topic: FEATURE REQUEST: Add Basic Firewall Rule Wizard
Replies: 71
Views: 17000

Re: FEATURE REQUEST: Add Basic Firewall Rule Wizard

Very similar to default config is described in first time configuration
https://help.mikrotik.com/docs/display/ ... gtheRouter
"ProtectingtheRouter" and "ProtectingtheClient" sections
  • 1
  • 2
  • 3
  • 4
  • 5
  • 21