I got static IP set for client, client gets the IP, firewall accept rule counters are incrementing but data is not forwarded nor replied over tunnel. Only solution was to switch to TCP based tunnel.

Hi team, I just upgraded from 7.9.x to 7.10.1 and noticed that my OpenVPN connection is coming up (IP is properly received by the client), but there is no connectivity over tunnel. No configuration change was made, nothing is blocked by firewall, MTU is set to 1300 bytes and was working perfectly fi...

6.45.2 on my cAP AC is total crap. I'm loosing MGMT access few minutes after power cycling the unit. I did downgrade to 6.44.5 but it was still working as badly as before - I had to downgrade the firmware too to finally have a stable device.

Guys, can every single one of you send an email to support@mikrotik.com and open a case with them ? Otherwise Mikrotik guys won’t acknowledge this problem and none of them would work on this until official tickets are assigned. Seems Mikrotik guys are treating this forum more like courtesy exchange ...

Apparently Mikrotik is not willing to admit they have an issue with new Apple devices (iPhone XS, iPhone XS Max, iPad Pro 2018) and are playing dummies. I haven’t got any reply to my opened ticket with Mikrotik even tough I have delivered them data from sniffed wireless traffic. It is not my job to ...

Mikrotik,

is there any update on this matter?

Greg

@Scott I guess Nest is not the root cause - it’s just a source of IPv6 addresses in people’s houses/offices. In your scenario your edge router is providing IPv6 addresses and still MT has an issue with forwarding IPv6 dns requests over their 802.11ac interfaces. I haven’t had a single issue with my ...

Hm interesting. Good afternoon Normis. managed to simulate the following. RB3011 IPv4 / IPv6 (SLAAC) -> RB962 2Ghz / 5Ghz (Acces Point) -> iPhone Xs Max iPhone Xs Max works fine on 2Ghz with dual stack. iPhone Xs Max does not work on 5Ghz with dual stack in AC mode. If I turn off IPv6 support on RB...

Normis,

Bare in mind that Nest in this case is just an external factor which arises some bug in MikroTik software, because same setup with my iPhone XS with same IPv6 ULA prefixes coming from Nest is working fine on ASUS router.

Ofer,

It doesn’t matter if you have IPv6 package or not because it is pure layer 2 transmission (like broadcast). Actually having IPv6 package might help with setting up some IPv6 firewall rules

Chupaka,

If client isolation blocks all the multicast traffic between clients then this should also do the job.

Ofer,

If you have only one AP and the firewall is processing bridged packets then blocking ICMPv6 should do the job.

Chupaka,

So what CPE/UE do you have ? This discussion is all about connectivity issues on new Apple CPEs like iPhone XS or 2018 iPad Pro.

Chupaka,

Do you also have Nest in your LAN or any other source of IPv6 ?

Greg

Scott, If you have a proper IPv6 default gateway (your edge router) on your iPhone XS then it would mean that the problem is actually forwarding IPv6 packets on MikroTik’s 802.11ac and has nothing to do with Nest in your office. In my case Nest is the only source of IPv6 in my LAN. Once I got rid of...

Guys, After some more digging I was finally able to discover how do I get in my LAN those weird IPv6 prefixes from. It turned out that my Nest Thermostat is rarely sending IPv6 RAs, offering some IPv6 ULA prefixes, causing my devices to use Nest Thermostat’s ipv6 link-local address as their default ...

Mtik guys,

Maybe we can schedule a session where I’ll give your engineer remote access to my cap AC and will reproduce the issue within minutes.

How about that ?

Greg

Hi Arturs,

my iPhone XS model is :

A2097
MT9N2PM/A

Greg

Netispguy, great, I’m glad it worked for you. First of all, my MikroTik cAP AC is working in pure bridge mode, zero NAT, zero firewall rules so I don’t believe it is NAT related. I’m suspecting the new iPhone XS is sending DNS requests in different manner - maybe the L2 frame has some extra fields f...

Netispguy, thanks for the lecture about IPv6 but I already know that. I’m a system engineer for a large network equipment vendor and I work close with developers - I've seen things people didn't even dream off, so I know what “magic” things can happen under the hood when processing packets (usually ...

Uldis, couple facts that I have observed. Just FYI I'm using "cAP AC" running 6.43.2. - The problem persists even after yesterdays update to iOS 12.1 - I am convinced the problem is in DNS communication (!) - somehow suppressed by Mikrotik cAP AC 802.11ac link - why I think so? - you will ...

I was asked by support person to check if it is an AC or 80MHz wide channel deciding factor. I did test it and in my case it seems the problem exists also on AC 40MHz wide channel.

I did set 802.11A/N with 40MHz channel width as a temporary workaround. I believe I have noticed that connecting iPhone XS via VPN over Mikrotik router on 802.11ac radio also "workarounds" the problem. I cannot prove it as I don't have time for this now, but it seems like some MTU/Packet s...

I have exactly same problem with my iPhoneXS (bought from official european distributor). Problem exists on iOS 12.0 and 12.0.1. My Mikrotik cAP AC is running 6.43.2 - software and firmware, and previously was running one of the recent 6.43 release candidates. This is specific problem of Mikrotik an...

I have exactly same problem with my iPhone XS (bought from official european distributor). Problem exists on iOS 12.0 and 12.0.1. My Mikrotik cAP AC is running 6.43.2 - software and firmware, and previously was running one of the recent 6.43 release candidates. This is specific problem of Mikrotik a...

Hi, This is your max net speed? Can you post your wireless config? Mikrotik SW version? Thanks! Eventually my iPhone X negotiated 866Mbps with my cAP AC and works flawlessly. My SW ver and wireless configuration: -- CUT HERE -- # mar/26/2018 11:30:07 by RouterOS 6.42rc49 # software id = M86M-TALT #...

I've got excellent results on my cAP ac running 6.42rc49. My iPhone X and my MBA 2013 is reaching 300Mbps / 90Mbps easily. My ISP connection is limiting me to go over that. My Samsung TV is connecting with 866Mbps and Netflix 4K works perfect. I'm astonished with the quality/price ratio of this litt...

I've got pretty decent results on my iPhone X over cAP AC. What is interesting for me, my iPhone is connected on 433Mbps link speed. Why not 866 if I got both chains enabled ?

Greg