MikroTik

petertosh

Thanks a lot! I was planing to remove the ether1 on the CPE side, thus making it a router. I have done similar setups on Airmax devices in the GUI, now my plan was to do it on the W60G. I was somehow irritated by the wiki that lacks the station mode for the W60G. But I will try as you write.

petertosh

Hi! At the moment I have connected two LANs (same IP network) via a 60GHz link with a RBwAPG60ad-A and a RBwAPG60ad. This way the wireless link is transparent and L2 crosses the street. Now I would like to divide the network in two different LANs and would like to use the RBwAPG60ad as a router betw...

petertosh

For comparison, rrul test with cake and simple queue disabled. I guess cake is doing its magic (in the tests above).

petertosh

Thank you very much for your work and insights on this forum! I limit each wireless client in order to achieve something like a manual airtime fairness. I guess my APs don't have airtime fairness as this option was removed from the controller some time ago. So I thought, in limiting each client, the...

petertosh

Can you post your queue settings? IMHO this is not enough information. Besides, I found that cake (as others have already said) is quite CPU demanding. My hEX at home is able to use cake in a simple queue as a router up to about 130 MBit download. With fq-codel in the same setup I can achieve 180 MB...

petertosh

After playing around with my homelab and later with the hotspot-router, I found a solution, although I don't understand what exactly the changes do. With this setup I am both able to control the latency of the WAN (both internal and hotspot, waveform bufferbloat test results in A and A+) and reach t...

petertosh

Hi! I am operating a hotspot with about 400 active users max (17 APs, outdoor). WAN is a fibre line with about 260/60 MBit limit. The hotspot users use the ip-pool 192.168.0.0/23. Internal network is on 192.168.177.0/24. The following queues are used to limit each user to about 15/10 MBit/s. The que...

petertosh

I guess the right way is like in this post: viewtopic.php?t=179307#p935980

I reorganized my queues like this and they are working happily.

petertosh

UPDATE: The problem was solved once I configured my CAKE queue types correctly. As long as I had CAKE in simple queue with bandwidth parameter set, I could trigger the packet drop/latency by enabling and disabling the simple queues. I now have the following simple queues for the hotspot and everythi...

petertosh

Thank you for the input, I was not aware of having written a novel. Anyway, here comes my config: # apr/29/2022 08:31:45 by RouterOS 7.1.5 # # model = CCR1009-7G-1C /interface bridge add admin-mac=64:D1:54:D6:02:C5 auto-mac=no fast-forward=no ingress-filtering=no name=bridge1 vlan-filtering=yes /int...

petertosh

I made a strange experience a couple of days ago when I updated my CCR1009-7G-1C-PC from 7.1.5 to 7.2. I updated using winbox and system/packages, router rebooted and came back almost not responsive. Pings to the router were varying wildly in their response time, winbox and writing in terminal were ...

petertosh

Hey, I had a similar experience that I reported in the v7.2-topic: https://forum.mikrotik.com/viewtopic.php?t=184778#p924147 Update from 7.1.5 to 7.2. results in massive packet drop, unresponsive router. The box is a CCR1009, I had dude on it previously, but migrated it to another box before update ...

petertosh

I had a strange experience when I updated my CCR1009-7G-1C from 7.1.5 to 7.2. I updated using winbox and system/packages, router rebooted and came back almost not responsive. Pings to the router were varying wildly in their response time, winbox and terminal commands were extremely slow. It felt lik...

petertosh

Haven't tested it yet, but AFAIK you don't need v7-server to monitor v7-clients. Keep the server on v6.

petertosh

As others have said, the dude works fine on a cheap hEX. Database can be on a USB-stick or USB-SSD. That's the way I decided to keep the dude server.

petertosh

Crossover 21.1 has fixed The Dude

petertosh

Well, bunt not quite such. I can run Winbox64, but Dude client won't start. Mac OS Monterey, Intel Core I7, Crossover 21, Win10 64bit bottle.

It does work if you right click and run with options. See: https://www.codeweavers.com/support/for ... msg=245619

petertosh

Do you use userman for authentification of the users? If yes, how many concurrent sessions do you have at max? I once had the problem that userman was denying more than 20 concurrent sessions while there was a level 4 license on the router. When I upgraded to license level 5 this limit was removed. ...

petertosh

Good that it's working now. I guess in this case the Draytek is removing the VLAN7 tag from the packets.

petertosh

Hi anav, you are right, thank you for the clarification. I am only a "prosumer" aka a consumer who wants to fiddle with his IT and learn from professionals :-)

That's why I would never recommend firewall filter rules.

petertosh

Hey, if the DrayTek works as a bridge and you get packets with VLAN7-tag out of it, you should try this and change it to your config/IPs. This creates a virtual VLAN interface that listens for packets with VLAN7-tag on ether1 (I have such a config working with a Fritz!Box in bridge mode on plain DSL...

petertosh

@bpwl - thank you very much for the reading hint, a rare thorough review of the limits and best practices of high density wlans (and all other wlans, too). I am trying to increase the throughput in my rv park / campsite and have come to similar conclusions as in the guides.

petertosh

Yep, I guess a LHG2 would be overkill in your situation. I have a 160m link with an LHG2 to an UBNT UAC-MESH-PRO but through foliage/trees and got a fast and stable link:

petertosh

While I could use WG on a raspberrypi4, it would be so nice to have it in my CCR1009. Current experience with WG is extremely positive, compared to OpenVPN for LAN-LAN-connections.

petertosh

Some clues here? https://wiki.mikrotik.com/wiki/Manual:P ... ng_details

petertosh

Hm, I only run one 3CX server behind a Mikrotik router, but your nat and filter settings look fine. You did disable the sip alg, did you?

ip firewall service-port disable sip

petertosh

I don't know what changed, but lately the script from above failed to update. This is what I changed it to, it works at the moment: :global currentIP; :local password "XXXXXX"; :local hostname "XXXXXX"; :local tmpIP [/ip address get [find interface="pppoe-out1"] address...

petertosh

Hey I am not an expert, but have managed to configure a CCR as router with a Fritz!Box as DSL-modem/bridge and PPPoe. Could you please check that you have a default route pointing at the PPPoe-Interface? What does "ip route print" show? I have an entry like this 1 A S 0.0.0.0/0 pppoe-out1 ...

petertosh

RDP doesn't need much bandwidth. It's working happily with a 10Mbps connection here, too. Maybe you should check for unusual high latency and maybe packet loss. 10Mbps is more than enough for RDP...

petertosh

Old RouterOS versions don't (can't) know the newer naming scheme, so upgrade manually please. hEX, 6.46beta55. i tried manually, but failed.. hEX working here nicely on beta3. Disable and uninstall all packages except system, upgrade firmware to 6.46beta. Then upload Beta3.npk to filesystem. Reboot...

petertosh

Yep, see here: viewtopic.php?f=2&t=150313

petertosh

Yep I bought and tested the same Sandisk drive but I had random remounts. And then I had a nice Intel 80GB SSD in an USB-enclosure and this works perfectly.

petertosh

yep. That works. But you should be careful, the USB-port on the CCR is rather delicate. Bend or pull the OTG-cable a little to the left or right and the disc gets remounted. And the paths will change, therefore userman will complain. But if you leave it in a cabinet where no one touches the cables, ...

petertosh

I use userman with an external USB-SSD with OTG-Cable without problems for two years now. Before that I had tried internal memory (not good, too much wear, random errors) and an external USB-drive with micro-usb port (not good, drive often remounted with another name). Since I put the USB-SSD on the...

petertosh

Re-discovered how to search Amazon for books (so long since i bought a book) and I ended up at this book: https://www.amazon.co.uk/RouterOS-Example-2nd-Stephen-Discher/dp/0692777083/ref=sr_1_1?keywords=routeros&qid=1566152590&s=books&sr=1-1 I am not a network technician, just a small bu...

petertosh

Ok, I fully agree. Haven't tested Catalina. Although it would be the easiest way for Mikrotik to just use the code of the iOS client for a native MacOC client, I hope that they release a 64Bit winbox.exe. I have configured a couple of sessions to different routers with hotspot, log, resources, inter...

petertosh

With macOS Catalina and Apples Catalyst it would be an easy step to port the newly introduced iOS Version of Winbox to macOS. Even if the GUI Concept of the iOS Version is much different it would offer 64Bit Support and a native Application for macOS. I hope MT will use this opportunity. This. I th...

petertosh

User is the same as hostname, see

user=$hostname

in the second script. The password is the token that you can create at the SPDYN user backend.

petertosh

What do you have in /ip ipsec proposal ? In my case:

0  * name="default" auth-algorithms=sha1 enc-algorithms=aes-256-cbc,aes-128-cbc lifetime=8h pfs-group=none

petertosh

Maybe I am too dumb but the latest Google Earth Pro seems to be 64bit and I am running Wine 4.0 stable on MacOS 10.14.6 and if I start winbox.exe with "wine64" I get the following in Activity Monitor:

Screenshot Wine Winbox 64.png

So, that would not be enough in 10.15 ?

petertosh

Yes it does and is not recommended. I had problems running UserManager on CCR internal flash. From time to time the database would be unreadable and all users/passwords would be blocked until restart. Since I moved the DB to an external USB-SSD everything is ok. Search the forum, there are a lot of ...

petertosh

Hi, it‘s passive mode. In the hEX the POE is „forced-on“. All of my devices Support 24V passive POE. And the hEX POE comes with a 24V power source.

petertosh

Hi, can‘t speak for the CRS328 but I am powering a UBNT G3 Dome Camera, a UAP-AC-LR and a UAP-AC-M by a hEX-POE (RB960PGS). No Problems so far since 6 months.

Best.

petertosh

Hi, I use this call: /tool fetch url="https://api.telegram.org/YourBotid/sendmessage\?chat_id=YourChatid&text=MESSAGE" keep-result=no;> And currently following policies: ftp,reboot,read,write,policy,test,password,sniff,sensitive Maybe the policies are not set correctly in your case?

petertosh

Ok, this is late, but I used another script from the forum and this works right now: # Set needed variables :local password "YOUR-PASSWORD" :local hostname "YOUR-HOSTNAME" :global dyndnsForce :global previousIP # print some debug info :log info ("UpdateDynDNS: hostname = $ho...

petertosh

@16again - thank you sir! I couldn't find out what's going wrong for days until I found your answer. Thank's a lot!

petertosh

Try: sudo -H -u root "/Applications/Wine Stable.App/Contents/MacOS/wine" /path/to/netinstall.exe Use your Wine, the path above is only an example. I managed to use it once this way. But haven't done it for a while.... A tutorial in German can be found here: https://blog.effenberger.org/201...

petertosh

Hi, did you see this: viewtopic.php?f=3&t=123015&p=629591&hil ... st#p629591

BTW, on what devices did you change the NAND? Where there CCR among them?

Best.

petertosh

Maybe NAND failures? Symptoms are similar, although my unit got back ok, when I rebooted it. It has an uptime of 20 days right now on 6.43.1 and writing userman etc to a USB-SSD. See: viewtopic.php?f=2&t=139391

petertosh

On my CCR I have a userman DB, several recurrent scripts writing backups and other files, one recurrent download from external websites and so on. All of these tasks I moved to the external USB-SSD. The SSD was formatted in ext3, then following commands moved the DB to USB: [admin@MikroTik] > /tool ...

petertosh

pe1chl, thanks for the answer. Am I right in thinking that a change of the flash-chip would work? Basically I am thinking of replacing the flash-chip, then NAND-format using the serial-console, then netinstall. I can export the license before changing chips and later import it back. Would that work?...

petertosh

Hi, I would like a router to send me messages when certain things appear in the log. I tried as good as I can to adapt the example given in the wiki. The problem is that if the scripts run as they are now, they fire the message right away, every time. Something is wrong with the variables I guess. B...

petertosh

You should have done that from the beginning! Well, I use userman since last year and my DB is about 10 MB. At this site there is a maximum of about 50 active users at any time, so I thought that the flash should handle it. And I had tried previously with a SanDisk SDDD3-032G-G46 Ultra 32GB Dual US...

petertosh

Just what I needed. Thanks a lot.

petertosh

There have been multiple times that this behavior was reported, going back at least to 2014, you can search the forum for admin reset or "failed to commit transaction: disk I/O error". I experienced something like this, too: https://forum.mikrotik.com/viewtopic.php?f=2&t=136578 Mikroti...

petertosh

Mikrotik support told me to netinstall the router. That's what I did. Today the same thing happened. "failed to commit transaction: disk I/O error" in the log and userman not working. Reboot fixes the situation. Apparently there is some problem with CCR and userman on flash? There are repo...

petertosh

Hey, I had the same problem today with a CCR1009, userman and hotspot. CCR is running 6.42.6. However I was able to login as admin with no password using winbox. Then I set a new password, created a second admin account and rebooted the router. The router came up fine, everything seems to run again....

petertosh

We are sorry for any issues caused by the previous package, we uploaded new packages, that will work fine on any router. Package updated 07/02/2018 To fix storage issue on your router, use package from the link, https://www.mikrotik.com/download/share/fix_space.npk - upload package to your router; ...

petertosh

Thank you very much!

Search found 59 matches