MikroTik

kalamaja

Preferably use wires to interconnect. Indeed this is a basic use case for CAPsMAN:
https://help.mikrotik.com/docs/spaces/R ... iFiCAPsMAN
https://www.youtube.com/watch?v=bHotZT41w3E&t=89s

WiFi AP switching is described here: https://www.youtube.com/watch?v=vkWPlsuyuKE

kalamaja

Do not forget that WiFi is a two-way protocol, so actual speed also depends on client device's capabilities - most of the client devices are two-chain with regulated power. Pushing the AP power may have point when you also have MT or smth else for a client.

kalamaja

Some of your wishes can be done using these scripts: https://github.com/eworm-de/routeros-scripts

Others maybe using containers etc.

kalamaja

Binary backup should be forbidden as it lets restore configuration only on the device where it was created with proper ROS version installed. Use "/export terse file= ....". True, but for snapshot and quick return point it’s excellent. I haven’t tried in years, but IIRC textual export was...

kalamaja

14. Create a binary backup before any next adventure and practice restore using netinstall and binary backup before other adventures.

kalamaja

Hi,

SIM-tray might be not that tight, so try adding piece of tape to the free side of SIM. It has helped me when SXT LTE and ltAP have had the same problem.

kalamaja

While you are working on IPv6 stack, please a) add/fix discovery by IPv6 addresses. Currently iOS apps are not useful in IPv6-only envs, because logging in using MAC and IPv4 are not usable b) NAT64 functionality (for creating IPv6-only envs) runs really well with tayga in a container, but seeing it...

kalamaja

Set IPv6 IPaddress on bridge and configure ND.

kalamaja

Thanks, I see Apple devices with latest macOS/iOS are able to connect to 2.4GHz again on hAP AX3.

kalamaja

*) wifi - added "reselect-interval" support; 7.15rc2 with default configuration on L41G-2axD&FG621-EA (hAP AX lite LTE6), changing any wifi configuration parameter in webfig ends in failure "Invalid value in undefined" because "Reselect Interval" is all zeroes and r...

kalamaja

It's useful to get a good start with Mikrotik's Back To Home automatic Wireguard configuration: https://help.mikrotik.com/docs/display/ROS/Back+To+Home It also supports adding multiple users. After you've used and studied how it works and seen configuration, then it's much easier to progress with yo...

kalamaja

Mikrotik only shares prefixes, so it won't share IPv6 addresses over Wireguard, so if you connect router to the Wireguard that will share addresses to clients, then it works. Easiest way is to enable IPv6 for Wireguard client devices is to enable Back To Home feature, but it masquerades client IPv6 ...

kalamaja

Thank you, Mikrotik, for upgrading AWS CHR image from 6.x to 7.14: https://aws.amazon.com/marketplace/pp/p ... gn6js6av54
Hopefully it has fixed the problem that on T3 instances 7.x upgrades were failing.

kalamaja

hAP ax lite LTE @ 7.14beta10 with 16121.1034.00.01.01.05 firmware, no SIM PIN as it's a known problem with this model. I used it for last 5 hours and 0 linkdowns or problems have occured.

kalamaja

Check this topic, if you have the problem of the same LTE firmware: viewtopic.php?p=1055337&sid=94bcd4a2f2e ... 8aeb6c4762

kalamaja

1. Check that bridge protocol-mode=rtsp
2. Check info about your country's regulations: /interface/wifiwave2/radio/reg-info country="Yourcountry" number=0
3. Set 5GHz frequency to 5500 and check if signal got better

kalamaja

1) Check the bridge’s protocol-mode, with AX2/AX3 it MUST be default value (rtsp).
Why?

No idea, found it out hard way by diffing configurations, why AX3 had much worse performance than AC2. With protocol-mode=rtsp all good and 1200@5GHz/AX as promised.

kalamaja

Just upgraded my hAP AX3. Upgrade was ok and the router returned after a few minutes but I have noticed a major drop in WiFi performance with devices dropping from 450mbps plus to 75 1) Check the bridge’s protocol-mode, with AX2/AX3 it MUST be default value (rtsp). 2) Set 5GHz frequency from auto t...

kalamaja

I have found the culprit for my WiFi speed slowness on AX3, an old configuration habit: /interface/bridge/set protocol-mode=none When I set it back to default protocol-mode=rtsp, then instantly WiFi speed gets fixed and I can easily see TX rate 1200Mbps. In the wiki there's a mention of "If the...

kalamaja

Can't be more simpler, everything default config, so it's either So then "Nothing is under control". If a fresh client device 2 meters from router with default config and in a clear line of sight gets 400 instead of 1200 Mbit/s in 5GHz and 100 instead of 574 Mbit/s in 2.4GHz and almost tw...

kalamaja

I'm not a specialist on WiFi tuning, so I kept my testing as simple as possible: reading WiFi stable speed from Activity Monitor's Network view, while copying different large files from ethernet-connected NAS SMB-share. Measuring device: Macbook Air M2, 2023, AX capable on both frequencies, clear vi...

kalamaja

I also have weird problems with AX3 on 7.13 WiFi speed. My test is copying big file from NAS that is directly attached to the router's ethernet. With AC2 at the same place, speeds were nicely 50-55MB/sec. 1: Windows 11 connects over 5GHz AC: link speed shown in computer: 780/780, real speed during c...

kalamaja

but now we want to use hAP ax, identical footprint chassis. If the size is important for you then there's hAP AX2. hAP AC's main feature was 3-chain WiFi for both 2.4 and 5GHz, it was the case at times when Macbook Pros could really use it, but they also went back to 2-chain and now AX gives you th...

kalamaja

+1 dead AC2 that ran 7.13+ww2 happily for a month, minimal free space became less although I didn't have anything configured to spend it, and one nice day it died, most probably to 0 bytes left on storage, and doesn't boot to working state anymore. I can probably netinstall it to 7.13+wireless, but ...

kalamaja

Question: I have a network with two AC2s, one as a router and one as an access point via ethernet. If I want to finally have roaming between them, do I just need to install the new wifi driver or do I also have to use Capsman? Do you recommend Capsman for two AC2? (home use) There are two good expl...

kalamaja

Can anyone explain the current possibilities for NAT64 in Mikrotik? I see there's parameter in IPv6 ND, but no clues anywhere else or example on how to use this: pref64-prefixes (unspecified | ipv6 prefixes; Default: unspecified) Specify IPv6 prefix or list of prefixes within /32, /40. /48, /56, /6...

kalamaja

Check this nice video from MT guys: https://youtu.be/37aff6d14Xk

kalamaja

Common cause for these problems is that client’s device has DHCP server enabled that broadcasts false data to the network. Different kind of “sharing” or “server” functionalities. MikroTik has functionality to notice rogue DHCP servers and send you notification.

kalamaja

I upgraded my HAP AC2 from 7.12.1 to 7.13. Neither my 2.4 nor 5 GHz interfaces are visible in the Wifi / Menu. hAP AC2 is quite tight on storage, so check first, if wifi-qcom-ac module is successfully installed and listed in System->Packages? There should be 2: routeros and wifi-qcom-ac. After gett...

kalamaja

Paradoxically, this is an Enterprise environment with a professional range of routers, and I cannot afford downtime for entire companies. MikroTik doesn’t do your business, you do. Even in 10person company no sane person installs version less than 24h old into production. Person who decided that up...

kalamaja

Quick question before I waste more time: Is RBcAPGi-5acD2nD (cAP ac) supported by wifi-qcom-ac ? Yes, runs really nicely for me: Packages -> wireless -> uninstall. Files -> add wifi-qcom-ac. Reboot. Connect over cable, fix ports in the bridge, new interfaces are wifi1 and wifi2. Configure basic stu...

kalamaja

Since I am by no means a network guru, most of your abbreviations are way over my head. I'd really appreciate if you could narrow down your recommendation to one or two concrete models that I should buy. hAP ax lite if you are on tight budget hAP ax3 if you want wider coverage as it has good antenn...

kalamaja

wifiwave2's powerful configuration might look scary, but simpler setup is actually easy: /interface wifiwave2 set [ find default-name=wifi1 ] channel.band=2ghz-ax .mode=ap security.authentication-types=wpa2-psk,wpa3-psk .configuration.country=yourcountry disabled=no disable-pmkid=yes .ssid=MyWireles...

kalamaja

Another annoying bug in 7.12rc2 with hAP AX lite LTE6: in "webfig -> Interfaces -> LTE interface properties" there are little black triangles in front of sections General/Cellular/Status/Traffic. Normal would be "to the right"=closed, "down"=opened, but they change thei...

kalamaja

hAP AX LTE6 aka L41G-2axD&FG621-EA has an annoying glitch: - Although I have entered 0000 as PIN for LTE card, after reboot ROS 7.8, 7.11.2 and 7.12rc2 all say "SIM locked" and no LTE traffic. Log says: LTE:: lte1 mbim: state 7=>9 - problem gets fixed after doing disable+enable to the ...

kalamaja

Search for eworm repo in GitHub, among many useful scripts it also contains one to maintain static records with dynamic IPv6 prefix. There’s also a introduction video of how to start using his scripts.

kalamaja

AX3 is a really nice router with ears/antennas helping it to hear/listen it's client devices better, so better rates should be expected. Being wifiwave2-only device, it had serious issues with wifi couple of months ago, but they all are settled now and everything runs really stable.

kalamaja

My hAP ax lite LTE6 does a different kind of weird : - Although I have entered 0000 as PIN for LTE card, after reboot ROS 7.8, 7.11.2 and 7.12rc2 all say "SIM locked" and no LTE traffic. Log says: LTE:: lte1 mbim: state 7=>9 - After doing disable+enable to the lte1 interface from the webfi...

kalamaja

Hi,

This is only a problem when using AWS T3 instances. T2 does not have this issue.
Also, you can change the instance to t2, update, change back to t3 and all working.

V7 hasn’t been upgradable from the beginning on T3, great thanks for T2<->T3 trick, will try it soon.

kalamaja

Hello, there's new feature called Back To Home (BTH) soon, that makes accessing routers even without public IPs really easy: 1) install latest 7.12beta (no problem, BTH has been tested successfully since 7.11) 2) mark dynamic DNS and Back To Home checkboxes in IP -> Cloud 3) Install Wireguard client...

kalamaja

Any luck to see any progesss on NAT64 support, so to move to IPv6-only internal networks and have less dual-stack?

kalamaja

hAP AX lite, default password written on a router and reset configuration returns to this. Upgraded to 7.11b6, logged into webfig, cancelled changing default password, and accidentally found it's really easy to half-accidentally NULLIFY admin password: open webfig Terminal, it orders to set a new ad...

kalamaja

Generally 7.10rc1 has been more stable on AX3, WPA3 disabled: no reboots and WiFi needing reboot. BUT found that the same wifi problem still there: at some point all clients are dropped out and cannot connect with wrong password message.

kalamaja

Problems with v7.9rc4 on hAP ax^3. Using the ax^3 as AP only. I have now rolled back to v7.8. 1) The system has crashed and restarted once. 2) Two times all clients registered with the AP have disappeared, and no clients can register or register without an AP reboot. Same here, tried 7.9RCs to fix ...

kalamaja

Check the uptimes or autosupout files in Files, AX3 rebooted every couple of days with 7.8, has been stable now with 7.9RC4.

kalamaja

kalamaja, just use check for updates. it is there for beginners, so situations like this are avoided. manual uploading of files should not be done anymore, unless you are a seasoned professional and part of this forum :) Point of the problem is that accidentally partial offline upgrade removes wifi...

kalamaja

PROBLEM: hAP AX lite with both 7.8 and 7.9rc3: without wifiwave2 package (due to user error) installed, Reset Configuration via button or GUI ends up with NO configuraton. User must know he must access router using winbox+MACaddress+ethernet and install wifiwave2 from extras package, otherwise it's ...

kalamaja

But if its so complex with so many variables how does every other home/SOHO router do it easily with zero config ? There MUST be ONE simple way to do this for SOHO / Home use. The more "everyday feature" IPv6 gets, the more common knowledge there will be. Lets compare IPv4 and IPv6 standa...

kalamaja

Complaining doesnt help, check scripts and scheduler.

kalamaja

removed unneeded quote - use "Post Reply"

Added in 7.5:
*) wifiwave2 - added support for 802.11k;

kalamaja

*) webfig - fixed displaying of grahs in status pages Progress, but you still have work to do. Memory usage and Disk usage gives: ERROR: NO ACCESS! CPU usage is fine and interfaces. I have opposite situation with hEX S at 7.5: HDD and Memory available, but CPU missing from Resource Graphs and webfi...

kalamaja

Check your client's ssh configuration or try with some other client without any configuration. One of the parameter which may prevent you to log in: PubkeyAcceptedKeyTypes +ssh-dss

kalamaja

Current version is Ver 6.44.3 which can be upgraded to latest v6 and v7, but it will be removed on July 30, 2022: We have identified that you have launched one or more instances in the last month using a public AMI which will be deprecated on July 30, 2022. While you will continue to be able to laun...

kalamaja

Now that there's new IPv6 stack in place and also NATing features are progressing, how long to also get NATing from IPv6 to IPv4? Very much needed!!

kalamaja

Are there any advantages at the RouterOS v7.2.3?

Here's the list for new main features in RouterOS v7: viewtopic.php?t=180831

kalamaja

No need to over-think. Follow the steps mentioned before: create and download backup, upgrade to latest 6.xx, upgrade firmware also (System->Routerboard), create and download backup again, move to "upgrade" channel, ENJOY! Outcome very much depends on complexity of your setup. If you have ...

kalamaja

Windowses need these from ND:

/ipv6 nd set [ find default=yes ] advertise-dns=yes managed-address-configuration=yes other-configuration=yes

kalamaja

When you access it using Android app, it says with default configuration, lifetime is 10 years. Also it allows to upgrade it’s firmware.

kalamaja

As far as I can see there is no 7.1 for the hAP ac2. I'll try 7.2rc1 later. I will also try to get netinstal run on my mac under wine.

There definetly is. Download https://download.mikrotik.com/routeros/ ... .1-arm.npk, upload to Files and reboot.
Don't go to 7.2rc1 yet.

kalamaja

Now that v7.1 is in stable with new IPv6 stack and IPv6 NAT functionality, could you please add also NAT64 functionality ? Movement to NAT64 is clear as Apple has had requirement for this since 2018 for all apps. No need for more complex solutions, these can come later. It would help much for re-arc...

kalamaja

When you want to hide, you must know how to check your fingerprints. Your configuration had add-default-route=yes, so all the traffic should go to the VPN-connection. Let's start with tracing: 1. You have a connection, Ethernet cable. Plug your computer to it and open https://whatismyipaddress.com. ...

kalamaja

@zippedmails one step you can change to better: in l2tp-server configuration change use-ipsec=yes -> use-ipsec=required to be really sure IPSec tunnel is used.

kalamaja

Thanks a lot bro. I input the actual vpn address (219.100.37.198) in two places: (1) under PPP>Interface <ToVPN)> >Dial Out Tab, and (2) under IP>Routes>General Tab. Do you mean I should completely remove and delete the address from the 'General' tab in (2) above? Or, just replace the numbers with ...

kalamaja

All good, these wireguard/whatever/whatever fanboys are responsible for their false suggestions before even understanding the configuration. You can configure wireguard or any other tool insecurely if you don't fully understand it. Even more, hAP lite doesn't have enough RAM to run ROS v7.1 with wir...

kalamaja

/interface l2tp-client add add-default-route=yes connect-to=XXX.XXX.XXX.XXX disabled=no name=ToVPN use-ipsec=yes user=vpn To me use-ipsec=yes tells this L2TP is wrapped in IPSec, you have remove password and IPSec secret part (good!! removing actual server would been even better), so looks as secur...

kalamaja

PD is prefix delegation, so yes, it shares prefixes from the pool, but not IP-numbers. So, you can connect router using L2TP, ask prefix and share to the clients, but not serve addresses to clients directly. Or connecting device must be able to ask prefix from tunnel and create pool for itself to us...

kalamaja

Choose channel to "upgrade" to switch from 6.xx tree to 7.xx and after that you'll see new long-term, stable, testing trees. Choose stable or long-term and go. Don't forget to create binary backup before any upgrade to be able to fully recover if anything would go wrong.

kalamaja

Some clients are using DoH/DoT and will not use normal DNS server at all. (example iOS >=14) https://paulmillr.com/posts/encrypted-dns/ Yes, any fresh OS and browser is able to do DoH. I've successfully used deterrence for this, by announcing that porn is blocked with additional rules to automatica...

kalamaja

Understand the code and apply changes if needed. 1.1.1.2 disables just malware. ###### Disable Malware and Adult Content using Cloudflare DNS: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/ /ip dhcp-client set [ find interface=ether1 ] use-peer-dns=no /ipv6 dhcp-client set [ find inte...

kalamaja

Do you see LoRa menu in winbox? If yes, then lora module is loaded correctly. Do you see any devices in list when you enter Lora menu? If yes, then lora-card is connected correctly. Do you see any numbers in Stats tab? If yes, then traffic is flowing througn. It depends on what you want to achieve, ...

kalamaja

It's a known "feature" caused by packages from extras. What I did: create backup, disable extra packages and reboot, upgrade, add extra packages, restore from backup.

kalamaja

With iOS15 came the Private Wi-Fi Address feature that uses different MAC-address for every Wi-Fi network, AND also doesn't send device's name to DHCP-server anymore. So. it's much harder now to keep eye on new devices in DHCP-Server -> Leases. And if you switch off Private Wi-Fi Address feature in ...

kalamaja

If you have outgoing traffic denied policy, then no need to open ports for MT upgrades, better download firmwares according to your device architectures, upload to Files and reboot. You’ll get the same result.

kalamaja

Now there's TWO stable trees listed on https://mikrotik.com/download

kalamaja

Nobody else can do testing for your specific setups, but only you! I run v7.1 in several setups without any problems and in some other setups it wasn't that successful, so there I don't use it. Easy as that.

kalamaja

Can anybody with more knowledge into latest addition of IPv6 NAT to 7.1RC confirm that NAT64 now possible?
I read actions they have right now are masquerade, dst-nat, and redirect.

kalamaja

# get prefix from upstream, put it into pool /ipv6 dhcp-client add add-default-route=yes disabled=no interface=ether1 pool-name=ipv6-pool request=prefix use-peer-dns=yes # start Network Discovery /ipv6 nd set [ find default=yes ] advertise-dns=yes advertise-mac-address=yes interface=bridge managed-...

kalamaja

Start with a description what you want to achieve. Mikrotik's DHCP Server is meant for Prefix Delegation: you get prefix from service provider and create pool from it (with possibility to set size of sub-prefixes taken from it). When you assign IPv6 address to the router from the pool, first sub-pre...

kalamaja

Biggest brain-pains for starting with IPv6 are: 1) in IPv4 you mostly share IP-addresses, in IPv6 you mostly split and share prefixes(=first half of IPv6 full address) 2) there IS DHCPv6 that is somewhat similar to DHCPv4, but it's mostly used for prefix sharing, not end-client addresses sharing 3) ...

kalamaja

Power of WiFi is regulated by the countries, so what you can achieve is to have better antennas for *listening* and currently hAP AC3 has the best external antennas for this while hAP AC/AC2 and wAP devices have only internal ones.

kalamaja

What is the main goal you want to achieve? Reason to install Squid has vanished as 90% of web runs already on HTTPS and those who still not, get downvoted in SEO/searchengines. This is to build trust that clients communicate with an intended service, not fake one. Nowadays content is cached on brows...

kalamaja

MT cannot extend low storage for existing devices, but you can get past the low space problem by switching from bundle-based installation to package-based. By default MT routers have almost full bundle installed where you can disable modules, but cannot remove them to free space. Solution to this is...

kalamaja

What exactly is not working with IPv6? I can confirm on 4011 recently upgraded from 6.48.2. Simple SLAAC configuration with prefix and address: /ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=ipv6-pool request=prefix use-peer-dns=no /ipv6 address add address=::1 from-pool=ipv...

kalamaja

prefix-hint is hint for prefix from upstream, pool-prefix-length is length of subnets shared from the pool. Mikrotik supports Prefix Delegation fine: you ask prefix from upstream and create pool from it. And share pool into subnets using dhcpv6-server if needed. Try this: first line asks prefix from...

kalamaja

Just push flat screwdriver “under the skin” from small holes and it will pop open. Then remove two black rubber pieces that keep motherboard in place and that’s it, the only screws you have to handle are the two that keep LTE card in place.

kalamaja

It's important to distinguish different setups and how to call them: - "wired mesh": edge router + CAPSMAN configuration, so that additional APs could be easily connected by wire without need for any configuration - "wireless mesh": Mesh by MT definition: APs are connected to the...

kalamaja

To understand what could have happened, you have to give us possible vectors. Nobody sees your configuration, so tell us what WAS enabled and exposed and to which scopes? Did the instance have public IP? Which services were enabled from IP -> Services? Which of these services were exposed from the f...

kalamaja

Possiblity to somehow manage DNS names for devices has been biggest request from my clients also when talking about deploying Mikrotik+IPv6.

kalamaja

What you need is not some label, but product to work stable and being supported. Instead of acting on random forum post, ask from Mikrotik support which software you should use for stable operation of your device model and required functionality and that’s it.

kalamaja

If that is "default", then you have very old ROS version, then better you upgrade, then reset config to default and start again Yes, IP should not be attached to slave interface, should be on master, i.e. bridge interface Even with fresh versions of ROS, reset configuration sets internal ...

kalamaja

It’s a known “feature” that some German guys scan public IPSec every night, at least in Europe. Haven’t seen any serious action yet.

kalamaja

Kind suggestion: never with any system or hardware, please don't touch any alpha/beta quality software before you are fully fluent in your restore and recovery procedures, with Mikrotik it means - how netinstall and winbox are working. As with any crisis/recovery plan, you should practice it safely ...

kalamaja

No issues and full production has been moved to these units. Will see during the weekend how all looks.

Upgrading production systems 3.5 hours after new release at Friday afternoon.. what can go wrong and who would be guilty.

kalamaja

Lets start from the beginning: what is your connection type?

Not all internet connections are suitable for low latency online gaming.

kalamaja

With global 34.2%, almost 50% in US and more than 50% in Germany there's no need to proove that IPv6 is now, networks won't get smaller, NATs won't get simpler and streaming content won't decline, so there's growing need for IPv6-only networks. Please be the company that ignites the affordable way t...

kalamaja

It is as with other parts of MT, you may want to start with default configuration or with empty configuration. ipv6 module is disabled by default, so correct flow to start using it is to enable module, reset configuration to get default configuration for all enabled modules and then apply your confi...

kalamaja

What speed do you get when you connect directly to the hotel Wifi? 1Mbps/client sounds quite usual for hotel networks.

kalamaja

Try this, it has helped me a lot in noisy 2.4Ghz environments:
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode

kalamaja

NAT64 and/or DNS64 for the beta4, please, and you would be the best router software in the world! :) That would give a huge boost to IPv6-only internal networks and prevent double work for dual-stack management.

kalamaja

Then, you have Winbox running after follow the Cisco recommendations?

Yes, winbox64.exe running well with wine-staging 5.7 from brew on Big Sur 11.0.1 (20B29).

kalamaja

The problem is that we don't know if our kernel panic is due to Winbox or due to Wine emulator. Any idea to isolate the problem? None of them, check the error dialog after the reboot for cues. For me the problem was caused by AnyConnect 4.9.02xx that although it was compatible and worked with Big S...

kalamaja

Had the same situation and errorlog showed AnyConnect module as a culprit. After AnyConnect upgrade problem was solved. Cisco AnyConnect MUST be upgraded to version 4.9.040303: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect49/upgrade/AnyConnect_macOS_BigSur_Advisory....

kalamaja

Fixed with the macOS 10.15.7 and iOS 14.0.1.

kalamaja

Trick about default fw rules is that they are cleverly written using interface lists. So to change or use non-standard WAN port, you just change interface list members.

kalamaja

THERE IS one specific need for NAT under IPv6: NAT64 aka most successful transition mechanism at the moment to get rid of IPv4 that adds double work of dual stacking and let IPv6-only networks to consume IPv4-only network resources: https://forum.mikrotik.com/viewtopic.php?f=2&t=42614 ABSOLUTELY...

kalamaja

System -> Packages -> Upgrade to 6.47 System -> Reset Configuration Files -> Backup Now you are up to date, with default configuration and binary backup to return to. Do your initial measurements with default configuration, before even changing anything with QuickStart or messing up with configurati...

kalamaja

Let's start from the beginning:
1) Find the MAC-addresses for your TV and computer: IP -> DHCP Server -> Leases
2) Could you post the screenshot from Wireless -> Registration so we could see, which interfaces are used and connection metrics

kalamaja

Please, please, please, stop defending Mikrotik! If it works for you, so what's the point of mocking them, who have problems? Oh, please, be a man! You bought ONLY ONE product, you have a problem with unknown root cause yet with it, you've got many suggestion of how to exclude some of them and now ...

kalamaja

ksuuk, some pictures for you. cAP AC in wireless bridge mode, installed into ceiling of a room in a private house, no nearby wireless networks. All client devices situated ~5m from the router: iPhone11 (23:87), Lenovo T440p laptop(F7:D6) and old Samsung phone with Android 5.1.1 from 2016(F2:CC): htt...

kalamaja

Connect using winbox(64).exe and MAC-address, add dhcp-client to the bridge and here you go.

kalamaja

ksuuk, don’t rush with sharing suggestions before fully understanding the situation. Last test: take the cAP AC to some other connection and try out there to rule out your edge router’s jam.

kalamaja

You want to find a solution or just brag? It's not even clear yet if the problem is consistent (=Mikrotik) or a case with your 1-chain Android device. To continue on a right lane, what does Wireless -> Registration show for your Android's RX/TX rates. Have you tested the same WiFi from the same spot...

kalamaja

Did you also do Huawei/MT comparison with your Android? Did you do speedtest with ISPs endpoint? There's no magic in access points and Mikrotik's speeds for me have been quite logical and approachable. What many people don't know is that most of the time culprit for slow speeds is client device's Wi...

kalamaja

The Cap AC -s whole idea is disable 4G router -s wifi and use is as a LAN gateway only, as it's ISP owned device and I don't want them sneaking into my local network. :) And Cap AC, at least based specs, can be router and accespoint easily. cAP AC is basically modified hAP AC2, so it can easily als...

kalamaja

BTW, I have used Mikrotik products about 7 years, and with every new product I hope, that now all is OK. Last failure was hAP ac lite TC, same problem, low speed, bad 5GHz coverage. Seems nothing is improved. :( After 7 years of thinking MT does everything wrong, it would be right time to invest in...

kalamaja

Announced now in a fresh newsletter: https://mikrotik.com/product/chateau_lte12

kalamaja

You must choose WiFi client devices very carefully to have real use of three-chain WiFi AP, because most of the WiFi devices, even iPhone11Pros and some of the latest MacbookPros have 2-chain WiFi: https://www.duckware.com/tech/wifi-in-the-us.html

kalamaja

1. Download all_packages-mipsbe-6.46.2.zip
2. Unzip the package
3. Upload only those packages into router Files section that are enabled and needed in your setup
4. Reboot

kalamaja

Hi, TomasNor, merry Xmas! As you said you are a beginner, so do yourself a favor and start slowly or you'll make yourself more harm than good. First: learn to backup (both textual and binary) and restore. This allows you to try out lots and lots of tricks and return easily to known good points. Ever...

kalamaja

cAP AC has extra Ethernet with PoE-out for extra cAP Lite in bridge mode.

kalamaja

IPv6 is not difficult, but you must understand it. Basic knowledge is: a) address is 128 bits long, half of it is network (aka prefix), other half is for device b) Service Provider gives you prefix and length of it show you how many subnets can you create inside it. /48 gives you 64-48=16bits=65536 ...

kalamaja

As I see from the forum, request for NAT64 support has been up for last 9 years already. Maybe the time wasn't right then, but it definitely is now. Adding NAT64 support would not be about NATing IPv6, but NATing the IPv4 hell out of the way to get rid of it faster, so it would definetly be engineer...

kalamaja

You can try to upgrade to latest 6.46 beta which they say got some important WiFi fixes, to see if your situation gets better. You can downgrade later if needed.

kalamaja

Without configuration you must use winbox.exe and connect using MAC address.

kalamaja

Do NOT put WebFig directly into Internet. Instead, set up IPSec/L2TP VPN and enable access to WebFig through it. QuickSet can set it up for you, just enable VPN network from IP/Services. IPSec/L2TP is built into Win10/Android/iOS so no additional software is needed.

kalamaja

No other instructions was given. Heard hAP ac² and some other devices mentioned, so I guess there's no restrictions on 4G-5G devices only.

Drag NPK into Files, double reboot, done. Works well on hAP AC2, no visible difference atleast now. Linux kernel has upgraded from 3.3.5 to 4.14.131.

kalamaja

Yes, PWR-Line products are meant for the situations where cabling is not an option. As the description says: Simply plug this device directly into one of the LAN ports of your ISP router, and add another one somewhere further in your premises. They will link together through the power lines. You can...

kalamaja

You cannot use webUI when you have IP-level problems. Connect ethernet cable between eth2 of cAP and your computer, download winbox.exe (and use wine if any other OS than windows) and on Discovery tab, connect to router using MAC-address.

kalamaja

hap lite, update with netinstall and backup config. because no free space with default packages( Best solution so far for hAP lite: download and extract all_packages-smips-6.45.2.zip, upload only those packages that are enabled in your router, reboot -> router is upgraded and disabled packages are ...

kalamaja

IPv6 has a different, more autoconfig logic. Having link-local address as default gw is completely OK and often used, so seeing the line "GW: fe80 :: 1" tells atleast to me that PROBABLY provider is communicating configuration wrong to customer. So I would try with usual DHCPv6 PD configur...

kalamaja

Hello, IPv6 over IPSec/L2TP works well, it gives you prefix, but not address, so it's suitable for travel router that will share the prefix for you. The trick is in L2TP server's default IPv6 firewall rules: /ipv6 firewall filter ... add action=drop chain=input comment="defconf: drop everything...

kalamaja

They really "just work". You can see the link speed, alignment, signal, distance etc in Winbox from Wireless -> wlan60-1 -> Status tab or from command line: [admin@MikroTik] > /interface w60g align wlan60-1 connected: yes frequency: 58320 remote-address: XX:XX:XX:XX:XX:XX tx-mcs: 8 tx-phy-...

kalamaja

Wireless Wire devices come in pair pre-configured to work as bridges, so you connect master instance to the router and anything you connect to the slave instance works as it would have connected directly to the router. Admin password is on the sticker inside the bottom lid. By default they do not ha...

kalamaja

I'm using Mikrotik L2TP/IPSec VPN with macOS Mojave/Win10/iOS12/Android9 and they all work like a charm with builtin functionality. My configuration: /ip pool add name=vpn-pool ranges=192.168.89.2-192.168.89.254 /ppp secret add name=VpnUser password=VpnPassword profile=default-encryption /ppp profil...

kalamaja

2019 and MikroTik LTAP still only connects less than half the times it's rebooted or the LTE interface is disabled/enabled. Or after a full minute of waiting. My 10 year old Nokia phone connects to 2G/3G after 1-2 seconds. Every single time. I’ve seen exactly the same symptoms caused by faulty R11e...

kalamaja

Any solution anyone?

External antenna is mandatory with LTE card. You can add 1 GPS antenna and 1-2 LTE antennas, so external GPS-only (GPSANT) or GPS+LTE combined antenna is needed. You also need 1-3 U.fl Female / SMA Female pigtails to connect them.

kalamaja

I really hope that the new iPhone Xs/XsMax 5GHz AC problem is resolved before the 6.44 production release. https://forum.mikrotik.com/viewtopic.php?f=7&t=139608&sid=c812125039cd5699bb02c1cae5c96b71 Reading through the topic you've linked to makes me think it is an iPhone's problem, not Mikr...

kalamaja

There's two kinds of software in Mikrotik: operating system and hardware specific firmware. Operating system's and firmware's versions are in sync, but it does not mean that firmware contains changes with every version bump. Operating system is upgraded using /system package update check-for-updates...

kalamaja

In IPv6 you think in prefixes which are basically networks that are divided into smaller subprefixes: first 64 bits are prefix, second 64 bits are client. Usually prefixes are shared and divided using Prefix Delegation. Process goes like this: you ask prefix from ISP using DHCPv6 Client and in this ...

kalamaja

In that case, remove the LTE card, and also try to mount it differently, with serial port pointing up I see no difference from disabling or removing LTE card: no luck. Tested with external MT GPS module: gets fix in seconds and 6-8 sattellites always visible. What I see on 6.43rc44 is that when ext...

kalamaja

Try external antenna, does it get a fix then? How soon? Are you guys using the LTE modem? GPS-data in the log is self-generated (GPGGA, GPGLL, GPGSA, GPGSV etc) so no actual traffic from sattellites. I've run it on internal antenna for tens of hours in open air, powered from USB while driving, subm...

kalamaja

Software and firmware 6.42.5, fresh default configuration. What I do: /system console disable 0 /system gps set port=serial0 enabled=yes Resulting in: /port set 0 baud-rate=auto data-bits=8 flow-control=none name=serial0 parity=none stop-bits=1 /port firmware set directory=firmware ignore-directip-m...

kalamaja

Hello.

Is it an intended behaviour that LtAP Mini's internal GPS feature is useless without adding external antenna (= ACGPSA+ACSMAUFL)? I see GPS data running in the logs but have not been able to get any position lock. As USB port is for power only I'm also unable to add USB GPS module.

Search found 143 matches