MikroTik

redalg

HI All, I have started to get following type of log events. The source (105) is coming from CAPsMAN managed Wifi. What are those unknown interfaces? DENY ALL (input) input: in:(unknown 36) out:(unknown 0), connection-state:new src-mac aa:5b:29:xx:xx:xx, proto TCP (SYN), 192.168.1.105:37044->192.168....

redalg

I'm looking all the options. But only using the facts.

redalg

RB4011 is a v6 device

Uh? https://mikrotik.com/product/rb4011igs_rm "v7 only"?

redalg

Any recommendations? I will use CRS125 as switch so there is no need for huge amount of ethernet ports. I'm having 600mbps internet connection and some firewall rules, using CAPs. Maybe RB4011iGS+RM?

redalg

Upgraded through webif.

Maybe I should then downgrade? Or buy another hardware and put it as a router in front of my switch.

redalg

For some reason it was twice as expected before and now it is half as expected. Something has to be wrong...

redalg

After upgrading from 6.x to 7.x routing performance has been significantly slowed down. Before upgrade I achieved easily up to 500mbps. Now the performance is just about 150mbps. CPU load seems to stay below 20%, so it isn't throttling. Has there been some change in settings which I should be change...

redalg

Those settings didn't help for obtaining ip but of course manual setting of ip address helps. The problem must be in Wap AC settings because my laptop is able to connect and obtain IP address from any other access point (including other types of Mikrotik!). Issue seems to be in DHCP server. Is there...

redalg

I have a Wap AC lte kit with pretty much default config. The problem is that my work Win 10 (corporation) is not able to obtain ip address from Wap AC but my personal Win 10 Home gets ip. What could cause this?

conf.txt

redalg

Hi, I have a CRS125 which is segregating my LAN to several VLANs and sharing internet connection (with NAT) for those. I would like to have internet connection in a VLAN to share for some devices directly (without NAT). What I have been tested so far is: Option 1: Set up a VLAN interface. Assing VLA...

redalg

Hi All, I have a mikrotik crs125 which is sharing and NATtin my internet connection. Internet connection is connect to a single port of switch and rest of ports are LANs groupped in different VLANs, I would like to create a VLAN which would be directly switched to pure internet connection and keep r...

redalg

Uh.. Enabling local forwarding in datapath did the trick and now I can achieve reasonable performance! Thanks!

redalg

After further investigation, performance is poor when using CAPSMAN - and especially on downstream. Upstream is quite ok.

redalg

I bought a new one and problem exists. So there were no failure in hardware.

redalg

Nothing wrong in my config? Then it must be failure in device...

redalg

Here is my compact and sensitive-hidden config

redalg

Routerboard has latest version also and I'm using only aes ccm.

redalg

Latesta and greatest released version v6.43.4. Should I try some other version? Is there known issues with this one?

redalg

Tried without capsman and results are same. With 2.4GHz troughput down 2mbit/s up 10mbit/s. Wiht 5GHz down 20mbit/s up 40mbit/s. Is my hap ac faulty?

redalg

Ok. I will try without capsman

redalg

Well, my internet connection is on CAPSMAN device so it will in any case forward to that same switch.

Even if the problem would be in CAPSMAN and low cpu power how could uplink throughput be twice as downlink?

redalg

If I turn local forwarding on, I will lost network connection completely.

redalg

No, CAPSMAN is on a CRS125 which is my internet gateway and router between VLANs. Is that a problem?

redalg

Hi, What could cause poor wireless performance of hAP AC RB962UiGS-5HacT2HnT? I can achieve only about 20mbit/s download and 40mbit/s upload throughput. Hap AC is managed from a capsman. Could it cause problems? I have tested performance with Macbook pro, Macbook air and different android devices. D...

redalg

That setting helps and I get full throughput via ethernet ports of CRS125.

Probelm with wifi isn't probably related to this or bridging. Let's have another thread for it. Case closed and Thanks!

redalg

So I wont probably need any bridge interfaces if I don't want to bridge PPP or similar interface directly to any other interface? May I remove bridge completely? Or can I remove just physical interfaces from it? This maybe also might be related to another problem with hap ac performance. I have few ...

redalg

I'm little bit confused now with interfaces, bridges and switches. If switch handles packet forwarding (L2) from port to port and to cpu also. Cpu is handling L3 packet filtering. Where do I need bridge, what is the functionality of it?

redalg

Since you are using vlans, you probably don't need to do this. Just do the firewalling at the point that traffic crosses vlans - unless you need security between lan devices in the same vlan.

Traffic crosses VLANs in this device

redalg

Hmm.. Couldn't found that setting from web interface...

redalg

Im just wondering why my cpu load is so low? shouldn't it be close to 100%?

redalg

Hap ac would be more suitable for my budget.

redalg

Which one would be recommended? Small physical size would be good for me...

redalg

So, I have too much firewall rules and/or too much VLAN routing?

redalg

Here is my config. I tried to remove all confidental data. Hope I succeed.

Edit: Remove config. Not relevant

redalg

I made a Ookla speedtest (http://www.speedtest.net/) and it gives 250mbit/s if I bypass CRS125. Behind switch I can roughly reach 50mbit/s

redalg

Yes, each physical port has H.

redalg

As said, CPU load doesn't exceed 40%

redalg

Yes I am. I have also NAT on my WAN interface.

redalg

I have only one bridge and VLAN switching is done in hw .

redalg

So I guess you have something in your config inhibiting performance.

Definitely but what could it be? I have tested everything what has been suggested but nothing helps

redalg

Yes. I can reach 250mbit/s by connecting my laptop directly to my ISP ethernet connector.

redalg

Hello, I have problem with my CRS125 and ethernet throughput. I can reach roughly 50mbit/s to my WAN port. I'm having NAT in WAN, I have enabled fasttrack and changed WAN port queue type to ethernet-default. CPU load is about 30-40% and still I can't reach even close of my Internet connection speed ...

redalg

Updated my router to 6.42.6 (from .4 if I remember correctly) and port based VLAN is working again!

Is it possible to do a hybrid port (1 tagged VLAN and untagged traffic) for a port in my router (CRS125-24G-1S)?

redalg

There is no example for hybrid ports (tagged and untagged vlans in single port)?

And according that page, there is no vlan's specificed in example below

In case you are using a CRS1xx/CRS2xx series device:

For me, it looks quite confusing wiki page...

redalg

Got now VLAN filtering enabled for bridge without locking myself out of management. So, untagged interfaces seems to be working as expected. I still have problems with tagging. Adding a port to bridge with tagging doesn't work. Also ssid's (cap) with vlan doesn't work. 1. If I want to have a interfa...

redalg

Hi! I have been setting up my CRS125-24G-1S and hap ac. Everything works very well, cloud router works as router to internet (nat, firewall) and CAPsMAN works fine. Hap ac has 2 SSID's which are connected to different VLANs and there is now problem with these. InterVLAN and internet access works as ...

redalg

After some reboots and re-try, routerboard has been upgraded. Finally. Case closed.

redalg

I was able to upgrade RouterOS via Netinstall but Routerboard firmware fails to upgrade.

Any ideas how should I proceed?

redalg

Could it be that some kind of malware is blocking routeros update?

redalg

No. All files exists still in files.

redalg

Tried everything you suggest. Didn't help..

redalg

Sorry about wrong terms I used.. What I was doing is clicking dowload&install from quickset as specified in this wiki page https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS#Automatic_upgrade . There is nowhere any log entry or anything that it would fail but version number just doesn't ch...

redalg

Where should I look for problem when logs doesn't show anything wrong?

redalg

Hello,

My current CRS125-24G-1S has firmware version 6.42rc52. I was trying upgrade to 6.42.2 or 6.43rc17 but it didn't succeed. System reboots but still with old firmware and there is nothing in the logs. System has 66% of free in disks. What could cause this? How do I fix it?

Search found 54 matches