Thank you for your infomation. I already understande it when I have recosidered the FIB picture below. The mangle rule is processed first, and then the routing rule with the same routing mark as its condition will be executed if the routes of the routing table from the mangle rule are not matched wi...

I have read the Mirkotik Document as the following link. https://help.mikrotik.com/docs/display/ROS/Policy+Routing I have an question about this sentences in the above link. "It is not recommended to use both methods at the same time or you should know exactly what you are doing. If you really ...

Hi MikroTik Support, I tried to use CHR RouterOS v.7.10.1 Stable as shown in the attached picture and use the ether3 as Virtual Switch (Internal) in Hyper-v but by testing, it does not response ICMP echo requests (no ICMP reply packets back to DC1, PC1, PC2). However, I downloaded the CHR RouterOS v...

i think need to try at least with 7.6 version

@chechito
OK. Please us know what the result is.

Why you resurrect years old topic instead of help current user problems?

Like this:
viewtopic.php?t=195007

Sorry. We have the problem on ARP poisioning, not wirelesss. Now we can workaround to provide the function of DAI already.

I agree. L3 HW Offloading is a must. Two years ago, L3 HW Offloading feature is only avaiable in CRS317. Now I can use in CRS328/326. I tested the throughput performance with L3 HW Offloading enabled. It works! It is promising to implement for core switch. I plan to test MLAG as well.

I think MikroTik has not yet designed DHCP snooping table, therefore DAI would be difficult to add into MikroTik switches. I think DHCP snooping of MikroTik just checks DHCP Offer messages from DHCP servers without DHCP snooping table created. Another reason is that adding DHCP snooping table into e...

The current RouterOS v7 now runs L3 HW Offloading for fasttrack connection without problems. You can try the current RouterOS v7. It should be OK.

Hello, The documentation says: With HW-offloaded bonding interfaces, the built-in switch chip will always use Layer2+Layer3+Layer4 for a transmit hash policy, changing the transmit hash policy manually will have no effect On Linux, I can only select: layer2, layer2+3 or layer3+4. What value of xmit...

https://forum.mikrotik.com/viewtopic.php?p=887577#p887577 Windows PEAP logon failure has been adressed V7.1rc5 ! Not tested yet ... EDIT: no success. Tablet OK, Windows PC .... "cannot connect to this network" Klembord-2.jpg In internal testing, our issues with Windows 10 PEAP clients wer...

Client-Tx-Limit is only supported when a RouterBOARD is the client. It is up to the client to impose a limit on itself. Thank you for your reply. That's interesting! I have never tried to use a RouterBOARD device as a client device to test that RADIUS Attributes. Do you know the reason behind this?...

You cannot set the src-mac-address (also switch or port ), these are automatically populated by the dot1x server as it will have acquired the MAC address of the device attached to the port, see https://wiki.mikrotik.com/wiki/Manual:Interface/Dot1x#Dynamic_switch_rule_configuration Thank you for you...

I have successfully used MikroTik APs (hAP ac2) with my freeRADIUS, meaning that my wireless client devices (mobile phones) has been received the assigned VLAN correctly from my freeRADIUS. However I found the problem with the RADIUS Attribute (Mikrotik-Rate-Limit), e.g. 15M/15M. This attribute work...

According to Dynamic Switch Rule Configuration: https://help.mikrotik.com/docs/display/ROS/Dot1X#Dot1X-Dynamicswitchruleconfiguration The source mac address that are set from RADIUS server in the Mikrotik-Switching-Filter attribute can not be set dynamically via Dot1x in the Switch rule (CRS328). Th...

Well , I did the experiment, and created the certificates with the FreeRadius 3.0 scripts. Imported them in ROS System Certification, as PEM files and modified the Setting in User Manager session settings to use the server cert. Same results: Android works, Windows10 fails. The only key-usage param...

I found that the information about DHCP Option 82 in the following MikroTik website is clear.
https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge

Hello, I have bought a cAP ac device (https://mikrotik.com/product/cap_ac). I started to use this ap in its default configuration . It was really strange that only SSID from 2.4 GHz appeared on the client devices but SSID from 5.0 GHz did NOT show at all. I discovered that SSID from 5.0 GHz can ONLY...

Hi nicky, Sorry. I thought you expect so high from the trainers. :-) They are also human like us. Just kidding :-) Some features are vendor-specific and proprietary, with little information. It would be better to get clear and correct answers in this forum, especially MikroTik supporting teams or ot...

Hello, With regard to preventing any rogue DHCP servers, I have set up a bridge as well as enabled the DHCP Snooping on it. After that I have enabled the trusted feature on the port that connects to the DHCP server. It works. :-) What I noticed is that after enabling the DHCP Snooping on the bridge,...

Hallo Areanod,
I also got the same problem. What older version of the netinstall/flashfig did you use?

@Kindis Thank you for your clarification.

@eider Thank you for your post. "In newer version password is no longer stored as plain-text so it can not be used to encrypt backup file without user explicitly providing password." In the newer version, Does it mean that the user password of RouterOS is not used by default for the encryp...

@Kindis Thank for your post. ============================================= What's new in 6.43 (2018-Sep-06 12:44): MAJOR CHANGES IN v6.43: ---------------------- !) backup - do not encrypt backup file unless password is provided; " ============================================= It means this wil...

I think I found something does not work properly in making the configuration backup file of the MikroTik device (RB951G-2HnD) with the default password (user password). During preparing materials for teaching my MTCNA course, I have made a configuration backup file of the MikroTik device (RB951G-2Hn...

I have seen your issue that is quite similar to my current issue.
Please have a look at the followingpost.
viewtopic.php?f=9&t=139597&p=688423#p688423

Hopefully it helps.

According to my presentation in the 2018 MUM conference in Thailand, I presented in the topic "Monitoring the Internet Connections of WAN Links with Only Routing Configuration". https://mum.mikrotik.com/presentations/TH18/presentation_5725_1534743837.pdf After the conference, I was asked f...

Hello, Similar to this issue. Just want to share mine. I set up the CHR virtual machine (guest) running in a virtual box. I used my computer as a host virtual machine. My computer and CHR with a bridge interface connected the internet via my MikroTik router (RB951G-2HnD). This denotes both got IP ad...

It seems like you set DHCP servers at RB951Ui and fixed IP addresses at the VLAN interfaces of the RB951G. For my concept of VLAN, according to your diagram I prefer to perform RB951Ui as a managed switch, whereas RB951G acts as internet gateway. That means a DHCP server for each VLAN will be set at...