Community discussions

Search found 69 matches

  • 1
  • 2
by whatever
Thu Jan 10, 2019 10:09 pm
Forum: Announcements
Topic: v6.42.11 [long-term] is released!
Replies: 40
Views: 3816

Re: v6.42.11 [long-term] is released!

So do not make this big change in "long-term". This is not a bugfix, but a change in function....... I guess releasing a "new" version which doesn't respect country regulations might cause legal trouble. But a simple notice in the changelog wouldn't hurt either: "Make sure you are compliant with yo...
by whatever
Tue Jan 01, 2019 12:35 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 143
Views: 17457

Re: v6.43.8 [stable] is released!

Wow. Does every process in routeros run with unrestricted root privileges?
by whatever
Mon Dec 31, 2018 12:08 am
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 143
Views: 17457

Re: v6.43.8 [stable] is released!

Thank you for that info, it's rather interesting that wifi is still usable with 36 sec update interval.
I really hope that the fix gets backported to long-term soon.
by whatever
Fri Dec 28, 2018 10:16 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 143
Views: 17457

Re: v6.43.8 [stable] is released!

*) capsman - fixed "group-key-update" parameter not using correct units;
Can we get some details on this?
How was the parameter interpreted before this fix? Is the long-term release affected by the same bug? If yes: when can we expect a backport of this bugfix to long-term?
by whatever
Thu Dec 27, 2018 2:56 pm
Forum: Wireless Networking
Topic: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz
Replies: 9
Views: 606

Re: Mikrotik RB4011iGS+5HacQ2HnD and WiFi 802.11 AC 160mhz

As already mentioned: You can only benefit from features which are supported by AP and client. If your client only supports 80 MHz with dual chain you will not benefit from all four chains which are available on the 4011.
by whatever
Tue Dec 04, 2018 10:17 pm
Forum: Wireless Networking
Topic: Capsman anf firmware 6.43.4
Replies: 1
Views: 184

Re: Capsman anf firmware 6.43.4

It's highly unlikely that your dst-address=127.0.0.1 rule will match traffic to 192.168.0.1:5246. Try to use a dst-address-type=local src-address-type=local rule like documented at https://wiki.mikrotik.com/wiki/Manual:S ... in_CAPsMAN
by whatever
Sat Dec 01, 2018 2:02 pm
Forum: Wireless Networking
Topic: Multiple APs + seamless + wired backbone
Replies: 3
Views: 386

Re: Multiple APs + seamless + wired backbone

RTSP or WDS is completely unrelated to your problem. I had some ARP issues that disappeared as soon as I set multicast-helper on the wireless interfaces to "full", you might try if that helps your usecase. In order to support your client devices in roaming you should rather lower the tx-power of you...
by whatever
Fri Nov 30, 2018 6:37 pm
Forum: Wireless Networking
Topic: Removing Mikrotik elements from beacons
Replies: 12
Views: 1173

Re: Removing Mikrotik elements from beacons

Didn't even know they were doing this, that's definitely something I'd like to turn off. +1
by whatever
Mon Nov 26, 2018 12:21 pm
Forum: Beginner Basics
Topic: Advertising with Mikrotik
Replies: 4
Views: 280

Re: Advertising with Mikrotik

You dont!?
Nowadays the majority of websites uses https which is designed to be non-interceptable.
by whatever
Mon Nov 26, 2018 9:19 am
Forum: Wireless Networking
Topic: how to disabled WMM?
Replies: 1
Views: 212

Re: how to disabled WMM?

You don't. You can only toggle the QOS part, why do you want to disable it completely?
by whatever
Fri Nov 23, 2018 9:27 am
Forum: General
Topic: Windows update + Proxy
Replies: 5
Views: 275

Re: Windows update + Proxy

Shouldn't they have a WSUS server for centralized update management?
by whatever
Thu Nov 22, 2018 3:37 pm
Forum: Wireless Networking
Topic: Capsman wrongly provisions CAPs
Replies: 5
Views: 417

Re: Capsman wrongly provisions CAPs

Changing identity to serial number via script should be possible.
by whatever
Wed Nov 21, 2018 10:02 pm
Forum: General
Topic: 802.3ad Hash Keys
Replies: 2
Views: 153

Re: 802.3ad Hash Keys

That is not possible with the standard linux transmit hash policies for 802.3ad.
Thoughts: Why the hell would you want that???
by whatever
Wed Nov 21, 2018 6:08 pm
Forum: Wireless Networking
Topic: Capsman wrongly provisions CAPs
Replies: 5
Views: 417

Re: Capsman wrongly provisions CAPs

Well, regex "79" does indeed match "179", etc., so the result you are experiencing is expected.
Try using "^" and "$" in your regexes to match beginning and end of your identity strings.
by whatever
Fri Nov 16, 2018 7:38 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 26
Views: 2877

Re: hAP AC2 availability

That's interesting, I guess the change happened with the switch to factory software 6.42+. I own several devices with factory software 6.40 and 6.41 and all of them have 233MB.
by whatever
Thu Nov 15, 2018 11:36 am
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 26
Views: 2877

Re: hAP AC2 availability

Has anyone ever received a unit with less than 230MB RAM?
by whatever
Sun Nov 11, 2018 6:14 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 26
Views: 2877

Re: hAP AC2 availability

While it's currently unavailable at all the large distributors, the smaller ones apparently have some stock left.
by whatever
Fri Nov 09, 2018 5:54 pm
Forum: Wireless Networking
Topic: Hap ac & poor performance in 2.4GHz and 5GHz
Replies: 16
Views: 1110

Re: Hap ac & poor performance in 2.4GHz and 5GHz

For local forwarding to work you got to setup your L2 network accordingly and configure the bridge to drop the traffic on the CAP.
Without local forwarding all your traffic will be tunneled (possibly encrypted) to the CapsMan, that's not a good idea on a device with low CPU power.
by whatever
Fri Nov 09, 2018 4:48 pm
Forum: Wireless Networking
Topic: Hap ac & poor performance in 2.4GHz and 5GHz
Replies: 16
Views: 1110

Re: Hap ac & poor performance in 2.4GHz and 5GHz

Try local forwarding
by whatever
Wed Nov 07, 2018 9:17 am
Forum: General
Topic: Bonding LACP
Replies: 2
Views: 144

Re: Bonding LACP

You have to set a different transmit hash policy on the Huawei router.
by whatever
Mon Nov 05, 2018 3:46 pm
Forum: Wireless Networking
Topic: CapAC 1 vs CapAC 2 [SOLVED]
Replies: 4
Views: 351

Re: CapAC 1 vs CapAC 2 [SOLVED]

RSTP is enabled per default on the bridge. If you don't need it you may disable it in bridge settings.
by whatever
Tue Oct 30, 2018 8:22 pm
Forum: General
Topic: CRS317 10Gbps forwarding rate
Replies: 8
Views: 582

Re: CRS317 10Gbps forwarding rate

My understanding is that per VLAN you need an associated bridge. You cannot have a single Bridge with multiple VLANs.
Your understanding is wrong, please read the manual.
by whatever
Tue Oct 23, 2018 6:16 pm
Forum: RouterBOARD hardware
Topic: New High End Router Hardware Soon?
Replies: 11
Views: 1310

Re: New High End Router Hardware Soon?

If I remember correctly, the patch which dropped tile from the Linux Kernel explicitly stated, that nobody was using tile in current Kernels back then and that the vendors who are still shipping tile hardware had no interest in having it maintained for future Kernels. Therefore the chances that tile...
by whatever
Mon Oct 22, 2018 5:14 pm
Forum: RouterBOARD hardware
Topic: Can PowerBox Pro support simultaneous multiple power inputs?
Replies: 6
Views: 615

Re: Can PowerBox Pro support simultaneous multiple power inputs?

I think the device will always use the power input with the highest voltage. Having similar voltage on different inputs may cause flapping between them.
by whatever
Mon Oct 15, 2018 6:32 pm
Forum: Wireless Networking
Topic: Capsman Certificate issue
Replies: 1
Views: 221

Re: Capsman Certificate issue

I think what you are asking for would negate any security benefits gained by using cap certificates in the first place.
by whatever
Thu Oct 04, 2018 2:13 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 20547

Re: v6.42.9 [long-term] is released!

Must have missed that, thank you for pointing it out.
by whatever
Thu Oct 04, 2018 12:46 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 20547

Re: v6.42.9 [long-term] is released!

How is it possible that I'm still able to login with my password after downgrading from 6.43.2 to 6.42.9? I thought 6.43 changed the authentication API in order to be able to save passwords as hashes and not as plaintext. However, the fact that I'm still able to login after downgrade to 6.42 clearly...
by whatever
Thu Sep 27, 2018 12:07 pm
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 279
Views: 42015

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

Try local forwarding (datapath) for even faster speed.
by whatever
Wed Sep 26, 2018 9:13 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

Agree its going to catch a few people out, but if you look at the link in my post 152 ( https://forum.mikrotik.com/viewtopic.php?p=688286#p687944 ) they are only €35 new, Are you using any of their products? They are offering 10GbE Multimode optics for 15€ while the competition is selling them for ...
by whatever
Mon Sep 24, 2018 10:13 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

Imho the lack of switch chip features could be neglected if you had the possibility to connect a "real" switch to the 10G port via a cheap cable. However, the lack of passive DAC support forces you to spend 100+€ for this connection instead of ~25€. Combining both these weaknesses into an otherwise ...
by whatever
Fri Sep 21, 2018 11:35 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

Footnote 4 says you can only use a SFP+ DAC at 10Gb
Doesn't it rather say that you cannot use passive SFP+ DAC at all? RB4011 seems to be the only Mikrotik SFP+ device which is incompatible with Mikrotik's own direct attach cables.
by whatever
Thu Sep 20, 2018 12:17 pm
Forum: General
Topic: Can't change username on ROS 6.43 [SOLVED]
Replies: 10
Views: 1424

Re: Can't change username on ROS 6.43 [SOLVED]

The only technical reason I can think of is, that the username is now part of the salt for the new password hashes. Otherwise it might just be a case of "not yet implemented".
by whatever
Sun Sep 09, 2018 11:33 am
Forum: General
Topic: PWR-Line AP
Replies: 31
Views: 4105

Re: PWR-Line AP

Hi, do you know what wireless specs will this device have? How many chains on which bands?
2.4Ghz b/g/n, dual chain. See https://fccid.io/TV7PL64112ND
by whatever
Sat Sep 08, 2018 2:12 pm
Forum: RouterBOARD hardware
Topic: Whats the best current home routerboard for a gigabit ISP?
Replies: 13
Views: 1229

Re: Whats the best current home routerboard for a gigabit ISP?

There's as slight bug in switch chip in IPQ4xxx which bit me and MT doesn't have a solution (yet).
What is the bug? Could you share some information?
by whatever
Thu Sep 06, 2018 12:15 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

One can argue about "router on a stick" SFP+ setup to lift possible limit to 15Gbps total, but i think those will not be numbers anyone is looking for.
Why not? That 15Gbps is exactly the number I'd expected to see as achievable benchmark limit for this block diagram.
by whatever
Mon Sep 03, 2018 7:17 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

https://forum.mikrotik.com/download/file.php?id=33451 Anybody else wondering why RB4011 CPU-throughput appears to be capped to 10Gbit/s? Assuming both Realtek GbE switchgroups are connected at 2.5Gbit/s each to the CPU (like RB1100AHx4), this leaves only 5Gbit/s possible thoughput for the 10GbE SFP...
by whatever
Sat Sep 01, 2018 11:17 pm
Forum: Wireless Networking
Topic: Rogue AP prevention/detection
Replies: 1
Views: 347

Re: Rogue AP prevention/detection

1. Use physical security on your ports.
2. You cannot prevent anyone from using "your" SSID, but using WPA2+Radius authentification should prevent MITM.
by whatever
Thu Aug 30, 2018 11:18 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 324
Views: 37893

Re: RB4011

Oh boy, it does look ugly with those rack-mount ears attached.
It's a pretty clever way of combining rack-mount capability and desktop case into the same product. Not exactly pretty, but very funktional; I like it.
by whatever
Wed Aug 22, 2018 11:07 am
Forum: RouterBOARD hardware
Topic: Temperature sensor hap ac^2
Replies: 1
Views: 291

Re: Temperature sensor hap ac^2

No sensor.
by whatever
Mon Aug 20, 2018 11:03 am
Forum: General
Topic: crs326 update problem
Replies: 3
Views: 234

Re: crs326 update problem

It's the same as with every other 16 MB routeros device: The update is stored in RAM until installed. Just try it.
by whatever
Sun Aug 19, 2018 3:53 pm
Forum: General
Topic: crs326 update problem
Replies: 3
Views: 234

Re: crs326 update problem

What happens if you try to upgrade?
by whatever
Sun Aug 19, 2018 11:11 am
Forum: General
Topic: Passwords for hundreds/thousdands of devices
Replies: 10
Views: 672

Re: Passwords for hundreds/thousdands of devices

You shouldn't use local passwords at all for this kind of deployment. Look into asymmetric crypto (ssh public keys) and/or centralized authentication (radius, etc).
by whatever
Sat Aug 18, 2018 3:25 pm
Forum: General
Topic: Question: HAP AC^2, Wan speed less than 100Mbps on 500Mbps internet line. [SOLVED]
Replies: 3
Views: 424

Re: Question: HAP AC^2, Wan speed less than 100Mbps on 500Mbps internet line. [SOLVED]

Use system->resources->CPU and tools->profile to monitor CPU usage while running the speed test. Is any of the cores maxed out? If yes: find out what process causes the high cpu usage, try fasttrack, etc. If not: Check cables and interface speed. Are all the involved interfaces running at gigabit sp...
by whatever
Sat Aug 18, 2018 12:27 am
Forum: RouterBOARD hardware
Topic: When will be RB3011UiAS-2HnD-IN available?
Replies: 65
Views: 18322

Re: When will be RB3011UiAS-2HnD-IN available?

This has already been discussed here two weeks ago. The corresponding topics have been deleted/hidden, so it's probably not meant to be public yet.
by whatever
Fri Aug 17, 2018 6:23 pm
Forum: RouterBOARD hardware
Topic: High speed network
Replies: 1
Views: 297

Re: High speed network

Please stop calling ethernet over fibre "fibre channel", these are two different things.
by whatever
Wed Aug 15, 2018 12:19 pm
Forum: Wireless Networking
Topic: caps-man manager interface all forbid=yes && caps-man-addresses=127.0.0.1
Replies: 3
Views: 597

Re: caps-man manager interface all forbid=yes && caps-man-addresses=127.0.0.1

It's rather a fcked up design than a bug, this is even documented in the wiki. Documentation suggests allowing "all" and forbidding every unwanted interface. This could easily be fixed by introducing an "allow local" setting. Link: https://wiki.mikrotik.com/wiki/Manual:Simple_CAPsMAN_setup#CAP_in_CA...
by whatever
Sun Aug 12, 2018 8:32 pm
Forum: RouterBOARD hardware
Topic: No VLAN table on Realtek switch chip?
Replies: 9
Views: 866

Re: No VLAN table on Realtek switch chip?

But if I'm forced to connect a "real" switch anyway I can get all the ports i need from the switch. Want to connect three ISPs? Configure three ports on your switch on separate vlans and pass them through a "WAN" trunk to your router. Want multiple local networks? Separate them on your switch and pa...
by whatever
Sun Aug 12, 2018 7:31 pm
Forum: RouterBOARD hardware
Topic: No VLAN table on Realtek switch chip?
Replies: 9
Views: 866

Re: No VLAN table on Realtek switch chip?

Thank you for the confirmation. While I get that a router is expected to provide only limited switching features and has the necessary CPU power to perform certain things in software, I'm still confused by this decision. Why would I need 10+ ports on a router if it can't do proper vlan switching in ...
  • 1
  • 2