MikroTik

whatever

MikroTik pushes a release to the 'stable' channel far too early, when it is often anything but stable.....

That's not new, is it? I guess the real issue is that ROS 7 does not have a long-term release channel.

whatever

Use create-static instead of create-dynamic. Dynamic interface are recreated with new id on each change.

whatever

Depending on your setup, you may be able to work around this limitation by separating hw-offloaded switch ports and wifi interfaces to different bridges. I.e. one hw accelerated bridge for wire speed switching without CPU load and one separate bridge to handle your wifi traffic and vlan tagging on t...

whatever

Hardware accelerated bridge is broken/buggy on hap ax2. By disabling STP, you "accidentally"(?) enabled the faulty hardware offloading. See footnote #6 at https://help.mikrotik.com/docs/spaces/ROS/pages/328068/Bridging+and+Switching#BridgingandSwitching-BridgeHardwareOffloading Re-enabling...

whatever

Assuming you have capable devices (ax hardware), vlan ids should be assigned in capsman. The slaves datapath cap setting is only useful to put slave interfaces on a different bridge than the master interface. You cannot use it to separate multiple slave interfaces.

whatever

Which all might indicate, that ft- part of authentication type is only one (optional?) part of roaming procedure Yes, FT is not necessary for roaming, but it accelerates authentication to the new AP when roaming. This is especially noticable with EAP authentication, because it saves several roundtr...

whatever

Don't expect anything like this unless you see a corresponding entry at https://fccid.io/TV7

whatever

Reason is most likely an error in your configuration.

whatever

*) dhcpv4/v6-client - added check-gateway parameter;

Nice, no more workarounds with script!

whatever

*) wifi - implement steering parameters to delay probe responses to clients in the 2.4GHz band How does 2g-probe-delay practically work and when should be used? Speculation: I assume it delays probe responses on 2g interfaces to ensure probe responses on 5g interfaces are faster. So when a client p...

whatever

WARNING: Do not install this on RB450G or HAP AC2 Both has been repeatedly bricked,[...] Not confirmed, hap ac2 upgrade was successful here. Admittedly, there is not much free space left and only routeros and wifi-qcom-ac are installed, but the device did not brick: > /system/resource/print uptime:...

whatever

I don't think there's a better solution for 5+ VLANs. If you only have one single VLAN, you can work around the tagging limitation by creating a separate bridge with STP disabled and add a vlan interface from your main bridge to it. Set it as datapath before connecting to capsman and it will take ca...

whatever

Well, at least this rules out firmware issues. I currently do not feel like removing the heatsink with all the thermal compound and trying to solder tiny smd components without even knowing which one failed. So I guess this is where this topic ends for now. Thank you for your support in verifying th...

whatever

Other device connected through different cable, now it does not even link at 100Mbps...

ether1_nolink.png

I guess this means that somewhere inside my hap ax2 there is a broken connection?

whatever

Thanks for the hint, now we are getting somewhere.

empty 3m cable connected:

ether1_3m-cable.png

empty 15m cable connected:

ether1_15m-cable.png

The third pair always shows 0m!

whatever

Does PoE-in still work? yes On cable test screenshots ... can you click the '+' sign next to CablePairs ... it should show state of each cable pair individually. When link is up clicking the + sign has no effect. With no cable connected, cable test shows everything as open: ether1_cable-test.png

whatever

First thing I would do is change cable (and test first using 2 different devices it is capable of reaching 1Gbps). I already did this before opening this thread, I spent hours trying to find the error elsewhere. Result: Everything connected to my hap ax2 on port ether1 is limited to 100 Mbps, every...

whatever

You can try to run the "cable test" tool on ether1. Unfortunately "cable test" tells me everything is ok, from this view it looks like the opposite side does not advertise 1G which is not true: ether1.png Plugging the same cable into ether5 results in gigabit speed: ether5.png

whatever

Hello there, after running PoE-powered for more than 2 years, I recently noticed that my hap ax2 is no longer able to link at 1 Gbps on the PoE port (ether1). All the other ethernet ports are still able to achieve gigabit speed. Apart from the reduced link speed on ether1, everything is still functi...

whatever

After updating my RB4011+RM from 7.16.2 to 7.17, several IP related settings were lost/reset to default. Caught it because the router was suddenly sending out neighbor discovery packets. These settings went missing: /ip neighbor discovery-settings set discover-interface-list=none /ip settings set ma...

whatever

How did you perform the upgrade? The integrated package update function should take care of wifi/wireless drivers automatically. If you upload the packages manually, you have to make sure you include the proper drivers package.

whatever

As far as I know, the CRS326 cannot do hw accelerated L3 routing with firewall, which would be necessary for your use case. Doing routing on the CRS's weak CPU is technically possible, but will be very slow.

Why don't you use your existing opnsense box for inter-vlan routing?

whatever

regarding Fritzbox, have you tried: "EEE (Energy Efficient Ethernet) in FRITZ!Box deaktivieren" https://at.avm.de/service/wissensdatenbank/dok/FRITZ-Box-6890-LTE/3817_Haufige-Abbruche-der-LAN-Verbindung/#:~:text=EEE%20(Energy%20Efficient%20Ethernet)%20in%20FRITZ!Box%20deaktivieren Wow, I ...

whatever

Bump

Any news here? This is still an issue with 7.16.2.

whatever

*) ethernet - improved interface stability for RB4011 devices;

Any chance this fixes interface flapping which occurs when directly connecting to specific devices, like AVM 6591?

whatever

/interface/wifi/steering> add neighbor-group=test name=test Can you actually display/print the neighbor-group (and its BSSIDs)? To me it appears that you just added a steering configuration with a reference to a non-existent neighbor-group. Edit: My bad, it works as described! As soon as you assign...

whatever

No, you can't!? One level up you can define custom steering settings which can refer to an existing neighbor-group, but as far as I can tell there is no possibility to create your own custom neighbor-group.

whatever

I assume that if the bridge does not learn which port a MAC address is on, it will broadcast frames with this destination address to all ports. Remember ethernet hubs? You basically lose all the efficiency gained by knowing where an address is connected.

whatever

Code: Select all
*) wifi - added multi-passphrase (PPSK) support (CLI only);
any documentation ? example ?

https://help.mikrotik.com/docs/display/ ... Properties
Scroll down / search for "multi-passphrase".

whatever

More RCs increase the probability that 7.16.0 will be reasonably stable. I think this is better than having to wait for 7.16.1 or 7.16.2.

whatever

*) return tab based interface, while keeping benefits of dropdowns This is only half done. Most people want these WebFig style dropdowns as tabs too. tabs_please.png +1 tldr: Winbox 4beta generates WireGuard QR codes that Android WG app can not read; Winbox 3.41 is fine [ ... ] Anyone else have the...

whatever

Have a look at https://youtu.be/37aff6d14Xk .
You haven't set any wifi interface to be configured by capsman.

whatever

Correct, these are the two ways to control signal strength. For antenna gain, you basically have to check the product page and round up to the next integer to get the default value. Each increment from there on will lower signal strength by 1 dB. Tx-power, on the other hand, sets the desired effecti...

whatever

"Sa Query timeout" where flooding the log. Try setting connect-priority=0/1 to improve this. With default settings the new AP will only accept a roaming client after the old AP has confirmed it has disconnected. Making sure accept priority is always lower than hold priority can largely im...

whatever

Local forwarding - does not exist in the new one

Of course local forwarding exists in new wifi capsman. It is the only supported forwarding mode.

whatever

it was running fine on 6.49.10 and got problem as soon as upgrade to 7.15.2 No, the upgrade did not cause the problem. After upgrading you end up with the old wireless driver. Root cause for your problem is that you decided to manually migrate from wireless to wifi-qcom-ac driver after the update, ...

whatever

So essentially you are saying that routing IPv6 to a non-bridged interface is a lot faster than routing to a bridge? That's an interesting observation, sounds like a bug in ROS.

whatever

And lo and behold on the same 1Gbps internet link with same configuration, same and pretty simple firewall rules, v6 is 50% faster.

The newer Linux Kernel in v7 no longer has a routing cache. In some usecases it provided big performance gains.

whatever

Why does it expect two values at all? How are you expected to configure an internal with two separate values?

whatever

I decided to skip 7.14, but 7.15 appears to be worth updating. Great changelog.

whatever

I tried to roam to another SSID

Wifi roaming is only possible within the same SSID.

whatever

I've seen hap ax2 5GHz becoming unusable with ROS 7.13.5. I think this might be related to certain guest devices being present.
Hasn't happened yet since I updated the device to 7.15rc3, maybe the wifi-qcom driver update improved things?

whatever

And without any of 802.11r/802.11v the clients just disconnect and connect to another AP That's pretty much the definition of WiFi roaming. and it takes some seconds without connection at all. With PSK non-FT roaming takes only few milliseconds. If it takes multiple seconds for you, your AP- or L2-...

whatever

(with version less then or equal to 7.12)

Do you realize that the old wireless driver is still available with 7.13+ and even used by default for hap ac2?

whatever

The hAP ax2 has a Gigabit QCA8075 switch chip. This chip isn't listed here: https://help.mikrotik.com/docs/display/ROS/Switch+Chip+Features Hap ax2 is listed with "IPQ-PPE" switch chip. But not really a loss, since the bridge is not hardware accelerated to begin with It is if you disable ...

whatever

That's scary. Doing security and crypto stuff from scratch is high risk, low reward.

whatever

where everyone are concerned the freeHDD space, mine is 924Kb

I guess you are not using the wifi-qcom-ac driver package.

whatever

There is actually a valid usecase for installing wifi drivers on the capsman controller without own wifi interfaces: You can use it to update your caps if they share the same architecture.

whatever

Even if increasing tx power would solve your issues, you would have to increase in on both ends of the connection, i.e. also on your client device. Only increasing tx power on one end will make the signal look strong on the other, but actual performance will still suck.

whatever

According to the docs, access lists should be sequentially tried until a match is found, but that doesn't seem to be working in this instance.

It is sequentially tried until the MAC address matches. In your case the first one always matches, it is working as designed.

whatever

That's interesting. I think the RB4011 used to clock its CPU at a fixed 1400 MHz when running ROS 6 and old spec sheets still list it that way, e.g. https://www.getic.com/files/catalogue/mikrotik/rb4011igs_rm.pdf I wonder when Mikrotik decided to change the official specs to "auto (533 - 1900 )...

whatever

let me rephrase that: The result _should_ be the same.
It it isn't, you may want to report a bug to Mikrotik support.

whatever

Wondering why these parameters exist at two places - configuration and security. Interface > Configuration > security profile You can configure the parameters anywhere you like. Interface parameters overwrite everything else, if you are using a configuration profile you can overwrite specific setti...

whatever

Try to boot into netinstall mode via backup RouterBOOT loader, see documentation at https://help.mikrotik.com/docs/display/ROS/Reset+Button
tl;dr: hold reset button while power is still off and keep it pressed until the led turns off (15+ seconds after power-on).

whatever

I think old wireless driver performed a scan of all candidate frequencies and selected the frequency with the lowest number of other access points. New wifi driver might behave similar.

whatever

Try to deactivate protected management frames.

whatever

If you don't install it by default, you will have people complaining that the update broke their capsman setup. Even if capsman was inactive, people might want to retain their wireless config for future use.

Tl;dr: Some people will always complain, no matter how Mikrotik decides to handle the update.

whatever

wireless package was also present, eating away precious storage space. Why ? Because wireless was part of the main routeros package in 7.12. If wireless package wasn't installed by default during update to 7.13, you would lose features like legacy capsman. But now that it's a separate package, you ...

whatever

It doesn't now, it's just some heuristics inside the driver. False positives are possible and common.

whatever

10GBase-T consumes ~4W of power per port, i.e. an 8-port switch will consume at least ~35W. This is too much for passive cooling.

whatever

Well, from a networking point of view the interface is actually down like an unplugged cable. Unless you manually label it as edge port (or use ros 7.14+), it will even go through STP listening/learning before forwarding any traffic to the bridge once the first client connects.

whatever

Most likely LinSSID is wrong.

Your screenshot also shows "b" protocol on channel 100 and "ac" on channel 6. This is obviously incorrect.

whatever

I'd like to see this implemented for hap ax2 as well. Could get rid of that black tape...

whatever

So devices with the old default firewall rule can potentially be used for DNS amplification attacks if the attacker uses these as source ports?

whatever

Set manager property to capsman on the cap in interface settings. Did you install wifi-qcom-ac on the cap?

See https://www.youtube.com/watch?v=37aff6d14Xk and https://www.youtube.com/watch?v=AkBIQxi-VKs

whatever

Lower signal strength / tx-power to encourage roaming.

whatever

There's quite some BS included here. Roaming does NOT require interfaces to be managed by the same ROS instance, it does not even require APs from the same vendor. Just make sure that wifi interfaces use the same SSID and authentication settings and are bridged to the same layer 2 domain. That's it....

whatever

Queue Tree with only interfaces set as parents is compatible with fasttrack. This should work for your usecase, use one queue with wan as parent to shape upload and one with lan as parent to shape download.

whatever

at least on my experience, enabling FT does not allow to successfully roam (which is a bit counter-intuitive).

That shouldn't be the case. Wild guess: Are you maybe using different vlan configurations on your APs? In that case your issue might be related to ft-preserve-vlanid setting.

whatever

I remember reading that some devices have issues with FT-over-DS. You may want to do some tests with FT-over-DS disabled and only FT (over the air) enabled. However, even if working correctly, the advantages of using FT with PSK authentication are marginal. Windows will not even attempt to use FT un...

whatever

Slaves-datapath is necessary if you want your slave interfaces automatically attached to a different bridge than the master interface. If it's unset, slaves will inherit datapath bridge from the master interface.

whatever

SRD frequencies are available on AX wifi-qcom devices, they are only missing from AC devices with wifi-qcom-ac driver.

whatever

New Wifi capsman no longer supports traffic tunneling to the controller. It is always in local forwarding mode.

whatever

I don't know about new CAPsMAN, the old simply served packages from local storage. Not necessarily, see https://help.mikrotik.com/docs/display/ROS/CAPsMAN package-path (string |; Default: ) Folder location for the RouterOS packages. For example, use "/upgrade" to specify the upgrade folde...

whatever

You just have to ensure that hardware acceleration is disabled, as it is still buggy on these switch chips. Enabling rstp is one possibility to do that

whatever

AC devices with wifi-qcom-ac driver and a european country selected are currently missing the 5700-5800 SDR range from their regulation info. It is, however, available on AX devices with wifi-qcom driver. Theoretically it might be possible set country to Australia and tx-power to 14, but -- of cours...

whatever

And speedtest.net goes up to 400+ mbps. This is quite good! It's probably the best you will get with the old wireless driver. If you want even faster 5GHz speed (500+ Mbps) you may want to test the new wifi driver, but this requires building a new, slightly different wifi configuration from scratch...

whatever

I guess MikroTik now must focus on the random reboots issue...

None of my devices is suffering from random reboots, so this is probably dependant on your specific configuration.

whatever

Wikipedia says 5Ghz should go to "at least gigabit speeds" so that's what I'm aiming for. Where exactly did you read that? In general this is not true. Should I increase the channel width? 9. why not use 20/40/80 Ceee Because I've read multiple times that I should not. Should I? If the si...

whatever

You create a provisioning rule for ax devices and are complaining that it does not match non-ax devices? Works as designed.

whatever

AP wifi interfaces will go "down" when there is no client connected to them.

whatever

Do you just want to update, or do you want to migrate to wifi(wave2) as well?

whatever

1. Only the default session
2. Save/resume window configuration per device
3. Don't hide it in advanced
4. No
5. I did not know that sessions are device independent and can be switched on the fly

whatever

Is there a matching accept entry before your reject rule? Order matters.

whatever

Put them on a separate vlan without IPv6!?

whatever

You can use slaves-datapath in cap settings to set the bridge for slaves. If it's unset, slaves will inherit the bridge from master interface's "datapath.bridge" setting on the cap since ROS 7.13.

whatever

Unset manager on local interfaces, or set it to "local". Then go to the Radios tab, select your local radio and click the "Provision" button.

whatever

I think this might be the result of the change from separate antennas to antennas integrated into the main PCB. If you are in Europe, you can increase signal strength by moving to channel 100-128, e.g. 5500 MHz, this made it usable for me.

whatever

You can set frequency to the the central frequency of the desired 20MHz control channel. Extension channels are then automatically derived from this and the configured channel width.

I suggest using https://en.wikipedia.org/wiki/List_of_WLAN_channels as reference.

whatever

If another frequency is available, then it should switch channels on DFS events, yes. That's why I was asking. Maybe just set channel to 5180 and check if it still disappears.

whatever

I had similar symptoms with with flapping ethernet ports between RB4011 and the ISP's modem, but these showed up in the log.

whatever

Check log for radar detection / DFS events. Do you have non-DFS channels configured as well?

whatever

It's not broken, you are using it wrong. First thing you should do is removing all the empty(!) authentication-types and encryption settings. Then start with a minimal configuration where anything but the SSID and security password is set to default. Once this is working you can start refining setti...

whatever

As it turns out (https://forum.mikrotik.com/viewtopic.php?t=203117#p1046670), wifi-qcom(-ac) drivers always enable 802.11b on 2.4 GHz interfaces: Basic rates are set to "1, 2, 5.5, 11" so beacons are sent at a mere 1 Mbps. I realize that making basic rates completely customizable with the ...

whatever

when an RB4011 (or any device) is upgraded from 7.12.1 to 7.13, an unusable WiFi menu is added.

It's not unusable, it is required for managing ax devices via capsman.

whatever

Wifi clients and matching DHCP-lease: :foreach client in=[/interface/wifi/registration-table/find] do={ :local "client-mac" [/interface/wifi/registration-table/get $client value-name=mac-address]; /interface/wifi/registration-table/print stats where mac-address=$"client-mac"; /ip...

whatever

The lower standards (at least G/A and newer) are still included. I don't know if this also includes B, I hope not.

whatever

1. I think the only reasonable channel band setting is leaving it unset. Unless you have compatibility issues, defining this setting will only make things worse.
2. Unfortunately rates currently cannot be customized in new wifi drivers.

whatever

Well, then read the manual, uninstall wifi-qcom-ac and reinstall wireless.

whatever

Yes, it will still run ax. You can verify it from your client.

whatever

But does that mean the ax device run only on 802.11ac, so the hAP ax2 speed 'downgrade' to ac level ?

No, the provisioning setting only defines where a provisioning rule is used. Downgrading only happens if you set band in channel properties.

whatever

Each dual-band wifi device has two master interface, one for 2 GHz and one for 5 GHz.

whatever

You can trigger provisioning on your local interfaces, no need to set configuration manually. In Winbox just select your local radio and hit the "provision" button, in cli run something like "/interface/wifi/radio/provision [find local]" etc. If I understand it correctly, I shoul...

whatever

You asked for a proposal: main interface instead of master interface.

That would be misleading as there can be multiple master interfaces. I think it should be kept as master/slave, from a technical perspective it's perfect naming and immediately clarifies the relation between these interfaces.

whatever

VLANS on datapath worked OK on ROS6, but now on ROS7.13 is this such a basic setting which does not exist. It still exists and still works exactly the same, as long as you stay on the "wireless" driver package. If the wifi-qcom-ac driver does not meet your requirements you should not use ...

whatever

It will install available updates from capsman and reboot the selected cap.

whatever

You can either set channels manually (which would require a provision rule per radio)

You could also provision static interfaces and then overwrite the channel directly in interface settings. This way you don't need too many provisioning rules.

whatever

You can set capsman upgrade-policy to none, then CAPs will only upgrade when you trigger it in remote cap tab.

whatever

Is it possible to wall mount hap ax lite?

whatever

this is a mission critical network
[...]
Of course I have no backup of the config.

*cough*

whatever

I wasted the whole afternoon trying to get down from 7.13 but there was no way, not even to 7.12.1

Issue on layer 8

whatever

Did you read the RB4011 specifications? It only supports passive poe out, standard 802.3af/at active poe is _not_ supported.

whatever

Check ft-preserve-vlanid setting documentation, it defaults to yes. ft-preserve-vlanid (no | yes ) no - when a client connects to this AP via 802.11r fast BSS transition, it is assigned a VLAN ID according to the access and/or interface settings yes (default) - when a client connects to this AP via ...

whatever

The bridge has to be selected on the CAP itself in interface settings. See https://www.youtube.com/watch?v=37aff6d14Xk .
However, if you need vlan tagging on AC devices, you may want to keep datapath bridge setting empty and do all the bridge/vlan config manually.

whatever

Did you have a look at the official video guides?
New driver package: https://youtu.be/AkBIQxi-VKs
New capsman: https://youtu.be/37aff6d14Xk

Once you have migrated to new wifi driver, you can set the "manager" property to capsman on the cap interfaces.

whatever

No, the reasonable thing to do would be checking the actual PoE specifications of your AP. If you keep guessing this discussion is useless.

whatever

I would assume that v6 stable will get promoted to v6 long-term in a few weeks.

whatever

You might want to check the PoE specifications of your APs instead of making assumptions.

whatever

Read the product page: https://mikrotik.com/product/RB960PGS Ethernet ports 2-5 can power other PoE capable devices with the same voltage as applied to the unit . [...] It can power at/af mode B (4,5+)(7,8-) compatible devices, if 48-57 input voltage is used . Unless your APs can be powered via 24V ...

whatever

Are you using a 48V power supply?

whatever

Just set the same SSID and authentication on both interfaces and join them to the same layer 2 domain.

whatever

by looking thru the Files, seems I can see any file on it so I still unable to install wireless package. Can you please show me some ways to check for any remain files ? Thanks Have a look at configurations like large IP address lists and/or the certificates stored in the device, especially CA cert...

whatever

If you want faster speed you have to upgrade to 7.13+ and migrate to the new wifi-qcom-ac driver.

whatever

you "lose" the functionality of winbox remembering the window settings for your wireless menus... because apparently it confuses the old and new wireless menus,

I guess this is fixed in 7.14, changelog says menu was renamed.

whatever

*) bridge - try to set wireless bridge ports as edge ports automatically;

Nice, thank you!

whatever

they may have changed the address.

> :put ([/tool fetch url="http://upgrade.mikrotik.com/routeros/NEWESTa7.stable" as-value output=user]->"data")
7.13 1702545848

whatever

Old ROS 7 versions don't need a separate wireless package, just uninstall wireless and downgrade the main routeros package.

whatever

Why would you add a station mode interface to a bridge? This makes no sense at all and cannot produce any usable result.

whatever

Station bridge mode - the radio does not connect

You can't use station bridge mode between old wireless and new wifi driver, it requires the same driver on both sides. This is documented in the manual.

whatever

It doesn't fit with any extra packages, you have to remove zerotier before installing wifi-qcom-ac.

whatever

Why is that needed? In my WifiWave2/WiFi CAPsMAN setup I don't use this, and devices connect and roam successfully. At least with FT disabled, the default connect-priority setting delays roaming to a new AP until a client has disconnected from its previous AP. With my Android phone this caused seve...

whatever

In CAP settings you can select that slaves are created as static interfaces: slaves-static () Creates Static Virtual Interfaces, allows the possibility to assign IP configuration to those interfaces. MAC address is used to remember each static-interface when applying the configuration from the CAPsM...

whatever

Updated 3x hap ac² 1x RB4011+RM all coming from ROS 6.49.10 long-term via 7.12.1 to 7.13 successfully. I replaced the wireless package with wifi-qcom-ac on all hap ac²s afterwards. 1x hap ax² update was also fine, but it obviously was on ROS 7 already. Finally made the move to ROS 7 everywhere, so I...

whatever

Did you follow the steps from https://help.mikrotik.com/docs/display/ ... g+RouterOS ?

whatever

Bad config. Wifi-qcom-ac does not support vlan tagging, read the manual.

whatever

AX is always local forwarding

whatever

With wifi(wave2) capsman configuration is no longer separate from local wifi configuration. It's only confusing because it used to be different.

whatever

WiFi is always there, but useless?

It's not useless, it can be used as Capsman to manage devices using new wifi driver.

whatever

whatever

why would I use old wireless if I can use 7.12 with regular wave2 driver which allows benefits of wave2 and connect it to new capsman (CHR VM) and also all provisioning rules with SSID and VLANS's should still work without the need of manual setting up of VLAN's' per SSID Because you cannot do that...

whatever

I doesn't really matter, does it? Even if you were able to connect local wifi interfaces to local capsman, the end result would be identical to local interfaces provisioned using the same configuration. I don't get where you see additional manual effort.

whatever

Could someone confirm: - If using Hap AC3 with 7.13 have to use wifi-qcom-ac No, you don't have to use the new driver. You can stay on the legacy "wireless" driver and keep using old capsman with old features (and old performance). So if you run CapsMAN on a hAP AC3 the wireless interface...

whatever

The triangle/arrow thing is not specific to ROS7, it is the same in ROS6.

whatever

It's an abbreviation to use the same namespace(?) as the previous parameter. In your example ".width" is short for "channel.width", ".mode" is short for "configuration.mode", etc.

whatever

See that little triangle on the left of authentication types? It is not for cosmetics, clicking it actually toggles between configured/non-configured. If you configure anything on the interface, you are overwriting whatever is configured for the same setting in the selected profile. tl;dr: You did n...

whatever

I think with 7.13 you should be able to use new Capsman via /inteface/wifi config.

whatever

Nope, station-bridge requires the same driver on both sides of the connection.

whatever

I started noticing the interfaces in the wifi wifi tab, the ac radios showed a message in red "client was disconnected because could not assign vlan". Odd, I thought, because the ac configuration has no datapath set which would be trying to set the vlan. The ax radios did not have this me...

whatever

From my experience the automatic edge port setting on wifi interfaces does not work and will cause roaming issues when (R)STP is enabled. I have therefore disabled any kind of spanning tree on hap ac2 as well as hap ax2 and so far have not noticed any issues caused by this on either of them. Why wou...

whatever

Multiple SSID's minimum 10

This is not a good idea, 10 SSIDs on the same radio will waste a lot of airtime just for sending out beacons.

whatever

and/or security.connect-priority=0/1

whatever

@whatever: Any recommendations for confirming the actual iPhone XS Max Hotspot 5Ghz frequency in use?

Use wifi analyzer (https://play.google.com/store/apps/deta ... fianalyzer) on an Android phone or find a similar software for iphone.

whatever

Assuming iPhone is behaving like Android in Europe, the 5GHz hotspot is most likely located in the SRD range on channel 149. At least in Europe, this range is apparently not (yet?) supported by AC devices with wifi(wave2) drivers and proper country set. Check "/interface/wifiwave2/radio/print d...

whatever

Hi there, I am kind of confused by the recent Youtube video where Mikrotik advertises their FT implementation: https://www.youtube.com/watch?v=vkWPlsuyuKE Apart from the incredible slow roaming times displayed there, at the end of the video it is suggested to enable FT even in what I call "mixe...

whatever

I suffered from radar detections after upgrade from legacy wireless to wifi(wave2) and it looked like I could make them go away by moving the control channel. I ended up moving to a completely different channel, so I cannot provide long-term experience, but it appeared like switching from e.g. chann...

whatever

It's documented at https://help.mikrotik.com/docs/display/ ... i-Benefits

400Mb/s maximum data rate in the 2.4GHz band for IPQ4019 interfaces

Probably some proprietary extension of the standard from qcom.

whatever

Downgrade only works if you upload the old routeros packages before hitting the downgrade button.

whatever

I didn't go through your whole configuration, but as wave2 does no longer distinguish between "ap" and "ap-bridge" mode, this sounds like a huge security issue. If your observation is accurate, wireless clients could gain access to vlans they are not supposed to see, I suggest yo...

whatever

Try setting "PubkeyAcceptedAlgorithms +ssh-rsa" in ~/.ssh/config for your routeros hosts.

whatever

*deleted*

whatever

Assuming your guest network is your only wifi slave interface, you can setup a separate bridge for guest network and assign it with "/interface/wifi/cap/set slaves-datapath=bridge-guest" (before provisioning) on the CAP. Alternatively, it might be possible to provision static wifi interfac...

whatever

Unfortunately it has been like that in old capsman as well. It's the reason why I disable STP on all my APs.

whatever

You can just overwrite channels on the individual wifi interfaces.

whatever

there are actually several websites that will simply not load anything or take a loooooong time (and multiple attempts) loading.

Maybe try clamping TCPMSS in firewall?

whatever

For new capsman you have to select the bridge directly on the CAP itself (datapath setting on the delegated master wifi interface), similar to local forwarding with old capsman where it was selected in CAP settings. For slave interfaces it still is configurable in CAP settings.

whatever

"Mesh" is usually just a marketing buzzword. It can stand for whatever a vendor decides to call by that name, there is no proper definition.

whatever

Hello, I am still facing the SA Query Timeout issue and some WIFi devices do not roam properly between the access points. The workaround /interface/wifiwave2/configuration> set [find] security.connect-priority=0/1 works, but I am not sure that this is the right approach. Thank you very much for tha...

whatever

I read that wifiwawe2 is implementing 802.11r/k/v that can solve this problem Please note that 802.11r/k/v does not automatically solve all roaming problems. 802.11r accelerates re-authentication when roaming, i.e. this is mostly helpful when you are using EAP authentication. PSK authentication is ...

whatever

Our APs are cAP AC which I don't think meet the requirements for that anyway.

Support is/was added in ROS 7.13.

whatever

You need to recreate everything from scratch.

whatever

although as you can see it has few RAM [ ... ] resources left

Due to the memory leak in beta2 you should keep your winbox connection closed whenever possible and maybe reboot to reclaim any leaked RAM.

whatever

Quick test of hap ac² (256MB RAM version) with wifi-qcom-ac driver. AP: Performance is great, download speed on ac clients is similar to the same client on hap ax². The only real issue is the lack of VLAN tagging without bridge filtering. Station: With the legacy driver I could set country to "...

whatever

Thank you very much, this is amazing. While I can work around the VLAN limitation on ac devices, I hope this limitation can be removed in later releases. Thanks to the wifi changes and IPv6 fixes, it may now finally be worth upgrading all my old devices from ROS 6 long-term to ROS 7. @evbocharov: th...

whatever

*) wifiwave2 - added "steering" parameters and menu to set up and monitor AP neighbor groups (CLI only); Is it possible to define custom lists of bssids to annouce via 802.11k with this? If yes, how does it work? I can see automatically created dynamic neighbor-groups, but cannot see how ...

whatever

maybe because is-is performans is a bit better
Betamax was better than VHS ;)

No it wasn't, see https://www.youtube.com/watch?v=hGVVAQVdEOs ;)

whatever

Why did you disable STP? Because an AP interface with no clients connected is disabled from bridge point of view. With STP enabled there is a delay between the time the first client connects to wifi and the time the AP interface enters forwarding state in the bridge. Keeping STP disabled allows imm...

whatever

RRM enabled

Try to disable it.
My phone if roaming fine between hap ax2 and hap ac2. WPA2-only, 802.11r/k is disabled, spanning tree on bridge also disabled, no access list rules.

whatever

Fix for WiFi will be in 7.11 so stay at 7.8

Fix for what issue?

whatever

Updated RB4011 (non-wifi) and hap ac2. No issues so far.

whatever

I think hw offloading on the new IPQ-PPE switch chip is still buggy. Its features are very limited anyway, for example vlan filtering is not supported at all.

whatever

Any news on this? Is it at least on the roadmap now?

whatever

ipv6 fasttrack support please

This feature would be nice to mitigate the removed route cache when upgrading from ROS 6.

whatever

Check all mac addresses of your bridges and wifi interfaces. They must be unique, you probably have duplicates.

whatever

It's a known limitation of the wifiwave2 driver.

whatever

So essentially it works as designed. You just did not know that the arrows toggle between defaults and custom configurations.

whatever

You may want to enable multicast helper on the wifi interface where your printer is connected to. It will make the AP send discovery things like ARP- and mDNS-requests as unicast to the individual connected devices instead of broadcasting them at basic rates. At least for me, this helps too ensure w...

whatever

+1

While I currently don't need it myself, there are tons of valid use cases for a mDNS repeater. There are multiple ready-to-use open source implementations and required configuration is minimal, this really should be implemented as a feature in ROS.

whatever

It might be possible to leverage IGMP Proxy or PIM to make Airprint discovery possible across layer3 boundaries. But as already mentioned, the easiest and least error prone solution is to ensure that everything is within the same layer2 domain, i.e. change your secondary router's configuration from ...

whatever

Let's see where prices end up nowadays with inflation, etc.
I think I paid ~65€ incl taxes for a hap ac2 some years ago, so $60 for a 2.4GHz only device does not appear that attractiv at first glance.

whatever

The stock wifiwave2 package will never work on hap ac2 due to storage constraints. I think theoretically Mt should be able to release a stripped down package which only includes the necessary drivers for this model. But even then, there is still the issue that most hap ac2 models only have 128MB RAM...

whatever

Why can a hap ax2 with stronger cpu and new wifi fit into a 120x101 casing.

The hap ax2 case is completely open on one side, you are basically looking at the exposed black heatsink with only some hints of plastic casing around it.

But I agree that cap xl is not the prettiest thing.

whatever

Unless you really _have_ to support 802.11b, you usually want to get rid of it. Use g/n or n-only mode.

Regarding your frequency question: As already mentioned you probably fcked up the extension channel config.

whatever

I don't think there is much you can do. Ensure multicast helper and keepalive is disabled, try setting basic rates to 6+12+24 instead of 6 only. If none of this helps: Go for another vendor.

whatever

Depending on your location, DFS is mandatory on many channels. Did you try waiting 10 minutes? If a channel is really clean it will start working after the initial listening period.

whatever

mkx already explained the situation, what you are seeing is unfortunately expected behavior. I believe the lack of support for larger A-MPDU/A-MSDU values prevents the old driver from reaching high throughput. The old Mikrotik driver provides a lot of control, but lacks modern features and performan...

whatever

You don't see an issue if credentials for a read-only account, e.g. for monitoring purposes, are sufficient to execute code?

whatever

Are there any noteworthy bugs in latest v6 versions?

Apparently it's vulnerable to CVE-2022-45313 and CVE-2022-45315

whatever

I think there was a change for this setting not too long ago, which basically changed it from a deny- to an allow-list. Previously you had to pay very close attention to keep your infrastructure safe, now it's more reasonable.

whatever

All LEDs off? most probable (hope so) Does this work for anyone? I set all-leds-off to "after-1h" several hours ago, but the green port leds in the front are still active. With hap ac2 this setting is working fine. Edit: https://help.mikrotik.com/docs/display/ROS/LEDs#LEDs-Indoordevices h...

whatever

How is hap ax2 performance with wifi5 (ac wave2) clients?

I can now answer my own question: Speedtest.net mobile app on 1x1 clients shows ~300 Mbps download speed, 2x2 client gets up to ~550 Mbps. 80MHz channel width on 5GHz.

Search found 443 matches