Community discussions

MikroTik App

Search found 33 matches

by Retral
Wed Jun 30, 2021 11:34 pm
Forum: General
Topic: HEX IPSec Connection Mark
Replies: 1
Views: 466

HEX IPSec Connection Mark

I believe I may have found a bug in ROS 6.48.3 Does anyone else have the issue where if you have an IPSec peering setup between two Mikrotiks and then on the client end you set the respond only mode config connection mark and then can't see connection marks any where in connection tracking, nor can ...
by Retral
Mon Dec 07, 2020 6:06 pm
Forum: General
Topic: trouble resolving domains using remote dns server over ipsec [SOLVED]
Replies: 7
Views: 6449

Re: trouble resolving domains using remote dns server over ipsec [SOLVED]

Multiple reasons are possible but the following one is most common: When forwarding packets, the router doesn't change their source address unless NAT behaviour has been intentionally configured. But when sending packets on its own, the router chooses the source address depending on the out-interfa...
by Retral
Thu Oct 15, 2020 5:45 pm
Forum: RouterBOARD hardware
Topic: RB4011 wireless performance?
Replies: 27
Views: 8841

Re: RB4011 wireless performance?

Can you all list exact Intel wireless chips that were in the clients, when the test performed so poorly? I was going to hold my tongue on this but I cannot. Normis this type of post helps dramatically highlight why the WiFi alliance and their compatibility testing is needed for every wireless devic...
by Retral
Tue Oct 06, 2020 5:03 pm
Forum: General
Topic: rsa key support in ssh?
Replies: 16
Views: 20670

Re: rsa key support in ssh?

strong crypto enabled. some tool for generating public openssh key? In puttygen you have a field for the public key ("to paste in authorized_keys"). You take the entire contents of that field, paste them in a file and then put that on the router and import it. See link: http://blog.muhamm...
by Retral
Sun Oct 04, 2020 11:36 pm
Forum: Scripting
Topic: Scripting Engine bug or am I missing something?
Replies: 2
Views: 699

Re: Scripting Engine bug or am I missing something?

Thank you sir. I quickly see the error in how I had done it ;)

My working test code:
:global ip ""; :foreach iplist in=[/ip firewall address-list find where list="list-bogons"] do={:set $ip "$[/ip firewall address-list get $iplist address ;],$ip"; :put $ip} 
by Retral
Fri Oct 02, 2020 10:32 pm
Forum: Scripting
Topic: Scripting Engine bug or am I missing something?
Replies: 2
Views: 699

Scripting Engine bug or am I missing something?

I've got this basic script and it is not behaving as expected: :foreach iplist in=[/ip firewall address-list find where list="LIST NAME HERE"] do={:local ip "$[/ip firewall address-list get $iplist address ;],$ip"; :put $ip} I've noticed that RouterOS is including the list name i...
by Retral
Wed Sep 30, 2020 8:59 pm
Forum: Scripting
Topic: Array Push Function
Replies: 11
Views: 10416

Re: Array Push Function

My worry with solutions like this is normally "what is going on under the hood"... Maybe it is my bad that I started programming 40 years ago and back then the beautiful solution often was too slow to be usable in practice. Of course that has changed a little today, although a lot of the ...
by Retral
Fri Sep 18, 2020 6:42 pm
Forum: Wireless Networking
Topic: CAPsMAN RTS/CTS
Replies: 0
Views: 612

CAPsMAN RTS/CTS

Hey I have a feature request. MikroTik claims it's strengths are in it's customization, so can we please get control over 2 things:
1. Beacon Frame Intervals.
2. RTS/CTS in CAPsMAN can only be turned on/off so lets add the ability to change it's options.
by Retral
Sun Sep 06, 2020 9:51 pm
Forum: Wireless Networking
Topic: WiFi Testing
Replies: 2
Views: 887

WiFi Testing

Hey just a general question here.
Can someone from MikroTik's support tell me why MikroTik's products are not certified by the WiFi Alliance at all, at least as far as I can tell?
by Retral
Tue Aug 25, 2020 5:38 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 427
Views: 120559

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

With our office we have 2 of these switches. 1 Poe and one not. The Poe would have this issue about once per day. Since the beta I have not seen it happen once in over 10 days, so this looks promising.
by Retral
Fri Aug 21, 2020 11:03 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 427
Views: 120559

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

is there some public bug tracker available? where we can track some status? would also be good for their changelogs to reference bug numbers, so everybody knows what they fixed there. Just to reiterate the same comment I made elsewhere I endorse the above comment because I have made such a request ...
by Retral
Mon Aug 03, 2020 7:39 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 427
Views: 120559

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

Any chance you can describe what was done to try to fix the issue and perhaps together with that info we can correlate something else from the environments, how we use them, etc.? +1 to this idea. I find it provides valuable information almost everytime to help narrow in on the real issues are fast...
by Retral
Sun Jun 28, 2020 4:11 am
Forum: General
Topic: Feature requests
Replies: 1739
Views: 624717

Re: Feature requests Winbox Optimization

Hey I'd like to throw these ones out there. Can you make the menu in Winbox collapse able to where it's just a column of icons? I think it would be a great asset to anyone wanting to squeeze every inch out of their screen(s) real estate. Optimize the re-opening of Winbox. Often I find when I make ch...
by Retral
Sat Jun 13, 2020 7:09 pm
Forum: Scripting
Topic: Remove variable in array / Remove item in array [SOLVED]
Replies: 21
Views: 5513

Re: i want remove variable in array [SOLVED]

Calling :set on variable or array elements without any value seems to work like unset (v6.42.3), check this: :global a {b=1} /environment print :set ($a->"b") /environment print :set $a /environment print Thank you very much for this sir. You are correct. I think the place where others ma...
by Retral
Fri Mar 27, 2020 3:24 pm
Forum: Forwarding Protocols
Topic: Loopback as MPLS Interface [SOLVED]
Replies: 2
Views: 9160

Re: Loopback as MPLS Interface [SOLVED]

Thank you for the reply support. It is greatly appreciated.
by Retral
Thu Mar 26, 2020 8:49 pm
Forum: Forwarding Protocols
Topic: Loopback as MPLS Interface [SOLVED]
Replies: 2
Views: 9160

Loopback as MPLS Interface [SOLVED]

Hello, I have a working MPLS environment where there are no interfaces defined in "/mpls interface" except for an MPLS loopback. Being new to this protocol I'm wondering what if any are the drawbacks to doing it this way? I do not expect to get a reply on this one, but it would be greatly ...
by Retral
Fri Mar 06, 2020 3:39 am
Forum: General
Topic: IKE2 identity not found (IOS to Mikrotik) [SOLVED]
Replies: 25
Views: 18633

Re: IKE2 identity not found (IOS to Mikrotik) [SOLVED]

After tracking down that certificate is not sent I got to topic on Apple StackExchange ( https://apple.stackexchange.com/questions/372071/ikev2-vpn-not-working-after-updating-to-macos-catalina-user-authentication-fai ) stating that: I had the same problem and I fixed with changing "Authenticat...
by Retral
Sat Feb 22, 2020 9:18 pm
Forum: Wireless Networking
Topic: received disassoc sending station leaving (8)
Replies: 117
Views: 110337

Re: received disassoc sending station leaving (8)

Personally I believe it comes down to Mikrotik's lack of WiFi alliance certification (Note: virtually every other manufacturer I've looked up on wi-fi.org has at least one device certified. Even Google's Pixel 2,3 and 4 for crying out loud have been certified). I firmly believe that if they went thr...
by Retral
Thu Feb 13, 2020 7:45 pm
Forum: General
Topic: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED]
Replies: 7
Views: 10221

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED] [SOLVED]

Hi, I have found the solution if someone should came accros the same problem. So the solution is to use powerShell and specify the CA to use: here is the example. Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt' Now ...
by Retral
Tue Dec 03, 2019 1:23 am
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself [SOLVED]
Replies: 307
Views: 175258

Re: RB4011: wlan1 disabling itself [SOLVED]

This is not solved. I have had this interface crash post beta and a co-worker has as well. I am in the middle of sending in the required files. Do note that this time it took longer than last time, however I noticed that the routers uptime is a little longer than 4 days which is roughly the same len...
by Retral
Fri Oct 11, 2019 4:04 am
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself [SOLVED]
Replies: 307
Views: 175258

Re: RB4011: wlan1 disabling itself [SOLVED]

One thing that may help replicate this issue is using the sfp port. Both times I have witnessed this and all times our tech support has witnessed this the sfp port is in use.
by Retral
Thu Sep 26, 2019 11:55 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself [SOLVED]
Replies: 307
Views: 175258

Re: RB4011: wlan1 disabling itself [SOLVED]

As the original poster of this thread, I can also confirm this isn’t fixed yet. I might not have posted a lot, but I’ve certainly kept up with all the comments made in this thread. I currently do not have a problem with 5GHz WiFi in the RB4011, but a cAP Gi-5acD2nD provisioned via capsman currently...
by Retral
Tue Aug 27, 2019 5:34 am
Forum: Scripting
Topic: Array Push Function
Replies: 11
Views: 10416

Re: Array Push Function

All this looks a bit over-complicated. The correct way is this:
:set $MyArray ($MyArray, $Value);
This is beautiful
by Retral
Wed Jun 26, 2019 7:43 pm
Forum: RouterBOARD hardware
Topic: Don't set Router Antenna Gain
Replies: 1
Views: 1224

Don't set Router Antenna Gain

Hey everyone. I'm just looking for an answer I can't work out completely logically in my head and I've not seen any posts in this forum that match what I'm looking for. I'm wondering what are the ramifications for not setting the Antenna Gain in Routeros on SOHO and home routers. I've personally exp...
by Retral
Mon Apr 22, 2019 1:53 am
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself [SOLVED]
Replies: 307
Views: 175258

Re: RB4011: wlan1 disabling itself [SOLVED]

Damn it! : D, As I have not found before? !!!! Colleagues, pay attention to the poppy mac address sfp-sfplus1 and wlan1 they are the same! Change to sfp-sfpplus1 mac address. It's all about the same poppy address with sfp and wlan1! How could this happen to the manufacturer - Mikrotik?! is another ...
by Retral
Sun Apr 21, 2019 5:20 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself [SOLVED]
Replies: 307
Views: 175258

Re: RB4011: wlan1 disabling itself [SOLVED]

So I have a customer router that's a 4011 and I set the antenna gain to 3. One device has been connected pretty much all weekend and it's between -70 to -83. The 5g sometimes gives a group key exchange timeout to all connected devices but other times (and here's the interesting one) it'll give the M...
by Retral
Fri Apr 19, 2019 10:08 pm
Forum: Wireless Networking
Topic: CAPsMAN Registration Table Device IP or Hostname
Replies: 6
Views: 6104

Re: CAPsMAN Registration Table Device IP or Hostname

I wanted this functionality myself so I took a half hour and cobbled together some dirty code myself. The code below will match entries from CapsMan then display the following: Host Name, CapsMan Interface, IP Address, IP Address Expiry Time and the Mac Address of the Client. [:foreach i in=[/caps-m...
by Retral
Sun Mar 31, 2019 4:12 am
Forum: General
Topic: DHCP keeps broadcasting and can not stop it!
Replies: 5
Views: 4795

Re: DHCP keeps broadcasting and can not stop it!

Check the status of /interface detect-internet print For each interface to be checked it will send a dhcp discover packet per second to peep if it is a lan (it considers lan an interface where a dhcp-server exists). Thank you sir. I had the same issue and discovered that detect interface list was s...
by Retral
Thu Mar 14, 2019 7:28 pm
Forum: General
Topic: QinQ VLAN's not touching Queue
Replies: 0
Views: 789

QinQ VLAN's not touching Queue

Hey, I'm new here and trying to do the best that I know how with Mikrotik's Wiki and searching through Google and these forums. I cannot for the life of me figure out how to queue QinQ traffic. I see the traffic is not touching the bridge interface, which is why I'm assuming that why when I use a si...
by Retral
Wed Jan 02, 2019 3:37 am
Forum: Virtualization
Topic: CHR 6.42.6+GNS3 = No RoMON
Replies: 5
Views: 7064

Re: CHR 6.42.6+GNS3 = No RoMON

the solution is to change the default configuration of the ethernet interface that comes by default virtio-net-pci to some intel or realtek interface I recommend using intel gigabyte ethernet (e1000) Kudos to the quoted guy. I could not for the life of me get RoMon working on CHR's, once I changed ...
by Retral
Mon Oct 08, 2018 2:02 am
Forum: Wireless Networking
Topic: Bridge port received packet with own address as source, probably loop
Replies: 54
Views: 123687

Re: Bridge port received packet with own address as source, probably loop

I had the same problem on CAPsMAN... Left in bridge only ether1 (I had wlan1 in bridge, too) and it solved it. Maybe this could help someone. My setup: Capsman running on an rb2011 connected to a cAP AC RB2011 eth5->cAP AC eth5->Vlan Vlan->Bridge_Vlan cAP AC eth1->RB2011 eth1->Vlan Vlan->Bridge_Vla...
by Retral
Wed Sep 26, 2018 10:39 pm
Forum: General
Topic: Netinstall sending offer, but not installing [SOLVED]
Replies: 30
Views: 24936

Re: Netinstall sending offer, but not installing [SOLVED]

I second the last post. I haven't tried it but it does seem to be a Windows 10 related issue. I had an RB2011 booted up via ether boot and tried the install button multiple times only to have the device turn back to Ready mode without any install. I then closed Netinstall set it to Win7 compatibilit...
by Retral
Thu Aug 09, 2018 9:26 pm
Forum: RouterBOARD hardware
Topic: Routerboard Firmware Upgrading?
Replies: 1
Views: 919

Routerboard Firmware Upgrading?

Hello everybody. I'm new to this forum and have a question regarding firmware upgrading. I haven't found anything detailing as to why I should perform a RouterBoard firmware/bootloader upgrade and not just a packages upgrade. I'm just wondering if anyone can tell me why I should do that and also wha...