MikroTik

zandhaas

16GB should be ok.

16GB will for sure be OK even for the far future :)

I think you meant 16MB

zandhaas

Try removing the wireless package first. Then, perform a downgrade without the wireless package. I hope you are connected via cable, not WiFi. It's not "Try" but it is necessary otherwise the process tries to find a version of the wireless package to downgrade. But that package does not e...

zandhaas

After the upgrade, there is no free disk space and the router forgets the settings after a reboot. There is also no way to make a backup. Device: hAP ac^2 The fasted solution for this is a netinstall of your device. (as metioned already several times in this thread). I also did a netinstall on my d...

zandhaas

In the iOS app, how do you remove a existing tunnel?

in the phone settings go to VPN configuation and delete there

zandhaas

in the phone settings go to VPN configuation and delete there

Thanx

zandhaas

in the phone settings go to VPN configuation and delete there

Thanx

zandhaas

how to remove existing BTH functionality and start from the beginning with the new app?
IP -> Cloud -> BTH -> Revoke and Disable

And how to remove existing connections from the app?

zandhaas

i.e. To me it was not clear that after the upgrade and the installation off the qcom-ac package I have to reconfigure my wifi and under which menu tab I had to do that. Personal comment: when you add wifiwave2 package to AC3 (pre-7.13 chain), you would have to do the exact same thing. Old wireless ...

zandhaas

I had the same confusion as @infabo and @nicolab I've uprgaded my hapac2 (used as access point only) three times (three times a netinstall) but was confused by the wifi an wireless menu options in such a way that I decided to go back to 7.12. And stay there for a while until a more robust migration ...

zandhaas

zandhaas use check for updates button and ignore the above ranting. nothing special has to be done. upgrade and forget

Thank you Normis

zandhaas

Hi all,

I'm a bit confused.

I have a HAPac2 and I need both the 2.4GHz and 5 GHz.

What is the way to go for me?

Do I need the qcom-ac and the wireless package or?????

zandhaas

Also RouterOS upgrade will be required. BTH is not yet released as stable feature. Will work just fine in upcoming betas.

I'm running ROS version 7.12 beta9 in which BTH is active and configured.
Or do you mean this winbox version with BTH is only working with ROS version 7.13 betaxx and above?

zandhaas

*) fit BTH QR code into default settings window;

Now I can see only the top 20% of the QR-code instead of the top 80% in the previous release. So it has become worse.

zandhaas

The BTH config name matches the system VPN tunnel name already. We plan to add "delete tunnel" feature in the app. If you see such a situation that tunnel is not working, make a supout.rif file and email us, maybe support can see what happened. For the new tunnel I configured the same tun...

zandhaas

i'm using the iPhobe BTH app. Yesterday I encounterd the app was not able to connect anymore. Reason unknown sofar. But when I added a new tunnel to the same router everything worked again but........ I then wanted to remove the old tunnel from the app. I could not find a delete option so I had to r...

zandhaas

did you try the direct link? https://apps.apple.com/lv/app/mikrotik- ... 6450679198

That did the trick.

zandhaas

When using the standard Wireguard Iphone App I am able to connect.At the moment I can not find the Mikrotik BTH Iphone app in the app store (I'm living in the Netherlands)

zandhaas

Im Aware of the separate firewall for IPv6.

That's the next step. In te meantime I have disabled IPv6 until I have time to configure the IPv6 firewall

zandhaas

It seems to work.
From the router I can ping and traceroute the IPv6 Google DNS servers.

Thank you for your help.

zandhaas

Hello, I'm new to IPv6 and got a static IPv6 address from my ISP beside my (working) static IPv4 Address. From My ISP I got the below information: IPv6 subnet: 2a05:xxxx:y:zzzz::/56 ISP Gateway: 2a05:xxxx:yyyy:zzzz::ww126 Customer router: 2a05:xxxx:yyyy:zzzz::ww/126 I'm lost in what I need to config...

zandhaas

This question is so strange :D :D If you need the changes in that version, just use that version. Why does the version number matter? It is just a number. You are afraid of "beta", because unstable? WELLL Zerotier 1.10.3 is also unstable just the same :D It's not such a dump question as y...

zandhaas

I have the same issue on my HAP ac2 running RouterOS 7.7 and zerortier active.

Anyone an idea what is wrong here?

zandhaas

Did someone already try to mount an iscsci disk from his NAS (Synology) on a Mikrotik device (CHR) or is this not possible? When I try to do this the add command hangs. And when I try to reboot the CHR I see below message in the console: Rebooting Failed to stop diskd: std failure: timeout (13) coul...

zandhaas

You have to add a "managed route" at the "my.zerotier.com" dashboard.

zandhaas

Nice..

zandhaas

Exploit code has been released for a critical vulnerability affecting networking devices with Realtek’s RTL819x system on a chip (SoC), which are estimated to be in the millions. The flaw is identified as CVE-2022-27255 and a remote attacker could exploit it to compromise vulnerable devices from var...

zandhaas

The Mikrotik.SPL file is packaged as a RAR file and you can download this under paragraph 1G in the first post of this thread.

zandhaas

@vtonian Did you already try the sim from your own mobile phone?

zandhaas

Maybe a practical example or explanation???

Without Allow Global, zerotier-one will only try to manage routes and addresses in RCF1918 ranges (192.168.x.x and friends) on your devices.

zandhaas

I upgraded without issues.
Everything works smooth after the upgrade.

Running WinBox on Windows 11 laptop and with RB4011 (7.2rc3), HAPac2 (7.2rc3) and RB750GR3 (7.1.2)

zandhaas

Hopefully things like ZeroTier can be made to run as containers so there is no need for involvement by MikroTik and more than one such supplier can compete in this field. It requires a little more refinement of the containers, maybe some way to edit configuration of a container from inside the Rout...

zandhaas

Adding zerotier via the new Winbox option is not working for me. When I add zerortier via the cli everything works smooth. Someone seen this issue also? [Edit] Some further investigation showed the Zerotier IP-Address is not added automaticaly to /ip/adressess. After adding the address manualy it se...

zandhaas

hAP Lite stuck in "calculating download size..." since hours. A reboot didnt help. You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices! You have to download the packa...

zandhaas

Once the container package is ready and back you can try to run tailscale as a container on your Mikrotik.
Tailscale delivers it as a container already for other platforms (i.e Synology)

zandhaas

And I think also on your HAPac2. Add a route to the ZeroTier network with the rapsberry (internal IP) as the gateway. This is not working, as soon as I set route in zerotier I can not reach the HAP AC2, so something is going on, but I have to disable the route in Zerotier to be able login into ROS ...

zandhaas

I have installed ZT on my RB4011 and beside the orut in ZeroTier Central I also have a route back from the RB4011 to the Zerotier network via the zerotier interface. I think you have to do that on your RPI also. And I think also on your HAPac2. Add a route to the ZeroTier network with the rapsberry ...

zandhaas

On the ZeroTier Central you need to create " Managed Routes" under the TAB Advanced.

For Example the network behind your raspberry is 192.168.0.0/24 you need to create the following route

Destination: 192.168.0.0/24
Via: "ZeroTier address of the raspberry-PI"

zandhaas

When I was at home last evening it worked for me also.

zandhaas

Hey, tried to run pi-hole on CHR getting this (445): Fatal Error Unable to allocate shared memory segment of 134217728 bytes: shmget: Function not implemented (38) I saw the same error the first time I tried to start the container. I checked the amount of memory I gave the CHR (128MB). I changed th...

zandhaas

Yesterday I changed several things on the HAPac2: 1. Updated the device to version 6.48.2 (also upgraded the router firmware) 2. Removed the Splunk script and created it again. 3. removed the splunk remote logging action 4. edited the default remote logging action to send the syslog messages to the ...

zandhaas

Both devices are running at 6.48.1 The script is running I see messages coming in the log when I manual start the script. I tried again to change the UDP port backup to the port I used yesterday. And immediatly I got a message in Splunk from the HAPac2 saying I changed the log action. 4/16/21 12:01:...

zandhaas

Like the devil is playing with it.
5 minutes after I wrote the previous post the HAPac2 stopped again with sending log data to Splunk.

Yesterday it lasted 2,5 hours today 3 hours. So I have made little progress :(

zandhaas

It's not the license limit. Yesterday I used < 5% of the 500MB. And yes the RB4011 continued to work after the HAPac2 stopped. In the "data summary" I can see that the HAPac2 did send messages from around 15:00 in the afternoon (the time I added it to Splunk) until 17:37. After that nothin...

zandhaas

After a long time not using your tool I decided to install it again as a docker container on my Synology NAS. I have a RB4011 Router and a seperate HAPac2 access point. I configured both devices to send all information to Splunk. This worked for several hours but then the HAPac2 is not sending any i...

zandhaas

Thank you for your tip.
I changed the values and keep an eye on the disconnects. :)

zandhaas

Did you upgrade firmware under "/system routerboard"? I have upgraded mine and I wonder if this is the cause. No this time I seemed to have forgotten to upgrade the routerboard firmware. Normaly I do it right after the RouterOS. So this is different to your environment. For now I wait wit...

zandhaas

On RB750gr3, Winbox 3.27 does not show any health information in v6.48. However "/system health print" works fine:

I have upgraded my RB750GR3 from 6.47.8 to 6.48 and Winbox 3.27 does show system health information.

2021-01-06 09_11_33-Keeper Desktop Applet.png

zandhaas

Upgrade on my 750Gr3 OK Also the system health is showing power and temp
Upgrade on HAP ac2 is also OK

zandhaas

I see a lot of information so it seems OK but I have the check this weekend if everything is complete.

zandhaas

Yes I'm using the official splunk image with internal syslog stored on local volume (I'm using Docker on my Synology NAS). Here is my config: docker run -d --net host -v /volume3/docker/Splunk/etc:/opt/splunk/etc -v /volume3/docker/Splunk/var:/opt/splunk/var -v /etc/localtime:/etc/localtime:ro -e &...

zandhaas

Yes I'm using the official splunk image with internal syslog stored on local volume (I'm using Docker on my Synology NAS).

With "internal syslog" you mean the Synology syslog. In the Splunk container I do not see a syslog.

zandhaas

Thank you I going to try this somewhere in the next day's.

zandhaas

I'm actually have my splunk environment on docker working perfectly.

Inviato dal mio SM-G950F utilizzando Tapatalk

do you use the official Splunk image?
and do you have a separate rsyslog environment or is that not neccesary?
and how do you start the Splunk container?

thanks in advance.

zandhaas

Hello Jotne,

Have you ever considered using a dockerized Splunk Environment?
I lately tested this but did not get any mikrotik information in Splunk.

My "normal" Splunk envirnoment is working.

zandhaas

Im not sure what Mikrotik has done, but look at these numbers with latest ROS7 beta8 on the newly released ccr2004

Over 200 gig duplex against localhost ?

Do you know what this was before you upgraded to ROS7b8?

zandhaas

+1 to let a forum admin contact the tapatalk support people!!

zandhaas

When I try to upgrade my CHR test router from version 6.45.beta.55 to 7.0beta3 I get "ERROR missing gps7.0 beta 3.npk" The file is visable but with a size of zero (0) Edit: I downloaded the X86 package from the mikrotik site and u[ploaded it to the CHR router. After a reboot the router run...

zandhaas

Perhaps "MacOS Catalina"

zandhaas

I think you need an Epoch converter or some formula that converts the number of second's to a normal date / time.
In the below thread a formula is described.

https://stackoverflow.com/questions/461 ... -via-excel

zandhaas

Even if this works, I like better the view in Splunk MikroTik Traffic , that uses accounting for creating the graphs. There you can see who is generating the traffic, compare to only see what interface traffic goes in/out. The current "Mikrotik Traffic" overview is indeed a nice oveview. ...

zandhaas

Nice,
I have added the additional script entries and changed the inteface names to the names I use.
But............
The sourcetype entry in the search entry schould be "sourcetype=MikroTik"

zandhaas

Your Graylog server is listening on port 2514 while your mikrotik is sending the logs to port 1514

zandhaas

I changed the "MAC Winbox Server" allowed interfaces to "all" on all routerboards and after that I again see all neighbors in Winbox.

zandhaas

OK.

At least the message that they were able to reproduce the issue gives me a little hope they are able to fix this in a (near) future release.

zandhaas

I changed back to version 3.18 and then I see the same behaviour as with version 3.19
It's probably not Winbox but something in my network.

zandhaas

Hello,

I upgaded my winbox 3.18 to winbox 3.19
Since then I do not see any "neighbors" anymore. Am I missing something?? or is this a bug.

zandhaas

This time...
"We were able to reproduce the problem. (Blah blah blah). We don't currently have a Fix."

When did you get this anwser?

zandhaas

Updated section 2f)

Updated script to v2.4 and fixed reserved DHCP leases to be taken inn to account.

When I look at the current script under 2f I only see the "# Collect DHCP Pool information" part.

It seems the rest of the script is missing.

zandhaas

Hello Jotne,

I want to upgrade my Splunk version 7.2 environment tot Splunk 7.3

Is the mikrotik app compatible with Splunk 7.3?

zandhaas

"Bridging" is the right word.

I asume you have two routers without WIFI.

Set the second router in "bidge mode" in the quickset screen.

zandhaas

In his topic both devices are compared: viewtopic.php?t=133513

zandhaas

I'm Experiencing this problem on my Samsung TV while watching video via the internet via the smart TV apps (Netflix, Videoland etc) The TV +stops paying and shows the message "no internet connection". When this happens my laptop which is on the same wifi interface loses the connection also...

zandhaas

Can't you be just happy that there are free updates which not only fix security holes but also improve functionality? And you can get all of that with device prices starting at $50?

Totally agree

zandhaas

No upgrade issues on RB750gr3 and HAPac2.

Hopefully the wireless on the HAPac2 is more stable as before.

zandhaas

Are you sure your "router script" is complete?

I had problems getting my data visible in splunk to.
It turned out that I missed the last "}" in the Router script.

zandhaas

Thank you Mkx for the clear anwser.

zandhaas

I'm new to Mikrotik routers and have a first question to the community. When I want maximum performance is it adviseble to use Fasttrack even if hw-offloading is active?? Can someone explain the difference between both features apart from the fact that Fasttrack is Software and HW-Offloading is on t...

zandhaas

Lately I had an issue with my iPhone 6.
I had changde to security profile and had checked both "WPA2-PSK" and "WPA2-EAS" authentication types.
After unchecking the "WPA2-EAS" and just leaving WPA2-PSK my phone was able to connect again.

zandhaas

Perhaps this can help you: https://wiki.mikrotik.com/wiki/Hairpin_NAT

zandhaas

This should do the trick.

/ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.1.23 to-ports=xxxx protocol=tcp dst-address=<external-ip adress> dst-port=xxxx

zandhaas

In the first post of this topic

Or the below link
download/file.php?id=35231

zandhaas

I'm using DHCP-Server option 6 to forward all DHCP clients DNS to the PI-Hole server. /ip dhcp-server option print # NAME CODE VALUE RAW-VALUE 0 PIHole 6 '192.168.x.x' c0a80032 Where 192.168.x.x is the PI-Hole address. Would be even easier to put it in /ip dhcp-server network add address=192.168.2....

zandhaas

Do you have a dest-address-list called WAN-IP??

If not you have to create it or use dst-adress with your wan-ip adress.

zandhaas

I'm using DHCP-Server option 6 to forward all DHCP clients DNS to the PI-Hole server.

/ip dhcp-server option print
# NAME CODE VALUE RAW-VALUE
0 PIHole 6 '192.168.x.x' c0a80032

Where 192.168.x.x is the PI-Hole address.

zandhaas

I implemented the below NAT rule for my openvpn: ;;; OpenVPN via Rpi chain=dstnat action=dst-nat to-addresses=10.100.200.99 to-ports=1194 protocol=udp dst-address-list=WAN-IP dst-port=1194 by the Way... Default is it not possible to setup a VPN from within your local network. You have to test it fro...

zandhaas

I think you should use the "Netinstall" feature as described here:

https://wiki.mikrotik.com/wiki/Manual:Netinstall

zandhaas

At my site it was 1 out of 3 that failed and I was missing information for that router. Are you also missing data? After the change my failing router is still visible in Splunk so for mee it seems the solution. But I did not check the log files that come from the routers. Do you now were I can find ...

zandhaas

I made some progress. After an other look at the messages in the splunkd.log file 01-22-2019 12:02:41.350 +0100 WARN DateParserVerbose - Failed to parse timestamp in first MAX_TIMESTAMP_LOOKAHEAD (32) characters of event. Defaulting to timestamp of previous event (Tue Jan 22 00:20:00 2019). Context:...

zandhaas

The router is used as the timeserver for my local environment.
the HAPac2, the Dude server and the Splunk server synchronize time with the router and all have the same time and date.

zandhaas

I started with using port 514 for all 3 mikrotik devices. At that moment I had the same problem. No data in visible in Splunk. After that I changed to port 515 and restarted splunk. And yes I saw data in Splunk. but some time later Splunk stopped showing data in the graphs. Then I restarted splunk a...

zandhaas

I see some strange things happen. I have added three devices to the Splunk Mikrotik environment. 1. RB750Gr3 as a router. (sending over UDP 514) 2. HAPac2 configured as a switch (Accesspoint) (sending over UDP 515) 3. Mikrotik CHR as Dude server. (sending over UDP 516) Everything seems to log all in...

zandhaas

I get the same IP as a result biut perhaps My PI-Hole implementation has something to do with it. I'm using PI-Hole as an "Ad blocker for my Internal network" And for this I'm using DHCP option 6 to force all internal clients to go to the PI-Hole server for the DNS resolving. By the way I ...

zandhaas

Below an example of the local 192.168.0.1 address _time rule chain in_if out_if src_mac protocol src_ip src_port dest_ip dest_port City Country 2019-01-21 17:56:20 FW_Drop_all_from_WAN input (unknown 1) (unknown 0) na UDP 192.168.0.1 42597 192.168.0.1 53 Unknown 2019-01-21 17:56:20 FW_Drop_all_from_...

zandhaas

I'm Using Splunk for a couple of weeks now. In the Firewall Rule section I see beside the attacks from the large big spooky internet also local adresses appear as a result of the "FW_Drop_All_From_Wan" rules. and that are mainly request with dest_port 53 (DNS). Is it possible to filter out...

zandhaas

I have a HAP ac2 and used the procedure described in the below post to configure it as an AP.

viewtopic.php?f=13&t=143446

zandhaas

Since a couple of weeks I'm a Mikrotik user. I have one RB750Gr3 as a router and a HAP-ac2 as WIFI AccessPoint. I don't want to use these two device for other tasks. That's why I installed a free CHR version as a DUDE server as a VM on a Synology 918+ in a home environment. (<25 devices). When I che...

zandhaas

Thank You for this post and all the work to get all the information in Graphs. Only I had a hard time to get all the information in Splunk. After three hours of trying a lot of different things I finaly discoverd that I missed the last "}" in the Router script. Perhaps you can change the p...

Search found 97 matches