MikroTik

roe1974

was anyone successful with the firmware update to V036 under ROS 6.x ?
br, Richard

roe1974

If any edge cases are missing in the table, let us know, and we will make the ULTIMATE guide for packages :) The unfortunate position of the RB4011iGS+5HacQ2HnD w.r.t. WiFi support could be clarified better. Same here ... the Situation for the RB4011iGS+5HacQ2HnD is not 100% clear for me ;-) br, Ri...

roe1974

I am now planning to switch to 7.12 from 6.49.10 (RB4011iGS, ltAP, cAP ac). Is there anything to consider? ... i don't have a complex config (a few certificates, capsman, ovpn tunnel, DOH, some scripts). Thx for a short answer ;-).

roe1974

OK, created a support case :-)
thx !

I have submitted a ticket (SUP-128685) 5 days ago with no response so far... as this is my first ticket with Mikrotik, what are the normal turnaround times here?
PS: Ticket done/closed ... was not a mikrotik related problem ;-)

roe1974

OK, created a support case :-)
thx !

roe1974

Firmware and Software is on 6.49.10 .. ist there a way back for both ? or is only a software rollback necessary ? (sorry, it is my first time for a potential rollback) :-)
btw: it's also a RB4011iGS+5HacQ2HnD-IN ... but no errors RX or TX on the interfaces ?!?

roe1974

Hello
Since 6.49.10 i have troubles streaming my Cams in Homekit when i am outside from my Home (i.e. LTE or external WLAN).
Can this caused by the new enhancement: "www - improved service stability when receiving malformed packets;" ?
br, Richard

roe1974

Does it also come as long-term version ?

roe1974

Hello
Are there any plans from Mikrotik for a RB4011iGS+5HacQ2HnD-IN follow-up with WIFI 6 ?
br, Richard

roe1974

@roe1974

https://www.qrcode-monkey.com/#email

THX !!!!! :-)

roe1974

what else 😜🤪
:lol:

"Gimp" ?

no, all good :-)

roe1974

what else 😜🤪

roe1974

How did you get the logo in the middle?

roe1974

thx ;-)

roe1974

New Design since today or error ?

Bildschirmfoto 2023-05-22 um 15.46.22.png

roe1974

App is not abandoned, the subj. version was released a few weeks ago. Since a while I get the request to set a password for the user every time I login on my router via the iOS app, although i enter with user+password. Is this a bug or can I disable it ? Maybe you have an "admin" user wit...

roe1974

Since a while I get the request to set a password for the user every time I login on my router via the iOS app, although i enter with user+password. Is this a bug or can I disable it ?
br, Richard

roe1974

In the 7.5 thread it says that the connection is no longer closed on the router as soon as the client disconnects it .... could you determine this ?
viewtopic.php?p=955298&hilit=ovpn#p955298

br Richard

roe1974

Hi ! Anyone tested allready if ovpn ist stable now with this version ? thx, Richard ovpn udp, the client disconnects and the server (mikrotik) never drops the connection, even for hours... .... means the connection stays open at the mikrotik router (ovpn server) even if the client disconnect ?

roe1974

Hi ... anyone allready tested with 7.5 ?
br, Richard

roe1974

Hi !
Anyone tested allready if ovpn ist stable now with this version ?
thx, Richard

roe1974

I know

... i will it leave as it is ...

roe1974

answer from support:
"Please update RouterOS to the latest v7 stable which has support for modem firmware from version v033."
so V034 is for ros7 and later.....

roe1974

2396KiB free Disk space should be enough for a small modem firmware upgrade, not ?

roe1974

Hello
Why does the Mikrotik App (iOS) allways request a change of password although a (strong) password is set ?
br Richard

roe1974

yes, ntp package

roe1974

yes … several reboots … no change

roe1974

Hello I tried today to upgrade the firmware of the R11e-LTE6 modem on an ltAP (ROS 6.48.6) from V033 to V034 ... no chance -> always "status:failed" the terminal comand: /interface lte firmware-upgrade lte1 shows: installed: R11e-LTE6_V033 latest: R11e-LTE6_V034 the comand: /interface lte ...

roe1974

V034 is online ... has anyone tested this yet ?

roe1974

Thx !

I prefer crossover because of use for other Win Apps too

Is there a difference in use of 32bit or 64bit Winbox ?

br, Richard

roe1974

Hi I successfully have Winbox 3.35 32bit running on me (with crossover on an Apple M1). But I can't get the 64bit version installed. Should that also work ? Also the high resolution mode does not work, here I can not change the window size/position. Does anyone here have a similar constellation ? gr...

roe1974

No issues updating from 6.48.4 -> 6.48.6 on ltAP, cAP AC, RB4011iGS
thx !!
Richard

roe1974

Same here as in 6.49 stable:
system/health on a ltAP is still empty ;-)

roe1974

system/health on a ltAP is still empty ;-)

roe1974

thanks for the info @tdw
HW offload is enabled on ports but it is not activated.
When I disable RSTP the HW offload is activated.
According to wiki it looks different for the RTL8367 ... see:

https://wiki.mikrotik.com/wiki/Manual:I ... Offloading

greetings Richard

roe1974

The CPU Load is now (RSTP activated) about 4-6% (at peak times) ... not more ... so no need for HW-offload ?
br, Richard

roe1974

Hello I have a question about the bridge/RSTP/HW offload on the RB4011iGS+. I use the router in a home network. Devices like NAS, Raspberry, Cam etc. hang on the ports. Is it better to disable RSTP in this scenario so that the hardware offload can be enabled ... or better to leave RSTP active ? Than...

roe1974

OK

i understand now

THX for explanations !!!!
br from Vienna
Richard

roe1974

@anav

i prefer elegant soltuions toooo !

so what would be the right rule to ensure all DNS traffic is using DNS Server from router ?

br, Richard

roe1974

OK, i now use as follow: /ip firewall nat add action=redirect chain=dstnat comment="redirect all udp DNS traffic to mikrotik DNS" dst-address=!192.168.55.1 dst-port=53 in-interface-list=LAN protocol=udp to-ports=53 /ip firewall nat add action=redirect chain=dstnat comment="redirect al...

roe1974

ok, thx ... but is this not the same as: /ip firewall nat add action=redirect chain=dstnat comment="redirect all udp DNS traffic to mikrotik DNS" dst-port=53 protocol=udp to-ports=53 /ip firewall nat add action=redirect chain=dstnat comment="redirect all tcp DNS traffic to mikrotik DN...

roe1974

when i export the config, i see the parameter in the firewall rule.
However, if I change something in the rule in winbox, the "to-address" parameter also disappears in the exported config?
a bug ?

roe1974

even if i show the "to-address" column in the view, it is empty ....

roe1974

where exactly ?!?

roe1974

Hello I have added the following firewall rule via console: "/ip firewall nat add chain=dstnat action=redirect to-ports=53 protocol=udp dst-port=53 to-address=192.168.55.1 comment="redirect all DNS traffic to mikrotik DNS"" When I open the rule in winbox, I can't find the "t...

roe1974

extra firewall rule like: ip firewall filter add action=accept chain=input comment="CAPsMAN accept all local traffic" dst-address-type=local src-address-type=local place before add action=drop chain=input comment="drop all not coming from LAN" in-interface-list=!LAN ?? br, Richard

roe1974

Hi SIB

Just talked with my Internet Provider ... now all ports are open (they have an option to book: "All Ports open") .... but still no communication to cloud.mikrotik.com UPD 30000 (checked with torch)
:-(
br, Richard

roe1974

Any News here for internet detect & LTE connections ?
br, Richard

roe1974

Thx for the answer :-)

roe1974

ok thx, that is not possible with clients like sonos, smaungsTV, etc ;-)
could this help ?

https://github.com/nextdns/nextdns

one of the features:

Auto discovery and forwarding of LAN client's name and model.

br, Richard

roe1974

ok, so i see the router requesting the DNS querys .. but not the clients (i.e. iPhone, NAS, Sonos, etc.) behind that requests the DNS querys (like pihole) ... right ?

roe1974

no ... i followed this instruction: /tool fetch url=https://curl.se/ca/cacert.pem /certificate import file-name=cacert.pem /ip dns set servers= /ip dns static add name=dns.nextdns.io address=45.90.28.0 type=A /ip dns static add name=dns.nextdns.io address=45.90.30.0 type=A /ip dns set use-doh-server...

roe1974

Identify your devices NextDNS writes on its homepage that the following method can be used to identify the devices: DNS-over-HTTPS Append the name to the given URL (the name should be URL-encoded). For "Johns Firefox" you would use https://dns.nextdns.io/xxxxx/Johns%20Firefox as the DNS-ov...

roe1974

oh thx !!!!
i will give it a try:)
br, richard

roe1974

but at the moment i dont use VLANs :-/

roe1974

OK, thx :-)
IP Range in Router is 192.168.0.0/24 ... router IP is 192.168.0.1
... so IP Range in AP is the same ?
br, Richard
PS: does the WISP "quick set" set device address DHCP from wired ? ... so the the main router is DHCP for the clients connected to the AP ?

roe1974

Hello together I would like to add an access point to my installation at home. I need your help. What do I currently have: 1 x RB4011iGS+5HacQ2HnD-IN configured as follows: ETH-1: WAN port ETH-7: Here the access point should be connected (via PWR-LINE PRO) WLAN-1 2.4GHz: SSID "HomeBase", f...

roe1974

sorry i can't figure it out ... how must the line look like ? ;-)

roe1974

In a script i want to put the actual value of "Access Techbnolgy" in a global variable ... is this possible ?

roe1974

Hi

Is it possible to fill a variable with the value of "interface/lte/cellular/Access Technology" in a LtAP Router for example ?
If yes, wath are the possible values like: LTE (CA2), Evolved 3G ...etc.

thx for help, Richard

roe1974

I have changed the scripts so that they also work when the APN of the two providers are different. The following lines have to be changed in both scripts: # Here change your values :global providerSIMdown "HoT" :global mainproviderSIMup "A1" :global providerAPNdown "HoT"...

roe1974

Hi :-)
Thanks for the great description/instructions.
Does this also work with Splunk's cloud solution ?
If yes ...how ?
thx
greetings Richard

roe1974

what is this "memory leak" ?
I use DoH since 6.47 with more or less no problems.... (ltAp, R4011)
br, Richard

roe1974

Is DoH now part from longterm 6.47.9 (i am coming from 6.47.7 stable) ?
br, Richard

roe1974

@Jotne

How often do you run the script with sheduler ?

Richard

roe1974

Hi
I recently changed my modem in my ltAp from R11e-LTE to a R11e-LTE6 (firmware v025)....
with the old modem i always saw the provider name in the field "current operator" like A1 in my case.
But now i see only a number like actually: 23201

Is this a modem bug ?

Richard

roe1974

ok, i will try this way

thx !!!!

roe1974

where did you get the "the proper root cert for cloudflare-dns.com" ?
Richard

roe1974

one final question ......
my main sim card disconnects and connects every 12 hours (due to billing information) ... how can i prevent the SWAP to the other sim card in this case ?
Richard

roe1974

thx !!!!!
Richard

roe1974

great idea

you put the "swap code" in the "DOWN" tab ?

roe1974

looks perfect....
but where is the query if the internet is down or not ?
richard

roe1974

do you have the script for me

?
thx, richard

roe1974

i have two sim cards in my ltAP and want to change the card in winbox from remote.
They both have different APNs .. how can i assign the correct APN to SIM Slot up and down ?
is this possible ?

Richard

roe1974

v017 is here

roe1974

Same was allready with 6.46.5 (script list)

roe1974

No sorry....it is every 2nd time you connect
connect rb4011 .... changelog OK ... closing winbox .... connect rb4011 .... changelog NOT OK .... closing winbox .... connect rb4011 .... changelog OK .... and so on

roe1974

New Winbox shows strange changelog in "system -> packages" for stable tree ??!?!?!? The error comes after "clear cache" only on the first device you connect after downloading descriptors. On other devices the changelog is OK. It stays strange only on the first connected device af...

roe1974

We have repeated the issue. It happens if Windows window scaling is used together with Winbox zoom. Autosave no longer works. We will try to fix it ASAP.

thx a lot !

roe1974

tested another machine (Also Lenovo Laptop) with same Win10 Version .... same issue :( I have on both laptops german localization ..... Richard OK ... Windows 10 Display scale factor set to 100% and there is no problem. when i set the scale to 125% or 150% (as i use the notebook) the issue is back ...

roe1974

tested another machine (Also Lenovo Laptop) with same Win10 Version .... same issue

I have on both laptops german localization .....

Richard

roe1974

Can you please send this session file to support@mikrotik.com?

FYI:
MikroTik support #[SUP-10870]
Richard

roe1974

session window full-screen works and is saved......
but all between "wrong-small-size" window and full-screen is not saved.....
Richard

roe1974

Can you please send this session file to support@mikrotik.com?

mail sent

br, Richard

roe1974

did winbox re-create those deleted files? meaning, did winbox actually save something new in session file? yes ... new files are here back to 3.20 .. everything is normal .... window positioning works..... then back again to 3.22 .... opening first time the winobox ... position OK ... opening first...

roe1974

i deleted all files in C:\Users\xxxx\AppData\Roaming\Mikrotik\Winbox\sessions and C:\Users\xxxx\AppData\Roaming\Mikrotik\Winbox and started winbox from stretch.
issue persists .....
OS: Windows 10 Version 1909 (Build 18363.719)

Richard

roe1974

Is the only problem the size? Are, for example, opened windows re-opened? Are you sure that you have launched WinBox loader with administrator privilegies, session is selected on WinBox loader before you access router (is not set to "<none>")? yes, only problem is the size when i have rez...

roe1974

auto-save is enabled ..... also tried save it manually .... no change

PS: Also winbox itself starts every time on the left corner of the desktop ......
System: Windows 10(1909) 64Bit

roe1974

winbox64 is always opnening in a small window.....see picture

Unbenannt.JPG

roe1974

perfect !
thx for the input

richard

roe1974

yes, pihole and cam is in the same network.
good idea... but how can i change the dns resolver only for the cam to the router and then block DNS requests / traffic to WAN in the firewall ?
DNS is now set in DHCP Server -> Network ..... for all devices

richard

roe1974

Hello I am using a cam in my LAN (192.168.0.19). I want to limit traffic from this cam to LAN only. I have two pi-holes as DNS (192.168.0.2, 192.168.0.3) i allready blocked the traffic to WAN with add action=drop chain=forward out-interface-list=WAN protocol=tcp src-address=192.168.0.19 how can i dr...

roe1974

After 20d online the 5GHz Wlan stops working again on my RB4011iGS+5HacQ2HnD-IN. The devices can not connect ... in winbox the interface is not running anymore. Only a reboot brings the interface back.
So there is no improvement with 6.45.8 with arm device RB4011iGS+5HacQ2HnD-IN.

Richard

roe1974

ltAP mini & RB4011iGS+5HacQ2HnD-IN on 6.45.8 ... so far .. so good

roe1974

is it possible to allow two MAC adresses on one port with bridge filter ?

regards, Richard

roe1974

Hello

I still have the issue of same mac address sfp-sfplus1 and wlan1 on my RB4011iGS+5HacQ2HnD-IN.
Is there a solution for 6.44.6 ?
On 6.46.2 i could do a "/interface wireless reset-configuration wlan1" to solve this problem ... not ?

Richard

roe1974

Problem is fix in 6.44.6 or only beta? Currently only in 6.46beta59, but the fix will be added to the next long-term and stable releases Hello team. Thank you for update. 10h 5Gh work without falling, speed for local resources increase from 25-40Mb\s to 45-55Mb\s and it's more stable. But one quest...

roe1974

Hello

Why ist the entry 5180 for example double in the list (also 5260)? ... see picture

thx Richard

roe1974

Hello When i want to filter the adress Lists in IP/Firewall -> Adress Lists and use for example "Comment" + "contains" and i filter for "FRA" (from "FRANCE") then i get all entries. But when i use "Address" + "contains" and i filter for &qu...

roe1974

thx for the info !
Richard

roe1974

Hi

I have two virtual wireless APs .... one is part of the bridge, the other not (guest WLAN)
The Guest AP shows only "R", the other one (part of the bridge) shows "RS" ...
Is this because of the bridge ?

thx, Richard

roe1974

Hi
I have to renew my certificates. I want to use CRL this time.
two questions:
1) can i use a DNS name (xxx.xxx.dyndns.org) for the crl-host while signing ?
2) which ports must be open to use mikrotik router as CRL Host ?

thx, Richard

roe1974

Hello

Is this point from 6.45.1 stable allready implemented in longterm Version ?

*) rb4011 - fixed MAC address duplication between sfp-sfpplus1 and wlan1 interfaces (wlan1 configuration reset required)

thx for info, Richard

roe1974

Hello
I have some problems with the POE injector delivered with the LtAP Mini.
I have allready the second one which is broken.
I have now bought the RBGPOE. This model is obviously better processed. Especially the network cable is much thicker.
Can i use this one with the LtAP ?

Richard

roe1974

there must be a problem with LtAP and 6.44.6 and the Ethernet Port...... i have a raspberry connected to eth0 (the LtAP is powered over POE) .... everytime when i restart the raspi ... i see a eth up/down/up/down ... and no DHCP IP is assigned. When i disable the eth port for 1-2 minutes on the LtAP...

roe1974

can i downgrade when routerboard firmware is allready on 6.44.6 ?
richard

roe1974

there must be a problem with LtAP and 6.44.6 i have a raspberry connected to eth0 (the LtAP is powered over POE) .... everytime when i restart the raspi ... i see a eth up/down/up/down ... and no DHCP IP is assigned. When i disable the eth port for 1-2 minutes .... then enable the eth port ... then ...

roe1974

is there a deeper loging possibility on mikrotik ? i just see eth interface down / eth interface up / down / up ....
after a while the interface is up and the connection stable until next reboot from raspi
richard

roe1974

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port. I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....) Richard Those are symptoms of no synchronization between the two ethernet interfa...

roe1974

same problem after each reboot of the raspi

roe1974

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port.
I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....)

Richard

roe1974

SORRY WRONG HERE .... i use 6.44.6 longterm

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port.
I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....)

Richard

roe1974

btw .. is there a way to extend the certificate in routerOS ? ... or is the only way to make a new one with longer term ?

Richard

roe1974

@krisjanisj
mail sent
regards Richard

roe1974

in terminal the details are right:

...........................invalid-before=dec/02/2018 11:10:42 invalid-after=dec/02/2019 11:10:42 expires-after=6w2d23h8m21s
6w = 6weeks .. right ?

so it's a webfig/winbox problem ?????

@krisjanisj
do you still need supout + cert ?

Richard

roe1974

ok i can send you the supout.rif and the webfig certificate (same issue there)
But i need an urgent info if the expire date is the right one or the day counter !
Richard

roe1974

here a screenshot of the client certificate on the LtAP (genrated on the RB4011 and imported in the LtAP)

Unbenannt.JPG

The 26 Dec. is not in 6 days ?!?!??!!?!?

Richard

roe1974

same thing in wegfig:

Unbenannt.PNG

Screenshot is about 2 hours later .... and the time in mikrotik for the certificate has about 4,5 hours past ?!?!?!?!?

Richard

roe1974

Hello 1) Is this locally generated or imported certificate? It is generated locally on mikrotik router 2) Is Your routers time set correctly and its showing precise time? yes, time and date is correct When i reboot the router, all entries are correct (also the entrie "Expires After") Over ...

roe1974

Hello
Why there is a difference between "invalid before"/"expires after" ???
See the picture ..... which one is right ?

Unbenannt.JPG

Richard

roe1974

i have a special user ("root") for a ssh (Key based) call to an raspian like What is your goal with this? why call the PI? i want to reboot the raspian via ssh when OVPN was down/up...... comand ist "/sbin/reboot" so ican execute the script in ppp profile as user root ? Richard

roe1974

ok thx !
i will try this way

richard

roe1974

i want to deploy a ssh comand .... not possible ?
richard

roe1974

Hello In ppp profile->scripts there is a possibility to run script "On up" / "On down" Which Mikrotik User is running/executing the script code there ? i have a special user ("root") for a ssh (Key based) call to an raspian like /system ssh xxx.xxx.xxx.xxx user=root Thi...

roe1974

thx !

roe1974

Hi I use this script for failover and change beetween the two SIM Cards: https://github.com/strobil/ltap-mini-dualsim-failover/blob/master/failoverScript.rsc But now i have two SIM cards with differnet APNs ... how i can change the APN after SIM change ? this comand works basically.... /interface lt...

roe1974

Hi

i use certicates created on RB4011
i have an ovpn connection from a ltAP to the RB4011
so if i upgrade the ltAP (have to do this remotly) ... this parameter is default on or off ?

thx

Richard

roe1974

Hi

Does the RB4011 support partitions for fail-over ?

thx, Richard

roe1974

perhaps this could affect me:

*) ovpn - added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066);

i use certicates created on RB4011
i have an ovpn connection from a ltAP to the RB4011
so if i upgrade the ltAP ... this parameter is default on or off ?
richard

roe1974

Can I migrate my router from 6.44 Stable to Long term without worrying about configuration?
Yes, it's just a small bugfix release then.

So i also can go from 6.44.3 (stable) to 6.44.5 (LT) without any major changes/problems ?

Richard

roe1974

@miencek

Where do you get the "holder" for the mikrotik Antenna ?

regards, richard

roe1974

@strods

I have same MAC adress on SFP+ and WLAN Interface 5G (QCA9984) ..... the 2.4GHz Interface has another MAC Adress.
The SFP+ Port is disabled, so do i need to do any changes/resets ?

regards, Richard

roe1974

Hi

Is it possible to establish a ssh connection to a raspberrypi using certificate.....so that no password is needed @ mikrotik router ?

regards
Richard

roe1974

that's an config option for the client OVPN config file ??
there is notthing about here of such a config option:

https://openvpn.net/community-resources/how-to/

or is this an option to be set at the OVPN Server on the mikrotik router ?

regards Richard

roe1974

new change for OVPN:
"ovpn - added "verify-server-certificate" parameter for OVPN client"

how ist he config line for the client ?

regards, Richard

roe1974

wlanX is then the "name" of the interface ?

roe1974

@strods when i perfom a "/interface wireless reset-configuration" then all my wireless settings are gone? I have same MAC adress on SFP+ and WLAN Interface 5G (QCA9984) ..... the 2.4GHz Interface has another MAC Adress. The SFP+ Port is disabled, so do i need to do any changes/resets ? re...

roe1974

found this in change log:

*) rb4011 - fixed MAC address duplication between sfp-sfpplus1 and wlan1 interfaces (wlan1 configuration reset required);

how todo "wlan1 configuration reset required" ???

regards, Richard

roe1974

works like a charm !!!!
thx Chris !!!!

greetings, Richard

roe1974

I have a RB4011 (home) and a LT-Ap (garage) connect through a OVPN Tunnel
can i perform the LTE Module upgrade "interface lte firmware-upgrade lte1 upgrade=yes" during the Tunnel (over LTE) is established ?
Or have i to go down to the garage (WLAN) ?
thx for info

Richard

roe1974

any idea in the meantime to disable "fetch" info's from log ?

Richard

roe1974

sorry !!!!!
thx, Richard

roe1974

I use OVPN for my Notebook and iPhone.
Everytime i connect i got this in the log:

08:42:58 ovpn,debug,error,l2tp,24304,42264,24304,15020,41924,25584,l2tp,info,25588,debug duplicate packet, dropping

But everything works......
What is this message ?

Richard

roe1974

i have a home router (192.168.0.0/24) and a router in the underground garage (192.168.2.0/24)
Both connected through OVPN site-to-site Layer 3

Is it possible,to "bridge" one device from garage to home ... so that this device is in the same IP Range ?

Richard

roe1974

can this due to established, related or fasttrack ?
richard

roe1974

i only have the problem with the rtsp video stream ... everything else works perfect

richard

roe1974

the special thing is to initiate a rtsp stream from external LAN/WLAN ... and then establish the stream the way is iphone ... internet .... mikrotik router .... appleTV .... Homebridge... cam an then back ! rtsp stream from cam to homebridge srtsp stream from homebridge to appleTV „Apple magic“ from...

roe1974

Hi
Does anyone use this setup

AppleTV(Homekit Hub) ... Hombridge (Homekit Bridge) ... FFMPEG .... IP Cam

behind a Mikrotik Firewall ?

I am not able to get the SRTPS Stream (initiated from iPhone outside of LAN/WLAN) through the Firewall ....

regards, Richard

roe1974

ok, thx ! all clear now

Richard

roe1974

so switch to indoor ?
Its a flat in the 3rd floor......not a house near the ski slope

Richard

roe1974

roe1974

I use (RB4011iGS+5HacQ2HnD-IN):
2,4GHz G/N, Freq. 2437, 20/40MHz XX, Installation any, Gain 3, regulatory-domain, austria
5GHz A/N/AC, Freq. 5180, 20/40/80MHz XXXX, Installation any, Gain 3, regulatory-domain, austria

So should i go to indoor ? i am confused

Richard

roe1974

so should i leave it to "any" or switch to "indoor" ....... (i only use WLAN indoor) ?
thx, Richard !

roe1974

i dont find any docu to this new setting in wireless interface (AP)

installation=outdoor/indoor/any

What is the impact of this setting ?

best regards, RIchard

roe1974

i have problems with incoming calls (Apple Facetime) to establish the video stream. Apple needs the following ports: 80 (TCP) 443 (TCP) 3478 to 3497 (UDP) 5223 (TCP) 16384 to 16387 (UDP) 16393 to 16402 (UDP) How can i open these ports ? i can not forward the ports to a special internal IP, because t...

roe1974

Here a diagramm. The IPhone initiate a Video Stream (Apple Home App) through the AppleTV to the Raspberry "Homebridge". The Raspberry initiate a RTSP Stream on Port 554 of the Cam and redirect it as SRTSP Stream to the AppleTV. From there it should go back to the IPhone (See logs in the pr...

roe1974

Hello I use Apple Homekit for two Cameras. Everything works from LAN. But i get no rtsp stream from outside through the firewall. Unfortunately the ports are changing every time. I have a Raspi (Homebridge) which connetcs via plug-in to the cam and establish a rtsp stream to the apple TV (because i ...

roe1974

ok, its an option on PPP "add default route"..... but what do you mean with "except for the vpn server itself" ??? where i can handle this ? And is something to do an Server(A) Side ?? My Problem is, i have a AppleTV + Raspi (Homebridge) on A-Side.... When in initiate an rtsp str...

roe1974

I have established an OVPN tunnel site-to-site like described here: https://www.marthur.com/networking/mikrotik-setup-a-site-to-site-openvpn-connection/314/ All works fine. But i want now that all internet traffic from the client site goes through der server site. What do i have to do in order for t...

roe1974

Hi

When does the „modem firmware upgrade“ function for the Lt-AP will come to the stable tree?
i actually dont want to upgrade to beta tree and downgrade again ...
thx for information
Richard

roe1974

i need help for s script ... I have a LT-AP connected (OVPN) to my home router (RB4011) what i need: when the ppp interface ovpn-client is down (due to LTE link down/up every 12h) i need a wait 10sec (for coming tunnel back), Ether1 disable, wait 5sec, Ether1 enable . Its for my homematic Lan Gatewa...

roe1974

I have a problem with two LAN devices over a OVPN Tunnel Home Side (RB4011) is my Home central (LAN) Garage Side (LtAP over LTE) is my LanGateway (LAN) for the Home central. The Home central has permanent a TCP connection (Port 2000, 2001) with the LanGW (over OVPN Tunnel) I have the problem of a LT...

roe1974

so now i have one problem with that i have a connection over OVPN from the Homematic System (Home Router) to a Homematic LanGateway (LTE Router in the Garage) Every time there is a reconnect (12h due to the LTE provider) these connection (TCP, Port 2000 und 2001) stays in "established" so ...

roe1974

ok, the problem is not the ovpn tunnel, its the LTE link

i have periodically this lines in the log:

lte 1 link down
1 second later
lte 1 link up

why ??

Richard
PS: Its a LtAP-Mini-LTE-Kit

roe1974

I have a problem with the ovpn ".... terminating nothing received for a while" Sometimes i see on the client side: ovpn-garage: terminating...: nothing received for a while ovpn-garage: disconnected ovpn-garage: initializing... ovpn-garage: connecting... ovpn-garage: using encoding - AES-2...

roe1974

there was in issue with automatic default config load in the initial routerOS (6.43.4) in this device (RB4011iGS+5HacQ2HnD-IN-US) I had the same problem. connect via winbox (use MAC adress, not IP) load the actual image (6.43.8 ) on the router, make update, then perfom an resest with default config ...

roe1974

thx CZFan !!!!

it was the missing "add distance=1 dst-address=192.168.10.0/24 gateway=172.22.22.1"

regards, richard

roe1974

Ok, and on the Home Router side (where i come in with my second VPN Tunnel with the Notebook) ... ist there anything to do aditionally ? i also have on the home router side: 0 chain=srcnat src-address=192.168.0.0/24 dst-address=192.168.2.0/24 and on the garage router side: 0 chain=srcnat src-address...

roe1974

I have a static route on Home Router side: add distance=1 dst-address=192.168.2.0/24 gateway=172.22.22.2 and on Garage Router Side: add distance=1 dst-address=192.168.0.0/24 gateway=172.22.22.1 This works... but when i now connect to the Home router with my notebook (OVPN tunnel 192.168.10.1-192.168...

roe1974

Hi I need some help. I have a RB4011 (Router Home) and a LtAP (Router Garage) Router Home: 192.168.0.0/24 Router garage: 192.168.2.0/24 both are connected with site to site OVPN (172.22.22.1 - 172.22.22.2) This Network works (both sides see each other for all devices) Now i sometimes connect to Rout...

Search found 170 matches