MikroTik

dsobin

Issue: DHCP over BCP via PPTP fails. Description: DHCP over BCP via PPTP fails. This was reported as a bug previously in this thread, then reported as fixed. I am reporting that it is still broken. Bridges on each of two routers are connected together via a PPTP tunnel. DHCP server on one bridge, D...

dsobin

Some more details. I don't know if it's a bug or an "undocumented new feature" but here is the work around: If you are trying to connect two bridges on two routers with PPTP, DO NOT include local/remote addresses for the PPTP tunnel endpoints. If you omit the tunnel endpoint addresses, DHC...

dsobin

Issue: DHCP over BCP via PPTP fails. Description: DHCP over BCP via PPTP fails. This was reported as a bug previously in this thread, then reported as fixed. I am reporting that it is still broken. Bridges on each of two routers are connected together via a PPTP tunnel. DHCP server on one bridge, D...

dsobin

I had also found out that it is not working when pptp interfaces are assigned with an IP address. Because they are to be added to the bridge, IP address is not needed. Well, your comment above is very interesting. I always thought that local/remote pptp addresses were required to make the tunnel fu...

dsobin

I just tested this very carefully and it seems to NOT work over 6.17. Rudios, can you check this out and repeat your testing? It seems very clear to me that it's still broken. Following is my very simple two router setup. Details are at the end. Each router is connected via ether1 to my workbench LA...

dsobin

Just did some careful testing. ROS 6.17: DHCP between bridges connected via pptp tunnel does NOT work. ROS 5.26 DHCP between bridges connected via pptp tunnel DOES work. Same config. I just downgraded/upgraded between ROS releases. This was reported as broken here: http://forum.mikrotik.com/viewtopi...

dsobin

I have the same problem. It appears that ROS 6.x does not pass broadcast packets between bridges connected via PPTP. Since DHCP used broadcast, it doesn't work across the PPTP tunnel. It used to work. I thought it was broken in ROS 5.x, but you seem to have it working with 5.26, so I'll check that o...

dsobin

Thanks for the link, CblP. Unfortunately, that's not my problem. I am using PPTP to link two bridges, one on each of two routers separated by the Internet. I do this by entering the bridge name in the "Bridge" parameter at each end (client/server) of the PPTP configuration. By doing this, ...

dsobin

I just tried this yesterday and had the same result: DHCP doesn't work across the EoIP tunnel which is over the PPTP tunnel. Interestingly, I statically assigned an IP address and gateway to my laptop and everything worked! The EoIP tunnel transported DNS requests and TCP traffic to external website...

dsobin

Over on this thread is a very basic documentation discussion regarding the operation of the switch chip and the meaning of master and slave ports. Normis, the vlan questions and issues that people are asking here are very important. I would suggest also that missing from the documentation is a clear...

dsobin

edit: the wording should probably be amended in the article i think. It could read something like: A 'master' port will be the port through which the RouterOS will communicate to all ports in the group. Interfaces for which the 'master' port is specified (slave interfaces) become switched ports and...

dsobin

Yes, any solution that creates a "real" second dhcp server will work. My application is part of an existing hardware/software package so I can't add "real" hardware. Metarouter could be made to work, but my RB433 is max'd out performance-wise handling the multicast traffic. I can...

dsobin

I'm not sure you can do that.... I'll have to think if there is a way around it. But generally you can't run things on interfaces that are members of a bridge... likewise with assigning IPs.... I assume that you don't want to make separate networks and route them.... Thanks for the quick reply. Rou...

dsobin

I need to provide a dhcp service that can serve up addresses from two different address pools depending on which bridge port, call them ports A and B, the request originates. I need to have physical networks A and B bridged, rather than routed, because the two physical networks are sharing multicast...

dsobin

Even after reading the previous set of posts 10 times, I still couldn't get it to work. For those who come after me: You need both apostrophe (looks like this: ' ) AND a quote (looks like this: " ) . If you spread it out (but don't do that) you see this: ... value=" 'myhostname' " Don...

dsobin

Linux, Wine, Winbox and a terminal window within Winbox is a mess. I've yet to see these fonts rendered OK and the text input surviving deletion or moving the cursor backwards. All the rest of Winbox elements seems to work fine. As the MikroTik is unwilling to implement any native Linux tools in th...

dsobin

It occurred to me also that perhaps 5.22 didn't log these events. I observe that 5.22 does log "ethernet link up" and "ethernet link down" events when I unplug the cat5 cable. Just to be sure, I added the "interface" topic to systems->logging on 5.22. I still see no fla...

dsobin

Yes, CB radios and other transmitters could definitely cause flapping. However, in my case, the device has worked perfectly for a year and only flaps when running ROS 6.0rc6. A year of ROS 5.22 showed no problems and after downgrading back to ROS 5.22 there are no problems. Flapping is caused by ROS...

dsobin

To those who say software can't create port flapping, let me describe what I just did. RB433L, ROS 5.22, two ethernet ports are connected. One is connected to a switch which goes to my office LAN. The other port is connected with a 1 foot jumper cable to a Single Board Computer located next to the R...

dsobin

I'm trying to figure out a way to convert incoming multicast packets into unicast packets. Ethernet-2 is receiving multicast packets with a destination port of X. I'd like to send those packets out ethernet-3 as unicast with a destination port of Y. I tried src-nat, since I've used that before to ch...

dsobin

There is no way to determine the board temperature. You are right that these boards don't have temperature sensors. I am looking for the specification of the maximum ambient temperature at which the board can operate. The specifications on the routerboard.com website are inconsistent for the RB433 a...

dsobin

I'm trying to find the temperature specification for RB433 and RB433L. For RB433, two different specs appear. On the main routerboard.com page, the operating range is given as -30C to +60C. Following the link to the user manual, we see a range of -20C to +65C. Note that the user manual shows that it...

dsobin

I'm having the same problem with intermittent login failures. I get a failure about one time in 10. RB433L, ROS 5.19. Using the C client from the wiki. The compiled binary is running on a single board computer, running linux, directly connected via a short CAT5 jumper to ether1 of the RB433L. To be ...

dsobin

Well, I definitely suggest upgrading to 5.16. That should solve your problem right away.
Are you still on 5.15?

dsobin

If you are using v5.16, you shouldn't see this issue.
What version are you using?
Or are you letting us know that you were able to resolve this problem by going to v5.16?

dsobin

Was ANI enabled during these tests? We have done extensive testing with two radios in the same board, set to channels 1 and 11. If you try to transmit continuously on radio 1, radio 2 will act like its channel is busy and wait until radio 1 stops transmitting. All data will stop on radio 2 until ra...

dsobin

We have done extensive testing with two radios in the same board, set to channels 1 and 11. If you try to transmit continuously on radio 1, radio 2 will act like its channel is busy and wait until radio 1 stops transmitting. All data will stop on radio 2 until radio 1 has finished. We tested with R5...

dsobin

Mikrotik has found a bug in v5.15 that causes the AP to randomly freeze. Version 5.15 has been removed from the download page. I've been working with Mikrotik for several weeks on this and they just gave me a beta of v5.16, which, so far, has been stable, with no freezes. Don't use v5.15 for wireles...

dsobin

After numerous exchanges of email and submission of many supout files, I've just received a beta of v5.16 which Mikrotik feels has fixed the freezing AP problem. So far, the AP hasn't frozen, although it will take awhile to convince ourselves that it's really fixed. The Mikrotik folks worked hard to...

dsobin

I'm testing a beta release of 5.16 which Mikrotik says has fixed this problem. So far so good!

dsobin

I'm trying to devise a way for ROS to accept an incoming UDP unicast stream on one interface and send it out another interface as multicast. In this application, the input and output interfaces are both wifi. I control the programs generating the packets at the source and receiving the packets on mu...

dsobin

I did some of the testing on a pre-release version of 5.15 to test a multicast feature fix that was reported here. After many iterations, the multicast feature worked again, having been absent since ROS v3. However a new problem arose: the AP would randomly freeze. I've been testing to help Mikrotik...

dsobin

new in 5.15 /interface wireless> multicast-helper= description ? Checking this box will send multicast messages in unicast mode, thus greatly increasing the probability of correct delivery, since unicast packets are acknowledged by the receiver and resent if garbled. This is only useful if you have...

dsobin

Oldman: Thanks for your comment. You are absolutely right about TCP/IP using up bandwidth for acknowledgement packets. However, multicast doesn't use TCP. Since there is no way of knowing how many clients are listening, multicast always uses UDP, which does not require an acknowledging packet from t...

dsobin

Egate: Thanks for your input. Each user does indeed have to access the AP, but they do this only once, when they associate. Once they are associated with the AP, there is no further interaction between the client and the AP, in my application, and so this should not be a limitation. Limitations migh...

dsobin

We have a wifi multicast application that needs to transmit multicast packet to a large number of associated clients. This multicast traffic will be the only traffic on the network. We need to know how my devices (smart phones, mostly) can associate with a Mikrotik AP. Many threads exist on this for...

dsobin

We still seem to have a problem with multicast on v5.15. During multicast transmission, the AP sometimes will freeze. In this frozen mode, no data will be transmitted by the AP. Both unicast and multicast stop. In order to get things going again, we are usually able to disable the AP, then enable ag...

dsobin

It does seem strange to me that there is no option to enter a DTIM value. Even basic consumer devices often have this under their "advanced" section. It does seem like a simple thing to add. They just finished doing major work to add the multicast feature back into v5.15, so I'm really sur...

dsobin

After much development work by Mikrotik and testing in our lab, this is fixed in v5.15 !

Still no DTIM configuration support, but multicast over WiFi now works again, having been missing since v3.x .

Details available at http://forum.mikrotik.com/viewtopic.php?f=7&t=59235.

dsobin

Also in v5.15 is support for WiFi multicast to handheld devices.

I'm not sure why this was omitted from the list of fixes.

Previously, v5.x and v4.x did NOT support WiFi multicast to handheld devices.

See http://forum.mikrotik.com/viewtopic.php?f=7&t=59235 for detailed information.

dsobin

With the beta release of v5.15, the wifi multicast feature is back! I've done extensive testing and it seems to be stable. Thanks to the folks at Mikrotik for working so diligently to get us new releases almost daily as our testing progressed. The DTIM interval on Mikrotik is set to one and cannot b...

dsobin

stream from ipad to apple tv Did you mean that direction? If you mirror an iPad's screen on the Apple TV, I believe it uses unicast, not multicast. That should work fine. If you want to watch content on the iPad that is AirPlay streamed from the Apple TV, that's multicast and you're out of luck unt...

dsobin

Glad to have been some help!

dsobin

If you are using a Mikrotik AP, you will not be able to use Apple's Airplay or any other multicast service via wifi on a handheld device that uses power save mode (which is pretty much all handheld devices). Mikrotik has been working on this problem and I've received some updates for debugging. So f...

dsobin

Problem found. ROS v4 and v5 do not support wifi multicast. This feature was "lost" after ROS v3.

For more details, click here.

dsobin

In a small space like you have, I'd go with the omni's. Sector antenna's won't help in this application. You will only be able to use channels 1,6,11 at 2.4 GHz, as previously mentioned. I think adding another radio in each box at 5.8 GHz is the right way to go. However, keep in mind that many (most...

dsobin

Unfortunately, Mikrotik v4 and v5 do not support multicast transmission from an AP if any of the associated devices are using power save mode. In practice, iPhones and Android phones, for example, use power save mode to conserve battery life. I sent a support request to Mikrotik and they are working...

dsobin

I just did a test using an old RB532 and ROS 2.9.50. Beacon sequence numbers increment as they are supposed to. Multicast packets are correctly indicated by setting the multicast bit in the TIM of the Beacon frame whenever there are clients that are in power save mode. It appears that a bug was intr...

dsobin

Per IEEE Standard 802.11-2007 (emphasis is mine) 7.1.3.4.1 Sequence Number field The Sequence Number field is a 12-bit field indicating the sequence number of an MSDU or MMPDU. Each MSDU or MMPDU transmitted by a STA is assigned a sequence number. Sequence numbers are not assigned to control frames,...

dsobin

I upgraded to ROS 5.13, reset the config, set the radio to AP-bridge, and bridged the radio to ether1. Same results. Many multicast packets dropped. Also, the beacons continue to be broadcast without sequence numbers, in apparent violation of 802.11 protocol. I will submit this directly to support, ...

dsobin

I read IEEE Spectrum magazine, which is included in the dues of all IEEE members worldwide. While not at all restricted to networking, there is usually some article that includes topics in networking. I do not read blogs and online publications regularly, but only when I'm looking for some particula...

dsobin

As promised, here are the Wireshark packet captures for Cisco beacon frames and Mikrotik beacon frames. The Beacon Frame sequence number is identified by "SN=" in the Wireshark capture. Note that Cisco beacons (as well as Netgear, Airport, D-link, and Belkin) have sequence numbers as requi...

dsobin

All of our tests were with iPhone 3GS hardware running iOS 5, which is the latest OS version. I'll find someone with
a new iPad and a new iPhone to test with.

When you were having these problems. was the traffic standard unicast traffic, rather than multicast?

dsobin

I'm surprised no one seems concerned over the issue of beacons that are not in compliance with 802.11 standards. While I can't prove that this is the cause of the iPhone problems, it still is a compliance issue. I'm going to post the Wireshark trace here from Mikrotik AP's and Cisco AP's so everyone...

dsobin

Here is the configuration from a RB433 that was among 4 used for the testing: # jan/02/1970 00:03:41 by RouterOS 5.14 # software id = 3D01-S7WU # /interface bridge add l2mtu=1526 name=bridge1 /interface wireless set 0 band=2ghz-b/g default-authentication=no disabled=no frequency=2462 \ l2mtu=2290 mo...

dsobin

I would be thrilled if you could find some configuration problem that I could easily fix. I'm not in the lab now, but I'm arranging for remote access so I can upload the (very simple) configuration in my next post. In the meantime, perhaps Normis, you could address the issue of zero sequence numbers...

dsobin

My company has a large opportunity to deploy a Mikrotik network to deliver multicast traffic to iPhones and other smartphones. During testing, we found that the iPhones lost nearly 90% of packets sent by MT AP's. However, packet loss was less than 5% when the test iPhones were associated with AP's f...

dsobin

Ok, here are some more test results. I've determined, via torch, that packets are leaving the AP. I set up another RB411 as a client and wiresharked the packets coming off the ethernet of that client. The 244.0.0.1 packets are being received by a ROS client, but not by an iphone. I replaced the RB41...

dsobin

I'm trying to do what I think is the simplest possible multicast test: Server on Ethernet LAN steams multicast udp packets to 224.0.0.1. Ethernet is bridged to AP on RB411. Clients are iPhones associated with RB411 AP. iPhones are running test program that listens on 224.0.0.1 via wifi. The iPhones ...

dsobin

I'm glad to help. I hope this helps others as well.

Feel free to check the plus box under Karma on the left side of the page to show others that I've been able to help someone.

dsobin

Well, I do this in a different way. I do not use any virtual AP's, nor do I use dynamic wds. Here is my procedure: At the central location, and ALL OF THE REMOTE LOCATIONS, create the interface: name=ap mode=ap-bridge wds-mode=static wds-default-bridge=none wds-ignore-ssid=yes At the central locatio...

dsobin

craigdavids: You said you have successfully put one vlan over a wds link. Post how you did that and I'll show you what to do to add more vlans. I'm away from my office for the next two weeks and I can't access my equipment, but I can explain it to you. Since you got one vlan to work, you must have m...

dsobin

I routinely put multiple vlan's on the same wds link. I have both ends of the link in AP-Bridge mode. At each end, I have a single wds interface under the AP-Bridge. At each end, I create all of my vlan's under the single wds interface. You can now use the vlan interfaces at each end. One usually cr...

dsobin

We have been using pptp with good results. We have the same problem as you do. Trying to open ports through existing routers like ADSL, cable modems, or FIOS modems that we don't own or control is a problem. Each MT router we ship out initiates a pptp connection back to our HQ MT router. We give eac...

dsobin

I have two public IP's on different carriers and several servers behind my MT router. I have many dst-nat rules for various combinations of (public IP,public port, server private IP, server port). Mangle rules insure that traffic goes out from the public IP on which it entered. Src-nat rules allow t...

dsobin

I just spent a few hours getting my setup working with 3 gateways out of the router. I do use NAT, but it shouldn't make a difference. To debug this, you must create some log entries in the mangle table to see where your packets are going. It's not hard. Just duplicate the mangle record and change t...

dsobin

After re-keying the second cert to a different key, I can now get both certs to decrypt. I'm using the sequence cert1-chain-key1, decrypt, cert2-chain-key2, decrypt. However, I think I won't be needing the second certificate, since I'm now using your suggested configuration to have multiple hotspots...

dsobin

I've got a RB433 at firmware version 2.23. See below: /system routerboard> print routerboard: yes model: "433" serial-number: "1A7601E12429" current-firmware: "2.23" upgrade-firmware: "2.26" I type upgrade and answer 'y' and now I have this: /system routerboar...

dsobin

Thanks for trying that out for me! I appreciate it!

I'll get the second cert re-keyed. If your suggested multi-hotspot configuration works out for me, I won't really need it, but I paid all of $13 for it and I should at least give it a try.

Where are you located? You seem to be online 24 hours/day!

dsobin

Well, after a good night's sleep, I figured out on my own that's what you meant. It seems too simple. I'm going to give your configuration a try. I still can't get both SSL certs to install. No matter what I try, only the first one imported will be recognized. The second certificate cost only $13 at...

dsobin

That's an interesting way of doing things. As I understand your configuration, clients on both hotspots will share a single address space and share a single DNS server on the other side of the hotspot. Is that right? I'm not sure I understand how the vlan's are configured. You say that each hotspot ...

dsobin

I'm trying to install two ssl certificates on one router and I can't get it to work. Details follow below, after the description of what I'm trying to accomplish. I have a hotspot running, using one ssl certificate, with no problem. I purchased a second ssl certificate, with a different domain name,...

dsobin

I'm looking forward to that!

dsobin

sergejs, Are you referring to my configuration between MT and MT or MT and Cisco? You wrote that you have reproduced the problem between MT and MT. Yes, I agree in that case the tunnel does not break, but the peer disappears from the "Remote Peers" tab. I thought this was significant, sinc...

dsobin

Well, I don't have much choice on config, since the Cisco end isn't controlled by me. I set up the MT to MT tunnel just as an
experiment, since it was easy for others to duplicate.

dsobin

Since I didn't see this bug mentioned in the release notes, I had a feeling it wasn't going to be fixed in 4.7. That's disappointing. We use virtual AP's a lot, and it's annoying to have to configure it via terminal window vs WinBox. I guess more important bugs needed to be fixed.

dsobin

Thanks Sergejs. I hope you can also try this when the first tunnel is MT to Cisco. In my configuration, enabling a second
tunnel causes the first tunnel (MT to Cisco) to fail and require a flush SA to restore.

dsobin

Well, I just set up an experiment and the first tunnel didn't fail when I enabled the second peer, but the entry under "Remote Peers" for the first tunnel did disappear. In this mode, even though there is no entry under remote peers, the tunnel continues to carry traffic. In the current co...

dsobin

Sorry, I wasn't clear. I meant if you post your config also, we will have two configurations that fail which might shed some light on the common elements of failure that the support folks missed. In any case, after I post my failing configuration, I'll send a message to support. I've reported bugs t...

dsobin

I'm going to set this up in my lab with a simple config and see if I can get it to fail reliably. It's pretty simple right now.
I'll post the config after I do that and maybe you can try the same.

dsobin

I'm having the same problem. Running ROS 4.6, using ipsec in tunnel mode with esp. I can run a single tunnel from MT 1 to MT 2 and it's stable. I can run a single tunnel from MT 1 to a cisco router and it's also stable. If, while either tunnel is up, I enable the peer entry for the second tunnel, th...

dsobin

Has anyone sent a bug report to MikroTik yet?

dsobin

I get the same WinBox crash running Windows XP. I also notice that a WinBox VirtualAP displays a "Mode" of "station". Under earlier versions of ROS, VirtualAP devices display a mode of blank. If I was WinBox, I would be confused by an AP, even a virtual one, having a mode of stat...

dsobin

I never purchased it, since I wanted to fit more than 1 in a RB433.

I'd still be interested in anyone trying this radio.

dsobin

ROS 3.23, RB433 I'm trying to create a pptp tunnel which is originated from this router and terminates on another ROS 3.23 across the Internet. I have done this successfully many times with what I believe is the same configuration. When I enable the pptp client, the log file (on the client side) sho...

dsobin

We have large WDS network also, Rather than use access lists to prevent unwanted associations with dynamic WDS, we use static WDS and only set up connections that make sense. We specify a default bridge on the WDS setup so that each AP will automatically add its WDS link as a bridge port when the WD...

dsobin

Anyone out there? I didn't think this was that hard. Somebody must know how to do this. A hint? A pointer, any ideas at all?

Thanks.

dsobin

I have a 10 node network with all nodes wirelessly bridged via WDS links. Each node has address 192.168.9.x. There is one gateway, lets call it GW1, to the public Internet and the 192.168.9.0/24 network is src-nat'd with masquerade. The above works just fine and I have used this in dozens of network...

dsobin

The behavior of the clients when switching between bridged AP's depends on the client. If you use the same SSID, the switchover is usually transparent and the client will just pause briefly but not lose its session. If you use different SSID's, it might be transparent to the client and it might not....

dsobin

In my suggested setup, the choice of channels is up to you. You can configure all 3 radio cards to use the same channel and the same SSID. I do this myself in some situations. It will not work as well as using 3 different channels, but it is better than using a single radio card and a splitter, whic...

dsobin

Configure all 3 radio cards as mode = AP-bridge. Let's call the 3 cards wlan1, wlan2, wlan3. Set the freq and SSID as required on each card. Create a bridge. Add wlan1, wlan2, wlan3 as ports on the bridge. Give the bridge an IP address. Do NOT give each of the interfaces an IP address. This is not a...

dsobin

Thank you! That works perfectly!

Perhaps a mention of this in the documentation would be helpful to others?

dsobin

In the USA, BAMnet Corporation has outdoor networks covering several towns in both New Jersey and Florida using MikroTik hardware
exclusively.

I hope that helps.

dsobin

I'm using 2 static WDS links from node X, which is an edge node, to nodes A and B. I use static WDS rather than dynamic because there are several other nearby nodes with WDS enabled and I want node X to only connect to nodes A and B, not to any of the other nodes. Nodes X has two WDS links back to t...

dsobin

Well, slightly off topic, but since I started the topic... I had 10 Engenius 8602+S cards that failed in the field with -20 dB loss in sensitivity. Since we use very careful grounding and lightning arrestors, I blame the cards. I sent them back to Engenius since they were under warranty and got them...

dsobin

Your nat entries look correct. I do this all the time and it works fine. When it doesn't work, the problem is usually that the client or the innermost router is missing it's default route. In that case, the packets go in to the client, but they don't know how to go back out. You said the client can ...

dsobin

I have seen a similar problem on my bridged network. I link multiple nodes via static WDS. The bridges are all using rstp, ROS 3.11 and 3.13. From a client at the extremity of the network, I ping the local node, the one to which my client is directly connected. I see very long round trip times and s...

dsobin

I understand the impossibility of maintaining existing sessions if the user's public IP address changes due to an internal re-route, but how would a hotspot work in this scenario, if at all? If I have a mesh with two public IP's at two different locations in the mesh, do I need two hotspots configur...

dsobin

I didn't know it was broken. I'm using sip devices behind ROS 3.11 with NAT and it seems to work ok. The connection manager shows the udp connection as "SIP", so I assume the SIP helper is running. What are the symptoms when it doesn't work? I'd like to understand this better since we're i...

dsobin

The malicious pings were not directed to the ip address of the disabled ether3. The pings were directed to another IP that the router tries to forward. The filter rule that found theses packets is looking at the forward chain. The pings are directed to xxx.yyy.zzz.229. The IP address of ether3 is xx...

dsobin

Normis, Yes, we now understand that there are two NTP clients. Our surprise is that what you call the "integrated Simple-NTP client" has MORE detailed information than the NTP client in the "full" NTP package. Can we expect to eventually get the extra details that are in the simp...

dsobin

I have a RB450 running v3.11 with 4 ports in use. I was seeing malicious pings counting up in my filter rules, so I did a packet sniff and saw they were destined to an IP on ethernet port 3. Just for testing, I disabled ethernet port 3. To my surprise, the pings kept arriving and counting up in my f...

dsobin

Well, thank you very much for the quick reply!

A short follow-up:

Do you suggest setting the interface to "long preamble" vs "long + short", to force everyone to use the long version?

dsobin

WinBox: wireless -> registration
Column: Tx/Rx Rate

Sometimes I see a suffix of -SP after the speed. Does anyone know what the means?

dsobin

Using ROS 3.x: Set the wireless mode to AP-bridge and activate the radio card so that it is transmitting. In WinBox: wireless -> interfaces -> Tx Power Use the pull-down menu to select Tx Power Mode: default. If the radio is actually running, you will see the available power levels that the radio is...

dsobin

I have ROS 3.11 on two RB133. NTP client on node A shows lots of great details, like poll interval, active server, last update, etc. NTP client on node B shows no details. Just mode, primary, and secondary ntp server address. The only difference I can think of that would explain this is that node B ...

dsobin

As litu points out, MikroTik has dealt with the Ubiquiti driver issue by applying the known 10 dB error between what the driver reports and the actual power and using parenthesis to indicate both the value reported by the driver and the correct value. However, as jwcn points out, I am not using Ubiq...

dsobin

I also suspected that the walled garden was having trouble using host names, so I substituted ip's using walled garden ip. It didn't change anything. My failed pages were also https, so I think the problem is related to transparent proxy of redirected pages that are in the walled garden list. Howeve...

dsobin

I also have some DCM-82 on RB411, RB433, and RB133. So far, nothing has rebooted. All are running OS 3.11. All are POE 24V with less then 15 meters of cable. Gerard, did you get any feedback from MT at the MUM? Also, does anyone actually terminate the unused antenna port? If so, do you have a source...

dsobin

We also have been having problems with hotspot/proxy interactions on ROS 3.x. We are on 3.10 and 3.11 and I have one site where sometimes it works and sometimes it doesn't. I have transparent proxy turned off in the hotspot profile, but sometimes it still hangs. We use a fully qualified name for the...

dsobin

We do this on our hotspots. After a user creates an account, we give them an "account successfully created" page. On this page, in addition to the text, is a buttton that says "click here to login". That button is the submit button for a form with hidden fields for userid_ID and ...

dsobin

I just spoke to a tier 2 tech support person at Engenius, Sam, who appeared to be knowledgeable in this area. He told me that generic linux device drivers will not be able to interpret the high power operation of the 8602+S card. Engenius does not supply linux device drivers. They do have drivers fo...

dsobin

With band b-only, WinBox still displays 18 dBm as maximum power.
With band g-only, WinBox still displays 18 dBm as maximum power.

dsobin

Here is the screenshot showing maximum power of 18 dBm. The Engenius 8602+S is spec'd as 28 dBm, 600 mWatts.

dsobin

I'm looking at the WinBox window Wireless-> Interfaces -> Tx Power which is currently configured for "Tx Power Mode: default". Under that display is a table of "Current TX Powers" which shows what power the radio will use at different transmit data rates. The power level starts a...

dsobin

It's not clear to me from Normis' post what the behavior of ROS 3.x is with respect to the broadcast bit in DHCP discovery packets. The Microsoft support post mentions that some routers don't alter their response based on the broadcast bit. What does ROS 3.x do when it sees a discovery packet with t...

dsobin

Well, I asked the supplier, Titan Wireless, about this card and got the following info: It was designed by someone who used to work at Ubiquiti. It's a really great radio. You cannot fit 3 of them in a RB433 (he tried it while I waited). You cannot fit 2 of them in a RB433 even if you are willing to...

dsobin

I just saw an ad for a 5.8 GHz mPCI card from a company called DBii. Has anyone tried one of these yet? Can I fit 3 of them in a RB433? I've been using Engenius 8602S, but they keep going bad after a few weeks of service. Yes, we use lightning arrestors and yes, we ground them. Does DBii supply thei...

dsobin

I'm using a hotspot on ROS 3.10 on a RB532A and so far it works ok. I did have a scary moment at startup when the transparent-proxy delivered proxy error messages to all users during the redirect phase of the login process. After reading some posts on this subject, I disabled transparent-proxy on th...

dsobin

I have a RB133 running ROS 3.10 and my ntp client seems to be working properly. What server are you trying to reach? Do I understand correctly that your RB133 is configured as NTP client and you are trying to time-sync with a remote server? Did you try to ping the server from the RB to make sure you...

dsobin

To filter client-to-client traffic on the bridge, use the forward chain. The input chain for is for traffic that is directed to the bridge itself, such as WinBox management packets directed at the router itself. Likewise, the output chain is for traffic originating from the bridge itself. The forwar...

dsobin

I've gotten this to work with CPE running Ikarus software. I configured the Ikarus CPE radio as AP/WDS and put the radio under a bridge. It worked fine. WDS is a standard, sort of. The "sort of" part is why multi-vendor WDS doesn't always work. If you make the CPE radio a station rather th...

dsobin

If this is the only link in your network and it's P-P, it doesn't really matter whether you use static or dynamic. It also doesn't really matter if you pick a random mac for the bridges or don't pick any mac at all and instead let the bridge pick one from one of it's ports. It also doesn't really ma...

dsobin

Where do you put the MAC(i'm assuming you mean the MAC of the respective WLAN cards) of each partner in the WDS? Yes, the MAC of the distant end WLAN card is entered into the wds "sub-device" of the near end WLAN card. You create this wds sub-device using the "wireless" window. ...

dsobin

If ether1 is one of the ports on the bridge, assigning an IP to the ether is frowned upon. The documents I've read recommend assigning the IP to the bridge, since all of the ports will then share that IP. The managed mac can be a made up one or just copy and paste one of the macs connected to the br...

dsobin

My network consists of many routers connected by radios in ap/bridge wds-static mode.I always assign an IP address to the bridge and never assign an IP address to any of the interfaces that are ports on the bridge. I do this so I have an address that I can use to manage the router which contains tha...

dsobin

I encountered this problem with a test box (ROS 3.9) on my desk with no traffic and only one wireless client. My wireless client was able to reach any URL in the walled garden with no problem. If the wireless client tried to access a URL that was not in the walled garden, the client's web browser di...

dsobin

I'm in the process of implementing this suggestion. The "trick" is to give each vlan a unique name, and then attach each of the vlans as ports to the hotspot bridge. As the documentation says: NAS-Port-Id ...(if bridged, the bridge port name is showed here) As a result, you should see the ...

dsobin

Well, not with cisco phones, but on one of my networks Windows Vista computers would timeout DHCP requests. I also monitored the network, as you did, and saw the DHCP request from the client followed by the router response, but the Vista client ignored the response and eventually timed out. Windows ...

dsobin

Yes, many of us are having problems with transparent proxy. It seems not to work at all with the hotspot redirect function, and it refuses to be shut down even after un-checking the "transparent proxy" box. You can check out this thread to see how transparent proxy is failing hotspot redir...

dsobin

I just got a reply from Sergejs at MikroTik, responding to my support request about this issue. Transparent-proxy is enabled for all HotSpot users, which are using 'ip hotspot user profile' default one. HotSpot uses embedded proxy by default, set transparent-proxy=no to disable it for HotSpot client...

dsobin

Your ROS 2.9 has all of those firewall rules also. You don't see them because the pull-down box in the upper-right corner of the page is set to "static" instead of "all". When set to "static" it doesn't show the rules that were created dynamically by the hotspot process...

dsobin

Thanks for the suggestions, but, as I said in my previous post, I have the hotspot default user profile set to not proxy and the other items you suggested, but that proxy server just keeps on running. However, I finally got the hotspot to work by re-booting the router. I had first tried stopping/sta...

dsobin

I just upgraded to 3.9 and the hotspot and web proxy are still not getting along well. :( I tried to turn off the web proxy, but it refuses to stay off. It starts up and won't let hotspot redirects work. This thread, http://forum.mikrotik.com/viewtopic.php?f=2&t=22713 has been covering this issu...

dsobin

I'm having the same problem. I first did a netinstall of ROS 3.8, which was working ok. Then I upgraded to 3.9, and the proxy server started itself up and now intercepts all of my redirect requests. Requests for URL's in the walled garden work fine. Only redirects get the "Error: Not Found"...

dsobin

The idea that comes to my mind is to create a customized "servlet page". You can see the specific instructions on how to do this at http://www.mikrotik.com/testdocs/ros/2.9/ip/hotspot.php . In general, modify the hotspot page alogin.html to include an entry like this: <head> $(if username ...

dsobin

I had the same problem on a RB333, ROS 3.7, when I added the Dude to the basic package. Here is the response from MikroTik: From: support@mikrotik.com Subject: Re: [Ticket#2008050266000395] ROS 3.7 system warning Date: May 6, 2008 5:39:29 AM EDT Hello David, Thank you for the report. There is no any...

dsobin

Here's an update on this. I was able to netinstall just system and routerboard from 3.6, and keep it running long enough to upgrade to BIOS 2.13, just recently downloaded from routerboard.com. I now get it to come up from the console as routerboot 2.13. I ran netinstall (latest 3.6 version) on a fre...

dsobin

I tried to upgrade a RB192 from 2.9.48 (I think) to 3.6. I've done this on nearly 20 other boards (mostly 133, some 532A) with no problems. The 192 is now bricked. I can talk to its BIOS (2.9), but I can't upgrade it to 2.12. See my post here http://forum.routerboard.com/viewtopic.php?f=3&t=3783...

dsobin

Thank you uldis! Since I have ROS 2.9.50 I didn't check the R3 documentation. These parameters do not show up in the 2.9 documentation. Am I correct in assuming that the description in R3 applies to 2.9? If this is working as expected, with the values left as default, will I see the bridge port cost...

dsobin

I see that nobody answered. I'd like to know that also. I'm trying to figure out a way to use the quality of a link to determine the path cost on a bridged network. I'm having the problem of the bridge selecting links that have gone marginal due to fading. Because the link was originally configured ...

dsobin

Sector side: LMR400 10 feet Omni side: LMR400 25 feet Omni is a bit low and Fresnel zone is obstructed, but margin should still be good. Sector is 90 degrees. Omni at distant end is about 40 deg. off-center of sector. I'm going to have someone check the vertical angle on the sector. It's supposed to...

dsobin

I have a 5 KM link with XR5 at both ends. Local end is 17 dB sector, remote is 12 dB omni. Should work great. However, it's not working well and in debugging, I notice that if I do a scan, I see the distant end with a signal of -80 dB. That should work ok. However, on the registration window, I see ...

dsobin

We have a similar requirement: We want roaming users to be able to connect to another AP in our network and not have to re-login. To do this, we had to make a bridged network and put the hotspot on the gateway node. All of the other access points in our network are bridged via WDS. We use 5.8 GHz fo...

dsobin

Thank you for that good news! We have been waiting for that feature for a very long time!

dsobin

Thanks, but that feature won't help identify the user after they have logged off and de-associated from the access point. Most of our clients are windows PC's. These devices don't "see" the radio name and even if they do, they don't remember the name after the connection has ended. Also, w...

dsobin

I have a multi-node wireless bridged network using WDS, with the first node running a hotspot and also having a WAN connection to the Internet. This is working just fine and clients who associate with any of the bridged nodes can authenticate via radius and get out to the Internet. I want to be able...

dsobin

As far as I know, the current version of winbox still cannot be configured to use a port other than the default 8291. As a result, it is NOT possible to manage a MT behind another MT unless you either have two public IP's on the first MT, or, if you only have a single IP on the first MT, you use a V...

dsobin

According to the documentation (Document revision: 2.3 (Fri Aug 18 11:56:45 GMT 2006) on the MikroTik website: One MAC address will be assigned to all the bridged interfaces (the smallest MAC address will be chosen automatically). However, I'm looking at my ROS v2.9.46 node and the automatically cho...

dsobin

We do this now, using several firewall and filter entries. However, it should be easier to do this as follows: ip->hotspot->walled garden-> IP list->add accept protocol = 47 (GRE) ip->hotspot->walled garden-> IP list->add accept port = 1723 Port 1723 and protocol 47 are used for PPTP. If you enable ...

dsobin

This happens to me also. It's very annoying. My configuration is very diffent from yours, but perhaps my experience can shed some light on why you are seeing changing mac addresses on the bridge. I use static WDS, which needs to share mac addresses of the radios on each side of the connection. Since...

dsobin

We have a similar arrangement, and I keep meaning to add this as a wiki since many people ask about this. We used SSH at first and multiple port forwarding rules, but this was not convenient. We prefer to use WinBox to manage our nodes rather than the console. Our simple solution is to use PPTP, a V...

dsobin

We currently have 3 VPN connections up to different parts of our network, each with a different subnet. Each subnet has between 5 and 10 nodes. We use DSL at our main location, and it drops for only few minutes maybe once every 3 months, usually in the early hours of the morning. I assume this is ma...

dsobin

After my last post, we started using Dude via VPN (pptp) and found that it works fine. We've had the connection up since right after that post with no problems. Also, I'm told that we can configure this VPN connection to auto reconnect if it drops. What is your concern about having the VPN drop? Has...

dsobin

We run a bridged mesh network with two radios (bridged) per node. On each node, one radio is used for BackHaul (uplink/downlink), and the other is an AP for local users to connect. The BH radios are all configured as ap-bridge/WDS, with SSID hidden. All of our nodes are part of a single private subn...

dsobin

I just clicked "Description" as suggested under the R52H and get
"Error 404: Not Found"

The target url is http://www.mikrotik.com/pdf/R52H.pdf

Bad link, perhaps?

The link for .../R52.pdf works fine.

dsobin

I needed to do the same thing. The object I needed to connect to behind the hotspot was another router, running Ikarus OS, which needed an odd port to be open. To get to port 80: The easy part is: ip firewall add chain=dstnat dst-address=1.2.3.5 dst-port=80 action=dst-nat to-address=192.168.1.10 to-...

dsobin

I was just wondering about this myself.

I also wondered if bridged wds links are better than bridged ap-client
in the two radio system.

dsobin

Did you ever get this to work, or did you give up? I am also trying to get Ikarus to talk to mikrotik. I would like to hear what you did to get it working. I was having the 4-way handshake fail until I made a change to the wpa setting on the ikarus node to select tkip in all cipher modes. Until then...

dsobin

I've had problems with Ubiquity radios going 'deaf' after lightning storms. We might not have properly grounded them. What's the story regarding your 'properly grounded' comment? Are they more sensitive to static than other radios? Is it a performance issue? I guess I really need to look into other ...

Search found 160 matches