MikroTik

bpwl

as typically the client devices have only one antenna You will need to check if that is true in your case. If I look at the cAP and hAP in the holiday resort right now, most client devices connect with 2S (dual stream/dual antenna) What is smartphone and what is PC is not in this Dude RouterOS regi...

bpwl

Security profile in WLAN interface is no problem, it will not be used, if SSID is empty and the Connect list is used to define both SSID and Security profile.

bpwl

there must be a security profile selected, there are 3 of them: two for known networks and one default. Nothing happens if I select default. Your connect list must contain your 2 known networks, each with their own correct security profile. See : https://forum.mikrotik.com/viewtopic.php?t=169032&am...

bpwl

Accounting packets keep coming
As User Manager claims the NAS (router/AP) rebooted, but the NAS did not reboot. The wifi sessions are still active.

..

Klembord-3.jpg

bpwl

With the V5 User Manager (ROS 7) and ROS6 routers there is a similar problem, with EAP wifi authentication User Manager closes the session, as it detects the router (NAS) is not responding at a certain point in time. User manager closes the session, but the NAS (AP) does not. Then accounting packets...

bpwl

Winbox is not using HTTP or HTTPS. It is using TCP port 8291 for it's connections. HTTP proxy does not help here. Webfig does HTTP/HTTPS, and has a similar set of GUI settings. So here proxy is relevant. Proxy for WinBox is rather RoMon , a different L2 protocol MAC address based, not L3 (IP address...

bpwl

You want your device to face the antenna from the reports "Y" direction for 5 GHz. That is when the antenna surface looks the biggest for you. Like the picture is taken for the test report. https://forum.mikrotik.com/viewtopic.php?t=203076&#p1049189 90° rotation is the weaker direction...

bpwl

Why? Get the smaller device if the wifi coverage is "too good" Ehem ... smaller antenna gain - stronger radio power .... is to my knowledge and verified with experiments a very valuable setup for indoor use. There are many reflections indoors, so total radio energy matters as the transmis...

bpwl

Yes it's run on my laptop, how to run it on MT router. For MT router check the firewall setting, to allow the Radius ports 1812 and 1813 as input. it's done (see attachment). It is normally run on a laptop, not on the MT router The laptop IP , when using NtRadPing, must be in the "Routers"...

bpwl

127.0. 0.1 is a loopback IP address that is reserved for the local host or computer or router. NtRadPing is probably run on a laptop, not on the MT router. 127.0.0.1 would mean the laptops local RADIUS server, not User Manager on the MT router For MT router check the firewall setting, to allow the R...

bpwl

Appreciated. That is working now fine. Now. When I repeat the wireless network from the Mikrotik with a Tender Router, I get the error below when I try to submit to the captive portal while the wifi from the Mikrotik is authenticating correctly on the captive portal. Error: Web browser did not send...

bpwl

It's there... without RADIUS the number of devices is in the "Hotspot User Profile". You will need different profiles, one for each different number of devices. with RADIUS (e.g. User Manager) , the number of devices is specified per named "user". Not only for Hotspot, I use this...

bpwl

The flagship ax3 has worse wi-fi than the older and cheaper ax2, right? Not really worse, different is the better expression. Higher antenna gain is better wifi, is a MT developers/engineers/marketing hoax. It's different wifi. Reception is certainly better. The transmit wifi power is in most cases...

bpwl

Wifi setting can be many things, and so many things can make it fail, complete config for wifi really needed here.

Not only config ... What is the wifi interface status giving?

bpwl

Login based on RADIUS (User manager) would allow more logins per user, on different MAC addresses. Also multiple users using the same MAC (device) in sequence is possible. The max number of logins is defined per user.("shared users" parameter in User Manager) EDIT: There is also "shar...

bpwl

've had problems on one site with 5500,5180 specified - it keeps instantly selecting 5180 I've been told because ... I have no control over DFS workings ... It indeed selects in a strange pattern., list is not used as a priority list, nor does it ever take the next in the list. My wAP ac's generate...

bpwl

With spaces, "" are needed Or just enter county value on the next line .. without "" /interface/wifi/radio/reg-info country= country: New Zealand number: 0 ranges: 2402-2482/20 5170-5250/23/indoor 5250-5330/23/indoor/dfs 5490-5730/30/dfs 5735-5835/36

bpwl

Check the values in RouterOS in use. It varies over (even minor) versions. It might vary over devices/platforms. Just check it! For wifi drivers use "/interface/wifi/radio/reg-info country="XXXXXXXXX" number=0 " If spelling of country name is unkbnown ... type "a" then ...

bpwl

You're probably getting your frequency changed due to radar detect, and it's selecting a TPC DFS channel which is designed for short range devices. Don't pick DFS channels or use "auto" frequency to avoid this. I would never use "auto" in 5GHz with hAP ax2 and hAP ax3 since ROS ...

bpwl

I have them almost in one line, but on different freq for the 60Ghz radio's. Set of 3 pairs. The 5Ghz are on the same freq and share air-time. But 5GHz is for fallback only. Klembord-2.jpg Throughput UDP in one direction: 560Mbp Klembord-3.jpg . TCP in both directions falls back : to 120Mbps . Klemb...

bpwl

when AP works in 5470-5725 MHz 5470MHz is an odd place in the allowed spectrum Check your Country setting. If no country is set the default country used has become Latvia (not US anymore!) since recent ROS 7.13.x versions. [admin@hAPax2] /interface/wifi/radio> reg-info country: Latvia number: 0 ran...

bpwl

called-id=g-adm-skuul.de
called-id=g-skuul.de

Called-id is normally the SSID. Those here look like invalid SSID names for many vendor implementations. "." and "-" might be not-allowed in the SSID name.

bpwl

It's worse ... not only 802.11b supporting AP, but a station (client) with b will trigger the protection overhead: "the presence of an IEEE 802.11b station produces a harmful chain reaction in dense environments since neighboring BSSs also activate their protection mechanisms" And it is qu...

bpwl

at least the feature to retire b/g if desired. "g" is not that important ... the 6Mbps as basic rate is also used in "n" and "ac". "b" goes to 1Mbps, and whenever an AP with g/n sees some device transmitting "b", it also falls back to 1Mbps. (Even i...

bpwl

Well the separate bridge setup is well known, to split traffic at L2. Just wonder why bother with that 2nd bridge, "the Guest bridge". All could be done without that bridge, just directly on the wifi2g interface. Maybe trying to do this while the bridge is already there, and wifi2g as a po...

bpwl

I understand the frustration. One very strong AP is not what is enough for longer distances. The antenna gain must be at both sides. https://mikrotik.com/products/ptp Eg a "SXTsa5 ac" would already do wonders. (16dBi). Or a MT AP with external antenna (eg like with mANT15 S) would as well....

bpwl

With ROS 7.12, for "united states3" we have .... 30dBm EIRP power (=radio+antenna gain in the peak direction) /interface/wireless/info> country-info country: united states3 ranges: 2402-2472/b,g,gn20,gn40(30dBm) 5170-5250/a,an20,an40,ac20,ac40,ac80,ac160,ac80+80(30dBm)/indoor 5735-5835/a,a...

bpwl

Woobm is mainly a USB/serial adaptor with some wifi portal to allow terminal (telnet,ssh) access over the wifi connection, also known as reverse telnet.

viewtopic.php?t=204352&hilit=woobm#p1055762

viewtopic.php?t=203113&hilit=woobm

bpwl

So you are saying that we should just forcefully set an Admin MAC to workaround the issue? Still the question remains why this suddenly is a problem as it may be a bug? In any case I reported to support@ and waiting for feedback. AFAIK a Bridge has no own MAC address, and it takes the interface MAC...

bpwl

Yes : "add a new RADIUS server for this local RADIUS client", this is not "create a new RADIUS client" or "create new RADIUS client interface". There is only one RADIUS client in ROS. The RADIUS client defined in HELP: "The MikroTik RouterOS has a RADIUS client tha...

bpwl

Fully written out it could be "New RADIUS server connection". You are not adding a new RADIUS server to this device, but an extra connection to a RADIUS server .... "New connection to New RADIUS server". The connection is new, the RADIUS server may have been unknown to this route...

bpwl

So yes, check Wifi tab (and why is wireless loaded then ?)

AX devices cannot run legacy WLAN driver, menu is called "Wireless", it is still there for that CAPsMAN-manager.
Loaded WLAN (Wireless) software is version dependend. Still part of the RouterOS package in 7.12

bpwl

Indeed unbelievable high with MT router as the interface rate shown is 1201Mbps On the other hand, having 938Mbps on wifi with that interface card , is no surprise, if he AP supports 160MHz wide channel. https://www.intel.com/content/www/us/en/products/sku/204836/intel-wifi-6e-ax210-gig/specificatio...

bpwl

The information is nice but truncated. Klembord-2.jpg Might be able to reconstruct, as most MT AP are 2S (2 spatial streams) only. And AX is indicated (HE in MCS tabel) https://mcsindex.com/ And you said 80MHz, so 2spatial stream, 1201 Mbps, 80MHz, in ax is HE MCS 11 Klembord-3.jpg That is the "...

bpwl

Don't know if there is some special configuration I need to use to have one send and other side receive. Normally one uses both antenna for send and receive with 802.11n onwards. This dual spatial stream mode gives double bandwidth. Instant dynamic value can be seen in the registration table: "...

bpwl

FYI only Although for sure people would pay €5 more a piece to add additional features, such as for some the beeper, others the USB port, others the microSD reader, etc... A ESP32 could deliver this with just a piezo buzzer. (7€ ESP + 1.3€ buzzer) ESP is powered by USB. You don't need to buy one to ...

bpwl

he's out of band like everybody does in 2ghz. you can't run ptp in the normal wifi range except very rural.

Disagree

bpwl

the problem is you're using omni antennas to make a ptp bridge Indeed one of the potential problems,(using 40 MHz in 2.4GHz band is another), that cannot be seen from the config used, but is dependent on the RF spectrum in the environment. So besides the config, one should at least look at the regi...

bpwl

20-eC Is indeed seen as 40MHz, just as XX or CE. XXXX as set with 5 GHz will be 80MHz and work as Ceee, eCee, eeCe or eeeC Surprised one uses 802.11b in the US region. (expected a or g) g/n default to 20MHz only, with n/ac devices, unless set otherwise ax may be different and go for 40MHz by defaul...

bpwl

Well 2 subnets on the same lan (L2, network) brings some difficulties. Same Lan here , can come with same ethernet, same VLAN, same bridge ... everything that can communicate directly (L2 flat network) ... is supposed to be in the same subnet. So in your exemple the bridge with eth2-eth23 could be o...

bpwl

My case worked, because there was a Woobm on site. Somebody plugged it in, and I had console access via other MT router. https://forum.mikrotik.com/viewtopic.php?t=125678#p889572 USB/RS232 serial cable should work as well, if loccked out from all ethernet ports (eg bridge VLAN filter enabled) MT Woo...

bpwl

Installation=indoor is the best setting for maximum range of frequencies. On the hAP ax2 there is a sticker "use indoor only" on the device. This is also in the comments of the default configuration of the device. (Comments, not a setting with the wifi(wave2) driver set. ) Searched for thi...

bpwl

OK , some remarks. - see this story, about the use of station-pseudobridge: https://forum.mikrotik.com/viewtopic.php?t=204184#p1054619 - decide as in the above story about using either the bridged solution (with station-pseudo bridge) or the routed solution with masquerade/SRCNAT as the ADSL modem i...

bpwl

This is the "outdoor" version. (No hinge!) If not available, Check web-shops for "dual band rubber duck antenna" ... check the connector type, impedances are mostly 50 Ohm. Gain varies from 2dBi to 8 dBi. Have to try some one day ... many results for my search string "Omnidi...

bpwl

Indeed config is needed. Many things can be missing. I see the Mikrotik admin page. But can you get to the modem (192.168.1.1) from 192.168.73.2 ? What is used? Masquerade/srcnat on the modem/MT line? Or Modem has been told 192.168.73.0/24 is via the MT router ? Some modems don't have IP route setti...

bpwl

Would this be a work-around? Add the SSID to the called format. WLAN driver : "radius-called-format (mac | mac:ssid | ssid; Default: mac:ssid)" Wifi driver: "called-format (format-string) Format for the value of the Called-Station-Id RADIUS attribute, in AP's messages to RADIUS server...

bpwl

And unless it's a frequency not supported by the connecting clients, it should work. Or it uses one of the SRD (short range) frequencies, with very low power , a range that is mostly idle because too weak to detect users, and as such is preferred by "auto channel selection" with AX , if n...

bpwl

One AP to many clients on the station is the problem. Wifi stations with just one destination is easy. Many very cheap solutions do exist for that. (Sometimes as secondary function, in over-powerline links with AP function, ethernet repeaters/extenders tend to gave an ethernet port as well) There is...

bpwl

Problem with your "dumb switch" , is that for this to work the switch must do some smart special things, if the data over wifi is for multiple cabled devices. Not as in a normal cabled "dumb switch" where the data-packets keep their original source/destination MAC addresses, as t...

bpwl

I do know EoIP and VPLS as ways to get L2 over a L3 network. (E.g. when "AP-bridge + Station bridge" is not available) , but both need a larger MTU on the L3 carrier. (Wifi can go up to 2300bytes AFAIK, at least in the legacy WLAN). Smaller MTU in EoIP was detected by Netflix. "Someth...

bpwl

Nobody should use it anymore. . Then call me "Mr Nobody". :-) Needed a VPN to pass through a complex LAN with not related traffic , for bringing Netflix to a smartTV , while the Netflix and other broadcast technologies should not detect it is VPN forwarded. They issue a warning: like &quo...

bpwl

That makes the rule of thumb more like 2/3 vice 1/3............ Yes dear @anav. We have been there before. The MT WLAN drivers with their limited aggregation, is causing higher % airtime as inter-transmission gaps. (same waits but very small/short transmissions) This causes the 1/3 rule of thump fo...

bpwl

Somebody with more DHCP experience might help here. But I do see Discover-Offer-Request-Ack sequence as expected, but there is instantly a new discover. As if the Ack was not received or accepted by the client. In the second part the client has taken and uses the IP lease address. (ciaddr) https://t...

bpwl

How to enable dhcp debug? Where to look? In system / logging add a double topic "dhcp" and "debug" , output will be in the log. "packet" is also possible to see even more, or use "!packet" to suppress the large packet based output. so i enabled Mikrotik's DHC...

bpwl

Who knows .... ? - enable dhcp,debug to see more? - no internet access after getting the IP address, some clients then drop the wifi connection, then dhcp deassigns ??? - DHCP D.O.R.A sequence is stuck at O=offered. The (ping) check fails after the 2sec aurhorative delay ??? DHCP lease Status does n...

bpwl

A bit worried about that "Caps mode" statement. What is the corresponding config ? CAPsMAN can run with local forwarding, but also centralise all traffic towards the CAPsMAN controller over tunnels ( called CAPWAP tunnel in RFC's). The attempt at bridging is probably intended for local for...

bpwl

But now (ROS 7.12) we have MACVLAN in Mikrotik. What is the possible interface stack to be used? I use VRRP on VLAN on ethernet ( actually bridge) . But I have seen posts here with VLAN on VRRP on ethernet/bridge. (To make all VLAN flap router at the same time ??? But isn't there "Group Authori...

bpwl

Not sure what kind of things using radar? Many problems in my setups where wAP ac's are generating false positive radar patterns for SXTsq unintentionally pointing at them. https://forum.mikrotik.com/viewtopic.php?t=186707&#p994863 Even seeing phantom wAP ac frequencies in that case. https://fo...

bpwl

As already mentioned elsewhere https://forum.mikrotik.com/viewtopic.php?t=203251&#p1052572 , my perception is that others do implement DFS differently. I don't have the devices, only see their documentation. So e.g. Cisco Meraki ... DFS events can cause an Access Point to use a channel, temporar...

bpwl

But still no link to a teknical spec or a how-to...

For technical specs ... see ... viewtopic.php?t=203076&#p1049189

bpwl

Don't know if this will help here, but for more logs on wireless (eg. attemps to associate with WLAN driver) one needs topics "wireless,debug". Additional lines will be in the log then, which only contained "wireless,info" ( e.g. connected/disconnected) before.

bpwl

Local logging -> action "remote" ->Dude syslog -> ROS logging as topic "dude" -> logging action "e-mail" Long difficult path for push notifications. Logging will be there. But no SNMP trap handler in DUDE. Need something else to handle the SNMP trap sent when interface ...

bpwl

t has to wait for 30 minutes Wow .. But everyone says it differently, all vendors implement it differently? 30 minutes to return back to the first frequency. CAC of 1 min or 10min CAC is known. 30 minutes ? Seriously if only one DFS channel available? https://documentation.meraki.com/MR/Radio_Setti...

bpwl

The main problem is that MikroTik are developing their own DNS resolver, instead of leaving that to the experts. I have always seen the Mikrotik DNS "server" , as a DNS forwarder, with just limited functions as DNS resolver. There is much more in a DNS server, than forwarding: like second...

bpwl

Yes , with the legacy Wireless package , there was much more manual control, for the low level operation. With the Wifi package, quite some of these parameter settings are supposed to be automatic. There are new ones to try to master. So indoor/outdoor (or even all) for installation in Wireless pack...

bpwl

wAP ac "installation" can be set to "any". At least with ROS 6.45.6 (the ROS version that performs rock solid). RouterBOARD wAP G-5HacT2HnD Should check the ARM based wAP ac, and newer ROS, but expect it to still be the same. (Installation option is still in WLAN driver , even wi...

bpwl

Ah , now I understand the sticker on my brand new hAP ax2 ... "use indoor only". I wondered if it was about IPX waterproof rating. Was it? Maybe , but as the wifi(wave2) driver has no more parameter for "Installation"/"outdoor/indoor/any" ... that setting is built in in...

bpwl

There's a glitch: if one enters e.g. /interface/wifi/radio/reg-info country= and then presses a TAB key, list of countries is shown ... but only countries with single-word names. Hidden hidden, a lot of information and commands are hidden here. Well one step more is /interface/wifi/radio/reg-info c...

bpwl

And ... in DUDE you can create datasets, that will collect (and compress over time) the collected data. Datasets are made with SNMP OID and some functions in DUDE to round-subtract-average-convert the collected data. I have no exemple for up-down collection (that is in the DUDE syslog as LOG records...

bpwl

Probably this change since 7.13.1: *) wifi - use "Latvia" as default value for "country" property; And I have seen some long lists in this forum of the power limits in earlier but recent ROS versions for the wifiwave2. The limits where quite different (much higher) than the curr...

bpwl

The station always follows the AP in frequency. What range to scan could be defined by country (optimised). The TX power of the station is important , is set by Country value (and antenna gain correction parameter) AFAIK the AP is the only one that has to do the CAC test for radars. Not the station....

bpwl

"Why the hell would the country-related changes affect the stations (i.e., Mikrotiks as wireless clients)?" TX power allowed changes with Country and ROS version. Change between versions can be dramatic. Eg Europe for 5745+ freq from 30dB to 16dB Stations have also to conform the EIRP tra...

bpwl

Well, two things. Device connected on an ethernet interface of the Mikrotik , this ethernet not a port of the bridge, with its own IP address and mask: eg 192.168.111.1/24 1. DSTNAT: It is a case of destination nat , usually used for forwarding incoming request on the public IP to a specific local I...

bpwl

Well at least you need two settings. The allowed access will not be stopped, if there is no deny ACL rule (interface general rule or specific for this MAC) By default the interface general rule is allow (authenticaion=yes). As you want to deny acces for one client only, when power is low, then a spe...

bpwl

Interesting data. My 260Mbps is not with Omnitik but with SXT SA5 (indeed omnidirectional is a challenge here) and with 5 SXTsq 5ac clients. SXT SA5 and SXtsq 5ac have similar antenna gain, are are a good match. (Omnitik is weaker antenna gain) Best performance is with nv2 protocol. Test was with 1 ...

bpwl

Indeed unrealistic speed. SXTsq ac and Omnitik 5 ac are normally used with the classic WLAN driver (not wifiwave2) In that case an optimal interface rate of 866Mbps will deliver some 360Mbps as theoretical maximum, in one direction. (Wifi is half duplex!) With 40 MHz channel width I get 260Mbps data...

bpwl

See : viewtopic.php?p=1009820#p1009820 about SA Query timeout.

The rest is about using WPA2/WPA3 combination, setting FT enabled or not, and cypher settings.

bpwl

country=United States Well one can play with the country (mostly illegal settings as outcome) , but this can have another negative side. Frequencies and allowed strength (power) used in 5GHz differ per region. USA is region FCC, Italy is region ETSI, with quite different settings. And since RouterO...

bpwl

And if simple exemples are needed. These are 2 types of queues that I implemented/combined with just following the tutorials. - limit the traffic per device with simple queues - use queue tree to implement quality of service, that is to give certain traffic priority https://tksja.com/bandwidth-manag...

bpwl

Yes I know. There is no such thing as a free lunch. But for wifi, it passes the CPU anyway, these interfaces are not connected to switch. More hesitation to apply it in the PowerBox Pro where all is ethernet. Switch port isolation to be configured. Easy in SwOS. More complex in RouterOS, it is eithe...

bpwl

See also viewtopic.php?t=203693#p1051032

bpwl

I have been posting in another post about this. Time to give it a proper title in a separate post. https://forum.mikrotik.com/viewtopic.php?t=203288#p1047917 Today I received my latest c't magazine (computer technology) , and it handled the same topic, but better, better explained, exemples, and stu...

bpwl

Yes "called-id" is the parameter in the RADIUS setting with the SSID value. Nothing specific for CAPsMAN. I use this as well for just my stand-alone AP's. Same or different radius server for different SSID. Even a sequence of RADIUS servers for the same SSID, for the case where one server ...

bpwl

No idea what CAPsMAN would do here. I'm not a CAPsMAN user, not the old, not the new. (even while using 30 AP's with a common RADIUS login). CAPsMAN could centralise the local Access List entries AFAIK. Last summer I had some sort of denial of service attack (probably unintended) because some member...

bpwl

With the parameter Allow Signal Out Of Range you can make the Station wait 2 or 5 minutes for a signal from the first Access Point and only if it does not appear during this time it will connect to the second one. Excellent , learned something new (for me), using the "Signal Out of Range"...

bpwl

Performance as to be expected? https://mikrotik.com/product/hex_s#fndtn-testresults I assume this is the routing case , even with some NAT rules, and filter rules. And queues. Rules can cause heavy CPU load and delays, such as marking all packets. For mangle rules, marking connections, then marking ...

bpwl

I use "station roaming" in the stations when using 802.11, so they take eventually the better one, not the first one that powered up, after a general power failure or reset. Or just the one that was not hit by the power dip, or the one that did not reboot. Otherwise they use to be very sti...

bpwl

More information on Omnitik 5 ac can be found here: https://fccid.io/TV7OMNITIKPG5HACD/Test-Report/Test-report-5541349 Klembord-2.jpg Well, I agree, this is for the US version of the Omnitik 5 ac. But MT Omnitik documentation gives the same values for the international version. Device does not allow...

bpwl

query-radius is new action (compared to WLAN driver). So no experience. But is this a 2 phase authentication? First access-list, then additional PSK or EAP authentication, or not? For WPAx-EAP with MAC based authentication with WLAN driver, The MAC address was the EAP username and password. in RADIU...

bpwl

Seems to be possible, with some specifics about how to use regular expressions as possible condition:
viewtopic.php?t=128682

bpwl

Thx for reading and applying. I'm not very clear, and the MT documentation by moments is very confusing @bpwl So you're saying that; 1- These devices are powerful devices. So lower the antenna gain; interface/wireless/set wlan1 antenna-gain=8 No one can lower the physical antenna gain with just a pa...

bpwl

@mkx, yes fully agree.

bpwl

Well I have them mounted on my home hAP ac3. So I can test the wifi performance (see other posts). They are big, but not in performance. Actually not even omnidirectional for the 5GHz band https://forum.mikrotik.com/viewtopic.php?t=203076&hilit=antenna#p1049189 either. Their flat design makes th...

bpwl

Questions from my side: why not use AX2 then ? A lot smaller and better performance then AC3. Why use a wireless router at all ? Well dear @holvoetn , I do use 2 hAP ax3 with antenna removed , in our nearby remote area in FR, as main routers. The devices are in a computer cabinet, in a separate bui...

bpwl

Reading someones VLAN design, is always hard for me. Even with a very nice drawing , it helps, but still I didn't grasp it. It is probably me. I give what I understand of VLAN and bridges, but in this matter, making a mistake is easy done. Can you explain the purpose of using 3 bridges, and not just...

bpwl

Even better, a free trip to a resort with at least one overnight stay included, the Mrs Bpwl, can enjoy a trip too I'm sure!! No trip. It was all handled in one hour, with DUDE and a neighbor wAP ac. [From problem detection to solution] That's why any physical handling needed is a nightmare in this...

bpwl

I then got even more confused because it also looks like the method of setting the VLANs for each interface/SSID has changed? The examples I could find of setting up VLANs with the new wifi configuration all use CAPsMAN, which I don't want/need to use with only a single AP. There are 2 methods to h...

bpwl

Yes interference, or lets say coexistence(wait) times, are part of any wifi ether environment for the same channel . Overlapping channels would cause destructive interference ( no wait, but transmission corruption) even worse than coexistence. Nv2 does not check and wait for clear channel. This give...

bpwl

LOL as you may remember, it is in a holiday resort, 1000+ km from here. And the reset hAP ac2 are connected via the PoE in Port (WAN Port after that reset). Their WLAN is LAN but do not allow MAC based access .

bpwl

On the too small hdd-space (flash memory) in the hAP ac2, just a tought, never tried, but is "etherboot" a potential path to boot from a larger image, or is this only usable for Netinstall, not for booting up? While reading about Protected Routerboot procedures in the HELP section ... &quo...

bpwl

Effectively kicked out the moment I flipped the VLAN-switch. Yes very dangerous command. I don't get it why "safe mode" sometimes fails to restore this. Another thing in my Ros devices which are faily hard locked (students on holiday press reset and do power off/on sequences as they learn...

bpwl

Thx @Amm0 Doing SRC-NAT on traffic from local processes seems rather (very) difficult with RouterOS. There are quite some posts in this forum with tricky setups to change "output" traffic into "forwarding" traffic, so that the SRC address could be set as desired. So far I have gi...

bpwl

OK Thx. Easier to read what frequencies you use. So no NV2 sync needed. Only surprised on the lower channels: 5260 etc are supposed to be indoor only, they have lower EIRP power allowed, and do not work on Omnitik if set to a country in Europe. I use 40MHz wide channels as block 5500+5520 (CH100-107...

bpwl

Well, what you read may not be fully correct. VRRP is very special in its IP address setup. This has consequences for the traffic (did not read it but found out the hard way). Requests that come in via the VRRP IP address are quite often answerred via it's master interface (IP address) What I think ...

bpwl

Just upgraded my hAP AX3. Upgrade was ok and the router returned after a few minutes but I have noticed a major drop in WiFi performance with devices dropping from 450mbps plus to 75 ... Managing the device over a cable is tricky and I am keen to avoid breaking WiFi..is this performance drop due to...

bpwl

This uses nv2 from two AP's , and on the same frequency? Did I see this correctly? nv2 is not a 802.11 protocol, where AP and client wait for transmissions until the channel is clear. The nv2 AP will tell who of the clients can transmit at what time slot. 2 nv2 AP's should synchronize, not to assign...

bpwl

My mileage ... safemode did not safe me. Don't know why.
And when bridge VLAN filtering did not allow access to the CPU, then MAC based access also failed. (MAC telnet, WinBox).
That one time I really needed my Woobm-USB on the hEX. Indeed always having one port off the bridge since then.

bpwl

OK thx for the answer. No experience with Linux virtual interfaces. (They do not need a physical master ??) VRRP, MACVlan, Virtual (WLAN interface), wifi (slave) are all virtual interfaces that use the master interface connection in RouterOS, but have their own MAC address. I would not have called i...

bpwl

Well I put it in /dude-data/files/mibs/xxxxxx.png
"Default" is protected, so create another map.

Klembord-3.jpg

Klembord-2.jpg

bpwl

There are some tricks to allow ROS device to use multiple MAC addresses when sending traffic out of same ethernet interface. There is no need for the VRRP trick anymore in the latest ROS versions. Now that we have the new MacVlan : https://help.mikrotik.com/docs/display/ROS/MACVLAN The intention of...

bpwl

There are cases where it is just practical, but just having a % slider would have been better. Maintaining the special dynamics of wifi "to make it work" Who on this forum is capable of finding the setting for let's say LHG 5, without consulting the EIRP levels of the country and the HW do...

bpwl

it is it "better" an increased Tx level and a low gain antenna or a reduced Tx level and higher gain antenna Difficult one, not an answer but just thoughts.... For the indoor case: Sending: EIRP limits the sum of TXpower and gain to the same sum value. The antenna gain does not gain any T...

bpwl

Hoping you get your MT wifi6 soon bpwl, cannot wait for the 'blessed' configuration that works!! Finally got my hAPax2 to test wifi6 at home location. And while reading all these hAP ax3 poor performance posts. Here some ideas of what could be wrong https://forum.mikrotik.com/viewtopic.php?t=203076...

bpwl

Interesting, but I see only one RF antenna pattern ... probably the 2.4Ghz .. MT HGO looks as good then.

bpwl

TX power in "status" looks like it is the EIRP calculation (allowed power - antenna gain value set), without using the power set for "all rates fixed". External devices measuring power (e.g. other MT AP or client APP) do show further reduction of the emitted power if "all ra...

bpwl

Double identical topics in this forum ?????

viewtopic.php?p=1049311#p1049309

bpwl

I upgraded hAP ax³ to 7.13.2. Since I upgraded to this version I can't change the tx power. 2.4ghz always runs at tx16. Even if I change the country, it always works at tx 16 on the status screen and I cannot change it manually. 16dBm in 2.4 GHz is correct for European countries. (20dBm EIRP -4dBm ...

bpwl

*) wifi - use "Latvia" as default value for "country" property;

Well there is a potential problem for ax2/ax3 devices. (Power drop of 16dB in freq above 5700MHz, and those are choosen by default!)

viewtopic.php?t=203076#p1049300

bpwl

hAP ax3 wireless problem ... difficult to solve ... maybe it is because there is a combination of reasons why it fails. So far recently if have seen 3 "possible" causes here, when using the ax device out of the box, or after upgrade.. Depending which one hits you, the solution is different...

bpwl

'double'

bpwl

I'm seriously starting to question whether the AX3 issue is antennas - and more likely a serious radio issue. Is there something we should do to elevate this to Mikrotik's attention? You checked the status of your wifi interface, for not using the low power SRD channels? This SRD channel selection ...

bpwl

In the wiki there's a mention of "If the CAP is hAP ax2 or hAP ax3, it is strongly recommended to enable RSTP in the bridge configuration, on the CAP", but nothing about reason for this. I don't have neither Capsman nor CAP mode enabled. See https://forum.mikrotik.com/viewtopic.php?t=1984...

bpwl

What are the ISP providers filtering? Many public wifi only allow 80, 443,53, and some secure mail ports/protocols as outgoing ports.(eg blocking port 25 and all high ports >1024). What is your local ISP filtering , as incoming ports? Try to access with e.g. Telnet, with software like "Putty&qu...

bpwl

n one of my hAP ax3 (I have 2 configured almost identically) the blue led on the front panel (WPS button?) is blinking red. It's pretty disturbing, and I couldn't find any information about this. After a restart it's blue for a few seconds, and then it starts to blink red. 1. What is the reason? Is...

bpwl

hAP ax3 antenna test report. https://fccid.io/TV7C53-5AXD2AXD/Test-Report/Antenna-Report-6203601.pdf It is fairly omnidirectional around the Z-axis (antenna stick) X-Y plane is a circle for 2.4GHz, with 2dB variation. The 5GHz has more variation , like 4.7dB What is X and what is Y? Flat face is Z-X...

bpwl

I will measure ac2 later today and ac3 tomorrow. I hope you find some things. Only confusing observations so far. 1. ac3/ax3 HGO antenna is FLAT ! It can rotate on it's longitudinal axis. Is that a PCB based antenna? Is it using cavities or something to make it 2D omnidirectional? 2. The connector ...

bpwl

Can we think of an objective test for those antenna? Have been playing around the whole evening, comparing my hAP ac2, hAPac3 and new hAp ax2. (hAP ax3 I manage is very remote, with antennae removed, used for all but AP) Scanning my neighborhood 2.4GHz with those AP's and with inSSIDer software on a...

bpwl

Omnidirectional is 2D omnidirectional, in a plane perpendicular on the antenna. It can never be 3D omnidirectional in the sense of equal antenna gain. That kind of antenna does not physically exist. It is called an isotropic antenna. Antenna gain here is by definition 0dB (zero) https://www.scienced...

bpwl

Not out of the woods yet, with the ax wifi 2.4GHz. It enables b-protocol with "ax" set. Is this including the 1Mbps basic rate? What a waste of airtime! Hope other AP's won't pick up that regression to b-protocol. Seems not the case so far with regular n-setting on 802.11n/ac devices with ...

bpwl

it cannot be from antenna positions or different channels. It IS from different channels. The ac 5GHz signal is 40 times (16dB) stronger than the ax signal when just using the default settings on both. And 2.4GHz. I don't believe you get 574Mbit/s in ac (VHT) in 2.4GHz, where the largest band possi...

bpwl

If you ever compare hAPac2/ac3 with hAPax2/ax3, then in Europe do limit the channels between "5180-5700", or you get the SRD low power channels in the ax devices. Low power, also see "status" to check what you got. Klembord-2.jpg If you limit the channels to the range the ac AP's...

bpwl

I just tried something - and please tell me it's not this. Separate from forcing the channel selection (5785) - I turned one antenna horizontal leaving the other vertical. I'm not saying it's great - but somehow this made a *huge* difference is range and operation for this AX3. You want to be in th...

bpwl

Hmmm, tested hAP ax2 only for that info. (wifiwave2 could first not run on hAP ac2, and I removed it from hAP ac3) Frequency set might be different between ac and ax, as tables are different for Europe (ETSI region: Belgium, Netherlands, France, Germany, ....), in ac and ax device. 14dBm could be ab...

bpwl

Can't be more simpler, everything default config, so it's either So then "Nothing is under control". I have never seen hAP ac2 use those high frequencies (for Europe at 14 dBm only) and for the rest there is no control what channel is being used at any time when the default config is used...

bpwl

So, scratch everything about directionality

Except that the ears should never point to you.

bpwl

Or am I missing something? Just remember that antenna gain is always bi-directional: same ampification (gain) for transmit as for receive. The EIRP limitation is only on the transmit power. And the antenna-gain and corresponding limitation here is mostly at the AP. So here the TXpower will be 6dBm ...

bpwl

IMO, this fact kind of makes directional antennae pointless for WiFi, unless you can spatial MU-MIMIO thingamajiggary your way out of the fact that you're literally just reducing TX power in some directions compared to an omnidirectional antenna. Not based on science (antenna radiation patterns and...

bpwl

I found it! Yes yes, many thanks for this ... the combination of words reg-info and country ... would have been a while before I tried this. The outcome is what I was afraid off .... the default out-of-the-box "auto" used frequency in Europe (5865 MHz) is ONLY 14 dBm in the max power dire...

bpwl

hAP ax2, change wifi1 from 5260MHz to 5680MHz ... What the client on the other floor sees as power (change) Klembord-2.jpg WLAN drivers used to show the allowed EIRP level differences for different frequencies wifiwave2 driver ... did not find any details per frequency ... except region power limit ...

bpwl

"HGO indoor antenna kit" Always surprised me, as they resemble the "outdoor HGO antenna" https://mikrotik.com/product/hgo_antenna_out Same or not? (huh well the indoor have a 90° hinge) The 20dBm (100mW) is in ETSI region only set for the 2.4GHz and the indoor/non-DFS/lower 5GHz...

bpwl

From what I've read in other forum posts the APs should automatically reduce Tx Power by the AP's included antennea, but I do see an increase via Android WiFi Analyzer when I manually set the main SSIDs with antenna-gain=0. Perpetual confusion with Mikrotik. However the case is very simple. And is ...

bpwl

Don't know about resources. Losing HW offfload for wifi interfaces looks less impact, as the wifi interfaces are not serviced by the switch hardware, but via CPU anyway. "Use IP firewall" is an option setting for the bridge, but that is not HW offloadable. So in the AP, using bridge split-...

bpwl

If we measured the error for 3dBm correctly and if the device is outputting on 3dBm correctly (which would be more or less true even if the amplifier was dead, 0 dBm ≈ 3 dBm with the random error values observed), Well this might be interesting, the Ron Touw presenation. At the lower power settings...

bpwl

Lots of wifi transmit/receive knowledge here. Enjoyed reading, but of course I have my own knowledge and experience in this. And so would like to share some details, just to maybe help understand those wireless tests. Some of the things are just a repetition of what has been stated already, but they...

bpwl

This is off topic, but separating clients on a LAN is important in a wifi network. Clients do talk (multicast, broadcast) a lot, without telling the owner. Windows, Apple IOS, mDNS, Bonjour, dropbox, Skype, Microsoft Bits , .... all try to find help in neigboring devices. These broadcasts/multicast ...

bpwl

So what does horizon value do or not do.... whilst waiting for OP response :-) From MT wiki ... "Bridge horizon feature allows to configure bridge ports with horizon setting so that packet received over port with horizon value X is not forwarded or flooded to any port with the same horizon val...

bpwl

And how does the 10.100.10.210 know where to send the answer for 192.168.178.x ? Is 10.100.10.20 it's default gateway ? What is set in the 10.100.10.0/24 DHCP server as default gateway for these leases.
WIthout srcnat/masquerade activated the return path must be checked for correct route settings.

bpwl

With what I see here, for me, only 1/2 of the story is shown. The route (default gateway etc) from 10.100.10.210 for 192.168.178.xxx must point to gateway 10.100.10.20, as no src-nat or masquerade is used , 10.100.10.210 will get a request from source 192.168.178.xxx, and must know where to send the...

bpwl

Fully agree @anav! It's out of scope here. But "the only reason" statement just triggered, my "in my managed networks often used (!) advanced config" reaction. Couldn't resist posting this. Used with 100's of non-related users, that get internet via wifi, but should not interfere...

bpwl

The only reason they cannot find each other would be due to firewalls on each PC. Well I use one more way to make this happen ( eg splitting 5GHz wifi devices from 2.4GHz wifi devices), or separating devices on one AP from another AP, in a fully bridged LAN.... Set same "horizon" value on...

bpwl

Another possibility when device is set to default (wide) frequency range: hAP ax2 chooses to use one of U-NII3 channels which are not supported by not-so-recent wireless devices. Yes, got me surprised with my first ax(2) device. Quite a wide range in 5GHz, probably not supported by my PC (it has an...

bpwl

Did not skip it. That's the point. Bizar thing is that so much was illogical. So bad that I did a reset with default config. They allow to keep the extra user configured. Bridge ports where OK now !???!??? : ether2-ether5 to the bridge, and bridge (still?) in LAN interface list. But again these odd ...

bpwl

It is a frustration, that could have been avoided. Just received brand new hAP ax2, my first device in the ax series. And I needed quite some tricks to get it started. How can you sell a device like that in Europe, with so many traps for the end-user ??? Finally got in, thanks to quite some MT ROS e...

bpwl

19:37:32 wireless,info wlan1: radar detected on 5640000 and disconnect every device on 5Ghz WiFi. But I'm using Frequency 5180Mhz with Channel Width 80Mhz Well the log says you are using the 5640MHz channel . What is reported in the interface "status" ? 5180MHz is for indoor use only. (Se...

bpwl

But - I can't set frequencies (the tab is missing, probably taking over the master frequency),

... Yes as with the legacy wlan driver, was also like that.

Not able to add this interface to the bridge ? Unexpected.

bpwl

DUDE via browser ... no problem ...

Klembord-3.jpg

It is easier with the DUDE client to add devices .. but can be done

Klembord-4.jpg

(some do run DUDE client on latest MacOS. ) ("Crossover" sofware, they told me)

bpwl

Additionally, is there a way to easily display what AP users are connected to (CAPsMAN managed WiFi), as well as IPs/DHCP leases associated with those clients? I do use DUDE for that overview. (even added RADIUS user in the User Manager comment attribute.) Just an exemple of DUDE ... Klembord-2.jpg...

bpwl

See also ... https://wiki.mikrotik.com/wiki/Serial_Port_Usage

bpwl

Also tried reading a serial with my RB951 8). Works without problem, but I'm missing the option to upload the firmware over serial of RB951. Interesting ... Are you using special_login for this? https://wiki.mikrotik.com/wiki/Manual:Special_Login Have been playing with Arduino serial ports (usng th...

bpwl

And be aware of this ... BUG? supposed to be the MAX allowed , no? But no ... this is not what I thought was logical, the (Max) Rate limit set via attributes is also used as the Min Rate Limit , set as limit-at limit-at=30M/30M max-limit=30M/30M ?????????????????? https://forum.mikrotik.com/viewtopi...

bpwl

Actually the limits via attributes do work for wifi. But the status and numbers are not visible. When the limit (volume quota) is reached, the user then is denied access until the counter in the limit is reset. I have not found a command to reset. The only way so far is waiting for the scheduled res...

bpwl

it keeps changing

Bridge addresses change when ports go up/down (up/down like wifi interface does when clients are connected or not). Set "Admin. MAC address" on a bridge, to keep it steady.

bpwl

Check hour instead of day, for the reset decision.

BTW, there is no need for a reboot, to reset the LTE counters. Toggle off/on will do the trick as well.
viewtopic.php?p=1046004#p725487

bpwl

Potential reasons for DUDE connecting to RouterOS ... via WinBox
Your RB5009 will probably show multiple IP and MAC addresses in DUDE
And I see connect from ... means ... multiple DUDE outgoing addresses

Klembord-2.jpg

bpwl

Hope that certificate installation is NOT needed. Would be extra work. Please define "newer" Android. My smartphone is on Android 12. https://en.wikipedia.org/wiki/Android_version_history No problems with certificates. Used "don't verify" in Android with ROS generated certificate...

bpwl

Yes , with background and labels on devices and links

Klembord-2.jpg

bpwl

Do I have to make one port WAN and others LAN - then create the Bridge? Or should I make a WAN bridge for all ports? If all interfaces are bridged, then WAN or LAN has no meaning for the traffic handling among them. Being member of the LAN or WAN interface list is an attribute of the bridge. Ports ...

bpwl

Just suggestions for root cause analysis. Unicast key timeout ... could be something with the "Ciphers" in client devices. We prefer Cipher "aes ccm" for performance, but some devices require "tkip" Or transmission errors? What is the value of TX CCQ in the registration...

bpwl

Double check the security profile used, and the security setting in the smartphone.
Read LOG (topic= dhcp, debug) of DHCP server. Something might have been wrong there. (e.g. device might have had the same static IP address?)

bpwl

833 is not a theoretical speed, but a channel speed. In this case, the data rate is usually 1/2. 420mbps is the actual data rate for this device. (*) ... interface rates are not the net data rate. There are a lot of mandatory inter-transmission gaps in 802.11 wifi , The higher the interface rate , ...

bpwl

If a station does not get an IP address (from DHCP: without success), there will be no Internet traffic possible, and ... the station will then often disconnect from the AP (Linux reason code 8 : https://aboutcher.co.uk/2012/07/linux-wifi-deauthenticated-reason-codes/ ) -87 is low signal level, -95 ...

bpwl

You need to connect to Starlink and change the internal network addressing. Instead of 192.168.1.1 set something like 192.168.231.1 then there will be no confusion. Cannot be done with Starlink. But multiple identical IP addresses are not a problem. Can be masqueraded to unique IP addresses for sel...

bpwl

Unfortunatly .... didn't work as expected. Both DHCP servers assign conflicting IP addresses from the identical pool (same IP address to different devices) . One of the DHCP servers is authoritative the other even never. Didn't help. Wifi devices are often off-line. When both are on-line conflict ca...

bpwl

... gives me problems, as the used IP address to answer an access request is not defined, seems not to be controllable, and flaps from time to time (e.g. when something is done and un-done to IP addresses, like adding or removing a VRRP). If the User Manager then answers with a different IP address ...

bpwl

Wow ... a bit old those 54Mbps , this is for 802.11G , single stream. See: https://mcsindex.com/ 1. Mostly we get dual stream (=2S) see it in the registration table. Like 144Mbps interface (*) rate, for 2 spatial streams, with only 20MHz bandwidth and short-guard interval 2. After G (g) comes N (n :...

bpwl

Thx a lot @mkx. Was thinking to do the same, based on VRRP interface. But indeed, why depend on VRRP? Actually never saw a problem with a DHCP server that did not store the leases on disk. Clients came back with the same IP address in the leases, after reboot of the DHCP server. Have seen scripts to...

bpwl

Aha MKX, I was hoping you would react. In my case I have only 2 DHCP servers on a subnet (VLAN) , and one of the devices was flapping between the 2 DHCP servers. The DHCP servers are full split scope, but if they respond alternatingly the client gets a lot of NAK , and disconnects from the wifi. (Do...

bpwl

Hi, have the same with at least one wifi connected device. Devices are BYOD, so I have no client device information or access to its settings. The setup is with 2 hAP ax3 with ROS 7.12 , with each having a DHCP server per VLAN serving the same subnets, but with non-overlapping address pools. (split ...

bpwl

when you have virtual wireless interface and wireless security does not match main wireless interface's security,; this bug occurs. hope this wireless driver bug can be fixed. thanks! best regards & wishes. Not my experience. I do have many times a RADIUS controlled (EAP secured) wifi interface...

bpwl

Using multiple devices with the same IP address ... many exemples here in this forum. This is just one of these : https://forum.mikrotik.com/viewtopic.php?t=119134 General idea is to give each device a unique IP address so you can differentiate [and route] them in your network , and then DST-NAT to ...

bpwl

I don't think 1500 as MTU for EoIP is a good idea here. EoIP is 42 bytes overhead already. https://forum.mikrotik.com/viewtopic.php?t=124812#p614891 The IPSEC overhead looks more complex than a simple number of bytes. It seems to be encryption protocol dependent also: https://packetpushers.net/ipsec...

bpwl

Interesting story, difficult setup choosen. Just some thoughts on wifi principles with directional antenna with high gain. 1. The transmit power in 5 GHz will be limited by the country/region regulation. That is the limit is for "radio power + antenna gain (19 dBi)", so the radio power wil...

bpwl

Routes to direct connected networks (the whole subnet of the assigned IP address of the interface) have a distance of 0, because they are just there at no distance, local to the interface. Dynamic, because that route is not defined in the config, but added because of the local IP address? Should als...

bpwl

Well, I did upgrade to the latest version 6.49.10 and with the rest of the story ... I seems like something went wrong with the upgrade of that device. Only option I see is doing a Netinstall then, as you do not get in that device at all (anymore) Some of the newer RouterOS versions are just too bi...

bpwl

WinBox does not need a valid IP configuration to function. Maybe this helps. Otherwise IP configuration should work after a configuration reset, if the default configuration is loaded. https://wiki.mikrotik.com/wiki/Manual:Reset Reset config by button press till LED starts flashing only, do not go t...

bpwl

1. Do NOT use ethernet port 1 for your PC, with the default config in the router. This is the default WAN port, and blocks everything incoming. 2. On the other ethernet ports and wifi you should get the proper IP address, and the default gateway should be set (check your PC network interface charact...

bpwl

However from the WLAN I cannot see neither my PC IP address (192.168.1.60) nor the IP address of the bridge (192.168.1.200) I understand the non-MT wifi is the AP. The CAP Lite is a station, connected via wifi to the AP 1. It looks like your non-MT WLAN is not allowing inter-client communication (l...

bpwl

Tried to use Openwrt in transparant bridge mode, relayd did not solve it, but even kmod_trelay, or other _mod_available at that time, did not work. I had the same DHCP problems as with station-pseudobridge in MT setup. DHCP lease stayed in "offered". https://openwrt.org/docs/guide-user/net...

bpwl

Do you see the SSID "default" (which appears to be your name for it Default is the name of the security profile, not the network name to look for. The network name is the SSID. SSID at this location, as told already: The wireless SSID is under Wireless - Wireless interfaces - WLAN1 interf...

bpwl

No password, or blanc/empty password. Leave it blanc in ROKU box as well. Only if ROKU box does not accept this , set a password in the router (WPA2 Preshared key field) with dynamic keys mode. Mode=none has no password or just an empty password. Should have worked with the ROKU box and empty passwo...

bpwl

Open that default security profile. Don't hide the passwords. (In Webfig the "Hide password" button is in the left column) You will see the Preshared keys. (wifi password) Here only WPA2 is enabled in my case. Your case, no password is set yet (mode=none) this is open wifi, no password req...

bpwl

Well, I did upgrade to the latest version 6.49.10 So you have the admin password of the MT router. You needed it for the upgrade! That's not what the ROKU needs (just learning what a "ROKU box" is, I'm not 77 yet, still plenty to learn) The ROKU wants internet access via wifi, so needs SS...

bpwl

Of course, but nobody would design for free on a forum.

But most will help for sure. What else are we doing here?

bpwl

https://www.techtarget.com/searchnetworking/definition/east-west-traffic If we do not know/understand your case, some imagination gets triggered here. It's getting wild. - east-west traffic control... really in scope? - collapsed core design ... really in scope ? Did all this in a multinational comp...

bpwl

If the WAN router can manage the 4 LAN's (DHCP per subnet, NAT to WAN, interLAN FW rules, ... etc). Then the 3 LR would just bridge the network. Actually acting as a switch Bridged connections bypass FW (NAT and filter) by default in MT. ISP internet router is often very limited or you get limited c...

bpwl

Thx @MKX for this clarifying information. With all the posts on the internet forums like https://superuser.com/questions/870450/can-802-1q-vlan-packets-be-passed-through-wi-fi-transparently , even here, "wifi interfaces are never tagged", started to worry, even as my MT experience was that...

bpwl

Maybe getting far off topic , as maybe nothing changed in ROS 7.12rc, or the change is between ROS6 and ROS7. But I do distribute multiple VLAN over MT legacy WLAN interfaces, eg. via CUBE-CUBE, SXTsa5 and SXTsq, and further downstream between hAP ac2 and other small MT AP, which are used as wifi-et...

bpwl

It's changing over time. At first "AP-bridge - station-bridge" was with the WLAN classic driver only, not with wifiwave2. Actually the "bridge" function (4-address mode) was triggered when the station asked for the bridge function via mode "station-bridge". (See AP wifi...

bpwl

I don't really get all this tagged/untagged discussion. The 802.11 frame header has no place for a VLAN ID, so, technically, wifi interfaces are never tagged. Well 802.11 standard frame has no space for a VLAN tag, and only has space for 3 MAC addresses. But MT with WLAN driver "AP bridge"...

bpwl

Just routing.
Devices probably have this router as default gateway, so they will seek other subnets via 192.168.88.1
All interfaces are routable if forwarding is not dropped by the firewall.

Search found 3073 matches