MikroTik

Anyone having issues with hex, please update to a version from this link, https://box.mikrotik.com/d/acd5b3b59c5a4d3281cc/
If you still having issues after that, please create supout rif file and send to us.

Looks like you pushed a release candidate (beta) to production. Probably not the smartest move. Just reporting. That issue has been present in RouterOS on CCR2116 since at least 7.12.1 along with few others (like for example ipsec crashing after opening installed-sa tab in winbox). Please contact u...

e50ug can't accessed after upgrade from 7.19beta8

Send us supout rif file and details on the issue.

MrYan, We did sent you replay to your ticket, please keep issues related to the version. MauriceW, Send us supout rif file with your problem. This seems to be broken if the selected routing table was created by VRF: Create VRF "test" and add interface ether1. Add a DHCPv6 client to ether1,...

This is fixed, please try
https://box.mikrotik.com/d/c2fc960065ed49b78214/
And please send us supout files to us so we can deal with issues faster.

OVPN still in trouble here on RB4011GS+ / ARM. aes256cbc working fine, aes256gcm results in permanent disconnects as soon as data is transmitted.

OVPN related issues are fixed, if you still have problems with this version, send us supout.
https://box.mikrotik.com/d/c2fc960065ed49b78214/

This is expected, if you see that ovpn server is added by system: https://help.mikrotik.com/docs/spaces/ROS/pages/2031655/OpenVPN#OpenVPN-OVPNServer After upgrade to 7.17 version ovpn server will receive its configuration, due to multiple server support. An disabled ovpn server with added mac will a...

Hi After upgrading, l2tp client is not connecting. In Webfig all ipsec tabs are empty and an /ip/ipsec/export results on an error. # 2025-01-17 11:14:14 by RouterOS 7.17 # software id = WZEK-CJNA # # model = CCR2004-16G-2S+ # serial number = XXXXXXXXX #error exporting "/ip/ipsec/policy/group&q...

RB912UAG-2HPnD

Can not change silent-bool option after upgrading to 7.17
Code: Select all
[admin@MT] /system/routerboard/settings> set silent-boot=yes 
failure: not allowed by device-mode

system/device-mode/update routerboard=yes

*) ovpn-client - added tls-crypt, tls-crypt-v2 support; Hello Has anyone checked this? Especially on NordVPN or ProtonVPN services The problem is that I don't know how to add the tls key, of course I used the import option but the problem still persists and it gives the tls error Please refer to in...

For me so far, on CCR2004's, it added a new problem. I have one at my office - one at my home. I use EOIP (yes, I know I should subnet it, but for now I need it all on the same layer 2) with encryption to link the two locations together. Version 7.16.2 the best on a 1gb symmetrical connection I cou...

RoSv7.17RC3. SSTP doesn't work with ciphers=aes256-gcm-sha384. If I change back to ciphers=aes256-sha it works again. Other relevant configs: verify-server-certificate=yes verify-server-address-from-certificate=no authentication=mschap2 pfs=required tls-version=only-1.2 add-sni=no Edit: SSTP works ...

You have to run system/device-mode/update downgrade=yes and press reset button or cut power.

Issue is resolved, please use latest version.

Feature added, will be available within next testing version, 7.15beta10

is-responder (yes | no; Default: no) Specifies if peer is intended to be connection initiator or only responder. Should be used on WireGuard devices that are used as "servers" for other devices as clients to connect to. Otherwise router will all repeatedly try to connect "endpoint-add...

Send your supout rif files to support if your wireguard key changes. Please save backup before updating so you can load back if there is any issues.

Which version you had on CCR2004-1G-2XS-PCIe, before you did update to 7.14 ?

That's correct, also check do not apply default configuration and you will have clean device, try again.

Thats a state of connection and what it will initiate once it happens.
I suggest checking your logs and see what issue you have there.

The comment on NAT entry will show you that it's "back-to-home", so it all comes to
ip/cloud/set back-to-home-vpn=revoked-and-disabled

https://www.reddit.com/r/PFSENSE/commen ... tup_works/

It seems you have not removed configuration, try again reset and when doing netinstall make sure you set option to remove config.

Here is application examples with detailed instructions on how to apply certs, please check
https://help.mikrotik.com/docs/display/ ... rtificates

Try reset and my password, if not working contact distributor.
or
Use netinstall to remove config.
Min Ros version for this device 7.4.1

653O3QRAU6

Pull up create / tunnel bar and on your selected tunnel right on the side is button for sharing.

All needed packages should be downloaded from support and download section, for each product. Now from 7.13 RouterOS current release will have all needed packages listed, you are welcome to check here: Example for hap_ax_lite_lte6 https://mikrotik.com/product/hap_ax_lite_lte6#fndtn-downloads Questio...

This does not seem version related, send your supout file to support, so we can check what specifics you have there. It is probably just me, but upgrading from 7.12 to 7.13 on AWS broke the instance again and it does not boot any longer. I had the same issue upgrading to 7.12 and was forced to recre...

We have same situation on our local setups, will see if this can be fixed in upcoming releases, thanks for report. Why use crossover, when Wine works perfectly on macs? If you found an issue, let's solve it together, but there is no need to pay for commercial emulators Speaking of "...let's sol...

What does Linux say, exactly before log: ubuntu: 12[TLS] sending fatal TLS alert 'handshake failure'

wg import will be fixed in upcoming releases.

client-address is used for the client-server setup scenario, when the configuration is imported using a qr code for a client (for example, a phone), then this address for the wg interface is set on that device.
Added to manual https://help.mikrotik.com/docs/display/ROS/WireGuard

Enable ipsec debug logging on ROS and you will see why it disappears after 2 minutes.
Use latest ROS version.

Yes, VLAN filtering supports l2tp-ether, same as other Ethernet.

https://help.mikrotik.com/docs/display/ROS/L2TP

Client is not properly configured for EAP, please check
https://help.mikrotik.com/docs/display/ ... outerOSv7)

Manual has been updated. The following prerequisites are required to implement L2TPv3: •You must enable Cisco Express Forwarding before you configure an cross-connect attachment circuit for a customer edge device. •You must configure a Loopback interface on the router for originating and terminating...

https://help.mikrotik.com/docs/display/ROS/Branding Default configuration: Note that when using the default configuration file, the configuration is appended when simply installing the package, but after using system reset, only the configuration in your file will be used, all other standard default...

You can use just fine rc version. Next one coming soon.

When are you releasing 7.12? I need those IKEv2 rekey fixes in the stable version

Please create a support ticket so we can get additional information on this. There seems to still be the issue with IPSec/IKEv2 and ECDSA certificates using secp521r1. When upgrading from 7.9.2 IPSec Tunnels using ECDSA certificates are not established any more. It does not matter if one side or bot...

Could you please contact us through support portal, we have fix available for this. Thanks

There is no issues found when importing proton certs.

Usually means that the local-address configured for the peer is not actually configured on the router, also this could be caused by firewall or NAT.

https://box.mikrotik.com/f/695ea9fc171e44cc99d3/?dl=1

Still have partition problems on RB5009. Also netinstall doesn't help.
viewtopic.php?p=944201&hilit=partition#p944201

regards

Partitions work on v7.6rc2 and 5009, please contact support.

Clean cache and delete session files, if still experiencing issues with connecting to the device, write to support@mikrotik.com, we would like to get access and check.

Quickset graphs bug is not yet fixed, also the cloud backup time.

We managed to reproduce this, thanks. Please, when sending reports to us make sure to include accurate description on how to reproduce issue.

Thanks for the reports, we are aware of the column issue, that it does not save properly.

We are working to fix it ASAP, sorry for the inconvenience caused.
We are letting you know that the support team is aware of this situation and there is no need to create and send extra reports based on IP cloud issues at the moment.

Screenshots attached

kennnnnnnneth, please let us know the device model you are using here.

We are aware of this issue, thank you for the reports. Winbox 3.27 there is a modal window issue. We have a main (modal) window in non-full-screen mode. The window inside it is in maximized mode "Pic1", after which we expand the main (modal) window to fill the entire screen and get "P...

The hAP ac3 does not have a MiniPCIe slot to insert an LTE card.

Please reset the device to factory settings, then check if you can connect using the MAC address.

We have managed to reproduce the issue with the incorrect default VLAN IDs and the WinBox crash after session save. Thanks for your reports this will be fixed in upcoming versions.

Thanks, everyone for posting your findings.
The issue with missing fields as by irghost post will be fixed in the next release. To avoid this at the moment, do not use the maximized inner window.
Session > new, opens up a new session, and will not save upon exit if it's not done manually.

Thank you for your reports, someone with an issue regarding "jumping" firewall rules, please contact us, support@mikrotik.com.

Please create a supout.rif file, after a failed attemp to upgrade the Firmware and send it to MikroTik support.

Please send your screenshots, where the issue can be seen, to MikroTik support. Thanks!

Please give more information on your configuration so that people can help you. It could be any of your statements. Are you managing the school's network router?

Sir, it does not have a switch chip.

If provided passwords does not work please contact mt support.

Check under IP>Services to disable ssh or other services.

https://help.mikrotik.com/docs/display/ ... our+router

Please contact support, if you can connect to the device while its discoverable to create a supout.rif file, then please attach it.

Please send supout.rif file from this device to the MikroTik support.
Thanks

Please send a supout.rif file from the device to the MikroTik support.

Internal antenna 2,5dBi can be used for setups where the distance to the gateway are closer than 1km. I recommend to use an external antenna, the “LoRa Antenna kit” - can be obtained separately. Antenna kit has pole mount and cable ready to use with LoRa cards. https://mikrotik.com/product/lora_ante...

Please check your server settings and give more information to everyone.
https://wiki.mikrotik.com/wiki/Manual:T ... r_settings

Please check the limitations for the CHR licenses.
https://wiki.mikrotik.com/wiki/Manual:CHR#CHR_Licensing

Serial0 is a console port, you need to use Serial1.

-It means that AP and station modes can be configured in the quickset menu, through the web browser.
-To change back from station mode M2, just simply unplug the Ethernet cable and on the next startup, the MQS will be back in M1 AP mode.

The idea is to keep it simple, quick setup.

New version 1.5.1 has been added to the MQS product page.
Changes:
-Less confusing and more comprehensible setting names;
-Warning before performing the configuration reset.

https://i.mt.lv/cdn/rb_files/firmware_M ... 734730.fwf

We have added the newest software version for MQS to Support & Download section. https://mikrotik.com/product/mqs#fndtn-downloads The user manual has been renewed, please see https://i.mt.lv/cdn/rb_files/1572339613RBMQS-qg%20web.pdf You are now able to manually upgrade your MQS. Thanks for your ...

Try disabling IGMP-snooping, to see if it helps to return to the previous state and multicast should work.

You may have the first software version where DHCP is turned off, you will need manually set an IP address on your device as you did already. Set IP address to 192.168.88.2. Subnet mask should be 255.255.255.0 and leave the rest fields empty. The MQS management interface at this point will be IP add...

Search found 75 matches