MikroTik

maigonis

For me the Longest Distnace is 26.6 Km. Please, for all of you, if someone wonders about this 26.6 km distance, I want to inform you that the speed is less than 40 Mbps. But it's okay for us -at least- for this specific location, so don't take this info as a standard to install LHG-5nD and expected...

maigonis

For a while I have in my mid this concept about ultimate network engineer device, that Mikrotik may be able to manufacture if they see fit in product lineup. A device you can carry around and would assist you whit bunch of daily tasks, potentially make your bag lighter as this device would cover fun...

maigonis

... then place the 2x cap ax on the floor and do some measurements ... If you happen to have one lying around, you can utilize a fellow human being and take advantage of its lifting capabilities to hold the cAP ax against the ceiling while you take measurements. It might be better than simply leavi...

maigonis

So if there's some free or cheap(not enteprise) software that could guide me, it'd make it a lot easier. Such a software must be like CAD where you can "draw" your home layout (walls, etc.) and it can give you a rough "rough indication". I am not a professional, so I don't know ...

maigonis

Firstly think about your requirements, because end device and user requirements will lead planning process. For example, in living room you will have your laptops, tablets, smart TV etc, kitchen might need WiFi only for TV, smart fridge, maybe some smart light bulbs, and back yard will need WiFi for...

maigonis

Updated configs to ac/ax mixed env.

maigonis

Wave2 does not have superchannel option. Contact support officially and open ticket.

maigonis

Use wave2, legacy drivers have issues that pop up on larger networks quite often.

maigonis

+1 wifi-qcom-ac contains the firmware for any compatible AC device. Mikrotik knows about 16MB flash and on some devices like hapac2 it is even a little less, but still they put the unneeded firmware in this package. And even I would be happy on my IPQ4019 devices not wasting space for QCA9984 firmw...

maigonis

Hi together, I run a following setup: - RB5009UPr+S+ as the main router + capsman - hap ax3 as a cap - hap ax2 as a cap All of the sudden, around new year, the hap ax2 has stopped airing wifi. When I look into the status of wifi interface, the state is "Disabled" although it has run a DFS...

maigonis

I don't even understand the question..
Sorry. Mistyped. Updated. I was talking about 80+80 channel width.

You cant use 80+80 on cap ax, or any ax device at this point.

maigonis

I've just got as new hAP ax2 for home and all working well except my ten year old (!) Kindle can't even see the 2.4GHz AX network. If I change the band from 2GHz AX to 2GHz N it works. As this is the only device that appears to be having trouble with and it rarely needs internet access, I'm tempted...

maigonis

I don't know about air time fairness, but here is update about this situation after wave2 implementation on ipq40xx devices. Quote from one of my posts under version announcements: Wave2 stability, performance and feature set is now in line whit hardware capabilities, better late than newer. Since f...

maigonis

Hi all. An interesting thought came to mind. When switching to RouterOS 7, the kernel was updated. Will it be updated in the future as part of version 7 or will the next kernel update occur only in RouterOS 8? As mentioned in podcast, kernel version change is triggering ROS version update. So kerne...

maigonis

As mentioned start whit STP. Use local forwarding and set capsman servers IP address on APs manually. In that way connection will happen over L3 (it usually have better stability).

maigonis

I've tested it with hAP ax³ (7.12 CAPsMAN), hAP ax² (7.12 CAP) and wAP ac (7.13beta CAP). Clients do roam between all of them. I even run wAP 5GHz radio only on 40MHz width, and it works ok. Maybe, it's based on signal strength and predicted speed based on strength - i.e. slightly worse ax signal m...

maigonis

Please stick to the topic. Cap ac, hap ac2 and wap ac + CCR1009-8G-1S-1S+ upgraded fine to this rc. Busy issue is gone and wave2 stability, performance and feature set is now in line whit hardware capabilities, better late than newer. Since first beta I'm testing (carefully whit understanding what I...

maigonis

By the way, both my hAP ac2 and cAP are restarting with: 13:18:02 system,error,critical router was rebooted without proper shutdown, probably kernel failure 13:18:03 system,error,critical kernel failure in previous boot 13:18:03 system,error,critical out of memory condition was detected every few h...

maigonis

Be aware, beta2 can cause memory leak.

maigonis

Tested in lab env, standalone and capsman managed APs. Setup was simple, hexs as capsman, cap ac, hap ac2 and hap ax lite as caps. Cap ac in standalone mode pushed on avg 550mbps downstream, peaked at almost 600mbps near AP (2-3m) on wifi6 phone (Samsung S10+), 5ghz band. That's in line whit that ch...

maigonis

Here is example how I queue wireless interfaces at work. Idea is, if you have clean channel per room, aka no (little) CCI/ACI issues you can queue that channel to provide more even experience to users. This is useful mostly for hi density networks, but also can be used in home/soho environments. In ...

maigonis

Hap ax lite is a good candidate, I have regular and lte version, measured 2.5w (5v, 0,5A draw) at idle on regular version, no wifi devices connected, one wire connected (additional eth connection consumes +0.3w) - so in line what was already mentioned. Very close to hap lite, at least in idle. Or yo...

maigonis

To get it working under ufw firewall you need to allow port 5678/udp (Mikrotik Neighbor Discovery Protocol) to pick up ROS devices on L2 level, port 20561/udp (MAC winbox) to establish mac winbox session and allow 0.0.0.0, as ROS device will use it as src IP address.

maigonis

Try WPA2 only to isolate issue to security settings.

maigonis

@maigonis Thank you for sharing the config ! On your hAP ax lite, I see on only-vlan tagged frame will be accepted on the bridge. My question is : since hAP ax lite have more than 1 ports, what if you want to have, let's say desktop on ether 3 with vlan10, your printer on ether4 with vlan20 ? Have ...

maigonis

I also see a lot of people struggling whit local WiFi interface provision to capsman configuration (for example if you have ax3 and cap ax, and you want to use one of APs as server). You don't have to setup local wifi interface to use capsman server, but need to provision from "Radios" tab...

maigonis

On first read looks like you need to define better provisioning rules (define 5ghz ax and 2.4ghz ax as supported-bands), also remove certs from configuration.

maigonis

Use 7.11rc version, it contains a lot of ax fixes. Soon it will go stable, so its quite mature.

maigonis

Updated hap ax lite lte6 to rc3 and noticed that on lte1 interface Data class in not showing CA usage, rc2 was fine. Informative/cosmetic thing, CA is used as CA band is shown on load and can see proper 2CA speeds.

maigonis

60ghz sound like a overkill. If you have already wap ac mounted on house wall you can mount another one on shop wall and create PTP link that way. Then run wire inside shop and do AP deployment as you need. 50m should be fine for wap ac, in 2.4ghz and 5ghz bands. I didn't realize they could be used...

maigonis

I have a small shop about 50m behind my house. I have a wAP ac pointing toward the shop that gives good coverage in the backyard and fairly good inside the shop. However, there are some weak spots, and I just put a couple Ring Stick-Ups out there and the connection is intermittent. It looks like on...

maigonis

Don't really know what do you mean, right now I have 5 VLAN's and I'm not using default VLAN for anything. Two switches, trunk to the router, previous AP had all vlans tagged, no hybrid ports, but now im using capsman in original form It means config like these examples: https://help.mikrotik.com/d...

maigonis

Good to know, will test with your example on my test setup, before i used capsman i had setup with trunk to the APs. No hybrid ports like i have now.

Test and see, but I suggest learning and doing full vlan setups.

maigonis

At my config, and I use default CAP config ports are untagged for mgmt network but if i try to untag them for some other VLAN i get that VLAN on port but wifi is broken then. I will try with your setup This configuration example is only for those, who have setup full vlan network whit trunk and acc...

maigonis

@gigabyte091 At home I have ax3 and cap ax, on both I have set rest of ports untagged. Look up example in documentation, its quite easy to do whit this configuration base. @erlinden I don't use default config in general on any of Mikrotik devices I have and manage. But also this config requires big ...

maigonis

I have created ax CAPsMAN configuration example for those who use vlan filtering on bridge and have set trunk and access ports whit secure frame types (Like these examples from doc pages - https://help.mikrotik.com/docs/display/ROS/Basic+VLAN+switching). Existing example in Mikrotik documentation is...

maigonis

At this point I would say wait a bit longer before customer deployments. Till known issues are fixed and polished, then you can start deployments. Throughput wise ax lineup is on pair whit rest of competition (2x2 dishes) and I have not seen any issues whit speed, should be solid performer.

maigonis

We made some progress in regard to fixing this issue. Here is a new RouterOS release that contains several improvements regarding the AX stability. Is this 7.11beta2 or other build? I uploaded routeros-7.11alpha179-arm64.npk and wifiwave2-7.11alpha179-arm64.npk to the root directory of my AX2. And ...

maigonis

Here are my speeds, nothing unusual as i can see: [admin@MikroTik] > interface/wifiwave2/registration-table/print detail stats Flags: A - authorized 0 A interface=wifi1 ssid="Mikrotik" mac-address=XX:XX:XX:XX:XX:XX uptime=41m35s signal=-37 tx-rate=1201.0Mbps rx-rate=1201.0Mbps packets=546...

maigonis

When i disable WPA3 and PMKID I see two issues: "SA Query timed out" and "key handshake timeout". Otherwise WiFi is more stable, waiting for 7.11 beta.

maigonis

Concrete / Brick walls. They only care about wifi for learners in classes. I recommend deploying APs in whole building, for example in halls. It will eliminate issue when stations connect to AP thru walls. If a station connects in these conditions then this will accelerate "graceful disconnect...

maigonis

Did you opened support ticket ? Can you try netinstall ROS again ? That's strange... I never had problems with WPA3, only when used in combo with WPA2. When you use only WPA2 do you get any errors ? With only WPA2 I do not get those "can't find PMKSA" messages. You should not get PMKSA er...

maigonis

hi Holvoetn, appreciate your response and that you take a look at my config Hard to believe over wifi :lol: best wifi ever :) 1- most likely something wrong in the config. Hence the request to have a look how you have it configured now. I really hope the config is the issue, i do like the routerOS ...

maigonis

I installed a hAP ax³ late last week and upgraded it to 7.9.1. Last night, the SSIDs were suddenly no longer visible to clients and the indicator light for wireless activity was off on the device itself. Disabling and re-enabling the interfaces brought it back to life, but I saw no errors in the sy...

maigonis

How does one disable 802.11b and slower rates like 1mbit on wifiwave2 (hAP ax^2 in this case)? This is from a ax^2 with 2.4GHz ax band enabled under channel config. I can't seem to find any settings related to disabling lower rates and older 802.11b protocol in wifiwave2 settings... wave2.png Thank...

maigonis

Out of curiosity, has 7.10rc1 fixed issues with AX devices?

No, I still see all issues appear. I also see SA query time outs whit out FT enabled as ToTheFull mentioned.

maigonis

I've got an apartment complex we manage. It's got 65 units on 4 floors. We installed Mikrotik AP for each unit, hapAC2. I came up with a channel plan, that put adjacent rooms - Right left top bottom and across the hall on different channels to minimize interference and came up with a scheme to appl...

maigonis

As I state all the time... I have an email from Mikrotik support saying they know about the density problem. And will get back to me when they have a fix. It's dated 06/10/2019 It is not density issue, its stations not sending graceful disconnect. It mostly happens in dense networks, yes, but it af...

maigonis

@maigonis did you hear anything from Mikrotik since the cAPAC stopped working properly recently? No, not yet. My task was make APs to hang, but its not that easy to do. Now I have quite optimized schools network and i cant let loose all configs, as a result schools learning process will be interrup...

maigonis

Still rebooting everyday and I have WPA3 disabled. Before the 7.9 upgrade everything worked great.

No response from Mikrotik support on my support ticket.

Would installing the 7.10 beta help?

What device is it?

maigonis

Interfaces crashed? Like ax2 reported? Or device itself? autosup should be created if device crashes. When its wifi dies, the ax3 is still running. Switch, ethernet and containers all ok. Just that nothing connects to the wifi anymore. Logs show “handshake key timeout” whenever any device tries to ...

maigonis

@maigonis

So we can expect some CAPsMAN tutorial from you ?

I am planning to do tutorials, but not right now. For that I need time and be sure my knowledge is solid, so I'm not spreading false information.

maigonis

Sorry, double post.

maigonis

Oh but for learning there is no problem. It's just not needed. I have AX2 and AX3 at home, no capsman. I have toyed with it too (briefly) to see differences with legacy capsman (I used to have a setup with that for another place) but some of the quirks need to be ironed out before I will try it aga...

maigonis

Is it worth the trouble for just 2 AP ?
Certainly not.

I do use capsman at home for 2 APs, its a learning opportunity.

maigonis

___________________ < ax3 crashed again > ------------------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || || 18 May 8:00am. ax3 7.10beta5. Wifi uptime: 3 days 6 hrs. ...and I forgot to supout.rif again... :-( Interfaces crashed?...

maigonis

I see quite a lot issues reported in forums about ax lineup WiFi issues, lets collect them here whit possible workarounds and fixes. I have notices these issues: 1. The mostly known "rejected, can't find PMKSA". It affects my Samsung S22 the most, but I have also seen it affecting S10+ and...

maigonis

Disabling WPA3 should eliminate PMKSA error, as it is WPA3 related.

https://documentation.meraki.com/MR/Wi- ... tion_Guide

maigonis

Yup, upgraded only AX Lite to 7.10b5 and using it as AP for my PC so I can keep an eye on it and I am seeing the infamous PMKSA errors in log. [mac address]@wifi1 rejected, can't find PMKSA Also have PingInfoView running on local PC targetting that AX Lite (via wifi), seeing a bit over 4% packet lo...

maigonis

I wasn't able to do so before since I was busy IRL and was mucking around with containers on the ax3. Now that has passed, I've started keeping track of the ax3's wifi and any correlation with its config. The last time I rebooted was 6 May around 1am. Current wifi uptime is 4 days 2 hours. Before t...

maigonis

Also Wifi issues with ax3. At random times the phone stopped working even though the Wifi was active. The phone receives the IP "169.254.57.102" and keeps trying to connect to Wifi. Only ac3 reboot helped. You need to check the logs in ax3 (or is it ac3?). I have noticed, that my phone (G...

maigonis

Wireless interfaces are interfaces, you can configure what and how you want. It can get complex and you can do it in multiple ways, most likely, scripting is recommended here.

maigonis

Please advise me what bridge I actually need to set in Datapath on capsman. Setting local bridge on Capsman doesn’t do anything. Is it still the case with 7.9? You can leave it blank, for basic settings check Mikrotik help page, but they don't mention this "add wifi interface to bridge" s...

maigonis

But I still cant set group key update to 12h on wave2 capsman.

maigonis

For network separation use vlans (yes, they are working), and you need to add wifi interface to bridge on AP side, not controller side.

maigonis

What is sensitivity good for???

To hear better your phone behind walls.

maigonis

Interesting and useful formula how to calculate throughput per AP. Maybe someone will find it useful, base is Cisco documentation (don't quote me on this), compared results whit my finding in work network + some of my variables in it based on my knowledge and observations. I'm still testing this for...

maigonis

Could you elaborate on the problems you had? Speed, stability, ... What are other good vendors from consumer/prosumer devices that provide lengthy support for their products? So, before OP (or anyone else) here thinks that I don't like Mikrotik, I really love Mikrotik products and I have many of th...

maigonis

Try out some of your list. I use Zabbix and Dude for network monitoring.

maigonis

For last 4 months I am battling whit WiFi stability issues in our school...cap acs, hap ac2s, wap acs + other cool switching stuff. Firstly, I appreciate you taking the time to document this, since it's worthwhile getting more visibility on some of these issues. I too have been having a challenging...

maigonis

thanks i think that wifi interface is added to bridge with Datapath in Configuration. It is correct? i make this: /interface wifiwave2 configuration add channel=channel2 channel.band=5ghz-ax .width=20mhz comment=\ "Configurazione pe 5GHz" datapath.bridge=bridgeWiFi5 .interface-list=all \ ...

maigonis

As Wi-Fi nowadays is mostly used, I recommend planning it accordingly. 5GHz band should be used, as the 2,4GHz band can have interference from quite a lot of sources, so that means APs should be deployed quite dense. A good, strong signal makes all the difference in stability and reliability. Mikrot...

maigonis

This is export # model = RB5009UG+S+ /interface bridge add name=bridgeLAN add name=bridgeWiFi5 add name=bridgeWiFi24 /interface ethernet set [ find default-name=ether5 ] comment="CAP" name=CAPeth5 set [ find default-name=ether2 ] name=LANeth2 set [ find default-name=ether1 ] comment="...

maigonis

Those who have poor throughput performance, what PHY speed do you see? I use ax3 whit capsman v2 and performance is great. Real wold speeds are around 500-600mbps in the same room/open space. ac2 performance was x2 slower as capsman v1 throughput is around 350mbps (80mhz channel).

maigonis

A side tip. On 2.4ghz band you should use ch 1,6,11, as they don't overlap, but in real life, your neighbors, most likely, will not follow this practice. As result, it does not matter if you use 1,6,11, if you neighbor is using ch2, 40mhz wide. You should use the cleanest channel you have in your en...

maigonis

For a while I have tested workarounds. At this point best results are whit frame-liftetime=1, hw-retries=2 and in acl define minimums rx signal to -75dbm. I tried to reduce rx signal limit, but when I reduced signal to -80dbm situation noticeably got worse, almost instantly two APs that I monitor go...

maigonis

What channel does router choose?

maigonis

Yes, like Maigonis says, the only difference between "out of the box" and manual setup is that out of the box you have "AUTO" frequency. The AP scans the Country frequency range and chooses some free frequency. There is no other difference. Maybe a reboot would also force it to ...

maigonis

It turned out I forgot to enable VLAN filtering on CPU switch port (no.5 in this case): /interface ethernet switch port set 5 vlan-mode=secure In my case the device is AP and VLAN-aware switch, it doesn't route and only management IP is needet. Thus all the VLAN interfaces seem unnecessary and now ...

maigonis

It actually works best if left at default settings, there is no need for a guide just to get it working, only for finetuning and custom setups. What makes you say defaults are no good? Hi! It is my first Mikrotik. When the package arrived in the morning, I was excited and just wanted to plug it in,...

maigonis

hap ac3 uses 4019 soc, it is capable of doing this. I have rg450g4 as main router whit wave2 package, all bridge ports are hw offloaded whit switch chip vlan config method. Of course wlan interfaces will not be hw offloaded. I need exactly this. Of course I'm not expecting WLAN HW offloading, only ...

maigonis

hap ac3 uses 4019 soc, it is capable of doing this. I have rg450g4 as main router whit wave2 package, all bridge ports are hw offloaded whit switch chip vlan config method. Of course wlan interfaces will not be hw offloaded.

maigonis

Not if you have to deal with thick concrete/stone walls. A friend of mine had to install a whole bunch of APs to get reasonably decent coverage throughout the apartment because of this. The only positive is that he barely notices the neighbors' wifi. In overall yes. I have 2 bedroom flat and I have...

maigonis

You mean it'll use 5GHz as a backhaul so only 2.4GHz will be available for client devices? How AX2 is different from AX3 here?

No, I mean you buy 4 units.

maigonis

Can't wait for Audience unfortunately. Won't AX2 allow for 5 GHz meshing?

You can use ax2, but regular AP/router have only one radio, so 5ghz band can mesh, or be AP - not both at the same time.

maigonis

Pay attention what country and channel is used. Not all channels are allowed to transmit whit hi power. Lower TX power will reduce range and modulation.

maigonis

I want wi-fi 6 functionality.

In that case wait for audience ax, or pair two hap ax3 units together if you want 5ghz meshing. It means one ax unit will mesh, other will be AP for stations.

maigonis

I want to connect one AP by wire and other two wirelessly so to create mesh network.

For meshing audience was created.

maigonis

I am just some SOHO guy, but when I had customised rates enabled my WiFi performance was terrible. It would randomly drop speeds to 30Kbs on the 5Ghz channel.

Went back to default rates, and the problems are gone.

Messed whit mcs indexes?

maigonis

This is a repost from myself from last year: "This was the main reason why I moved once from MikroTik to Aruba Network AP-5xx access points for high density and later to Grandstream GWN7660 for office environments, plus VRF lite for clients. https://forum.mikrotik.com/viewtopic.php?t=153735#p7...

maigonis

After upgrade to 7.8beta3 RB5009UPr+ PoE issue happen again. fix on 7.8alpha227 please check ticket SUP-105042 on ether1-2.5G is UBNT U6-Enterprise on ether5-1G is UBNT U6-LR 10:14:30 interface,info ether5 link down 10:14:33 interface,info ether5 link up (speed 1G, full duplex) 10:15:35 interface,i...

maigonis

It, most likely, is related to wave2 implementation. So config is a bit different. Try to tag wifi interfaces on Wireless tab, not bridge port. I have ax3, setup in capsman v2, and its working fine. Only thing I had to adjust was removing WPA3 from IoT interface as some devices had issues.

maigonis

Another interesting find. Indeed interesting. HW Frames are supposed to be the number of frames send/received. Frames the number of succesfull frames. There is a setting in MT to handle failed HW Frames: HW Retries . Is 7 by default, can be set between 1 and 15. Failed transmissions in the HW Retri...

maigonis

Another interesting find. Ekrānuzņēmums_20230206_121505.png Here you can see statistics from one of stations that hanged AP. Hw frames are transmitted a lot, that count increases rapidly. So that means AP is sending something to that station, constantly. But as you can see down bellow, there is no a...

maigonis

I recommend setting group key update to 12h (tik now do 24h on latest testing).

maigonis

After upgrade to 7.8beta3 RB5009UPr+ PoE issue happen again. fix on 7.8alpha227 please check ticket SUP-105042 on ether1-2.5G is UBNT U6-Enterprise on ether5-1G is UBNT U6-LR 10:14:30 interface,info ether5 link down 10:14:33 interface,info ether5 link up (speed 1G, full duplex) 10:15:35 interface,i...

maigonis

What is "helping" here? The lingering packet is dropped after 20 sec. The connection is not dropped by the AP. It's up to the client to drop the connection if there is no activity.

Something must be done in this case, stations will misbehave.

maigonis

It does not help.

Ekrānuzņēmums_20230203_093029.png

EDIT: Wait, look at interfaces. Both devices are on virtual interface. Maybe frame lifetime is not altering those.

maigonis

No activity for 3 min and the client did not drop the connection ? Reason code 4 (https://www.cisco.com/assets/sol/sb/WAP371_Emulators/WAP371_Emulator_v1-0-1-5/help/Apx_ReasonCodes2.html) https://forum.mikrotik.com/viewtopic.php?t=159071#p787513 An AP will hold a frame to be transmitted for ever. (...

maigonis

Sorry for double post, but interesting find. Now Im testing standalone mode on a few APs. Just kicked one station whit rx level -88dbm and it was interesting to see, that its "last activity" time was almost 3min long. Kicked device and AP recovered, so devices whit no activity that long mu...

maigonis

In the AP config ... Fairly complex queue handling, bridge filter, IP filter addition, packet marking ... I hope the AP processing power is not the bottleneck. Setting priority does things internally, also for wifi WMM priority, but be aware of the lack of "AMPDU enabled" setting in MT by...

maigonis

I did tried sniffing a while a go and something wasn't right. Might revisit this as seeing ac would be beneficial. Just to be very clear. 802.11n cannot "wireless sniff" total 802.11ac packets, only the header is compatible, and that's what "Snooper" is analysing. That is also w...

maigonis

Yea Capsman with local forwarding. As expected and should be using imo. Just now got temp complete interface hang in my office. After video i kicked all stations, except testing station, and it recovered. All station signal levels where good as those are mobile ipads in my office. Rx from AP side i...

maigonis

I have setup with 30 caps and tops 300 clients and its pure mikrotik setup also getting same issues as in random radios crashes, need to reboot ap to come to senses, random speed drops.. Mikrotik just simple cant handle such dense setups and mix of clients.. A stupid question, but I have to ask, ar...

maigonis

@bpwl I did tried sniffing a while a go and something wasn't right. Might revisit this as seeing ac would be beneficial. @chechito v6 feels kind of dead, and this issue is not new afaik. But I might try standalone mode. @rextended I started whit 20mhz, Unifies off and TX at 12-14dbm EIRP. We have ti...

maigonis

I don't have proper lab equipment (its from SXTsq 5 High Power), so i cant tell if its 802.11 decodable or not. Use "Snooper" to scan that freq band. Snooper will give channels, AP and SSID, and client devices, as 3 levels of information. It will recognise 802.11, nstreme and nv2 protocol...

maigonis

For last 4 months I am battling whit WiFi stability issues in our school. Its around 800 student school + staff, but not all are using WiFi, at least not yet (soon most of classrooms will have dedicated devices for student use). Usually I see around 300-400 WIFI devices connected in total (students ...

maigonis

That does sound weird. I'd open a support case (with supout.rif attached) since only Mikrotik know something like that. I contacted support (but I did not attach the supout.rif file), they answered me quickly enough in support and said that this is normal, even for a new router :) They said that if...

maigonis

I really hope they'll add support for capsman forwarding in the next release, not the best solution to add vxlan/eoip everywhere and bridge cap interfaces locally

AFAIK there will be no capsman forwarding.

maigonis

Try multi connection test, aka -P 20 for example.

maigonis

Nobody noticed wave2 CAPSMAN GUI is here?

As someone have already mentioned - how realistic is wave2 on 40xx devices?

maigonis

I confirm than with Winbox 3.36 on 6.48.6 can not save wireless settings, like data rates, tx-power, tx-power mode, etc. on mibsbe (i do not check others) On CLI work correctly as expected, and the changes are reflected on winbox Me too, just opened forum to dig more info about this. Affects v7 also.

maigonis

A quick note, 2.4GHz will be very difficult/not possible in scenario like this. 5GHz is a way to go.

maigonis

CAPs are connected to Capsman by MAC or IP address?

maigonis

What is the AP that you're using and how is it configed? Did you try to play the game from a PC, to see if the problem persists? Any queue setup? I constantly play via Moonlight: PC is eth connected to a gigabit switch, connected to Audience. The laptop where I play the game is connected to same Au...

maigonis

I'm just happy as Dude is back.

PS: Still waiting for unicorn mug.

maigonis

I'm trying to run Moonlight ( https://moonlight-stream.org/ ) to stream games to my android handhelds, but it have issues whit Mikrotik APs. When I run games they quite often have latency issues, Moonlight doesn't show actual frame drops, but sudden large variations in latency that causes stutters i...

maigonis

Report this to support and netinstall newest build. These is no other option.

maigonis

Any plans for spectral scan/history on ac chips in ROSv7?

maigonis

Hello. I ahve setup at work place Capsman whit multiple haps as APs. At start, year or so ago, everything was fine. Didn't bother to look into log for a while and now I see a lot of "disconnected, received deauth: unspecified (1)" error. It affects multiple devices, as in school, environme...

maigonis

RouterOS 7.1 does not work properly with boards equipped with 32MB of RAM (e.g. RB411) 00:01:06 system,error,critical router was rebooted without proper shutdown 00:01:07 system,error,critical kernel failure in previous boot 00:01:07 system,error,critical out of memory condition was detected 00:01:...

maigonis

PDF information: https://mt.lv/RouterOSv7 Video in Spanish: https://youtu.be/fzLxTl6VXRI Video in English: https://youtu.be/Zp-U7Anv5-0 Video in Russian: https://youtu.be/xRGBbXJc1xA The video missed the most important point...................... Where do I get that Unicorn MuG!! Normis email me to...

maigonis

Yes it is.

Tnx.

maigonis

Hello.

A silly question, but is S+85DLC03D module compatible whit MM OM4 type cable? Like this one: https://www.fs.com/de-en/products/40180.html .

maigonis

On PC run live linux or install linux, netinstall there. No backups, fresh passwords. Do netinstall whit out internet connected to linux mashine and dont connect router to network, monitor for 24h. It is not possible to get reinfected after netinstall from the same device, or you have found a new, v...

maigonis

That is already available, but it is not very clear to new users how it is supposed to work. In the winbox connection setup window, under Tools enable Advanced mode. Then you can select the saved session file to be used for the connection. You can share it between different devices so you have the ...

maigonis

When Winbox looses connection, or otherwise have been closed not the proper way, it always messes up my windows. After reopen all my windows are messed up and I have to organise them again. I know there is "Autosave on close" checkbox, but it is not working right. I can uncheck it, but it ...

maigonis

Cant upgrade 2x LHG 5 AC from 6.49beta22 to 6.49 Stable, not enough space, i got nothing on internal storage...

That usually is an existing firmware bug, do netinstall.

maigonis

As you see this seems to work, but I have concern about second bridge - only one bridge is hardware accelerated (on most MT devices). All other bridges goes through CPU and that have a hit on router performance. A better solution would be vlans. (Theoretically, I have little experience whit it)

maigonis

I have rewritten all router config, and removed interface lists - ether1 will always be WAN interface. So that rule is correct. I read 4 more times old wiki and I think I understand now what invalid state means. But next question is, how does packets whit no destination originates if there cannot be...

maigonis

In default config we have: add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new in-interface=ether1 But if I have this rule before: add action=drop chain=forward comment="defconf: drop invalid forward"...

maigonis

Can you send us capsman and cap log output? What ROS version are you using on both devices? That might be L2 issues. Try to add static CAP server on APs. Example: /interface wireless cap set bridge=bridge1 caps-man-addresses=192.168.100.1 enabled=yes interfaces=wlan1,wlan And send us full capsman an...

maigonis

Use cli, it is dark.

maigonis

If you have other MT device try to netinstall it, to check if you know how to properly do it. After that try that broken unit.

maigonis

To defend my home router I follow technique "Block all, allow a few". I have configured my firewall to allow a few ports that I need and block all other input, including from LAN, only allow my main PC network and VPN to access it. Winbox access, shh, ftp etc are allowed only from those ne...

maigonis

Under capsman that speed is normal, around 300-400mbps on 80mhz channel. Whitout capsman you can get a bit more, around 500mbps peak.

maigonis

1st: never ever open rdp to public.
Use a VPN or allow RDP port only for certain trusted static IPs or ddns

Second this, open ports are a bad ides.

maigonis

Why don't you practice CapsMAN on a physical device ?

In GNS3 you can create all kind of setup and if you break something you can easely restore project.

maigonis

What does the log say?

Have you done iperf3 tests? Tcp, udp?

maigonis

I use linux as netinstall host, because of multiple issues on Windows (antivirus, interfaces etc), besides there is more log messages on linux, so you can see whats going on. Netinstall is L2 OSI layer process, you need to set only basic things like IP and subnet, no default gateway, dns etc. I do n...

maigonis

Tnx for answers...

maigonis

Hi.

I'm trying to simulate capsman in my virtual network, as there is no wlan interface available I can't get it up and running. Is there any workaround how I can get virtual wlan interface in GNS3?

maigonis

Disabling bright blue power LED would be a nice feature.

maigonis

Check cables, switch ports, change endpoint device.

maigonis

Contact support directly whit this issue. It might get sorted, but it can take time, a lot of time, as your issue, most likely, will not be on top of theyr priority list.

maigonis

+ A good suggestion + And at the very least I would like to see proper integration between RouterOS and SwOS meaning: For those devices that are capble of running either OS's if you configure the switch using SwOS and then switchover to RouterOS ... RouterOS would automagically adopt that configura...

maigonis

I am having problems with LAG and DHCP. I have a pfsense router that I would like to connect my CS610 with 2 port LAG. If my dhcp server is connected via LAG, I can't get any client (including the mikrotik switch) to receive DHCP address. Anyone else seeing this issue? Try disabling "Add Infor...

maigonis

I still cannot setup storm control, Ingress and Egress rate. For example when I set 10% under Forwarding and press "Apply all" my 10% is gone.

Also I have issues whit SNMP. I tried to add it to my local Zabbix server, as result CSS610 started to randomly reboot.

maigonis

I would blame Wi-Fi first. You have setup Wi-Fi properly?

maigonis

If you get contant reboots try disabling SNMP. I tried to add CSS610 to Zabbix and it started to reboot randomly, quite often. Even after removing it from Zabbix I still got reboots. When I disabled SNMP on CSS610 problem went away, up and running stable almost for two days.

maigonis

I just got the SwOS 2.13 on my device via auto-upgrade.
swos-css610.png

Yep, its out. But still, I cant get storm control working.

maigonis

IGMP Snooping still broken for me on RC25... Anyone using IGMP Snooping? I have it enabled on a single vlan and do see entries under the igmp tab, but have not tested any further than that. I use IGMP snooping on my network and I see entries on tab. I use it as simple switch, no vlans or other comp...

maigonis

I had simmilar issue. Try latest long-term version. I had this issue on latest stable and testing release. After rolling all devices to long-term issue was gone.

maigonis

WiFi extension is not the greatest thing to do, if you can run wires. Quick advice. Yep we will always use wires. Unless it is to far away that I have to use point 2 point. I hope you adjust TX gain on APs. It is hard to say what is going on you premises, a proper spectral scan would be the best th...

maigonis

Hi thanks for the advice. Yes on one of the building I have installed two AP in SE and SW around 4m above ground, with SE extend from SW AP. I see some undesireable effect, the signal kind of bumping each other that cause some inteference in some part of the building. I use a signal range rule in c...

maigonis

You can do it whit MT, but You wont like what I will say. That is a high density network and you can use stadium AP deployment method. (don't quote me on name) Every AP can handle around 25 users. You count 25 chairs in cycle and deploy AP under them. Adjust TX gain, channel etc so on AP handles ar...

maigonis

I would say in the center of the area (ceiling mount) facing down.......... Yes I would like to do this, but the building is pointy one and doesn't have any horizontal beam. So I have to find second best placement. Most of the user is in the front side of the building. In case if it is not enough I...

maigonis

You can do it whit MT, but You wont like what I will say. That is a high density network and you can use stadium AP deployment method. (don't quote me on name) Every AP can handle around 25 users. You count 25 chairs in cycle and deploy AP under them. Adjust TX gain, channel etc so on AP handles aro...

maigonis

6m above ground will be too high in my opinion.

maigonis

I have done channel analysis near the routers and I have to say: channels are pretty busy :D

I am considering 5 GHz more and more.

5GHz is a way to go nowdays, not because of MT WiFi quality. 2.4GHz have way too noise, interfierance and low troughtput.

maigonis

You will need APs, one router will not cover it all. How many customer usually you have?

maigonis

Another potential problem with roaming .... We can see that devices in IOS, Android, Windows 10, massively start to switch to private MAC addresses. (The user was never asked to enable this, the update just did it!) The rules on how dynamic those changes in MAC addresses are, are not clear to me, b...

maigonis

As my iot devices are on 2.4ghz network and I use 5ghz for, basicaly, everything else I have setup vlans whit the same ssid. Then I isolated2.4ghz network, so no China can spy my stuff.

maigonis

Do they get DNS server from DHCP?

maigonis

Just my two cents. Only way as i can see is deploying more APs, a lot more... As members are mentioned before, WiFi is a two way street as all networks and mobile devices, like phones, have low power antenas. I they can hear AP that doesn'y mean that AP hears them. Setup one test AP that is mobile a...

maigonis

Thank you for answer, but still I'm unable to access cameras. I can access any other device on network, except cameras.

PS: Those are Hikvison DS-2CD2032-I cameras, i can access them on remote site.

maigonis

Hi. I'm trying to setup VPN on remote site, so I can access IP cameras. I have deployed Hap as VPN server. My issue is whit subnets. Those IP cameras are not accessible from different subnet, so I have to be on same subnet. VPN configuration is default, I set it up in Quick Set menu. By default VPN ...

maigonis

Post your client device PHY speed.

maigonis

Have you tried disabling lower datarates?

maigonis

Try router in different environment, for example at work or at friends house. And can you post APs TX power?

maigonis

I would just buy an RB450Gx4 for routing and consumer-grade APs for Wi-Fi instead. Currently using a TP-Link Archer A10 for AP, getting 400Mbps wireless bandwidth performance without a hitch on the 5GHz band, 100Mbps straight on the 2.4GHz band. I get those speeds on hap ac2 and cap ac. Agree on ro...

maigonis

I would just buy an RB450Gx4 for routing and consumer-grade APs for Wi-Fi instead. Currently using a TP-Link Archer A10 for AP, getting 400Mbps wireless bandwidth performance without a hitch on the 5GHz band, 100Mbps straight on the 2.4GHz band. I get those speeds on hap ac2 and cap ac. Agree on ro...

maigonis

I have had the hAP AC, hAP AC2, cAP AC, wAP AC, RB 4011, and the Audience in the same spot. I load up the network with a minimum of 25 clients on that one wAP and start a video stream on my Roku before testing. Then I take the average. The R510 clobbers any Tik Wireless. And the R610 gets over 500 ...

maigonis

My R610 would get up near 400/400 So do both my hAP ac & RB4011, with a 866Mbps PHY rate (OnePlus 5T as client). I have had the hAP AC, hAP AC2, cAP AC, wAP AC, RB 4011, and the Audience in the same spot. I load up the network with a minimum of 25 clients on that one wAP and start a video strea...

maigonis

I had massive issues on 6.47.2, so I downgraded to long term fw. CAP connection to Capsman was horrible, no client could connect to APs.

maigonis

My R610 would get up near 400/400 So do both my hAP ac & RB4011, with a 866Mbps PHY rate (OnePlus 5T as client). I have had the hAP AC, hAP AC2, cAP AC, wAP AC, RB 4011, and the Audience in the same spot. I load up the network with a minimum of 25 clients on that one wAP and start a video strea...

maigonis

Shouldn't we be seeing the changelog from 6.45.9 to 6.46.7 not from 6.46.6 ? Going up a major version in a long-term release should be looked over a bit more carefully before we take the plunge.
Yes, that would be logical.
Mikrotik fought the Logic and Mikrotik won.

Flawless victory.

maigonis

If you want more stable connection and coverage buy more APs, deploy one in every room where wifi is important. If we talk about speed then you, most probably, have clients only whit 2x2 antenas, check that to be sure. You already have 2x2 AP. Speed around 300-400mbps is what you will get from 2x2 ...

maigonis

If you want more stable connection and coverage buy more APs, deploy one in every room where wifi is important. If we talk about speed then you, most probably, have clients only whit 2x2 antenas, check that to be sure. You already have 2x2 AP. Speed around 300-400mbps is what you will get from 2x2 c...

maigonis

In short: you can't. 1st of all, it would be against idea of VLANs which is separation between (V)LANs. 2nd it would mean that certain L2 network functions whould have to be somehow shared between different L2 networks (such as DHCP server and gateway MAC and IP address) to make it work seamlessly....

maigonis

To get better coverage, use "as many accesspoints" as possible (read necessary). i.e. I have one accesspoint per floor and one in the garden. Perhaps you can share your configuration ( /export hide-sensitive file=router ) to give some additional tips!? That is about right. It feels like M...

maigonis

As I understand then you are pinging from wifi client device that is connected to AP? Try isolate issue by testing network stability from CAP to CAPSMAN server.

maigonis

Is it possible to setup layer 3 roaming? I have setup Capsman (main network router as server) whit CAPs on separate VLANs, if client device roams it gets a new IP. It is fine for me at home lab, but it can cause issues if I deploy this configuration at work. My configuration: # aug/02/2020 00:07:19 ...

maigonis

If you want to use ac2 as wifi AP and a switch basically then this is an option. I recommend using hap ac2 as Capsman server as it is more powerfull. Read Mikrotik wiki to setup simple Capsman network.

maigonis

Firstly, thanks for having exactly the same problem as me... on the same weekend. Rare :-) One question though... I had originally set up the provisioning in capsman as "create dynamic enabled" rather than "create enabled" (which is where I was running into problems not being ab...

maigonis

Hi! In my opinion, you are approaching this in a bad way. Let me explain. When you link an Access point to CAPSMAN, that said AP will provide its Radios. The Radio is the physical component of the AP which does the WIFI emitting. Most APs will provide 2 Radios, one for 2.4 Ghz and one for 5 GHz. Ca...

maigonis

Can you explain why provisioning rules won't work in your config to provision the virtual APs? For each radio that is managed by capsman, you really need to manage it via capsman, otherwise you are defeating the purpose of using capsman. For example, how can I set TX power, fixed channel, security ...

maigonis

I have dynamic, it's ok.

But I cant edit interfaces whit dynamic, that is the issue.

maigonis

Can you first explain why you need/want multiple SSID's? Do you also use VLAN's? Mostly for educational purposes. I work in school and I'm planning to deploy Mikrotik APs in classrooms, hallways, rest areas etc. I will manage them whit Capsman. As usual, I will need one ssid for administration, one...

maigonis

Hi. I'm planning to add multiple SSIDs to my home network. I have setup Capsman whit manually added interfaces, for more fine tuning purposes. As I understand then adding multiple SSIDs is super easy in Provisioning whit slave configs, but this will not work in my configuration. How can I add multip...

maigonis

A gigabyte POE port and in Latvia popular bands, in my region at least, are 3,7,20.

maigonis

Sounds like RF interfierence for me. Scan for clean channel as sef it fixed I've tried that. Currently have both antennas set to 2427 to try and mitigate the problem. The table you posted is nice, but when looking at it one has to be aware of the overlap problem. I'm sure you're aware that channels...

maigonis

It's normal with 2.4GHz It's ruining online gaming completely. Every one of those spikes cause huge lag for 1-2 seconds. Are we saying that as long as you run 2.4GHz you won't be able to play online games? Sounds like RF interfierence for me. Scan for clean channel as sef it fixed I've tried that. ...

maigonis

Sounds like RF interfierence for me. Scan for clean channel as sef it fixed

maigonis

I noticed that my RB450Gx4 have rebooted at night whit out any error in log (I was clean, like nothing had happened), so nothing else I can provide.

I was using 6.47beta60.

maigonis

How many rooms one flat have? How large are those rooms and what rooms will need wifi access? I suggest you to setup one cap ac in every room that need wifi, use hap ac2 as main flat router that will also cover one rooms wifi: LAN cable from basement - hap ac2 - cap ac - cap ac For example AP in liv...

maigonis

ksuuk, don’t rush with sharing suggestions before fully understanding the situation. Last test: take the cAP AC to some other connection and try out there to rule out your edge router’s jam. I agree on test in different network. I had similar speeds on hap (just hap, no ac2 or something). As I kept...

maigonis

I tested hap ac2 (they are almost the same unit) speeds on Thursday, both 2.4ghz and 5ghz speeds in CAP mode. On 2.4ghz whit 2S device I can get 100mbps, whit 1S device 50mbps using iperf3 local test. Those speeds are what they should be. Only in 5ghz I can't get max speeds as I should, but results ...

maigonis

I now have RB450x4 as main router and hap ac2 and cap ac as APs. Before RB450x4 I had hex s as main router. I can get around 200mbps on APs whit capsman forwarding and 80mhz channel width. I have issues whit local forwarding also, so I don't use it. Have you played whit channels? Turn off old bands ...

maigonis

You have checked channel and interference? Download WiFi analyzer and check, search online what can interfere whit wifi signal - microwave, Bluetooth, wireless mice and keyboard etc.

If you can use channels 1,6,11 on 2.4GHz.

Search found 211 matches