Community discussions

MikroTik App

Search found 110 matches

by nevolex
Fri Feb 26, 2021 4:46 am
Forum: Scripting
Topic: modify a 3rd part script [SOLVED]
Replies: 4
Views: 282

Re: modify a 3rd part script [SOLVED]

Cleaned up the original script some (better tabs, removed not needed ;) # Script to download adblock list # https://www.micu.eu/adblock/adblock.php # :log warning "starting adblock update" :delay 2 :log warning "downloading adblock" :local hostScriptUrl "https://www.micu.eu...
by nevolex
Thu Feb 25, 2021 1:32 pm
Forum: Scripting
Topic: modify a 3rd part script [SOLVED]
Replies: 4
Views: 282

modify a 3rd part script [SOLVED]

HI I am curious if there is anything that can be done about this script: it's a 3rd part adblock https://www.micu.eu/adblock/adblock_script.txt and what it does it puls the list from https://www.micu.eu/adblock/adblock.php the problem is I would like to whitelist a few google dns entries but I don't...
by nevolex
Sun Feb 21, 2021 1:07 pm
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

Re: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]

You may have misunderstood me. The identity row, even if just a single one is attached to a peer, is always matched on either the remote ID or the certificate (depending on the setting of the match-by parameter). So if remote-id is set to ignore , the row will match on any ID_I received, and the on...
by nevolex
Sun Feb 21, 2021 12:41 pm
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

Re: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]

I'd say match-by=certificate remote-certificate=the-one-of-the-client should do the trick with either remote-id=ignore or remote-id=auto . But it's just a guess, maybe auto is necessary, as in fact the header of the certificate is sent as the ID, as the log should show you. Maybe Apple does that di...
by nevolex
Sun Feb 21, 2021 11:57 am
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

Re: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]

As I've got no Mac/iPhone laying around, let alone with the OS version in question - can you post the window that opens if you click [Authentication Settings...] in the window you've already posted? Sindy, you are a legend!, if you didn't point it out I would not double-check that at it was chosen ...
by nevolex
Sun Feb 21, 2021 11:25 am
Forum: General
Topic: Solved: iOS 13 & macOS Catalina IKEv2 VPN not working anymore [SOLVED]
Replies: 39
Views: 22018

Re: Solved: iOS 13 & macOS Catalina IKEv2 VPN not working anymore [SOLVED]

Anyone got this solved on IOS14 and ROS 6.47.8 ?
same issue
by nevolex
Sun Feb 21, 2021 4:40 am
Forum: General
Topic: IKE2 identity not found (IOS to Mikrotik) [SOLVED]
Replies: 25
Views: 8460

Re: IKE2 identity not found (IOS to Mikrotik) [SOLVED]

exactly the same error and tried as in the manual but got the same error:

error identity not found for server
by nevolex
Sun Feb 21, 2021 12:43 am
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

Re: IKEv2 VPN on latest IOS and MacOS what a pain [SOLVED]

The log from the Mikrotik shows that the Apple uses its private IP address as its identifier (ID_I), so the Mikrotik cannot find a corresponding row in /ip ipsec identity . But if I understand it right, this actually indicates that the Apple device doesn't consider its own certificate fit for its o...
by nevolex
Sun Feb 21, 2021 12:19 am
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

Re: IKEv2 VPN on latest IOS and MacOS what a pain [SOLVED]

To see the digest-algorithm used, you have to display the certificate parameters using the command line, /certificate print detail where common-name~"vpn" . But when signing certificates, RouterOS normally uses SHA-256, which is from the SHA-2 suite, so it fits those requirements. As for ...
by nevolex
Sat Feb 20, 2021 11:18 pm
Forum: General
Topic: IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]
Replies: 10
Views: 532

IKEv2 VPN on latest IOS and MacOS what a pain / identity not found for server [SOLVED]

Hi Everyone, I have been having issues with my vpn connection (ikev2), as also mentioned in a few topics here from other people, "it works everywhere else but on Apple devices..." Found this information: Requirements for trusted certificates in iOS 13 and macOS 10.15 All TLS server certifi...
by nevolex
Sat Feb 06, 2021 3:46 am
Forum: RouterOS v7 BETA
Topic: v7.1beta4 [development] is released!
Replies: 158
Views: 20861

Re: v7.1beta4 [development] is released!

winbox - added support for wifiwave2;

do we still need an external driver for that, or is it now integrated into the ros?
by nevolex
Thu Feb 04, 2021 2:28 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 42
Views: 8374

Re: v6.49beta [testing] is released!

Even v2.9.x had at least 2.9.51, so don't let v6.x stop at v6.50 :D
LOL, oh well let 6.50.1 happen then!
by nevolex
Wed Feb 03, 2021 10:55 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 42
Views: 8374

Re: v6.49beta [testing] is released!

That's great guys, but maybe 6.50 can be the last 6.x ros and the development can be fully switched over to 7.x ?

thanks
by nevolex
Wed Feb 03, 2021 10:54 pm
Forum: General
Topic: SRV DNS records
Replies: 5
Views: 535

Re: SRV DNS records

I have just tested it but I did not manage to obtain anything other than NXDOMAIN from the internal domain server. Sorry.
yes, same here couldn't figure it out yet how to actually split the domains per ports
by nevolex
Tue Feb 02, 2021 1:52 am
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42774

Re: v7.1beta3 [development] is released!

Do you guys know when the final version is out, shell we aim for the end on 2021?
by nevolex
Sun Jan 31, 2021 12:03 am
Forum: General
Topic: SRV DNS records
Replies: 5
Views: 535

Re: SRV DNS records

In the srv you don't put an IP but the domain name of the server serving both ports. srv site1.lan 32400 --> A siteserver.lan 10.10.10.10 srv site2.lan 20020 --> A siteserver.lan 10.10.10.10 thank you msatter, may you please elaborate on SRV I am having some issues setting them up still does it mea...
by nevolex
Sat Jan 30, 2021 12:06 am
Forum: General
Topic: SRV DNS records
Replies: 5
Views: 535

SRV DNS records

Hi all, can somebody please help me to create 2 SRV records I have 2 web services running on 10.10.0.10:32400 and 10.10.0.10:20020 I would like them to be resolved at site1.lan for 10.10.0.10:32400 and site2.lan for 10.10.0.10:20020 do I create an A record for same address since the A dns record doe...
by nevolex
Fri Jan 15, 2021 10:26 am
Forum: General
Topic: VPN over CGNAT [SOLVED]
Replies: 1
Views: 215

VPN over CGNAT [SOLVED]

HI all, I run a vpn server (IKEV2)on my Mikrotik it has 2 wan links, normal ISP with the standard pubic IP allowing port forwarding - all work fine the second wan is a 4g (in case the primary link fails) with common CGNAT these days, port forwarding doesn't work so vpn is out Is there a way to allow...
by nevolex
Tue Jan 12, 2021 7:31 am
Forum: General
Topic: SMS ALERTS TIME FORMAT [SOLVED]
Replies: 1
Views: 254

SMS ALERTS TIME FORMAT [SOLVED]

Hi guys, can somebody please guide me on how to create a simple script with the date format as date/month/year for netwatch the one I have is :local CurDate [/system clock get date] :local CurTime [/system clock get time] :local HostName "Primary ISP link" :local HostIP "1.1.1.1"...
by nevolex
Thu Jan 07, 2021 10:29 am
Forum: General
Topic: mikrotik audience best wireless performance
Replies: 2
Views: 235

Re: mikrotik audience best wireless performance

Perhaps you can share your configuration? /export hide-sensitive flie=anythingyoulike (and place the outcome between [] ) thank you [admin@Mikrotik_Audience] > /export hide-sensitive # jan/07/2021 21:27:45 by RouterOS 6.48 # software id = M0L0-MR8G # # model = RBD25G-5HPacQD2HPnD # serial number = ...
by nevolex
Thu Jan 07, 2021 9:41 am
Forum: General
Topic: mikrotik audience best wireless performance
Replies: 2
Views: 235

mikrotik audience best wireless performance

Hi everyone, I have a mikrotik audience and probably already got a very good permanence, considering the outdated wireless driver of ROS ;) Having 2 separate wifi 5 radios (1733Mbs and 866Mbs) I separated network/ channels completely and get a solid 250-300Mbs pers sec per client, maxing out at arou...
by nevolex
Wed Dec 30, 2020 1:54 pm
Forum: General
Topic: Using Fasttrack with Simple Queues [SOLVED]
Replies: 3
Views: 3749

Re: Using Fasttrack with Simple Queues [SOLVED]

Try this, Put those rule before the fastback rule /ip firewall filter add action=accept chain=forward connection-state=established,related src-address=172.16.25.0/24 add action=accept chain=forward connection-state=established,related dst-address=172.16.25.0/24 It work for me... Have a good day! Pa...
by nevolex
Wed Dec 30, 2020 1:52 pm
Forum: General
Topic: simple queue doesn't work with fasttrack?
Replies: 2
Views: 289

Re: simple queue doesn't work with fasttrack?

seems to be working with these rules placed before fastrack in firewall



add action=accept chain=forward connection-state=established,related src-address=10.20.0.0/24
add action=accept chain=forward connection-state=established,related dst-address=10.20.0.0/24
by nevolex
Wed Dec 30, 2020 12:14 pm
Forum: General
Topic: simple queue doesn't work with fasttrack?
Replies: 2
Views: 289

simple queue doesn't work with fasttrack?

Hi guys, I just realised that fastrack and simple queues don't go along well It looks like with fastrack disabled a simple bandiwth queue works but I would like to keep fastack enabled. Is there a way to bypass 10.20.0.0/24 only from fastracking ? Perhaps can somebody please help me to figure out th...
by nevolex
Tue Dec 29, 2020 9:52 am
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 61503

Re: v6.48 [stable] is released!

Hi guys @emils Updated my Audience to 6.48 and secondary wifi 5Ghz band is now not working at all (1733 Mbit/s one) I was using it as my primary network not as mesh Please see that some setting are now missing for the band 5500 (1733 wirelss network compare to regular 5ghz) Please fix https://ibb.co...
by nevolex
Mon Dec 28, 2020 11:14 am
Forum: General
Topic: ikev2 2 sessions under one certificate [SOLVED]
Replies: 2
Views: 323

ikev2 2 sessions under one certificate [SOLVED]

Hi guys, Merry Christmas and a happy new year to every one of you I got my ikev2 vpn server setup and I just realised that I cannot use 2 sessions at the same time I am using 1 certificate on 2 devices: a windows pc and an android phone when one device is connected the other gets disconnected, they ...
by nevolex
Sun Dec 06, 2020 11:13 am
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42774

Re: v7.1beta3 [development] is released!

wifiwave2 experimental support -- thanks a lot Mikrotik for start your work on this, can't wait to see the final version integrated into winbox sometime next year!
by nevolex
Wed Dec 02, 2020 1:05 am
Forum: General
Topic: hardware offloading in bridged ports mirktoik 4011 [SOLVED]
Replies: 2
Views: 321

hardware offloading in bridged ports mirktoik 4011 [SOLVED]

HI guys,


I just realised that non of my bridged ports are hadrware offloaded, even thought the option is ticked, can somebody please explain why?

thank you
by nevolex
Tue Nov 24, 2020 10:16 am
Forum: General
Topic: dns allow remote requests [SOLVED]
Replies: 4
Views: 377

Re: dns allow remote requests [SOLVED]

If your interface lists are correct, i.e. actual WAN interface is definitely not in LAN interface list, then current rules are enough.


yes my list of wan interfaces only have the wan interfaces

thank you for your help
by nevolex
Tue Nov 24, 2020 4:30 am
Forum: General
Topic: dns allow remote requests [SOLVED]
Replies: 4
Views: 377

Re: dns allow remote requests [SOLVED]

Existing rule #6 already drops everything from WAN, if it was not allowed before.


does it mean i don't need those specific rules?
by nevolex
Tue Nov 24, 2020 3:33 am
Forum: General
Topic: dns allow remote requests [SOLVED]
Replies: 4
Views: 377

dns allow remote requests [SOLVED]

HI guys, I would like my router to respond to DNS queries, I know I have to bock requests from wan, however can you please advise what rules i need and where to move them, thank you [admin@MikroTik_RB4011] /ip firewall filter> print Flags: X - disabled, I - invalid, D - dynamic 0 D ;;; special dummy...
by nevolex
Sun Nov 08, 2020 12:14 am
Forum: General
Topic: ikev2 vpn and android phone
Replies: 3
Views: 428

Re: ikev2 vpn and android phone

getting vpn slowing working on all devices across the network, however having issues getting it working on mac os :( getting a few errors and a user message "unexpected error occurred " here are some logs: \f0\fs24 \cf0 default 11:02:24.980781+1300 nesessionmanager NESMIKEv2VPNSession[Prim...
by nevolex
Sat Nov 07, 2020 10:24 pm
Forum: General
Topic: ikev2 vpn and android phone
Replies: 3
Views: 428

Re: ikev2 vpn and android phone

Are you using a newer Android whose embedded VPN client can use IKEv2 or do you use StrongSwan? StrongSwan attempts to establish an SA to 0.0.0.0/0, and once RouterOS restricts it to the first subnet on the split-include list, it doesn't try again and sends traffic to other destinations outside the...
by nevolex
Sat Nov 07, 2020 6:32 am
Forum: General
Topic: ikev2 vpn and android phone
Replies: 3
Views: 428

ikev2 vpn and android phone

Hi all, I have set up my ikev2 (using certificates) vpn connection and it works fine on windows, however, on the android phone, I can connect to vpn fine and lan resources are accessible however nothing on the Internet works (timed out) can somebody please advise what the problem can be? thank you [...
by nevolex
Fri Nov 06, 2020 12:52 pm
Forum: General
Topic: strange bug ikev2 vpn [SOLVED]
Replies: 4
Views: 387

Re: strange bug ikev2 vpn [SOLVED]

You forgot two things, to place [ code] and [ /code] tags around the configuration export in your previous post, and to describe the topology. So a guess: you are connected via a VPN, and from a client of that VPN , you can connect using Winbox/WebFig to other routers in 10.10.0.0/24, but not to th...
by nevolex
Fri Nov 06, 2020 11:14 am
Forum: General
Topic: strange bug ikev2 vpn [SOLVED]
Replies: 4
Views: 387

Re: strange bug ikev2 vpn [SOLVED]

It sounds as if the IPsec policy was intercepting the traffic between the "toolbox" (whatever it is) and the router. In another words, no better advice without seeing the configuration and the topology. haha sorry I was meant to say winbox not toolbox thank you i can connect to 10.10.0.2 ...
by nevolex
Fri Nov 06, 2020 10:45 am
Forum: General
Topic: strange bug ikev2 vpn [SOLVED]
Replies: 4
Views: 387

strange bug ikev2 vpn [SOLVED]

Hi everyone I am on the latest ros 6.47.7 and just discovered that I cannot connect to the router via toolbox when connected to vpn ikev2 I have 4 routers and I can connect to 3 of them out of 4, the 4th one is the one running vpn server all the ips are accessible on my network, even the ip of the r...
by nevolex
Tue Sep 22, 2020 2:13 pm
Forum: General
Topic: lte failover doesn't work right [SOLVED]
Replies: 3
Views: 514

Re: lte failover doesn't work right [SOLVED]

how do I fix it? You can use the dhcp-client parameters and inside is the script's who can do some additional works. Key work can do the Routing Filter who can change the Dynamic interface parameter's like /routing filter ... set-scope= . Example: https://forum.mikrotik.com/viewtopic.php?f=2&t=...
by nevolex
Tue Sep 22, 2020 11:49 am
Forum: General
Topic: lte failover doesn't work right [SOLVED]
Replies: 3
Views: 514

lte failover doesn't work right [SOLVED]

HI guys, I have 2 routers a main one and the lte one Lte works as a passthrough, so I get ISP's ip directly in the routing table on the main router So I have 2 default routes via primary/ secondary However, the problem is with the administrative distance, I know the default route has to be setup sta...
by nevolex
Fri Sep 18, 2020 11:42 am
Forum: General
Topic: LTE passthrough the best setup
Replies: 1
Views: 266

LTE passthrough the best setup

Hi guys, first of all wanted to say thank you for the great support on this form I have been having over a few months :) I have 2 mirkorik devices connected via trunk and I am passing 2 vlans vlan10 and 20 There is DHCP server on the router 1 for both vlans and the router 2 is just s client I am pla...
by nevolex
Tue Sep 15, 2020 4:03 am
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

Looking into your configurations, the hAP ac² is there only as a port & wireless extender of the 4011, so whatever is connected to it by wire or wirelessly gets the 4011's IP address as the default gateway. I.e. the hAP ac² doesn't route any traffic, so it doesn't need any route at all (unless ...
by nevolex
Mon Sep 14, 2020 2:57 pm
Forum: Useful user articles
Topic: Advanced Routing Failover without Scripting
Replies: 148
Views: 27974

Re: Advanced Routing Failover without Scripting

DId you try to use LTE Passthrough (via VLAN, for example) to setup IP address directly on main router?
thank you, does it mean i need to build a dchp server on the second router and the main router to be the client?
by nevolex
Mon Sep 14, 2020 2:15 pm
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

Publish the configurations of both machines (see my automatic signature regarding anonymisation), rest assured that there is a way, you can always use VLANs and/or policy routing. Even if the hAP ac is a DNS client, it need not ask for a default route via DHCP. thank you [admin@MikroTik_RB4011] > /...
by nevolex
Mon Sep 14, 2020 1:34 pm
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

as I said earlier the problem is, that your hap also has the rb4011 defined as the primary gateway: 0 ADS 0.0.0.0/0 10.10.0.1 1 so if isp1 is down, rb4011 uses the hap as gateway, but the hap is using rb4011 as gateway -> loop and nothing works. thank you mooks, so basically there is nothing can be...
by nevolex
Mon Sep 14, 2020 1:10 pm
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

as I said earlier the problem is, that your hap also has the rb4011 defined as the primary gateway: 0 ADS 0.0.0.0/0 10.10.0.1 1 so if isp1 is down, rb4011 uses the hap as gateway, but the hap is using rb4011 as gateway -> loop and nothing works. thank you mooks, so basically there is nothing can be...
by nevolex
Mon Sep 14, 2020 12:19 pm
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

The case is really unclear in terms whether both routers should be able to use the 4011's WAN while it works, and hAP ac's (LTE) WAN whenever it doesn't, or whether the hAP ac is there only to provide the LTE WAN for the 4011. Can you clarify this basic question? sorry for being unclear guys, the o...
by nevolex
Mon Sep 14, 2020 11:33 am
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

Re: LTE failover to a different router [SOLVED]

Hi mooks, I am trying to set up failover in a way that if the wan dies on the primary, traffic will be failovered to the secondary, however i cannot use ping the gatway as on the second routeк the gateway is the ip of the routeк one. So even if the wan dies the routes won't switch as the router one ...
by nevolex
Mon Sep 14, 2020 10:09 am
Forum: Useful user articles
Topic: Advanced Routing Failover without Scripting
Replies: 148
Views: 27974

Re: Advanced Routing Failover without Scripting

Hi Chupaka and other guys, can you please help to figure ou how I can make lte faiolver to work in my case I am trying to do a failover but stuck as the lte modem on a different router Main router 1 wan, 2 dhcp servers vlan 10 and vlan 20 [admin@MikroTik_RB4011] /ip route> pri Flags: X - disabled, A...
by nevolex
Mon Sep 14, 2020 9:47 am
Forum: General
Topic: LTE failover to a different router [SOLVED]
Replies: 14
Views: 653

LTE failover to a different router [SOLVED]

Hi guys, I am trying to do a failover but stuck as the lte modem on a different router Main router 1 wan, 2 dhcp servers vlan 10 and vlan 20 [admin@MikroTik_RB4011] /ip route> pri Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhol...
by nevolex
Sun Sep 06, 2020 3:01 am
Forum: General
Topic: Check updates fail / dns error after automatic upgrade to 6.47.2 [SOLVED]
Replies: 1
Views: 262

Re: Check updates fail / dns error after automatic upgrade to 6.47.2 [SOLVED]

the issue has been resolved by resetting the device and recovering the config.....what...
by nevolex
Sun Sep 06, 2020 2:16 am
Forum: General
Topic: Check updates fail / dns error after automatic upgrade to 6.47.2 [SOLVED]
Replies: 1
Views: 262

Check updates fail / dns error after automatic upgrade to 6.47.2 [SOLVED]

Hi guys, I have a strange issue: I have 3 routes: main router (4011) has dns and dhcp settings one audience, work as access point one more router as wireless bridge after upgrade to 6.47.2 on the audience I cannot check for further updates anymore - "dns is not resolved" error the funny th...
by nevolex
Wed Aug 26, 2020 10:51 am
Forum: General
Topic: Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]
Replies: 3
Views: 580

Re: Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]

Found what the problem was, made a typo, too man vlans hahaha

add interface=wlan20_guest_5.0GHz+ name=vlan20_guest_5.0GHz+ vlan-id=10
/interface bridge port
by nevolex
Wed Aug 26, 2020 4:53 am
Forum: General
Topic: Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]
Replies: 3
Views: 580

Re: Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]

I assinged an ethernet port on the rb4011 to vlan20 for testing and the ip ws issues immidiatelly, so I guess the issue can be on the audience?
by nevolex
Wed Aug 26, 2020 4:34 am
Forum: General
Topic: Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]
Replies: 3
Views: 580

Ip address cannot be obtain via dhcp server on guest vlan [SOLVED]

Hi Guys can you please help me to understand what i did wrong I have an rb4011 and audience 2 vlans: 10 and 20 and there is a trunk between port 9 on rb4011 and port 1, pssing both vlans 2 dhcps servers running on rb4011 one for each vlan Then these vlans are assigned to ssids Clients on ssids assig...
by nevolex
Tue Aug 25, 2020 7:09 pm
Forum: Wireless Networking
Topic: SSIDs with vlans and default SSID [SOLVED]
Replies: 1
Views: 324

SSIDs with vlans and default SSID [SOLVED]

Hi Guys I am curious what can i do in this case I am using tagged networks 10 for main lan/ 20 for the guest lan they assigned to virtual wlans 2 virtual aps - 10 for main lan/ 20 for guest accordingly it all works however, there is also real ap, sort of wlan1 and it has a default ssid mikrotik, I d...
by nevolex
Thu Aug 20, 2020 12:41 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 43451

Re: v7.1beta1 [development] is released!

do you guys know if band steering will be awalible in ros 7?


Thanks
by nevolex
Wed Aug 19, 2020 1:27 am
Forum: General
Topic: Logging to a remote Syslog server, default settings [SOLVED]
Replies: 2
Views: 362

Re: Logging to a remote Syslog server, default settings [SOLVED]

i guess i can edit it in cli but how do i save ?
by nevolex
Wed Aug 19, 2020 1:20 am
Forum: General
Topic: Logging to a remote Syslog server, default settings [SOLVED]
Replies: 2
Views: 362

Logging to a remote Syslog server, default settings [SOLVED]

HI guys, can somebody please help to set the default setting back on the router under system-logging-action default action is "remote" but I cannot set the source ip back to 0.0.0.0 it has to be a valid address, however intially that ip was set perhps it can be defaulted in the cli? thanks
by nevolex
Mon Aug 10, 2020 1:54 pm
Forum: Wireless Networking
Topic: wAP ac LTE6 kit passive poe in?
Replies: 0
Views: 403

wAP ac LTE6 kit passive poe in?

HI I got a r4011


would it be able to power the "wAP ac LTE6 kit"

the r4011 has only one passive poe out port


Thank you
by nevolex
Fri Aug 07, 2020 10:46 pm
Forum: General
Topic: MikroTik Audience LTE upgrade
Replies: 3
Views: 962

Re: MikroTik Audience LTE upgrade

I see that this device has a mini-pcie slot

https://fccid.io/TV7D25-5HPQ2HP/Interna ... 296069.pdf

Regards.
It seems like it has been removed from the motherboard on the non lte modem :(
by nevolex
Fri Aug 07, 2020 1:31 pm
Forum: General
Topic: USB LTE MODEM
Replies: 2
Views: 696

Re: USB LTE MODEM

You have to specify the region as well, otherwise you might get a suggestion for one which is perfect in all aspects except from supporting the bands used in your country. thank you, these are the bands used in the country: The Vodafone NZ mobile network operates on the following frequencies: 2G - ...
by nevolex
Fri Aug 07, 2020 5:32 am
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1873

Re: winbox interface too small

I have the same issue as Nevolex. Windows 10, 64 bit laptop. Zoom in helps but I have to repeat it every time. One more level of zoom in would be great too.

do you have "open in new window" ticked? it seems to be a bug
by nevolex
Fri Aug 07, 2020 5:31 am
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1873

Re: winbox interface too small

No, session is saved, next time you connect to the router zoom is restored from saved session.

It seems to be a bug I opened a new topic -->

winbox "zoom in" option bug

thanks
by nevolex
Fri Aug 07, 2020 5:30 am
Forum: General
Topic: winbox "zoom in" option bug
Replies: 0
Views: 515

winbox "zoom in" option bug

Hi I have just noticed the bug in the latest verson of winbox Zooming doesn't work correclty You can zoom in but when the session is closed and reopened again, the last zooming setting will be reset It works correclty when "open in new window" option is unticked but when it is ticked the z...
by nevolex
Fri Aug 07, 2020 5:07 am
Forum: General
Topic: USB LTE MODEM
Replies: 2
Views: 696

USB LTE MODEM

HI guys,


can anyone please recommend a fully working and managed usb lte modem? :)


Thanks a lot
by nevolex
Fri Aug 07, 2020 4:59 am
Forum: General
Topic: MikroTik Audience LTE upgrade
Replies: 3
Views: 962

MikroTik Audience LTE upgrade

HI

It is possible to upgrade a standard mirktoik audience to a LTE version by purchasing a mikrtoik lte card?


thank you
by nevolex
Fri Aug 07, 2020 3:03 am
Forum: General
Topic: MikroTik RB4011 and a mini pci slot [SOLVED]
Replies: 7
Views: 2338

Re: MikroTik RB4011 and a mini pci slot [SOLVED]

LTE with built in SIM slot will not work, as the slot only supports PCIe type cards, not USB type cards, so you are limited to WiFi cards here (that RouterOS supports, of course)
So Normis, this card listed above GLYN MINI PCIE XE910 won't work with the r4011?
by nevolex
Sat Aug 01, 2020 11:41 pm
Forum: General
Topic: MikroTik RB4011 and a mini pci slot [SOLVED]
Replies: 7
Views: 2338

MikroTik RB4011 and a mini pci slot [SOLVED]

Hi guys

I got a MikroTik RB4011 (no wireless version) it has a mini pci slot too.

Can this slot be used for antying but a 2.4 wifi mikotik wireless card?


thanks :)
by nevolex
Tue Jul 28, 2020 3:14 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1873

Re: winbox interface too small

It can be a bug in the latest version of winbox but the sessions are not saved (tested saving manually too)

Can somebody please test as well, so it not just me

thanks
by nevolex
Tue Jul 28, 2020 1:57 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1873

Re: winbox interface too small

Settings->Zoom-in
yes it works fine but I have to do it every time
by nevolex
Tue Jul 28, 2020 1:56 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 43451

Re: v7.1beta1 [development] is released!

I hope the release will be end of this year?
by nevolex
Tue Jul 28, 2020 1:54 pm
Forum: General
Topic: winbox interface too small
Replies: 7
Views: 1873

winbox interface too small

Hi I got a laptop with full hd screen

display scaling is 150%

however as you can see it is tiny, I can zoom to max then it's perfect but the setting is not saved


Image


https://ibb.co/ypjThZd

can that be fixed please?
by nevolex
Sun Jul 12, 2020 2:19 am
Forum: General
Topic: Monthly Reboot
Replies: 3
Views: 1029

Monthly Reboot

Hi guys,

can somebody please advise how to reboot the router monthly, I know some would put 1d 00:0:00 in the schedule for daily reboots but how to do a monthly one?

Thanks a lot

Alex
by nevolex
Fri Jul 03, 2020 11:19 am
Forum: General
Topic: Loop detected
Replies: 0
Views: 851

Loop detected

Hi guys I got a Mikrotik router and a QNAP NAs Nas has 1 SFP+ 10Gb port that works fine with Mikrotik SFP port and I wanted to add additional 1Gb copper link as a backup link Obviously It has to be some sort of STP configuration I set: Past cost 5 for SFP Past cost 10 for Copper Unfortunately, they ...
by nevolex
Sat Jun 06, 2020 2:25 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 68984

Re: v7.0beta8 [development] is released!

Amazing what a fresh kernel, hi wireguard!

Thanks guys
by nevolex
Wed Jun 03, 2020 1:52 am
Forum: Wireless Networking
Topic: Mikrotik Audience Download speed is 2x slower than upload [SOLVED]
Replies: 6
Views: 1868

Re: Mikrotik Audience Download speed is 2x slower than upload [SOLVED]

Thank you all, here is my current config: [admin@MikroTik_Audience] > export compact hide-sensitive # jun/03/2020 10:47:48 by RouterOS 6.46.6 # software id = M0L0-MR8G # # model = RBD25G-5HPacQD2HPnD # serial number = B6BE:xx:xx:xx /interface bridge add arp=reply-only name=bridge-guest add name=brid...
by nevolex
Tue Jun 02, 2020 3:03 pm
Forum: Wireless Networking
Topic: Mikrotik Audience Download speed is 2x slower than upload [SOLVED]
Replies: 6
Views: 1868

Mikrotik Audience Download speed is 2x slower than upload [SOLVED]

Hi guys I am pretty happy with my Mikrotik Audience, but the download speeds are 2x slower than upload. I get around 300-350Mbs upload and about 150Mbs download The channels are not crowded. The coverage is good between 45-55 dBm , I am using only one AC band (1733Mbs) Can somebody please advise wha...
by nevolex
Thu May 28, 2020 11:34 am
Forum: General
Topic: Port forwarding to External OpneVPN Server [SOLVED]
Replies: 4
Views: 1131

Re: Port forwarding to External OpneVPN Server [SOLVED]

Would that rule work? /ip firewall nat add action=dst-nat chain=dstnat dst-port=33445 in-interface-list=WAN protocol=udp to-addresses=10.0.0.6 to-ports=33445 Add it just before or just after any already existing rules in chain=dstnat - it is for a particular port, so it is unlikely to get shadowed ...
by nevolex
Thu May 28, 2020 8:31 am
Forum: General
Topic: Port forwarding to External OpneVPN Server [SOLVED]
Replies: 4
Views: 1131

Re: Port forwarding to External OpneVPN Server [SOLVED]

Would that rule work?

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=33445 in-interface-list=WAN protocol=udp to-addresses=10.0.0.6 to-ports=33445
by nevolex
Thu May 28, 2020 7:06 am
Forum: General
Topic: Port forwarding to External OpneVPN Server [SOLVED]
Replies: 4
Views: 1131

Port forwarding to External OpneVPN Server [SOLVED]

Hi all. I have an Open Vpn server (on a raspberry pi in my lan) It has an ip of 10.0.0.6 and port 33445 Can somebody please advise how to do port forwarding to that port 33445 (UDP only) External port is also 33445 (I have a static public IP) These are my current rules: /ip firewall filter add actio...
by nevolex
Wed May 27, 2020 11:47 am
Forum: General
Topic: L2TP VPN doesn't work over WAN [SOLVED]
Replies: 4
Views: 828

Re: L2TP VPN doesn't work over WAN [SOLVED]

I have added those 2 lines, however, it didn't do any difference, in the firewall window (Winbox), I don't see any additional rules, then what I had before Sorry, the match protocol=icmp doesn't work this way. You have to do it the following way: /ip firewall filter add place-before=[find chain=inp...
by nevolex
Wed May 27, 2020 11:25 am
Forum: General
Topic: L2TP VPN doesn't work over WAN [SOLVED]
Replies: 4
Views: 828

Re: L2TP VPN doesn't work over WAN [SOLVED]

thought additional rules will be created automatically if it's done via Winbox ? Nope. Can somebody please advise /ip firewall filter add place-before=[find chain=input protocol=icmp] chain=input protocol=udp dst-port=500,4500 in-interface-list=WAN action=accept add place-before=[find chain=input p...
by nevolex
Wed May 27, 2020 11:05 am
Forum: General
Topic: L2TP VPN doesn't work over WAN [SOLVED]
Replies: 4
Views: 828

L2TP VPN doesn't work over WAN [SOLVED]

Hi guys, I created a L2TP connection in Winbox, my LAN clients can connect to it just fine, however, I cannot connect to VPN over Wan I guess it will be the firewall rules, I thought additional rules will be created automatically if it's done via Winbox ? These are my current rules: /ip firewall fil...
by nevolex
Tue May 26, 2020 2:11 pm
Forum: General
Topic: RB4011iGS No Internet available to hosts [SOLVED]
Replies: 7
Views: 1384

Re: RB4011iGS No Internet available to hosts [SOLVED]

HI Sindy, thank you for being so helpful, I did specify my router as dns server, allowed remote connections in DNS I am using these default rules would that be enough to drop any dns requests from wan?: /ip firewall filter add action=accept chain=input comment="defconf: accept established,relat...
by nevolex
Tue May 26, 2020 11:23 am
Forum: General
Topic: RB4011iGS No Internet available to hosts [SOLVED]
Replies: 7
Views: 1384

Re: RB4011iGS No Internet available to hosts [SOLVED]

Is it a bug or work as intended? It may be both but the latter is more likely. If allow-remote-requests under /ip dns is set to no , the DNS server doesn't respond to any DNS queries coming from outside the router, including from the LAN clients. It is only safe to change this setting to yes if you...
by nevolex
Tue May 26, 2020 8:03 am
Forum: General
Topic: RB4011iGS No Internet available to hosts [SOLVED]
Replies: 7
Views: 1384

Re: RB4011iGS No Internet available to hosts [SOLVED]

I got it resolved by adding a vlan interface (my internet is on vlan10) Under Interface List" Add: vlan10 ISP subinterface to "WAN", because in NAT Policies, the interfaces have now been combined to LAN and WAN in newer firmware However I have an issue with DNS, when I go to DNS setti...
by nevolex
Tue May 26, 2020 7:02 am
Forum: General
Topic: RB4011iGS No Internet available to hosts [SOLVED]
Replies: 7
Views: 1384

RB4011iGS No Internet available to hosts [SOLVED]

Hi guys, I just purchased a RB4011iGS and having issues connect the hosts to the internet The connection type that my IPS is using is IPoE Vlan10 I used a quicky setup and created a DHCP server, NAT, Public IP is "Automatic". Created a VLAN interface, assigned it to DCHP Client Everything ...
by nevolex
Mon May 25, 2020 2:45 pm
Forum: General
Topic: DHCP override [SOLVED]
Replies: 8
Views: 1338

Re: DHCP override [SOLVED]

Ah, right, something like this?

/ip dhcp-server network server=my_dhcp address=10.0.0.18/32 netmask=24 gateway=10.0.0.2
by nevolex
Mon May 25, 2020 1:46 pm
Forum: General
Topic: DHCP override [SOLVED]
Replies: 8
Views: 1338

Re: DHCP override [SOLVED]

sorry just to confirm as I am very new to Mikrotik. Would that work:

/ip dhcp-server server my_dhcp network 10.0.0.18/32 gateway 10.0.0.2

Where the specific client is 10.0.0.18, second gateway 10.0.0.2

Thank you
by nevolex
Mon May 25, 2020 1:11 pm
Forum: General
Topic: DHCP override [SOLVED]
Replies: 8
Views: 1338

Re: DHCP override [SOLVED]

Thanks Jotne and Sindy!
by nevolex
Mon May 25, 2020 7:34 am
Forum: General
Topic: DHCP override [SOLVED]
Replies: 8
Views: 1338

DHCP override [SOLVED]

Hi everyone,

is it possible to override a dchp gateway for 1 client.

Let's say a getaway for my network is 192.168.1.1, can I change it for 1 client only for 192.168.1.2 (I have another gateway with such ip on the network )?

Thank you all :)

Alex
by nevolex
Fri May 22, 2020 1:39 pm
Forum: General
Topic: Mikrotik Audience Poe IN [SOLVED]
Replies: 1
Views: 722

Mikrotik Audience Poe IN [SOLVED]

Hi all,

I haven't tested it yet, but is there any setting in Ros to enable Poe in or will it work by default?


Haven't received an injector yet to test it


Thank you
by nevolex
Wed May 20, 2020 1:46 pm
Forum: General
Topic: Winbox saved passwords [SOLVED]
Replies: 2
Views: 768

Winbox saved passwords [SOLVED]

Hi everyone, I have 2 Mikrotik devices, for some reason, Winbox only saves one password at a time, so when I try to connect to the second device the password is incorrect so I need to reenter one. Once Winbox knows the pass for the second device I cannot connect to the 1st one as the pass in incorre...
by nevolex
Sun May 10, 2020 12:29 am
Forum: Wireless Networking
Topic: Audience and hap 2 ac wireless bridge [SOLVED]
Replies: 8
Views: 2169

Re: Audience and hap 2 ac wireless bridge [SOLVED]

Thank you for explanation

what I ended up doing is removing all the ports from the bridge and adding them individually, so I can control the ports one by one and not as in only one "all" interface

I adjust the cost path and all worked as expected
by nevolex
Sat May 09, 2020 11:59 pm
Forum: Wireless Networking
Topic: Audience and hap 2 ac wireless bridge [SOLVED]
Replies: 8
Views: 2169

Re: Audience and hap 2 ac wireless bridge [SOLVED]

ap bridge --> station bridge

I created a bridge and then in ports clicked on "+" and added "all" all interfaces have been added at once

Image
by nevolex
Sat May 09, 2020 5:07 pm
Forum: Wireless Networking
Topic: Audience and hap 2 ac wireless bridge [SOLVED]
Replies: 8
Views: 2169

Re: Audience and hap 2 ac wireless bridge [SOLVED]

yes, but the ports are dynamic, I cannot adjust cost path for any dynamic port in the bridge.

Sorry if I am very new to mikrotik, just been having it for a few days:)
by nevolex
Sat May 09, 2020 4:11 pm
Forum: Wireless Networking
Topic: Audience and hap 2 ac wireless bridge [SOLVED]
Replies: 8
Views: 2169

Re: Audience and hap 2 ac wireless bridge [SOLVED]

It's bridged, so 2 simultanious connections won't work at the same time. Bridge spanning tree will decide which one to temporarly disconnect. (based on port STP path-cost) thank you bpwl, however I do I change the priority? you are right, 2.4 is the root, 5 is alternate, but both are greyed out? Th...
by nevolex
Sat May 09, 2020 3:06 pm
Forum: Wireless Networking
Topic: Audience and hap 2 ac wireless bridge [SOLVED]
Replies: 8
Views: 2169

Audience and hap 2 ac wireless bridge [SOLVED]

hi all, I have the main access point (Audience) and it is connected to hap 2 ac wirelessly (station-bridge mode), so hap 2 can provide connectivity to the wired-only devices I am connected to both networks 2.4 and 5, unfortunately, 2.4 network is always prefered, is there a way the hap 2 can use the...
by nevolex
Sat May 09, 2020 7:25 am
Forum: Wireless Networking
Topic: Band steering Mikrotik Audience and other aps [SOLVED]
Replies: 2
Views: 1529

Band steering Mikrotik Audience and other aps [SOLVED]

Hi guys I know it has been a very requested feature, has anyone heard anything from Mikrotik yet, shell we hope for ROS 7? I use "no authenticate" and access lists to manually allow some devices to stay in 2.4 WLAN however I guess in big networks it is not a good idea, even in my environme...
by nevolex
Thu May 07, 2020 1:15 am
Forum: Wireless Networking
Topic: Peculiar setup [SOLVED]
Replies: 3
Views: 1838

Peculiar setup [SOLVED]

Hi guys, I have a Mikrotik Audience, set up in such way: It is connected to a non mikrotik router, all interfaces (physical wireless and physical nonwireless are bridged in bridge 1) There is DHCP client and bridge 1 is assigned to it (network 10.0.0.0/24) There are 3 wireless networks of physical w...
by nevolex
Sat May 02, 2020 11:23 am
Forum: Wireless Networking
Topic: mikrotik Audience placement [SOLVED]
Replies: 1
Views: 1534

mikrotik Audience placement [SOLVED]

Hi all,

I'm planning to buy one, it is meant to be standing on the desk, however, if I put it closer to the ceiling (leave it on the small shelf made for it) will that improve the coverage in general or there is no point?

Thank you
by nevolex
Fri May 01, 2020 9:48 am
Forum: General
Topic: One power supply for 2 devices [SOLVED]
Replies: 9
Views: 2365

One power supply for 2 devices [SOLVED]

Hi guys, I am planning to buy a RB4011iGS+RM it has a Max power consumption without attachments of 18 W and an Audience it has a Max power consumption without attachments of 28 W I would like to use one power brick for both devices, connecting it to the RB4011iGS and using POE out for the Audience. ...
by nevolex
Wed Apr 22, 2020 12:24 pm
Forum: Wireless Networking
Topic: Audience features [SOLVED]
Replies: 7
Views: 3388

Re: Audience features [SOLVED]

Thank you, I was meant to say that the frequencies of the 3rd band are slightly different, not in terms of channels but rather GHz :) 5.18 - 5.3 GHz for clients for by default 5.5 - 5.85 GHz for meshing by default 5.5 - 5.85 GHz is it a standard band or some sort of proprietory for Mikrotik audience...
by nevolex
Wed Apr 22, 2020 11:55 am
Forum: Wireless Networking
Topic: Audience features [SOLVED]
Replies: 7
Views: 3388

Re: Audience features [SOLVED]

Thank you for your advice, in terms of frequencies for the 3rd band which I slightly higher than standard 5Ghz, would the clients be able to see that network?
by nevolex
Wed Apr 22, 2020 11:15 am
Forum: Wireless Networking
Topic: Audience features [SOLVED]
Replies: 7
Views: 3388

Audience features [SOLVED]

Hi guys,

I am planning to replace my Aruba Instant-On with Audience. It is a 3band Ap, however, can the 3rd 1733 Mbit/s band be assigned to clients or it is only for mesh between Aps?

Thank you
by nevolex
Tue Apr 21, 2020 4:03 pm
Forum: Wireless Networking
Topic: DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]
Replies: 7
Views: 3942

Re: DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]

Hi millenium7, thank you so much for your advice, it was indeed the access point which doesn't allow multiple DHCP request to be assigned to clients. I tested with the other 2 access points and got no issues at all. It is an Aruba instant On, sort of semi-enterprise one, not sure what I can do about...
by nevolex
Tue Apr 21, 2020 7:47 am
Forum: Wireless Networking
Topic: DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]
Replies: 7
Views: 3942

Re: DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]

Hi, At this moment the only device that is connected to mikrotik is a PC. I can manually assign an IP to the connected pc and it will work. However what about the devices that don't support that. This is so strange that such a simple thing that a $20 dollar extender can do is so difficult to impleme...
by nevolex
Tue Apr 21, 2020 1:48 am
Forum: Wireless Networking
Topic: DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]
Replies: 7
Views: 3942

DHCP lease over wireless bridge does not work for Ethernet clients [SOLVED]

Hi guys I'm very new to Mikrotik (bought my first one yesterday) and intend to use is as Wireless Bridge to the main router to provide connectivity to a few clients which don't have wifi capabilities. Main Router ))))~~~((((( Mikrotik Router ------->PC Mikrotik is connected to the main router WIFI v...
by nevolex
Mon Apr 20, 2020 1:22 pm
Forum: General
Topic: DHCP client on bridge does not work?
Replies: 19
Views: 15681

Re: DHCP client on bridge does not work?

HI guys, I'm having the same issue, my Mikrotik is connected to the main router via wifi (wireless bridge (pseudobridge mode). Wlan and all ethernet ports are moved to the bridge. I do see a lease in the client section of the ros for the brdige, there is internet available for the router - I can pin...