MikroTik

go4030

How can I add admin access via Winbox on ETH1 via VLAN 10? Thank you. /interface bridge add name=BR1 protocol-mode=none vlan-filtering=yes /interface list add name=ADMIN /interface list member add interface=ether2 list=ADMIN /ip address add address=192.168.36.1/24 comment="ether2 access off bri...

go4030

Recommend using ether2 to configure the device OFF Bridge. Below is an examplle. Change the ipv4 settings on your desktop or laptop to something like 192.168.36.5 gateway 192.168.36.1 /interface bridge add ingress-filtering=no name=bridgegym vlan-filtering=yes /interface ethernet set [ find default...

go4030

Have you tried through Winbox using the MAC address (which can hopefully be found in discovered)?

Thanks. I did try this but it did not work.

go4030

I'm using a cAp ac with RouterOS 6.49.13. I followed this excellent guide to make an Access Point with VLANS. I works great. https://forum.mikrotik.com/viewtopic.php?f=13&t=143620 However, after configureing the device as an access point I can't get into the router anymore with Webfig or Winbox....

go4030

If using Winbox, go to status tab for the selected interface.

Yep, there it is in Winbox Wireless Status tab. Thank you!

go4030

When you used the Unify AP, which frequency did it select ? Which channel width ? Which control channel ? Use the same one on cAP AC (after switching of the Unify :lol: ). And then you can compare apples to apples. This is a good idea. I need to do some research to figure out how to do this. Thanks!

go4030

It only scans once. It finds the frequency with the least number of other devices and sets it. That's all it does.

I know this thread is old but still relevent... Is there a way to know which frequency the "auto frequency" detector selected?

go4030

Hi. Is there a guide on how to setup the optimal WiFi setting for the CAP ac wireless access point to get the best Wifi performance. I realize that there are alot of factors involved. I'm in the US using a US device. Here is why I'm asking... I added a cAP ac to my network and the WiFi performance i...

go4030

Do you mean in RouterOS or SwitchOS? If the latter, please give examples. If the former, I largely agree.

I was talking about RouterOS so we are in agreement. I like SwitchOS for switches and RouterOS for routers.

go4030

BTW, newer version of SwitchOS allow you to name the VLANs on the VLANs tab so it is easier to remember what is what. Also, the checkboxes are colored so they are easier to see. My screen captures were from several years ago and an earlier version of SwitchOS. Thanks for posting your conifgs. Betwe...

go4030

Out of curiosity...why would you like to switch to SwOS? What problem are you running into? Have you seen this help page: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=76415036#CRS3xxandCSS32624G2S+seriesManual-VLANConfigurationExample I like RouterOS and Winbox for the routers but fo...

go4030

I have a CRS326-24G-2S+IN device booting to RouterOS and working as I want with the following simple configuration. I want to switch over to SwitchOS. I need some help making this same exact configuration in SwitchOS. Any help would be appreciated. Thank you. # jan/02/1970 06:36:49 by RouterOS 6.48....

go4030

I'm working with a HAP ac Lite (RB952Ui-5ac2nD-TC) that has wlan1(2GHz) and wlan2(5GHz). I have them both setup with the same SSID. I want to setup an Access List for MAC address filtering for wlan1 and wlan2. The iPhone changes it's MAC Address for each WiFi network that it connects to for privacy....

go4030

From what I read the CRS326-24G-2S+RM and CRS326-24G-2S+IN are identical switches that are just in different cases. However according to the product descriptions the max power consumption are different. Is this correct? What makes them different? CRS326-24G-2S+RM = 24W max power consumption CRS326-2...

go4030

I wanted to add some more about my setup. I don't think I need to give the Mikrotik device an IP address in this setup? I'm just looking for some input on if I did anything glaringly wrong or stupid from a function and security perspective. ********************************** * PFSense Firewall/Route...

go4030

I want to setup an hAPlite RB941-2nD as a 4 port switch with wlan1 as part of the switch. Like this, switch includes: ether1 + ether2 + ether3 + ether4 + wlan1 I started with a blank device and did the following, /export below: 1. Create bridge1 and add ether1, ether2, ether3, ether4, wlan1 2. Setup...

go4030

I'm contemplating if I should take the MTCNA and MTCRE training and wanted some feedback... My Background: I've been using and tinkering with Mikrotik home routers for a few years and have a pretty good grasp on setting them up, making them secure, using Netinstall and Winbox, DHCP/Static/Dynamic, N...

go4030

Check out this post, specifically the section about "Access Point". https://forum.mikrotik.com/viewtopic.php?p=1008185#p1008185 It shows you how to setup a wireless access point with different VLANS for different WiFi SSID. Download the script "AccessPoint.rsc" and you can study ...

go4030

I'm a total Newbie and standing in front of the following problem: Our internet connection is 200 mbit/s up and down and it is easily obtained by a desktop computer connected directly to the modem/router from our ISP. All other devices (around 50) are connected via wifi through Ubiquity routers whi...

go4030

(1) Please provide a diagram of how your routers are connected and more details about your setup. (2) What do you mean by this: "Can I access other 4 router while I connected from main router (CCR)". Do you want to connect to the RB110 router administration through Winbox while connected t...

go4030

Hello, Sorry for this novice question, But I need to switch from Mikrotik Cap AC to Mikrotik CAP Ax. I tried by taking config backup but it didn't work. After restoring, SSiDs on AC are not visible in AX. Settings from terminal section as script I tried to backup and try, but when I go to AX and pa...

go4030

Hi, I'm new here. I have this device and I just want to ask, what is the purpose of its USB port? Can it be used to run a program inside a flashdrive that can reset the device settings without the need for user interaction? Thank you According to the RB3011 product page: "SuperSpeed full size ...

go4030

I made an error in my configuration and could no longer access the router. So, I tried to do a hard reset. I unplugged the power and plugged it in, pressing the reset button just after plugging it in. I waited until the led flased then released the button. It has not reset to defaults and I still c...

go4030

I want to purchase a L009UiGS-2HaxD-IN in the US. I see that it is out of stock everywhere. Is this because it's new or is there a systemic chip shortage issue that will keep it out of stock for a long time? When is it expected to be back in stock? Thank you.

go4030

Wow. Hands down this is THE VERY BEST tutorial and setup guide on VLANS and Mikrotik ROS that I have seen! I attempted to setup VLANs several times before and never could make it work the way I wanted until I read this guide. @pcunite, THANK YOU for taking the time to put together this comprehensive...

go4030

Edit: I got it all working with VLANS using the excellent guide here: viewtopic.php?p=1008185#p1008185

go4030

Thanks anav. That is a very nice and comprehensive firewall document. I like the idea of blocking everything and letting in only what you want. I'm understanding the firewall better now and rewrote mine below. I have 4 isolated LAN subnet bridges. Each consisting of a physical Ethernet port and a Wi...

go4030

I'm configuring a Hap AC Lite from scratch using ROS 6.49.8. I'm using the firewall setting from the default install as a base but modifying them to adjust for my LAN and WAN setup. I had to make modifications in steps 5 (LAN), 11 (WAN), 12 (WAN) below because I don't have those same designations fo...

go4030

No, running CAPs with same MAC address won't work, clients will get pretty confused (it's actually used as B SSID and it needs to be unique in the neighbourhood). So do change it on one of VAP interfaces. Just make sure it's different than anything else in your network. Or delete the VAP interface ...

go4030

I'm using Winbox to setup virtual Wifi Access Points on HapAcLite, ROS 6.49.8. I noticed that ROS is assigning the same mac-address (4A:8F:5A:0B:B6:D8) to ssid=zz5_i and zz5_m as show below. Is this normal and will this work OK? Thanks. /interface wireless set [ find default-name=wlan2 ] disabled=no...

go4030

IP/cloud (if enabled) is always contacting Mikrotik's servers. The time accuracy is low (order of magiture of minutes) and is only good enough to get a decent approximation of date and time (ROS devices don't have RTC, after cold boot they might start from 1st of January 1970). This coarse time mig...

go4030

I want to setup a specific SNTP server that my router can get the time from. I see there are several places in Winbox where the time is referenced. What is the difference between the time settings in each of these menus?

IP/Cloud
System/SNTP Client

go4030

I followed this official Mikrotik video https://www.youtube.com/watch?v=taQ70m0DVYA to setup CAPSMAN and when done the wireless clients could not access the LAN or WAN. It was only after I added "datapath.bridge=bridge" were the clients able to access the LAN and WAN. This step was not in ...

go4030

figured it out.... I had the wireless package disabled. reenabled it and CAPSMAN is back!

go4030

I'm using a hex RB750Gr3 and CAPSMAN is not an option on the main menu. How do I configure it on? I know this devices does not have a built in access point but I want to use CAPSMAN to control other access points connected to the LAN.

go4030

When looking at the specs for the hAP ac2 I noticed there are two max power consumption ratings. What is meant by "attachments"? At first I thought attachements could be POE out devices but this router doesnt support POE out. Thank you. Max power consumption 21 W Max power consumption with...

go4030

Thanks fo rthe replies. I'm going to install it in the closet today. Unless the temperature in the bedroom rises above, let's say, 50C, I don't see any problem :lol: I dont think my closet will go above 50C so I'm good for sure. Off topic, do you live in a cartoon that your closets are 2D? Ha Ha Ha ...

go4030

I'm planning to put a cAP AC https://mikrotik.com/product/cap_ac mounted on the ceiling in a bedroom closet that is approximately 2 meeters by 1 meeter. Since the closet doors are normally closed I wanted to make sure there would be enough ventialtion for the device. Does anyone have any thoughts or...

go4030

Does the cAP XL ac come with a POE adapter?

go4030

I'm setting up CAPSMAN on my router and adding three access points. Im following the manual on the wiki - https://wiki.mikrotik.com/wiki/Manual:Simple_CAPsMAN_setup Step 3 of the wiki talks about setting up the CAPs: "Step #3, setup CAPs". It says that you can skip all of these steps if yo...

go4030

Thanks. This worked nicely. Is it normal for the ip address of the deice to show up in winbox as 0.0.0.0 after flashing a new copy of routeros with netinstall? It wasn't until after I reset the configureates back to factory default in winbox that the ip address went back to 192.168.88.1. I think thi...

go4030

I have a Mikrotik router that was compromized. What is the best/safest way to completely wipe the router of all software and configs and build it back up from scratch to make it look like factory condition and remove any potential malicious things that may have beein installed on it? I saw this mini...

go4030

Thanks for the replies. I get it now. My initial tests were faulty and made me think that the default firewall need to be modified to block ssh. In my testing I ssh into my router from a computer on the LAN to the router's piblic WAN side IP addresss. Since this was working I thought the firewall ru...

go4030

Im using a hex RB750Gr3 starting with the default settings and firewall and I modified them a bit. I disabled the services I don't use and made ssh and winbox only available from inside the LAN 192.168.88.0/24 as shown below (4). I also want to setup a firewall rule that drops all requests from the ...

go4030

Thanks, this is perfect for what I need and I'm going to implement it tonight. Just one question...if my network is /24, I would change the /32 to /24? Just as some background, I'm using the Mikrotik as an AP and it is connected to another router. The AP has an IP address so I can login and administ...

go4030

Is there a way to block router admin access from the Wireless Interfaces?

go4030

Using Winbox I added an "Allowed Address" to my user. I can verify it is there by doing a "/user print". However, it does not show up anywhere when I do a "/export" or "/export verbose" from the terminal. I would think it would be in the export along with all ...

go4030

Im reading this link to secure my router: https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router In this document they talk about dissabling MAC-Telnet and MAC-Winbox. I understand that MAC-Winbox is releated to allowing router access through the Winbox software. What services does MAC-Telnet co...

go4030

I'm very appreciative for all of the help with this. I've got the router up and running and have learned a lot this past week thanks to you guys. I am feeling a small bit more comfortable with ROS and it's staring to get a bit fun. :-) After setting things up and playing with this a bit I thought of...

go4030

Thanks for the reply erlinden. I guess my question was not so much related to Quickset vs Manual setup. It's more related to how to best configure the device for my target applicaton. My applications is as follows: [Wireless Devices] <----RF------> [hAPACLite] <-----Ethernet Cable-----> [PFSense Rou...

go4030

Which is default and then change remaining to this!! add action=accept chain=forward comment="LAN to WAN traffic" \ in-interface-list=LAN out-interface=WAN add action=allow chain=forward comment="allow port forwarding"\ connection-nat-state=dstnat connection-state=new in-interfa...

go4030

Not rules I suggested LOL, perhaps the one who gave you those rules,that leak like a sieve, can help you! ;-).

LOL. You guys are so funny! I'll take a closer look at the rules you posted. :-)

go4030

Thanks again to anav and nkx for the very detailed helpful responses. I got it working and learned a lot along the way. This was exactly what I needed to go to the next level in my understanding about how routeros works. Thank you! With regards to the firewall rules that prevent the networks from ta...

go4030

Hello, I have an hAP AC Lite RB952Ui-5ac2nD-TC. I want it to be just an "access point", sort of like a "wireless/wired switch" with no DHCP server. The hAP lite connects to my main router via Ethernet cable. The main router is the DHCP server so I don't want the hAP AC Lite to gi...

go4030

Thanks for both responses- appreciate it very much. I'm going fishing now... :-)

go4030

Hello, I have a Mikrotik hEX RB750Gr3. I'm starting with the router reset with no defult configuration. I want to setup two seperate isolated DHCP networks (sub nets?) as shown below (network 1 = ports 2/3, network 2 = ports 4/5). I want network 1 and network 2 to be able to reach the internet conen...

go4030

Yes it can. RB962UiGS (hAP ac) PoE-out is passive, 11-57V (same as input) up to 700mA, therefore with standard 24V power adapter about 16W RB952Ui (hAP ac lite) PoE-in is also passive, 10-28V, requires 8W for on its own (and up to 20W total if there is another PoE daisy-chained device) The only car...

go4030

Anyone?

go4030

I’m new to Mikrotik and have a question about PoE power: Can Mikrotik product 1 below be used to power Mikrotik product 2 below over PoE? Thank you. 1. hAP AC RouterBoard, Triple Chain Access Point 802.11ac (RB962UiGS-5HacT2HnT-US) 2. MikroTik hAP ac lite Dual-concurrent Access Point (RB952Ui-5ac2nD...

Search found 59 matches