MikroTik

infabo

I have the decoder through ethernet now, and zero issues.

I am probably missing something and/or do not understand what an encoder is in this context but didn't you say early in the topic, that connecting your TV box by ethernet cable did cause microcuts as well?

infabo

Would be nice to see "Audience BE"

infabo

@samuellsk you tried different browser. But what you most probably not tried: different internet connection.

infabo

Most people use Canvas as it is the forum preset.

infabo

I dont know why the "Canvas" forum theme does not show the quote-author. The polsilver theme does it correctly. I always found this so confusing not knowing who is quoted actually. Can Mikrotik forum admins fix this?

2025-05-09_10-12.png

2025-05-09_10-13.png

infabo

Do you have an update for us? Did you follow Larsa's advice?

infabo

Yes, Mikrotik released a Chateau LTE12 (2025). https://mikrotik.com/product/chateau_lte12_2025 What do you want to tell me? I should replace my existing Chateau with the "2025 refresh"? This can only be a cost factor - but why should anyone buy Chateau LTE12 (2025) with legacy wireless (i...

infabo

Have they not released the Chateau LTE12 (2025) with 32MB ? Yes, Mikrotik released a Chateau LTE12 (2025). https://mikrotik.com/product/chateau_lte12_2025 What do you want to tell me? I should replace my existing Chateau with the "2025 refresh"? This can only be a cost factor - but why sh...

infabo

I hope MikroTik will be able to slow down the growth of the RouterOS package size. Compared to version 7.18.2 (ARM), the size has increased again by almost 100 KB. With 7.18.2, I already had to recover my Chateau LTE12 using Netinstall, and have since downgraded to 7.16.2. It seems that version 7.19...

infabo

The ROS sources provided in another topic seem not to reflect a current/recent release and are maybe 2+ years old. We dont actually know, maybe Mikrotik cherry-picked all these Wireguard commits manually on their Kernel? Regarding the 5.10 LTS argument: As far as I am aware of and looked at the sour...

infabo

Initial "pairing" with another TP-Link device unlocked it.

infabo

Indeed, discussed often. But IMHO these release topics are some variant of /dev/null. You can write until this topic gets locked for discussion. What a waste of words.

infabo

I'd suggest to continue these general discussion on ROS v7 capabilities in a dedicated topic. None of this is going to be improved in 7.19. It's in RC already.

infabo

Never mind. By writing this topic I've got the "idea" myself. All my users have address-restrictions set as well. And there it still was "address=192.168.0.0/24" instead of "address=192.168.0.0/24,fc00::/7".

infabo

Hi forum community, I have already wondered for some months but did not create a topic until yet. Some months ago I configured an IPv6 ULA on my gateway router (ROS 7.16.2). Now when I try to connect via IPv6 address it prompts for the username, but claims "Permission denied". ssh foo@fd00...

infabo

That does not qualify as "completely broken". I believe Normis was the first to use "completely broken"; I do not think it was by a forum user specific to BGP in this thread. A more accurate phrase would be "completely unusable". It was the post by chrismfz where he sa...

infabo

I am now experiencing "SA query timeout" - but it is logged by iwd on Linux Kernel 5.15 and Intel AX200. On the AP it logged a "disconnected. signal too strong". I already reported this to Mikrotik support and I hope I can help to nail down the issue.

infabo

If you run Chateau LTE12 with regular wireless package then you must contact Mikrotik support. This would be a regression case, as RouterOS+wireless if official combination and is the official way to run this device. If the device fails because of lack of space, and I assume you don't have large fil...

infabo

My goal is to manage other CAP devices (including other hAP ax lite and hAP ac lite) To manage "hap ac lite" you need the "wireless" package installed; use the /caps-man to configure it. To manage your other "hap ax lite" you need no extra packages; just use /interface...

infabo

FYI, I filed a feature request for adding CAPsMAN BSSID-randomization support: SUP-185072 FYI Hello, Thank you for contacting MikroTik Support. The feature request has been noted. That being said, it's currently not planned to add this functionality, at least not in the near term. Best regards,

infabo

Go to "Networks", select the network you are currently connectes to, select "OPER" tab. Section is called "PHY SPEEDS.

infabo

I checked today on the Pixel 7 and analiti app. Most of the time it reports OFDM for Rx and Tx. But sometimes Rx switches to OFDMA - for some seconds - as well. Tx on the other hand always stays at OFDM.

infabo

MikroTik could at least train their own model to understand RouterOS script language - without needing to publish any resources publicly, so the unique charm of RouterOS scripting isn't lost when someone stumbles upon rextended’s script collection.

infabo

It's not hard at all. LLM models just need to be trained with formal syntax or grammar specification languages like EBNF, ANTLR, etc and might be complemented with structured representations such as ASTs. There are plenty of tools and well-documented processes for this online. Currently it is hard ...

infabo

Thank you Znevna! Maybe I am naive but I still believe some day Mikrotik does a kind of extended changelog which explains changes in detail like this.

infabo

This is actually pretty nice. Did not know physical eSIM is a thing!

infabo

It's very hard for AI to understand RouterOS scripts because the language is not well documented and can be unpredictable. The forum is full of examples, a recent one: viewtopic.php?t=215841

infabo

There are so many different other dns settings like timeout etc, it is for sure not only the concurrent queries knob involved here. PS: now we know quad9 is problematic and switching to http2 - please add it to the incompatible list here: https://help.mikrotik.com/docs/spaces/ROS/pages/37748767/DNS#...

infabo

flow control auto is not the default. and nobody knows what implications it has, when cap mode is enabled. And even if it is not the cause - it is still garbage config that should be removed.

infabo

Is http2 doh support on the ros roadmap? or even more modern: dns over quic?

infabo

Why did you enable wifi capsman and wifi cap mode? /interface wifi cap set caps-man-addresses="" discovery-interfaces=bridge enabled=yes /interface wifi capsman set enabled=yes package-path="" require-peer-certificate=no upgrade-policy=\ none Both should be disabled. You have no ...

infabo

Let's see if I am able to reproduce or experience the issue somehow again. But right now I am happy that it is working again and I do not have to netinstall the CAP.

infabo

I need to re-check. I do not have access to the Pixel 7 (which supports AX) and can only see on my phone (which does only have 802.11ac). But I see a difference in analiti: yesterday the BSSID was recognized as AC1766 while today it is shown as AX2402. Must be either some hickup in analiti or some c...

infabo

5Ghz is now really broadcasting again - but I see no difference in the output of "wifi/print". For the monitor: on cap: ;;; managed by managed by managed by ;;; CAPsMAN DC:xx CAPsMAN DC:xx CAPsMAN DC:xx ;;; %bridgeLo %bridgeLo %bridgeLo ;;; cal, traffic cal, traffic cal, traffic ;;; proces...

infabo

On my notebook (AX200) I disabled 2.4ghz (via IWD config) because AX200 fails to connect to 20mhz 2.4ghz wireless - and it is disrupting wireless when the notebook trys to roam but fails connecting to 2.4ghz. So I do not use 2.4ghz on this device. But no 5ghz was seen. Then I also checked via Androi...

infabo

Hi dear forum members, I have this CAP (it is a wap ax running 7.18.2) saying it broadcasts 5ghz ssid - but it does clearly not. interface/wifi/print Flags: M - MASTER; D - DYNAMIC; B - BOUND; R - RUNNING Columns: NAME, MASTER-INTERFACE # NAME MASTER-INTERFACE ;;; managed by CAPsMAN DC:xx%bridgeLoca...

infabo

I don't know either, but I get these message as well. It is NextDNS. 04-26 15:19:45 dns,error DoH server connection error: remote disconnected while in HTTP exchange 04-27 09:28:48 dns,error DoH server connection error: SSL: internal error (6) 04-27 10:36:53 dns,error DoH server connection error: re...

infabo

Regarding the original question, it could be OFDMA is probably not enabled by Mikrotik. I just checked on the Pixel 7 (connected to wap ax) by using the analiti app and it reports using OFDM.

infabo

Interesting read: https://www.smallnetbuilder.com/wireles ... rk-part-1/

infabo

Better contact Mikrotik support directly to get a response.

https://mikrotik.com/support

infabo

OFDMA is part of 802.11ax standard. Why do you doubt it is not already there?

infabo

I just found out today that Unifi offers something called "unifi drive" which is some NAS solution since Q4/24 or something. So quite new as well. I did not look at its specs in detail nor did I compare the features but one thing I can definitely say: the user interface for managing these ...

infabo

:resolve now has a "type" parameter so you can do this: /ping [:resolve type=ipv6 domain-name=google.com] count=4 Why does ROS ping not just simply add a flag? Something like: /ping google.com -4 /ping google.com -6 Or more ROS style: /ping address=google.com ip-version=4 /ping address=go...

infabo

add action=drop chain=input comment="defconf: accept ICMP" log=yes log-prefix=fw-3-drop-icmp protocol=icmp This filter rule was modified. In default configuration this is "action=accept" and not "drop". See the defconf comment. So someone already altered this. The othe...

infabo

but only allowed zabbix-agent via NAT Show this config as well. Maybe even your whole anonymized config. Not only your firewall filter. These look pretty default (as I view from my phone) aside that lmt 8081 rule. But maybe interface lists messed up and/or dstnat config is wrong nmap x.x.x.x Starti...

infabo

I guess Mikrotik underestimated how much work it is to rewrite Winbox - especially when disrupting several workflows and dismissing/ignoring industry UI/UX standards.

infabo

I guess you need to update your support ticket as well.

infabo

Maybe another wireless driver update fixes it.

infabo

This problem sounds so trivial - it makes me wonder why Mikrotik is not fixing it for so long.

infabo

It might actually happen sooner than you'd expect. Word is Mikrotik has recently brought on about 15 people, supposedly working full-time on developing business-oriented features.

loloski, you mean this April's fool joke?

infabo

Mikrotik added "Wireless specifications" table on wAP ax product page today. See https://mikrotik.com/product/wap_ax

infabo

Any word from Mikrotik for controllers...... OPNSense has, and have been enhancing their Central management platform. https://docs.opnsense.org/_images/OPNcentral_hosts.png This interface even looks structured and "easy to use". Please Mikrotik, when making a controller then please try ta...

infabo

As I have said multiple times, this forum is a deep dark corner of geeks, amongst millions and millions of other people that have never seen this forum in their life, but are using mikrotik products. It is irritating that you see it this way. A bunch of geeks. I visit the "active topics" ...

infabo

FYI, I filed a feature request for adding CAPsMAN BSSID-randomization support: SUP-185072

infabo

I file a feature request - for reference: SUP-185090.

infabo

use create-enabled instead of create-dynamic-enabled (which is the default).

infabo

When you file a bug with us you receive a number that you can share publicly and that other customers can use to look up the basic information on the bug Mikrotik support would even benefit from this. Now bugs get reported over and over again. Because nobody knows if it is already known to Mikrotik.

infabo

It's company policy and I can't comment on that, but what I can tell you personally, is that we get hundreds of "bug reports" every day, and 99.99% of them are bad configuration or misunderstanding about something. If all these would be turned into bug reports directly, it would be utter ...

infabo

I guess they attach supout.rif and other sensitive information in their bug tracker.

infabo

Thank you, rralex89!

infabo

There seems to be an importer for phpbb: https://github.com/discourse/discourse/pull/17641

infabo

Good decision to move away from phpbb. Many popular projects use Discourse.

infabo

How about CAPsMAN? Schedule script on each CAP?

infabo

My wap ax has factory version 7.15. That is after 7.13. Should I now be concerned?

infabo

Is there a reason why you recommend 7.11 instead of 7.12? You said they messed starting with 7.13.

infabo

Answer for OP to use flood ping:

system/device-mode/update traffic-gen=yes

infabo

But once 7.19 stable released and someone encounters the 0 space issue after upgrading from e.g. 7.16 (this version consumed remarkable less flash), you now can downgrade instead of netinstall your device.

infabo

I think the issue erlinden probably is referring to is random MAC addresses enabled on some clients that causes problems.

infabo

But only if you enabled routerboard device-mode feature flag before to change boot method.

At least downgrade should be possible now.

infabo

*) system - fixed "/system reboot" when the system disk is completely full;

Nice to see this! Thank you!

infabo

My root bridge has "priority=0x7000". But regardless of this setting: it worked < 7.18. The weird thing on my problem is, that the bridge with constantly switching port-state between forwarding/learning is/was not even running 7.18 (in fact: 7.17.x). All was fine, as long all my devices ha...

infabo

The dumbest problem was this hidden 1,5mb flash usage. This is the second time here in last days I read such an experience report. Mikrotik put 16MB flash in their devices and then forgets to include garbage collection mechanisms. It is their job to do that, as - different to a regular Linux - we ca...

infabo

The idea is, once this BTH is set up by person in House 1, you can establish a BTH connection from anywhere - e.g. from House 2 - to connect and hopefully can access your RB5009.

infabo

My devices never rebooted or kernel paniced. A sole RSTP/bridge issue. I always resolved it by toggling ethernet interface to get port to forward again. Now my devices run 7.15.3 and the issue never appeared again. One could think it is something from 7.18 causing it........

infabo

I assume you need the product. Write to support@mikrotik.com with a detailed bug report of your problem. Then you can be sure Mikrotik heard of the problem. This is just a community forum - no Mikrotik official needs to read these topics.

infabo

"yeah, the device is compromised, traffic-gen away!" This is actually what concerns me the most. One of the key features of device mode is **flagging**. According to the documentation: flagging-enabled (yes | no; Default: yes) The device will perform a configuration analysis, and if trace...

infabo

Sounds like a kind of "secret key" (rather than a password). Good idea. But won't help for already deployed devices.

infabo

As I already suggested, wouldn't it be enough to use the factory password for security? As dang21000 points out, not all devices have default factory password. For the ones that do, if they have already been deployed and the factory password was changed, and we didn't keep a record of the factory p...

infabo

mkx answer was perfectly accurate and fine for what he explained. You can't make him responsible for not having superpowers inspecting your CRS from just little to no info. How could one expect a packet sniffer pcap file eating up internal flash which is not visible when executing /disk/print? This ...

infabo

@AlexandruL Maybe you also experience this? viewtopic.php?p=1134698

infabo

This means, when doing netinstall and a custom script, the device mode restrictions still apply? So one cant setup a device from scratch and disable all device-mode flags by scripting? If yes, this would be bad.

infabo

Originally device-mode limited some things. Okay, most of these were newly introduced anyway, like containers. Then device mode limited more things after an upgrade. Okay, we have to reset/unplug everything. Please stick to the facts. Under the old "enterprise" device mode, everything was...

infabo

Yes, i'll wast time to play between with downgrade, change and re-upgrade.... that a good idea.
I want to reduce my parts count... on edge router, because not possible now too.

Your choice: travel France or press button or downgrade/upgrade.

infabo

- I already have tons of Mikrotiks in production that use most of the features that now suddenly became disabled with latest firmware upgrades. Maybe you can name these features and use-case you have/had which are now not possible anymore after 7.17 device-mode changes. Mikrotik needs some real-wor...

infabo

You can still downgrade to 7.16, change the cpu speed accordingly, upgrade to 7.17+ again. Problem solved.

infabo

Confluence is not ideal for documentation. Maybe OK for some small business 10 pages wiki. But for this case it is actually too expensive.

infabo

ISP router + any AP =

?
E50UG + any AP =

?

E50UG config looks like default configuration.
You APs need to be DHCP client.

infabo

If there is a computer in House 1 it would be easiest to use something like TeamViewer to get remote access to the computer, from where you can configure the RB5009 using Winbox.

infabo

But could You do a quick heads up here? Just a little list of small bullet points, Mikrotik style? :D I have already done that in almost every release topic after 7.16 so no need to repeat it. My support ticket was created July 2024 and has not received a reply after August 2024 despite several upd...

infabo

maybe related: viewtopic.php?p=1135453

infabo

Because there are multiple APN items.

/interface/lte/apn print

Choose your number.

infabo

7.15 does not receive any fixes since 7.16 stable was released. So it is pointless to say, it takes several months. It is over. 7.15 is EOL.

infabo

wap ax has only 256mb RAM. So the wap ax has already less physical memory as your observed memory usage on ax3.

infabo

Thanks! The configuration shown is very informative for me.

infabo

@mkx Indeed, I would really complain if I got more than what the datasheet specifies. 😅

regarding LMP 5G, yes has 16MB, but it is an 5G device only. It does the job. But 32MB would not hurt. It is another device that prolongs the 16MB era.

infabo

Interesting, this is not indicated on the product page (yet?).

infabo

While connected to ISP direcly What this means exactly? You directly connected to ONT? Or does your ISP already supplied you some kind of router? If yes, then keep using that and just connect your CRS to the router, remove all the DHCP server config from your CRS (except dhcp-client for the CRS its...

infabo

I think Mikrotik already realized that 16MB is a little tight. There are refreshes of existing device like Chateau LTE12 (2025) now with 32MB flash. There are other devices in the pipeline, see https://forum.mikrotik.com/viewtopic.php?t=213245#p1131190, now with 32MB flash as well. Good to see Chate...

infabo

Or use some ax device as AP. The day Mikrotik releases the real successor of "cap ac" - I replace my cap ac in a second. They made a "wap ax" that looks like "wap ac". But they designed a "cap ax" that looks like an UFO or oversized smoke detector - instead o...

infabo

So basically: on a 0815 CAP traffic usually enters on ether1, goes straight via CPU to wifi interfaces - and back. There is no switch offload possible anyway, right? May be a different case, when someone connects something on ether2 on a "cap ac" and does vlaning. In such a case, does this...

infabo

This post has the recent (7.18.1) measurements with Bridge VLAN Filtering that I made on my hAP ac² (also compared to the setup with /interface ethernet switch), no WiFi interfaces though. https://forum.mikrotik.com/viewtopic.php?t=215359#p1132188 Bridging between two ports at wirespeed with Bridge...

infabo

@teslasystems I am not able to reproduce this bug. But I have to admit, I only have ROS 7.13.5 for testing this right now. Maybe the bug does not exist in that ROS version. I made sure to enter the TAB character and make terminal height as small as possible. But no matter how hard I try, I don't see...

infabo

Hi, I have opened up the firewall docs and added any rule I found there or maybe not and then I have this particular drop rules here and my question is: what is the bigger picture?

Sry, but so much unknown variables. Nobody can answer your vague questions.

infabo

You have tested different wireless devices already?

infabo

What do you mean by stopped working today? Is the ssid24 still visible when scanning on client? If yes, does it allow to connect? When yes, can you reach the AP e.g. via ping?

infabo

I will be shutting down the btest server I maintain on April 1'st 2025

You might want to clarify that this isn't an April Fools' joke - just to be safe!

infabo

According to your export the interval is 30m (not "every 3 minutes" as claimed in original post). But this is not your problem. I would start over new. Or at least remove "thr-loss-percent=90%" and "thr-loss-count=50". The defaults are way more tolerant. thr-loss-percen...

infabo

Then show off your netwatch configuration. We don't see it.

infabo

What matters is the "terminal emulator", the part that sits on top of the SSH/TELNET/SERIAL connection and interprets the incoming characters. From my experience, I would have said the same. I worked with Windows for a long time (back when WSL didn’t exist) and had countless display issue...

infabo

You get better upload speedtest results when connected on Ethernet? Do you see a difference when connected to pc5 vs pc2 wireless?

infabo

You probably confused. Windows KiTTY is a PuTTY clone (or whatever - https://www.9bis.net/kitty/index.html). I am talking about https://sw.kovidgoyal.net/kitty/ Get some WSL terminal and you are good - even on Windows. It is not a ROS bug per se. Maybe their SSH server is not fully compatible with W...

infabo

Yes, this is more a TAB vs SPACES debate. It should be possible to use TABs and not mess the output of Winbox Terminal window.

infabo

The tab character is often preferred by those who want the flexibility to adjust indentation to their personal preference.

infabo

To me, the TAB character feels like an archaic relic from a time when every single bit had to be carefully conserved.

infabo

Get some serious terminal emulator (not putty or winbox terminal). Then you won't see/have any issues.

URXVT

2025-03-25_09-12.png

KITTY

2025-03-25_09-14.png

infabo

Clean up your wifi config. Disabling managagement protection may be okay. But manual tx-power is probably your issue. Or the manually set MTU. /interface wifi set !configuration.tx-power [ find default-name=wifi1 ] /interface wifi set !configuration.tx-power !mtu !security.ft-mobility-domain !steeri...

infabo

This cannot go on indefinitely. Devices with only 16MB of storage should not hinder the evolution of RouterOS. Decisions made in 2015 should not stand in the way of further development. I would gladly give up 100 to 150 KiB of my flash for the LUA interpreter. In exchange, you can move SMB entirely ...

infabo

...instead of adopting a mature scripting language like LUA.

infabo

Even an issue since v3? Now one more argument to use CLI. Or improve Winbox 4. No syntax highlighting either.

infabo

Indeed, no more broken requests to find in developer tools network inspector!

infabo

It is not all visible on the video, but it looks like you are scrolling with the mouse-wheel on ~00:04 in the winbox4 window - but the log keeps on scrolling. This looks like a bug. Or you are using an old/outdated version of Winbox4 (IIRC log freeze was implemented in some later betas).

infabo

There was a topic on the availability thing: https://forum.mikrotik.com/viewtopic.php?p=1119216 Maybe Mikrotik is currently testing a newly developed product (like pe1chl said), a web application firewall. Still needs so fine tuning but then it will make Cloudflare, Sucuri & co. a though competi...

infabo

+1. Very valuable for Mikrotik.

infabo

https://fccid.io/document.php?id=7634095

Here you can see it very well.

infabo

Policy routing would be the simplest option. https://help.mikrotik.com/docs/spaces/ROS/pages/59965508/Policy+Routing First create routing table for VPN or use a VRF interface. then add routing rule(s) src-address matching and action=lookup-only-in-table. Using policy routing has already "kill s...

infabo

I still had one 7.18.2 device on my network acting in station mode (map lite connecting my LAN Lexmark printer on WLAN). I disconnected the map like 10 days ago and since then have not experienced this bridge RSTP issue again. It seems like something in 7.18.x cause this problems. There is still a h...

infabo

Never seen an explanation but read often, so I ask now: how come that v7 is slower than v6?

infabo

You chose manual upgrade: https://help.mikrotik.com/docs/spaces/ROS/pages/328142/Upgrading+and+installation#Upgradingandinstallation-Manualupgrade The easy way is the standard upgrade. For everything else it is always advisable to read the documentation. ROS is infamous for the non-obvious. As I jus...

infabo

I am not 100% sure, but log/print should tell you the reason why it did not upgrade successfully because of missing packages.

infabo

There was this post here https://forum.mikrotik.com/viewtopic.php?p=1134367#p1132144 that got my attention for the - until that - unknown clear-history functionality. Today I found out one detail of "console/clear-history" which I do not understand. I was browsing the changelog and found t...

infabo

Considering how old Mikrotik is, why dont they have a usenet server? But I guess I know the answer: back in early 2000s PHP was the new kid on the block. The web was suddenly all PHP. phpBB got popular - so why mess around with decades old usenet? Now, 2025, still running phpBB, is now a legacy piec...

infabo

Please attach a screen video showing this behavior. I am curious too.

infabo

This has nothing to do with phpBB IMHO. Even static assets like https://forum.mikrotik.com/styles/canvas/theme/images/mikrotik_youtube_banner.jpg or https://forum.mikrotik.com/images/smilies/icon_confused.gif sometimes don't load here at my side. Opening https://forum.mikrotik.com/styles/canvas/them...

infabo

"-s userscript Pre-configures the device with the provided configuration (text file in .RSC format), removing the existing configuration before applying the new one. This configuration also replaces the default configuration." https://help.mikrotik.com/docs/spaces/ROS/pages/24805390/Netins...

infabo

It would be very helpful if new features in the changelog were described in more detail. Often, they are only mentioned briefly, making it difficult to understand them fully. In many cases, the documentation lags behind, and some new features in stable releases are not documented at all. This is not...

infabo

As I understood it, the product idea started with: Genomics researchers: we need a network storage. Mikrotik: challenge accepted! When you have a ROS - everything is a router. But I like the idea/intention to combine router/storage and save on energy. And as Druvis said, maybe more useful as edge st...

infabo

infabo

No matter,
now DNS-over-QUIC is used.

ROS supports DoQ???

infabo

the drive behind RDS: https://youtu.be/LGAwubEU92A?si=pkeK0dBYeN_u6Uii

infabo

Thats good. Chateau LTE12 is ROS v7 only and is still not discontinued. So, in this regards, many happy years supporting 16MB flash platform to come.

infabo

there is flashfig for such purposes

infabo

Reverting changes seems to be common in recent releases. e.g. introduced hw acceleration for openvpn just to revert it for some ciphers after several feedback. I mean, is this really not testable? Rhetorical question, of course this could be tested beforehand.

infabo

Mikrotik support acknowledged the issue today.

The issue has been reproduced, we look forward to fixing it in upcoming RouterOS versions.

Currently, the provided type is ignored and http-01 challenge is used.

infabo

It is. And actually worked without port 80 open when I first issued the certificate with type=cloud-dns. This was introduced in 7.16. But maybe is broken now. I dont know.

infabo

https://github.com/StevenBlack/hosts

There are several variants of hosts lists. Choose one that is not that aggressive in blocking.

infabo

Space issue primarily concerns ARM platform.

infabo

The last time I created a LE certificate by /certificate/enable-ssl-certificate type=cloud-dns it worked. This was somewhen in dec/24. Certifcate expired beginning of march/25 IIRC and was never renewed automatically. I found out by visiting webfig and saw the SSL warning and cert-info said it was e...

infabo

Next: test with AX again to verify.

infabo

Of course. But you can give a second life to a ac2 which otherwise would be thrown into trash bin.

infabo

I am Forum Guru but no Mikrotik guru.

infabo

There is a lot of truth in what G00dm4n says.

infabo

Glad to hear that! Some people in this forum seem to want ARM devices with 16MB flash, like the ac2, to "fade away" - despite the fact that these devices perform pretty well with the new wifi-qcom-ac driver.

infabo

Well, he tried to login via webinterface and SSH. I guess updating Winbox will not change anything.

infabo

Not of real help, as this issue seems to be somehow DNS cache related; but it general a nice tool to find the fastest DNS near you: https://dnsspeedtest.online/

infabo

The 2g-probe-delay introduced in 7.18 maybe of help to resolve the issue finally: viewtopic.php?t=214567#p1130445

infabo

Waiting for the usual "RAM is to be used" reply.

infabo

pe1chl, no need to always assume the worst case. Of course, extracting an 8KB (compressed) driver into a separate package makes no sense - that would be nonsense no matter how you look at it or what the actual overhead is. The point is simply to take the next logical step. Splitting AX and AC driver...

infabo

What's new in 7.16 (2024-Sep-20 16:00):

*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);

DNS-01 challenge only for the mynetname.net domain.

infabo

This is Mikrotik fault, and they know it. They can easily split wifi-qcom-ac package for IPQ4019 only, but they are not willing to do. It's in vain, it's in vain, it's in vain.

see viewtopic.php?t=202423&start=600#p1054046

infabo

Dont know what the 2012 standard covers but otherwise yes. Woooow! Seeking for compliance with standards that are almost 15 years old? That's a little scary, but also a little exciting. fischerdouglas, I am sure you've seen this little detail: (introduced in v7.19beta2); So no, not covering 2012 st...

infabo

It now gets annoying: 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 discarding 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 learning 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 forwarding 2025-03-13 16:36:35 route,debug,calc GENERAL: route/calc/merge/input/route 2025-03-13 16:36:35 route...

infabo

My guess: supporting H2 blows the ROS bundle out of 16MB flash.

infabo

I have same WiFi disconnects issues, even 7.17 and 7.17RC8 not helps at all, and I can’t roll back to 7.14.3 because Factory firmware for my board is 7.15.2. Why Mikrotik engineers can’t solve this mass problem for so long? UDP: I finally downgraded it, but don’t want staying on 7.14.3 forever, bec...

infabo

@nmt9000 active window had a blue border around the whole window before.

infabo

I see you no use dark mode.

infabo

Try setting DTIM = 3. That's a recommended setting years ago to keep Apple Devices connected to Wi-Fi. Not sure if It's actually still the case, but it *could* help with saving battery. And if still problems can you try disabling FT? You are using different SSIDs so it doesnt even work :D Also chec...

infabo

Maybe of help: viewtopic.php?p=1132293#p1132144

infabo

I would have created a supout.rif and sent it to Mikrotik support. Too late unfortunately. This could have been very interesting. Maybe you were at 7.8.1 and not 7.18.1?

infabo

Damn, very pity. Now even active window frame is not visible.

Indeed. Why was this focus border removed? Especially as it adds inconsistency. Selecting a e.g. table line still has this blue focus border (on dark theme). But selected/focused window not.

infabo

If someone could hear us out... We are in deep trouble with Mikrotik. We bought 12 CCR2216's to replace our aging 1072 fleet (we are a mid sized FTTH/Wireless ISP). @elcano89 you surely bought the 12 CCR2216 units directly from an official MikroTik distributor. Since you have already created a Mikr...

infabo

On my cap ac - which I very rarely log in - it went from 407KiB to 472KiB. And from 220KiB to 284KiB on my D53G-5HacD2HnD (this device was netinstalled with keep-configuration a few days ago). This is awesome! I did not even know that history can be cleared. There should be an option: "enable v...

infabo

That is both my hope and my assumption.

infabo

I would not expect fixing bugs in an existing feature to result in a massive code expansion. If that is the case, I would submit the code for a review. I agree with the statement regarding features. However, why do certain features have to be packed into the base package instead of an extra package?...

infabo

Everything here requires either time or money, not just keeping the flash size small. Please take a look at the changelog and see where the effort goes in recent versions.

infabo

292kib, cap ac + wifi-qcom-ac. viewtopic.php?t=215048#p1130419

infabo

Just netinstalled this device. 7.18.1 is now running, but flash-space is tight. version: 7.18.1 (stable) free-hdd-space: 44.0KiB total-hdd-space: 16.0MiB board-name: D53G-5HacD2HnD platform: MikroTik And after a reboot I now see: 2025-03-04 00:39:54 system,error,critical could not save configuratio...

infabo

Here has someone this "learning/discarding" flood as well. viewtopic.php?t=187723

But over there it appears right after connecting. Here it took 2-3 days to trigger the issue.

infabo

The issue happened again today. Despite both devices currently on 7.17.2. I was right watching a video stream when wifi dropped. So I could look at the logs right away. Started at "06:18:50". 2025-03-09 05:33:52 dhcp,info defconf assigned 192.168.0.4 for xx:xx:xx:xx:xx:52 2025-03-09 06:02:...

infabo

Sure you can do that. But you won't make friends.

infabo

MikroTik could keep the existing DNS as it is but offer an extra DNS package that, when installed, replaces the built-in DNS service. For example, OpenWrt provides lightweight versions of services with limited functionality and size, but if you have enough space, you can install the full version. Mi...

infabo

Is this even a thing when no VLANs are in use? I guess not, because the only BPDU packets should be from (implicit) VLAN 1 right?

infabo

Cap ac is only connected to the Chateau via ether1.

Cap/ether1-----------Chateau/ether2

infabo

Even Druvis mentions the SWAP can be used not only for containers: https://youtu.be/wJw50I7STck?t=131

infabo

To a certain extent, even the "stable channel" can be considered a form of testing. So, BartoszP, your advice should not be limited to the beta version.

infabo

Was hoping there was something magical that could do the trick, I will have to bite the bullet. Netinstall is the magic bullet. You can select "Keep old configuration" in Netinstall GUI. Netinstall CLI for Linux keeps the configuration by default. So you won't lose anything of your config...

infabo

Thank You MikroTik team form new experience with RouterOS with 7.19beta4 version! :) I have bricked (ROS 7.19beta4 bricked) my home RB493G RouterBoard!!! I had to netinstall and back to stable ROS 7.17.2, because RB was booting.....booting.....booting... loop... Which ROS version did you upgrade fr...

infabo

b) Alternatively, downgrade the D53G-5HacD2HnD to v7.13.5, which tolerates the extra BPDU packets and creates a stable RSTP tree despite them. You're pointing out something that I noticed a long time ago but was never able to identify the cause of. Up until version 7.13.5, I had no issues with RSTP...

infabo

The only device connected to D53G-5HacD2HnD/ether2 is the cap-ac.

/interface/ethernet/switch/print 
Columns: NAME, TYPE
# NAME     TYPE        
0 switch1  Atheros-8327

infabo

I wonder if MikroTik has really thought about worst-case scenarios when developing RDS and ROSE. It’s easy to assume everything will work perfectly, but reality is often more complicated. That’s why setting up a NAS on a standard Ubuntu system isn’t simple - there’s a reason why special distribution...

infabo

PS:
D53G-5HacD2HnD running 7.17.2
cap ac running 7.18.1

infabo

Could this be related? viewtopic.php?p=1131360#p1131360

infabo

I think mikortik need to rework the documentation to be like netapp or ansible, release a doc per version and redact detailled upgrade paths and différences, lost/add/changes between versions.

THIS

infabo

Thanks for your answers! Especially the script from optio can be a future reference for everyone searching the forum.

infabo

Hi guys, You can use safe mode Here . You can undo all changes in one step. I have to say: similar also happened approx. 1 or 2 years back while I was in safe mode. I enabled safe mode, did at max. 10 changes or like. Then I left safe mode. It did undo most - but not all changes I have made while I...

infabo

Dear fellow forum members, Today I had a weird experience. Using my D53G-5HacD2HnD as capsman and a "cap ac" connected/managed by the capsman. cap is connected by eth2. Today the connection to cap was interrupted. Never seen this before. The logs on capsman device was flooded over a longer...

infabo

What OP wants is a command to make the CAP's LED blink on demand. Like having 10 caps mounted on the ceiling side by side and you don't want to find out the hard way. Should be doable via "user-led" - if cap ax has this one available. Did not try out, but could be: /system/leds/add leds=us...

infabo

Based on the posted configuration, I would say this is a configuration issue.

infabo

There is always something to be said about the configuration mechanism. Some people prefer a system where all config is only done in RAM and a "save" is required to commit it to nonvolatile memory. Some systems have a "transaction" mechanism where you can change different parame...

infabo

One of the possible causes is that you have mangle mark-routing rules that put packets of a connection in a routing table other than "main", but did not try to exclude those connection from the fasttrack rule. It is written everywhere in the Mikrotik docs, that fasttrack only works on mai...

infabo

Anyone an idea? Otherwise I'd file a feature request at Mikrotik support.

Search found 2696 matches