MikroTik

infabo

I have found a single advantage of WinBox 4: I use serveral workspaces (under Linux) and I always have like 6 WinBox sessions open to several routers. Unfortunately with WinBox 3 when the connection to a router is interrupted even for just a very short time, the session closes and when it is set to...

infabo

I have no problems running winbox4 on quite old laptop (~10y old) with only 6G of RAM. I just mean that it's consuming 10 times more compared to version 3 for no reason. If you don't have many opened apps, then of course there will be no problems. But when a memory is already low and you have 10 op...

infabo

You can develop an awesome piece of software in Qt. No need for PureBasic (which I had to google first because I never heard of).

infabo

These are common issues with modern GUI software - they often use a lot of RAM, put a heavy load on the CPU, and can feel slow to use. That’s just how things have evolved over the past 20 years. Just look at Windows and other Microsoft software. Still, one thing that shouldn’t be done wrong is the d...

infabo

Well, then Mikrotik needs to update their wap ax brochure....

infabo

What I do not understand: a change from country=Germany to country=United States makes a difference of "10mbit or sometimes less" to "400mbit". There must be something wrong.

infabo

I can't find its radiation pattern, is it unidirectional?

It is 180°. Front side.

infabo

Newsletter #125 it says: "Runs entirely on our own RDS and hardware"

infabo

Mikrotik is already dogfooding their RDS. I suppose TikTube is running in a container for example. That's probably why we see so many changelog items in these areas.

infabo

7.19.2 when? Too much teaser

infabo

You all right. I feel stupid relying on a company whose main focus is selling hardware devices, making the software aspect kind of like Cinderella. Microsoft is selling a software called Windows and making it run flawlessly on any hardware can be a challenge as well? So you really want to make Mikr...

infabo

It should be not too much effort to create a support ticket and include a minimal example for reproduction. And because Mikrotik has no public bugtracker we/you are free to file as many support requests we like or think are needed to report a bug.

infabo

Stable betas are the foundation of any stable release.

infabo

Shouldn't it say "chain: postrouting" in right top corner?

infabo

I think MLO and Preamble Puncturing are the keys.

https://documentation.meraki.com/MR/Wi- ... ical_Guide

infabo

Checked yesterday Map running 7.18.1 incl wireless still has over 3.3Mb free. I was talking specifically about the wifi-qcom-ac package. This package only works on ARM devices. So I meant that using routeros together with wifi-qcom-ac no longer fits on many 16MB ARM devices, and now we have to use ...

infabo

Why not publish plain svg?

infabo

routeros package size is increasing. At a point even routeros+wireless is going to run into trouble.

infabo

To raise more awareness and draw attention to the issue, I’d like to share links to related topics here.

viewtopic.php?t=217274

infabo

Maybe "fetch,raw,write" to log the request.

infabo

There is a dedicated topic: viewtopic.php?t=217047

infabo

Cheers Normis, now testing on Hap_AX2 and Cap_AX WiFi results are as expected.

Did you have different bufferbloat test results with previous driver?

infabo

I better wait for 7.19.2
First comes 7.20 beta then 7.20 rc and
then we wait for the new driver in 7.20 stable

According to Normis already in 7.19.2: viewtopic.php?p=1146875#p1146875

infabo

https://help.mikrotik.com/docs/spaces/R ... witchchips

infabo

Sounds like same symptom: viewtopic.php?t=214297

infabo

Like this new video on 7.19: https://tiktube.com/w/xvMuLqJLotAD2pTJGYqrEA In changelog we read: *) console - added on-error to "for" and "foreach" loops; OK. There is "on-error" for for/foreach now. But how it behaves and what is it meant for? Yeah, skip to 1:56 in the ...

infabo

I could probably live with Fast Ethernet. But would I buy new hardware in 2025 featuring Fast Ethernet ports? Nah.

infabo

Took some years, but Normis answered OP's question ("Wifi 7 - MikroTik when???") over here: viewtopic.php?p=1146927#p1146927

infabo

No thank you. I better wait for 7.19.2.

infabo

A perfect world is a high and admirable goal. But maybe there’s something more pragmatic, like splitting up the wifi-qcom-ac package possibly.

infabo

I hope so. These frequent disconnects ("MAC@wifi disconnected, too strong signal, signal strength 158") are one of the reasons why I cant use wap ax as a daily driver. In my experience the value of the signal strength is incorrect (signal should be less than -90dBm or something around). A...

infabo

I hope so. These frequent disconnects ("MAC@wifi disconnected, too strong signal, signal strength 158") are one of the reasons why I cant use wap ax as a daily driver.

infabo

Romania - the land of fast internet. Here in highly developed Austria, we have 4 Mbit ADSL in the countryside and 4G LTE with very unstable speeds because the cell tower is heavily overbooked. Right now, there’s a poll on whether to build FTTH - but at least 60% of households need to take it. I doub...

infabo

I believe Mikrotik support engineers or developers are probably not allowed or able to investigate bugs independently and on their own initiative. It likely needs to go through the support helpdesk first, where it gets triaged and prioritized before being assigned accordingly. There is surely a defi...

infabo

@sinisa you can show your support over here viewtopic.php?t=217142

infabo

So installation instructions in NextDNS are missing this step? NextDNS instructions are fine. They tell you to unset any dns servers (/ip dns set servers="") and add static dns entries for their DNS servers. With ROS 7.19+ you can skip the certificate import step. Just make sure "/ce...

infabo

Yes. viewtopic.php?p=1146058#p1146044

infabo

Currently there is no "Last IP" column in the wifi registration table. But would be nice to have it. I filed a feature request: SUP-190043

infabo

Anyone know what this (new?) menu does? I can't find it in wifi documentation.

/interface/wifi/radio/settings

There you can set 2 settings:

/interface/wifi/radio/settings/set external-antenna=<yes|no> wifi-band=<2.5GHz|5gHz>

infabo

Ok, people need to adjust their scripts now. Instead of giving dynamic entries that are based on static entries a counter suffix/prefix, it is now not unique anymore to use the name like winbox anymore? It looks like someone has already encountered this issue: https://forum.mikrotik.com/viewtopic.p...

infabo

Please don't worry. It seems there was an app called "Tik Tube" that claimed users could earn money, but this has no connection to MikroTik's TikTube - it's simply a coincidence in naming. There's no reason to doubt Trustpilot or feel the need to justify your decision not to engage with it.

infabo

I like TikTube. Very fast, awesome video quality and clutter free.

infabo

infabo

Just entered "tiktube" on google and found this: https://www.trustpilot.com/review/tiktube.com

infabo

The only thing we can really do is to raise awareness about the issue and maybe share a few ideas on how it could be solved on a more abstract level. Unfortunately, that’s all we can do. Normis has mentioned several times that only a tiny fraction of MikroTik users ever visit the forum. So in the en...

infabo

It is described over here: https://mikrotik.com/support

infabo

Also -- why is there |6 within IP v4 and IPv6 button images.

There is no "|6" inside these icons. It indicates a node in a bus network diagram IMHO.

infabo

Thanks for checking, Paternot. It is the only application with these rendering issues - and I use quite a lot of different applications for my daily work. Maybe something with QT is misconfigured on my system. I am on xorg, modesetting driver on Intel graphics. edit: there is a tool called "qt5...

infabo

Before anyone comes up with more theories about support: has anyone actually tested whether "traffic-processing: on-capsman" works in a wifi-qcom setup?

infabo

I hope some day the zoom render issues are addressed. On 100% zoom level it looks OK but is way too big compared to other applications on my system. Maybe Winbox does not respect xorg settings/xsettingsd. So I need to reduce the zoom level but unfortunately this lead to most of the font rendering (m...

infabo

What's new in 4.0beta22:

*) add support for new RouterOS types

🤯

infabo

I have mounted the cap ac on a wall. For comparison, I sometimes temporarily mount the wap ax instead. In terms of signal direction, the wap ax is ideally positioned to cover my apartment with its 180 degree front angle (since there is exterior wall behind it). However, the 5ghz coverage is no bette...

infabo

Open MT ticket, find out “first run” of hex-s has faulty PoE, support told me “sorry, we refuse to help go bug reseller”. Call reseller, they also refuse since I had device more than 30 days, do nothing for me, basically told me kick rocks/pound sand… Based on the screenshots you shared from the su...

infabo

If there is no fp setting, I assume it's off?

aye.

"ft (no | yes: default: no)
Whether to enable 802.11r fast BSS transitions ( roaming)."
https://help.mikrotik.com/docs/spaces/R ... 0roaming).

infabo

Create a supout.rif when the system is already on low free RAM and send it to Mikrotik support. There must be something going on.

infabo

I'm quite sure the driver wasn't updated without a reason. Most likely, it was to support new devices that only work with version 7.15 or later. If it were as simple as just reverting the change, MikroTik probably would have done that already.

infabo

It's the same unnecessary discussion as with the CRS series, which stands for "Cloud Router Switch." Even though the word "router" is in the name, these devices are mainly switches, not routers. People argue a lot about whether it's a router or not, but it's really not important....

infabo

I edit my post. cap ac performs better in my location/setup right now. In terms of coverage and reliability. Then I have these occasional "signal too strong" disconnects which are pretty annoying on wap ax (Mikrotik working on it). And wap ax has some mysterious "performance degradati...

infabo

I buy new devices when they are better than the old ones. I have cap ac for my home and for comparison I bought a wap ax because the number 802.11ax compatible client devices is slowly growing. the cap ac still outperforms the wap ax (in my location). So I don't want to swap the cap ac for the wap a...

infabo

I still find it odd, that folks are saying W stands for wall, and not weatherproof.

viewtopic.php?p=1107097&hilit=wall#p1107097

infabo

I can not imagine how to use this device? Is it swtich with SFP? Why they cll it router when it has no CPU power to bz a router for 2,5 GBit?

Just read anserk's comment right before yours.

infabo

A dedicated all-in-one package designed just for "cap ac" to work as a "simple cap" in a CAPsMAN setup or as a single access point could remove a lot of unnecessary features. Such a device wouldn’t even need WebFig, or things like Samba, DLNA, Adlist, WireGuard, or lots of extra ...

infabo

Visual explanation, the unplugger :
https://www.youtube.com/watch?v=ApRllnOHxOg

Seriously, I could really make use of that.

+1 for the OP.

infabo

You can write sensitive information in comments as well.

infabo

It is documented here: https://help.mikrotik.com/docs/spaces/R ... Supout.rif

This file contains all your router's configuration, logs, and some other details that will help MikroTik Support to solve your issue. The file does not contain sensitive information or router passwords.

infabo

Mikrotik and Qualcomm are already working on a solution as far as I was told by Mikrotik support. We will see a fix - I am confident. Big thanks to everyone who created a support ticket to help tracking down the issue.

infabo

Either the "session" entries should be in a different table, or they should have a different name than their "parent".

This. But Mikrotik sometimes choose the backwards incompatible way. Don't know why.

infabo

Ok, people need to adjust their scripts now. Instead of giving dynamic entries that are based on static entries a counter suffix/prefix, it is now not unique anymore to use the name like winbox anymore?

infabo

Using 16MB flash chips was probably a suboptimal decision back in the days. But there are some new devices like Chateau 5G R15 or Chateau LTE12 2025 which come with 32MB flash. The reports and discussion on "melting" flash space is present for some time now, especially since the package sp...

infabo

@Keith
I think Mikrotik should get in touch with you directly. This really is a sad story. Not because of the happy end (Unifi APs) but because of all the "production testing" which - I feel it - must have been frustrating for everyone.

infabo

Well, Cisco wants to see a competitor die apparently.
But now this is getting really offtopic hete.

infabo

We can buy Cambium at very similar prices to MikroTik with deal registrations and price exceptions.

Probably the reason why Cambium as a company is so profitable (not).

infabo

Ping by name in the window doesn't work, it works from the CLI I am wondering how and why such bugs are introduced. It works on CLI, it works in WinBox 3.42. Why does it act/work differently on WinBox 4.x? I thought WinBox has some kind of protocol for input-validation/interface/etc. - but apparent...

infabo

With wap ax I occasionally see some of these log entries, but in my case it says disconnect because of positive signal 150+ or something (Mikrotik support already acknowledged and they are working together with Qualcomm on a fix). But usually I dont see any signs in log but still in MS Teams I get &...

infabo

yep, same old "why is my zoom call interrupted all of a sudden" with 7.19.1

Does it disconnect you from AP when these interruptions occur? Or see log entries on AP?

infabo

Used all major stable releases since introduction of wifi-qcom-ac (except 7.14/7.18) but I never experienced a memory leak/shortage. There are some reports in the release topics over time. I think this depends on device configuration.

infabo

and when you put it on your device, device simply die, hard die
is it cheap device ? 250-300 eur ? no
is it easy to replace ? no

And although you seem to have asked yourself several questions, you appear to have overlooked the most important one: Do I even need this update?

infabo

/export show-sensitive

to include passwords. I'd suggest "terse" option as well, so you can apply line by line.

infabo

This is most probably a DNS issue. See viewtopic.php?t=194302

I tried adding "dns=1.1.1.1" but it did not help.

infabo

I think Winbox 3 will be compatible by 3.42.

infabo

Winbox 4 has, objectively speaking, significantly more issues than Winbox 3 - and this is likely to remain the case for the foreseeable future.

infabo

This whole analogy with gas stations and fuel pumps doesn’t really make sense and doesn’t help the discussion. Even with regular ROS or firmware updates, users are not forced or strongly encouraged to update – on the contrary, it is generally expected that devices are kept up to date. Accusing peopl...

infabo

And now they've admitted that it shouldn't do that and that the RB5009 was the only model affected.

At least as far as they know for now. That's the thing with bugs - you often only notice them once they show up.

infabo

SSIDs stopped broadcasting out of a sudden
SSIDs stopped broadcasting all of a sudden
:-)

SSIDs suddenly stopped broadcasting.

infabo

Interesting. Easy to interpret. Until now only "on-cap" was possible. "on-capsman" is most likely "wireless capsman / local-forwarding=no". I needed to try this out immediately and enabled "traffic-processing=on-capsman" and my SSIDs stopped broadcasting out o...

infabo

Maybe not many pull the update trigger within the first few hours after release. 😂

infabo

I just consulted the documentation and honestly I do not know if my capsman uses certificates or not. "export verbose" just gives me this: /interface wifi capsman set enabled=yes upgrade-policy=suggest-same-version And the documentation is unclear. https://help.mikrotik.com/docs/spaces/ROS...

infabo

If I understood right, it is only necessary to do this on the capsman to get it up again, right?

infabo

@bratislav Right after the quoted post it is already clarified by pe1chl in which cases the update may be needed. https://forum.mikrotik.com/viewtopic.php?t=215048&start=600#p1142257 @HoracioDos "And you see the warning stating that you must install this package" qualifies as "you...

infabo

@eworm My minimal capsman setup did not suffer from this problem. I have 2 capsman certs on the capsman: the CA one and the other. The CA certificate is "trusted = yes" while the other is "trusted = no". I think this is correct as usually you need to only trust the self-signed CA...

infabo

I'm struggling with the idea of either having to replace a device that was running perfectly fine You did not hesitate to upgrade the bootloader on a "running perfectly fine" device - even though it was stated "DANGEROUS" (in all caps) in the documentation? Please do not get me ...

infabo

FWIW: I had to uninstall wifi-qcom-ac from my Chateau LTE12 in order to upgrade to 7.19 and continue to use the container package. I did not use the built-in wireless anyways. The Chateau is a CAPsMAN and it was convenient to have the wifi-qcom-ac package installed so auto-upgrade for my connected C...

infabo

*) certificate - fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);

2025-05-23_08-29.png

Is it my correct assumption that the parameter "type" was removed and it is decided internally whether it uses dns-01 or http-01 challenge?

infabo

@MTStaff, could you please update documentation about channel.reselect-time parameter?
And explain how is working in conjunction with channel.reselect-interval .

☝☝☝

infabo

This is already after the second boot (because of firmware auto-upgrade).

infabo

Just upgraded a "dumb" cap ac which runs in cap-mode wifi-qcom-ac and nothing else. This free-hdd-space is melting.... before: uptime: 3d20h36m16s version: 7.16.2 (stable) build-time: 2024-11-26 12:09:40 factory-software: 6.44.6 free-memory: 32.2MiB total-memory: 128.0MiB cpu: ARM cpu-coun...

infabo

19:57:14 system,error upgrade failed, free 73 kB of disk space Before I upgraded I checked: version: 7.16.2 (stable) cpu: ARM free-hdd-space: 616.0KiB total-hdd-space: 16.0MiB board-name: D53G-5HacD2HnD platform: MikroTik But 616kb free space was not enough for upgrading to 7.19. 🙁🙁🙁

infabo

It is probably a compromise to keep the routeros package small. Mikrotik still supports 16MB flash devices.

infabo

Noone needs to upgrade rooterboot unless you want to enable proctected rooterboot and a error measage advices so.

infabo

*) system – added new "switch-marvell" and "wifi-mediatek" packages to support upcoming products;

Finally the mystery revealed:
viewtopic.php?p=1054317&hilit=mediatek#p1054317

infabo

Thank you!

infabo

Feature request: show the username. I can't find it anywhere on the active Winbox session window. Window title does not count - as window titles are not part of UI.

infabo

Many vendors also add a testcase for each new feature and for each reported and fixed bug, and run each new release through all those testcases. Of course that still won't catch everything, but it avoids the most obvious failures. Version 7.16 introduced DNS-01 challenge support for Let's Encrypt c...

infabo

Please can the ping tool be fixed to work like the winbox3, where if you type an address in the "Ping To" if you press enter, it clears the box. It gets really frustrating if you enter an address and hit enter to ping, and then the box is cleared. This seems to happen on the second addres...

infabo

A special package is provided to upgrade the backup RouterBOOT ( DANGEROUS ). Newer devices will have this new backup loader already installed at the factory. If your RouterOS is v7, your factory-firmware version is lower than 7.18.2 and your device displays the message → The "protected router...

infabo

No, it is not compatible with macos BigSur. See changelog.

What's new in v4.0beta13:

*) bump minimal macOS version to 12.0, because 11.0 is EOL and dropped by Qt

infabo

*) reintroduce tab support in the top menu of forms, with the ability to open multiple tabs using Shift + left-click. Thank you! It's great to have tabs back - that’s a big improvement. The "Shift + click" multi-select feature is quite interesting. But it would really help to have some wa...

infabo

I do understand. Last year I got the my first device (wap ax) with a password label. Because it is running as dumb CAP and more or less "in lab" as of today, I did not change the default password. Every few weeks I need to log in directly, type the password from sticker (which is provided ...

infabo

- nobody will attempt to guess this password, as you will change it the first time you log in, right?

You can skip the password change prompt. Is there a reason why this is allowed to skip instead of enforcing the change?

infabo

Why not just improve docs?

infabo

I'm eagerly awaiting a stable release.

infabo

"Can TeamViewer (Classic) reach the internet?
If not, please open Port 5938 for outgoing connections"

This rule is not needed:

add action=accept chain=output dst-port=5938 out-interface=ether1-WAN \
    protocol=tcp

Remove it.

infabo

A month is nothing in Mikrotik world.

infabo

BTH would suit your needs. But requires ARM platform. https://mikrotik.com/bth/

infabo

@OP as there are no provisioning rules in your posted configuration export, I assume you manually provisioned the CAPs. That is not the intended way to do it. Usually ones uses provisioning rules. On these rules you define the master and slave configuration. slave configuration translate to virtual ...

infabo

As said by Guntis: your "/interface/wifi/configuration" items are full of "manager=capsman" attributes. Please remove these.

infabo

According to docs, either www-ssl or www service need to be enabled for REST API.

see https://help.mikrotik.com/docs/spaces/R ... 2/REST+API

infabo

Perhaps you are passing "manager=" value via CAPsMAN configuration you are trying to provision, that might cause a similar issue. Is there a real or valid use case to pass the "manager" attribute to CAPs? If yes: I am interesed. If no: why not just prevent this mis-configuration...

infabo

What I would be most interested to know is whether MikroTik has a test setup for these common, straightforward configurations - such as testing throughput between "EthernetClient1 - AP - EthernetClient2" or "EthernetClient1 - Station Bridge - AP - EthernetClient2," and similar sc...

infabo

I have the decoder through ethernet now, and zero issues.

I am probably missing something and/or do not understand what an encoder is in this context but didn't you say early in the topic, that connecting your TV box by ethernet cable did cause microcuts as well?

infabo

Would be nice to see "Audience BE"

infabo

@samuellsk you tried different browser. But what you most probably not tried: different internet connection.

infabo

Most people use Canvas as it is the forum preset.

infabo

I dont know why the "Canvas" forum theme does not show the quote-author. The polsilver theme does it correctly. I always found this so confusing not knowing who is quoted actually. Can Mikrotik forum admins fix this?

2025-05-09_10-12.png

2025-05-09_10-13.png

infabo

Do you have an update for us? Did you follow Larsa's advice?

infabo

Yes, Mikrotik released a Chateau LTE12 (2025). https://mikrotik.com/product/chateau_lte12_2025 What do you want to tell me? I should replace my existing Chateau with the "2025 refresh"? This can only be a cost factor - but why should anyone buy Chateau LTE12 (2025) with legacy wireless (i...

infabo

Have they not released the Chateau LTE12 (2025) with 32MB ? Yes, Mikrotik released a Chateau LTE12 (2025). https://mikrotik.com/product/chateau_lte12_2025 What do you want to tell me? I should replace my existing Chateau with the "2025 refresh"? This can only be a cost factor - but why sh...

infabo

I hope MikroTik will be able to slow down the growth of the RouterOS package size. Compared to version 7.18.2 (ARM), the size has increased again by almost 100 KB. With 7.18.2, I already had to recover my Chateau LTE12 using Netinstall, and have since downgraded to 7.16.2. It seems that version 7.19...

infabo

The ROS sources provided in another topic seem not to reflect a current/recent release and are maybe 2+ years old. We dont actually know, maybe Mikrotik cherry-picked all these Wireguard commits manually on their Kernel? Regarding the 5.10 LTS argument: As far as I am aware of and looked at the sour...

infabo

Initial "pairing" with another TP-Link device unlocked it.

infabo

Indeed, discussed often. But IMHO these release topics are some variant of /dev/null. You can write until this topic gets locked for discussion. What a waste of words.

infabo

I'd suggest to continue these general discussion on ROS v7 capabilities in a dedicated topic. None of this is going to be improved in 7.19. It's in RC already.

infabo

Never mind. By writing this topic I've got the "idea" myself. All my users have address-restrictions set as well. And there it still was "address=192.168.0.0/24" instead of "address=192.168.0.0/24,fc00::/7".

infabo

Hi forum community, I have already wondered for some months but did not create a topic until yet. Some months ago I configured an IPv6 ULA on my gateway router (ROS 7.16.2). Now when I try to connect via IPv6 address it prompts for the username, but claims "Permission denied". ssh foo@fd00...

infabo

That does not qualify as "completely broken". I believe Normis was the first to use "completely broken"; I do not think it was by a forum user specific to BGP in this thread. A more accurate phrase would be "completely unusable". It was the post by chrismfz where he sa...

infabo

I am now experiencing "SA query timeout" - but it is logged by iwd on Linux Kernel 5.15 and Intel AX200. On the AP it logged a "disconnected. signal too strong". I already reported this to Mikrotik support and I hope I can help to nail down the issue.

infabo

If you run Chateau LTE12 with regular wireless package then you must contact Mikrotik support. This would be a regression case, as RouterOS+wireless if official combination and is the official way to run this device. If the device fails because of lack of space, and I assume you don't have large fil...

infabo

My goal is to manage other CAP devices (including other hAP ax lite and hAP ac lite) To manage "hap ac lite" you need the "wireless" package installed; use the /caps-man to configure it. To manage your other "hap ax lite" you need no extra packages; just use /interface...

infabo

FYI, I filed a feature request for adding CAPsMAN BSSID-randomization support: SUP-185072 FYI Hello, Thank you for contacting MikroTik Support. The feature request has been noted. That being said, it's currently not planned to add this functionality, at least not in the near term. Best regards,

infabo

Go to "Networks", select the network you are currently connectes to, select "OPER" tab. Section is called "PHY SPEEDS.

infabo

I checked today on the Pixel 7 and analiti app. Most of the time it reports OFDM for Rx and Tx. But sometimes Rx switches to OFDMA - for some seconds - as well. Tx on the other hand always stays at OFDM.

infabo

MikroTik could at least train their own model to understand RouterOS script language - without needing to publish any resources publicly, so the unique charm of RouterOS scripting isn't lost when someone stumbles upon rextended’s script collection.

infabo

It's not hard at all. LLM models just need to be trained with formal syntax or grammar specification languages like EBNF, ANTLR, etc and might be complemented with structured representations such as ASTs. There are plenty of tools and well-documented processes for this online. Currently it is hard ...

infabo

Thank you Znevna! Maybe I am naive but I still believe some day Mikrotik does a kind of extended changelog which explains changes in detail like this.

infabo

This is actually pretty nice. Did not know physical eSIM is a thing!

infabo

It's very hard for AI to understand RouterOS scripts because the language is not well documented and can be unpredictable. The forum is full of examples, a recent one: viewtopic.php?t=215841

infabo

There are so many different other dns settings like timeout etc, it is for sure not only the concurrent queries knob involved here. PS: now we know quad9 is problematic and switching to http2 - please add it to the incompatible list here: https://help.mikrotik.com/docs/spaces/ROS/pages/37748767/DNS#...

infabo

flow control auto is not the default. and nobody knows what implications it has, when cap mode is enabled. And even if it is not the cause - it is still garbage config that should be removed.

infabo

Is http2 doh support on the ros roadmap? or even more modern: dns over quic?

infabo

Why did you enable wifi capsman and wifi cap mode? /interface wifi cap set caps-man-addresses="" discovery-interfaces=bridge enabled=yes /interface wifi capsman set enabled=yes package-path="" require-peer-certificate=no upgrade-policy=\ none Both should be disabled. You have no ...

infabo

Let's see if I am able to reproduce or experience the issue somehow again. But right now I am happy that it is working again and I do not have to netinstall the CAP.

infabo

I need to re-check. I do not have access to the Pixel 7 (which supports AX) and can only see on my phone (which does only have 802.11ac). But I see a difference in analiti: yesterday the BSSID was recognized as AC1766 while today it is shown as AX2402. Must be either some hickup in analiti or some c...

infabo

5Ghz is now really broadcasting again - but I see no difference in the output of "wifi/print". For the monitor: on cap: ;;; managed by managed by managed by ;;; CAPsMAN DC:xx CAPsMAN DC:xx CAPsMAN DC:xx ;;; %bridgeLo %bridgeLo %bridgeLo ;;; cal, traffic cal, traffic cal, traffic ;;; proces...

infabo

On my notebook (AX200) I disabled 2.4ghz (via IWD config) because AX200 fails to connect to 20mhz 2.4ghz wireless - and it is disrupting wireless when the notebook trys to roam but fails connecting to 2.4ghz. So I do not use 2.4ghz on this device. But no 5ghz was seen. Then I also checked via Androi...

infabo

Hi dear forum members, I have this CAP (it is a wap ax running 7.18.2) saying it broadcasts 5ghz ssid - but it does clearly not. interface/wifi/print Flags: M - MASTER; D - DYNAMIC; B - BOUND; R - RUNNING Columns: NAME, MASTER-INTERFACE # NAME MASTER-INTERFACE ;;; managed by CAPsMAN DC:xx%bridgeLoca...

infabo

I don't know either, but I get these message as well. It is NextDNS. 04-26 15:19:45 dns,error DoH server connection error: remote disconnected while in HTTP exchange 04-27 09:28:48 dns,error DoH server connection error: SSL: internal error (6) 04-27 10:36:53 dns,error DoH server connection error: re...

infabo

Regarding the original question, it could be OFDMA is probably not enabled by Mikrotik. I just checked on the Pixel 7 (connected to wap ax) by using the analiti app and it reports using OFDM.

infabo

Interesting read: https://www.smallnetbuilder.com/wireles ... rk-part-1/

infabo

Better contact Mikrotik support directly to get a response.

https://mikrotik.com/support

infabo

OFDMA is part of 802.11ax standard. Why do you doubt it is not already there?

infabo

I just found out today that Unifi offers something called "unifi drive" which is some NAS solution since Q4/24 or something. So quite new as well. I did not look at its specs in detail nor did I compare the features but one thing I can definitely say: the user interface for managing these ...

infabo

:resolve now has a "type" parameter so you can do this: /ping [:resolve type=ipv6 domain-name=google.com] count=4 Why does ROS ping not just simply add a flag? Something like: /ping google.com -4 /ping google.com -6 Or more ROS style: /ping address=google.com ip-version=4 /ping address=go...

infabo

add action=drop chain=input comment="defconf: accept ICMP" log=yes log-prefix=fw-3-drop-icmp protocol=icmp This filter rule was modified. In default configuration this is "action=accept" and not "drop". See the defconf comment. So someone already altered this. The othe...

infabo

but only allowed zabbix-agent via NAT Show this config as well. Maybe even your whole anonymized config. Not only your firewall filter. These look pretty default (as I view from my phone) aside that lmt 8081 rule. But maybe interface lists messed up and/or dstnat config is wrong nmap x.x.x.x Starti...

infabo

I guess Mikrotik underestimated how much work it is to rewrite Winbox - especially when disrupting several workflows and dismissing/ignoring industry UI/UX standards.

infabo

I guess you need to update your support ticket as well.

infabo

Maybe another wireless driver update fixes it.

infabo

This problem sounds so trivial - it makes me wonder why Mikrotik is not fixing it for so long.

infabo

It might actually happen sooner than you'd expect. Word is Mikrotik has recently brought on about 15 people, supposedly working full-time on developing business-oriented features.

loloski, you mean this April's fool joke?

infabo

Mikrotik added "Wireless specifications" table on wAP ax product page today. See https://mikrotik.com/product/wap_ax

infabo

Any word from Mikrotik for controllers...... OPNSense has, and have been enhancing their Central management platform. https://docs.opnsense.org/_images/OPNcentral_hosts.png This interface even looks structured and "easy to use". Please Mikrotik, when making a controller then please try ta...

infabo

As I have said multiple times, this forum is a deep dark corner of geeks, amongst millions and millions of other people that have never seen this forum in their life, but are using mikrotik products. It is irritating that you see it this way. A bunch of geeks. I visit the "active topics" ...

infabo

FYI, I filed a feature request for adding CAPsMAN BSSID-randomization support: SUP-185072

infabo

I file a feature request - for reference: SUP-185090.

infabo

use create-enabled instead of create-dynamic-enabled (which is the default).

infabo

When you file a bug with us you receive a number that you can share publicly and that other customers can use to look up the basic information on the bug Mikrotik support would even benefit from this. Now bugs get reported over and over again. Because nobody knows if it is already known to Mikrotik.

infabo

It's company policy and I can't comment on that, but what I can tell you personally, is that we get hundreds of "bug reports" every day, and 99.99% of them are bad configuration or misunderstanding about something. If all these would be turned into bug reports directly, it would be utter ...

infabo

I guess they attach supout.rif and other sensitive information in their bug tracker.

infabo

Thank you, rralex89!

infabo

There seems to be an importer for phpbb: https://github.com/discourse/discourse/pull/17641

infabo

Good decision to move away from phpbb. Many popular projects use Discourse.

infabo

How about CAPsMAN? Schedule script on each CAP?

infabo

My wap ax has factory version 7.15. That is after 7.13. Should I now be concerned?

infabo

Is there a reason why you recommend 7.11 instead of 7.12? You said they messed starting with 7.13.

infabo

Answer for OP to use flood ping:

system/device-mode/update traffic-gen=yes

infabo

But once 7.19 stable released and someone encounters the 0 space issue after upgrading from e.g. 7.16 (this version consumed remarkable less flash), you now can downgrade instead of netinstall your device.

infabo

I think the issue erlinden probably is referring to is random MAC addresses enabled on some clients that causes problems.

infabo

But only if you enabled routerboard device-mode feature flag before to change boot method.

At least downgrade should be possible now.

infabo

*) system - fixed "/system reboot" when the system disk is completely full;

Nice to see this! Thank you!

infabo

My root bridge has "priority=0x7000". But regardless of this setting: it worked < 7.18. The weird thing on my problem is, that the bridge with constantly switching port-state between forwarding/learning is/was not even running 7.18 (in fact: 7.17.x). All was fine, as long all my devices ha...

infabo

The dumbest problem was this hidden 1,5mb flash usage. This is the second time here in last days I read such an experience report. Mikrotik put 16MB flash in their devices and then forgets to include garbage collection mechanisms. It is their job to do that, as - different to a regular Linux - we ca...

infabo

The idea is, once this BTH is set up by person in House 1, you can establish a BTH connection from anywhere - e.g. from House 2 - to connect and hopefully can access your RB5009.

infabo

My devices never rebooted or kernel paniced. A sole RSTP/bridge issue. I always resolved it by toggling ethernet interface to get port to forward again. Now my devices run 7.15.3 and the issue never appeared again. One could think it is something from 7.18 causing it........

infabo

I assume you need the product. Write to support@mikrotik.com with a detailed bug report of your problem. Then you can be sure Mikrotik heard of the problem. This is just a community forum - no Mikrotik official needs to read these topics.

infabo

"yeah, the device is compromised, traffic-gen away!" This is actually what concerns me the most. One of the key features of device mode is **flagging**. According to the documentation: flagging-enabled (yes | no; Default: yes) The device will perform a configuration analysis, and if trace...

infabo

Sounds like a kind of "secret key" (rather than a password). Good idea. But won't help for already deployed devices.

infabo

As I already suggested, wouldn't it be enough to use the factory password for security? As dang21000 points out, not all devices have default factory password. For the ones that do, if they have already been deployed and the factory password was changed, and we didn't keep a record of the factory p...

infabo

mkx answer was perfectly accurate and fine for what he explained. You can't make him responsible for not having superpowers inspecting your CRS from just little to no info. How could one expect a packet sniffer pcap file eating up internal flash which is not visible when executing /disk/print? This ...

infabo

@AlexandruL Maybe you also experience this? viewtopic.php?p=1134698

infabo

This means, when doing netinstall and a custom script, the device mode restrictions still apply? So one cant setup a device from scratch and disable all device-mode flags by scripting? If yes, this would be bad.

Search found 2815 matches