MikroTik

infabo

i sense it is some upnp protocol issues, i swap the MT with a OpenWrt it also works just fine.

i need some troubleshoot steps to start with.

It works with default configuration on OpenWrt? Or did you have to configure anything additionally?

infabo

Maybe this is the time to "re-activate" the development channel.

infabo

Nothing wrong with using QuickSet for initial setup. It gets the basic stuff done. The thing you observed may be a bug in QuickSet. In my first days of Mikrotik (2020s) I also observed a bug in QuickSet. When you changed "IP Address" in QuickSet to something different than the default 192....

infabo

Then your company just grew out of Mikrotik shoes.

But what interests me: what are these other products (for these SLA customers)?

infabo

https://help.mikrotik.com/docs/display/ROS/NAT-PMP

infabo

Intel ax200 also reported by some.

infabo

This is all very mysterious. /ip dhcp-client add comment=defconf interface=bridgeLocal add interface=sfp-sfpplus1 Why also on bridge? And generally: why is there srcnat rule as it is clearly not the gateway/edge router? Why should there be UPNP do anything? That is not the intention of upnp. This ca...

infabo

Download file, replace locally with e.g. sed, re-upload file. Can be scripted using REST API for example. Is there anything that hinders you following this approach? APIs not accessible and it must be done locally as a ROS script?

infabo

You seem to be forgetting that reverting "dumb" device to "uber-smart" device is one button-push/power cycle away. Well, what is then this whole discussion about when it is all just a "button-push/power cycle" away? You can really piss someone's leg really hard by chan...

infabo

it is known to be issues since many months. not even reverted in 7.17beta2. so won't happen.

infabo

That's one part I said. Read my full comment and/or don't quote an excerpt which makes no sense standalone quoted.

infabo

I see no other solution than to activate the new device mode defaults only for factory-new devices. Unless someone has a really secure alternative to that power-off/button-press thing that can confirm changes without physical access. And one reminder: only a few are reading/following beta topics. Th...

infabo

Mikrotik won't adopt this approach. The introduced the "downgrade" flag so an attacker can not downgrade to an insecure ROS version. In the proposed case of token within 30minutes of initial upgrade to 7.17, the pitfalls are clear: attacker gains access to device running < 7.17 somehow. Hi...

infabo

@Utiug
Although your admin user is in group "full", it means nothing actually. It is just a group name.

Can you please check in Groups tab if the "full" group is missing any permissions, especially the "ftp" permission must be enabled.

infabo

According to https://mikrotik.com/product/RB750UP this device only has 64MiB of disk storage. Why does it show 128MiB in your Winbox screenshot? Has it always been so? Or have you different hardware revision with more disk storage? However, even 64mb is plenty of space. You really should partition y...

infabo

You affected by Crowdstrike as well?

infabo

It is pretty sure, even if I am not a lawyer, there is no way of suing Mikrotik for your own actions (update device from unknown version to 7.16). There are no laws in EU for that. I am sure you already tried to sue Microsoft for one failed Windows Update - everyone had at least once in his life - y...

infabo

I think worth reporting to Mikrotik support. https://help.mikrotik.com/servicedesk/servicedesk

Keep us updated in this topic. I am curious.

infabo

Your WinBox version is?

infabo

Check your users permissions.

infabo

No, HTTPS existed in HTTP 1.1 already. lol.

infabo

Kernel version have been discussed many times before and like it was mentioned before it is being patched, so you cannot say that it is 5.6.3 in the form as it came out in 2020. Kernel version is updated when it is absolutely necessary or the actual gains are worth the effort. I am sure a XKCD comi...

infabo

Why does ROS still use HTTP/1 for DoH queries?
Are there any plans to implement HTTP/2 support?
All modern DNS server software (BIND9, Unbound, Dnsdist) use HTTP/2 and cannot handle ROS queries.

Are you sure, how you analyzed that?

infabo

I agree. Let's collect the affected client chipsets here. Once there is a larger list collected: Mikrotik can invest ~20$ for that wireless card that appear most frequent in that list. Put this card into some old notebook and start debugging happily. Hopefully resulting in a fix soon.

infabo

@mszru nothing wrong here. It's the Intel issue apparently. In order to get rid of SA query timeouts disable management frame protection on AP. WPA2 alone is not sufficient. We don't know what happens here. I rarely get SA query timeouts - but they are legit. E.g. when I get out of signal reach or s...

infabo

do you have a password sticker on your device?

infabo

Speaks the professional.

According to your talking nobody should dare to improve when someone else already got the solution. Ruckus had PPSK in 2009? How could Cambium dare to develop and ship DPSK in 2020 when Ruckus already had the patent on it? And so ages later. Boo boo Cambium.

infabo

I don't think this is true. They may not be able to compete with enterprise grade wireless gear. But could very easy compete or outperform any gear in the < 300€ price range. That's were their devices are located price-wise.

infabo

1. use a NXDOMAIN for the domain with match-subdomain, plus explicit entries for hosts within the subdomain (best solution). As Amm0 wrote: /ip/dns/static/add name=nas.home.arpa type=A address=192.168.88.100 match-subdomain=yes /ip/dns/static/add name=home.arpa type=NXDOMAIN match-subdomain=yes The...

infabo

When Mikrotik gets this wireless issues sorted, other than re-wording log messages, then they will be competitive again. As for now, they are still wearing their Teflon coat...

infabo

yeah, the day I learned it's the same list - just filtered....🤯
Winbox total count not matching amount of items in list. such a awkward thing to scatter over places...

infabo

Instead of talking about the consequences of new device-mode settings in 7.17. Mikrotik, dear Normis: could you disclose your reasons for applying the changes? !) device-mode - after upgrade, mode "advanced" is set by default and traffic-gen, changing active partitions, bootloader and down...

infabo

Rough timeline for v7.16 beta1 to v7.16 release was from June 5th to September 24th. Beta period can be considered grace period. The major problem I forsee ahead is the fact, that - I have no evidence - only 3/10 people read changelogs. So this little line !) device-mode - after upgrade, mode "...

infabo

What we all can agree on, and I hope even normis agrees on it: the "grace period" is way too short. It is not like this device-mode changes happen in 2026 and several precautions can be taken. No, it is - at least planned - to happen in next upcoming "major" release.

infabo

pe1chl, why is this so hard to understand? your complaint is about routerboot settings, that you can't switch to "try-ethernet-once-then-nand". You can, switch now and upgrade later. Because "try-ethernet-once-then-nand" switches itself back to "nand" afterwards. pe1ch...

infabo

Not good news.... I use 44 piece cap AC with qcom-ac (more VLAN and ~70 piece wifi client with 802.11r fast BSS transitions ( roaming), routeros 7.15.3 and 7.16rc1-5). After 7-10 days runs out the cap's memory. I am on 8+ days and RAM is declining indeed. I have not enabled graphing so I can't proo...

infabo

if your tunnel is down, you can't switch partitons anyway. you need access for that.

The scheduler script does that. It is configured to run e.g. 5min after startup. It does switching partition. If bmann can log in, he just disables the scheduler. All good.

infabo

I am not bmann, but I can imagine some reasons why he uses the described workflow. The key quote is "I cannot login back to the device". The device can successfully boot up. But at the same time not accessible anymore. Wireguard/ovpn tunnels do not establish anymore or other reasons. The l...

infabo

And even if it would exist: you would need to press button or power off. hahha Well, at least we could plan that as a task to be performed during other visits to each location in the months before the upgrade. Mikrotik could make these device mode properties available in 7.16.1 already. 7.17 final ...

infabo

Maybe first line in provisioning script could disable all IP services:

/ip/service/disable [find]

Later on when IP firewall rules are added or at end of script you can selectively re-enable needed services with proper "address" restriction.

infabo

Sure, disable lte1 interface in script. But keep in mind, you have to wait until lte interface is available. Here is how default-configuration does it - in a very cumbersome while loop but this is how (limited) ROS scripting: :local count 0; :while ([/interface lte find] = "") do={ :set co...

infabo

A question of priorities: getting hacked or remove SIM.

infabo

The issue with downgrade is that any attack script can immediatelly issue downgrade command to some version with known security issue and take over the device. See https://forum.mikrotik.com/viewtopic.php?p=1101208 as an example of how smart these scripts are. How about disallowing downgrade to ROS...

infabo

It seems like nobody complaining about "bootloader" device-mode flag. The discussion is all about "partitions" and "downgrade". "traffic-gen" was mentioned, but to be serious, even someone managing thousands of devices does not need "traffic-gen" on ...

infabo

A reminder to everyone experiencing issues with wifi and Intel AX cards: report as much as you can to Mikrotik support. See viewtopic.php?t=209903#p1089757

infabo

reboot or purge existing connections when fiddling with fast track rules.

infabo

FezzFest: Downgrade is still offered via switching of release channels. Don't upgrade to a beta you have no access to. I'm not upgrading to any beta's. What worries me are releases presented as stable, containing bugs we didn't anticipate and won't be able to fix as we can't downgrade to an older v...

infabo

!) device-mode - after upgrade, mode "advanced" is set by default and traffic-gen, changing active partitions, bootloader and downgrade features will be disabled; How I understand this, in other words: after upgrade to 7.17 you won't be able to use traffic-gen, not able to change active p...

infabo

Were do I need to look then ?

Any hints in log?

infabo

Winbox 4 does not introduce any feature or anything for a "home user". As the super-pro user since '90 you can still find the settings where they have been in Winbox 3.x. Ridiculous complaint. If you move icon of AutoCAD from upper left do down right corner that’s it, they will call you an...

infabo

Maybe for you? For me that is not clear. When I press reset or mode button, it will activate the setting. But will it also reboot??? It does not tell that. Point taken. I don't know either what happens on button press. That's a bad thing I have to admit. Last time I changed device-mode was to enabl...

infabo

The message shown on CLI is quite clear and does not leave room for interpretations:

update: please activate by turning power off or pressing reset or mode button in 4m27s

infabo

I don't know what you understood. In simple words: any change you make to device-mode settings can be either commited/confirmed by pusing reset-button or a cold reboot. Cold reboot stands for "take away power and restore power", "unplug power cable, re-attach power cable", or any...

infabo

Indeed. MIMO SMPS is as old as 802.11n. See https://dot11ap.wordpress.com/spatial-m ... save-smps/
But maybe some kind of bug in either Intel drivers or on Mikrotik AP side. Given that disconnecting clients issue is really related to Intel SMPS setting at all.

infabo

Thanks for adding the "feature clarification table". 👍

infabo

What Wheelhousemarine really wanted to report is, translated to commands:

/ip hotspot user reset-counters [find name="a"];
/ip hotspot user remove a;
/ip hotspot user reset-counters [find name="a"]; -> resets counters of ->ALL<- users

infabo

This reads like a blurb.

infabo

Interesting. "Some legacy APs may have compatibility issue with supporting the SMPS mode and may cause various link quality problems such as low throughput. Change this setting to No SMPS may help to work around the issue" https://www.intel.com/content/www/us/en/support/articles/000044644/...

infabo

What happens to devices, running ROS 7.16, upgrading to 7.17 with this setting:

/system/device-mode/update mode=enterprise traffic-gen=yes

Does it change to false? Or is it kept as is?

infabo

Device-mode is poorly documented for what it is meant for. Take the list of "List of available properties" for example. It is a list of abstract "terms" but lacking any details. What does the property "bootloader" restrict? Does it prevent routerboard firmware upgrade? ...

infabo

Use FlashFig. It is for mass/batch configuration of new devices.

infabo

A user can log in but have no rights to open terminal.
Read users can use Winbox terminal. That's not true.

You have no permission to open terminal in Winbox even if you have winbox permission. As said: !local or !telnet prevents opening a terminal inside Winbox.

infabo

I am sorry, just edited my previous answer. User may have !local, !telnet, !ssh and thus can't execute export, or I am missing something?

infabo

A user can log in but have no rights to open terminal.

infabo

Code: Select all
*) console - added "about" filters for "find" and "print where" commands;
How does this about parameter work? Can't figure it out. Docs unavailable.

bump. This is discussion strictly related to release 7.16

infabo

Guys, you can complain here about wifi issues. But more important is a support ticket. The forum topics are not read regularly by Mikrotik staff and even then it is just a comment inside a long topic of a tons of reported issues. Every official support ticket helps.

infabo

Found this: https://www.reddit.com/r/mikrotik/comme ... mperature/

Sometimes not normal: viewtopic.php?t=139892#p1045556

infabo

dtim-period is "1" by default. Some have dedicated SSID for IoT devices - which are mostly battery powered. In such a case a DTIM period of 2 may improve batter life. Maybe it even helps with disconnects - but can't test as I do not have "flapping clients".

infabo

The switch can be CAPsMAN when using RouterOS (instead of SwitchOS) without any additional package.

infabo

4+ days uptime on cap ac here. /system/resource/print uptime: 4d1h43m31s version: 7.16 (stable) build-time: 2024-09-20 13:00:27 factory-software: 6.44.6 free-memory: 32.5MiB total-memory: 128.0MiB cpu: ARM cpu-count: 4 cpu-frequency: 672MHz cpu-load: 1% free-hdd-space: 736.0KiB total-hdd-space: 16.0...

infabo

please send it to https://help.mikrotik.com/servicedesk/servicedesk

infabo

why update packages manually and not use the built-in update functionality?

infabo

This morning I started upgrading my cAP ac by updating the packages. Now the device seems to be in a boot loop, from my router I can see it disconnecting and connecting constantly and it is not possible to access the UI using WinBox. I really hope this doesn't mean I once again have to set up every...

infabo

According to Mikrotik it is not a problem. It is just a notice. "wireless,info" gives the severity already

infabo

Ok, the the MT device is at least capable of handling the throughout. But still there can be some mangle rules or other reasons e.g. fast track disabled why it performs so worse on wireless. Without seeing your whole configuration I am out of theories.

infabo

But I don't know why you'd get NXDOMAIN back if there was /ip/dns/static using it.... If the DNS server run by RouterOS has two /ip/dns/static records (in that order): nas.home.arpa A 192.168.1.101 *.home.arpa$ NXDOMAIN Then, per my understanding of the docs, client’s request for nas.home.arpa is g...

infabo

@infabo What did the factory version tell you in relation to the rest of the info you kindly provided? You insisted to use ROS 7.5. If your factory version would have been already a newer version, like e g. 7.6, then you wouldn't even be able to install 7.5. You can't downgrade below factory versio...

infabo

Keep in mind for netinstall: on 7.13+ you need wireless or wifi-qcom-ac package additionally to main package.

infabo

If you don't believe Ammo: visit https://mikrotik.com/product/atl18#fndtn-downloads Product page, downloads section and there is Router OS package linked. I would update to 7.16 as well, as long the device is unmounted. In case of a defacto factory configuration I would go even further: netinstall 7...

infabo

/system/resources/print

What is shown as you factory version?

infabo

Hi,

v7.17Beta2 and v7.17ab57. They cause me a "high" CPU consumption, IPSEC process. Reverting to v7.16 "stabilizes" the CPU, but policies may become stuck again, we'll see over the weekend.

*) crypto - improve crypto speeds;

🤔

infabo

My log is flooding with messages of dns cache full: 09-28 00:04:07 dns,error cache full, not storing 09-28 00:04:07 dns,error cache full, not storing [ignoring repeated messages] 09-28 00:04:09 dns,warning DoH max concurrent queries reached, ignoring query 09-28 00:04:09 dns,warning DoH max concurre...

infabo

Has anyone found out how this "about" filter works?

infabo

I agree.

infabo

netinstall-cli is for Linux. Give it a try.

infabo

"So PPSK is available only on ax devices" - no the limitation is only if you use vlan-id. You can still use multi-passphrase feature on wifi-qcom-ac interfaces, it's just that you can't use entries that would assign vlan-id. "vlan-id" will only work with wifi-qcom interfaces. Wh...

infabo

Really hoping that this fix the IPTV issues we are having with Movistar Spain (SUP-152693)
My illusion vanished. Tested and still having the TV cuts.

Refactoring does not change functionality or fix bugs. It is just a process of "restructuring"/cleanup source code.

infabo

*) wifi - show authentication type and wireless standard used by each client in registration table;

Awesome! Only submitted this as a feature request (SUP-158802) mid of July. Now it already happened. This is real great job! Thank you, Mikrotik team!

infabo

Your ATL may need to be "Netinstalled". Tick "Keep configuration". This should bring it back to life. https://help.mikrotik.com/docs/display/ROS/Netinstall. I know, its hard to swallow, as you need to press the reset-button 10+ seconds to get into Etherboot mode....

infabo

What host is 10.x? can you please unplug any other network devices. just connect your PC and ATL.

infabo

It is not about your general electrical power supply or your UPS. The POE controller on your HAP may unintentionally powercycled or something. See changelog of 7.16 *) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out inte...

infabo

Why always use RJ45 SFP+ modules for uplink. They are expensive and create a lot of heat.

Due to this it is not usable for me.

BR, Michael

I can't follow your argument. Discussion is on this device: https://mikrotik.com/product/crs304_4xg_in
It does not even have any SFP+ port at all.

infabo

And the fun part: he says is switching to TPlink, which gives roughly 500mbps throughput on a 1gbit link. well, the next bad decision in life ahead. Better find a vendor with AP which is capable to nearly fully utilize the 1gbit link. It is possible with wifi6.

infabo

https://cdn.mikrotik.com/web-assets/pro ... 240945.png

infabo

Maybe device needs more power on load which 4011 can't provide?

infabo

powered by power supply or Poe?

infabo

https://youtu.be/KBIymt8y1-4

Watch, it explains all you need to know.

infabo

There are reports of PoE issues in the 7.16 release topic. Your ATL is probably configured with DHCP client and not with a static IP address? 192.168.188.1? Instead of direct connection between your computer<->ATL try the following: As described you power your ATL usually by HAp poE out port. Disabl...

infabo

It is has not been officially announced yet.

infabo

Not directly related to 7.16, but of my interest: What's new in 7.14beta7 (2024-Jan-15 11:37): *) sms - moved LTE SMS read settings from "/tool/sms" to "/interface/lte" menu and migrate old configuration (CLI only); There was a changelog item in 7.14beta7 that did not appear in c...

infabo

*) console - added "about" filters for "find" and "print where" commands;

How does this about parameter work? Can't figure it out. Docs unavailable.

infabo

Give it a try.

infabo

certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only); More info on this? Any doc? It's about LetsEncrypt certificate using DNS-01 challenge (https://letsencrypt.org/docs/challenge-types/#dns-01-challenge) - implemented only for sn.mynetname.net. That's prob...

infabo

NOT if the session is closed from other reason than ctrl+D That is absolutely correct. I was just meaning that Ctrl+D should close the terminal window after disconnecting the session - not that terminal window should always close after session disconnection. LOL, I think Mikrotik tries to "cop...

infabo

It is probably all because of this innocent changelog line in ROS 7.15 changelog: *) wifi-qcom - updated driver; Jeez, why Mikrotik not reverting this change and re-introduce updated drivers once they got the issues fixed? Instead they take into account people having issues by running latest version...

infabo

Did you also upgrade the firmware (under System -> RouterBOARD, and then reboot). The hAP ac² has a IPQ-4018 CPU and according to the changelog, a firmware upgrade is required for IPQ-40xx *) routerboard - improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" re...

infabo

"free-hdd-space" shrinked by ~50kb on "cAP ac":

7.15.3: 780KiB
7.16: 736KiB

Unsure why, my Chateau (D53G-5HacD2HnD) got hit differently:

7.15.3: 712.0KiB
7.16: 632.0KiB

infabo

/ip dns static add forward-to=192.168.5.6 name="example.local" type=FWD match-subdomain=yes

infabo

Xmas is soon. Write a

infabo

It's over when it's over

infabo

*) certificate - show validity beyond year 2038;

Maybe related to this line?

infabo

Yes, these "frames" are connected initially. You need to break out if you need it smaller.

infabo

I used different nano-SIMs from different providers with their adapters and never had an issue. I even once had a microSIM trimmed down with a cutter to the size of a nanoSIM (so I could put it into a smartphone), years later used it in an microSIM adapter again. No problem at all.

infabo

multi-passphrase is not supported for the WPA3-PSK authentication type.

But according to google research none of the competition has PPSK for WPA3-PSK either. Seems to be impossible.

infabo

@gotsprings

PPSK finally available in 7.17beta1

https://help.mikrotik.com/docs/display/ ... properties

infabo

The phenomenon of "not using google before asking" is probably as old as internet search engines. lmgtfy.com exist for a reason. But more and more people use AI. https://letmegpt.com/?q=how%20to%20down ... version%3F

infabo

You need to manually download ROS main package and used extra packages. Then upload these npk files to your router (e.g. using Winbox) and finally hit /system/package/downgrade PS: I don't know why updates are just one click but downgrade is not possible without additional knowledge and several manu...

infabo

Maybe new models, on my SIM slot doesn't have.

Then you maybe crushed it somehow. My first Chateau in mid 2020 already had that.

infabo

infabo

".home.arpa" DNS queries are still being leaked to the WAN network and is not conform to rfc8375. Can it be fixed ASAP please?

Oh yeah, I really hate that behavior. And I see no possibility to turn that off.

infabo

"free-hdd-space" shrinked by ~50kb on "cAP ac":

7.15.3: 780KiB
7.16: 736KiB

infabo

*) wifi - added "slave-name-format"; *) wifi - adjusted virtual interface naming when provisioning local radios; Why is this only done for local radios? The local radios are now named similar to slave-name-format. So e.g.: Master interface: wifi1 1 slave interface: wifi1-virtual1 That is ...

infabo

Yes sure Removed once and destroyed nanosim-to-microsim-to-sim adapter because it was very difficult to pull it out.

Chateau has a push-to-eject mechanism. Did not destroy my nano-SIM adapter in years.

infabo

I love double standards.

Always twisting things to fit the need. When it doesn’t fit, it's a major change.

But when it suits someone, then a "wireless package split" is just a minor change.

infabo

optio, I know. I've read your report. I know you performed a Netinstall without default config. My response was to kleshki's post:

P.S.: still propose MT to disable api/rest stuff in defconf to prevent such things. Those API hacks seem to be common.

infabo

defconf has firewall rules in place that dont allow api access from WAN. But basically I agree; API should be disabled by default in defconf.

infabo

already since 7.14. see viewtopic.php?p=1069285#p1069285

infabo

"streaming-server (IP; Default: 0.0.0.0) Tazmen Sniffer Protocol (TZSP) stream receiver."
https://help.mikrotik.com/docs/display/ ... 0receiver.

infabo

Y u all so scared of ipv6?

infabo

Feature requests can be submitted at: https://help.mikrotik.com/servicedesk/servicedesk/

cross-reference: viewtopic.php?t=164150

infabo

That is a terrifyingly large amount of changes. There has been releases with more changes :) train count 6.43 459 6.42 433 6.47 416 6.46 414 6.39 399 7.2 392 6.40 376 6.38 365 6.44 361 6.48 357 6.45 351 7.16 322 6.41 287 7.15 276 7.14 267 This statistic is wrong. There aren't 322 change in 7.16. Th...

infabo

This is the visualization of how I always imagined it.

infabo

MT always sees everything as change. Just add it optionally on top. Does not break anything. Makes people happy. /log/print format-rfc-5424 or something. You could even declare old log format as deprecated. Then people have plenty of time to migrate. But MT way of approach is more like: replace some...

infabo

You read post #1 before posting?

+1000

😉

infabo

I have a device ax3 with power supply via PoE in Ether1.
Today on version rc5 and after updating to 7.16 also problems appeared “ether1 link down” -> “ether1 link up” -> “ether1 link down” and so it repeats continuously.

It worked on 7.16 rc5?

infabo

IMHO it is okay to ask. I would even encourage you to ask on every single release. It is like in real life: the one that barks the loudest gets served. lol

infabo

Sometimes we see e.g. a 3 lines changelog in some minor release. But that release introduces a bug in an area, completely different/unrelated to any changelog item. So when bugs can sneak into, people assume, fixes can sneak without mentioning into releases as well. And I sometimes see new CLI optio...

infabo

👏🥂🥳

infabo

Sounds like they are just bringing some minor news to calm down everyone... [Person A] "Did you read latest messages on 7.16rc thread?" [Person B] "Yep! They are getting angry... [Person B] "What if we release something to let then entertained?" [Person A] "Sounds good...

infabo

Maybe it would be an idea to separate the two channels "testing" and "development", which are currently the same, and have beta+rc versions in "development" and only rc versions in "testing". Then users could be encouraged to select channel "testing"...

infabo

My first device was a Chateau LTE12. This was the first v7 only device IIRC. I had to use v7 beta. The dude was long time not even available for v7. Long time it was the saying that it probably won't ever be v7 compatible. But then it arrived for v7. But still the documentation lives at http://wiki....

infabo

I still do not get it. Qualcomm is probably one of the largest wireless chipset manufacturers of the world. Then there is ROS, claiming to use manufacturer drivers (wifi-qcom/wifi-qcom-ac). And still there are long staying issues that apparently only affect ROS - and none of the other AX vendors als...

infabo

The default is "ccmp" - according to wifi docs. So there is no need to explicitly disable TKIP.

https://help.mikrotik.com/docs/display/ ... to%20ccmp.

infabo

Latest v7 release. That was a simple question about the ROS version number; the answer to that is not "latest". We don't know what you think "latest" is. My spouse recently updated her iPhone SE to iOS 18 . Since then, she can't connect to the Wi-Fi network. Whenever I try to co...

infabo

There is an "upgrade" channel on v6. That's the safe way. Or you read the manual before doing such a huge upgrade step from v6 to v7.

infabo

So the cable connects your windows PC and your Mikrotik router.

infabo

Did OP ever tell us which ROS version his/her problem occurs on?? Or which Mikrotik AP? I would guess Audience but who knows.

infabo

Lol, just why? "red is blue. and blue is red. what color has this pencil?"

infabo

Connected to which device? ISP router or your Mikrotik one? The ethernet cable speed was tested connecting to the Windows device (same as the one tested with the Wifi connection) So the Ethernet cable was connected to your Windows device on one end. The other end of the Ethernet cable is plugged in...

infabo

Speedtest with Ethernet cable:
Download 980 Mbps/Upload 961 Mbps

Connected to which device? ISP router or your Mikrotik one?

infabo

Seen the screenshots of Dude and I was deeply frightened - I wasn't brave enough to install it. Basically I did not want to find out if it is Wine compatible.

infabo

One reason why people ask for or need a controller software: viewtopic.php?t=211094

infabo

set country usa and fix channels..avoid dfs

nothing wrong with using DFS channels. an lol, advising to use country USA in Europe is illegal.

infabo

your computer connects by 5ghz, sure?

infabo

How did you manage to install wifiwave2 package on that ROS version ?

infabo

2 Guntis: Whats wrong with this RC, when we can expect stable version?

There must be some showstopper(s) apparently. If there are upcoming changes/fixes I hope we se another RC instead of going straight stable. Too high the risk of regressions in last-minute fixes.

infabo

Yeah, I don't have such issues either with wifi-qcom-ac. But I do not have to deal with or support "enterprise" hardware. I have some devices that do not support FT (like an old ipad mini 2 or 3 with some iOS 9 or something) or devices that do not support enforced 802.11w. But no one sane ...

infabo

That shows the legacy "wireless" security profile window indeed.

infabo

So "wifi" (ac).

infabo

Despite advertising: Apple also has bugs. lol

infabo

Is this a wireless or wifi story?

infabo

I am with you. It is up to Mikrotik to give feedback to Apple or Qualcomm or fix it themselves. None of our business.

infabo

easy

https://help.mikrotik.com/docs/display/ ... n+RouterOS

infabo

As already written: ROS logs are not helpful. You all need to capture your client logs.

Look for the section “Wi-Fi for iOS/iPadOS” in iOS Profiles and Logs

infabo

As long as it’s nothing more than that: yes.

infabo

Nothing. But gigabyte says, MT should focus on stabilizing and improving Winbox 4 first. I think that developing several new project's at same time could take too many developer resources at such a small company like MT. Winbox 4 is beta and is going to need a big amount of attention by MT to reach ...

infabo

wifi interworking. Holy batman, that is not even documented.

infabo

Yeah, then give ISP a hardened bootloader mode which prevents reset. AFAIK this is already possible if I am not wrong by a feature called "protected routerboot". But on the other hand: I am not aware of other vendors having such a "reset users and but keep config" feature. But I ...

infabo

1) yes. All configuration for as many devices I like to manage. Across network boundaries. 2) Docker or Linux Container. So one has the freedom to run it anywhere. Powerful ROS device using container package, Raspberry Pi or whatever. But "cloud solution by mikrotik" could useful for regul...

infabo

PS: Don't forget the "default reject" rule for this secondary SSID. Allow by specific time and final rule is a reject.

infabo

I still not understand why ROS does not give any possibility to re-gain access and/or reset users to default (either admin=nopassword or admin=passworddsticker) by performing some actions than can only be performed if one has physical access to device.

infabo

I don't think so. Support in kernel is IMHO mostly relevant for consumer PCs. Embedded devices and even Android smartphones often use very "old" Kernel versions with many patches applied. And SOC vendors like Qualcomm provide their own driver SDK as well.

infabo

You were thrown out of your own router. My condolences.

infabo

Yes, I second that. reselect-interval kind of helps when you have neighbor SSIDs not in your control which switch channels or something. So it is more a thing for the unexpected. Better plan your channels manually and dont rely on "auto". One case Mikrotik did not think of for a CAPsMAN se...

infabo

Access list have time filter. no need for scheduler Scripting

infabo

mkx, you new here? I am not aware of any ROS changelog listing a single known issue. That did not and is not going to happen. Known issues are buried in community (!!) forum release topic in an unstructured manner. That is the reality.

infabo

IMHO this is impossible with single SSID. but you can use one SSID protected and one open SSID and use access list rules for the open SSID.

infabo

I dislike that ROS makes a mystery out of missing permissions. It just says in the logs something like " permissions missing" and that's basically it. Why can't ROS log the exact command which permission is missing? Only Mikrotik knows.

infabo

At least I see no advantage of releasing another major stable release with unresolved Intel AX issues.

infabo

Don't push Mikrotik too hard. Last time I remember people were nagging for RC become stable release was 7.14 IIRC. And we all know this was no good idea. 16MB devices running out of space everywhere and lots of other issues. So better be patient. Mikrotik, take your time to test and fix.

infabo

Sounds interesting.

infabo

But while you're digging through all your tools until you find your shovel, hammer - or even maybe never find the shovel. 😂

infabo

Would make sense. Especially for the European market. Labour is very expensive. An European company can make a simple equation: "pay some more $$$ for hardware but get all the bells and whistles or save some bucks on hardware but spend $$$$$ IT admins for hours of hours for troubleshooting caps...

infabo

Poor souls is the right wording. It is quite sure that Mikrotik is working on some Mediathek based devices. We don't know what kind these devices will be. I would guess wifi7 APs. But who knows. I don't even know why is so top secret. there are only 2 options: wifi7 devices come or not come. a) &quo...

infabo

These look like 10cm thick. I would expect to have at least a weak signal -80 or worse. My AP penetrates at 2 times a 25cm brick wall and some 10cm brick walls in between and I still have a very weak signal. But no signal is super strange.

infabo

Can you estimate the wall thickness? Solid brick or with air chambers?

infabo

Walls made of? Bricks? Concrete? Metal? Drywall?

infabo

100% agree. VLANs with wifi-qcom-ac and capsman makes capsman look like a complete useless dumb manager. Who needs a manager which is not capable of managing its caps? Idiotic. And then for all of a sudden, learning the hard way, you have to use "create enabled" instead of "create dyn...

infabo

The documentation (https://help.mikrotik.com/docs/display/ROS/DNS) does not even list the vrf parameter, so who knows!

This help page knows:

https://help.mikrotik.com/docs/pages/vi ... edfeatures

infabo

In fact that's probably the main problem with whole WinBox 4. Everything in it is HUGE. Sure, there's zoom, so I can make it smaller, but it doesn't really help. Look at it: winbox4-firewall-rule.png I'm currently trying to go with 84%, which already has smaller font than WinBox 3 and I'm still see...

infabo

"PoE in Passive PoE"
https://mikrotik.com/product/hap_ax2#:~ ... in%20input

That's why.

infabo

My feedback, that too many tabs look awful on narrow windows still remains. No tab-title should be "truncated". There are many possibilitys to avoid this: and one way is how 3.x solved it.

infabo

My Winbox application window isnt small. But the child windows inside are. Because I arranged all relevant "wifi" windows in a saved workspace so I can have all wifi related information at a glance. Switch to different workspace for other more overall stuff. Following to suggestion from us...

infabo

"Show all".......................Yeah. Very self-explaining. PER WINDOW as well. As if it weren't already tedious enough to arrange the windows. Now you have to click into each window and deactivate the tabs. UX complaints incoming.

infabo

This is no hide and seek game. I looked at the only known place for options I know of. And there isnt any.

2024-09-13_10-59.png

infabo

Jeeez, please give us an option to hide tabs again. Or at least style them properly as it was in Winbox 3.x. Following to suggestion from user "boingolover", I organized my screens to workspaces now. These tabs look awful on narrow windows.

2024-09-13_10-56.png

infabo

While "read only" is correct, because it is installed globally and Winbox is run with unprivileged user. Still one remark: it is a Linux host and I do not have an "Applications" folder. ;)

2024-09-13_10-49.png

infabo

polish behavior with new Winbox 4, but - who knows...

Would not make sense to me. Winbox 4 is early beta and that should not be any priority for any stable ROS version right now.

infabo

It is called WinBox and not TabBox.

infabo

Interestingly, the same request is pending at the competitor for at least 3 years... Start wondering if it may be technically difficult or impossible to get that information on the AP side... made me curious. stumbled upon a user called "pe1chl" over at un*f* community forum feature reque...

Search found 2003 matches