MikroTik

infabo

the name literally includes the word "home" "The Dude" literally includes the word "dude". But how can a software be a dude? So please be serious: BTH is a product name. It could also be named "Phone to Home" and still be the same service. Wireguard and no re...

infabo

It is up to the individual to use it for business purposes. Some can live with outages. Like many people worldwide can live without electricity for many hours of the day quite fine. So: "Caution 4: While cloud services offer convenience and are free, their service uptime cannot be guaranteed.&q...

infabo

I'd like to suggest a public status page for Mikrotik services. So people don't have to flood forum and support helpdesk with all the same "omg, it is down" reports.

infabo

Indeed, works here again as well. Did not set up a Cloudflare DDNS though.

infabo

No need for +1 comments. You already have the attention by Mikrotik.

We have identified the issue and a fix is coming shortly.

infabo

viewtopic.php?t=213191

infabo

Nameservers are usually rock stable. But I have no idea of the architecture of this cloud service tbh. It is what it is: a convenient feature for home users or personal use. My opinion: don't rely on it for critical access or in commercial environment. It is out of your control.

infabo

Actually a short story. Thanks for letting us know. Now you can mark topic as solved.

infabo

thanks for necroposting. better continue here: viewtopic.php?t=213191

infabo

IMAP or POP? For IMAP there are sync settings. Usually you just need to sync message headers and not the whole message/attachments.

infabo

Well, thats one for the helpdesk, "feature request" inquiry.

infabo

As long as TLS 1.2 is still considered secure and ROS supports secure ciphers, I couldn't care less. Everything else is compliance BS.

infabo

if they dont use any of the common libraries like openssl, then it is maybe quite an effort for Mikrotik. They have to set priorities. Not laziness. We know ROS lacks many features and I guess support for TLS 1.3 is not crucial - now.

infabo

We don't know.

infabo

Because there is no urge for Mikrotik to support it. As long TLS 1.2 is not deprecated/discouraged as 1.0/1.1 - Mikrotik won't move.

infabo

It may be assisted by ChatGPT or just good old copy paste from google results.

infabo

7.16.2

infabo

In summary:
* connect-priority=0/1 seems to be mandatory for Intel based wifi cards

No. I have no such disconnect issues on my Intel AX200 devices (Windows+Linux).

infabo

Typical error. Asking how to solve brainfart instead of describing the problem to solve and get the real solution.
We don't know what OP wants to solve, but i suspect that a classical hashmap is what OP want.

infabo

regarding Fritzbox, have you tried:

"EEE (Energy Efficient Ethernet) in FRITZ!Box deaktivieren"
https://at.avm.de/service/wissensdatenb ... aktivieren

infabo

First time ever my cap ac (running wifi-qcom-ac) locked up yesterday (wifi stopped broadcasting, device not reachable). Needed to power cycle. Log only said "rebooted probably of power loss". What changed in 7.16.2?

infabo

yes, directly to customer support. https://mikrotik.com/support

infabo

It is not a bug. ed25519-sk is just not supported. Only recently the have added ed25519 support.

infabo

i like reading that kind of stories. The tragic hero, IT professional with decades of experience in rocket science IT. First time has to do Mikrotik and fails hard because of that Latvian vodoo. Then visits Mikrotik user forum to vent. The end.

Basically the boilerplate for many topics here.

infabo

I could not identify any request to this specific "CRL update" event until now. There are only TLS requests in the time frame. But I see other packets originating from the router itself toward some "suspicious" destinations (cloudfront,amazonaws,skewed.de, ....) where I dont know...

infabo

Since updating to 7.16.2 these CRL messages are going crazy: [ro@uter] > log/print where message~"CRL" 02:20:05 certificate,debug GENERAL: start CRL update 02:21:05 certificate,debug GENERAL: start CRL update 02:22:05 certificate,debug GENERAL: start CRL update 02:23:05 certificate,debug G...

infabo

Some of you propose hap AX2 for $80-100, but I do not need wifi - I want an even better price for equipment that can handle gigabit internet without major investigations. wifi-qcom is an extra package. Dont install it. No drivers - no radio. It is like saying: "I don't buy a 5 ethernet port ro...

infabo

there is even a curl to Mikrotik fetch converter

https://tikoci.github.io/postman-code-generators/

infabo

Mikrotik must have evidence of effectiveness. Otherwise they would not introduced this change in default configuration.

infabo

HEX refresh is a router. It does not even have Switching results in the Tests tab. So it is not primary intended to be a switch. Yes, it has a switch chip built in (EN7562CT) and can do HW offload. But again: It is a router.

infabo

Please introduce the possibility to disable workspace "auto-save". Why even auto-save is a feature at all? There is a "Save" button in the workspace drop-down list. Is the button there just for the sake of layout needs a button? I use a tiling window manager and I **hate** it whe...

infabo

These results are a pure consequence from having that ether1 port directly connected to CPU and not to switch chip. In case used as a router it would have to pass CPU anyway. An c'mon, with these few ports who would buy such a device as switch? You can buy dumb unmanaged switches in this form facto...

infabo

In that same config using ether1 as uplink, speeds go down drastically (peaking sometimes towards 500-600Mbps but rarely more, average 363 Mbp s). I can't believe. That would make this "refresh" completely use-less for anyone living in 2024. I'd like to quote Viktors from the YT video: ht...

infabo

I hadn't noticed that, but in any case, the Winbox 4b12 version isn't opening and is generating errors, and according to the changelog it should run on macOS BigSur. It's a shame that they discontinued macOS 11, because in some countries a new MacBook isn't that cheap. you can upgrade nearly any ma...

infabo

Look at the results for the 512 kbp packet size and there are basically your real world results. Just depends on your config as to what results you'd see. Thanks for confirming the advice I found earlier - to look at 512B column in the last line. Nowdays, Mikrotik has again created a device that ca...

infabo

"Ethernet test results"

https://mikrotik.com/product/hex_2024#testresults

infabo

I'd like to hear an explanation why this is the default behavior: If (accept-priority of AP2) = (hold-priority of AP1), a connection to AP2 will be allowed only if the MAC address can no longer be reached via AP1. This basically - IMHO - leads to unnecessary disconnect messages in log. Client is con...

infabo

I did search the forum to try to see what you are asking for, but there are no post about SUP-172111 SUP-172111 is the new ticket for a bug that was already fixed in the 7.15rc (SUP-151054): https://forum.mikrotik.com/viewtopic.php?p=1071424&hilit=151054#p1071424 It's back from 7.17beta: hAP ac...

infabo

Or, cheaper than throwing away 1,5k€ (it will end up as a keeper unless you offer it as an 1€ auction anyways): write to Mikrotik support and ask about the compatibility. You cant expect in a community forum to have the solution after one single day. https://help.mikrotik.com/servicedesk/servicedesk...

infabo

Isn't it related? I hadn't noticed that, but in any case, the Winbox 4b12 version isn't opening and is generating errors, and according to the changelog it should run on macOS BigSur. It's a shame that they discontinued macOS 11, because in some countries a new MacBook isn't that cheap. beta12 does...

infabo

I have a very bad experience with jumping to such high release versions.
........
I don't wanna risk it because there are over 300 subscribers connected to it.

Yeah, I would not risk either. As one subscriber I would even shoot you for rebooting this device in fc...g production!

infabo

ROS main package size increased in 7.17. But I think not more than around 200kb. On 7.16.2 it reports 765KiB "free-hdd-space". So not to worry right now. But Mikrotik needs to keep an eye on that. I hope 7.14 was enough of the trouble.

infabo

I disagree.

infabo

For me, specifically adding the connect-priority=0/1 (in combination with default settings mostl) made my Samsung S21+ and iPhone 11 roam without disconnecting first.

I would call this a workaround. Sort of. I don't know why "accept- equals hold-priority" is the default after all.

infabo

Also my laptop, which has the Intel AX211 is no longer giving me headaches.

Weren't you on the "My Mikrotik wifi6 works like a charm"-train all the time?

infabo

Because I have a "strong opinion" on Fortinet especially (as one of these "enterprise" vendors), here is my 2 cents - with ChatGPT "polite" filter applied. So please don't say it is ChatGTP made up. Enterprise solutions like Fortinet often come with their own challenges...

infabo

Always to complain

infabo

ROS 7.14 introduced a new queue type for ethernet interfaces on LTE devices (e.g. Chateau line). *) defconf - use "fq_codel" queue as default interface queue for wired ports on LTE devices; In "/system/default-configuration/print" it is implemented like this: /queue type add name...

infabo

/interface detect-internet set detect-interface-list=all Please remove that detect internet thing by: /interface detect-internet set detect-interface-list=none You already know where your WAN "lives". No need to detect and mess up your config with that crzy magic wand. You did not tell us...

infabo

No, not the same level. It keeps the attacker out for another 100ms or so. I hope this is just a sample TBH

infabo

@gjmelena what is your issue with create enabled? And regarding the free ticket system: Mikrotik uses a commercial ticket system: https://help.mikrotik.com/servicedesk/servicedesk And on case you wrote directly to support@mikrotik.com, this also be channeled to their ticket system IIRC. If you did n...

infabo

you could have opted for a cheaper device that does not have routing and wifi built in.

Name this cheaper Mikrotik device with built-in 5G support without the other bells and whistles (wifi, etc.)

infabo

Because OP is running an OpnSense firewall.

infabo

you can stick them upside down and tell your wife it stands for "W" like wife.

infabo

Try BTH.

https://help.mikrotik.com/docs/spaces/R ... ck+To+Home

infabo

Agreed. Do an export with sensitive so you have reference config at hand (in case there are some vpns or something important configured). then netinstall (with reset config) to latest ROS.

infabo

wifi-qcom-ac drivers may not be affected at all. No issue here as well.

infabo

this device should have a default firewall config. Maybe it is quick set as CPE or something - as these quickset profiles remove firewall rules IIRC.

infabo

wifi-qcom-ac for some also could work.

infabo

At least the wifi CAPsMAN config remains

infabo

about downgrades, there is ZERO logical reason to knowingly downgrade to a version with a known CVE, possibly allowing easy access to the device by a hacker. Zero. Do not try to find it. This is new to me ... that ROS upgrader has built in function to check certain ROS package against database of C...

infabo

@holvoetn look here: https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode#Devicemode-Featureclarification I've seen a response to a bug ticket this will be prevented later on. Until this I believe what on help.mikrotik.com is documented. "routerboard" restricts "system...

infabo

It is still possible to downgrade ROS as normis already explained. see https://help.mikrotik.com/docs/spaces/R ... edversions

infabo

The real question is: how many people - in teh real world - rely on traffic-gen, re-partition and downgrade to insecure ROS versions with known security vulnerabilities? Ok, the routerboot settings thing may be an issue for someone. But tbh: if you have the regular need to mess around with routerboa...

infabo

There is never a perfect world. But for certain device types, cloud provisioning these days is leading the way. There also needs to be local management. If we cloud provision, the device info and network/device password would be saved at an administrative level. We copy password and use it to acces...

infabo

Won't happen. It would be ridiculous to introduce security measures in stable branch while keeping "loose device-mode" in a long-term branch for another long period of time.

infabo

*) dns - fixed lookup order for static DNS entries (introduced in v7.16.1);

I did not know that there is an documented lookup order at all? Any details? Is this the problem reported here: viewtopic.php?p=1111498#p1111473 ?

infabo

Something I would ask support@mikrotik.com

infabo

Cloud device management is as secure as using cloud password vaults. Go ahead, there are many enterprise hardware vendors out there. I for myself chose Mikrotik, because they dont do (and obviously honestly dont believe in) that Cloud crap.
Sry for the offtopic post.

infabo

- Develop a damned cloud portal for us "enterprise" [IT/MSP/WISP/Enterprise/Professional] for us to manage and provision XYZ devices [Pro/Enterprise] type of hardware MikroTik develops. This would create the added layer of security

cloud and security. lol. keep your enterprise stuff.

infabo

yes, but why would you want to disconnect local radios again?

infabo

Depends on the Qt version. 6.5 LTS still supports macos 11. 6.8LTS support macos 15.

Well played. Finally Mikrotik tooling has to move with industry.🙀

infabo

PS: provisioning local radios is only needed once. They pick up changes as any other radios managed by capsman automatically.

infabo

you can use

/interface/wifi/radio provision

to provision you local radios according to your provisioning rules.

Thats it. Also documented. https://help.mikrotik.com/docs/spaces/R ... ovisioning

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

One disabled ovpn-server was/is always there - even if you do not use ovpn server at all. Configuration is upgraded and new server is created only if in older version at leat one parameter in server configuration was set by you to non-default value. Word. I am going to observe/check once 7.17 final...

infabo

See the changelog: *) ovpn - added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported); That first OVPN server that you have is the default server, same as there was one before. I'd like to add this: This shows you the &...

infabo

And probably delete partitions is restricted as well.

infabo

just delete the default.json file. did this not help?

infabo

I support this request. DNS gained a lot of attention recently (adlist, dns forwarders, etc.). And such a feature, registering hostnames in internal DNS resolver, would be a killer. I could remove that wonky dhcp lease script that just bloats my configuration export. And save on disk writes I would ...

infabo

I noticed that when a DNS forwarder is set up with DoH servers, but DoH server is not used in the DNS settings, forwarding does not work. Is this how it's supposed to work?

Yes, according to docs these forwarders are used for DNS FWD entries only.

infabo

SerDan, what is your complaint?

infabo

that's frightening 🙀

infabo

For automation just use flashfig. Eapeccially when provisioning 100 factory new devices.

infabo

@webfig: maybe you need to clear browser cache (or open devtools by F12 and disable cache). Just to be sure it is not missing browser cache invalidation in webfig.

infabo

impossible that webfig skin designer is broken in a RC release.

infabo

You can, in Enterprise plan

https://developers.cloudflare.com/dns/z ... ain-setup/

infabo

maybe this light want tkip?

infabo

Thank you for this objective and informative insight. Things are not always black and white.

infabo

Looks like a nice little device. Features a lot of "AI" features. Have fun!

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

or put a web application firewall in front which handle rate limiting. done. PS: cloudflare is the most widely known WAF. But there are others as well. Even varnish could help to its extent - if you want to avoid 3rd party cloud services. But one is for sure: you cant beat or optimize anything out ...

infabo

Interesting. Then it's maybe the different wireless AX chipsets in the MikroTik hardware.

infabo

I would say: most probably. Give it a cold boot. If this does not help: contact your distributor.

infabo

just update your client device intel driver - probably more successful than running beta ROS. I have window 10 and Manjaro Linux both running AX200 cards and I dont have these disconnect logs. But I do keep my systems up2date.....

infabo

or put a web application firewall in front which handle rate limiting. done.

infabo

How do I configure new forwarders in my DNS server settings?
Please check the documentation:
https://help.mikrotik.com/docs/spaces/R ... 748767/DNS

Direct-Link to section: https://help.mikrotik.com/docs/spaces/R ... terOS7.17)

infabo

"8C:17:59" belongs to "Intel Corporate". At lest we know this.

infabo

Now you mentioned it: it has PRO in all caps. Like this would be an acronym for something....

infabo

Linux version 4.0beta12:
when you hover the mouse over a shortcut (e.g. R) in interfaces - it does not show the expansion.

You mean the absence of tooltip, right? I'd suspect this is not implemented in v4 yet.

infabo

It’s not about the spacing itself; it’s the inconsistency in how spacing is applied. Sometimes elements stick to the top or bottom, and other times there are no gaps at all. It feels freestyle rather than consistent, like you’d expect in a design system.

infabo

This does not resolve the general "space-wasting" in the whole UI. I am not against "airy" and "big" UI per se. Proportions must be correct. Its like inflating "Michelin man" to a maximum to look like a balloon.

infabo

of course you can.

infabo

Just updated on MacOS 11.7.10 by the integrated updater. Now Winbox crashes on startup.

*) improve scrollbar UX

Is there an before/after on the improvement? Is it thicker now? Or what changed?

infabo

I have a hAP ax³ and since I had it never worked well with multiple devices. But the worst thing is that I cannot even use the 5Ghz band with my notebook(having Intel AX200 card) because of the frequent disconnects, standing 2 meters away from the device. I tested it with the latest beta too, same ...

infabo

Massive Improvement for me in dark Mode, much more useable. Thanks for listening, much appreciated. I don't see any substantial change/improvement in dark mode. But can't tell who it looked in previous beta as I use light mode because WinBox dark mode lacks readability/contrast (for me). Whereas I ...

infabo

Yes, I mean tree view. Does this also apply to virtual wifi-interfaces? Does not look like.

infabo

Are there tables elsewhere than "Files" module?

infabo

You are completely right. It should be enough with read, to just read. and should be enough with write, to upgrade. But there are deep running issues in the policy system everywhere, we have to re-make the whole thing. Wow, I’d like to extend a big compliment for acknowledging that the policy syste...

infabo

If the latest beta version does not solve your issue, please send supout.rif file to support, describing in detail about what happened. Can you share what change in beta5 is related to resolving this issue? Can you share the issue you are experiencing besides the log message? It is your first post ...

infabo

thats the place you can print them. you define them one level up.

infabo

Well, why not just mention that in changelog?

"*) add support for model xzy rev4"

all way too mysterious

infabo

I think most of the MIPS hardware gets v6 in factory still - given they are manufactured still. But what makes me wonder more than that: why was it necessary to release 6.49.16 without a single actual change? This maybe only makes sense for the purpose of raising the "factory-software version&q...

infabo

when compromised at least one device on at least 2 different networks (meaning 2+ devices), you can establish a btest between these devices.

infabo

Install appropriate package. wireless or wifi-qcom-ac.

infabo

By the push of a button or power-cycle :D

infabo

Srsly, before asking and making the effort to create a topic.

Just review your one-liner - saves you and us some time.

You specify "mode=https" but use and "http://" URL.
Decide on this.

infabo

Barely useable I would say. Server error galore

infabo

netboot aka netinstall is initiated by reset button press.

infabo

According to your posted and commented config "84:0D:8E:38:C0:64" is "Vue White" and not "Emporia Vue".

infabo

Dear MikroTik, I’d like to suggest focusing on enhancing the "flagged status" feature rather than restricting the default feature set of RouterOS. A better approach might be to analyze system configurations for abnormalities. Many forum threads highlight cases where users have been hacked ...

infabo

You need a WAF at least to dodge all these massive nonsense requests that just generate load on the webserver.

infabo

But it looks better!

infabo

check your cabling

infabo

Given the wide variety of environments where Mikrotik equipment is deployed, it's quite bold to sit in the comfort of the Mikrotik headquarters in Riga, maintained at a pleasant 20°C, and suggest in a straightforward manner: blingblouw2 you can just enable bandwidth test. ask the user to push the bu...

infabo

Which ROS version is currently running on?

infabo

There is a "spotted in the wild" series on Mikrotik youtube channel. People send images of Mikrotik devices found anywhere. Sometimes on obscure places (hard, hard to reach physically). Still they insist on the button push confirmation thing.

There must be an alternative approach.

infabo

Maybe victim of traffic-gen attack

infabo

/ip dns set allow-remote-requests=yes cache-max-ttl=1d cache-size=250000KiB doh-max-concurrent-queries=200 doh-max-server-connections=2 \ doh-timeout=4s max-concurrent-queries=200 max-concurrent-tcp-sessions=40 use-doh-server=https://dns.quad9.net/dns-query \ verify-doh-cert=yes [/code] All these a...

infabo

hAP - home AP
wAP - wall AP
cAP - ceiling AP
wsAP - wall socket AP
mAP - mini AP
ltAP - LTE AP

https://youtu.be/n1Zfq_SDTrY?t=90&si=HsXnvttvyH9-dRIx

Viktors says wAP stands for "wireless access point".

infabo

Jabber I preferred back then.

infabo

I know right!! My first comment is that wifi = 1/8 of a config (if that) , as soon as one invokes capsman wifi=2/3 of a config. Its not clean and effiicient to program or read its friggen BLOATWARE Do you even know what you're talking about? You’re an AX3 owner, right? WiFi CAPsMAN is no different ...

infabo

Took a cap AC out of the trash pile. Loaded up the latest stable 7.16.1. My router still has capsman on it so it configured right away. Bunch of devices connected right away. Got a phone call... was breaking up all over. Logged into my old as hell wifi camera... one frame every couple of seconds. T...

infabo

The wifi-qcom-ac package breathes new life into this old device.

infabo

Considering the amount of flak they've gotten in this thread, I would be surprised to see any new public beta this year. Did not age well. *) disk - add support for SWAP, currently allowed on any block device with "set x swap=yes" when container package is installed (CLI only); 😍😍😍😍😍😍😍😍😍😍...

infabo

Most probably user error.

infabo

cap ac + wifi-qcom-ac = 💪 Regarding future proofness: https://forum.mikrotik.com/viewtopic.php?p=1108989#p1107303 Looking at the system resources and roughly free-memory of 36MB it is IMHO only a matter of time that we may see here similar issues like these: https://forum.mikrotik.com/viewtopic.php?...

infabo

It's just that dogs balls are more pleasant to look at.

infabo

Trying to upgrade a CCR1009 working as a wifiwave2 capsman from ROS 7.12 (has routeros and wifiwave2 packages) I get an error: wifi-qccom-ac-7.16.1-tile.npk missing, use ignore-missing or disable package(s) Will I loose the capsman configuration ? You dont need any wifi packagge on your CCR anymore...

infabo

please no png, I dont want another source of bad scanability. Just render a SVG.

infabo

Overall I'm not so much impressed by the wap ax. The shorter range in the 2.4ghz band is a major drawback for me. The 180° antenna also doesn't cover the area behind the device well. I’d prefer a 360° coverage and a stronger 2.4ghz signal. With cap ac I have a useable signal outdoors - with wap ax t...

infabo

rm78 talks about "regular consumer devices". These kind of devices by Mikrotik have a default configuration (which can be reverted though). That is what I was referring to.

infabo

Do you experience any real world issues or is this an academic question?

infabo

Default configuration does not allow accessing webfig from WAN.

infabo

@rextended I did not want to correct you, I did not even know about this "reserved variable names" thing. I just looked up the docs for reserved keywords. And it did not list these. But aren't you the inventor of the raised index finger? See your first post: "the a-b-c of... is a prob...

infabo

"comment" is no reserved keyword. https://help.mikrotik.com/docs/spaces/R ... g-Keywords

infabo

https://help.mikrotik.com/docs/spaces/R ... PN+problem

infabo

Out of curiosity, I enabled logging for all topics, excluding some of the particularly "noisy" ones: /system/logging/add prefix=GENERAL topics=!ssh,!lte,!wireless,!ipsec,!l2tp,!dns Now, I'm seeing these "start CRL update" messages appearing. There are two requests every hour. [ro...

infabo

Wireguard has no hardware acceleration - it uses CPU. So it pretty much depends on your ISP bandwidth and how much of it you expect to get over Wireguard.

infabo

Is this jeopardy? Show us your configuration please.

infabo

Reboot already tried?

infabo

lol, very educational debate

infabo

I also adore how detailed Cambium includes technical specs. Normis once said there are no "antenna radiation patterns" available - IIRC too expensive - so they just have none. That may be true for "legacy" devices but for the wap ax they exist over at fccid.io. So it would be eas...

infabo

My log is flooded with "too strong signal" log entries ("xxxxxx@cap-wifi2 disconnected, too strong signal, signal strength 159"). But this is nothing ever reported here and I have already reported that to Mikrotik. SA query timeout only occasional, no more frequently than on cap ...

infabo

So, now I have wap ax running for about a week and I can't seem to have any of the issues discussed here. I have it pretty much on default, meaning I have wpa2-psk/wpa3-psk enabled and all the other bells and whistles like FT and so on. No issues. Well, don't have fancy pants latest iPhones nor do I...

infabo

First, I would not distribute external DNS down to clients: So instead of /ip dhcp-server network add address=192.168.27.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.27.1 use /ip dhcp-server network set [find gateway=192.168.27.1] dns-server=192.168.27.1 Why even use 3rd party DNS? Is there somet...

infabo

Web Browser

infabo

I really want this myself. This fc**ng shorts are some real time stealer.

infabo

No idea what it is. Sometimes it shows "-74" or some realistic value. But most of the time it is a positive value. It goes up to 149 I have seen. Today it shows strength in interval of -83...-80. As it is realistic. But I did not reboot capsman nor did I reboot cap and not even the client ...

infabo

Seems like wap ax is truly designed for outdoor usage mainly.

infabo

Why do I see positive signal values in registration table for one client only?

2024-11-06_17-06.png

infabo

Seems like you have some more general issues with password handling. There is no magic involved.

infabo

What is this kind of bug? "too strong signal, signal strength 159". Should I report this?

2024-11-06_09-38.png

infabo

I am running Mikrotik wireless as well. But I would not call me a die-hard fan of the gear. But I did not find anything better that matches my requirements. Always open for improvement.

infabo

I even tested with a live tv channel playing on the tablet and there was abojt a second drop off when it switched. Is that good?

You may get rid of that dropoff by enabling ft and ft-over-ds.

infabo

[admin@MikroTik] > system/resource/print uptime: 1d23h45m10s version: 7.16.1 (stable) build-time: 2024-10-10 14:03:32 factory-software: 7.15.1 free-memory: 36.8MiB total-memory: 256.0MiB cpu: ARM cpu-count: 2 cpu-frequency: 800MHz cpu-load: 2% free-hdd-space: 96.9MiB total-hdd-space: 128.0MiB write...

infabo

Why do clients then see weaker signal? Are higher gain antennas better for AP RX direction? Besides beeing more directional.

infabo

BTW, what does /interface/wifi/radio/print detail show set to min-antenna-gain? Acvording to your observations it should be set to 7 for both radios.

 2   min-antenna-gain=7 hw-type="QCA5018" 

 3   min-antenna-gain=7 hw-type="QCN6122"

infabo

Well, then we have to take this granted: https://fccid.io/TV7WAPGR52AX/Test-Report/Antenna-specification-7634095 Infos on wap ax product page change on a daily basis. Today it says "7dbi" for both 2.4ghz and 5ghz again. That matches with fccid.io antenna measurements pdf. So these are most...

infabo

Thank you. There are not many Mikrotik wireless fanatics here. If any at all (maybe erlinden

).

infabo

Ruining exsiting well-designed GUIs to unusable low-contrast no-borders style is the hype of today's design. Winbox is not even the worst example of that. And probably the motivation for it is not the same either, it is just that tools for "modern GUI design" all suck because "everyo...

infabo

But we can extrapolate things a bit: hAP ax lite is run by same SoC and 2.4GHz radio is run by SoC-built-in radio hardware, so I think we can safely assume the same limits apply. Now: for fastest modulation, available for N standard (MCS7) on 2.4GHz band, Tx power limits are: 22dBm (wAP ac) and 17d...

infabo

Please provide a name of the new AP - or it did not happen.

infabo

Dont forget: CRS: Cloud router switch ... ... which doesn't really belong into xAP family of devices, does it? And generally doesn't provide wireless coverage at all, does it? In case you missed: this thread was about wAP and @Normis tried to explain that wAP (due to being wall AP) doesn't really h...

infabo

Dont forget:

CRS: Cloud router switch

...

infabo

3) From the GUI, if you go into a wifi interface that is set up as PSK, and simply click "Apply", the passphrase will be corrupted and you'll have to go back and retype it. Under the hood it sets the passphrase to \E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2 no...

infabo

I am more worried about the low 2.4ghz coverage.

infabo

Of course I am sure about this. I see this via various places. First hand on client devices supporting that, then on registration table the advertised PHY speed and then on "interface wifi monitor" See https://forum.mikrotik.com/viewtopic.php?p=1106982&sid=142f73221890ef8e0c499696c01ed...

infabo

Can't answer on the antenna gain question. But it supports 160mhz channel so it is AX2402 / AC1733.

infabo

I don't see a difference in wifi-qcom-ac vs wifi-qcom regarding the SA query thingy. They happen over the day, but they have a reason like device out of reach. Have an AX200 notebook and no issue. But only a few days of experience yet. Regarding the signal strength: I put my phone flat on a table an...

infabo

infabo

5ghz signal is good as far as I can tell.

infabo

On both wAP ac and hAP ax lite (so predumably on wAP ax as well) Tx power is limited by EIRP and thus range of wireless "cell" is exactly the same (at least in direction where each device's antenna has best gain)

And why do I observe worse RSSI on the same distance?

infabo

Something is pretty wrong with their published specifications: 2024-10-31_01-03.png - 2.5dbi for 2ghz - 7dbi for 5ghz So far so good. Reported TX-power is like both antennas have 7dbi. That's what basically the PDF @ ffcid.io said: 6.9dbi 2ghz, 7dbi 5ghz. And that is what is burned into ROS as well...

infabo

Exactly, never seen a smaller font on any piece of paper ever. This is an achievement.

infabo

What ROS reports as country-info is not what device can do

That is true. We don't know if device is even capable to transmit at e.g. 30dbm even if not regulatory limits would apply.

infabo

Something is pretty wrong with their published specifications: 2024-10-31_01-03.png - 2.5dbi for 2ghz - 7dbi for 5ghz So far so good. Reported TX-power is like both antennas have 7dbi. That's what basically the PDF @ ffcid.io said: 6.9dbi 2ghz, 7dbi 5ghz. And that is what is burned into ROS as well....

infabo

ROS has rogue DHCP server alert functionality: https://help.mikrotik.com/docs/spaces/R ... HCP-Alerts

infabo

on your pppoe-client: set "use-peer-dns=yes" and youre good to go.

infabo

see viewtopic.php?t=134404#p664501

infabo

Just use the upgrader and dont copy around npk files manually. Or do you have a special reason for doing cumbersome way?

infabo

I would not be so critical - when it was not named PRO. There is actually nothing PRO in this device. The other Chateau AX devices at least feature one 2.5G port - and that would have been the minimum to add here as well. But you can install ROSE and attach an USB SSD and make it a NAS (according to...

infabo

use /tools/profile when under load and bad throughput. I guess there is something running over cpu.

infabo

"cure-se.fronius.com". "curse" - pun intended?

infabo

Try with ft=no.

infabo

"In Fall der Verwendung einer Firewall fuer ausgehende Verbindungen". lol. "Im Fall" would be correct. But that's just a side note. The point is: only outgoing connections are needed. According to that "list.jpg" there is no need for: - no upnp - no nat-pmp - no whateve...

infabo

Why not?
Why size would influence the decision? Being bigger I mean. Trying to understand

esthetics.

infabo

Why not?

infabo

My plan is also to replace cAP ac by wAP ax. But I won't do that foolishly just for AX. I am going to perform some iperf and general connectivity tests before I actually replace good ol cap ac.

infabo

Everything flows, everything changes ...

Now AX3000 again.

Search found 2273 matches