MikroTik

infabo

/interface detect-internet set detect-interface-list=all Please remove that detect internet thing by: /interface detect-internet set detect-interface-list=none You already know where your WAN "lives". No need to detect and mess up your config with that crzy magic wand. You did not tell us...

infabo

No, not the same level. It keeps the attacker out for another 100ms or so. I hope this is just a sample TBH

infabo

@gjmelena what is your issue with create enabled? And regarding the free ticket system: Mikrotik uses a commercial ticket system: https://help.mikrotik.com/servicedesk/servicedesk And on case you wrote directly to support@mikrotik.com, this also be channeled to their ticket system IIRC. If you did n...

infabo

you could have opted for a cheaper device that does not have routing and wifi built in.

Name this cheaper Mikrotik device with built-in 5G support without the other bells and whistles (wifi, etc.)

infabo

Because OP is running an OpnSense firewall.

infabo

you can stick them upside down and tell your wife it stands for "W" like wife.

infabo

Try BTH.

https://help.mikrotik.com/docs/spaces/R ... ck+To+Home

infabo

Agreed. Do an export with sensitive so you have reference config at hand (in case there are some vpns or something important configured). then netinstall (with reset config) to latest ROS.

infabo

wifi-qcom-ac drivers may not be affected at all. No issue here as well.

infabo

this device should have a default firewall config. Maybe it is quick set as CPE or something - as these quickset profiles remove firewall rules IIRC.

infabo

wifi-qcom-ac for some also could work.

infabo

At least the wifi CAPsMAN config remains

infabo

about downgrades, there is ZERO logical reason to knowingly downgrade to a version with a known CVE, possibly allowing easy access to the device by a hacker. Zero. Do not try to find it. This is new to me ... that ROS upgrader has built in function to check certain ROS package against database of C...

infabo

@holvoetn look here: https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode#Devicemode-Featureclarification I've seen a response to a bug ticket this will be prevented later on. Until this I believe what on help.mikrotik.com is documented. "routerboard" restricts "system...

infabo

It is still possible to downgrade ROS as normis already explained. see https://help.mikrotik.com/docs/spaces/R ... edversions

infabo

The real question is: how many people - in teh real world - rely on traffic-gen, re-partition and downgrade to insecure ROS versions with known security vulnerabilities? Ok, the routerboot settings thing may be an issue for someone. But tbh: if you have the regular need to mess around with routerboa...

infabo

There is never a perfect world. But for certain device types, cloud provisioning these days is leading the way. There also needs to be local management. If we cloud provision, the device info and network/device password would be saved at an administrative level. We copy password and use it to acces...

infabo

Won't happen. It would be ridiculous to introduce security measures in stable branch while keeping "loose device-mode" in a long-term branch for another long period of time.

infabo

*) dns - fixed lookup order for static DNS entries (introduced in v7.16.1);

I did not know that there is an documented lookup order at all? Any details? Is this the problem reported here: viewtopic.php?p=1111498#p1111473 ?

infabo

Something I would ask support@mikrotik.com

infabo

Cloud device management is as secure as using cloud password vaults. Go ahead, there are many enterprise hardware vendors out there. I for myself chose Mikrotik, because they dont do (and obviously honestly dont believe in) that Cloud crap.
Sry for the offtopic post.

infabo

- Develop a damned cloud portal for us "enterprise" [IT/MSP/WISP/Enterprise/Professional] for us to manage and provision XYZ devices [Pro/Enterprise] type of hardware MikroTik develops. This would create the added layer of security

cloud and security. lol. keep your enterprise stuff.

infabo

yes, but why would you want to disconnect local radios again?

infabo

Depends on the Qt version. 6.5 LTS still supports macos 11. 6.8LTS support macos 15.

Well played. Finally Mikrotik tooling has to move with industry.🙀

infabo

PS: provisioning local radios is only needed once. They pick up changes as any other radios managed by capsman automatically.

infabo

you can use

/interface/wifi/radio provision

to provision you local radios according to your provisioning rules.

Thats it. Also documented. https://help.mikrotik.com/docs/spaces/R ... ovisioning

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

One disabled ovpn-server was/is always there - even if you do not use ovpn server at all. Configuration is upgraded and new server is created only if in older version at leat one parameter in server configuration was set by you to non-default value. Word. I am going to observe/check once 7.17 final...

infabo

See the changelog: *) ovpn - added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported); That first OVPN server that you have is the default server, same as there was one before. I'd like to add this: This shows you the &...

infabo

And probably delete partitions is restricted as well.

infabo

just delete the default.json file. did this not help?

infabo

I support this request. DNS gained a lot of attention recently (adlist, dns forwarders, etc.). And such a feature, registering hostnames in internal DNS resolver, would be a killer. I could remove that wonky dhcp lease script that just bloats my configuration export. And save on disk writes I would ...

infabo

I noticed that when a DNS forwarder is set up with DoH servers, but DoH server is not used in the DNS settings, forwarding does not work. Is this how it's supposed to work?

Yes, according to docs these forwarders are used for DNS FWD entries only.

infabo

SerDan, what is your complaint?

infabo

that's frightening 🙀

infabo

For automation just use flashfig. Eapeccially when provisioning 100 factory new devices.

infabo

@webfig: maybe you need to clear browser cache (or open devtools by F12 and disable cache). Just to be sure it is not missing browser cache invalidation in webfig.

infabo

impossible that webfig skin designer is broken in a RC release.

infabo

You can, in Enterprise plan

https://developers.cloudflare.com/dns/z ... ain-setup/

infabo

maybe this light want tkip?

infabo

Thank you for this objective and informative insight. Things are not always black and white.

infabo

Looks like a nice little device. Features a lot of "AI" features. Have fun!

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

or put a web application firewall in front which handle rate limiting. done. PS: cloudflare is the most widely known WAF. But there are others as well. Even varnish could help to its extent - if you want to avoid 3rd party cloud services. But one is for sure: you cant beat or optimize anything out ...

infabo

Interesting. Then it's maybe the different wireless AX chipsets in the MikroTik hardware.

infabo

I would say: most probably. Give it a cold boot. If this does not help: contact your distributor.

infabo

just update your client device intel driver - probably more successful than running beta ROS. I have window 10 and Manjaro Linux both running AX200 cards and I dont have these disconnect logs. But I do keep my systems up2date.....

infabo

or put a web application firewall in front which handle rate limiting. done.

infabo

How do I configure new forwarders in my DNS server settings?
Please check the documentation:
https://help.mikrotik.com/docs/spaces/R ... 748767/DNS

Direct-Link to section: https://help.mikrotik.com/docs/spaces/R ... terOS7.17)

infabo

"8C:17:59" belongs to "Intel Corporate". At lest we know this.

infabo

Now you mentioned it: it has PRO in all caps. Like this would be an acronym for something....

infabo

Linux version 4.0beta12:
when you hover the mouse over a shortcut (e.g. R) in interfaces - it does not show the expansion.

You mean the absence of tooltip, right? I'd suspect this is not implemented in v4 yet.

infabo

It’s not about the spacing itself; it’s the inconsistency in how spacing is applied. Sometimes elements stick to the top or bottom, and other times there are no gaps at all. It feels freestyle rather than consistent, like you’d expect in a design system.

infabo

This does not resolve the general "space-wasting" in the whole UI. I am not against "airy" and "big" UI per se. Proportions must be correct. Its like inflating "Michelin man" to a maximum to look like a balloon.

infabo

of course you can.

infabo

Just updated on MacOS 11.7.10 by the integrated updater. Now Winbox crashes on startup.

*) improve scrollbar UX

Is there an before/after on the improvement? Is it thicker now? Or what changed?

infabo

I have a hAP ax³ and since I had it never worked well with multiple devices. But the worst thing is that I cannot even use the 5Ghz band with my notebook(having Intel AX200 card) because of the frequent disconnects, standing 2 meters away from the device. I tested it with the latest beta too, same ...

infabo

Massive Improvement for me in dark Mode, much more useable. Thanks for listening, much appreciated. I don't see any substantial change/improvement in dark mode. But can't tell who it looked in previous beta as I use light mode because WinBox dark mode lacks readability/contrast (for me). Whereas I ...

infabo

Yes, I mean tree view. Does this also apply to virtual wifi-interfaces? Does not look like.

infabo

Are there tables elsewhere than "Files" module?

infabo

You are completely right. It should be enough with read, to just read. and should be enough with write, to upgrade. But there are deep running issues in the policy system everywhere, we have to re-make the whole thing. Wow, I’d like to extend a big compliment for acknowledging that the policy syste...

infabo

If the latest beta version does not solve your issue, please send supout.rif file to support, describing in detail about what happened. Can you share what change in beta5 is related to resolving this issue? Can you share the issue you are experiencing besides the log message? It is your first post ...

infabo

thats the place you can print them. you define them one level up.

infabo

Well, why not just mention that in changelog?

"*) add support for model xzy rev4"

all way too mysterious

infabo

I think most of the MIPS hardware gets v6 in factory still - given they are manufactured still. But what makes me wonder more than that: why was it necessary to release 6.49.16 without a single actual change? This maybe only makes sense for the purpose of raising the "factory-software version&q...

infabo

when compromised at least one device on at least 2 different networks (meaning 2+ devices), you can establish a btest between these devices.

infabo

Install appropriate package. wireless or wifi-qcom-ac.

infabo

By the push of a button or power-cycle :D

infabo

Srsly, before asking and making the effort to create a topic.

Just review your one-liner - saves you and us some time.

You specify "mode=https" but use and "http://" URL.
Decide on this.

infabo

Barely useable I would say. Server error galore

infabo

netboot aka netinstall is initiated by reset button press.

infabo

According to your posted and commented config "84:0D:8E:38:C0:64" is "Vue White" and not "Emporia Vue".

infabo

Dear MikroTik, I’d like to suggest focusing on enhancing the "flagged status" feature rather than restricting the default feature set of RouterOS. A better approach might be to analyze system configurations for abnormalities. Many forum threads highlight cases where users have been hacked ...

infabo

You need a WAF at least to dodge all these massive nonsense requests that just generate load on the webserver.

infabo

But it looks better!

infabo

check your cabling

infabo

Given the wide variety of environments where Mikrotik equipment is deployed, it's quite bold to sit in the comfort of the Mikrotik headquarters in Riga, maintained at a pleasant 20°C, and suggest in a straightforward manner: blingblouw2 you can just enable bandwidth test. ask the user to push the bu...

infabo

Which ROS version is currently running on?

infabo

There is a "spotted in the wild" series on Mikrotik youtube channel. People send images of Mikrotik devices found anywhere. Sometimes on obscure places (hard, hard to reach physically). Still they insist on the button push confirmation thing.

There must be an alternative approach.

infabo

Maybe victim of traffic-gen attack

infabo

/ip dns set allow-remote-requests=yes cache-max-ttl=1d cache-size=250000KiB doh-max-concurrent-queries=200 doh-max-server-connections=2 \ doh-timeout=4s max-concurrent-queries=200 max-concurrent-tcp-sessions=40 use-doh-server=https://dns.quad9.net/dns-query \ verify-doh-cert=yes [/code] All these a...

infabo

hAP - home AP
wAP - wall AP
cAP - ceiling AP
wsAP - wall socket AP
mAP - mini AP
ltAP - LTE AP

https://youtu.be/n1Zfq_SDTrY?t=90&si=HsXnvttvyH9-dRIx

Viktors says wAP stands for "wireless access point".

infabo

Jabber I preferred back then.

infabo

I know right!! My first comment is that wifi = 1/8 of a config (if that) , as soon as one invokes capsman wifi=2/3 of a config. Its not clean and effiicient to program or read its friggen BLOATWARE Do you even know what you're talking about? You’re an AX3 owner, right? WiFi CAPsMAN is no different ...

infabo

Took a cap AC out of the trash pile. Loaded up the latest stable 7.16.1. My router still has capsman on it so it configured right away. Bunch of devices connected right away. Got a phone call... was breaking up all over. Logged into my old as hell wifi camera... one frame every couple of seconds. T...

infabo

The wifi-qcom-ac package breathes new life into this old device.

infabo

Considering the amount of flak they've gotten in this thread, I would be surprised to see any new public beta this year. Did not age well. *) disk - add support for SWAP, currently allowed on any block device with "set x swap=yes" when container package is installed (CLI only); 😍😍😍😍😍😍😍😍😍😍...

infabo

Most probably user error.

infabo

cap ac + wifi-qcom-ac = 💪 Regarding future proofness: https://forum.mikrotik.com/viewtopic.php?p=1108989#p1107303 Looking at the system resources and roughly free-memory of 36MB it is IMHO only a matter of time that we may see here similar issues like these: https://forum.mikrotik.com/viewtopic.php?...

infabo

It's just that dogs balls are more pleasant to look at.

infabo

Trying to upgrade a CCR1009 working as a wifiwave2 capsman from ROS 7.12 (has routeros and wifiwave2 packages) I get an error: wifi-qccom-ac-7.16.1-tile.npk missing, use ignore-missing or disable package(s) Will I loose the capsman configuration ? You dont need any wifi packagge on your CCR anymore...

infabo

please no png, I dont want another source of bad scanability. Just render a SVG.

infabo

Overall I'm not so much impressed by the wap ax. The shorter range in the 2.4ghz band is a major drawback for me. The 180° antenna also doesn't cover the area behind the device well. I’d prefer a 360° coverage and a stronger 2.4ghz signal. With cap ac I have a useable signal outdoors - with wap ax t...

infabo

rm78 talks about "regular consumer devices". These kind of devices by Mikrotik have a default configuration (which can be reverted though). That is what I was referring to.

infabo

Do you experience any real world issues or is this an academic question?

infabo

Default configuration does not allow accessing webfig from WAN.

infabo

@rextended I did not want to correct you, I did not even know about this "reserved variable names" thing. I just looked up the docs for reserved keywords. And it did not list these. But aren't you the inventor of the raised index finger? See your first post: "the a-b-c of... is a prob...

infabo

"comment" is no reserved keyword. https://help.mikrotik.com/docs/spaces/R ... g-Keywords

infabo

https://help.mikrotik.com/docs/spaces/R ... PN+problem

infabo

Out of curiosity, I enabled logging for all topics, excluding some of the particularly "noisy" ones: /system/logging/add prefix=GENERAL topics=!ssh,!lte,!wireless,!ipsec,!l2tp,!dns Now, I'm seeing these "start CRL update" messages appearing. There are two requests every hour. [ro...

infabo

Wireguard has no hardware acceleration - it uses CPU. So it pretty much depends on your ISP bandwidth and how much of it you expect to get over Wireguard.

infabo

Is this jeopardy? Show us your configuration please.

infabo

Reboot already tried?

infabo

lol, very educational debate

infabo

I also adore how detailed Cambium includes technical specs. Normis once said there are no "antenna radiation patterns" available - IIRC too expensive - so they just have none. That may be true for "legacy" devices but for the wap ax they exist over at fccid.io. So it would be eas...

infabo

My log is flooded with "too strong signal" log entries ("xxxxxx@cap-wifi2 disconnected, too strong signal, signal strength 159"). But this is nothing ever reported here and I have already reported that to Mikrotik. SA query timeout only occasional, no more frequently than on cap ...

infabo

So, now I have wap ax running for about a week and I can't seem to have any of the issues discussed here. I have it pretty much on default, meaning I have wpa2-psk/wpa3-psk enabled and all the other bells and whistles like FT and so on. No issues. Well, don't have fancy pants latest iPhones nor do I...

infabo

First, I would not distribute external DNS down to clients: So instead of /ip dhcp-server network add address=192.168.27.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.27.1 use /ip dhcp-server network set [find gateway=192.168.27.1] dns-server=192.168.27.1 Why even use 3rd party DNS? Is there somet...

infabo

Web Browser

infabo

I really want this myself. This fc**ng shorts are some real time stealer.

infabo

No idea what it is. Sometimes it shows "-74" or some realistic value. But most of the time it is a positive value. It goes up to 149 I have seen. Today it shows strength in interval of -83...-80. As it is realistic. But I did not reboot capsman nor did I reboot cap and not even the client ...

infabo

Seems like wap ax is truly designed for outdoor usage mainly.

infabo

Why do I see positive signal values in registration table for one client only?

2024-11-06_17-06.png

infabo

Seems like you have some more general issues with password handling. There is no magic involved.

infabo

What is this kind of bug? "too strong signal, signal strength 159". Should I report this?

2024-11-06_09-38.png

infabo

I am running Mikrotik wireless as well. But I would not call me a die-hard fan of the gear. But I did not find anything better that matches my requirements. Always open for improvement.

infabo

I even tested with a live tv channel playing on the tablet and there was abojt a second drop off when it switched. Is that good?

You may get rid of that dropoff by enabling ft and ft-over-ds.

infabo

[admin@MikroTik] > system/resource/print uptime: 1d23h45m10s version: 7.16.1 (stable) build-time: 2024-10-10 14:03:32 factory-software: 7.15.1 free-memory: 36.8MiB total-memory: 256.0MiB cpu: ARM cpu-count: 2 cpu-frequency: 800MHz cpu-load: 2% free-hdd-space: 96.9MiB total-hdd-space: 128.0MiB write...

infabo

Why do clients then see weaker signal? Are higher gain antennas better for AP RX direction? Besides beeing more directional.

infabo

BTW, what does /interface/wifi/radio/print detail show set to min-antenna-gain? Acvording to your observations it should be set to 7 for both radios.

 2   min-antenna-gain=7 hw-type="QCA5018" 

 3   min-antenna-gain=7 hw-type="QCN6122"

infabo

Well, then we have to take this granted: https://fccid.io/TV7WAPGR52AX/Test-Report/Antenna-specification-7634095 Infos on wap ax product page change on a daily basis. Today it says "7dbi" for both 2.4ghz and 5ghz again. That matches with fccid.io antenna measurements pdf. So these are most...

infabo

Thank you. There are not many Mikrotik wireless fanatics here. If any at all (maybe erlinden

).

infabo

Ruining exsiting well-designed GUIs to unusable low-contrast no-borders style is the hype of today's design. Winbox is not even the worst example of that. And probably the motivation for it is not the same either, it is just that tools for "modern GUI design" all suck because "everyo...

infabo

But we can extrapolate things a bit: hAP ax lite is run by same SoC and 2.4GHz radio is run by SoC-built-in radio hardware, so I think we can safely assume the same limits apply. Now: for fastest modulation, available for N standard (MCS7) on 2.4GHz band, Tx power limits are: 22dBm (wAP ac) and 17d...

infabo

Please provide a name of the new AP - or it did not happen.

infabo

Dont forget: CRS: Cloud router switch ... ... which doesn't really belong into xAP family of devices, does it? And generally doesn't provide wireless coverage at all, does it? In case you missed: this thread was about wAP and @Normis tried to explain that wAP (due to being wall AP) doesn't really h...

infabo

Dont forget:

CRS: Cloud router switch

...

infabo

3) From the GUI, if you go into a wifi interface that is set up as PSK, and simply click "Apply", the passphrase will be corrupted and you'll have to go back and retype it. Under the hood it sets the passphrase to \E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2\E2\80\A2 no...

infabo

I am more worried about the low 2.4ghz coverage.

infabo

Of course I am sure about this. I see this via various places. First hand on client devices supporting that, then on registration table the advertised PHY speed and then on "interface wifi monitor" See https://forum.mikrotik.com/viewtopic.php?p=1106982&sid=142f73221890ef8e0c499696c01ed...

infabo

Can't answer on the antenna gain question. But it supports 160mhz channel so it is AX2402 / AC1733.

infabo

I don't see a difference in wifi-qcom-ac vs wifi-qcom regarding the SA query thingy. They happen over the day, but they have a reason like device out of reach. Have an AX200 notebook and no issue. But only a few days of experience yet. Regarding the signal strength: I put my phone flat on a table an...

infabo

infabo

5ghz signal is good as far as I can tell.

infabo

On both wAP ac and hAP ax lite (so predumably on wAP ax as well) Tx power is limited by EIRP and thus range of wireless "cell" is exactly the same (at least in direction where each device's antenna has best gain)

And why do I observe worse RSSI on the same distance?

infabo

Something is pretty wrong with their published specifications: 2024-10-31_01-03.png - 2.5dbi for 2ghz - 7dbi for 5ghz So far so good. Reported TX-power is like both antennas have 7dbi. That's what basically the PDF @ ffcid.io said: 6.9dbi 2ghz, 7dbi 5ghz. And that is what is burned into ROS as well...

infabo

Exactly, never seen a smaller font on any piece of paper ever. This is an achievement.

infabo

What ROS reports as country-info is not what device can do

That is true. We don't know if device is even capable to transmit at e.g. 30dbm even if not regulatory limits would apply.

infabo

Something is pretty wrong with their published specifications: 2024-10-31_01-03.png - 2.5dbi for 2ghz - 7dbi for 5ghz So far so good. Reported TX-power is like both antennas have 7dbi. That's what basically the PDF @ ffcid.io said: 6.9dbi 2ghz, 7dbi 5ghz. And that is what is burned into ROS as well....

infabo

ROS has rogue DHCP server alert functionality: https://help.mikrotik.com/docs/spaces/R ... HCP-Alerts

infabo

on your pppoe-client: set "use-peer-dns=yes" and youre good to go.

infabo

see viewtopic.php?t=134404#p664501

infabo

Just use the upgrader and dont copy around npk files manually. Or do you have a special reason for doing cumbersome way?

infabo

I would not be so critical - when it was not named PRO. There is actually nothing PRO in this device. The other Chateau AX devices at least feature one 2.5G port - and that would have been the minimum to add here as well. But you can install ROSE and attach an USB SSD and make it a NAS (according to...

infabo

use /tools/profile when under load and bad throughput. I guess there is something running over cpu.

infabo

"cure-se.fronius.com". "curse" - pun intended?

infabo

Try with ft=no.

infabo

"In Fall der Verwendung einer Firewall fuer ausgehende Verbindungen". lol. "Im Fall" would be correct. But that's just a side note. The point is: only outgoing connections are needed. According to that "list.jpg" there is no need for: - no upnp - no nat-pmp - no whateve...

infabo

Why not?
Why size would influence the decision? Being bigger I mean. Trying to understand

esthetics.

infabo

Why not?

infabo

My plan is also to replace cAP ac by wAP ax. But I won't do that foolishly just for AX. I am going to perform some iperf and general connectivity tests before I actually replace good ol cap ac.

infabo

Everything flows, everything changes ...

Now AX3000 again.

infabo

@teslasystems One of my first comments on Winbox 4 was about UI color contrast. Reaction of normis: "clean your dusty display". After "some" (actually a lot of) other people also pointed out the color thingy - suddenly Mikrotik did improve in betas. So it is a mixed experience.

infabo

https://fccid.io/TV7WAPGR52AX/Test-Repo ... on-7634095

Here they say: 6.9 and 7. If that is wrong - is this they provided incorrect information to FCC on certification?

infabo

Jesus, why don't they use HTTP/2 in 2024??? Mikrotik!

infabo

They can still use another hardware for the LTE/5G versions.

infabo

As long as ROS knows the correct antenna gain I am fine.

infabo

Provisioning local radios via local capsman works differently. You use "/interface/wifi/radio/print" to lookup local radios, these are marked with "L". Usually 0 and 1. Then issue "/interface/wifi/radio/provision 0,1" and now your local radios are under local capsman co...

infabo

Such actions can be classified as
“Lack of reliable information about the product” or ”Providing false information about the product.”

No, this is classical lack of quality assurance.

infabo

The fun thing is: 6.9dbi and 7dbi were also listed on the product page early today. It was changed/updated to 2.5dbi later.

infabo

https://mikrotik.com/product/wap_ax says it is ARM 64bit.

infabo

cAP ax is also an AP - but stronger (1GB RAM vs 256MB, quad core, etc.). But is maybe "user capacity" related.

infabo

Now product page is online: https://mikrotik.com/product/wap_ax

Ethernet test results are way behind wAP ac performance. see https://mikrotik.com/product/wap_ax#fndtn-testresults
But to be expected: 4 core vs 2 core.

infabo

And now I'm looking forward to the true successor of the "cAP ac". If a "wAP ax" can be fitted into the "wAP ac" casing, I would be thrilled if there could be a wifi6 AP in the "cAP ac" casing. In my opinion, the "cAP ax" is more like the successor o...

infabo

AX devices released this year all seem to have 256MB RAM and these IPQ-50xx boards.

infabo

This will make it running at least; @miankamran7100 execute on your NetBox 5 ax CLI. /interface wifi set [ find default-name=wifi1 ] !channel.frequency .width=20/40/80mhz !configuration.antenna-gain !.chains !.distance !.tx-chains !.tx-power As already said in another topic: frequency 5500 is a) DFS...

infabo

Will receive it tomorrow or friday, will report back how well it performs.

As mine arrives only next Tuesday I am curious for your first hand experience.

infabo

All the evil stuff comes from EU...lol

infabo

Ordered mine from Getic last night, was probably 2nd to buy it after infabo, since they had 599/600 stock when I placed order

Stock was 600 when I ordered mine. Grats!

infabo

t will override the selected security item. Some day I am going to file a feature request at Mikrotik support: "highlight overriden config values in export in different color". Or as a dedicated option in "print detail" or something. I've seen so many exports and always there ar...

infabo

Better try ".encryption=ccmp,gcmp" instead. ccmp is the default value. No, remove it completely. I have bad experience with explicit verbose encryption type. WPA2 and WPA3 is enough. When there were explicit encryption type, some devices rejected to connect - that is my experience. I woul...

infabo

Better try ".encryption=ccmp,gcmp" instead. ccmp is the default value.

infabo

Getic will receive stock today/tomorrow, got message from their support.

Just ordered one wAP ax from Getic a few minutes ago.

infabo

What if all airplanes crash and not reach HQ...

infabo

The game of no f*** clue. Mikrotik "consultant" gone for good. Start from scratch. Ask your distributor - or as Normis suggested - contact support. Antenna-gain, tx-power, fixed illegal frequency and so on. This is highly misconfigured device.

infabo

Does it help to set cache-size=0?

infabo

Maybe this? https://help.mikrotik.com/docs/spaces/R ... throttling

infabo

You can ask Mikrotik yourself: https://mikrotik.com/support
It is very easy to contact them.
But first you should contact your distributor where you bought your device.

infabo

You expect an answer after "Netbox 5ax hurts me. it's crap"?

infabo

@ anyone with wpa3-psk enabled and flapping clients: try to enable GCMP (in addition to CCMP). On security profile or directly on the wifi interface:

/interface wifi security set encryption=ccmp,gcmp

infabo

Maybe it already helped to enable GCMP? Default is CCMP enabled only (according to docs).

infabo

pe1chl, automatic updates mean for the vendor: more, more and much more testing. You cant push out another "stable release" when there are millions of devices out there potentially to turn into bricks. In case of manual update action, as it is until today, the vendor can always play the de...

infabo

Indeed. I may swap my wall mounted CAP ac for this one. I am not willing to wait for a smaller, "WAF improved" version of CAP ax.

infabo

Makes sense. Bandwidth test tools create a bunch of traffic as well.

infabo

Yes, it means that.

*) device-mode - changed "partition" to allow activate and do not allow repartition (introduced in v7.17beta2);

infabo

After we lost enough money... We went back to Ruckus and Cambium. Cambium and Ruckus both had AX devices YEARS before Mikrotik. Particularly outdoors. There are some serious apologists around here. Which I truly don't understand. You can only hide behind... "But it's cheap" for so long. P...

infabo

Whole essence of ROS is proprietary development. But they contribute: https://github.com/torvalds/linux/commi ... 1bcb1a6574

infabo

unbound is a recursive resolver. not an authorative dns. It has some limited features in that regard. The consensus: use powerdns for that purpose.

infabo

unbound does not fit into 16mb flash by far. look at the unbound distroless docker images. The binary has at least 4mb+. given microtik has a lot of stuff developed in house (I am pretty sure they dont use any popular ssl library for example). It is all a matter of their limited storage they have op...

infabo

Good point. And given my findings today, it's time to evaluate the competition again. The reason: local flent tests (local test server) are suddenly performing terribly. The whole WiFi tilts and/or pings go beyond 1000ms during the test. Interestingly, the same flent test ran ~half year ago on versi...

infabo

Do you have a reference where or which DNS server already implements a forwarding of nsupdate requests? If there are none, why do you want Mikrotik to implement this? Why dont you send the nsupdate request directly to your "centralized" dns server?

infabo

Unfortunately I upgraded to 7.16.1 the day it was released. So my post was on Oct 04, 2024 10:01 am where it reached 8d uptime. Uptime is now 5d and some hours. Based on that, cap ac uptime must have at least 14 days. It purely depends on the config, and my CAP AC is basically "reset-configurat...

infabo

Nit picking: "f.k.a" instead of "a.k.a"

"not responding" - f.k.a. SA Query timeout

infabo

Sorry, but I think that when someone receives a notification for a new post in a topic

I do not get any notifications by email even for subscribed topics. Been a long time since I last received such an email. Either broken or disabled (globally?).

infabo

I would be more worried about the packet loss instead of spikes.

infabo

My logs show MAC addresses.

caps,info connected to foobar@DC:2C:xx:xx:xx:xx

Maybe wireless capsman specific.

infabo

The capsman manager looked normal. It looked to be running. I stopped and restarted capsman. Rebooted router again. It simply would not take any connections. Log had the following three lines repeating on remote devices. 10:08:16 caps,info CAP selected CAPsMAN DataCentre (::ffff:172.17.1.254:5246) ...

infabo

Even wifi7 ceiling APs from other vendors are smaller in diameter than CAP AX. When other vendors smallest devices are 220mm - how huge will Mikrotik go? 300mm CAP BE?

infabo

look yourself: viewtopic.php?t=209550#p1087603

infabo

Of course you should no longer buy devices that have only 16MB, it will be a dead-end. As long as there is no smaller variant of the CAP AX, people will continue to buy the CAP AC. The fact that smaller designs are possible is demonstrated by competitors. You can install AX hardware comparable to t...

Search found 2225 matches