MikroTik

infabo

PS:
D53G-5HacD2HnD running 7.17.2
cap ac running 7.18.1

infabo

Could this be related? viewtopic.php?p=1131360#p1131360

infabo

I think mikortik need to rework the documentation to be like netapp or ansible, release a doc per version and redact detailled upgrade paths and différences, lost/add/changes between versions.

THIS

infabo

Thanks for your answers! Especially the script from optio can be a future reference for everyone searching the forum.

infabo

Hi guys, You can use safe mode Here . You can undo all changes in one step. I have to say: similar also happened approx. 1 or 2 years back while I was in safe mode. I enabled safe mode, did at max. 10 changes or like. Then I left safe mode. It did undo most - but not all changes I have made while I...

infabo

Dear fellow forum members, Today I had a weird experience. Using my D53G-5HacD2HnD as capsman and a "cap ac" connected/managed by the capsman. cap is connected by eth2. Today the connection to cap was interrupted. Never seen this before. The logs on capsman device was flooded over a longer...

infabo

What OP wants is a command to make the CAP's LED blink on demand. Like having 10 caps mounted on the ceiling side by side and you don't want to find out the hard way. Should be doable via "user-led" - if cap ax has this one available. Did not try out, but could be: /system/leds/add leds=us...

infabo

Based on the posted configuration, I would say this is a configuration issue.

infabo

There is always something to be said about the configuration mechanism. Some people prefer a system where all config is only done in RAM and a "save" is required to commit it to nonvolatile memory. Some systems have a "transaction" mechanism where you can change different parame...

infabo

One of the possible causes is that you have mangle mark-routing rules that put packets of a connection in a routing table other than "main", but did not try to exclude those connection from the fasttrack rule. It is written everywhere in the Mikrotik docs, that fasttrack only works on mai...

infabo

Anyone an idea? Otherwise I'd file a feature request at Mikrotik support.

infabo

Oh, okay - if even Fortinet gets it right, that certainly says something. 😊

infabo

Well, "/queue/type/remove [find]" sounds a little bit more destructive. cmasi wants to only delete custom (default=no) queue types.

infabo

Yeah, welcome time traveller. wifi-qcom and wifi-qcom-ac have it. Legacy wireless most probably will never get 802.11w.

https://help.mikrotik.com/docs/spaces/R ... i-Benefits

infabo

I want to understand. How can informative text - that does no harm - be a bug?

infabo

What type of package manager introduces such a significant storage overhead? OpenWRT has been using "opkg" for years without issues. However, OpenWRT also provides board-specific builds - perhaps this is the key to addressing flash storage limitations on 16MB devices. That being said, I ha...

infabo

Also 16MB devices just cannot support wifi-qcom-ac which is almost 1MB larger than old wireless package, not to mention OOM issues... 16MB devices support it. Look at my free-space report to "cap ac". This little device is capable of running 7.18.1 and still has enough free space. But the...

infabo

I wouldn’t buy a router with 16MB flash anymore either. However, when I purchased it in 2020, it was (to my knowledge) the first "native" v7-only RouterOS device, which one might have assumed would be a meaningful distinction. That said, I’m not ready to retire the device just yet. I could...

infabo

Today was the day I thought, 7.18.1, now I can upgrade. But it did not upgrade: 2025-03-03 11:22:21 system,error upgrade failed, free 13 kB of disk space 2025-03-03 11:22:21 system,error GENERAL: upgrade failed, free 13 kB of disk space Well yeah, before upgrade I checked system resources: version:...

infabo

Indeed. product-specific (or board-specific) packages not containing unused/useless drivers could probably regain some space.

infabo

Today was the day I thought, 7.18.1, now I can upgrade. But it did not upgrade: 2025-03-03 11:22:21 system,error upgrade failed, free 13 kB of disk space 2025-03-03 11:22:21 system,error GENERAL: upgrade failed, free 13 kB of disk space Well yeah, before upgrade I checked system resources: version: ...

infabo

I kindly request documentation update for the following changelog item in the wifi docs (https://help.mikrotik.com/docs/spaces/R ... 59120/WiFi):

*) wifi - implement steering parameters to delay probe responses to clients in the 2.4GHz band;

Thank you!

infabo

*) wifi - add channel.reselect-time parameter which allows to perform channel re-sellection at given time of day (CLI only); important part: "at given time of day". It is meant as written obviously. In combination with reselect-interval this is getting hard to predict the resulting behavi...

infabo

GWN7660E looks interesting. Maybe time for another benchmarking here.

infabo

@tealasystems Thank you! This is an excellent proposal. While it doesn't address every quirk (such as the collapsible sections and the somewhat unusual arrangement of command buttons), it significantly enhances usability—several levels up. I truly hope MikroTik takes this into consideration. The imp...

infabo

A good start would be, creating a new topic and providing (cleaned of sensitive) config export.

infabo

This ovpn server was explained several times. See 7.17 beta/rc/stable topics for more information.

infabo

didnt help

classic. My experience with "/undo" basically.

infabo

For me this device mode, is the worst thing in ros, i'have more than 70 devices located accross the country and have to spend time/kilometers to reconfigure them because now i can't switch easily with parts, or set cpu speed without pressing a fucking button Change CPU speed sounds not like a recur...

infabo

Wow, awesome what you can read between the lines.

infabo

Warning for people using this metrics exporter : https://github.com/akpw/mktxp/issues/229 Since 7.18, something is broken... But the main question is why routeros don't provide it's own metrics endpoint...??? This is no mystery anymore. It is this change causing it: *) console - put !empty sentence...

infabo

The simplest, if you really like shooting yourself in the foot, is this: https://forum.mikrotik.com/viewtopic.php?t=214886#p1127217 I hate to continue the discussion on this offtopic, but the referenced post shows how to update ROS - and not the routerboard firmware. The simple solution for nishadu...

infabo

The introduction of the package manager remote package update/install in version 7.18 is a great step forward. I hope this feature allows MikroTik to modularize certain functionalities of the current RouterOS package into separate packages, as the user experience is much better than uploading extra-...

infabo

When comparing the official BTRFS man page with MikroTik’s BTRFS help page, I couldn’t help but notice some more info on official docs: - https://btrfs.readthedocs.io/en/latest/man-index.html - https://help.mikrotik.com/docs/spaces/ROS/pages/295239711/Btrfs While I have no real-world experience with...

infabo

https://btrfs.readthedocs.io/en/latest/ ... -practices

RAID56 - at latest btrfs version - is not considered stable for production.

infabo

btrfs is part of rose package. Dont worry. But there is ext4, fat32 and exfat support in routeros package AFAIK. Some devices have USB ports and some people want to use USB sticks. When not for SMB, then just for e.g. container storage and or log storage. And btw, I think this controversial discussi...

infabo

I would try the wap ax and if coverage does not meet expectations - then just skip Mikrotik wireless. wap ax is currently the best/latest Mikrotik has to offer as wall mounted AP. For the cap ax, I would not dare to mount such a huge device on a wall. It is kind of OK for ceiling, but for wall: this...

infabo

I have to put it on a wall, which seems to be a suboptimal position for this model... (Maybe that is the reason for the coverage issue I am facing?) Most probably. here you can find antenna pattern for cap ax: https://fccid.io/TV7CPG52X/Test-Report/Antenna-Specifications-6299616 I only can speak of...

infabo

Hi, when running the following command in the CLI: /system/package/update/check-for-updates channel: stable installed-version: 7.17.2 latest-version: 7.18 status: New version is available it returns the installed and latest available version but does not display the changelog, whereas Winbox provide...

infabo

sinisa said "file sharing". "*) cloud - added "Back To Home Files" feature;" is a feature in routeros main package. True, the storage features are part of rose extra package. Regarding the shoutout "We DON'T WANT any FS on a ROUTER!". Every device needs to sup...

infabo

Good point! These random passwords are fine, but users are prompted to change them on their first login. The problem is that a first-time user might set a weak password like "123456" and become vulnerable (since ROS, by default, does not have login rate limiting or "fail2ban", ri...

infabo

Put email.backup in quotes.

file="email.backup"

infabo

/interface/print

and running state for example:

:put [/interface/get value-name=running  ether1]

infabo

Which ROS version?

infabo

Interesting, Chateau LTE12 (2025) now with 32MB flash memory and different modem (EG120K-EA). Is this the end of 16MB era? The leaked "7.20_ab28" packages in 7.18 topic already shows about 700kb larger routeros-package, which can't fit routeros+wifi-qcom-ac into 16MB flash devices anymore....

infabo

Documentation says on "partitions" device mode feature: does not allow to change count of partitions. If your router is unable to boot, it will still be able to boot into your other partitions. No restriction for crash recovery. For my understanding this means: not allowed to create or rem...

infabo

Probably this: viewtopic.php?p=1124455#p1124455

infabo

In this case: better contact Mikrotik support directly. They should be able to clarify.

infabo

NetMetal AX is an outdoor device. https://mikrotik.com/product/netmetal_ax -- Our toughest long-range outdoor access point – now with Wi-Fi 6! -- From documentation: https://help.mikrotik.com/docs/spaces/ROS/pages/224559120/WiFi installation (indoor|outdoor; default:indoor) Devices installed outdoor...

infabo

Why is this relevant? You don't have the WinBox port (or any management port) open on an untrusted network without at least address constraints, do you?

The same reason you set a password.

infabo

@asimko Look, this is fixed in 7.18: https://mikrotik.com/supportsec/cve-2024-54772

infabo

Would you be happier if instead of "What's new in 7.18 (2025-Feb-24 10:47):" the caption would say "Version 7.18 (2025-Feb-24 10:47). Changes since 7.17:" ? No, that would just be window dressing. If I upgrade from 7.17.2 to 7.18, I want to see the changes at a glance - specific...

infabo

Thank you for pointing this out. I have noticed these "duplicates" before, but the one regarding the device-mode CPU fix particularly caught my attention, as I had already reported this bug to Mikrotik and tested the fix in version 7.17.2. Could someone clarify why identical changelog ite...

infabo

Duplicates (already contained in 7.17.1 or 7.17.2): *) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17); *) device-mode - fixed feature and mode update via power-reset on PPC devices; *) disk - fixed showing free space o...

infabo

I disagree, this bug was fixed in 7.17.2. It has been like that since forever. The changelog of the stable c.d release contains changes since the previous a.b release. Version a.b might have additional patch versions a.b.x or a.b.y that already include the same fix, but the fix will still be listed...

infabo

There was a bug in 7.17 where even with device-mode locking down RouterBOARD, people were able to change the CPU frequency once.

I disagree, this bug was fixed in 7.17.2.

infabo

Stable release changelog has always been a list of changes since previous stable - bugs introduced and resolved within beta/rc are not in this list. At least this change was already in 7.17 stable: *) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by dev...

infabo

This release cycle was short. Thank you Mikrotik! Can't wait to see IPv6 FastTrack in action.

infabo

yes, same with 7.17.1, I spent all night to install homeassistant. I had to install docker desktop and then download and import image directly do mikrotik ... and then I found out, that in Mikrotik docker is no support for USB stick ... (zigbee) Did not know that. But good to know, as it makes ROS ...

infabo

0: Remove "defconf" comments everywhere
+1

@anav where was the reasoning for this? Anyway, I have a reason for this proposal. More on it later.

infabo

On the contrary, I would even make it a rule: Do not trust "safe mode."

infabo

With ages to roam you mean it disconnects and takes some time to re-connect again?

infabo

Likely.

infabo

I wouldn't generalize that. I have a Pixel 7, which is registered with "auth-type=ft-wpa3-psk" to wap ax on 7.17.2, and the logs only show "roamed to" entries for this device. So everything seems fine, and I haven't explicitly set "connect-priority" anywhere.

infabo

If the info is correct, s10+ was launched 2019. And already had 802.11ax. 2019 is like stone-age old in these days. Maybe some minor incompatibility with some old Samsung driver. 30mbit/s is really slow.

infabo

Strange. There is not even any ipsec related change in rc1.

infabo

But nevertheless, I would not trust termux in any way. I know for years the pings are way too high and not realstic in termux on my device. Ping in termux to gateway 15ms where real ping measured with e.g. Analiti shows something average 2ms. https://play.google.com/store/apps/details?id=com.analiti...

infabo

I have edited my previous comment. Try with multiple connections as well. I have also better results with UDP ("-u") sometimes

infabo

Try with "-R" flag. And/Or "-P 5" for multiple parallel connections.

infabo

I use Magic iPerf on Android. Which app u use?

infabo

I can't imagine they have incorporated all patches for any improvement made to BTRFS in kernel 5.6+ and 6.0+. So what it the point of using outdated ROSE BTRFS when someone can have that on e.g. TrueNAS for example (or any Linux distribution)?

infabo

There are several discussions in the forum, especially https://forum.mikrotik.com/viewtopic.php?t=198736. As far as I know, there is no simple solution - or even a solution at all to this problem until today. Especially in a church setting, where many different and unknown wireless clients are in us...

infabo

As you have verified, this is now something to report to Mikrotik support. https://mikrotik.com/support

infabo

I hesitate to say it, but to be honest: it is what it is. There are no secret tweaks or hidden settings that provide a hidden performance boost. As a hobby, you can experiment with it, but in a commercial or professional environment, I’d clearly say: Use what works well for you and meets your needs....

infabo

allowed-number is not necessary to be set for just receiving regular SMS.

I am wondering where the auto-erase option is gone?

In 7.13.3 there was this in changelog:

*) sms - fixed SMS inbox for FG621-EA modem (introduced in v7.13);

Maybe it is broken again?

infabo

Try this:

ros code

/log print where time>([/system clock get time] - 5m)

In 7.17.2 this does not only print log lines from last 5 minutes. It prints everything from many hours ago and even more. How it can be done in v7?

infabo

Seems to be a long standing issue: viewtopic.php?t=167900

Try reboot.

infabo

I am not sure, but my guess: ac2 has many "qca_crypto" processes and therefore HW acceleration as "qca" stands for Qualcomm. And on AX2 there are many "crypto" processes instead which may be a generic module and therefore working on CPU.

infabo

Has anyone here beeing affected contacted Mikrotik support? Via email or their helpdesk?

infabo

I have rebooted everything and re-provisioned and no changes.

The only way to enforce such changes (IMHO) is to manually re-provision in the "Radios" menu.

infabo

Have you compared output of "profiler" as well?

infabo

Nevertheless troubleshoot was difficult. Likely insurmountable to normal users. A SoHo AP needs to be friendlier. But how could it be made friendler? Do you have suggestions? I mean, your device(s) did not support U-NII-4. So, should Winbox show a warning message like? "Beware! U-NII-4 frequen...

infabo

Can you please provide the iperf3 command you are testing with? Have you tried iperf3 from another Ethernet connected client for comparison (to rule out wifi/s10 issue)?

infabo

*) system - improved HTTPS speed;

Any details on this?

infabo

*) cloud - added "Back To Home Files" feature (additional fixes);

I'd like to request a YouTube video on this feature.

infabo

All the new stuff is suffixed by "(additional fixes);". So you get an idea where development effort goes into. Fixing bugs is one of the most time consuming tasks you have as developer. Writing new features is fast. Fixing bugs is consuming all your time.

infabo

In RC phase usually you see in changelog "(additional fixes)" or bugfixes for bugs introduced in beta only.

infabo

I have a DNS resolver question: is it to be expected that Mikrotik DNS cache can contain 2 different entries for a) the same name and b) same type? /ip/dns/cache print where name="foo.example.com" Columns: NAME, TYPE, DATA, TTL # NAME TYPE DATA TTL 48 foo.example.com CNAME www.example.com....

infabo

What means "Google Cast enabled devices"? What kind of devices are these? You mean this all happens while casting e.g. Youtube from Android phone to your Android TV?

infabo

I cant see much details on this low res screenshot, but: you seem to ping wifi-clients from AP. What is written in the log while timeout?

infabo

CVE-2024-54772 is fixed by - *) user - improved authentication procedure when RADIUS is not used; That's quite concerning. This CVE isn't even listed in the MikroTik security notices: https://cdn.mikrotik.com/web-assets/supportsec/rss.xml. Nor is it mentioned here: https://mikrotik.com/supportsec. ...

infabo

Better late than never. 😉

infabo

MikroTik staff often argues that the importance of each changelog entry varies from person to person, so users should read the entire changelog. In most of the software world, there is a clear distinction between breaking changes (incompatible), bug fixes, and new features. However, we have to be fa...

infabo

I'm not sure when all of this started, but probably around ROS 7.15, MikroTik has been making changes to the DNS resolver for the Adlist feature. Since then, reports and bug reports have been piling up in the release topics, and the changelog regularly includes entries related to DNS fixes or DNS re...

infabo

Webfig bug: sorting on the "#"-column does not work. It works for the other columns.

2025-02-14_12-17.png

infabo

Does the quick settings page essentially override all other settings I've made manually elsewhere?

Yes.

infabo

Thank you for coming by and pasting.

infabo

Backup does contain your config only.

https://help.mikrotik.com/docs/spaces/R ... g+RouterOS

infabo

In case it is reproducible like described you should file a bug report at Mikrotik support system. See https://mikrotik.com/support

infabo

That goes a bit too far with the explanations.

infabo

I did not know ROS uses squashfs. But good to know. But still one observation remains valid: webfig assets are served uncompressed.

infabo

While 16MB devices already face limitations in flash storage, the redesigned Webfig further increases space usage. - "webfig" folder in 7.16.2: 322.1 kB - "webfig" folder in 7.17.2: 657.4 kB Notably, in 7.16.2, the JS build was gzipped, whereas in 7.17.2, the master JS file is sh...

infabo

@teslasystems you have a good sense for usability. Mikrotik user interface designers should look at your side-by-side view and learn from these mistakes.

infabo

It was (again) bad decision by MT to split wifiwave2 package into "AC" and "newer" packages ... instead of splitting it into "16MB AC" and "all of them". It was perfectly possible to install the pre-7.13 wifiwave2 package in Audience (even in parallel / on to...

infabo

I haven't said -97dbm rsrp is good either. by "not that bad" i meant actually: should be good enough to achieve 9mbit/s (if sinr wasnt so low). And OP does not expect miracles, just: 9mbit instead of 3. And with 2CA I am pretty sure this could be achieved. But these LTE things are hard to ...

infabo

It would already be sufficient if the 16MB devices (and there are quite a few of them) don’t run out of storage soon. The shrinking trend is once again noticeable with version 7.17 onwards.

infabo

By default APN settings are gathered from network. But you can manually add APN profile.

Is your modem firmware up to date?

/interface/lte/firmware-upgrade lte1

infabo

rsrp isn't that bad. But your sinr is quite low. LTE6 supports 2CA (one of the major differences to CAT4). But your device is only connected to one cell. Ao you cant benefit from carrier aggregation. But CA is done by the operator - so you cant influence that parameter. You could use the cell monito...

infabo

How should we know from your speedtest output only? Your "1/3 of rice" device is for sure not of any help I guess. Or does this other device show connection information somewhere? For your MT device, lets start with and post the output here (remove IMEI or serials): /interface/lte/monitor ...

infabo

I am curious if memory will run full.

infabo

The bet is on.

I completely forgot! The year 2024 is long over, and it looks like I’ve lost my bet. Congratulations, gigabyte091!

infabo

@merlinthemagic7 The new device-mode defaults means we cannot stop the speaker from beeping without changing device-mode during provisioning. ... We do a lot of apartments and updates are automated to run in the middle of the night. We cannot have devices beeping and waking up the tenants. One quest...

infabo

*) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17); Really? Why? I can't upgrade one of my routers now because I have to arrange a visit to a data centre just to power the router off to enable the now disabled feature?...

infabo

I completely agree with you.

infabo

If you ask me, it would have been preferable to enhance the flagging mechanism rather than restricting previously available features by default. But now it is here to stay I guess.

infabo

please specify "bad performance of the network". Local networking or towards internet?

infabo

What's new in 7.17.2 (2025-Feb-06 11:10):

*) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17);

infabo

Let’s go through the device-mode changes one by one. The following features are now turned off by default: - traffic-gen: I don’t think most small business MikroTik professionals need traffic generation tools often. But there might be some use-cases in (automated) big deployments. - repartition: Whe...

infabo

Sure you can downgrade to certain versions.

infabo

I still use x.org - not wayland. So it is maybe not related to wayland especially. Rather a x.org thing when Winbox uses this x.org compatibility layer.
Oh, X11 scaling is scary... :-) Is this on i3wm by the way?

Yes, i3wm.

infabo

I still use x.org - not wayland. So it is maybe not related to wayland especially. Rather a x.org thing when Winbox uses this x.org compatibility layer.

infabo

@TenaciousD this is how it looks at my system as well. Since first public Winbox 4 beta. I even mentioned this early in the topic, but all was said was to wipe off dust off my screen. Glad to see someone else reporting this with evidence screenshot. I think this needs platform specific Qt rendering ...

infabo

BrianHiggins, I understand that this solution may not work for you, and that's completely fine. If you're encountering an issue, I’d recommend reaching out to MikroTik support to discuss it with them directly. If you’d prefer not to see alternative suggestions, you might consider avoiding public dis...

infabo

I've looked over to the CCR1072 topic. Could be hardware faulty. Best is to contact your distributor in such cases. Distributor usually has shorter response time usually. Or did you buy the ccr from Mikrotik directly?

infabo

your ISP maybe filters ICMP replies. your firewall filter does not have any drop rules on input chain i assume right?

/ip/firewall/filter/export

infabo

It would be very helpful if MikroTik consistently documented the minimum RouterOS version required for each feature. While this information is sometimes included, it is often missing. Having it in all cases would make it much easier to understand compatibility.

infabo

what is puzzling is that hAP ac2 is still sold and probably produced.

That is what I am saying: it may be still produced with this 16MB chips. No matter how many successors exist.

infabo

MikroTik Support thanked me for reaching out and for the report. They mentioned that they had reproduced the issue and were looking forward to fixing it in future RouterOS versions.

infabo

I share the same concern. The limited 16MB flash storage has been known for years, yet no new hardware revision of e.g. hap ac2 with more memory has been released. Furthermore, other devices like the 5G R16 are being launched with the 16MB chips, which is quite puzzling.

infabo

OP did not say from which ROS version updated from. Not saying by which method (builtin update, upload npks, netinstall). Not config export. Basically it is guessing at a high level what may have gone wrong.

infabo

I prefer not to go into detail regarding my observations and the test cases I used to reproduce this issue, as I believe it could be security-sensitive. Additionally, it is unclear whether this bug is limited to CPU frequency adjustments or if it represents a broader flaw affecting other device-mode...

infabo

I would recommend reaching out to MikroTik support for guidance. They might be willing to assist with troubleshooting. Enabling "lte,debug" logging could also provide more insights, but it’s important to know what to look for. Alternatively, the issue could be hardware-related, such as a l...

infabo

@tdabasinskas this is a bug IMHO. I have experienced this bug as well. I did came up with some test cases and reported them all to Mikrotik support this week. SUP-177436 Depending on your action sequence there is a high chance that rebooting (/system/reboot) reverts cpu-frequency back to "auto&...

infabo

Wondering. ROS should contain a cleanup command or something alike. And upgrade procedure should check for available space before even doing an attempt and cleanup junk when needed by itself. Instead it cancels with "not enough space" message. From 7.17.0 to 7.17.1 I lost another about 70k...

infabo

There quite a few things that need to be passed from cap to its capsman.

infabo

"traffic processing on CAP" means what it says: no traffic forwarding to CAPsMAN server.
The info-message was changed by 7.17.

Then I see continous traffic between the CAP and the CAPsMAN on port 5246.

Where or how did you measure/see this? What kind of traffic?

infabo

Color change is one thing, it was there in Winbox3 already. But an improvement would be to have some kind of diff/change view collecting all the pending changes so one knows what to expect when "OK" button is clicked.

infabo

@optio Seems like you already had reduced free disk space on 7.16 already. I too have container+wifi-qcom-ac installed and about 200kb free on 7.17.1 (was 270kb on 7.17.0). see https://forum.mikrotik.com/viewtopic.php?t=213941#p1119443 Unless you have stored some files/graphs on your flash, you can ...

infabo

Not sure what all the fuss is about ... Look for post in this thread with "RouterOS 7.17 BugProve Testing" as title. It's still there for everyone to see. Like I said, I (or MikroTik) would not have deleted it. It was a volunteer mod. To be correct, it was merged into this thread, not del...

infabo

No syn flood warning. I only saw a handshake timeout for WireGuard and a "VPN terminating" message for the L2TP connection in the log. I enabled debug logging for the IPsec and L2TP topics, but nothing appeared—there were no changes or additional debug output (watched the situation for at ...

infabo

I'm not sure, but since the upgrade to 7.17.1, neither my L2TP (IPsec) VPN nor my WireGuard tunnel to ProtonVPN are connecting. I hope this isn't directly related.

infabo

It is time for 7.17.1.

infabo

Remember how the authentication of winbox and MAC access was changed, to improve security, but the new method remains undocumented.

The question is: was the method before the "new method" documented?

infabo

there is an option to disable fractional scaling for winbox, you will then have to use winbox built-in zoom to make it bigger, but there will be no scaling issues due to Windows problems

That sounds like a solution. I would appreciate having this option to observe how it behaves.

infabo

teslasystems, this is what I call nitpicking above. If you use the screen at normal resolution, you can't see it. This is why yourself had to make insane zoom for the video, just to show it. I did not mention it before because I did not want to be the one who is nitpicking. But I have to give tesla...

infabo

Voluntarism works very well in a market economy. However, as Normis already mentioned, MikroTik does not take active countermeasures. Can you name another manufacturer that has voluntarily published both its bootloader code and comprehensive documentation for its devices? Just one example will suffi...

infabo

As a first measure or attempt, I would Netinstall the affected cap ac (with "keep-configuration" flag).

infabo

Not publishing bootloader specs is effectively the same thing as locking out You could go to the EU Parliament and propose a law requiring all manufacturers to make their devices fully accessible for open-source operating systems, including the publication of specifications and all relevant documen...

infabo

Why is device-mode even being discussed in this 7.18beta topic? As far as I can see, there hasn’t been a single changelog item related to device-mode in 7.18. It would make more sense to discuss this in the 7.17 thread or in a dedicated topic. A separate, well-focused discussion with significant att...

infabo

Between "Filter Rules" and "NAT" there is a different spacing compared to the other tabs.

2025-01-29_14-51.png

It also appears on other windows. Seems randomly.

2025-01-29_14-54.png

infabo

*) Table: Change to a custom font that has same-width numbers I don't know exactly how to say but I think tables are better to scan now. *) Performance optimization: Try fixing line glitches when using fractional OS app scaling Not performance, but a bug-fix for me. I do not have any random "d...

infabo

Just got Samsung s25 ultra and it doesnt want to roam(Older s23 roamed just fine), i get this in log. @Glavni_5GHz association rejected, FTE indicated that STA uses RSNXE, but RSNXE was not included. Is this related to 7.18 or something else i never saw such message? This message already existed be...

infabo

It would be beneficial to all to report these issues to Mikrotik support - instead on whining here. This is a community topic. Of course there will be comments like "I dont have this issue" just because this is not a Mikrotik support thread. It is a open discussion.

infabo

I think the difference is: wifi-qcom has driver support for VLANs built-in - and wifi-qcom-ac not. Thus the need to do it on the CAP bridge instead.

infabo

I can confirm. I also hit the cache size limit with very few entries. The cause in my case was a static "CNAME localhost" record. I got rid by using "A 127.0.0.1" instead. Still a bug IMHO. But i can live with the alternative.

infabo

When you are familiar with developer tools: check network tab for failing requests (4x or 5x status). I am curious. But it seems more likely that the login html document is already the source of issue. So you have a modified/customized login HTML markup somehow? Branding package or the like?

infabo

@zajDee Please clear your Browser's cache. This is the old login design. 7.17 webfig got a design overhaul.

infabo

I have just found a device mode bug. I was able to set routerboard "cpu-frequency" from "auto" to "768MHz". Then I wanted to undo it by "/undo". It did not undo unfortunately (even though it shows "R" as like it has undone the action - but has not). ...

infabo

viewtopic.php?p=1110235&hilit=ovpn#p1110235

It is added automatically. I removed that server (even though it is disabled) on my devices after upgrade to 7.17. It is just noise in config export otherwise.

infabo

It seems you've accidentally pasted your comment twice. That said, desktop application development (such as Winbox) and web development (like the Webfig redesign) are entirely separate disciplines from software development for embedded devices (such as those running RouterOS on MikroTik hardware). T...

infabo

Bugs are not documented 😉

infabo

Just two days ago, I suggested in the 7.18 topic that release features could be announced better. Now, two days later, there’s a great changelog video for 7.17. That must be a coincidence - you can’t make a video like that so quickly! RouterOS 7.17 changelog as a YT video: https://www.youtube.com/wa...

infabo

We dont even know what is wrong. Whats the output of

/interface/lte/monitor lte1 once

Consider downgrading to ROS 7.17 before doing factory reset. This is BETA.

infabo

Do you see errors in the log?

infabo

My Chateau LTE has been having some stability issues and seeing the improvements in this Beta release, i thought I'd upgrade. this went fine, then i noticed there was a modem firmware upgrade available, i did this also. now i cant connect to 3/4G. I noticed just now that my routerboard fw is still ...

infabo

We occasionally notice bugfixes for wifi-qcom-ac in the changelog, which is highly appreciated. However, it would be quite interesting to know if dynamic VLAN assignment is planned for implementation - be it even in the distant future. Do you mean VLAN assignment via RADIUS or Access list? datapath...

infabo

We occasionally notice bugfixes for wifi-qcom-ac in the changelog, which is highly appreciated. However, it would be quite interesting to know if dynamic VLAN assignment is planned for implementation - be it even in the distant future.

infabo

- ad unicast timeout: have you double checked the passphrase? Make sure there are no whitespace or special characters (e.g. because of copy+paste) anywhere at start/end of input fields. - ad dhcp lease timeout: looks like tp-link device wants to bridge the network. This may not work out properly as ...

infabo

I see messages like these:

2025-01-22_14-57.png

Already reported that postive signal issue for registration table in ROS 7.16 via SUP-170583. Now I see these numbers in 7.17 in logs again.

infabo

I understand it’s mentioned in the changelog, and yes, it’s still in beta. Similarly, the file share feature had its place in the changelog, but it wasn’t entirely clear what it was about until I saw a screenshot. Even stable channel releases often don’t provide much more detail than what’s written ...

infabo

yes, pe1chl is correct. check for updates command will read the package list from the server. you can install packages directly from the server now. no need to download them and upload them by hand. the list needs to be refreshed after reboot. That's a great new feature! I would love to see such fu...

infabo

Well yes OF COURSE "file share" function will open up 443 HTTPS from anywhere, it creates a public website with https on your router, which anyone can visit. This function is to create public download links for files, like this: https://hcf087skgys.routingthecloud.net/s/7DPKi3nJTFhJq3b Yo...

infabo

How this works? Has someone tried already?

*)  cloud - added file-share feature;

infabo

Maybe analogously to ipv4 fasttrack?

infabo

This release adds a lot of improvements. Mikrotik, very strong!

infabo

Why is manual steering configuration?

/interface wifi steering
add disabled=no name=steering-lan neighbor-group=dynamic-Home-WiFi-9a91126b rrm=yes wnm=yes
add disabled=no name=steering-guest neighbor-group=dynamic-Guest-WiFi-1c2b9b73 rrm=yes wnm=yes

infabo

This didn’t age well: viewtopic.php?p=966972#p966991

infabo

The new WebFig redesign has quite a few visual issues, especially in Safari. My skin file works fine as far as I see, but I’m scared to click around too much because I’m worried a wrong click might mess up my config.

infabo

It is RouterOS version 7.17 released in the "v7 stable" channel.

infabo

Just a guess, but regarding the triangular routing issue: NA9D, you mentioned having a Layer 3 switch configured with all your VLANs and your 192.x network. Is this switch capable of inter-VLAN routing? If so, it might help eliminate unnecessary hops and improve efficiency, as traffic between the VL...

infabo

Use the ROS built in update functionality. It updates to latest 7.12 first. Then it upgrades to 7.13. After that you can upgrade to 7.17 finally. More info can be found at help.mikrotik.com/docs

infabo

I guess you would never make an inplace upgrade of a MS Server 2019 to 2025 without testing, right? Certainly, there are admins who might attempt such an upgrade directly, but it's always a risk. Even on Windows, untested updates - such as Exchange KBs - can cause significant issues if applied with...

infabo

proceed here: https://mikrotik.com/support

infabo

I can’t even load a web page from a device on the second network.

Sounds more like another issue when not even loading a webpage works which hardware offloading - even when r5009 had it - wouldn't fix either.

infabo

Then please let me know which Amazon platform you're returning it to – maybe I can grab the RB5009 at a good price in the Amazon resale section. One person's loss is another's gain.

infabo

I’m not making excuses for Mikrotik, and I know there are better ways to approach some of these problems in software development. But the issues being discussed here—like kernel image space and hardware offloading, and similar—aren’t something unit tests can handle. These are integration issues that...

infabo

@wuspmikrotik
And yet, it seems that MikroTik is expected to know every possible scenario and real-world setup and perform functional tests to ensure that absolutely no one experiences any problems in their specific environment.

infabo

This is because many people wait for the final release to pull the trigger: "omg!!!!! it broke my xyz". instead of evaluating the testing releases ao Mikrotik can fix release specific issues before final version. I respect that you want to be a MikroTik beta tester, but in a network with ...

infabo

Arggg it seems like there are too many bugs in this version ... Yeah and some random guy here dreamed *THIS* will be a long-term, because it took so long... LOL This is a typical MT point-zero release, 3 steps forward and 5 back... The long-term is as far away as with the v7.0 release. This is beca...

infabo

OP has Chateau Pro AX. I would advise to upgrade to latest ROS for this pretty recent device.

infabo

When on ROS 7.17 and presuming the routerboot has the default boot mode "nand-if-fail-then-ethernet" then you need to do a physical button press to either change the bootmode( to something different) or power cycle while holding the reset button until the device boots into netinstall mode....

infabo

Maybe of help, for Mikrotik developers, here a finding on the "line drawing thickness" thing: - https://stackoverflow.com/questions/57057088/lines-thickness-changes-spontaneously-when-scaling-qgraphicsview - https://stackoverflow.com/questions/9777936/why-do-my-my-line-widths-looks-differe...

infabo

most likely these who is online stats have quite an impact because they often mean database queries.

infabo

We are speaking about RAM issue, not ROM. ROM has been solved roughly in 7.15, what I remember. Thank you for clarifying, Sit75. My earlier post wasn’t intended as a direct response to the RAM issue you mentioned. I’ve been monitoring free memory on RouterOS since version 7.13, and my recent observ...

infabo

Here my update on the "free-memory" topic for those interested and also managing 16MB devices. Before/after of 2 devices I just upgraded. td;dr: free space decreased. [user@router] > /system/resource/print version: 7.16.2 (stable) free-hdd-space: 556.0KiB total-hdd-space: 16.0MiB board-nam...

infabo

The outlines of a unticked checkbox should be visible in dark mode theme. Now there is just a blank space. 2025-01-16_15-57.png And this dropdown-menu icon is so small (even at 100% winbox scale) so it is hardly noticeable and has a very small click area from a perspective of usability and accessibi...

infabo

"Wireless" is fine with 7.17, but "wifi-qcom-ac" is crap, unfortunately. I have had long time open memory leak ticket SUP-147911 for hAP ac^2. This ticket has been closed without solution - but it is bullet proof the leak is related to "wifi-qcom-ac", because "wir...

infabo

I just discovered one bug. On Upgrade the timezone gets unset. It is now UTC instead of Europe/Vienna. "/export" is missing this line which was there in 7.16.2: /system clock set time-zone-name=Europe/Vienna edit: seems like this line from export is added or removed by the Cloud feature. A...

infabo

Finally! With important and great changes to "wifi" and many other areas. Keep up the great work!

infabo

That is the beauty and the curse of RouterOS - sky is the limit. But the "sky" here is the administrator @strods I completely agree. But this administrator needs the right tools to troubleshoot and analyze. On a regular Linux system one would just start by using something like ps/htop. Th...

Search found 2507 matches

ros code