MikroTik

infabo

My devices never rebooted or kernel paniced. A sole RSTP/bridge issue. I always resolved it by toggling ethernet interface to get port to forward again. Now my devices run 7.15.3 and the issue never appeared again. One could think it is something from 7.18 causing it........

infabo

I assume you need the product. Write to support@mikrotik.com with a detailed bug report of your problem. Then you can be sure Mikrotik heard of the problem. This is just a community forum - no Mikrotik official needs to read these topics.

infabo

"yeah, the device is compromised, traffic-gen away!" This is actually what concerns me the most. One of the key features of device mode is **flagging**. According to the documentation: flagging-enabled (yes | no; Default: yes) The device will perform a configuration analysis, and if trace...

infabo

Sounds like a kind of "secret key" (rather than a password). Good idea. But won't help for already deployed devices.

infabo

As I already suggested, wouldn't it be enough to use the factory password for security? As dang21000 points out, not all devices have default factory password. For the ones that do, if they have already been deployed and the factory password was changed, and we didn't keep a record of the factory p...

infabo

mkx answer was perfectly accurate and fine for what he explained. You can't make him responsible for not having superpowers inspecting your CRS from just little to no info. How could one expect a packet sniffer pcap file eating up internal flash which is not visible when executing /disk/print? This ...

infabo

@AlexandruL Maybe you also experience this? viewtopic.php?p=1134698

infabo

This means, when doing netinstall and a custom script, the device mode restrictions still apply? So one cant setup a device from scratch and disable all device-mode flags by scripting? If yes, this would be bad.

infabo

Originally device-mode limited some things. Okay, most of these were newly introduced anyway, like containers. Then device mode limited more things after an upgrade. Okay, we have to reset/unplug everything. Please stick to the facts. Under the old "enterprise" device mode, everything was...

infabo

Yes, i'll wast time to play between with downgrade, change and re-upgrade.... that a good idea.
I want to reduce my parts count... on edge router, because not possible now too.

Your choice: travel France or press button or downgrade/upgrade.

infabo

- I already have tons of Mikrotiks in production that use most of the features that now suddenly became disabled with latest firmware upgrades. Maybe you can name these features and use-case you have/had which are now not possible anymore after 7.17 device-mode changes. Mikrotik needs some real-wor...

infabo

You can still downgrade to 7.16, change the cpu speed accordingly, upgrade to 7.17+ again. Problem solved.

infabo

Confluence is not ideal for documentation. Maybe OK for some small business 10 pages wiki. But for this case it is actually too expensive.

infabo

ISP router + any AP =

?
E50UG + any AP =

?

E50UG config looks like default configuration.
You APs need to be DHCP client.

infabo

If there is a computer in House 1 it would be easiest to use something like TeamViewer to get remote access to the computer, from where you can configure the RB5009 using Winbox.

infabo

But could You do a quick heads up here? Just a little list of small bullet points, Mikrotik style? :D I have already done that in almost every release topic after 7.16 so no need to repeat it. My support ticket was created July 2024 and has not received a reply after August 2024 despite several upd...

infabo

maybe related: viewtopic.php?p=1135453

infabo

Because there are multiple APN items.

/interface/lte/apn print

Choose your number.

infabo

7.15 does not receive any fixes since 7.16 stable was released. So it is pointless to say, it takes several months. It is over. 7.15 is EOL.

infabo

wap ax has only 256mb RAM. So the wap ax has already less physical memory as your observed memory usage on ax3.

infabo

Thanks! The configuration shown is very informative for me.

infabo

@mkx Indeed, I would really complain if I got more than what the datasheet specifies. 😅

regarding LMP 5G, yes has 16MB, but it is an 5G device only. It does the job. But 32MB would not hurt. It is another device that prolongs the 16MB era.

infabo

Interesting, this is not indicated on the product page (yet?).

infabo

While connected to ISP direcly What this means exactly? You directly connected to ONT? Or does your ISP already supplied you some kind of router? If yes, then keep using that and just connect your CRS to the router, remove all the DHCP server config from your CRS (except dhcp-client for the CRS its...

infabo

I think Mikrotik already realized that 16MB is a little tight. There are refreshes of existing device like Chateau LTE12 (2025) now with 32MB flash. There are other devices in the pipeline, see https://forum.mikrotik.com/viewtopic.php?t=213245#p1131190, now with 32MB flash as well. Good to see Chate...

infabo

Or use some ax device as AP. The day Mikrotik releases the real successor of "cap ac" - I replace my cap ac in a second. They made a "wap ax" that looks like "wap ac". But they designed a "cap ax" that looks like an UFO or oversized smoke detector - instead o...

infabo

So basically: on a 0815 CAP traffic usually enters on ether1, goes straight via CPU to wifi interfaces - and back. There is no switch offload possible anyway, right? May be a different case, when someone connects something on ether2 on a "cap ac" and does vlaning. In such a case, does this...

infabo

This post has the recent (7.18.1) measurements with Bridge VLAN Filtering that I made on my hAP ac² (also compared to the setup with /interface ethernet switch), no WiFi interfaces though. https://forum.mikrotik.com/viewtopic.php?t=215359#p1132188 Bridging between two ports at wirespeed with Bridge...

infabo

@teslasystems I am not able to reproduce this bug. But I have to admit, I only have ROS 7.13.5 for testing this right now. Maybe the bug does not exist in that ROS version. I made sure to enter the TAB character and make terminal height as small as possible. But no matter how hard I try, I don't see...

infabo

Hi, I have opened up the firewall docs and added any rule I found there or maybe not and then I have this particular drop rules here and my question is: what is the bigger picture?

Sry, but so much unknown variables. Nobody can answer your vague questions.

infabo

You have tested different wireless devices already?

infabo

What do you mean by stopped working today? Is the ssid24 still visible when scanning on client? If yes, does it allow to connect? When yes, can you reach the AP e.g. via ping?

infabo

I will be shutting down the btest server I maintain on April 1'st 2025

You might want to clarify that this isn't an April Fools' joke - just to be safe!

infabo

According to your export the interval is 30m (not "every 3 minutes" as claimed in original post). But this is not your problem. I would start over new. Or at least remove "thr-loss-percent=90%" and "thr-loss-count=50". The defaults are way more tolerant. thr-loss-percen...

infabo

Then show off your netwatch configuration. We don't see it.

infabo

What matters is the "terminal emulator", the part that sits on top of the SSH/TELNET/SERIAL connection and interprets the incoming characters. From my experience, I would have said the same. I worked with Windows for a long time (back when WSL didn’t exist) and had countless display issue...

infabo

You get better upload speedtest results when connected on Ethernet? Do you see a difference when connected to pc5 vs pc2 wireless?

infabo

You probably confused. Windows KiTTY is a PuTTY clone (or whatever - https://www.9bis.net/kitty/index.html). I am talking about https://sw.kovidgoyal.net/kitty/ Get some WSL terminal and you are good - even on Windows. It is not a ROS bug per se. Maybe their SSH server is not fully compatible with W...

infabo

Yes, this is more a TAB vs SPACES debate. It should be possible to use TABs and not mess the output of Winbox Terminal window.

infabo

The tab character is often preferred by those who want the flexibility to adjust indentation to their personal preference.

infabo

To me, the TAB character feels like an archaic relic from a time when every single bit had to be carefully conserved.

infabo

Get some serious terminal emulator (not putty or winbox terminal). Then you won't see/have any issues.

URXVT

2025-03-25_09-12.png

KITTY

2025-03-25_09-14.png

infabo

Clean up your wifi config. Disabling managagement protection may be okay. But manual tx-power is probably your issue. Or the manually set MTU. /interface wifi set !configuration.tx-power [ find default-name=wifi1 ] /interface wifi set !configuration.tx-power !mtu !security.ft-mobility-domain !steeri...

infabo

This cannot go on indefinitely. Devices with only 16MB of storage should not hinder the evolution of RouterOS. Decisions made in 2015 should not stand in the way of further development. I would gladly give up 100 to 150 KiB of my flash for the LUA interpreter. In exchange, you can move SMB entirely ...

infabo

...instead of adopting a mature scripting language like LUA.

infabo

Even an issue since v3? Now one more argument to use CLI. Or improve Winbox 4. No syntax highlighting either.

infabo

Indeed, no more broken requests to find in developer tools network inspector!

infabo

It is not all visible on the video, but it looks like you are scrolling with the mouse-wheel on ~00:04 in the winbox4 window - but the log keeps on scrolling. This looks like a bug. Or you are using an old/outdated version of Winbox4 (IIRC log freeze was implemented in some later betas).

infabo

There was a topic on the availability thing: https://forum.mikrotik.com/viewtopic.php?p=1119216 Maybe Mikrotik is currently testing a newly developed product (like pe1chl said), a web application firewall. Still needs so fine tuning but then it will make Cloudflare, Sucuri & co. a though competi...

infabo

+1. Very valuable for Mikrotik.

infabo

https://fccid.io/document.php?id=7634095

Here you can see it very well.

infabo

Policy routing would be the simplest option. https://help.mikrotik.com/docs/spaces/ROS/pages/59965508/Policy+Routing First create routing table for VPN or use a VRF interface. then add routing rule(s) src-address matching and action=lookup-only-in-table. Using policy routing has already "kill s...

infabo

I still had one 7.18.2 device on my network acting in station mode (map lite connecting my LAN Lexmark printer on WLAN). I disconnected the map like 10 days ago and since then have not experienced this bridge RSTP issue again. It seems like something in 7.18.x cause this problems. There is still a h...

infabo

Never seen an explanation but read often, so I ask now: how come that v7 is slower than v6?

infabo

You chose manual upgrade: https://help.mikrotik.com/docs/spaces/ROS/pages/328142/Upgrading+and+installation#Upgradingandinstallation-Manualupgrade The easy way is the standard upgrade. For everything else it is always advisable to read the documentation. ROS is infamous for the non-obvious. As I jus...

infabo

I am not 100% sure, but log/print should tell you the reason why it did not upgrade successfully because of missing packages.

infabo

There was this post here https://forum.mikrotik.com/viewtopic.php?p=1134367#p1132144 that got my attention for the - until that - unknown clear-history functionality. Today I found out one detail of "console/clear-history" which I do not understand. I was browsing the changelog and found t...

infabo

Considering how old Mikrotik is, why dont they have a usenet server? But I guess I know the answer: back in early 2000s PHP was the new kid on the block. The web was suddenly all PHP. phpBB got popular - so why mess around with decades old usenet? Now, 2025, still running phpBB, is now a legacy piec...

infabo

Please attach a screen video showing this behavior. I am curious too.

infabo

This has nothing to do with phpBB IMHO. Even static assets like https://forum.mikrotik.com/styles/canvas/theme/images/mikrotik_youtube_banner.jpg or https://forum.mikrotik.com/images/smilies/icon_confused.gif sometimes don't load here at my side. Opening https://forum.mikrotik.com/styles/canvas/them...

infabo

"-s userscript Pre-configures the device with the provided configuration (text file in .RSC format), removing the existing configuration before applying the new one. This configuration also replaces the default configuration." https://help.mikrotik.com/docs/spaces/ROS/pages/24805390/Netins...

infabo

It would be very helpful if new features in the changelog were described in more detail. Often, they are only mentioned briefly, making it difficult to understand them fully. In many cases, the documentation lags behind, and some new features in stable releases are not documented at all. This is not...

infabo

As I understood it, the product idea started with: Genomics researchers: we need a network storage. Mikrotik: challenge accepted! When you have a ROS - everything is a router. But I like the idea/intention to combine router/storage and save on energy. And as Druvis said, maybe more useful as edge st...

infabo

infabo

No matter,
now DNS-over-QUIC is used.

ROS supports DoQ???

infabo

the drive behind RDS: https://youtu.be/LGAwubEU92A?si=pkeK0dBYeN_u6Uii

infabo

Thats good. Chateau LTE12 is ROS v7 only and is still not discontinued. So, in this regards, many happy years supporting 16MB flash platform to come.

infabo

there is flashfig for such purposes

infabo

Reverting changes seems to be common in recent releases. e.g. introduced hw acceleration for openvpn just to revert it for some ciphers after several feedback. I mean, is this really not testable? Rhetorical question, of course this could be tested beforehand.

infabo

Mikrotik support acknowledged the issue today.

The issue has been reproduced, we look forward to fixing it in upcoming RouterOS versions.

Currently, the provided type is ignored and http-01 challenge is used.

infabo

It is. And actually worked without port 80 open when I first issued the certificate with type=cloud-dns. This was introduced in 7.16. But maybe is broken now. I dont know.

infabo

https://github.com/StevenBlack/hosts

There are several variants of hosts lists. Choose one that is not that aggressive in blocking.

infabo

Space issue primarily concerns ARM platform.

infabo

The last time I created a LE certificate by /certificate/enable-ssl-certificate type=cloud-dns it worked. This was somewhen in dec/24. Certifcate expired beginning of march/25 IIRC and was never renewed automatically. I found out by visiting webfig and saw the SSL warning and cert-info said it was e...

infabo

Next: test with AX again to verify.

infabo

Of course. But you can give a second life to a ac2 which otherwise would be thrown into trash bin.

infabo

I am Forum Guru but no Mikrotik guru.

infabo

There is a lot of truth in what G00dm4n says.

infabo

Glad to hear that! Some people in this forum seem to want ARM devices with 16MB flash, like the ac2, to "fade away" - despite the fact that these devices perform pretty well with the new wifi-qcom-ac driver.

infabo

Well, he tried to login via webinterface and SSH. I guess updating Winbox will not change anything.

infabo

Not of real help, as this issue seems to be somehow DNS cache related; but it general a nice tool to find the fastest DNS near you: https://dnsspeedtest.online/

infabo

The 2g-probe-delay introduced in 7.18 maybe of help to resolve the issue finally: viewtopic.php?t=214567#p1130445

infabo

Waiting for the usual "RAM is to be used" reply.

infabo

pe1chl, no need to always assume the worst case. Of course, extracting an 8KB (compressed) driver into a separate package makes no sense - that would be nonsense no matter how you look at it or what the actual overhead is. The point is simply to take the next logical step. Splitting AX and AC driver...

infabo

What's new in 7.16 (2024-Sep-20 16:00):

*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);

DNS-01 challenge only for the mynetname.net domain.

infabo

This is Mikrotik fault, and they know it. They can easily split wifi-qcom-ac package for IPQ4019 only, but they are not willing to do. It's in vain, it's in vain, it's in vain.

see viewtopic.php?t=202423&start=600#p1054046

infabo

Dont know what the 2012 standard covers but otherwise yes. Woooow! Seeking for compliance with standards that are almost 15 years old? That's a little scary, but also a little exciting. fischerdouglas, I am sure you've seen this little detail: (introduced in v7.19beta2); So no, not covering 2012 st...

infabo

It now gets annoying: 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 discarding 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 learning 2025-03-13 16:36:35 bridge,stp GENERAL: ether2:0 forwarding 2025-03-13 16:36:35 route,debug,calc GENERAL: route/calc/merge/input/route 2025-03-13 16:36:35 route...

infabo

My guess: supporting H2 blows the ROS bundle out of 16MB flash.

infabo

I have same WiFi disconnects issues, even 7.17 and 7.17RC8 not helps at all, and I can’t roll back to 7.14.3 because Factory firmware for my board is 7.15.2. Why Mikrotik engineers can’t solve this mass problem for so long? UDP: I finally downgraded it, but don’t want staying on 7.14.3 forever, bec...

infabo

@nmt9000 active window had a blue border around the whole window before.

infabo

I see you no use dark mode.

infabo

Try setting DTIM = 3. That's a recommended setting years ago to keep Apple Devices connected to Wi-Fi. Not sure if It's actually still the case, but it *could* help with saving battery. And if still problems can you try disabling FT? You are using different SSIDs so it doesnt even work :D Also chec...

infabo

Maybe of help: viewtopic.php?p=1132293#p1132144

infabo

I would have created a supout.rif and sent it to Mikrotik support. Too late unfortunately. This could have been very interesting. Maybe you were at 7.8.1 and not 7.18.1?

infabo

Damn, very pity. Now even active window frame is not visible.

Indeed. Why was this focus border removed? Especially as it adds inconsistency. Selecting a e.g. table line still has this blue focus border (on dark theme). But selected/focused window not.

infabo

If someone could hear us out... We are in deep trouble with Mikrotik. We bought 12 CCR2216's to replace our aging 1072 fleet (we are a mid sized FTTH/Wireless ISP). @elcano89 you surely bought the 12 CCR2216 units directly from an official MikroTik distributor. Since you have already created a Mikr...

infabo

On my cap ac - which I very rarely log in - it went from 407KiB to 472KiB. And from 220KiB to 284KiB on my D53G-5HacD2HnD (this device was netinstalled with keep-configuration a few days ago). This is awesome! I did not even know that history can be cleared. There should be an option: "enable v...

infabo

That is both my hope and my assumption.

infabo

I would not expect fixing bugs in an existing feature to result in a massive code expansion. If that is the case, I would submit the code for a review. I agree with the statement regarding features. However, why do certain features have to be packed into the base package instead of an extra package?...

infabo

Everything here requires either time or money, not just keeping the flash size small. Please take a look at the changelog and see where the effort goes in recent versions.

infabo

292kib, cap ac + wifi-qcom-ac. viewtopic.php?t=215048#p1130419

infabo

Just netinstalled this device. 7.18.1 is now running, but flash-space is tight. version: 7.18.1 (stable) free-hdd-space: 44.0KiB total-hdd-space: 16.0MiB board-name: D53G-5HacD2HnD platform: MikroTik And after a reboot I now see: 2025-03-04 00:39:54 system,error,critical could not save configuratio...

infabo

Here has someone this "learning/discarding" flood as well. viewtopic.php?t=187723

But over there it appears right after connecting. Here it took 2-3 days to trigger the issue.

infabo

The issue happened again today. Despite both devices currently on 7.17.2. I was right watching a video stream when wifi dropped. So I could look at the logs right away. Started at "06:18:50". 2025-03-09 05:33:52 dhcp,info defconf assigned 192.168.0.4 for xx:xx:xx:xx:xx:52 2025-03-09 06:02:...

infabo

Sure you can do that. But you won't make friends.

infabo

MikroTik could keep the existing DNS as it is but offer an extra DNS package that, when installed, replaces the built-in DNS service. For example, OpenWrt provides lightweight versions of services with limited functionality and size, but if you have enough space, you can install the full version. Mi...

infabo

Is this even a thing when no VLANs are in use? I guess not, because the only BPDU packets should be from (implicit) VLAN 1 right?

infabo

Cap ac is only connected to the Chateau via ether1.

Cap/ether1-----------Chateau/ether2

infabo

Even Druvis mentions the SWAP can be used not only for containers: https://youtu.be/wJw50I7STck?t=131

infabo

To a certain extent, even the "stable channel" can be considered a form of testing. So, BartoszP, your advice should not be limited to the beta version.

infabo

Was hoping there was something magical that could do the trick, I will have to bite the bullet. Netinstall is the magic bullet. You can select "Keep old configuration" in Netinstall GUI. Netinstall CLI for Linux keeps the configuration by default. So you won't lose anything of your config...

infabo

Thank You MikroTik team form new experience with RouterOS with 7.19beta4 version! :) I have bricked (ROS 7.19beta4 bricked) my home RB493G RouterBoard!!! I had to netinstall and back to stable ROS 7.17.2, because RB was booting.....booting.....booting... loop... Which ROS version did you upgrade fr...

infabo

b) Alternatively, downgrade the D53G-5HacD2HnD to v7.13.5, which tolerates the extra BPDU packets and creates a stable RSTP tree despite them. You're pointing out something that I noticed a long time ago but was never able to identify the cause of. Up until version 7.13.5, I had no issues with RSTP...

infabo

The only device connected to D53G-5HacD2HnD/ether2 is the cap-ac.

/interface/ethernet/switch/print 
Columns: NAME, TYPE
# NAME     TYPE        
0 switch1  Atheros-8327

infabo

I wonder if MikroTik has really thought about worst-case scenarios when developing RDS and ROSE. It’s easy to assume everything will work perfectly, but reality is often more complicated. That’s why setting up a NAS on a standard Ubuntu system isn’t simple - there’s a reason why special distribution...

infabo

PS:
D53G-5HacD2HnD running 7.17.2
cap ac running 7.18.1

infabo

Could this be related? viewtopic.php?p=1131360#p1131360

infabo

I think mikortik need to rework the documentation to be like netapp or ansible, release a doc per version and redact detailled upgrade paths and différences, lost/add/changes between versions.

THIS

infabo

Thanks for your answers! Especially the script from optio can be a future reference for everyone searching the forum.

infabo

Hi guys, You can use safe mode Here . You can undo all changes in one step. I have to say: similar also happened approx. 1 or 2 years back while I was in safe mode. I enabled safe mode, did at max. 10 changes or like. Then I left safe mode. It did undo most - but not all changes I have made while I...

infabo

Dear fellow forum members, Today I had a weird experience. Using my D53G-5HacD2HnD as capsman and a "cap ac" connected/managed by the capsman. cap is connected by eth2. Today the connection to cap was interrupted. Never seen this before. The logs on capsman device was flooded over a longer...

infabo

What OP wants is a command to make the CAP's LED blink on demand. Like having 10 caps mounted on the ceiling side by side and you don't want to find out the hard way. Should be doable via "user-led" - if cap ax has this one available. Did not try out, but could be: /system/leds/add leds=us...

infabo

Based on the posted configuration, I would say this is a configuration issue.

infabo

There is always something to be said about the configuration mechanism. Some people prefer a system where all config is only done in RAM and a "save" is required to commit it to nonvolatile memory. Some systems have a "transaction" mechanism where you can change different parame...

infabo

One of the possible causes is that you have mangle mark-routing rules that put packets of a connection in a routing table other than "main", but did not try to exclude those connection from the fasttrack rule. It is written everywhere in the Mikrotik docs, that fasttrack only works on mai...

infabo

Anyone an idea? Otherwise I'd file a feature request at Mikrotik support.

infabo

Oh, okay - if even Fortinet gets it right, that certainly says something. 😊

infabo

Well, "/queue/type/remove [find]" sounds a little bit more destructive. cmasi wants to only delete custom (default=no) queue types.

infabo

Yeah, welcome time traveller. wifi-qcom and wifi-qcom-ac have it. Legacy wireless most probably will never get 802.11w.

https://help.mikrotik.com/docs/spaces/R ... i-Benefits

infabo

I want to understand. How can informative text - that does no harm - be a bug?

infabo

What type of package manager introduces such a significant storage overhead? OpenWRT has been using "opkg" for years without issues. However, OpenWRT also provides board-specific builds - perhaps this is the key to addressing flash storage limitations on 16MB devices. That being said, I ha...

infabo

Also 16MB devices just cannot support wifi-qcom-ac which is almost 1MB larger than old wireless package, not to mention OOM issues... 16MB devices support it. Look at my free-space report to "cap ac". This little device is capable of running 7.18.1 and still has enough free space. But the...

infabo

I wouldn’t buy a router with 16MB flash anymore either. However, when I purchased it in 2020, it was (to my knowledge) the first "native" v7-only RouterOS device, which one might have assumed would be a meaningful distinction. That said, I’m not ready to retire the device just yet. I could...

infabo

Today was the day I thought, 7.18.1, now I can upgrade. But it did not upgrade: 2025-03-03 11:22:21 system,error upgrade failed, free 13 kB of disk space 2025-03-03 11:22:21 system,error GENERAL: upgrade failed, free 13 kB of disk space Well yeah, before upgrade I checked system resources: version:...

infabo

Indeed. product-specific (or board-specific) packages not containing unused/useless drivers could probably regain some space.

infabo

Today was the day I thought, 7.18.1, now I can upgrade. But it did not upgrade: 2025-03-03 11:22:21 system,error upgrade failed, free 13 kB of disk space 2025-03-03 11:22:21 system,error GENERAL: upgrade failed, free 13 kB of disk space Well yeah, before upgrade I checked system resources: version: ...

infabo

I kindly request documentation update for the following changelog item in the wifi docs (https://help.mikrotik.com/docs/spaces/R ... 59120/WiFi):

*) wifi - implement steering parameters to delay probe responses to clients in the 2.4GHz band;

Thank you!

infabo

*) wifi - add channel.reselect-time parameter which allows to perform channel re-sellection at given time of day (CLI only); important part: "at given time of day". It is meant as written obviously. In combination with reselect-interval this is getting hard to predict the resulting behavi...

infabo

GWN7660E looks interesting. Maybe time for another benchmarking here.

infabo

@tealasystems Thank you! This is an excellent proposal. While it doesn't address every quirk (such as the collapsible sections and the somewhat unusual arrangement of command buttons), it significantly enhances usability—several levels up. I truly hope MikroTik takes this into consideration. The imp...

infabo

A good start would be, creating a new topic and providing (cleaned of sensitive) config export.

infabo

This ovpn server was explained several times. See 7.17 beta/rc/stable topics for more information.

infabo

didnt help

classic. My experience with "/undo" basically.

infabo

For me this device mode, is the worst thing in ros, i'have more than 70 devices located accross the country and have to spend time/kilometers to reconfigure them because now i can't switch easily with parts, or set cpu speed without pressing a fucking button Change CPU speed sounds not like a recur...

infabo

Wow, awesome what you can read between the lines.

infabo

Warning for people using this metrics exporter : https://github.com/akpw/mktxp/issues/229 Since 7.18, something is broken... But the main question is why routeros don't provide it's own metrics endpoint...??? This is no mystery anymore. It is this change causing it: *) console - put !empty sentence...

infabo

The simplest, if you really like shooting yourself in the foot, is this: https://forum.mikrotik.com/viewtopic.php?t=214886#p1127217 I hate to continue the discussion on this offtopic, but the referenced post shows how to update ROS - and not the routerboard firmware. The simple solution for nishadu...

infabo

The introduction of the package manager remote package update/install in version 7.18 is a great step forward. I hope this feature allows MikroTik to modularize certain functionalities of the current RouterOS package into separate packages, as the user experience is much better than uploading extra-...

infabo

When comparing the official BTRFS man page with MikroTik’s BTRFS help page, I couldn’t help but notice some more info on official docs: - https://btrfs.readthedocs.io/en/latest/man-index.html - https://help.mikrotik.com/docs/spaces/ROS/pages/295239711/Btrfs While I have no real-world experience with...

infabo

https://btrfs.readthedocs.io/en/latest/ ... -practices

RAID56 - at latest btrfs version - is not considered stable for production.

infabo

btrfs is part of rose package. Dont worry. But there is ext4, fat32 and exfat support in routeros package AFAIK. Some devices have USB ports and some people want to use USB sticks. When not for SMB, then just for e.g. container storage and or log storage. And btw, I think this controversial discussi...

infabo

I would try the wap ax and if coverage does not meet expectations - then just skip Mikrotik wireless. wap ax is currently the best/latest Mikrotik has to offer as wall mounted AP. For the cap ax, I would not dare to mount such a huge device on a wall. It is kind of OK for ceiling, but for wall: this...

infabo

I have to put it on a wall, which seems to be a suboptimal position for this model... (Maybe that is the reason for the coverage issue I am facing?) Most probably. here you can find antenna pattern for cap ax: https://fccid.io/TV7CPG52X/Test-Report/Antenna-Specifications-6299616 I only can speak of...

infabo

Hi, when running the following command in the CLI: /system/package/update/check-for-updates channel: stable installed-version: 7.17.2 latest-version: 7.18 status: New version is available it returns the installed and latest available version but does not display the changelog, whereas Winbox provide...

infabo

sinisa said "file sharing". "*) cloud - added "Back To Home Files" feature;" is a feature in routeros main package. True, the storage features are part of rose extra package. Regarding the shoutout "We DON'T WANT any FS on a ROUTER!". Every device needs to sup...

infabo

Good point! These random passwords are fine, but users are prompted to change them on their first login. The problem is that a first-time user might set a weak password like "123456" and become vulnerable (since ROS, by default, does not have login rate limiting or "fail2ban", ri...

infabo

Put email.backup in quotes.

file="email.backup"

infabo

/interface/print

and running state for example:

:put [/interface/get value-name=running  ether1]

infabo

Which ROS version?

infabo

Interesting, Chateau LTE12 (2025) now with 32MB flash memory and different modem (EG120K-EA). Is this the end of 16MB era? The leaked "7.20_ab28" packages in 7.18 topic already shows about 700kb larger routeros-package, which can't fit routeros+wifi-qcom-ac into 16MB flash devices anymore....

infabo

Documentation says on "partitions" device mode feature: does not allow to change count of partitions. If your router is unable to boot, it will still be able to boot into your other partitions. No restriction for crash recovery. For my understanding this means: not allowed to create or rem...

infabo

Probably this: viewtopic.php?p=1124455#p1124455

infabo

In this case: better contact Mikrotik support directly. They should be able to clarify.

infabo

NetMetal AX is an outdoor device. https://mikrotik.com/product/netmetal_ax -- Our toughest long-range outdoor access point – now with Wi-Fi 6! -- From documentation: https://help.mikrotik.com/docs/spaces/ROS/pages/224559120/WiFi installation (indoor|outdoor; default:indoor) Devices installed outdoor...

infabo

Why is this relevant? You don't have the WinBox port (or any management port) open on an untrusted network without at least address constraints, do you?

The same reason you set a password.

infabo

@asimko Look, this is fixed in 7.18: https://mikrotik.com/supportsec/cve-2024-54772

infabo

Would you be happier if instead of "What's new in 7.18 (2025-Feb-24 10:47):" the caption would say "Version 7.18 (2025-Feb-24 10:47). Changes since 7.17:" ? No, that would just be window dressing. If I upgrade from 7.17.2 to 7.18, I want to see the changes at a glance - specific...

infabo

Thank you for pointing this out. I have noticed these "duplicates" before, but the one regarding the device-mode CPU fix particularly caught my attention, as I had already reported this bug to Mikrotik and tested the fix in version 7.17.2. Could someone clarify why identical changelog ite...

infabo

Duplicates (already contained in 7.17.1 or 7.17.2): *) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17); *) device-mode - fixed feature and mode update via power-reset on PPC devices; *) disk - fixed showing free space o...

infabo

I disagree, this bug was fixed in 7.17.2. It has been like that since forever. The changelog of the stable c.d release contains changes since the previous a.b release. Version a.b might have additional patch versions a.b.x or a.b.y that already include the same fix, but the fix will still be listed...

infabo

There was a bug in 7.17 where even with device-mode locking down RouterBOARD, people were able to change the CPU frequency once.

I disagree, this bug was fixed in 7.17.2.

infabo

Stable release changelog has always been a list of changes since previous stable - bugs introduced and resolved within beta/rc are not in this list. At least this change was already in 7.17 stable: *) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by dev...

infabo

This release cycle was short. Thank you Mikrotik! Can't wait to see IPv6 FastTrack in action.

infabo

yes, same with 7.17.1, I spent all night to install homeassistant. I had to install docker desktop and then download and import image directly do mikrotik ... and then I found out, that in Mikrotik docker is no support for USB stick ... (zigbee) Did not know that. But good to know, as it makes ROS ...

infabo

0: Remove "defconf" comments everywhere
+1

@anav where was the reasoning for this? Anyway, I have a reason for this proposal. More on it later.

infabo

On the contrary, I would even make it a rule: Do not trust "safe mode."

infabo

With ages to roam you mean it disconnects and takes some time to re-connect again?

infabo

Likely.

infabo

I wouldn't generalize that. I have a Pixel 7, which is registered with "auth-type=ft-wpa3-psk" to wap ax on 7.17.2, and the logs only show "roamed to" entries for this device. So everything seems fine, and I haven't explicitly set "connect-priority" anywhere.

infabo

If the info is correct, s10+ was launched 2019. And already had 802.11ax. 2019 is like stone-age old in these days. Maybe some minor incompatibility with some old Samsung driver. 30mbit/s is really slow.

infabo

Strange. There is not even any ipsec related change in rc1.

infabo

But nevertheless, I would not trust termux in any way. I know for years the pings are way too high and not realstic in termux on my device. Ping in termux to gateway 15ms where real ping measured with e.g. Analiti shows something average 2ms. https://play.google.com/store/apps/details?id=com.analiti...

infabo

I have edited my previous comment. Try with multiple connections as well. I have also better results with UDP ("-u") sometimes

infabo

Try with "-R" flag. And/Or "-P 5" for multiple parallel connections.

infabo

I use Magic iPerf on Android. Which app u use?

infabo

I can't imagine they have incorporated all patches for any improvement made to BTRFS in kernel 5.6+ and 6.0+. So what it the point of using outdated ROSE BTRFS when someone can have that on e.g. TrueNAS for example (or any Linux distribution)?

infabo

There are several discussions in the forum, especially https://forum.mikrotik.com/viewtopic.php?t=198736. As far as I know, there is no simple solution - or even a solution at all to this problem until today. Especially in a church setting, where many different and unknown wireless clients are in us...

infabo

As you have verified, this is now something to report to Mikrotik support. https://mikrotik.com/support

infabo

I hesitate to say it, but to be honest: it is what it is. There are no secret tweaks or hidden settings that provide a hidden performance boost. As a hobby, you can experiment with it, but in a commercial or professional environment, I’d clearly say: Use what works well for you and meets your needs....

infabo

allowed-number is not necessary to be set for just receiving regular SMS.

I am wondering where the auto-erase option is gone?

In 7.13.3 there was this in changelog:

*) sms - fixed SMS inbox for FG621-EA modem (introduced in v7.13);

Maybe it is broken again?

infabo

Try this:

ros code

/log print where time>([/system clock get time] - 5m)

In 7.17.2 this does not only print log lines from last 5 minutes. It prints everything from many hours ago and even more. How it can be done in v7?

infabo

Seems to be a long standing issue: viewtopic.php?t=167900

Try reboot.

infabo

I am not sure, but my guess: ac2 has many "qca_crypto" processes and therefore HW acceleration as "qca" stands for Qualcomm. And on AX2 there are many "crypto" processes instead which may be a generic module and therefore working on CPU.

infabo

Has anyone here beeing affected contacted Mikrotik support? Via email or their helpdesk?

infabo

I have rebooted everything and re-provisioned and no changes.

The only way to enforce such changes (IMHO) is to manually re-provision in the "Radios" menu.

infabo

Have you compared output of "profiler" as well?

infabo

Nevertheless troubleshoot was difficult. Likely insurmountable to normal users. A SoHo AP needs to be friendlier. But how could it be made friendler? Do you have suggestions? I mean, your device(s) did not support U-NII-4. So, should Winbox show a warning message like? "Beware! U-NII-4 frequen...

infabo

Can you please provide the iperf3 command you are testing with? Have you tried iperf3 from another Ethernet connected client for comparison (to rule out wifi/s10 issue)?

infabo

*) system - improved HTTPS speed;

Any details on this?

Search found 2623 matches