MikroTik

infabo

Do you see errors in the log?

infabo

My Chateau LTE has been having some stability issues and seeing the improvements in this Beta release, i thought I'd upgrade. this went fine, then i noticed there was a modem firmware upgrade available, i did this also. now i cant connect to 3/4G. I noticed just now that my routerboard fw is still ...

infabo

We occasionally notice bugfixes for wifi-qcom-ac in the changelog, which is highly appreciated. However, it would be quite interesting to know if dynamic VLAN assignment is planned for implementation - be it even in the distant future. Do you mean VLAN assignment via RADIUS or Access list? datapath...

infabo

We occasionally notice bugfixes for wifi-qcom-ac in the changelog, which is highly appreciated. However, it would be quite interesting to know if dynamic VLAN assignment is planned for implementation - be it even in the distant future.

infabo

- ad unicast timeout: have you double checked the passphrase? Make sure there are no whitespace or special characters (e.g. because of copy+paste) anywhere at start/end of input fields. - ad dhcp lease timeout: looks like tp-link device wants to bridge the network. This may not work out properly as ...

infabo

I see messages like these:

2025-01-22_14-57.png

Already reported that postive signal issue for registration table in ROS 7.16 via SUP-170583. Now I see these numbers in 7.17 in logs again.

infabo

I understand it’s mentioned in the changelog, and yes, it’s still in beta. Similarly, the file share feature had its place in the changelog, but it wasn’t entirely clear what it was about until I saw a screenshot. Even stable channel releases often don’t provide much more detail than what’s written ...

infabo

yes, pe1chl is correct. check for updates command will read the package list from the server. you can install packages directly from the server now. no need to download them and upload them by hand. the list needs to be refreshed after reboot. That's a great new feature! I would love to see such fu...

infabo

Well yes OF COURSE "file share" function will open up 443 HTTPS from anywhere, it creates a public website with https on your router, which anyone can visit. This function is to create public download links for files, like this: https://hcf087skgys.routingthecloud.net/s/7DPKi3nJTFhJq3b Yo...

infabo

How this works? Has someone tried already?

*)  cloud - added file-share feature;

infabo

Maybe analogously to ipv4 fasttrack?

infabo

This release adds a lot of improvements. Mikrotik, very strong!

infabo

Why is manual steering configuration?

/interface wifi steering
add disabled=no name=steering-lan neighbor-group=dynamic-Home-WiFi-9a91126b rrm=yes wnm=yes
add disabled=no name=steering-guest neighbor-group=dynamic-Guest-WiFi-1c2b9b73 rrm=yes wnm=yes

infabo

This didn’t age well: viewtopic.php?p=966972#p966991

infabo

The new WebFig redesign has quite a few visual issues, especially in Safari. My skin file works fine as far as I see, but I’m scared to click around too much because I’m worried a wrong click might mess up my config.

infabo

It is RouterOS version 7.17 released in the "v7 stable" channel.

infabo

Just a guess, but regarding the triangular routing issue: NA9D, you mentioned having a Layer 3 switch configured with all your VLANs and your 192.x network. Is this switch capable of inter-VLAN routing? If so, it might help eliminate unnecessary hops and improve efficiency, as traffic between the VL...

infabo

Use the ROS built in update functionality. It updates to latest 7.12 first. Then it upgrades to 7.13. After that you can upgrade to 7.17 finally. More info can be found at help.mikrotik.com/docs

infabo

I guess you would never make an inplace upgrade of a MS Server 2019 to 2025 without testing, right? Certainly, there are admins who might attempt such an upgrade directly, but it's always a risk. Even on Windows, untested updates - such as Exchange KBs - can cause significant issues if applied with...

infabo

proceed here: https://mikrotik.com/support

infabo

I can’t even load a web page from a device on the second network.

Sounds more like another issue when not even loading a webpage works which hardware offloading - even when r5009 had it - wouldn't fix either.

infabo

Then please let me know which Amazon platform you're returning it to – maybe I can grab the RB5009 at a good price in the Amazon resale section. One person's loss is another's gain.

infabo

I’m not making excuses for Mikrotik, and I know there are better ways to approach some of these problems in software development. But the issues being discussed here—like kernel image space and hardware offloading, and similar—aren’t something unit tests can handle. These are integration issues that...

infabo

@wuspmikrotik
And yet, it seems that MikroTik is expected to know every possible scenario and real-world setup and perform functional tests to ensure that absolutely no one experiences any problems in their specific environment.

infabo

This is because many people wait for the final release to pull the trigger: "omg!!!!! it broke my xyz". instead of evaluating the testing releases ao Mikrotik can fix release specific issues before final version. I respect that you want to be a MikroTik beta tester, but in a network with ...

infabo

Arggg it seems like there are too many bugs in this version ... Yeah and some random guy here dreamed *THIS* will be a long-term, because it took so long... LOL This is a typical MT point-zero release, 3 steps forward and 5 back... The long-term is as far away as with the v7.0 release. This is beca...

infabo

OP has Chateau Pro AX. I would advise to upgrade to latest ROS for this pretty recent device.

infabo

When on ROS 7.17 and presuming the routerboot has the default boot mode "nand-if-fail-then-ethernet" then you need to do a physical button press to either change the bootmode( to something different) or power cycle while holding the reset button until the device boots into netinstall mode....

infabo

Maybe of help, for Mikrotik developers, here a finding on the "line drawing thickness" thing: - https://stackoverflow.com/questions/57057088/lines-thickness-changes-spontaneously-when-scaling-qgraphicsview - https://stackoverflow.com/questions/9777936/why-do-my-my-line-widths-looks-differe...

infabo

most likely these who is online stats have quite an impact because they often mean database queries.

infabo

We are speaking about RAM issue, not ROM. ROM has been solved roughly in 7.15, what I remember. Thank you for clarifying, Sit75. My earlier post wasn’t intended as a direct response to the RAM issue you mentioned. I’ve been monitoring free memory on RouterOS since version 7.13, and my recent observ...

infabo

Here my update on the "free-memory" topic for those interested and also managing 16MB devices. Before/after of 2 devices I just upgraded. td;dr: free space decreased. [user@router] > /system/resource/print version: 7.16.2 (stable) free-hdd-space: 556.0KiB total-hdd-space: 16.0MiB board-nam...

infabo

The outlines of a unticked checkbox should be visible in dark mode theme. Now there is just a blank space. 2025-01-16_15-57.png And this dropdown-menu icon is so small (even at 100% winbox scale) so it is hardly noticeable and has a very small click area from a perspective of usability and accessibi...

infabo

"Wireless" is fine with 7.17, but "wifi-qcom-ac" is crap, unfortunately. I have had long time open memory leak ticket SUP-147911 for hAP ac^2. This ticket has been closed without solution - but it is bullet proof the leak is related to "wifi-qcom-ac", because "wir...

infabo

I just discovered one bug. On Upgrade the timezone gets unset. It is now UTC instead of Europe/Vienna. "/export" is missing this line which was there in 7.16.2: /system clock set time-zone-name=Europe/Vienna edit: seems like this line from export is added or removed by the Cloud feature. A...

infabo

Finally! With important and great changes to "wifi" and many other areas. Keep up the great work!

infabo

That is the beauty and the curse of RouterOS - sky is the limit. But the "sky" here is the administrator @strods I completely agree. But this administrator needs the right tools to troubleshoot and analyze. On a regular Linux system one would just start by using something like ps/htop. Th...

infabo

Alright, that makes sense. I guess I was too naive.

infabo

We agree that they take up more RAM but then eliminate the SMB entry on these devices so that a stable version cannot go into Kernel Panic for functions that the manufacturer itself makes available, do you agree? That is not how it works. But I agree with, Mikrotik could improve memory reporting so...

infabo

Assuming that more than one request comes from each unique IP, implementing rate limits can at least help mitigate the issue. It would require someone with a strong dislike for MikroTik and control over an entire ASN to send, for example, 5000 requests using 5000 unique IPs.

infabo

I backed my most problematic router off from 7.16.2 to 7.15.3 and the BGP problems seem to have stopped. I saw some appear on other routers due to a bouncing session due to faulty BFD, and so I anticipate moving them all to 7.15.3 (BGP cores and reflectors). Thanks for confirming that! I was quite ...

infabo

We have found that some Windows (not WinBox) zoom settings cause it. Only happens at lower resolutions and zoom in windows settings, especially on large screens like external monitors. It's very likelty this is a Windows only issue due to scaling. We will see how to fix it. My screen resolution on ...

infabo

A load balancer like haproxy as a single measure wont improve the situation significantly. Worst case it would introduce all kind of other issues other than HTTP 500 we currently see - if done badly. I have no experience with phpbb itself, but from a quick google research it seems to have a redis ca...

infabo

I believe MikroTik could benefit from professional support or consulting regarding the operation and hosting of a web application. There have already been some suggestions in this regard. The forum is experiencing HTTP 500 errors almost daily. 2025-01-14_11-22.png There is a typo: it should be "...

infabo

Could this be a feature request? I miss the information we had in the old Wireless driver.

I placed this feature request at Mikrotik support last year. Sadly it was declined. Maybe it needs some more people requesting it.

infabo

wifi-qcom-ac is still rock stable in 7.16.2. At least here.

infabo

@teslasystems I have none of such issues with any other software on my device. So it is either a Qt-bug or the result of bad border calculation/settings only visible when doing "non-fractional scaling". I am at 108dpi and may be the cause. As this is not a integer-multiple of 92dpi. But 10...

infabo

@ruijzhan how does your partitioning look like? Better to discuss this further in a dedicated topic or contact Mikrotik support.

infabo

10.1. W (802.3af, radio off, only main chip and LAN working)

This is ridiculous. 10W for nothing.

infabo

This new table view. While I wasn’t a fan of the large padding in the "zebra table" view, I did appreciate the zebra-style itself, as it’s a well-recognized UI pattern. Removing this view entirely, without allowing users to toggle between the "classic table" and "zebra tabl...

infabo

I don't like these "thick borders" every few lines. Is this a rendering bug or on purpose (it looks ugly and distracting)?

winbox-table.png

infabo

I learned the "monkey test lesson" by enabling IGMP-snooping and multicast querier some months ago. It introduced extreme latency on my whole network I could not explain - just to finally determining these 2 bridge settings as the issue.

infabo

WHAT is not true?

normis made it quite clear what was not true. His comment also contains the answer to OPs question: "what happens when CHR 60 days trial is expired!"

infabo

Don't get me wrong, I really appreciate the detailed debugging effort. I am 100% sure it helped to identify and reproduce the issue. Especially it made EdPa look into it. But one remark; these statements were misleading: I just made some test with a hAP ac² running 7.16.2 using the normal bridge (no...

infabo

Tongue in cheek Chaos, of course you guys (real IT and not homeowners) are stuck with dealing with such stupid setups such as below: A use-case for such functionality would be for example when having two uplinks (eg DSL modem/routers) with conflicting IPs, that you cannot control/change their subne...

infabo

I would like to see another RC release before this 7.17 branch receives a stable release.

infabo

For hap ax3 - your device - you need to look at wifi documentation. you have already set country to Germany, so regulatory domain wise your already within allowed limits of your country. To reduce tx-power ("radiation") even more, you need yo increase antenna-gain value. this reduces actua...

infabo

This device should easily handle 600mbit/s or you really mean 600 megabyte per second? anyway, please provide a config export so community can help.

infabo

Script to disable all WIFI Interfaces with the name "AP-1stFloor-*"

According to your commands it is for wireless capsman and not for wifi capsman. so be careful with wording. "wifi" refers to the new /wifi/ menu since ROS 7.13.

A solution for wifi capsman would be neat.

infabo

As for the ticket system: there is a default filter to show only open issues in the list. you need to change the filter to "any status".

infabo

Yes, it is possible to login by ssh key.

infabo

I think the only working approach is to use "create-enabled" instead of "create-dynamic" provisioning rules. Then use scheduler on each device to toggle wifi interfaces. Maybe it is also possible to use the scheduler on caps an device to enable/disable specific caps an provisioni...

infabo

Most probably you'll need NAT.

/ip/firewall/nat/add chain=srcnat src-address=192.168.88.0/24 dst-address=192.168.254.0/24 action=masquerade

infabo

7.14.x is not known to have any security related issues. See for more info here: https://mikrotik.com/supportsec On the other hand, there are vulnerabilities not mentioned in the "security blog" at all. Instead Mikrotik silently fixed them. e.g. https://www.enricobassetti.it/2023/11/cve-20...

infabo

This discussion is focused on release-specific topics, such as questions about the changelog or issues related to this particular version. For general inquiries, please consider creating a separate topic to ensure they receive the appropriate attention. Wishing you a Merry Christmas!

infabo

No need to worry. "By default, bridge MAC address will be chosen automatically, depending on the bridge port configuration. To avoid unwanted MAC address changes, it is recommended to disable "auto-mac" and manually specifying the MAC address by using "admin-mac"." http...

infabo

yes, looking at wireless specifications. Lower rates operate at higher tx power.

"1MBit/s 26 -100"
https://mikrotik.com/product/cap_ac#:~: ... t/s,%2D100

infabo

I have no idea how clients decide which AP to connect to. I assume they evaluate beacon frames before actually connecting to an AP. The parameters they use to decide where to connect are probably different from device to device. But it is odd that some of your clients prefer AP with very weak signal...

infabo

@andyhenckel Now please create a supout.rif on each Netmetal AX. Send it to support@mikrotik.com. Thank you.

infabo

"address-list-extra-time" works in combination with "address-list" of static dns entries. It has no effect on these dynamic entries you printed. see docs on the topic over here: https://help.mikrotik.com/docs/spaces/R ... 748767/DNS

infabo

/ip service set telnet disabled=yes set ftp disabled=yes set www port=1515 set ssh disabled=yes set api address=154.59.207.138/32 set winbox port=1010 set api-ssl disabled=yes Not only change ports. Restrict access to all enabled services by IP address or network. Since you have not a single firewa...

infabo

the name literally includes the word "home" "The Dude" literally includes the word "dude". But how can a software be a dude? So please be serious: BTH is a product name. It could also be named "Phone to Home" and still be the same service. Wireguard and no re...

infabo

It is up to the individual to use it for business purposes. Some can live with outages. Like many people worldwide can live without electricity for many hours of the day quite fine. So: "Caution 4: While cloud services offer convenience and are free, their service uptime cannot be guaranteed.&q...

infabo

I'd like to suggest a public status page for Mikrotik services. So people don't have to flood forum and support helpdesk with all the same "omg, it is down" reports.

infabo

Indeed, works here again as well. Did not set up a Cloudflare DDNS though.

infabo

No need for +1 comments. You already have the attention by Mikrotik.

We have identified the issue and a fix is coming shortly.

infabo

viewtopic.php?t=213191

infabo

Nameservers are usually rock stable. But I have no idea of the architecture of this cloud service tbh. It is what it is: a convenient feature for home users or personal use. My opinion: don't rely on it for critical access or in commercial environment. It is out of your control.

infabo

Actually a short story. Thanks for letting us know. Now you can mark topic as solved.

infabo

thanks for necroposting. better continue here: viewtopic.php?t=213191

infabo

IMAP or POP? For IMAP there are sync settings. Usually you just need to sync message headers and not the whole message/attachments.

infabo

Well, thats one for the helpdesk, "feature request" inquiry.

infabo

As long as TLS 1.2 is still considered secure and ROS supports secure ciphers, I couldn't care less. Everything else is compliance BS.

infabo

if they dont use any of the common libraries like openssl, then it is maybe quite an effort for Mikrotik. They have to set priorities. Not laziness. We know ROS lacks many features and I guess support for TLS 1.3 is not crucial - now.

infabo

We don't know.

infabo

Because there is no urge for Mikrotik to support it. As long TLS 1.2 is not deprecated/discouraged as 1.0/1.1 - Mikrotik won't move.

infabo

It may be assisted by ChatGPT or just good old copy paste from google results.

infabo

7.16.2

infabo

In summary:
* connect-priority=0/1 seems to be mandatory for Intel based wifi cards

No. I have no such disconnect issues on my Intel AX200 devices (Windows+Linux).

infabo

Typical error. Asking how to solve brainfart instead of describing the problem to solve and get the real solution.
We don't know what OP wants to solve, but i suspect that a classical hashmap is what OP want.

infabo

regarding Fritzbox, have you tried:

"EEE (Energy Efficient Ethernet) in FRITZ!Box deaktivieren"
https://at.avm.de/service/wissensdatenb ... aktivieren

infabo

First time ever my cap ac (running wifi-qcom-ac) locked up yesterday (wifi stopped broadcasting, device not reachable). Needed to power cycle. Log only said "rebooted probably of power loss". What changed in 7.16.2?

infabo

yes, directly to customer support. https://mikrotik.com/support

infabo

It is not a bug. ed25519-sk is just not supported. Only recently the have added ed25519 support.

infabo

i like reading that kind of stories. The tragic hero, IT professional with decades of experience in rocket science IT. First time has to do Mikrotik and fails hard because of that Latvian vodoo. Then visits Mikrotik user forum to vent. The end.

Basically the boilerplate for many topics here.

infabo

I could not identify any request to this specific "CRL update" event until now. There are only TLS requests in the time frame. But I see other packets originating from the router itself toward some "suspicious" destinations (cloudfront,amazonaws,skewed.de, ....) where I dont know...

infabo

Since updating to 7.16.2 these CRL messages are going crazy: [ro@uter] > log/print where message~"CRL" 02:20:05 certificate,debug GENERAL: start CRL update 02:21:05 certificate,debug GENERAL: start CRL update 02:22:05 certificate,debug GENERAL: start CRL update 02:23:05 certificate,debug G...

infabo

Some of you propose hap AX2 for $80-100, but I do not need wifi - I want an even better price for equipment that can handle gigabit internet without major investigations. wifi-qcom is an extra package. Dont install it. No drivers - no radio. It is like saying: "I don't buy a 5 ethernet port ro...

infabo

there is even a curl to Mikrotik fetch converter

https://tikoci.github.io/postman-code-generators/

infabo

Mikrotik must have evidence of effectiveness. Otherwise they would not introduced this change in default configuration.

infabo

HEX refresh is a router. It does not even have Switching results in the Tests tab. So it is not primary intended to be a switch. Yes, it has a switch chip built in (EN7562CT) and can do HW offload. But again: It is a router.

infabo

Please introduce the possibility to disable workspace "auto-save". Why even auto-save is a feature at all? There is a "Save" button in the workspace drop-down list. Is the button there just for the sake of layout needs a button? I use a tiling window manager and I **hate** it whe...

infabo

These results are a pure consequence from having that ether1 port directly connected to CPU and not to switch chip. In case used as a router it would have to pass CPU anyway. An c'mon, with these few ports who would buy such a device as switch? You can buy dumb unmanaged switches in this form facto...

infabo

In that same config using ether1 as uplink, speeds go down drastically (peaking sometimes towards 500-600Mbps but rarely more, average 363 Mbp s). I can't believe. That would make this "refresh" completely use-less for anyone living in 2024. I'd like to quote Viktors from the YT video: ht...

infabo

I hadn't noticed that, but in any case, the Winbox 4b12 version isn't opening and is generating errors, and according to the changelog it should run on macOS BigSur. It's a shame that they discontinued macOS 11, because in some countries a new MacBook isn't that cheap. you can upgrade nearly any ma...

infabo

Look at the results for the 512 kbp packet size and there are basically your real world results. Just depends on your config as to what results you'd see. Thanks for confirming the advice I found earlier - to look at 512B column in the last line. Nowdays, Mikrotik has again created a device that ca...

infabo

"Ethernet test results"

https://mikrotik.com/product/hex_2024#testresults

infabo

I'd like to hear an explanation why this is the default behavior: If (accept-priority of AP2) = (hold-priority of AP1), a connection to AP2 will be allowed only if the MAC address can no longer be reached via AP1. This basically - IMHO - leads to unnecessary disconnect messages in log. Client is con...

infabo

I did search the forum to try to see what you are asking for, but there are no post about SUP-172111 SUP-172111 is the new ticket for a bug that was already fixed in the 7.15rc (SUP-151054): https://forum.mikrotik.com/viewtopic.php?p=1071424&hilit=151054#p1071424 It's back from 7.17beta: hAP ac...

infabo

Or, cheaper than throwing away 1,5k€ (it will end up as a keeper unless you offer it as an 1€ auction anyways): write to Mikrotik support and ask about the compatibility. You cant expect in a community forum to have the solution after one single day. https://help.mikrotik.com/servicedesk/servicedesk...

infabo

Isn't it related? I hadn't noticed that, but in any case, the Winbox 4b12 version isn't opening and is generating errors, and according to the changelog it should run on macOS BigSur. It's a shame that they discontinued macOS 11, because in some countries a new MacBook isn't that cheap. beta12 does...

infabo

I have a very bad experience with jumping to such high release versions.
........
I don't wanna risk it because there are over 300 subscribers connected to it.

Yeah, I would not risk either. As one subscriber I would even shoot you for rebooting this device in fc...g production!

infabo

ROS main package size increased in 7.17. But I think not more than around 200kb. On 7.16.2 it reports 765KiB "free-hdd-space". So not to worry right now. But Mikrotik needs to keep an eye on that. I hope 7.14 was enough of the trouble.

infabo

I disagree.

infabo

For me, specifically adding the connect-priority=0/1 (in combination with default settings mostl) made my Samsung S21+ and iPhone 11 roam without disconnecting first.

I would call this a workaround. Sort of. I don't know why "accept- equals hold-priority" is the default after all.

infabo

Also my laptop, which has the Intel AX211 is no longer giving me headaches.

Weren't you on the "My Mikrotik wifi6 works like a charm"-train all the time?

infabo

Because I have a "strong opinion" on Fortinet especially (as one of these "enterprise" vendors), here is my 2 cents - with ChatGPT "polite" filter applied. So please don't say it is ChatGTP made up. Enterprise solutions like Fortinet often come with their own challenges...

infabo

Always to complain

infabo

ROS 7.14 introduced a new queue type for ethernet interfaces on LTE devices (e.g. Chateau line). *) defconf - use "fq_codel" queue as default interface queue for wired ports on LTE devices; In "/system/default-configuration/print" it is implemented like this: /queue type add name...

infabo

/interface detect-internet set detect-interface-list=all Please remove that detect internet thing by: /interface detect-internet set detect-interface-list=none You already know where your WAN "lives". No need to detect and mess up your config with that crzy magic wand. You did not tell us...

infabo

No, not the same level. It keeps the attacker out for another 100ms or so. I hope this is just a sample TBH

infabo

@gjmelena what is your issue with create enabled? And regarding the free ticket system: Mikrotik uses a commercial ticket system: https://help.mikrotik.com/servicedesk/servicedesk And on case you wrote directly to support@mikrotik.com, this also be channeled to their ticket system IIRC. If you did n...

infabo

you could have opted for a cheaper device that does not have routing and wifi built in.

Name this cheaper Mikrotik device with built-in 5G support without the other bells and whistles (wifi, etc.)

infabo

Because OP is running an OpnSense firewall.

infabo

you can stick them upside down and tell your wife it stands for "W" like wife.

infabo

Try BTH.

https://help.mikrotik.com/docs/spaces/R ... ck+To+Home

infabo

Agreed. Do an export with sensitive so you have reference config at hand (in case there are some vpns or something important configured). then netinstall (with reset config) to latest ROS.

infabo

wifi-qcom-ac drivers may not be affected at all. No issue here as well.

infabo

this device should have a default firewall config. Maybe it is quick set as CPE or something - as these quickset profiles remove firewall rules IIRC.

infabo

wifi-qcom-ac for some also could work.

infabo

At least the wifi CAPsMAN config remains

infabo

about downgrades, there is ZERO logical reason to knowingly downgrade to a version with a known CVE, possibly allowing easy access to the device by a hacker. Zero. Do not try to find it. This is new to me ... that ROS upgrader has built in function to check certain ROS package against database of C...

infabo

@holvoetn look here: https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode#Devicemode-Featureclarification I've seen a response to a bug ticket this will be prevented later on. Until this I believe what on help.mikrotik.com is documented. "routerboard" restricts "system...

infabo

It is still possible to downgrade ROS as normis already explained. see https://help.mikrotik.com/docs/spaces/R ... edversions

infabo

The real question is: how many people - in teh real world - rely on traffic-gen, re-partition and downgrade to insecure ROS versions with known security vulnerabilities? Ok, the routerboot settings thing may be an issue for someone. But tbh: if you have the regular need to mess around with routerboa...

infabo

There is never a perfect world. But for certain device types, cloud provisioning these days is leading the way. There also needs to be local management. If we cloud provision, the device info and network/device password would be saved at an administrative level. We copy password and use it to acces...

infabo

Won't happen. It would be ridiculous to introduce security measures in stable branch while keeping "loose device-mode" in a long-term branch for another long period of time.

infabo

*) dns - fixed lookup order for static DNS entries (introduced in v7.16.1);

I did not know that there is an documented lookup order at all? Any details? Is this the problem reported here: viewtopic.php?p=1111498#p1111473 ?

infabo

Something I would ask support@mikrotik.com

infabo

Cloud device management is as secure as using cloud password vaults. Go ahead, there are many enterprise hardware vendors out there. I for myself chose Mikrotik, because they dont do (and obviously honestly dont believe in) that Cloud crap.
Sry for the offtopic post.

infabo

- Develop a damned cloud portal for us "enterprise" [IT/MSP/WISP/Enterprise/Professional] for us to manage and provision XYZ devices [Pro/Enterprise] type of hardware MikroTik develops. This would create the added layer of security

cloud and security. lol. keep your enterprise stuff.

infabo

yes, but why would you want to disconnect local radios again?

infabo

Depends on the Qt version. 6.5 LTS still supports macos 11. 6.8LTS support macos 15.

Well played. Finally Mikrotik tooling has to move with industry.🙀

infabo

PS: provisioning local radios is only needed once. They pick up changes as any other radios managed by capsman automatically.

infabo

you can use

/interface/wifi/radio provision

to provision you local radios according to your provisioning rules.

Thats it. Also documented. https://help.mikrotik.com/docs/spaces/R ... ovisioning

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

One disabled ovpn-server was/is always there - even if you do not use ovpn server at all. Configuration is upgraded and new server is created only if in older version at leat one parameter in server configuration was set by you to non-default value. Word. I am going to observe/check once 7.17 final...

infabo

See the changelog: *) ovpn - added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported); That first OVPN server that you have is the default server, same as there was one before. I'd like to add this: This shows you the &...

infabo

And probably delete partitions is restricted as well.

infabo

just delete the default.json file. did this not help?

infabo

I support this request. DNS gained a lot of attention recently (adlist, dns forwarders, etc.). And such a feature, registering hostnames in internal DNS resolver, would be a killer. I could remove that wonky dhcp lease script that just bloats my configuration export. And save on disk writes I would ...

infabo

I noticed that when a DNS forwarder is set up with DoH servers, but DoH server is not used in the DNS settings, forwarding does not work. Is this how it's supposed to work?

Yes, according to docs these forwarders are used for DNS FWD entries only.

infabo

SerDan, what is your complaint?

infabo

that's frightening 🙀

infabo

For automation just use flashfig. Eapeccially when provisioning 100 factory new devices.

infabo

@webfig: maybe you need to clear browser cache (or open devtools by F12 and disable cache). Just to be sure it is not missing browser cache invalidation in webfig.

infabo

impossible that webfig skin designer is broken in a RC release.

infabo

You can, in Enterprise plan

https://developers.cloudflare.com/dns/z ... ain-setup/

infabo

maybe this light want tkip?

infabo

Thank you for this objective and informative insight. Things are not always black and white.

infabo

Looks like a nice little device. Features a lot of "AI" features. Have fun!

infabo

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able t...

infabo

or put a web application firewall in front which handle rate limiting. done. PS: cloudflare is the most widely known WAF. But there are others as well. Even varnish could help to its extent - if you want to avoid 3rd party cloud services. But one is for sure: you cant beat or optimize anything out ...

infabo

Interesting. Then it's maybe the different wireless AX chipsets in the MikroTik hardware.

infabo

I would say: most probably. Give it a cold boot. If this does not help: contact your distributor.

infabo

just update your client device intel driver - probably more successful than running beta ROS. I have window 10 and Manjaro Linux both running AX200 cards and I dont have these disconnect logs. But I do keep my systems up2date.....

infabo

or put a web application firewall in front which handle rate limiting. done.

infabo

How do I configure new forwarders in my DNS server settings?
Please check the documentation:
https://help.mikrotik.com/docs/spaces/R ... 748767/DNS

Direct-Link to section: https://help.mikrotik.com/docs/spaces/R ... terOS7.17)

infabo

"8C:17:59" belongs to "Intel Corporate". At lest we know this.

infabo

Now you mentioned it: it has PRO in all caps. Like this would be an acronym for something....

infabo

Linux version 4.0beta12:
when you hover the mouse over a shortcut (e.g. R) in interfaces - it does not show the expansion.

You mean the absence of tooltip, right? I'd suspect this is not implemented in v4 yet.

infabo

It’s not about the spacing itself; it’s the inconsistency in how spacing is applied. Sometimes elements stick to the top or bottom, and other times there are no gaps at all. It feels freestyle rather than consistent, like you’d expect in a design system.

infabo

This does not resolve the general "space-wasting" in the whole UI. I am not against "airy" and "big" UI per se. Proportions must be correct. Its like inflating "Michelin man" to a maximum to look like a balloon.

infabo

of course you can.

infabo

Just updated on MacOS 11.7.10 by the integrated updater. Now Winbox crashes on startup.

*) improve scrollbar UX

Is there an before/after on the improvement? Is it thicker now? Or what changed?

infabo

I have a hAP ax³ and since I had it never worked well with multiple devices. But the worst thing is that I cannot even use the 5Ghz band with my notebook(having Intel AX200 card) because of the frequent disconnects, standing 2 meters away from the device. I tested it with the latest beta too, same ...

infabo

Massive Improvement for me in dark Mode, much more useable. Thanks for listening, much appreciated. I don't see any substantial change/improvement in dark mode. But can't tell who it looked in previous beta as I use light mode because WinBox dark mode lacks readability/contrast (for me). Whereas I ...

infabo

Yes, I mean tree view. Does this also apply to virtual wifi-interfaces? Does not look like.

infabo

Are there tables elsewhere than "Files" module?

infabo

You are completely right. It should be enough with read, to just read. and should be enough with write, to upgrade. But there are deep running issues in the policy system everywhere, we have to re-make the whole thing. Wow, I’d like to extend a big compliment for acknowledging that the policy syste...

infabo

If the latest beta version does not solve your issue, please send supout.rif file to support, describing in detail about what happened. Can you share what change in beta5 is related to resolving this issue? Can you share the issue you are experiencing besides the log message? It is your first post ...

infabo

thats the place you can print them. you define them one level up.

infabo

Well, why not just mention that in changelog?

"*) add support for model xzy rev4"

all way too mysterious

infabo

I think most of the MIPS hardware gets v6 in factory still - given they are manufactured still. But what makes me wonder more than that: why was it necessary to release 6.49.16 without a single actual change? This maybe only makes sense for the purpose of raising the "factory-software version&q...

infabo

when compromised at least one device on at least 2 different networks (meaning 2+ devices), you can establish a btest between these devices.

infabo

Install appropriate package. wireless or wifi-qcom-ac.

infabo

By the push of a button or power-cycle :D

infabo

Srsly, before asking and making the effort to create a topic.

Just review your one-liner - saves you and us some time.

You specify "mode=https" but use and "http://" URL.
Decide on this.

infabo

Barely useable I would say. Server error galore

infabo

netboot aka netinstall is initiated by reset button press.

infabo

According to your posted and commented config "84:0D:8E:38:C0:64" is "Vue White" and not "Emporia Vue".

infabo

Dear MikroTik, I’d like to suggest focusing on enhancing the "flagged status" feature rather than restricting the default feature set of RouterOS. A better approach might be to analyze system configurations for abnormalities. Many forum threads highlight cases where users have been hacked ...

infabo

You need a WAF at least to dodge all these massive nonsense requests that just generate load on the webserver.

infabo

But it looks better!

infabo

check your cabling

infabo

Given the wide variety of environments where Mikrotik equipment is deployed, it's quite bold to sit in the comfort of the Mikrotik headquarters in Riga, maintained at a pleasant 20°C, and suggest in a straightforward manner: blingblouw2 you can just enable bandwidth test. ask the user to push the bu...

infabo

Which ROS version is currently running on?

infabo

There is a "spotted in the wild" series on Mikrotik youtube channel. People send images of Mikrotik devices found anywhere. Sometimes on obscure places (hard, hard to reach physically). Still they insist on the button push confirmation thing.

There must be an alternative approach.

infabo

Maybe victim of traffic-gen attack

infabo

/ip dns set allow-remote-requests=yes cache-max-ttl=1d cache-size=250000KiB doh-max-concurrent-queries=200 doh-max-server-connections=2 \ doh-timeout=4s max-concurrent-queries=200 max-concurrent-tcp-sessions=40 use-doh-server=https://dns.quad9.net/dns-query \ verify-doh-cert=yes [/code] All these a...

Search found 2344 matches