Is the DHCP server service not active, or not listed? Those are two different concepts.. The IP Services list is list of services not specified elsewhere. E.g. IPSEC server, PPTP/L2TP server services are not listed under IP Services. So it is 'by design'. Thanks. Then how do I get a list of all act...

I have DHCP Server enabled but I noticed that the service port 67 isn't active.

The list of service ports is in IP -> Firewall -> Service Ports.

What am I missing here?

On bridge, set STP protocol to none. Also disable auto time zone and cloud time sync and internet detect, as these are other sources of unwanted traffic. Thanks, it was initially set to RSTP. About these functions: auto time zone cloud time sync internet detect They are transmitted from the WAN por...

I noticed that on LAN, the router emits several protocols. For example: The Neighbors discovery (port 5678). It can be disabled from: IP->Neighbors->Discovery. ( Link to similar thread.) The 802.2 protocol which has MAC destination address 01:80:C2:00:00:00. How do I disable it? I want that for LAN,...

Via WebFig:

Simply click on the firewall rule (From menu: IP -> Firewall) and near the bottom of the page (after you scroll down) you see the option "Log" - tick the checkbox.

Then, you will see the log in the Log page (if a matching packet has arrived).

In newer versions you can put hostname directly in address list and system will resolve it automatically (and refresh it when its ttl expires). So it's easier and script is not needed. But if for some reason you like script better, you can keep using it. The right chain depends on what you're tryin...

Link to the wiki: https://wiki.mikrotik.com/wiki/Use_host_names_in_firewall_rules It says "Note: Applies only for RouterOS versions up to version v6.36.". Why it isn't possible for versions greater than v6.36 ? There's a typo: /ip firewall filter add chain=ouput dst-address-list=host_mikro...

Normally, when click the Upgrade button in WebFig then the device tries to connect to the upgrade server via the WAN port. It's not exactly like this. What actually happens is when you click Upgrade button device tries to contact upgrade server and uses usual routing information for that. Whether t...

THere are multiple ways to upgrade your device: https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS Thanks, I've read it. It's lacking info about the manual WebFig upgrade but I managed to figure it out: Infer the Architecture of your device from the Mikrotik website: https://mikrotik.com/prod...

Is it possible to perform an (auto) upgrade via a LAN port ?
If not, could you please add this option?


Normally, when click the Upgrade button in WebFig then the device tries to connect to the upgrade server via the WAN port.
But WAN doesn't always necessarily mean Internet.

I think that there's a bug: The Raw Data of each record/packet contains the IP address, but it isn't being shown in the record. I followed the Javascript code and noticed that the following method: types.number.get = function (attrs, obj) { var val = obj[attrs.id || 0]; return val instanceof Array ?...

Hey, I just got my hEx and powered it on. I upgraded it to latest version and also tweaked it a little bit. From WebFig, I went to "Tools -> Packet Sniffer" and initially could see the IP addresses and ports etc. But now, all I see is only the remaining (without the IP addresses/ports) - s...

So basically you want a switch with firewall rules added???. I would accept this kind of configuration, but I prefer having a different subnet for the LAN - therefore a router is preferred (instead of a switch). It's simple. If you don't know where to start, then start with default config, which is...

Hi, The first time I saw this device I knew it would be right for me. I started reading to see that I'm 100% sure know how to do what I want. But I got overwhelmed by the info and came to ask for your guidance/referral. What I'm looking for is this - a router that has these functions: No NAT (masque...