MikroTik

Why that ?
It should work.

Can you try to recreate certificates ?
Or even for test, don't use them at all.

On the working devices you have this: certificate=request But on AC3, I see this: /interface wifi cap set caps-man-addresses=192.168.66.1 certificate=WiFi-CAPsMAN-488F5AAA3B07 \ discovery-interfaces=caps_mgmt-LAN enabled=yes slaves-static=yes Maybe best to set it the same as the devices which work. ...

Finally ...

Read the specs. Both devices use different POE schemes.

CRS106 PoE In = passive POE 11-30V
CRS310: PoE in = 802.3 af/at 18-57 V

What works for one, may not work for the other depending on the power source you give them.
E.g. typically 802.3 POE is 48V or about. CRS106 does not accept that voltage.

Try Palo Alto ...

Weakest point in every network is rarely router or firewall. It's usually the people using that network. If you configure that router with a proper firewall config to block ALL incoming traffic into your network except for 1 or 2 (keep it LIMITED) entry points via purely VPN (make no concessions the...

And still you refer to LOTS of problems but it's only you ? None of those are happening with 7.13.5, so something has been broken with the newer versions. I am not saying you did not see those problems. But I am not (yet) convinced it's related to the ROS versions you refer to. I have pihole running...

Based on TWO reports, why do you say LOTS ? I can add the third report (not ax3, though) :) And, for what it's worth, the support has managed to reproduce the problem: [SUP-149159] At the moment we have been able to replicate the issue you are having, it's software bug we are working on, If I read ...

Just to make this clear:

Capax3 doesn't exist.
Neither does capax2.
You're referring to HAP AX3 and HAP AX2, yes ?
https://mikrotik.com/product/hap_ax3
https://mikrotik.com/product/hap_ax2

Capac3 doesn't exist either.
Probably HAP AC3 ?
https://mikrotik.com/product/hap_ac3

Highly unlikely.
I have 2 RB5009's with USB stick I use for writing all log entries to with rotational log files.
Neither of them have failed yet (both in use for well over a year).
I assume USB driver on AX3 is the same as on RB5009 ? Same ROS, same ARM64, so ...

You are taking words from the context. If you have taken the time and read my first comment you could see that I have given a lot of information. If someone from support would comment on it I would gladly export my configuration or anything else that is necessary to solve it. Again: support does no...

Load balancing is not the same as defining which AP gets to serve which client. The only way to steer what you're looking for is based on MAC address and access lists (to my knowledge). And still then you may run into a client which does not like if it's being forced to use a specific AP if it think...

I wanted to log stuff to a USB dongle

Really ??

Stuff = undefined garbage.
So we need to get some more specifics on what and how.

After one day of running after downgrading to RouterOS 6 everything is running smoothly. Please have a look as there is something not ok with 7.x that causes those issues on this device. Best to upgrade again, let it happen and then send autosupout.rif (should be created then) to support describing...

I'm not following on the requirements part ...

The client device will select which AP to use. Worst case it may end up as 16 + 0.
Then how are you going to apply load balancing ?
Load balancing what ?

Why use load balancing at all ?

Lots of ext4 USB stick container problems with hAP ax³ and 7.14.2 or 7.15beta9, downgrade to 7.13.5 and everything works:
viewtopic.php?t=206110

Based on TWO reports, why do you say LOTS ?
Besides, you're cross-posting, you know ...

Lots of ext4 USB stick container problems with hAP ax³ and 7.14.2 or 7.15beta9, downgrade to 7.13.5 and everything works: https://forum.mikrotik.com/viewtopic.php?t=206110 Lots ?? I don't think so or this place would be swamped with reports. I don't have any issues running AX3 using USB3 stick form...

For a while we used
/export file=becauseanavsaidso

But it didn't stick long enough ...

I have a USB stick in AX3 for a container solution (Samsung 32Gb). It's in there for some months now. It never failed once. I doubt AX3 as a device is ruining that USB stick. This place would be swamped with reports if that was the case. Also, IF (big if on purpose) that AX3 would be defect, nothing...

And your point is ... ?

VLAN is no different from a normal subnet. Config for that VLAN needs to provide proper DNS services and you need to make sure it is reachable from within that VLAN. Most likely not all required firewall rules are in place to allow other VLANs to reach that internal DNS server. You can also set DNS ...

To my knowledge: not possible.

I am interested to know if a solution exists.

Make 3 provisioning rules.
Each of the rules using a different channel, all the rest stays the same.
Assign one rule (each time a different one) to the mac address of the radio where you want to have that channel being used.

Edit: damn ... and now I'm behind erlinden ...

You're referring to 2 different products:
CSS610
and
netPower Lite 7R

Which one is giving you problems ?

CSS610 only accepts one power input using AC adapter.
netPower Lite 7R does accept 3, one of them being POE on 7 of 8 ports.

Not wanting to sound too harsh but ... when it comes to Mikrotik, you start again at square one no matter what your previous experience is (and from what I read, it can sometimes be a disadvantage having deep knowledge of other eco-systems). It's a quite steep learning curve (I'm still learning myse...

I have cAP ax3, cAP ax2 and cAP ax and cAP ac3 routers. Capsman2 works on cAP ax3, cAP ax2 and cAP ax devices. I don't want to connect cAP ac3. Probably a language issue but your request is really not clear. From what I understand: AX3, AX2 and AX are working. Yes ? AC3 should NOT be connected or i...

It's 192.168.5.111 which is trying to get there.
UDP 123 is typically used for NTP protocol.

Check that device.

And setting those channels, is done through provisioning of the radios when using capsman.

Be careful with that sticker password. Recently it has been changed in an attempt to remove all ambiguous characters but before you could easily mistake 0 or O (zero and capital o), I or l (capital i and lowercase l), ... Even when the MAC address properly shows striked zero, it could be in the pass...

File a support request.
The only way to get attention of developers.

That's the one I use.

Yes.
Provided ofcourse your router is properly configured to handle those vlans.

As a simple switch, it's stable enough.

I was also contemplating to replace it for my home setup with CRS310 but I don't have real benefit from 2.5G yet so I'll leave it for now

DAC cable with 10G connection between RB5009 and CSS610 is nice, though. No bottlenecks there.

The VPN access shown in Quickset is INTO your device, coming from the outside. That's why the VPN name can not be changed there, it's based on a unique name tied to your device. This has nothing to do with setting up VPN towards a 3th party service. You may want to revert to NordVPN instruction how ...

It depends. If your base LAN is default VLAN 1, no added config is needed on cap ax. Wifi interfaces will take settings via datapath for vlan. If your base vlan however is something else ( VLAN all the way), then added config is needed on cap for adding vlan itf to bridge. Bridge itself does not nee...

Ah, they changed it (for the better) From 7.14, /system default-configuration print #| CAP configuration #| #| * Wireless interfaces are set to be managed by CAPsMAN. #| * All ethernet interfaces and CAPsMAN managed interfaces are bridged. #| * DHCP client is set on bridge interface. #| * If printed...

Caps mode is configuration. So don't use No Config. Then you don't even get caps mode. According to documentation: Default ether1 will be set to DHCP client, ether2 will go to bridge with wireless interfaces. All wireless interfaces listening for capsman controller. No firewall, no NAT, nada... But ...

From Help page: https://help.mikrotik.com/docs/display/ROS/Cloud+Hosted+Router%2C+CHR#CloudHostedRouter,CHR-CHRLicensing After trial period, it may move down to free but that part is not really clear. What it does say however, is that after trial period, you can no longer upgrade. Not really useful ...

If your Mikrotik router did not hand out the lease, either another device acting as router did or there is a fixed IP already applied to that Ruckus.
Check that last part first.

See Help pages:
https://help.mikrotik.com/docs/display/ ... BInterface

Try 192.168.88.1/um/

How is connection from remote site to network where capsman controller is located ? Ideally it should be in the same L2-segment. If that's not the case, you need to specify the IP address where it needs to look for the controller. If IP connection is possible, have you tried to specify controller ip...

You can.
It works.

But it gets freaking hot

Added problem with those specific transceivers from Mikrotik is that there is NO WAY to downgrade speed on the device itself. If you connect it to a 2.5Gb port, it will comply. But you can not select the speed yourself. Put 2 on each end and they will always go to 10Gbps, resulting in quite some hea...

Hi, I have a 5009 with eth1 used at 2,5Gbps as WAN (FO) and I bought some S-RJ10 to connect it to a LASN Switch 24 10G ports. The issue is quite common (as I understood later): the transceiver goes so hot ! Common issue with that SFP+ device. Mine go to 95C between CSS610 and RB5009. I recently mov...

I have a similar problem with AC3 / AC3 LTE.

AC3 has 128Mb storage. Runs wave2 just fine !
AC3 LTE only has 16Mb (in the mean time I see it has been silently discontinued ?!). I don't risk installing wave2 on that one !

1- Both = cap device AND capsman controller. At least 2 devices. 2- config of controller is not complete ? 3- From the limited piece of config on the controller, it looks like you are using that same device also as cap ? You may also want to clarify what devices you have and how they are connected. ...

>There's already WebFig ... functionality-wise it's on par with WinBox, so no need to re-invent the wheel. There is yes but you can't access it remotely unless you set-up port forwarding or VPN. Complexity again. Same with Winbox. And please don't respond you can open a port directly on your router...

My guess (been there, done that):
you did not provide the correct location for your containers nor the correct location for the config files.
Some (or all ?) of it came together in one big place.

Show your config, please.

It would help if you show config of both caps device as well as capsman controller.
Otherwise anyone can guess ...

My personal experience is the reverse.
Ax3 has, for me, better performance wifi-wise.

Tested it enough in my former house ( thick brick walls and concrete floors).

Netinstall does the stripping of the waste.
Normal upgrade usually results in leftovers.

By doing it. By far the best way but quite resource intensive. For me it allows me to embed things a lot faster then simply reading or class courses. But it requires a lot of time to follow this approach. Get a rather cheap device to start and play with it. My first was Hex, I still use it. Setup t...

I currently own a hAP ac³ which I'm satisfied with except perhaps for the speed of the wireless network. You are aware that with latest ROS7 versions you can load wave2 drivers on that AC3 without any problem (it's one of the devices with plenty of storage, unlike most other arm-based AC devices) ?...

I have similar setup with Telenet ISP, CV8560E Docsis 3.1 E-router/modem over coax. My router is RB5009. Double NAT is not really a problem (I haven't seen any yet). Worst case I can put my router in DMZ or even put Telenet modem in bridge mode which results in my router becoming the only external g...

Default routeros blocks access via ether 1.
That's why.

Just try 5180 and see if it works.

Use any other lan port then ether1 and winbox to get in.

Before ros7 and wireguard, sstp was also my choice for direct connection.

And then blame CPU temperature when things go haywire ...

Yup.
Well known concept to me.

I use Romon via unbridged EOIP over Wireguard quite frequently, works brilliantly for this purpose.

How to limit the address list ? Don't use it ... simple, no ? The way I see it (provided unlimited memory space), you are going to end up with every address on the internet if you never clean up that address list. Why do you want to list those trying to get in ? Simply drop them in raw rule (MUCH fa...

If you can ping it, it should be reachable.

You can also use port-knocking scheme ?
Or other VPN protocol as backup (IPSEC / SSTP / ...) ?

The most recent MT item I bought through Amazon came from Getic , one of MT’s primary distributors, possibly even #1. Getic does a poor job with product descriptions…. Check the link to see how they describe the RB5009 So ? I always get my product descriptions from the original manufacturer. And th...

How big does that dynamic address list get after 1 day, 2 days, 3 days ?
If it only keeps growing, you can hit a memory limit ...

You can not simply import an earlier made export since the target device will have some default config present, which then conflicts with some parts you want to import from the earlier made export (still with me ?). Best to use notepad/notepad++ and import config block by block using copy/paste on t...

It has been a bit difficult the past period but somewhere last week Normis made some changes under the hood and it effectively seems spam levels have dropped drastically. Definitely not complaining about that !

Until they find a new way ...
It's a never-ending battle, unfortunately.

I have 1 AX3 at home, 5 with a customer.
NONE experience this behavior.

All are at least at 7.14 or 7.15beta.

Show the config or stop speculating.

It seems that SWOS is now available for this model, i don't know how to install it however. If anyone knows how to install, please tell me

Go to Upgrade tab.
Then hit the button "Download and upgrade", I would say ?

Depends on the question.
You can already try here.

Why not ? A limit is a limit, how far away it may appear to be. I have a 16Gb laptop, with 1 wrong setting in a certain data-analysis tool, I can fill that within 5 minutes and the application crashes. (my previous laptop had 24Gb, same problem could be seen there. Been there, done that) An inspecti...

And to counter the other argument: CPU temperatures can easily reach 80-90C without any noticeable performance issues. Military grade components go even higher.

Not that you want to touch it at that temperature, that's something else ...

The package also is installed on a CRS (=SWITCH) device.
Totally useless for 99% of those devices.

Just uninstall it and be done with it.
As said by mkx, it doesn't bring any added value to keep on asking why.

With ax3, there apparently were reports that having a USB 3.0 device plugged in would bring down 2.4 GHz WiFi, to the point where devices couldn't even connect to it, and apparently it was fixed by a firmware upgrade. (Which is separate from a system update and must be performed manually in said Ro...

Adding: Whatever way you set it up, since you will be applying vlan with each time separate subnet, dhcp, etc etc, there WILL be some disruption for devices moving into the new vlan context. Order of some minutes in order to allow all devices to get a new network lease depending on the vlan they are...

You figured it mostly out on your own so congratulations for that !

As long as the address is publicly reachable, it doesn't really matter if it's static or dynamic.

Looking at the block diagram of that thing, it is oddly designed ...

Ports 1-5 are on Atheros Switch chip
Then 6-8 directly on CPU
9-10 as well BUT with a PCIe controller in between.

You should be able to netinstall to ROS6.

You may try to contact support about it ?

Found it.
Default RB1200 has NO config, only fixed IP on ether1 and nothing else.

Definitely look at the linked article then.
It has a normal default config for a router explained line by line (which on itself shouldn't be too hard if you have a bit of experience with RouterOS devices).

OK, can you export that config ? You should be able to use winbox to get in.
I think it may be possible it uses more a switch config instead of a router config.

Since you're note really doing anything with it yet ... may I suggest a reset to default config ?

Attach WAN to ether1.
Attach PC to any other port, you should be able to use winbox to get in.

Is that default config for that device ??
Usually default config will set ether1 as WAN port.

Speaking of which, since you have two subnets, you will need a masquerade NAT rule for everything going out of the WAN interface, don't forget.

Why 7.1.3 and not latest 7 version ? You're missing out on a ton of improvements / bug fixes. Why don't you use default config ? BTW excellent write-up here by tangent explaining a default config step by step: https://tangentsoft.com/mikrotik/wiki?name=Default%20Router%20Configuration I think your r...

There is a help page for this, you know ...

Capsman part
Cap part

https://help.mikrotik.com/docs/display/ ... ionexample:

Is there a way to confirm CPU is the limiting factor? My idea is to fill the tunnel with traffic and see routers CPU utilization.

Check tool / profile

Change your internally used subnet and completely avoid the problem.
Much easier.

APN profile depends on the operator you use.

Only disadvantage for now, most of the arm-ac devices are 16Mb storage only, so don't count on putting other stuff on those things.

Purely as AP, very good move from Mikrotik.

Wave2 drivers so stability is also a lot better.
Also pure performance, quite some difference.

That was regarding RAM.

Same concept.

Besides, at that time storage was a measly 360Kb or 720Kb (I remember even less but those were not that common). And then play disc jockey to have some programs loaded ...
I also recall my fist HDD, it was 10Mb and cost almost as much as the complete PC.

16GB should be ok.
16GB will for sure be OK even for the far future

I think you meant 16MB

Be careful with that prediction.
640Kb was also deemed enough for the far future in early PC-days. Didn't last long.

Obviously your problem is in the vlan part, which you did not show.

Full config for both please.

I’m getting 150-200 using the bandwidth test from another mikrotik device. When testing: test THROUGH the device, not USING the device. If you do bandwidth test AND wireguard encryption on the same device, your cpu might not like it that much... Best to use Iperf on PC - cable - Tik -Wireguard- Tik...

Reset to caps mode.

Legally you can even put that device in your fire place if you want :lol: (on second thought, probably not ... use proper channels to reduce e-waste / pollution) All kidding aside, that should indeed be a safe approach. At which point I wonder what the benefit is versus manually bringing over the co...

Your assumptions are wrong. A binary copy can normally only be restored on the exact same device with exact the same version. You can get away with restore on other device but same model, but even then you may run into problems since also all MAC addresses will be taken over from old device. So best...

frequency=5560-5895

5260 only. Nothing else.

For 80Mhz channels:
5180
5260
5500
5580
5660
5745
5825
(last 2 may pose problems for older clients)

PS looks like we are moving focus away from the underlying interconnectivity problem between AX3 and RB5009 ...

And you're sure you used as band 5GHz AX, not 2GHz by accident ?

Please repost wifi part of config.

And US as country ?
Odd ...

Did you have a correct capsman controller ready on the network ? Because then it will be provisioned and ready to go.

If not, it will move on to next default config.

Not yet. As said, I am first focusing on the ethernet part since that should work at around 950Mbps. Since you already have a lower reported speed there, it means there is another issue between AX3/RB5009, not looking yet at wifi. Can you try to export config (binary and export) and reset that AX3 t...

Same here, after upgrade to version 7.14.1 both tunnels down. I hope this is resolved in the next version because the connection between two sites is down Did you already try 7.14.1 ? Does the issue still occur there ? Did you send supout.rif to support as requested ? I have no issues with wireguar...

There is a bug in RouterOS v6 installed on CRS326. The CPU only count 1, while on RouterOS v7+ its count 2. The CRS326 switches have always had two CPU cores, but ROS6 had no support for this. Both are now available under ROS7. Obviously a SW update can not add cores out of the blue ... they needed...

i have a similar problem with my HAP AC2 RDB52G. ... I decided to restore the routerOS with netinstall. ...however the options in the quick set drop box, don't show up. ... Thanks for an answer Since you netinstalled that device, chances are you forgot wireless package (required since 7.13 on legac...

Despite 6 months passing since my last response in this thread, quicksets are still largely missing for everything AX/wave2-related

Which version of routeros ?
There have been versions (beta/rc) where this was an issue so best to make at least sure you're at the latest stable version.

If it would be a generic problem, this place would be swamped with reports which AFAIK is not the case (yet).

Had a quick look at both configs. How are both devices connected to each other ? From AX3 port x to RB5009 port y ?? What's x, what's y ? AX3 a bit of mixed bag of several things. A second bridge which is not used. Interfaces lists which are not used. Quite a lot of access list entries on wifi: you'...

Time to show your config ...

Upgrade from 7.12 to >7.13 brings indeed wireless package over as well.
Why ? On a switch ? The logic is lost on me ...

Other then that, it runs pretty nice using ROS7. Keep it there

Test cable to cable first so you are 100% sure the problem is not there. That's your baseline. Laptop - cable - AX3 - cable - RB5009 - cable - desktop As a reference: I have similar setup (also AX2 on top of RB5009 and AX3 at home). When I run all cable, I get 950-ish as expected for gigabit etherne...

My Hex runs ROS7 since it was still in beta.
Never had a problem with it, apart from some beta related glitches.

What's wrong with simply configuring wireguard directly ?
It's the basis of BTH ...just a little bit more bells and whistles.

Rb5009

You're looking for a button press. I get it. Ain't gonna happen. ANYONE having physical access to the device can then simply press that button and goodbye network. You want that ? Didn't think so ... So yes, if you think users are idiots, treat them like idiots. And make sure they can't simply break...

Netinstall with option to use empty config.

It's not rocket science. If you go the manual road, it MIGHT be possible you need to handle this in 2 steps. But you will only know once you see it failing. If you go the normal road as foreseen in Winbox/CLI, it SHOULD be a one-step thing. Also there, log file after reboot will tell you were you ar...

Check this tutorial, the "de facto" guide around here for everything vlan:
viewtopic.php?t=143620

Part labeled: Access Point

Config perhaps ?
Most likely there is no input accept rule for your wireguard interface.

Problem is you're moving to another device and most likely also to another ROS version ? Copy-paste is the advised approach, carefully inspecting what's already there and what not. You can try to start with clean config on the new device and copy-paste the contents of rsc file in terminal but still ...

Much easier to follow the normal path

Maybe because of the special upgrade path because of change of wireless/ wave2 ?
Don't know. As said: I didn't try.

Best to use the approach I mentioned.
Then you are sure.

I am not 100% sure you can drop both when upgrading. Never tried.
But system / packages / upgrade will properly take care of it.

HOW did you do these upgrades ? Should be done using System / packages / upgrade (Winbox or CLI) Don't simply drop ROS package on files and reboot. If you used that approach, you should have dropped wireless as well. Every single legacy wifi device I upgraded past 7.12 towards 7.13.x, got the wirele...

Complicated ... if you want to use management VLAN (which indeed is recommended, make no mistake there), you should enable VLAN filtering on cap to make it airtight. But current implementation of wave2 capsman does not support dynamic vlan setup via datapath on a vlan enabled bridge, it can only wor...

And yet it is :D Pre-7.13 there is no need for wireless package on your devices. Legacy drivers are included in ROS. As of 7.13 this changes: wave2 is default present in ROS but not the complete package. Only basic support. What also changed with 7.13 is you can now have capsman controller for BOTH ...

If you use the normal upgrade proces (System / upgrade packages / Download and install) then 7.13 will "automagically" take care of required extra packages where needed (actually, the hooks are present in 7.12 since that's the one doing the download). It's even so that on some device NOT h...

I am assuming you see this on CSS610 running latest SWOS-Lite 2.18 ?

Issue has already been reported in that release thread.

And CAP upgrade would then still happen automatically.

Depends on how you set that parameter.
You can choose not to let it be handled automatically (I don't use automatic upgrade. _I_ will decide when an upgrade happens on my devices, nobody else).

You are correct (almost forgot about that one) but even then I prefer not to do this.

I keep my install files on a separate USB so I know what's going to be installed

Start reading help page with example. And since you did not specify the version ... as of 7.13 it's not needed to have wifi-qcom installed on capsman controller. https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPVLANconfigurationexample: PS side question: why capsman with only 1 cAP AX...

What is the result? The flagship ax3 has worse wi-fi than the older and cheaper ax2, right? I can only talk as a user having multiple AX2 and AX3 installed in various places and contexts but this is not true in my experience. AX3 IS better wifi wise then AX2. Where I used to live before, house with...

Well, I honestly rarely look at it so I can't really tell how it feels.
It is running since August last year with close to zero maintenance, apart from some version upgrades.

Maybe not sexy enough ?

Given cap AC only has 16Mb flash whereas hap AX/AX2/AX3 (which hap AX ??) have 128Mb, yeah, that's normal. But... large part of that "problem" is because starting 7.13 ROS-package became quite a bit heavier and a lot of those older devices only having 16Mb can get quite tight w.r.t. storag...

Best option for your requirements:
capsman and vlan.
You don't need a separate controller, one of the caps can do it easily.
Any other option will require you to make workaround after workaround on 3 different devices and maybe still have some loopholes in it.

No need to sugarcoat it any further.

Not 120 but more then 1

Please keep this forum topic strictly related to this particular RouterOS release.

Friendly reminder ...

Re wave2 capsman: be careful with that 00:00:00:00:00:00 wildcard.
Doesn't work there. Needs to be blank.

In this complete thread... where have you once showed your current and complete config ?
It was already asked in the first response you got.

I'm waiting for that option too.
Since I am not sure mANTBox ax 15s is the correct replacement for wAP.

So ... create a support ticket.

I seem to recall Normis once said poe out on ether1 was for powering isp gear.

And what's wrong with VPN, an overlay network and then Winbox in from wherever you are ? For my client I have 36 sites, all of them having at least 1 Tik device (mostly wifi-AP, some routers and switches). You really think I keep on each site a laptop OPEN for whenever it might be needed ?? 36 lapto...

I get the problem and it shouldn't happen but I'm stuck with something else.

Why would one keep Winbox open on a Windows computer for ... DAYS ??

It doesn't work in v7. The range of ports must be enclosed in quotes:
Code: Select all
port="33434-33534"

And your comment about ROS7 scripting is valid in a ROS6 thread because ... ???

Apples and oranges.

Using PCC you can combine both WAN-channels but it will not result in increased speed since every connection you start will have to go over one or the other. But if one goes down, the other will take the full load. I have an AC3 LTE running like that on a 'challenging' place (no decent ISP to be fou...

However your stated requirements are sub-optimal to get a decent response. Hence my remark: Cheapest options based on limited info: Almost forgot: And can you someone recommend me any wholesaler ... or any country in Europe where I can buy 40/50 pieces getic.com = Latvia dectdirect.nl = Netherlands...

Correct.
If using access rules, use 80 as limit.

A picture says more then a 1000 words... AX3: 1 as explained above, 2 others are in "office" setting (on a shelf), 1 is located on top of a network cabinet in the corner of warehouse to provide extra coverage for one specific area. AX Lite is located in office (mine when I'm there :lol: ) ...

One must then ask, though, what happens if you use the wall mount included with the hAP ax³ to stick it up near ceiling level? I have one running in a warehouse environment mounted on the ceiling because I needed one of the antennae to go through a wall for outside purpose covering an outside stora...

Cheapest options based on limited info: AX Lite - ARM32, 2.4GHz only but make no mistake, AX-2.4 can go up to 400Mbps. 4 ether ports. You'd be surprised what this little thing can do. AX2 or AX3 - ARM64, both dual band wifi and they have 5 ether ports. AX3 also has USB port for added storage or USB ...

I'm not seeing that.
Edge as browser on Win11.

O..K ...it took a LOT longer then 20 seconds (just left the window open while I was doing something else).
Now I see it as well.

I'm not seeing that.
Edge as browser on Win11.

Personal and practical experience having all 3:

cAP AX is better purely as AP if located correctly (due to its ceiling mount).
I'm not talking about tx/rx numbers, just how it behaves in live operation.

Adding... depending on your device you also need to install the proper package in order for its radio to function: - legacy wifi: add wireless package - arm-based ac device (most of them): wireless package for legacy wifi or wifi-qcom-ac for wave2 drivers - ax devices: wifi-qcom package for wave2 dr...

My input Netinstall does not run stable from windows, far from. At least not for me. I have a separate ( old) laptop running Linux just for that purpose. It does it rock solid. Why ? Because there is nothing on that machine messing with network settings like Windooos does. The container version pres...

In case of doubt, always create support request incl. supout.rif.

I have read somewhere on the forum reports that *for whatever reasons*: 1) Netinstall on Linux is mire reliable 2) adding a (dumb, common) switch between the PC and the device helps (possibly related to some form of timing problem) . My favorite is also Linux. I am keeping an over a decade old Dell...

You can run both versions of capsman on the same device as of ROS7.13. The only caveat is that if that controller device also has a local radio, it will loose that capability since you need to have legacy wireless package loaded as well for legacy capsman compatibility. If your L009 is the wifi vers...

Standard loopback interface.
It has always been there but was hidden in the past.

Recent versions of ROS made it visible.

Don't worry too much about it and just let it be

Also:
Are you sure your wifi is not using a channel which your client devices can not see ?
AX tend to favor the higher frequencies but quite a lot of devices are unable to use them.

On a serious note, that's quite true

I prefer my approach.
Not that much words.

You may want to stay on 7.12 or even ros6 for that device.

Ac works without any problems.

Leave it like it is please.
It works

Closest = CRS310-8G+2S+IN

Not fanless.
The correct switch chip
Enough 2.5G ports
Over 200USD.
Only SFP+
34W max

For the rest, one is allowed to dream...

You can best address your request to support@mikrotik.com

Yep, you can totally add a WiFi package to the L009UiGS-RM. Just double-check compatibility.

But you should NOT unless for legacy capsman.
There is no radio on that device and as indicated above, support for wave2 capsman is default present as of 7.13.

It's rather confusing to use the same names for your bridges (WHY MULTIPLE ??) as for some key-interface lists. WAN/ LAN I strongly advise to rename them. And only use 1 bridge. Probably this part is in error: /interface bridge port add bridge=LAN frame-types=admit-only-vlan-tagged interface="G...

802.11an = wifi4 ?

Can't test right now but normally it should be backwards compatible.
Anyhow, 5ghz-an is in the list of possible bands to be used.

Current (and likely future) devices already have more flash space... except for some pure switches, were it is not required so much. It might become a problem if you upgrade such switches from pre-7.13 and all of a sudden wireless package gets pushed in, totally unnecessary ! If your device is host...

Set up an EOIP tunnel using the 2 WG end point addresses.
Connect that EOIP tunnel on both ends to bridge.

Done.

My view:
like the real netinstall where you need to specify which version to use, I wouldn't automate it.
It's the user's responsibility to provide the correct version to be used.
Sometimes you may have to use other versions then latest, stable, latest testing, ...

Awesome !! Quick test from AX3 with container package and external USB to mAP Lite, it works ! 8) /container mounts add dst=/app/images name=images src=/usb1/images /container add envlist=NETINSTALL interface=veth1 logging=yes mounts=images root-dir=usb1/netinstall workdir=/app /container config set...

Currently none of the AX-devices support 160MHz wide channels.

As replacement for wap, probably not.

Should not be a problem given cap AX has much better wireless capabilities than wap.

If I go from ax3 to rb5009 using internal btest, I get 950Mbps. No VLAN there.
Cpu on RB around 50%.
And that's a bad setup since you should never test using the devices being tested.
So RB5009 is perfectly capable of handling that traffic.

One can say this is _A_ way to make very sure everything has to be done by CPU, I think. And then you come to the already indicated performance difference between CHR and RB5009 since you are totally missing out on any of the HW offloading possibilities. Yet you wonder why performance suffers ? Plea...

Now that's HOT reception

Surely must be a bug ... already check with 7.14 if the bug persists ?

I'll repeat what has already been said: So it would be necessary to see actual RB5009 communication to give you some better advice. Unless you show the config, everyone can guess and you will be on your own. Terminal: /export file=anynameyouwish Move file to PC Remove serial number and any sensitive...

Maybe because of this ?

Bonding is a technology that allows aggregation of multiple ethernet-like interfaces into a single virtual link, thus getting higher data rates and providing failover

https://help.mikrotik.com/docs/display/ROS/Bonding

i can take care of the winbox issue later.

Remove a port from bridge and only use it for winbox access.
Make sure it's not on an interface list which gets dropped by firewall.

Wrong procedure. On AX2/3 you don't have to do anything so remove wireless there. Leave wifi-qcom. On cap ac you need to remove package wireless and install wifi-qcom -ac . Then everything is wave2 capsman. Smaller then cap ac you're not going to find with wave2. Or stay with legacy wireless (cap mi...

Absolutely right.
200+ users for 1 AP is madness (or recipe for self-torture ? Some may like it ...).

No, you're not.
Cap AC can run wave2 drivers just fine since 7.13.

It actually makes that device (as an AP) a LOT better (but don't do anything else with it, limited storage etc etc).

Urban slang but the word does exist ... Google it.

I see something resembling an error but it doesn't really say so. Then I see version 7.5 (netinstall version used for this container ?) But nothing further. No waiting. Nada. Or is it waiting there ?? I will check futher later on. First some work to do :lol: /container envs add key=NETINSTALL_NPK na...

Follow up on this ... How to provide 2 npk files via environment variable ? Trying to netinstall mAP Lite (lab test) using container on AX3. routeros passes but how to get the required wireless package as well transferred ? Both files are present in images Simply adding both files with a space (ther...

I'm saying to first move to the latest stable (in terminology) version where a fix was present for RSTP. The symptoms do indicate in that direction. You could try to disable RSTP altogether. Most home networks should not have a problem with that. If you make a "short circuit" you will know...

Show your config, perhaps ?
Both routers.

viewtopic.php?t=203686#p1051720

There have been some RSTP related fixes in 7.14.
You might consider moving to that version.

The only sure way to get a clean install is ... netinstall.

It might be wiser to stay on 7.12.x for that device until they fix that space issue for 16Mb devices.
Otherwise you'd be constantly looking at the edge.

I seem to recall some reports in the past about 100% CPU usage during export on SMIPS devices ...

And if you use /export file=whateveryouwant ?

Instead of dumping on terminal, dump to file.
Does that go faster ? Does it finish ?

If you just let it be, does it finish ?

SOAP might be a more neutral term, so I read.*

*significant other acceptance parameters

Check 7.15beta release notes:

*) switch - added support for multiple ingress and egress port mirroring on 98DXxxxx switches

So it's coming.
Be advised not to use beta versions if this is a production device where you can not afford downtime.

Search found 5859 matches