MikroTik

E50UG = Hex Refresh.
Comes with ROS 7 out of factory.

No way to go back to ROS6 on this one.

Speed over powerline is usually not the best you can have, but recent devices are actually quite fast. The only real problem I have personally encountered using powerline adapters is when there is also a solar convertor system on the same phase. The block wave harmonics used to create AC-sine wave ...

Make sure to create a bug report with support or it probably never be fixed.

2 concrete walls over 3 meters ? That's a wifi killer ... forget about using wireless backhaul too then. It will not be reliable enough. If cable is not an option, already considered PLC devices (powerline) to act as network cable ? Only possible if both sides are on the same phase of your power net...

In order of asking: 1- Yes but see further down 2- Yes and also here with a twist 3- Because default it is not present on Hex Refresh Now the long story :lol: Somewhere early ROS7 Mikrotik made Wave2 drivers for their AX-line of devices. Those were to be loaded as a separate package since legacy wir...

Best approach: create a ticket and please let us know the response.
I doubt us simple users are going to be able to answer that one

As a router, ISP should be on ether1 since normally that port is not to be HW offloaded. Unless you have an ISP connection going way above 500Mbs or so... As a switch, you need to see what you want to connect to that port then. Preferably something with low traffic needs. Reset: When accessing the d...

Look at the block diagram and then you should see what the potential issue is with port1.

It's not connected to switch chip, only to CPU.
Depending on your config and how you use that port, it may or may not become a bottleneck.

Wave2 does not exist in ROS V6.
So there's your answer.

As a pure switch, I think the original RB750Gr3 is better than the hEX refresh. On the other hand, if it is being used as a router with one port connected to the internet source and the other 4 ports as a switch for the LAN side, then the hEX refresh may be better. If you are going to use the hEX r...

It might even be simply the best option to start with netinstall.
So you´re sure nothing is left behind eating precious space.

Check power supply.
See if you can use another one with the required range for RB5009 (24V-57V).
You can also try PoE In as power source.

AC2: as indicated flash space on that device is limited, only 16Mb. ROS7 + wifiwave2 drivers really pushes it to the limit up to the point where you can not even do simple things anymore, not even upgrade. Netinstall should always be possible. UNII-3: higher channels are not available for quite a bi...

Don't use AC2 with wave 2 drivers unless you want to risk having to netinstall each new version. Flash space on that device is really too tight. +1 on using 5GHz radios, much easier for planning your channels though you may want to stay away from UNII-3 bands since there are still a lot of client de...

Additional thing to take into account
S+RJ10 can not be controlled which speed it uses.
It adapts to what's on the other side.

So if there is something advertising 10gbps on the other end, it will also use 10 gbps.
And then it gets hot...

Repeat

Rule #4 applies...

Thread moved...

This might be a dumb question, but do you mean that I would configure the switch in the AP as described earlier, and modify the routing to use VLAN10 as WAN and VLAN20 as LAN instead of the physical interfaces that came with the default config? I'm new with Mikrotik products, so I'm not familiar wi...

How can you eat an apple but keep it intact ? You can not. I disagree, a whale can swallow it whole....... and then regurgitate it back whole. I would think a whale eating an apple is really close to shore and will most likely end up being grounded :lol: My underlying meaning with my response was t...

I use a similar setup at home with RB5009 exposing via trunk some ports further down on L009 directly to WAN side of things (mainly for IPSEC connection to Azure and testing stuff). Just look at it as another managed switch. Define VLAN-WAN, setup your router functions on that interface instead of t...

Starting 802.11n multiple chains can be used on the same radio.
Look at it as parallel connections.
More chains = more throughput.

Using wider bandwidth will also yield more throughput (if air spectrum is not too polluted).

Block diagram clearly shows those chains.

2025-04-18_13-28-48.png

How can you eat an apple but keep it intact ?

You can not.

Thanks for the replies. I did manage to activate the wifi interface and set a MAC addess+IP binding in the Huawei router. Apparently the RouterOS version I upgraded to doesn't come with the wireless drivers, so I had to download the 'wifi-qcom' package and upload it with Netinstall. At least that's...

It has two chains, and thus thought the default would include wifi1 andw ifi2 so at least the op could provide coverage for two freqs.....oh well.

Nope.
Only 2.4Ghz radio so only wifi1. 2 chains does not mean 2 radios.

Looks like a quickset problem.
When changing to dual AP, did you start again from default config ?
Quickset is typically only to be used ONCE after default config, then never again (until starting again from def config).

That's not going to happen, I would think.

MT Team doesn't read all posts here nor do they reveal their HW road map.

So either ask sales (who will most likely not respond since you are not a distributor, I think ?) or support (who will not respond either since it's not a problem).

No time right now but you really should search this forum yourself.
This has been discussed several times not too long ago.

Did you also change using device mode setting for routerboard to yes ??
I assume you did but since you did not mention it, I'm just checking.

Logically it should have been changed before you can do other routerboard changes.

Couple of comments from my side (maybe repeat but that's what you get when doing 3 to 4 things in parallel when replying ...) 1- your device is a CRS354 which means it is at first a SWITCH (a big one), not a router. You can use it as a router but performance will suffer. 2- most of your config also ...

Day before yesterday we finalized an install in a shop which is being completely restyled. I had 3 wap AX foreseen there as APs. The technician commented he liked the cap AC form factor we used in some other shops a lot more since it is much more discrete (I always change the round case for the squa...

Hello, I have the same issue with the RB760iGS (Hex S). After updating to version 7.18.2, I get a kernel failure, kernel panic, and the router continuously reboots. I tried downgrading to versions 7.15.2 and 7.16.2; the kernel failure no longer persists, but 1-2 times a week, the router freezes and...

Check with support again. They should be able to tell you when the corrected version will be available or they can put it themselves on your device (you may have to give them remote access to that device). Or they should provide a workaround for your setup circumventing this problem. Crazy this is a...

In my view ?
Generally yes.
I will make an exception for additional switch ports on a router or access point

Mikrotik doesn't make a habit out of announcing their roadmap. You simply have to wait and see what comes. Currently what you are looking for, does not exist in 1 single device. As for adding wifi to RB5009, I hope they never do that. Let a router be a router, let an access point be an access point....

What does /interface wifi print show ?

Both on capsman controller and cap device using that 5GHz configuration.

Forgot
That map I mentioned, also runs wireguard to central rb5009 and eoip on top for romon.
Works just fine.

I have mAP Lite lying right next to me running ROS 7.17.1 just fine.
It has about 3.5Mb free storage.

I have a mAP2nd (same platform as mAP Lite) running with a customer as main router (small shop) with IPSEC to Azure.
Also running 7.17.1, no problems.

2 other things to check, added to my previous post.

It still is possible your ISP is blocking things but ICMP would be strange.
Can you use incoming connections on that device using that public IP ?

If you are behind CGNAT, that's a logical consequence. What are the first 2 octets of your supposedly public IP ? If 100.64.x.y to 100.127.x.y, bingo. Also check WAN IP as reported by your device and whatsmyip.com. If values differ, you are most likely behind CGNAT as well. Use from terminal on that...

I have once again log full or red "cache full, not storing" DNS Adlist related messages. My cache size is raised to 8192 KiB and Adlist size was something over the 2000 KiB. I definitely removed the functionality from the router. Ok but why do you use such a tiny amount of storage for the...

It's just a theoretical question, for Capsman v2 It's AFAIK for the theoretical case someone wants to use several bridges on such a cap device, to choose which bridge to use for capsman controlled interfaces (but I wonder: why would you use multiple bridges on CAP, especially if you can use VLAN ??...

Main site Mikrotik, tab Support - contact support
Register and create a ticket.

Guntis, with all due respect but this has been reported already some times by users in various release threads. I know it should not be needed but from what I can read, it is done by most using capsman because one can otherwise not be sure the config has been changed. I'm happy to provide you supout...

Just leave it like it is, come back when you see the need.

Hoping for the best.

Or in Winbox, go to Wifi , then Radios or Remote Cap tab.
Select line(s) which you want to handle and hit the button Provision.

@mkx, I applaud your patience here ... 2. It's my experience as well that some changes in configuration on CAPsMAN don't get applied to CAP. My way forward is to remove the dynamic entry for that particular remote radio in wifi/ ... CAP gets reprovisioned with new settings imediately afterwards. Acc...

No again. This is not the official Mikrotik website. This is a user forum (hosted by Mikrotik). THIS is the official Mikrotik website: https://mikrotik.com/ There is a tab Support on top And then you can see a HUGE button labeled "Contact Support" You have to create an account and then you...

He doesn't know either, does he ? To give you some context: this is a user forum about users helping other users. If someone sees this post and knows about it, I'm sure they will come in and share their findings. But if not, you really need to ask support. Mikrotik staff does frequent this place fro...

"Searched and thou shall finded"

https://help.mikrotik.com/docs/spaces/R ... eripherals

Did any of you 2 bother to create a support ticket so they can look into it ?
If not, it can be a long wait ...

To be honest, I never had the problems with wifi like some others (at least not in the amount some reported).
Even on AX3 I could easily work all day long with a connection to Azure Remote Desktop (which is VERY picky about disconnects etc).

Reading ... oh man ... what are the YT, TT and other platforms for? "Do not want to read!, I WANT TO WATCH AND LISTEN TO!" I truly and profoundly HATE youtube instruction videos. Total waste of time in most cases. I can read faster then they can explain it in a video. Even in English. And...

Hello just wanted to share I’m limited to 200-300 Mbps on Ether1 vs Ether 2-5 (switch chip) when using the port as a WAN interface. I can confirm I have the same issue on TWO separate E50UG. And if you had a 3th, 4th, ... they will all display the same behavior. Logical. They are the same design, e...

Make sure you stay in IPSec HW accel land. AX Lite doesnt support that: https://help.mikrotik.com/docs/spaces/ROS/pages/11993097/IPsec#IPsec-Hardwareacceleration Oh, but it does already for quite a while. Since 7.10beta5. I even tested it (AX Lite towards RB5009). https://forum.mikrotik.com/viewtop...

Security setting is not tied to master interface.
Can be different on each slave interface.

I have IOT ssids not using wpa3 whereas the master ssid does.

And yet I have a wAP AC running 7.18.1 without any problems, incl. wave2 drivers.
Only 300K left on storage but it hasn't experienced unexpected reboots yet.

I retyped the RoMon secrets in the devices in case that's it, but still missing some devices. Since I'm running Winbox64 v4 I thought it might be a bug, but V3 shows them missing as well. What connections or devices are between the ones you do see and the ones you don't ? Most likely there is somet...

Use ROMON. But I think you are mixing 2 things together here. How I understand it all works: In Winbox those Neighbors are not ROMON discoveries. Winbox Neighbors uses Cisco Discovery Protocol so you might even see devices there which are not Mikrotik. Or they are Mikrotik but not ROS, like SWOS dev...

If you hover over it, what does it say ?

A quick search here tells me it has always been there for ups and it probably means nothing.
viewtopic.php?p=604798#p604798

You simply don't combine a 24 port switch with wireless.
... 24-port switches are never on those spots.

Exactly.
And usually mounted in a nice rack too, oh yeah, made of metal. Bye bye wireless signal ...

Adding: The only thing which you can opt to retain when doing reset are user accounts. All the rest is gone. You have 3 reset options by selecting/unselecting some of the options (unless I missed something): - no config -> clean sheet, nothing in it, not even a bridge - default config -> =factory re...

Did you ?

If several are reporting it but nobody reports it to support...

Nope.
Reset is reset
Also vlan config.

Reset to caps mode.
Apply vlan settings for mgmt vlan.

That's the order

What will happen with 16MB devices? It's very hard to install updates. This means is the end of these devices?
No as they released new devices with 16MB
And the 5 year claim still applies, no?

Which would mean they will have to do something about current bloating of ROS base package.

And you updated how ?? Most likely not the correct way. The name already hints at it ... this is an AX device. You need wifi-qcom package, not wireless. And yes, interfaces will then be wifi1 and wifi2. Setup of those interfaces will also be a bit different then what you used to know with old wifi. ...

Personally, given the setup is to be managed remotely, I would not use passthrough mode. But that's me.
Factory reset etc to get updates done .. ??

I never had a problem using SXT in normal router mode. And I could update ROS and/or modem FW even from 930km away.

Also take into account a single true 1Gb network connection typically only goes to about 950Mbps. Never 1000 and certainly not 1024 Mbps.

Add this: /interface list member add interface=pppoe-out1 list=WAN And change this /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" \ ipsec-policy=out,none out-interface-list=WAN to-addresses=82.*.*.57 back to /ip firewall nat add action=masquerade chain=sr...

Without seeing full config, hard to tell.
Some might have some guesses but it is a lot more efficient with config available.

I believe there is a slight misconception here in your thinking that allocated memory should be freed directly when you stop watching movies. That's generally not how an OS works. The OS needs to make sure unallocated memory is made available when someone else needs it. If that doesn't happen, then ...

I'm maybe not following ... I have for years used SXT LTE with wireguard to my home network (it was the main reason why I upgraded that SXT to ROS7 at that time, to be able to use wireguard). You just need on one end a public reachable IP address. It doesn't even have to be static (but it makes it e...

Create a backup before doing Netinstall. Yes, Backup , not Export. Best to upload it to Mikrotik cloud. In case something goes wrong - you can restore fast and with ease. I do understand why but be aware when you restore that backup, you will simply bring the problems back. Hence my focus on NOT us...

Why apply a beta version on your main router ?
If you can not afford the downtime, don't use beta/rc versions.

I guess one way to make it better is to use wireless-qcom instead of wireless-qcom-ac (I only care about wpa3, wireless-qcom-ac doesn't give me that much of a speed boost (which I don't need anyway)). This will not work. wifi-QCOM is only for AX devices. Any tips? Thank you Netinstall. Sometimes pi...

Something doesn't add up here. You can not get 1Gb over wifi on AX3 ? I can (almost) on wAP AX but that one is able to use 160MHz wide channels which AX3 can not do (80MHz max). Are you sure the frequency which has been selected after upgrading to 7.18.1 is usable by all your computers and it is int...

You configured old capsman on rb4011 while cap is ax device so it needs wave2 capsman.
Remove that config and start again under wifi menu.

As it turns out, the size of wifi-qcom-ac is shown as 2680 kb, even larger than the 1924 kb the wireless package takes up today. What would be helpful is if I could ditch the wireless package completely if that is not required on my CRS for CAPsMAN with cAP AC units. As indicated before, you can. ....

First step: apply 7.18.1 on that device.

When issue still occurs, export config for review.

Quite well possible.
Easiest solution would be wireguard, it's the fastest option.

DDNS is possible using Mikrotik's Cloud services but when using Wireguard, you only need 1 side to have a fixed IP.

It's in the documentation I referred to if one is willing to read. I use it quite often myself. Simply check which AP you need to have. Go in to it using Winbox (IP or MAC). Toggle all LEDS on/off. No need to make it more complex. If you really want, use a script to do this during some minutes with ...

More important question to ask: are all clients you plan to connect to those APs able to use full potential of 6E or 7 ?
Is your backbone network able to handle it ?
if not, why bother ?

Sure.
On the device itself you can control the leds.

https://help.mikrotik.com/docs/spaces/R ... 92859/LEDs

And this is where you really shine ...

Hmmm .. all those LTE/5G devices have eSIM, I see ..

Just saying:
Also don't forget to completely clear firewall connections table when messing with firewall rules.
Or reboot.
Otherwise it can take a bit of time before the changes get applied.

But I trust you already know this

Well there is your problem, using capsman LOL. Its not even a wifi device........... geesh seems like holvoe has infected everyone with his love for capsman. ;-) Tss tss tss ... Hex Refresh (and even original Hex) is perfect for capsman controller function. As you should very well know, even a mAP ...

I think even Winbox is fetching from "crafted" url: https://download.mikrotik.com/routeros/<version>/CHANGELOG It actually is. Good find !! https://download.mikrotik.com/routeros/7.18.1/CHANGELOG What's new in 7.18.1 (2025-Feb-28 13:31): *) bridge - improved stability in case of configura...

Sorry but did you look into that thread ?
The exact commands to implement it are there.

On Mikrotik you can also simply stop the service or VPN interface or ... whatever is applicable. For IPSEC, once you disable peer and then kill all active connections, it's done. For Wireguard, disable peer or interface and done. If I look at that thread: - create routing table - create firewall man...

Not a stupid question at all. My (high-level and first impression) view: With old capsman and capsman forwarding, this was to be applied on the controller since all AP traffic passes there. When capsman forwarding is not used (not available for new capsman), it needs to be done on each individual AP...

Is there an autosupout.rif file available you can retrieve ?
If so, get it off that device and make ticket to support sending the file with it.

Netinstall will be the next step then...

I don't use it myself but I read left and right you need to implement a killswitch mechanism via mangle rules when using IPSEC as VPN.

See here for an example
viewtopic.php?t=182042

As requested
What other packages ?
Any partitions ?

Old problem without fix for the moment. It only seems to happen with certain brands of USB sticks (and I believe Sandisk was one of them). The current workaround is to have a script which runs at reboot which switches USB power off for some seconds (5 to 10) and then enable it again. After that it s...

Take a look at Hex Refresh.
And let it handle VPN too.

Main problem is that your device only has 16Mb of storage. So you need to choose: uninstall packages and move their function elsewhere or face the consequences of low memory. There is no other sure way to free up memory. Netinstall might help clearing out possible leftovers from previous config (pro...

Other questions: why do you have VLAN filtering activate on bridge but no further VLAN config on that device ? When you see the poor performance on your PC, can you run /tools/profile - all to see if one or all cores are at maximum performance ? Also, how do you define "poor performance" ?...

My personal view: Depends on the attitude that person presents when asking and how he/she is asking it. You can find plenty of examples here where total noobs literally have been taken by the hand step by step to learn how to do something. And yes, some members can be very harsh with their responses...

If all ports at once go down to 10Mb ?
Doesn't sound like a cable problem then.

Unless we are missing some info...

Are you sure the used cable between PC and switch is at least CAT6 ? Can you try another one ? What port do you use for connecting your PC ? Which one goes towards you ISP modem ? Have you also tried to manually set the port on the switch connecting to your PC to 2.5Gbps ? What does that give ? Some...

In that case, see if you can create supout.rif (or of reboot happens, autosupout.rif should be there) and create ticket to support.

First 11 words of my previous response already answered that as well as responses from others.
No need to ask the same thing again.

No, it doesn't since you're still asking it questions to get the config right for that device (which NONE of MT devices can do reliably). Can someone please confirm that I need DPI capable router because from what I understand DPI is NOT required for the split tunneling configuration that I require...

Good thing you already found out about VLAN1 :lol: The basis vlan bible around here can be found here (go to section router/switch, forget about wireless in your case): https://forum.mikrotik.com/viewtopic.php?t=143620 Read and digest. Apply. In case of problems, post your config between code quotes...

With the help of others here (you know who you are), claude.ai, a little test lab, and herculean efforts (to overcome my substantial learning disorder :D ), I am progressing nicely in my learning. Which some time ago I asked you about (and again, it was and still is a genuine honest question) and y...

As it happened to be I used CoPilot today to get some user info with specific parameters out of an Active Directory environment. But it had some flaws which I was easily able to correct, because I know my basics. Funny you mention GPS ... there are parts in the world where GPS doesn't work. You woul...

That's one way to think about it but I think it misses how human progress has always worked. Throughout history, our greatest strength has been our ability to create and use tools that extend our capabilities. The people who thrive aren't those who refuse to use new tools they're the ones who learn...

Surely AI will tell him that ... :shock: It probably will and its response would be more helpful than yours. :) No, it doesn't since you're still asking it questions to get the config right for that device (which NONE of MT devices can do reliably). Sometimes you have to THINK on your own. Try it, ...

Surely AI will tell him that ...

Something which hasn't been updated since 2021 ?
Why would you do that ??

Consider Zerotier or Wireguard.
Both are available for ROS.

Thread closed.

partitions: no Should be yes if you want to repartition. /partitions does not allow to change count of partitions. If your router is unable to boot, it will still be able to boot into your other partitions. No restriction for crash recovery. See Help pages: https://help.mikrotik.com/docs/spaces/ROS...

At the least the color is wrong for informative text. It shouldn't be red. For the rest, it is what it is. I would have found it more useful if one could select partially WHAT info was displayed in that line. The fact all my caps-interfaces are connected via a certain VLAN using a certain AP is of n...

How do you "repartition" before a Netinstall? I just tried on an old RB device:

Screenshot 2025-03-04 at 20.06.56.png

As message indicates: you first have to enable this in device mode.

It's even mentioned in release notes for 7.17 (but who reads those uh ?

)

*) wifi - add information to each interface, showing which CAPsMAN manages it or which CAP hosts it when applicable;

Are you sure ALL ports scale down to 10Mb ?
If you add Rate column in interface/ethernet view, you can see them at a glance.

Now that's odd, since this device (L009) has 128Mb of storage so it should not be affected by that size problem. In Files you don't see everything which takes up space. Also check System / packages to see if maybe you loaded lots of packages which might not be needed ? For that device you need at mi...

But it is a step forward ! :D On AP device, you can directly apply all settings on local radio. With capsman, there is no local radio. So then you move at least one tab to the right, using configuration (or down for those using Winbox4). Personally, I always use channel, security, datapath and steer...

It might help to specify the model of device you are using ? Only ARM doesn't tell us enough. If your device is a model with only 16Mb of flash storage, your problem might already be there. No sense to downgrade winbox if the problem is caused by your device simply running out of storage. Netinstall...

I know. I have it at home with 3 APs (sometimes 4 when I power on that wAP AX on the porch). But for me that's more for testing/learning. And about your remark regarding qcom-ac: not when VLANs are involved (or at least not for beginners) :D But still ... in the spirit of learn to walk first, it doe...

<sigh> Why use Quickset when you want CAPS mode and capsman setup ? Who asked you to use Quickset ? Nobody here, I guess. Excuse me for saying but it is quite clear you don't understand yet (that will come with time, hopefully) how all pieces fall together so why do you keep picking things left and ...

... and with a Wi-Fi 6 network adapter, 2.4GHz AX can reach this speed. .

Up to 400Mb even. Really.
(tested with AX Lite connected as station to AX3)

You really should be using winbox...

What's the benefit of using LTS but having bug fixes in later versions ?

@holvoetn - thanks a lot for your post! 1- remove ether1 from bridge. Add it to WAN list. Add DHCP client to ether1. That should be it. Ether1 should be a WAN port now. It would be very nice if you let me know how to do that step by step (or command by command) In sequence: /interface bridge port r...

First things first ... Mikrotik does have a quite steep learning curve. Nobody should tell you otherwise, it is what it is. Once you get how it works, the things you can do with it are tremendous. I have the exact same device in my backpack and I already used it on a lot of occasions for varying set...

Pff ... glad I left that 1% option open

Thanks for the correction, guys.

Most likely (almost 100% certain) something wrong in your firewall (maybe other settings but I would look at firewall first) but since you do not show anything, it becomes a small problem for anyone to help.

You say the routes and settings are all correct yet things don't work. Strange, no ? So something must be wrong then ... no other option. But since you do not show anything related to those routes / settings / config nor explain how you connect, from what device, to what device, ... how can anyone h...

Sxt LTE usually means CGNAT.
So you can not connect TO it.

But the device can go out. So you need some externally accessible device to act as pivot point.

Then when the connection has been made, you can use the tunnel to get back to that SXT.

Hooks are present in ROS7 but the required chip in ax lite lte most likely not.
Unless it can be done 100% in SW ?

That's certainly possible.

Also, lots of IoT devices don't want to connect to network with WPA3 as option, even if WPA2 can be used as well.

I am not seeing a glaring error on wifi part except I don't see a country setting ?

Where is dhcp server for lan ?
Where are ip settings for bridge ?
Dns ?

Obviously, yes.

Wifi interfaces will only show as running when something is connected.

Since you do not show the relevant parts of config it's a guessing game.
Please provide export of wifi part of config.

Moved.

Not sure which example you used for your config but you are making things mighty complicated putting everything together learning capsman and then putting VLAN into the mix as well. You combine now a full VLAN aware switch with a caps device in pure caps mode, that will not work as expected. And I w...

Not sure but looking at Help pages I see normally you have to explicitly specify hw offload on that bonding port when you add it to bridge. So this (and other bonding ports) add bridge=bridge comment="DIRECT - to storage" interface=ether_17_18 pvid=50 might have to be changed to add bridge...

Settings for wave2 radios can be set on multiple places.
Priority is left to right on winbox 3, top down on winbox4.

It also helps for roaming between 2.4 and 5GHz if SSIDs are the same.

Oh yeah, plenty of times.
Most of the times the reason I see is frequency setting or client incompatible with the auto- selected frequency.

Hence why I suggest to set frequency manually.
Then you know where it is supposed to be.

Upgrade of CAPs via Capsman / upgrade, I get this error message in log on wAP AX. Another wAP AX upgraded just fine, so did AX Lite and AX2. 0x17e0d0 manual upgrade request failed, no file (zerotier-7.19beta2-arm.npk) There was no zerotier present on that wAP to begin with, so why should it be there...

I just switch from Winbox 3 to winbox 4, and have a strange symptom...each window I open within WinBox is no longer resizeable! There is a <> icon in the top right of each window which switches between default/maximize, but I am unable to drag a corner of a window to resize. Is this a bug? Or is th...

That's because exit point of your WG port is already AFTER the firewall which ( hopefully) is located right after that public IP. When using WG, you already passed it. And probably you allowed all traffic coming in via that interface. Your WG interface is your secret backdoor. You do not do that whe...

Tip: add a piece of tape on the back side of that SIM with some length to spare to ease extraction.
It will help to accommodate for inevitable size tolerances due to temperature variations.

PS looks like your "other" problem is fixed after reading the good'ol help pages;)

This is going to be interesting...

ghk84
Especially for you Quickset exists.
Do it 3 times.

What frequency is being used for 5GHz ?

AX devices tend to favor UNII-3 part of spectrum but quite a lot of client devices can not handle it.

Set frequency manually so you know where it should be.

I know but you can never precisely calculate the effect.
Only a range with estimates.

Seen enough results of temperature testing back in the time I used to work for a multinational telco equipment manufacturer.

That was not your initial question in your first post. You asked why they have different specs. This is another one, this is if it can work in a temperature slightly higher then specified. Considering safety margins usually applied when determining such limits, it will most likely simply work just f...

Nobody has a crystal ball so we can't tell what future brings.

Currently you can limit memory on generic level.
And that's it.

Because your laptop is a lot faster ? Ping from my laptop over wifi to main router: never more then 5ms. Ping from Samsung S20 over wifi to same router (using same AP): usually between 5ms - 10ms but sometimes going to 180ms. What's actually the problem ? If you want lowest ping times as possible, u...

10 to 30ms over wifi is not that strange.

Check if there is no interference on the frequency you use for wifi.
It should be as clear as possible, no overlaps with other access points either.

/ip smb set enabled=no

But if that's not what you want, have you already checked from an external device if those shares are still visible ?
It's not because they show locally, they are being published.

You are not the first one to mention the exact same problem.
viewtopic.php?p=1129441#p1129441

The error message clearly shows where the problem is: line 3, position 61
Put quotes around file name

file="backup1-gw.rsc"

Basis steps: - use Winbox for access since it allows MAC access if you mess up IP settings - remove all firewall rules on filter and NAT tabs (this will prevent your lockout already) - all ports to bridge except ether2 - IP address of device connected to bridge (don't forget route settings then!) or...

You said wAP first and now it's cap AC ? :lol: Basic concept first: a switch is a switch. Not a capsman controller. Doesn't mean you can not use it as one (and ROS will happily let you) but it doesn't mean it has the required resources to handle whatever you throw at it. That's the admin's responsib...

On that CRS you do not create any interface since, as you already mention, it doesn't have a radio. But you do have to create master configurations and slave configurations. Which then are applied when provisioning to your CAP device. I still think this is a rather good instruction set to follow (CL...

Common problem for device with only 16Mb of storage. Forum (especially release threads) are swamped with it. And with 7.18 it even becomes worse... What wAP devices are they ? Legacy wireless (in which case you do need wireless on CRS to act as controller) or AX (in which case you do NOT need wirele...

Address ranges only work when you set the cap device itself to search for controller using IP address. If you let them find controller on their own, it will be using MAC. And then those address ranges will not work. Personally I always use MAC address to provision. Then I am sure about the radio as ...

Then how does it explain this works ? It already worked on Feb 2nd 2038 (with clock being as it is at that moment). set expires="2038-02-02 02:07:59" numbers=0 #works set expires="2038-02-02 02:08:59" numbers=0 # doesnt work If I wait a few minutes then `set expires="2038-02...

I understand completely. Just wanted to point out there doesn't have to be a conflict from a personnel point of view. Obviously other resources (like funding) can of course have an impact as well. Since at its core Mikrotik is into networking, I can only assume (and that's an assumption from my side...

Good catch !
Already calculated the number of seconds between "now" and the date where it doesn't work ?

Have you also tried leaving that parameter blank ?
I mean, what's the practical difference between indefinitely and somewhere in 2038 ?

No it does not IMHO.

Different type of developers so there should be no conflict.

What device will you be using to run capsman controller ? Basically what needs to be done (fine tuning possible afterwards): - setup capsman controller - reset cap device to caps mode - done Instruction examples: https://help.mikrotik.com/docs/spaces/ROS/pages/1409149/AP+Controller+CAPsMAN#APControl...

The only ones able to answer that right now, work for Mikrotik.
Best to ask support.

7.18rc2 doesn't fix the problem either

Look 3 posts up.
It was already said it doesn't work with 7.18.

So 7.18.1 or 7.19beta ...

If 7.18 doesn't work, 7.18rc2 (which comes before 7.18) will also not work.
Sometimes people have to read before posting ...

Caps-man menu is legacy wireless.
Not applicable to ax devices.

Obviously you did not create configuration then.
Retrace your steps.
Put on subtitles and stop video on each step, closely watching what shows on the screen.

Adlist? Standard ROS.

https://help.mikrotik.com/docs/spaces/R ... DNS-Adlist

Heat dissipation of Wifi chips doesn't count ? (RB4011 has 2 different ones, one for each radio)
It needs to go somewhere ...

On L009 thermal management is done completely different (and only 1 wifi radio), hence most likely the same values for Wifi and non-wifi version.

Small comment: on Chateau LTE12 it shows two times "FAST AND RESPONSIVE LTE
CATEGORY 12 MODEM". I guess something else needed to be put there ?

And it has been corrected already

Simular to "Dude edition" I guess ? Rose package will be installed by default out of the box.

Look 3 posts up.
It was already said it doesn't work with 7.18.

So 7.18.1 or 7.19beta ...

There should be an autosupout.rif after reboot.
Best to create ticket to support and include that file.

Small comment: on Chateau LTE12 it shows two times "FAST AND RESPONSIVE LTE
CATEGORY 12 MODEM". I guess something else needed to be put there ?

Maybe you need to install the appropriate "external" package wifi-qcom-ac. Starting from 7.13.x it is a separate package: https://forum.mikrotik.com/viewtopic.php?t=202578 https://forum.mikrotik.com/viewtopic.php?t=202423 As indicated, Metal 52ac is a MIPSBE device so you can not install ...

When you look at GUI for Wifi settings it's rather logical:
In Winbox 3 you have the tabs from left to right.
That's their priority, from left to right.

In Winbox4 / Webfig sections are ordered vertically, similar logic applies there.
Top down priority.

Not even on Windows auto update is a good idea.
And we all trust Microsoft dearly, don't we

You're doing it wrong. He mentions APPLY configuration to current wifi interfaces. Not "create new". Step 4 - in the Wifi - Wifi tab, apply the same preset profile to your current Wifi interfaces. So double click those interfaces, make sure they are enabled, then move down to configuration...

Yep.
That's what I would try first.

Downgrade
I wouldn't do that.
Sooner or later you have to upgrade and then you may run into problems.

Just add wireless package to SXT and see how it goes.
You can deal with wave2 drivers later.

Oh yeah, had that once too on SXT LTE device ...
Easy fix with some tape.

I saw in your other thread you intent to use this device as capsman controller ?
Then you may (or may not) need to have wireless package installed.

Capsman is tied to wireless/wifi version. So you do not need to upgrade cap ac. BUT ... now you mention it. Since ROS 7.13 it will be required on the controller to have wireless package installed or there will be no capsman controller. What you can also do: Upgrade those cap AC to wave2 drivers usin...

But ... if you say in the FIELD channel it says unkown, you have another problem.

Can you export config ?

Wifi settings, Channel tab
There you can find the field to set frequency.

2025-02-25_17-38-26.jpg

OK, clear.

I used to have SXT LTE as capsman controller with cap Mini and Cap AC, and Kid Control, and Wireguard, and traffic accounting, ....
Worked just fine.

So the problem appears to be your config with the 2 switches... Can you already export your config and post it here ? From terminal: /export file=anynameyouwish Move file to PC, remove all sensitive info (serial number, WAN IP, any passwd, provate keys, ...) Then paste back between [ code] [/ code] ...

Good questions. 1- shouldn't be a problem on itself. STP gets recalculated all the time with adding and removing of devices, no ? 2- true but now we're already far from normal use. Besides in most cases I encountered, it's the MAC address of client being used ? Not the one from the connected port. I...

Your 100Mb limit does not come from fasttrack being active or not. Even without fastrack, that router should be able to use the full ISP connection. If that ISP connection is what they claim it is ... Please try with PC connected to the bridge connected to WAN. Or maybe even directly connected to IS...

Be aware AX device tend to favor higher frequency ranges by default which not all consumer devices can use. When you are in the settings for that 5GHz radio, go to tab channel and set frequency manually to the desired value. RouterOS has a very steep learning curve (and don't let anyone tell you oth...

Theoretical answer: You can copy paste via CLI. Using Winbox capsman menu is under wireless but using CLI it's the same. Practical question: why do you move capsman to a device which has less processing power and less memory then Hex S ? Or is this duplication to another place using SXT R as modem/r...

Why do you have wireless and user-manager on there ?
First one should not be needed (there is no wifi radio on that device, unless I am mistaking) ?
Second one, do you really need it ?

If they are not needed, remove those packages and reboot.
Then see what LTE does.

Depends ... as of 7.13: If you use capsman in ROS7 with legacy/old wireless, no big difference expect it will be found in another part of the menu (wireless / capsman). If using wifi/wave2 drivers, a bit different but conceptually still the same. You still define channels, security, .. make a config...

Can you in parallel also check your cables ? From PC to router and from router to WAN ?

Are the ports where they are connected reporting Gb connection (1Gbps) or Fast Ethernet (=100Mbps) ?

To be honest, I am not really seeing the issue with bridge MAC address changing because of config changes with respect to attached ports ? As long as it is unique (which is the case for any normal physical port), what's the possible problem ? Maybe this needs to be clarified first before diving into...

And again you did not answer all questions :lol: What do you get when you connect a PC using ethernet cable to your router ? If possible, try to test connections from both bridges, that allows to see where the problem appears. If both give more or less the same result, then we need to look in detail...

English is not the problem (I'm not a native English speaking person either. My mother tongue is Dutch, I also speak French). But I do use proper punctuation and sentences. Makes it a LOT easier for others to read the info 8) You still have not really responded to the question: how do you know you o...

And I just found out that field is missing from Winbox. Only accessible via CLI.

Maybe I missed something somewhere but it looks like configuration.installation parameter (to set indoor/outdoor) is missing from Winbox for Wifi part.
Verified both Winbox3 and winbox4.
It is there in CLI.
It still shows in documentation so it should be there ?

At first glance it looks to me you did not add those wifi interfaces to bridge. Also, your definition of the wifi interfaces themselves looks odd. You need to create a master interface for 2GHz and 5GHz. All the rest should be a slave to one of those 2 (you attach them specifying which radio will be...

Could it be because it's a pure outdoor device ? Have you set configuration.installation=outdoor ?

Maybe best to direct your question to support.
They should be able to tell the reason or confirm if it is a bug for that device.

Search found 7667 matches