MikroTik

ormandj

Same with beta 9, getting SA query timeouts and roaming fails on a late model iPad Air and a laptop with an AX200 that worked and roamed with no problems on previous versions.The iPad started asking for the password again and it kept being rejected until I forgot the network, powered the iPad off a...

ormandj

16MB devices are obsolete, face the fact, time to upgrade.... This beta is a great example of what happens when a company cost-optimizes with narrow margins on storage; people can't test betas and are told to wait until RCs, which means the beta cycle will be less productive for MT since there will...

ormandj

Problem is: where do you define the bounds. Characters like / : \ can also cause trouble. People have used date/time as part of a filename and ran into "inexplicable problems". At least that does not happen anymore. please don't muddy the water. nobody is asking for / : \ we're asking for...

ormandj

As far as I know (and tested): There are 2 separate things (but somewhere they come together): 1- wireless config: can be applied at will as was the case with legacy capsman. Change settings, reprovision and done. 2- vlan stuff IF you require the local bridge to be VLAN aware (which will be the cas...

ormandj

Theoretically yes and with old capsman you could but AFAIK I have not yet seen it being done with wave2. Personal view: what's the underlying problem setting them static ? Capsman installations are rarely very dynamic. So set your interfaces static, configure your vlans and be happy about it. The d...

ormandj

You have to provision the wireless interfaces as static enabled, then you can add them to the bridge as required.

Is it not possible to do dynamic provisioning + vlan-filtering on the bridge? I would have expected Mikrotik to handle this scenario with the bridge association dynamically, as well.

ormandj

Is it possible to use the secondary ethernet port as an access port on a cap ax under capsman management with dynamic vlans? I've tried setting this up and every time I enable vlan-filtering on the bridge, the wireless clients no longer have the ability to successfully make DHCP requests/etc. /inter...

ormandj

[Edit: there was an issue with dhcp service that lead to my connectivity problems, it was unrelated to upgrade. just a race condition situation i was able to resolve through a modified configuration.]

ormandj

It would always be best to adhere to common hostname format standards as system identity translates to hostname of the device. Generically, using spaces in anything computing related is bad behavior MS enabled. Don’t use spaces in variables, names, or anything else along those lines and life gets a...

ormandj

Thank you for the reports, we are aware of the issue with virtual wifi interfaces and wrong country code being broadcasted, sorry for the inconvenience. 7.14beta6 received: *) wifi - fixed issue with setting country profile (introduced in v7.13.1); Are there plans to release a 7.13.2 with this soon...

ormandj

From the messaging we’ve seen on this forum and in notes, it sounds like ROS 7 was a massive shift for MikroTik away from a lot of custom engineered work so they could track upstream more closely. I suspect once they finish getting all of the table stakes stuff implemented and mostly bug free they w...

ormandj

The change to Latvia was only for DEFAULT country. If you manually have set the correct country, you should not be affected. Latvia is the same as any ETSI country. This is to avoid "default" config to break some rules out of the box. As everybody is reporting, we all have it configured, ...

ormandj

I have the same issue as everyone else, my configuration profiles specify "United States" as the country, but all of my SSIDs including the one on the master interface are apparently set to LV. Interestingly, in /interfaces/wifi/radios (I have capsman managed configuration) "current c...

ormandj

I’m using 7.x and the registration list is what I referenced in the first post as not containing the information I was asking about. Again, thank you for the suggestions.

ormandj

DUDE isn't an option (no Windows), but appreciate the tip!

ormandj

Is there a way to see what security protocol is being used by clients? /interface/wifi/registration-table/print detail does not show if clients are using WPA2 or WPA3 or something else. Additionally, is there a way to easily display what AP users are connected to (CAPsMAN managed WiFi), as well as I...

ormandj

How many of them? When I upgraded to 7.12.1 I have seen two such reboots within a week and made a SUP ticket, they recommended me to attach a terminal to the serial port (I have minicom running on a Linux machine) and capture the output. I tried attaching a terminal and capturing the output from th...

ormandj

On iOS 17 devices, established IKE2 peers will disconnect after 24 minutes of being connected. The disconnect happened after rekeying sent by the responder and then rejected by the initiator. ROS = 7.11.2, 7.12rc1 Responder PFS= none 14:13:28 ipsec --->IPSEC: -> ike2 request, exchange: CREATE_CHILD...

ormandj

We had DHCP issues from the 7.x series somewhere around 7.8 until 7.11.2, which has fixed it for all of our devices.

ormandj

7.11.2 finally fixed my Synology NAS's ability to get an IP via DHCP on a SFP link. It worked on Ethernet, but not via fiber. Link looked fine, Mikrotik saw the DHCP requests, but the Synology never was able to acquire an IP. 7.11.1 had the same problem, but after updating to .2, the issue is resolv...

ormandj

I've finally updated from 7.7 to 7.11rc1 & rc2, and while it looks like the openvpn problems have been fixed, I'm experiencing *lots* of sfp problems. A lot of sfp ports flapping that didn't happened neither with 7.7 nor with 6.xx versions. And since updating to rc2, the SFP interface with my D...

ormandj

Has anybody on 7.10 figured out the 'right' way to do this? The help documentation: https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-CAPsMAN-CAPVLANconfigurationexample: (anchor link isn't working, "CAPsMAN - CAP VLAN configuration example:" is what to look for) isn't very cl...

ormandj

Add me to the list of people waiting on this functionality. I was just trying to set this up today with an ax2 I purchased to extend a network for radio equipment and ran into this limitation; I did not want to deal with the complexity of another network, but here we are.

ormandj

Try disabling PCC balancing, and then a netinstall/basic config, and work your way back. Eventually you'll find out what's causing your problem.

ormandj

I have CCR2004-1G-12S+2XS v6.49.7 + stuff was here from FIBRANETPLUS (quoting moderator always gets mad when I quote more than a line of information) I have the same device with no issues with any of the sites you mentioned on 7.7. It is very likely to be some of your configuration and a change fro...

ormandj

This is exactly what Siri does. Often 1-10 minutes later it will work fine again. I hadn’t chalked it and the steaming issues/random dns issues when loading remote resources to an update since it’s so intermittent.

ormandj

We have tested "dig -t AAAA auth.split.io" type requests and can confirm, that replies have "Authority RRs: 0". However, that is the exact same behaviour in v7.6 and v7.7rc. Can anyone confirm that the services which are not working properly with 7.7rc are indeed working with v7...

ormandj

When adding new or opening an existing DHCP Server in Webfig, "DHCP Option Set" will get pre-filled to one of those you have configured. Even on an existing DHCP server, it will pre-fill one of your options. If you click "OK" without deselecting it, you will end up with a configu...

ormandj

I have found the bug after exporting the config of RB5009 and checking the settings for all 3 peers.Each time I tried to create the last peer, the one for the Android phone, I always click apply before ok. This activates the field endpoint adddress for the peer and of course each time I left this b...

ormandj

I'm sure you discussing exploiting something that was unpatched that you did not report for your own personal gain helped motivate the change. I'm baffled how you still don't seem to understand how negative this is.

ormandj

matcher with option 93 works if value is HEX to catch arch uefi64: value = 0x0007 for example, i can assign specific pool to uefi64 clients (with option 93 = 0x0007) and its works as expected. but assigning specific option set to this matcher (with specific bootfile name) has no effect. [admin@Mikr...

ormandj

Has anybody gotten HTTP Boot working with the Mikrotik DHCP server? I've got UEFI 2.5+ clients which support HTTP Boot natively, and I'd prefer to use it over the traditional TFTP method, but I'm not seeing an obvious way to enable this in the Mikrotik DHCP service. The documentation and forum searc...

ormandj

† *) radius - require "policy" policy for "login" service configuration; Nooo.... 😥😥😥 Unfortunately you have noticed it... I have always used it to scale permissions and become an administrator even in RouterBOARD which I did not have administrative access... Now than the pandor...

ormandj

*) interface - fixed default interface naming on RB1100x2; As you seem to be working on PowerPC platform devices, could you please show some ROS 7 -love to trusty old RB1200 (RouterBOARD 1200)? RB1200 installs and boots 7.4.1 and 7.5rc1 just fine, but ethernet ports 1-8 do not have any IP connectiv...

ormandj

This is welcome as I seem to suffer from these a bit (still didn't pinpoint exact reason and patiently testing while checking version, firmware, uptime etc..) However, this made me look on specs (which say it is single-core device) and compare that with my switches (which say it has two cores in 7....

ormandj

So stuff that was inside a release candidate is withdrawn. Mikrotik is totally bonkers!!!! Some of us have CRS328s with flapping SFP+s impacting connectivity for 6+ months, or are impacted by other major issues fixed in this release. Waiting for a stable release for container support indefinitely u...

ormandj

fs.com sfpplus modules still don't work stable in ccr2004 & ccr2116 and randomly loose their link on boot.

Make sure to submit a ticket for this, with a supout.

ormandj

*) switch - disabled second CPU core for CRS328-24P-4S+ device in order to improve SFP+ link stability; So ... any more details around this? Is this an interim fix or rather permanent? And how does it affect performance? I can say it has "fixed" the port flapping issue I've had since 7.x ...

ormandj

i also have RB4011iGS+, CRS328-24P-4S+Cloud Router Switch, CRS112-8P-4S-IN Cloud Router Switch, hEXs RB760iGS, hEX PoE RB960PGS from 7.2.3 to 7.3 is still reporting ports flaps and all of these are work as bridge only but also RB5009UG reporting ports flaps and it's connected with ISP and all other...

ormandj

Might be a Google thing. I seem too recall an announcement from Google you can not use simple authentication anymore as of end of May. Needs to be an app password (or something like that, can't verify right now) But this morning it worked perfectly, it was when updating all my computers from 7.2.1 ...

ormandj

Sounds like it might be a nice fix then; perhaps a hardware issue that can’t be resolved hence just disabling the core. I was able to trigger the flaps with NAND activity, so this may be for the best.

ormandj

" *) switch - disabled second CPU core for CRS328-24P-4S+ device in order to improve SFP+ link stability;" This one may finally resolve my issues with the CRS328 - but I have a question - is this expected to cause any issues re: performance? Was the second core not operational in v6? The s...

ormandj

*) ssh - added AES-GCM cipher support;
*) ssh - removed DSA public key authentication support;
Let's hope this is a preparation to get ed25519 keys in...

Seeing movement on ciphers in SSH gets me excited. ed25519 would be wonderful.

ormandj

FWIW, Mikrotik was able to reproduce my issue (interface flapping on CRS328s, especially with NAND activity) so hopefully they can find the root cause and we'll see a fix. It's still there in 7.2.3.

ormandj

Exciting times for v7. Devs have fixed some haunting/lingering bugs which means focus will gradually shift to more exciting and long-requested features going forward. I'm still seeing port flapping on NAND activity with a CRS328. My support ticket has gone unanswered since Dec: SUP-68278. Hopefully...

ormandj

There is no way to know how it is designed, and conjecture doesn’t get us any closer to a fix. There have been occasional descriptions by MikroTik employees of what has changed in BGP operation, and we can see what is going on in the routing table (filtered routes now appear in the table). I am pos...

ormandj

If they designed it without communication between the peer-processes and the filter process(es) then I can understand why it wouldn't work. But that would be a strange way of designing it. The filter process gets the remote peer ip etc also so it's not that it just sees routes flying in without kno...

ormandj

@mrz SUP-68278 Has been unanswered since December. You mention focusing on real issues and not cosmetics and I and others have massive port flapping issues on CRS328 series switches that seem to be associated with NAND writes that started with the very first 7.x updates and have persisted through a...

ormandj

Yes, changes that are introduced in rc1 and fixed in rc2, will not be mentioned in 7.2, because the changelog is comparison between last 7.1 release. People who are staying on "stable" branch would not have seeen any such issues, they were not affected. I am still seeing SFP+ port flappin...

ormandj

CRS328-24P-4S+ still has SFP+ ports flapping when set at 10G. SUP-68278 in from last year about this with 7.x...

ormandj

Make sure you don't have graphing writing to disk, and also make sure you don't have DHCP writing leases to disk. This was the problem I ran into re: port flapping on CRS328. As soon as I'd do something like a backup save, I'd see ports flap, which is what lead me to discover this behavior. Definite...

ormandj

@raimondsp: Will this fix the port flapping issue (which appears on flash writes) on CRS328 series switches, mentioned in various reports/on these forums, such as mine: SUP-68278 ?

ormandj

I've been trying to narrow down my issues with port flapping on a CRS328-24P-4S+, and I've discovered that write activity seems to trigger it. When I set graphing to write to disk at 5 minute intervals, I see port flapping at 5 minute intervals. If I do a backup, I see port flaps right as the backup...

ormandj

I'm curious if there is any information out there that I may have missed. My network is currently largely 10gig SFP+ based but I am considering moving to 25/100gig. I feel like in 2022 I don't want to invest in a dying standard in 40gig SFP+ The CRS354-48G-4S+2Q+RM would be absolutely perfect for m...

ormandj

Is anybody else now seeing port flapping on regular ethernet ports on CRS328-24P-4S+? Before I was seeing every 5-minute flaps on SFP+s at 10G, now I am seeing flaps on all ports (moving from 7.1.3 to 7.1.5). The frequency is less, but the impact is wider. Screen Shot 2022-03-28 at 07.08.03.png With...

ormandj

Update on the link flapping: I still see it every once in a while at 10G with the SFP+s on my CCR2004 and CRS328, but it’s significantly less frequent.

EDIT: Now all ports are flapping after a few days. This is actually even worse than it was before with just SFP+s flapping.

ormandj

I went from 7.1.3 to 7.1.5 and it appears this might have finally fixed all of my 10G SFP+ interfaces flapping on my CRS328-24P-4S+. I haven't seen a port flap in 1+ hours (used to be every 5 minutes). I'll keep monitoring and report back tomorrow, but this is fairly amazing news, if it remains res...

ormandj

The problem with the irregulary broken fiber connections with 10GB is still present in 7.2RC4. I´ve updated yesterday all my MikroTik Devices from 6.48.6 over 6.49.4, 7.1.3 (via upgrade) to 7.2RC4. (RB5009, CRS326-24S+2Q+, CRS328-24P-4S+, RB4011, CRS32624G2S+, 5x CAP AC). After the update the fiber...

ormandj

Unfortunately, all of the SFP+ ports are still flapping in 7.1.x for me, even with 7.1.3, on a CRS328-24P-4S+. I'm having the same problem. Have two CRS328-24P-4S+ in a very low network usage warehouse area. After upgrade last night to 7.1.3 things were bad. SFPs reported link downs and throughput ...

ormandj

exports are mostly useless because they don't include certificates, um db, ssh keys, etc. which could easily be done by converting them into base64 and also storing them in the rsc/text file. binary backups are (currently) also useless, because they store the entire database, and at the time of tak...

ormandj

@strods @emils

Screen Shot 2022-02-22 at 08.01.47.png

The initial report (not in screenshot) has all of the details of my configuration to include model numbers of device(s) and SFP+s, as well as a full history of the issue.

SUP-68278

ormandj

Kindis, eworm, timnis - currently we have not managed to reproduce such an issue, however, we are trying to gather information in order to find a root cause of the problem. Most likely the issue is related to the version from which the router is upgraded, not the version to which it is upgraded; ma...

ormandj

Unfortunately, all of the SFP+ ports are still flapping in 7.1.x for me, even with 7.1.3, on a CRS328-24P-4S+. Forcing the interfaces to 1G fixes the problem, but then I lose 10G. It happens at regular 5 minute intervals , which is extremely suspicious. Yes, it indicates that you are probably runni...

ormandj

Unfortunately, all of the SFP+ ports are still flapping in 7.1.x for me, even with 7.1.3, on a CRS328-24P-4S+. Forcing the interfaces to 1G fixes the problem, but then I lose 10G. It happens at regular 5 minute intervals , which is extremely suspicious. Screen Shot 2022-02-21 at 12.39.22.png There h...

ormandj

In one of my setups I upgraded from latest 6 to 7.1.2 and I had many issues. The setup was running fine for 6+ months. Lots of ping timeouts (50% sometimes). The main router is a CCR2004-1G-12S+2XS and the switches are CRS328-24P-4S+ After trying to figure out what was wrong it was finally solved w...

ormandj

I had the common issue where router board firmware update required a hard power cycle, after which point, the device booted normally, with the upgraded firmware, on a CRS328-24P-4S+. Also, I can confirm, the SFP+ NIC flapping is still occurring on 7.1.2. I didn't see release notes about it, but I s...

ormandj

I had the common issue where router board firmware update required a hard power cycle, after which point, the device booted normally, with the upgraded firmware, on a CRS328-24P-4S+. Also, I can confirm, the SFP+ NIC flapping is still occurring on 7.1.2. I didn't see release notes about it, but I su...

ormandj

Does 7.2RC3 address SFP+ issues such as those called out in SUP-68278 which cause SFP+ links at 10G to flap every 5 minutes or so? This showed up in 7.1, and the only current solution is to force interfaces to 1G, which is obviously non-ideal. I can’t even get a response to the support ticket after ...

ormandj

Lots of us are having problems with SFP/SFP+s in 7.x. Mine have link failures every 5 minutes (10G SMF fs.com parts) that can only be rectified by running them forced at 1G. I’m hoping the next release(s) resolve this; if you look in the announcement thread for 7.1.1 and 7.2rc1 you’ll see there are ...

ormandj

I have two CRS328-24P-4S+ and both are randomly losing links on SFP+ (different modules .. fibre, dac and 10gbase-t. On one of the switches fibre and 10gbase-t always losing its connection at the exact same time) with 7.1.1. I had to go back to 6.49.2. I have the same problems. SUP-68278 is there i...

ormandj

Quick overview 7.2rc1: (ac2, comparison on the same hw with v6!) 1. Drastic speed drop (200m optics drop to 120m), cpu does not show load 2. Instability (every now and then (say every 10 minutes) the connection drops by a few seconds) 3.Netflow does not work The same symptoms are on 7.1.1. version....

ormandj

I still have a problem with SFP+ port negotiation on RB5009UG+S+IN with AOC-STGN-I2S(X520-DA2). Need more information, please open a support ticket and send a supout.rif file. Also specify what kind of SFP modules are you using. openvpn notworking in v7.2rc1 Need more information, please open a sup...

ormandj

This version broke communication between a crs318 and a crs317 with a SFP+ 10Gbase-T adapters (same adapter type on both ends). It works fine with 7.1 and 7.1.1. Ditto, killed all my Fiber Mall SFP-10G-T-CI-80m units. Works on 7.1.1. I've been having problems since 7.1 with link flapping and SM SFP...

ormandj

Is anybody else seeing their link dropping with SFP+ interfaces on a CRS328-24P-4S+? Every SFP+ I have is showing link down/up events sporadically. These did not occur prior to update. I cleaned/reinstalled SFPs, but the behavior is the same. FS SFP-10GLR-31 for the SFP+s. Screen Shot 2021-12-08 at ...

ormandj

NTP webfig UI seems broken, it doesn't display servers, and edits are not applied. 7.1/CCR2004

The release also still says "testing", I assume since it was not rebuilt.

ormandj

+1, IPv6 is a must for my deployments.

ormandj

The obvious answer is just buy a Mikrotik branded SFP as previously suggested, the S-RJ01, then there will be no question about compatibility. That said, FS has the SFP-GB-GE-T which worked fine on my CRS2004. (I buy the Generic model, which is part #34976). Just call them or chat with them online a...

Search found 77 matches