MikroTik

kryztoval

I really do not know why I was expecting the router (any router, not mikrotik specifically) to be smarter. I thought, if I have a device that has 2 adapter with 2 different subnets and it can reach both without issues then, if I set it as the next hop from the default gateway it should be able to fi...

kryztoval

I think I see what I did wrong While I added 2 antennas to two different networks (192.168.1.0/24 and 192.168.2.0/24) and I linked them in such a way that one antenna has 192.168.x.21 and the other has 192.168.x.22, visible from both sides with their proper ip and all. When I tell the router that th...

kryztoval

I have a complicated setup, but the over simplification is this: I have 2 different subnets on 2 different places that are a mile appart. I have a stable wireguard connection (linking the main routers) between them and routing works. I can use this link and open winbox 3.x to any device on either su...

kryztoval

@optio no, id does not block the device from booting but the point being made by @wrkq was that since ID is generated upon first boot, and the disk is resized also upon first boot that there could be other automatic detections. I know that there are other detections, you have to have them in place i...

kryztoval

Those are the neighbors one of my CHRs can see, one of those has not been updated for a long time. > /ip/neighbor/print detail 0 interface=ether1 address=REDACTED address4=REDACTED mac-address=REDACTED identity="MikroTik" platform="MikroTik" version="7.15.3 (stable) 2024-07-...

kryztoval

When you purchase a CHR, you provide a password which MT then bakes into the image prior to sending you the file. OR All CHRs come with a random password, part of the purchase is a separate file containing password. This sounds ideal, and I wish I knew how to do this, because as far as I can tell w...

kryztoval

??? You dont deploy it ( connect to ISP ) until its setup. Tell me exactly how you can do that if you are setting it up in a VPS, remotely. You see the contradiction, right? Regardless, yeah, I would totally love for it to be disconnected until ready, or at least password secured with a random pass...

kryztoval

I just read this article bleepingcomputer.com/news/security/mikrotik-botnet-uses-misconfigured-spf-dns-records-to-spread-malware that goes at lenght to explain how Mikrotik routers configured as SOCKS4 Proxies were used in a botnet to attack misconfigured SPF Records to spread malware via spoofed em...

kryztoval

Don't ask me why, but I normally do not set an IP to the devices manually. Since you can connect to them via MAC using winbox and dhcp client works quite well. Or it used to. WinBox 4 refuses to connect to a device that has no IP assigned. If the device reports 0.0.0.0 and you try to connect to it v...

kryztoval

It seems that leaving the wireless channel on auto will make the device try to scan for the channels every 3 hours or so. And either that process kicks all the clients or it re-sets the same channel and it kicks all the clients. There is also another process that seem to be running every 40 hours (...

kryztoval

I am wondering why it keeps disconnecting every 3 hours give or take. I think I have a reason for this. I may be wrong, I am waiting on support to confirm this. It seems that leaving the wireless channel on auto will make the device try to scan for the channels every 3 hours or so. And either that ...

kryztoval

I will also chime in and mention we're also experiencing Wireless stability issues since upgrading CAPS to 7.15.3, up from 6.49.X [legacy??] routerOS.... Clients appears to be constantly connecting/disconnecting. We're going to try downgrading to 7.14.X build to see if alleviates. if not, we're rol...

kryztoval

I am also seeing a lot of disconnections between 2x C52iG-5HaxD2HaxD when using VPLS/MPLS tunnels while on 7.15.3 However 7.15.2 seemed to be a lot more stable. I am wondering why it keeps disconnecting every 3 hours give or take. 08-04 14:20:16 wireless,info MA:C0:0A:DD:RE:SS@wifi1: disconnected, ...

kryztoval

I try today v7.15 on 3 different 4011. VPLS vs 7.14 2216 doesn't go running. After dowgrade it to 7.14 interface goes up with no configuration change. Anyone noticed this issue? We had to disable MPLS on all our 2216 because of substantial packet drops on 7.14.3. The VPLS tunnels were running but u...

kryztoval

Me too. I also have a lot of issues connecting to AX wifi networks. I have a couple AX2 and a hAP AX and they can connect between each other with no issues, but any other brand or device will not connect to them at all. I do not know if it is a misconfiguration or something else. A little bit of cla...

kryztoval

I am happy to say that updating from version 7.14.2 to version 7.14.3 works OTA on the RB841-2nD which previously didn't let me perform this update without removing the wireless package. I do not know what you did to achieve this, but thank you! Sadly, I am still ending up with UPnP rules that I can...

kryztoval

Very strange but now I have a bunch of upnp dynamic rules that I can't get rid of. Normally I disable upnp and all the dynamic rules disappear. Not this time tho. I removed the interfaces from upnp and instead ended up with rules with "unkown" in interfaces. I do not remember seeng this be...

kryztoval

An almost clean and empty configuration RB941-2nD says that there is not enough space left on the device to update from 7.13 to 7.13.1 really bad for remote update since the only way to do an update would be to remove the wireless package, update, then reinstall new wireless package :( [admin@Mikrot...

kryztoval

I may be doing something wrong (configuration wise) but alas. This is my experience: I have a wifi link (ax, wifi6) between two AX3, and over this link I run a MPLS/VPLS link. The Wifi link is unstable - it sometimes freezes for no reason and does not reconnect unless something is done to it like sw...

kryztoval

Winbox Feature Request In Container when using copy put the "tag" value into the "remote-image" field. so you can effectively duplicate the entry when required. allow to use a log prefix to easily identify which container is actually reporting the thing to the long In IP / Firew...

kryztoval

Is it normal for Device -> RouterOS -> Route tab to have empty lines? I see this in all of my RouterOS devices https://i.imgur.com/5YMRDtG.png They all seem to be working correctly and connected with no issues. All other tabs show values correctly except for that one. https://i.imgur.com/VsOuDpo.png

kryztoval

Yes, best solution every time is to disable "detect internet", it provides no useful function. It is easy enough to maintain the WAN and LAN interface lists manually. Yeah, I am only using it because for some reason I can't make the router use a route with a distance higher than the main ...

kryztoval

Not discounting a potential service outage at Mirkotik, or bug here.... But once an interface is downgraded from Internet state, they don't go back until a reboot. Does a reboot get it back to the correct state? Perhaps a typo in your post, but it's port 3000 0 No it does not get back to correct st...

kryztoval

At some point about 3h30m ago the detect internet function in my mikrotik routers stopped adding interfaces to the internet interface list This happened to two devices in two different locations with 2 different isp connections. I can still connect to cloud.mikrotik.com on udp port 3000 using "...

kryztoval

I see my problem now... the chain is not suppossed to be "dnat" it is suppossed to be "dstnat"

kryztoval

I am not seeing any hits on the dst-nat rules. I thought dnat was the last part of the pre-routing filter and that it did not need any input filter (appart from the forward dstnat rule) I have a similar configuration in another router and it works, but on this one I can't seem to make it work. The c...

kryztoval

I was trying something out that made no sense. Basicly instead of having 1 single mikrotik device (ax2) I turned it into 3 - Router done by a 5009, ax ap by an ax2 and ac ap by an ac2. Since I did this the AX2 has not dropped the wifi, not even once. I was wondering if this was coincidental or not s...

kryztoval

I am seeing a lot of jitter in the connection now, my ping in games used to be less than 80ms but right now it is 3x the amount with this version. I think the only change was that I updated all mikrotik devices to 7.11 and it sure started happening after this update. I have a "complicated"...

kryztoval

Reviving an old thread because I just encountered this on a routeros device in dude as well. And it is puzzling to say the least. 14 years now and this bug is still very present.

kryztoval

I can confirm that the same configuration on 7.10 had a ping-under-load of around 20ms while the 7.11 with the exact same configuration has a ping-under-load of around 65ms This is also noticeable while keeping a flow of packets instead of a burst. Streaming video services would not trigger this as ...

kryztoval

I am seeing a lot of jitter in the connection now, my ping in games used to be less than 80ms but right now it is 3x the amount with this version. I think the only change was that I updated all mikrotik devices to 7.11 and it sure started happening after this update. I have a "complicated"...

kryztoval

@spippan I have no issues with the VPLS link reconnecting, my issue is that the wireless starts saying "SA Query timed out" And sure enough, it just happened on the new AP. But it fixed after disabling the wireless card for around 3 minutes. Sadly this level of inconsistent wireless availa...

kryztoval

I woke up today to find out that the MPLS/VPLS interface was down, checked the logs and it went down because wifiwave station reported "disconnceted, reason code 3, signal -51) and wifiwave ap reported "disconnected, association SA Query timed out) for about 31 minutes. The link stopped fl...

kryztoval

@pe1chl Well, sure, the fact that it happens over 2 mikrotik devices that are the only two connected to that wireless link as it is used as a bridge should help but, sadly, I can't reliably reproduce the error. @holvoetn Yeah, that could be the case, but this error (at least for me) shows up after a...

kryztoval

On this version I am still getting "Association SA Query timed out" after a few days of the device being online (Almost at 5d8h was the time it appeared) I refuse to restart the device because restarting it is not a viable solution or workaround for this issue, and since I am only using th...

kryztoval

Holvoetn I know it is a different driver, it was so in ac3 as well if you choose to upgrade it. The section is ”lost features” and the wording changes the setting name into a gerund, no wonder I didn't find it on a search, thank you very much Kanzler and Holvoetn, now I will watch out for changes li...

kryztoval

ignoring the fact that fine-tuning your mikrotik should yield a really nice speed you should be able to do this if your modem supports custom switching. If you can set your modem to be on a specific port and separated from the wifi and the lan ports then you can use a double wire setup to your mikro...

kryztoval

Is your cloude server also a mikrotik device? If not then you may have inadvertedly set the wrong values in the allowed IPS settings for the tunnel. Also if cloude is running windows it may have activated a kill switch where everything but the wireguard's traffic would be sent over the wireguard int...

kryztoval

True, they do document it. But it's fair point if someone used V6 before and "upgraded" to latest hardware... it would seem more like a bug... And the reading the docs doesn't exactly "solve" the underlying problem. Yes, this also applies if you used the AC2 or AC3 and just boug...

kryztoval

Do not support any 4MAC mode (WDS / bridge & Co.) Can you point me to the location of the document that countains this? Cause I did try support/docs and there were no references to bridge or 4mac on wifiwave2 in the 7.8 release I did read the 7.8 patch notes and I also found no information or t...

kryztoval

I am seeing something very odd I am using an AX2, I create a wifi configuration *in station mode*, basic stuff. I turn on the wifi and it connects. I create 2 dhcp clients one on each wifi link and both get an ip. no problems so far. Now comes the weird part: Create bridge1, add wifi1 as a port of t...

kryztoval

This is a defunct thread but since this shows up when searching in google for instructions to install mikrotik on contabo here is the information You can use a variation of the installation instructions https://wiki.mikrotik.com/wiki/Manual:CHR_Hetzner You go into contabo panel, run recovery on the ...

kryztoval

Well I guess my case is not so bad. I was told the RB5009UG+S+IN would arrive in Sep. 10th of 2023 if I ordered it today. so I ordered 2.
But the hAP ax3 was not available because it doesn't comply with country regulations here
hAP ax2 however was at twice the price with delivery date of July 1st

kryztoval

Anything that can be done to improve this situation in my specific area? For instance the only way I can even get a hap ax2 or hap ax3 is to buy it from aliexpress, which (if lucky) takes around 5 months to ship and costs 2 times the suggested price. However even one of the biggest importers in the ...

kryztoval

This used to be a really silly thing, but way back when Windows Server was a thing there used to be a thing called Microsoft Terminal Services Client (mstsc) which if you run right now from your computer will launch the remote desktop client. But here is the kicker, there was a Web implementation ma...

kryztoval

I was having issues with catching (and blocking) any device that tried to access manual set dns queries in my network. A home network, but I do not want devices to be going out the wrong path if they are inside my network. So I did 2 things, that may be a bit excessive for some people, but anyways.....

kryztoval

The problem is not as simple as it sounds. You would need to know all the domains/ips that youtube gets content from. Then you would have to add those to a list and mark this traffic to the right wan. In theory you would do that with Layer7 if youtube always used youtube* domains but I do not think ...

kryztoval

I think you are in a good spot to try the netinstall method
https://wiki.mikrotik.com/wiki/Manual:Netinstall

kryztoval

You have a couple of options. First try again with the MAC address of that device but use the ethernet port number 2 (the one next to wan if it has one), since this port is most likely able to accept winbox connections If that fails then you should try using the windows tool called "netinstall&...

kryztoval

It seems you have a bit of a confusion there. You can either have the ISP router open a port directly to the ip of the synology nas vpn (which I would not recommend as it would bypass the mikrotik and would act as a local network device instead of a router, and you would need to add forwarding betwe...

kryztoval

Is there a way to route the connections that are created by socks5 clients? I really want the socks5 clients to be NAT'ed to a wireguard interface but I can't find a way to do this so far.

Can I tag those? do they apply port based rules? how do I even look at those?

kryztoval

After a while this became surprisingly simple to execute. For anyone that encounters this in the future here is the solution I found For this I had to create the service in different IPs Q: How do I tell the main router to send requests for an ip:port to go thru a specific conneciton just like I do ...

kryztoval

@anav Wireguard is quite fun to use. I tested it behind two nats (double natted) and I had a thing i did not understand. I opened ports on both main routers that directed to the main wireguard peer behind the network. Whatever peer that initiated the connection would use a random port (I am guessing...

kryztoval

wow, you are correct. Blank does not mean allow all ipv4 and ipv6. it defaults to ipv6 and it results in error 161 as you showed Actually setting this to 0.0.0.0/0 will allow ipv4 to pass and the route to be able to send data over. Now I only need to find why it is not returning, but that is a diffe...

kryztoval

There are no non-mikrotik binaries involved, only legitimate SOCKS, L2TP and Scheduler configuration. As I got my first ever mikrotik device (a cute little R750Gr3) that I bought to serve as Multiwan Load Balancing and Fail over for my network I dared start fresh with no default settings. Just a be...

kryztoval

Technically you can't do this. You can't "route" between different ip addresses in the same subnet (or domain or whatever) If you have different subnets you can do a destination-nat where you substitute the address. since this is done in the firewall you keep total control on the packets t...

kryztoval

I normally try two things whenver I see this kind of flipping 1st and most infuriating one is to force the port to be a lower speed than rated (100mbps full duplex in my case) see if lower speeds helps. If it does then try forcing the speed instead of using autosensing for this port. 2nd either try ...

kryztoval

I have a multiwan setup with 2 wans in load balancing by using PCC (in two steps, tcp port 443 hashes on both addresses, everything else hashes on both addresses and ports) and a third wan acting as fail over in ip routing table main in case both of the main ones are not working. Route list has both...

Search found 58 matches