Beware of Change regarding BDPU and Bridge Mode! In the past, STP on Mikrotik was not behaving well with Cisco Switches an PVSTP and Vlans. The solution was to disable STP on the Mikrotik to make it a transparent switch. BDPU from one Cisco would be flooded throught the Microtik Bridge to the other ...

CRS210 Switch Menue broken via WebFIG? It looks like one the ACL and FDBs menues work after the upgrade. The ones regarding VLAN don't. Also IGMP snooping only seems to be active on vlan 0, not on all vlan in use. https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Hardware_Offloading Ok, ...

I wonder, as there are some hints about this in the release notes.

Is Bridge IGMP/MLD snooping when using VLAN working now?

It was broken until 7.15.1, especially when using IPv6, multicast packets got dropped by the bridge breaking RA and IPv6 autoconfiguration.

Capsman has many advantages like a centralised configuration point and hopefully with WifiWave2 sometime centralised key management to allow smoth roaming without re-keying. So I would not renounce to use Capsman if I would mix WifiWave2 with older AP. But ok, I give you some hints ;-) Basically you...

It looks like 7.12beta7 fixed the VXLAN WifiWave2 related crash.

I had the CCR1009 crash once with beta7, but that was probably my fault as inadvertently created a loop via VXLAN

Since it is running stable in the scenario which caused it to crash before.

I just read the release notes of 7.12beat7 where they 'increased stability for VXLAN on tile devices'.

Will test again if my kernel crashes were fixed by this.

Upgraded both sides to 7.12beta3 Kernel Crash still occures on the 'tile' CPU after some random time, usually within about 10 minutes, as soon as WiFiWave2 Interfaces become active on the bridge also containing a VXLAN interface. When I find time, I will try to terminate the VXLAN interface on a Mik...

I don't route VXLAN traffic over the air. My goal is to build something like CAP over a Layer3 Network, but without using capsman as I'm still on old Capsman as I only have one WiFiWave2 AP at the moment and all other ones are older. So it for sure is not a fragmentation issue on the air side. I mor...

Thanks for your reply VXLAN MTU is 1500. Without L2 LAN would not work ;-) I have updated the WifiWave2 side to 7.12beta3. Still same issue with 7.11 crashing some random time after a Client joins the WifiWave2 AP on the other side of the VXLAN Link. Will update the other side to 7.12beta3 too, as s...

Hi Gang Anyone else experiencing RouterOS Crash when Bridging a VXLAN Interface with a WifiWave2 Interface? Set-Up Side 1: CCR1009 PPPoE default route. RouterOS 7.11.0 multiple ethernet interfaces in 'bridge1'. VX-Lan interface (to Side 2) in 'bridge1' Multiple CAPS via CAPSMAN (not CapsMan2). Side ...

Hi Gang I am struggling with policy routing and I feel like something is not working as expected. To put it very simple, I want traffic from the Wireguard Server to ALWAYS be sent out a specific interface or even better would be, through the interface through which the incoming wireguard packet was ...

I guess I just figured it out. As mentioned, I use packet-marks for Queueing. I found out, that the mangle rules are run once for preroute and then again for forward, despite passthrou not being ticket. So I probably ended up with a packet mark on the packets I wanted a route mark. Now it sort of wo...

Hi Gang I have started using Wireguard Tunnels and they work nice. But I have come across an PMTU Discovery issue with unsymetric routing which I attempt to 'fix' by using policy routing. What I basically try to attempt is to send traffic back to the interface it came to, even if this is not where t...

Unfortunately not yet. But if you search the forum form "pimsm" you will find many issue mentioned with V7 and nobody confirming it works :-) Release Notes for 7.4rc seem to indicate a fix coming. A user wrote pimsm started to work on this version. But I an not going to test 7.4rc on my ma...

Update on my Issue. Downgraded the two hAP ac back to 7.2.3 (same Version as the CapsMan Manager on a CCR1009). Issue persists, attempted to boot the Samsung SM-X200 a couple of times. Still unable to connect to WiFi (neither to the WPA2 protected one, nor to my unencrypted Guest Network). Other dev...

I have a Samsung Tab A8 (SM-X200) which is unable to connect to WiFi since Update of my two 962UiGS-5HacT2HnT to 7.3.1. while it still can connect on other WiFi networks, so the tablet is not broken. Other devices still can connect to 7.3.1 CapsMan in use. Is there a known issue? Going to downgrade ...

After more try and error I sorted out what causes the kernel panic. By default, mikrotik assigns a Link-Local IPv6 Address to the Wireguard Server Interface. If you then assign a global IPv6 IP to that interface and a client is connecting the kernel panics and the Mikortik reboots. Simple solution: ...

Experiencing the exact same problem on my CCR-1009 (debian as client) and RouterOS 7.2.3 I also found the kernel crash only happens, if you assign a global IPv6 Address to the wireguard interface on the mikrotik. As soon as I remove the global IPv6 address the WG tunnel works but unfortunately only ...

[/quote] You need to add to your "going away on holiday" checklist, right after "cancel the milk", an entry saying "Disable ****ing script that updates my router without me there to test it". [/quote] Learning the hard way.... Post Mortem analysis: RouterBOOT booter 7.1...

Well of course this happens when I am away in holidays. I had an autoupdate script active. CCR1009 upgraded from 7.1.1. to 7.1.2 and my home hosted services were - offline. Tonight I am back from holidays and find the CCR1009 crashes and bootes while loading the kernel. Come on Microtik. You did tes...

Hi Gang Anyone else with those issues with Ros7? When I do a: /ipv6/route/print or /ip/route/print often I get no output and the whole router starts to behave strangely. I guess something crashes internally, but I get nothing in the logs. Same with /routing/route/print I also noticed, that my dynami...

Dear Community It looks as my previous post was lost then MikroTik had a server outage a couple of weeks ago. After upgrading from RouterOS 6 to RouterOS 7.1 my multicast PIM Routing config was gone. That part is all now, NP! But whatever I do when I try to add a BSR or PR candidate. I get presented...

Thank you for the replies. local-forwarding + client-to-client-forwarding was required to make minecraft work and clients to see each other when they are on the same CAP. 'local-forwarding' only helped if clients are on different CAP (which my kids figured out before me by playing near different AP ...

Hi Community As I have PPTP and L2TP incoming connections to which I assign ip addresses from LAN. I have enabled proxy-arp on the LAN bridge interface so they can communicate. I also use CAPSMAN and have roaming WLAN clients in the same LAN. DHCP Server is an ISC DHCP Server (because of vendor rela...

Dear Readers. As short warning, about tarpit rules. I have a /24 behind a Mikrotik. To block attacks. I monitor some ports that shall not be connected from outside, like 5061,445 and so on. If a source ip connects those ports 3 time in quick succession, I put them in an timed address list and then s...

Hello (RouterOS 6.49 Stable in use) I used to have a RB760 as a main Internet router and two Hac as Accesspoints. On the Accesspoints the WLAN interfaces were bridged to the LAN Interface. My kids (and some visitign neighbors kids) could play Minecraft LAN Games on their Tablets. No issues. I had to...