MikroTik

dfdf

At least Windows 7 and earlier incompatible.

dfdf

there is at least an ovpn server configured. /interface ovpn-server server set auth=sha1,md5 you're wrong, it's not about any vpn config at all. and this is the only string concerning vpn slightly with no consequences. I did review my config before posting it. Idea to file a bug report is known, no...

dfdf

Looks like your device does more as you described.

Nope, just a few rules, see attached conf. And than why downgrading to 7.14.3 solves the issue?

dfdf

Observing strange behavior on CRS328-24P-4S+ running ROS (not SWOS) 7.15.3. Device configured as a switch (by nature of configuration, despite running ROS - intention is to use scripts later). All ports are in one bridge, no routing, no vlans, just a few fw rules to prevent port scanning. After abou...

dfdf

Hello! had exactly the same problem. I was able to solve it by flashing the CaP AC point using the netinstall utility to firmware 7.14.2. https://wiki.mikrotik.com/wiki/Manual:Netinstall THANX A LOT! I confirm, NETINSTALL solved the issue with 'failed to set country' error. Performed netinstall wit...

dfdf

Okay, than is there any way to upgrade factory firmware? And is there any way to find out current rooterboot version?

dfdf

Can someone pls confirm latest FACTORY firmware for HAP AC2? I have performed factory upgrade as described in https://help.mikrotik.com/docs/display/ROS/RouterBOARD#RouterBOARD-UpgradingRouterBOOT AND I CAN enable protected bootloader via system/routerboard/settings/set protected-routerboot=enabled ...

dfdf

there is no example accessing value by -> without quotation for key names. It's not obvious at all. The words "Key name in the array" are suitable for either case - whether in the declaration of the array, or in any other place where this key can be used. However, my initial idea was that...

dfdf

u don't need to adhere docs because "it works" now, but don't complain if script breaks silently after a ROS release. well, it doesn't work as documented just now already, so until Mikrotik will decide to completely redo parsing engine, all such "requirements" sounds at least fu...

dfdf

...Without a practical example... [admin@] > :set $"var" ([:if ($"var1"=1) do={ ("one") } else={ ("not one") }]->1); put $"var" not one [admin@] > :local "func" do={ :put $1}; [$"func" ([:if ($"var"=1) do={ ("one&q...

dfdf

will stop working without notice Correct. No guarantee. As usual with ROS (see tons of posts on this forum about bugs not being fixed for ages, as well as new features brakes old scripts). So a matter of a lottery - I had to rewrite all my scripts after 7.10 release - rextended, so being totally no...

dfdf

Don't you know that after :set you shouldn't put $??? thanx, I'll correct this, but I do remember I've seen this marked as a mistake without $, maybe long ago or in another case. UPD: no, I will not change anything , found the reason to use my variant with set: :set t "test"; :put "t...

dfdf

you did a really shitty job

and you do really a shitty comments, as usual, nothing changes, but you're not a king of hill here. just a man who wrote a bunch of scripts, no more.

dfdf

must be

no, just "can be". It's a point of style and choice, no more.

dfdf

This script is intended to download graphing results produced by router (Tools-Graphing). It downloads results to a writable location (for ex. - attached USB drive) from either local (itself) or remote mikrotik. HTML files are than rebased to allow local navigation. Feel free to test/discuss/etc. Sy...

dfdf

viewtopic.php?p=1037863#p1037863

dfdf

old topic, but for someone who will search for a solution in the future: you should append zero symbol (" \00 ") to the end of the string to prevent .txt extension addition examples: :local $"myFileNameWithMyExtension" "myFile.anyext"; usage: /file print file=($"my...

dfdf

yuo have to: mark both output and prepouting use routing tables for marks also exclude ipsec from fasttrack /ip firewall mangle add action=mark-connection chain=forward comment="mark ipsec connections to exclude them from fasttrack" ipsec-policy=out,ipsec new-connection-mark=ipsec /ip fire...

dfdf

that's emotional reply with no meaningful explanation. Please avoid wording "bullshit" and so. The question is NOT NONSENSE, it's the attempt to understand, but not to listen to things like your last post. Don't want to explain - your right, but leave your emotions aside this place please,...

dfdf

ok, but how will You explain this: :put [:typeof []] nil If we have launched a simple script with :delay 60s Not working (while above script is running): /system script job print where $"script"=[] :put [:len [/system script job find where $"script"!=[]]] 0

dfdf

Well, to be short, /system script job print as-value detail return array of values where all nil values are converted to nothing... Not obvious, but thanx for clearing this out. PS. print as-value result is NOT printed on terminal... only if used with :put [/system script job print as-value detail]

dfdf

Tested on ROS 7.8: trying to filter out script jobs with /system/script/job/print where script!="" gives unexpected results... Expected (ok): [admin@df.router] > :foreach "i" in=([/system script job print as-value detail]) do={ :put [:typeof ($"i"->"script")] ...

dfdf

What you expect?

I expect getting error message clearly identifying the cause of failure, but not silent terminal session disconnection...

dfdf

I observed the following regression in ROS 7.8 (after upgrade from 7.7): If i have an IPSec peer address written in FQDN format (instead of IP) AND have a static DNS FWD entry for that FQDN (pointed to DNS server REACHABLE WITHOUT IPSec tunnel) after RESTART router will not establish ipsec tunnel un...

dfdf

Looks like you have some subnet mask issues. That 172.16.0.0/12 looks suspicious. Check all your routes and IP addresses. Nothing suspicious -- I want routing between multiple offices, each office has 172.16.0.0-172.31.0.0/24 subnet, dfl-870 is in central office and routes interoffices traffic, so ...

dfdf

Hello friends! My 5 cents to old problem regarding ICMP Redirects and Mikrotik devices. Consider the scheme on the 1st picture. By default Mikrotik has 'Send ICMP redirects' enabled (and this is ok for routers). I have an IPSec tunnel between two offices and a web camera (*nix device) on the remote ...

dfdf

viewtopic.php?p=987695#p987695

dfdf

Concerning this (unfortunately locked) topic: https://forum.mikrotik.com/viewtopic.php?t=145000 I was able to solve ROMON issue described in above mentioned topic by comment from AndreyRa on UBNT forum: https://community.ui.com/questions/ES-24-250W-and-Mikrotik-RoMON-failure/0b963b54-d77b-44dc-aec3-...

dfdf

Tested on ROS 7.7: having flash full with previous backups, didn't mention 0% free space, issued: /export file=cfg.rsc result is terminal window disconnected status instead of report smth. like "disk full" error message. Is this behavior intended ? Various devices exhibits this behavior, t...

dfdf

I know about semicolons. that's doesn't matter, i prefer C-like style writing. Routerboard info is above in my initial post, but this behavior is observed on different devices. I was finding a way to have a global function with generated name (stored in variable). Smth. alike (not working): :local f...

dfdf

I was testing some script to allow variable function name. And suddenly found very confusing result for this short script. Tested on ROS 6.49 and 7.6. Can someone explain how it works? :local cookie "someName"; :local cookieCode do={ :put "TestIt"; /system routerboard print; }; [...

dfdf

I have the same problem with RDP on Windows Server 2012 R2. I managed to force the end the cyclic disconnection by reducing the MTU from 1500 to 1492. I reported a problem with version 7.x and RDP to technical support. I think he doesn't believe me, than this problem exist. Also write to them, if t...

dfdf

:local "stat_period" (5*60); :local "traffic"; :local "tx-packets-per-second"; :local "rx-packets-per-second"; :local "packet_tx_drops_rate"; :local "packet_rx_drops_rate"; #:local "packet_tx_errors_rate"; #:local "packet_rx...

dfdf

Hello, I'm having issue with ROS 7.6 regarding to /system routerboard usb power-reset duration=9999d In ROS 6 I was able to issue /system routerboard usb power-reset duration=9999d /system routerboard usb power-reset duration=0 and didn't get any error, but in ROS 7 if I do the same, I'm getting &qu...

dfdf

There's more elegant way to sort array using built-in mikrotik array sorting in case of key-value array. This https://forum.mikrotik.com/viewtopic.php?f=9&t=178532#p879931 hack is nice, but we can achieve same result without global tmpsortlist. Tested on ROS 6 & 7. My hack idea is in this li...

dfdf

Well, to satisfy mobile app without messing up interface lists the best config is, as I understand:

> /interface/detect-internet/ print
detect-interface-list: WAN
lan-interface-list: none
wan-interface-list: none
internet-interface-list: none

dfdf

I suppose it's possible by means of measurements of /interface/monitor-traffic interface=wan do=route.to.link2.script the script is not trivial at all, meaning all current connections must persist, and new connections should be made over link2. This can be achieved by routing marks (not script) in f...

dfdf

Try clearing the cache before you login using the Tools->Clear Cache option.

Didn't help as expected, due to to completely unrelated to problem described.

dfdf

Can't you do: /ip/firewall/filter/add action=accept chain=input dst-port=8291 protocol=tcp src-address-list=your-address-list ? I can. I will. Moreover, I have to (or it will not work at all if router has firewall rules enabled). But this MEANS I also need to allow service from everywhere -- not th...

dfdf

Having "detect internet state" window open in winbox after reboot turns into two windows "Detect internet". See attachments.

dfdf

I have a long-lasting issue with "Detect internet" status. It doesn't work after reboot, until I change and revert (even without pressing 'apply' button) any of lists in "Detect internet" dialog box. After this manipulation "Detect internet" status works fine until next...

dfdf

I can have address list filled dynamically by dns name resolution and use this list in firewall rules. But currently I don't have ability to limit ip service (such as winbox or ssh) to be available only to dns name -- only to IP address/IP subnet. So suppose I have a dynamic IP for place I want to c...

dfdf

After upgrade to 7.2.3 getting "cpu not running on default frequency" on RBD52G-5HacD2HnD (hap ac2).
Bug?

dfdf

check-gateway is unrelated to unreachable as it's a method to check reachability, not a result of checking. will try to use "/ip route print where inactive and !disabled"... still not sure this will cover all possible states and is equivalent to "unreachable" Please explain you ...

dfdf

Maybe you can work around it by using: where check-gateway and inactive check-gateway is unrelated to unreachable as it's a method to check reachability, not a result of checking. will try to use "/ip route print where inactive and !disabled"... still not sure this will cover all possible...

dfdf

You can create a bridge "unreachable" without ports and addresses, then route the traffic there. Now create a firewall rule to match packets to that interface and reject.

/ip route print. I don't want to create anything, just to filter out unreachable routes in PRINT command.

dfdf

You can now only use "blackhole" for a similar function. I just want to filter out unreachable routes, it's absolutely unrelated to blackhole property, as blackhole is another type of route. How can I do this in 7.x.x? It was a fundamental property on which many scripts rely on. Why it's ...

dfdf

Hello,
in 6.x.x ROS there was "unreachable" property for every route in /ip route
It's gone in 7.x.x? Why? And what should I use instead of it in scripts?

dfdf

No need to use Surfshark app, WG client works if use this: https://github.com/Incognito-Coder/Wiregen BUT unfortunately currently i was unable to work out working config for Mikrotik router (getting 'Handshake for peer did not complete after 5 seconds, retrying') while WG client allows me to have a ...

Search found 49 matches