MikroTik

gigabyte091

You should provide configuration from the both routers, LTE and the router on the remote site. Just redact sensitive information like public IPs, wireguard keys etc.

gigabyte091

Quick look and it seems to me that your VLAN configuration is wrong. You defined VLAN interface and it's attached to the bridge which is good. Then you assign IP address to the bridge instead of the VLAN interface which is bad. Also DHCP server should be set on that VLAN, not the bridge. Also why ar...

gigabyte091

Regarding firewall rules, you could modify default rules so that you put "drop invalid" rule after default "accept established,related, untracked" rule and at the end of the forward chain you put "drop all else rule". Between you can put what traffic you want to allow. ...

gigabyte091

That's right, so in case you don't have multiple APs CAPsMAN is really not needed. CAPsMAN is used when you have multiple APs and you want to manage them from the single controller. Note: When using device as CAPsMAN controller, wireless interfaces of that device can't be controlled by CAPsMAN but y...

gigabyte091

How many APs do you have or plan to manage by CAPsMAN ? If you have single device then CAPsMAN is not needed at all.

Default Mikrotik firewall rules allows communication between VLANs so that needs to be blocked in the forward chain of the firewall.

gigabyte091

Don't use two bridges... One bridge is enough. Instead use VLANs, you get separation on layer 2 and with firewall on layer 3

gigabyte091

So without your configuration I can tell you only basic info. You need to create one PPSK group where you will add as many passphrases with their corresponding VLANs you need. Then you create security profile where you specify only profile name, which wpa to use (wpa and wpa2 only) and multi-passphr...

gigabyte091

That's right, you should use something like iperf3 or openspeedtest server on one pc and client on the other PC so test data isn't generated on the switch but on one of the devices.

That way data is just passing through the switch and not being generated by the switch.

gigabyte091

No new 5G devices...

gigabyte091

If you can, please change default port...

gigabyte091

I agree with @anav here. Don't make your life harder, just use one router as a travel router and that's it. I have ax2 as my travel router.

gigabyte091

@OP

Is your device new ? If yes then you should return it for a replacement unit as this is not a normal.

gigabyte091

Export supout.rif file and open a ticket with the Mikrotik support, maybe they can see what's wrong.

gigabyte091

Problem with Quickset is that it will mess your configuration so best thing is to do it manually.

Can you access your device right now ? What are your requirements ? Are you going to use wAP as a plain AP ? Are you going to use CAPsMAN, VLANs, PPSK ?

gigabyte091

If you already have some configuration in place they I suggest you to post it here so maybe more members get involved into this topic and so we can see what did you already did. Regarding VRF I've never used it so I can't give you an advice on that one. That's why you should post your configuration ...

gigabyte091

So: Rename default admin account to something else. Put strong login password. Put strong wifi password. Don't expose your router (management of it) to the internet without some kind of VPN. But if you use it as a travel router I don't see the need for remote management. Allow management only from t...

gigabyte091

I didn't, after 7.18.2 it disappeared, at least on two devices I had a problem with.

gigabyte091

Agree with @anav here, don't put it on a tree. It's better to put it on a fix pole attached to your house. My ATL is attached to the roof beams by using L shaped mount for an old style TV antenna.

gigabyte091

+1 for ATL LTE18.

gigabyte091

If you can, put ISP router into a bridge mode and use RB5009 as primary router

gigabyte091

So... You gained 4MB. Why is that bothering you ? ax3 have plenty of memory

gigabyte091

Your switch is still working as a router. You have masquerade rule in place. You have DHCP server.

I don't remember if CRS354 (and I configured one 2 months ago

) is by default configured as a switch but try to reset it to default configuration.

gigabyte091

Well you should start with telling us about what are you trying to achieve, draw network diagram etc., so we can understand what are your needs. I presume you bought 48 port switch for a reason. As @mkx stated here ax2 router should be great router for your needs. It's capable of routing at full spe...

gigabyte091

I hope you are not using CRS as a router. It's a switch and speeds you are getting are about the same as in the specs table for routing

gigabyte091

This looks to me as a nice, low cost aggregation switch as you already stated in your first post.

https://mikrotik.com/product/crs317_1g_16s_rm

I plan to use it in our new office. Instead of multiple copper lines to each workspace i will simply drop fiber and put CRS310 on each table.

gigabyte091

What VLAN1 ?? Don't mention VLAN1 here or we will strip your forum rank... :lol: :lol: So only VLAN that is used as management VLAN should be tagged for bridge and in interface/vlan you should create mgmt vlan interface. Other vlans should be tagged only for trunk port, in your case ether1, and unta...

gigabyte091

The bet is on.
I completely forgot! The year 2024 is long over, and it looks like I’ve lost my bet. Congratulations, gigabyte091!

I would be happier if I lost the bet because we would have wifi 7 devices...

gigabyte091

My vote go for the ROS instead of SWOS Why ? Because you will be able to manage both of your devices with Winbox. Also if you don't have any experience with Mikrotik environment then maybe it's a good idea to start with RouterOS as you said that you will buy RB5009 and when you gain some experience ...

gigabyte091

With /interface/vlan command you are creating VLAN interface on your device and there you are defining what VLAN ID will that interface have, to what bridge will belong etc... /interface/bridge/port here you are defining which physical ports will be bridge members, you can also select VLAN tagging a...

gigabyte091

Are you trying to do Netinstall from the Windows or Linux machine ? This happened to me few times and there were two reasons, either I downloaded .npk file for the wrong architecture or there was special character in username.

gigabyte091

It's a quite a new feature. I believe Mikrotik will continue to work on it.

gigabyte091

I am not at all an expert, but I just enabled adlist and found the recommended/default stevenblack list prevented access to some web sites. See here: https://forum.mikrotik.com/viewtopic.php?t=215635 But you are Forum guru :D @OP it all depends on which blocklists do you load. I loaded same blockli...

gigabyte091

i preffer to keep access to device from all networks, i trust them all Never trust everybody or, in your case every device. Especially IoT devices. It doesn't matter they are behind another Mikrotik. Once they phone home connection is established and they can and will send data back (my washing mac...

gigabyte091

Haha, I don't think I will be a real mikrotik guru in this lifetime.

Who let the newbie here...

JK

Who knows... Maybe you become guru one day

@Josephny congrats on your guru status

gigabyte091

/ip neighbor discovery-settings set discover-interface-list=all You need to decide which VLAN is your trusted VLAN and create special interface list for it, for eg. mgmt. Then you can set your discovery list to mgmt instead of all. Also set your allowed interface list for winbox server to mgmt. The...

gigabyte091

Is your device covered by warranty ? If yes then you should contact your distributor. If not then you could buy replacement PSU unit (As far as I can see there is a replacement PSU on Mikrotik website) and replace it yourself but only if you are sure you know what are you doing as replacing PSU on t...

gigabyte091

I have several RB5009 in production environment, all of them connected to the aggregation switch with Mikrotik DAC. Never had any problem with SFP.

What do you mean you don't want to work for the router ? Once configured you will hardly ever need to touch him.

gigabyte091

Agree with@hovloetn here. Only problem with Mikrotik wireless I had was when WPA3 was enabled. Once I disable WPA3 problems disappeared, at least for me.

gigabyte091

Piece of advice, don't use VLAN1. If you want to use VLANs then create VLANs you need but don't use VLAN1 for anything in that case... What ROS version are you using ? I think that from 7.19 beta you don't need to use console to configure PPSK.

gigabyte091

Well, one problem with Ubiquiti i think is, they release product no matter what even if software side is not ready for release.

Their U7 Pro AP had a problem with 2.4 GHz radio i think. Don't know of they fixed that.

gigabyte091

It's a fact that other vendors (Ubiquity for eg) is ahead of Mikrotik, especially in wireless segment. (While Mikrotik is stuck at WiFi6, other vendors have several WiFi7 APs in their lineup) For 300 bucks or so UCG Fiber is a great device, they have poe on their LAN ports, fiber, 10G eth, ssd for c...

gigabyte091

Well... Mikrotik doesn't release any roadmaps so you will have to wait and be surprised like the rest of us

gigabyte091

I use them a lot but only for connecting single device to the internet such as fire alarm panel for eg or when I have single camera on a pole. So for low bandwidth application they are fine but in your case I really think that you should look towards something more powerful.

gigabyte091

In that case go for 5G with Chateau 5G AX. Good, powerful 5G router, with WiFi 6 if needed. (If not, just disable it) Futureproof.

gigabyte091

First of all, look into models that supports LTE pass trough. Then you need to provide several information like do you want 4G or 5G ? Are you in the city or maybe at the countryside ? What is your budget ?

gigabyte091

Just noticed that setting multi-passphrase-group ignores the passphrase set for the security name. You can't associate with that passphrase. If you add the passphrase through multi-passphrase without specifying a vlan-id it connects and ip is assigned by the default dhcp. You can test this feature ...

gigabyte091

Did you create two VLANs ? For VLANs to be used you must enable VLAN filtering. Best thing is to enable it on RB5009, confirm that everything is working and then go on to the next step. So what you should have is 2 VLANs and delete everything that includes default IP address, dhcp server, address-po...

gigabyte091

Again there is DHCP server on your AP/switch. That is not needed. /ip dhcp-server network add address=192.168.1.0/24 dns-server=1.1.1.1,208.67.222.222,1.0.0.1,208.67.220.220 gateway=192.168.1.2 \ netmask=24 add address=192.168.52.0/24 dns-server=192.168.1.1 gateway=192.168.52.1 /ip pool add name=poo...

gigabyte091

Please post your current configuration so we can see changes you made.

gigabyte091

You can use RB5009/L009 as a switch if you want. I'm using L009 as a plain switch.

Just be aware that ether1 on L009 is not connected to the switch chip so use it as mgmt port.

gigabyte091

The 192.168.10.0 "network" was to setup a trunk between the two units as per an example on the MikroTik RouterOS Docs. I don't feel that it's necessary at all, but I set it up because I figured there is something specific about MikroTik that needs it. It not needed, a trunk is simply a sp...

gigabyte091

Okay, so if you want to use VLANs then go VLANs all the way. Right now you are using VLAN with PVID 52 and native VLAN or VLAN1. Also there is 192.168.10.0 subnet which is used for what exactly ? Uplink towards your AP ? That is not needed. My advice, reset it to default configuration because I can ...

gigabyte091

So you need your ax2 to work as a AP/switch only. In that case you don't need 80% of this configuration. Also I can see you tried to mess with capsman ? For only one AP capsman is not needed. Can you post your RB5009 config ? If your RB5009 handles dhcp and nat then why did you setup your ax2 to do ...

gigabyte091

That's why I opted for ATL18

Just point and shoot

gigabyte091

You can use it as a switch with RouterOS, there is no need for SwitchOS. I have several of them running without a problem.

Procesor in that device is only good for management. (I believe that it's his only purpose.)

gigabyte091

So you have only one AP ? In that case there really is no need for CAPsMAN, just setup your AP without it.

gigabyte091

When attempting to netinstall the device it's recommended that you disconnect any network cards except the one you are using to netinstall the device. You can factory reset the device by holding the reset button until user or power light starts to blink. Blinking is factory reset, steady light is CA...

gigabyte091

Try to disable WPA3 and PMKID.

gigabyte091

@all does someone have a working config for my setup : RB5009 + 2x hAP ax² Hello, have the same setup. To supply the hAP ax2 with power over Ethernet, I took the power supply from the hAP ax2 for the RB5009. Now supply my two hAP ax2 via POE from the RB5009. The problem was solved. I don't think it...

gigabyte091

There is no need for PiHole, you can use router itself to do that and add blacklists to the router itself.

gigabyte091

...One day I'll even figure out VLANs. Maybe......... Don't go that devil's way :) :) :) No, devil's way would be start messing with CAPsMAN :lol: @OP I have a small child (8 months old) but that doesn't stop me to tinker with RouterOS. Honestly any Mikrotik 5G/LTE device will work out of the box w...

gigabyte091

If you don't have time to learn then maybe Mikrotik isn't for you. There are lot of brands that sell more user friendlier modems, for eg in Croatia T-Com sells Xiaomi 5G routers that are quite nice and they have good performance. Huawei also have good LTE modems so maybe this is a way to go in your ...

gigabyte091

First of all, only one bridge is needed, there is no need to create bridge for every VLAN. Also create only one datapath on CAPsMAN controller and set it to your bridge. I use it that way and it's working so there is no need to create datapath for every VLAN. Also I wouldn't touch settings on CAP de...

gigabyte091

Without a configuration export is hard to say what is wrong so please export your configuration. Configuration on CAP is not required, just put them in CAP mode.

Those settings you see in CAPs are created automatically. Are you using VLANs ?

gigabyte091

What isn't working for you ? I didn't had any disconnects with new 7.17 version. WiFi is working rock solid for now and that is with new PPSK, CAPsMAN and wAP ax. I have one PTP link with one wAP ax connecting to one of the APs and I haven't seen dropouts whatsoever. And that link connects my camera...

gigabyte091

@normis, any update on the controller ?

gigabyte091

Only downside of using PPSK is that you are unable to use WPA3 but for a home user WPA2 with strong passphrase shouldn't represent great security risk.

gigabyte091

Nope, only WPA/WPA2 is supported when PPSK is used.

gigabyte091

Best thing is to test it yourself. There are a lot of factors that will influence wireless performance like type of wall, interference from other APs in the area, position of the AP.

Also there is the question of speed. What speeds are you expecting on your devices ?

gigabyte091

Honestly I will wait until WiFi 7 become more mainstream aka until Mikrotik doesn't release wAP be. WiFi 6 is more than enough for me.

gigabyte091

You should check TP-Link, they have quite a few powerline devices available.

gigabyte091

So why to not allow some winbox.cfg where all that bells and whistles could be set on/off?

Agreed.

gigabyte091

This new table view.

gigabyte091

Wait wait, so they want to make more modern WinBox and then they do this ? At least give us an option to turn that off if possible...

gigabyte091

I don't know, maybe it's possible ? Also my Xiaomi phone never wanted to roam with cAP ax. With wAP ax I can see phone roams between all APs.

gigabyte091

a8be9894-001d-4a10-8d68-eff9f3bad352_text.gif

What's with the Mikrotik Excel ??? Why ? It so ugly... Not modern at all...

Also when will you bring back LTE graphs ?

gigabyte091

What @anav here is trying to say is that the routerB is the one that initiates connection to the routerA in your case so rule on routerB is not needed as its the router himself that initiates connection and when this connection is established then it will pass the firewall. On routerA it's needed be...

gigabyte091

Be careful now @anav... I've read that your prime minister will resign from it's function... Maybe @normis here will became your prime minister

gigabyte091

@mkx So I heard... He will be US citizen soon :lol: :lol: You never know... Maybe he decide to come to the dark side and suprise us all... :lol: @gotsprings With cAP ax i had a problem with my AC in the living room where AC keeps connecting and disconnecting every 2 minutes. With wAP ax there is no ...

gigabyte091

But I also use PPSK which is a new feature in RouterOS and I was expecting problems but nothing. Everything is working flawlessly. Also WPA3 is causing a lot of problems. I use WPA2 (I have to because of PPSK) and have no problem whatsoever. Good strong passwords and that's it. I'm waiting the day w...

gigabyte091

But I had 0 problems with new wAP ax so far. They are rock solid :D Just to be clear, you are not using them as paperweights? There are cheaper paperweights :lol: But I have 4 of them now, 3 as APs controlled by your favourite CAPsMAN :D and one is acting as a client for my security cameras around ...

gigabyte091

Nothing yet... Christmas decorations are still up

But I'm sure that next visit to Tedi or Pepco will change that

But I had 0 problems with new wAP ax so far. They are rock solid

gigabyte091

:O

images.png

gigabyte091

It's not slow, with ATL I get 160-250 Mbps DL and 60-100 Mbps UL but when tested with 5G I get 550-720 Mbps DL and 80-165 Mbps UL and 5G is tested with Chateau. So with 5G ATL that could be even better... So I hope we will see 5G ATL

gigabyte091

You can't have multiple security profiles with only one SSID. You can use only one so if you want to use PPSK you give up on WPA3.

gigabyte091

Also I got some problems configuring AX capsman, because capsman filtering was removed from ax, so I made it standalone.

Do you have multiple Mikrotik APs ? If you don't then there is no need for CAPsMAN.

gigabyte091

You should check if you added your VLAN to the correct interface list.

Also this is not simple AP setup, looks like you are trying to use your wAP ax as a router not simple AP.

What do you actually want from your setup ? Do you want simple AP or do you want to use it as a wireless router ?

gigabyte091

Why don't you use Mikrotik's own BTH ? It's a secure way of remote connection to your device. It's VPN connection using Wireguard. You can use their BTH app or Wireguard app on a PC. I strongly recommend you NOT to configure your devices remotely over the Internet the way you want to. Use VPN for th...

gigabyte091

Also, I am always surprised by everyone's obsession about "the need for speed". Stability and what works for you is far more important. IMHO ... I agree with you on that one, stability is much more important and me personally for basic home user 100/100 is more than enough. For eg. in Cro...

gigabyte091

I would leave firewall rules as they are and start from there, or, what I do is drop everything and passing only needed things. /ip firewall filter add action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untracked add a...

gigabyte091

First of all CRS devices are not meant to be routers, they are switches and while they can perform routing functions they don't have CPU power to do so. Your device can route about 340 Mbps (When looking at the the table on the product page) so not so much. Second thing, you should really really cre...

gigabyte091

First thing you should do BEFORE messing with the VLANs on the switch is to use one port off bridge so you don' lock yourself out.

Then export your configuration in full so we can see what did you do.

One question, are you using your CRS as a router ?

gigabyte091

Well, I had cAP ax before and I had issues with disconnections, FT not working on all devices, wireless range was well, weak. My AC kept connecting and disconnecting and I even opened support ticket for that but they were unable to find an issue. Now with wAP ax I didn't have single disconnect, AC i...

gigabyte091

Agree with @gotsprings here, 3 wAP ax controlled by CAPsMAN and PPSK is in the mix. Roaming is working like a charm and i don't experience whatsapp video and audio calls dropouts.

I must say but this is actually a pleasant wifi experience

gigabyte091

No new 5G devices...

gigabyte091

Well... There is SFP+ which is 9th network interface

So 5009 is a valid name

gigabyte091

What makes you think that the problem is in your router ? You can check CPU load on your router and you can see what link speed is negotiated.

Are you running default configuration on your ax3 ? Can you post your configuration ?

gigabyte091

Never say you are sorry for newbie question. You can't learn anything if you don't ask

You can watch videos from TheNetworkBerg for eg. Great videos and everything is explained in detail. You also have a video about PPPoE.

gigabyte091

There is your problem, same subnet on WAN and LAN side. Change your subnet on either WAN or LAN side.

RB5009 is your gateway and in your PC you probably get 192.168.1.254 as gateway. What are you trying to achieve ? There is no a single firewall rules.

gigabyte091

Without exported configuration it's hard to say why something doesn't work. If you are trying to connect to the ax2 with winbox on ether1 then firewall is blocking you access if you have default configuration on ax2. But without configuration of ax2 and CRS devices it's a guessing game. Also small d...

gigabyte091

Can you ping 8.8.8.8 ? If yes, can you ping google.com or anything else from the PC, if not then it's probably DNS.

But RB5009 should work out of the box. Or do you want to use it as a learning device ?

gigabyte091

What I can recommend you is to go full CAPsMAN, you can also use PPSK so you can have one SSID IF WPA3 IS NOT IMPORTANT TO YOU.

Ditch VLAN1 and you can start by exporting configutation so we can see what is already configured.

gigabyte091

Also you can export your existing configuration so we can see what we are working with. I don't understand why are you sending all traffic to CAP1 and then returning it to bridge2 ? One bridge is enough. What you could do with CAP2 is to create VLAN on which you will send traffic to the router and a...

gigabyte091

I agree, and this is on channel 100, so 5500 MHz. This is link just for security camera so no more than 4 mbps is needed anyway. Now everything is on Mikrotik :D My APs in house are on 7.17rc2 and outdoor AP is on 7.16.2. I noticed that AP is connected but there is no camera stream and lease in DHCP...

gigabyte091

Signal strength is not so great, there is no direct LOS, AP are not pointed toward each other and signal must go trough bricks, glass and roof. Sustained link speed reported by antenna is 216 Mbps UL/DL and there is no drops in video stream for now. Also there is no a single ping drop (30 min test)....

gigabyte091

This is nonsense, I have one RB5009 connected with Mikrotik DAC to CRS354-48P, one RB5009 connected to CRS328-24P and at home RB5009 connected to CRS310 without a problem.

gigabyte091

For eg, Ubiquiti have skins for their U6 range of products. Bought one wAP ax for wireless link between my garage and house to replace wireless link with two ubiquiti devices. 2.4GHz radio for mgmt, 5 for link, works great on test bench, unfortunately it will wait until tomorrow as daylight is almos...

gigabyte091

Then I think that you unfortunately have damaged hardware.

gigabyte091

Black wAP would be ideal but hey, it's better than cAP ax.

It looks like it will attract more attention now but christmas tree is going to be right beside it and there is more decorations that will be put beside AP at Christmas eve.

gigabyte091

You can reduce amount of stickers to your liking.

You should see some of the houses here in Croatia then... So much Christmas decorations and lights... We don't need street lighting here

@Josephny absolutely, they even claim to extend wireless range

gigabyte091

You don't like it ?

gigabyte091

wAP ax Christmas edition season 2024/2025

Decorated by me, approved by wife

WhatsApp Image 2024-12-14 at 10.11.18_c17b5f48.jpg

gigabyte091

Did you try resetting the device or enter netinstall mode ?

gigabyte091

So there is a roadmap from Mikrotik... Can't wait for ATL 5G

gigabyte091

How long did it take for wap AX to come out ? Toooo long... And on top of all... They are releasing WiFi6 products while other companies already released WiFi7 devices. Also more and more phones supports WiFi7... Also... Outdoor 5G is a must... ax lineup is fine now, you have plenty of devices to c...

gigabyte091

Unfortunately, WPA3 on Mikrotik is kinda broken... Like I said, i had same issues until I disabled PMKID i WPA3. Looking at your config I see nothing wrong. Only thing you can do is send supout file to support. Most of the time here on forum you will see that a lot of members suggest other users to ...

gigabyte091

I don't understand why mikrotik doesn't have some kind of roadmap... I would like to se ATL but 5G version... Is that so hard ??

gigabyte091

I had problems with frequent disconnects when WPA3 was enabled. When I disabled WPA3 and PMF I never had an issue again with disconnects. And my setup is RB5009 as CAPsMAN, 3 wAP ax as CAPs and one SSID (I'm using PPSK Mikrotik finally added to ROS) with 3 VLANs. Frequencies are added manually for e...

gigabyte091

Same problem here.

WIN 11 23H2 22631.4460

Same here, after third attempt winbox was installed, W11Pro 23H2 build: 22631.4460

gigabyte091

In that case I would like you to welcome you to the Mikrotik club of frustrated wifi users. I hope you like pain and suffering :lol: :lol: :lol: Jokes aside, did you try new 7.17rc2 maybe ? If that doesn't help only thing I can think about is sending supout.rif file which you create when problem sta...

gigabyte091

First line is not correct
Looks good to me! ;-PP

I corrected the mistake, it's hard to write on the phone

gigabyte091

Did you check the logs on your device ? What is the reason for disconnection ? Also why are you using datapath ? Are you planning to use CAPsMAN ?

What are your lease times on DHCP server ?

Did you try to use non-DFS channel ?

gigabyte091

Why one bridge instead of multiple ? Well how I understand it, and I'm not a network professional by any means, is that bridge is simply a network switch done in software and in ROS on most of the devices that is offloaded to the switch chip so with one bridge you have HW offload. But with multiple ...

gigabyte091

Is there any reason you have 3 bridges ? I think that could be the source of your problems.

gigabyte091

So 3011 is the router so can you post that config here ? As @anav said, take one port off bridge for mgmt purposes.

Did you try to connect wired clients to other ports ?

gigabyte091

Well... If you are using your ax2 as an AP then you should try to enable VLAN filtering on your bridge.

gigabyte091

Post your configuration so we can see if something is wrong.

gigabyte091

If you look at the block diagram you will see why, so all the traffic must pass through CPU and that's why you are seeing high CPU load.

It doesn't matter if you are using it as plain AP.

gigabyte091

In my case I have same or even better wireless with wAP ax when comparing it with cAP ax. OTOH cAP ax wasn't mounted on the ceiling but instead it was behind th TV or on the desk so not the ideal position.

gigabyte091

wAP ax works fine in my use case and it's smaller than cAP ax. Just put them in the corner and you covered the whole room. If you can mount AP on the ceiling then I would go with cAP ax. If not then wAP ax could be a good choice. Ooorr... hAP ax2 for eg. could be used as AP as well. Smaller than ax...

gigabyte091

wAP ax works fine in my use case and it's smaller than cAP ax. Just put them in the corner and you covered the whole room. If you can mount AP on the ceiling then I would go with cAP ax. If not then wAP ax could be a good choice. Ooorr... hAP ax2 for eg. could be used as AP as well. Smaller than ax3...

gigabyte091

First start with exporting your configuration. Also did maybe the problem is that you are using DFS channel so router scans for nearby radars for a few minutes.

If no radar is detected then 5GHz radio is turned on.

gigabyte091

My experience so far is that wifi-qcom-ac is just not worth the trouble, it is way more unstable and there is no significant performance gain so if you don't absolutely need new CAPsMAN just stay with the older wireless package... I've had much better wireless experience with wifi-qcom-ac drivers o...

gigabyte091

This was a warning and the last chance to do so, usually lightning strike isn't forgiving... I use APC UPS-es so i can monitor them using UPS package on Mikrotik.

gigabyte091

I think that some kind of Christmas tree sticker is on it's way for now. Then after holidays who knows...

gigabyte091

I will, who knows, maybe Mikrotik decide to include stickers in the future so our wife's can also play with Mikrotik

gigabyte091

I noticed that sometimes when clicking "new winbox" instead of opening a new window everything closes. Not every time but 1 in every 6-7 times it crashes.

gigabyte091

I just said anything but some kind of metallic sticker

Now who knows what will arrive from Temu...

gigabyte091

Today I finally decided to make network overhaul. I removed 2 cAP ax and one ax2 and I replaced them with wAP ax. First impressions, I must say Im pretty happy with them. I put them in every room in the corner so whole room is covered and back of the AP is facing outside. I didn't test signal outsid...

gigabyte091

Just tested with my RB5009 and upgrade to 7.17rc2 went without a problem. I did a config backup just in case.
Which version did you come from, just curious..

7.17beta2

gigabyte091

Just tested with my RB5009 and upgrade to 7.17rc2 went without a problem. I did a config backup just in case.

gigabyte091

Well... it's not normal... As you said all of your equipment restarted when power line got struck by lightning. You are lucky there isn't any damage to the equipment. There was probably some kind of voltage drop or glitch on the switch PSU that caused this. If everything is working fine after restar...

gigabyte091

So I have RG502Q-EA from Chateau 5G but there is 8 antenna connections... ATL18 only have 4... On the other forum they used RM520 which have 4 antenna connectors.

gigabyte091

Honestly, and I know this is Mikrotik forum, and I "should be" recommending their products but IMHO go for TP-LINK or Ubiquiti APs. Much more user friendly if you are a beginner and if you want your wireless to work. It's not that Mikrotik wireless is not working but oh boy... If you like ...

gigabyte091

Best thing would be to download supout.rif and open a ticket with Mikrotik support if netinstall doesn't solve your problem.

Or, if device is new, return it as defective unit.

gigabyte091

5G only with chateau 5G and external 5G antennas as Mikrotik don't have any outdoor capable 5G device yet.

For LTE i can recommend you ATL18. I'm using one for my backup and it's working great for me.

gigabyte091

Did you try to do netinstall ? Does your PC get IP address assigned by DHCP ?

gigabyte091

Now hang on @holvoetn... He gave compliment to the wifi, but true success will be when he start using capsman

gigabyte091

Agree with @holvoetn, did you try wifi-qcom-ac ? There is significant difference.

To be clear, in my case, i don't have any wireless network around me as I live in the house and first neighbour is like 20-30 meters from me so no interference from other networks, channels overlapping etc.

gigabyte091

You can BUT there is a good chance you will lock yourself out if you make a mistake.

Connect via MAC address because when you remove default configuration there will not be any IP address to connect to.

gigabyte091

Why not use ax2 as main router ? And put ATL in LTE pass mode ? It's possible to do what you want, you just use ax2 as simple switch/AP. There was tutorial by @anav here but i think it's taken down. Basically you need to remove default configuration so you have blank device, add all ports to a singl...

gigabyte091

First of all, this is my opinion based on experience with cAP ac and ax, connection is more stable (using WPA2 only) and i have a feeling that range is better. For eg both cAP ac and ax were on my desk upstairs, close to each other with different channels ofc. Phone and tablet maintained more stable...

gigabyte091

You should try it. I'm quite happy with cAP ac, and I also installed one at my mother at law and she didn't have any complaints so far.

gigabyte091

@erlinden My cAP ax and ax2 already found a new home and cAP ax is mounted there as intended, on the ceiling and ax2 acts as a router and capsman controller. In my house I was unable to mount them on the ceiling or the wall and they are simply too large to be behind TV... So I went with wAP ax, one ...

gigabyte091

Honestly, maybe it's just my opinion but i have a feeling that cAP ac works better than all of this ax stuff...

gigabyte091

Bingo... My wife was so happy yesterday when she saw how wap ax will look like. I do have 2 cAP ax and one ax2 in kids room but I wanted to replace them with wAP ax because it will look better on TV cabinet or shelf. I have 3 of them, one in the living room, one in master bedroom and one in kids roo...

gigabyte091

You are waiting for WiFi 7 ?

gigabyte091

Soo... Good thing I ordered 3 of them... one to each room i want to cover with wifi...

gigabyte091

Thank you @anav, jaclaz and TheCat12 for the help. It's working now like it's supposed to.

gigabyte091

As soon as I disable routes I added and changed target scope as @ anav suggested everything is working. When I check my public IP first I get IP from the office internet connection. I disable WAN and after 20 seconds or so first route become unreachable and second route became active and after check...

gigabyte091

Confusing words............ Lookiing at your config......... /ip dhcp-client add add-default-route=no comment=defconf interface=ether1 add add-default-route=no comment=backup interface=ether2 a. based on the above, the router didnt create any default routes. b. if they had created them, they dont s...

gigabyte091

I think the two default routes that are with direct gateways to the ISPs, i.e. the ones without comment, are messing around with the failover. Disable them and try tripping the ISP into switching over again Yeah, those routes are added by DHCP client and there I only changed distance to 2 for backu...

gigabyte091

I tried to create failover to backup ISP, i followed a few Youtube videos where everything is explained but I stuck... I can't get it to switch over to another ISP. If I disconnect the cable from primary ISP it's working, but if I simulate network outage by disconnecting WAN from the ISP router but ...

gigabyte091

Today I tested with ISP 5G indoor router just to see if there is any performance benefit in such an upgrade.

Over 400Mbps DL, great performance jump over 4G so i think it's worth voiding warranty and spending a little bit more money for 5G modem

gigabyte091

Do you know if modem on ATL is soldered or socketed ?

gigabyte091

Thanks, I was thinking about same module.

gigabyte091

Did anybody tried to put 5G modem in ATL18 ? I don't know why Mikrotik don't have 5G ATL version yet...

gigabyte091

Ordered 3 wAP ax today. Must wait until next week... First shipment was sold immediately...

gigabyte091

Why size would influence the decision? Being bigger I mean. Trying to understand
Do you have a partner?

gigabyte091

Still not available at my distributor...

gigabyte091

You can start by exporting your current configuration.

What device do you have is supposed to hand you out an IP address ? Did you assign dhcp client to VLAN10 ?

gigabyte091

While maybe seems that this is a downgrade (and you are right, it is when you compare processing power and other stats), cAP ax is really bulky device meant to be installed on the ceiling. I don't have network cables on my ceiling and putting them require a lot of work (house made of bricks and lot ...

gigabyte091

In my use case 1 gig is more than enough and would like to replace my two cAP ax and one ax2 for 3 of wap ax. Also having additional port like on cap ax is a nice bonus.

gigabyte091

Wooohooo, this would be great replacement for cap ax, better WAF factor

gigabyte091

On PPSK there is still an incorrect password error when changing from one passphrase to another for the first time after forgetting old network.

gigabyte091

Honestly I always thought that Mikrotik will solve the problem with WPA3 by now... But now with PPSK it doesn't matter in my case as I can't use WPA3 with PPSK.

gigabyte091

I tested it with VLAN1 as datapath is needed and @mkx explained that earlier in the post.

I always thought that datapath is needed for every VLAN we have but clearly I was wrong so when testing datapath with VLAN1 worked without a problem.

gigabyte091

If you can, test with multiple phones just to see if you get the same pattern. Do you get password error when forgetting network then connecting to another profile ? But when you enter same password second time everything is fine. And check if you have the same problem connecting with the clients th...

gigabyte091

Here you go: # 2024-10-17 11:00:11 by RouterOS 7.17beta2 # software id = # # model = # serial number = /interface bridge add admin-mac= auto-mac=no comment=defconf name=bridge \ vlan-filtering=yes /interface vlan add interface=bridge name=VLAN20 vlan-id=20 add interface=bridge name=VLAN30 vlan-id=30...

gigabyte091

Here is the config: # 2024-10-17 06:01:55 by RouterOS 7.17beta2 # software id = xxxx-xxxx # # model = C52iG-5HaxD2HaxD # serial number = xxxxxxxxxxxx /interface bridge add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge \ vlan-filtering=yes /interface vlan add interface=bridge na...

gigabyte091

Problem is that in security tab, when you go to create new security profile you don't have option in winbox yet to specify multi-passphrase-group so you have to do it in CLI. So best thing is to create security profile in cli: for eg: /interface/wifi/security add name=anynameyouwant authentication-t...

gigabyte091

Tested with another phone, S23 Ultra and when random MAC address is used it says incorrect password for any password I tried. When connecting with real MAC address phone is able to connect to the wifi. After that you can connect with random mac address without a problem

gigabyte091

I have all 8 ether ports full, with 1Gig links and one sfp+ to rj45 converter (1 gig, not 10) for trunk and fan is on minimum.

gigabyte091

I sent supout files to mikrotik support so they can check if there is a bug with PPSK.

gigabyte091

Did you, in provisioning, choose create dynamic enabled ? If yes then choose create enabled and you should be able to change settings.

gigabyte091

I have CRS310 that replaced my CSS610 below my TV and fans are inaudible. (CSS was replaced because I wanted that all of my devices run ROS) Nice 8 port 2.5gig switch with two sfp+ ports :D Also... I have CRS112 PoE version and no problems at all. Also you can look at L009 and use it as a switch as ...

gigabyte091

Why 5GHz, why not 60 ? You can use wireless wire kit to achieve that.

gigabyte091

For private SSID use PPSK. Works like a charm for now.

gigabyte091

One thing that came to my mind is to create virtual AP just for guests, without PPSK, and give them one password.

gigabyte091

Why two ssids ? Just put guest on separate VLAN, assign them password and that's it.

gigabyte091

You are doing VLAN separation. Every smart device must have some kind of app or a way to select SSID and input password. So just input password you specified for that VLAN and thats it

gigabyte091

But they need to put a lot of work in firmware to make it more stable and reliable. Also I would like to see more device like audience but wifi6/7.

gigabyte091

That's because PPSK probably doesn't support management frame protection which is I think needed for WPA3.

gigabyte091

Yea, they are miles behind other vendors with their wireless products... I don't know why they even bother with wireless at this point.

gigabyte091

I always have two Unifu*k L6 lite ready to replace Mikrotik if they screw up wireless again. (Flashbacks from 7.9...) Honestly, now when I disabled wpa3 at home ap's i can't say anything bad about Mikrotik wireless for now. And I have quite a few devices connected. Ofcourse, I can't compare my netwo...

gigabyte091

Right now I'm testing at work with few devices, just to see if there are any bugs or instabilities and to get familiar with this function. For now, other than this small problem everything is working just fine. Then, when 7.17 goes stable I will configure my home network with PPSK (43 various wirele...

gigabyte091

Here is export from the CAPsMAN: add configuration=cfg1-2.4-ch11 disable-running-check=yes disabled=no name=\ cap-wifi1 radio-mac=78:9A:18:0C:1B:DF set [ find default-name=wifi1 ] channel.frequency=5180 configuration=\ cfg3-5-ch36 configuration.mode=ap disable-running-check=yes set [ find default-na...

gigabyte091

There is always a possibility of a faulty hardware, but also I think that's better for OP to go through all possible solutions that maybe solve this problem. If this doesn't solve the problem then he can take the device to his distributor and describe what the problem is and what he tried to do to f...

gigabyte091

I would try netinstall to 7.16, applying default configuration and not touching anything.

Also you could enable logging for wireless:

system logging add topic=wireless action=memory

gigabyte091

What do you mean by "non-standard" password ? So I have three passwords, test1234 for VLAN20, test12345 for VLAN30 and test123456 for VLAN40. If I go to forget network so I can connect with another password, select SSID, phone prompts me to input password, I input another password and firs...

Search found 1760 matches