MikroTik

iustin

More precisely, for me Mikrotiks started working with iOS 18 after setting the encryption parameters to “ccmp,gcmp”. I don’t know if it’s ccmp-256 or gcmp-256 that causes the problem, or maybe even something else, but setting “ccmp,gcmp” makes it work. Wow, interesting. This fixed it for me as well...

iustin

I don’t have the update offered yet. It’s very easy to test if you have a GoPro or Nikon camera though, I’ll be able to test in a couple of days. On Mikrotik, just enable ccmp-256 and you should see the breakage. Enabling/disabling ccmp-256 yields the same result in my testing- iPhone SE (not on 18...

iustin

iOS 18.2 is officially released- anyone have a chance to test their broken Wi-Fi with it? I don’t have the update offered yet. It’s very easy to test if you have a GoPro or Nikon camera though, I’ll be able to test in a couple of days. On Mikrotik, just enable ccmp-256 and you should see the breaka...

iustin

Mikrotik, please do add support for hardware-backed SSH keys for logging in. Either the sk- version or the Mac enclave version (ecdsa-sha2-nistp256). It's been years since other OSes support this…

iustin

I have this same problem - configs worked fine on iOS 17/mac14, not working anymore on iOS 18/mac15. Setup: * wifi devices: works after enabling encryption=ccmp,gcmp , doesn't work in default (ccmp only?) mode * wireless devices: I can't find the encryption setting, so I can't make these work What I...

iustin

I'm glad I haven't upgraded yet. And it's been quite a few days, and no answer from Mikrotik? At least on which use cases are affected? Where are the SUP tickets? I'm running 7.15.1 with no issues on multiple cAP AXs and a huge variety of devices. I haven't upgraded so I didn't have any devices run...

iustin

I still have disconnection problems with Wifi on hAP AX3. I had to revert to 7.14.3 because I have no time now to debug the issue.

I'm glad I haven't upgraded yet. And it's been quite a few days, and no answer from Mikrotik? At least on which use cases are affected?

iustin

I can confirm this behavior, with one hap ac3 and wifi-qcom-ac drivers. Two other hap ac3, with legacy drivers don't show this behavior.

Oh, thanks, this is a good datapoint!

iustin

Only 60MB free (out of 128MB) is not bad (for me). I'd be happy if I could stay there.

I've now disabled connection tracking entirely, and there was a reduction in memory usage, but the leak is still present. I'll probably file a support ticket, since it doesn't seem to be a widely known issue.

iustin

What happened on 12/27? That's when I upgraded to 7.13, but still using old drivers, if I remember correctly. My upgrade timeline: - migrated host from hAP ac to cAP ac: 2023.11.22 - 7.12 → 7.13: 2023.12.24 - 7.13 → 7.13.4: 2024.02.08 - 7.13.4 → 7.14.1: 2024.03.24 So it was stable on 7.8 and 7.12, ...

iustin

7.13.5, cap ac, wifi-qcom-ac, uptime 1week. free memory: 32.6mb The actual free memory is less concerning than the fact that it continuously decreases between reboots. This is the same graph but over 6 months: you can clearly see that until 7.13 and the new wifi-qcom-ac drivers it was stable, since...

iustin

I've seen this now a couple of times, both with 7.14 and 7.14.1: Screenshot 2024-03-27 at 18.52.51.png Basically reboot the cap AC, and watch its memory slowly but inexorably go down. Once it's above ~87% usage, the cap AC becomes unresponsive (time out waiting for process 85/24/etc), and I have to ...

iustin

Same here, 7.14.1, the CRS310-5S-4S+ is running full speed. No tweaking of the values seem to fix this, it's 13K RPM continuously. Mikrotik, please fix this! i found the answer somewhere (on reddit i think, but can't find the link) the CRS310-1G-5S-4S+IN fan is only able to handle two different fan...

iustin

- changed default "fan-min-speed-percent" from 0% to 12%; - improved fan control on CRS3xx and CCR1016-12S-1S+r2; I have no fan control at all after this 7.14 update. The fan of my CRS310-1G-5S-4S+IN runs with annoying maximum speed and reports ~+-13000rpm regardless which settings i put ...

iustin

For what is worth: after waiting and waiting, I gave up and searched for a different, low-power RJ45 transceiver. I bought one from fs.com (SFP-10G-T100, part number #154925, chipset Broadcom, and marked as Power: ≤1.8W) and that just worked when plugged into a CRS309. Another question, if I may. I...

iustin

I bought one from fs.com (SFP-10G-T100, part number #154925, chipset Broadcom, and marked as Power: ≤1.8W) This looks great, but I have to ask, did you really pay $139 per adapter? That's what it's listed for at fs.com right now (the 100m version, which seems to be the only one with the low 1.8W ra...

iustin

Just found this, I'm bummed as well. My Grafana dashboards went one by one away :( Did anyone file a support request? I did. Got this for a reply Hello, Thank you for contacting MikroTik Support. We are aware of this issue and are looking to fix it in upcoming RouterOS versions. Best regards, Matīs...

iustin

Just found this, I'm bummed as well. My Grafana dashboards went one by one away

Did anyone file a support request?

iustin

Wohoo! Before the holidays, thank you!

iustin

CCR2116, WireGuard isn't working, replaced it with ZeroTier, in details: - delete and re-add the peer may solve the problem but once you disconnect you can't connect back. - It shows 94bytes received, 'Handshake did not complete after 5 seconds' - Same behavior on iPhone, iPad, Windows and MacOS - ...

iustin

Honestly I think ssh with public key authentication is safer that any other protocol, since you can’t “guess” the key. Whereas you could happen to guess the password.

iustin

A cAP ac with 32MB flash and 256MB RAM would be instant buy, too bad it doesn't exist…

iustin

I can't help much since I don't use Mikrotik's wireguard functionality, but between an iPhone and a Linux machine, I don't need the 0.0.0.0/0 hack. On the Linux side, the only allowed IP is the a /32 (the wireguard IP of the phone). On the phone side, the allowed IPs are the actual netblocks I need ...

iustin

Not quite 10Gbps, since I think upstream doesn't support it, but I can hit ~6Gbps on a HP Microserver Gen 10 Plus, with Intel DA710-X2 add-on card for the SFP+ ports.

iustin

In all this discussion, the sad part is that the cap AX is "large", and there's no "small" size of it. I just wish they made cap AC with more ram and flash, but same size.

iustin

Thank you very much for taking the effort to share this, much appreciated.

Last question: I see you're using "add action=create-disabled", interesting. Do you need to enable them only once (after they're initially created when joining)? Or after each reboot?

iustin

I'm attaching the wAP config - if somebody is interested. I'm not sharing hAP ax³, because I've got some amount of private stuff in there - it's my primary/edge router. However, there's nothing special done for wAP ac, the CAP was configured as hAP ax² CAP running WifiWave2. I'm using "CAPsMAN...

iustin

I think that the situation is not very clear yet on Mikrotik's side either. Even for supported devices, there are questions like: are the lost features (vlan-id in datapath) permanent (due to HW limitations), or just temporary (needs more work)? It's also not clear exactly how some configurations sh...

iustin

Ullinator, that is not true. Nothing has to be changed on the CAP even in new capsman. Make a new topic, if you are not sure how to use it. There should be no reason to manually configure CAP clients. This is a bit different, but I thought - yes, you need to configure wifi-qcom-ac CAP devices manua...

iustin

Trying to understand how 802.11ac CAP device interfaces should be configured now. Currently: I have capsman setup to create-dynamic-enabled, and a datapath config that enables vlan and set vlan IDs. In the future, vlan IDs won't be settable for 802.11ac chipsets, but instead they need to be manuall...

iustin

Although there is a reset command on CLI - I did not find out yet what this is actually used for. My article showed one for removing a bogus LTE setting on non-LTE devices. But yes, RouterOS's CLI is somewhat less than fully orthogonal. 😛 Wow, that article is very useful. Thank you very much!

iustin

@iustin @Simonej
As already written earlier, VLAN support is only through bridge ports.

I already wrote that I know that. My question is: does this mean that create-enable-dynamic doesn't work anymore? How is one supposed to configure interfaces (create-enabled probably)?

iustin

Trying to understand how 802.11ac CAP device interfaces should be configured now... So far I have not encountered any problems with this (create-dynamic-enabled) configuration. It's not visible from your post, but do you use VLANs? Without VLANs, yes, it's not a problem. The problem only appears (a...

iustin

Trying to understand how 802.11ac CAP device interfaces should be configured now. Currently: I have capsman setup to create-dynamic-enabled, and a datapath config that enables vlan and set vlan IDs. In the future, vlan IDs won't be settable for 802.11ac chipsets, but instead they need to be manually...

iustin

somehow sad and pathetic this has to be told to people (or even those who refer to themselfes as network engineers) +1,000,000,000,0000 While I agree with this, there's also a good side to it. I'm thankful for all the people who do run the beta and report issues - I don't have the time to do it - e...

iustin

On the wireless→wifi (wave2) migration, did anyone write a guide? Or is the recommendation to rebuild from scratch, and look at all the settings? (I understand the limitations for ac devices/VLANs and datapath changes. I'm asking in general, what should one pay attention to when migrating.) Did you...

iustin

On the wireless→wifi (wave2) migration, did anyone write a guide? Or is the recommendation to rebuild from scratch, and look at all the settings?

(I understand the limitations for ac devices/VLANs and datapath changes. I'm asking in general, what should one pay attention to when migrating.)

iustin

I have no idea what <mikrotik doesn't care> about, but this thread is annoying me, so let me put it out: I've been writing small scale open-source for 20+ years now. I'm a Debian maintainer, and I care about OSS. However, I'm not a zealot about it. I'd rather have Mikrotik continue to be successful ...

iustin

For what is worth: after waiting and waiting, I gave up and searched for a different, low-power RJ45 transceiver. I bought one from fs.com (SFP-10G-T100, part number #154925, chipset Broadcom, and marked as Power: ≤1.8W) and that just worked when plugged into a CRS309. On the other end is a S+RJ10 f...

iustin

I'd love to replace my SFP module with compliant, however, as far as I understand, Mikrotik is NOT have any compliant (such a simple thing) SFP EPON ONU. :-( Now, I believe, this phrase should be deleted "MikroTik devices and SFP, SFP+, SFP28, QSFP+, and QSFP28 modules do not have any restrict...

iustin

Hello, how can I help move forward support of specific transceivers? I have SUP-110942 open for many months for supporting UACC-CM-RJ45-MG, but no reply after initial interaction. And none of the beta/rc final versions since then helped on CRS309/310. I think I have found some potential cause why th...

iustin

Just checked with 7.12 beta 9 and still the same. Why why did they fix it only on some models…

iustin

Just dared to install the beta (9) on a CRS309, and sad to report that Ubiquity 10GbE SFP modules are still not recognized correct (model UACC-CM-RJ45-MG, still reported as "RX Loss", support case open for many months…).

iustin

Did anyone retest with newer routeros, 7.10?

Did a quick test - one CRS310 with S+RJ10, another one with the Ubiquity, both in autoneg - doesn't work. "RX loss" is shown all the time.

iustin

I have a ticket open with Mikrotik in which they said they wanted to fix this and I provided them some logs and audit info for them to look into it. I haven't heard anything from them though, but I imagine it's on the table for the next update(s). OT: You said yours worked in an X520-DA2, what OS w...

iustin

I'm interested as well. Did anyone manage to get these working? They worked out-of-the-box in a Intel X520-DA2, I thought they'll just work on Mikrotiks, but CRS309/310 seem to see them (I can see the model, vendor, etc.) but no link, in either autoneg or forced 10G. Running 7.8.

iustin

set create-enabled, the interfaces will not be dynamic and can be fully edited Yes, that I know, but from what I read, the principle is that privisioning rules should be good enough to configure everything for dynamic interfaces. And they're mostly so, except for this (rather trivial, but important...

iustin

Hi all, If I look at the mikrotik.mib file, there is a mtxrSystem group that exports some of the /system/resource entries, but I can't find anywhere in the MIB an OID for the two write-sect-since-reboot and write-sect-total variables. I'd be interested to monitor either of these to try and identify ...

iustin

This is strange. Same CRS309 with ROS 7.8, and: [admin@sw] /system/health> print Columns: NAME, VALUE, TYPE # NAME VALUE TYPE 0 cpu-temperature 29 C [admin@sw] /system/health> print oid 0 name=.1.3.6.1.4.1.14988.1.1.3.100.1.2.17 value=.1.3.6.1.4.1.14988.1.1.3.100.1.3.17 type=.1.3.6.1.4.1.14988.1.1.3...

iustin

Hi, I see that for enable-dynamic-enabled , one cannot modify even the interface comment on the AP. I can workaround this by disabling CAP on the AP, modifying the interface comments, and re-enabling CAP, but it would be much easier if I can set it via CAPsMAN. The comment in the provisioning rules ...

Search found 50 matches