MikroTik

Nullcaller

If you just take a quick look at the specs ac² and then at the specs of ax², you will see that ax² has higher antenna gain: 5-6 instead of 2-3 dBi. Same between hAP lite and hAP ax lite. Same between cAP ac and cAP ax. The only router that didn't really get an antenna gain boost in the ax version, i...

Nullcaller

Can you elaborate a bit about the nature and frequency of disconnects? Or maybe pull up some logs? I don't have much going on in terms of amount of clients on the networks I manage, my uses for MikroTik equipment are currently limited to maintaining a few tech-enthusiast-level home networks. But wif...

Nullcaller

Every time I get to some public space (hotel, camping site, etc.) I do a wifi scan using Analiti app for Android. I see most of the times Ruckus APs, sometimes Unifi. Not seen Cambium in the wild so far. But thats to much blabla and not the point I want to make. The point is: I look at the wifi cap...

Nullcaller

In terms of stability and convenience, wireless > wifi-qcom-ac > wifi-qcom In terms of modern feature compatibility, wireless < wifi-qcom-ac < wifi-qcom (and it's the same in terms of price, at least with the used market in mind) I have a network of devices, all ARM, all with the wifi-qcom-ac driver...

Nullcaller

The notion that the emission is roughly spherical is (IMHO) "wrong". It is (should be) omnidirectional as a toroid in the same plane of the device, and likely the performance when front-facing is due to either the "thickness" of the toroid or to reflections (or *whatever")....

Nullcaller

Seems like it's all just due to antenna radiation patterns. The cAP ac antennas are listed as ~2 dBi gain, while the cAP ax antennas are ~6 dBi. So it's no wonder it performs better in some places in some tests, and worse in others. Your "doughnuts" are more squished. MikroTik seems to rea...

Nullcaller

My L850-GL exhibited symptoms similar to the ones described by the OP of this topic, despite the USB adapter board being USB2.0 and seemingly working perfectly fine hardware-wise. Even with this topic and other two, here and here , I still found getting L850-GL to work with RouterOS a relatively con...

Nullcaller

You mentioned "the signal'd get boosted by 20 dBm" ... I guess this indicates some kind of constructive interference, don't you? Not really, no. Please forgive me, I think I just misphrased my findings. I would be directly on top of the AP, and the signal would be at a level of X dBm. The...

Nullcaller

By the way, about config backups, you can use /export file=config.rsc on RouterOS 6 or /export file=config.rsc show-sensitive on RouterOS 7 to generate a file on the router called 'config.rsc' that contains a sequence of commands that will configure the router back to the state it's currently in, in...

Nullcaller

the whole board is then engineered by various experts and inevitably there will be some compromises So (I just want to make sure my understanding is correct) the PCB antenna is engineered together with the actual board, so that together they act in a way the engineers want them to act in? I.e. have...

Nullcaller

Well, (1) you don't have to update it to ROS7, and (2) the update process is usually smooth for default-ish configs, in my experience with 16 MB devices. In any case, there's netinstall, which revives 99,999% of MikroTik devices from their early graves. And, well, not having a config backup is a gre...

Nullcaller

In terms of stuff that would matter to you as a consumer, in one-AP setups, external stick antennas are usually better than typical internal antennas. The benefits, I think, are: <...> They are significantly further away from the actual printed circuit board of the router, which potentially makes i...

Nullcaller

CAP AX has 8db transmit power, which is not what is expected for a 5.5db antenna. Ah. Good ol' european 14 dBm TX power limit on channel 155 (in 5710-5875 MHz, really). Real 5.5 dBi antenna gain gets rounded up to 6 dBi for regulatory purposes, and then <target max regulatory EIRP> - <antenna gain>...

Nullcaller

You will need to put one of the wifi interfaces on the ac lite into station mode, and use the same SSID and security settings on it as you do on ax3, so that it connects to the WiFi network of your ax3. You will probably want to remove that wifi interface from the default bridge, add it to the WAN i...

Nullcaller

[*]They are typically, but not always, higher-gain. This is usually , but not always, a benefit, since it increases the sensitivity of the AP So can hear better the interferencies. In the 2.4 GHz band? Fair. In the 5 GHz band? Depending on the type of building you live in and the channel you're usi...

Nullcaller

Yeah, if it's roaming you desire, any ARM-based ac device will do the job just fine. I'm using pretty much exclusively ac devices, and they're great, with drivers being seemingly more stable than on ax devices. My ax3 is relegated to edge router duties and only does IoT wifi stuff. I won't use that ...

Nullcaller

In terms of stuff that would matter to you as a consumer, in one-AP setups, external stick antennas are usually better than typical internal antennas. The benefits, I think, are: They are typically, but not always, higher-gain. This is usually , but not always, a benefit, since it increases the sens...

Nullcaller

I must admit, that does make sense. In practice, the amount of sense it makes is vanishingly small, since AP can't route packets anywhere but back to the bridge anyway. But this is in the spirit of theoretical advice of removing variables that could affect the results of experiments, yes.

Nullcaller

Do you have a device that connects both to WiFi and Ethernet, and attempts to bridge them, perchance? That would be extremely weird, but would potentially pin the issue down on RSTP disabling wifi interfaces because of a detected loop. A little network topology drawing and CAP configurations would b...

Nullcaller

Without knowing your config and assuming you did everything correctly, the steps for debugging are: Update every piece of equipment to the latest software and firmware version. Not only RouterOS devices, but ideally all equipment. Keep in mind that there are two separate things you need to upgrade w...

Nullcaller

The reason I suggested this is because my own ax3 shows worse performance on 80 MHz than on 40 MHz. Even 20 MHz performs better than 80 MHz, but 40 gives the best results to me. Maybe we received bad hardware. Huh. @webequipped, in addition to all other tests I asked you to do, could you please als...

Nullcaller

I've taken enough risks with my home IT core for one Saturday. Maybe tomorrow, but probably not, and definitely not during the week; I work from home. That's understandable. You could test out different frequencies without taking it out and loading a full new config onto it. That might be a good sa...

Nullcaller

There is a chance that your cooked-radio hypothesis explains why it isn't as fast as the <NAUGHTY-U-WORD-EXPURGATED> router it replaced Unlikely. The ax3 is fast, yes, but it does not maintain its fastness through obstacles too well. In fact, it can't really maintain the maximum 1200 Mbps speed wit...

Nullcaller

Not at all. Yes, it really likes 5500 by default for some reason, but it can definitely roam to other frequencies if it decides so out of the blue. And my phone for some reason just refuses to see this frequency =P As for 160 MHz width... Unfortunately, the ax3 itself doesn't support it. The only MT...

Nullcaller

Mine's the "-US" variant even though it came to me through Getic. So you'll be able to test if the config works on the US version then :wink: Speaking about Getic, I also have a pet theory that some of these weird ax3s are coming from Amazon returns rebadged as new routers. Someone plugs ...

Nullcaller

How do you make it admit that truth, please? All I can get is a long list of available channels, plus the "Scan" function, which doesn't show "me" in the list. It should display so in the wifi interface status tab, or with 'monitor' command from cli. I used WiFi Analyzer, though.

Nullcaller

putting only one PoE port on it, and making it the same one for in and out. <...> I concede the usefulness of PoE out on this box for powering an LTE modem or WISP CPE antenna, but PoE in should be on ether5. I've asked, and nobody has given me an example of WAN CPE that provides PoE. That's a LAN-...

Nullcaller

Now that I think of it, a few facts might be significant: I have the international version of the hAP ax3. It auto-chose frequency 5745. I mean, the issue still probably lies either with hardware or with firmware (someone fat-fingering 3 dBm instead of 30 into firmware regulatory limitations that mi...

Nullcaller

I am coming to you live from a Wi-Fi network called 'House5GHz' (password 12345678 if you wanna jump in as well). Sorry, took a bit longer than I expected, I had to dangle an RB1100 from an Ethernet cable (I wish one day I could be as strong as that Ethernet cable). Anyway, here's some quick and dir...

Nullcaller

You're telling me that bridging the two wifi networks has no effect on the original problem statement, where one side works and the other doesn't? No, I'm telling you naming SSIDs has no effect on the original problem. It might hide the problem, by the means of clients learning to roam away from th...

Nullcaller

Just so that we're all on the same page, here's the post with the latest config, edited slightly: I cleaned up the bridge, rebuild it from scratch, manually added each interface. I also removed the DHCP relay as the DHCP server is on the same network so it is not needed. I now have it back in play a...

Nullcaller

@tanget, that was a heck of a tangent. ...my iPhone roams between the 2.4 and 5GHz networks without hassle. I'm not the type to dive deeply into something that's working, so perhaps there is some strange handoff problem I don't see, but the important bit is that I don't see it . From my perspective,...

Nullcaller

Also, two more things to try:

Try testing the speed really really close to the router, no more than 3 feet away.
Try replacing the antennas, if you have different ones. Take care to switch the router off before unscrewing anything.

Nullcaller

It works normally on the 2.4Ghz radio, pages loading very fast all good. Switching over the 5Ghz side, produces the almost the same result. Pages do load however they on average always take over a full minute to do so. So an improvement of sorts... And now I'm getting Vietnam flashbacks from all ot...

Nullcaller

Look. We're talking VLAN-less config here. Not a single mention of VLANs in the config file. Which means that any and all Ethernet frames leaving the ax3 and going into the CRS are untagged . Yes, ChatGPT is correct, MikroTik uses VLAN1 by default as its native VLAN. No, by default, no packet is tag...

Nullcaller

How do you know it's VLAN-less ? Maybe the router is using VLAN 1. Most mikrotik gear will use VLAN 1 if left unconfigured, but will not mark packets as VLAN 1 for WiFi. Because I read the config and there's no mention of VLANs? Sure, the interface on the CRS that's connected to the ax3 could someh...

Nullcaller

If you are using it as an AP, you can bridge the WiFi interface to the LAN interface, so the AP will act as a switch. That is entirely correct. However, that is also already the case, see config =P Maybe you should specify vlan 1 in data path in the WiFi config, or some other vlan depending on what...

Nullcaller

I will give it a try and report back. I find that curious about the bridge because I am sure I only used the "All" setting. I am to lazy to add them one at a time. :-) DHCP relay = is not needed since the server is on the same sub net. Ah, I see. Remove the DHCP relay as well, then. It ma...

Nullcaller

I made them up on the fly just encase someone could not get into the settings I provided. I would never post any real credentials I use. Same with the password on the wifi security. :-) Ah, good then. I took a look at the config... So, why do you need a DHCP relay on the ax³, again? All your interf...

Nullcaller

See my apology and attached script in the original post. Login details are posted there as well. Apology accepted, but delete login details this instant. They aren't needed, and you should never share them, because security concerns. I don't think it's that bad for a device only accessible from you...

Nullcaller

About beacon interval, MikroTik wiki definitely states that the values must be the same between a virtual interface and its master interface. I would treat anything else the wiki doesn't mention that isn't obvious as potentially not linked to the master interface, and bug MikroTik support if you enc...

Nullcaller

I hate to break it to you, but the people you're talking to on this forum are, generally speaking, not the unfortunate souls that are responsible for the design of the hAP ax³. I understand your frustration. Truly, I do. But without an effort from yourself to efficiently convey information , as oppo...

Nullcaller

Now it's much better, signal plus stability but never reach full speed.

1. Did you set the width to 20/40?
2. Do you want full speed, or is it fine the way it is?
3. How about speeds in other places, far away from the router, but still in the house?

Nullcaller

80 MHz will be faster but is more subject to interference and performance issues in noisy environments. The real benefit of 80 MHz, IMO, is range with decent speed. If you just look at MCS index real quick, you will see that, say, with 0.8us guard interval, you get 117 Mbps at an MCS index of 3 for...

Nullcaller

Router automatically added frequency 5745 and signal is really bad. Of course it is. Here are the regulatory power limits for Germany: 2402-2482/20 5170-5250/23/indoor 5250-5330/23/indoor/dfs 5490-5730/30/dfs 5735-5875/14 In short, you're screwed by your local regulations. It seems that the router ...

Nullcaller

I quickly tested two routers and two clients on both Ce+eC and Ce+Ce with some speedtesting action, and it's pretty much the same bandwidth-wise, so it seems like collisions are avoided effectively in both scenarios. Latency-wise, to me, it seemed like Ce+eC was better, but I could be imagining thin...

Nullcaller

Check whether the router config is really default, check the settings on devices themselves. If this doesn't help, you might wanna try increasing TTL on airplay packets. That's what made DLNA work on my network consistently. It's like TTL=1 or something like that. Also check multicast-related settin...

Nullcaller

Since we're on the topic of antennas, is anyone else having problems with hAP ax3 antenna plastic breaking? I didn't have a place to leave the ax3 permanently when I first got it, so I connected and disconnected the antennas from it around 10-20 times, and the little plastic bit right at antenna rot...

Nullcaller

It depends on what exactly you have in mind. If you want true mesh with 3+ Audiences, I don't know. If you just want to connect 1+ Audience to a master Audience wirelessly, there's this topic.

Nullcaller

But it's about one the Frequencies needed for 7. Carrier frequency can always be adjusted upwards pretty much without problem, except for penetration power and difficulty of building multiplier circuitry. If you can use WiFi 7 on 2.4 GHz, you can use it on 5, 6, 7, 57 or 69.420 GHz, as long as loca...

Nullcaller

ROS7 syntax, now with 20% more sugar!

Nullcaller

*) dns - added support for "adlist"; "We put pihole in your router, so you can pihole while you pihole" Jokes aside, this is a great feature. Make containers a little bit more useful, and suddenly those relatively expensive ax devices look like an absolute bargain for the amount...

Nullcaller

my cAP ax sits behind TV and another one behind PC monitor

So you know how they put holes in projector screens so that they're acoustically transparent?We need that but for WiFi now

Nullcaller

Specifically the Gigabit PHY in the hAP ax2 diagram doesn't say "switch" at all. That's because the Gigabit PHY chip (QCA8075) is just that, a gigabit PHY chip . It doesn't implement switch functionality. It only handles the Ethernet physical layer stuff. Think auto mdix, link speed negot...

Nullcaller

As far as I know, wireless interfaces don't have any sort of hardware offload support on any MikroTik device. Any wireless traffic always has to go through the CPU. This is probably true for most other WiFi-enabled routers, as this seems to be an internal SoC interoperability architecture thing rath...

Nullcaller

I realized that some clients are not connected, after some searching i found this thread and this one: https://forum.mikrotik.com/viewtopic.php?t=203076. <...> I'm not sure where to respond, if it should be here or on this https://forum.mikrotik.com/viewtopic.php?t=203076 thread. I have also tried ...

Nullcaller

... then place the 2x cap ax on the floor and do some measurements ... If you happen to have one lying around, you can utilize a fellow human being and take advantage of its lifting capabilities to hold the cAP ax against the ceiling while you take measurements. It might be better than simply leavi...

Nullcaller

CAP AX is a beast

I wonder if there's some fun to be had by 3d-printing a new enclosure and potentially putting a 24V blower fan in it. It might make wireless performance significantly worse. But hey, it'll look neat. If you sand it, that is.

Nullcaller

original post was spam. deleted.

Nice

Nullcaller

This forum is not at all a place to discuss this. Though, using any DNS server will give that server the data that <your IP address> is requesting <sites you visit>. What the DNS server owner does with that data is up to them. Google can tie that data to your Google account. Cloudflare can tie it to...

Nullcaller

What is the solution to defending against attackers that try to connect wireless by brute force attack? If they're using the same MAC on every attempt, you can write a simple script that analyzes log files and adds the offending mac address to the access list, based on the number of tries in recent...

Nullcaller

I understand your point. Still, the test I suggest aims at simplifying the environment by removing elements that potentially play a role. I agree. It just seems like @dalami isn't coming back with any new ax3 tests any time soon, so I'm trying to compensate for that by estimating the probability th...

Nullcaller

I've seen several issues with WPA3. This doesn't really feel like it. WPA3 issues probably wouldn't depend on distance away from the router, and would also plague other devices that have the same exact hardware and software inside, like the hAP ax2 and the cAP ax, in the exact same way. They would ...

Nullcaller

The reports don't explain the second axis rotation on the sticks, what the hell is the rotation for?

Some people report that signal strength is different when they rotate the antennae 180 degrees. Also so that it looks nice in both stood-on-a-shelf and stuck-to-a-wall configurations

Nullcaller

Honestly, i think we all "tested out" what MT WiFi can do/provide us on "unlimited" superchannel settings You know, generally speaking, I'm not that smart when it comes to this "life" thing. I get myself in trouble with basic things, and communication and understanding...

Nullcaller

Well, changing antennas to weaker but more omnidirectional seems like the only legitimate way to take advantage of the detachable antennas, you know, at least with a device that is "certified only for indoor use".

Nullcaller

Me confused. Does hAP ac3 forcefully apply antenna-gain=6 on ROS7 for some countries, but not for others, and this is supposedly intended behavior? Or is it forcefully applied for all countries? Is this the case regardless of factory firmware version?

Nullcaller

Its not actually a plan ( its tinkering with config functionality and networking concepts with no basis in reality ), and it has nothing to do with User/Device Traffic requirements, with which, one can derive a straightforward (non devious) plan and an optimally efficient config Yes, but I don't li...

Nullcaller

Reason being that native VLAN comes untagged off bridge interface while any VLAN interface expects tagged frames on "anchor" side. If you'd convert the bridge to "all tagged" (so bridge doesn't have pvid set ... which is not really possible, default is pvid=1, but setting frame-...

Nullcaller

though it looks like no one has a straight answer for the other issues The straightest answer I can personally give regarding @dalami's issues, is that my personal undereducated guess , is that something very weird but very dumb is happening with the 5GHz RF chip, QCN5052, right after QC. With how ...

Nullcaller

So, it seems that my devious plan is foiled mainly by the fact that I want to bridge native VLAN with other VLANs . I can create a VLAN interface with id=1, that's for sure. But it appears that it's either not capturing traffic, or outputting traffic with tag present with vlan id set to 1, or both. ...

Nullcaller

Also, one last thing to potentially try, just for kicks. Try using 20 MHz channel width on the 5 GHz interface. It's a hail mary, but who knows.

Nullcaller

I was really hoping to see some more responses from other AX3 owners. As it is...I'm probably going to box these up soon. Now the question is what do I replace them with. Roll the dice to see if replacement AX3's work? Or look elsewhere? Before boxing them up, consider creating a support ticket . T...

Nullcaller

So, I'm not an expert by any stretch of the imagination, but it seems to me like it's possibly a more sneaky radio-related issue. Like the ones Ron Touw mentions in the first half of this talk that @bpwl linked in the "hAP ax3 wireless problem" topic, before that topic devolved into whatev...

Nullcaller

So yeah. Not a config issue. If it was, we'd all be drinking coffee and laughing at how easy this was to fix.

Nullcaller

Can you please try this config, to eliminate any potential config-related complaints? It works perfectly on my ax3, at least with my laptop and two different android phones. Just drop it into winbox, open a terminal and enter `/import hapax3-mod.rsc`. Password for the network is "PASSPASS"...

Nullcaller

Soo... Fun. Receive numbers are okay, transmit numbers are okay, config is okay, because I've just rechecked, and it works perfectly on my ax3. Granted, I made a few changes to security configuration so that it works without CAPsMAN, but they shouldn't matter...

Nullcaller

Sorry. There's the "Scan" button in winbox, and "Freq. Usage" button. You wanna look for "NF" column in "Freq. Usage" and take note of what it's saying. Here's mine: Ok. Here's frequency usage: frequse.png And here's a scan. scan.png Note the "strong&quo...

Nullcaller

I don't think that it's strictly speaking necessary to go back to default configuration. OP stated they started with default config and gradually modified it. I tried OP's config, and it worked flawlessly on my ax3*, with devices connecting 20 feet away with relative ease. If this was a config issue...

Nullcaller

Not sure what I'm looking for. Are there lots of other networks visible from my neighbors? Yes. Sorry. There's the "Scan" button in winbox, and "Freq. Usage" button. You wanna look for "NF" column in "Freq. Usage" and take note of what it's saying. Here's min...

Nullcaller

KNFMWS (Kids Need For More Wireless Speed) :lol: The children yearn for the data mines :lol: Honestly if kids think 100-200 Mbps is not enough for all their needs, check under the bed, they must be trying to earn some extra pocket money by running a torrent tracker or something. This thingy/approac...

Nullcaller

In both cases, HW offload would need to be disabled on the ports, which then drops wirespeed switching and puts your bandwidth between devices at the mercy of your CPU. Also, as stated previously, I couldn't care less. WiFi speeds are always at the mercy of the CPU, and they seem to be fine. So the...

Nullcaller

At that point, you can use whatever Layer 3 rules you want to keep devices from talking to each other or the Internet. And that is precisely the problem. You can only do it at that point . The moment you put a switch before the router, layer 3 filtering collapses, as it is possible for packets to b...

Nullcaller

in older houses you are basically stuck.

Powerline adapters? I mean, there's no chance they'll do a gig, but maybe at least a stable 300 megs?

There's also MoCA.

Nullcaller

I admit that this is not a proper approach to networking. If one would do this in a corporate setting, it would probably result in a multitude of problems. It is definitely bad for overall network performance. But if you only have 500 Mbps of internet connection to play with, duplex gigabit interfac...

Nullcaller

I'm kind of trying to achieve an embarrassingly simple thing here, if you think about it in terms of tags. Think of it as adding 3 more symbols to all MAC addresses on the network, with two main rules: (1) the network equipment assigns these 3 symbols and (2) you can make firewall rules based on wha...

Nullcaller

It seems that you don't quite understand the (V)LAN concept, do you? I haven't read your explanation in depth, just skimmed it ... and it seems to me you want to have a flat LAN, so why bothering with VLANs etc.? Mhhm... As for the VLAN concept, in my understanding, at least with home networks, the...

Nullcaller

If it's at all helpful to the other half of the issue dalami is facing, the Tx power output I was getting for my US set config was seven db's lower than the thirty target on 5180/Ceee.

Ah. Then I should be the one apologizing. And I do apologize. I misremembered my testing.

Nullcaller

Here are some less hard facts, so take with a pinch of salt: This would pretty clearly establish some of the range issues certain individuals are having, particularly in regions where the regulatory domain is particularly out of whack (Australia, Poland). The responses of "mine works fine"...

Nullcaller

There's also another possible explanation, which is high noise floor. Please try and measure it with frequency scan tool.

Nullcaller

Something I didn't state previously - while watching in a wifi analyzer the 5G network will periodically disappear. Don't know if that's an announce/beacon thing or if it indicates an issue. I still can't connect at any distance. My android devices show they're attempting to connect, display "...

Nullcaller

Is it just me, or do the power numbers appear to be numbering?

Nullcaller

Default config, country=US, tx-power, antenna-gain unset. 2G/5G: TX 27/28. At 10', WiFi Analyzer shows both networks at -33..38 dBm. About 40 ft away on the other side of the flat, 5G is around -60 dBm with 2G being 5 decibels higher.

Nullcaller

I downloaded and ran the hapax3.rsc config on my hAP ax3, only two changes being: (1) I set the password explicitly on wifi interfaces because it complained and (2) I ran it without CAPsMAN. It worked well, and TX power was at 28 dBm in winbox status tab. Can you please try and replicate my setup an...

Nullcaller

@morphema, log into winbox, open the WiFi window and go into Radios tab. There will be three local radios. Select them all and click 'Provision'. That's how I set up my local CAPsMAN interfaces, now that I remember it. It should provision your local radios with proper configurations according to you...

Nullcaller

Factory Firmware 7.8 Upgraded Firmware 7.14.2 Thank you. Can you also please try setting the country to something that seems to work [like it's supposed to], like Brazil, and see whether it changes anything? Edit: sorry, didn't see your other post. Mine is set to US because the signal utterly sucks...

Nullcaller

Hi. I want to try and do an unorthodox thing on my home network. There's an awful lot of protocols that you would want to work on a home network that depend on a single multicast packet emitted from one node on the network being able to reach all other nodes on the network. Multicast routing, howeve...

Nullcaller

Meanwhile, I've gone through the tab auto-completion list and tested countries that allow broadcasting in 5735-5835 MHz range. All settings the same. For 5180/Ceee frequency was obviously changed to 5180. It seems like 28 dBm is max power for 5745/Ceee and 23 dBm is max power for 5180/Ceee. Antenna-...

Nullcaller

By the way, can anyone with an ax3 please try and reproduce my little experiment above with country values?

Just to see whether or not I'm going insane and/or whether or not this is an isolated incident. You won't need anything but winbox/webfig and a little bit of free time.

Nullcaller

According to the specs the ax3 shouldn't be able to transmit higher than 27dbm. "5470-5725 MHz / 27 dBm" https://help.mikrotik.com/docs/pages/viewpage.action?pageId=150601820#:~:text=5470%2D5725%20MHz%20/%2027%20dBm Interesting. According to product page, it can do 28 (at least in 5GHz): ...

Nullcaller

Also, this is only anecdotal evidence, especially seeing as I currently have ax3 and ac3 in different positions with different antennae orientations and on slightly different channels, and it should be treated as such... But I'm currently at the location where I have my hAP ac3 (which it turns out h...

Nullcaller

Could you say where the problem can be? Just as @mkx said. New CAPsMAN no longer supports provisioning local interfaces as though they are remote. You will need to configure them locally. It's a little bit of a pain the first time, but it's very doable, and it's worth it long-term. Pretty much all ...

Nullcaller

I have received my hAP ax3, originally with a RouterOS version of 7.8. The firmware version was the same. I have since updated it with both in-built updater and netinstall, and have observed no differences between installation methods or OS/firmware versions. My preliminary findings so far is that h...

Nullcaller

From what I understand the interferences are directly related to the speed of data transfer, while it Is possible that a firmware version may work better than another, the only possible way to reduce interferences Is to reduce - substantially - the speed of the data transfer, which essentially happ...

Nullcaller

I see that you have previously posted a config that has Europe/Madrid set as time zone. So I'll take a wild guess that the country is Spain. For Spain, reg-info outputs: ranges: 2402-2482/20 5170-5250/23/indoor 5250-5330/23/indoor/dfs 5490-5710/30/dfs That's some unfortunate news, really. I believe ...

Nullcaller

Nice! Glad you were able to do it! 🥳 CAPsMAN disabled on Router and APs If you want to use CAPsMAN, you can still use CAPsMAN, just not on the backhaul interface. There's a `configuration.manager` property, and if you unset it on the wifi3 interface (and probably adjust some settings in datapath), y...

Nullcaller

There was this one user this year who insisted to run a capsman server on a CRS though

As a person who uses a hAP ac2 as a glorified switch/firewall with a CAPsMAN server, I can relate

Nullcaller

Also, consider using the 4x4 radios for backhaul. Approximately 0% of client devices can do 4x4. You probably don't need it on the wifi itself. But your backhaul performance will improve. Especially if you're allowed to use channel 149 (5745 MHz) at 30 dBm in your country. Trust me, with wireless ba...

Nullcaller

It seems that all you need to do is set wifi2 on Master Audience to 'ap bridge', and on Slave Audience to 'station bridge', with security settings and all identical on both. You will also need to actually add the interfaces to bridges on both Audiences, the bridge is probably named bridgeLocal or so...

Nullcaller

JFYI: https://forum.mikrotik.com/viewtopic.php?t=203470 Thanks. I tried googling before posting, but it brought up pretty much nothing. That's a generic problem for a LOT of brands and highly depends on the quality of the used USB device. Same with bluetooth. It all operates in the same 2 - 2.5 GHz...

Nullcaller

I just hope they release something with a MediaTek SoC at least eventually. In my understanding, MikroTik has a very distinct pricing problem and its name is "IPQ-". They use relatively high-end Qualcomm SoCs in routers that are there mostly to do dumb things. Does an "ax lite" r...

Nullcaller

Everyone still having issues with ax3, can you please go into System > RouterBOARD, take note of the firmware version and post it here? If you've upgraded the firmware since you last had issues, please post the version you had issues on. With ax3, there apparently were reports that having a USB 3.0 ...

Nullcaller

Now that this is addressed, I am pleased to announce that I've ordered an hAP ax³. You all made me do it. I swear, buying MikroTik gear is not an addiction, I can stop whenever I want to. (I really don't need it, I'll probably resell it) Anyways, I should be able to test it in a week or so. I have a...

Nullcaller

I like how this thread devolved from focused discussion of the hAP ax³ into a weird thing were nobody can seemingly figure out how to enter caps mode. If you need to upgrade multiple routers from some old version of ROS6 to the latest version of RouterOS, you can use netinstall to do so. If there ar...

Nullcaller

I think it was said that min-antenna-gain depends on factory software version (or was it routerboot version? ... lately it's the same, so ...). My audience says "factory-software: 6.45.8" and "factory-firmware: 6.47.9" (which strikes me odd to see such a huge discrepancy in thes...

Nullcaller

So... It seems like the most likely explanation is that the update procedure might have borked something to do with min-antenna-gain. And as neat as it is, @normis pls fix?

Nullcaller

Just for kicks and giggles, I have another hAP ac2, running as CAPsMAN controller for the aforementioned hAP ac2 and Audience. It has no min-antenna-gain in the thing too, and behaves much in the same way.

Nullcaller

So, confirmed, hAP ac2 behaves same as the Audience, with the only difference being that it can't reach 30 dBm. I tested it.

Nullcaller

Wait, the hAP ac2 only goes up to 26 dBm of transmit power anyway, doesn't it?

Oh. Oh no...

Nullcaller

Yup. Sure enough. mtdbms.png It even goes up and down a bit accordingly in WiFi Analyzer. 30dBm, hovers around -40 dBm; 25 dBm, hovers around -45. And, get this, even if you set antenna-gain on the router itself, leaving it unset in CAPsMAN overrides that value. I can't actually monitor this from th...

Nullcaller

Huh. I have an r2 Audience, and no `min-antenna-gain` in `.../radio/print detail`... Funny thing is, I ran it without any kind of limit on tx-power (except for setting the right country) for quite some time due to lack of knowledge, and that thing was cooking itself. Now I wonder if it was legit pum...

Nullcaller

Since this procefure requires coordination between old and new AP, it's usually (always?) constrained to APs from same vendor (in case of MT even same generation). According this meaning of "roaming", roaming between MT and Asus is not possible. This is true for hAP ax³ and Asus RT-AC1200...

Nullcaller

You might want to consider disabling STP on a home network entirely, by the way. Home networks are usually dead simple, so the probability of accidentally creating a loop is near-zero. And even if your luck is really bad, home networks are usually dead simple, so you'll find it in near-zero time. Th...

Nullcaller

whenever an AP with g/n sees some device transmitting "b", it also falls back to 1Mbps

Wait, so does this mean that mere presence of another AP set to support 802.11b (and its sending out of beacons) makes g/n APs fall back to 802.11b 1Mbps basic rate?

Nullcaller

P.S. Just a bit of information I should add to this topic, EoIP uses IPsec in transport mode, and NAT Traversal checkbox is checked by default (I believe it's in... proposals? in IP > IPsec), though it doesn't appear to do anything in particular in this scenario.

Nullcaller

The outer tunnel is IPSec – so it's encrypted before you get to GRE (and EoIP and the underlying LAN). So unless the IPSec secret is a "hackable" or well-known password, you should be okay. Okay, thank you! This makes me more at ease with using this setup. I still don't get why the input-...

Nullcaller

So, am I then correct in my understanding that the in,ipsec rules will only match GRE packets that have been received with valid ipsec authentication, identification, encryption and stuff? Theoretically, if I were to cut my fiber in half and splice in a little man-in-the-middle box that pretends to ...

Nullcaller

I should note that /ip firewall filter add action=accept place-before=1 chain=input ipsec-policy=in,ipsec protocol=gre is really just equivalent to /ip firewall filter add action=accept place-before=1 chain=input src-address=Y.Y.Y.Y protocol=gre on side A and /ip firewall filter add action=accept pl...

Nullcaller

I've two networks, and I want them to be joined over the Internet using EoIP over IPsec. I prefer using no Wireguard, OpenVPN or L2TP, because, in my (relatively little, so feel free to correct me) experience, it just complicates things unnecessarily and reduces speeds compared to just EoIP over IPs...

Nullcaller

I managed to read all the functions of the mikrotik with PHP and curl scripts. now I would like to understand how to write or launch scripts with curl. could anyone give me a hand? There are no examples related to the script in the wiki Wiki gives you all the information you need on MikroTik's REST...

Nullcaller

... Inside my house, through multiple walls, I see a 5G wifi signal from that device. While my AX3 half the distance half the walls - can't connect. I'm seriously starting to question whether the AX3 issue is antennas - and more likely a serious radio issue. ... But can you actually connect to the ...

Nullcaller

/interface/wifi/provisioning/ print detail Flags: X - disabled 0 supported-bands=5ghz-a,5ghz-n,5ghz-ac,5ghz-ax action=create-enabled master-configuration=cfg5 I believe the 'supported-bands' are AND-gated. Meaning that, with how you configured it, the radio will be provisioned with cfg5 configurati...

Nullcaller

Omnidirectional is 2D omnidirectional, in a plane perpendicular on the antenna. ... The closest to this ideal omnidirectional is the di-pole , it has a gain of around 2.15dBi (i=isotropic). This is called an omnidirectional antenna. Thanks for the explanation. I needed one. The term referring to 2D...

Nullcaller

But wait... what is this ???? Ugly, very ugly ... (antenna impedance mismatch ???, signal reflection ??? ) I see a similar thing both on hAP ac2 and hAP ac3 (remote, don't have access until tomorrow), both running 6.49.10. 802.11b, weird MAC, insane signal strength (95 dBm is... 3 megawatts? someth...

Nullcaller

You want to be in the red zone of this pattern. The Z-axis is the physical antenna. So one up and one flat, is what is expected to be in the hAP ac2/ax2 . The red zone, high gain, is both for TX and for RX. Klembord-2.jpg Copied from interessting Cisco document : https://www.industrialnetworking.co...

Nullcaller

Not out of the woods yet, with the ax wifi 2.4GHz. It enables b-protocol with "ax" set. Is this including the 1Mbps basic rate? What a waste of airtime!

Bands are a mess on ROS 7.

Nullcaller

... the Wifi Analyzer utility shows my 5G signal in a given location at about -60db. Trying to connect to the AX3 is difficult - usually the phone gets past the authentication but then doesn't receive the DHCP. ... Anyway - once I have a connection Winbox shows a signal of -90 to that client. I don...

Nullcaller

Curious about another item - in the cli, viewing the county list by pressing tab for auto-filling "reg-info county=", United States is not listed. I don't know if it is listed or not, this might be a bug, but it works if you just type in `country="United States"` manually. I jus...

Nullcaller

Hmmm, tested hAP ax2 only for that info. (wifiwave2 could first not run on hAP ac2, and I removed it from hAP ac3) ... Different tables could lead to different channels used in auto/default setup. Those ax higher channels are non-DFS. Preferred by auto? Frequency tables being different in ac/ax dev...

Nullcaller

Here's what reg-info displays for me (ROS 7.13.1, hAP ac2, radio 0 is 2.4 GHz) for various countires: [REDACTED@REDACTED] > /interface/wifiwave2/radio/reg-info country="United States" 0 ranges: 2402-2472/30 5490-5730/24/dfs 5735-5835/30 5250-5330/24/dfs 5170-5250/30 5835-5895/30/indoor [RE...

Nullcaller

I have never seen hAP ac2 use those high frequencies (for Europe at 14 dBm only) The international version of hAP ac2 can do 5150MHz-5875MHz, and for the life of me, I can't find a single European country where reg-info would display a 14 dBm limitation on 5680 MHz (on 7.13.1). They all have a more...

Nullcaller

I'm not a specialist on WiFi tuning, so I kept my testing as simple as possible: ... I have just conducted a fun little experiment. Same old Audience, same old phone. Channel 5745/ac/Ceee, distance is about 2 meters. TX Power set to 0 dBm (status shows 1 dBm), speedtest, 61 MB/s. TX Power set to 21...

Nullcaller

the combination of words reg-info and country ... would have been a while before I tried this I was trying different things in terminal, pressed tab while in /interface/wifi/radio/ and went "What's this thing, 'reg-info'? What could that possibly stand fo- Oh. Oh... OOOH!" the default out...

Nullcaller

So, scratch everything about directionality, did anybody measure the signal strength to see if the amplifier's working? I'm still waiting for that sweet, sweet data.

Nullcaller

... in the Ax3 manual in the FCC section, they are described as: APPROVED 2.4 GHz ANTENNA: 3.36 dBi Omni-directional (HGO-antenna-IN) APPROVED 5 GHz ANTENNA: 6.01 dBi Omni-directional (HGO-antenna-IN) And this seems to mean that MikroTik agrees and ax3's antennae are indeed omni-directional. These ...

Nullcaller

Semi random thought, but could it be that at least a part of the lamented issues (ax3 covering less than ax2) could be related to the ax3 (external) antennas being more directional when compared to the ax2 omnidirectional (internal) ones? This is not supposed to be the reason. Hear me out. You stic...

Nullcaller

WLAN drivers used to show the allowed EIRP level differences for different frequencies wifiwave2 driver ... did not find any details per frequency ... except region power limit = 30dBm I found it! /interface/wifi/radio/reg-info country="United States" works as of 7.13.1, results (for hAP ...

Nullcaller

Long story short, if anyone else is affected by this, unset 'management-protection' in wifi security (or set it to 'disabled' if you plan on never using WPA3).

Nullcaller

As it's frequently true with many optional things, some devices burp on things they don't expect ... This seems to be pretty much the only explanation that makes sense. I unset management-protection, and it still works fine, so it seems like maybe the management-protection being unset is somehow di...

Nullcaller

If you're not familiar with setting up MikroTik routers, it's best to use Quick Set to set up the basic functionality, and then make modifications to the resulting configuration. The mode you want to use in Quick Set is probably "HomeAP dual". Before using Quick Set you will probably want ...

Nullcaller

Well, it seems like explicitly setting management-protection to 'disabled' did the trick. No random disconnects in two days. WPA3 requires management-protection=required while WPA2 doesn't care (and default is "allowed"). If you set this property explicitly, then same value applies to any ...

Nullcaller

At the lower power settings of the radio (<2dBm), the radio is not following the settings anymore. It was highly non-linear in that range. First of all, your first reply is brilliant, and on each and every point, thank you for pointing it out, it was a pleasure to read. When I read about receivers ...

Nullcaller

So, with iPhones, there's apparently an AirPort utility from Apple that allows you to do something like what WiFi Analyzer does , and on macOS there's NetSpot . If you're gonna be measuring with a mac, take care to rotate the AP instead of repositioning the device, otherwise it'll probably be pretty...

Nullcaller

In-deed I did similar test. No Android here, so I tested with my iPhone reading out signal strength values from "Registration" tab on the Mikrotiks (not sure how much sense those make, but it was the most consistent values I could get). Now, it is important to understand, what the values ...

Nullcaller

As an aside, this also proves that 0.7 dBi indeed pretty much amounts to nothing. I wouldn't even be able to measure the difference of 0.7 dBi with my phone (as it is very close to minimum observed random error), let alone feel a difference when using a wifi network.

Nullcaller

Just for kicks and giggles, here are my numbers for Audience (RBD25G-5HPacQD2HPnD), channel 149 Ceee, obtained using a Samsung Galaxy A54 5G, running OneUI 6.0 (Android 14). Audience would be placed on wooden floor, then my phone with WiFi Analyzer open would be placed directed towards it but with t...

Nullcaller

When I was setting everything up, I decided to set management-protection to 'allowed'. The Internet now advises to switch off 802.11w management frame protection to solve this issue. I have done so, and management-protection is now explicitly set to 'disabled'. I will observe the behavior of my devi...

Nullcaller

I've recently switched from ROS 6.49.10 to ROS 7.13 on my home network. Since then, an older device of mine, a Mi Mix 3 running LineageOS 20 (Android 13), has been randomly disconnecting from the network with a message "Access point temporarily full". Here's an edited export of my /interfa...

Nullcaller

Huh. The replies in this thread are indeed very interesting. I apologize for being perhaps a bit rude in my previous comments. I was too much annoyed about what in my eyes was a lack of proper testing. It is no more. For anyone who got an ax3, an ax2 and an Android device, I propose a different, mor...

Nullcaller

I realy like this line, but why wifiwave2 package can't be found on newest release, but only in 7.12.1 and older? Long story short, wifiwave2 is dead, all hail wifi-qcom[-ac]. Use wifi-qcom for new devices, wifi-qcom-ac for ARM-powered older devices. For really old ones, use the 'wireless' package....

Nullcaller

IMO you're making confusion ... everybody around here already forgot about the pre-6.37 capsman. <...> And "capsman for wave2" is neatly shortened to "capsman2" but capsman3 would really be confusing (3 what?). I found it a little bit confusing when I was trying to find informat...

Nullcaller

From a functional perspective I fully agree...but from a software development perspective totally not. It has to do with the newly introduced wifi-qcom-ac driver. It's still a little bit weird. On the one hand, embedded development, as far as I know, is very frequently like that: you develop the wh...

Nullcaller

I also have weird problems with AX3 on 7.13 WiFi speed. My test is copying big file from NAS that is directly attached to the router's ethernet. With AC2 at the same place, speeds were nicely 50-55MB/sec. 1: Windows 11 connects over 5GHz AC: link speed shown in computer: 780/780, real speed during ...

Nullcaller

New capsman explicitly doesn't support provisioning local devices (MT is very clear on that). This was actually very much unclear to me when I was setting up new CAPsMAN for the first time. I can't even find a mention of local interfaces with regards to CAPsMAN in the docs. Old capsman apparently d...

Nullcaller

... and as @whatever already mentioned in his post #2 above, if it's unset, then device will assume its highest supported standard.

Thank you. This is indeed quite important.

I've edited the summary thingamajig, it's now there.

Nullcaller

Summing up all the exploratory endeavors, the answers are: 1. The 'band' setting sets the maximum supported WiFi 802.11 standard, with all standards below it always supported. And if the interface doesn't support set band, it fails with the 'no supported channels' message. If the 'band' setting is u...

Nullcaller

Have some 802.11b only device lying around? I thought I didn't. But then I thought to myself "wait, new devices still support 802.11b, maybe I can force a wifi card into 802.11b mode". And I also thought "but this is gonna be hard, isn't it?" And I also also thought "Linux ...

Nullcaller

So... I'm having trouble understanding what the problem even is. I get that it's hAP ax^3's wireless performance. But you're jumping between one statement and another with no connection between them, making some random adjustments, and then jumping straight to conclusions with no thought process oth...

Nullcaller

Well, I think this more or less answers my questions then. Thank you. It'd be nice if MikroTik came out with a more definitive statement on how radios behave with regards to bands with wifi-qcom-ac on ROS 7.13. And whether or not 802.11b is supported and if you can turn it off, along with its basic ...

Nullcaller

I think the only reasonable channel band setting is leaving it unset. Ah. Please pardon me, in trying to remember and do everything, I forgot to mention, that's exactly what I did. I manually assigned channel configurations to static cap and local interfaces, and the channel configurations have no ...

Nullcaller

I've recently decided to take advantage of the new wifi-qcom-ac package and upgrade my home network (consisting of two hAP ac^2s and one Audience) from RouterOS 6.49.10 to RouterOS 7.13, since they're all ARM devices. I was running CAPsMAN before, and after some fumblings with new configuration opti...

Nullcaller

I've recently bought a used hAP ac lite which was locked to 'russia3'. Re-flashing it with 'netinstall' did the trick, and now the bird is free, the sink has been let in and I guess it is ex-locked. I don't know about the more recent products though, especially ones released in the US. Those, from w...

Nullcaller

I fixed it. I kinda screwed up. I ordered a used RB260GSP that was unnaturally cheap. I knew it was an old one, and I thought that was the reason... But upon trying to enter the web interface, I quickly realized, that no, that was not, in fact, the reason. It exhibited all symptoms of the bug descri...

Search found 173 matches