Community discussions

Search found 1692 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 34
by macgaiver
Fri Feb 01, 2019 7:13 am
Forum: Announcements
Topic: February Newsletter #87
Replies: 61
Views: 7827

Re: January Newsletter #87

CRS332-32S+RM
CRS354-48P-4S+2Q+
CRS354-48G-4S+2Q+


still nothing ?
:"(
CRS332-32S+RM + community feedback == CRS326-24S+2Q+RM in latest MUM opening presentations.
https://youtu.be/zMbtmeTm1PI?list=PLXr- ... O2&t=2053s
by macgaiver
Wed Jan 30, 2019 9:57 am
Forum: General
Topic: Simple queue priority
Replies: 2
Views: 224

Re: Simple queue priority

Priority is used to decide what to drop first (There are no packet sequence rearrangement based on priority) , in case of bottleneck. So you need a bottleneck - a parent queue where limits are lower than sum of all child queue limit SUM.
by macgaiver
Tue Jan 29, 2019 12:12 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: hAP ac^2 problem
Replies: 7
Views: 546

Re: hAP ac^2 problem

post an /export of your configuration
by macgaiver
Tue Jan 29, 2019 11:47 am
Forum: Beginner Basics
Topic: hAP ac and PCQ not working
Replies: 2
Views: 119

Re: hAP ac and PCQ not working

Are you sure you are not running Fasttrack firewall rule? if that is used queues are skipped. Disable it, reboot to clear it from conntrack table,
by macgaiver
Thu Jan 10, 2019 6:32 pm
Forum: Announcements
Topic: v6.42.11 [long-term] is released!
Replies: 42
Views: 6539

Re: v6.42.11 [long-term] is released!

Some bugs are not bothering users (and they like to call them "features") but are bugs nevertheless. I don't hear anybody complaining that a "non working feature" was fixed. Exatly! To be honest, i was living in a "dreamworld" that by selecting country i automatically apply to country regulations t...
by macgaiver
Wed Dec 19, 2018 3:26 pm
Forum: General
Topic: Omnitik 5 retired from Spain
Replies: 8
Views: 698

Re: Omnitik 5 retired from Spain

Discussion is happening here
viewtopic.php?f=21&t=139057&start=250
by macgaiver
Tue Dec 18, 2018 2:19 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 65588

Re: v6.44beta [testing] is released!

set frequency-mode to regulatory-domain
That works, thanks! Can this be the cause for my trouble with wireless package?
*) package - use bundled package by default if standalone packages are installed as well;
what set of packages did you have? and what did you use to upgrade?
by macgaiver
Tue Dec 04, 2018 12:16 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD naming
Replies: 39
Views: 19795

Re: RouterBOARD naming

hEX ?
mAP ? micro Access Point ?
home Ethernet eXchange
micro Access Point
by macgaiver
Mon Dec 03, 2018 2:06 pm
Forum: General
Topic: Mikrotik sniffer droped packets
Replies: 4
Views: 215

Re: Mikrotik sniffer droped packets

instead accept or drop, use jump to specific custom Firewall chain, where you can have rule that logs , and rule that accepts or drops.
by macgaiver
Mon Dec 03, 2018 12:15 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 65588

Re: v6.44beta [testing] is released!

tested beta version on CCR1072 ?
All deployments that are scheduled for deployment are stress-tested here on the table, it just happens to be bonding setup with pair of CCR1072, at that particular moment.
by macgaiver
Tue Nov 27, 2018 4:11 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 65588

Re: v6.44beta [testing] is released!

Average Joe will not know how to use iperf. I think target audience for this feature is defferent from iperf users :) But it is fun anyway: [admin@1072_bonding_test_1] > /tool speed-test 192.168.1.2 test-duration=60 ;;; results can be limited by cpu, note that traffic generation/termination performa...
by macgaiver
Tue Nov 06, 2018 5:44 pm
Forum: General
Topic: CRS125 poor throughput & low cpu load [SOLVED]
Replies: 41
Views: 1636

Re: CRS125 poor throughput & low cpu load [SOLVED]

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
is your problem - so basically no fastpath and fasttrack.
by macgaiver
Tue Nov 06, 2018 4:21 pm
Forum: Announcements
Topic: Newsletter 85
Replies: 31
Views: 8332

Re: Newsletter 85

Was hoping for some 802.11ax news... really hope there's something coming soon!
your hope is misplaced, any news like that would be saved for MUM Europe anyways, not some monthly newsletter.
by macgaiver
Fri Oct 05, 2018 7:38 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 1099

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

There are 2 modules: S-RJ01 - SFP module that have 1Gbps link to CPU and can handle 10/100/1000 Ethernet S+RJ10 - SFP+ module that have 10Gbps link to CPU and can handle 10/100/1000/2,5G/5G/10G Ethernet There are only limited amount of boards that support both 1Gbps and 10Gbps link to CPU, so you ca...
by macgaiver
Wed Oct 03, 2018 11:04 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 338
Views: 43064

Re: RB4011

Isn't this compatible with the S-RJ01 ? Someone might want to use it for some reason.

It is not shown as a related product.
i think you must use S+RJ10 instead.
by macgaiver
Tue Oct 02, 2018 6:42 pm
Forum: Beginner Basics
Topic: WPA2 preshared key brute force attack
Replies: 1
Views: 238

Re: WPA2 preshared key brute force attack

Do you search the google before posting? or at least look in the changelog?

https://blog.mikrotik.com/security/wpa2 ... ttack.html
by macgaiver
Tue Oct 02, 2018 6:40 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 21396

Re: v6.42.9 [long-term] is released!

What? You are saying on a 2011 with 6.40.x you could have 4 master ports? Two master ports per switch chip? I have never seen this work with a MikroTik SOHO device, they normally only support one master port per switch chip (so 2 master ports on the 2011). And I could similarly have four bridges on...
by macgaiver
Tue Oct 02, 2018 6:22 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 21396

Re: v6.42.9 [long-term] is released!

If you have two bridges on one chip it will only be able to hardware accelerate one of those two bridges (this was also the case before, where you could only have one master port per switch chip). Wrong, both switch chips are have hardware acceleration for traffic that happens within them, if you n...
by macgaiver
Fri Sep 21, 2018 8:31 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 338
Views: 43064

Re: RB4011

Is there a recommended SFP+ 10G Copper module that is proven to negotiate to 1G reliably? I believe it's ROS/routerboard issue. Not SFP modules issue. I wonder if S-RJ01 would work on SFP+ cage to take that SFP port into use...? I would really hate to use Switched ports for Uplink due to lack of th...
by macgaiver
Fri Sep 21, 2018 8:16 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 30592

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

*) routerboot - fixed RouterOS booting on devices with particular NAND memory (introduced in v6.43); It would be really helpful if you listed affected devices or at least product ranges. Is CCR affected? Or just MIPS maybe? Do I have to update wireless wire? This is quite important information you ...
by macgaiver
Thu Sep 20, 2018 4:44 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 30592

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Breaking the bootloader in a "stable" release... :lol:
S..t happens, but i'm loving the reaction time tho.
by macgaiver
Wed Sep 19, 2018 9:44 am
Forum: General
Topic: [ASK] allow-dual-stack-queue
Replies: 4
Views: 1283

Re: [ASK] allow-dual-stack-queue

so you have rate-limit specified? in leases
you have both ipv4 and ipv6 dhcp servers running on router?
you have client that got both ipv4 and ipv6 address?

then you should see dynamic simple queue with target both ipv4 and ipv6 address in the same simple queue, not separately as before.
by macgaiver
Wed Sep 19, 2018 9:27 am
Forum: General
Topic: [ASK] allow-dual-stack-queue
Replies: 4
Views: 1283

Re: [ASK] allow-dual-stack-queue

so that same client can use both ipv4 and ipv6 addresses and get classified under same dynamic simple queue.
by macgaiver
Thu Sep 13, 2018 1:44 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 22233

Re: v6.43 [current] is released!

admin password after upgrade EMPTY. Scared the s**t out of me.... But - no it isn't, at least not for me!! 10+ routers no such issue what devices? what version did you upgrade from? there have been rare cases in the past when part of configuration gets lost on upgrade. when was last time you Neinst...
by macgaiver
Thu Sep 13, 2018 12:51 pm
Forum: RouterBOARD hardware
Topic: 100Mb LAN - what's the point?
Replies: 13
Views: 1324

Re: 100Mb LAN - what's the point?

... and then there is rest of the world!! where every cent counts.
by macgaiver
Wed Sep 12, 2018 10:20 am
Forum: General
Topic: FastTrack slow performance
Replies: 12
Views: 975

Re: FastTrack slow performance

I lost you there - So you fixed the issue by upgrading driver on other device (endpoint of connection), and still thinking about problems in fasttrack??? Give me a break! If your device ethernet driver was flawed, it might have issues on RX buffer, and on specific receive frequency had issues to rep...
by macgaiver
Tue Sep 11, 2018 2:45 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 300
Views: 55643

Re: Winbox vulnerability: please upgrade

in some cases it was reported that device got infected from other infected device from the same (trusted) network.
by macgaiver
Tue Sep 11, 2018 1:51 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 65588

Re: v6.44beta [testing] is released!

O_o "beta"!!!! The hell just froze over!! what happened there?
by macgaiver
Fri Sep 07, 2018 4:06 pm
Forum: General
Topic: Queue tree no max and limit-at speeds
Replies: 5
Views: 408

Re: Queue tree no max and limit-at speeds

Only if you base it on some packet header fields like DSCP or TTL
by macgaiver
Fri Sep 07, 2018 12:51 pm
Forum: General
Topic: Queue tree no max and limit-at speeds
Replies: 5
Views: 408

Re: Queue tree no max and limit-at speeds

No, it will not work.

Priority is ONLY used to decide what to drop when limits are reached ( NO!, it does NOT change packet order, it does NOT put higher priority packets first) - if limits are not reached, nothing will be dropped
by macgaiver
Fri Sep 07, 2018 9:25 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 338
Views: 43064

Re: RB4011

Just looked up good old CCR1009: https://mikrotik.com/product/CCR1009-7G-1C-1Splus#fndtn-testresults Same way of testing, same type of results, at least they are consistent, and these results also for previous model was around for years, nobody had any issues :) and that was arguable more server roo...
by macgaiver
Fri Sep 07, 2018 8:41 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 300
Views: 55643

Re: Winbox vulnerability: please upgrade

I just recently remembered that i gave MT router to my far relatives, i pre-configured it with just winbox access, it was year ago, just got IP to connect to and this is what i see: Jul/28/2018 08:12:46 system,info,account user macgaiver logged in from 95.154.216.151 via winbox Jul/28/2018 08:12:46 ...
by macgaiver
Fri Sep 07, 2018 7:30 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 338
Views: 43064

Re: RB4011

One can argue about "router on a stick" SFP+ setup to lift possible limit to 15Gbps total, but i think those will not be numbers anyone is looking for. Why not? That 15Gbps is exactly the number I'd expected to see as achievable benchmark limit for this block diagram. OK, just give me a real life a...
by macgaiver
Thu Sep 06, 2018 11:04 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 338
Views: 43064

Re: RB4011

That looks like beef, not gonna lie :D I wonder where this 10G limit in charts comes from because it doesn't really look like "natural" limit. Connect all wires and run max traffic - logical direction is from SFP to all ethernets and from all ethernets back - in each direction you can get 5gbps s0 ...
by macgaiver
Wed Aug 29, 2018 2:44 pm
Forum: General
Topic: P2P missing on my new RB1100AHx4
Replies: 13
Views: 863

Re: P2P missing on my new RB1100AHx4

It is working and still working on my old router which I have not yet replaced, it blocks the use of the BitTorrent program, all the Layer7 examples I have tried are doing nothing. download different client and/or enable traffic encryption, and it doesn't work anymore. Do you know what else does it...
by macgaiver
Wed Aug 29, 2018 7:40 am
Forum: General
Topic: P2P missing on my new RB1100AHx4
Replies: 13
Views: 863

Re: P2P missing on my new RB1100AHx4

There were lots of false positives, some services were not working cause were wrongly captured by this option, so it was removed.
by macgaiver
Thu Aug 23, 2018 5:56 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Please add "Benchmark" button to Winbox IP-IPsec-Proposals
Replies: 1
Views: 345

Re: Please add "Benchmark" button to Winbox IP-IPsec-Proposals

....30MB setup file, while whole RouterOS is <12MB... :) it is not "just a benchmark button" this is whole standalone tool that have no place on the router.
by macgaiver
Thu Aug 23, 2018 5:53 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 25198

Re: v6.42.7 [current] is released!

This must be the best version in years, as this topic only complains are about changelogs one entry....

Back on topic - solid version most of network spokes upgraded, core routers will be on the weekend.
by macgaiver
Thu Aug 23, 2018 5:50 pm
Forum: General
Topic: Queues Dropped Packet [SOLVED]
Replies: 3
Views: 311

Re: Queues Dropped Packet [SOLVED]

1) queues work by dropping packets, that are over the limit
2) queue size are in bits, so "1000" = "1k", "1000k" = "1M", there are no point of limits 6291456... 6,29Mbps...
by macgaiver
Thu Aug 23, 2018 11:03 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 25198

Re: v6.42.7 [current] is released!

I can confirm that the security fixes were added to the notes after the 6.42.7 thread was already posted! Why was this? Think logically, 1) release versions in all channels with the fixes 2) wait for initial customer feedback to be double sure that version doesn't contain unexpected surprizes and i...
by macgaiver
Tue Aug 21, 2018 5:45 pm
Forum: Beginner Basics
Topic: Cannot upgrade Software and Firmware
Replies: 1
Views: 306

Re: Cannot upgrade Software and Firmware

Yes, that is issue in your installed version, AFAIK it was solved, just netinstall with "keep configuration" and all should be fine.
by macgaiver
Fri Aug 17, 2018 2:46 pm
Forum: General
Topic: Why Fast Path not active?
Replies: 4
Views: 765

Re: Why Fast Path not active?

Fastpath is just a foundation, that you need to use fasttrack.
by macgaiver
Thu Aug 16, 2018 3:15 pm
Forum: General
Topic: I've closed all service ports by mistake [SOLVED]
Replies: 4
Views: 422

Re: I've closed all service ports by mistake [SOLVED]

Yes, and there are no way to save config as disabled services are part of configuration.
https://wiki.mikrotik.com/wiki/Manual:Netinstall
by macgaiver
Tue Aug 14, 2018 4:11 pm
Forum: Announcements
Topic: WPA2 preshared key brute force attack
Replies: 26
Views: 15105

Re: WPA2 preshared key brute force attack

What's new in 6.43rc56 (2018-Aug-13 11:13):
...
*) wireless - added option to disable PMKID for WPA2 (CLI only);
...
So far all devices i tried connects just fine.
by macgaiver
Tue Aug 14, 2018 4:09 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 96036

Re: v6.43rc [release candidate] is released!

*) wireless - added option to disable PMKID for WPA2 (CLI only);
All my everyday devices still connects just fine.
by macgaiver
Tue Aug 14, 2018 1:25 pm
Forum: General
Topic: Vulnerability CVE-2018-5390 [SOLVED]
Replies: 13
Views: 1910

Re: Vulnerability CVE-2018-5390 [SOLVED]

Just a side note - it is way too easy to create those CVE-2018-xxxx entries.. Anyone stubborn enough can do it, even without any actual knowledge of the subject, i think this should be restricted to companies only, for example MikroTik should do it itself.
by macgaiver
Tue Aug 07, 2018 12:41 pm
Forum: General
Topic: 100% CPU CCR1072 due DDoS - How to improve?
Replies: 16
Views: 861

Re: 100% CPU CCR1072 due DDoS - How to improve?

close port 80 from outside use.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 34