Community discussions

Search found 1685 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 34
by macgaiver
Tue Dec 04, 2018 12:16 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD naming
Replies: 39
Views: 18528

Re: RouterBOARD naming

hEX ?
mAP ? micro Access Point ?
home Ethernet eXchange
micro Access Point
by macgaiver
Mon Dec 03, 2018 2:06 pm
Forum: General
Topic: Mikrotik sniffer droped packets
Replies: 4
Views: 143

Re: Mikrotik sniffer droped packets

instead accept or drop, use jump to specific custom Firewall chain, where you can have rule that logs , and rule that accepts or drops.
by macgaiver
Mon Dec 03, 2018 12:15 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 249
Views: 38791

Re: v6.44beta [testing] is released!

tested beta version on CCR1072 ?
All deployments that are scheduled for deployment are stress-tested here on the table, it just happens to be bonding setup with pair of CCR1072, at that particular moment.
by macgaiver
Tue Nov 27, 2018 4:11 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 249
Views: 38791

Re: v6.44beta [testing] is released!

Average Joe will not know how to use iperf. I think target audience for this feature is defferent from iperf users :) But it is fun anyway: [admin@1072_bonding_test_1] > /tool speed-test 192.168.1.2 test-duration=60 ;;; results can be limited by cpu, note that traffic generation/termination performa...
by macgaiver
Tue Nov 06, 2018 5:44 pm
Forum: General
Topic: CRS125 poor throughput & low cpu load [SOLVED]
Replies: 41
Views: 1420

Re: CRS125 poor throughput & low cpu load [SOLVED]

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
is your problem - so basically no fastpath and fasttrack.
by macgaiver
Tue Nov 06, 2018 4:21 pm
Forum: Announcements
Topic: Newsletter 85
Replies: 31
Views: 6959

Re: Newsletter 85

Was hoping for some 802.11ax news... really hope there's something coming soon!
your hope is misplaced, any news like that would be saved for MUM Europe anyways, not some monthly newsletter.
by macgaiver
Fri Oct 05, 2018 7:38 am
Forum: General
Topic: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module
Replies: 14
Views: 902

Re: S+RJ10: RJ45 SFP+ 10/100/1000M/2.5G/5G/10G copper module

There are 2 modules: S-RJ01 - SFP module that have 1Gbps link to CPU and can handle 10/100/1000 Ethernet S+RJ10 - SFP+ module that have 10Gbps link to CPU and can handle 10/100/1000/2,5G/5G/10G Ethernet There are only limited amount of boards that support both 1Gbps and 10Gbps link to CPU, so you ca...
by macgaiver
Wed Oct 03, 2018 11:04 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 294
Views: 29503

Re: RB4011

Isn't this compatible with the S-RJ01 ? Someone might want to use it for some reason.

It is not shown as a related product.
i think you must use S+RJ10 instead.
by macgaiver
Tue Oct 02, 2018 6:42 pm
Forum: Beginner Basics
Topic: WPA2 preshared key brute force attack
Replies: 1
Views: 197

Re: WPA2 preshared key brute force attack

Do you search the google before posting? or at least look in the changelog?

https://blog.mikrotik.com/security/wpa2 ... ttack.html
by macgaiver
Tue Oct 02, 2018 6:40 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 18896

Re: v6.42.9 [long-term] is released!

What? You are saying on a 2011 with 6.40.x you could have 4 master ports? Two master ports per switch chip? I have never seen this work with a MikroTik SOHO device, they normally only support one master port per switch chip (so 2 master ports on the 2011). And I could similarly have four bridges on...
by macgaiver
Tue Oct 02, 2018 6:22 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 18896

Re: v6.42.9 [long-term] is released!

If you have two bridges on one chip it will only be able to hardware accelerate one of those two bridges (this was also the case before, where you could only have one master port per switch chip). Wrong, both switch chips are have hardware acceleration for traffic that happens within them, if you n...
by macgaiver
Fri Sep 21, 2018 8:31 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 294
Views: 29503

Re: RB4011

Is there a recommended SFP+ 10G Copper module that is proven to negotiate to 1G reliably? I believe it's ROS/routerboard issue. Not SFP modules issue. I wonder if S-RJ01 would work on SFP+ cage to take that SFP port into use...? I would really hate to use Switched ports for Uplink due to lack of th...
by macgaiver
Fri Sep 21, 2018 8:16 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 26764

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

*) routerboot - fixed RouterOS booting on devices with particular NAND memory (introduced in v6.43); It would be really helpful if you listed affected devices or at least product ranges. Is CCR affected? Or just MIPS maybe? Do I have to update wireless wire? This is quite important information you ...
by macgaiver
Thu Sep 20, 2018 4:44 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 26764

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Breaking the bootloader in a "stable" release... :lol:
S..t happens, but i'm loving the reaction time tho.
by macgaiver
Wed Sep 19, 2018 9:44 am
Forum: General
Topic: [ASK] allow-dual-stack-queue
Replies: 4
Views: 768

Re: [ASK] allow-dual-stack-queue

so you have rate-limit specified? in leases
you have both ipv4 and ipv6 dhcp servers running on router?
you have client that got both ipv4 and ipv6 address?

then you should see dynamic simple queue with target both ipv4 and ipv6 address in the same simple queue, not separately as before.
by macgaiver
Wed Sep 19, 2018 9:27 am
Forum: General
Topic: [ASK] allow-dual-stack-queue
Replies: 4
Views: 768

Re: [ASK] allow-dual-stack-queue

so that same client can use both ipv4 and ipv6 addresses and get classified under same dynamic simple queue.
by macgaiver
Thu Sep 13, 2018 1:44 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 19159

Re: v6.43 [current] is released!

admin password after upgrade EMPTY. Scared the s**t out of me.... But - no it isn't, at least not for me!! 10+ routers no such issue what devices? what version did you upgrade from? there have been rare cases in the past when part of configuration gets lost on upgrade. when was last time you Neinst...
by macgaiver
Thu Sep 13, 2018 12:51 pm
Forum: RouterBOARD hardware
Topic: 100Mb LAN - what's the point?
Replies: 13
Views: 1204

Re: 100Mb LAN - what's the point?

... and then there is rest of the world!! where every cent counts.
by macgaiver
Wed Sep 12, 2018 10:20 am
Forum: General
Topic: FastTrack slow performance
Replies: 12
Views: 824

Re: FastTrack slow performance

I lost you there - So you fixed the issue by upgrading driver on other device (endpoint of connection), and still thinking about problems in fasttrack??? Give me a break! If your device ethernet driver was flawed, it might have issues on RX buffer, and on specific receive frequency had issues to rep...
by macgaiver
Tue Sep 11, 2018 2:45 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 275
Views: 40544

Re: Winbox vulnerability: please upgrade

in some cases it was reported that device got infected from other infected device from the same (trusted) network.
by macgaiver
Tue Sep 11, 2018 1:51 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 249
Views: 38791

Re: v6.44beta [testing] is released!

O_o "beta"!!!! The hell just froze over!! what happened there?
by macgaiver
Fri Sep 07, 2018 4:06 pm
Forum: General
Topic: Queue tree no max and limit-at speeds
Replies: 5
Views: 305

Re: Queue tree no max and limit-at speeds

Only if you base it on some packet header fields like DSCP or TTL
by macgaiver
Fri Sep 07, 2018 12:51 pm
Forum: General
Topic: Queue tree no max and limit-at speeds
Replies: 5
Views: 305

Re: Queue tree no max and limit-at speeds

No, it will not work.

Priority is ONLY used to decide what to drop when limits are reached ( NO!, it does NOT change packet order, it does NOT put higher priority packets first) - if limits are not reached, nothing will be dropped
by macgaiver
Fri Sep 07, 2018 9:25 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 294
Views: 29503

Re: RB4011

Just looked up good old CCR1009: https://mikrotik.com/product/CCR1009-7G-1C-1Splus#fndtn-testresults Same way of testing, same type of results, at least they are consistent, and these results also for previous model was around for years, nobody had any issues :) and that was arguable more server roo...
by macgaiver
Fri Sep 07, 2018 8:41 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 275
Views: 40544

Re: Winbox vulnerability: please upgrade

I just recently remembered that i gave MT router to my far relatives, i pre-configured it with just winbox access, it was year ago, just got IP to connect to and this is what i see: Jul/28/2018 08:12:46 system,info,account user macgaiver logged in from 95.154.216.151 via winbox Jul/28/2018 08:12:46 ...
by macgaiver
Fri Sep 07, 2018 7:30 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 294
Views: 29503

Re: RB4011

One can argue about "router on a stick" SFP+ setup to lift possible limit to 15Gbps total, but i think those will not be numbers anyone is looking for. Why not? That 15Gbps is exactly the number I'd expected to see as achievable benchmark limit for this block diagram. OK, just give me a real life a...
by macgaiver
Thu Sep 06, 2018 11:04 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 294
Views: 29503

Re: RB4011

That looks like beef, not gonna lie :D I wonder where this 10G limit in charts comes from because it doesn't really look like "natural" limit. Connect all wires and run max traffic - logical direction is from SFP to all ethernets and from all ethernets back - in each direction you can get 5gbps s0 ...
by macgaiver
Wed Aug 29, 2018 2:44 pm
Forum: General
Topic: P2P missing on my new RB1100AHx4
Replies: 13
Views: 707

Re: P2P missing on my new RB1100AHx4

It is working and still working on my old router which I have not yet replaced, it blocks the use of the BitTorrent program, all the Layer7 examples I have tried are doing nothing. download different client and/or enable traffic encryption, and it doesn't work anymore. Do you know what else does it...
by macgaiver
Wed Aug 29, 2018 7:40 am
Forum: General
Topic: P2P missing on my new RB1100AHx4
Replies: 13
Views: 707

Re: P2P missing on my new RB1100AHx4

There were lots of false positives, some services were not working cause were wrongly captured by this option, so it was removed.
by macgaiver
Thu Aug 23, 2018 5:56 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Please add "Benchmark" button to Winbox IP-IPsec-Proposals
Replies: 1
Views: 266

Re: Please add "Benchmark" button to Winbox IP-IPsec-Proposals

....30MB setup file, while whole RouterOS is <12MB... :) it is not "just a benchmark button" this is whole standalone tool that have no place on the router.
by macgaiver
Thu Aug 23, 2018 5:53 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 22573

Re: v6.42.7 [current] is released!

This must be the best version in years, as this topic only complains are about changelogs one entry....

Back on topic - solid version most of network spokes upgraded, core routers will be on the weekend.
by macgaiver
Thu Aug 23, 2018 5:50 pm
Forum: General
Topic: Queues Dropped Packet [SOLVED]
Replies: 3
Views: 244

Re: Queues Dropped Packet [SOLVED]

1) queues work by dropping packets, that are over the limit
2) queue size are in bits, so "1000" = "1k", "1000k" = "1M", there are no point of limits 6291456... 6,29Mbps...
by macgaiver
Thu Aug 23, 2018 11:03 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 22573

Re: v6.42.7 [current] is released!

I can confirm that the security fixes were added to the notes after the 6.42.7 thread was already posted! Why was this? Think logically, 1) release versions in all channels with the fixes 2) wait for initial customer feedback to be double sure that version doesn't contain unexpected surprizes and i...
by macgaiver
Tue Aug 21, 2018 5:45 pm
Forum: Beginner Basics
Topic: Cannot upgrade Software and Firmware
Replies: 1
Views: 242

Re: Cannot upgrade Software and Firmware

Yes, that is issue in your installed version, AFAIK it was solved, just netinstall with "keep configuration" and all should be fine.
by macgaiver
Fri Aug 17, 2018 2:46 pm
Forum: General
Topic: Why Fast Path not active?
Replies: 4
Views: 573

Re: Why Fast Path not active?

Fastpath is just a foundation, that you need to use fasttrack.
by macgaiver
Thu Aug 16, 2018 3:15 pm
Forum: General
Topic: I've closed all service ports by mistake [SOLVED]
Replies: 4
Views: 353

Re: I've closed all service ports by mistake [SOLVED]

Yes, and there are no way to save config as disabled services are part of configuration.
https://wiki.mikrotik.com/wiki/Manual:Netinstall
by macgaiver
Tue Aug 14, 2018 4:11 pm
Forum: Announcements
Topic: WPA2 preshared key brute force attack
Replies: 25
Views: 11135

Re: WPA2 preshared key brute force attack

What's new in 6.43rc56 (2018-Aug-13 11:13):
...
*) wireless - added option to disable PMKID for WPA2 (CLI only);
...
So far all devices i tried connects just fine.
by macgaiver
Tue Aug 14, 2018 4:09 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 89137

Re: v6.43rc [release candidate] is released!

*) wireless - added option to disable PMKID for WPA2 (CLI only);
All my everyday devices still connects just fine.
by macgaiver
Tue Aug 14, 2018 1:25 pm
Forum: General
Topic: Vulnerability CVE-2018-5390 [SOLVED]
Replies: 13
Views: 1762

Re: Vulnerability CVE-2018-5390 [SOLVED]

Just a side note - it is way too easy to create those CVE-2018-xxxx entries.. Anyone stubborn enough can do it, even without any actual knowledge of the subject, i think this should be restricted to companies only, for example MikroTik should do it itself.
by macgaiver
Tue Aug 07, 2018 12:41 pm
Forum: General
Topic: 100% CPU CCR1072 due DDoS - How to improve?
Replies: 16
Views: 734

Re: 100% CPU CCR1072 due DDoS - How to improve?

close port 80 from outside use.
by macgaiver
Thu Aug 02, 2018 6:40 pm
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 271
Views: 19694

Re: LHG 60G experience

FYI 6.43rc51:

*) w60g - added distance measurement feature;
*) w60g - fixed random disconnects;
*) w60g - improved MCS rate detection process;
*) w60g - improved MTU change handling;
*) w60g - properly close connection with station on disconnect;
by macgaiver
Wed Jul 25, 2018 8:47 am
Forum: General
Topic: Fasttrack only working in one direction?
Replies: 2
Views: 193

Re: Fasttrack only working in one direction?

does the parent receiving interface support fastpath?
by macgaiver
Tue Jul 24, 2018 5:58 pm
Forum: General
Topic: PCC Load Balancing 2 ADSL and forcing traffic from 1 IP to a specific ADSL
Replies: 17
Views: 759

Re: PCC Load Balancing 2 ADSL and forcing traffic from 1 IP to a specific ADSL

without 2) your PCC will override your mark-connection rule for particular IP.
by macgaiver
Tue Jul 24, 2018 3:55 pm
Forum: General
Topic: PCC Load Balancing 2 ADSL and forcing traffic from 1 IP to a specific ADSL
Replies: 17
Views: 759

Re: PCC Load Balancing 2 ADSL and forcing traffic from 1 IP to a specific ADSL

1) implementation is little bit off, first 2 rules should be in prerouting chain not in input chain, like in manual example: https://wiki.mikrotik.com/wiki/Manual:PCC#Application_Example_-_Load_Balancing 2) on your connection-mark rules you do not have check, if that connections hasn't been already ...
by macgaiver
Thu Jul 19, 2018 5:28 pm
Forum: General
Topic: CRS328-24P-4S+ RouterOS upgrade [SOLVED]
Replies: 4
Views: 388

Re: CRS328-24P-4S+ RouterOS upgrade [SOLVED]

Try manually drag and drop packets to winbox file menu, AFAIK on boards with flash memory upgrade packets for upgrade will be stored in the memory not flash.
by macgaiver
Tue Jul 17, 2018 10:53 am
Forum: Wireless Networking
Topic: Secondary-channel?
Replies: 6
Views: 1038

Re: Secondary-channel?

hmm, 80Mhz+80Mhz (wave2), sound like something accidentally or intentionally slipped out about some unannounced, soon to be released hardware.
Exited!!! :D
by macgaiver
Wed Jul 04, 2018 3:15 pm
Forum: Beginner Basics
Topic: Date of last software downgrade
Replies: 6
Views: 528

Re: Date of last software downgrade

If factory version is the same as installed version you can't downgrade, board might not work on lower version, some feature or some part was not supported.

I wonder, what is this mistical version that your ISP supports and what they doesn't. And why? :)
  • 1
  • 2
  • 3
  • 4
  • 5
  • 34