MikroTik

User345135

I just encountered the same problem. Handshake suddenly failing. Changing the listening port of the wireguard interface solved it. Thanks genesispro! The connection to the peer had been up for at least two weeks.
In my case there are two Mullvad VPN interfaces. Only one was affected.

User345135

I still have 10000 milliseconds requests sometimes but it works well so I don't mind. Creating a Wireguard interface for the DNS server was useless. I just created a normal interface on the Wireguard VLAN.

User345135

Hi,

In other words, I want to connect to a socks server from the wireguard endpoint.
I have not tested this idea yet. I thought if someone would lay down the main steps it could me save me time.

Thanks

User345135

Hi

Did you set persistent Keepalive to 20-30s? It is passible, that the Wireguard drops the connection becouse of inactivití, and whwn neccessery rebuilds it.

Yes. But nevermind, I will look at it again. I probably made a mistake and it's better if fix it myself.
Are you on drugs?

User345135

Hello, I have a wireguard interface on the router and another on my DNS server. Both are connected to the same endpoint and entry node. I use this setup because I want to self-host my ad blocker. Like I said, the problem is the very high latency. https://i.ibb.co/X54Xp5q/Screenshot-from-2024-09-26-0...

User345135

Hello, I downgraded to RouterOS 7.14.3 and wifi-qcom 7.14.3 because I was getting the infamous "SA Query Timeout" error. I marked version 7.15 for downgrade and rebooted. No warning showed up in the logs and the old packages are gone. Everything appears to have gone fine. When I export the...

User345135

I just saw the line "DHCP server: unknown BOOTP client D4:01:C3:XX:XX:XX" in my logs for the first time. The MAC address belongs to the router itself. I don't know what it means. I am not familiar with bootp. Why doesn't the router know its own MAC address? I don't think I even used bootp ...

User345135

Uh-oh, the Stasi is back.

User345135

but so could you word your observation otherwise and/or elsewhere. I think I was cautious with my wording. I said I asked elsewhere too. Although strange, there's the obvious connection with what I was reading on the Mikrotik website so I thought it was appropriate/interesting to share. I clearly s...

User345135

Blaming MikroTik for setting proxy properties in your browser. You need to improve your reading comprehension or be more honest. I did not blame Mikrotik. Don't make false accusations. Also, the proxy settings were changed at the system level, not the browser. Check if your PC is compromised I don'...

User345135

Update: My computer (Ubuntu 22.04/Jammy) is still affected by the bug that disables Wayland display server protocol even though a fix has been released. Is yours too? Interestingly, it makes it easier for someone to spy on my screen. https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1968929 (Nvidi...

User345135

Hi, This morning I realized right away something was wrong because Brave browser could not access the Internet. It told me to check my proxy settings. "Weird" I thought, because I have never used those settings. Sure enough, they had been manually changed to ALL_PROXY=socks://127.0.0.1:888...

User345135

Well, it would be more user friendly if it offered existing lists (same as when you add address to address list manually). But I don't remember if it was ever there. I guess not, the whole option is relatively new, they probably just made first version that does something and that's it. I vaguely r...

User345135

Another thing... When you add a "New DNS Static Entry", is it normal that the "Address list" field remains empty at all times and you have to manually type your list?

User345135

Just a guess, you'd have to ask MikroTik how they do it. And if it's like this, only they can fix/change it.

Thanks. I'll wait a bit to see if more people want to comment before contacting Mikrotik.

User345135

the firewall blocking your traffic

Okay let me get to the point. When I ping debian.org, the first request is indeed blocked by the firewall despite the REJECT rule coming after the ACCEPT rule, meaning the address still has not been added to the dynamic list until the second request.

User345135

Which means that somebody configured it to do that. Again, the problem is that it does not do what it is configured to do Sherlock. So do you want us to start the guessing game? Otherwise post full config for review. I mean, what else am I possibly missing? I already spelled out everything there is...

User345135

The firewall blocks everything except the addresses in the dynamic list. It doesn't work quite right though. ping debian.org From 192.168.99.1 (192.168.99.1) icmp_seq=1 Destination Net Unreachable 64 bytes from 151.101.2.132 (151.101.2.132): icmp_seq=2 ttl=55 time=6.46 ms As you can see the first re...

User345135

[created by mistake]

User345135

Code: Select all
mv ~/.wine ~/.wine_backup
winecfg

It worked! Thanks.
I don't know if it was necessary but I ran

wineboot --update

again.

User345135

[duplicate deleted]

User345135

It's Wine problem, not Winbox

Use command
Code: Select all
wineboot --update 

Of course, but it's the only reason I have Wine installed. Someone might be able to help.
Your command hangs just the same.

01ec:err:seh:NtRaiseException Unhandled exception code c000013a flags 0 addr 0xea16f579

User345135

After I woke up to an unknown GPU issue and things went back to normal, Winbox now hangs until I get the error "run_wineboot boot event wait timed out", even after I ran fsck, purged Wine and reinstalled.
Fortunately the native Linux Winbox just came out.

User345135

It looks like there is a problem with my thumb drive. It is no longer listed. I reformatted to EXT4 but it's still not detected. I will reboot the router. Update: Rebooting worked. Now my disk is detected and the actual SMB/samba setting is enabled. It was not me though. It was enabled by default li...

User345135

# 2024-08-22 04:36:09 by RouterOS 7.15.3 # software id = 44TD-ER6A # # model = L009UiGS-2HaxD #error exporting "/disk" (timeout) ... #error exporting "/ip/smb/users" (timeout) #error exporting "/disk/settings" (timeout) #error exporting "/ip/smb" (timeout) ...

User345135

perhaps someone is dancing samba in your house? A hacker is very unlikely. The Mikrotik is a secondary router behind the edge router that blocks all WAN ports. It is only exposed to my home LAN and incoming connections are restricted to management VLAN except for DNS and DHCP requests. It looks mor...

User345135

good as guess as any without seeing config.

I don't think my config is supposed to be able do this. The only thing that comes to mind is the firewall perhaps.

User345135

Which release of RouterOS? Can you show an export of the smb configuration? # RouterOS 7.15.3 # software id = 44TD-ER6A # # model = L009UiGS-2HaxD # serial number = #error exporting "/ip/smb/users" (timeout) #error exporting "/ip/smb" (timeout) #error exporting "/ip/smb/sha...

User345135

Doing a port scan shows port TCP 445 is open even though samba is disabled.
Executing

/ip smb print

hangs until the error message

action timed out - try again, if error continues contact MikroTik support and send a
supout file (13)

is returned.

User345135

Are you talking about neighbor discovery or actually connecting? Are you able to connect if you manually enter the MAC address?

I am talking about Winbox not discovering the device and not connecting with the MAC address.
I'm on Ubuntu 22.04.4 LTS.

User345135

Does your linux run any kind of firewall or SElinux? These two may interfere with winbox and mac connectivity. I use Portmaster. It didn't prompt me to unblock anything. I also tried disabling it. I have Apparmor. Disabling it didn't work either. What I should do next is try with a different Linux ...

User345135

The 3rd party linux mactelnet client ia reportedly incompatible with recent (like: last few years) ROS versions.

Just to be clear, I am talking about Winbox (MAC-ADDRESS), which is not a third-party client.

User345135

I decided to reset the configuration. Mactelnet still doesn't work on my Linux machine but I confirmed it does work with a fresh Windows install. I will let it be and move on.

User345135

Save yourself and anyone else a bit of trouble and post your config ...

I just did. I posted just part of it to save time. If everything looks good. I will look elsewhere.

User345135

Winbox can connect with the router's IP address. Only mactelnet does't work. Did you mess with the interface lists ? Yeah, I added ether2 to LAN because this port was connected to the switch, but maybe I was not supposed to do that. Either way winbox can't connect via mactelnet. Here are my addresse...

User345135

It's weird that I can connect with SSH and webfig but winbox still can't see the router.

User345135

Now internet is back but I lost connection with the router. I can ping the IP but neither webfig or SSH respond. I didn't touch the firewall. Wireshark is complaining of TCP retransmission on port 22. "TCP Port numbers reused". No winbox, no webfig, no SSH. That's not fun. EDIT: connection...

User345135

Anything in your own config that would be blocking WinBox? Best bet is post your configuration - else we're mostly guessing. Everything was working fine before but I must have messed something up somewhere in the firewall and interfaces configuration. I don't remember how exactly I had configured t...

User345135

deleted

User345135

New router ? Default configuration ? Does your computer gets IP address from the router ? If it does can you access webfig ? It's my own config. Yes I get an IP from the router. Thankfully I was able to connect with SSH and enable and connect with webfig. Winbox is still broken though and I would l...

User345135

Hello,
I have a cable plugged directly into ether2 from my desktop running winbox. I tried ether1 and even ether3.
When I run the arp command I can see the router but winbox can't.
Of course I can't connect either, otherwise I wouldn't be here.

User345135

I reset the router again and now the default wireless network is showing and the firewall rules are back. Not sure what went wrong the last time but I suspect I plugged the cables incorrectly.

User345135

Nevermind. I will get it done.

User345135

Then connect to the first RJ45 interface, that should be refered to as ether1 internally.

I'm connected via ether2. Why not? Internet access?
Should I use winbox if I have no console?

User345135

Thanks.

Connect RJ45 to ether1 and console cable to well CONSOLE and then through the console cable:

I only have 8 RJ45 ports, 1 USB port and 1 SFP port.

User345135

I found out the router kept my exported config file so restoring should be easy. It even saved a pre-reset backup file but I can't edit that one

User345135

Okay I'm finally connected to the router but there is still no wifi network. There is a new red error message that says "no connection to CAPsMAN".
I need to learn how to list and install packages.

User345135

Connect the router with a cable and use Winbox to connect via Mac address

I wish I had known this before.

I'm willing to try later after I have slept but can someone explain why the factory reset is not working?

User345135

Download extra packages that match your version of RouterOS. Place the wifi-qcom file in the Files folder (using Winbox, for example) and reboot the router I don't understand. It was working when I unboxed it. Why should I need to add packages? I'm locked out of the router. That's why I'm trying to...

User345135

Have you installed the wifi-qcom package?

Uh... no. I don't even know what you are talking about. Why should it matter? I'm just trying to factory reset.

User345135

[post deletion doesn't work]

User345135

Hello,

After trying to reset the L009UiGS-2HaxD-IN router to the factory settings (pressing the reset button then powering it on and release the button once the green LED flashes), my configured wireless networks are gone but the default wireless network does not appear.

User345135

192.168.0.0/16 is my main LAN and I have a guest network at 172.16.0.0/12. It's wrong to allocate so much space to IPs: I don't think you have ~65024 devices in the main network, as I don't think you can have (on a single wifi then...) ~1040384 guests. All it takes is a stupid antivirus or an IP sc...

User345135

YOu need to post the latest config WITH the recommended changes that you claim does not work. THen we can make progress. DNS works with a guest bridge now so I'm not sure I want to give it another shot with just one. If all the tutorials I've seen are using a guest bridge, it's probably good enough...

User345135

Probable because you have not taken the guest_wifi interface off of the /interface bridge port settings yet. But then I can't connect to guest wifi anymore. I will go back to using a guest bridge for the time being. So back to my original question: how do I make the router a DNS proxy for the guest...

User345135

I gave it to you in the config What you posted seems to reflect my config except the "MGMT" part. I have not copy-pasted literally because annoyingly the terminal doesn't allow pasting and I have not setup SSH. So far even though the guest_wifi interface is associated with the 172.16.0.0 ...

User345135

/ip neighbor discovery-settings
set discover-interface-list=MGMT

input does not match any value of discover-interface-list

User345135

Why do you ask, I gave it to you in the config!!!
add address=172.16.0.1/12 interface=guest_wifi network=172.16.0.0

I already have this.
I thought you were quoting me so I ignored the wall of text.
I'm using the webfig but let me take another look.

User345135

we assign the guest wifi port the Ip address. Where can I do that? The guest_wifi port has no option that I know of to specify a network, and in DHCP server > guest_wifi interface with guest_pool, I get the error "Couldn't change DHCP Server <guest> - can not run on slave interface (6)" A...

User345135

No, the guest network accesses the guest pool 172..........., where do you see them getting any other IP addresses?

Bear with me. I'm new. I'm trying to clarify what you said.
I still have not figured out how to use only one bridge.

User345135

Should try to only use ONE Bridge where possible. In this case you dont need two bridge. All the tutorials I followed for creating a guest wifi did it this way. Simply assign the wifi interface the appropriate address as the second subnet. You mean I have to make the guest pool a subnet of 192.168....

User345135

Can you share your current config? The 9.9.9.9 DNS server is temporary. RouterOS 7.13.5# /interface bridge add admin-mac=REDACTED auto-mac=no comment=defconf name=bridge add name=bridge_guest /interface wifi set [ find default-name=wifi1 ] channel.band=2ghz-n .frequency=2300-7300 \ .skip-dfs-channe...

User345135

Hello,

192.168.0.0/16 is my main LAN and I have a guest network at 172.16.0.0/12.

I want the router to query my private DNS server at 192.168.x.x on behalf of the clients in the guest network.

How would I do this?

User345135

Weird.
I wonder how odns-scanner.research.netd.cs.tu-dresden.de was able to reach my pi-hole.

User345135

[*] The IP address of bridge_guest feels wrong. Change the address to 172.16.0.1/16

Nice catch. Let's see...

Edit: It works!

User345135

I discovered the disconnection issue with the guest network only affects my Android phone.
Also, even if a device on the guest network can stay connected, it cannot ping the gateway. I get the error "no route no host".

Thanks.

Please export and post the config.

[config removed]

User345135

Hello,
my main wifi is working but the guest wifi is connecting and disconnecting right away in a loop.

Search found 67 matches