MikroTik

kirshteins

Not sure if this is how it works or if I'm just not doing things incorrectly but I have RSTP enabled on a bridge with 4 ports. I loop two of the ports together with another switch just to test and start pinging the the mikrotik and it shutdown down all the ports in the bridge - even the two other p...

kirshteins

I can confirm this problem - I need to set a port to 100/full manually, but the switch configures it as 100/half. If I refresh the page with link settings the checkmark before "full duplex" disappears. I need to be able to manually force 100/full, how do I do that? Make sure the other end...

kirshteins

SEXTANT G-5HnD supports up to 300 Mbps data rate. Are both HT RX and TX chains enabled? Please provide you configuration. You can export it with the following command:

/interface wireless export

Also you can send supout.rif file to support@mikrotik.com.

kirshteins

What do you mean by "main menu"? Do you still get any error messages?

kirshteins

Yes, it is running 6.0 RC15

Does RC15 break upgrading?

One of the pre-release build for rc15 had this problem with upgrading. Netinstall if you see "broken package routeros-mipsbe-6.1.npk" message.

kirshteins

RB2011UAS-2HnD-IN Tx Power Problem ROS V6.1 and V6.0 (Firmware 3.08) On wireless tab Frequency Mode set: manual txpower Country: no_country_set Atenna Gain: 0 Tx Power tab Tx Power Mode set: card rates Tx Power set: 18 dBm Current Tx Power tab show all rates = 30 dBm Total Tx Power Why is it so? Or...

kirshteins

I've downloaded this 3 times, with the auto-updater and also direct from the website and dragged it into winbox. Every time, after rebooting, it does not upgrade. The log says "broken package routeros-mipsbe-6.1.npk" Is this router running one of the last rc versions? In that case try net...

kirshteins

You can drop BPDU packets with destination MAC address 01:80:C2:00:00:00.

kirshteins

Filter can only match packets by this value and cannot change it. Change max-message-age value of the bridge interface.

kirshteins

Which device stopped responding? Did you tried to troubleshoot using ping and trace-route?

kirshteins

Follow this guide: http://wiki.mikrotik.com/wiki/Password_reset

kirshteins

Is this the only Routerboard that you have problem accessing via serial port? Make sure you serial terminal baud-rate is set to 115200.

kirshteins

So how does the router powered through 10m cable work differently?

kirshteins

Route with dst. 192.168.20.0/16 will only route to your local network. Try using 0.0.0.0/0 instead.

kirshteins

Switch chip features depend on the hardware chip itself.

kirshteins

Have you configured you default gateway (default route) in /ip router section?

kirshteins

Does the RB433 starts up when using 10m cable? Please describe power supply and PoE adapter that you are using.

kirshteins

Here is a good article about initial configuration: http://wiki.mikrotik.com/wiki/Manual:In ... figuration
You can also use Quickset for the most basic configuration: http://wiki.mikrotik.com/wiki/Manual:Quickset

kirshteins

Rapid spanning-tree protocol capabilities are only available for the bridge.

kirshteins

There is burst feature: http://wiki.mikrotik.com/wiki/Manual:Queues_-_Burst

kirshteins

This problem is fixed in RouterOS v6.x

kirshteins

Auto-negotiation needs to be enabled on both ends if you want gigabit link to be established.

kirshteins

Currently it is not possible. We have this feature on our TODO list, but currently it is not know when it will be implemented.

kirshteins

Such ping times are normal. 250GS does not have powerful CPU to generate ping response faster than that.

kirshteins

Yes, we added the support, but we do not have such card for tests. Please test and let us know if you experience any problems.

kirshteins

It does not work at gigabit speeds... it does not negotiate at gigabit but at 100mbit, if I try to force it to gigabit it does not work. Comp has intel gigabit card (Intel 82566MM) which works ok at gigabit speeds with Dell, Cisco, also mikrotik RB450G and RB493G but not with RB2011UAS-2HnD-IN. JF ...

kirshteins

By default device running RouterOS runs a simple FTP server. The additional USB storage will show up as folder in RouterOS files.

kirshteins

Yes, mark connection first and the mark packets based on connection mark.

kirshteins

If you cannot connect through other interfaces or serial port there is not other choice but to visit that remote location. CLI, Winbox and Webfig has safe mode feature that can easily recover from such accidents http://wiki.mikrotik.com/wiki/Manual:Console#Safe_Mode

kirshteins

Please send a reports with supout.rif files to support@mikrotik.com. We will examine what could be causing this problem.

kirshteins

Simply try blocking 443/TCP to
66.220.144.0-66.220.159.255
69.63.176.0-69.63.191.255
204.15.20.0-204.15.23.255
IP addresses

kirshteins

Thank you for the report. We will add support for this card in next release of RouterOS v6.

kirshteins

i tryed netinstall using wine (In archlinux), 9/2012 and it shows som bind bootp failed...error...

Try running Netinstall as superuser.

kirshteins

1. What exactly was not working as expected? There are many improvements for the PoE-out in firmware that comes together with RouterOS v5.20 . Its recommended to upgrade. http://wiki.mikrotik.com/wiki/Manual:PoE-Out 2. VLAN tagging, trunking, stripping is supported by RouterOS bridging together with...

kirshteins

If you need to use all 10 ports in one group it would be best to use bridge. Here is an example that covers simple VLAN trunking with bridge: http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment

kirshteins

mdix-enable works only for RB500.

kirshteins

Try to reinstall this router with Netinstall: http://wiki.mikrotik.com/wiki/Netinstall

kirshteins

Please export and post the NAT rules.

kirshteins

Auto-MDIX is enabled by default in RouterOS and you cannot disable it.

kirshteins

Do you mean FTP forwarding? http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP
Make sure FTP NAT helper is enabled.

kirshteins

From your network diagram it is not possible to determine the source of the loop. Try to limit broadcast storm with broadcast storm control feature:

http://wiki.mikrotik.com/wiki/SwOS#Forwarding_Tab

kirshteins

Is protocol-mode=rstp set on WDS bridge interface?

kirshteins

There is no Routerboard 1300AH. Did you mean RB1200 or RB1100AH? VLAN tagging, untagging and forwarded is possible on all Routerboard models using bridge feature.

kirshteins

Sorry for resurrecting this old thread, but how is it possible? We have 2 Mikrotik SXT-5HNDs and we would like to manage them remotely. At this time, we can only access them when the pc is on the same VLAN or connected to the same switch.

Yes, it is possible to manage RB250GS remotely.

kirshteins

If ping fails with "no route to host" then you should add specific route for network of this address or add default gateway.

kirshteins

VLANs are not necessary in this case. Please post your configuration if possible. Also point out which network cannot access internet.

ros code

/export compact

kirshteins

Block
66.220.144.0-66.220.159.255
69.63.176.0-69.63.191.255
204.15.20.0-204.15.23.255
address ranges and you should be fine.

kirshteins

Try following this guide: http://wiki.mikrotik.com/wiki/Password_reset

kirshteins

There is some traffic that will go only through the switch chip and no CPU of the router. You can change that with these features.

kirshteins

1) Switch rules can do basic traffic filtering. Copy to CPU will send copy of the traffic to CPU while redirect to CPU will send actual traffic.
2) You switch ports by assign master-port to slave ports, so master-port is a must for such configuration.
3) There is a mirroring feature.

kirshteins

From http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP:

SSTP also supports BCP which allows to bridge SSTP tunnel with local interface.

kirshteins

You cannot configure VLAN header mode for CPU ports, so any VLAN tagged traffic remains unchanged. Exactly what configuration are you trying to achieve with VLAN table?

kirshteins

Take a look a this example: http://wiki.mikrotik.com/wiki/Manual:BC ... _bridging)

kirshteins

Do you mean something like bridging all ports. Adding VLAN interface on top of this bridge and then adding IP address to VLAN interface?

kirshteins

Switched traffic is not going through the CPU, so you should handle VLAN with bridges and VLAN interfaces. Here is an example: http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment

kirshteins

Please export and post your NAT rules here. In diagram it says TCP for the NAT rule. Is it UDP or TCP traffic you are trying to forward?

kirshteins

Is the traffic from ISP VLAN tagged or do want to tag traffic going through your router?

kirshteins

The CPU of RB450G does not support jumbo frames, so this features is also not supported for the switch chip.

VLANs are managed in sligtly different way in RB450G. You can check out the following example:
http://wiki.mikrotik.com/wiki/Switch_Ch ... heros_8316

kirshteins

Currently you problem is not clear to me. Please try explaining with more details.

kirshteins

Disable this interface from neighbor discovery. For example,

/ip neighbor discovery disable ether1

kirshteins

It is not possible to mirror traffic from Wlan port to ethernet port. You can mirror traffic between switch chip: http://wiki.mikrotik.com/wiki/Switch_Chip_Features#Introduction http://wiki.mikrotik.com/wiki/Switch_Chip_Features#Port_Mirroring If you are routing or bridging traffic from Wlan interfa...

kirshteins

Switching mode is configured by setting master-port. If master is not set there is no switching.

kirshteins

What do you mean by "switch modus"? By default RB493AH ports are not switched.

kirshteins

It is explained in packet flow diagram: http://wiki.mikrotik.com/wiki/Packet_Flow

kirshteins

It is best to use queues for limiting bandwidth http://wiki.mikrotik.com/wiki/Manual:Queue

kirshteins

You can bridge those networks or setup routing.

http://wiki.mikrotik.com/wiki/Bridge
http://wiki.mikrotik.com/wiki/Testwiki/IP_routing

kirshteins

No it is not possible. SwOS works only on RB250GS.

kirshteins

Yes, exactly.

kirshteins

You cannot mirror all switch group traffic by mirroring the master-port. You can add switch rule and set any port as mirroring-source: http://wiki.mikrotik.com/wiki/Switch_Ch ... Rule_Table

kirshteins

Is there enough storage space for the file?

kirshteins

Rkvikstad,

Please read http://wiki.mikrotik.com/wiki/Manual:First_time_startup and http://wiki.mikrotik.com/wiki/Manual:In ... figuration. It cover the most basic things about configuring Mikrotik routers.

kirshteins

You need to configure DHCP client: http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Client

kirshteins

RB750GL switch is quite limited when working with VLAN, but you can achieve this using bridge and VLAN interfaces. Take a look at this example to get the idea: http://wiki.mikrotik.com/wiki/Vlans_on_Mikrotik_environment Currently such VLAN management at hardware is possible on router with AR8316 swi...

kirshteins

Do not load backups generated on different routerbaord models. Use "export compact" -> "import" instead to transfer configuration. Try resetting router with this method: http://wiki.mikrotik.com/wiki/Manual:Password_reset or reinstall using Netinstall: http://wiki.mikrotik.com/wi...

kirshteins

Do you mean something like:

/ip firewall filter print stats interval=1

kirshteins

Use public IP, if you need to forward traffic coming to public interface.

kirshteins

What address are you using to connect to the router? Please provide some more details like routes and firewall rules.

kirshteins

Make sure you masquerade NAT rule is correct. Also trace-route might help you to diagnose where the problem is.

kirshteins

Firewall rules can be exported by "/ip firewall export" 3 X ;;; FTP to FS chain=dstnat action=dst-nat to-addresses=10.0.0.80 to-ports=21 protocol=tcp dst-port=21 When enabled this rule will forward all TCP/21 traffic ti 10.0.0.80. Specify in-interface or dst-address to apply it only for pu...

kirshteins

From what version to what version did you downgrade? You can reinstall RouterOS with Netinstall: http://wiki.mikrotik.com/wiki/Netinstall

kirshteins

The following guide covers basic configuration: http://wiki.mikrotik.com/wiki/Manual:In ... figuration

kirshteins

Please describe how are you testing this link? Are you using the same routers with bonded interfaces for generating traffic? What is the CPU load?

kirshteins

Perhaps you can use BCP bridging feature: http://wiki.mikrotik.com/wiki/Manual:BC ... _bridging)

kirshteins

Was it accessible via SSH or telnet?

kirshteins

Do you mean multiple VLAN on access port? If so, how do you determine what VLAN-ID is set for a specific packet?

kirshteins

How will if I use RB250 (SwOS) with RouterOS? Does SwOS can do this?

SwOS has Broadcast Storm Control: http://wiki.mikrotik.com/images/9/9c/Sw ... arding.png. You can limit how many broadcast frames per second will be forwarded by each port (e.g. 1k f/s, 2k f/s etc.).

kirshteins

What baud-rate are you using on your computer? Routerboards by default use 115200 baud-rate.

kirshteins

How many hosts are there in host table, how much traffic is going through the switch and whats the ping latency?

kirshteins

Take a look at http://wiki.mikrotik.com/wiki/Packet_Flow. "Destination NAT" is before "Filter Forward", so you need to accept dst-port=8443 not dst-port=48443 traffic.

kirshteins

Make sure the access not blocked by ip firewall filter or disabled by ip service.

kirshteins

Try specifying in-interface or public IP address as dst-address for ";;; ips webfront" rule.

kirshteins

Try adding new-dst-ports=ether1 to the second rule.

kirshteins

Simply add bridge interface

/interface bridge add

and add ports one by one

/interface bridge port add bridge=bridge1 interface=ether2
...

kirshteins

RB450G has been successfully used in many production networks and we haven't observed any packet drops or other problems. Please describe what switches are you connecting to RB450G. How is the auto-negotiation, speed and duplex mode configured on both ends? Perhaps there is some specific traffic cau...

kirshteins

Please post what type of switch chip does this router have. You can check it with

/interface ethernet switch print

kirshteins

we would well welcome the default gateway option - since we would like to monitor those device remotely from a central location.
Thanks!

It is already possible without default gateway option.

kirshteins

Try adding a dst-nat rule that redirects traffic based on specific src-addresses. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

kirshteins

Use "/export compact" introduced in latest RouterOS version.

kirshteins

Make sure DHCP client is supposed to get default gateway from the DHCP server.

kirshteins

There are no "/ip firewall rule" sub-menu, but there are "/ip firewall filter", "/ip firewall nat" and "/ip firewall mangle". You can simply use this syntax 192.168.2.1-192.168.2.50 whenever you need to specify a range of IP addresses.

kirshteins

Take a look at http://wiki.mikrotik.com/wiki/IPIP and http://wiki.mikrotik.com/wiki/Manual:Interface/Gre.

kirshteins

It seems you need to masquerade such traffic: http://wiki.mikrotik.com/wiki/Hairpin_NAT

kirshteins

What kind of traffic is incoming. Do you experience some kind of network loop?

kirshteins

Perhaps you can bridge or switch networks together. Then do src-address filtering on gateways to drop traffic from one of the offices.

kirshteins

You can use this method: http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy
You will need to specify redirect-to.

kirshteins

Try trace-routing to some internet address. It might give you some information where the problem is.

kirshteins

What step is unsuccessful? What error message are you getting?

kirshteins

Are you able to access internet from router itself? Please post you DHCP server configuration.

kirshteins

Simpy add masquerade NAT rule with public interface specified as an out-interface.

kirshteins

MAC Winbox communicates with router using data link layer (layer2). Web browsers cannot do that.

kirshteins

Use shift+insert or middle mouse button to paste into Putty.

kirshteins

Bridging master ports is the only option in this case.

kirshteins

Try upgrading to RouterOS v5.13. Send autosupout.rif file to support@mikrotik.com if problem persists.

kirshteins

You must use unique name for each VLAN interface.

kirshteins

Nearly all of those questions are covered in the manual:

http://wiki.mikrotik.com/wiki/VLAN

kirshteins

need to configure both Vlan trunk & access port in Mikrotik 1100 AH . port 1 to 8 will be the access port with different VLAN and port 10 will be trunk port .. This configuration is not possible as ether1-ether5 and ether6-ether10 belongs to separate switch chips. However toyu cab make the foll...

kirshteins

Unfortunately Routerboard hardware does not support powering on received WOL packet.

kirshteins

Please describe the configuration of these routers. Is there are autosupout.rif file generated on the router after reboot?

kirshteins

Bridge selects port with MAC address that has smallest numerical value and not by the type of interface.

kirshteins

Have you enabled use-ip-firewall in bridge settings?

kirshteins

Try adding a bridge dst-nat rule, that will change dst. MAC address of specified source bridge to the MAC address of the target bridge.

kirshteins

Is this the configuration you are looking for?
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick

kirshteins

What device are you linking to when this problem occurs?

kirshteins

It should be fixed, just not listed in changelog.

kirshteins

There are no SwOS firmware version with an option to configure default gateway, but RB250GS can be remotely configured without VPN. It simply sends out replies to the same source IP, MAC and port where it received configuration packets from.

kirshteins

Thank you for the report. This problem will be fixed in RouterOS v5.12. Only RB1100 ether11-ether13 and RB800 ether3 ports are affected by this problem.

kirshteins

Please describe what do you mean by "access share file"?

kirshteins

It will work as one switch, but actually its two switches bridged together: switch <-> bridge <-> switch.

kirshteins

No, ether1,ether6-ether9 ports are connected to switch-chip1, so only ether6-ether9 can be slave ports for ether1. Any switch-chip1 <-> switch-chip2 traffic needs to go through the CPU.

kirshteins

Ether1,ether6-ether9 ports are connected to switch-chip1, ether2-ether5 are connected to switch-chip2. Any of the port from switch-chip1 or switch-chip2 can be configured as master-port by assigning assign other port from the same switch as its slave port. There can only be one master-port per each ...

kirshteins

Try manual power cycle.

kirshteins

What versions and what routers have this problem?

kirshteins

Through what interface are you connecting? Are you using MAC or IP address in Winbox loader?

kirshteins

Hey guys, How about if click on reset button, which is on the router case? Is it same thing click this button and do command /sys res ? No, "/system reset-configuration" generates "auto-before-reset.backup" backup file by default, while button will not. Also there are many param...

kirshteins

Only few Routerboards like 450G and 493G supports this feature in v4.x. In RouterOS v5.x it is supported on all Routerboards.

kirshteins

It seems calculation was done with /26 mask and not /18. Fixed.

kirshteins

RB1200 consumes 12-25W power. This information can be found in the manual:

http://routerboard.com/pdf/308/rb1200ug.pdf

kirshteins

In ROS v5.7 there is a know issue, where bridge could crash and appear as "unknown" interface. This bug is fixed in ROS v5.8.

kirshteins

What does "/tool profile" command show when CPU is up to 100%?

kirshteins

If you have any problems with ethernet interfaces not recognized in RouterOS, generate and send supout.rif file to support@mikrotik.com
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File

kirshteins

any good news on the mac duplications issue as you call it "MAC address cloning issue"?

Try using this feature: http://wiki.mikrotik.com/wiki/Manual:In ... protection

kirshteins

Hacker can use same MAC address as legitimate user, so blocking by MAC address is not very good solution.

kirshteins

vetusa2 , there are several ways to block traffic by MAC addresses in RouterOS. In "wireless access-list" section 00:00:00:00:00:00 MAC address value is taken as "any MAC address" and not any single numerical value. You need to use IP firewall or bridge firewall filters to block...

kirshteins

Please describe how are you blocking 00:00:00:00:00:00 MAC address.

kirshteins

You can use bridge filter to achieve this scenario. http://wiki.mikrotik.com/wiki/Bridge. Simply accept all necessary dst. and src. MAC addresses and drop the rest of the traffic.

kirshteins

Please read this article: http://wiki.mikrotik.com/wiki/Hairpin_NAT

kirshteins

Please generate supout.rif file after such lockup and send it to support@mikrotik.com.

kirshteins

Please describe how this board is powered. Are you using Mikrotik gigabit POE adapter?

kirshteins

Bridge Dst-NAT works fine for me. Are counters increasing for this rule? How do you determine that packets get dropped and where they get dropped?

kirshteins

Hello Vincent,

It is best to run this script with scheduler http://wiki.mikrotik.com/wiki/Manual:System/Scheduler

kirshteins

[url]http://<ip_of_switch>/reboot[/url] is an action of reboot button submit.

kirshteins

This is hardware feature of this board and 3M value cannot be supported.

kirshteins

Will it drop all traffic except 10.0.0.0/16 IP type?

Yes.

I want to have PPPoE and everything but 10.0.0.0/16 traffic dropped.

Take a note that ARP requests/replies will be blocked too.

kirshteins

Dst address box takes IP address range or subnet. You can also use dst-address-list:
http://wiki.mikrotik.com/wiki/Manual:IP ... dress_list

kirshteins

What error message is given when customers cannot open these web pages? Are you using web proxy?

kirshteins

From your description everything appears to be working fine. Only BDPU frames will be exchanged through WDS link to maintain RSTP topology. No other traffic will be forwarded through this link.

kirshteins

Are you adding physical or bridge interface to these mangle rules?

kirshteins

Is problem solved on both RB333 & RB433? What was the solution?

kirshteins

By default configuration all input traffic on ether1 is dropped and ether2-ether5 are switched (ether2 switch master-port; ether3-ether5 switch slave-ports). RB750 ether1 does not support switching.

kirshteins

The following example should block all ARP traffic that is not "issued from" or "destined to" 10.0.0.0/8 /interface bridge filter add action=accept arp-dst-address=10.0.0.0/8 chain=forward mac-protocol=arp add action=accept arp-src-address=10.0.0.0/8 chain=forward mac-protocol=ar...

kirshteins

What wireless card are you using? Does problem occurs on RB333 without any Wlan card? Is problem solved by upgrading firmware on RB433?

kirshteins

You can easily add them to the address list

kirshteins

This example covers all known Facebook addresses: /ip firewall address-list add address=66.220.144.0/20 disabled=no list=facebook_ip_addresses add address=69.63.176.0/20 disabled=no list=facebook_ip_addresses add address=204.15.20.0/22 disabled=no list=facebook_ip_addresses /ip firewall filter add a...

kirshteins

RB750GL configuration appears to be fine. Please check the following example on how to configure 802.1Q Trunking using SwOS
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick

kirshteins

What's new in 1.6: *) fixed problem - TCP could not work over slow or high latency links, hosts list could not be displayed; *) fixed problem - fixed SNMP use sysLocation.0 sysContact.0 & sysName.0 instead of sysLocation.1, etc; *) fixed problem - SNMP reported incorrect ifSpeed; *) made CPU re...

kirshteins

You can use routing. You need to configure VLAN interface (vlan-id=300) on RB433 and assign IP address to this interface.

kirshteins

750GL supports only very basic switching features. More info: http://wiki.mikrotik.com/wiki/Switch_Chip_Features
250GS is a dedicated switch with more switching features

kirshteins

Please describe your problem in more details.

kirshteins

Is SSH forwarding rule counters increasing?

Please post some additional configuration like: /ip address export, /interface ethernet export, /ip dhcp-server export

kirshteins

Gigabit speed can only be auto-negotiated and there will be no link if you force it. Is it problem only with ether2 or other ports as well?

kirshteins

Please upgrade to latest v5.6 it will show more advanced RX stats for ether11-ether13. Orange LED indicate that link is 100Mpbs or 10Mbps speed.

kirshteins

What version are you running. Also "/interface ethernet print stats" can give you more detailed information about RX errors.

kirshteins

You need to select s - upgrade firmware over serial port

kirshteins

Enter bootloader menu when board is booting up Press "g" and then "s" Now it time to use xmodem transfer method by Hyperterminal to upload http://routerboard.com/pricelist/get_firmware.php?id=38 RouterBOOT booter 2.29 RouterBoard 433AH CPU frequency: 680 MHz Memory size: 128 MB ...

kirshteins

It is best to use 2 option. Both LAN and WAN will have separate 1Gbps connection to the CPU in that scenario.

kirshteins

What ping error messages are receiving? Please make network diagram, because currently it is hard to understand how devices and services are connected with each other.

kirshteins

Try upgrading to latest v5.6. Test with another cable and other ports.

kirshteins

It is (R)STP setting and cannot be set directly.

kirshteins

My RB1200 reboot when enable or disable auto-negotiation on any interface. Message log: system error critical router was rebooted without proper shutdown (cause1) Is there any output on serial console while rebooting? It is recommended to send supout.rif file from this router to support@mikrotik.com

kirshteins

Try upgrading to the latest version 5.6. Also you can send supout.rif file from this router to support@mikrotik.com and we will examine your configuration. There are many factors that could cause such problem.

kirshteins

Reboot button is also not working here- have to manually powercycle. I've also had the webUI lock up seemingly at random.

What version are you running? Does up-time reset after each reset button is pressed?

kirshteins

What the purpose of static Mac address and what's the advantage?

Bridge MAC address is inherited from first (in order they were added) active bridge port. With static MAC address you can prevent MAC address jumping.

kirshteins

Make sure you enable RSTP and static MAC address for all WDS bridges.

protocol-mode=rstp admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no

kirshteins

Currently it is not possible.

kirshteins

This bug has been fixed starting from v5.0. It is recommended to upgrade to latest version.

kirshteins

What exactly do you mean by:
"Does this router generate autosupout.rif?"

Is there autosupout.rif file in files section when you log in to the router after it reboots.

kirshteins

We have fixed this bug in v5.6. It should be released soon.

kirshteins

Does freezing/rebooting leaves any output on serial console? Does this router generate autosupout.rif?

kirshteins

We found a bug in statistics and we will fix it. Let us know whether there are problems with throughput or latency.

kirshteins

Please send supout.rif file from this router to support@mikrotik.com
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File

kirshteins

What do you mean by POE in this case? RB1200 cannot be powered with PoE.

kirshteins

Try disabling the firewall and running Winbox loader with administrator privileges.

kirshteins

This problem can occur when router tries to recover from crash. Try setting the CPU frequency back to default and rebooting the router.

kirshteins

Yes,

/interface ethernet switch set numbers=0 mirror-source=ether2 mirror-target=ether5

is correct. Please describe the problem you are experiencing.

kirshteins

You can find documentation and examples here: http://wiki.mikrotik.com/wiki/VLAN

kirshteins

Yes, port mirroring is supported on this chip. More information: http://wiki.mikrotik.com/wiki/Switch_Chip_Features

kirshteins

Try to connect to ethernet ports other than ether1 using MAC address Winbox: http://wiki.mikrotik.com/wiki/Winbox

kirshteins

Make sure you have enabled "use-ip-firewall" in bridge settings. Also test with firewall rules disabled.

kirshteins

Check under "/interface ethernet switch print". If the type is "ICPlus175C", then mirroring is not supported.

kirshteins

The rule is in place on mikrotik to forward / open 3389 for the given server and when I RDP from outside, it shows its receivng packets but it won't connect.

Try alos adding UDP version of this TCP rule.

Is 1.1.1.1 your "outside" address?

Search found 592 matches

ros code