MikroTik

chojrak11

IMHO suffix trees are not the proper choice as they solve the pattern matching problem (finding a pattern inside a long string) instead of string matching. And they are not very efficient in practice because they are pointer-based (i.e. memory accesses are rather expensive) and their storage requir...

chojrak11

It took ChatGPT one second to come up with suffix trie solution, which consumes two pointers per unique domain name letter. With small caches it will take more space than text list. With larger ones containing longer domain names with same suffixes, the trie will improve storage efficiency. suffixt...

chojrak11

I'm quoting myself, because it just occurred to me that out of those 25.5 MiB source ad blocking lists only a small part was loaded (others were in the 2 formats not handled yet by RouterOS) and this small part required 130 MiB of DNS cache. So a lot more memory will have been required if all the f...

chojrak11

Also new feature - IP/DNS/Adlist: https://help.mikrotik.com/docs/display/ROS/DNS#DNS-Adlist WOW!!! That is going to be a gamechanger! But you need to improve it. It doesn't seem to be able to parse entries like this: ... The memory consumption of this feature is indeed very large. My source text fi...

chojrak11

@fichte The lists you are using are in the wrong format, not suitable for MikroTik For example: https://raw.githubusercontent.com/RPiList/specials/master/Blocklisten/DomainSquatting/AT/Hypotirol ||1hypotirol.com^ ||bbpotirol.com^ ||bypotirol.com^ ... They need to implement this format, without it t...

chojrak11

Also new feature - IP/DNS/Adlist: https://help.mikrotik.com/docs/display/ROS/DNS#DNS-Adlist WOW!!! That is going to be a gamechanger! But you need to improve it. It doesn't seem to be able to parse entries like this: ||a.ib.gazeta.pl^ ||achcdn.com^ ||ad.bitbay.net^ ||ad.docer.pl^ ||ad.facetpo40.pl^...

chojrak11

So there definitely _is_ an issue with USB disks on hAP ax^3 in 7.14rc1. Could you please reach out to me through support system? I cant recreate disk disappear issue. I will also give you modified version with different formatting tools, that will fix other mentioned problems. Done! SUP-144400

chojrak11

I can't recreate disk disappearance on my machine. I was able to do it even by simple file upload operation. Please see the screencast. Note it has approx. 75 seconds and the issue is near the end. Pay attention when the upload counter shows 400 MiB. As you can see the disk is different than in the...

chojrak11

I can't recreate disk disappearance on my machine. I was able to do it even by simple file upload operation. Please see the screencast. Note it has approx. 75 seconds and the issue is near the end. Pay attention when the upload counter shows 400 MiB. As you can see the disk is different than in the...

chojrak11

v7.14rc1 (firmware v7.14rc1) on hAP ax^3 - USB disk handling is totally broken. I upgraded from 7.13.3 because my new IoT lightbulbs did not connect to Wi-Fi with 7.13 and I saw this in release notes: *) wifi - increased value for SAE retransmit period to 3s to improve WPA3 compatibility with IoT cl...

chojrak11

So it's in the release notes for 7.13beta1, for anyone who waited for it :)

chojrak11

Hi, I travel a lot and use my laptop on many corporate networks. They block outgoing traffic like crazy. It's sometimes difficult to get a working outbound connection on anything but TCP/443 or UDP/53. While visiting such a customer I need access to my own resources which are accessible via VPN. Up ...

chojrak11

Huawei E3372 USB LTE Stick still doesn't work.

chojrak11

Did it not create an LTE interface instead? (this depends on the firmware running on the E3372 I think, did you hack that or did it always use PPP?) On the "General" tab it shows the "Port: usb1" and it was properly recognized as a USB device. No I didn't hack it, just had a fre...

chojrak11

4G USB internet via Huawei E3372 modem is not working on 7.2.1 (didn't try older 7.x). The router (RB 951G) was freshly installed via Netinstall. The ppp-out1 interface state became "running" just one time then never did that again (however it shown "Connected" but there was no I...

chojrak11

Both my hAP ac routers upgraded but lost their wireguard links to each other.

Were you able to restore the links by manually re-adding them?

chojrak11

To whoever may be interested - I just gave up and added another Mikrotik to the network. So the UTMs are in between two Mikrotik routers and it works like a charm. The planned config would be just too problematic (even if it's doable). With the second device it's easy as 1, 2, 3. Thanks to all who r...

chojrak11

Maybe you should just make bridge for ETH1+ETH2 and the second for ETH3+ETH4 and connect it with this UTM?

Thanks. Sounds interesting. I assume some policy routing will still be required? I'll check that and get back to you.

chojrak11

If the UTM is in bridge mode, why not simply connect it in-line with one of the ethernet ports? Thanks, the traffic inside the wire that would be connected to the UTM is tagged VLANs and from what I know it doesn't support VLANs (Sophos). And in real config there will be two UTMs daisy chained (cli...

chojrak11

Anyone, please?

chojrak11

Hello everyone. I need to force routing over a specific interfaces - as in the following (simplified) picture. Assume that between ether2 and ether3 there's just a cable, and no addresses have been assigned so far. The goal is to have a UTM in bridge mode plugged in with WAN interface connected to e...

chojrak11

What they should do is to replace context menu with dialog (with listbox and items with checkboxes), where you could (de)select several columns at once. And if it would also allow to reorder them, it would be even better.

Makes sense, thanks!

chojrak11

I have a crazy feature request. Abandon the current GUI framework that WinBox is using and move to QT. Yes, I know it will be a LOT of work, but it will make life easier for Mikrotik developers, and allow Mikrotik to add more features in the long run. How did you guess they have any problem with th...

chojrak11

Hi! The too-long-to-fit context menus (e.g. Show Columns) are really pain in the ass. It consumes a lot of time to reach what's required, especially that interesting items tend to be close to the end :) I propose either (or both) solutions to be implemented: 1) implement mouse wheel events, so that ...

chojrak11

This is correct. Dude doesn't run on mipsbe. Read the manual first...

Do you plan to support Dude Server on mipsbe one day? I have no x86 nor tile at my disposal, all are mipsbe ;-(

chojrak11

I've just unpacked my brand new hAP AC and having a hard time setting it up ... I've been working with Mikrotik for several years since RouterOS version 2, so it's not PBKAC problem :) What I did: - upgraded RouterOS first to 6.34.4 then to 6.35rc48 - upgraded firmware to 3.31 What rOS did it ship ...

chojrak11

Hi! I've just unpacked my brand new hAP ac (RouterBOARD 962UiGS-5HacT2HnT). I have hard time setting it up, and I'm starting to suspect hardware problem with it. Could somebody help confirming it? I'm working with Mikrotik for several years since RouterOS version 2, so it's not PBKAC problem :) What...

chojrak11

In fairness, they're already using POSIX regular expressions in scripting... Switching to PCRE is going to break a lot of scripts, and using PCRE just for the API while using POSIX for scripting is going to be confusing to people. If the API uses POSIX regular expressions, that's enough IMHO. A swi...

chojrak11

as i have been told some long time ago, as it is, in most cases, cheaper for router to send packets than do regexp matching, API will not have this feature. And that has to be done on client side. Unless the scripting/CLI engine is totally separate from the API engine and work totally different, I ...

chojrak11

I LOVE YOU MIKROTIK !!!

So far it works like a charm, I'm starting to test it thoroughly.

chojrak11

Wow that's impressive list of changes/fixes for 6.33 :-) Version 6.33rc36 is released. *) winbox - added poe power-cycle-ping settings to ethernet interfaces; Just small misspelligs here: 2015-10-28_16-44-12.png *) routerboard - indicate RouterBOOT type in /system routerboard print; I'm not sure it ...

chojrak11

As a networker and developer I dare say that IPv6 hotspot should be easy to implement. I think hotspot feature doesn't require full NAT implementation. It's just how Mikrotik did it. It however requires destination address/port rewriting in order to be able to redirect user to authentication web pag...

chojrak11

Hi!

Now we have the option to launch "Torch" in context menu. It would be very helpful to also have option "Packet sniffer" in the same places to immediately start sniffing on selected interface.

Thanks in advance!

chojrak11

Dude was never a management tool. It is a monitoring tool with a map view. Most it could do is run an external program like Winbox or do SNMP walk. It is a nice tool, but let's not overstate what it is. Normis, it is you who **understate** usefulness of The Dude. You aren't real users of Mikrotik. ...

chojrak11

Imagine a company writing "routing the world" in their logo, but saying us that their managment platform is a "hobby project" ! This is really unbelivable. No one is asking the Dude for free. Make it licensed and paid ! Design to have yearly licenses and obligation to run on a d...

chojrak11

Dear Network Engineers and The Dude users, In my last effort to see The dude alive i´m creating a online petition in Change.org asking Mikrotik to release The Dude Source Code. I signed the petition. Hoping to see the Mikrotik management reading this I can suggest the alternative to releasing code,...

chojrak11

Dear Network Engineers and The Dude users, In my last effort to see The dude alive i´m creating a online petition in Change.org asking Mikrotik to release The Dude Source Code. I signed the petition. Hoping to see the Mikrotik management reading this I can suggest the alternative to releasing code,...

chojrak11

The feature is great, however its user interface is confusing. I think the fast-track rule shouldn't just mark connections, but should automatically work as "Accept", so that the packets don't fall through to the next rule which is in 100% Accept. That's really weird. I'd expect that only ...

chojrak11

Is it normal that both fasttrack and accept counters increment equally?
I'd expect the second rule to only catch packets that were not matched by the first one. So... is the fasttrack feature working at all?

2015-06-08_11-39-28.png

chojrak11

But regex is available in scripting/SSH... Yeah that mismatch is weird. So I can put a "burden" on a router using SSH, but I cannot do the same using API? Where's the logic? You could implement this with at most 30 minutes of coding, and let users decide if it's useful or not. These autoc...

chojrak11

If you call that "easy"? Well, what can I say. Just a 'default ' winbox loader that can be adjusted by the user would make life so much easier. My employees already decided not to use the new winbox loader anymore. In stead of making your life easier it just became much more complicated w...

chojrak11

My other problem is with log window. I don't know whether it's caused by my 125% DPI setting (otherwise fonts are too small) or something else, but the time is not fully visible, and that column is not resizeable. Thus it's hard to correlate events from log (especially when troubleshooting new custo...

chojrak11

I don't know if this is a winbox feature or ROS, but when can we finally select and copy parts of the log output in winbox? Sometimes you are just trying to figure out what happened by digging through the log. But there is so much info and specially when you want a quick look into when and how many...

chojrak11

I would like copy paste of rules between different sessions! Eg i mark one firewall rule right click it and copy. I go to another session and i paste it. You can do it easily today. Just open a terminal, enter /ip firewall filter export (or nat or mangle), select required rules, copy them to clipbo...

chojrak11

'sticky' rules are particularly an issue on tablets or touchpads/touchscreens. Here a accidental swipe could already disorder the rules and ruin your setup...

So thanks for confirming that it's not just me, now let's hope it'll get implemented

chojrak11

First thing - I'm positively amazed by the progress done for Winbox. I've got a small, simple suggestion. Please make an option to disable/enable drag and drop of RouterOS configuration entries in Winbox. I'm a cautious user, but from time to time I move some firewall rules and I already locked mys...

chojrak11

First thing - I'm positively amazed by the progress done for Winbox. I've got a small, simple suggestion. Please make an option to disable/enable drag and drop of RouterOS configuration entries in Winbox. I'm a cautious user, but from time to time I move some firewall rules and I already locked myse...

chojrak11

Winbox 3 RC5 not sure if somebody else already reported, but the PPP menu disappeared. All the PPP interfaces are "there" in the general menu, but something is weird. The PPP menu is gone and also from terminal the pppoe-client is empty I had to reinstall Winbox 3 beta 3. Thanks I've got ...

chojrak11

https://lwn.net/Articles/615238/
http://netoptimizer.blogspot.fr/2014/10 ... llest.html

Hopefully RouterOS will be able to use these improvements soon

chojrak11

Give a look to http://www.netxms.org, it will surprise!

It did surprise me, honestly

I'm going to try it out.

chojrak11

Or, let us at the code .. open source

I'm telling you, there are no Dude sources anymore. I can find no other reason for missing such a business opportunity.

chojrak11

As I said in another post I think Mikrotik lost the sources and the original developer of The Dude, otherwise I can't imagine giving up on such a fantastic business opportunity. It's easy to improve The Dude and sell licenses. Literally EVERYBODY would buy license without much thinking, because ever...

chojrak11

The Dude doesn't even install on MIPSBE with RouterOS 6.14.

I think that sources of The Dude have been lost, that's why there are no updates, not even minor, for such a long time. The Dude used to be the best monitoring software ever. But it's now dead.

Anybody in charge care to respond?

chojrak11

Some new CCR optimisations that are in the next release are:

(...)
- IPsec acceleration support is coming too

Dear Normis, is it done already?

chojrak11

Sorry for stealing the thread, but I recently also had to downgrade to 6.0 from 6.1 because IPSec stopped working. 6.0 - OK, after upgrade to 6.1 - not working, after downgrade to 6.0 - everything works again.

I agree that it's really unstable nowadays

chojrak11

[admin@MikroTik] > /ip route find dst-address~"1.2.3.4/32" ...with 1 MetaROUTER running, this will finish in about 15 seconds!!![/*][/list] If you have "/tool profiler" running, you will see the "console" process taking up all CPU time on the host during the routing ta...

chojrak11

I had some of those, too... It's a real plague in the industry. https://en.wikipedia.org/wiki/Capacitor_plague
Conductive polymer aluminum solid capacitors are also shown on this page

chojrak11

I have no Karma that can be removed

Merry Christmas. Challenge accepted, your karma is now -1

Please someone do increase snowpro's karma, I didn't know it'd go to -1...

chojrak11

Reverse Path Filtering finally implemented! Thanks Mikrotik :) After updating a few routers to 6.0rc5 I observe "RX Drops" which weren't counted in 5.21. Mikrotik support answered me that RX Drops represent packets that were received by the router, but weren't destined for it. So it's not...

chojrak11

If anyone is posting Winbox problems, make sure you are tesing with latest Winbox.exe from the RC5 router. Thanks for the suggestion, after downloading fresh Winbox.exe (123KB) no changes to my RX Drops problem. Still the same -- all stats are zero in "RX Stats" tab of an interface, nonze...

chojrak11

Reverse Path Filtering finally implemented! Thanks Mikrotik :) After updating a few routers to 6.0rc5 I observe "RX Drops" which weren't counted in 5.21. I'm not quite sure what would be causing it -- the routers are different hardware on different networks and different topologies (one wi...

chojrak11

For some reason, I haven't noticed that the security package has not been upgraded! So, I uploaded it again, and now no more problems with the ssh connection. So, check that the security package is still there after an upgrade. And I 100% sure I did upload it before upgrading from 5.18 to 5.21. Che...

chojrak11

I have the same problem (no PPPoE, but over 150 PPTP users, 10-20 simultaneously active). 2-3 days uptime everything is OK, then terminal and ssh stop working. What most amazed me, I wanted to generate supout file to attach to support mail, and just after clicking "Make supout.rif" in Winb...

chojrak11

This is SSTP related problem and will be fixed in next ROS version.

Thanks for quick response. Fingers crossed

chojrak11

Good day, I appear to have a problem with the PPTP server on 5.20. When restarting the PPTP connections to the server (over 100) the server tends to drop back to the default profile instead of the selected default-encryption profile. For some reason when I use the default profile my clients cannot ...

chojrak11

We have just noticed our RB1100AH is using 100% of its CPU. When profile is selected it is recording 75-80% CPU usage on PPP? Amazing :-) I just did the screenshot and wanted to report the same issue :-) My router is 1100AHx2. Only 3 PPTP sessions plus one SSTP, no traffic (just a single packets pe...

chojrak11

Hi. Recenlty I've upgraded most of my routers to 5.18. I didn't notice any problems except my script that synchronizes configuration between routers stopped working. I've made some investigation and I've noticed that RouterOS commands executed via ssh didn't return any output, but it only happens w...

chojrak11

When adding DHCPv6 Binding, no matter GUI or command line, it is being marked as dynamic and disappears after router reboot. [admin@router] /ipv6 dhcp-server binding> add duid=00010001157dbdeadbeefc0de777 iaid=24xxxxx92 address=2001:xxxx:xxxx:xxxx::10 life-time=1:00:00 server=all disabled=no [admin@...

chojrak11

Upgrades: We would like to be able upgrade RB ros remotly in whole network Possible today, just use Dude, it's a matter of one right-click in Dude. How you imagine doing upgrade for multiple devices without central management server? I've never seen such a technology ;-) As for boot firmware, it's ...

chojrak11

Upgrades: We would like to be able upgrade RB ros remotly in whole network Possible today, just use Dude, it's a matter of one right-click in Dude. How you imagine doing upgrade for multiple devices without central management server? I've never seen such a technology ;-) As for boot firmware, it's ...

chojrak11

1) VRRP watching other VRRP interface. If I have 2 VRRPs - one on LAN side and one on WAN side, sometimes I want to switch both interfaces if one of them fails. This was discussed a few times. 2) Reverse Path Filtering - loose and strict mode - long wanted feature 3) Ability to run scripts on interf...

chojrak11

/export is very time-consuming on RB1100AHx2 when there are BGP peers configured. The complete /export lasts about 4-5 minutes. It stalls at "/ip route", so I think it looks at every route (about 783400 at the moment) to check if they are dynamic and need to be exported. Please make an imp...

chojrak11

*) winbox, webfig - sort ethernet interfaces properly when more than 10 exist; Not exactly :) Here's the output from one router (RB1100AHx2) with /queue interface export: /queue interface set ether6 queue=only-hardware-queue set ether12 queue=only-hardware-queue set ether13 queue=only-hardware-queu...

chojrak11

it seems that second board that has 0V on middle pin also has to be RMAed. Contact your reseller. There always has to be some voltage reading between middle pin ground if header is active. That alternation is as designed - if RouterOS detects that on one header nothing happens it tries to turn othe...

chojrak11

At 31C CPU on main fan there's 11.2V, on aux fan there's 12.1V. contact reseller for RMA application. Thanks, done. The one that has not turned fans on at 50 degrees C -> open box and try to plug fan on other headers, also, try to rotate pins 180 degrees and plug them back on, if you have some othe...

chojrak11

The one that has 38 degrees C and ~6K rpm is ok Thanks. The one that has not turned fans on at 50 degrees C -> open box and try to plug fan on other headers, also, try to rotate pins 180 degrees and plug them back on, if you have some other 3 pin 12V fan, you can try to attach it there, see if it w...

chojrak11

I don't understand the question. Fan off = temperature 50C Fan on = temperature 38C This is normal! There are 2 routers. Very similar load (20-30% CPU). One of them never activates fan, and the other never turns it off :-) That's the problem. I don't understand why? :-) I also have another problem:...

chojrak11

50C is very low. No problems there. Thank you very much Normis, in contrast please explain this (another router, very similar load): [admin@yyy] > /system routerboard print routerboard: yes model: 1100AHx2 serial-number: yyy current-firmware: 2.39 upgrade-firmware: 2.39 [admin@yyy] > /system router...

chojrak11

MMM MMM KKK TTTTTTTTTTT KKK MMMM MMMM KKK TTTTTTTTTTT KKK MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK MikroTik RouterOS 5.12 (c) 1999-2...

chojrak11

re-install them using netinstall to RouterOS 5.12

Thanks, I'll try that.

chojrak11

Hello, I've recently bought several 1100AHx2. Most of them after taking out from the box didn't boot. After plugging serial cable there were error messages that you can see below. cp: unable to open `/nova/lib/defconf/defconc-custom': Read-only file system /etc/rc.d/run.d/S12defconf: 42: cannot crea...

chojrak11

I also immediately want to buy 2 x 1100AH, with several more next year. Old good RB1000 are beginning to need a replacement

chojrak11

Send this info via email to: support _at_ mikrotik.com. IMO it's serious.

chojrak11

I also stumbled upon this problem today. The problem was that Mikrotik (RB1000) mysteriously stopped forwarding some new connections, as if something overflowed inside. TCP connections that were already established worked fine. Everything went back to normal just after reboot. Upon rebooting I saw i...

chojrak11

Most recent e-mails I received from you were: today - notification about your reply (but that's different address) 2010-12-23 RouterOS v5.0rc6 released 2010-12-13 RouterOS v4.14 released 2010-12-10 MUM in Europe 2011 2010-12-10 MUM in Europe 2011 announced (from support at mikrotik dot com) 2010-12-...

chojrak11

I am subscribed to the "version notify" list (with another address), but it don't work anymore? I haven't received notifications about 5.0rc8, 5.0rc7, 4.16, 4.15 and so on? I confirmed that I'm subscribed by re-subscribing, and it told me that I am already on the list. And no, it didn't go...

chojrak11

Simple filter textbox for Winbox pleeeeease

Just one textbox

I beg you

I have so many saved connections, it takes much time to find where to connect to...
Here's the idea:

chojrak11

I have added this to the feature request page of the wiki as I think it would be very useful.

Thanks, I forgot that page completely.

chojrak11

So, Dear Mikrotik developers -- this doesn't seem to be difficult to implement (as this works in Linux for ages), PLEASE consider this for the next MT version. That would be major improvement for some users.

Thanks in advance!

chojrak11

Dear all,

is this finally possible??? Or is any other way to achieve the same result (assuming large amount of dynamic interfaces)?
It allows securing against source spoofing, and potential DoSes that may arise from that.

Thanks.

chojrak11

I am glad they did update the kernel in -rc, not in final release. This is what pre-release software is for. Testing, innovating, improving and so on. I don't care whether it is called 'alpha', 'beta', 'release candidate', they can do whatever they feel will be good in the long term. If you don't wa...

chojrak11

(...) Yes, + to + wire and - to - wire on the DC side of the power supply. (...) Thanks for you help, I'll look into that. I've noticed that in your pictures there is a cap 301 next to the 309. Neither of my boards have a cap soldered on at 301, so maybe these are the newer boards? Either way, I ap...

chojrak11

What might help is to splice in a capacitor on the DC side of the power supply (spliced in-line onto the DC wires of the cable itself). If you are worried about voiding the warranty of your power supplies (understandable), you can buy short male-female 2.1/2.5mm cable adapters and splice in a cap o...

chojrak11

Thanks Grzegorz, I have never considered power supply to be a problem here, I'm gonna replace some of them and see what happens. Luckily (or not?) one of the RB433AH hangs almost every other day, so the difference will be observable immediately. If the power supply fix these problems, I'm gonna blam...

chojrak11

As we now established your brain capacity - EVERYTHING!

Normis please close this account as soon as possible, I'm not quite sure I'm discussing with human.
Thanks in advance.

chojrak11

Wait, even better solution, connect the powersupply before a 20kW HVAC drive! You will NEVER have problems with that board again

Thanks too for this extremely useful comment.
The other one, fresh RB450 is in private house, protected by a small UPS. What did I do wrong this time?

chojrak11

Specially for those retarted in the submarine - TRY USING AN UPS !!!!! And what if I already use UPS in most of those places? One RB433AH is behind 20kVA EATON 9155 looking more like big refrigerator than UPS. And it doesn't prevent it from exhibiting random shutdowns. And this is the only device i...

chojrak11

Is usage of UPS forbidden in Poland?

I'm looking for an advice, not trolling.

chojrak11

Hello, I have recurring problems with some Routerboards. The problem is that when there's something wrong with the power (like momentary power failure, or even unnoticeable fluctuations), they just become "cold". LEDs don't blink, the device doesn't work. Cold, dead, not responding. Only p...

chojrak11

Thank you both for the hints. I think it'll do the trick.

chojrak11

Hello, I need to configure NAT similar to this: # iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth1 \ -j SNAT --to 1.2.3.2-1.2.3.99 --to 1.2.3.121-1.2.3.254 (to use all addresses from /24 network excluding .1 and .100-.120) This example in modified form is taken from the bottom of: http://www...

chojrak11

The issue that you have here, is that the needs dont' outweigh the deveopment costs of such of units. MikroTik has said this a numbger of times. This makes sense to me. So they focus on simpler devices. But I expect they'll finally have to enter high-end market. It may be 5 year timeframe, but it'l...

chojrak11

hi

4.0 and 4.1 have serious bugs, stick to 3.28 at most..

B

Without any solid arguments this is just TROLLING.

chojrak11

make sure you have marked "store on disk" in your "Graphing" rules.
I've got the same problem. After software reboot the previous graphs disappear. RB450G, ver 3.30. Store on disk = yes.

Same here on RB1000 and RB450G on v4.1, I'm sending you supout.

Thanks.

chojrak11

I tested it - I pinged the following names: ping www.not-existing-site.not-existing-tld ping www.not-existing-site.com ping www.not-existing.google.com if you have set any DNS domain in DHCP or otherwise, or just to be sure, append DOT at the end to test it reliably. ping www.not-existing-site.not-...

chojrak11

Our DNS cache should add negative records, when SOA is received. Are you sure that SOA is not equal to 5 minutes (SOA parameter is specified by the owner of the DNS name). I tested it - I pinged the following names: ping www.not-existing-site.not-existing-tld ping www.not-existing-site.com ping www...

chojrak11

Hello,

RouterOS do have a really nice tool to receive files via ftp, tftp, and http, but there's no tool to send file to an ftp/tftp server.
I think it's not a big deal, and it'd be really helpful. IMO it shouldn't wait for 5.x

Thanks!!

chojrak11

when u connect it does authenticate, and u can surf for some time and then the connection goes dead, the connection is still there but no data flow.

From what you wrote you have RouterOS 3.3? Upgrade to 3.30 and check again. The upgrade is harmless.

chojrak11

@chojrak11: that sounds more like jobs for ciscos or junipers, because all these things especially the wire speed won't happen as fast as you probably need them in the mikrotik-world. maybe they put one rb with sfp-ports on the market, as thats nearly no work to do, but 10gbit on routerboards and a...

chojrak11

the most important thing would be some asics for do the routing via hardware! If I could fly for a moment: - routing AND firewalling AND conntrack AND IPSec encryption AND VLANs AND bridge in hardware - more Ethernet ports and possible SFP (one model 8x Ethernet only, second mixed 8+2 maybe and thi...

chojrak11

As far as i know you can use CHAP and MS-CHAP, but don't use MS-CHAP v2. I think that there are some issues in linux kernel regarding MPPE encryption and losing sync after few MB. It is not Mikrotik issue, it is linux MPPE issue from while ago. Yes, XP clients don't authenticate unless you disable ...

chojrak11

I think that it is possible to configure cache-max-ttl for DNS cache entries in /ip dns. Thanks for your answer, I was aware of that setting, but it alone is not enough. It limits TTL of ALL records. From what I see at the moment, the average TTL of DNS records is about 6 hours. If I set cache-max-...

chojrak11

I use DNS cache on v4.1 on RB1000 and it works pretty well most of the time. Unfortunately it also caches negative responses and it gives them 24h TTL. This is bad in case of temporary problems of a DNS domain or a DNS server. The domain is then inaccessible until the negative response expires or DN...

chojrak11

No, actually every os or device can normally work with pap authentication .

PAP is far less secure than CHAP. Using PAP is not a solution.

chojrak11

/interface ethernet reset-mac-address

Thanks... I apparently haven't done my homework...

chojrak11

Hello, I happen to have duplicate MAC addresses in one network I'm troubleshooting right now, and I suspect people just did 'export' in one device and pasted that into another one. I don't want to invent other MAC addresses nor use locally administered addresses, so please tell me the way to restore...

chojrak11

Any 3.x less than 3.27 I upgraded first to 3.30, then I updated license, then upgraded directly to 4.1. In each case I took extreme precautions, that is made backup and did /export. I also observed that sometimes in case of problematic devices, which I mean behaving oddly during the upgrade, the pro...

chojrak11

I successfully upgraded several RB1000, RB450G, RB750, RB433AH, RB493, RB493AH, RB532A, RB192, x86 devices to RouterOS 4.1. There were a broad range of technologies used in these devices, IPSec, OSPF, wireless, PPTP, L2TP, switch, bridge, QoS, sophisticated firewall, NAT, mangle, L2 firewall, to nam...

chojrak11

ROS 4.1 fixed the problem. Thanks.

chojrak11

chojrak11
try also the old Netinstall http://mt.lv/download/netinstall-3.30.zip and if it detects it, reinstall RB750 with the v3.30

if you succeed, send us supout.rif file from v3.30

Done. The email has the same subject as this topic. Thanks.

chojrak11

RouterBOARD 750 Quick Setup Guide and Warranty Information http://www.routerboard.com/pricelist/download_file.php?file_id=106 In case you wish to boot the device from network, for example to use MikroTik Netinstall, hold the RESET button of the device when starting it until it beeps and the LED ligh...

chojrak11

every person in our office is connected through a RB750 just for testing, and none had this issue. Please, if anyone else has this problem, let us know. Currently I think it's and isolated incident. Then I think my hardware may be faulty -- althought it's only 2 weeks old. Please tell me, does RB75...

chojrak11

did you use new Netinstall from the webpage, as instructed? I pulled 4.0 via Torrent from download page and the torrent contains Netintall.zip. I always use the same netinstall version as packages I want to install. The titlebar says "MikroTik Netinstall for RouterOS v4.0" so I guess it's...

chojrak11

Did you upgrade the BootLoader first?

Are you joking? This is brand new product, it cannot have old bootloader.

But yes, I also checked that and it has bootloader 2.22. I might have upgraded it after upgrading 3.x -> 4.0rc1.

chojrak11

Hello I first tried upgrading from 4.0rc1 by dragging the routeros-mipsbe-4.0.npk into files window and rebooting; it succeeded but ethernet interfaces didn't work. Then I tried netinstall; netinstall 4.0 doesn't detect RB750 as easily as netinstall 4.0rc1. After several attempts the reinstall succe...

chojrak11

http://wiki.mikrotik.com/wiki/Script#Variables

Thanks very much. That explains why my "/system reboot" scripts didn't work

chojrak11

Hello,

would anyone be so kind to write a few sentences, possibly on MT Wiki, about Scheduler Policy, what all this is about, what each setting means. I am unable to find anything useful.

Thanks in advance.

chojrak11

One of my RB433AH (previously 3.25) died. Also RB532 died (previously 3.25). [admin@xxx] > /ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE error - contact MikroTik support and send a supout file (2) [admin@xxx] > /interface print Flags: D - dyna...

chojrak11

I attached a serial cable, and it just displays: Mikrotik 3.26 Router Login: Finally, I don't know how, I managed to login to this device (I used the reset jumper on the board several times) Sorry, the inability to login was caused by my terminal emulation program (putty). I managed to rescue the s...

chojrak11

why do all of you just install new software without testing it with your configuration somwhere near you????? and then blame someboby else for that.... i dont think that there is any urgent need to update a router as far as 600km away with a brand new untested release ... 8 routers upgraded without...

chojrak11

One of my RB433AH (previously 3.25) died. Also RB532 died (previously 3.25). As for 433AH - it upgraded, and it boots, but I'm unable to connect with anything. I attached a serial cable, and it just displays: Mikrotik 3.26 Router Login: Finally, I don't know how, I managed to login to this device (...

chojrak11

One of my RB433AH (previously 3.25) died. Also RB532 died (previously 3.25). As for 433AH - it upgraded, and it boots, but I'm unable to connect with anything. I attached a serial cable, and it just displays: Mikrotik 3.26 Router Login: but it doesn't let me enter anything. It looks like 100% CPU ut...

chojrak11

First, thanks for safe mode - it's a marvellous facility that saved my life hundreds of times. I can suggest some ways of expanding it: - first - a button or checkbox in Winbox, like "Hide passwords" - when I turn it on, it's like CTRL-X; when I turn it off, it means "commit changes&q...

chojrak11

If you are still interested look at my blog

Wow THAT is really fast. Thank you very much!

chojrak11

TrueCrypt / BitLocker helps to not care about such details ;-) will they help to allow WinBox to acces his config and block other programs from accessing it? This is going OT, but I want to answer. Do you install random crap on your production laptop? Do you browse random and/or questionable sites ...

chojrak11

chojrak11, in that case plaintext passwords in text file are not prolem too =)

I never said it is a problem, TrueCrypt / BitLocker helps to not care about such details

chojrak11

isn't it possible to obtain command line parameters of any user's process in system? =) Yup. I was hoping that Winbox would do something sensible in this regard (spawn child, kill parent?), but I haven't tested it and I suspect that my optimism is unplaced! Nick. No, wait! Do you use Winbox on serv...

chojrak11

sorry, but all this looks like reinventing the wheel: (...) Q: what else i can use, i do not want to use DUDE, you should improve winbox A: DUDE is feature rich tool that can replace winbox. if you look at dude as a winbox replacement - you can simply add devices, turn all probes down, assign route...

chojrak11

winbox.cfg saves plain text passwords ! Why does not it save MD5 or SHA1 password, and not to use plan text authentification when sending password (even with secure connection). Just simply store and authentificate with MD5 or SHA1 hashed password, like many others programs. IMO this is a feature n...

chojrak11

I'm missing the option to move devices between maps. After adding e.g. 30 devices to one map, I realized that ONLY option to organize and filter them out would be the "Map" dropdown. But after adding I'm unable to move them to other map, so I suppose I'll have to drop them and recreate aga...

chojrak11

I don't think we will expand the winbox loader anymore, you must use the Dude. This is why I ask, what improvements to the Dude do you want to see, to make it usable in such way? Definitely one thing. After clicking the "thunder" icon on top left, there should be list of Dude Servers to c...

chojrak11

Normis, The Dude solution is definitely not as good as find/filter button in Winbox would be... In order to use Dude you need to run local server (because it must work even if the whole network is down). Another issue is that in Dude there is no session manager - so you cannot save credentials for d...

chojrak11

Thanks for the suggestion, I'll give it a try and report back my results. Thanks very much!

chojrak11

Why not use The Dude, which was made for this purpose? Thanks Normis for the suggestion, however I forgot to mention that the sessions are from DOZENS different customers... So they are not connected with each other and certainly won't fit on one map :-) Winbox is a great tool that manages alll of ...

chojrak11

Hello, I have DOZENS of sessions saved in Winbox. That really saves me from remembering DOZENS of IPs, usernames and passwords. Would it be possible to have some sort of "find" textbox, similar to what is in almost every window of RouterOS, that would filter displayed sessions to those con...

Search found 145 matches