A netwatch works the best in a scenario like this. Pick a static IP that is ALWAYS available via your specific gateway, BUT which you will never directly use (probably something like one of the x.root-servers.net) 1) Add this IP as a NULL route with distance 250 (if the interface goes down, this wil...

What you are trying to achieve is close to impossible (50/50 equal balance). Your inbound traffic is not as much affected by yourself as by your upstream peers & their peers. Referring to: https://wiki.mikrotik.com/wiki/Manual:BGP_Best_Path_Selection_Algorithm Generally trying to force traffic flow ...

After some more testing, Ive found the following: All 10gbps links are SFPs All access port links are copper All bridge ports are hardware offloaded CRS317 Config: bridge with vlan filtering on bridge CRS226 Config: bridge with vlan filtering in switch menu & not forwarding invalid vlan Configuratio...

That depends on whether you are using a bridge or not. In bridge mode, traffic will be switched and not routed, so normal firewall rules do not apply. In this case you have to use bridge filters In routed mode, unless you have a DNAT rule that will redirect the traffic to the local device, it will o...

What is the configuration for Wirespeed switching between CRS226-24G-2S+ and CRS317-1G-16S+ with VLANs + Filtering configured? RouterOS 6.42.6 on both CRS226 with 2x SFP+ ports trunk and all ports in bridge. All VLAN filtering configured in the Switch -> VLAN menu with "Forward Invalid VLAN" disable...

Good morning, With regards to the new RSTP implementation in ROS 6.38, how would one setup the following? 1) 3x Mikrotik AP's running WDS & Virtual AP to split guest network 2) CRS where Everything gets together 3) CCR with Router-On-A-Stick configuration How do you mix bridged Wifi-VLAN RSTP with P...

bump

Can mikrotik please sort this problem? Im even willing to put in development time just to get this security hole fixed!! Please let me know how I can help with this problem!!

*Bump* Any updates?

use unique password for each RB, as it was said =) perhaps ill just have to write my own winbox... download all the dll's off the rb's try & load them and see how it goes... If i have my own winbox password management system with filters & everything so I can display certain groups of nodes, I dont...

because it's not important =) you should just lock your router in the steel safe - and all those problems are gone away

LOL, sure if it was 1 rb... but on 600 nodes?!

hmmm still no reply... thats sad

Can someone at mikrotik please look into this and give a proper explanation as to why this cannot be done?

No comment from mikrotik?? :-/

Normis, I think you guys completely misunderstands how password hashing works. Simple Hashing would be: password_hash = algorithm(password) This has a problem in itself that one could use a lookup hash table to easily get the password. However this can be overcome by using a salt: X must be constant...