Community discussions

MikroTik App

Search found 57 matches

by russman
Wed Jan 27, 2021 4:10 pm
Forum: Wireless Networking
Topic: Terragraph
Replies: 13
Views: 2492

Re: Terragraph

official announcements will be released only after product will be closer to finishing stage. Hardware and software currently is close to that point. Looking forward to updates. Due to proximity and quantity of DN's needed to make the system reliable, and the price point of DN's from other vendors,...
by russman
Wed Dec 16, 2020 6:28 pm
Forum: Wireless Networking
Topic: Terragraph
Replies: 13
Views: 2492

Re: Terragraph

I'm eager for more information here too. To get max uplink between DN radios I'm seeing they recommend not more than 90meter separation (more if only 1Gbps uplink). Most are going for ~$2000/DN MSRP and $650/CN and we are crossing our fingers to get enough clients connected taken from DOCSIS 3 to ma...
by russman
Tue Dec 15, 2020 10:56 pm
Forum: RouterOS v7 BETA
Topic: fq_codel or cake in v7
Replies: 68
Views: 27163

Re: fq_codel or cake in v7

So I upgraded to 7.1beta3 and went into the drop down queue type options... Did they name it something other than Cake and FQ-Codel?
by russman
Thu Jul 30, 2020 4:32 pm
Forum: General
Topic: Fix NTP Client to use FQDN
Replies: 1
Views: 708

Fix NTP Client to use FQDN

We use FQDNs that point to pools of NTP servers in our routers (example: 0.us.pool.ntp.org, pool.ntp.org, etc). Unlike nearly every other product I've ever used, RouterOS immediately translates this to a specific IP from the pool and saves the IP instead of the FQDN. This is really annoying because ...
by russman
Mon Apr 29, 2019 7:33 pm
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 52499

Re: v6.44.3 [stable] is released!

I just updated some test devices to 6.44.3 from 6.44.1. SSH port forwarding was working fine before the upgrade, but did not work after. It looks like the default setting for "/ip ssh forwarding-enabled" has been changed from "both" to "remote". To fix this: /ip ssh se...
by russman
Mon Oct 22, 2018 5:24 pm
Forum: General
Topic: NTP for smips
Replies: 24
Views: 7549

Re: NTP for smips

Since SMIPS devices are designed for home usage and does have limited storage size we do not provide NTP package for such devices. SMIPS stand for small MIPS (MIPS device with limited feature set). Could someone share an example where this would be actually necessary (to run NTP server on SMIPS dev...
by russman
Sat Sep 01, 2018 4:27 pm
Forum: General
Topic: Got fq_codel yet?
Replies: 36
Views: 15252

Re: Got fq_codel yet?

thanks for the suggestion, we are looking into it for v7. currently you can use SFQ, whh is also very good Come on man, throw us a bone. Ubiquiti has it in their firewalls, I'm trying hard to not use theirs but you're not making it easy. SFQ is better than some even older more abusive options but i...
by russman
Mon Aug 27, 2018 9:07 pm
Forum: Wireless Networking
Topic: Can I do CLIENT mode WPA2 Enterprise (802.1x) PEAP?
Replies: 18
Views: 14937

Re: Can I do CLIENT mode WPA2 Enterprise (802.1x) PEAP?

Update: Digging through the logs it looks like Mikrotik is providing the "Supplicant Identity" on the general tab of the Security Profile as the EAP authentication username. So I decided to put the userman into that field and it works. Its using the Supplicant Identity as the username and ...
by russman
Mon Aug 27, 2018 7:24 pm
Forum: Wireless Networking
Topic: Can I do CLIENT mode WPA2 Enterprise (802.1x) PEAP?
Replies: 18
Views: 14937

Re: Can I do CLIENT mode WPA2 Enterprise (802.1x) PEAP?

From my mikrotik test unit I can connect to my SSIDs protected with WPA2 PSK no problem. I can connect from my laptop to my PEAP protected SSID with no problems, however, I can't connection from my mikrotik. I've went through all my settings on the NPS server and AP and tried a number of other setti...
by russman
Thu Jul 26, 2018 9:54 pm
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 603
Views: 146217

Re: LHG 60G experience

Something weird I noticed: It stopped raining since around 30 mins and suddenly the LHG60 link dropped to MCS 1 even with a good RSSI (-55 dBm): frequency: 64800 mcs: 1 phy-rate: 385.0Mbps signal: 20 rssi: -55 tx-sector: 41 tx-sector-info: left 1 degrees, up 0.6 degrees rx-sector: 96 distance: 1166...
by russman
Wed Jun 06, 2018 7:57 pm
Forum: Wireless Networking
Topic: 60Ghz 6.42.3 Bug Report
Replies: 1
Views: 832

60Ghz 6.42.3 Bug Report

When you export file on the master/ap, the export doesn't contain the SSID but it does contain the reset including the frequency and password, when you export file on the slave/stations it contains the SSID. You can manually enter the SSID into the exported file for the AP and load that without erro...
by russman
Tue Apr 17, 2018 6:11 pm
Forum: The Dude
Topic: How do I add MIBs to the dude
Replies: 15
Views: 20555

Re: How do I add MIBs to the dude

I just brought up a fresh dude CHR server on 6.42 and I'm having the same problem. Using WinSCP it says the file system is read only, can't do it in winbox ether. The directory we add them to is /dude/files/default/mibs correct? Update: I see you leave out default in the last post now. So its upload...
by russman
Mon Apr 16, 2018 6:03 am
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 46
Views: 20657

Re: IS-IS

+1 for IS-IS
by russman
Wed Apr 11, 2018 5:32 pm
Forum: RouterBOARD hardware
Topic: LHG 60G
Replies: 63
Views: 18753

Re: LHG 60G

I'm interested in getting my hands the LHGG-60ad for sure. I'm a little quizzed by the marketing for these products in regards to range. Obviously it needs LOS and stability is dependable on the region its installed in.
by russman
Thu Feb 08, 2018 4:32 pm
Forum: Announcements
Topic: v6.41.1 [current]
Replies: 106
Views: 24995

Re: v6.41.1 [current]

@strods It didn't generate a support file automatically. It didn't crash the router, this is all regarding link negotiation via 10/100/1000M RJ45 SFP modules. Before the aforementioned update, the non-mikrotik modules would link up if the port was manually set to 1Gbps but wouldn't let anything conn...
by russman
Wed Feb 07, 2018 9:08 pm
Forum: Announcements
Topic: v6.41.1 [current]
Replies: 106
Views: 24995

Re: v6.41.1 [current]

I'm running 6.41.1 on a CCR-1016-12S-1S+RM router that I'm testing SFP compatibility/behavior in. The non-mikrotik modules worked on gigabit only when manually set to 1Gbps (no auto negotiation) they would not work on 100Mbps when manually set even though the modules support it (UBNT and Fiberstore ...
by russman
Wed Sep 06, 2017 7:44 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 213669

Re: RouterOS v7.0 beta1 - when?

Yes, it was on MUM. On US MUM in 2014 :)

https://mum.mikrotik.com//presentations/US14/ccrros.pdf
In the pdf you referenced from 2014, it talks about, v6.8 I haven't seen anything beyond 6.41 in RC or beta yet in 2017. Where are these being released at?
by russman
Thu Mar 02, 2017 4:52 am
Forum: General
Topic: DHCP ARP issue
Replies: 5
Views: 2224

Re: DHCP ARP issue

Stall ARP entry issues are still plaguing Mikrotik ROS 6.X 4 years later...
by russman
Thu Feb 16, 2017 6:12 am
Forum: General
Topic: WCCP Support
Replies: 2
Views: 1517

Re: WCCP Support

+1 Bump on needing WCCP support
by russman
Fri Jan 06, 2017 12:20 am
Forum: General
Topic: Strange PPPoE issue - Interface disabled on its own
Replies: 1
Views: 800

Strange PPPoE issue - Interface disabled on its own

I've only seen this issue happen twice now since we started using Mikrotik 8 years ago. Both times happened recently with different clients, one on Hex board and one on ARM both running 6.37.1. Everything will be running smoothly and out of the blue the PPPoE interface will become disabled, nothing ...
by russman
Tue Sep 20, 2016 4:25 am
Forum: The User Manager
Topic: forgot admin password
Replies: 16
Views: 59294

Re:

yes, wrong Wow that's rough. I used to be able to do that with Cisco from serial console. I have a business customer that we installed their firewall, their network, their internet, etc and corporate forced all locations to use some use some IT company from the other side of the country (near headq...
by russman
Fri Jun 17, 2016 4:47 am
Forum: General
Topic: Watchdog feature request
Replies: 6
Views: 1752

Re: Watchdog feature request

Interesting, I never noticed that under tools, not sure how long its even been there.  Thank you.
by russman
Thu Jun 16, 2016 5:53 am
Forum: General
Topic: Watchdog feature request
Replies: 6
Views: 1752

Watchdog feature request

It would be great if watchdog had the ability to execute/trigger a script.  Currently it can be done with more complex scripts that mimic watchdog plus do other things but it would be nice simply empower this feature a bit more than sending an email.
by russman
Wed May 25, 2016 6:37 pm
Forum: Forwarding Protocols
Topic: URL Binding / Redirection from single public IP
Replies: 1
Views: 1646

URL Binding / Redirection from single public IP

I'm interested in Binding URLs to different servers inside our network from one public IP. Typically this is done on the web server with a single IP and URLs are binded in the server config. Can this be done from the edge firewall with traffic inspection via mangle or something?
by russman
Wed Apr 06, 2016 6:45 am
Forum: General
Topic: PPPoE rate limiting bug
Replies: 3
Views: 2387

Re: PPPoE rate limiting bug

I was aware that not all packets in a connection can be fasttracked, but I didn't realize that such functions could be lost in the attempt to fasttrack other traffic passing through the router. I'll update the firmware, disable fasttrack related rules, reboot, and run the tests again.
by russman
Fri Apr 01, 2016 11:23 pm
Forum: General
Topic: PPPoE rate limiting bug
Replies: 3
Views: 2387

PPPoE rate limiting bug

Issue: PPPoE rate limiting isn’t working correctly in 6.34.4 and even more so in 6.35RC45 Description: This is a simple site with the router setup only to route between the backhaul segment and the sector segment for that tower with PPPoE server running on the sector network segment. We were testin...
by russman
Wed Nov 18, 2015 7:37 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 583
Views: 235605

Re: Cloud Hosted Router

So I previously purchased a x86 lvl 6 license and run it in VMware. Can I convert this to a CHR license and decommission this one?
by russman
Sat Aug 01, 2015 12:20 am
Forum: General
Topic: Feature Request: Suricata
Replies: 20
Views: 8865

Re: Feature Request: Suricata

Mikrotik, Due to the continued lack of IDS, IPS or DPI being fully integrated into the router, our company is now looking to transition our customers to the Ubiquiti EdgeOS Routers new DPI offering. I hate to leave this platform but we can't ignore the consumer demand for this feature in enterprise ...
by russman
Sat Jun 13, 2015 5:13 am
Forum: General
Topic: Feature Request: Suricata
Replies: 20
Views: 8865

Re: Feature Request: Suricata

(I bet a SonicWall's performance sucks if too many of its features are turned on at the same time - I have a personal loathing for those boxes, as they always seem to be administered by people who haven't got a clue about networking, their configurations make a mathematician's blackboard look simpl...
by russman
Sat Jun 13, 2015 5:05 am
Forum: Wireless Networking
Topic: 6.29.1 - 802.1x Authentication Timeout
Replies: 2
Views: 1750

Re: 6.29.1 - 802.1x Authentication Timeout

I'm having the same issue with my CCRs after upgrading to 6.29.1 and reverting back to 6.28 fixed every router having the problem. Odd thing is that the issue wasn't happening on all the routers I upgraded but was very pronounced on 3 of them.
by russman
Tue May 12, 2015 5:45 pm
Forum: General
Topic: Feature Request: Suricata
Replies: 20
Views: 8865

Re: Feature Request: Suricata

Mikrotik is a router, not a firewall. That's funny, then whats that whole "Firewall" section for then and why does the factory pre-configuration on most of the desktop models come configured as a firewall. It may be a grey area to some to call a router with ACLs a firewall but I'm pretty ...
by russman
Mon May 04, 2015 7:42 pm
Forum: General
Topic: Feature request:Vmware support - vmwaretools package
Replies: 17
Views: 12745

Re: Feature request:Vmware support - vmwaretools package

+1 for VMware tools as well. I purchased a license to stand alone run Usermanager and its performance isn't as good as it could be.
by russman
Thu Apr 30, 2015 6:22 pm
Forum: General
Topic: Feature Request: Suricata
Replies: 20
Views: 8865

Re: Feature Request: Suricata

Two more requests from corporate customers this week alone, they are being forced to replace their firewalls with units that have IDS/IPS integrated. This should almost be top priority IMHO.
by russman
Fri Mar 06, 2015 4:34 pm
Forum: General
Topic: Feature Request: Suricata
Replies: 20
Views: 8865

Re: Feature Request: Suricata

+1 Suricata in ROS 7. Many of my corporate customers are starting to get mandates that all their branch offices have to have firewalls with IDS/IPS built in. I've had to stop deploying MikroTik and have been forced to replace Mikrotik routers because of it. I believe if this isn't implemented Mikrot...
by russman
Wed Jan 21, 2015 12:45 am
Forum: General
Topic: Need help identifying a DoS issue
Replies: 1
Views: 793

Re: Need help identifying a DoS issue

Found it. Its a bug in the AC v7.1-rc.25252 that is being addressed in the next patch.
by russman
Tue Jan 20, 2015 11:18 pm
Forum: General
Topic: Need help identifying a DoS issue
Replies: 1
Views: 793

Need help identifying a DoS issue

We have a random issue that may last 5sec or a few min and goes away on its own. I'd love to figure out where its coming from but for the time being I'd like to create a bridge filter to block/limit this traffic.
hog.png
by russman
Tue Dec 16, 2014 10:46 pm
Forum: RouterBOARD hardware
Topic: Quality control or design problem with CCR-1009?
Replies: 7
Views: 2786

Quality control or design problem with CCR-1009?

I've purchased many CCRs and we recently started purchasing the CCR-1009 series of router for business customers that desire dual power supplies in their rack mount hardware. Anyway, I've probably only purchased 8-10 of 1009 series, now this is a small test group but considering of the 8-10 I've pur...
by russman
Mon Oct 27, 2014 9:26 pm
Forum: General
Topic: (answered) New?! RBFTC11
Replies: 13
Views: 5539

Re: New?! RBFTC11

I'd love to see a version that offers POE output and an AC bus terminal. That would allow for remote radio hookups without the need for additional outdoor enclosures.
by russman
Tue Oct 14, 2014 4:00 pm
Forum: General
Topic: DDoS Mitigation - Bandwidth Depletion
Replies: 4
Views: 1672

Re: DDoS Mitigation - Bandwidth Depletion

Most of our residential customers are NATed, this appears to all be input chain traffic on the WAN interface hitting the NAT public address. As I said, when it occurs our LAN traffic drops to 5-10% of normal (RX and TX) and the WAN traffic reaches the fiber pipes maximum downstream.
by russman
Tue Oct 14, 2014 7:32 am
Forum: General
Topic: DDoS Mitigation - Bandwidth Depletion
Replies: 4
Views: 1672

DDoS Mitigation - Bandwidth Depletion

I've been searching around on the forums and haven't found what I'm looking for. It seems like most of the attacks reported are small amounts of bandwidth from 1000s of sources or a little bit of traffic that consumes CPU cycles. I'm seeing large chunks of bandwidth, much bigger than any plan we off...
by russman
Tue Oct 14, 2014 5:28 am
Forum: The User Manager
Topic: failed to commit transaction: disk I/O error
Replies: 10
Views: 9410

Re: failed to commit transaction: disk I/O error

I simply downgraded to 6.8 as mentioned above and the the issue went away. I haven't tried anything else because I haven't seen anything in the change log addressing this issue yet. Has anyone that had this issue try 6.20 yet?
by russman
Wed Aug 27, 2014 12:49 am
Forum: RouterBOARD hardware
Topic: Temperature Range SFP-Modules
Replies: 3
Views: 3174

Re: Temperature Range SFP-Modules

Mikrotik's with SFP ports and Mikrotik SFP modules have been on the market for some time now. What are you guys finding with these units in regards to temperature handling. Are they standing up to the temperatures some of our outdoor enclosures on the inside? I question such things even more with a ...
by russman
Sat Jun 14, 2014 5:50 am
Forum: The User Manager
Topic: failed to commit transaction: disk I/O error
Replies: 10
Views: 9410

Re: failed to commit transaction: disk I/O error

I see 6.15 has been released but I haven't seen anything in the changelog referencing this or any responses to this thread. Anyone have input to add?
by russman
Thu Apr 24, 2014 5:06 am
Forum: The User Manager
Topic: failed to commit transaction: disk I/O error
Replies: 10
Views: 9410

Re: failed to commit transaction: disk I/O error

Two cloud core units and 3 Router OS versions (6.11, 6.12, and now 6.8) the issue is resolved. It appears there is a bug in the later versions of Router OS. 115 hours have passed without any errors locking up userman. Please look into this userman DB issue Mikrotik, I'll be watching release notes.
by russman
Tue Apr 22, 2014 5:29 am
Forum: The User Manager
Topic: failed to commit transaction: disk I/O error
Replies: 10
Views: 9410

Re: failed to commit transaction: disk I/O error

I hear crickets chirping... I upgraded the new userman box to 6.12 and the same issue returned in less than an hour and happened 5 more times that morning before I decided to try downgrading router OS versions. I looked at the changlog and figured 6.8 would be a good starting point for further troub...
by russman
Sat Apr 19, 2014 11:45 pm
Forum: The User Manager
Topic: failed to commit transaction: disk I/O error
Replies: 10
Views: 9410

Re: failed to commit transaction: disk I/O error

http://i1309.photobucket.com/albums/s634/Russell_Manning/IOdisk_zpsa82d777c.png I'm getting the same issue with userman on cloudcore. It happened with one we've been running for awhile then it manifested itself again on a the brand new identical unit that I replaced it with 3 days later. It's far f...
by russman
Thu Nov 14, 2013 9:17 pm
Forum: General
Topic: Userman optimized for multi-core
Replies: 4
Views: 2226

Re: Userman optimized for multi-core

As you can see in the picture CCR1016-12G currently running ROS 6.3, however, I've seen this issue through many versions of ROS in 5.X and 6.X.
by russman
Wed Nov 13, 2013 9:57 pm
Forum: General
Topic: Userman optimized for multi-core
Replies: 4
Views: 2226

Re: Userman optimized for multi-core

Hmmm, still can't access userman web interface and it looks like a autosupout.rif was generated around the time this happened. In general userman is choking harder now than ever, possibly for aforementioned reasons and stepping up on hardware typically improved performance for awhile until customer ...
by russman
Wed Nov 13, 2013 9:23 pm
Forum: General
Topic: Userman optimized for multi-core
Replies: 4
Views: 2226

Re: Userman optimized for multi-core

I am looking in the profile info for that core and ~70% is ate up with "flash" and 30% for "User-Manager". Although it does need better multi-core support, I'd be interested to know the performance specs on the integrated 512MB NAND storage. I'm using a tiny fraction of the avail...
by russman
Wed Nov 13, 2013 8:32 pm
Forum: General
Topic: Userman optimized for multi-core
Replies: 4
Views: 2226

Userman optimized for multi-core

I realize there are many radius options available besides Mikrotik's userman, and that dedicated Intel based machines can be setup to run Mikrotik with higher per core clock speeds. However, it would be nice if the could modify the code to simply utilize the massive multi-core processing horsepower ...
by russman
Sun Oct 20, 2013 6:06 am
Forum: Forwarding Protocols
Topic: NAT and SIP no audio (specifically 3CX VoIP system)
Replies: 2
Views: 7314

NAT and SIP no audio (specifically 3CX VoIP system)

So I’ve searched the forums and preformed many tests trying to get audio working with remote extensions with my 3CX VoIP phone system. I’ve tested NAT port forwarding behind masquerading, 1:1 NAT before masquerading, disabling SIP firewall helper service, disabling Mangle rules, and every combinatio...
by russman
Fri May 10, 2013 8:03 pm
Forum: General
Topic: Resetting Counters in the Interface List
Replies: 14
Views: 21122

Re: Resetting Counters in the Interface List

I'm running 5.22 on x86 and I it takes the /interface ethernet reset-counters ether1 command but it does nothing still.
by russman
Tue Jan 15, 2013 5:56 pm
Forum: General
Topic: DHCP client option 60
Replies: 20
Views: 28161

Re: DHCP client option 60

Yes, vendor code support is needed. I'm trying to setup custom mitel phone DHCP options but I can't. Microsoft DHCP Server supports it, never thought I'd have to turn to microsoft for more advanced network related features, that also adds complexity to what I'm trying to accomplish...
by russman
Tue Apr 17, 2012 5:48 pm
Forum: General
Topic: "Dynamic" DNS servers
Replies: 4
Views: 20938

Re: "Dynamic" DNS servers

I'm setting up a new Mikrotik router as well and the GUI for DNS is completely changed and lacking the "Settings" button for setting your upstream DNS servers. Not sure why this is but I guess I'll have to add them from terminal, wait, its taking the command but the config doesn't show the...
by russman
Thu Nov 18, 2010 3:12 am
Forum: Wireless Networking
Topic: Ping corrupted...
Replies: 8
Views: 10818

Re: Ping corrupted...

I'm having a corrupt ping issue as well with my NATed network running 5.0Beta6. Any ping sent over sent 92bytes in size gets a corrupted status consistently. This happens from the Mikrotik terminal, pings from a windows system on mikrotik (not-PPPOE) over 92 work, however, from client AP's terminal ...
by russman
Tue Aug 31, 2010 4:07 pm
Forum: General
Topic: can not access CPE's when using PPPoE
Replies: 2
Views: 952

Re: can not access CPE's when using PPPoE

I had the same issue after upgrading my RouterOS version. Any ideas?
by russman
Thu May 20, 2010 9:30 pm
Forum: Beginner Basics
Topic: PPPOE ip Adress assignement
Replies: 4
Views: 1306

Re: PPPOE ip Adress assignement

I'm using 5.0Beta2 and I'm having trouble with my PPPOE clients as well. They are getting a /32 subnet and a 0.0.0.0 default gateway but they can't ping anything outside of the local subnet. Its as if they don't have a default gateway... Not sure what to do here. If I connect without PPPOE and just ...