MikroTik

Guscht

From the diagram, Id say its a dedicated, not a combo-port:

https://i.mt.lv/cdn/product_files/RB962 ... 160257.png

Guscht

Hi, thanks!

Is this somewhere documented? I searced prior this thread a lot, but found nothing regarding this behaviour...

Guscht

Hi, why does the Ping-tool resolve "www.cnn.com" to 151.101.1.67? The router has no config, no IP, no route(s) and even no DNS server entry: ping1.jpg Perfectly resolved DNS in an IP... ping2.jpg And even more suspicious, a packet-sniffer shows nothing related to a DNS resolution... How (a...

Guscht

Hi, I use in my home-network a Pi-Hole for ad-blocking. When I connect to our company VPN, the ads are back. Because the company router as DNS-resolver is transmitted from the server (SSTP for clarification). Its exact the same as described here: https://forum.mikrotik.com/viewtopic.php?t=83843 As d...

Guscht

Will be there no further V6.48.XX versions?
From the doomed V6.48 straight to V6.49?

Guscht

Sorry for asking again, its still not clear to me.

We run a few CCR1072 with standard settings:

1072.jpg

Is this a DDR1333 or DDR1600? And where can i verify or change settings regarding RAM?

Thanks

Guscht

hotspot - added support for captive portal advertising using DHCP (RFC7710)

Any information regarding this?
Is there a new option somewhere in the HotSpot section or in the DHCP section? Or is this a "hidden" background feature?

Guscht

Implemented for our 3 WAN-Connections. Works great! Thanks Chupaka! But I have to admit, its very weak form Mikrotik to implement such a basic function not more directly. A "Gateway Check" and a "WAN-Connectivity Check", where you can specify N IPs behind the Gateway. No, they im...

Guscht

What are "Port Extensions"?

No single word in any Mikrotik wiki...

Guscht

*) branding - fixed LCD logo loading from new style branding package;

How can we add a LCD logo? It would be great to add a custom image with our company logo and the Router-Name.

Guscht

Thank you! Could you please explain the sense behind this? I see no practical reason to distribute /32 routes. Each router can reach each router - but the hosts in the networks connected to the router cannot reach other hosts in network connected to other routers? Id love to understand why (in which...

Guscht

Hi, I discovered, that with the OSPF network-type PTMP only /32 adresses are transmitted, which results in a lost connectivity regarding the IP behind the router: ptmp.jpg As you can see 10.1.0.1 and 10.2.0.1 are derived from OSPF. Which means, I can not ping a host like 10.1.0.254. White the all ot...

Guscht

Hi Sindy,

thank you for your detailed explanation! This makes perfect sense to me.
I will copy your post to our internal ROS-Wikipedia!

And more important, I can sleep again at night and don't have to philosophize about the reverse operations!!

Regards

Guscht

Thanks my first assumption but in the connection tracking. - reversed SNAT "DNAT" is done at the prerouting chain connection tracking-point - reversed DNAT "SNAT" is done at the postrouting chain connection tracking-point In the packet flow diagram I can not find a "Connecti...

Guscht

Hi, just for my understanding, if we do a SNAT (LAN to WAN), the internal source LAN-IP is replaced by the external WAN-IP. On the way back, the router must reverse this operation - technically a DNAT, even though you never configure it. The reverse operation is done automatically. But at which poin...

Guscht

Hi, with astonishment I noticed that with ROS7.1beta2 it is still not possible to set Queueing with speeds greater than 4294M!! There is still the old 90s-style 32Bit Integer (2^32=4,294,967,296) limit present. I cant believe in 2020 they still have not rised that stinkin 32Bit limit... A software w...

Guscht

hAP Lite - not enough space for upgrade

Thats a ~18 Euro hardware, dont expect much from such a device...

Guscht

Does this help: viewtopic.php?f=2&t=162973&p=802971&hilit=oid#p803228

Guscht

Official answer from Mikrotik-support:

Hello,
Thank you for your request. We will consider implementing such an option.
Best regards,

Fingers crossed!

Guscht

What ports does RouterOS use for DoH? Stricly TCP 443 only? Seems in some cases port 53, 853 is used: https://en.wikipedia.org/wiki/DNS_over_HTTPS#Deployment_scenarios I think you missunderstand the concept. In your LAN, the clients query your edge router as DNS-resolver unencrypted via port 53. Th...

Guscht

Hi, if we create a simple queue, lets say target: 10.10.1.0/24 with DL/UL limit 1M. Everythings works, no problem. Now we want wo exclude one machine out of this range from the restriction: like target: 10.10.0.37 DL/UL: unlimited And we place this queue above the gerneral queue for the subnet, the ...

Guscht

+1 we need this feature as well!

The new RFC7710-Draft states this as well:

DHCP servers MAY send the Captive Portal option without any explicit request.

https://tools.ietf.org/html/draft-ietf- ... 7710bis-11

Guscht

Hi talz, thank you for your outstanding(!) description regarding RFC7710 and Mikrotik! :D Just one note, Option 160 was changed to Option 114! Please see: https://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml Or in detail, the new draft: https://datatracker.ietf.org/doc/...

Guscht

As expected, neither help from the 'great' community nor Mikrotik... :( But I share my knowledge. For the CCR1072, here are the OIDs: CPU-Temperature: 1.3.6.1.4.1.14988.1.1.3.100.1.3.17 Board-Temperature 1: 1.3.6.1.4.1.14988.1.1.3.100.1.3.7101 Board Temperature 2: 1.3.6.1.4.1.14988.1.1.3.100.1.3.710...

Guscht

Hi, we'd like to monitor the CPU- and Board-Temperatures.

The CCR1036 provide full OID-support, but the 1072 only two OIDs:

CCR1072:

1072.jpg

CCR1036:

1036.jpg

Any chance to get the Board-Temperatures from the CCR1072 via SNMP in a further update?

Guscht

same here, a few times a day:

DoH server connection error: remote disconnected while in HTTP exchange

We use Googles-DoH.

Guscht

The normal routing logic for route-mark-ing is to do a lookup in the designated table first. If no valid route has been found, main table will be consulted next. So practically this means: try specific table first, if it's unavailable use normal routing. This can be prevented / limited by either: *...

Guscht

Did a bit testing today:

Win10: stays connected
Win7: stays connected
iOS 12: stays connected
Android 6: stays connected
Android 9: terminates after about 83 seconds...

Guscht

Hi, I have the exact same problem, after ~83 secs. the connections terminates in the same way as the OP said.
A Apple/iOS stays connected (same VPN-secret).

Guscht

Hi, the following problem:

Site1:
L2TP/IPsec-Server
VLAN11
VLAN12

Site2:
L2TP/IPsec-Client
VLAN11
VLAN12

How can I achieve that form Site1 to Site2 and vice versa only VLAN11 can communicate with VLAN11 (and VLAN12 with VLAN12). There should not communication between VLAN11 and VLAN12.

Guscht

Just for your information, the SNMP-IP-Forward is still broken (with V6.47beta19): Testing OIDs... 16.01.2020 12:01:28 (1401 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=3 # 16.01.2020 12:01:28 (1433 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJECT Test 1.3.6.1.2.1.4.24.4.1.1.0...

Guscht

Hi, I did this already when V6.46 was released, but I got no response from you... Try the SNMP-Tester (https://downloads.paessler.com/tools/SNMP+Tester+5.2.3.zip) from PRTG. The OID-LIB (IP-FORWARD.MIB) is attached. Then simply run the OID-LIB against a RouterOS device with ROS V6.46 or greater. It ...

Guscht

Hoped the snmp-IP-Forward MIB is fixed as well. We get still a "no such object" error with 6.47beta8: Testing OIDs... 14.12.2019 23:31:27 (98726 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=3 # 14.12.2019 23:31:28 (99944 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJEC...

Guscht

I can confirm a BUG relatet to the SNMP IP-FORWARD-MIB: SNMP-Output with V6.45.7 03.12.2019 23:04:54 (5562 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=2 # 03.12.2019 23:04:54 (5668 ms) : SNMP Datatype: ASN_IPADDRESS Test 1.3.6.1.2.1.4.24.4.1.1.0.0.0.0.0.0.0.0.0.10.10.0.1: valu...

Guscht

We updated a few CCRs from V6.45.7 to V6.46.
The Route Status SNMP sensors stopped working in our monitoring system (IP-FORWARD-MIB) with "object not found". If we downgrade to V6.45.7 the sensors work again.

This is a V6.46 related bug.

Guscht

Hi, we run a quite big Hotspot (>1000 users). I figured out how to use IP Bindings for special users who don't need an authentication. But is there a way to see if those users are online (they are NOT listed under "Active"). And can we limit the TX/RX-rate of the IP-Binded users (is there ...

Guscht

Hi, I use a hotspot in the network range of 172.28.64.XX/32 and have a W2k3 R2 in a network of 10.10.XX.XX/16. If I pring from a clint for example 10.10.10.46 to my W2k3 (10.10.10.254) I get a response from my ROS (172.28.64.1). This doesn't make sense to my, because the ROS is in a complete differe...

Search found 37 matches

Re: hAP ac SFP port

Re: DNS-resolution without DNS-Sever, Route or IP

DNS-resolution without DNS-Sever, Route or IP

No DNS for PPP-clients

Re: v6.49beta [testing] is released!

Re: CCR1072 RAM

Re: v6.48 [stable] is released!

Re: Advanced Routing Failover without Scripting

Re: v6.48 [stable] is released!

Re: v6.48 [stable] is released!

Re: OSPF / PTMP no subnets

OSPF / PTMP no subnets

Re: NAT and the way back...

Re: NAT and the way back...

NAT and the way back...

Queueing >4.2G

Re: v6.47.2 [stable] is released!

Re: Missing OID for psu1/psu2 on netPower16

Re: Feature request: Force sending of DHCP options to clients

Re: DNS over HTTPS

exclude IP from Queueing?

Re: Feature request: Force sending of DHCP options to clients

Re: DHCP OPTION 160

Re: System Health CCR1072 vs CCR1036

System Health CCR1072 vs CCR1036

Re: dns,error DoH server connection error: remote disconnected while in HTTP exchange

Re: Dual wan fail over, fail back not working

Re: L2TP/IPSEC and Android Disconnect after ~83 seconds

Re: L2TP/IPSEC and Android Disconnect after ~83 seconds

VPN + VLANs / different sites

Re: v6.47beta [testing] is released!

Re: v6.47beta [testing] is released!

Re: v6.47beta [testing] is released!

Re: v6.46 [stable] is released!

Re: v6.46 [stable] is released!

Questions regarding Hotspot/IP Bindings

ROS answers to wrong ping?!