Community discussions

MikroTik App

Search found 37 matches

by Guscht
Wed Feb 24, 2021 6:59 pm
Forum: General
Topic: hAP ac SFP port
Replies: 2
Views: 182

Re: hAP ac SFP port

From the diagram, Id say its a dedicated, not a combo-port:

https://i.mt.lv/cdn/product_files/RB962 ... 160257.png
by Guscht
Wed Feb 24, 2021 6:51 pm
Forum: General
Topic: DNS-resolution without DNS-Sever, Route or IP
Replies: 5
Views: 200

Re: DNS-resolution without DNS-Sever, Route or IP

Hi, thanks!

Is this somewhere documented? I searced prior this thread a lot, but found nothing regarding this behaviour...
by Guscht
Wed Feb 24, 2021 6:29 pm
Forum: General
Topic: DNS-resolution without DNS-Sever, Route or IP
Replies: 5
Views: 200

DNS-resolution without DNS-Sever, Route or IP

Hi, why does the Ping-tool resolve "www.cnn.com" to 151.101.1.67? The router has no config, no IP, no route(s) and even no DNS server entry: ping1.jpg Perfectly resolved DNS in an IP... ping2.jpg And even more suspicious, a packet-sniffer shows nothing related to a DNS resolution... How (a...
by Guscht
Sun Feb 21, 2021 3:42 pm
Forum: General
Topic: No DNS for PPP-clients
Replies: 1
Views: 112

No DNS for PPP-clients

Hi, I use in my home-network a Pi-Hole for ad-blocking. When I connect to our company VPN, the ads are back. Because the company router as DNS-resolver is transmitted from the server (SSTP for clarification). Its exact the same as described here: https://forum.mikrotik.com/viewtopic.php?t=83843 As d...
by Guscht
Fri Feb 05, 2021 12:51 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 42
Views: 8365

Re: v6.49beta [testing] is released!

Will be there no further V6.48.XX versions?
From the doomed V6.48 straight to V6.49?
by Guscht
Tue Dec 29, 2020 12:12 am
Forum: RouterBOARD hardware
Topic: CCR1072 RAM
Replies: 10
Views: 1761

Re: CCR1072 RAM

Sorry for asking again, its still not clear to me.

We run a few CCR1072 with standard settings:
1072.jpg

Is this a DDR1333 or DDR1600? And where can i verify or change settings regarding RAM?

Thanks
by Guscht
Sun Dec 27, 2020 11:11 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 61486

Re: v6.48 [stable] is released!

hotspot - added support for captive portal advertising using DHCP (RFC7710)
Any information regarding this?
Is there a new option somewhere in the HotSpot section or in the DHCP section? Or is this a "hidden" background feature?
by Guscht
Sun Dec 27, 2020 1:45 pm
Forum: Useful user articles
Topic: Advanced Routing Failover without Scripting
Replies: 148
Views: 27972

Re: Advanced Routing Failover without Scripting

Implemented for our 3 WAN-Connections. Works great! Thanks Chupaka! But I have to admit, its very weak form Mikrotik to implement such a basic function not more directly. A "Gateway Check" and a "WAN-Connectivity Check", where you can specify N IPs behind the Gateway. No, they im...
by Guscht
Thu Dec 24, 2020 6:27 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 61486

Re: v6.48 [stable] is released!

What are "Port Extensions"?
Image

No single word in any Mikrotik wiki...
by Guscht
Thu Dec 24, 2020 12:18 am
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 61486

Re: v6.48 [stable] is released!

*) branding - fixed LCD logo loading from new style branding package;
How can we add a LCD logo? It would be great to add a custom image with our company logo and the Router-Name.
by Guscht
Sun Oct 04, 2020 3:20 am
Forum: Forwarding Protocols
Topic: OSPF / PTMP no subnets
Replies: 5
Views: 464

Re: OSPF / PTMP no subnets

Thank you! Could you please explain the sense behind this? I see no practical reason to distribute /32 routes. Each router can reach each router - but the hosts in the networks connected to the router cannot reach other hosts in network connected to other routers? Id love to understand why (in which...
by Guscht
Sun Oct 04, 2020 12:22 am
Forum: Forwarding Protocols
Topic: OSPF / PTMP no subnets
Replies: 5
Views: 464

OSPF / PTMP no subnets

Hi, I discovered, that with the OSPF network-type PTMP only /32 adresses are transmitted, which results in a lost connectivity regarding the IP behind the router: ptmp.jpg As you can see 10.1.0.1 and 10.2.0.1 are derived from OSPF. Which means, I can not ping a host like 10.1.0.254. White the all ot...
by Guscht
Mon Sep 28, 2020 5:49 pm
Forum: General
Topic: NAT and the way back...
Replies: 4
Views: 426

Re: NAT and the way back...

Hi Sindy,

thank you for your detailed explanation! This makes perfect sense to me.
I will copy your post to our internal ROS-Wikipedia!

And more important, I can sleep again at night and don't have to philosophize about the reverse operations!!

Image

Regards
by Guscht
Mon Sep 28, 2020 2:17 pm
Forum: General
Topic: NAT and the way back...
Replies: 4
Views: 426

Re: NAT and the way back...

Thanks my first assumption but in the connection tracking. - reversed SNAT "DNAT" is done at the prerouting chain connection tracking-point - reversed DNAT "SNAT" is done at the postrouting chain connection tracking-point In the packet flow diagram I can not find a "Connecti...
by Guscht
Mon Sep 28, 2020 12:30 pm
Forum: General
Topic: NAT and the way back...
Replies: 4
Views: 426

NAT and the way back...

Hi, just for my understanding, if we do a SNAT (LAN to WAN), the internal source LAN-IP is replaced by the external WAN-IP. On the way back, the router must reverse this operation - technically a DNAT, even though you never configure it. The reverse operation is done automatically. But at which poin...
by Guscht
Thu Sep 17, 2020 2:37 pm
Forum: RouterOS v7 BETA
Topic: Queueing >4.2G
Replies: 0
Views: 518

Queueing >4.2G

Hi, with astonishment I noticed that with ROS7.1beta2 it is still not possible to set Queueing with speeds greater than 4294M!! There is still the old 90s-style 32Bit Integer (2^32=4,294,967,296) limit present. I cant believe in 2020 they still have not rised that stinkin 32Bit limit... A software w...
by Guscht
Fri Aug 21, 2020 1:54 am
Forum: Announcements
Topic: v6.47.2 [stable] is released!
Replies: 90
Views: 18338

Re: v6.47.2 [stable] is released!

hAP Lite - not enough space for upgrade
Thats a ~18 Euro hardware, dont expect much from such a device...
by Guscht
Wed Jul 22, 2020 1:19 pm
Forum: General
Topic: Feature request: Force sending of DHCP options to clients
Replies: 40
Views: 12711

Re: Feature request: Force sending of DHCP options to clients

Official answer from Mikrotik-support:

Hello,
Thank you for your request. We will consider implementing such an option.
Best regards,

Fingers crossed!
by Guscht
Tue Jul 21, 2020 11:57 pm
Forum: General
Topic: DNS over HTTPS
Replies: 158
Views: 39420

Re: DNS over HTTPS

What ports does RouterOS use for DoH? Stricly TCP 443 only? Seems in some cases port 53, 853 is used: https://en.wikipedia.org/wiki/DNS_over_HTTPS#Deployment_scenarios I think you missunderstand the concept. In your LAN, the clients query your edge router as DNS-resolver unencrypted via port 53. Th...
by Guscht
Tue Jul 21, 2020 11:57 am
Forum: General
Topic: exclude IP from Queueing?
Replies: 0
Views: 387

exclude IP from Queueing?

Hi, if we create a simple queue, lets say target: 10.10.1.0/24 with DL/UL limit 1M. Everythings works, no problem. Now we want wo exclude one machine out of this range from the restriction: like target: 10.10.0.37 DL/UL: unlimited And we place this queue above the gerneral queue for the subnet, the ...
by Guscht
Mon Jul 20, 2020 4:42 pm
Forum: General
Topic: Feature request: Force sending of DHCP options to clients
Replies: 40
Views: 12711

Re: Feature request: Force sending of DHCP options to clients

+1 we need this feature as well!

The new RFC7710-Draft states this as well:
DHCP servers MAY send the Captive Portal option without any explicit request.
https://tools.ietf.org/html/draft-ietf- ... 7710bis-11
by Guscht
Sun Jul 19, 2020 1:22 pm
Forum: Beginner Basics
Topic: DHCP OPTION 160
Replies: 3
Views: 2377

Re: DHCP OPTION 160

Hi talz, thank you for your outstanding(!) description regarding RFC7710 and Mikrotik! :D Just one note, Option 160 was changed to Option 114! Please see: https://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml Or in detail, the new draft: https://datatracker.ietf.org/doc/...
by Guscht
Mon Jun 29, 2020 7:34 pm
Forum: General
Topic: System Health CCR1072 vs CCR1036
Replies: 1
Views: 706

Re: System Health CCR1072 vs CCR1036

As expected, neither help from the 'great' community nor Mikrotik... :( But I share my knowledge. For the CCR1072, here are the OIDs: CPU-Temperature: 1.3.6.1.4.1.14988.1.1.3.100.1.3.17 Board-Temperature 1: 1.3.6.1.4.1.14988.1.1.3.100.1.3.7101 Board Temperature 2: 1.3.6.1.4.1.14988.1.1.3.100.1.3.710...
by Guscht
Sat Jun 27, 2020 10:54 pm
Forum: General
Topic: System Health CCR1072 vs CCR1036
Replies: 1
Views: 706

System Health CCR1072 vs CCR1036

Hi, we'd like to monitor the CPU- and Board-Temperatures.

The CCR1036 provide full OID-support, but the 1072 only two OIDs:

CCR1072:
1072.jpg
CCR1036:
1036.jpg
Any chance to get the Board-Temperatures from the CCR1072 via SNMP in a further update?
by Guscht
Wed Jun 24, 2020 5:56 pm
Forum: General
Topic: dns,error DoH server connection error: remote disconnected while in HTTP exchange
Replies: 6
Views: 2773

Re: dns,error DoH server connection error: remote disconnected while in HTTP exchange

same here, a few times a day:
DoH server connection error: remote disconnected while in HTTP exchange
We use Googles-DoH.
by Guscht
Sat May 16, 2020 1:23 pm
Forum: General
Topic: Dual wan fail over, fail back not working
Replies: 9
Views: 1932

Re: Dual wan fail over, fail back not working

The normal routing logic for route-mark-ing is to do a lookup in the designated table first. If no valid route has been found, main table will be consulted next. So practically this means: try specific table first, if it's unavailable use normal routing. This can be prevented / limited by either: *...
by Guscht
Tue Mar 31, 2020 1:04 am
Forum: General
Topic: L2TP/IPSEC and Android Disconnect after ~83 seconds
Replies: 15
Views: 6257

Re: L2TP/IPSEC and Android Disconnect after ~83 seconds

Did a bit testing today:

Win10: stays connected
Win7: stays connected
iOS 12: stays connected
Android 6: stays connected
Android 9: terminates after about 83 seconds...
by Guscht
Mon Mar 30, 2020 10:49 am
Forum: General
Topic: L2TP/IPSEC and Android Disconnect after ~83 seconds
Replies: 15
Views: 6257

Re: L2TP/IPSEC and Android Disconnect after ~83 seconds

Hi, I have the exact same problem, after ~83 secs. the connections terminates in the same way as the OP said.
A Apple/iOS stays connected (same VPN-secret).
by Guscht
Wed Mar 25, 2020 12:40 am
Forum: General
Topic: VPN + VLANs / different sites
Replies: 1
Views: 857

VPN + VLANs / different sites

Hi, the following problem:

Site1:
L2TP/IPsec-Server
VLAN11
VLAN12

Site2:
L2TP/IPsec-Client
VLAN11
VLAN12

How can I achieve that form Site1 to Site2 and vice versa only VLAN11 can communicate with VLAN11 (and VLAN12 with VLAN12). There should not communication between VLAN11 and VLAN12.
by Guscht
Thu Jan 16, 2020 1:09 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 130676

Re: v6.47beta [testing] is released!

Just for your information, the SNMP-IP-Forward is still broken (with V6.47beta19): Testing OIDs... 16.01.2020 12:01:28 (1401 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=3 # 16.01.2020 12:01:28 (1433 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJECT Test 1.3.6.1.2.1.4.24.4.1.1.0...
by Guscht
Mon Dec 16, 2019 2:28 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 130676

Re: v6.47beta [testing] is released!

Hi, I did this already when V6.46 was released, but I got no response from you... Try the SNMP-Tester (https://downloads.paessler.com/tools/SNMP+Tester+5.2.3.zip) from PRTG. The OID-LIB (IP-FORWARD.MIB) is attached. Then simply run the OID-LIB against a RouterOS device with ROS V6.46 or greater. It ...
by Guscht
Sun Dec 15, 2019 12:43 am
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 130676

Re: v6.47beta [testing] is released!

Hoped the snmp-IP-Forward MIB is fixed as well. We get still a "no such object" error with 6.47beta8: Testing OIDs... 14.12.2019 23:31:27 (98726 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=3 # 14.12.2019 23:31:28 (99944 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJEC...
by Guscht
Wed Dec 04, 2019 12:08 am
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 42370

Re: v6.46 [stable] is released!

I can confirm a BUG relatet to the SNMP IP-FORWARD-MIB: SNMP-Output with V6.45.7 03.12.2019 23:04:54 (5562 ms) : SNMP Datatype: ASN_UNSIGNED Test 1.3.6.1.2.1.4.24.3.0: value=2 # 03.12.2019 23:04:54 (5668 ms) : SNMP Datatype: ASN_IPADDRESS Test 1.3.6.1.2.1.4.24.4.1.1.0.0.0.0.0.0.0.0.0.10.10.0.1: valu...
by Guscht
Tue Dec 03, 2019 8:06 pm
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 42370

Re: v6.46 [stable] is released!

We updated a few CCRs from V6.45.7 to V6.46.
The Route Status SNMP sensors stopped working in our monitoring system (IP-FORWARD-MIB) with "object not found". If we downgrade to V6.45.7 the sensors work again.

This is a V6.46 related bug.
by Guscht
Fri Nov 18, 2011 12:36 am
Forum: General
Topic: Questions regarding Hotspot/IP Bindings
Replies: 1
Views: 896

Questions regarding Hotspot/IP Bindings

Hi, we run a quite big Hotspot (>1000 users). I figured out how to use IP Bindings for special users who don't need an authentication. But is there a way to see if those users are online (they are NOT listed under "Active"). And can we limit the TX/RX-rate of the IP-Binded users (is there ...
by Guscht
Thu Jul 01, 2010 6:40 pm
Forum: General
Topic: ROS answers to wrong ping?!
Replies: 1
Views: 762

ROS answers to wrong ping?!

Hi, I use a hotspot in the network range of 172.28.64.XX/32 and have a W2k3 R2 in a network of 10.10.XX.XX/16. If I pring from a clint for example 10.10.10.46 to my W2k3 (10.10.10.254) I get a response from my ROS (172.28.64.1). This doesn't make sense to my, because the ROS is in a complete differe...