MikroTik

Swordforthelord

As no "OpenVPN client" or "OpenVPN server" usage is standardized for certificates, I would expect "tls-client" or "tls-server" to be required, but you have to check. Also, some clients and servers require a minimum key length and minimum key type (RSA/EC) of the certificate to accept it. This key u...

Swordforthelord

OVPN is not compatible with the previous v6; v7 ovpn client does not connect to server v6.45 if certificates are used. Where were the certificates generated? In my experience, MT generated certificates don't work with the Windows OVPN desktop client (maybe they do now, I haven't tested recently). M...

Swordforthelord

I have a 450G and a 750Gr3 that have had this error since upgrading: "backup,critical error creating backup file: could not read all configuration files" It happens with both encrypted and unencrypted backups; both were upgraded from 6.42.12. My 951G that was upgraded from 6.43.12 does not have thi...

Swordforthelord

I have a 450G and a 750Gr3 that have had this error since upgrading: "backup,critical error creating backup file: could not read all configuration files" It happens with both encrypted and unencrypted backups; both were upgraded from 6.42.12. My 951G that was upgraded from 6.43.12 does not have this...

Swordforthelord

I would love to see the functionality of the Mode button expanded. Specifically, it would be useful to be able to assign different actions taken based on whether the button was pressed once, double-pressed, triple-pressed, or long-pressed.

Swordforthelord

I really can't see the new default configuration as anything other than a bug, at least not in the smaller routers. It's been MT's policy for years now to make them end user friendly and no default firewall/bridge/NAT setup is the very opposite of that. I even tried using quick set and that still pr...

Swordforthelord

[/quote] All types of routers now behave like this. Hex/hex lite, hap/hap lite, rb7xx, rb9xx, rb2011... You can check yourself (/system default-configuration print).[/quote] But the question is, was this a deliberate change by Mikrotik or a bug? Unless I've missed it we've yet to hear any kind of a...

Swordforthelord

I had a similar issue with a RB751U. Ether1 suddenly became a member of the bridge. This was not a result of the upgrade process as I configured it from scratch on 6.42.9. There were other random changes as well. Has anyone run into an issue with ports randomly leaving the bridge to go "unknown" int...

Swordforthelord

Hello, I've found a different factory reset behavior after upgrading to v6.42.9. In v6.40.9 the interfaces, DHCP server, and firewall policies were included by default. Now in v6.42.9, only a static IP address of 192.168.88.1 is configured on Interface 1, without a DHCP server, or firewall policies...

Swordforthelord

There is no speaker So... at the end of the day... It's kind of one trick pony. It's basically really simple and basic router that can route buttload of traffic due to SFP+ port and hardware AES. The end. ... Exactly what I'm looking for! :) Will not miss any of the other features you mention. I co...

Swordforthelord

There is no speaker So... at the end of the day... It's kind of one trick pony. It's basically really simple and basic router that can route buttload of traffic due to SFP+ port and hardware AES. The end. Things removed comparing to RB2011: no USB no screen no beeper no USR led no meaningful switch...

Swordforthelord

I have port flapping issues on hap ac². Anyone else?

I have an RB750Gr3 in the field running 6.42.7 and ports 1 and 3 keep going up and down.

Swordforthelord

Make sure this is the procedure you're using to factory default the router (from the quick guide, abridged): Hold the button before powering on the device, and at power up, the button will force load the backup boot loader. Continue holding the button for the other two functions of this button. Rele...

Swordforthelord

The USR LED is not connected to any router functions by default, it's a customizable indicator. For example, I use mine to indicate whether my guest wifi is on or off.

Swordforthelord

Hi, all Recently bought hAP ac2, it turned out a nightmare to get stable fast link on 2.4 radio. Options tried: manual channel select security (aes/tkip/none) channel widths with different options (Ce/cE/XX) updating to RC firmware/OS leaving only N/a/b/g mode setting transmit power power source ch...

Swordforthelord

MikroTik support has seen this discussion, but generic complaints are not the way to resolve issues. Like it has always been requested, we need supout.rif file, network description and possibly remote access to your device. This information is not on the forum or on twitter. This is why we ask you ...

Swordforthelord

Here's a script I recently created for enabling/disabling my guest wifi. I plan to attach this script to the external mode button of a hap AC2. Please note, in the context of the script, "Guest" is the name of the wireless interface. This script checks to see if the guest wifi is disabled. If it is...

Swordforthelord

Since the HAP AC2 doesn't have a beeper (I found pictures of the internals online; definitely no beeper) I found a compromise for my guest wifi enable/disable script for the mode button: instead of beeping I'll have the user-led on or off when the guest wifi is on or off. Not my preference but it's ...

Swordforthelord

This is a formal product not a beta or preview version. We trust you and buy it. We need an official representative from MikroTik give us at least an explanation. What happens and when you will fix this issue. I think for most of posters under this thread hAP ac2 is not their first MikroTik device....

Swordforthelord

Hope Mikrotik fixes these issues, I was expecting better performance. I hope they do too but it's always unsettling when customers report issues and Mikrotik is dead silent. To me it's an indication that they are aware of the issue and are also aware they may not be able to fix it. When there are t...

Swordforthelord

Un-fricking-believable. Thanks for letting me know, I would've been twice as upset to find out after I bought it. My favourite distributor's MikroTik competence test contains a question regarding the sound patterns the RBs produce in different situations. How the ... am I supposed to know given tha...

Swordforthelord

I love the idea of the mode button like on the new hap AC2. Should the issues with that particular router be resolved, I plan to purchase one and attach a script to the button that will enable/disable my guest wifi. My wifi script actually plays two low beeps and then a high beep to indicate it's t...

Swordforthelord

Or let it beep supermario. Thats worth it

Definitely. My wifi script actually plays two low beeps and then a high beep to indicate it's turning the guest wifi on and two highs and a low to indicate it's turning the guest wifi off.

viewtopic.php?f=9&t=40507#p652964

Swordforthelord

Thank you so much. I feel stupid to not have know about that after all that years of using Mikrotik. I marked your answer as solution as I asume this might have solved the Problem. A OS on a very old firmware can‘t work right. Thx again No problem. Let us know if it works! Sent from my Pixel using ...

Swordforthelord

I love the idea of the mode button like on the new hap AC2. Should the issues with that particular router be resolved, I plan to purchase one and attach a script to the button that will enable/disable my guest wifi. I would also love to see the mode button functionality expanded. For example, a diff...

Swordforthelord

Here's a script I recently created for enabling/disabling my guest wifi. I plan to attach this script to the external mode button of a hap AC2. Please note, in the context of the script, "Guest" is the name of the wireless interface. This script checks to see if the guest wifi is disabled. If it is,...

Swordforthelord

Is the routerboard firmware up to date? Sent from my Pixel using Tapatalk That may sound stupid - but is there a difference between RouterOS and the firmware? There's a definite difference. If you go to /system routerboard print you can see the current and upgrade versions. /system routerboard upgr...

Swordforthelord

Is the routerboard firmware up to date?

Sent from my Pixel using Tapatalk

Swordforthelord

Mine is the same, noticed when on my desk during setup, now it’s on the wall downstairs I can’t hear it. Only happened under WiFi load and I suspected something in the RF circuit was the cause. Works ok, I had forgotten about it till I saw your post. I am using supplied wall adapter not PoE FYI. Th...

Swordforthelord

There is a bit in the Wiki about this and you have to avoid packet fragmentation and the packet reordering is resolved in 6.39RC if I remember well. http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#HEXv3_.28mmips.29_Config_Optimizations On reordering: http://forum.mikrotik.com/viewtopic.php?f=21&t=116...

Swordforthelord

I've got two of these things, one on a 75x75 fiber connection and one on a 100x10 cable connection. I've set up an IPSEC tunnel between the two using IKEv2, AES-128, SHA-1, and modp1024 for both phase 1 and 2. The strange thing is, no matter which direction I iperf to, I can't get more than 15 mbps....

Swordforthelord

THere will be UDP support in ROS v7.

Thank you!

Swordforthelord

I would have to assume that the server is configured to use UDP, which Mikrotik does not support. You need to change it to TCP on the server side to even have a chance.

Swordforthelord

You have the OpenVPN server and client and both have logs. It sounds like you're only looking at the Mikrotik logs; do you have access to the server logs?

Swordforthelord

The server logs should provide more detail as to why this is happening. Keep in mind that Mikrotik, inexplicably, still does not support OpenVPN over UDP; you have to use TCP.

Swordforthelord

http://routerboard.com/RBGPOE

Swordforthelord

I have a hard time with this as well but right off the bat I can tell you that MT doesn't support LZO so I'd remove that line.

Swordforthelord

all 100Mbit ports in one, all Gigabit ports in other.

Excellent! I noticed though that the quick guide only shows one dedicated switch chip; is there another or perhaps the new CPU has integrated switching fuctionality?

Swordforthelord

Which ports can be switched on this particular model?

Swordforthelord

I think this new feature has tremendous potential, and I had some thoughts for non-wireless devices like the 750, 450, 1100, etc... My experience is mostly with the 750's that have a working basic configuration out of the box. However, a quickset that would create a dual or multi-wan scenario, with ...

Swordforthelord

I've got a couple of RB750's that will occasionally freeze up with all the LED's lit solid but a reset will usually fix it. Kind of aggravating.

Swordforthelord

Unfortunately, despite repeated requests, this is unlikely.

http://forum.mikrotik.com/viewtopic.php ... pn#p271435

Swordforthelord

Where did you get this information about Port 1 on the RB750? I have an older one with IPSEC latency issues.

Swordforthelord

There is one option added,
*) ipsec - added command kill-connections under remote-peers;
DPD allows to overcome the problem too, but it should be supported by both ends.
Low value for lifetime on both ends could be used too.

Thank you, I tried DPD and it seems to work.

Swordforthelord

Version 4 has one particular issue I'm wondering about; IPSEC SA's usually have to be flushed if a tunnel is interrupted between a RouterOS device and a non-RouterOS device. Has this been corrected in Version 5?

Swordforthelord

you dont happen to be using the btest utility within the router do you? For some reason all of our 750's no matter what version will start killing off services and eventually hang if we run a few bandwidht tests. The other platforms dont seem to do this. Mikrotik couldnt reproduce it. I had left Ba...

Swordforthelord

Wow. I'm going to have to think that over a few times; it's not clicking right away.

Swordforthelord

Thank you fewi, the natting solution was exactly what I needed. One thing that baffles me though is why I would configure a source address vs. destination address in the rule. It seems backwards but it obviously works.

Swordforthelord

Try version ROS 4.11 or 4.13 It's 4.11 but I could give 4.13 a try. Do you have ECMP Load balancing? cause 10-20min freezes looks like: http://mum.mikrotik.com/presentations/PL10/balancing.pdf (slide 21) That is my best guess - ether write to support or paste your address/route/mangle configuration...

Swordforthelord

Bump.

Swordforthelord

Hello, I can't seem to figure out how to get two subnets to communicate effectively. For example, suppose I have a RB750; ether2 is configured as 192.168.1.0/24 and ether5 is an independent port configured as 192.168.2.0/24. How do I allow these two subnets to communicate, and also, is it possible t...

Swordforthelord

Would you mind sharing the QOS configuration that you're using? I'm looking to do the same thing and I want to make sure I'm doing it correctly.

Swordforthelord

Maybe it's an SA issue. What happens if (when the tunnel is down) you flush the SA's from both sides and then ping from only one to the other?

Swordforthelord

Does your cable connection use a static or dynamic IP? And if it's dynamic, are you being provided with an internal IP address or an external? If internal, perhaps you should have the ISP configure or help you configure the modem to pass through an external IP instead.

Swordforthelord

Hello! I'm having a very bizarre issue I can't seem to account for. I have an RB750 in a dual-wan configuration set up strictly for failover. The primary ISP is on Ether1 and it's using the DHCP client to get it's address. The secondary ISP is on Ether5 and it has a static address; Ether5 has no mas...

Swordforthelord

In /ip firewall service-port> you may need to disable SIP; it's a "NAT helper"

Search found 56 matches