Community discussions

MikroTik App

Search found 44 matches

by grg
Tue Oct 27, 2015 5:00 pm
Forum: Wireless Networking
Topic: How I got maximum wireless performance from RBs for indoor use.
Replies: 3
Views: 1422

Re: How I got maximum wireless performance from RBs for indoor use.

Great article and pics! I need to do the same. The TG.35.8113 (big flat antenna) and MB.200.C (antenna mount) would be best for my application. I live in the US and I'm having trouble finding them online, can you provide the info where you bought them from. Thanks! I got TG.35.8113 from www.digikey...
by grg
Thu Sep 24, 2015 10:35 pm
Forum: Wireless Networking
Topic: How I got maximum wireless performance from RBs for indoor use.
Replies: 3
Views: 1422

How I got maximum wireless performance from RBs for indoor use.

MikroTik community: After struggling with MIMO 2x2 and side-by-side dual band (2.4GHz + 5GHz) wireless performance issues, I managed to isolate it down to default antennas, which get installed in aluminum cases. Either it's proximity of them to each other (severe de-tuning and interference) or their...
by grg
Sat Aug 01, 2015 8:05 pm
Forum: General
Topic: SCEP funcionality
Replies: 0
Views: 520

SCEP funcionality

Has anyone successfully deployed SCEP on RouterOS? After I approve new certificate requests, I'm getting "requesting-certificate-failed" message. Mikrotik manual is very vague on SCEP, therefore, I don't really know what behavior I should expect. I want to use it to quickly enroll certificates on MT...
by grg
Mon Mar 03, 2014 12:53 am
Forum: General
Topic: Mikrotik router loses internet when iPhone connected
Replies: 3
Views: 1739

Re: Mikrotik router loses internet when iPhone connected

Hi, I have a Mikrotik RB915G-2HnD router and the problem is that sometimes when I start using the wifi from my iPhone 5 (7.0.4) every once in a while this makes the router go inaccessible - all devices lose internet, the wifi signal does not disappear but there is no internet access. Usually this l...
by grg
Thu Feb 27, 2014 9:18 pm
Forum: General
Topic: Practical use of bridge interfaces
Replies: 1
Views: 693

Practical use of bridge interfaces

Hello everyone. I have a question related to practical use of bridge interface in RouterOS. I have seen many examples of bridge interfaces involved in different configuration scenarios, however I have not seen any specific best practice nor specific purpose recommendations regarding their use. I hav...
by grg
Sat May 04, 2013 7:15 pm
Forum: General
Topic: ccr routing at gigabit
Replies: 1
Views: 1717

Re: ccr routing at gigabit

I had the same issue with routing between VLANs on bonding interface some time ago, but I haven't really had a time to deal with it and check how it works with newer ROS.
by grg
Sun Feb 24, 2013 6:03 pm
Forum: General
Topic: improve wake on lan
Replies: 8
Views: 7569

Re: improve wake on lan

I would prefer if there was something like send WoL packet option when you right click on DHCP lease and bring up the menu in WinBox.
by grg
Fri Feb 15, 2013 9:02 pm
Forum: General
Topic: RouterOS v6rc10 pre-released
Replies: 79
Views: 17638

Re: RouterOS v6rc10 pre-released

This is what I get after performing upgrade on my RB493G: [admin@MikroTik] /ip service> print [admin@MikroTik] /ip service> print Flags: X - disabled, I - invalid # NAME PORT ADDRESS CERTIFICATE 0 telnet 23 1 ftp 21 2 X www 80 3 I ssh 22 4 X www-ssl 443 none 5 X api 8728 6 I winbox 8291 [admin@Mikro...
by grg
Tue Jan 15, 2013 7:52 pm
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

Random reboots is a problem with this release. I get them on CCR1036 and RB411AH.
by grg
Tue Jan 08, 2013 8:44 am
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

Is DHCP confirmed broken? YES. I can confirm that in 6.0rc6, DHCP is unstable. It works for awhile, then it stops giving out ip addresses. The computers just sit there trying and trying to get an address. If I reboot the router, the computers get an IP address right away. It happened to me once too...
by grg
Sun Jan 06, 2013 4:35 pm
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

Basically this would be the same as you looking at packet sniffer. There is just too many type of packets that can be dropped. It could be more or less something simple. Aggregating them into IPv4, IPv6, Other protocol, Driver related drops would be sufficient. This way it would be easier to differ...
by grg
Sun Jan 06, 2013 4:00 pm
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

About those RX drops, I already explained above, that these are not new drops, they are the same drops that you had before, but now we can correctly count them. This is all invalid traffic. For example IPv6 traffic if you have no IPv6 package etc. Would it be possible to implement additional Rx/Tx ...
by grg
Thu Dec 27, 2012 2:07 pm
Forum: General
Topic: dont work DHCP on vlan interface
Replies: 6
Views: 2364

Re: dont work DHCP on vlan interface

is there any idea how to cause this? In my case it took time for it to stop responding. Two or three days, maybe. It's a network with around 50 clients. This is my interface configuration: /interface bridge add name=bridge_local add l2mtu=1590 name=bridge_internet /interface vlan add interface=brid...
by grg
Thu Dec 27, 2012 10:38 am
Forum: General
Topic: dont work DHCP on vlan interface
Replies: 6
Views: 2364

Re: dont work DHCP on vlan interface

I had the same issue this morning on my CCR1036-12G-4S with ROS v6.0rc6. DHCP service stopped issuing IP addresses on all VLAN interfaces. I had to tinker around with it until I got it to work again. I think disabling and re-enabling DHCP servers fixed it, but I'm not completely sure about it. Mikro...
by grg
Sat Dec 22, 2012 12:04 am
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

My CCR1036-12G-4S is getting constant Rx Drops on Bridge, VLAN and some physical interfaces. This happens with both, ROS6.0rc5 and ROS6.0rc6 versions. Now, when I upgraded my RB433AH with ROS6.0rc6, it started to the same thing - show Rx Drops on one of the interfaces (incoming Internet). I never h...
by grg
Fri Dec 21, 2012 8:29 pm
Forum: General
Topic: v6 rc6 released
Replies: 215
Views: 66802

Re: v6 rc6 released

My CCR1036-12G-4S is getting constant Rx Drops on Bridge, VLAN and some physical interfaces. This happens with both, ROS6.0rc5 and ROS6.0rc6 versions. Now, when I upgraded my RB433AH with ROS6.0rc6, it started to the same thing - show Rx Drops on one of the interfaces (incoming Internet). I never ha...
by grg
Wed Dec 19, 2012 10:04 pm
Forum: General
Topic: v6 rc5 released
Replies: 112
Views: 37910

Re: v6 rc5 released

Did you receive the CCR ?
Yes. :)
On development site is 6.0rc6 for TILE
This development site you are talking about, is it for "selected" people only? I don't think I have seen such before.
by grg
Wed Dec 19, 2012 9:53 pm
Forum: General
Topic: v6 rc5 released
Replies: 112
Views: 37910

Re: v6 rc5 released

Lucky you ! Whats the version on it ?
Device: CCR1036-12G-4S
Software: RouterOs v6.0rc5
by grg
Wed Dec 19, 2012 5:19 pm
Forum: General
Topic: v6 rc5 released
Replies: 112
Views: 37910

Re: v6 rc5 released

Did you receive the CCR ?
Yes. :)
by grg
Wed Dec 19, 2012 9:21 am
Forum: General
Topic: v6 rc5 released
Replies: 112
Views: 37910

Re: v6 rc5 released

I cannot find ROS v6.0rc5 tile package download on MikroTik web site for new CCR devices. I'm looking for extra package: NTP. Is this something that has to be addressed through MikroTik support?

Thanks.
by grg
Sat Nov 10, 2012 11:02 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1040551

Re: CLOUD CORE ROUTER

So now that there are 36 and 16 core versions, will there be a "Light" version like: * 9 core TILE CPU * 4 GBit ports + (1-2 SFP ports) * no display * passive cooling * wire-speed gigabit routing (with non-conntrack firewall) * priced at < $250 That is the router I've been searching for quite some ...
by grg
Wed Oct 31, 2012 9:36 pm
Forum: RouterBOARD hardware
Topic: hardware issues with rb4xx
Replies: 45
Views: 17331

Re: hardware issues with rb4xx

I recently had the same problem with my RB433AH. It stopped booting and I had to reflash it using Netinstall. It did it next day after I upgraded it with R52HN wireless adapter. It was couple of years old unit and I never had any problems with it before.
by grg
Fri Sep 21, 2012 3:13 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 82
Views: 22594

Re: Feature Request: IPSEC Improvements

Fully agree on this one.
by grg
Fri Aug 03, 2012 12:34 am
Forum: General
Topic: OVPN on new versoins ROS 6.0 and 5.1...
Replies: 61
Views: 21450

Re: OVPN on new versoins ROS 6.0 and 5.1...

In my opinion, MikroTik team should take VPN issues more seriously. What's the point of manufacturing hardware like RB1100AHx2 with encryption acceleration, when you can't use it in real life scenarios. I mean, you have an option to use it, but then you are faced with all those issues people are tal...
by grg
Sat May 21, 2011 12:26 am
Forum: RouterBOARD hardware
Topic: Interface bonding issues on RB1100 and Cisco switch
Replies: 3
Views: 1930

Re: Interface bonding issues on RB1100 and Cisco switch

RB1100AH (ROS 5.2) and Cisco 2950 was having unstable connection when connected using bonded interface. Is this a problem with Atheros chips MT is using? It never happens with chips of other brands.
by grg
Fri Apr 01, 2011 12:05 am
Forum: General
Topic: IPSec/L2TP between Win Mobile & MikroTik: Is it possible?
Replies: 8
Views: 6873

Re: IPSec/L2TP between Win Mobile & MikroTik: Is it possible

Version 5.0 still has the same FQDN problem. Mikrotik, if you don't want to make it a permanent change in code then please, at least add it as an option we could turn on or off. Something like a mode to work with broken IPSec clients.

Thanks.

grg
by grg
Tue Mar 29, 2011 8:32 pm
Forum: General
Topic: IPSec transport mode (block unencrypted traffic)
Replies: 1
Views: 603

IPSec transport mode (block unencrypted traffic)

Is there a way to set up firewall rules, that would only allow connection if it's encrypted? I'm asking this because to be able to use IPSec/L2TP I have to allow L2TP (UDP 1701) port for incoming connections on public interface. However there is no way I can make sure that L2TP connection is actuall...
by grg
Wed Mar 16, 2011 8:35 am
Forum: General
Topic: bridge port vlan interfaces becoming inactive until restart.
Replies: 2
Views: 2925

Re: bridge port vlan interfaces becoming inactive until rest

I think I got the same problem with vlans on bonding interface.
by grg
Tue Mar 15, 2011 9:09 am
Forum: RouterBOARD hardware
Topic: Interface bonding issues on RB1100 and Cisco switch
Replies: 3
Views: 1930

Re: Interface bonding issues on RB1100 and Cisco switch

FYI. It works with v5rc11, however I was not able to find anything in the changelog from rc8-rc11, that would give me any obvious clue about what made it happen. Was something changed with interface stability with ciscos?
by grg
Wed Mar 09, 2011 11:51 pm
Forum: General
Topic: IPSec/L2TP between Win Mobile & MikroTik: Is it possible?
Replies: 8
Views: 6873

Re: IPSec/L2TP between Win Mobile & MikroTik: Is it possible

First thing to start with, if you want to play with IPSec you have to have latest v5 release, because version 4 does not include NAT-T fix. Another thing to remember is that IPSec server behind NAT firewall is deemed to fail. Even if you would manage to make it your main firewall with global IP addr...
by grg
Thu Feb 03, 2011 12:03 am
Forum: RouterBOARD hardware
Topic: Interface bonding issues on RB1100 and Cisco switch
Replies: 3
Views: 1930

Interface bonding issues on RB1100 and Cisco switch

Hello MT community. I have run into a problem with RB1100 (ROS 5rc7, fw 2.29) when I try to use it in conjuntion with Cisco 3750 (or 3550) switch. I have set up bonding interface on my RB1100 using 802.3ad mode for balancing and fault tolerance and EtherChannel with LACP on Cisco to utilize two phys...
by grg
Wed Dec 08, 2010 8:51 am
Forum: General
Topic: NAT-T & IPSec Issues still exist
Replies: 25
Views: 13060

Re: NAT-T & IPSec Issues still exist

I would be happy not only to see this problem being fixed, but also IPSec having DH groups going above 5.
by grg
Mon Nov 15, 2010 9:35 am
Forum: General
Topic: IPSec DH Groups
Replies: 0
Views: 591

IPSec DH Groups

I'm being curious about why there are only first five DH groups available and nothing above? Does MikroTik have any plans on changing that?
by grg
Fri Oct 29, 2010 10:11 am
Forum: General
Topic: ROS 5.0RC2 IPSec NAT-T with different clients
Replies: 3
Views: 1969

Re: ROS 5.0RC2 IPSec NAT-T with different clients

Now I had a chance to test it with Windows Vista and I was able to successfully establish VPN link using the same settings and Internet connection that I used for testing Windows XP client. Probably ROS needs some minor quickfix to be able to communicate with XP too.
by grg
Fri Oct 29, 2010 9:40 am
Forum: General
Topic: ROS 5.0RC2 IPSec NAT-T with different clients
Replies: 3
Views: 1969

Re: ROS 5.0RC2 IPSec NAT-T with different clients

Try v5rc2

*) ipsec - supports NAT-T drafts
That's what I was using.
by grg
Thu Oct 28, 2010 11:43 pm
Forum: General
Topic: ROS 5.0RC2 IPSec NAT-T with different clients
Replies: 3
Views: 1969

ROS 5.0RC2 IPSec NAT-T with different clients

I decided to create this topic for MT community members to respond about changes in IPSec and the results with different clients. I'm going to do the first post with results I got using Windows XP Pro client with the same settings that worked with real IP address and didn't when client was behind NA...
by grg
Thu Oct 14, 2010 12:44 pm
Forum: General
Topic: UPNP not working how it should (or port forwarding)
Replies: 7
Views: 2215

Re: UPNP not working how it should (or port forwarding)

Ok, I am trying to get my UPNP working or port forwarding so my Windows Home Server is accessable from the outside. I enabled UPNP, set my lan side to internat and my Wan side to external and enabled the dummy rule. When WHS opens the correct ports I can see them in the NAT table and they are being...
by grg
Fri Oct 08, 2010 10:23 am
Forum: General
Topic: Forward chain and dynamic NAT rules when using uPnP
Replies: 3
Views: 1934

Re: Forward chain and dynamic NAT rules when using uPnP

I found my previous solution useless with dynamic external IP address. In my opinion MikroTik should update UPnP the way that it also adds dynamic forward firewall rule matching NAT rule that it adds or something like that.
by grg
Sat Sep 11, 2010 11:17 pm
Forum: RouterBOARD hardware
Topic: Blue LEDs that mikrotik is using for routerboards
Replies: 1
Views: 801

Blue LEDs that mikrotik is using for routerboards

Am I the only one who is somehow concerned about those blue LEDs that are used on routerboards? What I want to say is that I find them way out of balance with other unit LEDs by their light intensity. I know that there are many DIY fixes to solve this problem, but anyway, wouldn't it make more sense...
by grg
Thu Sep 09, 2010 11:53 pm
Forum: General
Topic: Forward chain and dynamic NAT rules when using uPnP
Replies: 3
Views: 1934

Re: Forward chain and dynamic NAT rules when using uPnP

This is what I use to cover uPnP needs: /ip firewall mangle add action=mark-packet chain=prerouting comment="Marks packets for checking against NATed destinations" connection-state=new disabled=no dst-address=<my external ip address on mikrotik> new-packet-mark=nat passthrough=yes /ip firewall filte...
by grg
Thu Sep 09, 2010 12:18 am
Forum: General
Topic: Forward chain and dynamic NAT rules when using uPnP
Replies: 3
Views: 1934

Forward chain and dynamic NAT rules when using uPnP

MikroTik community: I have one example that I would like to get your opinion about. I'm using upnp on my routerboard to deal with p2p and IM applications. Basically what it does, it creates dynamic NAT rules. However it does not do anything with forward chain. That is the thing I need to configure m...
by grg
Wed Sep 08, 2010 12:57 am
Forum: General
Topic: Connect to home L2TP VPN from outside home network
Replies: 1
Views: 643

Re: Connect to home L2TP VPN from outside home network

Is your MacBook behind NAT? You might want to make sure about that, because there is an issue with such setup: http://forum.mikrotik.com/viewtopic.php?f=2&t=33595 . I faced it when I was trying to set up IPSec/L2TP VPN on my XP laptop. You must exclude this one before you take any further actions. A...
by grg
Fri Aug 20, 2010 10:50 am
Forum: General
Topic: IPSEC and NAT-T problem
Replies: 60
Views: 51650

Re: IPSEC and NAT-T problem

Yesterday I was trying to set up L2TP/IPSec VPN using ROS v4.11 with public IP and Windows XP SP3 client behind NAT with the same result: it does not work when client is behind NAT. Instead of encapsulating replies it sends data to NAT router IP address directly. I just went through all related post...