MikroTik

zervan

I was updating CRS328-4C-20S-4S+ from 7.13.3 and CRS328-24P-4S+ from 7.13.5 - both have failed: setting up elf image... not an elf header, kernel loading failed I had to netinstall both of them. Is this normal? I am not sure, but it is possible that before update I have marked wireless package to un...

zervan

*) certificate - allow to import certificate with DNS name constraint;

Thank you, it is working! (reference: viewtopic.php?t=195195)
I can install new router with RouterOS 7 soon, after release of stable 7.11 🙂

zervan

This bug is fixed now in RouterOS 7.11 (https://mikrotik.com/download/changelog ... 5f6795bbd4).

zervan

Well, I have isolated the problem - RouterOS 7 is not accepting CA certificates with nameConstraints property, if this property is marked as critical . See the attachments - critical file cannot be imported. Why? Is it a bug? You can play with generation in a Linux machine: openssl req -newkey rsa:2...

zervan

Hello, I have been still using RouterOS 6 on important routers. I am using my own root CA (imported on all computers and devices in organization) and some intermediary CAs without any issues in RouterOS 6. Now I tried to import my CA to RouterOS 7.8 (and some older RouterOS 7.7, 7.6, 7.5), but it is...

zervan

I have the same problem, but setting RoMON ID didn't help. The only solution I have found is to use hybrid ports between switches - it seems like RoMON (and also Neighbors Discovery) frames are sent as untagged.

zervan

Conflict detection was always there (RFC requirement for DHCP servers). MT just added a checkbox to disable it (I am still puzzled who would need that because it breaks RFC). Maybe I need to disable conflict detection, because some devices are acting strangely - assign, deassign and sometimes it is...

zervan

Did this update break anyone else's pwr line setup? I have a pwr line pro and at the other end of pwr line AP and the link between them is now incredibly unstable. I had to downgrade to 6.47.8 to restore connectivity. Yes, there is a bug at least in PWR-LINE AP: The problem is that interface "...

zervan

Since RouterOS 6.43 it s possible to fetch to variable, no file is needed: :local IP "10.111.0.21" :local name "Povazie" /tool fetch url="http://$IP/jsonrpc?request={\"jsonrpc\":\"2.0\",\"method\":\"Input.Select\",\"id\":1}&q...

zervan

Hello, is somebody using IGMP Snooping with HW Offloading on CRS? What are your experiences? Is it working well, is it reliable? I am a little conservative in production environment, still using 6.40.8 bugfix, but there are some places I started to test current branch with this new function. Unfortu...

zervan

Somebody using CRS112-8G-4S ? I have 2 SFP modules on it. It is rebooting me each 2 minutes when I turn on IGMP Snooping . The same problem was with v6.41. Can't make supout, because not enough time to next reboot. Automatic Supout in Watchdog is not working (don't know why). No problem with CRS109-...

zervan

What is problems . I upgrading my routerboard RB2011UAS wireless model. version 6.7 -> 6.41

Please , tell me , What is problems ?

Set frequency to 600 MHz, uncheck "Protected Routerboot", reboot.

zervan

Somebody using CRS112-8G-4S? It is rebooting me each 2 minutes when I turn on IGMP Snooping.

zervan

Is there something changed related to OSPF? I've just upgrade the main router RB1200 and OSPF routes are mostly lost. I've also lost all the VLAN connections :-o I thought it should work after upgrade - at least when I was testing on my home router, OSPF and VLAN were working fine. The problem with...

zervan

Is there something changed related to OSPF? I've just upgrade the main router RB1200 and OSPF routes are mostly lost. I've also lost all the VLAN connections

I thought it should work after upgrade - at least when I was testing on my home router, OSPF and VLAN were working fine.

zervan

*) userman - added "/tool user-manager user clear-profiles" command;

What does this mean? Where on wiki are these commands?

zervan

Is anything new about NAT64? Maybe some new RouterOS version?

If not, maybe this could be useful (at least for testing): http://www.internetsociety.org/deploy36 ... in-go6lab/

zervan

assigned address will not be displayed anywhere in GUI/CLI. But it will be standard EU64 conversion of the prefix and the MAC address of the interface. You can ping it, connect to it etc.

Well, but.. why is it not mentioned anywhere? Could it be displayed in IPv6 Addresses, with some flag?

zervan

Hello, I have this script: :local IP "10.111.0.22" :local name "Senzi" :local file "sdcard/json-$name.txt" /tool fetch url="http://$IP/jsonrpc?request={\"jsonrpc\":\"2.0\",\"method\":\"Player.GetActivePlayers\",\"id\&quo...

zervan

That does not really work... or: it does not work very well. That totally depends on the client. Some clients roam nicely, other clients do not roam at all. Yes, laptops have no problem - drivers in Windows allow to set roaming aggressiveness (I use high) and roaming preference of bandwidth or dist...

zervan

I am not sure if it is related to this version, but I have problem with the LEDs. After reset they are all off. I use exported config to restore configuration (because I am teaching and students have various RB models) and there are these commands in export: /system leds set 0 interface=ether1-wan s...

zervan

I still don't understand how Loop Protection works. I have a vlan, the vlan is a part of bridge. There is a loop on the vlan, vlan is disabled by Loop Protection correctly. There are no packets on vlan (nothing on Sniffer), but bridge is still receiving everything (catching by Sniffer, input firewal...

zervan

Still having problems when on local bridge enabled rstp. After disabling rstp, everything works as it should. This was broken in release before this one. Two Mikrotik routers connected to each other. When rstp is enabled, I can't ping the other Mikrotik. Normally I am using just bugfix releases, bu...

zervan

I have upgraded my switches to the latest version. I really appreciate the naming of ports (don't know which version brought it). I also enabled IVL for VLANs, but after that, I can't see Hosts table any more - ERROR:Lost Connection. Once I saw the table and there were VLAN ID lowered by 1024 (261 i...

zervan

krdx: My opinion is - don't use any auto :) If you do need connection tracking, enable it, if you don't disable it. Mostly it is needed, but I also use many routers or just bridges connecting various multiple LAN networks and I don't use connection tracking there - there is no NAT and no firewall. I...

zervan

krdx: Why do you have the bridge firewall rule? Try to remove it, it is not needed. And what about hotspot, why is mentioned in export? Hotspot does need connection tracking to work.

zervan

There is a SSL fix in the changelog, so I was hoping it will help me to solve my problem, but it is not: I have 2 certificates using the same certificate request file (private key). If I upload only certificate1, then import private key, it is working fine. If I upload only certificate2, then import...

zervan

Thanks for the link, it is really useful. But as I said before: I don't care about many changes let's say in 6.35.4 which are fixing 6.35.3 bugs, I just need to see summary of changes from 6.34.6 to 6.36.4. Moreover, it would be much more convenient to see changes in for example firewall grouped in ...

zervan

I understood...but it will be more significant for people who upgrade in winbox to be alerted about IMPORTANT changes according installed version and for those who download on your website to see that there are something IMPORTANT to do before. For my commercial use I need only bugfix to avoid clie...

zervan

All routes coming from RIP went inactives today. ... Reboot solved the problem.

Exactly the same problem here on RB2011UiAS-2HnD and CCR1009-8G-1S-1S+, both upgraded from good old RouterOS 6.33.5. I thought that 6.34.5 should be very stable upgrade, but instead of that - lost connection

zervan

RB2011UiAS-2HnD is reporting Voltage as 0.0 V and no temperature too.

zervan

In previous versions, the Address was empty for dynamic hosts, so I could get it right as in screeenshot, dynamic hosts first, sorted by Expires column and then static hosts: 1. click on Expires column, sorting is by this column ascending; 2. click on Expires column again, sorting is by this column...

zervan

but I think a additional sort criteria with "D" for dynamic will be fine to give the look as before. I was thinking about that too. It would not be the same - it would just list dynamic hosts first, sorted by IP. But I would like to see most fresh dynamic hosts first and, after them all t...

zervan

What is the actual problem with sorting? We fixed Winbox and DHCP leases. Big part of information was not shown for static entries. Now you can see it. Please send to support@mikrotik.com screen shots where we could see correct and incorrect behaviour. You are right, the problem is about not empty ...

zervan

There is something wrong in 6.33.6 and 6.34 relating secondary column sorting in WinBox, both 3.0 and 3.1. See the screenshot from 6.33.5 and previous versions - I use the sorting where ascending Address is primary and descending Expires secondary column. dhcp-server-leases.png I can not set that in...

zervan

I have still a problem on CRS212-1G-10S-1S+ - SFP modules (OEM) temperatures are not available, Wavelength is also not correct. It was working with 6.31.

The good thing is that this update has resolved full log of "excessive broadcast" (problem in 6.32.1, was fine in 6.31)

zervan

my RB450G has below warning, is it normal or bug? ether2-master-local excessive broadcasts/multicasts, probably a loop I had the same Issue with a CloudSwitch CRS125-24C-1S-RM in 6.31 with two WAN uplinks (WiMax & DSL)h The same here on CRS212-1G-10S-1S+ - just one interface (all ports switched...

zervan

I have issue with switch port flapping with 6.31 on "model: 750", after downgrade to 6.30.2 all is ok I have same problem on two RB750. After downgrade to 6.30.2 port flapping reveals on week or more - reboot needed. Guys, sorry I didn't believe you - because RB751U and RB751G (and many o...

zervan

I have simple queue and its graphing rule like this: /queue simple add max-limit=10M/20M name=zakaznik-700 parent=wan target=vlan-man-700 /tool graphing queue add allow-target=yes allow-address=10.112.11.0/24 simple-queue=zakaznik-700 I expect that the graph should be accessible from specified subne...

zervan

Just saw memory usage got bigger and bigger every minute - memory leak again? (had 87MB free RAM) (CCR1009-8G-1S-1S+). Anyone else?

No problem here on the same CCR model...

zervan

So, is it possible to use CAPsMAN (old or new) to manage OpenWRT access points? They should support CAPWAP, at least I think.

zervan

There is a fan hole on the back side. Did somebody tried to open the box and install a fan there? ... Is there a connector inside? I've just open it - there is no power connector, at least I don't see any on the upper side of the board. Well, external power supply for fan could be used. Distance be...

zervan

I have the same problem with temperature on CRS212-1G-10S-1S+IN (no connection problems yet, but I have it for short testing time). SFP modules are very close each other. When the switch has full number of them (10) and they are turned on, overheating occurs. The temperature is going to 70-80°C (hig...

zervan

So, is the flow control a good thing or not? I've found this negative old article: http://virtualthreads.blogspot.sk/2006/ ... ntrol.html
What do you think?

zervan

And you were updating combined package or single packages installation?

The main package (I think it is mandatory, isn't it?) + some extra packages (not all), see screenshot from one of the routers.

zervan

You can use that "comfort" udate feature further, even if you install manually selected packages only instead the combined package. It is your choice, of course... I am talking about automatic update (System -> Packages -> Check For Updates) - not about uploading any packages manually. Sy...

zervan

Don't use combined package and install individually selected packages only. Then you will not be surprised by this. I think most of us are using very comfortable update from WinBox (System -> Packages). But this time it is really enabling wireless package on all RouterBoards, also if the do not hav...

zervan

Seems like netinstall 6.30.x is broken. I've downloaded the old netinstall 5.26 and this is working. Unfortunately, the old netinstall can not upload the new RouterOS 6.30.2, so only option is to install the old 5.26 and then update to 6.27 (I don't know why this version is provided by System Packag...

zervan

I have exactly the same problem now - the old RB1200 is working, but I am moving it from one customer to the new one, so I'd like to netinstall it. I tried netinstall 6.30.2 and also 6.31rc11, the same problem: RouterBOOT booter 3.10 RouterBoard 1200 CPU frequency: 1000 MHz Memory size: 512 MiB NAND...

zervan

Does somebody experienced problem with time after reboot? See the screenshot from log. There was reboot at 6:12, but the router had back time 14:10 from the previous day.

zervan

pptp server is still broken in 6.30.2 ppp,error,critical 16: Encryption got out of sync - disabling Is it a MTU related issue? I am using SSTP, but I also have one temporary PPTP and no issues here - nor 6.30.2 neither the previous: /ppp profile add change-tcp-mss=no dns-server=192.168.254.1 local-...

zervan

Is it solving a strange issue which I have mostly on RB750G with only 32 MiB of memory - log is full of 'CRL sice exceeds free memory, aborting update'?

15 hours after update to 6.30.2 everything seems to be working fine...

zervan

short answer: don't use multiple master ports Using multiple master ports will create port isolation groups automatically (marked as default), so I neither understand why is this bad. I was experimenting much and it seems there are still some bugs here - sometimes adding and removing will mess up a...

zervan

certificate manager - fixed memory leak Is it solving a strange issue which I have mostly on RB750G with only 32 MiB of memory - log is full of 'CRL sice exceeds free memory, aborting update' ? Then the router is acting strange - sometimes web interface is not available, other time CPU is 100%, som...

zervan

I am using User Manager (UM) for WiFi hotspots. One of my customers now have special requirement - users of UM's profile1 should have different firewall rules than users of profile2 . Is there a way to distinguish UM profile in RouterOS firewall? There is a mention of an IP Pool for UM User here: ht...

zervan

I was testing this more and there are some strange things... The router1 had very long uptime. I turned off all firewall rules, redirections was still not working. I turned on firewall back and redirections started to work and they are still working after reboot. So it seems like ICMP redirections s...

zervan

Hello! I know that there are very few situations like this, but maybe somebody will help... My computer PC1 is on LAN1, using router1 as default gateway. There is also a router2 on LAN1, which is the gateway to LAN2. When I send a data to PC2 (on LAN2), they are sent to router1, then to router2. The...

zervan

I am using formal bridges for each network - for example I use bridge-internet instead of a port (like ether7 ) also in situation where this port is the only part of the bridge. That's because port assignment may be changed in the future. The problem is that speed reporting is not working as I expec...

zervan

Today the router was connected to WAN by port 7 - it was working, but after reboot it is not accessible again, neither from LAN / WinBox discovery. What's wrong? Is this some incompatibility with Cisco switch? I am feeling like a fool when I need to ask remote operator to disconnect cable again and ...

zervan

If you lose connection during Safe Mode, manage to reconnect before the Safe Mode times out, and ask for Safe Mode again, you will always be told that someone else owns Safe Mode. This is not new with Winbox 3. You have always had to bring up a Terminal window, request Safe Mode there, and choose w...

zervan

Hello! I decided to try new WinBox 3 (RC9) few days ago - I like the session feature. But I had some troubles with Safe Mode - is it working correctly? I had turned on Safe Mode, made some changes, lost connection. I reconnected back, but there was the old session in the Active Users list and I was ...

zervan

What is the meaning of green and orange ethernet LED? I have some new remote CCR1009 to configure. I asked operator to connect eth1 to LAN and eth8 to WAN, then connected by VPN there and made basic configuration. After reboot I lost connection - router is not responding even to WinBox discovery fro...

zervan

Please run following command on your device "/system logging add topics=sstp,debug,packet". Then reconnect all your sstp tunnels and generate supout file. Send this file to our support e-mail.

Well, I have just done it - [Ticket#2014120566000721]. Thanks for taking care.

zervan

There is something strange about SSTP client in this version: if there is just one SSTP connection from router, no problem; if there is one SSTP and one PPTP connection from router, no problem; if I manually connect router to two SSTP connections, no problem; if there are two SSTP connections, after...

zervan

It seems like
Code: Select all
/system leds set numbers=[find leds=user-led] type=on
should work, right?

I think there is a small bug here - that command is working only if user-led is defined. So I must use

 /system leds add leds=user-led type=off

first. This is missing in WinBox.

zervan

I have used command

/led user-led=yes

in netwatch. Now it is not working. What is the new syntax?

EDIT: It seems like

/system leds set numbers=[find leds=user-led] type=on

should work, right?

zervan

SSTP and PPTP clients are not working!

If I would update a remote router connected to my central router by VPN, I would lost it. Downgrade to 6.20 solved the problem.

Almost each update is causing some troubles. I agree - it is crazy.

zervan

has all the sstp and pptp issues been resolved from the 6.8 debacle? Would like to know as well. Have held at 6.7 because I need to maintain SSTP compatibility with Windows clients. I am using SSTP with 6.20 (and 6.19) with Windows clients and I didn't experienced troubles. What kind of issues shou...

zervan

Well, DHCP Leases Address List bug seems to be fixed now.

But I can't find any Stores in Winbox - they were moved from System -> Stores to System -> Disks, but it is completely empty - no disk, no storage. I can just see folders in Files windows. Is it OK?

zervan

With due respect zervan, the mistake is upgrading production routers to the latest version quite so quick. I would advise testing before deploying any software or if not possible watch the forum while others test I was explaining that: I thought that since there are public RC versions to download, ...

zervan

What's new in 6.20rc6 (2014-Sep-08 10:16): ... Winbox v3 is required for router’s configuration. SERIOUSLY? IS STILL FULL OF BUG AND IS NEEDED FOR 6.20!!!??? Unfortunately, yes. I have upgraded one of my routers to 6.20rc6 to test if Address List of DHCP Lease is fixed (it is not) and it is not pos...

zervan

I found a very simple way to reproduce the problem: add an Address List to some DHCP lease, reboot, check the DHCP lease - there is no Address List mentioned in 6.19. There is no need to reboot - closing Winbox and opening again is enough. I have reported to support. I've got answer from Mikrotik s...

zervan

May be you know what is better to do in case ipsec show 96% of cpu in profile, but at this moment I have no any ipsec connection? I don't know why, but I have configured l2tp/ipsec vpn server before, but now there no any ipsec proposal and peers. If i open PPP->l2tp configuration and save it again,...

zervan

i use rb751u2hnd, if i enable ppp-out 3g use usb 3g modem, cpu process suddenly rise to 100% if i disable ppp-out, cpu process back to normal again, why? this problem began after RoS 6.xx No problem with that using RB951Ui-2HnD + ZTE modem, nor RB2011UiAS-2HnD + Huawei modem, both with RouterOS 6.1...

zervan

I found a very simple way to reproduce the problem: add an Address List to some DHCP lease, reboot, check the DHCP lease - there is no Address List mentioned in 6.19.

There is no need to reboot - closing Winbox and opening again is enough. I have reported to support.

zervan

The format is correct, the same error appears if I set address-list to particular lease number. The first problem is that since manual setting of Address List in WinBox will remain and seems to work correctly (despite the same error in log), setting using command in Terminal is not working correctly...

zervan

Another question about dhcp lease address-list problem is - how to fix that? I tried command /ip dhcp-server lease set address-list=klient numbers=[find server=dhcp-lan2] - but it is not displaying it neither and there are messages in the log like dhcp,error dhcp-lan2: failed to add address-list kli...

zervan

It seems like there is something wrong with dhcp-server lease address-list parameter. Here is a line of my last backup - as an example: /ip dhcp-server lease add address=192.168.1.91 address-list=klient mac-address=00:1E:74:DD:A3:9F server=dhcp-local Everything was working for years. Today one of lo...

zervan

@zervan: If you read the forum...

It is the question of trust. If I trust Mikrotik (doing well working), I will not hesitate to upgrade and I will not check each update on forum if somebody had worse luck before me. Last few months I didn't experienced any problems, so I had trusted.

zervan

Uninstall the wrong package then install the new one.

I was worrying that I will loose configuration and data, but it is working: I've set this package to uninstall, saved new one to router and than just one reboot - old package was uninstalled and the new one installed, it is working again.

zervan

EDIT: It seems that the last torrent file is containing bigger working package, I am downloading... Yes, it is containing big file, but now I don't know how RouterOS force to update this package. I tried to save it to router and reboot, it is not working. EDIT: I have found hint from Alessio Garava...

zervan

INSANE IS USE ONE "JUST OUT" VERSION TO UPGRADE MULTIPLE DISTANT DEVICE ON PRODUCTION ENVIRONMENT!!! Not only MikroTik, but also Cam... Cis... and Ubi... haved the same problem on some release... I thought that since there are public RC versions to download, each "stable" versio...

zervan

This is insane! I've updated RouterOS to 6.19 last evening in multiple organizations and today they are calling me that WiFi authentication is not working, since I'm using userman :shock: How can you offer "stable" version with such a huge mistake? I really need to download PPC version of ...

zervan

Despite my mistake it seems that this protection is not working as expected. Simple test: start Putty, try to connect to SSH using wrong password. RouterOS allows to guess password 6 times in one connection! So there are 6 log records about it and protection rules will mark it only as first attempt....

zervan

Oh, sorry, I was wrong. I have two systems with this solution and I showed log from the first and firewall rules from the other. The problem is that I have misclicked on the first one - used add-dsc-to-address-list instead of add-src-to-address-list :shock: I'm sorry. I will check it again (normally...

zervan

zervan , I don't believe you are correct. The Bruteforce page explains how the IP will be added to blacklist for several wrong attempts. He can't "bruteforce from single connection", if password is incorrect, the users is disconnected. Make sure you have correctly implemented the rules fr...

zervan

No, I didn't make any backups manually (inside User Manager). The strange thing is that after loading log from file (in terminal), User Manager doesn't show anything in his log. User Manager is very strange indeed - there are some things that are duplicated - some of them are accessible from User Ma...

zervan

Yes, it is in the new format - I have done it as I wrote. I use script which save UMB backup and clear log at the beginning of each month and now I needed last few months to check some security issues. I think that some UMB log extractor or viewer would be very useful.

zervan

I've found some work-around - install UserManager on clean Mikrotik, upload UMB log file, load it and print it to file using: /tool user-manager database load-logs name=userman-log.umb /tool user-manager log print file=um.log and download the log file to computer to analyze. It is not very efficient...

zervan

Suddenly my cpu was up to 100%, latest actions used was 'ip-arp make static' and 'torch'. Also my logging usb flash was reseted do not know if this was before or after that high cpu usage.Profile was showing 'management' as eating the hole cpu, i was not able to generate any supout file due to this...

zervan

I need to find some information in old userman logs, which are backed up in .umb files. Unfortunately, this format is not readable. Is it possible to view them? Some kind of UMB viewer?

zervan

Well, what do the others think? Should Mikrotik change this behaviour? (disconnect after bad password) Or is it perfectly normal? I can write to Mikrotik support and ask them, but I'd like to know some opinions first

zervan

Don't believe so... why not actually secure your router and use VPN etc to connect. It is generally a bad idea to leave services open like that. Or use port knocking, etc. Yes, it is possible to solve it this way, but the question is: Is it possible to limit login attempts in one session? I thought...

zervan

Yes, but it is not good enough, see this discussion: http://forum.mikrotik.com/viewtopic.php?f=13&t=78695

zervan

You use these rules who are on the link below http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention This solution is not working, because it is just limiting number of connection attempts from an IP. The problem is that attacker creates just single connection and using this he is using brute-fo...

zervan

Careful while upgrading there are ton of bugs - possible u have to do master reset It is not so bad - I've upgrade all of my 16 various routers and everything works so far. What Ive want to ask is, there are new futures on ether Auto Negotiation TAB Tx/Rx Row Control and Advertise since I cant find...

zervan

Changed the design of the panels in Winbox, and not for the better. Became scary and very uncomfortable. :? Return back, please, as it was in versions for 6.10 inclusive. I don't have anything changed in design. Did you try to run Winbox from another computer? EDIT: Oh, sorry, I was wrong. I though...

zervan

Does somebody have a solution for this? I am using multiple hotspots under central User Manager is a school. Each student has monthly data limit - it is intended for internet access because of a limited capacity. But there are local resources on LAN (data storage) for which I want to bypass data acc...

zervan

I've set Flow Control to auto on all my routers. Can I see if it is turned on? Wiki says something about autonegotiation - how can I see the result?

zervan

So, we have Flow Control in the new RouterOS 6.11. Let's try it now!

zervan

I have upgraded all of my routers (many RB750, RB750G, RB751G, RB433, various SXT, RB2011L, RB493G, RB1200 and maybe some others) - RouterOS first (very slowly, expecting various troubles) and firmware 3.10 later - everything was fine, I was surprised (many reported troubles here in forum). Great, i...

zervan

How many users do you have? Check "/tool user-manager database print", which database is the one taking up space? About 150 users. The space was restored back after reboot, so now I don't know which database it was - I will check that next time: > /tool user-manager database print size: 7...

zervan

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space It sounds like it is not solving the main problem ... That image was taken before we released v6.3, it shows September 2. Did you upgrade to the version we released on the web Today ? Yes, you are right! I will ...

zervan

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space It sounds like it is not solving the main problem - disk space constantly filling sometimes (see Ticket#2013090266001555 and graph in screenshot here - from ROS 6.2), but just avoiding the symptom. Yes, it is be...

zervan

Appeared again in 6.2 Yes - interface graphs are lost on various RB models, but CPU, HDD and memory graphs remain. It seems to be a new bug, not the same as it was long time ago. Nevertheless, it is said that once fixed bug it is appearing still again in the other forms. Mikrotik stuff: please chec...

zervan

in v6rc14 we have included new RouterBOOT version for RB2011, it fixes such problems. Please try upgrading to rc14 and new RouterBOOT and see if you have similar issues ever again

It seems like the stability problem disappeared since I've upgraded to rc14, thanks!

zervan

I've done some real-world measurement with RB2011L, RB493G ... Can I ask how this test was done? I was using iperf with 5 parallel transfers, TCP Window 64 kB, buffer 1 MB. It corresponds best to my needs - practically the same performance as when I make multiple transfers from server / NAS to clie...

zervan

what is connected to that port which has VLAN problems (what switch or what NIC) ? It seems like it doesn't matter - there is RB250GS switch connected to ether1, but when I was looking what's wrong, I took RB2011L and connect it to other devices (RB1200 and maybe computer directly too, I don't reme...

zervan

2x 5Ghz dual links (with SextantG) and a cheap solution for bonding this 2 links transfers ... what do you say, can handle the RB2011L-IN and bounding the 2 links in 1? I think RB2011 should be enough powerful to bond these two links together, but I have never tried that. In fact, I haven't ever ne...

zervan

in v6rc14 we have included new RouterBOOT version for RB2011, it fixes such problems. Please try upgrading to rc14 and new RouterBOOT and see if you have similar issues ever again I've upgraded now (I was avoiding it before because I use VLANs and there is a bug in v6rc14 relating to it, see http:/...

zervan

I've done some real-world measurement with RB2011L, RB493G (should have the same performance as RB450G) and RB750G, here are results: RB2011L-IN 6.0rc11 routing: 914 / 901 Mbps firewall + conntrack: 464 / 478 Mbps NAT: 360 / 355 Mbps [b]RB493G 6.0rc11[/b] routing: 624 / 574 Mbps firewall + conntrack...

zervan

Upgrading an RB1100AHx2 with VLANs from rc13 to this rc14 the router was inaccesible, only connecting directly to the ether13 i can access by MAC in winbox and solve the problem changing the L2 MTU from 1598 to 1700 of the ether3 where are all the VLANs ;) I can confirm VLAN bug in RC14 on RB751G w...

zervan

Would this function be implemented on RB250GS in future releases of SwOS or it is not possible due to hardware?

Maybe somebody else is also interested, here is the response from support: Vlan-based egress actions on RB250GS is not possible
due to hardware limitations.

zervan

I've spent a lot of time to realize that switch2 ports (on RB2011) are not working at all if their VLAN Mode is set to fallback - it doesn't matter if they are part of a bridge or not. I started Packet Sniffer and all received packet from switch2 were marked as VLAN 1. Why? Switch1 is working fine ...

zervan

http://wiki.mikrotik.com/wiki/SwOS#RB260GS_VLANs_tab This is very useful function allowing to solve this situation: * each packet incoming from port A will be marked as VLAN X when going to port B; * packets incoming from other ports will not be changed (neither packets with no VLAN) when going to ...

zervan

Would it be more effective to use external Gbit switch instead? Yes, it would be, but it depends on what are you using the router for. According information on http://routerboard.com/RB493G RB493G should handle bridging at 1 Gbps. But it will use CPU and other performance may be limited at the same...

zervan

share your snaps for future config Well, here is it... This router is configured as an AP. There is another AP (not mikrotik) connected to ether1. There is a VLAN 242 on ether5 connected to hotspot on the main router. All packets from both APs (integrated WiFi and another AP) should be transported ...

zervan

No offense, but your configuration seems to be messy in my eyes: You have assigned IP 192.168.88.1 to multiple interfaces - wlan1, ether2, ether3, ether4, ether5 are parts of bridge-local, so you should assign it only to just one interface (bridge-local in this case) and not for each port. You have ...

zervan

You have two options: don't use ADSL router as gateway - configure Mikrotik as PPPoE gateway and use the ADSL router only as modem, it will be more stable and more powerful if you really need to use ADSL router as gateway, then you will need to configure port mapping on your ADSL router (map TCP/80 ...

zervan

eth-10 and 7 have been given an ip addresses on separate sub-nets and connected to computers in the same subnets. ... Even two directly connected routes with no Vlans don't work. This seems to be the easiest way to test. You don't have DHCP on eth7 nor eth10. So you can set IP addresses manually: P...

zervan

Please I need urgent File RouterOS v6.11rc for CCR1016-12g

It's still there: http://download2.mikrotik.com/routeros/ ... .0rc11.npk

zervan

So if master/slave ports is better for performance, what is recommended setup for RB493G ? It has 2 switch CPUs. Should I slave ports 2-4 to 1 and 5-8 to 4 ? And then bridge 1, 4 and wireless ? There is a small mistake - ports 5-9 should have master port 5 and then 1 & 5 & wireless (really?...

zervan

They must have the same frequency. If the client is set to wrong frequency, it will automatically change it to the right one according to AP with the same SSID. See the wireless interface's status of the client or command:

ros code

/interface wireless monitor numbers=0

zervan

Edit: I've realized that it may be useful if I do it on opposite direction - VLAN on ether bridged together with WiFi. I am going to try...

Yep, now it is working exactly how I need

zervan

snap is attached for ref. This is not what I need. It just joins existing VLAN-marked wireless packets to ethernet port as bridge. If client (notebook, phone) connects to wireless interface, he will not be handled as VLAN. Edit: I've realized that it may be useful if I do it on opposite direction -...

zervan

you can add vlan tag on mikrotik wireless interface Where exactly? I didn't found anything about VLAN there (http://wiki.mikrotik.com/wiki/Manual:Interface/Wireless) I could create VLAN over wireless interface, but it is not what I need - at least I think. I thought that maybe I could use switch ru...

zervan

I am using WiFi APs TP-Link TL-WA901ND and they have very useful function - they can add VLAN ID tag to each incoming packet from WiFi when it is forwarded to ethernet. I would like to achieve the same on RB751G - is it possible? Or is this possible on some other Mikrotik router?

zervan

On rc11-rc12 (build from 26/Mar) on RB2011 there is a problem with Graphing of interfaces.. When I reboot router the statistics of interfaces is deleting.. THe CPU, HDD, Memory its ok.. A`m testing on 1036 the last build and there is everything ok.. I've mentioned that some time ago (http://forum.m...

zervan

Today I was solving exactly the same problem on RB2011L - switch1 group (ether2-5 ports) bridged together with switch2 group (ether6-10 ports), DHCP was not working on switch2 ports. I've spent a lot of time to realize that switch2 ports are not working at all if their VLAN Mode is set to fallback -...

zervan

Does sending ICMP redirections work in v6rc11? My computer PC1 is on LAN1, using router1 as default gateway. There is also a router2 on LAN1, which is the gateway to LAN2. When I send a data to PC2 (on LAN2), they are sent to router1, then to router2. There is no ICMP redirection sent to PC1! I was ...

zervan

It seems like ROS v6rc11 is not saving graphs for interfaces? I've upgraded routers from 5.24 a week ago, yesterday there was a power outage here and all interface graphs are lost :( Queue and resources graphs remain. Configuration is good: > /tool graphing interface print Flags: X - disabled # INTE...

zervan

my RB433 always in 100% CPU process(most wireless process in profile) after upgrade, reboot machine didn't solve the problem I use two RB433 with different configuration (1: 802.11n @ 2,4 GHz + NV2 @ 5 GHz, 2: 802.11n @ 2,4 GHz + hotspot) - working fine. Try to inspect what's a problem your configu...

zervan

So here is right format: "0x00'text'"

zervan

Now I'm going to test IGMP proxy using VLC streaming. It is not perfect (there are some problems from time to time when streaming FullHD video), but it is working. In DVBViewer there is a parameter "buffercount" and I had there a value of 100 and it makes troubles with connection tracking...

zervan

It seems that the problem is related to DVBViewer Netstreaming Plugin (v. 1.4.6.0), because cca 10 Mbps streaming from VLC 1.1.11 is working fine. I am confused with that DVBViewer - it is working if streaming PC is connected to 100 Mbps. It is working in these situations: PC1 --100M--> router --1G-...

zervan

It seems like there is a problem when streaming PC is connected on 1 Gbps - only half of packets are forwarded on RB750G. It is working fine when the speed is 100 Mbps - see the screenshots. Any ideas? Strange thing is that TCP is working without any problems - I've measured over 920 Mbps routing sp...

zervan

Connection tracking is on. There is no fastpath in v5. Thanks for information. It's really strange, so I made a small change: at first streaming computer was connected on 1 Gbps to switch and from switch to router, now I changed that - streaming computer is connected directly to router. Surprisingl...

zervan

Using ROS v 5 I have 2011s typically running 4 x 7 Mbps streams through IGMP proxy while doing other work and those streams are fine. Have you been mainly trying v6? I've tested it in ROS 5.24 witch the same result. Are you using Fastpath? (no connection tracking - then it is working fine on RB2011...

zervan

After further testing I've realized that the problem is not about Connection Tracking, nor IGMP proxy - it's more common and worse than I thought. First, I've tried some other routers (RB493G, RG750G, RB951) - none of them was able to stream multicast video using IGMP proxy - neither with Connection...

zervan

What is the CPU load?

cca 9% in average - the same with and without connection tracking

zervan

I'm just testing IGMP proxy with very simple setup: first IP subnet on ether1 as Upstream second IP subnet on ether2 no firewall rules at all multicast video streaming using DVBViewer on ether1 (cca 19 Mbps, whole DVB-T transponder) VLC client catching stream on ether2 It is working fine while Conne...

zervan

I can't assign more LEDs to show signal level on SXT, RoS v6RC10: /system leds add interface=wlan type=wireless-signal-strength leds=led1,led2,led3,led4,led5 failure: Maximum led group size reached, only one led per action available! Is it a bug? This command is working on RC9 - but I don't know if ...

zervan

That's only the first page. You should copy all pages or use this command to save output to file filter.txt, then send the whole file here: /ip firewall filter print file=filter Moreover - in WinBox, you should click on "#" column header to order rules by rule number - to see real situatio...

zervan

If I understand correctly, whenever router will experience port scanning, it will save intruders IP address in firewall address list, thus preventing particular IP address communicating with my router? Yes could anyone assure if judging by screenshot configuration for blocking port scanning is conf...

zervan

Thing that got my attention was established connection. Shouldn't it drop in case intruder wouldn't be able to authenticate SSH connection with raspberry? No, his script will try some passwords from dictionary and maybe trying brute-force. You should add some protection to firewall, such as automat...

zervan

The previous version was 6.0rc9 updated by pressing the button "Check for Updates" Me too - everything was ok on RB493G and a pair of SXT 5HPnD. What am I doing wrong? Nothing - you did it right, but there was probably something wrong in RoS update system. Or maybe - what about "Free...

zervan

Where is PPP package?

I do have it there (but not using).

zervan

but where is the 6rc10 files in the download page?

There is only main package (.npk) now, marked as "pre-release". It seems like RC10 was canceled because of some issues, so we should wait.

I've upgraded my RB493G without any problems, maybe I'm lucky one

zervan

warning on download page: Hotspot not working

Is it a bug in RC10 or hotspot is not implemented in v.6 RC at all? I've started to upgrade routers from 5.x to 6rc9 except those with hotspot function. I had a plan to upgrade them with 6rc10, but now I see that will not work.

zervan

I have been using Client ID for DHCP Client in RoS 5.x, but there is a difference in RoS 6 - I need to set DHCP Client Option, but I don't know how to set my own text value instead of default "0x01$(CLIENT_MAC)". Could somebody help?

zervan

There is a hotspot with 192.168.130.0/23 on hotspot interface (internal WiFi bridged together with 4 LAN ports with another 6 WiFi APs) which uses DHCP relay from the main router. It works, but some clients complain that they can't connect to WiFi. I found a problem, here is an example from the main...

zervan

Anything new here? Is it really necessary to remove old hosts using scheduled script (which works fine) or is some setting somewhere?

zervan

have you tried using "add if missing" in combination with constructing an ACL that matches untagged frames from the other ports and then sets a new VLAN id of ZERO (0) instead? If MT used the same logic in SwOS, I'm wondering if setting VLAN ID of 0 on the target port of an ACL rule would...

zervan

What does this property mean? (using terminal: /interface ethernet switch vlan, property independent-learning)
I can't find it in Wiki.

zervan

I've made some experiments with external antenna on RB751U and RB751G, using ROS 5.18. I've put mobile device directly on external antenna to see if it is working - using application WiFi Analyzer on the device to measure TX power and WinBox stats on Signal tab (see picture) to measure RX power. I c...

zervan

a port forward should solve the problem, perhaps.
But please have a look on the map to confirm that I understood you right.

Yes Dobby, you are right. I use port forwarding for some applications, but it would be great if user could use any UPnP application without my intervention.

zervan

Situation: internet-> router A <-LAN-A-> router B <-LAN-B Router A is doing NAT. When I enable UPnP on it (external interface is going to internet, internal interface is LAN-A), it is working well from LAN-A. But there is another router B, which is doing simple routing (no NAT). Is it possible to ge...

zervan

The problem is that those users aren't persistent... When the trial period is over they get deleted. I want to arrive on Monday and check how many users tried the service over the weekend. You may increase Trial Uptime Reset value to a week or month, so that users will remain that time in the list....

zervan

R751G doesn't support any higher frequencies than it's default 400 MHz. If you need higher performance, you can use RB411GL - yes, it has only PCI card, but is this a problem? PCI transfer limit is much higher than limit of the wireless card.

zervan

Mark packets using IP Firewall Mangle, then set their priority and speed limit in Tree Queue. Here is an example: http://wiki.mikrotik.com/wiki/TransparentTrafficShaper More examples: http://wiki.mikrotik.com/wiki/Bandwidth_Managment_and_Queues Good one: http://wiki.mikrotik.com/wiki/NetworkPro_on_Q...

zervan

I think basic stat will be enough: go to WinBox -> IP -> Hotspot, select tab Users and there they are (their usernames begin with T- and then continue their MAC addresses as the only identifier). Perhaps you may enable columns Bytes In and Bytes Out.

zervan

I already informed in this forum months ago that 90% of ALL my port flaps happen during daytime hours. Over night it is a very rare event. Interesting - from my point of view it happens mostly during sunny days, no matter what the temperature is. I don't have a disconnection for about a week - it i...

zervan

which version of ROuterOS and which routerboot (firmware) did you use during your test?

The newest stable: 5.17, 2.38

zervan

I've spent whole day testing RB1200, because my configuration was very slow, unexpectedly. I found out that ports 9 and 10 are very slow, especially when data are routed from one of them to switch part (ether1-5) with "only-hardware-queue" set as interface queue - that results to about 150...

zervan

Yes, you are right. But it is a little bit worse in my situation: there are some real disconnections as well - I use Netwatch to check neighbour availability each 5 seconds and I can see that there are problems. I am confused about them - they are not always at the same time as link down problems, s...

zervan

Once for test just fit a netgear switch in between. Port flap completely disappeared. Not a single flap in weeks. Removed it again and the flaps where just back.... I was thinking about this and I will try to do it on one place (other one is problematic). At least I will know if the problem is on s...

zervan

We have not tested HotSpot on 120000 users, however RADIUS server is required for /"ip hotspot user print">200. Do you mean User Manager package or some external RADIUS server? I am using RB1200 with User Manager package as central user database for hotspot on itself (with some WiFi APs c...

zervan

I use 3 RB SXT, each on other building's roof, all of them are powered by more powerful 24 V, 1,6 A adapter (there was standard adapter at the begining, I've changed it thinking it would be better) and are connected to UPS. The problem is that 2 of them have port flap issue. One of them is connected...

zervan

Is it possible to get unicast packet from one interface and forward it as broadcast to other interface? Something like dst-nat to 255.255.255.255 :) I know it sounds strange, but I'm just asking. In fact, I would like to "transform" incoming unicast UDP stream from internet as multicast to...

zervan

I'm wondering then if the issue is broadcasting the multicast traffic out to each port (and me not needing it to go to ports 3 through 5). RB250GS doesn't support IGMP Snooping - it means that multicasting is handled like broadcasting. I think your IPTV has it's own IP address, so you can make ACL ...

zervan

Feature list to be implemented in future releases:

IGMP Snooping

Add description/name for ports

What about these features? When will the new version come? There is a multicasting HD video streaming available here on academic networks, so IGMP Snooping is necessary.

zervan

I've made a script which is saving data amounts of each user to logfile at midnight and then uploading the logfile to my web server using /tool fetch and FTP. (web server is generating tables, see attachment) The problem is that sometimes the logfile is transferred well and sometimes not - the trans...

zervan

add action=drop chain=input comment="" disabled=no protocol=igmp

Not bad idea to use protocol=igmp, but the problem remains: interfaces with enabled PIM/IGMP are still receiving packets - it seems like PIM (from package multicast) is working before the firewall filter rules are applied?

zervan

Can anyone confirm that external connector on RB751U-2HnD is actually antenna B?
I would like to use external antenna only on a single chain.

Later, I've found this information in manual, too: http://routerboard.com/pdf/357/rb751U-2HnD-ug.pdf - so it is officially confirmed

zervan

what power supply you are using, the same that came with the box? yes Do you have some usb device connected? no, but I have external antenna connected EDIT: I've tried to remove it now, but it is still restarting when the cable is connected Do you have different power supply to test out? yes, I wil...

zervan

what did you see in the log file after the the reboot?any auto support output file generated? There was something about not proper shutdown in the log file, but I didn't see any supout file. I have supout before crash - I saved it (using ether1 - only port without problems), then connected cable to...

zervan

what did you see in the log file after the the reboot?any auto support output file generated? There was something about not proper shutdown in the log file, but I didn't see any supout file. I have supout before crash - I saved it (using ether1 - only port without problems), then connected cable to...

zervan

I've upgraded RB751 from 5.10 to 5.11 and it was strange then - rebooting immediately after connecting any cable (from empty switch too) to any of switched ports 2-5. Counter "Total Sector Writes" was erased. I saved config and supout file, then tried to reset configuration using jumper - ...

zervan

in short: to make some reasonable testing for comparison you need ether to forget about TCP or use at least 100 simultaneous TCP connections You are right, I know about it - I don't expect that one connection will use all of capacity. But you can not say that described behavior is good. Mostly I do...

zervan

How much it cost half price of that device ? =)

Adapter is practically impossible to get in Europe, but pigtail costs about 4 USD and antenna 6 USD, so cca 10 USD together.

zervan

I've two networks connected by routerbard: X.X.1.0/24 <-> RB <-> X.X.2.0/24 I'd like to use multicast (for Vypress Chat), so I enabled PIM interface. It is working, but the problem is, that the second network is not only for me and there are also other IP subnets. So my router is receiving a lot of ...

zervan

I want to offer both.

What about RB433 + two network cards? I'm using it. But it is not so cheap, indeed.

zervan

Well, I've upgraded to 5.10 and made more accurate tests NAS -> RB750G -> PC. There is a strange behaviour: no firewall rules, no connection tracking: 90-100 Mbps (speed is varying); some firewall rules, no connection tracking: 120 Mbps (why higher??? :shock: ) connection tracking: 70 Mbps So the sp...

zervan

I ask reseller to get antennas but he say that antenna has not regular port so it is very difficult to find antenna for it ...

Yes, indeed! But see this: http://forum.mikrotik.com/viewtopic.php?f=3&t=50602
I've got antenna for RP-SMA and pigtail for MMCX.

zervan

I thought that RB751U will be much better when I connect external antenna. So I did so today (using 5.9). I've made a lot of tests and find out that the best results I can get using: Channel Width: 20MHz - strange, but using 40MHz the speed is not much better and stability is worse (but in fact I ca...

zervan

I also experienced the same problem, but switching to 5.9 solved it.

I've just asked my friend with RB450G and he said the same: 5.9 solved it. Strange. Now I don't have much time but I will try to reset configuration on my RB750G later and test again.

zervan

One of my friends had a problem with much lower throughput of his main router RB450G (doing NAT) after upgrade to 5.8. He had to return back to 5.7. I've barely believed him, but today I needed to do some transfers between my computer and my NAS and the speed was much lower than it was few weeks bef...

zervan

Sooooo, anyone who upgraded to report if graphs issue is finally resolved?

Yes, it seems it is working now - finally!

zervan

I've realized that the "low speed issue" with 802.11n compared to common WiFi routers is not related to RB751 only, but it is practically the same on RB433 as well (I've made some testing). More general discussion about that is here: http://forum.mikrotik.com/viewtopic.php?f=7&t=35767

zervan

are you sure your power amplifier is not damaged? the chain power levels should not be that different. I'm not sure about that - I could use stronger 24 V later today, but I think it should not be a problem, because the big difference between chains is appearing only when I use an older 802.11 Draf...

zervan

This alone indicates that your TCP test method is flawed. Apprently you are not making enough TCP connections, or one of the test ends runs out of CPU resources to do the test. When I set TCP packet size to 60 kB, there was no (or just a little) difference between one connection and two connections...

zervan

that tool you mention has only one parallel TCP connection, which will give you similar results. you need to use something, that can make 100 or more parallel connections. basically you are not loading the link at all. I don't agree - when I set TCP packet size to 60 kB, there was no (or just a lit...

zervan

I didn't see this discussion and I have written about similar problems with RB751U here: http://forum.mikrotik.com/viewtopic.php?f=3&t=55377&p=286748#p286748 I was measuring receiving only (combined receiving and sending was worse) with two different devices (other routerboard / computer) on...

zervan

please write to the support@mikrotik.com with support output file which is created when you are doing that test. Well, I have made the supout files in 4 situations: access point mode (just bridged ether1 + wlan), routing mode (no firewall, no NAT, no connection tracking, only routing between wlan a...

zervan

I need "female RP-SMA to MMCX"

Well, not on eBay, but they do exist at least somewhere

http://www.fab-corp.com/product.php?productid=16251
http://shop.cetacea.com/product-p/rp-3408-1.htm
http://wirelessconnect.eu/product/adapt ... sma_female

zervan

do I need MMCX male (http://www.ebay.ie/itm/SMA-male-plug-MMCX-male-plug-straight-adapter-/270680271717) or MMCX female (http://www.ebay.ie/itm/SMA-male-plug-MMCX-female-jack-straight-adapter-/280604128566) adapter? It seems that neither of them will help me - I need "female RP-SMA to MMCX&quo...

zervan

Sorry for a little bit stupid question, but - do I need MMCX male (http://www.ebay.ie/itm/SMA-male-plug-MMCX-male-plug-straight-adapter-/270680271717) or MMCX female (http://www.ebay.ie/itm/SMA-male-plug-MMCX-female-jack-straight-adapter-/280604128566) adapter? It is so small that I'm not sure, but ...

zervan

what signals values you saw on chain0 and on chain1? cca -63 dBm on chain0 and -77 dBm on chain1 (chain1 is weaker all the time, but difference is bigger during test) with older 802.11 DraftN "integrated" card (capable of 150 Mbps - obviously not using chain1) - CCQ low (cca 50%) even wit...

zervan

I've bought two pieces for testing (because CE certification is not finished) and I've spent few hours to test them yesterday... I must say I am disappointed :( First I tried to set maximum value for L2MTU on ether1 (just to see if it works) and it stopped to work at all when there was a cable conne...

zervan

Here you are:

Search found 332 matches

ros code