Community discussions

Search found 1210 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 25
by docmarius
Tue Aug 06, 2019 10:17 pm
Forum: Announcements
Topic: v6.45.3 [stable] is released!
Replies: 87
Views: 20148

Re: v6.45.3 [stable] is released!

I can not receive RIP multicast announcements via ipip tunnels anymore on 6.45.3.
The UPD port 520 packets via tunnel don't even hit the firewall.

Downgrading to 6.45.2 restores full functionality (no configuration change).

Hw iis tile RB1009
by docmarius
Wed Jun 12, 2019 12:01 am
Forum: RouterBOARD hardware
Topic: r11e-lte + basebox2 [SOLVED]
Replies: 10
Views: 921

Re: r11e-lte + basebox2 [SOLVED]

I have a basebox 2. While other brands of PCIe modems work as expected, I neve managed to get it started with a RB11e-LTE International version. It never passes reading the serial number on the modem. Support has no solution, so that information is correct. In a RBM33, the modem works perfectly.
by docmarius
Thu May 09, 2019 9:38 am
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 30154

Re: v6.44.3 [stable] is released!

Those are only comments in your export and will be ignored... There are some default template entries in IPsec which the system probably expects NOT to be missing (e.g. the default policy template, default proposal, default group, default profile, default mode-profile), and can not be normally delet...
by docmarius
Thu May 02, 2019 7:02 am
Forum: Forwarding Protocols
Topic: Blocking/Allowing Subnets RIP
Replies: 2
Views: 380

Re: Blocking/Allowing Subnets RIP

How exactly did you try to filter the RIP messages? RIP uses the 'Prefix Lists' for incoming/outgoing messages, not the 'Filters'. Note that filtering is done in order of the filters (sort by #). Also take care, the prefix length needs to be matched, too. e.g. to filter everything from 10.1.1.0/24, ...
by docmarius
Fri Apr 26, 2019 5:38 pm
Forum: Wireless Networking
Topic: Great news: Terragraph
Replies: 11
Views: 1526

Re: Great news: Terragraph

Riccochet did that in the late 1990's and early 2000's somehow successfully.
But at some point you hit a speed limit due to internal interference and multiple hop latency. Think of something like 1/8'th of a P2P link.
by docmarius
Thu Mar 07, 2019 12:09 am
Forum: RouterBOARD hardware
Topic: RB3011 Switching Performance with Hardware Offloading
Replies: 11
Views: 6250

Re: RB3011 Switching Performance with Hardware Offloading

Between physical ports you can not exceed 1Gbps/port and direction, because the ports are 1Gbps :-). The CPU ports have a total forwarding capability of 2 Gbps in each direction... So, cross the switch groups you could get somewhere between 1Gbps with no other load and 400Mbps on full switch load (a...
by docmarius
Fri Mar 01, 2019 2:20 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 34081

Re: v6.44 [stable] is released!

Hmmm, after about one day, on my CCR1009, all static routes configured for connected PPtP and SSTP clients (I have no other types to check) disappeared, and connectivity to the client's subnets was lost. Disconnecting the clients and allowing them to reconnect restored the routes... As if those rout...
by docmarius
Thu Feb 28, 2019 1:36 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 34081

Re: v6.44 [stable] is released!

*) discovery - detect proper slave interface on bounded interfaces; If this means reporting the neighbor on each interface of the bond, then it works as expected. It is just not correct, since the neighbor should appear only once because it is a single logical interface. And some of them show the I...
by docmarius
Mon Feb 18, 2019 12:51 am
Forum: General
Topic: Firewall on Mikrotik box outbound connection?
Replies: 9
Views: 586

Re: Firewall on Mikrotik box outbound connection?

That has a perfect good reason: DST-NAT is a prerouting feature, which is located on the ingress path of the router (because the redirected packets need to be properly routed to the correct destinations). It is impossible to apply it on an an output, postrouting or forward chain, which have their ro...
by docmarius
Sun Feb 17, 2019 2:37 am
Forum: Announcements
Topic: v6.44rc [testing] is released!
Replies: 67
Views: 11810

Re: v6.44rc [testing] is released!

Updated my RBM33G with a RB11E-LTE.
- Modem firmware update - OK
- New LTE additions like cell info - OK
Everything working as expected. :D
by docmarius
Wed Dec 26, 2018 4:20 pm
Forum: RouterBOARD hardware
Topic: Connect hap ac lite to poe+ switch
Replies: 9
Views: 717

Re: Connect hap ac lite to poe+ switch

Or replace the hap ac lite with something supporting 802.3af/at, which is cheaper than buying a $400 switch, and throw out an existing $250 one? The AF adapter solution comes with a price tag at around 30$. A RBPOE adapter costs $5 and allows, if needed, POE for the hAP, from a separate power supply...
by docmarius
Thu Dec 20, 2018 8:55 pm
Forum: RouterBOARD hardware
Topic: Connect hap ac lite to poe+ switch
Replies: 9
Views: 717

Re: Connect hap ac lite to poe+ switch

That means that either one, or both devices don't play according to standards. But there could be a workaround: place a passive POE injector at the hap end, without powering it, or even power the hap via that injector. It has a separating transformer inside, that will prevent DC to flow between the ...
by docmarius
Thu Dec 20, 2018 8:52 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Impossible to downgrade from ROS 6.42.7
Replies: 7
Views: 875

Re: Impossible to downgrade from ROS 6.42.7

You can not downgrade below the ROS factory version, in this case 6.39. Unless MT has some workaround.
by docmarius
Thu Dec 20, 2018 8:45 pm
Forum: RouterBOARD hardware
Topic: Connect hap ac lite to poe+ switch
Replies: 9
Views: 717

Re: Connect hap ac lite to poe+ switch

I assume you refer to 802.3af/at as POE+. In this case, the power supplied by a POE+ switch is negotiated, meaning that it will not supply power to devices which are not able to negotiate it according to that standard (like the hap lite). So it is safe to assume that you can connect your hap lite to...
by docmarius
Sun Nov 25, 2018 3:52 am
Forum: Beginner Basics
Topic: 2 PPPOE Connections to be Active Simultaneously
Replies: 17
Views: 938

Re: 2 PPPOE Connections to be Active Simultaneously

2 PPPoE connection work happily together. To force a specific interface for L2TP connection, you could use routing marks. In your main table you have one default gateway, on your secondary (marked) routing table, the other gateway. Mark your L2TP outgoing traffic in the output chain as needed and it...
by docmarius
Fri Nov 23, 2018 2:36 am
Forum: SwOS
Topic: 2 untagged VLAN same interface
Replies: 11
Views: 1631

Re: 2 untagged VLAN same interface

There are no untagged "vlans" on an interface, only THE untagged vlan (singular, only one, assimilated to vlan 1). For a packet to make use of vlans, it has to have vlan info in it, and that info is called a tag. A port could be virtually associated to a vlan by the router or switch, so that its tra...
by docmarius
Mon Nov 12, 2018 9:28 am
Forum: General
Topic: IP Neighbor Discovery
Replies: 12
Views: 2028

Re: IP Neighbor Discovery

I think there is a confusion going on here. On one hand, it does not report the discovered info to an interface. It reports it to RouterOS, and you need to use Winbox/Webfig/API to read that information. So, unless your users have access to your router, they can not see the list. On the other hand, ...
by docmarius
Sun Nov 04, 2018 10:28 am
Forum: Wireless Networking
Topic: 40 Km wireless link problem [SOLVED]
Replies: 6
Views: 709

Re: 40 Km wireless link problem [SOLVED]

dB readings work the other way around. The bigger the number, the weaker the signal (37 dB is more than 2 times stronger than 41 dB).
Try to lower the power on the AP to get the client around 50 dB...
by docmarius
Fri Oct 12, 2018 6:59 pm
Forum: Forwarding Protocols
Topic: OSFP Keeps Losing Routes!!! [SOLVED]
Replies: 11
Views: 1944

Re: OSFP Keeps Losing Routes!!! [SOLVED]

I converted a network to static routing for similar reasons... Everything worked fine from minutes to days (rarely, but yes), and then it just stopped. Disabling an enabling a OSPF instance resurrects the whole stuff for some time. One thing I noticed was the following: One of my subnets was fragmen...
by docmarius
Fri Oct 12, 2018 6:39 pm
Forum: General
Topic: Can my ISP access my Mikrotik Router and make changes?
Replies: 7
Views: 674

Re: Can my ISP access my Mikrotik Router and make changes?

That's what happens when you put restrictions on people: Le Chatelier's principle. The system changes to escape the constrain.
I would look for the "hacker" on the inside. But if they are your employees, this could rather trigger personnel fluctuations instead of increased productivity.
by docmarius
Fri Oct 12, 2018 6:08 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 80799

Re: v6.44beta [testing] is released!

Yes, you are right. It has nothing to do with ROS. As Sob said, it's probably a preparation for later actions. Sorry for the bump in.
But an actual PE release for Winbox could be a nice step :-)
by docmarius
Fri Oct 12, 2018 9:16 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 80799

Re: v6 44beta testing is released

What are you talking about? What are USB U3 programs? Please stop posting such posts. U3 is a portable execution medium developed some years ago, and pushed by Sandisk. It allows the installation of a PE (Portable executable) on an USB stick which creates an automatic launch environment in Windows,...
by docmarius
Thu Jul 12, 2018 11:52 pm
Forum: General
Topic: Anyone using Ubiquiti branded SFP transceivers in your Mikrotik routers?
Replies: 4
Views: 897

Re: Anyone using Ubiquiti branded SFP transceivers in your Mikrotik routers?

I have a UFiber UF-SM-1G-S pair between a CCR1009-7G-1C-1S+ and a 260GS (CSS106-5G-1S). It work as expected.
by docmarius
Wed Jul 04, 2018 2:13 am
Forum: Beginner Basics
Topic: Router config for IPTV (non-VLAN)
Replies: 16
Views: 7654

Re: Router config for IPTV (non-VLAN)

True, I wanted to learn it, and I keep the complicated things for my job :-). So running a few streams is easier to follow, like one streamed transponder, and it should scale knowledge wise. But I think the topic here was a home setup, not IGMP snooping, which is quite new in the MTK world (since 6....
by docmarius
Wed Jul 04, 2018 1:40 am
Forum: Beginner Basics
Topic: Router config for IPTV (non-VLAN)
Replies: 16
Views: 7654

Re: Router config for IPTV (non-VLAN)

Please don't test IGMP snooping still doesn't work. ... Believe me, I read the forums, since 4.17, that's some 8 years... But you ask "don't test IGMP snooping". That's what I am talking about. What is the logic behind this? If YOU don't want to test, that's your own problem. If someone else does, ...
by docmarius
Wed Jun 27, 2018 8:57 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 109709

Re: v6.43rc [release candidate] is released!

Still no joy for RG11e-LTE with RB912UAG :-(
by docmarius
Mon Jun 18, 2018 9:37 pm
Forum: Wireless Networking
Topic: Connecting QRT5 ac and LGH5 on a 16Km link? Is it possible?
Replies: 8
Views: 886

Re: Connecting QRT5 ac and LGH5 on a 16Km link? Is it possible?

ITs possible to force a device to specific power level. But remember - in noisy environment - You will also amplify the noice. Now this needs a little explanation since it makes no sense. IMHO the noise gets amplified on supplemental Rx amplification, not on Tx, where only the S/N ratio gets booste...
by docmarius
Thu Jun 07, 2018 11:46 pm
Forum: Announcements
Topic: MikroTik News June 2018 (Issue #83)
Replies: 44
Views: 13269

Re: MikroTik News June 2018 (Issue #83)

Maybe instead of bragging, you could inform Mikrotik about the issue so it could be solved?
Write a mail to support, open a ticket, describe the issue in detail, provide hacking means, methods and descriptions to them. This is not solvable in an user forum.
by docmarius
Sun Jun 03, 2018 4:09 pm
Forum: General
Topic: PPP establisht but no Rx traffic
Replies: 2
Views: 379

Re: PPP establisht but no Rx traffic

Are you talking about client or server connections? It's problematic to give you an advice without detailed information.
If you are the client, first ask your ISP about this.
by docmarius
Sun Jun 03, 2018 3:53 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 74963

Re: VPNfilter official statement

If everyone would adhere to the principle "block all and allow only what you need", which is considered best practice, none of these discussions would be necessary. Start with: - allow all from (management) LAN - allow established/related - drop all and work your way up from there on an "as needed" ...
by docmarius
Sat Jun 02, 2018 3:42 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature request: Do not block highlighting/selecting torch table contents
Replies: 5
Views: 849

Re: Feature request: Do not block highlighting/selecting torch table contents

You can freeze the torch window content by pressing "Stop", at least in winbox.
But that "copy" is needed.
And the same goes for the log.
by docmarius
Tue May 29, 2018 2:44 pm
Forum: Beginner Basics
Topic: what is a bridge for in a basic home LAN?
Replies: 3
Views: 432

Re: what is a bridge for in a basic home LAN?

I think the easiest way is to describe bridges as software switches, allowing you to "switch" between its assigned ports (interfaces). Some could be ethernet interfaces and SFP ports, which allow the help of a real hardware switch chip if available (and this is named hardware offload), others could ...
by docmarius
Mon May 21, 2018 10:28 pm
Forum: General
Topic: why mikroitk Donot Cross File sharing traffic
Replies: 7
Views: 610

Re: why mikroitk Donot Cross File sharing traffic

If you have different subnets for your computers, browsing via SMB is not possible across those subnets, because broadcasts packets are not forwarded.
To achieve this, you need a WINS server and register all clients to it.
by docmarius
Sun May 20, 2018 1:31 pm
Forum: SwOS
Topic: CRS328-24P-4S+RM forced POE missing voltage option defaults to 24V, 48V not selectable
Replies: 4
Views: 1357

Re: CRS328-24P-4S+RM forced POE missing voltage option defaults to 24V, 48V not selectable

... As a comparison the ubnt edgeswitches, even the older rough models do provide 24/48 options being set manually. Now this is new. On my Edgeswitches I only have POE+ (802.11af/at) and 24V passive. No 48V passive option. Maybe you mean the defunct ToughSwitch Pro, which only supported passive PoE...
by docmarius
Sun May 20, 2018 1:24 pm
Forum: General
Topic: IPv6 DHCP Server Not Leasing IP
Replies: 11
Views: 4328

Re: IPv6 DHCP Server Setup

AFAIk, You need to use RA for address hand-out. The ROS DHCPv6 only hands out prefixes for PD, not individual addresses.
https://wiki.mikrotik.com/wiki/Setting_up_DHCPv6
by docmarius
Sun May 20, 2018 12:11 am
Forum: Beginner Basics
Topic: What To Do - Port 5678?
Replies: 1
Views: 550

Re: What To Do - Port 5678?

192.168.0.255 is the broadcast address of network 192.168.0.0/24...
Disabling neighbor discovery is easy: on newer than 6.41 ROS go to IP->Neighbors, click "Discovery Settings" and select "none" from the dropdown box.
by docmarius
Fri May 18, 2018 11:33 pm
Forum: Wireless Networking
Topic: BaseBox2 LTE problems
Replies: 2
Views: 495

Re: BaseBox2 LTE problems

From your description, you only placed a SIM card in its slot. What LTE modem did you put into the miniPCI express slot?
by docmarius
Fri May 18, 2018 11:04 pm
Forum: General
Topic: SFP signal too strong
Replies: 9
Views: 1849

Re: SFP signal too strong

Can't you just use 2x1G SFP (not SFP+) MM fiber transceivers for this task?
SFP fiber transceivers are usually cheaper than RJ45 modules., SFP+ slots also accept SFP devices.
by docmarius
Sun May 13, 2018 9:51 pm
Forum: SwOS
Topic: config rb260gs i cant import by rb1100
Replies: 1
Views: 472

Re: config rb260gs i cant import by rb1100

The 260gs is a switch, running SwOS, the 1100 is a router running ROS. So there is no way to migrate your config: - the switch has only a single IP for administrative purposes, not multiple interface with individual IPs - the switch ca not run dhcp servers - the switch can not do NAT (masquerade) - ...
by docmarius
Wed May 09, 2018 7:52 pm
Forum: Announcements
Topic: Tik App, MikroTik android utility ALPHA test
Replies: 419
Views: 139744

Re: Tik App, MikroTik android utility ALPHA test

...Please advise when will the iOS one be available for use?
You mean the Apple or the Cisco IOS?
by docmarius
Fri May 04, 2018 8:57 am
Forum: Beginner Basics
Topic: Forwarding broadcast traffic between two networks
Replies: 13
Views: 1565

Re: Forwarding broadcast traffic between two networks

Except the fact that it would break the standard restricting a broadcast domain to its own subnet, this could be a useful feature.
It would enable e.g. workgroup/SMB browsing across subnets without using a WINS server. But this tends to become kind of obsolete.
by docmarius
Thu May 03, 2018 6:33 pm
Forum: General
Topic: ccr1009 missing bad blocks and total sectors writes
Replies: 9
Views: 1102

Re: ccr1009 missing bad blocks and total sectors writes

@Muhammadilyasmunir: Don't you think you should open another topic because your problem is not related to the one discussed here?
by docmarius
Wed May 02, 2018 9:12 am
Forum: RouterBOARD hardware
Topic: Hardware for RF Link 10-15 meter
Replies: 6
Views: 661

Re: Hardware for RF Link 10-15 meter

According to CEPT it is ok for indoor use.

http://www.erodocdb.dk/Docs/doc98/offic ... 1483EU.pdf

Check points 74/75 in the annex.
by docmarius
Tue May 01, 2018 10:22 pm
Forum: Beginner Basics
Topic: VPN client acces to LAN pc
Replies: 6
Views: 1283

Re: VPN client acces to LAN pc

What do the counters on these rules say? action=accept chain=forward out-interface=LAN src-address=10.1.0.0/24 action=accept chain=forward dst-address=10.1.0.0/24 in-interface=LAN Any traffic going on? Optionally try add action=accept chain=forward protocol=icmp so all icmp is allowed for the beginn...
by docmarius
Tue May 01, 2018 10:13 pm
Forum: Beginner Basics
Topic: Router config for IPTV (non-VLAN)
Replies: 16
Views: 7654

Re: Router config for IPTV (non-VLAN)

Only a few, but that is not the issue. The issue is you asking us not to test a feature because it does not work for you. How do you expect to raise feedback if we do not test it? Just wait for someone at MT to fix something they do not know is broken? The idea is to test it as much as we can, and s...
by docmarius
Sun Apr 29, 2018 1:09 pm
Forum: RouterBOARD hardware
Topic: Routerboard with 3G and GPS
Replies: 17
Views: 4327

Re: Routerboard with 3G and GPS

Exactly. In the ports section there is this remote access option that allows you to create a virtual serial port over TCP/IP on a remote machine and attach your router's local serial port to it. AFAIK, drivers exist for Windows (3-rd party) and Linux (socat is your friend )... (check RFC2217) You ca...
by docmarius
Sun Apr 29, 2018 12:59 pm
Forum: Beginner Basics
Topic: VPN client acces to LAN pc
Replies: 6
Views: 1283

Re: VPN client acces to LAN pc

Good point. You need the proper routes on the client machine, or use the VPN as the default gateway.
by docmarius
Sat Apr 28, 2018 3:07 pm
Forum: RouterBOARD hardware
Topic: Routerboard with 3G and GPS
Replies: 17
Views: 4327

Re: Routerboard with 3G and GPS

There is also an option to create a virtual serial port over TCP/IP (Ports->Remote Access). You could send the raw NMEA stream to a remote machine for processing.
by docmarius
Sat Apr 28, 2018 2:53 pm
Forum: RouterBOARD hardware
Topic: RB911G-2HPnD + StationBox S + 2x Dipole Antenna
Replies: 11
Views: 938

Re: RB911G-2HPnD + StationBox S + 2x Dipole Antenna

A basebox2 offers you a similar board, L4 license , outdoor housing, mount, power supply and PoE injector at a decent price, and a potential upgrade later because of the mini PCIe slot (e.g. a second Wifi interface or a LTE/3G modem). All you need is 2 of the presented antennas. Wouldn't this be a b...
by docmarius
Sat Apr 28, 2018 2:44 pm
Forum: RouterBOARD hardware
Topic: Copper link longer than 100 meters
Replies: 16
Views: 1639

Re: Copper link longer than 100 meters

A pair of cheap pair of 3km single fiber transceivers and a fiber should do a better job at a lower price.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 25