Community discussions

Search found 107 matches

by kobuki
Fri Jul 20, 2018 5:31 pm
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 263
Views: 28517

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

hi guys considering buying one of these for general home use.. want to use it for wifi & VPN. Would wifi be ok using latest stock f/w for general home use? whats best speed anyones got using VPN single tunnel 256bit? cheers See here . I was able to saturate my 110 Mb downstream using AES-128+SHA256...
by kobuki
Tue Jul 17, 2018 7:34 pm
Forum: RouterBOARD hardware
Topic: CRS354-48P-4S+2Q+ Dimensions
Replies: 3
Views: 257

Re: CRS354-48P-4S+2Q+ Dimensions

Does anyone have the depth of the new CRS354-48P-4S+2Q+?

I am curious if it will fit into some customer wall mount racks.
Maybe this helps a bit.
by kobuki
Mon Jul 16, 2018 5:12 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

It doesn't work.
Well, I guess that would nail it for @acruhl then.
by kobuki
Mon Jul 16, 2018 5:07 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

Metarouter does not work on RB850Gx2.
The menu is actually there in Winbox, but it doesn't work? Never tried it since I don't need it at that site.
by kobuki
Mon Jul 16, 2018 12:23 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

Why shouldn't I buy the RB850Gx2? ARM SOCs are faster, run a lot colder and more commonplace (~= cheaper). If you don't need the additional speed of IPSEC HW acceleration, there's no real need to consider the outdated RB850Gx2. The new one beats it in every other way. EDIT: oh, and the RB850Gx2 doe...
by kobuki
Mon Jun 25, 2018 8:42 pm
Forum: Announcements
Topic: v6.42.4 [current]
Replies: 93
Views: 9053

Re: v6.42.4 [current]

@mducharme: thanks for the heads-up about STP. I might switch to standard bridge config later, for now it works so I'll just let it be. I need remote hands to power-cycle, so maybe tomorrow. Luckily the SFP cage is vacant.
by kobuki
Mon Jun 25, 2018 8:29 pm
Forum: Announcements
Topic: v6.42.4 [current]
Replies: 93
Views: 9053

Re: v6.42.4 [current]

@mducharme: in the meantime I've "found" the VLAN filtering option (I was in a kind of hurry to bring things back online), so I'll start testing it on the RB2011. I've modified my original post, removing the false info. So it might become possible to use the bridge config and ditch the old switch co...
by kobuki
Mon Jun 25, 2018 7:48 pm
Forum: Announcements
Topic: v6.42.4 [current]
Replies: 93
Views: 9053

Re: v6.42.4 [current]

RB2011 upgrade from 6.34.2. - VLANs are not converted - new bridge is not created but interface master-slave relations removed - after removing all VLANs to re-create the configuration manually using a new bridge, 2 bridges are automagically created somehow (RB2011 has 2 switch groups) and interface...
by kobuki
Mon Jun 25, 2018 3:16 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

I found this page on the HAP AC2 the other day. I thought it's relevant because the CPU is almost the same, barring wlan capabilities in the RB450Gx4. It's mostly throughput tests (including PPPoE over Gbit), in Russian but the screen shots should speak for themselves.
by kobuki
Thu Jun 21, 2018 10:18 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

@chechito: I stated my needs. I don't need a $300 router. Believe me, I don't mix up heavy queues with some NAT or filter rules. I also separate my APs and gateway, though HAP AC^2 and RB450Gx4 use a similar CPU. After reading posts on other forums and also here I concluded that the RB450Gx4 would b...
by kobuki
Tue Jun 19, 2018 7:36 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

@chechito, chanks for the insight, though comparing the devices in itself doesn't tell much. Obviously the RB1100 series is way faster. But many small, cheap routers are capable of what I ask and I think for MT to stay competitive in that price range they should be able to handle that, too. There's ...
by kobuki
Tue Jun 19, 2018 2:22 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

I'm considering the local provider's gigabit GPON offering, which comes with an ONT with AC wifi, but I Want to use the PPPoE pass-through option. Would I be able to saturate Gbit wtih an RB450Gx4 and PPPoE using NAT and around 10 effective FW rules? Has really no one attempted using Gbit PPPoE on ...
by kobuki
Sat Jun 16, 2018 7:21 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 3538

Re: RB850Gx2 vs RB450Gx4

I'm considering the local provider's gigabit GPON offering, which comes with an ONT with AC wifi, but I Want to use the PPPoE pass-through option. Would I be able to saturate Gbit wtih an RB450Gx4 and PPPoE using NAT and around 10 effective FW rules?
by kobuki
Sat Mar 31, 2018 2:16 am
Forum: General
Topic: Problems with mynetname.net cloud IP service DNS
Replies: 7
Views: 722

Re: Problems with mynetname.net cloud IP service DNS

I would highly doubt that the existing name servers would be having degradation from legitimate updates or queries.

With 60 sec TTL it's entirely possible, but it was just a guess. If it keeps being DDOS'd, then well, SOL. And yes, using the serial directly in the host name is not a bright idea.
by kobuki
Fri Mar 30, 2018 11:12 pm
Forum: General
Topic: Problems with mynetname.net cloud IP service DNS
Replies: 7
Views: 722

Re: Problems with mynetname.net cloud IP service DNS

I raised my concerns about the built-in function, the thread is not about the alternatives that I know and use as well (dns.he.net or freedns.afraid org are good examples among many). The functionality is a good addition to RouterOS but the backing service is flaky. Mikrotik might have underestimate...
by kobuki
Thu Mar 29, 2018 2:28 pm
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 56780

Re: Urgent security advisory

(post Removed as others have answered my question)
by kobuki
Wed Mar 28, 2018 11:18 pm
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 56780

Re: Urgent security advisory

Pardon me, but specifying "www server" is not clear, at all. A serious security vulnerability merits more than vague statements about services. Do the scripts only scan port 80? Are we safe behind HTTPS (which still fall under the "www server" category) or not? Etc. You're obviously not very familia...
by kobuki
Wed Mar 28, 2018 10:40 pm
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 56780

Re: Urgent security advisory

Just to make it clear: only devices running a not up-to-date RouterOS version are affected, whose HTTP port (TCP/80) are open and provides the login facility and management GUI, right? I never allow unencrypted connections and always disable the HTTP and HTTPS interfaces. Only SSH and Winbox is enab...
by kobuki
Wed Mar 28, 2018 4:19 pm
Forum: General
Topic: Problems with mynetname.net cloud IP service DNS
Replies: 7
Views: 722

Re: Problems with mynetname.net cloud IP service DNS

Nice to know that you take note of the problems, however it's still serviced from a single unicast IPv4 address...
by kobuki
Tue Mar 13, 2018 4:19 pm
Forum: General
Topic: Problems with mynetname.net cloud IP service DNS
Replies: 7
Views: 722

Problems with mynetname.net cloud IP service DNS

See here for an overview: https://intodns.com/mynetname.net One server is not answering, lame delegation, etc, quite a handful. I'm a bit concerned about these DNS servers, there's only 2 of them for the "cloud" dynamic names, apparently no real strong clould backing infrastructure is present. Do yo...
by kobuki
Thu Aug 17, 2017 10:46 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 100388

Re: v6.41rc [release candidate] is released! New bridge implementation!

With the new bridge implementation using HW offload, will it be possible to use multiple bridges using the offload capability, effectively creating multiple "switch groups" that retain wire speed in the group? It's now possible to do something similar using VLANs where each VLAN has a CPU port besid...
by kobuki
Mon May 23, 2016 4:35 pm
Forum: General
Topic: Using Huawei E3372 3G/4G stick
Replies: 20
Views: 4083

Re: Using Huawei E3372 3G/4G stick

@pe1chl: well, it was my mistake, the ack mail landed in the spam folder after all. It got lost with the junk there but just found it. I hope they can fix the issue. It works for you, it should for me as well. I hope it's not a faulty HAP AC where I tested it.
by kobuki
Mon May 23, 2016 11:22 am
Forum: General
Topic: Using Huawei E3372 3G/4G stick
Replies: 20
Views: 4083

Re: Using Huawei E3372 3G/4G stick

@pe1chl, can you please tell me what version of the srick you use? There're different series, 21.xx, 22.xx. Also, did you make any special settings?

My host is not spamming but that's only relevant when sending mails out of it, not when receiving...
by kobuki
Sun May 22, 2016 10:45 pm
Forum: General
Topic: Using Huawei E3372 3G/4G stick
Replies: 20
Views: 4083

Re: Using Huawei E3372 3G/4G stick

I also have a Huawei E3372, it works fine in Hilink mode under Debian Linux 8, kernel 4.2, but I can't make it work on my HAP AC. The modem is stuck in the vendor-id="0x12d1" device-id="0x1508" configuration, which is the "basic" mode without the Hilink interface. Linux can switch it to device-id="0...
by kobuki
Fri Apr 22, 2016 1:54 am
Forum: General
Topic: Regular x86 mikrotik vs CHR with a non-virtualized machine
Replies: 6
Views: 1398

Re: Regular x86 mikrotik vs CHR with a non-virtualized machine

Hi guys, We have bought a 2U Dell Server with 4 Dual 10Gbps ports and we would like to install RouterOS or CHR on it in order to overcome the BGP limitations of our CCR1036. We are not going to install anything else on this server to make sure it has all the power available to handle our multigigab...
by kobuki
Fri Apr 22, 2016 1:48 am
Forum: General
Topic: Regular x86 mikrotik vs CHR with a non-virtualized machine
Replies: 6
Views: 1398

Re: Regular x86 mikrotik vs CHR with a non-virtualized machine

For example x86 don't have virtio drivers, so you can't install RouterOS on a public cloud like Amazon EC2, Azure, or like it.
The installable x86 version does include virtio drivers, I use virtualised ROS instances at multiple places (on KVM, not Xen) with virtio, without problems.
by kobuki
Wed Apr 20, 2016 6:55 pm
Forum: Beginner Basics
Topic: Simple solution for prioritising IPSEC traffic
Replies: 0
Views: 344

Simple solution for prioritising IPSEC traffic

I'm not exactly new to Mikrotik and RouterOS in general, but aside from simple queues for DL/UL limitations, I've worked very little with them. I'd like to employ a simple priority measure for the IPSEC/ESP tunnel we installed between 2 offices. Sometimes the tunnel suffers because of other inetrnet...
by kobuki
Fri Feb 12, 2016 9:28 pm
Forum: RouterBOARD hardware
Topic: HAP AC
Replies: 540
Views: 119319

Re: HAP AC

kobuki product is called hAP AC (the same name as topic). I think it is easy name to remember. RB962UiGS-5HacT2HnT is product code, and it collects all information you need to know about ports and features (if you like). Thanks -- however the post where I noted that it was meant to be a joke and I ...
by kobuki
Wed Feb 10, 2016 2:25 pm
Forum: RouterBOARD hardware
Topic: HAP AC
Replies: 540
Views: 119319

Re: HAP AC

I'm glad it appeared finally. I have the AC Lite and it's fine so far, I'll probably replace an older TP-Link dualband as soon as I can get hold of a HAP AC, for testing.
by kobuki
Mon Dec 14, 2015 1:45 am
Forum: RouterBOARD hardware
Topic: Ubiquiti ERLite3 beats Mikrotik RB1100AHx2 on performance. Can it be possible?
Replies: 18
Views: 3648

Re: Ubiquiti ERLite3 beats Mikrotik RB1100AHx2 on performance. Can it be possible?

My experience...it depends on your understanding of "beating"..... I have just, finally, thanks my God, replaced an ERLITE-3 by an RB/3011 on a 300/300 Mbits PPOE/Nated fiber connection with IPTV and IP phone...unbeliable: back to have a router in a corner of my house acting as a router and not cal...
by kobuki
Wed Dec 02, 2015 11:50 am
Forum: RouterBOARD hardware
Topic: hEX nand size ONLY 16MB !!!!
Replies: 61
Views: 12579

Re: hEX nand size ONLY 16MB !!!!

I'm not very concerned about the problem, but I find it weird that with ever falling flash prices, Mikrotik wants to save the pennies on it. In large volumes, it turns into profit, that's for sure, but still...
by kobuki
Mon Aug 17, 2015 5:34 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 43966

Re: RB850Gx2 - Release date?

Has anyone been able to conduct IPSEC throughput tests on the new RB850Gx2 with HW acceleration? My local supplier is already selling them with the new serial but I'm hesitant to buy them for new projects just for this feature yet.
by kobuki
Wed Aug 05, 2015 5:30 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 583
Views: 162656

Re: Cloud Hosted Router

Please consider adding the recognition of extra virtual disks to the appliance. Additional virtual storage space would be very useful for larger web caches, FTP or Samba servers as a simple and easy alternative to other storage appliaces with no fancy requirements. Will this be possible in the fina...
by kobuki
Tue Aug 04, 2015 10:49 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 583
Views: 162656

Re: Cloud Hosted Router

Great Idea. I'm already using several instances of ROS on virtualised platforms for live virtual systems and for testing. When a polished final product, I'm sure it will be a success. Please consider adding the recognition of extra virtual disks to the appliance. Additional virtual storage space wou...
by kobuki
Tue Aug 04, 2015 1:08 am
Forum: General
Topic: Static route and gateway on different subnet not working
Replies: 6
Views: 1903

Re: Static route and gateway on different subnet not working

Shaoranrch, thanks for the extensive answer. Your explanation is of course, logical, and I'm aware of the basics of IP resolution within L2 broadcast domains, but at a point it seems to contradict my findings where I said I could just ping the gateway IP just fine, yet ROS refused to use it. OTOH, I...
by kobuki
Mon Aug 03, 2015 12:59 am
Forum: General
Topic: Static route and gateway on different subnet not working
Replies: 6
Views: 1903

Re: Static route and gateway on different subnet not working

Well, I solved this, kind of. /ip address add address=88.x.x.177 interface=ether2 network=78.y.y.132 /ip route add gateway=78.y.y.132 ROS automatically adds a host route for 78.y.y.132 (main ip of the host machine, outside of the routed /29 subnet) on ether2 and I can use it as gateway for the /29 e...
by kobuki
Sun Aug 02, 2015 3:09 am
Forum: General
Topic: Static route and gateway on different subnet not working
Replies: 6
Views: 1903

Re: Static route and gateway on different subnet not working

Well, I have tried your suggestions, but neither of them is working on RouterOS. I can't make it work, whatever I try. I even enabled proxy arp on the host so the upstream gw appears as directly connected IP, to no avail. If the ROS doesn't have an IP from the same subnet as the gateway, it doesn't ...
by kobuki
Sun Aug 02, 2015 12:06 am
Forum: General
Topic: Static route and gateway on different subnet not working
Replies: 6
Views: 1903

Re: Static route and gateway on different subnet not working

Thanks, pukkita, I'll try this tomorrow and report back.
by kobuki
Sat Aug 01, 2015 7:53 pm
Forum: General
Topic: Static route and gateway on different subnet not working
Replies: 6
Views: 1903

Static route and gateway on different subnet not working

I'm trying to create a simple config at a datacenter where I am allocated a single "main" IP with a default GW on the same subnet. All is fine. Then I requested for an additional subnet which is statically routed to this main IP. It's from a different, arbitrary subnet. This setup is virtualised, wi...
by kobuki
Fri Jun 26, 2015 12:17 am
Forum: General
Topic: Weird IPSEC problem
Replies: 5
Views: 866

Re: Weird IPSEC problem

Well, I actually solved it at last. I don't know what the problem was, I rebuilt the IPSEC config from scratch and poof, it started working. No config difference compared to what I've shown earlier, that I know of. Weird.
by kobuki
Thu Jun 25, 2015 11:09 pm
Forum: General
Topic: Weird IPSEC problem
Replies: 5
Views: 866

Re: Weird IPSEC problem

Oops, my mis-read, sorry. I'm used to mis-configuring it myself where I put the connect-to IP in instead of the remote-LAN IP, glossed over your opening statement, sorry. Do you have a regular client connection that works with these settings? To me, the MT settings look correct and I'd be inclined ...
by kobuki
Thu Jun 25, 2015 10:02 pm
Forum: General
Topic: Weird IPSEC problem
Replies: 5
Views: 866

Re: Weird IPSEC problem

You need your /ip firewall nat rule (the bypass rule) to match the local and remote private networks. So, if the local side is 192.168.1.0/24 and the remote side is 192.168.2.0/24, your NAT bypass rule would be as follows: /ip firewall nat add chain=srcnat src-address=192.168.1.0/24 dst-address=192...
by kobuki
Thu Jun 25, 2015 9:13 pm
Forum: General
Topic: Weird IPSEC problem
Replies: 5
Views: 866

Weird IPSEC problem

I'm trying to create an ipsec tunnel to a host where the destination subnet and remote public endpoint is both the same single public IP address, that is, it's a seemingly simple config where they allow access to a single public address from our small local subnet. The ipsec config looks like this: ...
by kobuki
Thu Jun 25, 2015 12:42 am
Forum: Announcements
Topic: FastTrack - New feature in 6.29
Replies: 236
Views: 118814

Re: FastTrack - New feature in 6.29

Are you really complaining about not getting an answer in a forum within 8 hours?
Check your clock, please. It was about a day later.

But no. It was merely a rhetorical question, if that helps to satisfy your curiosity (or your feeling of righteousness).
by kobuki
Wed Jun 24, 2015 9:35 pm
Forum: Announcements
Topic: FastTrack - New feature in 6.29
Replies: 236
Views: 118814

Re: FastTrack - New feature in 6.29

I wonder if I ever get an answer...
by kobuki
Wed Jun 24, 2015 1:32 am
Forum: Announcements
Topic: FastTrack - New feature in 6.29
Replies: 236
Views: 118814

Re: FastTrack - New feature in 6.29

I was anticipating this feature and installed 6.29.1 only to find out that it's not supported on my router at home which is an RB450G. It has been one of the most popular ones and there isn't a night and day difference between this and the 750G which is indeed supported. Their hardware is almost ide...
by kobuki
Wed Oct 08, 2014 2:59 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 43966

Re: RB850Gx2 - Release date?

KVM is inherently an x86-only technology - so I'd say definitely no. You can already use KVM on RouterOS x86. It started on x86, but it has progressed far beyond that. The code is actively maintained on multiple architectures, see: http://www.linux-kvm.org/page/Status However, it's only considered ...
by kobuki
Wed Oct 08, 2014 1:01 am
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 43966

Re: RB850Gx2 - Release date?

we are actively working on virtualization support for multicore RouterBOARD products.
Any chance of KVM virtualisation on these boards?
by kobuki
Sun Sep 14, 2014 2:39 pm
Forum: General
Topic: Winbox 3 beta
Replies: 243
Views: 108838

Re: Winbox 3

After the announcement that 6.20 will only work with Winbox3, I started testing it a bit. I'm using Windows 7 SP1 x64 and have found that it can only save 5.x window sessions (it might save them but definitely can't load them). 6.x sessions are always started with a blank window, regardless of the s...
by kobuki
Sat Sep 13, 2014 5:01 pm
Forum: General
Topic: v6.19 released
Replies: 256
Views: 87406

Re: v6.19 released

What's new in 6.20rc6 (2014-Sep-08 10:16): *) pppoe client - increase connection timeout to make connection establishment possible on busy pppoe server; *) dhcp server - change default lease time from 3 days to 10 minutes to avoid running out of IPs; *) ipsec - allow binding modeconf address to use...