MikroTik

kwagga

Hi All, So we have several sites that make use of dual WAN or failover WAN's, and while we spent many hours trying to get Netwatch to work for us (ideally it can also notify on packet loss, not just a hard down), we found we were getting many false alarms with Netwatch, so we decided to implement re...

kwagga

Pity... now I still need to have a dummy bridge on the VLAN CPU port on the main bridge. Then I might as well drop the entire VLAN filtering bridge on this config (it is the one where I tried to hw offload the bonding interface)... On to the next (unrelated) feature request: I would like to see an ...

kwagga

kwagga

Well lookey here!

I'm busy manually transferring all my ROS code from 6.49 to 7.11 because backup/restore breaks the router and routing rules... I was busy copying over the NTP section and moments later the NTP client came back as synchronised!

Screenshot 2022-02-23 201903.png

kwagga

So upon further investigation, I grabbed another RB2011 - fully reset it, blank config ROS 7.1.1 - and only configured DHCP Client with NTP pointing to another RB2011 6.49 which is working and is an NTP server... Look at the below.. It still shows waiting, but was able to get time... this is definit...

kwagga

ROS 7.1.3, RB4011 I think, I can reproduce the issue. - EDIT: sorry not reproducible. If I configure only one NTP server, than it shows "synchronized". ntp-client.png As soon as a second NTP server is added, then the status is "waiting". You may need to disable/enable NTP client...

kwagga

I did notice after the upgrade bootup was at 1970, but never recovered. I think it is a bug with upgrade v6->v7. My theory is like this: The MikroTik devices do not have a real time clock. What you normally see is a counter that counts timer interrupts, but it is not battery backed up. Similar to t...

kwagga

Hi, Upgrading from 6.48.x to 7.1.x - NTP client not working... stuck on waiting. seems others also having the same issue. https://forum.mikrotik.com/viewtopic.php?p=914714 screenshot.2022-02-22 (3).png I have checked my clock and it's the same as ever: time: 10:37:31 date: feb/22/2022 time-zone-aut...

kwagga

Hi, Upgrading from 6.48.x to 7.1.x - NTP client not working... stuck on waiting. seems others also having the same issue. https://forum.mikrotik.com/viewtopic.php?p=914714 screenshot.2022-02-22 (3).png I have checked my clock and it's the same as ever: time: 10:37:31 date: feb/22/2022 time-zone-auto...

kwagga

RB2011, RouterOS 7.1.3 - Still not working.

screenshot.2022-02-22 (3).png

Any advice?

kwagga

Good Day All I need some advice regarding the MQS device - We are getting very very bad throughput while doing diagnostics and speed tests - I know the unit has a tiny processor, and I'm not expecting 100mbps throughput, but not even getting 10mbps - surely something isn't right? Changing bands, fre...

kwagga

Hi Guys, Quick One, I have about 10 queues, mostly used to track data usage, more specifically, I only want to track internet data usage. I've set the queue's dst-address to 0.0.0.0/0 which is accepted, but after a while, when I open the queues again, the dst-address field is blank, what's up with t...

kwagga

Hi Guys,

Sorry for resurrecting a dead post, I'm also battling with this. I get as far as getting the main router's DHCP client to get an IP, but that's about it... no internet traffic, and no management to the LTE router

kwagga

Got it figured out!

Bottom line, don't config bridge vlans and switch vlans at the same time, to do the same task...

kwagga

..alright... so all is not well, after getting everything working, I still had issues with PTP SXT's down the line (ETH2)... at the same time, I began to notice my Winbox sessions would disconnects accross both computers I'm using, they're connecting via IP - I would then need to reset the NIC/unplu...

kwagga

Thanks sindy!

kwagga

Most Microsoft Windows network drivers silently strip VLAN tags if they receive tagged frames. Could this be the reason? sindy, you're right, stripping vlans before exiting port fixes it... but as per this: https://i.ibb.co/BGBhD4c/Screenshot-1588764889.png I left it as "leave as is"....

kwagga

Thanks tdw ! That was the missing ingredient. I see what you mean by using L1 bridging to avoid using up the CPU, luckily for me, in this specific use case, eth6-10 is for low bandwidth applications (<10mbps). I am observing some weird behavior, my desktop gets IP information on switch 2's ports, bu...

kwagga

Hi Guys, I'm trying to get VLAN switching the "new" way to work, and also to use best practices (by using the built-in switch chip, instead of using CPU) - it's been a while since I worked on ROS. I'm trying to trunk a RB2011 to a Ubiquiti Edgemax Router. ETH1 - Trunk to Router ETH2 - Trun...

kwagga

Solved. All I can say is, VLAN's are pretty straight forward - double and triple check that you a trunking properly... Because I'm configuring this remotely, I wasn't able to properly test - in the end, clients on one AP was actually working - but not on the other - users on the ground didn't know t...

kwagga

Hi Guys, I've got an issue where clients on a VLAN is requesting DHCP information, and in the log files of the Routerboard, it looks like some devices are getting DHCP info, while other devices are not accepting requests, but in all cases , the clients are failing to obtain IP information. I'm sure ...

kwagga

Hey Guys, I'm hoping I'm doing something stupid, but I cannot get UDP packets to go out of a specific gateway, TCP is fine. - There is no rule explicitly defining either. As per below image, I'm trying to route everything from 192.147.1.151 to 41.160.213.234 with the following mangle rule: add actio...

kwagga

Hi Guys, I've got a small problem, and I'm sure I'm overlooking something, but for the life of me I can't see where the problem lies. I'm trying to ping a router (aka WAN) connected to my Mikrotik. Huawei Router (192.168.8.1) <=> (192.168.8.2) Mikrotik Router (192.168.168.91)<=> LAN (192.168.168.80/...

kwagga

This has also started happening to me, I have several sites with different internet breakouts, and it seems like they all stopped updating around the same time. Force updating still works though.

kwagga

Hi Guys, I setup an OpenVPN server on a Ubuntu VPS of mine. Everything seems fine, and the client worked fine when I used certificate based auth on Windows. But since I had to use user-pass-auth to get the Mikrotik RB working, I changed my server settings drastically to get the Mikrotik router to co...

kwagga

Hi fellow MTik'ers, I have to implement a solution at an existing premises for client, and would like some opinions on VLAN's. Unfortunately I have almost no experience when it comes to one of Mikrotik's most powerful features, VLAN! After reading many posts, I tried to combine what I've read, and I...

kwagga

Eish kwagga feel your pain . I can only assume some braindead auditor or CA thought of that scheme ? The 6 releases has been pretty poor so far . Barring the boadroom AP's we use there is just no way I would let a 6.XX device touch my network at this point. Eish indeed! :) Gotta love South African ...

kwagga

With everything said, I believe they should've pulled this 6.4 release from the main page, or at least, move it to the Beta Releases page.

....an apology or at least a formal acknowledgement would also go a long way.

kwagga

With a company policy in place that says all networking devices must at all times have the latest firmware/OS releases, and with RouterOS' supposedly stable releases causing all kinds of havoc, my job is on the line if a router should misbehave. Sorry to be rude, but that is a very stupid policy. W...

kwagga

*Gets up on a soapbox.* I feel that the ROS is getting into a situation where outstanding bugs and issues are not being fixed, and new features that have even more bugs are being added to the package, compounding the situation to where it is unacceptable. Take a little advice: Set up a triage on a ...

kwagga

Hi Guys, So I installed RouterOS in a VM (VirtualBox 4.2.18) and within seconds of booting the OS, the CPU and IRQ jumps to 100% and eventually crashes the host machine. Is it something I did? Information: Oracle Virtualbox 4.2.18 x64 Host Machine (Windows 8 ) VM: RouterOS 6.4 (Fresh Install) 256MB ...

kwagga

Awesome, Thanks Normis!

I just wanted to check to be absolutely sure.

kwagga

Hi guys,

I would like to find out, can the RJ45 console port on the newer Routerboard models be used for something like reverse telnet to other devices?

I know the serial interfaces can do it, but isn't the RJ45 port almost like a serial interface?

Thanks!

kwagga

I wish Mikrotik would beta test a little more before releasing these files to the general public, or release it as "beta" and tell people it's for testing. Releasing something as "stable", implies just that.

I'm sure the Mikrotik Dev's are working hard on a fix!

kwagga

Hi, all PPP options are also greyed out/obscured once the connection starts...

I'm still able to edit/change the settings via terminal, webfig or right click...

All this started with upgrade to v6.4. I'll provide a suppout if required.

kwagga

kwagga

Hi Guys, I've been trying to remember my training, but I just can't get this working. How can I make use of MAC Authentication, or at least have multiple security profiles for each client MAC? Scenario: I have a AP with WPA2 and all the clients are connecting with no issues, but now I want to connec...

kwagga

For those who wish to filter SSH (or anything else) connections based on geographic IP addresses... Here is the command: /ip firewall filter add chain=input action=drop protocol=tcp src-address-list=! RSA-IP-BLOCKS in-interface= all-ppp dst-port=22 Be sure to name your address lists and WAN interfac...

kwagga

maybe dst-port=22 ? Strange, I orginally used dst-port and it didn't seem to work.... but after trying from a different international IP, now it works... Maybe I just wasn't paying attention. Anyhow, It's working now. If anyone knows of a better/optimized way to do the above, please let me know! I ...

kwagga

Hi Guys, I'm trying to drop incoming connections to my router, which are not listed in a address list, but for some reason the below rule isn't working. What am I missing? Any help would be greatly appreciated! Firewall Filter: 0 ;;; Drop SSH connection from Non-RSA IP's chain=input action=drop prot...

kwagga

Thanks Neilson/Alexander!

Good to know what works and what doesn't.... I'll add to this thread as I find more "things" to power by 24v 12w...

kwagga

Name just one mikrotik poe out product that have 24v/500mA power supply. Really?! Almost all of the bigger Routerboards use 24v! All the below products come with 24v PSU's, even if they don't output POE: RB2011-series, RB411-series, RB411AH, RB433-series, RB450-series, RB493, RB600, and many others...

kwagga

As we all know, huawei E5331 single linkage design, wifi access simple. General design can let you be clear at a glance, but my huawei E5331 display signal is full, strong. But often got disconnected, at first I thought it was a weak current problems, then I try several times are the same situation...

kwagga

I am sorry to tell you that most of the port named "POE" on the router is only used for injecting power for router consumption itself (as a replacement for power adapter), the port cannot provide power for driving POE device. I know that, but like I said, some the newer Routerboards have ...

kwagga

Hi Guys, So I've been wondering, what devices use 24v 500ma? Since this is what Mikrotik is putting on many new products... I've been looking at our supplier pricelist, and from things like IP Camera's to IP Phones,everything draw more current than 500ma at 24v. If my math is correct, that gives a m...

kwagga

Hi Have you setup the hotspot?if yes, then include the wifi into the hotspot and the login will appear before they can use the internet. setup the hotspot done , work normal , problems this if power off router , or other powers problems (reset ,) 3g mogem dont connect automatic , dont up link 3g :)...

kwagga

for the new atheros chipset board you need to use all-rate-fixed option or use antenna-gain when you have frequency-mode=regulatory-domain

Thanks for the heads-up Uldis, may I suggest we add it to the wiki: http://wiki.mikrotik.com/wiki/Manual:Interface/Wireless

kwagga

The website (http://www.mikrotikbackup.com/) is excruciatingly slow. Please re-up the image to a image hosting site?

UPDATE: Website is fast again. Must've been connection issues or server maintenance.

kwagga

I also want to know why card-rates with a manually specified value, doesn't lower the tx output?...

kwagga

Sounds interesting, should you go the MAC/BIA route, what if someone is carrying a iPhone and a iPad, or a Samsung Galaxy phone, and tab.

Wouldn't that skew your results somewhat?

kwagga

Maybe the Alcatel One Touch LTE L100V (http://www.alcatelonetouch.com/global-e ... l100v.html)

I see it's gaining market share due to it's fair price point.

kwagga

+1.

+1

kwagga

Hi Guys,

Does anyone have an update for USB LTE modems, such as the Huawei E3276 CAT4?

I know Huawei Hi-Link is a problem, but there are ways around it.

kwagga

Hi Guys, In my endeavour to improve my RouterOS console and keyboard usage, I've created a console-usage cheat sheet. I often look up at cheat sheets for inspiration and to refresh my memory, so I hope this can help someone else too. I'm open for any suggestions or comments! This is my first version...

kwagga

Hi!

Thanks Tomas!

Do you reckon it's advisable to downgrade a RB when the downgrade ROS is lower than the version the board came out with?

kwagga

You can simply create a route for target host, for example if you are monitoring 8.8.8.8 , then create a route for 8.8.8.8 that should always goes via WAN1. This way monitoring to 8.8.8.8 will always goes via WAN1. For example> /ip route add comment="Static ROUTE for 8.8.8.8 so it should alway...

kwagga

Just an update for future readers of this post. tomaskir eventually remotely connected to my configuration, and he detected a bug in ROS 5.24 as well as 6.0 RC14 (quite possibly all the RC's). Since this error is reproducible, he will create a report for Mikrotik's development perusal. But for the t...

kwagga

That's exactly the problem, the script does not fall back to ISP1 when it's back online.

As seen in the logs, I have to manually disconnect ISP2 in order for ISP1 to come back up.

kwagga

You can simply create a route for target host, for example if you are monitoring 8.8.8.8 , then create a route for 8.8.8.8 that should always goes via WAN1. This way monitoring to 8.8.8.8 will always goes via WAN1. For example> /ip route add comment="Static ROUTE for 8.8.8.8 so it should alway...

kwagga

What I find interesting, is that all the routes, as going through ISP_2, even though ISP_1's gateway is only available on eth1.

kwagga

Okay, so as per the above code, here it is made live... yet, it's still not working... I also wanted to ask, what's the purpose of, and why is it required: /ip firewall address-list add address=193.168.0.0/24 list=Connected add address=10.10.0.0/24 list=Connected add address=172.20.0.0/24 list=Conne...

kwagga

My goal is to create a "fully functional" failover-ready routerboard, both for novice's like myself, and other's looking for a starting point in creating more elaborate fail-over scripts... Since the tomaskir's script is the first result returned when Googling, for example, I think it's go...

kwagga

Is it possible to post what the routing table should look like?

kwagga

WDS.. i found this.

http://blog.kolbash.net/2012/08/cisco-i ... rting.html

Namnlös.png

This worked!! You're AWESOME! Thanks!

kwagga

Also, watch the actual presentation, and try to read up on the subject to understand how it works, its better in the long run then copying things on/to forums. I have the MTCNA training scheduled for next week, but my manager requires a working Failover script "TODAY" - to quote him. So I...

kwagga

What am I missing here? I can ping both ISP's now from RouterOS, thank you for helping out, but now my LAN cannot access the net, I can see packet flow through the NAT rules, but nothing beyond than, I also checked and double checked the distances, and my masquerade rules.... /ip address add address...

kwagga

Thank you very much for your help, I sincerely appreciate it.

I will test the updated mangle script first thing tomorrow morning!

Awesome MUM presentation by the way, I'll be referring to it in future.

kwagga

Hi tomaskir, Thanks for the advise I had a look at your presentation pdf, and copied the console commands as close as possible, yet up until before page 38 - since I don't want load balancing, only automated fail-over (and restore). Yes, the same problem persists, when ISP1 is the primary connection...

kwagga

Hi Guys, I'm looking for some advise, say we have two WAN connections, WAN1 being high throughput, but having a bandwidth allocation (cap) of 5GB/day, and the second, slower connection being uncapped. How can I set the Mikrotik to use the primary connection, and switch over to the second, slower lin...

kwagga

Here is the exported config, as requested. I noticed, even before running the script, with GW1 and GW2 distanced set to 1 and 2 respectively, I cannot ping an IP over GW2 until I change the distances to 2 and 1 (making GW2 the priority) - why is this? # apr/15/2013 09:35:25 by RouterOS 6.0rc13 # /in...

kwagga

Hi tomaskir! Thanks for getting back to me! I started with a blank configuration, no rules, no routes (besides two Gateway routs) or mangles. Only two NAT rules for masquerade. Would you mind giving a couple tips on what my routing table should look like initially? - What firewall/mangle routes shou...

kwagga

After carefully watching the script in action for a couple minutes, I've found that it DOES work, BUT, it does not automatically revert back to ISP1 when it's reachable again, instead it will stay on ISP2 until it goes down, then only revert back to ISP1. I noticed that the script increases the rout...

kwagga

Just an update after battling for more than a week with Mikrotik DHCP options, I opted to switch back to Microsoft DHCP Server, as we needed the WDS options to work. Hopefully someone will one day tell of fix to this. From my testing it seemed that Mikrotik didn't issue option 67 correctly to the cl...

kwagga

Hi Guys, So my query is regarding the fail-over script over at http://wiki.mikrotik.com/wiki/Failover_Scripting . While I'm sure this isn't the "official" script, it sure is entered into the Wiki, which does make it more official than a forum thread. Anywhoo, The script seems awesome enoug...

kwagga

Hi Guys,

Does anyone have an update regarding the poor 802.11n throughput of the RB751/RB951 devices?

I'm looking at buying a couple, but I've read so many threads with people battling with these units, I wonder if I shouldn't maybe avoid them completely?

kwagga

Awesome Thanks! It seems I was forgetting to ad 0x to the hex string. Will test the changes momentarily. Also for others, here is a good site for HEX convertions: http://www.string-functions.com/string-hex.aspx Also of note for WDS deployments: http://technet.microsoft.com/en-us/library/c169579c-c0f...

kwagga

We use Mikrotik DHCP in our company, and we're implementing a Windows Deployment Server. From what I gathered, we need to make use of DHCP option 60 and 67, but human-readable values are not accepted, why is this? How would I convert a filename to hex? - as nothing I tried is working. http://s22.pos...

kwagga

kwagga, What happens if you move approx 5-10m away from the AP, does the situation improves? I've moved around the apartment, and no matter where I stand, the same error occurs - the problem is, it's difficult to diagnose the problem - simply doing various pings, and latency checks all come back cl...

kwagga

normis, so there is no way for us to connect external pigtails to the device? Not even a u.fl connector?

kwagga

kwagga, What happens if you move approx 5-10m away from the AP, does the situation improves? I've moved around the apartment, and no matter where I stand, the same error occurs - the problem is, it's difficult to diagnose the problem - simply doing various pings, and latency checks all come back cl...

kwagga

Hi Guys, I also have a strange problem with my RB2011 on rc10/11. I'm getting strange 'packet loss'/disconnection issues on my wlan, even when standing 2 meters away from my routerboard. Any webpage/file download that I do, web-pages load around 60% and fail, or downloads go up to about 95% then fai...

kwagga

Hi f38eb, I like your script as well, for my next script, I want to combine both interface monitoring, and logical (IP/Host) monitoring, for cases when the modem might be dialled/connected, but it's not responsive. I believe this can happen when the modem alternates between connection states (GPRS/E...

kwagga

Okay, so here I have a crude, but working script: /interface ppp-client monitor ppp-out1 once do={:if ($status != "connected") do= {:log warning "PPP Link Down, reset USB"; /system routerboard usb power-reset duration=20}}; :delay 120; /interface ppp-client monitor ppp-out1 once ...

kwagga

Mine is also working now, I tried a completely different countries' NTP servers, and it's working now. Strange. Might be that a cluster of NTP servers were unreachable? - Just my luck.

kwagga

Thanks Dobby & ericsooter for your input, I do appreciate it!

I'll study this thread with my colleagues, and see what solution we can design, I'll present my findings here, for future Mikrotik Users, who also find themselves in my position.

Thanks again

kwagga

Hi Guys, I'm looking for some assistance regarding a script to reset the USB power, should a 3G modem lose it's IP for whatever reason. So, the scripts must monitor the 3G modem (i.e ppp1-out), be it the connection status, an IP, or anything else, and should the modem lose it's connection/become dis...

kwagga

Hi Dobby, CelticComms, thank you for your comments. Each building will require no more than 50 computers, and 50 phones (100 IP's Max) - One thing that I noticed, some computers are being connected through their phones! Phone has LAN and PC connections at the back - what problems could this create f...

kwagga

Hi Guys, I have a couple questions regarding Mikrotik and VLAN's. I'm fairly familiar with the concepts surrounding VLANS, VLAN Tagging and VLAN Trunking. However, I have never used VLAN's with Mikrotik. I've been told that Mikrotik and RouterOS is every bit as good as the likes of Cisco and Juniper...

kwagga

Hi keithy,

I just upgraded to rc7 for what it's worth.

NTP still not updating.

kwagga

Hi guys, I'm trying to get my RouterBoard to get time automagically, but not matter what I do, it ain't updating. I've tried different servers, and I've even allowed port 123 on the firewall. Please see below ntp client print: enabled: yes mode: unicast primary-ntp: 196.4.160.4 secondary-ntp: 196.2....

kwagga

Thanks rsergeev, I'll give it a try as soon as I receive my USB OTG cable. I bought the RB2011 exclusively to work with a USB 3G modem. I hope this isn't a hardware problem, insufficient power is not thing, and is fixable. I just hope it isn't a permanent problem.

kwagga

Any update on this?

kwagga

Any update to this?

Search found 93 matches