MikroTik

amokkatmt

hAP ax3. Funny thing that exactly on 7.9rc1 (2023-Mar-30 16:42) I first acquainted with "key handshake timeout" messages in my log: *) wifiwave2 - fixed key handshake timeout for re-associating client devices on 802.11ac interfaces; After few hours of uptime all wireless devices were losin...

amokkatmt

Hi. It is mostly a feature request. Could we have an ability to forcibly override any HTTP headers that are generated and sent by fetch tool? I have peace of hardware that is not fully RFC compliant in regards of HTTP standards. It does not accept "content-length" (lower-case), but only &q...

amokkatmt

SMB is not working for me, log says
...
1+
SMB also broken on my R493G rig running 6.47. Can't access NAS on LAN behind router.

Probably not the same. I meant "IP/SMB|, server of router itself.

amokkatmt

SMB is not working for me, log says
"
... dialect: SMB 2.002
session setup GSS error: 0x90000
"
On 6.47beta53 it works fine.

amokkatmt

After updating to 6.44beta9 I can not get output of command execution over SSH, using putty's plink. What I mean: plink.exe -v -ssh username@hostname -i .\mikrotik-priv.key.ppk -sshlog .\lkjlkj.log ":put 'hello';/quit" What I got: ........... Event Log: Opened main channel Outgoing packet ...

amokkatmt

Any plans to add wildcard hostnames support? I mean "firsthost.123456.sn.mynetname.net" . If not - why?

amokkatmt

...
!) cloud - added IPv6 support;
...

How to see it in action?

amokkatmt

Hello. So now we can not use global variables in scripts called by or put as is in netwatch??? Is this by design now?? My scripts using global vars, now netwatch can not get/set values. Yes, checked manuals, Mikrotik removed "policy" policy for netwatch scripts and global variables now can...

amokkatmt

I have rb2011 with 2 to 5 ports in master-slave relations via "master-port". Also I had switch filter rule to limit broadcast packets to 5th port of this group flowing from other ports in this group (I have wifi access point on this 5th port and significant broadcasts on other ports). Wha...

amokkatmt

IMHO stay with previous setup/version It is obvious, but I want to know how to migrate existing things to these new implementations in the right way. Already downgraded. About my broadcast it is because of specific software I run and it is under my control. I only want to not forward it to my wifi ...

amokkatmt

I have rb2011 with 2 to 5 ports in master-slave relations via "master-port". Also I had switch filter rule to limit broadcast packets to 5th port of this group flowing from other ports in this group (I have wifi access point on this 5th port and significant broadcasts on other ports). What...

amokkatmt

Ok, it is 3rd party, but it is advertised and adviced to use by forum.mikrotik.com

amokkatmt

What are you guys even talking about?

Tapatalk (Android app for the phpBB) is atvertised when browsing forum from mobile browser. And it does not shrink quotes.

amokkatmt

Post here your "/export compact hide-sensitive" and net diagram.

amokkatmt

What L3 NAT (masq) has to do with L2 vlans, bridges,..? What you mean VLANs not working?

amokkatmt

Simplest solution is to create vlans on ether5, make bridges for 100 and 400 and add VLANs from both ports to corresponding bridges. If you activate fastpath, it should not eat cpu much.

amokkatmt

Create vlans 3 and 4 on ether2 via "interface/vlan/add", setup dhcp, ip on it etc. Access vlan should not be created, because ether2 itself is already "untagged port", so give it 192.168.0.254.
Again, it is not switch. VLANs here are like subinterfaces in Cisco.

amokkatmt

lol. Mikrotik RouterBoard has "host" logic in relation to VLANs, as it should be on router. VLAN for the router is simply yet another interface, like ethernet, tunnel, ppp etc. RouterBoards are routers at most, not switches. Word "Router" in "RouterOS" tells it clearly....

amokkatmt

How this " !) ipsec - added support for dynamic "action=notrack" RAW rules for policies;" can be disabled? I need to src-nat ipsec decrypted client traffic in roadwarrior setup. Because of those rules NAT is bypassed and things are broken.

amokkatmt

Hello. I am trying to do ikev2 roadwarrior vpn from my android phone to Mikrotik. Mikrotik has pppoe wan interface, so IKE is listening on this pppoe. I can connect, have access to LAN behind mikrotik, but can not use mikrotik's internet connection, and other resources, where I should do src-nat to ...

amokkatmt

So, I did a downgrade on my 2011 and have logging to disk. Here we go: 17:31:34 system,info verified routeros-mipsbe-6.39rc68.npk 17:31:34 system,info verified ntp-6.39rc68-mipsbe.npk 17:31:34 system,info installed routeros-mipsbe-6.39rc68 17:31:34 system,info installed ntp-6.39rc68 17:31:34 system,...

amokkatmt

Hello. /tool fetch behaves very strange and unreliable. /tool fetch url="https://lists.mikrotik.help/openbl.rsc" keep-result=yes mode=https status: finished downloaded: 238KiB total: 348KiB duration: 2s /tool fetch url="https://lists.mikrotik.help/openbl.rsc" keep-result=yes mode...

amokkatmt

Can anyone confirm this viewtopic.php?f=21&t=116821&p=577546 ?

amokkatmt

Winbox 3.8, RB750GL 6.39rc12 - can not change/set firewall NAT rule's dst-port, src-port by winbox. Fields are grayed out/disabled whatever I do. On existing NAT rules and new ones as well. Already reported to support@mikrotik.com did you specified a protocol?? I upgraded Winbox on 3 Win10 Home (up...

amokkatmt

Winbox 3.8, RB750GL 6.39rc12 - can not change/set firewall NAT rule's dst-port, src-port by winbox. Fields are grayed out/disabled whatever I do. On existing NAT rules and new ones as well. Already reported to support@mikrotik.com

amokkatmt

I can't disable wireless package on RB750GL since some of rc's. 17:24:09 system,info package wireless@ is scheduled for disable by *** 17:24:18 system,info disabled wireless@-6.37rc34 17:24:21 system,info router rebooted And after this reboot: /system package print terse where disabled=no name=wirel...

amokkatmt

Good day everyone. 1. Very serious problem, I can not from the version that was updated on 6.35rc19 no further update or rollback. Tried through NETINSTALL 6.35.3 - it did not work. He does not see NETINSTALL Mikrotik able BOOT 2. About 2 months is a problem with 2-ynymi sessions in Mikrotik, scree...

amokkatmt

incahex, amokkatmt - Do you have some kind of tunnels on your devices? For example, L2TP and/or PPPoE?

I have 1 PPPoE outgoing, 2 L2TP outg., 1 PPTP incoming running almost all the time.
Now waiting:

graph_image.php.png

uptime 1.5 hours.
Few last days:

graph_image2.php.png

amokkatmt

This issue with memory started for me on rc25. I have RB750GL.
Already upgraded to rc28. If issue reoccur, will try to make Supout.

amokkatmt

For anyone looking for solution to protect mikrotik itself from upnp port override is like this: /ip firewall nat add action=return chain=dstnat dst-address-type=local dst-port=21 protocol=tcp add action=return chain=dstnat dst-address-type=local dst-port=22 protocol=tcp add action=return chain=dstn...

amokkatmt

Hello. How can I count active interfaces? Please see screenshots. How can I count those with status "up" ? This is EPON OLT, so interface count is dynamic and their states are dynamic too.

oids1.png

oids2.png

Thank you for any help.

amokkatmt

Yes, on DHCP server you can configure to send routes as an option if client request that option. However in l2tp case ip address is not received by DHCP.

So this is not a solution, right?

amokkatmt

You can't push routes to the client from RouterOS. Other methods should be used, for example add static routes.

Are there any other ways except static routes on client? May be some special DHCP set up etc. ?

amokkatmt

Hi all. I have 750GL at home, running RouterOS v5.7. I have succesfully set up PPTP / L2TP over IPSec servers for accessing my home networks from internet. How can I push network routes, which my RB operates in to remote computer while establishing PPTP/L2TP connection from that computer via interne...

Search found 34 matches

Re: v7.9rc is released!

tool/fetch HTTP headers override

Re: v6.47 [stable] is released!

Re: v6.47 [stable] is released!

Re: v6.44beta [testing] is released!

Re: New IP cloud is coming.

Re: v6.43rc [release candidate] is released!

Re: v6.42rc [release candidate] is released!

Re: v6.40rc [release candidate] is released! (New bridge implementation)

Re: v6.40rc [release candidate] is released! (New bridge implementation)

Re: v6.40rc [release candidate] is released! (New bridge implementation)

Re: v6.40rc [release candidate] is released!

Re: RE: Re: v6.40rc [release candidate] is released!

Re: VLAN disable and remove from all documentation

Re: VLAN disable and remove from all documentation

Re: Untagged/Tagged port

Re: VLAN disable and remove from all documentation

Re: VLAN disable and remove from all documentation

Re: v6.40rc [release candidate] is released!

RoadWarrior vpn, src-nat IPSEC decrypted traffic.

Re: v6.39rc [release candidate] is released

Tool fetch not downloading entire file

Re: v6.39rc [release candidate] is released

Re: Winbox 3.8 released!

Re: Winbox 3.8 released!

Re: v6.37rc [release candidate] is released, only one wireless package!

Re: v6.35rc [release candidate] is released, new wireless package!

Re: v6.35rc [release candidate] is released, new wireless package!

Re: v6.35rc [release candidate] is released, new wireless package!

Re: UPnP port blocking

Re: Probe Thread

Re: Pushing routes to PPTP/L2TP client of my RB

Re: Pushing routes to PPTP/L2TP client of my RB

Pushing routes to PPTP/L2TP client of my RB