Community discussions

Search found 244 matches

by Kindis
Thu Aug 01, 2019 8:45 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33301

Re: v6.45.2 [stable] is released!

/system package update check-for-updates
channel: stable
installed-version: 6.45.2
latest-version: 6.45.2
status: System is already up to date

The 6.45.3 is not available yet!
You can download via the download page.
https://mikrotik.com/download
by Kindis
Thu Aug 01, 2019 8:43 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33301

Re: v6.45.2 [stable] is released!

@CrimzinZA You have 3 things to check 😁
ROS version, MT firmware and modem firmware.
Upgrading modem firmware solved my 4G issues.

Here is how to update modem firmware https://wiki.mikrotik.com/wiki/Manual:I ... re_upgrade
by Kindis
Thu Aug 01, 2019 5:17 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33301

Re: v6.45.2 [stable] is released!

What version of ROS are you running? Also have you updated the modem firmware. I had big issues getting 4G to run on my unit until I upgraded modem firmware.
by Kindis
Fri Jul 19, 2019 1:55 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33301

Re: v6.45.2 [stable] is released!

RouterOS version 6.45.2 has been released in public "stable" channel! *) wireless - improved 802.11ac stability for all ARM devices with wireless; Did I miss something? What was going wrong with cAP ac before this? Can you please give some details, please? Also, will it be backported to long term r...
by Kindis
Mon Jul 01, 2019 10:32 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 61266

Re: v6.45.1 [stable] is released!

Wow 9 CVE fixed! Very nice will try this one on the test systems asap!
by Kindis
Wed May 29, 2019 1:40 pm
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 30114

Re: v6.44.3 [stable] is released!

We are trying to upgrade to 6.44.3 from 6.29. I can download the file and it is in the files window. It will not install. I have tried to reboot 5 or 6 times and still nothing. Any advice? That is not advisable! You have not updated for so many years that it cannot be expected to be a smooth proces...
by Kindis
Fri May 24, 2019 2:36 pm
Forum: General
Topic: cpu 100% internet disconnections
Replies: 3
Views: 256

Re: cpu 100% internet disconnections

Hello, Since v6.43.4 a lot has happen and also some CVE has been fixed. If you are on Stable release I would start with changing to Long-Term Release and upgrade to 6.43.16 If the issue still continues I would export config, read though so there is nothing strange in the config (you have been hacked...
by Kindis
Tue Apr 30, 2019 1:20 am
Forum: Virtualization
Topic: Why is there not a CHR ISO for bare metal ?
Replies: 5
Views: 670

Re: Why is there not a CHR ISO for bare metal ?

Please note that I said support and not work. The drivers are most lightly there but in term of support for MT it is a huge difference. Granted that hypervisors can cost but there are cheaper and even free hypervisors out there. Hyper-V is free and has max vcpu per guest of 64. For raw performance w...
by Kindis
Thu Apr 25, 2019 2:42 pm
Forum: Virtualization
Topic: Why is there not a CHR ISO for bare metal ?
Replies: 5
Views: 670

Re: Why is there not a CHR ISO for bare metal ?

CHR is a virtual appliance where MT can deliver a product to a plattform they know. They only have to deal with drivers from each hypervisor and hardware drivers are maintained by the hypervisor. This makes the support much much easier to handle as the number of scenarios for drivers is limited. So ...
by Kindis
Tue Mar 26, 2019 2:47 pm
Forum: General
Topic: wAP AC reaching out to 159.148.172.226:80 every hour
Replies: 10
Views: 668

Re: wAP AC reaching out to 159.148.172.226:80 every hour

My guess is that the router check if there are any new versions available.
I have noted that if I use the Mikrotik app on Android I see on the "login page" if there is a update available on some units before I check manually.
But this is a guess of mine.
by Kindis
Sun Mar 24, 2019 9:44 am
Forum: Announcements
Topic: v6.43.13 [long-term] is released!
Replies: 44
Views: 9045

Re: v6.43.13 [long-term] is released!

The fast connection of winbox was part of a release where they improved and secured the connection. Might have been 6.43 release. I do not remember but I do remember a lot of happy people talking about how quick it is now 😊
So the connection of both faster and more secure now.
by Kindis
Sat Mar 23, 2019 5:56 pm
Forum: General
Topic: Endless ISAKMP-SA established/ deleted (RouterOS <-> FritzOS 7.01)
Replies: 15
Views: 1216

Re: Endless ISAKMP-SA established/ISAKMP-SA deleted

What is the lifetime of the key in the proposal? On both units.
by Kindis
Fri Mar 22, 2019 9:10 am
Forum: General
Topic: Cloud Backup
Replies: 20
Views: 3387

Re: Cloud Backup

Kindis could you share your email backup script please? Yes here they are. I have switched from E-mail backups to FTP. So now all routers upload to a FTP server that then send the backup offsite. The reason is that the ISP I have thinks the backup generated e-mail where a sign that my SMTP account ...
by Kindis
Thu Mar 21, 2019 5:39 pm
Forum: General
Topic: VRRP instability, flapping
Replies: 4
Views: 627

Re: VRRP instability, flapping

Removed
Read this on a phone and missread your config so my advice is useless 😁
by Kindis
Mon Mar 11, 2019 8:54 am
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 806

Re: Ring hardware and Mikrotik [SOLVED]

I'm using CAPSMAN and set Group-key-update to 01:00:00 and have had no luck with 2 doorbells. aes and WAP WPA2 on with now a shorter 8 character password. No issues connecting with any other device. Anyone else have experience? The device says has a problem connecting to the Internet. Seems like it...
by Kindis
Mon Mar 11, 2019 8:46 am
Forum: General
Topic: BUG – v.6.44 on ARM boxes RB3011 is losing IPSEC configuration
Replies: 7
Views: 728

Re: BUG – v.6.44 on ARM boxes RB3011 is losing IPSEC configuration

I have a relatively complex IPsec configuration (tunnels to five end-points, running on three different non-Mikrotik platforms, both IPv4 and IPv6, plus an L2TP-over-IPsec dial-in VPN which I configuration in pieces using the IPsec menus directly rather than the "IPsec secret" option on the L2TP si...
by Kindis
Fri Mar 08, 2019 3:34 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 34010

Re: v6.44 [stable] is released!

Maybe its time for UK to change to EU plug. Ahh, I did forget UK goes out of EU :) I have travel around the world and UK plug is one the ugliest and largest plug out there.... I live in Sweden but I must say the UK plug is one of the bulkiest to work work with it is also one if the smartest with fu...
by Kindis
Fri Mar 08, 2019 10:54 am
Forum: General
Topic: Cloud Backup
Replies: 20
Views: 3387

Re: Cloud Backup

The only time I needed a backup was when a device was broken. That does not work in the case? I am currently using a script for the backup. Back is for restore on the same device. If you restore a backup file on a different unit it will rewrite some configuration that might create issues for you. I...
by Kindis
Mon Mar 04, 2019 7:19 pm
Forum: General
Topic: ROS 6.44 - VPN L2TP not working
Replies: 23
Views: 4509

Re: ROS 6.44 - VPN L2TP not working

After upgrade from ROS 6.43.12 to 6.44 - I have lost possibility co connect to my MT with L2TP (with preshared key) VPN. I was changing firewall settings, trying other.... but after downgrade to 6.43.12 - IT WORKS AGAIN. So something is BAD with ROS 6.44 and L2TP VPN ! MikroTik team - please repir ...
by Kindis
Wed Feb 27, 2019 1:19 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 34010

Re: v6.44 [stable] is released!

I have now updated two wAP AC, One 493G, Two CHR's, one 4011 and two 3011. One 3011 hold several GRE tunnels with IPSec and no issues after upgrade. Endpoints to where GRE tunnels are connecting are still on 6.43.12 so no issues between versions either.
Great job MT!
by Kindis
Tue Feb 26, 2019 10:45 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 34010

Re: v6.44 [stable] is released!

Deleted as question was answered above
by Kindis
Mon Feb 18, 2019 3:04 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 11651

Re: v6.43.12 [stable] is released!

Hello, I've got IPSec problem after upgrading to v6.43.12. I use RB1100 devices, with IPSec vpn. The ipsec peers are configured in the IP->IPSec->Peers menu. The peer profile is sha512/aes256/modp8192 in both side, and the auth method is rsa signature. After upgrading to 6.43.12 in the log I see th...
by Kindis
Mon Feb 18, 2019 1:45 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 11651

Re: v6.43.12 [stable] is released!

Hello, I've got IPSec problem after upgrading to v6.43.12. I use RB1100 devices, with IPSec vpn. The ipsec peers are configured in the IP->IPSec->Peers menu. The peer profile is sha512/aes256/modp8192 in both side, and the auth method is rsa signature. After upgrading to 6.43.12 in the log I see th...
by Kindis
Wed Feb 13, 2019 11:25 am
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 806

Re: Ring hardware and Mikrotik [SOLVED]

Hello, Group key did the trick for the Chime! I tried this before but then I had a 20 characters long and that did not work! Now I have 8 and set the group key to 1 hours and it works like a charm, well at least for 10 min now! :-) What is the recommended group key update interval. I have always jus...
by Kindis
Tue Feb 12, 2019 3:14 pm
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 806

Ring hardware and Mikrotik [SOLVED]

Hello, Just bought a Ring Doorbell 2 and a Ring Chime and I'm having a very hard time getting it to work on my wAP AC devices. The Doorbell connects but had a lot of issues connecting an loosing connection all the time. The Chime on the other hand do not connect at all. I get unicast key exchange ti...
by Kindis
Mon Feb 11, 2019 9:23 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 11651

Re: v6.43.12 [stable] is released!

Updated two 3011, one 4011, one 493G, two CHR and two wAP AC and all went fine.
Updated from 6.43.11
by Kindis
Wed Feb 06, 2019 9:42 pm
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11131

Re: v6.43.11 [stable] is released!

After upgrading my RB3011, one of the CPUs peeks at 100% all the time (switches back and forth between CPUs). Anyone else with the same problem?
No both of mine are just fine. Have you updated firmware and rebooted a second time?
by Kindis
Tue Jan 29, 2019 12:22 am
Forum: General
Topic: Tunnel which generates least traffic when IDLE
Replies: 13
Views: 1047

Re: Tunnel which generates least traffic when IDLE

I have to add that only one side has a fixed IP, so GRE won't work. Thank you anyway...
I have dynamic IP on both sides and still use GRE. I have a script that checks every 5 min if my IP has changed and If so changes my IP on the GRE interface. Works like a charm.
by Kindis
Mon Jan 28, 2019 3:26 pm
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 439

Re: wAP LTE in Sweden

Thanks everyone for your input! I will give wAP LTE a try and see what it provides!
by Kindis
Tue Jan 22, 2019 11:08 am
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 439

Re: wAP LTE in Sweden

I have deployed them only in rural areas here in Finland. The problem is that we have three operators and on band 20 (800MHz) the channel width is only 5MHz (or was it 10MHz?) Anyways the net result is around 20Mbps throughput. I have also used directional 14dBi antennas (yes, I have been asked to ...
by Kindis
Mon Jan 21, 2019 3:27 pm
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 439

wAP LTE in Sweden

Hello, Anyone on this forum that have experience using wAP LTE (RBwAPR-2nD&R11e-LTE) in Sweden? If so how was your experience using it and what kind of speed are you getting? Thinking about getting one to add redundancy to my network in case of ISP failure but I would like to know how it works in Sw...
by Kindis
Fri Jan 11, 2019 3:38 pm
Forum: General
Topic: CCR1036-8G-2S+with HIGH CPU load
Replies: 9
Views: 789

Re: CCR1036-8G-2S+with HIGH CPU load

Could it we scheduled script. They run in the management process if I remember correctly.
by Kindis
Tue Jan 08, 2019 9:17 pm
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 697

Re: fast track not work

Not really sure what you want to do but FastTrack is to offload the CPU and bypass firewall etc of the device and it requires hardware support and CHR cannot handle that. Can you describe what you want to do in more details because FastTrack should not be needed from my point of view. I have a serv...
by Kindis
Tue Jan 08, 2019 4:52 pm
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 697

Re: fast track not work

Not really sure what you want to do but FastTrack is to offload the CPU and bypass firewall etc of the device and it requires hardware support and CHR cannot handle that.

Can you describe what you want to do in more details because FastTrack should not be needed from my point of view.
by Kindis
Tue Jan 08, 2019 10:48 am
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 697

Re: fast track not work

No fasttrack does not work on CHR.
by Kindis
Tue Dec 25, 2018 12:06 am
Forum: General
Topic: slow file transfer rates between vlans on RB750Gr3 6.43.7
Replies: 13
Views: 763

Re: slow file transfer rates between vlans on RB750Gr3 6.43.7

I do not have fast track on a 750Gr3 and are able to transfer 250Mbps. OP does only get 23Mbps,so its not only fast track.
But he said MB not Mbit
by Kindis
Mon Dec 24, 2018 9:34 am
Forum: General
Topic: slow file transfer rates between vlans on RB750Gr3 6.43.7
Replies: 13
Views: 763

Re: slow file transfer rates between vlans on RB750Gr3 6.43.7

I don't think this is a VLAN issue. My guess is that if you look at profile when you would see that firewall holds the CPU. Add fasttrack and this problem should go away. Add this rule before/above your "Accept established,related" add action=fasttrack-connection chain=forward comment="Fasttracking ...
by Kindis
Thu Dec 06, 2018 3:45 pm
Forum: Announcements
Topic: URGENT security reminder
Replies: 84
Views: 32047

Re: URGENT security reminder

No, major misunderstanding :D

Not "it will be fixed in v7", but "It can only be fixed in v7".
So sorry but I could not just contain myself ;-) Not that I'm missing V7 I just follow the forum :-)
by Kindis
Thu Dec 06, 2018 3:40 pm
Forum: Announcements
Topic: URGENT security reminder
Replies: 84
Views: 32047

Re: URGENT security reminder

This sums up how I think ROS 7 is communicated! :-)
Image
by Kindis
Thu Nov 22, 2018 4:20 pm
Forum: General
Topic: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of RouterOS
Replies: 6
Views: 1481

Re: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of Router

@eider Thank you for your post. "In newer version password is no longer stored as plain-text so it can not be used to encrypt backup file without user explicitly providing password." In the newer version, Does it mean that the user password of RouterOS is not used by default for the encryption of a...
by Kindis
Thu Nov 22, 2018 11:46 am
Forum: Virtualization
Topic: CHR disk size
Replies: 6
Views: 1069

Re: CHR disk size

Hi! Setup CHR in my VPS. HDD space 50GB. After first boot - router os resize disk, remains 15GB.. Where is the rest of the disk space? Had a vague memory that they limited the size of CHR disk in a release so I made a search in the change logs and I found the following: What's new in v6.40 (2017-Ju...
by Kindis
Tue Nov 20, 2018 7:43 pm
Forum: General
Topic: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of RouterOS
Replies: 6
Views: 1481

Re: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of Router

Could be this.

What's new in 6.43 (2018-Sep-06 12:44):

MAJOR CHANGES IN v6.43:
----------------------
!) backup - do not encrypt backup file unless password is provided;
by Kindis
Tue Nov 20, 2018 9:31 am
Forum: General
Topic: hAP AC - slow eth speed to INET
Replies: 2
Views: 327

Re: hAP AC - slow eth speed to INET

I have not seen this issue in any of my setups but you should consider adding more safety to your setup. Right now you do not drop everything new to efter1 which is you WAN port. I woudl recommend that you do the following: /ip firewall filter add action=fasttrack-connection chain=forward connection...
by Kindis
Fri Nov 09, 2018 11:10 am
Forum: Virtualization
Topic: CHR Performance issues Hyper-V
Replies: 3
Views: 1093

Re: CHR Performance issues Hyper-V

What license do you have on the CHR?
by Kindis
Thu Nov 01, 2018 3:25 pm
Forum: General
Topic: Network Printer on the two Subnets
Replies: 2
Views: 604

Re: Network Printer on the two Subnets

I had a similar issue as you. I have my printer, and other devices I do not trust, on a separate subnet at home. Now the client my wife gets from her local IT at work have just started a automatic VPN tunnel that uses forced tunneling. This means she cannot use our printer at all as 0.0.0.0/0 point ...
by Kindis
Tue Oct 30, 2018 11:52 pm
Forum: General
Topic: Strange loop on update from 6.37.3 to 6.43.4
Replies: 5
Views: 557

Re: Strange loop on update from 6.37.3 to 6.43.4

6.37 is vulnerable to a couple of exploits and you may have been compromised.
Export config, review config for any strange scripts and so, netinstall the device and import config. Just to be safe.
by Kindis
Tue Oct 30, 2018 5:34 pm
Forum: General
Topic: A bit confused about RB750 Gr3 IPSec
Replies: 5
Views: 506

Re: A bit confused about RB750 Gr3 IPSec

You cannot see the H under installed SA in winbox (bug) [..] Are you sure that Hardware AEAD is greyed out in SA detail screen status bar? Otherwise you can see H flag by enlarging the first grid column. Jesus Christ I use Excel to much. I'm so use to dubbel clicking on the column separator that it...
by Kindis
Tue Oct 30, 2018 9:50 am
Forum: General
Topic: A bit confused about RB750 Gr3 IPSec
Replies: 5
Views: 506

Re: A bit confused about RB750 Gr3 IPSec

I have one RB750Gr3 connecting to a 3011 using L2TP/IPSec and it uses SHA256 and aes-256-cbc. You cannot see the H under installed SA in winbox (bug) but if you use console or webfig I can see that the hardware offload is working. I have a 100 Mbit connection to it and I can easily push that connect...
by Kindis
Thu Oct 25, 2018 4:18 pm
Forum: General
Topic: Redirect request by source IP in a scenario with Server Microsoft (DC)
Replies: 3
Views: 304

Re: Redirect request by source IP in a scenario with Server Microsoft (DC)

No you cannot do that as far as I know on a DC. In this case your best bet is to add a other DNS server that can perform what you want and redirect all clients to this DNS. Make sure DNS for the domain works aswell. Maby a tiny Linux server with BIND could allow you to do what you want? You also get...
by Kindis
Sat Oct 13, 2018 9:24 am
Forum: General
Topic: Severe Performance Drop RB3011 [SOLVED]
Replies: 33
Views: 2036

Re: Severe Performance Drop RB3011 [SOLVED]

I have a 3011 and do not have this issue. Can you export your mangle rule? I can see if I can test it.