Community discussions

MikroTik App

Search found 412 matches

  • 1
  • 2
by Kindis
Sun Jul 25, 2021 11:26 am
Forum: General
Topic: High memory usage
Replies: 3
Views: 817

Re: High memory usage

If you use DoH uncheck Verify DoH Certificate. This should solve the issue until MT fixes the issue.
by Kindis
Tue Jul 13, 2021 9:11 am
Forum: General
Topic: Static DNS records [SOLVED]
Replies: 9
Views: 663

Re: Static DNS records [SOLVED]

Nope did not solve the CNAME issue I have (and have a case for at MT).
by Kindis
Mon Jul 12, 2021 11:46 pm
Forum: General
Topic: Static DNS records [SOLVED]
Replies: 9
Views: 663

Re: Static DNS records [SOLVED]

Perhaps that is related to the fact that type=FWD does not work if DoH is enabled... I hope Mikrotik will look into this and fix this/both issues. I wonder if this is part of CNAME issues I have. If you add a CNAME with a public A record it does not resolve. When you query the CNAME it does not loo...
by Kindis
Mon Jul 12, 2021 12:47 pm
Forum: General
Topic: Static DNS records [SOLVED]
Replies: 9
Views: 663

Re: Static DNS records [SOLVED]

So I have a similar setup using NextDNS. I have added a few static DNS records that end in network.lan so I can assess network assets by name instead of IP. Clients can ONLY use MT or NextDNS as DNS resolver. Everything else is blocked. So I did a quick look in the NetxDNS GUI and found nothing. I h...
by Kindis
Thu Jul 01, 2021 12:33 am
Forum: General
Topic: EoIP + IPSec RB750Gr3 problems at 50% load
Replies: 1
Views: 304

Re: EoIP + IPSec RB750Gr3 problems at 50% load

Looks like one core is running at 100%. The RB750Gr3 have 2 cores and 4 threads. Guess this is single threaded so it would explain the drops. Also verify that you run hardware offload. CCR and RB750Gr3 does not support all the same things for hardware offload. https://wiki.mikrotik.com/wiki/Manual:I...
by Kindis
Mon Jun 28, 2021 9:37 am
Forum: General
Topic: Ipsec wrong password after router reboot
Replies: 2
Views: 349

Re: Ipsec wrong password after router reboot

Now I can be wrong here but I had a simular issue with GRE tunnels. The issue is most likely that the endpoint that did not restart have not understood that the router rebooted and this flushed all the SA. Test to lower the timeout value of the tunnel and also retries so that the tunnel goes down if...
by Kindis
Tue Jun 22, 2021 9:32 am
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

Silently removed 66960 Mhz channel support. Why?
No info in the changelog just nothing :-(
Have a look at this: viewtopic.php?f=7&t=176086
by Kindis
Sat Jun 19, 2021 8:43 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

It has been rock solid and only started with newest build. Solved by adding external resolution to clients as well.
by Kindis
Sat Jun 19, 2021 3:14 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

I had a strange issue tonight. All DNS resolving stopped. The log said Doh time issues and if I removed Doh did not solve the issue. The DNS cache was empty and I could not resolve anything. Only after a restart did things start to work again. Funny thing is that every unit had the same issue at the...
by Kindis
Thu May 27, 2021 2:42 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

meensb could you please check your CAPsMAN logs if cAP ac joined it after the upgrade to 6.48.3? If anyone else has experienced an issue with cAP ac not booting after the update to 6.48.3 please write to support. https://mikrotik.com/support You are referencing RBcAPGi-5acD2nD here? I am running tr...
by Kindis
Wed May 26, 2021 4:51 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

I'm not good at explaining, English is not my mother language. What I wanted to explain is that these so-called vulnerabilities are nonsense in comparison to other past and actual problems. (Non-RouterOS related) Here we are in full agreement. The issues are not that bad at all, especially the desi...
by Kindis
Wed May 26, 2021 4:04 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

Kindis, what is missing from the blog? All serious security issues are in there. We will add Frag, but in my opinion, it is not serious at all. It's like discovering that your front door can be opened in a few minutes with the right lockpick, or it's like putting a security door in the main entranc...
by Kindis
Wed May 26, 2021 4:00 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

Kindis, what is missing from the blog? All serious security issues are in there. We will add Frag, but in my opinion, it is not serious at all. Well it is up to you but I follow many vendors and I do not really care if the risk is low to high but I would like an update to see if a security update h...
by Kindis
Wed May 26, 2021 3:03 pm
Forum: Announcements
Topic: v6.48.3 [stable] is released!
Replies: 117
Views: 25815

Re: v6.48.3 [stable] is released!

Also also please please please update the blog you have with new details about Security
or
Shut it down as you clearly are not using it they way you presented it.
by Kindis
Thu May 20, 2021 1:29 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

This means you also have the implementation issues and not only the design flaws.
Many thanks for quick reply
by Kindis
Thu May 20, 2021 1:22 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

---------------------- !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147); ---------------------- Does this have an expected performance hit? In the tests conducted so far, no meaningful differences in CPU...
by Kindis
Thu May 20, 2021 12:59 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

---------------------- !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147); ---------------------- Does this have an expected performance hit? In the tests conducted so far, no meaningful differences in CPU...
by Kindis
Thu May 20, 2021 10:05 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

I know you can probably not answer this but I'm gonna ask any way :-)

Do you have a release timeline for Stable and Long-Term? Can we expect anything this week or is most targeted further ahead?
by Kindis
Fri Apr 30, 2021 11:18 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

You should remove this file from here and send to support@mikrotik.com.
This file contains passwords etc so you should not post it in the forum here.
by Kindis
Mon Apr 26, 2021 4:00 pm
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

Interesting, changed to next dns (downloaded cert and enabled verification) New https://45.90.28.0/dns-query Old https://1.1.1.1/dns-query Will in some hour see if memory goes up. So here is a difference and now my perhaps poor skills of DoH will popup. But if you use the IP in the HTTPS how can th...
by Kindis
Mon Apr 26, 2021 3:01 pm
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

Yes: SUP-47171 That is great! I did however activate DoH certificate verification on my 4011 (main resolver) and interestingly I do not have the same issue. So I have been running with this enabled a few days and I do not have the same trend your routers display. I followed the guide of NextDNS and...
by Kindis
Sat Apr 24, 2021 11:26 am
Forum: General
Topic: Massive slowdown after upgrading to routeros 6.48.2
Replies: 5
Views: 777

Re: Massive slowdown after upgrading to routeros 6.48.2

I always restart my equipment twice after a upgrade. First ROS then firmware. I think that in many cases a second restart solves many issues. So perhaps the reboot solved the issue?
by Kindis
Fri Apr 23, 2021 3:48 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

What's new in 6.49beta38 (2021-Apr-23 10:31): Changes in this release: *) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN); If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be ...
by Kindis
Fri Apr 23, 2021 1:18 pm
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

When I read stuff like this I get a little mad with myself. Why oooo why did I not think of this! I will implement this on the main resolver at once. That will just be like pee in the pants to get worm. Short term solution. You do not know what other stuff may go wrong due to the memory leakage. I ...
by Kindis
Fri Apr 23, 2021 9:30 am
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

At the end the graph jumps down. Is that just disabling verification or a reboot? So would a scheduled disable and enable work around the issue?
When I read stuff like this I get a little mad with myself. Why oooo why did I not think of this! I will implement this on the main resolver at once.
by Kindis
Thu Apr 15, 2021 8:18 am
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

The new update fix the RB3011's port flapping?
No not this one but the previous one 6.48.1 fixed that issue if we are talking about issues that where added into 6.48 release.
by Kindis
Wed Apr 14, 2021 11:12 pm
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

How's it going with the doh? I'm also waiting for a leak fix to drag this function to the router. Does not look to good. It may be to short, but as seen below DoH enabled around 12:00 and sine then it has raised around 1%. Will report back after some days. Before I added DoH the memory was around 2...
by Kindis
Wed Apr 14, 2021 9:23 am
Forum: Announcements
Topic: v6.48.2 [stable] is released!
Replies: 154
Views: 30383

Re: v6.48.2 [stable] is released!

Upgraded an RB3011 to 6.48.2 and log started filling up with OSPF errors and no OSPF routes were being distributed. Ignoring Link State Acknowledgment packet: wrong peer state state=2-Way Other OSPF routers distributing routes on the same backbone include 3 CHRs and an RB750Gr3. I wasn't planning t...
by Kindis
Tue Mar 30, 2021 4:42 pm
Forum: General
Topic: DNS server not returning specific A record (may be DNS/DoH bug)
Replies: 4
Views: 548

Re: DNS server not returning specific A record (may be DNS/DoH bug)

So I just moved my DNS queries to my MT units and use DoH to NextDNS and I do not have a issue resolving this. > ssl.gstatic.com Server: UnKnown Address: x.x.x.x Non-authoritative answer: Name: ssl.gstatic.com Addresses: 2a00:1450:400f:804::2003 142.250.74.131 But I'm not using Google DNS service to...
by Kindis
Tue Mar 30, 2021 12:51 pm
Forum: General
Topic: hEX POE 48V (MT48-480095)
Replies: 4
Views: 580

Re: hEX POE 48V (MT48-480095)

Now I do not know this for a fact but my understanding is that the switch does not have a transformer so it cannot step the voltage up or down. It can just relay what it get from the power supply.
by Kindis
Mon Mar 29, 2021 7:27 pm
Forum: General
Topic: OpenSSL Security - CVE-2021-3450 [SOLVED]
Replies: 2
Views: 654

Re: OpenSSL Security - CVE-2021-3450 [SOLVED]

Many thanks for quick reply.
by Kindis
Mon Mar 29, 2021 1:15 pm
Forum: General
Topic: OpenSSL Security - CVE-2021-3450 [SOLVED]
Replies: 2
Views: 654

OpenSSL Security - CVE-2021-3450 [SOLVED]

Hello, I'm just curios if CVE-2021-3450 has any impact on ROS? Thinking primarily for SSTP and so on but I guess it is not a major issue regardless but would like to know if ROS is affected and in that case I guess we can expect a release to fix this as well. Edit: Forgot the link https://www.openss...
by Kindis
Thu Mar 11, 2021 10:18 pm
Forum: General
Topic: blocking port 53 incoming from WAN ports, block tons of packets
Replies: 9
Views: 813

Re: blocking port 53 incoming from WAN ports, block tons of packets

Wow interesting. What happens if you log everything for a min. Is it all different IPs?
by Kindis
Tue Mar 09, 2021 12:59 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

Have you seen last 6.49Beta?
What's new in 6.49beta22 (2021-Mar-08 09:07):

Changes in this release:

*) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
Do not know if this is related but might be?
by Kindis
Fri Feb 12, 2021 3:28 pm
Forum: General
Topic: How to connect vrrp'ed routers to wan (ISP)
Replies: 12
Views: 885

Re: How to connect vrrp'ed routers to wan (ISP)

So VRRP the dead minimum is 3 IP's and they need to be on the same network and they use broadcast. So I would say no this will not work. With that said perhaps you can use scripts etc to move the IP between devices. For example if you create a VRRP on the internal network you can add UP and Down scr...
by Kindis
Thu Feb 11, 2021 6:05 pm
Forum: General
Topic: Home Network is Failing
Replies: 10
Views: 772

Re: Home Network is Failing

We need more info. I run my connection over (500/500) and I have no issues working from home with other family members using internet at the same time. I also have a 4011 (none wireless).

How are you connected? If wireless I bet that is the problem.
by Kindis
Fri Feb 05, 2021 3:30 pm
Forum: Announcements
Topic: v6.48.1 [stable] is released!
Replies: 121
Views: 32847

Re: v6.48.1 [stable] is released!

Upgraded the following units from 6.47.8
Two 3011
One RB750Gr3
One cAP AC

No issues and full production has been moved to these units. Will see during the weekend how all looks.
by Kindis
Fri Feb 05, 2021 12:30 pm
Forum: Announcements
Topic: v6.48.1 [stable] is released!
Replies: 121
Views: 32847

Re: v6.48.1 [stable] is released!

What about RB3011 port flapping re-introduced in 6.48?
It's this one
) switch - fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48);
by Kindis
Fri Feb 05, 2021 9:32 am
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

Will be there no further V6.48.XX versions?
From the doomed V6.48 straight to V6.49?
I would guess we will get a 6.48.1 today.
by Kindis
Fri Feb 05, 2021 9:30 am
Forum: General
Topic: When you're so desperate for high-speed Internet...
Replies: 1
Views: 334

Re: When you're so desperate for high-speed Internet...

Haha. Many thanks for this.
by Kindis
Wed Feb 03, 2021 4:00 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

Also please MT update the Security blog
https://blog.mikrotik.com/security/
*) hotspot - fixed special character parsing in "target" variable (CVE-2021-3014);
Either keep this blog up to date (which is not what is happening now) or shut it down.
by Kindis
Wed Feb 03, 2021 2:58 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 169
Views: 43488

Re: v6.49beta [testing] is released!

Great news but is there a fix for the interface issues with 3011 in here but 3011 is not just mentioned in the changelog?

Edit: I'm just blind. It is this one!
*) switch - fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48);
by Kindis
Wed Feb 03, 2021 11:15 am
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 75895

Re: v6.48 [stable] is released!

roadblock Does the developer Team fell into wintersleep? I'm wondering if perhaps they do not intend to release a 6.49 (moving to v7 instead as the next stable release after 6.48) and their existing build process is forcing them to release a 6.49 beta X in order to add the fixes to 6.48, like they ...
by Kindis
Thu Jan 28, 2021 4:00 pm
Forum: General
Topic: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]
Replies: 7
Views: 756

Re: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]

I will be honest and say I had not thought about Add and Set but I guess Add is adding and Set is changing something already added. I however do most of this via Winbox as I lile the visual presentation and think that it makes for easier understanding of the configuration. So I would have used Winbo...
by Kindis
Thu Jan 28, 2021 9:59 am
Forum: General
Topic: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]
Replies: 7
Views: 756

Re: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]

So having a quick look while between meetings :) I can see that SFP1 is currently specified as a Tragged only port add bridge=BR1 frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=sfp1 You need to change this to add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged ingr...
by Kindis
Wed Jan 27, 2021 11:41 pm
Forum: General
Topic: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]
Replies: 7
Views: 756

Re: Reconfigure VLAN on CRS-326-24P-2S+ [SOLVED]

So in first part of post spf1 is under tagged for vlan 1005 but in later output it is under untagged. It should be under untagged and PVID for the port is correct.
Can you do a full export under interface bridge?
by Kindis
Wed Jan 27, 2021 11:33 pm
Forum: General
Topic: Port flapping (ether6 link down/up) on RB3011UiAS-RM
Replies: 46
Views: 26354

Re: Port flapping (ether6 link down/up) on RB3011UiAS-RM

3011 and port flapping is a known issue on 6.48 and MT said next release will fix this.
by Kindis
Wed Jan 27, 2021 9:52 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 75895

Re: v6.48 [stable] is released!

If you need anything MORE stable - go to Zyxel with their zyfwp. but keep in mind that you share your admin account with anyone on the internet https://nakedsecurity.sophos.com/2021/01/06/zyxel-hardcoded-admin-password-found-patch-now/ zyfwp is the hard coded account so I think a joke was made here 😁
by Kindis
Sun Jan 24, 2021 10:51 pm
Forum: General
Topic: Random Disconnections on all LAN Ports (RB3011)
Replies: 3
Views: 444

Re: Random Disconnections on all LAN Ports (RB3011)

What version are you running of ROS?
by Kindis
Mon Jan 11, 2021 10:01 am
Forum: General
Topic: RB750Gr3 difference between workstation speedtest vs bandwitch test
Replies: 13
Views: 980

Re: RB750Gr3 difference between workstation speedtest vs bandwitch test

Ok so this might be a stupid question but have you tested other speed testing sites? I mean just because you get crap speed on one speed test site/connection does not mean you connection is bad. If you download a ISO file or something else that is big can you get the proper speed then? I use to have...
by Kindis
Sat Jan 09, 2021 9:22 am
Forum: General
Topic: No internet from AP on VLAN when using CAPsMAN [SOLVED]
Replies: 3
Views: 482

Re: No internet from AP on VLAN when using CAPsMAN [SOLVED]

Export config and we can see but I had a simular issue when I started using CapsMAN. I use local forwarding so the AP do not tunnel the traffic to the router. What solved my issue was that I had forgotten to add the Bridge in CAP config on the AP. Once I added the bridge in the config on the ap it a...
by Kindis
Fri Jan 08, 2021 8:27 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 75895

Re: v6.48 [stable] is released!

Read in this thread about SIP and workaround.. All is written here.
by Kindis
Fri Jan 08, 2021 12:06 am
Forum: General
Topic: Problem Hardware Offload on CRS326-24G-2S+?
Replies: 1
Views: 263

Re: Problem Hardware Offload on CRS326-24G-2S+?

So you have 2 Bridges. One named Bridge and one named VLAN2. Hardware offload only works for one bridge. You have to move the config from VLAN to bridge to the Bridge named Bridge (This became confusing :)) to get this to work. Then delete other Bridge Read more here https://wiki.mikrotik.com/wiki/M...
by Kindis
Tue Jan 05, 2021 11:04 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

It's not the Mikrotik's fault.
The Marvell chip manufacturer is responsible for this.
So it may be but we are not marwell customers but Mikrotik customers so we are affected how MT handle this.
by Kindis
Tue Jan 05, 2021 11:00 pm
Forum: General
Topic: Wait wait wait wait wait.. Mikrotik 10Gbe is a scam...??
Replies: 5
Views: 567

Re: Wait wait wait wait wait.. Mikrotik 10Gbe is a scam...??

So you have bought a switch and not a router, but a switch that can act as a router (Cloud Router Switch, stupid name I know) So you should only use these for switching and perhaps light routing tasks so primarily L2. Read more here on how to make sure you use correct config in ROS. https://wiki.mik...
by Kindis
Tue Jan 05, 2021 10:48 pm
Forum: General
Topic: Wait wait wait wait wait.. Mikrotik 10Gbe is a scam...??
Replies: 5
Views: 567

Re: Wait wait wait wait wait.. Mikrotik 10Gbe is a scam...??

Ethernet test results I think is routing not switching.
Switching result with 1500 bytes is as you write 43,427.8 Mbit which is around 40 Gbit. So there should be no issue as long as it is correctly configured for hardware offload.
by Kindis
Fri Jan 01, 2021 11:05 am
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 75895

Re: v6.48 [stable] is released!

Really hope they fix the RB3011 finally. Mine has been flapping for years, I have 2 years of logs to prove it. Some updates ware better some worse, but none fixed it truly. set X cpu-flow-control=no name="Switch x" does help a bit, but never really went away, just went from many flaps a d...
by Kindis
Sun Dec 27, 2020 10:23 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 75895

Re: v6.48 [stable] is released!

To someone having problems with SIP phones: Could you please check log of the router with ROS 6.48, whether there are unexpected flapping events (link down/up) or not? Since the linkdowns last between 1 and 2 seconds (as observed in my lab), it could cause "Lagged" state in Asterisk when ...
by Kindis
Sat Dec 26, 2020 10:43 am
Forum: General
Topic: Wireless in 2.4 and out via 5gha in hAP ac²
Replies: 4
Views: 556

Re: Wireless in 2.4 and out via 5gha in hAP ac²

They are and this you should be able to do. Never done this so cannot help there but they operate independently of each other.
by Kindis
Wed Dec 09, 2020 3:32 pm
Forum: General
Topic: CRS326-24G-2S+ high CPU
Replies: 3
Views: 669

Re: CRS326-24G-2S+ high CPU

Great. As wiki states doing this removed hardware offload which explains the CPU Use split horizon bridging to prevent bridging loops. Set the same value for group of ports, to prevent them from sending data to ports with the same horizon value. Split horizon is a software feature that disables hard...
by Kindis
Wed Dec 09, 2020 11:52 am
Forum: General
Topic: CRS326-24G-2S+ high CPU
Replies: 3
Views: 669

Re: CRS326-24G-2S+ high CPU

Export your config with hide-sensitive option and post your output here.
Also have a look at tools>profile to see what process consumes the CPU.
And finally verify hardware offload is active on the ports
by Kindis
Wed Dec 09, 2020 10:18 am
Forum: Announcements
Topic: v6.47.8 [stable] is released!
Replies: 56
Views: 16000

Re: v6.47.8 [stable] is released!

I have an RB1100AHx4 running on 6.47 for about 185 days now, which is when that version was released. I'm currently not experiencing any issues, bugs or any other problems yet. I checked change logs and there doesn't seem to be any security fixes since then. Should I leave it as is or upgrade? Rout...
by Kindis
Thu Dec 03, 2020 2:43 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 50584

Re: v7.1beta3 [development] is released!

Almost every device out there based on ipq4018/4019 has atleast 256MB of RAM. With a few exceptions, like RT-AC58U which struggles to not throw errors because of the very limited memory available out of the 128MB total. So I wouldn't keep my hopes up to see it running in the future on lower require...
by Kindis
Thu Dec 03, 2020 10:01 am
Forum: General
Topic: Firmware Upgrade & Changelog
Replies: 8
Views: 4706

Re: Firmware Upgrade & Changelog

So in this case I agree and disagree at the same time. If I compare this to other routers I meet at work like Cisco or Juniper a upgrade of the version thus upgrade both OS and firmware at the same time, even if the upgrade process is way way worse sometimes. The way I see this is that ROS is a OS r...
by Kindis
Wed Dec 02, 2020 11:51 pm
Forum: General
Topic: more cpu core
Replies: 10
Views: 1026

Re: more cpu core

So if you have 2 * 8 cores I think you have to provide a Max of 8 cores per virtual socket.
by Kindis
Wed Nov 18, 2020 11:36 pm
Forum: General
Topic: Disney+ [SOLVED]
Replies: 5
Views: 1488

Re: Disney+ [SOLVED]

This does not make sense to me. I mean if you use VPN Disney+ should not see your original IP address but only your VPN address. So how did they get your IP?
What VPN service was used?
by Kindis
Tue Nov 17, 2020 3:37 pm
Forum: General
Topic: MikroTik HAP AC2 fails to link 1Gbps
Replies: 17
Views: 1234

Re: MikroTik HAP AC2 fails to link 1Gbps

What happen if you put a Gbit switch between? Just to see if the switch can get at 1 Gbit link. So I tested with a gigabit switch, and it didn't work. (some cheap tp link) I also set 2 bridge ports on the IPS router (the one they gave to me), and used it as a gigabit switch - the HAP links at 1gbps...
by Kindis
Mon Nov 16, 2020 11:43 pm
Forum: General
Topic: MikroTik HAP AC2 fails to link 1Gbps
Replies: 17
Views: 1234

Re: MikroTik HAP AC2 fails to link 1Gbps

What happen if you put a Gbit switch between?
Just to see if the switch can get at 1 Gbit link.
by Kindis
Sat Nov 07, 2020 12:00 am
Forum: General
Topic: Disney+ [SOLVED]
Replies: 5
Views: 1488

Re: Disney+ [SOLVED]

I would remove the above file as this contains a little bit more then I would suggest you share. Run /export hide-sensitive instead and post the output here. However I have a all Mikrotik core at home and run 6.47.7 on all routers and do not have this issue. I also reside in Sweden and all my units ...
by Kindis
Thu Nov 05, 2020 3:28 pm
Forum: Virtualization
Topic: CHR: number of CPUs limited to 64?
Replies: 3
Views: 1418

Re: CHR: number of CPUs limited to 64?

So each socket has 64 cores and each CPU is it's on NUMA node if my memory is correct. So if you want to use more then 64 cores you have to use more then one socket.

How have you configured CPU on the VM the CHR is running on?
by Kindis
Tue Nov 03, 2020 3:06 pm
Forum: Announcements
Topic: v6.46.8 [long-term] is released!
Replies: 38
Views: 16109

Re: v6.46.8 [long-term] is released!

Updated one wAP R and one CRS326-24G-2S+RM all without issues.
by Kindis
Thu Oct 29, 2020 11:22 pm
Forum: Announcements
Topic: v6.47.7 [stable] is released!
Replies: 45
Views: 13926

Re: v6.47.7 [stable] is released!

Is the company going to correct this error? Did you write to support with that problem? This is not a problem of a single device but a stable branch 6.47.X At 6.46.X works correctly 951Ui-2HnD models - cyclic reboot SUP-32199 RB2011UiAS-2HnD - show "ether boot" on LCD Regardless you shoul...
by Kindis
Fri Oct 23, 2020 1:57 pm
Forum: Announcements
Topic: v6.47.6 [stable] is released!
Replies: 39
Views: 9949

Re: v6.47.6 [stable] is released!

The defconf issue is already resolved. Fix will be included in the next RouterOS release. It has been resolved before! I would hope that when such mistakes are made, they are added to the regression testing done before releasing a new version, especially in [stable]. Yes I agree how does this not g...
by Kindis
Wed Oct 21, 2020 2:44 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

If the issue is THAT specific I agree with You, but after all said above, I'm guessing that the Support team is aware what it is and working on fix, but not successful obviously. At least for now. As I stated I do not think there is one issue I think there are multiple. The more cases we pile on to...
by Kindis
Wed Oct 21, 2020 10:57 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

I know it has been said before here but I also think that there is not 1 issue here but several. Might be hardware for some and software for some users. So to fix I think it is important to generate a supout file during the issue and email support@mikrotik.com to get your own case for your issues. O...
by Kindis
Wed Oct 14, 2020 11:04 pm
Forum: General
Topic: Bridge VLAN Filter : not possible to use tagged traffic with VLAN ID = 1
Replies: 10
Views: 897

Re: Bridge VLAN Filter : not possible to use tagged traffic with VLAN ID = 1

I think you are misunderstanding IP on the bridge. This is the vlan that the bridge itself is on. So when you add a IP to the bridge you put that IP on that vlan. View this as the MGMT VLAN. Now according to the example the last thing you do is to set a rule for vlan 1 that is tagged for Bridge but ...
by Kindis
Tue Oct 13, 2020 11:58 am
Forum: General
Topic: RB3011 system error critical
Replies: 5
Views: 552

Re: RB3011 system error critical

As you see the router can you connect using MAC address instead?
by Kindis
Fri Oct 09, 2020 9:35 am
Forum: General
Topic: route cache ? [SOLVED]
Replies: 1
Views: 394

Re: route cache ? [SOLVED]

https://wiki.mikrotik.com/wiki/Manual:IP/Settings

From the Wiki: Disable or enable Linux route cache. Note that by disabling route cache, it will also disable fast path.
by Kindis
Tue Oct 06, 2020 10:39 pm
Forum: General
Topic: XBOX and MikroTik RouterOS v6.47 (stable) NAT | UPDATE: VPN
Replies: 16
Views: 1232

Re: XBOX and MikroTik RouterOS v6.47 (stable) NAT

I said this in DM but I noticed that UPnP is disabled. So test to enable it would be a good start.
Also agreed ports are confusing as hell but hopefully UPnP would solve this.
by Kindis
Tue Oct 06, 2020 2:43 pm
Forum: General
Topic: XBOX and MikroTik RouterOS v6.47 (stable) NAT | UPDATE: VPN
Replies: 16
Views: 1232

Re: XBOX and MikroTik RouterOS v6.47 (stable) NAT

If you run the code in CLI the rules will be placed last and below the drop rules so they will not work. You have to move them so they are above the drop rules which are last.
by Kindis
Tue Oct 06, 2020 2:33 pm
Forum: General
Topic: XBOX and MikroTik RouterOS v6.47 (stable) NAT | UPDATE: VPN
Replies: 16
Views: 1232

Re: XBOX and MikroTik RouterOS v6.47 (stable) NAT

Hello, So the NAT rules should be like this: /ip firewall nat add action=dst-nat chain=dstnat dst-port=3074 in-interface=ether1 protocol=tcp to-addresses=192.168.88.246 add action=dst-nat chain=dstnat dst-port=88,500,3074,3544,4500,5730-5731,5739 in-interface=ether1 protocol=udp to-addresses=192.168...
by Kindis
Tue Oct 06, 2020 1:53 pm
Forum: General
Topic: XBOX and MikroTik RouterOS v6.47 (stable) NAT | UPDATE: VPN
Replies: 16
Views: 1232

Re: XBOX and MikroTik RouterOS v6.47 (stable) NAT

Ok so you can forward and open these port or use UPnP. Now I'm no fan of UPnP but in this case it might be the best option for you. Can you do a export hide-sensitive and paste the output. Could be UPnP that needs tweaking. If not we can help with NAT rules as we can se interface names and so on th...
by Kindis
Tue Oct 06, 2020 1:43 pm
Forum: General
Topic: XBOX and MikroTik RouterOS v6.47 (stable) NAT | UPDATE: VPN
Replies: 16
Views: 1232

Re: XBOX and MikroTik RouterOS v6.47 (stable) NAT

Ok so you can forward and open these port or use UPnP. Now I'm no fan of UPnP but in this case it might be the best option for you. Can you do a export hide-sensitive and paste the output. Could be UPnP that needs tweaking. If not we can help with NAT rules as we can se interface names and so on tha...
by Kindis
Wed Sep 30, 2020 10:08 am
Forum: General
Topic: Is there a router/switch to beat the 4011?
Replies: 21
Views: 2655

Re: Is there a router/switch to beat the 4011?

Thanks all. I have managed to have a sort out and so should be able to fit the IN version in the cabinet. Just one more quick question, would there be a noticeable improvement in general performance leaving the 4011 for routing duties only and adding the separate switch? I have 2 4011 (acting as LA...
by Kindis
Wed Sep 23, 2020 1:02 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

When I said that this is outrageous and miktotik did a horrible job, all users told me I am a troll and mikrotik is the best.... This is more than a 5 months old issue and still no fix. CRS354 sucks big time and mikrotik doesnt give a sh*t about it ! We should ask for refund for this garbage hardwa...
by Kindis
Wed Sep 23, 2020 8:49 am
Forum: General
Topic: Mikrotik RB4011iGS+5HacQ2HnD-IN slow transfer rates
Replies: 13
Views: 1127

Re: Mikrotik RB4011iGS+5HacQ2HnD-IN slow transfer rates

Run this and post the output (and remove public IP addresses if you use those

/export hide-sensitive

Also explain from which port to which port are you copying. If Bridge is correctly configured you should get wire speed.
by Kindis
Mon Sep 21, 2020 3:30 pm
Forum: Announcements
Topic: v6.46.7 [long-term] is released!
Replies: 45
Views: 13492

Re: v6.46.7 [long-term] is released!

I upgraded a new 328-24P-4S+ to this release. When setting a bridge VLAN in Winbox the new window shows a VLAN ID of 4294967295 and 'VLAN IDs' is red (since number is invalid). I change it to the VLAN ID I want and it seems to be fine. It shows this each time I add a new VLAN. I confirmed this happ...
by Kindis
Thu Sep 17, 2020 4:24 pm
Forum: General
Topic: CPU on mikrotik
Replies: 4
Views: 516

Re: CPU on mikrotik

So I do not perhaps understand the question fully but if we compare AMD Epyc and Intel I9 I would say that Intel is better depending on workload. AMD still have more CPU latency due to their architecture and that is most lightly a benefit in network operation but that is also down to load and what y...
by Kindis
Tue Sep 15, 2020 10:38 am
Forum: Announcements
Topic: v6.46.7 [long-term] is released!
Replies: 45
Views: 13492

Re: v6.46.7 [long-term] is released!

Upgraded my home hAP ac^2 and I had a problem that I saw for the first time. It seems like router only preserved 200-something address list entries, and many were gone completely or only partially preserved, breaking access to the router itself and internet access (because I use those as NAT out ad...
by Kindis
Mon Sep 14, 2020 3:01 pm
Forum: General
Topic: CVE-2020-11881 PATCH [SOLVED]
Replies: 16
Views: 2268

Re: CVE-2020-11881 PATCH [SOLVED]

Currently only the long-term version channel (v6.46.7) has all the necessary fixes for this CVE. We are working on getting them published in stable and testing channels as well. Sorry for any inconvenience.
Thanks for the clarification.
by Kindis
Mon Sep 14, 2020 12:51 pm
Forum: General
Topic: CVE-2020-11881 PATCH [SOLVED]
Replies: 16
Views: 2268

Re: CVE-2020-11881 PATCH [SOLVED]

So what has be stumped here is what is vulnerable and what is not. The Github repro says this: Affected Versions(tested) 6.41.3 (long term release) 6.45.8 (long term release) 6.45.9 (long term release) 6.46.4 (stable release) 6.47.2 (stable) 6.47.3 (stable) 7.0beta5 (beta) 7.1beta2 and below So if t...
by Kindis
Fri Sep 11, 2020 8:45 am
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 13671

Re: v6.47.3 [stable] is released!

I've Winbox 3.27 on Wine (ubuntu) and I can't log in to any device after upgrading them to 6.47.3. It stays at "Logging in" and nothing is happening. Of course, devices are accessible by in.ex. SSH but winbox is missing. From windows I still can log in. Trying older winbox didn't work. St...
by Kindis
Thu Sep 10, 2020 1:28 pm
Forum: Announcements
Topic: Expected down time for this forum SEPT 11
Replies: 42
Views: 7208

Re: Expected down time for this forum SEPT 11

Thanks for the hears up but what should I do on my lunch and afternoon break now? ;)
by Kindis
Thu Sep 10, 2020 9:48 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

I have CRS354-48G-4S+2Q+ switch and no traffic problem on ports 1-8. You must add each port to Marvell chip so add "hw=yes" Now I do not have this switch, I have different models, but from what I read this is traffic based. Those that report issues must have hw=yes otherwise they could ne...
by Kindis
Thu Sep 03, 2020 2:28 pm
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 13671

Re: v6.47.3 [stable] is released!

You had the same issues with 6.47.2 if I remember correctly? I wonder if this is more for you setup. I have a couple of these switches and I do not have this problem but I run them on Long-Term. I keep all my switches on this release to not have to patch as often. @Kindis If you read my post proper...
by Kindis
Thu Sep 03, 2020 2:02 pm
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 13671

Re: v6.47.3 [stable] is released!

Switch CRS326-24G-2S+ Software upgrade successful from v6.47.2 TO v6.47.3 but after upgrade no longer able to login using Winbox to upgrade the firmware -- showing the following error message: ERROR could not connect to 192.168.10.88 When using Mac Address to login returns error message: ERROR coul...
by Kindis
Thu Sep 03, 2020 1:59 pm
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 13671

Re: v6.47.3 [stable] is released!

MikroTik is there any chance to add wireguard in v6?
I might be off here but my understanding is that this is a feature in the Linux kernel and version 6 will not upgrade the kernel without major overall I think this will be a V7 feature we have to wait for,
by Kindis
Thu Sep 03, 2020 1:26 pm
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 13671

Re: v6.47.3 [stable] is released!

Can we have more information on CVE-2020-3702 and what it is.
More should I patch now or later type of question.
by Kindis
Wed Sep 02, 2020 11:52 am
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 105
Views: 29405

Re: WinBox v3.27 released!

What's new in v3.27:

*) fixed content drawing of read-only tables (introduced in v3.26);
Many thanks for a super quick response! All my issues are now gone!
by Kindis
Wed Sep 02, 2020 11:14 am
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 105
Views: 29405

Re: WinBox v3.26 released!

In CapsMAN under configuration I cannot configure a country anymore. It only says unknown and there are not options in the drop down list and I do not se anything under Radio. I have cleared the cache and it did not help anything. Note that this might have been true under 3,25 as well. Saw this when...
by Kindis
Wed Sep 02, 2020 10:21 am
Forum: General
Topic: Help need: CCR1072 is randomly rebooting!
Replies: 6
Views: 931

Re: Help need: CCR1072 is randomly rebooting!

So as this is probably not a hardware fault as you swapped the unit out to a new one, I hope you swapped the power supply as well otherwise that could be a problem? The only option I can provide until you get a response from support is to downgrade to long-term and see if this help. Also do you have...
by Kindis
Mon Aug 31, 2020 5:11 pm
Forum: General
Topic: Help need: CCR1072 is randomly rebooting!
Replies: 6
Views: 931

Re: Help need: CCR1072 is randomly rebooting!

What version of ROS are you running?
by Kindis
Mon Aug 31, 2020 5:08 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

Installed beta27
Worked for ~12 hours
Then the problem came again
It works more if there's only a few ports busy or traffic is low
Well that sucks. Have you created a supout during the issues and sent to MT?
by Kindis
Fri Aug 28, 2020 2:45 pm
Forum: Announcements
Topic: WinBox v3.25 released!
Replies: 68
Views: 10046

Re: WinBox v3.25 released!

What's new in v3.25: *) improved window resizing and scaling behavior on systems that include high DPI monitors; YES finally I can have Safe Mode Enabled and not fear that I forget to disable it and trying to close Winbox. Before the prompt if I still would like to close was not formatted correctly...
by Kindis
Fri Aug 28, 2020 9:04 am
Forum: General
Topic: Can't get 10Gb on crs326-24s+2q+rm
Replies: 7
Views: 1185

Re: Can't get 10Gb on crs326-24s+2q+rm

Which release of SWOS are you running? I think 2.12 had issues if you had flow control activated on a port.
Regardless this looks like something you need to e-mail support as other here on the forum can get better speeds that this.
by Kindis
Wed Aug 26, 2020 3:55 pm
Forum: General
Topic: CRS326-24S+2Q 200 MBit/s Maxout
Replies: 6
Views: 816

Re: CRS326-24S+2Q 200 MBit/s Maxout

You should not create any VLAN under interface but only handle the VLANS in the Bridge.

Can you do a full export with hide-sensitive
by Kindis
Tue Aug 25, 2020 6:27 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 114
Views: 11675

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

For me this is a question about support and what is the outfall of an outage. So if it is a Office network and there are some problem with the network is that a large incident or is that an inconvenience? Where I work we have network that we can use MT equipment without issues if we would like to ge...
by Kindis
Tue Aug 25, 2020 5:47 pm
Forum: General
Topic: CRS326-24S+2Q 200 MBit/s Maxout
Replies: 6
Views: 816

Re: CRS326-24S+2Q 200 MBit/s Maxout

So this cannot be the complete config. The picture we see do not correlate to the config you pasted. So even if ports are hardware offloaded conditions must be met. For instance VLAN in this case is not correct and I think this may break the offloading. You need to implement VLAN filtering on the Br...
by Kindis
Mon Aug 24, 2020 3:45 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 71703

Re: v6.48beta [testing] is released!

*) wireless - added support for U-NII-2 for cAP ac; *) wireless - added support for U-NII-2 for wAP ac; Which U-NII-2 ecactly: 2A, 2B or 2C? 5350-5470 MHz is U-NII-2B; 2A and 2C were already supported weren't they? Or do you mean in some specific countries? I was also confused by this but I think t...
by Kindis
Mon Aug 24, 2020 11:08 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

Has the beta solved the issue ? I do not know but if I understood Beta 23 (never went public) where good for some and now that Beta 27 is out I'm interested if people have tested and what the result are. Based on the fact that this thread went silent that can mean that people might have good result...
by Kindis
Mon Aug 24, 2020 10:22 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

So I do not have this switch but how does the new beta work? Based on the silence in this thread it might be better now?
by Kindis
Fri Aug 21, 2020 2:07 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 107667

Re: v7.1beta2 [development] is released!

This level 3 offloading looks very interesting. Do we have any numbers to show what it can mean as this has the potential to put emphasis on the R in CRS :-)
by Kindis
Thu Aug 20, 2020 9:39 pm
Forum: General
Topic: LTE Firmware Update
Replies: 7
Views: 927

Re: LTE Firmware Update

So I have done this a lot of times. What version of ROS are you running. They have made improvements to the update process in newer versions.
by Kindis
Thu Aug 20, 2020 11:14 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

is there some public bug tracker available? where we can track some status? would also be good for their changelogs to reference bug numbers, so everybody knows what they fixed there. O man I would love a bug tracker like MS does with KB articles or also what Cisco is doing. As of now I only know o...
by Kindis
Thu Aug 20, 2020 9:39 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

Did you see that this changelog entry also was in 6.47.1? What's new in 6.47.1 (2020-Jul-08 12:34): *) crs3xx - fixed HW offloading for netPower 15FR and netPower 16P devices (introduced in v6.47); *) crs3xx - fixed increased CPU temperature for CRS354-48G-4S+2Q+ device (introduced in v6.47); *) cr...
by Kindis
Wed Aug 19, 2020 5:25 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

ld more like to read "fixed ethernet port group traffic..." instead of "improved". "Fixed" = Admission that it was broken in the first place = grounds for compensation I wouldn't hold my breath waiting :-) That is somewhat true. Worst changelog I ever read was for a so...
by Kindis
Wed Aug 19, 2020 4:05 pm
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

viewtopic.php?f=21&t=163308&p=811799#p811759
What's new in 6.48beta27 (2020-Aug-18 06:20):

Changes in this release:
*) crs3xx - improved Ethernet port group traffic forwarding for CRS354 devices;
Now all can test :)
by Kindis
Wed Aug 19, 2020 3:08 pm
Forum: Announcements
Topic: v6.47.2 [stable] is released!
Replies: 90
Views: 21148

Re: v6.47.2 [stable] is released!

*) wireless - added support for U-NII-2 for cAP ac; Can someone enlighten me about this one? I have 3 of these and one of them run channel ch54-5270 and this works and this is within U-NII-2 or I'm I just plain stupid after the vacation as my brain has yet to start working, which is most likely the...
by Kindis
Tue Aug 18, 2020 4:28 pm
Forum: General
Topic: Wireless unable to connect to Internet...
Replies: 9
Views: 1436

Re: Wireless unable to connect to Internet...

So do I understand that the phone works great on the same wireless network but a Nintendo Switch does not? I would move away from using internal DNS unless you need it. I would provide the users with "real" DNS servers instead so give them 8.8.8.8 or 1.1.1.1 as primary DNS server and see i...
by Kindis
Tue Aug 18, 2020 10:55 am
Forum: General
Topic: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8
Replies: 304
Views: 53704

Re: CRS354-48P-4S+2Q+ traffic problem on ports 1 to 8

6.48beta12 I still have a problem! Please attach 6.48beta23
E-mail support and you will get access to the version that way. I would never run anything I can download outside official channels.
by Kindis
Mon Aug 17, 2020 3:52 pm
Forum: Wireless Networking
Topic: "No supported channel" in CAPsMAN when using channels 149-165
Replies: 3
Views: 1371

Re: "No supported channel" in CAPsMAN when using channels 149-165

I had the same problem for Sweden. I looked it up and I can run these so something is up with ROS.
I removed the country in CapsMAN and now it works.
by Kindis
Fri Aug 14, 2020 2:54 pm
Forum: General
Topic: RB750Gr3 - ether2: bridge port received packet with own address as source address (c4:ad:34:a1:4d:9d), probably loop
Replies: 8
Views: 2001

Re: RB750Gr3 - ether2: bridge port received packet with own address as source address (c4:ad:34:a1:4d:9d), probably loop

I have had issues with equipment that are connected and redundant for example via LACP and the equipment then builds and internal software switch which links the two sides together and creates a loop. Should not that when this has happen it is 100% my own fault for missconfiguration! Testing one by ...
by Kindis
Fri Aug 14, 2020 11:28 am
Forum: General
Topic: RB750Gr3 - ether2: bridge port received packet with own address as source address (c4:ad:34:a1:4d:9d), probably loop
Replies: 8
Views: 2001

Re: RB750Gr3 - ether2: bridge port received packet with own address as source address (c4:ad:34:a1:4d:9d), probably loop

Must be a loop in the 24 port switch somewhere. Have you checked all equipment attached to this switch?
by Kindis
Thu Aug 13, 2020 9:46 am
Forum: General
Topic: Poor DNS performance under heavy traffic
Replies: 3
Views: 1000

Re: Poor DNS performance under heavy traffic

This is probably not the answer you wanted but I would not run the DNS service on the router. In smaller setups if can make sense but in larger setups like yours I would say two dedicated servers would be the best option. Note that you not need high cost servers for this. In come cases it might even...
by Kindis
Sat Aug 08, 2020 12:42 am
Forum: General
Topic: cant ping 8.8.8.8 from inside microtik behind my router
Replies: 2
Views: 709

Re: cant ping 8.8.8.8 from inside microtik behind my router

Please do a /export hide-sensitive and post output.
by Kindis
Thu Jul 30, 2020 5:30 pm
Forum: General
Topic: cAP Ac wall mounting question [SOLVED]
Replies: 3
Views: 1045

Re: cAP Ac wall mounting question [SOLVED]

Many thanks, you guys are awesome. This picture should be added to the documentation of the unit :-)

PS. With modding I mean brining out the saw and making "none supported alteration to the unit ;-) DS
by Kindis
Thu Jul 30, 2020 1:43 pm
Forum: General
Topic: cAP Ac wall mounting question [SOLVED]
Replies: 3
Views: 1045

cAP Ac wall mounting question [SOLVED]

So I'm interested in buying a few cAP Ac units. I want to walk mount them all but the cable need to run along the wall and all info I can find or pictures shows the cable exiting out of the wall. So simple question is possible without modding the unit to wall mount them with the cable running down t...
by Kindis
Fri Jul 10, 2020 12:07 pm
Forum: Announcements
Topic: v6.47.1 [stable] is released!
Replies: 147
Views: 67167

Re: v6.47.1 [stable] is released!

Great!
But Winbox CRASH DOWN, when Press + under System -> IPsec-> Policies.

Please fix that bug...
Tested this and I have no issues with this so this might be related to your setup.
by Kindis
Tue May 26, 2020 9:06 am
Forum: Virtualization
Topic: CHR Hypervisor recommenadtion please (Hyper V?)
Replies: 8
Views: 2892

Re: CHR Hypervisor recommenadtion please (Hyper V?)

I use to run a CHR on Hyper-V and it worked great. Only issue I had was a crash in a specific build but other then that I had no issues. I however is a user of Hyper-V and like the hypervisor but I think you should run the hypervisor you feel comfortable with and can operate. That will in the end wo...
by Kindis
Mon May 04, 2020 8:55 am
Forum: General
Topic: CCR1036-12g-4s Memory Leak
Replies: 1
Views: 898

Re: CCR1036-12g-4s Memory Leak

My guess is that this will be hard to fix here if it is a mem leak. Take a supout file, when you can se the problem, and send it to support@mikrotik.com and they can have a look at it. If you want someone here to be able to help please run /export hide-sensitive and post the output here after you re...
by Kindis
Tue Apr 21, 2020 9:01 pm
Forum: General
Topic: 802.3ad bond running when link down
Replies: 13
Views: 2930

Re: 802.3ad bond running when link down

So out of pure interest I had to test this :-) So for a test I removed all the cables from a LACP Interface and the bonding itself went down and reported down. So I'm not seeing the same behavior as you do. Try it with a dumb switch in the middle, remember I'm not getting a physical link down. It's...
by Kindis
Tue Apr 21, 2020 2:08 pm
Forum: General
Topic: 802.3ad bond running when link down
Replies: 13
Views: 2930

Re: 802.3ad bond running when link down

So out of pure interest I had to test this :-)

So for a test I removed all the cables from a LACP Interface and the bonding itself went down and reported down. So I'm not seeing the same behavior as you do.
by Kindis
Mon Apr 20, 2020 5:30 pm
Forum: General
Topic: 802.3ad bond running when link down
Replies: 13
Views: 2930

Re: 802.3ad bond running when link down

I don't think your LACP works at all, since you have not specified a primary Link... Whats the point of 802.3ad if you just add only one member? It's totally wrong to me... Yes this and also what does Link is broken mean and what is your expected behavior. I use LACP for redundancy on a hardware le...
by Kindis
Wed Apr 15, 2020 11:03 am
Forum: General
Topic: Security Vulnerabilities
Replies: 13
Views: 3437

Re: Security Vulnerabilities

From what I can see in the security landscape bugs that cause a crash in a important process like console or similar is often targeted for RCE. This can not always be used and you have to look at the ease of use. What is more of an issue now is the used of chained attacks. You can now find reported ...
by Kindis
Wed Apr 15, 2020 10:05 am
Forum: General
Topic: Security Vulnerabilities
Replies: 13
Views: 3437

Re: Security Vulnerabilities

Personally "authenticated user can do x" (meaning administrator) is complete nonsense. So I personally do not agree with this. What we see in term of security now is that one flaw that can allow for RCE or Elevation of privileges can be used in chains to attack a target. A vulnerability o...
by Kindis
Fri Apr 10, 2020 11:28 am
Forum: General
Topic: RB3011 - low routing performance with low CPU usage?
Replies: 7
Views: 2637

Re: RB3011 - low routing performance with low CPU usage?

This sound like a case for support@mikrotik.com and a supout file when you have the issue.
by Kindis
Wed Apr 08, 2020 2:39 pm
Forum: General
Topic: RB3011 - low routing performance with low CPU usage?
Replies: 7
Views: 2637

Re: RB3011 - low routing performance with low CPU usage?

This looks relay strange. Even I do not full get what you have done it should not behave like this and as you say the CPU does not seam to be be bottleneck. So most CCR routers do not have a switch chip in them. I wonder if your port layout or something else is causing this issue. Having a look at t...
by Kindis
Wed Apr 01, 2020 3:53 pm
Forum: General
Topic: [R11e-LTE6] - CANNOT upgrade LTE firmware [SOLVED]
Replies: 6
Views: 5357

Re: [R11e-LTE6] - CANNOT upgrade LTE firmware [SOLVED]

What happens if you run the same command but without update=yes This so you see if you need the firmware. I got a similar issues on an wAP-R that has the "R11e-LTE" card. Do not remeber the all of the error message but I know I got TIme-Out and in my case it was two issues. I did not have ...
by Kindis
Thu Mar 26, 2020 10:06 pm
Forum: Virtualization
Topic: CHR problem in Windows Server Hyper-V
Replies: 3
Views: 2664

Re: CHR problem in Windows Server Hyper-V

So I wonder if you have issues with Mac address protection. Check so you do not have this on for the cards.
Also in regards to VLAN etc read this one.
viewtopic.php?f=15&t=105465
by Kindis
Wed Mar 25, 2020 11:11 pm
Forum: General
Topic: WinBox Connection error
Replies: 6
Views: 27672

Re: WinBox Connection error

So I wonder if the new secure winbox connection cannot handle NAT. Was setting up a new router that I pre configured but managed to frogg up the OSPF config on the new one. GRE connected but I had to NAT my connection to get route back and Winbox did not want to connect with legacy mode on or off. U...
by Kindis
Thu Mar 12, 2020 10:49 am
Forum: Announcements
Topic: Winbox v3.22 released!
Replies: 117
Views: 58281

Re: Winbox v3.22 released!

All the issues I had with scaling is now gone as far as I know BUT i noticed something before. I run a 2 monitor setup with one 4K (laptop) and the other 1440 (external screen). If I had the problem where I could not read the logs on either screens dragging the winbox window from one screen to the o...
by Kindis
Mon Mar 09, 2020 9:40 am
Forum: General
Topic: Can i recover my RB3011UiAS-RM ?
Replies: 2
Views: 1884

Re: Can i recover my RB3011UiAS-RM ?

I guess i should Trash-Can it?

Thank you..
No I don't think you have to do that. You should try Netinstall and reinstall the OS on the router. Google around there are briliant guides out there how to use Netinstall.
by Kindis
Tue Mar 03, 2020 12:35 am
Forum: General
Topic: not enouth disk space
Replies: 8
Views: 2743

Re: not enouth disk space

Yes. You should allocate at least 2GB if you plan to run the Dude as a trial. If you have a more extensive requirement for the Dude you need to plan ahead. I remember, and I might be wrong, that they have limited the boot drive to 1 GB. I have not tested but think I remember reading this a changelo...
by Kindis
Mon Mar 02, 2020 11:28 pm
Forum: General
Topic: not enouth disk space
Replies: 8
Views: 2743

Re: not enouth disk space

Yes. You should allocate at least 2GB if you plan to run the Dude as a trial. If you have a more extensive requirement for the Dude you need to plan ahead. I remember, and I might be wrong, that they have limited the boot drive to 1 GB. I have not tested but think I remember reading this a changelo...
by Kindis
Thu Feb 20, 2020 3:26 pm
Forum: General
Topic: RB2011UiAS looses about 40 megabits of thgougpput!?!
Replies: 49
Views: 8411

Re: RB2011UiAS looses about 40 megabits of thgougpput!?!

Are you sure that you have 1000Mbit link on ETH1 (and on the port you connect your speedtest-running PC on) ? Your configuration sets port 1-5 (the gigabit ports) to SPEED=100M . The other ports (ETH6-10) is 100Mbit only on the RB2011. 100% sure about link, also for PC. 100mbit is weird a bit, but ...
by Kindis
Thu Feb 20, 2020 3:10 pm
Forum: General
Topic: RB2011UiAS looses about 40 megabits of thgougpput!?!
Replies: 49
Views: 8411

Re: RB2011UiAS looses about 40 megabits of thgougpput!?!

Are you sure that you have 1000Mbit link on ETH1 (and on the port you connect your speedtest-running PC on) ? Your configuration sets port 1-5 (the gigabit ports) to SPEED=100M . The other ports (ETH6-10) is 100Mbit only on the RB2011. This one has fooled me many times before. This is a export of t...
by Kindis
Thu Feb 20, 2020 10:44 am
Forum: General
Topic: Chromecast sleepmode issue
Replies: 25
Views: 5199

Re: Chromecast sleepmode issue

What is the lease time on DHCP addresses? I have two Xbox One's that connect via swicthes (none MT units) to my core router (4011) and I had issues that if the Xbox one was in standby mode for more then the lease time I could not turn if on by using the app from my phone or see that it had renewed i...
by Kindis
Thu Feb 20, 2020 10:18 am
Forum: General
Topic: RB2011UiAS looses about 40 megabits of thgougpput!?!
Replies: 49
Views: 8411

Re: RB2011UiAS looses about 40 megabits of thgougpput!?!

When you test what is the status of the CPU?

I see you have a few mangle rules. Did you create those and can you disable those for a test?
by Kindis
Tue Feb 18, 2020 11:21 am
Forum: General
Topic: Can't Upgrade Firmware
Replies: 8
Views: 3190

Re: Can't Upgrade Firmware

Oo this is a big update and also the version you have have several security issues that are more or less very critical. I would go for a export of configuration and perform a Netinstall but otherwise do as mentioned above. You will also get the new bridge setup and a lot of other features so as I sa...
by Kindis
Tue Feb 18, 2020 9:10 am
Forum: General
Topic: RB2011UiAS looses about 40 megabits of thgougpput!?!
Replies: 49
Views: 8411

Re: RB2011UiAS looses about 40 megabits of thgougpput!?!

This can be many thing.

Run this and post the config
export hide-sensitive
by Kindis
Mon Feb 17, 2020 5:17 pm
Forum: General
Topic: No more than 160 Mbps in a 600 Mbps with RouterBOARD 2011UiAS-2HnD
Replies: 6
Views: 2343

Re: No more than 160 Mbps in a 600 Mbps with RouterBOARD 2011UiAS-2HnD

So if I read your config correctly you only have Firewall filter rules based on Established, Related and nothing on New. Never seen this before but I can see that you have Fast-Track rules as well but they are at the bottom of you rules so they never apply so you are in effect not using Fast-Track. ...
by Kindis
Mon Feb 17, 2020 5:07 pm
Forum: General
Topic: Can't Upgrade Firmware
Replies: 8
Views: 3190

Re: Can't Upgrade Firmware

Based on you old firmware you must also have a old and vulnerable ROS. First update ROS System > Packages >> Check for Update and upgrade. Now this can be somewhat of a risky business depending on what version you are on so make a backup and export config before doing this! After you have upgraded R...
by Kindis
Thu Feb 06, 2020 11:19 am
Forum: General
Topic: CVE-2019-3981
Replies: 8
Views: 1896

Re: CVE-2019-3981

I think it is important to get all the info and not just waft it away and say No this is an old thing so do not worry. It all boils down to risk management and how this could effect someone. By being silent on the issue Mikrotik only manages to look bad if you ask me. Much better to release informat...
by Kindis
Wed Feb 05, 2020 12:10 pm
Forum: General
Topic: CVE-2019-3981
Replies: 8
Views: 1896

Re: CVE-2019-3981

Now from what I can see this is a man in the middle attack that is not solved. Article mentions Winbox 3.20 which is the latest and ROS 6.43 which is old but you can read the following from Tenable Disclosure Timeline 10/15/2019 - Tenable discloses. 90 day is Jan. 14, 2020. 10/17/2019 - MikroTik ack...
by Kindis
Thu Jan 16, 2020 4:02 pm
Forum: Announcements
Topic: v6.46.2 [stable] is released!
Replies: 121
Views: 40291

Re: v6.46.2 [stable] is released!

*) security - fixed vulnerability for routers with default password (limited to Wireless Wire), admin could login on startup with empty password before default configuration script was fully loaded;
Don't forget to update the Security blog. During writing this the blog has not been updated.
by Kindis
Thu Dec 19, 2019 4:27 pm
Forum: General
Topic: wAP R 3g? (RBwAPR-2nD)
Replies: 15
Views: 2411

Re: wAP R 3g? (RBwAPR-2nD)

@Kindis https://forum.mikrotik.com/viewtopic.php?t=146857 Please post at this thread. Be sure your have firmware v13 /interface lte firmware-upgrade lte1 I'm already on the latest firmware. This is really not a issue for me as I can use LTE but as I tested I did not manage to get 3G to work. I migh...
by Kindis
Thu Dec 19, 2019 10:07 am
Forum: General
Topic: wAP R 3g? (RBwAPR-2nD)
Replies: 15
Views: 2411

Re: wAP R 3g? (RBwAPR-2nD)

OK I had to test this myself as I know I have both LTE and 3G coverage where the router is located and I cannot connect to 3G. Now I have not waited for a long time but in the logs I can see it connect then I get this error: 09:03:35 lte,debug I_WAN: network access technology: 3G HSDPS & HSUPA 0...
by Kindis
Wed Dec 18, 2019 8:44 pm
Forum: General
Topic: wAP R 3g? (RBwAPR-2nD)
Replies: 15
Views: 2411

Re: wAP R 3g? (RBwAPR-2nD)

I have a wAP LTE with the same modem. My modem is running "MikroTik_CP_2.160.000_v013" as the modem firmware and ROS is 6.46.1 I have a option under LTE and Network Mode. There I can select GSM, 3G or LTE. Now I do not have a issues with LTE where this device is placed so I have never test...
by Kindis
Wed Dec 18, 2019 9:40 am
Forum: Announcements
Topic: v6.46.1 [stable] is released!
Replies: 72
Views: 42427

Re: v6.46.1 [stable] is released!

Delete
by Kindis
Wed Dec 18, 2019 8:51 am
Forum: Announcements
Topic: v6.46.1 [stable] is released!
Replies: 72
Views: 42427

Re: v6.46.1 [stable] is released!

This announcement does not show up under General or other sub "channels". It only shows up under Announcement. Can we make it visible in all parts of the forum?
Edit: Fixed, thanks who ever fixed it! :-)
by Kindis
Mon Nov 25, 2019 11:36 pm
Forum: General
Topic: MikroTik LtAP mini R11e-LTE GSM connection issue
Replies: 4
Views: 1178

Re: MikroTik LtAP mini R11e-LTE GSM connection issue

Have you tested to update the LTE modem firmware?
by Kindis
Tue Nov 12, 2019 11:33 pm
Forum: General
Topic: RouterOS Graphs Wrong after CCR-1036 Replaced
Replies: 4
Views: 1102

Re: RouterOS Graphs Wrong after CCR-1036 Replaced

As far as I know using backup file is only supported on the same device. So if you are to move config export / import is what you must use. Don't really know what can go wrong with using a backup file but I think it will replace stuff like Mac address and use the old one etc. Guessing this is what c...
by Kindis
Wed Nov 06, 2019 6:17 am
Forum: General
Topic: RB3011 L2TP + IPSec 'kernel failure in previous boot' due to hardware encryption?
Replies: 12
Views: 2894

Re: RB3011 L2TP + IPSec 'kernel failure in previous boot' due to hardware encryption?

I have a lot of both GRE + IPSec and L2TP +IPSec and I do not have this issue. I use SHA256 + AES 256 in all proposals for IPSec and I have not seen this issue. Most of the tunnels do not have heavy traffic but one that push backup data off site using GRE.
What proposal do you have for the tunnel?
by Kindis
Tue Oct 29, 2019 10:44 am
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 48783

Re: v6.45.7 [stable] is released!

Updated 4011, 3011, wAP AC, RB750gr3 and hAP AC2 without issues.
by Kindis
Thu Oct 17, 2019 11:24 am
Forum: General
Topic: Is there an new exploit going around?
Replies: 57
Views: 17806

Re: Is there an new exploit going around?

Had a look into my logs as I log every connection to port 22 and 23 and blocks those IP's for 30 days. I see a increase in blocked addresses but both for port 22 and 23 with port 23 dominating in the logs. In general management ports like SSH and Winbox should not be open to internet by default. Add...
by Kindis
Sat Oct 12, 2019 10:53 pm
Forum: General
Topic: Can't delete Dude files on CHR
Replies: 6
Views: 2048

Re: Can't delete Dude files on CHR

Just extend the disk to 1GB. During start it will extend the filesystem.
by Kindis
Fri Sep 20, 2019 8:40 am
Forum: Announcements
Topic: v6.45.6 [stable] is released!
Replies: 59
Views: 47538

Re: v6.45.6 [stable] is released!

Update when smooth, but NAT rules no longer work.
Is that not like saying "The surgery went well but he died"? :-)
At least for me no NAT rules would mean the update did not go well.
by Kindis
Wed Aug 21, 2019 12:01 am
Forum: General
Topic: Slow Gbit speed with Mikrotik hex S
Replies: 15
Views: 4815

Re: Slow Gbit speed with Mikrotik hex S

Post your config so we can have a look.
by Kindis
Thu Aug 01, 2019 8:45 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 60258

Re: v6.45.2 [stable] is released!

/system package update check-for-updates
channel: stable
installed-version: 6.45.2
latest-version: 6.45.2
status: System is already up to date

The 6.45.3 is not available yet!
You can download via the download page.
https://mikrotik.com/download
by Kindis
Thu Aug 01, 2019 8:43 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 60258

Re: v6.45.2 [stable] is released!

@CrimzinZA You have 3 things to check 😁
ROS version, MT firmware and modem firmware.
Upgrading modem firmware solved my 4G issues.

Here is how to update modem firmware https://wiki.mikrotik.com/wiki/Manual:I ... re_upgrade
by Kindis
Thu Aug 01, 2019 5:17 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 60258

Re: v6.45.2 [stable] is released!

What version of ROS are you running? Also have you updated the modem firmware. I had big issues getting 4G to run on my unit until I upgraded modem firmware.
by Kindis
Fri Jul 19, 2019 1:55 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 60258

Re: v6.45.2 [stable] is released!

RouterOS version 6.45.2 has been released in public "stable" channel! *) wireless - improved 802.11ac stability for all ARM devices with wireless; Did I miss something? What was going wrong with cAP ac before this? Can you please give some details, please? Also, will it be backported to l...
by Kindis
Mon Jul 01, 2019 10:32 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 143586

Re: v6.45.1 [stable] is released!

Wow 9 CVE fixed! Very nice will try this one on the test systems asap!
by Kindis
Wed May 29, 2019 1:40 pm
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 50586

Re: v6.44.3 [stable] is released!

We are trying to upgrade to 6.44.3 from 6.29. I can download the file and it is in the files window. It will not install. I have tried to reboot 5 or 6 times and still nothing. Any advice? That is not advisable! You have not updated for so many years that it cannot be expected to be a smooth proces...
by Kindis
Fri May 24, 2019 2:36 pm
Forum: General
Topic: cpu 100% internet disconnections
Replies: 3
Views: 994

Re: cpu 100% internet disconnections

Hello, Since v6.43.4 a lot has happen and also some CVE has been fixed. If you are on Stable release I would start with changing to Long-Term Release and upgrade to 6.43.16 If the issue still continues I would export config, read though so there is nothing strange in the config (you have been hacked...
by Kindis
Tue Apr 30, 2019 1:20 am
Forum: Virtualization
Topic: Why is there not a CHR ISO for bare metal ?
Replies: 5
Views: 3891

Re: Why is there not a CHR ISO for bare metal ?

Please note that I said support and not work. The drivers are most lightly there but in term of support for MT it is a huge difference. Granted that hypervisors can cost but there are cheaper and even free hypervisors out there. Hyper-V is free and has max vcpu per guest of 64. For raw performance w...
by Kindis
Thu Apr 25, 2019 2:42 pm
Forum: Virtualization
Topic: Why is there not a CHR ISO for bare metal ?
Replies: 5
Views: 3891

Re: Why is there not a CHR ISO for bare metal ?

CHR is a virtual appliance where MT can deliver a product to a plattform they know. They only have to deal with drivers from each hypervisor and hardware drivers are maintained by the hypervisor. This makes the support much much easier to handle as the number of scenarios for drivers is limited. So ...
by Kindis
Tue Mar 26, 2019 2:47 pm
Forum: General
Topic: wAP AC reaching out to 159.148.172.226:80 every hour
Replies: 11
Views: 2337

Re: wAP AC reaching out to 159.148.172.226:80 every hour

My guess is that the router check if there are any new versions available.
I have noted that if I use the Mikrotik app on Android I see on the "login page" if there is a update available on some units before I check manually.
But this is a guess of mine.
by Kindis
Sun Mar 24, 2019 9:44 am
Forum: Announcements
Topic: v6.43.13 [long-term] is released!
Replies: 44
Views: 19513

Re: v6.43.13 [long-term] is released!

The fast connection of winbox was part of a release where they improved and secured the connection. Might have been 6.43 release. I do not remember but I do remember a lot of happy people talking about how quick it is now 😊
So the connection of both faster and more secure now.
by Kindis
Sat Mar 23, 2019 5:56 pm
Forum: General
Topic: Endless ISAKMP-SA established/ deleted (RouterOS <-> FritzOS 7.01)
Replies: 15
Views: 9203

Re: Endless ISAKMP-SA established/ISAKMP-SA deleted

What is the lifetime of the key in the proposal? On both units.
by Kindis
Fri Mar 22, 2019 9:10 am
Forum: General
Topic: Cloud Backup
Replies: 21
Views: 7895

Re: Cloud Backup

Kindis could you share your email backup script please? Yes here they are. I have switched from E-mail backups to FTP. So now all routers upload to a FTP server that then send the backup offsite. The reason is that the ISP I have thinks the backup generated e-mail where a sign that my SMTP account ...
by Kindis
Thu Mar 21, 2019 5:39 pm
Forum: General
Topic: VRRP instability, flapping
Replies: 9
Views: 2964

Re: VRRP instability, flapping

Removed
Read this on a phone and missread your config so my advice is useless 😁
by Kindis
Mon Mar 11, 2019 8:54 am
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 2410

Re: Ring hardware and Mikrotik [SOLVED]

I'm using CAPSMAN and set Group-key-update to 01:00:00 and have had no luck with 2 doorbells. aes and WAP WPA2 on with now a shorter 8 character password. No issues connecting with any other device. Anyone else have experience? The device says has a problem connecting to the Internet. Seems like it...
by Kindis
Mon Mar 11, 2019 8:46 am
Forum: General
Topic: BUG – v.6.44 on ARM boxes RB3011 is losing IPSEC configuration
Replies: 7
Views: 2079

Re: BUG – v.6.44 on ARM boxes RB3011 is losing IPSEC configuration

I have a relatively complex IPsec configuration (tunnels to five end-points, running on three different non-Mikrotik platforms, both IPv4 and IPv6, plus an L2TP-over-IPsec dial-in VPN which I configuration in pieces using the IPsec menus directly rather than the "IPsec secret" option on t...
by Kindis
Fri Mar 08, 2019 3:34 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 62816

Re: v6.44 [stable] is released!

Maybe its time for UK to change to EU plug. Ahh, I did forget UK goes out of EU :) I have travel around the world and UK plug is one the ugliest and largest plug out there.... I live in Sweden but I must say the UK plug is one of the bulkiest to work work with it is also one if the smartest with fu...
by Kindis
Fri Mar 08, 2019 10:54 am
Forum: General
Topic: Cloud Backup
Replies: 21
Views: 7895

Re: Cloud Backup

The only time I needed a backup was when a device was broken. That does not work in the case? I am currently using a script for the backup. Back is for restore on the same device. If you restore a backup file on a different unit it will rewrite some configuration that might create issues for you. I...
by Kindis
Mon Mar 04, 2019 7:19 pm
Forum: General
Topic: ROS 6.44 - VPN L2TP not working
Replies: 28
Views: 18217

Re: ROS 6.44 - VPN L2TP not working

After upgrade from ROS 6.43.12 to 6.44 - I have lost possibility co connect to my MT with L2TP (with preshared key) VPN. I was changing firewall settings, trying other.... but after downgrade to 6.43.12 - IT WORKS AGAIN. So something is BAD with ROS 6.44 and L2TP VPN ! MikroTik team - please repir ...
by Kindis
Wed Feb 27, 2019 1:19 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 62816

Re: v6.44 [stable] is released!

I have now updated two wAP AC, One 493G, Two CHR's, one 4011 and two 3011. One 3011 hold several GRE tunnels with IPSec and no issues after upgrade. Endpoints to where GRE tunnels are connecting are still on 6.43.12 so no issues between versions either.
Great job MT!
by Kindis
Tue Feb 26, 2019 10:45 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 62816

Re: v6.44 [stable] is released!

Deleted as question was answered above
by Kindis
Mon Feb 18, 2019 3:04 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 23234

Re: v6.43.12 [stable] is released!

Hello, I've got IPSec problem after upgrading to v6.43.12. I use RB1100 devices, with IPSec vpn. The ipsec peers are configured in the IP->IPSec->Peers menu. The peer profile is sha512/aes256/modp8192 in both side, and the auth method is rsa signature. After upgrading to 6.43.12 in the log I see th...
by Kindis
Mon Feb 18, 2019 1:45 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 23234

Re: v6.43.12 [stable] is released!

Hello, I've got IPSec problem after upgrading to v6.43.12. I use RB1100 devices, with IPSec vpn. The ipsec peers are configured in the IP->IPSec->Peers menu. The peer profile is sha512/aes256/modp8192 in both side, and the auth method is rsa signature. After upgrading to 6.43.12 in the log I see th...
by Kindis
Wed Feb 13, 2019 11:25 am
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 2410

Re: Ring hardware and Mikrotik [SOLVED]

Hello, Group key did the trick for the Chime! I tried this before but then I had a 20 characters long and that did not work! Now I have 8 and set the group key to 1 hours and it works like a charm, well at least for 10 min now! :-) What is the recommended group key update interval. I have always jus...
by Kindis
Tue Feb 12, 2019 3:14 pm
Forum: General
Topic: Ring hardware and Mikrotik [SOLVED]
Replies: 6
Views: 2410

Ring hardware and Mikrotik [SOLVED]

Hello, Just bought a Ring Doorbell 2 and a Ring Chime and I'm having a very hard time getting it to work on my wAP AC devices. The Doorbell connects but had a lot of issues connecting an loosing connection all the time. The Chime on the other hand do not connect at all. I get unicast key exchange ti...
by Kindis
Mon Feb 11, 2019 9:23 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 23234

Re: v6.43.12 [stable] is released!

Updated two 3011, one 4011, one 493G, two CHR and two wAP AC and all went fine.
Updated from 6.43.11
by Kindis
Wed Feb 06, 2019 9:42 pm
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 24286

Re: v6.43.11 [stable] is released!

After upgrading my RB3011, one of the CPUs peeks at 100% all the time (switches back and forth between CPUs). Anyone else with the same problem?
No both of mine are just fine. Have you updated firmware and rebooted a second time?
by Kindis
Tue Jan 29, 2019 12:22 am
Forum: General
Topic: Tunnel which generates least traffic when IDLE
Replies: 13
Views: 2773

Re: Tunnel which generates least traffic when IDLE

I have to add that only one side has a fixed IP, so GRE won't work. Thank you anyway...
I have dynamic IP on both sides and still use GRE. I have a script that checks every 5 min if my IP has changed and If so changes my IP on the GRE interface. Works like a charm.
by Kindis
Mon Jan 28, 2019 3:26 pm
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 1160

Re: wAP LTE in Sweden

Thanks everyone for your input! I will give wAP LTE a try and see what it provides!
by Kindis
Tue Jan 22, 2019 11:08 am
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 1160

Re: wAP LTE in Sweden

I have deployed them only in rural areas here in Finland. The problem is that we have three operators and on band 20 (800MHz) the channel width is only 5MHz (or was it 10MHz?) Anyways the net result is around 20Mbps throughput. I have also used directional 14dBi antennas (yes, I have been asked to ...
by Kindis
Mon Jan 21, 2019 3:27 pm
Forum: Wireless Networking
Topic: wAP LTE in Sweden
Replies: 5
Views: 1160

wAP LTE in Sweden

Hello, Anyone on this forum that have experience using wAP LTE (RBwAPR-2nD&R11e-LTE) in Sweden? If so how was your experience using it and what kind of speed are you getting? Thinking about getting one to add redundancy to my network in case of ISP failure but I would like to know how it works i...
by Kindis
Fri Jan 11, 2019 3:38 pm
Forum: General
Topic: CCR1036-8G-2S+with HIGH CPU load
Replies: 9
Views: 1880

Re: CCR1036-8G-2S+with HIGH CPU load

Could it we scheduled script. They run in the management process if I remember correctly.
by Kindis
Tue Jan 08, 2019 9:17 pm
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 3366

Re: fast track not work

Not really sure what you want to do but FastTrack is to offload the CPU and bypass firewall etc of the device and it requires hardware support and CHR cannot handle that. Can you describe what you want to do in more details because FastTrack should not be needed from my point of view. I have a serv...
by Kindis
Tue Jan 08, 2019 4:52 pm
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 3366

Re: fast track not work

Not really sure what you want to do but FastTrack is to offload the CPU and bypass firewall etc of the device and it requires hardware support and CHR cannot handle that.

Can you describe what you want to do in more details because FastTrack should not be needed from my point of view.
by Kindis
Tue Jan 08, 2019 10:48 am
Forum: Virtualization
Topic: fast track not work
Replies: 6
Views: 3366

Re: fast track not work

No fasttrack does not work on CHR.
by Kindis
Tue Dec 25, 2018 12:06 am
Forum: General
Topic: slow file transfer rates between vlans on RB750Gr3 6.43.7
Replies: 13
Views: 2322

Re: slow file transfer rates between vlans on RB750Gr3 6.43.7

I do not have fast track on a 750Gr3 and are able to transfer 250Mbps. OP does only get 23Mbps,so its not only fast track.
But he said MB not Mbit
by Kindis
Mon Dec 24, 2018 9:34 am
Forum: General
Topic: slow file transfer rates between vlans on RB750Gr3 6.43.7
Replies: 13
Views: 2322

Re: slow file transfer rates between vlans on RB750Gr3 6.43.7

I don't think this is a VLAN issue. My guess is that if you look at profile when you would see that firewall holds the CPU. Add fasttrack and this problem should go away. Add this rule before/above your "Accept established,related" add action=fasttrack-connection chain=forward comment=&quo...
by Kindis
Thu Dec 06, 2018 3:45 pm
Forum: Announcements
Topic: URGENT security reminder
Replies: 86
Views: 50378

Re: URGENT security reminder

No, major misunderstanding :D

Not "it will be fixed in v7", but "It can only be fixed in v7".
So sorry but I could not just contain myself ;-) Not that I'm missing V7 I just follow the forum :-)
by Kindis
Thu Dec 06, 2018 3:40 pm
Forum: Announcements
Topic: URGENT security reminder
Replies: 86
Views: 50378

Re: URGENT security reminder

This sums up how I think ROS 7 is communicated! :-)
Image
by Kindis
Thu Nov 22, 2018 4:20 pm
Forum: General
Topic: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of RouterOS
Replies: 6
Views: 3064

Re: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of Router

@eider Thank you for your post. "In newer version password is no longer stored as plain-text so it can not be used to encrypt backup file without user explicitly providing password." In the newer version, Does it mean that the user password of RouterOS is not used by default for the encry...
by Kindis
Thu Nov 22, 2018 11:46 am
Forum: Virtualization
Topic: CHR disk size
Replies: 6
Views: 4019

Re: CHR disk size

Hi! Setup CHR in my VPS. HDD space 50GB. After first boot - router os resize disk, remains 15GB.. Where is the rest of the disk space? Had a vague memory that they limited the size of CHR disk in a release so I made a search in the change logs and I found the following: What's new in v6.40 (2017-Ju...
by Kindis
Tue Nov 20, 2018 7:43 pm
Forum: General
Topic: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of RouterOS
Replies: 6
Views: 3064

Re: Configuration backup encrypted with default password in RouterOS v6.43.4 does not work like other versions of Router

Could be this.

What's new in 6.43 (2018-Sep-06 12:44):

MAJOR CHANGES IN v6.43:
----------------------
!) backup - do not encrypt backup file unless password is provided;
by Kindis
Tue Nov 20, 2018 9:31 am
Forum: General
Topic: hAP AC - slow eth speed to INET
Replies: 2
Views: 903

Re: hAP AC - slow eth speed to INET

I have not seen this issue in any of my setups but you should consider adding more safety to your setup. Right now you do not drop everything new to efter1 which is you WAN port. I woudl recommend that you do the following: /ip firewall filter add action=fasttrack-connection chain=forward connection...
by Kindis
Fri Nov 09, 2018 11:10 am
Forum: Virtualization
Topic: CHR Performance issues Hyper-V
Replies: 3
Views: 3610

Re: CHR Performance issues Hyper-V

What license do you have on the CHR?
by Kindis
Thu Nov 01, 2018 3:25 pm
Forum: General
Topic: Network Printer on the two Subnets
Replies: 2
Views: 1273

Re: Network Printer on the two Subnets

I had a similar issue as you. I have my printer, and other devices I do not trust, on a separate subnet at home. Now the client my wife gets from her local IT at work have just started a automatic VPN tunnel that uses forced tunneling. This means she cannot use our printer at all as 0.0.0.0/0 point ...
by Kindis
Tue Oct 30, 2018 11:52 pm
Forum: General
Topic: Strange loop on update from 6.37.3 to 6.43.4
Replies: 5
Views: 1347

Re: Strange loop on update from 6.37.3 to 6.43.4

6.37 is vulnerable to a couple of exploits and you may have been compromised.
Export config, review config for any strange scripts and so, netinstall the device and import config. Just to be safe.
by Kindis
Tue Oct 30, 2018 5:34 pm
Forum: General
Topic: A bit confused about RB750 Gr3 IPSec
Replies: 5
Views: 1219

Re: A bit confused about RB750 Gr3 IPSec

You cannot see the H under installed SA in winbox (bug) [..] Are you sure that Hardware AEAD is greyed out in SA detail screen status bar? Otherwise you can see H flag by enlarging the first grid column. Jesus Christ I use Excel to much. I'm so use to dubbel clicking on the column separator that it...
by Kindis
Tue Oct 30, 2018 9:50 am
Forum: General
Topic: A bit confused about RB750 Gr3 IPSec
Replies: 5
Views: 1219

Re: A bit confused about RB750 Gr3 IPSec

I have one RB750Gr3 connecting to a 3011 using L2TP/IPSec and it uses SHA256 and aes-256-cbc. You cannot see the H under installed SA in winbox (bug) but if you use console or webfig I can see that the hardware offload is working. I have a 100 Mbit connection to it and I can easily push that connect...
by Kindis
Thu Oct 25, 2018 4:18 pm
Forum: General
Topic: Redirect request by source IP in a scenario with Server Microsoft (DC)
Replies: 3
Views: 879

Re: Redirect request by source IP in a scenario with Server Microsoft (DC)

No you cannot do that as far as I know on a DC. In this case your best bet is to add a other DNS server that can perform what you want and redirect all clients to this DNS. Make sure DNS for the domain works aswell. Maby a tiny Linux server with BIND could allow you to do what you want? You also get...
by Kindis
Sat Oct 13, 2018 9:24 am
Forum: General
Topic: Severe Performance Drop RB3011 [SOLVED]
Replies: 33
Views: 4658

Re: Severe Performance Drop RB3011 [SOLVED]

I have a 3011 and do not have this issue. Can you export your mangle rule? I can see if I can test it.
by Kindis
Wed Sep 19, 2018 2:57 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 59064

Re: v6.43.1 [stable] is released!

Yesterday upgraded two CCRs from 6.41.3 to 6.43.1 in the hotel I had vacation in Greece :) At least, now it's not vulnerable to WinBox user database reading xD Unfortunately, WinBox access is still allowed for every Free WiFi user in the hotel :( Feel free to add a new title to you business card &q...
by Kindis
Tue Sep 18, 2018 12:38 pm
Forum: Virtualization
Topic: Mikrotik CHR always rebooted at certain time (No irq hander)
Replies: 5
Views: 3534

Re: Mikrotik CHR always rebooted at certain time (No irq hander)

We both have the same version of Windows server but I'm on .18970 but I have not had any issues with this on any lower build anyway. So the CHR build in it self should not be the issue. Are you running any other VM in the Hyper-V and do they have any issues? This is a tricky one but I would start w...
by Kindis
Sat Sep 15, 2018 11:01 am
Forum: Virtualization
Topic: Mikrotik CHR always rebooted at certain time (No irq hander)
Replies: 5
Views: 3534

Re: Mikrotik CHR always rebooted at certain time (No irq hander)

We both have the same version of Windows server but I'm on .18970 but I have not had any issues with this on any lower build anyway. So the CHR build in it self should not be the issue. Are you running any other VM in the Hyper-V and do they have any issues? This is a tricky one but I would start wi...
by Kindis
Sat Sep 15, 2018 10:51 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 44884

Re: v6.43 [current] is released!

I'm very happy with this build I must say. Must be the best .0 build ever provided. Been running it since launch and a lot of things are better. OSPF is faster for some reason but it may come down to the huge improvements to CHR under Hyper-V. Granted I do not have a advanced environment and do not ...
by Kindis
Fri Sep 14, 2018 12:01 am
Forum: Virtualization
Topic: The CPU has been disabled by the guest operating system
Replies: 32
Views: 12629

Re: The CPU has been disabled by the guest operating system

Many do this and send to mikrotik. So they can troubleshoot.

https://kb.vmware.com/articleview?docid=2000542
by Kindis
Thu Sep 13, 2018 11:55 pm
Forum: Virtualization
Topic: Mikrotik CHR always rebooted at certain time (No irq hander)
Replies: 5
Views: 3534

Re: Mikrotik CHR always rebooted at certain time (No irq hander)

What version of Ros are you using and also which version of hyper-v?
by Kindis
Mon Sep 10, 2018 11:56 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 44884

Re: v6.43 [current] is released!

Just upgraded two CHR instances to 6.43 and all worked great but I cannot see Cloud under IP !) cloud - added support for licensed CHR instances (including trial); I do not see it in WinBox or via Webfig. Cleared cache and all that and does not appear. I can see it via console or SSH so I have manag...
by Kindis
Thu Sep 06, 2018 2:54 pm
Forum: Virtualization
Topic: CHR Xen vs VMWare Performance
Replies: 3
Views: 3707

Re: CHR Xen vs VMWare Performance

On regards related to hardware choice. Now performance would come down to the choice of testing. AMD CPU has more core and if they are added to CHR it should be able to hold more load but Intel is still king of single threaded performance. Also AMD has more intra core latency and this could also res...
by Kindis
Mon Aug 20, 2018 2:07 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 46002

Re: v6.42.7 [current] is released!

Upgraded two 3011, one 493G, two CHR and two wAP AC. No issues what so ever. Also disabled PMKID for WPA2 and have no issues so far.
by Kindis
Sun Aug 05, 2018 11:54 am
Forum: General
Topic: Not enough disk space to perform update
Replies: 15
Views: 15824

Re: Not enough disk space to perform update

Did you find a solution to the problem? I have a similar problem. I can not upgrade to version 6.42.6 He says: ERROR: not enough disk space, 7.1MiB is required and only 6.7MiB is free How can I clean it? Have you tried this? https://www.mikrotik.com/download/share/fix_space.npk You can read more on...
by Kindis
Thu Aug 02, 2018 9:56 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 131336

Re: Winbox vulnerability: please upgrade

According to changelog it is fixed
What's new in 6.40.8 (2018-Apr-23 11:34):

!) winbox - fixed vulnerability that allowed to gain access to an unsecured router;
by Kindis
Wed Aug 01, 2018 9:51 am
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 43733

Re: v6.42.6 [current]

I've got a CRS125-24G-1S that has Routerboard 3.41 in it and RouterOS is 6.40.4. I've tried several times to upgrade the RouterOS version to 6.42.6 as well as to 6.40.5. Neither will work. After rebooting, the CRS125 still shows RouterOS at 6.40.4. Suggestions? John Rayfield, Jr. What does the log ...
by Kindis
Tue Jul 31, 2018 10:02 pm
Forum: General
Topic: Upgrade from 6.40 to 6.42.6: wAP ac not found in neighbor list in winbox
Replies: 4
Views: 1531

Re: Upgrade from 6.40 to 6.42.6: wAP ac not found in neighbor list in winbox

Have you tested a second restart? Updated: I remembered that there where issues with neighbor service after a .0 release but did not remember what release it was. Dug around in the change log and it is 6.41 release that had this issue. A second restart should solve this issue or fixing the interface...
by Kindis
Thu Jul 05, 2018 10:29 am
Forum: General
Topic: Unable to upgrade x86 from 6.34.5 to newer firmware
Replies: 4
Views: 1302

Re: Unable to upgrade x86 from 6.34.5 to newer firmware

To which version are you upgrading?
by Kindis
Thu Jul 05, 2018 9:43 am
Forum: Announcements
Topic: Winbox v3.16 released!
Replies: 63
Views: 43924

Re: Winbox v3.16 released!

I have a crazy feature request. Abandon the current GUI framework that WinBox is using and move to QT. Yes, I know it will be a LOT of work, but it will make life easier for Mikrotik developers, and allow Mikrotik to add more features in the long run. I would go even further and say please rewrite ...
by Kindis
Fri Jun 29, 2018 12:59 am
Forum: Virtualization
Topic: CHR on Hyper-V - dhcp client unable to take address [SOLVED]
Replies: 3
Views: 5742

Re: CHR on Hyper-V - dhcp client unable to take address [SOLVED]

Are you using VLAN? I have two CHR running on this version that have DHCP client working so it should be config.
by Kindis
Fri Jun 15, 2018 9:17 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 163042

Re: v6.43rc [release candidate] is released!

Big problem...
Updated Mys CCR (to 6,43rc27) an now stucked outside! All is running but cant connect - wrong username or password??? A bit of PANIC!!!

------------------
Sorry! Had two winbox on my pc!! Just need new winbox! Sorry!
You need Winbox 3.14
by Kindis
Tue Jun 05, 2018 4:53 pm
Forum: Virtualization
Topic: Upgrade CHR to 6.42.2 on Hyper-V 2008R2
Replies: 5
Views: 3361

Re: Upgrade CHR to 6.42.2 on Hyper-V 2008R2

I Tried 6.42.3 and 6.43rc19, same result New RC release. Test if this will work for you. My guess is they have fixed an issue. *) chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V But you might already know this as you might be the one who reported this issue in t...
by Kindis
Mon May 28, 2018 10:34 am
Forum: General
Topic: CRS125 do I dare to upgrade from 6.37.4 to 6.41+ ?
Replies: 10
Views: 2135

Re: CRS125 do I dare to upgrade from 6.37.4 to 6.41+ ?

I would upgrade to 6.40.8 (latest bugfix) before upgrading to new bridge. You can always contact MT support and check from which version to new version is best. You have a better bet at upgrading from latest bugfix to latest current. At least my guess is so. As you current version contains some nast...
by Kindis
Mon May 28, 2018 10:28 am
Forum: Virtualization
Topic: Upgrade CHR to 6.42.2 on Hyper-V 2008R2
Replies: 5
Views: 3361

Re: Upgrade CHR to 6.42.2 on Hyper-V 2008R2

Contact support and inform them. A year or two ago I had an issue where the router should boot and you could login via console but everything timed out. They told me that it should work and they had no issues. After a while they told me the tested on Windows 10 Hyper-V which is = Server 2016 and I r...
by Kindis
Fri May 25, 2018 3:44 pm
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 33554

Re: v6.42.3 [current]

Upgrades two CHR (running on Hyper-V), two 3011, one 493G and 2 wAP AC without any issues.
by Kindis
Fri May 25, 2018 12:27 pm
Forum: General
Topic: UPGRADING a RB1000 ROS v4.10 to 6.42.2 safely
Replies: 2
Views: 917

Re: UPGRADING a RB1000 ROS v4.10 to 6.42.2 safely

I would export config, netinstall and then import config. You might need to tweek config before import due to version differences.
by Kindis
Tue May 15, 2018 9:38 am
Forum: General
Topic: Warning before installing CHR 6.42.1 on Hyper-V
Replies: 22
Views: 6322

Re: Warning before installing CHR 6.42.1 on Hyper-V

For you that have this issue what guest servies have you activated? Are all activated including Dynamic Memory?
I wonder if this issue goes away if you disable all services including dynamic memory.
by Kindis
Mon Apr 23, 2018 4:24 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 69377

Re: v6.42.1 [current]

I have updated one 3011 and two CHR (Hyper-V) and so far so good. Took the ones that have a public IP first.
Don't think this was a problem for me though as I block anyone, for 30 days, coming from internet trying to connect to Winbox port.
by Kindis
Wed Apr 18, 2018 10:27 pm
Forum: Announcements
Topic: v6.42 [current]
Replies: 147
Views: 44003

Re: v6.42 [current]

When upgrade packages to v6.42 in CHR router (Hyper-V image), after reboot have: Loading system with initrd ERROR: could not find disk! Please attach it somewhere else. System hangs up. When loading blank chr-6.42.vhdx, the same error. Before v6.42 all works fine. Something wrong with .vhdx image? ...
by Kindis
Wed Apr 18, 2018 3:17 pm
Forum: General
Topic: router running 100%
Replies: 3
Views: 1027

Re: router running 100%

Regarding upgrading to BugFix Only. It should be safe but it all comes down to config. I run everything on Current but in your case I would upgrade first to Bugfix channel. All changes from the release you are on can be viewed here, it a long read. https://mikrotik.com/download/changelogs/bugfix-rel...
by Kindis
Wed Apr 18, 2018 10:52 am
Forum: Announcements
Topic: v6.42 [current]
Replies: 147
Views: 44003

Re: v6.42 [current]

Install and upgrade via packages menu option crashed my 3011. Anyone else have issues. Now in constant boot loop. Cannot launch kernel. Any recommended next steps ?
I have updated two 3011 without issues. My guess is netinstall for you.
from which version did you upgrade? I want from 6.41.4
by Kindis
Wed Apr 18, 2018 9:45 am
Forum: General
Topic: router running 100%
Replies: 3
Views: 1027

Re: router running 100%

Hi I have RB450G (mipsbe) version (6.34.1) which is shown as 100% CPU, I noticed that the profile is shown as 95% for unclassified. Has anyone had this issues ands what is inside of unclassified. You are on a very old build. Update to 6.40.7 (Bugfix only) and see if the issues goes away. Make sure ...
by Kindis
Tue Apr 10, 2018 10:15 am
Forum: Announcements
Topic: v6.41.4 [current]
Replies: 37
Views: 16318

Re: v6.41.4 [current]

Updated two 3011, two wAP AC, one CHR running on Hyper-V and also a 493G without any issues.
Are there any official plan to fix the firmware so it auto upgrades so I do not have to restart each machine twice every time? By offical plan I mean when this will be solved and not Yes it will be solved.
by Kindis
Wed Apr 04, 2018 11:28 pm
Forum: General
Topic: CRS 317 CPU LOAD
Replies: 2
Views: 968

Re: CRS 317 CPU LOAD

The test is singel threaded and only uses one core which is 100 % load which is 50 % in total as there are 2 cores.
You should test the throughput of the router/switch from a machine attached to the router/switch.
by Kindis
Wed Mar 28, 2018 12:25 am
Forum: General
Topic: High CPU on CCR1072 every pppoe-client go down
Replies: 13
Views: 3509

Re: High CPU on CCR1072 every pppoe-client go down

This is a quote from the thread I linked, please read it. It doesn't matter if the user has public or private IP, it's about interfaces. When interfaces connect/disconnect, with combination with NAT, it gives you high CPU usage. So simply eliminate NAT from that router. Have a separate router "...
  • 1
  • 2