Community discussions

Search found 1161 matches

by andriys
Sat Oct 12, 2019 3:22 pm
Forum: General
Topic: Radius proxy
Replies: 1
Views: 251

Re: Radius proxy

Moved to "General" as "RouterOS v7 BETA" section is only for problem reporting.
See viewtopic.php?f=1&t=152006.
by andriys
Sat Oct 05, 2019 12:27 am
Forum: Wireless Networking
Topic: NV3
Replies: 125
Views: 14188

Re: NV3

@scampbell, Wireless Advanced Channels feature has a rather limited applicability, meaning just a small number of (mostly outdated) boards support it. Just check this out: Wireless hardware table.
by andriys
Fri Oct 04, 2019 6:15 pm
Forum: RouterBOARD hardware
Topic: Does CRS328-24P-4S+RM support 24v passive poe?
Replies: 17
Views: 2710

Re: Does CRS328-24P-4S+RM support 24v passive poe?

I installed some of these CRS328's on a site that already had wAPACs. They OVERHEATED and crashed a lot on 802.3af/at I have 4 wAP ac units powered by CRS328-24P-4S+RM which have been running just fine for months already. As of this writing the uptime of all the units is over 82 days, and the switc...
by andriys
Thu Oct 03, 2019 10:38 pm
Forum: Beginner Basics
Topic: Several isolated networks
Replies: 33
Views: 3244

Re: Several isolated networks

If I read the documentation correctly, the DNS servers that are statically configured under /ip dns are never used by DHCP server, however dynamic ones (i.e. those set by DHCP client, PPPoE client, etc) are. And this behavior can also be suppressed by setting dns-none option for a particular /ip dhc...
by andriys
Thu Oct 03, 2019 6:48 pm
Forum: General
Topic: configuration transfer from crs125 to crs326
Replies: 8
Views: 772

Re: configuration transfer from crs125 to crs326

CRS3xx series devices differ a lot from the rest of CRS series devices. Here are some references to read:

Bridge Hardware Offloading
CRS3xx series switches manual
by andriys
Thu Oct 03, 2019 5:27 pm
Forum: Wireless Networking
Topic: station bridge / pseudobridge when bridges only 1 ip gets through
Replies: 7
Views: 706

Re: station bridge / pseudobridge when bridges only 1 ip gets through

@Zacharias, station-bridge does not work with CAPsMAN controlled APs, that's the main problem OP is facing here. @genesispro, When the CAPsMAN was first introduced several years ago, I do remember multiple people asking about support of WDS, station-bridge, etc. here on the forum. If I understood th...
by andriys
Thu Oct 03, 2019 4:37 pm
Forum: General
Topic: configuration transfer from crs125 to crs326
Replies: 8
Views: 772

Re: configuration transfer from crs125 to crs326

/export the existing configuration to a file, edit it if needed, then apply it to the new device. Read this: RouterOS Configuration Management . PS. If you have anything configured in the /switch menu on CRS125, you will not be able to transfer that to CRS326 automatically. Instead, you will have t...
by andriys
Thu Oct 03, 2019 4:33 pm
Forum: Wireless Networking
Topic: station bridge / pseudobridge when bridges only 1 ip gets through
Replies: 7
Views: 706

Re: station bridge / pseudobridge when bridges only 1 ip gets through

What you described is indeed how station-pseudobridge works. These limitations are fundamental for the underlying wireless protocol stack. The station-bridge mode, on the other hand, should not have such limitations, however it only work when AP also runs Mikrotik RouterOS, and is not compatible wit...
by andriys
Thu Oct 03, 2019 1:07 pm
Forum: General
Topic: Extend dynamic VLANs to Wireless 802.1x
Replies: 5
Views: 1132

Re: Extend dynamic VLANs to Wireless 802.1x

Isn't this what you are looking for: Wireless / VLAN tagging?
by andriys
Wed Oct 02, 2019 9:17 pm
Forum: Beginner Basics
Topic: Slow Connection
Replies: 5
Views: 403

Re: Slow Connection

Post you current configuration. Also check what /tool profile shows at the time you test the speed.
by andriys
Wed Oct 02, 2019 9:14 pm
Forum: General
Topic: Vlan untagged and priority tagged doubt [SOLVED]
Replies: 2
Views: 395

Re: Vlan untagged and priority tagged doubt [SOLVED]

where it says "and priority tagged", what does that means?
That means a packet with 802.1Q header that has VLAN ID field set to 0 (a reserved value that means VLAN ID is unspecified); however PCP and DEI fields are still in effect specifying priority, hence the name of the option.
by andriys
Wed Oct 02, 2019 12:22 pm
Forum: Virtualization
Topic: CHR - Firmware Upgrade [SOLVED]
Replies: 4
Views: 459

Re: CHR - Firmware Upgrade [SOLVED]

Well, the error message clearly says that it's license that prevents the upgrade. And the only license preventing the upgrade is the expired trial. I'd suggest checking the license status and then writing to support@.
by andriys
Wed Oct 02, 2019 12:10 pm
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 102
Views: 36474

Re: v6.46beta [testing] is released!

after installing the latest beta to a RBM33G the RB is stuck in a reboot loop.
Such reports are kinda useless, unless you also specify what RouterOS version you were using before the upgrade.
by andriys
Wed Oct 02, 2019 12:06 pm
Forum: Virtualization
Topic: CHR - Firmware Upgrade [SOLVED]
Replies: 4
Views: 459

Re: CHR - Firmware Upgrade [SOLVED]

The error message says it all. Once your trial period is over you can no longer upgrade your instance. You should have bought a suitable license (or switched to the free license, in case you are fine with its limitations) before the trial ends. See CHR Licensing.
by andriys
Wed Oct 02, 2019 11:54 am
Forum: RouterBOARD hardware
Topic: Connect serial port with ups usb
Replies: 3
Views: 306

Re: Connect serial port with ups usb

I'm almost certain it's not possible. Certainly not possible with passive adapters.
by andriys
Wed Oct 02, 2019 12:11 am
Forum: General
Topic: Traffice Flow
Replies: 1
Views: 245

Re: Traffice Flow

TrafficFlow does not produce anything human-readable. You need a separate specialized software, usually called NetFlow Collector or NetFlow Analyzer, to collect, aggregate and display traffic flow data.

As a much simpler alternative, you can also consider using /ip accounting.
by andriys
Wed Oct 02, 2019 12:02 am
Forum: General
Topic: ROS updates to be put on homepage?
Replies: 4
Views: 449

Re: ROS updates to be put on homepage?

I usually monitor the Announcements section of this forum for information about new releases. This is one of the first places the announcements are posted to most of the time. Another reason to monitor the forum for release announcements is it is usually a good idea to wait for possible regression r...
by andriys
Tue Oct 01, 2019 11:49 pm
Forum: General
Topic: IPSec Side-to-Side with Multiple Routen
Replies: 1
Views: 287

Re: IPSec Side-to-Side with Multiple Routen

An obvious alternative is some kind of tunneling protocol (like GRE) over IPsec.
But I still usually prefer to use pure policy-based IPsec whenever possible. What kind of software/hardware do your clients use?
by andriys
Tue Oct 01, 2019 11:40 pm
Forum: General
Topic: OVPN perfomance in v7
Replies: 1
Views: 475

Re: OVPN perfomance in v7

Renamed and moved to "General" as "RouterOS v7 BETA" section is only for problem reporting.
See viewtopic.php?f=1&t=152006.
by andriys
Tue Oct 01, 2019 3:36 pm
Forum: General
Topic: MFA for Mikrotik VPN
Replies: 3
Views: 390

Re: MFA for Mikrotik VPN

AFAIK, it is not possible when using built-in authentication, however should be possible with some external RADIUS servers.
by andriys
Tue Oct 01, 2019 3:32 pm
Forum: The Dude
Topic: cAP ac for the dude server??
Replies: 3
Views: 403

Re: cAP ac for the dude server??

cAP ac has only 16MB of flash, and has no means to extend the storage (there are no USB, SD or M.2 slots). So while technically you should be able to install and run the Dude server on cAP ac, you will not have enough space for even a minimal Dude DB, and so it will be effectively useless.
by andriys
Mon Sep 30, 2019 11:40 pm
Forum: Beginner Basics
Topic: help i have routerboard RB951Ui-2HnD need Cache web proxy
Replies: 11
Views: 1083

Re: help i have routerboard RB951Ui-2HnD need Cache web proxy

You are not listening. Caching HTTPS traffic is not possible. Period.
by andriys
Sun Sep 29, 2019 7:20 pm
Forum: Beginner Basics
Topic: Wireless bridge+access point
Replies: 4
Views: 538

Re: Wireless bridge+access point

most complex router and overall the most crappy designed user interface that I have encountered. It is complex. But it is also very versatile/flexible. And the interface is actully pretty well-thought, though everything beyond QuickSet is primarily meant to be used by network pros, or at least peop...
by andriys
Sun Sep 29, 2019 7:08 pm
Forum: Wireless Networking
Topic: 921GS-5HPacD r2 Superchanel [SOLVED]
Replies: 1
Views: 291

Re: 921GS-5HPacD r2 Superchanel [SOLVED]

Superchannel won't work unless you have country set to no_country_set.
by andriys
Sun Sep 29, 2019 6:17 pm
Forum: Wireless Networking
Topic: NV3
Replies: 125
Views: 14188

Re: NV3

If you Reed my answer Then you See i die test From Wap.60G and not from the Omnitik
mistry7, If you were careful enough, you would see I was replying to mfr476, and not you. And looking at his/her screenshots I'd rather suggest he/she runs btest straight on the device being tested.
by andriys
Sun Sep 29, 2019 6:08 pm
Forum: Wireless Networking
Topic: CAPsMAN 5G and 2G network at same time
Replies: 9
Views: 1021

Re: CAPsMAN 5G and 2G network at same time

Not sure I understand your last question about "signal tuning".
by andriys
Sat Sep 28, 2019 7:51 pm
Forum: Wireless Networking
Topic: NV3
Replies: 125
Views: 14188

Re: NV3

The very first thing you should do is to stop using built-in btest tool (bandwidth test). It is known to be CPU hungry on its own. When testing bandwidth, always do it through device you test, and never to/from that device. Disclaimer: I am just pointing to an obvious mistake here. I'm not in any wa...
by andriys
Sat Sep 28, 2019 1:43 pm
Forum: General
Topic: {ASK} upgrading SXT
Replies: 7
Views: 670

Re: {ASK} upgrading SXT

I'd do in at least several step, making sure none of the steps introduces more than one major change like wireless packages consolidation, master-port removal, etc.
by andriys
Fri Sep 27, 2019 9:57 pm
Forum: Wireless Networking
Topic: CAPsMAN 5G and 2G network at same time
Replies: 9
Views: 1021

Re: CAPsMAN 5G and 2G network at same time

OK, I see, makes sense. We are mostly using wAP acs in CAPsMAN setups, and those work great for us, so I didn't even considered a case with 5GHz radios failing on their own.
by andriys
Fri Sep 27, 2019 6:24 pm
Forum: Wireless Networking
Topic: CAPsMAN 5G and 2G network at same time
Replies: 9
Views: 1021

Re: CAPsMAN 5G and 2G network at same time

There is no "one solution suits all" approach possible here. I personally do what you basically described as option1: use the same SSID with reduced power. The only difference is I use reduced power for both 2GHz and 5GHz bands- coupled with a reasonable overlap between neighboring APs this gives us...
by andriys
Fri Sep 27, 2019 5:52 pm
Forum: General
Topic: USB UPS connected to RB4011 wifi version
Replies: 6
Views: 569

Re: USB UPS connected to RB4011 wifi version

So I was wondering if CONSOLE port is same like serial port and can be used for talking to APC UPS ....
Yes, it is the same. Not sure if it can be safely used for talking to UPS though.
by andriys
Thu Sep 26, 2019 10:19 pm
Forum: General
Topic: Ability to Use Development Branch for v7 Betas [SOLVED]
Replies: 3
Views: 496

Re: Ability to Use Development Branch for Betas [SOLVED]

Moved to "General" as "RouterOS v7 BETA" section is only for problem reporting.
See viewtopic.php?f=1&t=152006.
by andriys
Tue Sep 24, 2019 12:23 pm
Forum: Beginner Basics
Topic: IPSEC
Replies: 1
Views: 273

Re: IPSEC

2.8.9? Really? Why don't you upgrade?
by andriys
Mon Sep 23, 2019 12:14 pm
Forum: Announcements
Topic: Newsletter 91
Replies: 12
Views: 7457

Re: Newsletter 91

MQS looks interesting. Newsletter says the following:
  • Power it with a USB power bank and it will power your CPE over PoE, while you configure it

The question is, when MQS is power with a USB power bank only, what voltage can be expected on PoE output?
by andriys
Sat Sep 21, 2019 11:35 pm
Forum: Beginner Basics
Topic: Noob questions
Replies: 4
Views: 498

Re: Noob questions

I am new to networking and I’ve learned on the field ... is mikrotik is a good choice ... ? I'd say it is, but that's pretty subjective. :) where learn everything I need ? Official documentation may be a good starting point. Also, I was wondering if the GUI is complete or if I’ll need to get my han...
by andriys
Sat Sep 21, 2019 11:22 pm
Forum: General
Topic: "pure" ipsec, how to deal with MTU?
Replies: 6
Views: 534

Re: "pure" ipsec, how to deal with MTU?

You don't need to do anything about it. Just make sure you do not blindly block the ICMP traffic so PMTUD over your tunnels works.
by andriys
Sat Sep 21, 2019 1:58 pm
Forum: General
Topic: Fasttrack doesn't work (with VLAN) ?
Replies: 8
Views: 1126

Re: Fasttrack doesn't work (with VLAN) ?

Fasttrack works for firewall with connection tracking enabled. Which is pretty much default for routed traffic and it doesn't care about underlying interface types. As far as I understand FastTrack is built on top of FastPath and requires that the underlying interface supports it. And I guess FastP...
by andriys
Sat Sep 21, 2019 1:55 pm
Forum: Beginner Basics
Topic: Forwarding all WAN traffic untouched to 1 Ethernet port [SOLVED]
Replies: 4
Views: 541

Re: Forwarding all WAN traffic untouched to 1 Ethernet port [SOLVED]

Should the Bridge Local also include the eth1 port?
No, it should not. Everything else looks correct.
by andriys
Sat Sep 21, 2019 1:52 pm
Forum: General
Topic: hEX PoE // Powersupply
Replies: 6
Views: 786

Re: hEX PoE // Powersupply

Strange decision from Mikrotik to bundle 24V with PoE router, but ...
It is not surprising at all. I expect most people to be using this device to power other Mikrotik devices, and those are fine being powered by 24V Passive PoE.
by andriys
Sat Sep 21, 2019 1:48 pm
Forum: General
Topic: Virtual License
Replies: 1
Views: 205

Re: Virtual License

Read here: CHR Licensing.
by andriys
Sat Sep 21, 2019 1:46 pm
Forum: The Dude
Topic: RAM use
Replies: 5
Views: 833

Re: RAM use

Yes, I guess it is to be expected. Dude appears to be a heavy and resource-demanding service.
by andriys
Fri Sep 20, 2019 8:59 am
Forum: Beginner Basics
Topic: Forwarding all WAN traffic untouched to 1 Ethernet port [SOLVED]
Replies: 4
Views: 541

Re: Forwarding all WAN traffic untouched to 1 Ethernet port [SOLVED]

Create a new bridge, add Ethernet ports 1 and 24 do this bridge. At his point your STB should already start working. Now change the configuration to use newly added bridge as your WAN interace instead of ether1 (this should be changed literally everywhere- IP address assignment, if any, DHCP client,...
by andriys
Thu Sep 19, 2019 10:26 pm
Forum: Wireless Networking
Topic: Mikrotik Audience Availability
Replies: 17
Views: 2167

Re: Mikrotik Audience Availability

2 months??? wAP ACs took nearly a year to get stable numbers. In that specific case, a special situation is presented, which was the incorporation of a new ipq4xxx platform and a massive support for the ARM architecture Are you sure you are talking about wAP ac and not cAP ac ? The wAP ac is MIPSBE...
by andriys
Thu Sep 19, 2019 3:00 pm
Forum: General
Topic: Fasttrack doesn't work (with VLAN) ?
Replies: 8
Views: 1126

Re: Fasttrack doesn't work (with VLAN) ?

Just finished converting a setup with 2x HAP AC with latest stable firmware from Switch VLAN setup to new bridge VLAN setup. Why did you do that? HW accelerated bridge VLAN filtering is only supported on CRS3xx series switches. For the rest of the the routerboards you should keep using the /switch ...
by andriys
Tue Sep 17, 2019 3:35 pm
Forum: Wireless Networking
Topic: hAP AC2+cAP AC Roaming is a joke
Replies: 35
Views: 4143

Re: hAP AC2+cAP AC Roaming is a joke

No, with the more expensive systems that do "seamless roaming" it is the AP/controller that decides where the client is served. What you are referring to here is technically not a roaming, because in this case clients do not really roam, but are rather constantly talking to a single huge AP with sp...
by andriys
Mon Sep 16, 2019 10:44 am
Forum: RouterBOARD hardware
Topic: Switch ability of 962UiGS-5HacT2HnT
Replies: 10
Views: 1175

Re: Switch ability of 962UiGS-5HacT2HnT

Is this device even able to switch VLANs?
It is (see this page in the wiki). However the Bridge VLAN Filtering is currently only supported on CRS3xx series devices, and on hAP ac you are limited to Basic VLAN switching.
by andriys
Sun Sep 15, 2019 2:44 pm
Forum: RouterBOARD hardware
Topic: current (up-to-date) dual-band router
Replies: 3
Views: 533

Re: current (up-to-date) dual-band router

I am looking for what is essentially meant to be a powerful 2.4 and 5ghz router for a somewhat large-ish home, the materials of which don't let wifi signals through very well. I'm ok working with repeaters if I have to, but would rather explore single-device solutions first. Based on this descripti...
by andriys
Sat Sep 14, 2019 5:01 pm
Forum: Wireless Networking
Topic: Capsman ? WDS ? Mesh ?
Replies: 6
Views: 856

Re: Capsman ? WDS ? Mesh ?

Depends on your client device. Roaming is always a function of client. AP may assist, but it always up to the client to do the switchover.
by andriys
Sat Sep 14, 2019 2:19 pm
Forum: Wireless Networking
Topic: Capsman ? WDS ? Mesh ?
Replies: 6
Views: 856

Re: Capsman ? WDS ? Mesh ?

WDS over ethernet ?
Huh? :)

Or just the same SSID on a different channel ?
Go this way. There's absolutely no need to do anything more complicated than this in your case.
by andriys
Thu Sep 12, 2019 1:02 pm
Forum: General
Topic: EOIP/IPSec traffic stopped after upgrade from 6.42.7
Replies: 1
Views: 197

Re: EOIP/IPSec traffic stopped after upgrade from 6.42.7

EOIP is based on the GRE protocol, and there were some GRE-related firewall fixes in 6.45. As a result (1) an invalid firewall config that used to work before the upgrade will no longer work; and (2) a new bug was introduced that incorrectly classifies GRE connection state as invalid in some cases (...
by andriys
Wed Sep 11, 2019 10:08 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself
Replies: 258
Views: 33328

Re: RB4011: wlan1 disabling itself

I have it in auto.
I believe it tried to find a free channel and it was delayed.
In this case the delay is most certainly caused by DFS (radar detection). When a DFS-enforced channel is selected, a delay (before you see your SSID on air) of at least 10 minutes is always to be expected.
by andriys
Wed Sep 11, 2019 9:33 pm
Forum: General
Topic: Packet loss just on 443 port
Replies: 12
Views: 1357

Re: Packet loss just on 443 port

The proper way to deal with the PMTUD issues is not to change MTU on either side, but rather to make sure you do not drop (block) ICMP messages that should not be dropped. A rather widespread workaround is to use TCP MSS clamping on the router (which some people consider an ugly hack- and for a reas...
by andriys
Wed Sep 11, 2019 6:41 pm
Forum: RouterBOARD hardware
Topic: RB4011: wlan1 disabling itself
Replies: 258
Views: 33328

Re: RB4011: wlan1 disabling itself

I didn't see the 5GHz wireless.
Now work perfect, without any changes.
What channel do you use? Perhaps, "now" means "once radar detection is complete"? Just guessing.
by andriys
Tue Sep 10, 2019 10:57 pm
Forum: General
Topic: Packet loss just on 443 port
Replies: 12
Views: 1357

Re: Packet loss just on 443 port

Feels like a potential PMTUD issue.
by andriys
Tue Sep 10, 2019 10:51 pm
Forum: General
Topic: Feature Request: Add LTE to WAN Interface List by default
Replies: 4
Views: 520

Re: Feature Request: Add LTE to WAN Interface List by default

As far as I know WAN and LAN interface lists are meant to be used by the Detect internet feature. Which is supposed to be interface type agnostic.
by andriys
Tue Sep 10, 2019 2:12 pm
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 934

Re: GRE dont-fragment - inherit from where? [SOLVED]

I always assumed it inherits it from the packet being encapsulated. Not sure this assumption is correct, though.
by andriys
Tue Sep 03, 2019 2:57 pm
Forum: Beginner Basics
Topic: Can Routers Get Infected?
Replies: 5
Views: 603

Re: Can Routers Get Infected?

I will assume you are using a Mikrotik router (otherwise why would you post here). In case your router was compromised, the only reliable way to recover is to reinstall the RouterOS using netinstall.
by andriys
Tue Sep 03, 2019 1:24 pm
Forum: SwOS
Topic: @ Mikrotik will come out resolution for serious problems of CRS3xx and CSS3xx?
Replies: 16
Views: 2101

Re: @ Mikrotik will come out resolution for serious problems of CRS3xx and CSS3xx?

Yes it is capable of running routers but the main functionalities of a manageable switch are lost
This is plain wrong. Can you name at least one switch feature that is available in SwOS but not RouterOS?
by andriys
Thu Aug 29, 2019 1:50 pm
Forum: RouterBOARD hardware
Topic: WAPG60ADM new 60 GHz product
Replies: 17
Views: 2347

Re: WAPG60ADM new 60 GHz product

The 'ad' in the name may refer to the "real 802.11ad", not the proprietary protocol stuff like the current 60GHz product line. Hence the wall-mountable (indoor) AP form-factor with limited power. Just guessing.
by andriys
Wed Aug 28, 2019 10:45 am
Forum: Wireless Networking
Topic: Point-to-Multipoint with wAP 60G [SOLVED]
Replies: 4
Views: 679

Re: Point-to-Multipoint with wAP 60G [SOLVED]

Or we need one wAP 60G AP in Remote Location 1,
and two wAP 60G in other 2 locations?
That's correct. In general for PtMP you need to use a device with license level 4+ as an AP (CPEs can be on license level 3). This is also true for 60G.
by andriys
Sun Aug 25, 2019 9:17 pm
Forum: Beginner Basics
Topic: I need to block facebook and youtube
Replies: 4
Views: 794

Re: I need to block facebook and youtube

How I can make sure that my firewall restrictions is applied even when user use VPN client
You cannot do that in general. At least not when the corresponding traffic has already entered the VPN tunnel.
by andriys
Sun Aug 25, 2019 10:43 am
Forum: Wireless Networking
Topic: 802.11ax [SOLVED]
Replies: 118
Views: 19213

Re: 802.11ax [SOLVED]

One question I asked myself multiple times is why MikroTik doesn't use the drivers from chipset vendors.
I believe the main reason was the ability to implement protocols like nstream and nv2.
by andriys
Fri Aug 23, 2019 10:58 am
Forum: RouterBOARD hardware
Topic: CAP AC bricked after RouterOS upgrade
Replies: 7
Views: 775

Re: CAP AC bricked after RouterOS upgrade

Did you happen to get Protected RouterBOOT enabled?
by andriys
Thu Aug 22, 2019 1:05 pm
Forum: RouterBOARD hardware
Topic: High ambient temperature
Replies: 6
Views: 751

Re: High ambient temperature

Both your devices are rated for the ambient temperature up to +60°C.
by andriys
Wed Aug 21, 2019 11:02 pm
Forum: Beginner Basics
Topic: Cannot get Queues to work - cAP AC [SOLVED]
Replies: 8
Views: 979

Re: Cannot get Queues to work - cAP AC [SOLVED]

On the diagram, the queues are under the (1) [Interface HTB] - Queue Tree with parent=some_interface_queue (2) [HTB Global] - Queue Tree with parent=global (3) [Simple Queues] - Simple Queues The (2) and (3) are in [POSTROUTING] and in [INPUT]. When bridging, packets only hit [POSTROUTING] if use-ip...
by andriys
Wed Aug 21, 2019 8:10 pm
Forum: General
Topic: VPN with Cisco ASA VTI
Replies: 2
Views: 401

Re: VPN with Cisco ASA VTI

Mikrotik does not currently support VTI style of IPsec tunnels. And GRE over IPsec is not VTI compatible either. If you can reconfigure you ASA then you can of course build GRE over IPsec tunnel. Another option is to use classic policy-based IPsec tunnel (ASA does support multiple policies per peer ...
by andriys
Wed Aug 21, 2019 7:59 pm
Forum: Beginner Basics
Topic: Cannot get Queues to work - cAP AC [SOLVED]
Replies: 8
Views: 979

Re: Cannot get Queues to work - cAP AC [SOLVED]

Simple queues are perfectly usable on cAP ac , but for them to work you need to actually route traffic, i.e. to use your cAP ac as a router, not just AP. Alternatively, you may try enabling use-ip-firewall option on the bridge (see the manual ). Again, please consult the packet flow diagram (followi...
by andriys
Wed Aug 21, 2019 3:07 pm
Forum: Beginner Basics
Topic: Cannot get Queues to work - cAP AC [SOLVED]
Replies: 8
Views: 979

Re: Cannot get Queues to work - cAP AC [SOLVED]

So you are saying you are just bridging interfaces together... I do not think you can use Simple Queues in this case. And if you decide to try Queue Trees instead, make sure you specify one of the interface queues (not global!) as a parent to your queues. For a better understanding, please take a lo...
by andriys
Wed Aug 21, 2019 8:33 am
Forum: Beginner Basics
Topic: Cannot get Queues to work - cAP AC [SOLVED]
Replies: 8
Views: 979

Re: Cannot get Queues to work - cAP AC [SOLVED]

You should disable Fasttrack for any traffic you want to queue.
by andriys
Tue Aug 20, 2019 12:14 pm
Forum: Wireless Networking
Topic: The best Mikrotik AP for 6 SSIDs?
Replies: 4
Views: 750

Re: The best Mikrotik AP for 6 SSIDs?

Talking about the bandwidth and the number of users virtually any device from the current Mikrotik product line should fit (even the cheapest one). However 55 users also means you may need more than one device to cover the area where these 55 users reside. If a device says it has 3 chains, does that...
by andriys
Tue Aug 20, 2019 10:17 am
Forum: General
Topic: Hotspot and HTTPS? What solutions?
Replies: 53
Views: 5514

Re: Hotspot and HTTPS? What solutions?

But as I keep saying, I want some actual information on this. Not just 'it should work' HOW does it work? I would like information on how all devices detect hotspot in the first place. This question has nothing to do with Mikrotik, all vendors do it in their own unique way (and also change those wa...
by andriys
Tue Aug 20, 2019 7:16 am
Forum: General
Topic: Hotspot and HTTPS? What solutions?
Replies: 53
Views: 5514

Re: Hotspot and HTTPS? What solutions?

Now here's another question, i'm not typing https://www.google.com I'm simply typing www.google.com or google.com and it fails. Why? Google uses HSTS . Once you visited an HSTS enabled site your browser will force you into using HTTPS any time you access that domain. HSTS expiration period for goog...
by andriys
Fri Aug 16, 2019 1:58 pm
Forum: Wireless Networking
Topic: RBwAPG-5HacT2HnD + CAPsMAN + Rates config = 5Ghz network doesn't work
Replies: 6
Views: 785

Re: RBwAPG-5HacT2HnD + CAPsMAN + Rates config = 5Ghz network doesn't work

That does not mean it is correct. Older devices (or older RouterOS versions) may have just silently ignore the invalid settings, that's why it worked (I'm just guessing here). Anyways, no client is supposed to be able to register to an AP if it cannot negotiate a supported set of basic rates. Disabl...
by andriys
Mon Aug 12, 2019 11:37 pm
Forum: RouterBOARD hardware
Topic: POE current-too-low
Replies: 1
Views: 395

Re: POE current-too-low

af/at requires at least 48V to function correctly, so you need to buy a proper PSU separately. The standard 24V PSU is only suitable for Passive PoE. More info in the official product brochure: https://i.mt.lv/cdn/rb_files/hEX__poe-190722120922.pdf.
by andriys
Mon Aug 12, 2019 11:27 pm
Forum: General
Topic: Feature Request: Multiple WPA2 Pre Shared Keys
Replies: 6
Views: 925

Re: Feature Request: Multiple WPA2 Pre Shared Keys

I think "Multi-PSK" is what you want to be available on a MikroTik device, see page 44-47 from https://zivindico.uni-muenster.de/event/7/attachments/4/4/Hochschulen-NRW_Rahmenvertrag-Kick_Off_Day-Aruba_Overview_compressed.pdf It says it bounds MAC address to PSK. You can easily do the same on Mikro...
by andriys
Sun Aug 11, 2019 6:22 pm
Forum: Beginner Basics
Topic: SwOS on CRS210-8G-2S+IN switch? [SOLVED]
Replies: 3
Views: 464

Re: SwOS on CRS210-8G-2S+IN switch? [SOLVED]

None exists for your hardware.
by andriys
Sun Aug 11, 2019 4:22 pm
Forum: Beginner Basics
Topic: What mean : Bridge All LAN Ports
Replies: 5
Views: 760

Re: What mean : Bridge All LAN Ports

Well, your question is about QuickSet... The usual advice from any experienced community member is "don't use QuickSet, ever". And I'd rather second that advice. So... Do not expect anyone to answer your question, unless someone from the actual Mikrotik staff looks here in the topic. Simply because ...
by andriys
Sat Aug 10, 2019 10:16 pm
Forum: Beginner Basics
Topic: SwOS on CRS210-8G-2S+IN switch? [SOLVED]
Replies: 3
Views: 464

Re: SwOS on CRS210-8G-2S+IN switch? [SOLVED]

Your device does not support dual boot and can only be used with RouterOS.
by andriys
Sat Aug 10, 2019 9:25 am
Forum: General
Topic: Feature Request: Multiple WPA2 Pre Shared Keys
Replies: 6
Views: 925

Re: Feature Request: Multiple WPA2 Pre Shared Keys

Well, on Mikrotik this has been possible like for ages now. It could be done either via wireless access list or RADIUS MAC authentication. This is supported for both regular AP and CAPsMAN setups.
by andriys
Fri Aug 09, 2019 10:34 pm
Forum: RouterBOARD hardware
Topic: hAP ac2 - how to choose PoE input
Replies: 3
Views: 556

Re: hAP ac2 - how to choose PoE input

Yep, the required voltage to power hAP ac² via PoE-in is 18-28V, so a passive PoE injector with 24V PSU should work just fine. When in doubt, the product page is your best friend: https://mikrotik.com/product/hap_ac2. Edit: You can actually get yourself just a proper injector, as you should be able ...
by andriys
Fri Aug 09, 2019 7:16 pm
Forum: RouterBOARD hardware
Topic: hAP ac2 - how to choose PoE input
Replies: 3
Views: 556

Re: hAP ac2 - how to choose PoE input

hAP ac² only supports Passive PoE, so it's not compatible with the type of injector you've bought.
by andriys
Thu Aug 08, 2019 10:44 pm
Forum: General
Topic: RouterOS compatibility with older routerboards
Replies: 11
Views: 1016

Re: RouterOS compatibility with older routerboards

Yes, it should be possible. But since you are running 5.x you will have to do that manually: https://wiki.mikrotik.com/wiki/Manual:U ... g_RouterOS.
by andriys
Wed Aug 07, 2019 11:10 pm
Forum: Beginner Basics
Topic: Restrict access to hEX Ethernet port only for wAP
Replies: 21
Views: 1608

Re: Restrict access to hEX Ethernet port only for wAP

Well, we have a small CAPsMAN setup here in the office (12 access points 8 out of which are wAP ac). I did a small test and observed ~45% load on CPU of wAP ac at about 100Mbps transfer speed (one or two TCP streams, local file transfer; in our case the speed was limited by the client- we didn't hav...
by andriys
Tue Aug 06, 2019 6:37 pm
Forum: Beginner Basics
Topic: Restrict access to hEX Ethernet port only for wAP
Replies: 21
Views: 1608

Re: Restrict access to hEX Ethernet port only for wAP

I would rather expect the manager to be more CPU critical rather then individual CAPs... Have you tried looking at /tool profile (on both your CAP and manager boxes) while doing your tests? Also how exactly did you test (i.e. what tools did you use- simple file transfer, iperf, btest, something else...
by andriys
Tue Aug 06, 2019 4:49 pm
Forum: Beginner Basics
Topic: Restrict access to hEX Ethernet port only for wAP
Replies: 21
Views: 1608

Re: Restrict access to hEX Ethernet port only for wAP

Yes, it will only work if CAPsMAN manager forwarding is used. Why do you think 5G speed will suffer?
by andriys
Mon Aug 05, 2019 6:14 pm
Forum: Beginner Basics
Topic: Restrict access to hEX Ethernet port only for wAP
Replies: 21
Views: 1608

Re: Restrict access to hEX Ethernet port only for wAP

I would do it this way: Create a dedicated (physical) network for all your CAPs. Connect all your CAPs to this network only. Do not assign any IP addresses to any device here. Make sure MAC-winbox, MAC-telnet, etc. are not accessible from this network. Obviously, CAPsMAN will be using L2 transport, ...
by andriys
Mon Aug 05, 2019 1:28 pm
Forum: General
Topic: PWR-Line AP
Replies: 48
Views: 8464

Re: PWR-Line AP

PWR-LINE PRO looks interesting. However I'd love to see a version that is mountable in place of a standard power socket (in a case similar to wsAP ac lite). Possibly even with the power pass-through.
by andriys
Sun Aug 04, 2019 9:54 pm
Forum: RouterBOARD hardware
Topic: Advice for new Unit
Replies: 6
Views: 662

Re: Advice for new Unit

No such product exists. There are no Mikrotik devices with wireless and more then 1 PoE-out capable port at the same time. And even the wireless devices with a single PoE-out capable port only support Passive PoE-out, which almost guaranteed is not compatible with you cameras.
by andriys
Sun Aug 04, 2019 9:09 pm
Forum: Beginner Basics
Topic: Can I setup a hAP ac2 strictly as a WAP?
Replies: 8
Views: 742

Re: Can I setup a hAP ac2 strictly as a WAP?

Yes, you can. No problem at all.
by andriys
Sun Aug 04, 2019 8:30 pm
Forum: Announcements
Topic: v6.45.3 [stable] is released!
Replies: 90
Views: 25234

Re: v6.45.3 [stable] is released!

and again mostly fixes for bugs introduced in previous STABLE releases. excuse my harsh criticism but are you kindergarden business or do you want to be known as a serious software development company...? That is actually expected to work exactly like this. The "stable" release channel used to be c...
by andriys
Sun Aug 04, 2019 8:21 pm
Forum: RouterBOARD hardware
Topic: hEX S - switch functionality?
Replies: 4
Views: 594

Re: hEX S - switch functionality?

hEX S has MT7621 switch chip onboard. And according to Mikrotik's wiki it does not support VLAN table in hardware. Check this page out.
by andriys
Sun Aug 04, 2019 7:58 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 18
Views: 2302

Re: GPeR question

Well, take it this way. Mikrotik is marketing this as "passive" since they are trying to compete with various passive optical solutions here. The whole GPEN product line is just about that. But technically, none of the products in this line are really passive, IMO.
by andriys
Sun Aug 04, 2019 6:04 pm
Forum: General
Topic: Poor/ absolutely disappointing cAP ac (model: RBcAPGi-5acD2nD)
Replies: 1
Views: 252

Re: Poor/ absolutely disappointing cAP ac (model: RBcAPGi-5acD2nD)

i've run the bandwidth test (Tools > Bandwidth Test) and used the details from the Bandwidth test forum, and turns out the unit caps at 30 mbps (2.7MB/sec) This tool is pretty old, and is known to be able to saturate CPU on its own. If you want to test the routing performance never test from/to dev...
by andriys
Tue Jul 30, 2019 3:41 pm
Forum: General
Topic: The RB4011 does not support Passive DAC modules and SFP GPON modules
Replies: 13
Views: 1684

Re: The RB4011 does not support Passive DAC modules and SFP GPON modules

SFP/SFP+ are Network INTERFACES and these network interfaces should work much like any other network interface. THAT is the whole point . No. An interface is the module that you put into your SFP/SFP+ cage, not the cage itself. The specification of the cage itself is (almost) purely mechanical. And...
by andriys
Mon Jul 29, 2019 4:02 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 18
Views: 2302

Re: GPeR question

1) at what OSI layer this device work? at L1 like hub, or at L2 like switch? Does that really matter for a two-port device? 3) why distance is limited to 1500 m? That's because of the power drop. Check the official brochure for the details. You can build a link up to 3000m long if you provide power...
by andriys
Mon Jul 22, 2019 12:29 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 35743

Re: v6.45.2 [stable] is released!

Is it ok to have 7,4 MB available out of 16 total ? On 16M flash devices upgrade happens in RAM, so that should be fine. But you may occasionally need to reboot your device right before the upgrade to free some RAM. Also switching from bundle to individual packages should not be required, unless yo...
by andriys
Tue Jul 09, 2019 12:06 pm
Forum: Virtualization
Topic: Restore VM CHR backup in different VM
Replies: 2
Views: 535

Re: Restore VM CHR backup in different VM

You should be able to apply a backup from one VM to another VM, provided the VM's configurations match. Regular backups, however, contain device/instance specific stuff (like interface MAC addresses), so this is not the best option in general. You'd better consider configuration export instead.
by andriys
Mon Jul 08, 2019 3:25 pm
Forum: Beginner Basics
Topic: Scripting distance of routes [SOLVED]
Replies: 8
Views: 774

Re: Scripting distance of routes [SOLVED]

Try this:
:if ([/ip route get [find <your_search_criteria_goes_here>] distance] = 5) do={
    ...
}
by andriys
Mon Jul 08, 2019 3:10 pm
Forum: General
Topic: Is 16MB enough?
Replies: 6
Views: 529

Re: Is 16MB enough?

I'd say nothing from you list requires extra flash space, perhaps except graphing. But even graphing does not usually occupy too much of a disk space. So, if a particular router model satisfies you requirements otherwise, flash size should not really be an issue.
by andriys
Wed Jul 03, 2019 12:51 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 69370

Re: v6.45.1 [stable] is released!

@andriys. Sorry but I don't saw the official strods post answering a lot of posts of this threads with the info about GRE.
It was in a (rather long) post here.
And then a followup here.
by andriys
Wed Jul 03, 2019 11:40 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 69370

Re: v6.45.1 [stable] is released!

I will try the temporal fix later when users are not working. Temporary? Please read the topic once again, carefully . This version fixes a bug that allowed GRE to work even when your device was configured improperly . So you do not need to apply a temporary fix, but rather permanently fix your con...
by andriys
Fri Jun 14, 2019 10:58 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 71029

Re: v6.45beta [testing] is released!

*) ipsec - added support for RADIUS accounting for "eap-radius" and "pre-shared-key-xauth" authentication methods;
Will it also work for "rsa-signature-hybrid"?
by andriys
Wed May 08, 2019 2:56 pm
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 31772

Re: v6.44.3 [stable] is released!

SJB, please start a new thread and keep this one strictly for the 6.44.3 version related discussions.
by andriys
Sun Apr 14, 2019 8:56 pm
Forum: Announcements
Topic: v6.43.14 [long-term] is released!
Replies: 29
Views: 7944

Re: v6.43.14 [long-term] is released!

doesn't work renaming the admin user 0 again.
Renaming users is not supported since 6.43 and Mikrotik clearly said that's not gonna be fixed.
From now on you should create a new user then delete the old one instead.
by andriys
Mon Apr 08, 2019 11:39 pm
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 12366

Re: v6.44.2 [stable] is released!

As soon as you attempt to create a new identity (on the 'identities' tab) with the 'Auth. Method' set to "rsa signature hybrid", the CPU spikes to 100% and the device becomes almost completely unresponsive! Only solution is a Configuration Reset (but as soon as I attempt to create the IPsec identit...
by andriys
Mon Mar 25, 2019 9:23 pm
Forum: Announcements
Topic: v6.43.13 [long-term] is released!
Replies: 44
Views: 9490

Re: v6.43.13 [long-term] is released!

Tryed to downgrade from 6.44 stable to this release, but after reboot still show me 6.44 stable.. Seems like its not posible to downgrade to this longterm version.
What's in the log? What is the factory firmware version?
by andriys
Sat Mar 23, 2019 1:25 pm
Forum: Beginner Basics
Topic: What is the best outdoor wireless access point
Replies: 9
Views: 808

Re: What is the best outdoor wireless access point

... and I want something that can distribute the signal through these container walls.
Sounds like you are trying to fight the laws of physics. You'd better consider putting an inexpensive AP in each container.
by andriys
Mon Mar 04, 2019 9:37 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36179

Re: v6.44 [stable] is released!

We use superchannel.
The country setting now has priority, so your superchannel won't work unless you have country set to no_country_set. The forum is full of discussions about this change...
by andriys
Sat Mar 02, 2019 11:21 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36179

Re: v6.44 [stable] is released!

What is actual dependency behind this?

Security package implements IKEv2 (among other things), which may now require DHCP in some configurations. Check this entry in ChangeLog:
*) ike2 - send split networks over DHCP (option 249) to Windows initiators if DHCP Inform is received;
by andriys
Fri Feb 08, 2019 11:43 am
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11814

Re: v6.43.11 [stable] is released!

Well, we are getting a bit off-topic here... To be clear, I'm not saying that the documentation as it is now is perfect. You are right in that it may and should be improved in lots of rather reasonable ways. However complaining about the fasttrack page not telling about "lags when mangle activated" ...
by andriys
Fri Feb 08, 2019 10:57 am
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11814

Re: v6.43.11 [stable] is released!

This article doesn't have any mentions about lags when mangle activated. Should it? What you call "lags" are symptoms, not the problem itself. The main thing that article tells you is the following: Warning: Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will n...
by andriys
Fri Feb 08, 2019 8:37 am
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11814

Re: v6.43.11 [stable] is released!

Please read the documentation.
ok. where?
Here: https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack
by andriys
Thu Feb 07, 2019 8:24 pm
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11814

Re: v6.43.11 [stable] is released!

Disabling fasttrack helps.Hope Mikrotik fix it soon
This is not a bug and cannot be fixed. This is how fasttrack works. Please read the documentation.
by andriys
Thu Feb 07, 2019 7:24 am
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11814

Re: v6.43.11 [stable] is released!

i4ko, EIRP is not so much about the power as about the density of radiation, so for directional antennas the gain may easily be much higher than 1.
by andriys
Fri Feb 01, 2019 10:39 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33658

Re: v6.43.8 [stable] is released!

This is normal ? It is. Absolutely. You have simply added a rule to a custom (user-defined) chain named 'perouting' that you can now jump to using 'action=jump' rules. And, by the say, this is in no way version-specific, so in the future please refrain from posting such questions to version-specifi...
by andriys
Tue Jan 29, 2019 10:28 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 88709

Re: Winbox vulnerability: please upgrade

Darman, how do you think an update will know what socks entries are legitimate and what are not?
by andriys
Thu Jan 24, 2019 12:07 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33658

Re: v6.43.8 [stable] is released!

Mutator , in a previous post you wrote yourself that the problem is also reproducible on an earlier versions of RouterOS (6.42.x), so it is NOT a 6.43.8 specific regression. The release topics are meant for version-specific issues only. Also you have already reported the problem in another thread, ...
by andriys
Tue Jan 15, 2019 10:55 am
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 49
Views: 70319

Re: Winbox v3.18 released!

why dont have WinBox + MAC WinBox button?
That's probably because WinBox has neighbor discovery capability builtin.
by andriys
Mon Jan 14, 2019 9:01 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83735

Re: v6.44beta [testing] is released!

doush Nobody except you complains, which means it's either faulty hardware or a configuration specific issue. A couple of posts ago you said you are not willing to supply support@ with the info they asked you for. Being software developer myself, I can assure you this is a road to nowhere...
by andriys
Sat Jan 05, 2019 12:53 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33658

Re: v6.43.8 [stable] is released!

pranoy1083, the problem is likely in the queues themselves and not specific to this particular version. Please start a new topic for this and/or (better yet) report it to support@.
by andriys
Fri Jan 04, 2019 10:46 am
Forum: Announcements
Topic: Product comparison matrix
Replies: 30
Views: 4912

Re: Product comparison matrix

It would be useful if the matrix contains some information about the hardware-accelerated encryption support.
by andriys
Wed Jan 02, 2019 12:53 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33658

Re: v6.43.8 [stable] is released!

I get that. But the webfig torch NEVER shows more than the two lines to be seen in the screenshot, no matter what traffic is to be seen via winbox. Just tried it myself. Right after opening the Torch screen I can see the same two lines as shown on your screenshots, but after clicking on the "Start"...
by andriys
Wed Jan 02, 2019 12:14 am
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33658

Re: v6.43.8 [stable] is released!

roughly the same time.
I guess this likely is the point. Torch is a "right now" tool, not a "historical data" tool.
by andriys
Mon Dec 03, 2018 11:06 pm
Forum: Announcements
Topic: v6.43.7 [stable] is released!
Replies: 53
Views: 12243

Re: v6.43.7 [stable] is released!

Just wondering why two versions have been skipped? Never seen that before :-o
It has become a rather common situation lately.
The obvious reason might be the skipped releases not passing the QA.
by andriys
Tue Oct 23, 2018 12:25 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 22569

Re: v6.43.4 [stable] is released!

When I set comment for PPTP client, it reconnect ! New feature ? It has always been like that. Changing comment on any interface brings that interface down and then back up. PS. The next time you post to a release topic please make sure you are reporting a problems that is specific to (was introduc...
by andriys
Tue Oct 23, 2018 10:31 am
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 25991

Re: v6.42.9 [long-term] is released!

Any chance of 6.42.10 with the IP Traffic Flow NAT fixes ?
Can you provide more details (or a link) of what's broken, please?
by andriys
Thu Oct 18, 2018 4:25 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 22569

Re: v6.43.4 [stable] is released!

This IPsec bug still not fixed https://forum.mikrotik.com/viewtopic.php?f=2&t=136445 What is the purpose of writing this in all version-specific topics? This is clearly not a regression since the previous version, so please stop. Have you written to support, by the way? In case you have, did they a...
by andriys
Thu Oct 18, 2018 9:35 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] are released!

Ah, nice suggestion but, all my laptops are Pro type and I have real serial ports on them :-) The key here is that TTL serial and RS232 are somewhat different beasts- they differ at least in the voltage levels (while on the protocol level they must be compatible). You can easily damage TTL serial p...
by andriys
Tue Oct 16, 2018 11:00 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83735

Re: v6.44beta [testing] is released!

I really hope that the new iPhone Xs/XsMax 5GHz AC problem is resolved before the 6.44 production release. https://forum.mikrotik.com/viewtopic.php?f=7&t=139608&sid=c812125039cd5699bb02c1cae5c96b71 Reading through the topic you've linked to makes me think it is an iPhone's problem, not Mikrotik's o...
by andriys
Sat Oct 06, 2018 1:41 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] are released!

After upgrading to 6.43.2 from 6.42.7 you can no longer have multiple IPsec peers to the same destination IP but with different source addresses. This regression is said to be fixed in 6.44beta14. Please check the change log in the post here . And I'd expect this kind fix to be merged to 6.42.x lat...
by andriys
Thu Oct 04, 2018 1:00 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 25991

Re: v6.42.9 [long-term] is released!

... that the plaintext password file was not replaced/deleted ... Sure it was not. Do you read the release notes? What's new in 6.43 (2018-Sep-06 12:44): ... *) user - all passwords are now hashed and encrypted, plaintext passwords are kept for downgrade (will be removed in later upgrades) ;
by andriys
Thu Sep 27, 2018 12:14 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

The ROS is changing the actual MTU if I change the method, ... , but If a Mikrotik document doesnt write other (please link it for me if exists), It should work, but it doesnt. The IPIP wiki page says the default is 1500. Nothing is said about MTU being automatically/dynamically adjusted, so I assu...
by andriys
Wed Sep 26, 2018 7:46 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

It seems that bridge gets it's MAC automatically from the first port connected to it - dynamically changing this whenever the config change is made....
This is actually a documented behavior...
by andriys
Wed Sep 26, 2018 12:48 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

If I change the keying method from SHA1 to SHA256, the IPIPv6 reconnect and after thet the new TCP connections are broken, but ping works. What next now? Check if the MTU settings on your tunnel interfaces are correct. In case you rely on RouterOS to calculate it automatically try setting it to the...
by andriys
Tue Sep 25, 2018 10:10 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Rather then doing MSS clamping you'd better fix your firewall to allow PMTUD to function properly across your tunnel...
by andriys
Mon Sep 24, 2018 7:57 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Can you provide link to the documentation
Look at the very bottom of this wiki page (in the "Winbox" section).
by andriys
Mon Sep 24, 2018 7:24 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Current TX Power = 0dBm
Current TX power readings are not supported for 802.11ac-capable wireless cards. That's a known (and documented!) limitation that has always been there.
by andriys
Fri Sep 21, 2018 11:15 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

ssbaksa, what is in /tool profile?
by andriys
Thu Sep 20, 2018 9:42 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

bugfix-only/long-term named 'stable' instead?
I have a theory that they may want to support 6.40.x line (the last release branch before the bridge overhaul) for an extended period of time, hence the "long-term". This does not justify, however, renaming "current" to "stable".
by andriys
Thu Sep 20, 2018 5:43 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] and v6.43.2 [stable] is released!

Perhaps "current" really was the correct name.
Indeed!
by andriys
Thu Sep 20, 2018 12:58 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 88709

Re: Winbox vulnerability: please upgrade

No it does not, unless you scheduled automatic restarts. It's getting a bit off-topic, but still. The default behavior of Windows 10 is to always install updates automatically as soon as they become available, and then force automatic reboot somewhen outside of a (somewhat) configurable "activity p...
by andriys
Thu Sep 20, 2018 11:16 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 88709

Re: Winbox vulnerability: please upgrade

Even your "beloved" Microsoft does not force reboots.
In Windows 10 it does, actually.
by andriys
Tue Sep 18, 2018 6:35 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 38966

Re: v6.43.1 [stable] is released!

Where is bugreport page or bugtracker?
Write an email to support@mikrotik.com
by andriys
Tue Sep 18, 2018 10:39 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83735

Re: v6.44beta [testing] is released!

!) cloud - added command "/system backup cloud" for backup storing on cloud (CLI only);

Two questions:
  • Can this cloud backup be encrypted?
  • Since Mikrotik cloud services are bound to the device's serial number, is there any way to retrieve a backup when the original device is lost?
by andriys
Tue Sep 18, 2018 10:31 am
Forum: Announcements
Topic: Newsletter #84
Replies: 47
Views: 12846

Re: Newsletter #84

I want to confirm if Mikrotik has enabled in the RouterOS to leverage the HW encryption / decryption for AES algorithm used in IPSec Acceleration also applied to OpenVPN Acceleration (aside the issue that only TCP is supported and is slower). What's the point in asking the same question again and a...
by andriys
Wed Sep 12, 2018 12:26 pm
Forum: Announcements
Topic: Newsletter #84
Replies: 47
Views: 12846

Re: Newsletter #84

I'll bet their market share in the WISP industry today is much smaller then it was 10 years ago.
There are lots of other markets other then WISP...
by andriys
Tue Sep 11, 2018 10:12 am
Forum: Announcements
Topic: Newsletter #84
Replies: 47
Views: 12846

Re: Newsletter #84

Hardware Acceleration for AES (OpenVPN protocol)?
As I understand, RouterOS only supports in-kernel HW crypto acceleration, which means it works for IPsec phase2 only. OpenVPN is currently out of luck no matter what board you have.
by andriys
Fri Aug 31, 2018 7:02 pm
Forum: Announcements
Topic: SwOS version 2.8 released!
Replies: 37
Views: 12945

Re: SwOS version 2.8 released!

I have been using these switches
What switches? Please specify exact model(s).
Some small switches (like the RB260 series) are known to have a rather weak CPU which can easily be maxed out when being constantly monitored via ICMP.
by andriys
Mon Jun 18, 2018 12:39 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77477

Re: VPNfilter official statement

What are you talking about?
v6.40.8 includes patches to fix known vulnerabilities including latest winbox port vulnerability.
We are talking about this: viewtopic.php?t=121039#p595087
by andriys
Mon Jun 18, 2018 10:08 am
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77477

Re: VPNfilter official statement

No, it is not.
by andriys
Mon Jun 18, 2018 9:46 am
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77477

Re: VPNfilter official statement

Even if you are right with this one it is still vulnerability which is known and is not applied in current/bugfix. Well, the fact that the previous versions of WinBox (even in secure mode) were susceptible to MITM attacks was well-known for years. Many users were concerned and raised questions here...
by andriys
Sun Jun 17, 2018 2:41 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77477

Re: VPNfilter official statement

But that was done because there were bugs that allowed the retrieval of the unencrypted passwords (and thus the quick retrieval of valid user/password combinations as shown) That's correct. And I must admit this change had to be implemented years ago without waiting for bugs like this one to pop up...
by andriys
Sun Jun 17, 2018 1:50 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77477

Re: VPNfilter official statement

in 6.43rc17, something was changed in winbox service (thats why every RC since then has to use Winbox 3.14) to prevent MITM attack. No. And the purpose of this change has been explained here on the forum somewhere, and it has nothing with preventing MITM attacks. RouterOS used to store local user c...
by andriys
Sun Jun 17, 2018 1:41 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17132

Re: v6.40.8 [bugfix] is released!

I decided to buy another cloud core and it continues with the same problem says:
Have you tried writing to support@ ? Just curious.
by andriys
Fri Jun 15, 2018 2:31 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17132

Re: v6.40.8 [bugfix] is released!

Why the router tries to connect to ip 224.0.0.22?
This is a multicast address that has something to do with IGMPv3. May be related to IGMP proxy or UPnP.
by andriys
Thu May 24, 2018 11:26 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 113233

Re: v6.43rc [release candidate] is released!

Ive been doing RCs for 8+ years. For 7+ years the RCs were as stable as the stable version. You are exaggerating "a bit". Mikrotik started releasing public RCs since mid-2015 (since v6.32 or 6.31, but definitely not earlier), which means you could not have been using RCs for more then 3 years. And ...
by andriys
Fri May 11, 2018 3:38 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17132

Re: v6.40.8 [bugfix] is released!

Do you respond to requests from the forum or bugfix create a new bug ?
This is a user forum. Mikrotik staff responds on forum occasionally, but in general all (potential) bugs should be reported to support@ via email.
by andriys
Sun Apr 22, 2018 7:38 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 113233

Re: v6.43rc [release candidate] is released!

msatter , another solution to your task would be introducing a separate custom chain for your dynamic rules, then jumping to this custom chain at the point where you currently insert your dynamic rules. In the script you then simply add your dynamic rules to the top of your custom chain not worryin...
by andriys
Thu Apr 19, 2018 9:57 pm
Forum: Wireless Networking
Topic: 60GHz multipoint, share your experience
Replies: 36
Views: 12193

Re: 60GHz multipoint, share your experience

Let's see how many client we can hook up.
Please note that it is currently limited to only 8 clients at a time. See page 16 of the 60G presentation from the MUM in Berlin.
by andriys
Thu Apr 12, 2018 3:02 pm
Forum: General
Topic: hAP ac² LAN->WiFi 5GHz performance issue.
Replies: 23
Views: 5281

Re: hAP ac² LAN->WiFi 5GHz performance issue.

Any official answer? I'm a bit tired repeating this again and again, but... This is a user forum. Period. Mikrotik staff may occasionally answer some questions here, but they do not have to. If you need an "official answer" you should write you question to support@. I'm afraid that's the only "offi...
by andriys
Wed Apr 11, 2018 12:17 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 61
Views: 21772

Re: Winbox 3.13 released!

As for scrolling with the mouse/trackpad within managed routers list - we can not reproduce such problem locally.
As Chupaka mentioned above
In Windows 10, the problem appears with disabled "Settings -> Devices -> Mouse -> Scroll inactive windows when I hover over them".
by andriys
Tue Apr 10, 2018 3:25 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 61
Views: 21772

Re: Winbox 3.13 released!

I, personally, find focus jumping to the Password field very handy.
Also I've just checked, scrolling works for me just fine with both mouse scroll-wheel and two-finger scrolling on touchpad no matter what field has focus (Windows 10 pro).
by andriys
Sun Mar 25, 2018 3:04 pm
Forum: Announcements
Topic: MikroTik News February 2018 (Issue #80)
Replies: 65
Views: 17056

Re: MikroTik News February 2018 (Issue #80)

I suspect MT could put out a four-port weatherproof POE switch at nearly the same price point as UBNT. PowerBox Pro is essentially the RB960PGS (hEX PoE) board in an outdoor/weatherproof case. And the former is $20 more expensive ($99) than the latter ($79). Now it appears that a switch similar to ...
by andriys
Tue Jan 16, 2018 5:57 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 97119

Re: v6.42rc [release candidate] is released!

Updated: "*) bridge - fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;" upload speed through router is still 500 Mbit/s slower when STP/RSTP is activated on the Bridge That's as expected since hw-offloaded STP/RSTP is not supported on Realtek, Mediatek and ICPl...
by andriys
Sun Jan 14, 2018 6:51 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 97119

Re: v6.42rc [release candidate] is released!

*) tile - added "aes-ctr" hardware acceleration support;

Can someone explain to me?
https://wiki.mikrotik.com/wiki/Manual:I ... encryption
by andriys
Sun Jan 14, 2018 12:27 pm
Forum: Announcements
Topic: Securing your device is important
Replies: 32
Views: 11185

Re: Securing your device is important

Is mikrotik affected by Spectre and meltdown bugs? To my understanding, RouterOS x86 and CHR are definitely affected, but since you cannot run your own binaries there they cannot be exploited (unless there are other vulnerabilities that allow one to execute arbitrary code on a router). ARM devices ...
by andriys
Mon Jan 01, 2018 11:23 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77777

Re: v6.41 [current]

Traffic capture on pe03 shows TCP SYN packet arriving with TCP options where MSS is set as 1312 bytes. Replies aren't visible on this router as they are MPLS switched to br01. Reviewing a packet capture on interface facing 'customer' on br01 or upstream interface on ccr1 shows pe03 sending back an ...
by andriys
Fri Dec 29, 2017 10:14 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 56
Views: 12838

Re: RB3011 port flopping - bad design

Does anyone know any other devices (routerboards or not) using this specific switch chip? I wonder if we can independently reproduce Mikrotik's claims. I have listed other RouterBOARDs where the same switch chip is used several posts above. They seem to be: hAP ac, OmniTIK 5 ac (including OmniTIK 5...
by andriys
Fri Dec 29, 2017 7:53 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77777

Re: v6.41 [current]

Hi, anyone any idea why the WebFig of 6.41 behaves different on two identical boards (RouterBOARD 952Ui-5ac2nD)?
Very likely a browser cache issue. Have you tried clearing the cache and/or using another browser.
by andriys
Thu Dec 28, 2017 1:55 pm
Forum: SwOS
Topic: Install SwOS on RouterOS [SOLVED]
Replies: 4
Views: 4398

Re: Install SwOS on RouterOS [SOLVED]

It is documented here: https://i.mt.lv/routerboard/files/CRS32 ... S-qgv3.pdf.
And printed version of this document should have been shipped along with your router (included in the box).
by andriys
Wed Dec 27, 2017 8:19 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77777

Re: v6.41 [current]

Is this intended? Shouldn't hw-offload trigger for all of the eligible bridges and not just one at a given time?
It is likely a hardware limitation. It has never been possible to set more then one port as a master-port on any device with a "small" switch-chip on board.
by andriys
Tue Dec 26, 2017 10:48 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 80
Views: 15624

Re: SXTsq 5 ac. WTF? It doesn't work.

pretty much useles untill You compare it to other mikrotik hardware results. And YES it reflects CPU efficiency utilization by ROS and that is what I wanted to know. It reflects CPU performance under a particular load- in this case bandwidth test application. Profile for other types of load may dif...
by andriys
Tue Dec 26, 2017 10:25 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 56
Views: 12838

Re: RB3011 port flopping - bad design

I wonder if other RouterBOARD models with the same switch-chip model (QCA8337) suffer from the same problem. According to this wiki page the models in question are: hAP ac, OmniTIK 5 ac (including OmniTIK 5 ac PoE), the old hEX model (RB750Gr2), hEX PoE and PowerBox Pro.
by andriys
Tue Dec 26, 2017 9:56 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 11383

Re: Band Steering implementation?

coverage at that power level you suggest is very poor Do you remember that wireless is a bidirectional thing? I mean not only your clients should hear your access point, but you access point should hear you clients too. And so "at that power level" you actually get the best coverage possible for or...
by andriys
Tue Dec 26, 2017 6:36 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 80
Views: 15624

Re: SXTsq 5 ac. WTF? It doesn't work.

just run TCP bandwitch test to 127.0.0.1.
I'm wondering if you understand that this way you test how fast the btest itself works. And the results of such "test" has nothing to do with how fast your router can forward traffic, i.e. pretty much useless...
by andriys
Mon Dec 25, 2017 7:41 pm
Forum: Beginner Basics
Topic: Logs missing after router reboot
Replies: 2
Views: 1578

Re: Logs missing after router reboot

Your device is equipped with a so called "SPI flash", which means what you see in the /file menu is actually stored in RAM and is lost any time you reboot your router and only content of the /flash directory is persisted to permanent storage. A quote from here : Warning: If device has a directory na...
by andriys
Sun Dec 24, 2017 12:21 pm
Forum: RouterBOARD hardware
Topic: Hardware Information
Replies: 4
Views: 747

Re: Hardware Information

SXT Disc Lite5.
There's no such thing. There are SXT Lite5 (without "DISK" in the name) and DISK Lite5 (without "SXT" in the name) and those are two completely distinct products.
by andriys
Sun Dec 24, 2017 10:18 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 622

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

Yes, you can use external RADIUS server- that should work just fine (and UserManager is in fact just yet another RADIUS server, running directly atop RouterOS and with management interface built-in). You should also be able to create some local user accounts. There's a whole bunch of documentation h...
by andriys
Sun Dec 24, 2017 10:04 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 22
Views: 7442

Re: Wireless Data Rates - Optimizing AP

On a second thought, I wouldn't recommend disabling the higher data rates. Using lower data rates means using more air time, which in turn means more competition for air time with neighbor networks and worse user experience for both your and your neighbors' networks. This considerations, however, mi...
by andriys
Sun Dec 24, 2017 9:58 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 622

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

will i be able to create user logins??
That depends. One important thing to note is that UserManager is not supported on RB3011 (nor any other ARM-base RouterBOARD) yet.
by andriys
Sun Dec 24, 2017 9:52 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 22
Views: 7442

Re: Wireless Data Rates - Optimizing AP

Are your wireless clients allowed to talk to each other?
by andriys
Sun Dec 24, 2017 9:47 am
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 11383

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db. Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet. thats...
by andriys
Sat Dec 23, 2017 11:28 pm
Forum: Beginner Basics
Topic: CAPSMAN Advice
Replies: 2
Views: 377

Re: CAPSMAN Advice

I have not been able to understand it by reading the material and watching the videos. What materials have you read? The official documentation is here , and is rather detailed. Have you read it? Any specific questions? I have just one home network. One router has DHCP and USERMAN running and in AP...
by andriys
Sat Dec 23, 2017 4:28 pm
Forum: Virtualization
Topic: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]
Replies: 6
Views: 2342

Re: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]

or at least that should have been stated in the wiki page or product page A quote from the wiki ( link ): Currently MetaRouter can be used on * RB400, RB700 series except models with SPI flash , RB900 series except models with SPI flash , RB2011 boards * Listed PPC boards: RB1000, RB1100, RB1100AH ...
by andriys
Sat Dec 23, 2017 4:19 pm
Forum: Beginner Basics
Topic: Hi there, I have a question, Please help
Replies: 1
Views: 252

Re: Hi there, I have a question, Please help

why RouterOS needs to shutdown by software first while other routers not, even routers with OPENWRT or other powerful firmware, we just unplug the power if we what to switch them off. You don't really need to do that. If you just power off your device when you need to you will see an annoying messa...
by andriys
Fri Dec 22, 2017 8:23 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 11383

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db.
Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet.
by andriys
Fri Dec 22, 2017 8:16 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 11383

Re: Band Steering implementation?

in some cases you need to lower 2,4ghz to levels as low as 5dbm, sacrificing too much coverage, only suitable for high density setups
From my experience, the best working multi-AP setups is the ones where 2G coverage is as close to the 5G coverage as possible for each AP in the setup.
by andriys
Wed Dec 20, 2017 7:15 pm
Forum: Announcements
Topic: Newsletter 79 (MUM EUROPE ANNOUNCED!)
Replies: 33
Views: 12374

Re: Newsletter 79 (MUM EUROPE ANNOUNCED!)

Since the M33G has lots of storage options and quite some "horsepower", will there be a dude-server package for the board? PDF says this board features a double-core 880MHz MediaTek CPU, so it is very likely the same ARM that powers hEXr3, for which TheDude server is already available. Still it'll ...
by andriys
Wed Dec 20, 2017 1:47 pm
Forum: SwOS
Topic: What is the use of 260GSP ?
Replies: 16
Views: 7419

Re: What is the use of 260GSP ?

Bought Mikrotik 260GSP to power up my HikVision DS-2CD2020-I Camera.
...
Why the hell it doesn't work with POE switch?
Your camera requires 802.3af type of PoE, whereas RB260GSP only supports Passive PoE.
by andriys
Mon Dec 18, 2017 9:57 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 11383

Re: Band Steering implementation?

rogers3b2, what tx-power levels do you use? Making tx-power on 2.4G band lower then on 5G band may help a lot.
by andriys
Mon Dec 18, 2017 9:15 pm
Forum: Beginner Basics
Topic: Confused about QuickSet [SOLVED]
Replies: 3
Views: 1389

Re: Confused about QuickSet [SOLVED]

You can safely switch to full-featured configuration tools after using QuickSet, but not the other way round. I.e. there's nothing wrong in using QuickSet to do the initial configuration and then switching to a full-featured WebFig/WinBox/Console. However once you do any kind of configuration change...
by andriys
Sat Dec 16, 2017 9:41 pm
Forum: RouterBOARD hardware
Topic: FastTrack implementation question [SOLVED]
Replies: 6
Views: 1102

Re: FastTrack implementation question [SOLVED]

My question: can I enable FastTrack on download side only, and have full processing on the upload side? To my knowledge, no, you cannot. What board do you use? 240/30 does not sound like too much, there are inexpensive boards now available that can cope with that amount of traffic with ease even wi...
by andriys
Sat Dec 16, 2017 1:31 pm
Forum: General
Topic: Insecure VPN
Replies: 3
Views: 386

Re: Insecure VPN

- look in IPsec->Peers and IPsec->Policies what it created and write it down - remove the IPsec passphrase from the GRE tunnel - manually create the same Peer and Policy as you have seen before (and have now disappeared), changing what you want. There's a bit simple way to proceed. Double-click on ...
by andriys
Fri Dec 15, 2017 6:21 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) wireless - added support for CHARGEABLE_USER_ID in EAP Accounting;
What does this feature do?
Implements rfc4372, I guess.
by andriys
Wed Dec 06, 2017 5:23 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) capsman - use "adaptive-noise-immunity" value from CAP local configuration; I'd like to know a bit more about this change. I believe this is similar to how antenna gain setting is being handled. Simply set the desired value of the adaptive-noise-immunity option in your radio interface configurat...
by andriys
Sun Nov 26, 2017 10:35 am
Forum: Virtualization
Topic: CHR suggestions for new functionality
Replies: 157
Views: 32342

Re: CHR suggestions for new functionality

Please add Metarouter
VM inside VM? Are you serious?
by andriys
Sat Nov 04, 2017 11:49 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

Has the routerboot firmware version naming changed in 6.41rc? Yes, it has. It happened in 6.41rc47 (see here ): !) routerboot - RouterBOOT version numbering system merged with RouterOS; If routerboot firmware now follows the ROS version, I would very much like it to automatically get upgraded too d...
by andriys
Fri Oct 20, 2017 1:18 pm
Forum: General
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 26244

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

The original problem was not related to MSS and/or packet fragmentation. The usual stream of non-fragmented TCP packets was also affected.
by andriys
Fri Oct 20, 2017 1:14 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

It does actually ... the attacker is replaying retransmissions of message 3 of the 4-way handshake ... so without this re-transmissions to replay the attack would not be possible ... Ok, got it. You're absolutely right here. Still none of the (even patched) APs now do what you suggested to mitigate...
by andriys
Fri Oct 20, 2017 10:52 am
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

Apparently AP can mitigate this by "bending" the standard 4-way handshake and instead of re-transmitting message 3...
It does not re-transmit anything during attack. It's an attacker who replays the message 3 that was originally transmitted by the real AP.
by andriys
Thu Oct 19, 2017 10:27 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

The demo from the researcher clearly indicates a man-in-the-middle attack. It is shown in the video on his website around 1:54 https://youtu.be/Oh4WURZoR98 Hence, the client does connect to the malicious AP. You seem to claim the client does not need to connect to the fake AP? You should have also ...
by andriys
Thu Oct 19, 2017 1:22 pm
Forum: General
Topic: IPSec NAT translation?
Replies: 6
Views: 1188

Re: IPSec NAT translation?

How are the negotiated? Are they ''tried'' in order - like firewall rules and first which applies, is negotiated, or is it some other logic...? No. First, please note that what Cisco calls "iskmp policy" is, in fact, a phase1 proposal. Initiator sends a list of proposals it is willing to support, a...
by andriys
Thu Oct 19, 2017 12:40 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

Or does Management Protection already solve the problem (by not allowing the client, if Management Protection is "required", to connect to a "fake" AP not using it)? According to the documentation , the management frame protection has nothing to do with the initial 4-way handshake, and thus does no...
by andriys
Thu Oct 19, 2017 10:44 am
Forum: Forwarding Protocols
Topic: Change src ip address for IGMP packets
Replies: 1
Views: 373

Re: Change src ip address for IGMP packets

You should never NAT IGMP traffic, use IGMP Proxy instead.
by andriys
Thu Oct 19, 2017 10:39 am
Forum: Wireless Networking
Topic: AC WiFi requires local forwarding
Replies: 4
Views: 625

Re: AC WiFi requires local forwarding

I'm getting a decent performance with eight ac-capabale CAPs, CCR1009 as CAPsMAN and local forwarding off. Cannot tell you the exact numbers, but they are definitely much higher then 20Mbit/s (the last time I did some tests, I could easily saturate my two ISP links, 50x50 each, with a couple of wire...
by andriys
Thu Oct 19, 2017 10:30 am
Forum: General
Topic: Chromebook and Winbox
Replies: 2
Views: 1083

Re: Chromebook and Winbox

Have you seen Tik-App? Not a WinBox really, but still.
by andriys
Thu Oct 19, 2017 10:25 am
Forum: General
Topic: Router OS , KRACK, and HTTPS
Replies: 1
Views: 737

Re: Router OS , KRACK, and HTTPS

You can already generate a self-sighed certificate using the RouterOS itself.
by andriys
Thu Oct 19, 2017 10:13 am
Forum: General
Topic: IPSec NAT translation?
Replies: 6
Views: 1188

Re: IPSec NAT translation?

I must admit I don't fully understand what the difference between action=src-nat and netmap... :( netmap maps IP addresses 1:1 and never changes port numbers, whereas src-nat may change source port as well. I would like to ask for a little more help. I don't fully understand cisco sintaks. Please c...
by andriys
Wed Oct 18, 2017 8:54 pm
Forum: Wireless Networking
Topic: CAPsMAN over L2 or L3 ?
Replies: 2
Views: 621

Re: CAPsMAN over L2 or L3 ?

L2 must be better (more efficient).
L3 should only be required when your CAPs are not in the same broadcast domain with the CAPsMAN.
by andriys
Wed Oct 18, 2017 8:50 pm
Forum: Wireless Networking
Topic: capsman antenna gain and commands
Replies: 2
Views: 647

Re: capsman antenna gain and commands

i have to setup antenna gain to 40 caps one by one because i need less transmit power. Why can't you simply specify the tx-power instead of tweaking the antenna gain in this case? You can control tx-power from the CAPsMAN (that is a property of channel). 2. would be nice to apply commands from caps...
by andriys
Wed Oct 18, 2017 8:46 pm
Forum: General
Topic: IPSec NAT translation?
Replies: 6
Views: 1188

Re: IPSec NAT translation?

ip firewall nat add src-address=192.168.1.0/24 dst-address=10.3.248.82 action=src-nat to-addresses=10.99.62.0/24 Will every ip from 192.168... subnet be src-nated from 10.99.62.0/24 pool, or I have to make dummy bridge and put on all 254 ip addresses from 10.99.. subnet and than make 254 rules in n...
by andriys
Wed Oct 18, 2017 8:41 pm
Forum: Wireless Networking
Topic: RB hEX PoE and wAP/cAP access points
Replies: 2
Views: 497

Re: RB hEX PoE and wAP/cAP access points

wAP and cAP accept both passive and 802.3af/at, and can be powered by hEX PoE, RB260GSP, etc.
by andriys
Wed Oct 18, 2017 8:34 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS NOT affected by WPA2 vulnerabilities

If you can get an unpatched client to connect to the attackers rogue AP, the attack remains possible. However, can fix the handshake vulnerability at the AP even if the client is not patched. It's good pratice to do that. So a vulnerable client will not make a vulnerable handshake if an AP is patch...
by andriys
Wed Oct 18, 2017 11:07 am
Forum: General
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 26244

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

Unless I'm blind I didn't see it mentioned in the system -> packages brief release notes.
It was mentioned in the changelog for the original 6.39 release, so should be fixed in the latest 6.39 release as well.
by andriys
Tue Oct 17, 2017 11:40 pm
Forum: Wireless Networking
Topic: Extend wifi coverage of RB951G-2HnD
Replies: 9
Views: 3849

Re: Extend wifi coverage of RB951G-2HnD

So I think I start to get where this is going, using a cAP lite that I setup by itself, not being able to use CAPsMAN, will the clients still be able to use all of my network and see all the shares/clients no matter what AP they are connected too? Yes. Any suggestions to guides how to set it up? WD...
by andriys
Tue Oct 17, 2017 9:33 pm
Forum: Beginner Basics
Topic: over the bridge to my TV
Replies: 3
Views: 441

Re: over the bridge to my TV

In wireless mode if I choose "station bridge" it will not connect to my tp-link by wireless. station-bridge can only be used when connecting to another Mikrotik AP. Since you are connecting to some TP-Link device, you have to use either station-pseudobridge or station-pseudobridge-clone . If you on...
by andriys
Tue Oct 17, 2017 9:24 pm
Forum: Wireless Networking
Topic: Extend wifi coverage of RB951G-2HnD
Replies: 9
Views: 3849

Re: Extend wifi coverage of RB951G-2HnD

can I do the intial setup over cable and then put it on the wall or do it need to be connected all the time with cable? You cannot use CAPsMAN controlled wireless interface to also connect CAP to CAPsMAN, which means they have to be connected using cable all the time. is the signal strength to stro...
by andriys
Tue Oct 17, 2017 4:43 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 104890

Re: RouterOS NOT affected by WPA2 vulnerabilities

You can fix the 4-way handshake issue either at the client side or at the Access Point side. ... So it's good practice to also fix it at the AP side:-).
Wrong!!! KRACK is a pure client-side attack. Patching AP will give you nothing.
by andriys
Tue Oct 17, 2017 2:40 pm
Forum: Wireless Networking
Topic: Extend wifi coverage of RB951G-2HnD
Replies: 9
Views: 3849

Re: Extend wifi coverage of RB951G-2HnD

I want extend my wifi coverage si this the right way to go? Yes I want one SSID in my house, the clients or my house guests should only connect and see one network, will this work? Yes I want to have only one local network and I want to have access to all my devices no matter if they are connected ...
by andriys
Tue Oct 17, 2017 12:22 pm
Forum: General
Topic: Some Web Pages Not Opening in Mikrotik Routers
Replies: 3
Views: 587

Re: Some Web Pages Not Opening in Mikrotik Routers

That is still likely a PMTUD problem. If you are sure you do not drop anything that should not be dropped, than someone else must be doing that for you. You appear to use MSS-clamping on your Cisco, so try configuring the same on Mikrotik (either using mangle or by setting change-tcp-mss property to...
by andriys
Tue Oct 17, 2017 12:10 pm
Forum: Wireless Networking
Topic: Any news of WPA2 Key Reinstallation Attacks (KRACK) mitigation?
Replies: 1
Views: 449

Re: Any news of WPA2 Key Reinstallation Attacks (KRACK) mitigation?

Yet another one who does not bother reading/searching the forum before posting...

viewtopic.php?f=21&t=126695
by andriys
Tue Oct 17, 2017 12:07 pm
Forum: General
Topic: Some Web Pages Not Opening in Mikrotik Routers
Replies: 3
Views: 587

Re: Some Web Pages Not Opening in Mikrotik Routers

This is likely a PMTUD problem.
Check you firewall filter rules, make sure you do not drop or reject all ICMP packets blindly.
by andriys
Tue Oct 17, 2017 12:03 pm
Forum: Beginner Basics
Topic: Intermittent Slow Internet
Replies: 1
Views: 406

Re: Intermittent Slow Internet

Take a look at /ip traffic-flow (NetFlow export), /ip accounting , /tool graphing interface and /tool graphing queue . One of these should fit your needs. More info is on the wiki: https://wiki.mikrotik.com/wiki/Manual:IP/Traffic_Flow https://wiki.mikrotik.com/wiki/Manual:IP/Accounting https://wiki....
by andriys
Tue Oct 17, 2017 10:26 am
Forum: RouterBOARD hardware
Topic: passive POE standard?
Replies: 5
Views: 1894

Re: passive POE standard?

These rb951g-2hnd are not af/at standard and I suspected only 100Mbit?
RB951G only supports Passive PoE (no af/at), but it does support 1G links with PoE.
by andriys
Tue Oct 17, 2017 9:22 am
Forum: General
Topic: What MikroTik devices are sold with factory pre-installed heatsinks?
Replies: 7
Views: 838

Re: What MikroTik devices are sold with factory pre-installed heatsinks?

I want to know, if MikroTik devices are protected from overheating and possible CPU throttling. Mikrotik specifies what the ambient temperature should be for each device model to work reliably (and it appears to be up to +70°C for most devices). You can find this information on the official product...
by andriys
Tue Oct 17, 2017 9:01 am
Forum: General
Topic: On Boot load last Backup [SOLVED]
Replies: 3
Views: 522

Re: On Boot load last Backup [SOLVED]

Safe mode appears to be what you need.
Please note that though the link I provided talks mostly about console, there's also a "Safe mode" toolbar button in WinBox.
by andriys
Tue Oct 17, 2017 8:55 am
Forum: General
Topic: Русскоязычный раздел форума.
Replies: 10
Views: 6006

Re: Русскоязычный раздел форума.

с DIR-615 такого не было. В какую сторону копать? This is an International forum, so please post here in English only. Also you message/question is off-topic in this thread, so I suggest you starting a new thread (in English!) instead. Thanks. P.S. Копать в сторону WiFi. Работающий по стандартам Wi...
by andriys
Mon Oct 16, 2017 11:21 pm
Forum: Beginner Basics
Topic: Separate WAN (internet) for guest wifi
Replies: 2
Views: 606

Re: Separate WAN (internet) for guest wifi

You can do everything you mentioned with a single Mikrotik device.
by andriys
Mon Oct 16, 2017 11:17 pm
Forum: Announcements
Topic: v6.39.3 [bugfix] is released!
Replies: 47
Views: 16258

Re: v6.39.3 [bugfix] is released!

tile - fixed IPSec hardware acceleration out-of-order packet problem, significantly improved performance
is this fix present in this bugfix version?
This has been fixed in the initial 6.39 release, so this particular release should be absolutely fine/safe to use on tile with HW-accelerated IPsec.
by andriys
Mon Oct 16, 2017 8:19 pm
Forum: Wireless Networking
Topic: Serious Emergent Vulnerability (KRACK)
Replies: 1
Views: 556

Re: Serious Emergent Vulnerability (KRACK)

And I'm wondering if it's that difficult to search the forum before posting...
viewtopic.php?f=21&t=126695
by andriys
Mon Oct 16, 2017 3:44 pm
Forum: Beginner Basics
Topic: RouterOS installation corrupt and cannot reïnstall
Replies: 5
Views: 634

Re: RouterOS installation corrupt and cannot reïnstall

I have read somewhere that export might cause problems when you have Hotspot or UserMan packages installed, is this still the case? I have never heard of either HotSpot or User Manager causing any problems with export. Though please take into account that /export only exports the configuration of y...
by andriys
Mon Oct 16, 2017 3:26 pm
Forum: Wireless Networking
Topic: Need WEP encryption mode!
Replies: 2
Views: 406

Re: Need WEP encryption mode!

Check out the manual: https://wiki.mikrotik.com/wiki/Manual:I ... properties

However, since nowadays WEP-protected networks are virtually no different than open networks, I'm kinda curious what do you need it for?
by andriys
Mon Oct 16, 2017 3:13 pm
Forum: Beginner Basics
Topic: RouterOS installation corrupt and cannot reïnstall
Replies: 5
Views: 634

Re: RouterOS installation corrupt and cannot reïnstall

First, make sure you really reset your router to factory defaults. Either use /system reset-configuration menu in case you can still connect to your router, or learn how to use the reset button properly: https://wiki.mikrotik.com/wiki/Manual:Reset https://wiki.mikrotik.com/wiki/Manual:Reset_button I...
by andriys
Mon Oct 16, 2017 3:02 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

when v6.41rc will be as "current" ? We bought 2 x CRS317-1G-16S+RM and couldn't set up harware vlan via winbox. Based on experience with some previous RouterOS versions, I'd say that hitting the Current update channel and receiving WinBox support for some options are two unrelated things. It's poss...
by andriys
Fri Oct 13, 2017 1:06 pm
Forum: RouterBOARD hardware
Topic: CRS210-8G-2S+IN PoE IN?
Replies: 3
Views: 605

Re: CRS210-8G-2S+IN PoE IN?

A cross-over cable may be required. Please check the compatibility matrix out.
by andriys
Fri Oct 13, 2017 7:54 am
Forum: General
Topic: Disable reset Button
Replies: 1
Views: 1398

Re: Disable reset Button

Previously you could do with this command /system routerboard settings set enable-jumper-reset=no No. Reset button and reset jumper are two different things. It has never been possible to disable the reset button. Have a look at Protected RouterBOOT (and also search the forum for the same). Dependi...
by andriys
Thu Oct 12, 2017 7:00 am
Forum: Wireless Networking
Topic: unlock frequency
Replies: 2
Views: 843

Re: unlock frequency

This limitation is in hardware and has nothing to do with license. It can not be removed/unlocked. Your only option is to buy another device.
by andriys
Wed Oct 11, 2017 11:09 pm
Forum: Beginner Basics
Topic: forward chain: no packets go through [SOLVED]
Replies: 10
Views: 1031

Re: forward chain: no packets go through [SOLVED]

Please post you requirements and current configuration (type /export in the command line).
Also mention what device you have and describe your performance expectations.
by andriys
Wed Oct 11, 2017 7:21 pm
Forum: Beginner Basics
Topic: forward chain: no packets go through [SOLVED]
Replies: 10
Views: 1031

Re: forward chain: no packets go through [SOLVED]

No packets go through the forward chain.
What makes you think so?
by andriys
Wed Oct 11, 2017 7:17 pm
Forum: General
Topic: Winbox cannot connect to mac-address
Replies: 3
Views: 2507

Re: Winbox cannot connect to mac-address

Yes. Check the /tool mac-server mac-winbox menu. You can disable/enable it there for the interfaces you need mac-server to respond on.
by andriys
Wed Oct 11, 2017 6:56 pm
Forum: General
Topic: Winbox cannot connect to mac-address
Replies: 3
Views: 2507

Re: Winbox cannot connect to mac-address

Should it? Do you have MAC-WinBox service enabled on the port you are trying to connect to?
by andriys
Wed Oct 11, 2017 6:52 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

Opposite, inject a route to 8.8.8.8 into a dynamic protocol running on someones environment that relies on this feature. It'll toggle the interface to WAN, apply security policies, likely dropping all traffic until detect-interface flaps back to LAN. Then it flaps to WAN when it relearns the route ...
by andriys
Wed Oct 11, 2017 6:41 pm
Forum: Beginner Basics
Topic: why ipv4-fasttrack-active set to no ?
Replies: 9
Views: 1895

Re: why ipv4-fasttrack-active set to no ?

Shall I understand that this function is not yet operational ? No, you should not. Fasttrack and FastPath work fine, and they are awesome. Most people complaining about fasttrack simply do not understand what it is, and what its limitations are (and then, for instance, complain that mangle or queue...
by andriys
Wed Oct 11, 2017 3:49 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123507

Re: v6.41rc [release candidate] is released! New bridge implementation!

Is it just cosmetic (ie: " this interface is 'WAN' just FYI ") or is it actually used somewhere (ie: in firewall rules as an interface list) ? My understanding is it will populate the interface lists you specify with the actual interfaces. Those lists can then be used in firewall filter, NAT, etc. ...
by andriys
Wed Oct 11, 2017 9:25 am
Forum: General
Topic: IPsec Performance
Replies: 16
Views: 9498

Re: IPsec Performance

Can it possibly be an MTU/fragmentation issue? Just guessing.
by andriys
Wed Oct 11, 2017 9:11 am
Forum: Beginner Basics
Topic: Can’t figure out ICMPv6 RAs on a residential gateway [SOLVED]
Replies: 1
Views: 275

Re: Can’t figure out ICMPv6 RAs on a residential gateway [SOLVED]

My ISP delegates /64-prefixed IPv6 address through router advertisements (RA).
...
I’m still not sure how this is supposed to work.
RA is not a prefix delegation technique. RA allows you to use IPv6 on your router only, not in your LAN. Ask you ISP for a true PD support.
by andriys
Tue Oct 10, 2017 6:48 pm
Forum: SwOS
Topic: TO DO List new version SW-OS please
Replies: 1
Views: 727

Re: TO DO List new version SW-OS please

On system menu, can you take when i put IP address, give MASK and GATEWAY ? I can't monitor the switch OS if my monitoring Workstation is another network. it's a small joke and no professionnal i think... You should be able to connect to your switch from anywhere you want, unless you use asymmetric...