Community discussions

Search found 1006 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 21
by andriys
Thu May 24, 2018 11:26 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 177
Views: 21814

Re: v6.43rc [release candidate] is released!

Ive been doing RCs for 8+ years. For 7+ years the RCs were as stable as the stable version. You are exaggerating "a bit". Mikrotik started releasing public RCs since mid-2015 (since v6.32 or 6.31, but definitely not earlier), which means you could not have been using RCs for more then 3 years. And ...
by andriys
Fri May 11, 2018 3:38 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 19
Views: 4798

Re: v6.40.8 [bugfix] is released!

Do you respond to requests from the forum or bugfix create a new bug ?
This is a user forum. Mikrotik staff responds on forum occasionally, but in general all (potential) bugs should be reported to support@ via email.
by andriys
Sun Apr 22, 2018 7:38 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 177
Views: 21814

Re: v6.43rc [release candidate] is released!

msatter , another solution to your task would be introducing a separate custom chain for your dynamic rules, then jumping to this custom chain at the point where you currently insert your dynamic rules. In the script you then simply add your dynamic rules to the top of your custom chain not worryin...
by andriys
Thu Apr 19, 2018 9:57 pm
Forum: Wireless Networking
Topic: 60GHz multipoint, share your experience
Replies: 29
Views: 6869

Re: 60GHz multipoint, share your experience

Let's see how many client we can hook up.
Please note that it is currently limited to only 8 clients at a time. See page 16 of the 60G presentation from the MUM in Berlin.
by andriys
Thu Apr 12, 2018 3:02 pm
Forum: General
Topic: hAP ac² LAN->WiFi 5GHz performance issue.
Replies: 23
Views: 2529

Re: hAP ac² LAN->WiFi 5GHz performance issue.

Any official answer? I'm a bit tired repeating this again and again, but... This is a user forum. Period. Mikrotik staff may occasionally answer some questions here, but they do not have to. If you need an "official answer" you should write you question to support@. I'm afraid that's the only "offi...
by andriys
Wed Apr 11, 2018 12:17 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 60
Views: 7365

Re: Winbox 3.13 released!

As for scrolling with the mouse/trackpad within managed routers list - we can not reproduce such problem locally.
As Chupaka mentioned above
In Windows 10, the problem appears with disabled "Settings -> Devices -> Mouse -> Scroll inactive windows when I hover over them".
by andriys
Tue Apr 10, 2018 3:25 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 60
Views: 7365

Re: Winbox 3.13 released!

I, personally, find focus jumping to the Password field very handy.
Also I've just checked, scrolling works for me just fine with both mouse scroll-wheel and two-finger scrolling on touchpad no matter what field has focus (Windows 10 pro).
by andriys
Sun Mar 25, 2018 3:04 pm
Forum: Announcements
Topic: MikroTik News February 2018 (Issue #80)
Replies: 65
Views: 10421

Re: MikroTik News February 2018 (Issue #80)

I suspect MT could put out a four-port weatherproof POE switch at nearly the same price point as UBNT. PowerBox Pro is essentially the RB960PGS (hEX PoE) board in an outdoor/weatherproof case. And the former is $20 more expensive ($99) than the latter ($79). Now it appears that a switch similar to ...
by andriys
Tue Jan 16, 2018 5:57 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 64776

Re: v6.42rc [release candidate] is released!

Updated: "*) bridge - fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;" upload speed through router is still 500 Mbit/s slower when STP/RSTP is activated on the Bridge That's as expected since hw-offloaded STP/RSTP is not supported on Realtek, Mediatek and ICPl...
by andriys
Sun Jan 14, 2018 6:51 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 64776

Re: v6.42rc [release candidate] is released!

*) tile - added "aes-ctr" hardware acceleration support;

Can someone explain to me?
https://wiki.mikrotik.com/wiki/Manual:I ... encryption
by andriys
Sun Jan 14, 2018 12:27 pm
Forum: Announcements
Topic: Securing your device is important
Replies: 29
Views: 3026

Re: Securing your device is important

Is mikrotik affected by Spectre and meltdown bugs? To my understanding, RouterOS x86 and CHR are definitely affected, but since you cannot run your own binaries there they cannot be exploited (unless there are other vulnerabilities that allow one to execute arbitrary code on a router). ARM devices ...
by andriys
Mon Jan 01, 2018 11:23 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 47792

Re: v6.41 [current]

Traffic capture on pe03 shows TCP SYN packet arriving with TCP options where MSS is set as 1312 bytes. Replies aren't visible on this router as they are MPLS switched to br01. Reviewing a packet capture on interface facing 'customer' on br01 or upstream interface on ccr1 shows pe03 sending back an ...
by andriys
Fri Dec 29, 2017 10:14 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 27
Views: 2940

Re: RB3011 port flopping - bad design

Does anyone know any other devices (routerboards or not) using this specific switch chip? I wonder if we can independently reproduce Mikrotik's claims. I have listed other RouterBOARDs where the same switch chip is used several posts above. They seem to be: hAP ac, OmniTIK 5 ac (including OmniTIK 5...
by andriys
Fri Dec 29, 2017 7:53 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 47792

Re: v6.41 [current]

Hi, anyone any idea why the WebFig of 6.41 behaves different on two identical boards (RouterBOARD 952Ui-5ac2nD)?
Very likely a browser cache issue. Have you tried clearing the cache and/or using another browser.
by andriys
Thu Dec 28, 2017 1:55 pm
Forum: SwOS
Topic: Install SwOS on RouterOS [SOLVED]
Replies: 4
Views: 615

Re: Install SwOS on RouterOS [SOLVED]

It is documented here: https://i.mt.lv/routerboard/files/CRS32 ... S-qgv3.pdf.
And printed version of this document should have been shipped along with your router (included in the box).
by andriys
Wed Dec 27, 2017 8:19 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 47792

Re: v6.41 [current]

Is this intended? Shouldn't hw-offload trigger for all of the eligible bridges and not just one at a given time?
It is likely a hardware limitation. It has never been possible to set more then one port as a master-port on any device with a "small" switch-chip on board.
by andriys
Tue Dec 26, 2017 10:48 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 74
Views: 5474

Re: SXTsq 5 ac. WTF? It doesn't work.

pretty much useles untill You compare it to other mikrotik hardware results. And YES it reflects CPU efficiency utilization by ROS and that is what I wanted to know. It reflects CPU performance under a particular load- in this case bandwidth test application. Profile for other types of load may dif...
by andriys
Tue Dec 26, 2017 10:25 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 27
Views: 2940

Re: RB3011 port flopping - bad design

I wonder if other RouterBOARD models with the same switch-chip model (QCA8337) suffer from the same problem. According to this wiki page the models in question are: hAP ac, OmniTIK 5 ac (including OmniTIK 5 ac PoE), the old hEX model (RB750Gr2), hEX PoE and PowerBox Pro.
by andriys
Tue Dec 26, 2017 9:56 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 37
Views: 2878

Re: Band Steering implementation?

coverage at that power level you suggest is very poor Do you remember that wireless is a bidirectional thing? I mean not only your clients should hear your access point, but you access point should hear you clients too. And so "at that power level" you actually get the best coverage possible for or...
by andriys
Tue Dec 26, 2017 6:36 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 74
Views: 5474

Re: SXTsq 5 ac. WTF? It doesn't work.

just run TCP bandwitch test to 127.0.0.1.
I'm wondering if you understand that this way you test how fast the btest itself works. And the results of such "test" has nothing to do with how fast your router can forward traffic, i.e. pretty much useless...
by andriys
Mon Dec 25, 2017 7:41 pm
Forum: Beginner Basics
Topic: Logs missing after router reboot
Replies: 2
Views: 186

Re: Logs missing after router reboot

Your device is equipped with a so called "SPI flash", which means what you see in the /file menu is actually stored in RAM and is lost any time you reboot your router and only content of the /flash directory is persisted to permanent storage. A quote from here : Warning: If device has a directory na...
by andriys
Sun Dec 24, 2017 12:21 pm
Forum: RouterBOARD hardware
Topic: Hardware Information
Replies: 4
Views: 316

Re: Hardware Information

SXT Disc Lite5.
There's no such thing. There are SXT Lite5 (without "DISK" in the name) and DISK Lite5 (without "SXT" in the name) and those are two completely distinct products.
by andriys
Sun Dec 24, 2017 10:18 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 344

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

Yes, you can use external RADIUS server- that should work just fine (and UserManager is in fact just yet another RADIUS server, running directly atop RouterOS and with management interface built-in). You should also be able to create some local user accounts. There's a whole bunch of documentation h...
by andriys
Sun Dec 24, 2017 10:04 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 15
Views: 1278

Re: Wireless Data Rates - Optimizing AP

On a second thought, I wouldn't recommend disabling the higher data rates. Using lower data rates means using more air time, which in turn means more competition for air time with neighbor networks and worse user experience for both your and your neighbors' networks. This considerations, however, mi...
by andriys
Sun Dec 24, 2017 9:58 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 344

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

will i be able to create user logins??
That depends. One important thing to note is that UserManager is not supported on RB3011 (nor any other ARM-base RouterBOARD) yet.
by andriys
Sun Dec 24, 2017 9:52 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 15
Views: 1278

Re: Wireless Data Rates - Optimizing AP

Are your wireless clients allowed to talk to each other?
by andriys
Sun Dec 24, 2017 9:47 am
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 37
Views: 2878

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db. Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet. thats...
by andriys
Sat Dec 23, 2017 11:28 pm
Forum: Beginner Basics
Topic: CAPSMAN Advice
Replies: 2
Views: 185

Re: CAPSMAN Advice

I have not been able to understand it by reading the material and watching the videos. What materials have you read? The official documentation is here , and is rather detailed. Have you read it? Any specific questions? I have just one home network. One router has DHCP and USERMAN running and in AP...
by andriys
Sat Dec 23, 2017 4:28 pm
Forum: Virtualization
Topic: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]
Replies: 6
Views: 592

Re: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]

or at least that should have been stated in the wiki page or product page A quote from the wiki ( link ): Currently MetaRouter can be used on * RB400, RB700 series except models with SPI flash , RB900 series except models with SPI flash , RB2011 boards * Listed PPC boards: RB1000, RB1100, RB1100AH ...
by andriys
Sat Dec 23, 2017 4:19 pm
Forum: Beginner Basics
Topic: Hi there, I have a question, Please help
Replies: 1
Views: 117

Re: Hi there, I have a question, Please help

why RouterOS needs to shutdown by software first while other routers not, even routers with OPENWRT or other powerful firmware, we just unplug the power if we what to switch them off. You don't really need to do that. If you just power off your device when you need to you will see an annoying messa...
by andriys
Fri Dec 22, 2017 8:23 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 37
Views: 2878

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db.
Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet.
by andriys
Fri Dec 22, 2017 8:16 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 37
Views: 2878

Re: Band Steering implementation?

in some cases you need to lower 2,4ghz to levels as low as 5dbm, sacrificing too much coverage, only suitable for high density setups
From my experience, the best working multi-AP setups is the ones where 2G coverage is as close to the 5G coverage as possible for each AP in the setup.
by andriys
Wed Dec 20, 2017 7:15 pm
Forum: Announcements
Topic: Newsletter 79 (MUM EUROPE ANNOUNCED!)
Replies: 33
Views: 7762

Re: Newsletter 79 (MUM EUROPE ANNOUNCED!)

Since the M33G has lots of storage options and quite some "horsepower", will there be a dude-server package for the board? PDF says this board features a double-core 880MHz MediaTek CPU, so it is very likely the same ARM that powers hEXr3, for which TheDude server is already available. Still it'll ...
by andriys
Wed Dec 20, 2017 1:47 pm
Forum: SwOS
Topic: What is the use of 260GSP ?
Replies: 16
Views: 6367

Re: What is the use of 260GSP ?

Bought Mikrotik 260GSP to power up my HikVision DS-2CD2020-I Camera.
...
Why the hell it doesn't work with POE switch?
Your camera requires 802.3af type of PoE, whereas RB260GSP only supports Passive PoE.
by andriys
Mon Dec 18, 2017 9:57 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 37
Views: 2878

Re: Band Steering implementation?

rogers3b2, what tx-power levels do you use? Making tx-power on 2.4G band lower then on 5G band may help a lot.
by andriys
Mon Dec 18, 2017 9:15 pm
Forum: Beginner Basics
Topic: Confused about QuickSet [SOLVED]
Replies: 3
Views: 332

Re: Confused about QuickSet [SOLVED]

You can safely switch to full-featured configuration tools after using QuickSet, but not the other way round. I.e. there's nothing wrong in using QuickSet to do the initial configuration and then switching to a full-featured WebFig/WinBox/Console. However once you do any kind of configuration change...
by andriys
Sat Dec 16, 2017 9:41 pm
Forum: RouterBOARD hardware
Topic: FastTrack implementation question [SOLVED]
Replies: 6
Views: 484

Re: FastTrack implementation question [SOLVED]

My question: can I enable FastTrack on download side only, and have full processing on the upload side? To my knowledge, no, you cannot. What board do you use? 240/30 does not sound like too much, there are inexpensive boards now available that can cope with that amount of traffic with ease even wi...
by andriys
Sat Dec 16, 2017 1:31 pm
Forum: General
Topic: Insecure VPN
Replies: 3
Views: 225

Re: Insecure VPN

- look in IPsec->Peers and IPsec->Policies what it created and write it down - remove the IPsec passphrase from the GRE tunnel - manually create the same Peer and Policy as you have seen before (and have now disappeared), changing what you want. There's a bit simple way to proceed. Double-click on ...
by andriys
Fri Dec 15, 2017 6:21 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 97328

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) wireless - added support for CHARGEABLE_USER_ID in EAP Accounting;
What does this feature do?
Implements rfc4372, I guess.
by andriys
Wed Dec 06, 2017 5:23 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 97328

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) capsman - use "adaptive-noise-immunity" value from CAP local configuration; I'd like to know a bit more about this change. I believe this is similar to how antenna gain setting is being handled. Simply set the desired value of the adaptive-noise-immunity option in your radio interface configurat...
by andriys
Sun Nov 26, 2017 10:35 am
Forum: Virtualization
Topic: CHR suggestions for new functionality
Replies: 157
Views: 22031

Re: CHR suggestions for new functionality

Please add Metarouter
VM inside VM? Are you serious?
by andriys
Sat Nov 04, 2017 11:49 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 97328

Re: v6.41rc [release candidate] is released! New bridge implementation!

Has the routerboot firmware version naming changed in 6.41rc? Yes, it has. It happened in 6.41rc47 (see here ): !) routerboot - RouterBOOT version numbering system merged with RouterOS; If routerboot firmware now follows the ROS version, I would very much like it to automatically get upgraded too d...
by andriys
Fri Oct 20, 2017 1:18 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 18952

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

The original problem was not related to MSS and/or packet fragmentation. The usual stream of non-fragmented TCP packets was also affected.
by andriys
Fri Oct 20, 2017 1:14 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 87919

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

It does actually ... the attacker is replaying retransmissions of message 3 of the 4-way handshake ... so without this re-transmissions to replay the attack would not be possible ... Ok, got it. You're absolutely right here. Still none of the (even patched) APs now do what you suggested to mitigate...
by andriys
Fri Oct 20, 2017 10:52 am
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 87919

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

Apparently AP can mitigate this by "bending" the standard 4-way handshake and instead of re-transmitting message 3...
It does not re-transmit anything during attack. It's an attacker who replays the message 3 that was originally transmitted by the real AP.
by andriys
Thu Oct 19, 2017 10:27 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 87919

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

The demo from the researcher clearly indicates a man-in-the-middle attack. It is shown in the video on his website around 1:54 https://youtu.be/Oh4WURZoR98 Hence, the client does connect to the malicious AP. You seem to claim the client does not need to connect to the fake AP? You should have also ...
by andriys
Thu Oct 19, 2017 1:22 pm
Forum: General
Topic: IPSec NAT translation?
Replies: 6
Views: 500

Re: IPSec NAT translation?

How are the negotiated? Are they ''tried'' in order - like firewall rules and first which applies, is negotiated, or is it some other logic...? No. First, please note that what Cisco calls "iskmp policy" is, in fact, a phase1 proposal. Initiator sends a list of proposals it is willing to support, a...
by andriys
Thu Oct 19, 2017 12:40 pm
Forum: Announcements
Topic: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities
Replies: 58
Views: 87919

Re: RouterOS (v6.39.3, v6.40.4, v6.41rc) NOT affected by WPA2 vulnerabilities

Or does Management Protection already solve the problem (by not allowing the client, if Management Protection is "required", to connect to a "fake" AP not using it)? According to the documentation , the management frame protection has nothing to do with the initial 4-way handshake, and thus does no...
by andriys
Thu Oct 19, 2017 10:44 am
Forum: Forwarding Protocols
Topic: Change src ip address for IGMP packets
Replies: 1
Views: 186

Re: Change src ip address for IGMP packets

You should never NAT IGMP traffic, use IGMP Proxy instead.
by andriys
Thu Oct 19, 2017 10:39 am
Forum: Wireless Networking
Topic: AC WiFi requires local forwarding
Replies: 4
Views: 379

Re: AC WiFi requires local forwarding

I'm getting a decent performance with eight ac-capabale CAPs, CCR1009 as CAPsMAN and local forwarding off. Cannot tell you the exact numbers, but they are definitely much higher then 20Mbit/s (the last time I did some tests, I could easily saturate my two ISP links, 50x50 each, with a couple of wire...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 21