Community discussions

Search found 1013 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 21
by andriys
Mon Jun 18, 2018 12:39 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 183
Views: 50510

Re: VPNfilter official statement

What are you talking about?
v6.40.8 includes patches to fix known vulnerabilities including latest winbox port vulnerability.
We are talking about this: viewtopic.php?t=121039#p595087
by andriys
Mon Jun 18, 2018 10:08 am
Forum: Announcements
Topic: VPNfilter official statement
Replies: 183
Views: 50510

Re: VPNfilter official statement

No, it is not.
by andriys
Mon Jun 18, 2018 9:46 am
Forum: Announcements
Topic: VPNfilter official statement
Replies: 183
Views: 50510

Re: VPNfilter official statement

Even if you are right with this one it is still vulnerability which is known and is not applied in current/bugfix. Well, the fact that the previous versions of WinBox (even in secure mode) were susceptible to MITM attacks was well-known for years. Many users were concerned and raised questions here...
by andriys
Sun Jun 17, 2018 2:41 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 183
Views: 50510

Re: VPNfilter official statement

But that was done because there were bugs that allowed the retrieval of the unencrypted passwords (and thus the quick retrieval of valid user/password combinations as shown) That's correct. And I must admit this change had to be implemented years ago without waiting for bugs like this one to pop up...
by andriys
Sun Jun 17, 2018 1:50 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 183
Views: 50510

Re: VPNfilter official statement

in 6.43rc17, something was changed in winbox service (thats why every RC since then has to use Winbox 3.14) to prevent MITM attack. No. And the purpose of this change has been explained here on the forum somewhere, and it has nothing with preventing MITM attacks. RouterOS used to store local user c...
by andriys
Sun Jun 17, 2018 1:41 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 36
Views: 9773

Re: v6.40.8 [bugfix] is released!

I decided to buy another cloud core and it continues with the same problem says:
Have you tried writing to support@ ? Just curious.
by andriys
Fri Jun 15, 2018 2:31 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 36
Views: 9773

Re: v6.40.8 [bugfix] is released!

Why the router tries to connect to ip 224.0.0.22?
This is a multicast address that has something to do with IGMPv3. May be related to IGMP proxy or UPnP.
by andriys
Thu May 24, 2018 11:26 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 497
Views: 66103

Re: v6.43rc [release candidate] is released!

Ive been doing RCs for 8+ years. For 7+ years the RCs were as stable as the stable version. You are exaggerating "a bit". Mikrotik started releasing public RCs since mid-2015 (since v6.32 or 6.31, but definitely not earlier), which means you could not have been using RCs for more then 3 years. And ...
by andriys
Fri May 11, 2018 3:38 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 36
Views: 9773

Re: v6.40.8 [bugfix] is released!

Do you respond to requests from the forum or bugfix create a new bug ?
This is a user forum. Mikrotik staff responds on forum occasionally, but in general all (potential) bugs should be reported to support@ via email.
by andriys
Sun Apr 22, 2018 7:38 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 497
Views: 66103

Re: v6.43rc [release candidate] is released!

msatter , another solution to your task would be introducing a separate custom chain for your dynamic rules, then jumping to this custom chain at the point where you currently insert your dynamic rules. In the script you then simply add your dynamic rules to the top of your custom chain not worryin...
by andriys
Thu Apr 19, 2018 9:57 pm
Forum: Wireless Networking
Topic: 60GHz multipoint, share your experience
Replies: 30
Views: 7735

Re: 60GHz multipoint, share your experience

Let's see how many client we can hook up.
Please note that it is currently limited to only 8 clients at a time. See page 16 of the 60G presentation from the MUM in Berlin.
by andriys
Thu Apr 12, 2018 3:02 pm
Forum: General
Topic: hAP ac² LAN->WiFi 5GHz performance issue.
Replies: 23
Views: 3049

Re: hAP ac² LAN->WiFi 5GHz performance issue.

Any official answer? I'm a bit tired repeating this again and again, but... This is a user forum. Period. Mikrotik staff may occasionally answer some questions here, but they do not have to. If you need an "official answer" you should write you question to support@. I'm afraid that's the only "offi...
by andriys
Wed Apr 11, 2018 12:17 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 61
Views: 10910

Re: Winbox 3.13 released!

As for scrolling with the mouse/trackpad within managed routers list - we can not reproduce such problem locally.
As Chupaka mentioned above
In Windows 10, the problem appears with disabled "Settings -> Devices -> Mouse -> Scroll inactive windows when I hover over them".
by andriys
Tue Apr 10, 2018 3:25 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 61
Views: 10910

Re: Winbox 3.13 released!

I, personally, find focus jumping to the Password field very handy.
Also I've just checked, scrolling works for me just fine with both mouse scroll-wheel and two-finger scrolling on touchpad no matter what field has focus (Windows 10 pro).
by andriys
Sun Mar 25, 2018 3:04 pm
Forum: Announcements
Topic: MikroTik News February 2018 (Issue #80)
Replies: 65
Views: 11655

Re: MikroTik News February 2018 (Issue #80)

I suspect MT could put out a four-port weatherproof POE switch at nearly the same price point as UBNT. PowerBox Pro is essentially the RB960PGS (hEX PoE) board in an outdoor/weatherproof case. And the former is $20 more expensive ($99) than the latter ($79). Now it appears that a switch similar to ...
by andriys
Tue Jan 16, 2018 5:57 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 69449

Re: v6.42rc [release candidate] is released!

Updated: "*) bridge - fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;" upload speed through router is still 500 Mbit/s slower when STP/RSTP is activated on the Bridge That's as expected since hw-offloaded STP/RSTP is not supported on Realtek, Mediatek and ICPl...
by andriys
Sun Jan 14, 2018 6:51 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 69449

Re: v6.42rc [release candidate] is released!

*) tile - added "aes-ctr" hardware acceleration support;

Can someone explain to me?
https://wiki.mikrotik.com/wiki/Manual:I ... encryption
by andriys
Sun Jan 14, 2018 12:27 pm
Forum: Announcements
Topic: Securing your device is important
Replies: 29
Views: 3731

Re: Securing your device is important

Is mikrotik affected by Spectre and meltdown bugs? To my understanding, RouterOS x86 and CHR are definitely affected, but since you cannot run your own binaries there they cannot be exploited (unless there are other vulnerabilities that allow one to execute arbitrary code on a router). ARM devices ...
by andriys
Mon Jan 01, 2018 11:23 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 53789

Re: v6.41 [current]

Traffic capture on pe03 shows TCP SYN packet arriving with TCP options where MSS is set as 1312 bytes. Replies aren't visible on this router as they are MPLS switched to br01. Reviewing a packet capture on interface facing 'customer' on br01 or upstream interface on ccr1 shows pe03 sending back an ...
by andriys
Fri Dec 29, 2017 10:14 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 39
Views: 4777

Re: RB3011 port flopping - bad design

Does anyone know any other devices (routerboards or not) using this specific switch chip? I wonder if we can independently reproduce Mikrotik's claims. I have listed other RouterBOARDs where the same switch chip is used several posts above. They seem to be: hAP ac, OmniTIK 5 ac (including OmniTIK 5...
by andriys
Fri Dec 29, 2017 7:53 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 53789

Re: v6.41 [current]

Hi, anyone any idea why the WebFig of 6.41 behaves different on two identical boards (RouterBOARD 952Ui-5ac2nD)?
Very likely a browser cache issue. Have you tried clearing the cache and/or using another browser.
by andriys
Thu Dec 28, 2017 1:55 pm
Forum: SwOS
Topic: Install SwOS on RouterOS [SOLVED]
Replies: 4
Views: 1127

Re: Install SwOS on RouterOS [SOLVED]

It is documented here: https://i.mt.lv/routerboard/files/CRS32 ... S-qgv3.pdf.
And printed version of this document should have been shipped along with your router (included in the box).
by andriys
Wed Dec 27, 2017 8:19 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 53789

Re: v6.41 [current]

Is this intended? Shouldn't hw-offload trigger for all of the eligible bridges and not just one at a given time?
It is likely a hardware limitation. It has never been possible to set more then one port as a master-port on any device with a "small" switch-chip on board.
by andriys
Tue Dec 26, 2017 10:48 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 80
Views: 7977

Re: SXTsq 5 ac. WTF? It doesn't work.

pretty much useles untill You compare it to other mikrotik hardware results. And YES it reflects CPU efficiency utilization by ROS and that is what I wanted to know. It reflects CPU performance under a particular load- in this case bandwidth test application. Profile for other types of load may dif...
by andriys
Tue Dec 26, 2017 10:25 pm
Forum: RouterBOARD hardware
Topic: RB3011 port flopping - bad design
Replies: 39
Views: 4777

Re: RB3011 port flopping - bad design

I wonder if other RouterBOARD models with the same switch-chip model (QCA8337) suffer from the same problem. According to this wiki page the models in question are: hAP ac, OmniTIK 5 ac (including OmniTIK 5 ac PoE), the old hEX model (RB750Gr2), hEX PoE and PowerBox Pro.
by andriys
Tue Dec 26, 2017 9:56 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 40
Views: 4097

Re: Band Steering implementation?

coverage at that power level you suggest is very poor Do you remember that wireless is a bidirectional thing? I mean not only your clients should hear your access point, but you access point should hear you clients too. And so "at that power level" you actually get the best coverage possible for or...
by andriys
Tue Dec 26, 2017 6:36 pm
Forum: Wireless Networking
Topic: SXTsq 5 ac. WTF? It doesn't work.
Replies: 80
Views: 7977

Re: SXTsq 5 ac. WTF? It doesn't work.

just run TCP bandwitch test to 127.0.0.1.
I'm wondering if you understand that this way you test how fast the btest itself works. And the results of such "test" has nothing to do with how fast your router can forward traffic, i.e. pretty much useless...
by andriys
Mon Dec 25, 2017 7:41 pm
Forum: Beginner Basics
Topic: Logs missing after router reboot
Replies: 2
Views: 304

Re: Logs missing after router reboot

Your device is equipped with a so called "SPI flash", which means what you see in the /file menu is actually stored in RAM and is lost any time you reboot your router and only content of the /flash directory is persisted to permanent storage. A quote from here : Warning: If device has a directory na...
by andriys
Sun Dec 24, 2017 12:21 pm
Forum: RouterBOARD hardware
Topic: Hardware Information
Replies: 4
Views: 376

Re: Hardware Information

SXT Disc Lite5.
There's no such thing. There are SXT Lite5 (without "DISK" in the name) and DISK Lite5 (without "SXT" in the name) and those are two completely distinct products.
by andriys
Sun Dec 24, 2017 10:18 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 405

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

Yes, you can use external RADIUS server- that should work just fine (and UserManager is in fact just yet another RADIUS server, running directly atop RouterOS and with management interface built-in). You should also be able to create some local user accounts. There's a whole bunch of documentation h...
by andriys
Sun Dec 24, 2017 10:04 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 21
Views: 2249

Re: Wireless Data Rates - Optimizing AP

On a second thought, I wouldn't recommend disabling the higher data rates. Using lower data rates means using more air time, which in turn means more competition for air time with neighbor networks and worse user experience for both your and your neighbors' networks. This considerations, however, mi...
by andriys
Sun Dec 24, 2017 9:58 am
Forum: Beginner Basics
Topic: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]
Replies: 6
Views: 405

Re: Did i get the wrong routerboard or am i doing the wrong thing [SOLVED]

will i be able to create user logins??
That depends. One important thing to note is that UserManager is not supported on RB3011 (nor any other ARM-base RouterBOARD) yet.
by andriys
Sun Dec 24, 2017 9:52 am
Forum: Wireless Networking
Topic: Wireless Data Rates - Optimizing AP
Replies: 21
Views: 2249

Re: Wireless Data Rates - Optimizing AP

Are your wireless clients allowed to talk to each other?
by andriys
Sun Dec 24, 2017 9:47 am
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 40
Views: 4097

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db. Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet. thats...
by andriys
Sat Dec 23, 2017 11:28 pm
Forum: Beginner Basics
Topic: CAPSMAN Advice
Replies: 2
Views: 220

Re: CAPSMAN Advice

I have not been able to understand it by reading the material and watching the videos. What materials have you read? The official documentation is here , and is rather detailed. Have you read it? Any specific questions? I have just one home network. One router has DHCP and USERMAN running and in AP...
by andriys
Sat Dec 23, 2017 4:28 pm
Forum: Virtualization
Topic: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]
Replies: 6
Views: 848

Re: run openwrt metarouter on RB952Ui-5ac2nD-TC [SOLVED]

or at least that should have been stated in the wiki page or product page A quote from the wiki ( link ): Currently MetaRouter can be used on * RB400, RB700 series except models with SPI flash , RB900 series except models with SPI flash , RB2011 boards * Listed PPC boards: RB1000, RB1100, RB1100AH ...
by andriys
Sat Dec 23, 2017 4:19 pm
Forum: Beginner Basics
Topic: Hi there, I have a question, Please help
Replies: 1
Views: 143

Re: Hi there, I have a question, Please help

why RouterOS needs to shutdown by software first while other routers not, even routers with OPENWRT or other powerful firmware, we just unplug the power if we what to switch them off. You don't really need to do that. If you just power off your device when you need to you will see an annoying messa...
by andriys
Fri Dec 22, 2017 8:23 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 40
Views: 4097

Re: Band Steering implementation?

I set 5Ghz at 23db and 2.4Ghz at 17db.
Those values a way too high. For the best user experience the tx-power of your APs should never exceed the max. tx-power of your wireless clients, which lies in the range from 13dBm to 17dBm (depending on the channel) for an average smartphone or tablet.
by andriys
Fri Dec 22, 2017 8:16 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 40
Views: 4097

Re: Band Steering implementation?

in some cases you need to lower 2,4ghz to levels as low as 5dbm, sacrificing too much coverage, only suitable for high density setups
From my experience, the best working multi-AP setups is the ones where 2G coverage is as close to the 5G coverage as possible for each AP in the setup.
by andriys
Wed Dec 20, 2017 7:15 pm
Forum: Announcements
Topic: Newsletter 79 (MUM EUROPE ANNOUNCED!)
Replies: 33
Views: 8398

Re: Newsletter 79 (MUM EUROPE ANNOUNCED!)

Since the M33G has lots of storage options and quite some "horsepower", will there be a dude-server package for the board? PDF says this board features a double-core 880MHz MediaTek CPU, so it is very likely the same ARM that powers hEXr3, for which TheDude server is already available. Still it'll ...
by andriys
Wed Dec 20, 2017 1:47 pm
Forum: SwOS
Topic: What is the use of 260GSP ?
Replies: 16
Views: 6491

Re: What is the use of 260GSP ?

Bought Mikrotik 260GSP to power up my HikVision DS-2CD2020-I Camera.
...
Why the hell it doesn't work with POE switch?
Your camera requires 802.3af type of PoE, whereas RB260GSP only supports Passive PoE.
by andriys
Mon Dec 18, 2017 9:57 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 40
Views: 4097

Re: Band Steering implementation?

rogers3b2, what tx-power levels do you use? Making tx-power on 2.4G band lower then on 5G band may help a lot.
by andriys
Mon Dec 18, 2017 9:15 pm
Forum: Beginner Basics
Topic: Confused about QuickSet [SOLVED]
Replies: 3
Views: 498

Re: Confused about QuickSet [SOLVED]

You can safely switch to full-featured configuration tools after using QuickSet, but not the other way round. I.e. there's nothing wrong in using QuickSet to do the initial configuration and then switching to a full-featured WebFig/WinBox/Console. However once you do any kind of configuration change...
by andriys
Sat Dec 16, 2017 9:41 pm
Forum: RouterBOARD hardware
Topic: FastTrack implementation question [SOLVED]
Replies: 6
Views: 621

Re: FastTrack implementation question [SOLVED]

My question: can I enable FastTrack on download side only, and have full processing on the upload side? To my knowledge, no, you cannot. What board do you use? 240/30 does not sound like too much, there are inexpensive boards now available that can cope with that amount of traffic with ease even wi...
by andriys
Sat Dec 16, 2017 1:31 pm
Forum: General
Topic: Insecure VPN
Replies: 3
Views: 252

Re: Insecure VPN

- look in IPsec->Peers and IPsec->Policies what it created and write it down - remove the IPsec passphrase from the GRE tunnel - manually create the same Peer and Policy as you have seen before (and have now disappeared), changing what you want. There's a bit simple way to proceed. Double-click on ...
by andriys
Fri Dec 15, 2017 6:21 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 100916

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) wireless - added support for CHARGEABLE_USER_ID in EAP Accounting;
What does this feature do?
Implements rfc4372, I guess.
by andriys
Wed Dec 06, 2017 5:23 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 100916

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) capsman - use "adaptive-noise-immunity" value from CAP local configuration; I'd like to know a bit more about this change. I believe this is similar to how antenna gain setting is being handled. Simply set the desired value of the adaptive-noise-immunity option in your radio interface configurat...
by andriys
Sun Nov 26, 2017 10:35 am
Forum: Virtualization
Topic: CHR suggestions for new functionality
Replies: 157
Views: 23254

Re: CHR suggestions for new functionality

Please add Metarouter
VM inside VM? Are you serious?
by andriys
Sat Nov 04, 2017 11:49 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 100916

Re: v6.41rc [release candidate] is released! New bridge implementation!

Has the routerboot firmware version naming changed in 6.41rc? Yes, it has. It happened in 6.41rc47 (see here ): !) routerboot - RouterBOOT version numbering system merged with RouterOS; If routerboot firmware now follows the ROS version, I would very much like it to automatically get upgraded too d...
by andriys
Fri Oct 20, 2017 1:18 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 19954

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

The original problem was not related to MSS and/or packet fragmentation. The usual stream of non-fragmented TCP packets was also affected.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 21