MikroTik

Reminder to keep discussion about .2 changes

The current version is 7.17.2, please try that and see if the issue still happens

Who said you have to run Minecraft? One forum user did it for testing?
You can run Greylog or Grafana.

yes, please make a ticket with details how to replicate, how many files you have, which file you removed etc.

We can't replicate what you are saying, but actually it would be better and more correct to do it this way:

/file/remove file/with/path

and not

/file/remove [ /file/find here name="file/with/path" ]

Changelog tells you about how to do it, use the new parameters (not a bug)

*) file - allow printing specific directories via path parameter;
*) file - added "recursive" and "relative" parameters to "/file/print" for use in conjunction with "path" parameter;

Which version is this?

Those of you who are testing 7.18 might have noticed, but most of you probably did not notice yet. There are plenty of new features in one specific category - storage. Those of you with devices that support any kind of external storage, like the RB1100, X86, CHR systems or even devices with USB hubs...

No problem with that. Great pics and thanks for the post anyway! Hope you all will enjoy the next one

Like I said, I (or MikroTik) would not have deleted it. It was a volunteer mod.

Well, in fairness, they do publish a "responsible disclosure policy" on their security web site. So publishing potential vulnerabilities on the forum is pretty clearly against those rules, and thus forum rules. But it does strain credibility that there is nothing of note on the security f...

No. I already wrote this above. We can disable scaling FOR WINBOX ONLY. You can use Windows zoom scaling for all the other apps. But winbox will be small. You wil then use Winbox zoom buttons to make it big. It will have no glitches then.

teslasystems winbox already has zoom controls. It means you will have to use them to make winbox bigger or smaller. Not Windows zoom scaling

what is the opinion about solution suggested in my previous post

there is an option to disable fractional scaling for winbox, you will then have to use winbox built-in zoom to make it bigger, but there will be no scaling issues due to Windows problems

where mouse cursor is not 20% of the screen size? see the video yourself

teslasystems, this is what I call nitpicking above. If you use the screen at normal resolution, you can't see it. This is why yourself had to make insane zoom for the video, just to show it.

We only make changes that improve security of the users, none of those changes are to actively deny 3rd party OSes

we have so far not been able to see such jumping around issues here. maybe there is something else at play, if you have those problems

It is impossible to fix all scaling issues in Windows. Windows is very bad at DPI scaling compared to other OS and Winbox is definitely not the only program that has small pixel level issues at these settings. Since Winbox is now made in QT, we will not be able to fix all issues, at this point, most...

seems there are more scaling issues to fix

v4 beta 17 is out *) Table: Change to a custom font that has same-width numbers *) Table: Align some number-based columns to the right *) Table: Select the table's first column as the default filtered column when adding a new row *) Table: Focus the table filter's first input field if the panel is o...

Yes, the same OS is on all devices. There are some small differrences in License level, but this one already has a good license level with not many limits.
https://help.mikrotik.com/docs/spaces/R ... ekeylevels

v7.14.3 was introduced April the 17th, 2024. After this release, a new(er) driver of Qualcom was introduced that caused problems for some users. Have been there, did a lot of tweaking and have zero problems currently using v7.18beta2 (and the same since all 7.16.x versions there were made available...

The feature is on the to-do list

For what purpose?

Don't use !

! means "everything except DNS"

More CEF features are in development for the next betas

That's in old winbox, the new WinBox 4 also uses ISO8601 date format

set 0 expires=2025-01-25

(2025-01-25 00:00:00)

Send the RIF to support, thank you, there might be some cases where some default config is conflicting.

It would be nice to have the ability to set a password for file sharing.

The random link itself is a security measure. Set "expires" and do not put the link anywhere public, then it's just as secure. You can even treat the last part of the URL as a password and give it separately.

how does that work? *) log - added option to select TCP or UDP for remote logging; Like this: /system/logging/action> add target=remote remote-protocol=udp It depends on the software on the receiving end. This goes together with the new remote log format CEF, which works with SIEM such as Greylog a...

It's the first public beta, there might be (for sure there are) bugs. Thank for the report, will investigate all the issues described.

I love the new filesharing function, I tried to get it work on my Hap ax lite LTE6 and invested an hour. I could not access it. Then I realized it will never work behind CGNAT, whatever I will try.... Except maybe over BTH VPN. Switching to a connection with no CGNAT and using the shown "File ...

... will open up 443 HTTPS from anywhere... will it be safe? open port 443 on the router for everyone from where? yes it is safe, as it only opens up the file share and has a valid HTTPS certificate. Webfig is not opened to the world, when you enable file share. It is a different service. To be cle...

When the release is in Stable, we do often highlight interesting new features at the top of the changelog, but not while in beta

it's still beta2, and the feature is in the changelog actually

yes, pe1chl is correct.
check for updates command will read the package list from the server. you can install packages directly from the server now. no need to download them and upload them by hand.

the list needs to be refreshed after reboot.

Let me repeat it again. If you find BTH confusing, it's because you are trying to configure it from Winbox. You should not use Winbox or CLI for BTH at all. Use the BTH app and it will be much clearer. Sure it's technically possible, but it is not made for that. If you are in Winbox, just use Wiregu...

Well yes OF COURSE "file share" function will open up 443 HTTPS from anywhere, it creates a public website with https on your router, which anyone can visit. This function is to create public download links for files, like this: https://hcf087skgys.routingthecloud.net/s/7DPKi3nJTFhJq3b You...

To create the Back to Home VPN tunnel, you have to connec to your home router's WiFi network from inside your house, then open the BTH app, provide the router login and password and follow the steps in the app. It will open up the access to your device during this process. Only after that you can ac...

Yeah that rule makes no sense. You have turned on ALL POSSIBLE LOGS from all functions, except DNS and package installs

Check the Log section, it could say something about reasons the upgrade did not take place.
Did you upload the files yourself, or used the Check for upgrades button?

MikroTik does not announce release dates before newsletters. Newsletters are already sneak peak info before release. So wait for the next few newsletters

Every connection is from a unique IP, there is nothing to ban

When we do rate limiting, you users will also be limited. All connections come from random IP addresses. When there are thousands of connections coming in at once, either the servers get overloaded, or there is some cloudflare "read only because this is a cached site" page, either way, for...

@NORMIS, what is the trick of connecting to the router itself to create shares?? I can connect via VPN but after hitting manage shares, the login I provide (triple checked) and same one used to create the tunnel in the first place on the phone) is REJECTED ???????? rejected how? post screenshot. I ...

We have found that some Windows (not WinBox) zoom settings cause it. Only happens at lower resolutions and zoom in windows settings, especially on large screens like external monitors. It's very likelty this is a Windows only issue due to scaling.

We will see how to fix it.

There should be no "thick borders every x lines". Post what screen resolution, DPI, zoom you have in your system and also whether you are using zoom in winbox itself.

You can already filter by column, or you mean, you want it to "look" like excel? I don´t know about Excel - but he said "multiple". I think (THINK) that he want to be able to sort by (say) IP, and THEN by (for example) signal strength. A "multiple sort", if I understoo...

UPD: it works partially. If you just open the log window and don't do anything, it's ok. But if you scroll up and then scroll back to the latest record, it doesn't autoscroll anymore until you reopen the window. This is by design. It works like this in any other software. Once you scroll manually, ...

Turn what off?

Most of these are answered in the manual - there are actually 5 arp modes. Gratuitous ARP: https://help.mikrotik.com/docs/spaces/ROS/pages/100892687/ARP#ARP-GratuitousARP - add static DNS entry for the DoH server name https://help.mikrotik.com/docs/spaces/ROS/pages/37748767/DNS#DNS-DNSoverHTTPS(DoH)...

You can already filter by column, or you mean, you want it to "look" like excel?

Some very long awaited changes in the new release, check it out! Remember to check side menu for some new options: What's new in 4.0beta16: *) Redesigned table view *) Implement column reordering *) Implement table find feature *) Implement table row colors defined in WinBox files, such as for log, ...

That is not true and topic is incorrectly marked as solved If you request a trial of the P1, P10 or PU license, it works with all features for 60 days, but after 60 days, RouterOS upgrade gets disabled. Limits do not get applied, it continues to work with no speed limit. You will fallback to free Th...

LTE is not slow by itself, but there are so many mobile users, that each cell tower has to split the available bandwidth to more people than the ISP anticipated. Try the same LTE ar 3AM in the morning, it will be much faster.

You can use v6. Sorry I misread your post, Winbox will not work with versions older than v6.42.12, but your v6.42.12 will be fine.

The same is true for newer WinBox3. We improved security, so you need to upgrade RouterOS in any case.

Yeah, same question as above. The description clearly says, that over the cable you get full speed, but your wifi AP is not from MikroTik, so I don't see how the hEX could have any influence on the problem

This is your best bet for 25/40Gbit ports on a budget: https://mikrotik.com/product/crs326_24s_2q_rm

Before I even read all of this, there is no Wifiwave2 in 7.17rc

First of all, happy holidays! Watch the accompanying video first: https://youtu.be/sRLWcddMxIk Read our latest newsletter and learn more about: - cAP LTE12 ax - GPeRx4 - CSS318-16G-2S+IN - FTC21 - IoT updates - Return of the RB912: D.I.Y. Bestseller - New YouTube videos, and so much more! http://mt...

please learn the term "offtopic", as it seems you do not understand it again.
if issue is not mentioned in changelog, it is not useful to repeat it every release. wait until you see it in the changelog. otherwise, do not spam the topic.

fischerdouglas this thread is only about release to release changes. Please just make other topics about your other concerns. This has been said multiple times, and you are refusing to do that, and then are complaining on the internet, that your post is getting deleted. Do not post offtopic in this ...

Remember that this error is a completely normal error message in most networks. It is when a station is not responding. There could be many reasons, sleep, went away etc. We are only talking about situations where signal has not changed and device is actively being used, and did not go anywhere. See...

So you prefer port flapping instead?

I was asking because we can't repeat any slow performance on older Windows machines. Are you testing the latest WinBox beta? There were performance fixes in one of the later versions.

Also, in your virtual machine software, have you enabled 3D acceleration checkbox in VM settings?

No, that is not enough, as we have not been able to replicate the issue in our testing environment. There could be more vairables in the affected setups, that we have not yet identified. P.S: the consultants are not mikrotik developers or testers, they only help you configure the devices and are ind...

Please send supout.rif file from RouterOS 7.17, that is made when the issue takes place, to support@mikrotik.com so we can investigate

Please just report here in this topic.

The mobile winbox does not have any other requirements, but what you describe usually happens if there is a network loop or an IP address conflict somewhere.

Please see above, we need as much details about your setup and devices, as possible. And please try to use latest 7.17 when you make the RIF file, and send to support. You can downgrade after, but without those debug files, we can't do much. We have received maybe 2-3 tickets about this from this to...

@atomicduck

1) what kind of VM are you using, please post some more details, so we can try to replicate the issue
2) a lot of what you mentioned is going to be improved or fixed in the next release, so please give it another chance then

That's just not true. Open winbox and you will see there is plenty of space for longer password field. It can be easily two times longer, there is space for that

Yes, it's a known missing feature, these things are coming. WinBox4 is still in beta, and has not reached feature parity with old version.

That has no relation at all.

make a new VM, request a free trial for the P-unlimited license, test it. Trial is free and you can check any limits

Looks like somebody has not read the manual. Please stop with the stupid trolling.

the name literally includes the word "home"

Yes, that was an intentional change, not a bug:

*) wrap ALL one-line text input fields to new line when width reached

It is now fixed. Sorry for the wait.

There are no known issues with port flapping in switches that are made for the last ~4-5 years. There were some issues that were addressed around that time. If you see port flapping now - you might have to investigate the other end of the link, powering etc. P.S: please do not crosspost the same mes...

There are no known issues with port flapping in switches that are made for the last ~4-5 years. There were some issues that were addressed around that time. If you see port flapping now - you might have to investigate the other end of the link, powering etc.

anav, did you notice which words make up "BTH"?

We have identified the issue and a fix is coming shortly.

I don't see enabled setting "allow remote requests" in your router.
make sure Ubuntu clears the DNS cache it might have in the system, also clear router DNS cache

try also these sites: https://d3ward.github.io/toolz/adblock
https://adblock-tester.com

What's new in v4.0beta14: *) add autoscroll feature for windows like Log/Ping/Traceroute/etc. *) improve left menu popup usability *) allow multi item drag and drop *) add support for table scrolling when dragging items with mouse *) add support for moving files in Files window to other dirs *) sho...

What is "online format", not clear what you mean about logs

It seems that several different issues are mixed together in one topic, for example:

- AX100/AX200 series clients reconnecting
- "Not responding" (previous versions "SA query timeout") error in non other devices (AX100/AX200 clients)

The code in Winbox3 is so old, that it is impossible to fix a lot of issues in there. It's the biggest reason why Winbox4 exists, so we can start improving it. We did not make Winbox4 just to annoy you with new color schemes.

Isn't it related? I hadn't noticed that, but in any case, the Winbox 4b12 version isn't opening and is generating errors, and according to the changelog it should run on macOS BigSur. It's a shame that they discontinued macOS 11, because in some countries a new MacBook isn't that cheap. you can upg...

Just use NAT and you will have all features of the device, including full use of the rest of the ethernet ports, WIFi etc. LTE passthrough basically makes the device work as a transparent bridge, and passes the connection directly to the selected port (and only that port). Why do you need the passth...

What's new in v4.0beta13: *) implement opened windows list *) implement global menu search *) bump minimal macOS version to 12.0, because 11.0 is EOL and dropped by Qt *) accept button with Enter/Return keys also on Windows and macOS *) fix max u32 value processing on some fields *) fix visual 1px ...

You have two options. Either you configure NAT and use the Chateau as a router, or configure LTE passthrough to Ether1, but that would make your router kind of useless, you could have opted for a cheaper device that does not have routing and wifi built in. https://help.mikrotik.com/docs/spaces/ROS/p...

Forum users can't check support tickets, so no reason to post ticket numbers here

yes, and in RouterOS you can use firewall to only allow connections from Letsencrypt, in either case, some manual protection has to be set up

This is exactly the same on all servers that support LetsEncrypt.

Don't understand why v4 should be so different in layout, compared to v3? For me, ver 3 is just the best. The overview is completely gone in v4, in my opinion. Maybe it's just me who is too negative, but v4 won't be used until v3 disappears from the MT site. I use winbox under windows... You can ke...

Did you use pseudobridge mode, as mentioned above?

is there any search option in lists (like Ctrl+F to find something quickly), or just I can't find it?

Filter button in top right corner of each inner window

I will look into why your ticket was not answered until now, but I can already see that this is not a bug report, but requires debugging of a running network. MikroTik does not offer such services for free, we have consultants that you can hire (above post has a link). The MikroTik support system is...

RB5009UG+S+ has no wireless interfaces. What are the actual APs used?

Layout Issue. It wouldn't be so bothersome if the password field was already focused. Screenshot 2024-11-26 at 2.17.44 PM.png Also I think there's no contrast or outline no the password field, just white on white, which is weird. passwords are not oficially implemented yet. this only shows up if yo...

CHR can be used for free and has no limitations like the x86. Just get a CHR trial and it will work for 60 days fully, after 60 days only RouterOS upgrades become disabled. CHR also is 64 bit and has more drivers specific to virtual systems. Another issue is that CHR license is account bound, not ma...

Maybe your IP was mistakenly detected as from some other country. Try a VPN?
Sorry, we can't control it, this is powered by ChatGPT

OpenAI does not work in all countries: https://platform.openai.com/docs/supported-countries

That's not true, RouterOS itself checks package integrity, checksum and allowed version. It does not matter where package came from, it will not be installed. rextended, is it a language barrier also, that makes you not understand that already installed devices are not changed by this? and new devic...

@ Normis mine is a question without controversy. It seems clear that Mikrotik is focusing on the domestic market and I can only be pleased about this, personal opinion. Have you ever thought of dividing ROS into an Enterprice branch and a Home branch, the latter with only the minimum packages (DLNA...

>>> routerboard [feature will be disabled] What exactly is disabled? The entire menu? yes, but the only meaingful thing you can do there, is enable boot from network without touching the device. now you need to press the button, to change this menu. >>> install-any-version [feature will be disabled...

This thread speaks for itself, please rethink device-mode and don't give a shit. We have been switching to MTik devices for some time, but now we can move on to other manufacturers. Thanks! Can you please describe in full sentences how device-mode is interfering with your workflow? What was impleme...

cloud and security. lol. keep your enterprise stuff. There is never a perfect world. But for certain device types, cloud provisioning these days is leading the way. There also needs to be local management. If we cloud provision, the device info and network/device password would be saved at an admin...

No reason to raise old topics from the dead.
It is not possible to remove "features" one by one, most of them rely on eachother, like you can see in the second post in the topic. There is no single package to delete. Each program does a multitude of things.

Please read my responses, before asking the same thing again.
hAP ac2 is an older product. New product stickers are durable.

Yes, it fixes Windows issue with slow UI

If you bought the device from a distributor, not by yourself, you will have to ask the company you bought the device from

We tried to override Qt limitations, but does not look promising. You will have to use OpenCore patcher to upgrade to macOS 12

Without RIF file, we can't fix issues that only some people have observed.

Please everyone that still sees "not responding" (previously called "SA Query timeout") in their log on 7.17rc versions. - hardware model of AP - hardware model of the client that is disconnecting - post exact log messages - post distance from client to AP when this happened - po...

just to confirm, what is the signal when this happens? does it happen if the devices are reasonably close to eachother?

lubomirs, how many things can you lose, especially if you know those things are important? put them in a safe!

label is on 3 different things: device, box, instruction sheet.
password is also available online in your account (or at the distributor).

This topic is becoming a mix of every possible wifi related issue. Please always post exact log of the error, routerOS version, device model and preferably chipset. They are not all the same issue.

Really hope you made a supout.rif file and sent to support, before downgrading back to beta

Each client has a separate configuration and a separate code. All users are configured in /ip/cloud/ back-to-home-users/ section. Do not ever use the QR code displayed in the "ip cloud" menu to invite somebody else than yourself. That is a one time use code for your self. Normally you woul...

Yes, can have to import old format files (CDB), and you can also use the Open button, to use the Winbox 3 files. But in this case, some character encoding issues could happen. If you only plan to use Winbox 4, better import and use the new one.

Those of you who tried early BETA versions will have entirely different behavior of device mode and other functions. Do not upgrade your production devices to BETA versions to avoid undesired behavior. The experience of upgrading stable to stable will be different. The point of beta versions is to t...

How do i import saved session to new winbox4

Use the menu item called "import" on the right side.

If you have direct access to your router (it has public IP) then one connection is enough, but if your device is behind NAT or has non public IP, the connection will go over our MikroTIk Relay service, this is what the other config is for.

device mode with partitions=no only denies creating new partitions, you can still switch partitions like you used to do

You can't just set up one subdomain in cloudflare and keep the rest in another DNS server,
the NS servers have to be set to cloudflare, all mikrotik.com DNS will be managed through there.

VadiKO you can also try to use this tool to install macOS 11 on an older mac: https://dortania.github.io/OpenCore-Legacy-Patcher/

We would need to set all *.mikrotik.com DNS to be handled by CloudFlare (or any other 3rd party service). We don't want to do that.

We have disabled the search robots, except biggest ones, but the attacks are regular DDoS attacks going to different IP every time. We are trying to optimize the forum servers to handle bigger loads, but the attacks keep getting bigger too. Since PHPBB is old software, another option would be to mig...

Yes, it's true, but we offer multiple ways to display comments. Some have more spacing, some less.

:::::::: Important notice. We are using the Qt framework, as you probably know, but Qt is dropping support for macOS 11 and earlier. We do need to upgrade Qt, to fix the known performance issues in Windows, slow log scrolling etc. People with older Apple computers than 2014-2015. will not be able to...

you can install RouterOS on a virtual machine via the CHR package, even on ARM64 AMPERE devices. There sometimes you need some intel drivers, this package is for that.

Some call it space-wasting, others call it easier readability because text ist not squished together. This is an option, comments have like 4 places you can choose from. Click on the comment header to switch between them, also in the side menu there is a switch.

nz_monkey, did you try the mode where comment is in a column? on bigger monitors that saves a lot of vertical space

If you mean about tree view, it will apply to virtual interfaces, sub-queues and such.

P.S: we have listened to the community and have walked back the device mode defaults. Btest is now allowed on the advanced mode template which is the same template that will be used after upgrade from previous versions if you did not change it manually. Also, to those who missed the previous betas, ...

I'm sorry about your experience, but as you can see in this thread, beta versions do solve most of the issues for many people. If you are running the latest beta and stll have some issues, you have to post the full logs and problem descriptions, as we don't know if it's even related to what is being...

eddieb, post screenshots of the issue, or email them to support@mikrotik.com if you don't want to post publicly

Finally the new beta is out! App will self check the update when you launch it, so re-launch it ;) It took longer, as the biggest change was hard to implement - tree views. Now we will continue with the rest of the requests and ideas in this thread. What's new in v4.0beta12: *) implement collapsable...

If the latest beta version does not solve your issue, please send supout.rif file to support, describing in detail about what happened.

How on earth disabling stuff like btest protects just anyone? Are there any documented cases of a feature missuse? no need to get agressive. yes, of course there is documented cases of misuse, even in this forum there are people who are asking why they have unrecognized accounts and unrecognized sc...

blingblouw2 you can just enable bandwidth test. ask the user to push the button to confirm. it's a one time operation, you don't have to do it every time.

You are completely right. It should be enough with read, to just read. and should be enough with write, to upgrade. But there are deep running issues in the policy system everywhere, we have to re-make the whole thing.

satboxbg
please make a separate topic. we only discuss changes between latest and previous beta in this topic.

Sorry about the specs, yes, there were some mistakes, we will / have corrected them. In the PDF we always try to include more information, so I suggest always opening those files too.

Still we need to see that config, as who knows what "factory config" means. Normally using only cables you should get near gigabit.

SSH-2.0-ROSSH means "RouterOS SSH", it is part of RouterOS.
SSH port can be changed here: https://help.mikrotik.com/docs/spaces/R ... P+Services

You are still writing in the wrong topic!

Like it says "The maximum number of allowed characters is 1."

hAP - home AP
wAP - wall AP
cAP - ceiling AP
wsAP - wall socket AP
mAP - mini AP
ltAP - LTE AP

Please keep topic to release notes! You are free to make a new topic and continue offtopic in there, but this topic must not be messed up by other discussions except changes in the version.

As in the name, it's a "wall acces point (wap)", so it is designed to be used against a surface. While the radiation pattern is roughly spherical, the best antenna gain is to the front.

This will most likely be illegal in your country and you could get into trouble. The actual output power is limited by the "Country" you have set in wireless settings.

The website specifications had a copy paste error in the antenna specs.

Patrick, that is not helpful. iOS18 works fine with MikroTik wifi, no need to give such generic search links. There could be all kinds of issues specific to RADIUS auth.

Gustavo, please post more of your setup and config.

We have to say this every time, but, we have many developers, each team works on different things.

Why are you arguing? The link says it clearly:

IEEE Std 802.11be™-2024 was approved on September 26, 2024. Publication expected soon.

No, workspace has no relation to the IP of the specific router. Workspace is just the desired layout of windows. You should be making the workspaces per "usage type", not per each device.

Well nearly all MikroTik APs support passive PoE input, so it's not an issue. If you use another brand, you might need an additional PoE switch then.

Read our latest newsletter and learn more about: - new outdoor AX devices - new D.I.Y. RouterBOARD - APA-1 overvoltage protection - distributor case studies - latest #MikroTips and tricks, and so much more! https://mt.lv/news116 Hi Normis, Hope you will be fine. I bought NetBox 5AX 3 days ago and s...

People who did not read changelog will be shocked in 8 days then

I do understand these theoretical situations. There are several types of posts here: - People who want to know what exactly will happen, and who have not yet read the previous posts. I try to answer them. - People who have theoretical "what if ..." concerns for highly improbable scenarios....

What will you be using traffic gen for, in this remote router? There is no need for theoretic, like I said

Just some clarification, all devices with LTE and WiFI come with default password for at least a year, I think. I have to check for up to date info. I think the last remaining devices with no password are CCR series.

The article does not go into much detail, but they are referring to the same devices that were compromised up until the year 2018, and have not been patched. If you are running RouterOS v7, your device should be safe, but to be 100% sure, you can inspect your configuration for any unknown rules or s...

Those features existed previously and if you used them, they are still working. Only new configuration requires approval by button press, for remotely connected user, to protect against remote intruder.

You can set this option today in 7.16, and it will remain after upgrade. Existing config is not affected by device mode limitations. This won't work with the options that did not exist before 7.17. Maybe, release a version where partition, downgrade and bootloader are known, but have no effect and ...

andriys let me repeat the question. you have full access to the router. what could be so f***ed up that you can't fix it from the fully working command line, but you can type "partition activate" command?

How do you suggest the router will determine which port has internet access, and then disable it? You can't disable all interfaces.

To be honest, the most surprising thing coming from this topic is that people use partitions, even though most of our devices don't have enough space for that. This feedback will help us. What would be much better if you could describe actual use cases, like @bmann has done, instead of "nobody ...

It starts to look like some at Mikrotik are not exactly familiar with the concept of managing devices in inaccessible locations or located in other country (or even continent)....

Please describe your specific use case, so we can see how to improve it. Not theory, real use.

I already explained, that if you have access to this device and are able to issue commands, you can also fix your config in other ways, not just by partition change. And if a script can do things in your router, so could an attacker. Those people that have thousands of routers that all use partition...

Rough timeline for v7.16 beta1 to v7.16 release was from June 5th to September 24th. Beta period can be considered grace period.

above quoted line from the manual

> "you can use the "save config" button to copy it over to other partitions.""

this can be done without any device mode changes, limitation only is applied to manual re-booting to other partition, if main one is still working

pe1chl, why is this so hard to understand? your complaint is about routerboot settings, that you can't switch to "try-ethernet-once-then-nand". You can, switch now and upgrade later. about partitions, their purpose is to reboot into backup, when device fails to boot. this works without any...

that is the exception. i'm asking why he is doing that every time after upgrade.
if your tunnel is down, you can't switch partitons anyway. you need access for that.

This thread highlights some very interesting workflows we never even imagined https://xkcd.com/1172/ Why do you switch the partition after upgrade? Can you not simply create a second partition, or update it, if upgrade is successful? And if not successful, boot from the backup? That will not require...

dave3, could you include more info, what window manager are you using, OS version etc. and send a video to support?

Did you read the thread? The person answers the same thing as I answered now. You can't do it. RouterOS has no sed utility. You can only overwrite the whole file with new content. All of it.

Unable to repeat the issue, sorted filter rules by interface, went to NAT, went back to filter, rules still sorted by interface. Maybe something specific in your case, email some screenshots to support please

There is no way to do it in the router. You need a utility like "sed".

You can set this option today in 7.16, and it will remain after upgrade. Existing config is not affected by device mode limitations. /system/device-mode/update partition=yes expected end of command (line 1 column 28) you cannot. 7.16 does not know about device-mode "partition". Are you se...

This is a fu__ng function the need to press a button to manage device mode features. It's very fun with remote site at fews hundreds/thousands kilometers. How this new device mode will be handled with upgrade/downgrade OR partitions switch with differents versions ? There is no need to do this at a...

Developers of Mikrotik There are so many AP AX that are unusable in 5G because of SA query timeout, and you have just reword this? Are you serious? Do not complain that for the market share of Ubiquiti in Wifi... unacceptable for months not to be able to connect my business laptop to wifi Please te...

Sorry, still not understanding your issue.

issue command "file edit value-name=contents test.txt" and change your URL. what's the problem?

New devices come with a default password. This is the only way I think can solve this issue.

You can set this option today in 7.16, and it will remain after upgrade.
Existing config is not affected by device mode limitations.

The issue with downgrade is that any attack script can immediatelly issue downgrade command to some version with known security issue and take over the device. See https://forum.mikrotik.com/viewtopic.php?p=1101208 as an example of how smart these scripts are. How about disallowing downgrade to ROS...

The issue with downgrade is that any attack script can immediatelly issue downgrade command to some version with known security issue and take over the device. See viewtopic.php?p=1101208 as an example of how smart these scripts are.

What is your proposal, to verify ownership of a device in a way, that a remote attacker can't do?

Let me remind you, that if your device has some need to be routinely switched between partitions all the time, send somebody to unplug it from power ONCE in it's lifetime, to enable device mode setting for this.

Device Mode: Partitions - If your router is unable to boot, it will still be able to boot into your other partitions. No restriction for crash recovery. - You can still repartition your disk into more partitions. No restriction for repartition. The only thing not allowed by device-mode setting "...

you already wrote the command to do it from terminal. what is the issue with this command?

Pe1chl: "That means that once you upgrade to 7.17 you will find existing features inoperative" That's not true, can you please stop repeating this nonsense? It was explained multiple times, that your container will continue working, your hotspot will continue working. It is documented and ...

Search found 26723 matches