MikroTik

Ferrograph

Thanks for this. This helped me get EP06 working on IPV4 on UK network EE, which until I ran this command would only connect IPV6 which isnt terribly useful. Interestingly I had to use that EXACT command. If I tied it with the networks APN “everywhere" it made no difference. I can now enjoy the...

Ferrograph

I have two AP's setup with load balancing groups which works fine. There are some smart devices that need to connect and sometimes they connect, sometimes not. Looking in the logs whats happening is the not-so-smart devices are repeatedly trying to connect to one access point and load balance reject...

Ferrograph

This is a great card but I had to go back to LTE6 in my LHG-LTE6 because on EE in the UK it would only get me an IPv6 address and never a IPv4 address despite setting so in the APN. Im not sure if this is a problem with the Mikrotik driver or the card? Perhaps the Mikrotik driver isnt setting up the...

Ferrograph

After updating LHG-LTE6 to 7.7 and config reset LTE no longer gets an address but does connect to the tower. Restored from backup onto 7.7 and working again. I made sure firmware was updated and rebooted before config reset. Grrrrr

Ferrograph

Try disabling your fasttrack firewall rule if you have one.

Ferrograph

Im still seeing this issue even on 7.5. I previously said it only effects 5G radios but Ive seen it on 2G radios too. I think the reason for this is simply that 5G radios are the busiest where mostly modern devices exist. On one site I created a 2G only network for smart devices. I then started seei...

Ferrograph

Ive tried everything I can think of. Sometimes even power cycling does not fix it. Sometimes swapping the SFP module can fix it until it stops again.

Ive just upgrade some units to 7.5 and the problem remains. Big Sad.

Ferrograph

This is a really annoying problem. I have a system with 9x CRS328 all links by fibre and randomly I loose switches. When I make checks, I see that I can see broadcasts from upstream devices, but any packets sent to these never reach them even though the port TX counter says its sending. If I plug in...

Ferrograph

Has anyone had any success using BT Hybrid Connect as a 4G modem? (from now on know as BTHC) BT are supplying these with their Hubs as "unbreakable internet" which is marketing speak for 4G backup. It does work but takes a few minutes to switch over. RouterOS can do better I think. The dev...

Ferrograph

Im having the same trouble and similar speed capping although if I do a UDP bandwidth test from a hap on the network (actually in a remote building off the SFP port) with packet size of 1400 I can easy get gigabit. If I use default 1500 then the speed is a fraction and lots of lost packets. TCP band...

Ferrograph

This is very cool. So Even a mobile /64 address could be utilised to get internal IPv6 capable devices connected. Haha, Bet the designers of IPv6 have veins popping out of their heads finding out this is how it will be used. What I dont understand is why the designers of IPv6 built in such colossal ...

Ferrograph

Ok penny dropping when you said its for the network between provider and mikrotik. Gotcha.

Is the new ipv6 firewall NAT in mikrotik not helpful with ability to masquerade? Could I not create an ipv6 LAN and share it via NAT? This would at least get ipv6 compatible devices a connection

Ferrograph

Interesting.

If I look in Prefixes there is an entry of: "2a01:xxx:c2a

:/64"

Is this a usable prefix?

Ferrograph

It cannot. A single /64 range given out by SLAAC can only be used by a single host, not by a network.

...Yet a humble mobile phone can tether several devices off that address but Mikrotik cant?

Ferrograph

Love the pic. An agent told me this over the phone when I begged them to make my brand new sim card IPv4. What this actually means is probably that all new sim cards will be IPv6 only. Maybe existing sim cards that get IPv4 like PAYG will also be switched over. So either way we need a way to make an...

Ferrograph

What about mobile operators that will now only give IPv6 /64 out by SLAAC? How can that be consumed by an established IPv4 Mikrotik network? Im facing an issue where I have enjoyed providing clients with LHG-LTEx on the roof with IPv4 WAN passed through to the router in the house (usually Mikrotik, ...

Ferrograph

Mobile operator EE in the UK are now issuing IPv6 only SIM cards so this is becoming more and more important, even urgent since I can now longer tell a client to get a SIM card and then go put LHG-LTEx dish on his roof and get him some decent internet. Lots of clients have IPv4 only devices at home ...

Ferrograph

Thanks for the responses. Looks like I need to do some reading.

What is RA @tdw ?

Ferrograph

I have an established IPv4 LAN with a slow DSL connection. I want to add a LTE connection but the provider (UK EE) issue all new SIM cards as IPv6 only. Additionally they said that in 2023 they are turning off 3G and IPv4. So how can I use the IPv6 connection? Setup is CCR router and LHG-LTE6 on the...

Ferrograph

Still broken in 7.2rc4, and also not seeing v6 addresses that must be present since ipv6 is working.- only seeing link local.

Ferrograph

v7.2rc3 Broke General operation on my CCR1009-7G-1C-1S+ Routers LAN IP is on the bridge along with DHCP server. IP address inaccessible yet DHCP works. Consequently not internet access for devices. No Winbox access via IP but MAC Winbox worked thankfully! Upon checking lots of things I found that ad...

Ferrograph

I got EP06-E (EP06ELAR03A08M4G) from a well know chinese online store (I know I know). I installed it in my LHG-R and it works. Also I can confirm that pass-through works. I got 50M down and 10M up. Disappointingly though no CA, even on a tower with supported bands. where my phone does get CA. Three...

Ferrograph

Three is normally B3,B1,B20 around my parts of the UK. I used to see LTE6 successfully get CA on B3+B20 but would drop it after a short time. Occasionally on latest firmware v28/29 it gets CA briefly after a reset then drops it. Ive got L850 and EP06 on their way to test with. Im slowly reaching con...

Ferrograph

@stevenma Did you get anywhere with EM12-G working in passthrough mode?

Ferrograph

@uiblogit Does the EM12-G mod work with pass-thru apn?

Ferrograph

Thanks for the info. Interesting - I have SXT-LTE also and I put R11e-LTE6 in it and had it running in pass-thru mode. But even when it had the R11e-LTE in it I was able to do pass-thru? I think Chateau has different LTE hardware, certainly does use R11e. Happy to be corrected of course. Ive seen ar...

Ferrograph

I have LTE6 devices with both Three UK where you get a public IP and SMARTY where is private. Same issues on both.

Early LTE firmware got CA but would drop it. Now no CA at all.

@hecatae Are you using pass-through APN feature or device is doing full routing/firewall?

Ferrograph

I'm familiar with the pain of Mikrotik LTE. Ive written up a post explaining everything Ive discovered so far on this, and Ive made a dish available to support to work on to hopefully make it the great product it could be...

viewtopic.php?t=179722

Ferrograph

Did you get anywhere with your dish? I have had ongoing issues with this product for over a year now - I posted a summary of everything Ive observed viewtopic.php?t=179722

Ferrograph

I feel your pain. I started writing up my experience here but then decided to start a new topic listing all the issues Ive had and frustration at support blaming the tower.

viewtopic.php?t=179722

Ferrograph

LHG-LTE6 and other LTE product by Mikrotik should be great, theres nothing else like it/them particularly the dish' (happy to see a link to some alternative) but being a Mikrotik fan it saddens me to write this largely negative topic. I'm not getting anywhere with it and support are now just blaming...

Ferrograph

I just decided to try a couple of test at the office setup to confirm suspicions that R11e-LTE6 is the problem so I checked which cell tower it was connecting to and it was the expected tower locally with bands 1,3 & 20. A speed test shows 5Mbps download. I put the sim card in my phone and check...

Ferrograph

October now and still this issue isnt resolved. Mikrotik have been doing some diagnostics remotely on one site that was getting CA but now does not get CA at all and this has been the case for months now. Ive also got a dish setup at the office to do some tests pointing at a tower with bands 1,3,20....

Ferrograph

@InTheSprawl - Welcome to the rabbit hole of "DHCP without success". Various thing can cause this. I'm only going to talk about the issue Ive seen that can cause this message in the logs, which Ive spent months chasing down and trying all kinds of configurations.. Check the APs 5G wireless...

Ferrograph

"DHCP without success" symptom cause by 5G radio crash (broadcasts stop being forwarded - zero TX counter) still not fixed.

Ferrograph

Agree, this thread has a lot of different issues that cause "DHCP without success". I might start a entirely new thread for mine which is the 5G radio crash resulting in broadcasts not being forwarded to wireless clients. In My case DHCP server is working as it should and I am running 3 on...

Ferrograph

Theres a number of causes but the one Im trying to chase down is where the 5G radio's crash. You can tell by looking for zero TX counters on the 5G radio interface on the AP, but active TX counter on the 2G radio interface. Basically broadcasts aren't making it to the radio, usually you can also sni...

Ferrograph

Just wanted to share my ongoing frustrations with Mikrotik LTE hardware. Ive got several LTE products (r11e LTE6) on customer sites and one for testing at the office - and they all show the same two issues: # Passthrough mode is unreliable. Stops passing traffic or traffic flow becomes very slow aft...

Ferrograph

@rextended I tried adding the rule you suggest but this did not cause the outbound connection to be made from WAN2. The PPTP client did still connect to the remote end but became non-functional. I dont think a rule specifying a PPTP client interface has any effect on where the router pptp-client mak...

Ferrograph

Thanks @rextended. I saw that you mentioned this before, but I don't understand how this helps me achieve forcing router originated PPTP connections to a specific IP out of a specific WAN? Can you be more detailed. In other places on the forum folk have repeatedly stated that using /route rules caus...

Ferrograph

Thanks, I have got WAN input/output marking in place as below and it works. add action=mark-connection chain=input comment="Mark WAN1 Input Connections" connection-mark=no-mark in-interface-list=WAN1 new-connection-mark=WAN1->ROS passthrough=\ yes add action=mark-connection chain=input com...

Ferrograph

So Im just revisiting this. I was able to setup dhcp scripts to insert the current gateways in the marked routes, and also connection marks and routing marks for inbound connections, and that all works. The primary LTE1 gives a real WAN IP so I can access the system via that, but LTE2 provider gives...

Ferrograph

I can see cases for both setups, probably passthrough has a performance hit based on one of the Mikrotik videos I watched he talked about removing the address to increase performance - "Make your LTE interfaces shine" - a video that starts out very promising but then he never explains it f...

Ferrograph

Use torch on the interfaces and sort by RX/TX Rate.

Ferrograph

Thanks for detailed replies. I think I understand the point about named interfaces not being used in lookups. Marked routing aside where I've used named interface, if you look at the live routing table output at the bottom, the last two entries are default routes with the IP addresses of ether1 &...

Ferrograph

Cut down config below from a test site, and live routing table print. /interface bridge add name=bridge protocol-mode=none /interface vlan add interface=ether1 name=vlan-lte-admin vlan-id=4 add interface=ether5 name=vlan-lte2-admin vlan-id=4 /interface list add comment=defconf name=WANs add comment=...

Ferrograph

I will see if I can post a cutdown config from one of my test sites.

Ferrograph

Thanks for the two reply's. LTE connection works if connected directly to say laptop or desktop ethernet. Also as I mentioned when the default route is removed from the PPPoE connection traffic flows over LTE as expected. When I use /tool ping for basic testing I use the interface field to select th...

Ferrograph

I have two WAN connections. One is fibre provided by PPPoE (ether1), the other DHCP (ether7) from a Mikrotik LTE dish configured for passthrough. These are setup with add-default-route=yes with distance 1 & 2 respectively for failover purposes which works. I also have some PPTP VPN connections t...

Ferrograph

No fix yet. And Im very disappointed with Mikrotik, as Ive sent them and lot of data and info on this issue even given them remote access to the site and they have done nothing, To be clear this is now purely a 5G WiFi radio issue. Everything else thats wired or on 2G Wifi works without issue. Ive c...

Ferrograph

Further info on this. The problem seems to be when you have LTE passthorugh as a second WAN. Ive tested on several devices now and when you have a LTE or DHCP or PPPOE primary wan (distance=1) and then add an LTE connection as backup (distance=2) then it doesnt work, no traffic flows. Even using /to...

Ferrograph

russelld Are you able to make v28 available to me?

Ferrograph

What you describe is my experience too. There's definitely some issues with the product - either the internal cell card or main firmware. It's a shame because when it works, it works very very well. I'm still having issues even on v27 cell card firmware exactly like you describe and mikrotik support...

Ferrograph

DHCP "without success" issue with wireless clients still exists. Although see the thread below for more detail, its not really a DHCP issue is 5G radio issue.

viewtopic.php?f=2&t=116963

Ferrograph

I believe there are various causes of this issue. All of the research and discoveries I've made about it are on the other thread I linked above. In my case, it's specifically where the 5G radio crashes, but allows devices to associate but no traffic flows. Additionally the 5G radio transmits junk pa...

Ferrograph

I upgraded all APs to v6.49beta46 because there were several entries for wireless fixes in the release notes. After 4 days the problem is back as with previous versions. So no dice. Its been several days since I sent wireless captures to MT support with no reply or even an acknowledgement of receipt...

Ferrograph

I managed to get hold of CCR1009-7G-1C-1S+. Works first time with my standard config on the SXT-LTE6 which is ether1 as passthrough port, and vlan hanging off that for management!

Next I will try to default the RB3011 and try again.

Ferrograph

Ok interesting - you are using the vlan for the wan passthrough not ether1 itself? Im sure I tried this combination and it didnt work. I will try... About LTE firmware Im on R11e-LTE6_V027 (I updated my R11e card in SXT-R) the SXT is currently on 6.49beta44, Ive tried all versions. I guess I could r...

Ferrograph

Just revisiting this as I have an office wanting a 4G connection. They have RB3011 with very basic config - no joy getting it to work. Been trying all sorts with my own RB3011 - no joy. ** BRIDGING DOES NOT WORK WITH RB3011 ** and I suspect others too! The strangest thing is that when you torch the ...

Ferrograph

Still at it. More info... Ive discovered that when the 5G/ac radios gets in this weird state it is generating 10Mbps of phantom Qos packets. I'm seeing this on all 5G radios that get in this state. Resetting the interface in capsman clears the issue. You can see the high usage if you do a wireless-s...

Ferrograph

Ok this issue is still driving me nuts. With the group-key-update=01:00:00 I got 4 days of very little problems. After that Im seeing the DHCP message on one access point after another. But I noticed something odd this time. Looking through the logs I can see which AP+radio is causing the DHCP failu...

Ferrograph

@brg3466 Just waiting to see what setting the group-key-update=01:00:00 gets me. Im being sure to change only one thing each time. The problem often has a time element. Sometimes just by resetting the wifi it goes away for a bit then returns with a vengeance. It is indeed a perplexing problem. Its b...

Ferrograph

I found the issue on my site that was plagued with this.Maybe this is the problem for others too. See my post on the other thread... https://forum.mikrotik.com/viewtopic.php?f=2&t=116963#p855159 UPDATE: Sorry this did not fix it. The problem returns about the 4day mark. But added some more info ...

Ferrograph

Ok, so Ive been working this issue on the one site I have that has it and I seem to have found the issue - at least this is what the problem was in my case , there are numerous things that can cause this. Before though I'm Just going to tell about something I tried in addition to what Ive posted abo...

Ferrograph

@SiB I did get Mikrotik support looking at this and made remote access available, but unfortunately they weren't able to debug it because when the connection dropped they lost their debug connection. I was going to setup an additional connection so they could debug but then covid lockdown meant I co...

Ferrograph

Sorry I know this is an old post but I have same weirdness with some SFP of the same model showing these figures and sometimes connectivity between switches is lost.

Did you reach a resolution? Faulty SFP modules? Something else?

Ferrograph

Update. I think I may well have a faulty cAP AC. After fixing a couple of RJ45 type issues (found 2 APs running at 100M instead of 1G) and being surprised to still be seeing "offering without success" messages, I checked the logs by filtering on MAC address and noticed that the remaining m...

Ferrograph

Some more information. Ive been trying all sorts to fix this including setting up RSTP priorities on the x9 Mikrotik 328 switches on this particular site, which didn't make any difference - but at least I now understand RSTP priorities. What I noticed today was that while a device was having trouble...

Ferrograph

I checked all the switches and everything is as it should be. Also I think if there was a vlan missing there would be devices we couldn't reach which is not the case. Plus Im seeing this on sites that have no vLans. I tried something else today which was to uncheck "Add ARP for leases" in ...

Ferrograph

Site was stable for a few days but I noticed the message again today in the logs even though all APs bridge protocol was set to none. Again I toggled the bridge for the particular AP, this time from none to STP, a few seconds later the device fully connected. So the 'none' setting on the APs bridge ...

Ferrograph

@mkx Plausible explanation. Does this still apply if I'm using capsman and local forwarding?

Ferrograph

Sigh, Im still seeing this with 6.48.1. Ive got a site with 17x cAP AC, CRS328 switches x9 and CCR1009 running the show. All top stuff. So I was working on some other things while on site and noticed my phone and tablet struggling, phone was saying "Obtaining IP..." forever and client also...

Ferrograph

Still seeing this in 6.48.1. So annoying.

Ferrograph

Two RB3011 units severely effected by 6.48 and updating to 6.48.1 did not fix, had to roll back to 6.47.8. One RB3011 became unstable with port flapping but was kind of working long enough to be useful. Another RB3011 rebooting with the kernel message, port flapping, and ports 6-10 were non operatio...

Ferrograph

Yes, Ive found routers setup with the IP on a member port before and its not really seemed to caused a problem, although in all cases if I spot it I move it to the bridge.

Ferrograph

Just wanted to share this... I had another site with really patchy internet and https, it also had the issue with a EoIP interface dropping the MTU which I fixed and expected everything to work again but it didn't which has had me scratching my head. I exported the config verbose and went through it...

Ferrograph

I was just baffled why a customer reported that the center button did nothing. Their cAP AC's are in caps mode configured out the box by holding the reset button for caps mode which is great quick way to set them up. I checked the default configuration script and it does include dark mode even for c...

Ferrograph

Thank you! Thank you! Thank you! This has been driving me nuts for several days! I use eoip links to bring customers networks to my desk so I can work on things that require wire type access and I never noticed the change it was making to the bridge MTU. I had two sites where for whatever reason thi...

Ferrograph

Who's to blame? The bridge forwarding, the DHCP broadcast packet, the pseudo bridge ???

Thanks for this clear explanation. Would this apply to standard wireless client setup with say multiple cAP AC, all ports bridged CAPs mode with local forwarding?

Ferrograph

The device is LHG-LTE6 and way out of reach so SIM cant be changed. Operator is Three UK, roaming is not enabled.

What more can be done? Its al very weird, what do you think of my theory that one of the modems receivers is becoming non functional?

Ferrograph

Regarding cell-lock I did try this and it ended up offline as described above and I had to talk customer through removing it. So yes I have experienced the cell-lock issue resulting in system being offline.

Ferrograph

Here is the lte log:

lteScriptOP1a.png

Ferrograph

The CA was dropped and the following entries were logged...

lteScriptOP1.png

Unless I'm misreading the B3 connection was lost (the reason isnt not clear) and it connected to the B20.

Ferrograph

Thanks SiB for the update. I updated the script and killed it from the jobs tab. Then reran the script.

There is data now in the lte log. Should I clear the log and collect data with the fixed script?

Ferrograph

Sadly it didnt stay up long on the B3 band and dropped after a few minutes. But with the cell-lock in place it didn't reconnect to even the B20 band, I had to get the customer to issue AT*Cell=0. This adds weight to my theory about the 2nd receiver crashing, and it would seem to be that in r11e-LTE6...

Ferrograph

Thanks SiB - I realised not long after that modem-init was bad place to use cell-lock so I removed with at*cell=0, did a reset and then issue cell-lock with terminal once.

It is connected now with CA so I will monitor to see if it stays. I should know by the morning.

Ferrograph

I applied the cell-lock as suggested. Ive not tried this yet so thanks for putting the exact string needed. I will report back results.

Thanks SiB

Ferrograph

I've tried enabling just band 3 as this is the primary band when CA works but the modem still drops CA but remains connected to just B3 instead of dropping to B20.

I also tried enabling just B3 & B20 but same result. Drops CA and drops to B20.

I wish MT would take this issue seriously.

Ferrograph

Im facing a similar issue, and I think that the one of the receivers in the r11e-LTE6 gets in a state where it stops functioning and you end up with no CA/single band operation until you at+reset. Heres what I observe happening (I sent all this to MT support along with logs and they (Emils T) fobbed...

Ferrograph

Im facing similar issue but r11e-LTE6 v25 didnt fix it. I have LHG-LTE6 pointed at cell tower with bands 3 and 20. When first connected it come up with band 3@15Mhz as primary and band 20@5Mhz. Speeds are good. [SNIR/CQI 17db/15] R11e-LTE6_V025 After a while I loose the primary band and it drops to ...

Ferrograph

I got passthrough working on a brand new setup. LHG-LTE6 with Audience. I set it up as ether1 passthrough and a vlan for management. Worked first time. Tried the same setup on the SXT-LTE + RB3011 and still no traffic flow but DHCP received the WAN address as before. So scratching head. I happened t...

Ferrograph

I've found powerline/homeplug gear is basically similar to WiFi in terms of expected IP throughput based on the PHY layer speed. By the time you account for error correction and retries you end up with about 1/3 the speed. For example under best conditions WiFi 'n' 300M yields 100M throughput. Happy...

Ferrograph

Did you ever get to the bottom of why this doesn't work?

I changed my provider just in case it was sim-card related issue (clutching at straws I know) but I get same issue.

I've had this device for a while now and tried every way to get this to work but never been able to use bridge mode.

Ferrograph

I dont think this is DHCP persay - it only happens with wireless devices - at least the issue I'm observing. Try deleting the wireless client from the registration table either in CapsMan or wireless whichever you are running. Most times this restores the wireless client to working state. It seems t...

Ferrograph

Just wanted to ping this as Im still know where on with this. The setup is real simple. SXT-LTE and RB3011 on same /24 subnet. SXT-LTE on .4 and RB3011 on .1. There is EoIP tunnel between the two with the tunnel interface selected as the passthrough interface on the SXT-LTE APN. DHCP client sat on t...

Ferrograph

After upgrading RB3011 from 6.44.3 to 6.45.3, all my PPTP has stopped working, inbound and outbound.

Downgrading one by one PPTP works again only when I got to 6.44.4. Not good!

Ferrograph

I've tried extensively WITH and WITHOUT the SIP helper. You still get zombie connections. Common though is dest-port 5060/5061.

Perhaps there is something in the firewall/NAT that recognises 5060/1 in addition to what the SIP helper does?

Ferrograph

I think we're forgetting that deleting the connections manually or by a script only works some if the time. If the connections get in that wierd state where the timeout starts counting up even deleting them doesn't work - even though they are gone from the connection list I think the that fact they ...

Ferrograph

After some success and failures I refined my small list down to the following which covers a great deal of ads and stuff I dont want curious kids looking at. Extremely low impact on performance.Hope its useful. /ip dns static add address=127.0.0.1 comment="Block Some Bad Stuff" regexp=porn...

Ferrograph

Ive just got RBSXTR. LTE passthrough is broken. I've seen reports that it works on 6.42.7 but I've tried downgrading and it doesn't work. See my post here: https://forum.mikrotik.com/viewtopic.php?f=2&t=139038 Basically the DHCP relay part works but packets dont flow, "host not reachable&qu...

Ferrograph

Doesnt work with 6.44beta6 or 6.42.7 or 6.43 Heres my export: [admin@SXT-LTE] > export # sep/12/2018 23:51:56 by RouterOS 6.42.7 # software id = CF7Q-26RP # # model = RBSXTR # serial number = XXXXXXXXXXXXXX /interface bridge add admin-mac=B8:69:F4:01:2F:47 auto-mac=no comment=defconf name=bridge /in...

Ferrograph

Well spotted about the /32 addressing.

I just noticed that 6.44beta6 was out and guess what is in the release notes:

lte - fixed DHCP relay packet forwarding when in passthrough mode;

Will test and report back.

Ferrograph

Good point. The beefier Tiks don't need fasttrack. I need to save my pennies and get one!

Ferrograph

PPTP with CHAP is fastest, as per the tile of the post. But a gotcha is that you need to prevent fasttrack from working on VPNs cos it screws them up and you get slow speeds surprisingly. I use the mangle to mark traffic on VPN interfaces in+out with connection-mark "DontFasttrack" (use an...

Ferrograph

Ive just got SXT LTE Kit. Standard setup works absolutely great. But the main router (RB3011) needs the LTE WAN address in my setup so Ive tried using passthrough mode and it works to a point but I cant actually get any working internet over the interface. Ive setup SXT on my LAN by using DHCP clien...

Ferrograph

Did you ever get to the bottom of this?

Ive got exact same issue with SXT LTE and RB3011.

RB3011 gets WAN address from LTE via dhcp-client but the connection isnt usable and pings fail with host unreachable.

Ferrograph

Im interested in this method of blocking stuff. Ive been experimenting with using a small list of well chosen names and "catch" words. After doing a bit of browsing on sites well know to be littered with ads and looking through the dns cache, I have good results with this small list. Not p...

Ferrograph

Ok Partly my bad - I was doing TCP tests and the lower speed is down to TCP overhead. Likely Speedtest.net uses UDP. But the reason I was doing TCP was because I couldnt get UDP test to work - however Ive since discovered that UDP only works if I set the direction to "Both", setting it to ...

Ferrograph

Ive got a setup (RB941) with roughly 60M/20M wan connection on VDSL (PPPoE). Wired and wireless clients can get upto 58M download speeds from speedtest.net When I test with the built in bandwidth test tool to a btest server than can manage 500M, I only see 20-25M tops. Its pretty standard setup with...

Ferrograph

Actually, I have a theory. I've seen the connections timeout period count upwards which shows they are getting in some weird condition. Maybe the delete doesn't fully delete connections in this state and it gets orphaned and hidden from the list. I theorised that loosing the WAN might do some blanke...

Ferrograph

Still got this issue in 6.41.

I've tried deleting connections but this doesnt always work. In this case the only thing to do is to reboot it. But it gals me to do that - this is about the only thing I have to reboot Mikrotik for. How sad thats its something so basic.

Ferrograph

Set up a default route with the desired gateway (VPN interface or VPN box IP), but add the condition of a routing mark. Say "to_USA"

In the mangle, mark packets with the desired src IPs with the same routing mark. Thats all you need to do.

Ferrograph

If it's pptp, try just CHAP encryption. You might get even more speed.

Ferrograph

Hi all, sorry for trouble, out of sudden I have tried something and fixed it (thinking that the connections that if need to go through "torch" it must be excluded from "fasttrack", which was an idea I read and used on my ipsec to Azure and learnt from somewhere in the internet),...

Ferrograph

CDC_NCM is in our to-do list but I can't comment when we will start to work on that.

On the todo list will do for me! Thanks uldis.

Ferrograph

+1 for LTE bridge mode. But, I made a post here with some information on possible standardised solution to this bridge mode thing collated from hours and hours of tinkering and research. Unfortunately I didnt give the post a very good title and forgot to put anything to do with LTE in the title. Oh ...

Ferrograph

Ah, kometchtech! That might be the issue - I had to retire an old GB switch and only had a 100M switch so I moved lower speed devices to the 100M switch and the rest to the remaining GB switch. But its possible and I dont recall the flapping before this. Could be big coincidence of course. I will tr...

Ferrograph

Ok I'll try this next time I go to one of my sites, and report results back.

Ferrograph

Im pretty sure I turned those off (none) but its possible I didnt.

What problem could these potentially cause?

Ferrograph

Ive seen this a few times now and I'd really like to get to the bottom of it. I do a lot of remote monitoring for clients and its very useful to have a Mikrotik on site for diagnosing issues for clients that have their own network. I setup a phone home VPN on the box and just give it either a fixed ...

Ferrograph

Thanks Steve.

Makes me feel a little better about downgrading if I need to. Im trying a few things and monitoring count of link-downs against up time to get a read on frequency of occurrence.

Ferrograph

I've been running v6 release candidates for a while now. Currently on v6.41rc38. I'm getting an increasing occurrence of port flapping on ports with cables connected. They all flap at the same time so I know its a flapping issue. Is anyone else experiencing this? My distributor advised to downgrade ...

Ferrograph

Ok Ive spent quite a bit of time on this and reached a conclusion... # Its desirable for our Tik's to get the public IP from a 3G/4G mobile broadband devices - not through HiLink, PPP or other non-ideal method. # A lot of devices now support NCM mode where the public IP is handed over on a special N...

Ferrograph

I get this no matter what I try to connect to. Any clues anyone?

Ferrograph

Are the dynamic rules fixed in later versions? Like 6.38.1 I've not seen any release note related to this and things definitely work better with the rules below instead of the default dynamic Tik ones. But really I'd like to just use the default ones. I found these on the forum a long time ago and b...

Ferrograph

Gigabit PoE issue. Im a big Tik fan. I have two a couple of these, speeds and coverage are great. Run toasty though! However, to get rid of injectors and PSU's and power some other PoE dvices I bought a small Gigabit PoE switch DLink DSG1100-08P and the ports wont come up Gbit, only 100M which kind ...

Ferrograph

The cables you tried, did you try shield and non-shielded? How long are the cable runs? I only have unshielded, the runs are about 20m. But I tried with short 3m patch cables same result. There's some note about the using no shielding with PoE in the spec. It is odd I agree. Thought we'd seen the l...

Ferrograph

Sorry Ive not updated this post. I realised I wasnt using the wireless-rep package. After I replaced that I got the speeds expected. I have yet to try the default wireless config for compatibility, but my experience is Ive always had to fiddle with Mikrotik wireless to get full compatibility with de...

Ferrograph

Gigabit PoE issue. I have two of these, speeds and coverage are great. Run toasty though! However, I bought a small Gigabit PoE switch DLink DSG1100-08P and the ports wont come up at Gbit, only 100M which kind of defeats having AC speeds which I was getting with the supplied injectors and connected ...

Ferrograph

Both APs in the same place on their face (top room aiming downward) and only one powered at a time during tests. Used CH36. Export below. These settings gave best results: add authentication-types=wpa2-psk eap-methods="" management-protection=allowed \ mode=dynamic-keys name=MySecurity sup...

Ferrograph

I bought a couple of the wAP AC models to try out hopefully to use full time since Im a big Tik fan. I've only configured one so far and Im comparing performance with a Huawia HG635 (configured as AP) and using laptops, tablets and phones. So far Im very disappointed.with performance. With the APs l...

Ferrograph

In our area there is now a FTP broadband with provider TalkTalk UK. They call it Ultra Fibre Optic (UFO) Supposedly its >900Mbps service but that remains to be seen. Its still beta really. I started on the domestic trial which used a DHCP WAN connection. With RB2011 I was getting nearly 600Mbps down...

Ferrograph

If you're struggling to get it to show in netinstall, try an isolated switch in between. Struggled for an eternity with this then put in a call to LinITX my local supplier, and they suggested timing of the port on windows might be an issue. Put a switch in and it showed first time.

Ferrograph

Had a few confusing occasions where I've altered the PPPoE MTU on remote sites to values I know work and ended up being disconnected from the site. Upon attending I found the PPPoE reporting authentication failures. If I retype the password (looks apparently unchanged) and click apply, suddenly the ...

Ferrograph

+1000 this for me too. Use case: I install Mikrotik and Ubiquity Unifi combination for medium to large (but simple) networks with off site Unifi Controller. The Unifi access points do a lookup on "unifi" to find the controller for adoption with is in the cloud with an IP address that occas...

Ferrograph

Guys,

Upgraded a 951 from 6.17 and some of the config got lost:

# all firewall config
# Interface names
# all wireless
# bridges lost

And a few other odd things like the Wireless SSID was the same as 'Identity', system password was also lost.

Ferrograph

domonic. Thanks for taking the time to post this, I figured it was something like this but not had time to investigate fully and log it as a bug. Important detail is the timeout counting up which I dont believe should ever happen. You should totally log it. Its been plaguing my customers with VOIP f...

Ferrograph

Im just watching the connection list with sip setting in service ports turned off and a filter in the connection table where dst-port is 5060.

Should I be seeing connections with the timeout counting up?

Ferrograph

Im seeing this problem too but with cabled WAN on dhcp. After some time sip connections cant register. Its very frustrating, and Im getting it in the neck from users! Im on v6.12, but I just updated to v6.13. Likely its still an issue in v6.13, as I dont see any fixes related to sip or UDP connectio...

Ferrograph

I presume you want to access the modem web interface to check configuration ADSL stats etc. Depends on how the modems LAN setting work. But try this. Usually these devices, as a minimum you can set the LAN port to a fixed IP. So set it to: Address: 10.0.0.1 Subnet: 255.255.255.0 In the Tik, add an I...

Ferrograph

Im seeing the same issue with 951G and BT OpenReach fibre (well VDSL) modem. Only works with auto negotiation switched on and negotiates 10M. ROS v6.3 + Firm 3.08. Modem is ECI Telecom Ltd. BT Item Code: 061513 Description: NGA ECI-CPE-MODEMS TYPE 1B ECI Model: B-FOCus V-2FUb/I Rev.B ECI Cat No: ON3...

Ferrograph

Rule 4 is for your input chain, so traffic with the router as it's destination. Since you have a NAT rule, the src-address is different and therefor the forward chain should be hit. You only have 2 rules there. I suggest you update your forward chain. Something like /ip firewall filter add chain=fo...

Ferrograph

most simple stuff you can look up in default configuration examples that are posted on the wiki for SOHO routers here: http://wiki.mikrotik.com/wiki/Manual:Default_Configurations FW there is good and protects your router and hosts behind it. Thanks for that. After a bit more reading is it rule #4 t...

Ferrograph

1 ;;; Forward established connections chain=forward action=accept If this is your complete firewall output, you need some serious thoughts. Your second rule is allowing all traffic to pass through the router, so nothing is blocked!!! Lol, off topic but, yes you are right. Its missing the connection...

Ferrograph

This is probably blocking the connection. Look at the forward chain in firewall, or post "/ip firewall filter export compact". /ip firewall filter> print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Accept established connections chain=input action=accept connection-state=establish...

Ferrograph

Thanks for your time. Is firewall on the RB allowing the NATed connection? How can I check this? Does the device you NAT to have a gateway configured? Yes, its a PC and I can RDP and other stuff to it from outside. Does the device you NAT to allow connections from other subnets if it has its own fir...

Ferrograph

I have a fairly simple setup on RB2011. A small handful of NAT rules forwarding ports to some TCP services on the LAN - all working fine. Today I added a UDP forwarding rule to the NAT for an inbound video stream. I can see the packets hitting the WAN and they show in "Connections" but the...

Ferrograph

Doesnt ether1 on some Mikrotik's have some sort of PoE feature? Perhaps that is causing negotiation problems?

Look down the spec list here: http://routerboard.com/RB2011UAS-RM

# "PoE: 8-28V DC on Ether1"

Does it work ok if you use port 5, commonly used as WAN2 on Mikrotiks?

Ferrograph

I found a nice easy solution to this. Psted the details on this thread:

http://forum.mikrotik.com/viewtopic.php?f=1&t=68302

Ferrograph

Update.

Tested this on the remote RB450. It worked!

No more 4hr drive looming over my head.

Ferrograph

Ok I think I found a nice easy solution. Tried this a couple of times on my test router and it worked both times. # Make a backup of current config in winbox or by CLI. /system backup save name=myconfig # Upload rc6 npk upgrade package # Now do a restore with the backup you just made in winbox or fr...

Ferrograph

I tried upgrading to rc6 on a test router (RB450) but the old config gets restored. However subsequent reboots restore the latest configuration, so yes fixed. Thats good. I now need a way to get the desired config to be the one that come up after rc6 upgrade. I cant get auto.rsc to work - anyone got...

Ferrograph

Thanks that looks like the exact issue. Presumably it always restores the first backup restored after upgrading to rc5? So to avoid my 4hr drive I should simply upgrade to rc6? or should I do something else first before upgrading? Like, Ive been reading about *.auto.rsc, and Ive created a compact ex...

Ferrograph

Im seeing this too and I started a thread specifically for it. Is it possible there is some command or procedure that will force the config to be saved so that after reboot/power loss the config comes back. I have a site 4hrs drive away and if the power goes the config will go back to one that will ...

Ferrograph

Ive posted this in the General forum, but its more appropriate here since it is rc5 Im running: This is a weird one. So brand new RB450G. Take out its box and allow it to boot up and set itself to the default config from the in built script. After this I upgrade to v6rc5 and then restore from .backu...

Ferrograph

Thanks for the quick reply. cant find post from normis where this is confirmed Is this the post? http://forum.mikrotik.com/viewtopic.php?f=2&t=68221&p=347325#p347325 I have an RB450 here on v6rc5, so I tried making some changes and rebooting - the changes I made persisted. I daren't reboot t...

Ferrograph

This is a weird one. So brand new RB450G. Take out its box and allow it to boot up and set itself to the default config from the in built script. After this I upgrade to v6rc5 and then restore from .backup file from another RB450 I have as a good starting point/template for initial config. I then ju...

Ferrograph

Has anybody had any success with these 3G dongles? They are HiLink dongles so need the modem switch which I have done and I can use terminal to talk to the modem, send AT commands etc. But cannot get the thing to connect and get a WAN IP address, despite trawling the forums for ideas from other huaw...

Ferrograph

Only bandrich chipset LTE modems and Sierra modems that have direct-ip firmware with product ID 0x68a3 will appear in LTE menu. Others will appear in port menu, for PPP connection. The mentioned devices when recognized in the LTE menu, will work faster than devices that are usable only from PPP men...

Search found 159 matches