Community discussions

MikroTik App

Search found 178 matches

by aoakeley
Thu Mar 21, 2024 6:41 am
Forum: Beginner Basics
Topic: LAN doesn't have internet after changing ISP
Replies: 3
Views: 359

Re: LAN doesn't have internet after changing ISP

The result is that I don't have internet on the LAN
And are you sure your new internet is working properly?
If you plug a computer/laptop directly into the new service does it get internet?
by aoakeley
Thu Mar 14, 2024 7:06 am
Forum: General
Topic: Wireguard client config mess
Replies: 3
Views: 707

Re: Wireguard client config mess

QR code is fine for me. Maybe you need better screen resolution?

You can also copy/paste the Client Config above the QR code to a text file of your choosing.

OR you could take a screenshot of the QR Code and save to wherever you want
Screenshot 2024-03-14 130030.png
by aoakeley
Thu Mar 07, 2024 5:08 am
Forum: General
Topic: One Mikrotik, 2 IPsec VPNs from same public IP (failover VPN)
Replies: 3
Views: 455

Re: One Mikrotik, 2 IPsec VPNs from same public IP (failover VPN)

Please, I would really appreciate a good advice here, I'm kind of lost, in case the Mikrotik cannot have 2 VPNs from a same public IP, ¿what would be a possible workaround? There is no issue having as many IPSEC tunnels as you want from the same public IP on the mikrotik, but I think where you are ...
by aoakeley
Thu Mar 07, 2024 3:25 am
Forum: Beginner Basics
Topic: Help required: slow upload speeds with PPPoE connection
Replies: 4
Views: 418

Re: Help required: slow upload speeds with PPPoE connection

Try adding this. Not sure if it will fix it, but it certainly wont hurt. /ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn comment="Clamp MSS to PMTU for Outgoing packets" add action=change-mss chain=output new-mss=clam...
by aoakeley
Sat Mar 02, 2024 6:45 am
Forum: Beginner Basics
Topic: PPPOE WAN SET UP NEED HELP
Replies: 3
Views: 350

Re: PPPOE WAN SET UP NEED HELP

Hi, You need to add your PPPoE connection into the WAN interface list so that the masquerade and firewall rules will apply to that interface /interface list member add interface=pppoe-client list=WAN You will also need to fix your firewall. At a minimum add the following: /ip firewall filter add act...
by aoakeley
Tue Feb 27, 2024 12:32 pm
Forum: General
Topic: Address pool for SRC-NAT [SOLVED]
Replies: 5
Views: 811

Re: Address pool for SRC-NAT [SOLVED]

1) Is there a problem if the additional subnet is not in the same subnet as the WAN IP address? I don't think so but I want to clear any doubts 2) Does the additional allocated subnet need to be configured on a specific interface on the router (physical (e.g., the wan interface) or logical (e.g., b...
by aoakeley
Mon Feb 26, 2024 2:59 pm
Forum: General
Topic: How to stop NTP client logging
Replies: 4
Views: 524

Re: How to stop NTP client logging

This should probably work (have not tested, but probably should)

/system logging
set 0 topics=info,!ntp
by aoakeley
Sat Feb 24, 2024 9:44 am
Forum: General
Topic: OpenVPN between TP-Link and Mikrotik
Replies: 5
Views: 458

Re: OpenVPN between TP-Link and Mikrotik

I really didn't think about it. I was able to connect two ER605 togheter using openvpn and they worked flawlesly (users reporting that the vpn was now faster between sites). So I thought to myself: let's try it. Although I'm on version 6.48.7 and do not see any wireguard options here. Is it an opti...
by aoakeley
Sat Feb 24, 2024 4:41 am
Forum: General
Topic: OpenVPN between TP-Link and Mikrotik
Replies: 5
Views: 458

Re: OpenVPN between TP-Link and Mikrotik

Better off doing wireguard IMHO.
^^ This.

Any particular reason you want to use OpenVPN when you have Wireguard available?
by aoakeley
Tue Feb 06, 2024 3:26 pm
Forum: Forwarding Protocols
Topic: Dual WAN but second WAN only working inbound
Replies: 9
Views: 1079

Re: Dual WAN but second WAN only working inbound

Your WAN for Cerberus is PPPoE? If not what is the PPPoE for? I think your masquerade rule is wrong /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface= ether1-WAN-Cerberus Change to /ip firewall nat add action=masquerade ch...
by aoakeley
Mon Feb 05, 2024 12:41 pm
Forum: General
Topic: Mikrotik CCR1009 stuck at boot up.
Replies: 2
Views: 245

Re: Mikrotik CCR1009 stuck at boot up.

Hi sir, I have one ccr1009 that have problem. The problem is that it has light when connect the power cable but no any function and cannot connect it. The Ethernet port has light as shown in the picture. May you have any suggestions? Netinstall https://help.mikrotik.com/docs/display/ROS/Netinstall
by aoakeley
Sun Jan 21, 2024 9:15 am
Forum: General
Topic: User poll about using Winbox
Replies: 100
Views: 62846

Re: User poll about using Winbox

1) Have you ever used Sessions? (default ones are <own> and <none> and you can make more) No, and I use winbox, all the time every day. 2) Describe in a few words, what you think they do I presume it is to save a layout or view for a router or bunch of routers. 3) How could we supercharge this featu...
by aoakeley
Sat Jan 20, 2024 4:08 pm
Forum: Beginner Basics
Topic: Sharing one physical trunk port with two bridges
Replies: 10
Views: 1089

Re: Sharing one physical trunk port with two bridges

Which specific bit are you having an issue with? You have said what you want to do, and that you need help, but what bit is not working? I would start by simplifying it and first make sure everything can talk on the correct ports with tagged and untagged packets. Then optimize performance and split ...
by aoakeley
Sat Jan 20, 2024 7:17 am
Forum: General
Topic: Gmail SMTP authentication doesn't work anymore, oauth needed
Replies: 13
Views: 2815

Re: Gmail SMTP authentication doesn't work anymore, oauth needed

Haven't heard any official word from Mikrotik about OAuth, but it would make sense for them to jump on that bandwagon. There are plenty of SMTP Relay services that allow relay over port 25 or 2525 or 587 etc with and without TLS and using a normal username/password. Many of them are even free for s...
by aoakeley
Wed Jan 17, 2024 6:29 am
Forum: General
Topic: RB951G-2HnD can't upgrade routeros from 7.13 to 7.13.1 or 7.13.2
Replies: 4
Views: 735

Re: RB951G-2HnD can't upgrade routeros from 7.13 to 7.13.1 or 7.13.2

Are you running low on flash storage on that device?
by aoakeley
Mon Jan 15, 2024 12:18 pm
Forum: General
Topic: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...
Replies: 10
Views: 3991

Re: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...

deleted
(could not actually use the delete option for some reason)
by aoakeley
Mon Jan 15, 2024 12:16 pm
Forum: General
Topic: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...
Replies: 10
Views: 3991

Re: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...

deleted
(could not actually use the delete option for some reason)
by aoakeley
Mon Jan 15, 2024 8:44 am
Forum: General
Topic: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...
Replies: 10
Views: 3991

Re: DHCP Suddenly Failing after 7.12 upgrade: "without success" messages...

deleted
(could not actually use the delete option for some reason)
by aoakeley
Mon Jan 08, 2024 11:55 am
Forum: General
Topic: Torch not capture the traffic
Replies: 6
Views: 2055

Re: Torch not capture the traffic

When i see tx/rx rate on the interface i can see the traffic is more than 20Mbps, but when i try to see the detail using torch why the traffic is not captured? Was was in "Protocol" before you cleared it? see how that is blue means something is changed but not applied. Apply that then sto...
by aoakeley
Mon Jan 08, 2024 11:51 am
Forum: General
Topic: Setting VLAN ID on modem or on router
Replies: 7
Views: 1404

Re: Setting VLAN ID on modem or on router

What are the differences between vlan on modem or vlan on Mikrotik. Are there any advantages vlan on modem? I don't think it makes much difference. Put the VLAN in the modem and you don't have to see it in the mikrotik, but if you replace the modem you need to remember to put it in the new modem. O...
by aoakeley
Mon Jan 08, 2024 3:25 am
Forum: General
Topic: Setting VLAN ID on modem or on router
Replies: 7
Views: 1404

Re: Setting VLAN ID on modem or on router

I have to connect with pppoe How can I configure vlan for pppoe? /interface vlan add interface=ether1 name=vlan2 vlan-id=2 /interface pppoe-client add add-default-route=yes disabled=no interface=vlan2 name=pppoe-out1 user=username@whatever OR you can add the VLAN in the VDSL Modem and then you don'...
by aoakeley
Wed Dec 20, 2023 4:40 pm
Forum: General
Topic: Random youtube videos hangs and google play wont update
Replies: 3
Views: 892

Re: Random youtube videos hangs and google play wont update

Replace this: /ip firewall mangle add action=change-mss chain=forward new-mss=1448 protocol=tcp tcp-flags=syn tcp-mss=!0-1448 with this: /ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn comment="Clamp MSS to PMTU for Outgoi...
by aoakeley
Wed Dec 20, 2023 4:29 pm
Forum: General
Topic: OpenVPN not routing site to site?
Replies: 1
Views: 437

Re: OpenVPN not routing site to site?

I'd be looking at your firewall rules.
by aoakeley
Wed Dec 20, 2023 4:20 pm
Forum: General
Topic: Where can I see outgoing packets if Mikrotik is FW/Router/NAT ?
Replies: 3
Views: 538

Re: Where can I see outgoing packets if Mikrotik is FW/Router/NAT ?

Why I cannot see any packets from 2.2.2.2:22 to 1.1.1.1 ? Where are you looking for them? Also the source port for the reply may not be the same as the destination port Suggest you do this to just sniff all traffic to/from 1.1.1.1 /tool sniffer set file-name=1.1.1.1.pcap filter-ip-address=1.1.1.1/3...
by aoakeley
Mon Dec 18, 2023 5:29 pm
Forum: General
Topic: Two Starlinks, management interface access
Replies: 15
Views: 2308

Re: Two Starlinks, management interface access

You need to connect to Starlink and change the internal network addressing. Instead of 192.168.1.1 set something like 192.168.231.1 then there will be no confusion.
You can't do this.
No option in the starlink router to do this.
by aoakeley
Mon Dec 18, 2023 5:24 pm
Forum: General
Topic: Wireguard very slow
Replies: 10
Views: 2138

Re: Wireguard very slow

Basically I have 2 RB962UiGS-5HacT2HnT behind my ISP routers. On both ends the connection is 2.5Gbps/500Mbps, where the the actual speed is at least 1.7Gbps (ports are 1Gbps so I had to test via Wifi6) and full 512/516 Mbps. I think you will find with this router your CPU is not fast enough. it onl...
by aoakeley
Tue Dec 05, 2023 3:48 pm
Forum: General
Topic: Routing rule VS mangle mark routing
Replies: 9
Views: 2831

Re: Routing rule VS mangle mark routing

.
Do I miss any more mangle rules that routing rules have under the hood?
Maybe. but we can't see what you have missed if you do not post more of your configuration.
Post the rest of your config when you are trying to use mangle rules so we can see where there might be an error.
by aoakeley
Tue Dec 05, 2023 3:42 pm
Forum: General
Topic: Mikrotik password expires
Replies: 7
Views: 3227

Re: Mikrotik password expires

It has simply expired and to enter it you only need the login username and blank password If I understand you correctly you are saying that after a while the password has been reset to blank? so no password is required to log in? (which will cause the popup box to reset the password) You then set a...
by aoakeley
Tue Dec 05, 2023 9:11 am
Forum: General
Topic: [solved] - Route internet traffic from one VLAN to exit via specific IP
Replies: 16
Views: 2065

Re: Route internet traffic from one VLAN to exit via specific IP

I have a single ISP connection, with 5 available static IPs. These are assigned to a single interface (eth1) and use the same gateway. I need to have internet traffic from one specific vlan/IP subnet to exit using a specific public IP. (Goal is to have all external-bound traffic from vlan23 (10.10....
by aoakeley
Mon Nov 20, 2023 3:55 am
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 12076

Re: Multi-WAN Load Balancing Starlink issue

I know this is throwing a bunch of your work out the window, but this might make your life a lot simpler.... Have you thought about buying 10 more small mikrotik routers? - one for each starlink. Then put the big router you are using for load balancing and traffic management behind them? That way ea...
by aoakeley
Sat Nov 11, 2023 3:50 am
Forum: Announcements
Topic: v7.12.1 [stable] is released!
Replies: 252
Views: 92150

Re: v7.12 [stable] is released!

*) email - rename "address" property to "server"; That's a lot of scripts that are going to need updating (well for our team anyway). Not an issue, just thought I would highlight it. Previous: # Set Mail Server /tool e-mail set address=[:resolve "mail.smtp2go.com"]; Cha...
by aoakeley
Sat Nov 11, 2023 1:36 am
Forum: Announcements
Topic: v7.12.1 [stable] is released!
Replies: 252
Views: 92150

Re: v7.12 [stable] is released!

*) wireguard - added "auto" and "none" parameter for "private-key" and "preshared-key" parameters; I don't see the 'none' option. In Winbox: - For the Private Key, there is no option to select none, if you leave it blank it fills in "none" when you a...
by aoakeley
Thu Oct 12, 2023 1:20 pm
Forum: General
Topic: Different ISP connection for 2 different internal Hosts [SOLVED]
Replies: 9
Views: 1545

Re: Different ISP connection for 2 different internal Hosts [SOLVED]

Anyone ?
What version of RouterOS? 6 or 7?

~Andy
by aoakeley
Wed Sep 27, 2023 1:23 pm
Forum: General
Topic: Suggestion: Safe mode with countdown backup restore
Replies: 4
Views: 681

Re: Suggestion: Safe mode with countdown backup restore

I must say I do miss the cisco "Reboot in X" option. So if you you know you are about to do something sketchy and you do get locked out you know it will reboot back to the last saved config. Safe mode is no good if you are Accessing the router from a remote RDP Session and you do something...
by aoakeley
Wed Sep 27, 2023 1:15 pm
Forum: General
Topic: Routing to another side of IPSec Tunnel
Replies: 4
Views: 1098

Re: Routing to another side of IPSec Tunnel

But how can I configure routing from the data center subnet 192.168.11.0/24 to the created subnet 192.168.4.0/24? Do you have 2 IPSEC policies? one for each network pair DC End /ip ipsec policy dd dst-address=192.168.2.0/24 level=unique peer=AA-Test src-address=192.168.11.0/24 tunnel=yes add dst-ad...
by aoakeley
Wed Sep 27, 2023 1:12 pm
Forum: General
Topic: Routing to another side of IPSec Tunnel
Replies: 4
Views: 1098

Re: Routing to another side of IPSec Tunnel

But how can I configure routing from the data center subnet 192.168.11.0/24 to the created subnet 192.168.4.0/24? Do you have 2 IPSEC policies? one for each network pair DC End /ip ipsec policy dd dst-address=192.168.2.0/24 level=unique peer=AA-Test src-address=192.168.11.0/24 tunnel=yes add dst-ad...
by aoakeley
Wed Sep 27, 2023 8:24 am
Forum: General
Topic: Wireguard on one of multiple WAN interfaces [SOLVED]
Replies: 8
Views: 2756

Re: Wireguard on one of multiple WAN interfaces [SOLVED]

Not true from my experience, I suspect your config was faulty or it was a temporary bug in one version of firmware. I suspect this ^^. It was some time ago. I have just re-tested (using in/out mangle rules, not fixed routing as it was a road-warrior setup) on a more recent firmware, and it is worki...
by aoakeley
Tue Sep 26, 2023 5:01 am
Forum: General
Topic: Wireguard on one of multiple WAN interfaces [SOLVED]
Replies: 8
Views: 2756

Re: Wireguard on one of multiple WAN interfaces [SOLVED]

The problem I have right now is that for some reason I cannot establish WG handshake (no connection), as soon as I disable WAN_1 interface WG starts to work. I assume I have sth wrong with routing tables or I am marking (firewall mangle) connections in wrong way. I have a lot of experience with Mik...
by aoakeley
Tue Sep 26, 2023 4:51 am
Forum: General
Topic: prolific DCHP lease stopped locally log entries [SOLVED]
Replies: 6
Views: 1437

Re: prolific DCHP lease stopped locally log entries [SOLVED]

With the current situation, my device is losing connectivity for a moment so something in the expected DHCP process is not working right as the device should not be losing its WAN IP. This is something that I have seen with some ISP and mikrotik. you can run a script every 15mins or whatever to for...
by aoakeley
Tue Sep 26, 2023 4:46 am
Forum: General
Topic: Restrict getting ip address in mikrotik
Replies: 2
Views: 442

Re: Restrict getting ip address in mikrotik

You could set your IP Pool to just the same number of devices as you want to have And set them all for static reservation Then any new device will not be able to get IP Address from DHCP Server as there are no more IP Address left in the pool. Of course user could still set a static IP and get acces...
by aoakeley
Mon Sep 11, 2023 5:11 pm
Forum: General
Topic: Open VPN with TOTP (Azure MFA NPS Extension)
Replies: 7
Views: 2949

Re: Open VPN with TOTP (Azure MFA NPS Extension)

-- Deleted - duplicate post
by aoakeley
Mon Sep 11, 2023 5:10 pm
Forum: General
Topic: Open VPN with TOTP (Azure MFA NPS Extension)
Replies: 7
Views: 2949

Re: Open VPN with TOTP (Azure MFA NPS Extension)

Hi, > I managed to set up radius authentication through NPS on Windows server 2019, I've also tested the VPN and everything worked as needed. Ok this is a good start. So confirming 100% everything works with RADIUS but without the NPS Extension installed..? There is no point installing the Azure NPS...
by aoakeley
Mon Jul 31, 2023 1:19 pm
Forum: General
Topic: Open VPN with TOTP (Azure MFA NPS Extension)
Replies: 7
Views: 2949

Re: Open VPN with TOTP (Azure MFA NPS Extension)

Solution for this is to add the following registry entry on the RADIUS Server running the Azure NPS plugin

Key = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AzureMfa.
Name = OVERRIDE_NUMBER_MATCHING_WITH_OTP
Value = FALSE
Type = String
by aoakeley
Wed Jul 19, 2023 5:25 pm
Forum: RouterOS beta
Topic: OS 7.10.1 OpenVPN Site to Site Problem
Replies: 1
Views: 2281

Re: OS 7.10.1 OpenVPN Site to Site Problem

Probably an MTU issue. Especially if web pages are HTTPS. Add this in the top of your mangle rules /ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn comment="Clamp MSS to PMTU for Outgoing packets" add action=change-mss...
by aoakeley
Thu Jul 13, 2023 10:16 am
Forum: General
Topic: Discord complain about moderator
Replies: 6
Views: 832

Re: Discord complain about moderator

Can I use the original adapter to power 5x 802.3af/at ? Or I must use stronger adapter? Depends what original adapter you have: Do you have 48-57 adapter? then yes If not? then no. From the product page https://mikrotik.com/product/RB960PGS Max current is 1A per port, Ethernet ports are shielded. I...
by aoakeley
Thu Jul 13, 2023 10:05 am
Forum: General
Topic: Open VPN not conneting when 2 WAN connections are enabled
Replies: 4
Views: 627

Re: Open VPN not conneting when 2 WAN connections are enabled

I have Mikrotik 750GR3. I’ve connected 2 WAN connection on Ethernet 1 and Ethernet 5. Ethernet 1 is used for primary Interent connection and Ethernet 5 is used as failsafe (Secondary Internet connection) and for VPN. I’ve configured Open VPN on it and enabled port fowarding on ISP-2 router to forwa...
by aoakeley
Sat Jul 01, 2023 12:06 pm
Forum: RouterOS beta
Topic: Hex: No DHCP IP address acquired on WAN interface
Replies: 41
Views: 6074

Re: Hex: No DHCP IP address acquired on WAN interface

I also called Tweak support, and they said everything looked fine at their side and that they could see my DHCP requests. More interesting: can they see their DHCP server send replies, and if so: what replies. What do you see if you packet capture on the WAN interface? Does it capture any reply?
by aoakeley
Thu Jun 29, 2023 5:52 pm
Forum: General
Topic: [SOLVED] Wireguard site 2 site - Problem with icmp and smb
Replies: 8
Views: 1198

Re: Wireguard site 2 site - Problem with icmp and smb

You may want to add wireguard interface as LAN or foresee a corresponding rule in firewall to allow forward from/to wireguard. Yes probably this.... On one router do this /interface list member add interface=wirepalmas list=LAN /ip firewall filter add action=accept chain=forward comment=InternalTra...
by aoakeley
Thu Jun 29, 2023 7:52 am
Forum: General
Topic: Open VPN with TOTP (Azure MFA NPS Extension)
Replies: 7
Views: 2949

Re: Open VPN with TOTP (Azure MFA NPS Extension)

Just for the sake of completeness... Here is the log with the older NPS Extension that just pushes a simple "Accept - Yes/No' query to the users device. Rather than the "Access-Challenge" radius just sends an "Access-Accept" once the user has responded on their device. Pictu...
by aoakeley
Thu Jun 29, 2023 7:42 am
Forum: General
Topic: Open VPN with TOTP (Azure MFA NPS Extension)
Replies: 7
Views: 2949

Open VPN with TOTP (Azure MFA NPS Extension)

Hi, For some time now we have used OpenVPN, authenticated by RADIUS to Windows NPS, which then issues a challenge/response to the Microsoft Authenticator App on the users mobile device via the Microsoft Azure NPS Extension. This has worked really well for years, until Microsoft updated the NPS Exten...
by aoakeley
Tue May 02, 2023 6:23 pm
Forum: Announcements
Topic: v7.9 [stable] is released!
Replies: 242
Views: 54506

Re: v7.9 [stable] is released!

Being a person that uses the webfig much more than winbox, this change:
Why? Genuinely curious as to why anyone would use WebFig over Winbox if they have the option to use Winbox.
by aoakeley
Sun Apr 30, 2023 5:58 pm
Forum: RouterOS beta
Topic: Wireguard. How can i seen peer ip in Mikrotik?
Replies: 6
Views: 4522

Re: Wireguard. How can i seen peer ip in Mikrotik?

/interface/wireguard/peers/print detail does that show what you want? This doesn't show who is currently connected. It shows all configured peers. How can I see who is currently connected? This will show active peers. /interface/wireguard/peers/print detail where last-handshake < [:totime "3m&...
by aoakeley
Fri Apr 07, 2023 4:46 am
Forum: Beginner Basics
Topic: Searching
Replies: 1
Views: 272

Re: Searching

so I need to know how to fix this.
What problem are you having? it might be better posting in the General forum for this type of help.
by aoakeley
Wed Mar 15, 2023 11:51 pm
Forum: Beginner Basics
Topic: Forward port 80 on wan to 192.168.1.10:80 from outside and inside networks [SOLVED]
Replies: 11
Views: 3265

Re: Forward port 80 on wan to 192.168.1.10:80 from outside and inside networks [SOLVED]


Again I can't stress this enough. Asus, Netgear, Linksys home/or gaming routers have this routing working out of the box. All I want to do is make Mikrotik do the same.
And you have been told the answer a number of times. Add a rule for "Hairpin NAT". It really is that simple.
by aoakeley
Wed Mar 15, 2023 11:45 pm
Forum: RouterOS beta
Topic: Upgraded to 7.8 now cannot get into Webfig! Says loading
Replies: 3
Views: 2399

Re: Upgraded to 7.8 now cannot get into Webfig! Says loading

Recently attended a webinar with an ISP who ran through some upgrading methods. Our microtiks were on 6.4.7 Stable . Instructed to upgrade to 7.8 as they were fairly outdated from being shipped but sadly cannot get past loading screen when entering 192.168.88.1 Any help please? Thanks! :) Does Winb...
by aoakeley
Tue Feb 21, 2023 9:22 am
Forum: RouterOS beta
Topic: Mikrotik bridge to get internet access from site B
Replies: 1
Views: 1894

Re: Mikrotik bridge to get internet access from site B

You will need an IP Address on each end of your wireless bridge, maybe an EoIP tunnel between them also And then routes between them also. You may get more attention posting this in the Beginner Basics or General forums. There are also quite a few examples online if you search for Mikrotik Wireless ...
by aoakeley
Mon Feb 13, 2023 3:42 am
Forum: General
Topic: New OpenVPN community client (version 2.6) cannot connect to Mikrotik OpenVPN server [SOLVED]
Replies: 10
Views: 7704

Re: New OpenVPN community client (version 2.6) cannot connect to Mikrotik OpenVPN server [SOLVED]

Try to add
data-ciphers-fallback AES-256-CBC
to your client config.
Well bugger me... I am sure I tested that yesterday and it did not work.
But tested again now with 2.6 and it worked fine.

Thanks

Andrew
by aoakeley
Sun Feb 12, 2023 3:30 pm
Forum: Beginner Basics
Topic: ROS versions - i'm confused [SOLVED]
Replies: 9
Views: 1184

Re: ROS versions - i'm confused [SOLVED]

Have i bought an old AP that won't take newer ROS versions?
Have you tried upgrading?
System - Packages - Check for updates
(Upgrade channel)
by aoakeley
Sun Feb 12, 2023 3:23 pm
Forum: Beginner Basics
Topic: Trouble with Port Forwarding
Replies: 14
Views: 1234

Re: Trouble with Port Forwarding

Hi,
I am having issues with port forwarding.
All the DST-NAT (port forwarding rules) are disabled
by aoakeley
Sun Feb 12, 2023 3:03 pm
Forum: Beginner Basics
Topic: Scripts in DHCP Server
Replies: 1
Views: 342

Re: Scripts in DHCP Server

It runs when the DHCP Server assigns or de-assigns a lease.
You can use it for whatever you want, maybe add/remove an address to an address list? or add/remove a queue?
by aoakeley
Sun Feb 12, 2023 2:44 pm
Forum: Scripting
Topic: problem with mikrotik tunnels [SOLVED]
Replies: 2
Views: 2169

Re: problem with mikrotik tunnels [SOLVED]

hi . i have a problem with my mikrotik routers . after a few hours that vpn client connect to mikrotik vpn server (sstp,ovpn,l2tp) i see some tunnels are not running but remain dynamic . what is it ?? how i can fix it ? or any script to delete not running tunnels ?? i'm in iran and i think governme...
by aoakeley
Sun Feb 12, 2023 1:09 pm
Forum: Beginner Basics
Topic: Access to local LAN network using WireGuard
Replies: 21
Views: 8268

Re: Access to local LAN network using WireGuard

/interface wireguard peers add allowed-address=10.11.0.2/32 make allowed-address 0.0.0.0/0 so any traffic can be routed over wireguard peers And you need to add a route in for the remote subnet at both ends e.g. /ip route add dst-address=192.168.2.0/24 gateway=10.11.0.2 /ip route add dst-address=192...
by aoakeley
Sun Feb 12, 2023 12:54 pm
Forum: General
Topic: New OpenVPN community client (version 2.6) cannot connect to Mikrotik OpenVPN server [SOLVED]
Replies: 10
Views: 7704

Re: New OpenVPN community client (version 2.6) cannot connect to Mikrotik OpenVPN server [SOLVED]

I can confirm this, we have the same issue with the 2.6 openvpn clients. I will post here, if I find a solution. Can also confirm this. I have tried a few options to resolve it, but other than to use an earlier version of the OpenVPN Client I can't see a solution right now. Have either of you creat...
by aoakeley
Sun Feb 12, 2023 12:14 pm
Forum: General
Topic: Wireguard only works from wg-interface-ip
Replies: 6
Views: 860

Re: Wireguard only works from wg-interface-ip

I set up the route for the wg net (18.1.1.4/30 and the network of the other location) with the wg1 interface on my mikrotik.
3_wg_routes_wg_interface.png
Your route for the remote 192.168 subnet is wrong. Use the remote WireGuard IP Address not the interface wg1 for the route destination.
by aoakeley
Sat Feb 11, 2023 7:38 am
Forum: General
Topic: Do i need a static IP for any VPN setup? [SOLVED]
Replies: 12
Views: 3606

Re: Do i need a static IP for any VPN setup? [SOLVED]

I have 58 branches spread across, does it ideally mean i need 58 public IP's? Other than if these 58 branches have internet connectivity they much have a public IP somewhere along the way, otherwise they would not be able to connect to the internet.... But I presume this is not what you are getting...
by aoakeley
Mon Feb 06, 2023 3:25 pm
Forum: RouterOS beta
Topic: WG tunnel UDP is 5x faster than TCP
Replies: 19
Views: 5081

Re: WG tunnel UDP is 5x faster than TCP

He said it was an issue with the queue. Can someone explain how that is tested for and how it is resolved? I’m pretty certain I’m running into a similar issue. I get about 400mbps in iperf3 on a symmetrical gigabit connection with <50% cpu usage. Getting off track from the OP's post... but to answe...
by aoakeley
Thu Jan 19, 2023 11:48 am
Forum: RouterOS beta
Topic: RouterOS v7.1 - Let's Encrypt "error"
Replies: 8
Views: 9927

Re: RouterOS v7.1 - Let's Encrypt "error"

Now I'm getting this error
[error] too many certificates already issued for "mynetname.net".
No more certificates for new users.
I guess people have to register a cheap domain and create a CNAME pointing to XXXXXX.mynetname.net. Not a big or expensive problem.
by aoakeley
Wed Jan 18, 2023 2:08 am
Forum: RouterOS beta
Topic: Optimal config for Wireguard
Replies: 11
Views: 7679

Re: Optimal config for Wireguard

Hello! first of all sorry for my English skills i use google translate. i have successfully created wireguard tunnel between ccr1036 and ccr 1009 Is there anyone who has gotten closer to 1gbp/s? I did some testing for this a while ago, with some CCR1036. I think was on about 7.1 so there may have b...
by aoakeley
Sat Dec 10, 2022 2:25 pm
Forum: RouterOS beta
Topic: Wireguard. How can i seen peer ip in Mikrotik?
Replies: 6
Views: 4522

Re: Wireguard. How can i seen peer ip in Mikrotik?

/interface/wireguard/peers/print detail

does that show what you want?
by aoakeley
Mon Dec 05, 2022 2:00 am
Forum: RouterOS beta
Topic: Wireguard use Hostname in endpoint
Replies: 63
Views: 19489

Re: Wireguard use Hostname in endpoint


Conclusion: finding comment & editing only required fields is way better than yours.
Here is my script

Whatever dude.... it is not a competition. Relax.
Some stuff works better for some than others.
by aoakeley
Fri Dec 02, 2022 2:41 am
Forum: RouterOS beta
Topic: Wireguard use Hostname in endpoint
Replies: 63
Views: 19489

Re: Wireguard use Hostname in endpoint

Just to confirm these scripts are meant for the client router side ( meaning client at the initial handshake ). If you have mikrotik at both ends you can run at both, It would help clear up any stale connection at either end. It wont touch any connection that is in good health. Will also ask the sa...
by aoakeley
Thu Dec 01, 2022 6:27 pm
Forum: RouterOS beta
Topic: Wireguard use Hostname in endpoint
Replies: 63
Views: 19489

Re: Wireguard use Hostname in endpoint

It IS brutal :) Btw, s/:$wgport/:$wgport\$" protocol="udp/ ? So if port is 9090, no connections with port 90907 would be killed. Good spot. Thanks. I have edited my original post to save clogging up the thread with a new post. I have about 50 devices running behind StarLink CGNAT with a s...
by aoakeley
Thu Dec 01, 2022 4:41 pm
Forum: RouterOS beta
Topic: Wireguard use Hostname in endpoint
Replies: 63
Views: 19489

Re: Wireguard use Hostname in endpoint

Here is another one for you. It is a bit more brutal, but it is versatile as it does not rely on finding any comments, and you can put it on a router with a number of peers and it will just pick out the ones that need killing and restarting without affecting the ones that are OK. It checks if handsh...
by aoakeley
Tue Nov 29, 2022 3:51 pm
Forum: Announcements
Topic: v7.6 [stable] is released!
Replies: 279
Views: 142548

Re: v7.6 [stable] is released!

I thought I had some error in the configuration, and decided to run a traceroute through WinBox graphics window, using a canonical name - it works. Ping (graphical) - too. But ping and traceroute to anything from the local domain from a terminal doesn't work. DNS resolution in Winbox comes from the...
by aoakeley
Mon Nov 21, 2022 12:51 pm
Forum: Forwarding Protocols
Topic: 7.6 routing/OSPF seems to have a problem [SOLVED]
Replies: 5
Views: 2663

Re: 7.6 routing/OSPF seems to have a problem [SOLVED]

I did precisely that before I even started the post. The longer path has cost 20, the shorter path cost 1, still takes the longer path. In a triangle you should not need to change any costs. leave everything as 1 short path (direct between sites) will have total cost = 1 long path (via other site) ...
by aoakeley
Thu Nov 17, 2022 11:31 am
Forum: Scripting
Topic: Wireguard peer [find last-handshake > X] [SOLVED]
Replies: 1
Views: 1085

Re: Wireguard peer [find last-handshake > X] [SOLVED]

Figured it out... need to convert the format of the timer, and don't need to use [find] /interface/wireguard/peers print detail where last-handshake > [:totime "2m"] Same applies to anything that has a timer, e.g. DHCP Lease or last-seen /ip/dhcp-server/lease print where last-seen>[:totime...
by aoakeley
Tue Nov 15, 2022 11:41 am
Forum: Scripting
Topic: Wireguard peer [find last-handshake > X] [SOLVED]
Replies: 1
Views: 1085

Wireguard peer [find last-handshake > X] [SOLVED]

Hi, Whats the correct syntax to find wireguard peers with a last-handshake > X I have tried all the below, and the results seem really inconsistent, sometimes it 'appears' to give the correct result but most of the time it definitely does not. /interface/wireguard/peers> print detail where [find las...
by aoakeley
Tue Nov 15, 2022 8:05 am
Forum: RouterOS beta
Topic: Wireguard tunnel internet traffic issues
Replies: 22
Views: 10141

Re: Wireguard tunnel internet traffic issues

Has there been a solution for this? I have exactly the same problem. Mikrotik site to site WG several sites do not load in browser (duckduckgo.com, yahoo.com, and others.) Windows 11 WG client to Mikrotik server works fine. Without seeing your config, everyone can only guess as to what your particu...
by aoakeley
Tue Oct 25, 2022 4:16 pm
Forum: RouterOS beta
Topic: OpenVPN UDP and TCP
Replies: 5
Views: 2568

Re: OpenVPN UDP and TCP

Why would they need to be different ports. TCP and UDP are different protocols so could both be on the same port number.
by aoakeley
Wed Oct 05, 2022 3:36 pm
Forum: Announcements
Topic: Newsletter 108
Replies: 84
Views: 46524

Re: Newsletter 108

The world is big. You wouldn't believe what happens in other places.
That's the best burn I have seen in ages !
by aoakeley
Wed Sep 07, 2022 2:58 am
Forum: RouterOS beta
Topic: Wireguard site to site with OSPF
Replies: 12
Views: 14769

Re: Wireguard site to site with OSPF

With ospf v2 and network type ptp, you need to add 224.0.0.0/24 to allowed address to both peer.
Why not just use 0.0.0.0/0 ? then you can just route anything you want down the wireguard connections.

Andrew
by aoakeley
Thu Aug 18, 2022 5:05 am
Forum: RouterOS beta
Topic: Wireguard site to site with OSPF
Replies: 12
Views: 14769

Re: Wireguard site to site with OSPF


So, as soon as I created WG interface for every vpn connection everything worked out-of-the box ... routers mt1, ... mt4 are in full mesh (3 wg interfaces each )
...
.
Yes this is how I do it.
One interface for each connection. All on different ports.
by aoakeley
Thu Aug 18, 2022 5:04 am
Forum: RouterOS beta
Topic: Wireguard site to site with OSPF
Replies: 12
Views: 14769

Re: Wireguard site to site with OSPF

0.0.0.0/0 tells WG to allow all networks and make the WG link your default gateway (0.0.0.0/0) . Allowed Networks 0.0.0.0/0 should only be used if you want all traffic to go through the WG interface, which it seems like you don't want to occur. . I am not seeing this (WG becoming the default link i...
by aoakeley
Sat Aug 06, 2022 1:19 pm
Forum: RouterOS beta
Topic: Routing table not shown in ip/routes in 7.4
Replies: 9
Views: 3925

Re: Routing table not shown in ip/routes in 7.4

Set show columns to show "routing table"
I wish this column was shown by default......
But I guess other people want other defaults, so can't please everyone.
by aoakeley
Mon Jul 11, 2022 12:24 pm
Forum: Virtualization
Topic: RB2011 with V7.3.1 metarouter re-boot
Replies: 1
Views: 2204

Re: RB2011 with V7.3.1 metarouter re-boot

Now the rb2011 is deaded, it continue to reboot! How to solve the problem?
Netinstall
https://wiki.mikrotik.com/wiki/Manual:Netinstall
by aoakeley
Mon Jul 11, 2022 6:18 am
Forum: Virtualization
Topic: Feature Request - Show 'Note' field in "All CHR Keys" table in Mikrotik Account
Replies: 0
Views: 1936

Feature Request - Show 'Note' field in "All CHR Keys" table in Mikrotik Account

Hi, I am starting to get an increasing number of CHR Keys in my Mikrotik Account. I think it would be an improvement if the text in the note was actually shown in the table, instead of having to click the note logo on each router when trying to find something. Screenshot 2022-07-11 111230.jpg Ta Andy
by aoakeley
Mon Jun 13, 2022 8:45 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

It CAN connect and monitor RouterOS device directly. The problem comes with the agent devices which are not the same version. I might have given you some bum advice..... I don't use Dude Agents, but I think from doing some quick reading that dude agent does need to be same version as the server. So...
by aoakeley
Mon Jun 13, 2022 3:22 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

This night, after many issues, I've managed to upgrade my Dude Server to 7.3.1, and now all agent connections are broken with good old error: agent NameOfRemoteDevice routerOS version not same as dude servers (6.48.4 (stable)), next attempt at 20:57:24 Same on 6.49.6 devices Any suggestions how to ...
by aoakeley
Wed May 18, 2022 4:09 pm
Forum: RouterOS beta
Topic: PPPoE disconnected doesn't dial up auomatically
Replies: 9
Views: 3807

Re: PPPoE disconnected doesn't dial up auomatically

Here are the attachments.
Turn on the PPP logging and post the logs. Those attachments don't show much that can be used for diagnostics.
by aoakeley
Fri May 13, 2022 2:43 am
Forum: RouterOS beta
Topic: Routing Table Column in IP-Routes in Winbox default view
Replies: 4
Views: 2492

Re: Routing Table Column in IP-Routes in Winbox default view

Yes, but it should be also visible by default, because it's important piece of info, almost as destination address or gateway. It was in v6 and there's no good reason to remove it. Btw, with IPv6 in v7 it's even worse, it doesn't even show gateway by default. Glad I am not the only one that thinks ...
by aoakeley
Fri May 13, 2022 2:41 am
Forum: RouterOS beta
Topic: Routing Table Column in IP-Routes in Winbox default view
Replies: 4
Views: 2492

Re: Routing Table Column in IP-Routes in Winbox default view

You can do yourself saving the session as default session on winbox.
When you connect to thousands of different routers, often using different IP's, this is not practical.
by aoakeley
Mon May 09, 2022 12:45 pm
Forum: RouterOS beta
Topic: Routing Table Column in IP-Routes in Winbox default view
Replies: 4
Views: 2492

Routing Table Column in IP-Routes in Winbox default view

Hi, Does anyone else think the "Routing Table" column in IP-Routes in winbox should be shown by default in v7, in the same way that the "Routing Mark" column was shown by default in v6? It is not the end of the world to enable it each time, but I would find it nice if it was enab...
by aoakeley
Sun May 08, 2022 8:12 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

If upgrade The Dude Server to 7.2.x will it be able to use agent devices running on 6.48.4 ?
Will be fine
by aoakeley
Thu Apr 28, 2022 11:35 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

Good to see you got sorted. Just a couple of quick questions if you are about - get a chance to answer. 1. How Many ROS devices are you monitoring the the RouterOS service. 2. Do they all Stay "up/connected" 3. What Hardware/License Level - if you don't mind answering Asking as we have st...
by aoakeley
Thu Apr 21, 2022 7:34 am
Forum: RouterOS beta
Topic: EAP-TLS [SOLVED]
Replies: 6
Views: 28141

Re: EAP-TLS [SOLVED]


Is anyone else having issues with EAP-TLS in v7?

Ticket logged with support (SUP-67209) but just thought I would post here in case there was something stupid I am missing.
Just to close out this thread. Fix for this is in 7.3beta33
by aoakeley
Tue Apr 12, 2022 2:57 am
Forum: RouterOS beta
Topic: eoip in RouterOS 7.2rc7 broken?
Replies: 2
Views: 2330

Re: eoip in RouterOS 7.2rc7 broken?

I have made a test between RB3011/RouterOS 6.49.5 and a CHR/RouterOS 7.2rc7 When I create eoip (ipv4) interfaces on both sides and assign private IPv4-Adresses to both ends, I can ping them as expected. When I assign IPv6 (fd::1/126 - fd::2/126) to both ends, I can not ping the other side. Doing th...
by aoakeley
Thu Apr 07, 2022 6:16 pm
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

Apparently agent "server" is the default.. so I have no clue, sorry. Thanks for trying. It prompted me to have another closer look at what was going on. I found the solution.... There were some NAT and Mangle rules I had created years ago to enable The Dude to talk to some remote mikrotik...
by aoakeley
Thu Apr 07, 2022 5:38 pm
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

What is the RouterOS status of the agent device (server)?
RB1100AHx4 Dude Edition RouterOS 7.2
I will do some more investigation tomorrow.
by aoakeley
Thu Apr 07, 2022 3:08 pm
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

You must read the changelog, old RouterOS access are replaced on 6.4??? (do not remember) with another type of strong access, also API are changed The minimum version of remote devices is 6.48.3 Most are on 6.49.5 Some are on 7.1.3 Some are on 7.2 NONE of them register properly in DUDE since the up...
by aoakeley
Thu Apr 07, 2022 2:51 pm
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

The remote devices are all 7.2?
No. But surely that is not a requirement?
by aoakeley
Thu Apr 07, 2022 9:59 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

aoakeley, did you upgrade your agent (server) to 7.2 as well?
Yes.
by aoakeley
Thu Apr 07, 2022 5:24 am
Forum: The Dude
Topic: The Dude for 7.2 !
Replies: 22
Views: 5816

Re: The Dude for 7.2 !

Mine is all upgraded OK, but is not so happy.
On the remote devices I can see in the logs that it has logged into them, but it does not seem to be registering properly.
by aoakeley
Thu Apr 07, 2022 5:05 am
Forum: RouterOS beta
Topic: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]
Replies: 20
Views: 10765

Re: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]

Seems same to me, still works only with disabled forwarding. Definitely all working as expected for me now ISP provides two addresses to me: Primary IPv6 Address: 2404:9400:4:0:216:3eff:fee1:7681 IPv6 Routed 2404:9400:4176:8100::/56 Previously I could not ping the primary ipv6 address when I have f...
by aoakeley
Wed Apr 06, 2022 2:31 pm
Forum: RouterOS beta
Topic: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]
Replies: 20
Views: 10765

Re: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]

Seems same to me, still works only with disabled forwarding.
I wonder if something else I did in 6.x before upgrading changed something..... I'll go back over my config and have another look tomorrow....
by aoakeley
Wed Apr 06, 2022 7:05 am
Forum: RouterOS beta
Topic: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]
Replies: 20
Views: 10765

Re: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]

This issue appears to be resolved in 7.2
Upgraded from 6.49.2 and my IPv6 is still working.
by aoakeley
Thu Mar 31, 2022 5:11 am
Forum: Beginner Basics
Topic: Transmit loop detected
Replies: 38
Views: 24139

Re: Transmit loop detected

I started to experience the same behavior after upgrading from RoS v6.48.1 to 7.1.3 with both IP-IP and EoIP tunnels (until then, they were working with the same configuration without any issue). Now I'm getting "eoip-tunnel-1 transmit loop detected, downing interface for 60 seconds" erro...
by aoakeley
Thu Feb 03, 2022 10:53 am
Forum: General
Topic: SSTP Mikrotik Client / probably bug 6.41.3
Replies: 17
Views: 6376

Re: SSTP Mikrotik Client / probably bug 6.41.3

Has this been fixed in any of the newer releases yet?
by aoakeley
Wed Jan 19, 2022 3:58 am
Forum: General
Topic: Feature Request: Conditional DNS Forwarding
Replies: 9
Views: 6551

Re: Feature Request: Conditional DNS Forwarding

Wait no more, it's in RouterOS since 6.47. In slightly different form (static records named FWD) and more limited (only one server), but it works. Well blow me down.... /ip dns static add forward-to=192.168.0.5 regexp=".*\\.mydomain\\.com\$" type=FWD This will forward all subdomains of &q...
by aoakeley
Mon Jan 03, 2022 7:55 am
Forum: RouterOS beta
Topic: IPv6 SLAAC
Replies: 6
Views: 10524

Re: IPv6 SLAAC

What do I have to do for clients of the hexs to be able to get IPv6 addresses...... So I have done quite a bit of playing about with this. Not sure if this will help you but here goes. First there is a bug in ROS7 where if your WAN IP is assigned by SLAAC and you enable IP Forwarding, then IPv6 bre...
by aoakeley
Wed Dec 22, 2021 4:48 pm
Forum: RouterOS beta
Topic: EAP-TLS [SOLVED]
Replies: 6
Views: 28141

Re: EAP-TLS [SOLVED]

In my setup I have eap-methods=eap-tls,passthrough but this is with RADIUS and a freeradius server. It works on v6 but I have not yet tested it on v7.
So not the same config, or using ROSv7, but thanks for trying to help.
by aoakeley
Wed Dec 22, 2021 4:12 pm
Forum: RouterOS beta
Topic: Delegating addresses with DHCPv6 server
Replies: 4
Views: 2214

Re: Delegating addresses with DHCPv6 server

I got a /80 prefix from the upstream router. Ahh, someone upstream is still thinking of ipv6 like it is ipv4 and they want to conserve addresses. I know this is not a problem you can fix, but you and others might find the following interesting. This is a good read about how people have to get their...
by aoakeley
Wed Dec 22, 2021 3:50 pm
Forum: RouterOS beta
Topic: EAP-TLS [SOLVED]
Replies: 6
Views: 28141

Re: EAP-TLS [SOLVED]

Clients are Window 10 workstations. I have stripped out RADIUS so authentication is certificate only "on box" Full export of the unit [admin@Mikrotik] > /export # dec/22/2021 21:38:54 by RouterOS 7.1 # software id = 3QK9-P1KA # # model = 951G-2HnD # serial number = 6430051F32B2 /interface ...
by aoakeley
Wed Dec 22, 2021 4:18 am
Forum: Announcements
Topic: v7.2rc1 is released!
Replies: 240
Views: 159975

Re: v7.2rc1 is released!

Good to see lots of bugs fixed. This needs to be the priority, not new features. Functional parity with v6 should be the objective now (Sorry to anyone who is waiting for Docker to come back) Just bumping the following EAP-TLS: https://forum.mikrotik.com/viewtopic.php?t=180713 IPv6:https://forum.mik...
by aoakeley
Thu Dec 16, 2021 11:50 am
Forum: RouterOS beta
Topic: IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]
Replies: 20
Views: 10765

IPv6 SLAAC Address assignment and IPv6 Forward [SOLVED]

Hi, Back in 6.38 an issue was resolved where "if you enabled IPv6 Forwarding when using IPv6 ND or SLAAC IP Addressing, then the ND/SLAAC assigned IPv6 address stopped working" What's new in 6.38rc52 (2016-Dec-21 10:44): *) ipv6 - fixed "accept-router-advertisements" behaviour; T...
by aoakeley
Wed Dec 08, 2021 4:20 pm
Forum: Announcements
Topic: Mēris botnet information
Replies: 75
Views: 228778

Re: Mēris botnet information

Appreciate any clues on what to clean up on the computers causing this in the Mikrotik logs. I've run avast, avast boot scan, malwarebytes, and spybot and not found anything. I think this is actually Avast. uninstall Avast and see if the issue goes away. I think it is the "Avast Network Scan&q...
by aoakeley
Sun Nov 28, 2021 2:33 pm
Forum: RouterOS beta
Topic: EAP-TLS [SOLVED]
Replies: 6
Views: 28141

EAP-TLS [SOLVED]

Hi, Is anyone else having issues with EAP-TLS in v7? I have stripped it right back to basics just using certificates generated on the router and no RADIUS. Works fine in 6.49.1 Upgrade to 7.1rc7 and clients cant authenticate Downgrade back to 6.49.1 clients can authenticate again. I have tried facto...
by aoakeley
Wed Mar 24, 2021 1:46 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

47 days uptime on a 1100AHx4...
45 days is nothing to write home about in the bigger scheme of things, but where this issue is concerned it is pretty good going.....
by aoakeley
Tue Dec 01, 2020 4:59 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

For others following this topic, please upgrade to 6.47.8 or newer, there are relevant fixed that will improve or remedy any issues described in this topic.
I still have one device very intermittently showing this issue, I will upgrade that unit and see how it goes.
by aoakeley
Tue Dec 01, 2020 4:56 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I just checked all correspondence you had with MikroTik, and it was not said that there is a "low quality component" or anything like that. Looks like he quoted the answer from his reseller or something. Correct. Who were quoting Mikrotik (or so they say). But nice to nee Normis finally m...
by aoakeley
Mon Nov 30, 2020 12:48 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I have received through the grapevine what is the apparent cause of this. Not sure if I am allowed to share it though, and don't want to start gossip if it turns out not to be true. Maybe Normis or someone from Mikrotik can come in here and make an official statement? I'll give it a week or so and ...
by aoakeley
Fri Nov 13, 2020 4:58 pm
Forum: RouterOS beta
Topic: Feature Request - Clean up IPSEC Tabs
Replies: 3
Views: 1508

Re: Feature Request - Clean up IPSEC Tabs

it would be nice to have the tabs in a logical order to build a tunnel
Yes. This has been a mess for a while now.
by aoakeley
Tue Oct 20, 2020 6:24 am
Forum: RouterOS beta
Topic: Torrent client
Replies: 59
Views: 36245

Re: Torrent client

What we really need to do is take this thread out back and shoot it.
by aoakeley
Mon Sep 21, 2020 2:47 am
Forum: RouterOS beta
Topic: After installing ROS 7.1beta2
Replies: 3
Views: 2600

Re: After installing ROS 7.1beta2

I installed ROS 7.1beta2 on two RB750Gr3 If i change the name of ether2 ore another ethernet interface the router reboot automatically. System log System, error critical: router rebooted because some critical program crashed. I have just tested on a RB2011 with ROS 7.1beta2 and can confirm the same...
by aoakeley
Sat Aug 08, 2020 6:14 am
Forum: RouterOS beta
Topic: wireless not working mAP Lite - beta03
Replies: 19
Views: 11118

Re: wireless not working mAP Lite - beta03

Wireless also not working on 2011UAS-2HnD
Factory default config on unit.
Could see SSID but unable to join on both Windows laptop and iPhone.
I will wait for Beta 4, and post full report then if still not working.
Wireless is now working as of 7.1 beta1
by aoakeley
Tue Jun 30, 2020 9:36 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I too doubt this is a hardware defect.
But that's easily disputed:
Has anyone gotten their board replaced? And if so, has that solved the problem?
Yes, Replaced
Yes, Solved the problem
Also, Sometimes replaced multiple times before finally fixed.
by aoakeley
Tue Jun 30, 2020 9:34 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I have received through the grapevine what is the apparent cause of this. Not sure if I am allowed to share it though, and don't want to start gossip if it turns out not to be true. Maybe Normis or someone from Mikrotik can come in here and make an official statement? I'll give it a week or so and t...
by aoakeley
Thu Jun 11, 2020 12:09 pm
Forum: RouterOS beta
Topic: Feature Request: Port Forwarding Wizard/Menu in GUI
Replies: 14
Views: 6089

Re: Feature Request: Port Forwarding Wizard/Menu in GUI

Personally I am against dumbing stuff down to meet the lowest intelligence level of a potential user. If it matters to you then learn it and master it. If it is too complicated buy a Netgear.
^ This.
by aoakeley
Wed Jun 10, 2020 3:12 pm
Forum: RouterOS beta
Topic: wireless not working mAP Lite - beta03
Replies: 19
Views: 11118

Re: wireless not working mAP Lite - beta03

Has anyone tested beta5 on mAP Lite?
The same issue. Only 5 Ghz works
Has anyone tested beta8?
RB2011 (mipsBE and only has 2.4 wireless) still cant join wireless network. Can see it fine but cant join.
by aoakeley
Thu Apr 16, 2020 11:42 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

Currently we are at the latest version 6.46.5.Some of these routers support critical systems in a vrrp configuration while others support backbone. We depend on Mikrotik to deal with this annoying issue. So far we have confirmed that unclassified processes in Tool/profile have increased before the ...
by aoakeley
Mon Apr 06, 2020 11:05 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

Have you had any feedback on what the fault was? . No. No feedback. Have replaced 3 under warranty now. And I have one of the ones that was previously replaced, and had been running fine since end of Jan now inaccessible again. So either there is a systemic issue in this model or there is something...
by aoakeley
Fri Apr 03, 2020 10:00 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly


This is a reply from mikrotik support. Has anyone done this ?
Yes. see my previous posts
by aoakeley
Sat Mar 28, 2020 6:43 am
Forum: RouterOS beta
Topic: FEATURE REQUEST: Add Basic Firewall Rule Wizard
Replies: 71
Views: 23386

Re: FEATURE REQUEST: Add Basic Firewall Rule Wizard


If you are not using a “standard configuration“ then you likely don’t want to use a firewall rule or wizard.
Sorry - what's a standard configuration?

I'm serious... what you consider to be standard will not be what someone else does.
by aoakeley
Tue Mar 03, 2020 4:03 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly


After obtaining supout.rif files by console cable, MikroTik have organised warranty replacement for the two 1100 units exhibiting this issue.
And yet another 1100AHX4 with this issue.
The previous 2 units which were replaced under warranty have not had a recurrence of the issue.
by aoakeley
Thu Feb 06, 2020 4:10 pm
Forum: General
Topic: RDP [SOLVED]
Replies: 5
Views: 3401

Re: RDP [SOLVED]

I have got MIKROTIK RB750Gr3, cca 3y. Now I have a problem, when I tried to connect by RDP in my LAN from interenet, connecting with one computer is unstable, falls down (very very often), slow. To other computer it is OK. both computers are OK, only connecting by RDP is so strange. I use Windows 1...
by aoakeley
Thu Feb 06, 2020 4:09 pm
Forum: General
Topic: Feature request: ask confirm for every operation
Replies: 9
Views: 2190

Re: Feature request: ask confirm for every operation

Don't do important work using your phone or with a baby on your arms...
Advice for life :) :)
by aoakeley
Wed Feb 05, 2020 5:06 pm
Forum: General
Topic: port forwarding between different routed network
Replies: 6
Views: 1974

Re: port forwarding between different routed network

It's not clear how exactly are those routers connected and you didn't show any part of config. Fix that, provide more info and your chance to get useful advice will increase. on ISP A router i need to do port forwarding for IP 100.80.20.75 port 22,80 & 443 @Syeed has given you the correct solut...
by aoakeley
Wed Feb 05, 2020 4:23 pm
Forum: General
Topic: Port fordwarding not working
Replies: 3
Views: 1315

Re: Port fordwarding not working

/ip firewall filter
add action=accept chain=input comment="Allow Http" dst-port=80 protocol=tcp

Did you mean to open your router web interface to internet access? that is what this rule will do.
by aoakeley
Wed Feb 05, 2020 4:12 pm
Forum: General
Topic: Blocked external IP
Replies: 14
Views: 3434

Re: Blocked external IP

Yes, these connection attempts take place regularly every night! In my case L2tp ipsec is used. Special logging is not turned on but red notifications are displayed. This IP address has been displayed for a very long time on some 30 mikrotik machines that use ipsec vpn. If tunnel mode is used and e...
by aoakeley
Wed Feb 05, 2020 3:51 pm
Forum: General
Topic: Feature request: ask confirm for every operation
Replies: 9
Views: 2190

Re: Feature request: ask confirm for every operation

Hello, now just doing a simple click without any confirm, we can remove/disable/do whatever without any confirm. In my opinion should be an option in settings like "ASK CONFIRM FOR EVERY OPERATION" and when it's enabled, if we try to Disable/Remove/Do whatever on any item/rule, a confirm ...
by aoakeley
Fri Jan 17, 2020 1:06 am
Forum: RouterOS beta
Topic: Speedify Mulit WAN Bonding
Replies: 41
Views: 14120

Re: Speedify Mulit WAN Bonding

Perhaps if Speedify just creates the configuration script needed.. Agreed. I don't think mikrotik should be adding additional code to support fringe implementations at this stage (or if ever). There is so much work to do on core functionality first. If it can be implemented within the current funct...
by aoakeley
Mon Jan 13, 2020 5:18 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

... and I was just about buying a 4011 . . . should I do that or not :? .. it's for a main network gateway, PPPoE, dude, . . .
I have plenty running that have no issue. I think the devices with this issue are very few.
by aoakeley
Sat Jan 04, 2020 2:56 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

We have several RB4011 and exactly the same happens to us. Randomly some MikroTik is no longer accessible by management, and in Dude appears the services "memory, disk and cpu" down, Regards, - Use a console cable to get a supout.rif file while the router is in the non responsive state (m...
by aoakeley
Thu Jan 02, 2020 2:57 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

We have quite a few MikroTik units deployed, but will have to start moving away from Mikrotik if there's no real solution to this. We have hundreds (thousands??) of MikroTik units in the field, and only 2 exhibiting this issue. So don't throw the baby out with the bath water. After obtaining supout...
by aoakeley
Mon Dec 23, 2019 3:34 am
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

It is incredible that since June this was reported and nobody from Mikrotik did anything. I suspect that they did not have enough information to replicate the issue and develop a fix. Like you many of my devices were a long way away, and they asked to have a serial cable plugged in. This was diffic...
by aoakeley
Mon Dec 23, 2019 3:17 am
Forum: General
Topic: Problem with RB4011iGS - Loggin stop in "connected"
Replies: 2
Views: 1866

Re: Problem with RB4011iGS - Loggin stop in "connected"

I notice you have found this other related thread. Jut putting a link here so others can also find it.

viewtopic.php?f=2&t=149062
by aoakeley
Sat Dec 21, 2019 3:18 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 222
Views: 78190

Re: RB4011 and RB1100 AHx4 "bricks" randomly

I have two 1100AHx4 with this issue, and an open case with Mikrotik (Ticket#2019100722004559). I have just been able to connect in with a serial cable and generate a supout file.

I am not running Dude on them.
SNMP is enabled though.
by aoakeley
Thu Oct 24, 2019 5:30 pm
Forum: RouterOS beta
Topic: wireless not working mAP Lite - beta03
Replies: 19
Views: 11118

Re: wireless not working mAP Lite - beta03

Wireless also not working on 2011UAS-2HnD
Factory default config on unit.
Could see SSID but unable to join on both Windows laptop and iPhone.
I will wait for Beta 4, and post full report then if still not working.
by aoakeley
Wed Jun 12, 2019 6:19 am
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 46414

Re: v6 RC and v7 BETA

Any news about date of release Ros v7?
Maybe Christmas gift
Christmas in July?
by aoakeley
Mon Jun 10, 2019 5:57 pm
Forum: General
Topic: Block Vlan traffic to other networks
Replies: 2
Views: 1210

Re: Block Vlan traffic to other networks

...

How to block access to my local network from guest IP range 192.168.101.0/24.

Thanks
YP
Start by posting in the correct forum. Try Beginner Basics viewforum.php?f=13
by aoakeley
Sun May 12, 2019 10:24 am
Forum: General
Topic: VPN Kerio with Mikrotik
Replies: 1
Views: 3204

Re: VPN Kerio with Mikrotik


Please help me fix it, thank you!
.
Please post in correct forum viewforum.php?f=13 , thank you!
by aoakeley
Fri Mar 01, 2019 5:18 am
Forum: General
Topic: Feature Request Are you sure Button when disabling interface
Replies: 4
Views: 1980

Re: Feature Request Are you sure Button when disabling interface

Feature Request Are you sure Button when disabling interface We have a practice of labeling all interfaces with comments we have had some techs accidentally hit the disable interface button which is fine sometimes but if it is a backhaul port you are in a lot of trouble because this kills even mac ...
by aoakeley
Tue Aug 21, 2018 5:23 pm
Forum: General
Topic: Dstnat in output chain? [SOLVED]
Replies: 23
Views: 12855

Re: Dstnat in output chain? [SOLVED]

After reading sindy's Multiple Road Warrior L2TP/IPsec clients behind NAT - solved thread, and after my brain stopped hurting, ......... It works, but now my brain hurts again. You sir, are a deadset legend. I used this to solve an issue with The Dude running on a router, and needing to change the ...
by aoakeley
Fri Aug 17, 2018 2:08 pm
Forum: The Dude
Topic: Feature request - Add Existing device to the map
Replies: 1
Views: 2780

Re: Feature request - Add Existing device to the map

> Please review a possibility to add Existing device to the another or same map. I would just settle for "add existing device to any map" Maybe I am mistaken, but I just setup The Dude. Added in half a dozen devices in the device list, but cant find any way to then add them to a map once I...
by aoakeley
Thu May 31, 2018 4:49 pm
Forum: General
Topic: Mikrotik Router SIP Connection Blocked.
Replies: 79
Views: 62038

Re: Mikrotik Router SIP Connection Blocked.

Still got this issue in 6.41. I've tried deleting connections but this doesnt always work. In this case the only thing to do is to reboot it. But it gals me to do that - this is about the only thing I have to reboot Mikrotik for. How sad thats its something so basic. :-? Still in 6.42.3 I thought I...
by aoakeley
Thu May 24, 2018 4:01 pm
Forum: Wireless Networking
Topic: Nv2 in devices with arm architecture
Replies: 3
Views: 1766

Re: Nv2 in devices with arm architecture

Does it happen to someone else? Thank you Ah.. yes. I just installed 2 x LHG G-5acD in a P2P link. - NV2 was terrible - 802.11 was better - nstream was the best I had not made the connection with it being the arm chip.... but I can certainly say in these devices with arm; nv2 was terrible Andrew
by aoakeley
Wed May 16, 2018 3:02 am
Forum: General
Topic: Disable DHCP on LTE ?
Replies: 11
Views: 7502

Re: Disable DHCP on LTE ?

While attempting to get my wireless router working (a Netgear WPN824 v3), I managed to turn the DHCP off.
Your post has absolutely nothing to do with this topic, and really nothing to do with Mikrotik. You would be better off posting somewhere else.
by aoakeley
Mon May 14, 2018 3:54 pm
Forum: General
Topic: Merging Multiple Wans
Replies: 5
Views: 2935

Re: Merging Multiple Wans

The short answer is no if you think you can triple the speed or throughput of one connection. Not necessarily. Get a VM somewhere close to your location, install RouterOS on it, the use EoIP to bond the connections. https://www.duxtel.com.au/docs/presentations/Fun-with-EoIP.ppsx If you have an AWS ...
by aoakeley
Mon May 14, 2018 11:52 am
Forum: General
Topic: Disable DHCP on LTE ?
Replies: 11
Views: 7502

Re: Disable DHCP on LTE ?

configure the APN Profile in the LTE menu to not to add Default route and DNS. I have one device where this does not work. No matter what I configure in the default APN profile it still allocates a default route with distance 2 This really need this to be an opt-in option, not a default that you ca...
by aoakeley
Mon Apr 30, 2018 12:06 pm
Forum: General
Topic: Disable DHCP on LTE ?
Replies: 11
Views: 7502

Re: Disable DHCP on LTE ?

configure the APN Profile in the LTE menu to not to add Default route and DNS.
Thanks. That solves the route and DNS issue.

Any way to completely stop it dynamically creating a DHCP Client ?
by aoakeley
Sat Apr 28, 2018 8:11 am
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 98675

Re: v6.42.1 [current]

Finding these changes introduced back in 6.41 to be most inconvenient *) lte - automatically add "/ip dhcp-client" configuration on interface; Can we have a way to turn off this behavior completely? *) lte - changed default values to "add-default-route=yes", "use-peer-dns=ye...
by aoakeley
Sat Apr 28, 2018 7:51 am
Forum: General
Topic: Disable DHCP on LTE ?
Replies: 11
Views: 7502

Re: Disable DHCP on LTE ?

Hello, since upgrading to current 6.42, my LTE now has dhcp-client enabled. My lte interface configuration is actually static as I use an USB wireless AP (detected as lte) and the USB device default route is aimed as my mikrotik so a dynamic IP is not really practical . How can I disable this new d...
by aoakeley
Sat Apr 28, 2018 7:35 am
Forum: General
Topic: Disable DHCP on LTE ?
Replies: 11
Views: 7502

Re: Disable DHCP on LTE ?

Hello, since upgrading to current 6.42, my LTE now has dhcp-client enabled. My lte interface configuration is actually static as I use an USB wireless AP (detected as lte) and the USB device default route is aimed as my mikrotik so a dynamic IP is not really practical . How can I disable this new d...
by aoakeley
Sun May 08, 2016 4:11 am
Forum: Beginner Basics
Topic: Weird routing loop in logs but there isn't one.
Replies: 61
Views: 16350

Re: Weird routing loop in logs but there isn't one.

Hi Guys, Has anyone had any luck getting to the bottom of this? I am experiencing this on a number of RB3011s Thanks. I was also experiencing this on all the 3011's we have. But it seems to be solved in 6.35.2. So far my test router has been running with the bridge interface in place for a day now ...
by aoakeley
Thu Mar 05, 2015 9:28 am
Forum: General
Topic: Sierra Wireless AirCard 320U - LTE mode
Replies: 21
Views: 10875

Re: Sierra Wireless AirCard 320U - LTE mode

Hi All, It seems that the 320U does not support the "AT+CPIN?" command arriving on its data port when operating in Direct IP mode. This is the command that appears in the RouterOS logs when the device is in LTE mode, so perhaps RouterOS is simply not switching channels when the device is ...
by aoakeley
Thu Jan 08, 2015 1:30 am
Forum: RouterBOARD hardware
Topic: Dual band 951-like routerboard?
Replies: 18
Views: 7533

Re: Dual band 951-like routerboard?

So we are in 2015 now....

Any new of a dual band 951 or 2011 type board?

In fact Dual band anything?
by aoakeley
Fri Jul 25, 2014 8:59 am
Forum: General
Topic: Winbox 3 beta
Replies: 243
Views: 145965

Re: Winbox 3

I keep accidentally deleting saved devices from the list. Background: In the previous version you could click in the list and press a letter on the keyboard e.g. "b" to goto "Bobs Building" This does not work any more. Issue: If I press "r" to go to "Robs Rowing&qu...
by aoakeley
Fri Mar 14, 2014 2:24 am
Forum: General
Topic: Problem with Hotspot and Apple products
Replies: 3
Views: 2424

Re: Problem with Hotspot and Apple products

Hi all Has anyone else seen this behavior? It has been a problem since day one for us but now the network is getting so large (close to 100 controllers) it's getting unworkable to manually process each MAC reregistration. Jon We saw this behavior if we used .local OR a real FQDN name for the hotspo...
by aoakeley
Tue Nov 12, 2013 11:19 am
Forum: Scripting
Topic: Script runs from terminal but doesn't run from scheduler
Replies: 3
Views: 2917

Re: Script runs from terminal but doesn't run from scheduler

Did you ever figure this out. Different script but same symptoms. Runs fine if I execute it from terminal, but not from Winbox or Netawatch this is all that is in the script /ip route set [find comment=WAN1] distance=10 /ip route set [find comment=WAN2] distance=20 ROS 6.6 - but tried some older ver...
by aoakeley
Tue Aug 27, 2013 2:33 pm
Forum: General
Topic: dhcp client get more than one IP address
Replies: 3
Views: 1323

Re: dhcp client get more than one IP address

HI, I use a routerboard RB750 as DSL gateway, the RB750 hase two connected interfaces: one to the modem (configured as bridge) second is connected to the local network. ...... it seems that the ISP is having another dhcp server connected to the network that deliver local IPs. thx for the help Or mo...
by aoakeley
Thu Aug 15, 2013 3:25 am
Forum: General
Topic: Slow 3G connection
Replies: 9
Views: 4527

Re: Slow 3G connection

My correspondence with the MT support confirmed that PPP has speed issues: "when you will run a speedtest you will not get higher speeds that 25mbps on 4g, that is all.". .
Thanks. Now we know for sure.

Though in the real world I have never got about about 12mbps with ppp over 3/4G
by aoakeley
Sun Aug 11, 2013 2:04 pm
Forum: General
Topic: Slow 3G connection
Replies: 9
Views: 4527

Re: Slow 3G connection

Interesting. Has it been confirmed by the Mikrotik and does they plan to improve it? I have not sent anything into support, or had any confirmation from them. I think they have bigger issues at the moment with all the serious problems that need fixing in v6.x. Over time though I think it would be a...
by aoakeley
Sat Aug 10, 2013 4:29 pm
Forum: General
Topic: Slow 3G connection
Replies: 9
Views: 4527

Re: Slow 3G connection

So the same device does not have a ppp/dial-up connection when used with Windows laptop ? Or it does ? On the windows laptop it uses a connection manager supplied by the carrier (in this case Telstra Australia) that does not use PPP This post in an australian broadband forum implies that there is s...
by aoakeley
Sat Aug 10, 2013 6:12 am
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 74846

Re: RouterOS 6.1 released

Yeap, on 6.2 pre-release IPSec is still broken.
Has anyone tested this in production using 6.2 final release? changelog says its fixed........

Sorry - should have checked the 6.2 thread http://forum.mikrotik.com/viewtopic.php?f=2&t=75392 some people still having issues
by aoakeley
Sat Aug 10, 2013 5:45 am
Forum: General
Topic: Slow 3G connection
Replies: 9
Views: 4527

Re: Slow 3G connection

For anyone else coming across this; the answer to the speed difference between when you have your 4G USB modem plugged into a laptop and when you run it through a Mikrotik is related to the PPP session. If you have a USB 3G/4G modem that requires PPP to connect then you speeds will suffer if the mdo...
by aoakeley
Mon Jun 24, 2013 6:07 am
Forum: General
Topic: RouterOS 6.1 released
Replies: 198
Views: 74846

Re: RouterOS 6.1 released

I can also confirm issues with 6.1 and IPSEC with PSK. IT seemed to be chipset based. All routers on 6.1 MIPS-BE <-> MIPS-BE = YES MIPS-BE <-> PowerPC = NO MIPS-BE <-> x86 = NO POWERPC <-> x86 = YES POWERPC <-> POWERPC = unknown X86 <-> x86 = unknown Downgrading to 6.0 on all routers resolved the is...
by aoakeley
Tue Oct 02, 2012 2:42 pm
Forum: General
Topic: Slow 3G connection
Replies: 9
Views: 4527

Re: Slow 3G connection

I can't answer your question, but I have a ZTE-MF821(4G/LTE) USB modem plugged into a RB751G-2HnD. Plugged into my laptop I get a down/up speed of 60mbps/20mbps Via the RB751 I get a down/up speed of 12mbps/3mbps I thought it might have just been the CPU on the RB751 not keeping up, but when downloa...
by aoakeley
Mon May 21, 2012 12:00 pm
Forum: General
Topic: Backup lost data ...
Replies: 17
Views: 6241

Re: Backup lost data ...

@ymartin I can confirm the same. 1. Setup device (RB751U, v5.15) with 3 x virtual AP, hotspot, and a few other wireless goodies 2. Backup device 3. Restore to new device running same OS version (5.15) - wireless not configured properly on restored device back in original router use "export comp...