@marting

Hi Martin,

Please consider merging a fix for post-v6.43 login method.

Thanks!
Artem

+1000 for LLDP-MED support

What version of RouterOS were you running in April? If the device was previously compromised, whether you're running a patched version now is irrelevant. I'd netinstall the device with a current firmware and ensure that you're blocking access to management protocols such as winbox and telnet except...

Apprently it is not fixed in 6.43. I found logins as admin from different IPs allover the world to my CCRs1036 with 6.43rc11. Moreover not only CCRs are affected as I found similar logins into my RB3011. These logins appears first time back in April 30 and was happening every few days until today. W...

Hi I wonder if VPNFilter malware threat is addressed in this release. See https://www.symantec.com/blogs/threat-intelligence/vpnfilter-iot-malware and https://blog.talosintelligence.com/2018/05/VPNFilter.html for more details. Apprently - it is not fixed in 6.42.2. I found logins as admin from diff...

2. OSPF is broken. Massive messages: 2018-04-18T22:23:14.504801+03:00 kv-per37k7-rtr01.sysadm.in.ua route,ospf,info Ignoring Link State Acknowledgment packet: wrong peer state 2018-04-18T22:23:14.504801+03:00 kv-per37k7-rtr01.sysadm.in.ua route,ospf,info state=Init Resolved. Caused by wrong NAT rul...

After an upgrade of multiple devices to 6.42: 1. /ip neighbor discovery - is not working anymore on dynamic (L2TP) interfaces 2. OSPF is broken. Massive messages: 2018-04-18T22:23:14.504801+03:00 kv-per37k7-rtr01.sysadm.in.ua route,ospf,info Ignoring Link State Acknowledgment packet: wrong peer stat...

Hi all, Question is still open - Is there a way to ensure the RouterOS system uses a particular internal IP as its source address? My addresses list looks like below: /ip address add address=192.168.88.254/24 comment=defconf interface=bridge network=192.168.88.0 add address=aa.bb.dd.243/29 interface...

Selectable auth mechanisms for RADIUS-based AAA on system login. currently it varies based on the access vector, and Winbox requires chap which requires reversible cryto / plaintext password store. Or add LDAP auth client, but I'm sure simply allowing MS-CHAPv2 / PAP as auth mechanisms for existing...

[admin@RTR01] > /interface ethernet switch unicast-fdb print
bad command name unicast-fdb (line 1 column 28)
[admin@RTR01] > /interface ethernet switch
host port rule vlan edit export find print reset-counters set

What model are you using? What ROS and Firmware version are you running? [artem@RTR01] /system resource> print uptime: 3d14h53m37s version: 6.36rc20 (testing) build-time: May/30/2016 05:56:55 free-memory: 933.5MiB total-memory: 1011.3MiB cpu: ARMv7 cpu-count: 2 cpu-load: 2% free-hdd-space: 86.8MiB ...

tien, you filtering everything except icmp and established connections in "input" chain 1 ;;; defconf: accept ICMP chain=input action=accept protocol=icmp 2 ;;; defconf: accept established,related chain=input action=accept connection-state=established,related 3 ;;; defconf: drop all from W...

/interface ethernet switch host print This do not show required info. It only shows Mikrotik's own MACs, but NOT learned. Here is an example: [artem@RTR01] > /interface ethernet switch host print Flags: D - dynamic, I - invalid # SWITCH MAC-ADDRESS PORTS TIMEOUT DROP MIRROR VLAN-ID 0 D switch2 E4:8...

i did master port ether2 for ether3-ether5 and ether6 for ether7-ether10 then i add ether2 and ether6 into bridge-local No effect. DHCP not work on ether6-ether10 Which RouterOS version do you use? Do you have SFP module installed in SFP1 ? Only DHCP have a problem, or manual configured IP does not...

Reach communication of any VLAN to a different network in the same mikrotik . It is not clear what exactly you are trying to achieve. Give an example please. You want PCs from VLAN2 to communicate with PCs in VLAN3? Or the intention is to make PCs from same VLAN to communicate between each other (L...

Hi everyone. I just buy mikrotik RB3011UiAS-RM and have a problem. Anyway ports ether2-ether5 receive IP via DHCP, ports ether6-ether10 not :( If I'm not mistaking - in RB3011 default config ports ether6-ether10 are not included into the bridge. Or maybe these ports are in separate bridge. What you...

But it has nothing to do with RFC stated in previous post. I agree that comment or other non critical parameter should not reset connection, but most likely such behaviour will stay in ROS v6. mrz, I agree regarding the topic. Current behaviour (session reset on any BGP peer config change) looks li...

Hello! It would be good to add an ability to view MAC address table of the switch (L2 Forwarding Database) for troubleshooting purposes. Sometimes it is needed to know whether switch learned MAC address or some remote side. Currently this is not possible. ARP table is not an option, because remote s...

RFC you mentioned is 'Route Refresh Capability for BGP-4' Route refresh capability is already supported for very long time. If you change critical peer parameters, for example, keepalive timers, connection must be reset. So what exactly you want us to implement? I was changing Out Filter for one of...

you can switch from using the combo package, to using only individual packages. then you can use whichever packages you want. the combo package should not be combined with the use of individual packages in any router, not just small flash devices: 1. routeros.npk = good 2. system+wireless-rep+advan...

I saw some other topics, and there people had installed extra packages. The total size of the packages you are trying to install should not be bigger than the Flash. For example in another topic, the person had the other wireless packages. If using only the bundle package, there should be no proble...

Hi!

Could you please consider to implement possibility for Soft Reset in BGP (as per RFC2918).

This would allow to not reset BGP sessions completely on configuration change.

Thanks!
Artem

Upgrades don't need flash space, they happen via RAM drive. Small flash space could only affect you if you need big hotspot files, proxy or logs to persist after reboot. Normis, this statement is not correct. Current release is located on flash and being used during bootup. There is no possibility ...

Dear Mikrotik, I've hit into an issue with flash size on hAP AC lite. After installing latest firmware + wireless-rep - router can't upgrade automatically anymore, because it just can't fit next version onto flash. Only 16MBytes flash... In new routers.... WHY!?!? Does it really make router much che...

UP!

Feature requested in this topic is still needed by many Mikrotik users.
We just need a possibility to choose source address and/or source interface (in case of dynamic address) for PPP/VPN client connection.

Any progress or ETA on this topic?

Thank you!

Essentially all I require is to be able to set the "base path" or the "tftp root" directory of the TFTP server. In other words, I need to " prefix " all filenames with the "root directory". I need exactly the same. Have anybody sucessfully built TFTP boot ser...