Community discussions

MUM Europe 2020

Search found 37 matches

by robertkjonesjr
Mon Sep 02, 2019 6:27 pm
Forum: Beginner Basics
Topic: Forward only UDP multicast packets to another port
Replies: 2
Views: 560

Re: Forward only UDP multicast packets to another port

Have a look at the various switch chip rulesets - https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Rule_Table One of the action options is to send traffic to new destination ports. I didn't test it, but the fields exist to match an incoming port and a dst IP address so coupled with action ...
by robertkjonesjr
Thu Aug 22, 2019 10:43 pm
Forum: Beginner Basics
Topic: Massive WiFi packet loss with MikroTik Router hAP ac lite
Replies: 6
Views: 922

Re: Massive WiFi packet loss with MikroTik Router hAP ac lite

Wireless can't have "packet loss" unless your connection is lost
Can you explain this a bit more? There are many causes of packet loss, not just connection loss.
by robertkjonesjr
Fri Aug 16, 2019 4:06 pm
Forum: General
Topic: I'm sure Mikrotik has a legit response to this...
Replies: 14
Views: 1822

Re: I'm sure Mikrotik has a legit response to this...

There are no known unfixed vulnerabilities. This may be true, but my interpretation from the linked article is different - what safeguards have been put in place to avoid future vulnerabilities? I think the wording used here is good - no known unfixed vulnerabilities . This is very different differ...
by robertkjonesjr
Sat Jul 27, 2019 5:05 pm
Forum: The Dude
Topic: Multiple Vlan monitoring
Replies: 7
Views: 1366

Re: Multiple Vlan monitoring

Typically, if you move the equipment to a specific vlan it needs to be addressed appropriately as a vlan usually represents a specific subnet. Why do you have to move the equipment to the daily visitor vlan? Can't you leave as-is and route to it? If you have DHCP for each vlan, proper default GW and...
by robertkjonesjr
Wed Jul 03, 2019 11:51 pm
Forum: Wireless Networking
Topic: Connect Mikrotik Device to Ubiquiti AP via 802.1x [SOLVED]
Replies: 6
Views: 1261

Re: Connect Mikrotik Device to Ubiquiti AP via 802.1x [SOLVED]

I run this using EAP-TLS from a Mikrotik hAPac device as wireless client with WPA2-Enterprise configured on a UBNT wifi system. It is on 6.44.3; on the hAP, choose station mode, assign the SSID, and the security profile: /interface wireless security-profiles set [ find default=yes ] supplicant-ident...
by robertkjonesjr
Sat Mar 02, 2019 10:11 pm
Forum: Wireless Networking
Topic: Superchannel on ac radios?
Replies: 4
Views: 629

Re: Superchannel on ac radios?

As in this device, as well as others: >> RB962UiGS-5HacT2HnT-US (USA) is factory locked for 2412-2462MHz, 5170-5250MHz and 5725-5835MHz frequencies. This lock can not be removed. I see the US versions do not include UNII-2, or DFS channels. They are allowed in the US, so what is the reason of the lo...
by robertkjonesjr
Thu Nov 01, 2018 2:14 pm
Forum: Wireless Networking
Topic: [SOLVED] WMM giving terrible throughput
Replies: 8
Views: 1795

Re: WMM giving terrible throughput

Can you determine really what WMM is doing with the wireless frames? An over-the-air capture will show what actual value is put into the Qos Control header, in both directions. Also, you are forcing the value at the AP. Can you try to use iPerf to force the DSCP value and see if that has any effect?...
by robertkjonesjr
Wed Oct 31, 2018 2:58 pm
Forum: Wireless Networking
Topic: use Mikrotik as wireless ethernet bridge
Replies: 10
Views: 1472

Re: use Mikrotik as wireless ethernet bridge

This config works for me. I found that version of software matters; we have seen some that just don't work, so upgrade/downgrade as appropriate. # RouterOS 6.40.5 /interface bridge add name=bridge1 protocol-mode=none /interface wireless security-profiles add authentication-types=wpa2-psk eap-methods...
by robertkjonesjr
Mon Oct 29, 2018 10:53 pm
Forum: Wireless Networking
Topic: use Mikrotik as wireless ethernet bridge
Replies: 10
Views: 1472

Re: use Mikrotik as wireless ethernet bridge

In that link they are using NAT which has specific limitations. It’s not a true bridge connection at layer 2, which I need for bidirectional multicast and unicast traffic. With NAT, this generally assumes the wireless clients on the router are clients only so only outbound traffic is important. Of c...
by robertkjonesjr
Mon Oct 29, 2018 2:16 pm
Forum: Wireless Networking
Topic: use Mikrotik as wireless ethernet bridge
Replies: 10
Views: 1472

Re: use Mikrotik as wireless ethernet bridge

I use both HAPac and GrooveA52ac. I suspect nearly any of the devices will work; it's more about the chipset and the software/driver. I think most (all?) Mikrotiks use Atheros chipsets. I use station pseudobridge clone or station pseudobridge as the radio mode, which isn't the same as station mode. ...
by robertkjonesjr
Sun Oct 28, 2018 2:01 am
Forum: Wireless Networking
Topic: use Mikrotik as wireless ethernet bridge
Replies: 10
Views: 1472

Re: use Mikrotik as wireless ethernet bridge

I do this with Cisco APs but they are lightweight, I.e. using a controller. Works great.
by robertkjonesjr
Sun Jul 03, 2016 12:25 pm
Forum: Wireless Networking
Topic: wireless-rep Config does not work correctly
Replies: 0
Views: 457

wireless-rep Config does not work correctly

CRS109 w/ 6.35.4 - testing a wifi system so would like to adjust config of CRS device to see impact on overall system.  When I set Band to 2GHz-B, based on the documentation, I expect certain results.  I checked the wireless FAQ and WiKi page, and searched here for WMM but did not see any notes rela...
by robertkjonesjr
Tue May 31, 2016 2:27 am
Forum: General
Topic: Same subnet on multiple inerfaces
Replies: 2
Views: 348

Re: Same subnet on multiple inerfaces

What problem do you have that you need to solve this way? I suspect you did not find a solution because this is not a typical solution to any problem. A routing table is a host based concept, so your three interfaces all on the same subnet may not behave the way you want. A typical solution might be...
by robertkjonesjr
Sat Apr 16, 2016 11:41 am
Forum: Wireless Networking
Topic: Wireless Sniffer Streaming, missing the RadioTap part
Replies: 1
Views: 665

Re: Wireless Sniffer Streaming, missing the RadioTap part

I also note that there is no frame check sequence, nor do 802.11 ACKs show in the stream. Are there any other limitations? I suspect the radiotap header is never put on the frame prior to sending, though a TZSP header is present: TZSP: IEEE 802.11: Good Version: 1 Type: Received packet (0) Encapsula...
by robertkjonesjr
Sat Apr 16, 2016 11:04 am
Forum: Wireless Networking
Topic: Multicast-helper=full
Replies: 7
Views: 7351

Re: Multicast-helper=full

Why only five copies? If you have 27 clients connected, I would expect 27 unless some other process exists to alter the forwarding of the multicast traffic, like IGMP. I don't know of anything that exists on Mikrotik to change the forwarding, so I would expect one multicast packet -> 27 unicast data...
by robertkjonesjr
Mon Feb 15, 2016 2:47 pm
Forum: Wireless Networking
Topic: Count WiFi enabled devices around a WiFi AP (Passive WiFi)
Replies: 2
Views: 1046

Re: Count WiFi enabled devices around a WiFi AP (Passive WiFi)

I don't know how to do this with a Mikrotik device directly. However, various other tools may be able to help: 1. tcpdump or Wireshark would definitely be able to do it 2. aircrack-ng suite of tools - I think the airodump-ng tool in particular displays probes 3. horst tool (http://br1.einfach.org/te...
by robertkjonesjr
Fri Feb 12, 2016 1:52 am
Forum: General
Topic: Wrong "More Data" bit value in multicast with PSM enabled
Replies: 10
Views: 1108

Re: Wrong "More Data" bit value in multicast with PSM enabled

Thanks for the update - what is this option? multicast-buffering I looked but could not find it. I see multicast helper, but not an option for buffering. Edit - Answer my own question - it came in 6.34: winbox - added multicast-buffering & keepalive-frames settings to wireless interfaces; So was it ...
by robertkjonesjr
Mon Feb 08, 2016 1:45 pm
Forum: General
Topic: Wrong "More Data" bit value in multicast with PSM enabled
Replies: 10
Views: 1108

Re: Wrong "More Data" bit value in multicast with PSM enabled

Can you deduce, from the trace, that a power-save indication triggers the multicast frames to stop? Can you post a short trace of the whole channel where iperf is coming in and out? Have you tried enabled/disabling uapsd, if it is an option on the Mikrotik? I recall they recently added this. >>iw de...
by robertkjonesjr
Sun Feb 07, 2016 9:29 pm
Forum: General
Topic: Wrong "More Data" bit value in multicast with PSM enabled
Replies: 10
Views: 1108

Re: Wrong "More Data" bit value in multicast with PSM enabled

What is the Apple device doing during these periods? In between beacons, is it issuing a frame with P (power mgt) bit set? When you say Android and/or Apple is PSM, exactly what do you mean? There are multiple power save mechanisms - why would an Android not do powersave mode? What is the specific b...
by robertkjonesjr
Fri Feb 05, 2016 11:50 pm
Forum: General
Topic: Wrong "More Data" bit value in multicast with PSM enabled
Replies: 10
Views: 1108

Re: Wrong "More Data" bit value in multicast with PSM enabled

I suspect this is due to the listen interval of the power save client. Your trace is not complete, 1. Is it always 10 frames between beacons? 2. What is the listen interval in the association request for the power save client when it comes online? For my Samsung tablet: Listen Interval: 0x000a Depen...
by robertkjonesjr
Fri Feb 05, 2016 1:22 am
Forum: General
Topic: Multicast Multiple Subnets on Same Router
Replies: 3
Views: 1451

Re: Multicast Multiple Subnets on Same Router

Something to check: verify the ttl of the multicast packets to be sure they are not being dropped at the router.
by robertkjonesjr
Sun Jan 10, 2016 2:32 pm
Forum: Wireless Networking
Topic: Slow wifi speed compared to wired (30Mbps vs 60Mbps)
Replies: 5
Views: 4542

Re: Slow wifi speed compared to wired (30Mbps vs 60Mbps)

But I find it quite interesting that 30Mbps is considered good for this router, considering there are many other routers out there that would allow me to get better speeds. This is an assumption without any data. There are many limitations as to the throughput; using 2.4GHz provides for generally l...
by robertkjonesjr
Tue Jan 05, 2016 12:46 pm
Forum: Wireless Networking
Topic: Slow wifi speed compared to wired (30Mbps vs 60Mbps)
Replies: 5
Views: 4542

Re: Slow wifi speed compared to wired (30Mbps vs 60Mbps)

frequency=2442 This is an unusual frequency selection; typically, channels 1/6/11 are chosen and this is channel 7. Since this is 2.4GHz, I am not sure how much more you expect to get. 40MHz is unusual for 2.4GHz as many devices and APs will not even do it (i.e. Cisco and Apple, for example), and e...
by robertkjonesjr
Sun Jan 03, 2016 12:26 pm
Forum: Wireless Networking
Topic: RB951G-2HnD - Gratuitous 802.11 Disassoc (8) messages + Wireless Connectivity issues
Replies: 4
Views: 682

Re: RB951G-2HnD - Gratuitous 802.11 Disassoc (8) messages + Wireless Connectivity issues

I am seeing gratuitous 802.11 Disassoc (8) log messages. I have a guess to add to the list: the wireless client goes to sleep, then the group gets changed (GTK rekey) and when the client wakes up, it sends frames to the AP which are not encrypted correctly. The AP rejects them with a Disassociate f...
by robertkjonesjr
Thu Dec 24, 2015 11:16 pm
Forum: General
Topic: Does RB260GS support multicasting?
Replies: 4
Views: 1144

Re: Does RB260GS support multicasting?

I have not used the dedicated switches like this, but the regular RouterOS products do not really provide any type of Layer 2 multicast management, i.e. IGMP and the like. I would look elsewhere if you have a multicast-based system. Mikrotik has commented in the forums that IGMP is bad, but I think ...
by robertkjonesjr
Wed Dec 23, 2015 5:39 pm
Forum: Wireless Networking
Topic: Configuring a Wireless Bridge
Replies: 6
Views: 1190

Re: Configuring a Wireless Bridge

I did achieve 866 mbps with SXT 5 ac 802.11ac 3x3, 80MHz channel, SGI, VHT9 (http://mcsindex.com/) can give you more than that for connection rate. I am sure you are aware that connection speed does NOT equal throughput. Most users don't care what the connection speed is, but rather how much data t...
by robertkjonesjr
Wed Dec 23, 2015 2:19 am
Forum: General
Topic: CCR1036 and mirror ports
Replies: 3
Views: 2783

Re: CCR1036 and mirror ports

If you add the port you wish to monitor to a bridge - and then add another port to the bridge the second port on the bridge will act like a mirrored port. It's not obvious why this would be so. Can you elaborate? If mac address learning was disabled somehow then yes - it would be a hub, not a bridg...
by robertkjonesjr
Wed Dec 16, 2015 12:04 am
Forum: General
Topic: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?
Replies: 18
Views: 2406

Re: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?

REP is a Cisco proprietary sub-millisecond failover protocol that you use instead of spanning tree. REP is more like 50ms recovery ( http://www.cisco.com/c/en/us/support/docs/lan-switching/ethernet/116384-technote-rep-00.html ), not sub millisecond. That is typical; in a previous job, I designed te...
by robertkjonesjr
Tue Dec 08, 2015 12:43 am
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 28408

Re: Wifi keeps mobile device awake? [keepalive packets]

Since having iPhones stay connected to the AP long term is something that I (and I think any iPhone user) regard as "mission critical", and iPhones are quite common these days, it means that Mikrotik APs are not usable. On this we agree. It's a showstopper. I will not deploy Mikrotik wireless beyon...
by robertkjonesjr
Sat Dec 05, 2015 4:33 pm
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 28408

Re: Wifi keeps mobile device awake? [keepalive packets]

Are you saying that an 802.11 deployment has to pick one of a) working power saving mode or b) resistance to key recovery attacks?? Surely that's wrong. No, it's not obvious why I would have to choose. I can set GTK rekey interval from 2min to 1day on other platforms and have no trouble. The issue ...
by robertkjonesjr
Fri Dec 04, 2015 11:37 pm
Forum: General
Topic: stop MT triggering CISCO BPDU guard
Replies: 3
Views: 2233

Re: stop MT triggering CISCO BPDU guard

Some options: 1. Disable bpduguard on the Cisco device. I don't recommend this, but it would keep from getting the access port put into errdisable. 2. Be sure there are no bridges on the CRS - the switch chip can't do STP (it needs to... but that is a feature request) as only the software bridge can...
by robertkjonesjr
Thu Dec 03, 2015 2:47 am
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 28408

Re: Wifi keeps mobile device awake? [keepalive packets]

No AP that I'm aware of allows a key update interval longer than 1h to be configured Cisco WLC controllers allow 86400sec as group key update - which is one day. In older versions of software it is CLI configured, but in newer versions it is available through the GUI. Cisco has a large market share...
by robertkjonesjr
Tue Sep 01, 2015 8:44 pm
Forum: Announcements
Topic: v6.32 released [version temporarily removed]
Replies: 116
Views: 30845

Re: v6.32 released

493G upgraded via web interface System / Packages from 6.31 to 6.32 went to reboot loop and had to be recovered via netinstall. Now running 6.30.4 and works again. This is happening to me on my 493G. However, netinstall is not able to recover - it's never seen in the Routers window. My RB450G shows...
by robertkjonesjr
Sun Aug 09, 2015 2:20 pm
Forum: General
Topic: Cacti template for Mikrotik
Replies: 2
Views: 8689

Re: Cacti template for Mikrotik

When I import the xml file into cacti I get: Error: XML: Hash version does not exist. I get new templates, but none of them have names associated - I added the <blank space>, here is a partial example of the graph template list: Template Title** <blank space> <blank space> Cisco - CPU Usage Host MIB...
by robertkjonesjr
Thu Aug 06, 2015 1:23 am
Forum: Wireless Networking
Topic: PtP Link WMM Feature
Replies: 5
Views: 925

Re: PtP Link WMM Feature

WMM support should be evident in a wireless packet capture. Check the beacons and probes between the devices and look for the IE (information element) for WMM. I have observed with MikroTik products that when 802.11n is selected, WMM is enabled regardless of the configuration setting. If b/g is sele...
by robertkjonesjr
Thu Aug 06, 2015 12:55 am
Forum: General
Topic: RoMON packets not passed by Edgeswitch 24?
Replies: 4
Views: 899

Re: RoMON packets not passed by Edgeswitch 24?

I think it is a UBNT issue - this is what I posted over there: I just checked myself about 5 min ago - it's a special MAC address. It's almost certainly consummed by the switch, that's why it is not getting through. The MAC address on my test network in use for Mikrotik RoMON, I believe, is: Destina...
by robertkjonesjr
Tue Jul 07, 2015 1:33 pm
Forum: General
Topic: Winbox losing MAC connection to RB850Gx2
Replies: 44
Views: 11968

Re: Winbox losing MAC connection to RB850Gx2

I find MAC telnet quite flaky across the whole product line. With more than one NIC active on the host machine, I don't even bother. I have moved to IPV6 connection through Winbox so that I can configure without having to change my local IPV4 address to be compatible. Alas, IPV6 discovery does not a...