Community discussions

Search found 505 matches

  • 1
  • 2
by doneware
Fri Oct 18, 2019 7:12 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 37
Views: 4160

Re: New High Performance Routers ! ?

Sure it is cheap when you need only plain VLAN switching. modern switch chips used by Mikrotik, like the Marvell Prestera series can do much more in hw assisted manner: https://www.marvell.com/switching/assets/Prestera_98DX3336_pb.pdf just take 802.1BR port extender: pair this with a router and you...
by doneware
Fri Oct 18, 2019 7:01 pm
Forum: RouterBOARD hardware
Topic: Mikrotik routerboard (CRS305-1G-4S+in) traffic generator 10Gbps and self loopback on port
Replies: 1
Views: 110

Re: Mikrotik routerboard (CRS305-1G-4S+in) traffic generator 10Gbps and self loopback on port

traffic generator essentially a packet generator that runs on the CPU. CRS305 is _mainly_ a switch. so it can deliver non blocking switching performance, but the CPU is far from that. check out the block diagram: https://i.mt.lv/cdn/rb_files/CRS305-1G-4Splus-181016084346.png what you see here is the...
by doneware
Fri Oct 18, 2019 1:24 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 37
Views: 4160

Re: New High Performance Routers ! ?

With CRS326-24S+2Q+RM there is a Switch with 40G Port. I guess next RoutingHW will have 40G too. So there will be new faster combinations. i on the other hand would cherish solutions with NBase-T (like the sole crs with nXG ports) so it supports 2.5GbE and 5GbE on a single port rather than using LA...
by doneware
Fri Oct 18, 2019 12:07 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 37
Views: 4160

Re: New High Performance Routers ! ?

It's not hardware nat. Hardware NAT implemented completely in hardware, work on wire speed, and do not use CPU. following your logic, CCRs don't have encryption in HW either, right? btw, can you please point out any _non_cpu_hardware_element_ in the CCR series routers? network operations "done in h...
by doneware
Fri Oct 18, 2019 11:16 am
Forum: RouterBOARD hardware
Topic: LTE capable ARM Routers
Replies: 3
Views: 190

Re: LTE capable ARM Routers

Personally I think a RB4011 or a RB1100AHx4 with a SIM slot and either a M.2 with USB support or a mPCIe would be nice to have for situations where you want to back up a single WAN and no other options are available other than cellular or you want to send SMS easily from the Dude edition. you can e...
by doneware
Mon Oct 14, 2019 4:19 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 37
Views: 4160

Re: New High Performance Routers ! ?

I am very surprised that Mikrotik does not use hardware NAT'ing. A10, one of the real high performance CGN manufacturers doesn't necessarily use hw NAT either. we have some boxes from them, they handle several 10s of gbps with sw only nat on dual xeon CPUs (their hw appliance). believe or not, NAT ...
by doneware
Mon Oct 14, 2019 2:00 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 37
Views: 4160

Re: New High Performance Routers ! ?

We use it only for "the dude" monitoring and 3 ppptp servers for managment.
i know it will not improve the performance, but you should really move away from pptp, esp if it is used for sensitive stuff, like management.
by doneware
Thu Oct 10, 2019 1:06 am
Forum: RouterBOARD hardware
Topic: 100 % CPU on some Routerboards
Replies: 9
Views: 1378

Re: 100 % CPU on some Routerboards

make sure there's nothing attached to the serial console if the device has one. this was a very hard issue to track down: we had devices with long serial cables connected to the router and the other end of the cable (~10m long) wasn't connected to anything. it picked up some EM noise and constantly ...
by doneware
Sun Oct 06, 2019 2:08 pm
Forum: RouterBOARD hardware
Topic: LtAP with 2 mini pci-e cards [SOLVED]
Replies: 13
Views: 2132

Re: LtAP with 2 mini pci-e cards [SOLVED]

/system routerboard usb set type=mini-PCIe so this tells me there are 2 usb ports, one is hardwired to the 1st mpcie slot, while the other is switchable between the 2nd mpcie slot and the type-a external port. :-( i was totally hoping for 3 independent ports so i can use this box as a mobile connec...
by doneware
Wed Sep 25, 2019 8:17 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4077

Re: Torrent client

But one should never do a network wide upgrade: it should be staged - at least to minimize the convergence time of routes and everything else. I don't want to imagine 10k routers rebooting a few minutes apart one from another. ok, further info about the upgrade process - something that was ingeniou...
by doneware
Wed Sep 25, 2019 1:05 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4077

Re: Torrent client

I don't think it would be that big of a problem. If your network has thousands of routers the bandwidth must be equally big. it is a bit tricky to serve this amount of data quickly. esp. upgrading large number of CPEs managed by some tr-069 based system can be a bottleneck. sw delivery with torrent...
by doneware
Mon Sep 23, 2019 11:59 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4077

Re: Torrent client

torrent is used in the Terragraph ecosystem for node software distribution. just saying. in this interpretation to me it perfectly makes sense to download stuff only to ramdisk. please, think in scale: upgrading 10s or 100s of 1000s CPEs can run into serious bottleneck. but i do support the exile of...
by doneware
Sun Sep 15, 2019 10:56 pm
Forum: RouterBOARD hardware
Topic: WAPG60ADM new 60 GHz product
Replies: 17
Views: 2373

Re: WAPG60ADM new 60 GHz product

Ok so it is something like the mini-PCI modules used for LTE (and, mainly in the past, also for WiFi)?
i doubt. Mikrotik calls their modules as R11e-xxxx.
by doneware
Sun Sep 15, 2019 9:33 am
Forum: RouterBOARD hardware
Topic: LoRaWAN support
Replies: 53
Views: 10101

Re: LoRaWAN support

well...the second pci slot is populated with gps as i see... no. as with the ltap mini, the gps is on-board and not socketed. the 2nd mpcie slot is still free. that’s why i suggested back in april that the m33 or ltap (biggie) is the ideal platform for distant deployments. but if you already have I...
by doneware
Sun Sep 15, 2019 9:20 am
Forum: RouterBOARD hardware
Topic: Audience
Replies: 34
Views: 6685

Re: Audience

Or just add an USB 3.0 HUB chip... would probably cost $2 instead of $1... And back to the RB 450Gx4, it doesn't even have mPCIe slot, so no excuses here in case of the 450Gx4 it was a crucial goal to keep the same form factor as the 850Gx2 and 450/450G. alao it is rated for harsh temperatures so y...
by doneware
Fri Sep 13, 2019 4:31 pm
Forum: RouterBOARD hardware
Topic: WAPG60ADM new 60 GHz product
Replies: 17
Views: 2373

Re: WAPG60ADM new 60 GHz product

The 'ad' in the name may refer to the "real 802.11ad", not the proprietary protocol stuff like the current 60GHz product line. all the 60GHz units made by MikroTik have the 'ad' letters in their product code RBwAPG-60ad-SA (wAP 60Gx3 AP) RBwAPG-60ad (wAP 60G) RBSXTsq-60ad (SXTsq Lite60) RBLHG-60ad ...
by doneware
Fri Sep 13, 2019 4:14 pm
Forum: RouterBOARD hardware
Topic: WAPG60ADM new 60 GHz product
Replies: 17
Views: 2373

Re: WAPG60ADM new 60 GHz product

Yes, M could be for Mesh possibly. Could it be for Terragraph? terragraph depends on the QCA64xx baseband from qualcomm and most features it is essentially part of the .11ay standard. the current terragraph has modified MAC&PHY layers, frame structure, basically everything - so it is absolutely not...
by doneware
Fri Sep 13, 2019 3:21 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

Well, it appears that MikroTik is moving from the small-ISP-backbone world to the home consumer world i might rephrase this a bit: extending instead of moving. but that's just my feeling. It would seem natural to have protocols like BGP, OSPF and MPLS disabled by defauit on such devices, to reduce ...
by doneware
Fri Sep 13, 2019 2:28 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

Put SMB, Torrent, and other things that have no place in ISP infrastructure into another package. with the SMB thing i am totally OK. with the torrent - do we know the purpose of the torrent client here? i saw a couple of devices which included torrent functionality for sw distribution - and i mean...
by doneware
Thu Sep 12, 2019 1:19 am
Forum: RouterOS v7 BETA
Topic: Should OSPF work?
Replies: 3
Views: 1235

Re: Should OSPF work?

I'm trying to configure OSPF for IPv6 to test recursive routing in v7 to route ipv6 you should use OSPFv3. as far as i see, you have set this under /routing ospf instance using the new 'version' attribute [admin@hgw] /routing/ospf/instance> print Flags: D - dynamic, X - disabled, I - inactive 0 ver...
by doneware
Wed Sep 11, 2019 2:11 am
Forum: RouterBOARD hardware
Topic: GPER usage questions
Replies: 31
Views: 3441

Re: GPER usage questions

It's like putting a switch in between a switch learns mac-adresses ... a switch ages mac-adresses !? a switch with 2 ports doesn't need to learn no MAC addresses and henceforth not responsible for any aging procedures. it neither runs no loop prevention algorythm. whatever is received from port A w...
by doneware
Mon Sep 09, 2019 11:40 am
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

L7 application identification with the growing number of <you-name-it>-over-HTTPS applications around, if your app can be identified in the transmission path, then encryption is not working quite right. the network isn't there to solve all the possible issues what in general sw devs are too lazy to...
by doneware
Sun Sep 08, 2019 5:12 pm
Forum: Wireless Networking
Topic: LHG 60 clone from ubiquti
Replies: 13
Views: 2062

Re: LHG 60 clone from ubiquti

There will be interference problems sooner or later, especially if these radios will continue to be used for P2MP covering wide sectors. Phased antenna can do wonders, but it does have some limitations at suppressing interference... and GPS sync doesn't help if it's not your radios that are causing...
by doneware
Sun Sep 08, 2019 12:24 am
Forum: Wireless Networking
Topic: LHG 60 clone from ubiquti
Replies: 13
Views: 2062

Re: LHG 60 clone from ubiquti

On one pole u cant use same channels...antennas can see each other..the direction of the antenna doesnt matter. sorry, but i see otherwise and i have quite some proof for it. we run a 60GHz single frequency mesh network in Márkó, Hungary (using just a single 2GHz channel, channel #2). we have 4 rad...
by doneware
Sat Sep 07, 2019 1:47 pm
Forum: General
Topic: Feature Request: USB CH340 usb-to-serial support.
Replies: 4
Views: 1066

Re: Feature Request: USB CH340 usb-to-serial support.

re-checked it with 6.45 on MIPS - works as well. [admin@hgw] > /sys reso usb print detail 0 device="1-0" vendor="Linux 3.3.5 ehci_hcd" name="RB400 EHCI" serial-number="rb400_usb" vendor-id="0x1d6b" device-id="0x0002" speed="480" ports=1 usb-version=" 2.00" 1 device="1-1" name="USB2.0-Serial" vendor-...
by doneware
Sat Sep 07, 2019 1:39 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

I already read CCR support won’t take years and there is no ETA, but... is it expected to be released in this year or not? if you check out the video that was posted previously (from april 2019) - the multi core BGP test was run on a CCR1016. ( https://www.youtube.com/watch?v=NbfKplzda7I ) as far a...
by doneware
Sat Sep 07, 2019 1:25 pm
Forum: General
Topic: Feature Request: USB CH340 usb-to-serial support.
Replies: 4
Views: 1066

Re: Feature Request: USB CH340 usb-to-serial support.

C0CAF0AA-D612-42C9-A768-E4E43B3473CA-3191-0000028F5EFFE2C2.jpeg just tried with this chinese arduino nano knockoff which has a WCH340G usb serial adapter, and it works fine. i agree, the device naming is somewhat medeival: [admin@hgw] > /system/resource/usb/print Columns: DEVice, VENDOR, NAME, SPEE...
by doneware
Sat Sep 07, 2019 1:21 am
Forum: General
Topic: Feature Request: USB CH340 usb-to-serial support.
Replies: 4
Views: 1066

Re: Feature Request: USB CH340 usb-to-serial support.

I want to use CH340 usb-to-serial adapter. but Mikrotik not support yet.
i saw ch341 kernel module in the newly released routeros7.0 beta1.
tomorrow i will hook on a ch34x based USB to serial to the upgraded router and report back my findings.
by doneware
Fri Sep 06, 2019 11:58 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

@Normis,
do i correctly assume that from v7 on IPv6 will be part of the 'system' package and will be enabled by default?

[please say yes]
by doneware
Fri Sep 06, 2019 11:55 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

which program did you use to unzip?
judging the previous images to me it seems it was 7z(ip). at least this was the icon i saw on the posted png.
7zip.png
by doneware
Fri Sep 06, 2019 11:54 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

just upgraded a wAP60G to see if there's anything new on the wigig part. found nothing spectacular so far, but noticed that there's already a settable 'region' parameter: [admin@2also] /interface/w60g> set 0 region= asia australia canada china eu japan no-region-set usa [admin@2also] /interface/w60g...
by doneware
Fri Sep 06, 2019 2:31 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

BGP/MPLS are disabled intentionally, as this is a home router test. some traces are visible though :-) - i love the extra insights, like /routing/forwarding-path/print and /routing/route/print. i assume, the debug.* attributes will not be around in the official releases. is there any source that de...
by doneware
Fri Sep 06, 2019 2:06 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

I lost BGP, but I gained /routing/pimsm and /routing/fantasy, is this the real life, or is this "/routing/fantasy"? mpls is also gone. but looking at /system/packages, i'd say this is really just a preview/snapshot, as all packages are gone. [admin@MikroTik] /system/ntp/server> /sys package/print d...
by doneware
Fri Sep 06, 2019 1:23 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

still no ipv6 support for L2TP and SSTP client/server, but hey, hello MACSec!!! macsec.png and vrf has been moved from 'ip route vrf' to 'ip vrf'. but export verbose dies on it :-( ipvrf.png on the other hand, environment(?) vars are now possible in DHCP client option values? dhcp-opt-dyn-vars.png f...
by doneware
Fri Sep 06, 2019 1:15 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35930

Re: RouterOS v7.0beta1 (ARM)

Added ext4 support ?

[admin@MikroTik] > sys reso print 
                   uptime: 2m16s
                  version: 7.0beta1 (development)
               build-time: Sep/05/2019 15:08:48

[admin@MikroTik] /disk> format-drive file-system=
ext3  fat32
i guess not.
by doneware
Fri Sep 06, 2019 12:04 pm
Forum: RouterBOARD hardware
Topic: LoRaWAN support
Replies: 53
Views: 10101

Re: LoRaWAN support

+1! do you have a release date yet?
i just talked to the local distributor in hungary, they already received the price list that includes lora stuff:

R11e-LoRa8
wAP2ND+R11e-LoRa8
and an ~1m long tuned omni antenna for lora

this tells me that availability is pretty much imminent
by doneware
Wed Sep 04, 2019 11:59 pm
Forum: Wireless Networking
Topic: LHG 60 clone from ubiquti
Replies: 13
Views: 2062

Re: LHG 60 clone from ubiquti

having 1GHz channel width reduces the available bandwidth greatly. and it is also not compliant to the original WiGiG standard. so it is a vendor lock for sure. there's a reason why 60GHz gear is so low-power: with this amount of wireless spectrum available in a single channel you don't need no comp...
by doneware
Thu Aug 22, 2019 11:27 pm
Forum: Wireless Networking
Topic: Telekom (D) Hybrid access
Replies: 1
Views: 324

Re: Telekom (D) Hybrid access

the stuff they do is huawei proprietary. it is dome with modified GRE tunnels, and there's a device called HAAP that is merging the two halves together. in most cases the traffic uses the LTE link as the idea of this hybrid access came from the fixed access folks who wanted to work around shitty cop...
by doneware
Thu Aug 22, 2019 11:18 pm
Forum: Wireless Networking
Topic: wireless repeater mode and IPv6 [SOLVED]
Replies: 4
Views: 563

Re: wireless repeater mode and IPv6 [SOLVED]

hi, if your repeater connects to a non-mikrotik AP - so you cannot use 'proper' bridge mode on wifi, but only the pseudo-bridge ones - you can run into problems. ipv6 "L3->L2 address mapping" relies on multicast, unlike ipv4 where ARP uses 'just' broadcast. if wireless frames have enough mac address...
by doneware
Sun Aug 18, 2019 12:41 am
Forum: Wireless Networking
Topic: RBLHGG-60adkit in the mountains
Replies: 6
Views: 837

Re: RBLHGG-60adkit in the mountains

try to use channel 5 (freq 66.96) as this is the closest to the e-band supported by RouterOS - if you are allowed to use it. most countries in eu only allow the lower 4 channels. here the attenuation of O2 will be less noticeable in this frequency range and you can get longer links up. and get a sol...
by doneware
Mon Aug 05, 2019 9:08 pm
Forum: Wireless Networking
Topic: 60G Wireless Wire
Replies: 1
Views: 378

Re: 60G Wireless Wire

plz clarify: wireless wire or wireless wire dish?
by doneware
Wed Jul 31, 2019 8:48 am
Forum: Wireless Networking
Topic: WAP 60GX3 Mesh Network support?
Replies: 2
Views: 469

Re: WAP 60GX3 Mesh Network support?

so far only ap-sta and bridge-sta links are supported. once the first terragraph phy compatible units come out - you will have support for arbitrary ap-ap links and therefore a true mess will be possible. until then you need to manually configure your devices as ap or station, and sometimes place mo...
by doneware
Fri Jul 26, 2019 6:47 pm
Forum: Wireless Networking
Topic: Connecting ASUS ROG phone to WAP60G
Replies: 4
Views: 541

Re: Connecting ASUS ROG phone to WAP60G

Thanks for the reply. Any plans/timeline to officially update ROS to support non-mikrotik devices? https://blog.mikrotik.com/announcements/mikrotik-accelerates-the-adoption-of-60-ghz-technologies-with-terragraph.html but this might not address your issue as vanilla WiGig is not compatible with Terr...
by doneware
Wed Jul 17, 2019 6:46 pm
Forum: General
Topic: PPP-BCP Bridge IP addressing [solved] DHCP clients don't activate over VPN
Replies: 8
Views: 895

Re: DHCP clients don't activate over VPN

I am afraid this is a misconception. If you use BCP in PPP connections, it doesn't switch the tunnel over from L3 mode to L2 one. It creates an L2 tunnel in addition to the basic L3 one, which is totally independent from it. So the IP address indicated in secret or profile is assigned to the L3 int...
by doneware
Wed Jul 17, 2019 4:30 pm
Forum: General
Topic: PPP-BCP Bridge IP addressing [solved] DHCP clients don't activate over VPN
Replies: 8
Views: 895

Re: DHCP clients don't activate over VPN

the problem is with the ppp profile definition: /ppp profile add bridge=hangmaffia_vpn_bridge comment=SITE-TO-SITE-Layer2-VPN local-address=10.11.0.1 name=hangmaffia_vpn if you do BCP, you may not have _any_ IP address configured on any PPP interfaces. so if you want to have IP addresses, just stick...
by doneware
Wed Jul 10, 2019 1:24 pm
Forum: RouterBOARD hardware
Topic: PowerBox pro cannot upgrade from 44.2 to 45.1
Replies: 7
Views: 829

Re: PowerBox pro cannot upgrade from 44.2 to 45.1

strange, mine did work well, albeit it was an upgrade from 44.3 to 45.1 also included flash usage to see how much free space you usually ought to have with a clean setup. this one has almost literally no config in it: /interface bridge add name=bridge1 protocol-mode=none /interface ethernet set [ fi...
by doneware
Wed Jul 10, 2019 12:40 am
Forum: Announcements
Topic: Winbox v3.19 released!
Replies: 33
Views: 7097

Re: Winbox v3.19 released!

when speaking of native winbox for unices, i might opt for native netinstall instead of winbox.
it mustn't even be GUI based, in fact i'd prefer a scriptable version :-)
by doneware
Mon Jul 08, 2019 3:14 pm
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 107
Views: 39620

Re: v6.46beta [testing] is released!

not strictly a [testing] topic, but the routerboot changelog looks kinda deserted: https://wiki.mikrotik.com/wiki/RouterBOOT_changelog now since 6.3-something the routerboot numbering is according to routerOS releases, its version keep on increasing, and we (or I) don't know what has been changed, e...
by doneware
Sat Jul 06, 2019 12:19 am
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 107
Views: 39620

Re: v6.46beta [testing] is released!

CEPT has opened from 57 to 71 GHz
sadly CEPT =/= local regulator
by doneware
Sat Jul 06, 2019 12:17 am
Forum: General
Topic: [Feature Request] IPv6 Fasttrack
Replies: 11
Views: 2180

Re: [Feature Request] IPv6 Fasttrack

but ipv6 fastrack is a must.

btw, instead of ds-lite i'd have a nat64 gw :-)
and xlat464 & dns64 resolver in the clients.
by doneware
Sat Jul 06, 2019 12:16 am
Forum: General
Topic: [Feature Request] IPv6 Fasttrack
Replies: 11
Views: 2180

Re: [Feature Request] IPv6 Fasttrack

hAP ac2 (and all new IPQ401x based gear) happily can do up to 1Gbps.
i test this regularly with the on-board speedtest (tool speedtest) command.
by doneware
Mon Jul 01, 2019 3:59 pm
Forum: RouterBOARD hardware
Topic: Difference between LTE products
Replies: 7
Views: 1061

Re: Difference between LTE products

soon a new boy will join the party:

https://fccid.io/TV7R11ELT6L

this is the modem we'll have in the LTE version of audience. this is LTE Cat 6, so will support carrier aggregation.
by doneware
Sun Jun 02, 2019 10:50 pm
Forum: General
Topic: IPv6 transition mechanism
Replies: 71
Views: 5641

Re: IPv6 transition mechanism

The well-know NAT64 prefix is only a choice. I typically suggest to our customers, to use their own prefixes, and use several in different NAT64 servers, for some HA. this is a 'me too' moment. although the 'anycast' NAT64 seems to be more or less ok, it gives you less control. with actual unicast ...
by doneware
Sun Jun 02, 2019 10:44 pm
Forum: General
Topic: IPv6 transition mechanism
Replies: 71
Views: 5641

Re: IPv6 transition mechanism

for me DNS64/NAT64 works as expected. with modern devices, that support DS. Apple, Android, freeware unices, and even Windows 7+. that is enough for most folks. but the old or tiny (literally all the uController based stuff) still relies on IPv4. so XLAT464 implementation would be a must in the CPEs...
by doneware
Fri May 24, 2019 1:04 am
Forum: RouterBOARD hardware
Topic: RBLHGG-60adkit fell from a height of 10 meters
Replies: 3
Views: 561

Re: RBLHGG-60adkit fell from a height of 10 meters

I undressed it and saw it from the inside Everything is fine and there is no break inside solder joints beneath BGA chips can easily break due to shock. i have a wAP-LTE, that was pushed off the table by the customer. now it cannot boot unless i press and hold the soldered RAM onto the board. then ...
by doneware
Thu May 16, 2019 3:27 pm
Forum: Scripting
Topic: MQTT client in routerOS
Replies: 1
Views: 840

MQTT client in routerOS

I created an environment in routerOS, that enables IoT-like (i.e. the server doesn't talk to the router, but the router talks to the server) operation. it works in a reasonable way, but i'd think i'd be better of with a proper MQTT client implementation in the device, that enables subscribing and po...
by doneware
Tue Apr 30, 2019 3:58 pm
Forum: RouterBOARD hardware
Topic: PWR-Line PL7400 - I lived in a lie
Replies: 2
Views: 599

Re: PWR-Line PL7400 - I lived in a lie

it's not necessarily a lie.
you need a certain hw revision of your hap lites/map lites/whatevers with microUSB on them.

the best way to check this out is to upgrade them to 6.44.x+ and if you have an /interface pwr-line entry after the upgrade, you have a compatible one.
by doneware
Wed Apr 24, 2019 11:50 pm
Forum: Scripting
Topic: Getting L2TP Dial Out User
Replies: 3
Views: 342

Re: Getting L2TP Dial Out User

I want to create a function on my dude server, the function should be able to retrieve the string value of the user from the l2tp interface. I don't know if this is possible, can someone please help? i am not 100% sure how you'd do it on the dude, but i can give you the commands inside routeros for...
by doneware
Tue Apr 16, 2019 9:03 pm
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 547
Views: 63866

Re: LHG 60G experience

tx-packet-error-rate: 12% this error rate is way too high. also notice that the AP side uses lower modulation scheme (7 vs 8). most probably you get quite some noise there. i don't know your setup, but it you line up your relays back-to-back, and use the same frequency on both of them, you might ge...
by doneware
Tue Apr 16, 2019 8:19 pm
Forum: Wireless Networking
Topic: wAP 60G experience
Replies: 289
Views: 40424

Re: wAP 60G experience

Why to print this info now? Maybe in the future we 'll have another tx-mode
https://blog.mikrotik.com/announcements ... graph.html
by doneware
Thu Apr 11, 2019 8:15 pm
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 547
Views: 63866

Re: LHG 60G experience

All Mikrotik 60G hardware is so far compatible, so you can mix LHGs and WAPs as you like. But don't expect it to work with other vendors, even if it uses common 802.11ad platform. Everyone is playing on it's own playground, there is no intercompatibility due to customized protocols and different ve...
by doneware
Thu Apr 11, 2019 12:15 am
Forum: RouterBOARD hardware
Topic: MUM Europe 2019: new hardware
Replies: 61
Views: 11979

Re: MUM Europe 2019: new hardware

Does it out POE power on both ports? that'll be my question too. it would be so nice to have poe out on both ports, so you could just have the indoor CPE connected by a single ethernet and hide the wall wart. also, it would bring more straightforward troubleshooting: - if power is connected, both d...
by doneware
Mon Mar 25, 2019 2:10 pm
Forum: RouterBOARD hardware
Topic: LHG 60G rev 2?
Replies: 11
Views: 1349

Re: LHG 60G rev 2?

Hello. There are new r2 versions LHG60 on the market. the image of "old design" is actually a bit different for the LHG60. the LEDs are on the side populated, and there's no DC barrel jack on the PCB. see images from an actual LHG60 i took apart. with regards to the internals (the block diagram on ...
by doneware
Sat Mar 23, 2019 12:32 am
Forum: RouterBOARD hardware
Topic: RouterOS x86 Max Memory
Replies: 9
Views: 4044

Re: RouterOS x86 Max Memory

there’s a way to enable support for more ram. i have an installation with 24GB RAM, and ROS sees it all. there was a 6.3x version rc that enabled switching on 64bit support, and afterwards all subsequent upgrades retained this setting. i am however sure that this is not supported at all. it does run...
by doneware
Fri Mar 22, 2019 5:47 pm
Forum: RouterBOARD hardware
Topic: wAP 60Gx3 AP - anyone already tested it?
Replies: 7
Views: 903

Re: wAP 60Gx3 AP - anyone already tested it?

Wap has 3 Antenna Elements but uses only one Channel, the maximum is 8 Clients not 24. All distances over 150m with WAP to WAP. Or WAP to sXT needs 5 GHz Backup, with LHG with more then 500m, but they need it too. So why in the hell they don’t make it useable? For my business it is impossible to of...
by doneware
Fri Mar 22, 2019 12:19 am
Forum: RouterBOARD hardware
Topic: wAP 60Gx3 AP - anyone already tested it?
Replies: 7
Views: 903

Re: wAP 60Gx3 AP - anyone already tested it?

they are digging their own grave!
sub 6GHz is not always necessary. we have a reasonably big - 145 links in one of the networks - 60GHz routed mesh (with a different equipment) without any 5GHz backup links, without any problems.
by doneware
Thu Mar 21, 2019 8:03 pm
Forum: RouterBOARD hardware
Topic: wAP 60Gx3 AP - anyone already tested it?
Replies: 7
Views: 903

wAP 60Gx3 AP - anyone already tested it?

This thing looks great from the inside. I'm just guessing, but the photos i was able to take in Vienna tell some story. now here's my theory: It is very likely this box is built around QCA6335 baseband, which has support 8 (!) phased array antennas. if you look closely, you can see the unpopulated p...
by doneware
Thu Mar 21, 2019 7:42 pm
Forum: RouterBOARD hardware
Topic: LoRaWAN support
Replies: 53
Views: 10101

Re: LoRaWAN support

Can be integrated in any RouterBOARD product with mPCIe slot that has USB support. For example LTAP mini, M11, M33 and others. Requires LoRa package installation. to me, the M33 and LTAP (not mini) integration makes the most sense, because i can add LTE uplink (but might be that 2G is more than eno...
by doneware
Wed Mar 06, 2019 12:19 pm
Forum: Announcements
Topic: MikroTik News June 2018 (Issue #83)
Replies: 44
Views: 13698

Re: MikroTik News June 2018 (Issue #83)

- new, improved SXT LTE kit with two Ethernet ports Same price but ....inferior....:( Yes, hope MT stops recycling those old modems, and give us some LTE product with LTE 6+ category maybe this will make your day https://fccid.io/TV711ELTE6 no visible specs so far, but the 6 at the end looks promis...
by doneware
Thu Feb 21, 2019 12:08 am
Forum: RouterBOARD hardware
Topic: LTAP is here?
Replies: 2
Views: 582

LTAP is here?

Just spotted on fcc.io a new model: RBLtAP-2HnD

this must be the long awaited LTAP, the big brother of LTAP mini - wondering what it packs for CPU... i'd love to see an arm or mmips based one. reason: hw crypto.
by doneware
Thu Jan 31, 2019 8:53 pm
Forum: Announcements
Topic: February Newsletter #87
Replies: 65
Views: 14532

Re: January Newsletter #87

Whats about smaller Channels?
you can be OK with this channel mapping. you can have the 100Mbps clients run the same high MCS, and ultimately serve more safely and do buffering on the FE part. i'm more interested in TDD - cause this is the key to boost client numbers.
by doneware
Thu Jan 31, 2019 8:51 pm
Forum: Announcements
Topic: February Newsletter #87
Replies: 65
Views: 14532

Re: January Newsletter #87

channel capacity is so much higher than what we can use currently. let's be easy with that. if you can't have more than MCS9 (SC), then 1Gbps is just ok. .11ad doesn't have channel bonding, so in general you couldn't use the available extra juice anyway. .11ad has at least channel bonding, they sai...
by doneware
Thu Jan 31, 2019 8:39 pm
Forum: Announcements
Topic: February Newsletter #87
Replies: 65
Views: 14532

Re: January Newsletter #87

chipset limit is 8 there was a press announcement from Qualcomm and Mikrotik back in october around the 17th or so, emphasising Qualcomm's upcoming QCA64x8 and QCA64x1 chipsets, promising .11ay. https://www.qualcomm.com/news/releases/2018/10/16/qualcomm-dramatically-extends-wi-fi-experiences-5g-era...
by doneware
Sun Jan 13, 2019 3:23 am
Forum: RouterBOARD hardware
Topic: Router that does not sound like a Jet Engine for Home 10G Internet?
Replies: 7
Views: 1206

Re: Router that does not sound like a Jet Engine for Home 10G Internet?

the 4011 doesn’t have 2 sfp+ ports, but you can squeeze out way more than 1gbps. and it has no fans. there is one thing i don’t quite understand: 10Gbps internet connnectivity for home? this is quite an overkill square! but let’s assume you need this bw, but why’d you place the router into your livi...
by doneware
Sun Jan 13, 2019 3:16 am
Forum: RouterBOARD hardware
Topic: EU and approvment of LHG 60? [SOLVED]
Replies: 8
Views: 1728

Re: EU and approvment of LHG 60? [SOLVED]

the EU doesn’t certify anything. the just pass the laws, and the technology working groups create documents describing the requirements the device mst comply. testing is usually done by the vendor or an independent lab. then you put together the documentation with the results. but each country in th...
by doneware
Thu Jan 10, 2019 2:17 pm
Forum: RouterBOARD hardware
Topic: looking for dual wan router [SOLVED]
Replies: 9
Views: 1087

Re: looking for dual wan router [SOLVED]

in general you don't have specificly LAN or WAN ports in routeros. those are just ports, and they act as you configure them. you can have all ports as wan if you wish so. with regards if throughput: you can get 1Gbps pppoe+routing+nat with hex, hex-s, hap ac, hap ac2, 4011 and anything of the ccr se...
by doneware
Thu Jan 10, 2019 2:06 pm
Forum: RouterBOARD hardware
Topic: Huawei MA5671A SFP ONT won't fit in CRS317 or CRS328
Replies: 2
Views: 517

Re: Huawei MA5671A SFP ONT won't fit in CRS317 or CRS328

Ok, so I managed to get the SFP to work. Turns out, you need to force it to 1000M by turning off auto negotiation. Furthermore, you need to power down the CRS, plug in the SFP, and then power up the CRS. It might take a few power down/up cycles, but eventually, the CRS will bring the SFP up and it ...
by doneware
Mon Jan 07, 2019 9:32 pm
Forum: RouterBOARD hardware
Topic: LtAP WiFI
Replies: 1
Views: 336

Re: LtAP WiFI

If so, it it possible to remove the supplied 1.5dBi antennas and upgrade them to something more substantial? i added external LTE antennas a while ago to one. there is a good pdf describing the process with some internal pictures on mikrotik's hw section https://i.mt.lv/cdn/rb_files/Ltap_guide-1807...
by doneware
Mon Jan 07, 2019 7:10 pm
Forum: RouterBOARD hardware
Topic: HOW TO GET SIM CARD NUMBER
Replies: 6
Views: 1607

Re: HOW TO GET SIM CARD NUMBER

subscriber-number: +CME ERROR: 100
btw, this translates to:

CME ERROR: 100 Unknown error

source: CME ERROR (GSM Equipment Related errors) - https://www.micromedia-int.com/en/gsm-2 ... ted-errors
by doneware
Mon Jan 07, 2019 7:08 pm
Forum: RouterBOARD hardware
Topic: HOW TO GET SIM CARD NUMBER
Replies: 6
Views: 1607

Re: HOW TO GET SIM CARD NUMBER

/interface lte info 0 once the look for the uicc device info: RouterBOARD wAP R-2nD, 6.42.9 (long-term) as per experience, uicc is only available in 6.43+ Need to get a phone number if you're looking for MSISDN (i.e. the number you dial), as far as i know you can't. you can query the IMSI, which co...
by doneware
Mon Dec 31, 2018 10:41 pm
Forum: Wireless Networking
Topic: Does Mikrotik LTE supports IPV6?
Replies: 4
Views: 651

Re: Does Mikrotik LTE supports IPV6?

and usually the same filtering applies as with IPv4 on the MNO side: you can not reach the endpoint over ipv6 if the device just connects to the internet via the mobile operators. they just allow sessions that have been initiated by the mobile end device. so in general it’s not just the NAT that sto...
by doneware
Mon Dec 31, 2018 10:35 pm
Forum: Wireless Networking
Topic: Does Mikrotik LTE supports IPV6?
Replies: 4
Views: 651

Re: Does Mikrotik LTE supports IPV6?

and finaly you can get ipv6 address for this device? yes, your MNO must support dual stack or ipv6only access, and the sim card (i.e. your mobile subscription) must be also ipv6/DS enabled on a particular APN you want to connect to. you should know that most (if not every) operator just provide a /...
by doneware
Sun Dec 30, 2018 10:46 am
Forum: Wireless Networking
Topic: Does Mikrotik LTE supports IPV6?
Replies: 4
Views: 651

Re: Does Mikrotik LTE supports IPV6?

yes,
i have both devices (ltap mini, wap lte kit) in operation running 6.43 with dual stack on lte interface.
by doneware
Sun Nov 25, 2018 11:43 pm
Forum: Scripting
Topic: :put and /environ print differences
Replies: 0
Views: 336

:put and /environ print differences

consider the following code: admin@mfx-XXXXXXXXXXX] /system gps> :global ttt [/interface bridge host print detail as-value where bridge=bridge1 ] it produces this variable data: [admin@mfx-XXXXXXXXXXX] /system gps> :put $ttt .id=*23;age=00:00:54;bridge=bridge1;comment=;interface=*7;mac-address=00:00...
by doneware
Tue Oct 09, 2018 6:40 pm
Forum: RouterBOARD hardware
Topic: RBM33G not recognizing LTE cards
Replies: 2
Views: 636

Re: RBM33G not recognizing LTE cards

those cards are essentially USB devices. your wi-fi is a PCIe device.

check under /system routerboard usb what is set as type. it shall be mini-PCIe

[admin@router] /system routerboard usb> set type=
USB-type-A mini-PCIe

this is just a wild guess, i faced similar issue with a basebox :-)
by doneware
Sat Oct 06, 2018 3:48 pm
Forum: RouterBOARD hardware
Topic: RB4011 - Poll - ONE thing you'd change
Replies: 15
Views: 4177

Re: RB4011 - Poll - ONE thing you'd change

i don't understand the outrage about the switch chip functional. with the recent (6.41) bridge changes you can easily do whatever you require on these "more router-ish" devices. stuff will be done in hw, whenever it is possible, and here we have a quite beefy CPU to deal with. yes, it would give mor...
by doneware
Sat Oct 06, 2018 3:18 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70615

Re: RB4011

I'm desperately looking for one with WiFi in Europe
this is a non-wifi unit. i was also told that wireless ones are almost impossible to come by for now.
by doneware
Sat Oct 06, 2018 2:15 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70615

Re: RB4011

sorry for the delay, i have a bunch of other things to focus on. but here's something many were curious about. yes, it does work with DAC cables.
dac4011.png
by doneware
Wed Oct 03, 2018 11:40 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70615

Re: RB4011

just tested a 4011 - i paired it up with a CCR1009-8G-1S-1S+ using GE only. with regards to its single-core CPU performance, i'd say it is at par with the 1.2GHz tilera core, or i might say it is superior just a tiny little bit. i tested it for a project where we use a cr*pload of tunnel/encapsulati...
by doneware
Mon Oct 01, 2018 10:38 pm
Forum: General
Topic: Useless Syslog messages
Replies: 8
Views: 1646

Re: Useless Syslog messages

I do not see any security problem with this
ok, what abouth the command

/user set admin password=dragon

or doing the same for your bgp passwords, ipsec secrets, etc
by doneware
Mon Oct 01, 2018 2:22 pm
Forum: General
Topic: Useless Syslog messages
Replies: 8
Views: 1646

Re: Useless Syslog messages

but yeah, at lest the object name in question could be included in the message.
i asked the same with system history
by doneware
Mon Oct 01, 2018 2:21 pm
Forum: General
Topic: Useless Syslog messages
Replies: 8
Views: 1646

Re: Useless Syslog messages

sadly logging a complete command could ezpose sensitive information to
- all cli/winboz users
- anyone who has access to the syslog server
- anyone who can intervept the traffic between the router and the syslog server, as syslog communication is not encrypted
by doneware
Tue Sep 18, 2018 6:05 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 84074

Re: v6.44beta [testing] is released!

Without an example we can not comment why you are not being able to import .rsc file. in case of big export files you can run into situations, when the next command is just not accepted. like you add an object as nameA, then try to set something on the same object by its name, and CLI responds as "...
by doneware
Tue Sep 18, 2018 5:57 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 84074

Re: v6.44beta [testing] is released!

Why can't device-specific stuff like MAC-addresses simply be removed from the backup files? i'd like to have something like '/sys backup load name="filename.backup" password="dragon" keep-mac-addresses=yes or an ability to auto-run commands upon successful restore (like a cli command to restore ori...
by doneware
Tue Sep 18, 2018 5:53 pm
Forum: General
Topic: New IP cloud is coming.
Replies: 84
Views: 27027

Re: New IP cloud is coming.

yes, 1 file slot per router and it is free for all the platforms that can use IP Cloud will there maybe an API we could use to interact with the backup file? my aim is to have a "remote controlled" set of CPEs... i make changes to the "cloud-twin" and it is (pulled) "replicated" to the physical one...
by doneware
Fri Sep 07, 2018 11:12 pm
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208051

Re: Feature requests

Just ran into this issue today.
opened a support request for it earlier today:

Ticket#2018090722004616
by doneware
Wed Aug 29, 2018 1:00 am
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208051

Re: Feature requests

rfc 6286 - AS-wide Unique BGP Identifier for BGP-4 support for routerOS BGP. it relaxes some strict definitions: routerid can be now an arbitrary 32 bit unsigned integer, while the older definition restricts it to "valid unicast address". this breaks BGP compatibility with mikrotik devices right now...
by doneware
Thu Aug 23, 2018 12:59 am
Forum: RouterBOARD hardware
Topic: Mikrotik RS485 support?
Replies: 5
Views: 2558

Re: Mikrotik RS485 support?

you can use these: https://www.ebay.com/itm/222636570847 it uses prolific PL2303 usb to serial chip, which is supported by RouterOS. then you just use routeros' built in rfc2217 serial over tcp feature described here: https://wiki.mikrotik.com/wiki/Serial_Port_Usage#Accessing_a_serial_device_as_if_i...
by doneware
Sat Aug 18, 2018 7:54 pm
Forum: RouterBOARD hardware
Topic: When will be RB3011UiAS-2HnD-IN available?
Replies: 65
Views: 19965

Re: When will be RB3011UiAS-2HnD-IN available?

I don't understand this step about 4011, since fccid made it public - many resourses already made review, publish photos and some tech specs, based on photo and fccid leaks. It's not secret anymore. Mikrotik requested specific parts (schematics, operation description, block diagram) to remain confi...
by doneware
Fri Aug 17, 2018 10:58 pm
Forum: RouterBOARD hardware
Topic: When will be RB3011UiAS-2HnD-IN available?
Replies: 65
Views: 19965

Re: When will be RB3011UiAS-2HnD-IN available?

4x4 5GHz + 2x2 2Ghz
by doneware
Fri Aug 03, 2018 3:56 pm
Forum: General
Topic: feature request: expose variables to netwatch scripts
Replies: 7
Views: 1129

Re: feature request: expose variables to netwatch scripts

You could use Splunk/syslog for some of these. Then you could make a graphical dashboard showing you when link goes up/down. If Syslog server is on Lan side, you get bot up and down message. If Syslog are on the Wan side and you monitoring Wan side, it will only show when it goes up. i don't want t...
by doneware
Fri Jul 27, 2018 8:03 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]
Replies: 12
Views: 2755

Re: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]

mikrotik its aware of CDWM importance CWDM-MIKROTIK.jpg well, you can also use OADMs, and just a single optical cable, so you can drop/add wavelengths on each pop. that is the fiber topology will be just a line or a ring, but you can have each node (or more) connected as star or dual-star logical t...
by doneware
Fri Jul 27, 2018 7:58 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]
Replies: 12
Views: 2755

Re: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]

The FS.com 1310's are listed as working on the wiki page, so I can't see why the CWDM versions of those wouldn't also work. there would have been issues prior 6.31 to be honest. normal (gray) SFPs have different unit code than C/DWDM ones. so mikrotik devices couldn't even detect them. https://www....
by doneware
Fri Jul 27, 2018 7:48 pm
Forum: Scripting
Topic: PPOE Ip Script
Replies: 2
Views: 490

Re: PPOE Ip Script

the internal ip starts with 100.x.x.x . The external usualy are 78.x.x.x or 5.x.x.x you should create a ppp profile unique for this service, and use its "on-up" attribute to trigger your script. and the script should be something like this: :local pppoe "<insert the name of your pppoe client here>"...
by doneware
Thu Jul 26, 2018 1:25 pm
Forum: General
Topic: BGP multithreaded
Replies: 17
Views: 4888

Re: BGP multithreaded

True, but it is still good practice to do anti-spoofing filtering on a border router in terms of bogons, you can just blackhole them automatically via BGP. and it shall not affect fastpath. http://www.team-cymru.com/bgp-examples.html#mikrotik-trad http://www.team-cymru.com/bgp-examples.html#mikroti...
by doneware
Tue Jul 24, 2018 5:25 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD naming
Replies: 47
Views: 24545

Re: RouterBOARD naming

We have updated the manual with some more letters -<n>G+ number of 2.5G Ethernet ports -<n>P+ number of 2.5G Ethernet ports with PoE-out -<n>C+ number of combo 10G Ethernet/SFP+ ports -<n>S+ number of 10G SFP+ ports -<n>XG number of 5G/10G Ethernet ports -<n>XP number of 5G/10G Ethernet ports with ...
by doneware
Tue Jul 24, 2018 5:19 pm
Forum: General
Topic: IPv6 (BIG FEATURE REQUEST)
Replies: 2
Views: 656

Re: IPv6 (BIG FEATURE REQUEST)

BGP IPv6 With 2 Mikrotiks unusable, eventually it just sends the link local address instead of the actual address for next hop.
OPSFv3 Broken with similar issues.
can you please share some specifics? i have working ipv6 AFI BGPs in multivendor environment with mikrotik [almost] w/o any issues.
by doneware
Tue Jul 24, 2018 9:51 am
Forum: General
Topic: Feature request: MLPPP server
Replies: 30
Views: 7514

Re: Feature request: MLPPP server

YMMV, but we usually prefer per packet load-sharing it varies. Per packet load sharing will restrict your RTT to the worst value among your available paths/links, that severly limits tcp performance in an unpredictable way. instead, per destination/flow sharing will limit the throughput of your flo...
by doneware
Tue Jul 24, 2018 9:39 am
Forum: General
Topic: Feature request: MLPPP server
Replies: 30
Views: 7514

Re: Feature request: MLPPP server

if MLPPP is so minor then cisco and juniper should abandoned that function.
trust me, there’s no mlppp support on ios-xr and it’s not even planned. indeed it would be nice to have it
by doneware
Mon Jul 23, 2018 10:21 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 113454

Re: v6.43rc [release candidate] is released!

Little bit better but the issue still present
can you show some results? i was experiencing performance varying between 250-430Mbps using SXTsq ACs with early 6.43rc builds even under excellent conditions.
by doneware
Fri Jul 20, 2018 3:12 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]
Replies: 12
Views: 2755

Re: CRS317-1G-16S+RM: CWDM/DWDM SFP+ optics? [SOLVED]

i have DWDM ER SFP+ working in there, but it also works with DWDM ZR optics: [me@myswitch] /interface ethernet> monitor 16 once name: sfp-sfpplus16 status: link-ok auto-negotiation: done rate: 10Gbps full-duplex: yes tx-flow-control: no rx-flow-control: no advertising: link-partner-advertising: sfp-...
by doneware
Fri Jul 20, 2018 12:48 pm
Forum: General
Topic: EoIP with DDNS [SOLVED]
Replies: 5
Views: 1119

Re: EoIP with DDNS [SOLVED]

i have it running with eoipv6 on large scale with 10s of tunnes.
both ends use FQDN to resolve the other party's address.

keep in mind though, that EoIP is session-less/stateless, and cannot traverse NAT w/o specific rules (requires 1:1 mapping), unlike L2TP over UDP. or SSTP.
by doneware
Tue Jul 17, 2018 12:51 pm
Forum: Scripting
Topic: Script for Tunnel
Replies: 2
Views: 465

Re: Script for Tunnel

what is the type of the tunnel? but anyway, you can use keepalives to make sure, the tunnel is actually transmitting traffic, and it will then go "down" if it doesn't. like keepalive=10s,4 - that means keepalive message is sent every 10seconds, and after 4 consecutive misses the tunnel is declared t...
by doneware
Mon Jul 16, 2018 4:54 pm
Forum: Scripting
Topic: I defined the variable... but the function doesn't process it.
Replies: 10
Views: 700

Re: I defined the variable... but the function doesn't process it.

MRZ. Yes... it's a string. And the line is not processing it. It's value is supposed to be placed inline where V1 is and it is not processed as such. So what is supposed to be there to make that work? now i see what you're getting to. try this way [me@router] > :global V1 [parse ":if (($timetest>09...
by doneware
Mon Jul 16, 2018 4:37 pm
Forum: Scripting
Topic: Sending output of script commands to syslog
Replies: 6
Views: 992

Re: Sending output of script commands to syslog

My question is: How to send output from a script to syslog? Example: I would like a script to show the dynamic nat and send that to my external syslog server. /ip firewall nat print dynamic try this: :log info message=[/ip firewall nat print dynamic as-value ] it will log the rules line-by-line in ...
by doneware
Mon Jul 16, 2018 1:07 am
Forum: RouterBOARD hardware
Topic: CRS354-48P-4S+2Q+ Dimensions
Replies: 5
Views: 1817

Re: CRS354-48P-4S+2Q+ Dimensions

don't know the exact dimensions., i just had one in my hands in berlin MUM. it is at least as deep as the ccr1072 and very heavy. heavier than the 1072. i wasn't able to find a photo of it, just one of its non-poe counterpart, just to get an impression - it is maybe additional 10-12cm longer. as i r...
by doneware
Sat Jul 14, 2018 5:21 pm
Forum: Scripting
Topic: Possible bug with global variables
Replies: 26
Views: 5872

Re: Possible bug with global variables

It is defined in my script.
can you post your script?
by doneware
Sat Jul 14, 2018 5:19 pm
Forum: General
Topic: IPv6 - by default
Replies: 7
Views: 1361

Re: IPv6 - by default

If you take a look at Google's IPv6 data , you will realize that IPv6 adoption in Latvia is negligible. Guess that's one of the reasons for its current state in RouterOS. last time i talked to Mikrotik employees, they said that they have almost no presence in the government network of Latvia. i was...
by doneware
Sat Jul 14, 2018 4:47 pm
Forum: Scripting
Topic: Possible bug with global variables
Replies: 26
Views: 5872

Re: Possible bug with global variables

I have a global variable that is a function. I need to pull the function into my script. ($timetest>09:00:00)and($timetest<17:00:00) global variables are not accessible inside the scripts you run by scheduler, unless you explicitly declare them as ":global VariableName;" somewhere in the topmost se...
by doneware
Sat Jul 14, 2018 3:05 pm
Forum: Scripting
Topic: Useful scripts
Replies: 52
Views: 92068

proper BGP peer logging

If you need cisco/juniper like bgp peer logging you might find this script handy. tested on routeros 6.42.5, but in general shall work in all v6 releases. it will generate logs with severity=info if the peer state advances from disabled towards enstablished, and it will log "errors" as it decreases,...
by doneware
Sat Jul 14, 2018 2:32 pm
Forum: Scripting
Topic: BGP Peer state
Replies: 3
Views: 638

Re: BGP Peer state

you should start your script the following way: {:global CYMRUSTATE; if .... } you always need to declare that a variable is global in the script, even if it exists. otherwise you can't reference it. your code defined CYMRUSTATE in an IF condition. so whenever the condition was fulfilled, you had th...
by doneware
Thu Jul 12, 2018 10:19 pm
Forum: Scripting
Topic: verbose=yes redirection
Replies: 0
Views: 305

verbose=yes redirection

please give us the possibility to redirect verbose script execution output to file. maybe it would be also ok if you could have the same functionality what you get using auto_xxxx.rsc and auto_xxxx.out can't we just have this for ordinary scripts? i don't even mind having this as extra statement, in...
by doneware
Thu Jul 12, 2018 10:08 pm
Forum: Scripting
Topic: /system default-configuration
Replies: 5
Views: 866

Re: /system default-configuration

It will not be configurable from RouterOS Hi Mrz, is there any logical explanation to that? in the future we might show configuration applied by netinstall there, but at the moment it will always show factory default configuration. look, if you are into some advanced router configuration in some au...
by doneware
Thu Jul 12, 2018 7:48 pm
Forum: Scripting
Topic: /system default-configuration
Replies: 5
Views: 866

/system default-configuration

can we get read/write access to this thing from routeros?

right now it is not even read-only, since if i update it, it still shows the "default routeros" script.
by doneware
Thu Jul 12, 2018 7:38 pm
Forum: Scripting
Topic: Built in function library
Replies: 55
Views: 13825

Re: Built in function library

JSON encoder
regexp (PCRE) string manipulation
by doneware
Wed Jul 11, 2018 6:26 pm
Forum: General
Topic: Feature request - date format with dashes
Replies: 2
Views: 1259

Re: Feature request - date format with dashes

if i may insert something related about time formatting: [me@router] /system resource> :put [/system resource get uptime ] 1d08:45:37 whereas with the same router [me@router] /system resource> /system resource print uptime: 1d8h45m43s version: 6.42.5 (stable) ok, no big deal, i can parse it both way...
by doneware
Wed Jul 11, 2018 1:57 am
Forum: General
Topic: IPv6 - by default
Replies: 7
Views: 1361

Re: IPv6 - by default

What's wrong with Wine?
well, windows. bloated, insecure, PITA when it comes to remote access, no proper scripting (i know there's powershell) stupid gui apps with no means of automation.
by doneware
Tue Jul 10, 2018 12:34 am
Forum: General
Topic: LHG 60 project in Hawaii
Replies: 99
Views: 20585

Re: LHG 60 project in Hawaii

There is definitive a need for 5GHz Backup. The weather is getting more problematic these days. We had 2 hard rains the last 10 days which even brought our 18GHz licensed links over it's limits (>30db attenuation) which have a big margin calculated. But backups have to take over very fast as the ra...
by doneware
Mon Jul 09, 2018 7:56 pm
Forum: General
Topic: IPv6 - by default
Replies: 7
Views: 1361

IPv6 - by default

can we have the ipv6 package _enabled_ by default? even if i netinstall the bundle i have to enable it manually. to be honest, using link local addresses and ssh i can do a pretty scalable initial installation rig that doesn't require me running windows (to be able to flashfig). windows is the only ...
by doneware
Mon Jul 09, 2018 7:52 pm
Forum: General
Topic: Default config
Replies: 2
Views: 502

Re: Default config

Have you tried flashfig? how about making "default-configuration" flashfig-able? this is my biggest painpoint. it doesn't matter what you have in your devices (i agree, flashfig is easier & faster than manually doing the stuff - but as far as i know it is limited to 4k config size), but if someone ...
by doneware
Sun Jul 08, 2018 5:06 pm
Forum: General
Topic: EoIP vs EoIPv6
Replies: 0
Views: 249

EoIP vs EoIPv6

does anyone have any plausible explanation why i'm limited to pick tunnel-id out of 12bits (0-4095) with EoIPv6, whereas EoIP offers me 16bits (0-65535)?
by doneware
Thu Jul 05, 2018 1:25 am
Forum: RouterBOARD hardware
Topic: IEEE 802.11ac (wave 2)
Replies: 14
Views: 4821

Re: IEEE 802.11ac (wave 2)

wave 2 work in the new RouterOS update?
IPQ4018/4019 in the new arm devices (sxtsq, hap ac2, disc lite 5ac) is wave2.
support for 160MHz channel and 80+80mhz is there.
by doneware
Tue Jul 03, 2018 10:20 pm
Forum: General
Topic: Feature request: expose received DHCP options to script
Replies: 0
Views: 345

Feature request: expose received DHCP options to script

since 6.39rc33 we have the possibility to run scripts upon DHCP client acquires/releases an address, and certain local variables get populated with actual values. it would be nice to have all received options inserted into individual variables, like $option43 or as an associative array, where the ar...
by doneware
Tue Jul 03, 2018 3:47 pm
Forum: General
Topic: New IP cloud is coming.
Replies: 84
Views: 27027

Re: New IP cloud is coming.

there we are: 6.43rc40

Other changes in this release:

!) cloud - added support for licensed CHR instances (including trial);
by doneware
Tue Jun 26, 2018 11:55 pm
Forum: General
Topic: Feature Request: IPv6 stateful LinkLocal Addresses
Replies: 14
Views: 2175

Re: Feature Request: IPv6 stateful LinkLocal Addresses

The ability to manually specify the Link-local address can make other things easy than just a consistent default GW on all network access segments. well, you can still specify addresses if you want, as you're not limited to have just one or two addresses on the link. but ipv6 is about autoconfigura...
by doneware
Tue Jun 26, 2018 11:41 pm
Forum: General
Topic: Feature Request: IPv6 stateful LinkLocal Addresses
Replies: 14
Views: 2175

Re: Feature Request: IPv6 stateful LinkLocal Addresses

This is the most frustrating side effect of not being able to manually configure link local addresses, preventing us from deploying IPv6 to a site entirely. nope. in this case - for example GRE - routeros just takes the remote IP address in hexadecimal format, and generates link local addresses by ...
by doneware
Tue Jun 26, 2018 11:34 pm
Forum: General
Topic: Feature Request : iperf3 server port number
Replies: 4
Views: 1346

Re: Feature Request : iperf3 server port number

Iperf is not implemented.
It would be nice to have an iperf3 compatible bandwidth test tool and the ability to specify the port number for it.

there i fixed it :-)
by doneware
Mon Jun 25, 2018 10:56 pm
Forum: General
Topic: Feature request: Add script as system logging action
Replies: 2
Views: 1034

Re: Feature request: Add script as system logging action

As the script parameter can be set some variable containing the id of the row in the log. what if it would contain the whole log message in a variable (e.g. $logmessage) and also some others, like - $logseverity: debug..crit - $logtopic: array of all corresponding topics/subsystems i suppose timest...
by doneware
Thu Jun 21, 2018 2:52 pm
Forum: General
Topic: Feature Request: IPv6 stateful LinkLocal Addresses
Replies: 14
Views: 2175

Re: Feature Request: IPv6 stateful LinkLocal Addresses

if it is about "default router" on servers, you can just use the subnet router anycast address. e.g. xxxx::0
by doneware
Fri Jun 15, 2018 8:21 pm
Forum: General
Topic: proper return values from /ping as-value
Replies: 0
Views: 398

proper return values from /ping as-value

all we have right now in the number of successful responses received w/o any indication. [me@router] > :put [ping 8.8.8.8 count=3] SEQ HOST SIZE TTL TIME STATUS 0 8.8.8.8 56 57 9ms 1 8.8.8.8 56 57 10ms 2 8.8.8.8 56 57 8ms sent=3 received=3 packet-loss=0% min-rtt=8ms avg-rtt=9ms max-rtt=10ms 3 can we...
by doneware
Fri Jun 15, 2018 8:17 pm
Forum: General
Topic: feature request: expose variables to netwatch scripts
Replies: 7
Views: 1129

Re: feature request: expose variables to netwatch scripts

like /ping and /tool fetch etc to monitor. This allows you to set thresholds and also solves the problem you have with netwatch. /ping is also a nice stuff to have, but currently it is lacking some serious functionality. it should be able to return at least the same output when run "as-value" as no...
by doneware
Fri Jun 15, 2018 8:13 pm
Forum: General
Topic: feature request: expose variables to netwatch scripts
Replies: 7
Views: 1129

Re: feature request: expose variables to netwatch scripts

Not only is it limited by the recent changes to scripting policy, but also it has always had the problem that a single missed ping indicates a "down" condition. (there is no way to specify a number of missed pings) this is the reason why i asked for this as well: and maybe to add some grace cycles,...
by doneware
Thu Jun 14, 2018 6:48 pm
Forum: General
Topic: feature request: expose variables to netwatch scripts
Replies: 7
Views: 1129

feature request: expose variables to netwatch scripts

it is cool to have scripting hooks in netwatch, like up-/down-script. it would be however much more pleasant to have some variables exposed to the scripts, like host since (this time the timestamp of the last change, not the one that has fired the script) routing-mark (which then implies the usage o...
by doneware
Thu Jun 14, 2018 6:41 pm
Forum: General
Topic: New IP cloud is coming.
Replies: 84
Views: 27027

Re: New IP cloud is coming.

Will we get IPv6 Support? old cloud was v4 only, w/o any theoretic chance for ipv6 support. cy-bear:~ bat$ host cloud.mikrotik.com cloud.mikrotik.com has address 81.198.87.240 but RCs use cloud2... cy-bear:~ bat$ host cloud2.mikrotik.com cloud2.mikrotik.com has address 159.148.147.201 cloud2.mikrot...
by doneware
Wed May 30, 2018 11:08 pm
Forum: RouterBOARD hardware
Topic: SFPONU configuration
Replies: 4
Views: 605

Re: SFPONU configuration

How do I configure the SFPONU device? Is there a way to update ONU parameters there?
you don't. it is configured through the OLT and the GPON management system. only the ethernet side is configurable in routerOS, just as with other ethernet type interfaces.
by doneware
Wed May 30, 2018 10:03 am
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208051

better ping feedback in scripting

can we have at least the summary of the sent/received ping probes returned as values? all we have right now in the number of successful responses received. [me@router] > put [ping 8.8.8.8 count=3] SEQ HOST SIZE TTL TIME STATUS 0 8.8.8.8 56 57 9ms 1 8.8.8.8 56 57 10ms 2 8.8.8.8 56 57 8ms sent=3 recei...
by doneware
Sat May 26, 2018 9:20 am
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM speed problem
Replies: 7
Views: 2186

Re: CRS328-24P-4S+RM speed problem

At nomikrotik devices it works normally.
be my guest
https://www.cisco.com/c/en/us/support/d ... ut-dr.html
by doneware
Sat May 26, 2018 12:51 am
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM speed problem
Replies: 7
Views: 2186

Re: CRS328-24P-4S+RM speed problem

i doubt flow control will fix that. this issue is known as interface oversubscription or speed conversion drop. you fill the outgoing interface’s buffers with bursty traffic. happens if you have 10g ingress and 1g egress connection, or if multiple GE ports receive traffic that must leave on a single...
by doneware
Thu May 24, 2018 11:40 pm
Forum: RouterBOARD hardware
Topic: New : RB760IGS - HEX-S
Replies: 38
Views: 14392

Re: New : RB760IGS - HEX-S

can you show your rack mount adapter?
the indicators are very interesting.
yes, currently i'm travelling but on the weekend i'll take some pictures.
by doneware
Thu May 24, 2018 11:35 pm
Forum: RouterBOARD hardware
Topic: wAP ac not discoverable over ethernet
Replies: 5
Views: 955

Re: wAP ac not discoverable over ethernet

Is this expected behavior?
yes, and it is documented here:
https://wiki.mikrotik.com/wiki/Manual:D ... igurations
by doneware
Thu May 24, 2018 12:20 am
Forum: RouterBOARD hardware
Topic: M33G M.2 Sata Support
Replies: 4
Views: 1152

Re: M33G M.2 Sata Support

provided the boards hardware is capable of that https://www.mediatek.com/products/homeNetworking/mt7621n-a the sheet for the SoC doesn't say it has SATA controller - and for msata (regardless whether mpcie or m.2 for factor) ssds this is a must. pcie ssds can be supported if the mmips train has nvm...
by doneware
Fri May 18, 2018 11:33 pm
Forum: RouterBOARD hardware
Topic: switch-chip in hAP ac^2
Replies: 1
Views: 1205

Re: switch-chip in hAP ac^2

the device identifies itself as Atheros-8327. [admin@tgcpe2] /interface ethernet switch> print detail Flags: I - invalid 0 name="switch1" type=Atheros-8327 mirror-source=none mirror-target=none the QFE8075/2 is just a PHY and it is not part of the SOC. the block diagram you pasted from the qualcomm ...
by doneware
Fri May 18, 2018 11:18 pm
Forum: RouterBOARD hardware
Topic: Woobm with Linux [SOLVED]
Replies: 4
Views: 958

Re: Woobm with Linux [SOLVED]

So i think, woobm waits for Mikrotik's serial prompting on serial (USB) line and only thinks, its connected, if proper prompt received. Is this true? well, no. i just plugged it into my MBA, started screen with 115200 baud rate on the newly discovered USB tty, and was able to connect via TCP/23 and...
by doneware
Fri May 18, 2018 10:55 pm
Forum: RouterBOARD hardware
Topic: Woobm with Linux [SOLVED]
Replies: 4
Views: 958

Re: Woobm with Linux [SOLVED]

woobm is basically a prolific PL2303 usb to TTL serial adaptor glued to an ESP8266 + some local flash.
as far as i know, ssh is not supported at all - which is kind of disappointing.
let me check it what does it do when i plug it into an usb charger :-)
by doneware
Fri May 18, 2018 2:27 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 10585

Re: RB850Gx2 vs RB450Gx4

So according to your sheet the RB450Gx4 should have the possibillity for dualband wifi?
Wonder why mikrotik did'nt put it in.
i guess space constraints. the extra power input jack, the serial console, poe-out, all take up valuable space. and to have wifi you would need some extra circuitry
by doneware
Thu May 17, 2018 9:07 pm
Forum: RouterBOARD hardware
Topic: The new CCR ALL-in-One PoE router of the 2019 line
Replies: 13
Views: 2097

Re: The new CCR ALL-in-One PoE router of the 2019 line

get a router plus a switch well, I found myself a switch: http://us.dlink.com/products/business-solutions/dms-1100-10tp/ Access-Points-700x320.png well, I found myself a switch: How can I connect it to hEX now? hEX does not have a SFP+ port . hEX uses yes. but hex-s now does have one albeit sfp onl...
by doneware
Thu May 17, 2018 7:57 pm
Forum: RouterBOARD hardware
Topic: New : RB760IGS - HEX-S
Replies: 38
Views: 14392

Re: New : RB760IGS - HEX-S

Thanks dude , really didn't know about the USB Serial Adaptor/Console thing.Can it also be used to debug or change router bootup or does it only function after ROS has booted up ? as far as i know it only works if the router has booted up. routeros detects it as serial interface. routerboot is sadl...
by doneware
Thu May 17, 2018 6:52 pm
Forum: RouterBOARD hardware
Topic: The new CCR ALL-in-One PoE router of the 2019 line
Replies: 13
Views: 2097

Re: The new CCR ALL-in-One PoE router of the 2019 line

get a router plus a switch just imagine a small form factor CCR sitting next to a small form factor CRS. like the CCR1009 + a CRS2xx, just to get the feeling. but on the CRS we'd need a bit more ports than 8. mounted side by side to only take up a single RU, and a back-to-back connector on the back...
by doneware
Thu May 17, 2018 6:46 pm
Forum: RouterBOARD hardware
Topic: New : RB760IGS - HEX-S
Replies: 38
Views: 14392

Re: New : RB760IGS - HEX-S

There perhaps any chance we can get USB console ports on these cheaper devices in the future ? I'd prefer a "real" console but space on the actual board must be a real isssue. you can use WOOBM for temporary console access, or just any random USB to serial adaptor (using PL2303 or FT232) and router...
by doneware
Thu May 17, 2018 6:44 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 10585

Re: RB850Gx2 vs RB450Gx4

just to know the difference between IPQ4018 (hap ac2) and IPQ4019 (this baby and wap60G)
Image
by doneware
Thu May 17, 2018 6:42 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 10585

Re: RB850Gx2 vs RB450Gx4

Newer, faster, cheaper, but same size.
can we assume that Mikrotik will ditch the PPC platform altogether?
the RB1100 series is already arm. now the RBx50 as well. the last survivor seems to be the RB800.
by doneware
Thu May 17, 2018 6:38 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 vs RB450Gx4
Replies: 49
Views: 10585

Re: RB850Gx2 vs RB450Gx4

Newer, faster, cheaper, but same size. indeed it's cheaper than the 850Gx2, but compared to the hAP ac2 - which is almost the same - it's more expensive ($99 vs $69) i know it packs faster 1GB RAM instead of 256MB, and has a _lot_ bigger flash and an uSD card slot. and finally af/at poe and poe OUT...
by doneware
Thu May 17, 2018 6:27 pm
Forum: RouterBOARD hardware
Topic: New : RB760IGS - HEX-S
Replies: 38
Views: 14392

Re: New : RB760IGS - HEX-S

How about RM(rackmount) version of Hex? You could use a tray and put a few of those little rascals side by side. ;-) we built a rack-mount kit that accommodates 2 of them and has lights-out to make the link/activity indicators visible even if the devices are tightly stacked on top of each other.
by doneware
Thu May 17, 2018 6:25 pm
Forum: RouterBOARD hardware
Topic: CRS326-24G-2S+RM dual power?
Replies: 2
Views: 504

Re: CRS326-24G-2S+RM dual power?

yes, this is the intended way with all mikrotik platforms. that support both POE-in and DC power in. even the smallest ones. it will prefer the one with higher voltage. so whenever the preferred one's voltage drops to zero, it will use the other one w/o any hassle. there is however a different metho...
by doneware
Wed May 16, 2018 12:30 pm
Forum: General
Topic: Blocking IPv6 through the EoIP tunnel
Replies: 4
Views: 783

Re: Blocking IPv6 through the EoIP tunnel

In the bridge settings, where the EoIP tunnel was added, I successfully blocked DHCPv4 (drop udp on 67-68), but I can not understand how to block the IPv6. what do you want to pass through the tunnel? probably it is easier to block stuff using ethertype filtering. [admin@tgcpe2] /interface bridge f...
by doneware
Wed May 16, 2018 12:59 am
Forum: RouterBOARD hardware
Topic: PC Engines APU3 series issues
Replies: 3
Views: 689

Re: PC Engines APU3 series issues

only the internal USB headers work: [admin@MikroTik] > /sys resource usb print # DEVICE VENDOR NAME SPEED 0 1-0 Linux 3.3.5-smp ehci_hcd EHCI Host Controller 480 1 2-0 Linux 3.3.5-smp ehci_hcd EHCI Host Controller 480 2 1-1 480 3 2-1 480 4 1-1.3 Generic USB EDC 480 [admin@MikroTik] > /disk print # N...
by doneware
Wed May 16, 2018 12:53 am
Forum: RouterBOARD hardware
Topic: PC Engines APU3 series issues
Replies: 3
Views: 689

Re: PC Engines APU3 series issues

OK, finally managed to boot it from SATA. The process was the following: 1. Created a VM in virtualbox with just a CD as mass storage device 2. added the sata drive to it via an USB-to-SATA adapter as USB mass storage device under settings / ports / usb 3. booted the ISO image downloaded from mikrot...
by doneware
Tue May 15, 2018 11:24 pm
Forum: RouterBOARD hardware
Topic: PC Engines APU3 series issues
Replies: 3
Views: 689

Re: PC Engines APU3 series issues

the same happens with routeros installed on a USB stick
by doneware
Tue May 15, 2018 6:45 pm
Forum: RouterBOARD hardware
Topic: PC Engines APU3 series issues
Replies: 3
Views: 689

PC Engines APU3 series issues

did anyone had any success to boot this board with routerOS from an SD card? netinstall cannot produce a bootable SD. if i do the x86 iso boot installation in a VM, and installed RouterOS to the SD card there. it started booting in the APU but hangs soon PCEngines apu3 coreboot build 20170302 2032 M...
by doneware
Tue May 15, 2018 3:47 pm
Forum: RouterBOARD hardware
Topic: 2.5GBASE-T and 5GBASE-T for MIkrotik
Replies: 16
Views: 2461

Re: 2.5GBASE-T and 5GBASE-T for MIkrotik

both cap ac and hap ac2 are wave2 based. qualcomm ipq4018, look’em up it's automatically add wave2 support to RouterOS i guess not. but it already has support for some features, like 160MHz channel bandwidth. something, you did not had before with pre wave2 hw. yes, we can debate about how a 160MHz...
by doneware
Tue May 15, 2018 1:08 pm
Forum: RouterBOARD hardware
Topic: 2.5GBASE-T and 5GBASE-T for MIkrotik
Replies: 16
Views: 2461

Re: 2.5GBASE-T and 5GBASE-T for MIkrotik

Only the 802.11ad will exceed the limit in practice, but even that is not always a bad thing. It is good to allow some room for the error correction etc. i have some radios with modified 802.11ad that claim to be able to deliver ~2.3Gbps - indeed it might be only the radio bandwidth. and most peopl...
by doneware
Fri May 11, 2018 11:53 pm
Forum: RouterBOARD hardware
Topic: 2.5GBASE-T and 5GBASE-T for MIkrotik
Replies: 16
Views: 2461

Re: 2.5GBASE-T and 5GBASE-T for MIkrotik

Maybe because of none Wave 2 Mikrotik products is currently exist, lol.
both cap ac and hap ac2 are wave2 based. qualcomm ipq4018, look’em up
by doneware
Fri May 11, 2018 11:50 pm
Forum: RouterBOARD hardware
Topic: What can be improved in hEX (RB750Gr3)?
Replies: 22
Views: 3720

Re: What can be improved in hEX (RB750Gr3)?

LTE pci-e modem the wwan modems are usb ones, even though they come in mpcie form factor. indeed i like the idea to have an unpopulated mpcie slot with both pcie and usb pins connected. btw, this could be the nextgen rb2011-rm. otoh adding 8 ports and a mpcie slot would result double sized pcb - so...
by doneware
Sat May 05, 2018 1:14 am
Forum: General
Topic: Nice Processor for the next CCR generation :-)
Replies: 9
Views: 2162

Re: Nice Processor for the next CCR generation :-)

They will only need to develop against one switch vendors ABI, and get better purchasing power if they are buying SoC and switch ASIC from the same vendor. i concur. mikrotik has quite a colorful hw architecture right now, and extending it with others will just create more tasks for the dev team. i...
by doneware
Tue May 01, 2018 11:23 pm
Forum: RouterBOARD hardware
Topic: WAP LTE US Kit not seeing SIM
Replies: 6
Views: 1194

Re: WAP LTE US Kit not seeing SIM

sorry for the obvious dumb question.
did you make sure you inserted the sim card properly? it seem to fit either way, but only works in one of the four possible positions.
yes, it happened to me as well.
by doneware
Tue May 01, 2018 12:32 am
Forum: RouterBOARD hardware
Topic: Copper link longer than 100 meters
Replies: 16
Views: 1752

Re: Copper link longer than 100 meters

the marvell phys in the crs3xx series support up to 175m as i recon I read you only today, two days after. Good, ok. Did you hear or read it? I read specs, but I can't find it. https://www.marvell.com/docs/phys-transceivers/assets/marvell-phys-transceivers-alaska-v-88e1680-product-brief-2014-07.pdf...
by doneware
Sun Apr 29, 2018 8:45 pm
Forum: General
Topic: not created tcp-mss rule in mangle
Replies: 3
Views: 1033

Re: not created tcp-mss rule in mangle

if i`m not create rules in mangle - internet not work correctly :( ok, maybe your PPPoE client is configured with the wrong MTU. if you use an ethernet port with MTU set to 1500, your PPPoE client shall have 1492 byte MTU. (PPPoE + PPP header together are 8 bytes) /interface PPPoE-client set 0 mtu=...
by doneware
Sat Apr 28, 2018 11:41 pm
Forum: RouterBOARD hardware
Topic: Copper link longer than 100 meters
Replies: 16
Views: 1752

Re: Copper link longer than 100 meters

the marvell phys in the crs3xx series support up to 175m as i recon
by doneware
Fri Apr 27, 2018 2:30 pm
Forum: RouterBOARD hardware
Topic: How to add a ethernet port to RBM33G (mpcie)
Replies: 8
Views: 1077

Re: How to add a ethernet port to RBM33G (mpcie)

the most el-cheapo single port FE usb dongles out there on ebay just work fine.
they are kind of limited however on throughput.
by doneware
Wed Apr 25, 2018 11:50 pm
Forum: Beginner Basics
Topic: disable local login accounts when radius is reachable and responding
Replies: 4
Views: 1195

Re: disable local login accounts when radius is reachable and responding

you can use a script based workaround, like i did. run this every minute from scheduler. it is quite lame, works only with a single local user and a single RADIUS server. whenever it detects outgoing requests with timeouts/bad replies, it will enable the specified local user. if it responds again, i...
by doneware
Wed Apr 25, 2018 11:35 am
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161611

Re: Advisory: Vulnerability exploiting the Winbox port

my take on remote accessible device management - and some may be behind a "one-way" access medium, like NAT or 3G/4G, where you can't just connect to the device from the outside - is to have a VPS running routeros. and there's no ports exposed there, but only IPSec. so the managed devices shall conn...
by doneware
Tue Apr 24, 2018 11:19 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161611

Re: Advisory: Vulnerability exploiting the Winbox port

another interesting stuff i found while dumping traffic on a router with winbox disabled in ip services but mac-winbox enabled under /tools mac-server mac-winbox on internal interfaces. As it was told, this stuff runs between unicast MAC addresses, but using 0.0.0.0 and 255.255.255.255 IP addresses ...
by doneware
Tue Apr 24, 2018 10:26 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45656

Re: v6.42.1 [current]

stumbled upon a strange stuff after upgrade. [me@hgw2] > /log print follow-only 21:20:46 ssh,error Corrupt host's key, regenerating it! Reboot required! it happens when i'm trying to access the router from my freebsd box debug1: Local version string SSH-2.0-OpenSSH_7.2 FreeBSD-20160310 debug1: Remot...
by doneware
Tue Apr 24, 2018 7:26 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161611

Re: Advisory: Vulnerability exploiting the Winbox port

But the intruder can also sit inside your network. What if the intruder connects in with the MAC address/Neighbors service? There is no filtering possible on that. yes. one can disable the mac-winbox functionality. but the attack surface is a lot broader on the internet. i just pointed out that rem...
by doneware
Tue Apr 24, 2018 2:40 pm
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161611

Re: Advisory: Vulnerability exploiting the Winbox port

Just to bust some myths, i re-did the connection to a device that doesn't have no firewall input filter protection for the winbox port, but only the "allowed-address" type filterint in /ip service . some claim, that it is possible to extract information from the device this way. it seems, it isn't. ...
by doneware
Tue Apr 24, 2018 10:26 am
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161611

Re: Advisory: Vulnerability exploiting the Winbox port

!) winbox - fixed vulnerability that allowed to gain access to an unsecured router; Shifting of the blame onto users... what else are we supposed to use for remote management? true indeed, but you shall not use winbox anyway. stuff that just downloads dlls from a remote devie (it used to for quite ...
by doneware
Tue Apr 24, 2018 9:53 am
Forum: RouterBOARD hardware
Topic: CRS326, two groups Hw. Offloading
Replies: 4
Views: 656

Re: CRS326, two groups Hw. Offloading

two groups? like two independent L2 domains?
use bridge VLANs.
by doneware
Sun Apr 22, 2018 2:10 pm
Forum: General
Topic: MPLS hardware forwarding on new switches?
Replies: 5
Views: 1393

Re: MPLS hardware forwarding on new switches?

never the less, all the DX series SOCs do support vxLAN in hardware, something that is not exposed to RouterOS yet.
this might be a pretty good replacement for EoMPLS/VPLS in many cases, however.
so let's hope Mikrotik gives us vxLAN soon.
by doneware
Sun Apr 22, 2018 2:08 pm
Forum: General
Topic: MPLS hardware forwarding on new switches?
Replies: 5
Views: 1393

Re: MPLS hardware forwarding on new switches?

Do we know if there will be MPLS hardware forwarding on the new switches? mikrotik is heavily investing into Marvell's PRESTERA DX series SOCs. the crs326, the crs328 from the existing range use the 98DX3236A1, the beefier crs317 based on 98DX8216B0. the just announced 20SFP version of crs328 has t...
by doneware
Sun Apr 22, 2018 12:54 pm
Forum: RouterBOARD hardware
Topic: got confused by new bridge features
Replies: 0
Views: 441

got confused by new bridge features

ok, i admit, i did not read all the docs. but still it is kind of annoying/disappointing. i had a "bit" complex L2 setup with pre 6.41 configuration solely utilising switch chip features on crs1xx/2xx devices. now the time has come to upgrade some of them to the new style config, which I did. the cr...
by doneware
Fri Apr 20, 2018 8:16 pm
Forum: General
Topic: Feature request: DNS custom port.
Replies: 8
Views: 1940

Re: Feature request: DNS custom port.

SSTP normally works on every network. While it is a bad VPN in general i'm glad someone pointed this out. it's the TCP over TCP effect, that can cause issues over congested links. don't know it is covered anywhere in the MT docs, however. The next thing they implement is deep packet inspection and ...
by doneware
Fri Apr 20, 2018 8:01 pm
Forum: RouterBOARD hardware
Topic: 1Gb SFP failing in SPF+ slots
Replies: 4
Views: 942

Re: 1Gb SFP failing in SPF+ slots

try to force 1G connection at interface.
disabling autonego (i reckon it's needed to manually set the speed) is not really a good idea.
by doneware
Thu Apr 19, 2018 12:02 am
Forum: Scripting
Topic: How to write string to a file using script ?
Replies: 5
Views: 4953

Re: How to write string to a file using script ?

also note, due to mikrotik's implementation, variable value sizes can be up to 4096 bytes.
this ultimately limits the file size you create this way.
by doneware
Wed Apr 18, 2018 11:58 pm
Forum: Scripting
Topic: Parse ping result
Replies: 3
Views: 683

Re: Parse ping result

And I want receive ping result with percent and time sent=2 received=2 packet-loss=0% min-rtt=0ms avg-rtt=0ms max-rtt=0ms How can i do this? packet loss/success percent is easy to pull off: :local totalsent 10 :local success [/ping count=$totalsent x.x.x.x ] :put ($success * 100 / $totalsent) due t...
by doneware
Tue Apr 17, 2018 12:17 pm
Forum: RouterBOARD hardware
Topic: RouterBOARD naming
Replies: 47
Views: 24545

Re: RouterBOARD naming

so 10G interfaces
as i remember Janis' ending lines to the device itself, he was mentioning 2.5G/5G/10G there as the new way Mikrotik is following - maybe was just a freudian slip - this was the base of my speculation.
by doneware
Tue Apr 17, 2018 8:11 am
Forum: RouterBOARD hardware
Topic: RouterBOARD naming
Replies: 47
Views: 24545

Re: RouterBOARD naming

can we assume the combination XG will mean multi-gigabit?
like in CRS312-4C+8XG
by doneware
Mon Apr 16, 2018 2:39 pm
Forum: RouterBOARD hardware
Topic: R11e-LTE Detailed Information
Replies: 5
Views: 1139

Re: R11e-LTE Detailed Information

LtAp is indeed a good solution
as Mikrotik guys confirmed it on site in Berlin, the device uses the same LTE modem as the wAP LTE kit and the GPS is on the board, not on the modem.
by doneware
Sun Apr 15, 2018 6:42 pm
Forum: RouterBOARD hardware
Topic: hAP ac² High temperature
Replies: 50
Views: 10712

Re: hAP ac² High temperature

image https://wikidevi.com/wiki/File:MikroTik_hAP_ac2a.jpg https://wikidevi.com/wiki/File:MikroTik_hAP_ac2.jpg Is this design a major cause of poor cooling? :D i don't think that moving the heatsink to the other side would make things different. the CPU would be cooled more efficiently, i suppose. ...
by doneware
Sun Apr 15, 2018 6:28 pm
Forum: General
Topic: Feature Request: Logging of all administrator user actions
Replies: 19
Views: 4192

Re: Feature Request: Logging of all administrator user actions

retrieves the /export from the device and stores it in a versioning system. That is useful to have anyway as a backup, and can be used to see the changes that were made. we do this already, in 5 minute intervals if change is detected, and in 24 hour intervals regardless of there was any change or n...
by doneware
Sun Apr 15, 2018 3:21 pm
Forum: General
Topic: Feature Request: Logging of all administrator user actions
Replies: 19
Views: 4192

Re: Feature Request: Logging of all administrator user actions

and i'll say not just "administrator" but all user actions.
by doneware
Sun Apr 15, 2018 3:20 pm
Forum: General
Topic: Feature Request: Logging of all administrator user actions
Replies: 19
Views: 4192

Re: Feature Request: Logging of all administrator user actions

The currently implemented audit logging of messages (e.g. "device changed by user") is not really useful for determining what was changed. [This is not a key logger! ;-)] while i do support this, especially if it also affects entries in /system history , it has some challenges. can i suppose all "s...
by doneware
Sun Apr 15, 2018 3:12 pm
Forum: General
Topic: EoIP with higher IPSec Security
Replies: 6
Views: 1927

Re: EoIP with higher IPSec Security

all in all, i'd like to see the following option in IPSec-capable routerOS interfaces (and servers): - ipsec-peer-template=default [me@cloudtik] /interface eoip> print Flags: X - disabled, R - running 0 R name="eoip1" mtu=auto actual-mtu=1388 l2mtu=65535 mac-address=FE:18:5E:B0:C2:49 arp=enabled arp...
by doneware
Sun Apr 15, 2018 2:58 pm
Forum: General
Topic: EoIP with higher IPSec Security
Replies: 6
Views: 1927

Re: EoIP with higher IPSec Security

just did a short test in the labs: [me@cloudtik] /ip ipsec policy> /interface eoip print detail Flags: X - disabled, R - running 0 R name="eoip1" mtu=auto actual-mtu=1388 l2mtu=65535 mac-address=FE:18:5E:B0:C2:49 arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-...
by doneware
Sun Apr 15, 2018 2:46 pm
Forum: General
Topic: EoIP with higher IPSec Security
Replies: 6
Views: 1927

Re: EoIP with higher IPSec Security

i suppose you can tweak the default proposal template to have more secure encryption and hash algorithms. the default is: [me@cloudtik] /ip ipsec proposal> print Flags: X - disabled, * - default 0 * name="default" auth-algorithms=sha1 enc-algorithms=aes-128-cbc lifetime=30m pfs-group=modp1024 i high...
by doneware
Thu Apr 12, 2018 5:02 pm
Forum: RouterBOARD hardware
Topic: SFP 2.5G and 4.25G
Replies: 5
Views: 1279

Re: SFP 2.5G and 4.25G

SFPs are theoretically transparent to L1 technology ... so theoretically you can use same SFP for either ethernet or CPRI. In fact, we are using same SFP+ transcievers for both CPRI (Ericsson) and ethernet (Cisco, Juniper, Ericsson) without any problem. CPRI tries to re-use several existing transpo...
by doneware
Wed Apr 11, 2018 11:24 pm
Forum: RouterBOARD hardware
Topic: SFP 2.5G and 4.25G
Replies: 5
Views: 1279

Re: SFP 2.5G and 4.25G

Huawei or Ericsson SFP 2.5G or 4.25G those are multirate sonet transceivers for STM16 or most probably CPRI transceivers. either way you can't use them. the CPRI layer is not ethernet, and multirate modules need rate setting information. the same is true with FC SFPs: the form factor is the same, t...
by doneware
Sat Apr 07, 2018 9:50 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2018 - New hardware incoming
Replies: 52
Views: 17767

Re: MUM Europe 2018 - New hardware incoming

Is that a typo on the CRS354-48G-4S+2Q+ that it says QSFP.Shouldn't it be QSFP+ ? sure it should. what i am more intrigued about is the routerboot changelog for 3.40. i hope it's not a typo there: removed support for QSFP28 swapped I2C; QSFP+ is just for 40GE, but QSFP28 is up to Nx25/50/100GE, and...
by doneware
Sat Apr 07, 2018 9:32 pm
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208051

Re: Feature requests

With the use of interface-lists, set customized permissions to which interfaces a user (and preferably also snmp community) can see or make changes to. Some of our clients like to have read access to our routers, but sometimes it's a router supplying more than one client and giving even read access...
by doneware
Wed Apr 04, 2018 12:46 am
Forum: RouterBOARD hardware
Topic: RBM11G + R11e-LTE
Replies: 18
Views: 5407

Re: RBM11G + R11e-LTE

So I guess Mikrotik is using some kind of mPCIe to USB bridge, which is unfortunate if true. the wwan cards are usb devices, despite their form factor. mpcie slots have some pins that just expose the good old usb port w/o any voodoo. it is perfectly ok if you see’em as an usb device. even some mtik...
by doneware
Wed Apr 04, 2018 12:41 am
Forum: RouterBOARD hardware
Topic: Huawei E3531 doesn't work on RB2011UiAS
Replies: 1
Views: 772

Re: Huawei E3531 doesn't work on RB2011UiAS

might feel like a little alchemy, but try to add some external usb power to it. had similar issues with a huawei stick (can’ remember the type), which worked just fine with the same routeros version on a hap ac lite for no apparent reason.
by doneware
Tue Apr 03, 2018 6:37 pm
Forum: General
Topic: feature request: ipv6 aware xxxx
Replies: 0
Views: 461

feature request: ipv6 aware xxxx

RouterOS is doing great in many fields, but still there is a lot of stuff missing:

- ip cloud
- L2TP
- SSTP
- openvpn
- IPSec IKE2 mode-config
- dhcpv6 server for address delegation
- resolver (knob to prefer AAAA over A)

pretty please....
by doneware
Sun Apr 01, 2018 1:13 am
Forum: General
Topic: feature request: add source-address/source-interface to L2TP/SSTP-client
Replies: 0
Views: 428

feature request: add source-address/source-interface to L2TP/SSTP-client

please implement a source-address/source-interface knob to the IP based tunnelling protocols, so they can work reliable in a multi-homed environment.
by doneware
Sun Apr 01, 2018 12:25 am
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 89772

Re: Urgent security advisory

Can confirm this. Although no clue yet if port 2000 is used just for probing or if there is another vulnerability. edit: https://twitter.com/360Netlab/status/980078343738535936 seems kinda logical. open tcp/2000 port can hint Mikrotik device as well, so the exploit against it can be launched. as yo...
by doneware
Fri Mar 30, 2018 10:54 am
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 89772

Re: Urgent security advisory

Thanks for replying, I could make it available because WIKI has nothing specific, API ports, API-SSL, Telnet, SSH and 80 clients are deactivated, I need to bulk update via Mac-Telnet.
RoMoN's mac based SSH is the real tool for cases like this.
by doneware
Mon Mar 19, 2018 10:54 pm
Forum: General
Topic: Remote code execution in MikroTik RouterOS v6 (all before 6.41.3)
Replies: 13
Views: 2520

Re: Remote code execution in MikroTik RouterOS v6 (all before 6.41.3)

Please note, that SMB service had to be enabled on the LAN side, and only the LAN users could exploit this.
it's actually there partially:

"Exploitation vector: Local network"
by doneware
Wed Mar 14, 2018 1:44 am
Forum: Forwarding Protocols
Topic: PPPoE over MPLS - VPLS, Question about Actual MTU/ L2MTU
Replies: 6
Views: 1382

Re: PPPoE over MPLS - VPLS, Question about Actual MTU/ L2MTU

I meant that if PPPoE interface set on 1480 MTU that means this interface terminates PPPoE headers, but interface itself do not count it header size. i see. IP headers =/= L2 frame headers, and in case of PPPoE it's a frame header. therefore it is perfectly logical for ROS to not to take them into ...
by doneware
Tue Mar 13, 2018 1:20 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 97329

Re: v6.42rc [release candidate] is released!

*) capsman - improved CAPsMAN responsiveness on systems with large amount of CAP interfaces;
can anyone please describe in numeric format, what "large amount" means?
by doneware
Sun Mar 11, 2018 8:11 pm
Forum: Forwarding Protocols
Topic: PPPoE over MPLS - VPLS, Question about Actual MTU/ L2MTU
Replies: 6
Views: 1382

Re: PPPoE over MPLS - VPLS, Question about Actual MTU/ L2MTU

MTU is IP MTU without IP header Correct me if I wrong :) you are. MTU (or IP MTU) is the packet size, e.g. if it is for IP, it consists of the IP/IPv6 header and the IP payload. MPLS MTU is the frame size, where the frame consists of one or more MPLS labels (4 bytes each) and the MPLS payload, whic...
by doneware
Sat Mar 03, 2018 12:37 am
Forum: General
Topic: feature request ADVANCED DNS Server
Replies: 20
Views: 5679

Re: feature request ADVANCED DNS Server

this: https://tools.ietf.org/html/draft-tale- ... lientid-01

i know the draft already expired. tbh we're talking about a 7 yr old feature that is in dnsmasq since 2011.
this is hell of a tool to get stuff under control.
by doneware
Sat Mar 03, 2018 12:28 am
Forum: General
Topic: New router OS
Replies: 46
Views: 12278

Re: New router OS

hmmm, let me just pick some randomly...

VRF aware RADIUS
6PE
6VPE
vxLAN
v6 aware SSTP
v6 aware L2TP(v3)
v6 aware "ip cloud"
fasttrack for ipv6


tbh i received way too much replies from support for my reported bugs to be fixed only in v7
by doneware
Mon Feb 19, 2018 4:32 pm
Forum: General
Topic: IPV6 Leak with L2TP Client + Ipsec
Replies: 2
Views: 667

Re: IPV6 Leak with L2TP Client + Ipsec

How to perevnt IPV6 Leak while using an L2TP + IPsec Client to VPNProvider? Or even better how to change my current setup so i can use the IPV6 Nat from my VPNProvider? since we don't know your current setup, it's hard to tell :-) i never used NAT on IPv6 - i guess the point of using IPv6 is to be ...
by doneware
Sun Feb 18, 2018 8:49 pm
Forum: General
Topic: X86_64 ROS - 64bit Mikrotik
Replies: 79
Views: 29752

Re: X86_64 ROS - 64bit Mikrotik

i run x86_64 on an older server, "loaded" with ram. the main idea is to be able to host KVM VMs. it worked quite reasonably with just one VM running. [bat@cloudtik] /system logging> /sys reso print uptime: 3d5h38s version: 6.41.1 (stable) build-time: Jan/30/2018 10:26:14 free-memory: 22.0GiB total-m...
by doneware
Sat Feb 17, 2018 8:22 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

!) wireless - new driver with initial support for 160 and 80+80 MHz channel width; <- this
Just use the whole 5GHz band lol
well, for P2P connections it does make sense to me.
by doneware
Tue Feb 13, 2018 6:17 pm
Forum: RouterBOARD hardware
Topic: CAP ac bad Antenna design?
Replies: 95
Views: 21337

Re: CAP ac bad Antenna design?

At any rate I doubt the macbook has three chains.
macbook pro models have. mb air is "just" 2chain.
https://www.custompcreview.com/reviews/ ... ifference/
by doneware
Fri Feb 09, 2018 12:22 am
Forum: General
Topic: "restrict upgrade from RouterOS older than v5.16" ?
Replies: 8
Views: 910

Re: "restrict upgrade from RouterOS older than v5.16" ?

I do understand the reason for not converting the config (good point to deny the past and go into the future), but why can't I just take my 5.x device, and up it to 6.x even with full config reset? ROS sw upgrades do work _and_ the configuration is kept & restored if you upgrade a pre 5.16 device t...
by doneware
Thu Feb 08, 2018 11:58 pm
Forum: General
Topic: CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability
Replies: 20
Views: 4485

Re: CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability

How can people have faith in these products for business critical work? a reasonably big cisco network with ~90 asr9010 routers experienced random line card reboots and therefore outages without any good reason. incidents followed each other randomly, but sometimes after just couple minutes, essent...
by doneware
Thu Feb 08, 2018 1:10 pm
Forum: General
Topic: CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability
Replies: 20
Views: 4485

Re: CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability

you can partially mitigate this by setting up an ipv6 input firewall rule to accept only packets from known & configured & trusted EoIPv6 peers. one might "guess*" your IPv6 address, but guessing also the right src address seems be highly unlikely to me. *guess: pick the right one in 2^64 possible c...
by doneware
Thu Feb 08, 2018 12:54 pm
Forum: General
Topic: "restrict upgrade from RouterOS older than v5.16" ?
Replies: 8
Views: 910

Re: "restrict upgrade from RouterOS older than v5.16" ?

I can see "*) upgrade - improved RouterOS upgrade process and restrict upgrade from RouterOS older than v5.16;" in recent (rc22) changelog. What was the reason for that? Any way to up old router to 6.x after that? read: first upgrade to a 6.x image, where x<42, then upgrade to your desired 6.42+ RO...
by doneware
Wed Feb 07, 2018 12:25 am
Forum: RouterBOARD hardware
Topic: LHG XL 60Ghz home made
Replies: 13
Views: 3274

Re: LHG XL 60Ghz home made

wAP60 inside LHG XL
the funny thing is that the board inside wAP60G says "LHG 60G". at least mine inside the "wireless wire" box did so.
by doneware
Wed Feb 07, 2018 12:14 am
Forum: General
Topic: IPTV Problem
Replies: 4
Views: 1739

Re: IPTV Problem

is your wireless network bridged together with the wired LAN?
do the mentioned HD channels work in the wired environment?
can you draw just a brief topology of your networking setup? be sure to mention where is the multicast coming from.
can you post the relevant configuration of your router/ap?
by doneware
Tue Feb 06, 2018 12:25 am
Forum: General
Topic: Implement Pihole maybe via Metarouter
Replies: 4
Views: 3214

Re: Implement Pihole maybe via Metarouter

you can still have your pihole as a resolver (routeros can d-nat all dns queries to it) and keep the forwarding tasks on a proper router. get a $9.99 nanopi neo, run the pihole on it (maybe it can be powered by a beefier mikrotik via usb). regarding the stats: it may be funny for the first 1-2 days,...
by doneware
Thu Feb 01, 2018 2:25 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

+ Wave2 wireless chip (but will it be supported by software?)
What's new in 6.41 (2017-Dec-22 11:55):
.
.
!) wireless - new driver with initial support for 160 and 80+80 MHz channel width; <- this
by doneware
Fri Jan 26, 2018 11:57 am
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

It feels more like a replacement/upgrade on the hap ac lite.
that is the right. although most home use cases are just fine with 100Mbps, you can't really compete without GE ports nowadays.
by doneware
Fri Jan 26, 2018 10:51 am
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

New wireless hardware without a deep software revision of the NV2 is useless....... You don´t need NV2 for home AP.... but given the fact that Mikrotik uses a "single set of software features across the entire routerboard product family" you'll have it anyway. indeed there is not much real use case...
by doneware
Thu Jan 25, 2018 6:58 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

Storage size 16 MB!!!! yet another 16MB flash device... it may sound lame, but you can pop an usb pen into it and have a storage size according to your needs. you can get real compact ones, or just pick a micro sized microsd adapter from ebay i know, that - putting - say - 128meg NAND on the board ...
by doneware
Tue Jan 23, 2018 3:42 pm
Forum: General
Topic: Any plans for SD WAN?
Replies: 18
Views: 8173

Re: Any plans for SD WAN?

A VPN only functions over a single connection. this is not true. any overlay vpn can make use of _every_ available uplink path if required. but believe me, no one on earth want to do per packet load balancing over multiple independent connections, as OOO packet delivery is a pain in the back. Mikro...
by doneware
Mon Jan 22, 2018 4:27 pm
Forum: General
Topic: IPv6 and NAT - how I changed my mind
Replies: 19
Views: 8375

Re: IPv6 and NAT - how I changed my mind

i'll be just ok with a proper NAT64 implementation inside RouterOS. the DNS stuff is relatively easy to deliver and having control over the DNS gives one the ability to keep the load distributed among multiple NAT64 boxes. you'll do DNS64/NAT64 on a centralised device anyway - at least if you really...
by doneware
Mon Jan 22, 2018 2:04 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

Excellent comment, nz_monkey. Thanks for clarifying it for others, much appreciated. i've been thinking a bit. there is a (theoretical) way to make it a "bit more" multithreaded / multicore, but the whole idea will only (some) benefit if there are multiple "heavy" neighbours with lots of updates an...
by doneware
Mon Jan 22, 2018 8:06 am
Forum: General
Topic: /31 bit mask doesn't work on GRE tunnel?
Replies: 3
Views: 591

Re: /31 bit mask doesn't work on GRE tunnel?

routeros doesn’t support /31s
you can use /32s to achieve the same address saving effect.

/ip address add interface=gre1 address=1.1.1.0 network=1.1.1.1

and do the opposite on the other end.
by doneware
Sun Jan 21, 2018 1:30 am
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

RBD52G-5HacD2HnD-TC just popped up on FCC web site.

Why would it be triple chain? Model name suggests 2x2 2.4/5 GHz.
i mistook the last TC - probably a freudian slip - as the first gen hAP ac was triple chain on both bands.
indeed the last TC must be standing for "tower case" i presume...
by doneware
Fri Jan 19, 2018 1:20 am
Forum: Beginner Basics
Topic: IPv6 router settings
Replies: 15
Views: 2775

Re: IPv6 router settings

It's pretty cool that you get a static IPv6 setup like that. I have to rely on router advertisements from my ISP and they change my address and prefix every few days, which seems stupid to me but it's my reality. you don't need to accept router advertisements. your ISP shall also be assigning a /56...
by doneware
Thu Jan 18, 2018 12:38 pm
Forum: General
Topic: EoIP (+IPSec) interface status
Replies: 4
Views: 967

Re: EoIP (+IPSec) interface status

if you use the EoIP to bridge the two distant LANs together, tunnel keepalives will be your only option.
by doneware
Thu Jan 18, 2018 12:35 pm
Forum: General
Topic: EoIP (+IPSec) interface status
Replies: 4
Views: 967

Re: EoIP (+IPSec) interface status

I have noticed however that the tunnel interfaces will show as Running, even if the underlying IPSec connection is not established. For example, if I disable the EoIP interface on one end, the IPSec connection will drop out, which I can see through IP > IPSec, but the EoIP interface on the other en...
by doneware
Thu Jan 18, 2018 12:21 pm
Forum: General
Topic: Why does my home ISP route RFC 1918 addresses?
Replies: 4
Views: 587

Re: Why does my home ISP route RFC 1918 addresses?

My ISP appears to be using a RFC 1918 address for the first hop router, as well as responding to pings to another RFC 1918 address. Why? Maybe they consider the space between me and them "not the internet"? 100.64/10 (a.k.a shared address space, RFC6598) is not a "private" RFC1918 address range. it...
by doneware
Wed Jan 17, 2018 3:37 pm
Forum: General
Topic: Router with ports not working all of a sudden
Replies: 2
Views: 861

Re: Router with ports not working all of a sudden

which one do you have, the 7xGE or the 8xGE version? the 8xGE version has ports 1-4 on a switch. as 6.41 has a different bridge implementation, the ports on the switch (if they were configured as master/slave) get an automatic conversion to the new style of config. if something fails, it will not be...
by doneware
Wed Jan 17, 2018 3:18 pm
Forum: General
Topic: chain=input action=drop in-interface-list=!*FFFFFFFF
Replies: 3
Views: 478

Re: chain=input action=drop in-interface-list=!*FFFFFFFF

As per the subject, there seems to be a problem with the in-interface-list value. this is a broken reference to an interface list element that has been deleted. if you rename an element, say LAN to whatever_else, all referring objects will be updated. however if you delete the object - like in this...
by doneware
Tue Jan 16, 2018 4:05 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 14247

Re: ARM based new goodies on the horizon

Probably same processor as in hEX?
that's mmips.
by doneware
Mon Jan 15, 2018 10:39 pm
Forum: General
Topic: tool kid-control
Replies: 44
Views: 13195

Re: tool kid-control

It's been updated in the wiki! https://wiki.mikrotik.com/wiki/Manual:Kid-control btw, the last 42rc (rc9) refers to it as /ip kid-control. to be honest, identifying devices by their IP address is kind of dumb. especially since dual stack is not a thing and most of our kid's devices support seamless...
  • 1
  • 2