Community discussions

MikroTik App

Search found 23 matches

by agrisvv
Fri Dec 11, 2020 10:23 am
Forum: General
Topic: understanding and fixing MTU/MSS/PMTU with IPsec
Replies: 36
Views: 40562

Re: understanding and fixing MTU/MSS/PMTU with IPsec

My comments about MTU: most of clients(android,ios,windows) work because they create new interface with MTU 1400. But linux strongswan and mikrotik itself dose not have new interface with MTU 1400. So far for my tests i used this websites bugzilla_mozilla_org and git_kolab_org witch dose not worked....
by agrisvv
Thu Dec 10, 2020 11:56 pm
Forum: General
Topic: IPsec + IKEv2 not routing
Replies: 6
Views: 2407

Re: IPsec + IKEv2 not routing

Now we need to connect to this network from more laptop (at same network with one public ip). From - from where to where you wan't to connect? from your text i understand what you want from INTRANET to INTRANET? or like most of people? client from world -> to mikrotik router -> to local network? re...
by agrisvv
Wed Dec 09, 2020 11:18 am
Forum: General
Topic: clients->ipsec router no internet [SOLVED]
Replies: 3
Views: 1248

Re: clients->ipsec router no internet [SOLVED]

finally after few days :D

For some reason bridge was set with use-ip-firewall=yes. But not needed.
For me WAN needed to be only under Hardware offload bridge.
/interface bridge settings set use-ip-firewall=no
Now ipsec tunnels for clients can get internet also.
by agrisvv
Wed Dec 09, 2020 7:53 am
Forum: General
Topic: clients->ipsec router no internet [SOLVED]
Replies: 3
Views: 1248

Re: clients->ipsec router no internet [SOLVED]

Aren't you supposed to specify out interface for it?
/ip firewall nat
...
add action=masquerade chain=srcnat
i can add
add action=masquerade chain=srcnat log=yes out-interface=bridge-WAN
It logged only NTP outgoing packets..
by agrisvv
Tue Dec 08, 2020 7:21 pm
Forum: General
Topic: clients->ipsec router no internet [SOLVED]
Replies: 3
Views: 1248

clients->ipsec router no internet [SOLVED]

Hi! Hope someone have idea what i had missed.. I read so much forum topics but something i missed. I want to create Ikev2/ipsec connections to router and pass all flow via router. Followed RW_IKEV_RSA manual: https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_using_IKEv2_with_RSA_auth...
by agrisvv
Wed Oct 24, 2018 11:12 pm
Forum: General
Topic: Bridge Wan use of ip firewall
Replies: 0
Views: 948

Bridge Wan use of ip firewall

Question: is it correct to use use-ip-firewall=yes or have other problem? Bridge ports are HW offload. ROS 6.43.4 Problem: Without use checkbox use-ip-firewall i can ping only some of external ip addresses to main router from external network. For testing i can ping 154 ip but not 153... When i chan...
by agrisvv
Tue Jun 27, 2017 5:25 pm
Forum: General
Topic: WIFI tx packets to phone increases
Replies: 1
Views: 1030

Re: WIFI tx packets to phone increases

My be someone reads this..
More tests same problem..

RB961Ui-2HnD (mipsbe)
with 6.35.4. wireless-FP
with 6.35.4 wireless-CM2 problem starts.

with 6.36.x wireless-CM2 or wireless-REP problem exist.

so something with new features from cm2 or rep..
by agrisvv
Thu Mar 23, 2017 4:05 pm
Forum: General
Topic: WIFI tx packets to phone increases
Replies: 1
Views: 1030

WIFI tx packets to phone increases

Hi maybe routeros developer could help with test packages to find what is wrong with routeros or android. phone: related to nexus 5x with software android 7.1 ( kernels dose not help, lineageOS or stock. no diff) Problem: phone wake lock. battery drain with all latest routeros versions.. 1) in 20 mi...
by agrisvv
Wed Jan 18, 2017 1:10 pm
Forum: Announcements
Topic: The Dude, v6.38 [current] release.
Replies: 77
Views: 39207

Re: The Dude, v6.38 [current] release.

Network = Mikrotik router 6.38.1 tage vlan125 -> taged valn125 TPLINK managed switch taged vlan125-> taged vlan125 Mikrotik router WIFI 6.38.1 WIFI router ether1 -- vlan125 wlan1 BRIDGE --vlan1 --wlan With brodge rstp or stp cant get DHCP or connectivity. without protocol mode all are OK. IT is OK? ...
by agrisvv
Thu Dec 22, 2016 1:41 am
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 42361

Re: Wifi keeps mobile device awake? [keepalive packets]

Can confirm with nexus 5x android 7.1 developer preview 2. RouterOS 6.37 and 6.38rc. The wakelock is called "qcom_rx_wakelock". no i think it wasn't because frenco kernel help mee to disable qcom_rx_wakelock. but this dose not help.. only now after 7.1.1 stable. battery drain to me are sa...
by agrisvv
Thu Dec 22, 2016 1:38 am
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 42361

Re: Wifi keeps mobile device awake? [keepalive packets]

Android 7.1.1 repair bug with wifi keep awake. But as of topic start date 2013 wifiAP keep sending frames.. is better, but now cpu deep sleep(200mhz) vs next step(300mhz) = 50:50 at night. But on screenshoot you can see diferent phones nexus 5x (android 7.x) ends with MAC 36 and other lumia windows ...
by agrisvv
Mon Nov 21, 2016 11:29 am
Forum: Wireless Networking
Topic: Wifi keeps mobile device awake? [keepalive packets]
Replies: 81
Views: 42361

Re: Wifi keeps mobile device awake? [keepalive packets]

Same here nexus 5x. same for stock android 7 and 7.1. factory reseted. with 6.0.1 wasn't so extensive awake. hAP lite and RB2011UiAS-2HnD-IN with last versions. phone stay awake. no diference after change dhcp lease time, wmm or group key settings. Also reset to default. No awake with such routers l...
by agrisvv
Fri Feb 19, 2016 4:38 pm
Forum: General
Topic: CRS help taged-untaged-trunk
Replies: 1
Views: 682

Re: CRS help taged-untaged-trunk

This could bee deleted.
It seems some kind problem with windows explorer or something else.
in picture i copy from 10.2.6.101 to 10.2.6.243, but in torch i see destination 10.2.8.243... ghhh
by agrisvv
Fri Feb 19, 2016 4:15 pm
Forum: General
Topic: CRS help taged-untaged-trunk
Replies: 1
Views: 682

CRS help taged-untaged-trunk

i thin is some mistake in config... bot how it is possible Structure: MK router => crs => pc or servers 1. pc is untaged vlan 999 2. servers ar 2 trunked ports, tagged vlan 999. 3. router=>crs are bonding trunk each side tagged vlan 999. pc and server are on same network 10.2.6.0/24 problematic netw...
by agrisvv
Wed Sep 02, 2015 5:23 pm
Forum: General
Topic: Losing mangle entries
Replies: 6
Views: 1405

Re: Losing mangle entries

if someone else read this topic for solution. if you have last backup and not modified anything from after upgrade to 6.32, then just install 6.31 and restore from backup. if you had modified rules then: i had 01/03/2015 backup ( do not know witch versions of routeros 6.xx), last backup was after 6....
by agrisvv
Wed Sep 02, 2015 4:40 pm
Forum: General
Topic: Losing mangle entries
Replies: 6
Views: 1405

Re: Losing mangle entries

same me on rb1100ah. upgrade to 6.32.

and now i lose mange entries, ad in WAN connection show me extensive broadcast/loop/multicast...

damit, now it think how to downgrade and restore from backup

as i can see mikrotik revoke 32 version from currient..
by agrisvv
Wed Apr 29, 2015 11:45 pm
Forum: General
Topic: Winbox 3 RC
Replies: 636
Views: 207178

Re: Winbox 3 RC - feature

Hi! clear winbox password or all fields after login or protect with master pasword. 1. open winbox. 2. input Master passwod 3. get your host,password and login to router. 4. close winbox. 5. open winbox (inccorect - host and password are saved and you can connect). correct- all info clear and it you...
by agrisvv
Thu Jan 22, 2015 10:58 pm
Forum: General
Topic: RouterOS v6.25
Replies: 107
Views: 45014

Re: RouterOS v6.25

by agrisvv
Thu Jan 22, 2015 10:56 pm
Forum: RouterBOARD hardware
Topic: RB1100AH with new firmware Ko
Replies: 3
Views: 1312

Re: RB1100AH with new firmware Ko

i think you need to read manual to get serial work, without that you can't get to see whats happens

beep sound are only then router are fully started.
by agrisvv
Wed Jan 21, 2015 9:01 pm
Forum: General
Topic: Known issues and bugs - a list
Replies: 284
Views: 170951

Re: Known issues and bugs - a list

i want to write one bug, I upgrade to 6.25.
Ater upgrade cant connect to sstp vpn.
In attach are debug image.
IN windows 8.1 show something about "remote port closed"

Test mikrotik to mikrotik sstp - all work fine.
So i downgrade to 6.24.
no mater powerpc or mipsbe.
by agrisvv
Wed Feb 05, 2014 8:43 pm
Forum: General
Topic: SSTP: recvd too small packet
Replies: 33
Views: 14982

Re: SSTP: recvd too small packet

bad news.. updated win7 win8 and win 8.1 Now all are affected with this error. not so goo to tell client why vpn not work.. and to all say whats need registry fix...

so i hope what this would bee resolved near top 1 in bugtracked
by agrisvv
Sat Apr 06, 2013 2:32 pm
Forum: General
Topic: RB1100 vs RB1100AH
Replies: 2
Views: 1647

Re: RB1100 vs RB1100AH

And how about temperatures. don't need to worry?
now system temp are 31 c.
cpu temp are 56 c at 5% load. How about 90% load all time?
then i need to wory about to add cooler?
by agrisvv
Thu Mar 07, 2013 5:41 pm
Forum: General
Topic: Isolate Wifi from local network, with dnat servers
Replies: 0
Views: 797

Isolate Wifi from local network, with dnat servers

Hi. i thinking many days and don't understand - it is posible or not. Target - need to isolate wifi from local network. all are fine, bet problem starts with servers after firewall. to public servers i have NAT chain=dstnat action=dst-nat to-addresses=192.168.1.20 protocol=tcp dst-address=80.80.80.8...