MikroTik

It looks like I have found some long-term working solution to keep the dude run healthy. I sheduled this script to be run once a day: dude vacuum-db ; dude export-db disk2/dude-backup-9999-99-99.tgz After this the database is kept at roughly constant size and no coruption occured during last weeks. ...

2011uias has only one poe out port. Sum up the consumption of all devices and compare to the power supply.

Only db file.

Yes. The dude was not subject to change for few years and it seems mikrotik is not going to change anything on it in near future.

Just more expensive and less energy efficient option.

Sure. There is no change in dude for ages because mikrotik doesn't have available capacities. So the difference between the versions is just the number.

Normally you can freely downgrade but you need to count with the possibility of damaging the configuration so the full reset without defaults and subsequent import of previously exported config might be necessary. Think twice whether the corrected vulnerability is really applicable to your case so i...

Try this.
viewtopic.php?f=8&t=138716&sid=ee6e1c12 ... da#p736644

Anyway. I am not against the native Linux winbox at all, but please, in this case, keep native Windows winbox application side by side.

You don't need any switch if you use a router with enough ethernets. Hard to say what large means but smartly placed 4 cAPs could be perfect solution. Manage the prioritisation by queues in the router.

Router doesn't handle clients but manipulates with the packets. So what everything you expect it should do with them?

No need to ask every three months. Once per three years is more than enough.

The question is what everything needs the router to do. The 750gr3 could be enough on one side and ccr could have problems on other side.

Just to let you all know:
SNMP v.3 problem with "unsupported v3 security level" error was already reported to Mikrotik with ticket number [Ticket#2019070422003642].
I have been asked for some additional information, I provided response, but after that no news. Hope Mikrotik is working on correction.

I would expect a firewall in your computer is blocking newly downloaded program.

I would say that every contemporary mikrotik device is able to generate and dispatch 100mbit/s by udp btest. Just put there whatever is laying on the shelf unused.

There is only one vacuum command available so you cannot make a mistake. But it might not help at all. You have to try...

Use external memory only for Dude. Due to lifetime and speed and capacity too. If you wear internal flash you can just throw out your otherwise perfectly working device.

Guys. Are you talking about a router, right? Isn't it basic functionality of a router to forward packets between the connected networks? If so, I see at least three ways to solve the issue: 1 disable routing. 2 remove ip addresses from bridges. 3 implement blocking rules between the bridges. Of cour...

Use long term versions only. Stable means ready for public testing. Make your own tests on non productive device before you decide to upgrade so far well running device. Use partitions to be able switch the version to previous in case of any problems, because none can rely on downgrade.

We still do not know what are the performance expectations.

CHR on fast cpu core. Otherwise choose the device according to your performance requirements.

Maybe he saved login details in the winbox on his pc. Otherwise you need to reset the devices...

Finally the dude works again. Just for one hour so far, but even this is much longer than usual two minutes before... The dump import took around 10 hours. It was running on i7/SSD, not taking more than 2% of single cpu core. Really "effective" :-). Final db file is 0,25GB comparing to 1GB of origin...

OK, looks I have some problems. When I do vacuum command, I get error message and subsequent dump creates zero sized file. sqlite> vacuum; Error: UNIQUE constraint failed: objs.id sqlite> .output dude.sql sqlite> .dump sqlite> Edit: looks like I moved forward, dump successfully ended, but reading th...

Not so long, though. That was the period the dude worked without an interrution just after switching it off and on until it has started to work just for 1 or two minutes only. I was thinking of manual reconstruction in new installation, but this looks like way lower amount of workload. The other thi...

This article helps me. Thanks author! CHR 6.43.4, 240 objects in DUDE. http://www.abit.ie/how_to_solve_dude_issue_with_database/ Thanks for hint, I will need to try this procedure also. Is there any long-term experience with this "solution"? Did it help for good or the error comes back after a whil...

I have the same problems during the few last years. My database has fastly grown up, has around 1 GB, and is not able to run anymore longer than 2 minutes from dude restart. Then the dude stops with the database malfunction error message. Years ago I provided all the support (database, access to the...

By ip address. Maybe by common part of mac address...

Upgrade branch office connectivity to desired speed. You cannot use what you don't have.

Distance, fresnel zone, alignment, interference. You wrote nothing about them, but you are missing 10db of signal level. You cannot beat the physics by any parameters. You can lower the tx power if devices are too close, you can lower the modulation, you can use more narrow band or change the freque...

As a router go for rb 750gr3 or hap ac2. Whatever else mikrotik device with enough ethernets would do the load balancing at such speeds too, but these two are much more capable than they look like. Number of balanced wans is virtually not limited. For outdoor ap suggestion you need to provide more i...

This is the day we were looking for. If there are any memorable dates in the Mikrotikls history, don't forget to add this day to it.

Now the question is: When we will be able to install the first public version?

I have never had problem to unsubscribe. May happen the problem is specific to something unusual, but I used that feature many thousand times successfully, also during last five years.

I wrote nothing about netinstall. If it is remote installation, add eventually other one or two packages that are critically necessary to log in aside the single system package during the first installation process step. If you want to be sure that nothing bad happens, prepare second device and let ...

I would like to know how is it possible that new installation doesn't wipe the system files enough so there could remain some older residue that affect behaviour of the newer version.

May not... But others will be borned.

Ages are not ending by 2020.

You should start with searching in this forum and googling to find similar symptoms that already occurs to others. Then think about the described solution and try to implement it in your case. Upgrade to latest bugfix version is also recommended.

Odesláno z mého ANE-LX1 pomocí Tapatalk

This is common problem already known and discussed in other threads.

Odesláno z mého ANE-LX1 pomocí Tapatalk

I've update a couple (±30) of RB2011/RB3011's hAP AC^2's and wAP AC devices from 6.43.4 to 6.43.8 and until now I got 2 wAP AC devices in an undefined state right after/during the update (update via capsman), they would not boot anymore. Luckily I'm able to power cycle these devices via PoE switche...

It is possible to mod the router case to be able to dismount small fans from back and to put a big low profile fan on top. After then to set its speed under requested noise level. When the case is big enough, more than one fan can be used. Noise will be gone and cooling will be much better than with...

Isn't fasttrack active?

Read related topics and don't ask many times answered question.

Me too. Discovery of chr takes ages usually.

Recent Dude is the same regardless the subversion number changes. The latest "older" version could be 4.0b3. I suspect the time changes during the device startup to be the reason for this error. It is something that does not happen in virtual environment as the running vm has still more or less corr...

Pull out the wifi cards and test again. Then put there back one by one and test between. Try more powerful power supply anyway.

Check the capacitors.

Hard to guess further. Maybe another netinstall could help.

English only is enough. Don't ask to send reply to email and come back and discuss your topic publicly. It will help others to solve similar problems.

This was discussed few times in the past. Search the forum first.

Are there multiple partitions? Have you upgraded the routerboot also? Is the power supply providing enough current?

Return it to the seller.

Why did you installed dude into Sxt lite? It must be really old version as mipsbe is no longer supported by dude.

Funny. It is impossible to get the graphs from the logs. At least it is mentioned that advertised feature is not even able to replace the dude.
I see this advertisement to be useless.

It is safe in case the amount of bad blocks will not be rising. Keep it running and monitor the status. Make sure you are not writing into flash.
Make two partitions to prevent further accidental problems.

Whoever is interested in the dates can use a picture editor and add the dates he wants.

This is English only forum. Please rewrite your post in English. Thank you.

Yes. It is. But don't expect any great speed. As the mipsle support was dropped, you need to use old ros versions. Level 3 is enough for PTP link.

Try, to avoid as many obstacles as possible. Use long poles. Move antennas on side of the buildings... If still some obstacles remain try high gain directional 2.4 GHz antenna and shoot through. You can also try to find a place to bounce a reflection. It is much better to find a path for wire than m...

Approval can take some time. Moderators are working for free when they want. And we have to read everything...

There is no dude related development. We all can only be glad that the dude at least works somehow and mitigate the problems it has. Even those errors that are well known to mikrotik are not subjects to correction in reasonable future.

You cannot see the configuration without user access. You can just reset everything at once and get access to factory default configuration.

At least we know that folders already exist.

Really? Everyone wants to have a supersecured router and you would give all your login details to a cloud?

Is there any problem with Google? Or you cannot visit the mikrotik webpage?

https://wiki.mikrotik.com/wiki/Manual:CHR

We accept other language only on case the other the English translation is in the post simultaneously. This is just only English forum. If someone cannot speak English enough, he would be welcomed on any other mikrotik related forum that accepts his language. Unfortunately he will not be able to set...

Confirm that.

I don’t understand how to do that in Linux? And what is problem 4.0beta3 version, whu this not working?

Follow the manual.

Warning. This is English only forum. Please rewrite your post in English.

Use contemporary CHR for hosting the dude instead.

... And what have you found?

I have no other idea than recheck the disk, it's format, router settings.. Maybe the netinstall can help as it clears everything out.

I have not seen this problem in CHR during last two weeks. Really strange.

Read the manual.
https://wiki.mikrotik.com/wiki/Manual:Kid-control

Search the forum.

Don't create new threads for topics already discussed elsewhere.

Return it to the seller with such argumentation. May happen he will accept that. No one else is guilty of the fact that you did not know what you bought.

Therefore everyone should read the documentation first, or at least ask a dealer whether particular device will fit his needs.

You can sell this one and buy more appropriate device or buy and apply level 4 license to it.

And what kind of help do you expect here?

Double post.

It's meant to be a client or bridge with single client. Maybe you should not use quickset and rather read the wireless mode documentation. It may happen the device will perfectly fit your needs when you set it properly.

Isn't one thread enough?
viewtopic.php?t=140171

Already requested. Join the corresponding thread and don't create a new one. Topic locked.

I was running the dude on 750Gr3 in role as main router for almost two years and this never happened. From other reasons I moved the dude to chr.

You can use bridging mode for just one client. For real multiclient ap you need license level 4.

Sure you cannot see anything in the ros. You should look into the logs of hypervisor to see why the host was stopped.

Maybe it cannot withstand the SNMP requesting. Try to upgrade its software and check with tp-link support what to do next.

Try mac address connection. Otherwise reset to defaults and log in normally.

Use winbox!

Search the forum. Exactly this is responded again and again.

Or read the documentation.

You should do both these things before asked here.

Email to support@mikrotik.com.

You don't need ac device for that. Such speed is achievable with whatever N device. You should not keep admin user in the system, replace it by your own not common user.

I confirm that. It happens to me also.
You should open a ticket at support about this.

You cannot bridge wifi interfaces if they are not in bridge mode. Despite that you might need to take wlan1 as wan and nat the traffic going that way out. Ip addresses of inner network should not overlap with any of the ranges on the way to Internet.

What the logs say?
I mean the logs from the hypervisor...

Buying tens of these does not solve anything. And your boss hopefully knows that.

And what about the RB931-2nD together with powerbank, smartphone and tik-app?

Tom, it might be even much worse anyway.

The public btest server could be one of the side effects of other of my ideas, and it might take a while, but I believe I will open it finally.

Because it requires some effort and costs.

Thanks Tom, I am still far from the moment I could use it, I need to see if there is any demand first.

There always was 6.99, even years ago. It is special testing version of routeros and has no relation to v7. I also had a router with this version in the past...

So what? There already is such discussion, why you needed to open new thread?

Are you using 411 without WiFi?

For sure, but the 100mbits limitation might be problematic. Also I couldn't guarantee such speed to be achievable always, which could lead to lower measurements. Therefore the question if such thing makes sense.

It was already told here several times by mikrotik representatives that such temperatures are not something you should worry about. You should search and read before you ask the same question again.

Could be beneficial to someone if I would open the 100/100 Mbit/s public btest server in Europe? Just asking in advance...

Don't put it too high and use panel antenna to serve only the required area. If you need to cover more, use more antennas and more accesspoints.

Better to get config periodically and analyze the differences. Note that config may be incomparable between the versions and export script does not contain everything, like certificates, for example.

Shouldn't it be much better?

Omitting... It means skipped, not installed. Why? Because mipsbe is not supported architecture to run dude server.

Rather try chr. It's free with interface speed limitation that doesn't make any problem for the dude.

Read this.
https://wiki.mikrotik.com/wiki/Manual:System/LEDS
Maybe the leds are not configured as you could expect so you can configure them as you need.

Until your router is not accessible from the Internet on required port, you need to talk to your isp. If it is, read this.

https://wiki.mikrotik.com/wiki/Manual:I ... FTP_server

.. And dst nat above. Don't forget to accept the redirected packets.

No.

Configuration could be changing on the fly.

Will you provide your software publicly for free if you are requesting free community help?

Mikrotik is not able to do anything with dude now.

Correctly set firewall.

That was similar in my case or rb750gr3 /microSD. Now when I gave up running the dude on it and moved it to CHR, the simple restart solves the situation for days without any other noticeable side effects. So far... I suggest you to follow. The client behavior is also much smoother with server in CHR...

My latest observations leads me to the actual conclusion that in case of this error it is enough just to restart the dude. As soon as possible in order to gat the smallest gap in recorded data. Finally I have created and regularly scheduled this script that checks the status "running" an in any othe...

Let's wait what mikrotik says about it or send the request to support. Moderators are not admins and cannot change the behavior of the forum.

You maybe selected wrong model. Maybe the configuration could be improved, but you cannot use the chain that is not there. You cannot compare single chain radio with the dual chain radio.

Yep. Because we all fight against it. I delete ten to twenty posts per day. Other moderators probably also.

Why? Two first posts of new member are subject of the manual approval by moderators.

Hard to guess how the device is set, but you swapped the dual channel device by single channel one. Half the chains means under all other conditions unchanged the half of throughput. Generally.

You have two interfaces. While one downloads, the other one.... guess what?

... And is limited by 1mbit.

See the interfaces.

Isn't it DFS scanning? Or automatic channel selection looking for better frequency?

Different.

vmware workstation 12. Maybe it is not linked to storage or to architecture, it may be common dude server application programming error which is there since the era of dude 4b3, maybe longer, according to the old forum topics. Last error was overcome by stopping and starting dude again. Question how...

Dude in CHR 6.43.2 does the same too. Mikrotik was officially informed.

There is opened ticket for this problem [Ticket#2017090222000354] by me and as you can see, it celebrated 1st year anniversary few days ago. Stll no positive answer, no hope...

My rb750gr3 started to report disk i/o errors on microSD card. I pulled it out, formatted in pc, tested few times with no errors, put back to rb750gr3, reformat to ext3, let the dude run on it and guess what? Again dtb corruption reported, followed by i/o error again. Made tests once more - no probl...

I also face this problem for few last days. Chr 6.43.2 in vmware workstation with 1cpu /2cores in virtual host is once per day switched of because of this. At the moment I have removed one core hoping that the ros will not try to disable the last core it has. Is there a ticket created at mikrotik fo...

I can confirm I see it even with 6.43.x. Again time to time.

... and bridging the planets...

Routing the space? No. Routing the universe!

Yes. But not automatically. Read the manual about the routerboot.

No. Use export and import.

Lucky you. May happen that problems are linked with usb / mSD storage type on routerboards while on CHR this does not apply.

None knows. Even mikrotik didn't say anything more than that they noted that for the further correction while they resurrect the dude development in the future. The dude is on hold again, like usually.

Flipylost, Don't put upgrade files into flash but into ramdisk.

Yes. It will happen again. Sooner or later it will for sure.
No. Mikrotik does not do anything in order to correct it. Schedule often backups and restore it when necessary. There is no other solution for now.

Delete the dude storage and import older dude backup.

That's how it is. Maybe you have multiple bootable partitions used while the second could be unaffected. Then you can shortly power the device to start booting and cut the power off. When powering again the second partition takes place and boots up. Otherwise you have to climb up.

You need many sfp+ /10g interfaces so for example this:

https://mikrotik.com/product/CCR1072-1G-8Splus

Have you seen any real impact of vacuuming so it makes sense to schedule it for you?

Get access to your account first. Then transfer the license according to manual.

That's what I asked for years ago.

Maybe. Check autonegotiation on both sides is on and try another cable.

Yes. Yes. Yes. Yes. No. Not necessarily. Point them where you need.

You can rise the feature request here. May happen everyone would like it too like you and mikrotik will hear all and one day after few years you can get it in beta.

Maybe 6.43.1 was retracted or not available for automatic download yet/now.

Install new one. Then transfer the license from the previous one.

Complication is due to so many options you can set. It's on you if you use full user interface or quickset or another brand product. Finally you can find all the customizable options useful when you understand them.

Sure I admit it could be useful for some users. But there are other alternatives that do not disclose you as mikrotik running ip. What we saw during last two years after reading repetitively that there is no way to run custom code in ros and none can run anything on system level with high privileges...

Server does need to be routerboard, but routeros on supported platforms. Beside some routerboards, it is also x86 or chr that both could be virtualised on pc.

And change all the passwords.

Yes. Use export and import commands.

Ok. "We" was too broad. Let's correct it to "me and maybe some others". I didn't mean own dns server (necessarily) but public ddns service which is implementable both for static and dynamic (by script) ip addresses. I am not considering myself to be ISP. I just play with networks and I am really big...

Get rid of combined package. Install only those individual packages you need. Don't put npk files into flash folder, they are installed from ramdisk. Putting into sd card will not help. Use dude package of the same version like other packages.

Janisk, we, who have our own dns, do not use your ip cloud service at all. Happily.

Maybe the authentication requirement on the public btest servers should be switched off. What is its meaning when the user and password is publicly known?

Because the interconnected access points and their clients are sharing the same frequency so the real throughput goes rapidly down with each hop.

Anav, specs are already published including the vpn throughput.

Ovpn question was already responded above.

My concern is that 4011 is missing usb3 port and sd card slot. Without it it is unusable for the dude. Otherwise it looks pretty good, LCD may help too and I am really looking forward to get it in hands...

Mikrotik, please explain why you needed to rename the release channels. Also please explain what real change does this mean. Without that the renaming of current to stable is very confusing for those who came recently or do not know that the only well tested bugfix could be considered as stable in r...

Sxt has inner secondary reset hole-type connector. Use it for running netinstall mode if the main reset button does not work. Maybe this could be your problem with Sxt...

This is correct behavior.

Not true. Omnitik, Sxt, groove are capable of spectral scan. Other devices, mipsbe mainly with N radios can do that. There is also groove52n that could be used for both bands. It should support spectral scan, but I have none to test it for sure.

How do you define "ip is being used"?

Use rather Rb433. The rb133 is not further upgradable by newer ros versions.

That's effective idea. All registered users (anywhere in the mikrotik, not only on the forum...) should receive a notification in such emergency case! Otherwise the blog is nothing more than a post in the right section of the forum...

Very true. I am with you. Two so far... Not enough. But one parameter for that shouldn't be so big deal...

Are the holes at the same place of all graphs? If not then you could have some kind of packet loss, maybe some antiflood filter takes place somewhere in the network?

Normis, I am talking about the blog only. Of course I know that the info was published fastly on the forum. But the blog is new now and from this perspective the info already provided there is really old at the moment. Actually I am fine with the forum announcements for such cases, so even though I ...

Apparently your security level has risen.

It also depends on when new articles will be published there, if half of year after the security incident or when. In such case there is no need to send email notifications.

Masquerade rule might be missing. Don't stay with old version. Upgrade to latest bugfix.

Accept dst-natted packets in forward chain of firewall filter before final drop.

Even I can agree with you, there are many people that find this useful. Me included. And once it is working somehow it is pity that it should be discarded, IMHO.

It can not.

None can install anything else than original packages himself in the routeros.

Ros version? Fasttrack is used?

Very good idea. Thank you for that.

What are your findings according to the hints on other similar topics responses here on the forum? What have you been done before you posted the question?
What is the effect of changing the autonegotiation to the throughput?

Netinstall will keep the license.

I am not sure if anyone understood what you are asking about?

http://en.jirous.com

Or what is wrong with mikrotik antennas?
https://mikrotik.com/products/group/antennas

Upgrade is always risky. Therefore you should make enough tests on your laboratory devices and then upgrade your network by parts. The configuration options are changing version to version so new version can misbehave easily when you do not care what changes meanwhile. I agree there should be clear ...

http://lmgtfy.com/?q=mikrotik+block+https+exe

You should search and read first before you made your first post.

Or singlethread processing of btest. See the cpu usage...

Latency. Tcp waits for confirmation and that makes delays. Udp just pushes packets not looking around.

Even the device that connects to Internet could be blocked. Of course it depends on what you need from it. Don't forget to upgrade and make sure your firewall rules are correctly set. The easiest way to exhaust your connection is to leave the device open to the Internet and let it serve as dns resol...

I don't believe so.

Switch off ip cloud, Internet detection, timezone detection and similar things. Move the network devices to special network segment and block its access to Internet.

Let me know. I would like to drink it before the bubbles go off.

According to my experience the SNMP load is not negligible and when the polling is over tested link you could get no answer easily. So the SNMP is not the adequate tool in this case.

Only eth1 is bootable in such situations. I asked mikrotik to allow selection of other ports to get this role instead of eth1 many years ago without any answer. Either you find and repair the physical damage of eth1 or throw it away. It doesn't worth to repair it.

I am afraid not. Try virtualized CHR instead.

Yes.

I had the same problem with rb333. Bricked after the 6.42.4 installed over 5.26. I netinstalled 5.26 again with the serial cable and then went to 6.0, 6.10, 6.20, 6.33, 6.42.4. I tried to upgrade routerboot every time but it was only 2.18 available until the numbering synced with the ros version. Af...

Use serial console cable to see what is happening. You can set the booting mode by that too.

It would be nice but they at least would tell a word about it. But we all know how it was with last dude development cycle...

I am facing the same problem again and again. There is no other solution than importing older backup and loose the recent data.

Mikrotik probably doesn't care about the dude at all. At least there is no other explanation for the silence so far.

Use administrative mac address on the internal bridge. Most probably the bridge is changing its mac because of adopting it from the first interface that went up.

Search found 7560 matches