MikroTik

I wonder that we can need still the same things even after many years.

I would suggest to create a new user with uncommon name and strong password and ten fully remove default admin user.

I told them not to break anything.
But did they hear? Like always.
Mikrotik.

I told them not to break anything.
But did they hear? Like always.
Mikrotik.

You did not followed my advice.

No. It works normally in all cases I know.

Yep. So what's new or better?

That was me who approved this post. Unfortunately I can not presume bad intention otherwise I must delete everything from all newcomers. Good that sob is making such warnings, but how to detect the intentions prior to post approval?

Aren't we too much off topic? I should moderate us...

It could be such tactic...

I have installed few of rbd52g and they work perfectly and stable without any problems.

Use winbox over mac. If no go, reset and try again if no go again, netinstall latest long term version.

Reset the device to defaults or make netinstall of latest long term version.

Seems so. But the idea is not bad, I like it.

This is not going to happen. We all know how slow, buggy and complicated is the routeros development and it was mentioned in the past that routeros will not accept third party packages to run also due to security reasons. Just take router as a router, be glad for many related features and their mana...

Lunch after dinner?

Good choice. Enjoy it.

According to what you wrote, it will not be wrong if you go with routerboard devices. Even if routeros is not open source.

So what can another thread bring new?

Why not to try switch os instead of the router os?

Isn't this discussed here manytimes already?

For sure, two radios are twice more than one. Therefore I like to use rb433 with three radios on such scenario. One as client, one as ap and one as secondary ap or backup client. But when op wants to solve his problem with one radio, he should follow my suggestion.

10 or 20... not a difference, it is just a parameter.

Keeping fingers crossed.

Hope we will get more stability and working features.

Hope you will not break anything.

I am afraid that the device recognizes both sides as local. But even when vrf might help, you will choke the rb750. Moreover WiFi is normally able to pass much more than 100mbit.

Right. Like the question was... Still I don't know how to answer the question without starting an investigation...

Oh. Strange. I suggest to remove the configuration and make only the settings you want from scratch. Only then you can be sure what the device does and why...

Bad luck. Why you thought that it should be possible?

I would say the firmware could be upgraded automatically. Just for me it is something that I have switched off.

Compare the official performance tables. Rbd52g is almost 3 times powerful in routing.

Sure. I expect the op buys as many devices as he needs to cover his area.

I am afraid that this device does not have serial port. Maybe plugging a switch between the netinstall server and the device might help you to perform netinstall over ethernet. Make sure you set everything right and don't give up.

Go with hap ac2 (rbd52g) and and you will not regret. In case you need more ports, use rb4011.

You should be able to connect winbox over mac if ip configuration is broken.

There is no reason for WiFi to wait for ethernet. Looks like you made an error in configuration.

When? Immediately. Right out of the box add new administration account with unusual name and password and remove the original admin account.

Don't change anything if you are happy with your contemporary solution.

What does mean mAh when no voltage is provided?
Check the product page to get the consumption...

Router is not general purpose server. Unfortunately for you.
You cannot run such software inside routeros.
More than that you don't need it. For example VLC can play from smb shares directly without any streaming server at all.

You should join corresponding thread instead of the hijacking the non relevant one. Here it was solved already: https://r.tapatalk.com/shareLink/topic?url=https%3A%2F%2Fforum%2Emikrotik%2Ecom%2Fviewtopic%2Ephp%3Ft%3D165668&share_tid=165668&share_fid=28615&share_type=t&link_source=app...

If the WiFi side is connected somewhere, you may try to get in from that side.
If device supports multiple partitions and you have created a backup one, u can try to boot it by short power on for 5-8 seconds with subsequent power reset. But I doubt so.
There is no other remote way to get in.

https://i.mt.lv/cdn/product_files/RB951 ... 180543.png

Whrere you would like to plug the serial cable to?

Then bonding cannot work at all. Search for load balancing.

Is it for ptp link or for connection to the mobile operator?

It's somehow written in documentation already: https://wiki.mikrotik.com/wiki/Manual:Quickset#F.A.Q But should be more obvious, I admit, because many people mix the quickset with other configuration ways. There should be some consistency check implemented that would forbid to use quickset if the act...

Clients are free to change their mac when they wish to.

Set it in opposite way. AP Bridge for wlan with virtual client.

Definitely true. I would like to get that feature back too. But there have been other things I would like to see in dude for ages. And you know how the dude development goes...

1. Remove ether 5 from bridge if it was in. 2. Replicate all settings of port 1 to port 5. 3. Remove all settings of port 1 from the configuration. 4. Check and correct all routes, port lists, firewall rules and other stuff whether it is correct, eventually correct it manually accordingly to your ch...

Put them into common bridge.

I see actual mtu 1422 on your picture. Try to investigate around the mtu again and try to clamp mss...
See for example:
viewtopic.php?t=94905

200ms delay with fragmented tcp traffic is perfectly able to produce such effects you are facing to.

Is seems like you have two interfaces that should be in common bridge and are not. Maybe disabling of hardware offload on the bridge members could help too.

What is the ping between the sites and how it changes when you exhaust the tunnel?

Four zeroes are not valid ip address for an interface. It's maybe impossible to help you if it is so unclear where the problem is. Connect a computer to the modem directly and make sure that everything works correctly. Then reset the router and replicate the settings on wan side. Once it works, conf...

Try netinstall.

Too few information... But rbd52g is nice device that could do everything.

Sorry, it is not ideal for newbie...

Reset to defaults and check what and how it works.

Remove all configuration from your mikrotik and set everything you need manually. Then you will know what is set and why. Otherwise you just need to believe in something.

Really? I can not imagine to return to that times...

In such rare emergency cases I use Web access to dude to get an overview.

Computers hit by flash are making new firewall rules after reboot?
Strange world...
And how is it related to the mikrotik?

Really strange things. Put comcast into pure bridge mode and try with a computer attached directly if you can set it in the way that everything starts to work. Then replicate the settings to wan port of the router. Check it gets the expected ip address and is able to get the Internet connection then...

Always check if the device you want to use as ap has license level 4 or higher. If it is level 3, it won't work as an access point.

https://download.mikrotik.com/routeros/ ... 6.47.3.npk

Just drag and drop into winbox logged to router. Reboot after uploading.

Hope it will work.

My suggestion is to run dude in CHR. Version 6.46.6.

For router to use latest long term, which is 6.45.9 now.

Guys, I hope that ezamora could at least read few senteces from the mikrotik VLAN manual pages I provided him above. Then he can return back with additional questions if whatever was not clear.

It's easy to try such suggestion. Hard to guess the result, especially if you did not any real functional observation of the problem. In your case I would check the port state, negotiation status, traffic on the ports by torch, ip addresses, routes, ping outside from the router. While this works for...

https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN

You will need to consult comcast support with questions related to it. This is mikrotik forum and it is not intended for unrelated topics. Sorry for this.

There is no hardware problem at all.

But you wanted to apply firewall rules to it, so I noted to you that such idea is not secure and the devices could easily have other ip addresses, or do other things that you cannot catch by the firewall in such scenario.

Correct assumption.

https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS#RouterOS_massive_auto-upgrade There should be possible to install custom default script during netinstall. Or you can put a RSC file with the script and reset the device with no defaults followed by automatic script running to set a device as ...

Don't mix lite, lit and lte.

Sxt lite5 could be used as point to point on both sides of the link. Maybe this is what you want to achieve...

Hope you had read the product information so you know what you bought and for what purpose.

I think it is not important how a device gets its ip address in this case. There are also other non-ip protocols... And whoever can connect whatever device at one single place which could be configured how he wants. Its just not secure at all. There is false presumption that the router could somehow...

If you believe so...

This is the question for a crystal ball.

Whatever could be wrong.

Your welcome.

But without vlans... Not a smart idea. Clients could talk together on L2 easily or decide to use other ip address on their own.

There is no security provided by this solution.

Could be by direct fixed assignment of ip address at the client or by dhcp according to known mac address of the client.

https://wiki.mikrotik.com/wiki/Manual:CHR#CHR_Licensing

Move ip address from ether2 to bridge. Make sure the administrative mac address of the bridge is not equal to ether1 mac address (should be like of ether2 for example). Switching off the hw acceleration of all bridge members could help too. Never return to quickset back once you set whatever outside...

Is this about WiFi? Or about the router/firewall? There are 4 cores, may happen that one is exhausted by something. See the profiler. If it is WiFi, check antennas, radio sensitivity tx power and general situation around both places of ap and the client. How do i check antenna and radio sensitivity...

Ok. And the rest? How it behaves without the capsman?

Is this about WiFi? Or about the router/firewall?
There are 4 cores, may happen that one is exhausted by something. See the profiler.
If it is WiFi, check antennas, radio sensitivity tx power and general situation around both places of ap and the client.

https://wiki.mikrotik.com/wiki/Manual:I ... ent#Option

Compare to server options...

Maybe there is another solution too... I can imagine to play with the timeouts or with allowing only single connection to the binding. But the situation is so difficulty reproducible for me that I decided not to waste the time further.

Otherwise you are right. The server should handle it.

Your welcome. I forgot this topic otherwise I would provide the workaround earlier. At least I mentioned it here four years ago...

These are parameters that clients provided to server during the dhcp communication. The content depends on the settings of the clients.
If you change it, it won't match to the clients request. Try it and see...

Perfect. Good job!

Stay with latest long term version and always read release notes before you decide to upgrade.

Even this still happens, I implemented dynamic connections removing script scheduled once per minute so this silly behavior doesn't bother me anymore.

/interface l2tp-server remove [/interface find dynamic]

The clients reconnect again immediately and get the static bindings correctly.

Why would you do it? I suggested to stay at latest long term which is 6.45.9 for now.

RMA.

But try the netinstall several times more and check you really set everything right in order to run netinstall correctly.

Use latest longterm version only if you want to be arleast somehow sure you did everything to prevent possible problems.

Like me at the moment. I'm in bed with some bronchitis... It's not even a weekend, it's end of summer holidays. So most likely this is the reason...

You misunderstood my question. It was aimed towards administrators, it was meant like who of the admins does care...

Me too. Who cares?

Rb750gr3 will not be able to pass gigabit thru under "normal" contions. It mostly depends on the rules complexity and other things you will set. If your rules allow to use fast track it will help a lot and I can imagine that you could get closer to the gigabit throughput.

Get familiar with mikrotik routerOS to see if you would like it. It depends only on you if your questions will be answered positively or not.

It's the opposite and it's been always like this (and confusing beginners). For example, if you do "ping some.hostname.tld" in terminal, it uses resolver on router and you'll see it added in cache. If you enter some.hostname.tld in Tools->Ping in WinBox, then it's WinBox doing the resolvi...

What is the advantage (uses of), "* added support for DNS names in address type fields;" ? It is a very nice addition and makes it easier to use external IP addresses in rules/line without first to have resolve it manually. It is a one-time-resolve and if you have to use dynamic then a ad...

There is additional custom user group with passive rights and dude connects by user which is member of that group. Dude is not connecting with admin rights to the devices.

The server works stable, but note that there is daily vacuum so the server is always stopped for few seconds while vacuuming and export is processed.

And it it keeps the connections with dude client for days. It also reconnects immediately when occasionally broken connection is restored.

I am not using invoking winbox from dude because I use special user with lowered rights for the the dude monitoring. Such user would be useless in winbox... And it works good without any obvious problems. Dude is also accepting syslog messages from the devices and store them as expected. I upgraded ...

How about to read the documentation or use Google for a while?

None can sell Internet as is. Anywhere.

If I understand well, you just want to make the media conversion from sfp to ethernet. Nothing more. All the other networking tasks should do the Asus, right? If so, 1) remove whole configuration from the mikrotik (will need to manage mikrotik over connected mac address after that) 2) make the bridg...

Rather run chr in virtual environment with dude.

Advice? Run cable between the devices.

With ease. Remove config, set WiFi, create bridge with administrative mac address of port 1, put all interfaces in it ,dhcp client on it and you have it. Just use non overlapping channels and the same security profiles.

Running dude on server and daily vacuuming are the most important things, I would say.

How the dude performs on 1100AH? I was testing the dude on RB2011 many years ago, but while I had an option to move it to virtualised environment, it finally started to work in usable way. Now I run it in hyper-v on single core of AMD Ryzen3 with some of 480GB RAM (Actually, 400MB would be enough), ...

Read release notes to v. 6.47! What's new in 6.47 (2020-Jun-02 07:38): Important note!!! - The Dude server must be updated to monitor v6.46.4 and v6.47beta30+ RouterOS type devices. - The Dude client must be manually upgraded after upgrading The Dude server. - The Dude requires "winbox" po...

Is there any reason to install other version than 6.45.9 (latest long-term) to your devices? Generally only long-term version is recommendable to be used in productive environment. All others are kind of beta/testing branches that are expected to have much more errors than long-term branch.

So I did a test for you. Upgraded one of disposable devices in my lab to 6.47.2 (RB333 model, PowerPC architecture).
The result in 6.46.6 Dude:

RB333 v-6-47-2 in 6-46-6 Dude.JPG

It is accessed both the winbox and SNMPv3 protocols without any problems from dude.

Normally pure bridge with the two ports you want to join together should be enough. Take care not to have any ip settings on that bridge or its members.

I am running dude in CHR 6.46.6 which is able to poll both newer and older ros versions. Subsequently upgrading all network devices to 6.45.9.

Sometimes you don't need to be bothered by someone who looks like a troll. Sometimes you can even enjoy it...

I wouldn't advice to anyone to use upnp. It is easy and it works but it opens security holes into otherwise safe network.

You can run only one connection with vpn to somewhere outside and let all those hidden connections to flow thru it into Internet from the other side...

Looks like I have problem to understand you. Could you please make a conceptual drawing what you want to achieve?

Do you want to bond the ports or to use them independently? I guess you mean the second case. According to the tests made by mikrotik it should manage that. Your configuration complexity will show if yes or not. And read well other threads here about the problems with the rb4011...

Indoor / outdoor any other requirements or constraints?
best is to have it outdoor but indoor can also fits fine

Thx

Then look at the sxt 2 https://mikrotik.com/product/RBSXTG-2HnDr2-168

You don't know why to use the "industry standards"? Look at money. They are not superoverpriced by an coincidence. There need to be a spare budget for bribes to the policians. You are not going to sell some boxes. The way how you do it should not be important if you guarantee the required ...

Dude can monitor its hosting routeros like any other routeros. No need for secondary installation.
Hope you pointed the installation to external storage otherwise you permanently damage your router soon. If you would like to use dude seriously, run it in virtualized CHR.

Moved to begginer basic...

Anyway its quite impossible to understand what you want to help with.

I am considering to give a chance to rb4011 and thinking about to buy some of them. When reading this and the second thread about the freezing of rb4011, I would like to know if it is really hardware problem or not. If yes then which serial number interval is affected and which for sure is not. I am...

Absolutely.

Use winbox and set or unset whatever speed advertisements you need.

You can also use unset command in cli.

None should use any other than long term version unless he knows what he does.

Definitely not true. I use that in 6.45.9 with winbox.

Get inspired from here...
https://wiki.mikrotik.com/wiki/Send_Backup_email

Just the file will have different name.

Go to wireless, switch to advanced mode, set regulatory domain, your county and then try to set antenna gain from 3 dB higher.

I cannot imagine how that script could ensure that no records would be lost. Isn't better to run local auxiliary syslog server nearby the monitored devices to prevent the communication outages and let the resending on it? Saving logs to usb and mailing the log files from device is much easier than s...

Create multiple security profiles and set them for each ssid individually.

Have you used Google? Which posts from this forum you have tried?
Are you sure this should be in swOS forum section?

Hello, I have installed newest available mikokrotik.mib file to the Dude ( https://wiki.mikrotik.com/wiki/Manual:SNMP#Management_information_base_.28MIB.29 ) but the SNMP walk reaches end of mib without displaying wireless values for WiFi interfaces of RBD52G. I can get some OIDs manually by try-fai...

Everytime you reset the configuration it gets the factory defaults. There is one exclusion, but I believe its not your case. Take advice. Forget about the defaults, remove the configuration and make whole settings you need from scratch. It's the best approach to have clean configuration with only th...

Mikrotik made an offer... Who decided to install? I have never seen an offer to upgrade the routerboard unless I checked the upgrade availability. Anyway. It's on you only what you do with your devices. If you do not understand what you do, consult manual, read forum or use Google. Every beginner's ...

Rbd52g works nicely too.

Those messages are lost.

You can log locally to a USB or sd card or sata drive if device supports it. Don't use internal flash for that.

Indoor / outdoor any other requirements or constraints?

In this case you had not any other option. I was always suspicious to many core cpu as routeros is not able to use them well. Single core performance is essential for it. But you were not able exhaust even one core by dns service and it was not able to work reliably even at that situation. The answe...

Absolutely. But note that forum is not a way how to get support from mikrotik. If you open a ticket directly at them with such description, they will ask you for access, maybe install the debugging package and try to find and correct the problem. At least this is my repeated experience with mikrotik...

Then you do well. It is nice toy to play in small installations.

Then I must apologise, obviously I am too late behind the development. I will stop transposing my experience from v6 to v7 and will wait till the moment when v7 will be called stable at least. Because otherwise it is too early for me to take care about it.

Maybe you are already at provider's speed limit...

I wonder why someone just throws something to a router an reboots. What prevents you from reading the release notes?

Your solution is to use netinstall, if all other options failed.

Put there the latest long-term version which is the 6.45.9 for now.

No. Especially if you use local forwarding instead of centralised forwarding to capsman. On the other side I would not use capsman for few clients at home. I don't see any important benefits from it, just putting another level of possible problems to your network. Keep the network simple, it will wo...

You can use whatever device with WiFi you like and can afford. Select according to WiFi radios, their channels and antenna types used in it. You just will reduce the power on WiFi using higher antenna gain value while in regulatory domain mode to restrict the interference.

Even poor admins should not restore backup on other device or version that differs from where it was made.

Indeed. There is no development in the dude. So no new features at all.

https://wiki.mikrotik.com/wiki/Manual:Tools/Profiler

Rbd52g is much more powerful than rb750gr3. Just try what you suggested and check the profiler when you see any performance problems.

This is the mikrotik forum, not related to openwrt. I am sorry, I please ask elsewhere.

I have been uselessly asking mikrotik to stop using the combined package and put only the essential packages directly into the routers during the manufacturing process for many years. They had never heard me.

Maybe he is free to change his wan ip... None could know.

I gave up with asking mikrotik to stop using combined package and to start with shipping the devices with the 3-4 essential packages only. Never mind. I am always starting with installation of those packages I need everytime I get new device. And I suggest the same to everyone.

True. I have been using it since some 5.x version. In chr instance for last five years or so. It quite works and is not loosing the custom added pictures at all.

Put there system package only, reboot and after then install other packages you need.

... And this answer I am getting about dude questions from mikrotik always. For many, many years.

Never use quickset after you set whatever outside the quickset menu. It is about to break something in your configuration.

Read this:
https://wiki.mikrotik.com/wiki/Manual:IP/Address

Impossible. If someone is admin, then he has all rights. There is no way to protect files individually.

Do you have an email response from support already?

What is the version? There might be some new revenue protection implemented recently by mikrotik...

Well, to use external flash memory is much wise than to use internal flash storage of a routerboard to store Dude database and files. At least you can simply replace it in case it breaks. If you will use good usb/mSD memory, heavily oversized with some wear leveling feature, it could be working for ...

It looks like I have found some long-term working solution to keep the dude run healthy. I sheduled this script to be run once a day: dude vacuum-db ; dude export-db disk2/dude-backup-9999-99-99.tgz After this the database is kept at roughly constant size and no coruption occured during last weeks. ...

2011uias has only one poe out port. Sum up the consumption of all devices and compare to the power supply.

Only db file.

Yes. The dude was not subject to change for few years and it seems mikrotik is not going to change anything on it in near future.

Just more expensive and less energy efficient option.

Sure. There is no change in dude for ages because mikrotik doesn't have available capacities. So the difference between the versions is just the number.

Normally you can freely downgrade but you need to count with the possibility of damaging the configuration so the full reset without defaults and subsequent import of previously exported config might be necessary. Think twice whether the corrected vulnerability is really applicable to your case so i...

Try this.
viewtopic.php?f=8&t=138716&sid=ee6e1c12 ... da#p736644

Anyway. I am not against the native Linux winbox at all, but please, in this case, keep native Windows winbox application side by side.

You don't need any switch if you use a router with enough ethernets. Hard to say what large means but smartly placed 4 cAPs could be perfect solution. Manage the prioritisation by queues in the router.

Router doesn't handle clients but manipulates with the packets. So what everything you expect it should do with them?

No need to ask every three months. Once per three years is more than enough.

The question is what everything needs the router to do. The 750gr3 could be enough on one side and ccr could have problems on other side.

Just to let you all know: SNMP v.3 problem with "unsupported v3 security level" error was already reported to Mikrotik with ticket number [Ticket#2019070422003642]. I have been asked for some additional information, I provided response, but after that no news. Hope Mikrotik is working on c...

I would expect a firewall in your computer is blocking newly downloaded program.

I would say that every contemporary mikrotik device is able to generate and dispatch 100mbit/s by udp btest. Just put there whatever is laying on the shelf unused.

There is only one vacuum command available so you cannot make a mistake. But it might not help at all. You have to try...

Use external memory only for Dude. Due to lifetime and speed and capacity too. If you wear internal flash you can just throw out your otherwise perfectly working device.

Guys. Are you talking about a router, right? Isn't it basic functionality of a router to forward packets between the connected networks? If so, I see at least three ways to solve the issue: 1 disable routing. 2 remove ip addresses from bridges. 3 implement blocking rules between the bridges. Of cour...

Use long term versions only. Stable means ready for public testing. Make your own tests on non productive device before you decide to upgrade so far well running device. Use partitions to be able switch the version to previous in case of any problems, because none can rely on downgrade.

We still do not know what are the performance expectations.

CHR on fast cpu core. Otherwise choose the device according to your performance requirements.

Maybe he saved login details in the winbox on his pc. Otherwise you need to reset the devices...

Finally the dude works again. Just for one hour so far, but even this is much longer than usual two minutes before... The dump import took around 10 hours. It was running on i7/SSD, not taking more than 2% of single cpu core. Really "effective" :-). Final db file is 0,25GB comparing to 1GB...

OK, looks I have some problems. When I do vacuum command, I get error message and subsequent dump creates zero sized file. sqlite> vacuum; Error: UNIQUE constraint failed: objs.id sqlite> .output dude.sql sqlite> .dump sqlite> Edit: looks like I moved forward, dump successfully ended, but reading th...

Not so long, though. That was the period the dude worked without an interrution just after switching it off and on until it has started to work just for 1 or two minutes only. I was thinking of manual reconstruction in new installation, but this looks like way lower amount of workload. The other thi...

This article helps me. Thanks author! CHR 6.43.4, 240 objects in DUDE. http://www.abit.ie/how_to_solve_dude_issue_with_database/ Thanks for hint, I will need to try this procedure also. Is there any long-term experience with this "solution"? Did it help for good or the error comes back af...

I have the same problems during the few last years. My database has fastly grown up, has around 1 GB, and is not able to run anymore longer than 2 minutes from dude restart. Then the dude stops with the database malfunction error message. Years ago I provided all the support (database, access to the...

By ip address. Maybe by common part of mac address...

Upgrade branch office connectivity to desired speed. You cannot use what you don't have.

Distance, fresnel zone, alignment, interference. You wrote nothing about them, but you are missing 10db of signal level. You cannot beat the physics by any parameters. You can lower the tx power if devices are too close, you can lower the modulation, you can use more narrow band or change the freque...

As a router go for rb 750gr3 or hap ac2. Whatever else mikrotik device with enough ethernets would do the load balancing at such speeds too, but these two are much more capable than they look like. Number of balanced wans is virtually not limited. For outdoor ap suggestion you need to provide more i...

This is the day we were looking for. If there are any memorable dates in the Mikrotikls history, don't forget to add this day to it.

Now the question is: When we will be able to install the first public version?

I have never had problem to unsubscribe. May happen the problem is specific to something unusual, but I used that feature many thousand times successfully, also during last five years.

I wrote nothing about netinstall. If it is remote installation, add eventually other one or two packages that are critically necessary to log in aside the single system package during the first installation process step. If you want to be sure that nothing bad happens, prepare second device and let ...

I would like to know how is it possible that new installation doesn't wipe the system files enough so there could remain some older residue that affect behaviour of the newer version.

Search found 7722 matches