MikroTik

dksoft

Hi Mikrotik-friends,

can please someone point me how to do dual WAN on IPv6?
E.g. on IPv4 is very simple by mangling the connection via the incoming interface and multiple routing tables.

On IPv6 I do not have any clue as there are no multiple routing tables.

Thanks and best regards,
dksoft

dksoft

Back to the initial topic that IPv6 is not resolved: it suddenly works.
I don't know why, but the public-address-ipv6 is now displayed and resolved.
It might be solved as I disabled and re-enabled the ip cloud ddns service as recommended in the Wiki.

Anyway, I am happy.

dksoft

Hi,

can please someone point how to configure the /ip cloud service to resolve IPv6 address?

I am running 6.43 on CHR and IPv4 resolves well. IPv6 is learned via DHCPv6 on the PPPoE interface where IPv4 is bound to.

Thanks,
dksoft

dksoft

Hi, I would like to ask if anyone has the same problem and might know a solution: Using CHR on Proxmox and the standard Linux bridge on the Proxmox hypervisor leads to the problem that EoIP is not working. So far I am able to torch that GRE packages are not passed through the Linux bridge to the CHR...

dksoft

Dear Mikrotik friends, I setup an EoIP tunnel between two CHR. Both endpoints are bridges. It's working fine. I can ping and transfer between the routers and the networks directly connected to the bridges. What I can not do is ping or reach a device inside the networks from outside, e.g. internet. W...

dksoft

Yes, it does support sending and receiving (/tool sms receive-enabled=yes). The port is what you named the interface in /interface. Make shure it's enabled. You can use this feature to remotely trigger your device to book a daily datarate via SMS and go online by sending a SMS to the device. That's ...

dksoft

Hi,

are there any examples available, how to setup a transparent HTTP proxy that works on IPv6 too?

Thanks,
dksoft

dksoft

I have been allocated a /56 IPV6 from my ISP... Michael, are you using Dt. Telekom? You must take care on the dynamic IPv6 prefix change (Zwangstrennung). It's better to internally address via ULA address. Also you must decrease the GUA lifetime by hand as RouterOS does not care about the lifetime ...

dksoft

deleted

dksoft

Hi,

is there any known plan, when the MUM USA videos will be available?

Thanks,
dksoft

dksoft

Hi,

on IPv4 I redirect port 444 to 443 in order make it harder to find my RouterOS login.
Can something equal be done with IPv6? E.g. I want to redirect all traffic from the WAN arriving on port 444 to 443 on my router?

Thanks,
dksoft

dksoft

I tried with 6.42rc56 and 6.42. It's no problem to additionally install the hotspot.npk even there is already the bundled one installed.

dksoft

Solved, netinstall did the trick.

dksoft

Hi, I accidentially installed the hotspot.npk. Now I have it twice, one bundled and one additionally installed. Trying to disable one or both, to uninstall them or to reset the configuration does not help. I loaded the 6.42 packages onto the disk's root directory and rebooted, also via Downgrade. 6....

dksoft

DELETED

dksoft

There is no need for scripting if you use ULA-addressing instead of GUA-addressing based on the IPv6 prefix from your ISP as ULA-addresses remain static. E.g. create an ULA-pool: /ipv6 pool add name=ULA-pool6 prefix=fd00::/64 prefix-length=64 Assign an address to your router: /ipv6 address add addre...

dksoft

Per CPU, I think. Check with
Code: Select all
/system resource irq print where users~"virtio"

Good tip, thanks.
It does automatically detect how many queues are configured. No need to change anything in RouterOS.

dksoft

*) chr - added support for "multi-queue" feature for "virtio-net" driver;
I've been waiting for this! Thanks!

Me too.
How do I tell RouterOS how many queues I have allocated on the hypervisor or does RouterOS set them equal to the number of CPU cores?

dksoft

*) chr - added support for booting from NVMe disks;

Does this mean, that RouterOS can now be installed on UEFI devices?

dksoft

For us it's usually SMB, we have had to return to 2.3. I can confirm the performance problem since 2.5. We read half the speed from a 10GB port than we can write. E.g. reading is about 50MByte/s, writing is > 100MByte/s. This is independend on the protocol. Appears on SMB, FTP, SFTP. According to M...

dksoft

There now is support for "band=5ghz-n/ac" in the GUI but none in the capsman GUI.

dksoft

We are aware of dhcp client problem on bridge interface, we will fix it in future RC versions. Disable/enable bridge or dhcp client and it will get an address. Thanks, I added this to make my CAPs work again: /system scheduler add name=DHCP-restart on-event=DHCP-restart policy=ftp,reboot,read,write...

dksoft

Anybody willing to share experiences with WAP AC vs CAP AC? I did a quick bench and the CAP AC is much faster running bandwidth test. But the WiFi throughput is about 30% poorer in my setup with a MacBook Pro (802.11ac only, 3 chain) with the CAP (802.11ac only, 2 chain) than the faster WAP (802.11a...

dksoft

What's new in 6.42rc37 (2018-Mar-01 09:29): Since rc35 CAPs do no longer get an DHCP IP-address if the DHCP client runs on a bridge. Disabling and enabling the bridge brings DHCP back into live. But after reboot DHCP client keep trying as before. The DHCP server does see a DHCP request and replies ...

dksoft

Seems partially fixed in 6.42rc9

I can not confirm that. Read speed went up from 25MByte/s to around 50MByte/s with 6.42rc* but it's still far away from 1GBit/s.
Write speed is at full speed.

dksoft

dksoft - Are you running CRS on SwOS or on RouterOS?

I tried both. RouterOS 6.40 - 6.41, SwOS from 2.3 - 2.7.
Configuration is reset to default after each update. So there are no firewall rules. All ports are switched.

dksoft

>*) crs326 - fixed packet processing speed on switch chip if individual port link speed differs; >*) crs326 - improved transmit performance from SFP+ to Ethernet ports; Sorry, I can not confirm this. Write performance is 105MByte/s, read performance is about 50MByte/s. It has increased from former v...

dksoft

That's a known problem.

RouterOS 6.41rc66 and the upcoming SwOS 2.7 do not fix it on my CRS326/CSS326.
You can downgrade to SwOS 2.3 or 2.4. This will restore performance but might put your router into an endless reboot loop if SFP+ is inserted at boot.

dksoft

Can you recommend a (german) retailer that has this SFP in stock?

Hi, send me an DM if you want to buy my SFP.

dksoft

Hi, you can do this by scripting. E.g. I change the IPv6 prefix for DNS and IPv6 firewall after every reconnect. Anyway you will run into the next problem, which is caused by Mikrotik's RADV implemenation. First ND advertises the DNS server set in "/ip dns", therefore you will not be able to use the...

dksoft

Does it work with German T-Com VDSL? Yes. You need to disable auto-neg, set 1Gb fixed and create an interface with VLAN ID 7. The "/interface dsl" menu is gone in 6.40.5 and 6.41rc56 on a CCR1009. Can someone confirm this? Transfer rates are rather pour. On a 100/40 VDSL I get: ZyXEL VMG1312-B30A: ...

dksoft

I just received an answer from Mikrotik support that the 10G<->1G performance issue will be fixed in the next release (current is 2.6).

dksoft

It‘s a known problem that ssh does not run from scripts. Regarding to Mikrotik Support this might be fixed in a further version of RouterOS.

dksoft

Ok, you are too late! I received one...
Does it work with German T-Com VDSL?

I am waiting for delivery and post results in about 10-14 days from now.

dksoft

They are available shipped from Germany, see above.

Thanks, due to current reconstructions the new link is: http://www.mikrotik-shop.de/Interfaces/ ... :2192.html
Currently (2017-11-14) out of stock. 10-14 days delivery.

dksoft

Hello!
I´m located in Austria and I also got a Procend 180T this Friday.
Klaus

Grüß Gott, Klaus!

Where did you order the part to be shipped to europe?

Best regards,
dksoft

dksoft

Currently ND and DHCPv6 advertise only the IPv6 DNS servers set in "/ip dns" which are the upstream DNS servers. Therefore it is not possible to use the internal RouterOS DNS server as IPv6 DNS server. Please make the DNS server configurable in the same way, as it's already done on the IPv4 DHCP ser...

dksoft

It would be great, if "/system ssh" would work again in scripts.
The problem ist known, that it works fine on command line, but fails in scripts.

dksoft

Hi, I am using 6.40.3 on CCR. When I enable "Advertise DNS" under IPv6, the upstream DNS server of the ISP is advertised and not the router's builtin DNS server. I would like to make static entries in my DNS server first and forward all unresolved to my ISPs DNS server. Actually as it works on IPv4....

dksoft

Yes, good idea. I implemented it the way, that each rule in the IPv6 firewall that has a magic ID "(PrEfIx)" in the comment get's updated by my script. The script is run by the DHCPv6 client whenever it renews it's IPv6 pool that I named "WAN-pool6". Here is my script. It's the first one I wrote. Ma...

dksoft

Hi, my ISP gives me a new prefix with every new connection. Therefore I do not have a static IPv6 address, that I could use in my firewall rules. Is there a way to have the firewall automatically extended the IPv6 address by the current prefix, so I only put the interface identifier into the firewal...

dksoft

I "torched" somewhat deeper into the problem and found that disabling "Allow Fast Path" on the CCR bridge that bridges my LAN and the CAPs solves the problem. Also "Local forward" on the CAPs solves the problem as expected, but I want to use the CAPsMAN forwarding. Yes, problem also appears with sta...

dksoft

Thanks for your reply. Below are my configurations. I noticed, that the CAPsMAN forwarding channel shuts down if I connect to the 2.4GHz network. When I connect to 5GHz, the channel works and the display "channel: 2412/20-Ce/gn(20dBm), SSID: MTIK-24, CAPsMAN forwarding" and "channel: 5180/20-Ceee/ac...

dksoft

Hi, I have a CCR1009 and several wap AC, all with 6.39RC72 and CAPsMAN. Clients can connect via 5GHz but not via 2.4GHz if the configuration is set via CAPsMAN. Clients do not get an IP address via DHCP. Using torch on the wap AC 2.4GHz interface, I can see that DHCP packages go and come from the CC...

dksoft

Hi, I setup the Mikrotik hotspot solution together with the Mikrotik User Manager but would rather use WPA Enterprise instead. Is there a HOWTO available, that shows how to use an iPhone with username/password (EAP-TLS ?) to logon to a RB751 that uses the Mikrotik User Manager for managing the users...

dksoft

A possible solution to this is to simply drop/reject all traffic from 10.1.1.0/24 to 192.168.1.0/24 (IP>Firewall; you'll need a forward chain rule) - make sure you first allow connections to 192.168.1.1, otherwise they'll get no internet.

This worked right away. Many thanks for your help!

dksoft

Hi, and welcome to all forum members as this is my first posting to the community. I setup a RB751 with two SSID. One is WPA protected and used to access to complete network. The other SSID is on a virtual AP and used as a hotspot with login. That works fine, but people which are connected to the ho...

Search found 47 matches