MikroTik

dksoft

Dear Mikrotik-lovers, I am using a CRS317r2 with ROS 4.68.1. The effect is that if I use S+RJ10r2 in them, I do see the temperature via DDM monitoring which leads to the problem that the fans run all of the time at 8000 rpm. The temperature at /system health gauges is always the highest of all insta...

dksoft

Dear Sindy,

thanks, it worked right away and is exactly what I was looking for!

Do I understand correctly that this solution does not support road warriors unless I find a method to set the actual peer address before the client connects?

dksoft

Dear Mikrotik friends,

is there a way to define the Proposal and Profile when using EOIP with IPSEC?
My understanding is that the EOIP/IPSEC initiator automatically uses the setting based on the responder's default settings.

Thanks for your input
dksoft

dksoft

I would like to ask a question about the "Huawei MA5671A GPON ONU" Is the GPON SFP module currently working in your GPON network ? How long has it been on-line ? Is it mounted outside in a Nema air-tight enclosure ? Yes, works on FTTH Deutsche Telekom in Germany. A couple of days. Others ...

dksoft

Your RX power is a bit high and are all connectors all pushed full in. Dear msatter, thanks for answering and pointing me to the RX power. Which value do you expect here? I replaced all my fiber cables and nothing changed. Also I replaced the Huawei SFP by a CarlitoxxPro V2. The CarlitoxxPro works ...

dksoft

Dear Mikrotik-lovers, is anyone able to run a Huawei MA5671A GPON ONU with 2.5 GBit/s in the SFP+ port of a RB4011 or CRS328? Mine is only connecting at 1.0 GBit/s: /interface ethernet monitor s04-GPON-ONU name: s04-GPON-ONU status: link-ok auto-negotiation: done rate: 1Gbps full-duplex: yes tx-flow...

dksoft

How exactly you do it? This works, I hope it's the Mikrotik way: /ip firewall mangle add action=mark-connection chain=prerouting comment="Mark outgoing Amazon AWS connection" connection-mark=no-mark connection-state=new \ dst-address-list=AmazonAWS new-connection-mark=WAN2_con passthrough...

dksoft

Dear forum members, I would like to mark traffic that goes to Amazon AWS, e.g. github-production-release-asset-2e65be.s3.amazonaws.com, so that routing goes throw my second WAN. Usually I use an address list and then mark the traffic via a mangle rule. The problem with Amazon AWS is that the IP-addr...

dksoft

Dear Mikrotik-friends,

may somebody please point me to a passive 12V PoE splitter, that works on the RB4011 and supports 1GBit?
So far I can only find 1G devices based on 802.3xx, 1G passive with 24V or 12V devices that connect only with 100M.

Thanks for you help and best regards
dksoft

dksoft

Dear Metod, thank you very much again. I am happy with your help and solution. Now I stripped down my bridges from 5 to 1 and your security tip is very usefull as I have not though about that problem. Best regards, dksoft Update: 2020-09-03 13:15 I made one essential addition, which is to set the EO...

dksoft

Dear mkx, thank you very much for pointing me to that document and creating the configuration. It works perfectly! May I asked another question about bridging an EOIP interface into VLAN 400 and getting an IP address for the router? My understanding is that a transparent bridge, as below, is the rec...

dksoft

Dear Mikrotik-lovers, reading the "Layer2 misconfiguration" paper, I understand that my configuration may lead to problems as I bridge VLAN interfaces instead of using the VLAN filter option. May someone please translate my current configuration into a "new-style" VLAN filter con...

dksoft

Dear eworm and Sob,

thanks for looking after my problem so quickly.
In the meanwhile I implemented "@eworm's IPv4-mapped address" solution. So far this works perfectly. I will do more testing and come back if anything fails to update the status.

Thanks again for your help,
dksoft

dksoft

Hi, with 6.47.1 there was a change "*) dns - do not allow setting zero value IP addresses for "A" and "AAAA" records;" in the DNS which is causing me a problem. On 6.47 I was able to set an AAAA record with zero IP address and the DNS replied with an NXDOMAIN. Thus I wa...

dksoft

Dear Mikrotik lovers, when I set "Basic Rates" and "Supported Rates" to a value of 12Mbps on g/n and 24Mbps on ac, it's ignored at the CAP. E.g. I can see that the CAP starts at 6Mbps. Is there any reason or regulation, why the settings are ignored? Thanks for you help and best r...

dksoft

Hi Mikrotik-friends,

can please someone point me how to do dual WAN on IPv6?
E.g. on IPv4 is very simple by mangling the connection via the incoming interface and multiple routing tables.

On IPv6 I do not have any clue as there are no multiple routing tables.

Thanks and best regards,
dksoft

dksoft

Back to the initial topic that IPv6 is not resolved: it suddenly works.
I don't know why, but the public-address-ipv6 is now displayed and resolved.
It might be solved as I disabled and re-enabled the ip cloud ddns service as recommended in the Wiki.

Anyway, I am happy.

dksoft

Hi,

can please someone point how to configure the /ip cloud service to resolve IPv6 address?

I am running 6.43 on CHR and IPv4 resolves well. IPv6 is learned via DHCPv6 on the PPPoE interface where IPv4 is bound to.

Thanks,
dksoft

dksoft

Hi, I would like to ask if anyone has the same problem and might know a solution: Using CHR on Proxmox and the standard Linux bridge on the Proxmox hypervisor leads to the problem that EoIP is not working. So far I am able to torch that GRE packages are not passed through the Linux bridge to the CHR...

dksoft

Dear Mikrotik friends, I setup an EoIP tunnel between two CHR. Both endpoints are bridges. It's working fine. I can ping and transfer between the routers and the networks directly connected to the bridges. What I can not do is ping or reach a device inside the networks from outside, e.g. internet. W...

dksoft

Yes, it does support sending and receiving (/tool sms receive-enabled=yes). The port is what you named the interface in /interface. Make shure it's enabled. You can use this feature to remotely trigger your device to book a daily datarate via SMS and go online by sending a SMS to the device. That's ...

dksoft

Hi,

are there any examples available, how to setup a transparent HTTP proxy that works on IPv6 too?

Thanks,
dksoft

dksoft

I have been allocated a /56 IPV6 from my ISP... Michael, are you using Dt. Telekom? You must take care on the dynamic IPv6 prefix change (Zwangstrennung). It's better to internally address via ULA address. Also you must decrease the GUA lifetime by hand as RouterOS does not care about the lifetime ...

dksoft

deleted

dksoft

Hi,

is there any known plan, when the MUM USA videos will be available?

Thanks,
dksoft

dksoft

Hi,

on IPv4 I redirect port 444 to 443 in order make it harder to find my RouterOS login.
Can something equal be done with IPv6? E.g. I want to redirect all traffic from the WAN arriving on port 444 to 443 on my router?

Thanks,
dksoft

dksoft

I tried with 6.42rc56 and 6.42. It's no problem to additionally install the hotspot.npk even there is already the bundled one installed.

dksoft

Solved, netinstall did the trick.

dksoft

Hi, I accidentially installed the hotspot.npk. Now I have it twice, one bundled and one additionally installed. Trying to disable one or both, to uninstall them or to reset the configuration does not help. I loaded the 6.42 packages onto the disk's root directory and rebooted, also via Downgrade. 6....

dksoft

DELETED

dksoft

There is no need for scripting if you use ULA-addressing instead of GUA-addressing based on the IPv6 prefix from your ISP as ULA-addresses remain static. E.g. create an ULA-pool: /ipv6 pool add name=ULA-pool6 prefix=fd00::/64 prefix-length=64 Assign an address to your router: /ipv6 address add addre...

dksoft

Per CPU, I think. Check with
Code: Select all
/system resource irq print where users~"virtio"

Good tip, thanks.
It does automatically detect how many queues are configured. No need to change anything in RouterOS.

dksoft

*) chr - added support for "multi-queue" feature for "virtio-net" driver;
I've been waiting for this! Thanks!

Me too.
How do I tell RouterOS how many queues I have allocated on the hypervisor or does RouterOS set them equal to the number of CPU cores?

dksoft

*) chr - added support for booting from NVMe disks;

Does this mean, that RouterOS can now be installed on UEFI devices?

dksoft

For us it's usually SMB, we have had to return to 2.3. I can confirm the performance problem since 2.5. We read half the speed from a 10GB port than we can write. E.g. reading is about 50MByte/s, writing is > 100MByte/s. This is independend on the protocol. Appears on SMB, FTP, SFTP. According to M...

dksoft

There now is support for "band=5ghz-n/ac" in the GUI but none in the capsman GUI.

dksoft

We are aware of dhcp client problem on bridge interface, we will fix it in future RC versions. Disable/enable bridge or dhcp client and it will get an address. Thanks, I added this to make my CAPs work again: /system scheduler add name=DHCP-restart on-event=DHCP-restart policy=ftp,reboot,read,write...

dksoft

Anybody willing to share experiences with WAP AC vs CAP AC? I did a quick bench and the CAP AC is much faster running bandwidth test. But the WiFi throughput is about 30% poorer in my setup with a MacBook Pro (802.11ac only, 3 chain) with the CAP (802.11ac only, 2 chain) than the faster WAP (802.11a...

dksoft

What's new in 6.42rc37 (2018-Mar-01 09:29): Since rc35 CAPs do no longer get an DHCP IP-address if the DHCP client runs on a bridge. Disabling and enabling the bridge brings DHCP back into live. But after reboot DHCP client keep trying as before. The DHCP server does see a DHCP request and replies ...

dksoft

Seems partially fixed in 6.42rc9

I can not confirm that. Read speed went up from 25MByte/s to around 50MByte/s with 6.42rc* but it's still far away from 1GBit/s.
Write speed is at full speed.

dksoft

dksoft - Are you running CRS on SwOS or on RouterOS?

I tried both. RouterOS 6.40 - 6.41, SwOS from 2.3 - 2.7.
Configuration is reset to default after each update. So there are no firewall rules. All ports are switched.

dksoft

>*) crs326 - fixed packet processing speed on switch chip if individual port link speed differs; >*) crs326 - improved transmit performance from SFP+ to Ethernet ports; Sorry, I can not confirm this. Write performance is 105MByte/s, read performance is about 50MByte/s. It has increased from former v...

dksoft

That's a known problem.

RouterOS 6.41rc66 and the upcoming SwOS 2.7 do not fix it on my CRS326/CSS326.
You can downgrade to SwOS 2.3 or 2.4. This will restore performance but might put your router into an endless reboot loop if SFP+ is inserted at boot.

dksoft

Can you recommend a (german) retailer that has this SFP in stock?

Hi, send me an DM if you want to buy my SFP.

dksoft

Hi, you can do this by scripting. E.g. I change the IPv6 prefix for DNS and IPv6 firewall after every reconnect. Anyway you will run into the next problem, which is caused by Mikrotik's RADV implemenation. First ND advertises the DNS server set in "/ip dns", therefore you will not be able ...

dksoft

Does it work with German T-Com VDSL? Yes. You need to disable auto-neg, set 1Gb fixed and create an interface with VLAN ID 7. The "/interface dsl" menu is gone in 6.40.5 and 6.41rc56 on a CCR1009. Can someone confirm this? Transfer rates are rather pour. On a 100/40 VDSL I get: ZyXEL VMG1...

dksoft

I just received an answer from Mikrotik support that the 10G<->1G performance issue will be fixed in the next release (current is 2.6).

dksoft

It‘s a known problem that ssh does not run from scripts. Regarding to Mikrotik Support this might be fixed in a further version of RouterOS.

dksoft

Ok, you are too late! I received one...
Does it work with German T-Com VDSL?

I am waiting for delivery and post results in about 10-14 days from now.

dksoft

They are available shipped from Germany, see above.

Thanks, due to current reconstructions the new link is: http://www.mikrotik-shop.de/Interfaces/ ... :2192.html
Currently (2017-11-14) out of stock. 10-14 days delivery.

dksoft

Hello!
I´m located in Austria and I also got a Procend 180T this Friday.
Klaus

Grüß Gott, Klaus!

Where did you order the part to be shipped to europe?

Best regards,
dksoft

dksoft

Currently ND and DHCPv6 advertise only the IPv6 DNS servers set in "/ip dns" which are the upstream DNS servers. Therefore it is not possible to use the internal RouterOS DNS server as IPv6 DNS server. Please make the DNS server configurable in the same way, as it's already done on the IPv...

dksoft

It would be great, if "/system ssh" would work again in scripts.
The problem ist known, that it works fine on command line, but fails in scripts.

dksoft

Hi, I am using 6.40.3 on CCR. When I enable "Advertise DNS" under IPv6, the upstream DNS server of the ISP is advertised and not the router's builtin DNS server. I would like to make static entries in my DNS server first and forward all unresolved to my ISPs DNS server. Actually as it work...

dksoft

Yes, good idea. I implemented it the way, that each rule in the IPv6 firewall that has a magic ID "(PrEfIx)" in the comment get's updated by my script. The script is run by the DHCPv6 client whenever it renews it's IPv6 pool that I named "WAN-pool6". Here is my script. It's the f...

dksoft

Hi, my ISP gives me a new prefix with every new connection. Therefore I do not have a static IPv6 address, that I could use in my firewall rules. Is there a way to have the firewall automatically extended the IPv6 address by the current prefix, so I only put the interface identifier into the firewal...

dksoft

I "torched" somewhat deeper into the problem and found that disabling "Allow Fast Path" on the CCR bridge that bridges my LAN and the CAPs solves the problem. Also "Local forward" on the CAPs solves the problem as expected, but I want to use the CAPsMAN forwarding. Yes,...

dksoft

Thanks for your reply. Below are my configurations. I noticed, that the CAPsMAN forwarding channel shuts down if I connect to the 2.4GHz network. When I connect to 5GHz, the channel works and the display "channel: 2412/20-Ce/gn(20dBm), SSID: MTIK-24, CAPsMAN forwarding" and "channel: ...

dksoft

Hi, I have a CCR1009 and several wap AC, all with 6.39RC72 and CAPsMAN. Clients can connect via 5GHz but not via 2.4GHz if the configuration is set via CAPsMAN. Clients do not get an IP address via DHCP. Using torch on the wap AC 2.4GHz interface, I can see that DHCP packages go and come from the CC...

dksoft

Hi, I setup the Mikrotik hotspot solution together with the Mikrotik User Manager but would rather use WPA Enterprise instead. Is there a HOWTO available, that shows how to use an iPhone with username/password (EAP-TLS ?) to logon to a RB751 that uses the Mikrotik User Manager for managing the users...

dksoft

A possible solution to this is to simply drop/reject all traffic from 10.1.1.0/24 to 192.168.1.0/24 (IP>Firewall; you'll need a forward chain rule) - make sure you first allow connections to 192.168.1.1, otherwise they'll get no internet.

This worked right away. Many thanks for your help!

dksoft

Hi, and welcome to all forum members as this is my first posting to the community. I setup a RB751 with two SSID. One is WPA protected and used to access to complete network. The other SSID is on a virtual AP and used as a hotspot with login. That works fine, but people which are connected to the ho...

Search found 62 matches