MikroTik

toxicfusion

I will not use UBT products, however it is nice to see them finally releasing needful features. It would be nice to see MikroTik also do the same......

We also use Fortigates and the SSL decrypt, etc.

Camibum NSE is also soon to be doing auto-VPN to other NSE appliances [Same as Meraki Auto-VPN].

toxicfusion

Hello, Anyone else nervous about MikroTik future with routers / firewall appliances. Yes, "route the world", but we've been begging and asking for USEFUL features and MikroTik keeps falling short... Such as... ROSE..... why?! Look -- UBT just released Unif Networks 9.0.. [https://blog.ui.c...

toxicfusion

The frustrations here is that we all feel MikroTik is taking the wrong direction for security and function. Do some market research what other vendors have done or are currently doing with success. Why reinvent the wheel? soho/consumer product lines: hAP and similar - "lock" to WebFig and...

toxicfusion

The frustrations here is that we all feel MikroTik is taking the wrong direction for security and function. Do some market research what other vendors have done or are currently doing with success. Why reinvent the wheel? soho/consumer product lines: hAP and similar - "lock" to WebFig and ...

toxicfusion

@ Normis mine is a question without controversy. It seems clear that Mikrotik is focusing on the domestic market and I can only be pleased about this, personal opinion. Have you ever thought of dividing ROS into an Enterprice branch and a Home branch, the latter with only the minimum packages (DLNA...

toxicfusion

at some point we had to deploy around 800 cap ac for a hotel. of course managed by capsman. so with the old v6 ros, this was done in a few days, just resetting the new device and upload a minimal config that would set a few things took us around 1.5 - 2 min per device. imagine now with DEVICE PASSW...

toxicfusion

or for us to test these new beta releases and improvements. Could MikroTik instead fork the releases into different types

IE:
7.17rc release with "security/lock-down mode"
7.17rc release without lock-down mode, but contains all new improvements,fixes, enhancements. etc

toxicfusion

- Develop a damned cloud portal for us "enterprise" [IT/MSP/WISP/Enterprise/Professional] for us to manage and provision XYZ devices [Pro/Enterprise] type of hardware MikroTik develops. This would create the added layer of security cloud and security. lol. keep your enterprise stuff. Ther...

toxicfusion

my knee jerk reaction, and I will keep bringing this up until I'm blue in the face. IF team MIKROTIK is LISTENING..... - Develop a damned cloud portal for us "enterprise" [IT/MSP/WISP/Enterprise/Professional] for us to manage and provision XYZ devices [Pro/Enterprise] type of hardware Mikr...

toxicfusion

I must say. if MIkroTik would ADOPT a CLOUD provisioning portal for us WISP/SOHO/Enterprise - make it licensed or free. This would ALL be resolved. We can register the serial and then perform the configuration. That way device is locked to a controller or management, locally made changes will not pe...

toxicfusion

first time seeing the DEVICE MODE. upgrading from beta2, this was a nightmare. it didn't want to upgrade by simply copying the npk into files. when i wanted to reboot it into netinstall - it said DEVICE MODE doesn't allow me to do it ! after checking which device mode i'm in - i'm in advanced mode....

toxicfusion

This will for sure be a controversial topic, and mostly based on how I feel at this time. I feel MikroTik should shift their priorities and focus on hardware and verticals . Given the current state of their technology and shit show with their current wireless products, IE: Outdoor AX and AX drivers ...

toxicfusion

Yep you can disagree with me anytime but it's happening, we can no longer wait for mikrotik to mature its routing and switching portfolio our company is now restructuring the team willing to let go some MT engineer not willing to be re-assigned or adapt other platform, MT not wanting to spend devel...

toxicfusion

in your radio configuration, change what you have defined for frequency
you specified 5200-5800

replace with

5180 [new line]
5240
5765

Also set DFS to SKIP ALL.

Try the 5180, or 5240 frequencies.

toxicfusion

Hello, Since routerOS 7, it is paintful and a PITA to perform WAN failover with two circuits. In ROS 6, we could rely on ip route gateway weights and or blackhole address, along with ICMP ping to gateway. Has anyone or MikroTik tried WAN failover by using ARP? If not ARP reply from destination gatew...

toxicfusion

Still issues here as well. Open ticket with MIkroTik. I have a SUP and they finally responded with some bullshit reply. There is an issue and they refuse to take it seriously.

toxicfusion

Finally, the long awaited wAP AX product. However, let’s hope MikroTik can release the needed AX driver improvements on their next ROS release...................... (edited - typed cAP instead of wAP)

toxicfusion

There a problem with the new MikroTik AX outdoor APs. I have the mANTBox 15AX and poor performance this replaced an older 15 AC antenna and coverage is terrible. Submit ticket to MikrotTik or post your config here. I assume same config used from prior antenna? Be sure country is set as well as anten...

toxicfusion

This is all fault of MikroTik's leadership and decision making / vision. This "one product for everyone" agenda for ALL markets. The device hardware is quite decent, RouterOS is swiss-army knife with full features. This allows multiple use-cases, from homelab - SOHO/SMB/Enterprise/WISP/ISP...

toxicfusion

ok, the main points of what I was proposing to ease this transition: On first upgrade to 7.17, or initial power-on or netinstall with 7.17+ Display or have available (/system/routerboard/get device-token) a secure device token string for a limited period of time (30 minutes) The admin can copy this...

toxicfusion

I started out writing a long comprehensive list of concerns i had over the direction of RouterOS in the last couple of years, but decided that most wouldn't really bother reading it :) In summary I hope that Mikrotik will understand that most implementations of the CCR/CRS range of devices are not ...

toxicfusion

You’re complaining the cheaper product isn’t keeping up with a more expensive product? I think that what was really meant is that the (admittedly cheaper) Mikrotik environment (hardware+software) is not keeping up with some more expensive product (which is expected and OK) but also misses in practi...

toxicfusion

More than just wifi. We've already started moving to another vendor for AX. RouterOS7 still lacking refinement of many other requested features [Layer3, MLAG enhancements, etc]. But is "good enough" for majority of our needs. For our larger customers than require enterprise customers, SLA'...

toxicfusion

Hi MikroTik Team & others.. My personal knee jerk reaction to MikroTik at this time... STOP the crap with RouterOS Enterprise. WHY?! What is this drive and business decision to pull development resources to these "enterprise" features baked into RouterOS and or for Routerboard hardware...

toxicfusion

I really dont understand why MikroTik is waiting development time by implementing these Linux features into RouterOS and calling it RouterOS Enterprise. They should instead pivot and properly rename for MikroTIK NAS or MikroTik EnterpriseOS..... [Not RouterOS]. Why do we need our routers performing ...

toxicfusion

I appreciate MikroTik here [normis] taking the time to provide detailed replies, taking time to try to answer question and make points. Obviously there is passion here and defending. I mentioned this before in another general topic/thread. I FEEL MikroTik SHOULD shift to soho/pro/enterprise product ...

toxicfusion

also to MikroTik -- Given the backup partition. All this new work been done in release and Winbox4. Why hasnt more work been done on CAPsMAN? IE: Config sync to secondary/failover CAPsMAN "controllers". I hope there is now concurrent development teams within. Application team: Winbox, cont...

toxicfusion

I feel there should be a line in sand drawn -- more advance notice to community. I suppose, this is their advanced notice - by placing it in a Beta release. Or, they draw the line to hAP level devices for this type of default "advance-mode". Then Put "enterprise-mode" on the Pro/...

toxicfusion

According to the wiki, Quectel's 5g modems would be supported and, for example, Quectel's rm520ngl would be functional. My intention is to install the L23UGSR-5HaxD2HaxD outside, where can I find a suitable case for it https://help.mikrotik.com/docs/display/ROS/Peripherals take a look at enclosures...

toxicfusion

No 5G outdoor cellular modems from MikroTik at this time. There are outdoor 4G LTE available, SXT or wAP enclosure options, etc. Or you have to build your own using a 3rd party enclsoure. We've had some success with MikrotTik 4G LTE for some customers. [ATT]. However, been moving outdoor cellular ba...

toxicfusion

To import an existing adresses.cbd on MAC OS you have to put addresses.cbd (or a link to it) here: /Users/<user>/Library/Application Support/MikroTik/WinBox First, thank you for being the only one so far to even attempt to provide this explanation lucidly for MacOS. But I still can't get it to work...

toxicfusion

Can you add the group & note back in select from saved?
It's more user-friendly to sort items when we have too many saved sessions.
2024-09-26_17-01-23.png

I vote this as well.

toxicfusion

Wishlist -- or another vote for - [MacOS] Escape key to close front open windows. Move the undo,re-apply and safe mode options back to LEFT side of window Move Workspaces to right side. Bring back tabbed configuration options for interfaces, firewall, etc. [Dislike the Webfig style drop navigation] ...

toxicfusion

STABLE IS IT! 09:19:57 wireless,info 6C:A1:00:23:77:DE@cap-wifi1 disconnected, SA Query timeout, signal strength -65 09:19:57 wireless,info 6C:A1:00:23:77:DE@wifi2 connected, signal strength -84 09:20:39 wireless,info 6C:A1:00:23:77:DE@wifi2 disconnected, SA Query timeout, signal strength -82 09:20...

toxicfusion

I echo these statements. Deployed mANTBox 15 ax to replace an existing "AC" Wifi5 Access point that took a lightning hit. The mANTBOx 15 AX is poor replacement.

Appears antenna-gain related issue with RouterOS

toxicfusion

running beta6 on macOS14.6.1 for three days now, getting used to the new look & feel. 1. had a crash when I first saved a workspace. 2. red font in dark mode is nigh unreadable (37" 3440x1400px, no scaling) 3. all fonts appear oversoftened and take a lot more effort to scan across compared...

toxicfusion

preach...... we're still software limited by Mikrotik with them using the newer qualcom drivers. We had to roll back the AC access points - removing the wifi-qcom-ac package and revert back to wireless package. The qcom-ac was not stable in a production environment. Devices would not stay connected....

toxicfusion

Yeah, and these consumer "non enterprise" type devices typically "just work". The overload of features put bad taste in mouth for new users who are not privy to networking or willing to learn new network OS... Its that MikroTik gives us the entire toolbox [awesome] for us power-u...

toxicfusion

Oddly enough -
https://help.mikrotik.com/docs/display/ROS/Device-mode

[admin@MikroTik] > system/device-mode/print
mode: enterprise

interesting. Perhaps MikroTik is already been thinking they need to segment in some manner.

toxicfusion

Hello, Appears Auvik has finally released their collector to support ARM64 based containers. Anyone have any spare ARM64 based routerboards available to test this one? IE: RB5009 device? This would make an awesome all-in-one collector for some MSP's or solution providers. https://hub.docker.com/r/au...

toxicfusion

Gave up on waiting a long time ago...
PXL_20240813_152803208.jpg
PXL_20240813_152748212.jpg

We are in the beginning stages of giving up. First step is acceptance lol? We've had enough.

toxicfusion

For us partners – would MikroTik consider investing and offering paid training or e-learning classes? Let us enroll as partners, this will further expand what MikroTik can offer. This can also be revenue generating for MikroTik for their partner program - Additional layer to the "MikroTik certi...

toxicfusion

Tend to agree with @StubArea51 and others. But where I'd agree with OP is the area of "policy". It's often not granular/flexible enough to deal with some kinds of deployment (i.e. where you might have some "customer" account as well as the "admin" one). And while "...

toxicfusion

I feel at times, MikroTik hardware is limited by their software. Constantly dishing out low cost hardware can lead to software QC issues. I feel the hAP or other lower end routerboards fill a niche right now with features/performance/price. yeah, Run MPLS or OSPF on a hAP or low end routerboard for ...

toxicfusion

Azure is another beast. You'll need to check your NSG rules within Azure for your firewall rules.

toxicfusion

great job! I will give this a try and add a few of our routers that we manage. This is above and beyond what say Splynx can do

.

Perhaps MikroTik will take note of this and use to build their own. Or they leverage your source-code to build their own cloud manager.

toxicfusion

It is our opinion and suggestion that MikroTik should maybe consider splitting out product lines. The 'hAP series" be geared toward home users and lock to only be configurable using the MikroTik application [mobile app]. All the 'hAP' series be coded within Winbox to lock out users and refer to...

toxicfusion

Can you post your config export?

Be sure you have your Country / Region set. What 5Ghz Frequency are you using? I believe 5220 is MikroTik "sweet spot". Lastly, since newer 7.13? release -- you have to manually configure distance value.

toxicfusion

Sorry, but ROSE is clearly not enterprise feature ...
https://help.mikrotik.com/docs/display/ROS/ROSE-storage

ROSE (RouterOS Enterprise) package adds
... and the 2024 award for the most inaccurate package name goes to ...

The point I was trying to make

.

toxicfusion

But hardware costs explode for supporting an POE standard according to Normis stated somewhere in this forum. Yep, a decision to make: loose professional customers or raise retail price by 5$.... The cost doesn't matter at all, if the thing doesn't work. This is 100% facts and truths... MikroTik ne...

toxicfusion

We're unsure what is causing the disconnects. All we are seeing is the clients connectivity is not stable to the AP(s) when running qcom-ac package. The clients connect for ~~1min and eventually disconnect. Rolling disconnects from the same MAC to same AP, all with OK signal strength of ~~68-73Dbi. ...

toxicfusion

Understood and great point. Our reason was to consolidate to the new WiFi [wave2] menu's and configuration for MikroTik. We had to install a new mANTBox AX [new outdoor AX] as the existing ones are discontinued. This created configuration nightmare with two different area's to provision and check cl...

toxicfusion

Appears to have best practice, we need to enable FT AND configure connection-priority. FT is not enabled by default. So you are opting in and then complaining about incompatibility? Not the right approach. Every time I get to some public space (hotel, camping site, etc.) I do a wifi scan using Anal...

toxicfusion

Toxicfusion. Get off the fence. It's nice over on this side. Not having to constantly deal with complaints. Plus if you are doing campgrounds... Mikrotik has no answer for the XV2-2T. I know. I know.... We're in situation where we can pivot due to recent storm taking out some wAPS and mANTBox, alon...

toxicfusion

Hello, We've been trying to sort through issues since upgrading above RouterOS 7.12... We're on 7.15.3 for a customer and apear to have teething issues. MikroTik documentation has gotten better, but there is still alot of "sink or swim" mentality with 'Tik. They give us everything that we ...

toxicfusion

@Robtor - thanks for sharing this information.

it is very unclear and yet to be documented "feature" regarding the Provisioning functionality. It does not do what we logically think it'll do, so why is the Provision function there?

toxicfusion

I feel MikroTik needs to do futher testing in their lab, or we continue to send supout files. Clients are being disconnected during reselect-interval; there is no real background scan being performed... Also. wifi-qcom-ac driver package we feel is not as stable as the regular wireless package [WiFi5...

toxicfusion

Following....

between the dynamic VLAN issue when using qcom-ac [wave2] drivers on IPQ-4019, and this -- we're frustrated.

toxicfusion

Will see, but I am doubtful of 7.16 fixing this issue at this time. I feel MikroTik is still figuring out the Qualcom drivers... :( I think this fix for *) Wifi - added "slave-name-format" is for applying proper name to dynamic interfaces. I am specifying 2G-%I or 5G-%I for the interfaces....

toxicfusion

I echo what @Robtor says.

I have open ticket(s) with MikroTik support regarding this issue. Can others also open tickets regarding the wifi-qcom-ac and the dynamic wlan issue?

toxicfusion

I've resorted to removing the wifi-qcom-ac drivers and going back to the original WiFi5. Too many issues, and the CAPS became unstable with wireless connections to end-users / devices. Also, when you "provision" the CAP via CAPsMAN -- it causes the CAP WLAN interface to increment and break...

toxicfusion

I will also chime in and mention we're also experiencing Wireless stability issues since upgrading CAPS to 7.15.3, up from 6.49.X [legacy??] routerOS.... Clients appears to be constantly connecting/disconnecting. We're going to try downgrading to 7.14.X build to see if alleviates. if not, we're roll...

toxicfusion

But yet, when I was "testing" the Datapath setting in CAPsMan for sending VLAN-ID.. it works-- the cap running qcom-ac driver receives it on the bridge interface and a PVID is set... However, CAPsMAN complains. MikroTik Documentation states that is invalid configuration. So do I correctly...

toxicfusion

We're also seeing the same issue with newly deployed mANTBOX 52s AX sectors. RouterOS 7.15 setting antenna-gain=0. Unsure if it is specific to new AX boards, or RouterOS 7.15.3 release. As we installed qcom-ac-drivers on IPQ-4019 boards and our antenna-gain value was wiped out for NetMetals and Sect...

toxicfusion

Excellent work gotsprings -- very HOT install ;) I have the Cube60G's in production for a customer, very similar distance. I will need to login to get RSSI and link info again [been awhile]. Numerous heavy rain storms and winter here in Upstate NY. Question: On the usage of the Mikrotik QMP mount......

toxicfusion

I'm also experiencing this same issue. Followed MikroTik documentation within their Wiki, and even adjusted the CAPsMAN provisioning to be "create enabled" instead of "create dynamic enabled". When "pushing" new config, or re-provisioning the CAP running qcom-ac driver,...

toxicfusion

Hello, We're trying / testing out installing the newer wave2 qcom-ac driver on compatible ARM access points with the IPQ-4019 chipset. Successful installing and getting them configured with WiFi [Wave2] CAPsMan. However, not without issues. Anyone successfully using qcom-ac drivers with multiple SSI...

toxicfusion

I concur with this. We have several campground customers that were on rOS 6.0 with HTTPS-Redirection, and zero issues - just worked. This is with using external captive portal or hotspot providers. Bring back HTTPS-Redirect in rOS 7.X..... This is causing havoc with our customers and they're wanting...

toxicfusion

Especially complicated when the vlan bridge method changed to be more CPU bound [all vlan bridge], instead of relying on switch chip [specfic models]. Wait, what????.... Old switch menu is horrible. Bridge menu isn't the best and it does not automatically handle certain capabilities in hardware acr...

toxicfusion

Id be very much against a split segment model One of the best parts of MikroTik is NOT artificially gimping functionality and having a (mostly) uniform OS across the board regardless of what piece of hardware you pick up. Aside from a few things (like wireguard not on MIPS chipsets) you can use any...

toxicfusion

I feel MikroTik has put themselves into a corner with the current market and times. Times changing. Reliable hardware, very powerful - but complicated. Especially complicated when the vlan bridge method changed to be more CPU bound [all vlan bridge], instead of relying on switch chip [specfic models...

toxicfusion

I feel MikroTik is at a point they need to better split their hardware into categories. Cheap SMB/SOHO product line-up that can better utilize their new mobile MikroTik Home App. This would create a big market. Then egular home/SOHO users can create their basic configs and be happy using an app-driv...

toxicfusion

@jaclaz 1. Nobody is asking for a Juniper MX2020 from MikroTik. 2. MikroTik HARDWARE isn't the problem. In last 10 years of MikroTik, 1/10 are hardware issues. 3. MikroTik SOFTWARE is the problem. In last 10 years of MikroTik, 10/10 are software issues. They can opt for fastest/cheapest solution i....

toxicfusion

I have found this old thread: https://forum.mikrotik.com/viewtopic.php?t=150433 You might can get into contact with cdiedrich Thanks, appreciate that link. I've reached out. Also have open ticket with MikroTik support. "Hello, I will take this idea further, but it's possible to export configur...

toxicfusion

In my opinion, this is a TERRIBLE release by MikroTik. I've emailed them and have nearly mirrored these concerns with support. I'm vocal, and we all should be. I've been asking them to create a "Pro" version of outdoor AX access points. @normis Also -- the 5Ghz radio in these appeared to b...

toxicfusion

Chris, How has your script been working in production environments with larger CAP deployments? This would be useful for us when doing rolling maintenance. RouterOS lets you specify backup CAPsMAN servers, but ofcourse no way to sync... which is stupid. We need to pester MikroTik monthly for feature...

toxicfusion

You can manually set tx-power via CLI. By default, The tx-power will set to the factory maximum by country regulations.

/interface/wireless/edit
wlan1 tx-power

toxicfusion

Hello, I've emailed MikroTik support, but wanted to post here. Has anyone successfully scripted syncing CAPsMAN configuration to a secondary controller? Looking for script or functionality within RouterOS for us to synchronize CAPSMAN controller configurations between routers / controllers? Otherwis...

toxicfusion

Hi, The CubePro 60's are meant to be PtP, not PtMP. You would need the master 60Ghz antenna to be the Sector version, or the wAP 60G AP [older model] to be the sector. I do not believe MikroTik has released their radiation pattern for 60Ghz products. They are keeping the 60Ghz info close, essentiall...

toxicfusion

Hi,

I have the same exact issue. The solution is to use CLI to mass-print the vouchers. Not ideal.

Have submitted ticket to MikroTIk asking them to further improve the new UserMan web interface for mass printing of vouchers.... Suggest you do the same.

toxicfusion

Are all your AP's the cAP AC units? I had similar random 5Ghz drop-outs using very similar CAPsMan deployment for a restaurant. I believe the cAP AC was faulty / flaky -- 5Ghz was not stable. I ended up replacing the cAP AC unit with another brand [tp-link]. as the MikroTik cAP XL AC [larger AC, hig...

toxicfusion

Depends on brand of CAT6 as well as type. If outdoor burial, etc.

It DOES just fit, although will rub the outer PVC jacket. You can easily modify and trim the plastic knock-outs...

toxicfusion

Anav. I will promote other WIFI products when needed. However, this IS after all MikroTik forum....

I am not naive to other products; nor am I fanboy of any one vendor. We all know MikroTik has been behind other manufactures with their wireless products.

toxicfusion

On cAP ac clients disconnect, because 5 GHz interface is unstable. Some say the driver module crashes and reloads Until: Version 6.46beta59 has been released. *) ccr - improved general system stability; *) wireless - improved IPQ4019, QCA9984, QCA9888 wireless interface stability; I don´t know wheth...

toxicfusion

Who is Toxic Fusion? I dont see that person in any threads? ;-) You would think with a nick like that, one would enjoy some (toxic) truths!! Apologists and Fan Boys are the worst thing for a manufacture. People with actual trouble shooting skills are less common that fan boys... and honestly... The...

toxicfusion

Local forwarding is one of those things that "helps" speed up your wifi. Also it make the configuration of access points more like dealing with other wifi APs. This is important when you find out that your Mikrotik AP "just ain't gonna hack it". So you have to move to another ma...

toxicfusion

Hello, I have some problem from last update. mikrotik.png The Hap ac lite is connected to RB4011 by 5GHz interfaces where RB4011 is ap(wifi wave2) and hap ac lite is a station. When I add the EOIP to bridge, where I have also lan1-5 and 2.4GHz (the eoip is between RB4011 and hap ac lite). My wifi o...

toxicfusion

Disable extension channel for 2.4Ghz.

For 5Ghz provisioning can use XXXX extension [if you setup auto frequency list].

toxicfusion

Dont do it. Unless you really want to.

toxicfusion

tplink eap245, get one try it, if solves issues get more. Works for me far more stable than capac. To be fair, many iot devices and apple device are just plain ornery when it comes to wifi. Yes - I have used eap245's and eap225's. I have a eap225 on-hand. I am going to deploy this to replace the cA...

toxicfusion

I had a similar problem with one cap: it was a wrong vlan setting on my case. I had the port to the problematic cap configured as member of a specific vlan on ports and declared as trunk on vlan table. After i changed the port as member of vlan 1 and “accept only vlan tagged”, problem was gone. Tha...

toxicfusion

Hi everyone, I've had a CAPsMAN Deployment for a client of mine for quite awhile now. However, over last ~1+ month I've been dealing with what appears to maybe be failing hardware on a cAP AC unit? Unit is controlled by CAPsMAN.... I will have the customer call me stating that suddenly devices eithe...

toxicfusion

i think MikroTik is far from focusing on being a leader on corporate WiFi market MikroTik provides very versatile wifi products well enough for many scenarios at very affordable price if your focus is corporate wifi implementations you have to look another vendors, therer are many, just more expens...

toxicfusion

Thank you MikroTik! <3

We appreciate this FREE feature-add you include with MikroTik hardware.

toxicfusion

I hope MikroTik fixes this. My heart sunk when I was unable to connect to a few customers sites where i rely on their DDNS service..

I was also using it for other DDNS aspects -- was another nice feature add for MikroTik products.... tisk tisk if they yank it from us.

toxicfusion

Mikrotik even sent me a ticket and told me to send it to the seller but I do not know what this is for since I have communicated several times with the seller and he says that I could not help in this that I discussed the issue with the manufacturer That is no good! Bad seller by the sounds.. If yo...

toxicfusion

Unsure on the specific... but perhaps need to pay close attention to exact model number. The 27dBI product that you wanted and should have purchased is the "XL" model. This is 24.5dBi see to: https://mikrotik.com/product/RBLHG-5HPnD These are 27dBI: https://mikrotik.com/product/lhg_xl_5_ac...

toxicfusion

I could see you using the wireless bridge to create connection between your two building locations. But to extend LACP across the wireless bridge.... just seems like more headache than worth. Especially with being over wireless. I would have to see network topology to better understand. But by the s...

toxicfusion

I have exactly the same requirement, but using a Dynadish 5 & nRAY for frequency diversity. Did you find out if MT can relay LACP over wireless? Interesting to learn UBNT cannot - saves me researching that (I had a feeling it couldn't). Wait... why are you guys trying to relay LACP [Link aggreg...

toxicfusion

I conducted more tests (very rough) in my post above with some conclusions.. Great tests anav! I think the MikroTik cAP AC is more suited to be compared against the Tp-link eap-225.. Maybe someone would test the "older" MikroTik Hap AC [has triple chains...] vs the newer cAP AC or wAP AC ...

toxicfusion

If you guys need fast Mikrotik WiFi just get a device like hAP ac3 or the Audience which are compatible with the new wave 2 drivers (which are actually developed by Qualcomm). However I'm waiting for their WiFi 6 lineup to replace my hAP ac2 at home since I've got new WiFi 6 capable devices. I know...

toxicfusion

@anav - I'm really curious if triple chain would help performance of MikroTik 5Ghz vs say TP-Link EAP245. I think the MikroTik cAP AC is more suited to be compared against the Tp-link eap-225.. I'm wanting someone to test the "older" MikroTik Hap AC [has triple chains...] vs the newer cAP ...

toxicfusion

@anav - Great comparison on the Cap AC vs the TP-LINK EAP245 [these are nice, i used them time to time]. Is the cAP AC and the TP-Links in same location and the speed tests done from same device and same location??? The caP AC's are quite good.... I like them for indoor deployments. Shows that for b...

toxicfusion

Be sure to disable radar detect. Then again try auto-frequency. But honest, it is always best to statically assign your channels/frequencies.... Results on your channel 5700 - look great Tx: 866.6Mbps-80MHz/2S/SGI and Rx: 585Mbps-80MHz/2S/SGI Set your frequency to 5220 and try again, Compaire 5220 a...

toxicfusion

@Gotsprings, Why using 80Mhz channel-width on 5ghz? What was your CapsMan channel settings and rate settings? Did you make mistake as I did and mistakenly remove rates? Appears leaving MikroTik rates as default and just setting your minimum basic & all supported rates is the key.. I would of sug...

toxicfusion

Was not a translation issue. This is not a pissing contest. I realize and I'm aware of MikroTik wireless weaknesses, and know there are better wireless products/solutions out there. Not one size fits all! Cannot make assumption that MikroTik Wireless products [yet] can support said large venues or e...

toxicfusion

Wrong f--king tool for the job. I love caps man... But Mikrotik's radios are not worth your time. If you are trying to put 20 or more devices on the 2.4 in a small area... You are gonna watch the Mikrotik wireless crumble. I have seen the 2.4 just stop passing traffic too many times. Once it gets o...

toxicfusion

We are running 4 ccr2004 all with ospf and have random crash weekly What happens if you underclock the CPU? Reduce the CPU Frequency a few steps. Does the device become stable? This is out of curiosity. Just trying to find solution for those that have CRS2004 units that crash while using routing pr...

toxicfusion

I third the mANTBox 52 15s product as solutions. I would go with four(4) units. Due to the beam width of these antenna's. Two mounted at point A, the other Two at point B.. Only issue would be people in the middle of the yard, coverage will fall off from the antennas. In perfect world, you should al...

toxicfusion

@Biomesh - if you'd like to post your config export - go ahead. I wouldnt mind taking a look. It's just odd, considering i've had this same rate configuration for two other locations. Actually two businesses right down road from one another lol.. This restaurant is not a busy as some of my other cli...

toxicfusion

Just FYI, I used your most current rate settings and I had a few devices that would not connect (via capsman)- in my case these were amazon echo devices(different models). Going back to the built in rate settings allowed the devices to connect. Just providing some feedback. Thank you for that feedb...

toxicfusion

Only other way I can think of is using a device that has proper hardware switch-chip, Example would be QCA8337 chip. Then you create all your vlans and configure it within the "Switch" part of RouterOS.. You would still need /interface vlan=XXX with IP assigned to do routing. Or.. why not ...

toxicfusion

Seriously 1500 vlans on the router?.. .WHY! Are you doing router-on-stick configuration? Why not just use L3 routing on switches to router? You need to CREATE VLAN INTERFACES and then assign IP address to each vlan on the router IE: /interface vlan=1001 name=vlan1001-data /ip address 10.10.0.1/24 in...

toxicfusion

Rural area = older phones and setting the basic rate down to 6 as you have may help. I dont thing you will need to reduce 2ghz to b/g/n but I would certainly use G/N For 5ghz I used to have to use A/N for older products but moved up to N/AC also I stick with 20/40 Ce channel width. Great suggestion...

toxicfusion

Since your ISP' is providing you DHCP for your WAN interfaces. You can appropriately set your default-distance.. make your primary ISP be distance=1, secondary ISP be distance=2. it will automatically failover and swap between links. However, usually requires the link to be DOWN [modem offline and n...

toxicfusion

@bpwl - Interesting tips! I did NOT know that the MT 5Ghz-only-ac is down to 1Mbps!! Do you happen to have that wiki link? I'm curious of that read. I've now went and swapped back my caps configuration to be 2Ghz-g/n [previous was 2Ghz-only-n] and changed to 5Ghz-n/ac [prior 5Ghz-only-ac]. Also keep...

toxicfusion

In curious for anyone who’s running capsman in a business environment if they could pot screenshot of their configured rates. Why is this a big secret in MikroTik community. For some people to not post their known good working setups? There is ALOT of information on there on ways to configure capsma...

toxicfusion

Could it be your basic rates? Perhaps they can't connect at the basic rates for association. Do you have logs perhaps? If you don't set rates at all (and use the built in rates) does that make a difference? It very well could be my rates, hence me looking for input on what I had set. I could go all...

toxicfusion

Hello, One of my clients has reached out to me regarding my networks & MikroTik Wifi deployment. For starters, I am US based IT consultant and I've deployed quite a few MikroTik CAPsMan deployments with great success... However, this client has a restaurant in Rural area with no cellular coverag...

toxicfusion

Who recommended that model vice the wired only RB4011? Placement of wifi is not usually nor should be dictated by router location and is thus better set separately. THe RB4011 router will last far longer than any wifi device one purchases as wifi technology is a moving target (except for MT house w...

toxicfusion

Load up routerOS v7 beta and see if results change with the wave2 driver.

What is your internet connection, 800Mbps+?

Post configs and we can review your settings to be sure most optimal.

toxicfusion

Question for those running CCR2004 in production and having issues.

Is consensus to run 6.47.8 LTS or has anyone tried 6.47.10 LTS???

Lastly, What happens if you reduce the CPU clockspeed, underclock CPU? Have you gained stability?

toxicfusion

I suspect that the 5009 results could actually be underestimated. That is not really a question here - the question is why 4011 "test results" in the video are not anywhere near what the official 4011 product page/brochure always stated. I think they made mistake and have yet to publish t...

toxicfusion

Could you post your config?

/export hide-sensitive verbose

What channel frequency are you running for 2.4ghz and 5Ghz. What are your expectations for range or the Sq-ft you're trying to cover?

toxicfusion

So I tried option 1 and i had low reception on Ring doorbell and almost no coverage on the ground floor. So i reverted to the original layout. I am attaching some settings if needed something more specific please ask. OK - a few things. Appears your using the default wireless configuration. This is...

toxicfusion

Should I opt to pfsense and unifi Wifi ap?

No? We're saying you can use the MikroTik hAP AC3 as router + Wifi combo - great device. Or if you prefer just use Mikrotik router and any brand wireless access point you want.

your design was OK.

toxicfusion

all comes down to how configured. using switch chip vs bridge-vlan. Why on earth would anyone configure bridge vlan filtering on a device that have a single switch-chip but no hw-offloading for vlans? Only the need the use of IP firewall or something like that, but "regular" switch can't ...

toxicfusion

So I tried option 1 and i had low reception on Ring doorbell and almost no coverage on the ground floor. So i reverted to the original layout. I am attaching some settings if needed something more specific please ask. OK - a few things. Appears your using the default wireless configuration. This is...

toxicfusion

Why are you using a hap AC to connect your plex server. Use a regular network L2 switch for better performance? What is wrong with hAP ac's switching performance, so "regular" switch should be somehow better? Yes, hAP ac switching performance is fine, all comes down to how configured. usi...

toxicfusion

Looked at your diagram. Why are you using a hap AC to connect your plex server. Use a regular network L2 switch for better performance? OR are you wireless bridging?? Yes the hAP Ac3 router would work just fine given your internet connection speed. You should be able to get that speed while connect...

toxicfusion

Why are you using a hap AC to connect your plex server. Use a regular network L2 switch for better performance? What is wrong with hAP ac's switching performance, so "regular" switch should be somehow better? Yes, hAP ac switching performance is fine, all comes down to how configured. usi...

toxicfusion

Looked at your diagram. Why are you using a hap AC to connect your plex server. Use a regular network L2 switch for better performance? OR are you wireless bridging?? Yes the hAP Ac3 router would work just fine given your internet connection speed. You should be able to get that speed while connecte...

toxicfusion

Have you checked your physical connection. Perhaps bad RJ45 termination on either end, or even environmental corrosion?

Check your antenna's make sure screwed on tight.

toxicfusion

Don't touch MT WiFi with a 10 foot pole! The very fastest I can get is 450 Mbps in the best conditions and that's nothing compared to my gigabit Internet connection. You might be able to go faster if you get the RB4011 Wireless Edition but that's several hundred dollars. However, if you're doing a ...

toxicfusion

Not strictly related but a gotcha for Sonos. Whenever I set up Mikrotik systems unless necessary I set 802.11n-only for 2.4GHz networks. The screams begin when clients have older Sonos hardware which needs 802.11g and all is well again when I set 802.11g/n. In 2020 you should never need to set 802....

toxicfusion

@OP Why want to power via USB? If placed in a datacenter environment, have many power options. 1) power via eth1 via PoE in 2) Power via supplied power adapter. 3) can even cut power adapter, splice on an ethernet cable pair and run longer power wire. If placing KNOT on TOP of rack(s) -- ethernet ca...

toxicfusion

replace the html files with your prior ones. It's just an updated login html file [login, alogin] under files/hotspot/

toxicfusion

Hi, This could be due to Apple iOS 15 wireless security "feature" being enabled by default. Settings >> WIreless >>. wireless privacy. Disable. Unsure if this is the real issue, however it could be. Apple device will generate RANDOM MAC address for each new wireless network. "Privacy ...

toxicfusion

reset-configuration on your Access Point and re-apply into CAPS MODE. Also, I'm Unsure why you're using 127.0.0.1 [loopback] IP as an address for CAPsMAN server; this is NOT needed. All you need is a regular IP address in /addresses. CAPs devices will discover the CAPsMAN Server over L2, DHCP isnt e...

toxicfusion

Hello, guys! You can completely get rid of capsman impact on Wi-Fi performance just turning your caps into L2 mode by disabling caps' DHCP client. Doing this you are almost killing L3 networking load on yours caps. Recently made tests shows ZERO Wi-Fi speeds degradation both in capsman and local fo...

toxicfusion

@bpwl Thanks for the great info, as always!... Perhaps MikroTik can make a few comments here, or I send in a ticket for their review of this thread.... I have a feeling we will have wait for RouterOS 7 & the new hardware that supports it, along with the new wifi driver implementations. But, may...

toxicfusion

Ubt products are consumer toys with shiny interface. Easy to turn the knobs. Yes - Folks running a WISP will argue otherwise. That is different story with the Ubt airfiber products. Or Move to Cambium [wisp]. I do not run WISP, but I do lots of wireless installations …’lots’. ….. UBNT wireless is e...

toxicfusion

@bpwl Thanks for the great info, as always!... Perhaps MikroTik can make a few comments here, or I send in a ticket for their review of this thread.... I have a feeling we will have wait for RouterOS 7 & the new hardware that supports it, along with the new wifi driver implementations. But, mayb...

toxicfusion

I upgraded all APs to v6.49beta46 because there were several entries for wireless fixes in the release notes. After 4 days the problem is back as with previous versions. So no dice. Its been several days since I sent wireless captures to MT support with no reply or even an acknowledgement of receip...

toxicfusion

Mikrotik support wrote this will be available on new 802.11ay hardware. Unfortunately this cannot be used reliably on our existing 802.11ad devices - that is why this frequency support is removed Sad, because Ubiquiti supports 71GHz on their 802.11ad hardware, which is way higher. Just because Ubiq...

toxicfusion

The hAp ac2 is on release 6.47.10 , and there is no change in behavior compared to 6.45.6.. QBSS is not there with MT. Even if I try hard to create "laboratory conditions", this is not really the case. It is my home installation, with ISP modem, Draytek and hAp Lite in the garage, hAP ac2...

toxicfusion

@tmiklas

Could you try 6.47.10 Long-term release and see if speeds improved? I noticed an improvement on my devices.

Or even goto stable branch and install 6.48.3? Curious if any differences.

Run speed tests a few times, usually the first test will be lower.

toxicfusion

I would like to know if this is a general performance problem. I do see issues with 6.47.9 @home (my test bed), but I'm not sure if it is related to MT. The issues are non-specific and different for all devices, (like a relative old laptop with only a 802.11n interface , that sees the wAP ac 1/2 of...

toxicfusion

Consider using the Audience. MikroTik audience is fantastic for home WiFi....I have three of them as APs/MPLS routers and use a CRS328 for switching with a CCR1009 to connect to symmetric 1G fiber. Then I use OSPF/MPLS to build VPLS for the main and IoT SSIDs. I hope we'll see MikroTik continue to ...

toxicfusion

Keep ubiquiti for Wi-Fi, replace USG with RB4011 for routing. Mikrotik wifi will be considerably slower than ubiquiti, especially with capsman. CRS devices are meant to be used as switches. They can do routing, but performance will be slow. I have dumped Ubiquiti Wi-Fi for my personal and all by cl...

toxicfusion

And then we want to give a service that works, 99% of the time that someone who is not in the trade (or works at other WISPs) gets their hands on it, messes up, disconnects from the network, you have to go and fix it, and then complains that the service is not working. We have a different way of so...

toxicfusion

And then we want to give a service that works, 99% of the time that someone who is not in the trade (or works at other WISPs) gets their hands on it, messes up, disconnects from the network, you have to go and fix it, and then complains that the service is not working. We have a different way of so...

toxicfusion

Issue appears to be your wireless configuration... change distance=indoors to distance=any I think here you meant to say change installation=indoor to installation=any, not distance=any. distance=indoors is ok for that setting and is the default. Yes - Thank you for the correction! Appreciate you. ...

toxicfusion

You can have multiple capsman configured throughout your environment. Just set the caps-man-names option on each cap. It is an ordered list of what capsman server(s) to connect to. Thank you for this tip! So the list works in order of operations.. This would help with timeout and any possible CAP d...

toxicfusion

Could you please share your /wireless export ? You only have the 2.4GHz interface exported, while you mentioned the problems occur on the 5GHz band. /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country="united states" disabled=no distance=i...

toxicfusion

...unfortunately MT has no redundancy concept for capsman build into RouterOS (AFAIK). In a smaller site, typically there will be one MT device, that will be the one critical element if it fails...most likely a Router or Switch. I'd rather focus on PSU redundancy and leave capsman on that single de...

toxicfusion

Hello, Looking for some suggestions - Some of my clients I will utilize an "All-in-One" setup for Router + CAPSMan setup for their network. Depending on size. Typical Deployment now starts with RB4011 as router [Very capable device!!].... [CapsMan, Hotspot + Router functions] However, I am...

toxicfusion

+1

bring back the antenna-gain feature within GUI on future releases.. Let MikroTik OS calculate proper TX and regulatory EIRP settings.... Mucking with all-card-rates-fixed is not the answer.

i'm keeping my devices on 6.45.9

toxicfusion

Correct me if I am wrong, but isn't the new wAP AC now identical to the cAP AC? Except cAP AC has PoE out on the 2nd port and is $20 cheaper. Are we really paying +$20 for a different case? I hope MikroTik can give real answer to this on the 'improvements' Perhaps they're all moving to ARM chipset ...

toxicfusion

BaseBox 2 and BaseBox 5. Regards. Understood. Those are same enclosure as The NetMetal. but there are rubber grommets at bottom where you slice and slide ethernet cable through. I'm asking if anyone has modified and instead used a better design and attached RJ47 feed-thru gland connectors IE: https...

toxicfusion

I not have experience with NetMetal enclosures, but yes with BaseBox/NetBox enclosures and works perfect.

Regards.

Could you tell me what brand or provide me with web link to the feed-thru connectors you used?

toxicfusion

Hello, Does anyone have experience with the NetMetal type enclosures and finding out-of-the-box compatible RJ-45 Feed-thru Glands that Fit?? I bought some, but I would need to use a step drill to slightly enlarge the bottom case hole. As well as reshape the sealing washer to make a secure fitment. A...

toxicfusion

Unless Normis & Co, hire bpwl to start writing legible documentation and more importantly help the coders apply a logical approach to 'Tuning' existing wifi and future wifi, and assist in the move to other newer wifi generations, the MT wifi product line will continue to frustrate most users. W...

toxicfusion

Reply from Mikrotik

"NetMetal ac^2 has RP-SMA Female connectors. There is no restrictions, that only dual-band antennas should be used, but it would be advised to use them."

Cool - that is great they further clarified and mentioned requirement / suggestion of dual-band antenna's.

toxicfusion

Thank you for the confirmation! Enjoy your new stuff!

Welcome! And thank you. I'll maybe get to enjoy; it's going to customers site!

Also get to try the mANTBOX 12s sector! :)

toxicfusion

Update -

The MikroTik NetMetal AC2 description is wrong. It has RP-SMA female connectors and uses RP-SMA male connector antenna's.

The antenna's I purchased as extra work 100% they are male RP-SMA's.

toxicfusion

Hi guys Ii have an RB 4011iGS. I have a pair of of MikroTik cAPac s connected by Cat 6a cable to the 4011. All three devices are running the latest release Rb 6.4.7.2. The cAPsc are managed by the 4011 using CAPs Man. My home internet service is a steady 150 Mbps. All devices that are connected to ...

toxicfusion

I will let you know shortly! I am also confused by their description!! the MW-RP-SMA-52-ANT-5 are to arrive any minute... out for delivery. I check and test asap. I already have the MikroTik HGO's connected and spares for another incoming NetMetal AC. But I ordered four(4) MW-RP-SMA-52-ANT-5 antenna...

toxicfusion

I Agree with anav, for amount of traffic in this network, solution 1 should and would be best option/solution. However, the core fiber switch will be single point of failure. same goes for single router. Perhaps have two(2) core distribution switches as well as dual access switches. Depending on ven...

toxicfusion

You make valid point. I suppose it goes to usage case of that specific NetMetal Ac2 Unit. If you attach say mANT 15s antenna, then you only enable the 5Ghz part of the wireless radio/card and leave 2.4Ghz interface disabled. Honestly i do not know answer 100%, this is me reading between the MikroTik...

toxicfusion

iam not shure this is possible on a capsman managed cap ill try.

Provision another SSID on your Caps using CapsMan. Create a new Config.

Then on your station-bridge AP -- tell it to connect to that new SSID.

toxicfusion

Im really confused why using mikrotik wireless bridge on your printer(s)???

What about instead using an actual wireless print server adapter?

toxicfusion

Newer WinBox versions shouldn't break client's routers running stable, older ROS versions, disconnecting CAPs or whatever else the current version is able to kill or mess up with. Or atleast there should be some warning regarding this, when it encounters unsupported (anymore) ROS versions instead o...

toxicfusion

Thanks for the honesty!! More importantly Does bpwl have a wifi contract yet to help MT....................
Start a crowdfunding campaign if you need cash to hire him, Ive got $20 ready to donate as we speak.

I'll contribute to this..... I'm 100% on-board for said suggestion.

toxicfusion

+1000000% same issue with Winbox 3.25 release and 6.45.9 and hotspot active tab!! Completely disconnected ALL active hotspot users and breaks. I had to dump all users from the queue. Not good, As I'm going to get angry phone call from this hotspot customer. I do not see version 3.24 available to dow...

toxicfusion

No, cannot use that antenna - it is only for 2.4ghz. You need dual band supported antenna's

i just purchased a few of the MikroTik HGO's and some MW-RP-SMA-52-ANT-5 to also test -- EDIT. I just realized these MW-SMA-52s are male connectors; they'd need to be female to properly screw on

toxicfusion

How are you powering the NetPower unit to get the appropriate PoE power package? Dual 96watt power bricks?

Is the CCR acting as the core router and CapsManager? Or CCR solely acting as the Caps controller?

toxicfusion

+1 for Stripe support

another +1 for stripe!!!

toxicfusion

Why use capsman to configure ONLY your wireless network bridge?? That is simple enough to do.

use capsman to control your significant amount of AP's. Anything less than 2-AP's for CapsMan is silly.

toxicfusion

most likely due to station pseudobridge setting. I believe this is limitation to only passing single mac-address?

if you are bridging MikroTik Wireless devices, use regular AP Bridge and station bridge mode

toxicfusion

Now the phone must find the vacuum cleaner. This is mostly done through broadcasts.And that is sometimes not so easy. Just some hints for checking .... - is there client/Station isolation? - is wifi originated broadcast limited for wifi? Flood protection? - what kind of protocol is used for this di...

toxicfusion

fixed. issue was RJ45 end.

toxicfusion

Hello, Did one of my MikroTik wAP AC devices just fry itself? Never seen this before. Last logs from device are below. Then it went offline. Power cycling PoE on switchport and no resolve. Site is 3 hours away and wont make it there until weekend. ZERO activity from switch port it connected to. Unle...

toxicfusion

bump. anyone have information on the error for
18:74:2E:AF:0A:D3@5Ghz-Site9-wAP-1-1 disconnected, 4-way handshake timeout

toxicfusion

Hello, I have CapsMan in production, In reviewing the router logs. I am seeing quite a bit of the following error messages. Unsure if actual errors, or just CapsMan doing its job and not letting wireless devices connect that are not meeting min rssi requirement? 84:B8:B8:3D:82:FC@2Ghz-Site8-wAP-1 re...

toxicfusion

It works fine. Tested with Cisco SG-200 P models. It’s better to get the Mikrotik 48v adapter though, it has higher output if you will be using multiple ports. I’m just getting to this and was able to deploy this to the site. 1year after... Ironically, this site Also uses that same Cisco SG200-P as...

toxicfusion

Hello,

Is it possible to attach or have bonded interfaces [802ad] to be included with the new bridge vlan filtering method? 'all-vlan-bridge'?

If so, any example configs? As would need the bonded interfaces to be inside the bridge vlan interface, and able to pass the required vlans for trunking.

toxicfusion

It won't work if it's DNS based by someone simply specifying an alternative DNS, it won't work otherwise by bypassing via VPN. True, but moot point based on system/desktop security.... If domain environment, can disable users from changing TCP/IP settings and installing 3rd party software. Otherwis...

toxicfusion

bump.

anyone?

toxicfusion

question:

Does the Router actually need WAN / internet connection for the hotspot page to work and open on devices??

toxicfusion

Can you elaborate on Hotspot 2.0 feature / package?

I have production MikroTik hotspots. I've just created another topic as i'm experiencing issue with CapsMan and hotspot. Guest-SSID works, but once guest connects to this SSID, the hotspot page is not being splashed or redirected.

toxicfusion

Hello, I have an existing hotspot configuration that is working 100%. I am testing a new configuration in a smaller lab environment prior to deploying. Issue: Configured capsman to provision new radio's. Devices are able to connect to the guest SSID and obtain IP, router see's the device(S) register...

toxicfusion

MikroTik webproxy is secure if properly configured. Although doesn’t work for SSL.

Suggestion is to use web based DNS filter.

I use ‘dnsfilter.com’

toxicfusion

You only have to add it to VLANs which require access to the CPU, in your config you have IP addresses assigned to VLAN10 and VLAN88 so those should be sufficient. If you have management via the VLANs on the all-vlan-bridge bridge I strongly recommend removing the bridge_bkup bridge as only one bri...

toxicfusion

Appears I have to add the switch1-cpu to all vlan ports within switch menu in order to properly do inter-vlan? I was able to add the switch1-cpu to my vlan10 (primary network), and once I did that, I was able to reach this switch from the upstream core router via both subnets. any further input from...

toxicfusion

UPDATE with issue: I configured a router with a base config that will be used at production site. ISSUE: When connected to the upstream core switch/router. The untagged access port [computer] is unable to access the PowerBox. trying to access from vlan10, untagged to the management IP on the powerbo...

toxicfusion

Update:

Tested and working with the lastest configuration from my post above [see to code].

Also works when I configure a switch port interface with vlan-id=ID, I'm able to get untagged traffic passing.

toxicfusion

You do not have the CPU switch port ( switch1-cpu ) in any of the /interface ethernet switch vlan statements so you will loose access. Thank you for pointing me to that. I earlier discovered this after re-reading the MikroTik documentation MULTIPLE Times.. lol. See to my new configuration. Should I...

toxicfusion

per the MikroTik documentation.. its very confusing by what they mean. I need more specific config example to have clarity. "For devices with QCA8337 and Atheros8327 switch chips a default vlan-header=leave-as-is should be used. When vlan-mode=secure is configured, it ignore switch port vlan-he...

toxicfusion

Hello, Very confusing with VLANS with the PowerBox [RB960RGS board] as it uses the QCA8337 switch chip. IF I use the new bridge VLAN method, it will disable HW Offloading and rely directly on CPU - and performance will suffer.... I've went ahead and configured the old/original method using the ether...

Search found 347 matches