MikroTik

patrikg

Why not go the hole way, and pxe boot the proxmox also.
I don't know if this is doable.
If proxmox have nfs support in the kernel.

But I think the rds2216 can be server for pxe tftp and nfs.

patrikg

Mikrotik haven't migrated all info from the old wiki.

https://wiki.mikrotik.com/Manual:CHR_Pr ... stallation

patrikg

You could do it like this, maybe I am thinking wrong here...I don't know how SwOS handle that. This is on RouterOS: On Linux: curl -k -u admin:password -X POST http://192.168.88.1/rest/system/reboot -H "content-type: application/json" On Windows: curl.exe -k -u admin:password -X POST http:...

patrikg

Hi @Michiganbroadband Have you tried to boot a pc with usb drive with Linux live-cd image. 1. Connect to a internet router. 2. Downloaded RouterOS image and netinstall-cli. 3. Disconnect from the internet router, and direct connect to the router that you want to update. 4. Setting up the interface w...

patrikg

Sometimes it's only the cable that troubles. When it comes with these speeds.

Have you tried with another cable ?

patrikg

Some have speed limits and you can maybe change this:
https://help.mikrotik.com/docs/spaces/R ... throttling

patrikg

Sadly that I haven' t seen the Flow Diagram for long time, some is hardware dependent and other is RouterOS dependent. To see how the traffic flow, if the switch just connect the two devices together. And if you also need to route the traffic with NAT and some devices have hardware accelerated NAT, ...

patrikg

Take a look at the block diagram, to see that the eth1 uses it's own port.

patrikg

Cameras should be local, use like Home Assistant and Frigate and you free from spy's and cloud services.
And of course local VPN.

patrikg

Sorry @fgonzalez2025 have to inform about this issue.

Security Access Risk

Be careful when using such tools, as the website maybe save your settings and easily enter your environment.

patrikg

Please use this thread to report bugs, your problem is discussed in this thread.

viewtopic.php?p=1139587#p1139587

patrikg

I already stated it couple of times. I run nmap from internet, from another computer, from another ISP towards Mikrotik.

Do you know what CGNAT is ?
And to determine what you can do to see if that is the what causes the problem.

patrikg

No need for WSL, Xming or X-Win32 (commercial) can do that.

My goal was with my answer was not to add more external programs to the stack.

patrikg

May I ask why using Xtightvnc is that because of using some game OS like Windows :), when you can use ssh with forward X11 ? Maybe it can be solved with WSL2 in Windows ? I don't know. I have heard that WSL2 have support for translating X11 to WinAPI. I get it why using a server to secure with a bas...

patrikg

Take a look at the docs on this page, to see how you reset RouterBoot to default settings, and how RouterBoot works.

https://help.mikrotik.com/docs/x/SQAoC

patrikg

Have you consider using the api ?

With curl (Linux/Windows) for example, or with powershell with cmdlet ´Invoke-WebRequest´.
In powershell you have to use curl.exe to get curl command, so you don't get the powershell alias to cmdlet ´Invoke-WebRequest´.

Using like a csv file for example.

patrikg

If you do this, you can see what libs being used and loaded. Have removed the links in this list though. ldd WinBox | cut -f2 | cut -f1 -d' ' | sort /lib64/ld-linux-x86-64.so.2 libbrotlicommon.so.1 libbrotlidec.so.1 libbz2.so.1.0 libc.so.6 libdl.so.2 libEGL.so.1 libexpat.so.1 libfontconfig.so.1 libf...

patrikg

You can't use netinstall remote.

patrikg

Can it be that the time not being set with ntp.
So the time is in the router "Thu Jan 1 01:00:00 CET 1970" after resets or power outages.
And the scheduler is using that time before the correct time is set.

patrikg

First of all, why do you need to do this ??

Workaround:
Insert a script and choose Run After Reset.

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

I think you need to see this.
viewtopic.php?p=1134393#p1134393
It's being solved with the beta of netinstall-cli, if I understand your question right.

patrikg

Thanks @sindy for clarifying this.

I am to lazy to write this down.

patrikg

Why not using like dyndns, and make a cert with dnsname ?

patrikg

I have seeing lots of timezones in shared configs, that also may expose your location.
And of course wifi country settings.

patrikg

Yes that a switch, but can be run as router.

https://mikrotik.com/product/crs304_4xg_in

https://youtu.be/8Zooc6soHJU

https://mikrotik.com/product/crs304_4xg ... estresults

patrikg

Is the user frank admin ?

patrikg

Have you tried to add the network to the Push Routes ?
Default: 192.168.88.0/24

patrikg

Probably count sessions, so you can only be "some" people in, not to many that crash the server.
So if you get this message, just refresh some times and you will come in, because somebody else leave.

patrikg

In windows now, you can just start powershell or cmd and type in ssh admin@192.168.88.1, and you get connected. These terminal windows has some support for ANSI, to support the ESC commands. Windows now even comes with openssh server if you wish to connect your computer via ssh. If you start powersh...

patrikg

Thank you for confirming that this solution get to your target.
I think Mikrotik staff was reading your thread, and build a new version of netinstall-cli with your request.

You should also take a look at the tr069 technology to provision router config.

patrikg

Now I get the same problem as @Jotne.

patrikg

@Jotne Do you use any type of proxy ?

patrikg

No problem with me, on my side with Prosilver.
Try to clean cache and try incognito tab/window.

patrikg

As you can see in the change log in the newest version, that function is now in netinstall-cli.

What's new in 7.19beta6 (2025-Mar-19 09:56):
*) netinstall-cli - clear old configuration before user script using "-s";

patrikg

Do you mean this ?
https://help.mikrotik.com/docs/spaces/R ... throttling

patrikg

You have to disable NetworkManager service, and set the interface to static ip. Maybe you can use NetworkManager if you set the Ethernet interface to static ip and disable all another interfaces like wifi. And if you use NetworkManager you have another problem with the interface bringing up then the...

patrikg

The forum should count the solved post to the user, to get some picture of the persons knowledge, and willing to help.

patrikg

Take a look at this thread or do I get the question wrong:

viewtopic.php?t=205125

patrikg

@jaclaz No, I don't know.
I just know that's the command for getting the license file from the device.
And that file can be used with netinstall-cli to flash the device.

patrikg

If you put this command into cli you get the license file into your device flash. [admin@MikroTik] > /system/license/output [admin@MikroTik] > /file/print # NAME TYPE SIZE LAST-MODIFIED 0 XXXX-XXXX.key .key file 204 2025-03-17 18:27:51 Then you can import that file.

patrikg

If you search a little bit in this forum you find a answer maybe:

viewtopic.php?t=87591
viewtopic.php?t=125844
viewtopic.php?t=95583
viewtopic.php?t=148033
...

patrikg

Where are you then you see the public ip address ?
Do you see that on your router wan interface ?

patrikg

Have you tried to use another speed control like iperf3 or something else, so you see that the smb is slow.

patrikg

I think you can do netinstall-cli with the -e (apply empty configuration) options and use winbox (mac address access) the device and then set your own password and ip address. I think the default config sets the preset password.

patrikg

If you have a Mikrotik device that's support containers you can install lua and even php in one of them if you want.
And make a transcription layer between lua and php to RouterOS-API.

patrikg

May i ask why ? What the purpose of doing that ?

patrikg

The new version of netinstall-cli doesn't stop running after flashing a device, it's just waiting to flash more devices. With the new version on netinstall-cli you can provide option -o to avoid to flash a device twice i think. Maybe you have to make a suggestion to the dev's to add option like -1 t...

patrikg

When you getting "Rebooting device F4:1E:57:9D:E7:98", your device should be flashed ok. And you can stop netinstall-cli with keys <CTRL><C>. Maybe you forget to switch to Ethernet port to 2-5, and try to connect to it with winbox via mac address or with the default ip address of 192.168.8...

patrikg

If you trust curl, you have file at:

Site:
https://curl.se/docs/caextract.html

File:
https://curl.se/ca/cacert.pem

patrikg

Sounds like you asking for dynamic dns(dyndns), there lot's of them on internet that you can use.
Just search for dyn dns on the web.

Or do you ask for using the public ip address and using nat ?
You may look at the doc for hairpin nat.

patrikg

Search in the forum you find.

And like rextended says, it easy to take 7zip to unpack the routeros file and find the routerboot in etc directory.

patrikg

Do you get any CPE from your ISP?

patrikg

If you want you can upgrade it to the newest version.

patrikg

Have any experience in Linux as user ? I tried some years ago to install Lede(OpenWRT) to my 750gl and got it working but when i need to get it back to orig firmware i struggle a bit. But you can use some of my command's to do what you what to boot via tftp the Lede(OpenWRT) fw with Linux commands. ...

patrikg

Tried to update the device(firmware) to newer version ?
Seeing running: 6.44.3.
Sorry don't know if @esj and @Świętopełek running the latest version and also hitting this fault.

Also with LTE devices, are you running the latest version of firmware in the modem ?

patrikg

Power problem maybe ??
Tried another power source ??
You could try to add active usb hub.

patrikg

Update ??
US Eyes Ban On Chinese-Made TP-Link Routers Due to Security Concerns

patrikg

Maybe your isp blocking your port ?

patrikg

You doing this:

https://help.mikrotik.com/docs/spaces/R ... privatekey

patrikg

Why not try first some examples from the doc.
And maybe you missed the --output options to output docker image.

https://help.mikrotik.com/docs/spaces/R ... nimageonPC

patrikg

It's working today, but maybe not tomorrow.
Take a look at this answer from Mikrotik Own Support Technician.
viewtopic.php?p=1114268#p1114268

patrikg

But don't do it in prod.

It's only for HO.

patrikg

After it finished, netinstall did not quit. Eventually I quit it with Ctrl-C. The router was unaffected and is now operating with defaults, ready for me to try reconfiguration again. *) netinstall-cli - added "-o" option to install devices only once per netinstall run; Have seen in the Ch...

patrikg

Please don't use L2TP for VPN for prod. nowadays. Weak cryptographic standards, Vulnerability to brute-force attacks on pre-shared keys, Potential backdoors or compromises in IPsec, and Poor performance compared to modern protocols. If you're using a VPN, it’s better to opt for OpenVPN, WireGuard, o...

patrikg

Can it be that the dhcp authoritative is not set or set to invalid value.

https://help.mikrotik.com/docs/spaces/R ... Properties

patrikg

Maybe you just missed the options keep-result=no

https://help.mikrotik.com/docs/spaces/R ... 2/REST+API

https://help.mikrotik.com/docs/spaces/R ... 8514/Fetch

patrikg

You could look at the first three bytes of the mac address, to see that mac address is from TP-Link device If that's any clue for you ?? https://maclookup.app/macaddress/a86e84/mac-address-details Maybe some one have put a TP-Link router into your network, that also answer to your clients dhcp reque...

patrikg

Have you tried to take it from a another angle, use another app like curl and get it working first.
And then use Mikrotik tool fetch command to do the same.
So you slice the/your problem into two steps.

patrikg

You have to be more creative with the tool fetch command and use some of the options to do a correct POST. https://help.mikrotik.com/docs/spaces/ROS/pages/8978514/Fetch#Fetch-Sendinginformationtoaremotehost If you search a little bit of the web you could find some example of this POST with the curl ...

patrikg

Hi @Vladimir22

Check out wiki:

It's the isp way of nat aswell like you.

What "public" ip do you have ??
Is the range like this
https://datatracker.ietf.org/doc/html/rfc6598#section-7
https://en.wikipedia.org/wiki/Carrier-grade_NAT

patrikg

CGNAT ?

patrikg

Change the name :

# Send the initial config file. routerOS expects filename to be autorun.scr.

patrikg

What dns are you using with the pc ? Do you use the router dns ?? That answers to *.teamviewer.com to ip adress 127.0.0.1. If you using another dns you circumstance this block. You can also make a mangle rule i think, to direct all udp 53 traffic to the router ip. So the clients can't use another dns.

patrikg

Do you self a favor and do it with the KISS method first.
With defaulted devices and only with the admin user.
And after it's working, you do more and hardening your system.

patrikg

Do you import them into the correct user ?
Or do you only using admin as username.

patrikg

Have you seen this:

https://youtu.be/8tt7fSvdFRM

patrikg

Please don't only use username and password as credentials, please also use PKI.

patrikg

Using windows i see(yoda), maybe the files are treated different, you may not use the correct end line char then. puttygen may produce wrong there for Mikrotik Linux way of end lines. So if you take the file into some editor or use the Linux command dos2unix to convert the files. You could also test...

patrikg

Is you doing like this ??
https://help.mikrotik.com/docs/spaces/R ... 50014/SSH
https://help.mikrotik.com/docs/spaces/R ... our+router

patrikg

Is 3CX traffic using specific dest port ?
Maybe you can mark the traffic and do the LTE route.

patrikg

If you search a little bit in this forum I think you have lots of answers.
search.php?keywords=iOS+18

patrikg

ON Windows. First, press Windows Key + X to access the quick menu and launch Windows Terminal (Admin). Now run the following command to list down all the network adapters: netsh interface { ipv4 / ipv6 } show subinterfaces Now note down the Interface name for which you want to change the MTU. Next, ...

patrikg

Some one want to control the computer and some one want to be controlled by the computer.

patrikg

Yeah and you loose the sd card interface.

patrikg

Hej!! Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems ...

patrikg

So this should be my final tool fetch line so you overwrite the incorrect value. /tool/fetch keep-result=no mode=https http-method=post url="https://rocket.example.com/api/v1/chat.postMessage" http-data="{ \"channel\": \"CHANNELID\", \"text\": \"test...

patrikg

Maybe the next thing to do is to get into the RouterBoot and(don't forget to take a copy of your licens key, so you have to enter it by hand from your screenshots): e - format nand r - reset the booter configuration You getting...error... rename: Read-only file system When netinstall have you tick t...

patrikg

Here you go.. if that is the file you looking for and is correct for your hardware(boot code for arm32). Dependencies: * curl * python3 * unsquashfs (maybe in package squashfs-tools) This is of course in Linux command line: mkdir firmware cd firmware curl -O https://download.mikrotik.com/routeros/7....

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Do some testing and troubleshooting with localhost and the pc you running from, first to see the differences. Also you get some more headers with Mikrotik like "Accept-Encoding: deflate, gzip" And like @rextended says you have to get the correct spaces places. Space | !Space. Like Hamlet: ...

patrikg

On the demo router from Mikrotik the "Time Zone Autodetect" is disable.
You can try setting it manually with your timezone, to get rid of the log message.

patrikg

This is HOTEL Mikrotik, you can never leave!!

Or even a Casino, there you are lost and can't/shouldn't find the exit.

patrikg

You need to run netinstall with sudo or with root user.

patrikg

I think the RouterBoot version 6,xx,xx something could not boot version 7.xx.xx of RouterOS. So you need to update to the latest 6 RouterOS, before you could upgrade to version 7 RouterOS. And of course when you have the latest ver of 6 you press update firmware(RouterBoot), and then you upgrade the...

patrikg

Strange thing to request, but there are something you can enrich the mac address with is the vendor code translation to vendor name.

https://standards.ieee.org/products-programs/regauth/

patrikg

@mkx You have make this table before, maybe this can bring more light to the frequent confusing case.
And reuse/recycle some computer bytes

viewtopic.php?p=1080113#p1080113

patrikg

I think you can even upgrade the RouterBoot from serial. With g command in RouterBoot Menu, but you need the fwf file(RouterBoot Code) TIP: And get all board info before you doing something, if you don't have the license key in file or printed out. I think I can see the key in your screenshots, so y...

patrikg

Sorry wrong forum

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

I don't know but can you set the sim card wrong, backwards?
So the LTE interface will not appear if there is not any working sim card detected.
And with Mikrotik devices you need to upgrade two things.
But with LTE you have to upgrade also the LTE modem.

So you have the latest and greatest

patrikg

Have you tried to use the interface name instead of ip address ?
Like this:

./netinstall-cli -r -i enp1s0 ../../Downloads/routeros-7.16-arm.npk

patrikg

How is the power ?? If you using some faulty PS ? If the modem needs more power than the Router.

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

If you add a static arp entry from mac address to some bogus ip like localhost address 127.0.0.1, they could not connect to each other.

But if the device is like IPhone it's more tricky because of the change of it's mac address all the time.

patrikg

The new way of doing netstat is via command ss, so this can be done with:

sudo ss -tnlp

That
t=tcp.
n=don't do dns lookups.
l=only listening ports.
p=what program/process is open this port.

patrikg

Maybe you installed some popup blocker and ad blocker, that uses the proxy approach.
Or even some vpn apps like tor ?
Or like mkx says it's some antivirus app.

patrikg

Have you read the fine wiki (RTFW)

https://wiki.mikrotik.com/wiki/Use_SSH_ ... ey_login)
https://wiki.mikrotik.com/wiki/Manual:S ... t#SSH-exec

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Sounds like you need to add some static routes.
If you can provide some diagram of what you want to achieve, it is a little easier for the members of the forum to help you.

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Please don't use username and password,it is't safe anymore use keys instead.

https://wiki.mikrotik.com/wiki/Use_SSH_ ... ey_login)
https://wiki.mikrotik.com/wiki/Manual:S ... t#SSH-exec

patrikg

Maybe this is because, how the ext4 drive partitioned gpt mbr ? My suggestion to try to wipefs (linux-command) or even use windows diskpart and do "clean" first and the try to format the drive in Mikrotik device. So the partition will be created on the Microtik device, not any another equi...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Maybe the printer needs/requests some dhcp options, that not the offers have.
I don't know if you can enable more debug logs, for the dhcp server, to see what the printer requests.

patrikg

I think you need to read little more about the api and the fetch command.
https://help.mikrotik.com/docs/display/ROS/Fetch

https://help.mikrotik.com/docs/display/ROS/REST+API

You need some more settings like http-method http-header-field http-data.

patrikg

Please delete the double post.
I am writing this on the first post.

And talking about python, have you seen this repo.
https://github.com/dvtirol/pynetinstall

patrikg

https://help.mikrotik.com/servicedesk/servicedesk/

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Sounds like you need something like hairpin nat.

https://help.mikrotik.com/docs/display/ ... HairpinNAT

If you can provide some picture of your setup it will be much better to this community to solve your question.
With ip addresses, not the puclic one, just your private one.

patrikg

If you are using Linux you could take the same route as I have.

Take a look at this thread and the last post, that solved my problem:

viewtopic.php?t=194537

patrikg

@mkx Thx,
I am not the best regex script kiddies

But if Mikrotik device count is false, it's also removes all the lines with hash tags.
But i not getting it with this low value 17266. Maybe it's not getting the hole file.

patrikg

Lets see: curl -s https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts | grep -v '#' | sed '/^$/d' | wc -l 154749 It's not correct because it removes the lines with hash tags even if the hash tag come after correct value. Like this lines. 0.0.0.0 iesnare.com # See http://www.codingthewhe...

patrikg

Have you tried to snmptranslate the hole Mikrotiks own mib.
To see if there is the field that you looking for.

curl -O https://download.mikrotik.com/routeros/7.15.2/mikrotik.mib
snmptranslate -Tz -m ./mikrotik.mib

patrikg

Have you tried to do it in webfig ? Not just in cli.

patrikg

without seeing the config........................... /export file=anynameyouwish (minus router serial number, any public WANIP info, keys etc. ) Hello @anav. When you request the forum user the config, could you also add how to use the forums code tags to the message. Don't you have any work to do ...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

Have you exported the config from root of the system.
Type in this first in the terminal:

/export file=config verbose show-sensitive

Like this:

[admin@MikroTik] > /export file=config verbose show-sensitive

And then you can get the config.rsc file from the File menu.

patrikg

The main reson was you using POST instead of PUT.

patrikg

LANG=C date --date="@$(echo '2^31-1' | bc)" Tue Jan 19 04:14:07 CET 2038 From 2K Y problems to the new dooms day for Linux :) Dont get it, don't know why they don't goto 64bit LANG=C date --date="@$(echo '2^55+31739239172709231' | bc)" Wed Dec 31 23:59:59 CET 2147485547 Sorry to...

patrikg

Speaking of the issue of certificates.....
Since are completely useless becaues you can not do nothing, what matter?

Just want to be nice and let M know that their cert has expired nothing more

That is precisely why you should add a script that does it automatically.

patrikg

Speaking of the issue of certificates.
Mikrotik has not even done a renewal either on there demo routers.

https://demo.mt.lv/
Went out the door at 23 May 2024 07:41:48...

https://demo2.mt.lv/
Goes out the door at 18 June 2024 08:37:45...

Mailed Normis and nothing happend.

patrikg

When it comes to slow connections, you have to use commands like traceroute and use looking glasses thru diffrent isp's and to see if its the traffic someway take another ways. And using ppp you also need to think of the packet size, try to ping with diffrent sizes. So you can see if there being som...

patrikg

Here some links old one first:
https://wiki.mikrotik.com/wiki/Manual:S ... our_Router

https://gregsowell.com/?page_id=951

patrikg

And now you goto Files menu on the left side in winbox and you may have a file to click <Download> to download.

patrikg

Sorry to say!!

This question should be send to Mikrotik support department

Email:
support@mikrotik.com

Or make a support ticket on this link:
https://help.mikrotik.com/servicedesk/servicedesk

patrikg

Yes that's recomended, and you can also set that it doing that automaticly.

If you tick in "Auto Upgrade" in the menu RouterBoard and then key Settings.

You can do this because the boot code is within the RouterOS npk package file as fwf file.

patrikg

Here you have some words Mikrotiks: In Mikrotik linguistics: Name Mikrotik World PC World --------------------------------------------------------------------- Operating System RouterOS Windows 11 Firmware RouterBoot Bios/UEFI So if you click Upgrade in the RouterBoard menu you upgrade the RouterBoo...

patrikg

disappears, sounds like power issues.
Have you checked the power supply ?
Is the devivce running from POE ?
Have you checked the POE source ?

patrikg

If using OpenWRT or simular non Mikrotik OS, you may swithed the RouterBoot(Firmware) from BOOTP to DHCP. And Netinstall doesn't support that. You have to do like i have done in this thread. https://forum.mikrotik.com/viewtopic.php?p=1044565#p1044565 To switch back to BOOTP so you can use Netinstall...

patrikg

In the Interfaces menu at the modem.

patrikg

Please stop using passwords use ssh keys instead.

The thread is about SwOS, which doesn't support SSH.

Thanks @tangent i didn't know that, Mikrotik should implement that, add it to the christmas wish list

.

patrikg

Please stop using passwords use ssh keys instead.

patrikg

Just run netinstall on Linux not Windows.
Look at this:
viewtopic.php?t=182850

patrikg

The hope is not over. There is lot you can do. If you using windows, there lot's of problems being using that. If you are knowing how to use your comporter with another OS, you should try: To write usb flash stick with some Linux Live cd. Then booting this up and then download netinstall for linux a...

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

You can click on this link and get to netinstall pages and print that if you want.

https://help.mikrotik.com/docs/x/DoB6AQ

After visiting the page Just press <CRTL><P>

patrikg

You will wear out the flash doing this.

patrikg

New package:

https://www.youtube.com/watch?v=AkBIQxi-VKs

https://help.mikrotik.com/docs/display/ ... s+packages

patrikg

Why not get the request header and the data ? So you see that is correct format from your app. You could use nc like this sudo nc -l 80 and change your file like this gw_client.BaseAddress = new Uri("http://127.0.0.1:80/rest/"); So you see like the header Content-Type: application/json Or ...

patrikg

You don't replaced with:
https://help.mikrotik.com/docs/display/ROS/REST+API

patrikg

Hi, I'm very glad you solved the problem, but I and the forum would be so much happier if you also mark your case in this forum as solved. See the pictures below. Where you click on the following places on the thread that solved your problem. So the AI can take over and know what the problems are wi...

patrikg

ok i see..i think you need to change the content type like this... http-header-field="Content-Type: application/json" /tool/fetch url=https://192.168.1.211:10443/rest/system/scripts/reboot check-certificate=no mode=https user=admin password="mypassword" http-method=get http-heade...

patrikg

You have curl.exe and ssh.exe and scp.exe in windows, and you have at.exe... at 23:00 /every:M,T,W,Th,F cmd /c "curl.exe https://192.168.1.211:10443/rest/system/scripts/reboot" And you maybe start the Scheduler. net start "task scheduler" And you view the scheduler task just run ...

patrikg

And if you are dealing with sub options you can do it like me code them by your self, and like @Amm0 says the best thing you have to sniff the traffic to get a know how...then you can do it trough the mikrotik device, You can use the mikrotik device and mirror some port to your computer and run like...

patrikg

Use the tools you have in the Windows environment you have.
Like scp like something this from command prompt:

scp admin@192.168.88.1:/usb1/adguard .

And for the zero bytes file, i think you have to stop the container before the you could access the files.

patrikg

Here some value ref for how to code the correct options with correct syntax. Look for value, and you can see how the line option being decoded. And if you are knowing the hole raw byte stream you could also check what the value being encoded to in the raw options in hex of course. And the best thing...

patrikg

Have you tried to set the router switch not to auto sense the duplex and speed ? If the Foscam have difficult to auto negotiate it's speed and duplex. https://demo.mt.lv/webfig/#Interfaces.Ethernet.1 Maybe you also can change the value on the interface in the Foscam. Also don't forget to to test ano...

patrikg

Double posted thread.

viewtopic.php?t=207417

patrikg

In the error message says cant get the server in ipv6,
You could try to force ipv4.

apt-get -o Acquire::ForceIPv4=true update
apt-get -o Acquire::ForceIPv4=true upgrade -y

patrikg

You should try to netinstall the device.

https://help.mikrotik.com/docs/display/ROS/Netinstall

patrikg

On what version is RouterOS the device you try to connect to ?

patrikg

Is Wireguard using some certs to connect ?
Haven't worked with WireGuard myself,
Maybe the certs have run out of date, best before date.

patrikg

You welcome and thanks for telling me it's working again. And when you are at it. don't forget also to upgrade the RouterBoot to it's newer version. It's very easy to do that, just press upgrade button on the RouterBoard menu in webfig. Or like you said in the cli. So you can use the newer version o...

patrikg

First of all your ip is in the range of... NetRange: 44.0.0.0 - 44.191.255.255 CIDR: 44.0.0.0/9, 44.128.0.0/10 NetName: AMPRNET NetHandle: NET-44-0-0-0-1 Parent: NET44 (NET-44-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Amateur Radio Digital Communications (ARDC) RegDate: 1992-07-01 ...

patrikg

You have to hold the reset button in when power the device and keep holding it after a while you will see that the device will get its RouterOS. And do you have some another interfaces on the linux computer like wifi. Disable that, and do you have any firewall settings on the Linux box. Disable that...

patrikg

Thanks for reporting this.

Have you checked the validity period of the ca cert ? Maybe 5 years have passed.
Maybe the ca cert was revoked.
It's great that you found what the problem was, but if you also can ask cloudflare them self.

patrikg

I am sorry to say... Have you tested the beta ? And is it only Windows the problem exist ? Windows can be little angry about the smb version, M$ have disable old versions, because of easy hacking issues. And what I can see my Linux mount, mounts at version 3.1.1 see my another thread. If you are ver...

patrikg

Can you provide some errors error code, debugging info ??
Is the dev the same in x86 and ARM ?? /dev/sda
And funzip ???

patrikg

In Mikrotik linguistics:

Name                        Mikrotik World     PC World            
---------------------------------------------------------------------
Operating System            RouterOS           Windows 11        
Firmware                    RouterBoot         Bios/UEFI

patrikg

You missed and mention how many vpn connections you will be running at the same time.
And what speed are we talking about ? Do you need sfp or sfp+ ports.

And there are Mikrotiks Distributors that can provide these figures for you.
https://mikrotik.com/buy

patrikg

I have also seen this new thing in some of the settings menus.
There you can expand the view.

expand.png

Maybe Mikrotik has forget to add these in some menus.

patrikg

@pimmie

Thanks for this link, many of none experience users need to read this.

patrikg

You can change the webfig behavior if you want, just click here:
Design skin

design.png

patrikg

Do you plug in something else in the usb port ?
Maybe some power issues.
If I getting problems with them I always putting a active usb switch between, to gain more power to the connected devices.

patrikg

I didn't even think about the use (), i'm kind new to scripting, thanks for the hint! If you know Linux/UNIX, the [] are similar to `` backtick to run a command and replace result in-place. Yes and the new way of doing this in UNIX/Linux, not using back tics chars. is like this. Use dollar sign and...

patrikg

Thank you for your reply, and please you can now mark this thread as solved.

At board style: Canvas

At board style: prosilver

patrikg

Is it new, or does there maybe be any old setting in the device ?
First step you should try to download winbox from this site, if you have Windows and run it, to see if you can connect to the device.

Windows 64Bit.
https://mt.lv/winbox64

Windows 32Bit.
https://mt.lv/winbox

patrikg

My suggestion is not to use ftp, make i vpn server on the router, and make a vpn connection into your network.
It more secure and more newer and trendier.
And only open up one port to the router.

patrikg

When using ftp you may consider learning about how ftp works, and how to use it properly.
It open up port's that not being open.
Try to enable/disable PASV(Passive mode), first in you client app.
Then you can see in this picture how the traffic goes

ftp.png

patrikg

Great you can now also mark this thread as solved as well, if you have now resolved what device you have.

viewtopic.php?t=206271

patrikg

Yes the firmware(RouterBoot) is in the RouterOS, you can update just pressing Update in the Routerboard menu. There like you say also RG750.. when i read the specs on RG750G I can read this. The UP have USB port. It’s probably the most affordable MPLS capable router on the market. With compact desig...

patrikg

Have seen this when you have removed names from userlist and they are pointed at from another setting.
So if you remove something you get the pointer *4 *5 *6 and so on.
I think Mikrotik have to script something when removing names or maybe just warn you there are pointers pointing to nothing.

patrikg

Have you tried unicode ?

/interface/ethernet set [find default-name=ether1] comment="\01\F4\80"

/interface/ethernet set [find default-name=ether1] comment="\F0\9F\92\80"

Have tested my self and seeing thats not working

patrikg

I have looked at this now, and found that you also have user and password in disk in the terminal window. Don't know if these uses in the smb config ?? I don't have Windows so i can't check that. /disk set sd1 disabled=no parent=none slot=sd1 smb-encryption=no smb-password="user1234" smb-s...

patrikg

Sorry, but my ideas have also run out, I think.

patrikg

I think we have come a bit further when it comes to troubleshooting smb on Mikrotik routers

patrikg

Maybe the Windows uses smb3 to connect and linux uses smb2 to connect.
I don't know how you can determine what version being used in the routeros.

patrikg

On windows it should be something like this:

net use h: \\172.16.0.1\share1 /user:"domain\user" "user1234"

patrikg

I have format the sd card with gpt, and 1 ext4 partition, with my linux.
Not with the router.

And when i see your config, i see duplicate user guest..

patrikg

Don't forget to upgrade the firmware the RouterBoot, if you have very old version.

patrikg

Have you read my thread changes in this thread.

viewtopic.php?p=1067532#p1067532

patrikg

I my find the bug, when exporting the config I see that the user that have access to the share is declared as *4. The correct user for me would be test. It is working with the guest account. add directory=sd1-part1 name=test require-encryption=yes valid-users=guest,*4 smbclient -L 192.168.88.1 --no-...

patrikg

What format is sd1 format as, and can you see that "user" have the correct rights to that folder.
There lots of things that can be the culprit.

patrikg

If you read the title it says testing. Change channel stable = 7.14.2 testing = 7.15beta9 development = 7.15beta8 Not so sure about that. Read first post in this thread. There you will find " What's new in 7.15beta8 (2024-Mar-21 09:12): " posted in testing channel as well. So here I think...

patrikg

None of these specifies the domain. smbclient //172.16.0.1/share -U user%pass nxc smb 172.16.0.1 -u 'user' -p 'pass' --shares smbclient //172.16.0.1/share --user=user --password=pass --workgroup=home nxc smb 172.16.0.1 -u 'home\user' -p 'pass' --shares And what I am seeing this line using MikroTik a...

patrikg

If you read the title it says testing.
Change channel

stable = 7.14.2
testing = 7.15beta9
development = 7.15beta8

patrikg

First of all, you are using NAT addresses out of range. The 192.168.0.0 is a B CIDR 16 address space. 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) And if you are not reaching the devices, with ping the first you should check if the device respond to ping and also check if your netmask in all de...

patrikg

May I ask you if your journey to upgrade the RG750 to newer RouterOS and RouterBoot if it went well and resolved ?? I can't get it from your messages, and have a Happy Easter. As for the routerboot you can even reset the routerboot settings with holding the reset button in in 10min. If you have the ...

Search found 430 matches