Community discussions

Search found 16 matches

by HeadCraft
Tue Jul 25, 2017 3:02 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36159

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

@HeadCraft be more specific, what you described works: [admin@rack1_b3] /interface ipip> /ip ipsec policy print Flags: T - template, X - disabled, D - dynamic, I - invalid, A - active, * - default 0 T * group=default src-address=::/0 dst-address=::/0 protocol=all proposal=default template=yes prior...
by HeadCraft
Tue Jul 25, 2017 11:39 am
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36159

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

As in v6.39.2 still not changing dynamic ipsec src. address in policies and peers, when setting it in ipip tunnel interface in local address setting. And if I delete dynamic entries in ipsec policies or peers, the will not appear anymore until reboot, or set another dst address.
by HeadCraft
Thu Jun 22, 2017 12:26 am
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 34974

Re: v6.39.2 [current]

Upgraded to 6.39.2. IPSec tunnel stopped working . I saw that if my clients who have dynamic external ip with IPIP tunnel configured with ipsec passphrase cannot initialize phase1 with send error. It is because of dynamic entry in ipsec policies and peers not changing to new one. As example: after t...
by HeadCraft
Mon Jun 05, 2017 11:12 am
Forum: Announcements
Topic: v6.39.1 [current]
Replies: 158
Views: 36811

Re: v6.39.1 [current]

Upgraded from 6.38.5 to 6.39.1 Wireless clients (Honeywell Dolphin 6000) can't connect to wi-fi, while all other devices can (included dolphin 6500, notebooks, smartphones, etc) I have CAPsMAN configured on mikrotik 1100AHx2 and CAP clients on mikrotik hAP ac lite and RB912UAG-2HPnD. Log on CAPsMAN ...
by HeadCraft
Mon Jan 16, 2017 12:37 am
Forum: Announcements
Topic: Winbox 3.8 released!
Replies: 47
Views: 18161

Re: Winbox 3.8 released!

Have anyone faced with bridge flood in wireless and vlan interfaces when traffic have to go to ethernet interface with this 6.38 version?
P.S.: Sorry for wrong topic, noticed to late..
by HeadCraft
Sun Jan 11, 2015 2:40 am
Forum: General
Topic: IGMP Snooping
Replies: 137
Views: 59852

Re: IGMP Snooping

+11010001 for IGMP Snooping. Realy need it! I have a bridge of 4 ethernet ports and 7 vpn tunnels with encryption 256 aes. When you start multicast, the router burns out with a blue flame sending frames in each other port. I even would be glad if this functionality will be realized, but hard to get ...
by HeadCraft
Fri Aug 22, 2014 5:11 pm
Forum: Wireless Networking
Topic: CAPsMAN without Local Forwarding problem
Replies: 2
Views: 866

Re: CAPsMAN without Local Forwarding problem

I have an RB2011 running capsman and a cap.

I use local forwarding onto my bridge for that traffic.

Nick.
Yes, I know this is working. But my setup needs forwarding on capsman with broadcast mac address mask for all caps to provision. So I want to know is it real or it can't be done like I want
by HeadCraft
Fri Aug 22, 2014 3:45 pm
Forum: Wireless Networking
Topic: CAPsMAN without Local Forwarding problem
Replies: 2
Views: 866

CAPsMAN without Local Forwarding problem

I have the following configuration: Router1: CAPsMAN + CAP, NO local forwarding, create dynamic enabled Router2: CAP Router3: CAP Router2 and Router3 works perfect. Clients on Router1, which holds manager and CAP have no internet. They recieve IP, appear in registration table, but can't ping anythin...
by HeadCraft
Thu Feb 27, 2014 3:05 pm
Forum: General
Topic: Known issues and bugs - a list
Replies: 283
Views: 110952

Re: Known issues and bugs - a list

Issue: Wrong behaivor of SNMP TRAP generator Description: In SNMP configuration options there is parameter which means " List of interfaces that traps are going to be sent out " /snmp set trap-interfaces=ether1 But it does no effect when sending trap to a subnet, that belongs to another interface. ...
by HeadCraft
Tue Nov 05, 2013 4:37 pm
Forum: General
Topic: v6.5 OpenVPN Certificate Import BUG
Replies: 1
Views: 567

v6.5 OpenVPN Certificate Import BUG

Hi! I have updated my mikrotik RB450 to firmware version 6.5 from 6.2. Removed default config to start from clear. I need OVPN Client, so I took my certificate, key and CA to import. Nothing happened when I pressed the "import" button! Neither from winbox, nor from terminal. And CPU gets 100% until ...
by HeadCraft
Thu Aug 29, 2013 10:42 am
Forum: General
Topic: Export IPsec Private key
Replies: 2
Views: 1772

Export IPsec Private key

We assume that there is one main router with IPsec configured with a lot of another routers. Private key is generated localy. If it will die and we buy another, how to restore this generated private key, so our tunnels continue to work with new device, and so not to rebuild configuration on all othe...
by HeadCraft
Thu Jul 18, 2013 10:22 am
Forum: General
Topic: IP Firewall Filter Bug?
Replies: 0
Views: 360

IP Firewall Filter Bug?

Hi! A have RB951G-2HnD. It was running on RouterOS 6.0 from the date of release with no changes in configuration and all was fine, until I added some new filters in firewall that block ddos. Just three. And my mikrotik went broken! Firewall started to show huge statistical numbers and all 56 policie...
by HeadCraft
Thu May 16, 2013 10:50 am
Forum: Wireless Networking
Topic: RouterBOARD Metal-2SHPn maximum wifi speed?
Replies: 5
Views: 1698

Re: RouterBOARD Metal-2SHPn maximum wifi speed?

Is there some device with throughput over 35 Mbit with chipher and MIMO 1x1?
35/35 Mbit is a limit of tkip as I understood, not wpa2 aes? My collegue tested RB951-2hND with aes, he gets ~65mbit/s
by HeadCraft
Wed May 15, 2013 2:24 pm
Forum: Wireless Networking
Topic: RouterBOARD Metal-2SHPn maximum wifi speed?
Replies: 5
Views: 1698

Re: RouterBOARD Metal-2SHPn maximum wifi speed?

That's good. But what is the real throughput with WPA TKIP/WPA2 AES chipher on?
by HeadCraft
Wed May 15, 2013 9:59 am
Forum: Wireless Networking
Topic: RouterBOARD Metal-2SHPn maximum wifi speed?
Replies: 5
Views: 1698

RouterBOARD Metal-2SHPn maximum wifi speed?

Hi I have to decide, what hardware to buy for the project of covering large area with wifi signal using mesh technology. The speed of link must be as high as possible with WPA/WPA2 AES 'on'. I'm interested in model RouterBOARD Metal-2SHPn. Specification says it supports MSC7 but no info about does i...
by HeadCraft
Tue Mar 05, 2013 1:50 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM power adapter with C14 connector
Replies: 0
Views: 1382

RB2011UAS-RM power adapter with C14 connector

I have mikrotik RB2011UAS-RM rack mount router wich supplies with DC power adapter NLB100120W1U . This adapter is not unpluggable from the router and in truth, is rather pathetic for use in rack. http://s17.postimage.org/vivo9tbnf/05032013127.jpg http://s21.postimage.org/59g907cqr/05032013130.jpg Is...