Community discussions

MikroTik App

Search found 31 matches

by K1w1user
Mon Sep 10, 2018 8:49 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 39463

Re: v6.42.7 [current] is released! ssh and winbox issue

I just upgraded a new RB3011 from 6.40 to 6.42.7 and now find I can no longer ssh or winbox over a pptp link.

Confirmed by testing, then upgrading a second RB2011 from an older 6.3x to 6.42.7.

Torch shows inbound traffic but no outbound response.

Is this a new "security" measure?

Mark.
by K1w1user
Fri Apr 28, 2017 5:18 am
Forum: General
Topic: 802.3az support
Replies: 0
Views: 552

802.3az support

Do any of the Routerboards support 802.3az ?

The AR8327 chipset has support, but I didn't find mention anywhere in the Routerboard specs or software docs.




Mark.
by K1w1user
Thu Feb 25, 2016 4:05 am
Forum: General
Topic: Bridge issues after upgrading ROS 6.4 to 6.32.2
Replies: 0
Views: 471

Bridge issues after upgrading ROS 6.4 to 6.32.2

Hi, I upgraded an RB2011UiAS from 6.4 to 6.32.2. After the upgrade, the ethernet bridge port remained disabled. :? Nothing I tried would bring it up. I downgraded to ROS 6.18 and the ethernet bridge port came back to normal. Given the RB2011 was an hour away, I'm very happy that I managed to get it ...
by K1w1user
Fri Feb 05, 2016 3:54 am
Forum: Announcements
Topic: v6.34.1 [current] is released!
Replies: 59
Views: 19744

Re: v6.34.1 [current] is released!

The new Dude v6 looks promising. Just playing with 6.34 when 6.34.1 came out. I take it that the only way to upgrade an installed Dude package is to update the whole ROS. My one issue is backward compatibilityt. I have a few sub Agents, and upgrading all at once is going to be hard. Keep up the good...
by K1w1user
Thu Oct 29, 2015 5:43 am
Forum: General
Topic: ethernet port bandwidth setting
Replies: 0
Views: 391

ethernet port bandwidth setting

When using the ethernet port rate limiting (via the swicth chip) /int eth set name=ether1 bandwidth= It only offers rates up to 10M, which is a bit limiting :lol: The hardware on at least some of the models supports a wider range, it according to the datasheet. "The AR8327 can limit all frames and s...
by K1w1user
Fri Aug 28, 2015 12:22 am
Forum: General
Topic: Mikrotik L2TP/IPSec Client to Sonicwall L2TP Server
Replies: 2
Views: 1767

Re: Mikrotik L2TP/IPSec Client to Sonicwall L2TP Server

your policy looks wrong.


dst-address should be the remote destination subnet, and src-address the local subnet - 192.168.88.1.
by K1w1user
Thu Apr 03, 2014 5:21 am
Forum: General
Topic: Strange Switched Port issue
Replies: 0
Views: 488

Strange Switched Port issue

I have a RB2011UiAS-RM ROS6.4 that shows strange issues when using a group of ports configured as a switch which then connects to VMware ESXi 4.1 ether3 is a WAN connection with ip .2/24 with .1 the next hop ether4 has a server IMM at .11 ether5 has an ESX server with vmk (.8) and guests (.10, .12) ...
by K1w1user
Wed Feb 26, 2014 1:49 am
Forum: RouterBOARD hardware
Topic: 2011UiAS-2HnD: Ethernet port keeps on resetting
Replies: 1
Views: 937

Re: 2011UiAS-2HnD: Ethernet port keeps on resetting

I have seen this problem on some long cable runs, but haven't been able to solve it.

It could be EMF interference.
by K1w1user
Wed Feb 12, 2014 5:37 am
Forum: General
Topic: Strange ping behavior
Replies: 2
Views: 1156

Re: Strange ping behavior

I have just found something similar in ROS6.4mips while testing vlan's on the switch chips & QinQ.

Capture MT.PNG
by K1w1user
Wed Feb 05, 2014 4:18 am
Forum: General
Topic: export hide-sensitive
Replies: 1
Views: 2634

export hide-sensitive

What is determined as "sensitive" when doing an export with hide-sensitive ? It appears pptp-client passwords aren't very sensitive. [admin@router007] > /interface pptp-client export hide-sensitive # feb/05/2014 15:13:38 by RouterOS 6.4 # software id = ZZZZ-SSSS # /interface pptp-client add allow=ms...
by K1w1user
Thu Jan 30, 2014 1:04 am
Forum: General
Topic: Simple Queue on vlan
Replies: 0
Views: 1307

Simple Queue on vlan

I'm trying to set simple queues for outbound traffic on two vlans on the same ethernet port (ether2). One queue works, but the other doesn't- no traffic shows in the statistics. The goal is to have the queue limits change at a scheduled time, which looked easy to do. queue-b-norm limits exactly as e...
by K1w1user
Mon Jan 20, 2014 10:12 pm
Forum: General
Topic: Improved PPP package for v6.x
Replies: 45
Views: 17842

Re: Improved PPP package for v6.x

Any fixes likely for sstp ? It is incapable of staying up for more than a day, compared to pptp. Usually, both ends claim the other one disconnected or timed out. I've ditched sstp and reverted to pptp, which is not considered as secure. When the sstp is replaced, on the same hardware, it then can s...
by K1w1user
Thu Dec 05, 2013 4:36 am
Forum: The Dude
Topic: Part of diveces not resolving snmp
Replies: 2
Views: 2023

Re: Part of diveces not resolving snmp

check snmp community and security settings on the target.
by K1w1user
Thu Dec 05, 2013 4:33 am
Forum: The Dude
Topic: Icons show unknown status
Replies: 2
Views: 1798

Re: Icons show unknown status

have you tried deleting and recreating it ?

I have had odd issues with services that didn't exist showing as down, and that seemed to be the only thing taht worked.
by K1w1user
Mon Dec 02, 2013 11:29 pm
Forum: The Dude
Topic: Disk size snmp issue
Replies: 1
Views: 1616

Re: Disk size snmp issue

Well I worked it out eventually. For a disk at index 2, this will handle the negative offset. Adjust the last digit of the iods after the first one for other offsets ie. change 1.3.6.1.2.1.25.2.3.1.6.2 to 1.3.6.1.2.1.25.2.3.1.6.3 etc. It seems to be within about .5% accurate. Function named UsedDisk...
by K1w1user
Mon Dec 02, 2013 5:04 am
Forum: The Dude
Topic: Disk size snmp issue
Replies: 1
Views: 1616

Disk size snmp issue

I'm trying to create a probe to monitor specific disks % free space. It has struck the 32bit integer wrap issue in snmp for large disks i.e. the oid value returned is negative I notice that this is corrected internally by the built in view. How do I replicate this with a function ? Something like th...
by K1w1user
Wed Nov 20, 2013 3:13 am
Forum: General
Topic: Known issues and bugs - a list
Replies: 283
Views: 119994

Re: Known issues and bugs - a list

New Bug May specific to the RB2011UiAS-RM. I haven't seen this previously on the RB2011UAS-RM with ROS 6.1. Encountered with the "as shipped" ROS 6.1 serial console login goes missing after removing default configuration. I have 10 being updated and configured, and 50% so far have dropped the serial...
by K1w1user
Mon Nov 18, 2013 3:56 am
Forum: General
Topic: LCD Control in WINBOX
Replies: 8
Views: 2131

Re: LCD Control in WINBOX

Same problem with a RB2011UiAS-RM and ROS 6.4
No LCD in Winbox menu.

I have been using the RB2011UAS-RM and ROS 6.4 without any issues.
by K1w1user
Mon Nov 18, 2013 2:51 am
Forum: General
Topic: 1:1 Nat issues
Replies: 2
Views: 951

Re: 1:1 Nat issues

The only NAT rules are those listed.

All the addresses in use in 172.20.202 have a 1:1 nat, so no masquerade has been added.
by K1w1user
Tue Nov 12, 2013 2:43 am
Forum: General
Topic: 1:1 Nat issues
Replies: 2
Views: 951

1:1 Nat issues

I'm having problems with 1:1 nat, where some rules always work, and some don't always. This happens on a few different RB models and ROS versions about 10% of the time. Nothing complicated Hide a local address behind a WAN address No firewall rules, tracking is auto. /ip address add address=172.20.2...
by K1w1user
Wed Oct 09, 2013 4:23 am
Forum: General
Topic: sstp unreliability a bug ?
Replies: 4
Views: 2023

Re: sstp unreliability a bug ?

I gave up on sstp and now use pptp.

It may be less secure, but uptimes are now measured in days instead of minutes.
by K1w1user
Tue Sep 24, 2013 4:57 am
Forum: General
Topic: IPSec/L2TP VPN on Mikrotik behind NAT but with FQDN
Replies: 31
Views: 31531

Re: IPSec/L2TP VPN on Mikrotik behind NAT but with FQDN

I have two Mikrotik devices, x86 and RB1100AHX2 that currently use IPSEC Tunnel mode both behind Cisco Firewalls and using nat at both ends. So it can be done with mikrotik ROS 6.3 in tunnel mode. I'm still working on solving the transport mode option. The policy sa-src-address should be the local o...
by K1w1user
Fri Sep 20, 2013 1:49 am
Forum: General
Topic: RJ45 loopback behaviour
Replies: 0
Views: 571

RJ45 loopback behaviour

On an RB2011UAS ROS 6.3, I have noticed odd behaviour with an RJ45 loopback plug. While testing the 100Mbit ports, they seem to ignore it - don't come up active when I plug it in. If I connect a switch to the port first, and then the loopback plug, it comes up for the switch, down when I take the ca...
by K1w1user
Mon Sep 16, 2013 7:49 am
Forum: General
Topic: sstp unreliability a bug ?
Replies: 4
Views: 2023

Re: sstp unreliability a bug ?

Already tried upgrade to 6.3, which had changes, but same result.
by K1w1user
Fri Sep 13, 2013 6:21 am
Forum: General
Topic: sstp unreliability a bug ?
Replies: 4
Views: 2023

sstp unreliability a bug ?

sstp appears unable to stay up for long. Normal seems to be less than a day, and typical about 20 mins. The server claims the clinet disconnected and the client claims the server timed out. ROS6.3 RB750GL to x86 ping time 28-761ms av 31ms and packet loss between the client and server is under 10 pac...
by K1w1user
Fri Sep 13, 2013 5:59 am
Forum: General
Topic: sstp idle time
Replies: 1
Views: 647

Re: sstp idle time

Nope, it's gone in 6.3
by K1w1user
Tue Sep 10, 2013 11:11 pm
Forum: General
Topic: sstp idle time
Replies: 1
Views: 647

sstp idle time

The displayed idle time doesn't make sense, and may be why sstp is so unreliable, with constant timeouts where each end reports the other has disconnected. idle-time (time) Elapsed time since last activity on the tunnel. On a very busy sstp connection you get an idle time = uptime, the opposite to w...
by K1w1user
Tue Apr 02, 2013 3:01 am
Forum: General
Topic: 5.23 mipsbe export problem
Replies: 7
Views: 1565

Re: 5.23 mipsbe export problem

Export is definitely still missing most of /ethernet on multiple RB2011UAS-RM's updated with 5.24 Update: This bug seems to be related to what packages are active. on a 5.21, export sections are missing after I disabled these /system package disable hotspot disable dhcp disable wireless disable mpls...
by K1w1user
Mon Mar 25, 2013 12:58 am
Forum: General
Topic: 6.0rc11 on Fit-PC2 - no Hard Disk
Replies: 4
Views: 1938

Re: 6.0rc11 on Fit-PC2 - no Hard Disk

This is an Atom chipset with Phoenix bios and I have jsut discovered that uses a uses Marvell IDE-to-SATA bridge sata interface.

I checked and the wireless isn't Atheros, so I would need to change the module to make that work.
by K1w1user
Thu Mar 21, 2013 12:54 am
Forum: General
Topic: 6.0rc11 on Fit-PC2 - no Hard Disk
Replies: 4
Views: 1938

6.0rc11 on Fit-PC2 - no Hard Disk

I have the x86 6.0rc11 running on a Fit-PC2i, but only on a usb key since it doesn't find the disk - lacking the correct driver. I still need to test it more thoroughly, as it seems to be somewhat unstable. Issues so far very slow to boot. no support for wireless Is adding a disk driver possible ? D...