Community discussions

MikroTik App

Search found 292 matches

by erlinden
Sun May 31, 2020 7:22 pm
Forum: Beginner Basics
Topic: hAP AC2 management problem
Replies: 3
Views: 256

Re: hAP AC2 management problem

I prefer to start without configuration. In your case: create bridge (and add dhcp-client), add all interfaces and configure wireless. That's basically it...
by erlinden
Sat May 30, 2020 11:10 am
Forum: Beginner Basics
Topic: Kid Control Past Midnight
Replies: 1
Views: 259

Re: Kid Control Past Midnight

You have to think in days. In your case on friday from 8:00:00 till 23:59:59 an don saturday from 0:00:00 till 2:00:00. You can set the unlimited rate to the entire day and add the hours were the rate limit is not set. I didn't block Internet entirely, instead introduced rate limit (of 64k). This wa...
by erlinden
Fri May 29, 2020 5:17 pm
Forum: Wireless Networking
Topic: rb4011or rt5300ac
Replies: 9
Views: 1204

Re: rb4011or rt5300ac

Perhaps we can have a look at your config (/export hide-sensitive file=config)?
Sometimes we can advice some optimizations/improvements...
by erlinden
Fri May 29, 2020 10:49 am
Forum: Wireless Networking
Topic: Netmetal AC2 Disappointments [SOLVED]
Replies: 30
Views: 3405

Re: Netmetal AC2 Disappointments [SOLVED]

I swear to god there wasn't. I'm so embarrassed now ffs. I should've stayed with Ruckus unleashed or ubiquiti.
I absolutely fully disagree...but choosing the correct product is necessary.
by erlinden
Thu May 28, 2020 11:07 am
Forum: General
Topic: question about ftp server
Replies: 1
Views: 347

Re: question about ftp server

My suggestion would be:
  • don't use ftp server, use ftps
  • get a dedicated server (as I assume you want to abuse a MikroTik device for this purpose)
by erlinden
Mon May 25, 2020 10:22 am
Forum: General
Topic: Vpn L2TP/IPSEC
Replies: 12
Views: 1480

Re: Vpn L2TP/IPSEC

@Discmandj: can you please share your config /export hide-sensitive file=config
@kretzu77: works on my machine :wink:
by erlinden
Sun May 24, 2020 5:39 pm
Forum: Beginner Basics
Topic: How to setup VLANs?
Replies: 5
Views: 781

Re: How to setup VLANs?

To start with...show your config: /export hide-sensitive file=router

Though being in Dutch (or Belgian if you wish), this sample might give you a good direction:
https://www.wirelessinfo.be/mikrotik-vl ... figuratie/
by erlinden
Fri May 22, 2020 11:07 am
Forum: Wireless Networking
Topic: 5 GHz start up time - 10 min. [hAP ac2] [SOLVED]
Replies: 3
Views: 732

Re: 5 GHz start up time - 10 min. [hAP ac2] [SOLVED]

In addition to santyx32, it is not device or MikroTik related, this is standard behavior.
by erlinden
Fri May 22, 2020 12:03 am
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

Re: CRS112 after configuration not managable

Okay, but, where are your IP addresses? Also, you are referring to MGMT interface in your config but I can't see where you create it. IP address is received by the DHCP client. The MGMT interface is a interface VLAN. By leaving the switch1-cpu out of the switch vlan no management traffic was possib...
by erlinden
Thu May 21, 2020 11:29 am
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

Re: CRS112 after configuration not managable

Found out that I was missing the switch1-cpu added as tagged port, herewith the full config. This config contains: ether1 - trunk (VLAN50/51/52) ether2 - accessport (VLAN50) ether3 - accessport (VLAN50) ether4 - accessport (VLAN50) ether5 - trunk (VLAN50/51) ether6 - trunk (VLAN50/51) ether7 - acces...
by erlinden
Wed May 20, 2020 12:23 pm
Forum: Wireless Networking
Topic: 4k over wifi
Replies: 28
Views: 3373

Re: 4k over wifi

Config would be helpful: /export hide-sensitive
At what speed are the pc and tv connected?

And...agree with pe1chl
by erlinden
Tue May 19, 2020 8:22 pm
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

Re: CRS112 after configuration not managable

I'll give it a try later tonight, thank you very much for your help @thekinrar!
by erlinden
Tue May 19, 2020 8:02 pm
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

Re: CRS112 after configuration not managable

No, no IP address yet. How would I do that (specifically: how can I assign an IP address on the VLAN)?
by erlinden
Tue May 19, 2020 6:37 pm
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

Re: CRS112 after configuration not managable

Thanks @thekinrar, unfortunately this was left in the configuration. It does not affect it, as ether3 is the only connection I can use to manage. If I use any other (access) port it won't work.
by erlinden
Tue May 19, 2020 3:41 pm
Forum: General
Topic: CRS112 after configuration not managable
Replies: 9
Views: 1341

CRS112 after configuration not managable

Just finished completing my network with VLAN's, everything changed to VLAN networks. I chose HOME (50), GUEST (51) and VIDEO (52). VLAN filtering makes my CRS112 peak on CPU, seems that there is a better way: https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_series_switches_examples#Example_1_.28Tru...
by erlinden
Sun May 17, 2020 11:06 am
Forum: Wireless Networking
Topic: Audience Frequency
Replies: 7
Views: 739

Re: Audience Frequency

I thought that any 5GHz supporting device is able to communicate on channels 36 - 48. Only DFS channels (and sometimes 149 and above if applicable in selected country) gives problems sometimes. But...please correct me if I'm wrong.
by erlinden
Sat May 16, 2020 2:10 pm
Forum: Wireless Networking
Topic: Mikrotik AC Access Point cap ac
Replies: 36
Views: 4180

Re: Mikrotik AC Access Point cap ac

And again, someone must start telling the painful truth about Mikrotik wifi issues and warn others. Your fannboy attitude proves, that I'm on the right track. I guess sooner or later some fannboy will kick me out of this forum, but again, this proves, that I'm on the right track, telling the painfu...
by erlinden
Sat May 16, 2020 1:20 pm
Forum: Wireless Networking
Topic: Mikrotik AC Access Point cap ac
Replies: 36
Views: 4180

Re: Mikrotik AC Access Point cap ac

A sportscar requires better driving skills. How I know...? Never seen a sticker on those as well :wink:

In the end...it all comes down to fulfilling requirements. And mine are fulfilled by MikroTik (though Unifi was giving me higher speeds).
by erlinden
Sat May 16, 2020 11:33 am
Forum: Wireless Networking
Topic: Mikrotik AC Access Point cap ac
Replies: 36
Views: 4180

Re: Mikrotik AC Access Point cap ac

I have spend a lot of time on the UBNT forum, mostly helping others. I think that forums in common are the best resource for solving problems. Especially because you get support from a community. And not only the community, there are some MikroTik employees giving good information as well. I believe...
by erlinden
Sat May 16, 2020 11:01 am
Forum: Wireless Networking
Topic: Mikrotik AC Access Point cap ac
Replies: 36
Views: 4180

Re: Mikrotik AC Access Point cap ac

@ksuuk, it is obvious that you are disappointed in MikroTik. And I agree on some points. But, my experience and expectations differs from yours a lot: getting a decent 450Mbps through iperf on my Dell laptop (from a cAP AC). Besides, it outperforms UBNT on stability...a lot (have been using UAP-AC-L...
by erlinden
Thu May 14, 2020 6:05 pm
Forum: Beginner Basics
Topic: CAPsMAN and WIFI issues
Replies: 1
Views: 329

Re: CAPsMAN and WIFI issues

Couple of things:
Tweaking can be done later (as the Wiki is a bit outdated)
by erlinden
Thu May 14, 2020 5:21 pm
Forum: Announcements
Topic: v6.46.6 [stable] is released!
Replies: 68
Views: 28955

Re: v6.46.6 [stable] is released!

Were v6.46.6 and 6.47beta53 re-released today? Why?
For the v6.46.6 the date was "Tue Apr 28, 2020 1:03 pm", why re-released?
by erlinden
Sat May 09, 2020 11:05 am
Forum: Wireless Networking
Topic: Band steering Mikrotik Audience and other aps [SOLVED]
Replies: 2
Views: 488

Re: Band steering Mikrotik Audience and other aps [SOLVED]

In my opinion bandsteering is very much overrated, especially because: - In the WiF spoecifications it was never mentioned/described and therefor manufactures all have their own implementation (and they don't work as good as you might think) - All modern devices (Android/iOS/Windows/etc.) will prefe...
by erlinden
Fri May 08, 2020 4:21 pm
Forum: Beginner Basics
Topic: How to access network from internet for some IP [SOLVED]
Replies: 7
Views: 872

Re: How to access network from internet for some IP [SOLVED]

Or better, use a VPN server for additional security (together with address list for allowed VPN IP's).
by erlinden
Thu Apr 30, 2020 2:26 pm
Forum: General
Topic: Can't update - could not resolve DNS name error [SOLVED]
Replies: 12
Views: 2116

Re: Can't update - could not resolve DNS name error [SOLVED]

Other option (don't know if the above will work) is to add a DHCP client. Or add an IP address manually (and set the gateway/DNS servers)). Think is required to make the update work.
by erlinden
Thu Apr 30, 2020 1:11 pm
Forum: Wireless Networking
Topic: hAP ac lite router will not connect wifi printer to network
Replies: 6
Views: 1411

Re: hAP ac lite router will not connect wifi printer to network

Please start by sharing your configuration: /export hide-sensitive
Besides...Canon has a lot of printers...model would be useful.
by erlinden
Thu Apr 30, 2020 11:10 am
Forum: General
Topic: Network security in combination with a home webserver
Replies: 2
Views: 758

Re: Network security in combination with a home webserver

Forget about DMZ, it will definitely weaken your security. You might want to consider using VLAN's to prevent your webserver from being able to connect with your private network. Add a hairpin NAT and you will be able to access your server on port 80 and 443. Only thing you have to think of is how t...
by erlinden
Wed Apr 29, 2020 1:12 pm
Forum: Wireless Networking
Topic: wAP AC - 5Ghz wireless very slow
Replies: 13
Views: 2062

Re: wAP AC - 5Ghz wireless very slow

Are both devices connected wirelessly while running iPerf?
In that case, can you at least have one device connected through cable?
by erlinden
Wed Apr 29, 2020 12:20 pm
Forum: Wireless Networking
Topic: wAP AC - 5Ghz wireless very slow
Replies: 13
Views: 2062

Re: wAP AC - 5Ghz wireless very slow

At what speed is the MB connected? Is it 3x3 capable?
by erlinden
Wed Apr 29, 2020 11:27 am
Forum: Beginner Basics
Topic: PPTP VPN ERROR
Replies: 3
Views: 708

Re: PPTP VPN ERROR

Hopefully this is of any use:
viewtopic.php?t=82462
by erlinden
Wed Apr 29, 2020 11:04 am
Forum: Beginner Basics
Topic: PPTP VPN ERROR
Replies: 3
Views: 708

Re: PPTP VPN ERROR

You don't want to use PPTP, please use any better option like L2TP over IPSEC.
by erlinden
Wed Apr 29, 2020 9:33 am
Forum: Wireless Networking
Topic: wAP AC - 5Ghz wireless very slow
Replies: 13
Views: 2062

Re: wAP AC - 5Ghz wireless very slow

Couple of suggestions:
  • Turn of a, only use n/ac
  • Don't use anything other then WPA2-AES
  • Distance Indoors (if used indoors)
  • Turn on WMM
  • Rates: 12/24 (basic) and 12 - 54 (supported)
  • Choose channel manually
  • Lower (max) transmission power by 3dB
by erlinden
Tue Apr 28, 2020 9:36 am
Forum: Beginner Basics
Topic: 2x cAP on wired network config help
Replies: 2
Views: 1081

Re: 2x cAP on wired network config help

You might want to tweak the transmission power setting. Make sure it is set 'as low as possible'. And just to be sure...channels are set non overlapping?
by erlinden
Fri Apr 24, 2020 11:25 am
Forum: Wireless Networking
Topic: Mikrotik as repeater for Ubiquiti network
Replies: 9
Views: 1490

Re: Mikrotik as repeater for Ubiquiti network

I found this question was moot as the Mikrotik doesn't work very well as a repeater for a non mikrotik device. Mmmm...I have been using my hAP ac Lite as travel router for quiet some time...never had any problems on any wireless network. @TS: I would never combine multiple vendors for my wireless n...
by erlinden
Wed Apr 22, 2020 6:23 pm
Forum: Wireless Networking
Topic: Cap AC wifi speed is terrible bad.
Replies: 80
Views: 9398

Re: Cap AC wifi speed is terrible bad.

MikroTik is great stuff and it requires a learning curve. There community is great and really active. For any user from beginner to master. Good, in regards to your problem: your settings require optimization. Already mentioned by @heidarren there are some basic settings that have to be obeyed. In r...
by erlinden
Wed Apr 22, 2020 9:13 am
Forum: RouterBOARD hardware
Topic: wAP with missing N rate
Replies: 3
Views: 1099

Re: wAP with missing N rate

Besides, please don't use extension channels on the 2G radio. And...do you really need 802.11b support?
by erlinden
Wed Apr 22, 2020 9:04 am
Forum: Beginner Basics
Topic: 1oo4 CAP won't show SSID
Replies: 2
Views: 778

Re: 1oo4 CAP won't show SSID

Couple of (related?) things:
  • Make sure you are running the same firmware and RouterOS version
  • Turn down the transmission power, especially on the 2G radio
  • Don't use extension channels on the 2G radio
by erlinden
Mon Apr 20, 2020 1:11 pm
Forum: General
Topic: cAP AC 5G WLAN not connecting to CAPsMAN [SOLVED]
Replies: 4
Views: 1118

Re: cAP AC 5G WLAN not connecting to CAPsMAN [SOLVED]

Could you please share your settings? (/export hide-sensitive)
Did you configure your channel manually?
by erlinden
Sat Apr 18, 2020 11:05 am
Forum: Wireless Networking
Topic: CAPsMAN config CAP how to use a "Channel List" [SOLVED]
Replies: 12
Views: 2666

Re: CAPsMAN config CAP how to use a "Channel List" [SOLVED]

No answer to your initial question, but one thing you have to change: /caps-man security add authentication-types=wpa-psk,wpa2-psk disable-pmkid=yes encryption=aes-ccm group-encryption=aes-ccm group-key-update=1h name=Security passphrase=12345678 Really really don't use wpa-psk ! Just use wpa2-psk a...
by erlinden
Fri Apr 17, 2020 9:11 am
Forum: General
Topic: Call of Duty PC Game
Replies: 2
Views: 1091

Re: Call of Duty PC Game

I think that any game should be able to run without having to open ports. Only if you run a game server, ports need to be opened (which makes sense). Especially on game consoles some games require open ports and therefor rely on solutions like UPnP. It stinks. Back to the problem...could it be that ...
by erlinden
Mon Apr 06, 2020 4:11 pm
Forum: Wireless Networking
Topic: Additional AP
Replies: 11
Views: 2345

Re: Additional AP

I used to have Unifi, and switched to MikroTik. In my home I have two cAP ac's and outside a wAP ac. I would choose the latter if I would have 3x3 clients, but I don't. So I choose the cAP ac's, the wAP ac I already owned. Though band steering sounds great, it is completely useless if you configure ...
by erlinden
Sun Apr 05, 2020 7:56 pm
Forum: Wireless Networking
Topic: Wifi bandwith
Replies: 3
Views: 1767

Re: Wifi bandwith

At what speed is the device connected (both upstream and downstream)?
Differrence is that in the first scenario (download) the accesspoint is the sender and the device the receiver, in the latter its vice versa.
by erlinden
Fri Apr 03, 2020 4:32 pm
Forum: Beginner Basics
Topic: RB260GS + hAP ac
Replies: 9
Views: 1785

Re: RB260GS + hAP ac

What is the purpose of this switch? Or there any wired devices connected to the switch? Does it work when you only connect the router? I've restored the router to factory defaults and made the setup of wifi, and set IP as 192.168.88.1. DHCP is on. IP of the switch is 192.168.88.2. The address on the...
by erlinden
Fri Apr 03, 2020 7:43 am
Forum: Beginner Basics
Topic: I enabled upnp but still nat moderate.
Replies: 8
Views: 2066

Re: I enabled upnp but still nat moderate.

I have same problem too, And i manage to successfully port foward ports for my PC and works now cool, but the problem is what I have and brother too, How to portfoward port 3074 to multiple PC's
You can't (if your public port must be 3074) unless you have multiple public IP addresses.
by erlinden
Wed Apr 01, 2020 9:21 am
Forum: General
Topic: need help in vpn
Replies: 12
Views: 2743

Re: need help in vpn

Can you please share your configuration (/export hide-sensitive)?
by erlinden
Fri Mar 27, 2020 2:00 pm
Forum: Beginner Basics
Topic: Can't access newly configured AP [SOLVED]
Replies: 10
Views: 2419

Re: Can't access newly configured AP [SOLVED]

The AP is not configured as AP, but as router. Unless you posted the router export instead of the AP. What I prefer to do in case of configuring as AP: reset with no default configuration create a bridge add all interfaces to that bridge configure wireless (select channel manually either 1/6/11, and...
by erlinden
Wed Mar 25, 2020 9:07 am
Forum: Beginner Basics
Topic: ddns problem please..me.. [SOLVED]
Replies: 7
Views: 1713

Re: ddns problem please..me.. [SOLVED]

I think you don't have a DDNS problem, but (as RouterOS is telling you) your MikroTik router is behind a NAT router. Therefor, it does not get a public IP address assigned on the WAN interface. Is it correct that the WAN interface of your MikroTik is connected to (i.e.) the ISP modem/router? Or is i...
by erlinden
Tue Mar 24, 2020 2:45 pm
Forum: Beginner Basics
Topic: Blocking TikTok [SOLVED]
Replies: 6
Views: 2554

Re: Blocking TikTok [SOLVED]

Perhaps you can share the way you have configured it now?
by erlinden
Fri Mar 20, 2020 5:47 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 firmware bin
Replies: 8
Views: 2516

Re: hAP AC2 firmware bin

No activity on the wireless interfaces as well?
by erlinden
Fri Mar 20, 2020 9:53 am
Forum: Wireless Networking
Topic: CAPsman - Is this possible ?? [SOLVED]
Replies: 12
Views: 2384

Re: CAPsman - Is this possible ?? [SOLVED]

You can make x (i.e. 3 or 38) security configurations per SSID (containing the corresponding password of the SSID). Changing a password would be done in a single place.

Can you please explain: starting with 3 accesspoints and changing your question to a situation of 38 accesspoints!?
by erlinden
Thu Mar 19, 2020 6:58 pm
Forum: General
Topic: my mac address is banned on CRS125-24G-1S-2HND-IN
Replies: 4
Views: 1205

Re: my mac address is banned on CRS125-24G-1S-2HND-IN

Export a configuration and search for your MAC address. If you can find it, you can delete it.
by erlinden
Thu Mar 19, 2020 6:56 pm
Forum: Wireless Networking
Topic: CAPsman - Is this possible ?? [SOLVED]
Replies: 12
Views: 2384

Re: CAPsman - Is this possible ?? [SOLVED]

Make three configurations, 1 per accesspoint. That way you can specify a single SSID per accesspoint.
But...why? You are still on the same network (unless client isolation is activated).

What is the purpose? Perhaps the answer is not suitable for your problem...
by erlinden
Thu Mar 19, 2020 1:50 pm
Forum: Wireless Networking
Topic: hAP and cAP lite slow wifi
Replies: 7
Views: 1766

Re: hAP and cAP lite slow wifi

Don't use auto channel, select channels manually by choosing channel 1, 6 or 11 and make sure they are non overlapping. Also take into account other wireless networks in the neighborhood. May I ask...why (still) 2G radios? If you want to increase performance, please change to 5G radios.
by erlinden
Wed Mar 18, 2020 8:57 am
Forum: General
Topic: pptp ppp error someone wanna reach my network?
Replies: 3
Views: 1118

Re: pptp ppp error someone wanna reach my network?

Thank you for your reply
Good to hear!
by erlinden
Tue Mar 17, 2020 3:25 pm
Forum: Wireless Networking
Topic: RBcAPGi-5acD2nD [SOLVED]
Replies: 7
Views: 2523

Re: RBcAPGi-5acD2nD [SOLVED]

Don't use auto, specify channel (i.e.) manually.
Rates: basic 12 Mbps, supported: 12/18/24/36/48/54
Country: select yours
Installation: indoors
Security: use aes only

What firmware version are you using? The latest stable is working very good for me.
by erlinden
Tue Mar 17, 2020 9:37 am
Forum: General
Topic: Iphone connecting issue.
Replies: 2
Views: 1263

Re: Iphone connecting issue.

Lease time is configured in the DHCP server. It would surprise me if this is causing the problem.

Can you please share your configuration? Just make sure that there are no passwords in it...
by erlinden
Tue Mar 17, 2020 9:17 am
Forum: General
Topic: pptp ppp error someone wanna reach my network?
Replies: 3
Views: 1118

Re: pptp ppp error someone wanna reach my network?

Any service you offer to the internet can be compromised. Especially the legacy stuff like PPTP is subject to attacks. As you are a MikroTik user, please consider using IPSEC of LT2P. This is offloaded (depending on your hardware) and supported by any device without the need of additional components...
by erlinden
Fri Mar 13, 2020 2:54 pm
Forum: Wireless Networking
Topic: MikroTik Audience slow speed WiFi, why?
Replies: 26
Views: 4560

Re: MikroTik Audience slow speed WiFi, why?

CAPsMAN lags just a few configuration possibilities, but it works great (at least, that is my experience).
by erlinden
Wed Mar 11, 2020 5:24 pm
Forum: Beginner Basics
Topic: RB1100AHx2 upgrade 6.32.4 to 6.46.4
Replies: 6
Views: 1798

Re: RB1100AHx2 upgrade 6.32.4 to 6.46.4

As also mentioned in the installer: remember to make a backup before you start upgrading. But you probably already know that...

Anything special in your configuration? Why is it still on the current version?
by erlinden
Thu Mar 05, 2020 12:43 pm
Forum: Wireless Networking
Topic: Hap AC2 - crap wifi 5GHz
Replies: 26
Views: 7148

Re: Hap AC2 - crap wifi 5GHz

Glad to see that more people recommend multiple accesspoints, having a single accesspoint in a house really makes no sense! Besides, MikroTik wireless is incredibly stable. But...you have to do a lot of tweaking and need some knowledge about WiFi. @TS: expectations are incorrect (in my opinion) and ...
by erlinden
Fri Feb 28, 2020 8:29 pm
Forum: Beginner Basics
Topic: Mikrotik and pihole as a DNS server
Replies: 10
Views: 4134

Re: Mikrotik and pihole as a DNS server

I would:

- put the PiHole IP address (as only address) in the DHCP options as DNS server
- use a second PiHole if it is required (I'm currently using Docker to host my PiHole) and have that as second DNS server in the DHCP scope
- block all traffic port 53 to the Internet, except for the PiHole(s)
by erlinden
Wed Feb 26, 2020 6:57 pm
Forum: Beginner Basics
Topic: Allow website access
Replies: 6
Views: 2010

Re: Allow website access

Do you have the MikroTik firewall inbetween the LAN connected computers and the server? - it is.
Configure the firewall for allowing access to the webserver.
by erlinden
Wed Feb 26, 2020 5:53 pm
Forum: Beginner Basics
Topic: Allow website access
Replies: 6
Views: 2010

Re: Allow website access

- why port 93? - I'm happy to switch it to 80, not an issue. Well, it requires users to add :93 in the URL. - IIS7...why? Think that version is ancient!? - Because it's what they have at the place i've just started My advice, don't make this a public facing webserver - What Windows version are you ...
by erlinden
Wed Feb 26, 2020 5:43 pm
Forum: Beginner Basics
Topic: Allow website access
Replies: 6
Views: 2010

Re: Allow website access

Could you please telnet to your server IP (from any computer other then the server running the website) on port 93 and check if you get a response? Besides that...a lot of questions: - why port 93? - IIS7...why? Think that version is ancient!? - What Windows version are you running? - Does your Wind...
by erlinden
Wed Feb 26, 2020 12:49 pm
Forum: Wireless Networking
Topic: Firewall disabling my wireless interface in CAPsMAN
Replies: 22
Views: 4504

Re: Firewall disabling my wireless interface in CAPsMAN

Could you please share you CAPsMAN settings as well? And perhaps your entire cofiguration would be beneficial too.

What is the purpose of giving your wireless interfaces an IP address? And why would you like to have two seperate interfaces the same IP? Are the wireless interfaces part of a bridge?
by erlinden
Sat Feb 22, 2020 2:42 pm
Forum: Wireless Networking
Topic: Super slow WiFi speed on default configuration
Replies: 2
Views: 1757

Re: Super slow WiFi speed on default configuration

Default wireless configuration is like not really optimized... To get best performance: - use 20MHz bandwidth - choose channel manually, either 2412/2437/2462 (perform a scan to get least used channel) - set encryption on aes-ccm Besides...what are you expecting? And what made you choose the RB2011 ...
by erlinden
Sat Feb 22, 2020 10:35 am
Forum: Wireless Networking
Topic: roaming between 5G and 2G
Replies: 4
Views: 2108

Re: roaming between 5G and 2G

So you want to have some sort of failover. What makes it different from wired connections?

https://wiki.mikrotik.com/wiki/Load_Balancing#Failover
by erlinden
Fri Feb 21, 2020 3:56 pm
Forum: General
Topic: RB750gr3 redemarre sans cesse
Replies: 2
Views: 880

Re: RB750gr3 redemarre sans cesse

English translation (thanks to Google translate): Hello, i have a problem with my mikrotik rb750gr3 and i need your help. Please help me please. my Mikrotik RB750Gr3 constantly reboots and I don't know what to do. I remind you that this is the second one I buy, the first one did the same thing and i...
by erlinden
Thu Feb 20, 2020 5:12 pm
Forum: General
Topic: Two Internet Links
Replies: 1
Views: 808

Re: Two Internet Links

Is it possible to simulate two test links with a single internet?
With a router in front it is really easy (you might want to consider VLAN's) to simulate two links.
Can I configure two Internet Links as DHCP?
What do you mean by this question?
by erlinden
Wed Feb 19, 2020 11:08 am
Forum: Wireless Networking
Topic: roaming between 5G and 2G
Replies: 4
Views: 2108

Re: roaming between 5G and 2G

What are you trying to accomplish functionally?

"I want it to act as a client "
Do you want to use a wireless backhaul on the RB?

Roaming is a client decision.
by erlinden
Tue Feb 18, 2020 2:04 pm
Forum: Beginner Basics
Topic: VLAN+CAPS-MAN Config
Replies: 2
Views: 1295

Re: VLAN+CAPS-MAN Config

VLAN can be configured through datapaths:
https://wiki.mikrotik.com/wiki/Manual:C ... figuration

Can you please share your current configuration so we can supply additional information?
by erlinden
Mon Feb 17, 2020 3:40 pm
Forum: Beginner Basics
Topic: Stupid Questions
Replies: 12
Views: 2778

Re: Stupid Questions

And with regards to the wireless part: - cAP ac and wAP ac are the obvious alternatives (the cAP ac has 2 x 2 where wAP ac and AC-Pro have 3x3) - though injectors are supplied, I would use a POE capable switch - CAPsMAN is great! Tuning is some work (learning curve is comparable with Unifi) Remote m...
by erlinden
Wed Feb 12, 2020 3:36 pm
Forum: Beginner Basics
Topic: Mikrotik 3011 - DNS issue
Replies: 3
Views: 1250

Re: Mikrotik 3011 - DNS issue

By adding static entries in the DNS server of the MikroTik. Did you do that? These entries will be supplied to the requesting clients locally.
by erlinden
Fri Feb 07, 2020 7:30 pm
Forum: Beginner Basics
Topic: Slow performance on WAP ac
Replies: 7
Views: 2086

Re: Slow performance on WAP ac

Again and Again, don't buy Mikrotik for Wireless, its outdated. Use Mikrotik for routing, ans nothing else.... I switched from Unifi to Mikrotik. Performance is decreased, but stability is increased. Really happy with my choice. Love the ability to configure...everything. Besides, with a well confi...
by erlinden
Wed Feb 05, 2020 10:41 pm
Forum: General
Topic: Problem with wifi
Replies: 3
Views: 622

Re: Problem with wifi

Could you please add the following information:

- devices
- firmware version
- settings
by erlinden
Wed Feb 05, 2020 3:07 pm
Forum: Announcements
Topic: MikroTik newsletter January 2020 (#93)
Replies: 26
Views: 22827

Re: MikroTik newsletter January 2020 (#93)

the NetMetal AC2 works over 100 km? or has it the same problem like the older AC that we get only about 80 MB throughput ??? no problem with the Old NetMetal AC tested 12.2 kilometers 232mbps TCP Speed....:-) M = Mega m = milli B = Byte b = bit s = seconds Usually throughput is measured in Mbps (i....
by erlinden
Wed Feb 05, 2020 1:25 pm
Forum: RouterBOARD hardware
Topic: Need advice
Replies: 2
Views: 2469

Re: Need advice

What is your definition of better? What are the requirements?
by erlinden
Wed Feb 05, 2020 11:11 am
Forum: General
Topic: Blocked external IP
Replies: 14
Views: 1458

Re: Blocked external IP

Interesting as I get these logging entries as well at around 3:00 AM, on a daily base. Does anyone have a clue who is behind these automated attempts?
by erlinden
Wed Feb 05, 2020 10:30 am
Forum: Wireless Networking
Topic: CAPsMAN Broken With 5Ghz AC?
Replies: 4
Views: 2016

Re: CAPsMAN Broken With 5Ghz AC?

1. Set the Control Channel Width to 20MHz
2. Set Extension Channel to Ceee (for 80MHz) or lower for 40MHz or 20MHz

With these settings you will be able to use ac.

Here is a good read: https://wiki.mikrotik.com/wiki/Manual:C ... nel_Groups
by erlinden
Wed Feb 05, 2020 10:24 am
Forum: Beginner Basics
Topic: new management accesss port
Replies: 10
Views: 1661

Re: new management accesss port

Are you trying to make http and winbox available on the WAN interface? Except for the http (hopefully port forwarded to a webserver and not the one integrated in the Mikrotik), I would like to advice you to only use these services locally or make them available through VPN. Can you please post an ex...
by erlinden
Fri Jan 31, 2020 1:19 pm
Forum: Wireless Networking
Topic: Best settings to get maximum speed for 5 GHz on RB4011
Replies: 10
Views: 2789

Re: Best settings to get maximum speed for 5 GHz on RB4011

Can you please post the output of /caps-man export hide-sensitive
by erlinden
Mon Jan 27, 2020 12:40 pm
Forum: Wireless Networking
Topic: 5GHz Wi-Fi frequencies in Russia - cAP ac
Replies: 6
Views: 1770

Re: 5GHz Wi-Fi frequencies in Russia - cAP ac

@mkx: strange indeed...I only tried to add it as channel, didn't try to provision it to a cap.
by erlinden
Mon Jan 27, 2020 10:46 am
Forum: Wireless Networking
Topic: 5GHz Wi-Fi frequencies in Russia - cAP ac
Replies: 6
Views: 1770

Re: 5GHz Wi-Fi frequencies in Russia - cAP ac

If I try to add channel 5805 in CAPsMAN it works without any problems (country set to Netherlands):

/caps-man channel
name="channel1" frequency=5805 control-channel-width=20mhz band=5ghz-n/ac extension-channel=disabled
by erlinden
Fri Jan 24, 2020 4:12 pm
Forum: General
Topic: status: ERROR: missing isdn-6.40
Replies: 4
Views: 623

Re: status: ERROR: missing isdn-6.40

A Google search gave me this topic:
viewtopic.php?t=100157
by erlinden
Fri Jan 24, 2020 10:23 am
Forum: Beginner Basics
Topic: no_country_set (regulatory domain) and fixed frequency for 5GHz channel
Replies: 15
Views: 2501

Re: no_country_set (regulatory domain) and fixed frequency for 5GHz channel

WiFi is a bit tricky, but can be optimized quiet well (I get around 400Mbps on my cAP ac). Though I use CaPsMAN, it gives a good direction on settings on wireless. I use (which works fine in the Netherlands) these settings: Frequency: 5500 Control Channel Width: 20Mhz Band: 5ghz-a/n/ac Extension cha...
by erlinden
Thu Jan 23, 2020 10:25 am
Forum: Wireless Networking
Topic: CAPsMAN can not ping it's CAPs
Replies: 3
Views: 1451

Re: CAPsMAN can not ping it's CAPs

First thing I notice is that the CAP doesn't have a bridge configured. If you reset a device to be a Cap it is added. Can you try to set it manually on the Cap and see if it makes a difference? Next I prefer to have the TX power on the 5G band higher than the 2G band, just to have as many devices on...
by erlinden
Wed Jan 22, 2020 5:36 pm
Forum: Wireless Networking
Topic: CAPsMAN can not ping it's CAPs
Replies: 3
Views: 1451

Re: CAPsMAN can not ping it's CAPs

Can you please share your configuration (except for the sensitive information)?
Did you add a DHCP client to the CAP?
by erlinden
Wed Jan 22, 2020 5:02 pm
Forum: Wireless Networking
Topic: Wireless channel in CapsMan
Replies: 1
Views: 1294

Re: Wireless channel in CapsMan

By not configuring the channel, the channel is automatically configured by RouterOS.
by erlinden
Wed Jan 22, 2020 5:00 pm
Forum: Wireless Networking
Topic: CAPsMAN, Dual SSID, Virtual Interface on a VLAN Tag
Replies: 3
Views: 1441

Re: CAPsMAN, Dual SSID, Virtual Interface on a VLAN Tag

You have to create additional configurations (lets call them cfg3 and cfg4). On the datapath of these configurations you can configure the vlan id. Then, on /caps-man provisioning you set slave-configuration to cfg3 and cfg4 Please check: https://wiki.mikrotik.com/wiki/Manual:CAPsMAN_with_VLANs#CAPs...
by erlinden
Wed Jan 22, 2020 3:40 pm
Forum: Beginner Basics
Topic: Hap lite dual wan
Replies: 3
Views: 1756

Re: Hap lite dual wan

Interfaces are interfaces, whether with cable or wireless. First: You will have to create a virtual interface on one of the two wireless interfaces (depending on what band you want to use) and set is as wireless bridge. You can find a great blogpost on how to use a hAP ac Lite as traveling router: h...
by erlinden
Tue Jan 21, 2020 4:41 pm
Forum: Wireless Networking
Topic: CAPsMAN, Dual SSID, Virtual Interface on a VLAN Tag
Replies: 3
Views: 1441

Re: CAPsMAN, Dual SSID, Virtual Interface on a VLAN Tag

Surely, no problem.
You can have multiple configurations and provision the Guest as Slave Configuration. Don't forget to define your VLAN (datapath is a great location).
by erlinden
Tue Jan 21, 2020 4:17 pm
Forum: General
Topic: system telnet not working
Replies: 5
Views: 674

Re: system telnet not working

Have you checked if the service is active?
by erlinden
Sat Jan 18, 2020 11:26 am
Forum: Wireless Networking
Topic: two issues with CAPsMAN and RBwAPG-5HacT2HnD
Replies: 2
Views: 1551

Re: two problem with CAPsMAN and RBwAPG-5HacT2HnD

Can you please share all your wireless settings?
by erlinden
Fri Jan 17, 2020 5:58 pm
Forum: General
Topic: L2TP/IPSEC VPN with Samsung Note 8
Replies: 6
Views: 1124

Re: L2TP/IPSEC VPN with Samsung Note 8

This blogpost was very helpful for me:
https://blog.johannfenech.com/mikrotik- ... pn-server/
by erlinden
Wed Jan 15, 2020 6:06 pm
Forum: General
Topic: HAP AC like simple switch wireless
Replies: 21
Views: 2441

Re: HAP AC like simple switch wireless

Might be caused by the wireless settings...how did you configure wireless?
by erlinden
Fri Jan 10, 2020 3:59 pm
Forum: Beginner Basics
Topic: Change network name [SOLVED]
Replies: 7
Views: 1619

Re: Change network name [SOLVED]

Hey. I believe this SSID name. And it can be changed in a router settings in WiFi section.
Would make sense if it was a WiFi adapter.

As far as I know it is a workgroup name (configured on the server).
by erlinden
Wed Jan 08, 2020 11:25 am
Forum: Scripting
Topic: How to get IP address through CAPsMAN?
Replies: 4
Views: 1961

Re: How to get IP address through CAPsMAN?

You mean you would like to have an overview of the IP addresses in the registration table as well? In that case, may I ask why?
Or do you mean you want your Caps device to have an IP address? In that case you want to add a DHCP client to the bridge on your Caps device.
by erlinden
Wed Jan 08, 2020 10:27 am
Forum: General
Topic: Wap AC, Dual Home AP
Replies: 12
Views: 1283

Re: Wap AC, Dual Home AP

Image
by erlinden
Tue Jan 07, 2020 6:15 pm
Forum: Beginner Basics
Topic: Invalid user/pass after reset
Replies: 16
Views: 1784

Re: Invalid user/pass after reset

SSH with default credentials (admin/blank). Configuration can be done through cli easily.
Browser option sounds possible, does Apple support InPrivcate browsing? Then you can just start an InPrivate tab.
by erlinden
Tue Jan 07, 2020 5:08 pm
Forum: Beginner Basics
Topic: Invalid user/pass after reset
Replies: 16
Views: 1784

Re: Invalid user/pass after reset

Can you try by using either SSH or Winbox?
by erlinden
Tue Jan 07, 2020 10:12 am
Forum: General
Topic: Wap AC, Dual Home AP
Replies: 12
Views: 1283

Re: Wap AC, Dual Home AP

Reset your device without configuration, and after that:

- create a bridge
- add all interfaces to that bridge
- configure wireless settings
- (optional) add dhcp-client to bridge
by erlinden
Mon Jan 06, 2020 4:36 pm
Forum: RouterBOARD hardware
Topic: Wi-Fi Roaming for the RB4011 Series
Replies: 10
Views: 4490

Re: Wi-Fi Roaming for the RB4011 Series

Roaming with mikrotik is very easy. just add wifi and ethernet in mesh bridge then in any side of APs add WDS, it's romaing you between APs without disconnects.
That will cost some performance as all nodes share the same channel.
by erlinden
Thu Jan 02, 2020 12:35 pm
Forum: Wireless Networking
Topic: hap ac2 802.11ac
Replies: 5
Views: 1782

Re: hap ac2 802.11ac

You can't as there is no ac support on the 2G radio.
https://en.wikipedia.org/wiki/IEEE_802.11
by erlinden
Thu Jan 02, 2020 12:21 pm
Forum: Wireless Networking
Topic: hap ac2 802.11ac
Replies: 5
Views: 1782

Re: hap ac2 802.11ac

Two bands, two independant speeds. I red that by using n/ac on the 5G radio you get better performance. Rates are not fixed and can depend on a lot of sources of interference. You don't have to use quick setup, it can be configured on the wireless interface settings.
by erlinden
Thu Jan 02, 2020 12:18 pm
Forum: General
Topic: CAPsMAN VLANs not working properly
Replies: 5
Views: 1018

Re: CAPsMAN VLANs not working properly

Try adding on the wireless cap the bridge interface, you don't need to user discovery interface as you are using L3 mode ( you have set up the CapsMan IP )
Exactly this, took me a lot of time to find out...
https://wiki.mikrotik.com/wiki/Manual:C ... CAPsMAN_v2
by erlinden
Thu Jan 02, 2020 12:16 pm
Forum: General
Topic: Second eth on cAP as switch
Replies: 2
Views: 399

Re: Second eth on cAP as switch

Create a bridge and add both eth1 and eth2 to this bridge.
by erlinden
Tue Dec 31, 2019 5:53 pm
Forum: General
Topic: Internet to M.T. router trough PC
Replies: 5
Views: 886

Re: Internet to M.T. router trough PC

Surely you can...if you create a bridge connection on your PC. But that would require both your PC and the MikroTik running.
The M.T. router is not going to be able to receive a LAN I.P. from the router, only the the PC will.
Not even if you clone the MAC address?
by erlinden
Tue Dec 31, 2019 4:21 pm
Forum: Beginner Basics
Topic: Can I change RB951Ui-2HnD Router admin port 80?
Replies: 4
Views: 1115

Re: Can I change RB951Ui-2HnD Router admin port 80?

Besides the above remarks; make sure that your routers services are not publically available. If you want remote access to your router, please use VPN.
by erlinden
Mon Dec 30, 2019 4:17 pm
Forum: Beginner Basics
Topic: how many client can connect to my router [SOLVED]
Replies: 6
Views: 1637

Re: how many client can connect to my router [SOLVED]

Why did he ask this question? And why did he ask you?
by erlinden
Mon Dec 16, 2019 5:22 pm
Forum: Beginner Basics
Topic: VPN PPTP [SOLVED]
Replies: 6
Views: 1088

Re: VPN PPTP [SOLVED]

Can you please explain why you chose PPTP over (i.e.) L2TP IPSEC?
by erlinden
Fri Dec 06, 2019 10:57 am
Forum: General
Topic: Problem with gateway ping
Replies: 2
Views: 433

Re: Problem with gateway ping

Is 6.42.10 the current version you are running? You might want to consider updating.

Besides, would be helpfull if you share your configuration...
by erlinden
Fri Dec 06, 2019 10:18 am
Forum: Wireless Networking
Topic: HAP ac RB962UiGS-5HacT2HnT - client1<->AP<->client2 no more 150Mbit speed iperf3
Replies: 8
Views: 2238

Re: HAP ac RB962UiGS-5HacT2HnT - client1<->AP<->client2 no more 150Mbit speed iperf3

What were you expecting?

WiFi is a shared medium, and both clients are connected wirelessly. So, I'm not really surprised by the outcome. How did you use iperf, did you use single stream or multiple streams?

In addition, I would always use fixed channels.
by erlinden
Tue Dec 03, 2019 5:40 pm
Forum: Forwarding Protocols
Topic: 3 Devices, 1 Port. [SOLVED]
Replies: 3
Views: 2067

Re: 3 Devices, 1 Port. [SOLVED]

Assuming you are using port forwards (which is in my opinion not a good option), you can only choose different public ports (translating to the private ports of the cameras.
In my network I only have VPN access from the Internet, any device can be reached on IP address while there is a VPN connection.
by erlinden
Tue Dec 03, 2019 3:33 pm
Forum: Wireless Networking
Topic: ~40 clients devices to 4 AP - really ? (Wi-Fi)
Replies: 6
Views: 1876

Re: ~40 clients devices to 4 AP - really ? (Wi-Fi)

Still puzzled by your topic, I'll just leave my two cents... wAP 2nD AP is 2G only, don't you want/need 5G (as well)? Why was CAPSMAN refused? Why use different SSID's? Wouldn't it make sense to have a single (and well configured => turn down transmission power) network? Different channels is a must...
by erlinden
Mon Dec 02, 2019 1:45 pm
Forum: General
Topic: Site to Site L2TP VPN
Replies: 13
Views: 1966

Re: Site to Site L2TP VPN

Did you configure routes?
by erlinden
Sun Nov 17, 2019 1:57 pm
Forum: Wireless Networking
Topic: Unstable wireless network
Replies: 7
Views: 2030

Re: Unstable wireless network

Don't use wpa-psk!
by erlinden
Fri Nov 08, 2019 12:15 pm
Forum: General
Topic: VPN
Replies: 5
Views: 810

Re: VPN

Why don't you just resolve your VPN server to your private IP address (of the VPN server) instead of the public IP address? Or connect to the VPN server on (private) IP address? I assume this is only for testing purposes?
by erlinden
Thu Oct 31, 2019 12:44 pm
Forum: General
Topic: slow wifi speed mikrotik RB941-2nD
Replies: 11
Views: 1341

Re: slow wifi speed mikrotik RB941-2nD

How did you choose channel 2442? For 2G, only channel 2412, 2437 and 2462 (1, 6 and 11) are non overlapping. Did you perform an RF scan?
by erlinden
Sun Oct 27, 2019 12:05 am
Forum: Wireless Networking
Topic: hAP ac2 5GHz WiFi crashes
Replies: 12
Views: 3800

Re: hAP ac2 5GHz WiFi crashes

Can you please share your exact WiFi settings? Even "enterprise" hardware can be miss configured (though I'm not saying you did).
by erlinden
Thu Oct 24, 2019 10:09 am
Forum: RouterBOARD hardware
Topic: hAP ac2 crashes every week
Replies: 8
Views: 3167

Re: hAP ac2 crashes every week

Do you have a spare powersupply that you can test with?
by erlinden
Tue Oct 08, 2019 12:22 pm
Forum: General
Topic: Best VPN for Mikrotik Router
Replies: 13
Views: 3483

Re: Best VPN for Mikrotik Router

What is your definition of "the best"?
by erlinden
Mon Sep 30, 2019 11:49 am
Forum: General
Topic: Router under Ddos atac on port 53 and 389.
Replies: 8
Views: 1481

Re: Router under Ddos atac on port 53 and 389.

Do you really need your DNS server to be publically available? And the same question for LDAP?
by erlinden
Wed Sep 25, 2019 3:30 pm
Forum: Wireless Networking
Topic: Band Steering
Replies: 17
Views: 7896

Re: Band Steering

Most modern devices will prefer 5G radio over 2G radio. I do have Mikrotik wireless (while travelling) and Unifi (at home). The latter has band steering turned off. Because it doesn't work as smooth as one would expect and by turning down the 2G radio as low as possible all devices connect with the ...
by erlinden
Thu Sep 19, 2019 3:20 pm
Forum: Wireless Networking
Topic: Buying new Routerboard - need your recommendations
Replies: 14
Views: 3775

Re: Buying new Routerboard - need your recommendations

both. Need LAN and WIFI
Do you mean by LAN switching (and how many ports?), or is routing also required? Why did you come up with the RB4011 (will do fine in all cases, just not sure wether it is required)?
by erlinden
Thu Sep 19, 2019 11:00 am
Forum: Wireless Networking
Topic: Buying new Routerboard - need your recommendations
Replies: 14
Views: 3775

Re: Buying new Routerboard - need your recommendations

Do you want to use the new devices as routers or as accesspoints. In case the latter, just use the cAP ac, hAP ac2 or Audience (wasn't aware of this new device...).
by erlinden
Tue Sep 10, 2019 4:38 pm
Forum: Beginner Basics
Topic: Add second hAP lite as simple AP client & hub
Replies: 3
Views: 755

Re: Add second hAP lite as simple AP client & hub

Reset it without default configuration
Create a bridge and add all interfaces to it
Configure wireless settings (SSID/security/channels/transmission power/etc)
Add DHCP client to bridge (or you could leave this step and do configuration based on MAC address)
by erlinden
Thu Sep 05, 2019 4:26 pm
Forum: Beginner Basics
Topic: Convert Wifi to Wired
Replies: 4
Views: 878

Re: Convert Wifi to Wired

I use my hAP AC Lite as travel router. Mostly using a wireless backhaul. Works perfectly, haven't had problems on connecting to any wireless network yet. So I fully disagree with @mkx (based on my experience).
by erlinden
Mon Sep 02, 2019 2:23 pm
Forum: Wireless Networking
Topic: Need help with WiFi in Apartments/Flats
Replies: 7
Views: 1635

Re: Need help with WiFi in Apartments/Flats

On the 2G radio only channel 1, 6 and 11 have no overlap (depending on country legislation, there could be more channels). Besides 2G has a higher penetration than 5G. To summarize: - lower transmission power to absolute minimum reuirements - select channels to get least interference - on 2G radio o...
by erlinden
Sun Sep 01, 2019 10:50 am
Forum: Wireless Networking
Topic: wAP AC as CAP managed by CAPsMAN ?
Replies: 7
Views: 1839

Re: wAP AC as CAP managed by CAPsMAN ?

Do clients get a correct IP address (including gateway and DNS)?
Have you tried configuring the wAP manually instead of through CAPsMAN?
Could it be a regularity thing, because it is used outside (not all 5G channels are allowed to be used outside)?
by erlinden
Mon Aug 26, 2019 5:14 pm
Forum: Beginner Basics
Topic: NAT problems - Xbox One and Nintendo Switch
Replies: 32
Views: 5494

Re: NAT problems - Xbox One and Nintendo Switch

Please connect your Xbox to the cable that connects your house (and currently your TP-Link). Do the problems still occur?

Besides, can you post a tracert forum.mikrotik.com (do you know how to use the command prompt and how to copy from it)?
by erlinden
Mon Aug 19, 2019 10:04 pm
Forum: Wireless Networking
Topic: CapsMan 5ghz Channels
Replies: 5
Views: 965

Re: CapsMan 5ghz Channels

Each channel is 20MHz wide, so you do the math. If I remember correct 40MHz is giving less problems...
by erlinden
Mon Aug 19, 2019 4:59 pm
Forum: Wireless Networking
Topic: The best Mikrotik AP for 6 SSIDs?
Replies: 4
Views: 1281

Re: The best Mikrotik AP for 6 SSIDs?

I probably would choose for cAP ac: https://mikrotik.com/product/cap_ac
But it depends on a lot more than being able to broadcast 6 SSID's (this gives overhead...sure you need 6?).
How many concurrent users per radio?
What are the performance requirements?
by erlinden
Mon Aug 19, 2019 4:26 pm
Forum: Wireless Networking
Topic: CapsMan 5ghz Channels
Replies: 5
Views: 965

Re: CapsMan 5ghz Channels

It depends on the set country code (regulations) and channelwidth:
Image
by erlinden
Sun Aug 18, 2019 11:11 am
Forum: Wireless Networking
Topic: upload speed down
Replies: 7
Views: 1081

Re: upload speed down

Can you please post a /export hide-sensitive?
Assuming this is a serious topic?
by erlinden
Fri Aug 16, 2019 11:14 pm
Forum: General
Topic: Not access site local
Replies: 2
Views: 534

Re: Not access site local

I prefer to use an internal DNS server to resolve private (internal) IP addresses instead of public IP addresses. This can be easily achieved by adding static entries.
by erlinden
Fri Aug 16, 2019 10:59 am
Forum: Beginner Basics
Topic: No internet access
Replies: 6
Views: 1118

Re: No internet access

Please provide your config (export hide-sensitive).
by erlinden
Mon Aug 12, 2019 4:52 pm
Forum: RouterBOARD hardware
Topic: RB4011 high, uneven CPU load and a crash.
Replies: 13
Views: 5572

Re: RB4011 high, uneven CPU load and a crash.

Who says I haven't sent the sup out info in already regarding the crash? You haven't said you did...and it does make sense to give the advice. Based on the information you supplied...this is not normal operation. Could you please share your config (as per requested by Dude2048)? What version are yo...
by erlinden
Sun Aug 11, 2019 5:34 pm
Forum: Beginner Basics
Topic: VPN Site to Site or LAN to LAN
Replies: 4
Views: 833

Re: VPN Site to Site or LAN to LAN

You can have a site-2-site vpn with dynamic IP addresses.
In my situation I used this blog.: https://blog.pessoft.com/2016/05/29/mik ... s-and-nat/

In your case you have to run the script (for updating DDNS) only at the 20 sites.
by erlinden
Thu Aug 01, 2019 1:20 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 3709

Re: Disabling o removing DNS Dynamic Servers

There is a WiKi page on how to upgrade a RB:
https://wiki.mikrotik.com/wiki/Manual:U ... g_RouterOS

I know that 6.45.2 (current stable) works flawless...not sure why the beta isn't.

Upgrading is not without risks. Make sure you have a backup before performing the upgrade.
by erlinden
Wed Jul 31, 2019 1:58 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 3709

Re: Disabling o removing DNS Dynamic Servers

That's strange, especially as this seems to be a (your?) public IP address...
Your provider uses ns0.proxad.net and ns1.proxad.net (212.27.32.2 and 212.27.32.130).

Can you post a /export hide-sensitive please?
What version are you running?
by erlinden
Wed Jul 31, 2019 1:28 pm
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 3709

Re: Disabling o removing DNS Dynamic Servers

Can you show /ip dns print?

WebFig might have an caching thingie...
by erlinden
Wed Jul 31, 2019 11:43 am
Forum: Beginner Basics
Topic: Disabling o removing DNS Dynamic Servers
Replies: 16
Views: 3709

Re: Disabling o removing DNS Dynamic Servers

/ip dhcp-client set use-peer-dns=no

(client is 0)
by erlinden
Sun Jun 23, 2019 10:45 am
Forum: General
Topic: Moving From VPN To Wireless Link
Replies: 2
Views: 777

Re: Moving From VPN To Wireless Link

Can you please share all hardware included (especially routers involved) and number of clients? To answer your question: it depends. You can switch this into on big network where you don't have to bother about routing. If you want to keep current configuration, your routing has to be done over the w...
by erlinden
Sun Jun 23, 2019 10:40 am
Forum: Wireless Networking
Topic: Low speed
Replies: 4
Views: 862

Re: Low speed

Can you please show all wireless settings (including security, password is not relevant)? At what speed is the client connected? Is there a line of sight while testing? How are you testing, iperf3 (preferably)? I prefer to avoid using auto: select a channel that is least used. And use WPA2 AES only....
by erlinden
Thu May 30, 2019 2:36 pm
Forum: Wireless Networking
Topic: Which mode do I need?
Replies: 15
Views: 2684

Re: Which mode do I need?

First: Reset your device, make sure "No Default Configuration" is checked. Then: - Reconnect (use MAC instead of IP, WinBox will find your device) - Create bridge and add all interfaces - Add DHCP client to your bridge (then your Mikoritk will be accessible through an IP address) - Configure your wi...
by erlinden
Fri May 24, 2019 10:51 am
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 15
Views: 2155

Re: hAP ac - How to configure?

Can you please share your current settings?
by erlinden
Thu May 23, 2019 5:51 pm
Forum: Beginner Basics
Topic: hAP ac - How to configure?
Replies: 15
Views: 2155

Re: hAP ac - How to configure?

Found this topic (have you tried the search option?): https://forum.mikrotik.com/viewtopic.php?t=86734 By selecting Ceee (or any orther 4 digit option) you will get 80MHz channel width. Make sure you select the channel manually ( I totaly dislike the auto option) and turn down tranmission power (sea...
by erlinden
Tue May 14, 2019 9:43 am
Forum: Wireless Networking
Topic: hAP AC WiFi Issues
Replies: 2
Views: 620

Re: hAP AC WiFi Issues

I prefer using fixed channels. That would definitely be my first change in this configuration. Why did you choose the hAP AC over i.e. the RB951G-HnD? How is the interference in your situation? Don’t you have 5G capable devices?
by erlinden
Sat May 04, 2019 6:41 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 1462

Re: HELP: Access Mikrotik Router Externally

You might want to consider turning off fouter functionality on the Mikoritik. Just use it as switch and accesspoint (by removing NAT and creating a bridge where all interfaces should be part of).
by erlinden
Fri May 03, 2019 2:29 pm
Forum: Beginner Basics
Topic: Remote access from the Internet (WAN side)
Replies: 34
Views: 225833

Re: Remote access from the Internet (WAN side)

If I enabled the default firewall in the Quick Config screen and I then went to IP->Cloud and setup a CNAME on my domain what rule to I need to add to the firewall to allow myself to access the router with WinBox remotely from (xxx.xxx.xx.xxx - my office IP) You don't because it is highly unwise. I...
by erlinden
Fri May 03, 2019 11:53 am
Forum: General
Topic: ftp server on device on MT router behind parent router [SOLVED]
Replies: 2
Views: 418

Re: ftp server on device on MT router behind parent router [SOLVED]

FTP uses both port 21 and a range of passive ports. Only forwarding port 21 will not be sufficient.
by erlinden
Tue Apr 30, 2019 5:37 pm
Forum: General
Topic: wAP ac serious problem! maybe a bug?
Replies: 12
Views: 1480

Re: wAP ac serious problem! maybe a bug?

please tell me how to do. I use winbox only, not console.
From Winbox you can start a terminal, just use the /export hide-sensitive command.
by erlinden
Tue Apr 30, 2019 3:41 pm
Forum: General
Topic: I have My rooter down
Replies: 2
Views: 421

Re: I have My rooter down

Can you please share your config?
What UAP do you use? Is it updated?
by erlinden
Tue Apr 30, 2019 3:38 pm
Forum: General
Topic: wAP ac serious problem! maybe a bug?
Replies: 12
Views: 1480

Re: wAP ac serious problem! maybe a bug?

Can you share your WiFi settings?
by erlinden
Thu Apr 25, 2019 4:36 pm
Forum: Wireless Networking
Topic: CapsMan & CAP AC
Replies: 9
Views: 1404

Re: CapsMan & CAP AC

Could you please provide channel/channelwidth/transmissionpower settings?
by erlinden
Mon Apr 22, 2019 10:38 am
Forum: Beginner Basics
Topic: RB2011UiAS-RM WAN not achieve 1GBps
Replies: 4
Views: 735

Re: RB2011UiAS-RM WAN not achieve 1GBps

What is the purpose of the RB if you already have an Asus router?
by erlinden
Thu Apr 04, 2019 10:38 am
Forum: Beginner Basics
Topic: Using router as bridge and AP
Replies: 8
Views: 827

Re: Using router as bridge and AP

Please correct me if I'm wrong, I would: 1) create a brdige on the hAP-ac and place the SFP and a network port in it 2) create a bridge on the hAP-ac and place the wireless interfaces together with a (different) port in it -> connect this with the hAP-ac2 3) configure the hAP-ac2 as a normal wifi ro...
by erlinden
Tue Mar 26, 2019 10:27 am
Forum: Wireless Networking
Topic: Is possible to set up a RBaCPGi-5acD2nD dual bands with one ssid?
Replies: 4
Views: 627

Re: Is possible to set up a RBaCPGi-5acD2nD dual bands with one ssid?

Besides name and password, also security settings have to be equal. And make sure that you choose different channels (don't use auto, 1,6 or 11 on the 2G radio).

Roaming can be achieved by setting the optimum tranmission power (again, don't use auto). Set it as low as possible.
by erlinden
Fri Mar 08, 2019 12:02 pm
Forum: Wireless Networking
Topic: Unable to connect to 2.4Ghz
Replies: 7
Views: 2343

Re: Unable to connect to 2.4Ghz

I would start by selecting channels manually. For 2G radio use either 1, 6 or 11 and make sure bandwidth is set to 20MHz.
by erlinden
Thu Mar 07, 2019 11:51 am
Forum: Wireless Networking
Topic: RB4011iGS+5HacQ2HnD-IN 5G down
Replies: 4
Views: 754

Re: RB4011iGS+5HacQ2HnD-IN 5G down

Could it be that 5G radio channel is set to auto and that the selected channel is not supported by your device? Or that it was in a DFS waiting state? Perhaps you can share your settings?
by erlinden
Thu Mar 07, 2019 10:16 am
Forum: Beginner Basics
Topic: Basic wireless with cAP ac - network specific setup
Replies: 11
Views: 3110

Re: Basic wireless with cAP ac - network specific setup

If you want to configure your cAP ac as accesspoint, you shouldn't configure a DHCP server on it. If you create a bridge and add all interfaces to it (like you did), all devices will get the IP address from the corporate DHCP server (as well as the cAP ac if you define a DHCP client). Two additional...
by erlinden
Tue Mar 05, 2019 10:42 am
Forum: General
Topic: RB2011 CPU 100%
Replies: 3
Views: 602

Re: RB2011 CPU 100%

Have you rebooted the router yet?
by erlinden
Thu Feb 21, 2019 4:52 pm
Forum: Wireless Networking
Topic: RouterOS >=6.43.11: Bad 2.4Ghz wifi
Replies: 2
Views: 651

Re: RouterOS >=6.43.11: Bad 2.4Ghz wifi

Haven't had problems with this. Could you please supply some information, how is the 2G radio configured? And what is "really bad performance"?
by erlinden
Thu Feb 21, 2019 4:44 pm
Forum: Wireless Networking
Topic: hAP ac² superchannel
Replies: 5
Views: 1133

Re: hAP ac² superchannel

What country have you selected? And have you selected regulatory-domain?
by erlinden
Tue Feb 19, 2019 4:59 pm
Forum: RouterBOARD hardware
Topic: RB750GR3 support
Replies: 4
Views: 1236

Re: RB750GR3 support

It depends. What Internet bandwidth do you have, up- and downstream? What will your firewall look like? To summarize, what are your requirements besides number of users!
by erlinden
Sun Feb 17, 2019 11:04 am
Forum: Wireless Networking
Topic: Activate WPS on hAC
Replies: 6
Views: 7615

Re: Activate WPS on hAC

Mikrotik would not give us WPS if it was not secure.
LOL! Do you really think Mikrotik will only provide functionality if it is secure!?
WPS is very secure as it is switched off after that.
Sounds like a valid reason, indeed WPS is only secure if it turned off.
by erlinden
Mon Feb 11, 2019 10:45 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 840

Re: Using mAP as wifi AP with GL750 as router

You are very wellcome, glad to hear about your progress.

I prefer to use DHCP reservation, this will give you static IP addresses as well.
by erlinden
Sun Feb 10, 2019 11:30 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 840

Re: Using mAP as wifi AP with GL750 as router

What version are you running on the mAP?
Please don't use the quicksettings...just don't.
by erlinden
Sat Feb 09, 2019 12:34 pm
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 840

Re: Using mAP as wifi AP with GL750 as router

  • Reset the mAP (option in the menu), select no configuration
  • Login the mAP after it is rebooted
  • Create a bridge
  • Add all interfaces to the bridge
  • Add DHCP client if you want to have the mAP an IP address

So...leave the GL 750 as is, nothing to do there
by erlinden
Sat Feb 09, 2019 10:53 am
Forum: Beginner Basics
Topic: Using mAP as wifi AP with GL750 as router
Replies: 9
Views: 840

Re: Using mAP as wifi AP with GL750 as router

Reset it to default, no configuration. Afterwards, you can connect it to the router and configure it (connect to the mAP on MAC address). Next: Make a bridge and have all interfaces part of this bridge. Add a DHCP client (if you want the mAP to have an IP address. Configure your WiFi interfaces as w...
by erlinden
Wed Feb 06, 2019 3:13 pm
Forum: General
Topic: Nat address from public ip to router adress
Replies: 12
Views: 1275

Re: Nat address from public ip to router adress

I prefer to solve these problems with DNS, just have the service resolved to your internal IP address on your network (and your public IP address for the rest of the world).
by erlinden
Fri Feb 01, 2019 5:04 pm
Forum: General
Topic: Poor WiFi performance - hAP AC ^2
Replies: 6
Views: 4001

Re: Poor WiFi performance - hAP AC ^2

What client are you using for testing?
At what speed is the client connected?
Can you test with fixed channel?
by erlinden
Thu Jan 24, 2019 4:49 pm
Forum: General
Topic: Ipcloud two Mikrotik
Replies: 9
Views: 1028

Re: Ipcloud two Mikrotik

Why not do it properly and run a VPN service? Are you aware that there was (and still is depending on the version of RouterOS you are running) a huge security issue?
by erlinden
Fri Jan 11, 2019 12:19 pm
Forum: Wireless Networking
Topic: High ping to router HAP AC2
Replies: 33
Views: 3928

Re: High ping to router HAP AC2

Are you using fixed channels?
Why do you have two (overlapping) DHCP pools?
Why UPnP?
by erlinden
Mon Jan 07, 2019 10:06 am
Forum: General
Topic: Router for traveling?
Replies: 4
Views: 850

Re: Router for traveling?

I found this blog to be very helpfull:
https://justinho.com/blog/2017/07/15/hap-ac-lite.html

The benefit of the hAP ac² is CPU power. In the end it all depends on your requirements.
by erlinden
Sat Dec 29, 2018 10:54 pm
Forum: General
Topic: tool kid-control
Replies: 58
Views: 20679

Re: tool kid-control

[Update] It seems to work with the settings shown underneath... I want to use the Rate Limit in combination with Time For Rate Limited. My preferred schedule would be: 24x7 Internet access Every day, limit at these times: 00:00:00-07:30:00 11:30:00-16:00:00 20:00:00-00:00:00 Though it seems obvious,...
by erlinden
Thu Dec 27, 2018 11:19 am
Forum: Wireless Networking
Topic: Radar detected on XXX
Replies: 31
Views: 5793

Re: Radar detected on XXX

It is not a problem, it is unexpected behaviour (for you). Switching channels is de Dynamic part in DFS. The Wiki: https://en.wikipedia.org/wiki/List_of_WLAN_channels gives you an overview on all allowed channels you can select. Perhaps you can do a WiFi scan with a client to find out the best chann...
by erlinden
Mon Dec 03, 2018 5:27 pm
Forum: General
Topic: RB850Gx2 is limiting one port TX speed - why?
Replies: 2
Views: 428

Re: RB850Gx2 is limiting one port TX speed - why?

Why do you think the port is limited? What is the CPU load while testing? Could it be cable related (do you see a lot of CRC errors)?
by erlinden
Mon Nov 19, 2018 11:12 am
Forum: Wireless Networking
Topic: Hap ac & poor performance in 2.4GHz and 5GHz [SOLVED]
Replies: 20
Views: 2659

Re: Hap ac & poor performance in 2.4GHz and 5GHz [SOLVED]

Can you please share your wireless settings?
by erlinden
Fri Nov 16, 2018 3:40 pm
Forum: Beginner Basics
Topic: Best performance on hAP ac lite
Replies: 6
Views: 952

Re: Best performance on hAP ac lite

On the second router there are no devices connected is used only for WiFi, mobile users only. I thought it is better as it is, doesn't it cause more traffic on my LAN if i set it as acesspoint? Or should i set a different subnet if i set it as acesspoint? It is worse and you only created an additio...
by erlinden
Fri Nov 16, 2018 2:41 pm
Forum: Beginner Basics
Topic: Best performance on hAP ac lite
Replies: 6
Views: 952

Re: Best performance on hAP ac lite

What is 'Best performance' for you?

Besides above reply, please configure your second hAP as accesspoint (create one bridge with all interfaces connected to it). It makes no sense to have double NAT.
by erlinden
Tue Nov 13, 2018 4:24 pm
Forum: General
Topic: Webfig remote access from WAN
Replies: 18
Views: 12037

Re: Webfig remote access from WAN

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all! Actually I think you created yourself a bigger problem. Access to the router over a non-encrypted connection. You may want to reconsider your configuration, setting up VPN i...
by erlinden
Thu Oct 11, 2018 2:29 pm
Forum: General
Topic: Can my ISP access my Mikrotik Router and make changes?
Replies: 7
Views: 1140

Re: Can my ISP access my Mikrotik Router and make changes?

Was the MT supplied by your ISP? If Yes...sure they can. If Not...they won't touch it.
Sure the MT is not compromised by a hacker?
by erlinden
Thu Oct 11, 2018 2:24 pm
Forum: Beginner Basics
Topic: Can't connect to Mikrotik from outside
Replies: 9
Views: 3600

Re: Can't connect to Mikrotik from outside

Can you please post your public IP address?

:lol:
by erlinden
Sun Sep 02, 2018 2:24 pm
Forum: Beginner Basics
Topic: Upgrade DNS
Replies: 4
Views: 691

Re: Upgrade DNS

Lol, sorry. If your router has no gateway, how will it be able to use external DNS servers? Perhaps you can tell us a bit more of what you are doing, how things are connected and what you are trying to accomplish?
by erlinden
Wed Aug 29, 2018 10:58 am
Forum: Beginner Basics
Topic: DNS issue
Replies: 6
Views: 3112

Re: DNS issue

Can you share a ipconfig /all? Probably you want to set your MirkoTik as (only) DNS server in the DHCP options.
by erlinden
Wed Aug 29, 2018 10:25 am
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 3669

Re: wAP ac as bridge mode [SOLVED]

Great help here...just one thing (and it might be my preference...) that I want to share:

- Never use auto channel, just do a proper WiFi scan and select the best channels
- On the 2G radio choose either channel 1, 6 or 11. Never use 20/40mhz-Ce! Choose 20mhz.
by erlinden
Sat Jul 28, 2018 10:46 am
Forum: RouterBOARD hardware
Topic: Extending CRS109 network via RB951G-2HnD
Replies: 1
Views: 552

Re: Extending CRS109 network via RB951G-2HnD

If a 2G WiFi network is sufficient, this is a good solution. Configuration is straight forward:
[*]factory reset without default configuration
[*]put all interfaces on the same switch (or bridge)
[*]configure wireless as required
by erlinden
Sun May 20, 2018 1:04 pm
Forum: Beginner Basics
Topic: RB750 Mikrotik 6.42.2
Replies: 2
Views: 636

Re: RB750 Mikrotik 6.42.2

Or run a DNS server on your RB750 and have the website URL resolved to the internal IP address.
by erlinden
Mon Apr 23, 2018 11:41 am
Forum: Beginner Basics
Topic: I have a problem
Replies: 4
Views: 628

Re: I have a problem

Port forwarding is not like rocket sience. If you experience difficulties in the firewall and GUI you might want to come to the conclusion that neither MikroTik nor your basic networking knowledge is sufficient.
by erlinden
Mon Apr 16, 2018 9:13 am
Forum: General
Topic: How To Get Max 100mbps Speed ? rb951ui-2nd(hap)
Replies: 19
Views: 2630

Re: How To Get Max 100mbps Speed ? rb951ui-2nd(hap)

This RB only supports 2G radio (as you know). Bandwidth depends on a ot of factors, the way I would solve it (besides all the steps you have done already) is by using 5G radio. Does the ZTE suport 5G? What speeds do you get with this modem/router? Why do you use the RB as well?
by erlinden
Thu Apr 05, 2018 2:24 pm
Forum: Beginner Basics
Topic: DNS
Replies: 5
Views: 823

Re: DNS

What is the use of setting a fixed IP address to an accesspoint? I prefer to have all my IP related stuff done by a DHCP server, reservations for any device necessary.

And to answer you question: DNS is for name resolving. So in any case of name resolving you need a DNS server.
by erlinden
Tue Apr 03, 2018 10:26 am
Forum: Beginner Basics
Topic: A simple setup with one router and one access point
Replies: 1
Views: 436

Re: A simple setup with one router and one access point

Two options (as far as I know):

- Use Capsman
- Configure your cAP as accesspoint *)

*) Reset config with no default, create bridge and add all interfaces to this bridge (or switch), use DHCP client (for configuration options), configure wireless. That's about it.
by erlinden
Fri Mar 30, 2018 9:39 am
Forum: Beginner Basics
Topic: "Check for update" Error [SOLVED]
Replies: 7
Views: 7182

Re: "Check for update" Error [SOLVED]

The difference I see with my router is that allow-remote-requests is set to yes while yours is set to no.
by erlinden
Mon Mar 26, 2018 10:03 am
Forum: Beginner Basics
Topic: Normal or strange behavior
Replies: 6
Views: 930

Re: Normal or strange behavior

Can you post the script you are using?
by erlinden
Fri Mar 16, 2018 11:24 am
Forum: Beginner Basics
Topic: TM router to rb1100
Replies: 1
Views: 507

Re: TM router to rb1100

Not sure if I understand you correct...do you want to connect the RB1100 to the TM router? If you want double NAT (assumption, based on the fact that you are referring to a private IP range). If the TM is doing DHCP, you can set the RB1100 Address Acquisition to Automatic . Local Network should be s...
by erlinden
Fri Mar 16, 2018 10:43 am
Forum: Beginner Basics
Topic: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]
Replies: 26
Views: 25941

Re: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]

Same problem is in hap ac lite. It justifies each other differently. Just do not use the mikrotik as a home appliance. True if you don't know completely what you are doing. Otherwise, the device is great! @TS: I have very good results by setting security to AES (and not TKIP, not sure what you used...
by erlinden
Tue Mar 13, 2018 10:22 pm
Forum: Wireless Networking
Topic: 5GHz Wi-Fi problem on hAP ac lite [SOLVED]
Replies: 12
Views: 10486

Re: 5GHz Wi-Fi problem on hAP ac lite [SOLVED]

Try setting 5G radio to a fixed channel. Don't know the implementation of MikroTik but it sure can help.
by erlinden
Sun Mar 11, 2018 11:12 am
Forum: Beginner Basics
Topic: receiving unnecessary traffic
Replies: 3
Views: 721

Re: receiving unnecessary traffic

Can you post your configuration please?
by erlinden
Sun Mar 11, 2018 11:09 am
Forum: Beginner Basics
Topic: L2TP IPSEC connection problem
Replies: 5
Views: 3631

Re: L2TP IPSEC connection problem

Seem your internet connect is behind an NAT router.
You must have a direct internet connect.
That or (at least) all ports should be forwarded on the other NAT thing as well. Does it have to do NAT? Can it be in bridge modus? Can you make an overview of your network?
by erlinden
Mon Feb 19, 2018 10:49 am
Forum: General
Topic: Routing Problem
Replies: 33
Views: 2491

Re: Routing Problem

What is de purpose of using a router in this case? If you want to create just one big network, configure one bridge on the MikroTik (reset without default) and you are done.
by erlinden
Fri Feb 16, 2018 10:05 am
Forum: General
Topic: IPSec Tunnel, pingable router but no access
Replies: 9
Views: 970

Re: IPSec Tunnel, pingable router but no access

Thanks, works like a charm now! Think I should dive into the world of firewalls a bit more...
by erlinden
Wed Feb 14, 2018 12:11 pm
Forum: General
Topic: IPSec Tunnel, pingable router but no access
Replies: 9
Views: 970

IPSec Tunnel, pingable router but no access

I have created a site to site vpn connection from home to my parrents, based on this tutorial: https://blog.pessoft.com/2016/05/29/mikrotik-ipsec-tunnel-with-ddns-and-nat/ This works very stable (RB3011 - RB951), though the speed is not really high (which is probably caused by the RB951, which doesn...
by erlinden
Wed Jan 31, 2018 11:02 am
Forum: Wireless Networking
Topic: RB951G-2HnD wireless download speed issue!!!
Replies: 4
Views: 668

Re: RB951G-2HnD wireless download speed issue!!!

As this device only has a 2G radio, first thought would be interference. How did you configure WiFi? Are there other WiFi networks on the 2G band in your neighborhood?
by erlinden
Thu Jan 25, 2018 12:01 pm
Forum: Beginner Basics
Topic: Static IP allocations L2TP VPN [SOLVED]
Replies: 2
Views: 797

Re: Static IP allocations L2TP VPN [SOLVED]

Can you explain what you try to accomplish? Are these site-to-site connections? Context would be very beneficial.
by erlinden
Thu Jan 18, 2018 4:41 pm
Forum: Beginner Basics
Topic: PPTP vpn, DHCP Pool
Replies: 3
Views: 1550

Re: PPTP vpn, DHCP Pool

There are a lot of tutorials on the Internet, this one helped me a lot:
https://www.techonia.com/6034/configure ... rver-ipsec
by erlinden
Wed Jan 17, 2018 12:26 pm
Forum: Beginner Basics
Topic: RB750Gv3 Dropping Connections [SOLVED]
Replies: 6
Views: 1010

Re: RB750Gv3 Dropping Connections [SOLVED]

Have you checked this behaviour with other devices and/or other cables? How is the Hex powered? What firmware version or you running?
by erlinden
Tue Jan 16, 2018 1:03 pm
Forum: Beginner Basics
Topic: Firewall e Nat Rule - FTP Upload
Replies: 6
Views: 818

Re: Firewall e Nat Rule - FTP Upload

I did a search on this forum, does this topic answer your question?
viewtopic.php?t=61450
by erlinden
Mon Jan 15, 2018 12:15 pm
Forum: General
Topic: Mikrotik to Mikrotik VPN - Dynamic IP
Replies: 7
Views: 853

Re: Mikrotik to Mikrotik VPN - Dynamic IP

Choose the one of routers for vpn server and use cloud /ddns/ for establish the ppp connection !
There is no way to accomplish a "true" peer to peer connection without the use of script?
by erlinden
Thu Jan 11, 2018 12:40 pm
Forum: Beginner Basics
Topic: Setting UP Router and wAP without my ISP
Replies: 2
Views: 363

Re: Setting UP Router and wAP without my ISP

For setting up a router you don't need an ISP. You should connect both computer and wAP AC with a cable and configure as you wish. I check the specs of RB750r2 and it doesn't have wireless. so that means it doesn't support wAP AC? I assume you can connect the both with cable? Please check Capsman: h...
by erlinden
Wed Oct 04, 2017 3:20 pm
Forum: Beginner Basics
Topic: how to set a master port and a slave port
Replies: 10
Views: 29692

Re: how to set a master port and a slave port

If you look at the interfaces and select a LAN connection (in your case ether3) you see the option 'Master Port'. Here you can select ether2.
In the picture the master port hasn't been set yet:

Image
by erlinden
Tue Aug 29, 2017 7:24 pm
Forum: Beginner Basics
Topic: IP Camera Port Forwarding
Replies: 2
Views: 1197

Re: IP Camera Port Forwarding

Be very careful with cameras directly attached to the Internet. Unless you are willig to help botnets... I would advise to use VPN to make a secure connection to the network over which the camera (or nvr?) can be connected.
by erlinden
Tue Aug 29, 2017 7:18 pm
Forum: Beginner Basics
Topic: Mikrotik router with ubiquity access points
Replies: 2
Views: 701

Re: Mikrotik router with ubiquity access points

Wat do you mean with "not picking up"? Are the Unifies supposed to user the MikroTik for wireless uplink purposes? How should the Unifies know about a portal on the MikroTik? Have you made adjustments on the controller? Can you please draw the network with the IP's and inter-device connections? Do h...
by erlinden
Tue Jul 25, 2017 5:57 pm
Forum: Beginner Basics
Topic: mAP lite plus RB951G-2nHD ether local at home as Wi-Fi repeater
Replies: 6
Views: 998

Re: mAP lite plus RB951G-2nHD ether local at home as Wi-Fi repeater

My best guess would be that you want your mAP lite configured as accesspoint.
Just get rid of the configuration, place everything in a bridge and configure WiFi as required.

Think this thread will help you a lot (especially the answer by @Sob):
viewtopic.php?t=94568
by erlinden
Tue Jul 25, 2017 4:12 pm
Forum: Beginner Basics
Topic: Accessing t 2 ap's
Replies: 1
Views: 331

Re: Accessing t 2 ap's

Can you either explain what you would like to accomplish or draw a picture of the network? Does it have something to do with network bridges...?

By the way, if a topic isn't answered, you might consider updating the topic with relevant information instead of creating a new one.
by erlinden
Sun Jul 23, 2017 12:27 am
Forum: Beginner Basics
Topic: netscan abuse on hetzner
Replies: 1
Views: 671

Re: netscan abuse on hetzner

"Related ports" doesn't make sense...I think the best (only?) option would be blocking IP addresses. Lots of examples here on the forum.
by erlinden
Sun Jul 16, 2017 10:16 pm
Forum: Beginner Basics
Topic: MICROTIK RB951G-2HnD
Replies: 6
Views: 821

Re: MICROTIK RB951G-2HnD

Think this movie says it all (turn off the sound ;)):
https://www.youtube.com/watch?v=Afit-y-1TZA
by erlinden
Sat Jul 15, 2017 9:49 am
Forum: Beginner Basics
Topic: MICROTIK RB951G-2HnD
Replies: 6
Views: 821

Re: MICROTIK RB951G-2HnD

Think the easiest way is to configure it as router, why did you choose cpe mode?
by erlinden
Sun Jul 09, 2017 11:19 am
Forum: Beginner Basics
Topic: port forwarding problem to mailserver zimbra
Replies: 2
Views: 1767

Re: port forwarding problem to mailserver zimbra

What port did you forward for mail? Think that port 25 should be forwarded at leat for mail purposes. Can you explain the attached rules?
by erlinden
Tue Jun 20, 2017 12:59 pm
Forum: Beginner Basics
Topic: Allow 2 users from same mac address
Replies: 2
Views: 675

Re: Allow 2 users from same mac address

Can you explain why two clients share the same MAC address?
by erlinden
Sun May 28, 2017 12:10 am
Forum: Beginner Basics
Topic: Accessing Local Server with a domain
Replies: 6
Views: 2798

Re: Accessing Local Server with a domain

I used to run an internal DNS server to revolve My domains to private (internal) IP adresses. The other option is (I think it is called) hairpin NAT.
by erlinden
Thu May 25, 2017 10:37 pm
Forum: Beginner Basics
Topic: Setting up mikrotik routerboard, RB951 series
Replies: 5
Views: 965

Re: Setting up mikrotik routerboard, RB951 series

Ask your friend to help you configure this router...I still think this one is really cool (as well as really old...)
by erlinden
Sun May 21, 2017 1:13 pm
Forum: Beginner Basics
Topic: hAP behind a 951G router. Visibility problem.
Replies: 1
Views: 372

Re: hAP behind a 951G router. Visibility problem.

Remove current configuration and create a bridge afterwards. Let the bridge consist of all LAN and WLAN interfaces and your done. How the MikroTik will behalve as a switch.
by erlinden
Wed May 10, 2017 1:18 pm
Forum: Beginner Basics
Topic: How to Access Mikrotik Router Configured with Private IP Address in WAN via Internet
Replies: 18
Views: 6343

Re: How to Access Mikrotik Router Configured with Private IP Address in WAN via Internet

I think both pietroscherer & Sob mentioned that you have to get into contact with your ISP. They are managing a device that is doing NAT for you.

To get some insights...can you post a tracert www.mikrotik.com? That would be very helpful!
by erlinden
Fri Apr 28, 2017 5:32 pm
Forum: Beginner Basics
Topic: MikroTik RouterOS 6.34.2
Replies: 5
Views: 1241

Re: MikroTik RouterOS 6.34.2

If your ISP is blocking ports...you are screwed. I'm still a bit puzzled what your ISP has to do with bypassing router login!?
by erlinden
Fri Apr 28, 2017 12:20 pm
Forum: Beginner Basics
Topic: need help!!! installing hotspot and vpn
Replies: 2
Views: 615

Re: need help!!! installing hotspot and vpn

Google found this link for me:
https://wiki.mikrotik.com/wiki/L2TP_%2B ... r_and_a_PC

If you have the option, skip PPTP VPN (security).
by erlinden
Wed Apr 19, 2017 9:59 pm
Forum: Beginner Basics
Topic: Can't configure RBwAP2nD-BE (wAP) - SOLVED
Replies: 9
Views: 4853

Re: Can't configure RBwAP2nD-BE (wAP)

Have hou tried to reset the device?
by erlinden
Tue Apr 18, 2017 5:22 pm
Forum: Beginner Basics
Topic: Guest network isolation
Replies: 4
Views: 1509

Re: Guest network isolation

I configured different VLAN's to isolate my guest network from my normal network. This way both my Unifi accesspoints and my wAP ac can be easibly configured to support different networks. Indeed, virtual wlans connected to a specific VLAN.
by erlinden
Thu Apr 13, 2017 3:51 pm
Forum: Beginner Basics
Topic: Please help with port forwarding!
Replies: 21
Views: 3632

Re: Please help with port forwarding!

How are you testing the port forward?
Sure the 192.168.88.254 isn't your router, but the server running both SSH and Web?
What do you see when you browse to http://192.168.88.254?
by erlinden
Mon Apr 10, 2017 3:17 pm
Forum: RouterBOARD hardware
Topic: wAP ac vs Unifi AC Pro / Lite
Replies: 9
Views: 7027

Re: wAP ac vs Unifi AC Pro / Lite

Have both the UAP-AC-LR and the wAP ac. The UAP has better throughput, but I have to admit that I have better tweak skills on the Unifi stack. There is not much difference in the way roaming is working (think both platforms work with a RSSI thresshold). If you prefer a great GUI, Unifi is the way to...
by erlinden
Sat Apr 08, 2017 10:34 pm
Forum: Beginner Basics
Topic: Cant get to local Webserver
Replies: 25
Views: 3570

Re: Cant get to local Webserver

Instead of hairpin NAT you can have the webserver revolved to the internal IP address. Just user thee DNS server in thee MT.
by erlinden
Wed Apr 05, 2017 2:24 pm
Forum: Beginner Basics
Topic: How to Hide SSID (RouterBoard) RB951Ui-2Hnd
Replies: 3
Views: 9291

Re: How to Hide SSID (RouterBoard) RB951Ui-2Hnd

Why do you want your SSID to be hidden? It's not like really secure as the SSID can be easily captured (if you got the tools).
by erlinden
Wed Apr 05, 2017 9:59 am
Forum: Beginner Basics
Topic: Limited transfer rate on 5GHz - wAP ac
Replies: 3
Views: 699

Re: Limited transfer rate on 5GHz - wAP ac

Is 54MB/s your throughput or your connection speed? The latter, I think you mean 54Mb/s, which is indeed to little.
Can you provide some more settings?
by erlinden
Tue Mar 28, 2017 3:41 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 37
Views: 17712

Re: Using MikroTik hAP as simple switch plus wireless AP

That's the point I was happy with safe mode. I was never able to connect to the device with no default configuration. :?
Think I had to connect through WiFi to be able to connect...
by erlinden
Tue Mar 21, 2017 2:13 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 37
Views: 17712

Re: Using MikroTik hAP as simple switch plus wireless AP

Thought default configuration contained masquerade and DHCP server...my mistake.
by erlinden
Tue Mar 21, 2017 1:30 pm
Forum: Beginner Basics
Topic: Using MikroTik hAP as simple switch plus wireless AP
Replies: 37
Views: 17712

Re: Using MikroTik hAP as simple switch plus wireless AP

If I understand correctly, you are looking for a way to let your device work as a switch with accesspoint functionallity. This can be easaly done by resetting the device with no default configuration: https://forum.mikrotik.com/viewtopic.php?t=71522 Then create a bridge and attach all the interfaces...
by erlinden
Mon Mar 20, 2017 10:36 am
Forum: Beginner Basics
Topic: NAT Loopback, for all ports.
Replies: 8
Views: 5644

Re: NAT Loopback, for all ports.

In this case DNS together with a reverse proxy will do just fine. Make sure all the services have their own name. This way you don't have to do port translation.
by erlinden
Sun Mar 19, 2017 5:44 pm
Forum: Beginner Basics
Topic: NAT Loopback, for all ports.
Replies: 8
Views: 5644

Re: NAT Loopback, for all ports.

Instead of getting NAT loopback working, in my opinion it would make more sense to solve this by DNS. Have your MikroTik work as a DNS server for your clients and have all services that run internally resolved to the internal IP address.
by erlinden
Mon Mar 06, 2017 12:42 pm
Forum: Beginner Basics
Topic: Please Help Me: Port Forwarding VIA dynamic ISP?
Replies: 7
Views: 990

Re: Please Help Me: Port Forwarding VIA dynamic ISP?

And for the forward part, please read:
viewtopic.php?t=50520
by erlinden
Sat Feb 25, 2017 5:49 pm
Forum: Beginner Basics
Topic: Static IP address
Replies: 2
Views: 411

Re: Static IP address

I stopped using static IP adresses. All devices requiring a static IP address get them from the DHCP server. Just make IP addresses static in the DHCP server (and change them afterwards as required).
by erlinden
Fri Feb 24, 2017 10:29 am
Forum: Beginner Basics
Topic: How-To remote manage RB751U-2HnD through WebFig
Replies: 23
Views: 17356

Re: How-To remote manage RB751U-2HnD through WebFig

For remote purposes I would always prefer using a VPN. It gives additional security and can be user for multiple purposes.
by erlinden
Fri Feb 24, 2017 10:24 am
Forum: Beginner Basics
Topic: Disable dhcp ethernet (not wifi)
Replies: 3
Views: 764

Re: Disable dhcp ethernet (not wifi)

Out of curiousity...Why would you need this distinction?
by erlinden
Fri Feb 24, 2017 10:22 am
Forum: Beginner Basics
Topic: HELP - Share With Hostname
Replies: 8
Views: 1344

Re: HELP - Share With Hostname

Do you think Google knows about your (internal) hostnames? Well actually...they might :)

Make sure the RB750 is used as the only DNS server on your clients. This way only non-internal hosts are revolved by public DNS servers.