Community discussions

MikroTik App

Search found 2015 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 7
by erlinden
Wed Mar 27, 2024 4:59 pm
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 459
Views: 92057

Re: v7.14.2 [stable] is released!

I can't seem to find this on the documentation. How does it work? How do we configure it? How are the values mapped or parsed internally? Your wish... Maximum link distance in kilometers, needs to be set for long-range outdoor links. The value should reflect the distance to the AP or station that i...
by erlinden
Wed Mar 27, 2024 4:57 pm
Forum: RouterBOARD hardware
Topic: Outdoor 5G?
Replies: 6
Views: 294

Re: Outdoor 5G?

Something like this (though not being a rumor)?
https://mikrotik.com/product/netbox_5_ax

Do you require 802.11ax or is 802.11 ac sufficient?
Any other requirements?
by erlinden
Wed Mar 27, 2024 2:18 pm
Forum: Wireless Networking
Topic: 7.14 breaks wifi
Replies: 8
Views: 538

Re: 7.14 breaks wifi

What does the logging say? Perhaps activate debug logging on wifi!?
by erlinden
Tue Mar 26, 2024 3:53 pm
Forum: Wireless Networking
Topic: wifi-qcom-ac advantages for cAP ac
Replies: 7
Views: 454

Re: wifi-qcom-ac advantages for cAP ac

The solution about doing the tagging in a different way is covered a forum post somewhere :-)
There is actually a help page about this:
https://help.mikrotik.com/docs/display/ ... ionexample:
by erlinden
Tue Mar 26, 2024 2:59 pm
Forum: Wireless Networking
Topic: hAP AX3 Wireless TxPower sudden drop
Replies: 6
Views: 362

Re: Hap AX3 TxPower sudden drop

You should always set country code identical on all wireless interfaces.
You might want to remove serial (it's of no use).

Hope this helps.
by erlinden
Tue Mar 26, 2024 2:32 pm
Forum: Wireless Networking
Topic: hAP AX3 Wireless TxPower sudden drop
Replies: 6
Views: 362

Re: Hap AX3 TxPower sudden drop

Can't help the change in channel 8)
The additional information is showing that it is using eeeC, so no DFS channels involved.

Can you supply your config information?
/interface/wifi export file=anynameyoulike
by erlinden
Tue Mar 26, 2024 2:05 pm
Forum: Wireless Networking
Topic: hAP AX3 Wireless TxPower sudden drop
Replies: 6
Views: 362

Re: Hap AX3 TxPower sudden drop

My guess would be that both tx power and frequency have changed, correct? When selecting a DFS channel *), your device will scan for radar signals. If found, the radio will change its frequency (and tx power accordingly) to comply. You can check the log for radar detected events. *) If your bandwidt...
by erlinden
Tue Mar 26, 2024 1:13 pm
Forum: Wireless Networking
Topic: Too strong signal - wifi client flapping (7.13+)
Replies: 5
Views: 385

Re: Too strong signal - wifi client flapping (7.13+)

Signal strength of 50 is quiet impossible as far as I know.
Can you share your (/wifi) config on the CAPsMAN?
 /interface/wifi export file=anynameyoulike
by erlinden
Tue Mar 26, 2024 1:08 pm
Forum: Wireless Networking
Topic: wifi-qcom-ac advantages for cAP ac
Replies: 7
Views: 454

Re: wifi-qcom-ac advantages for cAP ac

My experiences are very good with the new driver (cAP ac, cAP XL ac, wAP ac).
In accordance with the benefits mentioned above.
by erlinden
Tue Mar 26, 2024 11:11 am
Forum: Beginner Basics
Topic: networking and ip services [SOLVED]
Replies: 3
Views: 341

Re: Dhcp not working [SOLVED]

I prefer to work with VLAN filtering on the bridge. Please read this great topic befor continuing:
viewtopic.php?t=143620
by erlinden
Mon Mar 25, 2024 3:16 pm
Forum: General
Topic: CAPsMAN not provisioning
Replies: 5
Views: 383

Re: CAPsMAN not provisioning

You are missing an important part of making VLAN available on a router: VLAN filtering on the bridge.
Please have a look at this topic, that will help you understand configuring VLAN the right way:
viewtopic.php?t=143620
by erlinden
Mon Mar 25, 2024 2:42 pm
Forum: Wireless Networking
Topic: Strange behavior with Mikrotik CAP AX - CAPsMANv2
Replies: 4
Views: 443

Re: Strange behavior with Mikrotik CAP AX - CAPsMANv2

I have configured FT and FT over DS on the security part of the config: /interface wifi security add authentication-types=wpa2-psk connect-priority=0/1 disabled=no ft=yes ft-over-ds=yes group-encryption=ccmp name=[whatever] wps=disable I absolutely dislike steering, it is always up to the client to ...
by erlinden
Mon Mar 25, 2024 2:29 pm
Forum: General
Topic: CAPsMAN not provisioning
Replies: 5
Views: 383

Re: CAPsMAN not provisioning

Think your cap isn't a cap at the moment (not 100% sure about the correct syntax):
/interface wireless cap enabled=yes
by erlinden
Sat Mar 23, 2024 12:18 pm
Forum: Wireless Networking
Topic: hAP-ax3 vs cAP ax
Replies: 11
Views: 1377

Re: hAP-ax3 vs cAP ax

Is it possible to do roaming between asus and mikrotik? If yes then maybe you could use both on different channels.
As long as all security settings (and SSID) are equal, you should be able.
by erlinden
Fri Mar 22, 2024 3:30 pm
Forum: Useful user articles
Topic: How to hack KidControl
Replies: 2
Views: 295

Re: How to hack KidControl

Kidcontrol uses simple queues, based upon MAC address.
by erlinden
Thu Mar 21, 2024 9:47 pm
Forum: General
Topic: Vlan don't go on internet
Replies: 5
Views: 478

Re: Vlan don't go on internet

Without checking the config...did you add the VLAN to LAN in the /interface list member?
by erlinden
Thu Mar 21, 2024 10:50 am
Forum: Wireless Networking
Topic: hAP ax2 station mode [SOLVED]
Replies: 27
Views: 2161

Re: hAP ax2 station mode [SOLVED]

Thanks for investing your time in trying to help me! I appreciate it. I guess you are out of ideas as I am?
Last thing I can think of is setting frequency as well as bandwidth. And then I'm out of ideas.
by erlinden
Wed Mar 20, 2024 1:27 pm
Forum: Wireless Networking
Topic: hAP ax2 station mode [SOLVED]
Replies: 27
Views: 2161

Re: hAP ax2 station mode [SOLVED]

Can you give it a try with fixed channel and bandwidth?
by erlinden
Wed Mar 20, 2024 12:42 pm
Forum: Wireless Networking
Topic: hAP ax2 station mode [SOLVED]
Replies: 27
Views: 2161

Re: hAP ax2 station mode [SOLVED]

I ran into such a situation once when the radio I tried to connect to was running with 40MHz bandwidth (2.4GHz).
Can you supply all information about the radio you want to connect to?
by erlinden
Wed Mar 20, 2024 12:31 pm
Forum: Wireless Networking
Topic: hAP ax2 station mode [SOLVED]
Replies: 27
Views: 2161

Re: hAP ax2 station mode [SOLVED]

Do you have a passphrase configured?
Is this the complete config?
by erlinden
Wed Mar 20, 2024 11:25 am
Forum: Beginner Basics
Topic: Website is not reachable but pingable from customer network [SOLVED]
Replies: 4
Views: 1606

Re: Website is not reachable but pingable from customer network [SOLVED]

Sounds like the problem is somewhere outside of the customers network (IP block?). You can test that by using a VPN on the customers site and see if you can access the website while connected through vpn. So i figured out, that the problem is on the route behind our mikrotik and we cant do anything ...
by erlinden
Mon Mar 18, 2024 3:52 pm
Forum: General
Topic: Wireguard from MT to client (win10) with several users to several VLAN's [SOLVED]
Replies: 38
Views: 3943

Re: Wireguard from MT to client (win10) with several users to several VLAN's [SOLVED]

Instead of using the DDNS address, you can just use the peers IP address.
Can you make an overview (diagram) of all devices involved?
by erlinden
Sun Mar 17, 2024 1:41 pm
Forum: Wireless Networking
Topic: Can hap ax2/3 and/or cap ax operate in 5ghz-ac mode (wifi-5) [SOLVED]
Replies: 5
Views: 1455

Re: Can hap ax2/3 and/or cap ax operate in 5ghz-ac mode (wifi-5) [SOLVED]

Why?
Does it have to be fixed, the standard is backward compatible and will be used by older devices.

Band has to do with radio frequency.
by erlinden
Fri Mar 15, 2024 4:37 pm
Forum: Wireless Networking
Topic: hap ax3 other antennas
Replies: 8
Views: 538

Re: hap ax3 other antennas

You should specify the antenna gain to comply with regulations. But to be honest, I wouldn't be to worried about the default antennas...unless you have some sort of problem?
by erlinden
Fri Mar 15, 2024 4:33 pm
Forum: Scripting
Topic: Router maybe is hacked. Please help
Replies: 7
Views: 444

Re: Router maybe is hacked. Please help

In /ip/firewall/connections you can see all connections, just filter on Dst. Address 192.168.88.100 to get the list of Src. Addresses. Still unclear what makes you think your router is part of the hack. Especially because the only log you provide is from the XAMPP server. Can you provide your router...
by erlinden
Fri Mar 15, 2024 9:46 am
Forum: General
Topic: Anyone tested the new L009?
Replies: 16
Views: 4427

Re: Anyone tested the new L009?

L009 is only nice looking switch. CPU is garbitch.
Garbitch?
:lol:
Do you mean garbage!?
by erlinden
Thu Mar 14, 2024 1:29 pm
Forum: The Dude
Topic: Dude images for RB5009 and CAP AX
Replies: 1
Views: 266

Re: Dude images for RB5009 and CAP AX

Image?
Like https://images.google.com/ ?

Maybe this question is already answered:
viewtopic.php?t=158281
by erlinden
Thu Mar 14, 2024 1:26 pm
Forum: Wireless Networking
Topic: Client was disconnected because could not assign vlan
Replies: 6
Views: 435

Re: Client was disconnected because could not assign vlan

I would expect three datapaths on CAPsMAN, @sinisa (assuming there are two VLAN's involved). On for ac devices and two for ax devices. And you have to do manual VLAN filtering on ac devices (using the wifi-qcom-ac driver), as it doesn't support this through the current driver. The ax devices do supp...
by erlinden
Thu Mar 14, 2024 10:24 am
Forum: Wireless Networking
Topic: Client was disconnected because could not assign vlan
Replies: 6
Views: 435

Re: Client was disconnected because could not assign vlan

When seeing things like this on a cap, I get goosebumps: /ip upnp set enabled=yes I would advise to reset the cap into CAPsMode (see this topic how to: https://forum.mikrotik.com/viewtopic.php?t=148207) and start from there. Next, follow this guide to the letter (as you have done in your config): ht...
by erlinden
Wed Mar 13, 2024 6:01 pm
Forum: Wireless Networking
Topic: CAPsMAN forwarding mode
Replies: 4
Views: 539

Re: CAPsMAN forwarding mode

I would (and have :D) choose VLAN.
Especially because my IoT devices are not allowed to access Internet (which is a single line in the firewall).
by erlinden
Tue Mar 12, 2024 9:36 pm
Forum: General
Topic: NAT port forwarding does not work
Replies: 19
Views: 844

Re: NAT port forwarding does not work

Is the firewall rule hit?
How are you testing?
by erlinden
Tue Mar 12, 2024 6:20 pm
Forum: General
Topic: NAT port forwarding does not work
Replies: 19
Views: 844

Re: NAT port forwarding does not work

Think on your dst-nat rule you are missing:
in-interface-list=WAN
Besides:
Are you indeed having 2 internet connections?
Why do you have all these IPv6 lines while you are not running IPv6?
by erlinden
Tue Mar 12, 2024 12:44 pm
Forum: Wireless Networking
Topic: Outdoor antenna 5G
Replies: 1
Views: 205

Re: Outdoor antenna 5G

If you have questions about availablilty, you better contact your distributor.
by erlinden
Tue Mar 12, 2024 12:43 pm
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 459
Views: 92057

Re: v7.14.1 [stable] is released!

If you're all so annoyed by this, just set up your logging correctly. Perhaps my question wasn't clear: what is Wireguard "giving up" after 20 attempts? Besides...my complete wireguard logging: 10:29:18 wireguard,info WG-Interface: [public key]: Handshake for peer did not complete after 5...
by erlinden
Tue Mar 12, 2024 11:53 am
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 459
Views: 92057

Re: v7.14.1 [stable] is released!

WireGuard fix solves an issue where RouterOS was trying to connect to peers which have not been used yet and there is no known endpoint-address. I'm running into the situation that after enabling and disabling RoadWarrior on a client device (where endpoint is not set on the router), the router is s...
by erlinden
Mon Mar 11, 2024 1:18 pm
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 459
Views: 92057

Re: v7.14.1 [stable] is released!

Probably because there is no changelog on the provided URL, @diamuxin. Also from the browser it results in a 404.
by erlinden
Mon Mar 11, 2024 1:08 pm
Forum: RouterBOARD hardware
Topic: hAP ac2 not working after 7.14 update.
Replies: 18
Views: 2257

Re: hAP ac2 not working after 7.14 update.

The wiki is the v6.x documentation, you better have a look at "help" which is the v7.x equivalent: https://help.mikrotik.com/docs/display/ROS/Netinstall What do you exactly mean by backup? Because a backup can only be restored to the same RouterOS version and device as far as I know. Have ...
by erlinden
Fri Mar 08, 2024 12:23 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1824

Re: CAP AX - CAPSMAN- no DHCP lease [SOLVED]

For ax devices it is sufficient to set the device to CAP (reset with CAPs Mode). No manual settings on the CAP have to be done, unless you want "something" done with VLAN on the ethernet interfaces. The wireless interfaces can be completely managed by CAPsMAN, including VLAN.
by erlinden
Thu Mar 07, 2024 10:26 am
Forum: General
Topic: SFP+ Port Flapping (RB5009 + CRS328-24P-4S+RM)
Replies: 3
Views: 715

Re: SFP+ Port Flapping (RB5009 + CRS328-24P-4S+RM)

Don't know if this provides more info: can you activate debug logging?
Have you tried swapping power supply?
by erlinden
Thu Mar 07, 2024 9:36 am
Forum: Scripting
Topic: How do I protect source code from being pirated?
Replies: 29
Views: 1369

Re: How do I protect source code from being pirated?

Put it in a (remote) repository.
by erlinden
Wed Mar 06, 2024 9:31 pm
Forum: General
Topic: Access Mikrotik router without wifi and ethernet [SOLVED]
Replies: 3
Views: 498

Re: Access Mikrotik router without wifi and ethernet [SOLVED]

Is it accessible through VPN?
by erlinden
Wed Mar 06, 2024 10:38 am
Forum: Wireless Networking
Topic: CAPsMAN <> cAP config and behaviour is baffling me - managed, yet unmanaged...
Replies: 15
Views: 996

Re: CAPsMAN <> cAP config and behaviour is baffling me - managed, yet unmanaged...

Your wireless interfaces on the CAP aren't part of the bridge, hence it can't be controlled.

Please read this carefully:
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
by erlinden
Tue Mar 05, 2024 8:17 am
Forum: Beginner Basics
Topic: Queue in AP without DHCP server (DHCP server in AP)
Replies: 3
Views: 258

Re: Queue in AP without DHCP server (DHCP server in AP)

Does the switch support VLAN? In that case you can create a "WLAN VLAN" and set a queue on that.
by erlinden
Mon Mar 04, 2024 9:30 pm
Forum: Beginner Basics
Topic: DHCP conflict
Replies: 3
Views: 539

Re: DHCP conflict

Would need to see the config:
/export hide-sensitive file=anynameyoulike
Remove serial and any other private info en post in between code tags by using the </> button.

IP reservations should not be part of the DHCP scope.
by erlinden
Mon Mar 04, 2024 5:43 pm
Forum: General
Topic: Require help/advice with Bridge and VLAN's [SOLVED]
Replies: 10
Views: 997

Re: Require help/advice with Bridge and VLAN's [SOLVED]

/interface bridge
add name=bridge-all pvid=100 vlan-filtering=no
Should be:
/interface bridge
add name=bridge-all vlan-filtering=yes
Frame-types should be set on the /interface/bridge/port
by erlinden
Mon Mar 04, 2024 4:37 pm
Forum: General
Topic: Require help/advice with Bridge and VLAN's [SOLVED]
Replies: 10
Views: 997

Re: Require help/advice with Bridge and VLAN's [SOLVED]

It would help if you share the config: /export file=anynameyoulike Remove serial and any other private info and post in between code tags by using the </> button. In regards to information: https://forum.mikrotik.com/viewtopic.php?t=143620 (the reference for setting up VLAN on MikroTik) https://help...
by erlinden
Mon Mar 04, 2024 10:39 am
Forum: General
Topic: Ethernet ports on a CAP
Replies: 3
Views: 266

Re: Ethernet ports on a CAP

By default (when resetting a device and setting it into CAPS mode) all interfaces are added on the bridge.
Therefor the interfaces are actually in a switch.

CAPsMAN only manages the wireless interfaces.
by erlinden
Sat Mar 02, 2024 9:09 am
Forum: Announcements
Topic: v7.14.2 [stable] is released!
Replies: 459
Views: 92057

Re: v7.14 [stable] is released!

What is going on?? In my experience it all comes down (or goes up) with good configuration. Had to do some tweaking, enabling debug logging for wireless did provide a lot of useful information (specifically identifying the iPhone 11 having difficulties with both WPA2-PSK and WPA3-PSK enabled). If y...
by erlinden
Fri Mar 01, 2024 1:12 pm
Forum: Wireless Networking
Topic: 7.14 Wireless default-forward
Replies: 1
Views: 332

Re: 7.14 Wireless default-forward

Not sure if isolation has the same function, on the datapath you can set client-isolation on or off.
https://help.mikrotik.com/docs/display/ ... properties
by erlinden
Wed Feb 28, 2024 9:37 am
Forum: Wireless Networking
Topic: Trunking Cube Pro [SOLVED]
Replies: 5
Views: 604

Re: Trunking Cube Pro [SOLVED]

Use this absolutely great post and see all connections as trunk ports:

viewtopic.php?t=143620
by erlinden
Wed Feb 28, 2024 8:44 am
Forum: General
Topic: RB 4011 ports 1-5 occasionally fail after upgrade to 7.
Replies: 8
Views: 1869

Re: RB 4011 ports 1-5 occasionally fail after upgrade to 7.

Would be good to have a look at your config:
/export file=anynameyoulike
Going from 6.x to 7.x is a big step. You might want to consider doing netinstall en config manually (or from an export) after.
by erlinden
Tue Feb 27, 2024 11:26 am
Forum: Beginner Basics
Topic: Help routing 1 internal IP address to a different dns server
Replies: 10
Views: 596

Re: Help routing 1 internal IP address to a different dns server

You might be able to route all DNS requests of this device to your specific DNS server: add action=dst-nat chain=dstnat dst-port=53 src-address=[Device IP] protocol=udp to-addresses=[DNS IP] to-ports=53 add action=dst-nat chain=dstnat dst-port=53 src-address=[Device IP] protocol=tcp to-addresses=[DN...
by erlinden
Tue Feb 27, 2024 10:59 am
Forum: General
Topic: Bandwidth Limit on WAN Interface
Replies: 2
Views: 443

Re: Bandwidth Limit on WAN Interface

Please can you explain a bit more? Why do you want to limit the WAN interface? Like having Gigabit internet speed, but limiting it to 100Mbps? If you want to limit, you can use queues (as you already mentioned). Are simple queues not sufficient? https://help.mikrotik.com/docs/display/ROS/Queues#Queu...
by erlinden
Tue Feb 27, 2024 9:29 am
Forum: General
Topic: Firewall doesn't work
Replies: 5
Views: 445

Re: Firewall doesn't work

Bit hard to tell, you might want to add some relevant information:

Can you post a network diagram, including clients?
Can you share your MikroTik configs:
/export file=anynameyoulike
Remove serial and any other private information and post between code tags by using the </> button.
by erlinden
Tue Feb 27, 2024 9:26 am
Forum: Wireless Networking
Topic: RB952Ui-5ac2nD Capsman
Replies: 18
Views: 935

Re: RB952Ui-5ac2nD Capsman

You are missing the fact that ax (as well as wifi-qcom-ac) devices are managed by the new CAPsMAN, that is located on the WiFi menu item. So you are currently not running the new CAPsMAN: /interface/wifi/capsman Here you can find all required information: https://help.mikrotik.com/docs/display/ROS/W...
by erlinden
Sun Feb 25, 2024 7:45 pm
Forum: Beginner Basics
Topic: CRS125-24G-1S - Internet Link
Replies: 9
Views: 792

Re: CRS125-24G-1S - Internet Link

Within the first 5 min of the being online, the device was flooded with "invalid login" attempts across a variety of standard usernames (admin, telecoadmin, root, etc.) This indicates that your logging is working! Is it logged by the default block rule in the input chain, or did you by ch...
by erlinden
Sun Feb 25, 2024 7:39 pm
Forum: Beginner Basics
Topic: RB2011UiAS-2HnD-IN RouterOS v 7.13.4 2nd switch unresponsive
Replies: 3
Views: 464

Re: RB2011UiAS-2HnD-IN RouterOS v 7.13.4 2nd switch unresponsive

Can you share the "real" config?
/export file=anynameyoulike
Remove serial and any other private information and post it between code tags by using the </> button.
by erlinden
Sun Feb 25, 2024 10:34 am
Forum: Announcements
Topic: SwOS version 2.16 released!
Replies: 45
Views: 28446

Re: SwOS version 2.16 released!

After doing this, the update succeeded. Afterwards I disabled RTSP again.
Why do you have RSTP disabled?
by erlinden
Sun Feb 25, 2024 10:19 am
Forum: Beginner Basics
Topic: Cloud Access need help
Replies: 7
Views: 525

Re: Cloud Access need help

Thank you for the advice Erlinder
You are welcome! And please read the link I posted about Wireguard. Then you won't have to do anything (a bit more) complicated (like Zerotier).
by erlinden
Sat Feb 24, 2024 11:31 pm
Forum: RouterBOARD hardware
Topic: Intermittent 4OGbit Link on CRS326-24S+2Q+
Replies: 3
Views: 580

Re: Intermittent 4OGbit Link on CRS326-24S+2Q+

Swos is very obsolete in my opinion, never got any updates.
You missed this?
viewtopic.php?t=204932
by erlinden
Sat Feb 24, 2024 1:33 pm
Forum: Beginner Basics
Topic: Cloud Access need help
Replies: 7
Views: 525

Re: Cloud Access need help

Do you have a public (and non CGNAT) IP address? Are you testing from the internal network? Then you might need NAT loopback: https://help.mikrotik.com/docs/display/ROS/NAT#NAT-HairpinNAT My advise: configure Wireguard and use that to administrate the router: https://help.mikrotik.com/docs/display/R...
by erlinden
Fri Feb 23, 2024 3:55 pm
Forum: Wireless Networking
Topic: DFS and radar channels
Replies: 10
Views: 880

Re: DFS and radar channels

You did not set the second frequency correctly
There are more ways to assign frequencies:
Examples of valid channel.frequency values:

2412
2412,2432,2472
5180-5240:20,5500-5580:20
https://help.mikrotik.com/docs/display/ ... properties
by erlinden
Fri Feb 23, 2024 3:32 pm
Forum: General
Topic: Switching to new router and wanted to cleanup the firewall mess
Replies: 8
Views: 749

Re: Switching to new router and wanted to cleanup the firewall mess

From a deny-everything-allow-something, you can remove all drop rules (in the end) except for the last rule (drop everything). This will give the same result, just will have a higher kiss-rate. With that, you can remove all port-scanners rules as well, as they are no longer used. That would bring it...
by erlinden
Fri Feb 23, 2024 11:54 am
Forum: Wireless Networking
Topic: CAPsMAN hAP AX2 Drops
Replies: 9
Views: 803

Re: CAPsMAN hAP AX2 Drops

I ran into problems with one client that wasn't able to roam (and some more strange behavour) caused by having both WPA2-PSK and WPA3-PSK.
You might want to give WPA2-PSK only a try.
by erlinden
Thu Feb 22, 2024 2:26 pm
Forum: Beginner Basics
Topic: CAPsMAN, DHCP Server, Wireless to wifi-qcom-ac, etc.
Replies: 11
Views: 1610

Re: CAPsMAN, DHCP Server, Wireless to wifi-qcom-ac, etc.

Where is CAPSMAN config on wifi-qcom-ac? In client, there is cap but without interface
CAPsMAN is configured through the WiFi menu on the Remote CAP tab, CAPsMAN button (or /interface/wifi/capsman). It is available since 7.13.x and has nothing to do with the additional package/driver.
by erlinden
Thu Feb 22, 2024 1:39 pm
Forum: Wireless Networking
Topic: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer
Replies: 21
Views: 5530

Re: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer

Activate wireless & debug, that might give sme insights. Turned out my iPhone 11 had difficulties with combined WPA2-PSK and WPA3-PSK. Turned off WPA3-PSK, after that I didn't run into problems anymore. The problem I ran into, was that this phone couldn't roam. Turned out (from the logging) that...
by erlinden
Thu Feb 22, 2024 9:48 am
Forum: Beginner Basics
Topic: RB951Ui-2HnD
Replies: 6
Views: 560

Re: RB951Ui-2HnD

In /ip/firewall/connections you can see all connected IP addresses.
by erlinden
Wed Feb 21, 2024 6:04 pm
Forum: Wireless Networking
Topic: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer
Replies: 21
Views: 5530

Re: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer

Do you have different SSID's, @strelokr?
Can you by chance share your config?
/export file=anynameyoulike
Remove serial and any other private info and post between code tags by using the </> button.
by erlinden
Wed Feb 21, 2024 1:38 pm
Forum: Beginner Basics
Topic: VLANs and firewall
Replies: 5
Views: 453

Re: VLANs and firewall

You do have to explicitely block inter VLAN traffic (which makes sense).
Better (in my opinion) is doing it the other way around: explicitely accept and block everything else.
by erlinden
Tue Feb 20, 2024 9:38 pm
Forum: General
Topic: FTP forwarding questions from a beginner
Replies: 2
Views: 262

Re: FTP forwarding questions from a beginner

Besides port 21, you have to forward a range of ports for passive mode. Depends on the FTP server and how that is configured.
But to be honest...FTP is like legacy. Please consider a different approach instead of FTP, or make it available to the outside world through VPN.
by erlinden
Tue Feb 20, 2024 5:22 pm
Forum: General
Topic: WINBOX PROBLEM
Replies: 3
Views: 370

Re: WIMBOX PROBLEM

You are probably referring to Winbox?

Are both Winbox and the app up to date?
What version of RouterOS are you running?
Are you connecting by IP?
Do you have the same issues when you connect by MAC address?
What exact CCR model are you using?
by erlinden
Tue Feb 20, 2024 2:06 pm
Forum: Wireless Networking
Topic: DFS and radar channels
Replies: 10
Views: 880

Re: DFS and radar channels

For completeness...what RouterOS version are you running?
Are you expecting radar signal occurences?
by erlinden
Tue Feb 20, 2024 12:34 pm
Forum: Beginner Basics
Topic: My ISP blocked me because of a lot of connections
Replies: 4
Views: 495

Re: My ISP blocked me because of a lot of connections

A look at your config might help as well:
/export file=anynameyoulike
Remove serial and any other private information, and post it between code tags by using the </> button
by erlinden
Tue Feb 20, 2024 10:41 am
Forum: Wireless Networking
Topic: wave2 roaming and access lists
Replies: 3
Views: 396

Re: wave2 roaming and access lists

Drop the 2.4GHz support on the RB4011 and use the wifi-qcom-ac driver on it as well. Then you can have all the benefits of the driver.
by erlinden
Mon Feb 19, 2024 2:31 pm
Forum: Wireless Networking
Topic: CAPsMAN not working on 7.13.4 [SOLVED]
Replies: 26
Views: 1537

Re: CAPsMAN not working on 7.13.4 [SOLVED]

please see the attached video. There is no video attached (yet). Could you please share both configs of CAPS and of CAPsMAN? /export file=anynameyoulike Remove serial and any other personal information. If you post the config in between code tags (by using the </> button) it will be more readable.
by erlinden
Mon Feb 19, 2024 2:18 pm
Forum: Wireless Networking
Topic: wifi hardware reset issue on hap ax3
Replies: 16
Views: 5064

Re: wifi hardware reset issue on hap ax3

Can you share your config, @mehr463? I have neither seen this error on my environment.
by erlinden
Mon Feb 19, 2024 12:28 pm
Forum: RouterBOARD hardware
Topic: Locked Out
Replies: 12
Views: 925

Re: Locked Out

When using Winbox you might be able to connect by MAC address.
by erlinden
Mon Feb 19, 2024 10:51 am
Forum: Beginner Basics
Topic: Basic Vlan Tag/Untag
Replies: 7
Views: 573

Re: Basic Vlan Tag/Untag

There is a dedicated page on this topic:
https://help.mikrotik.com/docs/display/ ... switchchip
by erlinden
Mon Feb 19, 2024 9:44 am
Forum: Beginner Basics
Topic: CRS125-24G-1S - Internet Link
Replies: 9
Views: 792

Re: CRS125-24G-1S - Internet Link

The S in CRS stands for switch, you are using a switch as router. It is functionally capable of working as router, but with the lack of routing performance. You could expect around 250Mbps max, according to this (routring, 25 ip filter rules): https://mikrotik.com/product/CRS125-24G-1S-IN#fndtn-test...
by erlinden
Sat Feb 17, 2024 10:59 pm
Forum: General
Topic: Bug? Simple queue causes reboot failure
Replies: 9
Views: 945

Re: Bug? Simple queue causes reboot failure

As you seem to understand the concept of VLAN...why do you use mutliple bridges? I would like to advise you this topic, which gives really great suggestions on VLAN: https://forum.mikrotik.com/viewtopic.php?t=143620 Will continue reading your config for reasons having this problem. Can you add the w...
by erlinden
Sat Feb 17, 2024 10:56 pm
Forum: General
Topic: hap ax^2 does not provide full speed connection
Replies: 31
Views: 1629

Re: hap ax^2 does not provide full speed connection

For real measurements you better test with iPerf instead of (any other) speedtest.
by erlinden
Sat Feb 17, 2024 6:08 pm
Forum: Beginner Basics
Topic: New mikrotik install DOA?
Replies: 3
Views: 401

Re: New mikrotik install DOA?

If you use Windows, install Winbox (if you haven't yet) and connect through it by MAC address (find it in neighborhood. Otherwise, consider resetting to default by using the reset button as explained here: https://help.mikrotik.com/docs/display/ROS/Reset+Button Enjoy MT, you'll love it once you unde...
by erlinden
Fri Feb 16, 2024 10:36 am
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 47284

Re: v7.14rc [testing] is released!

If I use the rest API extensively for getting stats etc, the user list gets spammed with active users.
Looks like you are using a new connection for every request. Is the list cleared after some time?
by erlinden
Thu Feb 15, 2024 8:50 am
Forum: Beginner Basics
Topic: Missing WLAN in OS 7 [SOLVED]
Replies: 5
Views: 933

Re: hap ac2 quick set [SOLVED]

by erlinden
Wed Feb 14, 2024 11:28 am
Forum: Wireless Networking
Topic: Help with my wireless setup [SOLVED]
Replies: 3
Views: 538

Re: Help with my wireless setup [SOLVED]

YES YOU CAN!

:-)

https://help.mikrotik.com/docs/display/ROS/WiFi

cAP ac can be run with wifi-qcom-ac driver and does support the latest bennefits.
You really want to read the above link carefully, there are some manual steps to take.
by erlinden
Wed Feb 14, 2024 9:19 am
Forum: Beginner Basics
Topic: Cannot upgrade hAP ac2 7.7 to 7.11.2
Replies: 2
Views: 334

Re: Cannot upgrade hAP ac2 7.7 to 7.11.2

I hava had lots of problems when using detect internet, you might want to disable it (set all interfaces to none) en try again:
https://help.mikrotik.com/docs/display/ ... t+Internet
by erlinden
Tue Feb 13, 2024 9:02 am
Forum: Wireless Networking
Topic: hapax2 roaming problem
Replies: 6
Views: 742

Re: hapax2 roaming problem

How did the hapax2_em get all these settings? Just reset with no default and set it to CAPS Mode (haven't tested it): /system reset-configuration caps-mode=yes Or by pressing the reset button: https://help.mikrotik.com/docs/display/ROS/Reset+Button And indeed, use RSTP: https://help.mikrotik.com/doc...
by erlinden
Mon Feb 12, 2024 8:55 pm
Forum: Beginner Basics
Topic: check my settings
Replies: 12
Views: 697

Re: check my settings

And while we are at it: upgrade to wifi-qcom-ac driver, which is available from RouterOS v7.13.x and up. Consider 7.14 which is better working (for me).
by erlinden
Mon Feb 12, 2024 6:18 pm
Forum: Wireless Networking
Topic: Capsman version [SOLVED]
Replies: 16
Views: 1111

Re: Capsman version [SOLVED]

Three options: /interface wifi, version 7.13.x and higher /interface wifiwave2, version 7.x up to 7.12.x /caps-man, version 6.x and 7.x legacy https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-WiFiCAPsMAN https://help.mikrotik.com/docs/pages/viewpage.action?pageId=46759946#WifiWave2(7.12andolder)...
by erlinden
Mon Feb 12, 2024 4:16 pm
Forum: General
Topic: Wrong credentials on new Chateau LTE 12 [SOLVED]
Replies: 6
Views: 423

Re: Wrong credentials on new Chateau LTE 12

Is there a sticker on the bottom containing the password?
by erlinden
Mon Feb 12, 2024 2:49 pm
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 47284

Re: v7.14rc [testing] is released!

I presume wAP ac is an arm version not mipsbe...
Yes
Was the wifi-qcom-ac package used?
Yes
How much HDD space was left free on cAP XL ac and wAP ac after the upgrade?
cAP XL ac: 372 KiB
wAP ac: 356 KiB

This according to /system/resources
by erlinden
Mon Feb 12, 2024 11:18 am
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 47284

Re: v7.14rc [testing] is released!

cAP XL ac and wAP ac upgraded (from 7.13.4) without problems (besides my RB4011).
Only had to suppress Wireguard logging.
by erlinden
Mon Feb 12, 2024 9:52 am
Forum: Wireless Networking
Topic: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]
Replies: 11
Views: 1031

Re: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]

I have wAP ac's running perfectly fine on two different locations. Used the reset-default with CAPS-Mode and afterwards did some magic to support VLAN's and multiple SSID's. Came from version 7.13.2 and upgraded to 7.13.3 and 7.13.4. Any steps from this help page that you didn't do? https://help.mik...
by erlinden
Sun Feb 11, 2024 3:29 pm
Forum: Wireless Networking
Topic: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]
Replies: 11
Views: 1031

Re: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]

Is the wAP ac a mipsbe or a arm device? Only the latter is supported.
by erlinden
Fri Feb 09, 2024 3:02 pm
Forum: General
Topic: Access single server across VLANs
Replies: 5
Views: 398

Re: Access single server across VLANs

Something like:
add action=accept chain=forward comment="Kids access to server" out-interface=LAN_VLAN dst-address=[IP single server]
You can add protocol or port as well, now the complete server is reachable.
by erlinden
Fri Feb 09, 2024 2:51 pm
Forum: Beginner Basics
Topic: Drop invalid FW forward
Replies: 15
Views: 963

Re: Drop invalid FW forward

Interestingly...there is no drop filter rule on the forward chain that logs...
Port 80 and 443 seems to be standard web browsing?
by erlinden
Fri Feb 09, 2024 9:49 am
Forum: Wireless Networking
Topic: Channel Width (wifi-qcom-ac)
Replies: 11
Views: 1154

Re: Channel Width (wifi-qcom-ac)

What devices do you use?
What width is reported in on the WiFi tab in WiFi?
by erlinden
Thu Feb 08, 2024 6:01 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

What are you looking for? They're both default/delivered and in CAPsMAN mode.
I'm looking for the answer to your question, just like you.
by erlinden
Thu Feb 08, 2024 5:29 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

Read my previous posts. The cAP AX is GONE. It's now a hAP ax2 and ax3.
You are right!

Okay, can you please share configs of both the hAP ax2 and ax3?
by erlinden
Thu Feb 08, 2024 5:19 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

I've posted my WiFi configuration numerous times, but okay, here we go again (removed serial #, etc.):
Werte talking about the cAP AX, not the CAPsMAN.
Can you please share the config of the cAP ax? And have you checked the log on it?
by erlinden
Thu Feb 08, 2024 3:33 pm
Forum: General
Topic: Dual WAN configuration
Replies: 6
Views: 502

Re: Dual WAN configuration

by erlinden
Thu Feb 08, 2024 1:05 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13.4 [stable] is released!

Can you please share your config? Really curious if there is anything that could give a hint.
by erlinden
Thu Feb 08, 2024 12:12 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13.4 [stable] is released!

I don't see that behavior, @herbrico. Looking at the changelog I would not expect differences. Do you have anything configured related to the changelog?
by erlinden
Thu Feb 08, 2024 10:43 am
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

It shows ax/Ceee in the screenshots.
Indeed, and if I read correctly, the screenshot is of the combination hAP ax2 and hAP ax3.
by erlinden
Thu Feb 08, 2024 10:01 am
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

Any thoughts on why this issue is happening? Can you please share the config of the cAP ax? And have you checked the log on it? And can you check if there is a passphrase? This is missing in the posted configs, but I assume removed on purpose...? In your case I would netinstall the cAP ax, and perf...
by erlinden
Thu Feb 08, 2024 9:46 am
Forum: General
Topic: all zeros 00:00:00:00:00:00 on MAC address. This indicates an IP address conflict
Replies: 2
Views: 389

Re: all zeros 00:00:00:00:00:00 on MAC address. This indicates an IP address conflict

A complete config would be better, can you do a complete export and remove serial (also in your opening post) and any other private information.
by erlinden
Wed Feb 07, 2024 2:37 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2236

Re: Wireguard doesn't work and no logs

Then it is probably the Wireguard settings. At least I see the allowed-address in the peer is set to /24, this should be /32. The client-address can be left empty. Did you follow this guide? https://help.mikrotik.com/docs/display/ROS/WireGuard#WireGuard-RoadWarriorWireGuardtunnel Can you also share ...
by erlinden
Wed Feb 07, 2024 2:02 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2236

Re: Wireguard doesn't work and no logs

Just add log=yes to the filter rule on the input chain.

At least, when you see the counter increasing.
by erlinden
Wed Feb 07, 2024 12:24 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2236

Re: Wireguard doesn't work and no logs

Zou je dit: /ip firewall filter add action=accept chain=input dst-address=192.168.1.254 dst-port=57981 protocol=udp /interface list member add comment=defconf disabled=yes interface=ether1 list=WAN kunnen veranderen naar: /ip firewall filter add action=accept chain=input in-interface-list=WAN dst-po...
by erlinden
Tue Feb 06, 2024 3:36 pm
Forum: Wireless Networking
Topic: CAPSMAN Doesn't see AP in Radio Tab. HELP!!!!
Replies: 5
Views: 471

Re: CAPSMAN Doesn't see AP in Radio Tab. HELP!!!!

@holvoetn already gave a good direction, to make it more explicit: https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Overview (where you can read about wifi-qcom-ac which is necessary for the cAP XL ac) https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-WiFiCAPsMAN (things you have to take into...
by erlinden
Sun Feb 04, 2024 11:38 am
Forum: Wireless Networking
Topic: guest wifi capsman v2 bridge
Replies: 3
Views: 375

Re: guest wifi capsman v2 bridge

I am pretty sure that is the case.
by erlinden
Sat Feb 03, 2024 10:47 pm
Forum: Wireless Networking
Topic: guest wifi capsman v2 bridge
Replies: 3
Views: 375

Re: guest wifi capsman v2 bridge

Instead of using multiple bridges, you can also (better) use VLAN. It will make your life so much easier! If you want to solve it with the current config, please share it: /export file=anynameyoulike Remove serial and any other private info and post in between code tags by using the </> button.
by erlinden
Thu Feb 01, 2024 9:43 am
Forum: Wireless Networking
Topic: CAP AX on a management VLAN - [Solved]
Replies: 6
Views: 712

Re: CAP AX on a management VLAN

Assuming you are not using CAPsMAN, you can follow this great tutorial. Basically, you will add VLAN filtering on the bridge of the cAP ax and assign VLAN ID on the bridge ports: https://forum.mikrotik.com/viewtopic.php?t=143620 If you connect a computer to the same network cable (as the cAP ax is c...
by erlinden
Wed Jan 31, 2024 10:33 am
Forum: Wireless Networking
Topic: Issue with FT
Replies: 5
Views: 612

Re: Issue with FT

I added connect-priority 0/1 to get rid of the SA Query timeout. Did you set it?
This setting can be found in /interface/wifi/security/
by erlinden
Tue Jan 30, 2024 4:37 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1824

Re: CAP AX - CAPSMAN- no DHCP lease

I would like to suggest starting from a clean situation: remove all /interface/wifi entries and reset the CAP to CAPS Mode. Especially when there are leftovers. Why don't the AX interfaces show up in the bridge/port list? any connection to Because they shouldn't, you should however see the interface...
by erlinden
Tue Jan 30, 2024 4:21 pm
Forum: General
Topic: To xSTP...or not [SOLVED]
Replies: 4
Views: 640

Re: To xSTP...or not [SOLVED]

Thanks all, did learn something thanks to you.
I chose RSTP and set priority. Still not sure what edge ports (though I can think of something) are and what can be changed in my config.

As the network won't be (more) complicated then it is currently, I'll keep RSTP active.
by erlinden
Tue Jan 30, 2024 4:14 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1824

Re: CAP AX - CAPSMAN- no DHCP lease

Don't add the CAP interfaces to the bridge manually, binding is done through datapath.

Have a look at this basic tutorial with CAPsMAN and VLAN:
https://help.mikrotik.com/docs/display/ ... ionexample:
by erlinden
Tue Jan 30, 2024 2:54 pm
Forum: RouterBOARD hardware
Topic: Everything but hAP ax2 is pointless?
Replies: 24
Views: 2373

Re: Everything but hAP ax2 is pointless?

Obivously you don't have to use the wifi provided by the router. Seems (to me) that there is not many requests for wifiless routers in that price range.
by erlinden
Tue Jan 30, 2024 1:55 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1824

Re: CAP AX - CAPSMAN- no DHCP lease

The first thing I notice is that "configuration=Kitchen2AX_valhall", while it is not a configuration. Your naming convention is doomed to be a mess: use unique names, i.e. Kitchen5AX_IOT_cfg and IOT_sec After having another look...mmm, seems you copiy/paste randomly...is this really an exp...
by erlinden
Tue Jan 30, 2024 1:24 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1824

Re: CAP AX - CAPSMAN- no DHCP lease

Can you share the WiFi settings of the CAPsMAN:
/interface/wifi/ export
Or even better a complete export of the device running CAPsMAN:
/export file=anynameyoulike
Remove serial and any other private information.
by erlinden
Tue Jan 30, 2024 11:48 am
Forum: Wireless Networking
Topic: access-list + radius not working.
Replies: 10
Views: 798

Re: access-list + radius not working.

My settings are a bit different, your range is incorrect: /interface wifi access-list add action=accept allow-signal-out-of-range=10s disabled=no signal-range=-90..0 add action=reject allow-signal-out-of-range=10s disabled=no signal-range=-120..-91 Anything above -90 is accepted, anything below reje...
by erlinden
Tue Jan 30, 2024 11:41 am
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 13143

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

From the basic configuration is See these differences: /interface/wifi set wifi1 disabled=no configuration.country=Latvia configuration.ssid=MikroTik security.authentication-types=wpa2-psk,wpa3-psk security.passphrase=8-63_characters set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-ca...
by erlinden
Tue Jan 30, 2024 10:45 am
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 13143

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

Can you post you config?
/export file=anynameyoulike
Make sure to remove serial and any other private information.
by erlinden
Mon Jan 29, 2024 10:01 pm
Forum: General
Topic: Mikrotik config forweb sites [SOLVED]
Replies: 2
Views: 414

Re: Mikrotik config forweb sites [SOLVED]

I think you are looking for a reverse proxy, as far as I know MikroTik doesn't offer that functionality out-of-the-box.
Perhaps run Traefik in a container?
by erlinden
Mon Jan 29, 2024 9:57 pm
Forum: General
Topic: To xSTP...or not [SOLVED]
Replies: 4
Views: 640

To xSTP...or not [SOLVED]

I red a lot about using Spanning Tree Protocol and found that it is recommended to use RSTP when using hAP ax2 and hAP ax3. If the CAP is hAP ax2 or hAP ax3, it is strongly recommended to enable RSTP in the bridge configuration, on the CAP configuration.manager should only be set on the CAP device i...
by erlinden
Mon Jan 29, 2024 8:51 pm
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 13143

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

I am not aware of any downsides of having 10m lease time. But I am not a professional. If memory serves me well Apple devices had some issues with that. I have the whole house running on that XE3-4. I turned the 6Ghz Radio back into a 5GHZ radio. But capacity in and around the house takes full adva...
by erlinden
Mon Jan 29, 2024 1:22 pm
Forum: Beginner Basics
Topic: access to winbox from wireguard [SOLVED]
Replies: 7
Views: 721

Re: access to winbox from wireguard [SOLVED]

You might want to consider adding wireguard to the LAN interface-list. That is by far the fastest solution. But that is something you might need to consider.
by erlinden
Sun Jan 28, 2024 8:43 pm
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 13143

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

Not everyone has the same experience when it comes to MikroTik WiFi. I have had Cisco, Ubiquiti and Grandstream and recently I returned to MikroTik. The family is happy, and thus so am I. Rockstable, using the wifi-qcom-ac driver. But again, that is just me...
by erlinden
Sun Jan 28, 2024 6:44 pm
Forum: Beginner Basics
Topic: Port forwarding help
Replies: 1
Views: 305

Re: Port forwarding help

An Endpoint (combination IP address and port) is unique, hence you can only forward a port once. To options to handle this situation: different IP address different port As the port is fixed (by Steam), only a second public IP address would solve this problem. Can your provider supply you multiple I...
by erlinden
Sun Jan 28, 2024 11:38 am
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1479

Re: CAPSMAN-How many configurations do I need?

So you want to say, that when I upgrade a system, it doesn‘t upgrade everything… and I have to do the comlicated part myself? Assuming this remark is for me: The upgrade will do just the upgrade and "nothing changes". No complications. When you consider using the wifi-qcom-ac driver (i.e....
by erlinden
Sun Jan 28, 2024 11:29 am
Forum: General
Topic: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN
Replies: 5
Views: 475

Re: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN

You are very welcome, glad it is working!
by erlinden
Sun Jan 28, 2024 11:28 am
Forum: Beginner Basics
Topic: CRS112-8g VLAN challenges
Replies: 13
Views: 770

Re: CRS112-8g VLAN challenges

There is a dedicated page for this switch: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=103841836 Think (can't see your current config yet) that you used VLAN filtering on the bridge, but to get better performance you should do it on the switch. Whether the VLAN's can communicate to e...
by erlinden
Sat Jan 27, 2024 1:10 pm
Forum: General
Topic: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN
Replies: 5
Views: 475

Re: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN

ax devices use the new CAPsMAN (which can be found in the WiFi menu on the RB-3011):
https://help.mikrotik.com/docs/display/ROS/WiFi
by erlinden
Sat Jan 27, 2024 1:07 pm
Forum: Wireless Networking
Topic: hAP ax2 connect to open WiFi
Replies: 5
Views: 541

Re: hAP ax2 connect to open WiFi

Usually wifi1 is 2.4GHz, wifi2 is usually 5GHz
In the old days, ax devices are the other way around :D
by erlinden
Sat Jan 27, 2024 12:42 pm
Forum: Wireless Networking
Topic: hAP ax2 connect to open WiFi
Replies: 5
Views: 541

Re: hAP ax2 connect to open WiFi

Make sure that, from a default cofig, wifi2 is not part of the bridge. And make it part of the WAN interface list. At last, bind the DHCP client to wifi2 and you should be good to go. If you are going to add a virtual interface to make 2.4GHz available as well, make sure to set it to ap and add it t...
by erlinden
Sat Jan 27, 2024 12:22 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1479

Re: CAPSMAN-How many configurations do I need?

Ah...you are using the old CAPsMAN, that is helpfull information. Follow this information for the CAPsMAN part (and leave the slave part out): https://help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-Basicconfigurationwithmasterandslaveinterface /caps-man security ad...
by erlinden
Fri Jan 26, 2024 6:20 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1479

Re: CAPSMAN-How many configurations do I need?

Besides answering (all) (my) questions, are you please willing to share your config of all devices involved?
/export file=anynameyoulike
by erlinden
Fri Jan 26, 2024 4:35 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1479

Re: CAPSMAN-How many configurations do I need?

You need at least 1 configuration. But it depends:

What exact device(s) will you be using as CAP?
What RouterOS version will you be running?
How many SSID's will you use?
Are VLAN's involved?
Do you want to set the frequency per radio manually or do you prefer to have it auto selected?
by erlinden
Thu Jan 25, 2024 4:11 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13.3 [stable] is released!

Have you tried by MAC Address, @ormandj? Haven't seen this in my environment (RB4011/hAP ax2/hEX S/cAP ac/cAP XL ac/wAP ac)
by erlinden
Wed Jan 24, 2024 6:19 pm
Forum: Beginner Basics
Topic: poor wifi performance
Replies: 19
Views: 1135

Re: poor wifi performance

For most problems it is necessary to get insights on the config, all config related to the problem (which can be complete configs of all devices). By providing this information, discussions can be left out. I assume you still want some help? Your hardware is more than capable to handle the speeds yo...
by erlinden
Wed Jan 24, 2024 4:48 pm
Forum: Beginner Basics
Topic: bandwidth problem with many router
Replies: 4
Views: 588

Re: bandwidth problem with many router

What do you thing about CCR1009-7G-1C-1S+ ?? i could get it for cheap. It is suitable for even 2.5 gbps connection? It's the same for any model, just check test results which are available here: https://mikrotik.com/product/CCR1009-7G-1C-1Splus#fndtn-testresults Check the specs --> TEST Results for...
by erlinden
Wed Jan 24, 2024 3:32 pm
Forum: Forwarding Protocols
Topic: RPKI
Replies: 6
Views: 716

Re: RPKI

rpki-verify RPKI is not working and must be a bug in the firmware. Can someone please check?
https://mikrotik.com/support
by erlinden
Wed Jan 24, 2024 12:19 pm
Forum: Beginner Basics
Topic: poor wifi performance
Replies: 19
Views: 1135

Re: poor wifi performance

Can you provide all relevant information: RouterOS version Standalone or CAPsMAN Config of the cAP ac /export file=anynameyoulike Remove serial and any other private info and post the output between code tags by using the </> button Because you are using the cAP ac, you are able to use the new wifi-...
by erlinden
Tue Jan 23, 2024 8:48 am
Forum: Beginner Basics
Topic: Dual WAN- No load balance, No failover
Replies: 2
Views: 580

Re: Dual WAN- No load balance, No failover

Something like what is discussed in this post?
viewtopic.php?t=194320
by erlinden
Mon Jan 22, 2024 12:12 pm
Forum: Wireless Networking
Topic: FT between ax & ac [SOLVED]
Replies: 3
Views: 865

Re: FT between ax & ac [SOLVED]

Glad I could help you...I found the answer on this forum as well 8)
by erlinden
Mon Jan 22, 2024 11:01 am
Forum: Wireless Networking
Topic: FT between ax & ac [SOLVED]
Replies: 3
Views: 865

Re: FT between ax & ac [SOLVED]

To have it working, I had to set connect-priority (0/1) as well. That was for an ac-only setup, perhaps you will benefit from it as well...?
Do you see SA Query Timeouts in the logging?
by erlinden
Sun Jan 21, 2024 4:11 pm
Forum: General
Topic: latest firmware issu [SOLVED]
Replies: 1
Views: 614

Re: latest firmware issu [SOLVED]

Restore of a backup can only be performed on identical devices: https://help.mikrotik.com/docs/display/ROS/Backup Better to do an export of the config and import that line by line: https://help.mikrotik.com/docs/display/ROS/Configuration+Management For netinstall it is necessary to follow the manual...
by erlinden
Fri Jan 19, 2024 2:52 pm
Forum: Wireless Networking
Topic: SA Query timeout
Replies: 47
Views: 11723

Re: SA Query timeout

Anyway, I'm sure someone will be along soon to say it's your config etc........... How do you know his config is correct. There are not a lot of topics where, after sharing the config, there are no improvements to make on the config. @kurio: As far as I know the client will always use the same MAC ...
by erlinden
Thu Jan 18, 2024 3:15 pm
Forum: Wireless Networking
Topic: Help with troubleshooting poor WiFi speed
Replies: 41
Views: 1905

Re: Help with troubleshooting poor WiFi speed

The C stands for Control channel and every C or e (or X) is 20MHz bandwidth. In case of Ceee and channel 5500: 5490-5570 used frequencies, where the control channel is frequency 5500. In case of eCee and channel 5520: 5490-5570 used frequencies, where the control channel is frequency 5520. A tool li...
by erlinden
Thu Jan 18, 2024 11:57 am
Forum: Wireless Networking
Topic: Not able to setup WiFi on my cAP ac device firmware v 7.13.2 [SOLVED]
Replies: 13
Views: 1475

Re: Not able to setup WiFi on my cAP ac device firmware v 7.13.2 [SOLVED]

Remove current wifi configuration and start again.

And perhaps you can share your current config:
/interface/wifi/ export file=anynameyoulike
by erlinden
Thu Jan 18, 2024 9:47 am
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1375

Re: VLAN configuration for home network [SOLVED]

If you want to have some documentation on VLAN, please read this post:
viewtopic.php?t=143620
by erlinden
Wed Jan 17, 2024 6:01 pm
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1375

Re: VLAN configuration for home network [SOLVED]

Mmm...not to fond of your firewall: Can you please order them: first input then forward chain? Am I correct that you don't want anything accessing your router (except for ICMP)? The longer I look... ...well, just go back to defaults and add VLAN's to the correct interface list. Currently it is a tot...
by erlinden
Wed Jan 17, 2024 5:20 pm
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1375

Re: VLAN configuration for home network [SOLVED]

Please, community tell me do I understand VLAN correctly: - Will such configuration work? Sure - Will VLAN 88 clients have winbox access to router via IP 192.168.88.1 address ? Depends on your firewall (that is totally missing in your post) - Will wireless IoT devices "untaggly" connected...
by erlinden
Wed Jan 17, 2024 5:02 pm
Forum: Wireless Networking
Topic: MikroTik hAP ax3 poor WiFi performance
Replies: 258
Views: 47458

Re: MikroTik hAP ax3 poor WiFi performance

What is the problem and how i can improve the 5ghz performance?
Would be helpfull to:
  • see the configuration
  • know at what rate the client is connected
  • how the network speedtest is performed
by erlinden
Wed Jan 17, 2024 4:50 pm
Forum: General
Topic: Brute Force Attacks
Replies: 16
Views: 2376

Re: Brute Force Attacks

Image
Greetings from the Netherlands :D
by erlinden
Wed Jan 17, 2024 4:14 pm
Forum: Beginner Basics
Topic: Join CAP ax XL into a capsman config
Replies: 31
Views: 3110

Re: Join CAP ax XL into a capsman config

But now the CAP does not send the data anymore to the GuestBridge, so it does not get an GuestLAN IP address, will i get forced now to use VLAN ID in the whole network instead? What a joy, you finaly have a good reason for properly configuring your network! Although also in the old world using VLAN...
by erlinden
Wed Jan 17, 2024 9:42 am
Forum: Beginner Basics
Topic: WAN Interface DHCP?
Replies: 7
Views: 1093

Re: WAN Interface DHCP?

Please share the config:
/export file=anynameyoulike
Remove serial and any other private info and post in between code tags by using the </> button.
by erlinden
Tue Jan 16, 2024 9:46 pm
Forum: Beginner Basics
Topic: Join CAP ax XL into a capsman config
Replies: 31
Views: 3110

Re: Join CAP ax XL into a capsman config

Just checked on my CAPsMAN, don't see any counter on both /interface and /interface/wifi.
Running 7.13.2 together with wifi-qcom-ac driver and cAP XL ac and wAP ac.
by erlinden
Tue Jan 16, 2024 6:29 pm
Forum: Beginner Basics
Topic: Best approach to VLAN
Replies: 1
Views: 594

Re: Best approach to VLAN

You are not the first with this question, hence my advice to search on the forum befor starting a post.
Here is a great tutorial on VLAN's:

viewtopic.php?t=143620
by erlinden
Tue Jan 16, 2024 1:25 pm
Forum: General
Topic: Connect 3 Ethernet devices with Wifi
Replies: 6
Views: 701

Re: Connect 3 Ethernet devices with Wifi

Assuming the Schneider devices have network interfaces and they are connected to different ethernet ports on the MikroTik: you should add all interfaces to the bridge, currently only ether1 is part of the bridge. Something like: /interface bridge port add bridge=bridge1 interface=wlan1 internal-path...
by erlinden
Tue Jan 16, 2024 8:51 am
Forum: Wireless Networking
Topic: Fast transition with 2 hap ac2 not working
Replies: 4
Views: 832

Re: Fast transition with 2 hap ac2 not working

/interface wifi configuration add channel=5-channel-ac country="United States" disabled=no mode=ap name=\ profile-wifi-5-ac security=security_profile \ security.authentication-types=wpa-psk,wpa2-psk .connect-priority=0 .ft=\ yes .ft-over-ds=yes ssid=darkstar-5.0GHz add channel=2-channel13...
by erlinden
Mon Jan 15, 2024 4:36 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1516

Re: CAPsMAN and VLANs [SOLVED]

If you share config of both CAPsMAN and CAP there is surely someone who can provide you feedback on why it is working.
by erlinden
Mon Jan 15, 2024 4:16 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13.2 [stable] is released!

I got the same message after the upgrade from 7.13.1 (netinstalled) to 7.13.2 on my hAP ac2.
I don't see anything in the release notes about this item...
by erlinden
Mon Jan 15, 2024 2:39 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1516

Re: CAPsMAN and VLANs [SOLVED]

For ac devices with qcom-ac package and RouterOS version 7.13.x you need to do some manual VLAN things on the CAP (besides the CAPsMAN): https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPVLANconfigurationexample: With this manual adjustment it will work just fine (and offcourse clients...
by erlinden
Mon Jan 15, 2024 10:50 am
Forum: RouterBOARD hardware
Topic: hap ac2 and migrate to hap ax2 - problem with wifi 5GHz coverage
Replies: 14
Views: 1680

Re: hap ac2 and migrate to hap ax2 - problem with wifi 5GHz coverage

I think ".antenna-gain=0" is incorrect, did you set that yourself?
How did you do the migration, by hand?
by erlinden
Sat Jan 13, 2024 11:38 am
Forum: General
Topic: Mikrotik Hex-S + TP-Link Deco m4 Access Point not working.
Replies: 7
Views: 711

Re: Mikrotik Hex-S + TP-Link Deco m4 Access Point not working.

Does a computer, connected to the hEX S, work?
Does the hEX S have a default config?
Is the "ISP" a modem/router?
by erlinden
Fri Jan 12, 2024 7:20 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1516

Re: CAPsMAN and VLANs [SOLVED]

What RouterOS version are you running? And what wireless driver? And which CAP are you using?
by erlinden
Fri Jan 12, 2024 5:43 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1516

Re: CAPsMAN and VLANs [SOLVED]

Sounds as if you did some form of configuration on the CAP itself, correct?
If so...not correct

Can you show you CAPsMAN part configuration?
by erlinden
Fri Jan 12, 2024 9:32 am
Forum: Beginner Basics
Topic: Simple queue on Wifi
Replies: 5
Views: 771

Re: Simple queue on Wifi

Perhaps you can share your config?
/export file=anynameyoulike
Remove serial and any other private info and post the output in between code tags by using the </> button.
by erlinden
Thu Jan 11, 2024 5:53 pm
Forum: General
Topic: VLAN Setup Please Help [SOLVED]
Replies: 5
Views: 727

Re: VLAN Setup Please Help [SOLVED]

Short answer: Firewall
Please read: viewtopic.php?t=143620 (and search for intervlan).
by erlinden
Thu Jan 11, 2024 9:45 am
Forum: Beginner Basics
Topic: DDoS help
Replies: 42
Views: 2626

Re: DDoS help

Please share your config:
/export file=anynameyoulike
Remove serial and any other private information from it and post the output in between code tags by using the </> button
by erlinden
Wed Jan 10, 2024 11:06 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

Set encryption to CCMP only and give it another try.
This is most definitely a software issue.
I would call it a user issue :lol:
by erlinden
Wed Jan 10, 2024 5:12 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 2033

Re: ros 7.13.* and zerotire and wireless pkg's [SOLVED]

You might want to consider using Wireguard (instead of Zerotier) as an alternative VPN solution. It is already available in the default package.

Are you using the cAP ac as router or is there anything in front (as router) of that can also do VPN?
by erlinden
Wed Jan 10, 2024 11:27 am
Forum: General
Topic: Ok TX-Drop EVERYWHERE
Replies: 3
Views: 738

Re: Ok TX-Drop EVERYWHERE

I was once told not to worry about the TX Drops, I will search this reply...
by erlinden
Tue Jan 09, 2024 10:37 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

Wireless package is for non wifi-qcom devices (like all ac and older using the wireless package). As you are using the cAP ax, you only need the 7.13.x routeros (on CAPsMAN and CAP) to get this up and running. Still don't know why there is a difference between hAP ax3 and cAP ax, I would expect them...
by erlinden
Tue Jan 09, 2024 9:59 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

I would remove your current configuration and start from here: #create a security profile /interface wifi security add authentication-types=wpa3-psk name=sec1 passphrase=HaveAg00dDay #create configuraiton profiles to use for provisioning /interface wifi configuration add country=Latvia name=5ghz sec...
by erlinden
Tue Jan 09, 2024 8:07 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4730

Re: cAP ax 5GHz not working in CAPsMAN

Befor doing a downgrade (which is probably not necessary), can you check why in your config there is encryption="" 4 times? Looks to me like a misconfiguration, at least you don't want this current setting. Absolutely ridiculous. Steep learning curve...don't give up yet. You can also reset...
by erlinden
Tue Jan 09, 2024 5:25 pm
Forum: Wireless Networking
Topic: is version 7.13 worth to install? (about WiFi)
Replies: 3
Views: 2019

Re: is version 7.13 worth to install? (about WiFi)

Instead of me typing it all, you better have a look at the documentation: https://help.mikrotik.com/docs/display/ROS/WiFi In a mixed environement you can do a mixed CAPsMAN (old and new), but I think it is not really beneficial for you from a wifi perspective (and in my opinion). But 7.13 does conta...
by erlinden
Tue Jan 09, 2024 12:47 pm
Forum: Wireless Networking
Topic: No available Channels on cAP but CAPsMAN is ignorant
Replies: 11
Views: 2618

Re: No available Channels on cAP but CAPsMAN is ignorant

Might be misconfiguration, can you share your config?
/export file=anynameyoulike
Remove serial and any other private info en share your output between code tags by using the </> button.

Most obvious would be setting a 2.4GHz frequency to a 5GHz radio (or vice versa).
by erlinden
Tue Jan 09, 2024 12:08 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13.1 [stable] is released!

I have country=Austria everywhere and /interface/wifi/actual-configuration/print confirms that.
That is the case at my site as well...
I assume it is incorrect information, though I still adhere to the ETSI standard.
by erlinden
Tue Jan 09, 2024 11:40 am
Forum: General
Topic: How remove wireless package in mikrotik rb750gr3 [SOLVED]
Replies: 10
Views: 2244

Re: How remove wireless package in mikrotik rb750gr3 [SOLVED]

You should know since you added it there (at least someone did) ... it doesn't appear on it's own on Hex. Actually it is added automatically, when installing 7.13.x. And indeed required for making the old CAPsMAN available. SO, unless running (old) CAPsMAN, it can be uninstalled: https://help.mikro...
by erlinden
Mon Jan 08, 2024 9:26 pm
Forum: Wireless Networking
Topic: is version 7.13 worth to install? (about WiFi)
Replies: 3
Views: 2019

Re: is version 7.13 worth to install? (about WiFi)

For me (in a home environment) it was a no brainer. And I am really enjoying, because of use of the wifi-qcom-ac driver (which does make FT available and working). If you only have ac ARM devices, you really should consider. MIPSBE is not supported, mixed environment is however supported. What kind ...
by erlinden
Mon Jan 08, 2024 1:53 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 4278

Re: port forwarding

where do i run this code
Terminal
and i think i did set them
think?
by erlinden
Mon Jan 08, 2024 1:01 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 4278

Re: port forwarding

Can you share this information:
/ip/firewall/nat export
I think your dst-address(-list) and to-address are missing in your screenshot, did you set them?
by erlinden
Mon Jan 08, 2024 10:06 am
Forum: Wireless Networking
Topic: hap AX2: client connects and disconnects continously
Replies: 16
Views: 3312

Re: hap AX2: client connects and disconnects continously

Can you pick just one frequency for the 5GHz radio and see if that helps?
What is the setting of Group Encryption? I selected CCMP.

Only difference I see in comparison to my config is that I set FT on the security tab (Winbox) instead of on the configuration part. But that doesn't make a difference.
by erlinden
Sun Jan 07, 2024 5:52 pm
Forum: Wireless Networking
Topic: hap AX2: client connects and disconnects continously
Replies: 16
Views: 3312

Re: hap AX2: client connects and disconnects continously

What about interference? Seems you are using the 2.4GHz band which might be subject to a lot of interference.
Can you share your config:
/export file=anynameyoulike
Remove serial and any other private information and post the about in between code tags by use of the </> button.
by erlinden
Sun Jan 07, 2024 5:48 pm
Forum: General
Topic: Problem with DHCP server on RB4011
Replies: 7
Views: 1698

Re: Problem with DHCP server on RB4011

Don't think that it is RB4011 related. Can you share your complete config? Have you turned on additional logging?
/export file=anynameyoulike
Remove serial and any other private information.
by erlinden
Sun Jan 07, 2024 1:13 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4533

Re: CAPsMAN on v7.13 configuration

I just was wondering why new CAPsMAN can't contain the mature and useful features of old version. It seemed to defy logic. From a functional perspective I fully agree...but from a software development perspective totally not. It has to do with the newly introduced wifi-qcom-ac driver. Which is diff...
by erlinden
Sat Jan 06, 2024 10:58 am
Forum: Wireless Networking
Topic: hAP ax3 wireless problem [SOLVED]
Replies: 103
Views: 12863

Re: hAP ax3 wireless problem [SOLVED]

Based on your config: Set the 2.4GHz radio bandwidth to 20MHz (and the 5GHz radio to 40MHz). Not related to the problem: you might want to increase your DHCP lease time, 10 min. is very low. Were the external antennas of the hAP ax3 attached before taking it into use? Think the radio could get defec...
by erlinden
Fri Jan 05, 2024 11:54 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Weird thing is, after manual reboot they seem to be fine for ~24h and then they start rebooting again. And won't stop, until I reboot them via WinBox. Only thing I notce is this: security.authentication-types="" .encryption="" Not sure if that is correct. Have you tried resettin...
by erlinden
Fri Jan 05, 2024 11:47 pm
Forum: General
Topic: How to separate or prioritize torrent traffic
Replies: 1
Views: 996

Re: How to separate or prioritize torrent traffic

I think this can be accomplished by using queues:

https://help.mikrotik.com/docs/display/ROS/Queues
by erlinden
Fri Jan 05, 2024 3:33 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Not sure what triggered it, there were no config changes whatsoever. There were "other" changes. Any clues in the logging? Though I might not be representive, I know the hAP ax2 can be rocksolid (I have one running at my parents house). Have you already shared your config? Anything "...
by erlinden
Fri Jan 05, 2024 10:39 am
Forum: Wireless Networking
Topic: hAP ax3 wireless problem [SOLVED]
Replies: 103
Views: 12863

Re: hAP ax3 wireless problem [SOLVED]

Can you please share your config?
/export file=anynameyoulike
Remove serial and any other private information, and post between code tags by using the </> button.

Where is the router located, do you have line of sight?
by erlinden
Thu Jan 04, 2024 10:46 pm
Forum: Beginner Basics
Topic: Help RB3011
Replies: 2
Views: 1076

Re: Help RB3011

Documentation is a good starting point:
https://help.mikrotik.com/docs/display/ ... +Balancing
by erlinden
Thu Jan 04, 2024 5:49 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 19695

Re: 7.13 wireless package split question

If they are on the same network, the CAP's should be able to find the CAPsMAN. Have you seen this part: https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPsimpleconfigurationexample: It requires an edit on the default CAPs mode. Or as an alternative, share the config of both CAPsMAN and...
by erlinden
Thu Jan 04, 2024 12:27 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 19695

Re: 7.13 wireless package split question

The page shows that "New Capsman only controller" needs "routeros" only, while the video "https://www.youtube.com/watch?v=AkBIQxi-VKs" shows that "Package since 7.13" for "CAPsMAN for up to WiFi5 APs" is "routeos+wireless". Which one is co...
by erlinden
Wed Jan 03, 2024 6:37 pm
Forum: Wireless Networking
Topic: 2.4 GHz Network disappears
Replies: 1
Views: 1069

Re: 2.4 GHz Network disappears

The config has the answer (probably):
/export file=anynameyoulike
Remove serial and any other private information and place in between code tags by using the </> button.
by erlinden
Wed Jan 03, 2024 2:06 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Hey MikroTik, is it worth sending autosupout to support?..
Always a good idea!

What device are you using and how is it configured?
And for how long was it up?
by erlinden
Wed Jan 03, 2024 9:35 am
Forum: RouterBOARD hardware
Topic: Mikrotik device mesh
Replies: 5
Views: 1641

Re: Mikrotik device mesh

Then CAPsMAN is indeed a great way to accomplish a "mesh" network.
You can read more: https://help.mikrotik.com/docs/display/ ... ionexample:
by erlinden
Tue Jan 02, 2024 10:22 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4533

Re: CAPsMAN on v7.13 configuration

VLANS on datapath worked OK on ROS6, but now on ROS7.13 is this such a basic setting which does not exist... why they release such a beta release to users ? Who now have time to mess with "hack" as you call to configure manually VLAN filtering on every CAP device. Datapath works on any ve...
by erlinden
Tue Jan 02, 2024 9:21 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Definitely needs more development.
This is only necessary for AC devices, if new devices are AX it won't be a problem.
But I agree AND have trust this will be available in the future.
by erlinden
Tue Jan 02, 2024 9:18 pm
Forum: RouterBOARD hardware
Topic: Mikrotik device mesh
Replies: 5
Views: 1641

Re: Mikrotik device mesh

Will you use a cable in between, or are you referring to mesh in the wireless backhaul definition? When using a wireless backhaul, you will loose performance when not having a dedicated radio for this. If you use cable, it is sufficient to have identical SSID and security settings to create a single...
by erlinden
Tue Jan 02, 2024 9:06 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4533

Re: CAPsMAN on v7.13 configuration

When using VLAN's, you can't use datapath (yet) on AC devices. Hopefully this will be resolved in newer versions of RouterOS, up till then you can use this "hack": https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPVLANconfigurationexample: The "hack" is using VLAN f...
by erlinden
Tue Jan 02, 2024 4:02 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1547

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

Thanks for the info. But, is my config incorrect then? Would this be a possible cause for the issues I described?
Probably not...still a bit overwhelmed by the config. Can you describe what you would like to achieve with this device?
by erlinden
Tue Jan 02, 2024 3:16 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1547

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

When using VLAN, everyone should read this great topic:
viewtopic.php?t=143620

To summarize:
Use a single bridge
Do VLAN filtering on the bridge
Do VLAN all the way (any network should be a VLAN)
by erlinden
Tue Jan 02, 2024 2:13 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1547

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

show-sensitive are you sure?
That helps importing the (near) complete config after performing a netinstall.
by erlinden
Tue Jan 02, 2024 12:39 pm
Forum: Wireless Networking
Topic: Provision AP's in sequence
Replies: 11
Views: 1573

Re: Provision AP's in sequence

As far as I know there is no out-of-the-box solution for this. You can either set channels manually (which would require a provision rule per radio) or you can use a scheduled script that turns off and on the radio (which will cause a scan for best channel). The latter is used by someone here on the...
by erlinden
Tue Jan 02, 2024 9:51 am
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1547

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

Two things you can do (I would do): Do a complete export: /export show-sensitive file=anynameyoulike netinstall the device: https://help.mikrotik.com/docs/display/ROS/Netinstall You can share your config here as well (make sure to remove serial and any other private info). Are you running any "...
by erlinden
Mon Jan 01, 2024 1:11 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Well, the first step is already done by posting this problem :-) Are the hAP ax2's also upgraded? Would it be possible to set it up from scratch? What version where you running? The qcom package is only required for devices that have wireless interfaces, no need to install it on the RB5009. Can you ...
by erlinden
Sun Dec 31, 2023 12:10 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Only CAPsMAN needs a manual trick to make it work. Not sure if you are using that, or if it is just a single hAP ac with VLAN? In case of the latter, just do VLAN filtering on the bridge (which is very well supported with the new driver). VLAN filtering: https://forum.mikrotik.com/viewtopic.php?t=14...
by erlinden
Sat Dec 30, 2023 6:31 pm
Forum: General
Topic: Upgrade from hAP ac2 to hAP ax3 AirPrint not Working
Replies: 2
Views: 830

Re: Upgrade from hAP ac2 to hAP ax3 AirPrint not Working

Though probably not the solution, I do notice some things: Why did you add the Guest wifi (as it is part of the same bridge as the home network)? Aah, you added a bridge filter... Why is the DHCP lease time set to 10 min? You probably want to change it to a couple of hours. Are you using detect-inte...
by erlinden
Sat Dec 30, 2023 12:30 pm
Forum: Beginner Basics
Topic: CAP AC: Stripping MAC Addresses impacting DHCP
Replies: 12
Views: 2116

Re: CAP AC: DHCP assigned DNS

Your cAP ac is indeed configured as a router (instead of a home ap). I think the easiest way to get you to the preferred solution you: Reset to defaults From Quickset select homeap dual Select WPA2 and preferred pre shared key For reference: https://wiki.mikrotik.com/wiki/Manual:Reset https://wiki.m...
by erlinden
Sat Dec 30, 2023 12:21 pm
Forum: Beginner Basics
Topic: hap ax^2 config
Replies: 24
Views: 2063

Re: hap ax^2 config

For my hap ac^2 router should I install wifi-qcom or wifi-qcom-ac package in order to have CAPsMAN with seamless migration ?
The naming convention might have hinted on this: wifi-qcom-ac for ac devices.
by erlinden
Sat Dec 30, 2023 12:20 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 19695

Re: 7.13 wireless package split question

It's a pity for all of us who bought this model as "powerful enough to be future-proof for at least a few years" and now it's declared obsolete :(
The device isn't obsolete, 2.4GHz Wifi is obsolete.
by erlinden
Fri Dec 29, 2023 10:16 pm
Forum: Beginner Basics
Topic: CAP AC: Stripping MAC Addresses impacting DHCP
Replies: 12
Views: 2116

Re: CAP AC: DHCP assigned DNS

Could it be that the cAP ac is configured as router and not as accesspoint?
An export of it would be very helpful:
/export file=anynameyoulike
Remove serial and any other private info, and place the information between code tags by use of the </>-button
by erlinden
Fri Dec 29, 2023 9:18 pm
Forum: Beginner Basics
Topic: hap ax^2 config
Replies: 24
Views: 2063

Re: hap ax^2 config

Having wifi-qcom installed, I do not see the CAPsMAN option anywhere
If only there was some sort of help page... :D
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
by erlinden
Thu Dec 28, 2023 11:43 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

I first tried to understand it from reading, then to input it into actual routers to check if it might "just work", then to adapt it (fix VLAN membership for example), but nothing could make it working as it should. Too bad...it's working like a charm for me. Can share my config if you wa...
by erlinden
Thu Dec 28, 2023 5:26 pm
Forum: Wireless Networking
Topic: CAP XL AC cannot exceed 350mb speed at 5Ghz
Replies: 11
Views: 1995

Re: CAP XL AC cannot exceed 350mb speed at 5Ghz

Although the CAP XL AC broadcasts 2.4 and 5Ghz signals neither 2.4GHz LED nor 5GHz LED blinking. They are solid off in wifi-qcom-ac driver
Can confirm, mine are not working as well.
by erlinden
Thu Dec 28, 2023 3:20 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Have you seen the VLAN configuration example part of the URL you provided:
https://help.mikrotik.com/docs/display/ ... ionexample:

Think you should be able to get it to work by following that tutorial.
by erlinden
Thu Dec 28, 2023 1:28 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

My cap ac xl WiFi leds doesn’t flashing anymore after installing 7.13 and WiFi-qcom-ac driver. Is this a bug or am I have to make setting about it. Capsman running on rb4011
Mine is arriving this afternoon, I will let you know.
by erlinden
Wed Dec 27, 2023 9:37 pm
Forum: RouterBOARD hardware
Topic: Hap ac2 dead with 7.13
Replies: 23
Views: 5644

Re: Hap ac2 dead with 7.13

absence of thorough testing by MT.....
What brings you this conclusion?
by erlinden
Wed Dec 27, 2023 9:35 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

Possible bug. Mikrotik android pro app do not show firewall filter roules on 7.13.
Works on my phone, what Android version are you running?
by erlinden
Wed Dec 27, 2023 6:28 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+ no power on PoE port 10
Replies: 3
Views: 1087

Re: RB4011iGS+ no power on PoE port 10

Does the Yealink W70B support 24V on PoE?
You might need to exchange the default power supply with an 48V version.
by erlinden
Wed Dec 27, 2023 12:38 pm
Forum: General
Topic: I Tink i got hacked
Replies: 16
Views: 1594

Re: I Tink i got hacked

Sounds like you know what happened...were you hacked or not? If this situation is caused by a known user (like yourself), you might want to resolve it. If it's not, you really really should use netinstall.
by erlinden
Wed Dec 27, 2023 12:36 pm
Forum: Beginner Basics
Topic: connect to winbox through vpn [SOLVED]
Replies: 10
Views: 1427

Re: connect to winbox through vpn [SOLVED]

Is the rule you wrote above allowing winbox connection only when connected to vpn? I don't want to allow connections to mikrotik when not connected to vpn. This is an example rule that except WAN will have access to winbox. consider specifying your winbox port if it is other than 8291 Can you expli...
by erlinden
Tue Dec 26, 2023 3:09 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 257389

Re: v7.13 [stable] is released!

In any case a regular user wants the wifi to be upgraded to the newest version (new drivers etc) without reconfigure all from scratch. is it the case here?
Though you have to start all over, you could consider CAPsMAN (assunming all 4 Tiks are part of the same network).
by erlinden
Tue Dec 26, 2023 3:06 pm
Forum: General
Topic: V7.13 cAPGi-5HaxD2HaxD
Replies: 3
Views: 570

Re: V7.13 cAPGi-5HaxD2HaxD

Isn't that the defaiult password that can be found on the sticker on the bottom of the accesspoint?

viewtopic.php?t=202544
by erlinden
Sun Dec 24, 2023 11:51 pm
Forum: Beginner Basics
Topic: HP AX2 as cap, clients dont receive IP
Replies: 1
Views: 604

Re: HP AX2 as cap, clients dont receive IP

When using VLAN's a single bridge is sufficient (and preferred). The best topic is here, please read carefully: https://forum.mikrotik.com/viewtopic.php?t=143620 When using CAPsMAN, follow this guide: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149 or watch this YouTube video: ht...
by erlinden
Sun Dec 24, 2023 9:15 pm
Forum: Beginner Basics
Topic: Am I safe with this firewall config? (I'm fairly new)
Replies: 17
Views: 1670

Re: Am I safe with this firewall config? (I'm fairly new)

So I have to put an
add action=drop chain=input
at the end?
Both on input and on forward chain. And indeed, last in line. Also order by input rules, than forward rules to make it morstreadable.
by erlinden
Sun Dec 24, 2023 7:38 pm
Forum: Beginner Basics
Topic: Am I safe with this firewall config? (I'm fairly new)
Replies: 17
Views: 1670

Re: Am I safe with this firewall config? (I'm fairly new)

I really like/prefer to end the chains with a drop all rule.
by erlinden
Sun Dec 24, 2023 6:53 pm
Forum: Beginner Basics
Topic: Wireguard
Replies: 8
Views: 1978

Re: Wireguard

What is your local IP address of the Windows Client that connects to Wireguard. It has to be different from 192.168.0.0/24 address.
by erlinden
Sun Dec 24, 2023 4:21 pm
Forum: Beginner Basics
Topic: RB750Gr3: Slow internet connection - do I need another router
Replies: 3
Views: 795

Re: RB750Gr3: Slow internet connection - do I need another router

From the config I would remove: /interface list member add interface=wan-na-vlan10 list=WAN add interface=ether1 list=WAN The pppoe is the only interface that has to be on the WAN addresslist. Are you using HW offload on the bridge? /interface/bridge/port print What is the CPU usage while performing...
by erlinden
Sun Dec 24, 2023 10:59 am
Forum: Beginner Basics
Topic: Wireguard
Replies: 8
Views: 1978

Re: Wireguard

Does it work if you try locally?
Any reason why there are no firewall rules? Probably because the MikroTik is behind NAT!?

Think it has to do with (one of) the mangle rules, but I'm no expert on that. Is the Wireguard service available through both ISP's?
by erlinden
Sun Dec 24, 2023 10:46 am
Forum: Beginner Basics
Topic: No internet on 2 out of 3 VLANs [SOLVED]
Replies: 7
Views: 983

Re: No internet on 2 out of 3 VLANs [SOLVED]

With the above reply, also: /interface list member add interface=ether1 list=WAN add interface=MGMT_200 list=MGMT add interface=HOME_201 list=HOME add interface=GUEST_222 list=GUEST add interface=MGMT_200 list=VLAN add interface=HOME_201 list=VLAN add interface=GUEST_222 list=VLAN You might want to ...
by erlinden
Sat Dec 23, 2023 5:55 pm
Forum: RouterBOARD hardware
Topic: POE not working on 2 Hex POE routers
Replies: 21
Views: 2577

Re: POE not working on 2 Hex POE routers

Besides the accesspoint power supply (which is 12V) there is also an option to power through POE. The latter (possibly) has to be 48V, while the default power supply of the hEX PoE is providing 24V. In that case there is a mismatch and you have to change the power supply of the hEX PoE with the 48V ...
by erlinden
Sat Dec 23, 2023 1:51 pm
Forum: General
Topic: Problem with DHCP server on RB4011
Replies: 7
Views: 1698

Re: Problem with DHCP server on RB4011

Comparing to my settings:

A leasetime of 10 minutes is very low, I increased it to 4hr.
I left netmask empty (it is already set in the address)

Perhaps with the above changes it will work better?
Otherwise you can set on debug logging on DHCP.
by erlinden
Sat Dec 23, 2023 1:38 pm
Forum: General
Topic: I can not remove wideguard peer
Replies: 2
Views: 530

Re: I can not remove wideguard peer

Can you add the following information:

What RouterOS v7.x version are you on?
How exactely do you attempt to delete?
What connection are you using (Winbox/Web/SSH/Terminal/etc.)?
by erlinden
Fri Dec 22, 2023 10:22 am
Forum: General
Topic: TX in WAN to high
Replies: 5
Views: 771

Re: TX in WAN to high

Might be worth sharing your config:
/export file=anynameyoulike
Make sure to remove serial and any other private information and place the output in between code tags by using the </> button.
by erlinden
Thu Dec 21, 2023 2:20 pm
Forum: General
Topic: wireguard problem
Replies: 15
Views: 2043

Re: wireguard problem

You took into account the order of the rules?
by erlinden
Thu Dec 21, 2023 11:54 am
Forum: Beginner Basics
Topic: connected, no internet [SOLVED]
Replies: 5
Views: 1093

Re: connected, no internet [SOLVED]

Did you add the pppoe interface to the "WAN" addresslist or set it as out interface in the NAT masquerade rule?
by erlinden
Thu Dec 21, 2023 11:43 am
Forum: General
Topic: Update rb751u version 5.16
Replies: 3
Views: 531

Re: Update rb751u version 5.16

Mmm...5.16, that is 2012 I think.
Have you tried using netinstall?

https://help.mikrotik.com/docs/display/ROS/Netinstall
  • 1
  • 2
  • 3
  • 4
  • 5
  • 7