Community discussions

MikroTik App

Search found 1994 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 7
by erlinden
Mon Mar 18, 2024 3:52 pm
Forum: General
Topic: Wireguard from MT to client (win10) with several users to several VLAN's [SOLVED]
Replies: 6
Views: 351

Re: Wireguard from MT to client (win10) with several users to several VLAN's [SOLVED]

Instead of using the DDNS address, you can just use the peers IP address.
Can you make an overview (diagram) of all devices involved?
by erlinden
Sun Mar 17, 2024 1:41 pm
Forum: Wireless Networking
Topic: Can hap ax2/3 and/or cap ax operate in 5ghz-ac mode (wifi-5) [SOLVED]
Replies: 5
Views: 573

Re: Can hap ax2/3 and/or cap ax operate in 5ghz-ac mode (wifi-5) [SOLVED]

Why?
Does it have to be fixed, the standard is backward compatible and will be used by older devices.

Band has to do with radio frequency.
by erlinden
Fri Mar 15, 2024 4:37 pm
Forum: Wireless Networking
Topic: hap ax3 other antennas
Replies: 8
Views: 460

Re: hap ax3 other antennas

You should specify the antenna gain to comply with regulations. But to be honest, I wouldn't be to worried about the default antennas...unless you have some sort of problem?
by erlinden
Fri Mar 15, 2024 4:33 pm
Forum: Scripting
Topic: Router maybe is hacked. Please help
Replies: 7
Views: 357

Re: Router maybe is hacked. Please help

In /ip/firewall/connections you can see all connections, just filter on Dst. Address 192.168.88.100 to get the list of Src. Addresses. Still unclear what makes you think your router is part of the hack. Especially because the only log you provide is from the XAMPP server. Can you provide your router...
by erlinden
Fri Mar 15, 2024 9:46 am
Forum: General
Topic: Anyone tested the new L009?
Replies: 16
Views: 4107

Re: Anyone tested the new L009?

L009 is only nice looking switch. CPU is garbitch.
Garbitch?
:lol:
Do you mean garbage!?
by erlinden
Thu Mar 14, 2024 1:29 pm
Forum: The Dude
Topic: Dude images for RB5009 and CAP AX
Replies: 1
Views: 202

Re: Dude images for RB5009 and CAP AX

Image?
Like https://images.google.com/ ?

Maybe this question is already answered:
viewtopic.php?t=158281
by erlinden
Thu Mar 14, 2024 1:26 pm
Forum: Wireless Networking
Topic: Client was disconnected because could not assign vlan
Replies: 5
Views: 317

Re: Client was disconnected because could not assign vlan

I would expect three datapaths on CAPsMAN, @sinisa (assuming there are two VLAN's involved). On for ac devices and two for ax devices. And you have to do manual VLAN filtering on ac devices (using the wifi-qcom-ac driver), as it doesn't support this through the current driver. The ax devices do supp...
by erlinden
Thu Mar 14, 2024 10:24 am
Forum: Wireless Networking
Topic: Client was disconnected because could not assign vlan
Replies: 5
Views: 317

Re: Client was disconnected because could not assign vlan

When seeing things like this on a cap, I get goosebumps: /ip upnp set enabled=yes I would advise to reset the cap into CAPsMode (see this topic how to: https://forum.mikrotik.com/viewtopic.php?t=148207) and start from there. Next, follow this guide to the letter (as you have done in your config): ht...
by erlinden
Wed Mar 13, 2024 6:01 pm
Forum: Wireless Networking
Topic: CAPsMAN forwarding mode
Replies: 4
Views: 471

Re: CAPsMAN forwarding mode

I would (and have :D) choose VLAN.
Especially because my IoT devices are not allowed to access Internet (which is a single line in the firewall).
by erlinden
Tue Mar 12, 2024 9:36 pm
Forum: General
Topic: NAT port forwarding does not work
Replies: 19
Views: 742

Re: NAT port forwarding does not work

Is the firewall rule hit?
How are you testing?
by erlinden
Tue Mar 12, 2024 6:20 pm
Forum: General
Topic: NAT port forwarding does not work
Replies: 19
Views: 742

Re: NAT port forwarding does not work

Think on your dst-nat rule you are missing:
in-interface-list=WAN
Besides:
Are you indeed having 2 internet connections?
Why do you have all these IPv6 lines while you are not running IPv6?
by erlinden
Tue Mar 12, 2024 12:44 pm
Forum: Wireless Networking
Topic: Outdoor antenna 5G
Replies: 1
Views: 168

Re: Outdoor antenna 5G

If you have questions about availablilty, you better contact your distributor.
by erlinden
Tue Mar 12, 2024 12:43 pm
Forum: Announcements
Topic: v7.14.1 [stable] is released!
Replies: 419
Views: 69238

Re: v7.14.1 [stable] is released!

If you're all so annoyed by this, just set up your logging correctly. Perhaps my question wasn't clear: what is Wireguard "giving up" after 20 attempts? Besides...my complete wireguard logging: 10:29:18 wireguard,info WG-Interface: [public key]: Handshake for peer did not complete after 5...
by erlinden
Tue Mar 12, 2024 11:53 am
Forum: Announcements
Topic: v7.14.1 [stable] is released!
Replies: 419
Views: 69238

Re: v7.14.1 [stable] is released!

WireGuard fix solves an issue where RouterOS was trying to connect to peers which have not been used yet and there is no known endpoint-address. I'm running into the situation that after enabling and disabling RoadWarrior on a client device (where endpoint is not set on the router), the router is s...
by erlinden
Mon Mar 11, 2024 1:18 pm
Forum: Announcements
Topic: v7.14.1 [stable] is released!
Replies: 419
Views: 69238

Re: v7.14.1 [stable] is released!

Probably because there is no changelog on the provided URL, @diamuxin. Also from the browser it results in a 404.
by erlinden
Mon Mar 11, 2024 1:08 pm
Forum: RouterBOARD hardware
Topic: hAP ac2 not working after 7.14 update.
Replies: 14
Views: 1334

Re: hAP ac2 not working after 7.14 update.

The wiki is the v6.x documentation, you better have a look at "help" which is the v7.x equivalent: https://help.mikrotik.com/docs/display/ROS/Netinstall What do you exactly mean by backup? Because a backup can only be restored to the same RouterOS version and device as far as I know. Have ...
by erlinden
Fri Mar 08, 2024 12:23 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1587

Re: CAP AX - CAPSMAN- no DHCP lease [SOLVED]

For ax devices it is sufficient to set the device to CAP (reset with CAPs Mode). No manual settings on the CAP have to be done, unless you want "something" done with VLAN on the ethernet interfaces. The wireless interfaces can be completely managed by CAPsMAN, including VLAN.
by erlinden
Thu Mar 07, 2024 10:26 am
Forum: General
Topic: SFP+ Port Flapping (RB5009 + CRS328-24P-4S+RM)
Replies: 3
Views: 662

Re: SFP+ Port Flapping (RB5009 + CRS328-24P-4S+RM)

Don't know if this provides more info: can you activate debug logging?
Have you tried swapping power supply?
by erlinden
Thu Mar 07, 2024 9:36 am
Forum: Scripting
Topic: How do I protect source code from being pirated?
Replies: 29
Views: 1198

Re: How do I protect source code from being pirated?

Put it in a (remote) repository.
by erlinden
Wed Mar 06, 2024 9:31 pm
Forum: General
Topic: Access Mikrotik router without wifi and ethernet [SOLVED]
Replies: 3
Views: 366

Re: Access Mikrotik router without wifi and ethernet [SOLVED]

Is it accessible through VPN?
by erlinden
Wed Mar 06, 2024 10:38 am
Forum: Wireless Networking
Topic: CAPsMAN <> cAP config and behaviour is baffling me - managed, yet unmanaged...
Replies: 15
Views: 869

Re: CAPsMAN <> cAP config and behaviour is baffling me - managed, yet unmanaged...

Your wireless interfaces on the CAP aren't part of the bridge, hence it can't be controlled.

Please read this carefully:
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
by erlinden
Tue Mar 05, 2024 8:17 am
Forum: Beginner Basics
Topic: Queue in AP without DHCP server (DHCP server in AP)
Replies: 3
Views: 213

Re: Queue in AP without DHCP server (DHCP server in AP)

Does the switch support VLAN? In that case you can create a "WLAN VLAN" and set a queue on that.
by erlinden
Mon Mar 04, 2024 9:30 pm
Forum: Beginner Basics
Topic: DHCP conflict
Replies: 3
Views: 497

Re: DHCP conflict

Would need to see the config:
/export hide-sensitive file=anynameyoulike
Remove serial and any other private info en post in between code tags by using the </> button.

IP reservations should not be part of the DHCP scope.
by erlinden
Mon Mar 04, 2024 5:43 pm
Forum: General
Topic: Require help/advice with Bridge and VLAN's [SOLVED]
Replies: 10
Views: 825

Re: Require help/advice with Bridge and VLAN's [SOLVED]

/interface bridge
add name=bridge-all pvid=100 vlan-filtering=no
Should be:
/interface bridge
add name=bridge-all vlan-filtering=yes
Frame-types should be set on the /interface/bridge/port
by erlinden
Mon Mar 04, 2024 4:37 pm
Forum: General
Topic: Require help/advice with Bridge and VLAN's [SOLVED]
Replies: 10
Views: 825

Re: Require help/advice with Bridge and VLAN's [SOLVED]

It would help if you share the config: /export file=anynameyoulike Remove serial and any other private info and post in between code tags by using the </> button. In regards to information: https://forum.mikrotik.com/viewtopic.php?t=143620 (the reference for setting up VLAN on MikroTik) https://help...
by erlinden
Mon Mar 04, 2024 10:39 am
Forum: General
Topic: Ethernet ports on a CAP
Replies: 3
Views: 214

Re: Ethernet ports on a CAP

By default (when resetting a device and setting it into CAPS mode) all interfaces are added on the bridge.
Therefor the interfaces are actually in a switch.

CAPsMAN only manages the wireless interfaces.
by erlinden
Sat Mar 02, 2024 9:09 am
Forum: Announcements
Topic: v7.14.1 [stable] is released!
Replies: 419
Views: 69238

Re: v7.14 [stable] is released!

What is going on?? In my experience it all comes down (or goes up) with good configuration. Had to do some tweaking, enabling debug logging for wireless did provide a lot of useful information (specifically identifying the iPhone 11 having difficulties with both WPA2-PSK and WPA3-PSK enabled). If y...
by erlinden
Fri Mar 01, 2024 1:12 pm
Forum: Wireless Networking
Topic: 7.14 Wireless default-forward
Replies: 1
Views: 268

Re: 7.14 Wireless default-forward

Not sure if isolation has the same function, on the datapath you can set client-isolation on or off.
https://help.mikrotik.com/docs/display/ ... properties
by erlinden
Wed Feb 28, 2024 9:37 am
Forum: Wireless Networking
Topic: Trunking Cube Pro [SOLVED]
Replies: 5
Views: 541

Re: Trunking Cube Pro [SOLVED]

Use this absolutely great post and see all connections as trunk ports:

viewtopic.php?t=143620
by erlinden
Wed Feb 28, 2024 8:44 am
Forum: General
Topic: RB 4011 ports 1-5 occasionally fail after upgrade to 7.
Replies: 8
Views: 1801

Re: RB 4011 ports 1-5 occasionally fail after upgrade to 7.

Would be good to have a look at your config:
/export file=anynameyoulike
Going from 6.x to 7.x is a big step. You might want to consider doing netinstall en config manually (or from an export) after.
by erlinden
Tue Feb 27, 2024 11:26 am
Forum: Beginner Basics
Topic: Help routing 1 internal IP address to a different dns server
Replies: 10
Views: 510

Re: Help routing 1 internal IP address to a different dns server

You might be able to route all DNS requests of this device to your specific DNS server: add action=dst-nat chain=dstnat dst-port=53 src-address=[Device IP] protocol=udp to-addresses=[DNS IP] to-ports=53 add action=dst-nat chain=dstnat dst-port=53 src-address=[Device IP] protocol=tcp to-addresses=[DN...
by erlinden
Tue Feb 27, 2024 10:59 am
Forum: General
Topic: Bandwidth Limit on WAN Interface
Replies: 2
Views: 391

Re: Bandwidth Limit on WAN Interface

Please can you explain a bit more? Why do you want to limit the WAN interface? Like having Gigabit internet speed, but limiting it to 100Mbps? If you want to limit, you can use queues (as you already mentioned). Are simple queues not sufficient? https://help.mikrotik.com/docs/display/ROS/Queues#Queu...
by erlinden
Tue Feb 27, 2024 9:29 am
Forum: General
Topic: Firewall doesn't work
Replies: 5
Views: 381

Re: Firewall doesn't work

Bit hard to tell, you might want to add some relevant information:

Can you post a network diagram, including clients?
Can you share your MikroTik configs:
/export file=anynameyoulike
Remove serial and any other private information and post between code tags by using the </> button.
by erlinden
Tue Feb 27, 2024 9:26 am
Forum: Wireless Networking
Topic: RB952Ui-5ac2nD Capsman
Replies: 18
Views: 869

Re: RB952Ui-5ac2nD Capsman

You are missing the fact that ax (as well as wifi-qcom-ac) devices are managed by the new CAPsMAN, that is located on the WiFi menu item. So you are currently not running the new CAPsMAN: /interface/wifi/capsman Here you can find all required information: https://help.mikrotik.com/docs/display/ROS/W...
by erlinden
Sun Feb 25, 2024 7:45 pm
Forum: Beginner Basics
Topic: CRS125-24G-1S - Internet Link
Replies: 9
Views: 712

Re: CRS125-24G-1S - Internet Link

Within the first 5 min of the being online, the device was flooded with "invalid login" attempts across a variety of standard usernames (admin, telecoadmin, root, etc.) This indicates that your logging is working! Is it logged by the default block rule in the input chain, or did you by ch...
by erlinden
Sun Feb 25, 2024 7:39 pm
Forum: Beginner Basics
Topic: RB2011UiAS-2HnD-IN RouterOS v 7.13.4 2nd switch unresponsive
Replies: 3
Views: 413

Re: RB2011UiAS-2HnD-IN RouterOS v 7.13.4 2nd switch unresponsive

Can you share the "real" config?
/export file=anynameyoulike
Remove serial and any other private information and post it between code tags by using the </> button.
by erlinden
Sun Feb 25, 2024 10:34 am
Forum: Announcements
Topic: SwOS version 2.16 released!
Replies: 44
Views: 21713

Re: SwOS version 2.16 released!

After doing this, the update succeeded. Afterwards I disabled RTSP again.
Why do you have RSTP disabled?
by erlinden
Sun Feb 25, 2024 10:19 am
Forum: Beginner Basics
Topic: Cloud Access need help
Replies: 7
Views: 472

Re: Cloud Access need help

Thank you for the advice Erlinder
You are welcome! And please read the link I posted about Wireguard. Then you won't have to do anything (a bit more) complicated (like Zerotier).
by erlinden
Sat Feb 24, 2024 11:31 pm
Forum: RouterBOARD hardware
Topic: Intermittent 4OGbit Link on CRS326-24S+2Q+
Replies: 3
Views: 529

Re: Intermittent 4OGbit Link on CRS326-24S+2Q+

Swos is very obsolete in my opinion, never got any updates.
You missed this?
viewtopic.php?t=204932
by erlinden
Sat Feb 24, 2024 1:33 pm
Forum: Beginner Basics
Topic: Cloud Access need help
Replies: 7
Views: 472

Re: Cloud Access need help

Do you have a public (and non CGNAT) IP address? Are you testing from the internal network? Then you might need NAT loopback: https://help.mikrotik.com/docs/display/ROS/NAT#NAT-HairpinNAT My advise: configure Wireguard and use that to administrate the router: https://help.mikrotik.com/docs/display/R...
by erlinden
Fri Feb 23, 2024 3:55 pm
Forum: Wireless Networking
Topic: DFS and radar channels
Replies: 10
Views: 797

Re: DFS and radar channels

You did not set the second frequency correctly
There are more ways to assign frequencies:
Examples of valid channel.frequency values:

2412
2412,2432,2472
5180-5240:20,5500-5580:20
https://help.mikrotik.com/docs/display/ ... properties
by erlinden
Fri Feb 23, 2024 3:32 pm
Forum: General
Topic: Switching to new router and wanted to cleanup the firewall mess
Replies: 8
Views: 675

Re: Switching to new router and wanted to cleanup the firewall mess

From a deny-everything-allow-something, you can remove all drop rules (in the end) except for the last rule (drop everything). This will give the same result, just will have a higher kiss-rate. With that, you can remove all port-scanners rules as well, as they are no longer used. That would bring it...
by erlinden
Fri Feb 23, 2024 11:54 am
Forum: Wireless Networking
Topic: CAPsMAN hAP AX2 Drops
Replies: 9
Views: 736

Re: CAPsMAN hAP AX2 Drops

I ran into problems with one client that wasn't able to roam (and some more strange behavour) caused by having both WPA2-PSK and WPA3-PSK.
You might want to give WPA2-PSK only a try.
by erlinden
Thu Feb 22, 2024 2:26 pm
Forum: Beginner Basics
Topic: CAPsMAN, DHCP Server, Wireless to wifi-qcom-ac, etc.
Replies: 11
Views: 1518

Re: CAPsMAN, DHCP Server, Wireless to wifi-qcom-ac, etc.

Where is CAPSMAN config on wifi-qcom-ac? In client, there is cap but without interface
CAPsMAN is configured through the WiFi menu on the Remote CAP tab, CAPsMAN button (or /interface/wifi/capsman). It is available since 7.13.x and has nothing to do with the additional package/driver.
by erlinden
Thu Feb 22, 2024 1:39 pm
Forum: Wireless Networking
Topic: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer
Replies: 21
Views: 5409

Re: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer

Activate wireless & debug, that might give sme insights. Turned out my iPhone 11 had difficulties with combined WPA2-PSK and WPA3-PSK. Turned off WPA3-PSK, after that I didn't run into problems anymore. The problem I ran into, was that this phone couldn't roam. Turned out (from the logging) that...
by erlinden
Thu Feb 22, 2024 9:48 am
Forum: Beginner Basics
Topic: RB951Ui-2HnD
Replies: 6
Views: 493

Re: RB951Ui-2HnD

In /ip/firewall/connections you can see all connected IP addresses.
by erlinden
Wed Feb 21, 2024 6:04 pm
Forum: Wireless Networking
Topic: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer
Replies: 21
Views: 5409

Re: Apple 12" MacBook (2017) to hAP ax2 via 2GHz and 5GHz drops during large data transfer

Do you have different SSID's, @strelokr?
Can you by chance share your config?
/export file=anynameyoulike
Remove serial and any other private info and post between code tags by using the </> button.
by erlinden
Wed Feb 21, 2024 1:38 pm
Forum: Beginner Basics
Topic: VLANs and firewall
Replies: 5
Views: 399

Re: VLANs and firewall

You do have to explicitely block inter VLAN traffic (which makes sense).
Better (in my opinion) is doing it the other way around: explicitely accept and block everything else.
by erlinden
Tue Feb 20, 2024 9:38 pm
Forum: General
Topic: FTP forwarding questions from a beginner
Replies: 2
Views: 233

Re: FTP forwarding questions from a beginner

Besides port 21, you have to forward a range of ports for passive mode. Depends on the FTP server and how that is configured.
But to be honest...FTP is like legacy. Please consider a different approach instead of FTP, or make it available to the outside world through VPN.
by erlinden
Tue Feb 20, 2024 5:22 pm
Forum: General
Topic: WINBOX PROBLEM
Replies: 3
Views: 332

Re: WIMBOX PROBLEM

You are probably referring to Winbox?

Are both Winbox and the app up to date?
What version of RouterOS are you running?
Are you connecting by IP?
Do you have the same issues when you connect by MAC address?
What exact CCR model are you using?
by erlinden
Tue Feb 20, 2024 2:06 pm
Forum: Wireless Networking
Topic: DFS and radar channels
Replies: 10
Views: 797

Re: DFS and radar channels

For completeness...what RouterOS version are you running?
Are you expecting radar signal occurences?
by erlinden
Tue Feb 20, 2024 12:34 pm
Forum: Beginner Basics
Topic: My ISP blocked me because of a lot of connections
Replies: 4
Views: 440

Re: My ISP blocked me because of a lot of connections

A look at your config might help as well:
/export file=anynameyoulike
Remove serial and any other private information, and post it between code tags by using the </> button
by erlinden
Tue Feb 20, 2024 10:41 am
Forum: Wireless Networking
Topic: wave2 roaming and access lists
Replies: 3
Views: 340

Re: wave2 roaming and access lists

Drop the 2.4GHz support on the RB4011 and use the wifi-qcom-ac driver on it as well. Then you can have all the benefits of the driver.
by erlinden
Mon Feb 19, 2024 2:31 pm
Forum: Wireless Networking
Topic: CAPsMAN not working on 7.13.4 [SOLVED]
Replies: 26
Views: 1330

Re: CAPsMAN not working on 7.13.4 [SOLVED]

please see the attached video. There is no video attached (yet). Could you please share both configs of CAPS and of CAPsMAN? /export file=anynameyoulike Remove serial and any other personal information. If you post the config in between code tags (by using the </> button) it will be more readable.
by erlinden
Mon Feb 19, 2024 2:18 pm
Forum: Wireless Networking
Topic: wifi hardware reset issue on hap ax3
Replies: 15
Views: 4653

Re: wifi hardware reset issue on hap ax3

Can you share your config, @mehr463? I have neither seen this error on my environment.
by erlinden
Mon Feb 19, 2024 12:28 pm
Forum: RouterBOARD hardware
Topic: Locked Out
Replies: 11
Views: 788

Re: Locked Out

When using Winbox you might be able to connect by MAC address.
by erlinden
Mon Feb 19, 2024 10:51 am
Forum: Beginner Basics
Topic: Basic Vlan Tag/Untag
Replies: 7
Views: 515

Re: Basic Vlan Tag/Untag

There is a dedicated page on this topic:
https://help.mikrotik.com/docs/display/ ... switchchip
by erlinden
Mon Feb 19, 2024 9:44 am
Forum: Beginner Basics
Topic: CRS125-24G-1S - Internet Link
Replies: 9
Views: 712

Re: CRS125-24G-1S - Internet Link

The S in CRS stands for switch, you are using a switch as router. It is functionally capable of working as router, but with the lack of routing performance. You could expect around 250Mbps max, according to this (routring, 25 ip filter rules): https://mikrotik.com/product/CRS125-24G-1S-IN#fndtn-test...
by erlinden
Sat Feb 17, 2024 10:59 pm
Forum: General
Topic: Bug? Simple queue causes reboot failure
Replies: 9
Views: 867

Re: Bug? Simple queue causes reboot failure

As you seem to understand the concept of VLAN...why do you use mutliple bridges? I would like to advise you this topic, which gives really great suggestions on VLAN: https://forum.mikrotik.com/viewtopic.php?t=143620 Will continue reading your config for reasons having this problem. Can you add the w...
by erlinden
Sat Feb 17, 2024 10:56 pm
Forum: General
Topic: hap ax^2 does not provide full speed connection
Replies: 31
Views: 1546

Re: hap ax^2 does not provide full speed connection

For real measurements you better test with iPerf instead of (any other) speedtest.
by erlinden
Sat Feb 17, 2024 6:08 pm
Forum: Beginner Basics
Topic: New mikrotik install DOA?
Replies: 3
Views: 351

Re: New mikrotik install DOA?

If you use Windows, install Winbox (if you haven't yet) and connect through it by MAC address (find it in neighborhood. Otherwise, consider resetting to default by using the reset button as explained here: https://help.mikrotik.com/docs/display/ROS/Reset+Button Enjoy MT, you'll love it once you unde...
by erlinden
Fri Feb 16, 2024 10:36 am
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 46683

Re: v7.14rc [testing] is released!

If I use the rest API extensively for getting stats etc, the user list gets spammed with active users.
Looks like you are using a new connection for every request. Is the list cleared after some time?
by erlinden
Thu Feb 15, 2024 8:50 am
Forum: Beginner Basics
Topic: Missing WLAN in OS 7 [SOLVED]
Replies: 5
Views: 625

Re: hap ac2 quick set [SOLVED]

by erlinden
Wed Feb 14, 2024 11:28 am
Forum: Wireless Networking
Topic: Help with my wireless setup [SOLVED]
Replies: 3
Views: 403

Re: Help with my wireless setup [SOLVED]

YES YOU CAN!

:-)

https://help.mikrotik.com/docs/display/ROS/WiFi

cAP ac can be run with wifi-qcom-ac driver and does support the latest bennefits.
You really want to read the above link carefully, there are some manual steps to take.
by erlinden
Wed Feb 14, 2024 9:19 am
Forum: Beginner Basics
Topic: Cannot upgrade hAP ac2 7.7 to 7.11.2
Replies: 2
Views: 295

Re: Cannot upgrade hAP ac2 7.7 to 7.11.2

I hava had lots of problems when using detect internet, you might want to disable it (set all interfaces to none) en try again:
https://help.mikrotik.com/docs/display/ ... t+Internet
by erlinden
Tue Feb 13, 2024 9:02 am
Forum: Wireless Networking
Topic: hapax2 roaming problem
Replies: 6
Views: 703

Re: hapax2 roaming problem

How did the hapax2_em get all these settings? Just reset with no default and set it to CAPS Mode (haven't tested it): /system reset-configuration caps-mode=yes Or by pressing the reset button: https://help.mikrotik.com/docs/display/ROS/Reset+Button And indeed, use RSTP: https://help.mikrotik.com/doc...
by erlinden
Mon Feb 12, 2024 8:55 pm
Forum: Beginner Basics
Topic: check my settings
Replies: 12
Views: 650

Re: check my settings

And while we are at it: upgrade to wifi-qcom-ac driver, which is available from RouterOS v7.13.x and up. Consider 7.14 which is better working (for me).
by erlinden
Mon Feb 12, 2024 6:18 pm
Forum: Wireless Networking
Topic: Capsman version [SOLVED]
Replies: 16
Views: 913

Re: Capsman version [SOLVED]

Three options: /interface wifi, version 7.13.x and higher /interface wifiwave2, version 7.x up to 7.12.x /caps-man, version 6.x and 7.x legacy https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-WiFiCAPsMAN https://help.mikrotik.com/docs/pages/viewpage.action?pageId=46759946#WifiWave2(7.12andolder)...
by erlinden
Mon Feb 12, 2024 4:16 pm
Forum: General
Topic: Wrong credentials on new Chateau LTE 12 [SOLVED]
Replies: 6
Views: 409

Re: Wrong credentials on new Chateau LTE 12

Is there a sticker on the bottom containing the password?
by erlinden
Mon Feb 12, 2024 2:49 pm
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 46683

Re: v7.14rc [testing] is released!

I presume wAP ac is an arm version not mipsbe...
Yes
Was the wifi-qcom-ac package used?
Yes
How much HDD space was left free on cAP XL ac and wAP ac after the upgrade?
cAP XL ac: 372 KiB
wAP ac: 356 KiB

This according to /system/resources
by erlinden
Mon Feb 12, 2024 11:18 am
Forum: Announcements
Topic: v7.14rc [testing] is released!
Replies: 176
Views: 46683

Re: v7.14rc [testing] is released!

cAP XL ac and wAP ac upgraded (from 7.13.4) without problems (besides my RB4011).
Only had to suppress Wireguard logging.
by erlinden
Mon Feb 12, 2024 9:52 am
Forum: Wireless Networking
Topic: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]
Replies: 11
Views: 877

Re: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]

I have wAP ac's running perfectly fine on two different locations. Used the reset-default with CAPS-Mode and afterwards did some magic to support VLAN's and multiple SSID's. Came from version 7.13.2 and upgraded to 7.13.3 and 7.13.4. Any steps from this help page that you didn't do? https://help.mik...
by erlinden
Sun Feb 11, 2024 3:29 pm
Forum: Wireless Networking
Topic: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]
Replies: 11
Views: 877

Re: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]

Is the wAP ac a mipsbe or a arm device? Only the latter is supported.
by erlinden
Fri Feb 09, 2024 3:02 pm
Forum: General
Topic: Access single server across VLANs
Replies: 5
Views: 381

Re: Access single server across VLANs

Something like:
add action=accept chain=forward comment="Kids access to server" out-interface=LAN_VLAN dst-address=[IP single server]
You can add protocol or port as well, now the complete server is reachable.
by erlinden
Fri Feb 09, 2024 2:51 pm
Forum: Beginner Basics
Topic: Drop invalid FW forward
Replies: 15
Views: 848

Re: Drop invalid FW forward

Interestingly...there is no drop filter rule on the forward chain that logs...
Port 80 and 443 seems to be standard web browsing?
by erlinden
Fri Feb 09, 2024 9:49 am
Forum: Wireless Networking
Topic: Channel Width (wifi-qcom-ac)
Replies: 11
Views: 1051

Re: Channel Width (wifi-qcom-ac)

What devices do you use?
What width is reported in on the WiFi tab in WiFi?
by erlinden
Thu Feb 08, 2024 6:01 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

What are you looking for? They're both default/delivered and in CAPsMAN mode.
I'm looking for the answer to your question, just like you.
by erlinden
Thu Feb 08, 2024 5:29 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

Read my previous posts. The cAP AX is GONE. It's now a hAP ax2 and ax3.
You are right!

Okay, can you please share configs of both the hAP ax2 and ax3?
by erlinden
Thu Feb 08, 2024 5:19 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

I've posted my WiFi configuration numerous times, but okay, here we go again (removed serial #, etc.):
Werte talking about the cAP AX, not the CAPsMAN.
Can you please share the config of the cAP ax? And have you checked the log on it?
by erlinden
Thu Feb 08, 2024 3:33 pm
Forum: General
Topic: Dual WAN configuration
Replies: 6
Views: 480

Re: Dual WAN configuration

by erlinden
Thu Feb 08, 2024 1:05 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13.4 [stable] is released!

Can you please share your config? Really curious if there is anything that could give a hint.
by erlinden
Thu Feb 08, 2024 12:12 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13.4 [stable] is released!

I don't see that behavior, @herbrico. Looking at the changelog I would not expect differences. Do you have anything configured related to the changelog?
by erlinden
Thu Feb 08, 2024 10:43 am
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

It shows ax/Ceee in the screenshots.
Indeed, and if I read correctly, the screenshot is of the combination hAP ax2 and hAP ax3.
by erlinden
Thu Feb 08, 2024 10:01 am
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

Any thoughts on why this issue is happening? Can you please share the config of the cAP ax? And have you checked the log on it? And can you check if there is a passphrase? This is missing in the posted configs, but I assume removed on purpose...? In your case I would netinstall the cAP ax, and perf...
by erlinden
Thu Feb 08, 2024 9:46 am
Forum: General
Topic: all zeros 00:00:00:00:00:00 on MAC address. This indicates an IP address conflict
Replies: 2
Views: 369

Re: all zeros 00:00:00:00:00:00 on MAC address. This indicates an IP address conflict

A complete config would be better, can you do a complete export and remove serial (also in your opening post) and any other private information.
by erlinden
Wed Feb 07, 2024 2:37 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2030

Re: Wireguard doesn't work and no logs

Then it is probably the Wireguard settings. At least I see the allowed-address in the peer is set to /24, this should be /32. The client-address can be left empty. Did you follow this guide? https://help.mikrotik.com/docs/display/ROS/WireGuard#WireGuard-RoadWarriorWireGuardtunnel Can you also share ...
by erlinden
Wed Feb 07, 2024 2:02 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2030

Re: Wireguard doesn't work and no logs

Just add log=yes to the filter rule on the input chain.

At least, when you see the counter increasing.
by erlinden
Wed Feb 07, 2024 12:24 pm
Forum: General
Topic: Wireguard doesn't work and no logs
Replies: 22
Views: 2030

Re: Wireguard doesn't work and no logs

Zou je dit: /ip firewall filter add action=accept chain=input dst-address=192.168.1.254 dst-port=57981 protocol=udp /interface list member add comment=defconf disabled=yes interface=ether1 list=WAN kunnen veranderen naar: /ip firewall filter add action=accept chain=input in-interface-list=WAN dst-po...
by erlinden
Tue Feb 06, 2024 3:36 pm
Forum: Wireless Networking
Topic: CAPSMAN Doesn't see AP in Radio Tab. HELP!!!!
Replies: 5
Views: 424

Re: CAPSMAN Doesn't see AP in Radio Tab. HELP!!!!

@holvoetn already gave a good direction, to make it more explicit: https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Overview (where you can read about wifi-qcom-ac which is necessary for the cAP XL ac) https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-WiFiCAPsMAN (things you have to take into...
by erlinden
Sun Feb 04, 2024 11:38 am
Forum: Wireless Networking
Topic: guest wifi capsman v2 bridge
Replies: 3
Views: 336

Re: guest wifi capsman v2 bridge

I am pretty sure that is the case.
by erlinden
Sat Feb 03, 2024 10:47 pm
Forum: Wireless Networking
Topic: guest wifi capsman v2 bridge
Replies: 3
Views: 336

Re: guest wifi capsman v2 bridge

Instead of using multiple bridges, you can also (better) use VLAN. It will make your life so much easier! If you want to solve it with the current config, please share it: /export file=anynameyoulike Remove serial and any other private info and post in between code tags by using the </> button.
by erlinden
Thu Feb 01, 2024 9:43 am
Forum: Wireless Networking
Topic: CAP AX on a management VLAN - [Solved]
Replies: 6
Views: 623

Re: CAP AX on a management VLAN

Assuming you are not using CAPsMAN, you can follow this great tutorial. Basically, you will add VLAN filtering on the bridge of the cAP ax and assign VLAN ID on the bridge ports: https://forum.mikrotik.com/viewtopic.php?t=143620 If you connect a computer to the same network cable (as the cAP ax is c...
by erlinden
Wed Jan 31, 2024 10:33 am
Forum: Wireless Networking
Topic: Issue with FT
Replies: 5
Views: 548

Re: Issue with FT

I added connect-priority 0/1 to get rid of the SA Query timeout. Did you set it?
This setting can be found in /interface/wifi/security/
by erlinden
Tue Jan 30, 2024 4:37 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1587

Re: CAP AX - CAPSMAN- no DHCP lease

I would like to suggest starting from a clean situation: remove all /interface/wifi entries and reset the CAP to CAPS Mode. Especially when there are leftovers. Why don't the AX interfaces show up in the bridge/port list? any connection to Because they shouldn't, you should however see the interface...
by erlinden
Tue Jan 30, 2024 4:21 pm
Forum: General
Topic: To xSTP...or not [SOLVED]
Replies: 4
Views: 546

Re: To xSTP...or not [SOLVED]

Thanks all, did learn something thanks to you.
I chose RSTP and set priority. Still not sure what edge ports (though I can think of something) are and what can be changed in my config.

As the network won't be (more) complicated then it is currently, I'll keep RSTP active.
by erlinden
Tue Jan 30, 2024 4:14 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1587

Re: CAP AX - CAPSMAN- no DHCP lease

Don't add the CAP interfaces to the bridge manually, binding is done through datapath.

Have a look at this basic tutorial with CAPsMAN and VLAN:
https://help.mikrotik.com/docs/display/ ... ionexample:
by erlinden
Tue Jan 30, 2024 2:54 pm
Forum: RouterBOARD hardware
Topic: Everything but hAP ax2 is pointless?
Replies: 23
Views: 1810

Re: Everything but hAP ax2 is pointless?

Obivously you don't have to use the wifi provided by the router. Seems (to me) that there is not many requests for wifiless routers in that price range.
by erlinden
Tue Jan 30, 2024 1:55 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1587

Re: CAP AX - CAPSMAN- no DHCP lease

The first thing I notice is that "configuration=Kitchen2AX_valhall", while it is not a configuration. Your naming convention is doomed to be a mess: use unique names, i.e. Kitchen5AX_IOT_cfg and IOT_sec After having another look...mmm, seems you copiy/paste randomly...is this really an exp...
by erlinden
Tue Jan 30, 2024 1:24 pm
Forum: Wireless Networking
Topic: CAP AX - CAPSMAN- no DHCP lease [SOLVED]
Replies: 15
Views: 1587

Re: CAP AX - CAPSMAN- no DHCP lease

Can you share the WiFi settings of the CAPsMAN:
/interface/wifi/ export
Or even better a complete export of the device running CAPsMAN:
/export file=anynameyoulike
Remove serial and any other private information.
by erlinden
Tue Jan 30, 2024 11:48 am
Forum: Wireless Networking
Topic: access-list + radius not working.
Replies: 10
Views: 724

Re: access-list + radius not working.

My settings are a bit different, your range is incorrect: /interface wifi access-list add action=accept allow-signal-out-of-range=10s disabled=no signal-range=-90..0 add action=reject allow-signal-out-of-range=10s disabled=no signal-range=-120..-91 Anything above -90 is accepted, anything below reje...
by erlinden
Tue Jan 30, 2024 11:41 am
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 12552

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

From the basic configuration is See these differences: /interface/wifi set wifi1 disabled=no configuration.country=Latvia configuration.ssid=MikroTik security.authentication-types=wpa2-psk,wpa3-psk security.passphrase=8-63_characters set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-ca...
by erlinden
Tue Jan 30, 2024 10:45 am
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 12552

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

Can you post you config?
/export file=anynameyoulike
Make sure to remove serial and any other private information.
by erlinden
Mon Jan 29, 2024 10:01 pm
Forum: General
Topic: Mikrotik config forweb sites [SOLVED]
Replies: 2
Views: 358

Re: Mikrotik config forweb sites [SOLVED]

I think you are looking for a reverse proxy, as far as I know MikroTik doesn't offer that functionality out-of-the-box.
Perhaps run Traefik in a container?
by erlinden
Mon Jan 29, 2024 9:57 pm
Forum: General
Topic: To xSTP...or not [SOLVED]
Replies: 4
Views: 546

To xSTP...or not [SOLVED]

I red a lot about using Spanning Tree Protocol and found that it is recommended to use RSTP when using hAP ax2 and hAP ax3. If the CAP is hAP ax2 or hAP ax3, it is strongly recommended to enable RSTP in the bridge configuration, on the CAP configuration.manager should only be set on the CAP device i...
by erlinden
Mon Jan 29, 2024 8:51 pm
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 12552

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

I am not aware of any downsides of having 10m lease time. But I am not a professional. If memory serves me well Apple devices had some issues with that. I have the whole house running on that XE3-4. I turned the 6Ghz Radio back into a 5GHZ radio. But capacity in and around the house takes full adva...
by erlinden
Mon Jan 29, 2024 1:22 pm
Forum: Beginner Basics
Topic: access to winbox from wireguard [SOLVED]
Replies: 7
Views: 558

Re: access to winbox from wireguard [SOLVED]

You might want to consider adding wireguard to the LAN interface-list. That is by far the fastest solution. But that is something you might need to consider.
by erlinden
Sun Jan 28, 2024 8:43 pm
Forum: Wireless Networking
Topic: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2
Replies: 62
Views: 12552

Re: Persistent Wi-Fi Disconnection Issues with Mikrotik ax2

Not everyone has the same experience when it comes to MikroTik WiFi. I have had Cisco, Ubiquiti and Grandstream and recently I returned to MikroTik. The family is happy, and thus so am I. Rockstable, using the wifi-qcom-ac driver. But again, that is just me...
by erlinden
Sun Jan 28, 2024 6:44 pm
Forum: Beginner Basics
Topic: Port forwarding help
Replies: 1
Views: 274

Re: Port forwarding help

An Endpoint (combination IP address and port) is unique, hence you can only forward a port once. To options to handle this situation: different IP address different port As the port is fixed (by Steam), only a second public IP address would solve this problem. Can your provider supply you multiple I...
by erlinden
Sun Jan 28, 2024 11:38 am
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1411

Re: CAPSMAN-How many configurations do I need?

So you want to say, that when I upgrade a system, it doesn‘t upgrade everything… and I have to do the comlicated part myself? Assuming this remark is for me: The upgrade will do just the upgrade and "nothing changes". No complications. When you consider using the wifi-qcom-ac driver (i.e....
by erlinden
Sun Jan 28, 2024 11:29 am
Forum: General
Topic: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN
Replies: 5
Views: 457

Re: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN

You are very welcome, glad it is working!
by erlinden
Sun Jan 28, 2024 11:28 am
Forum: Beginner Basics
Topic: CRS112-8g VLAN challenges
Replies: 13
Views: 719

Re: CRS112-8g VLAN challenges

There is a dedicated page for this switch: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=103841836 Think (can't see your current config yet) that you used VLAN filtering on the bridge, but to get better performance you should do it on the switch. Whether the VLAN's can communicate to e...
by erlinden
Sat Jan 27, 2024 1:10 pm
Forum: General
Topic: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN
Replies: 5
Views: 457

Re: Problem getting hap ax lite as CAP with RB3011UiAS as CAPsMAN

ax devices use the new CAPsMAN (which can be found in the WiFi menu on the RB-3011):
https://help.mikrotik.com/docs/display/ROS/WiFi
by erlinden
Sat Jan 27, 2024 1:07 pm
Forum: Wireless Networking
Topic: hAP ax2 connect to open WiFi
Replies: 5
Views: 478

Re: hAP ax2 connect to open WiFi

Usually wifi1 is 2.4GHz, wifi2 is usually 5GHz
In the old days, ax devices are the other way around :D
by erlinden
Sat Jan 27, 2024 12:42 pm
Forum: Wireless Networking
Topic: hAP ax2 connect to open WiFi
Replies: 5
Views: 478

Re: hAP ax2 connect to open WiFi

Make sure that, from a default cofig, wifi2 is not part of the bridge. And make it part of the WAN interface list. At last, bind the DHCP client to wifi2 and you should be good to go. If you are going to add a virtual interface to make 2.4GHz available as well, make sure to set it to ap and add it t...
by erlinden
Sat Jan 27, 2024 12:22 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1411

Re: CAPSMAN-How many configurations do I need?

Ah...you are using the old CAPsMAN, that is helpfull information. Follow this information for the CAPsMAN part (and leave the slave part out): https://help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-Basicconfigurationwithmasterandslaveinterface /caps-man security ad...
by erlinden
Fri Jan 26, 2024 6:20 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1411

Re: CAPSMAN-How many configurations do I need?

Besides answering (all) (my) questions, are you please willing to share your config of all devices involved?
/export file=anynameyoulike
by erlinden
Fri Jan 26, 2024 4:35 pm
Forum: Beginner Basics
Topic: CAPSMAN-How many configurations do I need?
Replies: 31
Views: 1411

Re: CAPSMAN-How many configurations do I need?

You need at least 1 configuration. But it depends:

What exact device(s) will you be using as CAP?
What RouterOS version will you be running?
How many SSID's will you use?
Are VLAN's involved?
Do you want to set the frequency per radio manually or do you prefer to have it auto selected?
by erlinden
Thu Jan 25, 2024 4:11 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13.3 [stable] is released!

Have you tried by MAC Address, @ormandj? Haven't seen this in my environment (RB4011/hAP ax2/hEX S/cAP ac/cAP XL ac/wAP ac)
by erlinden
Wed Jan 24, 2024 6:19 pm
Forum: Beginner Basics
Topic: poor wifi performance
Replies: 19
Views: 1078

Re: poor wifi performance

For most problems it is necessary to get insights on the config, all config related to the problem (which can be complete configs of all devices). By providing this information, discussions can be left out. I assume you still want some help? Your hardware is more than capable to handle the speeds yo...
by erlinden
Wed Jan 24, 2024 4:48 pm
Forum: Beginner Basics
Topic: bandwidth problem with many router
Replies: 4
Views: 557

Re: bandwidth problem with many router

What do you thing about CCR1009-7G-1C-1S+ ?? i could get it for cheap. It is suitable for even 2.5 gbps connection? It's the same for any model, just check test results which are available here: https://mikrotik.com/product/CCR1009-7G-1C-1Splus#fndtn-testresults Check the specs --> TEST Results for...
by erlinden
Wed Jan 24, 2024 3:32 pm
Forum: Forwarding Protocols
Topic: RPKI
Replies: 6
Views: 682

Re: RPKI

rpki-verify RPKI is not working and must be a bug in the firmware. Can someone please check?
https://mikrotik.com/support
by erlinden
Wed Jan 24, 2024 12:19 pm
Forum: Beginner Basics
Topic: poor wifi performance
Replies: 19
Views: 1078

Re: poor wifi performance

Can you provide all relevant information: RouterOS version Standalone or CAPsMAN Config of the cAP ac /export file=anynameyoulike Remove serial and any other private info and post the output between code tags by using the </> button Because you are using the cAP ac, you are able to use the new wifi-...
by erlinden
Tue Jan 23, 2024 8:48 am
Forum: Beginner Basics
Topic: Dual WAN- No load balance, No failover
Replies: 2
Views: 548

Re: Dual WAN- No load balance, No failover

Something like what is discussed in this post?
viewtopic.php?t=194320
by erlinden
Mon Jan 22, 2024 12:12 pm
Forum: Wireless Networking
Topic: FT between ax & ac [SOLVED]
Replies: 3
Views: 755

Re: FT between ax & ac [SOLVED]

Glad I could help you...I found the answer on this forum as well 8)
by erlinden
Mon Jan 22, 2024 11:01 am
Forum: Wireless Networking
Topic: FT between ax & ac [SOLVED]
Replies: 3
Views: 755

Re: FT between ax & ac [SOLVED]

To have it working, I had to set connect-priority (0/1) as well. That was for an ac-only setup, perhaps you will benefit from it as well...?
Do you see SA Query Timeouts in the logging?
by erlinden
Sun Jan 21, 2024 4:11 pm
Forum: General
Topic: latest firmware issu [SOLVED]
Replies: 1
Views: 548

Re: latest firmware issu [SOLVED]

Restore of a backup can only be performed on identical devices: https://help.mikrotik.com/docs/display/ROS/Backup Better to do an export of the config and import that line by line: https://help.mikrotik.com/docs/display/ROS/Configuration+Management For netinstall it is necessary to follow the manual...
by erlinden
Fri Jan 19, 2024 2:52 pm
Forum: Wireless Networking
Topic: SA Query timeout
Replies: 47
Views: 11352

Re: SA Query timeout

Anyway, I'm sure someone will be along soon to say it's your config etc........... How do you know his config is correct. There are not a lot of topics where, after sharing the config, there are no improvements to make on the config. @kurio: As far as I know the client will always use the same MAC ...
by erlinden
Thu Jan 18, 2024 3:15 pm
Forum: Wireless Networking
Topic: Help with troubleshooting poor WiFi speed
Replies: 41
Views: 1818

Re: Help with troubleshooting poor WiFi speed

The C stands for Control channel and every C or e (or X) is 20MHz bandwidth. In case of Ceee and channel 5500: 5490-5570 used frequencies, where the control channel is frequency 5500. In case of eCee and channel 5520: 5490-5570 used frequencies, where the control channel is frequency 5520. A tool li...
by erlinden
Thu Jan 18, 2024 11:57 am
Forum: Wireless Networking
Topic: Not able to setup WiFi on my cAP ac device firmware v 7.13.2 [SOLVED]
Replies: 13
Views: 1329

Re: Not able to setup WiFi on my cAP ac device firmware v 7.13.2 [SOLVED]

Remove current wifi configuration and start again.

And perhaps you can share your current config:
/interface/wifi/ export file=anynameyoulike
by erlinden
Thu Jan 18, 2024 9:47 am
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1316

Re: VLAN configuration for home network [SOLVED]

If you want to have some documentation on VLAN, please read this post:
viewtopic.php?t=143620
by erlinden
Wed Jan 17, 2024 6:01 pm
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1316

Re: VLAN configuration for home network [SOLVED]

Mmm...not to fond of your firewall: Can you please order them: first input then forward chain? Am I correct that you don't want anything accessing your router (except for ICMP)? The longer I look... ...well, just go back to defaults and add VLAN's to the correct interface list. Currently it is a tot...
by erlinden
Wed Jan 17, 2024 5:20 pm
Forum: Beginner Basics
Topic: VLAN configuration for home network [SOLVED]
Replies: 9
Views: 1316

Re: VLAN configuration for home network [SOLVED]

Please, community tell me do I understand VLAN correctly: - Will such configuration work? Sure - Will VLAN 88 clients have winbox access to router via IP 192.168.88.1 address ? Depends on your firewall (that is totally missing in your post) - Will wireless IoT devices "untaggly" connected...
by erlinden
Wed Jan 17, 2024 5:02 pm
Forum: Wireless Networking
Topic: MikroTik hAP ax3 poor WiFi performance
Replies: 258
Views: 46801

Re: MikroTik hAP ax3 poor WiFi performance

What is the problem and how i can improve the 5ghz performance?
Would be helpfull to:
  • see the configuration
  • know at what rate the client is connected
  • how the network speedtest is performed
by erlinden
Wed Jan 17, 2024 4:50 pm
Forum: General
Topic: Brute Force Attacks
Replies: 16
Views: 2268

Re: Brute Force Attacks

Image
Greetings from the Netherlands :D
by erlinden
Wed Jan 17, 2024 4:14 pm
Forum: Beginner Basics
Topic: Join CAP ax XL into a capsman config
Replies: 31
Views: 3022

Re: Join CAP ax XL into a capsman config

But now the CAP does not send the data anymore to the GuestBridge, so it does not get an GuestLAN IP address, will i get forced now to use VLAN ID in the whole network instead? What a joy, you finaly have a good reason for properly configuring your network! Although also in the old world using VLAN...
by erlinden
Wed Jan 17, 2024 9:42 am
Forum: Beginner Basics
Topic: WAN Interface DHCP?
Replies: 7
Views: 1045

Re: WAN Interface DHCP?

Please share the config:
/export file=anynameyoulike
Remove serial and any other private info and post in between code tags by using the </> button.
by erlinden
Tue Jan 16, 2024 9:46 pm
Forum: Beginner Basics
Topic: Join CAP ax XL into a capsman config
Replies: 31
Views: 3022

Re: Join CAP ax XL into a capsman config

Just checked on my CAPsMAN, don't see any counter on both /interface and /interface/wifi.
Running 7.13.2 together with wifi-qcom-ac driver and cAP XL ac and wAP ac.
by erlinden
Tue Jan 16, 2024 6:29 pm
Forum: Beginner Basics
Topic: Best approach to VLAN
Replies: 1
Views: 579

Re: Best approach to VLAN

You are not the first with this question, hence my advice to search on the forum befor starting a post.
Here is a great tutorial on VLAN's:

viewtopic.php?t=143620
by erlinden
Tue Jan 16, 2024 1:25 pm
Forum: General
Topic: Connect 3 Ethernet devices with Wifi
Replies: 6
Views: 689

Re: Connect 3 Ethernet devices with Wifi

Assuming the Schneider devices have network interfaces and they are connected to different ethernet ports on the MikroTik: you should add all interfaces to the bridge, currently only ether1 is part of the bridge. Something like: /interface bridge port add bridge=bridge1 interface=wlan1 internal-path...
by erlinden
Tue Jan 16, 2024 8:51 am
Forum: Wireless Networking
Topic: Fast transition with 2 hap ac2 not working
Replies: 4
Views: 785

Re: Fast transition with 2 hap ac2 not working

/interface wifi configuration add channel=5-channel-ac country="United States" disabled=no mode=ap name=\ profile-wifi-5-ac security=security_profile \ security.authentication-types=wpa-psk,wpa2-psk .connect-priority=0 .ft=\ yes .ft-over-ds=yes ssid=darkstar-5.0GHz add channel=2-channel13...
by erlinden
Mon Jan 15, 2024 4:36 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1449

Re: CAPsMAN and VLANs [SOLVED]

If you share config of both CAPsMAN and CAP there is surely someone who can provide you feedback on why it is working.
by erlinden
Mon Jan 15, 2024 4:16 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13.2 [stable] is released!

I got the same message after the upgrade from 7.13.1 (netinstalled) to 7.13.2 on my hAP ac2.
I don't see anything in the release notes about this item...
by erlinden
Mon Jan 15, 2024 2:39 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1449

Re: CAPsMAN and VLANs [SOLVED]

For ac devices with qcom-ac package and RouterOS version 7.13.x you need to do some manual VLAN things on the CAP (besides the CAPsMAN): https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPVLANconfigurationexample: With this manual adjustment it will work just fine (and offcourse clients...
by erlinden
Mon Jan 15, 2024 10:50 am
Forum: RouterBOARD hardware
Topic: hap ac2 and migrate to hap ax2 - problem with wifi 5GHz coverage
Replies: 14
Views: 1564

Re: hap ac2 and migrate to hap ax2 - problem with wifi 5GHz coverage

I think ".antenna-gain=0" is incorrect, did you set that yourself?
How did you do the migration, by hand?
by erlinden
Sat Jan 13, 2024 11:38 am
Forum: General
Topic: Mikrotik Hex-S + TP-Link Deco m4 Access Point not working.
Replies: 7
Views: 698

Re: Mikrotik Hex-S + TP-Link Deco m4 Access Point not working.

Does a computer, connected to the hEX S, work?
Does the hEX S have a default config?
Is the "ISP" a modem/router?
by erlinden
Fri Jan 12, 2024 7:20 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1449

Re: CAPsMAN and VLANs [SOLVED]

What RouterOS version are you running? And what wireless driver? And which CAP are you using?
by erlinden
Fri Jan 12, 2024 5:43 pm
Forum: General
Topic: CAPsMAN and VLANs [SOLVED]
Replies: 12
Views: 1449

Re: CAPsMAN and VLANs [SOLVED]

Sounds as if you did some form of configuration on the CAP itself, correct?
If so...not correct

Can you show you CAPsMAN part configuration?
by erlinden
Fri Jan 12, 2024 9:32 am
Forum: Beginner Basics
Topic: Simple queue on Wifi
Replies: 5
Views: 760

Re: Simple queue on Wifi

Perhaps you can share your config?
/export file=anynameyoulike
Remove serial and any other private info and post the output in between code tags by using the </> button.
by erlinden
Thu Jan 11, 2024 5:53 pm
Forum: General
Topic: VLAN Setup Please Help [SOLVED]
Replies: 5
Views: 681

Re: VLAN Setup Please Help [SOLVED]

Short answer: Firewall
Please read: viewtopic.php?t=143620 (and search for intervlan).
by erlinden
Thu Jan 11, 2024 9:45 am
Forum: Beginner Basics
Topic: DDoS help
Replies: 42
Views: 2572

Re: DDoS help

Please share your config:
/export file=anynameyoulike
Remove serial and any other private information from it and post the output in between code tags by using the </> button
by erlinden
Wed Jan 10, 2024 11:06 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

Set encryption to CCMP only and give it another try.
This is most definitely a software issue.
I would call it a user issue :lol:
by erlinden
Wed Jan 10, 2024 5:12 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1814

Re: ros 7.13.* and zerotire and wireless pkg's [SOLVED]

You might want to consider using Wireguard (instead of Zerotier) as an alternative VPN solution. It is already available in the default package.

Are you using the cAP ac as router or is there anything in front (as router) of that can also do VPN?
by erlinden
Wed Jan 10, 2024 11:27 am
Forum: General
Topic: Ok TX-Drop EVERYWHERE
Replies: 3
Views: 670

Re: Ok TX-Drop EVERYWHERE

I was once told not to worry about the TX Drops, I will search this reply...
by erlinden
Tue Jan 09, 2024 10:37 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

Wireless package is for non wifi-qcom devices (like all ac and older using the wireless package). As you are using the cAP ax, you only need the 7.13.x routeros (on CAPsMAN and CAP) to get this up and running. Still don't know why there is a difference between hAP ax3 and cAP ax, I would expect them...
by erlinden
Tue Jan 09, 2024 9:59 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

I would remove your current configuration and start from here: #create a security profile /interface wifi security add authentication-types=wpa3-psk name=sec1 passphrase=HaveAg00dDay #create configuraiton profiles to use for provisioning /interface wifi configuration add country=Latvia name=5ghz sec...
by erlinden
Tue Jan 09, 2024 8:07 pm
Forum: Wireless Networking
Topic: cAP ax 5GHz not working in CAPsMAN
Replies: 48
Views: 4222

Re: cAP ax 5GHz not working in CAPsMAN

Befor doing a downgrade (which is probably not necessary), can you check why in your config there is encryption="" 4 times? Looks to me like a misconfiguration, at least you don't want this current setting. Absolutely ridiculous. Steep learning curve...don't give up yet. You can also reset...
by erlinden
Tue Jan 09, 2024 5:25 pm
Forum: Wireless Networking
Topic: is version 7.13 worth to install? (about WiFi)
Replies: 3
Views: 1908

Re: is version 7.13 worth to install? (about WiFi)

Instead of me typing it all, you better have a look at the documentation: https://help.mikrotik.com/docs/display/ROS/WiFi In a mixed environement you can do a mixed CAPsMAN (old and new), but I think it is not really beneficial for you from a wifi perspective (and in my opinion). But 7.13 does conta...
by erlinden
Tue Jan 09, 2024 12:47 pm
Forum: Wireless Networking
Topic: No available Channels on cAP but CAPsMAN is ignorant
Replies: 11
Views: 2399

Re: No available Channels on cAP but CAPsMAN is ignorant

Might be misconfiguration, can you share your config?
/export file=anynameyoulike
Remove serial and any other private info en share your output between code tags by using the </> button.

Most obvious would be setting a 2.4GHz frequency to a 5GHz radio (or vice versa).
by erlinden
Tue Jan 09, 2024 12:08 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13.1 [stable] is released!

I have country=Austria everywhere and /interface/wifi/actual-configuration/print confirms that.
That is the case at my site as well...
I assume it is incorrect information, though I still adhere to the ETSI standard.
by erlinden
Tue Jan 09, 2024 11:40 am
Forum: General
Topic: How remove wireless package in mikrotik rb750gr3 [SOLVED]
Replies: 10
Views: 1790

Re: How remove wireless package in mikrotik rb750gr3 [SOLVED]

You should know since you added it there (at least someone did) ... it doesn't appear on it's own on Hex. Actually it is added automatically, when installing 7.13.x. And indeed required for making the old CAPsMAN available. SO, unless running (old) CAPsMAN, it can be uninstalled: https://help.mikro...
by erlinden
Mon Jan 08, 2024 9:26 pm
Forum: Wireless Networking
Topic: is version 7.13 worth to install? (about WiFi)
Replies: 3
Views: 1908

Re: is version 7.13 worth to install? (about WiFi)

For me (in a home environment) it was a no brainer. And I am really enjoying, because of use of the wifi-qcom-ac driver (which does make FT available and working). If you only have ac ARM devices, you really should consider. MIPSBE is not supported, mixed environment is however supported. What kind ...
by erlinden
Mon Jan 08, 2024 1:53 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 4129

Re: port forwarding

where do i run this code
Terminal
and i think i did set them
think?
by erlinden
Mon Jan 08, 2024 1:01 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 4129

Re: port forwarding

Can you share this information:
/ip/firewall/nat export
I think your dst-address(-list) and to-address are missing in your screenshot, did you set them?
by erlinden
Mon Jan 08, 2024 10:06 am
Forum: Wireless Networking
Topic: hap AX2: client connects and disconnects continously
Replies: 16
Views: 3087

Re: hap AX2: client connects and disconnects continously

Can you pick just one frequency for the 5GHz radio and see if that helps?
What is the setting of Group Encryption? I selected CCMP.

Only difference I see in comparison to my config is that I set FT on the security tab (Winbox) instead of on the configuration part. But that doesn't make a difference.
by erlinden
Sun Jan 07, 2024 5:52 pm
Forum: Wireless Networking
Topic: hap AX2: client connects and disconnects continously
Replies: 16
Views: 3087

Re: hap AX2: client connects and disconnects continously

What about interference? Seems you are using the 2.4GHz band which might be subject to a lot of interference.
Can you share your config:
/export file=anynameyoulike
Remove serial and any other private information and post the about in between code tags by use of the </> button.
by erlinden
Sun Jan 07, 2024 5:48 pm
Forum: General
Topic: Problem with DHCP server on RB4011
Replies: 7
Views: 1586

Re: Problem with DHCP server on RB4011

Don't think that it is RB4011 related. Can you share your complete config? Have you turned on additional logging?
/export file=anynameyoulike
Remove serial and any other private information.
by erlinden
Sun Jan 07, 2024 1:13 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4131

Re: CAPsMAN on v7.13 configuration

I just was wondering why new CAPsMAN can't contain the mature and useful features of old version. It seemed to defy logic. From a functional perspective I fully agree...but from a software development perspective totally not. It has to do with the newly introduced wifi-qcom-ac driver. Which is diff...
by erlinden
Sat Jan 06, 2024 10:58 am
Forum: Wireless Networking
Topic: hAP ax3 wireless problem [SOLVED]
Replies: 85
Views: 8833

Re: hAP ax3 wireless problem [SOLVED]

Based on your config: Set the 2.4GHz radio bandwidth to 20MHz (and the 5GHz radio to 40MHz). Not related to the problem: you might want to increase your DHCP lease time, 10 min. is very low. Were the external antennas of the hAP ax3 attached before taking it into use? Think the radio could get defec...
by erlinden
Fri Jan 05, 2024 11:54 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Weird thing is, after manual reboot they seem to be fine for ~24h and then they start rebooting again. And won't stop, until I reboot them via WinBox. Only thing I notce is this: security.authentication-types="" .encryption="" Not sure if that is correct. Have you tried resettin...
by erlinden
Fri Jan 05, 2024 11:47 pm
Forum: General
Topic: How to separate or prioritize torrent traffic
Replies: 1
Views: 901

Re: How to separate or prioritize torrent traffic

I think this can be accomplished by using queues:

https://help.mikrotik.com/docs/display/ROS/Queues
by erlinden
Fri Jan 05, 2024 3:33 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Not sure what triggered it, there were no config changes whatsoever. There were "other" changes. Any clues in the logging? Though I might not be representive, I know the hAP ax2 can be rocksolid (I have one running at my parents house). Have you already shared your config? Anything "...
by erlinden
Fri Jan 05, 2024 10:39 am
Forum: Wireless Networking
Topic: hAP ax3 wireless problem [SOLVED]
Replies: 85
Views: 8833

Re: hAP ax3 wireless problem [SOLVED]

Can you please share your config?
/export file=anynameyoulike
Remove serial and any other private information, and post between code tags by using the </> button.

Where is the router located, do you have line of sight?
by erlinden
Thu Jan 04, 2024 10:46 pm
Forum: Beginner Basics
Topic: Help RB3011
Replies: 2
Views: 976

Re: Help RB3011

Documentation is a good starting point:
https://help.mikrotik.com/docs/display/ ... +Balancing
by erlinden
Thu Jan 04, 2024 5:49 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 18379

Re: 7.13 wireless package split question

If they are on the same network, the CAP's should be able to find the CAPsMAN. Have you seen this part: https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPsimpleconfigurationexample: It requires an edit on the default CAPs mode. Or as an alternative, share the config of both CAPsMAN and...
by erlinden
Thu Jan 04, 2024 12:27 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 18379

Re: 7.13 wireless package split question

The page shows that "New Capsman only controller" needs "routeros" only, while the video "https://www.youtube.com/watch?v=AkBIQxi-VKs" shows that "Package since 7.13" for "CAPsMAN for up to WiFi5 APs" is "routeos+wireless". Which one is co...
by erlinden
Wed Jan 03, 2024 6:37 pm
Forum: Wireless Networking
Topic: 2.4 GHz Network disappears
Replies: 1
Views: 935

Re: 2.4 GHz Network disappears

The config has the answer (probably):
/export file=anynameyoulike
Remove serial and any other private information and place in between code tags by using the </> button.
by erlinden
Wed Jan 03, 2024 2:06 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Hey MikroTik, is it worth sending autosupout to support?..
Always a good idea!

What device are you using and how is it configured?
And for how long was it up?
by erlinden
Wed Jan 03, 2024 9:35 am
Forum: RouterBOARD hardware
Topic: Mikrotik device mesh
Replies: 5
Views: 1495

Re: Mikrotik device mesh

Then CAPsMAN is indeed a great way to accomplish a "mesh" network.
You can read more: https://help.mikrotik.com/docs/display/ ... ionexample:
by erlinden
Tue Jan 02, 2024 10:22 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4131

Re: CAPsMAN on v7.13 configuration

VLANS on datapath worked OK on ROS6, but now on ROS7.13 is this such a basic setting which does not exist... why they release such a beta release to users ? Who now have time to mess with "hack" as you call to configure manually VLAN filtering on every CAP device. Datapath works on any ve...
by erlinden
Tue Jan 02, 2024 9:21 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Definitely needs more development.
This is only necessary for AC devices, if new devices are AX it won't be a problem.
But I agree AND have trust this will be available in the future.
by erlinden
Tue Jan 02, 2024 9:18 pm
Forum: RouterBOARD hardware
Topic: Mikrotik device mesh
Replies: 5
Views: 1495

Re: Mikrotik device mesh

Will you use a cable in between, or are you referring to mesh in the wireless backhaul definition? When using a wireless backhaul, you will loose performance when not having a dedicated radio for this. If you use cable, it is sufficient to have identical SSID and security settings to create a single...
by erlinden
Tue Jan 02, 2024 9:06 pm
Forum: Wireless Networking
Topic: CAPsMAN on v7.13 configuration
Replies: 7
Views: 4131

Re: CAPsMAN on v7.13 configuration

When using VLAN's, you can't use datapath (yet) on AC devices. Hopefully this will be resolved in newer versions of RouterOS, up till then you can use this "hack": https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPVLANconfigurationexample: The "hack" is using VLAN f...
by erlinden
Tue Jan 02, 2024 4:02 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1426

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

Thanks for the info. But, is my config incorrect then? Would this be a possible cause for the issues I described?
Probably not...still a bit overwhelmed by the config. Can you describe what you would like to achieve with this device?
by erlinden
Tue Jan 02, 2024 3:16 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1426

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

When using VLAN, everyone should read this great topic:
viewtopic.php?t=143620

To summarize:
Use a single bridge
Do VLAN filtering on the bridge
Do VLAN all the way (any network should be a VLAN)
by erlinden
Tue Jan 02, 2024 2:13 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1426

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

show-sensitive are you sure?
That helps importing the (near) complete config after performing a netinstall.
by erlinden
Tue Jan 02, 2024 12:39 pm
Forum: Wireless Networking
Topic: Provision AP's in sequence
Replies: 11
Views: 1446

Re: Provision AP's in sequence

As far as I know there is no out-of-the-box solution for this. You can either set channels manually (which would require a provision rule per radio) or you can use a scheduled script that turns off and on the radio (which will cause a scan for best channel). The latter is used by someone here on the...
by erlinden
Tue Jan 02, 2024 9:51 am
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1426

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

Two things you can do (I would do): Do a complete export: /export show-sensitive file=anynameyoulike netinstall the device: https://help.mikrotik.com/docs/display/ROS/Netinstall You can share your config here as well (make sure to remove serial and any other private info). Are you running any "...
by erlinden
Mon Jan 01, 2024 1:11 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Well, the first step is already done by posting this problem :-) Are the hAP ax2's also upgraded? Would it be possible to set it up from scratch? What version where you running? The qcom package is only required for devices that have wireless interfaces, no need to install it on the RB5009. Can you ...
by erlinden
Sun Dec 31, 2023 12:10 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Only CAPsMAN needs a manual trick to make it work. Not sure if you are using that, or if it is just a single hAP ac with VLAN? In case of the latter, just do VLAN filtering on the bridge (which is very well supported with the new driver). VLAN filtering: https://forum.mikrotik.com/viewtopic.php?t=14...
by erlinden
Sat Dec 30, 2023 6:31 pm
Forum: General
Topic: Upgrade from hAP ac2 to hAP ax3 AirPrint not Working
Replies: 2
Views: 815

Re: Upgrade from hAP ac2 to hAP ax3 AirPrint not Working

Though probably not the solution, I do notice some things: Why did you add the Guest wifi (as it is part of the same bridge as the home network)? Aah, you added a bridge filter... Why is the DHCP lease time set to 10 min? You probably want to change it to a couple of hours. Are you using detect-inte...
by erlinden
Sat Dec 30, 2023 12:30 pm
Forum: Beginner Basics
Topic: CAP AC: Stripping MAC Addresses impacting DHCP
Replies: 12
Views: 1954

Re: CAP AC: DHCP assigned DNS

Your cAP ac is indeed configured as a router (instead of a home ap). I think the easiest way to get you to the preferred solution you: Reset to defaults From Quickset select homeap dual Select WPA2 and preferred pre shared key For reference: https://wiki.mikrotik.com/wiki/Manual:Reset https://wiki.m...
by erlinden
Sat Dec 30, 2023 12:21 pm
Forum: Beginner Basics
Topic: hap ax^2 config
Replies: 24
Views: 1937

Re: hap ax^2 config

For my hap ac^2 router should I install wifi-qcom or wifi-qcom-ac package in order to have CAPsMAN with seamless migration ?
The naming convention might have hinted on this: wifi-qcom-ac for ac devices.
by erlinden
Sat Dec 30, 2023 12:20 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 18379

Re: 7.13 wireless package split question

It's a pity for all of us who bought this model as "powerful enough to be future-proof for at least a few years" and now it's declared obsolete :(
The device isn't obsolete, 2.4GHz Wifi is obsolete.
by erlinden
Fri Dec 29, 2023 10:16 pm
Forum: Beginner Basics
Topic: CAP AC: Stripping MAC Addresses impacting DHCP
Replies: 12
Views: 1954

Re: CAP AC: DHCP assigned DNS

Could it be that the cAP ac is configured as router and not as accesspoint?
An export of it would be very helpful:
/export file=anynameyoulike
Remove serial and any other private info, and place the information between code tags by use of the </>-button
by erlinden
Fri Dec 29, 2023 9:18 pm
Forum: Beginner Basics
Topic: hap ax^2 config
Replies: 24
Views: 1937

Re: hap ax^2 config

Having wifi-qcom installed, I do not see the CAPsMAN option anywhere
If only there was some sort of help page... :D
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
by erlinden
Thu Dec 28, 2023 11:43 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

I first tried to understand it from reading, then to input it into actual routers to check if it might "just work", then to adapt it (fix VLAN membership for example), but nothing could make it working as it should. Too bad...it's working like a charm for me. Can share my config if you wa...
by erlinden
Thu Dec 28, 2023 5:26 pm
Forum: Wireless Networking
Topic: CAP XL AC cannot exceed 350mb speed at 5Ghz
Replies: 11
Views: 1895

Re: CAP XL AC cannot exceed 350mb speed at 5Ghz

Although the CAP XL AC broadcasts 2.4 and 5Ghz signals neither 2.4GHz LED nor 5GHz LED blinking. They are solid off in wifi-qcom-ac driver
Can confirm, mine are not working as well.
by erlinden
Thu Dec 28, 2023 3:20 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Have you seen the VLAN configuration example part of the URL you provided:
https://help.mikrotik.com/docs/display/ ... ionexample:

Think you should be able to get it to work by following that tutorial.
by erlinden
Thu Dec 28, 2023 1:28 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

My cap ac xl WiFi leds doesn’t flashing anymore after installing 7.13 and WiFi-qcom-ac driver. Is this a bug or am I have to make setting about it. Capsman running on rb4011
Mine is arriving this afternoon, I will let you know.
by erlinden
Wed Dec 27, 2023 9:37 pm
Forum: RouterBOARD hardware
Topic: Hap ac2 dead with 7.13
Replies: 23
Views: 5445

Re: Hap ac2 dead with 7.13

absence of thorough testing by MT.....
What brings you this conclusion?
by erlinden
Wed Dec 27, 2023 9:35 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Possible bug. Mikrotik android pro app do not show firewall filter roules on 7.13.
Works on my phone, what Android version are you running?
by erlinden
Wed Dec 27, 2023 6:28 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+ no power on PoE port 10
Replies: 3
Views: 1022

Re: RB4011iGS+ no power on PoE port 10

Does the Yealink W70B support 24V on PoE?
You might need to exchange the default power supply with an 48V version.
by erlinden
Wed Dec 27, 2023 12:38 pm
Forum: General
Topic: I Tink i got hacked
Replies: 16
Views: 1512

Re: I Tink i got hacked

Sounds like you know what happened...were you hacked or not? If this situation is caused by a known user (like yourself), you might want to resolve it. If it's not, you really really should use netinstall.
by erlinden
Wed Dec 27, 2023 12:36 pm
Forum: Beginner Basics
Topic: connect to winbox through vpn [SOLVED]
Replies: 10
Views: 1294

Re: connect to winbox through vpn [SOLVED]

Is the rule you wrote above allowing winbox connection only when connected to vpn? I don't want to allow connections to mikrotik when not connected to vpn. This is an example rule that except WAN will have access to winbox. consider specifying your winbox port if it is other than 8291 Can you expli...
by erlinden
Tue Dec 26, 2023 3:09 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

In any case a regular user wants the wifi to be upgraded to the newest version (new drivers etc) without reconfigure all from scratch. is it the case here?
Though you have to start all over, you could consider CAPsMAN (assunming all 4 Tiks are part of the same network).
by erlinden
Tue Dec 26, 2023 3:06 pm
Forum: General
Topic: V7.13 cAPGi-5HaxD2HaxD
Replies: 3
Views: 548

Re: V7.13 cAPGi-5HaxD2HaxD

Isn't that the defaiult password that can be found on the sticker on the bottom of the accesspoint?

viewtopic.php?t=202544
by erlinden
Sun Dec 24, 2023 11:51 pm
Forum: Beginner Basics
Topic: HP AX2 as cap, clients dont receive IP
Replies: 1
Views: 591

Re: HP AX2 as cap, clients dont receive IP

When using VLAN's a single bridge is sufficient (and preferred). The best topic is here, please read carefully: https://forum.mikrotik.com/viewtopic.php?t=143620 When using CAPsMAN, follow this guide: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149 or watch this YouTube video: ht...
by erlinden
Sun Dec 24, 2023 9:15 pm
Forum: Beginner Basics
Topic: Am I safe with this firewall config? (I'm fairly new)
Replies: 17
Views: 1612

Re: Am I safe with this firewall config? (I'm fairly new)

So I have to put an
add action=drop chain=input
at the end?
Both on input and on forward chain. And indeed, last in line. Also order by input rules, than forward rules to make it morstreadable.
by erlinden
Sun Dec 24, 2023 7:38 pm
Forum: Beginner Basics
Topic: Am I safe with this firewall config? (I'm fairly new)
Replies: 17
Views: 1612

Re: Am I safe with this firewall config? (I'm fairly new)

I really like/prefer to end the chains with a drop all rule.
by erlinden
Sun Dec 24, 2023 6:53 pm
Forum: Beginner Basics
Topic: Wireguard
Replies: 8
Views: 1926

Re: Wireguard

What is your local IP address of the Windows Client that connects to Wireguard. It has to be different from 192.168.0.0/24 address.
by erlinden
Sun Dec 24, 2023 4:21 pm
Forum: Beginner Basics
Topic: RB750Gr3: Slow internet connection - do I need another router
Replies: 3
Views: 772

Re: RB750Gr3: Slow internet connection - do I need another router

From the config I would remove: /interface list member add interface=wan-na-vlan10 list=WAN add interface=ether1 list=WAN The pppoe is the only interface that has to be on the WAN addresslist. Are you using HW offload on the bridge? /interface/bridge/port print What is the CPU usage while performing...
by erlinden
Sun Dec 24, 2023 10:59 am
Forum: Beginner Basics
Topic: Wireguard
Replies: 8
Views: 1926

Re: Wireguard

Does it work if you try locally?
Any reason why there are no firewall rules? Probably because the MikroTik is behind NAT!?

Think it has to do with (one of) the mangle rules, but I'm no expert on that. Is the Wireguard service available through both ISP's?
by erlinden
Sun Dec 24, 2023 10:46 am
Forum: Beginner Basics
Topic: No internet on 2 out of 3 VLANs [SOLVED]
Replies: 7
Views: 908

Re: No internet on 2 out of 3 VLANs [SOLVED]

With the above reply, also: /interface list member add interface=ether1 list=WAN add interface=MGMT_200 list=MGMT add interface=HOME_201 list=HOME add interface=GUEST_222 list=GUEST add interface=MGMT_200 list=VLAN add interface=HOME_201 list=VLAN add interface=GUEST_222 list=VLAN You might want to ...
by erlinden
Sat Dec 23, 2023 5:55 pm
Forum: RouterBOARD hardware
Topic: POE not working on 2 Hex POE routers
Replies: 21
Views: 2401

Re: POE not working on 2 Hex POE routers

Besides the accesspoint power supply (which is 12V) there is also an option to power through POE. The latter (possibly) has to be 48V, while the default power supply of the hEX PoE is providing 24V. In that case there is a mismatch and you have to change the power supply of the hEX PoE with the 48V ...
by erlinden
Sat Dec 23, 2023 1:51 pm
Forum: General
Topic: Problem with DHCP server on RB4011
Replies: 7
Views: 1586

Re: Problem with DHCP server on RB4011

Comparing to my settings:

A leasetime of 10 minutes is very low, I increased it to 4hr.
I left netmask empty (it is already set in the address)

Perhaps with the above changes it will work better?
Otherwise you can set on debug logging on DHCP.
by erlinden
Sat Dec 23, 2023 1:38 pm
Forum: General
Topic: I can not remove wideguard peer
Replies: 2
Views: 515

Re: I can not remove wideguard peer

Can you add the following information:

What RouterOS v7.x version are you on?
How exactely do you attempt to delete?
What connection are you using (Winbox/Web/SSH/Terminal/etc.)?
by erlinden
Fri Dec 22, 2023 10:22 am
Forum: General
Topic: TX in WAN to high
Replies: 5
Views: 746

Re: TX in WAN to high

Might be worth sharing your config:
/export file=anynameyoulike
Make sure to remove serial and any other private information and place the output in between code tags by using the </> button.
by erlinden
Thu Dec 21, 2023 2:20 pm
Forum: General
Topic: wireguard problem
Replies: 15
Views: 2017

Re: wireguard problem

You took into account the order of the rules?
by erlinden
Thu Dec 21, 2023 11:54 am
Forum: Beginner Basics
Topic: connected, no internet [SOLVED]
Replies: 5
Views: 1003

Re: connected, no internet [SOLVED]

Did you add the pppoe interface to the "WAN" addresslist or set it as out interface in the NAT masquerade rule?
by erlinden
Thu Dec 21, 2023 11:43 am
Forum: General
Topic: Update rb751u version 5.16
Replies: 3
Views: 508

Re: Update rb751u version 5.16

Mmm...5.16, that is 2012 I think.
Have you tried using netinstall?

https://help.mikrotik.com/docs/display/ROS/Netinstall
by erlinden
Thu Dec 21, 2023 11:41 am
Forum: General
Topic: wireguard problem
Replies: 15
Views: 2017

Re: wireguard problem

When a filter rule is hit, any later rule won't be matched. Therefor, these are unnecessary: add action=drop chain=forward comment="defconf: drop invalid" connection-state=\ invalid disabled=yes add action=drop chain=forward comment="defconf: drop bad forward IPs" disabled=\ yes ...
by erlinden
Thu Dec 21, 2023 7:47 am
Forum: General
Topic: Wireguard very slow
Replies: 10
Views: 1996

Re: Wireguard very slow

In mhy humble opinion you already found the best topic about VLAN.
by erlinden
Wed Dec 20, 2023 3:26 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 909
Views: 253349

Re: v7.13 [stable] is released!

Can you create a new topic and add your config to it, @jimmer?
by erlinden
Wed Dec 20, 2023 3:24 pm
Forum: Wireless Networking
Topic: 2 WIFI interfaces
Replies: 1
Views: 569

Re: 2 WIFI interfaces

Export or it never happened :D :
/export file=anynameyoulike
Remove serial and any other private information, and place here between code tags by using the </> button.
by erlinden
Tue Dec 19, 2023 11:21 am
Forum: General
Topic: CCR2004 bridge performance
Replies: 5
Views: 798

Re: CCR2004 bridge performance

Can you please supply an export:
/export file=anynameyoulike
Remove serial and any other private information

This will also provide the current RouterOS version, which is missing in your opening post.
(and it is way more readable than the print output).
by erlinden
Mon Dec 18, 2023 4:58 pm
Forum: General
Topic: Wireguard very slow
Replies: 10
Views: 1996

Re: Wireguard very slow

Please only use iPerf for performance testing (and forget about the MT test). In regards to iPerf: - how many threads? - CPU usage of the MT while testing? Why are you using multiple Wireguard instances? Instead of using multiple bridges, you could choose using VLAN (the correct way): https://forum....
by erlinden
Sat Dec 16, 2023 1:18 am
Forum: Beginner Basics
Topic: Increasing wireless range?
Replies: 41
Views: 4955

Re: Increasing wireless range?

Optimization could be:
- select channel mamually
- bandwidth 20MHz (unless in rural site)
- WPA3

Most default settings are pretty much optimized (if I may believe official statements from MT).
by erlinden
Wed Dec 13, 2023 1:27 pm
Forum: Beginner Basics
Topic: Synology VPN Server L2PT
Replies: 1
Views: 1051

Re: Synology VPN Server L2PT

Please share complete config: /export file=anynameyoulike Remove serial and any other private information. Or try this first: add action=accept chain=forward dst-address=192.168.0.12 dst-port=500 protocol=udp in-interface-list=WAN add action=accept chain=forward dst-address=192.168.0.12 dst-port=170...
by erlinden
Mon Dec 11, 2023 9:25 am
Forum: General
Topic: WireGuard access
Replies: 13
Views: 2340

Re: WireGuard access

Can you send example correct configuration?
MikroTik has a help page for this:
https://help.mikrotik.com/docs/display/ ... uardtunnel
by erlinden
Mon Dec 11, 2023 9:08 am
Forum: General
Topic: WireGuard access
Replies: 13
Views: 2340

Re: WireGuard access

Actually, MikroTik can have a lot more than one peer per interface. My best guess is that the IP address used for the peer is incorrect (do you have a /32 subnet?). But it requires the configuration of both MT and peers.
by erlinden
Sun Dec 10, 2023 12:26 am
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 49150

Re: v7.13rc [testing] is released!

removed all unnecessary filters, and disabled all drops for testing.
Do you see the counter of the accept rule increasing?
Could it be that the provider is blocking (perhaps because of CGNAT)?
Does any other port forward/open word work at all?
by erlinden
Sat Dec 09, 2023 2:05 pm
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 49150

Re: v7.13rc [testing] is released!

Uptime 1d23:34:09 Haven't had any interruptions on WG. Change it to, @kreb: /ip firewall filter add action=accept chain=input comment="allow WireGuard" dst-port=13231 protocol=udp in-interface=pppoe-out1 You are currently missing the in-interface (or use in-interface-list=WAN). And get rid...
by erlinden
Fri Dec 08, 2023 3:05 pm
Forum: Beginner Basics
Topic: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]
Replies: 20
Views: 2813

Re: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]

Additionally it requires 20/40MHz on the 2.4 radio, that one I can't set up for only a different SSID. I don't think it matters that much since the 2.4GHz network only being used by iot devices and has a different SSID that the 5GHz wifi. Using 40MHz bandwidth on the 2.4GHz radio is a bad idea...un...
by erlinden
Fri Dec 08, 2023 2:26 pm
Forum: Beginner Basics
Topic: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]
Replies: 20
Views: 2813

Re: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]

It's because my crap A/C doesn't support WPA3, can't even connect to a network that supports WPA3... Took me ages to find a combination of settings that works. Anyway, all that matters are on the 5GHz one. Then you might want to consider using a dedicated SSID for the a/c. You can't combine differe...
by erlinden
Fri Dec 08, 2023 2:03 pm
Forum: Beginner Basics
Topic: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]
Replies: 20
Views: 2813

Re: hAP ax² - Window automatically connects using Wifi 4 [SOLVED]

If both radios are using the same shared SSID...why did you choose different authentication types?
by erlinden
Fri Dec 08, 2023 10:35 am
Forum: RouterBOARD hardware
Topic: MikroTik cAP ax [cAPGi-5HaxD2HaxD] (r2)
Replies: 114
Views: 24294

Re: MikroTik cAP ax [cAPGi-5HaxD2HaxD] (r2)

Tried the second one - exactly the same. Open a new topic and place the config of both devices: /export file=anynameyoulike Remove serial and any other private information and place in between code tags by use of the </> button. My expectation: it is set to a DFS channel which will be scanned for e...
by erlinden
Thu Dec 07, 2023 9:21 pm
Forum: General
Topic: Chateau 5G AX - Faster with disabled fasttrack
Replies: 5
Views: 1720

Re: Chateau 5G AX - Faster with disabled fasttrack

Seems like a riddle...can you give us a hint?

Or better, your config:
/export file=anynameyoulike
Remove serial and any other private info and post it here between code tags by use of the </> button
by erlinden
Thu Dec 07, 2023 2:28 pm
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 49150

Re: v7.13rc [testing] is released!

What previous RouterOS version where you running, @eworm?
by erlinden
Wed Dec 06, 2023 9:20 am
Forum: Beginner Basics
Topic: Increasing wireless range?
Replies: 41
Views: 4955

Re: Increasing wireless range?

set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \ country="united states" disabled=no distance=indoors frequency=auto \ installation=indoor mode=ap-bridge ssid=MikroTik-2C00AA \ wireless-protocol=802.11 You might want to set band to n-only and channel-width to 20...
by erlinden
Tue Dec 05, 2023 7:09 pm
Forum: Beginner Basics
Topic: Increasing wireless range?
Replies: 41
Views: 4955

Re: Increasing wireless range?

Well...that info was missing in your starting post... Think when it comes to wireless it is always good to have a extra pair of eyes (could very well be crappy configuration): /export file=anynameyoulike Remove serial and any other personal information and post here in between code tags with the </>...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 7