MikroTik

rextended

Update goes fail with CRS device multiple times... Hello together i tried the FW update from 7.18.2 to 7.19 (7.19.1) multiple times, and it always end up in the never ending boot loop. In the end only netinstall back to 7.18.2 helps. I was tried on two routers, but booth CRS device ( CRS212-1G-10S-...

rextended

viewtopic.php?p=1148093#p1148047

I would propose an addition:
#24: The user usually is not able to follow or understand multiple information in a single post, so either he only considers the first one or the last one ignores all the previous ones.

rextended

Second Is #16 of the list:
viewtopic.php?p=1128345

I would propose an addition:
#24: The user usually is not able to follow or understand multiple information in a single post, so either he only considers the first one or the last one ignores all the previous ones.

rextended

FNleasetotal1 do not :return nothing...

still not return nothing, also with useless :put [$function] (which means nothing written so randomly).

rextended

Why do most people read the "first line" and ignore everything else that is written?

rextended

the first error is to use quote instead of code that make unreadable what you post. The second, very serious, mistake is to use the same name as the objects as the variable name. Another error is you do not specify RouterOS version, for example "used" exist on 7.19.1 but not on 7.16.2

rextended

@felixka

Can you please consider updating the guide so that it actually installs 7.18.2 instead of 7.0.3?

Thanks.

rextended

why on first you do not wrote [find where="test"] ???
the reason why it doesn't work in the second line is the same.

you're close... compare the two [find ...] and see why the second one is not similar to the first one.

rextended

So, remove what? remove want a number (from print) or an item id... and MAC address is not one and not another.
why don't you put the [find where ...], that return the apporpriate id wanted from remove, in the script like on first line?

rextended

remove where?

rextended

FNleasetotal1 do not :return nothing...

rextended

Hi, I've try to be sure from several IPs, I got auth failed using password I-Am-Not-A-Cron-Script and user according the first post, pity

Certo che sei sveglio...

according the first post the free service no longer exist

rextended

This must be readed:
viewtopic.php?p=1126975&hilit=default+firewall#p1126789
and this:
viewtopic.php?p=1126975&hilit=default+firewall#p1126843
and this:
viewtopic.php?p=1126975&hilit=default+firewall#p1126890

rextended

rextended

Can you tell me where it is written?
Said by MT support in one of my tickets, when I had a similar issue.

They should write this publicly somewhere rather than reporting it in tickets...

rextended

There are routers that won't be accessible remotely to correct the ASN and/or router-id after the fact, so MikroTik should publish a valid/tested upgrade path (covering at least a few common setups) so we don't have to travel to remote datacenters and mountains to do the upgrade. In general, but wh...

rextended

user-manager do not exist at all on v7. On v7 they add a radius server called with same name, but is not the same thing. Even if it could hypothetically migrate something ("try"), it doesn't work as expected and has absolutely none of the tools that the user manager had before. The real us...

rextended

sendmail code

      :onerror errtext

I remember that somewhere I have already discussed this issue and for it to work correctly the variable must be defined first, if I remember correctly...
viewtopic.php?t=203158#p1046867

rextended

[:do ... on-error] was deprecated

Can you tell me where it is written?

rextended

Click here:
app.php/topicsolved/mark/solved/1144820

rextended

It's offtopic here.

rextended

Can't you at least show a little good will to conceal the fact that you're not here to be a leech?

:return "$($LcaseMnts->$mnthStart)/$[$Fzerofill $dayStart]/$yearStart $timeStart"

rextended

I found a temporary solution...if you unplug all the eth cable and leave only the power, it boot up normally.
try it

Your problem has absolutely nothing to do with what is described on this topic.

rextended

@jaclaz
The solution is on the script itself.
The feeds are over, we are not his employees.

rextended

For example: # for kill the EventHandler run /system script job remove [find where .id=$jobID] :global jobID *0 :global EventHandler do={ /log info "The interface $1 change status." # put here what you want to do after some checks, etc. :return 0 } :set jobID [:execute ":global EventH...

rextended

Does ROS provide a way of monitoring interface states or properties?

Not everywhere, but can be done by scripting.

rextended

The thread was revived re-stating the question in much more general terms, and Josephny's suggestion does cover one of the possible events that can happen on an interface. Honestly, it doesn't seem to me to be very far from the on-state-change / on-up / on-down requirement. It is more logical and c...

rextended

This works great for me:

Please see:

Doesn't cover the OP's request at all...

rextended

Evidence that proves this?

rextended

Another good point... ;)

rextended

The scheduler, script and on-event script are present on supout?
If yes: Except what is stored inside script, ANY script, on any position.

rextended

https://forum.mikrotik.com/viewtopic.php?p=858564#p858564 At the time there were no containers, but basically you need to back up and sync: files on device, eSIM, containers, the dude database, the dude files, user-manager database, user-manager files certificates (CA for generate new certs not long...

rextended

It looks like we found a workaround for scripts...

We? :lol:

FIX code

/ip/service set [find name="winbox" !dynamic] address=192.168.0.0/24

rextended

I suggest: Put port status in separate tab instead of mixing togeter configuration and working status

rextended

7.18.2 code
# software id = 6A66-ZR6Z
# serial number = ****
Last edited by BartoszP on 2025-05-29 10:52:34, edited 3 times in total. Reason: serial# obsfucation

Thanks.... but.... ;)

rextended

If you define service by number (numbers="") instead of name command

let's not start writing bull–t.

rextended

It looks like root of the problem might be in naming i.e. dynamic entries have same name as static ones. Right, for do test I use MAC telnet, because changing address cut me out from winbox.... Ok, another problem added... The problem is RouterOS... two entry with same name, only the last count... ...

rextended

Another note: Same error occurs when trying to set addresses parameter for other IP services. Our script sets address parameter for each of ssh, telnet and winbox, and all three routinely fail with the same error message shown above. Look at ip services output and you will understand why. Changing ...

rextended

When you asked "Google" to change google docs so that it doesn't automatically capitalize new line, what did they say to you? This tendency to pretend that because of others one must modify the behavior of one's programs denotes many things. Above all, where is it written that Google Docs ...

rextended

917.5kbps if you remove kbps remain 917.5 that on RouterOS is still a string because do not support decimal numbers, so, on that case: 123.45Mbps/917.5kbps split at bps/ and -3 length and you have: 123.4M and 917.5k If you want omogeneous numbers, convert both on bit: check if are present M or K and...

rextended

Y.Y.Y.Y is everytime 127.0.0.1???

rextended

*) bgp - decode and log notifications;

Thanks...

*) routing-filter - added filter-wizard (filter generator with v6-like syntax);

Uh....

rextended

I feel sorry for you, it's time you hire someone or study scripting.

We are not here to work for you, to explain to us step by step what you need and we will do it for you.

rextended

If you do not know scripting, you must not alter the function. so, between :global futuredatetimestr do={ and } you must not change or add anything. And if you have one example on how to call the function :put [$futuredatetimestr 1d00:00:00] you must respect that example so: :global futuredatetimest...

rextended

sure, if there is only one number in the pool, obviously it only assigns one...

rextended

basta che metti solo un IP, anziché un intervallo....

rextended

Now it's time for you to learn how to script, I can't spoon-feed you.

Use :pick

rextended

@pe1chl I want to be clear and precise: I am not saying that this is your error in any way. By the way, as you can see, I also tried it personally on the RB5009, and it seemed to work... Until I turned it back on day after when I read the problem on forum... What I was referring to is written here,...

rextended

Aside from the idiot (I'm referring to the one who was reported but the moderators didn't care and left the insult), we need to be objective. Let's base it on the facts. In RouterOS it is possible to start the device permanently with the factory bios, in case there are problems, in fact that option ...

rextended

But the most important question is: why if there is watchdog for this specific thing, you prefer to waste time making scripts? https://help.mikrotik.com/docs/spaces/ROS/pages/8978694/Watchdog If 8.8.8.8 do not respond for 6 times on 60 seconds, the device reboot (1 ping each 10 seconds is the defaul...

rextended

is not :execute /system reboot without quotas, is :execute "/system reboot" Writing script exports instead of scripts makes everything harder. Why don't you use winbox or terminal editor??? Also one line script is hard to fix and understand: :local failedCount 0; :local totalCount 20; :loc...

rextended

Is your copy&paste broken? Is not the same script.... [test@6.48.7] > :put [$futuredatetimestr 1d00:00:00] 2025/05/27 18:47:04 Are you able to read and understand previous posts? :local interval [/system scheduler get [find where name=TEST] interval ] and use CODE tag, not QUOTE tag, or make scr...

rextended

:global futuredatetimestr do={ /system clock :local vdate [get date] :local vtime [get time] :local vgmt [:tonum [get gmt-offset]]; :if ($vgmt > 0x7FFFFFFF) do={:set vgmt ($vgmt - 0x100000000)} :local prMntDays [:toarray "0,0,31,59,90,120,151,181,212,243,273,304,334"] :local daysOnMnt [:t...

rextended

add to current unix time the seconds from interval, and change back the unix time on date and time.

all functions to do that already exist on my repository

rextended

:local interval [/system scheduler get [find where name=TEST] interval ] {... :put $ interval {... :local interval do={ and then how many times must it be written that IT IS WRONG TO USE VARIABLE NAMES THAT ARE THE SAME AS OBJECTS THAT ALREADY EXIST ??? if you get "interval" you can not us...

rextended

Until you test the script on the terminal, you have everytime to confirm y/n.
Only :execute "/sys reboot" can avoid that on terminal (and is :execute "/sys reboot" not :execute {/sys reboot}).

If you run the script on scheduler, confirmation are not needed.

rextended

@felixka

BRAVO

rextended

Uselessly complex: /ip firewall address-list remove [find where list="list-name"] and the OP is "Remove Address List Entry by Comment" so: /ip firewall address-list remove [find where comment="the comment"] but that delete only when the comment is EXACTLY "the comm...

rextended

The instruments are all there.
viewtopic.php?t=177551#p977175

rextended

open separate topic and show "roguevpn" script

rextended

https://forum.mikrotik.com/viewtopic.php?p=1142228#p1142228 It all started from here, but whatever happens the forum users are not responsible for the firmware/software in any way. For the record: even my RB5009 where I did the tests (for 70x0 Armada), now that I tried to turn it on again, does not ...

rextended

WinBox 3 doesn't work with 7.21. WTF ??? Ok, WinBox 4 is still on beta , is far from be stable and interface usable on producion, and this is their move. (And what's the problem? Just use the classic method, just remove the "beta" label...) So from 7.21, if not already from 7.20, WinBox 3...

rextended

Hello,

over a 100 Cap's are down due to this 7.19 update!

And who made you update the devices in production with software that was just released yesterday???
But how do you work? Didn't you even take a separate test?

rextended

On the other hand idiots claiming that there is some secret reasons to do this anyway probably pushed some to do it Re: v7.18.2 [stable] is released! Post by rextended » Fri May 09, 2025 9:09 pm To avoid having problems like in other topics, it's better to update while you can... ignoring whether o...

rextended

"output=" is unrecognized RouterOS command.

you must pass a string to :execute, not a function result.

Where you see :execute [<something>] syntax?

rextended

there should be at least some "Show Password" option

Already exist from 2007.................. on Settings click on "Hide Password" tho show or hide password... on terminal is already showed, but the line on new v7 do not go on history.

rextended

I do not see any HA if you do not have 2 (two) different internet sources from different directions (yes, directions...).

You still have only one breaking point and if the switch breaks everything stops.

rextended

I'm sorry for being vague, I just looked at my IP-letter from the ISP where it says: (IP's changed) IP-addresses: 10.10.10.4-14 Gateway: 10.10.10.1 Netmask: 255.255.255.240 IP-Net: 10.10.10.0/28 and what happened to the .2 and .3???? a typo in the letter for sure??? So I guess I have to pick a port...

rextended

Why are you reading me if you blocked me? You are not consistent with what you write. 2. Testing it immediately requires a reboot, ever consider that the router may be in use and can't be instantly rebooted. As an excuse it's ridiculous, when you reset it you could have FIRST tried to reload the bac...

rextended

A /28 are 16 addresses or 14 if the ISP like wate ip, or 12 if ISP like wate ip and for ptp are used the IPs of the pool, not 10.... You didn't explain well, just gave vague clues. If your provider gives you 198.51.100.y as its IP and assigns you 198.51.100.(usually y +1 or y -1) and also gives you ...

rextended

What would be the request?

Do you expect any correct result by writing random things in the script?

Who is convinced that just using :toarray will convert that file into an array?
Ask whoever made that awful script.

rextended

firmware is firmware,
software is software.

Netinstall the device and see if is any error on formatting NAND/Flash

rextended

I do not have any experience with ups&mikrotik linked directly.

ups topic log all ups related logs, the same you can see on "memory"

rextended

Google "http error 301"...

rextended

"export" is better than backup, and why you set a password for yourself ? You are the first one who made a mistake, you should have tested if the backup you just made would recover , instead of hoping that it would work later. You can also write the password wrong twice in the same way...

rextended

I asked about the importance of that "Optimal nand stability requires a backup-routerboot upgrade" message but never got an answer. To avoid having problems like in other topics, it's better to update while you can... ignoring whether one uses that feature or not. There is more underneath...

rextended

..[CUT]..
Remember when something goes wrong during the upgrade, your device is bricked.
And do not bother trying to upgrade 16MB flash devices ..

And do not bother trying to upgrade unsupported devices ..

viewtopic.php?p=1142236#p1142236

rextended

just simply use url="..." with right parameters without all other useless frills.

rextended

Plus One Here !! :-)
This is NOT the place to ask for RouterOS improvements. It is for WinBox 4.

I think it's about exporting logins saved inside winbox, it has nothing to do with users inside routers.
I hope...

rextended

1) & 2) Yes! 3) I checked the documentation and I don't see what exactly will be written, and when (i.e., on what occurrences). Work exactly as "memory", just is saved on disk and persist after reboot. You can choice what event save on disk. Usually I save on disk only "critical&q...

rextended

(see next post)

rextended

What is the reply from Hikvision?

Hikvision produce the device, not MikroTik.

rextended

is /system, not :system do not use names for variables like what already exist Uusing separators, the English date format or the names of the months has always been a bullshit in computer science when it comes to "indexing" something. For names, use :pick to selectiveli get year, month, da...

rextended

curious what technology @rextended replaced it with I do not advertise for third parties, out of respect for the forum that hosts us. I have used, or rather I still use where I have now mounted it, the shitty products of Cambium Shittium, crappy interface and ridiculous functions. They always make ...

rextended

Their administrators are still convinced that 802.11ac is better than nv2. (yes, ac, is wanted)
From the lab tests this truth is overwhelming.
But they are all office workers, no one has ever gone out to get their hands dirty working with their own products as WISP.

rextended

1- Why is blocking ICMP a bad idea? It is written everywhere, and in any case the Linux kernel already prevents its abuse, therefore, apart from particular cases (which I do not want to talk about so as not to confuse) it should always be allowed for correct MTU negotiation. 2- Is the problem the M...

rextended

On the script the url is right, why on log the url is not the same?...

rextended

Google "http error 301"...

rextended

Contac support, not forum users...

rextended

You are all continuing to write in a circle, but no one has a response from the OP who wanted a solution IMMEDIATELY, instead he was written to 12 days later and the user has already disappeared. You are making empty conjectures, because: 1) You have no responses or confirmations; 2) In the "as...

rextended

For upgrading memory, you must open the lid... So, no warranty... ???

Do you know how to google?
try "open CRS520-4XS-16XQ" in the search...

How many active table you have on the device in production, and from what source?

rextended

If I remember correctly, or if it hasn't changed over time, it's not enough to be multihomed with two links to the same AS, but you need at least two different AS... Unless you need to assign different ways to reach different remote IPs, even if you have two or more providers, the default route will...

rextended

I have been using BGP on v6 for years, with no issues with IPv4 or IPv6. After some forced use of v7 on CCR2004, I removed that router because it works better with CCR1036 on v6. I can't wait for them to fix all the issues on v7. Listing here is pointless, the forum is full of complaints that have r...

rextended

In fact, that's what I wrote before... inside the house the ax products are valid, but outside they are like the ac ones without the nv2.
However many laboratory tests you can do, then in real life, and when it's your job, it's different.

rextended

Nv2 is the only thing that make usable RouterOS devices for WISP. Contrary to anything that someone who does NOT work as a WISP with MikroTik products might write, the NV2 is the only reason why I did not replace the MikroTik devices with others to work with years ago. Now in fact I do not use them ...

rextended

For what?

NV2 no longer exist and QuickSet is not for WISP.

rextended

Units should be consistent.

If calculations are in xiB, the result cannot be in xB

gigabyte => gibibyte

:local gb gib 1073741824

:local gb 1000000000

rextended

It is V i Tal that you ask your provider to protect you from (true) DDoS because you yourself have configured the device so that after a few minutes of DDoS the system crashes due to exhausted memory. The firewall is terrible and the choice to block ICMP is also terrible. Not to mention uselessly pr...

rextended

The logic of anything would be that they should not already be bridged ports before trying to put them in again...

The script assumes to configure a device that has never been configured, not to modify something that already exists...

rextended

hw=yes disabled=no are defaults, so, completely useless. :global GconnEth "ether1" ; # WAN interface :global GmgmtEth "ether5" ; # MGMT interface /int bridge remove [find] add name=bri-lan protocol-mode=none /int bridge port remove [find] :foreach iTest in=[/int ethernet find whe...

rextended

yes, thanks, fixed previous post

:local lrttavg           ($"rtt-avg"      / 1000)

# or with approx fix:
:local lrttavg           ($"rtt-avg"      / 1000)
:if (($"rtt-avg" % 1000) > 0) do={ :set lrttavg ($lrttavg + 1) }

rextended

So, the error message is correct, what do you expect?

rextended

/interface bridge port export

what show?

rextended

Just thinking aloud, but the "risk" [...] right... in pseudocode, just one example if (x % 1000) > 0 then add +1 to the result. on that way 00000 is 0, 100000 is 100 and all numbers between 000001 and 099999 are inside 001..100 but 100001 is 101 And the line " Netwatch had a down eve...

rextended

If you do not notice, the previous post is all what you need for write that line on logs.

rextended

or better for fix all, not only spaces.... /tool netwatch :local thisBox [/system identity get name] :local lhost [:toip $host] :local lstatus $status :local llosspercent ($"loss-percent" / 10) :local lrttavg ($"rtt-avg" / 1000) :local netwatchID ([find where host=$lhost and type...

rextended

easy for some problems:
was $roundrttavg ms
->
was $"roundrttavg"ms

rextended

academically that's one thing,
but in practice, just ignore microseconds and use milliseconds...
so a /1000 suffice...

instead if it were, for example, the voltage "2357",
there is a big difference between writing 23V and 23.57V

rextended

The FACTS are that what you are doing with SUPPORT is completely useless . Use the netinstall 7.12.x that works and forget about them fixing it for old factory-routerboot devices. If then the 7.18.2 factory-firmware update in your model works, MAYBE you have solved the problem. Since netinstall 7.12...

rextended

To avoid having problems like in other topics, it's better to update while you can... ignoring whether one uses that feature or not.
There is more underneath (unsaid, don't ask) that makes it worth updating.

ERRATA CORRIGE: ARM64 / AMPERE 70x0 (Armada) IS SUPPORTED

rextended

MikroTik has released a new update that also includes the ipq8060
It is worth a try...
viewtopic.php?p=1142236#p1142236

rextended

Note that the procedure to update the backup bootloader at https://help.mikrotik.com/docs/spaces/ROS/pages/40992878/RouterBOARD#RouterBOARD-Protectedbootloader has now been updated to support version 7.18.2 (ONLY!) so when you get those warnings about NAND stability after an upgrade, now is the tim...

rextended

That's just text describing what that value is, it's not operations... >< is used to identify where the value should be written, it's just text... :log info "runtime loss-percent is >$($llosspercent/10)< %" :log info "runtime rtt-avg is >$lrttavg< us >$($lrttavg/1000)< ms" It is ...

rextended

different internet connection.

rextended

I suggest you to use on pool IP range x.x.x.101 -> x.x.x.199 (99 dynamic devices on home suffice... or not?...) and when you set static lease change the y.y.y.1xx to y.y.y.201 next device y.y.y.202 next y.y.y.203 and so on till y.y.y.254 for each device (~54 static devices on home suffice... or not?...

rextended

Actualy sometime I get "500" error, but with "F5" all work again until the next time I open the forum next day.

rextended

W10 Pro for Workstations (64 bit) 22H2 19045.5796
F 138.0.1 (64 bit)

rextended

FYI, thr-loss-percent reports a value ten times the actual set value. That is, Netwatch has a value of 80% and the log shows: You do not read??? :log info "runtime loss-percent is >$llosspercent</10 %" $llosspercent /10 % And, the rtt-avg of 24516 actually means 24.516ms. The same: :log i...

rextended

the unique charm of RouterOS scripting isn't lost when someone stumbles upon rextended’s script collection.

Sorry, but in what sense, I don't understand...

rextended

:foreach i in=[/user-manager session find where active=no] do { /user-manager session remove $i; }

This remove only inactive sessions

Necroposting for that????

is better 2+2=4 or 1+2+3+4+5-11=4 ?

/user-manager session remove [find where active=no]

rextended

Necroposting for that????

:foreach i in=[/user-manager session find where active=no] do { /user-manager session remove $i; }

is better 2+2=4 or 1+2+3+4+5-11=4 ?

/user-manager session remove [find where active=no]

rextended

also the name can be omitted (...) or can be duplicated. This is how to read properties and runtime results: /tool netwatch :local lhost [:toip $host] :local lstatus $status :local lsince $since :local ldonetests $"done-tests" :local lfailedtests $"failed-tests" :local lsentcount...

rextended

Please provide an appropriate title, the current one IS WRONG and ONLY creates CONFUSION. First of all it is wrong to refer to netwatch in this way "/tool/netwatch get [find host=8.8.8.8]" because there can be more than 1 netwatch with the same IP 8.8.8.8, second, thr-avg is a property, an...

rextended

rextended

Before judging people [...] I didn't judge what you know, but how you behave. If I do something I don't know, I would never dare to write a title on a forum as if I were a RouterOS expert and there is a problem since 7.18.2. Your attitude is wrong and creates confusion for others. Chatgpt told me [...

rextended

Topic title: Can not create dummy ip pool 0.0.0.0-0.0.0.0 in routeros 7.18.2 ridiculous title Is there any version of RouterOS where such a stupid thing can be done? Chat gpt advises me chapgpt insist Any insight is much appreciated. SOLVED: The problem is not Sh1tGPT, it's you who listens to it.

rextended

I forgot to specify that you can specify BOTH a list AND an interface in the v7 VRF definition. for example: /ip vrf add name=vrfTEST interfaces=listForVRFtest,ether3 and both previous v7 methods are valid. Then I won't investigate further what happens if an interface is both in the list and specifi...

rextended

I add on previous post "example on v7 without list code"

rextended

More easy add/remove compared with v6 if you use interface list: # create vrf and list, or better, first the list, then the vrf... /interface list add name=listForVRFtest /ip vrf add interfaces=listForVRFtest name=vrfTEST # add interface /interface list member add list=listForVRFtest interface=ether...

rextended

Necroposting for nothing. The OP is very poorly written and explained even worse. Here we are, ten years later, and you still cannot add an interface to an existing VRF without replacing the existing ones... Don't write bulls–t. It's you who can't do it, not others. MikroTik can't fix your incompete...

rextended

providing scripts in this way, is really a bad way and should not be trusted (but I don't question the author of the OP) >>> dont-require-permissions=yes [...] policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon assigning ALL permissions to a script, especially if "pasted&qu...

rextended

You "knew about previous problems" with "old factory bootloader" and "why", but you didn't say any of this in your previous replies, and instead kept that knowledge to yourself. We are not mind readers here...we can only go off of what you actually say out loud , not w...

rextended

Sorry you wrote all this for nothing. OP can't read more than 2 lines in a single post that ignores the others, and you wrote a poem... https://forum.mikrotik.com/viewtopic.php?t=216303#p1140488 It has an ipq8060 chipset and the factory-firmware version is not upgradeable Despite what was clearly wr...

rextended

AI, or not AI, that is the question.

The last post.

rextended

<also can be here useless return> Honestly, I'm tired of writing the same thing a hundred times everywhere on the forum. Make do. I'm tired of always having to prove everything and that people constantly try to refute (even writing wrong things before even checking them, like the post before yours)...

rextended

I think you missed the previous pieces, it all started from this post:
viewtopic.php?t=215841#p1135988
and we're talking about how that script was written and why it causes errors when written that way.

rextended

Coming here and writing "there is an alternative solution to your solution, but it is more complex" (and it doesn't work) is not a great solution... A simple check in the function body fixes the problem: :if ([$len $0]!=0) do={ }. and something should be put in there anyway, so why not JUS...

rextended

On the 23rd I asked you to give some commands and write the result on the forum, but you didn't care. https://forum.mikrotik.com/viewtopic.php?t=94303#p580430 I managed to find a RouterBOARD 3011UiAS and checked it out. It has an ipq8060 chipset and the factory-firmware version is not upgradeable al...

rextended

Factory firmware is presently 7.18.2 on both routers. I don't think so, how did you update it? factory-firmware: 3.27 on bad router / 3.41 on good router current-firmware: 7.18.2 upgrade-firmware: 7.18.2 Premise: factory-software and factory-firmware are two completely different things that should ...

rextended

Well, if you simply base it, without reasoning, that someone work with MikroTik products only if and since is registered on the forum... [and aside from the fact that (read carefully again) the WORK/PLAY part wasn't in the least referred to you] I'll avoid answering the "who has the biggest&quo...

rextended

In meantime try to netinstall the device with netinstall64 7.16.2 Did you read it? I wrote it on the 23rd, but like everything else, you didn't care . If you read the post carefully or didn't get distracted by the other roosters, at least for Netinstall you would have solved it immediately. I then ...

rextended

Is a device upgraded from v6, have some leftovers. Remove supout, is only for support@mikrotik.com and not for be shared on user forum because can contain sensitive data. I strongly suggest you change all your RouterBOARD passwords and also your wireguard keys. Consider that everything written insid...

rextended

use netinstall and install again the 6.48.7

rextended

Starting from the fact that requests must be made to support@mikrotik.com and not on the user forum, and that the device-mode is made with the feet because it doesn't take into account the equipment already in production, by those who WORK with it and don't PLAY with it... It makes no sense at all, ...

rextended

Parenti... serpenti!

[Dearest relatives]

rextended

The last available is:
https://upgrade.mikrotik.com/firmware/EG12-EA/EG12EAPAR01A12M4G/image

No matter if is reported the last as EG12EAPAR01A13M4G

rextended

I use S.I.C.E. (Capannori, ~5Km from Lucca) as distributor for the equipments, they have a lot of well trained staff.

I am in the same region, but Lucca is a little far away...

Curious why you asked...

rextended

@jaclaz

on 3rd comment: ether1 is on LAN bridge and also on WAN

rextended

finally made a personal visit on site... a certain 5hitty tplink did the aforementioned filter... no comment...

Thank you all for your time.

rextended

check my post and tellme if it works for you
viewtopic.php?t=216387

the usual bull~it, nothing new

rextended

Blocking YouTube with DNS is something that works only if you have full control of the devices... By default, for example, when some browsers are installed, they use DoH and not the "classic" DNS... Every now and then someone on the forum brings these topics back into fashion with "so...

rextended

you're right, it's an oversight, and the change is bull–it. It says "accept" in the comment and I got confused add action= drop chain=input comment="defconf: accept ICMP" log=yes log-prefix=fw-3-drop-icmp protocol=icmp anyway for this "problem" I think it doesn't count

rextended

That's the right way to crash your router by running out of memory. (and often they do it on purpose, because the intent is not to break into the network, but to crash the router...) Automatic blacklists are for ISPs (neither, really...), not consumers. You don't have enough resources to stop real d...

rextended

Thanks for the tip.

For DNS, it definitely works at the command prompt, and there are no extensions installed on the browser.
(use my DNS and the servers server other 2000 customers that do not have that problem.
When I have physical access to the device then I will investigate further.

rextended

Just press the wrong button, and goodbye everything... /system routerboard reset-button set enabled=yes hold-time=5s..10s on-event=reset-configuration /system script add dont-require-permissions=yes name=reset-configuration owner=admin policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensit...

rextended

I'm not sure why you're accepting "untracked" in the first rule (i.e. connection-state=established,related ,untracked )... that is actually all traffic if it's first rule, I'm not sure why that is there... is the default https://forum.mikrotik.com/viewtopic.php?p=856824#p856824 untracked ...

rextended

I wrote "Maybe", not that you are, you just appeared on the forum.
I have been here longer, and maybe I really am...

...

rextended

do 2 VPN and use the adequate route like internet1/internet2 change...

rextended

... thanks ...

rextended

@eltikpad On the CPE if I connect, for example, with fetch on https://mail.yahoo.com it responds, and the https certificate is correct, once passed their tplink router (I really want to say that I neither sold it to him nor configured it), nothing that contains "mail" anywhere in the domai...

rextended

That's right, I provide the connection and public IPs, but I don't control or manage their internal routers. Yes, I checked my devices and there is no filter (stupid filter I would say) that does this thing, but if someone had already had to deal with something like this... maybe it was enlightening...

rextended

For ALL I mean ALL , not 1,3,4, etc............. sorry, almost all Are exactly 1000 tcp port, less than 2%. For almost , at least I expect 90%... Nmap for default scan exactly 1000 "random" ports? The #9 is still valid, till now... https://forum.mikrotik.com/viewtopic.php?p=1139632#p1139557

rextended

NOT MT related: All domains containing "mail" in any part of the FQDN do not work I have a customer who has this problem on his internal PCs. I can't go there to check it out in person right now, I had to limit myself to doing some quick checks with remote desktop. Anyone have any idea wha...

rextended

As you can see ALL ports are shown as opened.

For ALL I mean ALL, not 1,3,4, etc.............

rextended

The VPN (what is it?) does not pass through Internet1 or Internet2?

Redo the graph and you will understand why when the current Internet(1|2) does not work the VPN anymore

rextended

The more I look for the the WAN IP & router, the more I couldn't find it. Please edit your post and include verbatim copy of config using < / > code tags. Remove serials. No need to use external services. Is a spammer for the classical NameSurname and edit some week later the post for add the s...

rextended

WinBOX: "Couldn 't add New NAT Rule - to-addres or to-ports must be specified (6)" Terminal: "failure: to-addresses or to-ports must be specified" I thought so too, but evidently it is a censorship for the rest of the text of the comment which contained private data that was elid...

rextended

I wonder what the chances are that all ports are actually open, it's unlikely. Probably "tarpit" & co. are used by the ISP to avoid the hassles you generate with port scanners. Even my customers end up in blacklist for 24 hours if they start doing scans. Either they warn me beforehand,...

rextended

I reread everything quite carefully, but perhaps not enough, and nowhere did I read that he netinstalled the two routerboards one after the other instead of one the month before and one today. And I don't even think I read that when it fails with that one, putting another netinstall succeeds, etc. o...

rextended

If I try to netinstall 6.49.11 it says "Installing" for about 5 seconds then switches to "READY" it never formats the drive or installs routeros. Go on control panel/ethernet connections and disable all (included eg. bluetooth, wifi, etc.) devices except the ethernet used. Not m...

rextended

Bad assumptions: RouterOS do not support decimal numbers, only integer, so, only string if dot is present, or convert (using strings splitting at the dot) 1.480000 m to 1480 mm or 1480000 µm Use correct syntax, is full of errors and omissions. :local monGPS [/system gps monitor once as-value] :local...

rextended

Obviously the usual firewall considerations need to be made. Per i 2,5G ti consiglio una RB5009, è perfetta... A casa ho una 100M via CPE wireless RBSXTsqG-5acD... con me stesso... e la hEX-S è perfetta... stando in campagna niente fibra.............. Uh, questo è il post #13000, non me ne ero neanc...

rextended

( On v6 web interface exist "add batch" and you can download the list of generated users. )

rextended

He probably demanded an immediate answer... and he just go away...

However, by not explaining the reason, he doesn't get the right hint.

rextended

The main problem with .backup files is that if there is an error in the various databases where the configuration is, or "surprises" left by the migration from one version to another (you can read hundreds of cases on the forum) they carry the defects of one device to the next , without t...

rextended

He probably demanded an immediate answer... and he just go away...

rextended

It's not a competition . Just curiosity. - You have multiple remote customers Ok, you can (must...) have multiple .rsc for each customer, like you have multiple .backup for each custimer..... - Some of those remote customers may have different parts of the updates already configured. My .rsc script...

rextended

@Paternot Just let us export the backup from (say) RB5009 *DEAD* to *RB5009 NEW* @rextended Great, if you then explain to me how you export the backup from a dead device without extract nand/flash and put elsewhere, etc. And if she's dead, who cares if the new has that old MACs ... (in fact, it coul...

rextended

Maybe the meaning is "you can't use netinstall to install a remote device", if so. Otherwise it seems "You can't use the netinstall remote control "... FALSE: if you have the right devices available and connected properly. It is not the first time I do netinstall remotely from ot...

rextended

Great, if you then explain to me how you export the backup from a dead device without extract nand/flash and put elsewhere, etc. And if she's dead, who cares if the new has that old MACs... (in fact, it could sometimes be an advantage...) But... why? Because it's easier than managing .backup It does...

rextended

/tool user-manager user profile add user=user1

this do not exist and also not work, so, how you do that?

on user section use
/tool user-manager user create-and-activate-profile <username> profile=<profilename> customer=admin

rextended

But I have a total of 10 PPPoE interfaces that need to dial.

What are you waiting for to explain the whole situation, instead of wasting people's time by giving them one crumb at a time???

rextended

It's quicker to do a /export show-sensitive and then delete or reset to default everything that is not needed, it's safer...

If instead it is done to try to clean something "dirty", netinstall should be used...

rextended

[...] As in ISP , we use hundreds/thousands of identically configured Mikrotik routers. [...] [...] When we configure a new Mikrotik CPE [...] [...] the new Mikrotik CPE router is ready to be installed and added to our customer ISP network(s). [...] [..] bulk update newer master configurations to a...

rextended

As usual, no RouterOS version.

rextended

mikrotik default = bridge port 2..5
no default = no birdge...

mikrotik default = firewall OK if pppoe-out1 is added to WAN interface list
no default = NO firewall...

The bridge is internal between ether2...ether5 (+ sfp1)
pppoe-out1 (or ether1) never go on any bridge

rextended

la configurazione è tipo: pppoe 185.21.12.79 185.62.62.104 sprecato mikrotik brdge 185.62.62.105/29 NIC server1 185.62.62.106 / 255.255.255.248 / Gateway 185.62.62.105 NIC server2 185.62.62.107 / 255.255.255.248 / Gateway 185.62.62.105 NIC server3 185.62.62.108 / 255.255.255.248 / Gateway 185.62.62....

rextended

I don't want to sound like @anav with the answer, but you didn't even list a prerequisite or how the IPs are provided. Since NO ONE here in the forum is a fortune teller, but EVERYONE doesn't answer you exactly as you want or expect, BUT first they want to know why they should spend time for you... ...

rextended

Who am I to judge? No one, of course. Delete Facebook and fix the problem. If it's addictive, it will surely ruin your life in one way or another. If you don't have enough willpower, deactivating Facebook on this way (if possible), is like putting the bottle on the high shelf at a certain time for a...

rextended

Useless report without specifing RouterBOARD model (arm/mipsbe, etc.) and RouterOS version , and Useless report on user forum, instead of posting it on relative version topic and report to support@mikrotik.com And please search or read current version topic before post new topic, or at least post i...

rextended

All useless, with MAC randomizer on phone that change every hour...

rextended

I have the VICE of READING documentation, at least the little written, should be read...

At the time of the OP:
https://wiki.mikrotik.com/Manual:SNMP#R ... s_with_GET

Now:
https://help.mikrotik.com/docs/spaces/R ... ptswithGET

rextended

For the OP problem only the solution is simple, add "1" in the right point....

1.2.3.4 1.3.6.1.4.1.14988.1.1.8.1.1.3.3
=>
1.2.3.4 1.3.6.1.4.1.14988.1.1.18.1.1.3.3

rextended

Whatever happens,
RouterOS is still router software, it is certainly not a reliable compilation language for creating reliable programs,
let alone with instructions that are not even documented or whose existence is not even admitted...

rextended

however, as already written, the bug is the same of previous post links, already corrected on v7.something { :local a [:toarray ""] ; # define new empty array :set ($a->"x") "7" ; # on new array set x = 7 :local b $a ; # define a copy of the first array # put both 7 as ...

rextended

{ :local a ({}); :local b $a; :local setx do={ :set $x "X"}; ($setx <%% $b); :put $a} Incorrect: $ in front of an undeclared variable means argument! I know very well what $ is for. And where is the $x argument in all script except on :set ??? You pass only $0 So your error is even worse,...

rextended

The question is vague and there are no valid clues, I would never have used a version higher than 7.16.2 in production in devices that must necessarily have v7 because they are not supported by v6. Given the distance and the same problem, I could forcefully deduce that some configuration, applied on...

rextended

@optio Don't waste your time ("throwing pearls before swine" is rightly a saying that could be misinterpreted by artificial intelligences...) He's focusing on how to leave useless :return instead of understanding that must be removed as he's told from the post #3 (...#2...). Obviously he ...

rextended

Netinstall.

rextended

I have days to get production code running. I wouldn't hire you if you were the last person left. And if I saw any of my employees do something like that, I would have already fired them for incompetence. They both believed ":return" without value was okay. Any intelligent person who read...

Search found 13878 matches

sendmail code

FIX code

7.18.2 code