Community discussions

Search found 394 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 8
by troffasky
Sun Apr 07, 2019 11:56 am
Forum: General
Topic: IPV6 passthrough rules
Replies: 14
Views: 1332

Re: IPV6 passthrough rules

IPv6 Connection Type: Passthrough WAN IPv6 Address: 2001:568:8561:3800:4a5b:38ff:fe27:120/64 WAN IPv6 Gateway: fe80::72f1:86ff:fe95:1530 LAN IPv6 Address: 2001:568:8561:3800:4a5b:38ff:fe25:120/64 LAN IPv6 Link-Local Address: fe80::4a5b:38ff:fe27:120/64 LAN IPv6 Prefix: 2001:568:8561:3800::/64 DNS S...
by troffasky
Wed Apr 03, 2019 12:40 pm
Forum: General
Topic: IPV6 passthrough rules
Replies: 14
Views: 1332

Re: IPV6 passthrough rules

/ipv6 address add address=2001:568:8561:39ff:82f1:86ff:fe85:1531 disabled=yes interface=ether1 add address=2001:568:8561:39ff:82f1:86ff:fe85:1530 interface=bridge Two IPs from same subnet on LAN and WAN interfaces? What are you expecting to happen here? Perhaps reconnect your old router and "ip -6 ...
by troffasky
Thu Mar 14, 2019 11:47 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2019: new hardware
Replies: 61
Views: 10467

Re: MUM Europe 2019: new hardware

is a common designation use the term tri band router referring to a 2 x 5ghz + 1 2.4 ghz router
Just because it's common doesn't mean that it isn't idiocy. Shame that Mikrotik perpetuate this. It's like calling gigabit ethernet 2Gbps because it's 1Gbps in each direction.
by troffasky
Wed Apr 04, 2018 11:12 pm
Forum: General
Topic: Any plans to make cross-platform WinBox?
Replies: 33
Views: 2805

Re: Any plans to make cross-platform WinBox?

There doesn't have to be 2 separate apps, Mikrotik can abandon WinBox, it's UI looks a little archaic anyway and release a cross-platform Qt app :) Let's hope Mikrotik don't fix the "archaic" appearance of Winbox by turning it into some low-contrast abomination with gradient blends and animations. ...
by troffasky
Wed Mar 28, 2018 6:01 pm
Forum: RouterBOARD hardware
Topic: LHG 60G
Replies: 63
Views: 13340

Re: LHG 60G

Is 'wireless wire dish' same thing as LHG 60G?:

https://www.mikrotik.com/download/share ... reDish.pdf
by troffasky
Wed Mar 14, 2018 11:34 pm
Forum: Wireless Networking
Topic: CAPs devices working as independent from CAPsMAN as possible
Replies: 5
Views: 755

Re: CAPs devices working as independent from CAPsMAN as possible

I have considered some sort of back up scenario. Where the AP has the config in cap and it is set as the back up.
What we need is CAPsMANMAN to sync configs between main CAPsMAN and backup CAPsMAN. Maybe in v7.
by troffasky
Wed Mar 07, 2018 3:25 pm
Forum: Wireless Networking
Topic: CAPs devices working as independent from CAPsMAN as possible
Replies: 5
Views: 755

Re: CAPs devices working as independent from CAPsMAN as possible

I agree. In scenarios where CAPsMAN is not involved heavily with station traffic [eg local forwarding, WPA2-Personal], CAPs should not freak out because they can't see CAPsMAN. Consider also a scenario where CAPsMAN is centralised and maybe WAN link is congested. There should be a way to tune how lo...
by troffasky
Tue Mar 06, 2018 2:56 pm
Forum: Wireless Networking
Topic: hAP ac + wAP ac (as Wi-Fi coverage improvement).
Replies: 16
Views: 1817

Re: hAP ac + wAP ac (as Wi-Fi coverage improvement).

Yes, you can keep both APs on the same network.
by troffasky
Fri Mar 02, 2018 11:30 pm
Forum: Wireless Networking
Topic: Xiaomi phone low Wifi TX rate [SOLVED]
Replies: 112
Views: 25684

Re: Xiaomi phone low Wifi TX rate [SOLVED]

Do you suggest choosing a phone specifically for the router? Because not all phones work well with your devices. Are you seriously??? He said "Either solution works fine", so you can choose a different phone if you must keep using the RB951, or choose a different AP if you must use a specific incom...
by troffasky
Wed Feb 21, 2018 11:55 pm
Forum: General
Topic: IPv6 is not advertising (over PPPoE)
Replies: 18
Views: 2244

Re: IPv6 is not advertising (over PPPoE)

ROS6 uses kernel 3.3.5.
by troffasky
Wed Feb 21, 2018 6:07 pm
Forum: General
Topic: How to configure MikroTik to be primary router?
Replies: 24
Views: 1733

Re: How to configure MikroTik to be primary router?

The MT should be a router. It should get the public IP. From there onwards the ASUS will be one of the clients of the MT and will be in Bridge mode (as advised by ExpressVPN) , then even more the devices will all be connected to the ASUS. How would the port forwarding look like? What type of VPN it...
by troffasky
Tue Feb 20, 2018 2:46 pm
Forum: General
Topic: Router capacity
Replies: 14
Views: 1014

Re: Router capacity

Should we increase the APs numbers? Should we place them in a certain way allowing users to evenly connect to one of them? Should we work with the hotel’s equipment? Other suggestions? Dual band AP for sure. Hopefully some clients end up on 5G radio and some on 2G. Also, high-density wifi design is...
by troffasky
Tue Feb 20, 2018 2:36 pm
Forum: General
Topic: RB1100Dx4 Multicore issue ?
Replies: 18
Views: 1426

Re: RB1100Dx4 Multicore issue ?

I just want you guys to know the CCR1009 just solved the problem. every single core works!
Did you log a ticket with support? I am sure they would be interested to know.
by troffasky
Tue Feb 20, 2018 2:32 pm
Forum: General
Topic: How to configure MikroTik to be primary router?
Replies: 24
Views: 1733

Re: How to configure MikroTik to be primary router?

"Reasonable" is a question that only you can answer because it's your network. If you explained why you want to use both routers at once, perhaps someone could hazard a guess.
by troffasky
Wed Jan 10, 2018 11:16 pm
Forum: RouterBOARD hardware
Topic: [Solved] Wireless wire indoor use
Replies: 5
Views: 744

Re: [Solved] Wireless wire indoor use

"Same" if you're not bothered about lack of ethernet ports, yeah.
by troffasky
Sat Jan 06, 2018 2:45 am
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 313
Views: 83111

Re: Mikrotik VDSL / DSL Modem?

In case there's any lingering doubt about the economic viability of selling a DSL interface, look at how much red there is in the bar chart: https://www.ispreview.co.uk/index.php/2018/01/examining-countries-advertise-broadband-isp-speeds-vs-uk.html Two thirds of internet connections in the EU are su...
by troffasky
Thu Dec 28, 2017 8:09 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2017: new hardware incoming!
Replies: 86
Views: 20445

Re: MUM Europe 2017: new hardware incoming!

How is the CRS112-8P-4S coming along?
by troffasky
Thu Nov 30, 2017 2:56 pm
Forum: General
Topic: Forum troubles
Replies: 39
Views: 2555

Re: Forum troubles

I changed my forum theme to a forum theme that doesn't allow changing the forum theme, but as soon as I login to reply to this post, theme has gone back to the old default!
by troffasky
Sat Nov 25, 2017 12:56 am
Forum: Beginner Basics
Topic: Licensing quesiton.
Replies: 1
Views: 237

Re: Licensing quesiton.

All hardware from Mikrotik that runs RouterOS ships with a license key.
License-key-on-HDD is only relevant to non-Mikrotik hardware running RouterOS.
Licensing is not related to management of the router and who has access to it.
by troffasky
Sat Nov 25, 2017 12:53 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 121047

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) firewall - added "tls-host" firewall matcher (CLI only); Sweet. No more Layer 7 for HTTPS blocking :) How it works? Which packet matches? Does it support wildcards? I presume this is just a special case of a Layer 7 with some pre-defined pattern, and only works when SNI is used. No need for SNI,...
by troffasky
Wed Nov 22, 2017 6:05 pm
Forum: RouterBOARD hardware
Topic: mAP and wAP 48v DC Jack 8-57v - FALSE
Replies: 2
Views: 532

Re: mAP and wAP 48v DC Jack 8-57v - FALSE

Probably better to email support if a proper response is required.
by troffasky
Wed Nov 22, 2017 12:38 am
Forum: Beginner Basics
Topic: Cisco ASA change to CCR1072
Replies: 6
Views: 797

Re: Cisco ASA change to CCR1072

Dear Forum Users, I would like to change my two Cisco ASA 5520 for two MikroTik CCR1072-1G-8S+. The Cisco ASA 5520 firewall throughput 450Mbps. This value is few. I'm looking for a device that knows the following: - device redundancy ( High Availability / Failover ) Unfortunately there isn't native...
by troffasky
Wed Nov 22, 2017 12:17 am
Forum: Wireless Networking
Topic: Noise Floor
Replies: 7
Views: 5398

Re: Noise Floor

Do you actually get better speeds/lower packet loss?

A few possibilities:
- Better RF design with improved filtering and rejection will get you a better noise floor
- Perhaps old card wasn't seated/connected properly
- Cards may not be calibrated the same
- Different cards may have different firmware
by troffasky
Mon Nov 20, 2017 7:18 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 121047

Re: v6.41rc [release candidate] is released! New bridge implementation!

You have 15 sites of a problematic type for which it costs $1000 to make a support visit and you don't have a way to test a similar site from home (a subscription to the same satellite service)? Don't need a satellite dish to emulate the behaviour of a typical satellite link: https://wiki.linuxfoun...
by troffasky
Sat Nov 18, 2017 11:47 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 313
Views: 83111

Re: Mikrotik VDSL / DSL Modem?

BTW, are there any cheap mini-PCI VDSL
I haven't been able to find a mini-PCI(e) VDSL interface at any price, never mind cheap.
by troffasky
Sat Nov 18, 2017 12:11 pm
Forum: General
Topic: Where is my 10 Gb ?
Replies: 4
Views: 598

Re: Where is my 10 Gb ?

Probably CPU can't saturate 10Gbps link, however, those results do seem a little low.
What happens if you try 1G copper link instead?
A more realistic result will be obtained by testing with a device connected to each switch.
by troffasky
Sat Nov 18, 2017 11:25 am
Forum: General
Topic: Global DNS Ping fluctuating in mikroitk ccr1009
Replies: 3
Views: 369

Re: Global DNS Ping fluctuating in mikroitk ccr1009

Any other destinations affected? Even though it is regularly used as such, 8.8.8.8 is not a "monitoring service". I had to switch a customer from pinging 8.8.8.8 to 8.8.4.4 for state tracking, because the former stopped responding [but only on one of their WANs].
by troffasky
Sat Nov 18, 2017 12:21 am
Forum: General
Topic: Bug: SNMP over VRRP interface problem
Replies: 19
Views: 1946

Re: Bug: SNMP over VRRP interface problem

Look further up the page:

viewtopic.php?p=628352#p605812
by troffasky
Fri Nov 17, 2017 6:45 pm
Forum: RouterBOARD hardware
Topic: New hardware - mAP
Replies: 153
Views: 49904

Re: New hardware - mAP

You could read between the lines as follows - this page has been obsoleted:

https://wiki.mikrotik.com/wiki/Supported_Hardware

in favour of this page:

https://wiki.mikrotik.com/wiki/Manual:Peripherals

so you could read that as no, no USB NIC support.
by troffasky
Thu Nov 16, 2017 11:59 pm
Forum: Wireless Networking
Topic: Setup WISP for 1.5km from base...
Replies: 9
Views: 857

Re: Setup WISP for 1.5km from base...

Whats the procedure to cover network for whole area ? Can u mention Network diagram and devices ? You need to backhaul your APs with something. You will struggle if you try to provide access and do backhauling in 2.4GHz band. Sure, Wifi repeater products exist [maybe even RouterOS can be persuaded ...
by troffasky
Thu Nov 16, 2017 6:39 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 841

Re: HTTPS does not records in Mikrotik log

Ok, I understand now. is there is a expert way to trace the encrypted HTTPS requests? because I want to record all breached roles. You can monitor encrypted traffic but there are legal and technical obstacles. You need to a) work out if it's legal where you are b) get the monitored devices to trust...
by troffasky
Thu Nov 16, 2017 6:34 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 841

Re: HTTPS does not records in Mikrotik log

How is the squid transparently proxying https without the end user getting problems?
Having re-read the thread, I have misunderstood. I had assumed the OP was using an explicit proxy not a transparent one.
by troffasky
Thu Nov 16, 2017 6:30 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 841

Re: HTTPS does not records in Mikrotik log

This is not possible I have to disagree here. As an example, Squid logs the hostname that it proxied the connection to along with the number of bytes transferred. Hi troffasky, Could you please give me notes about squid logs to Monitoring of web searches and video viewing by employees especially "h...
by troffasky
Wed Nov 15, 2017 6:12 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 841

Re: HTTPS does not records in Mikrotik log

This is not possible
I have to disagree here. As an example, Squid logs the hostname that it proxied the connection to along with the number of bytes transferred.
by troffasky
Wed Nov 15, 2017 6:09 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 46
Views: 10508

Re: Band Steering implementation?

How different beacon intervals can assure that one will be always before another if none knows when a client starts to scan and at what frequency it will be and how long he will be scanning before he decides to select an ap to try to connect? You can't be assured [ie 100% certain], but you don't ne...
by troffasky
Wed Nov 15, 2017 6:06 pm
Forum: Wireless Networking
Topic: Setup WISP for 1.5km from base...
Replies: 9
Views: 857

Re: Setup WISP for 1.5km from base...

If you literally mean "wifi repeater" then just give up now, because you won't get anywhere with it. If by "repeater" you mean "2.4GHz AP backhauled to <somewhere> with <something>" where <something> is a cable or a wireless connection on a different band, then you're getting warmer. Just bear in mi...
by troffasky
Sun Nov 05, 2017 11:18 pm
Forum: General
Topic: RouterOS supported hardware
Replies: 29
Views: 24046

Re: RouterOS supported hardware

Works for me.
by troffasky
Sun Nov 05, 2017 11:16 pm
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 7387

Re: Help me stop MAC spoofing

Off course someone can give login information to other people.
...which is an improvement on "other people" just taking your login without you knowing about it!
by troffasky
Sun Nov 05, 2017 1:40 pm
Forum: RouterBOARD hardware
Topic: Fastest Router for rough conditions
Replies: 2
Views: 494

Re: Fastest Router for rough conditions

You might want to state what kind of operating temperature range you're seeing and expecting to see.
by troffasky
Sun Nov 05, 2017 1:38 pm
Forum: Wireless Networking
Topic: 5 GHz 360+ km Wi-Fi link via tropospheric ducting propagation
Replies: 2
Views: 604

Re: 5 GHz 360+ km Wi-Fi link via tropospheric ducting propagation

I didn't even know DXing on 5GHz was a thing until I saw this. Impressive stuff!
by troffasky
Sun Nov 05, 2017 12:26 am
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 7387

Re: Help me stop MAC spoofing

wifi scanners scans for the ip range therefore if you prevent it from showing ip addresses mac addresses wont be listed too I think you are confused. I linked to a screenshot of a wifi scanner by the name of "kismet", a tool I have used myself [you can also verify this easily enough, because it - a...
by troffasky
Wed Nov 01, 2017 12:28 am
Forum: General
Topic: Ipsec Site to Site, again...
Replies: 14
Views: 1763

Re: Ipsec Site to Site, again...

The only thing i can think is: from terminal in mikrotik the ping is sent from the WAN interface and that's why i see the hops like a traceroute to a normal site. I'm on the right way? Deunan. Yes, you're close. You will probably find that if you add src-address=<LAN IP> to your ping command, it wo...
by troffasky
Tue Oct 31, 2017 2:43 pm
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 7387

Re: Help me stop MAC spoofing

what you can do is prevent wifi scanners from showing your clients,s mac addresses by changing the network prefix lenghth from 24 to 32 MAC addresses are not encrypted on wifi. You can confirm this yourself with a tool like Kismet, eg: https://lh6.googleusercontent.com/VjbpXPoLPKGEjt-1WDc7QlOGP9an7...
by troffasky
Tue Oct 31, 2017 11:01 am
Forum: Beginner Basics
Topic: Random Websites Will Not Load\Open
Replies: 5
Views: 982

Re: Random Websites Will Not Load\Open

The definitive answer will come from your ISP, but generally speaking, 1500 if the service is delivered over ethernet, 1492 if it's coming over DSL. Also, blocking ICMP will prevent Path MTU Discovery from working and PMTUD can be helpful.
by troffasky
Fri Oct 27, 2017 3:12 pm
Forum: Beginner Basics
Topic: Business with limited Bandwidth and out of control usage
Replies: 6
Views: 620

Re: Business with limited Bandwidth and out of control usage

Just looked at squid logs, CONNECT method shows bytes transferred as well. So not useless at all :-)
by troffasky
Fri Oct 27, 2017 5:44 am
Forum: Beginner Basics
Topic: VPN blocked in mikrotik?
Replies: 4
Views: 560

Re: VPN blocked in mikrotik?

The issue with OpenVPN UDP and RouterOS is where RouterOS is terminating the OpenVPN connection, not with OpenVPN endpoints connecting through RouterOS.
by troffasky
Fri Oct 27, 2017 5:34 am
Forum: Beginner Basics
Topic: Random Websites Will Not Load\Open
Replies: 5
Views: 982

Re: Random Websites Will Not Load\Open

I would start by checking out MTU.
by troffasky
Fri Oct 27, 2017 5:23 am
Forum: General
Topic: VoIP - Implemented in RouterOS
Replies: 23
Views: 2344

Re: VoIP - Implemented in RouterOS

Three points: Mikrotik need to focus on the fundamentals. Phone system probably doesn't belong in RouterOS. Mikrotik could build an "app store" of third-party RouterOS modules, of which one could be a phone system, I guess? The closest thing to a phone system that belongs in RouterOS is a) a SIP ALG...
by troffasky
Fri Oct 27, 2017 5:09 am
Forum: Beginner Basics
Topic: Business with limited Bandwidth and out of control usage
Replies: 6
Views: 620

Re: Business with limited Bandwidth and out of control usage

I would start by just putting Squid on the LAN and blocking web access from everything else. This would require that you explicitly configure the clients to use the proxy server. You can then watch the router to see who is still trying to get out on to the internet directly rather than via the proxy...
by troffasky
Sun Oct 22, 2017 12:17 pm
Forum: RouterBOARD hardware
Topic: Add WiFi interface to RouterOS in VirtualBox environment
Replies: 2
Views: 774

Re: Add WiFi interface to RouterOS in VirtualBox environment

Have you looked in to PCI(e) passthrough? A quick Google suggests that it actually won't be easy, but it should be possible.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 8