MikroTik

Spirch

not even sure if this is possible

anyone tried to get proton bridge running in a container, with a smtp relay so it's open to anything on the network (proton bridge explicitly listen on 127.0.0.1)

specifically on rb5009?

Spirch

Just as you see use cases for what you requested (keep user from locking self out of router by dedsult) I can see the oposite: many users forgetting to press that "commit" (or "un-safe" or whatever) button before logging out and thus loosing all the changes made during the sessi...

Spirch

they responded with

Thank you for your request, if there will be more, similar requests like yours, we will see how this can be added in future versions.

so you know what to do, start asking for it

(create new ticket, i think this is what they meant)

Spirch

add option: auto safe mode on startup :-(

Spirch

sticky this, i didnt see it until now

Spirch

between dark theme and an option to automatically turn safe mode on, i would do safe mode first and then dark theme

Spirch

when running on windows 10 enterprise, up to date as of yesterday

Capture.PNG

Spirch

would it be possible to add an option to auto enable safe mode on connection?

Spirch

hopefully this will be added, i hope it a very simple thing to implement

Spirch

i just made a mistake today that took me a while to fix, yeeeeee

can we have an option in winbox to auto start safe mode on connect?

Spirch

https://blog.mikrotik.com/ is the blog still valid place for security updates? (where to follow, rss still enabled, or are there better places to get notifications, if something goes wrong?) Yes. There have been no security incidents lately, this is why there is nothing new there. you had to say it...

Spirch

being a rb5009 home user doing basic stuff (firewall, vlan, wireguard, pppoe client for internet, ipv4 only) on 7.6, no issue to my knowledge

is there something for me from 7.7 to 7.9 that would benefit me? looking at the changelog i see nothing and i'm kind of, if not broken dont updating it

Spirch

can you add a column: number of packet loss, I don't really want the rounded %

since you can calculate the %, you should have the number, just show it

Spirch

Apart from very few models (which use multiple power sources or have internal power adapter), all Mikrotiks pass voltage as is. So if you power your RB5009UPr with 48V adapter, all PoE out will have 48V. Connecting RB951, which requires 8-30V, will likely have bad consequences. You have option to c...

Spirch

when using the powerbrick provided which is 48v-2a from rb5009UPr setting forced poe out to rb951ui passive poe in (8-30v)

it will not work or break something right?

Spirch

In the case of NAS, assuming you share files with folks there, and there might be some dependencies such as running a unifi controller?? So sorting that particular device out would be paramount. It should get its IP address and be configurable only on the management vlan. How many ethernet port doe...

Spirch

I'm open to any constructive criticism 8) a question that i ask myself, should the dlink be on vlan1 or it own vlan (like now) or with another vlan? also, the truenas, the port have it own vlan while inside the configuration of truenas I created 2 vlan one for itself and one for a jail for the unifi...

Spirch

The death of the router in the event of a DDoS attack: /ip firewall raw [...] log=yes [...] On kernel this is already prevented for ICMP, this is useless: [...] comment="Accept ICMP Echo request - Avoiding Ping Flood" [...] limit=1,5:packet [...] i took the "original" icmp (and ...

Spirch

You can change on "pppoe-profile" all this: on-down="[…]" on-up="[…]" with just simply set on "address-list" field the value "external-ip"… for some reason my pppoe get 2 ip, one local and one remote, if I set that field it pick the wrong one local ...

Spirch

Personally I would simplify and remove half the bloatware you have going but if it works for you..............

do you mean vlan or firewall or ... ? be more specific please ...

the only "bloatware" i can think of is the raw firewall

Spirch

I never connect to my router remotely use winbox......... You are not showing the full config and dont work from snippets. thanks for these 2 points; "support" address list is just internal ip address, mostly some ip address in vlan_primary, nothing remotly like i said in my post I just r...

Spirch

been a user of this forum for a long time and I don't think I ever asked this. :shock: this is home user scenario I setup every device on my network to use the dns / ntp server of the router I control which group of device OR device have access to each other or the web I don't use fast track on the ...

Spirch

you might have more luck asking here https://www.dslreports.com/forum/sympat or here https://www.dslreports.com/forum/sympatdirect maybe your profile is wrong on bell side, thing is i think they are actively replacing the 3k serie with the 4k one which have no spf or way to do what your doing so if ...

Spirch

the rb5009 replaced a hap ac2, i dont think the config will help since i had no issue before I think what is happening (and i read other similar report while searching) is since my internet speed is a little bit faster than 1gig and that my internet come from the 2.5gig, the data come faster than my...

Spirch

i don't want to say it too fast, sorry for the fast reply, setting higher queue size seem to fix it (for) now, i have set 500 instead of 50

Spirch

correction, i'm still getting (less) tx drop with ethernet-default

Spirch

hello on 7.6 i just saw that i was having consistent tx drop while performing speed test on my wan that need to use vlan looking around, i found thread that are about 10 years old that suggested to change the queue type from only-hardware-queue to ethernet-default switched to that and it look like i...

Spirch

hopefully it's just noise in the log Yes, it is. The DHCP server intercepts the packets before they reach the firewall (something is telling me that this is not the case for DHCPv6), so the clients do get the assignment normally but the firewall shows drops. To get rid of that noise, add an action=...

Spirch

I might play with this solution (single ip for all) so, I created a dummy vlan, dummy dhcp-server (both can't be really used or get any ip/client) and using this as single endpoint for ntp/dns server I created an interface list that have all the valid vlan and created a single firewall rule to allo...

Spirch

First: your accept rules allow any kind of srrvice access from configured subnets and interfaces. Which includes management access. This may or may not be how you want it to be. Next: filtering by dst-address doesn't filter by clients. E.g. any of clients clients can access router's services at 192...

Spirch

I'm not sure how to format my question, sorry if it's confusing I have enabled dns server and ntp server on my router /ip dns set allow-remote-requests=yes cache-max-ttl=1d /system ntp server set enabled=yes I have multiple dhcp server and they have the dns / ntp ip configured as the gateway ip /ip ...

Spirch

You ask what issues you can expect but that really can only be answered when we know what features you have configured.

home user with multiple vlan using bridge and firewall to control access

a "normal" router usage

Spirch

When omitting the export/import step you can test if it works, but several users have eventually encountered problems that can only be solved by taking these steps. (apparently the conversion somehow corrupts the binary config database) good to know, thanks! this is the kind of gotcha I was hoping ...

Spirch

What features are you using now? Perhaps post your sanitized /export hide-sensitive and people will be able to tell you if you are likely to run into problems. I have multiple vlan, I upgraded my internet connection and I am capped under my maximum speed because fast track doesnt work with vlan fil...

Spirch

I need the feature of 7.2 that enable fast track for vlan-filtering [...] I am using hap ac2. Why 7.2 when the last is 7.6 and where you read than on v7 is added the support for fast track for vlan-filtering on hAP ac²? I said 7 (meaning latest one, sorry I should have been more explicit), I mentio...

Spirch

is there any new setting I should enable or disable or change or look at

or I should expect the exact "same" general behavior?

Spirch

I need the feature of 7.2 that enable fast track for vlan-filtering

What should I know, I am using hap ac2.

Any gotcha I should know or thing I should do / prepare before or after the upgrade?

Spirch

I will be changing my WAN provider (same ISP), I think the new one will be using ipv6. What are the general step to move from ipv4 to ipv6? if possible I would like to keep my current configuration for my network. I just want my dhcp client to be working. I currently don't have ipv6 package installe...

Spirch

usb3, which one? also, white usb normally mean 2.0 :-P

Spirch

interesting, just missing the test results tab on the product page of the hap ax3 so we can compare to ax2

1 2.5gig. nice

Spirch

† *) radius - require "policy" policy for "login" service configuration; Nooo.... 😥😥😥 Unfortunately you have noticed it... I have always used it to scale permissions and become an administrator even in RouterBOARD which I did not have administrative access... Now than the pandor...

Spirch

finally ax! but sadly no 6ghz / 6e

Spirch

can you provide smaller packages for wifi2, this will increase the number of people that can test it and provide more feedback, my mikrotik does have 256m ram but 16m hd

Spirch

still hoping to have a small wifi2 package for device that have small space

Spirch

after playing a few more hours with all this switch vlan vs bridge vlan saga here what i saw intervlan , doesnt matter same speed on both, slow, always need to go though cpu. same vlan , this is what I found and where i need to retract some of my statement above. first I was not resetting the whole ...

Spirch

There is additional overhead with routing compared to software bridging. I would still expect somewhat better routing performance from a hAP ac2. same from me :( I use my nas to record multiple 24/7 cctv That was my reason to have it on a different vlan, now i'm using the ip firewall to restrain ac...

Spirch

what a hunk of junk, even an hex or capac, handles that with ease........... They would as the processors are several times more powerful: RB951G-2HnD - single-core 600MHz MIPS hEX - dual-core 880MHz MIPS cAP ac - quad-core 716MHz ARM sadly even with hap ac2, a way more powerful cpu than RB951G-2Hn...

Spirch

Wow, really tdw? what a hunk of junk, even an hex or capac, handles that with ease........... vlan hardware offload from nas to pc, wire speed 1 gig bridge vlan without hardware offload from nas to pc, between 300 to 400 mbits/sec i tested it and that is why i went to the very difficult path of swi...

Spirch

Yes
/interface ethernet switch port
set 0 default-vlan-id=70; set 5 default-vlan-id=70
(obviously with safe mode, just in case)

ok, i didnt know about the delimited ;

thanks!

Spirch

this is about switch vlan with hardware offloading, not bridge vlan I assume the answer is " no " but I will ask it anyway. Is it possible to have wirespeed with intervlan? My understanding is; To be able to do intervlan, vlan need to go in the switch-cpu which mean it's not possible to re...

Spirch

The /ip dhcp-client add disabled=no interface=bridge-ALL configuration will acquire an address using untagged traffic through the switch1-cpu port. This currently has PVID 1, the export does not show the deafults, fully it would be set 5 default-vlan-id=1 vlan-mode=secure . Similarly the ether1-WAN...

Spirch

I finally did it I just created a dummy wireless connection on the 951G-2HnD, no specified vlan or anything and connected using mac address instead of ip using the mobile app on my phone I set default-vlan-id=70 to ether1-wan and switch-cpu and removed the vlan-id=1 entry look like it had to be done...

Spirch

So the switch even doesn't have IP address assigned? How do you manage it then? switch get it 192.168.70.10 ip from hap ac2 properly i'm connecting to it from my computer, my computer is connected to the hap ac2 i guess i didnt select until the end of the export on the 951G-2HnD /ip dhcp-client add...

Spirch

Is this truly the whole config? It lacks L2.5 setup (like /interface vlan section) and L3 setup (IP addresses etc.) ... but everything matters. If the shown setup is not whole of it, post everything. If this is the whole thing then ... well, try to fill in the voids. dhcp server is on another route...

Spirch

hello i'm trying to get rid of vlan 1 on a 951G-2HnD here is the config, # model = 951G-2HnD /interface bridge add name=bridge-ALL /interface ethernet set [ find default-name=ether1 ] name=ether1-WAN set [ find default-name=ether2 ] name=ether2-Mini-PC set [ find default-name=ether3 ] name=ether3-TV...

Spirch

I think I found my issue (i should know more later today, when i have time to play around) if you use the terminal and follow the guide /interface ethernet switch vlan add ports=ether1,ether2 switch=switch1 vlan-id=20 this will also set independent-learning=true if you use winbox, default value is i...

Spirch

Yeah its not optimal try this as a guide........ https://forum.mikrotik.com/viewtopic.php?t=143620 as for mt docs.... https://help.mikrotik.com/docs/display/ROS/Bridge+VLAN+Table both link only talk about bridge vlan, not switch vlan :( https://help.mikrotik.com/docs/display/ROS/Basic+VLAN+switchin...

Spirch

I have a hAP AC2 which use Atheros 8327 chip I currently have (after struggling a few hours, thanks for the safe button ) bridge vlan working. I am sure if you look at this config, you will say: it all wrong. And I am sure you right, even after watching a few video / tutorial I am not sure how to pr...

Spirch

To all the people asking questions, do not modify or change firewall rules unless you know what you are doing! Simply adding a block rule to your config, on the input chain, could easily lock yourself out of the router. Ensure you have access as an admin in a higher up (in order) input chain rule a...

Spirch

any hope to get a smaller wifiwave2 packages, i have an early cap ac / hap ac2 version with 256 meg of ram but with the small space, i would love to try it out

Spirch

so let say i have 3 access point with access list that specify minimum range of -60 scenario; one goes down, let say a reboot was needed how to allow clients to connect to other one with a bad/slower connection (having the 2 other active one reducing the limit to let say -70) until it goes up again?...

Spirch

you are lucky,
some of the early batches had 256Mb of ram due to 128Mb module shortage.

ha, i didnt know

i got mine when it got released, i wish it had more HD space too

Spirch

so i have a cap ac2 and hap ac2

both device return 256 for each but

https://mikrotik.com/product/cap_ac
and
https://mikrotik.com/product/hap_ac2

say that it should be 128

not sure what is going on here?

hap-ac2.png

cap-ac.png

Spirch

all device are compatible or compatible device list available somewhere?

Spirch

sometime the easiest solution is the proper one, first few hours with that simple filter rules seem to work

i though it would need something way more complex

thanks again!

Spirch

Limit to 1 connection over 3 min, but you do not have any warranty if connect send dozen email within same sesssion on firewall fiter, if are matched src-ip add src-ip to drop-list for 3 min make one previous rule block that list done. supposing the IP of the device are 100.70.40.10 /ip firewall fi...

Spirch

i don't know if this is possible. situation: i have a device that i have no control over it in general it behave properly, just the proper amount of email. Port 587 is open for that ip to allow sending email. problem: sometime it start sending multiple email per minutes for no reason whatsoever, for...

Spirch

for me i decided to wait a week or 2 after it got released and when i saw all the bad thing i just decided to wait

i will do the same thing with 4.8.1, i'm in no rush to update my device

Spirch

here it is, i didnt think other stuff were needed other that wifi config MMM MMM KKK TTTTTTTTTTT KKK MMMM MMMM KKK TTTTTTTTTTT KKK MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK MMM MMM III ...

Spirch

hello it seem sometime i have higher upload than download depending where i am in the house, mostly on the 2.4 band do you see any issue with this config? if anything missing, ask # dec/07/2020 13:43:46 by RouterOS 6.47.7 # model = RouterBOARD cAP Gi-5acD2nD /interface wireless set [ find default-na...

Spirch

i have a drop by default behaviour, i create rules to allow traffics I have now switched to 1 rule per camera and allow one packet per minute instead of one connection. so far this seem to be working, which mean you might be right that a connection was kept open and it might be sending multiple emai...

Spirch

hello i have this simple firewall rule (for cameras); add action =accept chain =forward dst-limit =1/1m,0,src-address/1m40s dst-port =587 protocol =tcp src-address-list =support-CAM my assumption is 1 camera can send 1 email per minute what i am seeing is that there is a lot of email received per mi...

Spirch

ok, i will take a look at vlan any recommended link (other the mikrotik wiki)? text or video. link that can be useful for me, having cAP and hAP, hAP being the main device like link for beginner with kind of best practice, i don't want to follow a guide that will leave security or performance on the...

Spirch

i'm not sure how to create a network diagram but mostly; on the cAP: wireless access point lan1 connected to hAP lan2 connected to dumb switch that provide POE power / access to multiple security camera on the hAP: second wireless access point, main device, dhcp server lan1 connected to isp lan2 con...

Spirch

after testing around with capsman, i made it work ok but after searching online, i can see that the issue of slowness that affect me, affect a lot other people i went back to what it was for now and i will continue looking into a way to route the wireless data/connection from the cAP into the hAP so...

Spirch

Would the best solution be to use CAPsMAN on the hAP to manage all the wireless interfaces and set the datapath to disable local forwarding? thanks this was it i think. i never looked into capsman, tookme 30-45 minutes to get it up and working, nice to see that all 4 wireless (2 per device) are now...

Spirch

i will look into capsman, thanks

Spirch

So, you re telling that up to now you were using a Dynamic Address List to block Wireless clients accessing Local Resources (Layer 2 Traffic )using the Firewall... And now you want to extend that on CAP... You know that this is possible only by using Bridge Firewall right ? Otherwise you blocked no...

Spirch

The "other device connected to cAP" is connected also wirelessly or to the remaining Ethernet port?

both but to be more specific, i want to make sure some wireless client doesn't get to the remaining port, the other way around for now is not important (would be a nice to have i guess)

Spirch

i want all traffic to go through the hAP The traffic anyways will go through the HAP when it must go through the HAP... HAP is your Router, when traffic needs to be routed will go through it... Other than that, HAP can handle Layer 2 traffic and CAP can do it as well... For example, when 2 wireless...

Spirch

if what i'm trying to do is not possible, my next question would be how to bring dynamic address list from the hAP to the cAP

bringing static address list are easy and firewall rule is easy, just not fun to maintain when thing changes, this is what i'm trying to avoid.

Spirch

I have removed hardware offload on both I don't see the reason to do that... You miss one important thing, the devices within the same Broadcast Domain are communicating to each other in the Layer 2, using MAC addresses. Layer 2 Traffic, does not pass through the Firewall. Layer 3 Traffic on the ot...

Spirch

So export the configuration of the cAP to get a useful advice. Check my automatic signature below before posting it. here it is [admin@MikroTik-W] > export hide-sensitive # apr/26/2020 15:52:08 by RouterOS 6.46.4 # model = RouterBOARD cAP Gi-5acD2nD /interface wireless set [ find default-name=wlan1...

Spirch

hello my setup is pretty straightforward I have a cAP ac connected to a hAP ac^2 by cable the hAP is the main router the cAP is just redirecting all dhcp request to the hAP, cAP mostly behave a like a switch I have removed hardware offload on both and I activated tracking connection in the ip firewa...

Spirch

thanks i will see if i can manage to do that, i never used vlan before so it's a good opportunity to learn

just to be 100% sure; vlan in firewall work with hardware offloading, right?

Spirch

I have this diagram working as of now, i would like to add some restriction / security to it the cAP ac is connected by LAN to the hAP ac^2, the hAP handle all dhcp request I have a bridge in the hAP for all port except the WAN, that bridge got hardware offloading ON because of the NAS because of th...

Spirch

You are missing most of your config in the above posting! Of course you should at least post config of switch, bridge, and IP addresses. As it is now it is impossible to see if this traffic is switched, bridged or routed. sorry i misread your text, here is the relevant section /interface bridge add...

Spirch

You are missing most of your config in the above posting! Of course you should at least post config of switch, bridge, and IP addresses. As it is now it is impossible to see if this traffic is switched, bridged or routed. which part of the config you are interested in? i don't really want to manual...

Spirch

one thing i'm noticing is that i can see it in the raw prerouting firewall but not in the input/forward/output

something tell me that I am missing something here ...

Spirch

I might be doing it all wrong but I'm trying to send switch packet to the firewall and it seem that the only way i'm able to do that is to use the switch rule redirect to CPU (everything is in one bridge under hardware offloading) when I create this rule; /interface ethernet switch rule add ports=in...

Spirch

wow 4 pages already, i'm happy to always wait a few days before installing things that can bring down my network or make thing difficult.

people still deploy stuff in mass without testing them?

time to wait a little bit longer and see the evolution of this thread

Spirch

it might be a stupid question but what would be the recommended installation for the cAP ac?

vertical? horizontal? doesn't matter?

thanks

Spirch

I currently have this setup: RB951G-2HnD (6.43.7 (stable)) in switch mode, wifi in station-bridge connected to cAP ac (6.43.4 (stable)) in switch mode, wifi in ap bridge connected by LAN to hAP ac^2 (6.43.4 (stable)) in router mode, acting as dhcp server I have a device connected by lan to RB951G-2H...

Spirch

i can confirm that the cAP ac can't power on the camera.

Spirch

i'm reading that passive poe could be an issue with ip camera poe, i'm not really interested to get one and having to figure out how to send power to it

if you have one that work, which one it is?

Spirch

I just want to confirm ... the cAP ac that I got have came with DC rated for 24v 1.2A which mean about 28.8 watt max, right? so the cAP ac use for itself 13W (based on https://mikrotik.com/product/cap_ac ) it say also that the maximum is 24W does it mean that the maximum POE out is 11W ? I want to p...

Spirch

What you've set using limit=1,5:packet is a limit of not more than 1 packet per second where 5 packets may come initially and still be accepted. If the idea was to permit one packet every 5 seconds, the correct syntax is limit=1/5s,1:packet . Every interval , netwatch sends icmp echo requests 1 sec...

Spirch

I got a hAP ac and cAP ac each one have this specific netwatch rule hAP: add host=192.168.175.125 interval=5s down-script="/interface wireless set interface-WLAN1 disabled=no /interface wireless set interface-WLAN2 disabled=no" up-script="/interface wireless set interface-WLAN1 disabl...

Spirch

Have you tried netinstall using the ARM main package instead? https://download.mikrotik.com/routeros/6.43.1/routeros-arm-6.43.1.npk Also, make sure you are using the newer netinstall 6.43.1 and not an older version. Each time there is a new ROS release, there is a new netinstall version, and using ...

Spirch

Have you tried netinstall using the ARM main package instead? https://download.mikrotik.com/routeros/6.43.1/routeros-arm-6.43.1.npk Also, make sure you are using the newer netinstall 6.43.1 and not an older version. Each time there is a new ROS release, there is a new netinstall version, and using ...

Spirch

for a cAP AC i'm trying to do a netinstall from a windows xp laptop that have nothing else activated than the lan local (old laptop with 10/100) netinstall.exe advanced-tools-6.43.1-arm.npk dhcp-6.43.1-arm.npk ntp-6.43.1-arm.npk ppp-6.43.1-arm.npk security-6.43.1-arm.npk system-6.43.1-arm.npk wirele...

Spirch

i figured everything out and i didnt needed dhcp relay in the end for what i wanted to do.

Spirch

The default protocol mode is RSTP on the bridge interface. It is kind of buggy, so I would change to none...
Code: Select all
/interface bridge
add admin-mac=*** auto-mac=no name=bridge-Relay protocol-mode=none
Other than that, looks good!

thanks a lot, i appreciate!

Spirch

if i transfers a file by LAN it max out the ethernet (1gig), it is under switch mode (0% cpu utilization) my winbox connection drop or get very laggy I assume it is because there is no more resource to the winbox connection, I would like to make a simple queue to give some priority to the winbox con...

Spirch

Actually what you created is a simple bridge. You can remove the dhcp-relay as it is not doing anything. DHCP and Firewall will be handled by your Router. If you want a dhcp-relay, you might start here. https://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Relay hmm good to know one less thing to have in t...

Spirch

this is a very simple setup, dhcp relay to the router connected by LAN, nothing else firewall is handled at the router level (i assume this is ok, im right?) is there any tweak or missing recommended setup or mistake here? thanks [admin@MikroTik] > export # apr/18/2018 19:18:24 by RouterOS 6.42 # mo...

Spirch

WIFI on the cAP ac is WAY better, i dont need to update my hAP ac2 for now since the wifi on it only turn on when the hAP is down and that shouldn't happen often or never if you can tweak it more, that would be nice but for now this local speed is more than my internet which is all i can ask for now...

Spirch

Everyone - We are working on improvements for ARM devices wireless performance within 6.42rc version. Such fixes/improvements can not be backported to older versions and will be included in RouterOS current versions only starting from 6.42 release. Spirch - Most likely you have, for example, DHCP s...

Spirch

im not going to play with rc version or stable version but the h/cAP ac have a wireless issue for sure, i prefer to stick with bugfix for now so im not going to install the other one i got a NAS connected to my hAP ac2 by LAN my computer connected to the hAP ac2 by LAN the cAP ac connected to the hA...

Spirch

i'm not knowledgeable enough but two weird thing happen to me i have a hAP ac2 and cAP ac connected by lan, the hAP is the dhcp server 1. somehow creating a bridge on the cAP took over all the interface of the hAP, i lost internet and when connecting to the hAP ip address, i was in fact going to the...

Spirch

i have a cAP ac and hAP ac2, the cAP is connected by lan to the hAP I want to transfer all dhcp request from the cAP to the hAP and I have followed the wiki on how to create a dhcp relay but i can't seem to make it work (is the the proper way for what i want to do?) both device got no configuration ...

Spirch

the netinstall link on the download page doesnt work

Spirch

so between the 2 bugfix releases this is the actual difference if i understand properly What's new in 6.40.6 (2018-Feb-20 11:04): *) btest - fixed TCP test accuracy when low TX/RX rates are used; *) certificate - do not use UTF-8 for SCEP challenge password; *) certificate - fixed PKCS#10 version; *...

Spirch

availability in Canada for

* new hAP ac² Dual Band Desktop AP, $69
* new cAP ac Dual Band Wall/Ceiling AP, $69

???

Spirch

what do I need to know before i upgrade from 6.37.5 (bugfix) to this one?

is there a place where i can see the whole changelog from 6.37.5 (bugfix) to this one?

Spirch

with current version, is is good to have these or are they completely useless/noise? add action=jump chain=input comment="Drop INPUT Invalid TCP flags" jump-target=BADFLAGS protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg add action=jump chain=input comment="Drop INPUT Invalid TCP...

Spirch

- RB962UiGS-5HacT2HnT-US (USA) is factory locked for 2412-2462MHz, 5170-5250MHz and 5725-5835MHz frequencies. This lock can not be removed. - RB962UiGS-5HacT2HnT (International) supports 2412-2484MHz and 5150MHz-5875MHz range. which one will be available for Canada? and also when is it normally ava...

Spirch

Oh. You maybe meant the client received 127 as its address... If so, set the pool like "192.168.175.2-192.168.175.126".

really?

i was under the impression that the dhcp server would know not to give some ip

Spirch

I have this setup: address: address = 192.168.175.1/25 network = 192.168.175.0 pool: addresses = 192.168.175.0/25 dhcp-server - networks: address=192.168.175.0/25 gateway 192.168.175.1 somehow the dhcp server gave to a client the broadcast address 192.168.175.127 i'm using 6.33.3 where is my mistake...

Spirch

Seems like "/ip cloud" auto time set, or "/system clock" auto time-zone detection.

You can disable both.

I unchecked both and now the "connect" doesn't happen so it was one of them or both

thanks!

Spirch

I just upgraded from 6.30.4 to 6.32.3

Untitled.png

can anyone tell me what this is? i never had that before

Spirch

does mikrotik router support that?

if not is there a plan for it?

Spirch

i'm talking about new generation that that would replace

http://routerboard.com/RB951G-2HnD

and / or

http://routerboard.com/RB2011UiAS-2HnD-IN

something that would include let say "ac" into the wireless by default (and anything else that would help)

target: home and office product

Spirch

I have a RB951G-2HnD with v6.13 and firmware v3.14

is there any reason for me to update to 6.27 if I currently have no issue?

this is a simple home router setup

Spirch

http://www.mikrotik.com/download/share/ ... evnote.txt

thanks

Spirch

is it possible to get current changelog of 6.14, all rc?

Spirch

hmmm this is interesting, going to read the wiki about script this weekend

Spirch

thanks, that thread, from you

, was one that i found while searching on google to have hints while creating my firewall filters

i forgot about it since i looked at like more than 100 links (wiki/forum/page)

Spirch

is there a way to add dhcp-client dns server to an address list?

Spirch

should I add that list that i found or the connection-state=invalid would take care of these? i did a few test with this Nmap Online Scanner to test a few combination(maybe 2-3) and it seem that connection-state=invalid is taking care of these. should i add that list anyway? my understanding is that...

Spirch

simply put the wireless interface to arp=reply-only then add a dhcp-server /ip dhcp-server add add-arp=yes disabled=no interface=interface-WLAN lease-time=10m name=dhcp-server-WLAN then add some lease /ip dhcp-server lease add address=192.168.100.130 address-list=support client-id=1:***** comment=&q...

Spirch

i finally did what i wanted, i'm not a network guy so it took me a while, here is what i did /ip address add address=192.168.100.1/29 interface=interface-LAN1 network=192.168.100.0 add address=192.168.100.81/29 interface=interface-bridge network=192.168.100.80 add address=192.168.100.129/27 interfac...

Spirch

i already have a firewall filter on a specific list for winbox-ip, if you look at the /ip dhcp-server lease, you can see that i'm adding these 3 in a list, which have access to winbox-ip the only thing so far that i would like to do and i'm not sure how is to only have 1 subnet 192.168.10.xxx so i w...

Spirch

I have 3 interfaces LAN1 which is ether2 bridge which is ether3,4,5 WLAN which is wlan1 I want winbox to be available only on LAN1 so i have this /tool mac-server mac-winbox set [ find default=yes ] disabled=yes add interface=interface-LAN1 I have LAN1 and WLAN setup so ip is assigned by reply-only,...

Search found 134 matches