MikroTik

DJGlooM

Hey guys. VXLAN is broken\changed again with 7.18
I have vxlan bridged untagged on both sides and esxi with the same tagged vlan in the same bridge. After update couldn't reach VCenter VM to ESXi interface with the same vlan over vxlan. Had to enable local-proxy-arp on vlan interface of CCR.

DJGlooM

You make a neighbour group in steering. Two locations (and from the GUI there is a tab steering: /interface/wifi/configuration/steering /interface/wifi/steering /interface/wifi/steering/neighbor-group> comment edit find print reset set There is no option yet, even in CLI, to create neighbor group.

DJGlooM

/interface bridge vlan
add bridge=lan-bridge untagged=wifi-5ghz-guest vlan-ids=10

Is that all you have in vlan filtering settings? And where should your AP send tagged traffic then?

DJGlooM

Thanks for reply, device is hap ax3 without capsman. With datapath specified, when I try to connect, I see dynamic wireless interface with pvid 10 in /bridge/ports and dynamic "current tagged" vlan10 in bridge/vlans. Like I said dinamic bridging with vlan filtering isn't working great wit...

DJGlooM

Sup Normis. Couple years ago I was working with WISP in Kaluga, Russia, they were using 25-30 km 5 ghz links as well as 5-10-20 km. The best results was with netbox and mant with sleeve, but for the longest link we had to use cambium\ligowave. LHG was performing at 50-60% of announced capacity at 10...

DJGlooM

VLANs are to reduce broadcast traffic and separate concurrent traffic such as voip and video for example. Multiple SSID create heavier beacon load in the air, otherwise I wouldn't say 4 ssid is way worse than 2, but if you make even more that can be a problem. Usually 1-2-3 is enough. Also this &quo...

DJGlooM

You have to make guest interfaces static and manually add them to bridge and filter them in vlan filtering. As such: /interface wifi cap set discovery-interfaces=vlan241_mgmt enabled=yes slaves-static=yes New ax devices able to grab datapath from capsman and use vlan settings from capsman. Older dev...

DJGlooM

Very hopeful to get an official Mikrotik response about hardware planning. Guys, we really need new ARM revisions of good old models such as hex poe, powerbox pro, hex s. Nowadays gigabit isn't enough for interconnection\uplinks, therefore 5009 is a good model BUT there is no PoE passthrough, only p...

DJGlooM

For anyone who will find this post and struggling to offload PowerBox PRO (hex poe) to unload CPU because with full bridge VLAN filtering it does around 350-400 mbps tops. Bridging VLAN interface is not good, but the only option to commutate on CPU level and stick software sfp1 port into switch chip...

DJGlooM

Mikrotik should add that same note the website, since I would have assume same as you... Exactly. Before that it was enough to just read short specs, now we have to look the whole datasheet, why? I think Mikrotik goes aggressively into commerce sacrificing the good engineering that was before. We, ...

DJGlooM

Please send an email to MikroTik support and include a supout.rif file.

Are you a representative and you're saying that it isn't proper L009 behaviour?

DJGlooM

Mikrotik, WTF? I bought 5009P+ thinking it'll poe-in and poe-out independently from PSU or 2-pin power, then I figure out I was wrong and you've made a bold text later that you have to use PSU to have poe-out. Alright, I used 5009 as a main router and bought L009 to use as a switch with poe passthro...

DJGlooM

Found the topic when got different error
viewtopic.php?t=195600

Thanks mikrotik, as always user is unaware about ongoing bugs and should read tonns of forums and changelog and use beta.

DJGlooM

Ok current working capsman config is: /interface wifiwave2 channel add band=2ghz-ax disabled=no frequency=2412,2437,2462 name=2ghz-ax secondary-frequency=disabled width=20mhz add band=5ghz-ax disabled=no name=5ghz-ax skip-dfs-channels=all width=20/40mhz /interface wifiwave2 datapath add bridge=bridg...

DJGlooM

Somehow capsman doesnt push vlan ID to caps, have to do it locally like this /interface wifiwave2 # managed by CAPsMAN # mode: AP, SSID: UTMT, channel: 5540/ax/Ce set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap datapath=vlan240 disabled=no # managed by CAPsMAN # mode: AP, SSID...

DJGlooM

Can somebody please explain why this thing isnt working? Doing by manual, of course customizing for myself. Two APs: hap ax2 and Audience. Same AP config - different results. Am I insane? Capsman 5009: /interface wifiwave2 channel add band=2ghz-ax disabled=no frequency=2412,2437,2462 name=2ghz-ax se...

DJGlooM

Good day! Please tell me how to use PWR-LINE PRO in a three-phase electrical network at home, if the sockets are on different phases? Do I need to install additionally 3 PWR-LINE PRO near the input of three phases and connect them with a switch? The neutral will be unifying. How does this affect sp...

DJGlooM

The "only" thing is that tagging & untagging is only done directly by the bridge when vlan-filtering on that bridge is set to yes . So if you do not use vlan-filtering on the bridge, and the VLAN you want to use for management of the switch is tagged on the uplink port, setting pvid o...

DJGlooM

Hello gentlemen! Could you express your opinion please? I've heard that it's genuinely incorrect to use bridge PVID instead of vlan interface when you just need to land a switch to an address. Is it? I mean if no routing involved and you just need admin vlan on a switch, why create more entities as ...

DJGlooM

...but try and explain to user that "more bars doesn't have anything to do with wifi quality".... It's like listening to the music sitting close to big speakers. You do not hear better ... It's only louder ... that is why it has no sense to be close to the speakers during concerts :) Oh i...

DJGlooM

200 mbps in wireless is good enough. Don't trust the marketing which sells you rate speed as real speed. You can get 1 gbps rate in 3 chain 5 ghz environment, doesnt mean that you can get throughput like 100 Mb\sec. You wont get 500 mbit or even 300 mbit for sure from hap ac2. Especially if you have...

DJGlooM

Don't bother looking for a fix to your setup. hAP AC3 just sucks for some reason. Maybe they will fix it in a future RouterOS version. https://forum.mikrotik.com/viewtopic.php?p=827986#p823038 Exactly! But there won't be any fix until problem is massive and acknowledged. Meanwhile we have a beautif...

DJGlooM

Can't help with CapsMan (no experience) , and I don't have a hAP ac3. Capsman is pretty much the same, but with provision. On 2.4 GHz the antenna gain is hAP Lite = 1.5 dBi hAP ac Lite = 2 dBi hAP ac3 = 3 dBi Audience has 3.5 gain, but there's a huge difference in my experience. Cant wait to test n...

DJGlooM

Hey guys. Installed three friends with hap ac3. One had hap ac lite, another two had hap lite. With the same capsman config wireless coverage of hap ac3 is worse than hap lite. I begin to suspect maybe there's something wrong with antennas? I did not switch it on without antennas. Had the latest 6.4...

DJGlooM

Those devices have no software (no OS), so this is the reason why you can't connect to them and there is no "utility". Did you try to connect them to other outlets, to put them closer to each other? Hey Normis! Trying to hijack post again. Does MikroTik have the exact tech specs for pwr l...

DJGlooM

Just thought of:

Is it possible to make winbox open predefined sets of windows on connect?
I guess it'll be like universal session. Because from time to time you need to manually configure some sets of typical settings and it would be nice not to navigate the same tabs over and over.

DJGlooM

Hey folks. Short question: does nstreme uses preamble? Apparently nv2 does not, cause there's no preamble setting when you choose it. What's your best practice in noisy environment and lots of CPE in aspect of preamble? For now I use long with mantboxes and various CPE from disclite5 to lhg hp, but ...

DJGlooM

This is a long lasting discussion. Solution: No. nv2/nstreme is not developed for years now. If you are able to use plain 802.11 in your environment you may get happy. If not MT Wireless will not make you happy. For some reason it seems to me, that nstreme polling would be rather faster than 802.11...

DJGlooM

Looks like I have to answer to myself. So apparently NV2 doesn't work so good in noisy environment with a lot of clients. But to cut lower MCS and rates is a good move, just need to correlate respective speeds. This is the same mount place, another AP with even more CPE (34) switched to nstreme. As ...

DJGlooM

Registration be like

DJGlooM

Hey gentlemen! Already tired to google answers and tried almost all of them, can't figure out a way out. There's PTMP setup in noisy country environment, up to 33 CPE per sector. There was nstreme with 6.40.9 +\- ROS versions. We had to update cause of security matters to the latest (before yesterda...

DJGlooM

The fast connection of winbox was part of a release where they improved and secured the connection. Might have been 6.43 release. I do not remember but I do remember a lot of happy people talking about how quick it is now 😊 So the connection of both faster and more secure now. Oh nice! Finally some...

DJGlooM

Is "previous" version 6.43.12 or some other one?

Any previous version. Is there only myself who noticed that winbox connection became instant which it wasn't before?

DJGlooM

You mean previous long-term? That should be 6.42.11 I think.

6.42.12

DJGlooM

Is everything okay there with winbox-router communication? When I open winbox session on previous RouterOS versions it takes like 1-2 seconds to establish session, now with 6.43.13 it happens instantly. It feels like there could be broken encryption or something. So I wonder if bug or feature.

DJGlooM

Ok now mikrotik just ignoring emails to support on this issue. Well, looks like we'll leave mikrotik only as router and wi-fi will go with other brand. This is ridiculous situation, shame on you mikrotik.

DJGlooM

you need to have WPA2 w/ AES only in your security profiles and apple devices will work again. I have couple sites with "iphone problem" and some other sites that have apple products, but there is no problem, with the same hardware (wap or wap ac). The problem occurs randomly and present ...

DJGlooM

Hey guys! There is a new requirement for banking sector in Russia, therefore there's need for certificated hardware. AFAIK MikroTik have conformity certificates, but now we require that hardware should be listed in the state registry of certificated hardware for information security. Does anyone kno...

DJGlooM

Hi guys! Just wanted to add a small piece of my recent experience, hopefully it'll save someone some time. Standard client's residence config: - core router - gigabit switch - caps (wap, hap ac2, 951, hap lite etc) Everything was on 6.40.8, multiport router's ports was bridged old-style master-slave...

DJGlooM

Hey Uldis! Would you guys please consider replacing SIM port with something more decent? There's an awful cheap aluminum contacts and modern SIM with frames (nano, micro) cant get it and get out properly without disassembling the router. Put something plated and spring-click so it would sit good in ...

DJGlooM

Support told me there could be IPSec problem which they struggling with, Try to create Simple Queue for IPSec after marking it in mangles, then processing will be put to 1 core and performance should increase. Also check your MTU values.

DJGlooM

If you have a public IP on both devices, you can just set up an EoIP tunnel to make a layer 3 tunnel. The most bandwidth I have seen pushed over a VPN tunnel in mikrotik has been over EoIP. EoIP is layer 2 tunnel, also EoIP is GRE, so instead of using it in layer 3 you can use pure GRE tunneling. A...

DJGlooM

This situation with IPSec tunnel does not happen! The PING response time does not change (or at least very little change) if the tunnel is busy or not. This is a common problem related to TCP meltdown. You shouldn't use TCP tunnels on a long distance nor many hops. Use L2TP or PPTP for it. We're a...

DJGlooM

I have pretty much similar problem with vpn. Bandwidth test between mikrotiks shows great speed, but when it comes to speed between 2 devices behind each of mikrotik - speed drops drastically. Emils from support was on this problem, did nothing, made couple strange suggestions and then promised to l...

DJGlooM

VLAN hasn't solved the problem, so I guess its pointless. But I found a ticket history from a year ago with Martins and I remembered that it was all about bridge MTU after all. So now I'll check it again.

DJGlooM

Hi everyone! This problem occurred a year ago and I had a conversation with support on it. I have upgraded then from 6.28 to 6.29 and suddenly several sites was unable to open in any browser. First advice from support was to play with MSS value, but then I downgraded back and found out that everythi...

DJGlooM

2016 is up!
When?

DJGlooM

Need Openvpn UDP NOW! Stop feeding promises, leave everything else and just do it! How the hell should we make stable and secure long-distance tonnels with TCP? Meltdown ruins it all. GRE is inconvinient and not supported with mobile clients, PPTP is unsecure, L2TP+IpSec is old and again, not well-s...

DJGlooM

Hey guys! I want to ask some help and clarification. I use ovpn to connect RB2011-s at my users homes to the RB1100 in the office, just corporate VPN. After upgrading to 6.29 I cant reach from one vpn client to another. As I red here it must be related to the subnet mode. What should be changed in c...

DJGlooM

No man, if you set "create dynamic enable" in your provisioning you don't have to click anywhere. I had discussion with Uldis from Mikrotik support, he said that it is not recommended to use CAP from the same machine where's capsman working, cause you can't properly use MAC connection ther...

DJGlooM

Look to this http://mum.mikrotik.com/presentations/US14/uldis.pdf Thanks, but there's basic configuration and no explanation or solution to my problem. Again: capsman controls all the traffic from all CAPs, it automatically adding interfaces to the bridges that defined in configuration. Interfaces ...

DJGlooM

Hi guys. ROS 6.20, MT 2011 & MT SXT, capsman deployed on 2011, his wlan1 connected as CAP, so does SXT. There's two configurations, for two SSIDs and 1 provision with master and slave configurations. Local forwarding is disabled, client to cliend fwd is enabled. Each configuration has its own br...

DJGlooM

do you need to have a single TCP connection use all links? The idea is to get a thick and failsafe tonnel with any available protocols and then secure TCP\IP inside with ipsec. Can you draw a picture of your setup? I did it the most ugly way in paint :) http://i58.tinypic.com/mrpx5g.png EoIP interf...

DJGlooM

Hey guys. So here's the deal: Three ISP channels, RB on each of them port forwarded to fourth RB (tried SSTP then OVPN, so there was 4443 and then 1194 ports) Remote RB initiating three vpn sessions, all connected. Then if it was sstp I couldn't add it to bond directly (why btw?) and had to add eoip...

Search found 54 matches