I guess there is a hardware defect in some way, which causes it to forget its config. - that's probably why it was being sold, so try returning it. I thought about this too, but it doesn't explain the following: - when I boot it with the reset button pressed *before* powering it on, it makes this s...

I've definitely heard that before. I think it's the noise it makes when it's applying the default configuration i.e. when new, or after Netinstall. I ordered a new one, which was delivered yesterday (RB962 - hap ac). Indeed, it made the same sound (but only once) when I booted it for the first time...

Please be aware that this issue can also occur when you have an IP conflict on your network. Observe your arp tables, or just check by hand and make sure you have no IP conflicts.

Is fast forward enabled on the bridge?

This sounds pretty crazy to me. Doesn't this indicate that there is a complete lack of "checking" uploaded files?
If so, this doesn't only seem a quality issue to me, but also a serious security risk (it could mean that tampered files go completely undetected....)

One addition: if I first power it on, then press the reset button until ACT flashes (to a a configuration reset), I get the normal boot beeps (1x short, 2x short). Update: With a lot of fiddling, I managed to get netinstall working on Windows 10. It started working after renaming the executable bina...

I've bought two separate RB951G-2HnD's for a project, both were used. The first one is running fine, and I was able to update ROS to the latest stable, etc. Everything works as expected. The second one is being a pain in the ass. It had a strange boot sound (beep) to begin with. With some struggle, ...

In /ip firewall mangle, I think your dst-address should be 0.0.0.0/0.
Also enable logging for your mangle rule and check your logs that it actually matches your traffic.

But now if you disabled it, you'll want to do something with firewall filter, because it allows pretty much anything to pass. Yes, I completely agree. Input is pretty much blocked from the outside. Forwarding however is almost allowed anywhere, with the exception of some bogon rules and invalid sta...

If you look at the log line you've quoted, it says in:bridge-hq(ether7-trunk-zolder) , whereas it should actually say in:hq-vlan10 . So the rule acts too early, already when the frame is processed at bridge level, which breaks something in the subsequent processing. To fix that, it might be suffici...

I added the log rule, I was already checking on prerouting, forwarding, postrouting to figure out where stuff was going south. However, this did not help anything. Traffic not reaching forwaring at all I guess. (*) The only suspect would be bridge's use-ip-firewall=yes, use-ip-firewall-for-vlan=yes....

Check out this (old) piece of information, and focus on the content of a "failed login" with openvpn:

https://wiki.mikrotik.com/wiki/Brutefor ... prevention

Hello all, Long time Mikrotik user here, running a CCR for quite some time. While not being a network export, I can get around network topics. Some time ago I extended my network a bit and updated my bridge configuration and started using vlan filtering. Around that time, my hairpin nat stopped work...

Same issue. Found this post. Request is now open for at least 10 years. I guess we can wait another 10.
It truly amazes me, with all the crazy shit my CCR can do, this basic option is still unavailable.

Same problem here.Chrome user. CCR1009 running 6.41.

Tried incognito mode and it works.
Disabled both lastpass and ublock origin. Closed my browser and it worked in normal (non-incognito) mode.
Enabled both lastpass and ublock origin. Closed my browser and it worked in normal (non-incognito) mode.

In my test setup between two CCRs, gre over ipsec had no problems fowarding 500Mbps with 1450 byte packets. Its pretty obvious that your perfect conditions test case doesn't reflect real world performance. I landed on this page, because I'm having *exactly* the issue described in this topic. @mrz: ...

I've sent an e-mail to support@mikrotik.com asking for more information. The official reply I got was: from: MikroTik support [Janis Krumins] <support@mikrotik.com> date: Fri, May 23, 2014 at 3:34 PM Hello, currently RouterOS does not support 6rd. It is not scheduled anytime soon. Regards, Janis Kru...

Hi, It would be a must for mikrotik products .... please could you add 6RD (ipv6 rapid deployment) available for many ISP :-) Thank you maxspeed I've sent an e-mail to support@mikrotik.com asking for more information. The official reply I got was: from: MikroTik support [Janis Krumins] <support@mik...