MikroTik

tesme33

Hi
thanks for the idea. Will try it. But for now i needed to switch back to my old router.

tesme33

Hi i have just installed 7.14.2 onto my mikrotik router and i want to use it for internet access. As i have my mailserver at home i have some NAT what i also want to hairpin. i used the quickset on the WEB IF to make the initial config including the NAT i needed. And then i wanted to add HAIRPIN. I ...

tesme33

Hi more and more PC Motherboards and devices are appearing with 2.5GBit Ethernet devices. Up to now i have not seen a replacement for CRS326-24G-2S+RM which would give us this speed. I know this is not the 10G, 25G or 40G device which will bring a lot of attention but it would bring the masses. Havi...

tesme33

Hi
can anbody tell how it can be that these two devices have different Max power but the same motherboard.

CRS326-24G-2S+RM : 24W
CRS326-24G-2S+IN: 21W

This is a 12.5% difference.

Yours

tesme33

Hi
just installed 7.2.3 on RB3011 and hap lite. Everything fine.
Trying to install CRS326 , but it is stuck in calculating download size. --> forget this. The firewall decided that this host is bad and blocked it ... now als on 7.2.3

All were on 7.2.1.

tesme33

Hi im expiriencing a speed drop after some time. Normaly i get from my NAS easily 100MB/sec (it is only connected via a 1G Port). After some time it drops to 10MB/sec. Once i reboot the CRS312 it comes back to normal speed. Im using 7.1.3 and the CPU temp is around 60degres Celsius. All ports are se...

tesme33

Hi
i just unplugged the device from Power and replugged the power. This was faster.

Now im back in RouterOS.

Thx for the information.

tesme33

Did you upgrade RouterBOOT after upgrading the OS?

Hi
i have automated updates in place. which means with the new OS also the new boot loader will be flashed.

tesme33

Hi im having the names CRS and out of a sudden it doesnt allow me to boot into RouterOS. Which was working before. So if i go to the TAB System and select Boot RouterOS nothing happens. Just a refresh. When is then press Reboot also nothing happens. Even not a refresh of the page. Anybody who knows ...

tesme33

I guess the description line would be too long if it read like this: Number of Combo 1G/2.5G/5G/10G Ethernet / SFP/SFP+ ports 4 And don't forget, those RJ45 ports quite likely support akso 10M/100M ... Hi you are right. But it might be hard to get anything , except IOT devices, with a 10MBit port. ...

tesme33

Hi thanks for your effort. Im aware of the diagram. My question was more around the following text on the product page. Details 10/100 Ethernet ports 1 Number of Combo 10G Ethernet/ SFP+ ports 4 Number of 1G/2.5G/5G/10G Ethernet ports 8 Which sounds like : The COMBO ports only support 10G. No differ...

tesme33

Hi im wondering what is the suported link speed of the RJ45 conntion part from the combo ports. According to the block diagram it is the same chip as the 8 other ports and i can see that a DAC cable plugged in is advertising all speeds. But what does this mean for the RJ45 part ? Would this mean the...

tesme33

Netinstall is the only way to comfortably upgrade a hAP Lite or Mini for testing purposes. My RB941s reboot after 24 hours running anything v7, so mine are on long-term. The actual issue here is the multicast package. It's from the extras zip. Remove the multicast package and it should upgrade. 7.1...

tesme33

hAP Lite stuck in "calculating download size..." since hours. A reboot didnt help. You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices! Hi thanks for the hint. As the...

tesme33

hAP Lite stuck in "calculating download size..." since hours. A reboot didnt help. Current packages [admin@MikroTik] /system package> print Flags: X - disabled # NAME VERSION SCHEDULED 0 ipv6 6.49.1 1 dhcp 6.49.1 2 advanced-tools 6.49.1 3 system 6.49.1 4 routing 6.49.1 5 multicast 6.49.1 6...

tesme33

HI the question in the direction if this has been detected by anybody else as i didnt see this in former releases. And it doesnt matter what type of HW im using. This is about the SW. In my history i have always cleaned up any device before usage. Only this ensures that you really know what is on th...

tesme33

Hi i have the following behaviour. For cleanup reasons i want to start from scratch and i used winbox and "Reset Configuration" Menue. After the reboot i connected again (via MAC Adress) and acknowledged the initial script execution. Which resulted in just configuring the SRC-NAT and the I...

tesme33

Mmmh this looks like oil.

strange.

tesme33

IGMP snooping and IPv6 don't go well together on Mikrotik ...

confirmed.

Thx

tesme33

Hi
im having the issue that behind my CRS326 i dont get IPv6 up and running.

What could filter the DHCPv6 ?

STP is off, IGMP snooping is on on the local bridge.
CRS is not routing !

Unbenannt.PNG

tesme33

After reboot and new firmware it is working. Lets see if it stops after some time. As mentioned in a post before. [admin@CRS326] /system routerboard> print routerboard: yes model: CRS326-24G-2S+ serial-number: 94550966B962 firmware-type: dx3230L factory-firmware: 6.42.7 current-firmware: 6.48 upgrad...

tesme33

Hi just want to add some information to the Multicast related discussions. Upgraded my CRS326 to 6.48 and MDB was not filling. Enabling Multicast snooping (which was disabled) --> MDB was filling. But still no Multicast traffic going through. How do i know ? Easy answer my SatIP setup is no longer w...

tesme33

Hi i dont believe that i will be able to upgrade my hex3. Only 4.9MiB free but nothing on the flash. Anybody an idea ? Im about 50km away from this box. I would downgrade to an older, much smaller version then upgrade to latest, but in your case that may give problem if you loose some function so t...

tesme33

Mmmh.
it worked on

hex3 with only 5 M free hdd space
crs326 with only 2.5 M free hdd space
hap lite with 7.9 M frre space (but here i only have the following packages: advanced,dhcp,routing,security,system,wireless)

tesme33

Hi i dont believe that i will be able to upgrade my hex3. Only 4.9MiB free but nothing on the flash. Anybody an idea ? Im about 50km away from this box. [admin@MikroTik] /file> /system resource print uptime: 20w5d4h35m31s version: 6.46.3 (stable) build-time: Jan/28/2020 10:46:05 factory-software: 6....

tesme33

Hi
corrected the faults and now it is working.

Somehow the most stupid one was that i hadnt an IP number assigned to the interface within subnet.... Yeah i know ...

For the DNS i didnt want this at this stage , but you are right it should be in.

Now it works.

Thx.

tesme33

I dont know but.
A PC connected to the bridge is currently getting an private IP but not able to connect to the outside network.

Mmmh.

tesme33

Hi
a friend of mine will get a an IP subnet routed to his home next week and trying to setup the hex.
Idea is that some hosts in his network will get a fixed routable IP and the rest will get a private IP vi DHCP.

Somehow it is not working.

What do i forget ?

TR_config.gif

conf.rsc

tesme33

hAP lite has 32MB ram 16MB flash No way to update after deleting all files and rebooted more than once (had to try netinstall yet). The winbox method system->packages>CheckForUpdates, finds new version but "download and install button" refuses to appear (likely because of space issue). We...

tesme33

Hi
i just made a netboot install of my hEX. and now only 4.9 MiB are left .
Cant believe that this is really tested.

This means for all 16MB devices we have to netboot from now on .. Great.

tesme33

Did you reboot device after uploading additional .npk's? What does log contain about it? BTW, security requires DHCP package .... Hi yes after you write this i remember that DHCP and security are now dependant. So i might be that the way i described in the other post is not necessary. Let me try th...

tesme33

Did you reboot device after uploading additional .npk's? What does log contain about it? BTW, security requires DHCP package .... Hi yes after you write this i remember that DHCP and security are now dependant. So i might be that the way i described in the other post is not necessary. Let me try th...

tesme33

Hi
the trick was to switch back afterwards to long-term. (6.44.5) which means winbox i only had system and routing installed.
add the packages i need (wireless, advanced, security, dhcp)
and then made an upgrade to stable.

This is a pain in the ...

Now im back with 7.9MiB free space.

tesme33

Just wanted to confirm that posting #48 seems to work. At least one of the hAP lite . But it is more or less package by package. i was only able to put 2 packages initially on the the device. I started with system and routing. But placing now the additional packages on the system didnt install them....

tesme33

none of my hap lite can upgrade. not enough space: 1x 6.43.16 , 1x 6.45.1 after upgrading my CRS326 there are only 2MB left. Mmmh now im stuck. Does anybody know of a "/system reset-configuration" would clean up the space issue or do i need to go via netboot ? Edit: Just saw posting #48. W...

tesme33

Hi now i have upgraded 3 of my 4 hAP lite and i noticed that the one having the issue is only showing 7.4 MB free-hdd-space. The others are all showing more or equal to 7.5 MB. What is consuming the space ? The config is "just" 98 lines other configs in the other haPlite were 154 lines or ...

tesme33

hi just to let you know if you are also not able to upgrade your hap lite. Solution from mikrotik: Hello, Based on your provided information: system,error not enough space for upgrade Please use the Netinstall utility to reinstall the device: https://wiki.mikrotik.com/wiki/Manual:Netinstall How this...

tesme33

In order to upgrade ROS, your hAP lite needs at least some 14MB RAM free (possibly even more) and around 1MB hdd free. Both are displayed using command /system resource print (fields free-memory and free-hdd-space respectively). If your RAM is low, try to reboot device (in case there are some proce...

tesme33

Hi im attaching the config. There is nothing fancy in. But once the package is downloaded only 60KiB are left on the flash. And this is just not enough. Now i need to figure out how to upgrade ind. packages step by step. Never did this before. In between i was upgrading a CCR1009. Works. But also no...

tesme33

Hi upgraded crs326 and one hap lite without issues : 6.43.3 --> 6.45.1 one hap lite wont upgrade. I suspect space problem, but there are no files on the system. [admin@haplite1] > /system resource print uptime: 11m54s version: 6.44.3 (stable) build-time: Apr/23/2019 12:37:03 free-memory: 7.9MiB tota...

tesme33

Hi i was searching this for crs326 an temp in order to verify a temp baseline. And the only thread which had at least something usefull was this one. The spec only state ambient temeperature but not cpu temperature. I also have 71 Celsius and im wondering if this is in an acceptable range for the de...

tesme33

The more interesting part of this is that even original Mikrotik SFP RJ01 1G show the same behaviour (showing traffic on SFP which has no cable plugged in ) when the speed is fix set to 1G.

Mmmh does this mean working as designed ??

tesme33

Hi just wanted to confirm that i have the following in my CRS326-24G-2S+ Finisair FCLF-8521-3 and they are working. There is the need to fix the speed to 1GB. But the GUI is having a strange behaviour. 2 SFPs are plugged in and fixed speed set. 1 SFP with a device connected. both SFP show the same t...

tesme33

Hi thanks for the idea. but i have more then one MAC behind this port. Im thinking to get an hAP lite just as a bridge connected and define bridge filter rules on that box. I know not very elegant but it might work. Assuming that the hAP is also "just" a bridge. Would the filter then just ...

tesme33

Hi
is there any way to get the port security as described here for the CRS1xx/CRS2xx
https://wiki.mikrotik.com/wiki/Manual:C ... s_per_Port
also on a CRS326-24G-2S+ working?

Or do we need to wait and hope for SwOS 3 ?

Thx

tesme33

Independantly when R7 comes , in the toolchain of Melanox it is stated that they use kernal 3.10.104 which was released 21.10.2016. Mmmh this is really long time back. A lot of improovements have been implemented since then and i doubt that MT has the capacity to get all these benefits backported. S...

tesme33

6.44 hEX offers a bridge mode which, IMHO, is currently broken as the first consequence of applying it is kicking all connections out including local management. This can be easily reproduced. Fortunately, workarounds exist but a working bridge mode or no bridge mode at all, would be better, IMHO. ...

tesme33

Hi i just did a quickcheck. PC (W10)- 1GBit LAN - Switch (Netgear Gigbit) - RB2011/port1 (IP via DHCP) - RB2011/Port3 (bridge) - 1GBit LAN - Laptop (W10) RB2011 is on 6.43.14 With default config(e.g. RESET config) i can achieve the following with iperf3. CPU load goes up to 80%. Connecting to host 1...

tesme33

hi
just case you need some info on fastrack.

https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

And another topic. The order of the Firewall rules also have a heavy impact on the performance, the earlier the firewall can decide that a connection is allowed to pass the router the better.

tesme33

Yes it looks like the "bridge" template is not really OK, probably almost nobody uses it and it receives little attention. (normally people who want a 5-port bridge will buy a switch instead!) DHCP server on bridge mode of course makes no sense, it should be deleted. The firewall with WAN...

tesme33

the interface used as the external interface should never be on a bridge. It should always be a routed interface. Why? Lets say you hva 16 public IP and you would like to use a group of interface as a outside switch , to connect to other stuff, I would have used bridge. In case your external IPs ar...

tesme33

Hi have a look on my test in my todays post: https://forum.mikrotik.com/viewtopic.php?f=13&t=147553 Ups i just fogort to add. ignore post 5 :-). On the other side did it help ? One remark in addtion: the interface used as the external interface should never be on a bridge. It should always be a ...

tesme33

Hi today i had some time to make some tests. Below you find what i did. Everybody can draw its own conclusion out of it. This is shared that others are aware. --------------- All config was done via Winbox 3.18, Naming conventions for the configs in the attached ZIP: <STEP>_hex_<version>_<mode> step...

tesme33

Hi
i had the same issue. The problem should disappear if you switch back to 6.43. Alternativly you can try to switch off DHCP completly, after this step in my case this pool appeared in the pool list and i could delete the pool.

For me this looks like an issue with the new DHCP package.

Yours

tesme33

hi i had similar issues with the upgrade. You really need to get rid of anything on the flash to make the update. As you can see the upgrade only sees 7.2MB free . I personally stay away from 6.44 at this point in time as to many changes are implemented into this release and i had issues with the dh...

tesme33

Upgrade from 6.42.9 on CCR1009. IPv4 DHCP server in winbox empty (and not working, of course), export from CLI empty too (and stuck terminal). Every CPU about 20-30 % load. In log: snmp, warning timeout while waiting for program 23 ----edit: problem is in leases. I use this configuration: /ip dhcp-...

tesme33

Hi after some researrch the problem seems to be on several areas. 1) With 6.44 the dhcp package is no longer optional and it seems that it cannot be fully disabled. At least on my side a pool (which i never configured) appeared and assigned strange IP numbers 0.0.0.x . --> so i switched back 6.43. 2...

tesme33

Hi could it be that the dhcp package in 6.44.2 has some issue ? If i switch a router to bridge only (no lets not discuss if this makes sense) and i disable dhcp i still get to the clients IPs in the range 0.0.0.x assigned. and strange such a pool pops up in the mikrotik.And i didnt add ths pool. The...

tesme33

problem identified, manually fixed and ticket opened.

Mikrotik is adding a default rule that nobody outside of the LAN can access. But for the bridge this is not working. Disabling this rule made the hEX bridge accessable.

tesme33

Hi
making a NMAP scan (in bridge mode) showed that there nothing listening. Just Ping works. Or the firewall settngs get wrongly assigned.

so i would say this is a bug.

tesme33

After the change to Bridge (not touching the password at all) mode winbox can discover the hEX with the new IP adress. e.g. the adress will change from 192.68.88.1 to a local DHCP assigned IP. Dependand which Ether i take (2-5) i see a different MAC but the same IP. Then when i click connect the win...

tesme33

Hi when im using the Quickset from a plain hEX(e.g. no own config) with 6.44.1/2 and set there bridge mode , dhcp based adress retrieval, i have the following effect. - system gets the IP via DHCP - i can no longer login (testet with and without password) and Port 1 doesnt get assigned to the bridge...

tesme33

Hi
just upgraded my CCR1009 and a hAP Lite. Up to now no problems.
OS and firmware upgraded.
But the config is quite simple.

Yours

tesme33

Still 100% CPU-load on one of the cores in my RB3011. The router is working, but still this indicate something is wrong. Anyone else with the same problem? Any suggestions on how to fix? Hi can confirm the same on my side. CCR-1009-PC : 6.43.4 --> 6.43.12 (OS and bootloader) : No issues RB3011: 6.4...

tesme33

Hi in the past it was possible to configure Ethernet interface to at least some distinct speed values via the winbox/webgui. This resulted in a bandwidth setting for the interface , not using the queue. sample see here: [admin@router01] /interface ethernet> print detail Flags: X - disabled, R - runn...

tesme33

Why do people climb on mountains ?
Because they are there !

Now using a hEX for the test. So no need for other solutions.

tesme33

Hi i have a hAP Lite (default config , WLAN, NAT on ETH1,..) appr. 8MB free RAM. When i try to load my IP Adr. list longer than 2,4MB it crashes, after the crash the list is not loaded. So i have created a smaller one (as attached) and it crashed also, but after some long time and now i can also no ...

tesme33

Hi
in the past it was possible to set the interface speed to some values via the gui (not within the Qeue settings). This settings seem no longer to be available. Correct ?
Only via CLI.

/interface ethernet
set [ find default-name=ether1 ] bandwidth=10M/10M

Can anybody comment ?

thx

tesme33

admin password after upgrade EMPTY. I discovered that the admin pass is empty after the upgrade. So could login without ANY pass. Below how i fixed it. [admin@MikroTik] > 11:31:18 echo: system,error,critical login failure for user admin from EC:8E:B5:5B:4E:92 via win box [admin@MikroTik] > 11:31:19 ...

tesme33

Hi 6.41 running on hAP Lite, RB2011,RB3011 and CCR1009 (PC) , upgraded from different levels. Sometime multiple reboots required to get the firmware (6.41) also flashed. As im not using tagging, VLAN or any other fancy features i can only say that WLAN, routing, DHCP, DHCP Server and firewall is wor...

tesme33

HI im looking for a way to prevent poeple blindly scanning the network. Im having the standart synflood, port scan and spammer rules up and running . But i have now scans where one ip is just running through the ip range and trying to make connections by selecting stupid/random ports looking if some...

tesme33

Hi i have played a little bit with the fastrack and currently i dont see a benefit for my installation. But now im not able to get the dummy rule out of my firewall config. Even that i have already deleted the fastrack rule the dummy rule stays and the 3 mangle rules. So what is now the correct way ...

tesme33

Hi i had on a CCR1009 L2TP to my MAC OSX working. Now it look like that 6.33rc24 breaks it. 17.10.15 16:24:56,433 racoon[871]: IPsec-SA established: ESP/Transport 10.213.213.164[4500]->95.142.x.x[4500] spi=53895329(0x33660a1) 17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 est...

Search found 73 matches