Community discussions

MikroTik App

Search found 21 matches

by Quasar
Fri Aug 21, 2020 3:26 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 275
Views: 70488

Re: v7.1beta2 [development] is released!

WireGuard implementation was done like MikroTik did to OpenVPN or kept as is in Linux 5.6? Thank you. It's Wireguard v1.0.0 proper (as shipped with v5.6). Note for whoever wants to give it a spin: you need to use the cli to set the peer endpoint - Winbox doesn't allow you to set the port (it will d...
by Quasar
Fri Apr 03, 2020 1:53 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 163
Views: 47032

Re: Feature Request - Wireguard Protocol

Its good to see Wireguard is now "in-tree" on the latest kernel probably won't help here from a technical perspective as I believe RouterOS runs an old Kernel but from a support perspective Wireguard has some stability in the Linux community. https://arstechnica.com/gadgets/2020/03/wireguard-vpn-ma...
by Quasar
Sat Sep 14, 2019 11:59 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 62235

Re: RouterOS v7.0beta1 (ARM)

no luck with my hap ac2. Tried upgrading from 6.44 and using netinstall. Not a single frame is coming out of this thing on any ethernet port. Edit: working now. Had to netinstall 6.45.5 only with system + dhcp package, than uploaded 7.0b1 npk and rebooted twice If anyone is having issues installing...
by Quasar
Fri Sep 13, 2019 2:45 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 62235

Re: RouterOS v7.0beta1 (ARM)

BTW Wireguard works with 4.14.142 ;-)
Now that the kernel is compatible, adding the required userspace glue should be easy for MikroTik.

Would really boost VPN performance without having to rely on (hardware) IPsec acceleration.
by Quasar
Sat Feb 16, 2019 7:47 pm
Forum: General
Topic: [Feature request] Wireguard
Replies: 142
Views: 46868

Re: [Feature request] Wireguard

One of the selling points is performance. Especially on embedded devices userspace is not okay. Most high performance packet forwarding is done in user space! Check out VPP, DPDK and OFP Well, that's cheating in the sense that it's accompanied by drivers allowing you to bypass the kernel stack and ...
by Quasar
Mon Feb 11, 2019 8:33 pm
Forum: General
Topic: [Feature request] Wireguard
Replies: 142
Views: 46868

Re: [Feature request] Wireguard

Well ... https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-Not-In-4.20 By the time we get v7 it'll be merged ;) Wireguard does not need to be in the kernel, it can be implemented in a user process. One of the selling points is performance. Especially on embedded devices userspace is not...
by Quasar
Tue Jan 01, 2019 11:31 pm
Forum: General
Topic: [Feature Request] IPv6 Fasttrack
Replies: 34
Views: 9511

Re: [Feature Request] IPv6 Fasttrack

It's 2019. Time to support IPv6 acceleration.

200 Mbit/s via IPv6-over-PPPoE on hAP ac..
by Quasar
Sun Apr 22, 2018 11:00 am
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 15026

Re: winbox vulnerable! Unusual login to routers [SOLVED]

password: mikrotik Thanks! dnstest is actually a dropper, it downloads and executes an additional executable which seems to be related to the Reaper botnet: IoT_reaper: A Rappid Spreading New IoT Botnet It doesn't provide any clue as to how you were infected though. Can someone please advice how to...
by Quasar
Sat Apr 21, 2018 9:13 pm
Forum: General
Topic: winbox vulnerable! Unusual login to routers [SOLVED]
Replies: 44
Views: 15026

Re: winbox vulnerable! Unusual login to routers [SOLVED]

Can you please upload the 'dnstest' binary? Might provide some clues as to what's going on..
by Quasar
Fri Mar 09, 2018 2:45 pm
Forum: General
Topic: Feature requests
Replies: 1279
Views: 289790

Re: Feature requests

Vote for https://www.wireguard.com/ , nice VPN which appears to be supported in systemd 237 (read: on every modern Linux - https://github.com/systemd/systemd/pull/4191 ). Universal VPN technology so to say, just a shame not to be able to connect to. Another +1 for me. Please implement this, as Wire...
by Quasar
Fri Jan 19, 2018 3:05 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 17609

Re: ARM based new goodies on the horizon

RBD52G-5HacD2HnD-TC just popped up on FCC web site. they refer to it as hap ac^2 it is supported already by 6.40.4, i found no data on cpu, could be one like the Qualcomm IPQ-40xx maybe but neither of them is triple chain: https://www.qualcomm.com/products/ipq4019 Why would it be triple chain? Mode...
by Quasar
Thu Dec 28, 2017 11:50 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 96285

Re: v6.41 [current]

All Vlan-filtering on Atheros chipset based switch-chips (CRS1xx, CRS2xx, 2011, etc.) still has to be configured in the switch menu. Otherwise you end up running fully in CPU. /M And you shouldn't do that either it seems. On RB951G I had a switch chip vlan filter configured with strict checking (mo...
by Quasar
Tue Feb 28, 2017 9:03 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2017: new hardware incoming!
Replies: 86
Views: 23139

Re: MUM Europe 2017: new hardware incoming?

My guesses for EU MUM announcements are: Mine are: - LTE enabled wAP (and/or LtAP mini) - 802.11ad hardware (60 GHz!) - (hAP ad?) - PLC (powerline) devices. wAP would make sense. - PoE capable CRS - Quad SFP+ CRS Also: RBwAPR-2nD RBwsAP5Hac2nD RBtAPr-2nD2nD* RBA21GS-5HPacT RBA21GS-5HPacD CRS112-8P-...
by Quasar
Fri Feb 05, 2016 5:06 pm
Forum: General
Topic: Feature request: FastTrack on PPPoE client interfaces
Replies: 4
Views: 2340

Re: Feature request: FastTrack on PPPoE client interfaces

When was this implemented?

Seems to work for me on v6.33.3.. (Dec 03 2015)
by Quasar
Fri Sep 04, 2015 8:26 pm
Forum: RouterBOARD hardware
Topic: hAP lite housing
Replies: 21
Views: 4895

Re: hAP lite housing

I don't like it either.

Can't wall mount it, and its vertical design seems a lot less space efficient to me.

I guess it's a refreshing idea considering the target market, but please keep shipping the old model too.
by Quasar
Wed Feb 11, 2015 9:25 pm
Forum: General
Topic: IGMP Snooping
Replies: 137
Views: 66497

Re: IGMP Snooping

Sigh. +1

Please?
by Quasar
Wed Oct 22, 2014 1:26 pm
Forum: General
Topic: What is the maximum capacity of a RB951G?
Replies: 22
Views: 4236

Re: What is the maximum capacity of a RB951G?

As jarda remarked earlier, that shouldn't happen if the ports are all switched.
by Quasar
Wed Oct 15, 2014 2:14 am
Forum: General
Topic: method for isolating Aldaonlod browsing in Almaekerotk
Replies: 1
Views: 838

Re: method for isolating Aldaonlod browsing in Almaekerotk

Try posting in English instead of relying on Google Translate. This doesn't make any sense whatsoever (just like the rest of your post history).
by Quasar
Mon Oct 13, 2014 5:13 pm
Forum: Beginner Basics
Topic: Firewall Mangle rule shows no traffic
Replies: 10
Views: 2862

Re: Firewall Mangle rule shows no traffic

There's no evidence of TS running the server on RouterOS though, so I'd assume it's a remote UDP OpenVPN instance.
by Quasar
Mon Oct 13, 2014 5:13 am
Forum: Beginner Basics
Topic: Firewall Mangle rule shows no traffic
Replies: 10
Views: 2862

Re: Firewall Mangle rule shows no traffic

What interfaces are involved in the traffic flow? If it doesn't leave a bridge or switch group I think you need to ensure it gets to the firewall, i.e. fix that in the bridge settings.

Adding a trailing mangle LOG target rule might be useful too - packets should show there.
by Quasar
Sun Oct 05, 2014 1:14 pm
Forum: Beginner Basics
Topic: Recover from config error
Replies: 2
Views: 914

Re: Recover from config error

You can use safe mode while managing in console mode or winbox.

EDIT: Also from Winbox - I was misinformed.