MikroTik

Quasar

There doesn't have to be any hardware. I mean, there's a CD and install image - suggests it's meant to install on off-the-shelf hardware.

Otherwise it could've been merged in ARM64 as well.

Quasar

I managed to debug and solve my issue, turns out it was (ever so subtle) user error. I had an (unrelated) IPsec policy which happened to match on the IGMP querier source address. As a result, IGMP queries passed the firewall but are then still dropped due to the policy. Unfortunately that means your...

Quasar

I emailed support@ 11 days ago, but still haven't received a reply (SUP-98496). I rarely contact support, but in the past I got really quick and helpful replies. Now, not even an acknowledgement? Are delays like this normal these days? Of course I checked the support portal and found a ticket there ...

Quasar

WiFi on hAP ax² fails for me on v7.7beta8 (it was fine on v7.7beta6). On both 2.4 GHz and 5 GHz stations try to connect, but fail disconnected, key handshake timeout, signal strength -42 I would create a ticket, if it wasn't for the fact that MikroTik isn't even answering the one I've had open for a...

Quasar

I'm experiencing IGMP proxy issues as well (v7.6/v7.7beta6) on hAP ax². It proxies the downstream request just fine and starts forwarding multicast traffic, but whenever the upstream router sends a Membership Query it goes unanswered. This means the multicast stream will drop out after ~4 min becaus...

Quasar

Anyone want to hazard a guess how fast this will route IPv6 (or: non hw accelerated)? Seems like in theory it has an advantage over hAp ax² due to the CPU frequency. Ideally I'd like to route 1 Gbit/s of PPPoE encapsulated IPv6, but my gut feeling tells me RB4011 or RB5009 is still the way to go for...

Quasar

The new NTP client in 7.1 is having a very hard time synchronising the clock on an RB750Gr3. Is this a problem with the new NTP client or is it showing an issue with the hardware clock in the device? [admin@MikroTik-Malthus] > /system/ntp/client/ print enabled: yes mode: unicast servers: nz.pool.nt...

Quasar

Thanks, very interesting! I think my real-life v6 performance was closer to 20 MB/s than 36 MB/s (which supports your theory), but my gut feeling tells me traffic patterns would be the deciding factor in the end - on a home connection it seems easy to hit the cache on a single download (I'm sure it ...

Quasar

check your routes... I'm sick of reposting this link everywhere https://forum.mikrotik.com/viewtopic.php?t=177800#p874200 Thanks. That solves it. If you use PPPoE and DHCPv6 uncheck 'Add Default Gateway' on the latter, or set route distance >1 After your comment I checked my routes: [admin@router] ...

Quasar

... 3. ipv6 > fw > cvonnections is empty with none connections 4. ipv6 > fw > filter rules i have accept established/related connections and after that i have drop invalid. With above setup, all connections drop as invalid (tcp syn,ack,syn/ack, udp). The above setup work perfect in 6.x editions. I ...

Quasar

I just tried to upgrade my hap ac3 but had to downgrade it back to 6.49.2 again. IPv6 throughput on 6.49.2 is 420Mbit/s but on 7.1 it's only 200Mbit/s. So that's a significant regression. Thanks! Can anyone else share numbers on IPv6 routing speeds? I was about to gamble on upgrading a hAP ac to v7...

Quasar

same here ... totally numb ... like nothing I've got a very helpful response from MikroTik support which made it work (and probably makes it work for you or anyone else struggling as well). The root-dir= parameter is used to specify the location where the container root file system is extracted (th...

Quasar

Thanks. Still doesn't work. I guess I'll contact support.

Quasar

It works if you set the entrypoint to /usr/bin/id in the image.

Thanks a lot for the transcript. Unfortunately, it still doesn't work - I copied your commands and docker steps verbatim (also switched to docker instead of podman).

Can you upload the container tar somewhere so I can rule that out?

Quasar

Is Alpine working for anyone? I saved current Alpine for armv7, which runs just fine on my aarch64 machine: # podman pull --arch=arm --variant=v7 alpine:3.13 Resolved "alpine" as an alias (/var/cache/containers/short-name-aliases.conf) Trying to pull docker.io/library/alpine:3.13... Gettin...

Quasar

Shut up and take my money!

It looks like the switch chip supports L3 switching/routing:)

But does it support IPv6 hardware offloading as well?

Quasar

*) api - added support for REST API;

Nice! For anyone giving it a spin: do note that it's on the www-ssl service - I spent some time wondering why api-ssl wasn't responding to my HTTP requests..

Quasar

At least we now know that you are going to use these chips for future products. Totally agree with anuser about a wifiwave2-lite package. As always, there are some other interesting bits in there. Models containing '924' and '5009' for example. 5009 would be the 4011 successor with 802.11ax, IPQ807...

Quasar

WireGuard implementation was done like MikroTik did to OpenVPN or kept as is in Linux 5.6? Thank you. It's Wireguard v1.0.0 proper (as shipped with v5.6). Note for whoever wants to give it a spin: you need to use the cli to set the peer endpoint - Winbox doesn't allow you to set the port (it will d...

Quasar

Its good to see Wireguard is now "in-tree" on the latest kernel probably won't help here from a technical perspective as I believe RouterOS runs an old Kernel but from a support perspective Wireguard has some stability in the Linux community. https://arstechnica.com/gadgets/2020/03/wiregu...

Quasar

no luck with my hap ac2. Tried upgrading from 6.44 and using netinstall. Not a single frame is coming out of this thing on any ethernet port. Edit: working now. Had to netinstall 6.45.5 only with system + dhcp package, than uploaded 7.0b1 npk and rebooted twice If anyone is having issues installing...

Quasar

BTW Wireguard works with 4.14.142

Now that the kernel is compatible, adding the required userspace glue should be easy for MikroTik.

Would really boost VPN performance without having to rely on (hardware) IPsec acceleration.

Quasar

One of the selling points is performance. Especially on embedded devices userspace is not okay. Most high performance packet forwarding is done in user space! Check out VPP, DPDK and OFP Well, that's cheating in the sense that it's accompanied by drivers allowing you to bypass the kernel stack and ...

Quasar

Well ... https://www.phoronix.com/scan.php?page=news_item&px=WireGuard-Not-In-4.20 By the time we get v7 it'll be merged ;) Wireguard does not need to be in the kernel, it can be implemented in a user process. One of the selling points is performance. Especially on embedded devices userspace is...

Quasar

It's 2019. Time to support IPv6 acceleration.

200 Mbit/s via IPv6-over-PPPoE on hAP ac..

Quasar

password: mikrotik Thanks! dnstest is actually a dropper, it downloads and executes an additional executable which seems to be related to the Reaper botnet: IoT_reaper: A Rappid Spreading New IoT Botnet It doesn't provide any clue as to how you were infected though. Can someone please advice how to...

Quasar

Can you please upload the 'dnstest' binary? Might provide some clues as to what's going on..

Quasar

Vote for https://www.wireguard.com/ , nice VPN which appears to be supported in systemd 237 (read: on every modern Linux - https://github.com/systemd/systemd/pull/4191 ). Universal VPN technology so to say, just a shame not to be able to connect to. Another +1 for me. Please implement this, as Wire...

Quasar

RBD52G-5HacD2HnD-TC just popped up on FCC web site. they refer to it as hap ac^2 it is supported already by 6.40.4, i found no data on cpu, could be one like the Qualcomm IPQ-40xx maybe but neither of them is triple chain: https://www.qualcomm.com/products/ipq4019 Why would it be triple chain? Mode...

Quasar

All Vlan-filtering on Atheros chipset based switch-chips (CRS1xx, CRS2xx, 2011, etc.) still has to be configured in the switch menu. Otherwise you end up running fully in CPU. /M And you shouldn't do that either it seems. On RB951G I had a switch chip vlan filter configured with strict checking (mo...

Quasar

My guesses for EU MUM announcements are: Mine are: - LTE enabled wAP (and/or LtAP mini) - 802.11ad hardware (60 GHz!) - (hAP ad?) - PLC (powerline) devices. wAP would make sense. - PoE capable CRS - Quad SFP+ CRS Also: RBwAPR-2nD RBwsAP5Hac2nD RBtAPr-2nD2nD* RBA21GS-5HPacT RBA21GS-5HPacD CRS112-8P-...

Quasar

When was this implemented?

Seems to work for me on v6.33.3.. (Dec 03 2015)

Quasar

I don't like it either.

Can't wall mount it, and its vertical design seems a lot less space efficient to me.

I guess it's a refreshing idea considering the target market, but please keep shipping the old model too.

Quasar

Sigh. +1

Please?

Quasar

As jarda remarked earlier, that shouldn't happen if the ports are all switched.

Quasar

Try posting in English instead of relying on Google Translate. This doesn't make any sense whatsoever (just like the rest of your post history).

Quasar

There's no evidence of TS running the server on RouterOS though, so I'd assume it's a remote UDP OpenVPN instance.

Quasar

What interfaces are involved in the traffic flow? If it doesn't leave a bridge or switch group I think you need to ensure it gets to the firewall, i.e. fix that in the bridge settings.

Adding a trailing mangle LOG target rule might be useful too - packets should show there.

Quasar

You can use safe mode while managing in console mode or winbox.

EDIT: Also from Winbox - I was misinformed.

Search found 39 matches

Re: MikroTik AMPERE CPU (coming soon)

Re: IGMP Proxy not working after cannot leave multicast group

Support not answering tickets?

Re: v7.7beta [testing] is released!

Re: IGMP Proxy not working after cannot leave multicast group

Re: MikroTik hAP ax³ [C53UiG+5HPaxD2HPaxD]

Re: v7.1 is released!

Re: v7.1 is released!

Re: v7.1 is released!

Re: v7.1 is released!

Re: v7.1 is released!

Re: v7.1rc3 adds Docker (TM) compatible container support

Re: v7.1rc3 adds Docker (TM) compatible container support

Re: v7.1rc3 adds Docker (TM) compatible container support

Re: v7.1rc3 adds Docker (TM) compatible container support

Re: MikroTik RB5009UG+S+IN

Re: v7.1beta4 [development] is released!

Re: v7.1beta3 [development] is released!

Re: v7.1beta2 [development] is released!

Re: Feature Request - Wireguard Protocol

Re: RouterOS v7.0beta1 (ARM)

Re: RouterOS v7.0beta1 (ARM)

Re: [Feature request] Wireguard

Re: [Feature request] Wireguard

Re: [Feature Request] IPv6 Fasttrack

Re: winbox vulnerable! Unusual login to routers [SOLVED]

Re: winbox vulnerable! Unusual login to routers [SOLVED]

Re: Feature requests

Re: ARM based new goodies on the horizon

Re: v6.41 [current]

Re: MUM Europe 2017: new hardware incoming?

Re: Feature request: FastTrack on PPPoE client interfaces

Re: hAP lite housing

Re: IGMP Snooping

Re: What is the maximum capacity of a RB951G?

Re: method for isolating Aldaonlod browsing in Almaekerotk

Re: Firewall Mangle rule shows no traffic

Re: Firewall Mangle rule shows no traffic

Re: Recover from config error