Is it possible to extract peer-dns value (one or more ip addresses) from ovpn-client connection? Extracting from dynamic DNS field is not always possible (f.e. if peer dns is not used at the moment). Idea is to make script which checks that peer DNS resolves hosts correctly and switching use-peer-dn...

Same problem with hAP ac2 (6.48.6 (long-term)) and 2GHz wifi. Subjectively, it all started after adding a slave interface and a client with WPA PSK+AES authorization (not WPA2+AES)

May be you should also do: To reset NAT connections that were established using old gateway?

Does the DAC link have Rx FCS Errors also?

Can anybody try to add attenuators on problematic links? Would it change anything?

The problem is partially solved by the change of the CRS317 system to SwOS. But still Rx FCS Errors occur on the 10G interfaces.

We can confirm the same, but not on all interfaces, those that were stable on RoOS have only 2 Errors.

So I need to import CA (that was used to sign the cert that is stated in SSTP server settings) to WIN7 and that would be enough? As soon as CA cert is expired - no connection is possible?

And how WIN7 client verifies mikrotik Server? Only by the CA cert? If I issue CA cert on mikrotik, gonna set it as CERT on SSTP server settings and import to WIN7 - this chain gonna work fine? After CA cert is expired no connection would be possible?

Strange situation, issued self-signed CLIENT cert on mikrotik and imported into Win7 does not work, because Win7 cannot verify its authenticity, but if I import the CA cert from the mikrotik which was used to sign the CLIENT certificate then Win7 can connect, but at the same time if I remove CLIENT ...

So seems like the problem is with CRS317-1G-16S+ We have one CRS317-1G-16S+ in center and three CRS317-1G-16S+ at remote ends, after 6 days from reboot we got port flapping - but not on all ports, we tried to change SFP+ modules, cables but no sense. After we changed from RoOS to SwOS on central CRS...

BTW, how do u guys can confirm that there no port flapping under SwOS? I didnt find any log section in SwOS web interface...

Does anyone have port flapping problem with 10G link between CRS317-1G-16S+ <<>> CRS317-1G-16S+ ? In our case it starts to happen after about a week after reboot and it happens on 2 of 3 ports. We tried to interchange modules used on stable link - but on other link it also flaps. We have flapping on...

Could you please send us email, about your setup and problem, to support@mikrotik.com?

Ticket#2019040322003846

Have the same problem with UF-SM-10G & CRS317-1G-16S+ with 6.42.12.
Any RoOS version with fix?

Using UF-SM-10G in between CRS317-1G-16S+ and port flaps up and down 10 times a day... The strange thing sometimes port flaps only on side (time is synchronized, fw is the same): CORE mar/23 11:46:43 interface,info sfp-sfpplus5-4422 link down mar/23 11:46:44 interface,info sfp-sfpplus5-4422 link up ...

Is there any mail list which is used for user notification about critical vulnerabilities like recent with http and winbox servers?

Seems like no new devices announced with specs I've interested for... just wasted 3 weeks of waiting

So, any news?

"If there is anything interesting to announce"
These are too common words I suppose... )

OK, may be you can answer in common words about my question? At lease should I buy RB1100AHx4 now or there would be something more interesting released? )

May be someone knows if Mikrotik plans to release something like this in the near future (3-6 months)? 1) Something like RB1100AHx4 ($300-350) but with ports directly connected to the CPU, higher performance and HW IPSec support? 2) Something like RB2011iLS-IN but with hardware IPSec support & 2...

Previously there were 2 possible ways to implement VLAN functionality: 1) Via the switch chip VLAN functionality which was 100% hardware (switch > vlan) 2) Via the CPU functionality which was 100% software (create multiple bridges for each VLAN (untagged ports), and one bridge for tagged ports) Solu...

Was there any fix in 6.30 preventing from using multiple IP addresses on a single interface with same subnet mask? I've had two addresses 10.10.0.2/29 & 10.10.0.5/29 -- for 6 months it was working fine (on 6.23-6.28) after upgrade to 6.30 it stopped. In torch I see incoming ICMP to 10.10.0.5 but...

After upgrading CCR1009-8G-1S-1S+ from 6.28 to 6.30 I have problem with multiple IP Addresses on one VLAN interface, only first IP is replying to ping. Any workaround for that? If I use downgrade to 6.28 all config will be erased? I've also updated firmware from 3.22 to 3.24 -- is this sensitive to ...

May be someone can advice how to correctly set up mikrotik for such network configuration and whether it is possible at all? I want to have wire transfer speed between tagged and untagged ports in the same VLAN and access to router ip (different for each VLAN) from tagged and untagged ports. I need ...

Currently using RB951G-2HnD overclocked to 750MHz to get higher OpenVPN transfer rates, but need more ports so thinking about changing to RB2011UiAS-2HnD-IN, AFAIK it has the same CPU, but I'm not sure about all other stuff... so asking the community is somebody can confirm that RB2011UiAS-2HnD-IN c...