MikroTik

yacsap

Hello MikroTik Community, I've encountered an issue with the Winbox GUI on RouterOS v7.12.1, specifically regarding the display of IPv6 address prefixes. While my network is functioning correctly, and devices are successfully using IPv6 addresses, the Winbox interface does not show the configured pr...

yacsap

I've managed to upgrade using the Packages menu, and yep all extra packages are upgraded automagically. Thanks team!

yacsap

Hi there, I'm wondering if I have additional packages installed on my RouterOS, for example, ZeroTier, Container. If I want to upgrade my existing RouterOS 7.8 to 7.9, how can I upgrade the additional packages? I was thinking upgrade the RouterOS, and then ZeroTier package, or can I do all of them a...

yacsap

Yes, after I updated the RouterOS, I also upgraded the RouterBOARD firmware to v7.8.

yacsap

I've just submitted a ticket to MikroTik support and I'm waiting for confirmation from MikroTik official that this router behaviour is normal before I put it into live use on Sunday. Could someone please confirm if the behavior I described is normal and not a sign of any potential issues? I'm sure t...

yacsap

Thank you for taking the time to read and respond to my discussion regarding the issues I've been experiencing with my router. I appreciate your input and suggestions for troubleshooting the problem, including performing a NetInstall using RouterOS 7.8. Unfortunately, the issue persists even after t...

yacsap

I wanted to share my video about Eth2 Lit up even without a network cable plugged in. Is this normal? Have a look at this 24 seconds video I made: https://share.icloud.com/photos/029H6ipfWCihupSHMUnO2lO9g RouterOS version when I got is v7.4, and I upgraded both RouterOS and RouterBOARD firmware to v...

yacsap

Is v7.4 stabler than v7.3.1 ?

yacsap

Well, v7.4 just came out with a bunch of bug fixes.

yacsap

Is Zero Tier only available on ARM devices? If so, will this feature be added on TILE-based architecture devices in the future?

yacsap

Hi there, We have hundreds of clients running on MikroTik using IP Cloud Public DNS. All of them cannot connect, and the domain is simply not resolving. I went ahead and checked the domain mynetname.net and found it's expired. andy@iMac ~ % whois mynetname.net % IANA WHOIS server % for more informat...

yacsap

Hi team,

Can we have WireGuard support on MikroTik (would be great if this tunnel can be implemented on the upcoming RouterOS v7)

Cheers
b.L

yacsap

No one has the clue?

yacsap

Hi all,

We have 1 computer on DHCP client, from MikroTik log, it says DHCP offered but never bound.

Screen Shot 2020-05-14 at 10.20.36 AM.png

What might be the issue?

Cheers

yacsap

Have you tried enabling Fasttrack?

yacsap

Thanks for your explanation.

Not the one I wanted to hear, but it's what it is.

yacsap

Those question marks made me even more confuse.

yacsap

I guess there's no way of disabling it? Time to switch to a new AP with different system.

yacsap

Any other ideas?

yacsap

Hi guys, I have issue where my IoT devices are randomly disconnecting, especially my LIFX lights, they just disconnects from the Wi-Fi then not rejoining back. The LIFX support has asked me to disable all WMM & QoS entirely on the Access Point, I saw WMM is enabled on the interface -> wireless w...

yacsap

Update: Only the first and second rule got hit, the rest 4 rules didn't get any hit. Can I safely remove them? And will both port-forwarding and hairpin nat work just using the first two rules? My goals are: From LAN should be able to visit 1.1.1.1 and get to port 80 of 10.0.17.2 So does from WAN sh...

yacsap

Sure, why not. Here's my firewall export: /ip firewall nat add action=dst-nat chain=dstnat comment="http hairpin" dst-address=1.1.1.1 dst-port=80 protocol=tcp to-addresses=192.168.1.2 add action=dst-nat chain=dstnat comment="https hairpin" dst-address=1.1.1.1 dst-port=443 protoco...

yacsap

If connections from LAN to public address work, but hairpin rule does not have any hits, it means that you already have another rule with the same effect higher in srcnat chain. And no, hairpin rule (srcnat) does not replace port forwarding rule (dstnat), you need both. <-- My port forwarding rule ...

yacsap

Update: I created the second rule, but both bytes and packets show 0.
Does that mean I don't need the second rule? Is it safe to remove them?

yacsap

Hi fellow MikroTikers, I have a couple of questions regarding NAT Hairpinning. Reading this WikiTik: https://wiki.mikrotik.com/wiki/Hairpin_NAT My questions are: 1. If we already created the rule below: /ip firewall nat add chain=dstnat dst-address=1.1.1.1 protocol=tcp dst-port=80 \ action=dst-nat t...

yacsap

Still related with this vlan, how can I mass-disable/mass-enable the VLAN's IP?

yacsap

:put [/interface vlan enable [find where vlan-id!=10]]

Hi Jotne, thanks for this

yacsap

/interface vlan enable [find]

Thanks for this, but how can I make except VLAN 10?

yacsap

Very quick test with PPP package says that config for disabled package is not lost and comes back when re-enabled. You can enable your hotspot package and see if it works there too.

Thank you for your quick test and answer. Cheers

yacsap

bump.. anyone?

yacsap

Hi guys, I have a question with system -> packages here. Let's say I have configured something on /ip hotspot Certainly there's configuration there. If I go to system -> packages, disabled hotspot package and then reboot the router. I cannot find the /ip hotspot config anymore my quesions are: 1. do...

yacsap

Hi guys, I'm trying to mass-enable all of my vlan using a script. Can anyone give me an idea here: /interface vlan> print Flags: X - disabled, R - running # NAME MTU ARP VLAN-ID INTERFACE 0 R vlan15-A 1500 enabled 15 bridge1-DIST 1 R vlan25-B 1500 enabled 25 bridge1-DIST 2 R vlan26-C 1500 enabled 26...

yacsap

When will you put the app on another store?
What store?
like store outside google and apple, just the APK
Maybe huawei smartphone detected

Or maybe they got it from Hong Meng Play Store

yacsap

I have this question too!

yacsap

You cannot configure it. You can only select a VPI/VCI setting from the above list. You do that by accessing the link via a VLAN as in the last column of the table. So to use VPI/VCI setting 8/36 you use VLAN 7. VPI/VCI setting not in the table? -> you cannot use this modem. I just used VLAN10 as t...

yacsap

I have this question too.

Can anyone share their experience how MikroTik deal with main/auxiliary fan?

I leave the default setting which is fan auto & main.

But the running fan is auxiliary.

What determines auxiliary fan to be running here?

yacsap

*bumpie

yacsap

I've set my RSTP root bridge using priority 1000 now.

Do I need to set RSTP bridge too for my CRS (switch) or let my STP protocol mode on my CRS set to NONE since CCR already handle the root bridge?

yacsap

Make sure you enable Fasttrack, which will greatly improve speed for most cases.

You can easily follow this tutorial to enable it: https://saputra.org/threads/mikrotik-fa ... -ipsec.34/

yacsap

Is it OK (or recommended) to do so? Will the screen get burns or anything?

yacsap

Is 8000 like the default standard priority for all bridge (including non-MikroTik manufacturer) ?

yacsap

I see, to keep bridge MAC consistency, I'll just enable admin-mac with its original IP then. Regarding priority, currently set to 8000, what is the highest available to set, if this is going to be my main bridge. Is that 1000? I kind of confused with this statement: Warning: In RouterOS it is possib...

yacsap

Hey thanks for your 'forensic analysis' 😁 So this issue is caused by my CCR Ethernet mac starts with 74::::: If I specified the bridge priority, do I need to specify admin-mac as well? And if specifying admin-mac is recommended, can I fill with 00:00:5E:80:00:00 so it becomes the highest priority by...

yacsap

Will specifying admin-mac can remedy this issue? No, it will not. Theoretically you could find a MAC address which would give it priority but that is wrong approach. And how can I make my bridge as the root bridge (even if there's other root ports in the network?) I already told you - give your bri...

yacsap

Will specifying admin-mac can remedy this issue?

And how can I make my bridge as the root bridge (even if there's other root ports in the network?)

yacsap

Do you have a switch with STP/RSTP connected to ether2?

Not that I'm aware of.
I just switched RB2011 to CCR1009, that's all I changed.
Even the configuration are the same (I compared apple to apple using 'export' command)

yacsap

Update: On old RB2011 router, my bridge protocol is RSTP And the bridge always becomes the root bridge (none of its members become a root port) On new CCR1009 router, if I set my bridge protocol is RSTP (which is by default) Ethernet2 always elected as root port, and the bridge is not a root bridge....

yacsap

How to set root port to none, and have the bridge as root bridge?

I usually don't have root port. This is my first time having one, hence I prefer using my usual.

yacsap

Hi all, I just purchased CCR 1009 and transferred most of my settings from RB 2011 and it's live now. However, I have a concern with my bridge, usually, bridge1 is set to root bridge, but now, on my new CCR 1009 it automatically selects ether2 as my root port. How can I demote ether2 as root port an...

yacsap

Hi everyone,

these are the xDSL ATM settings of the modems mentioned above:

Hi Milotop,

How/where can we configure the VPI setting?

A screenshot from your Inbox with VPI setting would be helpful.

Many thanks,
b.L

yacsap

Is it safe to downgrade from 6.44?
Edit: Did it, appears to work fine.

I downgraded 2 of my CCR1009-7G-1C-1S+, RB2011RMUi-AS, RB3011RMUi-AS, and heaps of RB951G-2HnD, all of them are working perfectly fine

yacsap

Read this: viewtopic.php?f=2&t=146122&p=720776#p720776

If I upgrade to 6.44.1 will it fix the issue without changing the config?

yacsap

The issue will be fixed in the next RouterOS release.

Could you please have a look at my issue:
viewtopic.php?f=2&t=146418
Can you please confirm if the issue is same and will be fixed on next version release as well?

Cheers

yacsap

Hi guys, I have an existing L2TP/IPsec Dial-in VPN based on this guide: https://saputra.org/threads/setup-mikrotik-as-l2tp-ipsec-dial-in-vpn-server-with-all-traffics-are-being-routed.61/ But it seems there are some changes in ROS 6.44: On this part: add address=0.0.0.0/0 exchange-mode=main-l2tp gene...

yacsap

*bumpie*

yacsap

Do you have FastTrack enabled on your router?

If so, follow this article: https://saputra.org/threads/mikrotik-fa ... -ipsec.34/

yacsap

Thanks for your input.

Can I use that configuration with one LAN IP network only? For example 192.168.1.0/24?

My servers are in that LAN network and I will have many dsf-nat port forwardings.

Do I need to add each IP route gateway?

And do I need to mangle them (mark connections)?

yacsap

Additional questions:

Since they said all of my public IP Addresses are routed using 1.0.0.1 gateway, can I add all of my public IP Addresses using /32 cidr and hope they will be routed using 1.0.0.1 gateway?

yacsap

Hi guys, I'm setting up a new MikroTik CCR 1009 router, I have a question regarding setting up multiple public IP network (yes, different networks) From the ISP, they are providing me one network cable, they said it will route the following public WAN IP addresses: 2.0.0.1/24 3.0.0.1/24 4.0.0.1/24 I...

yacsap

Looking at this topology, https://wiki.mikrotik.com/images/thumb/6/68/Vrrp-load-sharing.png/400px-Vrrp-load-sharing.png Can we use without Switch in the middle? (i.e. attaching the servers directly to the routers) I'm planning to create a bridge between router. I only have two servers though, and ea...

yacsap

Do you have experience using that script?
Would you know if we implement that on an existing router (not a fresh or blank slate router) ?

yacsap

Do you have Fasttrack enabled?

If so, read this article: https://saputra.org/mikrotik-fasttrack-with-ipsec/

yacsap

Read about the VRRP concept with MikroTik here.

Brilliant!

Appreciate for this.

My understanding is we'll just need to implement VRRP and use exact LAN configuration on both R1 and R2? If so, how can we make both R1 and R2 config in sync?

Cheers

yacsap

Hi guys, I'm planning to buy two decent MikroTik routers to put on a data centre. From the data centre, they will be supplying us with two ethernet cable for WAN, so each router will have their own WAN interface. My question is, (1) what will be the best practice to make both router hot-standby? So ...

yacsap

Hi guys, thanks for your inputs.

If I use /import, will it parse everything? instead of pasting the .rsc on the terminal?

yacsap

Hi guys, I have a question regarding pasting a .rsc script on a blank slate router. # jan/24/2019 11:07:15 by RouterOS 6.43.8 # software id = T1T5-B008 # # model = 951G-2HnD # serial number = 1234567890AB /interface bridge add comment="bridge for switch ports (eth2-5 + wlan1)" name=bridge1...

yacsap

You specify the peer address as 0.0.0.0/0 and set the option 'Generate policy' in the peer setup. This will allow connections from different IP addresses. At least one end must have a fixed address. Regards Andrew Hi Andrew, In order to achieve a dynamic ipsec peer, is it better to setup Generate p...

yacsap

Hi ZeroByte,

Thank you for your explanation.

I will investigate that particular device then, because maybe someone is looking into that IP address, and the device is not responding.

And I thank you to all who has responded to this thread

yacsap

Hi Janisk,

Thanks for replying, how can I reproduce this issue?
Because we didn't change anything recently.

Could this be device malfunctioning?

yacsap

But I couldn't ping 10.0.0.75 and/or any other devices with mac 00:00:00:00:00:00

yacsap

Hi fellow MikroTik users,

Today I'm having strange issue, one of our RB Mac detected as 00:00:00:00:00:00 in ARP print list.

Has anyone faced similar problem with mine?

I tried to plug into different ports, but still getting the same issue.

yacsap

I'm having this issue as well, running on RouterOS v6.33.5

NTP client already set, Router Date/Time are properly setup.

yacsap

I'm having this issue as well, running on RouterOS v6.33.5

NTP client already set, Router Date/Time are properly setup.

yacsap

Hi mrz, Yeah, but even though the function is almost same, but at least we can tweak that 'Apply' button so it will be more safe to apply the configuration, rather than Applying equals with OK. Would be perfect if 'Apply' —> has a safe timeout , if 'OK' button not clicked within X seconds, it will b...

yacsap

Can we have an Apply Configuration feature in Winbox? This feature is to TEST newly configured setting, for example: We did some mistake, we removed default route 0.0.0.0/0, but thank goodness if we had Apply button on Winbox, the router (yes on router's side) will only test the newly applied config...

yacsap

Hi, I would like to propose a feature request on RouterOS v7. In Ci*** IOS they have Ci*** Unified Communications Manager Express, looks like pretty simple, but mostly they're using SCCP, but since most general VoIP they use SIP, why not try to fork Asterisk into RouterOS v7? Looks like simple, won'...

yacsap

My, but this thread has gotten long. :) If this is still not working, then you should probably start attacking small subsets of the goal. Make a GRE tunnel from A to B, put an IP address on each end, and then be able to ping across it successfully. If you're trying to use IPSec to protect the GRE, ...

yacsap

test..

yacsap

And in EoIP Remote Address should I fill respectively VPN remote IP or Local IP? You know, I was thinking to use just the interface itself, but maybe GRE interface would be better for such a thing than EoIP interface (I think it secretly uses GRE anyway). GRE is natively a point-to-point style of i...

yacsap

I wouldn't use bridges with the EoIP tunnels - each site already has a seperate subnet. if you have this: A <--eoip--> B <--eoip--> C Then in site A, add static routes for B lan and C lan with gateway=eoip-interface-name In site C, static routes for A lan and B lan, gateway=eoip-interface-name In s...

yacsap

Hm... that's strange, could you post an excerpt from the EoIP and the related configs? I'm following exactly like explained on http://wiki.mikrotik.com/wiki/Manual:Interface/EoIP When I do this ( port add bridge=bridge1 interface=eoip-remote ) my public network and it's subnet all become unreachabl...

yacsap

One thing I did notice was that in DNS static it shows an entry for the router and a reverse entry for the router's IP, with a TTL which seems to count down from a day to 23:59:59, then 23:59:58, then jump back to 1 day 00:00:01 and decrease down over a few seconds before looping round and doing it...

yacsap

OSPF is a routing protocol which in general distributes IP Layer 3 information in your routing domain i.e. reachability information for all of the subnetworks you have in your network. How to use it? - just enable the process and advertise all of the subnetworks that you want to distribute, even th...

yacsap

At the time I created this thread, I've already removed the local IP from the config and do flush DNS, so it should ask from the internet DNS which is I configured 8.8.8.8 and 8.8.4.4 in my RB. It's either the Mikrotik itself or else the Mikrotik is redirecting port 53 to a device that is also givi...

yacsap

[yacsap@RB] > ping some.domain.name SEQ HOST SIZE TTL TIME STATUS 0 202.159.xx.xx 56 47 318ms 1 202.159.xx.xx 56 47 317ms sent=2 received=2 packet-loss=0% min-rtt=317ms avg-rtt=317ms max-rtt=318ms [yacsap@RB] > When I ping from the RB, it returns me the 'real IP'. But if I do nslookup from computer...

yacsap

*bump*

yacsap

Hi, I have DNS issue here: C:\Users\yacsap.VOLT>nslookup Default Server: MikroTik Address: 1.0.0.1 > some.host.name Server: MikroTik Address: 1.0.0.1 Non-authoritative answer: Name: some.host.name Address: 10.0.0.9 > It keeps giving me local IP address which I set before in MikroTik's Static DNS. Bu...

yacsap

With a simple topology like this, I would start with static routes. You only need to add two routes at each site. The WAN IP Address is DHCP (i.e. Non-Static) on both LAN 1 and LAN 3. So you set up your server at LAN2 and the routers at LAN1 and LAN3 will act as clients, establishing secure connect...

yacsap

With a simple topology like this, I would start with static routes. You only need to add two routes at each site.

The WAN IP Address is DHCP (i.e. Non-Static) on both LAN 1 and LAN 3.

yacsap

I don't know what do you mean by "bridging". As per your description, you use different IP subnets in the three LANs, so in that case if you "bridge" them (this is a Layer 2 operation), the hosts in the three sites will not be able to communicate, as they're configured in a thre...

yacsap

the answer is simple, different subnet = traffic not as simply as switch to switch, but it was connected because of routing procedure (i.e. masquerade). RB2011 has 2 switch group, gigabit and fast ethernet, each has different switch chip -- means port 1-5 and 6-10 are on different broadcast domain. ...

yacsap

There is no such thing as "30-30-30 RULE METHOD" for RouterBoards. What you should try is this: 1. Press reset button, power on the device and immidiately release the reset button. This will hopefully start the router with backup bios. If it boots up, you should upgrade your firmware. 2. ...

yacsap

Hi, I would like to ask how to link 3 LAN through WAN? LAN A: 10.0.0.0/24 --> WAN (Internet) LAN B: 10.0.3.0/24 --> WAN (Internet) LAN C: 1.0.0.0/24 --> WAN (Internet) My idea is to bridge LAN A to LAN B Then bridge LAN C to LAN B also So B is acting like a Bridge (Rendezvous / Meeting Point) Should...

yacsap

I wish MT would release a 5ghz or dual-band model of integrated product.

I would buy a RB2011UiAS-5HnD-IN today if it were available.

RB2011UiAS-52HnD-IN would be better

yacsap

http://u.indo.fm/i/4XuvU.png Hi guys, My RB750G was ok, but suddenly all LAN disconnected, only power LED is on. Then I tried to unplug the power then plugging it back in but still no luck. I also tried to press the reset button for 10 seconds (hoping for a system reset) but no luck either. Any clu...

yacsap

I put behind of it's dead though.. My RB750G has been working perfect for me for a very long time.

But the problem is I haven't downloaded the configuration backup

Unfortunately it doesn't even have a serial port.

yacsap

*bump*

yacsap

http://u.indo.fm/i/4XuvU.png Hi guys, My RB750G was ok, but suddenly all LAN disconnected, only power LED is on. Then I tried to unplug the power then plugging it back in but still no luck. I also tried to press the reset button for 10 seconds (hoping for a system reset) but no luck either. Any clu...

yacsap

Keep us informed about the results.

Sure thing, I just got the RB but when I set it to AP Bridge mode, it doesn't broadcast the SSID as it should.

Called the technical support team, they said it maybe product defect, so I RMA-ed the RB for exchange.

yacsap

*bump*

yacsap

Anybody here..?

yacsap

Alright then, I will make the purchase, thank you.

yacsap

*bump*

yacsap

*bump*

yacsap

Where does it save the session layout? To the router or winbox's configuration file in windows? into the VIW file, on your PC. you can put the VIW file in anothe PC to have the same window layout when you connect somewhere (not just this router, any router) Thank you for your information, I really ...

yacsap

It's too far. The Ap will be seen at clients with good signal, but many weak clients on the opposite side and mostly behind obstacles will not be able to connect to the Ap. Their signal at sxt will be too weak, if any. Hi jarda, Thank you for your reply. Any good idea which AP should I use in this ...

yacsap

Hi, I would like to ask, have you ever used MikroTik RBSXTG2HnD 2.4GHz Dual Chain 802.11b/g/n CPE/AP as Point-to-Multipoint Access Point ? My plan is to put RBSXTG2HnD on the roof (it's on 16th floor) and I want all users on the opposite building (their laptops, gadgets, etc) able to connect to this...

yacsap

remember to remove the "\" before "?" !!! I do not have that service = i not have one account on hurricane to test I fixed to be like this: But same, still not working. :local ddnshost value="some.host.name"; :local key value="secret"; :local updatehost value...

yacsap

First of all: DNS and Internet must work: :ping [:resolve http://www.google.com]; I can fix the script, but I can't test it, i do not have that service. If you want test some scripts on terminal, put everytime all script between { } and put "\" before "?" If you put that on scri...

yacsap

Where does it save the session layout? To the router or winbox's configuration file in windows?

yacsap

What is this? :set ipv4addr [/ip address get [/tool fetch url="http://myip.dnsomatic.com/" mode=http] address] :set ipv4addr [:pick [:tostr $ipv4addr] 0 [:find [:tostr $ipv4addr] "/"]] It's all wrong. /tool fetch mode=http upload=no url="http://myip.dnsomatic.com/" kee...

yacsap

Hi, Could you please help fix my script below: # Update Hurricane Electric DDNS IPv4 address :local ddnshost "some.host.name" :local key "secret" :local updatehost "dyn.dns.he.net" :local outputfile ("HE_DDNS" . ".txt") # Internal processing below......

yacsap

bump..

yacsap

I tried to make exactly like this but couldn't get the connection working, it says on the browser: The connection was reset The connection to the server was reset while the page was loading. The site could be temporarily unavailable or too busy. Try again in a few moments. If you are unable to load ...

yacsap

please check this example, maybe it would help you to make your setup:
http://wiki.mikrotik.com/wiki/Policy_Base_Routing

Hi uldis,

Seems relevant, thank you for your reply and I will try that.

yacsap

Hi skot, Thank you for your reply, I'm impressed with your script. I set up like this but still couldn't get my router beep on login failures: # BEGIN SETUP :local scheduleName "login-failures" :local startBuf [:toarray [/log find message~"login failure"]] :local removeThese # EN...

yacsap

wow, it's too complex.

how to make it even simpler, like just to beep when someone failed logging in, so it will notify our on-spot technician.

yacsap

yacsap

Like this:

How to make MikroTik beep?

Is it possible to trigger event like error then make it beep somehow?

Any idea would be appreciated.

Thank you.

yacsap

*bump* anyone ?!

yacsap

Hi, I would like to ask how to route all Netflix Traffic through VPN? [yacsap@ROUTER] > interface pptp-client print Flags: X - disabled, R - running 0 R name="pptp-out1-SL" max-mtu=1460 max-mru=1460 mrru=disabled connect-to=64.125.118.67 user="home" password="password" ...

yacsap

I have RB2011UiAS-RM and cannot get my APC Smart-UPS working through it's USB. APC BR 1500i Smart-UPS Data Port -> RB 2011 UiAS - RM USB Port. It says USB port already in use and on the log says: Error acquiring USB Port . I tried to crimp an Ethernet cable like in http://wiki.mikrotik.com/wiki/Manu...

Search found 122 matches