okay I think I solved my own problem. From wiki: https://wiki.mikrotik.com/wiki/Manual:Interface/Dot1x In order for mac-auth authentication type to work, the server interface should receive at least one frame containing a client's device source MAC address the device I'm testing with is not very cha...

Is anyone successfully using 802.1x mac auth/vlan assignment in V7.x? We're trying our first deployment and getting entirely unpredictable results. In one test setup, we have reject vlan and server-fail vlans configured, yet the port still goes into un-authorized state with no vlans. Seems to be ent...

Direct link to info: https://help.mikrotik.com/docs/display/RKB/Downgrading+RouterOS Thank you for providing the direct link. I am aware that is the official line, however, here is an example of a device that had 6.47.10 from the factory but is running 6.44.6. https://i.imgur.com/INjgN0z.png Now I'...

You can't downgrade to lower versions than the factory installed ones. BTW; What kind of company policy is that...... V7 is coming to you in one way or another, Not to mention other vendors who do exactky the same.... We will certainly upgrade to V7 at some point (if we are not forced to move away ...

I appreciate your reply but unfortunately it doesn't appear to be helpful. I have been doing this a very long time and searched before I posted. Please note this is a CCR2004-1G-12S+, not a CCR2004-16G. Am well aware V6 is not supported on the CCR2004-16G. I am also aware that you can downgrade back...

Hello, Recently we have began receiving CCR2004-1G-12S+ with V7 pre-installed. This is a problem due to the many changes, incompatibilities, and entirely removed functions in V7. Is there any known way to downgrade these to V6.xx? I reached out to Mikrotik support and their answer was a broken recor...

Or at least just pick the interface that ALREADY HAS an IP in the range of the one provided. The interface selection behavior is just down right stupid as is the lack of ability to change. It's not 1995 anymore, computers often have more than 1 interface.

yes for god sakes. how difficult could it be? Even the linux version doesn't work.....

Yep -- also we are always hesitant to upgrade firmware unless there is a specific issue to address. The risk of firmware upgrade and even just a reboot is not zero. We know that 6.44.3 & 6.44.5 work very well on hundreds of switches and thousands of customers. We're not in a hurry to change it e...

Hello, About 497 days ago we deployed our first Mikrotik CRS326 switches running RouterOS 6.44.3 into production. Today they are one-by-one becoming unreachable via SNMP, and when viewing system uptime in the Web UI, it's becoming clear that the uptime counter is being measured in 32bits and has rol...

Thank you for the reply -- but that's not quite what I'm looking for. Lock on first (https://wiki.mikrotik.com/wiki/SwOS/CRS317#Forwarding) does not require knowledge beforehand of the mac address. The port security feature for RouterOS requires static port-to-mac mapping, which requires knowledge o...

Hi, We need to restrict learned mac addresses per port on CRS326 using RouterOS. This was a feature in CRS1xx/2xx, and apparently is a feature in CRS326 using SwOS (Port Lock->Lock on first>. However, SwOS is too limited in other areas for us, so we use RouterOS on these devices. Is there no way to ...

6.44.3 did not work for me, same problem with Hap AC2, unknown if other models affected.

6.39.3 worked.

Do the CRS326 models not have the ability to perform cable test?

When I select cable test, it just says "Link OK" and doesn't give any additional information. This is on a CRS326-24G-2S+RM running 6.44.3

Appears to be just cosmetic. 8000 byte ping packet works when sourced from vrrp IP address with do-not-fragment set. [admin@MikroTik1] > ping 10.10.7.1 size=8000 do-not-fragment src-address=10.10.7.5 SEQ HOST SIZE TTL TIME STATUS 0 10.10.7.1 8000 64 1ms 1 10.10.7.1 8000 64 1ms 2 10.10.7.1 8000 64 1m...

I'm seeing the same thing. vrrp set on vlan interface. physical inteface mtu is 10222 vlan interface mtu is 9170 vrrp interface mtu set to 9170 but actual mtu is 1500 this is on CCR-1072, RouterOS v6.42.11 config: [admin@MikroTik1] > export compact # jan/09/2019 19:30:00 by RouterOS 6.42.11 # softwa...

For anyone who cares, you can in fact monitor both power supplies on a CCR-1009-1S-1S+ -- it's right there in system health, also available via SNMP.

It seems only the integer UPS voltage is available via SNMP: zabbix:~ # snmpget 10.10.5.10 SNMPv2-SMI::mib-2.33.1.2.5.0 -v 2c -c public SNMPv2-SMI::mib-2.33.1.2.5.0 = INTEGER: 13 And not at all via the API or CLI: <<< /system/ups/print <<< >>> !re >>> =.id=*1 >>> =name=ups1 >>> =port=usbhid1 >>> =of...

We just lost 2 back-to-back that came in on the same order. They both were deployed in late February and died in early April within 2 days of each other. MAC addresses are only a few numbers apart. Both in air-conditioned, raised-floor data center environments. Have several in much harsher condition...

Did you ever figure this out?

I agree, two power supplies are useless if you don't know when one dies.

Please forgive me if this has been covered, I searched a good bit and didn't find it posted. I'm using CCR routers, Mikrotik versions 6.23 and 6.24 I have an issue where, if a vlan interface is created with a bridge selected as it's interface, all tagged packets from the interface are flooded to all...

It must be something on your setup. I am doing a side-by-side comparison of Mikrotik NM5 AC and Rocket M5. The Mikrotik has about 4-6db better signal than the UBNT. These are connected to 2 RD30s on each end of a 22km link, mounted 5ft apart. The 3rd RD30 is for Chain2 but from what I read I need mo...