Community discussions

MikroTik App

Search found 34 matches

by rodpp
Tue Sep 05, 2023 11:07 pm
Forum: Announcements
Topic: v7.11.2 [stable] is released!
Replies: 348
Views: 160676

Re: v7.11, 7.11.1 and more [stable] are released!

After upgrading the CCR2004-1G-12S+2XS to 7.11.2, the interfaces using RJ45 SFP 1G copper module are all down after rebooting.

If I disconnect and reconnect the modules physically it works again.

Disabling the interface in Winbox and enabling again sometimes works sometimes don't.
by rodpp
Wed Dec 28, 2022 4:11 am
Forum: General
Topic: Wireguard only works with IPv4 peers
Replies: 0
Views: 358

Wireguard only works with IPv4 peers

Hi! I have a Wireguard server configured in a Mikrotik router (ROS 7.6) that only works when the peer has an IPv4 address. If the peer has an IPv6 address it doesn't work. One peer is my cell phone, sometimes the LTE carrier assing to it an IPv4, sometimes an IPv6. That's the problem, everytime it g...
by rodpp
Tue Jul 19, 2022 3:20 am
Forum: General
Topic: What could I do with a spare router in my home network?
Replies: 2
Views: 359

Re: What could I do with a spare router in my home network?

Thanks for answering!

Yes, probably the best use for it is for tests/play with new things anyway.
by rodpp
Sun Jul 17, 2022 1:26 am
Forum: General
Topic: What could I do with a spare router in my home network?
Replies: 2
Views: 359

What could I do with a spare router in my home network?

Hi! I have a home network working good, with various VLANS, two WAN links in load balance, VPN server (Wireguard), etc. My main router is a CCR2004-1G-12S+2XS, that replaced an old RB3011. As I have a dedicated switch, using the RB3011 as a switch is not necessary in my network. So, I leave the RB30...
by rodpp
Tue Jan 18, 2022 10:26 pm
Forum: Announcements
Topic: v7.1.1 is released!
Replies: 443
Views: 223475

Re: v7.1.1 is released!

I had a Wireguard problem here, maybe someone can check. I configured an external paid VPN service. To change the contry the connection output will be, I have to change the endpoint field in the Peer configuration. The problem is that after changing the endpoint address, the RouterOS ramdomly connec...
by rodpp
Tue Mar 23, 2021 11:16 am
Forum: RouterBOARD hardware
Topic: RB3011UiAS-RM
Replies: 1
Views: 968

Re: RB3011UiAS-RM

Yes, you'll get the 300Mbps. But check the RB4011, it's CPU is more powerfull but lacks the USB port and the VLAN aware switch. I have a RB3011 and two 300Mbps Internet links, but using failover and load balance, with mangle and QOS, ie. no fasttrack, it is not capable of the 600Mbps combining the t...
by rodpp
Sat Mar 20, 2021 1:13 am
Forum: General
Topic: Why can't I make my hEX lite into a router?
Replies: 19
Views: 2564

Re: Why can't I make my hEX lite into a router?

It seems you are not familiar with the RouterOs yet. It's very powerful but with a steep learning curve. It's better to start with the very basic working before attempting changing configurations. I suggest you to reset the router to the default configuration: [System]->[Reset Configuration]->[Reset...
by rodpp
Mon Mar 15, 2021 9:17 am
Forum: Beginner Basics
Topic: Need Input For SOHO Upgrade
Replies: 11
Views: 1618

Re: Need Input For SOHO Upgrade

It seems that your network is well dimensioned for your use. Dou you identify some points that needs improvements? A possible upgrade path is going to a 10Gbps LAN, if there is enouth traffic/bandwidth demand between your servers and workstations, like a NAS/File Server for example. Another one is u...
by rodpp
Mon Mar 01, 2021 6:15 am
Forum: Useful user articles
Topic: Using RouterOS to VLAN your network
Replies: 291
Views: 419122

Re: Using RouterOS to VLAN your network

@pcunite
I would like to thank you very much!
The best article about VLANs in RouterOS that I found, by a large margin.
I configured my network following your instructions, everything works as expected.
Excellent job.
by rodpp
Wed Feb 24, 2021 4:08 am
Forum: RouterBOARD hardware
Topic: Problem with CRS112-8P-4S no more than 100Mbps of cpu at 100%
Replies: 2
Views: 1927

Re: Problem with CRS112-8P-4S no more than 100Mbps of cpu at 100%

Only the CRS3XX series provides hardware offload using bridge VLANs.

For your CRS1XX, please see here: https://wiki.mikrotik.com/wiki/Manual:C ... s_examples
by rodpp
Sat Feb 20, 2021 2:24 am
Forum: RouterBOARD hardware
Topic: CCR1009 poor bridge performance [SOLVED]
Replies: 10
Views: 3642

Re: CCR1009 poor bridge performance [SOLVED]

As Windows 10 doesn't support link aggregation, you must relay on the NIC software. And chances are that Windows updates eventually break it. Try to follow these instructions, probably the two NICs must be the same model: https://www.intel.com/content/www/us/en/support/articles/000032008/network-and...
by rodpp
Sat Feb 20, 2021 2:08 am
Forum: RouterBOARD hardware
Topic: CCR1009 poor bridge performance [SOLVED]
Replies: 10
Views: 3642

Re: CCR1009 poor bridge performance [SOLVED]

Intel PROSet always shows one of the NICs as inactive although both work just fine separately. It seems like a link state monitoring problem (ARP or MII are supported by RouterOS). Check it both sides, on router and on server. According with the balance mode, some monitoring methods doesn't work.
by rodpp
Fri Feb 19, 2021 5:33 pm
Forum: RouterBOARD hardware
Topic: CCR1009 poor bridge performance [SOLVED]
Replies: 10
Views: 3642

Re: CCR1009 poor bridge performance [SOLVED]

This CCR1009 doesn't have a chip switch, so no hardware offload:
Image

But it's not a problem here, because it have a beefy CPU.
by rodpp
Fri Feb 19, 2021 4:28 pm
Forum: RouterBOARD hardware
Topic: CCR1009 poor bridge performance [SOLVED]
Replies: 10
Views: 3642

Re: CCR1009 poor bridge performance [SOLVED]

You could try to test each server NIC individually, removing one cable and then another. If each one can reach 1Gbps, then probably there is no problem. To use 1Gbps on both interfaces, your application must demmand that from both. Or you can try to configure link aggregation, creating an unique int...
by rodpp
Sun Dec 27, 2020 3:33 am
Forum: General
Topic: Mikrotik device behind limited ISP modem
Replies: 18
Views: 4534

Re: Mikrotik device behind limited ISP modem

Another option is to have admin access to the ISP modem/router, and create your subnets there. Then in the Mikrotik you can create two bridges. I had that same problem some time ago, having Internet and phone from the same box and no bridge mode possible. After complaing with the ISP, they replaced ...
by rodpp
Sun Dec 27, 2020 3:21 am
Forum: General
Topic: Please finish implementation of OpenVPN protocol (authentication without password, certificates)
Replies: 5
Views: 1661

Re: Please finish implementation of OpenVPN protocol (authentication without password, certificates)

I'm with the OP. OpenVPN is a very secure open source VPN protocol, and some VPN providers only accept it, like AirVPN. It is missing in RouterOS the client authentication using certificates, that is the most secure way to do it. Should we wait for that implementation in RouterOS, or forget about th...
by rodpp
Thu Dec 10, 2020 12:23 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

I found the problem. It was missing a masquerade NAT rule. I added to the WAN interface list (that already have a masquerade rule in place) the ether3 interface, that ether3 connect to the OpenVPN router LAN: /interface list member add list=WAN interface=ether3 Everything is ok now, thank you all! R...
by rodpp
Wed Dec 09, 2020 3:18 pm
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Yes, only one traffic stream should be enough, but I have no idea how to implement it. I'll research about this.

Thank you very much for analysing my configuration, I appreciate your help!
by rodpp
Wed Dec 09, 2020 5:51 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Well that seems to be the problem for me. Why does the VPN ROUTER have two LANIPS or two WANIPS It should only have one, requests come from the single LAN IP, (routed there by the mangle rules and route created) into the VPN router, they get encrypted, not sure what you are doing there, and GO OUT ...
by rodpp
Wed Dec 09, 2020 2:20 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Maybe a image can help me explain better the IP addresses:
Image
by rodpp
Wed Dec 09, 2020 2:03 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Hmm, dont tell me your trying to to vpn over an lte celluar network LOL, Might as well use a soup can with a string to communicate. hehehe... no, no. It is only a redundancy, for the rare occasions when the fiber go down. But I contracted a second fiber link, to be installed in the next days. (1) W...
by rodpp
Tue Dec 08, 2020 10:57 pm
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Listing part rules never helps me /export hide-sensitive file=anynameyouwish Not positive but likely your firewall rules get in the way. Yes, probably, it is a mess... # dec/08/2020 17:51:32 by RouterOS 6.47.8 # software id = 03Q9-KY1R # # model = RouterBOARD 3011UiAS # serial number = 7810087375DE...
by rodpp
Tue Dec 08, 2020 9:33 pm
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

Okay got it, Fixed list of IPs from various vlans for any internet traffic require to be routed through the OPEN VPN router, otherwise normal LAN to LAN traffic. As described to me in general. (1) Create another route, other than the default route which identifies a pathway to all destinations via ...
by rodpp
Tue Dec 08, 2020 4:00 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

The problem I am having is figuring out how to direct certain vlan IP, devices on different vlans to get routed through the OPEN Vpn router, but not all the time. Can you confirm that those IP addresses ONLY require VPN access through the openvpn, or are they expecting to have normal activity throu...
by rodpp
Mon Dec 07, 2020 11:52 pm
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

To keep the requirement clear, would this be correct. (1) I wish to use an existing router I have, that does OPEN VPN, but behind the RB3011. (2) I wish to be able to direct various devices on different VLANS to use the OPEN VPN connection. Assumptions The other router has to be in router mode to a...
by rodpp
Mon Dec 07, 2020 5:51 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

If all traffic from the second computer is to go via the WR1043 either put a few ports in a separate bridge on the RB3011, or change the existing bridge to be vlan-aware and use VLANs. No need for any DHCP, NAT, etc. as those few ports are effectively operating as an unmanaged switch. If some of th...
by rodpp
Mon Dec 07, 2020 1:55 am
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Re: Inbound and outbound connections on the same gateway

I dont understand the explanation. What device brand is router 2?? Router 2 is a Tp-link WR1043nd, with the OpenWRT firmware. How can a port on the RB3011 get an IP address from Router1? There is no Router1, only the RB3011 and Router2. A port on the RB3011 get an IP address from Router2 configurin...
by rodpp
Sun Dec 06, 2020 5:01 pm
Forum: General
Topic: Inbound and outbound connections on the same gateway
Replies: 21
Views: 3019

Inbound and outbound connections on the same gateway

Hello! I posted a similar question in another thread, mixed with UDP OpenVPN tunnel in a OpenWRT box, and get no answers. It is my fault to have mixed various potential problems together. So, I am testing a simplified setup and asking for help. This is the setup: WAN --PPPoE-->RB3011---->LAN1---->ro...
by rodpp
Fri Dec 04, 2020 7:12 pm
Forum: General
Topic: Working with an external "black box"
Replies: 1
Views: 882

Re: Working with an external "black box"

I'm trying a similar setup here. As ROS doesn't have support for UDP OpenVPN client certificate authentication, I'll use a separate OpenWRT box only as the OpenVPN client. Please see the attached image. https://i.ibb.co/fMFBBS2/OpenVPN.png The "Client OpenWRT" works fine, accessing the Int...
by rodpp
Wed May 06, 2020 6:36 pm
Forum: General
Topic: Router -> Switch connection - better with or without VLAN
Replies: 4
Views: 1187

Re: Router -> Switch connection - better with or without VLAN

Is there any reason to use 1 bridge with 4 VLANs instead of 4 separated bridges? On a CRS1xx the VLAN handling is done in hardware even if configured using the /interface bridge configuration tree, so it doesn't cause any CPU load. So yes, I'd use a single bridge with vlan-filtering=yes with access...
by rodpp
Wed May 06, 2020 4:53 pm
Forum: General
Topic: Router -> Switch connection - better with or without VLAN
Replies: 4
Views: 1187

Re: Router -> Switch connection - better with or without VLAN

Thanks.

So I'll not use VLAN at all, but configure 4 bridges in the switch and connect one cable for each. The two subnets with more traffic I connect in separate switch chip of the RB3011 (eth5 and eth6, for example).

Is there any reason to use 1 bridge with 4 VLANs instead of 4 separated bridges?
by rodpp
Wed May 06, 2020 3:43 pm
Forum: General
Topic: Router -> Switch connection - better with or without VLAN
Replies: 4
Views: 1187

Router -> Switch connection - better with or without VLAN

Hi, I have a CRS125-24G-1S-IN configured to work as router and switch in my home network. I upgraded my bandwidth and will configure a VPN to access my network externally. So I bought a RB3011UiAS-RM to work as router and leave the CRS125 only as a switch. I use 4 subnets with firewall rules to allo...
by rodpp
Thu Feb 05, 2015 2:02 am
Forum: General
Topic: Did we loose IP cloud?
Replies: 155
Views: 41246

Re: Did we loose IP cloud?

Same problem here: [admin@MikroTik] > /ip cloud [admin@MikroTik] /ip cloud> print enabled: yes update-time: yes public-address: [correct IP] dns-name: XXXXX.sn.mynetname.net status: updated [admin@MikroTik] /ip cloud> force-update [admin@MikroTik] /ip cloud> print enabled: yes update-time: yes publi...
by rodpp
Thu Feb 05, 2015 1:54 am
Forum: General
Topic: Did we loose IP cloud?
Replies: 155
Views: 41246

Re: Did we loose IP cloud?

Same problem here: [admin@MikroTik] > /ip cloud [admin@MikroTik] /ip cloud> print enabled: yes update-time: yes public-address: [correct IP] dns-name: XXXXX.sn.mynetname.net status: updated [admin@MikroTik] /ip cloud> force-update [admin@MikroTik] /ip cloud> print enabled: yes update-time: yes publi...