MikroTik

marlab

yeah OSFP routing stopped working correctly with 7.13rc2 :/

The routing table is populated as usual, but packets are not routed (tested on ax3)

marlab

If there is no client connected to the wireless interface, it will show as inactive. That would be easy, wouldn't it? :) I've checked that of course. It isn't activated once I connect a client to the AP. e3.jpg For whatever reason all APs from CAPs are shown as inactive at the bridge port screen......

marlab

So my understanding is this should work when using a bridge that has been already attached to a VLAN? Depends how you deal with VLANs on bridge Essentially: if you have bridge with VLAN filtering enabled, then currently the only option si to (manually?) add wifi interface to bridge as port with PVI...

marlab

Yup, it's documented behaviour. See new WiFi manual under "Replacing 'wireless' package" -> "Lost features" here are quite a few of us hoping that this feature will come back (or rather, will be introduced to wifi driver). True, just it also says: VLAN configuration in the wirel...

marlab

I still cannot get VLANs working with v7.13beta for the new CAPsMAN and CAP on hAP ac2 with virtual access points . When I attach a bridge (connected with VLAN) as part of datapath - the traffic is not getting through. When adding the virtual AP to the bridge, the AP is shown as inactive on the Brid...

marlab

ovpn - added "tls-auth" option support for imported .ovpn profiles

Wow, it feels like Christmas... :D

marlab

Beacon interval and DTIM period are now available with wave2 wifi routers. And yes, for Apple devices setting DTIM to 3 does make the difference, performance is better.

marlab

+1, needed for AWS VPN

marlab

However I recommend you to use wireguard which is natively supported

If the remote server I'm connecting to had used Wireguard, I would surely use it. But it is about MT connecting as a client to a remote OpenVPN server, and I do not have any alternative methods available.

marlab

<REMOVED>

Why it was removed? I'm looking for something similar as Mikrotik OpenVPN as a client still does not support TLS auth

marlab

+1
I could not even get it working with containers...

marlab

Yes, it is possible to configure unknown users in the Radius server. In fact, many Radius servers have a feature called "default user" or "default pool" that is designed specifically for this purpose. Well, this topic is about Mikrotik User Manager, and not "many Radius ser...

marlab

*) ovpn - added support for OVPN server configuration export and client configuration import from .ovpn file; Would this finally solve problem with client authentication via static key? Just tested it... :( unsupported option '<tls-auth>' Going back to sleep, should I set a reminder for... 2025 I g...

marlab

*) ovpn - added support for OVPN server configuration export and client configuration import from .ovpn file;

Would this finally solve problem with client authentication via static key?

marlab

With local forwarding activated or disabled? If you want speed you need to use local forwarding in Capsman.

Enabled of course. That's why I mentioned this problem in 7.5 thread, I've been using Capsman for a while..

marlab

Too many other variables which might be responsible for that speed drop instead of blaming capsman. Too many variables? Capsman ON = low speed. Capsman off and individual access points activated on hap a2 = full speed. The location of Capsman (server) does not seem to be relevant (I've tried 2 rout...

marlab

Is anyone else having problems with Capsman? With 7.5 I had to give up using Capsman, as the speed with hap ac2 access points went down to 30 Mbps... :/ The same devices without Capsman are easily reaching over 250 Mps... Capsman is installed on the main router, RB4011, I use vlans, so I do not see ...

marlab

Hi, gurus :) . Since ROS still does not support tls-auth for OpenVPN (so many years... :?), I've been trying to find a workaround with OpenVPN client (giggio/openvpn-arm) running within the ROS container. However, no success. The client within container successfully connects to VPN server, I can rea...

marlab

Mikrotik this morning sent me an internal test version and it has fixed my issue - no more VPLS crash.

VPLS has been broken for a long time in ROS7, I've disabled it and switched to VxLAN which has been working well so far (and it's easier to use too).

marlab

RB1100 and RB2011 upgraded from 7.2.1 without problems
I had random reboots with RB2011 and 7.2.x, you're ok?

Do you use CAPsMAN? If so, the fix for that problem will be available soon (I'm just testing the pre-release version and it's already fixed there).

marlab

Strange omission though seeing as MPLS is still available on 7.3beta for the rb941 I've just updated my hAP lite to 7.3beta37 - nope, menus for winbox and webfig indeed exist, just they are not functional, and MPLS is not available via terminal. I somehow like checking new releases on the weakest h...

marlab

Just noticed - MPLS subsystem is removed from RB941-2nD
Out of the window goes your plan to use the RB941-2nD as the preferred routing platform for your enterprise!

Well, that little low-power box is still useful for IoT (sorry, obviously a new term for you).

marlab

Just noticed - MPLS subsystem is removed from RB941-2nD

marlab

@marlab I have the exact same issue with my hap ac2 (also arm). The device reboots every ˜3h42m. I'm still trying to find the exact cause for it. This problem started with 7.2.0; 7.1.5 was stable. Are you absolutely sure capsman is causing this? Anything else running on this device like eoip, wireg...

marlab

Huum, are you really using CRS switches as CapsManagers? how did that work out for you? It was just as a test to confirm the issue exists on different routers, I've run it there only for a few hours and then disabled it after the router hung up due to CAPsMAN. But then while it was running - I've n...

marlab

Unfortunately with 7.3beta37 my ARM routers with CAPsMAN active are still freezing after 3h 43m 26s of uptime... Tested with RB3011, RB4011, CRS326 So I had to deactivate CAPsMAN and configure all radios manually... :/ And even with that I still prefer to use ROS v7 because of features like VxLANs, ...

marlab

I am not sure if that's something new or if it existed before. When the router is restarted and OSPF starts sync with other routers, I always get those warnings: Screenshot 2022-04-11 at 17.28.20.png After a while, those warnings disappear. All routers run v7.2 and have almost identical OSPF config.

marlab

7.2.1 is in testing to test this one change only. You can keep using 7.2 it did not disappear.

I do not mind testing it, just the description is too vague to understand what was broken exactly. Could you describe a scenario that would break the router with 7.2?

marlab

New hardware looks great, still - I'm putting all Mikrotik purchases on hold until RouterOS v7 becomes stable - at the moment there are too many serious issues.

marlab

The problem with clock set backwards and "router was rebooted without proper shutdown" every ca. 3h 43min is still there for RB3011 or RB4011. A stack overflow or memory leak? If my calculation is correct - the reboot happens every 13435 seconds. NTP client is not active. After the reboot ...

marlab

Excessive CPU usage on the RB3011 is still not fixed. Does anyone know if Mikrotik has at least recognized the problem at some point? I've reported the problem with regular reboots on RB3011 over a week ago, and they even didn't bother to reply. I doubt they any longer care about that router (since...

marlab

My RB3011 after factory reset and config import with 7.1.3 had a serious problem with system clock - every appox 3.5 hours the time went backwards by about 30 minutes, which kept triggering watchdog and so system reboot. With 7.1.5 (both RouterOS and firmware) the problem is still there, just now t...

marlab

My RB3011 after factory reset and config import with 7.1.3 had a serious problem with system clock - every appox 3.5 hours the time went backwards by about 30 minutes, which kept triggering watchdog and so system reboot. With 7.1.5 (both RouterOS and firmware) the problem is still there, just now th...

marlab

It is advisable to do a export (remember show-sensitive), download the exported file, then completely netinstall the router with format (no keep configuration) and reset it to clean state (no default config) and import the exported file again. It sometimes needs minor tweaks using a text editor to ...

marlab

Version 7.1.3 is definitely NOT stable. It crashes at my RB3011UiAS at least twice a day, and it is just during regular network operations, no changes are made at the router at that time. That's why I cannot really identify where it is crashing in particular, it just looks like a memory leak or some...

marlab

After migration from latest v6 to v7.1.3 - VPLS stopped working (router gets frozen after a few seconds of VPLS activity).

marlab

I was missing the input=yes in my config. Adding it improved things - instead of the VPLS tunnel not doing anything and then the devices freezing, I get exactly one ping through and then the devices freeze and have to be power cycled. I have the same problem with 7.1.3 - VPLS is still not working c...

marlab

+1 please
I have 5 Mikrotik routers and multiple Apple devices on the network. And while I love Mikrotik, users are complaining, asking me to change network hardware to a vendor with full Apple devices support :/

marlab

The 32-bit Dude no longer works on macOS+wine (due to the fact that Apple since macOS Catalina has removed support for 32-bit applications at kernel level). Therefore 64-bit version would be very useful.

marlab

+1 from me, I'm blind without Dude on Catalina

marlab

I just tried with CAPSMAN 2 and ROS v6.44 - if you do so, there is "unsupported channel" message" with CAPSMAN 2.

I know it's an old thread, just I could not find solution elsewhere.

marlab

I'm also having this issue on 6.42.6. Signal strength -63, so not too weak. Sometimes I also get deauth due to MIC failure (14), for the same device

marlab

Maybe someone finds the below useful - a modification of known script I use to send both attachments in a single email to my Gmail account. Please notice you need ROS version at least 6.40 to be able to attach multiple files to a single email. #### Modify these values to match your requirements ####...

marlab

Did you read the release notes? Noticed anything about spanning tree? Did you try to disable spanning tree on the bridge?

Well, that's not clear. According to Wiki the spanning tree protocol applies to CSR models, which is not my case. Are you saying every router would get that change?

marlab

Yes, I downgraded all routers to 6.37.4 and everything works fine, without any changes in configuration at all. So clearly there something seriously wrong (or different) in 6.38.1

marlab

Sorry to bump - and add details: all routers have bonding interfaces attached to local bridges. Is bridge routing broken in 6.38.1? Or this is a wrong place to ask?

marlab

I have 3 routers: - RB3011 (main router, internet gateway) - RB941-2nD (remote1) - RB2011UiAS-2HnD (remote2) Both remote routers are connected to main router via double long Ethernet cables, and so for redundancy and performance reasons I'm using bonding with "balance rr" mode. After upgra...

marlab

Your arguments would be valid, just there is one issue: once TCP socket-to-socket connection is established - it should continue via already established route, and not change it after 3965 bytes (actually that was a size I got when testing it with wget, so it could be a bit more).

marlab

If so you'll have to exclude those connections from the Fasttrack rule. I do that by only fastracking established/related connections with connection mark "no-mark" (I mark the connections in mangle before I mark the packet) and are in the "main" routing table. Thank you, it wor...

marlab

Hi guys, I use two VPN connections to remote sites: PPTP client on RouterOS directly, and OpenVPN tun client routed via external box (as Mikrotik does not support it...). I use both RB2011 and RB3011 - and on both routers local traffic works perfectly fine, but whenever I activate fasttrack connecti...

marlab

Openvpn UDP is becoming real business standard these days. I would buy more Mikrotik routers if it was supported, sadly I need to go competitors. Metarouter as workaround is not stable - I tried it.

marlab

After years of being Mikrotik user I would need to abandon this platform due to lack of UDP for OpenVPN

My entire company switched to excellent pfSense routers, they are based on open source and all use OpenVPN over UDP... Mikrotik, it's time to wake up

marlab

I run 3.0rc6 on OS X, under Wine. It's pretty stable, and session save works pretty well, still - I do not trust it :lol: For example, I just noticed the Leases list on IP/DHCP Server sometimes show incomplete list. Then I need to enable/disable inline comments to see the full list again. I have RB2...

marlab

Is this correct there is no way to see DNS names for IP addresses displayed in torch tool?
Even cheapest routers usually can do it, I am really surprised Mikrotik does not seem to....

Very useful feature for network administrators to identify rebellious users.

Search found 54 matches