I'm not able to get port mirroring working on a CRS326-24G-2S+. The unit runs 6.43 and the new bridge VLAN setup. [admin@coreswitch] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 Marvell-98DX3236 none none [admin@coreswitch] /...

Interface speeds seem to be set explicitly after upgrading, is this related to the SNMP speed report changelog entry? I haven't tried connecting an interface at other speeds yet, but can I assume that this setting, while a part of /export, will change accordingly? /interface ethernet - set [ find de...

This seems to be it: https://blog.mikrotik.com/security/secu ... nable.html

Why did 2 fans appear in the last print? For some reason, fan speed is only shown in "System Health" when the fans are running. So during the last screenshot the fans were running, but in the other two the fans were off. A curious side effect of this is that (at least with Linux and Wine)...

After upgrading to 6.42.7, my CRS328-24P-4S+ logs increased CPU temperature from SNMP readouts. [...] Tried downgrading to 6.42.6, and CPU temperature is shown as 8-10 degrees lower than with 6.42.7 - both in System -> Health and with SNMP. 6.42.7 before downgrade: 6.42.7.before.png Downgraded to 6...

After upgrading to 6.42.7, my CRS328-24P-4S+ logs increased CPU temperature from SNMP readouts. The attached graph shows a significant change in CPU temperature after upgrading (at around 23:00). The switch's CPU load (also from SNMP) has not increased. Were there any changes to the SNMP output for ...

Sure thing! /interface bridge add fast-forward=no igmp-snooping=no name=bridge priority=0x1000 protocol-mode=none vlan-filtering=yes The docs I referenced uses pvid=1 for the bridge and for holding the VLANs, so my bridge sets no pvid. Instead, I've assigned the IP directly to a VLAN Thanks bjornr,...

Sure thing! /interface bridge add fast-forward=no igmp-snooping=no name=bridge priority=0x1000 protocol-mode=none vlan-filtering=yes The docs I referenced uses pvid=1 for the bridge and for holding the VLANs, so my bridge sets no pvid. Instead, I've assigned the IP directly to a VLAN: /interface vla...

I was under the impression that one of the benefits of the new setup is being able to apply VLANs to the bridge and not to a physical interface without loss of speed. For what it's worth, a config similar to viewtopic.php?t=125251#p616970 works quite OK in my lab network.

Upgrading a CRS326-24G-2S+ to 6.41rc56 broke DHCP relaying through it, the requests are passed through but the responses (OFFERs) are never seen by the client. Reverting to rc52 fixed this issue. Don't know exactly what caused this, but if it helps identifying the issue I'm employing VLANs, bonding ...

[quote="onlineuser"]Yes, it seems to be the same problem. How did you sniff the URL which is always treid to open?[/quote] I simply set up DST-NAT firewall rules to send the request to my laptop, with a small web server running on it. The important part was to let the devices receive a res...

[quote="onlineuser"]Yes, but I did not change anything from the 6.32.3 up to 6.33. But why will the packets out from my public IP to port 169.254.169.254:80?[/quote] These seem to be leftovers from autoconfiguration, possibly from testing. The traffic is requests for an ssh key and a hostn...

bjornr and ckleea would be nice if you sent support output files to the support. Create the file after your attempt to start your image file. Also, while at it, check if you have kernel and initrd files supplied for the configuration. I just submitted the supout from one of the devices. Please note...

[quote="bjornr"]After upgrading I see a lot of unsolicited HTTP requests towards 169.254.169.254:80 from all devices, on most of which no scripts or scheduled jobs are running. The request is rather persistent until the device receives some kind of answer, and happens (at least) after rebo...

After upgrading I see a lot of unsolicited HTTP requests towards 169.254.169.254:80 from all devices, on most of which no scripts or scheduled jobs are running. The request is rather persistent until the device receives some kind of answer, and happens (at least) after reboots. This is the HTTP requ...

Everything is checked by the firewall. If you don't want that, you will need to add some firewall rules (early!) that makes the traffic pass through unchecked - something like accepting everything that comes in on interface1 and goes out on interface3, and vice versa. You could of course remove all ...

[quote] The DMZ port seems to be working well, however, when locking down the router, I'm noticing some traffic coming through the firewall. The traffic is: forward: in 1, out 3. There is nothing in the log about it coming from port 3 and going out 1, which is what I'd expect. I also wouldn't expect...

> /ip firewall filter add chain=input protocol=icmp action=drop in-interface=WAN > > If I use this command it blocks all internet access from other routers that have internet access via this router Yes. ICMP is much more than ping, and by blocking ICMP in general you also block useful mechanisms. Yo...

When presenting a problem, you should provide the configuration in use. In your case you should show us the output from /ip export

Also, on your PCs that you expect to ping eachother, show the IP configuration (in a command prompt, use /ipconfig all)

1- what is problem with my router ? That's a bit difficult to say without more information. You should ask your ISP what they see, and you should use Torch on the interfaces to find out what is wrong. Also try to enable only one IP address (not three) on your router and see if that works better. 2- ...

From http://wiki.mikrotik.com/wiki/CALEA: * sniff - generates a tzsp stream that can be directed to any Wireshark (Ethereal) server * sniff-target - IP address of the data retention server With your current (dulicated) rules, you submit the sniffed traffic to whatever exists on 192.168.1.222. You mi...

As you can see, the time zones are different. I would guess that the error message from the proxy is given as GMT because of RFC 2616: "All HTTP date/time stamps MUST be represented in Greenwich Mean Time (GMT), without exception." RFC 2616: http://www.w3.org/Protocols/rfc2616/rfc2616-sec3...

You can't. The wifi analyzer app checks the MAC address of the AP, and looks up the vendor.

The same can be done with other online tools, e.g. https://www.wireshark.org/tools/oui-lookup.html