Community discussions

Search found 384 matches

  • 1
  • 2
by upower3
Tue Oct 01, 2019 7:05 pm
Forum: General
Topic: ROS updates to be put on homepage?
Replies: 4
Views: 460

Re: ROS updates to be put on homepage?

@upower3 Is it a problem to pin https://mikrotik.com/download url to the tab in your favourite browser and open it with one click? Ros update supposed to be even more important news that newsletters. More to say, people used to have more bookmarks that place on bookmark bar. Or, why MT keeps this s...
by upower3
Tue Oct 01, 2019 5:15 pm
Forum: General
Topic: ROS updates to be put on homepage?
Replies: 4
Views: 460

ROS updates to be put on homepage?

All of us here used to monitor if there are any ROS updates released. It used to be that easy, go to mikrotik.com then to "software", right? But why won't you publish that on the first page of mikrotik.com (just a small block on top of these blocks of "newsletter" etc.)? Please, add that element ot ...
by upower3
Tue Sep 24, 2019 11:39 am
Forum: Announcements
Topic: Newsletter 91
Replies: 12
Views: 9246

Re: Newsletter 91

I expected to see more in thenewsletter. At least a couple of words for ROS 7, and maybe some new useful devices. Two PSU is a good news, really. While PoE in is something that was there for years, RB with 2 PSU appears at least like "pro" equipment :) Audience... Expensive toy, with questionable wi...
by upower3
Fri Sep 06, 2019 4:40 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 195
Views: 36155

Re: RouterOS v7.0beta1 (ARM)

Some info about upcoming routing: https://www.youtube.com/watch?v=NbfKplzda7I Quite a news, and also nice demo! Will wait for the upcoming v7 stable release (hope you're not Apple so you'll post download link not next year but by maybe November?). Now what about 3rd thing on the list: wilder IPv6 s...
by upower3
Fri Sep 06, 2019 4:29 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 195
Views: 36155

Re: RouterOS v7.0beta1 (ARM)

We have never promised multicore BGP routing, by the way. Surely, but keeping in mind your multicore CCRs for such a decent money and mostly stable BGP implementation you have there is no wonder a lot of poor it man still hoping for that. By the way, after ovpn/udp this might be the next expected t...
by upower3
Fri Sep 06, 2019 4:17 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 195
Views: 36155

Re: RouterOS v7.0beta1 (ARM)

Well, and multicore suppert for BGP one day?

Seems like a early New Year hollidays gift!
by upower3
Fri Sep 06, 2019 3:31 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 195
Views: 36155

Re: RouterOS v7.0beta1 (ARM)

Any congestion control algorithm improvments/changes? 5.x or 6.x is a bit dated on this, and new kernel in 7.x may introduce some extra ability in this field!
by upower3
Fri Aug 09, 2019 6:58 am
Forum: RouterBOARD hardware
Topic: Switch stacking?
Replies: 9
Views: 5745

Re: Switch stacking?

And how about connecting switches over fast(er) trunk ports? Ex: connect 2 CRS326/CSS326 over their SFP+ port(s) and as such generate a 48 port switching plane?
Sounds pretty good, and would be great valie for the money.
by upower3
Fri Jul 26, 2019 12:20 am
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3956

Re: 6.43 change in login process and API libraries?

Hey, this way we will one day say "please add let's encrypt support" :)

The sad side many routers are far from the internet access themselfs anyway.

Silly policy, indeed. No sign it will be better one day.
by upower3
Fri Jul 26, 2019 12:01 am
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3956

Re: 6.43 change in login process and API libraries?

So to say, enable access from only trusted net is still best approach.

API is yet better thing in compare to ssh, but from insecure nets ssh can be used. Harder to integrate to scripts, yes.
by upower3
Wed Jul 24, 2019 2:44 pm
Forum: General
Topic: Missing mikrotik snmp OID's
Replies: 14
Views: 2355

Re: Missing mikrotik snmp OID's

So to say if it can return multuline string I can collect all I need and output ot at a single snmp fetch. Will try!
by upower3
Wed Jul 24, 2019 10:08 am
Forum: General
Topic: Missing mikrotik snmp OID's
Replies: 14
Views: 2355

Re: Missing mikrotik snmp OID's

I remember there is an obscure feature that allows to call a script when a certain range of SNMP OIDs is polled and return the value that script returns. However, I never understood how that should work. Never heard if ROS supports that. If so, noone care for missing OIDs! So to say, API calls are ...
by upower3
Tue Jul 23, 2019 9:46 pm
Forum: General
Topic: Missing mikrotik snmp OID's
Replies: 14
Views: 2355

Re: Missing mikrotik snmp OID's

So to say I found out it is better to use api calls to get stats and not snmp.
by upower3
Mon Jul 08, 2019 10:58 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)
Replies: 7
Views: 880

Re: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)

I use copper attaching cable. They are cheap and reliable. I've never had a problem with anyone. But they only serve if they go to the same rack. This is my case. I need to interconnect several servers within the same rack (so optics looks a bit overkill), or several 1G switches with SFP+ uplink po...
by upower3
Sat Jul 06, 2019 4:13 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)
Replies: 7
Views: 880

Re: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)

But optical sfp+ modules are quite expensive on some of our existing equipment and it is out of our budget so far. This is the reason, sad to say.

I can see problems of copper links incomparable on one end, this is the risk, yes.

Btw, will this switch be able to handle broadcast storms in hardware?
by upower3
Sat Jul 06, 2019 7:53 am
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)
Replies: 7
Views: 880

Re: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)

The consern is i need to connect it to other equipment over copper sfp+, and really worry will it be comparable. No point in optical links, too close.
by upower3
Fri Jul 05, 2019 4:11 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)
Replies: 7
Views: 880

CRS317-1G-16S+RM as 10G core switch (no features needed but VLANs)

I'm looking for some 10G switch to connect several 1G switches (that's my access level) over SPF+ copper links. Looks like CRS317-1G-16S+RM is something that fits well, but I got almost no recommendations for it. So I want to ask you, if you have any experience with this switch, and, moreover, have ...
by upower3
Tue May 28, 2019 1:26 am
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

You can imagine how "happy" I was when first hit the disk space problem mysqlf (two brand new CCRs at the same time!) and the fix was good in time for me. Sad to umderstand how many people were urged to find their steps to fix it before the package was published.
by upower3
Fri Mar 29, 2019 9:10 am
Forum: General
Topic: WireGuard, now from CloudFlare: add WireGuard to ROS, please!
Replies: 0
Views: 536

WireGuard, now from CloudFlare: add WireGuard to ROS, please!

Coludflare just introduced https://blog.cloudflare.com/boringtun-userspace-wireguard-rust/ its own WireGuard implementation made with Rust. As we all can see, WireGuard become more and more welcome around so I would ask Mirktoik to add WireGuard support into ROS. I bet many people will say thank you...
by upower3
Tue Mar 26, 2019 12:00 pm
Forum: RouterBOARD hardware
Topic: 1100ah x4 switches are non h/w VLAN-aware?
Replies: 4
Views: 540

Re: 1100ah x4 switches are non h/w VLAN-aware?

If you use router primarily as router (and RB1100AHx4 is a router), then majority of traffic will have to pass CPU anyway (because that's where routing is done). I'd get very annoyed if MT decided to put low-end switches in their CRS/CSS line of products though. Yes, I totally agree, and play low b...
by upower3
Tue Mar 26, 2019 11:20 am
Forum: Forwarding Protocols
Topic: 1100's bypass or VRRP?
Replies: 0
Views: 337

1100's bypass or VRRP?

I git two brand new 1100AHx4 devices, and two inbound WANs (from two different ISPs). I planned to connect each router on one WAN, and use hardware bypass feature (which is pretty nice) to pass this link to another router "just in case". So, Router1 (R1) will work with ISP1, and will be connected to...
by upower3
Tue Mar 26, 2019 10:45 am
Forum: RouterBOARD hardware
Topic: 1100ah x4 switches are non h/w VLAN-aware?
Replies: 4
Views: 540

1100ah x4 switches are non h/w VLAN-aware?

From https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features I can see that newer RB1100AH x4 device which is quite cost-efficient while capable of hardware IPSec acceleration equipped with RTL8367 switch chips while older models (RB1100AH and RB1100AHx2) were Atheros8327 based. I wouldn't pay at...
by upower3
Mon Mar 25, 2019 6:54 pm
Forum: General
Topic: IP is up on port that's down
Replies: 2
Views: 231

Re: IP is up on port that's down

This is kind of concept approach i agree, but how can i have ip disabled as i have port down? What i need is to down it as the link is down and back up as the link goes up again. I do understand if the ip is on the bridge bit it is on object that phisically or logically disabled, this way it can not...
by upower3
Mon Mar 25, 2019 5:17 pm
Forum: General
Topic: IP is up on port that's down
Replies: 2
Views: 231

IP is up on port that's down

I figured out strange behavior of MT ip engine on ROS 6.43.13: I take MT router, reset it to the clear setup (no fw, no IPs, no bridges). Then I set up one (single) IP on one (single) Ethernet port, and try to ping it from within the router. Ping is on as expected. Then I disable the port - and the ...
by upower3
Wed Nov 14, 2018 5:44 pm
Forum: General
Topic: Assign IPv6 to PPTP/OVPN clients
Replies: 0
Views: 426

Assign IPv6 to PPTP/OVPN clients

In my office I have a routerboard, and the ISP supply us both 1 static public IPv4 address and /64 of IPv6 addresses. I used to set up VPN servers there so my collegues can connect to office LAN and also have a secure internet link when work via public wifi networks (so the default gateway is via VP...
by upower3
Thu Oct 25, 2018 5:37 pm
Forum: General
Topic: Changing the default source IP for Ping
Replies: 2
Views: 1502

Re: Changing the default source IP for Ping

You can look at cli syntax of ping at https://wiki.mikrotik.com/wiki/Manual:Tools/Ping and do something like
/ping 8.8.8.8 src-address=2.2.2.2
Or maybe you need to specify
interface=Loopback0
for your case?
by upower3
Tue Oct 23, 2018 4:34 pm
Forum: Beginner Basics
Topic: CAKE or other network algorithms to be used?
Replies: 4
Views: 1043

Re: CAKE or other network algorithms to be used?

Mikrotik RouterOS has no modern AQM (Active Queue Management), i.e. modern network queue scheduling algorithms support, unfortunately.
I'm impressed. Really. Besides making new sophisticated devices ROS won't play well even at basics! :(
by upower3
Tue Oct 23, 2018 10:08 am
Forum: Beginner Basics
Topic: CAKE or other network algorithms to be used?
Replies: 4
Views: 1043

CAKE or other network algorithms to be used?

In a recent news on Linux 4.19 kernel it was noted they added CAKE (Common Applications Kept Enhanced - https://www.bufferbloat.net/projects/codel/wiki/Cake/ ) network algorithm which will better use network bandwidth with lower CPU usage. They also claim it'll be more 'fair' approach to fill given ...
by upower3
Wed Sep 12, 2018 4:46 pm
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3956

Re: 6.43 change in login process and API libraries?

We've just tested the API with a PHP API class and we're still able to communicate and operate on the Mikrotik with v6.43. No changes were required thankfully.
Great news! Hold my RBs upgrade due to automation setup via such 'old' lib, now will test!
by upower3
Tue Sep 11, 2018 6:58 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 84166

Re: v6.44beta [testing] is released!

Now Beta. And Alpha? Alpha V7? :) Alpha V7 will be launched after v6.99 or v6.999 released :lol: :lol: :lol: I suspect they will release some absolutely new change in the system somewhere between 6.49 and 6.49.7, so noone will ever be able to predict that. Look at new bridge implementation introduc...
by upower3
Tue Sep 11, 2018 6:55 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 84166

Re: v6.44beta [testing] is released!

currently peering session re-connects when it's comment is changed in Winbox.
So to say, MT used to down and up again PPP-interfaces when you change comment on it! It was this way some time ago, not sure for now, but this was some "bright" idea these days (and maybe today).
by upower3
Tue Sep 11, 2018 3:34 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 84166

Re: v6.44beta [testing] is released!

!) upgrade - release channels renamed - "bugfix" to "long-term", "current" to "stable" and "release candidate" to "testing"; Tell me the truth, who decided that current is stable ? It is bugfix that can be considered stable, while current is some bleeding-edge and sometimes even "never to use in pr...
by upower3
Tue Sep 11, 2018 7:23 am
Forum: General
Topic: Fastest VPN to use
Replies: 8
Views: 2591

Re: Fastest VPN to use

PPTP with CHAP is fastest, as per the tile of the post. But a gotcha is that you need to prevent fasttrack from working on VPNs cos it screws them up and you get slow speeds surprisingly. I use the mangle to mark traffic on VPN interfaces in+out with connection-mark "DontFasttrack" (use an interfac...
by upower3
Thu Aug 30, 2018 12:36 pm
Forum: Wireless Networking
Topic: hAP AC^2 - slow wifi
Replies: 8
Views: 1349

Re: hAP AC^2 - slow wifi

Also, using WiFi radios in routers for non-residential use is sub-optimal compared to actual access points which have radio chains and antenna configurations specifically for client density, maximum average throughput, minimum latency, maximum stability and often superior roaming support. The offic...
by upower3
Thu Aug 30, 2018 12:22 pm
Forum: Wireless Networking
Topic: hAP AC^2 - slow wifi
Replies: 8
Views: 1349

Re: hAP AC^2 - slow wifi

In 2ghz band only 3 not overlapped channels. Try to use wifi analyzer or builtin scanner to find best channel. How many 2ghz devices registered on ap? You sure that speed is up to 300 bit/s ? There are only 4-5 wifi clients, and I do know about 3 main frequencies to use ) 5 clients is too few to ca...
by upower3
Thu Aug 30, 2018 11:12 am
Forum: Wireless Networking
Topic: hAP AC^2 - slow wifi
Replies: 8
Views: 1349

Re: hAP AC^2 - slow wifi

proper band for 2ghz network, b/g/n and channel width to 20/40. Also choose auto channel. When protocol 802.11 selected - nstream disabled. Did that. 20 chosen due to limit radio influence to different channels/networks, N-only to speed up the network (no per-N devices there), band was set to auto ...
by upower3
Thu Aug 30, 2018 9:56 am
Forum: Wireless Networking
Topic: hAP AC^2 - slow wifi
Replies: 8
Views: 1349

hAP AC^2 - slow wifi

Recently got brand new hAP AC^2 router to remote office. Last current installed (6.42.7). As a arouter, this is perfect device, but I have a lot of complaints on it wifi. Most of these are for wifi speed. The device is on relatively wifi clear zone (both 2 and 5 Ghz frequencies are mostly clear of o...
by upower3
Tue Aug 07, 2018 1:33 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17200

Re: v6.40.8 [bugfix] is released!

i am curious which and when next bugfix version with "new bridge implementation" will be.....6.42.x ? "new bridge implementation" was a big change. so going from 6.40.8 to new bugfix (>6.41.x ) dont know if it will be "a walk in the park" for some users. I'm afraid MT won't care about that much, si...
by upower3
Tue Aug 07, 2018 12:32 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17200

Re: v6.40.8 [bugfix] is released!

If 6.40.8 is safe in respect to latest rumors on miners https://www.bleepingcomputer.com/news/security/massive-coinhive-cryptojacking-campaign-touches-over-200-000-mikrotik-routers/ ? I keep hear that bugfix is not safe, but I'm not ready to mass-upgrade and reconfigure my park of routers to current...
by upower3
Mon Jul 30, 2018 10:42 am
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 44
Views: 13669

Re: IS-IS

Looks like MT has a lot to implement beside IS-IS.

Anyway noone will use MT devices instead of Ciscos or Jun's in ISP environment.
by upower3
Thu Jul 12, 2018 11:32 am
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

See the topics about 6.42.5 and 6.43RC I wasn't able to find these, it this a package that included into new version (btw, this is dangerous "current", not more stable "bugfix", isn't it?), which is not possible to install if the space it used already by ROS tmp files, or some small package that ca...
by upower3
Sat Jul 07, 2018 4:52 pm
Forum: General
Topic: IPv6: NAT64 and ipip tunnel - how/when?
Replies: 8
Views: 1164

Re: IPv6: NAT64 and ipip tunnel - how/when?

So to say, all I can do with IPv6 on Mikrotik is to set ip IPIPv6 and EoIPv6 tunnels. Neither client PPP links are available to IPv6 server, nor IPv6 PPP server can be set up. When I have whle network built on Mikrotik it is only natural to look for a way to set up dual-stack or plain IPv6 within LA...
by upower3
Fri Jul 06, 2018 10:53 am
Forum: General
Topic: IPv6: NAT64 and ipip tunnel - how/when?
Replies: 8
Views: 1164

Re: IPv6: NAT64 and ipip tunnel - how/when?

So to say, you can not establish many vpns to ipv6 (ovpn as an example), so little use to deploy ipv6 only in remote office.
by upower3
Thu Jul 05, 2018 12:16 pm
Forum: Scripting
Topic: 6.43 change in login process and API libraries?
Replies: 16
Views: 3956

6.43 change in login process and API libraries?

As I can see in 6.43rc changelog, there'll be very strange (ok, unexpected) news: !) api - changed authentication process ( https://wiki.mikrotik.com/wiki/Manual:API#Initial_login ); In fact, the login process should send login data differently: Pre-6.43 login looks like this: /login !done =ret=ebdd...
by upower3
Wed Jun 27, 2018 12:49 am
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

HELP!
Do the repartition (if you use it) to one partition only(this helped me). If this is not your case, bad luck then, netinstall I suppose.
by upower3
Tue Jun 26, 2018 11:04 am
Forum: Announcements
Topic: v6.42.4 [current]
Replies: 93
Views: 16539

Re: v6.42.4 [current]

I cannot access to router via API(PHP) after updated. Return back to BugFix only v.6.40.8 => Worked. The problem is in 6.42.4 user needs also 'winbox' permission to login via API. Should be fixed in next version, now you can just add that permission. I reported this a page before, funny that no one...
by upower3
Fri Jun 22, 2018 11:17 am
Forum: Announcements
Topic: v6.42.4 [current]
Replies: 93
Views: 16539

Re: v6.42.4 [current]

After I got my CCR1009 upgraded to 6.42.4 (both ROS and f/w) remote API login become invalid. My scripts can not log in at all, and on device I can see "login failure for user <my-user> from <my-ip>" messages in log. I have a dedicated user to allow API requests on my device, it is of group named "a...
by upower3
Wed Jun 06, 2018 2:06 pm
Forum: General
Topic: Blow vs Below: a mistyping on wiki?
Replies: 2
Views: 340

Re: Blow vs Below: a mistyping on wiki?

Nice page, by the way. Point out many of common mistakes, really helpful.

Thank you!
by upower3
Wed Jun 06, 2018 1:10 pm
Forum: General
Topic: Blow vs Below: a mistyping on wiki?
Replies: 2
Views: 340

Blow vs Below: a mistyping on wiki?

On https://wiki.mikrotik.com/wiki/Manual:L ... figuration page there are a low of words 'blow' where it should read 'below':
Blow is a list of possible symptoms that might be as a result of this kind of a misconfiguration:
Quite funny and harmless, but catches the eye too much :)
by upower3
Mon Jun 04, 2018 5:47 pm
Forum: General
Topic: Firmware autoupgrade?
Replies: 3
Views: 594

Re: Firmware autoupgrade?

AFAIK there is no way to upgrade firmware with files being used, so I guess a reboot is something that we cannot avoid. On the other hand I believe that by having this function they aim to "steal" some upgrades just by simply rebooting the system even if the admin has forgotten to request for upgra...
by upower3
Tue May 29, 2018 4:21 pm
Forum: General
Topic: CRS125 not working usb
Replies: 32
Views: 2042

Re: CRS125 not working usb

When connecting both LTE modems via the USB HUB the Mikrotik is detecting them automatically and is adding the following DHCP client entries. What's amazes me is two lte interfaces and two IP addresses. If you have only one modem then it is strange. Take a note not to mess with same subnet on diffe...
by upower3
Tue May 29, 2018 12:16 am
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

I bit buggy update script I suppose. I did that mentioned on that version topic and noone seems to notice.

Hope they fix it in 6.42.3+.
by upower3
Tue May 29, 2018 12:14 am
Forum: General
Topic: CRS125 not working usb
Replies: 32
Views: 2042

Re: CRS125 not working usb

Let me repeat after you: you connected USB modem, and via USB Hub it has sufficient power so no problem on this side. The modem itself (if I recall it right) supply you with IP via DHCP, so first all all you need to add DHCP client on lte interface. Then you set up NAT from your LAN to lte interface...
by upower3
Sun May 27, 2018 12:50 pm
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

This is normal disk space usage on a CCR. I usually see around 40 MB used. Apparently the upgrade has solved your problem. Thank you for this confirmation. There is no official page on that so I was unsure. I think I will do the repartiton but then again, may I ever need more disk space in the futu...
by upower3
Sat May 26, 2018 10:19 pm
Forum: General
Topic: Firmware autoupgrade?
Replies: 3
Views: 594

Firmware autoupgrade?

What I can see when I enable " Auto Upgrade " box in System -> RouterBoard -> Settings is that after ROS update the device will upgrade firmwre and wait until reboot (so no reboot automatically). I think this is not something that fits well the autoupgrade word itself. So to say, it saves me pressin...
by upower3
Sat May 26, 2018 10:10 pm
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

Did the repartition from 2 to only 1 partition and it worked, I got whole free space on one partiton, so I was able to do the ROS upgrade from 6.42.1 to 6.42.3. But even after upgrade I found there are 44.7 Mb out of 128 Mib used, so looks like there is still some hidden data on the disk, abd I have...
by upower3
Sat May 26, 2018 11:44 am
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23108

Re: v6.42.3 [current]

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it? A simple reboot usually removes those invisible left overs. If still not enough, a trick I use on an overloaded 941-2nD. Push manually first only some core packages (system and as much ...
by upower3
Sat May 26, 2018 11:42 am
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23108

Re: v6.42.3 [current]

Confirm further aggregate throughput increase on AP. Almost there Mikrotik soon be overtaking the the competition in performance as well as price. Well done dev team excellent work, go have yourselves a well deserved beer :-) Not that many competitors are there so far. AP mabe but not routers. VyOS...
by upower3
Fri May 25, 2018 6:11 pm
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23108

Re: v6.42.3 [current]

I would try to repartition it to 1 partition, upgrade and repartition back to 2 partitions. But: 1. Don't forget about backup. 2. Make sure that new version does not leak free space :) The only thing I need is some confirmation from someone wise that repartition won't crear up whole disk so ROS won...
by upower3
Fri May 25, 2018 3:48 pm
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23108

Re: v6.42.3 [current]

I can't guarantee that this'll work for you, but it worked for me ( try at your own risk, and try on some local devices first ): Frankly this was my plan, too, but once I did that and out of sudden cleared the device config (don't know the reason why) so it was a bit... bad idea. And also will this...
by upower3
Fri May 25, 2018 2:32 pm
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23108

Re: v6.42.3 [current]

I'll repeat my question here: I have a ccr1009 with flash partitioned into 2 partitions. So each of that flash parts are of 32 Mb, which was ok for me so far. After recent upgrade to 6.42.1 I found all of my flash almost taken by unknown (invisible) files or data. Right now I have only 10 Mb of flas...
by upower3
Fri May 25, 2018 8:57 am
Forum: Announcements
Topic: v6.42.2 [current]
Replies: 65
Views: 14539

Re: v6.42.2 [current]

I have a ccr1009 with flash partitioned into 2 partitions. So each of that flash parts are of 32 Mb, which was ok for me so far. After recent upgrade to 6.42.1 I found all of my flash almost taken by unknown (invisible) files or data. Right now I have only 10 Mb of flash and the upgrade to 6.42.2 ne...
by upower3
Thu May 24, 2018 12:56 pm
Forum: General
Topic: CRS125 not working usb
Replies: 32
Views: 2042

Re: CRS125 not working usb

You may want to check port mode (see https://wiki.mikrotik.com/wiki/Manual:USB_Features#USB_port_mode ) and play with it. Not sure if that affects but anyway. But I'd bet you'll be fine with extra power: looks like USB port itself is ok, different USB modems are ok too, ROS is the same, and you mobi...
by upower3
Thu May 24, 2018 9:48 am
Forum: General
Topic: If repartition of internal flash erases the ROS?
Replies: 0
Views: 263

If repartition of internal flash erases the ROS?

I have a nice CCR1009, and have it flash partitioned into 2 partitions to keep backup ROS and config "just in a case". Now I think I need to repartition it back into 1 partition. If I do that via WinBox or cli, I got a question if I agree to reboot the device to finish the repartition action. And no...
by upower3
Wed May 23, 2018 11:52 pm
Forum: General
Topic: CRS125 not working usb
Replies: 32
Views: 2042

Re: CRS125 not working usb

Yes then I missed the moment when you upgtadw along the text.

Anyway I'd try to use extra power to power up the modem. It is well known issue with the mikrotiks.
by upower3
Wed May 23, 2018 11:12 pm
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

In your case you could also consider to re-partition the router back to 1 partition so you can upgrade and then change it to 2 partitions again. With some luck it could free the space... If I just repartition it to 1 partition router asks me to reboot and I suspect I'll loose all the disk and need ...
by upower3
Wed May 23, 2018 11:07 pm
Forum: General
Topic: Azure S2S VPN Poor performance
Replies: 4
Views: 656

Re: Azure S2S VPN Poor performance

If you can lend yourself an hour or two you can set up virtual machine on you desktop machine and run x86 version in test mode to text how fast ipsec can be in you case (your desktop is much faster that small ROS device), and how settings can affect that.
by upower3
Wed May 23, 2018 11:01 pm
Forum: General
Topic: CRS125 not working usb
Replies: 32
Views: 2042

Re: CRS125 not working usb

First of all, why this old ROS version ? 6.42.2 is a bit newer, why can't you test it out? Theyn, even now looks like your firmware is a bit dated (if I won't miss the upgrade over the thread): https://forum.mikrotik.com/download/file.php?id=31441 Pease upgrade to 6.41.3 then try again, I suspect th...
by upower3
Wed May 23, 2018 12:17 am
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Re: Low disk space while disk is almost free

Yep, I was wrong, the total disk is 64 Mb. But mine (half) is still has only 10 Mb free. Why?
by upower3
Tue May 22, 2018 11:23 pm
Forum: General
Topic: Low disk space while disk is almost free
Replies: 23
Views: 6642

Low disk space while disk is almost free

I got two CCR-1009, both have flash disk partitioned into two parts (with different ROS versions, "just in case"). Now the're on 6.42.1 both. Since they have 128 Mb of flash disk built-in, and that disk deviced into 2 partitions, the "current" partition is 64 Mb of size. The partition in fact has on...
by upower3
Mon May 21, 2018 3:00 pm
Forum: General
Topic: Missing mikrotik snmp OID's
Replies: 14
Views: 2355

Re: Missing mikrotik snmp OID's

We want to monitor the psu1-state and psu2-state for failures, but It's missing
They might hope these PSUs are immortal, so what's the care to monitor them? )
by upower3
Tue May 08, 2018 8:59 pm
Forum: General
Topic: IPv6: NAT64 and ipip tunnel - how/when?
Replies: 8
Views: 1164

IPv6: NAT64 and ipip tunnel - how/when?

I really like the idea of test deployment of IPv6 in the LAN and I would also test IPv6-only or at least IPv6-mostly setup. For this to happen, I need NAT64 and related DNS version, but found none of it in ROS. Looks like IPv6 is not a priority at all. The same thing is for external VPN links: I wan...
by upower3
Fri May 04, 2018 9:42 am
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

Here you go: https://download.mikrotik.com/routeros/6.41/CHANGELOG Nice to know that, but here is what I can see for 6.42.1 (that is, URL used is https://download.mikrotik.com/routeros/ 6.41.1[/b]/CHANGELOG): What''s new in 6.42.1 (2018-Apr-23 10:46): !) winbox - fixed vulnerability that allowed to...
by upower3
Thu May 03, 2018 4:26 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

Those changelogs only have the changes in the latest version and the changes relative to the base of that version. My purpose it just to trace changes to specific parts of ROS (say, ovpn), so I'm happy with dumb grep for ovpn word in my ROS update notification script. Just as a part of pre-upgrade ...
by upower3
Thu May 03, 2018 3:10 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

There are no individual TXT files. So each router used to download whole big changelog page of https://mikrotik.com/download/changelogs (which is 1,56M worth of data), then parses it to only get ten lines of changes? Not that I would like to tell you how to do that but this sounds a bit overkill fo...
by upower3
Thu May 03, 2018 2:52 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

no, they are specific version changes. why do you think it is concatenated ? I only see these individual changelogs concatenated, not changes in it. So, I suspect there are some separate files that keep version-specific changes and by concatenate these files your script produce since (big) page wit...
by upower3
Thu May 03, 2018 2:29 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

Download the series of changelogs and use a text compare tool like "diff" or similar graphical tools that highlight changes between two versions you choose.
Good idea, but how ROS produces these update messages under System -> Update -> Chech for update? :)
by upower3
Thu May 03, 2018 2:28 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Re: Changelog for given ROS version only?

Here you can see changes for each specific version: https://mikrotik.com/download/changelogs Yes, but, what I've talked about, only concatenated, isn't it? How the ROS upgrade function find specific version changelog? This shouldn't be that secret info, after all, and I really doubt ROS parses such...
by upower3
Thu May 03, 2018 12:34 pm
Forum: General
Topic: Changelog for given ROS version only?
Replies: 13
Views: 1130

Changelog for given ROS version only?

I can see there are some files available that holds changes in ROS versions along each branch, but I can not find an eacy way to read changelog for given version only. Say, I can see that newely released 6.43rc6 features this changes: *) bridge - fixed LLDP packet receiving; *) bridge - fixed proces...
by upower3
Wed Apr 18, 2018 11:50 pm
Forum: Forwarding Protocols
Topic: Split traffic between two tunnels?
Replies: 0
Views: 326

Split traffic between two tunnels?

Hello, here is the problem I try to fix: I have two RB devices, both with two ISP link (for HA purpose). I've set up 4 ipip tunnels (all variants between WANs: WAN1 -> WAN1, WAN1 -> WAN2, WAN2 -> WAN1, WAN2 -> WAN2) between them protected by IPSec, and run OSPF on top to prioritize tunnels usage (in...
by upower3
Tue Apr 17, 2018 7:26 pm
Forum: Scripting
Topic: MT DynDNS to bind to one WAN only?
Replies: 2
Views: 411

Re: MT DynDNS to bind to one WAN only?

If you would like to update your Mikroik Cloud DNS from 1 WAN, if you have 2 wans, try something like this: /ip firewall mangle add action=mark-packet chain=prerouting new-packet-mark=DDNS \ passthrough=yes protocol=udp src-port=15252 add action=mark-routing chain=prerouting new-routing-mark=MTDNSO...
by upower3
Tue Apr 17, 2018 1:35 pm
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 44
Views: 13669

Re: IS-IS

Its just sooooo coooooooooool protocol...
I'd really like to know where hell I can use it in real life, so please tell the truth :)

So to say, I have neither ISPs to establish ISIS with, nor software/hardware within the LAN to use it internally.

But the proto is nice, really.
by upower3
Tue Apr 17, 2018 1:33 pm
Forum: Forwarding Protocols
Topic: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?
Replies: 11
Views: 2320

Re: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?

Good question is what kind of data you'll get from upstreams: - 2 BGP sessions with to Internet feeds If you're not an ISP, you can get only a few routes and even on low-end ROS devices it'll be ok as for CPU. So you should better care for throughput numbers and I'd go for testing both CCRs that are...
by upower3
Mon Apr 16, 2018 11:55 am
Forum: General
Topic: Missing mikrotik snmp OID's
Replies: 14
Views: 2355

Re: Missing mikrotik snmp OID's

When I run snnmpwalk on 750r3 I can see unknown .1.3.6.1.4.1.14988.1.1.3.14.0 OID, which is 880 in my case, and neither description no even looks-like value can be found. At the same time /system health print oid gives me plenty of OIDs and most of them not even appears to be supported on this model...
by upower3
Thu Apr 12, 2018 11:12 pm
Forum: Scripting
Topic: Script on rogue DHCP detection event - variable for MAC?
Replies: 3
Views: 610

Re: Script on rogue DHCP detection event - variable for MAC?

Great, thank you! Hiw did you find these vars names?
by upower3
Thu Apr 12, 2018 4:08 pm
Forum: Scripting
Topic: Script on rogue DHCP detection event - variable for MAC?
Replies: 3
Views: 610

Script on rogue DHCP detection event - variable for MAC?

I try to use rogue DHCP detector ( https://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server#Alerts ) to detect bad hosts within legacy network. I would like to use script to run on detection event but what I would like to know is how can I know MAC of rogue DHCP server found? I will set up sending messa...
by upower3
Tue Apr 10, 2018 2:11 pm
Forum: General
Topic: Secure my DNS requests
Replies: 14
Views: 4651

Re: Secure my DNS requests

And Wireguard which trounces both of them for security, throughput, and latency. Yet this "impressive" VPN can not be used on Windows, so seems to be no use out there in the wild. So far Windows PCs are a huge part of user base, so not to support them is something risky. There are some VPN technolo...
by upower3
Tue Apr 10, 2018 12:47 pm
Forum: General
Topic: URL to get latest versions of ROS branches [SOLVED]
Replies: 3
Views: 436

Re: URL to get latest versions of ROS branches [SOLVED]

Hi Normis,

by any chance are there an URL I can use to monitor Winbox updates as well? Nice to have a reminder on that, just in a case! )

Please!
by upower3
Tue Apr 10, 2018 12:12 pm
Forum: General
Topic: System -> Auto Upgrade howto?
Replies: 1
Views: 8637

System -> Auto Upgrade howto?

Curious in System -> Auto Upgrade feature, but can not see any docs for it. On https://wiki.mikrotik.com/wiki/Manual:System there is no 'Auto Upgrade' link, nor any docs is searchable by Google. What I can find is scripts on cron to do /system package update install , which is now what I would like ...
by upower3
Tue Apr 10, 2018 11:30 am
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 288
Views: 61183

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

Mikrotik's support is the worst one I've ever contacted! Looks like the company won't pay much attention on that, still thinking their devices are priced not that high so people will buy it anyway. But noone care for the overall image of their devices for partners who actually sell their devices to...
by upower3
Tue Apr 10, 2018 11:17 am
Forum: Scripting
Topic: /tool fetch via specific interface?
Replies: 0
Views: 523

/tool fetch via specific interface?

On my router I have two WANs ( first is the default one, and the second will take over when first one is dead), and I need to do fetch of a given URL from the IP of second WAN port. The problem is, the IP of server I will fetch url from can change (CDN, actually) so I can't just route/mangle traffic...
by upower3
Mon Apr 09, 2018 3:35 pm
Forum: Scripting
Topic: MT DynDNS to bind to one WAN only?
Replies: 2
Views: 411

MT DynDNS to bind to one WAN only?

RB devices have its own DynDNS (IP -> Cloud), and it uses current default WAN link IP. So if I have two WANs on my RB device (one with fixed IP and one with floating), I can use "cloud" hostname to reach out to my device from outside no matter which link it default. Good idea. But, so to say, I'd re...
by upower3
Mon Apr 09, 2018 3:02 pm
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 288
Views: 61183

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

looks very terrible as it goes up and down. Just to be honest: if you have tuned up your radio well so the AP won't mess up things due to radio picture around? Fankly I don't know much on how to tune radio in latest fw and ros, maybe MT team come here to give some directions? After all if the ROS d...
by upower3
Sun Apr 08, 2018 11:50 am
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 288
Views: 61183

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

Perhaps a little more testing prior to launch MT? I'd prefer to see MT has a bigger team so they have more hands and brains. As of today, great plans and promises are too optimistic. May they want to sell 10G switches or maybe 40g or 100g devices but most customers won't trust them based on low end...
by upower3
Sun Apr 08, 2018 9:56 am
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 288
Views: 61183

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

CAP AC is no better for me either. I need to pick up a different access point in the short term.
Looks like MT better add Ubnt AP controller into ROS, so everyone will be happy.
by upower3
Sun Apr 08, 2018 9:39 am
Forum: Wireless Networking
Topic: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi
Replies: 288
Views: 61183

Re: hAP ac^2 Problems---Extremely Poor Performance found in 2.4G and 5G WiFi

Is this the constant problem on this model? Plan to buy one but see no point in it if it performs so bad.

Really bad news for me!
by upower3
Fri Apr 06, 2018 8:14 pm
Forum: Announcements
Topic: v6.40.7 [bugfix] is released!
Replies: 33
Views: 9659

Re: v6.40.7 [bugfix] is released!

The same to you. Did you read the posting, four postings above yours?
So why did you repeated it twice? :)
by upower3
Fri Apr 06, 2018 2:21 pm
Forum: Announcements
Topic: v6.40.7 [bugfix] is released!
Replies: 33
Views: 9659

Re: v6.40.7 [bugfix] is released!

Looks like MT still update the page manually, isn't it? no, but the download server was recently migrated to new location, so our upgrade scripts broke, sorry about that. We are fixing them Links were ok today morning, and update from device itself worked fine even yesterday. By the way, are there ...
by upower3
Thu Apr 05, 2018 9:05 pm
Forum: Announcements
Topic: v6.40.7 [bugfix] is released!
Replies: 33
Views: 9659

Re: v6.40.7 [bugfix] is released!

If you add the sub-domain "download" in front of mikrotik.com it will download.
Nice addition, exactly the idea that was mentioned two answer up in this very thread :) Have you read the topic at all?
Looks like MT still update the page manually, isn't it?
by upower3
Thu Apr 05, 2018 6:56 pm
Forum: Announcements
Topic: v6.40.7 [bugfix] is released!
Replies: 33
Views: 9659

Re: v6.40.7 [bugfix] is released!

Seems like all 6.40.7 download links are dead on https://mikrotik.com/download So to say, 6.40.7 download link is like: https://mikrotik.com/routeros/6.40.7/routeros-mipsbe-6.40.7.npk . while 6.41.3 is https://download.mikrotik.com/routeros/6.41.3/routeros-mipsbe-6.41.3.npk . See the difference? Th...
by upower3
Thu Apr 05, 2018 12:38 pm
Forum: Announcements
Topic: v6.40.7 [bugfix] is released!
Replies: 33
Views: 9659

Re: v6.40.7 [bugfix] is released!

!) smb - fixed buffer overflow vulnerability, everyone using this feature is urged to upgrade; *) console - do not allow variables that start with digit to be referenced without "$" sign; *) led - fixed unused "link-act-led" LED trigger on RBLHG 2nD, RBLHG 2nD-XL and RBSXTsq 2nD; *) netinstall - si...
by upower3
Mon Apr 02, 2018 11:39 pm
Forum: General
Topic: Secure my DNS requests
Replies: 14
Views: 4651

Secure my DNS requests

There are number of DNS technics that can hime my queries from ISP along the path: DNS Crypt, DNS over HTTPs, DNS over TLS etc. Please add support for any (or some) or these to ROS, due to fact this is more and more popular demand nowdays in too many countries. You can definitely recall Russia and C...
by upower3
Thu Mar 22, 2018 9:06 am
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

1100ahx4 is the best as for money for value. 3011 is not under development (one model so far and no news on this side).

Nice to have 24 gig ports, 2 sfp and 2 sfp+ in one device, with switch chips. Best branch office device )

And, to be honest, small PBX software inside ))
by upower3
Thu Mar 22, 2018 7:27 am
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

1100AHx4 would be the best fit, if it had the SFP port, the LCD and the USB. The lack of SFP is particularly strange.
Then noone will buy CCRs, so this is the market question I suppose.
by upower3
Fri Mar 16, 2018 12:01 am
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 97410

Re: v6.42rc [release candidate] is released!

Tried 6.42rc43 and found nice visual bug: https://i.imgur.com/rfxzpcX.png Under System -> Routerboard I can see factory ROS version, while under System -> Resources it is blank field. Any SIM slot control button still there even that RB951G-2HnD have no such slot. Funny to see this suddenly appeared...
by upower3
Thu Mar 15, 2018 10:35 am
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

However, answer is simple - you can downgrade or upgrade device away from the version which you use by simply dropping bundle package into files section and either upgrading or downgrading the device.
What I see on this topic the process of ROS update/downgrade should be described in details?
by upower3
Thu Mar 15, 2018 9:40 am
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

Upgrade tests are made for each RouterOS release and version is released when upgrade works perfectly on all the lab units. Upgrades usually fail for end users due to: 1) Power issues; 2) Damaged storage; 3) Full storage; 4) Wrong package installations usually caused by installed rc version in the ...
by upower3
Thu Mar 15, 2018 7:42 am
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

This is not a version related problem and such posts might discourage others from upgrade since others might assume that this version in some way makes wireless work worse than before. So to say, the only safe option is to stay with bugfix branch and read forum even for its bugs and features. Curre...
by upower3
Wed Mar 14, 2018 8:37 am
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

Please note that upgrade process happens on the old version - not the one which you install on your router. It should be done by the firmware, isn't it? Like it is the only part that's intact during the upgrade process. I got used to the idea that upgrade is handled by some extra software part that...
by upower3
Tue Mar 13, 2018 9:01 am
Forum: General
Topic: RouterBOOT "auto-upgrade"!
Replies: 18
Views: 11180

Re: RouterBOOT "auto-upgrade"!

By the way, for ROS itself I can split disk into 2 partitions and keep different ROS versions on both (who uses that in the wild? nice feature!), but what's about autoupgrade - will there be any rollback?
by upower3
Tue Mar 13, 2018 8:15 am
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

105547111 - You see this option on your device by mistake. Of course, since you do not have a SIM slot, you should not see SIM related options on CRS125 device; I ask since it was my picture and question initially. What will happen if I set this setting to different value ;) and, more seriously, si...
by upower3
Mon Mar 12, 2018 10:42 pm
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31266

Re: v6.41.3 [current]

Out of sudden I found nice dialog with drop-down box named "SIM", under System -> Routerboard -> SIM: https://i.imgur.com/B0gmAmV.png Something that I neved expected from my old (but good) CRS125-24G-1S ( https://mikrotik.com/product/CRS125-24G-1S-IN , which is essentially a 24-ports switch with dec...
by upower3
Sun Mar 11, 2018 5:36 pm
Forum: General
Topic: A place for poetry
Replies: 32
Views: 140841

Re: A place for poetry

Another new ROS feature,
While ovpn implementation is years too old,
Who knows the masterplan?
by upower3
Sun Mar 11, 2018 5:35 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

Rb1100dx4 is definitely much better than rb3011. All depend on your needs... It definetely looks like 3011 series is out of priority for MT team. Strange to see that while 2011 was quite intensively used and sold for years. But surely x4 looks like very promising unit. Two PSU, powerful, crypto hw-...
by upower3
Thu Mar 08, 2018 11:35 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

Does x4 that good over 3011? Bypass etc sounds good but the cpu is a bit out of mainstream (ccrs are tile)...

But I do like dual psu!
by upower3
Thu Mar 01, 2018 9:28 am
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208330

Re: rinetd

I might me a bit wrong but why don't you just use NAT?
I'd like to re-request the function of rinetd.
by upower3
Wed Feb 28, 2018 10:09 am
Forum: General
Topic: Bridge via EoIP vs VPLS
Replies: 1
Views: 368

Re: Bridge via EoIP vs VPLS

Don't you want to have traffic crypted (say IPSec)? If so, fastpath won't work.

MPLS will provide you with "personal" interlink, but then, the traffic goes over ISP network so you may want to protect it anyway, and CCRs are good at it.
by upower3
Wed Feb 28, 2018 9:49 am
Forum: General
Topic: URL to get latest versions of ROS branches [SOLVED]
Replies: 3
Views: 436

Re: URL to get latest versions of ROS branches [SOLVED]

Thank you Normis, this is a hidden knowledge one can only know by chance :) Here you go: ~ normis$ curl https://mikrotikdownload.s3.amazonaws.com/routeros/LATEST.6 6.41.2 1517920142 ~ normis$ curl https://mikrotikdownload.s3.amazonaws.com/routeros/LATEST.6rc 6.42rc35 1519641969 ~ normis$ curl https:...
by upower3
Wed Feb 28, 2018 9:43 am
Forum: General
Topic: RB750Gr3 vs HAP AC2
Replies: 2
Views: 1348

Re: RB750Gr3 vs HAP AC2

Looks like IPSec rate is good for both (hey, soho wifi router is an IPSec beast :) !), so I'd go for HAP AC2.

HAP is also has USB port only while RB750Gr3 has both USB port and MicroSD card slot.
by upower3
Wed Feb 28, 2018 9:37 am
Forum: General
Topic: URL to get latest versions of ROS branches [SOLVED]
Replies: 3
Views: 436

URL to get latest versions of ROS branches [SOLVED]

I need to know which versions of each ROS branche is the latest, as I adding up monitoring scripts. The only way I know to find out versions is RSS feed i can parse for the info. But then, when I check for ROS updates within ROS, it can easily find out which version is the latest, so it looks like t...
by upower3
Wed Feb 21, 2018 6:05 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as a switch to connect storage?
Replies: 2
Views: 1098

Re: CRS317-1G-16S+RM as a switch to connect storage?

An other alternative to 10G ethernet is Infiniband. You can find older IB equipment at 40Gbit speeds, at a fraction of what 10GbE costs. We building some iSCSI lab network, so we dicede to not play with IP over Infiniband (but maybe we'll reconsider that). I'd play with MT gear just for not looking...
by upower3
Wed Feb 21, 2018 3:39 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM as a switch to connect storage?
Replies: 2
Views: 1098

CRS317-1G-16S+RM as a switch to connect storage?

While looking for decent 10G capable switch I found Mirkrotik has such a device for very nice price. So I just want to ask if you can recommend this switch to connect several servers to storage. There'll be couple of optical 10G ports and about 4-5 of copper 10G. So far we need it only as a basic sw...
by upower3
Sun Feb 18, 2018 5:47 pm
Forum: Forwarding Protocols
Topic: Choose right VPN tunnel when both peers are dual-homed
Replies: 2
Views: 445

Re: Choose right VPN tunnel when both peers are dual-homed

All I need is L3, so OSPF looks like the solution, and it's good point that redundancy will add up for free. Will try to, thank you! P.S. Once (quite a long ago) I tried to use OSPF but there was some problems and later I learned there was some ROS problems that may given me that effect, so I drop t...
by upower3
Sun Feb 18, 2018 2:59 pm
Forum: Forwarding Protocols
Topic: Choose right VPN tunnel when both peers are dual-homed
Replies: 2
Views: 445

Choose right VPN tunnel when both peers are dual-homed

I faced simple task to do and found I'm not sure if my choice is right. Please advice: - We have 2 remote ROS devices (R1 and R2), both has 2 uplinks each (so R1-U1, R1-U2 and R2-U1, R2-U2). We need to connect them via VPN links (any type, no limitations on this). There are 4 tunnels possible (R1-U1...
by upower3
Sun Feb 11, 2018 12:27 pm
Forum: General
Topic: VPN between IPv6 WANs?
Replies: 2
Views: 325

Re: VPN between IPv6 WANs?

Too bad remote hosts in my case are behind nat or firewall, so support for many vpn types is a must. Wish i can live with ipsec only.
by upower3
Sat Feb 10, 2018 11:04 pm
Forum: General
Topic: VPN between IPv6 WANs?
Replies: 2
Views: 325

VPN between IPv6 WANs?

I have a CCR1009 as a VPN gateway, both for distant ROS devices and for personal PCs. We do support sstp, ovpn, pptp and (rarely) ipsec. The WAN address was IPv4. Now I try to use IPv6 as another (dual-stack) address on WAN port. ISP provided us with some IPv6 subnet, we've set it up, but sadly I ca...
by upower3
Thu Feb 08, 2018 3:32 pm
Forum: General
Topic: "restrict upgrade from RouterOS older than v5.16" ?
Replies: 8
Views: 911

Re: "restrict upgrade from RouterOS older than v5.16" ?

Ok, so this feature is somtheng that should be noted in (a bit dated) docs rather that considered as "killer feature" )
by upower3
Thu Feb 08, 2018 1:37 pm
Forum: General
Topic: "restrict upgrade from RouterOS older than v5.16" ?
Replies: 8
Views: 911

Re: "restrict upgrade from RouterOS older than v5.16" ?

I do understand the reason for not converting the config (good point to deny the past and go into the future), but why can't I just take my 5.x device, and up it to 6.x even with full config reset? Netinstall is good when you're near the device (or device is near you), otherwise you won't upgrade it...
by upower3
Thu Feb 08, 2018 12:45 pm
Forum: General
Topic: "restrict upgrade from RouterOS older than v5.16" ?
Replies: 8
Views: 911

"restrict upgrade from RouterOS older than v5.16" ?

I can see "*) upgrade - improved RouterOS upgrade process and restrict upgrade from RouterOS older than v5.16;" in recent (rc22) changelog.

What was the reason for that? Any way to up old router to 6.x after that?
by upower3
Wed Feb 07, 2018 5:23 pm
Forum: General
Topic: Slow login via ssh
Replies: 2
Views: 373

Slow login via ssh

I used to use API to access ROS devices to get statistics, but looks like sometime I can do more with ssh login to router. Ok, I set up ssh key, enables ssh service and try to do ssh login. It works, but with noticeable delay. To be specific, I can login with telnet with no delay at all (but I have ...
by upower3
Tue Jan 23, 2018 8:56 pm
Forum: General
Topic: RouterBOOT "auto-upgrade"!
Replies: 18
Views: 11180

Re: RouterBOOT "auto-upgrade"!

Looks like you're right. Hope MT engineers will care for that idea as well. :)

But they introduce many new features (CLI only mostly), good to know that!
by upower3
Tue Jan 23, 2018 8:36 pm
Forum: General
Topic: RouterBOOT "auto-upgrade"!
Replies: 18
Views: 11180

Re: RouterBOOT "auto-upgrade"!

As many other features, also this one is only in rc state and is still work on progress. At the moment it only executes "/system routerboad upgrade" feature after RouterOS upgrade if "auto-upgrade=yes". After reboot latest firmware is applied. I don't mind to wait for 2 reboot instead of one, if it...
by upower3
Tue Jan 23, 2018 4:31 pm
Forum: General
Topic: RouterBOOT "auto-upgrade"!
Replies: 18
Views: 11180

RouterBOOT "auto-upgrade"!

I can see this line in 6.42rc12:
*) routerboard - added RouterBOOT "auto-upgrade" after RouterOS upgrade (extra reboot required) (CLI only);
Looks like miracle happened!

Any docs on this?
by upower3
Thu Jan 18, 2018 8:59 am
Forum: General
Topic: Feature requests
Replies: 1160
Views: 208330

Re: Feature requests

Vote for https://www.wireguard.com/ , nice VPN which appears to be supported in systemd 237 (read: on every modern Linux - https://github.com/systemd/systemd/pull/4191 ). Universal VPN technology so to say, just a shame not to be able to connect to.
by upower3
Fri Dec 29, 2017 11:05 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

The problem with VLAN was because of not ideal upgrade process. Before upgrade there was: I definitely suspect the upgrade process and config conversion procedure is something that better be fixed (in a case MT do care for users). It would be much better to create some kind of web interface where p...
by upower3
Wed Dec 27, 2017 9:11 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

The interface doesn't mislead you. Thank you for pointing that, I just forget to check with it. But as I played with wi-fi routers I noriced I can set 'hw accelerated' checkbox even on wlan (wifi) port in bridge. This is kind of generic approach. I suspect this is due to first version release, and ...
by upower3
Tue Dec 26, 2017 4:24 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

It would be nice to have some docs on wiki so we have kind of official howtos. Here it is: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge Some detail about VLAN and how to convert it: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering Now ( as of new bridge impleme...
by upower3
Tue Dec 26, 2017 4:13 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

I think it will be needed to implement pseudo-interfaces in RouterOS. These pseudo-interfaces will be unremovable and greyed-out interfaces which connect the cpu with the switch-chip. This way we could: - monitor the amount of traffic traversing the CPU-port (i.e. to monitor oversubscription of the...
by upower3
Tue Dec 26, 2017 3:59 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

Upgraded RB2011, hAP, wAP ac, cAP and a RB1100 without issues. But wondering if there is a new way of how I should handle bonding interfaces with vlans? Currently I have two bonding interfaces with two ethernet ports each. On each of the bonds I have severals vlans and the vlans are put on a separa...
by upower3
Sat Dec 23, 2017 5:45 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

I love the releases on Friday and big weekends so i can play with the new releases on the weekends and then upgrade customers routers later.
Heavily depends on configuration :)
by upower3
Sat Dec 23, 2017 5:22 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 77998

Re: v6.41 [current]

It was kind of "wise" to post this version right before holidays, with no support (even in expect of huge problems), with no smooth way of conversion.

Nice done!

(Hope noone set RB to upgrade authomatically?)
by upower3
Wed Dec 06, 2017 4:22 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

without knowing whether there are any changes in the version or not, is not ideal. Mostly there are no changes for all but really new devices or hardware. The only thing you might need this upgrade is when you add new hardware (like SFP module) or you can see you MT works unusually bad. So to say, ...
by upower3
Wed Dec 06, 2017 4:14 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

What's new in 6.41rc61 (2017-Dec-06 08:15): Please explain the process of transformation. Say if I have eth2 as Master-port, and eth3..eth5 as Slaves, and used eth2 in firewall rule, will this rule be changes to one that will use newly-created bridge? Will IP be reassigned from master port to bridg...
by upower3
Wed Dec 06, 2017 3:28 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

Dear mikrotik, why has development slowed down? In the past we used to see a new rc every 3-5 days. Good point :? Maybe freezing due to the holidays at the end of the year? Many companies do this. Posting some roadmap for hardware development and also for ROS development would be nice replacement f...
by upower3
Wed Dec 06, 2017 3:07 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

mikrotik team, no matter how long it takes, ios, junos does not have a weekly update, more are stable, the important thing is that the software stays stable, so keep it up 8) Given that routine current update about to introduce new bridge implementation that potentially break router config (and eve...
by upower3
Tue Dec 05, 2017 5:33 pm
Forum: General
Topic: Nice guest wifi implementation
Replies: 7
Views: 621

Re: Nice guest wifi implementation

[quote=pe1chl post_id=631029 time=1512487226 user_id=80589] We do have ip accounting running to have some way of finding out what happened when we would get a complaint, for example. [/quote] Looks like this is the only way not to bother user too much, to accumulate accounting or netflow and deal wi...
by upower3
Tue Dec 05, 2017 5:17 pm
Forum: General
Topic: Nice guest wifi implementation
Replies: 7
Views: 621

Re: Nice guest wifi implementation

[quote=evince post_id=631020 time=1512484837 user_id=54264] Hello, i have a guest network and here is what is done : Firewall rule to allow only 80,443,25,587 TCP and 53 UDP Setting a queue rule : upload 2Mb and download 5Mb Regards, [/quote] That's fine, and that's easy. But p2p traffic nowadays is...
by upower3
Tue Dec 05, 2017 5:14 pm
Forum: General
Topic: Nice guest wifi implementation
Replies: 7
Views: 621

Re: Nice guest wifi implementation

[quote=evince post_id=631020 time=1512484837 user_id=54264] Hello, i have a guest network and here is what is done : Firewall rule to allow only 80,443,25,587 TCP and 53 UDP Setting a queue rule : upload 2Mb and download 5Mb Regards, [/quote] That's fine, and that's easy. But p2p traffic nowadays is...
by upower3
Tue Dec 05, 2017 1:08 pm
Forum: General
Topic: Nice guest wifi implementation
Replies: 7
Views: 621

Nice guest wifi implementation

In our office we decided to create another wifi ssid, "guest" one, so our visitors can use Internet but have no access to LAN. Simple idea, so to say, and no problem to add another ssid and vlan and nat rule. The problem is, how can I limit usage of that guest network to fair level, what's the best ...
by upower3
Fri Dec 01, 2017 5:54 pm
Forum: General
Topic: License question: ROS 4.5 to 6.xx
Replies: 9
Views: 835

Re: License question: ROS 4.5 to 6.xx

[quote=normis post_id=627652 time=1510564455 user_id=5] Licenses are no longer limited by time. Just Netinstall the unit and the license should become infinite. If not, email support and we will fix it. [/quote] Thank you! Actually as I did the upgrade to 5.xx and then to 6.xx and then to 6-stable t...
by upower3
Fri Dec 01, 2017 11:37 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

For admins ready to 6.41 it would be simple enough as manually switch. It would be quite useful to create another forum topic to let users report their setups that failed to convert from master-slave to new bridge implementation. At least, this may be good to add these situation into config convert...
by upower3
Thu Nov 30, 2017 11:56 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

I am wondering when they dare to release 6.41 as a "current" version with this risky "New bridge implementation" that will likely cause problems once it is widely deployed into many different field configurations (that combine VLAN tagging on switch and bridge now). You may be right in that this co...
by upower3
Tue Nov 21, 2017 10:04 am
Forum: Announcements
Topic: v6.40.5 [current]
Replies: 82
Views: 25276

Re: v6.40.5 [current]

Looks like there is no life in MT kingdom after 6.40.5 and 6.41rc52 - see no changes on download page for days. Hope to see another 6.40.x current before we see "6.41-Revolution-is-here" release!
by upower3
Mon Nov 13, 2017 10:45 am
Forum: General
Topic: License question: ROS 4.5 to 6.xx
Replies: 9
Views: 835

Re: License question: ROS 4.5 to 6.xx

Email support and ask. I asked here since: 1) some other people may know that or may want to read that in the future and 2) hope MT persons visit this forum once in a while and my answer. support never replied me before when I emailed them so all my hopes on forum :) And yes I did the upgrade to 5....
by upower3
Mon Nov 13, 2017 12:13 am
Forum: General
Topic: License question: ROS 4.5 to 6.xx
Replies: 9
Views: 835

Re: License question: ROS 4.5 to 6.xx

Basically, you have to do it in two steps. Upgrade it first to 5.26 and then you should be able to upgrade to latest 6.xx version. But what to do with license restrictions? If I upgrade to latest 5.x (5.26) then will the license upgrade limit be moved to 7.x (just like I can see on say some of my 9...
by upower3
Sun Nov 12, 2017 10:44 pm
Forum: General
Topic: License question: ROS 4.5 to 6.xx
Replies: 9
Views: 835

Re: License question: ROS 4.5 to 6.xx

Which RB433? In these cases the best option is to netinstall.
The question was how can I make a license "longer", that is, my RB433 says it'll permit me to upgrade to ROS 5.x only, but I'd like to up it to fresh 4.xx (mainly for security purposes).
by upower3
Fri Nov 10, 2017 6:01 pm
Forum: General
Topic: License question: ROS 4.5 to 6.xx
Replies: 9
Views: 835

License question: ROS 4.5 to 6.xx

I found old RB433 device which worked for years as simple NAT box (no reboot or wharever and yet worked very well, so thank you Mikrotik!) It has ROS 4.5 installed and it says it upgardable to 5.x only. I know 5.x branch won't under upgrade for years (and for reason) so I think I need to find a way ...
by upower3
Thu Nov 09, 2017 1:15 pm
Forum: Announcements
Topic: v6.40.5 [current]
Replies: 82
Views: 25276

Re: v6.40.5 [current]

Maybe the new naming for the firmware blocks, a direct update to the last stable. Noop, the f/w still named as 3.41, not this weird new way ) And this was current branch all the way as I applied the updates. This was my handy "play with" router, no problem, but should it be remote one this can be a...
by upower3
Thu Nov 09, 2017 12:53 pm
Forum: Announcements
Topic: v6.40.5 [current]
Replies: 82
Views: 25276

Re: v6.40.5 [current]

Just out of curios: as i tried to upgrade MT under 6.39.1 with "/system package update install" it upgraded to 6.40. 4 . After the upgrade and reboot I issued the same command and it offered me 6.40. 5 . So the whole way was: 6.39.1 -> 6.40.4, and the 6.40.4 -> 6.40.5. Why it won't tried to do the w...
by upower3
Tue Nov 07, 2017 2:38 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

is the new bridge implementation without issues now?
I'd say we'll when 1) it'll be released and 2) when we'll live with it at least several releases.
Just to be on the safe side.
by upower3
Sun Nov 05, 2017 7:34 am
Forum: Scripting
Topic: Update ROS and firmware via scripting / API
Replies: 3
Views: 1025

Re: Update ROS and firmware via scripting / API

You could make a scheduler script that would run after a few seconds from its creation time. Once it starts, it would remove itself and do the upgrade (in that order). Whether you make it with a terminal or API, it should work the same way, and allow you to disconnect as soon as the scheduler scrip...
by upower3
Sun Nov 05, 2017 7:32 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

For me the more important question about boot firmware is: Will the firmware version change with every RouterOS release even if no changes are made? Suppose you installed RouterOS 6.41, then upgraded firmware to 6.41. RouterOS 6.41.1 ships with no changes to the firmware. Is the available firmware ...
by upower3
Sat Nov 04, 2017 9:31 pm
Forum: Scripting
Topic: Update ROS and firmware via scripting / API
Replies: 3
Views: 1025

Update ROS and firmware via scripting / API

Tried to do some script based update of ROS version on 100's of RB (mostly 951 and 2011). As I run /system package update install via terminal I start to see percents of upgrade progres switch is not what I need, for if I run it via telnet from remote server the connection will stay online until the...
by upower3
Sat Nov 04, 2017 7:56 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

...and yes, maybe I missed that, but I'd love to know the exact algorithm ROS will use to convert master-slave port configs into bridge-based one, and which changes be done as well to the whole config. If, for example, I have some routes that targeted to port name, will it be substituted with newly ...
by upower3
Sat Nov 04, 2017 7:48 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

Yes, look at the forum thread for 6.40rc, in 6.40rc36 the new bridge implementation was introduced. It was reverted in 6.40rc41 so that 6.40 could be released to stable without it. I know that. I'm awre of new bridge implementation and keep my eyes on it, but you missed the point: when MT ships the...
by upower3
Fri Nov 03, 2017 10:26 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

They've done that already. Done what? In released version? With no roll back? Hey, you must be kidding me! :) What I talk about is the we shoudl split new bridge implementation from all these other changes, for good reason: bridge change is BIG one so this alone should be tested very serious. When ...
by upower3
Fri Nov 03, 2017 2:49 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123777

Re: v6.41rc [release candidate] is released! New bridge implementation!

Just wanted to tell you guys implementing very good thing, but new RC seems to be very long in development so far. It is not common to see 50 (!) RCs per release (and not yet 6.41 released this far), and this looks like it will be just dangerous to install in into prod for too many changes (beside n...
by upower3
Tue Oct 17, 2017 12:06 pm
Forum: Wireless Networking
Topic: Any news of WPA2 Key Reinstallation Attacks (KRACK) mitigation?
Replies: 1
Views: 454

Any news of WPA2 Key Reinstallation Attacks (KRACK) mitigation?

There are bold announcements around about Key Reinstallation Attacks (KRACK) at WPA2. The list is huge, including: CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake. CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake. CVE-2017-130...
by upower3
Wed Sep 27, 2017 1:44 am
Forum: Virtualization
Topic: CHR suggestions for new functionality
Replies: 157
Views: 32431

Re: CHR suggestions for new functionality

CHR should run containers, docker or whatever.
Thats great
+1
Please clarify how you would use it and why :)
Just leave it here: https://www.youtube.com/watch?v=PivpCKEiQOQ
by upower3
Wed Sep 06, 2017 12:16 am
Forum: General
Topic: Cert-authed ovpn-server?
Replies: 3
Views: 852

Re: Cert-authed ovpn-server?

I don't think you can: Currently unsupported OVPN feature: ... authentication without username/password Looks like you missed the point. You can create say ovep client with both certificate and username/password, and it's up to server config if you'll be auth'ed using cert or using username/pass pa...
by upower3
Tue Sep 05, 2017 12:52 pm
Forum: General
Topic: Cert-authed ovpn-server?
Replies: 3
Views: 852

Cert-authed ovpn-server?

I know ovpn is now the strongest side of ROS, but frankly speakig, MT guys did a lot of work to have ovpn working well enough at current level. I used to use built-in ovpn-server for years (with AD-backed auth). But what I wonder now is if I can set up ovpn-server to auth users not with username/pas...
by upower3
Sun Aug 06, 2017 6:36 pm
Forum: RouterBOARD hardware
Topic: Switch stacking?
Replies: 9
Views: 5745

Re: Switch stacking?

Right now I wouldn't even try putting a MikroTik switch on a critical environment. They are pretty cool (and cheap) for SOHO use but not for enterprise. I would give it a try in non-HA environment as a switch where I don't need sophisticated features (so lab setup is ok), but I've never seen it und...
by upower3
Sun Aug 06, 2017 6:22 pm
Forum: RouterBOARD hardware
Topic: Switch stacking?
Replies: 9
Views: 5745

Re: Switch stacking?

...with Cisco switches... Yes, this was my experience, too, along with some other brands. It really helps to build network we can trust. It is hard to find affordable 10G capable switch that's rather stable and rich in features. CRS317-1G-16S+RM looks very promising (at least I do believe there'll ...
by upower3
Sun Aug 06, 2017 6:01 pm
Forum: RouterBOARD hardware
Topic: Switch stacking?
Replies: 9
Views: 5745

Re: Switch stacking?

AFAIK no MikroTik product supports stacking. Me too. This why I'm asking, just to expose the interest. Who knows, maybe one day it'll be implemented? We can use several of SFP+ to create stack links, while other will be used to connect to external devices. Nice approach, and very affordable (if sta...
by upower3
Sun Aug 06, 2017 4:04 pm
Forum: RouterBOARD hardware
Topic: Switch stacking?
Replies: 9
Views: 5745

Switch stacking?

Are there any devices in MT lines that can be used stacked , so I can aggregate, say, a port on first switch and a port on second switch (that is stacjed with the first), and use that aggregated link to connect a server or distant network device? The idea behind is that if one switch in the stack w...
by upower3
Fri Aug 04, 2017 3:38 pm
Forum: General
Topic: hEX default CPU frequency?
Replies: 0
Views: 522

hEX default CPU frequency?

I used to think hEX device are equipped with 880 MHz dual-core CPU, but this device was a distant for me for quite a long time. Now I got one in my hands to play with, and I was quite surprised to see I can set its CPU to run at: 600, 700 and 88 MHz. That is, I have no way to step it up, just one or...
by upower3
Thu Jul 27, 2017 11:53 pm
Forum: General
Topic: Good doc on QoS and Traffic Prioritization?
Replies: 1
Views: 1613

Good doc on QoS and Traffic Prioritization?

It was quite a news for me there is no easy-to-find docs on how modern Mirotik should be set up to allow nice traffic prioritization. Yes, Google returns a lot of links for "Mikrotik QoS" and similar topics but most of them describe old, pre-v6 approach, and only some describe "difference between v5...
by upower3
Wed Jul 26, 2017 10:56 pm
Forum: Announcements
Topic: v6.40 [current]
Replies: 101
Views: 22711

Re: v6.40 [current]

Huge list of changes, nice to see that. Will wait until most of it be backported to bugfix branch. So to say to be on the safe side :)

Anyway good job, and nice to see even ovpn got some updated. Like some anniversary release :)
by upower3
Wed Jul 26, 2017 5:39 pm
Forum: General
Topic: Mikrotik-Mikrotik VPN link that can use compression
Replies: 3
Views: 1541

Mikrotik-Mikrotik VPN link that can use compression

I need to connect two Mikrotik routers (suppose to be CCR1009, so CPU is not a subject) via VPN link (both end has static public IP, so technology may be any), but it is very desirable to compress the data in transmit. What kind of VPN that can Mikrotik use capable of compression? I'm asking since I...
by upower3
Mon Jul 24, 2017 12:46 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36209

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

By the way, I now can see two block diagrams for routers, one for non-switched config and other is for switched. So as 6.41 is out both still be there but "switched" become "attached to the same bridge", right? Also, on this diagram: https://i.mt.lv/routerboard/files/RB750Gr3-esw2-161125152443.png a...
by upower3
Sun Jul 23, 2017 10:24 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36209

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

scalable or manageable. Hence not realistic for production environment. Oh, I see you're wise person already, will not teach you this way :) I can't say how many routers you need to monitor from you initial question. Yes, let's wait for MT to help with this. They should add scripting into SNMP serv...
by upower3
Sun Jul 23, 2017 9:38 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36209

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

This is not realistic. I do understand your pain but Mikrotik is quite slow with SNMP so far. Keep asking, maybe one day?.. What I can offer (well, kind of) is to use you own SNMP server software to reply to specific SNMP requests while query MT's API for information. Not nice at all but at least i...
by upower3
Sun Jul 23, 2017 9:24 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36209

Re: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)

Any chance you could add 'Radio Name' in the SNMP wireless registrations table? It is great having graphs of wireless clients but I do not know which is which without the name. Thanks.
Better use API call, will be faster way I suppose, like
/interface/wireless/registration-table
and play with.
by upower3
Fri Jul 21, 2017 11:33 am
Forum: Announcements
Topic: Newsletter 76
Replies: 50
Views: 14941

Re: Newsletter 76

You can see the Ethernet test (routing mode) and the Switch test (switching mode) results on the product page: Normis, may I please ask you recommendation how to figure out the approximations for NAT performance keeping in mind these "performance" tables you've cited above? You see, while some devi...
by upower3
Fri Jul 21, 2017 1:00 am
Forum: General
Topic: Is hEX (RB750Gr3) can handle 2 x 100M WANs?
Replies: 9
Views: 1805

Re: Is hEX (RB750Gr3) can handle 2 x 100M WANs?

Were you able to encrypt and decrypt IPSec traffic at linespeed (i.e. 300Mbit/s?). After seeing CCR1009 at 300Mb/sec link with some like 150 VPN pptp/sstp clients (which is not h/w accelerated), several IPSec tunnels (which is h/w accelerated), and the CPU was at 3-5% loaded at all (5%, that's 1/20...
by upower3
Wed Jul 19, 2017 8:54 pm
Forum: General
Topic: Is hEX (RB750Gr3) can handle 2 x 100M WANs?
Replies: 9
Views: 1805

Re: Is hEX (RB750Gr3) can handle 2 x 100M WANs?

I've been running a Rb3011 with two 300mbps WANs and 24 IPsec tunnels for almost a year with no issues. The CPU is quire powerful. I have recently replaced it with a RB1100AHx4, but only because I wanted the internal storage. I'm impressed in compare to 2011's! Will try to evaluate the 3011, since ...
by upower3
Wed Jul 19, 2017 7:38 pm
Forum: General
Topic: Is hEX (RB750Gr3) can handle 2 x 100M WANs?
Replies: 9
Views: 1805

Re: Is hEX (RB750Gr3) can handle 2 x 100M WANs?

The hEX should be able, but if you can, I would go with a RB3011. For what I know 3011 has no h/w-accelerated crypto while hEX has. Won't it affects 3011 CPU? But to talk about office-to-WAN routing with load balancing (just to use both WAN at the same time), what WAN bandwidth 3011 is ok for, from...
by upower3
Wed Jul 19, 2017 6:39 pm
Forum: General
Topic: Is hEX (RB750Gr3) can handle 2 x 100M WANs?
Replies: 9
Views: 1805

Is hEX (RB750Gr3) can handle 2 x 100M WANs?

In a office with 10-15 users (mostly IT geeks) it is planed to deploy RB750Gr3 device as a router. The main purpose is to do NAT to 2 WAN links each of 100Mb, and maintain one IPSec link (which appears to be hardware-accelerated so no big load on CPU, isn't it?). 951 and 2011 were unable to handle s...
by upower3
Wed Jul 19, 2017 5:34 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

The way load balancing was configured in 6.37 doesn't work in 6.39.2. Using https://mum.mikrotik.com/presentations/US12/steve.pdf leads to the same issue. Good link, thank you, but the news is not that nice, if the routing behavior changed between bugfix and current branches. Will wait for comments!
by upower3
Mon Jul 17, 2017 7:34 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released! (New bridge implementation delayed till 6.41rc)
Replies: 207
Views: 36209

Re: v6.40rc [release candidate] is released! (New bridge implementation)

There is one interesting line in CHANGES for 6.40.rc42:
*) pppoe-server - fixed situation when some of 100+ pppoe-servers can become invalid on reboot;
Is it possible to know since which version this bug exists? 6.39 is vulnerable or not, for CCR1009?
by upower3
Mon Jul 17, 2017 11:02 am
Forum: Announcements
Topic: Newsletter 76
Replies: 50
Views: 14941

Re: Newsletter 76

is there an ETA for the routing stats of CRS326? Keeping in mind its 800 Mhz 1-core CPU I'd say you shouldn't expect much better throughput that you may have with 2011 series. Maybe 100-130 Mbps, from what I can imagine (as a office internet router, that is, WAN with NAT and some inter-VLAN routing...
by upower3
Fri Jul 14, 2017 6:01 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

We can't establish a connection between bonding interface.
"Nice" feature. Hope will be fixed soon!
by upower3
Fri Jul 14, 2017 5:57 pm
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

https://routerboard.com/RBwAPR-2nD The bad thing is that it is incomplete. Why do you call it incomplete? I definetely not sure fif this device can survive that hard ambient temperature (with heavy raid/snow added, or burning sun with sand storm) but definetely worth to look at. Why I'm sad is that...
by upower3
Mon Jul 10, 2017 10:11 pm
Forum: General
Topic: Mark packets on one router so another one can use the marks?
Replies: 7
Views: 1311

Re: Mark packets on one router so another one can use the marks?

You can use DSCP markings if you want. If you choose values unused by your QOS scheme, it won't interfere.
Keeping in mind I don't have any QoS scheme implemented, what DSCP value would you recommend me to use?
by upower3
Mon Jul 10, 2017 7:38 am
Forum: General
Topic: Mark packets on one router so another one can use the marks?
Replies: 7
Views: 1311

Re: Mark packets on one router so another one can use the marks?

do you need two routers, can't it be done using just one? No, sorry, in fact I try to do smooth move between different server rooms in different buildings so I'll move servers one by one have two different routers (and even ISP) in places. Messy, but that's for plan. As a backup plan I'll move it a...
by upower3
Sun Jul 09, 2017 10:06 pm
Forum: General
Topic: Mark packets on one router so another one can use the marks?
Replies: 7
Views: 1311

Mark packets on one router so another one can use the marks?

I have a bit odd setup: imagine LAN with two routers (Mikrotiks, ROS is the latest current), each connected to its own ISP (so WAN IPs of course different). LAN is the same network, only IPs on routers are different: Router 1: ether1 (WAN): 1.1.1.1/24 bridge1 (LAN): 192.168.88.1/24 Router 2: ether1 ...
by upower3
Sat Jul 08, 2017 11:25 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

On hAPac (RB926UiGS-5HacT2HnT) it'n not possible to disable all LEDs. :-( Winbox System/LEDs/Settings ->immediate results in "Couldn't change LED Settings - This feature is not supported on this board (6)" Frankly, I keep seeing this on every ROS version so far for every small device (951, 941, 926...
by upower3
Sat Jul 08, 2017 7:25 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

Looks like it worth to switch to bugfix branch and proceed with it.

Please, backport IPSec packets order fix for CCRs to bugfix!
by upower3
Sat Jul 08, 2017 7:23 pm
Forum: General
Topic: Way to Internet via EoIP is broken for MTU issue?
Replies: 5
Views: 1527

Re: Way to Internet via EoIP is broken for MTU issue?

You're going to have to give more detailed diagnostic information than "web sites still won't open" if you want a useful response. What troubleshooting have you tried and what was the outcome? I did some tests and I saw packets arrived broken. But as a result, looks like all issues were introduced ...
by upower3
Fri Jul 07, 2017 8:30 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

This could be the result of Fasttrack rules that are not correct (although usually the observed behaviour is reverse: it starts to work when you run packet sniffer or torch). By the way, is there any approach how to reset fasttrack state? i suspect I can see how it keep process traffic with old rul...
by upower3
Fri Jul 07, 2017 3:05 pm
Forum: General
Topic: Way to Internet via EoIP is broken for MTU issue?
Replies: 5
Views: 1527

Re: Way to Internet via EoIP is broken for MTU issue?

I would simply set MTU of your EoIP tunnel to 1500 and made sure the fragmentation is allowed. That of course (potentially) means some performance penalties, but we are talking about a temporary setup anyways, right? Have done this, no luck: eoip MTU is 1500, "Dont fragment" set to "no", "Clamp TCP...
by upower3
Fri Jul 07, 2017 10:15 am
Forum: General
Topic: Way to Internet via EoIP is broken for MTU issue?
Replies: 5
Views: 1527

Way to Internet via EoIP is broken for MTU issue?

Frankly I'm still sure it is my own misunderstanding of MTU along the path, but looks like I need some magic spell to fix it, so I decided to ask: I have two MT routers in different locations (no direct link between, only via WAN), and we migrate from one location to another. We'd like to keep the s...
by upower3
Fri Jul 07, 2017 9:52 am
Forum: General
Topic: IP RAW + Fasttrack is possible!
Replies: 2
Views: 1209

Re: IP RAW + Fasttrack is possible!

These CPU %'s are used to change quite often so even on busy router I can see seconds when CPU mostly (ok, "more") idle, and seconds, when CPU at 100% busy. May your numbers be kind of that deviations so in fact the load is the same but ROS just do some CPU display issues? I'd be more than happy to ...
by upower3
Wed Jul 05, 2017 11:44 pm
Forum: Scripting
Topic: Set "connect-to" for pptp/sstp/l2tp/ovpn client via API
Replies: 3
Views: 539

Re: Set "connect-to" for pptp/sstp/l2tp/ovpn client via API

Try
/interface/pptp-client/set
=numbers=pptp-out1
=connect-to=host2.domain.com
I was successful with '=.id=number', where number is the id that's returned by getall (that "*1" from my first post). in fact I just needed to remove "interface" like you stated.
by upower3
Wed Jul 05, 2017 10:51 pm
Forum: General
Topic: If FastTrack is useful for VPN?
Replies: 6
Views: 2008

Re: If FastTrack is useful for VPN?

In the end I gain little anyway as encryption of the tunnel is what consumes the CPU anyway :-)
This idea appears to be worth to consider ) Thank you!
by upower3
Wed Jul 05, 2017 10:49 pm
Forum: Scripting
Topic: Set "connect-to" for pptp/sstp/l2tp/ovpn client via API
Replies: 3
Views: 539

Set "connect-to" for pptp/sstp/l2tp/ovpn client via API

Play with remote device configuration via API (mostly inspect config and fix only a bits which are different) I notice I can not change PPTP server address for pptp-client. After a while I noticed it is also the same for ovpn-client, l2tp-client and sstp-client, my approach is broken in the same way...
by upower3
Wed Jul 05, 2017 4:50 pm
Forum: General
Topic: If FastTrack is useful for VPN?
Replies: 6
Views: 2008

Re: If FastTrack is useful for VPN?

Yeap, I've read that that long ago, but since that time I read some updated on fasttrack in changelogs so I hoped fasttrack finally can be used for input, too.

But if I run NAT then no point in it, too?
by upower3
Wed Jul 05, 2017 4:28 pm
Forum: General
Topic: If FastTrack is useful for VPN?
Replies: 6
Views: 2008

If FastTrack is useful for VPN?

I set up PPTP, OVPN, L2TP and SSTP servers on the same routerboard, and it works fine. Now I try to lower the CPU burden and decided to play with FastTrack. Here is the idea: I used to allow every type of VPN packets on input chain (like 1723/tcp and GRE for PPTP, etc.), and I can duplicate these ru...
by upower3
Wed Jul 05, 2017 4:16 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

l0pes, upower3 - Both these problems are reproduced and will be fixed in upcoming RouterOS releases. Thank you for this confirmation. I know guys ypu do your best to fix problems, and your work is really appreciated by all the users around. But, please correct me if I'm wrong, the CPU OIDs will be ...
by upower3
Wed Jul 05, 2017 1:01 am
Forum: General
Topic: Move IP between interfaces
Replies: 16
Views: 1259

Re: Move IP between interfaces

How did you get on? You'll be surprised but the trick was easy: the address is assigned to the interface, but at the same time interface is linked to the address. So you can just edit the ip address record changing interface and not the add/remove ip! Imagine: > /ip address export /ip address add a...
by upower3
Wed Jul 05, 2017 12:39 am
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 35035

Re: v6.39.2 [current]

Quite impressive with this silly thing, but as I do on freshly installed CCR1009-7G-1C-1S+ with ROS 6.39.2 (stable) and fw 3.33: [admin@Mikrotik] > /system resource cpu print oid 0 load=.1.3.6.1.2.1.25.3.3.1.2.0 1 load=.1.3.6.1.2.1.25.3.3.1.2.1 2 load=.1.3.6.1.2.1.25.3.3.1.2.2 3 load=.1.3.6.1.2.1.25...
by upower3
Mon Jul 03, 2017 9:58 pm
Forum: General
Topic: Move IP between interfaces
Replies: 16
Views: 1259

Re: Move IP between interfaces

Just tested myself Thank you very much, this is something I'm about to do but I planned to run script to apply these steps. That is, I planned to 1) remove IP from ether2 and then 2) assign the same IP on bridge - 2 steps, and "in the middle" the IP is "nowhere". And you did the reverse, right? You...
by upower3
Mon Jul 03, 2017 6:49 pm
Forum: General
Topic: Move IP between interfaces
Replies: 16
Views: 1259

Re: Move IP between interfaces

Anyway, upower3, you have a bunch of ideas. Have fun! Alright, guys, I'll have some fun close to night, so it won't affect clients. I do connects via LAn interface, not WAN, this is sad and old story but I had to start, just to begin. What I will try is to use scripting. Can't I run two commands at...
by upower3
Mon Jul 03, 2017 5:03 pm
Forum: General
Topic: Move IP between interfaces
Replies: 16
Views: 1259

Move IP between interfaces

If I connect to the Mikrotik and neeed to do something that'll break my connection like move IP between interfaces, which way should I do that? Say, I have ether2-master port and the IP is set on it . The idea is to "move" IP from ether2-master to bridge1 (the ether2-master included into bridge1). I...
by upower3
Sat Jul 01, 2017 3:09 pm
Forum: Scripting
Topic: Get uptime in easy-to-parse form
Replies: 4
Views: 1219

Re: Get uptime in easy-to-parse form

I found this on python
Nice, thank you!
by upower3
Fri Jun 30, 2017 11:29 am
Forum: General
Topic: LAN IP is at ether2 while bridge with ether2 and wlan is configured
Replies: 2
Views: 340

Re: LAN IP is at ether2 while bridge with ether2 and wlan is configured

you should change the ip interface from ether2 to bridge1 Yes, this is what I knew for years, and doing it in other way was not right and won't work sometimes. But this time I really wonder how this setup still work, and how this can be as it looks like this is done via standart initial config wiza...
by upower3
Fri Jun 30, 2017 10:27 am
Forum: General
Topic: LAN IP is at ether2 while bridge with ether2 and wlan is configured
Replies: 2
Views: 340

LAN IP is at ether2 while bridge with ether2 and wlan is configured

I'm doing config audit for several way-back set up and configured devices (mostly 951's), I noticed that most of them has the same config portion, which looks like default config done by that time: /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled...
by upower3
Thu Jun 29, 2017 10:34 pm
Forum: General
Topic: Hardware encription for IPSec, ovpn, sstp?
Replies: 2
Views: 517

Re: Hardware encription for IPSec, ovpn, sstp?

None of these have HW encryption support, except (obviously) L2TP over IPsec. That what I was afraid of. Thank you for the explanation! This is something that should be on wiki so guys like me knows how it all goes. Ok, so the results is: no matter what we do the only thing we should care about is ...
by upower3
Thu Jun 29, 2017 5:35 pm
Forum: General
Topic: Hardware encription for IPSec, ovpn, sstp?
Replies: 2
Views: 517

Hardware encription for IPSec, ovpn, sstp?

I saw the only section on h/w encryption on the wiki https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Encryption_algorithms but frankly I'd like to understand more. First of all, when I set up for example eoip or ipip tunnel, I can enable IPSec (which will be done in kind of default way), and it'll be...
by upower3
Thu Jun 29, 2017 4:47 pm
Forum: Scripting
Topic: Run API call on remote Routerboard via another Routerboard
Replies: 2
Views: 440

Re: Run API call on remote Routerboard via another Routerboard

An API call to switch to another router's API - no.
I really hoped I will find a way to do that so sad it isn't so. Will do the way you advised (actually I was about to do that anyway).
by upower3
Thu Jun 29, 2017 3:54 pm
Forum: Scripting
Topic: Run API call on remote Routerboard via another Routerboard
Replies: 2
Views: 440

Run API call on remote Routerboard via another Routerboard

I have a Routerboard that works as VPN server (ovpn/sstp) so several other Routerboards can connect to and over this links we send application traffic. Nothing too serious and works fine. Several of these "client" mikrotiks are behind NAT so use of these vpn tunnels is the only way to reach routers....
by upower3
Thu Jun 29, 2017 3:46 pm
Forum: Scripting
Topic: Get uptime in easy-to-parse form
Replies: 4
Views: 1219

Re: Get uptime in easy-to-parse form

Thank you, this was what I needed to know!
by upower3
Sun Jun 25, 2017 12:06 am
Forum: Scripting
Topic: Get uptime in easy-to-parse form
Replies: 4
Views: 1219

Get uptime in easy-to-parse form

I'd like to get device uptime from within script or API call. If I query the device via SNMP I can get uptime via .1.3.6.1.2.1.1.3.0 OID, and the reply will be in seconds (e.g. 1558752). But when I try to get that via CLI or script or API, I got reply in human-readable form, like 3w6d15h29m11s . Wha...
by upower3
Thu Jun 15, 2017 11:05 am
Forum: Announcements
Topic: Newsletter 76
Replies: 50
Views: 14941

Re: Newsletter 76

Is there any way to connect SSD to CCR devices, by the way? Why MT dealing with ARM at all if you guys are producing CCRs and they are quite good, after all? Focusing on one platform may free up some resources to develop and polish features users cry for for years (accelerated VPNs, user manager on ...
by upower3
Tue Jun 13, 2017 2:15 pm
Forum: Announcements
Topic: Newsletter 76
Replies: 50
Views: 14941

Re: Newsletter 76

new Dual Boot RouterOS/SwOS 24-port switch CRS326-24G-2S+RM, $199 Stacking! You really need stacking on these! The CPU supports that, and this may be very nice extension for your model line. Very attractive price is good, but ability to connect several switches into one virtual device/chassis may b...
by upower3
Wed Jun 07, 2017 5:23 pm
Forum: General
Topic: ETA v8
Replies: 21
Views: 4121

Re: ETA v8

does the number really matter?
Only bugs really matters. Finish and polish existing features - this will be the best way.
by upower3
Thu Jun 01, 2017 5:05 pm
Forum: General
Topic: Which CPU frequency on RB951-2n? Site-wise or device-size false report?
Replies: 5
Views: 538

Re: Which CPU frequency on RB951-2n? Site-wise or device-size false report?

Di you check /system resource ? which frequency appear ?

Do you have the latest routerOS ?
You won't believe ))

Image
by upower3
Thu Jun 01, 2017 4:53 pm
Forum: General
Topic: Which CPU frequency on RB951-2n? Site-wise or device-size false report?
Replies: 5
Views: 538

Re: Which CPU frequency on RB951-2n? Site-wise or device-size false report?

The CPU nominal frequency is 400 Mhz. You might not get the original idea: the Winbox show me the list with only two choices , 240 and 360 Mhz. There is no such value as 400 on the list at all. So my question is, how MT claim this devices as 400 Mhz while there is no such value on my list? http://i...
by upower3
Wed May 31, 2017 11:41 am
Forum: General
Topic: Which CPU frequency on RB951-2n? Site-wise or device-size false report?
Replies: 5
Views: 538

Which CPU frequency on RB951-2n? Site-wise or device-size false report?

I got handy device RB951-2n ( https://routerboard.com/RB951-2n ) which helped me several time. I brought it by chance and never though it is that weak (while is it weak indeed for modern WAN speeds), until when I go to System -> Routerboard -> Settings . I can see only two options of CPU speed to ch...
by upower3
Tue May 30, 2017 11:47 am
Forum: General
Topic: Fasttrack for ovpn/sstp/pptp - is buggy?
Replies: 0
Views: 326

Fasttrack for ovpn/sstp/pptp - is buggy?

When fasttrack feature was introduced there were numerous reports how buggy it is, and also several updates on how developers implements fasttrack further. Now is the question: is it safe and useful to enable fasttrack rules on the router which used mostly as VPN concentrator (and which has 80-90% b...
by upower3
Mon May 29, 2017 5:20 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: Store The Dude database on SD card/USB stick on CCR?

Unles some probes do not rely on ros commands... I used to use API for this purpose, which also gives me more precious replies. For example, SNMP replay for temperature sometimes gives me pretty big number but via API it is within reasonable limits all the times. I'd prefer to get stats to be send ...
by upower3
Mon May 29, 2017 5:01 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: Store The Dude database on SD card/USB stick on CCR?

Looks like old good SNMP poller on PC will do better this way!
by upower3
Mon May 29, 2017 4:36 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: Store The Dude database on SD card/USB stick on CCR?

Oh, thank you!

But then, how big the database become over a time? What size of card should be used/planned?
by upower3
Mon May 29, 2017 3:18 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: RE: Re: Store The Dude database on SD card/USB stick on CCR?

on last 3 or 4 versions it was so This is only in connection with The Dude? I mean, may this be due to way The Dude uses disk? if it is, then it is useful to fix The Dude, which is not the case considering the efforts MT put into The Dude during last time. "AHx4 with The Dude" edition features SSD ...
by upower3
Mon May 29, 2017 3:04 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: Store The Dude database on SD card/USB stick on CCR?

you can try ... try to reboot Will definitely do that but right now I have no spare CCR and I need this info to plan The Dude deployment. Simple to say, do I need to setup separate Dude server or I'll be able to go with CCR. Considering your USB stick, did you tried to use different sticks? If othe...
by upower3
Mon May 29, 2017 2:44 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Re: RE: Store The Dude database on SD card/USB stick on CCR?

There were problems after rebooting (i don't know about other, but in 3011) - RB loses disk and only low level format from PC help. Am I right then, that 3011 loses disk despite the Dude uses it or not? That is, after the reboot the 3011 won't be able to use USB disk for any purpose? Then looks lik...
by upower3
Mon May 29, 2017 2:07 pm
Forum: The Dude
Topic: Store The Dude database on SD card/USB stick on CCR?
Replies: 17
Views: 4063

Store The Dude database on SD card/USB stick on CCR?

Is it possible to have Dude to store its database on external storages, like SD card or USB stick connected to USB port? The device is CCR1009 , it has no dedicated SSD storage but I also don't want to wear out built-in flash with Dude data, so which is the best approach ? Another question is how to...
by upower3
Sat May 27, 2017 5:57 pm
Forum: General
Topic: Combat botnets with dynamic ACLs - is this the right way?
Replies: 2
Views: 388

Re: Combat botnets with dynamic ACLs - is this the right way?

You shouldn't do this, just drop the traffic, don't add it to an ACL. Otherwise anyone with ability to IP spoof can easily block lots of important sites by forging source IPs to your ACL-block ports.
Yes, this is a good point. Will try to check my rules!
by upower3
Sat May 27, 2017 5:07 pm
Forum: General
Topic: Combat botnets with dynamic ACLs - is this the right way?
Replies: 2
Views: 388

Combat botnets with dynamic ACLs - is this the right way?

I got used to use ACLs to combat evil incoming traffic. The approach is quite simple, like this: /ip firewall filter add action=drop chain=input in-interface-list=WAN src-address-list=Evil /ip firewall filter add action=add-src-to-address-list address-list=Evil address-list-timeout=1h chain=input ds...
by upower3
Thu May 25, 2017 7:38 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4 Dude Edition
Replies: 52
Views: 12252

Re: RB1100AHx4 Dude Edition

So this way noone tested neither the Dude on it, nor the performance? :( Practical question then: While looking for VPN server to allow 150-200 connections (mix of pptp, l2tp and ovpn) what should be taken: RB1100AHx4 or one of CCR1009 family? I can see nice words of "The device supports IPsec hardw...
by upower3
Tue May 23, 2017 9:25 pm
Forum: General
Topic: Feature Request: OpenVPN [ovpn] udp tunnels
Replies: 250
Views: 90830

Re: Feature Request: OpenVPN [ovpn] udp tunnels

While Mirotik plan for 100G ports in upcoming routers maybe they can offer open module spec if they unable to implement ovpn module? OVPN is one os the main distinct feature of MT. And while ovpn developers at openvpn.net produce one version after another MT developers won't make good implementation...
by upower3
Sat May 20, 2017 8:01 pm
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 168
Views: 25951

Re: Which types of ports would you like to see for a high speed router

Modular router is fundamental requirement Wish to look at it! Modular 13U router from Mikrotik with add-in blades full of different ports, with built-in support for hardware redundancy of CPU cards, storage. And with (still) one internal PSU :) Really, I suspect a lot of people would like to see no...
by upower3
Sat May 20, 2017 10:39 am
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 168
Views: 25951

Re: Which types of ports would you like to see for a high speed router

None of the rack mountable CCR units has an external power supply
But I would like a desktop unit with a single internal PSU.
Not a problem, but this is not high-end device, right? And this topic is for 100G ports, something you just don't need in desktop unit, after all.
by upower3
Fri May 19, 2017 8:26 pm
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 168
Views: 25951

Re: Which types of ports would you like to see for a high speed router

None of the rack mountable CCR units has an external power supply Ok, then lets's count how many of them has two PSU? I suspect there is only ONE (ok, two, since one was a replacemnet for another one) When it comes to this point all I got from Mikrotik was advice to supply second power source via P...
by upower3
Fri May 19, 2017 1:59 pm
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 168
Views: 25951

Re: Which types of ports would you like to see for a high speed router

Take into account only a few devices have 2 power supply built-in, I really doubt you'll do well on really high-end market. Cheap China-grade external "hey ma, I got my phone power supply for my router!" typed power sources are something that won't look nice for anything high-end. Who'll pay for 100...
by upower3
Tue Mar 14, 2017 10:23 pm
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

I was talking about CPU, not PSU... I got that, my point was that for any kind of rack-mount hardware it may be better to have good PSU and decent CPU and RAM so this device can be relied upon. I had some trouble mounting about ten of such a switches in a single rack since I got manage to connect t...
by upower3
Tue Mar 14, 2017 8:13 pm
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

Putting another (more powerful) CPU in addition to what's already inside will make device more expensive.
Adding built-in power supply won't rise the price to the sky but will definitely makes it easy to install 10s of such devices in one rack.
by upower3
Tue Feb 14, 2017 8:25 pm
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

Btw, what it takes to add normal RAM amount to this new switches to allow both ROS and SwOS be choosen? I don't think the amount of RAM is the problem here. But CPU arch very likely is. Hardly believe MT can not afford to put any decent CPU into this switch. I only suspect they wouldn't like to cut...
by upower3
Tue Feb 14, 2017 7:17 pm
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

Btw, what it takes to add normal RAM amount to this new switches to allow both ROS and SwOS be choosen?
by upower3
Thu Feb 02, 2017 11:00 am
Forum: Announcements
Topic: Newsletter 75, January 2017
Replies: 55
Views: 16836

Re: Newsletter 75, January 2017

I don't know of any ''serious" switch that does not support
From what I've learn about MT hardware so far, MT won't target to enterprise market, and I don't even know what market they try to feed.

Good roadmap and declaration of their market vision would be good idea, really.
  • 1
  • 2