MikroTik

colin

I have the same issue. After disabling the rules, the CPU becomes normal.

CCR1009-7G-1C-1S+
7.16

colin

Oh my god, i thought there could only be one line of operators. Thank you. If you have haven't used an old RPN-based HP calculator, you'd think Mikrotik was crazy for how this works. You can have multiple operators in one line, but you can ALSO have multiple "#operators" in the string arr...

colin

Oh my god, i thought there could only be one line of operators. Thank you.

colin

... and you asked a similar question here: https://forum.mikrotik.com/viewtopic.php?t=198974#p1021503 Yes, with your help i can do simple queries. Thank you again. But for the example:(chain=chain1 or chain=chain2) and (action=netmap or action=log) and src-address=fd00:0:0:3::/64, i still don't kno...

colin

Hi All:
I want to query some nat rules via restful api，for some simple queries it has been implemented.
But i don't know how to query like this:
(chain=chain1 or chain=chain2) and (action=netmap or action=log) and src-address=fd00:0:0:3::/64

Can anyone give some help? Thank you.

colin

IMO it's really the docs could be clearer. The example shows a -1, so they give you the clue at least...clarity be better. In formal sense, the <start> is exclusive of itself, so it mean "search- after -this-index" or "start-after=-1:... and next number after -1 is 0, which is the st...

colin

Is this designed to be like this? Yes. RouterOS uses 0-based indexes for variables/array/string, so -1 is before the first is logical. It's not important whether routeros uses 0-based index or 1-based index, the key point is that the parameter and return value of the :find function define the ind...

colin

Hi all:

I found that the :find function starts searching from start + 1 (for example, if you want to search from the beginning, start needs to be specified as -1). Is this designed to be like this?

colin

Other languages offer you string interpolation of variables like this: :log warn "${testStr}2" or :log warn "{$testStr}2" Of course not working in ROS scripting. First example is syntax error and the second one works, but outputs the braces. I guess OP does not want the braces. ...

colin

Hi All: for the example below: :local testStr "198" :local testStr2 "199" :log warn "$testStr2" If i want get the result of 1982(not 199)，how to do it? I know it can be done like: :log warn ($testStr . "2") but i wonder if there is an easier way. Thank you.

colin

I found that the execution in the script can be simplified to：

:local text1 "IP: $[([interface pppoe-client monitor DIGI once as-value]->"local-address")]"

or

:local text1 [([interface pppoe-client monitor DIGI once as-value]->"local-address")]

colin

This is exactly what i want, thank you so much.

colin

Yeah, the first WireGuard handshake is like a secret handshake between two routers (Peer A and Peer B) that want to communicate securely. Peer A sends a "hello" (handshake initiation packet) to Peer B which responds with a "hello back" (handshake response packet). But because th...

colin

Hi all,
Is it possible to get the runtime information via script?
For example, get the remote ipv6 address of the pppoe client interface:

pppoe info.png

Thanks.

colin

The ambiguity (I believe present in other computer languages/scripting) is in the quotes behaviour. When doing: :set ($testarr->2) 2 is a value read by the parser as number, or to be even more strict, 2 is an unknown type value and the parser attributes to it a number type. When doing: :set ($testa...

colin

Hi all, could you please help confirm whether this is expected behavior or a bug? Thank you. :local testarr [:toarray ""] :set ($testarr->"2") "str 2" :set ($testarr->2) "int 2" :local testIdx 2 :log warn ($testarr->"2") #output: str 2 :log warn ($te...

colin

*) interface - added "macvlan" interface support;

I've been waiting for years, and now we finally have macvlan, thanks.

macvlan.PNG

colin

Specifically, the syntax for the ".query" is use a stack (like an HP / RPN calculator), unlike "find"/"where" in script... /ip/firewall/nat/print where chain !="srcnat" and chain !="dstnat" How to do this query by rest api? Thanks. Using curl someth...

colin

I thought the rest-api policy should be checked for the account which was used to access rest api, but in fact the api policy required(no need rest-api).
So when to use the rest-api policy? Thank you.

colin

Hi guys, i want to query some nat rules like this:

/ip/firewall/nat/print where chain !="srcnat" and chain !="dstnat"

How to do this query by rest api? Thanks.

colin

~ in api is not valid, you cannot use regexps that way.
Any parsing or filtering with regexps must be done on the APP side.

rest api still doesn't support regex query, right?

colin

Hi rextended, thank you for your reply. In v6 it happened by mistake, in v7 this error has been fixed. But this will broke compatibility，and maybe very hard to fix(hard to find out where need fix). There are no "pointers" in RouterOS as understood in some programming languages. Yes, it jus...

colin

1、array reference test :log warn "===Array reference test start...===" :local arr1 [:toarray ""] :local arr2 [:toarray ""] :set ($arr1->"key1") 2 :log warn ("arr1 befare change=") :log warn $arr1 :set ($arr2->"key2") $arr1 :set ($arr1->&qu...

colin

Add Support for "Virtual Interfaces"
-MACVLAN
-IPVLAN

More info
https://developers.redhat.com/blog/2018 ... networking

+1

colin

force option +1.

colin

Code: Select all
*) chr - fixed FastPath support for VMXNET3 drivers; 
CHR has FastPath ???

When did this happen!

Mikrotik, which drivers does this support ?
Its noted in the manual!

nice.

colin

Code: Select all
*) chr - fixed FastPath support for VMXNET3 drivers; 
CHR has FastPath ???

When did this happen!

Mikrotik, which drivers does this support ?

same question here.

colin

@rextended Thank you for your reply. The "change directory" is local only for :if statement Yes, like a local variable，you can't access it out the if block. # changed to global to quickly test the script on the terminal :global pam "4" :global ruleCnt 0 :if ($pam = "4")...

colin

Hi guys: I want to do some common operate both for ipv4 mangle rule and ipv6 mangle rule, for example: :local pam "4" :local ruleCnt 0 :if ($pam = "4") do={ /ip firewall mangle } else={ /ipv6 firewall mangle } :set ruleCnt [:len [find]] # and other code both for ipv4 and ipv6 :lo...

colin

Which is correct about the disk format?

format_disk.png

diskformat_gui.png

diskformat_cli.png

colin

routing rule.png

When export routing rule, there's no table data.

colin

I do not fully understand at what level the container-daemons live in ROS, but I'm sure your ROS must be booted up to a certain level for that. I am talking about this from an ISP perspective. At the local site, by where the user is, we have a head-end router there that is fully operational. Many c...

colin

It seems that can't add scheduler via cli if the on-event contains the char of '\', but it's ok for script:

linebreak.PNG

colin

Please add an option to /import, or make it the default behavior, to print the imported line when an error occurs (in addition to the error message), and to continue the import. As it is now, it is very difficult to import rsc files as even with the slightest difference in features the import stops...

colin

Previously, when running Torch and double-clicking a line in the results, Torch was stopped and IP address under mouse cursor copied to corresponding field (src. or dst. address) where it was easily accessible. Now I can't repeat that. Is it WinBox 3.29 or my MacOS?.. I have the same issue. windows...

colin

Do you mean bridge+nat? I think it's too complicated, and may be it will affect performance. No. You can add a VLAN to your ethernet port to get the VLAN tag, then create a bridge and add the VLAN interface to that as a port, set the admin MAC on the bridge, and add the PPPoE client to the bridge. ...

colin

Is there a plan to support macvlan or set mac address for the pppoe interface?
You can probably do that using a bridge...

Do you mean bridge+nat?
I think it's too complicated, and may be it will affect performance.

colin

Is there a plan to support macvlan or set mac address for the pppoe interface?

colin

Seems that there are duplicate settings about vrf:

vrf-diff.png

But in interfaces->vrf, vrf can't be added(interface list must be specified).

colin

!) added support for IPv6 NAT (CLI only);
Great news. Finally we can use ipv6 nat now(useful for multi wan+load balance).

colin

I was right then to put it in my signature...
(Be ready, 23 August is coming...)

So when can we see the stable version?

colin

*) added "Windows" menu for list of all currently opened windows;
Love love this. Thank you so much.

colin

+1, just like mwan3(bitwise mask)

colin

Which features are missing in your opinion?
Macvlan feature missing

+1

colin

colin

Some isp bind the pppoe account and mac, so if you have more than one pppoe accounts, you should have more than one mac address. So for the v7 version, hope it will support: 1)add macvlan interface(add it's also suit for other situation, eg. when you want to get more than one address from DHCP server)

colin

From the wiki https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack and other topics we know that PBR does not play well with Fasttrack. I also test it by www.speedtest.net , and it can't complete the test. But yesterday i found that if i delete the default route(0.0.0.0/0) from the main table, then fo...

colin

192.168.0.0/16 was added by mistake. Also fixed title form IPv4 to Ipv6. Thanks for the confirm. And is this right? /ipv6 firewall address-list add address=2001::/32 comment="defconf: RFC6890 TEREDO" list=not_global_ipv6 /ipv6 firewall raw add action=drop chain=prerouting comment="de...

colin

Ad 1.: the article is an example to show how one can strenghten security. Surely exact config should be adapted for actual network layout. For example: 192.168.0.0/16 is a bad SRC IP address for packets arriving from WAN interface. Except in very rare cases. But for majority of installations bad SR...

colin

1.why 192.168.0.0/16 is a bad source for ipv4?
https://help.mikrotik.com/docs/display/ ... dressLists

bad src.png

2.should be ipv6 raw rule
https://help.mikrotik.com/docs/display/ ... RAWRules-2

ipv6 raw.png

colin

Hi guys, is it possible to ocnvert a string to map? for example :local arrElements "a=1,b=2,c=3" :local arr4 [:toarray $arrElements] :foreach k2,v2 in=$arr4 do={ :log info "$k2=$v2" } Expected output： a=1 b=2 c=3 Actual output: 0=a=1 1=b=2 2=c=3 If define like this, it works: :lo...

colin

Here is an updated version that could be used to both get current time or convert data from input. Example current time :put [$EpochTime] 1588597644 Convert time :put [$EpochTime "may/01 16:23:50"] 1588343030 EpochTime "15:23:50"] 1588598630 When date not give, it uses current d...

colin

Oh my god, why didn't I discover it until now. It's exactly what i want. Thank you so much.

colin

Thanks, i'll try it.

colin

Hi guys, i bought a used ccr1009-8g-1s-1s+ router(no usb otg cable), and it seems work fine except the usb port. I connect a usb disk to the router via a usb otg cable which was used for the android phone, but i can't see the usb port in the winbox under the system->ports menu, and the disk doesn't ...

colin

Pirlet , FYI - I assume you are running a Mikrotik CHR (64-Bit ROS). Heads up - I don't think you need the "SCSI controller 0" in your configuration. If I am correct , the CHR does not even have SCSI drivers and the virtual CHR hard disk is actually IDE. By removing the SCSI controller , ...

colin

after enable kid control: enable-kidcontrol.png after disable kid control: disable-kidcontrol.png None of the other settings were changed. So it's the bug about kid control? Tried many times(disable kid control to see the cpu load then enable kid control to see the cpu again) and got the same result...

colin

For the rules: add action=mark-connection chain=prerouting new-connection-mark=conn1 passthrough=no src-address=192.168.2.4 add action=log chain=prerouting connection-mark=conn1 src-address=192.168.2.4 add action=log chain=prerouting log=yes src-address=192.168.2.4 I found that the packets count of ...

colin

Works with find too:

[admin@p3_450] /ip route> :put [find  where !dynamic]      
*2;*1
[admin@p3_450] /ip route> :put [find  where !static]        
*401691fd

Sorry, my fault. It works.

colin

When route is not dynamic then "dynamic" parameter is not set wich is not equal to "no" Correct way is [admin@p3_450] /ip route> print where dynamic Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unr...

colin

Hi, i find that the follow commands get different results: /ip route :put [:len [find static=yes]] =>44 :put [:len [find dynamic=no]] =>0 :put [:len [find dynamic !=yes]] =>44 but in /ip firewall nat they have same results: /ip firewall nat :put [:len [find dynamic=no]] =>55 :put [:len [find dynamic...

colin

looks like beta2 is out: https://forum.mikrotik.com/viewtopic.php?f=1&t=152003#p752103 Changes in v7beta2 capsman - improved compatibility between v6 and v7 versions; tr069-client - address support of server CA certificates; winbox - re-added OSPF menu; ppp - fixed "add-default-route"...

colin

Even if it's not perfect, we'd love to start testing BGP/MPLS on ARM/Tilera!
And CHR also, please!!

CHR +1

colin

finally we saw the beta version of v7, and hope the full ipv6 support will be implemented.

colin

Some times if i disable upnp, and reenable it, the upnp will still keep disabled(you can check the tcp port 2828 by tcping, it was closed.). After disable it and reenable again and again, it still disabled, then i find your solution and try it, and it worked again. So thanks to your solution. But mo...

colin

After update to 6.44.2(CHR), i found that the port of 2828(upnp related port) will be closed when you restart ros, even the upnp settings still show as enabled. To enable it, i need to disable upnp then reenable it many times. And if restart ros, the port will be closed again. Any one else has the s...

colin

Oh good question @colin, I don’t know of a way. Perhaps adding :resolve server=8.8.8.8 might be handy.

Yes, the resolve command has the server parameter, but it seems that ip firewall address-list always resolve the domain address list by the default dns server.

colin

I fully support your proposals to enhance the DNS resolver.

And i think use the address list to get all of the address for a domain is a good idea, but if i want to resolve the domain by different dns server, how to do it?

So i think the best answer is to enhance the DNS resolver, i think.

colin

Does anyone know how to change mtu of vrrp interface? The default value is 1500, and i change it to 1512 or 1480, but the actual mtu is still 1500 And it seems that it no effect to pppoe interface which created base on vrrp, for example: eth1 mtu:1500 vrrp1 mtu:1460 pppoe1 mtu:1480 pppoe1 can connec...

colin

I have my Winbox windows pre-defined in my session preferences, so every new session opens with my preferred windows open in exactly the same place and dimensions each time. If a window ends up behind another, I don't go looking for it in the right-hand pane. I navigate to it through the menu again...

colin

Winbox is a classic MDI application, you can use CTRL-F6 and CTRL-SHIFT-F6 to cycle through child windows, forth and back respectively.

Thank you. This hot key is helpful.

colin

Hi guys, i want to know how do you use winbox, because i think it's really hard to use. For example: 1.can't move the sub window out of the main window. 2.can't minimal the sub window. So when opening many sub windows, it's hard to find the window which you want. Anyone else has good idea to operat...

colin

Hi guys, i want to know how do you use winbox, because i think it's really hard to use. For example: 1.can't move the sub window out of the main window. 2.can't minimal the sub window. So when opening many sub windows, it's hard to find the window which you want. Anyone else has good idea to operate...

colin

First of all thanks to all of the reply. Case1: Yesterday i tried to bridge the two interfaces then filter them in bridge filters,(just like what @BartoszP and @vecernik87 said), and it worked. Thank you. Case2: I found that it can be achieved by Bridge VLAN Filtering and physical vlan switch(see:ht...

colin

Hello, I wan't to know is it possible to use the one ip for ros and accessed by different interface. Case1: 1.1 the router has two interface called lan1 and lan2. 1.2 the lan1 and lan2 have the same network of 192.168.2.0/24 1.3 the router take the ip of 192.168.2.1/24 1.4 lan1 and lan2 should not a...

colin

Hope we will get the v7 beta version in 2018...

colin

Do you confirm that the isp provide the ipv6?
And make sure that
1."use ipv6" is yes in the pppoe profile.
2.only prefix is checked in the dhcpv6 client

colin

I noticed this also. I tried to disable the pppoe client interface then reenable it, it use it's own time and ignore the system time.

CHR 4.43.2

colin

Same behavior on 6.43.2.
See viewtopic.php?f=1&t=139682

colin

Thank you so much for the search for me.
It seems that not fixed even in 6.43.2

colin

@Sob Thank you for your reply.

colin

1. These days i found that my isp enable ipv6 support. So i setup ipv6 in ros and it worked well. But after that i found that in the dns cache table, some strange content were cached.for example: dns2.PNG dns1.PNG And I confirm that they appear after i setup ipv6. Is it normal? BTW, there's more and...

colin

+1. very very need it, and routing mark

colin

still have the same problem in ros 6.41.2, hope it will be fixed in the next release.

colin

for example: /interface bridge add name=wan /interface vlan add interface=wan name=vlan100 vlan-id=100 /interface bridge port add bridge=wan interface=ether2 /interface pppoe-client add name=pppoe-out1 user=test password=test interface=vlan100 /interface bridge nat add action=log chain=srcnat disabl...

colin

1. The local variable which type is array, sometime it act like a global variable, for example: :local testArr {1;2;3} :log info "step1:testArr[0]=$($testArr->0)" :set ($testArr->0) 11 :log info "step2:testArr[0]=$($testArr->0)" when execute it for the first time, the output was:...

colin

for the script:

:for i from=0 to=-1 step=1 do={
:log info $i
}

it will output
-1
0

But the expect result is output nothing.

Is it a bug or normal result?

colin

The changelog of: *) upnp - fixed nat rule dst-port by making it visible again;

It seems that the dst-port still unvisible.

colin

We know that one different of Global-Out and Interface HTB is that In case of SRC-NAT (masquerade) Global-Out will be aware of private client addresses, but Interface HTB will not in v5. But in v6, both the global and interface htb are all after the src-nat(see http://forum.mikrotik.com/viewtopic....

colin

+10000

I need this feature too

colin

Thank you for reply.
retest it with the chr version, the same result.

colin

What's new in 6.31 (2015-Aug-14 15:42): ...... *) demo mode of Cloud Hosted Router (CHR) added *) chr - added x86_64 image for use in virtual environments *) chr - added support for VMware SCSI virtual disks *) chr - added support for VMware vmxnet3 network card It seems that v6.31 had support the v...

colin

sorry for invoice but we will have driver implemented only in v7 beta that will be released soon

Can it be implemented in v6.29 etc... or what is the exactly v7 beta release date...

Search found 93 matches