Community discussions

MikroTik App

Search found 12013 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 41
by pe1chl
Mon May 20, 2024 12:09 pm
Forum: RouterOS beta
Topic: Feature Request : IPv6 Fasttrack
Replies: 184
Views: 54068

Re: Feature Request : IPv6 Fasttrack

They are related but they are not the same thing. When you have hardware capable of L3 processing, one way to use it is to offload the processing of fasttrack into it. But as you rightly indicate, then first you need to have fasttrack in the first place. However, the L3 hardware is also capable of h...
by pe1chl
Mon May 20, 2024 12:06 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

When you configure such a service and pull data from an external provider, you should always realize what may happen when they send you bad data. Even when the router ignores the actual address in the lists (which I think it does...), there still is the risk that this external service is blocking si...
by pe1chl
Sun May 19, 2024 11:07 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

When the secret signing key gets compromised in the way Kaldek suggests, it is not an issue if you have a hosts file with bad entries, because the adversary could just put their compromised code on the original servers. If the signing key gets compromised that does not mean access to the original s...
by pe1chl
Sun May 19, 2024 11:05 pm
Forum: RouterBOARD hardware
Topic: HOT S-RJ10
Replies: 13
Views: 1398

Re: HOT S-RJ10

Even a small fan running at reduced speed will help a lot. It is just that slight breeze that you need to replace the air nearest to the unit. At room temperature an RB5009 sitting on a surface will get 55-60C and that is quite acceptable. With yours getting 85C I presume you are in a hot climate an...
by pe1chl
Sun May 19, 2024 3:33 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

RouterOS is not in any way involved in encrypted (https) connections made by clients. So "certificate pinning" makes no sense. That is just half of the truth. If RouterOS itself downloads packages that same RouterOS is actually the client. But it downloads them using http. Not https. So t...
by pe1chl
Sun May 19, 2024 11:50 am
Forum: Beginner Basics
Topic: Is it public IP OR not
Replies: 2
Views: 231

Re: Is it public IP OR not

Lots of (especially cheap) ISPs give a private IP because IPv4 addresses are getting scarce.
Use IPv6, there you get a large space of private IPs. Well, extremely cheap ISPs do not have IPv6, but these are not recommended.
by pe1chl
Sun May 19, 2024 11:48 am
Forum: General
Topic: IPTV cuts and pixelations with Movistar Spain and HAP ax3
Replies: 26
Views: 1363

Re: IPTV cuts and pixelations with Movistar Spain and HAP ax3

It is very unlikely that something like this would be related to a defect in your ax3 and would be fixed by returning it and ordering another one... (I feel for the webshops that get these returns, get devices back as "defective" and have to write off on that. And I feel for myself as I ha...
by pe1chl
Sun May 19, 2024 11:44 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

RouterOS is not in any way involved in encrypted (https) connections made by clients. So "certificate pinning" makes no sense. The updates are signed with a secret key of which the public key is present in the router. Not a PKI certificate. When the secret signing key gets compromised in t...
by pe1chl
Sun May 19, 2024 11:39 am
Forum: RouterOS beta
Topic: BGP prefix count in ROS 7.1 stable
Replies: 23
Views: 13844

Re: BGP prefix count in ROS 7.1 stable

Yes, but it is not updated on the screen even when you press F5 for refresh (you need to toggle to another tab and back), and it does not reflect the number of accepted prefixes, only the (approximate) number of prefixes the other side sends. So, before filtering. So it is not as useful as it was in...
by pe1chl
Sat May 18, 2024 6:21 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

Probably this limit was invented 10 years ago and with todays hardware it could well be higher. Maybe better would be to make this property settable and have the user decide how much RAM they want to spend on connection tracking... I see no reason to limit this. If the system needs it, it needs it....
by pe1chl
Sat May 18, 2024 6:15 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

It should not be an issue, because almost all websites are now https and all updates (Microsoft, MikroTik) are digitally signed so you cannot setup a website hosting trojaned ROS images.
by pe1chl
Fri May 17, 2024 4:57 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

Yes, sure that would be more versatile. Of course it could also result in disgruntled users that claim the router has a memory leak. See the 7.15rc topic.
by pe1chl
Fri May 17, 2024 3:46 pm
Forum: General
Topic: BGP sessions close when another session to the same IP closes
Replies: 3
Views: 854

Re: BGP sessions close when another session to the same IP closes

No, unfortunately that wasn't it... I still see sequences like this: 2024-05-17T14:37:50+02:00 N0280 n0211-1 {l_addr: 172.22.32.126, r_addr: 172.22.32.12} Connection closed 2024-05-17T14:37:50+02:00 N0280 n0211-1 {l_addr: 172.22.32.126, r_addr: 172.22.32.12} Idle 2024-05-17T14:37:50+02:00 N0280 n021...
by pe1chl
Fri May 17, 2024 3:31 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

The maximum connection tracking entries in Linux is a parameter (stored in /proc/sys/net/nf_conntrack_max) which can be tuned. The documentation for RouterOS states: --------------------------------- max-entries (integer) Max amount of entries that the connection tracking table can hold. This value ...
by pe1chl
Thu May 16, 2024 8:12 pm
Forum: General
Topic: [Discussion] MikroTik configuration abstraction complexity
Replies: 140
Views: 9759

Re: [Discussion] MikroTik configuration abstraction complexity

Well, at least they could have integrated some filter so that VLAN information is not silently dropped when the network card driver does not have a VLAN configuration interface. It was never a good idea to put that layer in the network card driver and the manufacturer-specific config section, but I ...
by pe1chl
Thu May 16, 2024 4:56 pm
Forum: General
Topic: [Discussion] MikroTik configuration abstraction complexity
Replies: 140
Views: 9759

Re: [Discussion] MikroTik configuration abstraction complexity

I cannot imagine a situation where you would usefully have a port as an untagged member of multiple VLANs, which is a flexibility that this config provides. Most other manufacturers do not even allow such a configuration. I can't even imagine how such a config would work in practice. Destination IP...
by pe1chl
Thu May 16, 2024 12:30 pm
Forum: Announcements
Topic: Newsletter #118 | May 2024
Replies: 26
Views: 3935

Re: Newsletter #118 | May 2024

Please consider to make a 5G product similar to what is now on offer for LTE6. (a separate (semi-)outdoor PoE-powered device that can be connected to an existing PoE-providing router to have a 5G link and can be located at a place with good coverage, i.e. outside of the server-room 19" rack whe...
by pe1chl
Thu May 16, 2024 12:23 pm
Forum: Announcements
Topic: Newsletter #118 | May 2024
Replies: 26
Views: 3935

Re: Newsletter #118 | May 2024

Works for me too.
by pe1chl
Thu May 16, 2024 12:21 pm
Forum: General
Topic: [Discussion] MikroTik configuration abstraction complexity
Replies: 140
Views: 9759

Re: [Discussion] MikroTik configuration abstraction complexity

Don't tell us that VLAN configuration is done differently in RouterOS than by everyone else! That simply is NOT true! Across the board there are different ways of handling VLANs, broadly speaking: - the VLAN-centered method where you configure a VLAN and specify which ports should be tagged and unta...
by pe1chl
Thu May 16, 2024 12:13 pm
Forum: General
Topic: Slow FTP upload speed via GRE Tunnel
Replies: 16
Views: 1045

Re: Slow FTP upload speed via GRE Tunnel

Did you already add the mangle rule?
by pe1chl
Wed May 15, 2024 9:10 pm
Forum: Announcements
Topic: Newsletter #118 | May 2024
Replies: 26
Views: 3935

Re: Newsletter #118 | May 2024

It appears the mt.lv server hosting the newsletter is down at the moment...
by pe1chl
Wed May 15, 2024 11:37 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

... when a user process (like the DNS resolver, the proxy, etc) allocates memory, it normally does so by requesting a block of memory from the kernel, giving out small pieces of that to the program requiring them (e.g. a cache, some buffers, some other data structure), and when the program decides ...
by pe1chl
Wed May 15, 2024 10:12 am
Forum: General
Topic: BGP sessions close when another session to the same IP closes
Replies: 3
Views: 854

Re: BGP sessions close when another session to the same IP closes

I think I am closing in on the problem... It turns out that the L2TP client addresses of the different routers get sent around using BGP, mostly due to the different way that BGP networks and filtering work in v7 relative to v6. Whenever an L2TP link closes, that info gets sent around the entire net...
by pe1chl
Wed May 15, 2024 9:29 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Yes, but what do you want to happen? Should the router not add more entries to the list when that would consume all memory, and then MikroTik would run the risk that an outraged user would spam all It's not about what I want to happen. I was explaining that the used memory should not grow up to 100...
by pe1chl
Wed May 15, 2024 9:18 am
Forum: General
Topic: Combining LTE and ADSL [SOLVED]
Replies: 25
Views: 7129

Re: Combining LTE and ADSL [SOLVED]

VLAN routing is broken because the PCC mangle rules (the third set of mangle rules) specify that everything that is !local goes to the WAN. So my VLAN traffic is being sent to the WAN. To fix this problem I defined a “Connected-Subnets” “Address List” which contains each LAN subnet. 192.168.1.1./24...
by pe1chl
Wed May 15, 2024 12:26 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Yes, but what do you want to happen? Should the router not add more entries to the list when that would consume all memory, and then MikroTik would run the risk that an outraged user would spam all the way over internet that their router was hacked because it failed to block an attacker even though ...
by pe1chl
Tue May 14, 2024 9:55 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Not quite. What RoS reports as "used" memory is the equivalent of the field "used", given by the command "free". THIS value should not grow until everything is used. What should grow until memory gets all used is "used + buff/cache" - but this isn't what RoS ...
by pe1chl
Tue May 14, 2024 3:23 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

There is a problem with route enumeration using snmp, e.g. using the command snmpnetstat -v2c -c public -Cr hostname In some cases, it continues printing the same route over and over, it seems the "get next" gets in a loop. Not sure at which version that exactly has been introduced, but it...
by pe1chl
Tue May 14, 2024 3:04 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

*) system - skip configuration upgrade from RouterOS v6 on configuration reset;
Is there already some way to delete RouterOS v6 configuration from an upgraded device? (other than netinstalling it)
by pe1chl
Tue May 14, 2024 3:01 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

If this description is correct and complete, and they go straight to 7.15 stable without clarification about this, it will be a typical case of MT behavior. That is of course utter nonsense. EVERY SOFTWARE MANUFACTURER puts versions into release with known problems. The only thing you can blame on ...
by pe1chl
Tue May 14, 2024 12:03 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

The problem of course is that RouterOS (and the devices it is running on) is so versatile that there always are many bugs, but most users will not see them. E.g. the "BGP causes 100% CPU" bug is something I have never seen, but I do not use BGP for an internet routing table, but rather for...
by pe1chl
Sun May 12, 2024 12:06 pm
Forum: General
Topic: Slow FTP upload speed via GRE Tunnel
Replies: 16
Views: 1045

Re: Slow FTP upload speed via GRE Tunnel

Probably a PMTUD problem. You should not change MTU on the GRE (except to set it lower when the internet MTU is not 1500, e.g. when you use PPPoE). Instead, make this mange rule to decrease MSS on the TCP connections: /ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu pass...
by pe1chl
Sat May 11, 2024 11:12 am
Forum: General
Topic: double connections with mangle rules and drop filter rules
Replies: 3
Views: 300

Re: double connections with mangle rules and drop filter rules

Remember that connections made before you change a firewall configuration can continue to run even when changes in the configuration would preclude that.
So you should be careful with "I do this and then I change that and now this or that" kind of testing.
by pe1chl
Sat May 11, 2024 11:09 am
Forum: General
Topic: [Discussion] MikroTik configuration abstraction complexity
Replies: 140
Views: 9759

Re: [Discussion] MikroTik configuration abstraction complexity

1. Cleanup old documentation -ie delete it wiki.mikrotik.com and mikrotik.com/download/pdf/MT_Manual.pdf are a couple of examples that really need to go. I don't agree with that! It is already bad enough that most MikroTik documentation is not linked a version history of RouterOS. When you are runn...
by pe1chl
Fri May 10, 2024 3:37 pm
Forum: RouterBOARD hardware
Topic: Can't find a suitable router... product lines a mess
Replies: 26
Views: 1820

Re: Can't find a suitable router... product lines a mess

It doesn't matter what your requirements are, the product line never matches it. The TS apparently wants the perfect device for the least amount of money, or else he gets in a divorce. But even without that problem, it is difficult to find the perfect device for everyone! E.g. I would like a device ...
by pe1chl
Thu May 09, 2024 11:01 am
Forum: General
Topic: Router unreachable after adding a routing mark "main"
Replies: 5
Views: 677

Re: Router unreachable after adding a routing mark "main"

The reason that your setup works in v6 and not in v7 probably is that in v7 a routing mark means "lookup ONLY in this table" and in v6 it meant "lookup first in this table and then try table main". This subtle difference means that you NEED to either put explicit routes to the lo...
by pe1chl
Wed May 08, 2024 4:52 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Even in v7 the VLAN features are OK with the old WiFi driver. The problem is in the new wifi-qcom(-ac) driver.
by pe1chl
Tue May 07, 2024 12:30 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Don't know why we can't all respect MT support's repeated requests to keep conversation to specifically functionality new/changed in 7.15 so they can work on finalizing a clean release. The reason is that these release topics are the only topics that are often read by MikroTik personnel. So chattin...
by pe1chl
Tue May 07, 2024 12:20 pm
Forum: General
Topic: Sending priority-tagged frames?
Replies: 2
Views: 365

Re: Sending priority-tagged frames?

Yes, it is an old topic. I think I put a remark in another topic before.
It is a pity that this is not available... it seems that simply changing a bounds check on the value would make it possible.
by pe1chl
Mon May 06, 2024 10:03 pm
Forum: General
Topic: Sending priority-tagged frames?
Replies: 2
Views: 365

Sending priority-tagged frames?

Now that the VLAN-filtering bridge supports ingress filters like frame-types=admit-only-untagged-and-priority-tagged , does RouterOS (possibly via some trick) already allow sending priority-tagged frames? It would seem to be easy: add a VLAN with ID 0 to the bridge and set the port to "tagged V...
by pe1chl
Mon May 06, 2024 5:47 pm
Forum: General
Topic: IKEv2 VPN with DNS in another internal VLAN
Replies: 13
Views: 1649

Re: IKEv2 VPN with DNS in another internal VLAN

It is impossible to debug such things remotely. All I know is that such constructs work for me.
by pe1chl
Mon May 06, 2024 2:28 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

I think nobody would group "VLAN" under enterprise features or even features to be excluded from a light version! To the contrary, I think the omission of VLAN features in the new WiFi driver is a serious omission that should really be fixed. But a light version to be used on access points...
by pe1chl
Mon May 06, 2024 10:58 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Then, someone from MT lists V7 as the official and recommended version for download on the HAP lite product page. I agree that this is bad. They should not recommend v7 on devices that cannot run it. Devices like hAP lite even struggle when running later v6 versions, let alone v7. But I guess it is...
by pe1chl
Mon May 06, 2024 10:54 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

But if you use it with configurations similar to those from the old RouterOS v6, you will find that over time, memory will leak, and disk space will gradually drop to zero Once again, and for the final time, "the memory" has NOTHING to do with "the disk space"! These are two dif...
by pe1chl
Mon May 06, 2024 10:51 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

Having it with the default "skip-dfs-channels" does not make it "not work", it just makes it take longer to start after a reboot. When in the past you have started the router, first have connected via wired connection or 2 GHz and have been busy with that, you may never have noti...
by pe1chl
Sun May 05, 2024 6:24 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

So, if you're just experiencing memory leaks, I suggest routinely restarting the device. What I encountered was the disk space leaking to zero. I'm not sure what was being recorded inside; the files directory was empty and of no help. Moreover, this problem only occurs with RouterOS 7.x. Since the ...
by pe1chl
Sun May 05, 2024 12:04 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

That will be an endless uphill battle. When you are selling such a limited service (or your clients buy it and ask you to maintain the router) you should simply explain to them that it has limited usefulness in today's world, and that it will easily be saturated. And tell them that their policy shou...
by pe1chl
Sat May 04, 2024 2:27 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

The reason that this does not work well is that there are multiple addresses for each domain name, and that the returned addresses vary depending on where the DNS request is coming from. When your router is making DNS requests for these domains via the DNS resolvers configured in the router, it can ...
by pe1chl
Sat May 04, 2024 2:00 pm
Forum: General
Topic: BGP sessions close when another session to the same IP closes
Replies: 3
Views: 854

Re: BGP sessions close when another session to the same IP closes

Observing more closely it does not seem to be related to "session to the same IP". It is important that on the central router the connections are listen=yes connect=no (i.e. "passive"). All connections are running (session is active), then one of them closes for whatever reason, ...
by pe1chl
Sat May 04, 2024 12:46 am
Forum: General
Topic: IKEv2 VPN with DNS in another internal VLAN
Replies: 13
Views: 1649

Re: IKEv2 VPN with DNS in another internal VLAN

Yes of course that is possible, that is just a dst-nat rule (possibly combined with a src-nat rule to translate the source address as well)...
I thought you already tried that.
by pe1chl
Fri May 03, 2024 3:35 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

Besides that, there are a lot of very educational videos on Youtube.
E.g. on the MikroTik channel :-)
https://www.youtube.com/@mikrotik
by pe1chl
Thu May 02, 2024 6:23 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

At the moment I think it is more a "RB5009 USB issue" than a "LTE stick issue"....
Boy that be good to know if same stick worked in another Mikrotik.
See my post above on Tue Apr 23, 2024. For me the stick is detected OK but it is unreliable (compared to before).
by pe1chl
Thu May 02, 2024 4:35 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

When your kids have Google software (Android, Chrome) they already are using DoH without knowing it...
by pe1chl
Thu May 02, 2024 4:06 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

Thanks. Can confirm that the root server queries are on port 53. So for now I have 53 blocked on my firewall for everybody except the piholes.
That is fine, as long as you understand that in today's world that does not do anything.
(because of DoT, DoH and VPN)
by pe1chl
Thu May 02, 2024 12:12 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

At the moment I think it is more a "RB5009 USB issue" than a "LTE stick issue"....
by pe1chl
Thu May 02, 2024 10:07 am
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

My stick is a Huawei E3372 as well, the type that functions as a NAT router ("Config-less LTE interface" it says in the supported models list). It was really stable on v6 but on v7 (with the RB5009) there have been hickups. But not at every provider disconnect, these happen every 8 hours h...
by pe1chl
Thu May 02, 2024 9:52 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

That is a "known bug" or "works as designed", depending on who you ask.
Personally I am not against requiring a specific rule for "action=lookup routing-mark=abcd table=abcd" but it should be documented and be consistent between IPv4 and IPv6.
by pe1chl
Wed May 01, 2024 4:22 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

Also, when the viewers have been on Youtube before they will remember the countless ads for VPN services they have seen there.
So they will install one of those and your Youtube Block Attempt will turn into a VPN Block hunt.
by pe1chl
Wed May 01, 2024 10:24 am
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

Really? With old wireless driver I could see the wifi symbol on my Android device disappear and reappear after 1 ~second. It was clearly not just some milliseconds. That is just UI, I would not consider that a measurement. It is better to e.g. make a VoIP phone call over WiFi and have it play music...
by pe1chl
Wed May 01, 2024 10:18 am
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 203613

Re: Mikrotik VDSL / DSL Modem?

Well, setting VPI/VCI is done by setting the VLAN you use towards the module. There is a table somewhere. But it has common values only, when your ISP uses a unique VPI/VCI it will not be in the table and it cannot be used, maybe unless you manage to read the flash from the module, find the VLAN->VP...
by pe1chl
Tue Apr 30, 2024 5:54 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 203613

Re: Mikrotik VDSL / DSL Modem?

I have one but I cannot guarantee that it is still working OK. It worked when I last tried but it runs very hot.
When you like to consider it I trust you can find my contact information (mail address) based on my username.
by pe1chl
Tue Apr 30, 2024 4:23 pm
Forum: Announcements
Topic: Newsletter #116 | January 2024
Replies: 95
Views: 32549

Re: Newsletter #116 | January 2024

That is what happens all too easily anyway. We have deployed N AP's configured with 10 MHz bandwidth and when the AC CPE's appeared they could not be set to 10 MHz (although the datasheet of the chip says it can), so we are in a similar corner. Users being forced to buy outdated N CPE's unless at le...
by pe1chl
Tue Apr 30, 2024 12:17 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

It does that without any roaming support at all! The roaming really isn't much faster with "Fast Roaming" (FT) and WPA2-PSK. The advantage of this addition is mainly there when you use WPA2-EAP (and also WPA3 I think).
by pe1chl
Tue Apr 30, 2024 12:13 pm
Forum: Wireless Networking
Topic: wifi-qcom(-ac) and VLAN-filtering
Replies: 17
Views: 1563

Re: wifi-qcom(-ac) and VLAN-filtering

And what also doesn't work is setting VLAN ID dynamically for individual wifi stations (either via ACLs or via radius server) which otherwise use same SSID and same wifi interface (note that this is not the same as running virtual WiFi with different SSID which comes with separate wifi interface on...
by pe1chl
Tue Apr 30, 2024 12:11 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

That is only until Youtube have migrated their entire website to QUIC.
by pe1chl
Mon Apr 29, 2024 11:12 pm
Forum: Beginner Basics
Topic: Low performance on RB5009 with machine behind NAT
Replies: 24
Views: 2165

Re: Low performance on RB5009 with machine behind NAT

One problem with the RB5009 you need to be aware of is that it has 4 cores and variable clock speed. It will normally run at 350 MHz but it can kick up to 1400 MHz when the OS decides that this is required. Unfortunately the mechanisms used to do this speed governing seem to be not optimal for route...
by pe1chl
Mon Apr 29, 2024 11:04 pm
Forum: General
Topic: Combining LTE and ADSL [SOLVED]
Replies: 25
Views: 7129

Re: Combining LTE and ADSL [SOLVED]

Now that you know that bonding is not possible and you need to have load balancing, search again on the forum!
by pe1chl
Mon Apr 29, 2024 11:02 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

This will block a lot of stuff. it's not perfect. There is no perfect solution. It really depends on who your users are, how hard they will try, and how bad it is if they succeed as to how much work you want to put into making it harder and harder. When you have users that even have the slightest m...
by pe1chl
Mon Apr 29, 2024 11:01 pm
Forum: General
Topic: How to block YouTube effectively
Replies: 37
Views: 2516

Re: How to block YouTube effectively

Nowadays, even the SNI field (TLS Host) is often encrypted using ESNI encryption.
And Youtube runs over UDP when possible, which "TLS host" does not support.
by pe1chl
Mon Apr 29, 2024 6:40 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

it works even without running capsman
That is only for roaming between 2.4 and 5 GHz on the same AP.
When you have 2 APs you need capsman.
by pe1chl
Mon Apr 29, 2024 2:17 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

That is likely something that (also) depends on your particular configuration.
by pe1chl
Sun Apr 28, 2024 9:18 pm
Forum: Beginner Basics
Topic: NTP stuck on Waiting....
Replies: 93
Views: 26139

Re: NTP stuck on Waiting....

It is because your ISP blocks the NTP port 123 for you. As explained above.
by pe1chl
Fri Apr 26, 2024 9:42 pm
Forum: Announcements
Topic: v6.49.15 [stable] is released!
Replies: 14
Views: 12310

Re: v6.49.15 [stable] is released!

Yes an older RB4011 can run v6, but I think when you buy one today it will come with v7 and cannot be downgraded to v6. That is also true for a couple of other models. Sometimes changes are made to the hardware without ever telling us (e.g. via some "v2" addition to the type) and the corre...
by pe1chl
Fri Apr 26, 2024 9:39 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

That app issue is probably the app only supporting the old WiFi driver and you using the new one (or vice-versa).
by pe1chl
Fri Apr 26, 2024 5:09 pm
Forum: General
Topic: Any solution for admit-only-VLAN-tagged misconfiguration
Replies: 16
Views: 833

Re: Any solution for admit-only-VLAN-tagged misconfiguration

Ok then the possibilities seem to be to use the console port (assuming you can find someone nearby to plug a cable). And lesson for next time: when you do that kind of config, always first click the "safe mode" button and click it again when you are done. When making mistakes like this, it...
by pe1chl
Fri Apr 26, 2024 3:43 pm
Forum: Announcements
Topic: v7.15rc [testing] is released!
Replies: 310
Views: 80118

Re: v7.15rc [testing] is released!

I still see a problem with announcing IPv6 addresses. When I enter an IPv6 address with advertise=yes that gets properly advertised. When I change that to advertise=no, it is still advertised but with "Preferred lifetime: 0". That is OK, it means "deprecated" and a system with a ...
by pe1chl
Fri Apr 26, 2024 1:50 pm
Forum: General
Topic: Allowing device on two ports [SOLVED]
Replies: 8
Views: 2512

Re: Allowing device on two ports [SOLVED]

Ok so maybe you can try that VLAN method too. Make a VLAN for the VoIP devices, configure LLDP to use that Voice VLAN, and when you connect a phone it will automatically use that (tagged) VLAN on whatever port to use your VoIP service. But when you connect a normal PC, it will remain on the untagged...
by pe1chl
Fri Apr 26, 2024 12:20 pm
Forum: General
Topic: Allowing device on two ports [SOLVED]
Replies: 8
Views: 2512

Re: Allowing device on two ports [SOLVED]

Why is that specification of MAC address even required? We have lots of VoIP phones and we just plug them in whatever port.
(the phones are even on another VLAN but the get that info themselves from LLDP)
by pe1chl
Fri Apr 26, 2024 12:17 pm
Forum: Wireless Networking
Topic: External 5G routers
Replies: 3
Views: 382

Re: External 5G routers

I would also be interested in such a device for the company where I work. Something like the SXT LTE6 or the ATL LTE18 but then for 5G. I guess until such a thing is available we need to go for like a Chateau 5G model or something from another vendor. (it is not really needed to put it outdoor, but ...
by pe1chl
Fri Apr 26, 2024 12:10 pm
Forum: Wireless Networking
Topic: wifi-qcom(-ac) and VLAN-filtering
Replies: 17
Views: 1563

Re: wifi-qcom(-ac) and VLAN-filtering

The problem is that with the new driver, any SSID can only be member of ONE VLAN, the untagged VLAN on the bridge port where it is connected. So when you have a main network and a guest network, you can work with the current situation by having two SSIDs and configure the bridge correspondingly. But...
by pe1chl
Fri Apr 26, 2024 12:05 pm
Forum: General
Topic: Any solution for admit-only-VLAN-tagged misconfiguration
Replies: 16
Views: 833

Re: Any solution for admit-only-VLAN-tagged misconfiguration

Just reset the switch to factory defaults (button press during powerup) and load your latest configuration backup.
by pe1chl
Fri Apr 26, 2024 10:51 am
Forum: Beginner Basics
Topic: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]
Replies: 11
Views: 2810

Re: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]

Yes that is like here, a little breeze makes a lot of difference.
But this temperature is nothing to worry about, it would be a good idea to do something when it gets above 60 or 70.
by pe1chl
Thu Apr 25, 2024 10:38 pm
Forum: Announcements
Topic: v6.49.15 [stable] is released!
Replies: 14
Views: 12310

Re: v6.49.15 [stable] is released!

Indeed, my RB4011, hAP ac2 and LHG5ac all came with v6. But probably new instances (when still made) will be v7.
by pe1chl
Thu Apr 25, 2024 10:35 pm
Forum: Beginner Basics
Topic: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]
Replies: 11
Views: 2810

Re: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]

Yes, that would be a good idea. Probably mentioning that it does not seem to perform well when the task at hand loads only a single core. 47C is not bad. I now have 3 of those RB5009 running and two are on shelves in 19" cabinets, run at 48/49C and one is on my desk and it is 43C. (all of them ...
by pe1chl
Thu Apr 25, 2024 7:06 pm
Forum: Announcements
Topic: v6.49.15 [stable] is released!
Replies: 14
Views: 12310

Re: v6.49.15 [stable] is released!

These versions are of course installed on routers in the factory. Do you still manufacture devices with v6 preinstalled? I wondered about that too, but it seems like some old models that never had a hardware change in the past years still use v6. (not that having a router with v6 guarantees that a ...
by pe1chl
Thu Apr 25, 2024 4:58 pm
Forum: Announcements
Topic: v6.49.15 [stable] is released!
Replies: 14
Views: 12310

Re: v6.49.15 [stable] is released!

My experience is that all devices that I buy come with RouterOS that is a couple of versions down, so I immediately upgrade them to latest stable. But for defconf changes that is already too late, unless the procedure above is followed. I always to that, but I doubt the average customer does. Exampl...
by pe1chl
Thu Apr 25, 2024 4:32 pm
Forum: Announcements
Topic: v6.49.15 [stable] is released!
Replies: 14
Views: 12310

Re: v6.49.15 [stable] is released!

*) defconf - updated wireless password handling; Good !!! All those defconf updates for 6.49.x are probably not going to bring anything. Who is going to update their device and then reset to defaults? Even after buying new devices that is not part of the usual installation procedure for most people...
by pe1chl
Wed Apr 24, 2024 11:10 pm
Forum: Beginner Basics
Topic: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]
Replies: 11
Views: 2810

Re: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]

Yeah, I think the CPU governor should keep it at 1400 MHz for some time when it has deemed that to be required, not fall back so quickly. It was probably coded (or tuned) more for a workstation than for a router. One of the problems probably is that the PPPoE is single-threaded (to avoid packet re-o...
by pe1chl
Wed Apr 24, 2024 7:09 pm
Forum: Beginner Basics
Topic: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]
Replies: 11
Views: 2810

Re: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]

I have read in other places that there are performance problems with the switch on the RB5009. Not sure what is really true, some people claim it helps to remove the 2.5G from the advertisement list on ether1 but i can't believe that. I have a couple of RB5009 in the company but none in a configurat...
by pe1chl
Wed Apr 24, 2024 4:52 pm
Forum: General
Topic: dhcpv6-pd assign subnet to interface
Replies: 5
Views: 436

Re: dhcpv6-pd assign subnet to interface

My experience is that the addresses are requested/assigned in the order you created them, and this is the same every time. In my case that results in the first interface getting :1: at my ISP, but when I use the same config behind an AVM router it gets :fc:. So no, no direct influence on what subnet...
by pe1chl
Wed Apr 24, 2024 3:33 pm
Forum: General
Topic: BGP sessions close when another session to the same IP closes
Replies: 3
Views: 854

BGP sessions close when another session to the same IP closes

In RouterOS v7 it seems that when two or more peers have a BGP session to the same local IP, and one of them closes, they all are closed. The log says "Idle" for those sessions. Usually they are quickly re-established by the peer and remain up from that time. In my config this occurs for a...
by pe1chl
Wed Apr 24, 2024 2:58 pm
Forum: Beginner Basics
Topic: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]
Replies: 11
Views: 2810

Re: RB5009 drops packets and speed on eth1 (vlan + pppoe) [SOLVED]

Actually it is not necessary (and not a good idea) to increase the MTU on an ethernet device "to accomodate VLAN". VLAN header overhead is incorporated in the ethernet device settings automatically. You ONLY need to increase the MTU for the PPPoE overhead, so the device where pppoe-out wit...
by pe1chl
Wed Apr 24, 2024 2:47 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

I have also made a SUP case (SUP-151076) as past night the RB5009 rebooted by itself (claiming it was probably a powerfailure) without visible preceding issue with the LTE stick. They advised me to install a script that checks every 10s for LTE1 and if it is missing immediately makes a supout file. ...
by pe1chl
Tue Apr 23, 2024 5:27 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

Yeah that is all fine, but I had the (physically) same LTE stick plugged into a RB750Gr3 running 6.49.10 for many years, and there never were problems. Now I swapped the router for a RB5009 of course running v7 (in my case 7.12.1) and there are these problems. They can say "it is the stick caus...
by pe1chl
Tue Apr 23, 2024 4:06 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

You could enable logging to disk of wireless events and hope that there still is something logged before it really crashes.
by pe1chl
Tue Apr 23, 2024 2:34 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

That is not what I am suggesting. What I suggest is that when a radar event has been detected, several channels be monitored at the same time, to more quickly select a new channel with least chance of radar events. As it is now, when the device experiences radar on channel 100, it will happily switc...
by pe1chl
Tue Apr 23, 2024 2:27 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

Well, that is usually the first phase with bugs reported to a vendor or software developer: denial. Only after many reports have come in and they decide to do further research, it will become apparent it is a problem and something has to be done. Compare it to the 16M flash situation. We have been t...
by pe1chl
Tue Apr 23, 2024 2:15 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

As a workaround, I have made this script and scheduled it to run 2 times per day, at a time when the network is least used: :if ([:len [/interface find where name="lte1"]] = 0) do={ /log warning "no lte1 interface, rebooting!" :delay 2s /system reboot } The router logs to an exte...
by pe1chl
Tue Apr 23, 2024 10:01 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

It is only one step up in price category. And you also get sufficient flash for upgrades and partioning so that is not a bad deal.
by pe1chl
Tue Apr 23, 2024 1:05 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

I'm not so sure about that. E.g. on other manufacturer's equipment, one chain can remain operational while the other scans or surveys the band, monitors neighboring APs, etc.
by pe1chl
Mon Apr 22, 2024 10:23 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

It would be nice when the AP would make (more) effort to monitor several channels at the same time while looking for a candidate channel... This would only be possible if device would have two receivers ... But todays devices all have two, three or four receivers! Whether they can be independently ...
by pe1chl
Mon Apr 22, 2024 10:20 pm
Forum: General
Topic: system/logging Confusion...
Replies: 5
Views: 364

Re: system/logging Confusion...

Furhermore, in BSD syslog mode you can set a facility/severity (which is convenient to send the MikroTik messages to a fixed place), but the MikroTik-specific topic strings are never sent to the syslog server.
This has been mentioned for many years but nothing is ever done about it.
by pe1chl
Mon Apr 22, 2024 7:18 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

I would say that when the operator has not set specific channels, a DFS event occurs, and the AP cannot decide on another channel, it is a device problem not a configuration problem. However, patience may be required. Some countries mandate that the AP monitors a new channel for 10 minutes before it...
by pe1chl
Mon Apr 22, 2024 7:14 pm
Forum: Beginner Basics
Topic: Blank ARP failure (not displaying information) RouterOS 7 version
Replies: 5
Views: 708

Re: Blank ARP failure (not displaying information) RouterOS 7 version

The latter is usually caused by the flash memory being completely full.
Check System->Resources and look at the HDD space. When it is zero or near zero (e.g. 8K), you are in trouble.
by pe1chl
Mon Apr 22, 2024 4:57 pm
Forum: General
Topic: system/logging Confusion...
Replies: 5
Views: 364

Re: system/logging Confusion...

Basically it is just a big mess.
Some forum members try to get MikroTik's attention, but it seems impossible.
See this topic (among others): viewtopic.php?p=1069280
by pe1chl
Mon Apr 22, 2024 2:24 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

Coincidentally I migrated a site from a hEX (RB750Gr3) to a RB5009 with LTE backup using Huawei stick, and now I also have a problem... It may however be a different issue. The link was up for over a week, including some provider disconnects, however then suddenly the link disconnected, the LTE1 de...
by pe1chl
Sun Apr 21, 2024 7:59 pm
Forum: General
Topic: Feature requests
Replies: 1744
Views: 644365

Re: Feature requests

Or more general: add an extra topic to each and every unique log message, which is some numeric code that uniquely identifies that particular message.
That allows us to easily log or exclude particular messages.
by pe1chl
Sat Apr 20, 2024 1:38 pm
Forum: Beginner Basics
Topic: Loading ONIE images on Mikrotik Switches
Replies: 6
Views: 617

Re: Loading ONIE images on Mikrotik Switches

Cumulus got bought by nVidia, BigSwitch got bought by Arista, Nicera got bought by VMWare and relabeled to NSX, Microsoft came out with Sonic
That sounds like a thing not to touch even with a long pole!
by pe1chl
Sat Apr 20, 2024 1:34 pm
Forum: General
Topic: RB5009 reboots after removing USB modem
Replies: 1
Views: 374

Re: RB5009 reboots after removing USB modem

No, that should not happen. Coincidentally I migrated a site from a hEX (RB750Gr3) to a RB5009 with LTE backup using Huawei stick, and now I also have a problem... It may however be a different issue. The link was up for over a week, including some provider disconnects, however then suddenly the lin...
by pe1chl
Sat Apr 20, 2024 1:31 pm
Forum: General
Topic: scripts to keep LTE stick up and running
Replies: 63
Views: 3360

Re: scripts to keep LTE stick up and running

Coincidentally I migrated a site from a hEX (RB750Gr3) to a RB5009 with LTE backup using Huawei stick, and now I also have a problem... It may however be a different issue. The link was up for over a week, including some provider disconnects, however then suddenly the link disconnected, the LTE1 dev...
by pe1chl
Fri Apr 19, 2024 10:37 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

You need to use CAPsMAN for that...
by pe1chl
Fri Apr 19, 2024 3:17 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.3 [stable] is released!

Ok. that might have been the reason behind the problem reported in SUP-135512.
It has not recurred after 2 reboots in a couple of days, but maybe the specific traffic pattern has not occurred again...
by pe1chl
Fri Apr 19, 2024 3:11 pm
Forum: General
Topic: Periodic DNS query to "upgrade.mikrotik.com" (every 10 seconds)... bothering LTE modems to get and stay in IDLE mode.
Replies: 5
Views: 472

Re: Periodic DNS query to "upgrade.mikrotik.com" (every 10 seconds)... bothering LTE modems to get and stay in IDLE mode

Yes, there is a bug there, but usually it does not no it every 10 seconds but rather every couple of hours.
Maybe 10 seconds while that check is still trying and has not yet displayed a fail message.
by pe1chl
Fri Apr 19, 2024 3:09 pm
Forum: Beginner Basics
Topic: IPV6 on mikrotik
Replies: 6
Views: 660

Re: IPV6 on mikrotik

Ok then it will become more difficult. You need to check if the ISP router supports IPv6 prefix delegation via DHCPv6, if necessary you need to enable that. Then you add a DHCPv6 client on the MikroTik, with "request prefix" and a pool name, e.g. "ipv6pool", and the option "...
by pe1chl
Thu Apr 18, 2024 8:54 pm
Forum: Beginner Basics
Topic: IPV6 on mikrotik
Replies: 6
Views: 660

Re: IPV6 on mikrotik

Is it in routing mode? Is there a reason not to use bridge mode?
by pe1chl
Thu Apr 18, 2024 4:16 pm
Forum: General
Topic: Log entry warning "interface, warning <interface> excessive or late collission, link duplex mismatch?
Replies: 9
Views: 660

Re: Log entry warning "interface, warning <interface> excessive or late collission, link duplex mismatch?

When you want to define what the device should do in your opinion, please create a ticket at the MikroTik support site! "You just don't get a link, unless you set the port on the CRS51 C0-8XS-2XQ-IN to 40 Gbit." But what do you mean with that? You turned off auto negotiate? Or did you remo...
by pe1chl
Wed Apr 17, 2024 11:45 am
Forum: Beginner Basics
Topic: Blank ARP failure (not displaying information) RouterOS 7 version
Replies: 5
Views: 708

Re: Blank ARP failure (not displaying information) RouterOS 7 version

It means your L2 link is dead. A blank MAC address in an ARP entry means the entry is "incomplete", i.e. there was no reply to the ARP request. That being said, a difference between v6 and v7 is that v7 never clears the ARP table. So even after an entry is unused for a long time, it still ...
by pe1chl
Wed Apr 17, 2024 11:31 am
Forum: General
Topic: Log entry warning "interface, warning <interface> excessive or late collission, link duplex mismatch?
Replies: 9
Views: 660

Re: Log entry warning "interface, warning <interface> excessive or late collission, link duplex mismatch?

Remember that when you do not use autonegotiation, you have to manually set both speed and duplex mode AT EACH END. When not setting full duplex, the default is half duplex (for reasons of backward compatibility to 25 years ago), and you will get this warning when the other end is configured for ful...
by pe1chl
Tue Apr 16, 2024 5:53 pm
Forum: General
Topic: Feature requests
Replies: 1744
Views: 644365

Re: Feature requests

Request: some function to "compact databases" so that the size of the databases again corresponds to what you would have after a "reset configuration" and an "import" of the current configuration (plus things like certificates etc). As it is now, the databases size tend...
by pe1chl
Tue Apr 16, 2024 2:06 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

It seems that in practice most problems are related more to the actual configuration than to the hardware model. That is why one should always at least include the "/export hide-sensitive" output. There are some models with "known issues" but I do not think the 1100 is much affec...
by pe1chl
Tue Apr 16, 2024 11:23 am
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

It does not always happen, maybe only when you have a certain number (or type) of interfaces.
by pe1chl
Sun Apr 14, 2024 1:20 pm
Forum: The Dude
Topic: MIKROTIK L009UiGS
Replies: 2
Views: 327

Re: MIKROTIK L009UiGS

Besides that, MikroTik have also stated on this forum that you can ask the password at your distributor/seller.
I assume it will then be provided in a mail or so, and this problem with recognizing the characters does not exist because you can cut/paste it.
by pe1chl
Sat Apr 13, 2024 11:04 am
Forum: General
Topic: Modify the DHCP client of an LTE interface
Replies: 9
Views: 613

Re: Modify the DHCP client of an LTE interface

Indeed it looks a lot more tricky, but maybe I have done it that way in the past... I think I plugged the stick, the LTE1 device was created, then I unplugged it and made a DHCP client on the LTE1 device, then re-plugged the stick. I can try to do that again... but will be during next working week. ...
by pe1chl
Fri Apr 12, 2024 9:08 pm
Forum: General
Topic: Modify the DHCP client of an LTE interface
Replies: 9
Views: 613

Re: Modify the DHCP client of an LTE interface

Ok, but I am not sure I want that... it is convenient in the config that the local address is always the same, and the double-NAT is no issue. This link is not used for normal outgoing traffic, the L2TP tunnel is one of the BGP peerings to the central router, the usual traffic flows over GRE/IPsec v...
by pe1chl
Fri Apr 12, 2024 8:45 pm
Forum: General
Topic: Modify the DHCP client of an LTE interface
Replies: 9
Views: 613

Re: Modify the DHCP client of an LTE interface

Well, the HUAWEI stick just presents itself as a NAT router, it isn't really an LTE device (no properties of LTE visible at all)... So it would be sufficient to just to a DHCP request, you get IP 192.168.8.100/24 with gateway 192.168.8.1 and everything works. As I want to use it only for a backup L2...
by pe1chl
Fri Apr 12, 2024 8:12 pm
Forum: General
Topic: Modify the DHCP client of an LTE interface
Replies: 9
Views: 613

Modify the DHCP client of an LTE interface

Today I replaced a hEX gr3 running 6.49 with a RB5009 with 7.12.1 One of the functions of the router is a backup via an LTE USB stick (HUAWEI). When I plugged the stick from the old router to the new, a DHCP client was automatically created. However, I want to edit the settings of that client. It is...
by pe1chl
Thu Apr 11, 2024 7:15 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

As far as I understand in v7 MikroTik have ripped out the entire routing function of the standard Linux kernel, and re-done it themselves... (I suggested to make "routing" a separate optional package as it was in v6, but I got the reply that without routing the router would be useless. In ...
by pe1chl
Thu Apr 11, 2024 5:02 pm
Forum: Beginner Basics
Topic: ntp-client status waiting [SOLVED]
Replies: 12
Views: 7103

Re: ntp-client status waiting [SOLVED]

It has been discussed in other topics as well, after some denial the users install such a NAT rule and all starts working. (even after the ISP has claimed "they do not filter") Of course it would be best when MikroTik added a new option to NTP client: use random source port number (instead...
by pe1chl
Thu Apr 11, 2024 11:02 am
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

I would have expected some kind of API as that's more efficient (no need to parse command line) and less prone to breaking changes. All the config methods are abstractions over some internal config schema (see /console/inspect). So...I'm just not sure where efficiency comes in — once config change ...
by pe1chl
Thu Apr 11, 2024 10:58 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

When you have a 5009, you can always partition it so you have a rollback copy in case something goes wrong. When you remove power during the boot process it will switch to the other partition, so you can ask someone to unplug it, wait 15 seconds, and unplug it again. Or you can make a clever script ...
by pe1chl
Wed Apr 10, 2024 5:21 pm
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

Does WinBox effectively issue CLI commands to get/set changes?
I would think so. If you look at command history, it looks the same if its run from Winbox or from terminal.
No, it is more like API calls.
by pe1chl
Wed Apr 10, 2024 12:44 pm
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

Yes, you could certainly write a web management tool that performs all its actions via API. That basically is what winbox is doing as well. The winbox protocol and API probably have a lot in common. I think what winbox has extra is the capability to query the available commands and the corresponding...
by pe1chl
Wed Apr 10, 2024 11:24 am
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

Central (overall) management is the topic of another thread.
You know, one of those "we are considering, we want your input" and then you never hear from the product again.
by pe1chl
Wed Apr 10, 2024 11:18 am
Forum: RouterBOARD hardware
Topic: HOT S-RJ10
Replies: 13
Views: 1398

Re: HOT S-RJ10

I experimented a while with a SFP ADSL/VDSL modem, and it had the same problem. The SFP standard has been designed with active cooling devices in mind (datacenter switches) where there is some over-pressure in the cabinet that flows out via the SFP slot. Without that, all except the most modern opti...
by pe1chl
Tue Apr 09, 2024 10:54 pm
Forum: General
Topic: Address list for dst nat
Replies: 10
Views: 542

Re: Address list for dst nat

Not very useful, those "I don't understand why you would want that, so you should not want that!" replies. I understand what you mean but there is no direct solution in RouterOS. It has been proposed before that it would be useful to have some "mnemonic name" for an IP address ot...
by pe1chl
Tue Apr 09, 2024 10:45 pm
Forum: RouterBOARD hardware
Topic: HOT S-RJ10
Replies: 13
Views: 1398

Re: HOT S-RJ10

From the product page of the S+RJ10: Any MikroTik device with active cooling that has SFP+ ports can now be used without installing any optical fiber, just plug the S+RJ10 and your network can be upgraded to 10 Gbps, making it ready for the next generation of RJ45 hardware. S+RJ10 module is supporte...
by pe1chl
Tue Apr 09, 2024 7:32 pm
Forum: Announcements
Topic: WinBox v3.40 released!
Replies: 143
Views: 138142

Re: WinBox v3.40 released!

Which is why IMO effort should be directed at web applications, not native apps. There's already WebFig ... functionality-wise it's on par with WinBox, so no need to re-invent the wheel. No it is NOT! Work is required to bring it on par. There should be multiple windows, tabs in the windows, saved ...
by pe1chl
Tue Apr 09, 2024 5:22 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

It is not only switches. I recently looked for a product to add high-performance LTE to a site where we have VDSL and cannot have fiber. I found the ATL LTE18 kit. It seems like a semi-professional device. But even this has only 16MB flash. Now when we install RouterOS >7.13 of course we can remove ...
by pe1chl
Tue Apr 09, 2024 5:17 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

I don't understand what you (pe1chl and Paternot) are talking about. On devices with 16MB the update packages are already downloaded to some "internal" tmpfs on volatile memory. And you say, devices with e.g. 128MB flash memory do download the upgrade package to flash instead? You underst...
by pe1chl
Tue Apr 09, 2024 12:26 pm
Forum: Announcements
Topic: Newsletter #116 | January 2024
Replies: 95
Views: 32549

Re: Newsletter #116 | January 2024

Will MikroTik add specific support for the PtMP use case? Other manufacturers have (unfortunately) already added their own proprietary extensions, so unless MikroTik will do it in a compatible way we will probably have the same mess as before? (PtMP optimized setups only working when all equipment i...
by pe1chl
Tue Apr 09, 2024 12:21 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

ROS 7.7 - see https://help.mikrotik.com/docs/display/ROS/Disks#Disks-AllocateRAMtofolder But doesn't help what we were talking about: using RAM to store the upgrade MikroTik could (and should) fix that! When a RAMdisk of sufficient size is available, use that as the temp area for download of the up...
by pe1chl
Mon Apr 08, 2024 12:14 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

It might if ROS was changed to use RAM disks more aggressivelly. As it is now, 128MB on audience isn't enough (or it wasn't back in v7.5 times), with 64MB partitions upgrade didn't succeed due to lack of flash space. It's because with audience's 256MB RAM, RAM disk is not used. It seems that flash ...
by pe1chl
Sat Apr 06, 2024 11:24 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

Using the CLI avoids the trouble described by dwnldr above my post. That is the point. CLI is explicit. Winbox is "QuickSet light". Come on! That is just hogwash! Winbox has the gui widgets available to indicate if a value is empty or unset. That it does not work correctly in these new me...
by pe1chl
Fri Apr 05, 2024 10:43 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Maybe they added some cleanup code, as I mentioned above after an upgrade to beta9 my Free HDD space went from 188 to 844 KiB! So this was not using netinstall, just an upgrade from within RouterOS. I think (but I am not sure) that this device was upgraded from v6, not netinstalled, so it may be tha...
by pe1chl
Fri Apr 05, 2024 5:22 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

I don't have much personal experience with the WiFi menu, because the new WiFi system is unusable for me as long as it does not allow to assign a VLAN to a user via access-list and RADIUS. Hopefully that will be implemented soon. However, I installed it on a test device and observed what was basical...
by pe1chl
Fri Apr 05, 2024 3:58 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

Could you please give us an example? For example, when I make a BGP template with local AS 65530, and I make a BGP connection referencing that template, the connection will have AS 65530 with white background. When I remove that using the up-triangle and save it, it will come back. I asked that que...
by pe1chl
Fri Apr 05, 2024 2:13 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

Well, one of the things I call buggy (and what you may call "confusing for first time users") is that the inherited values shown in winbox get written back as individually configured values when an item is saved. That is not how most users expect it to work. I expect inherited values to be...
by pe1chl
Fri Apr 05, 2024 11:43 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

@pe1chl - yes. Im using wifiwave drivers since they appeared in v7 Ok, you probably have more experience than I do. I changed the wifi driver on a LHG5 ac that I have here in storage, just to see if it works and how the status is with the space issue (seen 7.15beta9 for good news!). What I noticed ...
by pe1chl
Fri Apr 05, 2024 11:37 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Did you update both sides? Maybe the bridging protocol in the "wifi-qcom - updated driver" is subtly different from the previous one?
by pe1chl
Fri Apr 05, 2024 11:35 am
Forum: General
Topic: Sudden L2TP (IPSec) tunnel failure...
Replies: 8
Views: 508

Re: Sudden L2TP (IPSec) tunnel failure...

Did you try just rebooting the Comcast router without shutting it down for an hour? Usually it would be enough, at least for me it is with AVM Fritzbox routers that we have on our local ISP which assigns a static address to each subscriber. The NAT table issue in the Fritzbox is then cleared. It can...
by pe1chl
Fri Apr 05, 2024 12:03 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

Is that with the new WiFi driver? Its configuration is a bit confusing because it can be done both in profiles and directly on the interface.
by pe1chl
Thu Apr 04, 2024 9:54 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

I upgraded the LHG 5ac I use for testing (only) from beta6 to beta9 and the Free HDD space went from 188 to 844 KiB!
(using the new WiFi driver)
So that is good!
However I cannot upgrade my hAP ac2 until the dynamic VLAN assignment per user on WiFi interfaces (via accesslist and RADIUS) is back.
by pe1chl
Thu Apr 04, 2024 9:51 pm
Forum: General
Topic: Sudden L2TP (IPSec) tunnel failure...
Replies: 8
Views: 508

Re: Sudden L2TP (IPSec) tunnel failure...

For some reason the L2TP/IPsec link will only work when the port number 500 is passed on without translation, and when the ISP router sees more than one IPsec connection it will change the port number and you will not be able to get it working again until the conflicting NAT entry has been deleted. ...
by pe1chl
Thu Apr 04, 2024 8:55 pm
Forum: General
Topic: Sudden L2TP (IPSec) tunnel failure...
Replies: 8
Views: 508

Re: Sudden L2TP (IPSec) tunnel failure...

It often helps when you disable the L2TP link for ~10 minutes so all NAT entries in the ISP router get cleared out. Other than that, there is little that can be done. When other users behind the same router have L2TP to your "central" MikroTik router, there is your reason: the MikroTik rou...
by pe1chl
Thu Apr 04, 2024 8:21 pm
Forum: General
Topic: Sudden L2TP (IPSec) tunnel failure...
Replies: 8
Views: 508

Re: Sudden L2TP (IPSec) tunnel failure...

Yes. This is caused by NAT issues in an ISP router that sits in front of your MikroTik.
Restart that. You can also sometimes avoid it by configuring the MikroTik as "DMZ host" in that ISP router.
by pe1chl
Thu Apr 04, 2024 3:20 pm
Forum: Forwarding Protocols
Topic: BGP ECMP (multipathing)
Replies: 74
Views: 42311

Re: BGP ECMP (multipathing)

Can you help me figure out a napkin scenario where it actually does cause a loop? I tried to think up one but couldn’t, at least not with EBGP and sane tie-breaking rules (like those I described). The issue is that in a more complicated network, a route that you get from a peer may ultimately be co...
by pe1chl
Wed Apr 03, 2024 7:12 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

They are the same, as they always are. It is not clear why there is a separate "development" and "testing" channel, it only causes mistakes and confusion. "development" could be some daily-build or alpha channel, but MikroTik does not publicly release alpha versions, th...
by pe1chl
Wed Apr 03, 2024 7:03 pm
Forum: Forwarding Protocols
Topic: BGP ECMP (multipathing)
Replies: 74
Views: 42311

Re: BGP ECMP (multipathing)

That only works (reliably) when you are facing the simple situation of two BGP peers that send you a locally originated route (e.g. a default route) over 1 hop. When the network is a little more complicated (several routers with several links between them, i.e. a partial mesh) such simple hacks may ...
by pe1chl
Wed Apr 03, 2024 5:10 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Up until beta8 it was (and still is) in development channel. As beta versions usually are.
Well, now they have set the development channel to 7.15beta9 as well...
Apparently it is easy to set testing and development to any version, but difficult to set long-term to 7.12.1
by pe1chl
Tue Apr 02, 2024 5:42 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

I am using a 5009 with several ports with VLANs (all on a common VLAN-aware bridge) and I have not yet observed such a problem...
I have set the STP mode to "none", as I always do in places where there is no need for STP.
by pe1chl
Tue Apr 02, 2024 5:39 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

It would be nice when the BGP Sessions window in winbox finally would become auto-refreshing as it was in v6. When the sessions window is kept open, it shows a fake "uptime" and all other sessions status is not updated until F5 is pressed. This is inconvenient. In v6 (BGP Peers) it worked ...
by pe1chl
Mon Apr 01, 2024 5:44 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

Anyway, when you have 0KB HDD space available your device is a time bomb. It will not survive a reboot.
So now you need to netinstall it, and after that you can try again.
by pe1chl
Mon Apr 01, 2024 11:57 am
Forum: Scripting
Topic: Built in function library
Replies: 142
Views: 140386

Re: Built in function library

When you need more powerful processing and do not want to use "the cloud" you could also consider running a container locally on the router (at least when the router is sufficiently equipped for that).
by pe1chl
Sat Mar 30, 2024 9:41 pm
Forum: RouterBOARD hardware
Topic: USB Device Lives On & Not Able to Be Removed
Replies: 5
Views: 479

Re: USB Device Lives On & Not Able to Be Removed

1d6b  Linux Foundation
	0001  1.1 root hub
	0002  2.0 root hub
	0003  3.0 root hub
by pe1chl
Sat Mar 30, 2024 5:39 pm
Forum: RouterBOARD hardware
Topic: USB Device Lives On & Not Able to Be Removed
Replies: 5
Views: 479

Re: USB Device Lives On & Not Able to Be Removed

This is the "usb root hub", the router side of the USB bus. It was always there, also before you connected your phone. You cannot remove it.
by pe1chl
Sat Mar 30, 2024 11:49 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

I had one hAP ac2 brick itself after the upgrade and resetting it didn't bring it back to life. Fortunately I had a hAP ax3 on-hand spare to swap it with. The other hAP ac2 and lower models I'm managing I've had to pause auto-updates on (and just in time.) Bottom-line in my opinion, the ac2 and low...
by pe1chl
Fri Mar 29, 2024 3:39 pm
Forum: Wireless Networking
Topic: RB941 searching for network
Replies: 4
Views: 674

Re: RB941 searching for network

Thank you. When i changed mode on RB941 from B/G to B/G/N it connected to WiFi. Then i had problem because RB941 didn't want to get IP from DHCP. Then it got IP but i didn't get IP on my laptop that was connected to RB941 even i connected to ether port that was in the same bridge as WiFi. As I alre...
by pe1chl
Fri Mar 29, 2024 11:03 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

I don't think that is related to timezone, the availability of new versions is not determined by time but by fetching a specific URL that returns the "latest version", which is then compared to the installed version. As you see, it may even be lower. What this indicates is that the server ...
by pe1chl
Fri Mar 29, 2024 10:27 am
Forum: RouterBOARD hardware
Topic: Pure ROS boot...
Replies: 31
Views: 1937

Re: Pure ROS boot...

This is not sufficient for devices that work by default without you ever having to log in. 50k Cisco devices do absolutely nothing when you power them up first time, you need to do a lot of configuration. But a MikroTik router connected to a line with DHCP will often work with the default config, a...
by pe1chl
Thu Mar 28, 2024 11:08 am
Forum: RouterBOARD hardware
Topic: Pure ROS boot...
Replies: 31
Views: 1937

Re: Pure ROS boot...

All other brands I've used so far (from cheap Chinese ones to 50k Cisco ones - with the exception of Fritz), simply force you to set a password on first login. This is not sufficient for devices that work by default without you ever having to log in. 50k Cisco devices do absolutely nothing when you...
by pe1chl
Wed Mar 27, 2024 9:17 pm
Forum: RouterBOARD hardware
Topic: Pure ROS boot...
Replies: 31
Views: 1937

Re: Pure ROS boot...

Will this apply to Cisco, Juniper, Arista, etc. as well?
Certainly for their products intended for, or likely to end up on, the consumer market.
by pe1chl
Wed Mar 27, 2024 9:13 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

As a Chateau LTE 12 owner, I cannot even get past v7.14, let alone, v7.14.1 or further, as no storage, so how is that going to work. That is a different problem... it has been mentioned often enough already. For now, what you could try is to export and backup the configuration and then netinstall i...
by pe1chl
Wed Mar 27, 2024 7:18 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.2 [stable] is released!

They should have used lightseconds instead :-)
Then we can all agree and no internal conversion is required...
by pe1chl
Wed Mar 27, 2024 7:12 pm
Forum: Forwarding Protocols
Topic: BGP relationship between connection and template [SOLVED]
Replies: 6
Views: 2989

Re: BGP relationship between connection and template [SOLVED]

RouterOS does not copy values from template to connection config. Winbox is doing that if you open connection and apply config. Ok, consider that a bug and put it on your list for fixing... Winbox should not apply parameters that the user does not enter. (in fact, I have seen other forum posts wher...
by pe1chl
Wed Mar 27, 2024 1:14 pm
Forum: General
Topic: Configure Mikrotik OpenVPN server for openvpn.net client
Replies: 4
Views: 563

Re: Configure Mikrotik OpenVPN server for openvpn.net client

No, I have never wasted my time on a RouterOS OpenVPN server, I am using Linux with the openvpn.net server instead.

Also, my usecase does not require paranoid encryption parameters, so I just use AES-128-GCM. But I don't know if that affects the situation with MikroTik.
by pe1chl
Wed Mar 27, 2024 12:27 pm
Forum: Forwarding Protocols
Topic: BGP relationship between connection and template [SOLVED]
Replies: 6
Views: 2989

Re: BGP relationship between connection and template [SOLVED]

Yes, Templates can be used to provide default values to a larger number of Connections. What you set in the Template you do not need to set in the Connection. (unfortunately, for some values RouterOS does not keep the value in the Connection "blank" but instead copies the value from the Te...
by pe1chl
Wed Mar 27, 2024 12:12 pm
Forum: RouterBOARD hardware
Topic: Pure ROS boot...
Replies: 31
Views: 1937

Re: Pure ROS boot...

The point still remains that this new feature has not been implement because the programmers think the users are idiots, but because practice has shown that they are. There have been too many MikroTik routers on the internet without a password, and never being updated either. After several incidents...
by pe1chl
Wed Mar 27, 2024 12:04 pm
Forum: General
Topic: Configure Mikrotik OpenVPN server for openvpn.net client
Replies: 4
Views: 563

Re: Configure Mikrotik OpenVPN server for openvpn.net client

OpenVPN support in v6 is really limited. e.g. it does not support UDP transport, only TCP. and does not support more advanced ways of authentication and several newer OpenVPN features. In RouterOS v7 it is a bit better. But the situation basically remains that MikroTik has written their own OpenVPN ...
by pe1chl
Wed Mar 27, 2024 11:56 am
Forum: Wireless Networking
Topic: RB941 searching for network
Replies: 4
Views: 674

Re: RB941 searching for network

pseudobridge on a device using the old wireless drivers cannot connect to a device using the new drivers. so you need to use normal station mode, not pseudobridge. of course that changes the functionality. you may have to make some config changes e.g. change from bridge to router mode in these clien...
by pe1chl
Tue Mar 26, 2024 12:27 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

What they mean is they are working on making it smaller, and that they expect to have something by the time rc1 is released. As there has always been growth when adding new features, and the size of 16MB is already not very large compared to modern software "standards", I expect the only w...
by pe1chl
Mon Mar 25, 2024 4:37 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Maybe you have "graphing" running with "store on disk" enabled (and store every 5 minutes)?
And/or DHCP "store leases on disk" set to "immediately" and a lot of DHCP activity (short lease time and/or unreliable connections)?
by pe1chl
Sun Mar 24, 2024 12:18 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

However, the wifi-qcom-ac drivers bring other significant improvements that go beyond throughput. Unfortunately they also bring the big disadvantage that you can no longer dynamically assign a VLAN to each client... (via access list, mac authentication, or WPA2-EAP) That really should be fixed befo...
by pe1chl
Sat Mar 23, 2024 6:45 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Guys, remember that most of the lab devices they are developing on have nothing else on the disk, so 7.14/7.15 etc. all fit and work fine because likely the CI/CD setup is wiping those test devices with a fresh netinstall every time. You can't expect a lab device to load up all the cruft many of us...
by pe1chl
Fri Mar 22, 2024 4:03 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

with an footnote on RB4011i, that new wifi-qcom-ac only helps with 5Ghz, and the driver does not work for 2.4Ghz AFAIK... but RB4011 more storage too. Perhaps some new "wifi-qcom-ac-lite" without QCA9984 driver? And the "wifi-qcom-ac" can still be used on Audience and RB4011, ev...
by pe1chl
Fri Mar 22, 2024 11:05 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.1 [stable] is released!

You can only indentify different peers before starting parameter negotiation when using exchange mode "agressive" instead of the default "main". That will again be a problem when you want to abide by the rules of several different client OSes. RouterOS decides which peer configu...
by pe1chl
Thu Mar 21, 2024 3:20 pm
Forum: RouterBOARD hardware
Topic: CCR1036 Power Supply
Replies: 113
Views: 37027

Re: CCR1036 Power Supply

Of course when you use a max 105c capacitor, and you run it at 105c, you are asking for problems...
One would hope the temperature in that area is less than 105c.
by pe1chl
Tue Mar 19, 2024 7:27 pm
Forum: Announcements
Topic: v6.49.13 [stable] is released!
Replies: 28
Views: 32487

Re: v6.49.13 [stable] is released!

And your comment about ROS7 scripting is valid in a ROS6 thread because ... ???
Well, maybe because when you have a router that originally had a v6 release before 6.49.13 with IPv6 enabled, and you upgraded it to v7, that wrong rule will still be there and has to be corrected.
by pe1chl
Tue Mar 19, 2024 11:40 am
Forum: RouterBOARD hardware
Topic: Running out of space on 16MB RouterBOARDs
Replies: 38
Views: 7982

Re: Running out of space on 16MB RouterBOARDs

Don't tell us you were not aware, and were not warned, about possible space issues on 16MB flash devices!
It was discussed on the forum from the time those were released. Remember the original MikroTik products usually had 64MB or 128MB flash.
by pe1chl
Tue Mar 19, 2024 10:49 am
Forum: RouterBOARD hardware
Topic: Running out of space on 16MB RouterBOARDs
Replies: 38
Views: 7982

Re: Running out of space on 16MB RouterBOARDs

Whatever is the situation, something has to be done. Denying the problem no longer works.
by pe1chl
Tue Mar 19, 2024 10:48 am
Forum: General
Topic: Feature requests
Replies: 1744
Views: 644365

Re: Feature requests



do you mean via RADIUS?
nope, I want just the existing feature in wifi-qcom driver
That is not a required feature, you can assign the VLAN in the bridge.
What is missing is the dynamic assignment via RADIUS or bridge filters.
by pe1chl
Mon Mar 18, 2024 7:10 pm
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

I don't know if it is a known issue, I only know that I do not experience it.
(and I have a similar config running under 7.12.1)
by pe1chl
Mon Mar 18, 2024 11:14 am
Forum: RouterBOARD hardware
Topic: Upgrade from RB750Gr3
Replies: 16
Views: 1439

Re: Upgrade from RB750Gr3

There is a major problem: it has only 15.3 MB flash (several other devices have 16 MB but this has less) and this is becoming a problem with recent RouterOS versions. You can install 7.12.1 and keep that as long as possible, and maybe there will be a solution (like a lite version of RouterOS). Until...
by pe1chl
Mon Mar 18, 2024 11:11 am
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

I'm running several routers with RSTP, but for me the current "stable version" is 7.12.1 So I am not running 7.14 on any production device.... only in test environments where there is no bridge. So maybe try installing 7.12.1 and remain on that version for some time (until the many new bug...
by pe1chl
Mon Mar 18, 2024 11:08 am
Forum: RouterBOARD hardware
Topic: Running out of space on 16MB RouterBOARDs
Replies: 38
Views: 7982

Re: Running out of space on 16MB RouterBOARDs

The issue probably is that .npk packages are mostly a read-only compressed filesystem that is copied to the flash in its entirety and then are mounted at runtime (with the appropriate code to de-compress files on access). So, it is not a simple matter of "during installation see which drivers a...
by pe1chl
Mon Mar 18, 2024 11:00 am
Forum: General
Topic: CCR2004-1G-2XS-PCIe causes INSTANT host crash when it's rebooted
Replies: 18
Views: 2643

Re: CCR2004-1G-2XS-PCIe causes INSTANT host crash when it's rebooted

Yeah, it is clear that this card, which seemed very attractive for co-located servers requiring a router, is not usable in practice. E.g. it would also have to be running when the system is in STANDBY state, so you can poweroff the server via ILO/DRAC and then still be connected to send a poweron co...
by pe1chl
Sun Mar 17, 2024 11:43 am
Forum: General
Topic: A call for a "lite" version of routeros 7 (image size reduction)
Replies: 22
Views: 1776

Re: A call for a "lite" version of routeros 7 (image size reduction)

Current (and likely future) devices already have more flash space... except for some pure switches, were it is not required so much. Of course that would still mean a "lite" version of routeros for switches (not switchos) would have to be released, which does not include all those features...
by pe1chl
Sat Mar 16, 2024 11:15 pm
Forum: General
Topic: A call for a "lite" version of routeros 7 (image size reduction)
Replies: 22
Views: 1776

Re: A call for a "lite" version of routeros 7 (image size reduction)

I don't think that would affect existing devices...
by pe1chl
Sat Mar 16, 2024 8:33 pm
Forum: General
Topic: A call for a "lite" version of routeros 7 (image size reduction)
Replies: 22
Views: 1776

Re: A call for a "lite" version of routeros 7 (image size reduction)

Likely more can be gained by removing webfig than by removing winbox support...
by pe1chl
Sat Mar 16, 2024 4:59 pm
Forum: RouterBOARD hardware
Topic: Upgrade from RB750Gr3
Replies: 16
Views: 1439

Re: Upgrade from RB750Gr3

Well, at work I just bought 3 new RB5009UPr+S+IN and as they provide PoE they can supply the access points at the locations and make replacing the PoE switches less expensive (we had PoE everywhere for VoIP phones, but fixed telephony has been phased out so now only access points require PoE). The p...
by pe1chl
Sat Mar 16, 2024 12:32 pm
Forum: RouterBOARD hardware
Topic: Upgrade from RB750Gr3
Replies: 16
Views: 1439

Re: Upgrade from RB750Gr3

Note that philip8224 never mentioned "it should cost as little as possible"... Some people are always on a tight budget, for others spending 50-100 on a better product is not as much of an issue. At any rate DO NOT BUY A hAP ac2 !!! Maybe ax2 or ax3 could be considered, but MikroTik should...
by pe1chl
Fri Mar 15, 2024 5:16 pm
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

Did you set (or have set by the defaults) the admin-mac of the bridge to the MAC of the first ethernet port in that bridge? Can you send the entire /export for interface, bridge and bridge ports? There must be some dup MAC Is there no other router in the network running from a backup of a different ...
by pe1chl
Fri Mar 15, 2024 2:03 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 148
Views: 46015

Re: Feature Request: IPSEC Improvements

I am evaluating various solutions, but it is surprising that MikroTik does not support VTI, which is widely used and easy to manage in the industry. I don't understand why MikroTik insists on not developing this feature, especially it's an enterprise product. MikroTik is moving from the business ma...
by pe1chl
Fri Mar 15, 2024 10:30 am
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 148
Views: 46015

Re: Feature Request: IPSEC Improvements

hsin said "I have same problem" and what he quoted was a setup with MikroTik equipment. When that wasn't his situation he should not have claimed he had "same problem". Remember VTI is nothing magical. When there are issues with hardware acceleration, they will be present in VTI ...
by pe1chl
Thu Mar 14, 2024 10:38 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 148
Views: 46015

Re: Feature Request: IPSEC Improvements

You do not need VTI to solve that problem! Simple GRE/IPsec tunnels and automatic routing will do it.
by pe1chl
Thu Mar 14, 2024 5:58 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Yes, it seems like drag/drop moves now only work on the same device, not across devices. So it does not work when it has to copy the data.
Uploading files in Winbox was always limited to the main folder... but when you use FTP you can upload to another folder (device).
by pe1chl
Thu Mar 14, 2024 5:51 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

I do have a certain understanding they want to avoid control characters and similar, but not when it comes to common characters like spaces. Problem is: where do you define the bounds. Characters like / : \ can also cause trouble. People have used date/time as part of a filename and ran into "...
by pe1chl
Thu Mar 14, 2024 2:36 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

MikroTik has once AGAIN managed to break script compatibility by prohibiting something as common as spaces in file names. The common issue seems to be that people uses spaces in their System->Identity and then later use that as a filename. Just don't do that! Something as basic as an Identity bette...
by pe1chl
Thu Mar 14, 2024 2:33 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

In general you can say that without the specialist expertise of DNS, you cannot implement a caching resolver that works without issues. MikroTik has clear shown is that earlier in the v7 development. Every time they added or "improved" something in the DNS resolver, it was broken again. It...
by pe1chl
Thu Mar 14, 2024 2:01 pm
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

You will always have such surprises as you have now, until you reset the device...
by pe1chl
Thu Mar 14, 2024 11:49 am
Forum: General
Topic: A call for a "lite" version of routeros 7 (image size reduction)
Replies: 22
Views: 1776

Re: A call for a "lite" version of routeros 7 (image size reduction)

RouterOS has the capability to install optional modules, but there is no resolution of inter-dependencies. So, when one module requires another module to function, it is upon the user to install both modules. This caused some issues in v6 because there were many low-level modules (like PPP, DHCP) th...
by pe1chl
Thu Mar 14, 2024 10:33 am
Forum: General
Topic: A call for a "lite" version of routeros 7 (image size reduction)
Replies: 22
Views: 1776

Re: A call for a "lite" version of routeros 7 (image size reduction)

I understand that pppoe may be used somewhere, but these days I don't see it anywhere but on some DSL lines, and even on those the provider's modem can terminate it just fine. Well, there is your problem. What seems unimportant to you, is top priority for me. We DO REQUIRE PPPoE, it is used on all ...
by pe1chl
Thu Mar 14, 2024 9:41 am
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

Yes this device is restored using backup from another device. Is this something bad? And how to fix?
Yes, that is bad!
Reset the device to defaults and configure it again.
You can use /export and paste it to the router, but you can NOT restore a backup from another device!
by pe1chl
Wed Mar 13, 2024 9:46 pm
Forum: General
Topic: Backup restoration, wrong interfaces
Replies: 12
Views: 818

Re: Backup restoration, wrong interfaces

Actually that happens "all by itself" when you restore a backup on a different device...
Apparently there is some internal device identifier that may get remapped to a different actual interface when the corresponding physical interface does not exist.
by pe1chl
Wed Mar 13, 2024 4:50 pm
Forum: General
Topic: Hex Lite and NTP client updates
Replies: 28
Views: 1689

Re: Hex Lite and NTP client updates

SOURCE port. Not destination port.
by pe1chl
Wed Mar 13, 2024 4:48 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Yeah, like home devices such as hAP series had 2 GB RAM. Some features are not usable on some models. While it is great that in MikroTik devices all models run the same software, you cannot reasonably expect that a $30 toy router has the same capabilities as a $2795 flagship device. For each capabi...
by pe1chl
Wed Mar 13, 2024 4:39 pm
Forum: General
Topic: Backup restoration, wrong interfaces
Replies: 12
Views: 818

Re: Backup restoration, wrong interfaces

You can NOT paste the configuration a second time! Each item of the configuration has to be pasted exactly once. When you somehow need to interrupt the process, you need to restart exactly at the correct point. Well, I have reconfigured entire routers this way and never encountered "router rest...
by pe1chl
Wed Mar 13, 2024 1:54 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

I'm quoting myself, because it just occurred to me that out of those 25.5 MiB source ad blocking lists only a small part was loaded (others were in the 2 formats not handled yet by RouterOS) and this small part required 130 MiB of DNS cache. So a lot more memory will have been required if all the f...
by pe1chl
Wed Mar 13, 2024 1:11 pm
Forum: General
Topic: Hex Lite and NTP client updates
Replies: 28
Views: 1689

Re: Hex Lite and NTP client updates

This type of problem is usually caused by your ISP. Even when they claim that they do not filter, they may filter incoming UDP traffic to port 123 because at some point in the past there were a lot of improperly configured NTP servers (because example config files were wrong!) that were used as refl...
by pe1chl
Wed Mar 13, 2024 1:03 pm
Forum: Beginner Basics
Topic: Static DNS Priority [SOLVED]
Replies: 5
Views: 3355

Re: Static DNS Priority [SOLVED]

First to be clear: static DNS records are not forwarded at all. They are answered by the router itself. Only DNS records not in the static list are forwarded. When you have different IP addresses for a static name, and the client asks for it, they will get all addresses in the reply. Then, the clien...
by pe1chl
Wed Mar 13, 2024 12:55 pm
Forum: General
Topic: Network resets a lot and looped packet message after upgraded to 7.14(and .1)
Replies: 13
Views: 1327

Re: Network resets a lot and looped packet message after upgraded to 7.14(and .1)

Did you maybe load a backup file from a different device?
Otherwise, show the config of your bridges. Did you set the admin MAC address and is it the same as the ethernet MAC address of a port (of the CCR2004 itself) in the bridge?
by pe1chl
Wed Mar 13, 2024 12:50 pm
Forum: General
Topic: Backup restoration, wrong interfaces
Replies: 12
Views: 818

Re: Backup restoration, wrong interfaces

Indeed. The "help" text is quite confusing, it talks about "cloning a router configuration" but that suggest that you can use that to generate similarly configured devices, and that is not possible with "backup". The "can then be re-applied on the same device"...
by pe1chl
Wed Mar 13, 2024 12:37 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 78
Views: 22591

Re: 7.13 wireless package split question

I was running 7.13 (routeros+wireless package) and barely had enough room to create a backup (running config) file to the flash drive. Well, you are not supposed to create a backup to the flash drive! In those 16MB devices the Files section points to a RAM disk and flash is a subdirectory of that (...
by pe1chl
Wed Mar 13, 2024 12:24 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.1 [stable] is released!

You can only indentify different peers before starting parameter negotiation when using exchange mode "agressive" instead of the default "main". That will again be a problem when you want to abide by the rules of several different client OSes.
by pe1chl
Tue Mar 12, 2024 9:55 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.1 [stable] is released!

Yeah, that is always a problem with IPsec. Some OS requiring settings that other OSes refuse. Hi, please don't give up easily. it is not an exception but rather common practice to handle multiple phase1 selectors per peer. Currently we have this rule:. " If the remote peer's address matches th...
by pe1chl
Tue Mar 12, 2024 9:51 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Well, it would not have been a problem and it would have worked well when they had not made the stupid mistake of fitting only 16MB of flash in so many of their devices... My first MikroTik router was a RB2011UiAS-2HnD-IN. It had 128MB Flash, and RS232, USB, LCD, a beeper. The list price was $129. T...
by pe1chl
Tue Mar 12, 2024 6:03 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14.1 [stable] is released!

Yeah, that is always a problem with IPsec. Some OS requiring settings that other OSes refuse.
by pe1chl
Mon Mar 11, 2024 11:50 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

As I wrote above, they need to have an (optional) regexp that extracts the interesting part from the supplied line of text. If you're going to run some a regex over on all the entries... then what's the difference from a scheduled script that adds them to /ip/dns/static (which supports regex alread...
by pe1chl
Sun Mar 10, 2024 7:57 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

They need to implement this format, without it the feature is basically unusable. A lot of users would need to write converters from world's de facto standard into Mikrotik standard. It's better when they to implement the correct parser once and all of us can just use it. Same for bare domain names...
by pe1chl
Sat Mar 09, 2024 12:50 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

"testing" is more like "weekly", but indeed it could be solved with a rename to a less suggestive name.
too often, people interpret "stable" as "stable operation, recommended install".
by pe1chl
Sat Mar 09, 2024 11:42 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Are you sure that isn't just reporting of script errors that were always there but you never noticed?
It looks like from this version on, when a script is running in the background (i.e. not started from console) you now see those errors in the log, while in the past it just silently failed.
by pe1chl
Sat Mar 09, 2024 12:45 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Bye testing channel. You'll not see me anytime soon. Horrible experience. "testing" channel is only for people prepared to live with problems, interruptions, and netinstall. It is more worrying that the same thing is happening in "stable". There are 2 main problems here: - the d...
by pe1chl
Fri Mar 08, 2024 6:43 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Maybe it is only you that did not increase the cache size?
by pe1chl
Fri Mar 08, 2024 6:42 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

Then you probably upgraded from a quite old version. Always mention your previous version. You can go to interfaces->ethernet and open each interface and set PoE to "off" where you do not require it. On my CRS354 I went from the ancient, pre-March 2024 release of 7.13.5 all the way up to ...
by pe1chl
Thu Mar 07, 2024 10:32 pm
Forum: General
Topic: Feature requests
Replies: 1744
Views: 644365

Re: Feature requests

Feature request for "ups" package: allow to set a script to be executed when UPS state changes between on line / on battery.
(to enable sending an e-mail or other alert when power fails)
by pe1chl
Thu Mar 07, 2024 6:33 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Correct. Maybe MikroTik should, now that they are working on this, provide an ONIE install file as well.
by pe1chl
Thu Mar 07, 2024 4:28 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

First hit when searching for "Ampere CPU platform"
As I said, I did not know that AMPERE was a "CPU platform".
I vaguely remembered about a "white label switch platform" but apparently it has a different name.
by pe1chl
Thu Mar 07, 2024 4:26 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

I agree with that. There should be more options in upgrade, and more release tags. E.g. for v7 there should be an option "long-term" that corresponds to 7.12.1
Versions after that should be considered "experimental" for now.
by pe1chl
Thu Mar 07, 2024 11:37 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

Didn't say Cisco/Juniper don't have tons of bugs but I've never come across a "recommended release" that does not allow the product to boot after upgrade. Especially now in recent years when there's an impact/compability check etc before upgrading. Ok but that is where you are going wrong...
by pe1chl
Thu Mar 07, 2024 11:35 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Ok, thanks for the info about AMPERE. I thought it would be about white-label router hardware. Google of that name combined with "router", "switch" etc only resulted in articles about power usage of such devices.
by pe1chl
Thu Mar 07, 2024 11:28 am
Forum: General
Topic: Routers Coming with Default Passwords
Replies: 69
Views: 7713

Re: Routers Coming with Default Passwords

From a convenience point of view this might be helpful but from a security point of view you may not want this if you want to be sure your hardware is not going to be "reused" by others. As I wrote a year ago, normis was also active in the topic at that time, that requirement makes things...
by pe1chl
Wed Mar 06, 2024 9:47 pm
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

What is AMPERE??
Due to the stupid name it is impossible to Google...
by pe1chl
Wed Mar 06, 2024 5:33 pm
Forum: General
Topic: Feature requests
Replies: 1744
Views: 644365

Re: Feature requests

As it is now, RouterOS does not even properly close some files after using them (or forgets to "chdir"). I have an open bug where I have an NFS-mounted directory (the router mounts a directory on a server) where I put backups so they end up in the backup made from that server. When I do a ...
by pe1chl
Wed Mar 06, 2024 5:24 pm
Forum: General
Topic: /export hangs
Replies: 11
Views: 5517

Re: /export hangs

No, I have not yet reset that router and I am just living with it.
When it happens on a newly configured router as well, that means I will probably not even try that, thanks.
You could report it to MikroTik.
by pe1chl
Wed Mar 06, 2024 11:59 am
Forum: Announcements
Topic: v7.15beta [testing] is released!
Replies: 503
Views: 130235

Re: v7.15beta [testing] is released!

Well, of course actually PPSK is not proper and is a workaround. But it is a convenient workaround offered by some other vendors. At work we are using WPA2-EAP with MSCHAPv2 username/password and a certificate for authentication of the AP. That is "the proper way to do it". Each user gets ...
by pe1chl
Wed Mar 06, 2024 11:45 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

I have seen (in the past) photos of a "test lab" that they use to test new versions. The main problem is that they test mainly with "default config" so many other configs and features are not tested... (and they never discovered that storage is running out on 15.3MB devices beca...
by pe1chl
Wed Mar 06, 2024 11:39 am
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

Hi, On my RB5009UPr+S+IN the upgrade went fine. Only one strange thing, after reboot my active interfaces without POE devices were red, "PoE out status: short circuit"... Then you probably upgraded from a quite old version. Always mention your previous version. You can go to interfaces->e...
by pe1chl
Tue Mar 05, 2024 6:04 pm
Forum: General
Topic: RouterOS v7.12.2
Replies: 2
Views: 300

Re: RouterOS v7.12.2

Ok so maybe only some support for a specific model... maybe there are models with min version 7.12.2 then.
(these routers have min version 7.5)
by pe1chl
Tue Mar 05, 2024 5:33 pm
Forum: General
Topic: RouterOS v7.12.2
Replies: 2
Views: 300

RouterOS v7.12.2

I have bought a couple of RB5009 routers and they came with RouterOS v7.8 So I wanted to update them, but not to the "stable" version 7.14. I am using 7.12.1 on many routers and for now that is my "stable" version. So I went to the download archive to get that, and I found there ...
by pe1chl
Tue Mar 05, 2024 5:29 pm
Forum: Announcements
Topic: v7.14.3 [stable] is released!
Replies: 662
Views: 194102

Re: v7.14 [stable] is released!

I have seen (in the past) photos of a "test lab" that they use to test new versions. The main problem is that they test mainly with "default config" so many other configs and features are not tested... (and they never discovered that storage is running out on 15.3MB devices becau...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 41