I think Mikrotik has significant problems with development "scope creep". They need to focus on releasing a stable version of 7.1 without introducing new features to troubleshoot. Just get 7.1 working with routing protocols, firewalls, NAT, IPSec VPN, PPPoE, traffic shaping, etc. The core ...

Let's cool down on the changelog topic. IMHO this is just another matter of communication. Just add a note to the changelog: A new stable release moved to long-term. For full changelog see changes up to version 6.44.3. At least this is a first step and clarifies what changes can be expected in chan...

Hello, I've found a different factory reset behavior after upgrading to v6.42.9. In v6.40.9 the interfaces, DHCP server, and firewall policies were included by default. Now in v6.42.9, only a static IP address of 192.168.88.1 is configured on Interface 1, without a DHCP server, or firewall policies ...

Personally I think Mikrotik needs to start over with RouterOS. For example, Cumulus Linux contributed a VRF implementation into the Linux kernel. Using OpenVPN from upstream could permit TCP and UDP. Etcetera. They probably had a good reason for diverging at some point. And perhaps they still do, I'...

I have seen several online story's circulating that state their is a new router malware circulating... in particular they mention Mikrotik Versions 1016, 1036, and 1072 im unaware of their being any sort of versions along these lines does anyone know other wise? https://www.symantec.com/blogs/threa...

MRZ, I assume you're indicating this vulnerability was patched in 6.38.5? Can you confirm?

The Talos blog indicates they reached out to Mikrotik about the problem, so I'm confident that mrz would be aware of any and all developments related to this exploit.

Apprently it is not fixed in 6.43. I found logins as admin from different IPs allover the world to my CCRs1036 with 6.43rc11. Moreover not only CCRs are affected as I found similar logins into my RB3011. These logins appears first time back in April 30 and was happening every few days until today. ...

A group update interval of 5 minutes is rather low. What happens if you set it to an hour?

Early reports mentioned that the hAP ac^2 and cAP AC have a 10 dBm weaker signal than a wAP AC. Can anyone comment whether 6.43rc has also resolved this problem? Thank you.

Does anyone see any improvements with 6.42.2 compared to 6.42.1 on cAP AC?

EDIT: 6.42.2 release notes includes "improved wireless throughput on hAP ac^2 and cAP ac" that was originally in 6.43rc, so you should see improvements.

Edit: Duplicate post.

still waiting for the bugfix only update This vulnerability isn't much of a problem. The problem is administrators leaving their firewall services (API, Winbox, SSH, etc.) exposed to untrusted networks. It's better to apply firewall filters to the input chain that will protect against this and othe...

For all you have trouble with wireless throughput please check if have both chains checked on wifi interfaces. I found when I configured cAP AC set as follows: cAP AC.PNG However, with the two chains checked, the speed is smaller than it should. I hope this will improve in future RouterOS versions....

We used a lot of WAP AC in the house and we were very satisfied with its WIFI. When we tested the CAP AC(tested 6.42rc41), we abandoned the purchase.

What problems did you have with the cAP AC?

wAP and cAP is not a fair comparison, wAP is a waterproof device, designed to also be used outdoors. It has a different antenna design. Why not design all access points (whether wAP, cAP, or hAP) with similar antenna? There are advantages to having an improved antenna for indoor access points, such...

Macbooks do have Three chains, btw. That depends on the model of MacBook. In this case it probably only supports two chains since it operated at 866 Mbps with the wAP AC. If it had three chains it would have instead negotiated 1.3 Gbps or maybe 877 Mbps with lesser signal strength. But the point of...

i dream an rb750GR4 on this chipset

The IPQ-4018 is built as a Wi-Fi chip by Qualcomm, and I think is unlikely to be used in a hEX.

802.11ac is backwards compatible with both 802.11a and 802.11n standards.

Are you able to test a hAP ac2 as well?

Duplicate message.

Yeah the antenna in the UAP-AC-Pro is very large. The UAP-AC-Pro design maximises antenna gain, which will improve RX sensitivity, which in my opinion is a better approach than using high TX power which just results in the "lighthouse" effect.. The hAP ac2 and cAP ac look to have Mikrotik...

Going to switch my RB750Gr3 + 3rd party AC AP with this device. Still will be dealbreaker if you replace from some UBNT AP i suppose. Still will cover much smaller space from UAPs. This claim is meaningless without any supporting evidence or documentation. On paper the Mikrotik specifications are b...

Going to switch my RB750Gr3 + 3rd party AC AP with this device. Still will be dealbreaker if you replace from some UBNT AP i suppose. Still will cover much smaller space from UAPs. This claim is meaningless without any supporting evidence or documentation. On paper the Mikrotik specifications are b...

Does anyone know if Mikrotik supports band steering or broadcast suppression on their wireless products? I cannot find references on the wiki.

I thought... its not here. Not sooner than I think. wAP AC is nice... but its slow as crap in caps mode. I really need something that is going to be full speed. I get sick of making excuses why the UniF--K waps have higher throughput when people just do speed tests. Have you also encountered throug...

Please post your rules. We can't load RouterOS to 100% with a regular PC if proper protection is configured. Can you please provide an example of "proper protection"? As a Mikrotik best practice? /ip firewall filter add action=add-src-to-address-list address-list=port_DDoS address-list-ti...

Any comments on this?

My speculation is that the hAP Lite performs poorly in congested environments. And I couldn't say whether that applies to all Mikrotik wireless products. I ended up replacing it with a commercial product that works fine.

Resource exhaustion has the potential to affect any device or service, especially those with less processing power, and isn't a "vulnerability" or "exploit". Recently we saw the Mirai botnet cause a Dyn outage and they're certainly using bigger hardware than a hEX. Or "Black...

Greetings and salutations, I've got two questions about wireless behavior on a RB941-2nD running ROS v6.29.1. [admin@MikroTik-0QN8HV] > /interface wireless print detail Flags: X - disabled, R - running 0 R name="wlan1" mtu=1500 mac-address=D4:CA:6D:C2:7D:3D arp=enabled interface-type=Ather...