Community discussions

Search found 191 matches

by Pea
Mon Jul 29, 2019 9:01 am
Forum: Wireless Networking
Topic: Strange problem with Wireless
Replies: 5
Views: 685

Re: Strange problem with Wireless

Backup your config.
Reset to default an test.
If everything is ok then track which part of your config is causing the issue.
by Pea
Mon Jul 22, 2019 8:26 am
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 35898

Re: v6.45.2 [stable] is released!

Maybe this:
Old API authentication method will also no longer work, see documentation for new login procedure:
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login
by Pea
Thu Jul 04, 2019 10:42 pm
Forum: General
Topic: Very high sector writes
Replies: 24
Views: 1385

Re: Very high sector writes

Many DHCP leases? Try:
/ip dhcp-server config set store-leases-disk=never
Edit: I see you have this already, so it must be something else...
by Pea
Thu Jun 20, 2019 6:40 pm
Forum: General
Topic: hap ac2 restarts each 5-20 minutes [SOLVED]
Replies: 4
Views: 481

Re: hap ac2 restarts each 5-20 minutes [SOLVED]

Probably power related, if you have - try another power adapter or PoE to confirm the cause.
by Pea
Sat Jun 15, 2019 2:58 pm
Forum: Beginner Basics
Topic: Hacked recently [SOLVED]
Replies: 7
Views: 1001

Re: Hacked recently [SOLVED]

Why do you think someone hacked in?
Your log shows only failed logins due to your poor firewall. You should rethink your firewall and running services.
by Pea
Sun Jun 09, 2019 9:21 am
Forum: General
Topic: Need Solution: How to get the maximum speed of my Connection from my MikrotikBoard 2011UiAS-2HnD [SOLVED]
Replies: 7
Views: 588

Re: Need Solution: How to get the maximum speed of my Connection from my MikrotikBoard 2011UiAS-2HnD [SOLVED]

Warning: Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will not be applied for FastTracked traffic. https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack If you want to process the traffic fast then you cannot apply to it any CPU intensive processing, it is that s...
by Pea
Wed Jun 05, 2019 7:55 pm
Forum: Wireless Networking
Topic: mAPlite as wifi to ethernet adapter
Replies: 4
Views: 500

Re: mAPlite as wifi to ethernet adapter

Try this, works perfectly: On your main Mikrotik router (C DHCP SERVER) /interface wireless set mode=ap-bridge ssid=YOUR-SSID wds-default-bridge=bridge-local wds-mode=static-mesh /interface wireless wds add disabled=no master-interface=wlan1 wds-address=xx.xx.xx.xx.xx.xx (wifi MAC of remote Mikrotik...
by Pea
Wed May 29, 2019 9:40 pm
Forum: Beginner Basics
Topic: Do I need the following firewall rules for CAPSMAN? [SOLVED]
Replies: 2
Views: 429

Re: Do I need the following firewall rules for CAPSMAN? [SOLVED]

This is to accept CAP from the same board where runs CAPsMAN.
by Pea
Thu May 23, 2019 7:43 am
Forum: General
Topic: hAP ac and gigabit ethernet speed.
Replies: 1
Views: 208

Re: hAP ac and gigabit ethernet speed.

Replace the cable.
by Pea
Fri May 10, 2019 8:13 am
Forum: Wireless Networking
Topic: CapsMan provisioning of a Specific MAC
Replies: 4
Views: 458

Re: CapsMan provisioning of a Specific MAC

Move the specific MAC rule in the provisioning list on top.
by Pea
Wed May 01, 2019 1:58 am
Forum: RouterBOARD hardware
Topic: PWR-Line PL7400 - I lived in a lie
Replies: 2
Views: 599

Re: PWR-Line PL7400 - I lived in a lie

https://i.mt.lv/cdn/rb_files/PWR-line-190410141212.pdf The PWR-Line is a replacement power adapter for your microUSB powered MikroTik router. It’s compatible with all the latest microUSB powered devices made by MikroTik, a simple software upgrade to v6.44+ enables this feature (supported by the ment...
by Pea
Sun Apr 07, 2019 10:01 am
Forum: General
Topic: hAP Lite with pwr-line interface?
Replies: 8
Views: 1643

Re: hAP Lite with pwr-line interface?

I usually buy hw in shops :)
Google for: MikroTik PWR-LINE PL7400
by Pea
Sun Apr 07, 2019 8:54 am
Forum: Useful user articles
Topic: USB Outdoor temperature sensor
Replies: 7
Views: 1897

Re: USB Outdoor temperature sensor

Try searching for "PoE web ethernet temperature sensor" instead or similar ready solutions.
by Pea
Sat Apr 06, 2019 10:16 pm
Forum: General
Topic: hAP Lite with pwr-line interface?
Replies: 8
Views: 1643

Re: hAP Lite with pwr-line interface?

Yes, this is correct, you can buy new PWR-LINE adapter, all details here:
https://i.mt.lv/cdn/rb_files/PWR-line-190401111404.pdf
by Pea
Thu Mar 28, 2019 8:55 pm
Forum: Beginner Basics
Topic: Client roaming problem
Replies: 1
Views: 290

Re: Client roaming problem

Did you try /interface wireless station-roaming enabled? Station Roaming feature is available only for 802.11 wireless protocol and only for station mode s. When RouterOS wireless client is connected to the AP using 802.11 wireless protocol it will periodically perform the background scan with speci...
by Pea
Sat Mar 02, 2019 9:53 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

This is not a bug, it tells you that you must install DHCP package now, read carefully the change list:
*) upgrade - made security package depend on DHCP package
by Pea
Thu Feb 28, 2019 8:11 pm
Forum: Beginner Basics
Topic: Best Practice -> Wireless Bridge and AP
Replies: 1
Views: 347

Re: Best Practice -> Wireless Bridge and AP

I do not know if this is the best, but it is reliable and simple wireless connection with Mikrotik on both ends: On your Mikrotik AP_01: /interface wireless set mode=ap-bridge ssid=YOUR-SSID wds-default-bridge=bridge-local wds-mode=static-mesh /interface wireless wds add disabled=no master-interface...
by Pea
Tue Feb 26, 2019 10:18 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

*) capsman - always accept connections from loopback address; Hi, I tested but I still need input firewall rule to accept router IP to get working CAP on the same board as CAPsMAN: /ip firewall filter add action=accept chain=input protocol=udp dst-address="router IP" src-address="router IP" /caps-ma...
by Pea
Sun Feb 24, 2019 10:01 am
Forum: General
Topic: Hotspot Apple Login Page HELP!
Replies: 19
Views: 2332

Re: Hotspot Apple Login Page HELP!

We're in 2019 and mobile operators sell 50GB/month for 5€, who needs hotspots anymore?
And which mobile operators? :)
Czech Vodafone 50GB for about 97€/month
by Pea
Fri Feb 22, 2019 10:13 pm
Forum: Beginner Basics
Topic: Having no luck connecting MacBooks to the APs
Replies: 1
Views: 190

Re: Having no luck connecting MacBooks to the APs

1) Do not use space in SSID, do "ScottsTest" or "Scotts-Test" (iOS devices had problem with space in SSID, this could be the case) 2) try band=5ghz- a/n/ac 3) try authentication-types=wpa 2 -psk and mode=dynamic-keys 4) try preamble-mode= both or reset wireless to default and then connect and only t...
by Pea
Tue Feb 19, 2019 8:06 am
Forum: General
Topic: Public IP Address Blacklisted
Replies: 4
Views: 489

Re: Public IP Address Blacklisted

1) update RouterOS
2) your firewall is open and wrong on input chain
3) rework your firewall in style: accept only needed, drop all else

Or do "/ip firewall export" or better "/export hide-sensitive" and post here for advises (screenshot is not sufficient)
by Pea
Mon Feb 18, 2019 9:46 pm
Forum: Wireless Networking
Topic: CAPsMAN and different protocol networks [SOLVED]
Replies: 4
Views: 575

Re: CAPsMAN and different protocol networks [SOLVED]

1) The Band/Frequency will be different in both configurations 2) The Hw. Supported Modes (you can use gn for 2.4GHz or ac for 5GHz) and Master Configuration will be different in both provisionings Based on those provisioning rules will CAPsMAN send correct configuration to CAP interface. Example: /...
by Pea
Mon Feb 18, 2019 12:59 am
Forum: Wireless Networking
Topic: CAPsMAN and different protocol networks [SOLVED]
Replies: 4
Views: 575

Re: CAPsMAN and different protocol networks [SOLVED]

Make 2 configurations (2.4 and 5GHz) for 2 provisioning rules with different hw-supported-modes=
by Pea
Sun Feb 17, 2019 1:32 pm
Forum: Wireless Networking
Topic: Activate WPS on hAC
Replies: 6
Views: 2324

Re: Activate WPS on hAC

Push-button WPS seems secure, but the vulnerability being that anyone with physical access to the AP could push the button and connect, even if they didn't know the Wi-Fi pass.
by Pea
Sat Feb 16, 2019 9:43 pm
Forum: Wireless Networking
Topic: Activate WPS on hAC
Replies: 6
Views: 2324

Re: Activate WPS on hAC

You need to define which interface to set:
/interface wireless set wlan1 wps-mode=push-button
Recommendation: Do not use insecure WPS and keep it disabled.
by Pea
Sat Feb 16, 2019 1:49 pm
Forum: Beginner Basics
Topic: Finding a firewalled connection [SOLVED]
Replies: 4
Views: 508

Re: Finding a firewalled connection [SOLVED]

For home use with public IP you normally get few thousands hits per month.
Try instead of your final drop rule use this reject rule and see if hits get reduced after time:
add action=reject chain=input reject-with=icmp-admin-prohibited
by Pea
Sat Feb 16, 2019 9:46 am
Forum: Beginner Basics
Topic: Where can I download Winbox 3.12
Replies: 2
Views: 1354

Re: Where can I download Winbox 3.12

Always use latest version, only for specific needs:
https://download.mikrotik.com/routeros/ ... winbox.exe
by Pea
Fri Feb 15, 2019 12:58 am
Forum: Beginner Basics
Topic: hAPlite bridge to CAPsMAN wirelessly?
Replies: 4
Views: 432

Re: hAPlite bridge to CAPsMAN wirelessly?

I never had roaming station on WDS link.
But I guess it should be possible to set AP with wds-mode=dynamic-mesh which allows WDS links with devices (mode=station-wds) by creating required entries dynamically.
by Pea
Wed Feb 13, 2019 12:06 am
Forum: Wireless Networking
Topic: Country settings for Japan
Replies: 2
Views: 349

Re: Country settings for Japan

Maybe this helps:
/interface wireless info country-info japan
by Pea
Tue Feb 12, 2019 12:34 am
Forum: Beginner Basics
Topic: hAPlite bridge to CAPsMAN wirelessly?
Replies: 4
Views: 432

Re: hAPlite bridge to CAPsMAN wirelessly?

Connect your hAPlite by WDS to your router. Then all should work the same as cable connection.
by Pea
Thu Feb 07, 2019 10:44 pm
Forum: Beginner Basics
Topic: Different DNS to different Mac addresses
Replies: 3
Views: 393

Re: Different DNS to different Mac addresses

/ip dhcp-server lease add address=10.0.0.1 mac-address=XX:XX:XX:XX:XX:XX ... /ip firewall address-list add address=10.0.0.1 list="my known devices" ... /ip firewall nat add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address-list="my known devices" to-addresses=1.1.1.1 add action=dst-n...
by Pea
Thu Feb 07, 2019 10:35 pm
Forum: RouterBOARD hardware
Topic: New routerboot firmware
Replies: 12
Views: 1608

Re: New routerboot firmware

Yes, these are 2 different things:
1) RouterOS update - go to "System/Packages" menu, click on "Check for Updates"
2) Firmware (bootloader) upgrade - go to "System/Routerboard" menu and click "Upgrade"
The version number of Router OS and Firmware is synchronised now.
by Pea
Wed Feb 06, 2019 8:21 am
Forum: General
Topic: [RB951G-2HnD] 300Mbps Internet bottleneck
Replies: 6
Views: 821

Re: [RB951G-2HnD] 300Mbps Internet bottleneck

1. Do not open SSH and Winbox to wild internet (use e.g. address list, VPN, port knock)
2. Use Fast track for better throughput https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack
3. Consider router upgrade
by Pea
Sun Feb 03, 2019 9:56 am
Forum: General
Topic: Performance of Mikrotik 951G-2HnD
Replies: 10
Views: 720

Re: Performance of Mikrotik 951G-2HnD

*) All tests are done with Xena Networks specialized test equipment (XenaBay),and done according to RFC2544 (Xena2544) Max throughput is determined with 30+ second attempts with 0,1% packet loss tolerance in 64, 512, 1518 byte packet sizes Test results show device maximum performance, and are reache...
by Pea
Sun Feb 03, 2019 9:40 am
Forum: RouterBOARD hardware
Topic: For real, what is with these blinding power leds?
Replies: 11
Views: 1266

Re: For real, what is with these blinding power leds?

Black tape is your friend to reduce LED brightness of whatever anytime :D
by Pea
Sat Feb 02, 2019 10:07 pm
Forum: General
Topic: Performance of Mikrotik 951G-2HnD
Replies: 10
Views: 720

Re: Performance of Mikrotik 951G-2HnD

Maybe Fasttrack rule missing in your firewall?
https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack
/ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related
/ip firewall filter add chain=forward action=accept connection-state=established,related
by Pea
Sat Feb 02, 2019 9:18 pm
Forum: RouterBOARD hardware
Topic: New routerboot firmware
Replies: 12
Views: 1608

Re: New routerboot firmware

Your firmware is already upgraded. Move on.
by Pea
Sat Feb 02, 2019 8:40 pm
Forum: Beginner Basics
Topic: Wireless station - bridge - to lan not working [SOLVED]
Replies: 10
Views: 1612

Re: Wireless station - bridge - to lan not working [SOLVED]

Did you change this?
You need to use Station pseudo bridge
by Pea
Sat Feb 02, 2019 7:56 pm
Forum: RouterBOARD hardware
Topic: New routerboot firmware
Replies: 12
Views: 1608

Re: New routerboot firmware

Factory Firmware is what was originally loaded at factory. You can ignore this. Installed version is under Current Firmware.
by Pea
Sat Feb 02, 2019 4:29 pm
Forum: Wireless Networking
Topic: wireless network with authentication of user+password [SOLVED]
Replies: 9
Views: 1718

Re: wireless network with authentication of user+password [SOLVED]

IMHO it's not illegal to change a MAC address.
It's only illegal to change a MAC address to do something illegal.
by Pea
Sat Feb 02, 2019 3:10 pm
Forum: General
Topic: How to set different wireless channels on router used as extender?
Replies: 3
Views: 401

Re: How to set different wireless channels on router used as extender?

Both options are possible, but this is my point of view: 2.4GHz indoor PtP: will reach longer distance and through more obstacles, only one 2.4GHz channel occupied by the link 5GHz indoor PtP: better throughput, but on longer distance or more walls weak signal, two 2.4GHz channels occupied by APs fo...
by Pea
Sat Feb 02, 2019 2:27 pm
Forum: Wireless Networking
Topic: CAPsMAN not adding dynamically interfaces to bridge
Replies: 4
Views: 439

Re: CAPsMAN not adding dynamically interfaces to bridge

local-forwarding=no => the interface is part of bridge on the CAPsMAN, the interface shows as disabled on CAP
local-forwarding=yes => the interface stays as part of bridge on the CAP
by Pea
Sat Feb 02, 2019 2:21 pm
Forum: Wireless Networking
Topic: wireless network with authentication of user+password [SOLVED]
Replies: 9
Views: 1718

Re: wireless network with authentication of user+password [SOLVED]

First connect by laptop and login with username and password.
Then change your Mikrotik wlan1 MAC to your laptop MAC.
And then try to connect your Mikrotik as client to the wifi network.
by Pea
Sat Feb 02, 2019 2:15 pm
Forum: General
Topic: How to set different wireless channels on router used as extender?
Replies: 3
Views: 401

Re: How to set different wireless channels on router used as extender?

For best performance I recommend to connect both by Ethernet cable if somehow possible.
Or upgrade to dual band routers and use 2.4GHz only to connect both wirelessly and use the 5GHz for wifi sharing.
by Pea
Fri Feb 01, 2019 12:17 am
Forum: General
Topic: DNS Flag Day
Replies: 3
Views: 583

Re: DNS Flag Day

Did you read the website briefly?
There is no reason to worry if you are an Internet user without your own domain name. This change is affecting you only indirectly and you do not need to take any other steps.
by Pea
Thu Jan 31, 2019 8:57 pm
Forum: Wireless Networking
Topic: CAPsMAN and multiSSID
Replies: 1
Views: 372

Re: CAPsMAN and multiSSID

Try this:
  • Create a new configuration for the VirtualAP
  • Specify the new configuration in Provisioning rule as Slave configuration
  • Remove all CAP interfaces
  • Initiate Manual Provisioning on all the CAPs
by Pea
Thu Jan 31, 2019 8:42 pm
Forum: Wireless Networking
Topic: High ping to router HAP AC2
Replies: 33
Views: 2419

Re: High ping to router HAP AC2

Did you try to reset to factory default and test? What was the result?
You are connected via 2.4GHz or 5GHz?
Did you try to change channel?
by Pea
Wed Jan 30, 2019 12:03 am
Forum: Beginner Basics
Topic: How to connect remote device into the LAN over WiFi? [SOLVED]
Replies: 7
Views: 538

Re: How to connect remote device into the LAN over WiFi? [SOLVED]

Remote device keep on auto, it will act as client and take frequency from AP. If you do not have any 802.11b only device (and you probably don't) try this: /interface wireless set band=2ghz-g/n channel-width=20mhz bridge-mode=disabled country="your country" distance=indoors frequency-mode=regulatory...
by Pea
Tue Jan 29, 2019 12:45 am
Forum: Beginner Basics
Topic: How to connect remote device into the LAN over WiFi? [SOLVED]
Replies: 7
Views: 538

Re: How to connect remote device into the LAN over WiFi? [SOLVED]

Sure, WPA2-PSK as security profile and optionally disable PMKID. Simplified description: Run your secured WiFi normally on your router, add settings for WDS, add static WDS interface with MAC of second device. On other device start without any setup. Add bridge and DHCP client on bridge. Add securit...
by Pea
Mon Jan 28, 2019 9:44 pm
Forum: Beginner Basics
Topic: How to connect remote device into the LAN over WiFi? [SOLVED]
Replies: 7
Views: 538

Re: How to connect remote device into the LAN over WiFi? [SOLVED]

You can use your wlan1 as WAN port and wireless mode station-pseudobridge on remote Mikrotik. Do not forget to synchronise time of remote device. Or below is what I use reliably with Mikrotik on both ends: On your Mikrotik router /interface wireless set mode=ap-bridge ssid=YOUR-SSID wds-default-brid...
by Pea
Sun Jan 27, 2019 10:45 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33759

Re: v6.43.8 [stable] is released!

Use manually non DSF channel (5200, 5220 or 5240). Problem solved.
by Pea
Sat Jan 26, 2019 11:26 pm
Forum: Beginner Basics
Topic: Capsman and his own CAP issue
Replies: 1
Views: 322

Re: Capsman and his own CAP issue

You can try latest ROS beta which likely do not need below workaround anymore (I did not test this yet): *) capsman - always accept connections from loopback address; Otherwise this should fix it: /capsman manager interface set [find default=yes] forbid=no add forbid=yes interface=(here put interfac...
by Pea
Fri Jan 25, 2019 8:39 am
Forum: Wireless Networking
Topic: Does locking to CAPsMan leave the rest of the router alone? [SOLVED]
Replies: 2
Views: 292

Re: Does locking to CAPsMan leave the rest of the router alone? [SOLVED]

The CAPsMAN takes care about wifi1 and/or wifi2 interfaces only. The rest of functionality and interfaces you can use and configure as you like.
by Pea
Tue Jan 22, 2019 12:18 am
Forum: Wireless Networking
Topic: CAPsMAN - How to force layer 2?
Replies: 11
Views: 4152

Re: CAPsMAN - How to force layer 2?

3) The worst: this is not documented anywhere besides user forums (it should be on CAPsMan manual to prevent people be fighting hours with something that isn´t going to work) https://wiki.mikrotik.com/wiki/Manual:Simple_CAPsMAN_setup#CAP_in_CAPsMAN But I agree that having firewall rule for CAP on C...
by Pea
Sun Jan 20, 2019 2:30 pm
Forum: Wireless Networking
Topic: android devices chooses 2.4Ghz over 5Ghz on hAP ac^2
Replies: 13
Views: 1534

Re: android devices chooses 2.4Ghz over 5Ghz on hAP ac^2

forgot to mention that this is one room condition - both phones, laptop and router are in one room max 3m away.
Ideal situation. Why you even use 2.4GHz? Stay with 5GHz only and problem solved.
by Pea
Sun Jan 20, 2019 9:57 am
Forum: General
Topic: Log in to router
Replies: 1
Views: 191

Re: Log in to router

This depends on your firewall rules. By default this is filtered.
by Pea
Fri Jan 18, 2019 4:58 pm
Forum: Wireless Networking
Topic: android devices chooses 2.4Ghz over 5Ghz on hAP ac^2
Replies: 13
Views: 1534

Re: android devices chooses 2.4Ghz over 5Ghz on hAP ac^2

Other option would be to setup different SSID for 5GHz. And never connect phone to your 2.4GHz :)
by Pea
Wed Jan 16, 2019 12:42 am
Forum: Beginner Basics
Topic: Recommended DNS Approach.
Replies: 4
Views: 407

Re: Recommended DNS Approach.

redirect - replaces destination port of an IP packet to one specified by to-ports parameter and destination address to one of the router's local addresses
by Pea
Mon Jan 14, 2019 9:30 pm
Forum: Wireless Networking
Topic: CAPsMAN issue's
Replies: 9
Views: 798

Re: CAPsMAN issue's

The 802.11n prohibits using high throughput with WEP or TKIP as the unicast cipher. If you use these encryption methods (for example, WEP, WPA-TKIP), your data rate will drop to 54 Mbps.
Use only WPA2-AES for full 802.11n speed.
by Pea
Fri Jan 11, 2019 2:10 pm
Forum: RouterBOARD hardware
Topic: hap lite not enough space for update [SOLVED]
Replies: 16
Views: 5069

Re: hap lite not enough space for update [SOLVED]

For standard home use you can remove safely all files and folders from File List
(flash folder cannot be removed but all sub folders yes)
by Pea
Thu Jan 10, 2019 7:40 pm
Forum: Wireless Networking
Topic: High ping to router HAP AC2
Replies: 33
Views: 2419

Re: High ping to router HAP AC2

There should be <1ms for ping even over wifi. What are you getting?
by Pea
Thu Jan 10, 2019 7:33 pm
Forum: RouterBOARD hardware
Topic: hap lite not enough space for update [SOLVED]
Replies: 16
Views: 5069

Re: hap lite not enough space for update [SOLVED]

try to reboot first to clean some memory...
by Pea
Mon Jan 07, 2019 12:47 am
Forum: Beginner Basics
Topic: chain -> input action -> drop [SOLVED]
Replies: 6
Views: 673

Re: chain -> input action -> drop

When processing a chain, rules are taken from the chain in the order they are listed there from top to bottom. If a packet matches the criteria of the rule, then the specified action is performed on it, and no more rules are processed in that chain (the exception is the passthrough action). If a pac...
by Pea
Sun Jan 06, 2019 10:03 am
Forum: RouterBOARD hardware
Topic: RB951G-2HnD Already in use, got hap ac2, what now?
Replies: 13
Views: 1179

Re: RB951G-2HnD Already in use, got hap ac2, what now?

Separate configs are for various devices you want to manage from CAPsMAN. Then you push the correct config to the device. E.g. 2,4GHz only config to older 2,4GHz only CAP.
If all your CAP devices support the same standards you can have only one config.
by Pea
Sat Jan 05, 2019 10:02 pm
Forum: RouterBOARD hardware
Topic: RB951G-2HnD Already in use, got hap ac2, what now?
Replies: 13
Views: 1179

Re: RB951G-2HnD Already in use, got hap ac2, what now?

Hi, this file should answer your questions about CAPsMAN VirtualAP Setup, Dual Band CAP, CAPsMAN and CAP in one board:
https://mum.mikrotik.com/presentations/BR14/Uldis.pdf
(little outdated, November 2014, but still nice explaining)
by Pea
Sat Jan 05, 2019 10:25 am
Forum: Wireless Networking
Topic: how to download wireless-fp package?
Replies: 3
Views: 404

Re: how to download wireless-fp package?

Use latest version of RouterOS.
The wireless-fp was long time ago replaced by standard wireless package which is included.
by Pea
Wed Jan 02, 2019 12:25 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

Yes but this is likely not going to happen for home use :) Therefore it is IMHO useless at the end.
by Pea
Tue Jan 01, 2019 7:55 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

This is not the best example.
Why those rules open udp port 69 (TFTP)?
Also there is defined address list which won't be used later (the rule is after general drop)...
by Pea
Mon Dec 31, 2018 5:32 pm
Forum: General
Topic: under attack in port 32231? - help
Replies: 25
Views: 1709

Re: under attack in port 32231? - help

This simplification should explain the difference: Reject : someone comes to your address and try to open door of your house, but you tell him that it is well locked Drop : someone comes to your address but there is no house or door to open and he gives up after while (timeout) It is up to you what ...
by Pea
Mon Dec 31, 2018 9:23 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

I am surprised that there was no default firewall. I really thought you removed it :) I am sorry.
And I am happy that you fixed it for your needs.
by Pea
Mon Dec 31, 2018 12:13 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :)
by Pea
Sun Dec 30, 2018 1:10 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

it scared the hell out of me!!!
Yes, you do inappropriate configuration changes. Scary.
Study some basics about firewall and fix it.
If you don't want to study then reset your router to default to get firewall back.
by Pea
Sat Dec 29, 2018 12:28 am
Forum: General
Topic: RB951Ui WiFi stations sending station leaving
Replies: 3
Views: 382

Re: RB951Ui WiFi stations sending station leaving

If this is a mobile device on your hotspot then this is rather normal, isn't it? Just a battery savings and therefore wifi switch off temporary on the mobile device.
Why do you think this is a problem?
by Pea
Fri Dec 28, 2018 6:40 pm
Forum: Wireless Networking
Topic: PWR-Line AP request for comment
Replies: 16
Views: 1766

Re: PWR-Line AP request for comment

As mentioned by Normis they sell them as single units.
You can buy one or two or... 8 or... 1000 or even more :)
by Pea
Fri Dec 28, 2018 1:28 pm
Forum: General
Topic: under attack in port 32231? - help
Replies: 25
Views: 1709

Re: under attack in port 32231? - help

There is better way than drop selectively not used ports:
1) accept only what you need
2) reject/drop everything else
That's it.
by Pea
Tue Dec 25, 2018 6:14 pm
Forum: Beginner Basics
Topic: HapAC2 as simple access point
Replies: 7
Views: 740

Re: HapAC2 as simple access point

Disable DHCP server, put all ports to bridge, add DHCP client on bridge, modify firewall and nat.
It should work then.
by Pea
Fri Dec 21, 2018 6:19 pm
Forum: General
Topic: hAP Ac loops into no update. - UPDATE: bricked unit
Replies: 4
Views: 423

Re: hAP Ac loops into no update.

You re mixing RouteOS update and Firmware upgrade. These are 2 different things.
Press the Download&Install button in Check For Updates window to update RouterOS.
After reboot you can press Upgrade button in Routerboard window to upgrade also the firmware.
by Pea
Sat Dec 15, 2018 12:01 am
Forum: Beginner Basics
Topic: Web filter for Childs
Replies: 7
Views: 818

Re: Web filter for Childs

This is what I do. If you use Mikrotik DHCP server just make static DHCP lease for MAC address of iPad from Santa, then dstnat its DNS queries to e.g. OpenDNS FamilyShield: /ip dhcp-server lease add address=10.0.0.123 mac-address=AA:BB:CC:DD:EE:FF /ip firewall nat add action=dst-nat chain=dstnat dst...
by Pea
Wed Dec 12, 2018 8:23 am
Forum: General
Topic: PWR-Line AP
Replies: 48
Views: 8493

Re: PWR-Line AP

There will be RouterOS so many possibilities for setup are expected. It should be possible to simply disable wifi interface if not needed.
by Pea
Mon Dec 10, 2018 9:51 pm
Forum: Wireless Networking
Topic: PWR-Line AP request for comment
Replies: 16
Views: 1766

Re: PWR-Line AP request for comment

Not available yet, search for PL7411-2nD: The PWR-LINE AP is a wireless access point with a single Ethernet port , a built-in 802.11b/g/n WiFi radio and capability to connect to other PWR-LINE devices through the electrical lines in your premises. Details and pictures: https://i.mt.lv/cdn/rb_files/P...
by Pea
Wed Dec 05, 2018 9:16 pm
Forum: Announcements
Topic: v6.43.7 [stable] is released!
Replies: 53
Views: 12324

Re: v6.43.7 [stable] is released!

I will also share positive update results:
hAP ac, hAP ac lite, hAP ac², hAP lite, RB951
All fine, no problem.
by Pea
Wed Dec 05, 2018 1:39 am
Forum: Wireless Networking
Topic: hAPac2 wifi issue [SOLVED]
Replies: 6
Views: 848

Re: hAPac2 wifi issue [SOLVED]

Is your SSID unique?
Or do you use something common as "Internet" or "wifi"? Then many devices will try to connect when they know this SSID.
by Pea
Sat Dec 01, 2018 1:35 am
Forum: General
Topic: PWR-Line AP
Replies: 48
Views: 8493

Re: PWR-Line AP

According to this shop PL7411-2nD will come 12.12.2018: https://www.wifihw.cz/default.asp?cls=stoitem&stiid=4329 Product code: PL7411-2nD CPU: QCA9533 CPU: nominal frequency 650 MHz PLC chipset: AR7420 Size of RAM: 64 MB Memory: 16 MB Flash 10/100 Ethernet ports: 1 Wireless Built-in: 2.4 GHz 802.11b...
by Pea
Tue Nov 27, 2018 9:32 pm
Forum: Beginner Basics
Topic: How to update to separate packages? [SOLVED]
Replies: 2
Views: 342

How to update to separate packages? [SOLVED]

What is the correct and clean procedure to update from main package to separate packages?
Just upload needed separate packages only of higher version and reboot?
by Pea
Tue Nov 27, 2018 9:23 pm
Forum: General
Topic: Backups disappear from router
Replies: 3
Views: 327

Re: Backups disappear from router

https://wiki.mikrotik.com/wiki/Manual:System/File Warning: If device has a directory named "flash" in its file list, then files which you want to be kept after system reboot/power cycle must be stored within it. As anything outside of it is kept within a RAM disk and will be lost upon reboot. Note: ...
by Pea
Wed Nov 21, 2018 9:33 pm
Forum: Wireless Networking
Topic: Devices does not see the wifi [SOLVED]
Replies: 12
Views: 1005

Re: Devices does not see the wifi [SOLVED]

Check the channel, some devices do not see 2.4g wifi channel 13 (e.g. Kindle Paperwhite)
by Pea
Fri Nov 16, 2018 9:27 pm
Forum: Beginner Basics
Topic: rookie Port Forward for PS4 [SOLVED]
Replies: 15
Views: 2107

Re: rookie Port Forward for PS4 [SOLVED]

Hi, did you noticed this warning? :) /system note set note="DEVICE HACKED - ACCOUNT admin HAD UNSAFE PASSWORD" and this is not your code, right? /system scheduler add interval=1d name=Auto113 on-event="/system reboot" policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\ o...
by Pea
Sun Nov 11, 2018 9:54 am
Forum: Beginner Basics
Topic: How to Limit Internet Speed per IP? [SOLVED]
Replies: 3
Views: 967

Re: How to Limit Internet Speed per IP? [SOLVED]

https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack Packet marking for fast processing. Warning: Queues (except Queue Trees parented to interfaces), firewall filter and mangle rules will not be applied for FastTracked traffic. Make exception in your Fasttrack firewall rule for the IP where you want t...
by Pea
Sun Sep 30, 2018 11:02 am
Forum: General
Topic: NTP client bug
Replies: 12
Views: 3474

Re: NTP client bug

I am just curious why you still try to use "Use Peer NTP" from your ISP while you know it is not working? :)
And did you try to contact your ISP to fix his DHCP NTP address setup?
by Pea
Thu Sep 20, 2018 8:14 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 39115

Re: v6.43.1 [stable] is released!

still cant change any user names.
introduced in 6.43.0
viewtopic.php?f=2&t=139091
by Pea
Thu Sep 13, 2018 12:51 am
Forum: General
Topic: Add emoji to the ssid name
Replies: 8
Views: 1352

Re: Add emoji to the ssid name

This link may help you to find suitable emoji:
https://unicode.org/emoji/charts/emoji-list.html
https://unicode.org/emoji/charts/full-emoji-list.html
/interface wireless set [find] ssid="\F0\9F\92\A3\F0\9F\92\A9"
😈
by Pea
Tue Aug 28, 2018 1:38 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 30956

Re: v6.42.7 [current] is released!

Just start reading!
[time=1535139686 user_id=118648]
how fix this please help me !
1. Please don't put questions not related to a specific release into the release topic, make new topic!
2. You are killing your router by Sector Writes, maybe logging on disc? Check your config, stop it! :)
by Pea
Fri Aug 24, 2018 11:38 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 30956

Re: v6.42.7 [current] is released!

how fix this please help me ! 1. Please don't put questions not related to a specific release into the release topic 2. You are killing your router by Sector Writes, maybe logging on disc? Check your config, stop it! :) 3. You can try netinstall, helped me to recover bad blocks, just give it a try
by Pea
Thu Aug 23, 2018 8:52 am
Forum: Scripting
Topic: script for buttom mikrotik
Replies: 3
Views: 461

Re: script for buttom mikrotik

And this is how to use the button with scripting:
https://wiki.mikrotik.com/wiki/Manual:R ... ode_button
by Pea
Sat Aug 11, 2018 10:56 am
Forum: RouterBOARD hardware
Topic: PWR-Line AP - when will be available?
Replies: 0
Views: 425

PWR-Line AP - when will be available?

When will be available PWR-Line AP announced in April 2018?
by Pea
Tue Aug 07, 2018 10:14 pm
Forum: General
Topic: Hap AC2 RAM [SOLVED]
Replies: 13
Views: 1345

Re: Hap AC2 RAM [SOLVED]

The same here, but no complain :)

version: 6.42.6 (stable)
factory-software: 6.42.3
free-memory: 205.3MiB
total-memory: 233.2MiB

board-name: hAP ac^2
model: RBD52G-5HacD2HnD
by Pea
Tue Aug 07, 2018 8:41 am
Forum: RouterBOARD hardware
Topic: Advise on Mikrotik Routerboard Firmware
Replies: 4
Views: 707

Re: Advise on Mikrotik Routerboard Firmware

Yes, this is all fine.
The firmware version increases (synchronize) now with ROS version. Even there is no update in the firmware.
(I do not know the reason why MikroTik made this change)
by Pea
Mon Aug 06, 2018 8:11 pm
Forum: General
Topic: How to block massive UDP traffic?
Replies: 1
Views: 213

Re: How to block massive UDP traffic?

port 53 :)
Search for DNS Amplification
And fix your firewall on input chain!
by Pea
Mon Aug 06, 2018 8:33 am
Forum: RouterBOARD hardware
Topic: Advise on Mikrotik Routerboard Firmware
Replies: 4
Views: 707

Re: Advise on Mikrotik Routerboard Firmware

Currently you are running current-firmware 3.24.
You should upgrade to upgrade-firmware 6.42.6.
by Pea
Fri Aug 03, 2018 11:20 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 329
Views: 88948

Re: Winbox vulnerability: please upgrade

So what about version 6.40.8, is vulnerable or not? Could somebody from Mikrotik finally confirm it? Bugfix release tree Release 6.40.8 2018-04-24 What's new in 6.40.8 (2018-Apr-23 11:34): !) winbox - fixed vulnerability that allowed to gain access to an unsecured router; https://mikrotik.com/downl...
by Pea
Fri Aug 03, 2018 12:58 am
Forum: General
Topic: Mikrotik in the news..bad news
Replies: 56
Views: 7694

Re: Mikrotik in the news..bad news

Yes, last bugfix 6.40.8 is fine (+ change your passwords after upgrading, restore your configuration and inspect it for unknown settings, implement a good firewall)
What's new in 6.40.8 (2018-Apr-23 11:34):
!) winbox - fixed vulnerability that allowed to gain access to an unsecured router
by Pea
Sun Jul 15, 2018 8:25 pm
Forum: General
Topic: DNS server changed automatically [SOLVED]
Replies: 14
Views: 3754

Re: DNS server changed automatically [SOLVED]

Did you change all your passwords after update?
by Pea
Sun Jul 15, 2018 9:40 am
Forum: General
Topic: DNS server changed automatically [SOLVED]
Replies: 14
Views: 3754

Re: DNS server changed automatically [SOLVED]

You are running vulnerable version, so no surprise that someone can change your settings when they can get all your usernames and passwords.
It was mentioned in this topic, upgrade, change passwords, add firewall...
viewtopic.php?f=21&t=133533
by Pea
Thu Jul 12, 2018 11:20 pm
Forum: Beginner Basics
Topic: SSID for kids Zone with OpenDNS
Replies: 14
Views: 1537

Re: SSID for kids Zone with OpenDNS

This is what I do, working perfectly: Add static DHCP leases Create firewall FamilyShield list for required static IP addresses Add 2 dst-nat rules for the FamilyShield list to the OpenDNS address 8) /ip dhcp-server lease add address=10.0.0.xx comment="FamilyShield" mac-address=xx:xx:xx:xx:xx:xx ser...
by Pea
Thu Jun 28, 2018 11:10 pm
Forum: General
Topic: found this on my router today!
Replies: 3
Views: 978

Re: found this on my router today!

Well, follow this advice for update and password change, proper firewall, etc.:
viewtopic.php?f=21&t=132499
viewtopic.php?f=21&t=133533
by Pea
Wed Jun 27, 2018 2:39 pm
Forum: General
Topic: Urgent Help Please! [SOLVED]
Replies: 7
Views: 640

Re: Urgent Help Please! [SOLVED]

It will not happen if we could see all open windows within the Winbox as on this simulation:
by Pea
Wed Jun 27, 2018 12:18 am
Forum: General
Topic: Urgent Help Please! [SOLVED]
Replies: 7
Views: 640

Re: Urgent Help Please! [SOLVED]

This happens when you have several terminals hidden behind other windows. Close some windows and you will find those eight terminals. And close them.
by Pea
Tue Jun 26, 2018 8:56 pm
Forum: Announcements
Topic: Winbox v3.15 released!
Replies: 21
Views: 7249

Re: Winbox v3.15 released!

It's a pity!
But good inspiration to MikroTik for Winbox improvement. Maybe someday :)

And next would be option to disable/remove Quick Set based on setup on router (e.g. /system routerboard settings quickset=disabled).
by Pea
Tue Jun 26, 2018 8:16 pm
Forum: Announcements
Topic: Winbox v3.15 released!
Replies: 21
Views: 7249

Re: Winbox v3.15 released!

Tell me how to get these window buttons there? I like it! But I do not have it :)
(I hope this is not a "photoshop" joke)
by Pea
Mon Jun 11, 2018 10:26 pm
Forum: Beginner Basics
Topic: Trying to block sites. Mild success.
Replies: 8
Views: 1135

Re: Trying to block sites. Mild success.

Hello, don' use layer 7, use this instead : /ip firewall filter add chain=forward dst-port=443 protocol=tcp tls-host=*.facebook.com action=reject add chain=forward dst-port=80 protocol=tcp tls-host=*.speedtest.net action=reject Hello. One question. Do I have to do something for the filter to take e...
by Pea
Mon Jun 04, 2018 9:43 pm
Forum: Wireless Networking
Topic: interface wireless set compression=yes - does this work? [SOLVED]
Replies: 3
Views: 948

Re: interface wireless set compression=yes - does this work? [SOLVED]

I see, nothing interesting then...
I am setting it back to default "compression=no" :)
by Pea
Tue May 29, 2018 10:37 pm
Forum: Wireless Networking
Topic: interface wireless set compression=yes - does this work? [SOLVED]
Replies: 3
Views: 948

interface wireless set compression=yes - does this work? [SOLVED]

I'm curious about this wireless option: interface wireless set compression=yes Wiki says: Setting this property to yes will allow the use of the hardware compression. Wireless interface must have support for hardware compression. Connections with devices that do not use compression will still work. ...
by Pea
Tue May 29, 2018 9:20 pm
Forum: General
Topic: DNS change issue.
Replies: 6
Views: 1111

Re: DNS change issue.

Jahir: oh dear, you have no firewall, your router is fully open, unprotected Webfig and Winbox, and now you even post your admin password in forum... And what's more your Router OS is 6.39.2 which is known to be vulnerable. So don't be surprised about random config changes, everyone can login and ch...
by Pea
Tue May 29, 2018 7:48 am
Forum: General
Topic: DNS change issue.
Replies: 6
Views: 1111

Re: DNS change issue.

What is your Router OS version?
by Pea
Mon May 28, 2018 9:55 pm
Forum: General
Topic: Internet Safety with my router
Replies: 6
Views: 881

Re: Internet Safety with my router

This sounds as really good deal:
https://www.purevpn.com/pages/exclusive-offer.php
(Get 5 Years of PureVPN For Just $69!)
by Pea
Wed May 16, 2018 9:33 pm
Forum: RouterBOARD hardware
Topic: Not Work RB951g-2HnD
Replies: 1
Views: 309

Re: Not Work RB951g-2HnD

Maybe defective power adapter? Do you have any other to test?
by Pea
Wed May 09, 2018 8:46 pm
Forum: Wireless Networking
Topic: Connect Routerboard with hotel wifi
Replies: 7
Views: 1127

Re: Connect Routerboard with hotel wifi

If the hotel keeps login based on device MAC address:
1) Change your laptop MAC address to your router MAC address
2) Pass the login on your laptop
3) Change the laptop MAC address back to default/original
4) Switch on your router, fill the SSID and enjoy "own network" :)
by Pea
Tue May 01, 2018 10:20 am
Forum: General
Topic: 6.42.1 POE Overload
Replies: 12
Views: 2336

Re: 6.42.1 POE Overload

No, PoE works in 6.42.1 correctly for me same as with previous versions. Did you try to connect different device?
by Pea
Mon Apr 30, 2018 1:50 am
Forum: Beginner Basics
Topic: Firewall Rules: Block ICMP from WAN (PPPOE connection) [SOLVED]
Replies: 22
Views: 2682

Re: Firewall Rules: Block ICMP from WAN (PPPOE connection) [SOLVED]

I am just curious why you want to block ping? Anyway if you insist on it start with simple input icmp drop rule placed somewhere on top. If this works then do fine tuning in more detail. If this does not work then you are actually pinging different device (you modem - as you wrote that your WAN is e...
by Pea
Sun Apr 29, 2018 10:11 pm
Forum: Announcements
Topic: Winbox 3.13 released!
Replies: 61
Views: 21823

Re: Winbox 3.13 released!

Click on Neighbors card and then simply click on MAC address (or IP address) of the device you want to connect to...
by Pea
Fri Apr 27, 2018 6:18 pm
Forum: RouterBOARD hardware
Topic: Copper link longer than 100 meters
Replies: 16
Views: 1751

Re: Copper link longer than 100 meters

My experience beyond specifications is to keep the Ethernet cable as short as possible, as isolated as possible :)
Maximum is really about 100 metres then collision detection mechanisms "break" the link.
Use some repeater in the middle and you should be fine.
by Pea
Wed Apr 25, 2018 10:20 am
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 161549

Re: Advisory: Vulnerability exploiting the Winbox port

Very nice tutorial on port knocking: http://blog.cactiusers.org/2009/04/17/m ... -knocking/
to: 9939781 - it is with Layer 7 packet sniffing if you insist on it :)
by Pea
Tue Apr 24, 2018 8:13 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45637

Re: v6.42.1 [current]

pe1chl: yes, this is clear. The report about problem in this version is due to missing feedback in log after pressing the Upgrade button. This " Firmware upgraded successfully, please reboot for changes to take effect! " did not appear in log. And this is unusual. This information line was always th...
by Pea
Tue Apr 24, 2018 7:14 pm
Forum: Beginner Basics
Topic: don't write logs
Replies: 5
Views: 534

Re: don't write logs

maybe...
did you try to check how many lines you have setup?
/system logging action print
look for "memory-lines= ..."

Or go to System / Logging / Actions / memory / Lines
by Pea
Tue Apr 24, 2018 5:43 pm
Forum: Announcements
Topic: v6.40.8 [bugfix] is released!
Replies: 35
Views: 17169

Re: v6.40.8 [bugfix] is released!

skullzaflare: see viewtopic.php?f=21&t=128915
Please, note that downgrading to previous RouterOS versions (below 6.41) will not restore "master-port" configuration, so use backups to restore configuration on downgrade.
by Pea
Tue Apr 24, 2018 9:25 am
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45637

Re: v6.42.1 [current]

Hi strods, this happened for the first time that log message about upgrade was missing completely. Unfortunately all my devices are upgraded already, so I cannot check if the warning was in System/Routerboard/Settings. But it was definitely missing in log. Now if I look into terminal I still see 2 l...
by Pea
Mon Apr 23, 2018 10:21 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45637

Re: v6.42.1 [current]

The same with missing line in log "Firmware upgraded successfully, please reboot for changes to take effect!" happened to me today on RB951G-2HnD. Little scary on 50km away device :) Did the upgrade failed? Should I reboot or better not? Anyway I sent the reboot command - and all seems fine - after ...
by Pea
Thu Apr 12, 2018 1:19 am
Forum: General
Topic: How to port forward without bridge mode
Replies: 2
Views: 507

Re: How to port forward without bridge mode

You have very likely double NAT.
If you cannot use bridge mode on ISP router then try if setting DMZ is available there.
Or use IPv6 address of your computer for external access.
by Pea
Tue Apr 03, 2018 1:08 am
Forum: General
Topic: Any plans to make cross-platform WinBox?
Replies: 33
Views: 2968

Re: Any plans to make cross-platform WinBox?

There is already linux style option - SSH CLI
;-)
If you like click with mouse in windows then it is time for Windows...
by Pea
Tue Apr 03, 2018 12:57 am
Forum: General
Topic: Can't upgrade Routerboard version
Replies: 8
Views: 5114

Re: Can't upgrade Routerboard version

What is in the log when you click on Upgrade button?
by Pea
Mon Mar 19, 2018 7:56 am
Forum: RouterBOARD hardware
Topic: hAP ac wireless light
Replies: 1
Views: 496

Re: hAP ac wireless light

There are two LEDs for the wireless section and two LEDs for the 5th port section in the hAP ac (RB962UiGS-5HacT2HnT) case. The green wireless LED shows 2.4GHz wireless status and the red wireless LED shows 5GHz wireless status. Sometimes their blinking times match and colors blend together. The gr...
by Pea
Sat Feb 17, 2018 10:13 am
Forum: Beginner Basics
Topic: Mikrotik 951G-2HnD and Samsung TV problem
Replies: 30
Views: 10247

Re: Mikrotik 951G-2HnD and Samsung TV problem

I had seldom this problem with Samsung TV and Samsung BD player, not getting IP from DHCP. Only disconecting the Samsung device from power a connecting after a while fixed the problem. It must be some problem or incompatibility at Samsung side. I finaly fixed it by switching both devices to Sony bra...
by Pea
Fri Feb 16, 2018 10:50 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 97292

Re: v6.42rc [release candidate] is released!

Already answered in this topic:
viewtopic.php?f=21&t=129034&start=150#p640819
by Pea
Tue Feb 06, 2018 9:31 pm
Forum: General
Topic: How to debug MTU size?
Replies: 7
Views: 4181

Re: How to debug MTU size?

Try this tool to debug the MTU values between you and a host:
https://elifulkerson.com/projects/mturoute.php
(I probably found this on this forum recommended by someone)
by Pea
Sun Jan 28, 2018 10:02 pm
Forum: Beginner Basics
Topic: Hairpin NAT with dynamic WAN IP
Replies: 2
Views: 1736

Re: Hairpin NAT with dynamic WAN IP

Thank you Steveocee, based on the tutorial I will try to use this now, Option C: /ip firewall nat add action=masquerade chain=srcnat comment="LAN to Server" dst-address=10.0.0.0/25 src-address=10.0.0.0/25 add action=masquerade chain=srcnat out-interface="PPPoE client" src-address=10.0.0.0/25 add act...
by Pea
Wed Jan 24, 2018 10:14 pm
Forum: Beginner Basics
Topic: Hairpin NAT with dynamic WAN IP
Replies: 2
Views: 1736

Hairpin NAT with dynamic WAN IP

Hi, I would like to ask you to review my Hairpin NAT to internal server on 10.0.0.50 The WAN IP is dynamic (VDSL). I access my Server from Internet and also from LAN by using the domain name (WAN IP). Option A: /ip firewall nat add action=masquerade chain=srcnat out-interface="PPPoE client" add acti...
by Pea
Wed Jan 17, 2018 11:54 pm
Forum: General
Topic: Two suggestions to improve Winbox
Replies: 3
Views: 367

Re: Two suggestions to improve Winbox

#2: Just try "Copy" button...
by Pea
Tue Jun 27, 2017 9:53 pm
Forum: RouterBOARD hardware
Topic: RB493G, 60.0% Bad Blocks!!! What should I do now?
Replies: 17
Views: 3872

Re: RB493G, 60.0% Bad Blocks!!! What should I do now?

470k writes after 2 hours? You are likely killing the router by your settings.
Time for a new device... and setup with reduced writes to storage.
by Pea
Sat May 06, 2017 11:33 am
Forum: General
Topic: Local DNS
Replies: 6
Views: 1361

Re: Local DNS

Do you have your domain DNS/DDNS name registered with your WAN IP address? If yes, then you can do it with NAT. These 3 lines will make your web server accessible from internet and also from LAN by your domain name: /ip firewall filter add action=accept chain=forward comment="Accept dstnat pinholes"...
by Pea
Mon Oct 17, 2016 9:27 pm
Forum: RouterBOARD hardware
Topic: Ethernet port faulty?
Replies: 4
Views: 756

Re: Ethernet port faulty?

The ether5 connector looks perfect, same as others ether1-4. So it seems it is hardware failure.
It is still in warranty, I will contact my dealer to exchange device.
by Pea
Sat Oct 15, 2016 12:25 am
Forum: RouterBOARD hardware
Topic: Ethernet port faulty?
Replies: 4
Views: 756

Re: Ethernet port faulty?

I use only CAT6 cables.
For test I connected only one computer which negotiates with ether1-4 on 1G but when I move that only cable to ether5 it negotiates on 100M.
From my logic this cannot be caused by cable or connected device. Anyway I tested 3 gigabit devices and few cables with same result.
by Pea
Sat Oct 15, 2016 12:09 am
Forum: RouterBOARD hardware
Topic: Ethernet port faulty?
Replies: 4
Views: 756

Ethernet port faulty?

Hi, I have RB951G-2HnD (v6.37.1, fw3.33), which has five Gigabit Ethernet ports. The ether1-4 (my WAN, LAN1-LAN3) sync on 1G normally. But ether5 (my LAN4) sync only on 100M (and negotiation takes longer). Attached screenshot shows log when I move one cable from ether2 (LAN1) to ether3 (LAN2)...to e...
by Pea
Fri Jul 22, 2016 9:59 pm
Forum: Announcements
Topic: Tik App, MikroTik android utility ALPHA test
Replies: 425
Views: 144440

Re: Tik App, MikroTik android utility ALPHA test

I confirm, Tik-App v0.0.33 does not work with 6.36 ROS, stuck on "Downloading plugins..." with Mikrotik RB951G-2HnD
by Pea
Sun Jul 17, 2016 9:46 am
Forum: General
Topic: Not enough disk space to perform update
Replies: 15
Views: 10049

Re: Not enough disk space to perform update

It should be enough to do reboot and then update.
How much free-memory you have after reboot?
Anyway 8,6MiB visible in your export should be good for update.
by Pea
Wed Jun 22, 2016 12:20 am
Forum: Beginner Basics
Topic: hairpin nat
Replies: 2
Views: 598

Re: hairpin nat

Use this:
dst-address-type=local
Matches destination address if dst-address is assigned to one of router's interfaces.
by Pea
Wed Jun 01, 2016 8:18 am
Forum: Beginner Basics
Topic: RB951G + Omnitik + adsl modem router
Replies: 18
Views: 1755

Re: RB951G + Omnitik + adsl modem router

Just question:
Why you do not run PPPoE client on Mikrotik and your adsl router in bridge mode?
This should be imho easier and more obvious for setup.
by Pea
Sat May 07, 2016 9:03 pm
Forum: General
Topic: BTest Server for everyone?
Replies: 2
Views: 3099

Re: BTest Server for everyone?

Use search, it is easy to find this topic:
http://forum.mikrotik.com/viewtopic.php?p=527754
by Pea
Wed Apr 06, 2016 3:11 pm
Forum: Beginner Basics
Topic: allow access WebFig from public ip
Replies: 4
Views: 1884

Re: allow access WebFig from public ip

You can use Port Knocking to add actual address into allowed address list for WebFig access.
http://wiki.mikrotik.com/wiki/Port_Knocking
by Pea
Mon Apr 04, 2016 6:52 pm
Forum: General
Topic: Mikrotik is very bad in network Solutions. why ?
Replies: 11
Views: 3141

Re: Mikrotik is very bad in network Solutions. why ?

It's not like the AP can recognize a client radio's voice or anything... ;)
nice one :mrgreen:
by Pea
Thu Mar 31, 2016 11:33 pm
Forum: Beginner Basics
Topic: Very newbie firewall question
Replies: 6
Views: 751

Re: Very newbie firewall question

I will jump here to get answer what is the best practise for the firewall last input rule: 1a - Pretend that there is nothing just black hole: add chain=input action=drop 1b - Shut the front door and lock it: add chain=input action=reject protocol=tcp reject-with=tcp-reset add chain=input action=rej...
by Pea
Tue Mar 29, 2016 9:27 pm
Forum: Beginner Basics
Topic: Public IP display problem
Replies: 28
Views: 3065

Re: Public IP display problem

Remove those 4 NAT rules: add action=masquerade chain=srcnat out-interface=all-ethernet add chain=dstnat dst-address-type=local dst-address=!192.168.0.0/16 action=jump jump-target=pinholes add chain=pinholes protocol=tcp dst-port=80,443 action=dst-nat to-address=192.168.1.198 add chain=pinholes pro...
by Pea
Tue Mar 29, 2016 4:30 pm
Forum: Announcements
Topic: Winbox3.4 released!
Replies: 54
Views: 19323

Re: Winbox3.4 released!

I think it was never there. Just write a comment and set Inline Comments in Settings and the comment column will show.
by Pea
Sun Mar 27, 2016 6:45 pm
Forum: Announcements
Topic: Winbox3.4 released!
Replies: 54
Views: 19323

Re: Winbox3.4 released!

Just tested:
Upload... button does not work, no popup, nothing.
The download option on file works. BUT no warning that file with same name already exists and existing file is overwritten!

Drag and drop works fine as before.
Winbox 3.4 on RB951G-2HnD
by Pea
Wed Mar 16, 2016 11:55 pm
Forum: Announcements
Topic: Winbox3.3 released!
Replies: 37
Views: 9505

Re: Winbox3.3 released!

Just small note: Maybe you can add higher resolution app icon... 8)
If you pin it on taskbar, you will have it with a good resolution ;)
Yes, pinned icon on taskbar looks nice.
But when I click it and Winbox is running it gets pixelated :shock:
by Pea
Mon Mar 14, 2016 9:02 pm
Forum: Announcements
Topic: Winbox3.3 released!
Replies: 37
Views: 9505

Re: Winbox3.3 released!

Just small note: Maybe you can add higher resolution app icon... 8)
by Pea
Tue Mar 01, 2016 9:46 pm
Forum: General
Topic: Upgrade issues.
Replies: 2
Views: 659

Re: Upgrade issues.

This is answer to your question: What's new in 6.33.5 (2015-Dec-28 09:13): *) wireless - regular “wireless” package is now retired and replaced by "wireless-fp" and "wireless-cm2"; This means that in update you are trying to do is the old wireless package missing - intentionally. Therefore upload wi...
by Pea
Sun Feb 21, 2016 8:27 pm
Forum: Beginner Basics
Topic: How does one setup hAP lite as a wireless client?
Replies: 2
Views: 3562

Re: How does one setup hAP lite as a wireless client?

I was solving the same setup. At the end successfully, works for weeks without problem :)
See my solution: http://forum.mikrotik.com/viewtopic.php ... 09#p518647
by Pea
Fri Feb 19, 2016 8:25 pm
Forum: General
Topic: Feature Request: filter for log viewer
Replies: 11
Views: 4668

Re: Feature Request: filter for log viewer

+1 for Winbox Log filter. Or colour highlight of search phrase at least :)
by Pea
Fri Feb 19, 2016 8:20 pm
Forum: General
Topic: Feature request: Make Quickset to be separate package
Replies: 29
Views: 5548

Re: Feature request: Make Quickset to be separate package

+1 please, Quickset to separate package if possible
by Pea
Sun Feb 14, 2016 9:01 pm
Forum: Beginner Basics
Topic: Restricting access to router before MikroTik, and WiFi not working as it should... help needed.
Replies: 14
Views: 1007

Re: Restricting access to router before MikroTik, and WiFi not working as it should... help needed.

Put your ADSL modem into BRIDGE mode. Then make PPPoE client in your Mikrotik to dial your ADSL.
Then your ADSL modem will be invisible for your customers.

telephone wire RJ11 <=> RJ11 bridge ADSL modem RJ45 <=> RJ45 WAN Mikrotik router
by Pea
Wed Feb 03, 2016 1:13 am
Forum: Wireless Networking
Topic: Wireless bridge [solved with WDS]
Replies: 6
Views: 10606

Re: Wireless bridge [solved with WDS]

As I described the " station-bridge " was not working for me. The reason stays unknown to me, there was no connection which always show in log as 4-way handshake timeout (15) . The WDS connection works from beginning excellently, perfectly suits my needs to share LAN ports connected wireless to my A...
by Pea
Sun Jan 31, 2016 2:07 am
Forum: General
Topic: Basic steps to configure RB951G as a 5 port gigabit switch?
Replies: 21
Views: 3212

Re: Basic steps to configure RB951G as a 5 port gigabit switch?

If you want to disable wifi, you must disable wireless interface, not only LED indication.
/interface wireless
set [ find default-name=wlan1 ] disabled=yes
by Pea
Sat Jan 30, 2016 11:09 pm
Forum: Wireless Networking
Topic: Wireless bridge [solved with WDS]
Replies: 6
Views: 10606

Re: Wireless bridge - help

I had originally wds-mode=dynamic, it was working fine. But I failed many times to get right config, even once I must netinstall hAP :lol: And after each restart or disconnect there was created interface wds2, wds3, ...wds28.... I just do not like this much, so I switched to static :D My plan is to ...
by Pea
Sat Jan 30, 2016 4:45 pm
Forum: Wireless Networking
Topic: Wireless bridge [solved with WDS]
Replies: 6
Views: 10606

Re: Wireless bridge - help

Thank you for pointing me to direction to find solution. I had time today to play and test. However I didn't get "station bridge" working. I got permanent log for 4-way handshake timeout (15) and no connection at all. :( And I started to search what can be the cause of this problem. As far as I unde...
by Pea
Tue Jan 26, 2016 12:42 am
Forum: Wireless Networking
Topic: Wireless bridge [solved with WDS]
Replies: 6
Views: 10606

Wireless bridge [solved with WDS]

I need your help and advice for probably very simple setup: 1) I have configured router RB951G-2HnD doing the entire job (PPPoE to VDSL, NAT, DHCP, DNS, firewall, ipv6, wireless AP 802.11n, etc.). 2) Now I want to connect new RB941-2nD-TC (hAP lite) to my wireless AP and share this connection to its...
by Pea
Mon Jan 25, 2016 8:45 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 314
Views: 87676

Re: Mikrotik VDSL / DSL Modem?

+1

I want to get rid of ISP bridged VDSL modem :?
Or just a small black box with RJ11 on one side and RJ45 on other side (PoE powered) :D
by Pea
Thu Dec 31, 2015 1:03 am
Forum: General
Topic: RB951G-2HnD Drops wi-fi connections
Replies: 4
Views: 926

Re: RB951G-2HnD Drops wi-fi connections

Also check what is your setup under /interface wireless max-station-count
by Pea
Sun Dec 13, 2015 2:48 pm
Forum: Wireless Networking
Topic: System critical error message in log window
Replies: 3
Views: 1433

Re: System critical error message in log window

Someone from US and UK is failing to login to your device via SSH and Telnet :D If you do not need ssh and telnet then go to services and disable ssh and telnet: /ip service set telnet disabled=yes set ssh disabled=yes If you need it then setup firewall rules to accept login from known adress list o...
by Pea
Wed Nov 18, 2015 9:33 pm
Forum: Announcements
Topic: 6.33 version released!
Replies: 140
Views: 34212

Re: 6.33 version released!

The mipsbe v6.33 and ntp package works fine.
Did you try to upload separate ntp-6.33-mipsbe.npk and reboot?
If yes, what was the log report?
by Pea
Sun Nov 15, 2015 11:38 am
Forum: General
Topic: Ways to make your router inaccessible
Replies: 5
Views: 979

Re: Ways to make your router inaccessible

Once happened to me in Winbox to move input "drop all" rule to first place :lol:
by Pea
Thu Nov 05, 2015 11:47 pm
Forum: Beginner Basics
Topic: Dynamic ipv6 /64 assignment
Replies: 8
Views: 5712

Re: Dynamic ipv6 /64 assignment

Your ISP modem is xDSL? If yes, then put modem into bridge and configure everything in MikroTik router. 1) Start with DHCPv6 Client: /ipv6 dhcp-client add add-default-route=yes interface="PPPoE" pool-name=IPv6-pool use-peer-dns=no 2) Add DHCPv6 and address from pool to bridge-local: /ipv6 dhcp-serve...
by Pea
Wed Oct 28, 2015 11:33 pm
Forum: General
Topic: firewall/connections - what does the first column mean
Replies: 5
Views: 5643

Re: firewall/connections - what does the first column mean

Winbox can show you explanation as well - just keep mouse on this column and see popup.
by Pea
Sun Oct 18, 2015 9:06 pm
Forum: Beginner Basics
Topic: fasttrack dummy rule
Replies: 2
Views: 985

Re: fasttrack dummy rule

Just reboot your router or wait till all fasttracked connections disappear.
by Pea
Thu Oct 01, 2015 12:26 am
Forum: Beginner Basics
Topic: IPv6 basic setup help
Replies: 4
Views: 1050

Re: IPv6 basic setup help

Hi Sob, now I got it, thank you for explanation.
I was confused by the same /64 prefix and unreachable route seemed to me unnecessary.
So I will ignore it and let it there :)
by Pea
Mon Sep 28, 2015 9:59 pm
Forum: Beginner Basics
Topic: IPv6 basic setup help
Replies: 4
Views: 1050

Re: IPv6 basic setup help

Thank you. But the #3 route is similar to #2 route which gets connected. So why there is another dynamic route created? 2 ADC 2a00:xxxx:yyyy:aaa::/64 bridge-local 0 3 DSU 2a00:xxxx:yyyy:aaa::/64 1 I have still no idea why they gave me second (WAN) IPv6/64 prefix, everything is working well only with...
by Pea
Sat Sep 26, 2015 12:53 am
Forum: Beginner Basics
Topic: IPv6 basic setup help
Replies: 4
Views: 1050

IPv6 basic setup help

I would like to ask you to revise my setting for IPv6 because this is new for me. I have very simple setup: ISP <=PPPoE=> VDSL modem (bridge) <=PPPoE client=> Mikrotik RB951G-2HnD <==> LAN+WiFi I got from my ISP this information for native IPv6: LAN: 2a00:xxxx:yyyy:aaa::/64 WAN: 2a00:xxxx:yyyy:aa8::...
by Pea
Sat Sep 12, 2015 1:18 pm
Forum: General
Topic: Mikrotik uploading massive amount of data without any computer attached
Replies: 4
Views: 1607

Re: Mikrotik uploading massive amount of data without any computer attached

Even if allow-remote-requests: no solved your problem you should secure your router by simple firewall rules: 1) Allow what you need (established, related, your LAN, pings) 2) Block everything else (this will also drop external DNS requests on port 53) Example rules: add chain=input comment="Accept ...
by Pea
Sat Sep 05, 2015 9:36 am
Forum: Wireless Networking
Topic: Somebody trying to connect on my AP
Replies: 3
Views: 519

Re: Somebody trying to connect on my AP

Do you have unique SSID?
Because if you have common (e.g. Internet) many devices will try to login when walking around because of previously stored login from other location.
Maybe SSID change will solve your problem.
by Pea
Tue Sep 01, 2015 12:06 am
Forum: General
Topic: What enables the wireless-fp package?
Replies: 6
Views: 1441

Re: What enables the wireless-fp package?

This is what I got when reading this forum: wireless - oldest package, discontinued? wireless-fp - new legacy package compared to previous has improved wireless driver, "wireless fast path" mode wireless-cm2 - CAPsMAN v2 support plus also has some improvements for newer 802.11ac and other improvemen...
by Pea
Wed Aug 26, 2015 10:49 pm
Forum: General
Topic: protection at DDOS attack based on a bug in MikroTik routers
Replies: 18
Views: 2674

Re: protection at DDOS attack based on a bug in MikroTik routers

What is the problem with default config? /ip firewall { filter add chain=input action=accept protocol=icmp comment="default configuration" filter add chain=input action=accept connection-state=established in-interface=ether1-gateway comment="default configuration" filter add chain=input action=accep...
by Pea
Tue Aug 25, 2015 9:56 pm
Forum: Beginner Basics
Topic: DHCP and DNS
Replies: 3
Views: 610

Re: DHCP and DNS

IP > DHCP Server > Networks > change DNS Servers address to 192.168.1.1
by Pea
Wed Aug 12, 2015 9:36 pm
Forum: Wireless Networking
Topic: this is my problem
Replies: 3
Views: 659

Re: this is my problem

1) open tp-link administration page
2) click DHCP from menu
3) click Disable option
4) click Save button

clear enough?
by Pea
Mon Jul 27, 2015 9:46 pm
Forum: Beginner Basics
Topic: Slow internet with firewall.
Replies: 15
Views: 3845

Re: Slow internet with firewall.

If you do not use simple queues etc. you can enable Fasttrack to increase your speed (ROS 6.29 and newer). Just put this rule above other firewall rules: /ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related That Fasttrack is enabled you can check und...
by Pea
Sun Jul 26, 2015 9:17 pm
Forum: Beginner Basics
Topic: Slow internet with firewall.
Replies: 15
Views: 3845

Re: Slow internet with firewall.

Just click both established and related in WinBox...
by Pea
Fri Jul 17, 2015 11:29 pm
Forum: Beginner Basics
Topic: Hairpin NAT issue
Replies: 7
Views: 1448

Re: Hairpin NAT issue

I had exactly same issue when accessing home server by DNS name. First I was using static DNS but I must use port in browsers and there were issues with some mobile browsers. So I started to use masquerade for LAN access instead and everything is working perfect. (Only one small side effect - all ac...