MikroTik

brg3466

“*) lte - dropped support for R11e-LTE-US FOTA firmware update; ”

- which version EVER support R11e-LTE-US FOTA firmware update ???

brg3466

@mykytalvov, thank you for the new music, enjoyed it very much !
On side note, is there any tutorial of how to make this "beeper" music ? I am very interested. How do you decide what is the frequency and length ?

brg3466

Did you finally figure it out ?
what is your model of AT&T's router gateway, 5286AC or BG210, BG320 ?

I am curious to know if there is a successful case to replace the AT&T RG, as it is said only ip passthrough is possible but not to remove/replace ATT's RG.

brg3466

Yes, it will still run ax. You can verify it from your client.

Thank you so much for your help !
I did verify it. With supported bands=ac to provisioning an ax device, it did run on channel, eg " 5220 ax/eeCe"

brg3466

[/quote] No, the provisioning setting only defines where a provisioning rule is used. Downgrading only happens if you set band in channel properties. [/quote] So, if I select "supported bands = 5ghz-ac" under the provisioning and leave it blank under "Channel > band", the ax AP w...

brg3466

Use Mac address to differentiate provisioning.
Much safer.

Thank you for the quick response !
Will try it.

brg3466

Build different configurations for AC and AX devices. Set AC on the AC and AX on the AX.

Thank you for the reply !
I tried to set different config for AC and Ax devices. but both ac and ax devices was provisioned by the ac configuration.

brg3466

I have a cAP ac with new driver (wifi-qcom-ac) and a hAP ax2, all with 7.13, 750gr3 with 7.13 as CAPsMAN. I have a question on the provisioning: 1) if I select 'supported band' =5G ax, then cAP ac will not be provisioned. 2) if I select 'supported band' =5G ac, then both cAP ac and hAP ax2 will be p...

brg3466

Thank you for sharing ! I followed your tutorial and got it working on Ubuntu server.

brg3466

Instead of :pick $date 4 6, the new date format you do :pick $date 8 10

brg3466

It is not easy to find a Mikrotik router nowadays with beeper! Seems all the new models don't have beeper anymore.

brg3466

Any guidance or suggestions ?

brg3466

Hi, did you finally make it ? I also have a LtAP mini LTE-US which I was not able to update the modem firmware to v05.04.193841 for a long time.

brg3466

Hello everyone, I want to enable L3HW on my home network. Read the L3HW manual but still some doubts on how to implement it. Basic background of my home network: 1. 5 vlans including one managment vlan to all the devices. All vlans are on one single bridge on each devices with vlan filtering=yes. 2....

brg3466

anyone has solution ?

It is weird that in our house, only iPhone14 pro has this "SA query timeout" issue. All other apple devices ( macbook, macbook air, ipad or iphone 12) don't behave like this.

brg3466

still broken in 7.12beta7. Can't change the veth ip address unless restart the routerOS after change.

brg3466

something wrong with My config.toml file ? Toml is sometimes confusing. [devices] needs defined only once. Use https://www.toml-lint.com for fast checking. The error messages may be implying errors on the line below... This should work: net_interface = "eth0" [devices] [devices."BC:3...

brg3466

It finally worked if there is only one device to be available to another network. i.e Apple TV (vlan10) can be available to network vlan12. But when I want to add devices and add networks, it doesn't work. The only change I made is the config.toml file. And the error message is " Could not read...

brg3466

Thank you for putting the effort in in providing me with great context! This all looks ok... If the following is true [*] 10.13.0/12/13.254 NOT in use by any other device or themikrotik. If you ping the ip on the same network as a client , you should not get a response, however, `arp -a` should giv...

brg3466

@nicob, Thank you for the great work ! I tried on hAP ax2 (v 7.11.2). My goal is to let apple TV ( vlan10) available to vlan12 network. The topology is: Router <-> CRS328 <-> hAP ax2, ether1 on ax2 is set as trunk port. But after getting reflector running, my phone (vlan 12) still cannot see apple T...

brg3466

[/quote] Meaning that with setting above it is perfectly possible to have some bridged ports configured as access ports or hybrid ports. [/quote] @mkx, thank you ! I tried a lot but all in vain. Do you have the idea on , let's say, with above settings unchanged, I want to add another port (from CAP)...

brg3466

When learning vlans most important part is to follow tag @maigonis, thank you for the reply ! The link above is mainly for switch and routers. Maybe it was not clear in my last post. My question is on CAP (hAP ax lite): Your config on CAP has a bridge, and only eth1 is on this bridge(as a trunk por...

brg3466

@maigonis Thank you for sharing the config ! On your hAP ax lite, I see on only-vlan tagged frame will be accepted on the bridge. My question is : since hAP ax lite have more than 1 ports, what if you want to have, let's say desktop on ether 3 with vlan10, your printer on ether4 with vlan20 ? Have y...

brg3466

The only current way to get vlan and dynamic interfaces working on caps with capsman 2 is to disable vlan filtering on cap bridge. Then it will work. Will be fixed in a subsequent release, I was told by support. Has this been solved ? Now it is 7.11 stable, and have you tried enabling vlan filterin...

brg3466

This is from the CAP that have 3 wireless networks with 3 VLAN's: @gigabyte091 I have a similar set up as yours and it did works , as long as the ax3 is just a CAP. , which means, it only acts as a wireless AP. Recently, I want to put my printer and other devices on the ax3 on different vlans on et...

brg3466

I have similar setup on CCR+cAP ax with CAPsMAN, which works fine. The config is below for your info. # 2023-08-14 21:43:06 by RouterOS 7.10.2 # # model = cAPGi-5HaxD2HaxD # serial number /interface bridge add name=bridge1 /interface wifiwave2 set [ find default-name=wifi1 ] configuration.manager=ca...

brg3466

This rule works perfectly for me: add action=reject chain=blocklist comment="block youtube" protocol=tcp reject-with=icmp-network-unreachable tls-host=*youtube* please don't use l7 rules for blocking webpages Can anyone tell me if above Normis way to block youtube works ? And what is exac...

brg3466

Somehow, I never succeed in upgrading my modem firmware to R11eL_v05.04.193841 on my LtAP mini LTE-US（R11e-LTE-US）

brg3466

I recently tried 7.8rc3, with fs.com product, and it seems very stable. RB5009 <-> CRS328. No single drop ever since.

brg3466

My bad ! Can't imagine I am such an idiot! Spent almost 2 days trying to figure out why. You rock !!! Thank you so much for your time and help! Really appreciated ! PS. Regarding the ether1 port connecting AP and router, I consider it as trunk port on both AP and Router, but if I specify the frame-t...

brg3466

@tdw Thank you for your time looking into it. Unfortunately, after I added the bridgelocal as tagged on CAP bridge vlan table, it still doesn't work. Also, if I add bridgelocal as tagged on CAP's bridge vlan table and I use the config of Router without bridge, it still works. which means, no matter ...

brg3466

Here is the Router config without bridge for comparison, and it works fine. CAP will get the config from CAPsMAN. # model = C52iG-5HaxD2HaxD /caps-man configuration add country=latvia datapath.local-forwarding=yes .vlan-id=10 .vlan-mode=\ use-tag name=Config_WORK security.authentication-types=wpa-ps...

brg3466

Hello all, I played with CAPsMAN with local forwarding mode with below simple topology. CAP's uplink is ether1 to the Router ether1. On the Router (CAPsMAN), I created 2 vlans on the bridge1. But the CAP cann't discover the CAPsMAN. I use hAP ax2 as the router and mAP as the CAP. Appreciate if anyon...

brg3466

I know it is a bit old thread but I recently bought CRS312 ( I have CRS328-24P for years) and when I connected CRS312 to CRS328 with 1m-long Mikrotik 10G DAC, the sfp+ port flapping randomly, sometimes 3-4 times per hour, sometimes every 5 minutes. Tried different RouterOS version, and different DAC...

brg3466

CRS328-24P <-> CRS312 with 1m Mikrotik DAC, port flapping every 2 hours. both switch running Stable 7.6, herebelow are the sfp+ 3 and sfp+ 4 link down ( sfp3+ and sfp+4 connected to CRS328 with LAG) [brg3466@CRS312] > log print where message~"combo" dec/28 02:56:00 bridge,info hardware off...

brg3466

Did you finally find out what is the root cause of the link-down ?

It happened on my CRS328 and CRS312 as well. the 10G sfp+ interface occasionally link down for a second and then up. I changed the DAC （ Mikrotik DAC， FS.com DAC, 10Gtek DAC) , it is still the same.

brg3466

I have the same issue. RB5009 UPr <--> CRS328-24P ,connected by 3m-long Mikrotik DAC. I found sfp+ interface on RB5009UPr down randomly. Status showed within 48 hours, it was down 11 times. Before RB5009, I use CCR1009-7G-1C-1S+ and sfp+ interface never down, so I suspect it is related to RB5009.

brg3466

Can't wait to see the launch of cAP ax and wAP ax , so I can replace my cAP ac / wAP ac.

It is a pity that the CAPsMAN cannot handle the mix of wifi5 AP and wifi6 AP, hope Mikrotik will have a solution for it.

brg3466

Looking forward to it ! Thanks for the quick reply !

brg3466

No, WifiWave2 CAPsMAN is only compatible with WifiWave2 interfaces. Does that mean only those who have wifiwave2 interface can act as the CAPsMAN ? like CHR/x86 architecture RouterOS, they cannot act as the CAPsMAN, correct ? i have several hap ax2, and I tried today with x86 and CCR1009 as CAPsMAN...

brg3466

@Zacharias, @SiB, thank you for pointing out the minor mistake on the /ip address. I corrected it. But it still doesn't work. On LtAPmini, the vlan2-mgmt got ip from mAP DHCP is 10.10.59.50 and vlan3-passthrough got IP of 10.120.165.173/30 On mAP, the vlan3-internet got ip of 10.120.165.174/30. Neit...

brg3466

@hecatae, I tried , but still doesn't work. [brg3466@LtAP] > /interface/lte/settings/print mode: auto firmware-path: firmware sim-slot: up after the LTE interface up and running, it assigned an ip address 10.142.201.230/30 to the mAP, and LtAP itself got ip address 10.142.201.229/30 as well. But the...

brg3466

I am using the "down" sim card slot. Will that make a difference ? I will try to put sim card in "up" slot.

brg3466

Hello everyone, I have a LtAP mini LTE-US and it works perfectly with AT&T sim card in normal mode. ( means non-passthrough). Recently, I played with it for passthrough mode. I connected a mAP to it and I cann't get internet. What I did: 1. on LtAP mini, I created two vlan on ether1 - vlan2 for ...

brg3466

Nice, thanks for sharing !

brg3466

Yes, it is supposed to support partitioning. I have CCR2004 as welll which is also a arm64 based, and it can be repartitioned.

brg3466

I just put it in a SFF computer and run Proxmox VE on the computer. Proxmox can recognize the NIC and get ip address internally (directly) from CCR2004.

brg3466

still doesn't work on 7.2 stable

brg3466

RB5009
repartition doesn't work.

brg3466

Thank you for sharing !

brg3466

What's new in 7.2rc6 (2022-Mar-30 10:56): *) lte - improved stability when modem disappears during firmware upgrade; I tired with rc7, it doesn't solve the problem. My LtAP mini LTE US-Kit still cannot upgrade the modem firmware. Once you hit the button to upgrade , the LTE interface stopped runnin...

brg3466

LtAP mini LTE US kit Still cannot upgrade the modem firmware [brg3466@LtAP] > /interface/lte/firmware-upgrade lte1 once installed: R11eL_v05.03.183961 latest: R11eL_v05.04.193841 But once you want to upgrade, it gets stuck because LTE interface disconnected. I wonder if anyone who successfully upgra...

brg3466

The below script used to work in v6: /log print where time>( [system clock get time] - 1h ) So you can schedule to run the script at the end of the day like below just don't get negative in the subtraction. /log print where time>( [system clock get time] - 23h50m ) But it doesn't work in v7 anymore.

brg3466

Got reply from mikrotik support :

quote:
Hello,
If you plan to use RouterOS version 7, then we currently suggest v7.2rc2/v7.2rc3.
Those versions contain lots of SFP improvements for CRS3xx devices and could solve this issue as well.
unqutoe

brg3466

Still cannot upgrade the modem firmware to R11eL_v05.04.193841 on my LtAP mini LTE US-Kit. Once you want to upgrade, the LTE lost connection to internet.

brg3466

It is very annoying to see those port flipping info on the log. There is no reply from Mikrotik support yet. [brg3466@RB5009] > log print where topics~"interface" jan/18 19:18:33 interface,info ether1 link down jan/18 19:18:33 interface,info ether2 link down jan/18 19:18:33 interface,info ...

brg3466

It seems it is not a single case of port flipping on RB5009, see this thread. https://forum.mikrotik.com/viewtopic.php?p=907695&hilit=RB5009+auto+incomplete#p907695 In my case, my sfp+ interface linkdown at midnight, which clearly indicated it has nothing to do with winbox. Other ethernet interf...

brg3466

I have sent email to mikrotik support to report this issue and got a ticket #. but so far no reply from mikrotik.

brg3466

I have same issues, RB5009+ CRS328 connected by 3m-long Mikrotik sfp+ DAC. And link between RB5009 and CRS328 is up and down from time to time.
The auto negotiation also shows "incomplete".

brg3466

Any idea when the passive cooling version of CCR2004 will be available on the market? It has been a while since the video. I am quite interested in this PC version CCR2004. Bought the CCR2004-16G-2S+ before, it is a bit loud when it starts.

brg3466

I really wish there was a wifiwave2 "light" package to be installed on early hap ac2 revisions with 256 MB RAM. Free disk space is the only thing preventing it.

+1

I have cAP ac with 256M RAM but only 16M storage, so I cannot use ww2.

brg3466

Severe port flapping with RB4011iGS+5HacQ2HnD + rc6. Submitted supout: https://help.mikrotik.com/servicedesk/servicedesk/customer/portal/1/SUP-65942 Disabling auto negotiation does not fix this. Disabling port and re-enabling it fixes it (temporarily). Does the ether1 connect to a LAN device (not W...

brg3466

1. not every 5009 has 0.1% bad block
2. Tried netibstall, no change. Still 0.1%

brg3466

Mine is all green when turned on. But I have another issue. if you go /system resource , it is from day1 a " 0.1% bad blocks". No clue it is because of the bug or there is really some bad blocks. [brg3466@RB5009] > /system resource/print uptime: 5d20h6m1s version: 7.1rc4 (testing) build-ti...

brg3466

Hello SiB, Just find my LtAP mini LTE US kit, the modem version is newer than you mentioned above, see below. But somehow, I can never update it to the newer version. Once you try to upgrade, the LTE lose its connection to internet. brg3466, [23.09.21 16:08] [brg3466@LtAP] > /interface/lte/firmware-...

brg3466

It is a pity that most of the current Mikrotik models don't have beeper anymore !

brg3466

Bravo !

This is really amazing ! I took great effort to find my RB951G which has a beeper to test it. Really nice !

How can you do it ?

brg3466

Here you go:
viewtopic.php?f=23&t=178496
Thanks again !

brg3466

This shows number of hits on my router on port 8291 Winbox, last 4 month. It only counts one IP for each user a day, since all who tries to access a non open port are blocked for 24 hours. There has been no increase of traffic. Hello Jotne, would you mind share your script on how to "block the...

brg3466

Still cannot upgrade my LTE modem under rc3. Since beta6, when you want to upgrade, you lost the connection to internet and got stuck in the process. [code [brg3466@LtAP] > /interface/lte/firmware-upgrade lte1 once installed: R11eL_v05.03.183961 latest: R11eL_v05.04.193841 [brg3466@LtAP] > /interfac...

brg3466

Still cannot upgrade the LTE modem on my LtAP mini LTE US kit. When you want to upgrade, it got stuck (lost connection to internet) [code[brg3466@LtAP] > /interface/lte/firmware-upgrade lte1 once installed: R11eL_v05.03.183961 latest: R11eL_v05.04.193841 [brg3466@LtAP] > /interface/lte/firmware-upgr...

brg3466

Modem Re11-LTE-US works on v05.03.183961, but cannot be upgraded. Upgraded to 7.1rc1 on my LtAP mini Kit (US version), and saw " A newer version of modem firmware is available ", but when I want to upgrade it from CLI, it lost connection. Tried several times, no luck . [brg3466@LtAP] > int...

brg3466

The 2.5G port works well for me. Recently, the ISP here in the states, Comcast, upgraded the bandwidth to about 1500Mbps and the modem from Comcast also comes with 2.5G port. With 5009, I can use this 2.5G port to connect to the modem and the sfp+ to my CRS switch. It is perfect !

brg3466

Hi, I have a LtAP mini LTE Kit US, It works fine on v6. 47.X, and v6.48.x Under v6.48.3, I can see the modem version is up to date : [brg3466@LtAP] > /interface lte firmware-upgrade lte1 once installed: R11eL_v16.02.183961 latest: R11eL_v16.02.183961 But after I upgraded to v7.1beta6, the LTE interf...

brg3466

[/quote] Also -- regarding DHCP offered WITHOUT success. I've seen this issue for following reasons: A) Issue lies with your interface BRIDGE configuration. Are you using vlans? be sure to check your bridge configuration and vlan assignment / pvid settings.. B) Device is out of range to AP or you ha...

brg3466

Hi, I am puzzled by this issue for a long time and so far no solution. I have several vlan running on bridge and each vlan has its own dhcp server. Selecting STP protocal mode to "none" on bridge , and uncheck "Always Broadcast" on the dhcp server is not a cure. It still occurred...

brg3466

I agree. With 3 formats of time, it is very confusing. Better to have just one uniform format.

Back to the topic, how to get the past, say, 10minutes log if we don't use Jotne's script ?

brg3466

@Jotne, I would like to use your script. But may I know how to set up the system clock so that [/log find time>([/system clock get time] - 60m) message~"xxx"] works. I found it only works with GMT 0 time. My setup is below, and script doesn't work since afternoon local time ( in GMT 0 , it...

brg3466

@Ferrograph Did you finally find a fix ? I am running 6.48.2 but still see it from time to time.

brg3466

Hi everyone, I have 2 sites with Mikrotik routers facing internet. I set up Router A as L2TP server. and I want to set up Router B as L2TP client. My cellphone can connect to Router A （with my LTE data), so I assume the L2TP server set up is correct. But if I want to set router B as the L2TP client,...

brg3466

solved !
I wiped out all the configurations and use quick-set "LTE AP" and under IP>DHCP-client, you can see the lte1 is configured as DHCP-client, though its status is "stopped".

But I still don't know why I cannot select it as DHCP-client before.

brg3466

Same problem +1 !

I have a ltAP mini LTE US version and cannot select lte1 as the interface for dhcp-client.

brg3466

Let’s see if Mikrotik is willing to do something about it. Would be nice if the existing products out there could take the advantage of wave2.

brg3466

@gotsprings,
Thank you for the reminder ! I noticed that it is not compatible with CAPsMAN before I tried to install the wave2. My problem is that I even cannot install the wave2 package on the device.

brg3466

Probably it is because of the 16M storage size. The official documents said " it is required at least 10M free space" . cAP ac has total of 16M storage , most likely , there is no 10M left for wave2 package.

brg3466

My bad, I forgot to check the log !

Since it didn't work, I downgraded to 6.47.9 and restore the backup as a CAP (managed by CAPsMAN) after several failed trials on wave2.

I really hope there is a successful case out there with the 256M RAM cAP ac. :-)

brg3466

Hi, Fortunately, I found my cap ac is with 256M RAM, so I decided to try the 7.1beta4 with wave2. But somehow I cannot install the extra package of wifiwave2, reboot for a couple of times and it still cannot installed. Anyone who has install the wave2 successfully on cap ac with 256M RAM ? Thank you...

brg3466

Hi,
you can refer to this thread. it is very informative.
viewtopic.php?f=13&t=87565

brg3466

Can't find area-prefix in CAPsMAN configuration and there is no connection-list as well.

brg3466

This will get all interface in to array list and then print it:

This is exactly what I want. I tried with "print as-value" but no luck. Looks like it is not possible to "print as-value" for only one properties/field.
Thank you !

brg3466

Hi, I have a similar question it is not print the output in the terminal , but to the array. Let's say , > :global a [/interface print as-value] , and you will get an array with all the interfaces info, If I just want to get the names of the interface in the array, how to get it ? the expected resul...

brg3466

Thanks, I really hate doing business with AT+T but might be stuck with them. Did you get a firstnet card or regular consumer one? I just have a regular consumer one. ( So I have two sim card, the regular one for my iphone and the other one, which is the data card for tablet installed on my LtAP min...

brg3466

Hi, I use AT&T sim card on LtAP mini. It will be quite difficult if you want to use the voice card (the normal one we put in our phone), instead, I applied for a unlimited data card ( eg. for tablet, no voice function). And it works quite well.

brg3466

This helps a lot ! I just have one Mikrotik router behind the NAT and I don't want to use road-warrior mode because I want the server to get access to client as well. Thanks ! In fact , I have 2 questions: 1. on both Router A and Router B, you have a NAT rule, like below, why we need this rule: /ip ...

brg3466

@Sindy, thank you for the reply ! #1, you are right ! it is the NAT issue. I added a NAT rule , but it doesn't work well because of the changeable ip address of the google domain, which comes my 2nd question. #2. Is there a better way, as far as you know, to only router traffic visiting google over ...

brg3466

I just did it a couple of weeks ago. Herebelow are my suggestions: 1. if you use win10 , better to set netinstall to run win7 compatibility mode 2. turn off all firewall, etc on your laptop/PC 3. if you have more than 1 NICs, turn off all others except the one you will use to connect the router Afte...

brg3466

Hello, I established the ipsec tunnel betwen Router G and Router N, subnet of G and N can communicate between each other successfully. Is it possible that if subnet of N want to visit a specific domain, say, www.google.com, traffic will be routed over the tunnel ? My setup is as follows: G: wan ip: ...

brg3466

@Sindy, thank you for the detailed explanations ! I got it now. It is good to know 'why' besides 'how to'. Thank you and have a nice holiday !

brg3466

@Sindy, thank you so much and really appreciate your time ! The disable/enable played the trick. Finally it is up ! In order to let the PC go out of Router-G WAN, have to add one NAT rule. /ip firewall nat add action=accept chain=srcnat dst-address=192.168.3.0/24 add action=accept chain=srcnat src-a...

brg3466

@henrik27, maybe you can take a look at CRS328-24P-4S+. I have 7 cAP ac and 8 IP camera which are powered by this POE switch. I have used it for about a couple of years and it is pretty good.

brg3466

Hi Sindy, thank you for your reply ! I tried to add this policy for a specific IP in the subnet , but seems doesn't work. My setup is : Router G: wanip-10.10.10.66, subnet-192.168.3.0/24 Router N: wanip-192.168.99.149 subnet-192.168.4.0/24, PC in the subnet: 192.168.4.254 After I config the ipsec tu...

brg3466

Any suggestions how to achieve it ?

brg3466

@Sindy, I tried your suggestion to route All the LAN1 traffic out of WAN2 (staying with traffic matching method). It works ! But when looking into the link, https://wiki.mikrotik.com/wiki/Routing_through_remote_network_over_IPsec it seems the application is one specific device (10.10.10.23) in LAN1 ...

brg3466

Hi , I found something else. As long as the today's date/time format includes date, the script doesn't work. If the today's log only show time, then it works. Question: why today's log sometimes show date and sometimes not ? below it shows date again. But this morning, there was no date, only time. ...

brg3466

The routerOS acts funny. The problem yesterday was the format of the log. This morning, when i run the CLI again, it works. And as you said, the current day log only shows the time. No idea what happened yesterday. :-) nov/14 23:24:47 system,info,account user brg3466 logged out from 192.168.3.25 via...

brg3466

Hi Jotne, Thanks for the reply ! This is weird ! See below. It doesn't work on mine. nov/14 21:09:57 system,info,account user brg3466 logged in from 192.168.3.25 via telnet nov/14 21:16:04 system,info,account user brg3466 logged out from 192.168.3.25 via telnet nov/14 21:18:14 system,info changed sc...

brg3466

ros code
/log print where time>([/system clock get time] - 5m)

The above code seems doesn't work on 6.47.7 , anyone have the solution ?

Thanks!

brg3466

@jebz, @mkx, thank you both for the explanation and help ! I will try the workaround suggested by jebz. On other note, I did try to create the loopback interface ( ip: 1.1.1.1/32) and add it in the LAN address-list, so the LAN address-list includes bridge (ether2-ether5) and the loopback , and I cre...

brg3466

Hi everyone, I have to move file from one folder to another within the router itself. It is easy to do it by "drag and drop" in winbox but for some reason I have to do it in the script. The only way I can think of is to use "fetch" to copy the file. But I got stuck here. Let's sa...

brg3466

@mrz, @eworm, thank you both for the tips. I read mrz's thread and realized that console number doesn't work. It is a very informative thread ! I wish I could have read it earlier. :-)
A long way to go for good scripting !

brg3466

Hello, I tried to download the backup file in cloud and if I open a new terminal and write below, it works fine. [brg3466@CCR1009] > { {... #get backup file download key {... :local key [/system backup cloud get number=0 secret-download-key]; {... {... # get cloud backup file {... /system backup clo...

brg3466

Hi bpwl, Thank you for the help ! Please find below the config on router B. Router A is almost the same, basically it is all default. BTW, I tried disabling all firewall rules on A and B, they still cannot connect. # model = 960PGS # serial number = /interface bridge add admin-mac=64:D1:54:4B:66:37 ...

brg3466

Hi guys, I have 2 Mikrotik routers (say router A and B) in different places with public IP address. so I enabled both as L2TP/IPsec server and PPTP server. I can connect to A and B if I use my iphone with data. ( or PC with iphone hotspot can connect to A and B as well). But the weird thing is if my...

brg3466

@bluecrow76 @sib, thank you for your reply ! Finally figured out why it failed before. :-)
In "execute script=$a .... " the $a must be an expression instead of a script name.

brg3466

@bluecrow76 May I know what is your RouterOS version, It seems " execute script=$a file=$filename" only works in early version such as 6.45.9, it doesn't work on 6.47.3.

brg3466

I tried ScanDisk 16G microSD card and it doesn't work. The CCR1009 cannot discover it.

brg3466

Hi Weweinet, thank you so much for the quick reply. It helps a lot ! I tried the above. Kids device IP successfully added to the internet_ok and internet_overtime address list. But it seems once the kids device IP address has been purged from the "overtime" address list, it starts over aga...

brg3466

Hi WeWinet, I looked into your filter rules and have a question: #2 "dst-address=kids-ip-address/24 dst-address-list=Kids_Internet_ok" #4 src-address=!0.0.0.0 src-address-list=kids_Mobile under#2 , Is it necessary to have "kids-ip-address/24" while you have "dst-address-list...

brg3466

Hi, any solution for this ? I recently encountered "DHCP offering lease without success" problem. DHCP server is running on vlan and providing IP address to wireless clients (mainly apple devices). I noticed that once the dhcp offering lease without success, the mac address of the device i...

brg3466

Couple of suggestions: Turn of a, only use n/ac Don't use anything other then WPA2-AES Distance Indoors (if used indoors) Turn on WMM Rates: 12/24 (basic) and 12 - 54 (supported) Choose channel manually Lower (max) transmission power by 3dB @erlinden，could you please let me know where in CAPsMAN to...

brg3466

I have the same issue. I have wap ac and cap ac connected to the router with capsman. Never exceed 300mbps on WiFi although I have 1Gbps connection from ISP.

brg3466

@davedave, I have a similar setup with cAP ac controlled by CAPsMAN with local forwarding mode. I found local forwarding has a better wifi speed compared to CAPsMAN manager mode. When configuring bridge on the cAP, I only add ether1 (and ether2 if you want) to the bridge, the wlan (including the vir...

brg3466

@mkx. I did find that if I use discovery-interface=bridge1, and turn on vlan filtering, the AP is not stable from time to time, sometimes the AP lost connection to the CAPsMAN, So in your opinion, it is better to use discovery-interface=vlan99 or to use ether1 ? ( BTW, I set a dhcp client on vlan99,...

brg3466

@cyb, I have a question on your config of cAP ac : I guess you connect your cAP ac to switch via eth1. so eth1 is a trunk port for W1, W2, W3 and Vlan100-mgmt, then why you assign PVID100 to eth1 and the bridge ? Thank you ! ____________ /interface bridge add name=br protocol-mode=none pvid=100 vlan...

brg3466

Thank you, @cyb ! It is of great help. I am now comparing mine and yours to see what I missed.

brg3466

@Sindy, @mkx, thank you for your valuable input. I tried different ways to configure the AP. But still cannot get the WiFi working. Everything else works well. Therefore, I want to post the configuration for the trial set up. Have been struggling for a week but no success. :-) Router: RB951G ( ether...

brg3466

@anav, according to the wiki: "After CAPs are successfully connected to the CAPsMAN Router, the wlan1 (SSID WiFi_WORK) and a newly created virtual wlan5 (SSID WiFi_GUEST) interfaces get dynamically added as bridge ports." I checked the cAP ac, yes, it is added as shown below. And wlan1 and...

brg3466

@cyb, May I ask if you hook up your cAP ac to the managed switch and have CAPsMAN on the router (RB4011) ? The reason I ask is that I tried to configure the similar setup in the past few days but failed. I have CCR1009+CRS328P+ 7 cAP ac. I want to have 2 SSID for Work and Guest respectively with vla...

brg3466

@mkx , thank you for the input. Yes, I set up the cAP ac so it can find the CAPsMAN, such as discovery interface etc. But I didn't set up anything regarding blue, red, green vlan. I added the Vlan99 so I can reach the device. Other than that, all configuration regarding vlan was set up in the CAPsMA...

brg3466

Hi everyone, I tried to configure my network according to this guideline in the past few days. Everything goes well except for the AccessPoint. I have 7 cAP ac hooked up to the CRS328P and I want to use CAPsMAN on the router to manage all the CAPs. Since the WiFi set up are all configured on the CAP...

brg3466

Hi, did you get what you want ? I am going to install a very similar setup as you. I tried on RB951G (router) + RB951n (as switch) +cAP ac, I configured it according to the wiki. https://wiki.mikrotik.com/wiki/Manual:CAPsMAN_with_VLANs But I from time to time have issues with the network stability a...

brg3466

@anav. #1,2,3. Thank you for the explanation ! #4. it is just a copy of configuration of the router.rsc from pcunite. I just changed the name of blue_VLan and green_Vlan to Vlan 10 and Vlan20, all the set up are Exactly same as router.rsc. Also, I didn't put any firewall. BUT I cannot get internet f...

brg3466

@pcunite, this is very helpful and informative tutorial I've ever seen in this forum regarding the new Vlan setup. (bridge vlan table). I have a couple of questions after reading thru your material. 1. If there are several APs connected to the switch, and using CAPsMAN to manage the APs (with local ...

brg3466

Hi, I have a MikroTik CCR1009+CRS328 Switch + 5 cAP ac at small office. Just want to separate Guest WiFi from office WiFi. I set up exactly the same according to the Wiki and it works. Guest WiFi is on subnet 192.168.20.0/24, and office WiFi as well as office computer are on the subnet 192.168.10.0/...

brg3466

@sjoukes Thank you very much for the info ! Really appreciate you dig into it and had some conclusions. Yes, this GKT issue bother me for a long time and Mikrotik actually didn't explain anything about it, neither told us how to solve it. You really did a good job on it and hopefully 6.43.8 solved i...

brg3466

Hi, I have a CCR1009+ CRS328+CSS326 system. both CRS328 and CSS326 connect to the CCR1009 directly. What I found is that every morning, if I plug my laptop to the CSS326, it gets no internet while I have interent if I plug to CRS328. And if you unplug the power and then re-plug it for CSS326, it is ...

brg3466

Upgraded to 6.43.2 on CCR1009 (running CAPsMAN), but cannot upgrade the 5 cAPac with 6.42.7 ( running as CAP). Downloaded the OS and put under the /pub in CPAsMAN, then in CAPsMAN> Remote CAP, click upgrade, it doesn't work.

brg3466

Hi there, I have a set up of hEX ( main router) + Switch + 5 cAP ac at home. NAS, Printer also connected to switch. CAPsMAN is running on hEX and five cAP ac as CAP with local forwarding mode. Home WiFi and Guest WiFi ( virtural AP) also set up running smoothly. My question: since Virtural APs(gures...

brg3466

thank you for the reply ! So I over-reacted. I don't need to worry about it ?

brg3466

Hi all,
I have a CCR1009 and I only connect the power to the PSU1, but when I reboot, I found the log shows that " PSU2 entered state FAIL". I didn't connect anything to PSU2, how come it failed ?

Can this message be neglected or I have to fix it ?

Thank you!

brg3466

@opkky can you elaborate a bit ? You change basic rate and support rate to what level ?

I am still suffering from this issue.

Thank you !

brg3466

anyone who can tell me how to upload photo ? I found a button 'insert image' but cannot upload the photos.

I have some interesting photos shows that both registration table and the log indicate that my iPhone connected to the AP but the iPhone home screen only shows LTE.

brg3466

Just some update, the support asked me to try to set the CAPsMAN data rates to default. ( because I set the basic rates at 6M).

Anyone who has experienced the group-key time out with the default data rates ?

brg3466

@Kerbia, I sent the suport.rif file together with the screenshot to support @mikrotik.com , let's see if they can receive it and reply.

brg3466

I upgraded to 6.42.6 and it ran smoothly until this morning. I found my iPhone was using LTE.... I checked the log and it was again the 'group key time out". "C:\Users\brg34\Pictures\Screenshots\Screenshot (10).png" ( I don't know how to insert the screen shot , didn't find the button...

brg3466

I do hope that the new firmware can solve this annoying issues. Since months ago, I was trying different configurations to fight this " group key timeout" issue but failed. I will go update the firmware the first thing when I am back home today and see if it happens again. Have to say, it ...

brg3466

@Kerbia. do you get stable wifi under 6.41.4 ? If so, I probably want to switch back as well. The drop of Wifi due to this 'groupkey timeout" really bothered me. Hope that Mikrotik can do something about it and fix it.

brg3466

I used to have lease time for 5 minutes and later I changed to 1hr, but no improvement on the disconnection issues. I changed to 1 day the other day but the disconnection still happened. My firmware is 6.42.3. My wireless setting is very simple , CCR1009 + 3 cAP ac and the CAPsMAN is on CCR1009. I t...

brg3466

I have reported the same issue on other thread. But I can add here that I have same issues on cAP ac as well. My firmware is 6.42.3. The WiFi will drop and if you check the log, it was “ group key timeout”. And my iPhone goes to LTE until you notice it. It won’t automatically reconnect to WiFi until...

brg3466

@Kerbia, any update from the support team at MikroTik ?

brg3466

6.42.2 now, the previous version I had same issue.

Please keep me posted if you get any reply from mikrotik support. Thank you !

brg3466

Hi Everyone, Recently, I bought a couple of cAP ac and deployed CAPsMan on my router. But I often encounter the WiFi drop out on my iPhone and laptop. I checked the log and it shows " group key timeout". Once WiFi dropped out, sometiems, my iphone somehow doesn't automatically re-connect a...

brg3466

Thank you , mkx !

Before drop everything in the input , I inserted a filter rule to accept established connection in the input chain. It works now !

And thank all for your valuable inputs , have a nice weekend !

brg3466

Hi , I checked firewall filter rules, it seems I found where the issue is. The below filter rule block the dns. 5 ;;; drop all not coming from LAN chain=input action=drop in-interface-list=!LAN log=no log-prefix="" If I disable it, check-for-update works normal. Any suggestion to modify th...

brg3466

Hi, thank you for the suggestions. I set the allow-romote-requests to "yes" but doesn't work. Any other suggestions ? [brg3466@CCR1009] > ip dns print servers: 8.8.8.8,8.8.4.4 dynamic-servers: 75.75.75.75,75.75.76.76 allow-remote-requests: yes max-udp-packet-size: 4096 query-server-timeout...

brg3466

Hi, I have a Mikrotik CCR1009, when I want to check for update, it is always error as follows. I have set up DNS, internet works fine. [brg3466@CCR1009] > /system package update check-for-update channel: current current-version: 6.41.3 status: ERROR: could not resolve dns name [brg3466@CCR1009] > ip...

brg3466

My friend recently bought a CRS112-8P-4S, it powers 3 IP cameras and 2 wAP ac. so the topology is modem - CRS - wAP ac. He also has a RB750Gr3. But since the CRS can configure as a router , he took away the RB750. But he felt the speed got slower compared to Modem- RB750- CRS - wap ac. He has a 150M...

brg3466

Hi Sindy,

I tried the other way you suggested just as an experiment, i.e. create a static interface of <l2tp-vpn> and add it to the LAN.

It works as well !!!

Really learn a lot from you ! Thank you for sharing your knowledge on this topic !

brg3466

Hi Sindy, Thank you for such a detailed explanation for this issue ! Really appreciated your great help ! I modified the rule 7 as per your suggestion and it works !!! Now I can remotely access the whole LAN network including the Router. :-) As to your question regarding on the 'untracked' in rule 1...

brg3466

Hi, I tried but no luck ! The linked topic has much more complicated firewall rules than mine. I just have the default config and activate the L2TP/IPsec VPN server on the main router. - set DHCP server for VPN, enable L2TP,....., etc. I can get VPN from my iPhone without any problem, and I can remo...

brg3466

Try to set up the wAP ac under Quick set as below to see if it works: 1. Select WISP mode 2. Use the same SSID and password as hAP ac 3. On the right side, select ‘bridge’ instead of ‘router’ 4. Select address acquisition as ‘static’ IP address instead of ‘automatic’ 5. Assign IP address ,eg, 192.16...

brg3466

Hi Sob, anav, After I updated the ROS to 6.41.2, it works now, don't know why before it doesn't work. Anyway, here below is the set up. Would like to thanks everyone who provide their expertise on this topic, especailly Sob and Anav, really appreciated your patience and guidance. Next issue will be ...

brg3466

Hi all, I did another test , I replaced the hAP2 ( switch）with a real unmanaged switch (a netgear 8 port swtich) , and then I connected hAP1 to the switch. so it is RB3011 - netgear Switch - hAP1. And I GOT INTERNET on hAP1. This is beyond my understanding, I assume bridge is transparent, so it shou...

brg3466

@ Sob, thank you so much ! I finally get the internet through !!! I connected the hAP lite (hereafter called hAP1) to RB3011 directly and it get internet, then I connected it back to the Study wallplate socket, no internet. then I recalled I used another hAP ( hereafter called hAP2) behind the wall ...

brg3466

@ 2frogs
Thank you for the explanation ! I will try it to see if different.

brg3466

@2frogs
Any reason for doing this ? I thought it is the same , the other end of the cable behind the wall goes to lan port of 3011, I think hap is directly connected to 3011 lan port in this way.

brg3466

@anav
have you tried with the 2nd router with default settings ? Did you get
Internet ?

The weird thing is if I replace RB3011 with hAP ( default configuration) , I can get internet.

brg3466

Hi all, NO LUCK ! What I did is to reset the configuration to factory settings, then change the IP address to 192.168.10.1/24 on the bridge and change the default dhcp pool to 192.168.10.10-192.168.10.254 .... Herebelow are the settings, I think I didn't miss anything. # jan/02/1970 00:02:35 by Rout...

brg3466

Hi all,
Really appreciated your great help !

I will reset the hAP lite to default configuration and do it over again. i.e change the IP pool , LAN address and the DNS accordingly. See if it will work.
Will let you know in half an hour.

Thanks again !

brg3466

@CZFan: There's DHCP client on WAN and default masquerade. You can argue that it's not the best config, but it should work. @brg3466: Try also: - "tracert 8.8.8.8" from laptop - "/tool traceroute 8.8.8.8" from router - "/ip dhcp-client print", "/ip address print&q...

brg3466

@sob
my laptop has 8.8.8.8 as dns server (use ipconfig/all)
and ping 8.8.8.8 will not get through. " request timed out'

@CZfan
Could you elaborate a bit how to do it ?

brg3466

Hi Anav, thanks for simulating my situation. Do you get internet ? I tried Scenario # 3 again and even below #4 , but no luck. :-( I still cannot get internet. My laptop always shows ' The DNS name does not exist'. /ip dhcp-server network add address=192.168.10.0/24 comment=defconf dns-server=8.8.8....

brg3466

Many thanks !

I will set to Scenario #3. and reboot the 2nd router and restart my laptop to see what happens !

Will keep you informed of the result !
Cheers !

brg3466

Hi both, I appreciated your fast response and help ! I am a bit confused. This goes back to the scenario 1. If you look back the first config rsc file I posted, it is what you suggested now. Scenario #1 /ip dhcp-server network add address=192.168.10.0/24 comment=defconf gateway=192.168.10.1 /ip dns ...

brg3466

/ip address add address=192.168.10.1/24 comment=defconf interface=ether2 network=192.168.10.0 This should be on bridge, but it's not the problem. /ip dhcp-server network add address=192.168.10.0/24 comment=defconf gateway=192.168.10.1 This needs dns-server=192.168.10.1 to give DNS resolver to clien...

brg3466

Have a look at this topic . If you don't find the answer there, come back. Have a look at this topic . If you don't find the answer there, come back. Hi Sindy, Thank you for the help. Looks like the linked topic has the same issue as me. I will look throough carefully and see if I can solve it with...

brg3466

Thank you so much for the help ! I double checked the settings: check that you have wan port. - Ethernet cable from wallplate to WAN port of hAP lite. check that you have a default GW and ip to wan port. - It is default setting, so there is DHCP client on WAN port, and I can see that hAP lite got a ...

brg3466

Hi all, My house has a main router RB3011 and wired from LAN Port to different rooms. So every room has internet access. The network is 192.168.88.0/24. Now at my Study, I want to have a different network 192.168.10.0/24. I plug the ethernet cable from wallplate to hAP lite WAN port, setting the mod...

brg3466

do you have anything connected to your router, say , a NAS. If you key in the IP address of your NAS after the VPN is established, do you see the NAS log in screen ?

brg3466

Hello everyone, I am a newbie on Mikrotik. In my house, I have a RB750G ( 192.168.88.1) as the router and have 2 hAP lite as wireless AP ( 192.168.88.2, 192.168.888.3) + one NAS (192.168.88.4) connected to the LAN port of RB750G. I set up the L2TP/IPsec VPN in order to remotely access my home networ...

brg3466

Good to see some new products !

Would like to know if any of below are in the pipeline :
- CAP AC
- MU- MIMO AP

Thank you !

brg3466

thank you ,hgonzale ! I think I used the L2TP/IPsec in the router. What puzzled me is that I can connect laptop to the L2TP server, only iPhone cannot connect to the server. I don't know what mistake I made in the setup of the server in the router, or I just made some mistakes in the setup on the iP...

brg3466

Hi everyone, I have a Mikrotik 3011 and set up the L2TP server on 3011 recently. My laptop (windows 10) can successfully connect to the L2TP server but my iPhone cannot. On the iPhone, there is only 3 types of VPN you can choose, IKEv2, IPsec, L2TP, so I pick the L2TP. But it always shows " The...

brg3466

Hi everyone, I recently installied a linksys MODEM DPC3008 for Comcast cable internet. I can get internet if I have my laptop directly wired to modem. But if I add a router (RB750Gr2) connected to the modem , there is no internet. I logged on to the 750, and found the router didn't get WAN IP addres...

brg3466

Have you checked what I wrote before??

I checked and set the DNS same as the first layer router, but it still doesn't work. Any suggestion ?

brg3466

Hi， I usually only update the first router and didn't care too much for the second layer ones. Since you mentioned, I tried. You are right ! I have the same issue. The second layer routers cannot update the firmware.

brg3466

Hi, I don't quite understand "cannot look for update on the Internet" but I have more or less the same set up for your info. I have the first router , and then 3 hAP , as the second layer router , connected to the first one by cable. What I do is to turn off DHCP on the second layer router...

brg3466

Hi Normis, I have tried your way and it worked when I wanted to set the guest wifi. But recently, I used 2 hAP lite as the access point only and connected them to my Comcast gateway ( modem/router combo), in the quick set , I also tried to set guest wifi . But there is no internet, you can only see ...

brg3466

Hi everyone, I have a problem with the set up of guest wifi : - I have 3 RB941-2nD (hAP lite 2.4G) connected to my Comcast gateway (modem/router combo , IP address 10.0.0.1) and put in different rooms in my house - I changed the IP address of hAPs to 10.0.0.2, 10.0.0.3, 10.0.0.4 respectively and tur...

Search found 189 matches