MikroTik

colanderman

Arggg… just hit this in CAPsMAN in 6.40.4, took two nights to debug. Glad to find this thread here.

MT, please put the duplicate MAC check in CAPsMAN as well!! Would have saved me a sleepless night lol.

colanderman

Confirmed, same problem here on a brand-new CSS106/RB260GSP.

colanderman

It shows up for me in 6.39.2. Maybe you skinned your webfig to hide it? Never touched the skinning interface. When I clicked on "Design Skin" the MPLS menu still doesn't show up. (Of course, what I really want is ap-bridge mode under CAPsMAN, but today that is not possible, leading me to ...

colanderman

I swear I saw it a long time ago. I just enabled MPLS again and it doesn't show up in WebFig:

It shows up in the terminal… is it not available in WebFig or is this a bug?

colanderman

wAP ac supports ceiling installs as well: https://routerboard.com/RBwAPG-5HacT2HnD but is a bit bigger than cAP lite. Of course it is more $$ due to ac

colanderman

Hi, I discovered that CAPsMAN in manager forwarding mode fragments traffic with full-frame MTU above 1200, even though L3 MTU of my LAN is 1500 (plenty of room for tunnel overhead). Since my (IPv6) WAN has L3 MTU 1280, I want to increase the CAPsMAN MTU to 1298 to avoid fragmentation of all WAN pack...

colanderman

I think it is not normal when access point shows me data rates 54 mbs tx and 72 mbx rx. Does that mean that my smartphone download conects in 802.11g and upload in 802.11n ? How is that posible ? 802.11g and n are similar enough that radios will just as happily select a G rate as an N rate. Nothing...

colanderman

Hi, today I found a major bug with the switch chip. (I'm on a hAP AC). I have ether2-5 configured as a switch group, with various VLANs (including 0/unmanaged). ether1 (WAN) is not switched; but I have configured it to only accept untagged traffic (VLAN 0) with vlan-mode=secure. Unfortunately this r...

colanderman

The 5m status looks perfect to me, I am also surprised you are not seeing higher throughput in that case. But if there is another AP using that channel, you will not see that reflected in the status. I am not sure what the wireless regulations are where you are (Berlin?), or for the country you have...

colanderman

What signal levels are you seeing? What CCQ are you seeing during data transfer? Are there other nearby APs using any frequencies in the range you have selected? Even one wall can make achieving gigabit speeds difficult. One thing I have found to help is setting amsdu-limit=2048 (instead of the defa...

colanderman

Thanks for the report, glad to know setup-repeater works.

colanderman

Simply put how do I provide wi-fi roaming and what is the best way to enable the best performance and FUTURE PROOF my home nework and its overall ethernet and wi-fi capability. Mikrotiks support roaming "fine" as-is. (At least as well as anything else in the price range.) Handoff is less ...

colanderman

Unfortunately a true wireless bridge between vendors is not possible. This is a shortcoming of the WDS (wireless bridging) spec. Your options are: * use mode=station-pseudobridge (masquerades all clients on MT side as MT MAC; IPv4 only) * set MT as AP, add virtual client on Ubiquity (MT won't be abl...

colanderman

Thank you for your replies! But i still can't understand why I can access nated ports in my wired connected pc from laptop via wifi or from vpn without hairpining? Because those are forced to flow through the router (and thus NAT) by the bridge with use-ip-firewall=yes. Whereas wired->wired connect...

colanderman

I don't think WiFi can carry VLAN tags. You need to make a Virtual AP for each VLAN: http://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless

colanderman

BTW if I enable masquerade rule all my connections from lan to wan_ip "come" with source-ip of router. How to avoid this? In Linux it works with a few simple rules. Hairpin nat is like a "duct tape". Yes, this is how hairpinning works. Replies to client which made NATted connect...

colanderman

/interface bridge settings set use-ip-firewall=yes Turn this off unless you have a good reason (off is the default). When this is on, it sends all bridged traffic (i.e., wlan→wired) through IP firewall (thus NAT). So replies to your NATted connections from the wlan pass back through the router and ...

colanderman

But in my problem it is more for traffic shaping. I can't answer, for the life of me, how to avoid filtering my own traffic speed from my LAN that comes through WAN IP that goes to my own internal server. Queues should be on WAN interface only, not on other interfaces. Since hairpin routed packets ...

colanderman

You will not be able to use 192.168.1.100 as gateway, unless you can assign 10.x.x.x address to modem. (Else modem won't know to send replies back to you.) So you will have to pick an address to assign to ROS to use as gateway. Easiest is to use a 10.x.x.x address (say 10.1.1.2), else AP will have t...

colanderman

For a longer time 10min. it looked good an then a lot of these errors occour before the gardenhouse gets disconnected... D4:CA:6D:14:F5:73@2,4GHz: disconnected, management-protection failure Can you post your TX/RX signal levels on the garden-neighbor link? (Found in Wireless Registration) Also if ...

colanderman

It sounds like the garden unit has only one antenna, but you have both chains enabled on that interface. You should disable the unused chain (I think weird RF stuff can happen otherwise). Likewise, your neighbor's unit actually does have two 2.4 GHz antennas (being an hAP ac lite), but you have only...

colanderman

Are there any obstructions? If not you should probably be fine with just a single OmniTIK. Free-space path loss at 100m is 87 dB. Say the laptop has a 10 dBm (10 mW) transmitter with a 2 dBi antenna. The OmniTIK has a 7.5 dBm antenna. That puts you at 10+2-87+7.5 = -68 dBm, which while only a bit ab...

colanderman

OK that makes sense. Of course ap-bridge won't scan. Thanks.

colanderman

I have been running a wireless bridge with one AP in "ap-bridge" mode and the other in "wds-slave" mode. But today I discovered that setting both APs as "ap-bridge" seems to work too. What am I missing, what additional benefit does "wds-slave" mode give? Is th...

colanderman

Yes, clients will be able to access each other across the link. If you have more than one subnet on the MT side, you will need to add all the corresponding routes to the DD-WRT. The 0.0.0.0/0 route should be sufficient to route everything else from the MT to the DD-WRT. I'm not sure about multi/broa...

colanderman

Ah OK, thanks. And could I get a brief explanation of the from/destination in these routes, and what these accomplish in "real world" terms? Once packets reach the Mikrotik, since the virtual client interface (connected to the other AP) and the AP interface are not bridged, the MT needs t...

colanderman

Thanks @colanderman for the details. Then set up appropriate routes on main (AP) interface What is achieved with this step? Ah sorry I got those backward. Edited my post to correct. You need routes on the client interface (not AP) so MT knows to forward traffic across it. Of course these routes can...

colanderman

And just in case this whole setup doesn't work right (I can't test it because my Mikrotik hasn't arrived yet), what is the Mikrotik term for a simple repeater? I think the closest is to set up MT in ap-bridge mode, and add a virtual client in station mode. SSID of AP should be different than the li...

colanderman

So if I use "station-pseudobridge" would that work with the DHCP server on the Tomato AP? Can it still see different devices and assign them an IP? I think I see how DHCP *could* work (after all, DHCP packet carries client MAC, so it can differ from source MAC) but it does not surprise me...

colanderman

Thanks for the explanation. And do all protocols work over this bridge, assuming they run on IPv4? I seem to have read somewhere that certain protocols might not work. I've never used it so I'm not sure. It *should* work with most IPv4 protocols, since they *shouldn't* care about their MAC address ...

colanderman

So, I guess I need more explanation on what a "pseudo station bridge" is, and how it works. Will it work with a non-RouterOS devices as the AP? And it will it allow clients to connect both wireless and via ethernet on both ends and still be able to talk to each other? "Pseudo bridge&...

colanderman

Has anyone tried to power this via USB port on a laptop? Such ports can only provide 500mw but this says 3500mw maximum I'd like to have one of these in my laptop bag (ideally the normal mAP with its 2 ports to function as a USB powered switch/router) mAP works fine for me powered by my MacBook Pro.

colanderman

I previously used "dynamic" and had latency and loop issues (with only two APs!). I read something from Mikrotik that said "use dynamic-mesh, it is better" and that fixed my problem. But I do not understand the difference, only that mesh worked better.

colanderman

colanderman - Before you connect to router go to Tools/Clear Cache on Winbox loader and try to test this afterwards.

Oh sorry! I mean in webfig, not winbox.

colanderman

colanderman - Are you sure that Advanced Mode is enabled on wireless interface?

Yes, Advanced Mode or not, these fields do not appear.

colanderman

On device QRT AC, winbox 3.10, ROS 6.38 - 6.38.1 and 6.39rc19 release i don't see settings for HT MCS on wlan interface.

Also, radio name and regulatory domain disappeared in 6.38, and tx power table is missing for 5 GHz.

colanderman

Might be worth a try, or not? O:) Given that your house is wired, sounds great! I would do the same if mine was. (Old apartment so no hope to change that…) 5 GHz is "nice" (for gigabit access close to AP) but not really necessary with such little interference from neighbors as -80 dBm; I ...

colanderman

Between 1.5 dBm and 2.5 dBm gain there is not much difference. Consider that you want around 10 dBm of "headroom" and you'll need another 12 dBm or so to get 100 Mbps signal, and wall losses can be around 10 dBm or so. So +/- 1 dBm is almost inconsequential. I would get a pair of cAP lites...

colanderman

The /64 I send to a pool and that pool is used by the DHCPv6 Server in the RB750. I also get a /64 from my ISP, but I don't use DHCPv6 server. Rather I use ND: /ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=dhcp6 request=prefix /ipv6 address add from-pool=dhcp6 interface=bri...

colanderman

This is what worked for me:

https://blog.a2o.si/2015/08/11/mikrotik ... ble-https/

Yes, for me too (on 6.37.3) although I had to set key-usage=tls-server when creating the TLS certificate.

colanderman

Minor WebFig bug: AMPDU and Guard Interval do not show up in Advanced Mode when 2GHz-G/N is selected.

colanderman

*) bridge - fixed filter Ingress Priority option (broken in v6.38rc16); I haven't been able to get bridge filtering on Ingress Priority to work since at least 6.25 (e.g. while ingress-priority=!0 matches packets in IP firewall, it matches nothing in bridge firewall; and new-priority=from-ingress do...

colanderman

At the risk of straying off-topic… We are having a lot of problems here with Mikrotik Queues X Windows 10 Updates. When a customer have one PC downloading Windows 10 updates, his queue is 100% used, most of the time is impossible to do anything else, even open an web page. I have fought this problem...

colanderman

Yes, I encounter this in 5.25. Disappointed that it's still present in 6.29. Bug seems to be that the prefix isn't released to the Pool when the Address is de/reconfigured. Disable/reenable DHCPv6 Client while Address is enabled also solves the issue (since this clears the Pool and makes the prefix ...

Search found 44 matches