Community discussions

Search found 32 matches

by Anastasia
Sun Mar 31, 2019 7:20 pm
Forum: General
Topic: 4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]
Replies: 5
Views: 568

Re: 4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]

the problem is solved. all IPv4 traffic passes through the IPv6 tunnel. Client: /interface ipipv6 add local-address=2600::2 name=ipipv6-tunnel remote-address=2600::1 /ip address add address=192.168.0.2 interface=ipipv6-tunnel network=192.168.0.1 /ip firewall nat add action=masquerade chain=srcnat ou...
by Anastasia
Sun Mar 31, 2019 7:06 pm
Forum: General
Topic: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]
Replies: 11
Views: 807

Re: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]

Did you tried enable router advertisements? /ipv6 settings set accept-router-advertisements=yes yes, enable. The problem is not lack of dhcp (personally I prefer manual static config, because unlike with dhcp, it's not so easy to change anytime ISP feels like it, so it's really static), but the lac...
by Anastasia
Tue Mar 26, 2019 3:57 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 18629

Re: v6.44.1 [stable] is released!

Yep, but you have hAP AC Lite, not hAP Lite. In hAP Lite, there's no "flash" dir and only 32M RAM (6M free for me - definitely not enough to keep an upgrade files). Нi! You should try online upgrade (delete all what you can from Files + 15-16 MB should be in RAM) - and it should work. 1) System => ...
by Anastasia
Sun Mar 24, 2019 3:14 pm
Forum: General
Topic: 4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]
Replies: 5
Views: 568

Re: 4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]

Could be "/interface ipipv6", it can transport IPv4 over IPv6, but I can't say for sure if it's the exact thing from that RFC.
I can not find this item, where did you get it? show me the picture please
by Anastasia
Sat Mar 23, 2019 9:02 pm
Forum: General
Topic: 4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]
Replies: 5
Views: 568

4in6 - RFC 2473 support? (IPv4 traffic over an IPv6 tunnel) [SOLVED]

Do you have 4in6 RFC 2473 support https://tools.ietf.org/html/rfc2473. 4in6 uses tunneling to encapsulate IPv4 traffic over an IPv6 tunnel.
if possible, give instructions - how to do it correctly?
by Anastasia
Fri Mar 22, 2019 7:37 pm
Forum: General
Topic: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]
Replies: 11
Views: 807

Re: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]

My ISP refused to support DHCP. I can't use IPv6 yet. I do not want to tune everything by hand without automatic. Addresses change constantly and I need to constantly change the settings, it is not convenient. I'll wait until the ISP turns on DHCP support for IPv6, it will probably be in a couple of...
by Anastasia
Sun Mar 17, 2019 4:10 pm
Forum: General
Topic: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]
Replies: 11
Views: 807

Re: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]

My provider gives a /56 per client, using prefix delegation. All I had to do is to add a ipv6 dhcp-client add add-default-route=yes interface=ether1 pool-name=mypool request=prefix to get the /56. If it does not work with your provider, try "request=address" After you get a prefix you can get your ...
by Anastasia
Sat Mar 16, 2019 9:47 pm
Forum: General
Topic: Getting IPv6 only through SLAAC (without DHCP) [SOLVED]
Replies: 11
Views: 807

Getting IPv6 only through SLAAC (without DHCP) [SOLVED]

My ISP provide IPv6 addresses only through SLAAC (without DHCP).

Does Mikrotik support getting an address and prefix only via SLAAC or not?

If support exist - how to set up address searching without DHCP?
Please give me any instructions, I can't found nothing useful. :(
by Anastasia
Mon Mar 11, 2019 9:10 pm
Forum: General
Topic: [Feature request] Wireguard
Replies: 94
Views: 22807

Re: [Feature request] Wireguard

+1
it will soon be added to the linux kernel and it will become the VPN standard
by Anastasia
Thu Mar 07, 2019 10:47 pm
Forum: General
Topic: IPsec speed test encryption algorithms
Replies: 1
Views: 213

IPsec speed test encryption algorithms

I configured the connection between two computers through two Microtics (951Ui-2HnD) using L2TP / IPsec. But low speed of about 27 Mbit / s. :( Settings for channel: AES-128-CBC without HMAC (no md5, no sha1 ...) MTU: 1400. may need to use different values to a higher speed? How in Mikrotik to test ...
by Anastasia
Wed Feb 06, 2019 4:35 pm
Forum: Announcements
Topic: v6.43.11 [stable] is released!
Replies: 79
Views: 11968

Re: v6.43.11 [stable] is released!

IPsec settings are not saved and are reset. If you open through winbox when you log in IPsec - > Peers in one of the settings, the certificate settings are reset and does not save. I change the settings and then after a while they are reset again. when opened in winbox, it shines blue as if I had ch...
by Anastasia
Mon Jan 28, 2019 3:28 pm
Forum: General
Topic: [Feature Request] ChaCha20-Poly1305
Replies: 0
Views: 362

[Feature Request] ChaCha20-Poly1305

Add encryption and signature verification algorithm ChaCha20-Poly1305 . This algorithm is faster than AES128-CBC with software implementation without hardware acceleration. :o Google uses this algorithm everywhere, it means that there is a future behind this algorithm. Such a big company can not be ...
by Anastasia
Mon Jan 28, 2019 3:06 pm
Forum: General
Topic: Feature Request: Ed25519 SSH keys
Replies: 4
Views: 2178

Re: Feature Request: Ed25519 SSH keys

+1 add support Ed25519.
by Anastasia
Sat Jan 26, 2019 10:23 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33845

Re: v6.43.8 [stable] is released!

Bug 2 if you use https to connect (together with the certificate), sometimes there are delays of 3..5 seconds when opening various settings. all open quickly but then go to what that tab to view the settings and there is a delay for 3..5 seconds. nothing shows for 3..5 seconds. another problem with ...
by Anastasia
Sat Jan 26, 2019 8:23 pm
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 169
Views: 33845

Re: v6.43.8 [stable] is released!

bug. I choose in settings "IP.IPsec.Peers " certificates for the server and remote server. But after some time, the certificates disappear and become "none". I use the method: rsa-signature-hybrid. why does the certificate disappear? Sometimes it happens that the server and the remote server - certi...
by Anastasia
Sat Jan 26, 2019 6:35 pm
Forum: Beginner Basics
Topic: SSTP VPN speed is too slow between MT router and client
Replies: 3
Views: 681

Re: SSTP VPN speed is too slow between MT router and client

if you do not have hardware support for encryption AES, you will not get much speed.
by Anastasia
Sat Jan 26, 2019 6:23 pm
Forum: General
Topic: SSTP: AES-GCM support, granular control of cipher suites.
Replies: 8
Views: 3559

Re: SSTP: AES-GCM support, granular control of cipher suites.

add the ability to select the encryption mode to the settings: aes-128 cbc, aes-256 cbc, blowfish, twofish, aes-128 ctr, aes-256 ctr, aes-128 gcm, aes-256 gcm and MPPE 128
by Anastasia
Sat Jan 26, 2019 6:19 pm
Forum: General
Topic: Troubleshooting SSTP client (dis)connection
Replies: 1
Views: 292

Re: Troubleshooting SSTP client (dis)connection

check the certificates and the firewall. maybe something's not right.
by Anastasia
Sat Jan 26, 2019 6:10 pm
Forum: General
Topic: Drop forward rules NOT worked between devices connected via Wi-Fi
Replies: 10
Views: 805

Re: Drop forward rules NOT worked between devices connected via Wi-Fi

I found a possible problem. in settings Wireless -> Access_List are the leaf access. Where indicated in the hand value of the Forwarding = Yes. if you remove the check mark (Forwarding = No), then everything is fine, the data exchange stops. Seems the problem solved.
by Anastasia
Tue Jan 22, 2019 11:17 pm
Forum: General
Topic: Drop forward rules NOT worked between devices connected via Wi-Fi
Replies: 10
Views: 805

Re: Drop forward rules NOT worked between devices connected via Wi-Fi

address 192.168.1.11 in both wired and wireless case? the address is definitely the same. I installed and checked it with my hands. /export hide=sensitive file=yourlatestconfig (shows up in files, download to PC, open in notepad++ cut and paste here and apply code parenthesis from above text modifi...
by Anastasia
Mon Jan 21, 2019 9:51 pm
Forum: General
Topic: How to use the MPPE 128 encryption algorithm in SSTP Mikrotik
Replies: 0
Views: 280

How to use the MPPE 128 encryption algorithm in SSTP Mikrotik

The default encryption algorithm for SSTP - AES 256. How to change it?
Need MPPE 128 encryption algorithm for SSTP Mikrotik.
This algorithm is supported, but I can't choose it. :(
by Anastasia
Mon Jan 21, 2019 7:16 pm
Forum: General
Topic: Drop forward rules NOT worked between devices connected via Wi-Fi
Replies: 10
Views: 805

Re: Drop forward rules NOT worked between devices connected via Wi-Fi

All settings default. These are Wi-fi settings that you asked: /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \ arp=reply-only arp-timeout=23h band=2ghz-g/n basic-rates-a/g=\ 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b="" \ chan...
by Anastasia
Mon Jan 21, 2019 6:29 pm
Forum: General
Topic: Drop forward rules NOT worked between devices connected via Wi-Fi
Replies: 10
Views: 805

Drop forward rules NOT worked between devices connected via Wi-Fi

Example. My Mikrotik-router Model 951Ui-2HnD RouterOS v6.43.8 (stable) (192.168.1.1) with Firewall rules (IP > Firewall > Filter Rules): /ip firewall filter add action=drop chain=forward dst-address=192.168.1.11 src-address=192.168.1.12 add action=drop chain=forward dst-address=192.168.1.12 src-addr...
by Anastasia
Sun Jan 20, 2019 6:52 pm
Forum: General
Topic: Very high sector rewrites
Replies: 3
Views: 659

Re: Very high sector rewrites

in the old version there was no record at all. in the new version began especially wear and tear on the drive (planned obsolescence). turn off permanent recording to disk.
by Anastasia
Sun Jan 20, 2019 6:41 pm
Forum: RouterBOARD hardware
Topic: increase value sectors write since reboot in ROS 6.36.2
Replies: 5
Views: 1424

Re: increase value sectors write since reboot in ROS 6.36.2

The problem is relevant. the problem is not solved.How to reduce writing to nand disk?
the new function for uniform wear of the disc is very harmful. how to turn it off?
---
use RouterOS v6.43.8 (stable)
by Anastasia
Sat Sep 15, 2018 8:49 pm
Forum: General
Topic: DNScrypt / DNSsec
Replies: 2
Views: 1960

Re: DNScrypt / DNSsec

+1 for DNSSec.
by Anastasia
Sat Sep 15, 2018 8:43 pm
Forum: General
Topic: DNSSEC
Replies: 33
Views: 10319

Re: DNSSEC

+1 for DNSSec
how long will you do it? why so long?
by Anastasia
Sat Sep 15, 2018 8:41 pm
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 157
Views: 45675

Re: Feature request - DNSCrypt support...

+1 for DNSCrypt support
by Anastasia
Tue Jun 13, 2017 2:23 pm
Forum: Wireless Networking
Topic: New function. Turn on and turn off wi-fi through the console
Replies: 4
Views: 1257

Re: New function. Turn on and turn off wi-fi through the console

You can allow the user to change all settings or prevent all settings from changing. There is no way to change the wi-fi on and off settings only. Where to write to make this function?
by Anastasia
Sat Jun 10, 2017 11:57 pm
Forum: Wireless Networking
Topic: New function. Turn on and turn off wi-fi through the console
Replies: 4
Views: 1257

New function. Turn on and turn off wi-fi through the console

Add a new item to the groups: Only turn on and turn off wi-fi . Analogue reboot . Now to make it possible to enable wi-fi, you need to add a user to the group for which you can write settings. But this user has the ability to record any settings. It's not safe. :-( Since On the mikrotik there is no ...
by Anastasia
Wed Oct 28, 2015 7:30 pm
Forum: General
Topic: v6.33rc release candidate (final testing)
Replies: 203
Views: 37334

Re: v6.33rc release candidate (final testing)

which version is best installed on the router (MikroTik RB951Ui-2HnD). I need a stable job, once set up and forget. It is the current version (6.33RC36) stable and reliable? or better put 6.32.3 :?: :)