Community discussions

MikroTik App

Search found 58 matches

by aboiles
Wed Dec 22, 2021 2:27 am
Forum: Announcements
Topic: v7.2rc1 is released!
Replies: 240
Views: 159975

Re: v7.2rc1 is released!

7.2rc1 killed L2 connection on all my SFP+ fiber modules on a CRS317 to servers and switches. DAC cable works though. Downgrade to 7.1.1 resolved it.
Same here but only on a CRS317-1G-16S+. worked fine on both CRS309-1G-8S+ and CRS328-24P-4S+.
All CRS units back to 7.1.1

Opened ticket SUP-69682
by aboiles
Mon Jul 05, 2021 6:27 pm
Forum: Announcements
Topic: v6.49beta [testing] is released!
Replies: 171
Views: 89743

(update) CRS317-1G-16S+ reboot loop 6.49beta54

MikroTik support #[SUP-54018]: CRS317-1G-16S+ reboot loop 6.49beta54 from 6.48.3. kernel failure- out of memory detected. reverted to 6.48.3 all good-no errors, installed 6.49beta27- all good-no errors. installed 6.49beta54 CRS317-1G-16S+ stabilized (so far) after 3 reboots 6.49beta54 from 6.49beta2...
by aboiles
Tue Dec 15, 2020 5:05 pm
Forum: RouterOS beta
Topic: v7.1beta3 [development] is released!
Replies: 261
Views: 79159

Re: v7.1beta3 [development] is released!

On the subject of export-
On my RB4011 it does complete, it just takes an average of 21 minutes.
The only errors on the export are:
#error exporting /routing/bfd/authentication
#error exporting /routing/bfd/configuration
But export terse compact file=$fileName does finally complete.
by aboiles
Fri Apr 17, 2020 1:23 pm
Forum: General
Topic: SPF+ long distance cables
Replies: 13
Views: 4268

Re: SPF+ long distance cables

Don't know about where you are shipping to, but for me it's free shipping.
They could be fake, but I have purchased quite a few Mellanox and Arista cables on ebay and they have all been (so far) the real deal.
by aboiles
Fri Apr 17, 2020 7:31 am
Forum: General
Topic: SPF+ long distance cables
Replies: 13
Views: 4268

Re: SPF+ long distance cables

mbovenka,
cisco switches, intel cards and any other devices that are finicky about the sfp+ modules.
I do keep a few for just those reasons.
And when I posted the link, the finstars were $16.00 US (now $20). Hard to beat the first or the current price.
by aboiles
Thu Apr 16, 2020 7:28 am
Forum: General
Topic: SPF+ long distance cables
Replies: 13
Views: 4268

Re: SPF+ long distance cables

If the run does not have any major obstacles.
I have run active dac's up to 20 meters.
Here is a 15 M cable on ebay.
https://www.ebay.com/itm/New-Finisar-FC ... 3080916801
by aboiles
Wed Mar 25, 2020 1:56 am
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 179765

Re: v6.47beta [testing] is released!

I was receiving way too may errors.
Also the connections slowed way down when the router was reporting:
dns,error DoH max queue size reached, dropping query

I removed my DoH configurations, back to normal.
by aboiles
Sun Mar 22, 2020 5:55 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 179765

Re: v6.47beta [testing] is released!

Seeing DoH intermittent errors every few hours.
DoH is still working though, does anyone know if these errors are normal for DoH (using cloudflare).

Mar/22/2020 05:05:53 dns,error DoH connection error: Idle timeout - waiting data
Mar/22/2020 05:06:02 dns,error DoH not OK HTTP response: 504:
by aboiles
Fri Mar 20, 2020 10:45 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 179765

Re: v6.47beta [testing] is released!

Without the last one I was getting intermittent errors, with it I don't
by aboiles
Fri Mar 20, 2020 10:37 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 179765

Re: v6.47beta [testing] is released!

Changing to a ipv6 address breaks the DoH.
https://[2606:4700:4700::1111]/dns-query
Mar/20/2020 13:33:33 dns,error DoH connection error: resolving error
Mar/20/2020 13:33:35 dns,error DoH connection error: resolving error
Mar/20/2020 13:33:37 dns,error DoH connection error: resolving error
by aboiles
Fri Mar 20, 2020 10:26 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 179765

Re: v6.47beta [testing] is released!

For CloudFlare DoH. If exporting from chrome, export Cryptographic Message Syntax (p7b) and make sure to check the Include all certificates in the certification path. When you import the cert int RouterOS you should have 3 entries. DigiCert Global Root CA DigiCert ECC Secure Server CA cloudflare-dns...
by aboiles
Sat Oct 26, 2019 9:49 am
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 150
Views: 106184

Re: v6.46beta [testing] is released!

RoMON is still not working since v6.46beta34. on RouterBOARD 750G r3 mmips.
by aboiles
Wed Oct 09, 2019 7:31 am
Forum: Announcements
Topic: v6.46beta [testing] is released!
Replies: 150
Views: 106184

Re: v6.46beta [testing] is released!

RoMon does not work on .46b44. reverting to 46b38 it passes the connection.
Only tested on hEX (mmips)
by aboiles
Sat Oct 05, 2019 6:50 pm
Forum: Beginner Basics
Topic: Mikrotik + Cisco via IPsec Tunnel. Failed to pre-process ph2 packet
Replies: 4
Views: 4442

Re: Mikrotik + Cisco via IPsec Tunnel. Failed to pre-process ph2 packet

Can you check your configurations, the only thing I see that might be grong is the lifetimes.
Mikrotik 30min, Cisco 1 day.
by aboiles
Fri Oct 04, 2019 5:23 pm
Forum: Beginner Basics
Topic: Mikrotik + Cisco via IPsec Tunnel. Failed to pre-process ph2 packet
Replies: 4
Views: 4442

Re: Mikrotik + Cisco via IPsec Tunnel. Failed to pre-process ph2 packet

Try this and see if it helps.
I have had to use it for vpn's with other non-mikrotik routers/firewalls.

/ip firewall nat
add action=accept chain=srcnat protocol=udp src-port=500,4500
by aboiles
Fri Sep 27, 2019 6:57 pm
Forum: RouterOS beta
Topic: RouterOS v7.0beta2 bug fund
Replies: 9
Views: 6622

Re: RouterOS v7.0beta2 bug fund

SFP+ only works if mtu is set to 1500. Tried intel, fiberstore and ubiquiti modules. Router name: RB4011 Firmware: 6.46beta44 RouterOS: 6.46beta44 (testing) Licence level: 5 Board name: RB4011iGS+5HacQ2HnD Architecture: arm Memory: 1073741824 /interface ethernet set [ find default-name=sfp-sfpplus1 ...
by aboiles
Wed Sep 11, 2019 10:31 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

Re: /tool e-mail

no change in results,
without tls - Invalid From
with tls - TLS handshake failed.
Do you want a supout sent to support?
by aboiles
Wed Sep 11, 2019 10:21 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

Re: /tool e-mail

[admin@RB4011] > /tool e-mail export hide-sensitive
# sep/11/2019 00:20:25 by RouterOS 7.0beta1
# software id = 0BHM-Y5B5
#
# model = RB4011iGS+5HacQ2HnD
# serial number = 96B00AAFF9D5
/tool e-mail
set address=smtp.live.com from=antoniob@msn.com user=antoniob@msn.com
by aboiles
Wed Sep 11, 2019 9:59 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

Re: /tool e-mail

Same error with from or without.
Same error with user and password.
Also if Start TLS is set to yes, you get TLS handshake failed.
by aboiles
Wed Sep 11, 2019 9:46 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

Re: /tool e-mail

So under v7 it no longer uses the settings saved in /tool e-mail?
All scripts now have to use user and password?
by aboiles
Wed Sep 11, 2019 9:27 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

Re: /tool e-mail

send from=antoniob@msn.com to=aboiles@hotmail.com subject="email test" body="email test"
works in 6.46b38 not in v7 though
by aboiles
Wed Sep 11, 2019 2:33 am
Forum: RouterOS beta
Topic: /tool e-mail
Replies: 14
Views: 8301

/tool e-mail

1. routeros-7.0beta1-arm.npk
2. RB4011iGS+5HacQ2HnD-IN
3. /tool e-mail Error sending email <>:invalid From address.
by aboiles
Sat Nov 24, 2018 10:04 pm
Forum: General
Topic: IPSEC VPN Between 3 Sites [SOLVED]
Replies: 13
Views: 5428

Re: IPSEC VPN Between 3 Sites [SOLVED]

You can try this and see if it helps, make changes as required. SITE B router /ip firewall nat add action=accept chain=srcnat comment="VPN to C" dst-address=172.21.0.0/16 src-address=192.168.20.0/24 /ip route add check-gateway=arp comment="VPN to C" distance=2 dst-address=172.21....
by aboiles
Sat Aug 04, 2018 6:42 pm
Forum: Scripting
Topic: Blacklist Filter (Development Topic)
Replies: 188
Views: 61939

Re: Blacklist Filter (Development Topic)

Script is no longer functioning, no updates since last night.
by aboiles
Thu Aug 02, 2018 10:35 am
Forum: Scripting
Topic: Blacklist Filter (Development Topic)
Replies: 188
Views: 61939

Re: Blacklist Filter (Development Topic)

[admin@CHR-O] > /tool fetch mode=https dst-path=/disk1/filters.rsc url="https://bl .mikrotikfilters.com/fetch.phppriority=3"; status: failed failure: closing connection: <404 Not Found> 35.236.78.203:443 (4) [admin@CHR-O] > /tool fetch mode=https dst-path=/disk1/filters.rsc url="https...
by aboiles
Wed May 23, 2018 6:57 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 222393

Re: v6.43rc [release candidate] is released!

what is the new password for a fresh install of chr.
admin- blank no longer works
by aboiles
Wed May 23, 2018 6:17 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 222393

Re: v6.43rc [release candidate] is released!

License error on prior chr versions with winbox 3.14rc1.
No issues with winbox 3.13
by aboiles
Tue Apr 24, 2018 10:21 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

Dave that sounds reasonable to me, could also be yearly subscriptions.
Say $50 yr 5 devices, $150 yr 15 devices.
by aboiles
Fri Apr 20, 2018 8:02 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 222393

Re: v6.43rc [release candidate] is released!

Tried to upgrade Hyper-V CHR from 6.42 to 6.43rc3 - FAILED No connection via winbox mac. Hyper-V terminal froze. Restored from backup, tied again - same result. Downloaded fresh CHR VHDX image. pasted configuration and nothing worked. started fresh, and the only issue I could find was the interfaces...
by aboiles
Wed Mar 14, 2018 6:44 pm
Forum: SwOS
Topic: CSS326 slow SFP+ speed
Replies: 24
Views: 15546

Re: CSS326 slow SFP+ speed

For us it's usually SMB, we have had to return to 2.3.
We thought 2.7 had fixed the issues of 2.5 and 2.6, but 2.7 drops to back crawling without any rhyme or reason, so we had to go back to 2.3.
by aboiles
Thu Nov 02, 2017 3:30 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

That is a working vpn, can you post a traceroute from one end point to another.
by aboiles
Wed Nov 01, 2017 4:31 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

I didn't use wireless,bridges and master port.
You said a vpn between two RB951G-2HND.
How are interfaces 2-5 configured and is there anything plugged in to those ports.
And can you please use winbox and let us know if the route is flagged green or not.
by aboiles
Wed Nov 01, 2017 4:26 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

Check out post viewtopic.php?f=2&t=127198
near the bottom.
by aboiles
Wed Nov 01, 2017 3:11 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

From what you have posted, this configuration should work. But please verify the info is correct for your 10.1.1.10 router. Reverse the info for the other router. Though it looks like you have your wireless enabled, are you running in master/slave or bridge mode on your ports? If you are running in ...
by aboiles
Tue Oct 31, 2017 5:30 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

under ip route in winfig is the route flagged green?
and you still can't ping the other routers lan ip address from your local router?

this is my normal setting if I need to work router to router on a site to site vpn.
by aboiles
Tue Oct 31, 2017 3:43 pm
Forum: General
Topic: Another one IPSEC topic
Replies: 22
Views: 3024

Re: Another one IPSEC topic

When all else fails on a vpn. I add a route. Try this and see. 10.1.1.20 /ip route add check-gateway=arp comment="VPN to ?" distance=2 dst-address=192.168.22.0/24 gateway=ether2 10.1.1.10 /ip route add check-gateway=arp comment="VPN to ?" distance=2 dst-address=192.168.44.0/24 ga...
by aboiles
Wed Jun 14, 2017 6:03 pm
Forum: Announcements
Topic: Newsletter 76
Replies: 49
Views: 27268

Re: Newsletter 76

I was hoping for news of the CRS328-24P-4S+RM.
Any info on release date?
by aboiles
Sat Jun 10, 2017 6:35 pm
Forum: RouterBOARD hardware
Topic: CSS326-24G-2S+ & active cooling
Replies: 23
Views: 19550

Re: CSS326-24G-2S+ & active cooling

I am interested in your modification, my CSS326 is usually running about 69-70c.
Please let me know your results.
by aboiles
Wed Jun 07, 2017 8:36 pm
Forum: Announcements
Topic: v6.40rc [release candidate] is released!
Replies: 231
Views: 77461

Re: v6.40rc [release candidate] is released!

Scheduler issue with v6.40 rc18. Tested and confirmed only on CHR. If the entry is set to run at startup with a recurrence, it will NOT run at all. If the same entry is set to ONLY run at startup, it runs correctly. If the same entry is set for recurrence ONLY, it runs correctly. Change it to run bo...
by aboiles
Thu Jun 01, 2017 8:27 am
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

Thanks Dave,
Script works great on the CHR now!
by aboiles
Wed May 31, 2017 8:47 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

Don't know Dave, I think it may have something to do with the software-id. I'm getting a blank for software-id from the chr's. [admin@router] > :put [/system resource get board-name] CHR [admin@router] > :put [/system resource get version] 6.40rc15 (testing) [admin@router] > :put [/system resource g...
by aboiles
Wed May 31, 2017 8:14 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

slightly modified the script by removing the extra spaces in the local info section and now have it running on a 2011UiAS-2HnD, 951G-2HnD and a CRS125-24G-1S-2HnD.
still fails on a CHR with the same error-All fields are required. Please update your script. dynamic.rsc
by aboiles
Wed May 31, 2017 6:16 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

tried both the auto installer - script ver 2017.5.2a
and the code ver 2017.5.30c.
Am still getting the All fields are required. Please update your script. dynamic.rsc
by aboiles
Wed May 31, 2017 5:36 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

Hello Dave,
The script has the ?, when pasted in terminal it disappears.
The log only has an entry of-
script error: expected command name (line 1 column 1)
The downloaded dynamic.rsc only has one line-
All fields are required. Please update your script.
by aboiles
Wed May 31, 2017 5:09 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 212125

Re: Blacklist Filter update script

Hello Dave, I am now getting an error when I run the script- url="https://mikrotikfilters.com/download.phpget=dynamic&model=$model&vers ion=$ver&memory=$memory&id=$name&ver=$scriptVer&softid=$softid"; status: failed failure: closing connection: <404 Not Found> 172.1...
by aboiles
Tue Mar 07, 2017 6:27 pm
Forum: Announcements
Topic: v6.39rc [release candidate] is released
Replies: 390
Views: 138562

Re: v6.39rc [release candidate] is released

CHR v6.39rc45 update error, the interfaces are missing.
console error- info failed: std failure: timeout (13)
system reboots at 16% when trying to run supout.

restored from backup (6.39rc41) and retried the package update, same results.
by aboiles
Thu Sep 29, 2016 12:22 am
Forum: General
Topic: IPSec connection established but network is not reachable
Replies: 12
Views: 5964

Re: IPSec connection established but network is not reachable

Since you have not posted at least you config, it makes it hard to help you. it could be your issues are firewall related, try these and see if they help. /ip firewall address-list add address=172.20.14.0/24 list=ipsec /ip firewall filter add action=fasttrack-connection chain=forward comment=FastTra...
by aboiles
Mon Sep 26, 2016 7:31 pm
Forum: General
Topic: IPSec connection established but network is not reachable
Replies: 12
Views: 5964

Re: IPSec connection established but network is not reachable

nexthop should have been 172.20.14.1, not your gateway.
please post both sides of the vpn if possible.
by aboiles
Fri Sep 23, 2016 5:28 pm
Forum: General
Topic: IPSec connection established but network is not reachable
Replies: 12
Views: 5964

Re: IPSec connection established but network is not reachable

can you post the output of-

/ip ipsec remote-peer print

/ip route check xxx.xxx.xxx.xxx (valid ip of a system on the the destination lan)
by aboiles
Fri Sep 23, 2016 2:55 am
Forum: General
Topic: IPSec connection established but network is not reachable
Replies: 12
Views: 5964

Re: IPSec connection established but network is not reachable

/ip firewall nat add action=accept chain=srcnat comment="VPN" dst-address=172.20.14.0/24 src-address=192.168.217.0/24 /ip route add check-gateway=arp comment="VPN" distance=2 dst-address=172.20.14.0/24 gateway= bridge (replace with your nomenclature) If it's configured correctly ...
by aboiles
Fri Jul 22, 2016 7:37 am
Forum: General
Topic: Correct implementation of RFC 1918 and/or RFC 3330
Replies: 1
Views: 927

Correct implementation of RFC 1918 and/or RFC 3330

I am currently blocking the private scopes via blackhole routes.
I just found out our ISP (Frontier FIOS) is routing some of the private scopes.
I am wondering if there is a correct way to implement these on a Mikrotik router.
by aboiles
Thu Feb 18, 2016 3:19 am
Forum: General
Topic: IPV6 internal configuration
Replies: 64
Views: 16158

Re: IPV6 internal configuration

They should not be the same network-

This XXX:XX:XXX in "XXX:XX:XXX" in 2001:XXX:XX:XXX::1 should be "XXX:XY:XXX" in 2001:XXX:XY:XXX::1

see the manual- http://wiki.mikrotik.com/wiki/Manual:My ... v6_Network
by aboiles
Wed Feb 17, 2016 7:19 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 579
Views: 274473

Re: Cloud Hosted Router

I am no longer able to update the CHR, /system license> print system-id: - level: p1 limited-upgrades:yes next-renewal-at: feb/21/2016 19:03:55 deadline-at: feb/16/2016 21:59:59 update purchased license, renewed from winbox and rebooted. system upgraded to 6.35rc11
by aboiles
Wed Feb 17, 2016 5:14 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 579
Views: 274473

Re: Cloud Hosted Router

I am no longer able to update the CHR,

/system license> print
system-id: -
level: p1
limited-upgrades:yes
next-renewal-at: feb/21/2016 19:03:55
deadline-at: feb/16/2016 21:59:59
by aboiles
Tue Feb 02, 2016 4:23 pm
Forum: Virtualization
Topic: Cloud Hosted Router
Replies: 579
Views: 274473

Re: Cloud Hosted Router

Server 2012R2 CHR as VM Router OS c6.35rc2 Microsoft-Windows-Hyper-V-VmSwitch EventID 27 Networking driver in chr loaded but has a different version from the server. Server version 5.0 Client version 3.2 (Virtual machine ID 59ECB3F6-B990-41F1-9013-786895557B5C). The device will work, but this is an ...
by aboiles
Fri Dec 04, 2015 7:44 pm
Forum: General
Topic: 6.34 release candidate version topic!
Replies: 200
Views: 66930

Re: 6.34 release candidate version topic!

RB2011UiAS-2HnD upgrade from 6.34rc12 to 6.34rc16 resulted in endless reboot. RB951G-2HnD upgrade from 6.34rc12 to 6.34rc16 worked correctly UPDATE-- RouterBOOT booter 3.24 RouterBoard 2011UiAS-2HnD CPU frequency: 600 MHz Memory speed: 200 MHz Memory size: 128 MiB NAND size: 128 MiB Press any key wi...
by aboiles
Mon Nov 16, 2015 7:08 pm
Forum: General
Topic: 6.34 release candidate version topic!
Replies: 200
Views: 66930

Re: 6.34 release candidate version topic!

6.34rc5 shows in the tracker page, but is not accessible.
Download still shows 6.34rc3 as the latest.
by aboiles
Sun Nov 08, 2015 3:28 pm
Forum: Announcements
Topic: 6.33 version released!
Replies: 139
Views: 56341

Re: 6.33 version released!