MikroTik

quackyo

I have run a link for 2km+500m for quite a few years now, consisting of 2+2 dynadish. The goal was to provide internet to a public hut in the forest. Both "isp" and the hut have clear line of sight to a big radio mast I got access to. So the link is going to that mast, with a netpower to p...

quackyo

I have actually had a WAP AC LTE6 for a long time, with WIFI (to some guest harbours) preferred over 4G. But it haven't worked great. Finally had time to look at it yesterday, turned out that the R11e-LTE card was defective. (Tried swapping with another older card). Getting a new LTE-card now, toget...

quackyo

And...we're starting with there isn't plug-and-play outdoor 5G LTE device at this point.

..Looks like Zyxel has some (FWA710 and NR7101).
Not very interested in going off Mikrotik though.

quackyo

Oh whoa, the LM960s are expensive alright...
Might try to fix the wap ac LTE6 that "developed" extremely low SNR last season then, and hope the wac ac 5G is released soon instead.

Thanx!

quackyo

Well, that's creative

But a bit big to put on top of a 15+ Metre sail mast.

How about putting a 5G miniPCIe in a wap ac LTE kit, and add an xtra 2x2 antenna with short cables? Anyone tried?

quackyo

I might have been unclear - 5G as in cellular, not wifi.

quackyo

Hi.

Is there any rumors regarding a WAP 5G or something else I can use to get 5G connectivity in a boat? I need to have the antennas outdoor/in the top of the mast (15meters+), so a POE solution is a much better deal than running passive antennas to a Chateau...

quackyo

7.11 or 7.11.1 broke my terminal/console in my RB4011. (Both through terminal in winbox and ssh). But after emailing with support they convinced me to try the latest development version (v7.12beta3 atm). That fixed the problem. Now let's hope it doesn't break other stuff. :) Did 7.11.2 play a part ...

quackyo

7.11 or 7.11.1 broke my terminal/console in my RB4011. (Both through terminal in winbox and ssh).
But after emailing with support they convinced me to try the latest development version (v7.12beta3 atm). That fixed the problem. Now let's hope it doesn't break other stuff. :)

quackyo

My take on WIFI is stability is more important than speed. Using CapsMAN and WAP/CAP -AC's I make really stable WIFI's. Not really quick WIFI's, but quick enough for general WIFI usage. (Everything needing speed should be wired anyway..) The key for me is to not make any frequency stuff dynamic - I ...

quackyo

You can 1 - Load balance between multiple WAN's, based on some logic (for example IP X goes to WAN1, IP Y goes to WAN2), OR you can - 2 actually bond. To make this work (in theory) you will need access to a virtual machine or router another place, with proper Internet connection. Lets call your plac...

quackyo

Do the server have the mikrotik as default route? If not it need to have a specific route for 192.168.13.0/24 -> mikrotik. Without this it wouldn't where to speak back to the client i the .13.0/24-net.

quackyo

In the day, the tree is dry. In evenings/night the leaves is moist from dew? The can make a difference on an already bad connection (not LOS).

quackyo

This is probably an area where Mikrotik Wifi isn't superior - I think some of the real enterprise WIFI solutions can actually share channels would be better. But I would try with cheap Mikrotiks this way: 5Ghz - and different channels. (2,4Ghz will interefer more with other AP's, and you only have 3...

quackyo

If you remember what subnet you wrongly set on WAN interface, you can also have your local hands physically connect their computer to the wan port of of your router, configure their computer to have an ip in the subnet you set on the WAN interface and webfig in to the router. Then just explain to th...

quackyo

Go for 4011 on all the sites, the key to easy management in the future is to simplify when you can.
Also - you can make configs more or less identical and have a preconfigured spare.

quackyo

The engine in my car don't work. Here's a picture of my seat. please help...

quackyo

Absolutey. But still, omni's is better than a p2p pointing in the wrong direction.. :)

quackyo

My gut feeling is that this will not be stable.. But I would try it, that's the only way to find out.. This would be easy if the clients were stationary , but I totally see why you would need omni's on the boats. Is is a regatta of some sorts? If sailing boats, ensure that the antennas is high enoug...

quackyo

It'll probably be fine, but to stay in spec you should get a higher voltage PSU.

quackyo

Explore "data path" in your capsman config.
You can set one config/SSID to go to VLAN X and another to Vlan Y .. and so on.
or you can have data path going to specific bridges without VLAN.

quackyo

Your 2011 might actually be too old.
I had a really old 2011 at a time that didn't take my SFP's. Support said that there was some revisions of the board, and that the really old ones didnt work correctly with some or all SFP's.

quackyo

Post configs from sw1 and sw2, without it we cannot see whats missing.

quackyo

Or you can disable "most" things on it, like disable WLAN from a scheduler,

quackyo

From https://mikrotik.com/product/RB960PGS
"It also supports passive PoE input and passive or 802.3af/at PoE output."

Your setup is valid and should work fine.

quackyo

I would have moved routing/NAT to the WAP instead. That would solve your problem.

quackyo

Have you tried googling? :)
https://mikrotik.com/product/rbomnitikpg_5hacd
PoE in input Voltage 12-57 V

So yes, I would say it's safe.

quackyo

There's no converting done. HEX S gets power by 802.3at. When HEX s has power, POE OUT gets the same voltage.

quackyo

But yes, you might be limited by 500mah max output on POE out.
500mah on 24V, and some loss in cable will be be a bit under 13watt which you say the device has as max consuption.
If this is the case, a psu with higher voltage for Hex S will solve it.

quackyo

You cannot divide routers as in making "virtual routers" like you can on some other branches, but you can easily do what you want. There is nothing stopping you from having 2 or more WAN-connections, and then have different subnets (connected to different ports) that routes to different ga...

quackyo

Nice. BTW, here is my rates - working with ESP's.

0 name="24-rates no slowrates" basic=12Mbps supported=12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps

As you can see the only difference is that I haven't defined ht at all.

quackyo

I'm pretty sure you can't.

quackyo

Thanx for reporting, I have had problems with dude making my 1100 as well earlier, this means my find was correct.

quackyo

As long as you can connect to AP swithout capsman, I'm inclined to believe something is missing in your capsman setup. Can you post an export (with hide-sensitive ofcourse) of your running config on capsmanager? Also a verification of the status on one of the running cap-interfaces vould be nice. ( ...

quackyo

Yea, I have 8 tasmota-flashed ESP8266 in my capsman network (with a total of 4 AP's). Works fine. I even used this setup to run a separate "IOT" SSID which goes on a separate VLAN. My first guess is to check channel width / extension channel on 2,4GHz. Extension channel should (at least on...

quackyo

My guess is that you are trying to get your wlan adapter to do two things at once. on a crowded frequency (the hotel frequency). Repeaters don't work very well. Is speed OK when using RB2011 as a client for the same hotel network? (disable wlan2, use cabled connection to rb2011 which is connected to...

quackyo

You say you reduce TX power on on of the sides, but did you reduce it on both sides? If not, you should test that too.
Other than that, I am not surprised that 5Ghz inhouse through a wall is not 100% stable @ 80MHz.

quackyo

As Erlinden wrote, lower 2GHz TX Power. That will do magic for you. Try with 7db lower than 5GHz at first, but don't be afraid to lower even more. What you are looking for is all 5GHz devices to always select 5GHz if the coverage is good enough. Use a wireless scanner on an android phone that can sh...

quackyo

Without knowing the specifics, as bpwl asks - the "backbone" should be separated from the AP/Clients. This can be done either with separate APS or with a dual radio AP. The only solution I would deploy is something like this: AP (non mikrotik) -> (FIRST 150M station) MT CLIENT (connecting ...

quackyo

No, Mikrotik does not do bad WiFi.
There might be other AP's with higher speed. And MT is late to the game with Wave2 support.
But MT's WIFI is stable. Really stable if you do it right. Also its really flexible. And cheap. And did I mention stable? :)

quackyo

Many providers have multiple VLANs on the fiber connection to supply internet, TV and VOIP. My guess is that you would have to set the correct VLAN ID on the SFP to get IP address and internet.

quackyo

channels/channel width/coverage?

quackyo

A general rule:
Better speed - buy newer/better AP.
Better coverage - buy more APs.

quackyo

Do not run btest from your router... Run it from your (wired) computer.

quackyo

What do the logs on the other side of sfp-sfpplus6 and 7 says? (on the POE-switches...)

Since it is only flapping against two of the three POE switches you have, I would first search the logs on the other side - then try to cross-switch the DAC-cables with the one working.

quackyo

Is there a route back from client subnet to your subnet? if not, there must be. If not the device in client subnet tries to reply through default gateway.

quackyo

Good luck :)
If cutting trees is not an option I would explore the option to get antennas OVER the trees.
Or find something licensed in lower bands than 2,4Ghz - there is 900MHz options out there.

quackyo

Yea, you always need working routes both ways - without it the recipient doesn't know where to send their answer to. If you already have port forwarding working locally, i would suggest checking firewall (forward rules). A good way to identify problems is to use the logging feature on the firewall r...

quackyo

To manage something like this in poduction you need to be comfortable with it, not just have someone help you set it up. My best advice would be to get (at least) two cheap routerboards and make a LAB of it. The HAP Lite for example costs 20 dollars, so 40 dollars will get you enough equipment to st...

quackyo

No, NV2 is Mikrotik proprietary protocol.

it is made for p2p/p2mp.

quackyo

First of all, I would not recommend to do 2,4GHz with other than 20MHz, at least not for normal clients. there is only 3 non-overlapping channels with 20MHz... 2 - post configs of AP's and screenshots with connected clients. anything in the logs? Both your boards is for use with external antennas - ...

quackyo

If I understand correctly, you want to (externally) connect to Cameras behind the HAP AC2 through the static IP of Hap AC3 via VPN ? Thats possible. First of all you would need to have routing from 192.168.70.xx -> 192.168.60.xx working through the vpn tunnel. When that works (connecting from 192.16...

quackyo

If there is no line of sight, 2,4Ghz will never be stable. It will/can work - but it will be unstable. There is nothing you can do to fix this, but you can do it a bit "less worse" by not using omni in the middle, but using point to points to each cabin and then small APs to distribute in ...

quackyo

I cannot see on the picture if it uses 12V or higher, but yes - that should work. You could probably feed it 12-32V as most other Mikrotiks, but that is not specified so either Mikrotik have to confirm it, or you should match the voltage of the internal AC-DC supplies exactly to be sure.

quackyo

Best tips to understand is to start simple. Start with 1 WAN (no failover). You actually dont need a bridge (which is a virtual switch you can add and remove your physical interfaces (ETH1-5) from) at all to get started. So remove all ports from bridge. DHCP client or static setup (depends on how yo...

quackyo

Without line of sight this would be my expected result.
If you can't raise your antennas to get LOS, I would try lower bandwidth (20MHz or maybe even lower if the LHG's support it) to get more stable link.

quackyo

It seems quite probable that your ISP is having problems.
But just as a try. Disable dude monitoring of your router.
I have had some troubles with a RB1100AHx4 that seemed to be caused by monitoring by Dude.

quackyo

RB2011 should IMO NEVER be recommended in 2020 - at least not for routing purposes.. it's close to 10 years old and will only do 50-100megabit internet routing with basic firewall. As soon as you try to do anything else you will have unstable link. OP asks for queues (which is needed for the limit u...

quackyo

Are you sure that you have 1000Mbit link on ETH1 (and on the port you connect your speedtest-running PC on) ?
Your configuration sets port 1-5 (the gigabit ports) to SPEED=100M .
The other ports (ETH6-10) is 100Mbit only on the RB2011.

quackyo

the VLAN interfaces are "virtual interfaces" so you have to define the interface it should get connection from. see attached image. Also - did you set IP address on the VLAN interface? You have to make VLAN interfaces for each VLAN you need connectivity from a dhcp server on. And you have ...

quackyo

If it is a bridge with multiple VLANs, make VLAN interfaces for each VLAN (with the bridge as "backend interface), and set the dhcp servers for each VLAN on the VLAN interface.

quackyo

I would first try to cross change the PSU. Bad PSU can do strange things..
If same result, I would check/upgrade RouterOS and firmware version on the failing WAP AC.

quackyo

I think you must configure the 2,4GHz interfaces on CAP2 and CAP3 manually, and then set just WLAN2 (5GHz) on those devices to be managed by capsman.

quackyo

A creative solution is (if your WAN connection is coming in the correct place) to use your setup but use one of the CAP AC's as router, as this has a much faster CPU than the CRS (and has two ethernet-ports..)
Best bet is still a separate RB4011 or something to to the routing.

quackyo

yes, it's possible. Part 1 (two LTE WANs) : search for multi-wan on forum and you will find multiple people doing Subnet A to WAN A , Subnet B to WAN B. They also often use failover, you might not want that. Part 2 (separate parent and kid network) is a firewall thing. Search for guest network separ...

quackyo

fasttrack enabled on routers?
https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

Without it 75mbit isn't terrible on that CPU.

quackyo

1 - What are you testing bandwidth with? Most small mikrotik devices will reach max CPU before max bandwidth so you should use computers on both side to test. 2 - you mention that you have different subnets on both side of bridge. What are you using to route between wireless bridge and LAN1/LAN2? Ar...

quackyo

Is the DAC recognized by routerOS at all? If so you can try fiddling with auto-negotiation (IE set link speed to 10gbit instead of auto). You probably have to to this on both sides. Are you sure the x520 in Proxmox works? (Do the RJ45 SFP module work plugged in this side?). If the DAC isn't recogniz...

quackyo

There should also be some kind of flapping/packet-loss detection as I would guess the 60GHz won't necessarily go down but just be (very) unstable during heavy rain.
Thie detection should also be able to detect that 60GHz is stable again and switch back to primary link.

quackyo

Does everybody experiencing this run Dude on the device?
I have had the exact same issue on my RB1100AHx4 shortly after setting up Dude. Happened 3 or 4 times over a month or two before i connected the dots. Disabled Dude server and no hickup since (6-8 months ago...).

quackyo

Bad signal. Increase signal is the only answer.
Do this by removing obstacles, interference (change channel?), raise one or both end of the links higher, and possibly dump the omni in the middle and use something at least partly directional.

quackyo

This is not the right place to make recommendations out of mikrotiks environment.

...Ofcourse it is, the OP is asking for a radius system that he can use WITH his mikrotik devices. That is a perfectly good question.

quackyo

You do not mention doing any kind of survey for other 5GHz stuff in the air. This should be done from both sides to find a clean channel.
Also, the video says 80MHz channel... You should try to get a stable 20MHz link first, and then try to get 40MHz stable if needed.

quackyo

Bridge itself (without HW) will do several hundred megabits, the problem the problem is that I try to bridge a bit of IPTV multicast traffic together with NATTING (without fasttrack) a few hundre megabits between WAN and Internal internet VLAN. My theory is something along the line of the fastpath t...

quackyo

As I explained, because I couldn't get a stable IPTV over separate VLAN with switch (HW accelerated) setup. Every 10 minutes or so I would experience distortion in signal. Don't know why. But that is beside the point and my question still remains - do anybody have some input on the "no fasttrac...

quackyo

Use a directional (Important) outdoor AP (SXT 5 something something (if they support 5GHz).) to get internet from outdoor service . Place this high on your house so you have a clear line of sight. Cable from this to an indoor AP with separate WLAN for your client machines. This will make a heap of d...

quackyo

Well, issue with 100% cpu is because of lack of fasttrack... Because of 100% CPU and doing bridge VLAN (without HW acceleration), this affects my HDTV.

Posting a 36 minute long video doesn't help me.

quackyo

Hi. Just finished converting a setup with 2x HAP AC with latest stable firmware from Switch VLAN setup to new bridge VLAN setup. This sounds just stupid, but I could never get stable IPTV through the old setup. With bridge VLAN setup I can.. I know I loose HW switching this way, but...it works. Only...

quackyo

Try 40MHz (or 20Mhz) channels.
A stable 40Mhz or 20Mhz link is better than a flaky 80MHz.

quackyo

Someone in another thread mentioned that capsman in v7 worked, but CAP's had to be v7 as well...

quackyo

If possible, i would
check/replace PSU's first if not powered by active POE.
check cable/plugs.
before new dishes.

quackyo

You will need to post an export of your CAPsMAN as well. And also it would be helpful if you post an export of a working CAP.

quackyo

Different channels. On 2,4Ghz - reduce TX power. a lot. That helps to get clients to use 5GHz, which works a lot better in crowded environment. Do a proper coverage test. I would think you need more 5GHz AP than three to cover a 3 story building with 12 rooms, but that ofcourse depends on size and b...

quackyo

If your problem is not that you have clear line of sight but just are too far away from the sender, get a bigger pole to mount your equipment higher. Almost always the only possibility.

quackyo

Your poll is flawed - you ask of RB4011 with WIFI, but there is also a model without WIFI.
Most reports I have seen about stability has been with WIFI.
Personally I manage 3 RB4011's, all without WIFI. They are rock stable.

quackyo

I guess that you by have gotten the news that facebook and whatsapp have /have had problem with their images..

quackyo

If the old 19V adapter works fine and you don't need it for anything else, I don't see why you need to change that.

quackyo

I would like a "TTL" of some sort, so that a CAP could be set to work for example 24 hours after last connecting to it's CAPSMAN.

quackyo

add bridge tagged to the vlans to get the router CPU to see the VLANs... like this: /interface bridge vlan add bridge=bridge1 tagged=ether5,bridge1 untagged=ether4,VLAN100 vlan-ids=100 add bridge=bridge1 tagged=ether5,bridge1 vlan-ids=101 add bridge=bridge1 tagged=ether5,bridge1 vlan-ids=102 add bri...

quackyo

Only if your mobile provider gives you a public IP. Most does not (and should not) do this as default, but most also have another APN that does for users that knows what they do.

quackyo

1 - Do not use both WPA and WPA2.
2 - reduce TX power on 2,4GHz interfaces.

quackyo

Change patch cord.

quackyo

Steveocee: The solution to this is to reduse the 2,4GHz transmit power a bit so that clients sees the 5GHz net as the strongest when close.
This would reduce the 2,4GHz theoretical coverage, but normally not the actual/usable coverage, since coverage is normally limited by tx power on client.

quackyo

Speed is not the issue, but if 2xPTP will give lower latency than 1xPTMP that's a very good point.
Thanx!

quackyo

Hi. I'm am planning a WIFI-link to a hut. I have internet access at place 1, and have free LoS (2,5KM) to a mast where I am allowed to put equipment. From the same mast I have free LoS (1KM) to the hut. It is about a 80-90 degrees from the mast to the two points. Whats is the best approach here - tw...

quackyo

Hi. Is there anyone successfully running mini-PCIe LTE Cat6 modems in mikrotik products, and getting acceptable speed and stability? Wap LTE kit works great but lacks speed because of LTE cat4. From what I can see on wiki it might be possible to use a LTE cat6 mini-PCI, but probably have to use PPP ...

quackyo

it seems from the log that it is using APN "internet.sierrawireless.com" which must be some default settings in Sierra card.

quackyo

Export config from 2011, read through and copy only needed config. Safest way.
You can try import the whole config from 2011, but you might get trouble with port numbers, different switches and so on.

quackyo

Try a different channel.
BTW, normally only channel 1, 6 and 11 should be used as they are the only non-overlapping channels.
https://en.wikipedia.org/wiki/List_of_WLAN_channels

quackyo

0 ether1 2.2.2.2 08:00:27:8B:66:7F MikroTik 7.0beta...
3 ether1 10.155.101.233 08:00:27:A6:62:3E MikroTik 7.0alph...
...

You tease....

quackyo

2011 won't be nearly enough for this, at least not with QOS. You might get away with the 2011 if you can live without QOS; because you can fast-track most of the internet traffic.

I second RB1100x4 as previously suggested , or you could maybe use RB3011.

quackyo

But without local forwarding this doesnt work, the virtual interfaces on router running as capsman has default VLAN ID 1..

quackyo

Do you have routes on Router A pointing to the other subnets? If not all hosts on subnet A will go to default gateway (internet) trying to connect to subnet B.

quackyo

OK, maybe they do some sort of jamming when communicating then.
Maybe you should get someone with a scope to document interference for a while then and report to your government, ?
A guy with a scope is a good idea anyway

quackyo

This sounds like interference. X-ray will definetively be able to "kill" wifi-signals if the room with the machine is not 100% shielded (which it should be.).

Try getting the dentist to tell you when they use the x-ray next time and do some tests?

quackyo

You are totally correct, I misread this and ignored to add the bridge itself to vlan. I guess the logic is that bridge and bridge vlan filtering is two different things. "/interface bridge vlan add bridge=bridge1 tagged=bridge1 untagged=ether6 vlan-ids=200 add bridge=bridge1 tagged=bridge1 unta...

quackyo

Hi. I have worked with VLAN setups on Mikrotik a lot in the past, both configured in SW mode and in HW (switch) mode. Today I tried to get a pretty simple VLAN setup to work config to work with the new 6.41 way of doing things. It seems the VLAN part works fine, but I cannot for get the router to &q...

quackyo

On the same SSID/password you cannot force this.

BTW - if you need high performance link, you should really go for a dedicated outdoor PtP link, and separate AP's inside.

quackyo

use another brand POE switch, this device supports "normal POE.
PoE in 802.3af/at
PoE in input Voltage 11-57 V

quackyo

The HAP AC is an excellent home AP, the alternative is HEX + a WAP AC as AP if you need to place the AP other place than router.

quackyo

it's not the VLANs that are slowing you down, its the queues. You won't get better performance from a switch. (CRS is short for CLoudRouter Switch).
Buy a router if you want queues. HEX is a a cheap and good router that will be able to handle that load.

quackyo

Which APs do you use? It looks like you use 40MHz channels on 2,4GHz (20Mhz + extension Ce), that's not smart since it will give you only two channels not interfering with each other. Go 20Mhz, use channel 1,6 and 11 and set up with the least amount of interference. A good tool is "WIFI Analyze...

quackyo

24V input is best, but if existing charging system is 12V i would prefer a DC DC.

quackyo

use 24V.
If you need to power from 12v battery, use a 12V->24V DC DC adapter.

quackyo

OK thanx anyway. It actually seems that giving 8.8.8.8 to my Doorbird solved my problem, so it seems that wifi doorlocks care about case.

quackyo

ZeroByte - can you confirm if the IoT clock is a Doorbird? (www.doorbird.com)

quackyo

Hi. Was the IoT Door lock a Doorbird by any chance?
I have one of those in my home network, and experience very long "first connect" times from outside my network. Might be a related issue, as I have Mikrotik DNS as first resolver, and google as second resolver if I remember correctly.

quackyo

Try channel 1,6 or 11 - no extension channel (20MHz only).

quackyo

Try using a 12v to 24v step-up. 12v POE will cause to high amperage and therefore maybe low voltage - at least when powering multiple devices. Use something like this (I cannot vouch for this particular unit..) http://www.ebay.com/itm/DC-DC-12V-Step-Up-to-24V-3A-72W-Car-Power-Converter-Regulator-ED-...

quackyo

Have you tried the VLAN settings on each SSID configuration?

quackyo

That should be as simple as checking "Local forwarding" on the capsman configurations that should be local (Local-LAN and Local_Guest).

quackyo

It will work. But probably not well because of latency.

quackyo

Correct, the "new" PSUs from mikrotiks (the one with sharper edges) does not fit the 2011 and 3011 properly - the hole in the casing is a tad to little.
The old PSU (with rounder edges) fits fine.

quackyo

Looks like a water/moisture damage to me..

quackyo

"band=5ghz-a".
should be AC .

quackyo

I know, but you have already helped me . The rest will be trial and error

Thanx!

quackyo

I don't know the exact parameters, the customer should be able to connect two nearby work sites, and when they are done working on one site they move the stuff to new location.

quackyo

Aha, hadn't though about signal level. So Connect list from SXT 1 to SXT 2 and SXT 4 with signal threshold set to something viable so it will always take the nearest one, and a connect list from sxt 3 to sxt 4 and that should be enough? might be easier than I anticipated then! Good tips about ac/n. ...

quackyo

Hi. I'm planning a portable P2P system for a customer. The point is to make a connection between some customer hardware. The customer hardware will be moved monthly. They do not need high bandwidth, just stable and low latency. Some times there will we LOS directly between the customer hardware. Tha...

quackyo

Sounds like all you need is a static route on the Ubiquiti side of the network, pointing 192.168.88.0/24 to the 192.168.0.x-IP assigned to the dhcp client on mikrotik. This should ofcourse be made static.

quackyo

I can top this - I need a similar solution, but also with a LTE USB stick as fallback.
I also would like to be able to make a list of SSIDs with corresponding encryption codes so that when I return to a known place the mikrotik automatically connects to the network I used there last time.

quackyo

it's a completely different CPU on those.
A new Intel i7 CPU does more work per Hz than an old Pentium..

quackyo

The repeater function will not work with other vendors - you will only be able to have 1 client behind your Mikrotik this way. (It needs mikrotik in both ends..)

WDS MIGHT be possible, but that I have never tried.

quackyo

would be very interesting if you could compare the two different settings to pinpoint the performance difference between only bridge fastpath, only hw-queue and both.

quackyo

I think a client will always try to connect to the AP with highest signal, as long as both APs have same SSID/WPA.
To lock a client to one specific AP you should make spesific SSID's for each AP.

quackyo

No one?
There must be a way to add a new SSID "on the fly" ?

quackyo

Hi. I am managing a mikrotik network with 8 WAP AC's controlled by a RB3011 as capsman. When I originally configured it I had 1 master config and x slave configs for different SSID's (to different bridges/VLANs). Now I need 1 more. I've made the config, and added it to the provisioning as a (fourth)...

quackyo

You're mixing mW(att) and mA(mp). the Dynadish 5 have a max power usage of 9W. The hap AC have a max poe output of 500mA . That means that with a 24V PSU on the hap AC you have a max poe output of 24V x 0,5A = 12W. Which means that this should work perfectly as long as you have a 24V or higher PSU (...

quackyo

Hi. I'm trying to set up a small Mikrotik network with some VLANS. The hardware is two HAP AC's, linked with a trunk from ETH5 to ETH1. On Main HAP AC i get VLAN 101 (IPTV) and 102 (WAN) in on the SFP interface from ISP. I also need an internal VLAN (250) for NATing to internet. VLAN101 (IPTV) shoul...

quackyo

If I understand correctly you do the routing outside of this mikrotik. If so , those routers need to have static routes for 192.168.50.0/24 and 192.168.49.0/24 to this mikrotik.

quackyo

Emotiv8IT - have you tried different channels? There might be other non-WLAN traffic on the same frequencies. I have experienced noise from burglar alarms multiple times.

quackyo

You can run the mANT in "AP mode" , not using the the "router" in it, and just keep the RB493G as a router only.

I would use CAPSMAN on main router to manage the AP's.

quackyo

Post firewall on HEX, and if you have any queues - post them too.

quackyo

Integrate Hotspot with Facebook WIFI. "Facebook Wi-Fi lets customers check in to participating businesses on Facebook for free Wi-Fi access. When people check in to your Page, you can share offers and other announcements with them." Meraki,Cisco,Netgear,D-Link, Open-Mesh, Arua, Intelbras, ...

quackyo

I think it should be a "ethernet-like" interface. Try EOIP tunnel over the PPTP link and it should work.

quackyo

Is there any logical explanation for this? I have set up a RB3011 as CAPSMAN, with three different SSID's that points to three different bridges/VLAN's. There is a DHCP server with separate pool on each bridge. Everything works fine when connecting something to either of the SSID's. But when I conne...

quackyo

RB3011 should do the trick. With Fasttrack enabled and no queues at least.

quackyo

You can also go switch vlan only by using a cable between switch 1 and switch 2. You will lose two ports though.

quackyo

Have you tried other 2,4GHz AP's on the same spot? If not, I suggest you try to pinpoint the problem to the AP or the radioband itself. There might be other "noise" on the 2,4GHz band not from WIFI . For example I have experienced a number of places that burglary alarm detectors from a spe...

quackyo

Any news here? I started configuring a pair of 3011s today, cannot find SFP in switch menu.
It is of course possible to VLAN it in software / CPU mode but that is stupid...

quackyo

Tried a hAP AC at the first location again today.
Link at first try with SFP in hAP AC. moved the SFP to the RB2011 : No link.
Strange. have asked support@mikrotik about it.

quackyo

I continue this thread with an update.. At the location I have tried to get the 2011UiAS-2HnD to work with SFP I have now tried 4 different 1310/1550 SFP's with no luck. (10km,20km and 40km) I had given this up... But today I helped another friend connecting his newly installed fiber from the same I...

quackyo

3 - Yep. You set this on the CAP interfaces on the CAPSMAN .

quackyo

If it is a problem to get power to the second AP you could use other Mikrotik equipment that could Power the second AP through Power Over Ethernet. But first I would have tried with only one unit with dual radio unit first, and get about half of the users to use the 2,4GHz network and half of the us...

quackyo

Hi, have you gone through with this?
I have a project where I will have to do something similar. I am also thinking of doing this with Wap AC and do the backhaul on 5GHz.
I thought of using Capsman on the 2,4GHz interfaces to manage the user access WLAN.

quackyo

Hi. I'm setting up a Mikrotik/Capsman setup for someone. My plan is: Bridge-LAN: bridged with "uplink" to unknown router. I do not know the IP range. Wifi for users will go to this bridge, and users will get address from external (unknown) router. DHCP client on this bridge to get a gatew...

quackyo

Try different channels first.
Note : on 2,4GHz there are only 3 channels that are truly separated - Channel 1, 6 and 11.
channel 2-5 and 7-10 should not be used, as they would interfer with two of the 3 separate channels.

quackyo

Normis: You sure about this? I tried to get this to work some months ago, but could never get it to work with more than one client connected through the repeater. (The old D-link repeater I was replacing worked fine...until it died ofcourse :)) If I remember correctly I made a thread about it on th...

quackyo

No - the unit you try to power most likely wants "real" POE (802.11af/ad), not "passive POE".
Mikrotik can only POE power units that can be powered by "passive POE".

You will need to use the POE adapter or a normal POE switch that supports 802.11af/ad.

quackyo

RB260GSP and most other Mikrotik devices does only support "Passive POE" (usually 12-30V), not 802.11af/at which is 48v.

quackyo

If your device has 2,4GHz and 5GHz, try both. In general, if there is a lot of noise, try (in 2,4GHz) chan1,6 and 11, no extension channels. There might also be noise from other sources in your house, I have experienced that alarm detectors destroy channel 1-3 (2,4GHz) multiple times. The problem wi...

quackyo

Use Capsman.
You cant move a client from one AP to another, but you can use access-list to kick users with low signal . This will trigger the users equipment to search for the SSID again and will (hopefully) connect to the best one.

quackyo

its rated to 1Amp max per port, 2 amp max total. So if you power the Hex POE Lite with the included PSU that is 24V, your device will pull 15,4W/24W=0,64A which should be fine. Be sure that the device you should power supports the Mikrotik passive POE way - devices that requires standard POE (48V, 8...

quackyo

Yea, ofcourse that is a possibility. Butr a lot of other users of this ISP reports that it works. Some of them use TP-Link or Netgear equipment, some use Cisco. I have not seen anyone else try this with Mikrotik, but there shouldn't be a difference as long as the SFP's have the same specs and are re...

quackyo

100% (or almost) CPU is easy to reach with a RB2011 with just torrent traffic @50-80mbit for example... Or any other high bandwith service that uses a lot of connections.

If you add fast track firewall-rules it should be a lot better.

quackyo

Feel like I'm talking to myself here... Still, I post my findings. I got a hold of another RB2011 and set this up exactly the same. This works fine. WTH?? I then did a full reset on the RB951G and then copied the config. No go... So...my conclusion is that there must be something different in the sw...

quackyo

Yes, I am running wireless-rep on all my capsman setups.

quackyo

Just to add some more info -
when I Torch the master interface on the problem switch (RB951) (with filter on VLAN 101)
I see the exact same traffic as I see on the main swtitch.

Link to screenshot here..
https://imgur.com/ll6vURB

quackyo

I am helping a friend set up his IPTV, and have some problems. His main router is a RB2011UiAS-2HnD, and there is also a RB951G-2HnD. From the ISP router/modem one cable gives us Internet (ETH1 untagged, VLAN102, VLAN102 is gateway), and one cable gives us IPTV (ETH9 untagged, VLAN101). So no VLAN i...

quackyo

Sounds like a bad cable. (OR a bad port on your mikrotik).
Try putting the ISP cable directly in your computer and see if you get Gbit link.

quackyo

No, it should be 1310/1550 (1550/1310 in the other end).
I have ordered a few other SFP's, some said it could be the Mikrotik SFP that have too low TX value so the other end can't see us.

quackyo

Tried another RB2011(-2hnd), this one recognizes the SFP module. But still only TX, no RX.... I've even tried to clone mac address from ISP router. . here's /int eth mon sfp1 [admin@MT2011-loft] > /int eth mon sfp1 name: sfp1 status: link-ok auto-negotiation: disabled rate: 1Gbps full-duplex: yes tx...

quackyo

Hi. Im trying to remove a ISP-provided fiber router with a mikrotik rb2011ls-in. I have bought the correct MIkrotik SFP for this connection (it should be 1310/1550nm BIDI in my end.) "S-35/53LC20D, Pair of SFP BiDi Transceivers 20km, mini-GBIC, single mode, MIKROTIK". With the 1310/1550 on...

quackyo

The point is i need Mesh-functionality, as some of the 4 non-cable-connected AP's will need to have multiple ways in to the main AP, as the power can go away for a short time on some of them.

Anyone have actual experience doing something like this with MT?

quackyo

Hi. Several years ago I helped a small organisation to set up a Openmesh-based network several years ago, controlled by cloudtrax.com . It consists of 5 single radio 2,4GHz 802.11n AP's, where only one of them have internet connection (by cable), the other ones has a mesh connection through the othe...

quackyo

Hi. Today I have tried to switch a 7 year old D-link repeater with a MT mAP2n. I have failed. At least doing it the default wireless-rep way. First, my setup and story is: Mikrotik router (RB750). Every port on the box has its own separate bridge, dhcp pool and server except for Ether1(WAN). every p...

quackyo

The new Repeater-mode seems to work fine, You can set one interface in client mode and one or more virtual interfaces in station mode, either on the same SSID or on a separate SSID. I am missing one feature though - WIFI client + CAP client. I want to configure a couple of HaP Lite's as clients on o...

quackyo

the mAP2n support 10-57V input. In *theory* it should work to power the first unit with a psu with 48V and over 500mW. You will then have a total of 500mW power to use through POE. 500mw x 48v = 24W. a mAP2n is rated with a max power usage of 2W. That means , again in *theory*, that you should be ab...

quackyo

Hi. Is there a max AMP rating per port for the RB260GSP POE switch? The reason I ask is that I'm setting up a solution with 1x CRS125-24G-1S-RM 3x RBcap2N 1x RB260GSP POE switch. The POE switch was supposed to power the 3 access points only , but I see that the CRS125 is also POE capable - and the t...

quackyo

Hi. Is it possible to fast track "one way" of the connection (download) but exclude the other way (upload) so it can be queued? I am trying fast track download but keep queues for upload on a DSL line. But any rule i try either fast tracks all or nothing - I have tried to limit the fast tr...

quackyo

I Agree. So who will change the Wiki?

quackyo

Hi. When googling Mikrotik Firewall you will find the "Basic Universal Firewall Script" from wiki.mikrotik.com . http://wiki.mikrotik.com/wiki/Basic_universal_firewall_script This seems to be a good place to start, but I wonder if it really should default open up for DNS from outside - Thi...

Search found 182 matches