Hi,

I am unable to set group key update to more than 1 hour in the security config for wifiwave2 using Winbox 3.38.

I get an error saying group key update can only be set between 30 seconds and 1 hour.

Fortunately I am able to set it using the terminal for the time being.

Having the same problem, hope it will be fixed soon

Server Router Key points: 1. The wireguard is a service on the router and thus one has to allow the initial unencrypted traffic to the router via the INPUT CHAIN , which entails the listening port, protocol UDP, interface (coming from) the wan. With a road warrior one cannot narrow it down further ...

*) dns - fixed memory leak caused by large DNS replies;

Yes, the memory leak appears to be fixed, the resolver now returns the large replies OK, but they still aren't loaded into an address list :-(

Still not fixed on my rb951G-2hnd. Have to turn off 'Verify DOH Certificate'

No fix for DoH memory leak yet?

Yes, I would think that this would have top priority, but it's still not fixed since it was introduced in 6.47

Thank you for the tricky way with marking. I did it, pings between server and mikrotik is good, DNS is working on well, but internet on the client is incredibly slow, trying to troubleshoot it

Hi, disabling fasttrack seems to solve this problem

Thank you for the tricky way with marking. I did it, pings between server and mikrotik is good, DNS is working on well, but internet on the client is incredibly slow, trying to troubleshoot it Yes, I noticed that too. I can max out my 500/100 internet connection with ROS 6.47.2, fasttrack enabled, ...

Hi, Let's say I have this in my wireguard configuration file, how would I deploy it in my mikrotik router? Also, how would I route traffic from client 192.168.0.44 only, through this tunnel? Any help would be greatly appreciated Thanks! [Interface] PrivateKey = 123456= Address = 172.16.0.12/32 Addr...

Hi, Let's say I have this in my wireguard configuration file, how would I deploy it in my mikrotik router? Also, how would I route traffic from client 192.168.0.44 only, through this tunnel? Any help would be greatly appreciated Thanks! [Interface] PrivateKey = 123456= Address = 172.16.0.12/32 Addre...

Hi,

I keep getting errors on DoH in the logs:

DoH max concurrent queries reached, ignoring queries

How do I increase the limit? (increasing the max concurrent queries setting doesn't help)

@ALL Only 2 cert are needed 1s for Google 2nd for CloudFlare /ip dns set use-doh-server=https://dns.google/dns-query verify-doh-cert=yes /ip dns static add address=8.8.8.8 name=dns.google add address=8.8.4.4 name=dns.google add address=1.1.1.1 name=cloudflare-dns.com add address=1.0.0.1 name=cloudf...

Hi Can't this issue be partially mitigated by having short ip lifecycle, ex: /ipv6 nd prefix default set preferred-lifetime=1h valid-lifetime=1h Yes, this is what I'm doing, i leave the valid-lifetime at the default value, I make the preferred lifetime 10 mins 10 seconds. 10 mins 10 seconds because...

I have an intermittent problem with my mesh network at the office. I have 2 hap ACs (ROS 6.39), configured to use dynamic mesh between the 5 ghz radios. Same SSIDS, security settings for both 2.4 ghz, to allow the client to decide which radio to connect to. This works wonderfully! ..... except somet...

So I have been using the "keepalive-frames=disabled" setting for 3 weeks, and while my ios devices are able to stay connected for longer periods of times, sometimes hours, I still get the "disconnected due to extensive data loss" messages. Same issue, using the bugfix or current ...

When my pppoe connection gets disconnected and reconnected, the ipv6 dhcp client gets stuck 'renewing' and does not obtain new ipv6 addresses and prefix. This problem is present with all the 6.34 releases.

I'm using the bugfix release, 6.32.4 now.

Don't mean to resurrect an old topic but I have a possible solution. I recently bought RB915G-2HnD and was facing the same problems as the OP. IOS devices keep getting disconnected after a few minutes of going into standby. The logs show that [macaddress]@wlan1: disconnected, extensive data loss. Af...

Hi, with v 6.34, whenever my pppoe connection is disconnected and reconnects, the ipv6 address on the interface which is used to advertise the prefix is not refreshed with the new ipv6 prefix. Had to revert to the bugfix release, 6.32.3.

More info:

The delay on going to the www.duckdns.org website is only seen when we are running dual stack, both ipv4 and ipv6 together.
There is no delay if we only use ipv4 on the network

There is a significant delay in dns queries to the router for certain domains that should have a servfail reply. Eg. http://www.duckdns.org One doing nslookup for the above named domain on 8.8.8.8, I get a very quick reply. With debug on, here is the reply, point being the response is very quick. > ...