Community discussions

MikroTik App

Search found 35 matches

by anthonws
Tue Sep 29, 2020 11:59 am
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 125
Views: 49861

Re: v6.48beta [testing] is released!

RB4011iGS+5HacQ2HnD + 6.48beta40

When enabling IPFIX router enters reboot loop.

Shall I open a support case to share suppout?

Thanks,
anthonws.
by anthonws
Mon Sep 21, 2020 8:10 am
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 267
Views: 68704

Re: v7.1beta2 [development] is released!

I just setup Wireguard on my hAP AC² (...) I can also confirm that 2,4 GHZ Wifi is broken and client's don't get dhcp on that one, 5 GHZ seems to work fine. For me it works... until it stops working. Then I do /interface/wireless { disable wlan1; enable wlan1} ant it works again... until it stops w...
by anthonws
Mon Aug 24, 2020 10:23 am
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 125
Views: 49861

Re: v6.48beta [testing] is released!

Upgrading 2011UiAS-2HnD from beta 12 to beta 27 puts router in bootloop (stuck). Last message is "Starting services" and then router reboots.

Downgraded to beta 12 and restored configuration.
by anthonws
Mon May 18, 2020 8:41 pm
Forum: RouterBOARD hardware
Topic: Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN
Replies: 2
Views: 759

Re: Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN

Does the flapping occur if you disable the wireless? I once had a routerboard that had frequent flaps, but it was the antenna that was placed to close to the board. Interesting. No I did not tested this. I'll do a quick test later on. What I notice is that it gets quite sensitive when removing/plac...
by anthonws
Mon May 18, 2020 7:10 pm
Forum: RouterBOARD hardware
Topic: Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN
Replies: 2
Views: 759

Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN

Hey, Just acquired a RB4011iGS+5HacQ2HnD-IN from Amazon and since the very first instance that I've noticed several instabilities in the router. I've migrated from a RB2011UiAS-2HnD-IN which was/is rock solid working for the past years. Tested both importing config from previous router and also star...
by anthonws
Mon Apr 27, 2020 12:18 am
Forum: General
Topic: Netflow forwardingStatus (id 89)
Replies: 0
Views: 956

Netflow forwardingStatus (id 89)

Hi! I've just setup elastiflow and started forwarding traffic flow (all interfaces) to that service. I have a GeoIP block rule (FW Input) that rejects incoming packets outside of my country CIDR (working just fine). I can successfully see the rule working when looking at logs. Looking at the elastif...
by anthonws
Sat Apr 25, 2020 7:34 pm
Forum: Beginner Basics
Topic: [SOLVED] Whitelist CIDR vs Blacklist
Replies: 2
Views: 1229

Re: Whitelist CIDR vs Blacklist

Solved. Added an Input FW rule to block everything !MYCOUNTRY, with a reject icmp network unreachable. Then used the following script to populate "MYCOUNTRY" list. /log info "Loading MYCOUNTRY ipv4 address list" /ip firewall address-list remove [/ip firewall address-list find list=MYCOUNTRY] /tool f...
by anthonws
Thu Apr 23, 2020 5:12 pm
Forum: Beginner Basics
Topic: [SOLVED] Whitelist CIDR vs Blacklist
Replies: 2
Views: 1229

[SOLVED] Whitelist CIDR vs Blacklist

What would be the best approach to only allow incoming traffic from a specific CIDR (my country), vs blocking everyone else?

I assume it would be more effective in terms of filtering.

Any hints? Or anyone willing to share something similar that they have achieved?

Thanks,
anthonws.
by anthonws
Sat Mar 21, 2020 6:14 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 125473

Re: v6.47beta [testing] is released!

I'm now constantly getting "DoH connection error: Idle timeout - connecting"...

It was working just a while ago...
by anthonws
Fri Mar 20, 2020 12:36 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 125473

Re: v6.47beta [testing] is released!

DoH?!?!?! AMAZING! Thank you so much for listening to your community!
by anthonws
Mon Feb 24, 2020 6:18 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 163
Views: 46671

Re: Feature Request - Wireguard Protocol

I'm actually more interested in understanding the actually benefits from a server perspective (Mikrotik Router), like the benefits on a ar9344 CPU (which doesn't look like it has AES-NI alike instructions). That is, *if* we ever get WireGuard in ROS.... LOLO I'm honestly more geared towards changing...
by anthonws
Sun Feb 16, 2020 5:54 pm
Forum: General
Topic: Netflow to external server (HTTPS/TLS)
Replies: 1
Views: 927

Netflow to external server (HTTPS/TLS)

Is there any guide/manual/info that anyone can point me on how to implement Netflow to an external service, with proper traffic encryption?

Thanks,
anthonws.

Edit: Maybe the best option would be a site-to-site VPN (IPsec)...
by anthonws
Sun Dec 22, 2019 1:07 pm
Forum: General
Topic: Cloudfare for MIPSBE
Replies: 0
Views: 640

Cloudfare for MIPSBE

Anyway of getting the Cloudfare client for MIPSBE? According to this post, someone else has done it. https://forum.mikrotik.com/viewtopic.php?t=132678&sid=a141ddac1d5e61856e505f0920de1c9d#p693725 Really hoping to find a proper solution to run DoH without having to have another equipment (piHole) Tha...
by anthonws
Thu Oct 24, 2019 9:09 pm
Forum: RouterOS v7 BETA
Topic: 7.0beta3 available in testing?
Replies: 40
Views: 10868

Re: 7.0beta3 available in testing?

BGP doesn't exist in v7. Don't install beta without knowing the limitations, please. Hi Normis! Where can I see the current limitations? Are these the limitations? "What is not available: - BGP / MPLS disabled - Extra packages - Winbox does not show all features, use CLI for most functionality " An...
by anthonws
Sat Aug 03, 2019 2:26 pm
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 171
Views: 61613

Re: Feature request - DNSCrypt support...

Mikrotik is a business, so we have to treat this feature request as such. Not on ideological (privacy of user) or technical (DoT vs DoH) grounds. That said, the question Mikrotik is asking themselves is obvious. Is this feature "worth it"? Our approach should be to not only say "yes" with a sea of ...
by anthonws
Fri Jul 12, 2019 8:11 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

When? please an update - we are in so much pain with the existing 1072's and really don't want to replace them all if we don't need to! Or at least open up a version of CHR for ISO install with Intel drivers... when it's 1072 with ROS 7 becomes useless. why do we need beta for some devices in the e...
by anthonws
Mon May 20, 2019 5:00 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

p.s. Now, before everyone get's super hyped and expects a release next month...Personally, and by experience in the software engineering industry, I don't expect any betas before EOCY 2019 or Q1 2020. I was at a MUM recently and they said we could expect "stable" RouterOS 7 release before the end o...
by anthonws
Mon May 20, 2019 2:20 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

I just want to let everyone know, that v7 is progressing pretty good this year, and most core functionality is usable. Some more difficult parts need to be done and we can release a public beta. Thanks for the feedback @normis! It sure adds a bit more of clarity, although there's no rough timelines...
by anthonws
Mon May 20, 2019 12:20 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

Windows Phone was not vaporware, it was real ... shit. And that's why it disappeared real soon ... Well, it really showed that Microsoft thrives only on existing installed base. In a "new market", it really stands no chance against the competition. However, what I meant is that the platform has alm...
by anthonws
Sun May 19, 2019 12:04 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

It's getting closer every day! ;)
What an awesome slogan for Mikrotik!

"Trust in Mikrotik! What you're waiting for is getting closer every day!" TM

Microsoft tried patenting that for Windows Phone/Mobile, but Mikrotik got there first ;)
by anthonws
Mon May 13, 2019 1:28 pm
Forum: General
Topic: Feature Request: OpenVPN [ovpn] udp tunnels
Replies: 250
Views: 107585

Re: Feature Request: OpenVPN [ovpn] udp tunnels

I'm going to stick around for more 9 years at least. 11 years is not enough time to age properly a piece of software.

To me, software has to be distilled for a minimum of 20 years!

No one better than Mikrotik knows how to do this properly!!

/S
by anthonws
Mon May 13, 2019 1:19 pm
Forum: General
Topic: [Feature request] Wireguard
Replies: 142
Views: 46742

Re: [Feature request] Wireguard

Wireguard was tested by INRIA Source: https://www.security.nl/posting/608796/Onderzoekers+testen+cryptografische+werking+WireGuard-vpn Abstract : WireGuard is a free and open source Virtual Private Network (VPN) that aims to replace IPsec and OpenVPN. It is based on a new cryptographic protocol der...
by anthonws
Sat May 11, 2019 6:46 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 101059

Re: v6.45beta [testing] is released!

I'm waiting for 8 months when the bug 2018101022007579 will be fixed. I started refusing from CCR wherever such an opportunity arises And the funny thing is that in half a year, the support responded only once “Sorry, we will reconsider the priorities” Your top router dies completely from two packa...
by anthonws
Wed May 08, 2019 5:15 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

A lot of days without New firmware... Is It a Ros 7 signal?
No. It's just a signal of no signal. Typical around these corners...
by anthonws
Wed May 08, 2019 2:33 am
Forum: General
Topic: Feature Request: OpenVPN [ovpn] udp tunnels
Replies: 250
Views: 107585

Re: Feature Request: OpenVPN [ovpn] udp tunnels

This is getting to a point of being just plain pathetic...

Just forget about UDP and/or LZO...

Just make a decision, and if possible, fast!

#1 Adopt OVPN from source (not this crippled implementation)
#2 Adopt WireGuard (it's more than a "standard" now)

Oh, and provide timelines for this please.
by anthonws
Wed Apr 10, 2019 1:03 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 32278

Re: v6 RC and v7 BETA

They probably have other methods, feedback from distributors, people contacting support, MUM participants, ... so they probably know well what customers want. Being more open about their plans, and generally making customers feel closer to developement and heard, that's surely something they could ...
by anthonws
Wed Apr 10, 2019 12:46 am
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 171
Views: 61613

Re: Feature request - DNSCrypt support...

DoH is no longer a "waste of time" and it's now massively used by the industry (there's even Android Apps to turn on that nowadays with CloudFare for example). So, questions: 1. Is there an intention from Mikrotik to implement this? 2. Is there a sharable roadmap for the feature to be implemented? 3...
by anthonws
Wed Apr 10, 2019 12:40 am
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 32278

Re: v6 RC and v7 BETA

@anthonws: MikroTik already has that... kind of. Description of this forum is "BETA Testing and Feature Suggestions for the next RouterOS release (ROS v7)", so you're welcome to post your ideas and people do so. Others comment on it to show their interest. Only the actual voting is missing. Oh and ...
by anthonws
Tue Apr 09, 2019 5:01 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 32278

Re: v6 RC and v7 BETA

Community driven features and minimal public roadmap is not something Mikrotik knows how to handle properly. Since I recognize that roadmap/feature plans are difficult for the majority to "read" properly (i.e. understand that they might be (de)prioritized), at least the community driven feature requ...
by anthonws
Fri Apr 05, 2019 11:57 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

https://forum.mikrotik.com/viewtopic.php?p=725088#p725088 — isn't that about authenticity? :) dude, honestly i'm not here for the lulz. we work with business customers and we expect clear statements from MT so that we can plan our next hardware purchases. I think the plan is very clear if you're de...
by anthonws
Thu Apr 04, 2019 3:50 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 32278

Re: v6 RC and v7 BETA

@normis Any timeline you can announce for v7 I know there was meant to be an announcement at the recent MUM but unfortunately there was not. I'm in the same boat as many others with bgp performance issues and really need a timeline that I can give to the CEO before I have to start looking at other ...
by anthonws
Sun Mar 10, 2019 12:19 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 189397

Re: RouterOS v7.0 beta1 - when?

Context: Long time (home) user, lurking in the forums, enjoying reading change logs and all the advancement that Mikrotik is doing. Perspective on the topic: I can see that Mikrotik could definitely improve their marketing and messaging around the roadmap of their products and the future investments...
by anthonws
Mon Jan 21, 2019 10:15 pm
Forum: General
Topic: Feature request - DNSCrypt support...
Replies: 171
Views: 61613

Re: Feature request - DNSCrypt support...

Instead of wordless pluses, how about a discussion on TLS vs HTTPS. TLS gives you a specific port and capability to filter and NAT etc. HTTPS gives you more security, but also the inability to catch this traffic as an administrator. More aspects? Both would be the ideal scenario :) Naturally that I...
by anthonws
Wed Mar 29, 2017 12:28 am
Forum: Beginner Basics
Topic: Mikrotik L2TP IPSec Client to Strongswan Server
Replies: 0
Views: 1031

Mikrotik L2TP IPSec Client to Strongswan Server

Hi! I've configured a Strongswan server in my VPS, using this guide: https://raymii.org/s/tutorials/IPSEC_vpn_with_Ubuntu_16.04.html. Could anyone help me with configuring my Mikrotik router to connect as a client? I've already imported the user, CA Pub and VPN Pub certs into the router. Really appr...
by anthonws
Sat Jan 09, 2016 7:02 pm
Forum: Beginner Basics
Topic: SSTP VPN CA certificate import problem
Replies: 2
Views: 1359

Re: SSTP VPN CA certificate import problem

Is it possible to setup a SSTP VPN (not site to site) using a wildcard certificate (i.e. *.domain.com)? And has anyone used certificates from DigiCert to establish a SSTP VPN in RouterOS? If yes, can anyone please provide some pointers for a n00b? :P Much appreciated and sorry for the thread hijack!...