Community discussions

Search found 607 matches

by Paternot
Sun Sep 29, 2019 5:51 pm
Forum: RouterBOARD hardware
Topic: Does CRS328-24P-4S+RM support 24v passive poe?
Replies: 17
Views: 2741

Re: Does CRS328-24P-4S+RM support 24v passive poe?

Yes, it does. I'm using one to power two RB1100AHx2 and one hAP ac2 - all of them with 26 volts.
by Paternot
Fri Sep 27, 2019 4:56 pm
Forum: Beginner Basics
Topic: Does CRS326-24G come with license on purchase? [SOLVED]
Replies: 3
Views: 413

Re: Does CRS326-24G come with license on purchase? [SOLVED]

Just remember: The CRS is a switch, not a router. Yes, it runs RoS. Yes, it can route packages, if You want to do it. But no, its routing capacity is very very low, and will not get even close to wirespeed.

If you want to use it as a switch, it will perform at wirespeed levels.
by Paternot
Fri Sep 27, 2019 1:47 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 22
Views: 3816

Re: CSS326-24G-2S+RM hangs until power cycle

Hi Everyone, I just purchased a CSS326-24G-2S+RM to evaluate. I went ahead and upgraded to the 2.10 firmware. I'm going to test carefully with many GigE connections and both SFP+ ports active a 10GigE. One thing I've noticed right away: under the "System" tab, "Health" section, the temperature show...
by Paternot
Thu Sep 26, 2019 7:22 pm
Forum: Beginner Basics
Topic: Help to identify the correct products to buy (home net)
Replies: 4
Views: 389

Re: Help to identify the correct products to buy (home net)

If you expect that WiFi will be handy at that location, you can go for RBD52G-5HacD2HnD-TC which is a very decent router as well, plus it features both 2.4Ghz and 5GHz wireless. Why not the hAP AC2? Cost a (very) little more - but has more CPU, a better switch chip, more routing power and You can a...
by Paternot
Thu Sep 26, 2019 5:59 pm
Forum: Beginner Basics
Topic: Help to identify the correct products to buy (home net)
Replies: 4
Views: 389

Re: Help to identify the correct products to buy (home net)

[*]for main router, I'd recommend RB750Gr3 (wired only), has decent performance and should be fine up to some 200-400 Mbps of routing capacity (note that it'll do also inter-VLAN routing if there will be some, not only internet). If you expect that WiFi will be handy at that location, you can go fo...
by Paternot
Thu Sep 26, 2019 5:53 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35879

Re: RouterOS v7.0beta1 (ARM)

looks like beta2 is out:
viewtopic.php?f=1&t=152003#p752103

This time, we are also including the CHR images for more wide testing possibilities. Please report your findings.
And with CHR images! :D
https://mt.lv/v7
by Paternot
Wed Sep 25, 2019 1:52 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4062

Re: Torrent client

But one should never do a network wide upgrade: it should be staged - at least to minimize the convergence time of routes and everything else. I don't want to imagine 10k routers rebooting a few minutes apart one from another. ok, further info about the upgrade process - something that was ingeniou...
by Paternot
Wed Sep 25, 2019 4:38 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4062

Re: Torrent client

I don't think it would be that big of a problem. If your network has thousands of routers the bandwidth must be equally big. it is a bit tricky to serve this amount of data quickly. esp. upgrading large number of CPEs managed by some tr-069 based system can be a bottleneck. sw delivery with torrent...
by Paternot
Wed Sep 25, 2019 12:13 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4062

Re: Torrent client

please, think in scale: upgrading 10s or 100s of 1000s CPEs can run into serious bottleneck. I don't think it would be that big of a problem. If your network has thousands of routers the bandwidth must be equally big. The firmware is about 12MB to each router. As of today, one can barely load 20 we...
by Paternot
Tue Sep 24, 2019 1:39 pm
Forum: Beginner Basics
Topic: Difference between RB941-2ND-TC and RB941-2nD
Replies: 3
Views: 275

Re: Difference between RB941-2ND-TC and RB941-2nD

Only the look is different. The device inside is the same. Only design, choose the one you like visually. The -ND unit is rated to ambient temperature of -20 to +60C. The -ND-TC is rated to ambient temperature of -20 to +70C. Is it a typing error, or they are really rated different? Don't believe w...
by Paternot
Mon Sep 23, 2019 4:29 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 25
Views: 4062

Re: Torrent client

No torrent client, please. It will waste resources from both the router and Mikrotik as a company. Better to focus in the router/wireless part, and deliver those long needed features.
by Paternot
Mon Sep 23, 2019 3:46 am
Forum: Useful user articles
Topic: CCR Takes the heat
Replies: 2
Views: 544

Re: CCR Takes the heat

Yes, they can take the heat. The specs are up to 60C - ambient temperature.
Take a look at this one:
https://mikrotik.com/product/CCR1009-7G-1C-PC

Of course, 61C is a little over it, and I would not want to run it above 45C ambient. But, still, looks like it can really take 60C. Amazing, huh?
by Paternot
Fri Sep 20, 2019 5:47 pm
Forum: General
Topic: hEX PoE // Powersupply
Replies: 6
Views: 796

Re: hEX PoE // Powersupply

The hEX can't handle 48V.
... and doesn't do PoE out.

But OP mentioned hEX PoE which handles 48V and can do 802.3af/at on output.
Geez, my mistake. Sorry about it. Today I shouldn't have got out of bed... can't concentrate on anything!
by Paternot
Fri Sep 20, 2019 5:14 pm
Forum: General
Topic: hEX PoE // Powersupply
Replies: 6
Views: 796

Re: hEX PoE // Powersupply

The hEX can't handle 48V.

Its PoE is passive PoE, not af/at. Take a look at the spec sheet:

https://mikrotik.com/product/RB750Gr3
by Paternot
Fri Sep 13, 2019 5:43 pm
Forum: Beginner Basics
Topic: Wrong default route when router and modem start at the same time [SOLVED]
Replies: 5
Views: 656

Re: Wrong default route when router and modem start at the same time [SOLVED]

Wouldn't be easier just uncheck the "add default gateway", on the Mikrotik's DHCP client?
by Paternot
Fri Sep 13, 2019 4:15 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35879

Re: RouterOS v7.0beta1 (ARM)

Don't have a spare ARM, so can't test V7. But one thing I'd like to see is UTF8 support. I want to be able to write comments on my own language with all its characters available.

I know it isn't critical, but would be nice to have...
by Paternot
Thu Sep 12, 2019 2:30 am
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 945

Re: GRE dont-fragment - inherit from where? [SOLVED]

Well, it makes sense, to use the flag from the encapsulated packet.
by Paternot
Wed Sep 11, 2019 10:42 pm
Forum: Beginner Basics
Topic: Another Boater looking to use groove metal and HAP AC with WAN on Ether5
Replies: 9
Views: 1076

Re: Another Boater looking to use groove metal and HAP AC with WAN on Ether5

bridge -> ports

Remove port 5 from "bridge"
Add port 1 to "bridge"

Done.
by Paternot
Wed Sep 11, 2019 6:02 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35879

Re: RouterOS v7.0beta1 (ARM)

But why this whole bundle package thing is even there to begin with, is completely unclear. Well, I don't have an spare ARM to test the beta7, BUT 1) I imagine it is much better to just ship the router with all the capabilities: both in terms of Mikrotik support hassle and in terms of user/admin ma...
by Paternot
Tue Sep 10, 2019 1:12 pm
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 945

Re: GRE dont-fragment - inherit from where? [SOLVED]

Which parent device? The GRE tunnel just exists, it isn't attached to some interface. Would it be the interface through the connection is made?
by Paternot
Tue Sep 10, 2019 5:02 am
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 945

GRE dont-fragment - inherit from where? [SOLVED]

Ok, I understand the concept of "don't fragment". But on a GRE interface we have two options:

1) "No". Meaning "ok, fragment if needed"
2) "inherit". Meaning "inherit the value from..." From where? That's what I want to know.

Where does the value come from, if I choose "inherit"?
by Paternot
Tue Sep 10, 2019 4:16 am
Forum: General
Topic: Is the RB3011 a good fit?
Replies: 8
Views: 868

Re: Is the RB3011 a good fit?

Well, I would forget about the 3011, and would get a 4011. Much more CPU power, and just US$ 20,00 more. The 3011 should work, but for a little more money You can get something much better.
by Paternot
Fri Sep 06, 2019 11:38 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35879

Re: RouterOS v7.0beta1 (ARM)

Does anyone know if Mikrotik uses the kernel/official drivers on ROS7? Or is it still making them?
by Paternot
Fri Sep 06, 2019 1:41 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 194
Views: 35879

Re: RouterOS v7.0beta1 (ARM)

Amazing! Finally!

Now, to the grinding that is testing! :D
by Paternot
Tue Sep 03, 2019 11:15 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 1368

Re: hAP AC2 for home use

I just like to get the full package, to see what the full potential of the router is, it is not a major issue, just me being fussy lol.. Plus it is still using an old version of RouterOS and I cannot keep it up to date as the "check for updates" button is disabled... :( Stuart [/quote] Now, THAT is...
by Paternot
Mon Sep 02, 2019 11:36 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 1368

Re: hAP AC2 for home use

Excellent, thank you that make sense that is basically what Mikrotik said :) Will give t some thought now and may order one :) I must say I do like the compact size of the hAP AC Lite they sent.. The main reason is they restrict access.. This is all I see in RouterOS My menu.JPG But do You need mor...
by Paternot
Mon Sep 02, 2019 10:02 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 1368

Re: hAP AC2 for home use

Thank you .. The ISP and one of the supplies say they are "blank" then I ask Mikrotik Support and they say once I add a few things it works out the box... Confused lol hAP devices come with "AP Router" configuration: This type of configuration is applied to home access point routers to be used stra...
by Paternot
Mon Sep 02, 2019 4:44 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 1368

Re: hAP AC2 for home use

Just noticed the one they supply is the hAP AC Lite... Is the hAP AC2 the same thing just better specification? From what I read it looks the same apart from the specification. One supplier I looked at has the AC2 as an access point? I have been told by the same company and my ISP these are supplie...
by Paternot
Sat Aug 24, 2019 7:49 pm
Forum: General
Topic: 100% CPU load in CCR 1009
Replies: 22
Views: 2240

Re: 100% CPU load in CCR 1009

There are some videos on common mistakes made when configuring PPPoE concentrators on MikroTik. But I think it must be something else in your case, "console" is not supposed to use much CPU if any. No idea what it is even doing. Do you have any logging configuration that outputs a lot of info into ...
by Paternot
Sat Aug 03, 2019 4:06 pm
Forum: Beginner Basics
Topic: HW recommendation
Replies: 3
Views: 550

Re: HW recommendation

I would use the hAP ac2 in the hEX place. More CPU, better switch chip and You can always disable its WiFi, if not needed. Yes, it comes with "only" 128 MB of RAM. Trust me: for home usage 128 MB is plenty.
by Paternot
Sat Aug 03, 2019 3:47 pm
Forum: Beginner Basics
Topic: Router for 1Gbit Wan from Mikrotik (What model?)
Replies: 4
Views: 744

Re: Router for 1Gbit Wan from Mikrotik (What model?)

Just for home use? Try the hAP AC2 https://mikrotik.com/product/hap_ac2#fndtn-testresults It comes with WiFi, but You can disable it. Although the maximum routing speed is similar to the hEX3, it CPU is far better - and this will help with NAT and the rest. Both would do 2Gbps - but this is on an id...
by Paternot
Wed Jul 31, 2019 11:36 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 35898

Re: v6.45.2 [stable] is released!

We are reaching the point where 6.45.2 should be considered "unfit for purpose". Even the vulnerabilities it mitigates seem "less worse" than the problems it caused.

Waiting 6.45.3 (6.46?).
by Paternot
Tue Jul 30, 2019 8:44 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 35898

Re: v6.45.2 [stable] is released!

Not really. Step1: Download ALL necessary packages. Use RAM if needed. Step2: Verify ALL downloaded packages. Step3: If everything is ok, install packages. Done. This is how Linux Distros work: they download updates, verify integrity and then install. Okay, let's then imagine "out of disk space" is...
by Paternot
Mon Jul 29, 2019 3:31 am
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 35898

Re: v6.45.2 [stable] is released!

Indeed! I think that whole combined package thing should be dropped, and at some time all installations are converted to separate packages during the upgrade to a new version. What happens when some of downloaded packages are broken during download? If you have bundle package - then you have error ...
by Paternot
Wed Jul 17, 2019 6:19 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 609
Views: 154889

Re: RouterOS v7.0 beta1 - when?

RouterOS v7 is almost there, just need to add some components...



photo_2019-07-17_11-51-35.jpg
But will it run Crysis?
by Paternot
Fri Jul 05, 2019 5:10 pm
Forum: General
Topic: IPv6 gre
Replies: 5
Views: 352

Re: IPv6 gre

Hi Guys, Two routers, identical configuration: /interface gre add allow-fast-path=no ipsec-secret="blah" local-address=192.168.24.98 mtu=1520 name=gre-tunnel1 remote-address=192.168.24.54 /ipv6 address add address=X:X:X:101::16/126 advertise=no interface=gre-tunnel1 /ip address add address=1.1.1.1/...
by Paternot
Wed Jun 26, 2019 8:47 pm
Forum: Beginner Basics
Topic: make order in firewall rules
Replies: 7
Views: 603

Re: make order in firewall rules

v7 will arrive before we leave!
So soon? This month?
by Paternot
Sat Jun 22, 2019 8:05 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 71273

Re: v6.45beta [testing] is released!

I know the router tests integrity before installation, but Mikrotik could put the md5sums on the site too. It would be one easy way to find out if our download was corrupted.

EDIT

Nevermind, silly me. Just found the link to them. Not very practical, but it is there.
by Paternot
Thu Jun 20, 2019 3:50 pm
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 10452

Re: MikroTik News June 2019 (Issue #89)

When did they move the Cristo Redentor statue from Rio de Janeiro to Santa Cruz de la Sierra, Bolivia? Scratch head. Think about it. Take a look through window... nope, it's still there. At page 7 - future MUMs - either the last picture or the last description is wrong. It says Santa Cruz de la Sie...
by Paternot
Thu Jun 20, 2019 12:14 am
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 10452

Re: MikroTik News June 2019 (Issue #89)

Not a first mistake like this, you should claim your free MUM ticket.
viewtopic.php?f=21&t=135236&p=666260&hi ... et#p666260
LOL
True enough
by Paternot
Tue Jun 18, 2019 9:19 pm
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 10452

Re: MikroTik News June 2019 (Issue #89)

When did they move the Cristo Redentor statue from Rio de Janeiro to Santa Cruz de la Sierra, Bolivia? Scratch head. Think about it. Take a look through window... nope, it's still there. At page 7 - future MUMs - either the last picture or the last description is wrong. It says Santa Cruz de la Sier...
by Paternot
Mon Jun 17, 2019 2:16 am
Forum: General
Topic: Measure aggregate ipv4 vs ipv6 volume through router
Replies: 2
Views: 239

Re: Measure aggregate ipv4 vs ipv6 volume through router

There is one way, but it's quite cumbersome: Use one interface to Ipv4 traffic, and another one for IPv6. The easiest way is to give only IPv4 address to one, and only IPv6 address to another. You will use two router ports for each link and two switches ports for each link. Now You have two independ...
by Paternot
Sun Jun 16, 2019 3:54 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2843

Re: Radical change coming for home and small business networking

So CableLabs will transform the DOCSIS-standard into a propertary SDN concept that will only permit ISP-managed routers/APs? And every client will be micro-managed by the ISP in some way? Then lets just hope that people will hack the gateways and reverse engineer this stupidness. Let's hope people ...
by Paternot
Mon Jun 10, 2019 8:19 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1904

Re: Large Apartment, no Ethernet

I’ll be been told by the MK distributor here is Australia that that module can convert twisted pair to Ethernet unless I’m mistaken. You can use an MK SFP router at both ends to get the job done apparently. The building is an unusual set up, as I said earlier electricians have had a terrible time t...
by Paternot
Mon Jun 10, 2019 5:13 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1904

Re: Large Apartment, no Ethernet

Thanks Patenot, I've looked at these: https://shop.duxtel.com.au/product_info.php?cPath=24&products_id=341 they could help in places if there's twisted pair in place. Have you found this solution to be reliable? I have never used this one. But they need a CAT5 ethernet cabel - they doesn't use the ...
by Paternot
Mon Jun 10, 2019 4:43 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1904

Re: Large Apartment, no Ethernet

According to electricianss I've spoken to running data cable through the walls of other apartmnents in this building has been near impossible unless the walls are cracked open to do so. Do you have a landline? Is your landline available in several rooms? I used it to pass the ethernet cable. It doe...
by Paternot
Thu May 30, 2019 4:23 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 71273

Re: v6.45beta [testing] is released!

*) www - improved client-initiated renegotiation within the SSL and TLS protocols;
MikroTik team - could You explain? - please.
Let's hope this is not related to TLS protocol downgrade attacks...
Let's hope it is? Better to find, and close, than to leave it open...
by Paternot
Mon May 20, 2019 2:48 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 609
Views: 154889

Re: RouterOS v7.0 beta1 - when?

This is the day we were looking for. If there are any memorable dates in the Mikrotikls history, don't forget to add this day to it.

Now the question is: When we will be able to install the first public version?
When it's released. :D
by Paternot
Mon May 20, 2019 2:52 am
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 579

Re: Feature Request - Link down/up count

In SwOS? Yes, i know it is avaiable in ROS, but I dont see it nowhere in SWOS.

Xan You post screenshot and tell me whixh device does have it?

I know swos have diffrences between devices but...
Sorry, my mistake. I was talking about RoS... :D
by Paternot
Sat May 18, 2019 2:19 pm
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 579

Re: Feature Request - Link down/up count

We do have it. Take a look at the interface - it's the "Link Downs" counter.
by Paternot
Wed May 15, 2019 5:34 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 625

Re: RB750GR3 for a 30 PCs Gaming event?

The games are going to be Fortnite, LOL and CS:GO, 10 pcs for each. Fortnite is by far the harder one. CS.GO dont uses much, and im not sure about LOL. This link is interesting: https://www.whistleout.com.au/Broadband/Guides/how-much-data-do-I-need-for-online-gaming Fortnite would use 100MB/h - som...
by Paternot
Wed May 15, 2019 3:40 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 625

Re: RB750GR3 for a 30 PCs Gaming event?

can route 980 Mbps with 25 firewall rules and 512 bytes packet size. 512 bytes are fairly large packets. Most packets are a lot smaller than that. A lot of acks, etc. So the number you should look at is the one on the right, for 64 bytes. Mainly for two reasons, first it kinda provides a worst case...
by Paternot
Tue May 14, 2019 11:30 pm
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 625

Re: RB750GR3 for a 30 PCs Gaming event?

Nope, Gr3 won't do. Since you want ot balance, you'll need to skip FastTrack. Without it gr3 won't be able to cope with bandwidth. You need more power. 4011 will do for example Won't be enough a hAP ac2? About a quarter of the price, and can route 980 Mbps with 25 firewall rules and 512 bytes packe...
by Paternot
Tue May 14, 2019 5:28 am
Forum: RouterBOARD hardware
Topic: What is two gigabit lines for ports in Mikrotik hex gr3?
Replies: 2
Views: 508

Re: What is two gigabit lines for ports in Mikrotik hex gr3?

It would be good to have an official Mikrotik answer, but I don't think the lines are so clear divided. They look to me something more like the dual channel memory we have in computers: both channels are just used by what is needed. Take a look at this pdf. The block diagram is at page 2 http://www....
by Paternot
Wed May 08, 2019 2:24 pm
Forum: Beginner Basics
Topic: New Office LAN design - which router? Advice please
Replies: 3
Views: 388

Re: New Office LAN design - which router? Advice please

I would use two devices: switch and router. Easier to find something, and probably cheaper than buying something huge with lots of ports.
by Paternot
Sun May 05, 2019 4:37 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 917

Re: HELP: Access Mikrotik Router Externally

If you take umbrage with what I am saying tough mammaries, we can decide it through a manly Salad off! Come to my place and we will see who makes the best salad and much beer will have to be consumed during the competition.
That is tempting...
by Paternot
Sun May 05, 2019 3:12 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 764

Re: Long DNS timeouts

It should work, with two remote DNS servers. I did test them, and they work ok for me. But, first, lets clarify some things. 1) At the connection tab, you can make the mikrotik use the DNS server given by your ISP - or not. If you uncheck the "Use Peer DNS" option, your router will do the name resol...
by Paternot
Sun May 05, 2019 3:00 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 917

Re: HELP: Access Mikrotik Router Externally

It's because you're not expecting the worst. Why couldn't VPN server contain some "nice" remote code execution vulnerability? If you get root this way, you don't need anything else. :) I am expecting the worst. If my router's code is compromised, it's game over. Even when disabling all the services...
by Paternot
Sun May 05, 2019 1:55 am
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 917

Re: HELP: Access Mikrotik Router Externally

It depends on how much paranoid you are. Generally the less you allow the better. Plus we still remember recent WinBox bugs, especially that really ugly one causing password leaks. So if anyone isn't fully convinced that MikroTik found and fixed all such bugs, it's better to not have WinBox port op...
by Paternot
Sun May 05, 2019 1:45 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 764

Re: Long DNS timeouts

I turned off "use peer DNS" and things seem to be working now based on a short test. My computer is now telling me my DNS servers are 1.1.1.1 and 10.0.200.1 (I just pulled the OpenDNS entries out of there). Those are my ISP's DNS entries so I'm not sure how they're magically working now that I've t...
by Paternot
Sun May 05, 2019 1:42 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 764

Re: Long DNS timeouts

Your config............
/ip dns static
add address=208.67.222.222 name=208.67.222.222
add address=208.67.222.220 name=208.67.222.220


OpenDNS addresses, 208.67.222.222 and 208.67.220.220
Weird thing is, I did a DNS lookup and both 222 servers answered!
by Paternot
Sat May 04, 2019 3:56 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 8
Views: 980

Re: In over my head

Ah, yes: cieplik206 is right. Don't use the quick set more than once. It should be used once (many people don't like it, and don't use at all, me included), and never again. It can mess up what is already done. Groove should be ready to roll: it's default config is CPE Router, and that is exactly wh...
by Paternot
Sat May 04, 2019 2:44 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 764

Re: Long DNS timeouts

You changed ISP. So, the connection changed too. Is it pure DHCP? Is it PPPoE? Was it one thing, and the new router uses another? Why do I ask? Because several connections have the option "Use Peer DNS". If is checked, your router will use the DNS server of the ISP - and maybe these are slow. Take a...
by Paternot
Fri May 03, 2019 11:49 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 8
Views: 980

Re: In over my head

Before starting, make a backup. One can never have too many backups. :D Save it on your desktop. Just to be safe. 1) Connect to the router through wifi or ports 2, 3 or 4. Keep the Groove off, for now. 2) Log in the router. Go to "bridge -> ports" 3) Click at the ether5 port. Change it, from ether5 ...
by Paternot
Fri May 03, 2019 9:26 pm
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 1021

Re: Power out notification

It's not about monitoring voltage but more of the reason why a host is down In my opinion it seams very helpful to have an idea of why you cannot reach a certain device right now I can think of two scenarios: 1. host unreachable with no indication = uplink dead and you start investigating at the pr...
by Paternot
Thu May 02, 2019 2:54 am
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 1021

Re: Power out notification

Is it really that important to monitor the voltage, by the second? Or what You really want is to know when the router is unreachable? If it's the first, I don't have a solution for you. If it's the second, You can use Netwatch (https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch) to monitor a given...
by Paternot
Sun Apr 28, 2019 4:15 pm
Forum: General
Topic: mikrotik power on hours
Replies: 6
Views: 489

Re: mikrotik power on hours

I want check how much this device worked, because its for my friend and he told me it worked for 2month so i want check if it really worked 2month or not
That You can't do. They tell the uptime, but not the total work life of the machine.
by Paternot
Sun Apr 28, 2019 3:26 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 806

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

Have you tried accessing the device with ssh and then run command?
That's exactly through SSH that I did this...
by Paternot
Fri Apr 26, 2019 3:52 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 719

Re: RB1100AHx4 Dude Edition insecure by default

No router should be exposed to the internet without proper configuration. No device calling itself a router should have this as it's fully patched, default configuration out of the box be this: # jan/02/1970 00:03:18 by RouterOS 6.44.2 # software id = 20C3-04CF # # model = RB1100Dx4 # serial number...
by Paternot
Fri Apr 26, 2019 3:59 am
Forum: Beginner Basics
Topic: Slow L2TP/IPSEC. ¿Is HW acceleration being used?
Replies: 3
Views: 604

Re: Slow L2TP/IPSEC. ¿Is HW acceleration being used?

scp between hosts. L2TP/IPSec. One router is an RB1100AHx2. The other is a 750Gr3 (hEX). Result: 100% 945MB 6.0MB/s 02:36 (my internet is 60 Mbps up and down, so I can't ask for much more than this) CPU usage was about 40% in two "cores" (threads, really), with the other two at about 15%. == EDIT: t...
by Paternot
Fri Apr 26, 2019 3:36 am
Forum: General
Topic: Firmware upgrade
Replies: 6
Views: 467

Re: Firmware upgrade

But it would still likely be a second reboot - even if automatic, because ... The second reboot isn't the problem. The slow one is the first - when the router is doing all the upgrade. The problem is the fact that it isn't automatic. It increases the workload and time needed to complete the task. I...
by Paternot
Fri Apr 26, 2019 3:22 am
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 719

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). True, not labeled as WAN...but since the config does have Port 1 with DHCP client port it's acting as one. Hey, I know what Mikrotik devices can do,...
by Paternot
Thu Apr 25, 2019 11:42 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 719

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). That's because they are routers made to be used in a professional environment. Where You can't say which one (which two, which five?) port(s) will ge...
by Paternot
Wed Apr 24, 2019 5:41 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 Revisions
Replies: 15
Views: 2515

Re: S+RJ10 Revisions

Is there a way to cool them down to a normal temperature? I put two more fans into the CRS but 1 or 2 degrees is nothing in this situation... Maybe a peltier... 😁 Someone in the forum used small memory heatsinks. Give it a search, and you will find it. It was an SFP+ (I think it was SFP+) port over...
by Paternot
Wed Apr 24, 2019 4:59 pm
Forum: General
Topic: IPv6 deployment on individual /64
Replies: 3
Views: 310

Re: IPv6 deployment on individual /64

We are currently attempting to deploy ipv6 in our network. We plan to provide a /64 to each of our customers.
I'm with Sob here: just don't give a single /64 to your customers: it's plain evil, and will cost you dearly in the future - both in maintenance and customer churn.
by Paternot
Fri Apr 19, 2019 12:03 am
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 1036

Re: CRS328 and poe-out status: overload

Well, Mikrotik never said CRS328 would power 30W/port. In fact, it specifically tells that it goes as far as 450mA/port. I don't know this Zyxel, but looks like it can deliver more power/port than the CRS328. Ok, so I stick with 802.3at, Type2 PoE+ (https://mikrotik.com/product/crs328_24p_4s_rm tex...
by Paternot
Thu Apr 18, 2019 11:10 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 1036

Re: CRS328 and poe-out status: overload

I may have misunderstood you, but It looked to me that your powerbox was drawing 350mA before You plugged something more in it. Given the limit of 450mA/port, I think it is quite easy to exceed them, with this setup. It would need just 2 x 2,5W devices to get there. My fault, RB960PGS draws about 7...
by Paternot
Thu Apr 18, 2019 5:07 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 1036

Re: CRS328 and poe-out status: overload

https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You really are overloading the port. Yes, I checked it, and also I check same page with text: "CRS328-24P-4S+RM is a 28 independent port switch, it has ...
by Paternot
Thu Apr 18, 2019 4:12 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 1036

Re: CRS328 and poe-out status: overload

I am powering up two RC1100AHx2 through one CRS328 (different ports). So, it does support passive PoE. BUT, did you check the load on the port? https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You reall...
by Paternot
Thu Apr 18, 2019 3:34 am
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 525

Re: Problems with BitTorrent

Hi, thanks for your replies! anav - i attached the file, is it what you want ? ) Paternot - CPU load is 6%-30%, free memory 7.9-6.0Mb. Its like this before the problem and after it. Weird, it should work. CPU load is light, and memory is not exhausted. Your firewall rules are quite standard too. Ar...
by Paternot
Wed Apr 17, 2019 9:12 pm
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 525

Re: Problems with BitTorrent

Take a look at system -> resources, before the problem and after it.

We want to see memory and CPU usage. This unit is rater weak, and has only 32MB of RAM. With that many connections, conntrack may be eating all your RAM.
by Paternot
Wed Apr 17, 2019 7:11 pm
Forum: General
Topic: hardware upgrade - howto move certificates
Replies: 2
Views: 201

Re: hardware upgrade - howto move certificates

System -> certificates -> export

Then You have to import them on the new system.
by Paternot
Sun Apr 14, 2019 1:41 am
Forum: General
Topic: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]
Replies: 5
Views: 390

Re: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]

Windows uses broadcast to find others SMB shares - but You can just point it to one machine, and it will work - broadcast or not.

So, You can just type the FQDN of the machine you want to access, and windows will open it. Then, if You map this share, it will work just fine.
by Paternot
Sat Apr 13, 2019 5:03 pm
Forum: Beginner Basics
Topic: Router for my new home!
Replies: 14
Views: 1171

Re: Router for my new home!

Recommending RB951Ui-2HnD in year 2019 is ridiculous. This model has been here for ages. It does not have gigabit ports, CPU has just one core, wifi is just 2.4GHz. RB951Ui-2nD is even worse ... They need to move these archaic models, and others, to the archive section. Confusing for newcomers to s...
by Paternot
Fri Apr 12, 2019 4:36 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 71273

Re: v6.45beta [testing] is released!

Version 6.45beta31 has been released. *) ipsec - replaced policy SA address parameters with peer setting; A dream come true! :D Version 6.45beta31 has been released. *) ipsec - general improvements in policy handling; *) ipsec - use tunnel name for dynamic IPsec peer name; What, exactly, these two ...
by Paternot
Fri Apr 12, 2019 4:30 pm
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 710

Re: Why is my speed cut by 75%??

:D

And, yes: the CRS name is a bad one. Time and again we see people taking it literally (why shouldn't they?), and getting low speeds.
by Paternot
Thu Apr 11, 2019 11:15 pm
Forum: General
Topic: Mikrotik IP Cloud vs P2P
Replies: 8
Views: 588

Re: Mikrotik IP Cloud vs P2P

I know that my reply is not immediately useful for OP, because convincing some ISPs is difficult and even if you manage to convince yours, it's not enough, because you need IPv6 also in other locations served by other ISPs. But I have to say it from time to time, because sometimes it seems like peo...
by Paternot
Thu Apr 11, 2019 12:12 am
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 488

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

Yes, the potential that goes through is the potential that goes in the power unit. BUT the device does test, to see if the other side is capable of PoE.

Check the manual:
https://wiki.mikrotik.com/wiki/Manual:PoE-Out

What you are looking for is at "Port Settings".
by Paternot
Wed Apr 10, 2019 8:44 pm
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 488

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

There is an auto detection system, to find out if the device uses POE, and what type of it. As long as the PoE out port is set as "auto on" (or "off"), You can plug anything you want.
by Paternot
Tue Apr 09, 2019 5:13 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 24475

Re: v6 RC and v7 BETA

Well, I was actually referring to time before Diablo 2 .. I guess its too old for people to remember today... I think the hype for Diablo3 was grater than Diablo2. Don't get me wrong: I have all 3 (should have learned with D2, and never bought D3, but I digress), and hated what they did with D2. I ...
by Paternot
Tue Apr 09, 2019 5:07 pm
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 806

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

This is kind of common to all command-line access to RouterOS: the column width is fixed. I am not aware of a way around that in commandmode. You can either use winbox or webfig, or use API to retrieve this info to another system where you can print it the way you like. That's... disappointing. But...
by Paternot
Tue Apr 09, 2019 2:39 pm
Forum: General
Topic: Can't backup
Replies: 9
Views: 656

Re: Can't backup

1) Take a backup. Just because. ... and then junk it. If the device was hacked, this backup should never ever be restored by any chance. If device was not hacked ... you'll have it up and running with revised configuration anyways. Never underestimate Murphy's law. He may forget to backup some key ...
by Paternot
Tue Apr 09, 2019 2:37 pm
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 710

Re: Why is my speed cut by 75%??

Don't forget the hardware encryption: from 6.43.1 onward the RB3011 supports it. I would be careful with that... I already saw one report of RB3011 with panicking kernel , which I bet was caused by this "update"... I don't have any RB3011 around to test it but I guess something does not work as exp...
by Paternot
Tue Apr 09, 2019 5:37 am
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 710

Re: Why is my speed cut by 75%??

If you have RB3011 it will definitely improve your experience a lot: RB3011 is full-featured router with 2 cores on 1.4GHz , meanwhile CRS-125 has only 1 core on 600MHz . Simply said - it has 4.6 times more processing power. (also way more RAM which helps with some tasks) In addition, CRS125 has on...
by Paternot
Tue Apr 09, 2019 5:25 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 806

Output of "/routing bgp advertisements print" is truncated [SOLVED]

When dealing with IPv6 routes, the output of the command "/routing bgp advertisements print" is truncated: "PEER", "PREFIX" and "NEXTHOP" aren't big enough to display the output. Is it a bug? Or is there some parameter I can pass to solve it? /routing bgp advertisements print PEER PREFIX NEXTHOP AS-...
by Paternot
Tue Apr 09, 2019 5:04 am
Forum: General
Topic: Can't backup
Replies: 9
Views: 656

Re: Can't backup

Mikrotik had a vulnerability which allowed login through winbox without password. It is already patched, but maybe You had a vulnerable version. Since your users are gone, that is a possibility. Another possibility is the internal storage is getting old. Check if there is enough free space, if there...
by Paternot
Tue Apr 09, 2019 4:29 am
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 24475

Re: v6 RC and v7 BETA

But generally, people are hyped more than players of Diablo before release of new version. Many of them expect every trouble will be magically fixed.
That got me laughing like a mad man. Thanks, I needed it! :D
by Paternot
Sat Apr 06, 2019 2:02 am
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 12451

Re: v6.44.2 [stable] is released!

But there is an option you can check/uncheck, that is "Cache On Disk". It suggests one could use just ram to it, right? I guess when you don't "cache on disk" it won't cache at all. But I never tried it... I always use(d) squid proxy. I think that "don't cache on disk" means "cache on ram". It will...
by Paternot
Fri Apr 05, 2019 10:00 pm
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 12451

Re: v6.44.2 [stable] is released!

Yes indeed. And the storage is so tiny... It would be better to place the cache in ramdisk, but I don't know if the RouterOS proxy can do that. (mainly: what happens when the cache directory configured once does not exist after reboot, will it be re-created automatically?) I would have considered r...
by Paternot
Fri Apr 05, 2019 9:57 pm
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 12451

Re: v6.44.2 [stable] is released!

Goodbye flash, these flash chips MT uses are very low endurance... And they don't have to be better, if used for the purpose they are meant. Low endurance? They are rated to 100k writings! At least that I checked on were. I agree that it's a bad idea to use them for cache, but low endurance they ar...
by Paternot
Thu Apr 04, 2019 4:30 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 24475

Re: v6 RC and v7 BETA

All I can say is that development of v7 has picked up in the last few months, more than ever. While I can't promise anything stable, it is pretty safe to say, that some kind of public test release (like beta for specific platforms) could be expected this year. The chances of that happening are now ...
by Paternot
Thu Apr 04, 2019 12:58 am
Forum: General
Topic: [Feature request] Wireguard
Replies: 94
Views: 22716

Re: [Feature request] Wireguard

So what's the best plan? Pleas, prayers, bribes, threats, ...? :) A Raspberry Pi or similar to handle the features you wish to be in RouterOS but never appear... That's quite cumbersome. Maybe a short term solution - but complaining is a long term solution. How can Mikrotik knows what we want, if n...
by Paternot
Mon Apr 01, 2019 3:57 pm
Forum: Beginner Basics
Topic: IPSec question
Replies: 4
Views: 471

Re: IPSec question

Currently only IP addresses are allowed for SA parameters, however we have plans to change this pretty soon.
This would be a blessing. Just do a DNS lookup upon establishing the connection, and another one if it is broken. There are a lot of people with dynamic IPs on both ends.
by Paternot
Wed Mar 27, 2019 8:02 pm
Forum: General
Topic: Cloud IPs need to be blocked
Replies: 13
Views: 1075

Re: Cloud IPs need to be blocked

I have disabled Cloud and DNS service on the unit. But it still send request to those IPs. I have added rules to IP firewall rules but it is still happening. How can I stop these requests or block these Cloud IPs on the Routerboard? Did You disable "Cloud" AND "Update Time"? AFAIK they run independ...
by Paternot
Fri Mar 08, 2019 11:36 pm
Forum: Beginner Basics
Topic: Routing CCR 1036 and CRS 317
Replies: 2
Views: 222

Re: Routing CCR 1036 and CRS 317

I would guess his firewall is empty - even without NAT rules. The CCRs come without firewall rules.
by Paternot
Fri Mar 08, 2019 11:32 pm
Forum: Announcements
Topic: SwOS version 2.9 released!
Replies: 72
Views: 25712

Re: SwOS version 2.9 released!

@RobertF and @abrodkin SwOS has supported IGMP v1,v2,v3 since v2.5, also many issues have been addressed since then and now in v2.9 there is an additional port option to disable unknown multicast flooding. We are not aware of common IGMP Snooping problems anymore. If you experience problems using I...
by Paternot
Fri Mar 08, 2019 3:34 pm
Forum: Beginner Basics
Topic: Open VPN
Replies: 4
Views: 312

Re: Open VPN

hi, can anyone please advise if the RouterOS Level 4 router with 4 ports (MikroTik RB941-2nD-TC/UK) can be set up with Open VPN so that I can install a VPN of my own choice? thanks Yes, it can. There are some limitations: 1) Its CPU is quite weak. Don't expect much more than 20 Mbps of OpenVpn thro...
by Paternot
Fri Mar 08, 2019 3:19 pm
Forum: Forwarding Protocols
Topic: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?
Replies: 6
Views: 965

Re: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?

because I wanted to have a proven, good running solution that I can rely on at BGP. No DIY. Unfortunately, no such router was to be found on the MUM. Also from MT there was nothing new. Very sad ... Well, You can always run a CHR instance - this way You get a powerful x86 CPU to handle the single t...
by Paternot
Thu Mar 07, 2019 12:46 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 609
Views: 154889

Re: RouterOS v7.0 beta1 - when?

May not... But others will be borned.
The cycle of RoS?
by Paternot
Wed Mar 06, 2019 5:10 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 44
Views: 10127

Re: Overruns on CSS326-24G-2S+RM

Not my experience. Just looked at one of mine which shows an uptime of 199 days. There is 1 RX Overrun and 0 TX pauses. As I said, nothing faster than 1Gb/s.... But with 199 days uptime You are running 2.8, right? I upgraded from 2.8 to 2.9 (CSS326), and saw the increase in Rx Overrruns and Tx Paus...
by Paternot
Tue Mar 05, 2019 4:05 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2843

Re: Radical change coming for home and small business networking

Even in Brazil. Its a firmware update and works on existing gear. Even on pre DOCSIS 3.1 according to the webinar. It allows a ISP a new buis model with the ability to charge for each device and service. It also provides really advanced security. All at little cost to the ISP. I completely agree th...
by Paternot
Mon Mar 04, 2019 6:46 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2843

Re: Radical change coming for home and small buisness networking

Because what we need is another way to the ISPs control our internal networks. What could go wrong?
by Paternot
Sat Mar 02, 2019 11:46 pm
Forum: Wireless Networking
Topic: noob considering an ac2 vs. ac - not a performance based comparison, however...
Replies: 1
Views: 340

Re: noob considering an ac2 vs. ac - not a performance based comparison, however...

Gimmie 'the full cancer' - how can I have one device penetrate through all the walls (or closest to it)? You can't. Half the problem is to make the AP signal to reach the clients - here You can get quite high power with relative easy. But the other half is the other way around: to make the client's...
by Paternot
Fri Mar 01, 2019 4:16 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

Fix is in 6.45beta3
6.45 beta3 already? Wow, You guys are really cranking up the speed!
by Paternot
Fri Mar 01, 2019 4:13 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 609
Views: 154889

Re: RouterOS v7.0 beta1 - when?

There is obviously a huge stumbling block as to why a kernel upgrade has not happened, either in a 6.x version or the unicorn v7. Let’s not forget that Mikrotik is mostly made up of open source software, maybe one or more elements can’t be upgraded to a more recent kernel? My guess is that it’s fas...
by Paternot
Thu Feb 28, 2019 11:58 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

Updated a CCR1009 and RB4011 without any issues. Great work MT!
Now please make us happy with some BGP improvements in 6.45 :-)
Quote!!

is it true that for the BGP sessions, RouterOS use only one core?
Yes, it is.
by Paternot
Wed Feb 27, 2019 9:48 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 1164

Re: Hardware Selection

Paternot, interesting however, the diagram distinctly shows a 10gb link direct to the SFP+ port. Perhaps it would be fair to say that if no other etheports are used (other than WAN) then the SFP+ port may see traffic close to 10Mgb? In other words the router could use that sfp link to another manag...
by Paternot
Wed Feb 27, 2019 8:40 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 1164

Re: Hardware Selection

The RB4011 is better bang for the buck bartoz............. same engine better test results and a 10gig port (SFP+) which the 1100 doesnt have and its cheaper. Take a look at the block diagram. Yes, there is one SFP+ cage - but its 10Gb ethernet ports are connected in two groups of five - and each g...
by Paternot
Wed Feb 27, 2019 3:18 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

Paternot, everything looks good for you. Users menu was removed, each user is automatically converted to an identity and assigned to the peer.
Yes, it all works great - excellent job! I was pointing out to nichky that the upgrade went smooth. :D
by Paternot
Wed Feb 27, 2019 12:59 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

that was my point User has been replaced with pre-shared-key-xauth user and password. I want to be sure before implement on my clients Working ok after upgrade. I was using pre-shared-key-xauth and password. Yes, the system created that "peer9" out of the blue - but it did it only to have something...
by Paternot
Wed Feb 27, 2019 4:00 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 36352

Re: v6.44 [stable] is released!

Just upgraded to 6.44 /ip ipsec identity add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfandega1 add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfand...
by Paternot
Mon Feb 25, 2019 3:16 pm
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 741

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Thats true only for conntrack. Which he is using: the question was about NAT and port forwarding. Since it was a basic question, and he IS using conntrack, seemed better to talk about this possibility. The odds of someone using a stateless firewall in a h...
by Paternot
Mon Feb 25, 2019 2:15 am
Forum: Announcements
Topic: v6.44rc [testing] is released!
Replies: 67
Views: 12448

Re: v6.44rc [testing] is released!

Huh.. Funny thing, trying to upgrade 6.44 beta28 to rc4: [admin@XXXXX-Main] > log print 22:17:21 system,info installed routeros-mipsbe-6.44rc4 22:17:21 system,info installed multicast-6.44rc4 22:17:21 system,error not enough space for upgrade 22:17:21 system,info router rebooted I thought if packag...
by Paternot
Mon Feb 25, 2019 1:47 am
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 741

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Imagine two networks: 10.0.0.0/24 and 10.11.0.0/24 Computer at 10.0.0.2 wants to open a web site, at the address 10.11.0.5. In THIS case, src address is 10.0.2.2, and dst address is 10.11.0.5 Now, imagine you have a web server, at address 10.0.0.2, and som...
by Paternot
Sun Feb 24, 2019 5:06 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

Okay sod if I have something in series, 12v+12V+12v for example then I have to take care of inverter to handle 36v??
Yes, that's about it.
by Paternot
Sat Feb 23, 2019 9:56 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 6574

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
High as in frequentie? Or in channel bandwith? Or db power or what do you mean?
Sorry. Frequency.
by Paternot
Sat Feb 23, 2019 9:55 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

Much thanks Paternot! The issue is noise. If I can provide a noiseless solution that is a bit more inconvenient regarding transport etc, it may be worth it. I will just use one of these cheap babies. ;-) https://www.powertechsystems.eu/home/products/48v-lithium-ion-battery-pack/61ah-48v-lithium-ion...
by Paternot
Sat Feb 23, 2019 7:45 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

If it was for me perhaps but this will be used for official uses by sports organizations. I will be using only certified equipment. In addition I will be powering a laptop and thus my first link to a converter with two ac outlets is appealing. I also came across a dual batter to two female cigarett...
by Paternot
Sat Feb 23, 2019 7:31 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

You are missing the point. #3 is a big black hole mystery, how are you managing this.............. What kind of device are you using to connect between -female socket on poe injector and battery terminals + and - ???? PS yes two 24v batteries in series should do the trick. That is the easiest part....
by Paternot
Sat Feb 23, 2019 7:09 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

By $DEITY, no - much easier than this. 1) You charge the two batteries. At home, I imagine. 2) Take them to where the LHG60 will be used. 3) Connect the adapter between the PoE injector and the batteries terminals. 4) Plug the LHG on the injector. Done. Using 24V You don't have to worry about the bu...
by Paternot
Sat Feb 23, 2019 6:28 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1077

Re: Power Source for Temp Remote Location

You don't need to convert: batteries are DC, and PoE uses DC too. You have to think about voltage. You are talking about the WireDish (https://mikrotik.com/product/wireless_wire_dish), right? Take out the power adapter. It is rated to work between 12 - 57V. Then connect it directly to the DC voltage...
by Paternot
Sat Feb 23, 2019 2:55 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 6574

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high? /interface wireless info hw-info wlan_5GHz ranges: 4920-6100/5/a,an20,an40,ac20,ac40,ac80 tx-chains: 0 rx-chains: 0 ...
by Paternot
Thu Feb 21, 2019 1:36 am
Forum: Wireless Networking
Topic: Superchannel on ac radios?
Replies: 4
Views: 541

Re: Superchannel on ac radios?

I've been unable to enable Superchannel on any MikroTik ac radios that we've purchased. My organization is permitted to use 4.9 GHz, and I am trying to set a NetMetal 921UAGS-5SHPacD to 4.9 GHz. I've upgraded the license key to support extra channels, and it shows the "Extra-channels" feature on Sy...
by Paternot
Wed Feb 20, 2019 9:35 pm
Forum: General
Topic: Slow VPN Speeds
Replies: 4
Views: 2296

Re: Slow VPN Speeds

I just purchased a RB750Gr3. So far I love it. The purchase was made because my old router wouldn’t do more than 40Mbps over VPN. When I saw advertisements for the RB750Gr3 doing 400Mb+ over VPN I quickly made the purchase. Problem is I’ve been unable to obtain speeds over 10Mb so far. I have tried...
by Paternot
Fri Feb 15, 2019 1:48 am
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 55
Views: 29890

Re: Why people pair UBNT APs with MikroTik routers?

But all the complains about ARM are wireless related, right? A pure router (a true CCR) could do well, couldn't it? The 4011 has some problems with the FSP+ ports - but they are chipset related, not CPU related. Or I am missing something? https://forum.mikrotik.com/viewtopic.php?f=3&t=138613 Many m...
by Paternot
Thu Feb 14, 2019 10:11 pm
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 55
Views: 29890

Re: Why people pair UBNT APs with MikroTik routers?

So it seems it's CCR versus ROS7 ... I wonder who's loosing? If this is the case, then Mikrotik urgently needs to introduce new line of high-end routers which will replace current CCR roster, based on some modern platform (I wonder if ARM is that platform). I don't think Mikrotik can survive with t...
by Paternot
Tue Feb 12, 2019 3:02 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 6574

Re: v6.42.12 [long-term] is released!

Usually it is indicated by "("/system routerboard upgrade" required)" added to the specific change log entry. Automatic reboot would just pointlessly increase the total upgrade time necessary for really no benefit. No one can be expected to go through the logs, just to find it out. Why don't we get...
by Paternot
Tue Feb 12, 2019 3:00 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 6574

Re: v6.42.12 [long-term] is released!

There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it? Because there is no indication otherwise. Before the firmware number changed only when some upgrade was made to it. Now it is locked with the ROS version. How can we know when to upgrade? That was ...
by Paternot
Fri Jan 25, 2019 9:17 pm
Forum: General
Topic: Slow speeds on fibre with pppoe [SOLVED]
Replies: 4
Views: 773

Re: Slow speeds on fibre with pppoe [SOLVED]

Then highest speed we are able to achieve is about 500-520mbps when running a btest from client to server. We have been told the line mtu is 1500. The negotiated mtu of the pppoe interface is 1480. Are You running the btest client/server on the routers being tested? One shouldn't do it, as the btes...
by Paternot
Wed Jan 23, 2019 6:36 pm
Forum: General
Topic: BTest Server / Bandwidth Test, consistently 1 mbit send direction
Replies: 2
Views: 245

Re: BTest Server / Bandwidth Test, consistently 1 mbit send direction

The CHR instances are limited to 1 Mb/s, when You don't buy a license. I believe it is possible to get a time limited demo license, to test it.
by Paternot
Mon Jan 21, 2019 12:11 pm
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 26
Views: 6260

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router: On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance. That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D Isn't that mainly beca...
by Paternot
Mon Jan 21, 2019 2:59 am
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 26
Views: 6260

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router:

On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance.
That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D
by Paternot
Sat Jan 19, 2019 8:36 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83989

Re: v6.44beta [testing] is released!

The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. The compatibility table disagrees with You: https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table The S-RJ01 is supported on the CSS/CRS326-24G-2S+ models - and they are passive cooled switc...
by Paternot
Sat Jan 19, 2019 4:09 pm
Forum: RouterBOARD hardware
Topic: Please recommend router as bridge for 3000 concurrent users [SOLVED]
Replies: 9
Views: 1154

Re: Please recommend router as bridge for 3000 concurrent users [SOLVED]

Thank you for this suggestion, I have an idea in my mind - since network is already segmented (6 secondary switches) I can try to make it more cost effective by using a pair of CC1036-12G-4S-EM (3 switch per unit) instead of single CCR1072. It will be roughly 2000$ but should handle this situation ...
by Paternot
Sat Jan 19, 2019 3:50 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83989

Re: v6.44beta [testing] is released!

Does this mean the S-RJ01 is now compatible with the RB4011? The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. Look at the S-RJ01 page. It is only for actively-cooled devices! Hopefully some time, after yet more advances in technology, it will be possible t...
by Paternot
Sat Jan 19, 2019 2:39 am
Forum: Announcements
Topic: Photos of towers and masts
Replies: 55
Views: 15665

Re: Photos of towers and masts

^^^^
You can pay me what you want, you will not get me on that tower :shock: :shock:
Well, what I want to pay may not be so much... :lol:
by Paternot
Tue Jan 15, 2019 11:23 pm
Forum: General
Topic: IPv6 Link-Local Addresses
Replies: 6
Views: 661

Re: IPv6 Link-Local Addresses

IPv6 is completely dependent upon link local: it took over many tasks done by ARP in IPv4. Don't even try to run an IPv6 network without them.
by Paternot
Fri Jan 11, 2019 10:28 pm
Forum: Wireless Networking
Topic: OpenVPN
Replies: 4
Views: 511

Re: OpenVPN

Your IP address 192.168.x.x is a private one - no one will be able to reach it. Your ISP is doing NAT (or CGNAT).

Try to get a public IP address, or see if your ISP do a port forward to you (highly unlikely, but worth a try).
by Paternot
Thu Jan 10, 2019 1:55 am
Forum: SwOS
Topic: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?
Replies: 9
Views: 1800

Re: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?

The switch will try to get an IP from DHCP. Failing this, it will revert to 192.168.<don't remember> So. If you have a DHCP server on your network? If yes, can you browse the leases table? Cross check it with your switch MAC address, and use this IP. Failing this (well, Murphy rules), try the defaul...
by Paternot
Wed Jan 09, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70555

Re: RB4011

But it *does* have the signature MikroTik built-in torch light!
I'm all for bright leds - sometimes they are a life saver. But it would be great if we got these torches with a "mute" option. Something like "/system leds all dim|bright". THAT would be great. :D
by Paternot
Mon Dec 31, 2018 11:10 pm
Forum: General
Topic: Why (not) use Hairpin NAT
Replies: 28
Views: 2896

Re: Why (not) use Hairpin NAT

Edit: People use meth to escape their shitty lives. People speed in their cars because they can't manage their time well. People don't pick their dogs shit up because they're lazy. This is similar - people that have no idea what they're doing have created a solution to a problem they don't understa...
by Paternot
Mon Dec 31, 2018 11:02 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :) Not all devices have firewall enabled by default. Usually the ones destined to SOHO come with it. The others, don't. My RBD52G (hAP ac2) as prime example of a SOHO dev...
by Paternot
Mon Dec 31, 2018 1:24 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :)
Not all devices have firewall enabled by default.

Usually the ones destined to SOHO come with it. The others, don't.
by Paternot
Sun Dec 30, 2018 11:13 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

For some time default setup in ROS 6.43.x had no firewall. If one did reset with default setup (or received new unit with factory installed ROS of that version), firewall did not exist. ROS version 6.43.8 fixed this problem. His equipment is a switch - its default config doesn't have firewall rules.
by Paternot
Sun Dec 30, 2018 11:08 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

No I started initially with 6.43.7 minutes after I turned the power on the first time. The first thing I did after unboxing this router was upgrade to the latest Router OS on December 7th. On December 26th I upgraded again to the now current 6.43.8 and proceeded to try and lock things down. I am st...
by Paternot
Sun Dec 30, 2018 6:04 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1809

Re: Has this remote ROOT exploit been patched??

I setup the CRS328 to the best of my ability, got my network going, changed the Admin password and went about my life. A week later I went back in using winbox to check things. I went to the logs and frankly it scared the hell out of me!!! I saw a constant flow of failed login attempts from IP's al...
by Paternot
Fri Dec 28, 2018 6:31 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 22
Views: 3816

Re: CSS326-24G-2S+RM hangs until power cycle

Then it's either wrong configurations or faulty units. I thought there was something wrong with the firmware. I was on 2.8, now downgraded to 2.7 just in case. I will test it and see but probably will have to wait 6-10 days. I just got one of these and under SWOS it states upgrade 2.9 available but...
by Paternot
Thu Dec 27, 2018 1:58 am
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 22
Views: 3816

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the...
by Paternot
Wed Dec 26, 2018 6:34 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 10
Views: 1386

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a prob...
by Paternot
Wed Dec 26, 2018 4:29 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 22
Views: 3816

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the ...
by Paternot
Wed Dec 26, 2018 4:21 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 10
Views: 1386

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a probl...
by Paternot
Wed Dec 26, 2018 4:16 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 611

Re: Fiber optics SFP+ across HAP AC

so HAP AC can't accept GPON ONU module
This I don't know. What I do know is that it doesn't accept FSP+ modules. If it is an FSP (without the "+") module, it may accept.
by Paternot
Wed Dec 26, 2018 2:32 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 611

Re: Fiber optics SFP+ across HAP AC

You don't. The hAP AC doesn't have an SFP+ port. It has an SFP (without the +).
by Paternot
Tue Dec 11, 2018 5:44 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 45
Views: 8422

Re: hardware idea for a multiport switch

Interesting idea. But would it be denser? It is, already, 2U in height. We will need at least another 2U - to keep it "organized" and not break the cables. So, it's a 4U switch already. I'd say 5 or 6U - it's hard to pass all this cables.

Wouldn't be easier to just make a 4U switch?
by Paternot
Sun Dec 09, 2018 10:58 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70555

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...
by Paternot
Sun Dec 09, 2018 2:18 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70555

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...
by Paternot
Wed Dec 05, 2018 9:44 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 83989

Re: v6.44beta [testing] is released!

will still be single-threaded kind of but not exactly Enigmatic affirmation :mrgreen: Normis beeing Normis. :lol: :lol: If I remember correctly, the BGP process will be broken in multiple threads. The system route update itself will be single threaded - but we will have multiple threads doing anoth...
by Paternot
Fri Nov 30, 2018 10:29 pm
Forum: General
Topic: Crowd Funding of v7
Replies: 32
Views: 5378

Re: Crowd Funding of v7

Just for kicks, a paper about multithreaded BGP:

http://www.thinkmind.org/download.php?a ... 4_10_10029
by Paternot
Fri Nov 23, 2018 7:08 pm
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 787

Re: the problem about that extending the port of router

Well, the CRS328 has PoE out at each gigabit port. That was what You wanted, right? A switch to power up to 24 PoE devices? If it is the other way around (a gigabit switch, to be powered by PoE), then the CSS326 will fit. In fact, if you want to power the switch through PoE, the CRS328 will not wor...
by Paternot
Fri Nov 23, 2018 5:23 pm
Forum: General
Topic: Crowd Funding of v7
Replies: 32
Views: 5378

Re: Crowd Funding of v7

I always wonder how you guys decide which way to go, what things to focus on etc... hopefully its not like this :lol:
You owe me a new keyboard. :D
10 minutes laughing, and counting.
by Paternot
Fri Nov 23, 2018 5:16 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 44
Views: 10127

Re: Overruns on CSS326-24G-2S+RM

We are currently testing a new SwOS version for release, this version includes more fixes for performance and packet forwarding related issues which previously has been addressed in RouterOS. If you have a CRS series switch and observe the described problem with packet overruns only when using SwOS...
by Paternot
Fri Nov 23, 2018 5:13 pm
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 787

Re: the problem about that extending the port of router

The only Mikrotik switch I remember, with 24 ports and POE, is the CRS328. You will get 24 gigabit ports and 4 SFP+ cages. https://mikrotik.com/product/crs328_24p_4s_rm It have some problems with SWoS 2.8, so You will want to run it with RoS. Other than that, it's working fine for me. Thank you for...
by Paternot
Wed Nov 21, 2018 4:29 am
Forum: General
Topic: Unstable 10Gbit connection of Mikrotik CSS326-24G-2S+RM with Mikrotik S+RJ10 SFP [SOLVED]
Replies: 12
Views: 1165

Re: Unstable 10Gbit connection of Mikrotik CSS326-24G-2S+RM with Mikrotik S+RJ10 SFP [SOLVED]

You should use Cat6. Take a look at the SFP+ module brochure:

https://i.mt.lv/cdn/rb_files/sfp_splusr ... 150322.pdf

It clearly says that Cat6 (or Cat7) is needed to achieve 10Gb - and even then, only up to 30 meters.
by Paternot
Sat Nov 17, 2018 3:33 am
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 787

Re: the problem about that extending the port of router

The only Mikrotik switch I remember, with 24 ports and POE, is the CRS328. You will get 24 gigabit ports and 4 SFP+ cages.

https://mikrotik.com/product/crs328_24p_4s_rm

It have some problems with SWoS 2.8, so You will want to run it with RoS. Other than that, it's working fine for me.
by Paternot
Fri Nov 16, 2018 2:10 pm
Forum: Announcements
Topic: Photos of towers and masts
Replies: 55
Views: 15665

Re: Photos of towers and masts

5x directional antennas (ARC) and 1x 90 degree sector antenna (MTI)
Routerboards in the antennas and as router inside the manholes.
Cool! (pun intended)
by Paternot
Fri Nov 16, 2018 2:08 pm
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 14
Views: 4059

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

Support said to use ROS, but I don't want ROS on the 328 because its just a switch and SwOS is much quicker to make changes to vlans, etc
Use RoS. I have one 328, and it solved my problems. I don't like the idea too - but it's better than no 10GiB at all.
by Paternot
Wed Nov 14, 2018 3:31 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 790

Re: CRS 317/328 FCS Errors

Did support solve this for you? I want to add a CSS326 to my CRS328, but worried about the issues you had with the trunk, CRS326 is a lot more expensive just to get ROS (and SwOS works well for a switch). Do you have a DAC cable to try? Could it be FC specific? Support said it will be addressed on ...
by Paternot
Wed Nov 14, 2018 3:30 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 790

Re: CRS 317/328 FCS Errors

I'm afraid that in my case RouterOS works like sh*t. 10G connection between CRS317 and CRS328 is almost unusable so I don't know how to solve this issue. I don't have a CRS317, so I don't know how they behave. The CRS328 have a problem with SFP+ and SwOS - but works with RouterOS. The CSS326 are wo...
by Paternot
Tue Nov 13, 2018 7:22 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 790

Re: CRS 317/328 FCS Errors

I have bad news and good news. Which one do You want first? https://forum.mikrotik.com/viewtopic.php?f=17&t=139155 HAHA, thanks a lot, but I'd like to hear good news first. From what I've read it seems that there's software problem in RouterOS. I'm running ROS 43.4 on all Mikrotik devices. It also ...
by Paternot
Mon Nov 12, 2018 10:16 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 790

Re: CRS 317/328 FCS Errors

I have bad news and good news. Which one do You want first?

viewtopic.php?f=17&t=139155
by Paternot
Tue Nov 06, 2018 1:17 am
Forum: Beginner Basics
Topic: Meraki MX behind Mikrotik
Replies: 2
Views: 585

Re: Meraki MX behind Mikrotik

Be advised that the CRS328 is a switch, with a very weak CPU attached. If You try to use it to route more than a few hundred megabits it will not handle the load. It can switch at wire speed, it can run thousands of VLANs - but it will do a very poor job routing.
by Paternot
Mon Oct 29, 2018 5:39 am
Forum: General
Topic: IPSec throughput
Replies: 9
Views: 1306

Re: IPSec throughput

You saw one core at 100% - but did You found what was using it? I mean, we know there is something saturating one core - but we don't know what it is. Can you test again, and post the usage by core/process?
by Paternot
Sat Oct 27, 2018 5:03 am
Forum: General
Topic: Firewall rules not working after hacker infection
Replies: 3
Views: 494

Re: Firewall rules not working after hacker infection

If your router was compromised, netinstall it from zero. Use a known good export to restore (the backups would be easier - but there is no way to inspect what would be restored to the router), and go from there.

In other words: nuke'm from orbit - it's the only way!
by Paternot
Sun Oct 21, 2018 2:52 pm
Forum: General
Topic: How to choose router (which cpu/ram) for hotel [SOLVED]
Replies: 9
Views: 1070

Re: How to choose router (which cpu/ram) for hotel [SOLVED]

By "RoS code" do You mean scripts to run on the router's command line/scheduler? If yes, then they will run on every Mikrotik device. But remember that, as the hardware is different, You may have to adjust it a little. Things like number of internal switches, number of ports, name of ports (SPF vs e...
by Paternot
Sat Oct 13, 2018 5:41 am
Forum: General
Topic: Severe Performance Drop RB3011 [SOLVED]
Replies: 33
Views: 2195

Re: Severe Performance Drop RB3011 [SOLVED]

Going off of MikroTik's test results I figured the 3011 would be more than sufficient: Their test in routing with 25 ip filter rules shows a result of 2,453.1 Mbps. Granted, this is not with queuing. But is queuing really this hard on the available horsepower? For test results that approximate real...
by Paternot
Sat Oct 13, 2018 2:51 am
Forum: SwOS
Topic: CRS328-24P 4S+ -- throughput problems
Replies: 2
Views: 1351

Re: CRS328-24P 4S+ -- throughput problems

I have one of this switches too - there is a known problem, with it and SwOS. Mikrotik is aware, and said it will be addressed in future releases. I believe this thread will help You: https://forum.mikrotik.com/viewtopic.php?f=17&t=139155 There is one solution: run RoS, instead of SwOS. I know, I kn...
by Paternot
Sat Oct 13, 2018 2:40 am
Forum: Forwarding Protocols
Topic: RB4011 vs. CCR1009 BGP
Replies: 46
Views: 8172

Re: RB4011 vs. CCR1009 BGP

Yes, we are aware of this peculiarity and we are working also on new routers that have higher power per core, not just many cores. Awesome! Please consider a new CCR with ARM, 12G-4S+ and redudant PSUs. Would be ideal for smaller environments where you have fiber uplinks and access with copper. I w...
by Paternot
Wed Oct 10, 2018 6:24 pm
Forum: General
Topic: Unable to get full gigabit speed on RB750Gr3
Replies: 28
Views: 4135

Re: Unable to get full gigabit speed on RB750Gr3

After a lot of attempts, I found disabling the bridge STP protocol improving the speed, from ~840 Mbps to ~900 Mbps. This is the only thing I found useful now, a lot closer to the max speed of 940 Mbps now. Are You testing the speed with a single connection? Try with more than one (torrent is an op...
by Paternot
Sun Oct 07, 2018 7:55 pm
Forum: General
Topic: Unable to get full gigabit speed on RB750Gr3
Replies: 28
Views: 4135

Re: Unable to get full gigabit speed on RB750Gr3

So now my problem would be whether I need a better model. My RB750Gr3 doesn't use up the CPU and yet it doesn't achieve the full speed, is it my config problem or the hardware limitation? The RB750Gr3 has one CPU. This CPU has two cores. Each core has two threads. So, the CPU has four threads total...
by Paternot
Sat Oct 06, 2018 9:32 pm
Forum: General
Topic: Is mikrotik a good choice?
Replies: 56
Views: 3770

Re: Is mikrotik a good choice?

I see You test shows 46% of signal - but it shows your Mikrotik using 40MHz too. Try to change it to 20MHz of channel width and test again.
by Paternot
Mon Oct 01, 2018 3:08 am
Forum: Beginner Basics
Topic: Questions about PoE output ports
Replies: 1
Views: 258

Re: Questions about PoE output ports

Passive PoE is a completely different animal from 802.3af

This device can power 802.3af and at PoE - but only if powered by 48 - 57 volts. Take a look at the second paragraph:
https://i.mt.lv/cdn/rb_files/PowerBox_P ... 144017.pdf
by Paternot
Tue Sep 25, 2018 5:19 pm
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 14
Views: 4059

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

Well, I got an answer from support (Ticket#2018092022000621). I'm hopeful and disappointed. Hopeful because they know there is a problem, and will fix it in the future. Disappointed that there is no ETA for this. "Hello, We have observed a similar behavior and will try to fix this issue in upcoming ...
by Paternot
Sun Sep 23, 2018 12:50 am
Forum: General
Topic: restore back to identical devices never works :(
Replies: 28
Views: 1748

Re: restore back to identical devices never works :(

This is exactly what im sure everyone needs, way to 100% clone devices, while ignoring/reseting MAC adresses. Im also irritated that i need to spent 1 + hour setting new router for customer every time, while i could just restore my master configuration and just change few things... Too true. It can...
by Paternot
Sun Sep 23, 2018 12:49 am
Forum: General
Topic: restore back to identical devices never works :(
Replies: 28
Views: 1748

Re: restore back to identical devices never works :(

I totaly agree with you; it is "Official" policy, but... There's always a but :) If you restore a binary backup of A on B ( provided both are the same model. And I would STRONGLY advise to have them of same ROS and Firmware also ), this should work. Thing is, you'll have the MACs of A on B. I hope ...
by Paternot
Sat Sep 22, 2018 6:27 pm
Forum: General
Topic: restore back to identical devices never works :(
Replies: 28
Views: 1748

Re: restore back to identical devices never works :(

At the very leat, we should be able to import a backup into another device of same model and RoS/bootloader version. Certificates, users and all. Like I said, you can do that provided you reset the MACs. Not ideal, I agree, but workable. For the MACs, a simple "cleanup" script should make it that m...
by Paternot
Sat Sep 22, 2018 5:52 pm
Forum: General
Topic: restore back to identical devices never works :(
Replies: 28
Views: 1748

Re: restore back to identical devices never works :(

At the very leat, we should be able to import a backup into another device of same model and RoS/bootloader version. Certificates, users and all.
by Paternot
Sat Sep 22, 2018 3:19 pm
Forum: General
Topic: Mikrotik in space
Replies: 3
Views: 685

Re: Mikrotik in space

Amazing! Earth and space covered. Now whats left? Underwater and airborne?
by Paternot
Sat Sep 22, 2018 3:52 am
Forum: General
Topic: CRS317 Fans keep spinning every few minutes after 6.43.1 update
Replies: 2
Views: 614

Re: CRS317 Fans keep spinning every few minutes after 6.43.1 update

My CRS328 starts the fans at 40C, and stops them at about 36C. Quite annoying, as it goes on/off every 2 minutes or so. The CRS317 has no poE, so my theory was wrong: that this greater sensibility would be due the PoE internal PSUs.
by Paternot
Thu Sep 20, 2018 4:21 am
Forum: RouterBOARD hardware
Topic: RB951Ui-2HnD PoE out failure.
Replies: 5
Views: 1115

Re: RB951Ui-2HnD PoE out failure.

I was thinking about it. The declared max power usage of the Ubiquiti is 8W. At 24V that would be 0,3333 A. Inside the 500 mA limit allowed by the RB951Ui-2HnD, but not so much. But the network cable would run to the roof, where the Ubiquiti is. Longer lengths, lower voltage. Lower voltage... more A...
by Paternot
Tue Sep 18, 2018 10:53 pm
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

Hello Original question was how to protect router and connect to it from computer (not router) with dynamic IP. I can't use IPCloud on Windows 10 - do You agree? Regards Slawek No, I don't agree. Read the manual about it, and You will understand why. It would solve one of your problems - how to con...
by Paternot
Tue Sep 18, 2018 6:00 pm
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

Because I prefer simple and reliable solution. Of course IPCloud (could You give us url for that?) or any other dyn_dns solution is an option but this is another point of failure... In my opinion VPN is a best option because You can connect in secure way from any IP not only from your home. IP Clou...
by Paternot
Tue Sep 18, 2018 3:44 am
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

Set up all remote MT to call home to a sentral server using a secure VPN. It's not a good idea in my case. I have dynamic IP at home. So I'm looking in solution to safe connect to router with static IP. Is there a good example of VPN config? I saw a lot but without certs - could You share Your conf...
by Paternot
Mon Sep 17, 2018 10:08 pm
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 14
Views: 4059

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

Did support solve this for you? I want to add a CSS326 to my CRS328, but worried about the issues you had with the trunk, CRS326 is a lot more expensive just to get ROS (and SwOS works well for a switch). Do you have a DAC cable to try? Could it be FC specific? I didn't talked to them. Yet. Need to...
by Paternot
Mon Sep 17, 2018 9:51 pm
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

I'm not sure which one would be more secure. I'd go through the VPN/SSH certificate route. Just because is one more layer, before someone can do damage. First the VPN, then the SSH.
by Paternot
Mon Sep 17, 2018 7:06 pm
Forum: General
Topic: Really simple question about RB3011UiAS-RM
Replies: 6
Views: 502

Re: Really simple question about RB3011UiAS-RM

Before You jump the gun, take a look at the block diagram. The 4011, for example. It does have 10 Gb ports - but they are spread in two switches - and each switch has a 2,5Gb link with the CPU. This can be ok - or not - for Your use case. Best advice is: buy a router and a switch. Each device will d...
by Paternot
Mon Sep 17, 2018 7:02 pm
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

So next step is to use SSH but I read that I can't force to login using ONLY certificates (maybe I'm wrong?) so next step is VPN but here is also lack of using certyficates in client-server mode. When You add a certificate to a user the system disable password login for him. Just tested, with RoS 6...
by Paternot
Mon Sep 17, 2018 5:20 pm
Forum: General
Topic: How to remotely administer Mikrotik routers in safeway
Replies: 19
Views: 1326

Re: How to remotely administer Mikrotik routers in safeway

So next step is to use SSH but I read that I can't force to login using ONLY certificates (maybe I'm wrong?) so next step is VPN but here is also lack of using certyficates in client-server mode. When You add a certificate to a user the system disable password login for him. Just tested, with RoS 6...
by Paternot
Mon Sep 17, 2018 4:04 am
Forum: General
Topic: confused in solutions [SOLVED]
Replies: 3
Views: 378

Re: confused in solutions [SOLVED]

i'm in a hotel and i'm confused to do the following :- 1st i have problem that my 10M internet sometimes goes slow when we have 300 Clients ,so i want to put a solution to fix that slow cause by youtube and streaming of cource 2nd i want to add more internet Lines so i can have more two Lines each ...
by Paternot
Sun Sep 16, 2018 2:47 pm
Forum: Announcements
Topic: SwOS version 2.8 released!
Replies: 37
Views: 13025

Re: SwOS version 2.8 released!

CRS328-24P-4S+ have problems with SFP+: high count of Rx MAC Errors and Rx FCS Errors. Using fiber and S+85DLC03D modules.

viewtopic.php?f=17&t=139155
by Paternot
Sat Sep 15, 2018 12:14 am
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

Looks like SwOS 2.8 have some problems with 10Gb <-> 1Gb traffic. Tested with RoS 6.43 and SwOS 2.8 (same hardware, just booted one or other), and got this results:

viewtopic.php?f=17&t=139155&p=686352#p686352
by Paternot
Sat Sep 15, 2018 12:10 am
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 14
Views: 4059

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

Now I got more time to test this. First results: looks like it is some software problem. SwOS 2.8 have it far worse than RoS 6.43. I used two Linux desktop machines to test this: banda01 and banda02. banda01 is plugged in the sw02. banda02 is plugged in the sw03. They have to transverse sw01, throug...
by Paternot
Fri Sep 14, 2018 8:51 pm
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

No luck. I tried the upgrade, and got version 2.7p. Yes, 2.7p, not 2.7. Hit the upgrade again, but It got stuck on 2.7p. Downloaded 2.8 from site, and everything is back to normal. Didn't even had to restore the backup.
v27p.png
by Paternot
Fri Sep 14, 2018 8:35 pm
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

Yes but notice how the build date is different for the two 2.8 versions in your screenshot, installed and available.
Yes. That's weird too. I think I'll give it a try.
by Paternot
Fri Sep 14, 2018 7:10 pm
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

This is... weird. I can see, too, the version 2.9 - but I only get the 2.8 as available. Maybe a cosmetic bug?
v29.png
by Paternot
Fri Sep 14, 2018 1:51 pm
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

That’s what it offered as an upgrade, it only had 3 fixes over 2.8 but one of those was 1gbit sfp in crs328 so I applied if.
Do you use an 10Gb SFP+ fiber link? If so, do You have problems with Rx MAC Errors and Rx FCS Errors?
by Paternot
Fri Sep 14, 2018 5:42 am
Forum: General
Topic: Feature Request: Conditional DNS Forwarding
Replies: 5
Views: 1145

Re: Feature Request: Conditional DNS Forwarding

That would be great. The number of static entries I have...
by Paternot
Fri Sep 14, 2018 4:41 am
Forum: Beginner Basics
Topic: Are interface lists worth using?
Replies: 4
Views: 522

Re: Are interface lists worth using?

The lists make our lifes easier: with 3 WAN links, and lists, you don't have to change/create 3 rules - one for each interface. You just create a rule to a list. Much easier than deal with 3 of them. I don't think that it will have a measurable impact on performance. The address lists can - but we w...
by Paternot
Fri Sep 14, 2018 2:07 am
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

I have now "switched" (see what I did there) over to SwOS 2.9 and the fans just seem to run 24x7, but at least its consistent.
Do we have SwOS2.9 already? I only see 2.8 at the download page.
by Paternot
Thu Sep 13, 2018 5:55 pm
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 14
Views: 4059

High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

I got three switches: two CSS326-24G-2S+ and one CRS328-24P-4S+. They are still on the lab, being configured to production. Both the CSS326 are connected to the CRS328, through 10Gb fiber, using four S+85DLC03D SFP+ modules. All of them are running SwOS 2.8. I named the CRS328 SW01, and the two CSS3...
by Paternot
Wed Sep 12, 2018 3:57 am
Forum: Announcements
Topic: SwOS version 2.8 released!
Replies: 37
Views: 13025

Re: SwOS version 2.8 released!

Hello, We are investigating your reported issues about missing information in CRS328-24P-4S+ SFP and PoE menus. Meanwhile, you can load primary SwOS v2.7p from Serial Console in the same way as on CRS326-24G-2S+ https://wiki.mikrotik.com/wiki/SwOS/CSS326#Reset_and_Reinstall I can confirm port22 wit...
by Paternot
Tue Sep 11, 2018 4:18 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 28847

Re: v6.43 [current] is released!

I don't think you should release that summer intern from the basement until they have it working properly.
Yeah. Throw him in the basement, and make him work! To get faster results, lock the door. :D
by Paternot
Mon Sep 10, 2018 10:31 pm
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

Update: Started testing the switch. As soon as I got the second SFP+ link up, the fans started the on/off behavior. With just one ethernet and one SFP+ only they didn't run at all.. With one ethernet and two SFP+ they start/stop all the time.
fan_ativo.png
by Paternot
Mon Sep 10, 2018 1:36 am
Forum: RouterBOARD hardware
Topic: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?
Replies: 64
Views: 9242

Re: CRS328-24P-4S+RM - 24x7 fans or temperature sensitive?

Just got one CRS328. At the moment, runing SWOS 2.8, the fans are stopped and CPU at 68C.
This changes as soon as I start using POE - tested powering one CSS326-24G-2S+. Then I get the on/off fan behavior.
crs328.png
by Paternot
Sun Sep 09, 2018 5:18 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 70555

Re: RB4011

I liked the 4011. The only bad thing is the lack of USB: it can be quite handy sometimes... At its price point is a very good router.
by Paternot
Mon Sep 03, 2018 4:29 am
Forum: RouterBOARD hardware
Topic: CCR1009 - low single tcp tunnel performance? [SOLVED]
Replies: 9
Views: 1473

Re: CCR1009 - low single tcp tunnel performance? [SOLVED]

I use the mangle chain to divide traffic between two WANs, and the fasttrack doesn't seen to cause problems with it. I thought that routing-mark is per-packet, not per-connection. If you assign routing mark on connection level it's gonna persist and be taken into account in routing rules? I believe...
by Paternot
Sun Sep 02, 2018 8:35 pm
Forum: RouterBOARD hardware
Topic: CCR1009 - low single tcp tunnel performance? [SOLVED]
Replies: 9
Views: 1473

Re: CCR1009 - low single tcp tunnel performance? [SOLVED]

Why would fasttrack be less secure than no fasttrack? The streaming is marked to be fasttracked after the firewall looks into it, so I don't get this. in filter chain - yeah but there's plenty of caveats. For example mangle chain and packet marking. Iirc fasttracked packets don't get processed on p...
by Paternot
Sun Sep 02, 2018 1:13 am
Forum: RouterBOARD hardware
Topic: CCR1009 - low single tcp tunnel performance? [SOLVED]
Replies: 9
Views: 1473

Re: CCR1009 - low single tcp tunnel performance? [SOLVED]

So fasttrack results in full 10G support on CCR1009 even with single TCP tunnel. I'm still a bit disappointed though I hoped that I won't have to use fasttrack. I'm still a little bit concerned about fasttrack security. For now I enabled fasttrack only between machines with Intel X710 NICs because ...
by Paternot
Sat Sep 01, 2018 3:54 am
Forum: RouterBOARD hardware
Topic: R450G overheating at about 51oC temperature?
Replies: 19
Views: 1473

Re: R450G overheating at about 51oC temperature?

Couldn't be the other way around? A process starts using 100% CPU. The system freezes and reboots. Since there is less load, the temps go down. Maybe the problem isn't the temperature: maybe it is a symptom.
by Paternot
Wed Aug 22, 2018 2:42 am
Forum: Beginner Basics
Topic: Disable PoE
Replies: 5
Views: 2542

Re: Disable PoE


HEX PoE lite (RB750UPr2) has passible PoE. As I understand that means it does not check if the device uses PoE, so it's always on.
I got it wrong?
Not, it checks the other device. If the setting is on "auto detect" (factory default), then You can plug whatever You want - it will not be damaged.
by Paternot
Tue Aug 21, 2018 11:52 pm
Forum: Beginner Basics
Topic: Disable PoE
Replies: 5
Views: 2542

Re: Disable PoE

You don't need to worry about it. The router will detect if the device uses PoE, and enable/disable it accordingly. You can set this in the interface/ethernet panel. The "auto-on" option detects it, and turn the feature on of off. You can force off (no harm done, but it will NOT use PoE), and can fo...
by Paternot
Tue Aug 21, 2018 5:01 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 30956

Re: v6.42.7 [current] is released!

Upgraded one RB750Gr3 and three hAP ac lite. All working: IPsec and OpenVpn (server, RB750Gr3), BGP (small table, internal), PPPoE and wireless (802.11ac/n).
by Paternot
Sun Aug 19, 2018 5:23 am
Forum: Wireless Networking
Topic: High gain directional antenna to normal antenna
Replies: 3
Views: 378

Re: High gain directional antenna to normal antenna

It may, or not, improve the connection. The higher gain antenna also have a better reception. So, the normal one would get a louder signal, and the higher gain would get a better reception of the normal one.

It MAY be enough to improve things - but it's not certain.
by Paternot
Thu Aug 16, 2018 1:27 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 improperly auto negotiates to 10G
Replies: 3
Views: 932

Re: S+RJ10 improperly auto negotiates to 10G

This might help You: https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table#SFP.2B_interface_compatibility_settings_with_1G_links Oh okay. I read this bilion times in the past yet somehow I still forgot about this 1G sfp+ thingy. Still I believe that's not how autonegotiation is sup...
by Paternot
Tue Aug 14, 2018 4:51 pm
Forum: General
Topic: Migrating to IPv6
Replies: 3
Views: 409

Re: Migrating to IPv6

Thanks so much for the answer, it really helped me. I do not work with NAT now, only public IPv4's for all my clients, and I want to keep it that way, that's why I don't want to go the CGNAT route. My traffic providers already work with IPv6, so that's pretty much covered. Now what is left for me i...
by Paternot
Fri Aug 10, 2018 3:44 am
Forum: RouterBOARD hardware
Topic: No CRS with redundand power?
Replies: 6
Views: 746

Re: No CRS with redundand power?

If I have no further upgrade path I have no choice but to consider CHR or another vendor. It turns out that I can't put 1G SFP copper modules in 1072 too... It looks like there will be a number of CCRs in Bulgarian OLX soon :) According to Mikrotik documentation, You can: https://wiki.mikrotik.com/...
by Paternot
Tue Aug 07, 2018 11:26 pm
Forum: General
Topic: Backround upload traffic from google ips 172.217.x.x is saturating my upload speed
Replies: 7
Views: 566

Re: Backround upload traffic from google ips 172.217.x.x is saturating my upload speed

Are you sure it isn't Youtubers uploading their new vlog to their channel?? Maybe Android, doing backup of the daily collection of videos and photos. One day I made a long video, and when got home Android started the cloud backup. At the time I had 2Mb of upload, and took more than an hour to finis...
by Paternot
Tue Aug 07, 2018 9:41 pm
Forum: General
Topic: ROS 7 Beta
Replies: 42
Views: 12927

Re: ROS 7 Beta

Problem is: the development of V7 started more than 4 years ago. Started with development, or just mention that there may be a new version... I remember seeing a screenshot, posted by Normis, which showed the command line of ROS v7 alpha. It was almost two years ago, and gave the impression that de...
by Paternot
Tue Aug 07, 2018 2:44 pm
Forum: General
Topic: ROS 7 Beta
Replies: 42
Views: 12927

Re: ROS 7 Beta

So far the development effort even for the rc channel is being quite smooth. That's good. Meanwhile they have released new products like the w60 series. I guess they are working on v7, probably doing an enormous overhaul, and that will take a lot of time. Problem is: the development of V7 started m...
by Paternot
Mon Jul 30, 2018 3:19 am
Forum: The Dude
Topic: CCR CPU CHART
Replies: 2
Views: 617

Re: CCR CPU CHART

Thanks for so many replies :D i actually have it sorted :D
Don't mention it. You are welcome.
by Paternot
Fri Jul 20, 2018 6:52 pm
Forum: General
Topic: Which VPN type to choose..
Replies: 3
Views: 808

Re: Which VPN type to choose..

The bullet prof option (connection wise) is OpenVpn. It transverses NAT and double NAT without problems. You can pile any number of clients behind a single NATed IP, and it will work . It has clients to Windows, Linux, Android, MacOS and (I think) IoS. But it is not without problems. 1) Mikrotik doe...
by Paternot
Wed Jul 18, 2018 4:22 pm
Forum: Wireless Networking
Topic: poor range of 5Ghz, comparing to 2,4Ghz
Replies: 6
Views: 1141

Re: poor range of 5Ghz, comparing to 2,4Ghz

damn.. good to know about that -_- now just question if only to buy a custom repeater, or another MT device and set it up as repeater :D 2,4 GHz is having good range, but with that amount of noise I have near (at least 15 other networks), it's really hard to get good speed. thanks for reposones guy...
by Paternot
Tue Jul 17, 2018 12:19 am
Forum: Wireless Networking
Topic: poor range of 5Ghz, comparing to 2,4Ghz
Replies: 6
Views: 1141

Re: poor range of 5Ghz, comparing to 2,4Ghz

From my perspective 5GHz is totally useless if you want to serve more than a single room in your house.
Yes, depending upon the walls, the only way is to use more than one access point. I have two, and thinking about the third.
by Paternot
Mon Jul 16, 2018 5:50 pm
Forum: Wireless Networking
Topic: poor range of 5Ghz, comparing to 2,4Ghz
Replies: 6
Views: 1141

Re: poor range of 5Ghz, comparing to 2,4Ghz

5GHz has lower range than 2,4GHz, given the same conditions. It's a physics problem: frequency propagation, attenuation and wall penetration. Sure, we can tune the AP, we can use a less crowded channel - but 5GHz will have a smaller range than 2,4GHz. That's the way it is.
by Paternot
Mon Jul 09, 2018 6:26 am
Forum: RouterBOARD hardware
Topic: MikroTik specification - is throughput "duplex"? [SOLVED]
Replies: 5
Views: 944

Re: MikroTik specification - is throughput "duplex"? [SOLVED]

Mikrotik tests are simplex - You can see it in the footnotes, where they give the methodology.

BUT the switches are (as far as I know), non blocking. So, they can switch all the ports, at the same time, full duplex at capacity. Hence the "throughput 160" and "capacity 320".
by Paternot
Mon Jul 09, 2018 6:22 am
Forum: General
Topic: DC power option availability ?
Replies: 5
Views: 633

Re: DC power option availability ?

So as we are upgrading to higher speeds (CCR-1036 for 10 gig) , we started buying higher grade routers. To now find out that they don't have DC power input capabilities ? Dear Mikrotik, Not everyone has AC electric to ALL their Internet sites, and there are some of us that use DC powering as "Backu...
by Paternot
Thu Jul 05, 2018 11:38 pm
Forum: Beginner Basics
Topic: Google Fiber + Mikrotik hEX
Replies: 3
Views: 819

Re: Google Fiber + Mikrotik hEX

Hello - Equipment: hEX (RB750Gr3) w/ latest RC available Keep in mind that the RC versions are development/test. They aren't stable - and you shouldn't use them on production systems. If you need the new features, the "current" is quite stable - and is the more recent one can sanely get. If you REA...
by Paternot
Sun Jul 01, 2018 3:41 pm
Forum: Wireless Networking
Topic: Wireless Wire Dish PTP 60Ghz, spec sheet? PtMP Possible?
Replies: 4
Views: 1219

Re: Wireless Wire Dish PTP 60Ghz, spec sheet? PtMP Possible?

@Paternot WAP on Tower and LHG on CPE Side is better Choose I not tested it yet but i would go up to 500m with this PTMP Setup. Make sense. Here are a lot of Reports Using LHG on 1800m: https://forum.mikrotik.com/viewtopic.php?f=7&t=133374 Isn't 1800m an edge case? Will it hold during heavy rain or...