Community discussions

MikroTik App

Search found 691 matches

by Paternot
Thu May 28, 2020 2:45 pm
Forum: General
Topic: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.
Replies: 18
Views: 1930

Re: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.

I found that diagram always a bit strange. It states "integrated switch chip" integrated in the CPU? The the diagram is then not logical. That is why I prefer the other diagrams. Yes, integrated in the CPU. This is a SoC. I think this is a schematic diagram - the connections are not to some ports. ...
by Paternot
Thu May 28, 2020 2:32 pm
Forum: General
Topic: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.
Replies: 18
Views: 1930

Re: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.

I was really being silly, I forgot the simple fact that I am testing the speed over WiFi, which should theoretically get good results, but still. My WiFi (UAP-AC-LITE) can do: 867 Mbps @ 5Ghz on paper :lol: After plugging in into a LAN port I got new results, not all test sites I get good results a...
by Paternot
Thu May 28, 2020 5:44 am
Forum: General
Topic: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.
Replies: 18
Views: 1930

Re: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.

They are bellow what I expected. Not much, but some. Based on my CPU usage (I have an hEX - RB750Gr3, basically the same thing, without SFP), I estimated something about 600Mbps, with PPPoE. Yes, the VLAN will use some CPU. Don't know how much, never used it with this unit. What I find weird is the ...
by Paternot
Wed May 27, 2020 8:32 pm
Forum: General
Topic: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.
Replies: 18
Views: 1930

Re: Upgrade to HexS (RB760iGS) cannot get ultra fibre speed.

All went well, but I am unable to get 900MBPS, I am only able to get +/-400MPBS when testing with https://www.speedtest.net. I have disabled my queues, and put back fastback and still I cannot get to the promised 900MPBS. I am using PPoE together with a VPN. Testing with: https://www.speedtest.net ...
by Paternot
Wed May 20, 2020 2:20 am
Forum: Beginner Basics
Topic: Bridging vs Switching on CRS3xx series? [SOLVED]
Replies: 10
Views: 1315

Re: Bridging vs Switching on CRS3xx series? [SOLVED]

From a networkers standpoint a switch is a multiport bridge. Configuring a bridge with more than 2 ports with MT it is infact a switch. The other thing is wether bridging/switching is done with cpu or special asics. From a network standpoint, no doubt. The problem here is Mikrotik's parlance. We ha...
by Paternot
Tue May 19, 2020 2:18 am
Forum: Beginner Basics
Topic: Bridging vs Switching on CRS3xx series? [SOLVED]
Replies: 10
Views: 1315

Re: Bridging vs Switching on CRS3xx series? [SOLVED]

Bridging is not switching. When switching all the traffic pass through the switch chip, and that's it. When bridging the traffic passes through the CPU. It does little more than copying the packets from one port to another - but it crosses the CPU. To be clear: switching takes place inside the switc...
by Paternot
Wed May 13, 2020 1:08 am
Forum: Beginner Basics
Topic: Router for getting into RouterOS
Replies: 11
Views: 1754

Re: Router for getting into RouterOS

I just realized that hap ac2 has stronger hardware. The WiFi wouldn't be necessary in my opinion, but wouldn't hurt too. I see that there are differences with other specs, but can't be sure what's more important, sfp and poe or more muscle and wifi. What do you guys think? I think your needs are wh...
by Paternot
Tue May 12, 2020 7:09 pm
Forum: Beginner Basics
Topic: Router for getting into RouterOS
Replies: 11
Views: 1754

Re: Router for getting into RouterOS

If You don't need the SFP port, I would get an hAP ac2 instead. Much faster, about the same price and comes with dual band WiFi - that You can disable, if needed.
by Paternot
Sat May 09, 2020 3:41 am
Forum: RouterBOARD hardware
Topic: CCR2004 with 25G SFP28 but the new switches are 40G QSFP+
Replies: 5
Views: 1393

Re: CCR2004 with 25G SFP28 but the new switches are 40G QSFP+

The CCR2004 is the first of a new family. And it's the small one.
There is nothing official yet, but it is said that the bigger ones will have something interesting...

viewtopic.php?f=3&t=158149
by Paternot
Sat May 09, 2020 3:35 am
Forum: The User Manager
Topic: I want the total code
Replies: 3
Views: 1462

Re: I want the total code

Due to the ambiguity in the question - the answer to it will not be understood for a long time
That's easy: the answer is 42. :D
by Paternot
Fri May 08, 2020 9:36 pm
Forum: General
Topic: router randomly drops WAN connection
Replies: 9
Views: 2342

Re: router randomly drops WAN connection

so even if the cable works with the PC, it may not with the Mikrotik Am not really sure how that would make sense... Another hardware and another chipset, between Mikrotik and his computer. Might be enough to change a "barely within signal level" connection to "nope, don't hear you" one. I've seen ...
by Paternot
Wed May 06, 2020 8:09 pm
Forum: General
Topic: CRS326-24G-2S+RM as a Router
Replies: 6
Views: 979

Re: CRS326-24G-2S+RM as a Router

Thanks for reply. So if I add hEX or hAP (if I understand it correctly it doesn't matter that it is access point, it can work as a router as well) should I run switchOS or routerOS on CS326 or it doesn't matter regarding performance as long as there will be no routing configured on the switch? I wa...
by Paternot
Wed May 06, 2020 3:38 pm
Forum: General
Topic: CRS326-24G-2S+RM as a Router
Replies: 6
Views: 979

Re: CRS326-24G-2S+RM as a Router

I have to manage ~20 ethernet connections + at least 2 AP and make few VLANs so I found that CRS326-24G-2S+RM will be enough. As far as I know it has double boot with routerOS option. Should I buy additional hEX device for routing or the switch will handle my network? My Internet connection is 600/...
by Paternot
Tue May 05, 2020 12:18 am
Forum: Beginner Basics
Topic: Inter Vlan Routing
Replies: 27
Views: 3212

Re: Inter Vlan Routing

Thank you all for the advice. that you know, how boring Mikrotik products with sfp modules from other brands can be? Official word is: Mikrotik doesn't restrict others brands of SFP on purpose. There may be incompatibilities problems, and some brands go out of their way to restrict THEIR modules fr...
by Paternot
Mon May 04, 2020 3:43 pm
Forum: Beginner Basics
Topic: Inter Vlan Routing
Replies: 27
Views: 3212

Re: Inter Vlan Routing

Hello, Above is mentioned that the hex is not able to do VLAN routing. Is that due to performance ? Or is it not able at all? I bought one to experiment with RouterOS and set up the base for my config (incl. Inter-VLAN routing) before I move to a CRS or CCR device. Is that not possible? Lars Perfor...
by Paternot
Sun May 03, 2020 9:00 pm
Forum: RouterBOARD hardware
Topic: CCR2004-1G-12S+2XS with more RAM ?
Replies: 14
Views: 2812

Re: CCR2004-1G-12S+2XS with more RAM ?

Hi, we have currently processed a CCR1072 in use of the 4 full and a few more peerings. 2.6GB are currently used there. I will test the 2004 times, but I suspect that even with the 500Mhz more clocking, the calculation of the table only gets a little faster. The ARM used on the CCR2004 has far more...
by Paternot
Sun May 03, 2020 6:19 pm
Forum: Scripting
Topic: how do i get the system active user [SOLVED]
Replies: 15
Views: 2173

Re: how do i get the system active user [SOLVED]

thats what i need if i delete the argo in ppp interface i want automatically delete the argo in firewall address list You can declare an address list (or interface list) at the secrets file. This way each new connection will be put in that list. Easier than controlling it by hand. EDIT: It is not t...
by Paternot
Sun May 03, 2020 5:20 am
Forum: Beginner Basics
Topic: Internet on mikrotik router
Replies: 8
Views: 1212

Re: Internet on mikrotik router

2. Which one is more secure? - PPPoE on modem and mikrotik with DHCP Client on connection port with modem, act as DMZ router and "WAN" dynamic IP If You trust the ISP provided hardware. Even if Your (his) ISP is honest, it doesn't mean its routers are secure. Time and again we see problems left uns...
by Paternot
Sun May 03, 2020 5:14 am
Forum: Scripting
Topic: how do i get the system active user [SOLVED]
Replies: 15
Views: 2173

Re: how do i get the system active user [SOLVED]

If You want to know what users are logged on the Mikrotik router, then the ppp menu isn't the right place.

You will find this info in:

/user active print
by Paternot
Sun May 03, 2020 4:22 am
Forum: Beginner Basics
Topic: Inter Vlan Routing
Replies: 27
Views: 3212

Re: Inter Vlan Routing

If You want the router to just route internet traffic, I'd suggest the hAP ac2, instead. Costs a little more, but very little, and is quite faster. Comes with wireless too - but You can turn it off. Here it is: https://mikrotik.com/product/hap_ac2#fndtn-testresults I'd say this is the bare minimum t...
by Paternot
Fri May 01, 2020 4:09 am
Forum: Beginner Basics
Topic: Slowness for the first few seconds then fast on download
Replies: 17
Views: 2224

Re: Slowness for the first few seconds then fast on download

Well, this is weird. I use fasttrack, and don't get this problem. True, my ISP gives me far less speed than Yours - but my router is an RB750Gr3, not a 4011. What I see, with speed test: 1) Starts at about 280 - 350 Mbps. 2) Soon after (about 2 or 3 seconds) the traffic shaping of my provider comes ...
by Paternot
Thu Apr 30, 2020 2:16 pm
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 42
Views: 19762

Re: MikroTik newsletter May 2020 (#95)

If I remember correctly, these tests measure the speed of the payload traffic, not the speed at ethernet layer. That would explain the difference: due to the header overhead it hits the (theoretical) 35Gbps ceiling. That's not what the test results indicate; 1518 bytes is a full 1500-byte MTU Ether...
by Paternot
Thu Apr 30, 2020 2:17 am
Forum: General
Topic: Work not evenly distributed among the multiple CPU cores
Replies: 7
Views: 1438

Re: Work not evenly distributed among the multiple CPU cores

Well, it is a beta version, on a hardware that used only one core with RoS 6. I think it is reasonable to expect some teething problems... Maybe it finds the extra core, but doesn't initialize it properly?
by Paternot
Wed Apr 29, 2020 10:43 pm
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 42
Views: 19762

Re: MikroTik newsletter May 2020 (#95)

Yeah, but that's not what happens. If we assume that 35 Gbps is an IO limit (not due to the interconnect but something else, like memory bandwidth for instance as you say), the 64-byte result proves that the CPU can do 9.2 Mpps. Then why isn't it doing 8.5 Mpps to get to the same 35G at 512 bytes? ...
by Paternot
Wed Apr 29, 2020 5:46 pm
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 42
Views: 19762

Re: MikroTik newsletter May 2020 (#95)

Well, looks like the CCR1016-12S-1S+ is pretty much dead now. But the test results have me scratching my head. Either a box is PPS (CPU)-bound, or it is IO-bound. Looking at the block diagram, you can push a maximum of 50 Gbps through it (port extender uplink to the SOC is 2x25G). Yet the box maxes...
by Paternot
Tue Apr 28, 2020 5:45 pm
Forum: RouterOS v7 BETA
Topic: V7 questions?
Replies: 33
Views: 6168

Re: V7 questions?

Hello there. Thank you for your work on v7. I tried it on a VM and It looks like a promising version, with the fresh kernel and all. I have two questions: 2. Do you plan to publish v7 on the "development" upgrade channel and if yes, about when? They already publish it in the development channel. Ge...
by Paternot
Sun Apr 26, 2020 1:12 am
Forum: RouterBOARD hardware
Topic: SOLVED : RB4011iGS+RM : Unable to get more than 250Mbps Internet connection
Replies: 34
Views: 5317

Re: RB4011iGS+RM : Unable to get more than 250Mbps Internet connection

Just did that. and surprisingly, I now get 400mbps and no error on the ethernet layer. I am dumbfounded. I still need to figure why Chrome on my desktop caps at 200mbps though. After 4 consecutive speed test. That's weird. Well, glad to hear it works now. I have no idea about what could be causing ...
by Paternot
Sat Apr 25, 2020 9:07 pm
Forum: RouterBOARD hardware
Topic: SOLVED : RB4011iGS+RM : Unable to get more than 250Mbps Internet connection
Replies: 34
Views: 5317

Re: RB4011iGS+RM : Unable to get more than 250Mbps Internet connection

Did You look into the WAN ethernet stats, of the 4011? If a dumb switch change things, maybe we can see errors on the ethernet layer... Could you tell me what to look for in the stats of ETH1 ? I never done this kind of deep debuging. From CLI: /interface ethernet print stats from=ether1 From webfi...
by Paternot
Sat Apr 25, 2020 7:14 pm
Forum: RouterBOARD hardware
Topic: SOLVED : RB4011iGS+RM : Unable to get more than 250Mbps Internet connection
Replies: 34
Views: 5317

Re: RB4011iGS+RM : Unable to get more than 250Mbps Internet connection

Did You look into the WAN ethernet stats, of the 4011? If a dumb switch change things, maybe we can see errors on the ethernet layer...
by Paternot
Fri Apr 24, 2020 4:09 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 86
Views: 21975

Re: Feature Request - Wireguard Protocol

nz_monkey is spot on
Is this an subtle acknowledgement that you are working on it? :D
I wouldn't call it "subtle"...
It is logic, after all. It works, is easy to use and (now) was accepted in the kernel tree. But it may take some time - they already have their hands full with RoS 7.
by Paternot
Thu Apr 23, 2020 4:03 pm
Forum: Beginner Basics
Topic: Should I go for Router OS ?
Replies: 6
Views: 1375

Re: Should I go for Router OS ?

In other words, the routers and software are secure from the factory, the rest is up to you.
The SOHO routers are secure from factory. The big guns come with no firewall rules set. That's important to remember: no puting it on the internet before setting the interfaces, and a little firewall, on.
by Paternot
Thu Apr 23, 2020 3:34 am
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 139
Views: 23703

Re: Just going to leave this here...

which scenarios require vast amounts of RAM beyond 1.7GB ??? They are many? Jumping from 2GB to 4GB is enough for that scenarios?? One I can think of: full BGP tables. With the improvements made on RoS, and the higher single core speed, these new CCRs should work really well with this kind of load.
by Paternot
Wed Apr 22, 2020 5:48 pm
Forum: Beginner Basics
Topic: what microtik I need ?
Replies: 6
Views: 1115

Re: what microtik I need ?

Repeating is the worst case last ditch scraping the bottom of the barrel, no other hope, desperate beyond belief, almost insane solution. ;-P Avoid at all costs! Using the same radio to cover local area needs and tx and receive to another wireless entity just gives me shudders............... I thin...
by Paternot
Wed Apr 22, 2020 3:42 pm
Forum: Beginner Basics
Topic: what microtik I need ?
Replies: 6
Views: 1115

Re: what microtik I need ?

I need a microtik that connects to a wifi network (2.4 Ghz) and creates another 2.4Ghz wifi network (hotspot). I need to do natting and routing, dchpd between the two networks... At the same time? If You need it to be client AND AP at the same time, you will need a unit with two 2,4GHz radios. If y...
by Paternot
Tue Apr 21, 2020 6:00 am
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

I hardly can believe this CPU will still function at such a 60C ambient temperature. Just my guesstimate based on some long time experience and of course logic. Why not? 1) Mikrotik states it does. I sure hope they know the specs better than me - or you. Therefore I asked what CPU temperature is to...
by Paternot
Tue Apr 21, 2020 12:36 am
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

I hardly can believe this CPU will still function at such a 60C ambient temperature. Just my guesstimate based on some long time experience and of course logic. Why not? 1) Mikrotik states it does. I sure hope they know the specs better than me - or you. 2) I've seen a delta temperature of about 35...
by Paternot
Sun Apr 19, 2020 5:07 am
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

Excelent news! RoS 7 gets better and better! When will we see beta6? The (beta) release cycle is about two months... At least so far.
by Paternot
Sun Apr 19, 2020 1:20 am
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

It really looks like that they forgot to activate the second CPU core. Take a look at this Linux patchset documentation for this ARM CPU: Patch-set is vintage 2017, while linux kernel used in ROS v6 predates that (by a lot). So it just seems to me that MT did not back-port the patch. Linux kernel u...
by Paternot
Sat Apr 18, 2020 8:53 pm
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

@Paternot Thx. I'll still try to add a small fan to it as this said temperature of now 71C is even in idle mode with a CPU load of 0%, s.b., (only 2 devices attached, uplink to router and just a PC). I mean: what will happen if all 24 ports are in use at the same time, ie. in situations of heavy lo...
by Paternot
Sat Apr 18, 2020 6:07 pm
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

Here's another thread that's about the same issue (temperature on the CRS326): https://forum.mikrotik.com/viewtopic.php?t=124577 And here someone has made more pics and wrote about the internals of the device HW: https://tikguy.wordpress.com/2017/08/17/meet-the-crs326-24g-2srm/ What I don't underst...
by Paternot
Sat Apr 18, 2020 2:20 pm
Forum: RouterBOARD hardware
Topic: Adding a cooling fan to CRS326
Replies: 39
Views: 5465

Re: Adding a cooling fan to CRS326

But is there also a power source for it on-board? Am not sure if there is a power source for you to use, however the temperature is ok... I just saw a CRS326 i have in production and the CPU temp was at 72 C ... Thanks, this is a little bit easing... ...unless one looks at this: https://help.mikrot...
by Paternot
Fri Apr 17, 2020 9:42 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 6469

Re: Feature Request - BGP RPKI


No software update will ever fix this. The architecture (tile-gx) used in CCR-series was simply not designed for BGP routing.
Take a look at this video.
Yes, it is real - we already have confirmation from Mikrotik itself.

https://www.youtube.com/watch?v=NbfKplzda7I
by Paternot
Thu Apr 16, 2020 7:01 pm
Forum: RouterBOARD hardware
Topic: CRS328
Replies: 8
Views: 1970

Re: CRS328

It's high time to Mikrotik increase the flash size. At least 64MiB, when possible (some SOCs don't go higher than 16MiB). I have a CRS328-24P-4S+, running RoS 6.46.4 and used as a switch. No routing. No local logging. No files saved. Just a switch, with 9 VLANs, some PoE devices and two SPF+ 10Gib f...
by Paternot
Tue Apr 14, 2020 7:47 pm
Forum: General
Topic: ccr1036-8g-2s+ high CPU temperature [SOLVED]
Replies: 7
Views: 2043

Re: ccr1036-8g-2s+ high CPU temperature [SOLVED]

Air temp 37 degree???? Seems you have it a road POP... This core devices are designed for Data Room.
Although cooler is better, these devices are tested up to 60 degrees Celsius ambient temperature. I'd say they can take 37C. A little fresh air wouldn't be bad, tough.
by Paternot
Tue Apr 14, 2020 6:20 pm
Forum: RouterBOARD hardware
Topic: PoE Injectors
Replies: 5
Views: 1795

Re: PoE Injectors

You don't have to buy a switch. The cAP AC has two ethernet ports (let's call them eth1 and eth2). By default You would use eth1 facing the internet, and eth2 your LAN - but it is possible to turn it around: eth1 to your LAN and eth2 to the internet. All you have to do is move the ports around, turn...
by Paternot
Sun Apr 12, 2020 5:04 pm
Forum: RouterBOARD hardware
Topic: The correct scheme for connecting two Mikrotiks to three switches
Replies: 3
Views: 1868

Re: The correct scheme for connecting two Mikrotiks to three switches

There are two Mikrotik Сloud router switch 317-1g-16s + and three Edgeswitch 48 500w. Two Mikrotiks should have fault tolerance and routing, and the switches should serve the local network. These 317 are switches, not real routers. Yes, they CAN do layer 3 routing - but they are SLOW doing it. Thin...
by Paternot
Wed Apr 01, 2020 10:37 pm
Forum: General
Topic: RB750gr3 for 140mb WAN + 20 clients [SOLVED]
Replies: 10
Views: 2398

Re: RB750gr3 for 140mb WAN + 20 clients [SOLVED]

I'm using one, with a 90/90 connection (NAT and PPPoE). It uses about 10% of CPU - and when I'm doing torrents (hundreds of peers) at max speed. I use it with OpenVPN too. I can't get it to push more than about 30Mbps, and it uses about 40% of CPU to do it. This unit can do IPSec with hardware offlo...
by Paternot
Tue Mar 31, 2020 11:15 pm
Forum: General
Topic: IPv6 offload needed
Replies: 4
Views: 1388

Re: IPv6 offload needed

It's a limitation of RouterOS.

The hEX doesn't have it too, an uses the same chipset as the chinese You bought:

https://mikrotik.com/product/RB750Gr3
by Paternot
Sun Mar 29, 2020 11:53 pm
Forum: Beginner Basics
Topic: Create VPN with private IP address ISP
Replies: 16
Views: 2671

Re: Create VPN with private IP address ISP

First, the fact that the OP is behind CG NAT is something that you suppose or imagine.... CG NAT uses a specific address space that is 100.64.0.0/10, https://en.wikipedia.org/wiki/Reserved_IP_addresses Since we have seen no details we can't tell for sure that the OP is indeed behind CG NAT in speci...
by Paternot
Sun Mar 29, 2020 6:41 pm
Forum: Beginner Basics
Topic: Create VPN with private IP address ISP
Replies: 16
Views: 2671

Re: Create VPN with private IP address ISP

Read post #2 Exactly. It is the only way. If you dont know how to do NAT, or what DMZ is then yes for you it is sadly the only way...and it is obvious that you dont! Go on. Do this behind a CGNAT. Or go back, and read the first post more carefully. I'll wait. I ve done it countless times already......
by Paternot
Sun Mar 29, 2020 7:22 am
Forum: Beginner Basics
Topic: Create VPN with private IP address ISP
Replies: 16
Views: 2671

Re: Create VPN with private IP address ISP

You suggest people to get a server just because they are behind Nat ? He is behind a CGNAT. How else would he do it? Read post #2 Exactly. It is the only way. If you dont know how to do NAT, or what DMZ is then yes for you it is sadly the only way...and it is obvious that you dont! Go on. Do this b...
by Paternot
Sun Mar 29, 2020 7:21 am
Forum: RouterBOARD hardware
Topic: Testing Methodology differs for Switches and Routers [SOLVED]
Replies: 12
Views: 3760

Re: Testing Methodology differs for Switches and Routers [SOLVED]

@paternot: I'm not arguing usability of full-duplex port, I'm just wondering about definition of throughput in tests. I admit I've never read any test protocol specification, but from test results it seems to me that the published results are something like as follows: Take two devices and connect ...
by Paternot
Sat Mar 28, 2020 7:58 pm
Forum: RouterBOARD hardware
Topic: Testing Methodology differs for Switches and Routers [SOLVED]
Replies: 12
Views: 3760

Re: Testing Methodology differs for Switches and Routers [SOLVED]

even more so if one skips the full-duplex BS (a packet ingressing through one port eventually egresses through another port, using up capacity of two ports hence summing up full-duplex capacity of all ports is BS) I think the stated full-duplex speed is measured different. If the full-duplex speed ...
by Paternot
Sat Mar 28, 2020 7:44 pm
Forum: Beginner Basics
Topic: Create VPN with private IP address ISP
Replies: 16
Views: 2671

Re: Create VPN with private IP address ISP

You suggest people to get a server just because they are behind Nat ?
He is behind a CGNAT. How else would he do it?
Read post #2
Exactly. It is the only way.
by Paternot
Sat Mar 28, 2020 6:37 am
Forum: Beginner Basics
Topic: Create VPN with private IP address ISP
Replies: 16
Views: 2671

Re: Create VPN with private IP address ISP

You suggest people to get a server just because they are behind Nat ?
He is behind a CGNAT. How else would he do it?
by Paternot
Thu Mar 19, 2020 11:24 pm
Forum: General
Topic: RB260GS old vs new distinction
Replies: 3
Views: 1340

Re: RB260GS old vs new distinction

version 1.17 for RB250GS download version 1.17 for RB260GS, RB260GSP download version 2.11 for new RB260GS(CSS106-5G-1S), new RB260GSP(CSS106-1G-4P-1S) I am thinking about buying a RB260GS too, but I am not sure what I'll get. The trick is on the model number: CSS106-5G-1S. But I don't think You wi...
by Paternot
Fri Mar 13, 2020 2:04 am
Forum: General
Topic: Looking for POE Access Point Suggestions
Replies: 4
Views: 1346

Re: Looking for POE Access Point Suggestions

By the way: unless You know what You are doing, don't buy an RB2011: they have a very weak CPU. The two ARM ones I posted before will run circles around an RB2011, speed and routing capacity wise. With what You would spend with one RB2011 you could buy 2 ARM ones. That's enough to use one as router,...
by Paternot
Fri Mar 13, 2020 1:59 am
Forum: General
Topic: Looking for POE Access Point Suggestions
Replies: 4
Views: 1346

Re: Looking for POE Access Point Suggestions

I don't know if just one of them will cover your entire house, but Mikrotik sells these cheap indoor units, that can be setup as AP: MIPSBE - 802.11ac single chain https://mikrotik.com/product/RB952Ui-5ac2nD https://mikrotik.com/product/wsap_ac_lite ARM - 802.11ac dual chain https://mikrotik.com/pro...
by Paternot
Wed Mar 11, 2020 5:16 pm
Forum: Announcements
Topic: Winbox v3.22 released!
Replies: 117
Views: 44882

Re: Winbox v3.22 released!

winbox64 is always opnening in a small window.....see picture :-(

Unbenannt.JPG
Linux + Wine here.
Windows opens with the last used size and position.
by Paternot
Mon Mar 09, 2020 8:20 pm
Forum: General
Topic: Re-Use of non used L4 licencies
Replies: 7
Views: 1802

Re: Re-Use of non used L4 licencies

maybe... as I said I am not the judge, but when you buy a pc with preinstalled software (windows, office,...) you can still reuse that license on other pc when you decide to not use it there or when that pc stops working. As i said I dont think that preinstalled is an excuse... No, You don't. If yo...
by Paternot
Sat Mar 07, 2020 7:22 pm
Forum: RouterBOARD hardware
Topic: What hardware requirement is needed for my Mikrotic router?
Replies: 8
Views: 3574

Re: What hardware requirement is needed for my Mikrotic router?

You router will only route (right?). Storage size isn't important. Even one with 16MiB storage would do the routing just fine. Memory is important, but not that much: unless You want to do something like full BGP tables, 1 GiB of RAM will serve You just fine. Even 256 MiB (for routing and NAT) would...
by Paternot
Thu Mar 05, 2020 1:26 pm
Forum: General
Topic: Performance problem
Replies: 1
Views: 1235

Re: Performance problem

Yes, there are various router that can do 1Gb - even consumer ones. With wireless (consumer) https://mikrotik.com/product/hap_ac2 https://mikrotik.com/product/rb4011igs_5hacq2hnd_in Without wireless (consumer) https://mikrotik.com/product/RB3011UiAS-RM https://mikrotik.com/product/rb4011igs_rm A goo...
by Paternot
Thu Mar 05, 2020 1:17 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 139
Views: 23703

Re: Just going to leave this here...

If we really are talking about multiple 25G and QSFP28 - then the forwarding must be done in hardware on a switch ASIC. No ARM or Intel CPU can shuffle that amounts of data. It will probably then be a V7-only device with this specific forwarding delegation is implemented. That's an interesting thou...
by Paternot
Wed Mar 04, 2020 9:37 pm
Forum: RouterBOARD hardware
Topic: Using a RB3011 in 2020?
Replies: 8
Views: 3608

Re: Using a RB3011 in 2020?

i guess the RB3011 should do this trick just fine. i was running a RB2011 500/500 with 2/3 vlans, caps ,multiple vpns and +- 8 users. without setup of igmp, i dont see a problem here. The VLAN capabilities on switches varies, from one Mikrotik router to another. Take a careful look, and check if (I...
by Paternot
Tue Mar 03, 2020 1:13 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 139
Views: 23703

Re: Just going to leave this here...

Ah! Didn't think of google cache. Interesting prices too; 10K NT$ is only US $334,=. Somehow I don't think they'll be *that* cheap :D
I don't think they are the real prices. Many sites do this: put an impossible price, when the item is out of stock.
by Paternot
Tue Mar 03, 2020 1:10 pm
Forum: Announcements
Topic: SwOS version 2.11 released!
Replies: 46
Views: 46230

Re: SwOS version 2.11 released!

what about pause frames with CSS106-1G-4P-1S (new RB260GSP) on 2.11 ?? I just bough one of these units yesterday. At this time I have two things connected: an RB750Gr3 and a 952Ui-5ac2nD. My desktop is at the RB750Gr3 (gigabit), and another desktop is at the 952Ui-5ac2nD (fast ethernet). Before I s...
by Paternot
Tue Mar 03, 2020 12:50 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 139
Views: 23703

Re: Just going to leave this here...

All hail Google cache! :D
ccr2004-1g-12s+2xs.png
ccr2016-1g-12xs-2xq.png
by Paternot
Tue Mar 03, 2020 12:41 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 139
Views: 23703

Re: Just going to leave this here...

According to the links @Paternot found (but are gone now), XS would be '40 Gigabit' and XQ '40 Gigabit combo'. With '40 Gigabit' being (I assume) 40GBASE-T (because of the 'combo' bit, and we already have 'Q+' for QSFP+ 40G).
Gone? Stupid me - should've got some screens...
by Paternot
Tue Mar 03, 2020 1:35 am
Forum: Announcements
Topic: SwOS version 2.11 released!
Replies: 46
Views: 46230

Re: SwOS version 2.11 released!

One question related to the capac connected. Its MT router to 260gsp to capac. How come winbox does not see the capac? I can get to it by mac address so not a problem.
Firewall blocking connection?
by Paternot
Mon Mar 02, 2020 11:02 pm
Forum: Announcements
Topic: SwOS version 2.11 released!
Replies: 46
Views: 46230

Re: SwOS version 2.11 released!

I am used to green light blinking - activity up to 1gig connection, amber - activity up to 100mg connection. So MT in their infinite wisdom shows us three colours??????? Green = gig? Amber=?? Red=Poe?? Not quite - it's a little more convoluted than this: https://wiki.mikrotik.com/wiki/Manual:PoE-Ou...
by Paternot
Mon Mar 02, 2020 6:24 pm
Forum: Announcements
Topic: SwOS version 2.11 released!
Replies: 46
Views: 46230

Re: SwOS version 2.11 released!

**** the associated port light for the poe generating port, unlike the others does not flash green, it flashes alternating between amber(orange-yellow) and red.
Q1. Is this normal???
Yes, it is normal. Took me quite some time to get used to.
by Paternot
Sun Mar 01, 2020 4:10 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 115944

Re: v6.47beta [testing] is released!

Agreed. New icon set is horrendous
Those new are just UGLY, one color type.
Yes! Bring our colors back! It is much easier to find something on a glance when it is different from its neighbors...
by Paternot
Wed Feb 26, 2020 5:59 pm
Forum: General
Topic: what happened to NetPower
Replies: 10
Views: 3033

Re: what happened to NetPower

Only the 15FR is Fast Ethernet. Right You are. Completely overlooked the CRS318-16P-2S+, don't know why. The CSS610-8P-2S+ I don't know. It is said to have 2 SFP+, but the ethernet isn't described as "gigabit ethernet" - as it usually is. We have one typo here, and I don't know were. But it is good...
by Paternot
Wed Feb 26, 2020 5:37 pm
Forum: General
Topic: what happened to NetPower
Replies: 10
Views: 3033

Re: what happened to NetPower

The devices are quite interesting, but I think there is one serious problem: the client's ports are fast ethernet! Even without a 10Gb fiber this would be good enough to ISPs with plans of (say) 60Mbps, 90Mbps, 150Mbps and 300Mbps. I know, I know: many of You are in countries were gigabit FTTH is co...
by Paternot
Tue Feb 25, 2020 6:17 am
Forum: Announcements
Topic: SwOS version 2.10 released!
Replies: 54
Views: 83275

Re: SwOS version 2.10 released!

Not in announcements, not on software part of website. You sure? My CSS326-24G-2S+ finds an update: 2.11 (built at Thu Feb 20 2020 09:25:30 GMT-0300 But this is a production unit. No way I will install a just released version here. :D What's new in v2.11: *) try to acquire DHCP address even after i...
by Paternot
Tue Feb 18, 2020 10:33 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179385

Re: RouterOS v7.0 beta1 - when?

I prefer such a "dated" GUI any time over the "modern" low-contrast borderless black-background layout that others use. Even when selecting the white background I prefer to have borders between stuff and not those large white surfaces with grey or blue text floating in it. THIS. I hate the "modern"...
by Paternot
Thu Feb 13, 2020 10:36 pm
Forum: General
Topic: Performance RB951-2HnD
Replies: 7
Views: 1493

Re: Performance RB951-2HnD

How about an hAP ac2?

It costs a little more than the hEX - but its routing speed (at 25 rules and 512 bits/packet) is almost two times higher.

https://mikrotik.com/product/hap_ac2
by Paternot
Sat Feb 01, 2020 11:39 pm
Forum: General
Topic: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch
Replies: 31
Views: 4167

Re: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch

What? You just want a plain switch? Why didn't You say sooner? He said so right from the start. Why do you think most of us are having fun here. Well, I though he wanted to use one new switch, instead of both old ones. Otherwise "noise floor" wouldn't make sense. Would it? Although is an "audiophil...
by Paternot
Sat Feb 01, 2020 10:07 pm
Forum: General
Topic: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch
Replies: 31
Views: 4167

Re: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch

Technically, Mikrotik or Ubiquiti switches are probably better(with higher throughput values,pps values with faster CPUs etc.) than all audio-related, "audiophile" switches. I still need technically good devices. I am not only listening music on my network!! But for audio, my priorities are differe...
by Paternot
Sat Feb 01, 2020 3:56 am
Forum: General
Topic: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch
Replies: 31
Views: 4167

Re: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch

As I am new to both Mikrotik and Ubiquiti staff, I would like to hear your advices, experiences especially about audio-centric models fo home network(both optical and ethernet). Joking apart. You need a switch. Noise floor doesn't make sense here: it doesn't exist in the world of network packets. R...
by Paternot
Fri Jan 31, 2020 10:13 pm
Forum: General
Topic: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch
Replies: 31
Views: 4167

Re: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch

Posting here just for fun. The last one that got me laughing so hard were the "audio SATA cables".

Let me see...
Popcorn
Beer
Getting comfy...

Let the game begins.
by Paternot
Mon Jan 20, 2020 10:20 pm
Forum: Announcements
Topic: v6.46.2 [stable] is released!
Replies: 121
Views: 31136

Re: v6.46.2 [stable] is released!

Can anyone post reasonable reason why it's important? Verification that file is downloaded is plain strange. If you don't trust the auto-upgrade mechanism, use Fetch, or use other more reliable ways. Imagine that I sent the wrong upgrade package, and want to remove it. How? I can't boot the router ...
by Paternot
Fri Jan 10, 2020 2:59 am
Forum: RouterBOARD hardware
Topic: hAP ac² - more RAM than in HW specification [SOLVED]
Replies: 61
Views: 21371

Re: hAP ac² - more RAM than in HW specification [SOLVED]

Hello guys. I`m got new one device but with 128mb RAM ( Can some one, who have 256mb IC and disassembled cover write here information about IC marking with 256mb? I have plan about chandge 2 IC on 128 and 16 mb on more size. May be possible install 512 or more capasity. Translated by google transla...
by Paternot
Sun Sep 29, 2019 5:51 pm
Forum: RouterBOARD hardware
Topic: Does CRS328-24P-4S+RM support 24v passive poe?
Replies: 20
Views: 5633

Re: Does CRS328-24P-4S+RM support 24v passive poe?

Yes, it does. I'm using one to power two RB1100AHx2 and one hAP ac2 - all of them with 26 volts.
by Paternot
Fri Sep 27, 2019 4:56 pm
Forum: Beginner Basics
Topic: Does CRS326-24G come with license on purchase? [SOLVED]
Replies: 3
Views: 831

Re: Does CRS326-24G come with license on purchase? [SOLVED]

Just remember: The CRS is a switch, not a router. Yes, it runs RoS. Yes, it can route packages, if You want to do it. But no, its routing capacity is very very low, and will not get even close to wirespeed.

If you want to use it as a switch, it will perform at wirespeed levels.
by Paternot
Fri Sep 27, 2019 1:47 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 89
Views: 19148

Re: CSS326-24G-2S+RM hangs until power cycle

Hi Everyone, I just purchased a CSS326-24G-2S+RM to evaluate. I went ahead and upgraded to the 2.10 firmware. I'm going to test carefully with many GigE connections and both SFP+ ports active a 10GigE. One thing I've noticed right away: under the "System" tab, "Health" section, the temperature show...
by Paternot
Thu Sep 26, 2019 7:22 pm
Forum: Beginner Basics
Topic: Help to identify the correct products to buy (home net)
Replies: 4
Views: 753

Re: Help to identify the correct products to buy (home net)

If you expect that WiFi will be handy at that location, you can go for RBD52G-5HacD2HnD-TC which is a very decent router as well, plus it features both 2.4Ghz and 5GHz wireless. Why not the hAP AC2? Cost a (very) little more - but has more CPU, a better switch chip, more routing power and You can a...
by Paternot
Thu Sep 26, 2019 5:59 pm
Forum: Beginner Basics
Topic: Help to identify the correct products to buy (home net)
Replies: 4
Views: 753

Re: Help to identify the correct products to buy (home net)

[*]for main router, I'd recommend RB750Gr3 (wired only), has decent performance and should be fine up to some 200-400 Mbps of routing capacity (note that it'll do also inter-VLAN routing if there will be some, not only internet). If you expect that WiFi will be handy at that location, you can go fo...
by Paternot
Thu Sep 26, 2019 5:53 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53780

Re: RouterOS v7.0beta1 (ARM)

looks like beta2 is out:
viewtopic.php?f=1&t=152003#p752103

This time, we are also including the CHR images for more wide testing possibilities. Please report your findings.
And with CHR images! :D
https://mt.lv/v7
by Paternot
Wed Sep 25, 2019 1:52 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 40
Views: 13673

Re: Torrent client

But one should never do a network wide upgrade: it should be staged - at least to minimize the convergence time of routes and everything else. I don't want to imagine 10k routers rebooting a few minutes apart one from another. ok, further info about the upgrade process - something that was ingeniou...
by Paternot
Wed Sep 25, 2019 4:38 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 40
Views: 13673

Re: Torrent client

I don't think it would be that big of a problem. If your network has thousands of routers the bandwidth must be equally big. it is a bit tricky to serve this amount of data quickly. esp. upgrading large number of CPEs managed by some tr-069 based system can be a bottleneck. sw delivery with torrent...
by Paternot
Wed Sep 25, 2019 12:13 am
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 40
Views: 13673

Re: Torrent client

please, think in scale: upgrading 10s or 100s of 1000s CPEs can run into serious bottleneck. I don't think it would be that big of a problem. If your network has thousands of routers the bandwidth must be equally big. The firmware is about 12MB to each router. As of today, one can barely load 20 we...
by Paternot
Tue Sep 24, 2019 1:39 pm
Forum: Beginner Basics
Topic: Difference between RB941-2ND-TC and RB941-2nD
Replies: 3
Views: 770

Re: Difference between RB941-2ND-TC and RB941-2nD

Only the look is different. The device inside is the same. Only design, choose the one you like visually. The -ND unit is rated to ambient temperature of -20 to +60C. The -ND-TC is rated to ambient temperature of -20 to +70C. Is it a typing error, or they are really rated different? Don't believe w...
by Paternot
Mon Sep 23, 2019 4:29 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 40
Views: 13673

Re: Torrent client

No torrent client, please. It will waste resources from both the router and Mikrotik as a company. Better to focus in the router/wireless part, and deliver those long needed features.
by Paternot
Mon Sep 23, 2019 3:46 am
Forum: Useful user articles
Topic: CCR Takes the heat
Replies: 3
Views: 2747

Re: CCR Takes the heat

Yes, they can take the heat. The specs are up to 60C - ambient temperature.
Take a look at this one:
https://mikrotik.com/product/CCR1009-7G-1C-PC

Of course, 61C is a little over it, and I would not want to run it above 45C ambient. But, still, looks like it can really take 60C. Amazing, huh?
by Paternot
Fri Sep 20, 2019 5:47 pm
Forum: General
Topic: hEX PoE // Powersupply
Replies: 6
Views: 1323

Re: hEX PoE // Powersupply

The hEX can't handle 48V.
... and doesn't do PoE out.

But OP mentioned hEX PoE which handles 48V and can do 802.3af/at on output.
Geez, my mistake. Sorry about it. Today I shouldn't have got out of bed... can't concentrate on anything!
by Paternot
Fri Sep 20, 2019 5:14 pm
Forum: General
Topic: hEX PoE // Powersupply
Replies: 6
Views: 1323

Re: hEX PoE // Powersupply

The hEX can't handle 48V.

Its PoE is passive PoE, not af/at. Take a look at the spec sheet:

https://mikrotik.com/product/RB750Gr3
by Paternot
Fri Sep 13, 2019 5:43 pm
Forum: Beginner Basics
Topic: Wrong default route when router and modem start at the same time [SOLVED]
Replies: 5
Views: 1200

Re: Wrong default route when router and modem start at the same time [SOLVED]

Wouldn't be easier just uncheck the "add default gateway", on the Mikrotik's DHCP client?
by Paternot
Fri Sep 13, 2019 4:15 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53780

Re: RouterOS v7.0beta1 (ARM)

Don't have a spare ARM, so can't test V7. But one thing I'd like to see is UTF8 support. I want to be able to write comments on my own language with all its characters available.

I know it isn't critical, but would be nice to have...
by Paternot
Thu Sep 12, 2019 2:30 am
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 1836

Re: GRE dont-fragment - inherit from where? [SOLVED]

Well, it makes sense, to use the flag from the encapsulated packet.
by Paternot
Wed Sep 11, 2019 10:42 pm
Forum: Beginner Basics
Topic: Another Boater looking to use groove metal and HAP AC with WAN on Ether5
Replies: 9
Views: 1624

Re: Another Boater looking to use groove metal and HAP AC with WAN on Ether5

bridge -> ports

Remove port 5 from "bridge"
Add port 1 to "bridge"

Done.
by Paternot
Wed Sep 11, 2019 6:02 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53780

Re: RouterOS v7.0beta1 (ARM)

But why this whole bundle package thing is even there to begin with, is completely unclear. Well, I don't have an spare ARM to test the beta7, BUT 1) I imagine it is much better to just ship the router with all the capabilities: both in terms of Mikrotik support hassle and in terms of user/admin ma...
by Paternot
Tue Sep 10, 2019 1:12 pm
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 1836

Re: GRE dont-fragment - inherit from where? [SOLVED]

Which parent device? The GRE tunnel just exists, it isn't attached to some interface. Would it be the interface through the connection is made?
by Paternot
Tue Sep 10, 2019 5:02 am
Forum: General
Topic: GRE dont-fragment - inherit from where? [SOLVED]
Replies: 7
Views: 1836

GRE dont-fragment - inherit from where? [SOLVED]

Ok, I understand the concept of "don't fragment". But on a GRE interface we have two options:

1) "No". Meaning "ok, fragment if needed"
2) "inherit". Meaning "inherit the value from..." From where? That's what I want to know.

Where does the value come from, if I choose "inherit"?
by Paternot
Tue Sep 10, 2019 4:16 am
Forum: General
Topic: Is the RB3011 a good fit?
Replies: 8
Views: 1409

Re: Is the RB3011 a good fit?

Well, I would forget about the 3011, and would get a 4011. Much more CPU power, and just US$ 20,00 more. The 3011 should work, but for a little more money You can get something much better.
by Paternot
Fri Sep 06, 2019 11:38 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53780

Re: RouterOS v7.0beta1 (ARM)

Does anyone know if Mikrotik uses the kernel/official drivers on ROS7? Or is it still making them?
by Paternot
Fri Sep 06, 2019 1:41 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53780

Re: RouterOS v7.0beta1 (ARM)

Amazing! Finally!

Now, to the grinding that is testing! :D
by Paternot
Tue Sep 03, 2019 11:15 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 3841

Re: hAP AC2 for home use

I just like to get the full package, to see what the full potential of the router is, it is not a major issue, just me being fussy lol.. Plus it is still using an old version of RouterOS and I cannot keep it up to date as the "check for updates" button is disabled... :( Stuart [/quote] Now, THAT is...
by Paternot
Mon Sep 02, 2019 11:36 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 3841

Re: hAP AC2 for home use

Excellent, thank you that make sense that is basically what Mikrotik said :) Will give t some thought now and may order one :) I must say I do like the compact size of the hAP AC Lite they sent.. The main reason is they restrict access.. This is all I see in RouterOS My menu.JPG But do You need mor...
by Paternot
Mon Sep 02, 2019 10:02 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 3841

Re: hAP AC2 for home use

Thank you .. The ISP and one of the supplies say they are "blank" then I ask Mikrotik Support and they say once I add a few things it works out the box... Confused lol hAP devices come with "AP Router" configuration: This type of configuration is applied to home access point routers to be used stra...
by Paternot
Mon Sep 02, 2019 4:44 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 for home use
Replies: 12
Views: 3841

Re: hAP AC2 for home use

Just noticed the one they supply is the hAP AC Lite... Is the hAP AC2 the same thing just better specification? From what I read it looks the same apart from the specification. One supplier I looked at has the AC2 as an access point? I have been told by the same company and my ISP these are supplie...
by Paternot
Sat Aug 24, 2019 7:49 pm
Forum: General
Topic: 100% CPU load in CCR 1009 [SOLVED]
Replies: 22
Views: 3147

Re: 100% CPU load in CCR 1009 [SOLVED]

There are some videos on common mistakes made when configuring PPPoE concentrators on MikroTik. But I think it must be something else in your case, "console" is not supposed to use much CPU if any. No idea what it is even doing. Do you have any logging configuration that outputs a lot of info into ...
by Paternot
Sat Aug 03, 2019 4:06 pm
Forum: Beginner Basics
Topic: HW recommendation
Replies: 3
Views: 817

Re: HW recommendation

I would use the hAP ac2 in the hEX place. More CPU, better switch chip and You can always disable its WiFi, if not needed. Yes, it comes with "only" 128 MB of RAM. Trust me: for home usage 128 MB is plenty.
by Paternot
Sat Aug 03, 2019 3:47 pm
Forum: Beginner Basics
Topic: Router for 1Gbit Wan from Mikrotik (What model?)
Replies: 4
Views: 1062

Re: Router for 1Gbit Wan from Mikrotik (What model?)

Just for home use? Try the hAP AC2 https://mikrotik.com/product/hap_ac2#fndtn-testresults It comes with WiFi, but You can disable it. Although the maximum routing speed is similar to the hEX3, it CPU is far better - and this will help with NAT and the rest. Both would do 2Gbps - but this is on an id...
by Paternot
Wed Jul 31, 2019 11:36 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 47825

Re: v6.45.2 [stable] is released!

We are reaching the point where 6.45.2 should be considered "unfit for purpose". Even the vulnerabilities it mitigates seem "less worse" than the problems it caused.

Waiting 6.45.3 (6.46?).
by Paternot
Tue Jul 30, 2019 8:44 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 47825

Re: v6.45.2 [stable] is released!

Not really. Step1: Download ALL necessary packages. Use RAM if needed. Step2: Verify ALL downloaded packages. Step3: If everything is ok, install packages. Done. This is how Linux Distros work: they download updates, verify integrity and then install. Okay, let's then imagine "out of disk space" is...
by Paternot
Mon Jul 29, 2019 3:31 am
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 47825

Re: v6.45.2 [stable] is released!

Indeed! I think that whole combined package thing should be dropped, and at some time all installations are converted to separate packages during the upgrade to a new version. What happens when some of downloaded packages are broken during download? If you have bundle package - then you have error ...
by Paternot
Wed Jul 17, 2019 6:19 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179385

Re: RouterOS v7.0 beta1 - when?

RouterOS v7 is almost there, just need to add some components...



photo_2019-07-17_11-51-35.jpg
But will it run Crysis?
by Paternot
Fri Jul 05, 2019 5:10 pm
Forum: General
Topic: IPv6 gre
Replies: 5
Views: 746

Re: IPv6 gre

Hi Guys, Two routers, identical configuration: /interface gre add allow-fast-path=no ipsec-secret="blah" local-address=192.168.24.98 mtu=1520 name=gre-tunnel1 remote-address=192.168.24.54 /ipv6 address add address=X:X:X:101::16/126 advertise=no interface=gre-tunnel1 /ip address add address=1.1.1.1/...
by Paternot
Wed Jun 26, 2019 8:47 pm
Forum: Beginner Basics
Topic: make order in firewall rules
Replies: 7
Views: 1009

Re: make order in firewall rules

v7 will arrive before we leave!
So soon? This month?
by Paternot
Sat Jun 22, 2019 8:05 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 93218

Re: v6.45beta [testing] is released!

I know the router tests integrity before installation, but Mikrotik could put the md5sums on the site too. It would be one easy way to find out if our download was corrupted.

EDIT

Nevermind, silly me. Just found the link to them. Not very practical, but it is there.
by Paternot
Thu Jun 20, 2019 3:50 pm
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 16155

Re: MikroTik News June 2019 (Issue #89)

When did they move the Cristo Redentor statue from Rio de Janeiro to Santa Cruz de la Sierra, Bolivia? Scratch head. Think about it. Take a look through window... nope, it's still there. At page 7 - future MUMs - either the last picture or the last description is wrong. It says Santa Cruz de la Sie...
by Paternot
Thu Jun 20, 2019 12:14 am
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 16155

Re: MikroTik News June 2019 (Issue #89)

Not a first mistake like this, you should claim your free MUM ticket.
viewtopic.php?f=21&t=135236&p=666260&hi ... et#p666260
LOL
True enough
by Paternot
Tue Jun 18, 2019 9:19 pm
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 16155

Re: MikroTik News June 2019 (Issue #89)

When did they move the Cristo Redentor statue from Rio de Janeiro to Santa Cruz de la Sierra, Bolivia? Scratch head. Think about it. Take a look through window... nope, it's still there. At page 7 - future MUMs - either the last picture or the last description is wrong. It says Santa Cruz de la Sier...
by Paternot
Mon Jun 17, 2019 2:16 am
Forum: General
Topic: Measure aggregate ipv4 vs ipv6 volume through router
Replies: 2
Views: 497

Re: Measure aggregate ipv4 vs ipv6 volume through router

There is one way, but it's quite cumbersome: Use one interface to Ipv4 traffic, and another one for IPv6. The easiest way is to give only IPv4 address to one, and only IPv6 address to another. You will use two router ports for each link and two switches ports for each link. Now You have two independ...
by Paternot
Sun Jun 16, 2019 3:54 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 53
Views: 7168

Re: Radical change coming for home and small business networking

So CableLabs will transform the DOCSIS-standard into a propertary SDN concept that will only permit ISP-managed routers/APs? And every client will be micro-managed by the ISP in some way? Then lets just hope that people will hack the gateways and reverse engineer this stupidness. Let's hope people ...
by Paternot
Mon Jun 10, 2019 8:19 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 3149

Re: Large Apartment, no Ethernet

I’ll be been told by the MK distributor here is Australia that that module can convert twisted pair to Ethernet unless I’m mistaken. You can use an MK SFP router at both ends to get the job done apparently. The building is an unusual set up, as I said earlier electricians have had a terrible time t...
by Paternot
Mon Jun 10, 2019 5:13 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 3149

Re: Large Apartment, no Ethernet

Thanks Patenot, I've looked at these: https://shop.duxtel.com.au/product_info.php?cPath=24&products_id=341 they could help in places if there's twisted pair in place. Have you found this solution to be reliable? I have never used this one. But they need a CAT5 ethernet cabel - they doesn't use the ...
by Paternot
Mon Jun 10, 2019 4:43 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 3149

Re: Large Apartment, no Ethernet

According to electricianss I've spoken to running data cable through the walls of other apartmnents in this building has been near impossible unless the walls are cracked open to do so. Do you have a landline? Is your landline available in several rooms? I used it to pass the ethernet cable. It doe...
by Paternot
Thu May 30, 2019 4:23 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 93218

Re: v6.45beta [testing] is released!

*) www - improved client-initiated renegotiation within the SSL and TLS protocols;
MikroTik team - could You explain? - please.
Let's hope this is not related to TLS protocol downgrade attacks...
Let's hope it is? Better to find, and close, than to leave it open...
by Paternot
Mon May 20, 2019 2:48 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179385

Re: RouterOS v7.0 beta1 - when?

This is the day we were looking for. If there are any memorable dates in the Mikrotikls history, don't forget to add this day to it.

Now the question is: When we will be able to install the first public version?
When it's released. :D
by Paternot
Mon May 20, 2019 2:52 am
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 1969

Re: Feature Request - Link down/up count

In SwOS? Yes, i know it is avaiable in ROS, but I dont see it nowhere in SWOS.

Xan You post screenshot and tell me whixh device does have it?

I know swos have diffrences between devices but...
Sorry, my mistake. I was talking about RoS... :D
by Paternot
Sat May 18, 2019 2:19 pm
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 1969

Re: Feature Request - Link down/up count

We do have it. Take a look at the interface - it's the "Link Downs" counter.
by Paternot
Wed May 15, 2019 5:34 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 1133

Re: RB750GR3 for a 30 PCs Gaming event?

The games are going to be Fortnite, LOL and CS:GO, 10 pcs for each. Fortnite is by far the harder one. CS.GO dont uses much, and im not sure about LOL. This link is interesting: https://www.whistleout.com.au/Broadband/Guides/how-much-data-do-I-need-for-online-gaming Fortnite would use 100MB/h - som...
by Paternot
Wed May 15, 2019 3:40 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 1133

Re: RB750GR3 for a 30 PCs Gaming event?

can route 980 Mbps with 25 firewall rules and 512 bytes packet size. 512 bytes are fairly large packets. Most packets are a lot smaller than that. A lot of acks, etc. So the number you should look at is the one on the right, for 64 bytes. Mainly for two reasons, first it kinda provides a worst case...
by Paternot
Tue May 14, 2019 11:30 pm
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 1133

Re: RB750GR3 for a 30 PCs Gaming event?

Nope, Gr3 won't do. Since you want ot balance, you'll need to skip FastTrack. Without it gr3 won't be able to cope with bandwidth. You need more power. 4011 will do for example Won't be enough a hAP ac2? About a quarter of the price, and can route 980 Mbps with 25 firewall rules and 512 bytes packe...
by Paternot
Tue May 14, 2019 5:28 am
Forum: RouterBOARD hardware
Topic: What is two gigabit lines for ports in Mikrotik hex gr3?
Replies: 2
Views: 772

Re: What is two gigabit lines for ports in Mikrotik hex gr3?

It would be good to have an official Mikrotik answer, but I don't think the lines are so clear divided. They look to me something more like the dual channel memory we have in computers: both channels are just used by what is needed. Take a look at this pdf. The block diagram is at page 2 http://www....
by Paternot
Wed May 08, 2019 2:24 pm
Forum: Beginner Basics
Topic: New Office LAN design - which router? Advice please
Replies: 3
Views: 661

Re: New Office LAN design - which router? Advice please

I would use two devices: switch and router. Easier to find something, and probably cheaper than buying something huge with lots of ports.
by Paternot
Sun May 05, 2019 4:37 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 1460

Re: HELP: Access Mikrotik Router Externally

If you take umbrage with what I am saying tough mammaries, we can decide it through a manly Salad off! Come to my place and we will see who makes the best salad and much beer will have to be consumed during the competition.
That is tempting...
by Paternot
Sun May 05, 2019 3:12 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 1940

Re: Long DNS timeouts

It should work, with two remote DNS servers. I did test them, and they work ok for me. But, first, lets clarify some things. 1) At the connection tab, you can make the mikrotik use the DNS server given by your ISP - or not. If you uncheck the "Use Peer DNS" option, your router will do the name resol...
by Paternot
Sun May 05, 2019 3:00 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 1460

Re: HELP: Access Mikrotik Router Externally

It's because you're not expecting the worst. Why couldn't VPN server contain some "nice" remote code execution vulnerability? If you get root this way, you don't need anything else. :) I am expecting the worst. If my router's code is compromised, it's game over. Even when disabling all the services...
by Paternot
Sun May 05, 2019 1:55 am
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 1460

Re: HELP: Access Mikrotik Router Externally

It depends on how much paranoid you are. Generally the less you allow the better. Plus we still remember recent WinBox bugs, especially that really ugly one causing password leaks. So if anyone isn't fully convinced that MikroTik found and fixed all such bugs, it's better to not have WinBox port op...
by Paternot
Sun May 05, 2019 1:45 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 1940

Re: Long DNS timeouts

I turned off "use peer DNS" and things seem to be working now based on a short test. My computer is now telling me my DNS servers are 1.1.1.1 and 10.0.200.1 (I just pulled the OpenDNS entries out of there). Those are my ISP's DNS entries so I'm not sure how they're magically working now that I've t...
by Paternot
Sun May 05, 2019 1:42 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 1940

Re: Long DNS timeouts

Your config............
/ip dns static
add address=208.67.222.222 name=208.67.222.222
add address=208.67.222.220 name=208.67.222.220


OpenDNS addresses, 208.67.222.222 and 208.67.220.220
Weird thing is, I did a DNS lookup and both 222 servers answered!
by Paternot
Sat May 04, 2019 3:56 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 8
Views: 1588

Re: In over my head

Ah, yes: cieplik206 is right. Don't use the quick set more than once. It should be used once (many people don't like it, and don't use at all, me included), and never again. It can mess up what is already done. Groove should be ready to roll: it's default config is CPE Router, and that is exactly wh...
by Paternot
Sat May 04, 2019 2:44 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 1940

Re: Long DNS timeouts

You changed ISP. So, the connection changed too. Is it pure DHCP? Is it PPPoE? Was it one thing, and the new router uses another? Why do I ask? Because several connections have the option "Use Peer DNS". If is checked, your router will use the DNS server of the ISP - and maybe these are slow. Take a...
by Paternot
Fri May 03, 2019 11:49 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 8
Views: 1588

Re: In over my head

Before starting, make a backup. One can never have too many backups. :D Save it on your desktop. Just to be safe. 1) Connect to the router through wifi or ports 2, 3 or 4. Keep the Groove off, for now. 2) Log in the router. Go to "bridge -> ports" 3) Click at the ether5 port. Change it, from ether5 ...
by Paternot
Fri May 03, 2019 9:26 pm
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 1698

Re: Power out notification

It's not about monitoring voltage but more of the reason why a host is down In my opinion it seams very helpful to have an idea of why you cannot reach a certain device right now I can think of two scenarios: 1. host unreachable with no indication = uplink dead and you start investigating at the pr...
by Paternot
Thu May 02, 2019 2:54 am
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 1698

Re: Power out notification

Is it really that important to monitor the voltage, by the second? Or what You really want is to know when the router is unreachable? If it's the first, I don't have a solution for you. If it's the second, You can use Netwatch (https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch) to monitor a given...
by Paternot
Sun Apr 28, 2019 4:15 pm
Forum: General
Topic: mikrotik power on hours
Replies: 6
Views: 835

Re: mikrotik power on hours

I want check how much this device worked, because its for my friend and he told me it worked for 2month so i want check if it really worked 2month or not
That You can't do. They tell the uptime, but not the total work life of the machine.
by Paternot
Sun Apr 28, 2019 3:26 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 2916

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

Have you tried accessing the device with ssh and then run command?
That's exactly through SSH that I did this...
by Paternot
Fri Apr 26, 2019 3:52 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 1457

Re: RB1100AHx4 Dude Edition insecure by default

No router should be exposed to the internet without proper configuration. No device calling itself a router should have this as it's fully patched, default configuration out of the box be this: # jan/02/1970 00:03:18 by RouterOS 6.44.2 # software id = 20C3-04CF # # model = RB1100Dx4 # serial number...
by Paternot
Fri Apr 26, 2019 3:59 am
Forum: Beginner Basics
Topic: Slow L2TP/IPSEC. ¿Is HW acceleration being used?
Replies: 3
Views: 1363

Re: Slow L2TP/IPSEC. ¿Is HW acceleration being used?

scp between hosts. L2TP/IPSec. One router is an RB1100AHx2. The other is a 750Gr3 (hEX). Result: 100% 945MB 6.0MB/s 02:36 (my internet is 60 Mbps up and down, so I can't ask for much more than this) CPU usage was about 40% in two "cores" (threads, really), with the other two at about 15%. == EDIT: t...
by Paternot
Fri Apr 26, 2019 3:36 am
Forum: General
Topic: Firmware upgrade
Replies: 6
Views: 769

Re: Firmware upgrade

But it would still likely be a second reboot - even if automatic, because ... The second reboot isn't the problem. The slow one is the first - when the router is doing all the upgrade. The problem is the fact that it isn't automatic. It increases the workload and time needed to complete the task. I...
by Paternot
Fri Apr 26, 2019 3:22 am
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 1457

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). True, not labeled as WAN...but since the config does have Port 1 with DHCP client port it's acting as one. Hey, I know what Mikrotik devices can do,...
by Paternot
Thu Apr 25, 2019 11:42 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 1457

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). That's because they are routers made to be used in a professional environment. Where You can't say which one (which two, which five?) port(s) will ge...
by Paternot
Wed Apr 24, 2019 5:41 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 Revisions
Replies: 17
Views: 6287

Re: S+RJ10 Revisions

Is there a way to cool them down to a normal temperature? I put two more fans into the CRS but 1 or 2 degrees is nothing in this situation... Maybe a peltier... 😁 Someone in the forum used small memory heatsinks. Give it a search, and you will find it. It was an SFP+ (I think it was SFP+) port over...
by Paternot
Wed Apr 24, 2019 4:59 pm
Forum: General
Topic: IPv6 deployment on individual /64
Replies: 3
Views: 560

Re: IPv6 deployment on individual /64

We are currently attempting to deploy ipv6 in our network. We plan to provide a /64 to each of our customers.
I'm with Sob here: just don't give a single /64 to your customers: it's plain evil, and will cost you dearly in the future - both in maintenance and customer churn.
by Paternot
Fri Apr 19, 2019 12:03 am
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 12
Views: 4075

Re: CRS328 and poe-out status: overload

Well, Mikrotik never said CRS328 would power 30W/port. In fact, it specifically tells that it goes as far as 450mA/port. I don't know this Zyxel, but looks like it can deliver more power/port than the CRS328. Ok, so I stick with 802.3at, Type2 PoE+ (https://mikrotik.com/product/crs328_24p_4s_rm tex...
by Paternot
Thu Apr 18, 2019 11:10 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 12
Views: 4075

Re: CRS328 and poe-out status: overload

I may have misunderstood you, but It looked to me that your powerbox was drawing 350mA before You plugged something more in it. Given the limit of 450mA/port, I think it is quite easy to exceed them, with this setup. It would need just 2 x 2,5W devices to get there. My fault, RB960PGS draws about 7...
by Paternot
Thu Apr 18, 2019 5:07 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 12
Views: 4075

Re: CRS328 and poe-out status: overload

https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You really are overloading the port. Yes, I checked it, and also I check same page with text: "CRS328-24P-4S+RM is a 28 independent port switch, it has ...
by Paternot
Thu Apr 18, 2019 4:12 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 12
Views: 4075

Re: CRS328 and poe-out status: overload

I am powering up two RC1100AHx2 through one CRS328 (different ports). So, it does support passive PoE. BUT, did you check the load on the port? https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You reall...
by Paternot
Thu Apr 18, 2019 3:34 am
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 998

Re: Problems with BitTorrent

Hi, thanks for your replies! anav - i attached the file, is it what you want ? ) Paternot - CPU load is 6%-30%, free memory 7.9-6.0Mb. Its like this before the problem and after it. Weird, it should work. CPU load is light, and memory is not exhausted. Your firewall rules are quite standard too. Ar...
by Paternot
Wed Apr 17, 2019 9:12 pm
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 998

Re: Problems with BitTorrent

Take a look at system -> resources, before the problem and after it.

We want to see memory and CPU usage. This unit is rater weak, and has only 32MB of RAM. With that many connections, conntrack may be eating all your RAM.
by Paternot
Wed Apr 17, 2019 7:11 pm
Forum: General
Topic: hardware upgrade - howto move certificates
Replies: 2
Views: 358

Re: hardware upgrade - howto move certificates

System -> certificates -> export

Then You have to import them on the new system.
by Paternot
Sun Apr 14, 2019 1:41 am
Forum: General
Topic: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]
Replies: 5
Views: 667

Re: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]

Windows uses broadcast to find others SMB shares - but You can just point it to one machine, and it will work - broadcast or not.

So, You can just type the FQDN of the machine you want to access, and windows will open it. Then, if You map this share, it will work just fine.
by Paternot
Sat Apr 13, 2019 5:03 pm
Forum: Beginner Basics
Topic: Router for my new home!
Replies: 14
Views: 1806

Re: Router for my new home!

Recommending RB951Ui-2HnD in year 2019 is ridiculous. This model has been here for ages. It does not have gigabit ports, CPU has just one core, wifi is just 2.4GHz. RB951Ui-2nD is even worse ... They need to move these archaic models, and others, to the archive section. Confusing for newcomers to s...
by Paternot
Fri Apr 12, 2019 4:36 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 93218

Re: v6.45beta [testing] is released!

Version 6.45beta31 has been released. *) ipsec - replaced policy SA address parameters with peer setting; A dream come true! :D Version 6.45beta31 has been released. *) ipsec - general improvements in policy handling; *) ipsec - use tunnel name for dynamic IPsec peer name; What, exactly, these two ...
by Paternot
Fri Apr 12, 2019 4:30 pm
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 1202

Re: Why is my speed cut by 75%??

:D

And, yes: the CRS name is a bad one. Time and again we see people taking it literally (why shouldn't they?), and getting low speeds.
by Paternot
Thu Apr 11, 2019 11:15 pm
Forum: General
Topic: Mikrotik IP Cloud vs P2P
Replies: 8
Views: 999

Re: Mikrotik IP Cloud vs P2P

I know that my reply is not immediately useful for OP, because convincing some ISPs is difficult and even if you manage to convince yours, it's not enough, because you need IPv6 also in other locations served by other ISPs. But I have to say it from time to time, because sometimes it seems like peo...
by Paternot
Thu Apr 11, 2019 12:12 am
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 933

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

Yes, the potential that goes through is the potential that goes in the power unit. BUT the device does test, to see if the other side is capable of PoE.

Check the manual:
https://wiki.mikrotik.com/wiki/Manual:PoE-Out

What you are looking for is at "Port Settings".
by Paternot
Wed Apr 10, 2019 8:44 pm
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 933

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

There is an auto detection system, to find out if the device uses POE, and what type of it. As long as the PoE out port is set as "auto on" (or "off"), You can plug anything you want.
by Paternot
Tue Apr 09, 2019 5:13 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 29637

Re: v6 RC and v7 BETA

Well, I was actually referring to time before Diablo 2 .. I guess its too old for people to remember today... I think the hype for Diablo3 was grater than Diablo2. Don't get me wrong: I have all 3 (should have learned with D2, and never bought D3, but I digress), and hated what they did with D2. I ...
by Paternot
Tue Apr 09, 2019 5:07 pm
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 2916

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

This is kind of common to all command-line access to RouterOS: the column width is fixed. I am not aware of a way around that in commandmode. You can either use winbox or webfig, or use API to retrieve this info to another system where you can print it the way you like. That's... disappointing. But...
by Paternot
Tue Apr 09, 2019 2:39 pm
Forum: General
Topic: Can't backup
Replies: 9
Views: 1054

Re: Can't backup

1) Take a backup. Just because. ... and then junk it. If the device was hacked, this backup should never ever be restored by any chance. If device was not hacked ... you'll have it up and running with revised configuration anyways. Never underestimate Murphy's law. He may forget to backup some key ...
by Paternot
Tue Apr 09, 2019 2:37 pm
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 1202

Re: Why is my speed cut by 75%??

Don't forget the hardware encryption: from 6.43.1 onward the RB3011 supports it. I would be careful with that... I already saw one report of RB3011 with panicking kernel , which I bet was caused by this "update"... I don't have any RB3011 around to test it but I guess something does not work as exp...
by Paternot
Tue Apr 09, 2019 5:37 am
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 1202

Re: Why is my speed cut by 75%??

If you have RB3011 it will definitely improve your experience a lot: RB3011 is full-featured router with 2 cores on 1.4GHz , meanwhile CRS-125 has only 1 core on 600MHz . Simply said - it has 4.6 times more processing power. (also way more RAM which helps with some tasks) In addition, CRS125 has on...
by Paternot
Tue Apr 09, 2019 5:25 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 2916

Output of "/routing bgp advertisements print" is truncated [SOLVED]

When dealing with IPv6 routes, the output of the command "/routing bgp advertisements print" is truncated: "PEER", "PREFIX" and "NEXTHOP" aren't big enough to display the output. Is it a bug? Or is there some parameter I can pass to solve it? /routing bgp advertisements print PEER PREFIX NEXTHOP AS-...
by Paternot
Tue Apr 09, 2019 5:04 am
Forum: General
Topic: Can't backup
Replies: 9
Views: 1054

Re: Can't backup

Mikrotik had a vulnerability which allowed login through winbox without password. It is already patched, but maybe You had a vulnerable version. Since your users are gone, that is a possibility. Another possibility is the internal storage is getting old. Check if there is enough free space, if there...
by Paternot
Tue Apr 09, 2019 4:29 am
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 29637

Re: v6 RC and v7 BETA

But generally, people are hyped more than players of Diablo before release of new version. Many of them expect every trouble will be magically fixed.
That got me laughing like a mad man. Thanks, I needed it! :D
by Paternot
Sat Apr 06, 2019 2:02 am
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 18801

Re: v6.44.2 [stable] is released!

But there is an option you can check/uncheck, that is "Cache On Disk". It suggests one could use just ram to it, right? I guess when you don't "cache on disk" it won't cache at all. But I never tried it... I always use(d) squid proxy. I think that "don't cache on disk" means "cache on ram". It will...
by Paternot
Fri Apr 05, 2019 10:00 pm
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 18801

Re: v6.44.2 [stable] is released!

Yes indeed. And the storage is so tiny... It would be better to place the cache in ramdisk, but I don't know if the RouterOS proxy can do that. (mainly: what happens when the cache directory configured once does not exist after reboot, will it be re-created automatically?) I would have considered r...
by Paternot
Fri Apr 05, 2019 9:57 pm
Forum: Announcements
Topic: v6.44.2 [stable] is released!
Replies: 67
Views: 18801

Re: v6.44.2 [stable] is released!

Goodbye flash, these flash chips MT uses are very low endurance... And they don't have to be better, if used for the purpose they are meant. Low endurance? They are rated to 100k writings! At least that I checked on were. I agree that it's a bad idea to use them for cache, but low endurance they ar...
by Paternot
Thu Apr 04, 2019 4:30 pm
Forum: General
Topic: v6 RC and v7 BETA
Replies: 126
Views: 29637

Re: v6 RC and v7 BETA

All I can say is that development of v7 has picked up in the last few months, more than ever. While I can't promise anything stable, it is pretty safe to say, that some kind of public test release (like beta for specific platforms) could be expected this year. The chances of that happening are now ...
by Paternot
Thu Apr 04, 2019 12:58 am
Forum: General
Topic: [Feature request] Wireguard
Replies: 134
Views: 40305

Re: [Feature request] Wireguard

So what's the best plan? Pleas, prayers, bribes, threats, ...? :) A Raspberry Pi or similar to handle the features you wish to be in RouterOS but never appear... That's quite cumbersome. Maybe a short term solution - but complaining is a long term solution. How can Mikrotik knows what we want, if n...
by Paternot
Mon Apr 01, 2019 3:57 pm
Forum: Beginner Basics
Topic: IPSec question
Replies: 4
Views: 905

Re: IPSec question

Currently only IP addresses are allowed for SA parameters, however we have plans to change this pretty soon.
This would be a blessing. Just do a DNS lookup upon establishing the connection, and another one if it is broken. There are a lot of people with dynamic IPs on both ends.
by Paternot
Wed Mar 27, 2019 8:02 pm
Forum: General
Topic: Cloud IPs need to be blocked
Replies: 13
Views: 1909

Re: Cloud IPs need to be blocked

I have disabled Cloud and DNS service on the unit. But it still send request to those IPs. I have added rules to IP firewall rules but it is still happening. How can I stop these requests or block these Cloud IPs on the Routerboard? Did You disable "Cloud" AND "Update Time"? AFAIK they run independ...
by Paternot
Fri Mar 08, 2019 11:36 pm
Forum: Beginner Basics
Topic: Routing CCR 1036 and CRS 317
Replies: 2
Views: 423

Re: Routing CCR 1036 and CRS 317

I would guess his firewall is empty - even without NAT rules. The CCRs come without firewall rules.
by Paternot
Fri Mar 08, 2019 11:32 pm
Forum: Announcements
Topic: SwOS version 2.9 released!
Replies: 72
Views: 34542

Re: SwOS version 2.9 released!

@RobertF and @abrodkin SwOS has supported IGMP v1,v2,v3 since v2.5, also many issues have been addressed since then and now in v2.9 there is an additional port option to disable unknown multicast flooding. We are not aware of common IGMP Snooping problems anymore. If you experience problems using I...
by Paternot
Fri Mar 08, 2019 3:34 pm
Forum: Beginner Basics
Topic: Open VPN
Replies: 4
Views: 649

Re: Open VPN

hi, can anyone please advise if the RouterOS Level 4 router with 4 ports (MikroTik RB941-2nD-TC/UK) can be set up with Open VPN so that I can install a VPN of my own choice? thanks Yes, it can. There are some limitations: 1) Its CPU is quite weak. Don't expect much more than 20 Mbps of OpenVpn thro...
by Paternot
Fri Mar 08, 2019 3:19 pm
Forum: Forwarding Protocols
Topic: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?
Replies: 6
Views: 2441

Re: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?

because I wanted to have a proven, good running solution that I can rely on at BGP. No DIY. Unfortunately, no such router was to be found on the MUM. Also from MT there was nothing new. Very sad ... Well, You can always run a CHR instance - this way You get a powerful x86 CPU to handle the single t...
by Paternot
Thu Mar 07, 2019 12:46 am
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179385

Re: RouterOS v7.0 beta1 - when?

May not... But others will be borned.
The cycle of RoS?
by Paternot
Wed Mar 06, 2019 5:10 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 46
Views: 15167

Re: Overruns on CSS326-24G-2S+RM

Not my experience. Just looked at one of mine which shows an uptime of 199 days. There is 1 RX Overrun and 0 TX pauses. As I said, nothing faster than 1Gb/s.... But with 199 days uptime You are running 2.8, right? I upgraded from 2.8 to 2.9 (CSS326), and saw the increase in Rx Overrruns and Tx Paus...
by Paternot
Tue Mar 05, 2019 4:05 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 53
Views: 7168

Re: Radical change coming for home and small business networking

Even in Brazil. Its a firmware update and works on existing gear. Even on pre DOCSIS 3.1 according to the webinar. It allows a ISP a new buis model with the ability to charge for each device and service. It also provides really advanced security. All at little cost to the ISP. I completely agree th...
by Paternot
Mon Mar 04, 2019 6:46 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 53
Views: 7168

Re: Radical change coming for home and small buisness networking

Because what we need is another way to the ISPs control our internal networks. What could go wrong?
by Paternot
Sat Mar 02, 2019 11:46 pm
Forum: Wireless Networking
Topic: noob considering an ac2 vs. ac - not a performance based comparison, however...
Replies: 1
Views: 543

Re: noob considering an ac2 vs. ac - not a performance based comparison, however...

Gimmie 'the full cancer' - how can I have one device penetrate through all the walls (or closest to it)? You can't. Half the problem is to make the AP signal to reach the clients - here You can get quite high power with relative easy. But the other half is the other way around: to make the client's...
by Paternot
Fri Mar 01, 2019 4:16 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 48444

Re: v6.44 [stable] is released!

Fix is in 6.45beta3
6.45 beta3 already? Wow, You guys are really cranking up the speed!
by Paternot
Fri Mar 01, 2019 4:13 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179385

Re: RouterOS v7.0 beta1 - when?

There is obviously a huge stumbling block as to why a kernel upgrade has not happened, either in a 6.x version or the unicorn v7. Let’s not forget that Mikrotik is mostly made up of open source software, maybe one or more elements can’t be upgraded to a more recent kernel? My guess is that it’s fas...
by Paternot
Thu Feb 28, 2019 11:58 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 48444

Re: v6.44 [stable] is released!

Updated a CCR1009 and RB4011 without any issues. Great work MT!
Now please make us happy with some BGP improvements in 6.45 :-)
Quote!!

is it true that for the BGP sessions, RouterOS use only one core?
Yes, it is.
by Paternot
Wed Feb 27, 2019 9:48 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 1725

Re: Hardware Selection

Paternot, interesting however, the diagram distinctly shows a 10gb link direct to the SFP+ port. Perhaps it would be fair to say that if no other etheports are used (other than WAN) then the SFP+ port may see traffic close to 10Mgb? In other words the router could use that sfp link to another manag...
by Paternot
Wed Feb 27, 2019 8:40 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 1725

Re: Hardware Selection

The RB4011 is better bang for the buck bartoz............. same engine better test results and a 10gig port (SFP+) which the 1100 doesnt have and its cheaper. Take a look at the block diagram. Yes, there is one SFP+ cage - but its 10Gb ethernet ports are connected in two groups of five - and each g...
by Paternot
Wed Feb 27, 2019 3:18 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 48444

Re: v6.44 [stable] is released!

Paternot, everything looks good for you. Users menu was removed, each user is automatically converted to an identity and assigned to the peer.
Yes, it all works great - excellent job! I was pointing out to nichky that the upgrade went smooth. :D
by Paternot
Wed Feb 27, 2019 12:59 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 48444

Re: v6.44 [stable] is released!

that was my point User has been replaced with pre-shared-key-xauth user and password. I want to be sure before implement on my clients Working ok after upgrade. I was using pre-shared-key-xauth and password. Yes, the system created that "peer9" out of the blue - but it did it only to have something...
by Paternot
Wed Feb 27, 2019 4:00 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 48444

Re: v6.44 [stable] is released!

Just upgraded to 6.44 /ip ipsec identity add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfandega1 add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfand...
by Paternot
Mon Feb 25, 2019 3:16 pm
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 1083

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Thats true only for conntrack. Which he is using: the question was about NAT and port forwarding. Since it was a basic question, and he IS using conntrack, seemed better to talk about this possibility. The odds of someone using a stateless firewall in a h...
by Paternot
Mon Feb 25, 2019 2:15 am
Forum: Announcements
Topic: v6.44rc [testing] is released!
Replies: 67
Views: 18778

Re: v6.44rc [testing] is released!

Huh.. Funny thing, trying to upgrade 6.44 beta28 to rc4: [admin@XXXXX-Main] > log print 22:17:21 system,info installed routeros-mipsbe-6.44rc4 22:17:21 system,info installed multicast-6.44rc4 22:17:21 system,error not enough space for upgrade 22:17:21 system,info router rebooted I thought if packag...
by Paternot
Mon Feb 25, 2019 1:47 am
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 1083

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Imagine two networks: 10.0.0.0/24 and 10.11.0.0/24 Computer at 10.0.0.2 wants to open a web site, at the address 10.11.0.5. In THIS case, src address is 10.0.2.2, and dst address is 10.11.0.5 Now, imagine you have a web server, at address 10.0.0.2, and som...
by Paternot
Sun Feb 24, 2019 5:06 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

Okay sod if I have something in series, 12v+12V+12v for example then I have to take care of inverter to handle 36v??
Yes, that's about it.
by Paternot
Sat Feb 23, 2019 9:56 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 12024

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
High as in frequentie? Or in channel bandwith? Or db power or what do you mean?
Sorry. Frequency.
by Paternot
Sat Feb 23, 2019 9:55 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

Much thanks Paternot! The issue is noise. If I can provide a noiseless solution that is a bit more inconvenient regarding transport etc, it may be worth it. I will just use one of these cheap babies. ;-) https://www.powertechsystems.eu/home/products/48v-lithium-ion-battery-pack/61ah-48v-lithium-ion...
by Paternot
Sat Feb 23, 2019 7:45 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

If it was for me perhaps but this will be used for official uses by sports organizations. I will be using only certified equipment. In addition I will be powering a laptop and thus my first link to a converter with two ac outlets is appealing. I also came across a dual batter to two female cigarett...
by Paternot
Sat Feb 23, 2019 7:31 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

You are missing the point. #3 is a big black hole mystery, how are you managing this.............. What kind of device are you using to connect between -female socket on poe injector and battery terminals + and - ???? PS yes two 24v batteries in series should do the trick. That is the easiest part....
by Paternot
Sat Feb 23, 2019 7:09 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

By $DEITY, no - much easier than this. 1) You charge the two batteries. At home, I imagine. 2) Take them to where the LHG60 will be used. 3) Connect the adapter between the PoE injector and the batteries terminals. 4) Plug the LHG on the injector. Done. Using 24V You don't have to worry about the bu...
by Paternot
Sat Feb 23, 2019 6:28 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 1502

Re: Power Source for Temp Remote Location

You don't need to convert: batteries are DC, and PoE uses DC too. You have to think about voltage. You are talking about the WireDish (https://mikrotik.com/product/wireless_wire_dish), right? Take out the power adapter. It is rated to work between 12 - 57V. Then connect it directly to the DC voltage...
by Paternot
Sat Feb 23, 2019 2:55 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 12024

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high? /interface wireless info hw-info wlan_5GHz ranges: 4920-6100/5/a,an20,an40,ac20,ac40,ac80 tx-chains: 0 rx-chains: 0 ...
by Paternot
Thu Feb 21, 2019 1:36 am
Forum: Wireless Networking
Topic: Superchannel on ac radios?
Replies: 4
Views: 1036

Re: Superchannel on ac radios?

I've been unable to enable Superchannel on any MikroTik ac radios that we've purchased. My organization is permitted to use 4.9 GHz, and I am trying to set a NetMetal 921UAGS-5SHPacD to 4.9 GHz. I've upgraded the license key to support extra channels, and it shows the "Extra-channels" feature on Sy...
by Paternot
Wed Feb 20, 2019 9:35 pm
Forum: General
Topic: Slow VPN Speeds
Replies: 4
Views: 2889

Re: Slow VPN Speeds

I just purchased a RB750Gr3. So far I love it. The purchase was made because my old router wouldn’t do more than 40Mbps over VPN. When I saw advertisements for the RB750Gr3 doing 400Mb+ over VPN I quickly made the purchase. Problem is I’ve been unable to obtain speeds over 10Mb so far. I have tried...
by Paternot
Fri Feb 15, 2019 1:48 am
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 56
Views: 37125

Re: Why people pair UBNT APs with MikroTik routers?

But all the complains about ARM are wireless related, right? A pure router (a true CCR) could do well, couldn't it? The 4011 has some problems with the FSP+ ports - but they are chipset related, not CPU related. Or I am missing something? https://forum.mikrotik.com/viewtopic.php?f=3&t=138613 Many m...
by Paternot
Thu Feb 14, 2019 10:11 pm
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 56
Views: 37125

Re: Why people pair UBNT APs with MikroTik routers?

So it seems it's CCR versus ROS7 ... I wonder who's loosing? If this is the case, then Mikrotik urgently needs to introduce new line of high-end routers which will replace current CCR roster, based on some modern platform (I wonder if ARM is that platform). I don't think Mikrotik can survive with t...
by Paternot
Tue Feb 12, 2019 3:02 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 12024

Re: v6.42.12 [long-term] is released!

Usually it is indicated by "("/system routerboard upgrade" required)" added to the specific change log entry. Automatic reboot would just pointlessly increase the total upgrade time necessary for really no benefit. No one can be expected to go through the logs, just to find it out. Why don't we get...
by Paternot
Tue Feb 12, 2019 3:00 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 12024

Re: v6.42.12 [long-term] is released!

There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it? Because there is no indication otherwise. Before the firmware number changed only when some upgrade was made to it. Now it is locked with the ROS version. How can we know when to upgrade? That was ...
by Paternot
Fri Jan 25, 2019 9:17 pm
Forum: General
Topic: Slow speeds on fibre with pppoe [SOLVED]
Replies: 4
Views: 1279

Re: Slow speeds on fibre with pppoe [SOLVED]

Then highest speed we are able to achieve is about 500-520mbps when running a btest from client to server. We have been told the line mtu is 1500. The negotiated mtu of the pppoe interface is 1480. Are You running the btest client/server on the routers being tested? One shouldn't do it, as the btes...
by Paternot
Wed Jan 23, 2019 6:36 pm
Forum: General
Topic: BTest Server / Bandwidth Test, consistently 1 mbit send direction
Replies: 2
Views: 428

Re: BTest Server / Bandwidth Test, consistently 1 mbit send direction

The CHR instances are limited to 1 Mb/s, when You don't buy a license. I believe it is possible to get a time limited demo license, to test it.
by Paternot
Mon Jan 21, 2019 12:11 pm
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 28
Views: 11824

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router: On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance. That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D Isn't that mainly beca...
by Paternot
Mon Jan 21, 2019 2:59 am
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 28
Views: 11824

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router:

On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance.
That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D
by Paternot
Sat Jan 19, 2019 8:36 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 105391

Re: v6.44beta [testing] is released!

The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. The compatibility table disagrees with You: https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table The S-RJ01 is supported on the CSS/CRS326-24G-2S+ models - and they are passive cooled switc...
by Paternot
Sat Jan 19, 2019 4:09 pm
Forum: RouterBOARD hardware
Topic: Please recommend router as bridge for 3000 concurrent users [SOLVED]
Replies: 9
Views: 1579

Re: Please recommend router as bridge for 3000 concurrent users [SOLVED]

Thank you for this suggestion, I have an idea in my mind - since network is already segmented (6 secondary switches) I can try to make it more cost effective by using a pair of CC1036-12G-4S-EM (3 switch per unit) instead of single CCR1072. It will be roughly 2000$ but should handle this situation ...
by Paternot
Sat Jan 19, 2019 3:50 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 105391

Re: v6.44beta [testing] is released!

Does this mean the S-RJ01 is now compatible with the RB4011? The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. Look at the S-RJ01 page. It is only for actively-cooled devices! Hopefully some time, after yet more advances in technology, it will be possible t...
by Paternot
Sat Jan 19, 2019 2:39 am
Forum: Announcements
Topic: Photos of towers and masts
Replies: 71
Views: 27199

Re: Photos of towers and masts

^^^^
You can pay me what you want, you will not get me on that tower :shock: :shock:
Well, what I want to pay may not be so much... :lol:
by Paternot
Tue Jan 15, 2019 11:23 pm
Forum: General
Topic: IPv6 Link-Local Addresses
Replies: 6
Views: 1096

Re: IPv6 Link-Local Addresses

IPv6 is completely dependent upon link local: it took over many tasks done by ARP in IPv4. Don't even try to run an IPv6 network without them.
by Paternot
Fri Jan 11, 2019 10:28 pm
Forum: Wireless Networking
Topic: OpenVPN
Replies: 4
Views: 772

Re: OpenVPN

Your IP address 192.168.x.x is a private one - no one will be able to reach it. Your ISP is doing NAT (or CGNAT).

Try to get a public IP address, or see if your ISP do a port forward to you (highly unlikely, but worth a try).
by Paternot
Thu Jan 10, 2019 1:55 am
Forum: SwOS
Topic: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?
Replies: 10
Views: 5356

Re: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?

The switch will try to get an IP from DHCP. Failing this, it will revert to 192.168.<don't remember> So. If you have a DHCP server on your network? If yes, can you browse the leases table? Cross check it with your switch MAC address, and use this IP. Failing this (well, Murphy rules), try the defaul...
by Paternot
Wed Jan 09, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 88740

Re: RB4011

But it *does* have the signature MikroTik built-in torch light!
I'm all for bright leds - sometimes they are a life saver. But it would be great if we got these torches with a "mute" option. Something like "/system leds all dim|bright". THAT would be great. :D
by Paternot
Mon Dec 31, 2018 11:10 pm
Forum: General
Topic: Why (not) use Hairpin NAT
Replies: 28
Views: 4323

Re: Why (not) use Hairpin NAT

Edit: People use meth to escape their shitty lives. People speed in their cars because they can't manage their time well. People don't pick their dogs shit up because they're lazy. This is similar - people that have no idea what they're doing have created a solution to a problem they don't understa...
by Paternot
Mon Dec 31, 2018 11:02 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 2588

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :) Not all devices have firewall enabled by default. Usually the ones destined to SOHO come with it. The others, don't. My RBD52G (hAP ac2) as prime example of a SOHO dev...
by Paternot
Mon Dec 31, 2018 1:24 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 2588

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :)
Not all devices have firewall enabled by default.

Usually the ones destined to SOHO come with it. The others, don't.
by Paternot
Sun Dec 30, 2018 11:13 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 2588

Re: Has this remote ROOT exploit been patched??

For some time default setup in ROS 6.43.x had no firewall. If one did reset with default setup (or received new unit with factory installed ROS of that version), firewall did not exist. ROS version 6.43.8 fixed this problem. His equipment is a switch - its default config doesn't have firewall rules.
by Paternot
Sun Dec 30, 2018 11:08 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 2588

Re: Has this remote ROOT exploit been patched??

No I started initially with 6.43.7 minutes after I turned the power on the first time. The first thing I did after unboxing this router was upgrade to the latest Router OS on December 7th. On December 26th I upgraded again to the now current 6.43.8 and proceeded to try and lock things down. I am st...
by Paternot
Sun Dec 30, 2018 6:04 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 2588

Re: Has this remote ROOT exploit been patched??

I setup the CRS328 to the best of my ability, got my network going, changed the Admin password and went about my life. A week later I went back in using winbox to check things. I went to the logs and frankly it scared the hell out of me!!! I saw a constant flow of failed login attempts from IP's al...
by Paternot
Fri Dec 28, 2018 6:31 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 89
Views: 19148

Re: CSS326-24G-2S+RM hangs until power cycle

Then it's either wrong configurations or faulty units. I thought there was something wrong with the firmware. I was on 2.8, now downgraded to 2.7 just in case. I will test it and see but probably will have to wait 6-10 days. I just got one of these and under SWOS it states upgrade 2.9 available but...
by Paternot
Thu Dec 27, 2018 1:58 am
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 89
Views: 19148

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the...
by Paternot
Wed Dec 26, 2018 6:34 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 10
Views: 2625

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a prob...
by Paternot
Wed Dec 26, 2018 4:29 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 89
Views: 19148

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the ...
by Paternot
Wed Dec 26, 2018 4:21 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 10
Views: 2625

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a probl...
by Paternot
Wed Dec 26, 2018 4:16 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 925

Re: Fiber optics SFP+ across HAP AC

so HAP AC can't accept GPON ONU module
This I don't know. What I do know is that it doesn't accept FSP+ modules. If it is an FSP (without the "+") module, it may accept.
by Paternot
Wed Dec 26, 2018 2:32 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 925

Re: Fiber optics SFP+ across HAP AC

You don't. The hAP AC doesn't have an SFP+ port. It has an SFP (without the +).
by Paternot
Tue Dec 11, 2018 5:44 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 59
Views: 24906

Re: hardware idea for a multiport switch

Interesting idea. But would it be denser? It is, already, 2U in height. We will need at least another 2U - to keep it "organized" and not break the cables. So, it's a 4U switch already. I'd say 5 or 6U - it's hard to pass all this cables.

Wouldn't be easier to just make a 4U switch?
by Paternot
Sun Dec 09, 2018 10:58 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 88740

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...
by Paternot
Sun Dec 09, 2018 2:18 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 371
Views: 88740

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...