Community discussions

Search found 566 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 12
by Paternot
Mon Jun 17, 2019 2:16 am
Forum: General
Topic: Measure aggregate ipv4 vs ipv6 volume through router
Replies: 2
Views: 98

Re: Measure aggregate ipv4 vs ipv6 volume through router

There is one way, but it's quite cumbersome: Use one interface to Ipv4 traffic, and another one for IPv6. The easiest way is to give only IPv4 address to one, and only IPv6 address to another. You will use two router ports for each link and two switches ports for each link. Now You have two independ...
by Paternot
Sun Jun 16, 2019 3:54 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 33
Views: 1948

Re: Radical change coming for home and small business networking

So CableLabs will transform the DOCSIS-standard into a propertary SDN concept that will only permit ISP-managed routers/APs? And every client will be micro-managed by the ISP in some way? Then lets just hope that people will hack the gateways and reverse engineer this stupidness. Let's hope people ...
by Paternot
Mon Jun 10, 2019 8:19 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1295

Re: Large Apartment, no Ethernet

I’ll be been told by the MK distributor here is Australia that that module can convert twisted pair to Ethernet unless I’m mistaken. You can use an MK SFP router at both ends to get the job done apparently. The building is an unusual set up, as I said earlier electricians have had a terrible time t...
by Paternot
Mon Jun 10, 2019 5:13 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1295

Re: Large Apartment, no Ethernet

Thanks Patenot, I've looked at these: https://shop.duxtel.com.au/product_info.php?cPath=24&products_id=341 they could help in places if there's twisted pair in place. Have you found this solution to be reliable? I have never used this one. But they need a CAT5 ethernet cabel - they doesn't use the ...
by Paternot
Mon Jun 10, 2019 4:43 pm
Forum: Wireless Networking
Topic: Large Apartment, no Ethernet
Replies: 28
Views: 1295

Re: Large Apartment, no Ethernet

According to electricianss I've spoken to running data cable through the walls of other apartmnents in this building has been near impossible unless the walls are cracked open to do so. Do you have a landline? Is your landline available in several rooms? I used it to pass the ethernet cable. It doe...
by Paternot
Thu May 30, 2019 4:23 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 275
Views: 56001

Re: v6.45beta [testing] is released!

*) www - improved client-initiated renegotiation within the SSL and TLS protocols;
MikroTik team - could You explain? - please.
Let's hope this is not related to TLS protocol downgrade attacks...
Let's hope it is? Better to find, and close, than to leave it open...
by Paternot
Mon May 20, 2019 2:48 pm
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 522
Views: 122139

Re: RouterOS v7.0 beta1 - when?

This is the day we were looking for. If there are any memorable dates in the Mikrotikls history, don't forget to add this day to it.

Now the question is: When we will be able to install the first public version?
When it's released. :D
by Paternot
Mon May 20, 2019 2:52 am
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 285

Re: Feature Request - Link down/up count

In SwOS? Yes, i know it is avaiable in ROS, but I dont see it nowhere in SWOS.

Xan You post screenshot and tell me whixh device does have it?

I know swos have diffrences between devices but...
Sorry, my mistake. I was talking about RoS... :D
by Paternot
Sat May 18, 2019 2:19 pm
Forum: SwOS
Topic: Feature Request - Link down/up count
Replies: 3
Views: 285

Re: Feature Request - Link down/up count

We do have it. Take a look at the interface - it's the "Link Downs" counter.
by Paternot
Wed May 15, 2019 5:34 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 400

Re: RB750GR3 for a 30 PCs Gaming event?

The games are going to be Fortnite, LOL and CS:GO, 10 pcs for each. Fortnite is by far the harder one. CS.GO dont uses much, and im not sure about LOL. This link is interesting: https://www.whistleout.com.au/Broadband/Guides/how-much-data-do-I-need-for-online-gaming Fortnite would use 100MB/h - som...
by Paternot
Wed May 15, 2019 3:40 am
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 400

Re: RB750GR3 for a 30 PCs Gaming event?

can route 980 Mbps with 25 firewall rules and 512 bytes packet size. 512 bytes are fairly large packets. Most packets are a lot smaller than that. A lot of acks, etc. So the number you should look at is the one on the right, for 64 bytes. Mainly for two reasons, first it kinda provides a worst case...
by Paternot
Tue May 14, 2019 11:30 pm
Forum: General
Topic: RB750GR3 for a 30 PCs Gaming event?
Replies: 10
Views: 400

Re: RB750GR3 for a 30 PCs Gaming event?

Nope, Gr3 won't do. Since you want ot balance, you'll need to skip FastTrack. Without it gr3 won't be able to cope with bandwidth. You need more power. 4011 will do for example Won't be enough a hAP ac2? About a quarter of the price, and can route 980 Mbps with 25 firewall rules and 512 bytes packe...
by Paternot
Tue May 14, 2019 5:28 am
Forum: RouterBOARD hardware
Topic: What is two gigabit lines for ports in Mikrotik hex gr3?
Replies: 2
Views: 335

Re: What is two gigabit lines for ports in Mikrotik hex gr3?

It would be good to have an official Mikrotik answer, but I don't think the lines are so clear divided. They look to me something more like the dual channel memory we have in computers: both channels are just used by what is needed. Take a look at this pdf. The block diagram is at page 2 http://www....
by Paternot
Wed May 08, 2019 2:24 pm
Forum: Beginner Basics
Topic: New Office LAN design - which router? Advice please
Replies: 3
Views: 254

Re: New Office LAN design - which router? Advice please

I would use two devices: switch and router. Easier to find something, and probably cheaper than buying something huge with lots of ports.
by Paternot
Sun May 05, 2019 4:37 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 619

Re: HELP: Access Mikrotik Router Externally

If you take umbrage with what I am saying tough mammaries, we can decide it through a manly Salad off! Come to my place and we will see who makes the best salad and much beer will have to be consumed during the competition.
That is tempting...
by Paternot
Sun May 05, 2019 3:12 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 428

Re: Long DNS timeouts

It should work, with two remote DNS servers. I did test them, and they work ok for me. But, first, lets clarify some things. 1) At the connection tab, you can make the mikrotik use the DNS server given by your ISP - or not. If you uncheck the "Use Peer DNS" option, your router will do the name resol...
by Paternot
Sun May 05, 2019 3:00 pm
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 619

Re: HELP: Access Mikrotik Router Externally

It's because you're not expecting the worst. Why couldn't VPN server contain some "nice" remote code execution vulnerability? If you get root this way, you don't need anything else. :) I am expecting the worst. If my router's code is compromised, it's game over. Even when disabling all the services...
by Paternot
Sun May 05, 2019 1:55 am
Forum: Beginner Basics
Topic: HELP: Access Mikrotik Router Externally
Replies: 13
Views: 619

Re: HELP: Access Mikrotik Router Externally

It depends on how much paranoid you are. Generally the less you allow the better. Plus we still remember recent WinBox bugs, especially that really ugly one causing password leaks. So if anyone isn't fully convinced that MikroTik found and fixed all such bugs, it's better to not have WinBox port op...
by Paternot
Sun May 05, 2019 1:45 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 428

Re: Long DNS timeouts

I turned off "use peer DNS" and things seem to be working now based on a short test. My computer is now telling me my DNS servers are 1.1.1.1 and 10.0.200.1 (I just pulled the OpenDNS entries out of there). Those are my ISP's DNS entries so I'm not sure how they're magically working now that I've t...
by Paternot
Sun May 05, 2019 1:42 am
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 428

Re: Long DNS timeouts

Your config............
/ip dns static
add address=208.67.222.222 name=208.67.222.222
add address=208.67.222.220 name=208.67.222.220


OpenDNS addresses, 208.67.222.222 and 208.67.220.220
Weird thing is, I did a DNS lookup and both 222 servers answered!
by Paternot
Sat May 04, 2019 3:56 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 5
Views: 381

Re: In over my head

Ah, yes: cieplik206 is right. Don't use the quick set more than once. It should be used once (many people don't like it, and don't use at all, me included), and never again. It can mess up what is already done. Groove should be ready to roll: it's default config is CPE Router, and that is exactly wh...
by Paternot
Sat May 04, 2019 2:44 pm
Forum: Beginner Basics
Topic: Long DNS timeouts
Replies: 10
Views: 428

Re: Long DNS timeouts

You changed ISP. So, the connection changed too. Is it pure DHCP? Is it PPPoE? Was it one thing, and the new router uses another? Why do I ask? Because several connections have the option "Use Peer DNS". If is checked, your router will use the DNS server of the ISP - and maybe these are slow. Take a...
by Paternot
Fri May 03, 2019 11:49 pm
Forum: Beginner Basics
Topic: In over my head
Replies: 5
Views: 381

Re: In over my head

Before starting, make a backup. One can never have too many backups. :D Save it on your desktop. Just to be safe. 1) Connect to the router through wifi or ports 2, 3 or 4. Keep the Groove off, for now. 2) Log in the router. Go to "bridge -> ports" 3) Click at the ether5 port. Change it, from ether5 ...
by Paternot
Fri May 03, 2019 9:26 pm
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 663

Re: Power out notification

It's not about monitoring voltage but more of the reason why a host is down In my opinion it seams very helpful to have an idea of why you cannot reach a certain device right now I can think of two scenarios: 1. host unreachable with no indication = uplink dead and you start investigating at the pr...
by Paternot
Thu May 02, 2019 2:54 am
Forum: Scripting
Topic: Power out notification
Replies: 11
Views: 663

Re: Power out notification

Is it really that important to monitor the voltage, by the second? Or what You really want is to know when the router is unreachable? If it's the first, I don't have a solution for you. If it's the second, You can use Netwatch (https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch) to monitor a given...
by Paternot
Sun Apr 28, 2019 4:15 pm
Forum: General
Topic: mikrotik power on hours
Replies: 6
Views: 342

Re: mikrotik power on hours

I want check how much this device worked, because its for my friend and he told me it worked for 2month so i want check if it really worked 2month or not
That You can't do. They tell the uptime, but not the total work life of the machine.
by Paternot
Sun Apr 28, 2019 3:26 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 400

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

Have you tried accessing the device with ssh and then run command?
That's exactly through SSH that I did this...
by Paternot
Fri Apr 26, 2019 3:52 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 459

Re: RB1100AHx4 Dude Edition insecure by default

No router should be exposed to the internet without proper configuration. No device calling itself a router should have this as it's fully patched, default configuration out of the box be this: # jan/02/1970 00:03:18 by RouterOS 6.44.2 # software id = 20C3-04CF # # model = RB1100Dx4 # serial number...
by Paternot
Fri Apr 26, 2019 3:59 am
Forum: Beginner Basics
Topic: Slow L2TP/IPSEC. ¿Is HW acceleration being used?
Replies: 3
Views: 335

Re: Slow L2TP/IPSEC. ¿Is HW acceleration being used?

scp between hosts. L2TP/IPSec. One router is an RB1100AHx2. The other is a 750Gr3 (hEX). Result: 100% 945MB 6.0MB/s 02:36 (my internet is 60 Mbps up and down, so I can't ask for much more than this) CPU usage was about 40% in two "cores" (threads, really), with the other two at about 15%. == EDIT: t...
by Paternot
Fri Apr 26, 2019 3:36 am
Forum: General
Topic: Firmware upgrade
Replies: 6
Views: 345

Re: Firmware upgrade

But it would still likely be a second reboot - even if automatic, because ... The second reboot isn't the problem. The slow one is the first - when the router is doing all the upgrade. The problem is the fact that it isn't automatic. It increases the workload and time needed to complete the task. I...
by Paternot
Fri Apr 26, 2019 3:22 am
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 459

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). True, not labeled as WAN...but since the config does have Port 1 with DHCP client port it's acting as one. Hey, I know what Mikrotik devices can do,...
by Paternot
Thu Apr 25, 2019 11:42 pm
Forum: General
Topic: RB1100AHx4 Dude Edition insecure by default
Replies: 11
Views: 459

Re: RB1100AHx4 Dude Edition insecure by default

The bigger routers (the ones made to small business and up) don't have a "WAN port". Take a look: they are just numbered ports (eth1, eth2 and so on). That's because they are routers made to be used in a professional environment. Where You can't say which one (which two, which five?) port(s) will ge...
by Paternot
Wed Apr 24, 2019 5:41 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 Revisions
Replies: 14
Views: 1594

Re: S+RJ10 Revisions

Is there a way to cool them down to a normal temperature? I put two more fans into the CRS but 1 or 2 degrees is nothing in this situation... Maybe a peltier... 😁 Someone in the forum used small memory heatsinks. Give it a search, and you will find it. It was an SFP+ (I think it was SFP+) port over...
by Paternot
Wed Apr 24, 2019 4:59 pm
Forum: General
Topic: IPv6 deployment on individual /64
Replies: 3
Views: 223

Re: IPv6 deployment on individual /64

We are currently attempting to deploy ipv6 in our network. We plan to provide a /64 to each of our customers.
I'm with Sob here: just don't give a single /64 to your customers: it's plain evil, and will cost you dearly in the future - both in maintenance and customer churn.
by Paternot
Fri Apr 19, 2019 12:03 am
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 577

Re: CRS328 and poe-out status: overload

Well, Mikrotik never said CRS328 would power 30W/port. In fact, it specifically tells that it goes as far as 450mA/port. I don't know this Zyxel, but looks like it can deliver more power/port than the CRS328. Ok, so I stick with 802.3at, Type2 PoE+ (https://mikrotik.com/product/crs328_24p_4s_rm tex...
by Paternot
Thu Apr 18, 2019 11:10 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 577

Re: CRS328 and poe-out status: overload

I may have misunderstood you, but It looked to me that your powerbox was drawing 350mA before You plugged something more in it. Given the limit of 450mA/port, I think it is quite easy to exceed them, with this setup. It would need just 2 x 2,5W devices to get there. My fault, RB960PGS draws about 7...
by Paternot
Thu Apr 18, 2019 5:07 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 577

Re: CRS328 and poe-out status: overload

https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You really are overloading the port. Yes, I checked it, and also I check same page with text: "CRS328-24P-4S+RM is a 28 independent port switch, it has ...
by Paternot
Thu Apr 18, 2019 4:12 pm
Forum: RouterBOARD hardware
Topic: CRS328 and poe-out status: overload
Replies: 11
Views: 577

Re: CRS328 and poe-out status: overload

I am powering up two RC1100AHx2 through one CRS328 (different ports). So, it does support passive PoE. BUT, did you check the load on the port? https://mikrotik.com/product/crs328_24p_4s_rm Max out per port output (input > 30 V) 450 mA Max out per port output (input < 30 V) 1000 mA I think You reall...
by Paternot
Thu Apr 18, 2019 3:34 am
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 392

Re: Problems with BitTorrent

Hi, thanks for your replies! anav - i attached the file, is it what you want ? ) Paternot - CPU load is 6%-30%, free memory 7.9-6.0Mb. Its like this before the problem and after it. Weird, it should work. CPU load is light, and memory is not exhausted. Your firewall rules are quite standard too. Ar...
by Paternot
Wed Apr 17, 2019 9:12 pm
Forum: General
Topic: Problems with BitTorrent
Replies: 8
Views: 392

Re: Problems with BitTorrent

Take a look at system -> resources, before the problem and after it.

We want to see memory and CPU usage. This unit is rater weak, and has only 32MB of RAM. With that many connections, conntrack may be eating all your RAM.
by Paternot
Wed Apr 17, 2019 7:11 pm
Forum: General
Topic: hardware upgrade - howto move certificates
Replies: 2
Views: 153

Re: hardware upgrade - howto move certificates

System -> certificates -> export

Then You have to import them on the new system.
by Paternot
Sun Apr 14, 2019 1:41 am
Forum: General
Topic: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]
Replies: 5
Views: 303

Re: Regarding Windows File Share (SMB) between 2 networks (Interfaces) [SOLVED]

Windows uses broadcast to find others SMB shares - but You can just point it to one machine, and it will work - broadcast or not.

So, You can just type the FQDN of the machine you want to access, and windows will open it. Then, if You map this share, it will work just fine.
by Paternot
Sat Apr 13, 2019 5:03 pm
Forum: Beginner Basics
Topic: Router for my new home!
Replies: 14
Views: 870

Re: Router for my new home!

Recommending RB951Ui-2HnD in year 2019 is ridiculous. This model has been here for ages. It does not have gigabit ports, CPU has just one core, wifi is just 2.4GHz. RB951Ui-2nD is even worse ... They need to move these archaic models, and others, to the archive section. Confusing for newcomers to s...
by Paternot
Fri Apr 12, 2019 4:36 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 275
Views: 56001

Re: v6.45beta [testing] is released!

Version 6.45beta31 has been released. *) ipsec - replaced policy SA address parameters with peer setting; A dream come true! :D Version 6.45beta31 has been released. *) ipsec - general improvements in policy handling; *) ipsec - use tunnel name for dynamic IPsec peer name; What, exactly, these two ...
by Paternot
Fri Apr 12, 2019 4:30 pm
Forum: Beginner Basics
Topic: Why is my speed cut by 75%??
Replies: 9
Views: 557

Re: Why is my speed cut by 75%??

:D

And, yes: the CRS name is a bad one. Time and again we see people taking it literally (why shouldn't they?), and getting low speeds.
by Paternot
Thu Apr 11, 2019 11:15 pm
Forum: General
Topic: Mikrotik IP Cloud vs P2P
Replies: 8
Views: 444

Re: Mikrotik IP Cloud vs P2P

I know that my reply is not immediately useful for OP, because convincing some ISPs is difficult and even if you manage to convince yours, it's not enough, because you need IPv6 also in other locations served by other ISPs. But I have to say it from time to time, because sometimes it seems like peo...
by Paternot
Thu Apr 11, 2019 12:12 am
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 346

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

Yes, the potential that goes through is the potential that goes in the power unit. BUT the device does test, to see if the other side is capable of PoE.

Check the manual:
https://wiki.mikrotik.com/wiki/Manual:PoE-Out

What you are looking for is at "Port Settings".
by Paternot
Wed Apr 10, 2019 8:44 pm
Forum: RouterBOARD hardware
Topic: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]
Replies: 5
Views: 346

Re: PowerBox and non-Poe devices: Will it damage devices like a laptop? [SOLVED]

There is an auto detection system, to find out if the device uses POE, and what type of it. As long as the PoE out port is set as "auto on" (or "off"), You can plug anything you want.
by Paternot
Tue Apr 09, 2019 5:13 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: v6 RC and v7 BETA
Replies: 126
Views: 20913

Re: v6 RC and v7 BETA

Well, I was actually referring to time before Diablo 2 .. I guess its too old for people to remember today... I think the hype for Diablo3 was grater than Diablo2. Don't get me wrong: I have all 3 (should have learned with D2, and never bought D3, but I digress), and hated what they did with D2. I ...
by Paternot
Tue Apr 09, 2019 5:07 pm
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 400

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

This is kind of common to all command-line access to RouterOS: the column width is fixed. I am not aware of a way around that in commandmode. You can either use winbox or webfig, or use API to retrieve this info to another system where you can print it the way you like. That's... disappointing. But...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 12