MikroTik

Note

I did a workaround that works great the last few days with 0 disconnections. I do not know if it is a coincidence, thats why i share my configuration, so u can all test it. The changes are that i changed the queries to 200, the sessions to 50 and i set the name to regexp in static dns entry. /ip dns...

Note

Im still looking for a fix, for.............."doh server connection error network is unreachable" issue.

Any news? Im on 6.47.8 stable.

Note

Same issue here. Not any fix yet?

DoH server connection error, idle time out connecting...........

Note

I called my internet provider and they told me that this is a zte bug and they r looking for a fix. Ty all for ur answers.

Note

I also did that in ipv6 static routing but also no luck. Rapid commit also nothing, ill test the others u mentioned and ill come back.

Note

I also added this in zte but still no luck..... any ideas r welcome

Note

I have disable all rules in firewall till i find a solution. The log..... [admin@Router] > /log print where topics~"dhcp" 13:56:25 dhcp,debug resending.. 13:56:25 dhcp,debug,packet send WAN1 -> ff02::1:2%6 13:56:25 dhcp,debug,packet type: solicit 13:56:25 dhcp,debug,packet transaction-id: ...

Note

How scan i make a new pool? can u or someone, give me the script according to the screenshots above? I also set in zte>lan>static prefix the 2a02:85f:2e01:6400::/56
, but nothing happened. Still searching mode in crs.....

Note

Also enable for wan connection. Static prefix is empty and may be that one is quilty i think. Should i set something there i guess? I wonder if my settings in crs r ok or not. Can someone with experience confirm? [admin@Router] > ipv6 address print detail Flags: X - disabled, I - invalid, D - dynami...

Note

Yeap, i have ipv6 directly to the zte Test with IPv4 DNS record ok (0.522s) using ipv4 Test with IPv6 DNS record ok (0.546s) using ipv6 Test with Dual Stack DNS record ok (0.541s) using ipv6 Test for Dual Stack DNS and large packet ok (0.561s) using ipv6 Test IPv6 large packet ok (1.615s) using ipv6...

Note

I will connect a laptop directly on the zte router and ill check if i can get ipv6.

Note

The actual issue is what i describe..... the ipv6. I set up pools manually, taking the ip's from the zte-gua addresses.

Note

Ty for ur answer..... [admin@Router] > /ipv6 dhcp-client print detail Flags: D - dynamic, X - disabled, I - invalid 0 interface=WAN1 status=searching... duid="0x00030001cc2de08f68a5" dhcp-server-v6=:: request=prefix add-default-route=yes default-route-distance=1 use-peer-dns=yes pool-name=...

Note

As i described in title, i have a crs109 behind a ZTE modem router which connects on internet and also has a working ipv6. RA and prefix delegation is enable in ZTE. Now my issue is that crs cannot get the ipv6 from the ZTE and the ipv6 dhcp client is on searching mode. ZTE is not in a bridge or pas...

Note

Exactly..... i have also set blackhole distance=3

Note

At ping 8.8.8.8 -t, i dont even have one request timeout when i disable first wan1 then enable and then disable wan2. The echo reply is consecutive.

Note

Hi Dave and thnx for ur participation,

I do not know what exactly u mean by that, but to have that working well i had to put the ports that i mark in the beginning and the LB rules after and only the dividers with passthrough yes. Otherwise i had issues.

Note

I just posted my routing rules, here r my magle rules............ /ip firewall mangle add action=mark-routing chain=prerouting comment=______Guest_to_WAN2 \ new-routing-mark=to_WAN2 passthrough=no src-address=10.10.20.0/24 add action=mark-routing chain=prerouting comment=_______Remotes&Games_to_...

Note

here is my exact failover script that i use and so on as i tested it works well........ any comments? i use distance 1 in both wan cause i mark ports in magle and i do routing mark. LB in torrents and failover seems that working fine. /ip route add check-gateway=ping distance=1 gateway=1.0.0.2 routi...

Note

Hi chupaka and ty for all ur info. As i understand all i need is to set the 2 blackhole route lines. Is that ok u think? # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S 0.0.0.0/0 1.0.0.2 1 1 A S 0.0.0.0/0 1.1.1.2 1 2 A S 0.0.0.0/0 1.1.1.2 1 3 S 0.0.0.0/0 1.0.0.2 1 4 A S 1.0.0.2/32 192.168.2.1 1 5 SB 1...

Note

Wireguard is the future and that means that mikrotik will implement it after a decade like uses to. They do not have even an SQM qos package yet and u ask for wireguard.................? lol

Note

plus 1000 for all of that stuff that will make our life better. Mikrotik plz stop all other and focus on that........ only.

Note

yor info about yr setup r not enough. I guess that if u have different subnets in every MT, u have to create a src.nat, to be able to see each other.

Note

How about implement sqm package and stop using useless features...........?

Note

*) bridge - fixed possible memory leak when using "ingress-filtering=yes" on bridge interface;

That is supposed that was fixed on 6.44 stable............

Note

Mikrotik....... ok and great job, Now we need to get priorities first. speed test is nice, i understand but is useless, some other things u implement also ok and we ty for that, but......... We need SQM package with codel algorithm If u undertsand what is this ( i know u understand ) u will include ...

Note

I did it both ways......... will i have to watch something happens after or just install and go on? What exactly do this package? The scipt is other way to install it or is the only way? Corrects a memory full error. https://forum.mikrotik.com/download/file.php?id=35767 Is it ok to install it in ma...

Note

problem( fix_space.zip inside flash folder or outside and reboot? Which is the right one place to put it? In my cases it didn't matter. But I think better flash folder #!/bin/bash if [ "$bootimage" != "1" ]; then rm -f /flash/bootimage; fi mv /var/pdb/fix-space/image /tmp rm -rf...

Note

problem(
fix_space.zip

inside flash folder or outside and reboot? Which is the right one place to put it?

What does this package rly do?

Note

You have so many extra packages installed which are not part of bundle. That is why there is no free space.
I would suggest to install unnecessary packages.

After unistalling some packages all done in 6.44 stable like i expected............. ty.

Note

2011 ok 951G ok hap ac lite...................... couldn't update to stable or testing from 6.43.11, went to 6.42.12 long..... ok. Retries to stable or beta nothing...... still stuck on long term. u can get the support file from here. https://mega.nz/#!JnZ1iIZL!MT9wQ2vhAXA4o0tSC2d3Q6LMz8vj93Uwv_xZn...

Note

2011 ok 951G ok hap ac lite...................... couldn't update to stable or testing from 6.43.11, went to 6.42.12 long..... ok. Retries to stable or beta nothing...... still stuck on long term. u can get the support file from here. https://mega.nz/#!JnZ1iIZL!MT9wQ2vhAXA4o0tSC2d3Q6LMz8vj93Uwv_xZnM...

Note

Can i ask if u have in mind, r u gonna implement codel algorithm in future?

Note

hap ac lite after upgrade, on wlan interface>status, version is shown as 6.43.4 and not 6.43.7 as it should.

Note

post also ip addresses print out.

Note

fasttrack is not an answer cause mangle is not working.

Note

use pcc instead of nth and in routing table at wan2 change the distance to 2.

Note

mangle rules are not working when u have fastrack enable , so....... is not a global solution.

Note

icmp is needed and its not right to block all of them.

U can use some firewall filters in order to stop the attacks.

https://wiki.mikrotik.com/wiki/DDoS_Det ... d_Blocking

Note

yes in interface is the same............. didnt notice. Do u solve ur issue with that or not?

Note

U also need to add src. address (ur LAN) and if u have problems setting the rule at the top of the mangle list.... yes set it before the dividers.

Note

routing mark is that u need

Example that im using to set my web traffic from wan2

add action=mark-routing chain=prerouting comment=_______WEB_to_WAN2 \
new-routing-mark=to_WAN2 passthrough=no port=80,443 protocol=tcp \
src-address=192.168.1.0/24

U must set that mangle rule 1st

Note

rb952ui-5ac2nD hap lite

Note

Ill post it here and i hope all u mikrotik engineers will take a look at that comment. We need u to introduce codel algorithm, it is the best working feature this time we speak in routers.

Note

i cant even believe that 5 years after 1st post there is no answer from mikrotik for that most vary feature. Even small companies like netgear sell now cheap routers under sqm function, where in 1 sec u can press a checkbox and u have the perfect QOS. That is something u cannot manage in ROS after m...

Note

does bucket size work to unlimited queues? Or i have to set limits? if not, it will very good feature to work under unlimited queues........ i think.

set burst time only, unlimited the other values and borrow buckets from parent for ex.

does this work?

Note

ty again my friend, ill workaround first to look if i can pass a cable directly to MT's ether3 port to do something that works.

Note

Yes i know that this configuration is wrong, thats why im here again. I also have to say that all network cables r crossing the building and turn out to a gigabit switch, that is connected to MT's ether2 port and only that. So i cant do step 2. i do not have other physical interface connected to MT....

Note

well... according to ur recommendation i did the following, cause the equipment right now does not allow vlans to run, so i created...... 1) a guest bridge ip 1.1.1.1 2) a virtual ethernet interface, assinged in to guest bridge port, i do not need MT wlan for that case, cause i have set AP's in the ...

Note

Very ty again,

Ill do all that tests tomorrow, cause im far now, but i suspect that my issue is that specially smartphones and other wireless machines does not support vlan feature, in net cards. also as u said unmanaged switches. So i hope......

Note

First of all i do all that tests from my home and i want to achieve the following. Im technician in a couple of soho companies that have the needs for 2 networks. ex. 1 static lan for some employees and the dhcp isolated network (other subnet e.t.c.) for other people. I know that some things can tak...

Note

i will expalin u right now, Im testing that with my smarthone directly to the wlan1 and nothing happens when i change from bridge dhcp to vlan dhcp, i cant obtain ip address at all.Same thing happens to a desktop which is connected to an unmanaged switch before RB. pc's>switch(unmanaged)>RB>modem(wa...

Note

I did that from the time u mentioned it before. I pay my rest with that issue. Everything i read seems that iv done it and still doesnt work. I turn off firewall, reboot...... nothing.

Any further help plz?

Note

so...... nope, i removed vlans from bridge ports and still dhcp is not working on vlans. Any other ideas?

Note

Ty again for ur reply, ill try it in a few minutes and ill feedback. No im not sure about service tag. i dint find any documentation about that and i saw it somewhere else checked. Cause im rookie in vlans, my goal for starting, is to create just another lan isolated (or not, just for tests in beggi...

Note

Remove those: /interface bridge port add bridge=bridge interface=vlan100 add bridge=bridge interface=vlan200 This will tag all bridge traffic with vlan 100 and 200. As you already have tagged traffic in your bridge, you're creating QinQ. In your case it's enough to add the vlan interfaces to the br...

Note

Hi guys, My setup is like as following bridge ether1= my modem ether2=lan-bridge wlan1=lan-bridge Im trying to setup a vlan under bridge interface, everything seems that applies, but vlans dhcp's does not share any ips and machines cannot connect via dhcp. only via static. interface bridge add admin...

Note

but i have limits in queues. I shape via PCQ

Note

I have some simple queues. Im facing an issue when im trying to change in "total" tab the total queue type from everything else to default small. Then in total statistic tab, all counters stuck to last state there were and do not respond until i change again the total queue type to somethi...

Note

if u do not have a master pass, u can "see" it in settings.cfg.viw file, under winbox appdata folder

Note

Ok i tested ur rule about accepting dstnat connections in firewall and works great, setting my 2 previous torrent rules disabled. I checked it on online port checkers and shows my torrent port open with upnp disabled in rb. So thats ok so far and so good. Tell me, plz why u set "connection-stat...

Note

Ur exlanation was very usefull at this time. So as i understand i have to disable also the 2 "torrents" rules and set the 1 u say, in which queue in my firewall sort? Under which? And i need the "torrent" nat ofc eee? this rule applies to all nated eee?

ty in advance

Note

ty again 1) and what about those icmp rules i want to keep, i have the icmp chain under accept established related input and so fat it works fine as i can see both sides pinging (in-out). Any suggestions on that? 2) advise me with the dst rule for torrents plz. How should it be? So far this works al...

Note

Yes is a soho setup and ty again for ur answer for the dns queries.... what about the other rule drop all from wan not destinated? u have karma on this? m I covered from the last drop everything else if ill disable also that?

Note

Ty for the replies and here is my firewall-nat setup if u can help me further /ip firewall filter add action=accept chain=input comment="Accept Input Established Related " \ connection-state=established,related add action=drop chain=input comment="Drop Invalid connections" \ conn...

Note

The question is......... add action=drop chain=input comment="Drop DNS queries from WAN" dst-port=53 in-interface=all-ppp protocol=udp add action=drop chain=input dst-port=53 in-interface=all-ppp protocol=tcp add action=drop chain=forward comment="Drop all from WAN not DSTNATed" ...

Note

So, I upgraded to 6.38.5. CAPSMAN log gives me this:

same issue here, log is full of that but under wlan1. RB951G

Note

i get in logs a critical system error "memory overclocked"

Note

anyone not yet? good job.

I suspect that this feature is not working and u just shame to admit it. it is not bad if is not working. just someone write something, for us to stop waste our time.

Note

Can u plz give me an example on how to use it on an 20/1 adsl connection and setting max limit to 10 in 1 of 8 queues in simple queue? What numbers offers me what?

ty in advance

Note

Hello guys, im on rb951-2n under load balancing pppoe client and wlan and i have the problem i will describe...... after finishing the hotspot setup, suddenly i disconnected from winbox and after that, nothing happens, no internet cannot access MT via winbox, absolutely nothing works. Can someone he...

Search found 71 matches