MikroTik

soomanyquestions

I agree, this would be an great feature.

soomanyquestions

I honestly don't care much for this feature, never had any luck with it. I know that there is a post here somewhere and they explained how they define if there is internet connection or not. I just turned this off on my routers. Yeah, It is a quite useless feature when it dosent even work consisten...

soomanyquestions

Hello, I have two RB3011's and the detect internet feature works on only one of them. I have reset the configuration to the defaults on both of them and only turned on the detect internet feature. They both have the same version of RouterOS and same exact configuration. I have tested both of them wi...

soomanyquestions

WPA3 would be a really nice feature for futureproofing.
Synology has already released and sold an router/AP that has wpa3 support

soomanyquestions

Hi, I'm getting the following on my devices after upgrading to beta17. https://i.imgur.com/SIL5LyK.png This eventually leads to the routers management interfaces to be unresponsive. For example you can run /ip route print via ssh and it will just hang forever and wont output anything. Same with win...

soomanyquestions

Hi, I'm getting the following on my devices after upgrading to beta17. https://i.imgur.com/SIL5LyK.png This eventually leads to the routers management interfaces to be unresponsive. For example you can run /ip route print via ssh and it will just hang forever and wont output anything. Same with winb...

soomanyquestions

Heres two links for anyone who is not quite sure what i'm talking about;
https://www.juniper.net/documentation/e ... guard.html
https://www.juniper.net/documentation/e ... ction.html

soomanyquestions

Now that we have DHCP snooping on the latest release candidate it would be really nice to have have IP source guard and dynamic arp inspection. So a user cannot use another IP address than provided by DHCP. But what does DHCP Snooping do in RC? I thought it should do exactly that :) Well the DHCP s...

soomanyquestions

Now that we have DHCP snooping on the latest release candidate it would be really nice to have have IP source guard and dynamic arp inspection. So a user cannot use another IP address than provided by DHCP.

soomanyquestions

Is there any indication of the attack surface of "vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159"? What kind of installations would be directly at risk and require quick updates? (e.g. admin service ports open on internet, certain types of VPN service open on i...

soomanyquestions

I came across this article and im wondering if anyone knows wether RouterOS is affected by this or not? Atleast Cisco and Zyxel has patched theirs already.
https://threatpost.com/researchers-brea ... aw/135070/

soomanyquestions

Just posting a datapoint that the disable-pmkid=yes option works flawlessly with android, iphone, ipad, 2x windows 10 laptop, a macbook pro and a LG smart tv.

soomanyquestions

Anyone?

soomanyquestions

https://wiki.mikrotik.com/wiki/802.11n_Setup_Guide That wiki article is from 2013 but this secondary-channel setting wasn't available in 2013. Atleast according to my testing. I have a device running 6.39.2 and it does not have this setting but for example devices with 6.42.5 do have this setting.

soomanyquestions

Hello, does anyone know what the /interface wireless set 0 secondary-channel setting does? It only appears in Winbox under virtual APs.
I could not find any info on this setting in mikrotik wiki.
Thanks

soomanyquestions

You are in the wrong menu. Check Data Rates menu, there "VHT" section is for 802.11ac Yes but in the "VHT" menu there is only the option of MCS 0-7 and MCS 0-9. It would be possible to set the minimum and maximum HT / VHT and not have it split in several menus. And it took me a ...

soomanyquestions

I have a hAP ac lite and I would like to set the 5Ghz wifi so that the required data rate is atleast VHT MCS 2.
In the wireless interface "Data Rates" tab there is only an option of MCS 0-9, MCS 0-8 and MCS 0-7 for the VHT Basic MCS. So is there any way to do what I want?

Thanks.

soomanyquestions

For those that are curious about the new firewall rules So how will this affect the performance? Because on routerboard.com there is a really big performance hit the more firewall rules you add and this update adds like 20 new rules. Soomanyquestions, great question. I personally run IPv6 natively ...

soomanyquestions

Currently you can verify the IP address only. It would be way more useful to verify the hostname/dns name.
In 2013 mikrotik also said its coming in the future viewtopic.php?t=78686, any update?

soomanyquestions

For those that are curious about the new firewall rules

So how will this affect the performance? Because on routerboard.com there is a really big performance hit the more firewall rules you add and this update adds like 20 new rules.

soomanyquestions

Remove modp8192 or lower dh group in your proposal. I believe it's a matter of compatibility. Thanks for the reply but that did not make either of the machines work It was a wild guess to see if there where something with your proposal. I think I answered the thread too quickly and I am sorry about...

soomanyquestions

Rb2011 and hap ac bricked also

soomanyquestions

Remove modp8192 or lower dh group in your proposal. I believe it's a matter of compatibility.

Thanks for the reply but that did not make either of the machines work

soomanyquestions

Has anyone tried this?

soomanyquestions

Yeah, not supporting RFC3021 is really shoddy of mikrotik. This feature has been in Cisco IOS for like 15 years.

soomanyquestions

I'm trying to setup an ipsec ikev1 vpn using sha256 instead of sha1, but neither my Android 7 phone and windows 10 computer establish the connection with sha256. I can see from the logs that the both devices do send that they support sha256. I also think that the android phone dosent use pfs at all ...

soomanyquestions

It would be really awesome if we could see the negotiated ike phase1/main mode settings DH group, encryption, hashing algo, etc. Currently the only way is to enable ipsec debug log messages and its really really inconvenient especially when theres more than one client. Also it would be nice to know ...

soomanyquestions

Hey does anyone have any info on "/interface wireless interworking-profile" because the MikroTik wiki dosent have any info on it. I kinda got the idea that it could be hotspot 2.0 related.
Thanks

soomanyquestions

It would be useful and cool to see aggregate statistics in the Graphing tool instead of just each individual interface. It should probably be quite easy to add cause all the data is allready there.

soomanyquestions

Hello, if I turn off the client certificate verification my Windows 10 client can connect just fine but if I check the client certificate verification on it does not work. In the Windows 10 client I can get it so I can choose a certificate to authenticate with but the windows client only allows to l...

soomanyquestions

There is no support for NETCONF on RouterOS.

But... There is a nice and usable API that will allow you to do just as much as with NETCONF.

See http://wiki.mikrotik.com/wiki/Manual:API

Thats cool and all but it that isnt standards based... I cant input YANG models into that

soomanyquestions

Is there any plans to support configuration and management via NETCONF? This would allow mikrotik devices to be used in some sorts of SDN scenarios which I think would be beneficial to mikrotik.

soomanyquestions

You have to enter the antenna gain. As a lot of users ignore regulations this was ignored by most vendors. This starts to change. You see MT force DFS in newest RCs. UBNT implements ATPC in newest betas. I guess there are users out there wich run into problems with their regulators. I would dare to...

soomanyquestions

Welp I guess I need to buy Ubiquiti radios as they do support TPC haha... Have they given a reason as to why they dont support TPC?
Do I need to enter the antenna gain even if im using a model that has an integrated antenna eg. SXT series?

soomanyquestions

Hello, As you can read from here (page 15) 5470-5725MHz band is limited to 27dBm EIRP without TPC but with TPC it's 30dBm, but when I check with /interface wireless info country-info "etsi 5.5-5.7 outdoor" it's saying maximum EIRP is 27dBm. Does this mean Mikrotiks don't support TPC? The 5...

Search found 35 matches

Re: Feature-Request: RFC8325 WMM priorities

Re: Detect Internet feature does not work on RB3011

Detect Internet feature does not work on RB3011

WPA3

Re: v6.44beta [testing] is released!

Re: v6.44beta [testing] is released!

Re: Feature Request: IP source guard / arp inspection

Re: Feature Request: IP source guard / arp inspection

Feature Request: IP source guard / arp inspection

Re: v6.42.7 [current] is released!

Is RouterOS affected by this new IPSec vulnerability?

Re: v6.43rc [release candidate] is released!

Re: Secondary-channel?

Re: Secondary-channel?

Secondary-channel?

Re: 802.11ac required ratarate

802.11ac required ratarate

Re: v6.40rc [release candidate] is released!

Verify SSTP server DNS name

Re: v6.40rc [release candidate] is released!

Re: IKEv1 ipsec sha256 and pfs problems

Re: v6.39rc [release candidate] is released

Re: IKEv1 ipsec sha256 and pfs problems

Re: IKEv1 ipsec sha256 and pfs problems

Re: Feature Request /31 Subnet

IKEv1 ipsec sha256 and pfs problems

Feature request: More detailed IPsec statistics & info

Wireless interworking-profiles?

Re: Feature requests

SSTP client configuration help

Re: NETCONF / YANG

NETCONF / YANG

Re: Wireless regulations in Europe?

Re: Wireless regulations in Europe?

Wireless regulations in Europe?