MikroTik

zlobster

Hi! I got a CRS309, updated its ROS, RouterBoard (7.10.1) and SwOS (2.13), and rebooted into SwOS. Then I reset SwOS to default configuration. On my CCR2004 I have setup a bridge with only one SFP port, which I intend to use as a VLAN trunk later on. On this bridge I've also put a DHCP server for a ...

zlobster

Get rid of the default static DNS /ip dns static add address=192.168.88.1 comment=defconf name=router.lan With this change I still can't ping anything by domain name. The only thing that changed for clients is that now nslookup returns "unknown". With masquerade rule moved at the very bot...

zlobster

If you omit the standard DNS, no longer used when DoH work, and used as failover if DoH fail, the Router is not able to solve the list and can't verify if the cert is still valid.... Inside the certs is writed: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl and http://crl3.digic...

zlobster

Hmm, bad news... Even with the modded defconf LAN clients still can't ping by domain name. # may/08/2023 20:34:50 by RouterOS 7.9 # software id = # # model = D53G-5HacD2HnD # serial number = /interface bridge add admin-mac=DC:2C:6E:C4:F5:7D auto-mac=no comment=defconf name=bridge /interface lte set ...

zlobster

Read my post #10 and try harder. TRY again................... /ip dns (missing servers=1.1.1.2, one needs to connect to the DOH server via a public DNS first then all queries are encrypted ) set allow-remote-requests=yes use-doh-server=https://1.1.1.3/dns-query \ verify-doh-cert=yes (good news is t...

zlobster

# may/08/2023 19:59:02 by RouterOS 7.9 # software id = # # model = D53G-5HacD2HnD # serial number = /interface bridge add admin-mac=DC:2C:6E:C4:F5:7D auto-mac=no comment=defconf name=bridge /interface lte set [ find default-name=lte1 ] allow-roaming=no band="" nr-band="" /interf...

zlobster

OK, OK. This was news to me. I assumed Quick Set was providing its own default config. NEVER assume! Resetting with defaults enabled, loaded the defconf script sucessfully. Then, I started working from there. Pure defconf was working fine with the APN-provided DNS servers for LAN clients. Remember -...

zlobster

Oh, hey Normis! What a way to have your attention... Now that I have it anyway, what's your take on this matter? And why should Quick Set require default settings?

zlobster

Thank you both for your time and guidance! I now realized how botched my original config was! Pro tip - don't conf under the influence. I've ditched all with /system/reset-configuration no-defaults=yes skip-backup=yes and started from scratch. I used "Quick Set" for the most simple default...

zlobster

After seeing the config, I suggest you to revert al lthe mess resetting to default and do not touch anything except adding later the DoH settings.....

OK, and what would be the recommended settings for even the simplest bridge with only LAN ports in it?

zlobster

Here is configuration export. I've tried some other tweaks after yesterday but to no avail, so I'm posting the "original" config, which is confirmed broken. Also, both wlan interfaces were put in the bridge. WLAN clients are also reporting "Connected, without internet". # may/07/...

zlobster

Thanks, @mkx, for the input! We derailed OP's thread a bit but I still think not that far off the topic. @bpwl, the Fresnel gradient is somewhat visible on my measurements. It's some really narrow, high-gain antenna involved. Some napkin math reveal a really horrid story. Given there is nothing (tha...

zlobster

Can't help you. Illegal TX power setting can interfere with weather radars over 200 km away. Stay legal! Yeah, thanks for the input. My question is still open, though, so any takers? I've been scanning the airwaves for some time now as I have access to some fancy equipment and I'm seeing a PtP link...

zlobster

Hmm, pretty straightforward! Thanks! Assuming all is implemented correctly and the switch really captures ingress and egress port traffic, it should work just fine for my needs. In my case it should be simple because I only have 2 hosts on the same switch, so what's egress traffic for one should be ...

zlobster

Yes, sadly I'm well aware of the repercussions if I violate state regulations, yet in this case I'm willing to take the risk. According to wiki, manual-txpower should give max, but no word on superchannel and no_country_set. I'm basically looking for the combination of these that will yield the max ...

zlobster

Leave the field unselected. That's maximum.

Aight! And what about country (regulatory domain) and installation type? How should I set those for max TX power on all chains, assuming protocol type 802.11 and only 20MHz channel width?

zlobster

Yeah, a simple misconfiguration would be the most desirable explanation, since I'd rather have this working soon by a simple fix, in comparison to it being really a bug and MT needing to work on in a month or so. With a bit of a luck I'll be able to post config tomorrow. Hopefully all will be clear ...

zlobster

I'll be capturing the traffic between the two hosts with a laptop whose' NIC is in promiscuous mode. I'll be more like a one time event, so no fancy setups are needed, but speeds might reach near few hundred Mbps for a few minutes.

zlobster

20MHz channel is good for coverage. What country regulations limit is effective radiated power per device. Effective means it takes into account antenna gain so high antenna gain on transmitter will not present as higher signal strength[*]. Per device means that it'll sum over all transmit antennae...

zlobster

Another day, another DNS-over-Hell with MT! This time in ROS7.9 on a Chateau 5G. After I've watched tons of videos and read tons of forums and blogs, and after I tried more of less everything, I'm still facing serious issue with DNS redirects from LAN clients. Basically, all hosts on the LAN bridge ...

zlobster

Hiyall!

How can one introduce a MT device on the ETH cable between 2 hosts and use port mirroring to capture all the bidirectional traffic between those two?

I'm talking about ROS7(.9) here, both with MT devices with and without switch chips.

Any help is highly appreciated!

zlobster

Hello and thanks for the insights! Let's try and address them all one thing at a time. What satman1w said looks quite elegant for L3 filtering. I'm extensively using lists but for some reason I totally forgot about the IP firewall ones... :cry: What anav said is basically what I was saying with a to...

zlobster

Hello! I want to achieve a complete L2 & L3 isolation between 3 different bridges in hAP AC. The 3 different bridges have assigned 3 different private prefixes to them. Also, the 3 bridges have all their ports set as access ports for 3 different VLANs. 1. How should I set the bridge firewall, so...

zlobster

Hola Friends friend in Valencia asked for me help. he got good SFP stick. lot of options to modify serial\vendor\part number\ and more. sticks have open source openwrt login web 192.168.1.57 or telnet to sfp OEM company\\ dipperoptics\dpoptics stick numero D23446 Licensee company \\ hilinktech\ sti...

zlobster

Alibaba msg (We need to collect 50pcs to produce,it's minimum quantity,at this moment,there is only 30pcs demand from clients) Is someone else going to buy? https://app.alibaba.com/dynamiclink?touchId=60802176295&type=product&schema=enalibaba%3A%2F%2Fdetail%3Fid%3D60802176295%26ck%3Dshare_d...

zlobster

General rule of thumb is any two separate antennae operating in similar frequency range, is to be separated at least by 2 times the wavelength. For 60GHz lamda is just 5mm, no worries there.

I'm too lazy to calculate the Frensel zones but you should be fairly OK there too.

zlobster

Guys, calm down. Chill a little. Forget MT Wireless. It’ll be like a breakup with a girl: hard, painful, expensive at first, much work, but you’ll get over it. I did. I miss RouterOS superior management and features, since I hate web GUIs and limited console configuration options, I sweared much, m...

zlobster

For reasons unknown, Mikrotik are very against using open source, and this results in an outdated Linux kernel and custom written drivers and services. This greatly slows development time compared to other manufacturers who use open source on the software side and then focus on building their hardw...

zlobster

HG8245H by Huehuehuewie

zlobster

I've been quietly following MT for many moons now, but I'm honestly clueless what is their business strategy. If this is thier tactics, they totally got it right, though! Maybe MT focus on the last-mile and some backhaul? Maybe ISP edge? Or CPE/SOHO? Or maybe amateur projects? Or maybe stability bef...

zlobster

No, I really meant outsmarting the OLT (by tricking it to think it is working with an original EchoLife, while it is not).

zlobster

Thanks, everyone!

I just want 1 or 2 to try outsmarting the Huawei OLT.

I have a great success with UBNT (hence my avatar) but I will be extremely happy if I can get a working SFP, in order to consolidate the devices needed.

zlobster

Can anyone please post a link where this OP151S can be bought?

All I'm getting some fishy hits on Google...

zlobster

4G is actually 3.5G Say what? In the land of the US, maybe some operator is trying to sell 3.5G for 4G (as they do with 5G, top kek), but rest assured - 3.5G and 4G are totally different technologies. In the world of Mikrotik actually Ah, yes - the famous 'evolved 3G'... but if you think about it, ...

zlobster

4G is actually 3.5G

Say what?

In the land of the US, maybe some operator is trying to sell 3.5G for 4G (as they do with 5G, top kek), but rest assured - 3.5G and 4G are totally different technologies.

zlobster

Hey guys, I have been using a mAP 2nD now for a few years and it's been great. I've been looking at the USB port on it and wondering what i could be used for. Ideally I was looking to plug in a USB stick/HDD and have the contents be shared on the LAN with connected devices. Is this possible? Don't ...

zlobster

R11e-LTE is a Cat.4 LTE modem. This means it utilizes 2x2 MIMO in downlink. Diversity here is a bit misleading, since the diversity is working only in uplink direction. Second antenna port can work for second spatial stream. If both eNB and modem support TM3 (which it should) or even TM4, you get a ...

zlobster

Sweet!

Thank you very much, honzam!

Now, if anyone else can add something, please do so.

zlobster

I'd like to get a list of RouterBoard HW that have mini-PCIe slot(s) (mainly modems).

zlobster

There is a Cat.6 version of R11e in the works.

Little is known about its capabilities, though.

I'm now waiting its release eagerly, because I need modern solutions, and if MT can't deliver I'll swap vendors for my networking gear.

zlobster

OK, please forgive my ignorance, but what are the main advantages for v7 over v6 that are expected to reach the final builds?

That's a serious question, not a troll attempt.

zlobster

Those are not EU or intl. bands.

Half of the world uses bands 1, 3, 8, 20, etc.

Also, I bet you a beer that UL won't even reach 75Mbps.

zlobster

Mikrotik has announced LTE CAT6 too:
viewtopic.php?f=3&t=146191&hilit=lte+mum

No news on the supported bands for Europe/Intl. Also, no word on UL performance and characteristics. I bet MT went for 50Mbps for uplink, in 2019 no less.

zlobster

FCC mentions a R11e-LTE6 device. I assume that is Cat6. No idea when that would be released. Hopefully MikroTik will continue making more modems and SXT devices and get around to updating their Wiki page. Judging from the initially listed bands for NA, it will be rather retarded device. :lol: Let's...

zlobster

Getting ~500Mbps with multi-stream iperf3 means all WiFi technologies are kicking in, i.e. they are working.

What R1CH says may be the truth, sadly... Can you start profiling on the wAP AC and see how much the CPU gets loaded during iperf?

zlobster

Wish things just always would work as intended (wanted) Wish things just always would work as advertised . FTFY When you went to the store, did the seller tell you "I'll charge you either $15 or $89, depending on whether it runs fine or not"? Nope, he didn't. He wanted a hefty amount of y...

zlobster

Yes, you're totally running @ 1 spatial stream, i.e. 1 chain. Also, you're not wanting too much of your HW, you're just wanting what you paid for, which according to MT's own page is 1300 (or 900Mbps if you consider the real life). What you get is a far cry from the advertised speeds... Check this o...

zlobster

The problem I have is that I don't want to spend a lot of money to find out that the card isn't RouterOS compatible. Same with me. I guess someone will still have to take one for the team. At this point I'm considering a Netgear M1 in passtrough mode with some decent L3 switch or something. that wi...

zlobster

Even better - check this out: https://techship.com/products/telit-lm960-lte-cat-18-gps-mpcie/ I don't know if this forum allows external links, so in case the the link is deleted - Telit LM960. Even better, you can check ALL Cat.6 LTE cards https://techship.com/products/category/lte-cat-6/ under the...

zlobster

Hi RobCo, I really feel your pain, I do. Although I'm not convinced my post will help you, it may spark some insight in you. 1st thing - are you sure your clients are actually WIRED with 2 separate antennae? 2nd thing - for MIMO to work well one needs a good spatial separation for all spatial stream...

zlobster

Hello Cat! Thanks for your post! I'm pretty sure it's a widespread issue. I've also tested with hAP ac, RB951 and a few others. The results are always the same. More so, I also sourced 2 more, albeit a little different E3372's. SSDD, basically. Modems work perfectly fine outside MikroTik devices, bu...

zlobster

R11e-LTE supports up to 150Mbps DL, which is 20MHz total BW, 2x2 DL MIMO, 64QAM.

It's basically an entry-class LTE modem.

There is only one LTE CA capable mini-PCIe card that I know of. However, it's expensive and its FW is currently in experimental phase.

zlobster

Hey there! I've got huge issues with RB2011 and Huawei E3372h-153. The problem is the slow DL/UL LTE throughput. I'm getting capped @ 21Mbps DL & 11Mbps UL no matter what. Here is what I've done so far: Netinsall 6.44 stable on my RB2011; reset to blank w/o default configuration; with the LTE mo...

zlobster

NetInstall to the rescue? Run NetInstall (check wiki) on a PC, power off router, press and hold the reset button, wait untill NetInstall detects the router, proceed as described in wiki. I too thought my RB2011 was bricked beyond repair but now it's back from the dead. It seems MT's are hard to kill.

zlobster

More so, both SW-ID & license key were visible in Netinstall too. ` ...earlier... ` [...]Netinstall still has connection to the router, but now the license key field is blank . ` So which was it? -- Nathan Myaybe it was my wording. I meant that after I clicked 'Install' with the old key, the in...

zlobster

Wow! I was just about to ask the same thing! :shock: I just got my brand new hAP ac & GPON SFP (genuine MikroTik one). In a room where ambient temp. is 18C my Tik is showing 50C(!!!) internal temp. Router's CPU is idling, there is no traffic or load whatsover. My Tik is now smelling bad, like a ...

zlobster

I believe I'm engaging 2 different bootloaders because that's how I interpret the documentation. To engage main bootloader - apply power AND THEN press RESET, wait for bootloader to kick in. To engage the backup one - press RESET BEFORE applying power. Or so I thought. ` Actually, now that I stop t...

zlobster

Hello! Thanks for writing back! Given that Cisco AnyConnect is working just fine over the same mobile connections, I too believe it's possible to use IPsec over mobile. My other questoins and thoughts still remain, though. For example, how should I configure the non-LTE-site when I wouldn't know wha...

zlobster

That you seem to know which bootloader is being used would seem to imply that you have a serial cable hooked up to the RJ45 RS232 console port. (If you were engaging Netinstall with the reset button every time instead of via RouterBOOT console menu, then I think you would always be using the backup...

zlobster

Hello! As someone with basic knowledge of switching and routED protocols, I'm asking for some (OK, maybe more :D) help. I have a few personal sites, all of which using MikroTIks. Now I need a secure tunnels between these sites of mine. For that I choose to use GRE in IPsec. My idea is to use GRE for...

zlobster

Hello! I have (had?) a perfectly running RB2011UiAS-2HnD-IN on a distant site. I took it with me for maintenace/re-configuration recently. I forgot the password and tried re-setting the thing via the reset switch. I couldn't manage do reset the thing (IDK why, probably didn't get the timing right) a...

zlobster

Hey there! As an avid MikroTik enthusiast and a telco RNO, I'd like to put my 2c here. Good DL throughput is always welcome, so that's a no brainer. Here is what I think is severely lacking in the entire segment: - Good DL throughput (mainly) comes from good RS SNR. Lower bands here are always welco...

zlobster

Amen to that! I'm struggling to get it working myself for some time now. I'm using a RB2011U (latest stable ROS & firmware 3.33) variant and generic(unbranded) Huawei M150-2. Once the modem is inserted in the USB its LED starts blinking oddly, and my RB is not recognizing it. Funny thing is that...

Search found 63 matches