MikroTik

JohnTRIVOLTA

Just put this in terminal adding cam local address in the code and reach the camera on public ip port 8081:

ip fi n add chain=dstnat in-interface-list=wan port=8081 protocol=tcp action=dst-nat to-addresses=cam_address to-ports=80

JohnTRIVOLTA

Because there is a LTE modem on board can achieve 25dBm with Australia or Superchannel selected?

JohnTRIVOLTA

I like to go to Australia.

JohnTRIVOLTA

Both wap ac and wap ax are identical in coverage or ax even better than ac. i have upgraded sworms of waps to wap ax. Both devices have metal heatsink in the back, if i remember correctly, wap ac didn't have that initially, and then had it in later revisions. but wap ax have it initially, so there ...

JohnTRIVOLTA

wAP AX have two radios - 5GHz with output 23dBm max and 2.4GHz with output 24dBm max! In my opinion the antenna has some little directional radiation.

JohnTRIVOLTA

Add virtual WiFi. Add 2 bridges. Put in the bridge1 eth1 and wifi for LAN1 segment. Put in the bridge2 eth2 and virtual wifi for LAN2 segment. Move IP addresses to the bridges from eth1 and eth2.

JohnTRIVOLTA

I'm waiting Mikrotik to add support for WDS AP and WDS Station modes for creating in the future, mesh+WDS network with more than 2 devices wired and wireless connected in the same time!

JohnTRIVOLTA

What's new in 7.12 (2023-Nov-09 09:45):
...
*) wifiwave2 - added station-bridge interface mode;
...

What's new in 7.14 (2024-Feb-29 09:10):
...
*) wifi - added "station-pseudobridge" interface mode;
...

JohnTRIVOLTA

A = yes, but only on wAP2 station bridge radio.
B = yes
C = yes or without the wan interface if you use wAP1 in router mode
D - RSTP work on bridges by default.
E - scan with wifi interface, connect to the desired SSID, set password, set the interface in station bridge mode.

JohnTRIVOLTA

It's good when you use arm devices with the same radios drivers. The important thing is to have the same version of ROS! Everything else is a simple test, which of the two radios is better for a basic link between them, according to the conditions. You choose WAP1 for AP and WAP2 for Station Bridge....

JohnTRIVOLTA

Which models will you use exactly? wAPac, wAPac ver.2/arm/, wAPax?

JohnTRIVOLTA

I use the same model for the backup connection over a year!
Currently i have set the device with the following VPNs :
Permanent - OpenVPN with server and client certificates. Additional - Wireguard/BTH/ and Zerotier!
The radio use for country Australia for best coverage!

JohnTRIVOLTA

If you have some attached on the USB remove it and try! I had the same issue when i use some chinese usb hdd cases or flash memory, no radio or can"t connect on it. Mikrotik support said there was a bug with the kernel , but it was still with ROS version 7.8.

JohnTRIVOLTA

Remove mdns-repeat-ifaces=bridge, and check allow remote requestes. Check in ip/dhcp-server/network for dns setting the router local address/192.168.88.1/ availability !

JohnTRIVOLTA

I've had wAPax for relatively recently and compared to cAPax I think, as coverage or signal strength, they perform similarly. It's all a matter of placement and consideration of location and obstacles, walls, etc.

JohnTRIVOLTA

Оf course hAP AX3 is the right choice! Much better CPU performance, more amount of RAM.

JohnTRIVOLTA

If country/region is set to US, then it will be a,g,n,ac,ax . Set it to e.g. european country you can get b,g,n,ac,ax

There is no such thing for standard b, except that I will have 2 more channels!

JohnTRIVOLTA

I've checked all Your suggestions. 1. Firmware is updated. 2. APN settings are correct - I checked it with T-Mobile website. I can upgrade ROS, ping to google webiste from ROS terminal so internet connection should be ok. But I cannot ping google webiste from PC connected to hAP ax. DNS seems work ...

JohnTRIVOLTA

Not applicable to the AP scenario, was speaking to its router suitability.
ok, sure. in any way I don't see it as AP

Maybe soon super cAPaxPRO/wAPaxPRO - cAP2G+5SHPaxQ2SHPaxQ/wAP2G+5SHPaxQ2SHPaxQ

JohnTRIVOLTA

For 802.1be a.k.a wifi7 we need ROS v.8 with linux kernel 6+
does it there a release date forecast ?

It's a secret or a surprise for now

JohnTRIVOLTA

For 802.1be a.k.a wifi7 we need ROS v.8 with linux kernel 6+

JohnTRIVOLTA

Before to see a Wifi 7 AP on the market I could accept a Wifi6 with 4x4 MIMO and 2.5gb ethernet uplink .

Already has - Chateau PRO ax + 2.5G ethernet usb adapter

, or two or more ethernet ports in bonding

JohnTRIVOLTA

Anybody else has issue with connection to internet after upgrade? (I'm using pppoe and there are some changes for PPP) - SUP-171366 Yes, i have same problem with pppoe ISP connection on the one of remote routerboard. It looks like it's fine, but there's no internet. After downgrade to stable channe...

JohnTRIVOLTA

Country=Australia can increase the radio coverage on 2.4GHz!

JohnTRIVOLTA

Yes, with Zerotier.

JohnTRIVOLTA

I think NAT is L3 and above cpu functionality and switch chip work/make changes only with L2 protocols, not IP for example.

JohnTRIVOLTA

Some horror here, every day several times, very unpleasant and only on 5GHz.

I have Intel(R) Wi-Fi 6 AX201 160MHz work on 2GHz - no problems!

JohnTRIVOLTA

Upgrade the lte firmware too!
is that safe in the other thread users complained about the latest firmware

I have 16121.1034.00.01.01.03
and 16121.1034.00.01.01.04 is being offered

Just do not unplug the powerwire. I upgrade two times. Now i have the last 16121.1034.00.01.01.04

JohnTRIVOLTA

Ok updated to 7.15.3 lets see if it helps.
one annoying thing now it says in the interface list that there is a new model firmware which we don't want to udatete just yet, any way to remove that anointing reminder?

Upgrade the lte firmware too!

JohnTRIVOLTA

How would I downgrade back to the original one?

You must upgrade the device to the last stable version, not downgrade!

JohnTRIVOLTA

container/config/set ram-high=

Is this setting not enough?

JohnTRIVOLTA

Place the drop rule before the accept rule for established and related connections!

JohnTRIVOLTA

Hi all, two MT devices connected over the Internet by Wireguard, all working fine. I have some vlans on Router1, I want Router2 to use, what is the accepted way of doing this? Was thinking of an EOIP tunnel but looking for other, possibly better ideas? Wanting to use Capsman across the WG link also...

JohnTRIVOLTA

All networks in the router are routed by default, either VLANs, VPNs, etc. Everything else, as restrictions, is done in the firewall!

JohnTRIVOLTA

Change to GuardInterval=Any and check only AMPDU Priorities=0 done! but the situation does not change, speedtest to 239mbps You changed the settings on the both sides? If you want to properly test the wireless connection/bridge, put a computer running openspeedtest server at one end and another com...

JohnTRIVOLTA

ROS v6 or ROS v7 ? The firmwares? The chains are located on wireless interface - HT: /interface wireless set tx-chains=0,1,2 rx-chains=0,1,2 number=1 so: ROS: 6.49.17 Firmware: 6.49.17 i lunched command /interface wireless set tx-chains=0,1,2 rx-chains=0,1,2 number=1 but nothing is changed Change t...

JohnTRIVOLTA

how can i control the chains? also i have updated on all devices the latest version which should be from august 2024

ROS v6 or ROS v7 ? The firmwares? The chains are located on wireless interface - HT:

/interface wireless set tx-chains=0,1,2 rx-chains=0,1,2 number=1

JohnTRIVOLTA

Update the ROS version on all devices and make it the same! The firmwares too! What are the connection values in the "ptp receiver" registration table? Which version of ROS did you update the devices to? The devices have 3 chains for 5GHz /1300/and should be connected to a minimum of 70...

JohnTRIVOLTA

Update the ROS version on all devices and make it the same! The firmwares too! What are the connection values in the "ptp receiver" registration table?

JohnTRIVOLTA

Here are the configurations of both:

TRANSMITTER
Code: Select all
...
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
....
....

speed=100Mbps ???

JohnTRIVOLTA

.... set [ find default-name=wlan2 ] antenna-gain=0 band=5ghz-a/n/ac \ channel-width=20/40mhz-Ce country=no_country_set disabled=no \ frequency-mode=manual-txpower mode=ap-bridge security-profile=profile1 \ ssid="Wi-Fi House 5G" station-roaming=enabled tx-power=30 tx-power-mode=\ all-rate...

JohnTRIVOLTA

Hello, I have the following configuration in a lab environment: # aug/03/2024 23:56:44 by RouterOS 6.48.6 # model = 951Ui-2HnD /ip pool add name=vpn_pool ranges=172.168.0.5-172.168.0.10 /ppp profile add local-address=172.168.0.1 name=ovpn_profile remote-address=vpn_pool /interface ovpn-server serve...

JohnTRIVOLTA

As they wrote above, either you must have the network allowed in the WG peers or you must snated local network with a WG address. Naturally, you must also have a route for the network in the corresponding router via WG!

JohnTRIVOLTA

You can set 20/40MHz eC channel for double the speed.
I set as u said but Max speed is 35mbps

What is the client device? What is the values in registration table?

JohnTRIVOLTA

Use country Japan on both routers for max increasing the signal strength .

JohnTRIVOLTA

You can set 20/40MHz eC channel for double the speed.

JohnTRIVOLTA

I use in my home network hAP AX Lite LTE /L41G-2axD&FG621-EA/.I have good cell signal coverage and this device meets my needs!

JohnTRIVOLTA

New name of the AP bridge mode is AP only!

interface/wifi/set configuration.mode=ap

JohnTRIVOLTA

The routе is added to the main table, but it will not be active because you already have a similar path to have Internet - only one path with the same destination can be active. If you want the clients to use sstp, another route table is adding in which you manually add the static route via sstp con...

JohnTRIVOLTA

Here's what we can decipher from the model name: Chateau Pro ax - H53UiG-5HaxQ2HaxQ-US H - Series 5 - Wired interface count 3 - 3 Wireless interfaces U - USB i - Single port power injector without a controller G - Gigabit 5 - 5Ghz H - "High" - 23-24dBm at 6Mbps 802.11a; 24-27dBm at 6Mbps ...

JohnTRIVOLTA

Chateau Pro ax is an upcoming device but can anyone confirm that it will be 4MIMO - AX6000, core based model, amount of ram etc?

JohnTRIVOLTA

Nice pictures, thanks.

Still I will try to re-word the question.

Any suggestion on which specific antennas one can buy that have been tested as being better than the built-in ones? (and that if internal will fit inside a Cap Ax)

The cheapest solution is green or yellow model

JohnTRIVOLTA

.... Any suggestions for the "better" antennas? (in any case the WAF will jump from the current -37 to -142.5 if you apply external antennas to a CAP Ax). For example: https://www.pcbmay.com/wp-content/uploads/2021/06/Antenna-PCB-2-1.jpg or something like this https://www.discomp.cz/img-e...

JohnTRIVOLTA

The cAP AX have better performance in the room on 5GHz, but after one wall CAP AC have a little bit strong and stable signal and higher speeds are achieved regardless of the old AC standard. If better antennas with better quality pigtails are used in cAP AX, the performance can be improved!

JohnTRIVOLTA

Hi,

Thanks, where do I find that?
I suppose that it must match version for os

/Lennart

No driver available for mipsbe for now! You can run the new capsman transparently on cap ax with old version capsman on RB750G together!

JohnTRIVOLTA

RB750G must have installed wifi-qcom package too!

JohnTRIVOLTA

lol........
Teach me how to do Big Magic oh great one!
...

Just make a mistake and use US regulation ... no need Hоudini

JohnTRIVOLTA

I don't know, but the conditions are the same, ~15m. distance and one wall. cAPac works at both frequencies better, achieving double and triple the data transfer! Then I can make you a great offer: I'll trade my cAP ac's for your cAP AX's. Everyone happy! :-D I will use these units/cAPax/ where a l...

JohnTRIVOLTA

Side by side with cAPac I achieve over 100mb/ps and with cAPax 20-30mb/ps ! Then I'm pretty sure something is way off with your config or the way you test because that's not what I am seeing. AX vs AC vs XL AC, the former always comes out first, even if those last 2 have wifi-qcom-ac drivers loaded...

JohnTRIVOLTA

not a solution for covering a large area with some walls! So many CAPs, wondering how large the area and how many walls? The cAPac is much better in terms of coverage and stable signal and traffic vs cAPax. cAPax is better for many clients on one place with direct LOS - better CPU, more RAM! Models...

JohnTRIVOLTA

For all who comment, except the last last one: Аll the caps are on auto frequency selection and are located at a sufficient distance from each other, and those who are nearby in the same hall should choose one that does not overlap! In capsman2 no roaming room, but have FT - enabled for ALL.

JohnTRIVOLTA

JohnTRIVOLTA

I have capsman2 with a dozen of mixed devices - cAPac and cAPax, over 50. The wireless clients are mainly connected to the cAPac model. After one wall only connected to the cAPac! For this, only one type should be used in certain places!

JohnTRIVOLTA

Good solution for many wireless clients in one hall, but this 24dbm is not real for me - not a solution for covering a large area with some walls!

JohnTRIVOLTA

Just waiting for revision 2, with frequency amplifiers ... cAPac is just a much better solution for now - I'm a bit disappointed, can't behind a wall and no signal or bandwidth/speed! Side by side with cAPac I achieve over 100mb/ps and with cAPax 20-30mb/ps !

JohnTRIVOLTA

I can't see the route 0.0.0.0/0 over 172.10.0.2 or 172.10.0.1 - remote address ?

JohnTRIVOLTA

I understand you want to use it as the L2 ethernet extender?! Use station bridge mode for the wifi and put the interface on the bridge with others ethernet ports if the main wireless router is a Mikrotik device with same wireless drivers,or use station pseudobridge mode! If you want to extend the wi...

JohnTRIVOLTA

I might add to choose region=Brazil for both radios.

JohnTRIVOLTA

It is possible if you buy and upgrade with license 4!

JohnTRIVOLTA

You mean L2 switch? Just use switch menu ... more info herehttps://help.mikrotik.com/docs/display/ ... switchchip !

JohnTRIVOLTA

It would be nice to see the AP configuration.

JohnTRIVOLTA

BTH put dynamic rules, no need to be added, just enable BTH !

JohnTRIVOLTA

Try with another power adapter with more amps!
Use same ROS versions on both sides!

JohnTRIVOLTA

I mean you have to run ROS version 7 with the old drivers - the package wireless not wifi-qcom-ac package !

JohnTRIVOLTA

Yes, but no new drivers for AC Radio!

JohnTRIVOLTA

Why .width=20mhz ? Have you tried another channel, another frequency?

JohnTRIVOLTA

Maybe this one https://mikrotik.com/product/mantbox_ax_15s

JohnTRIVOLTA

Hello, i use hAP AX3 and ever since I purchased this board it fails to activate BTH. All the devices I've used have been activated and I've used them without a problem, but this one doesn't work! https://i.postimg.cc/XNQHY5pf/bth.png If it matters, i have public ip address, DDNS is enabled, i use ze...

JohnTRIVOLTA

Where have you allowed the handshake in the firewall rules?? The ip filter rules in this lab just accept everything - surely I don't have to specify this traffic specifically? On router B the allowed IP should be /interface wireguard peers add allowed-address=192.168.77.0/24,10.255.255.0/30 Done, b...

JohnTRIVOLTA

I've come back to this after not working on it for some time. I implemented the steps mentioned in an earlier reply and I now see Wireguard initiation packets being sent from B to A, but A never responds or initiates a tunnel. My lab configs are as follows (anonymised) A: /interface ethernet set [ ...

JohnTRIVOLTA

...

JohnTRIVOLTA, do you mean that your AX3 on the latest beta ROS or did you upgrade your cAP AC to the v7 ROS?

...

I use always the same ROS version for all devices.In this case the latest beta version for both!

JohnTRIVOLTA

I have hAP AX3 with cAP AC working as a repeater, using 5ghz to connect to the main router and virtual radio for AP. Everything works perfectly as I am on the latest beta ROS version - use a manually set channel on the main router! #my config /interface bridge add name=bridge-lan /interface wifi set...

JohnTRIVOLTA

Yes, but STA/main mode/ + AP/virtual same frequency/ !

JohnTRIVOLTA

Anyone? Mikrotik staff? Can anyone help me?

JohnTRIVOLTA

Hello, everyone! What settings do you make in capsman2 to perform the capsman1 function of Load Balancing Group?

JohnTRIVOLTA

....
By the way, what is a smart cart used for in a ccr?

Projects that have been abandoned by mikrotik, such as vpn tunnel crypto keys, etc.

JohnTRIVOLTA

With usb 3/4/5G modem! The router have sd slot and smart card slot only!

JohnTRIVOLTA

Have you tried the wireless protocols nstreme, nv2 ? How much is the CPU load? What is the value of CCQ?

JohnTRIVOLTA

No solution for the memory shortage in 15.3MB ARM devices? The solution is simple! Reset the device without def.conf. , after that make upgrade, or make netinstall with new npk version. The occupied space after the procedure is 14.9MB. Finally new setup based on old config, do not use old backup fi...

JohnTRIVOLTA

P.S.
Such a chain may appear if you manually added it with an action=jump with exactly that name

JohnTRIVOLTA

Always the RAW chain is before Input and Forward chains /in prerouting chain/ and in Output chain too!

JohnTRIVOLTA

I tested wired and wireless. The Wi-Fi 5 speed was limited to about the same speed (60Mbps). From memory, the lites only have only chain on Wi-Fi 5 so that's got a theoretical speed of ~450Mbps (?) but even that should translate on to nearly 100Mbps. The fact the wireless speed and Wi-Fi 5 speeds h...

JohnTRIVOLTA

What model is the client wireless adapter and what is the speed at which it connected or you only tested wired?

JohnTRIVOLTA

We have a CCR1009-8G-1S and just upgraded to 1gig service. We are only getting around 800mpbs download speed. The isp says they can ping the modem at over 1gig. We have the wan on port 1, and the lan on port 2. We have fast track enabled. Looking at the block diagram for the router, should be move ...

JohnTRIVOLTA

Different board, but the same cores/processor! On board have 4 LANs, capsman/hybrid mode - new and old/, ether7 is a software trunk port. The combo port use sfp Ubiquiti for uplink/wan!

JohnTRIVOLTA

No fasttrack!

JohnTRIVOLTA

Which version of ROS is installed on RBM?
When the model was released /with ROS 6.40.5/, it detected only one wifi card. After a while, Mikrotik fixed this problem!

JohnTRIVOLTA

Аnd one more thing, the groove have a level 3 license - no AP Bridge mode.
NO, Its License level is 4 due to this page:
https://mikrotik.com/product/RBGrooveA-52HPnr2

You wrote that the model is RBGroove52HPn, not RBGrooveA-52HPn/r2/!

JohnTRIVOLTA

Аnd one more thing, the groove have a level 3 license - no AP Bridge mode.

JohnTRIVOLTA

The easiest way is to configure an EoIP tunnel with IPSEC on top of the two public IP addresses /both sides/for transport.

JohnTRIVOLTA

This is your mistake in the settings:

/interface wifi channel
add frequency=2412,2432,2472 name=ch-2ghz width=20mhz

Change the setting like this:

/interface wifi channel
add frequency=2412 name=ch-2ghz

JohnTRIVOLTA

I assume you mean 1gbps full duplex, this is lumped together as a total throughput for up and down, looking at the block diagram there are two gigabit full duplex connections to the CPU, not four or more?! With a firewall of around 60 rules and fasttrack running I get around 1200-1300mb/ps total due...

JohnTRIVOLTA

If your client adapter is 2xMIMO/2T2R/ at 2.4GHz gen6/ax/ I achieve speeds above 300mb/ps up/down, with adapter gen.5 /AC/ achieve speeds above 200, and with gen 4 /N/ achieve around 150. If you use 1xMIMO /1T1R/, divide the speeds in half to get the maximum throughput . And if the adapter only supp...

JohnTRIVOLTA

This is an l3 licensed device that can only create one wireless connection /only has bridge mode/! As a bridging device, it can be connected in two modes for now - station and station bridge mode with ROS 7.13. With new beta 7.14.xx the station pseudobridge mode is also supported /CLI only/ .

JohnTRIVOLTA

Will there soon be a new product based on QCN9024/9074 , 4SS (4 spatial streams), 4T4R (4×4) MU-MIMO?

JohnTRIVOLTA

Do you have snat for LAN addresses ?

JohnTRIVOLTA

Again and again !
add this rule:
/ip fi m add chain=forward protocol=tcp connection-state=new tcp-flags=syn action=change-mss new-mss=clamp-to-pmtu

JohnTRIVOLTA

I disable the rule, connect the phone, add it via "add to Access List".Everything works. If you enable the rule, the router does not allow the phone to connect to the network, despite the fact that the mac address is in the allowed list. It works for me, but not with capsman, only in the ...

JohnTRIVOLTA

If you add this rule, then everything is blocked.

It works for me. Try to choose the interface?

JohnTRIVOLTA

It is clear that you need to add all the necessary ones to the Access list, but in the end you need a forbidding entry that says enables blocking by mac address?

Just add last rule with only reject action - this is enough !

JohnTRIVOLTA

Good day! Tell me how to create a white list now and most importantly how to prohibit access to the network via WI-FI to those who are prohibited from doing so.? It was logically and understandably organized in the old CAPsMAN... Likewise, you have an access list where you add who should be accepte...

JohnTRIVOLTA

Why station pseudobridge work with old drivers on RBM33G, but not with basebox2 ? This is my question! As I already wrote: it is probably a bug ... either in ROS on basebox2 or in config applied to basebox2. If you suspect a bug in ROS (I guess you do), then make supout.rif of non-working basebox2 ...

JohnTRIVOLTA

IMO wifi interface in straight station mode is useless as bridge port by definition. Because only that particular device (as an L3 entity) can communicate via wireless in station mode. Focus on the question that interests me please! I tested again with a different board/NetMetal 5/ and with the old...

JohnTRIVOLTA

Why would you add a station mode interface to a bridge? This makes no sense at all and cannot produce any usable result. Тo try to somehow get l2 connectivity working. Leave this modе aside, the question isn't about it. Why station pseudobridge work with old drivers on RBM33G, but not with basebox2...

JohnTRIVOLTA

Basebox2 does not work in any mode
Well, make up your mind, you wrote in your previous post that ...

Station standalone mode works on both boards /Basebox2 or RBM33G/

Make a difference between wifi station mode alone and wifi station mode as a bridgeport in the bridge!

JohnTRIVOLTA

If basebox2 works in station mode but not in station-pseudobridge, then it's the pseudobridge function on basebox2 which is broken. Pseudobridge doesn't "offload" anything on the other end if the radio link. Basebox2 does not work in any mode and rbm33g only works with station pseudobridg...

JohnTRIVOLTA

@JohnTRIVOLTA, I think you should focus on getting straight "station" to pass traffic. That's the most straight forward station mode and should work in any case, regardless the vendor and/or driver generation of either AP or station. After you get station working, pseudobridge should be a...

JohnTRIVOLTA

OK, but why device with the wifi card /AR9888/ with old drivers on RBM33G, works with a device with new drivers /cAP AC/ in station pseudobridge mode transparently? Because station-pseudobridge uses standard 802.11 over the air, the "pseudobridge" magic happens entirely inside station dev...

JohnTRIVOLTA

Station bridge mode - the radio does not connect You can't use station bridge mode between old wireless and new wifi driver, it requires the same driver on both sides. This is documented in the manual. OK, but why device with the wifi card /AR9888/ with old drivers on RBM33G, works with a device wi...

JohnTRIVOLTA

Hmm, now i tested 3 modes - station, station bridge and station pseudobridge. I have basebox2 with second 5ghz radio and cAPac, both with last stable 7.13 version. Basebox2 is connected to the cAPac on main 2ghz radio to cAPac and second 5ghz radio work in AP mode. The two radios /4 gen/ are in the ...

JohnTRIVOLTA

Yup, already in beta versions. Tested it as well.

I'm talking about old devices connected to the new ones or with new wave2 drivers. For me work station pseudobridge mode, but in the stationbridge mode does not pass traffic, in station mode pass only L2.

JohnTRIVOLTA

Upgraded two LHG XL52 ac (PtP setup), settings were intact, no issue with signal (-42), devices register themselves on one another (both 2GHz and 5GHz), but can't see other LHG via Winbox. Any clues ? EDIT: on 7.12.1 was working perfectly. Are you using the new wifi package? If yes, it does not sup...

JohnTRIVOLTA

I've uploaded routeros-arm-6.49.11.npk, hit downgrade button, LHG reboots with 7.13 version

If you have another packet except the main uninstall him first. Then make downgrade procedure!

JohnTRIVOLTA

MTU was set to 1500 by default, I selected 1460, 1430, 1380, 1300, 1280. Now I set it to 1360, the videos began to open better, but not ideally. Websites still blocked. Model Mikrotik CCR1036-8G-2S, Problem with opening websites, YouTube videos do not play, videos on Instagram do not play, pictures...

JohnTRIVOLTA

Or add this rule:
/ip fi m add chain=forward protocol=tcp connection-state=new tcp-flags=syn action=change-mss new-mss=clamp-to-pmtu

JohnTRIVOLTA

I bought over 100 of them and they were all 256MB! hAP ac2 (I believe it's almost identical inside apart from number of ether ports) has officially 128MB RAM. However, some early batches came with 256MB RAM (I happen to have one of those). Are your cAP acs early birds as well? Yes, factory software...

JohnTRIVOLTA

But the same specs page you linked above lists 128MB ... hmm. You ok?

I bought over 100 of them and they were all 256MB! I think they wrote it wrong, it's even commented if I'm not messing around in threads back.

JohnTRIVOLTA

And they probably won't. cAP ac and hAP ac2 are in the same boat, too little memory (RAM) for the full featured drivers.
They could ship some -smallbuffers version of drivers for these devices, but doubt that this will see any light.

The cAP AC have 256MB and I think they are enough.

JohnTRIVOLTA

cAP AC is IPQ4018 based and support max 300mbps data rate in the 2.4GHz band[...]
yes yes.. with the MikroTik drivers, not with the Wave2 capable ones.

Clear. They haven't updated the specs yet!

JohnTRIVOLTA

It's documented at https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Benefits 400Mb/s maximum data rate in the 2.4GHz band for IPQ4019 interfaces Probably some proprietary extension of the standard from qcom. cAP AC is IPQ4018 based and support max 300mbps data rate in the 2.4GHz band: Specifica...

JohnTRIVOLTA

I observe strange bit rate between cAP ac and Huawei Nova 5T on 2GHz band - 400mb/ps!

JohnTRIVOLTA

...I think yours is a specific, local problem with your setup. Yes, I think I understand what the problem is in this case. I use pppoe in vlan on built backbone with vlans to transport L2 traffic /network/ with eoip on both ends - CCR2116 and cAP ACs. I noticed that in the tests, only one processor...

JohnTRIVOLTA

Something strange happens. If i set the 5ghz radio on the cAP AC with local settings i will achieve over 400mb/ps download, but when i use capsman wave2 i will only get 150~170 mb/ps. The tests are provided with cuple cAP ACs in different buildings on3-4m. distance and clear LOS!

JohnTRIVOLTA

Wave 2 driver works fine on cAP AC. But only the TV BOX /old MXQ Pro with android 5.1 - 2016/ can't be connected to the LAN via 2GHz radio anymore! https://i.postimg.cc/pdr1KdDY/mqx-pro.png Had the same problem here, the fix was disabling management frame protection. Thank you very much Z0ltan! I d...

JohnTRIVOLTA

/interface wifi security add authentication-types=wpa2-psk,wpa3-psk disabled=no management-protection=allowed name=secWPA3 wps=disable Try to changed to /interface wifi security add authentication-types=wpa-psk,wpa2-psk disabled=no management-protection=allowed name=secWPA3 wps=disable to support y...

JohnTRIVOLTA

What security settings do you have on 2ghz channel ?

Some old devices only want as low as WPA.

WPA/WPA2, with the old driver /wireless package/ work fine! All of the other devices can be connected without a problem!

JohnTRIVOLTA

Wave 2 driver works fine on cAP AC. But only the TV BOX /old MXQ Pro with android 5.1 - 2016/ can't be connected to the LAN via 2GHz radio anymore!

JohnTRIVOLTA

Yes, WPA3 on AC devices, etc. Also old and new type of CAPsMAN can be managed on the same router. Not as a unified mechanism, but two separate and parallel systems on the same router.

Wave 2 driver for ipq4xxx ?!

JohnTRIVOLTA

Are you using ppp multilink /MLPPP/?

JohnTRIVOLTA

Use terminal via winbox and paste:

ip fi f add chain=input protocol=gre place-before=0

JohnTRIVOLTA

Allow GRE Protocol on both sites ! Don't forget to put EoIP tunnels on tv bridges.

JohnTRIVOLTA

Just add this rule and try again:
/ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn

JohnTRIVOLTA

Maybe have network loop !?

JohnTRIVOLTA

Bridge-filter ... bridge-horizon !

JohnTRIVOLTA

I don't know of a wireless/radio module that works on both frequencies at the same time!

JohnTRIVOLTA

Why not ? Just use the necessary antenna pigtails!
Is there any difference in which connectors to connect pigtails for sector antennas?

At one end, the connectors are like those for the wifi card, and at the other end, they are like those for the sector antenna cables.

JohnTRIVOLTA

yes, of course. You can turn off chains in advanced options, can even assign different ones for TX/RX...
This is you about my question, can the module be used with two sector antennas?

Why not ? Just use the necessary antenna pigtails!

JohnTRIVOLTA

I've used a lot of adapters based on AR93XX, AR98XX and they all worked correctly! Example:

JohnTRIVOLTA

No. Мikrotik stopped supporting the usb wifi adapter with the 6th version of ROS . Also only atheros based adapters were supported! Do you know why they stopped supporting USB Wi-Fi? And does it mean that if I find a USB Wi-Fi with an Atheros chip, it will work on MikroTik? I don't know why Mikroti...

JohnTRIVOLTA

No. Мikrotik stopped supporting the usb wifi adapter with the 6th version of ROS . Also only atheros based adapters were supported!

JohnTRIVOLTA

it's the same, wireless interfaces are placed manually in the bridge, or with datapath are dynamically joined to the bridge!

JohnTRIVOLTA

Bridge vlan filtering performance results :

JohnTRIVOLTA

Use srcnat ! wg peer - allowed address=0.0.0.0/0

 ip fi n add chain=srcnat src-address=172.16.129.0/24 dst-address=172.16.0.0/24 action=src-nat to-addresses=172.16.0.1

JohnTRIVOLTA

Use redirect rules for both/tcp and udp/ 53 ports in filter nat section except pihole ip , if you think someone can setup other dns address of clients!
I prefer to use adguard - on a container in routerboard if possible!

JohnTRIVOLTA

offtopic
trivolta in Bulgarian it is three volts for voltage, but written in latin letters, do not confuse with travolta - the actor!
best regards - the smartass

JohnTRIVOLTA

O.K. I have RB 4011 based on arm... WHERE should I put SATA or NVMe disks ??? and how???
Please add a freakin' sentence which will describe it just a bit more....

Ok, where does it say that all ARM devices are supported? ... It is assumed that as you read, you can also think!

JohnTRIVOLTA

viewtopic.php?p=981698#p981685

Тhanks

JohnTRIVOLTA

I want to use an lte modem on it for a backup connection and I want to know for sure about this usb support.

JohnTRIVOLTA

Hi does anyone know if the hAP AX Lite supports usb ! I want to use it with this USB C OTG Cable /2 in 1 Type C to USB A Adapter with PD Charging/?

JohnTRIVOLTA

Thanks will explore this option... Another question... I have 3 sites... Main Head office Network Server: 10.10.20.0/24 Site 2: 10.10.30.0/24 and Site 3: 10.10.40/24 both sites 2 and 3 to connect to my Server site 10.10.20.0/24... I cannot acheive this when i create 2 seperate bridges for the tunne...

JohnTRIVOLTA

Use DHCP snooping on both bridges! I use xx.xxx.xxx.1 ip address for R1 with dhcp pool 10-130, and xx.xxx.xxx.254 ip address for R2 and dhcp pool 131-240.

JohnTRIVOLTA

In official Wireless capabilities show Wireless 5 GHz Max data rate is 867 Mbit/s, but shouldn't it be 1200 Mbit/s ?

JohnTRIVOLTA

I've made a connection between two sites with ike2 psk - Cisco ASA and Mikrotik. I have 2 policies for pair of two networks , net A to net B and net C to net D and respectively 4 SPIs. But the traffic pass only between the nets of the last policy that has been activated ! By disabling this policy th...

JohnTRIVOLTA

At first lоок I do not see a rule for snat exception and there are no routing rules for the LANs in routerboard!

JohnTRIVOLTA

I downgraded to v.7.1.5 and now my mmips and arm boards are working fine with OpenVPN udp ! Hi, Unfortunately, these two routers I upgraded are with dude server and dude is not available in V7.1.5. I have to go back to 6.49.5. Possible? I don't know, there is always the possibility of something goi...

JohnTRIVOLTA

Switch back to the last version that worked and stick to it. If possible, I would do that right away but I have no idea if it is going to work. The devices are all on a remote locations and if i brick them then I will have even bigger problems. ;( Did You ever try to downgrade to latest V6 from any...

JohnTRIVOLTA

OpenVPN is not working anymore - log: 21:24:37 ovpn,info ovpn-out_1: initializing... 21:24:37 ovpn,info ovpn-out_1: connecting... 21:24:38 ovpn,info ovpn-out_1: using encoding - AES-256-CBC/SHA256 21:24:38 ovpn,info ovpn-out_1: connected 21:24:38 ovpn,info ovpn-out_1: terminating... - explicit peer ...

JohnTRIVOLTA

Thanks for the answers! My network backbone is made of old models cisco switchs - types of 2950 and 2960. Nothing special - access ports and trunks! My main router is mikrotik and i use few of cAPs ~ 20 units.Оn the mikrotik devices I do not use vlans. When i replace the 2950 with new one switch and...

JohnTRIVOLTA

Can anyone help, i haven't solved the problem yet?

JohnTRIVOLTA

EoIP is possible only between two MikroTik routers.

and OpenWRT router ?

JohnTRIVOLTA

I wonder, is it possible to use RB5009 USB port as a management port? Without any USB-Ethernet-adapters?

Without or wiith some ethernet usb adapter ?

JohnTRIVOLTA

.....
Office is 1000/25
Home is 1000/1000
....

Your problem is in the bold number or 25mb/ps up - the office link!

JohnTRIVOLTA

For example, I do not want to be dependent on another - a third side in communications !
EOIP over wireguard is not using a third party !!

I'm talking about a zerotier that you offer us all the time .

JohnTRIVOLTA

Two things I don't understand.

a. why not EOIP over wireguard
b. why not forget eoip+ipsec or eoip+wireguard and simply use zerotier??

For example, I do not want to be dependent on another - a third side in communications !

JohnTRIVOLTA

Can we use the Wiregard tunnel/connection/ to transport eoip/s/ on it? Yes, why not. EoIP is literally Ethernet over IP, and Wireguard is an IP VPN, so no reason why it should not work. Thanks Sindy ! EoIP over Wireguard works, I tested it. But I want to replace some ppp connections that carry some...

JohnTRIVOLTA

Can we use the Wiregard tunnel/connection/ to transport eoip/s/ on it?

JohnTRIVOLTA

Happy Holidays!

JohnTRIVOLTA

Reading: https://www.cyberark.com/resources/thre ... mple-trick

Tl;Dr they managed to retrieve 3,500 wireless passwords from 5,000 networks using the PMKID hash.

interface wireless security-profiles set disable-pmkid=yes

JohnTRIVOLTA

Hello friends. I came across a strange problem. After adding a few switches to the l2 backbone, I found that the romon frames do not pass through them. The switchеs are Cisco WS-C2960L-SM-24TS and romon discovery protocol does not detect other devices after them . Everything else works perfectly lik...

JohnTRIVOLTA

sysadmbonn, Some providers limit the maximum number of connections in this situation. You can plan the restriction by setting about 60 - 80 connections for client / device /. An example is a router with a speed plan with of up to 50 mb/ps and suitable for up to 3 devices. His net plan will be restri...

JohnTRIVOLTA

Hi! Maybe I am not clear. I will try to be as simple as possble. I have remote mtik l2tp/ipsec server with public ip (that public ip is dynamic so I am using ddns on it) and I want to connect to it from my RB951G (rb951g is l2tp/ipsec client) that has two WANs - usb lte modems (lte1 and lte2). I &q...

JohnTRIVOLTA

Now I understand exactly what you want. I thought you want the l2tp client as it is connected through lte1, the traffic to the public space to go through lte2 and the rules are for such a setup ! If you want to use lte2 as a server, then you have to mark the incoming traffic with the same mark, to a...

JohnTRIVOLTA

The traffic comes out through the lte 1 interface because it looks in the main routing table . ..... Snat rule ? /ip fi nat add chain=srcnat src-address=X.X.X.X24 action=masquerade out-interface=lte2 Yes, the route rule must be : /ip route rule add action=lookup interface=l2tp-client table=markforl2...

JohnTRIVOLTA

Ipsec is between public addresses ! If the client receives a dynamic ip address /some l2tp client private ip/ you put the whole network plus the interface as you added in the rule !

JohnTRIVOLTA

Just add this rule : replace X.X.X.X with ipsec client ip address
/ip r rule add src-address=X.X.X.X table=markforl2tp action=lookup
/ip fi nat add chain=srcnat src-address=X.X.X.X action=masquerade out-interface=lte2 place-before=0

JohnTRIVOLTA

Аdd route rule this IP ipsec client address to look in markforl2tp routing table !

JohnTRIVOLTA

Not use mark rules, just add 3 rules on routing tables - each network to view its own routing table !

JohnTRIVOLTA

Hi , can the combination of the two devices - RBM33G + QCA6174A mpci-e, run the new wireless package wifivawe2 ? If not, it will be possible soon or never?

JohnTRIVOLTA

ok thank you, i'm on linux systems but now i'll search this method. But, i want know if there is a method to force this from server side. Or i need to configure all client computers? thank you very much Yes, you need to configure all client computers ! On linux/debian based/ PC : https://i.postimg....

JohnTRIVOLTA

Just uncheck "use default gateway on remote network" in advanced network settings on wan miniport L2 adapter!

JohnTRIVOLTA

mlp can transport the full size of packet instead tcp mss clamping on L4 Can you explain why hidden fragmentation of 1500-byte TCP packets (i.e. 2 PPP packets per each payload one) should provide a better TCP throughput than transmission of 1462 byte TCP packets using one PPP packet per each payloa...

JohnTRIVOLTA

@internetolog and @JohnTRIVOLTA: I've never had any problem with the stability of the L2TP connection (except for 6.48, but that's another story, 6.48.1 took care of it). My challenge is to get a single stream IPSec perform adequately. We need high file transfer performance on a single link. Lookin...

JohnTRIVOLTA

When pinging from the router, see what the value of TTL is? Paste here the firewall rules too !

JohnTRIVOLTA

May be i did not understand what exactly you want !

JohnTRIVOLTA

/caps-man configuration
add channel=bgn24-1 country=*** datapath.client-to-client-forwarding=no \
datapath.local-forwarding=no name=conf security.authentication-types=\
wpa2-psk security.passphrase=*** ssid=***

JohnTRIVOLTA

One simple solution :
1. redirect to router the DNS querys on port 53 udp and tcp .
2. block DOT port 453, 853 .
3. add stаtic record with regexp - ^(.*)(anydesk)(.*)$ and address 127.0.0.1 .
4. Try to block DOH dropping tcp 443 with dst.addr. list with known doh servers ip addresses .

JohnTRIVOLTA

L2TP is generally no solution for anything on mikrotik as it is not stable. See my corresponding question from 15th Feb. L2TP on IPSec is very slow with single TCP streams. And I have not found any solution for both. Has anyone? This is not dependant on high latency. L2TP has a stability problem pe...

JohnTRIVOLTA

Why not ? "Creating an efficient point-to-multipoint connection used to be tricky, but not anymore: mANTBox 52 15s works well in any setup"

JohnTRIVOLTA

Try using a fast track if you are not currently using it !

JohnTRIVOLTA

Hello everyone! I have a Routerboard with two independent, masqueraded WAN connections - main and backup. I would like to set up a PPTP Client interface, but to route it through the backup WAN despite of the primary WAN availability. Which would be the most elegant way to do that? Try this: 1. add ...

Search found 446 matches