MikroTik

nmt1900

7.14.3 seems to fixed one small problem I had - while using IKE2 VPN first hop of traceroute was reflecting one of unrelated internal IP addresses on 7.14.2. Now first hop reflects IP address of WAN interface as it had been always before.

nmt1900

One more common observation on that - if your device acts as VPN gateway then it is accessible from outside and that can pose its' own risks - recent sslvpn vulnerability in Fortigate devices can be a good example on that...

nmt1900

I have an RB5009 where I've started noticing it randomly stop talking to devices on one of the ports. It takes a reboot to fix it. No amount of port-bouncing or bridge tinkering works. I suspect it's seeing occasional route loops or some other packet it doesn't like and it silently shuts down the p...

nmt1900

16MB devices are obsolete, face the fact, time to upgrade.... This beta is a great example of what happens when a company cost-optimizes with narrow margins on storage; people can't test betas and are told to wait until RCs, which means the beta cycle will be less productive for MT since there will...

nmt1900

That is true, but I have never encountered a situation where that lead to real problems. Usually what you see is that an object that references a deleted object gets some nasty comment associated with it, it becomes non-functional, and you can still delete that object. Also, when you do an export y...

nmt1900

I have seen (in the past) photos of a "test lab" that they use to test new versions. The main problem is that they test mainly with "default config" so many other configs and features are not tested... (and they never discovered that storage is running out on 15.3MB devices beca...

nmt1900

Poll won't happen. Only unhappy people visit the forum. The majority is happy. No need to trim down package size. The happy people are going to install/upgrade ROS on a HAP AC2 successfully and only the pessimist ones are going to face "0 free bytes" problems. It's a state of mind - not a...

nmt1900

*) route - improved system stability;

Would be interesting to see if that has anything to do with "orphaned" routing table entries after any of routing protocol processes has crashed? We'll see I guess...

nmt1900

About this adlist feature: how is DNS response of 0.0.0.0 better than NXDOMAIN (RouterOS static DNS entries can be configured as this)?

nmt1900

Nope. That is what I am pointing out for years already. Winbox touches everything - now you even have the proof logged 🤣. Even can add arguments that were not there before (in the export). Dumbly saving of all form values - even if they are default values. Thats why I do not use winbox, because I d...

nmt1900

Regarding the "Handshake for peer did not complete" log messages from WireGuard... I confirmed that these were coming from my passive peer entries where I had configured a persistent keepalive. The keepalive configuration was the "trigger". Removing that keepalive stopped the me...

nmt1900

Is protocol 89 (ospf) allowed over this wireguard link by firewall policy (in input chain)?

nmt1900

I encountered same behaviour with RIP. It looked like RIP process was crashing each time new set of entries appeared. routing/stats/process/print would indicate these crashes by changed PID of corresponding process. I was fighting this problem with RIP and downgrades from 7.13.5 down to 7.10.2 did n...

nmt1900

deleted

nmt1900

What causes this message regarding a backup-routerboot upgrade? Screenshot from 2024-02-29 09-48-58.png

What device this is?

nmt1900

Also note that upgrading beyond 7.12.1 can cause issues on ARM devices with "16MB flash", especially for devices that actually have only 15.3MB flash. So be extra careful when upgrading such a device (e.g. hAP ac2), especially when you cannot easily netinstall it (remote location). Somewh...

nmt1900

I am not native English speaker either but I don't see a problem in technical English what comes to Mikrotik release notes and other things of that nature. In my previous field of work I have been doing translations of documentation of my main field of work (mainly project documentation of my own &q...

nmt1900

That last one was real black eye fo them for sure. It was real fun to waste hours in attempts of downoading the firmware. 88 megabyte file and 6 hours...

nmt1900

Maybe this list is getting longer with each release and they struggle to keep up?
Just for a reference how proper "known issues" list should look like
https://docs.fortinet.com/document/fort ... own-issues

nmt1900

There's one thing even worse than patchy documentation and changelogs - releases do not seem to have "known issues" section in "release documentation" - if forum threads can qualify as "documentation"...

nmt1900

There are lots of commands with incomplete documentation. They should get an intern (or group of 2 or 3) tasked with documenting all commands in the same format and checking if every option is documented. Would really like to hope that internal development documentation is better than these incompl...

nmt1900

RB450Gx4 was upgraded from 6.49.13 and all RIP configuration had to be recreated. All was fine for a while and then I see entries in log about creating RIP instances (same ones that do already exist). After that route list is populated with duplicate entries for all these instances. At same time au...

nmt1900

RB450Gx4 was upgraded from 6.49.13 and all RIP configuration had to be recreated. All was fine for a while and then I see entries in log about creating RIP instances (same ones that do already exist). After that route list is populated with duplicate entries for all these instances. At same time au...

nmt1900

RB450Gx4 was upgraded from 6.49.13 and all RIP configuration had to be recreated. All was fine for a while and then I see entries in log about creating RIP instances (same ones that do already exist). After that route list is populated with duplicate entries for all these instances. At same time aut...

nmt1900

Try that and if it does not work, then get older version of v7 from download archive and try with that (others might work as well but 7.7 should work for sure). I tried with 7.7 because I did first v6 -> v7 upgrade of 450Gx4 when 7.7 was current version and then upgrade succeeded straight away. If d...

nmt1900

Would really like to know how 512 MB of storage can be "not enough" while Mikrotik is doing anything so devices with 16 MB of storage can be updated? Well OK it looks like I got it solved - I tried to manually upload 7.12.1 and 7.12.2 and both failed. Then I tried to upload 7.7 and it was ...

nmt1900

Not all devices are able to do HW offloading when bridge VLAN filtering is enabled - so there might not be a definitive answer to this exact question...

nmt1900

Is update to 7.13.3 enough or does LTE modem firmware has to be updated as well (if there's any updates available for it)?

My only device already went out to customer (abroad) and it would be good to know if this problem is really nailed down before attempting to initiate an upgrade remotely.

nmt1900

Switches are not a problem when you remove wireless package, but by default you end up with routeros and wireless packages after getting to 7.13 with your upgrades. Would be interesting to see, which packages would be installed on switches from factory when they come out with 7.13+

nmt1900

Almost all Mikrotik switches have the same 16 MB of storage and most of them are arm devices - and now they are coming out with v7 on them. Last bunch of 326 and 328-24P switches I received had 7.11.3 on them from factory. Mikrotik seems to be painting itself into a corner if some fundamental change...

nmt1900

One reason probably is that 16MB is a boundary for some old storage technology and having more than 16MB requires more pins from the SoC that can also be used e.g. to drive LEDs. So to keep costs down, it seemed attractive to have 16MB storage only. I don't believe number of pins is the issue. SPI ...

nmt1900

It's quite obvious that Mikrotik has been painting itself in a gorner with 16 MB storage for a long time. Even if some "trick" will be found in software development then this problem will soon be back to haunt. Mikrotik has only few options here: - "obsolete" their 16 MB storage ...

nmt1900

I have been wondering for years about these "rebooted without proper shutdown, probably power outage" messages as this can be very misleading. It can point you to suspect hardware issues and whatnot - to be "magically cured" by subsequent firmware upgrade and never seen again. It...

nmt1900

It would always be best to adhere to common hostname format standards as system identity translates to hostname of the device.

nmt1900

CX21.2.0 - Wine 6.0.2
CX22.1.1 - Wine 7.7
CX23 - Wine 8.0.1

nmt1900

Winbox with Gcenx built wine has one big problem on Mac which screws up all field entries containing commas and periods On my Mac (M2Pro, Sonoma), winbox 3.40 runs without issues using Gcenx wine builds available at https://github.com/Gcenx/macOS_Wine_builds Even winbox self update works. Problem i...

nmt1900

Don't use pre-pacaged Winbox software from 3rd party sources.
wine-8 and winbox64 works perfectly with all functionality and can self-upgrade

This not pre-packaged Winbox (like Winbox4mac or something like that). It is Wine instance created from scratch.

nmt1900

Interesting thing here is that Dude does not have this problem with newest Wine engine - but Btest app does. There should be some common denominator explaining this...

nmt1900

So much I can tell that problem is not present with older Wine versions (and does not seem to depend on Winbox version). It would be good to get to the root of this problem though...

nmt1900

Actually I'm also using CrossOver wine fork on Mac (Gcenx build), maybe with official wine it's different. Wine is supporting Windows API WinVerifyTrust , if this API is used in Winbox to verify PE certificate. Winbox with Gcenx built wine has one big problem on Mac which screws up all field entrie...

nmt1900

There's one thing about Apple devices. They indeed check country code from the beacons, but they check it from first SSID's they able to found (before connecting) - so it's not exclusively up to your own AP settings. They even set their frequency/channel scanning range according to this.

nmt1900

It looks like script is checking if lte interface has status "sim locked". If this status is present then script disables lte interface, waits for 3 seconds and enables lte interface again. If "sim locked" status is not present, then script does not do anything. Script will run a...

nmt1900

There's more to it...

It looks like SIM gets locked even when LTE interfase is manually disabled before reboot and then manually enabled first time after reboot.
This implies that it might not be related to reboot process only.

nmt1900

Hello, I have the same problem - I have open MikroTik support ticket since 08/Jun/2023 - SUP-118664: "We will notify when new modem firmware will be available with fix." No now firmware for LTE card FG621-EA (16121.1034.00.01.01.03) :( There is only workaround to have a scheduler script t...

nmt1900

L41G-2axD&FG621-EA still has "LTE SIM locked after reboot" problem while modem firmware is up to date.

viewtopic.php?p=1043521

SUP-138300

nmt1900

This is far from being a "beginner basics" problem. I have L41G-2axD&FG621-EA on my hands and it seems that other devices with FG621-EA are affected as well.

nmt1900

That thing with PFS can grow into big headache where mixed-environment interoperability is concerned as all client platforms (Apple, Microsoft and Android) have defaulted to PFS=none thus far and there's no way to accommodate both with same ipsec proposal...

nmt1900

A real nasty thing is, they (how stupid can a company be!!!) retired the CCR1036 and replaced them with the CCR2116. Those come with a factory v7 pre-installed, which is NOT production-ready, which means those devices are a useless paperweight. I hope the CCR1072 is longer maintaned! Unfortunately ...

nmt1900

It has almost always worked on straight IP connections - connection is re-established even after rebooting the device. Something is borked in case of RoMON connections because address list gets locked...

nmt1900

Would really appreciate if Auto reconnect on RoMON connections became really usable. If Address list is protected by master password, then connection loss will lead to "Error. disconnected from RoMON" - awaiting re-entry of master password. This happens even when connections is lost to RoM...

nmt1900

Finally decided to bite the bullet and upgrade 7.9.2 -> 7.10. PPPoE WAN and IKE2 VPN work as before and CPU usage on old CRS112 switch seems to have gone down a little bit (Dude shows the change 11% -> 8-9%). DynDNS seems to work OK. As I have OpenVPN deployed only on v6 then I can not tell anything...

nmt1900

Well... I did not find a better place to put this message and it is definitely related to 3.38 so I am writing this here. The problem is with auto-reconnect feature - it works well with straight IP connection to device, but there's a big problem with RoMON, if master password is enabled for saved de...

nmt1900

FWIW macOS Ventura sends only one phase-1 security association proposal by default *. Thus IPsec profile on RouterOS must be configured to allow it: Hash Algorithm: SHA-256 PRF Algorithm: SHA-256 Encryption Algorithm: AES-256 DH Group: MODP2048 *Can be overridden by a custom profile. That explains ...

nmt1900

Is there any way to check if all this works with Monterey? I have IKE2 VPN setup that has migrated from 6.49.x up to current 7.9 and all still works, but I have Mac with Monterey with no way to upgrade to Ventura. The fact that all still works with iOS/iPadOS leads to suspicion that it might be rela...

nmt1900

Winbox needs to be installed, WebFig is available using pre-installed browser. So why even bother with Winbox ? Winbox is fantastic in "Windows world", apple / linux... wine I guess, but its fast, reliable( usually ), and networkable protocol(if you use IP) especially if you using units t...

nmt1900

All devices with ARM cpu's are coming up at the wrong frequency after the 7.4.1 to 7.5 upgrade. You see this in the System / RouterBOARD menu. A warning appears that the cpu is not running at the default frequency. Clicking on the "Settings" button, you see it is incorrectly set to 716MHz...

nmt1900

Hello to All !

hAP ax2 - use only 20/40/80 ? Without 160 ?

One has to start from somewhere I guess. Dual-chain hardware is probably the most affordable and available to get for the first devices...

nmt1900

So just to clarify, what if I update TILE CCR1036 from 6.49.5 (with installed DUDE server) to 6.49.6? Is it safe to do it normally from WinBox OR do I have to manually add Dude package after, OR? You should upload routeros-tile-6.49.6.npk and dude-tile-6.49.6.npk to the router and reboot. If you ha...

nmt1900

Will be Dude Server package avable? I still not migrated everything to V7 and absent of Dude is a big complication.
Thanks for help.

Have it got "forgotten" or do we need to wait for 6.49.7?

nmt1900

Reanimation of old threads is usually not seen as a good thing, but I believe that it is justified in this case. Almost 2 years have gone and same thing continues to haunt. It is impossible to trigger the problem in any way known to me, but there is some new information on this: it happens on bigger...

nmt1900

Now it seems like column ordering is OK, but one other annoyance remains - if any window inside Winbox window is moved in a way that part of this window will be "outside" of Winbox window, then it will jump right back to be fully visible. It might be good to prevent windows "getting l...

nmt1900

When will built-in "Manual" section be directed to new documentation page? If open TOC in "Manual" window and click the link to new documentation page in it, Winbox just crashes...

nmt1900

These incorrect voltage readings do not seem to be related to architecture, but to specific devices - my RB962 has correct reading, but old CRS-112 switch has 33V instead of 24V as before upgrade. Both are mipsbe devices and have 24V external power supplies. It is possible, that some might even have...

nmt1900

we have noticed a sudden increase in power current on our RB1100x4 with 6.48.4 ? it was bobbing at 450ma for months then after the update its jumped to 750ma? roll back to 6.48.3 and the current drops back to 450ma? Can this be related to other incorrect system health/voltage readings on some devic...

nmt1900

"dst-address-type=local" and "dst-address=127.0.0.1" are not same things! At least, the former includes the latter :) Logically it should, but in this case ip firewall filter add action=accept chain=input comment="CAPsMAN accept all local traffic" dst-address-type=loca...

nmt1900

Short answer: Yes; but I do not know the ''local" part in your syntax; i've used "127.0.0.1"

"dst-address-type=local" and "dst-address=127.0.0.1" are not same things!

nmt1900

I am having same kind of issues with 2 devices - one is RB1100x4 and another is RB1100Dx4 - and these are only ones plagued with problems because these are only ones updated to 6.45.8 from 6.44.6 ... As I also received suggestion from Mikrotik, that hardware issue might be at question here, then no...

nmt1900

I've got the same problem. 6.47.4 the dude on RB1100AH dude edition with disk1 - 256GB SSD installed - DB now at 2 GB.... Well... 1100Dx4 and Dude on big network - it's been tried and abandoned after two attempts. First time - Dude worked for about 4 days until it went 100% CPU and only reboot cure...

nmt1900

Something has beed wrong with Dude beginning from some earlier 6.47.x version. Constant "connection reset by peer" and another errors of similar kind. Now I accidentally happened to see, that after these errors SD card is not visible in System -> Disks window and command /disk print shows ...

nmt1900

I loved the hAP ac³! And it comes with 128MB storage! Now it will be possible to use partitioning at home! :D

Product page specifications show storage size as 128 MB, but for some reason it reads "FLASH 16 MB" on block diagram...

nmt1900

It looks like this VLAN entry thing is happening on other devices as well - even when configured from scratch. Configuration seems to work OK when it is done.

nmt1900

operation failed 10053 An established connection was aborted by the software in your host machine

Can this be seen as obvious hint that Dude application itself is at fault? Other versions of Dude work fine on this same "host machine".

nmt1900

As there is no newer long-term version available yet, there is more about this one. The problem I had was 1100x4 devices "going mad" with scheduled reboots as only workaround. Today I found out one more thing about this problem: when device is at 100% CPU and connection to winbox service i...

nmt1900

Dude is having frequent disconnects with operation failed: 10054:connection reset by peer. System log is not showing anything related to that... For now reboot seemed to cure that problem. That turned out to be premature assumption - problem is back. It occures only when trying to open property win...

nmt1900

Dude is having frequent disconnects with operation failed: 10054:connection reset by peer. System log is not showing anything related to that...

For now reboot seemed to cure that problem.

nmt1900

I did a full rollback to 6.44.6 and now there is about 4 weeks of uptime without any problems whatsoever. What kind of a "hardware malfunction" might it be if it disappears after firmware downgrade??? Now it is 48 days without any of these problems that necessitated scheduled reboots ever...

nmt1900

We'll see if supout can be made with scheduler or not, but after that attempt it is time to downgrade. This is really interesting. I provided Mikrotik with needed information and my support ticket got this answer: "your device has a hardware malfunction. Please submit the device for warranty r...

nmt1900

Well... 42 thousand writes in 22 hours. At least there's no problem with devices which do not display NAND writes

nmt1900

*) filesystem - fixed NAND memory going into read-only mode or becoming unstable over time;

Most interesting question here is - what would be possible consequences of "NAND memory going into read-only mode or becoming unstable over time" in context of this fix???

nmt1900

Now we know, how this starts. snap 2020-05-21 at 10.13.44.PNG This pops up in log and after that CPU usage goes up and stays there. More than one thing ceases to work after that - commands in terminal produce similar output with suggestion to send supout file. The license level problem is also relat...

nmt1900

Yes it was. As I stated previously, we have 3 1100x4 devices with 6.45.8 and 6.45.9 and they all suffer from same problems to somewhat different extent. Others with 6.44.x versions are functioning without problems. As update to previous - another reboot "brought" license back and this devi...

nmt1900

What the hell is going on? Well... I can tell you what is going on - I did a reboot after making supout proved to be impossible and some hours after that it left THIS in LibreNMS log snap 2020-05-18 at 14.00.38.PNG and surprise, surprise - it really shows just that snap 2020-05-18 at 13.52.09.PNG I...

nmt1900

Well... I am not sure how can this get more embarrassing, than it already is... Two diffenrent locations, both have RB1100x4, one has 6.45.8 and other has 6.45.9. snap 2020-05-18 at 0.40.37.PNG When CPU usage goes crazy and internal DNS resolution stops working, I try to make supout.rif and guess wh...

nmt1900

The only thing I can maybe add .If you guys do a security update like 6.44.6 only put in the security update and leave further upstream patches to a following update , so we don't have to choose between security and stability. 6.43.16 was released exactly one year ago and it was about last long-ter...

nmt1900

Here we go again with another long-term headache... Hopes for thew solution to 6.45.x + RB1100x4 problem have been destroyed again. First testing produces loss of internal DNS resolution and therefore DNS server settings propagation through DHCP also stopped working - and that with /ip dns set allow...

nmt1900

Now I understand why I did not end up finding this thread before. I am having same kind of issues with 2 devices - one is RB1100x4 and another is RB1100Dx4 - and these are only ones plagued with problems because these are only ones updated to 6.45.8 from 6.44.6 (only long-term releases in use for cu...

nmt1900

*) chr - fixed graceful shutdown execution on Hyper-V (introduced in v6.46); How comes 6.45.9 contains a fix for something introduced in 6.46? In case the bug was "backported" from 6.46 it would be good to know what 6.45.x versions are affected. There's obvious probability of it being pre...

nmt1900

It has been quite a while since the release and initial idea was to skip this release. However when this pandemic forced people to work from home and VPN usage increased dramatically, IPsec policies started to act up weird on 6.44.6 at one bigger customer location main office. Then we did upgrade to...

nmt1900

I stand corrected (somehow)! It looks like Dude server cannot make RouterOS connections to other devices and ends up with STD failure, when RouterOS connection is made in context of limited user account. Previously it was possible with only "read" + "dude" permissions. Now it has...

nmt1900

dude - updated The Dude to use new style authentication method; i have updated (packagees, dude & routerboard) the dude Server and all clients but the dude Server can't connect. RouterOS Status: std failure_ not allowed (9) bevore upgrade it works... everything works fine except RouterOS login ...

nmt1900

But this all boils down to the question: "Is there any good reason for hiding the files?" And the answer is definitely "no", at least MT has not come up with one single reason yet, apart from "the system files are hidden an now the upgrade files follow that path too" w...

nmt1900

System files have always been hidden / not accessible for a user in RouterOS. Packages are now following the same principle.

About this... does manual upgrade/downgrade (uploading files + reboot) work as before?

nmt1900

Now it looks like problems are somehow related to wireless and/or CAPsMAN - at least when router is mmips and access point is mipsbe architecture. Both had to be downgraded to 6.45.7 to regain normal operation. Only switch in between works fine with 6.46.1. Let's see what developers can dig out from...

nmt1900

It is almost like with 6.46. I am not sure if it is related only to mmips or not (network has hEX + few mipsbe devices), but after some uptime all traffic slows down to a crawl (to LAN and WAN addresses), ping goes completely erratic and packet loss is significant. I made update at the evening and w...

nmt1900

I got almost useless 5GHz Wifi, ping up to 2700ms.. 2,4GHz also no good, much better bud some jerks and pauses, some "page did not load.." surprises. I had to use cable to downgrade to 6.45.7, succeed and all is ok again. Well I do not feel confident with mean of "stable" releas...

nmt1900

A little bit of "backward logic" lead to usable workaround until this bug is fixed. If CAP interface has to be configured on fixed DFS channel, then just add its frequency to CAPsMAN channel list (or interface properties) twice . /caps-man channel add band=5ghz-a/n/ac extension-channel=Cee...

nmt1900

Can CRS328-24P-4S+RM and CRS125-24G-1S-RM be connected together with S+DA0001. One switch has SFP port and other one has SFP+ ports.

Will connection work if port on CRS328 is manually set on 1 Gbps speed or is manual setting even needed?

nmt1900

Of course it is perfectly normal, if affected interface goes down, because it should do that by design. There is nothing normal about manager itself going down and thereby disabling ALL wireless in the customer network alltogether. How can it be normal, that radar detections on one interface can int...

nmt1900

This problem has been reproducible on all similar setups where I tried it out. This example has CAPsMAN manager on router and 2 fixed channel access points as CAP-s with local forwarding. Let's see, what happens, when radar is detected on one of them snap 2019-10-30 at 23.36.57.png Here we can see r...

nmt1900

After issuing RMA and receiving new unit it seems like this issue has been resolved - there has been no link downs or any sort of data errors for over a month of uptime...

nmt1900

I must admit, that this same issue has been haunting at different customer locations for some time now. Problem seems to be related to somewhat unexplainable small CPU background activity, which is usually 5% at most and is absent, when device operates normally. All this occures even when there is n...

nmt1900

I am not sure if this has been happening before, but it is not acceptable. At first I was seeing periodic CAPsMAN outages - when all remote CAP's became unbound and disappeared from "Remote CAPs" list and then everything was back and 5 GHz radios started radar detect all over again. It was...

nmt1900

I have seeing this space error already in few devices: A CRS326, hAP AC, hAP ac2 with any 6.45.x version and I have been unable to find a solution. Even when I manually upload the firmware it reports wrongly the free space (i.e. 5% free) but I can upload the firmware that in theory exceeds this spa...

nmt1900

Its 100% the CRS328's not the CRS317's My experience tells otherwise - links between 317 and 326 are flapping, but when link from one 317 is connected to other 326, then flapping travels along with "sick" 317. I don't know about 328-24P-4S+, but 326 seems to have similar hardware (countin...

nmt1900

Our investigation has revealed that there might be a SFP+ compatibility issue with specific CRS317-1G-16S+ units when connected to other CRS3xx devices resulting in random link downs. Please, contact MikroTik support if you experience similar issue, we will verify it and arrange a repair if necessa...

nmt1900

It's might not be always like that. My problem lasted for weeks, then it suddenly disappeared and now emerged again after 10 days. Now it has been flapping again for a second day in the row. This kind of problems can take a lot of time if there's no ways to "accelerate" the process...

nmt1900

spacex nmt1900 Make sure that your monitored device "IP-SNMP communities" and The Dude "server settings" SNMP custom profile does not have any mismatch. There is no mismatch and these community settings have been used for long time. Only Dude fails and it worked fine with 6.44.3...

nmt1900

spacex nmt1900 Make sure that your monitored device "IP-SNMP communities" and The Dude "server settings" SNMP custom profile does not have any mismatch. There is no mismatch and these community settings have been used for long time. Only Dude fails and it worked fine with 6.44.3...

nmt1900

It might not always be hardware related problem. I had this problem recently with 6.43.14 on RB1100AHx4, which has redundant dual power supplies and is powered from two separate UPS devices - so there is practically no possibility for real power outage, because other devices which are fed from the s...

nmt1900

It looks like SNMP access from Dude works OK with SNMPv1 or SNMPv2c. Maybe something with SNMPv3 authentication or encryption is wrong in Dude? It looks like Dude has problems with SNMP access. snmpwalk to other Mikrotik device causes this to appear in log of target device 10:22:24 snmp,debug unsupp...

nmt1900

nmt1900 - Can you reproduce this problem once more? Actually. sounds that this was simply a coincidence and the problem was caused by something else besides static ARP entries Router has one bridge with 2 addresses/subnets on it without VLANs and ARP in reply-only mode. Subnet 1 has DHCP with add-a...

nmt1900

RB1100AHx2 was last one with fans.

nmt1900

It is bad, when things get broken, but it is not better, when they suddenly get "cured" by itself. My problem just suddenly disappeared by itself. Link has been up from friday afternoon and all packet loss has also disappeared. Nobody has done anything to this link or the devices, nobody h...

nmt1900

It looks like Dude has problems with SNMP access. snmpwalk to other Mikrotik device causes this to appear in log of target device 10:22:24 snmp,debug unsupported v3 security level 10:22:24 snmp,debug v3 err: 0 unsupported security 10:22:24 snmp,debug bad packet and snmpwalk times out. We have LibreN...

nmt1900

Upgrade 6.44.3 -> 6.45.1

ARP in reply-only mode was used and static ARP entries had to be removed and added back to regain L3 access to other Mikrotik devices on the network (static IP addresses and these same static ARP entries).

RB750Gr3

nmt1900

RB260GSP and CRS112-8P-4S-IN have sfp ports, but S+85DLC03D is sfp+ module. Incompatibility seems to be at other end of the link.

Using modules like S-85DLC05D at both ends would solve the problem.

nmt1900

Now we did one test with the problematic link - we converted it to 10GbE with CAT7 and pair of RJ-10 modules. For more than hour of heavy load there was absolutely no link downs or any packet loss - so this is not likely related to topology issues etc. When we connected ports with fiber as before, a...

nmt1900

Same problem appeared suddenly after months of uptime. Two links between CRS326 and CRS317 (two of both devices) - one works perfectly and other link is flooding logs and causing packet loss. All troubleshooting attempts lead to conclusion, that CRS317 is the source of the problem - when we cross-co...

nmt1900

If we are talking about old RB1100 (the first generation), which has Atheros switch chips in it, then hardware offloading is possible with many configurations. However if device is latest RB1100AHx4, then hardware offload is possible only when STP is completely disabled. Same problem is with RB4011 ...

nmt1900

There seems to be one more thing to it... As I see here, CRS326 has one bridge with enabled VLAN filtering, while router RB1100 has bridges without VLAN filtering enabled. When I was testing CRS326 setups when VLAN-aware bridges first came out on RouterOS (with 6.41 probably), then I saw that switch...

nmt1900

This "improved stability on 802.11ac wireless devices" reminds me of one problem with 6.43.14. One site has quite a few wAP ac devices (QCA9550) and repeating scenario: CPU usage rises some time at weekend when no users are present and stays there (at about 5...10%). This rises temperature...

nmt1900

If nslookup gives SERVFAIL as answer, then is it really related to old vs new cloud implementation? My device has 6.43.7 on it but DDNS lookup has been giving SERVFAIL results intermittently through today. Only Google DNS has been able to resolve all the time, but DNS of my ISP has mostly been not...

nmt1900

It seems to be "intermittent" problem - sometimes resolution of sn.mynetname.net works and sometimes it returns SERVFAIL...

nmt1900

After updating a RB3011 to 6.43.7 we lost connection, went to the site and after debugging and checking I discovered that there was a new dhcp-client at the config pointing to eth1 that wasn't there before update. In our case on eth1 we have our internet-provider router bridged connected via PPPoE,...

nmt1900

It might have something to do with IGMP snooping - if it's turned on (as it is by default on new bridges) then HW offload is deactivated. HW offload will be available after IGMP snooping is turned off on the bridge. It looks like only CRS series devices can have both at the same time. https://wiki.m...

nmt1900

I have similar (bad) experience with the new bridge and VLAN tagging. The first attempt to convert my initial multi-bridge setup to a single bridge with VLAN tags failed. I reverted to my pre-6.41 configuration (separate bridge for each VLAN and switch configured for the VLANs and tagged/untagged p...

nmt1900

Setting up multiple CAPsMAN controllers on same network seems to be a topic of quite scarce availability of information. I am having a setup in works with one network segment behind wifi link connection and this might be in need of second CAPsMAN controller for failover. Configuration basics seem to...

nmt1900

Big problem! Compatibility problems with older RouterOS versions. I had one CRS226 with v.6.30 and was not able to configure VLANs in switch mode. It works with WinBox 3.7, but with 3.10 it looked like switch was in router mode i.e. there was no VLAN menu under 'Switch'. I was unable to understand w...

Search found 128 matches