MikroTik

sb56637

IPv6 prefix acquisition over PPPoE was working perfectly with v6.x with this: /ipv6 dhcp-client add add-default-route=yes comment="IPv6 myISP" interface=pppoe-out1 pool-name= IPv6-myISP-pool1 request=prefix use-peer-dns=no /ipv6 address add comment="IPv6 myISP" from-pool=IPv6-my...

sb56637

IPv6 prefix acquisition over PPPoE was working perfectly with v6.x with this: /ipv6 dhcp-client add add-default-route=yes comment="IPv6 myISP" interface=pppoe-out1 pool-name= IPv6-myISP-pool1 request=prefix use-peer-dns=no /ipv6 address add comment="IPv6 myISP" from-pool=IPv6-my...

sb56637

IPv6 prefix acquisition over PPPoE was working perfectly with v6.x with this: /ipv6 dhcp-client add add-default-route=yes comment="IPv6 myISP" interface=pppoe-out1 pool-name= IPv6-myISP-pool1 request=prefix use-peer-dns=no /ipv6 address add comment="IPv6 myISP" from-pool=IPv6-myI...

sb56637

IPv6 prefix acquisition over PPPoE was working perfectly with v6.x with this: /ipv6 dhcp-client add add-default-route=yes comment="IPv6 myISP" interface=pppoe-out1 pool-name= IPv6-myISP-pool1 request=prefix use-peer-dns=no /ipv6 address add comment="IPv6 myISP" from-pool=IPv6-myI...

sb56637

You would have to provide an /export output for us to even begin to try and help. Thanks, I understand, but that might not be possible in this case. I was mainly looking for some tips on common mistakes, and specifically wondering if maybe the queue can't throttle the connection because the MikroTi...

sb56637

Hi there, on my home network I use a simple queue for QoS on a PPPoE connection that the MikroTik device establishes through a fiber internet terminal in bridge mode, and everything works as expected. However, I'm trying to help a friend with a similar configuration, except that he has to use the &q...

sb56637

Hi everyone, I’m running into a weird issue with my Mikrotik 751U-2HnD where the WiFI network on the router drops for about a minute during large Jitsi Meet videoconferences of around 20 users. There is nothing interesting in the router’s logs, and the router itself does not crash or reboot, just al...

sb56637

Serial console. This was an RB2011 which has one.

Ah, OK, thanks.

I also later discovered the Winbox MAC address connect feature, which is indeed incredibly useful.

This would seem to be a bug that should be reported and fixed, no?

sb56637

I needed to restore the DHCP server connection to the bridge port, and the local routes as well

But how did you restore those settings if you've lost access to the router? I'm having the exact same problem as you describe.

sb56637

Excellent, thanks a lot to everyone for their replies.

sb56637

There is no "IPv4 lease time" in this case. PPPoE uses IPCP to give an IPv4 address. This address is allocated until the customer disconnects. The only way of shortening this period is by actually forcing a disconnect of the customer. Your ISP must be doing this every two days, and your D...

sb56637

Hi there, I use my Mikrotik to establish a PPPoE connection to the internet, and my ISP sets an IPv4 lease time of 2 days. Then the IPv6 DHCP client gets a prefix that expires in 3 days. My IPv6 always works for a while, but after a few days (appears random but it's probably not) IPv6 connectivity o...

sb56637

sb56637

Are we speaking Movistar FTTH here? (this is my case).

No, it's a different ISP.

sb56637

The capture did not see a "Packet too big" message, it should be there in Wireshark: https://packetpushers.net/ipv6-and-the-importance-of-the-icmpv6-packet-too-big-message/ If you disabled the mangle rule that works around the problem, chances are good that your ISP is dropping the messag...

sb56637

Also do a packet capture, in the MikroTik go to Tools->Packet capture, under General, give it a filename with .pcap extension, go to filter tab, set IP protocol to 58 (this is ICMPv6 protocol number), direction any, filter operation or, click apply. Disable the mangle rule you made and click start....

sb56637

6.42.7 bug still present for me too. As @hebertonlp describes, IPv6 works well for a long time. My PPPoE was up for over 24 hours with IPv6 working. Then I rebooted the Mikrotik and left the office. When I came back about 6 hours later, the IPv6 prefix was bound, but clients had no route to any IPv6...

sb56637

OK, I made a packet capture. It appears that all requests are coming from the same address, in this anonymized example "99.99.99.99". Attached.

sb56637

@sindy: Thanks a lot for the reply.

The VPN client is running inside a virtual machine on a PC on the LAN.

sb56637

Hi, sorry to bump this old thread, but I'm still having the same problem. Pulse describes the necessary behavior (in D-Link terminology) as follows: The D-link setting "Endpoint Independent" allows NAT to forward any connection request with the same port to the VPN Tunneling application re...

sb56637

/ipv6 firewall export # aug/24/2018 17:23:25 by RouterOS 6.42.7 # software id = KZAB-HII5 # # model = 751U-2HnD # serial number = 2FF2013816F7 /ipv6 firewall address-list add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 add address=::1/128 comment="defconf: lo&...

sb56637

Even though you said before that you did not, go into your IPv6->Firewall and double check that you have rules allowing all lCMPv6 on both input and forward chains, from everywhere to everywhere without restrictions. Does everything look normal here? Screenshot from 2018-08-24 16-13-04.png The defc...

sb56637

OK, I think I figured it out thanks to @mducharme and these two posts: - https://forum.mikrotik.com/viewtopic.php?t=102502#p509821 - https://forum.mikrotik.com/viewtopic.php?t=130501#p640880 I just added that clamp-to-pmtu mangle rule to both the IPv4 and IPv6 firewalls, and it magically fixed every...

sb56637

If your ISP supports RFC4638 PPP-Max-Payload, then it is possible to increase both to 1500, and require no fragmentation. This would rule out MTU issues. It looks like it doesn't. I tried setting them both to 1500 but in the status it still shows MTU at 1492. The original configuration of the ONT t...

sb56637

Unfortunately I don't see any difference.

sb56637

Try setting Max MTU and Max MRU both to 1492, and check the status tab for the PPPoE interface to see what MTU and MRU is being negotiated.

Done, the status shows it at 1492.

sb56637

Sure, here you go:

1.png

And here's the default profile:

2.png

sb56637

Did you try going to that site and verifying that your device or computer responds to pings? Hmm, you might be onto something. The ipv6now.com.au website won't load for me, although I can ping it. However https://www.ultratools.com/tools/ping6 was able to ping my device's IPv6 address. So how would...

sb56637

Thanks for the explanation. I don't run any antivirus or device-level firewalls.
I'm a bit confused why I can ping out to domains over IPv6 but can't load the site in the browser.

sb56637

Hmm, I tried that, but unfortunately it's still very erratic. It sounds like it might be MTU related issues. Hmm. Should I try setting MTU to something under IPv6 > ND ? Are your clients allowing all icmpv6 from everywhere? You should be able to ping the clients with IPv6 from anywhere on the Inter...

sb56637

Try adding some static ipv6 dns servers to /ip dns (for example the ones from google: 2001:4860:4860::8888 and 2001:4860:4860::8844) and check "Advertise DNS"

Hmm, I tried that, but unfortunately it's still very erratic.

sb56637

Yes, the clients do get an IPv6 address. I made some significant progress with neighbor discovery: 5.png Now clients can ping IPv6 addresses, resolve most domains to their IPv6 address by default, and access most websites. But there is a really weird issue where I can not browse most or all of the I...

sb56637

Other than "Accept Router Advertisements" need to be set to "no" or to "yes, if forwarding disabled" everything else looks fine. Thanks for the reply. I tried changing that, and it doesn't seem to make any difference. Does the ip a from a Linux client help at all? 3: w...

sb56637

Hi, I have a Mikrotik RB751U-2HnD running the latest firmware, connected to a fiber ONT in bridge mode. My ISP has good support for IPv6, and when using the ONT directly in router mode clients have IPv6 connectivity out of the box. With the ONT in bridge mode and the Mikrotik obtaining the IPv6 pref...

sb56637

Hi everyone, I'm running the latest ROS 6.41rc, which establishes a PPPoE connection via the ONT router/modem that my fiber ISP gives me. I use PulseSecure to connect to a VPN. I have no administrative access to the VPN, but it is well maintained with lots of users that have no complaints. However i...

sb56637

Hi there, I'm trying to optimize my RB751U running v6.40.3 for my new fiber internet connection. It's connected to the fiber modem that is running in bridge mode. I establish the PPPoE client connection from the Mikrotik. I'm seeing weird things happen with the download speed: - Speedtest.net always...

sb56637

You don't need IPv6 address on WAN (other than link-local). Wow, never would have guessed that. :) Thanks a lot for pointing me in the right direction. I followed your instructions, and also added an IPv6 address for bridge and WLAN1 as described here: http://www.netdaily.org/tag/mikrotik-ipv6-home...

sb56637

Same problem here, also with PPPoE. After a reboot, the IPv6 pool doesn't get created, and the DHCPv6 client shows this:

1.png

I have to manually hit the "Apply" button (without changing any settings), at which point it binds correctly:

2.png

sb56637

Hi there, I just switched to a new fiber Internet service. I put the ISP provided modem in bridge mode and establish the PPPoE connection from my Mikrotik RB751U with the latest RouterOS (v6.40.3 as of now). I can't seem to get an IPv6 address this way. I tried these instructions: - https://wiki.mik...

sb56637

Hmm, could you give a bit more detail on how to set that up per stream? Thanks a lot.

sb56637

Hi, I use a simple queue for QoS. I understood from the diagrams in the Mikrotik documentation that it should equally divide bandwidth per stream and per device. But that doesn't seem to be happening. It works OK to more or less equally distribute bandwidth between different devices. But on any give...

sb56637

1. Use a current RoS 2. Set tx power to 17dBm 3. Use Channel width=20MHz - 20/40MHz is not universally accepted by all devices and uses a lot of spectrum 4. Set distance=indoors 5. Disable TKIP in your security profiles - it limits speed to 54Mbps 6. Set ht-tx-chain=0,1 and ht-rx-chain=0,1 where su...

sb56637

I would also find this option useful. It has been available with the TomatoUSB firmware for approximately forever.

sb56637

Thanks for the reply. Yes, I also tried !DST rules, but they also don't appear to be working.
Then I'd recomend contacting support with an Supout.rif if not already done so.

Thanks, already did.

sb56637

Thanks for the reply. Yes, I also tried !DST rules, but they also don't appear to be working.

sb56637

Hi, I have a Mikrotik in pseudo bridge mode, connected wirelessly to a non-RouterOS AP, with a virtual WLAN2 for wireless connections on this side of the bridge. I use three Mangle prerouting chains for PCQ: 1. For TCP connections, mark the connection as "PCQ-connection" (passthrough=yes) ...

sb56637

How about something like https://routerboard.com/ACMMCXRPSMA

Possibly, but I'd like to know if it actually fits. The RB751U case has a strange design. Has anybody tried it?

sb56637

Hi, I picked up a used RB751U-2HnD at a good price, and I also bought this MMCX male <-> RP-SMA female adapter for it: http://www.ebay.com/itm/MMCX-Male-to-RP-SMA-Female-straight-adapter-connector-US-Seller-Fast-Shipping/121535388152 However when I received the router I was surprised at how deep ins...

sb56637

Got a fast reply from Mikrotik support:

(MikroTik Support) wrote:

> Hello,
>
> We have managed to reproduce such issue and will fix this in next rc release.
>
> Sorry for any inconvenience caused.
>
> Best regards,

sb56637

Yeah, Setup Repeater is pretty slick. So I have another question: what if I don't want clients on each side of the bridge to see each other? Like supposing I'm at a hotel and I don't want to be on the same network as everyone else. What's the simplest way of using a Mikrotik as a wireless client con...

sb56637

So after about 6 hours of experimenting I think I have it figured out, using the Setup Repeater tool under Wireless. /interface wireless setup-repeater ssid="SSID" passphrase=PASSWORD wlan1 First of all, I tried RouterOS 6.38, but the repeater setup wasn't routing or resolving names. Event...

sb56637

Hi, I'm running 6.39rc45 on an RB751U. My Quick Set mode is CPE, and I'm running a pseudo bridge with a Buffalo router that runs Tomato. First of all, I'd like to report that the wireless repeater setup for my environment works successfully with this build, and it didn't on 6.38, so thanks for that....

sb56637

OK great. As soon as I receive my Mikrotik I'll experiment with the different options that have been given in this thread and report back. (I might have some more specific implementation questions too once I get my hands dirty with the project, so I hope you all won't mind if I resurrect this topic ...

sb56637

OK, that's starting to make sense, thanks a lot for the detailed explanation, it's much appreciated. So with the above described setup, will that just get me internet access for all clients on the Mikrotik station side, or will they be able to connect to other machines on the other side too? And wha...

sb56637

You need routes on the client interface (not AP) so MT knows to forward traffic across it. Of course these routes can come from DHCP or RIP etc. Ah OK, thanks. And could I get a brief explanation of the from/destination in these routes, and what these accomplish in "real world" terms? Sor...

sb56637

Thanks @colanderman for the details.

Then set up appropriate routes on main (AP) interface

What is achieved with this step?

sb56637

And just in case this whole setup doesn't work right (I can't test it because my Mikrotik hasn't arrived yet), what is the Mikrotik term for a simple repeater? If the bridged and unified network doesn't work, I could hobble along for a while with the Mikrotik acting as a wireless client to the Tomat...

sb56637

So if I use "station-pseudobridge" would that work with the DHCP server on the Tomato AP? No, I don't see how DHCP can technically work over the pseudobridge. And I remember seeing multiple posts here reporting that it does not work indeed. Ah OK. But no problem with just running another ...

sb56637

Thanks for the explanation. And do all protocols work over this bridge, assuming they run on IPv4? I seem to have read somewhere that certain protocols might not work. I've never used it so I'm not sure. It *should* work with most IPv4 protocols, since they *shouldn't* care about their MAC address ...

sb56637

Thanks @andriys for the explanation.

So if I use "station-pseudobridge" would that work with the DHCP server on the Tomato AP? Can it still see different devices and assign them an IP?

sb56637

I also found this:
http://dumbpcs.blogspot.com/2013/06/usi ... o-non.html
Does that make sense to any of you? And again, would that allow for wired and wireless clients on both segments to connect and see each other?

sb56637

"Pseudo bridge" = Layer-2 NAT. All devices behind the Mikrotik will bet L2-NATed to the same MAC (the Mikrotik's MAC). It works only with IPv4 (the MT maintains a IPv4 addr → MAC addr lookup table). Thanks for the explanation. And do all protocols work over this bridge, assuming they run ...

sb56637

When I set it up following the reddit post I did not have 2 mikrotik units just 1 and could not get access to other hardware so needed to make it work.

Yep, this is where I'm at for now. I will probably eventually install another Microtik in the AP location, but I can't right now.

sb56637

So, I guess I need more explanation on what a "pseudo station bridge" is, and how it works.
Have a look at this wiki page.

Yep, thanks, I linked to it in the first post in this thread, but I didn't really understand the page.

sb56637

Thanks a lot for the Reddit link, that might do what I need. But I see that post is referring to a setup with 2 Mikrotik devices. So, I guess I need more explanation on what a "pseudo station bridge" is, and how it works. Will it work with a non-RouterOS devices as the AP? And it will it a...

sb56637

This page is much clearer and better written than the Mikrotik documentation:
https://wiki.openwrt.org/doc/howto/clientmode
But I'm not sure which of that applies to RouterOS, and which would be best for my setup?

sb56637

Hi, I need to bridge two physical locations with a WiFI link, and I need all of the devices in both locations to be on the same subnet so they can all talk to each other, and I need to be able to connect devices on either end via WiFI or ethernet. I would prefer to use the same SSID in both location...

Search found 66 matches