MikroTik

https://createnewwiki.fandom.com/wiki/S ... ateNewWiki

Yes, macOS is very stubborn. If you joined a SSID with WPA3, it will try it again, no matter if you removed it from recently used SSIDs.
Just for sake of experiment, set a new SSID in the hAP device

OK so this could be the cause. MacBooks sometimes remember old config, even if you changed it. Try another SSID. It will think it's a new network and will reconsider the settings.

We tried it with wiki and it ended in disaster, there were lots of errors in manuals and even some self promotion. This was even during period when only approved consultants could edit the wiki.

When macbook has connected, hold "option" on the keyboard while clicking on the wifi icon in top-right corner of the screen. It will show more details about the connection

Yes, as you found in the documentation, those are currently not supported, as they force using HTTP2, which RouterOS currently does not support

We are following this topic and are taking notes on both how to improve the GUI in the next generation winbox, and the manual as well

Plenty of people here use that generation of macbook without issue, so it must be either a macOS config issue or ROS config issue. Try and configurre OS as 5ghz-ac and remove WPA3 and see how it works then.

You mean the Wake on LAN feature? First test if the command does what you need it to do.
[normis@MikroTik] > tool/wol interface=bridge mac=

If yes, then add this command to the "on-event" field of "/system/scheduler" and set the time, when it should be run.

Issue should be fixed in latest 7.14 beta versions

bpwl for you case EoIP would be better, no?

Yes, since 7.14

Looks like your RouterOS is not running the latest version. Make sure you are up to date.

When 7.14 is not in beta, config should be migrated normally. During beta all kind of bugs can be possible, so be careful.

You are looking at status icons for existing users.
When you make a NEW share for your wife or friend, this selector will be available

1) You can use PPTP. It will only show a warning. There is no limitation.
2) PPTP is known to be vulnerable and easily hackable. Recently some exploits were published. Nobody should use it anymore.

acess to home network" "acess to internet"

you just described it yourself.
what is the question?

Correction, old SMB did not work with macOS.
New v7.14 SMB works with all Operating Systems now. And is fast too.
There is a different config now, so you may need to adjust first.

Croatia is one country, there are some more countries. And also, why not? Maybe you should ask the LTE provider to give you Chateau, not Re-Labeled noname brand. maybe make quickset a little bit more functional, some of the suggestions: - VLAN manager of some sort, option to use or not to use VLANs ...

You are absolutely right about the secont part. Firewall rule before the fix: add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp Firewall rule now: add action=accept chain=input comment="defconf: accept UDP traceroute" dst-port=33...

It is not, that's why home user can use "MikroTik Home" app, or rely on the ISP to configure their device. Some mobile operators don't even allow access to RouterOS to home users. The strength comes in the feature set the ISP has available, not on user friendliness.

No praying is necessary, but if you are administrating a network, you better at least understand networking.

normis is my name just as DarkNate is yours

It is true what the message says. Don't use PPTP

By the way guys, did you know anyone can publish a CVE, even if it's not? Just that it has a CVE number has zero meaning.

Indeed, it is very old. But there is a gap in release of the fixed ROS version "6.49.7 (2022-Oct-11 17:37)" and the blog article from 27th Jul, 2023. I don't know why there is this time offset in fixing and announcing that something critical was fixed. It was not critical. It requires ful...

This is very old. There is even a blog entry about it https://blog.mikrotik.com/security/cve-2023-30799.html

"Can run" is not the same thing as "Runs well". I guess if you only control two lights with HA, it will run nearly anywhere. It is just an example, don't take it too literally. We already informed Marketing that they exaggerated in this case.

A very interesting thread, thank you. It is also clearly obvious how different people have different needs and different ideas about our products. We sure can't go in all directions this thread would want us to

Please report all issues you have with stability, just email support@mikrotik.com

Upload image here, not in Gdrive. It doesn't load

The PoE power is activated automatically, if the connected device supports it.

Have you considered proper install techniques and protections, so that no such repairs are needed?

Firefox has strict security settings. There is nothing to report to them, this is by design. You can turn off HTTPS ONLY MODE in Firefox, but they are right, it is dangerous to visit HTTP only sites and enter passwords in them. Don't do that. Use Winbox, or set up proper HTTPS for Webfig.

CHR is a virtual router, distance should not be a factor. All you need is SSH access

Sorry my mistake, changing account is not possible at all. Your only option is to export config, make a new CHR install, tie it to your account, license it, then import config.
https://help.mikrotik.com/docs/display/ ... RLicensing

What is in the Wiki still is true for v6, which has not changed and has not evolved. Wiki is not changed, because v6 will not be changing. Main documentation is https://help.mikrotik.com/docs/ Most concepts are broad concepts and do not apply strictly to one version. Some features are only present i...

CHR license is account based. There is no way to move licenses. They need to log-out in the CHR installation, you can then log in with your account and license it from your account.

What is your question? The only not-supported devices are SMIPS CPU based, which are very old. Documentation is not changing, because software is not changing.

hAP ax3 should have better antennas and better coverage. By looking at those reports, it seems that either a few users have not properly attached their external antennas, or there might be some hardware defect. I suggest to email support if you have a unit that performs worse than ax2

No, bugs are also not fixed, except if they are security related. Please just use v7. It is stable.

v6 is very much EOL, no new features will be added.

L009 replaces RB2011, it is for people who need 2GHz. We have plenty of other devices for those who need 5GHz. Actually, not that many. There is no real product "for the higher-end home user" with 8+ switch ports and modern WiFi. The 4011 is not well supported, the 5009 has no WiFi, the h...

CRS is a switch, do not use it as your main router

L009 replaces RB2011, it is for people who need 2GHz. We have plenty of other devices for those who need 5GHz.
Chateau has USB port for containers.
CRS is a switch, why do you need RAM at all in there ?

If you would like more assistance with piece by pice migration, post the old config and we can try to help

Read our latest newsletter and learn more about:

- new outdoor AX devices
- new D.I.Y. RouterBOARD
- APA-1 overvoltage protection
- distributor case studies
- latest #MikroTips and tricks, and so much more!

https://mt.lv/news116

hEX S is not that much slower. What are you planning to do with the device? It is very much capable of handling a 1Gbit connection to the ISP at full speed. hAP ax2 is a newer ARM device and could be slightly faster, but is also more expensive.

ap-bridge was just a name, no bridge in the function.
now it's called ap. simple name change.

Although latency is pretty bad if relayed, things do route/connect. I see ping times in the 600-800ms range using BTH with relay from phone to router. This router also has ZeroTier, so if disconnect from BTH and use ZT as VPN instead, latency is about 150-250ms in same ping test. I'd imagine differ...

Depending on the type of actions you want to perform. When BTH creates a new tunnel - BTH app creates and deletes all kinds of configuration in the router, so yes, it needs full admin rights to do that. When sharing the already created tunnel (as admin) to another person, that only needs to use the ...

Most likely software is not faulty and your device fully supports Germany. Post full config and a picture of the issue. We can not help without this info

Post an example of how you determine "unsupported". is there some error message? It is possible you don't see 5GHz, because due to EU regulation, radar detection process happens some 10 min after booting. Try to not reboot and just wait.

If you do not want to be very specific about the frequency settings, you can simply not set anything in the channel. Then one configuration will suffice for both bands, each AP will run in auto frequency mode. Separate configs for 2 / 5 GHz are needed if you want to exclude certain standards or spec...

What makes you think they don't work in Germany? Provide full model code from sticker and also configuration you applied.

This is because rextended, you never learn. What is happening here again? You start anotherr offtopic with all the complaining.
And I have to delete this post too, since it is off topic.

5GHZ access points need some time to start showing up, since, due to country regulations, they need to scan and see if there aren't any military radars nearby. This can take up to 10 minutes sometimes. So avoid rebooting your AP often.

1. password is written on the sticker of the device, as is clarified in the paper included with the device 2. 2GHz is very susceptible to interference, if you have Bluetooth devices in your house, even microwave, even if the neighbor is using a 2GHz wifi device, this will drastically reduce your spe...

It depends on the model family. The Chateaus are mostly used by mobile operators, they pre-configure them and give them to home users, who never log into the router, or don't even have a password for it. Those are devices that are plug and play. You CAN access and use RouterOS, but they are not mean...

Very sad, that such basic ask like "can you please not use swear words" is taken as "ingratitude"

Here is ok

Mistake. I tried to clean offtopic posts that are not related. Your post guide came with it. Can you post again?

Also, how are you testing the speed? With Speedtest from that iPad? Or some other way? When you run the speedtest, check if anything changes in the registration table entry

Sorry, my mistake. Timezone DB is IANA, but for auto-timezone we use the IP that is used to connect to the MikroTik cloud. This IP is compared to Maxmind GeoIP database. It is updated approximately once per month.

Make sure you reboot the CHR

If you are new here - welcome! For your first question, please provide a clear description of your setup, make sure you are running the latest RouterOS version and include the configuration output. You can censor out passwords and such, but posting the config is important. Do respect the forum regu...

This one is used: https://www.iana.org/time-zones
Make sure you are on the latest RouterOS version

Post says "solved", so what is the question?

If the device has been reset, there is no need to netinstall. Like the other poster above said, port1 is for the internet cable, you can connect from ports 2-5. Try it like that, user "admin", no password. Also, Winbox will auto-detect there is a router there. If it shows up in the list, g...

Even if we make a winbox that is not the same as the good old Windows 95 inspired version, you can always just keep using the old one

Reboot the CHR and try again

You want too much from a teaser. Teaser makes you think. Try it.

Re: WinBox v3.40 released! Screenshot 2024-01-22 at 10.39.46.jpg

Screenshot 2024-01-22 at 10.39.46.jpg

Why Java. There are better options

The best option is to ask the shop who is selling it. Local distributor must know the best. Do not buy from faceless online shops, choose an authorized distributor: https://mikrotik.com/buy/northamerica/usa List of supported bands is on the product page: LTE FDD bands 1 (2100MHz) / 3 (1800MHz) / 5 (...

All: I just submitted a quick ticket because I'm having difficulty getting licensing on a few virtuals in my environment. I noticed that I submitted a ticket about VRRP v3 incompatibilities with Cisco back in November, and I haven't been reached out to on that ticket. Is that typical? I'm using qui...

Issue will be fixed withing the next hour or so. Sorry for the inconvenience

We are working on it, there is an issue in the licensing service, it should be fixed soon (nearest hour)

Yes but Why?

Wordpress has plugins that allow to connect to other site REST API: https://wordpress.org/plugins/wpgetapi/
And in RouterOS you can enable REST API: https://help.mikrotik.com/docs/display/ROS/REST+API

But why wordpress?

I think the point mrz is trying to make is that any perceived gains are far outweighed by the costs. The gyrations required by the development team to strip 100KB off the main package Into their own 1-2MB package, and the extra work requiring users to manually load/unload them doesn't add up in the...

Which documents?

What discussion are you talking about?
I am talking about how volunteer moderators are bullying new members. Some of them got their moderator status removed.
This is a bad move?

See if there is an improvement starting now

no. some other things were attempted. some people got banned, some got demoted from moderator status and got really mad

People have said in the Discord, that they prefer Discord, as forum is a toxic mess where you get bullied. Not once. Several times. This has to be fixed.

We fixed it a few days ago, for me it is working flawlessly now. Try and clear cookies, cache, etc.

The BTH is not only helpful because of the relay server*, but also because it makes setting up a strong and secure VPN a simple task for beginners. We have seen people who simply disable firewall rules, to allow Winbox access from their workplace, for example. For beginners - just use BTH :) * - fun...

Sessions (Layouts) are not bound to the router. You can load some layout on any router, so you should probably name them by Function. not by IP

Don't trust links in forum. Go to 1.1.1.1 yourself and download it yourself.

Yes, those are actually LAYOUTS. You can save predefined layouts, for example with wireless windows, with firewall windows, any commonly used window layout. It is not bound to router. And you can switch between these layouts, without need to close and open each window.

1) Have you ever used Sessions? (default ones are <own> and <none> and you can make more) 2) Describe in a few words, what you think they do 3) How could we supercharge this feature to actually be useful for everyone? 4) Does the name Sessions actually convey what this feature is meant to do? 5) Aft...

Aivar, which RouterOS version are you running and which packages do you have installed?

As it says here: https://help.mikrotik.com/docs/display/ROS/Wireless

You need routeros.npk and wifi-qcom-ac.npk installed. Nothing else!

Seems you have an IP address conflict. Winbox can't "accidentaly" connect to another device. Most likely they both have the same IP. Or maybe you have some DST NAT rules in the router? In any case - Config needed. Post config of the routers

Please read this post here:

https://community.cloudflare.com/t/upco ... ver/594379

Yes, but it then can't manage it's own interfaces. Can only work as dual capsman for other devices. See this table:
https://help.mikrotik.com/docs/display/ROS/Wireless

yes, local mirror, this is for people who have networks of mikrotik routers, but have no internet connection

Dear @normis, I wanted to bring to your attention that the MikroTik Confluence wiki page about DNS and DoH configuration seems to have outdated information. The page suggests using DigiCertGlobalRootCA.crt.pem That is not true. Documentation clearly says that you need to go to the address that you ...

RB750 is a wired router, but all tests are done with a phone. How? What WiFi is used?

Have you guys tried 7.13.1? Those switch changes should fix the CRS354 issues described in the topic

Please always report any sticker/password problems to support@mikrotik.com so we can find, fix the issue and improve the situation.

Don't use pre-pacaged Winbox software from 3rd party sources.
wine-8 and winbox64 works perfectly with all functionality and can self-upgrade

Well hacking up your own netinstall alternative, good luck. Sorry but we can't help.

v7 is still beta at best and definitely not a full replacement for v6 Besides, managing a dozen routers that you own is fine, managing hundreds/thousands of devices it's just not practical to enforce an upgrade to v7 (that then breaks other things) that sort of idea is nonsensical False and misinfo...

RSC is a plaintext file, what are you guys talking about?

Not really. It receives critical vulnerability fixes, but there is no technical support / help for it.

v7 is stable

Check the log for errors.
Did you use the downgrade command? Simple reboot can't downgrade.

Simple solution, keep routers up to date

NEVER get certificates from 3rd parties, downloading stuff like this from anonymous user google drive is very dangerous. Do what the DNS documentation tells you to do. Go to the address you configured as your DoH address and download certificate from your browser, by clicking on the padlock icon htt...

You can use regular USB-A type 5V chargers and USB-A to USB-C cable to power it. If the source is USB-C it usually negotiates the needed Voltage and hAP does not support that.

I know, that's why I said, there is nothing automatic you could do to prevent this from happening. Cloudflare changed the certificate, it did not expire. You as the operator are responsible to keep your certificates in the router valid and up to date. MikroTik did not provide you this certificate, y...

Glad to see you found the issues

Not like dedicated mesh products. For example our Audience devices have a special third wireless intereface, that is used to connect the mesh itself.
In hAP ax3 case, you can sacrifice 2GHz interface for that, and only use 5GHz yourself (not really viable IMO). Or wire them

I think you need multiple devices, all "AX" series models, then use CAPsMAN to manage them centrally, then enable "ft-over-ds" fast roaming feature.

infabo, please make a new topic about bufferbloat and cake testing.
dtaht, thank you very much for your offer and continuous support on this forum. we will see what we can do and will let you know if we have any questions

It is an address list, that is by default empty / not existing. If you add a shared user and specify "block LAN", then his tunnel IP will be added into that address list and LAN acess will be blocked

Only SMIPS devices "do not work", for others it simply means performance will be impacted. Not Recommended is not the same as Will not work

Tangent is right. Unless it is expiry, there is no real protection against this. CF messed up this time.

RB751U works with v7. This whole topic is a disinformation mess. Make sure you run latest 7.13 or 7.14 beta and make a RIF file if there is some rebooting going on. Maybe a config issue.

Not sure how the "back-to-home-lan-restricted-peers" address-list in firewall gets populated actually. This is a new feature, when you have your own BTH connection, you can make a shared connection for your friend. For this friend you can add a checkbox in the app, that only allows the fr...

Instead of trying it yourself, you want somebody to do all the work and show you each step. That is lazy

You have this "Orbi mesh". This is a product by another manufacturer. How it works is completely not dependent on the MikroTik router. You can't connect two manufacturer mesh networks together, they all need to be the same models. So what was the plan in your case, you wanted the MikroTik ...

Winbox and Webfig have the same amount of menus. Winbox is simply more stable, faster and works even if there is no IP. So it is not more complicated, it is only more reliable.

Never trust any third party with certificates. Always download them from the source.

they all using older wireless package or the new wifi package?
also some configuration would be useful to see

Again: when an RB4011 (or any device) is upgraded from 7.12.1 to 7.13, an unusable WiFi menu is added. This takes up space on the device (a real problem on e.g. the hAP ac2!!!) WiFi menu is usable to manage CAPsMAN. You can ignore it, just like you can ignore BGP menu, SNMP menu and others. And so ...

anav, before I answer. Have you used the BTH app and understand what it's purpose is? It enables Wireguard in router. That is all.

Which part is not clear? If you have a question, I can answer

Not that long. AX took longer, since we had to move from our own drivers to chipset manufacturer drivers. From now on with wifi.npk package, it will be much easier.

click on the settings icon next to package and set to uninstall.
then reboot router.

The change to Latvia was only for DEFAULT country. If you manually have set the correct country, you should not be affected. Latvia is the same as any ETSI country. This is to avoid "default" config to break some rules out of the box.

yes, my bad, but in any case, use winbox

Branding can't change webfig, only the pre-login page.

Like I said, the product comes preinstalled with a working wireless package and there is no reason to change it to anotherone. If YOU decided to do this, it's in the manual, but it is not an advertised feature for this model. Does a BMW come with a specification note that engine from diesel to gasol...

in newer batches, we now avoid ambiguous characters

admin without any password also not working?
send the serial number to the seller and ask for the password from their database, or you can email mikrotik for the same. Just in case sticker is wrong or something

No, you can't, but a better option is to not use Web config, but use Winbox instead. https://mt.lv/winbox

RB4011 comes with wireless functionality enabled out of the box. You can simply use it as it is. But Changing package to another one is optional and at your own risk. It is in the documentation that RB4011 is not compatible https://help.mikrotik.com/docs/display/ ... patibility

Same like saying you'd like the new engine and interior, but keep the 2001. design of a car.
Sorry, we do not plan to use the old cases for the AX series

The lock is in place intentionally - because device is only certified to be used with these settings.

> Next post intimates that it doesnt work with different Winbox Ports?? only the BTH app (!) needs the default port. To set it up. We might fix that, but then again, if you have custom ports and whatnot, might as well just use winbox > how to setup the Mikrotik manually, when using your relay point ...

Yes, but in all seriousness, what would you propose? We tried to think of an alternative, but there is nothing that would be self explainatory.

I do not use that iPad regularly. Only use case: car streaming device for kids. It connects to my smartphone hotspot successfully - so I do not care much if it connects to my MT AP. But would be nice to have for e.g. download movies for offline usage. Regarding apple id: yes, MacOS and iOS keep nag...

Read the table again

dcavni you seem to have a very customised device. BTH is for people that don't want to configure their devices manually at all. So BTH works best with default config. If you are able to change ports and such things, you can create BTH setup manually too

I have an Apple-ID, but they locked my account for no reason. Did not need it anyways and I had no muse to call their phone support.

You need to do that anyway. How can you use your device without AppleID? You are locked out of like majority of features

Because you are quoting "new capsman ONLY", but video talks about old WiFi5 devices, which in the table is "running two capsmans at the same time" (old + new)

It is almost same, but you need to download the Wireguard app in your computer. 1) set up BTH via phone, just like normal 2) in BTH app click the Share button 3) Choose Wireguard config file option and send the file to your computer (iPhone to Macbook is the easiest, just AirDrop the file) 4) Open t...

What is the difference with this BTTH vs Zerotier?

Which would be the right one to use?

Biggest difference is ease of use. To use BTH you only need a phone and the router's password. You don't even need to ever see Winbox or any other router config. Just connect and click enable.

The arguments against LHG are unfounded. They are fully capable in strong wind and cold weather, actually more capable than DISC

It looks like this is not a question for this forum, but for wherever you discuss unify configuration

You say 5GHz and LAN still works, so does it mean you can connect to the router or not?

Yes, iOS doesn't just remember the password, it remembers all security settings. Just "forget network" and connect once more.

Table is about specific products, it is said above each table. Products not in the table - not supported. Think about it that way. I don't see RB133c either. What could it mean?

It is one and the same. Many country regulators are working towards such requirements, not just the EU. And they are doing this because of the users. Did you think it was just baseless regulation to annoy people?

Install Back to Home app in your phone, when inside home, connect to router with this app. It will do everything for you.

https://apps.apple.com/lv/app/mikrotik- ... 6450679198
https://play.google.com/store/apps/deta ... id.freevpn

Easy, like manual says RB4011iGS+5HacQ2HnD-IN (no support for the 2.4GHz interface). Installing the new driver will remove 2GHz, only 5GHz will work

Larsa is right, if you plan on using heavy CPU tasks at high internet speeds, you need to upgrade your router. Home routers can only do so much.

Not this model, no. It's a little too old for that.

anav is right, block all, then allow some.

During this year it has been slowly rolling out for home user type of models. Home users often never connect to their devices, leaving them without protection and open for Trojan software from the LAN side.

New models come with default password which is on the cardboard box and also on the router itself.
ALSO it is available from your distributor in a digital document / CSV.

Newer batches have improved label print quality and do not have ambiguous characters (0/O etc)

We will update the table so that everyone has all questions answered. When forum users approve it, we will put it into docs.

Glad to see you got it working, but to me it is unclear what happened and why new netintall "did not allow" to select more packages

There are many updates. The BTH app is in the app store, make sure you check for updates. Changelog is shown there.

More detailed table viewtopic.php?t=202578

If any edge cases are missing in the table, let us know, and we will make the ULTIMATE guide for packages

mazay, the documentation clearly says "wifi-qcom-ac package" not wifi-qcom here is a video too: https://www.youtube.com/watch?v=AkBIQxi-VKs You are correct, at the same time the package names are confusing. I'd suggest renaming it or making it bold in the docs. Does this help? https://for...

see this viewtopic.php?t=202578

We made a table with some clarifications, can you guys let me know if this clears up some confusion? I see that Documentation and YouTube video still leaves some questions unanswered. So let's try it like this:

split2.jpg

mazay, the documentation clearly says "wifi-qcom-ac package" not wifi-qcom

here is a video too: https://www.youtube.com/watch?v=AkBIQxi-VKs

Did you install the wifi-qcom or wifi-qcom-ac package?

wifi-qcom is only for 802.11AX WiFi6 devices. Audience does not support that package.

No, there are plenty of USB powerbanks that support different voltages. Just need the proper adapter

We would like to concentrate all newest and most exciting features on the currently manufactured devices first.

Looks like Atlassian Confluence does not allow anonymous export, since it could overload the server.

As mentioned in podcast
There's a podcast? Where can I get it?

All major podcast platforms and RSS:
https://podcasters.spotify.com/pod/show/mikrotik/

Try this https://box.mikrotik.com/f/e74f7125f3c54321aac1/

Recycling is the best option.

Guessing norims has no need to run Dude (or any other win32 app) on Mac or is still on Intel Mac.

When was last update to Dude?

Hi Normis, 1. As an admin or helper admin, I can go to the local site and quickly setup a vpn connection which I can use later when remote. 2. What about the opposite, I want to send my brother the ability to connect to my MT wireguard router a. from his device directly (no mt router), be it window...

There are easier ways to do illegal stuff, than to compromise a family member

I personally think this is more an imaginary problem, than reality. Maybe I just don't know as many digital criminals

share responsibly

P.S: how is this specific aspect different from VPN options any router has had for 30 years?

There is all kinds of smart technology involved, I can't share details. MikroTik knows nothing about the connections. Like I said, relay helps to establish hole-punched connections, but from then, the connection goes direct between users, not over relay. About use cases, one example I like is this: ...

You don't seem to get BTH idea at all, sorry about that. - BTH is free of charge if you have one of the supported devices (all new / currently manufactured mikrotik devices) - There is no middleman with access to your data, as opposed to traditional VPN providers - Data goes directly between mobile ...

BTH is nice if both devices are behind NAT.

The config is very strange, this is the cause of your issues. There are many weird things. Bridge with one port, firewall also wrong.
Also, have you tried 7.13 ?

Do a Netinstall with latest RouterOS v7.12.1

Why use crossover, when Wine works perfectly on macs? If you found an issue, let's solve it together, but there is no need to pay for commercial emulators

Rextended please stop posting with such confidence if you are not sure what you are talking about. "Is the same error on RouterOS source code" is wrong.

Use /ip firewall mangle to change MSS (maximum segment size) 40 bytes less than your connection MTU. For example, if you have encrypted PPPoE link with MTU=1492, set the mangle rule as follows: / ip firewall mangle add chain=forward protocol=tcp tcp-flags=syn action=change-mss tcp-mss=!0-1448 new-ms...

please try 7.13rc3 and see if there is improvement, there are fixes for multicore separation

protocol=tcp

?

First enable container functionality here:
https://help.mikrotik.com/docs/display/ROS/Device-mode

Do not follow random tutorials on googe. Looks like this one was 15 years old.

Just to a factory reset and the best possible wireless config will be applied.

Reset or reinstall will remove password

Check in the Settings - Show Advanced Connection Info, it will show how the connection was made - Direct, Relay, Relay hole-punched. Also in the settings you can try to disable holepunching and see if it makes a difference. another thing, check what you have in the app tunnel settings under allowed ...

The App simply creates a system standard VPN profile, the app itself does not do any VPN tunneling.

About DDNS update time, it is a known issue and will be fixed in the next release. Mfrey about your Android app - no other config should be needed. BTH works best with default config on home AP type devices. Maybe there is some more complex configuration on your device that is conflicting with BTH, ...

MikroTik devices are readily available, all of them. So what might be happening is that local distributor is not making orders, just waiting for you to order something. They maybe don't want to stock items without knowing, what people need. Don't just look at their catalog. Call or email them and te...

Yes, why are you setting speed limits here, and wondering why speed is limited?

/caps-man rates
add basic=6Mbps name="GN Only - No B Rates" supported=\
    6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps

remove all rates settings completely, and test again

Search found 26131 matches