MikroTik

Steveocee

Whilst not on the router as such. I have a VM on my LAN (can run on Pi as well) running Pi-Hole. It's a great ad-blocker at DNS level; https://pi-hole.net/ If I understand correctly, this requires installing virtual machine on router? I've not found RouterOS in supported OS list. I'm not implying a...

Steveocee

Whilst not on the router as such. I have a VM on my LAN (can run on Pi as well) running Pi-Hole. It's a great ad-blocker at DNS level;
https://pi-hole.net/

Steveocee

That pretty much covers it.

Steveocee

Hi,

MikroTik doesn't have an "easy" button to do this as such however you can do so by creating a dst-nat rule to forward everything from your wan interface to a LAN IP address, I'd recommend making it !8291 TCP though so you can still get to the 'Tik from remote if you want to.

Steveocee

With your current master-slave setup you can put ether1 and ether6 into a bridge. This will mean that ports 1-5 and 6-10 will switch to each other at full wire speed but anything going between the 2 switch banks will go through the CPU. I would say a "better" solution would be to enter all...

Steveocee

There is a non-supported way of getting x64 as previously mentioned however it's negligible if there are actual gains from doing this. If you are looking to run virtual then you should look at CHR as that is x64. Multi threading is somethign which comes up often on this forum and IIRC it's something...

Steveocee

You should (note should) be fine downgrading. The bridge will stay in place and the only detriment you may see is that switching if done over the switch chip would not be offloaded and would be done through the CPU (which isn't too bad on the 3011 anyway). If this is a production environment then pe...

Steveocee

Hi guys, Is it normal to see the port1 ethernet link/ activity light on these devices active, despite no cable plugged in? I've tried with the 6.40 series and the 6.41RC series, it happens with both. Just wondering if I have bought a faulty unit that needs warranty return; or if it is a software bu...

Steveocee

I'm using it on a steel boat, the signal inside the boat on a phone is highly variable and data patchy, previously using the hotspot on a MotoG3 in the Window was giving about 5mbps and occasional dropouts, not with the wAP LTE mounted on a very short pole on the roof about 75cm higher reliably get...

Steveocee

For those who are running small data centers the MT is the best option. However, You can try Vmware as that is the fastest known virtual environment or KVM as that is part of RouterOS But which hypervisor is best? I need to share the NIC with the host as a bridge, running on a Xeon 3460.. Trying wi...

Steveocee

If ports have an "S" next to them then this means they are part of a switch configuration. They are probably part of the existing bridge. Have a look in Bridge>Ports and see which belong to it.

Steveocee

You can't do master/slave on a CCR.

You will need to create a bridge and add all the ports to that if you want to switch them. The CCR's don't have a switch chip.

Steveocee

What device are you trying to power? Remember that model can only output what it gets into it. The standard PSU is 24v so it won't power much other than mirotik AP's or Ubiquiti kit.
Same goes for the power in, 24v only.

Steveocee

Silly of me to ask but your router does have the correct time? Have had a similar issue when I didn't set SNTP to a router once and it too didn't run scripts at the correct time.

Steveocee

You should still be able to discover the AP via L2 with Winbox. Alternatively, connect to the open wireless and connect to the config that way, reset the configuration and then cable in.

Steveocee

IP > Firewall > Service Ports > Disable SIP helper.

Steveocee

# aug/25/2017 18:52:52 by RouterOS 6.40.2 # software id = JF25-4YTZ # # model = 2011UiAS-2HnD # serial number = 5E6C059915FC /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \ comment=Wi-Fi country=brazil disabled=no mode=ap-bridge ssid=ITIDAI \ wireless...

Steveocee

I get constant disconnects to my RB3011 by both MAC and IP if I connect locally via my wifi access point. Cabled in I have no issues. Wifi connection has no loss and consistently low. Just an "oddity" I have observed.

Steveocee

As of right now. Master-slave switches on the hardware Bridge switches through the CPU. I found that throughout was about 400-500mb when switching through the bridge. Currently in the rc channel there is a new feature where bridge ports will offload switching to hardware, I've tested this and it imp...

Steveocee

It's a switch not a router.

Steveocee

Ensure your Virgin router has VPN pass through enabled as by default they block it.

Quick google found these instructions;
https://support.cultrix.co.uk/hc/en-gb/ ... a-SuperHub

Steveocee

I'm pretty sure that fastrack is involved in speed increase. Mikrotik documentation was always flaky. But anyway, lucky you. Well, it was off - I had no fast track rules in the firewall. So, a firmware update alone was enough! :) Anyway, I've replaced 1200 with 2011 and it performs even better now ...

Steveocee

Set yourself a static IP on the USB-ethernet interface and as silly as this may sound, ensure it has a gateway IP set. It doesn't have to be in the same range as the CRS but for some reason I've found that I can't L2 discover from my Ubuntu laptop (even via real ethernet port) unless a gateway and I...

Steveocee

Sigh...http://www.ookla.com/speedtest-custom
Is it paid or free ??

Read down the page. $1995 dollars per year if you want to host it yourself. Free if you rebrand it but point it at someone else's server.
Just use fast.com

Steveocee

If your ethernet adaptor has a self assigned IP, you won't be able to browse to the 192.168.88.1 IP regardless. You either need to set an address in the same range to your ethernet adaptor (192.168.88.2-254 for example) or if you use winbox you can use L2 MAC to gain access without the need for an I...

Steveocee

Because when you run print command console creates and stores those numbers in the buffer. But I would not recommend to use this method, it is not reliable since depending on how you run the print command it may return different numbers for the same item, use "find" instead. Brill, Thank ...

Steveocee

It is not a bug. You cannot use console buffered numbers to set items.
Instead you need to use internal IDs that are returned using commands like "find".

OK, will change and re-test.

Why does it work after doing a print though?

Steveocee

Hi all, Wondering if anyone has come across this or has a way I can navigate around it easily? I won't bore you to tears with the full files we use but I've been asked to write a quick rsc file to generate a guest wireless network off the back of an existing one (the "main" router config f...

Steveocee

Fastrack seems not to be setup
Thanks! that seemed to do it!

I genuinely wouldn't be able to leave it like that. I'd want the full 330! Why pay for the speed and give it away?

Steveocee

You could set up an access list to disallow the songs devices on each so except for the one you want. You could open this out in general to use as a minimum rssi rule.

Steveocee

An hAP mini with LCD screen. The only thing the LCD needs to do is display live traffic on WAN port. or something nobody else has out An hAP mini with a built in projector that displays live WAN port traffic on the wall. or An hAP mini with video out port that transmits live WAN port traffic to som...

Steveocee

I'd need a CRS125-2S-RM or anything with two SFP slots at least + 12-24 copper ports. in my dreams it's arm based of course, so it even would have the guts to actually route traffic not just switch it. but even the existing crs125 with two SFPs and the same CPU would be great... i need redundancy o...

Steveocee

Ignore this.

Steveocee

As unfortunate as it is. There is no way to log in without password. You may get access through the LCD screen but you'd only be able to reset the unit (something you could do anyway).

It would be a huge security risk to be able to bypass the password.

Steveocee

Update to latest bug fix. Your ros is old and this was fixed.

Steveocee

Folks, I know this is very old thread, but anyways this question is still valid. Could you please point me to official document that clearly says what options are available to renew/recertify Associate and Engineer-level certs? I hold certificates from Cisco, Juniper and others and ALL of them allo...

Steveocee

CRS series are a switch with some L3 capability. I doubt you will ever get it much above 150Mb even with a lot of tweaking, sorry but you have the wrong device for your needs. An RB2011 or better a 3011 would have been better.

Steveocee

This is really surprising. I have been using 2 fire sticks in my household over the last year with 2 different RB's (2011 & recently 3011) and haven't had this problem once.

I have always set dhcp authorative to yes though, maybe that would have been the sue now though as a fix is coming.

Steveocee

The CRS226 has now been superseded by the CSS and CRS 326 (swos and ros/swos optional), not because they are ashamed of them. The CRS series are brilliant as a switch, it's the fact that they support Ros and were marketed with L3 capability that the expectation was they'd perform like a CCR with a m...

Steveocee

It's not normal and it's not something that should happen over multiple RB's. I guess normal applies, ensure latest ROS and FW. They may be applying config with safe mode on, losing connection and the board reverting changes.

Steveocee

Have you tried what support asked?

Steveocee

Yes, design a skin for the user. Create a new end-user security group, assign that skin you have designed to that end-user security group, assign a new customer username and password to that security group - you can even test the look and feel without having to constantly keep logging in and out to...

Steveocee

Has anyone (and can tell me how to) or is it possible to create an additional user "customer" for example and open up webfig pages with only certain variables available? For example a router is deployed but a customer wants to manage his own wireless password, can there be a webfig page wi...

Steveocee

I would start looking into the BIOS and network card BIOS (if any) settings. Have you tried another ROS version? Thank you for your reply. It was an ancient 5.5 to start with, I moved it to 6.31 (and forced 64bit) then up to latest bugfix. As it turns out now I've decided against running it on the ...

Steveocee

Hello all, Sorry to come to you with a problem but I'm stumped by this! Setup is an x86 installation (forced to 64bit). Ethernet setup is as below; # jun/27/2017 19:22:02 by RouterOS 6.38.7 # software id = K6ZK-DBVU # /interface ethernet set [ find default-name=ether1 ] advertise=10M-half,10M-full,1...

Steveocee

Even if I agree on your points, I have to ask: who is "we" and "all Google users" ? I am a Google user an no one asked for my opinion. And I don't remember electing a representative to speak for me, as a Google user, in this forum. Probably the same goes for the other some 1 bil...

Steveocee

Sorry not at a PC to give you exact code but you can do this.
Using mangle you can mark packets from your single device then use ip routes to route the marked traffic out of the vpn client on the router.

Steveocee

What is Mikrotik target group? Business or consumers. Any. There is a great choice for either sector. What is making Mikrotik unique, why pick Mikrotik instead of Cicso? Price, Winbox, Community, Manufacturer support (M.U.M for example), feature requests. Do Mikrotik have any limitations? Only hardw...

Steveocee

I was under the impression iOS only used L2TP&IPSEC ?

Steveocee

IP>ARP may be your friend here. Very useful unless all your ports are in a bridge.

Steveocee

why mikrotik give us this tool? As a basic tool to test bandwidth but you need to be aware you have bought the cheapest switch in then lineup. It does not have CPU power to generate the traffic to test up to 1Gb. As you have already found, devices with better CPU give faster results. Use iPerf on r...

Steveocee

Stop bridging!

You need to route, treat the connection on the hap AC to your rb3011 as a wan connection.

Steveocee

You have created firewall rules to accept the ports specified but that isn't a port forward. That is just opening the firewall ports. Create some dst-nat rules as well and you will be good to go.

Steveocee

I have noticed this also. Good advertising technique MT lol.

Steveocee

Yes.
Put your IP cloud host name into an IP address list and then on your dst-nat rules use dst-address list rather than IP.

Steveocee

Yes, I have employed a similar setup for a customer. Just make sure on the ubiquiti link you use WDS to make it transparent.

Steveocee

Yes this is easily possible with VPN and making good use of EOIP tunnels bridged to the ether ports you want.

Steveocee

What happens if you add the ports in individually rather than master-slaving them?
In this case, working up to the moment of removal or reconfiguration of the ports or port, such as a WAN.

I really don't understand that.

Steveocee

I understand that version 6.39.2 is the stable version, since it is the latest version available on the mikrotik website to download. This is version 6.40rc24, which is the one that can have errors, since it is a Beta. There is no sense in mikrotik web version 6.38.7 if it is only about patches. (W...

Steveocee

What happens if you add the ports in individually rather than master-slaving them?

Steveocee

Maybe the U-FL connectors would work (picture 2). No soldering needed then.

Steveocee

Simply, don't use the built in speedtest tool. It is CPU dependant. Use iPerf on "real" machines either side of the switches.

Steveocee

Both will work. Why is PPPoE a poor protocol? It will have no effect on the line quality, that sounds like an IT "specialist" who is out of their depth and trying to make excuses for their lack of knowledge. There is nothing wrong with double NAT however it would make port forwarding etc a...

Steveocee

If memory serves correctly, providing you leave the DNS field blank the router will pass on what it receives dynamically.

Steveocee

If you are "properly" switching then it won't touch the CPU. You are most likely bridging.

Steveocee

Fast track will probably push you to where you need to be.

Steveocee

https://m.youtube.com/watch?v=kkeu2t_6O2c

Steveocee

POE output will replicate the power you put in. If you are using the 24v adapter then it will only output 24v. You need a 48v adapter.

Steveocee

Oddly this just happened on my now ageing RB2011.

Steveocee

All ports are certainly gigabit. Something is faulty.

Steveocee

This can be done relatively easily, your problem is that to get to the internet your router is routing through your 4G provider. You need to add a route the same distance as your default route however give it a routing mark to look for (voip for example). Next you need to actually mark your packets ...

Steveocee

You're matching anything with a destination of the ports already mentioned which isn't the end of the world, it just means those ports won't do anything else locally. The previous poster is correct in saying it's better to try and narrow it down. If you make the dst-address (not the forward address)...

Steveocee

Chances are it is reporting another wireless device. You will get a few false positives with it. Ron Touw did a brilliant presentation at the London MUM with regards to DFS and how you can try and work around it. Well worth a dig on the YT channel (in fact its here https://www.youtube.com/watch?v=Zb...

Steveocee

Hello, I want to buy more pieces of CRS125-24G-1S-2HnD-IN but I see they NOT have rack mount kit. Does anybody know if exist and what is the part number for buy ? Regards, I don't think they are a MikroTik official part number however our distributor occasionally gets a good amount of additional ra...

Steveocee

Try also adding; /ip firewall mangle add action=mark-routing chain=prerouting in-interface=ether6 new-connection-mark=do_Volta passthrough=yes add action=mark-routing chain=prerouting in-interface=SFP new-connection-mark=do_Volta passthrough=yes I use a similar setup for an application I do and I ha...

Steveocee

I just bought a RouterBOARD 750G r2.

Problem would be there.

You really want the r3 as the VPN performance on them is phenomenal.

Steveocee

Once an interface is in a bridge you should disregard the interface and use the bridge.

Steveocee

Should easily do 300m with the correct antenna.
Do mean a directional antenna?

Yes I do. Without you will struggle.

Steveocee

Should easily do 300m with the correct antenna.

Steveocee

For switching ports 1-5 can switch and 6-10 can but you cannot cross between the chips.
You can master-slave the ports as above then add them to a bridge to get traffic crossing between all ports.

If you needed a switch you'd have been better with a CRS series.

Steveocee

Varies depending where you are. You need to do the training also, not just exam.

Steveocee

I’m using microtick router board 750 & 450G both router problem is CPU Usage 100%, than internet gatway block and slow the internet. we have user this router connect 50-60 user 9 AM to 6 PM. how to problem . What is using the CPU? Check Tools > Profiles and see. This thread is about DNS where i...

Steveocee

Yes it does. Make sure you have IP>Services>WWW enabled though. You may want to lock it down so only your LAN can each it though as it enables webfig but you need it to be able to access the graphs as they are http based.

Steveocee

Try forcing the power on. Had this recently with a UBNT PBM5-400.

Steveocee

So you've created port forwards for ports 10050 and 161?
What port are you trying to telnet in on? 23?
May be why you can't.

Steveocee

Have you tried trace routing or path pinging to confirm the loss is from the DC and not a bad link somewhere else? What happens if you ping out from the routers?

Steveocee

add action=fasttrack-connection chain=forward connection-state=established,related add action=accept chain=input comment="allow established connections" connection-state=established add action=accept chain=input comment="allow related connections" connection-state=related Looks w...

Steveocee

That's not embedded! That's nearly a gaming PC!

Why do you need something so high powered? An RB2011 would easily do what you need.

Steveocee

To throw a huge estimate, I'm expecting them to be the same size as the current models. CRS112 size and CRS125 1u size.

Steveocee

First of all make sure they are all on the latest bug fix firmware. It's not just a case of setting as a wds slave, that couldn't be any more wrong. You need to put the ap's into caps man mode. Set up your caps man profiles and provisioning. What problem are you getting exactly? Are the aps provisio...

Steveocee

I find the adaptors from devices such as the HAP AC work better. If you look at them the standard adaptors have a straight jack plug where the HAP AC ones have a right angled connector (also 1.2A) and the jack seems to be marginally longer on these.

Steveocee

I use Winbox through WINE every day and don't have the problem you are reporting. If it is in depth terminal/CLI then I prefer to SSH in.

Steveocee

That could be several things: - your firewall is dropping the incoming requests from internet (as it should, until you change it to pass this particular traffic) - your 4G provider is not transparently passing all packets (they have a firewall you cannot modify) - you are trying to make multiple co...

Steveocee

If only it was as easy as blocking a ransomware port to protect a network.

Steveocee

If you are allowing remote requests be sure to add drop rules on tcp/udp port 53 on the WAN port.

Steveocee

Sounds daft but photocopy the bottom of it.

Steveocee

Cost comparison?
Remember the hEX is a "cheap" router and as such is built to a price point. They are more than likely built to exceed standard manufacturer warranty 8760 hours.

Steveocee

when I download something from net via Chrome I never get more than 10.5 MB/s which is about 80 Mbit+

If speed tests are coming back fine then it's probably not your router and is probably the website you are downloading from can't upload fast enough for you.

Steveocee

2 separate networks with a router in the middle. The router is doing it's job.

You need to set up rules to stop them talking to each other.

Steveocee

Do you have a NAT masquerade rule for your VPN traffic?

Steveocee

Why do you bother with 10/100 ethernet still? Why not just have gigabit ethernet on all (new) products? It's the standard these days everywhere. For example, HAP ac lite/ lite tower. So wireless can go beyond 100mbps but ethernet can only reach 100mbps. It doesn't make any sense. Sure you can have ...

Steveocee

I'm asking because I have a 802.3af/at injector and it doesn't work So you are connecting a 48v power supply to a router that requires 24v? Why are you expecting it to work when it's clearly not going to? You have been told 3 times already that the RB3011 requires a 24v power supply like the adapte...

Steveocee

Hi, what power injector is compatible with this router ?

Anything 24v passive such as the MT gigabit one and UBNT ones.

Steveocee

Certainly wipe and start clean.

Would simply not putting a NAT rule in doing nat from src-address 192.168.48.0/21 out-interface ether1 not be enough?

Steveocee

Much simpler; /ip firewall nat add action=masquerade chain=srcnat out-interface=wan1 src-address=192.168.1.0/24 add action=masquerade chain=srcnat out-interface=wan2 src-address=192.168.2.0/24 I'm unsure of why you have these both, use either the interface etherX or wanX, no tboth; ip address add a...

Steveocee

Much simpler; /ip firewall nat add action=masquerade chain=srcnat out-interface=wan1 src-address=192.168.1.0/24 add action=masquerade chain=srcnat out-interface=wan2 src-address=192.168.2.0/24 I'm unsure of why you have these both, use either the interface etherX or wanX, no tboth; ip address add ad...

Steveocee

I too have this issue. It seems you cannot queue actual interfaces, software interfaces are fine though.

Steveocee

Your ISP is probably not blocking any ports. The NAT on your router is probably blocking the ports (which it is meant to do) and you asking to "open ports" is probably falling on ears deafened to you telling them they are blocking ports. You need to be asking for port forwards or "dst...

Steveocee

Where's the PoE out in the CRS226?
Anyway, MT announced the CRS328-24P-4S+RM at the MUM, with 802.3af/at. Time will tell.

The CRS226 comment was aimed at people wanting a 48 port switch (not 48 port PoE)
I am really looking forward to getting my hands on the new CRS switches with PoE.

Steveocee

You should be fine with your setup. Fastpath used correctly is just a blanket "do nothing more with" rule on expected packets on the firewall, I've implemented it (badly) before and been stumped as to why my queues stopped working but then fast track was removing them from the equation. If...

Steveocee

Is the 24 port CRS with PoE not enough for you guys?

What is the aversion to running in 2 CRS226's and sticking an SFP+ direct cable between them?

Steveocee

thanks the problem is solved , but I must change the issue from pppoe to static while I enter to the othe device

Solved but not as well as it possibly could be. You can do this so you don't have to change it. Post your current rules and CPE IP if you like.

Steveocee

You need more bandwidth or to prioritise your stuff over your brothers although to do this you need access to your router.

Steveocee

Are you saying slave port ether23 to master port ether24? I tried that but when I did it that way my other trunk on ether24 to the CRS125 upstairs would lose connection. User ether23 master port as ether24. Job done. Yes. There should be no reason for you to lose connection elsewhere as you are sim...

Steveocee

thank you can you explain in pictures because I do what you say ,but it is not valid You will need to adjust this to match your IP set up of course. Apologies but I'm not currently in a position to do this. Please export your current NAT rules and mention the IP of your CPE and I will try to ammend.

Steveocee

User ether23 master port as ether24.
Job done.

Steveocee

I think your that your comment matches with this discussion with little change .Are you agree with me ? http://www.urosvovk.com/step-by-step-how-to-configure-a-pptp-vpn-client-on-mikrotik-routeros/ I'll try and see the result and I'll replay[/i] Thats a link to making a PPTP client? Nothing like th...

Steveocee

So the RB2011 board has been made more conveniently like the RB3011 board. Guess this is so they can use the same RM chassis on both models?

Steveocee

>In your dst-nat rules remove the in-interface as lte1 >Go to IP>Cloud and enable it, allow it to update and copy the host name. >Go to IP>Firewall>Address-Lists and create a new address list called dynamic-IP and enter the host name into the address field, recent rOS will resolve the host name dyna...

Steveocee

Any hardware changes? Switch chips now both Gigabit? CPU upgrades? Wifi upgrades?

Steveocee

thanks , I use only ppp port in the RB and other devices that connected to the router via wireless ,so I want to enter from device connected to the router not via cable You could use something similar to this; /ip firewall nat add action=masquerade chain=srcnat comment=speedtest-nat dst-address=!19...

Steveocee

Apologies for my vagueness. In short, do not use the MikroTik as a local DNS. Ensure your Playstation is going directly to an external DNS and that fixed the problem we had for multiple clients.

Steveocee

What are you using for DNS? This is a common theme which pops up every couple of months.

Make sure you are NOT using the Mikrotik locally for DNS by your PlayStation, try manually setting an alternative or handing off your ISP/chosen 3rd party for DNS via DHCP. Should work.

Steveocee

Of course you can.

Make port 4 a slave to port 5 and you can cable in to port 4 to access the interface of the beam.

There are multiple ways of doing this if you give more information.

Steveocee

Congrats on the CRS112-8P-4S.

Am a little disappointed to see there is no RB3011 desktop but you can't have everything!
I managed to build a RB3011 into a 2011 housing

Nice, I was really hoping for the desktop to have a decent dual band wifi as well. Seems the hAP AC is the closest you can get.

Steveocee

Its a switch and not a router. 1) Buy a router e.g Rb3011 or ccr1009 2) Possibly get slightly better performance using fastrack on your switch. Go for option 1 though This. The CRS is a switch with some added routing functionality. Throughput will struggle anything over 100/100. Fast track may help...

Steveocee

Congrats on the CRS112-8P-4S.

Am a little disappointed to see there is no RB3011 desktop but you can't have everything!

Steveocee

Nope.
You can use whatever DNS you like.

Steveocee

Rather than using a dst-address or a convoluted script to update the WAN IP and update the rule try using the MikroTik's build in DDNS, enable it and copy your host name. Go into the Firewall and create an address list and call is WAN-IP (or similar), amend your dst-nat rules so that they apply to a...

Steveocee

Every proxy resolver caches records. It depends on TTL set by whoever publishes the record. I didn't see RouterOS doing anything unusual in this regard. However reality dictates that using a MT as a cacheing DNS server stops your connection to PSN and when you push the DNS out further (ISP for exam...

Steveocee

At the risk of annoying some of the die hard fans.

RB750Gr3 for your router and a Ubiquiti UniFi UAP (if you only want 2.4G) would do what you need.

Steveocee

The question is, what queries it sends that some public resolvers can properly answer and RouterOS can't? It should be the same.

Maybe the MT is cacheing results and PSN doesn't like this? Handing out "old" destination IPs?

Steveocee

I thought UBNT NSM's needed 24v (lowest I've ever managed to power one with was 18v)

Steveocee

We recently had this problem. We were using MT routers at the client end and through DHCP handing out the router as the DNS. Changed the DHCP server to offer out a public DNS (such as 8.8.8.8 and 8.8.4.4) and PSN connectivity returned. The "issue" as we saw it was the MikroTik acting as th...

Steveocee

Any reason for the older firmware?
I think update firmware will be advice a lot give on this.

Steveocee

Is using a VPN to use Plex necessary? I understand basic security you want as little showing to the public network as you can but a media streaming service like Plex needs as much bandwidth as you can throw at it and a VPN must choke that down quite badly.

Steveocee

We've done it with one of the 10db omni antennas by removing the plastic "rocket mounting" and redrilling the metal back plate. It fits but getting the pig tails on can be a bit tight.

Steveocee

I'm still at a loss as to why using WINE to run Winbox is such an issue? Why not implore devs to do something useful rather than create functionality we already have? Idk, have you ever read "Why it's bad idea to install X in production environment"? or "Why it's bad idea to install ...

Steveocee

There is absolutely no guarantee that you will get the same performance. 350Mbit is actually quite the max of the RB2011 before the "fast" methods where introduced. You can use those, but not combined with some features, so the real answer is a bit more complex. The best is to do your own...

Steveocee

I have exactly the same problem, do anybody has found the solution?
Thanks

Hex POE is the solution unfortunately. (Coming from an owner of 2 RB260GSP's, I'm waiting for mine to die so I can move over onto something with RouterOS)

Steveocee

I have set several PPTP servers up and most I connect with are pppoe so that should not be an issue for you.

I use this whenever I set one up (to jog the memory)
http://wiki.mikrotik.com/wiki/PPTP_Server_With_Profile

Steveocee

Create a bridge.
Add ether2 and the wlan interface to the bridge in the ports tab.
Change the IP address from ether2 onto the bridge

Enjoy.

Steveocee

Great until mAP number 2 fails and takes down 3,4,5.

Steveocee

I'm still at a loss as to why using WINE to run Winbox is such an issue?

Why not implore devs to do something useful rather than create functionality we already have?

Steveocee

Check in your scheduler & scripts to make sure there is nothing set to do this weekly.

Steveocee

The maximum speed available is 10Mb, the total capacity of upload is 30Mb however it is as fast as a single upload stream.

Steveocee

As above, get onto the latest stable build of rOS and it should work. There is a very outside possibility the wireless chip is not working hence not having the interfaces available but it's more likely that rOS just needs a kick. **When you've reset it you didn't put it into CAPSMan mode did you? Th...

Steveocee

At least you guys are getting snmp information.

Both of my RB260GSP's stopped giving snmp data. Both show up and I can map the interfaces into cacti but the data just doesn't seem to poll.
**Works fine on all the other devices in my network.

Steveocee

I'm watching this with great interest. I have VDSL connection into one of my places and am currently using a HG612 but it's bulky and messy and don't want 2 boxes where I could be using 1.

Steveocee

The problem is that this very nice USB is not detected in RB3011 and I don't know why ?

I seem to think that recently there has been some issues with rOS and the RB3011 USB3 port. I think they are working on it (sorry, can't find thread at the moment to link to)

Steveocee

My Winbox works fine in wine on Ubuntu, I regularly connect by MAC as the routers we deploy have discovery disabled (have to type in MAC) and access is removed from same LAN range.

Steveocee

I would have said it sounds like a broadcast storm/loop. As OP hasn't posted much of any information about his CRS it's difficult to look and see if there are any config issues that could cause this. Have you updated rOS? Omega16 your input to this thread has been brilliant, how have you helped OP a...

Steveocee

Have you tried accessing the page from outside of your LAN? If you can it changes it from a port forward problem to hairpin NAT issue. (Easily fixable)

Steveocee

Currently the wireless (2HnD-IN) model is no longer planned. We will have many other exciting wireless indoor devices with better CPU and wireless functions, but this specific model will not be made. Catalog is quite old and should be updated.

You mean the Q3/Q4 2016 catalogue?

Steveocee

You all need to think BIGGER!!!

You do not want RB3011UiAS-2HnD-IN !!!!! What you DO want it RB3011UiAS-5HacT2HnT-IN

Steveocee

For what purpose? The RB3011 does everything it needs to just fine with the memory it has. What are you planning on storing within it?

Steveocee

It does not exist
But I saw it in the catalog
Q3/Q4 2016
It exists in the catalog only It does not exist in real life.

Because you have realised your mistake in the part number and it should have been listed as follows;

RB3011UiAS-5HacT2HnT-IN

???

Steveocee

Hello, My problem is that this only works with a static WAN IP. I am shortly about to move the service to one which only has dynamic WAN IP. Is there any 1 line rule that will work in a similar way? I have tried taking out the dst-address and entering an in-interface=pppoe-out1 however this obvious...

Steveocee

Can you set up a LAN speed test? I have to say I'm using an RB2011 now to send this and wirelessly over my iPhone I max my 55/5 connection over wireless. Can you iperf to really stretch it to its maximum and see how far up it goes? Once I'm on a laptop I'll dump my config for you to compare but in g...

Steveocee

Hello, So I currently have a working hairpin NAT however I think it's not as good as it could be. Currently I'm using rules as follows; /ip firewall nat add action=masquerade chain=srcnat comment=Hairpin dst-address=10.10.10.0/24 src-address=10.10.10.0/24 add action=dst-nat chain=dstnat comment=Plex...

Steveocee

There is no DSL modem currently in the MT products so you will need to purchase a modem and then hand off to your MT via ethernet.

Steveocee

What problems are you having?

You may not need to pay anyone if you ask the correct questions here.

Steveocee

As per above. The Rb260GSP is just a switch. it has no DHCP server. You would need something like a Hex Poe Lite to do similar with DHCP and other routing functions.

Steveocee

We have not yet released any RB3011 with wireless, or with any slots. Currently it exists only as a wires-only rackmount model.
Wireless model was planned, but is now delayed indefinitely

This is incredibly depressing.

Steveocee

while it seems log messages has been fixed, there is still some problem with SNMP counters which shows lot of packets for Tx Multicast, Tx Collision, Rx FCS Errors - it doesn't correspond with interface counters at all, maybe they'll mixed in SNMP and show other values instead... I am not seeing th...

Steveocee

I'm very happy to say that this is now sorted. No errors since upgrade to RC37.

Well done Tik support!

Steveocee

Just had the email.
RC37 is the fix to this problem. I have just installed and await to see the fix.

Steveocee

So I've just had an email from MT support. I am being informed that hopefully they should have a fix this week for the above problem.

Fingers crossed.

Steveocee

Hello,
The RB3011 block diagram has been updated to better represent internal connections among CPU cores.

Any comment on the looping problem? I am getting nothing from my support ticket.

Steveocee

@Steveocee yes, in my case they're all bridged in software (no master port). This is an ongoing problem. MT support have confirmed they have replicated it and are working on a fix however that was probably over a week ago and they said the fix would come in "days". I'm currently using RC2...

Steveocee

Just had my first error. Looks like RC29 doesn't contain the fix.

Steveocee

Have just installed RC29 and I've had about 5 minutes of no errors. Fingers crossed this is the fix.

Steveocee

I have now tested with the v6.35rc21 version and still no errors, seems to be solved. I'll report if the errors come back Still not solved... Collisions etc. Have you seen there is now RC26 as well as new stable version? I'm waiting for MT support to tell me to use it before I update for fear of ma...

Steveocee

Hello, This is common fault being seen currently with the RB3011. Mikrotik support say that it should be fixed in the next few days and then in next routerOS. The problem comes from from using a software bridge to bind interfaces together, if you set them up slave to another interface then there are...

Steveocee

Steveocee

Had a message from support earlier. The good news is that they have now replicated this error how I am reporting it and they are hoping to fix it in the next few days.

I see RC19 is now out but no mention of RB3011 fix so I will wait until prompted by MT support to upgrade.

Steveocee

21:13 and we have an error. 19 minutes after upgrade.

Just to add so far the error has occurred on ether10 which is my WAN interface with pppoe client on it!

What's the name of the UBNT router with SFP again?!?!?!

Steveocee

Just spotted the RC16 so have upgraded to that.
Fingers crossed I can start professing my love for MikroTik again.

Steveocee

On paper sounds brilliant. Execution not so great though and MT support don't seem to be able to answer this;
http://forum.mikrotik.com/viewtopic.php ... ead#unread

Steveocee

Are the ports in a software bridge? I have seen this on several of mine when in software bridge as well as lots of switching loop errors;
http://forum.mikrotik.com/viewtopic.php ... ead#unread

Steveocee

cpu-used: 12% cpu-used-per-cpu: 13%,12% free-memory: 996832KiB Of course there is no loop, but 3011 don't believe me: You are not alone! Check out my thread http://forum.mikrotik.com/viewtopic.php?f=13&t=104716&e=1&view=unread#unread I was told the recent RC would fix it but it has made...

Steveocee

but the problem is that I can translate to an adress, but I cannot ping...

Make sure you are adding the subnet mask on the end. I did this setting something up recently and it stumped me.

**192.168.1.1/24
***not 192.168.1.1

Steveocee

until today the only configurable LED on rb951G is wireless LED

You are correct, my apologies, I am talking about 952.

Steveocee

So for fun here is a screen shot of my current log, note this is on a 1440p machine full window and maxed out to show how many errors come through; http://i190.photobucket.com/albums/z33/stevescorsa/PC/brokentik1_zpsxgye054z.jpg And as it's available I have taken an image from my cacti, these ports ...

Steveocee

I think on that you can only configure the user-led as an extra. On the ones I have set up I set it to interface status on the ppp client to give an "internet light" for the lehmans. Could you print screen? Not currently from a 951 as they are all in deployment with customers, I can give ...

Steveocee

Still not fixed it, since about 5pm I've accrued pages and pages of error logs stating there is a loop.
come on MT!!!!!

Steveocee

I'll also perform the update tommorow and post the results. @Steve: did the router report the collision errors when you applied the bridge configuration? With my config the errors start as soon as 15 seconds after boot First indications aren't looking good. I've had a collision error already on 2 p...

Steveocee

Just had a response from MikroTik support; Hello, We just made a fix specially for RB3011 today. We released 6.35rc15 version. It fixes multiple problems which are caused by load on router. Is it possible that you could test it now? Regards, XXXXX XXXX I have just updated my RB3011 just now. Interes...

Steveocee

I've finally had a message back from MikroTik support. They confirmed that bugfix is not compatible with ARM. Nothing about the problem itself.

Steveocee

Update:

Hello,

We have reproduced this problem and are working on to fix it in upcoming RouterOS
version.

Regards,
Janis B.

TLDR: next update will contain fix

Excellent! At least you have got a reply, I submitted supout files and have had silence since.

Steveocee

Small update;
The bugfix firmware still won't download and work on my RB3011. I get an error;
missing routeros-arm-6.32.4.npk

I haven't updated yet to 6.34.2

Steveocee

Will this address the issue with ARM RB3011 reporting switching loops if you run traffic over a software bridge?

Steveocee

I've just seen that bugfix 6.32.4 has been released for the ARM version. I'm wondering if it is worth rolling back to that as the problem only seemed to start at 6.34.

I'm not at my desk currently but will try it tonight I think and report back.

Steveocee

I think on that you can only configure the user-led as an extra. On the ones I have set up I set it to interface status on the ppp client to give an "internet light" for the lehmans.

Steveocee

So far so good (kind of)

We've gone the best part of 2 hours without an error message (although the router isn't working how I want it to) but oddly it has rebooted itself once in this time. I'm going to write that off as a random reboot of no origin and hope it doesn't happen again.

Steveocee

Progress for tonight; The bugfix rOS is not available fro the Arm architecture currently so that strikes another line of enquiry off. Have reconfigured as @sruys has and so far so good, 17 mins of no error message. I will leave the config as it is now and not touch anything else to see if this fixes...

Steveocee

My RB2011 managed 1Mb upload with no problems over wifi. Your config looks fine to be honest.
Hate to ask but the network is silent when you're doing the tests?

Steveocee

I too had the same issue with my RB3011. It seems to be a software related. I reset my config and removed the bridge between the two switches, which resolved the matter. I run a simple network: Ether 1 - PPPoE Ether 2 - LAN Upgraded from a RB2011 which never had the loop with the same config. So th...

Steveocee

You haven't been amazingly clear in what you want to do with the LED's.
Yes you can turn them on or off if you want to.

If you are using winbox or webui try System>LED's to do this.

The above is a very correct CLI response to your query.

Steveocee

Thanks for the reply, I'll try the patching tonight and see if encounter any problems. I agree, this solution isn't quite that elegant and I'm glad I bought the router with no expectations whatsoever. I just wanted to test the hardware specs, get to know the Mikrotik OS and replace some equipment b...

Search found 1120 matches