MikroTik

Posted: **Thu Nov 15, 2018 10:51 am**

Someone to share test from wireless version or not come yet to anyone?

Posted: **Thu Nov 15, 2018 4:45 pm**

Someone to share test from wireless version or not come yet to anyone?

I've not seen stock anywhere. No one has one to test yet.

Posted: **Thu Nov 15, 2018 9:44 pm**

https://linitx.com/search.php?keywords=rb4011 says:

Stock expected 7-Dec-2018

Posted: **Fri Nov 16, 2018 2:43 pm**

Did anyone dissasemble rackmount version? I am curious to know if mpcie slot is present and usable.

Posted: **Fri Nov 16, 2018 4:59 pm**

You do not need to open it to see that mpcie slot connectors are missing.

Posted: **Wed Nov 21, 2018 12:29 pm**

Too bad the 4011 lacks LCD & USB... it won't replace my 3011LCD

Posted: **Wed Nov 21, 2018 1:17 pm**

Unboxing of 4011:

https://www.youtube.com/watch?v=N8i8bIX-l2c

Posted: **Fri Nov 23, 2018 9:06 am**

A problem with flapping 1G optical SFP interfaces. Two different vendors tested (not Mikrotik). There is no issue when using 10G interfaces.

Posted: **Fri Nov 23, 2018 10:14 am**

Disable auto negotiation and 1Gb SFP will work correctly.

https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers

For MikroTik devices with SFP+ interface that support both 10G and 1G link rate following settings are needed to be set on both linked devices for required interfaces. These settings only relate when optical SFP transceivers are used. In order to get them working in 1G link rate, use the following configuration:

auto-negotiation disabled

port speed 1G

FD

Devices which SFP+ ports support 1G links:

RB4011 series - SFP+1 interface can be used in 1G mode if required.

Posted: **Fri Nov 23, 2018 11:36 am**

The problem persist with disabled auto negotiation, even between two RB4011 devices.

Posted: **Fri Nov 23, 2018 12:21 pm**

I haven't tested between two RB4011s, but between RB2011 and RB4011 the flapping will stop if you disable autoneg on both the RB4011 and RB2011, not just the RB4011.

Posted: **Fri Nov 23, 2018 1:54 pm**

If you try to disconnect/connect them a few times, I think that the problem will appear.

Posted: **Thu Nov 29, 2018 1:10 am**

I'm pretty interested in this device, since it seems a good successor to the already pretty cool RB2011 series, which my internet provider is kinda recommending.

However I'm very confused about SFP(+) and the compatibility of those modules to this specific device. My provider requires the following specs: 10 km, TX1310 / RX1490nm

I don't seem to find something with those specs from Mikrotik and I'm not sure if some third party interface like the Flexoptix 1G SFP Wideband BiDi LX LC Simplex will be supported. Has anybody any recommendations on this? People in this thread seem to already have problems with the SFP module.

Sorry if it's a stupid question, but I have absolutely no clue about SFP and what all those numbers mean exactly. This seems way more complicated than necessary.

Posted: **Thu Nov 29, 2018 8:43 pm**

first quick opinion - it's running hot. really hot, without any serious load.

Posted: **Thu Nov 29, 2018 8:57 pm**

first quick opinion - it's running hot. really hot, without any serious load.

No wonder - it's beefy yet passive. CCR1009-PC can give you actual burns if you touch heatsink while it's powered on. Even if idling (there's actually not that huge difference in thermals between idle and stress)

Posted: **Thu Nov 29, 2018 11:43 pm**

This SFP mess is really annoying! Why can't it just work? If I connect cheap TP-Link switch to Cisco, auto negotiation on SFP works. Same with even cheaper Realtek cards, various Dell servers and other equipment. But no, for Mikrotik, you have to manually set the speeds on both ends.
Where's the problem? Some hardware issue on used chipset/cpu on Mikrotik side? Bad implementation? Incompatibility of some SFPs? Or just laziness to do it right?
And "Just disable auto negotiation and set rate manually" is NOT the solution. What if you can't set other side of the link? Often any administrative change of parameters of upstream link costs extra money. This needs to be either fixed or have warning written on all Mikrotik product pages that SFP port doesn't support auto negotiation. It's 2018 and you expect these things to just work. If there was a list of verified SFPs that do work, that would be fine. But so far it seems auto negotiation on SFP port just doesn't work, no matter what SFP or DAC you use.
Fix it or say clearly it's not supported and will never work!

Posted: **Fri Nov 30, 2018 12:04 am**

Any EOIP / EOIP+IPSEC or VPLS tests ?

Would like to know how it goes against a CCR-1009

Posted: **Fri Nov 30, 2018 12:17 am**

This SFP mess is really annoying! Why can't it just work? If I connect cheap TP-Link switch to Cisco, auto negotiation on SFP works. Same with even cheaper Realtek cards, various Dell servers and other equipment. But no, for Mikrotik, you have to manually set the speeds on both ends.
Where's the problem? Some hardware issue on used chipset/cpu on Mikrotik side? Bad implementation? Incompatibility of some SFPs? Or just laziness to do it right?
And "Just disable auto negotiation and set rate manually" is NOT the solution. What if you can't set other side of the link? Often any administrative change of parameters of upstream link costs extra money. This needs to be either fixed or have warning written on all Mikrotik product pages that SFP port doesn't support auto negotiation. It's 2018 and you expect these things to just work. If there was a list of verified SFPs that do work, that would be fine. But so far it seems auto negotiation on SFP port just doesn't work, no matter what SFP or DAC you use.
Fix it or say clearly it's not supported and will never work!

I have some machines that don't allow disabling auto negotiation on onboard NICs and they improperly negotiate link with S+RJ10 to 10G even though servers have gigabit link. With disabled autonegotiation link doesn't establish at all.

Yes those are shitty machines - deal with it. What to expect, if they weren't I could probably afford Cisco in the first place.

Posted: **Sat Dec 01, 2018 12:37 am**

Personally I am replacing a rb2011uias-2hnd-in, I never used LCD, USB or speaker, so this is not a big deal for me with the cpu power available. The upgrade on the wireless side is much more a thing for me.
Ordered today the wifi version, found exactly one distributor who has like 40 on stock according their website so seems they are finally in stock. Not sure if I could post which, but it’s one from Latvia with inernational shipping that was in the first results when doing a google search after the full device name.

Posted: **Sat Dec 01, 2018 1:08 am**

Personally I am replacing a rb2011uias-2hnd-in, I never used LCD, USB or speaker, so this is not a big deal for me with the cpu power available. The upgrade on the wireless side is much more a thing for me.
Ordered today the wifi version, found exactly one distributor who has like 40 on stock according their website so seems they are finally in stock. Not sure if I could post which, but it’s one from Latvia with inernational shipping that was in the first results when doing a google search after the full device name.

I don't think it's "secret" anymore. More and more distributors have wifi version available. Eg. CDR in Poland already has them. I randomly checked few days ago. Probably plenty of distributors already have them.

Posted: **Sun Dec 02, 2018 2:09 pm**

is the 20/24/80/160mhz setting working? tried to use it (default channels or not, various countries or debug, various combinations of main channel and extensions) but wireless adapter (intel ac7260) stopped to see it. on 20/40/80 it works normally (even in the meantime i did a complete reset on 4011, because playing with these various settings made the 5ghz interface inoperable

)

Posted: **Mon Dec 03, 2018 11:31 am**

Hi there,

Few weeks ago, I got my own RB4011 with wireless version.
Let me share few points about this device:
1. The CPU has very well performance, I tested performance with pure NAT, and it only got about 27~30% CPU usage with 1Gb full speed.

螢幕快照 2018-11-26 下午2.48.24.png

2. Tested performance with my iPhone Xr, using iPerf to test can got about 380~420Mb/s, and sometimes can got over 500Mb/s when iPhone sending packet during test.
3. The case is close to full-metal design (I know the bottom half case is plastic), the CPU is directly using thermal pad to touch metal case to cooling. The CPU temperature is not over 45C since started using.

In summary, this one is a beast, and the price is very well, too. Now decided to use as backup router in my office if main is down (the main is SRX240)

(P.S 160MHz in 5G WIFI is not working on many normal clients, need to set up to 80MHz only.)

Posted: **Mon Dec 03, 2018 6:20 pm**

some tests made with RB4011iGS+5HacQ2HnD and CCR1009-7G-1C-1S+, using bandwidth server, default mtu.
1. i managed to use a 3m direct attach cable between the two sfp+ ports; 10gbps link is negotiated, but is somewhat asymmetrical:
*RB client, CCR server
send, udp - 1650mbps
send, tcp - 740 mbps
receive, udp - 1500kbps
receive, tcp - 500kbps
*CCR client, RB server
send, udp - 2mbps
send, tcp - 500kbps
receive, udp - 1550mbps
receive, tcp - 740mbps
2. after this, i used S+RJ10 and a 2m cat6 patchcord
*RB client, CCR server
send, udp - 1620mbps
send, tcp - 770mbps
receive, udp - 2048mbps
receive, tcp - 900mbps
*CCR client, RB server
send, udp - 2048mbps
send, tcp - 900mbps
receive, udp - 1550mbps
receive, tcp - 740mbps
These 2gbps values are completely stable, not even a spike. cpu un rb is max 25%, on ccr 12%
I'm asking myself... is RB SFP+ link to cpu limited to 2gbps, like these two switches inside, by pcie 1.0 x1?
my first verdict: could be a router offered by providers for future implementations of 2gbps pppoe. or usable as AP, with some smaller wired clients, maybe one with lacp.

Posted: **Mon Dec 03, 2018 9:31 pm**

some tests made with RB4011iGS+5HacQ2HnD and CCR1009-7G-1C-1S+, using bandwidth server, default mtu.

Just to be sure, during these tests, you didn't use bandwidth server or testing tools on the Routerboards themselves correct? Only using clients (PC's) that are in front and behind the routers mentioned? If not, and your results seem to suggest this, you are only testing the CPU's in the Routerboards in how well they can generate traffic, not how much traffic they can handle while it's running through the boards, like in a real-world scenario.

The built-in testing tools are only intended to be used to test line bandwidth from one routerboard to another, if you have above a few hundred Mbit's of bandwidth, other factors become the limiting factor and they are useless.

Posted: **Mon Dec 03, 2018 10:34 pm**

The built-in testing tools are only intended to be used to test line bandwidth from one routerboard to another, if you have above a few hundred Mbit's of bandwidth, other factors become the limiting factor and they are useless.

this is what i intended to do. ccr will do better, for sure, but i was intrigued about that fixed line on 2gbps. again, 2.5gbps = pcie 1.0 x.1
i'll do some more tests these days, in a live 10gbps enviroment

Posted: **Tue Dec 04, 2018 11:55 am**

The built-in testing tools are only intended to be used to test line bandwidth from one routerboard to another, if you have above a few hundred Mbit's of bandwidth, other factors become the limiting factor and they are useless.
this is what i intended to do. ccr will do better, for sure, but i was intrigued about that fixed line on 2gbps. again, 2.5gbps = pcie 1.0 x.1
i'll do some more tests these days, in a live 10gbps enviroment

Sorry, but I don't think you quite understand. What you have tested is CPU performance, not bandwidth. And in that regard, the RB4011 would actually preform better then a CCR because of higher single threaded performance (The newest newest beta version introduces some multi-threaded performance testing).

If you can test in a live 10Gbit environment and have 2 test boxes (PC's) which can generate and receive the traffic running through the devices, that will be a great test!

Testing the 2.5Gbit limit for switch ports is interesting though. Maybe you could also setup a test with multiple clients and then testing 2 switch groups and also in between them.

Posted: **Tue Dec 04, 2018 11:46 pm**

Today Im receive my RB4011iGS+5HacQ2HnD to replace current hAP ac(RB962UiGS-5HacT2HnT). After configuring it to same settings as hAP ac and connecting fibre module to sfp+ I get no link and spf+ interface start flapping:

mikrotik_sfp.jpg

Same configuration work normaly with same fibre module in sfp+ port on CRS326-24G-2S+RM(RouterOS mode)...

After researching and testing and setting different options it start working, then Im figure out that Im disable and enable sfp+ interface and after that it start working normaly... Im retest if this is true(only after reboot sfp+ have problems) and make workaround fix... Because I have on sfp+ pppoe client(and some vlans) Im made script which check if pppoe is connected and if not it disable and enable sfp+ port. Im also make scheduler after reboot and then every 15 seconds which run this script. Im try few reboots and shutdowns and it work without problems. I know that this solution will not work for users which don't have pppoe but maybe help someone also help fix flapping issue using different checking(some remote ip...)

Posted: **Thu Dec 06, 2018 3:36 pm**

So... got RB4011 (wifi edition) couple of days ago... It replaced my hapAC as well

I just love it has encryption offloading (cpu usage stays under 10% pretty much no matter what - even wen using aes256-sha512). I am however missing USB port, LCD would be nice although not mandatory... And... Is it just me or is SPF+ port mounted upside down? I had couple of issues conntecting it to a switch using LR fiber optics cable, but disabling autonegotiation and setting 10G-full on both sides did the trick.

Posted: **Fri Dec 07, 2018 2:28 pm**

In my configuration disabling autonegotiation is not availible option because Im replace ISP Iskratel Innbox V60-U modem with mikrotik and put fibre and SFP module direct on mikrotik, that I don't need 2 devices, can send IPTV&VOIP&INTERNET on same UTP cable(Instead runing each cable for each device) and in this case I don't have access to ISP side to disable autonegotiation.
But Im happy that Im find solution to fix flaping link after reboot(Disabling sfp+ & pppoe client wait 5 seconds and enable both back - if do not help repeat procedure after 20 seconds)...

Posted: **Fri Dec 07, 2018 6:15 pm**

And... Is it just me or is SPF+ port mounted upside down?

Yes, it is

, seems the board is mounted upside-down too (the SFP+ cage and LAN ports are aligned to up side), the LAN ports are upside-down too, "release handle" (don't know how to name it in english

) on rj45 plug is up too, not down - this also indicating that the PCB is upside-down

.
Also AKSN74 describing the case materials

3. The case is close to full-metal design (I know the bottom half case is plastic), the CPU is directly using thermal pad to touch metal case to cooling. The CPU temperature is not over 45C since started using.

So yes, main board is flipped over (or the CPU is only on top side, connectors, leds, etc. are on bottom side) so the CPU can touch a metal top cover which work as heat sink for CPU.

Would be nice to see HQ photos of what is inside RB4011

(both pcb sides

and with removed thermal pads ).

I'm getting convinced more and more to RB4011 - I wanted to buy rb3011 as my home router, but I'm still hesitating because of the switch chip in rb4011 which is a bit worse than in RB3011, and the SFP+ port which I know won't work with 1G media converters build on Qualcomm chip (like MT RBFTC (yes!) or those cheap RJ45 10/100/1000M to 1G SFP) - Realtek chip based MC works fine (but those are very hard to get in reasonable prices)...
But looking at tests seems the CPU is pretty good match with this castrated-switch-chip, so I have to think really good about the SFP+ port issue and decide which to pick

Posted: **Fri Dec 07, 2018 6:52 pm**

In my configuration disabling autonegotiation is not availible option because Im replace ISP Iskratel Innbox V60-U modem with mikrotik and put fibre and SFP module direct on mikrotik, that I don't need 2 devices, can send IPTV&VOIP&INTERNET on same UTP cable(Instead runing each cable for each device) and in this case I don't have access to ISP side to disable autonegotiation.

It appears that having autonegotiation on one end and not the other is not a problem on SFP.
Of course on copper ethernet this is a definite no-no as it will end up in one side halfduplex and the other fullduplex.
But on SFP it appears to work different.
Did you actually try setting autonegotiation off and the correct speed and fullduplex, and what happens then?

Posted: **Fri Dec 07, 2018 7:42 pm**

It appears that having autonegotiation on one end and not the other is not a problem on SFP.
Of course on copper ethernet this is a definite no-no as it will end up in one side halfduplex and the other fullduplex.
But on SFP it appears to work different.
Did you actually try setting autonegotiation off and the correct speed and fullduplex, and what happens then?

Well... I didn't have such experience. For me disabling autoneg on S+RJ10 and connecting it to onboard NIC of device that doesn't support disabling autoneg simply resulted in "no-link" reported by that device and no connectivity at all. Lack of connectivity whatsoever is quite serious issue in network

Posted: **Fri Dec 07, 2018 8:01 pm**

You should not do it with copper ethernet, as I already wrote.
But with fiber it appears to work OK.
Maybe because it cannot work in halfduplex anyway and the speed can be selected to match.

Posted: **Fri Dec 07, 2018 8:16 pm**

You should not do it with copper ethernet, as I already wrote.
But with fiber it appears to work OK.
Maybe because it cannot work in halfduplex anyway and the speed can be selected to match.

Yeah it really sucks because S+RJ10 doesn't autoneg to gigabit. Even if there's 1G on the other end it still autonegs to 10G. It's terrible module like I said bilion times. Objectively. The only thing that saves its name is price.

Posted: **Fri Dec 07, 2018 8:34 pm**

In my configuration disabling autonegotiation is not availible option because Im replace ISP Iskratel Innbox V60-U modem with mikrotik and put fibre and SFP module direct on mikrotik, that I don't need 2 devices, can send IPTV&VOIP&INTERNET on same UTP cable(Instead runing each cable for each device) and in this case I don't have access to ISP side to disable autonegotiation.
It appears that having autonegotiation on one end and not the other is not a problem on SFP.
Of course on copper ethernet this is a definite no-no as it will end up in one side halfduplex and the other fullduplex.
But on SFP it appears to work different.
Did you actually try setting autonegotiation off and the correct speed and fullduplex, and what happens then?

Im not shure. When Im uncheck "Auto Negotation" I think Im together with checking "1000M full" also check "1000M half"(My mistake) and didn't work. It is on remote location and can't test this weekend... I will try again next week...

Posted: **Sat Dec 08, 2018 1:22 am**

Hello,

I confirm the SFP flaping problem on the RB4011.
I'm using it with this 1G optical interface of my FTTH ISP (1gbps up/down access): https://www.flexoptix.net/en/sfp-bidi-t ... 3095=42306

I tried to disable autonegociation trying the different options, enable/disable, reboot, perform firmware update but it still doesn't work.
My access and optic has no problem and work perfectly on my RB2011 with SFP os this is really a problem with this router.
The optic is recognised in the RB4011 (see dump below) and doesn't indicate problems.

My question is : is it a hardware problem that cannot be fixed by firmware update ?
If this is the case then I will give up this router and look for another solution (maybe use a RB3011).

Thank you for your help,

Mc

The optic is recognised in the RB4011 , here's a partial dump of a /interface ethernet monitor... :
sfp-module-present: yes

sfp-rx-loss: no

sfp-tx-fault: no

sfp-type: SFP-or-SFP+

sfp-connector-type: LC

sfp-link-length-9um: 10000m

sfp-vendor-name: FLEXOPTIX

sfp-vendor-part-number: S.B1312.10.DL

sfp-vendor-revision: A

sfp-vendor-serial: F789HH6

sfp-manufacturing-date: 15-10-14

sfp-wavelength: 1310nm

sfp-temperature: 54C

sfp-supply-voltage: 3.257V

sfp-tx-bias-current: 26mA

sfp-tx-power: -5.699dBm

sfp-rx-power: -3.867dBm

eeprom-checksum: good

Posted: **Sat Dec 08, 2018 2:16 pm**

You'll have to disable autonegotiation on both ends of the link for SFP to work correctly.

https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers

If you cannot control the setting on the remote end, the scenario is not supported.

Posted: **Sat Dec 08, 2018 4:23 pm**

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works
fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end...
(before it was configured for autoneg but I have disabled it because we plan to change to a bidir SFP which works only
without autoneg and wanted to prepare the config for that. so first disabled it at one end, expecting a link failure, but no.
and it was transporting traffic at that time!)

Posted: **Sat Dec 08, 2018 4:32 pm**

Yes, but both RB2011 and RB260GSP have SFP ports, not SFP+

Posted: **Sun Dec 09, 2018 2:18 am**

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works
fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end...
(before it was configured for autoneg but I have disabled it because we plan to change to a bidir SFP which works only
without autoneg and wanted to prepare the config for that. so first disabled it at one end, expecting a link failure, but no.
and it was transporting traffic at that time!)

The autonegotiation problem only affects SFP+ ports, with 1 Gbit modules - the SFP ones are ok.

Posted: **Sun Dec 09, 2018 7:08 pm**

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works
fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end...
(before it was configured for autoneg but I have disabled it because we plan to change to a bidir SFP which works only
without autoneg and wanted to prepare the config for that. so first disabled it at one end, expecting a link failure, but no.
and it was transporting traffic at that time!)
The autonegotiation problem only affects SFP+ ports, with 1 Gbit modules - the SFP ones are ok.

Yes but problem is only on RB4011 model. On CRS326-24G-2S+RM(RouterOS mode) same 1Gbit module in SFP+ port work without problem...

Posted: **Sun Dec 09, 2018 10:58 pm**

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works
fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end...
(before it was configured for autoneg but I have disabled it because we plan to change to a bidir SFP which works only
without autoneg and wanted to prepare the config for that. so first disabled it at one end, expecting a link failure, but no.
and it was transporting traffic at that time!)
The autonegotiation problem only affects SFP+ ports, with 1 Gbit modules - the SFP ones are ok.
Yes but problem is only on RB4011 model. On CRS326-24G-2S+RM(RouterOS mode) same 1Gbit module in SFP+ port work without problem...

Not quite
https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers

Posted: **Mon Dec 10, 2018 6:28 am**

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works
fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end...
(before it was configured for autoneg but I have disabled it because we plan to change to a bidir SFP which works only
without autoneg and wanted to prepare the config for that. so first disabled it at one end, expecting a link failure, but no.
and it was transporting traffic at that time!)
The autonegotiation problem only affects SFP+ ports, with 1 Gbit modules - the SFP ones are ok.
Yes but problem is only on RB4011 model. On CRS326-24G-2S+RM(RouterOS mode) same 1Gbit module in SFP+ port work without problem...
Not quite
https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers

I can confirm 1G in SFP+ on 3xx series switches requires disabling autoneg. My 1G copper doesn't even detect link until autoneg is disabled.

Posted: **Mon Dec 10, 2018 7:57 pm**

Really happy with the performance on this device, replaced an aging RB951G that had to used fasttrack and the 4011 handles our 500mbps internet with traffic shaping and IPv6 tunnels with only 25% CPU usage. Only thing I want now is root to install DNSCrypt proxy - anyone found a nice way to root this yet? The RouterOS version it ships with has CVE-2018-14847 patched so I can't use the winbox exploit to create devel login, and no USB port

. Hoping to avoid pulling it out of production too long, but netbooting might be the only way it seems.

Posted: **Mon Dec 10, 2018 9:05 pm**

Fun fact... According to https://wiki.mikrotik.com/wiki/MikroTik ... lity_table S+DA0001/S+DA0003 aren't supported but... Just tested S+DA0001 (SFP+DAC1M) with a Zyxel XGS 2210 the other side and using autoneg off, 10g fdx, and it seems to work (link up, data flow ok)

Posted: **Tue Dec 11, 2018 7:49 am**

Fun fact... According to https://wiki.mikrotik.com/wiki/MikroTik ... lity_table S+DA0001/S+DA0003 aren't supported but... Just tested S+DA0001 (SFP+DAC1M) with a Zyxel XGS 2210 the other side and using autoneg off, 10g fdx, and it seems to work (link up, data flow ok)

iirc MikroTik said that some kind of error correction that is technically required for passive DACs is not supported on 4011 but I guess if you don't have much of em noise in your environment and cable is short (like MikroTik ones) then probably it's not big deal thus "usually" it will work. In average environment.

Posted: **Thu Dec 13, 2018 12:01 pm**

Hello!
I have the following router

model: RB4011iGS+
factory-firmware: 6.43
current-firmware: 6.43.4
pgrade-firmware: 6.43.4

I have instaled SFP module S-53LC20D in SFP+ port of the router. The port has the following settings:

auto-negotiation disabled
port speed 1G
FD

A SFP module S-35LC20D has installed in a switch on the provider's side with auto-negotiation disabled
I think the distance is about 2-5 km

But i have seen as SFP+ interface flapping more times

dec/12 20:54:36 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:37 interface,info sfp-sfpplus1 link down 
dec/12 20:54:39 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:40 interface,info sfp-sfpplus1 link down 
dec/12 20:54:42 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:43 interface,info sfp-sfpplus1 link down 
dec/12 20:54:45 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:46 interface,info sfp-sfpplus1 link down 
dec/12 20:54:48 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:49 interface,info sfp-sfpplus1 link down 
dec/12 20:54:51 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:52 interface,info sfp-sfpplus1 link down 
dec/12 20:54:54 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:55 interface,info sfp-sfpplus1 link down 
dec/12 20:54:57 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:54:58 interface,info sfp-sfpplus1 link down 
dec/12 20:55:00 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:55:01 interface,info sfp-sfpplus1 link down 
dec/12 20:55:03 interface,info sfp-sfpplus1 link up (speed 1G, half duplex) 
dec/12 20:55:04 interface,info sfp-sfpplus1 link down 
dec/12 20:55:06 interface,info sfp-sfpplus1 link up (speed 1G, half duplex)

But i see as SFP+ interface flapping a lot of times.
That transceiver work as normal in a switch CSS106-5G-1S from my side. So the link has not issues.
I looked URLs https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers and https://wiki.mikrotik.com/wiki/MikroTik ... lity_table
and i was sure that SFP+ port can work with SFP 1G trancivers.

Where is issue?

Posted: **Thu Dec 13, 2018 12:30 pm**

same problem with SFP 1G . Auto-negotiation is off. Module GL-OT-SG06SC1-1310-1550-B peremeshano works with RB2011
Mikrotik HELP!!!! All users have a problem with SFP 1G

Posted: **Thu Dec 13, 2018 12:32 pm**

Are you sure the sfp is configured full duplex on the other side? Then it seems a supported configuration. Have you contacted support?

Posted: **Thu Dec 13, 2018 12:57 pm**

I have instaled SFP module S-53LC20D in SFP+ port of the router. The port has the following settings:
.............
Where is issue?

What's the cable length between those SingleMode transceivers? Rough estimate works. 500m? 1km? 2km? 5km? 10km? 15? 20km?
I'm pretty sure we're looking at a dampening issue here.

Posted: **Thu Dec 13, 2018 3:25 pm**

I have instaled SFP module S-53LC20D in SFP+ port of the router. The port has the following settings:
.............
Where is issue?
What's the cable length between those SingleMode transceivers? Rough estimate works. 500m? 1km? 2km? 5km? 10km? 15? 20km?
I'm pretty sure we're looking at a dampening issue here.

I think it is between 2-5 km
But i forgot notice that transceiver work as normal in a switch CSS106-5G-1S from my side. So the link has not issues.

Posted: **Thu Dec 13, 2018 6:32 pm**

I think it is between 2-5 km
But i forgot notice that transceiver work as normal in a switch CSS106-5G-1S from my side. So the link has not issues.

Weird... maybe try a 2 dB damper anyways? Then again, pretty sure you already tried that.

Then again, I try to avoid SFP Modules in SFP+ slots. Always likely to cause issues, even when "supported".
Could you try a pair of S+2332LC10D?

Posted: **Sat Dec 15, 2018 6:54 am**

Just got the wireless version of the RB4011 with 10Gtek Copper SFP 1G for UBNT.

I initially encountered flapping when the SFP+ port was configured as LAN with autonegotiation enabled and connected to the laptop. The issue was resolved by disabling the port's autonegotiation and setting the speed to 1G, even though autonegotiation was still enabled on the laptop.

With that change on the RB4011, I've not seen flapping when the port is configured as WAN and connected to Arris SBG6580 or Linksys E4200 even though autonegotiation is enabled on the Arris/Linksys.

Posted: **Sun Dec 16, 2018 4:05 pm**

https://wiki.mikrotik.com/wiki/MikroTik ... ansceivers

[..] settings are needed to be set on both linked devices for required interfaces
Disable auto negotiation on both ends of link and the flapping will stop (tested and confirmed S-53LC20D @ RB4011)

Same goes for me - I could only get the link to work with an SFP module after asking the provider to turn off autonegotiation on their end as well.

Can this issue be avoided in a future RouterOS update or is it due to a hardware limitation?

Posted: **Sun Dec 16, 2018 10:09 pm**

so - is the 160mhz channels option working?
just tested with a killer 1550 client, intel-based, capable of 160mhz, no success
doesn't matter which client i'm using, ap isn't available anymore, until is set back to 20/40/80.

offtopic a bit - could someone point me to a topic discussing LACP? i haven't succeeded to obtain more than 1gbps ... one of lacp members stays relaxed, doing nothing

also, wins server / master browser? thanks in advance!

Posted: **Mon Dec 17, 2018 11:03 am**

offtopic a bit - could someone point me to a topic discussing LACP? i haven't succeeded to obtain more than 1gbps ... one of lacp members stays relaxed, doing nothing
also, wins server / master browser? thanks in advance!

You could try different Transmit Hash Policy

Posted: **Mon Dec 17, 2018 11:07 am**

offtopic a bit - could someone point me to a topic discussing LACP? i haven't succeeded to obtain more than 1gbps ... one of lacp members stays relaxed, doing nothing
also, wins server / master browser? thanks in advance!
You could try different Transmit Hash Policy

tested layer 2 and layer2+layer3, same result.

Posted: **Mon Dec 17, 2018 1:53 pm**

There's no hashing algorithm that would allow all bonded interfaces to be used by a single connection (e.g. single TCP or UDP stream running, say, iperf). However, different hashing algorithms mean different probability that two connections will use distinct bond members. The only standard hash algorithm that makes probable use of distinct bond members for connections between same server and client (i.e. multi-stream iperf test) is layer-3-and-4.

Posted: **Tue Dec 18, 2018 12:28 pm**

There's no hashing algorithm that would allow all bonded interfaces to be used by a single connection (e.g. single TCP or UDP stream running, say, iperf). However, different hashing algorithms mean different probability that two connections will use distinct bond members. The only standard hash algorithm that makes probable use of distinct bond members for connections between same server and client (i.e. multi-stream iperf test) is layer-3-and-4.

so which will be the appropriate choice in case of smb (i'll say smbv3 with multichannel enabled by default)?
on the other hand, not every client [i.e. NAS] will accept layer-3-and-4

Posted: **Tue Dec 18, 2018 5:58 pm**

There's no hashing algorithm that would allow all bonded interfaces to be used by a single connection (e.g. single TCP or UDP stream running, say, iperf). However, different hashing algorithms mean different probability that two connections will use distinct bond members. The only standard hash algorithm that makes probable use of distinct bond members for connections between same server and client (i.e. multi-stream iperf test) is layer-3-and-4.
so which will be the appropriate choice in case of smb (i'll say smbv3 with multichannel enabled by default)?
on the other hand, not every client [i.e. NAS] will accept layer-3-and-4

The highest layer acceptable for both sides. You might want to experiment with settings not being the same on both sides. After all, receiver will probably accept whatever arrives at any bond interfaces, most of the time all of them use same MAC address. The hash algorithm is important when transmiting to spread utilization of all interfaces as evenly as possible.

The high-level protocol doesn't matter. If smbv3 uses different tcp ports on either side (server or client), then layer4 hashing algorithm will distribute separate streams for single client evenly across interfaces while l3 or l2 will not..

Posted: **Tue Dec 18, 2018 11:05 pm**

So far the RB4011iGS+RM has been a great replacement for routing from my CRS125-24G-1S-2HnD-IN, I still us the CRS125 as a switch, but wireless is disabled since I use a wAP AC in the middle of my house. I did notice that the RB4011 gets warm even when its not doing anything, I had mine plugged in but not configured and was warm. So far my speedtests are consistently my max speeds. CPU has no problem with my big block lists every 12 hours only tipping the CPU up 5%. I did get a 10Gtek SFP fiber module (https://amzn.to/2BxD0RE) for both devices as an interlink, on the CRS125 it just worked with no additional configuration, on the RB4011 I was getting the disconnection problems others have mentioned, but I just set the SFP+ port to 1G Full Duplex and have no problems after setting that.

2018-12-18 13_55_40-Clipboard.png

The LCD screen was cool on other devices but I never look at it, and USB I don't have a use for, it would be nice if it was able to connect a printer or hard drive as a network shared devices, but I never worried for at home to have backup cell access. I would recommend this as an update for home or small offices for sure. If I didn't have a CCR1009-7G-1C-1S+ at work from the guys who run the WISP who couldn't use it, than I would get one for our small office.
Also the easiest way I found to get one of these was from a dealer through Amazon (https://amzn.to/2UWuXae)

Posted: **Thu Dec 20, 2018 3:54 am**

So I also have issue with SFP not working in SFP+ port... it was working fine in rb2011 but no luck with rb4011... Im using it to connect to computer that has pcie sfp card in it with mikrotik sfps on both ends... tried turning auto neg. off on both sides but no luck... whatever option I try rb4011 always says its connected but on computer side network card is flaping on/off constantly... damn it mikrotik cant you fix this

edit: on computer side I have Planet gigabit card PLT-ENW-9701 with Mikrotik S-85DLC05D in it, and same Mikrotik SFP modul in RB4011... cant get it to work, and it worked perfectly with RB2011...

Posted: **Thu Dec 20, 2018 10:10 pm**

Also got the exact same problem. I unfortunately can't turn off autoneg on my provider's side, so I hope a software-side fix is possible. I received my router a few days ago so it still is under warranty, maybe I could contact support about a potential fix?

Posted: **Sun Jan 06, 2019 3:24 pm**

Gezz, this flapping issue is getting anyyoying as hek.

I have this same issue and i've spent lot of hours into research , it came up " disable autonegotiation on both end" on every topic. Are you kidding me, i dont have access on that part. ISP stuff work everywhere but Mikrotik.

Im using RB4011.
Moving on to EdgeRouter.

Posted: **Mon Jan 07, 2019 9:05 am**

Gezz, this flapping issue is getting anyyoying as hek.

I have this same issue and i've spent lot of hours into research , it came up " disable autonegotiation on both end" on every topic. Are you kidding me, i dont have access on that part. ISP stuff work everywhere but Mikrotik.

Im using RB4011.
Moving on to EdgeRouter.

CCR1009 works. You just cheaped out xP

RB4011 is bag of disappointment, wasted chances and unfortunate decisions... It's significantly less versatile than average MikroTik

Posted: **Mon Jan 07, 2019 2:00 pm**

I'm having the exact same issue I have 2 Mikrotik devices. I was upgrading one device RB2011UiAS-2HnD-IN to the RB4011iGS+5HacQ2HnD-IN, and my SFP device ( S-85DLC05D ) can't keep the link/interface up as it does on the original routerboard. It's interfacing with another RB2011UiAS-2HnD-IN with another S-85DLC05D.

Has anyone found a workaround yet?

So I also have issue with SFP not working in SFP+ port... it was working fine in rb2011 but no luck with rb4011... Im using it to connect to computer that has pcie sfp card in it with mikrotik sfps on both ends... tried turning auto neg. off on both sides but no luck... whatever option I try rb4011 always says its connected but on computer side network card is flaping on/off constantly... damn it mikrotik cant you fix this

edit: on computer side I have Planet gigabit card PLT-ENW-9701 with Mikrotik S-85DLC05D in it, and same Mikrotik SFP modul in RB4011... cant get it to work, and it worked perfectly with RB2011...

Posted: **Mon Jan 07, 2019 2:17 pm**

Note: The RB4011 does not support Passive DAC modules, 1GB copper SFP modules and SFP GPON modules.

Posted: **Mon Jan 07, 2019 2:45 pm**

So after reading a bit more through the forum, I was able to get it to stay stable by turning autonegation off and 1G FD... however, I had to set the same setting on the other Mikrotik router also (ie the RB2011UiAS-2HnD-IN #2).

I'm having the exact same issue I have 2 Mikrotik devices. I was upgrading one device RB2011UiAS-2HnD-IN to the RB4011iGS+5HacQ2HnD-IN, and my SFP device ( S-85DLC05D ) can't keep the link/interface up as it does on the original routerboard. It's interfacing with another RB2011UiAS-2HnD-IN with another S-85DLC05D.

Has anyone found a workaround yet?

So I also have issue with SFP not working in SFP+ port... it was working fine in rb2011 but no luck with rb4011... Im using it to connect to computer that has pcie sfp card in it with mikrotik sfps on both ends... tried turning auto neg. off on both sides but no luck... whatever option I try rb4011 always says its connected but on computer side network card is flaping on/off constantly... damn it mikrotik cant you fix this

edit: on computer side I have Planet gigabit card PLT-ENW-9701 with Mikrotik S-85DLC05D in it, and same Mikrotik SFP modul in RB4011... cant get it to work, and it worked perfectly with RB2011...

Posted: **Tue Jan 08, 2019 8:41 pm**

Today I received my new rb4011 with wifi. Apart from the previously mentioned subjects (usb and lcd) it does not have a beeper either

20190108_153212.jpeg

Enviado desde mi SM-G9600 mediante Tapatalk

Posted: **Wed Jan 09, 2019 9:44 am**

Today I received my new rb4011 with wifi. Apart from the previously mentioned subjects (usb and lcd) it does not have a beeper either

And user LED

Posted: **Wed Jan 09, 2019 12:23 pm**

But it *does* have the signature MikroTik built-in torch light!

Posted: **Wed Jan 09, 2019 12:39 pm**

But it *does* have the signature MikroTik built-in torch light!

I'm all for bright leds - sometimes they are a life saver. But it would be great if we got these torches with a "mute" option. Something like "/system leds all dim|bright". THAT would be great.

Posted: **Wed Jan 09, 2019 2:07 pm**

I use a piece of back tape for that... but it looks ugly.
When you walk in a datacenter you immediately notice where is the MikroTik equipment.... and probably that is the reason for it.

Posted: **Sun Jan 13, 2019 11:19 am**

I just switch from RB2011 to RB4011 and I do experience some weird things. First is known -> sfp module which I can bring to live by disabling auto negotiation and by repeated switching between 10G and 1G mode. Then at one point it starts to work and it works until the next reboot. Sometimes it connects at 10 sometimes at 1. At least it says so in the logs. Can't prove whether this is true.

Wireless works okeish, but the biggest problem (beside damn sfp) is that it happens all the time that internet connection stalls for a while (wire or wireless), there is nothing in the logs and when I do check speed tests its maxed out. My configuration, which is not that complex, worked flawlessly for years on RB2011 except the box become a bit slow on wireless and could not digest upgraded WAN speeds any more.

The question is: is this occasionally stall happening to you as well? On first glimpse it looked like DNS is not resolving, but I guess the problem is more sinister?

Posted: **Mon Jan 14, 2019 6:42 pm**

Does anyone have this problem?
the 5g interface does not show the current tx power table

this are the settings:

Posted: **Thu Jan 17, 2019 10:41 am**

The problem persist with disabled auto negotiation, even between two RB4011 devices.

Issue reproduced between 2x RB4011, will be fixed in upcoming beta versions.

I unfortunately can't turn off autoneg on my provider's side, so I hope a software-side fix is possible.

I do not want to promise it, but we will look forward to add 1Gbps transceiver support with

auto-negotiation=on

on both sides. Generally in RouterOS it is necessary to force 1Gbps mode on SFP+(10G) interfaces.

Posted: **Thu Jan 17, 2019 10:54 am**

I unfortunately can't turn off autoneg on my provider's side, so I hope a software-side fix is possible.
I do not want to promise it, but we will look forward to add 1Gbps transceiver support with
Code: Select all
auto-negotiation=on
on both sides. Generally in RouterOS it is necessary to force 1Gbps mode on SFP+(10G) interfaces.

Hi, if you manage to make it works this would be terrific [emoji16], not only for 4011 but others RB/CRS/CCRs with 10G SFP+ too.

This might be solution for MediaConverters based on Qualcomm chip who don't want to work with SFP(1G) module when it's plugged in SFP+ cage

.

Sent from my VTR-L29 using Tapatalk

Posted: **Thu Jan 17, 2019 2:23 pm**

The problem persist with disabled auto negotiation, even between two RB4011 devices.
Issue reproduced between 2x RB4011, will be fixed in upcoming beta versions.

I unfortunately can't turn off autoneg on my provider's side, so I hope a software-side fix is possible.
I do not want to promise it, but we will look forward to add 1Gbps transceiver support with
Code: Select all
auto-negotiation=on
on both sides. Generally in RouterOS it is necessary to force 1Gbps mode on SFP+(10G) interfaces.

It's actually really interesting because this particular 1G module:

https://www.fs.com/de-en/products/29838.html

Works for me with autoneg on in CRS317. So what is deciding factor that makes 1G module work or not? (it's worth to mention that their copper modules don't, so it really is just this particular one that actually works).

And to prove my point here's photo:

P_20190117_130556.jpg

I also tested this: https://www.fs.com/de-en/products/16271.html and it works as well. Connecting CRS to non-Mikrotik gear was also successful. Unfortunately I tried their LX modules and it doesn't seem to work (without autoneg off). That said I don't have 2 LX modules made by them so I tried to connect regular 10km LX to SX 1310nm combo MM/SM 2km. Maybe only one of them doesn't work with autoneg on.

So if you need LX modules and want to bite a bullet (not that 14$ sounds like kidney tbh) then I guess you can try it. If you need SX then go on. Here's how it works on CRS. I don't have RB4011 to test tho. This topic intrigued me so much that I'll probably buy another LX and another SX/LX 1310nm combo just to see whether it works. But I need to wait for salary so not this month as I'm broke ._.

I knew it's unusual from very beginning that they worked with autoneg on, so I even asked FS.COM support what's their sorcery but they didn't reveal it xD. Maybe @mikrotik you could ask them how it works to implement such thing in your official SX/LX modules? Or just simply OEM from them lul.

Posted: **Thu Jan 17, 2019 11:35 pm**

By the spec sheet:
DC jack input Voltage 12-57 V
Max power consumption 33 W

Now wondering, when powered on 12V how much Amps should PSU provide?
Spec sheet does not say anything on which voltage that 33W is consumed.

Does anyone has any idea?

Posted: **Thu Jan 17, 2019 11:50 pm**

P = U * I (Watts = Voltage * Current)

So when you have 12V at 33W the current is 33/12 = 2.75A.
When you are running it at 24V, current is 33/24 = 1.375A.
(those are probably "maximum" values, not what it will draw all the time)

Why is the current becoming less when the voltage increases? Isn't the current increasing due to Ohms law? (U = I * R)
No, because equipment like this contains a switch-mode regulator, that actually converts power from the input voltage
into the desired output voltage that internally operates the electronics (e.g. 5V or 3.3V). So when the voltage drops,
the current increases to maintain the same power.

Posted: **Thu Jan 17, 2019 11:52 pm**

"router rebooted because some critical program crashed"

RB4011 doing NAT ~500mbps, cpu 20-30%
reboots every few days. Routeros 6.43.4

What this critical program issue means?
What could be solution ?

Posted: **Fri Jan 18, 2019 1:05 am**

"router rebooted because some critical program crashed"

RB4011 doing NAT ~500mbps, cpu 20-30%
reboots every few days. Routeros 6.43.4

What this critical program issue means?
What could be solution ?

Try and update to latest stable first, if the problem then still occurs, open a support ticket and run a support out file so they can diagnose the problem.

Posted: **Fri Jan 18, 2019 12:44 pm**

Why is the current becoming less when the voltage increases? Isn't the current increasing due to Ohms law? (U = I * R)

I know the Ohm's law, just forgot about the Watt to Amp relationship...and switching power supplies related stuff...

Actually, my general plan is to use single power source for three devices, all of these can handle 12V input, so...it is simply question about the Amperage.
Seems like 12V 5A powerbrick, wired into UPS is plenty.

Posted: **Mon Jan 21, 2019 4:34 am**

My RB4011 wlan1 disabling itself.
RouterOS version 6.43.8
Is this a software issue or a hardware issue?

Posted: **Mon Jan 21, 2019 3:05 pm**

My RB4011 wlan1 disabling itself.
RouterOS version 6.43.8
Is this a software issue or a hardware issue?

It's a SW issue.
Save config "exp file=current.cfg.rsc", copy to computer
Try flashing 6.43.8 from NetInstall.
Load config "imp file=current.cfg.rsc"
I had the same problem with ether1-ether5 ports: after a few time, ports disabling itself.

Posted: **Thu Jan 31, 2019 12:09 am**

hi..ive got RB4011iGS+5Ha... for 3 weeks and about 2 days ago i figured out that 5GHz wifi "start disapearing" after about 1 day in wifi interfaces i can see its in "running ap" status but i cant scan it on another devices (2phones/1ntb) when i try to disable and enable it again it will never get to "running ap" status agan it stucks in "initializing" phase.. i have to reboot whole RB to get it working again..
problem occurs on ROS 6.43.8(firmware version matching ROS) and 6.44beta61(firmware version matching ROS)

previously ive got CRS125-24G-1S-2HnD i was able to achive uptimes >200days (rebooting mostly due to SW/FW upgrades..)

quite annoying.. anyone else having these problems? any way to solve it? or RMA? thanks for sugestions..

//edit: fixed image link

Posted: **Sun Feb 03, 2019 12:09 pm**

Hello,

I'm having exactly the same issue on my 4011.
2.4GHz WIFI works, but 5GHz wifi disappears every 1-3 days. Interface is up but other clients cannot detect the AP. I need to completely reboot the device to get it back online.
I've opened support case with Mikrotik but so far no luck.

Posted: **Mon Feb 04, 2019 8:53 am**

We are trying to reproduce your mentioned 5ghz wireless issue, currently everything works for us as expected. We will appreciate information which could help us to reproduce the issue, maybe someone can provide us step by step guide how to trigger this glitch?

Posted: **Mon Feb 11, 2019 3:55 am**

Hello,

I'm having exactly the same issue on my 4011.
2.4GHz WIFI works, but 5GHz wifi disappears every 1-3 days. Interface is up but other clients cannot detect the AP. I need to completely reboot the device to get it back online.
I've opened support case with Mikrotik but so far no luck.

Hello, I just want to report I am having this same issue as well. The 5ghz is dropping frequently. I enabled the logging to echo but didn't see anything of value, the interface just stays in "initializing".

I have been playing with the settings over the week, I was not getting the expected throughput (100Mbps up and down, eventually got it too ~190 down; ~400 up). The ISP provided router was closer to 300 down, 400 up (using the speed test app on my phone); the WAN connection is 1Gbps. I set the Channel Width to 20/40/80mMHz XXXX, frequency to auto, Country to Canada, installation to indoor; Distance to Indoor; disabled WPS; WDS is disable; I tried fixed tx power rates at 17 at well.

Posted: **Wed Feb 27, 2019 9:25 pm**

Hi everyone! I'm new to the forum and to Mikrotik. Just got my RB4011 a few days ago and got the basic configuration complete, and was happy to replace my old tp-link router once and for all. I am certainly no network engineer, but I was finding myself frustrated with consumer network products. A friend of mine runs a wifi internet provider and swears by Mikrotik and recommended them. I also looked at Ubiquiti, but the RB4011 ticked the most boxes for me. RouterOS will take some time to learn, but on the whole it seems really well built and expandable, and I'm really happy with the product so far.

The only thing I was underwhelmed with was the wifi. I was hoping to be impressed, but actually it's been a downgrade from my midrange pre-MIMO tp-link ac router. It has generally seemed a bit slower to connect, range is about the same if not a bit less. Speed is ok, but sometimes it seems like it hangs for a while. I'm on fibre internet, so it's unusual. Also it seems to either drop occasionally or restart a bit more than I'd expect when I touch anything in config. I can't always tell if a page is just loading slow or if it's a router issue, it just generally feels a bit less stable and less solid than I'm used to.

The only thing I can find in the log when the wifi drops and restarts is the error msg below. The strange thing is the admin user is disabled and I'm logged in using a new custom user with admin privileges. It always points to my lan ip, so it's not like I'm being hacked... At first I thought I have a setting wrong, or that a browser plugin was interfering. But I switched to winbox and notice it happened again. So, since I came across this thread, I thought I'd ask to see if that sounds similar to what you guys are seeing, so I don't start tweaking all kinds of settings for nothing.

Thanks for the help.

Time Feb/27/2019 00:00:00
Buffer memory
Topics
system
error
critical
Message login failure for user admin from <<ip>> via web

Posted: **Thu Feb 28, 2019 8:11 pm**

Hi, i have a problem with my mikrotik 4011

when ethernet cable plug-in in port eth2 or eth7 green leds are not blinking, but connection is working.
If plug-in cable in other ports then i can see the green led
in connection i use the same cable.
anyone know what is it ??

when routers loaded all 10 leds are blinking

Posted: **Fri Mar 01, 2019 12:45 am**

To those having bad 5Ghz problems, do not choose auto. It may be that MikroTik is choosing a dFS channel and not all modern devices support DFS channels properly.

Posted: **Sat Mar 02, 2019 8:25 pm**

To those having bad 5Ghz problems, do not choose auto. It may be that MikroTik is choosing a dFS channel and not all modern devices support DFS channels properly.

Thanks for the tip. I found the same out on my own, and things were working better for a while, but today the 5g started acting up again. The router says it's enabled, but it doesn't show up in my list of wifi networks on android. Have you found any other tweaks that work?

Posted: **Wed Mar 06, 2019 1:16 pm**

We are trying to reproduce your mentioned 5ghz wireless issue, currently everything works for us as expected. We will appreciate information which could help us to reproduce the issue, maybe someone can provide us step by step guide how to trigger this glitch?

I don't believe I did anything to trigger this, other than disconnect leaving nothing connected to the AP. The next time I went to use it, hours later, the AP was gone.
I also was using a virtual AP when I first got this.

Posted: **Tue Mar 19, 2019 11:25 pm**

not using any virtual APs on 5GHz an still have issues.. but its very random right now 8days uptime without problem..

Posted: **Wed May 15, 2019 3:18 pm**

Has anyone notice one and the same mac address on sfp+ and wlan1 interfaces???

Just after upgrade and reset-config:

Posted: **Wed May 15, 2019 8:15 pm**

Has anyone notice one and the same mac address on sfp+ and wlan1 interfaces???

Just after upgrade and reset-config:

Same problem here..

Posted: **Wed May 15, 2019 9:29 pm**

Anyone managed to try the new S+RJ10 with the 4011 yet? (the /r2 hardware revision)

Posted: **Thu May 16, 2019 8:39 pm**

Yes, i am using S+RJ10 modules between RB4011 and CRS328.

Posted: **Thu May 16, 2019 8:52 pm**

Yes, i am using S+RJ10 modules between RB4011 and CRS328.

Ouch. Any particular reason to go with such setup? Existing, long cabling? 10G-SR modules cost like 16$ plus few bucks for LC optical patchcords comparing to 65$ for S+RJ10. 10G copper seems to be insanely expensiive. Especially non-mikrotik modules which go for like 150$.

Posted: **Thu May 16, 2019 9:01 pm**

I can not use fiber because of my existing cables. The only one problem with RB4011 is the high working temperature of the SFP+ module.

Posted: **Thu May 16, 2019 9:04 pm**

I can not use fiber because of my existing cables. The only one problem with RB4011 is the high working temperature of the SFP+ module.

So I assume you use longer copper cables if replacement would be problematic? What cable length do you use? I was always interested in actual maximum cable length for 10G copper modules. Because declared 30m sounds like rather "better safe than sorry" requirement. Not real limit where transfare rates start to significantly struggle.

Posted: **Fri May 17, 2019 7:40 am**

It is less than 10 meters CAT5E without shild.

Posted: **Fri May 17, 2019 11:00 pm**

It is less than 10 meters CAT5E without shild.

oh. Well...

10G SR module 15$ x2 : https://www.fs.com/de-en/products/74668.html
10m OM2 LC-LC patchcord 5$ : https://www.fs.com/de-en/products/74394.html
total 35$ (or 42$ incl. VAT)

S+RJ10 65$ x2
cat5 cable 0$
total 130$

actually even using original MikroTik SR modules (60$) it still saves around 5$ xD
Mostly because S+RJ10 is really cheap comparing to other 10G copper modules. With "normal" copper modules for like 150$ optics are ridiculously cheaper, more than 10x cheaper.

That's why I was a bit surprised a bit.

Posted: **Sat May 18, 2019 8:16 am**

I agree with you! But my tubes in the wall are full and it was a quick and dirty solution

If i will have to interconnect my equipments in the rack than the optic modules will be the solution.

Posted: **Tue Sep 17, 2019 7:35 am**

The 802.11ax standart is knocking on the door.
So Im wondering if its possible to replace the existing rb4011igs+5hacq2hnd-in mpcie card with a newer 802.11ax generation when its available ?

Will it be possible such a feature to be implemented in a near future ?

Posted: **Tue Sep 17, 2019 8:20 am**

The 802.11ax is knocking on the door.
So Im wondering if its possible to replace the existing rb4011igs+5hacq2hnd-in mpcie card with a newer 802.11ax generation when its available ?

Will it be possible such a feature to be implemented in a near future ?

Most likely not. Waiting for a new device. I hope it will work immediately without any problems.

Posted: **Tue Sep 17, 2019 1:24 pm**

Thank you !

I bought this router 2 months ago because I prefer that kind of hardware - all in one. I don't want to use router, switch and AP as separate devices.
Most of users like me use this unit for domestic needs .so we prefer to be all in one device.
I waited so long to buy this router because now ROS is much better than before especially in terms of 802.11ac performance. and SFP usage
So I dont want to spend another 2-3 years waiting new device to come (RB 5011 may be .. )

Posted: **Tue Sep 17, 2019 2:02 pm**

I don't see why mPCIe card wouldn't be replaceable, as long as the new one will be supported by RouterOS. You can't just buy first card you see, because RouterOS definitely doesn't support all chipsets, but once some mPCIe ax card from MikroTik comes out, it must work.

Posted: **Tue Sep 17, 2019 2:09 pm**

Thanks Sob

Yep I mean card from Mikrotik for sure.

That would be very useful despite of this that would run only at 2.4Ghz spectrum because of the antenna .

Posted: **Fri Sep 20, 2019 6:54 pm**

Also interested in the flexibility of that m-PCIe slot. If I got the wireless version, could I pull the existing card and put in the R11e-LTE to have an internal LTE modem? Antennas would need to be added but that is fine.

Posted: **Sat Sep 21, 2019 6:10 pm**

If there is a Sim card slot on board then you should be able to insert gsm modem card.

Sent from my VTR-L29 using Tapatalk

Posted: **Wed Sep 25, 2019 4:16 pm**

Note: The RB4011 does not support Passive DAC modules, 1GB copper SFP modules and SFP GPON modules.

Would support for GPON ever change (firmware) or is this a hardware issue? If we want GPON should we stick to RB3011?

Posted: **Mon Sep 30, 2019 6:54 pm**

Natively rb4011 don't support 1G in sfp+ but there are modules that do work when the sfp+ is hard-configured to 1G (1.25). Check topic Usage GPON module SFP in Spain there is one or 2 person's who confirmed that some GPON stick do work (those directly from Chinese manufacturers in which you can change sn/password/etc...).

Sent from my VTR-L29 using Tapatalk

Posted: **Tue Oct 01, 2019 7:12 pm**

some GPON units work, some don't. it seems to me like QA issue.

Posted: **Thu Oct 03, 2019 12:44 am**

Can anyone tell me what I might expect routing between 10 subnets using just the sfp+ connected to CCS326 might give me? Currently, I have a FortiGate 200b as my Firewall/router and it will remain the firewall to the internet, but when I am running test on some of my esx hosts that are 10G capable its maxing my CPU on my FortiGate. The fortage currently has 22 inter VLAN rules to allow traffic to pass there rules are mostly whole subnet to whole subnet on one port. Some rules are a few ips to a few ips, seems pretty simple.

I don't expect 10gbps and I don't need it, would be nice for the testing but I am realistic person its a 190.00 router. I just want to be able to run my test and not take down my network. If you say I need to save my pennies maybe I just need the 1009.

-Fred

Posted: **Thu Oct 03, 2019 4:31 am**

Can anyone tell me what I might expect routing between 10 subnets using just the sfp+ connected to CCS326 might give me? Currently, I have a FortiGate 200b as my Firewall/router and it will remain the firewall to the internet, but when I am running test on some of my esx hosts that are 10G capable its maxing my CPU on my FortiGate. The fortage currently has 22 inter VLAN rules to allow traffic to pass there rules are mostly whole subnet to whole subnet on one port. Some rules are a few ips to a few ips, seems pretty simple.

I don't expect 10gbps and I don't need it, would be nice for the testing but I am realistic person its a 190.00 router. I just want to be able to run my test and not take down my network. If you say I need to save my pennies maybe I just need the 1009.

-Fred

Depending on load characteristics RB4011 will outperform CCR1009. It will easily pull off 10G, just like CCR1009 (providing you use fasttrack in firewall, otherwise not rly but CCR1009 won't either). RB4011 will be better at handling fewer high throughput connections while CCR1009 will be better at handling thousands of smaller connections saturating 10G interconnect. It makes RB4011 great router if you're streaming or routing storage, hosting big files etc. - scenarios where CCR1009 sometimes struggles to hit 10G. Those devices are similar in overal performance - they're just optimized for different load characteristics.

TL;DR RB4011 is really capable router and my friend uses it for 10G inter VLAN routing with CRS317. It pulls off 10G without a sweat in most scenarios (except large scale with thousands of tiny connections).

Imho as of now RB4011 is no brainer unless you need some specific CCR features like smart card, additional SFP interface, usb, microSD, higher throughput for gigabit interfaces (because RB4011 has 5G aggegated bandwidth to gigabit interfaces - 2.5G per switch, while CCR1009 8G aggregated for 8 interfaces - no switch chip). And I'm saying that as CCR1009 owner. I just keep lying to myself that I totally need this touchscreen LCD so I don't feel like I wasted money...

Posted: **Thu Oct 03, 2019 12:22 pm**

Had an odd issue recently, my 4011 seemed to have a thread stuck at 100% CPU. Had to reboot to get it to go away. Anyone else seen this before?

Posted: **Thu Oct 03, 2019 2:22 pm**

If you see unclassified process, generate supout file and send it to support.

Posted: **Thu Oct 03, 2019 4:09 pm**

@lapsio Thank you that is exactly what I wanted to hear.

Posted: **Fri Oct 04, 2019 12:58 pm**

TL;DR RB4011 is really capable router and my friend uses it for 10G inter VLAN routing with CRS317. It pulls off 10G without a sweat in most scenarios (except large scale with thousands of tiny connections).

I agree the RB4011 has lots of grunt. I have just set up a site with 17 CAPACs and am using non-local forwarding CAPSMAN configurations running off some bridges in an RB4011. The RB4011 is connected to a CRS328 switch using only a 10Gbit SFP+. Given my experience using 12 CAPAC/WAPACs in a similar setup using a hEX (amazingly it copes very well with the load) I don't anticipate any problems.

Posted: **Fri Jun 12, 2020 4:20 pm**

Now the hot days are back I looked for a way to cool the 4011 a bit. It is passive cooled by the housing but it still gets quite warm so looked for a very small fan and a way to attach it to the 4011.

I took small plugs used to keep screws into a wall and cut one of the halves of the plug away. then I pushed them in the hole to attach the fan and then I pushed the whole into the cooling slots of the 4011. There is a space of about 7mm between the 4011 and the fan. The are is flowing over the housing of the 4011 increasing the air cooling of the router.

On top I have placed a plug that is adapted to fit the holes in the fan.

4011COOL.jpg

Posted: **Sat Jun 20, 2020 4:15 pm**

I choose to use a Intel Core2Duo CPU FAN powered by a 5V adapter, for a no noise environment. As you can see in the picture, the FAN is fixit by it's own lock mechanism. For 24 degree in the room, the router is running at 31 degree when both wirelesses are up. I keep the router in a vertical position.

IMAG1195.jpg

IMAG1197.jpg

Posted: **Tue Jun 23, 2020 7:02 pm**

Note: The RB4011 does not support Passive DAC modules, 1GB copper SFP modules and SFP GPON modules.

I have to say, RB4011 DO work with passive DAC modules.
On the test bed, 4011 connected to CRS305 with FS.com's passive DAC cable.
https://www.fs.com/de-en/products/74617.html

interface ethernet monitor sfp-sfpplus1 
                      name: sfp-sfpplus1
                    status: link-ok
          auto-negotiation: done
                      rate: 10Gbps
               full-duplex: yes
           tx-flow-control: no
           rx-flow-control: no
               advertising: 
  link-partner-advertising: 
        sfp-module-present: yes
               sfp-rx-loss: no
              sfp-tx-fault: no
                  sfp-type: SFP-or-SFP+
        sfp-connector-type: copper-pigtail
    sfp-link-length-copper: 1m
           sfp-vendor-name: FS
    sfp-vendor-part-number: SFPP-PC01
       sfp-vendor-revision: A
         sfp-vendor-serial: C2006174143-2
    sfp-manufacturing-date: 20-06-08
           eeprom-checksum: good

ps: i'm not an SFP expert, but i think, there is no such thing as auto-negotiate (or its working different way somehow).
For example if you have SFP interface on a device (like 3011) and connecting to SFP+ (like 4011) you need to fix 4011's port to 1G to get it work.

On the test bed above (4011 and CRS305) i tried to disable autoneg on 4011 and set fixed to 1G, there is no link on CRS305.

Probably you need to have dual personality modules, like this:
https://www.fs.com/de-en/products/36432.html

Posted: **Tue Jun 23, 2020 8:45 pm**

At product page only the passive DAC warning remains and it seems that Mikrotik got to grips with the other problems mentioned by you for the 4011. I had some problems with my SPF and that resolved and in the next beta also the last hickup should be tackled.

The solution you mention is already known and used and cheap.

Posted: **Wed Aug 05, 2020 4:26 pm**

Just got my RB4011, and I can confirm that SFP+ works very well with passive DAC. Of course I didn't use the Mikrotik cable.

iperf shows around 800 MB/s against my NAS, so I'd say it actually works. Also, I didn't see any flapping.

Posted: **Wed Aug 05, 2020 5:46 pm**

Just got my RB4011, and I can confirm that SFP+ works very well with passive DAC. Of course I didn't use the Mikrotik cable. iperf shows around 800 MB/s against my NAS, so I'd say it actually works. Also, I didn't see any flapping.

I would be careful until they officially come back with word that it's fixed in prod.

I've worked on this issue across a number of clients and It works intermittently. Will often break after ROS upgrade.

Posted: **Sat Sep 19, 2020 12:20 pm**

Hello! Does anyone know if Mikrotik GPON ONU SFP can be used with this device?

Same question here. Plus I see it is discontinued. There will be a replacement device? Some store has discontinued modules but if it is not supported in 4011 then I don't want to loose 90$.

Posted: **Mon Oct 19, 2020 1:32 am**

Hi, can anybody please measure real power consumption of RB4011iGS+5HacQ2HnD-IN when running both wireless APs and mild traffic (or no traffic - just idle)?

By the spec sheet is max power consumption 44 W but I am wondering how much it draws in real when just sitting moreless idle or under mild load. Because having let's say 40W constant load would be pretty significant. Thanks

Posted: **Mon Oct 19, 2020 4:51 am**

Hi, can anybody please measure real power consumption of RB4011iGS+5HacQ2HnD-IN when running both wireless APs and mild traffic (or no traffic - just idle)?

By the spec sheet is max power consumption 44 W but I am wondering how much it draws in real when just sitting moreless idle or under mild load. Because having let's say 40W constant load would be pretty significant. Thanks

44 W is while powering another device, through PoE. Without attachments the max power usage is 23 W

https://mikrotik.com/product/rb4011igs_5hacq2hnd_in

Posted: **Tue Oct 20, 2020 12:51 pm**

Well that sounds better but I still wonder what is the real power draw - how much it depends on the load etc...can somebody please measure it? Thanks

Posted: **Sat Jan 09, 2021 12:49 am**

Hi, can anybody please measure real power consumption of RB4011iGS+5HacQ2HnD-IN when running both wireless APs and mild traffic (or no traffic - just idle)?

By the spec sheet is max power consumption 44 W but I am wondering how much it draws in real when just sitting moreless idle or under mild load. Because having let's say 40W constant load would be pretty significant. Thanks

I'm also interested in real-world measurement.

Posted: **Wed Jan 27, 2021 1:44 pm**

Well that sounds better but I still wonder what is the real power draw - how much it depends on the load etc...can somebody please measure it? Thanks

My RB4011 (no WiFi) pulls 8.7 watts when in normal use. As measured from the port health of a CRS328 powering it via PoE for the purpose of doing exactly what you asked.

I use a Passive SFP+ cable, and three gigabit ports (one to my GPON ONT, one to my LTE modem, one to my network sniffer).
The RB4011 is routing between three VLANs, firewalling of course, and also CAPsMAN for 4 x cAP ac.

Posted: **Tue May 18, 2021 1:23 am**

Note: The RB4011 does not support Passive DAC modules, 1GB copper SFP modules and SFP GPON modules.

Well, a bit of necro bump but CarlitoxxPro GPON ONU working fine here in a RB4011.

Posted: **Tue May 18, 2021 11:13 am**

There have apparently been some software fixes since then to fix the compatibility with certain modules, but it still is not advisable to use them in the fanless routers like the RB4011. SFP modules often run quite hot and the airflow created by the case fan really is required to keep them from overheating.

Posted: **Tue Oct 19, 2021 11:09 pm**

a BIG compliment to the RB4011 team at Mikrotik, to continue support on enhancing RTL8367 switch features. VLAN hardware offload to these switch chips seems to work fine now since 7.1rc. THANK YOU!

Posted: **Wed Oct 20, 2021 7:16 pm**

Does anyone know if any of the recent firmware updates have lowered the idle power consumption of the device, as has been speculated here: viewtopic.php?p=848539#p848516?

Posted: **Mon Dec 13, 2021 10:49 pm**

Hummm ... used switch chip RTL8367 seems not to support VLAN in hardware. So usability of those 10 ethernet ports will be limited as switched ports when VLANs are in use ... as all the traffic will hit CPU.

It seems like I won't have to defend the level of sex appeal of this unit from my better half after all.

I found a datasheet for the RTL8367 that verifies it does have a vlan table. Why couldn't we use it with ROS?
https://datasheetspdf.com/pdf-file/1461 ... TL8367RB/1

https://www.framboise314.fr/wp-content/ ... asheet.pdf

MikroTik

RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011

Re: RB4011