Increasing wireless range?

esebm · Tue Dec 05, 2023 5:52 pm

Guys, is there anything in the settings of an RB951 router that would increase or stabilize the wireless range? My wife's laptop (one floor above the router) works only intermittently.

erlinden · Tue Dec 05, 2023 6:13 pm

Yeah, by far the best solution is adding an accesspoint.

Don't forget that there are two radios involved, where the mobile device has to be able to send at the same level as the router.

esebm · Tue Dec 05, 2023 6:47 pm

Well, I had an older MikroTik before and that one worked flawless for 5 or 6 years. I assumed that a newer model would work at least on the same level, if not better. Doesn't seem to be the case.

erlinden · Tue Dec 05, 2023 7:09 pm

Well...that info was missing in your starting post...

Think when it comes to wireless it is always good to have a extra pair of eyes (could very well be crappy configuration):

/export file=anynameyoulike

Remove serial and any other personal information and post here in between code tags with the </> button.

Do you still have the config of the previous device?
Is the RB951 on the same location as the older accesspoint?

Calling the RB951 newer btw...

esebm · Tue Dec 05, 2023 7:57 pm

Could you tell me how to find that file? Thanks!

Tue Dec 05, 2023 8:03 pm

Winbox / Files

Also keep in mind Mikrotik makes sure to adhere more and more to wireless regulations which for most countries also means... reducing transmission power.

esebm · Tue Dec 05, 2023 9:45 pm

Here it is:

erlinden · Wed Dec 06, 2023 9:20 am

set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
country="united states" disabled=no distance=indoors frequency=auto \
installation=indoor mode=ap-bridge ssid=MikroTik-2C00AA \
wireless-protocol=802.11

You might want to set band to n-only and channel-width to 20MHz.
Especially the latter is very important as 40MHz is the complete bandwidth on the 2.4GHz band (and therefor it's the optimal way to get interference.

You can also pick a channel manually (2412, 2437 and 2462). Do a scan to get best option.

esebm · Wed Dec 06, 2023 8:17 pm

OK, channel width was set to 20MHz, I have set band to N only and picked channel 2437.
Will keep you posted if there's a change.
Thanks for the input.
Ed

Moba · Thu Dec 07, 2023 12:10 am

If the product was recommended by your vendor, I would return it. This model has been discontinued. MT does offer newer (current) low-cost solutions that should perform much better...

esebm · Thu Dec 07, 2023 12:36 am

Well, it was not "recommended", I just ordered it online not knowing that it was discontinued.
Which newer model did you have in mind?

Moba · Thu Dec 07, 2023 12:57 am

Without knowing the speed of your internet package, any model of the hAP ax series. The ax lite is a budget model that has only one 2.4 GHz radio and might be underpowered for more than 300 Mbps, but the ax2 and ax3 are solid models for up to 1 Gbps internet service. The current wave2 drivers on those models has increased performance quite a bit compared to previous models. While other brands might have faster solutions at similar price points, only MT has ROS (a big plus for me).

Wi-Fi performance for the ax2 and ax3 is somewhere between 800-900 Mbps from user feedback. The lite will be a lot less, since it is only using 2.4 GHz.

The wired test results for 25 rules/512 byte gives a good indication of real world performance:

ax lite 310 Mbps

ax2 912 Mbps

ax3 1145 Mbps

esebm · Thu Dec 07, 2023 4:05 am

Well, as regards internet speed, it's about 3 Mbps (Texas Hill Country), nothing to write home about.
So, just about any halfway decent router should be working fine, which the old hap lite did.
Since I am by no means a network guru, most of your abbreviations are way over my head. I'd really appreciate if you could narrow down your recommendation to one or two concrete models that I should buy.
Thanks again for all your input
Ed

Thu Dec 07, 2023 6:29 am

Wi-Fi performance for the ax2 and ax3 is somewhere between 800-900 Mbps from user feedback. The lite will be a lot less, since it is only using 2.4 GHz.

Still ... I can get 400Mbps with AX Lite. On 2.4GHz and when having a proper wifi6 client.
e.g. my laptop only has wifi5, it doesn't get there. Using an external wifi6 USB adapter, then it does.
On my smartphone, it goes there as well.

Certainly when having an ISP connection around or lower then this, it is a valid option.

Thu Dec 07, 2023 6:37 am

Since I am by no means a network guru, most of your abbreviations are way over my head. I'd really appreciate if you could narrow down your recommendation to one or two concrete models that I should buy.

Even for non-network guru's, surely one can search ? How else can you learn ?

hap = Home Access Point, name of Mikrotik series of devices used with that aimed purpose.
GHz = Giga Hertz, frequency indicator
Mbps = Mega bit per second, indicator of line speed of transmission
Gbps = Gigabit per second (1 Gbps = 1024 or 1000 times faster then 1 Mbps, depending on who's selling it or which convention is being used)
MT = Mikrotik
ROS = Router Operating System

The 3 suggested models are valid:
AX Lite: only 2.4Ghz wifi radio, only 4 ethernet ports (personally I don't like the greenish color on one of the sides but it is a powerful little router)
AX2: small package, very decent access point and router
AX3: BIG package and BIG antennas ! A bit more power then AX2, plus USB port which can be used for various things (external storage, LTE modem, ...)

Review those 3 models on Mikrotik product pages, there are pictures there as well.

With AX2 you can not really go wrong. AX3 will give you a bit more future safety but first see if the package does not pose you problems. It is a big one.

kalamaja · Thu Dec 07, 2023 6:57 am

Since I am by no means a network guru, most of your abbreviations are way over my head. I'd really appreciate if you could narrow down your recommendation to one or two concrete models that I should buy.

hAP ax lite if you are on tight budget
hAP ax3 if you want wider coverage as it has good antennas to hear clients

Moba · Fri Dec 08, 2023 2:40 am

The ax lite will be enough for the bandwidth you described and 2.4 GHz offers better signal penetration than 5 GHz. The ax2 is the best price/performance purchase, but it is almost double the price.

@holvoetn, how is the range on your ax lite unit ?

Device's with external antennas usually give better range, but will also increase the unit's price accordingly i.e. hAP ax3.

It's hard for me to recommend the new L009UiGS-2HaxD-IN, because it sits in a weird price/performance bracket - it's not a budget model, but it has budget performance.

*** Edit: incorrect info removed - Thank you @holvoetn ***

Moba · Fri Dec 08, 2023 3:09 am

Still ... I can get 400Mbps with AX Lite. On 2.4GHz and when having a proper wifi6 client.

That is indeed very good. My ac clients barely get more than that on 5 GHz. I couldn't find Wi-Fi results yesterday, other than what was posted on YT by MT.

Fri Dec 08, 2023 7:20 am

@Moba
Wireless repeater possibility always has been available.
Station bridge mode, where the same subnet can be extended, has been away for a while.
Not sure if it was 7.12, definitely in 7.13beta, I already tested it.
Check release notes.

esebm · Fri Dec 08, 2023 6:02 pm

For budgetary reasons I was planning to order the ax lite if its wireless performance is indeed better than my current router.

Moba · Fri Dec 08, 2023 7:23 pm

@Moba
Not sure if it was 7.12, definitely in 7.13beta, I already tested it.
Check release notes.

Noted. There were complaints in the past about this feature being removed. I do not use it...

Moba · Fri Dec 08, 2023 7:26 pm

For budgetary reasons I was planning to order the ax lite if its wireless performance is indeed better than my current router.

You should be happy with the lite. It will also receive updates for a few years...

esebm · Fri Dec 08, 2023 7:33 pm

Guys, thanks for all your input and advice. It is greatly appreciated.
Ed

esebm · Mon Dec 11, 2023 7:06 pm

Guys, is there a way to temporarily turn off the wi-fi part?
I have a new wi-fi AC thermostat installed that plays havoc and I'm suspecting that the router is at fault. Just want to turn it off for a couple hours to see if the thermostat calms down.

mkx · Mon Dec 11, 2023 7:12 pm

Set disabled=yes on wireless interface to switch it off. Set it to no to enable it again. If you disable master interface, then virtual ones (piggy-backing on that master interface) will be disabled as well.

esebm · Mon Dec 11, 2023 7:33 pm

Thanks, I'll try that.

esebm · Mon Dec 11, 2023 9:40 pm

Tried that and the AC thermostat still goes nuts.
Have to replace it again.
Thanks,
Ed

esebm · Fri Dec 15, 2023 11:25 pm

Guys,
I have installed the new ax lite and everything seems to work so far. I was wondering if there are any settings I should modify to optimize wireless performance?

erlinden · Sat Dec 16, 2023 1:18 am

Optimization could be:
- select channel mamually
- bandwidth 20MHz (unless in rural site)
- WPA3

Most default settings are pretty much optimized (if I may believe official statements from MT).

esebm · Sat Dec 16, 2023 3:16 am

Does the Texas Hill Country count as rural?
Which channel? Do I work through them one by one? How do I determine which one would be the best one?
Thanks,
Ed

Sat Dec 16, 2023 8:24 am

For 2.4ghz, follow 1/6/11 scheme.
See first using Frequency Usage which channel is least used.

esebm · Sat Dec 16, 2023 4:16 pm

No idea what you are talking about, sorry for being dense.

Sat Dec 16, 2023 4:55 pm

Use channel 1
Or 6
Or 11

esebm · Mon Dec 18, 2023 12:27 am

When I click on channel it says "Unknown" and I cannot enter any number.

esebm · Wed Dec 20, 2023 11:36 pm

I've tried all the setting that were suggested but I can't get the wi-fi reception higher than the lower dot and the first half-round bar on my wife's laptop, same as it was with the previous router that I had returned.

mkx · Thu Dec 21, 2023 9:14 am

One can not expect miracles with regard to WiFi coverage from modern devices. They are all supposed to conform to country regulatory transmit power limits so all APs should be within 1dB when it comes to signal strength, regardless the AP vendor. When it comes to performance at lower signal levels, then some APs will fare better than the rest. WiFi devices have a pretty non-linear Tx power amplifier and when using higher rates, which require better power amplifier linearity, most will "feature" some power back-off ... APs with higher power output will be able to transmit at country limit for Tx power even for higher data rates and will give better throughputs while others will back off Tx power and will thus drop the throughput.

So if you really have problems with signal strength as some particular place, then you have to "bring signal closer to user" somehow. If it's only a particular device that suffers from poor signal (while other devices work just fine at exactly same spot), then that device is faulty and has to be done something about it.

esebm · Thu Dec 21, 2023 6:18 pm

Well, the router is brand new and was supposed to have a better wi-fi performance than the previous device from the same manufacturer.
Just expected a "small" miracle, not a major one.

Thu Dec 21, 2023 6:22 pm

Well, the router is brand new and was supposed to have a better wi-fi performance than the previous device from the same manufacturer.
Just expected a "small" miracle, not a major one.

datasheets have valuable information

for example RB951ui-2hnd has more than twice the TX power on Wi-Fi radio than RB951ui-2nd

Thu Dec 21, 2023 6:41 pm

datasheets have valuable information

for example RB951ui-2hnd has less than half the TX power on Wi-Fi radio than RB951ui-2nd

???
Surely there is a typo there... twice the same ?

mkx · Thu Dec 21, 2023 6:45 pm

If one compares wireless specifications for hAP ax lite and for RB951Ui-2nD (which seems to be exact model @esebm was using before) it's clear that they are (Tx power wise) almost identical (hAP ax lite is better at 54Mbps rate by one dB). Rx sensitivity (affects rates in direction from station towards AP) of hAP ax lite is better by around 3dB ... which is good, but not really a life saver.

All in all this means that signal range of both APs is roughly the same.

Only "full blown" ax device, such as hAP ax3 has considerably higher Tx power (between 7dB and 9dB higher Tx power than either of previously mentioned models). Rx sensitivity is not better than of hAP ax lite, so uplink speeds wouldn't be better.

mkx · Thu Dec 21, 2023 6:46 pm

datasheets have valuable information

for example RB951ui-2hnd has less than half the TX power on Wi-Fi radio than RB951ui-2nd
???
Surely there is a typo there... twice the same ?

One is normal and one is "H" - high power. The descriptive text doesn't make sense, H has higher power and not the other way around.

Thu Dec 21, 2023 6:59 pm

???
Surely there is a typo there... twice the same ?
One is normal and one is "H" - high power. The descriptive text doesn't make sense, H has higher power and not the other way around.

Yeah You catch it

Is the opposite

Ty i fixed My previous post

esebm · Tue May 07, 2024 12:34 am

Guys, I'm back , unfortunately.
The wireless part of the router seems to deteriorate. It worked fine for a couple of weeks and now it's at a point that it doesn't even turn on for half of the time. Or it shows only the bottom dot but that goes away after a few minutes and the router stays dead. It's my wife's laptop, she's in real estate and she really is depending on internet access. Needless to say that she's breathing down my neck real hard. I'm tempted to scrap that thing and buy another brand. I have contacted MikroTik but they don't seem to be overly interested, their responding is real slow, takes days every time. What else can I do to get this thing going?

esebm · Tue May 07, 2024 6:13 pm

They just responded asking for a supout.rif file.
Can someone tell me how to obtain that file?

erlinden · Tue May 07, 2024 6:21 pm

https://help.mikrotik.com/docs/display/ROS/Supout.rif

esebm · Tue May 07, 2024 6:27 pm

That supout reader asks me to upload the file, but upload from where?

erlinden · Tue May 07, 2024 6:39 pm

That supout reader asks me to upload the file, but upload from where?

In the link I posted above you have three options to create a supout file: from Winbox, WebFig or terminal.

esebm · Tue May 07, 2024 7:13 pm

I've downloaded the latest version of winbox and when I click on it, this is what I see:

winbox.jpg

jaclaz · Tue May 07, 2024 7:27 pm

Check:
https://wiki.mikrotik.com/wiki/Manual:W ... ing_Winbox
https://wiki.mikrotik.com/wiki/Manual:W ... e_Overview

click on Make Supout.rif (on the left menu)

click on Files (on the left menu)

back to:
https://help.mikrotik.com/docs/display/ROS/Supout.rif

(select file, right click, download).

esebm · Tue May 07, 2024 10:31 pm

I enter the user and PW that's on the router label but it does not connect to 192.168.88.1
I did not change anything during setup.

jaclaz · Tue May 07, 2024 11:39 pm

Is the PC connected via ethernet?
To which port on the Mikrotik?
Ether 1 won't normally work, try another port.
Check and recheck password, they are usually printed in minuscule font size and it is easy to confuse 0, O, 6, 8, G, etc., try making a photo with your phone and enlarge it.
Try closing and restarting winbox, click on the Neighbours Tab, hit refresh, the router should be listed with both MAC and IP address.
But how did you connect to It before to configure It before?
If you used you browser and that IP, i.e. the Webfig interface, you can use that instead of Winbox.

esebm · Wed May 08, 2024 12:09 am

Two PCs are connected via Ethernet, they have worked fine from day one (3-4 months).
Wireless also works, albeit only about 50% of the time.
I have checked the label several times with a magnifier.
I've started winbox several times.
The web interface produces a login screen, same result when I enter admin and PW.
Looks like I'm screwed!

jaclaz · Wed May 08, 2024 12:23 am

There is still netinstall, but it is (relatively) difficult and cumbersome to execute.
Are you sure that when you originally set it up you did not use a different password?
The first time you connect, you are usually asked to change the password from the one on the label.
Then you can change it back to the one on the label, do you remember you did this procedure?

esebm · Wed May 08, 2024 12:33 am

I don't think I did. I purchased this router because it was recommended here and it was supposed to work out of the box.
Even if I had changed the pw I wouldn't remember it, sorry.

phascogale · Wed May 08, 2024 6:20 am

Before you worry about reinstalling, have you considered placement?

I have a hAP ax lite upstairs so I went downstairs and to the other side of the house where I got good signal on both Mac and iPad, so I know it works. Its real job is to talk to a bunch of sensors at both ends of the house, dealing also with interference from one band of my general wireless network plus a bunch of neighbours and their enabled Things. I placed it centrally, away from walls and equipment so far as I could.

If your problem is a signal upstairs, can you raise the altitude of the ax lite a bit? Sideways towards the upstairs room if it is not directly above? Is it clear of potentially reflective surfaces, even drywalls but especially screens or any metal or electronics? WiFi is a sensitive beastie but your wife's computer is probably worse so some of this goes for it too.

You may need to netinstall to recover access then review your config with the experts here. Meanwhile, optimise placement and review obstructions. In my experience the hAP ax lite is an effective little device.

jaclaz · Wed May 08, 2024 12:14 pm

So, essentially, you are locked out of your device.
The only way out is a netinstall, as said it is complex/difficult, and - with all due respect - you don't sound like having the experience and familiarity with operating systems/networking that might be needed, it is doable of course but it will require some time to learn the (needed) tricks and several attempts (depending also on what OS you are running, there are reports that using latest Windows 10/11 is more troublesome than Linux, as an example).

The suggestion by phascogale is however sound and easy to try.
If the device is actually malfunctioning it needs however be made accessible anyway.

For the (relatively) low cost of a "better" router (compared to the satisfaction of your wife getting a decent connection) if I were you I would however buy a hap ax3 (should be some 130-140 bucks), set it up, and only later decide if attempting to recover the ax lite is worth it (to keep it as spare) or sell it, or just call it a loss and go on, you should have paid the ax lite some 50-60 dollars or so, if it is "fun" for you attempting to fix it it is OK (personally I would hate to scrap it only because I lost accesss to it and it has issues) , but otherwise it is not worth the time you might need to recover it.

esebm · Mon May 13, 2024 2:27 am

Guys, after trying several dozen possible passwords I finally got into it and tried to create the requested supout file.
It starts creating but stops at 96%, even after 2 or 3 tries.
As to the location, the router and the laptop have been in the same location for years, working fine with the old MiktroTik router, never had a problem.

jaclaz · Mon May 13, 2024 11:57 am

Good that you have recovered access to the device.

Now that you have access to it, do save an export of the configuration, you never know.

The supout file creation failing may be both a sign of a serious issue with the device or a minor glitch (that can be resolved by resetting the router and re-applying the configuration).

In any case it doesn't seem "right", have you asked Mikrotik support what they suggest in this case?

esebm · Mon May 13, 2024 6:13 pm

Here is their response:

Hello,
Supout file creation, can result in heavy CPU load, for home devices, like hAP lite series, if for example at the same time large traffic amount is being processed at the same moment.
Also, the process percentage can be deceiving, due to the same, check the root folder - file section, if the file has not been generated. Here we also recommend using our proprietary management app - WinBox, which is fine tuned for RouterOS:
https://help.mikrotik.com/docs/display/ROS/WinBox
https://mikrotik.com/download
In any case, supout file will mostly be used to confirm the aforementioned 2.4ghz interface sub-optimal frequency choice. Not only that, the nature of WiFi itself, will not allow comprehensive signal evaluation, using the supout file, as it captures the router's state at the one moment of time - it is necessary to evaluate the live device state, using the aforementioned, embedded tools in our previous reply.
Return to the following:
As the device specification sheet suggests:
https://mikrotik.com/product/hap_ax_lit ... ifications
Hardware is limited to 2.4 GHz only, which can potentially result in wireless frequency overlapping issue with the neighboring WiFi networks, due to the channel range being limited.
In this case, we recommend using embedded RouterOS tools, in order to analyze the WiFi network state and potentially choose the less crowded frequency, for your WiFi network to operate. In terms of tools - frequency scanner, wireless snooper - are built in.

esebm · Wed May 15, 2024 7:22 pm

Guys, I've finally succeeded in installing the latest RouterOS but the wireless part is still dead as a doornail.
I've contacted the seller as MikroTik has suggested but they can't help, referring me back to them but they take their sweet time to respond.
Does anyone have suggestions how to get this working?
Thanks,
Ed

patrikg · Wed May 15, 2024 7:41 pm

New package:

https://www.youtube.com/watch?v=AkBIQxi-VKs

https://help.mikrotik.com/docs/display/ ... s+packages

esebm · Wed May 15, 2024 10:56 pm

Thanks, but that doesn't seem to help me turning on wireless.

esebm · Thu May 16, 2024 7:16 pm

Update: I have installed the wireless package (wireless-7.14.3-arm.npk) and rebooted the router but wireless is still dead.
There must be some setting to turn it on. Can someone please help?
Thanks,
Ed

Thu May 16, 2024 8:08 pm

On what device ?

esebm · Thu May 16, 2024 8:14 pm

ax lite

Thu May 16, 2024 8:20 pm

Not wireless package !!
Use wifi-qcom

esebm · Thu May 16, 2024 9:44 pm

Did that, no dice.
When I go in Quickset there is a button WPS accept. Clicking on that pops up a message that says 'interface must be running on AP'. Does that help?

Thu May 16, 2024 10:05 pm

Make sure wifi-qcom package is installed.
Then reset to default config.

esebm · Thu May 16, 2024 10:37 pm

How do I verify that?

Thu May 16, 2024 10:52 pm

System / packages

mkx · Thu May 16, 2024 10:54 pm

Also verify that package is enabled (it can be installed but disabled).

esebm · Thu May 16, 2024 11:11 pm

It says" scheduled to enable"

Thu May 16, 2024 11:13 pm

Reboot then.
Check it is enabled.
Then reset to default config.

esebm · Thu May 16, 2024 11:29 pm

Did all that, wireless does not work!

esebm · Mon May 20, 2024 7:35 pm

Guys, after trying with Mikrotik now for almost 2 weeks, it's obvious that they are unwilling or unable to help me get WiFi running.
I have rebooted the router, no dice. I have placed the wife's laptop 6" away from the router, no WiFi!
I am close to throwing this thing out and buy a different brand.

erlinden · Mon May 20, 2024 9:47 pm

Post complete config please. And check the log.

esebm · Mon May 20, 2024 10:10 pm

Where do I find the complete config/log?

jaclaz · Mon May 20, 2024 10:44 pm

Follow instructions in post#5 here:
viewtopic.php?t=203686

esebm · Mon May 20, 2024 11:38 pm

OK, here is config file:

# 2024-05-20 15:30:45 by RouterOS 7.14.3
# software id = 
#
# model = L41G-2axD
# serial number = 
/interface bridge
add admin-mac= auto-mac=no comment=defconf name=bridge \
    port-cost-mode=short
/interface wifi
add channel.band=2ghz-n .skip-dfs-channels=10min-cac .width=20mhz \
    configuration.country="United States" .mode=ap .ssid=MikroTik-96CDB4 \
    disabled=no radio-mac=48:A9:8A:96:CD:B4 security.authentication-types=\
    wpa2-psk,wpa3-psk .connect-priority=0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/ip smb users
set [ find default=yes ] disabled=yes
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=wifi1 internal-path-cost=10 \
    path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=\
    all wan-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ip smb shares
set [ find default=yes ] directory=/pub
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
    33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=America/Chicago
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

Tue May 21, 2024 8:00 am

I doubt that's default config. I think I asked you 2 times already to reset to default config after fixing that package problem.

esebm · Wed May 22, 2024 2:13 am

OK, did the default config.
Result: router is deader than a doornail. Nothing goes, no ethernet, let alone wireless. Can't even enter the router, no connection!
Pulled the power on the router several times, no dice.
Now what?

vk2mpj · Wed May 22, 2024 4:31 am

OK, did the default config.
Result: router is deader than a doornail. Nothing goes, no ethernet, let alone wireless. Can't even enter the router, no connection!
Pulled the power on the router several times, no dice.
Now what?

Use netinstall to reinstall RouterOS.

esebm · Thu May 23, 2024 6:54 pm

OK, I'll try that, following the MikroTik manual. It is too lengthy to memorize it. Is there any way to print those pages?

patrikg · Thu May 23, 2024 7:31 pm

You can click on this link and get to netinstall pages and print that if you want.

https://help.mikrotik.com/docs/x/DoB6AQ

After visiting the page Just press <CRTL><P>

anovojr · Thu May 23, 2024 8:05 pm

Hey, try switching the wireless channel in the settings. Interference from other devices can mess things up. Also, make sure the transmit power is set to high.

esebm · Thu May 23, 2024 9:50 pm

OK guys, I'm trying to re-install. Getting to the window where I browse to the packages for routeros and wireless but nothing gets loaded into that window and, therefore, nothing is there to be installed. Looks like I took a wrong turn somewhere. Maybe I'm just too dumb for that.

esebm · Thu May 30, 2024 3:52 am

Gentlemen, just wanted to thank you for all your efforts to help me get this router going.
However, this thing has been going on for more than 3 weeks and I am not closer to a solution than when I started this post.
Consequently, I have decided to cut my losses. I have purchased a Netgear router, installed it and everything runs fine, incl. wireless.
The seller of the MikroTik unit has asked me to send it back for "repair", whatever that means. Guess, I'm gonna have a MikroTik router for sale one of these weeks.
Thanks again, very much appreciated.
Ed

rolo95 · Sat Jun 01, 2024 12:07 am

Esebm,
i hear your frustration with Mikrotik Routers,
i just want to add that Mikrotik are along the lines of Cisco and Juniper, so that is enterprise level networking equipment.

if you do not have prior experience setting/config those devices like the ones i just mentioned
sorry but you are out of luck.

Router OS or ROS
look the same in the 49 USD device than on the flagship 4000 USD router
but unlike SOHO devices like netgeat or Dlink , the interface is not that simple

Configuring / Using a Mikrotik Router is like having a 1200 piece SNAP ON mechanics toolbox
but you only need a screwdriver
and to make things worst you cant even find it between the 1200 tool count.

in the other hand
you can get a 40 piece tool set at Harbor Freight that have a pair of pliers, a pair of screwdrivers, and some sockets and wrenches
you are golden if that is all you need.
but not the other way around.

personally i never had any issue with Mikrotik since 5 years ago that i started using their hardware.
and i came here to ask for help when i need to
see
there is a tool for every application
and hitting a nail with a screwdriver is not the most orthodox thing to do.
it is what it is.

esebm · Sat Jun 01, 2024 12:37 am

I readily agree that I had no prior experience, hence my efforts to find help here at a forum of router gurus; that's why the forum exists in the first place.
Unfortunately, nothing that was suggested did help me, despite of all the collective experience that is available here.

rolo95 · Sat Jun 01, 2024 12:44 am

can you access the unit trough winbox ?
if so
try
( see the pics below )
https://prnt.sc/D9_ousClOpPi
then
click like the pic below
https://prnt.sc/AQeBtLLi9C10

that must reboot the unit and go back to factory
user admin
pwd must be on the label in the bottom of the unit
or now pwd and will as for password at 1st log

old units do not had password
per new EU regulations new devices come with factory pwd

esebm · Sat Jun 01, 2024 2:02 am

As I said in post #87, the unit is on its way to the seller to be "repaired".
I have replaced it with a Netgear router that works just fine.
Thanks.

esebm · Fri Jul 12, 2024 7:08 pm

Guys, just got the hAP ax lite back from the seller and they assure me that they have tested it extensively and the unit is as good as new!
Anyone interested in buying it?
I'll throw in a hAP lite for free!

Who is online