I had to switch from Mikrotik to another solution, security and ongoing hacking of ANY Mikrotik software / Stable / Testing / actually after hack I tried aways to use Netinstall / all seemed OK but after brand new firmware landed on board, it has never booted again. It has happened several times in ...

Not highly likely, but technically possible, although have not seen an example "in the wild". There are published methods how to do that, but from what you posted, those are the "regular" hacks. Netinstall is always the safest choice, but 90% chance that deleting all this stuff ...

Hello, I have problem with mentioned device. I have 3 rd piece in my hands now from the same seller and same type but I can not achieve booting it via NETINSTALL software. Other Mikrotik devices I can boot and flash via this software easily (i.e. CRS125, RB941 etc.) !!! But this hardware I have real...

I feel a fear of the local network being hacked there. I have been linked on this topic via google because same feeling here. Hacked local network device can cause similar behavior / sniffing etc. It would be nice if we know the pool numbering is always from low to high or vice versa. In my case I'm...

I have a problem to disable visibility of Mac Server. I have restricted firewall and disabled PING on Mac Server also tried disable Mac Server and let it open fo IP address only but I can not rid of visibility of internal Mac Server doing above things - I have this issues with the cheaper devices on...

Well, reading about https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering Mikrotik VLAN filtering my friend assumed this could be the cause why it does not work as it should. I have followed manual and deleted previous SWITCH section in config and added BRIDGE1 filtering VLAN ...

Well I have changed config just to be sure my ports ether17-24 are physically correct (not HW damaged or HW related problem) and I used ether24 for WAN (internet) and let ether1 working as VLAN1, the starnge thing is that now I can work from ether24 correctly but ether1 as VLAN1 is silent, but VLAN2...

OK, it works now, I had all VLAN id leading to ether2. Still there is my problem of 16 ports working for VLANs resp. ether 1-16 are doing fine, ether 17-24 are still silent means that the problem I'm encountering is not related to firmware version... [admin@MikroTik] > export # jan/01/2002 02:02:46 ...

Configuration as I understood changes. It works for ether2 only now, other ports are silent for some reason. I wanted to downgrade to 6.35 with master-port but Mikrotik says even if downgraded there is no more master port available and config has to be reworked. So I'm staying with my 6.41.1 version...

With 6.41+ the config VLAN I did not experiment but the 6.35 VLAN config is refused and not working at all.

If I use your first config, all ports are working perfectly fine, if I use VLAN than 16 ports only for my hardware. Sure I can reset the device. There are several ways to reset it. Whitch way do you suggest for my case?

I was a bit curious whether new firmware can help all the VLAN working so I upgraded manually to version [admin@MikroTik] > export # feb/07/2018 20:18:37 by RouterOS 6.41.1 # software id = EPQU-RFSN # # model = CRS125-24G-1S and the VLANs completelly have stopped working with previous configuration....

Well, for some reason the last octel of ethers does not work - no DHCP, no internet if manual assigning. Any idea? ether2-16 works fine, ether 17-24 silent.

R.

I have nothing to say except that it works like a charm! LIV2, you have my thanks, you saved me a lot of time and digging arround. This CRS125-24G-IN is worth every penny device. Thanks again!

R.

Found the problem, it works now. One local expert helped me. I have missed "to-addresses=217.11.241.187" /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 to-addresses=217.11.241.187 However this is not real VLAN configuration. This is ROUTER/SWITCH and not the ETHER...

Hello LIV2, I have tested the configuration with static IP since PPPoE is available at my customer place only and it works for PING withi serail console to google DNS server also my iMac receive the DHCP address correctly but I'm not able to ping my public IP from my iMac and that means NATed intern...

WOW thanks a lot for complete config, I'm going to test it, hopefully it works and the trafic from other neighbouring networks is not visible for any user connected. I let you know.

R.

Hello Steveocee and many thanks for your reply. I have seen the WinBox with wine under OSX to download although someone has warned there is some unwanter software so I better avoid using this method under my iMac. Good so the key is WinBox means I have to install some VirtualBox and run the WinBox. ...

Hello guys, is anybody here to help me setup this clever machine to act as PPPoE WAN on ether1 with other ports behavior as SEPARATED VLANs with DHCP server and NAT function with firewall forbidden IPv6 in and out and ipv4 forbidden in and open to internet all common ports? I’m solving a few housing...