My take: 1- Plan your channels, both on 2.4 and 5Ghz so they don't overlap. It helps to use drawings of building/floor. 2- try to avoid DFS channels _if possible_ 3- use provisioning rules so you KNOWN which channels get fixed assigned to which cap. You can also use regex expressions if you name yo...

Looks like you configured steering profiles, but they are not linked to configuration profiles.. also do not use access-list for signal checking, it's thing of past. And try to define FT domain in security profiles, different number (hex) for each one. Anyway it's really a lot of SSIDs... We have a...

Looks like you configured steering profiles, but they are not linked to configuration profiles.. also do not use access-list for signal checking, it's thing of past. And try to define FT domain in security profiles, different number (hex) for each one. Anyway it's really a lot of SSIDs... We have a...

Hello everyone, So I bought a quite high enough number (about 50) CAP-AX APs and to be honest I need/want to know if I am stupid / did something wrong or the APs are not quit up to the task. So unfortunately I do not have plans of the building but is a 3 story building, interior walls are mostly bri...

Hi stefanelul2000 , Sorry that I cannot help with your question since I could not get to that point of the configuration as yet, but I have one question for you, you said that you are using FW 7.14.1 and from your config I saw that you are using multiple VLANs for the CAPs, just I am a bit curious ...

Hello everyone, We have recently switched our wifi setup to all Mikrotik CAP AX. We are using CAPsMANv2 but we are experiencing some strange behavior in the following situations: 1. FT and FT over DS disabled - Device will connect to wifi but not to the closes AP, thus low performance and it can be ...

Even if I accept the whole bgp-in without any discard or deny rul, the only route I am getting is 0.0.0.0/0

Does your Transit ISP send you full route?

Not sure, but based on what I'm getting / seeing, I'm not receiving a full routing table.

If i see your filters correctly it looks like you only accept default route at the moment 0.0.0.0/0, load balancing is only possible with partial or full routes. Than you kan also do a peer-prepend on inbound. Even if I accept the whole bgp-in without any discard or deny rul, the only route I am ge...

As soon as I set the bgp-local-pref, I am no longer getting any route form that ISP connection.

I have a /24 IPv4 which I announce via BGP via 2 ISPs. Primary ISP is 1gbps, backup ISP is 200mbps. With both peers enabled I am only getting ~200mbps download and 6-800 upload. This would somehow indicate that it's using the backup line but I don't think so. As soon as I disable the backup peer and...

Hello, I have just upgraded to Router OS V7.1 on 2 of my routers and everything seems to work perfectly normal with the exception of OSPF. OSPF works without any issues in Router OS v6.49.2 but I can't get it working in v7.1 I have attached the 2 router configs. For now I can only provide the config...

I have a problem with my capsman config, or the device it's provisioning to. On every android device I use to connect to this network I get an error "Internet may not be available" but on windows it works just fine. Also I see that not a lot of my clients are on the 5 GHz even thought they...

This is my config. /interface bridge add arp=proxy-arp fast-forward=no name="LAN Bridge" /interface ethernet set [ find default-name=ether1 ] name=ETH1-RDS speed=100Mbps set [ find default-name=ether2 ] name=ETH2-VDF speed=100Mbps set [ find default-name=ether3 ] arp=proxy-arp name=ETH3-LA...

I've disabled the first masquerade rule but still no luck. I have the following rules now but with no luck. /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=WAN2 passthrough=no src-address=192.168.88.5 add action=accept chain=prerouting dst-address=86.125.104.111 The man...

Yeah, I'm not getting exact what you are trying to say. I don't know what rules I should use or modify

Is your server addressable using the isp1 ip, then setup hairpin for that ip. If through second, then hairpin for second. If both, then for both. Well is accessible just using the 2nd ip, pppoe 2. My current Hairpin NAT looks like this. add action=masquerade chain=srcnat comment="Hairpin NAT&q...

Have a look at this thread: https://forum.mikrotik.com/viewtopic.php?f=2&t=142614&p=703175#p703175 You'll need: * separate routing table for the other pppoe * mangle (be careful with fasttrack in that case, as in the linked thread) or routing rule to push traffic over it I managed to mangle...

So I've tried to create a masquerade nat rule with src-address 192.168.88.5 and put it as the first nat rule but it looks like It doesn't do anything. /ip firewall layer7-protocol add name=dc-contab.root regexp=dc-contab.root /ip firewall address-list add address=217.10.195.122 list="WinBox Acc...

Recently I've bought a second ip from my ISP. Both ip's that I own at this moment are provided via a PPPoE connection. I only have one LAN network, I kept it the default 192.168.88.0/24. I have a server with the static ip 192.168.88.5. The server hosts a website and because of it I want the server t...

Recently I've bought a second ip from my ISP. Both ip's that I own at this moment are provided via a PPPoE connection. I only have one LAN network, I kept it the default 192.168.88.0/24. I have a server with the static ip 192.168.88.5. The server hosts a website and because of it I want the server t...

So I'm reviving this post. I have read and done most of it. I have access to the internet from both dhcp-pools but I can't access the 2 local networks from each other. I mean I can't access any device on 192.168.200.0/24 from 192.168.88.0/24. What's more I can't access my GRE tunnel from local lan (...

If you are able to get gigabit speed from local ISP and you are not happy with hEX and RB3011, then you may consider CCR1009 router. I have brought two located in different countries. Back to your question, you are asking for the comments on the two products wAP ac and cAP ac. I do not know whether...

Check https://mikrotik.com/product/RB3011UiAS ... estresults you will see that RB3011 can do 1Gbps but of course it will depend how you use it.

I looked and on 25 firewall rules it caps at 836 mbps.

Sent from my SM-N950F using Tapatalk

If you are able to get gigabit speed from local ISP and you are not happy with hEX and RB3011, then you may consider CCR1009 router. I have brought two located in different countries. Back to your question, you are asking for the comments on the two products wAP ac and cAP ac. I do not know whether...

So the idea is that I want to use mikrotik through my house. I have a gigabit connection with my ISP so I want some Access points that can withstand this speed. Also I will need a router recommendation because I think a Hex is not enough and neither a RB3011. Thanks Sent from my SM-N950F using Tapat...

By adding routes manually on your PC, not to route specific networks over the tunnel.

So by default L2TP routes all traffic through the VPN?
How can I manually add routes to my pc and is there any way I only gain access to the network but access the internet using the local network?

Long story short, I managed to make the vpn work giving access to LAN and internet but I have a problem. When connected to the vpn I loose access to my local network, what can I do to have access to both the remote vpn network and local network, let's say for example to use a local printer.

proxy-arp on lan yes. And when I connect to my vpn I can ping just the router anything else results in a loss of package, including web access, remote desktop or anything else.

I've setup my VPN using L2TP but I am unable to "see" anything in the VPN LAN while connected. I want to use the VPN without it being a gateway, so just access to that IP addresses. Any idea on how I can fix this?

Thanks