MikroTik

macsrwe

Prior to solving my problem, I was connecting to the SSID from the iPhone, and getting a valid IP address and netmask (but not a Router or DNS value). MT app would happily "discover" router (same as neighbor mechanism, I guess) but refused to log in with correct name and password, instead ...

macsrwe

I gather Wireguard is a later version of the sort of thing we used to do with creating an L2TP login. But I'm not remote (it's a mobile router and I'm just feet away), and it can't even get onto the Internet before I've completed this massaging at each new location, so I don't believe it's a solutio...

macsrwe

I've been retired five years and I'm a little rusty, so be kind. Working on a project where I needed to arrange for Winbox (computer) and MT app (iPhone) access to a dumb wireless pass-through bridge (a wireless station, but I mean it doesn't route) that couldn't be reached by other means. I need to...

macsrwe

Now that hEX Refresh has an ARM CPU, does that mean it can run Dude?

macsrwe

To import an existing adresses.cbd on MAC OS you have to put addresses.cbd (or a link to it) here: /Users/<user>/Library/Application Support/MikroTik/WinBox First, thank you for being the only one so far to even attempt to provide this explanation lucidly for MacOS. But I still can't get it to work...

macsrwe

I've started to get this from the Dude a couple times a week about a specific router, usually followed within a minute by, "is now up." I'm not sure exactly what it is I'm being told... that is, what does it mean for the "cpu service" to be "down?" Clearly the router ha...

macsrwe

Or use the terminal command
Code: Select all
/interface wireless
set [ find default-name=wlan1 ]  antenna-gain=0 

Bingo!

I'm really surprised (but so grateful) that they left that in the CLI!
Thank you!

macsrwe

no need to netinstall
https://help.mikrotik.com/docs/display/ ... g+RouterOS

Ooh! Super-great catch! I've never seen that. That's fast and easy enough for me to do tomorrow morning. I think you just saved me a lot of grief. Thanks!

macsrwe

Yeah, that old trick failed me -- there IS no Antenna Gain field anymore!

macsrwe

The LHG tx is so poor that it can't even maintain registration with the cameras for more than a minute or so at a time. The idea of dropping to v6 is interesting -- I thought the regulatory limitations were baked into the unit at a lower level than the OS, but I suppose there's no reason not to try ...

macsrwe

One very strong AP is not what is enough for longer distances. The antenna gain must be at both sides. Well, certainly, I agree. I'm familiar with this principle (I blogged about it back in 2012 ). However, as I mentioned, the -55 signal FROM the cameras is more than adequate. It's entirely the sig...

macsrwe

The two cameras occupy the same post, the east one two feet above the west one (photo), so directionality of the LHG should not be an issue. Both cameras are returning quite adequate signal to the LHG. The cameras run on internal batteries with a solar panel and have their own internal radios. There...

macsrwe

I posted this in the wrong forum and got zero replies, so I'm trying here. Monday, I erected an RBLHG-5nD to feed two Ring security cameras only 190 meters away. The aim seems to be on the money, and the LHG is seeing -53 and -59 from the cameras. However, the cameras are seeing -74 and -72 from the...

macsrwe

Thanks, you are all 100% right that turning off "Open in New Window" cures this behavior. And since the router window now contains a "New Winbox" menu (I don't think that was always there, or maybe I've just overlooked it since 2006), that's now an easy feature to abandon.

macsrwe

First off, let me say how delighted I am to have finally gotten WInbox (64-bit) and Dude (32-bit) running under a common installation of Wine. I can finally stop paying forever for Parallels. (I don't think I did anything different, I think they improved Wine to make this work.) But on this newer ve...

macsrwe

Yes, 7.13.2, sorry.
Thanks for letting me know it's been reported. Guess I will wait for a solution. Meanwhile, fixing wireless problems from the road just got a lot harder.

macsrwe

Seriously, nobody is seeing this except me? I'm seeing it on multiple devices. Just today it happened on an older SXT 2 lite, and I wasn't able to do anything with it because the menus are all useless. Winbox doesn't have this problem, only the iOS app.

macsrwe

I recently transitioned two of my networks from ROS 6 to 7. Lots of great things I enjoyed, especially two annoying stability problems that just up and disappeared entirely. But I'm getting sandbagged by my iPhone MikroTik app, which is now occasionally presenting me with a WiFi menu containing zero...

macsrwe

Maybe, and maybe not. The file at that URL has lots of mentions of Windows and Linuxes, but not a word about Macs. Or perhaps the phrase "FOR MAC" meant something else.

macsrwe

FOR MAC - https://tangentsoft.com/mikrotik/wiki?n ... 20on%20EL9

Do you have the un-truncated URL?

macsrwe

Question about the wifiwave2 repartitioning:

Is any of this going to fix the issue where on an Audience, you can get WPA3 or you can get meshing, but you can't get both?

If not, is it because the task is impossible due to hardware/protocol limitations, or possible but just not coded for?

macsrwe

Have you very smart people any idea what program is doing this, yes this is a pc in laddys room! Yes I have now disabled SSH 13:19:26 system,error,critical login failure for user from 192.168.0.188 via ssh 13:19:26 system,error,critical login failure for user admin from 192.168.0.188 via ssh 13:19:...

macsrwe

Indeed, there are so many required actions that tools that are not Winbox are often not useful.
I recall discovering to my dismay that an earlier version of the Mikrotik phone app had no mechanism to move firewall rules. You could add all you wanted, but could never slide them into the proper order.

macsrwe

In fairness here, a context option for "Copy" in firewall, in winbox – that doesn't seem like a bad idea. We've come full circle here -- the original post observed that "the copy command is only available in Winbox." The procedure is: open a rule, click Duplicate, edit the new r...

macsrwe

The old Wine is 32 bit and no longer works on 64-bit Macs. The new Wine64 works on 64-bit Macs, and works fine with Winbox because Winbox is now 64-bit package. But there is no 64-bit version of Dude and Wine64 refuses to run the 32-bit version.

macsrwe

I'd be satisfied if somebody would just give it a 64-bit recompile so I could continue to use it with Wine on a modern Mac. What is the issue on modern mac? Dude Client 64 bits Yeah, I realize that by installing YET ANOTHER emulator substitute on my Mac, I could run the Dude as well as Winbox. But ...

macsrwe

I'd be satisfied if somebody would just give it a 64-bit recompile so I could continue to use it with Wine on a modern Mac.

macsrwe

Amazing timing! The problem solved itself!
Today, Amazon announced they will be discontinuing Amazon Smile as of February 20.

macsrwe

I thought I would "try something simple" today, and (of course) it wasn't. I thought I would try to set up a rule to redirect all references to amazon.com or www.amazon.com from my LAN to go to smile.amazon.com instead, for the obvious reasons. First I tried using the proxy, as suggested h...

macsrwe

So if there's a vendor that sees market in PoE switches, why should they bother with proprietary passive PoE if they can go for 802.3 af/at/bt standard, there are only 3 of them (if I'm not much mistaken) and are backwards compatible (if I'm not much mistaken). Historical happenstance. When these p...

macsrwe

A interesting observation.
I wonder if the analogous control on a Mac to the "interface metric" on Windows is "Set Service Order."

macsrwe

Whenever I have scripts that need to tell me something, I usually do both a :put and a :log warn, because I can never be sure in what environment they're going to be running. I realize in the app, you can't have both the scripts and the log windows open at the same time like you can in Winbox, so th...

macsrwe

Looking forward to MUM returning to USA. Any prediction as to when MT will be willing to wager on normality?

macsrwe

I don't think anyone has a "matter of trust" with MT. We're just puzzled as to why they would put in the work to provide the Terminal menu function in the Android version, but leave it entirely out of the iOS version.

macsrwe

No, on XNU "Xnu is Not Unix" / Darwin

Sorry, I learned something today.

macsrwe

There is an iOS app named Shelly that allows SSH connections to addresses, but of course I don't know how much of the underlying mechanism they had to provide themselves, because iOS is not built on a Unix base

macsrwe

scripts are ran through Terminal which is not available on IOS.
Not sure why IOS bans use of Terminal in MT app.

Scripts can be run by clicking the Run Script button. Scripts can be edited in the app also. You don't "need" terminal to run scripts.

macsrwe

I assume it's because Android has *nix underpinnings/hooks, while iOS doesn't.

macsrwe

Holy ****! That went right over my head! The customer did that, and I never even noticed. (My recommendation of 5320 got transposed at one point to 5230 and that was the number he ran with. I would have noticed the lack of bold type; he didn't know what it meant.) So the frequencies were actually ov...

macsrwe

ROS is all 6.45.1 Bridges are in transparent mode (bridge/station-bridge). b-c using 5230/20/an, f-g using 5220/20/an. I thought I was guaranteed no mutual interference between single 5GHz channels. I found a hole at 5200 and threw f-g down there, and the problem went away. I learned something new t...

macsrwe

I can't run iperf between MT routers without a non-MT host, which would be significant effort to set up at a site that isn't mine. Plus, I don't understand what I would learn from testing UDP when my problem is TCP speed. The RTT end to end (b-g) runs a trivial 1ms on nearly every ping, with very oc...

macsrwe

Customer's workplace has no Internet provider, so he has installed a small custom all-Mikrotik network to feed Internet from his home, approx. 3km away using a pair of SXT5sq in transparent link mode (b/c), a POE switch in the shop (d), and a small MT router (in bridge mode) to supply WiFi signal (e...

macsrwe

Well, something is definitely not right. Tonight we used Chrome to try to update this switch. It's clearly the right model and the right firmware. Screen Shot 2021-07-21 at 7.42.57 PM.jpg Screen Shot 2021-07-21 at 7.43.54 PM.jpg I started by just trying to upgrade manually from the 2.13 file. Failed...

macsrwe

Bought two to test-fly in early days, was appalled at management UI and funky mount/cable hardware, used them up until they fried then trashed them.

macsrwe

The true question is, why on 6 years you try to update the device only now... (reading the changelog) For example "Deliberant" devices now are useless without flash player... Why? Because equipment owner called me to get help now, so I am attempting to upgrade them now. (In my experience,...

macsrwe

Sorry to be an asshole for explaining for the second time why a suggestion (that wasn't the info I asked for) wasn't possible in my case. But I do thank you for your kindness in eventually answering my original question. Update attempts were being performed using Edge browser (no idea what version) ...

macsrwe

This doesn't appear to be a helpful suggestion. I already took care to mention that the unit is remote and not physically available to me, so anything that requires me to "hold the reset button down" is a deal-breaker. There is also no local MikroTIk router in the facility that I could use...

macsrwe

I have a client with an RB260GSP(CSS106-1G-4P-1S) that hasn't been upgraded since 2.4. Attempts to update to 2.13, both from the web and from a local file, fail. In standard fashion, I munged the URL on the Software page to find older releases. It seems I can get back to 2.9 by doing that, but no fu...

macsrwe

How do you delete saved device/group from app?

EDIT: Nevermind, noob on IOS, found it. :lol:
Can you share the process of deleting a Device.
Thanks

In IOS, drag it left.

macsrwe

Netinstall works, not all users do! Say thank you for not stumbling upon this issue (yet) and move on if you have nothing better to add. I've always wondered if the reason I routinely encounter this problem is because I'm not running on a physical PC, but inside a Windows VM on a Mac device. Just f...

macsrwe

How do I associate a saved router with a group? If I do as little as edit the name of a saved router, it gets saved into the "No group" group. I can delete the router entry, but I can't move it up or down, and there's nowhere to specify the group on the page where one adds or edits router...

macsrwe

I appreciate your input, but your advice seems entirely log-specific. I am not doing anything with logs. I am working with scripts and date-time variables/data fields in configuration records.

macsrwe

This shouldn't be rocket science, but it's beginning to look like it is. I'm trying to scan a set of firewall address-list elements to see which one was most recently added. That means doing date comparisons. I can't get them to work. I've determined that when I do [/ip firewall address-list get [fi...

macsrwe

Since an upgrade to Winbox that happened in 2019 or so, some people running a WIndows 10 VM under Parallels on a Mac with a Retina screen have had a problem where the Winbox window panes and character type always open at a very tiny size, and need to be "Zoom(ed) in" several times before n...

macsrwe

How do I associate a saved router with a group? If I do as little as edit the name of a saved router, it gets saved into the "No group" group. I can delete the router entry, but I can't move it up or down, and there's nowhere to specify the group on the page where one adds or edits router...

macsrwe

Since there's no terminal in the app, what do people do instead? Are you sure there's no?.. At least in Android version we have one. There's no Terminal (or New Terminal) in the top-level menu, and no Telnet in the Tools menu. Maybe it's hidden somewhere else, but it's not where it would be in Winb...

macsrwe

On another note, my usual practice to test for DNS failure is to go into terminal and type ":put [:resolve some_domain_name]". Since there's no terminal in the app, what do people do instead? Maybe it would be a good idea for MT to add a "resolve" screen inside the DNS tool, or i...

macsrwe

How do I associate a saved router with a group? If I do as little as edit the name of a saved router, it gets saved into the "No group" group. I can delete the router entry, but I can't move it up or down, and there's nowhere to specify the group on the page where one adds or edits router...

macsrwe

How do I associate a saved router with a group? If I do as little as edit the name of a saved router, it gets saved into the "No group" group. I can delete the router entry, but I can't move it up or down, and there's nowhere to specify the group on the page where one adds or edits routers...

macsrwe

Advice was to send us a configuration export so we could help you. Still has not been done.

macsrwe

Today I ran software upgrade on a 2017 mAP mini. It was running 6.39.3, and I upgraded it to 6.45.7, the last version I vetted before I sold the wireless business. When it came back up, I couldn't log in with either the established password (with which I had just been in) or the default password. I ...

macsrwe

Can anybody please confirm if the “Mikrotik” iPhone app is available on Mac App Store? Or have they opted-out of it?

Still there. Try this:

https://apps.apple.com/us/app/mikrotik/id1323064830

macsrwe

Next run you compare the newly fetched script with the stored script. Here is where you just kicked the can down the road. The running script can't compare the two script files for same or different because of the variable size limitation -- precisely my original complaint. My original comment was ...

macsrwe

Apparently, only the MikroTik smartphone app allows this syntax -- Winbox flags it as invalid.

And it doesn't actually work, so I guess the answer is no.

macsrwe

I'm doing "kid control," blocking some sites between bedtime and the end of the school day. The firewall time field allows constructs such as: chain=forward action=drop src-address=192.168.1.99 dst-address-list=BlockedSites time=21h30m- 1d 14h30m,mon,tue,wed,thu,fri Does this "do the ...

macsrwe

Thank you! Making those firewall changes did the trick.

It's a shame it's apparently too much to expect MT to update the Wiki with these important instructions, without which EOIP will flat never work.

macsrwe

I have two MikroTiks that can ping and traceroute each other fine, but attempting to set up an EOIP tunnel between them isn't resulting in an active tunnel. Nothing I can do makes it go into the running state. There are no log entries, and no log message type I can find in /system logging that would...

macsrwe

Yes, please! and don't forget to send us the t-shirt and device!

Which in keeping with the theme should be a Snapchat filter and a CHR.

macsrwe

Wow. Just wow!

macsrwe

To create a config file from your working config, use: /export file=choose-your-flle-name.rsc The /pub folder is a public folder for SMB file sharing, unless you specifically set that up (I don't know anybody who does), it would be empty. The /skins folder holds custom skins you created for Webfig (...

macsrwe

Ugh. Coincidentally, I tried reading this writeup several weeks ago just for continuing education purposes, got total brain cramp from it, and gave up. It looks like it was written to control two gateways into the same edge router, where routing marks are already in play to load-balance traffic. In ...

macsrwe

I have a wireless network serving an outdoor location, configured as a ring. There are two gateways (DSL), at opposite (geographical) ends of the ring. OSPF is set up in simple fashion to deliver traffic to the closest gateway, and to reroute all traffic to the working gateway if a gateway or interv...

macsrwe

Very strange that mikrotik don't plan to finally fix this issue once and for all for many years now.

MikroTik has never even acknowledged that this issue exists.

macsrwe

I have put UDP/123 log rule on top of INPUT chain before ACCEPT related,established,untracked. And I also made sure fasttrack was disabled.

Where it is is only half the question. What it is is the other half. Could you please export your firewall rules and post them here?

macsrwe

One very common reason for NTP replies to fail is that good administration practice requires you to block NTP requests coming from the WAN interfaces. However, if done Incorrectly, this will also block all replies to your own NTP client. The proper security blocking rule includes connection state in...

macsrwe

All ROS can run SNTP client.

To run NTP server you must include ntp package. Then if you also run client, you are running NTP client; which I believe is not the same code as SNTP client, which is unavailable when ntp package is present.

macsrwe

If you know for sure the BOGON address your ISP is going to present you, just put a FW rule ahead of the blocking one that jumps around the blocking one for traffic from that address. That lets you continue to decide what input and forarding traffic you are going to accept from the ISP connection, b...

macsrwe

Looks like Winbox needs an adequate beta test program. What it has now doesn't even pretend to qualify. This sort of thing should have been nipped in the bud prior to release. Now we can't get rid of it.

macsrwe

NTP DDoS is extremely low probability, since only one router model is reporting this issue so far (correct me if I am wrong). Also, to prevent DDoS, your firewall should be blocking "new connection" and "unrelated" NTP traffic from the WAN interface(s) (don't block all incoming t...

macsrwe

Actually, for illustration purposes, I probably should not have used the ROMON window, but the standard Winbox neighbors window: Screen Shot 2020-04-23 at 2.22.00 PM.jpg If a router has no IP address defined, the MAC address still shows up here, but the address is 0.0.0.0. You can still do a MAC log...

macsrwe

I just logged entirely out of Tapatalk and back in, and I'm still getting the "SQL error" message on the Mikrotik forum, though other forums continue to work.

macsrwe

ROS firewall fakes connection state for UDP connections. Might not be as accurate as for statefull protocols, but helps to make constructing firewall filter rules easier. Probably helps for performance as well.

Good to know, thanks. I've never had reason to block UDP.

macsrwe

The output of that print is completely empty (as expected - noone else has access to the router and I don't use the default config setup at all, I always do a reset to a blank no-config state and only configure the desired fuctionality from scratch). As do I, without fail, but not running the defau...

macsrwe

Mangle is the wrong tool for this job. Firewall can block connections with these parameters most straightforwardly. If you are rejecting or accepting traffic on connection-based protocols (e.g., not UDP), you should always use connection-state=new. This causes the firewall rule to be checked only on...

macsrwe

N rates table is not under "Data Rates," it is under "HT MCS."

macsrwe

Still is the issue with forum opening with Tapatalk? I have following error at iOS

Still broken. No action. Sigh.

macsrwe

If you're trying to enter over the WAN port, you will fail because default configuration blocks login. If you're trying to enter over the LAN port, and you have reset the unit, there is some other issue I can't definitively name.

macsrwe

If I were going to allow transferring a backup to another device (as the official docs do indeed mention) I don't guess that's a feature I would have included as default Backup was never designed as a migration method. The document concedes that it kinda sorta works with some limitations, but nobod...

macsrwe

Wine seems to work fine with Winbox on a Mac FWIW as long as the router is giving out an IP

Mac WInbox works surprisingly well even with MAC address connections...

macsrwe

Let me take a contrary tack... if the 5GHz frequencies work interunit, then fine; but you may discover that need to resort to the 2.4 instead to penetrate all those walls, especially the exterior walls. As far as naming the SSID's same or different, there are issues either way. If they are all the s...

macsrwe

Hi, I don't understand the following syntax. What does the 0 there represent? Is it a username or what? 1 https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router#Access_by_IP_address " Access by IP address Besides the fact that default firewall protects your router from unauthorized access ...

macsrwe

You can if you name your queues with a first character that is a digit, otherwise you would have to do :find of a collation string. There's no function that returns the raw byte value of an arbitrary element.

macsrwe

Please help me . how i can identify that i have poe version or not , because on mikrotik website manual says omnitik is with poe output. Even easier is to examine ports 2-5 -- if they have a yellow border on the label, they provide POE, otherwise, they do not. True of all MT products.

macsrwe

Post your configuration.

/export hide-sensitive file=whatever.rsc

macsrwe

I think you're worrying needlessly. The ports in question would be on the forward chain, not the input chain, so they wouldn't expose the router itself to anything. They would only expose the gaming device, but no more than it is already exposed by attaching directly to the modem. If you're not worr...

macsrwe

Metal 52 runs 5 or 2.4, not both at the same time. So no dual.

macsrwe

I get the routers to show up in Netinstall and choose my packages but when I press Install it does nothing. The "Ready" will disappear for around 5 seconds then come back up.

This is the symptom of a very common netinstall problem with an easy solution in most cases.

macsrwe

The original problem is to take a very limited number of public IPs and serve a data center (many devices), only a few of which he wants to be directly accessible from the outside. That requires a NATted LAN. That requires /firewall ip nat entries.

macsrwe

Using this 2 simple steps I can crash it pretty much on demand with any ROS version up to 6.47Beta54 within less than 10 minutes.

Is this specific to hAP ac2, or is it reproducible on arbitrary models?

macsrwe

"Inner window size" problem not solved From posted change list, I inferred that they admitted in advance that this part of the problem was not yet solved. Baby steps, I guess. I wish things got broken only in baby steps. "Check for update" still does not admit availability of th...

macsrwe

I think you can try this way:
Just have a try , i didn't test it.

Nothing in your example addresses his public IP issue.

macsrwe

You are using webfig or WInbox. These are handy tools, but do not provide complete information on your configuration.

Either use a Terminal window in Winbox, or ssh into your router to obtain a native terminal window.

macsrwe

The problem with expecting the MikroTik bandwidth test to show you an accurate wireless throughput is that most of the units dedicated to serious wireless don't have powerful CPUs, and the CPUs at the far end max out trying to run all the bandwidth test servers long before the wireless link is satur...

macsrwe

Although one might infer that a wAP is directional from its wall-mount design, it is in fact omnidirectional.

macsrwe

using the antenna that came in the box, both are 52ac so hoppfully they aren't the wrong ones from packing. So the OmniTIK would be better with its dual chain? then I thought of putting a mAP lite on each one for clients to connect too. Do you want an indoor or an outdoor machine? Because mAP lites...

macsrwe

Just remove usermanager unless you are using it?

I would have to assume that if he wasn't using it, it wouldn't be storing transactions on disk or logging error messages.

macsrwe

currently its floating around -71/-72 and they are on 50ft apart. That's extremely punk at 50'. Something is wrong. Sorry for the basic question, but what antenna do you have attached and are you sure it's rated for the frequency you chose? A couple years ago, I asked MikroTik a relevant question; ...

macsrwe

Assuming you means "cars" as in automobiles (i.e., as opposed to "AV carts"), I would expect you would like a weatherproof unit. My first choice would be one of the wAP models.

macsrwe

If I understand your request correctly, you have multiple public IPs available at your WAN port, you have several public servers on your LAN, and you want each of those servers to be accessible from and to use one and only one of those public IPs pemanently. If this is so, the configuration is mostl...

macsrwe

Check the casing on that bad boy before returning it to service. We've had consistent case failures on these units, unlike any other MT unit we use.

macsrwe

Tried exporting firewall filter and nothing came out for line 22 instead, a bunch of blocked IP came out for line 23. @macsrwe like you said its definitely not line 23. I will try exporting line 22 again tomorrow. But looks like either its already "deny all" so nothing came out or im doin...

macsrwe

However, the default firewall rules in RouterOS do not have ALLOW for all the desired traffic but a DENY of all traffic NOT originating from LAN. So, when you add a DENY ALL rule at the end of that, without first adding some more ALLOW rules for management etc, you will have locked yourself out of ...

macsrwe

Curious... this is the opposite of the advice I have always heard, which is to craft firewall rules to explicitly allow the traffic you want to allow, then "deny all" at the end. Almost invariably for the input chain, and perhaps for the forward chain as well, depending on your application...

macsrwe

For one thing, a separate Radius server allows you to use an online billing service other than the one or two that ROS supports.

macsrwe

Rule 23 is definitely not a "deny all" rule -- it only denies traffic that matches the specified source address list. Rule 22 "looks" like a deny all rule, but it's impossible to tell from a Winbox window whether or not there are additional conditions set in columns that are not ...

macsrwe

Yes, i guess they sould implement some kind of a popup message informing the user of a success or failure... Not logical. They do report success. They cannot explicitly report failure due to an MT bug that aborts the process without intending to. To me it would be obvious that netinstall not succee...

macsrwe

Yes, i guess they sould implement some kind of a popup message informing the user of a success or failure...

Not logical. They do report success. They cannot explicitly report failure due to an MT bug that aborts the process without intending to.

macsrwe

had cases where i tried 4 different versions, isnt that obvious that i was closing and opening the program again ? So if that's the case as soon as i opened netinstall for second time, it should have worked... But it didn't... Also, tell me how do you explain that it does not work the first time bu...

macsrwe

The proccess is : ready -> formatting ->installing-> reboot I 've never seen a case where the above 4 steps completed one by one but netinstall did not actually happen.. So i guess the progress bar might went full but actually you never saw the words formatting and/or installing ... Usually what yo...

macsrwe

ctrl-c, ctrl-v everywhere... +1. I have never found a MikroTik user who found the current ^v "lock" feature useful. Conversely, I have assisted a number who were screaming "Jane! Stop this crazy thing!" after having activated it accidentally. Maybe it's time to bite the bullet, ...

macsrwe

Launch Netinstall, quickly select "previous install" (it's always selected, by the way) and press "Install"? No, this not helps. Please don't suggest changing the version of Netinstall, changing the network adapter and other irrational things anymore. At first, I have alredy che...

macsrwe

If even 6.45.7 is not a long-term solution to the problem, a workaround could be to permit access to public NTP servers (and nowhere else) to just one of those devices and let the other ones synchronize from it. I read this as: let some other device on your network run NTP server. That's great as l...

macsrwe

The interface menu retains total bytes/packets in/out for each interface. You can copy out the numbers on the first of each month than zero it for next month. If router is not rebooted for all month :) One nice thing I will never hesitate to say about using MT gear over the past 12 years is that gr...

macsrwe

System->auto-upgrade, still problem, from ftp source !! ehhhh.... I'm very unhappy with MikroTik's recent release performance. They are releasing new features while at the same time breaking old features, then never fixing the old features. System auto-upgrade hasn't worked for months, the Dude is ...

macsrwe

Thanks, but powering a Powerbox Pro is irrelevant to this thread, as the subject problem is present only in older Powerbox (not-Pro) and original Omnitik models, which use passive POE only. Our experience was that the issue showed itself over as short as an 8-meter cable, about the absolute minimum ...

macsrwe

No hard feelings, thanks for all your work.

macsrwe

Then why Dude does not crash the other 30 devices? It chose just to crash the 4011 ? The other 30 do not use ROS @macsrwe ? The Dude is executing only on the 4011, isn't it? Or did I misunderstand the original post? It's comparatively unlikely that the Dude would be crashing a machine other than th...

macsrwe

Color me dubious. I've upgraded netinstall dozens of times over the past 12 years, and since this problem started showing up about four years ago it has never changed.

macsrwe

If that happened, i do not know how, but lets say that dude does that, you wouldn't get "router was rebooted without proper shutdown" but just a "router rebooted"... The message you get means that the router neither was rebooted normally or shutdown through it's menu but that it...

macsrwe

I think you ought to report this as a bug. As I showed in the image, it's still possible for ROS to report a yes setting that was set some time ago, but if it no longer allows you to set a yes setting, I really believe that is a bug. These devices need that setting to run in almost all situations, w...

macsrwe

But as compared with the article, I don't see a progress bar, flashing process took 3-4 seconds and then router's status becomes "Ready".

I strongly suspect you have encountered a common netinstall problem where the install just doesn't happen. Fix is in the link.

macsrwe

My next suggestion was going to be for you to run /system default-configuration script print and peruse the output for matching strings, in case someone had established a non-standard default configuration on your router. But if mrz says this is a known bug, then it is. (I bet if you ran the command...

macsrwe

I don't know if this satisfies whatever requirement you envision for management, but the standard way to configure this is to make the two SXTs into an L2 bridge on a /29 or so, and just have the hosts at either end treat them as a stupid cable. (Don't try to run OSPF on the SXTs themselves, they wi...

macsrwe

I am trying to imagine Ethernet connectors that will fit into a standard jack, and yet are too wide to fit through a Groove cap with the rubber grommet removed, and also too long to fit into an SXT with the door closed. I think a model of "tool-less" CAT6 tips I once carried may fit this b...

macsrwe

So just to confirm theres nothing i can do to wirelessly bridge and mesh using the cap lite units? You can, but doesn't provide optimal signal coverage. Instead of putting an emitter right in the remote room where you need one, you have to locate the emitter halfway between there and your base unit...

macsrwe

wireless - added "U-NII-2" support for hAP ac2
ok, but where did U-NII-3 missing??
U-NII-2
what does that mean?

GIYF...

macsrwe

Freshly rebooted and I have these environment variables. Any ideas what they are? They look like scripts? And some are quite long. If I delete them, they'll remain deleted until the next reboot. They are global functions . From the behavior you describe, your router executes a script on startup tha...

macsrwe

I'm not an authority on roaming. From what I've gathered from some threads I've read, there are three networking standards that have to be implemented to achieve seamless roaming, and MikroTik has implemented (I think) part of two and none of the third. I would recommend you search this forum for th...

macsrwe

It's a bit of busywork, but you could create a tunnel interface (PPTP, L2TP, EOIP, etc.) between routers A and C and test through it.

macsrwe

Sometimes you can achieve adequate "near line of sight" connections with 2.4GHz, though spectrum is crowded. Better for NLOS is 900MHz, but it is even more crowded. 5GHz and higher, you need true line of sight. You can use Google Earth's "viewshed" feature to determine line of si...

macsrwe

Nobody is answering because the question doesn't make sense. From Wikipedia: A mesh refers to rich interconnection among devices or nodes. Wireless mesh networks often consist of mesh clients, mesh routers and gateways. Mobility of nodes is less frequent. If nodes constantly or frequently move, the ...

macsrwe

I ve used this command on a 6.44.2 Version that was Released on 2019-Apr-01 12:47 ... So, how sure are you that the above does not work ? This thread is a duplicate of this one . The command works (and is necessary almost always) on Powerboxes. It does not work (nor is it necessary) on Powerbox Pros.

macsrwe

There is no "in other words." In this post , you say, "I bought a Mikrotik PowerBox (didn't realize at the time there was a Pro version)." You have Powerbox, which is old model (although still sold) and uses only passive POE. ROS command shown is available on old model, and usual...

macsrwe

The interface menu retains total bytes/packets in/out for each interface. You can copy out the numbers on the first of each month than zero it for next month.

macsrwe

I have already told you the most straightforward way to pursue this issue. Let me know when you have performed it.

macsrwe

Your new figure contains nearly no IP address labels, so I can't follow your explanation. If you have determined that return routing of messages from 10.6.0.4 is failing with OSPF enabled, then run a traceroute from 10.6.0.4 to the original origin of the message, examine the results with OSPF disabl...

macsrwe

True... I only suggested it might do "what he actually wanted," not necessarily "the way he thought he wanted to do it."

macsrwe

Frankly, I'm flabbergasted to learn that anyone is deploying Discs indoors. Then again, with all units I have had with split casings, maybe that is the best place to deploy them.

macsrwe

No, they have not removed it -- it is just hidden well, as it always has been. See image, taken today on operating equipment. If you had followed the instructions in the 2014 document, you would have found it. Note that this parameter is only available for old models of outdoor POE-out units that do...

macsrwe

Best explanation of this entire issue is here: https://wiki.mikrotik.com/wiki/Manual:Wireless_Station_Modes Once you understand section about "limitations of L2 bridging," you will understand how all the other modes work the way they do, and that the proprietary extensions like "stati...

macsrwe

MKT tends to restrict more and more the rules per regulatory domains, with every new release. In all fairness, MikroTik is being told by national governments to obey more and more restrictions to obtain certification to sell in that country. Gone are the days when the end-user engineer was responsi...

macsrwe

Check out the "kid protect" feature, it may do what you need.

macsrwe

You did not include the firewall rule, which is necessary for any rational attempt at analysis. Preferably, all firewall rules, so that applicable prior rules can be inspected as well. You will note that the number of packets is wildly different as well. Clearly the firewall rule isn't doing what yo...

macsrwe

The limitation of bandwidth-test is that the number of server processes it starts often saturate the CPU well before the communication channel. It is best performed to a powerful router beyond the router you want to test. Using the "both" mode doubles the number of server processes, which ...

macsrwe

In smartphone app, tools / graphing / interface graphs has useful sliding bar that measures traffic volume at any time, but should also display the time/date, which is available nowhere, including x axis

macsrwe

You may be looking for the problem on the wrong unit. OSPF should be constructing reciprocal routes on the other unit, and those may be wrong. Torch the interface at 10.6.0.4 to see if your requests from 10.200.0.4 are arriving and departing. Torch the interface at 10.200.0.1 and I suspect you will ...

macsrwe

So putting the little ones in bridge mode should do the trick? In that event, do I exclude their ports (the ports they are connected to on the RB3011) from the bridge on the RB3011? No, put everything on the bridge. You need only one "router" for your house, at the ingress point. Everythi...

macsrwe

Maybe your ISP's router is miffy about talking to anything that hasn't gotten its address through their DHCP server.

macsrwe

Sorry, I misspoke. The function is :tostr, not :tochar.

https://wiki.mikrotik.com/wiki/Manual:S ... g#Commands

macsrwe

Suggest you send this directly to support@mikrotik.com to get manufacturer to address this.

macsrwe

Optimal procedure would be:

Take supout
Save supout
Reboot router
See if problem went away
If not, take second supout
Send supout(s) to support@mikrotik.com along with description of what happened.

macsrwe

The way I'm interpreting this question is: he has a custom default configuration he wants to impose with netinstall, and the script he created works when he invokes it by hand, but it doesn't work when invoked automatically at router reboot/reset-configuration time. If this isn't correct, apologies....

macsrwe

All I could think of is that in Winbox, wireless interface shows up in italics as inactive (which someone may mistake for disabled) when no one is registered to it. Either that, or this is incompetent commercial spam, following the sudden rash we have been experiencing on MT forum this week (see OP ...

macsrwe

Good day all, I am in South Africa and have a Mikrotik LTESXT kit with a Hikvision IP camera connected to Port 2 with POE. I can see the camera on IVMS 4200 if LAN cable is plugged into my PC,but as soon as i take it out i lose connection. Do you lose connection because Hikvision loses power? Widel...

macsrwe

You could try physically tilting the AP... but that might not solve your underlying problem anyway.

If your router is having problems penetrating to the floor above, your devices on the floor above are likely to have exactly the same problems penetrating to the router on the floor below.

macsrwe

This company still using mainframes with timesharing? "CP\CMS GOING DOWN IN 00:05"?

This is not a networking function OSI layer 1-3. They need to invest in some sort of groupware application OSI layers 5-7.

macsrwe

Common problem. Use [:tochar ] (correction) [:tostr ] to turn variable contents into a string instead of a numeric address.

macsrwe

I suspect you have discovered another user-interface pessimization caused by the new update mechanism introduced in 6.46.2. You can read much about it here, keep searching for posts containing the words "hidden" and "hide."

macsrwe

Lacking some terribly basic information, such as: what model equipment are you talking about?

macsrwe

Lots of reports of NTP package causing reboots in recent releases, this may be your only problem.

MikroTik is not guaranteed to be here. To assure MikroTik attention, email bug report to support@mikrotik.com.

macsrwe

ROS does not allow this. You would have to downgrade all of ROS to that version.

macsrwe

You would think so… but as I already said, those lines are no longer useful to clear any part of the memory log, assuming they ever were. Seriously, try them – they do nothing.

macsrwe

I believe you will find the answers to precisely these questions here.

macsrwe

Known deficiency in ROS that "auto" distance is often wildly overestimated on one side of a PTP link, while correct on the other. Efficiency improvement can be had by entering specific distance into wireless config parameters instead of "auto" default. This alone may improve your...

macsrwe

Misunderstood your requirement. I did not understand you wanted to clear memory-resident log. I don't make much use of memory-resident logs because they are not persistent, and IMHO anything worth logging is worth having available after a crash. I have determined that not even the commands previousl...

macsrwe

You should at least have a default 0.0.0.0/0 route defined in /ip route, preferably also a small number of dependable static routes. One of your complaints was that you would lose some number of pings before establishing good traffic, that is a common symptom of having 100% dynamic routing. OSPF &am...

macsrwe

I cannot seem to find any /ip route anywhere. That would be a major omission.

macsrwe

The default firewall in the default configuration protects the router if you connect to the internet via the default port (ether1). However, if you are playing with your own custom configurations or firewall rules, and hook up through an unprotected port, your router is visible to hackers who indeed...

macsrwe

It was on fiber, come to think of it, not copper.

macsrwe

Keep in mind that a posting in this forum is not guaranteed to be seen or responded to by MikroTik personnel. If you want to make sure MikroTik sees and responds to your issue, you should email it to support@mikrotik.com. Feel free to return back here and post the gist of their response for those wh...

macsrwe

If true, the standard is not uniformly obeyed. In my region, CenturyLink gateway feeds are routinely supplied that run 1G and refuse negotiation, and you can't connect with them unless you configure your interface as 1G non-negotiated. Something to watch out for.

macsrwe

It's quite possible you're not doing anything incorrectly. If your peripherals default to 100M in the absence of negotiation, and require negotiation to step up to 1G -- which is not unreasonable default operation -- all of the behavior you describe would occur. You don't specifically say, but I inf...

macsrwe

Without configuration, impossible to guess well. My first guess would be an ambiguous addressing setup or ARP issues.

/export hide-sensitive file=whatever

Post contents of whatever.rsc here.

macsrwe

I believe easiest way to think of this problem is to remember that firewall rules must be present that specifically enable fasttrack between designated pairs of interfaces. (Interface lists can muddle the underlying behavior, so pretend for the moment that they are not there to use.) Ensure your con...

macsrwe

This posting is short on specifics. Is the host containing/generating this image allowed in your set of walled garden hosts?

macsrwe

You don't say what version of ROS it was running... to be safest, you should netinstall unit entirely.

macsrwe

It depends how loosely you define "achieve." If the radio isn't staying there in production use, it's almost always because you wouldn't like the results if it stayed there. A higher modulation that craters your CCQ is no bargain.

macsrwe

As stated, this is a Windows peculiarity, not MikroTik limitation. Another option is that you can just invent your own local TLD (e.g., .icarus) and define all your local devices that way; then you would resolve "sqlserver.icarus" with no problems.

macsrwe

Again, you don't provide any useful description of what you did, so my answer can only be so helpful. You cannot make this change just in /ip address and expect the router to work. You must also potentially change /ip firewall nat, /ip dhcp-server, and possibly other places before everything will ta...

macsrwe

Change the channel on the hAP and see if that improves things. You could be "auto"ing to a channel your USB dongle doesn't work with.

macsrwe

Is there anything planned like a virtual mum /VMUM/ - like live streaming ?

Every attendee gets a free virtual router (CHR) and a virtual t-shirt (sunscreen not included).

macsrwe

...or just drag the window wider.

macsrwe

I'm not surprised it disappeared -- 0.0.0.0/0 is the default ("everywhere"). Your rule is in the input chain. That means that traffic to the router itself (not your network, just the router) will be accepted from those addresses. If you're trying to get your router to serve this traffic to...

macsrwe

I suspect your problem is that 0.0.0.0 is not the same as 0.0.0.0/0 .

macsrwe

After changing some of the polling parameters, and saving historical data at less detail, it is still struggling, and often will lock up, forcing me to re-open the client. I am now under the impression that I must either downgrade the Dude, or offload polling to agents Yeah, I did the polling time ...

macsrwe

Speed limit of the device is here. If routing properly with fasttrack, you should be able to achieve gigabit with all reasonable packet sizes.

macsrwe

What wireless channels are being used on each device?

What speed do you get if you cable in to the Deco?

macsrwe

Stupid spam, too. He forgot to global-replace "Iran" with "Ireland" inside the spam.

macsrwe

+1. Nothing like having the freedom to plan out a good wired network before the walls are up.

And don't forget to pull a few to your roof as well, for later use for security cameras, wireless bridges to outbuildings, or whatever.

macsrwe

Trying to serve a large house wirelessly from a single central point, particularly if there are intervening walls, plumbing, appliances, or masonry, is a bad choice. It doesn't matter how strong your router signal is -- your PC, phone, and IOT device signals won't be strong enough to be seen reliabl...

Search found 1029 matches