MikroTik

lordzar

I have moved to a farm for retirement. There is no wired service out here. I was able to get my hands on 2 different cell home internet modems and hooked them up to external quad mimo antennas and they work great. But what I would like is: I have a CHR running in the DO cloud and would like to load ...

lordzar

From what version ( of ROS v6 ) did you upgrade ?

7.1.3 - ARM - RB1100AHx4

lordzar

What's new in 7.1.5 (2022-Mar-22 13:03):

*) route - fixed "table" menu emptying after RouterOS upgrade;

and yet it DESTROYED all my custom routes and routing rules.

lordzar

Been using it for about a week now... it's been GREAT.... until tonight that is.... Running it on a x4 and all of a sudden, I lost connectivity to my local lan. Connected to the console... didn't see any issues in programming. my router just couldn't talk to anything on my local lan and vice versa. ...

lordzar

I live very rural. I have 2 LHG's setup, one to T-Mobile and one to Visible(Verizon). Bandwidth is so-so. TM is approx 1/3, and V is the other 2/3's. Together.. maybe 50-60 Mbps I have also setup a CHR in Digital Ocean. What I would like to be able to accomplish is have tunnels going to DO CHR via e...

lordzar

I posted the same issue with an EC-25V. Worked fine under beta5 and stopped working under beta6. Downgraded and everything is running again. Good evening, I am using the rbm11g router, this router has 7.1beta6 firmware installed The Quectel EC25-E module is connected to this device in mbim mode, but...

lordzar

https://download.mikrotik.com/routeros/ ... mipsbe.npk

Thanks for the pointer. The downgrade DID get the EC-25V to function correctly again.

lordzar

Also... does anyone have an image for beta5 that they can send me
(LHG)

I did an OTA update so I never had a copy.

lordzar

Everything has been working fine with beta5 for months. A simple upgrade to beta6 and the card has stopped working.

I did file tech support order earlier in the week, but no response yet.

lordzar

Ok so I got the Lhg have the EC25 in it have it mounted and Poe ran have my visible sim in it, but can’t connect into it through the 192.168.88.1 ip, I’ve tried multiple browsers and turning my Pc on and off I can see it in winbox but have no set up guide for the lhg in that, any help thanks When i...

lordzar

nice,
Sometimes I use a testmy.net with phone/laptop who will a graph of 1d of speedtest's.
Old example:
testmy.net.jpg

Never heard of that site. Going to check them out. Thanks.

lordzar

It took me WAY TOO LONG to get this running. Every post about the EP06 was way too detailed about options and commands but no practical details. With the help of Emils in support, I was able to get this up and running with NO tape and NO pc setup. Below is the summary of getting this card running in...

lordzar

Do one of the lhgr builds come with ec25 in it already, what speeds do you usually get on visible with this? Thanks No... I had to install the EC25. Here is a test from 8 in the morning... but during the day it's typically 35-45m. status: done testing duration: 11s rx-current: 80.9Mbps rx-10-second...

lordzar

For the last 6 months or so I've been testing various configurations using LHG LTE's against Verizon, T-Mobile, and AT&T. LHGR - LTE4 - T-Mobile: Solid performer, no real issues. LHGR - LTE6 - T-Mobile: Absolute CRAP. Pointing at the same tower as the LTE4 yet half the speed. LHGR - LTE6 - AT&am...

lordzar

Try check the Quectel EP06-A at https://www.quectel.com/product/EP06.htm

I have been trying to get an EP06 to work for weeks now. No luck.
Do you have info on getting it running.?

Thanks.

lordzar

I have an EC25-V in an LHG talking with Verizon (via Visible). Data works just fine... and no apparent throttling. Tried to activate the SMS (/tools sms) but doesn't seem to work.. Even seemed to knock out the data link... which came back after disabling SMS and rebooting. I use the SMS on and LTE4 ...

lordzar

I get the same error in mbim mode. Anyone have an idea? Support asked me to try "at+cfun=1". Sometimes takes few tries or I am just impatient, but it seems to fix the internal error. But the fix is temporary, until you make a change affecting modem or LTE interface or reboot. The problem ...

lordzar

Just an observation.

Been doing it one way for 20 years... just say'n

/I/Dont/Like/This

lordzar

So... now that I've received official notice that they are going to shut off my cellular service because the device is not volte compatible. What is the plan going forward for Mikrotik LTE products in the states.????

BTW: I have 6 sites that rely on LHG's for their primary internet.

lordzar

I have a flaky CCR that I am trying to get running. Every attempt at a netinstall fails. When it looks like it's trying to do it, it says it's transferring a file, then running it, but at no time does the unit show up in the netinstall app or ask me what image to install. No matter what I try, the r...

lordzar

You should buy Quectel EP06-A insted who have bands dedicated to america until we not receive a proper lte module from MikroTik like -lte6-us or -lte6-a or -lte12-na etc. I guess models because we not have that jet. you have now -lte6 then provide some technical data, you upgrade firmware to v025 ?...

lordzar

So... when they announced an LTE6 modem available I ordered an LHG with an LTE6 modem. I put this up and aimed it at the same tower as my other LHG with the old LTE modem in it. Expecting the LTE6 modem to be "at least as fast" as the older modem, you can imagine how disappointed I was whe...

lordzar

My US HAP's connect to the INTL WAP. WAP: channels: 5180/20-Ceee/ac(30dBm),5745/20-Ceee/ac(30dBm), 5750/20-Ceee/ac(30dBm),5755/20-Ceee/ac(30dBm), 5760/20-Ceee/ac(30dBm),5765/20-Ceee/ac(30dBm) HAP: channels: 5180/20-Ceee/ac(28dBm) Settings on all are: Freq=auto, fmode=regulatory-domain, country=&quo...

lordzar

I have a situation where I have a central WAP (INTL) and 2 HAP's (US) as bridges. They USED to use the 5Ghz band and after the upgrade it all BROKE. I correctly had frequency-mode set to regulatory-domain, but apparently Mikrotik removed countries from the definitions based on the hardware version ...

lordzar

I have a situation where I have a central WAP (INTL) and 2 HAP's (US) as bridges. They USED to use the 5Ghz band and after the upgrade it all BROKE. I correctly had frequency-mode set to regulatory-domain, but apparently Mikrotik removed countries from the definitions based on the hardware version (...

lordzar

So... a friend has a chicken farm in the middle of nowhere and was paying for 2 adsl lines 3m/500k D/U. What we did was install an LHG LTE on the main building running down to an Audience. We then installed 2 Disc's and did a 500' shot down to the main barn. In this barn are 2 brooding rooms made fr...

lordzar

I would really like to know what is going on. I am using an LHG LTE with much success and our tower is almost 3 miles away and when it's quiet I've seen close to 90M down. manufacturer: MikroTik model: R11e-LTE-US revision: MPSS: R11eL_v16.02.183961 APSS: R11eL_v05.03.183961 I did just pick a an LTE...

lordzar

Very incredible speed! I'm thinking that if LHG could has gigabit ethernet, you can get a little bit more. Ping times (and specially ping jitter) indicate that there's other activity on the same LTE cell and it's questionable if OP could really get higher speed ... at least not during same day time...

lordzar

Sorry for the delayed response, but here is the data from my router. I have not seen random disconnects. The connection stays up for weeks at a time. Most of the resets are me or the power. On the farm we lose power more than you would think. [dave@LTE_Dish] /tool sms inbox> /interface lte info lte1...

lordzar

I've been using Mikrotik since ~2000. I am retiring to a farm and it is in typical "rural america". There is no "highspeed" wired options. There is ADSL from the local phone company that runs 3M/500K D/U for $50/month. Yes.. a whopping 1/2 M up and it's unreliable to say the leas...

lordzar

Not totally true. I only receive sms messages if I "set receive-enabled=n ; set receive-enabled=y " If I just have "receive-enabled=y" nothing happens when a new message is sent to it's phone #. Only when I turn it off then back on do I receive pending messages. Anyone else with ...

lordzar

So now the firmware version updates with EVERY release. This really bugs me. I only want it to update IF there is a change. So as of right now, why don't they just make firmware updating part of the upgrade process instead of having it be a 2 part process if they aren't going to seperate versioning???

lordzar

I understood where you were going with that.. but that's the problem. Traffic DOESN'T match on the the VPN interface name. I've tried every path, input, prerouting, etc, but nothing is matching on the vpn interface name. Matches on a "real" interface just fine.

lordzar

Just a standard l2tp-(server/client) connection. Routing between 192.168.1.X and 192.168.2.X MT2 is a NAT from the ISP, not externally addressable. I want to use the public on MT1 to access Server1. The port forward to Server1 is straightforward and does hit MT2 just fine, the debug log even shows t...

lordzar

I have multiple ISP's and typically put in mangle rules for input and output so that packets leave on the same interface they came in on. I am trying to do that with a VPN tunnel that has been named. The idea is that I have a nat rule on a remote router so when a connection to a certain port on it's...

lordzar

Last month I officially reported issues with capsman and 2.4 while 5g was working fine. They didn't seemed surprised, so I believe they are aware of it. I wish they would resolve it soon, because I have a client with a high density AP configuration of 25 access points that I would love to put under ...

lordzar

Well, I'm in the U.S.and have a north east regional bank where I maintain their voip network between 30 branches, all using rb1100's, and another client that is a nation wide mortgage lender, where I've got 60 rb1100's handling data and sip trunking and 2 ccr's in the main data center, vrrp, and 1 g...

lordzar

Any client or another mikrotik router as client?

lordzar

Something else you can try is to log into the one you that you do have access to, and try to connect to the others from it using:

/tool mac-telnet

lordzar

I would like to propose making the printing of dynamic nat rules to NOT be the default. I resent having to use "print where !dynamic" in order to see info I don't want to see. I would rather have to say "print dynamic" when I do want to see them. There are a few networks that I m...

lordzar

Put something behind it, like a raspberry pi, and run 'ngrok'

I have done this.

lordzar

I strongly suggest to not do this (redirect all queries to your resolver). Your customers may have good reasons for using other resolvers. And even if they don't, ISP should provide internet access and not decide for users what they can a can not use. Can you give me a good example of why not to do...

lordzar

Everyone refers to that wiki article... But I'm guessing its people that haven't tried the examples. They don't work the way you would expect them to work.

lordzar

Routing on ipsec is overly complicated and not intuitive. You need separate policy entries for all the remote subnets or a supernet policy, in order to tell the ipsec engine what the "interesting traffic" so that it will route thru the tunnel. And don't forget the nat bypass rules so the r...

lordzar

There is a global config, which affects all managed ap's, then you can add specific configs for certain ap's, that would allow you to config channels individually.

I want them to support "auto" channel in the global config,

lordzar

I am doing an office building that is old, concrete and steel construction. Very little signal penetration from room to room.

We are planing 24 low power ap's and would really like to be able to set auto channel in caps-man.

Any word on when it will be added.???

lordzar

First thing I see is that your logging rule says "remote" and not "remotelog"

lordzar

Forgot to put "all bugs fixed"

lordzar

Make sure there is only one type external defined in your upnp config

Sent from my Nexus 7 using Tapatalk

lordzar

When things "should" be working what happens when you issue "/ip firewall nat print dynamic" ?

lordzar

A couple of things... Not sure why the use of aggressive mode instead of main mode. Aggressive is mostly used when you are using dynamic policies. Also... Sa's don't get established until there is "traffic of interest", so, if you are just typing "/ping 192.168.10.1" it will not ...

lordzar

You have no upnp interfaces define as internal.

lordzar

Actually... You do not have to renumber your networks. What you are doing is called supernet routing. It's when the local network is included in the scope of the tunnel. All you need to do is add another policy that the source and destination are the same and make it a higher priority. If you need a...

lordzar

Don't forget... Next time... Control-X is your friend.

Sent from my Nexus 7 using Tapatalk

lordzar

I think your problem is that the LAN port are mastered to ether2.

You are trying to config port 5 as if it was independent. When you master ports together only the master port is configurable.

lordzar

Stronger signal is not always better. Imagine someone standing right next to you shouting in your ear. You might be able to make it out but it would be better if they lowered their voice. Same thing with radio. There is a sweet spot for radio signals. Too weak or too strong is not good. Sent from my...

lordzar

Maybe using a parabolic reflector.

Sent from my Nexus 7 using Tapatalk

lordzar

Yet another case of them putting out potentially good hardware without having the software to back it up.

STOP MAKING HARDWARE... FIX THE ROS. GET IT STABLE.

uggggg... this is soooo frustrating.

Hire another company to develop the software since you can't seem to get it done right.

lordzar

it is now on wiki
http://wiki.mikrotik.com/wiki/Manual:CRS_features
http://wiki.mikrotik.com/wiki/Manual:CRS_examples[/quote]

Completely useless

lordzar

Let's try this again... (Someone deleted my previous post) I agree with everyone on "we're sick and tired of all the bugs". They really need to hire someone who is experienced in software QA testing. It is beyond ridiculous now. Mikrotik seems to introduce just as many new bugs as the ones...

lordzar

Is the routerboard "the" router or is it behind another one. I'm asking because you mentioned Nat behind a firewall. If it is behind another firewall and traffic can go around the router board I to the same router, then QoS on the rb might be a moot point. Sent from my Nexus 7 using Tapatalk

lordzar

There is an issue where routeros can not talk to sshd servers that have challenge/response turned on.

lordzar

The best thing to do is apply the firewall rules that block ssh attempts after a couple of failed logins.

The rule set is in the wiki somewhere.

I have it on all my routers so that I can access from anywhere but blocks others after 3 failed logins.

lordzar

Mis-configuration?

Duel masters?

lordzar

Something along the lines of: Create a list of good addresses: /ip firewall address-list add address=24.12.4.2 list=goodguys add address=24.12.4.4 list=goodguys add address=24.12.4.6 list=goodguys Then, allow those hosts, but block everything else. /ip firewall filter add action=accept chain=forward...

lordzar

So far you have an x.x.x.x./27 on your wan interface. Just add a /32 within that /27 onto the same wan interface then just program your src/dst nat rules accordingly just using that /32 as the src or dst address. Then you can map everything to a single host or break up the ports to multiple hosts ju...

lordzar

The short of it is:

1) activate the proxy server on the router

2) redirect the http traffic thru the proxy server

3) send the proxy server logs to a syslog server.

lordzar

Well... just from looking at the example in the first post...

I know it's only a test... but I'm a little confused that you are using vlan 1 in the 1st sample and vlan 2 in the second...

anyway... in the bridged version... you want the /ip addr on the BRIDGE and not the vlan interface.

-Dave.

lordzar

I took 2 CCR's and put them side by side with 6.1 installed. Ran a cable between 2 of the ports.. .and set up IPSEC. EPIC FAIL ! Submitted a ticket and got back "We have a known IPSEC problem in 6.1" Really?? At this stage in the game.?? I still can't put my CCR's in production on my Gig f...

lordzar

So.. you are saying that Krisjanis lied to me... told me a non-truth.. ??

If that is the case... Why would you discontinue the 1100AH and not have something to replace it with that can do metarouters like it can?

lordzar

Great news... I was just told that metarouters are supported on the X2. I couldn't get it to work... but I believe what I am told. :) And.. this was very important to me since they are discontinuing the RB1100AH which runs metarouters just fine. I've got 60+ deployed. They wouldn't get rid of a rout...

lordzar

I was just told by my distributor that the RB100AH is discontinued. What the hell? It's being replaced with the 1100Hx2 ?? why?? there is already an AHx2 who needs yes another multicore router that can't do metarouters. I have over 60 RB100AH's deployed and they ALL do metarouters. I've sent email t...

lordzar

Same SFP issue.

Unplugged from a media converter and plugged into SFP port on CCR and no luck.

uggg...

lordzar

I have been running metarouters in RB450's and RB1100 for quite a while now on older versions of course. The debugging issue is that when I attach to the console of a metarouter and start configuring it, every command i complete, such as adding a bridge, creates a message on the console instead of j...

lordzar

I am running about 8 RB1100's and 14 RB1100AH's each with 2 metarouters The typical config is for a remote office: 3 MB bonded T1 Internet Cable modem The 3m is for SIP trunking and backup internet, cable is primary internet. the metarouters are setup to handle QOS'ing on each of the ISP links. IE: ...

lordzar

I am using a Roc Box Core router from roc-noc.com

It's a 1-U x86 router running RouterOS

It is handling our 1Gig link.

http://www.roc-noc.com/mikrotik/routerb ... -core.html

lordzar

How do you see the routes that an IPSEC connection has up?? The info in the wiki is WRONG: Dumping Policies It is possible to dump policies installed into the kernel for debugging purposes with command: /ip ipsec policy dump-kernel-policies After executing this command check the logs to see the resu...

lordzar

After upgrading from 5.11 to 5.12 all of my SIP trunks broke.

Downgrading to 5.11 corrected the issue.

I could find no work arounds in 5.12

This issue and the supout files have been submitted to Mikrotik.

lordzar

This is a follow-up to my original post: http://forum.mikrotik.com/viewtopic.php?f=2&t=57209 If you upgraded to 5.10 or 5.11 and had your meta-routers change all their ports, ie: ether1 became ether3, etc... then be careful when upgrading to 5.12. They did fix the issue, but if you've changed th...

lordzar

The port enumeration problem has been fixed in 5.12

lordzar

Ok... send an email to dave1gb at gmail.com

lordzar

You can contact me and we can schedule a date/time for your test.

I have a Mikrotik as my core router on a 1GB link.

lordzar

2 updates in the last week and no fix for the metarouter interface enumeration problem?

lordzar

The prior release was 5.8

Also... I just checked it on another router that has 3 meta's running and they ALL enumerated wrong!

lordzar

you can lose connectivity to your router, under certain circumstances, if you upgrade to v5.9 I have an rb1100 that uses a metarouter for qos. After upgrading, remotely i might add, after the reboot, all the ethernet ports in the qos vm enumerated to all different names. I'm am expecting the 2 ports...

lordzar

Yes... mangling and having route rules does work... IF you know the address of the remote.

But in the case of a remote office that gets its address from DHCP, it doesn't help.

I wish it would just track the l2tp traffic like any other traffic.

lordzar

So, I have several RB750GL's running meta routers, most running 5.2 I went to install a new one and upgraded it to 5.7 and it would randomly reboot a couple times a day. So I downgraded to 5.6 and had the same thing happened. Then I downgraded to 5.5 and it seems stable. (read: up more that 1 day) J...

lordzar

My router is mounted right next to my hp procurve switch that has SFP+ ports, so I just use a mini-gbic fiber transceiver and configure a vlan to a copper port and use the switch as a media converter.

lordzar

Here is a router the United Parcel Service just delivered.

I guess "Fragile" wasn't written on the box!

lordzar

I have a router at the main office with 3 isp's with many l2tp tunnels coming in. The issue is that the incoming tunnel has to be over the isp that has the default route on the router, OR with a route->rule that sends it over another isp. I have tried putting in mangle rules on the input/output chai...

lordzar

What is the time frame for all the new releases?? 4.12, 5.0???

lordzar

I have this EXACT problem with RB450's. I have a dozen or so in the field and, maybe, 3 or 4 of them behave this way. If you loose power briefly, they do not come back up. No lights... no sign of life. Is there a field engineering fix I can apply?? solder a drain resistor or something somewhere??

lordzar

|--Ether1--->ISP Class C | |--Ether2--->192.168.1.x private lan | |--Ether3--->Public Class C servers (with FW rules) All ports are bridged WITH bridge fw turned on and MASQ for the private address. Can this be done? Because the problem is .. with bridge fw turned on all of it's traffic gets nat'd. ...

lordzar

If anyone has an V2.8 RB532 image could you please email it to me.??

Thanks.

dave @ dcentral.com

I would appreciate it. I am trying to test a theory that something broke when 2.9 came out and it still hasn't been fixed.

Search found 94 matches