MikroTik

giguard

Since DDNS going down is an ongoing issue, I wish Mikrotik would provide a website that informs people about what's happening. The website could possibly include an ETA.

giguard

Another thing you may want to check: MAC access is managed under /tool/mac-server and it's possible to set allowed-interface-list for telnet and winbox separately Both set to "all" VLAN.. Hmm. This is something I can't try. At least not right now. Another thing: /ip/neighbor/discovery-set...

giguard

It could be a case of something remaining "sticky" on either the Hex or the RB5009 (or both). Yeah, I also suspected something like that so I made sure I rebooted both devices and restarted winbox. I didn't try disable/enable bridge as that would lock me out. But reboot of the device shou...

giguard

Below is the default setting. /interface bridge add admin-mac=XX:XX:XX:XX:XX:3B auto-mac=no comment=defconf name=bridge It is out of box config but the way I see it, it's already following the recommendation from wiki. I tried changing admin-mac to XX:XX:XX:XX:YY:3B. Still, /tool/mac-telnet <tab> wi...

giguard

Hey people, This is the setup I have. brand new hEX (port 5) <-----> L2 switch <--------> rb5009 Winbox into rb5009. Open terminal. There I type, /tool/mac-telnet <tab> system will list down all the mac addresses it knows, and there is my new hEX. No problem so far. So, I select the mac of the hEX u...

giguard

First I would like to thank Amm0 for your kind contribution. I didn't make the proxy running inside the Mikrotik unit. However, I still used nginx and proxy_pass stuff exactly the same. One problem I came across was when sending PUT request to add in new firewall address-list. I got an error complai...

giguard

I'm using RB5009UG+S+IN unit. Box came with v7.8. No changes made to any configuration, I performed upgrade to 7.12.1 followed by 7.13.2 I then took the copy of /export. At this point, below is what I got. [snip] /interface bridge add admin-mac=<removed> auto-mac=no comment=defconf name=bridge \ por...

giguard

rextended , you have always the option to refrain from commenting if you don't understand the question AND don't have anything useful to post... giguard , if you open the square bracket after set, you will see the autocompletion commands applicable within the brackets: (v7, but probably same syntax...

giguard

The error is = no 'find' after 'set' option /ip ipsec policy set find If you type that out you will get a RED cursor on 'f', telling you no 'find'. Pressing TAB after 'set', you get following list displayed. [admin@MikroTik] > /ip ipsec policy set action dst-address ipsec-protocols protocol src-addr...

giguard

Hi, I haven't done much with scripting but from what I know, the below command should work. /ip ipsec policy set find [ sa-dst-address=x.x.x.x ] sa-src-address=y.y.y.y Apparently NOT. (no 'find' after 'set' option) I'm trying to change "sa-src-address" of a whole bunch of policies where sa...

giguard

Okay. Something else I found it.
On CE1, response packets were getting DROPed by the FORWARD chain as its state was determined as INVALID.
Why would it be INVALID?
Should I not check the state?

giguard

I've got a very simple VPLS/MPLS/OSPF setup following the examples from the Internet. Client site A Client site B Computer 1 - Client Router - CE1 - PE - CE2 - Computer2 Everything from "Client Router" to "Computer 2" works without any issues. In fact, "Computer 1" can ...

giguard

Try 7.10b5.
Some reported it solved their issues.

Okay. I'll give it a go when I get desperate.
The problem doesn't appear that frequent enough to force me to endeavor on a bleeding edge experience.

giguard

Hi, I've got one cAP ax controlled fully through Wifiwave2 CAPSMAN on another Mikrotik unit. Both are on version 7.9. Ran okay for something like 2 - 3 days then all of sudden, all of the devices connected to this cAP got disconnected. Any attempt to reconnect would simply fail. I'm pretty sure it w...

giguard

Default caps config for AX devices was only fixed with 7.9

*) defconf - added CAPs mode script for wifiwave2 devices;

Ahh.. That makes sense. I just upgraded cAP ax to v7.9 and it joined.
Thx.

giguard

Thought you could not combine old capsman with new csp ax wave2 drivers things like that. It has been written before, give a search.

You are right. I think I've came across that while back. Forgot.
Version conflict aside, cAP ax running in CAPs mode without CAP enabled is still an issue.

giguard

Hi, Just got brand new cAP ax and switched to CAPs mode only to find out its not joining to CAPsMAN. I hook up my laptop to ether2 and noticed unit is without any configuration. Perhaps this is why its not auto joining to CAPsMAN? I've got number of hAP lite joined to CAPsMAN automatically so I'm pr...

giguard

I use a hap lite as a wireless bridge. Just default configuration with quickset profile CPE applied. Even this minimal config did not run stable on v7. After a short time (1 to several days), the device started to get unresponsive. It was not even possible to SSH into it. It even when SSH still wor...

giguard

The general consensus around here is that ROS7 and hAP Lite don't mix together. The device simply doesn't have enough resources (especially RAM) to run comfortably. Stay on latest ROS6 for that device. Sure it was horrible at first few hours? may be. I mean after flashing 7. But it settled down eve...

giguard

Normis, thanks for the link.
Now I'm gonna have to try to have MPLS working between v.6.x (hAP lite) and v.7.x (x86).

giguard

Hi,
Just flashed version 7.9 on hAP lite only to find MPLS missing. Is this normal?
Is there a way to enable it by disabling few others I don't need?

thx.

giguard

Hi, Been playing with this for a whole day and I can't seem to find a way to import CSR (Certificate Signing Request) into Mikrotik Certificates menu. Whenever I try to import it, it just ignores it. Does this mean that Mikrotik CA cannot sign any CSR? It can only sign the certificate template it cr...

giguard

Hi, I went through all the steps of getting trial to paid (CHR) license and now (from mikrotik.com) I'm seeing my license level as "P1-Perpetual" instead of "P1-Perpetual (Trial)". Which is good. However I'm wondering, how can I double check from my system that it is using paid l...

giguard

Hi, First, I know I shouldn't be using Winbox 3.12 without valid reason. I have valid reason. I need it to configure ROS 5.26 Okay, having said that, occasionally I would select things in configuration which isn't possible for ROS to take in. When that happens, pop up will be displayed telling me ho...

giguard

Mikrotik seems to keep only the latest Winbox.
Any one know where one can get their hands on version 3.12?

giguard

Thank you.
My only problem now is where do I download this from.
This site seems to keep whole bunch of ROS images but not winbox images. I can only see 3.18.
Link to download would be wonderful

giguard

I'm trying to find out the highest possible Winbox version that supports Router OS 5.20.
Does any one know?

giguard

Hi, I basically need to forward down some traffics landing on the WAN interface to some PPP client. I was under an impression that Mikrotik would support something like /ip firewall nat \ add action=dst-nat chain=dstnat dst-address=<PUBLIC IP> to-addresses=<ovpn-blah> It turns out NO... to-addresses...

giguard

Excellent. !!! While we are on the topic, I woud like to know if I was to use auto-mac property would it effectively do the same thing? Meaning, can I drop the admin-mac entirely and rely on ROS to do the right thing? /interface bridge add auto-mac=yes name=mybridge I'm guessing that ROS will automa...

giguard

Hi, See below for command I'm interested in. /interface bridge add admin-mac=AA:BB:CC:DD:EE:FF auto-mac=no name=mybridge Assuming AA:BB:CC:DD:EE:FF is a MAC address of the ether1 and I'm planning to make ether1 as a master of mybridge . I want to covert above command to look something like, /interfa...

giguard

Thank you for the workaround. I didn't try the dev version of the api since proplist did the job.
BTW, Is there document on how to go about using the dev version?
Would this be possible with nuget?

giguard

In case any one wondering what caused that execption,

            ITikReSentence id = connection.CreateCommandAndParameters("/ip/ipsec/remote-peers/print", "id", username).ExecuteSingleRow();

giguard

After that little incident with missing 's', I was humming along just fine. However, while performing disconnection on one connection made by Android phone program failed and returned Exception. See below. Unhandled Exception: tik4net.TikSentenceException: Duplicit key 'port' with deffirent values '...

giguard

wow. Of all this time I ran that command without 's'.
Terminal is much more forgiving than API huh?

Feeling very silly now.
Thank you. You've been a GREAT help.

giguard

Hi, I really need help on this bit of code. ITikCommand printcmd = connection.CreateCommand("/ip/ipsec/remote-peer/print"); IEnumerable<ITikReSentence> userlist = printcmd.ExecuteList(); Running it will return Exception: 'no such command prefix' What have I done wrong?

giguard

Hi, Searching through the forum I can't seem to find any previous post regarding to the question in the topic. This is the command I'm running at the terminal /ip ipsec remote-peer remove [ find id="blah" ] I'm using tik4net 3.3.0 and using it in Visual Studio and writing C# code. Among ma...

giguard

Hi, I would like to request for radius accounting support on IKE2. Right now it is only supporting access request. May be this goes without saying but just in case, rate-limit attribute support is necessary also. As far as rate-limit is concern, it is now being discarded by the RouterOS. Lastly, tha...

giguard

Thank you.
And that link helped me understand better about the use of the viw.

giguard

Hi, Does any one know where winbox saves which windows I've opened and its position and size? I would like to transfer them to different computers I'm using. That way I don't have to resize realign them all over again. While at it, is it possible to make some kind of default template? That way when ...

giguard

This thread is about one year old. Still not implemented?
I would really really love to see this implemented.
I'm running 6.42.3 and no accounting records are issued by Mikrotik.

Search found 40 matches