MikroTik

floaty

roman word : )
... I just admire the greeks ... more : )

floaty

¯\_(ツ)_/¯
maybe ... uncontrolled Premier-League Public-Viewings all over the world ?
( but it's ... world-cup quali break ?! ) ... ?

floaty

<< One thing is for sure, posting on the forum will do zero for your request! >>
.
the greek word forum and the related place, was intended once ... AGAINST.

floaty

while ago ... I've thrown the native gretap-tunnel-container idea into the cooking pot ...
... do ... we ... have ... ... results ?

floaty

Only MikroTik related software is allowed. No bumping of topics, no spam, no unrelated or vaguely related tools. . yeah ... man ... it is what it is ... in fact ... I requested to shut down the "3rd party tools" section ... because it is a kafkaesque rude ... diversion : ) ... but ... then...

floaty

tried to replace a running GRE-over-Wireguard-Multicast-Solution ... nope !
... not speaking
... sometimes ... you're ... sitting duck ... peep'in for documentation

floaty

... while promised myself to come back here ... every year ...
... I'am early in 2025

.
... but this feature request ... is a heartfelt wish of mine ...
... so it is early ... as it is ... urgently required

floaty

stabler or faster

.
stable ... in the means of entropy ... ? ... there is no "more stable"
.
faster ... ... in the means ... of fewer CPU-cycles ?! ... maybe ...
.
... but who gives a *

floaty

Would you theoretically be able to transport multicast IPTV over some sort of a VPN?

.
guess this is the intention ... without the fuzz to ballot the adressing scheme of a vpn protocol ...
.
... it is ... a upstream-big-head request ... so ... it's quickly done

floaty

... don't get me wrong *) ... I'm flashed ...
.
*) ... cause you always get me wrong

floaty

.
... just ingested the february news-cake ! ! ! ! !
.
... this is ... is ... a bold offer !
.

Larsa, you are confusing this with a home NAS. It's not

.
lot of people will ... both ways ...
.
and as an old MOTD-wizzard wisely said:
.
great power, comes with great responsibility

floaty

. 0x20C0A8640100000000202278FFF40000000000647FFF05 . https://www.rfc-editor.org/rfc/rfc3442 . one or more static routes, each of which consists of a destination descriptor and the IP address of the router that should be used to reach that destination. . isn't about 'not correct' or 'not wrong' ... i...

floaty

https://www.medo64.com/2025/02/decoding ... te-option/
.

... a fresh brew ... is magic !

floaty

... in theory ... : )

floaty

... just had the ... thing ... to reverse my own option-121 too ... . as lazy as I am ... . I remitted some coffee-aglet ... to the guy where I usally generate the option ... ... lazy-ways ... . https://www.medo64.com/2018/01/configuring-classless-static-route-option/ . ... since he has the generati...

floaty

so . after tinkering for while ... that much is to recap: rbm33g ... is a real nice board ... period . ordered it to test the ip passtrough feature for a redundant firewall-cluster with sd-wan capabilities ( so I needed more then one gig-ether-interfaces and wanted the option to use external antenna...

floaty

... for ... an "experiment" ... I extracted the mini-PCIe modem from an LtAP to use it outside ... ... there was hot-glue over the rf-pluggies of the mini-PCIe-card ... ... now I know why ... !! . ... furthermore I did the usb3-on-mini-PCIe isolation stunt myself ... accidentally on the m2...

floaty

. * MiniPCIe vs m.2 - it has only USB2.0 MiniPCIe seems to be the right call since m.2 supports USB3.0 and MiniPCIe supports USB2.0 . guess ... this isn't a fully regular term ... there are pictures on the mikrotik support site, showing to 'isolate' the USB3 related pins on a mini-PCIe-card to allow...

floaty

. readMBR: could not open /dev/mtdblock2: 2 . experienced the same problem with V7.x...also with newest 6.49 version...but worked with 6.49.11... but maybe this was just luck and there were writing errors before ? maybe it's best to avoid UEFI-calamities with V7 ... flash a V6-version then upgrade t...

floaty

Quectel 5G RM520N series: 5G NR Sub-6GHz module M.2 form factor 30mm × 52mm × 2.3mm SA data rates: 2.4Gbps (DL) / 900Mbps (UL) NSA data rates: 3.4Gbps (DL) / 550Mbps (UL) Extended temperature range of -40°C to +85°C . my monthly company-contract download-volume would be faded with SA-rate ... in ......

floaty

. why so many users use m2 to mpcie rather than usb 3? . I ... ( personally ... and I'm not a user ... I'm just hobby tinkerer ... LTE/G5 -wise ) think, because the modems supporting USB3 are not that common yet ... . beasts like Intel-based Fibocom 7560 promise cat16 speeds, but only if you can man...

floaty

. so ... guess every semi-pro case modder will give me the very long face for it ... but homeland-networks ltd. is working on very tight budgets. the acrylic tiles came from a coarse-cut QSFP-case (Fibershop ... real McGyver quality ! ... the acrylics ... not the shop) connected to the case with pat...

floaty

35Mb/s

.
480Mbit/s
...
... okay got it ... were totally concording here

floaty

if it supports MBIM you want to use that . I totally aggree. Problem: without a working reference system it's very hard to find out whats going wrong. . The windows system (from the originating HP-Laptop) lists the modem as USB-device too ... even all the GIT stuff and working linux-configs for the...

floaty

or ... a second set of bungs ... which supports sma-connector diameter ...
.
or a version for self-drilling !? ... ( btw.: is this one for NYM-J-cable ? )
.

MacG2.png

floaty

: | just unboxed my ca433u ... unfortunately all our Jedi-Knife guys are on vacation ... ... I'm a little bit disenchanted that the ca433u not even support 6mm diameter SMA/RP-SMA-antenna-pigtails ... . ... why not a self-ad stencil for inside and outside the antenna-side (like the ones that are par...

floaty

certain points

... I'm just evaluating ... zerotier+selfhosted-moon/root ... or ... tailscale-container+headscale ... or ... stick to my ppp-dialin+oldschool-tunnel-thing ...
and ... just wait ... grill a 'wurst' ... have a beer ?!

floaty

field notice ... . the working quectel ec21 in V7.15.2 ... brought a collateral ... the fibocom L860 is now working too in V7.15.2 ( no ... not through a brilliant engineering task ... plain fluke ) . I unpowered the board ... switched the modems ... and rebooted with the config of the quectel and t...

floaty

. ... my 12$ fiducial system rolled in ... : | ... no pcie-com ... : ) ... mosdef ... ... I have a new hobby :? . ... so far usb-only ... no pcie.mode avail with quectel EC21 ... no MBIM either ... means PPP-only in V7.X ( tested 7.15.2 ) . but it works absolutely flawless ... 5Mbit/s-up / 5Mbit/s-d...

floaty

In theory, it should work since it is MBIM. It be an LTE interface since it's MBIM, not a ppp-client (although in theory that could work but even more complex /interface/lte/settings/set mode=mbim why you're messing with PPP interface. . seems ... I'm a little cross market here ... with my project ...

floaty

... to clarify at first: ... NO ... I do not feel ANY kind of JOY !
... it's more like ... cold satisfaction ... here we go ... old nag is still able to enable ... ... after reading a good (amount of) book : )
.

poof.png

floaty

problem was and is ... mbim-mode is a V7 feature ( as far as I've understand ) and theres no lte-interface coming up in V7 and no port to communicate and configure the 'thing' ... so I started with V6.49.X ... and while I said "enough" with tinkering ... I've also reminded: mama said "...

floaty

¯\_(ツ)_/¯
...
but all this old-school AT-GVTTM=?
.
really fixed me on ... : )
.
next invest:
Quectel LTE Modul EC21 Mini PCIe Series Mobilfunk-Modul IoT/M2M-optimized Cat 1
.
! ... affordable ... and it lacks this annoying performance snatching : ) !

floaty

and ... of course ... considered against ... a similiar kernel : ) . root@OpenWrt:/# ls /dev/ bus mtd2 shm ttyS3 console mtd2ro tty ttyS4 cpu_dma_latency mtd3 ttyACM0 ttyS5 full mtd3ro ttyACM1 ttyS6 gpiochip0 mtdblock0 ttyACM2 ttyS7 gpiochip1 mtdblock1 ttyS0 ttyS8 gpiochip2 mtdblock2 ttyS1 ttyS9 hwr...

floaty

no ... I was not ... so I switched the card back to Windows ... I've put in my PIN ... ... things got connected ... a firmware-updated happened ... and after restart ... also the windows-connectivity was gone ... pffhh ... ... guess I started my LTE-tinkering career with ... the wrong hardware ... f...

floaty

stuck !? ... rf-side plays dead ... +CSQ: 99,99 . at+CPIN="****" OK +PBREADY AT+CGSN 3598******6134 OK ati ".Built@Apr-16-2023:19:46:03" OK AT+CGDCONT? +CGDCONT: 0,"IPV4V6","broadband","0.0.0.0,0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0 +CGDCONT: 1,"I...

floaty

seems hardware ... isn't to blame here

... not the converting-adapter ... I mean ... and not rbm33g either ... I mean too ! ... ... ... but case is under investigation : )
.

Screenshot from 2024-07-13 02-11-45.png

floaty

... item not running yet ... but this is for the children ... ... for the young guns !
.
chinese products ... indeed ... permit options : )

AT+CSUS=?
+CSUS: 2

OK
AT+CSUS=0
OK

floaty

item is an Intel-based 7560 fibocom product ... it should have everything inside ... pcie-mode ... usb-mode ... ... there is some kinky startup behaviour described ... ... effin in my efforts in between ... . next.png . got it so far from the usb channel=0 line ... but after a reboot ... I got my PI...

floaty

: ) eff me sideways !! ... there is a lot information on the internet ... too much : ) at+CSUS=2 ERROR ERROR ERROR at OK +CSUS? ERROR at+CSUS? +CSUS: 1 OK at+CSUS? +CSUS: 1 OK AT+CSUS ERROR AT+CSUS=? +CSUS: 2 OK AT+CSUS=0 OK AT+CPIN? +CPIN: SIM PIN ERROR AT+CPIN="2**6" OK +PBREADY . https:...

floaty

is accessible in USB-mode in v6.49.x ( used 6.49.15 ) ... but not in v7.x.x ( seems ACM usb-serial-support is removed in v7 [?] ) . modem show's no signs of life as a PCIE-device in router-os ... there are lots of undocumented AT-commands avail. ( to force pcie-mode [?] ) ... but ... no coop from fi...

floaty

Finally I got all hardware puzzled together and managed to fire up my RBM33G with the Quectel RM502Q-EA in an M.2 B Key to MiniPCI-e adapter. :-) . question: your M.2 B Key to MiniPCI-e adapter ... is it with or without a soldered SIM-card-holder ? , I've ordered an adapter with SIM-card-holder ( w...

floaty

pardonner ... wishful surmise ... ~ ... sat me adrift

floaty

... maybe ... a tremendous "MiniPCI-e-circuit-board-connector-leftover"
... or ... ... policy ... ¯\_(ツ)_/¯
.

MiniPCI-e_ M.2.png

floaty

2. Surprised it doesn't have an M.2 slot since that's what's need for most 5G modem modules these days. There just not a lot of newer LTE/5G modems in miniPCIe FF.

.
#metoo

floaty

https://www.amazon.de/gp/product/B098BL ... TUVM&psc=1
.
looks ... kinda ... adventurously ... in terms of construction ... ... and even in price ¯\_(ツ)_/¯
.
but we're exactly here for that ... so ... no excuses : )

floaty

FWIW: I got HP Elitebook with Intel XMM 7360 LTE-A modem. It has a SIM card which seems to be eSIM data holder. I have activated T-Mobile data plan on it using Windows and this eSIM is working fine after moving it to my fresh Mikrotik SXT LTE6. . same situation here ... new employer hardware arrive...

floaty

... seems it is not happening in the near future ... . <<Thank you for reaching out. Always Free services are based on capacity in the data center, if you cannot create the shape you want is due to there is no capacity currently available in your home region. Please, be aware that paid accounts have...

floaty

nah ... fine ... just back in reality
.
but not giving up so fast ... just asked my trusted Oracle Cloud Adoption Assistant in which region I can get my free "VM.Standard.A1.Flex"-maschin'sche ...
there is no rest ... until that 'dingen' is booted with a CHR-image : )

floaty

nix Filetto di Manzo !
.
Pizza Margherita senza Mozzarella ¯\_(ツ)_/¯
.

sparse.png

floaty

.
oh really !?
.

nope.png

floaty

Not 120 but more then 1

.
one more thing ... capsmanv2 is running on one of the cAPGi's ? ... or CHR ... or ?

floaty

: )
... and - clearly - a withered 'one' from Hank ...
high bandwidth ... of valuations ... so far

floaty

<< close to zero maintenance >> ... is always worth ... an 8 ... at least : )

floaty

: )
indeed ... and on a scale from 1 ... 10 ... how does it feel ? ... (10 would be ... phantastical, I would never buy something else again) ...

floaty

not to much to worry ... my testbed is pretty overseeable in the moment. tried to convince some people to replace a 120-dual-radio installation, vendor-EOL'ed with cAPGi-5HaxD2HaxD (which is a [the first] competitive MT-enterprise-ap in my opinion). when they asked: "is this a referenced soluti...

floaty

which capsman-version ? ... reviewing the config-options for wave2 it seems possible to provision CAPs in groups and even per radio ? . provision-rule.png . guess something like a best practice-guide would be nice. channel-management, CHR vs. box ... dangerous NoNo's ... and what not. So it seems to...

floaty

I guess ... it depends *) ... an authentication related config change 'must' disconnect all clients for security reasons ... or the state attorney is riding into the stetl. ... changing the vlan-tag in the datapath ... 'would' not require such harsh measures ( in my [not-so-deep-tech-insight] opinio...

floaty

unless you can identify the user-(intent) from a source-ip or something like that
.
I cannot believe that I said this ... ... you WILL IDENTIFY your user ... with proper credentials ... and a second factor ... you sloppy thing : )

floaty

<<@floaty>> <<Great monologue :D>> . ... cute ... the outside world is telling me so ... both ... the v6 and the v7 ppp-dial.in and dial-out scripts ... are work-arounds to "lift" and "unlift" a dynamic ppp-interface into a VRF ... which is not officially supported in ROS6 and RO...

floaty

You are in a Free Trial. When your trial is over, your account is limited to Always Free resources. . ¯\_(ツ)_/¯ ... and there is no thing in the world, which is always free ... I'm standing against the damp in the cabooze for a while now ... to know that . but ... let it last ... 3 ... 2 years ... o...

floaty

over a pita-situation with an ISE-deployment ... I found this ...
.
https://community.cisco.com/t5/security ... -p/4866726
.
start reading at <<Why I chose Traefik to run in OCI>>

floaty

dear friends and neighbors ... . for a (relative) long time now I am using ROS .. mostly for routing stuff ... wifi-ptp ... service-network-dialin ... testbeds ... third-party-wifi-monitoring ... ( and ... yes ... also just for fun ) ... ... for a recent project ... "a third man" come in t...

floaty

installed a second container with sstp-client version 1.0.13 (which runs stable on my other system)
and it's working too ... ! stable, no disconnects
so maybe a thing in sstpc version 1.0.18 ... ? ... or in a related library ? ... who knows
not a Mikrotik thing ... case closed

floaty

prankster-style ... ... felt pretty much like broken conductor track on the board
but I wasn't ready to thrash the thing ... something ... like a hazy hunch

floaty

additional thoughts ... as little as map-lite might be ... it lives a great prankster inside . mine ended up 'dead' after upgrading from 6.49.x -> 7.8 ... no ethernet-connection, fast blinking capsman-led ... no wireless signs of life ... first thought: error while image-flashing ... but: tried ever...

floaty

tried to connect with an sstpc client at Mikrotik-SSTP server ... connection lasts only ~60sec LCP is shutting down with nego-timeout ... seems sstpc is not answering certain control-protocol requests* ... point is the unanswered protocols are disabled in the sstp-server ppp-profile ?! this a bug or...

floaty

or outsourcing your ROS-scripts to this babe ... ?!
.

bare-metal.PNG

floaty

chr.PNG

.
chr ... for oracle or azure ? ... ?

floaty

. How do we add Vendor Specific attributes? . . we do this on the command-line: . add name=Fortinet-Group-Name packet-types=access-accept type-id=1 value-type=string vendor-id=12356 add name=Fortinet-Client-IP-Address packet-types=access-accept type-id=2 value-type=string vendor-id=12356 add name=F...

floaty

[quote=dabbled [/quote] : ) thats a word ... ... but true ... SwitchOS has it's kinky ways ... ... limited functionalty ... to keep ? ... the flash-size keen ? ... and it's a point. colleague is using a 'CRS312-4C+8XG-RM' for a dedicated iSCSI network* ... he's a happy man ! did I fell in love ? ......

floaty

good point ... guess since the problem was the default-route, I engaged on the related interface ... habit
... releasing the dhcp-client is way cleaner ... and without the delay-thing ... and single line
good point ... changed ! ... thanks

floaty

purpose of the script is to reset the w_bridge interface when interface wlan1* loses the connection to it's SSID and release the dhcp-client on w_bridge ... to give finally way for the lower-priority default-route ... on another dhcp-client-interface ... . ... there may be other opportunities ?! ......

floaty

very helpful ! . after finding the post, ... I needed 'my time' to skip the 'if'-thing ... but now it's done ... jfc ... :shock: . . :do {/interface/wireless/registration-table/get [/interface/wireless/registration-table/find where interface=wlan1]} on-error={ /interface/bridge/set w_bridge disabled...

floaty

sí ... it's a fortigate ... ... eventually ... instead of radius-sso, some kind of syslog-sso can do the job ... logging the radius-auth and the dhcp-request with swatch or similiar; then a script which merges the username from the rad-request and the ip from the dhcp-request and sending it back to ...

floaty

Had a chat recently with someone skilled in programming (C) ... he agreed that "F00***" might be some memory address leftover from the vrf-membership of the dynamic interface. Since this is not happening, when a dynamic non -vrf interface is detached, it might be a problem only to remove t...

floaty

AAA properties Properties in this category configure an access point's interaction with AAA (RADIUS) servers. Certain parameters in the table below take format-string as their value. In a format-string, certain characters are interpreted in the following way: a Hexadecimal character making up the M...

floaty

. also works in v7 . https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-AAAproperties . called-format (format-string) Format for the value of the Called-Station-Id RADIUS attribute, in AP's messages to RADIUS servers. Default: II-II-II-II-II-II:S . mtik-called-id-cfg.png . ... and if you...

floaty

sorry !? ... is this the right IPSec-VTI-supporters thread ??
.
don't wanna come under suspicion, that I am one of these rascals, who give their '+1' twice ...

floaty

There seems to be an error in this script that is preventing the correct removal of VRF interface information. The following line: :local cleanUpExistentIfsSec ([:pick $cleanUpVrfIfsSec ([:find $cleanUpVrfIfsSec "interfaces=" ]+11) ([:find $cleanUpVrfIfsSec F00 ] -2)]. \ [:pick $cleanUpVr...

floaty

Changing config in the VRF will flap the VRF. Instead I would suggest to add static entries for each l2tp user in /interface l2tp_server and use that for VRF config, instead of adding dynamic entries and then trying to deal with the consequences via scripts. . v6 does not allow to set interface lis...

floaty

... by the way ... all my picky picking stuff in the V6-scripts is non-sense ... using regex-stuff like below should have worked also in V6 ... just was'nt aware back then ... . [find where interface~"^.F00.*\$"] . question always asked every summer in scotland at loch ness ... "^.F00...

floaty

... guess the attentive reader may have noticed, that the above scripts only do it's frugal duty in V6 of ROS ... since V7 brings interesting features like wireguard and vxlan to the table, I humbly allowed myself now to adapt these scripts. . V7 brings also some features to simplify a vrf-dialin. I...

floaty

odd ... rebooted the router ... now it works as expected ... ... jammed bit I presume ¯\_(ツ)_/¯

floaty

same problem ... Framed-Pool attribute is replied from the radius-server ... ip pool with matching attribute-value as name is configured on the router ... but pool-address is not applied to the client
worked flawless in v6 ... has something changed in v7 ?

floaty

uses "F00" to search for a string in the cleanUpVrfIfsSec variable, but "F00" is likely not a valid value in the string. This can cause an error in the script and prevent the correct removal of VRF interface information. . It would be advisable to change "F00" to a val...

floaty

There are different methods to add interfaces to interface lists dynamically, for ppp it is interface-list parameter in the ppp profile.

.
so parameter "interface-list" is a hot candidate to become a mikrotik-radius-attribute ! ... isn't it ?

floaty

.
while this result is made the ugly way ... it is still a very very nice to have ... and ... to use .. result !!
.
so I'm starting with a big fat "yay" +1
.

acc-proxy-result.png

floaty

https://datatracker.ietf.org/doc/html/rfc2866#page-18 4.1. Accounting-Request If the Accounting-Request packet includes a Framed-IP-Address, that attribute MUST contain the IP address of the user. If the Access-Accept used the special values for Framed-IP-Address telling the NAS to assign or negoti...

floaty

: \
.
static-leases with static acc-proxy-rule, thats even more ugly ( just to show what a freerad-module should do )
.
... thought about syslog-sso ... but same predicament ... theres no log-message from the mt-device which contains username and IP
.

acc-proxy-rule.png

floaty

same problem ... tried to setup radius-sso for wireless-users in my firewall ... but without radius-attribute <Framed-IP-Address>, the user-status is not established. since my dhcp-server is a mikrotik-device too, I used the radius-accounting function of the mikrotik-dhcp for a workaround. now I see...

floaty

this is the - not-so-bad - wet dream ! ( mine too ! )
.
but it can ... financially ... cardinally ground your customer ( ... consider the milkdrinker cow-killer relationship )
.

sdn.png

floaty

cAP ax ... very powerfull antenna !! ( finally) ... appreciated ... longs to the whole flat !!!.
...
. felt I had to illustrate ...

controller.png

floaty

... since I just switched to a 'cAP ax' in my homeland-laboratoires ... and of course I've configured it as capsman controlled device ... : ) ... I can not choose the radius-server per SSID ?? ... in a controller-solution ? ... this is even in homeland-laboratoires ... ... sparse ! ... because I hav...

floaty

Already on post #32, this topic is one useless frill... 10 months and no news, no comment, no something from Staff involved of development of something ... https://forum.mikrotik.com/viewtopic.php?t=186352#p936170 ... guess a business decision this size ... ¯\_(ツ)_/¯ ... is a very very costly decis...

floaty

I do not know, if the man who said that once ... was a wise man ... but for me ... it sounds wise.
.
"You should not underestimate the snake simply because it has no horns.
No one knows if it may one day become a dragon."
.
水滸伝

floaty

looking for something like that:
.
https://github.com/anapma22/freeradius_ad
..
neither my portuguese nor my docker-skills bring me in proximity to port this into an arm-container for MT.
Thoughts ?!

floaty

SFP cage on this product maybe its compatible GPON ONU :shock: ... more knowledge gaps ... "GPON ONU" ... thought that was a rebell from "Liang Shan Po [ 水滸伝 ] " maybe the compatibility list is growing here: Cut costs, not speed – choose GPEN over GPON! just a guess ... never se...

floaty

wondering why the 2.5G-port is sfp and not copper-rj45 ... I've learned that 2.5G- fiber sfp's are on the market ... but not even the chinese-network-supermarket has the items in it's store. :shock: not shure which bandwith the sfp-standard supports ... my opinion was 1.25 ... end of the pole knowle...

floaty

Seems the glass-half-empty-contingent did the job here pretty exhaustive. 8) I can see an dsl-bw-like cpe ... with some ... options ... and nothing more was it's predecessor ... with cpu-speed increased by factor 4 now. has a modern ARM CPU with container support ... is maybe a little bit kooky ! Bu...

floaty

sorry for being metaphorical (unnecessarily)
portability (when we talk cpu-architectures) is a 80% word
(80% work, 20% rusty nails)

floaty

¯\_(ツ)_/¯
serial port !
if anything is failing ... a serial port ... can be a very good friend ... either direction

...
*5009* lacking it ... ... here is a place found ... fancy ... appreciated.

floaty

Its the same reason for using a high level language instead of writing code in Assembly language. Portability.

.
but even this a rusty nail, intended to show up on the north of your foot : )

floaty

That being said, you guys may want to give VXLAN a look.

...
guess the inventors destroyed this codex pretty much themself

...

... ? ... but you never know !? Moses was an abandoned child ... ... !?

floaty

i'm thinking that i do not need mikrotik at all, because EOIP can be freely compiled in linux . please ... as soon as you've overcome the thinking-phase ... give us a GIT-URL ! ... just changing the protocol-number ... than ... compatible ? :shock: ... we should talk to Linus ?! ... maybe it's just...

floaty

I'm trying to find out what this tells me about this market segment. Let me support you here. It can tell you that "floundering" is all the same in all market segments. Should be true for the whole IT business. Of course there are a lot of men in fast cars, trying to tell the contrary. Un...

floaty

magnificent

floaty

: )
figure of speech for a "website" which gives a reasonable response

floaty

(obviously !)
.
the post was about: why is it implemented for a comparable method (fetch) and the possible reasons ( ... why not for snmp)
... so please read more diligent
.
I've searched the forum ... found your post ... and have not implemented it
halfway the reason I've posted this question

floaty

. [admin@***] > /tool snmp-get security=private authentication-protocol=SHA1 authentication-password=* encryption-protocol=AES encryption-password=* version=3 community=* address=* oid=1.3.6.1.2.1.33.1.1.1.0 OID TYPE VALUE 1.3.6.1.2.1.33.1.1.1.0 octet-string Alpha [admin@***] > . maybe "as-valu...

floaty

just asking myself ... why is a unicorn exeption like . :put ([/tool fetch url="https://api.ipify.org/" output=user as-value]->"data") . possible ... ... ( ... you may try this with https://www.your-xxxx-site.com ... ) ... while the following below is NOT possible to define as a ...

floaty

thank you very much ...
bookmarked this post

... quite the hassle

floaty

... no prebuild base images for mips big endian. All seem to be mipsle, and outdated (though that's not necessarily a problem.) For example Debian mips was last available for Buster (Debian 10.) . indeed ... seems a mips-device isn't the golden choice to start a "mikrotik-docker-career", ...

floaty

Has anyone managed to build your own container for mips architecture? . ... guess the most un-thorny way would be installing qemu ... running an open-wrt mips guest installing docker-support building a container and copy it over to your target system . ... if you're done ... copy it to a cloud-driv...

floaty

hAP ac³ is IPQ-4019 ... my test was on hAP ac² IPQ-4018 ?? ... so when it's a hardware-limitation ... probably RAM ?! could not find a document with min. requirements running docker ( ... are there min. requirements ??) . case closed ... filesystem related !!? ... reformated the usb-flash drive: pr...

floaty

### snip ### To the contrary! When the docker implementation had been made earlier, MikroTik would have had zero development time to invest on things like ZeroTier, that could have been entirely made by the company behind it and released as a docker container. I thin the docker container is the gre...

floaty

### snip ### You cannot upgrade from v6 to v7 that way. You need to download the appropriate v7 package from the website, upload it to the router, and reboot. Once you are on a v7 version you can (usually, unless something was broken) do those in-place upgrades via winbox again. [/quote] . pretty s...

floaty

Yes, why wouldn't RC3 be available? It has been released publicly

.
.
could'nt install via winbox ... it was possible to update from 6.45 to 6.49 in winbox ...
but developement-update was stuck while "computize download size" ... something like that

floaty

rc3 still avail for download on the MT-website ... and ... positive ... works on RB1100AHx4 . [admin@MikroTik] /container> print 0 file=alpid.tar name="2df45158-b892-4e06-af32-9ed00c0a1b9a" tag="alpid:latest" os="linux" arch="arm" interface=veth1 cmd="/us...

floaty

tried that too ...
next idea was to vandalize customer spare-parts and give it a try on RB1100Dx4
... but 7.1rc3 seems on hold in the moment ? ... maybe rc4 is in the oven ?

floaty

hAP ac³ is IPQ-4019 ... my test was on hAP ac² IPQ-4018 ??
... so when it's a hardware-limitation ... probably RAM ?!
could not find a document with min. requirements running docker ( ... are there min. requirements ??)

floaty

It works ...

.
may I ask on which hardware do you startet it ?!

floaty

Thanks. Still doesn't work. I guess I'll contact support.

same here ... totally numb ... like nothing

floaty

. would be interesting, if anybody tried the MTik-rad-server stuff with MS-Clients in an IPSec-Dial-In-scenario with eap-authentication ... ... not 100% positive, but that should also require the MS-extension inside the radius-server. . Yeah ... ... maybe yesterday grilled someone a fresh Dodo on hi...

floaty

olympic !!! ... nobody can say that we NOT did our morning sport : ) . there are MS-extensions which needs to be annouced in the related server-certificates ( ... and also the client-certs when involved) ... but there also code-extensions needed to involved inside the server-side sources, when you c...

floaty

it's there, install the the npk-file from extra package & use winbox 3.29 .. 802.1x status for windows-clients: unchanged
.

userman-7.1rc1.PNG

floaty

.
?[(ROSv7b4 & 802.1x) & (windows-802.1x-client)] -> 'in statu quo res erant ante bellum' [pre-ROSv7b4]

floaty

dude just checks if reasonable response is received. (dude server should be added to radius servers shared secret list)." So I removed all the changes and created the dude in the shared secret list and it worked for me. . true ... for me too ... anyway, it would be nice to know, whether and ho...

floaty

just because already chocolate-santa's awaiting you in the local supermarket, it doesn't mean christmas eve has broken !
... maybe it's a little bit about timing ?! guess your impatient question shows mom and dad they're do'in fine : )

floaty

gacias !

floaty

.
no predefined place on this board for a buzzer ... looks bad for a beeping hAP ac^2
.

hapac2-8.jpg

.
like on https://i.mt.lv/cdn/rb_images/1533_hi_res.png

floaty

guess 3 & 4 are just to pin the button to the board ... but you could test the the broken button with a beeper ... ?! ... the one with the switching-function are yours.
.
... btw. sincs your box is open : ) ... can you post a photo from the whole board ? ... just another issue to consider. Thanks.

floaty

can you just solder the speaker to the board? ... not me ... you could do it yourself. But what is highly questionable: can that lead to a fruitful result ? Odds that you ruin the board with such shenanigans are quite high. Why not selling the board and have a beeping one instead. Interchanging non...

floaty

. updated wireshark -> 3.4 ... tried again ... standard-wireshark-pcap works ... maybe mouse-jitter when I saved the pcap-file with the previous-version : | . [admin@chr-7-1] > tool traffic-generator inject-pcap pcap-file=ping-req#.pcap once interface=71-e2-vlan100 iteration: 1 tx-packets: 1 tx-byte...

floaty

. with traffic captured on a MTik devices it works ... not a big deal; but to replay "a situation" from somewhere else it would be nice to import such traffic !? . [admin@chr-7-1] > [admin@chr-7-1] > tool traffic-generator inject-pcap pcap-file=ntest.pcap once interface=71-e2-vlan100 itera...

floaty

Diffs in response time that big appears to me, like the first configured resolver times out and a backup entry is doing the job.
Try a tool like dig or nslookup to check, if your Mtik is resolving.
Change to
ip dns
and
export terse
your config to give us some insight whats in the config.

floaty

. You could add an raspi-zero-pi to the usb-port, configure it as an usb-ip-node and a syslog-receiver. Then ... for every event you need a sound ... you generate a syslog-message, which you can translate via 'logwatch' or something similiar into a special noise. Very soon you have grown youself a r...

floaty

. your precision-freeware isn't showing any parameter stepsize on it's x-axis ?? ... so for starters: hard to say if this is an issue or a neurotic prolaps ... (sorry !) : ) . not shure what kind of size (router and network) we are talking about ? ... in my Opinion: Gibson's Stevie targeted with thi...

floaty

. from your initial post I saw that: . /ip ipsec policy add dst-address=0.0.0.0/0 group=WindscribeVPN proposal=WindscribeVPN src-address=0.0.0.0/0 template=yes . just made my first efforts with the ipsec-template feature myself ... question is why is your template so ...gdmn "wwiiddee" ? ....

floaty

. Just tried to inject some modified packets into my home-network, but had no luck wenn I tried with externally captured traffic (wireshark, tcpdump). So question : which format an injectable capture-file should be written in, to have allowance to pass by to the wire ? Is only with a mikrotik-device...

floaty

Not 100% sure about that. Since hw-offloading is working with the "real" interface address - mac or IP (and I presume the hw-offloading is anchored to the mac-address) my idea was to use VRRP only as failure-recognition and use the master/backup-script to set and reset the IP of the interf...

floaty

. Actually the results from my testing are better than expected. Using only the up-down-scripts from VRRP to set the IP-address of an hardware-offloaded (vlan-)interface, then push some gratuitous-arp packets with the traffic-generator tool. Downtime <~ 1Sec. ... Not Datacenter-like but better than ...

floaty

mmh ... "vrrp-by-proxy* (using *vrrp-v3 with a script for setting 'vlan-if'-IP ) could be a workaround made some tests ... just dreaming ... : ) ... setting an address ... pushing some extra pakets ... : | ? . guess the problem isn't merely connected to hw-offloading, then to presenting the &qu...

floaty

. I had nearly the same results with an IP-address directly bound to a switch-port as with an IP-address bound to a vlan-interface. Hard to explain throughput > 9Gbit/s with some software-wizardness (which might be there : ) ... but that would be "beyond" ! If I understood raimondsp explan...

floaty

Hello, are there any recommendations, opinions or a prospect how CRS3xx-hardware-offloading could be implemented in a redundant IP-topology. Is this possibly part of a roadmap ? Just learned that an IP-redundancy-protocol like VRRP or even a simple script - state of play - can't be used to achieve L...

floaty

. I suggest you create a separate forum thread regarding L3HW+VRRP. If gets enough attention, then we will put it on our roadmap. . thanks, will do ... just brooded what a script could do ... seems a lot of shebang has to be considered ... it isn't done by an IP-address-change; can't change mac-addr...

floaty

the vlan-interface on top of a bridge is also kind of 'virtual' ... ... and in a high bandwidth environment it would be not so uncommon to have the need for redundancy ? ... so if an offload redirect is possible from the vlan-interface to the bridge-interface ... maybe it's also possible to add a st...

floaty

. not working, when I put VRRP-interfaces aside to the vlan-interfaces and use these as gw-addresses ... maybe not yet supported ... or do I miss something in the vrrp config or somewhere else ?! ... still wirespeed when I use the vlan-if-IP's as gateways ... . [admin@crs312] /interface/vrrp> export...

floaty

. was'nt shure if all that means the L3hw-offloading would include a vlan interface on top ... ... now I am ... tested with a crs312 ... and indeed: fun ! . !!!!!!!!!!!!!!!!!!!!!!!!!!!!!! interface ethernet switch set 0 l3hw=yes /interface bridge add name=bridge1 vlan-filtering=no /interface bridge ...

floaty

+1 . great I've found your post ! everytime I'm doing a re-discovery (and networks ... ... there arara changing!) ... I give the bold F-word three times, because nothing happens : | ... also a discoverable service-preset would be very sensefull ( ... do not know if this has to be forked into a new ...

floaty

L3-offloading is a broad topic ... the prestera-chip also supports "NVGRE, VXLAN-GPE, GENEVE, SPB, and 802.1BR port extender"
... is vxlan-tunneling now also implemented with hardware-flow-support ... or we talking just base L3-forwarding capabilities ( ... for now) ?

floaty

Had a look, to the system ... obviously some fork or kind of open-wrt ... not much functionality left, from what you can get, if ROS or an 'open' OpenWRT is installed. Strolled into the Netduma-forum, where the Netduma-CTO claims, that the machine contains proprietary QoS-functionality, which makes ...

floaty

so why the effin f'''' did you not started testing yet ?

floaty

.
would horizontalize the problem for tile-cpu's (just a remark ... I'm not an owner ... not now)
.
guess the general possibility to export a table to csv would do it for the relevant horsemen !?
.
( ... as always: just my opinion ... you can do whatever you want ... without affecting my circles)

floaty

Hi Emmah,

your verbal descrption of your problem is not sufficent to help you.
... if the problem is really bugging you, make a sketch and try to illustrate where you got stuck.
... give the people here an idea what you did on the device !

namaste

floaty

It's a BETA-version ... and exactly meant to reinvent your discovery spirit. UserMan is and was a radius-implemention so adressing for clients, is done with radius-attributes. Not shure which features you are targeting on ... but that worked with a lot of versions before 7.XBETA. So stage your lab ....

floaty

. you failed ... in multiple ways ! . 1st) you failed with laying out your issue and your network design in a reasonable way . 2nd) you brought your personel confusion into this forum . 3rd) you have already a workaround (RBD52G is working pretty, while 951G makes headache*) ... so nobody has motive...

floaty

.

Direct to the point, is it even possible in the first place?

.
a question ...
a question that might also Descartes, Pascal and Heisenberg could have asked that way ...
.
: ) don't bust our nuts ... and post the solution

floaty

. the question is indeed not fully without cause ... guess you want to connect to another vendor ? ... if not ... ignore my mumble ... not an expert, but in a stream-cipher with an pre-shared or diffie-hellman'ed key, should the cpu-load for de- & encrypt pretty much the same And I guess the ref...

floaty

I'm saving this text in case it will disappear as well.

.
you're safe here

.
you should consider such a task if you're wandering an ubnt-forum .... because it happened to me there ( for minor boldness : )

floaty

. first ! ... you giving us config-data (which is a nice thing) ... you put it in here: . post-cfg.PNG . so nobody gets eye-cancer ! . and I'm not shure if you posted everything from router2 ... but a default-route to router1 would make huge sense .... and I'm missing it ... do you copy ? providing ...

floaty

. if this is only happens to your aruba-ap's ... not to the rest of your network-equipment (like other cisco, huawei ... juniper, alcatel switches ... ) . it smells to me like something is wrong with your vlan-configuration. . whatever ... your aruba-ap's (instant- or controller-ruled) might have a ...

floaty

.
first post ? ... really ?!
.
I like your style man ! .... somewhat consequently from the start ... keep on rockin!

floaty

.
not a problem ... had a beer aside ... thats why I'm doing the easy cases ...
... enlarge forum-karma ... drinking beer ... like bodhisattva recommended

floaty

.
anyway ... that's a neat thing ... so I'm fishing revenue here too

floaty

.
so far with typo's
.
beeing sedulously with screenshots ... is really for the Kimme : |

floaty

. the script should start every time, a lease from the related dhcp-service is issued ... so your logs doesn't show any script-activity ... something's wrong (tautologically : |) . even when the script is outdated ... there should be a loggged failure 'bout it ... so check your references and for ty...

floaty

. and you're not the first when you search the forum, for the keywords in the article below (yes, it's one from our admired market-leader : ) . https://www.cisco.com/c/en/us/support/docs/ip/transmission-control-protocol-tcp/200932-Ethernet-MTU-and-TCP-MSS-Adjustment-Conc.html . homebrewed here: . ht...

floaty

I mean, yes ... MTU-related ...

floaty

floaty

the packets are being shown, ufw is disabled so its not a problem there . shown ... ? where ? . do you wanna say, you were able to see the already DST-NAT'ed packets at the target-system [10.2.1.2] ?? ... if not check first ! . there is a rule to another port on the same system ... do you checked i...

floaty

. first of all ... you could log your point of interest to a destination of your convenience ... guess most convenient, because fastet, is to your console of choice: . system/logging/add topics=script action=echo . trigger a dhcp-event and have a look, if some birdy is flying up in the console ... I...

floaty

. Had some spooky moments with the dude myself ... you made quite a step from 6.45.2 to 6.47.1 ... Migrating a database between software-versions is probably not the most beloved homework for a developer. Not shure whether the amount of the data is worth the effort and if you have a db-backup ? I wo...

floaty

thumbs up !

floaty

Please include gretap tunnel in version 7.1. eoip is not vendor neutral. . reviewed the old links in the topic ... maybe it's just the two of us ? : ) , I've tested gretap tunneling with cisco-click-OS-AP's and Alcatel-Stellar-AP's (generic support for the last) I outperformed the alcatel-gtts solu...

floaty

https://forum.mikrotik.com/viewtopic.php?f=1&t=160484 . since I gave already +1 I am at: 2 . I see this more relevant than vxlan ... classical "virtualizers" loosing land ... (Gordon Gecko said: Greed is good ... but some water [and more money] underbridged) so I guess some "unen...

floaty

. there are rumors, that swos supports snmp ... and than an ocean is cracking open ! https://wiki.mikrotik.com/wiki/File:Swos-statistics2.png . SwOS only supports a partial MIKROTIK-MIB (for health, PoE-out and SFP diagnostics). To monitor interface status and some other counters, you should look fo...

floaty

Thanks, tried the real 24dBi antenna setting, still no love. And as far as PTP set-asides, it appears the FCC has dropped those from the regulations, as far as I can find. . . so maybe an "older" image-version brings your wireless-link to live : | . but you can consider yourself: youre on...

floaty

just had a look into my account ... there's the possibilty to request a country-key-lock for a device . so maybe you can do that (cause the PtP-has default- and permanent license ?!) for your legit serial ?! . maybe you should push again support-side ... your Tik'l comes with a support-period for th...

floaty

. not shure if we're talking the same issue ... but choosing the reg-domain can be sometime kinky for a MTik-Device. Sometimes (or always?) there is a predefined min/max antenna gain to be set, before you can choose the related country-reg-domain and installation-environment*. If there's the wrong v...

floaty

.
What's new in 6.48beta12 (2020-Jul-06 13:33):
.
*) ike1 - allow using "my-id" parameter with XAuth;
.
SOLVED

floaty

.
just some illustrations added ....
... coped a while with the ROS-ipsec-template-thing ... doing this config ... I'm happy to understand now what it can be usefull for : )
.

installed-SAs.PNG

.

used-policies.png

floaty

. recently got the task to provide a VPNC-link to a group of users ... my MTik-arsenal came to mind followed some older posts in the forum and got it running with v7.1beta1 (unforti not with a production-release because of limits in xauth-implementation) *1) . I had no access to the remote-vpn-devic...

floaty

. ran into a problem configuring ROS 6.47.1 as xauth-client: I cannot choose 'key-id' as local-id-source -> error . xauth_6.47.1.PNG . same on CLI [admin@MikroTik] /ip ipsec identity> set 0 my-id=key-id:abcxyz failure: XAuth must use auto my-id [admin@MikroTik] /ip ipsec identity> . according to thi...

floaty

.
a ball plus : ) vrf-menu has joined ip-context in winbox
.

vrf-menu.png

floaty

.
"ip route" context is still a CLI-only domain
.

bumms.PNG

floaty

must be very annoying to our fellow Mikrotikls, that every new release anouncement is turning into a whining-zone : )
.
so many fashionable new features ... no party : \
... but that's your life jacky brown : |
.
so hopefully my vendor id dhcpd inconvience is handled first : )

floaty

...
and I cannot be tired of repeating: "do not bridge so effin much!"
bridging is advanced pharmacy ... you do to much ... it turns to poison !
.
the most wellknown traffic-catastrophes happended in conjunction to bridges and tunnels

NO JOKE !

floaty

revisited ... . in your very well populated bridge: I configured ether2 to 5 to only works with VLAN90 --> to talks with Clients (un-tagged) ... hopefulle correct. you've configured a PVID=90 for eth2-5 but (it seems to me() these ports are intended to be just ethernet -access-port for your clients ...

floaty

booh ... thats rich ... if you have winbox, can you post a screenshot from your "interfaces list"
.
if made a sketch before you started to configure all these ... ? ... can you share ... I'm a picture man.
I can't figure what's the purpose of all this ! : |

floaty

my opinion ? ... there are two ways to proceed with the issue: 1.st approach: you read the related documentation and then read forward in this forum how to get support - then you formulate a new request in here with the newly learned skills 2.nd approach: youtube yourself an old muppets-show episode...

floaty

From your decription I figure there are two devices involved ... but your posting is ... blunt ... from which one? . and whats the problem with a little sketch, to let the "free-of-charge-supporters" know, what you are created over there ? ... is this too much ? ... it .. isn't too much ! ...

floaty

nope ... not down ... keep on investigating. . C:\WINDOWS\system32>ping a815XXX648c.sn.mynetname.net Ping wird ausgeführt für a8150965648c.sn.mynetname.net [78.XX.YY.145] mit 32 Bytes Daten: Antwort von 78.XX.YY.145: Bytes=32 Zeit=28ms TTL=243 Antwort von 78.XX.YY.145: Bytes=32 Zeit=29ms TTL=243 Pin...

floaty

... your snipped configuration does not contain a hint to which interface you're configured dhcp-server is connected to ?! . if you want a common network over multiple (hardware-)interfaces there should be a bridge, where all your intented (hardeware-)interfaces are "a port" [personally no...

floaty

. still no option-set linking to a vendor-class-id possible in dhcpd ... ? it's possible in v7beta8 !? ... is this by intent ?... or a bug ? . . [admin@v6.47.1] /ip dhcp-server vendor-class-id> add Creates new item with specified property values. address-pool -- pool used for this vendor-class-id co...

floaty

feature was introduced a while ago in v6.47 and it is also avail in v7beta8 in v7beta8 I am able to link an option-set to a vendor-id (what is obviously the main-purpose), but I cannot do that in v6.47 ( ... our beloved production-release) ?? ... dhcp is application-layer, nothing kernel relevant (i...

floaty

... who's wondering ? we have IPv6 running for over 10 years in the provider-production-environment ... but who's using ? in EMEA or AMER (without BETA-Feeling) ? Noises heard: it's running big time in the "chinese-internet" (and they wanna be part of the standardization-process ... [they ...

floaty

thanks ... nice ... will see if I can scramble up some money to become a mAP-owner

floaty

you're right ... the simplest possibility is far too - ... bloody - simple here. https://mum.mikrotik.com/presentations/VN17/presentation_4493_1494480323.pdf The Technique; Ninja Said This is The Jutsu #joke • Static DNS # ... näh • Web Proxy # ... nope • Route Policy # ... eventually, why not ... i...

floaty

.
? someone did this before ? ... looks viable ... but I'm 55-60 bucks away from knowing for shure ...
.

like-that.png

Search found 378 matches