for anyone interested, this is my config: CAPsMAN: /interface bridge add admin-mac={ether1-MAC} auto-mac=no name=bridge priority=0x1000 /interface bridge port add bridge=bridge interface=ether1 internal-path-cost=1 path-cost=1 priority=0x10 trusted=yes add bridge=bridge interface=sfp1 internal-path-...

Hi, i have been tasked with building a WLAN network for our smelter. The place is not big (approximately 500m diameter), but our heavy machinery might block off certain parts/paths. So, if someone needs to put a lead wall down for the day, i need to find a way to connect from one side of the wall to...

you have /ip firewall filter add chain=forward action=accept at the top of your forward chain, which means you forward everything. any forward rule after this is ignored. including your blocking attempts. in order to see how often specific rules got hit enable the packet count column in WinBox: Pack...

because the forward chain accepts by default, you should end the chain in an explicit drop all: /ip firewall filter add chain=forward action=drop if you can still ping across subnets, you probably have another router which is doing the routing. for testing purposes i suggest switching to instant-err...

necroing this thread :roll: i run v6.43.4 and i also see this behavior. if the connection is in a wait state ROS blocks all reconnect attempts. my test config: # ip on the public interface :local PubIP 192.168.108.2 # ip on the lan interface :local PrivIP 192.168.109.1 # ip of the local server :loca...

after switching from FritzBox to MikroTik as my DHCP/DNS server, my clients stopped resolving short dns names. i need to explicitly trigger regexp entries, otherwise dns resolve fails root@fServer:~ #> ping -c 1 Monster ping: Monster: Der Name oder der Dienst ist nicht bekannt [i](name or service is...

thanks that helped unlocking webfig.
now the upgrading odyssey starts

if this still happens after you 'wiped' the router you maybe weren't thorough enough. step 1 get the tools: - download WinBox, NetInstall and the newest RouterOS. step 2 privacy: - unplug your pc from all networks, including wlan. - remove everything from the router, including power cable, usb drive...

i want to service an ancient MikroTik router. nmap shows only one open port (30815). i tried logging in with ssh,telnet,http,ftp and finally WinBox succeeded, but failed after login with 'router to old'. i managed to download WinBox v3.0 by url-guessing, but still not old enough. does anyone still h...