Found my mistake:
VLAN1000 did not work as expected - it's an experimental VLAN as it's still under construction, and that's what disrupted the connection. But it was used by the system for the upgrade but not for the ping and the DNS.

Hi all, I have a network with a few mikrotik-routers, an get a funny but annoying result. As I said: /system package update check-for-updates channel: stable installed-version: 7.12.1 status: ERROR: connection timed out But: ip/dns/cache/print Columns: NAME, TYPE, DATA, TTL # NAME TYPE DATA TTL 0 mi...

FYI: Behavior of the CCR1072 - Ethernet-1G-Port My setup: 2x hap ac2 for receiving the traffic with no filter rules. - one directly connected to the 1G-Port of the CCR (A) - one connected to a CRS354-48P-4S+2Q+ (B) 1x CCR1009-7G-1C-1S+ (T) Tester The CRS is connected to the CCR1072 via two sfp+-Conn...

Thank you for your answer. Less efficiently - as long as it brings 1GB/s -> Hopefully the PCIe-Driver does not slow down speed, and is not so difficult for the Tile CPU to handle that it really stops the system. There are 72 TILE-Cores, so there might be enough power for all. As netinstall is used o...

Hello, the CCR1072-1G-8S+ has one 1G-Port, labeled "Boot" on the front. As I can see in the diagram, it is connected by a PCIe x1 controller. 1. The 1G-Port is connected with PCIe 1.0, one lane, witch might have 2,5 GBit/s - so the ethernet port can work full 1GB/s? 2. The label "Boot...

Hi, I did not test it for myself, but here might be an answer: There is a wizard button in the wireless menu labeled "setup repeater" that might do all for you. Maybe you need to stop the WIFI by disableing the WIFI-Interfaces first. In the "Setup repeater" just type the SSID wit...

I think it could be really simple: Try pvid in the bridge-port part as the packets without vlan-tags needs to get tagged on the vlan-tagged bridge. Otherwise they get the vlan-tag 1 for untagged. /interface bridge port add bridge=BRIDGE frame-types=admit-only-untagged-and-priority-tagged \ ingress-f...

New idea for this problem: Maybe the limitation of only one bridge for this chip is a problem. So I use the one bridge for VLAN-controlled ports, the other ports I link together per forwarding-override. My test: sfp-sfpplus4 will be trunk port, I can combine it with other trunk ports (ether19 to eth...

I have some VLANs, routing and so on working fine with other devices in our network here. Now I got a CRS354 and I wanted to separate the ports and put them together with one uplink-port each (sfp-sfpplus): Group A: sfp-sfpplus1 with ports ether 1 - 24, 1-18 on VLAN 101, 19-24 trunk-ports for APs. G...

We have made documentation for the new Token Bucket option, it is new exciting and powerful feature for queues and bandwidth limitation. Detailed information and configuration example are here, http://wiki.mikrotik.com/wiki/Manual:HTB-Token_Bucket_Algorithm Short diagram explaining Tocken Bucket al...

Hello everybody, after a long study and experimentation I found an answer for the behavior of the system: First, limit-at, the minimum speed of a queue, is priorized bevor any max-limit, the maximum speed. On the wiki is a notification about it: https://wiki.mikrotik.com/wiki/Manual:HTB-Token_Bucket...

And I can't help you much on the configuration of routers being used only as a managed switch - as I don't do that anywhere. Routers are used as routers and switches are used as switches. The problem is, if you want to use CAPsMAN for the APs, you mostly need to buy mikrotik-routers as all wireless...

Hello, I can't understand one example I saw on some sites about QoS, here it is ( https://wiki.mikrotik.com/wiki/Manual:HTB#Example_4_:_Leaf_queue_limit-at ): 600px-HTB_Example4.png The result might be: Queue03 will receive ~3Mbps Queue04 will receive ~1Mbps Queue05 will receive ~6Mbps Clarification...

Of course, they are only used as managed switches, no routing on them. Most of them as WLAN-APs, managed by CAPsMAN in RB4011, and dividing the VLANs for the ports. Mostly just one route: /ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - osp...

Here is my plan, I hope you can see what you wanted - I never learned drawing network-plans... The point is, I want to see the devices, mainly the Routerboard from my PC when they are connected to the rest of the network. AND I think, I have one point not understood from masquerading so this behavio...

Hi, I have two (in fact 5) VLAN, and in both there are Mikrotiks and other devices, some of them I like to see in the other VLAN. VLAN100: vlan100_Mitarbeiter, Network: 192.168.96.0/20 - There is my PC and the most Mikrotiks, like this one, I call it MainRouter here. VLAN200: vlan200_Technik, Networ...

Maybe it's a dumb question, but can anyone explain this behavior to me?

I want to connect via OVPN to my network. I use Ethernet-Mode to get a L2-Connection for simple access to some machines inside. It still works for all machines behind, if I want to talk to them adressing them by IP or MAC - just the routerboard running the OVPN-Server fails connecting by IP. Connect...

From RouterOS Release 6.48 Changelog https://mikrotik.com/download/changelogs#show-tab-tree_1-id-25325877d7527430993e060729ac5601 : *) hotspot - added "vlan-id" parameter support for hosts and HTML pages; What does it mean? Can't find any vlan-id for users (profile) to get users on the sam...

use-ip-firewall-for-vlan=no helped for stopping that traffic. I turned it on because in the next step of configuration I wanted to have queues for traffic in some vlans. I saw in the wiki: "To assign Simple Queues or global Queue Trees for VLAN or PPPoE traffic in a bridge you should enable ap...

Hello sindy, I don't want to get you to loose your patience, so you get here the full config of the 4011 - all lines: Its a little bit changed to the former ones, as the fault you said to me (Remove vlans from untagged list and some more minor points) # nov/07/2020 23:38:48 by RouterOS 6.47.7 # soft...

Hi Sindy, yes, its true, the first part of the config missed, I'm sorry: # oct/31/2020 21:16:53 by RouterOS 6.47.7 # software id = Personal # # model = RB4011iGS+5HacQ2HnD # serial number = Personal /caps-man channel add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=...

Besides, # port with pvid added to untagged group which might cause problems, consider adding a seperate VLAN entry comes when I have /interface bridge vlan add bridge=MainBridge tagged=MainBridge,bondUplink vlan-ids=100-999 where the vlans have Caps with vlans (managed by capsman) inside this list ...

Thank you for your help, I removed all vlan-ports in /interface bridge (not the full row in vlan, just the entry, like: /interface bridge vlan add bridge=bridge_LAN tagged="bridge_LAN,bond_Switch1,bond_Switch1,bond_2,bond_1,E0-sfp_Uplink,E10_AP" vlan-ids=100 ) Your answer help me understan...

I'd have to see your complete configuration [...] So the actual issue may be somewhere else than you expect.

Posted the configurations. Anything found?

Other than that, the priority match condition gets those three CoS bits alone, so the range of values is 0..7.

What a pity, as it is allowed to set there numbers in winbox 0..65535. But it makes sense, having an "and 0x0007" in this function.

Really? It's more than 600 lines, the whole configuration. Ok, I like to see other configurations, so why not showing mine as a working configuration... The two bridges are in the RB3011, one for the left switch chip with vlan, the other for the right switch chip without vlan and filtering, so that ...

Thank you for your answers. I got packets (here a non-broadcast): (1) forward: in:bridgeLeft(LAG1_Uplink) out:bridgeLeft(e4_PC1), src-mac b8:69:XX:XX:XX:XX, proto UDP, 192.168.10.2:67->192.168.10.64:68, len 328 or (broadcast, for many ports): (2) forward: in:bridge_LAN(E0-sfp_Uplink) out:bridge_LAN(...

Hi everyone! Is there any possibility to filter in the IP-V4-Firewall rules for VLANs? Everything I found is filtering for Interfaces - but broadcasts enter the firewall with Bridge(EthernetPort), though the VLAN-Tag is inside the packet I found nothing to filter for it. Only a mangle-rule in the br...