MikroTik

Panbambaryla

@normis - you still don't get it and redirecting the discussion in a nonsense area. Now it looks like you're the father of this new device-mode and will keep defend it till the death. Many examples above gave us a full spectrum of real life situations where your idea is wrong. Don't be such arrogant...

Panbambaryla

We are stilll doing our best to fit it in there. @Strods, Nobody from your side responded to our biggest accusations regarding the combo your are trying to build. In majority we need router functionality not all these extra features you are trying to deliver like DLNA, DOCKER and so on. Just recons...

Panbambaryla

Let's ask then Mikrotik to prepare modular ROS version 8.

Panbambaryla

@Normis - despite of that part, the rest is pure gold. Think it over.

Panbambaryla

The same hardware offloading related problems happens to me on CCR2004-16G-2S+ with v.7.11. Adding bonding interface (LACP) to a multiple VLAN LAN-side bridge (port 7 & 8 - the same internal switch-chip) causing many router-switch disconnections and LAG flapping. Disabling HW offloading on that ...

Panbambaryla

Or did you read my statement that there are 7 free (unused) ports to mean that I was connecting the two switches with 7 connections?

Yes, that's what I understood from your post. I am not native English speaker so forgive me...

Panbambaryla

Despite all of that I still don't get why you didn't interconnect switches with at least 1 x 10 Gb twinax cable instead of 7 x 1 GbE interfaces...

Panbambaryla

I think you can achieve your goal by connecting these 2 switches with 2 DAC (10 Gbps, Twinax) cables (with no extra GbE port needed) and run LACP between devices (20 Gbps) or is there something I am missing in your setup? Of course, still 2 separate devices (2 IP addresses) but with much better port...

Panbambaryla

I honestly cannot see many real uses for it, aside from ticking a box on a design spec. The simplest and most common use of such feature would be LACP spanned across 2 different, physical switches. In CISCO world it is called vPC. I am also eagerly looking for implementing multi-chassis port agregg...

Panbambaryla

I had the same issue with the RB450Gx4 that hung up on the upgrade. It didn't brick, just a forced reboot and came back online after 4+ min.

I didn't mention I've had a boot problem. Since some OS version the SFP+ startup time is longer than expected what I wanted to show.

Panbambaryla

In RB4011iGS+5HacQ2HnD SFP+ (S+AO0005) startup time in 7.9.2 is around 4 minutes.

Panbambaryla

@normis
Regarding submitting time people are complaining about - just change scripts execution order, first post and then announce it in the background (asynchronously).

Panbambaryla

Your router must be a very powerful device to check all of these lists of rules or routes... this is the shortest path to choke your hardware. Isn't there any better way to do it?

Panbambaryla

It's not here about pleasing moderators who receive to many e-mail notifications (this may be the main reason of this thread) but about my right to use the forum the way I like. I don't want to follow moderators' private, arbitrary, non-forum-wide rules because it is against my will and the idea how...

Panbambaryla

@Jotne
Please, discuss my arguments and not who likes what or not especially in a matter that can be really easy setup (if this function triggers you).

Panbambaryla

Your complete lack of netiquette is concerning. You seem to not understand my point at all I think - that is why you use argumentum ad personam . Please, take into considerations all I have written here regarding freedom of speech and using tools that are given to me even you don't like me to use t...

Panbambaryla

Huge pictures added by Znevna...

Your huge pictures are bigger "sin" than quoting as it makes mess here...

Panbambaryla

But sometimes it's so wrong... Like going in release thread and quoting whole long post with complete changelog, only to add one sentence note or question (often a useless one on top of that). Right, there are some cases it doesn't make sense like in your example. It's obvious. Or when having a thr...

Panbambaryla

Please explain how "the ideea" of your reply changes without that quote. I can write here whatever I want or you can change this sentence in you post. Assuming I am honest person I would like to response to your initial, unchanged post. Read above, in quotation, and also please read my re...

Panbambaryla

Of course, because this is MY way!

Panbambaryla

So since many do not like the quote of the previous post, what is the problem not respecting that? No, it's moderators' terror! Everything which is not forbidden is allowed! I understand your position but also like to quote because of my previous arguments which I don't want to repeat over and over...

Panbambaryla

The forum tells you when you press submit and there's a new reply since you started writing.

...and then write it once again because of context change?
Besides, you can change your sentence so quoting it makes it frozen in a reply and keep the response logic intact.
Live and let live...

Panbambaryla

Coming here from another thread and adding my thoughts about this: I am against editing users posts by moderators as this changes someone's idea how he wanted it to be presented to others. Someone in his almighty vision did this to me and I didn't like it. Quoting is enabled so it's up to member's d...

Panbambaryla

@Panbambaryla:
L2 protocol... [...]

I don't understand what you wanted to explain. If L2 would be enough for Netinstall to work defining IP addresses would be unnecessary.

Panbambaryla

moderator nite: no need to quote whole preceding post. Just use "Post Reply" button. That's simply not true... MT is using some uncommon functions which makes it almost impossible to use it right form the start in Windows. Don't you think if it was a good product there would be no complai...

Panbambaryla

Same here.
I keep on old Dell laptop especially for that purpose (2008 and no battery).

Doesn't make sense, IMHO, as it works perfectly well under Ubuntu as virtual machine (Hyper-V) in Windows 10/11.

Panbambaryla

Confirmed - in my case I could do this without any service disruption. Thanks for all of your support.

Panbambaryla

[...] The rest of discussion is partially on you since you kept pushing for clarifications which possibly nobody around here is able to give you because of nature of the "problem" you're expecting [...] I am not pushing just clarifying what I need regarding network disruption but not tech...

Panbambaryla

Dear @Buckeye, you've made a fork of this discussion. Please, get back to the OP and try to answer my question. I am not asking for technology explanation, comparison and other discussion regarding this only simple information if it is going to break my connectivity. Fortunately I will be able to te...

Panbambaryla

No guarantees ... but if my guess has any base in reality, then no interruption woukd occur. Only some flooding of ports until FDBs are populated again. If the switch is not switching at near full-capacity, this should not be a problem either. I think I will hold my horses as will be there in two d...

Panbambaryla

What is the reason for changing from SVL to IVL? In most normal cases, they behave the same. The point of the questions is that it is hard to guarantee how it will work in your environment. That's what lab testing is for. For more info about the difference between IVL and SVL the following goole se...

Panbambaryla

... but that should not prevent management connection from resuming normally. The only effect should be some frame sent out to all ports (members of same VLAN) instead of only the correct one. If this disruption will take no more than a few seconds - it's fine. I want to do it remotely, during my V...

Panbambaryla

I would assume a IVL/SVL change would result in a complete flush of the FDB.

Yes, I am aware of this. The question is - how long will it take to rebuild separate databases (individual VLANs - 5s(?)) and if it eventually break my remote connectivity via VPN?

Panbambaryla

Hello!

I have a question regarding the topic: Can I remotely change the IVL mode (turn it on) on a CRS switch (SwOS) without loosing connectivity to my network and necessity to go to my location assuming everything is working fine now?

Panbambaryla

Why does it take so long to run SFP+ Mikrotik transceiver on RB4011iGS+5HacQ2HnD? It started to behave this way a few 7 releases back and since that moment I always have to wait much longer for communication with my LAN.

Interfaces1.jpg

Interfaces2.jpg

Panbambaryla

Any yeah, hopefully @Panbambaryla is enlightened now. There are several of us who are actively battling with this container mounts issue it requires just as urgent attention as anything else IMO. Wait your turn xD Not at all.. :-) Tell me why you waste your time with the RoS container solution inst...

Panbambaryla

I think that's clear to everybody that we all have specialization... it was rather a philosophical question why containers at this stage instead of fully focused on RoS routing functions? From my perspective containers in RoS is so niche (you can easily replace them with many different platforms) th...

Panbambaryla

Please, enlighten me...
Why do you care about something non-important for routing purposes like virtualization platform (containers), when there are so many unfinished things crucial for RoS 7?

Panbambaryla

This version has still problem with WiFiWave2 package (RBD53iG-5HacD2HnD) for mobile devices -> you can connect to network but no Internet access (guest network in a bridge in a separate VLAN). The same with version 7.3.1. Downgrade to 7.1.5 eliminates the WiFI transmission problem. Had no time to i...

Panbambaryla

Guys,

could you, please, move your discussion regarding IPv6 SLAAC into another thread? This is one big RouterOS topic dominated now by something not strictly related...

Panbambaryla

Guys,
stop this Gmail-thing conversation on the topic of specific ROS version. It's completely out of scope and interest of many.

Panbambaryla

Let's call it by it's name: Ubiquiti solution (UISP) is a good example how it should work together with the technology they use (docker).

Panbambaryla

Fun fact:
@Normis is promoting Mikrotik automatic upgrade with his new, todays video.

Panbambaryla

its been a while since last update :/

This is "silence before the storm"...

Panbambaryla

Hi, I am struggling with a problem when I am tracing the path from LAN to ISP1 USER IP network where my first hop gives me * * * like this: root@unifi:~# traceroute -In 5.5.2.45 traceroute to 5.5.2.45 (5.5.2.45), 30 hops max, 60 byte packets 1 * * * 2 5.5.2.45 0.443 ms * * but it is enough if I turn...

Panbambaryla

Good point, @afuchs.

Is there any way to achieve it directly on ROS or no easy way?

Panbambaryla

Thank you, Sob.

It seems to be quite complicated and can potentially influence my problem (mangle rules testing). Are there any other options which come up to your mind?

Panbambaryla

Hi! I am looking for a solution to the problem of testing some specific configuration where I use forwarding on a WAN interface. There is an option I can put an extra router with an IP address on this interface but -> is there any other solution to emulate a forwarding IP address ? I know how to cre...

Panbambaryla

Seems to be working fine with an option "Open in new window" and RB4011iGS+, ROS version 6.49.2, Windows 10 x64, Winbox x64.

Panbambaryla

Guys, stop this BS about DUDE in WinBox thread.

Panbambaryla

To everyone experiencing unexpected crashes when connecting to a device: try connecting to the same device with session: <none>. If it does not crash when using <none> session, please send us the previously used (the one that is crashing) .viw session file. You can select a different session when &...

Panbambaryla

Works for me on win11, maybe try to clear cache and connect to the router with empty session (not saved) Clearing cache didn't help either... Windows 10 x64, WinBox 3.34 x64, this time: hAP ac^3 with 6.49.2 (stable). Just upgraded the router to 7.1.2 and WinBox 3.34 x64 is working fine with the sam...

Panbambaryla

Works for me on win11, maybe try to clear cache and connect to the router with empty session (not saved)

Clearing cache didn't help either...
Windows 10 x64, WinBox 3.34 x64, this time: hAP ac^3 with 6.49.2 (stable).

Panbambaryla

What's new in v3.34:
*) fixed WinBox crash on startup (introduced in v3.33);

Unfortunately, didn't help in my case. 3.32 is working fine. Give my some debug switch I will use to send you log.

Panbambaryla

Windows 10 x64, WinBox x64, RB4011iGS+, RouterOS v6.49.2 Interesting this happens - when firt opene another 7.0 RouerOS device (via VPN) I can connect to local RB4011iGS+. When I start WinBOX and right after that try to connect - it closes unexpectedly. Are you able to repeat it more than once? Yes...

Panbambaryla

Not working (closing) on opening older router version like 6.49.2 Could you provide us with more information? What router do you use? What version? Do you use Wine (the latest one)? Windows 10 x64, WinBox x64, RB4011iGS+, RouterOS v6.49.2 Interesting thing happens - when I first open another 7.0 Ro...

Panbambaryla

Not working (closing) on opening older router version like 6.49.2

Panbambaryla

Note that at some time (maybe not just now, yet) it may be very attractive to move over from swOS to RouterOS when your switch can do both. RouterOS is implementing L3 routing hardware acceleration on suitable switches, making them competitive with other L3 switches on the market. (some people thin...

Panbambaryla

Is proxy-arp on a bridge working back again?
What about IPSec/L2TP Road Warrior connection - does connection attempts stil reboots the CCR2004?

Panbambaryla

on CCR2004-16G-2S+ we have 2 of them in production running around 100 pppoe clients each i get random reboot every 3-5 days. have you found any solution regarding the same. 1 running 7.1rc5 and 1 running 7.1rc6. generated a ticket already on support Hi! Give it a try and install 7.1rc4 which seems ...

Panbambaryla

Panbambaryla please email support@mikrotik.com and report all these issues you are having Thanks Normis, I did. Running now 7.1rc4 which allows me to use IPSec/L2TP (no reboots while Road Warrior connection) but proxy-arp still not working. 7.1rc6 reboots - so I can assume it has something to do wi...

Panbambaryla

My understanding is that the factory installed version (now at 7.0.9) is considered stable for the device. It won’t have all the tweaks that have been made in RC that are released after the factory installed version was created, but it’s suppose to be stable. So if you’re really worried, stick with...

Panbambaryla

proxy-arp on bridge not working (running 7.1rc4 - as 7.1rc6 reboots 2004 router during IPsec/L2TP connection). In case anybody asked - to define split VPN without extra routes and to not create extra phase 2 definitions for site-2-site IPSec VPN. It just simplifies configuration significantly. This...

Panbambaryla

Why from softpedia?
What's wrong with the official download for 7.1rc4 / arm64 ? https://download.mikrotik.com/routeros/ ... -arm64.npk

Right, couldn't find it. Corrected the download link. Thanks!

Panbambaryla

If found that L2TP client login reboots my CCR2004. Have to disable L2TP-server for stable system. This did not happen with rc4. Confirmed! Downgrade to 7.1rc4 resolves problem. Procedure: https://help.mikrotik.com/docs/display/RKB/Downgrading+RouterOS Package available here: https://download.mikro...

Panbambaryla

Where can we get information regarding SwOS Lite?

Panbambaryla

you need to reset your password, someone posted about it. It took me some time to figure out that was the cause

Right, working.
Thanks!

Panbambaryla

When did it stop working?

After Friday's forum maintenance

Panbambaryla

BUMP
NOT synchronising

Panbambaryla

Hi there,

can you explain to me how to use IPSec split DNS feature in SW 6.47.1?

Panbambaryla

Right, thanks [emoji4]

Panbambaryla

Hi there,

can you explain to me how to use IPSec split DNS feature in SW 6.47.1?

Panbambaryla

Network admins don't blindly reboot a switch and upgrade firmware in a mission critical environment. People with switch credentials that shouldn't have them do that quite often though. Then they don't perform effective troubleshooting, and complain when something doesn't behave as expected. It does...

Panbambaryla

Creatin, what a stupid answer! He is absolutely right about making us beta testers where MT is used in many production environments. MT software development is an example how to make it wrong with no respect to users. It would be interesting to find out how they (not) test their software before rele...

Panbambaryla

Something new has arrived: 1.1.1.2 and backup 1.0.0.2 malicious DNS filtering servers. Check it out. 1.1.1.3 and 1.0.0.3 are also porn aware for kids protection.

Panbambaryla

You are probably right and I am aware of other options... Simplicity is always the best solution so hEX is a perfect device here with it's small place requirements and all the needed functionality but the lack of CPU processing power is my only concern... Maybe in a near future they will offer us to...

Panbambaryla

Are there any known plans to implement a newer device with the same options but better CPU processing power (IPSec hardware offloading) or maybe there is already one I am not aware of?

Panbambaryla

Hi, I am building the solution as in one of MT's documentation example (picture attached) and wondering why cAP AC (4 cores @ 716 MHz) has so much processing power in comparison to hEX PoE (1 core @ 800 MHz)? It should be opposite IMHO as the routing device will do much more work than the simple acc...

Panbambaryla

Dear Sindy, Thanky you for your explanation which as a matter of fact were in previous posts in this thread which I read thoroughly. Maybe they will help yet someone else to quickly understand the idea behind using proxy-arp in a future. I was able to setup MT as I expected with prox-arp mode on bri...

Panbambaryla

Hi there! I was struggling with the same problems as Ivan. Finally I decided to do it this way: 1) created another "subnet" for my L2tp/IPSec clients 2) defined forward rules 3) use in Windows 10 PowerShell only once, during initial interface configuration, the command: Add-VpnConnectionRo...

Panbambaryla

and auto login when tapatalk ask me if i am user CURL: failed to conncect to directory.tapatalk.com:80 ..... I think I've had the same problem. My tapatalk global account was different from the one I've created on this forum. Try to use the correct password. Thanks for bringing forum for tapatalk a...

Panbambaryla

Now it's even worse - MT Forum is removed from available forums in Tapatalk but it seems to be a natural consequences of incompatibility...

Panbambaryla

Is tapatalk not working? The plugin appears OK and is configured

Just checked, not synchronizing. Other forums work fine, so not app related.

Panbambaryla

Guys,

we can see you are trying to stop spam by securing your forum - but please bring Tapatalk API back.

Panbambaryla

Here you are:

https://i.mt.lv/cdn/rb_files/CRS326-180223104048.png

Best
Bam

Panbambaryla

@tomasdj plese start using code function to hide an exported configuration and also to preserve formatting. Thanks in advance!

Best
Bam

Panbambaryla

Dear Mikrotik,

could you please consider changing application bar/other WinBOX window component colour while in SafeMode? Regardless of information when exiting the app it would help to identify the current mode.

Thanks in advance.

Best regards,
Bam

Panbambaryla

Work perfectly, writing right now.

Best, Bam

Panbambaryla

Hi,

I am using this device at home and for simple WAN configuration it works out of the box. In my case I've had to define an extra VLAN for WAN and after that PPPoE just on top of that .

Best, Bam

Panbambaryla

Have a look at my PPPoE configuration:

DNS1.jpg

so I do not have dynamic servers DNS entry:

DNS2.jpg

When I check the box "Use Peer DNS" it is on the list in a moment.

Panbambaryla

After update 6.44.3->6.45.1 pptp-client doesn't work - connecting.... disconnecting....connecting.... disconnecting.... After downgrade 6.45.1->6.44.3 it works i created gre input firewall rule and replaced over fasstrack. pptp-client connected. Solved No need to... Just enable ip firewall service ...

Panbambaryla

Upgraded RB4011 from 6.44.3 to 6.45.1 - no issues Well, actually there is one - the bridge MAC address has changed so the network discovery on Windows must be done again. In my case the bridge MAC addr is the same as for eth7 interface. Interesting what it depends on... Best Bam Well, the bridge MA...

Panbambaryla

Upgraded RB4011 from 6.44.3 to 6.45.1 - no issues

Well, actually there is one - the bridge MAC address has changed so the network discovery on Windows must be done again. In my case the bridge MAC addr is the same as for eth7 interface. Interesting what it depends on...
Best
Bam

Search found 93 matches