MikroTik

bandini981

OVPN log: ⏎[Jun 15, 2023, 17:32:18] Client exception in transport_recv: process_server_push_error: Problem accepting server-pushed peer-id: parse/range issue works well til 7.10 Same here. Also stopped working Passepartout (iOS app) and other Mikrotik OpenVPN clients. Downgraded to 7.9.2 and everyt...

bandini981

OVPN log:
⏎[Jun 15, 2023, 17:32:18] Client exception in transport_recv: process_server_push_error: Problem accepting server-pushed peer-id: parse/range issue

works well til 7.10

Same here. Also stopped working Passepartout (iOS app) and other Mikrotik OpenVPN clients.

bandini981

I wanted a way to monitor log files for certain entries. I have created a script based on the various log monitoring scripts I have found. I thought I might share this in case others wanted an alternative. The only challenge is that, due to an issue with how ROS displays time in log files around mi...

bandini981

bump. anyone have information on the error for
18:74:2E:AF:0A:D3@5Ghz-Site9-wAP-1-1 disconnected, 4-way handshake timeout

Same here...
Any update?

bandini981

The camera do not reply on time

Thank you for replying.
Since clients stuck un this state for a long time, is there a way to speed-up the recovery acting on the AP side?
Tried to disable/enable the interface, changing the interface channel. Nothing helped...

Thanks

bandini981

Are you using some "app" from the vendor on your smartphone ? Perhaps your app on your phone uses your mobile provider (3G/4G/whatever) => Internet-access/CGNAT Is there an "intermediate" cloud platform that you are using ? (from EZVIZ). Perhaps that cloud-platform picked up the...

bandini981

Hi,
all of my EZVIZ cameras try to reach my public IP address from their internal IP address, like this

Sep  5 07:15:58 192.168.0.1 firewall,info UNALLOWED_IN input: in:Camera out:(unknown 0), src-mac --, proto UDP, 192.168.2.7:20769->x2.x1.1x7.1x5:10227, len 77

Anybody know why?

bandini981

HI all, lots of lines like this in my log file Sep 5 06:42:06 192.168.0.1 firewall,info bogons from LAN forward: in:Camera out:WAN, src-mac xx:xx:xx:xx:xx:3d, proto UDP, 192.xx.x.9:20769->100.104.47.26:10376, len 77 I've a list of "bogons" addresses that must not be reached from internal a...

bandini981

Hi guys, I'm trying to connect to a AirVPN server using Mikrotik but always get AirVPNOvpn: initializing... AirVPNOvpn: connecting... sent P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=a1f4782d845f569 pid=0 DATA len=0 AirVPNOvpn: disconnected <peer disconnected> AirVPNOvpn: terminating... - peer disconne...

bandini981

Sorry, my bad didn't see that(
what software are you using to record videos?

OpenRTSP...something like that:

/usr/local/bin/openRTSP -B 10000000 -b 10000000 -Q -K -v -i -F file_name-P 15 -u xxxx FFFFFF rtsp://192.xxx.x.x:554/stream_h264

bandini981

What kind of RSTP traffic your cam are casting: unicast or multicast? try to use unicast typical usage on hikvision: rtsp://admin:12345@IP:Port/Streaming/Channels/ID/?transportmode=multicast rtsp://admin:1234@IP:Port/Streaming/Channes/ID/?transportmode=unicast here's some others https://www.getscw....

bandini981

same typical chinese, i suggest you to try analyse network dumps, may be you'll figure something out, all these china cams are unpredictable and always connect to some vendor servers for only god's known reasons. I've limited the access of the cameras to the local network only, no internet access a...

bandini981

Hi, had similar issues with single HikVision DS-2CD2412F-IW ipcam(typical china), the only solution we got is to use ethernet as long as all our cams support PoE (802.3af) , found out that hex PoE can get 802.3at power and easily power up 4 ip cams with 802.3af like passthrough (was very inefficien...

bandini981

Hi all, I'm experiencing some strange behavior. I've simple configuration with CAPsMAN and five CAP. There are five IP cameras on the network and a service that records five RTSP streams (one for each camera) using OpenRTSP program. The network is quite good, low ping, good coverage, poor interferen...

bandini981

Couple of things (that might help): Only use WPA2-AES, nothing else Only use channels 1, 6 and 11. Anything in between will cause interference Get rid of the access-list...any (modern) client will handle this themselves Disable 802.11b, just keep 802.11g/n What version of RouterOS are you running? ...

bandini981

Hi, sometimes clients disconnect from APs because of "No internet connection available" on the WiFi network. Has anyone else had this problem? Let me add some useful information about the network topology. I have four CAPs: 1. Outside the build, outdoor installation 2. Ground floor 3. Firs...

bandini981

What I would try ... add action=accept allow-signal-out-of-range=30s disabled=no interface=any signal-range=-86..120 ssid-regexp="" add action=reject allow-signal-out-of-range=3s disabled=no interface=any signal-range=-120..-87 ssid-regexp="" . If you want to push off slow conne...

bandini981

(3) is different from (8) as reason. (8) is the client who disconnects, (3) is because you kicked the client out ! https://aboutcher.co.uk/2012/07/linux-wifi-deauthenticated-reason-codes/ This rejected and disconnected ..... 08:45:11 192.xx.xx.xx caps,info XX:XX:XX:XX:07:F6@cap66 rejected, forbidde...

bandini981

... look in the LOG for the reason mentioned there. (enable System >logging > Topics:wireless to see more information). Is it "station leaving (8)" ... or something else ? Let me add some useful information about the network topology. I have four CAPs: 1. Outside the build, outdoor instal...

bandini981

Same problem here.
Clients suddenly starts to randomly disconnect from APs.
Tried to set DNS queries and TCP session to 500/100 but did not solved the problem.

My CAPsMAN has Local Forwarding and Client to Client Forwarding enabled.

Any other suggestion?

bandini981

Hi all,
what does exactly "...@cap29 disconnected, 4-way handshake timeout" mean?
I have some EZVIZ cameras connected to a cap that sometimes stuck in this error.
Configuration is:
One CAPsMAN with 4 CAPs running 3 networks each (1 + 2 virtual).

Many thanks

bandini981

Packets routes by route mark to vpn interface... Reply come from the other side, checked by RP-Filter, based on rules without route mark, and discarded. Yes, exactly! The way to overcome it: 1) copy routes pointing to local networks to tovpn routing table 2) and mark the returning packets to use it...

bandini981

Using routing rules instead of Mangle it seems to work keeping "rp-filter = strict" but I'm not able to perform traceroute to external IP.
Any ideas?

Many thanks...

bandini981

Hi all,
is there a way to have both "rp_filter = strict" and Mangle "routing-mark" working together?
With rp_filter = strict, return packets are dropped, obviously; setting it to loose solves the problem.

bandini981

Hi, I have my ISP on ether1, local LAN + WiFi on bridge1 and a "guest" network on ether5. I want to share Internet connection between bridge1 and ether5 giving priority to users on bridge1. I mean, if no one is connected to the bridge, users on ether5 can use the whole bandwidth. In case t...

bandini981

Hi all, I have a CAPsMAN configuration as follows: CAPsMAN - Main router, no WiFi Bridge with 3 VLANs and 2 ethernet CAPs Manager with local-forwarding. CAP1 Connected to CAPsMAN eth2 CAP configured with local-forwarding CAP2,3 Connected to CAPsMAN eth4 on a switch CAPs configured with local-forward...

bandini981

Is it possible to connect to a remote CISCO SSL VPN (authenticated with group/username/password) using a Mikrotik Routerboard (RB760iGS - 6.46.4)? I tried to use SSTP Client but always get SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1 Content-Length: 18446744073709551615 Hos...

Search found 27 matches

Re: v7.10 [stable] is released!

Re: v7.10 [stable] is released!

Re: Log Monitoring Script

Re: CapsMan RSSI access-list issue [SOLVED]

Re: CAPsMAN - 4-way handshake timeout

Re: IP Cameras try to connect to CGNAT address

EZVIZ cameras try to connect to my Internet IP address

IP Cameras try to connect to CGNAT address

Cannot connect to AirVPN

Re: WiFi issue when multiple RTSP streams are active on the network

Re: WiFi issue when multiple RTSP streams are active on the network

Re: WiFi issue when multiple RTSP streams are active on the network

Re: WiFi issue when multiple RTSP streams are active on the network

WiFi issue when multiple RTSP streams are active on the network

Re: "No internet connection available" on CAPsMAN

"No internet connection available" on CAPsMAN

Re: received disassoc sending station leaving (8)

Re: received disassoc sending station leaving (8)

Re: received disassoc sending station leaving (8)

Re: received disassoc sending station leaving (8)

CAPsMAN - 4-way handshake timeout

Re: Routing mark bug?

Re: Routing mark in mangle with rp_filter set to strict

Routing mark in mangle with rp_filter set to strict

Internet balancing between two interfaces [SOLVED]

(R/M)STP with CAPsMAN and local-forwarding

CISCO SSL VPN Server with Mikrotik as Client [SOLVED]