MikroTik

jookraw

any Firewall rules or VRF configured?

jookraw

My hAP ax3 also bricked when updating to beta 5. Just like with @wiktorbgu.
Resetting config it does work, but that is not acceptable, I should not need to reconfigure my device from zero. restoring the backup make the device brick again.
At the moment I'm back to 7.17b4

jookraw

any fix or solutions? guide how to switch to SwOS? Update to the latest RouterOS, then follow the steps below: # Update the firmware after routerOS upgrade: system routerboard upgrade # Reboot the device to apply the firmware update. system reboot # Install the SwOS on the CRS310: system swos upgra...

jookraw

on the Rb5009 the 7.16rc4 keeps rebooting itself every few hours. at this point i've pretty much had it with the instabilities. i have exams coming up and i need a reliable internet connection. The only thing i've used are vlans, ip segmentation, HDD (samba), a container (adguard but not in use any...

jookraw

1. Yes, Option B 2. A mix of option A and B, Cloud for initial zero-touch provisioning then redirected to a self hosted instance (could be a Linux app or a docker container). 3. auto-upgrade, configuration management, zero-touch provisioning and monitoring. 4. modern webUI. Recently I had to replace...

jookraw

I did not saw this coming... Finally I can open winbox at night and not be blinded by the white screen. not sure if is this by design or not but now the vlan interfaces are not being shown like a "tree" v3: Screenshot from 2024-08-29 11-05-51.png v4: Screenshot from 2024-08-29 11-07-05.png...

jookraw

What's new in 7.15rc1 (2024-Apr-18 12:17):

!) system - added support for AMPERE (R) and ARM64 CHR installations (new ARM64 CHR image available);

For anyone wondering, I was able to boot CHR on the Hetzner ARM instance with this version

jookraw

I wanted to log stuff to a USB dongle...

You "logging stuff" to a USB drive is probably kiling the flash write cycles, if you really want to do that, you should use a USB hard drive, not a Flash based memory.

jookraw

I would say that you are probably hitting the limit for Wireguard on the L009, it has only 2 ARM32 cores at 800. the rPi 4 have 4x ARM64 cores at 1.8GHz. If you can, I would recommend keep using the rPi 4 for Wireguard. the cheapest model from Mikrotik that can reach 300Mbps on Wireguard is the hAP ...

jookraw

Hello, you can find the distributors on Mikrotik's site: https://mikrotik.com/buy/europe about the cheapest model it depends on what you need, like dual-band wifi or WiFi6. look https://mikrotik.com/products/group/wireless-for-home-and-office I would recommend to stay away of any non-arm, the best o...

jookraw

I am confused by this update: See attached what the SwOS UI of a CRS354-48G-4S+2Q+ shows: System is up to date with 2.13, but also the Changelog of 2.16 is shown. Also 2.17rc2 is listed as the latest available version. If I click on download and upgrade, I get "ERROR: Could not retrieve firmwa...

jookraw

no link on SFP+ interfaces on CRS310-8G+2S+IN (SwOS 2.16)!!!!! RouterOS all OK

Report with a support case, maybe they will see and solve faster, I also have the same problem.

jookraw

SUP-145280
SFP+ ports on CRS310-8G+2S+IN does not work or detect modules plugged in

Screenshot 2024-02-28 201424.png

jookraw

*) added support for CRS310-1G-5S-4S+IN/OUT; CRS310-8G+2S+IN ... To install SwOS v2.16 on CRS310 family devices, upgrade RouterOS to the latest stable version and use "/system swos upgrade" command. I tried to install it on my CRS310-8G+2S+IN, using the latest stable (7.13.5), but after g...

jookraw

After upgrading my RB5009, I noticed that I lost one of my WAN's, could not get IP address via DHCP.
After some investigation I noticed that packets on port eth1 (member of bridge with the PVID set) still comes out with tagged packets on that vlan.
rolling back to 7.13.4 solves the issue.

SUP-144218

jookraw

I have a RB5009 and a 5Gbit WAN, I can tell you that it doesn't even mind that traffic, 30% max cpu when full link traffic.

jookraw

Dear Concern, We are using multiple Dell servers in my ISP network. Recently we upgraded one dell R620 Server Mikrotik os version 6 to OS version 7.12.1 stable. Then we can see my CPU frequency showing only 1200Mhz. That was 2600Mhz when I was using the OS 6 version. Can you please help me how i ca...

jookraw

Maybe a Router + Switch ? RB5009UG+S+IN and CRS305-1G-4S+IN ($219 + $149) You will have 3 SFP+, 1 2.5GbE port and 7 1GbE ports IPv4 it probably can deal with 2500/500 easily. I have both models in my network and a 5000/300 connection, but not PPPoE and it runs fine. Before I had a 1000/300 PPPoE and...

jookraw

Anyone having issues with fasttrack stopping working after some time?

My RB5009 loses the ability of fasttrack, what limits its routing performance.

jookraw

Good that I read this newsletter, I was almost giving up and buying a expensive "dumb" 2.5GbE switch (Only 4 ports), for the same price of the CRS310-8G+2S+. I just got one, finally I can have muiltiple 2.5G ports for a reasonable price. Extra feature, if you put the RB5009 on top of the C...

jookraw

Check if you have the dns port exposed to the internet or maybe you have something inside your network doing lots of dns requests. if not, create a firewall rule on input chain, udp port 53, source interface (your wan) action deny you are also running a 3y old rOS version, update to the latest v6 an...

jookraw

My RB4011 does not allow a device connected to bridge port on a specific vlan to reach to any other device on that vlan, unless I'm running "Torch" on the port. SUP-125214 Sounds like my problem, where you able to ping it from the router? SUP-125143 From the router I can ping the device o...

jookraw

Another one for my collection. My RB4011 does not allow a device connected to bridge port on a specific vlan to reach to any other device on that vlan, unless I'm running "Torch" on the port. SUP-125214 Downgrade to 7.10.2 fixes it. I'm also suspecting issues on my RB5009, I'll downgrade i...

jookraw

After the upgrade to rOS 7.11, no device is able to connect to any SSID on the 2.4Ghz radio on my hAP ax2. SUP-125184 I only see the following log repeating: xx:xx:xx:xx:xx:xx@SSID reauthenticating Already tried: - Removed the full wifiwave2 config and reapplied it - downgrade to 7.10.2 - upgraded b...

jookraw

For me, Aliexpress has no place in my network infrastructure. There is no reason to both a "small" and bigger 24/48 one.

for pure L2 Switch, SwOS is unbeatable, easy to configure, fast startup.
an dual boot like in the CRS305 would be great.

jookraw

Hello Now with the new ax wireless devices and multigigabit wan links, I think that we need a option for a "affordable" 2.5G switch with 10G uplinks, for me a good idea would be something like the CSS610, but with 2.5G ports instead the 1G ones, PoE optional. For me SwOS is fine as only L2...

jookraw

I had one SSD used as container storage with the label "ssd", but after upgrading to 7.8, it got renamed to usb1-part1 and it broke my containers. not sure if is the same issue as here in this topic

jookraw

*) sfp - fixed false link detection with S+RJ10 on RB5009;

I can confirm that this is fixed, now I can use 2.5G NIC's when using the RB5009 with the S+RJ10 on the SFP+ slot. Also 10G on the same module is also working fine.

jookraw

The CPU on the CRS305 is not fast enough to have a 1G internet, the hAP ac also is weak for that, my recomendation is a hAP ax (2 or 3) or a RB5009 ( the beter option). I have a CRS305 for connecting my unRaid server at 10G and I run it in swOS mode, the rest of the devices, including a ax AP is con...

jookraw

Did you tried to set the link speed manually?

jookraw

jookraw Give me your Messenger or What's Up? Are You from Poland?

Yes, I'm. <removed>

jookraw

I'm also gonna build a small SD-WAN style deployment with ZeroTier. I've done some tests between my hAP ax2 and RB5009. Directly connected btest on zt inteface, I get ~200Mbps UDP and 200 RX TCP (from the RB5009) and 120Mbps TX TCP. I know that there is some overhead due the btest, so the real woul...

jookraw

Recently I have successfully migrated config (fully) from a RB4011 to RB5009. I just had to remove some extra ports from the RB4011 and removed the default configuration of RB5009 before the import. My config uses a firewall part that works for my setup, and it contains the default rules from Mikrot...

jookraw

Those 2 parts contradict :lol: without any default config = no ports on any bridge. There will be no bridge. When performing the import, if in the import config the port that you are connected is included in a bridge you'll lose the connection and some times the import was interrupted and I had to ...

jookraw

Do NOT just import the whole config as jookraw suggests. That will NOT work. Works for me, I have migrated multiple times using that way (after removing the incompatible parts, like non-existant interfaces), just need to make sure that the destination device is clean, without any default config, al...

jookraw

You can use backup/restore only to the same exact model. To transfer the config you need to export the config. on the old router: export show-sensitive file=transfer this will generate a transfer.rsc file that you need to copy to the new router. on the new one: Before importing you may need to chang...

jookraw

So far I got USB to 5.5mm cable. I have tried to power the router from powerbank with no success. I guess that the cable is 5V max (no marking on it)... You need a QC 2.0 trigger cable and set it to 12v, a cable without some circuit to trigger the higher voltage on the powerbank or use a boost conv...

jookraw

@krystian do you have any reason to have

skip-dfs-channels=10min-cac

on your wifi-5g interface? are you near some airport or weather radar?
the dfs channels is where you have more bandwidth avaliable.

jookraw

ax2 has maximum 80MHz channel? Not support 160MHz?
But on UPC router Wi-Fi 5 I have 500 Mbit/s…

You don´t need 160Mhz to get more than 500Mbps as you can see below:

Speedtest-from-LAN.png

Speedtest-from-internet.png

Screenshot from 2022-10-19 21-36-40.png

jookraw

what Wi-Fi client device are you using for that tests??

I've made the tests with a Windows PC with Intel AX200 WiFi card, I also have tested with my phone, Galaxy S21

jookraw

I have a hAP ax2 router from today and I am a bit disappointed. I have a UPC 750/200 Mbit link and on the UPC router I get speeds of about 500 Mbit / s over Wi-Fi 5. I connected the ax2 router to it and configured it for Wi-Fi 6. On the iPhone 13 speedtest I only have about 250 Mbit / s. I'm gettin...

jookraw

from which country are you?

Poland

jookraw

moderator nite: no need to quote whole preceding post. Just use "Post Reply" button. I saw it on stock yesterday in a local distributor, did not thinked twice... they are all gone... I dont have it setup as a router at the moment, just as an AP. Edit: I've done a quick and dirty setup wit...

jookraw

It was a joke but ok, not well received.

Sorry, did not catch that was a joke, no problem.

jookraw

At 48V it will most likely be the same

it does not support 48V, max is 28v.
It is possible to have difference in power usage, due the internal voltage regulators, they can be more efficient in some voltages and less in anothers.

jookraw

Hello,

I just got my hAP ax², and finally Mikrotik has a fast WiFi!
Still no 160MHz, but it is a good start! specially on a device with modest specs like the hAP ax², in some cases I've noted that 80MHz can be faster in a crowded.

Screenshot 2022-10-19 115257.png

Screenshot 2022-10-19 115252.png

jookraw

Just got my hAP ax2, firsts impressions, the wifi is atually good and fast.

How many watts does it idle at?

at 20v I got a reading of ~4.5w

jookraw

You can try a QC 2.0 trigger cable with DC jack in the other end, it should let you select 12v, that would work with with hAP, just pay attention to the DC jack polarity.

jookraw

Hello, Does anyone with a RB5009 was able to use the S+RJ10 module on it? On my device running rOS 7.5 when inserting the module without any cable it "links up at 10G" conneting any 2.5G device to it I get no traffic. The SFP+ works fine with a XS+DA0001 cable towards both my other switche...

jookraw

@jookraw, can you, please, indicate (at least one) access point (of any brand) for the home / small office that supports hardware offload between wireless and ethernet? Maybe I was misunderstood, I'm talking about the wired HW offloading, which is disabled on most mikrotik devices when bridge vlan ...

jookraw

We are not discussing HW offload for wired devices. Please don't go offtopic. You are wrong, the topic is about the hAP ax2, HW offload for vlan filtering is something that is relevant for a low powered device like th new hAP (anything below 1.2GHz is low nowadays). hAP is not a cAP, it is a "...

jookraw

HW offloading for wifiwave2 interfaces makes no sense for them. The WLAN and wifi interfaces are not connected to the switch, but are served via CPU. HW offloading does handle the ethernet interfaces, but setting "VLAN filtering enable" on the bridge, will in many cases disable the HW off...

jookraw

It doesn't work that way anymore in wifiwave2.
Vlan via bridge.

I know it. this is why the Bridge HW Vlan filtering is needed

jookraw

Will hAP ax2 support bridge HW offloaded vlan-filtering?

I was asking myself the same question, as the new WiFi Wave2 does not have vlan tag as a option on the wifi interface options.

jookraw

For me is very weird to see a feature present on release candidates and be removed in the final one.
for the "I prefer stability and dont need containers" the main rOS package does not contain it, you need to download it yourself.
Still the same lack of transparency as always...

jookraw

RB1200 from 6.49.6 > all ros 7 version even 7.4rc2
ether1-8 not working
Only 9 and 10 eth working.
Downgrade to 6.49.6 working fine
Anyone with RB1200 and ros 7 with normal operation ?

Report here: https://help.mikrotik.com/servicedesk/s ... on=portals

jookraw

on 7.3 works perfertcly on my RB5009. I see that you have multiple bridges, you should have just one, only CRS devices can have multiple bridges. note that this topic is about Bridge Vlan filtering, not bridge filtering. check your devices capabilities here: https://help.mikrotik.com/docs/display/RO...

jookraw

It was introduced on 7.1rc3 and removed just after. now it may be a indication that the 7.4beta is bringing it back, but they did not mentioned which one. let's hope...

jookraw

I think that I found a bug with WiFIwave2 on WinBox. When checking for a WiFi client connected to my hAP ac3, I spotted this: Screenshot 2022-06-09 095114.png WinBox is not showing Hours, Minutes or Days. CLI is fine, like below: [the-only-user@hAP-ac3] > /interface/wifiwave2/registration-table/prin...

jookraw

I've updated both my RB4011 and hap ac3(ww2). all seems fine except the hAPac3 is showing some strange lines each time that it
...
This did not happen on 7.2.3
Have you tried to upgrade firmware?

Anyone with this issue?

Yes, I always do after the update

jookraw

I've updated both my RB4011 and hap ac3(ww2). all seems fine except the hAPac3 is showing some strange lines each time that it boots: [me@AC3] > log/print 14:11:08 system,info router rebooted 14:11:08 interface,info Home_vlan link up 14:11:14 bridge,info "bridge" mac address changed to XX:...

jookraw

btw. if there's no route-cache on v7, then what does "/ip settings set route-cache=yes" do?

to be frank, I have no idea... this info was what I got from support when opened a ticket for high cpu usage on my RB4011 before the fasttrack was fixed.

jookraw

do you have fast-track enabled?

also, there is no route-cache on rOS v7.x.x like rOSv6 had

jookraw

there is a performance-hit when upgrading to v7, mostly the route cache is no more, so, if you do not have fasttrack enabled, you'll probably not get the full speed that you expect.
60% of CPU can mean that you have 1 core at 100% and another in 10% or both at 60%

jookraw

any reason to you still be on 7.1rc4? this wireguard bug was introduced in this version (7.1rc4) and was fixed in the 7.2 stable and 7.1.3 stable. What's new in 7.2 (2022-Mar-31 12:11): ... *) wireguard - fixed IPv6 traffic processing with multiple peers; ... What's new in 7.1.3 (2022-Feb-11 21:20):...

jookraw

Can’t you trigger the symptom by rebooting the ISP modem?

I don't have a modem, it is PPPoE over GPON, so, I have only a fiber ONT, but no, happen only when terminated by the other side.

jookraw

what interface do you have zerotier bound to?

I was using the default config, that means, all. since them I switched to only the ones marked as WAN.
as my PPPoE resets once in a week, I need to wait...

jookraw

On my RB5009 and RB4011 the fasttrack is working since the support for it was introduced back on some v7.1.sth. maybe you have something on your config preventing the fasttrack to work.
if you could post your config will be easier...

jookraw

Hi, You should only have one bridge, you separate the networks with a vlan, you can have a lan vlan also under the same bridge. below you can see how I configured mine, I need to add that I was never affected by this issue, because I always use my wan vlan under the main bridge, for flexibility reas...

jookraw

do you have your wan vlan interface under the bridge?

jookraw

I have noted that every time that my ISP resets my PPPoE connection, all my ZT interfaces stops passing traffic. No errors shown anyway, it silent stop working. The only way to restore it is manually disabling and enabling the zt1 instance. This happens on every 7.2rc and may also affect the 7.2 sta...

jookraw

Now I am sure that the issue was related to OSPF and the OVPN client that is connected via LTE (an unstable one). after I replaced OSPF with static routes, the issue is gone and the router stayed up for ~25d, when I upgraded to 7.2 stable. did not tried OSPF again.

jookraw

What happens if you sort by # instead of date?

jookraw

... It may be a bug or it may be some wrong configured. Posting your config may help to get other to verify your configuration. I don't think that is a misconfig, I migrated it from my RB4011, making the changes to match the interfaces on the RB5009. I'm suspecting a bug with OSPF, as it seems to h...

jookraw

Do anyone else having the reboot issues have ospf setup?

jookraw

Did you try it with basic config? I guess there are some in your config that fails. Why, the device is a router, and I need it as a router. It is not a lab, I need it working as it is. Also what is "basic config"? for me, basic is the what I need from it. As I'm not alone on this, means t...

jookraw

Last Saturday, I got another reboot. with less than 2d of uptime, but, for me the max uptime is no more than 8d

jookraw

I have noted that every 8 to 10 days my RB5009 crashes and reboot itself. in the logs I only see: mar/10/2022 05:42:49 system,error,critical router was rebooted without proper shutdown mar/10/2022 05:42:49 system,error,critical kernel failure in previous boot does anyone have something similar happe...

jookraw

route cache was removed by the Linux kernel, it is not coming back. I've looked again the config, it seems that should be enabled. you could try using Jumbo frames internally, if supported. if you really need near 1g or more, I think that the only way is an RB5009 or RB4011, as they are way more cap...

jookraw

You're using a bridge based VLAN which is only really supported on a limited number of newer devices. While it works it does result in the performance you are seeing. How is the right way to configure it? And why is it only using 50% of the CPU instead of 100%? 50% of all cores combined, means 100%...

jookraw

Try enabling this:

Screenshot 2022-02-25 115545.png

jookraw

I've noted an issue with ZT interfaces not getting configured from the ZT portal. assigning the address manually does make the interface work, but, this is not how it is suposed to work. I do see that Mikrotik devices show the ZT client as an older version. below you can see what I'm talking about, ...

jookraw

I can see the UPS package on the 7.2rc3 and 7.1.3, but, did not tried it yet.

jookraw

I have the same problem with the 2.5g port but in an opposite configuration. I made my own post about it: https://forum.mikrotik.com/viewtopic.php?t=183165 In my configuration my WAN port is on a 1g port and my computer is on the 2.5g port on LAN bridge. Since my setup is opposite, my lower speed i...

jookraw

Hello people I'm new here, and i want to purchase a router, RB5009UG+S+IN.. The problem is that i've read on multiple sites that it has problems with the 2.5G port?? Does anyone have a update on that ?? Can it be fixed (firmware update) or do i have to look for something else ?? thank you. regards ...

jookraw

I have OSPF working on my ZT interface between two RB's.

Have you enabled "Allow Ethernet Bridging" on each zt node on zt web control panel?
after enabling it on each node, you should see on the zt interface this:

Screenshot 2022-02-16 182627 zerotier.png

jookraw

did you tested the same cable modem connected 2.5g computer or router? the issue may be with the cable modem itself. I had issues recently with an wireless access point that had a bug when connected to 2.5g port I had really slow speeds, that did not happen when connected at 1G. Do you know if that ...

jookraw

Have you reported this on https://help.mikrotik.com/servicedesk ?
if not, I recommend you doing it, as via the forum they may not see it.

jookraw

Hello,

Did you configured a IPv6 DNS server? Try checking like below:

[j@RB4011] > /ip/dns/print
servers: 2620:fe::fe,9.9.9.9
dynamic-servers: 
use-doh-server: 
verify-doh-cert: no
...

btw, you can use the insert code option when posting configs.

jookraw

I've tested today on rOS 7.2rc1 and it seems to work correctly.

P.S. the trunk ports are configured as vlan mode= secure

jookraw

I've opened a new ticket yesterday, this time with 7.2rc1 on the title. Mikrotik replied in less than 12h, thanking the report and saying that it will be solved in coming versions, so, there is a light in the end of the tunnel, just idk how long that tunnel is...

jookraw

The Wireguard IPv6 peer bug is also still present on this version.

jookraw

... No dipshit, they have a ton of reported bugs to work through, did you have a terrible childhood?? 1st, give some respect, and look for your language. I don't care if they have "too much work", this is not excuse, I and others have reported this issue since 7.1rc5, ignored since then. ...

jookraw

And when upgrading from v6, you need to pick 'upgrade' channel, right? Looks like it falls back to stable What do you mean exactly? Currently "upgrade" channel should show this 7.1.1 release. Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4? Should...

jookraw

just tested the 7.1.1 and the issue is still here... so we are being ignored by Mikrotik

jookraw

Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4?

jookraw

The RB2011 have the same switch chip on the firsts 5 ports and the sfp that the hAP ac2 have, the Atheros8327, so it may be a issue affecting all models using the same chip.

jookraw

Have 7.1 version installed. Still no hardware offloding option.

Welcome to the RB5009 unfinished product club.

jookraw

My RB4011 when using bridge-vlan-filtering enabled, gets only 600-700 mbps LAN -WAN, my RB5009 gets a bit better 850-900 Mbps. I use PPPoE over vlan as wan. and when I enable bridge filtering I lose fasttrack and fast path towards the PPPoE WAN. I think that Mikrotik failed to inform people about th...

jookraw

Stable means it has no known serious issues affecting large groups of people, like crashes. It does not mean there are all features you want. We continue to work on new features in 7.2 branch. v6 is still stable and still available, it is not being replaced. What about the bug related to wireguard ...

jookraw

Maybe you misunderstood me, I need to use the hAP ac2 as two things: - Switch: tagged traffic from ether1, needs to go to ether20, but I need one untagged vlan 88 port e.g. ether3. - AP: multiple SSIDs, each on one vlan. What I get on ether3 is all vlans, still tagged, and no untagged traffic works....

jookraw

I've tried both with config there and not. it does not change anything...

jookraw

I tried your suggestion, and notthing, it still ignores any configuration on the switch menu.
this also applies to the "new" 7.1-testing released on 02/12

jookraw

My hAP ac2 that I use as ap after the upgrade from 7.1rc7 now fowards every single vlan traffic to the wireless interfaces How did you configure that? There are of course several ways to do it. I think configuring the vlan in the wireless interface settings is being deprecated. I use a vlan-filteri...

jookraw

My hAP ac2 that I use as ap after the upgrade from 7.1rc7 now fowards every single vlan traffic to the wireless interfaces

jookraw

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here... no, like Sergejs clearly wrote, it contains several routing fixes, compared to rc7 I think that everyone would be happy to have, somewhere the full changelog, because ...

jookraw

bad news, in the 7.1 (testing) the issue still here...
did anyone recieved any reply from Mikrotik on the support tickets about this bug?

jookraw

v7.1 contains routing fixes and improvements in order to fully comply with 6.x setups.

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here...

jookraw

About the useless switch of the RB4011, here are the tests showing that the issue isn't solved.

With bridge vlan filtering on:

Screenshot 2021-12-02 133319.png

With bridge vlan filtering off:

Screenshot 2021-12-02 133101.png

jookraw

CAPsMAN does not support WW2 at the moment.
Note that WW2 is planned for future devices, that's why there are additional requirements in terms of hardware.

What about the cAP XL ac, it was lauched months ago, after the wifiwave2 was around?

jookraw

What I said on the 7.1rc7 topic (viewtopic.php?t=180675#p894492), still valid, the RB4011 switch is still useless.
I'm wondering if the wireguard peer IPv6 bug is still present, probably yes, as Mikrotik even did not acknowledged it ...

Edit: wireguard still broken.

jookraw

The RB5009 is a example of a device with three-digit-price and with a switch (in the current state) that is almost the same functionallyty as a 10 USD cheap switch, even that this router have the switch capability for some if not all l3hw features, nothing is implemented... several months after the ...

jookraw

Really? This changelog is listed in v7.1rc1: *) added bridge HW offload support for vlan-filtering on RTL8367 switch chip (RB4011, RB1100AHx4); So it doesn't work? It works for me! The switchports on my RB4011 have hw accel enabled even with bridge vlan filtering! yes you see the "H" on t...

jookraw

Keep in mind that RB4011 has two switch chips... Bridging ports from both chips makes the/some traffic go through the CPU.

I know that, I was just trying to use one switch of the two, but still no luck...

the problem is exact the same with the RB5009, that is a complete unfinished product...

jookraw

Really? This changelog is listed in v7.1rc1: *) added bridge HW offload support for vlan-filtering on RTL8367 switch chip (RB4011, RB1100AHx4); So it doesn't work? Yes, if you use 1 vlan, no tagging and no intra-vlan routing (which includes having the PPPoE client on a vlan). If I use vlans, the FP...

jookraw

My RB4011 have no problem on PPPoE with MTU 1540 when using the SFP+ port. I use a router-in-a-stick configuration, as the switch on the RB4011 is useless Strange because it is stated that PPPoE is max 1500: https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-vlan/topics/conc...

jookraw

Why is it useless? If you enable vlan-filtering, you loose fasttrack, fastpath and any other kind of hw acceleration, which make not possible to get 1gig LAN - WAN on the RB4011 (not even half of it). In my case I have to use a external switch (CSS610) to do the work that the switch on the RB4011 i...

jookraw

Maybe now Mikrotik van start with device specific fixed already in V6. Like th RB4011 not able to maintain a MTU of 1500 on a PPPoE connection through the SPF interface. It now reaches a MTU 1492. My RB4011 have no problem on PPPoE with MTU 1540 when using the SFP+ port. I use a router-in-a-stick c...

jookraw

Hello MikroTik community, I can confirm that latest wireguard peer, which has been disabled & then enabled in ROS, is passing through IPv6 traffic. Issue is active on ROS 7.1rc5-7, I have submitted SUP-67181. Just tested this, and the result is the same, only the peer enabled last will have IPv...

jookraw

Using the verbose, the default is "vlan-header=leave-as-is" as you can see below:

/interface ethernet switch port
...
set 2 default-vlan-id=88 vlan-header=leave-as-is vlan-mode=secure
...

jookraw

I have noted that on any of the rOS v7.1 the function of the switch vlan is not woking. I'm unable to make a specific port(eth3) untagged for a vlan (88). When I try I still get all the vlans tagged on that port Config below: /interface bridge add name=br-lan /interface bridge port add bridge=br-lan...

jookraw

For anyone with issues related Wireguard IPv6, try disabling the affected peer and enabling again, this seems to affect peers after a reboot (p.s. 7.1rc7 is also broken)

jookraw

Is there any support for L3 HW offload on RB5009? And, especially, NAT?

+1

the question is how this was left behind? also the RB5009 have no way to use it's switch with different vlans without completely loosing fasttrack support.

jookraw

I would not have run beta software in production. Only if there was no other solution. Even then I would have looked for other solution. Mikrotik support itself says that the 7.1rcx is better than the factory rOS 7.0.x (RB5009 and CCR2004-16G-2S+) at least was what I got when asking for the factory...

jookraw

Hello,
please post the output from:

 /interface/wireguard/export

jookraw

This cannot be done as the pppoe client need to be attached to the vlan. If the vlan is put under a bridge, how can the pppoe client connect to its pppoe server? Hello you can do like the example below: note that in my case I use two PPPoE connections, one for v4 another for v6 /interface bridge ad...

jookraw

... 1. Is it safe to upgrade to 6.49 as offered by current 7.0.5 menu ? 2. Which firmware is currently recommended for RB5009UG+S+IN ? Staying with 7.0.5 or upgrading 7.1rc5 or else ? 3. Which router would you pick ? ... 1. No, the RB5009 does not support any rOS v6, only v7. 2. According with Mikr...

jookraw

I can confirm that this issue is not fixed on rc5.

but there is a workaround, if you put the vlan interface for the pppoe on a bridge, DHCPv6-PD works

jookraw

rc5 is locking up quite often. I really dislike, that there is absolutely no way to debug these device hangups. On a regular Linux machine I can dig logfiles or dmesg to gather infos. But MT makes a secret of the underlying system. People are left in the rain. It is frustrating. I'm having no locki...

jookraw

In RouterOS v6 if you remove all the IPv6 Firewall rules the filtering turns off or something because I'm getting ~700Mbps instead of ~300Mbps (with hAP ac2 or RB750Gr3) via IPv6. This does not seem to be the case in RouterOS v7, even with everything removed from the IPv6 firewall I'm getting the s...

jookraw

layer7-protocol does not work for SSL anyway, so you probably is you are not missing much

jookraw

Mine is all green when turned on. But I have another issue. if you go /system resource , it is from day1 a " 0.1% bad blocks". No clue it is because of the bug or there is really some bad blocks. [brg3466@RB5009] > /system resource/print uptime: 5d20h6m1s version: 7.1rc4 (testing) build-t...

jookraw

do you have fasttrack enabled? if not add it to your ip firewall. example: /ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related \ comment="fast-track for established,related"; add chain=forward action=accept connection-state=established,rel...

jookraw

I just made a test with my hAP-ac2 running the latest stable rOS. and fasttrack does work with bridge vlan filtering on, as you can see on the attached screenshots. # oct/06/2021 20:52:50 by RouterOS 6.48.4 # software id = ********* # # model = RBD52G-5HacD2HnD # serial number = ************* /inter...

jookraw

My RB5009 is up for 18h after installing the container package, but it is arm64.
I'll install on my hAP-ac2 (that uses the same arch than RB4011) to see if it crashes...

jookraw

The last test on RB5009 was using it as a switch, as both ports were on vlan 88, that comes from the upstream RB4011. I've noted that when transferring data on line rate, the CPU on RB5009 was about 10% Please find the config below, note that some part of it is not being used, like PPPoE: /interface...

jookraw

Here is a testing that I've done that shows that even L2 traffic is not getting via fastpath on RB5009, both ports have the same vlan as untagged. L2-fastpath-not-working.png /interface/bridge/vlan/print Flags: D - DYNAMIC Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED # BRIDGE VLAN-IDS...

jookraw

I'm pretty sure that both RB4011 and hAP ac2 had fasttrack working with bridge vlan filtering on, when running rOS 6.x and I could get 900+ Mbps (IPv4 w fasttrack, no bridge hw acceleration). 650-680 mbps is way to low for the RB4011. How I'm supposed to configure a port in a particular vlan on RB50...

jookraw

I'm starting to think that the container package is to blame. I had it installed on my hAP-ac2, it was rebooting all the time, but, seems that just removing does not fix it, just a full config reset. I'll test my theory on my RB5009 that is not in "production" yet /system reset-configurat...

jookraw

Hello,

I've just noticed that when enabling bridge vlan filtering on both RB4011 and RB5009 running 7.1rc4 FastTrack does not work.

this basically makes the switch on both RB's unusable.

with and without screenshots below:

with-vlan-filtering.png

without-vlan-filtering.png

jookraw

Do you have the container package installed? I'm starting to think that the container package is to blame. I had it installed on my hAP-ac2, it was rebooting all the time, but, seems that just removing does not fix it, just a full config reset. I'll test my theory on my RB5009 that is not in "p...

jookraw

In rc4 I already experienced 2 complete device lockups. Happens after a few days uptime. The device did not auto-reboot nor did the watchdog generate an autosupout.rif nor any log entry. I thought that times are long behind me, but in this recent RC the instability has catched up again. Which hardw...

jookraw

I have still 7.0.5, because I don't know, how buggy is 7rc4..So I only want to know, how to save it, before I want to upgrade.. So is it possible to backup old FW if something happen with new FW? Thanks :) No, you can't make a backup. regarding the "how buggy" It depends what you want to ...

jookraw

Hello, I am new here...I have a question, how can I get FW from my routerboard RB5009? Because from support I don't have any answer, what I want. They only told me, so I can download via downloads from mikrotik.. In rourerboard is v7 stable. But if I reinstall to 7rc4, there is no chance to turn ba...

jookraw

Hello noradtux and dksoft, I got my RB5009 this week and installed 7.1rc4 on it and decided to test PPPoE over tagged vlan, for my surprise it worked. I do have a switch between the RB5009 and the Fiber ONT, but still tagged. My config is below, (have we configured something differently?): # sep/21/...

jookraw

Yes. The configuration works if you remove the VLAN tag and tag outside, e.g. with a switch between RB5009 and modem. The root of the problem is VLAN on RB5009. I just got my RB5009 and my FTTH connection works perfectly using a tagged vlan with IPv6 and prefix works. Maybe the fact that my ISP giv...

jookraw

I have a higher MTU on the SFP, PPPoE won't go further than 1492. Even 1501 byte pings do not pass through. Is this working on your side? Strange, I have PPPoE(MTU 1540) over a VLAN(MTU 1600) on a bridge(MTU 6000) and have no MTU issues... [@RB4011] > interface print Flags: X, R - RUNNING; S - SLAV...

jookraw

Still no IPv6 prefix via DHCPv6 if PPPoE interface is VLAN tagged on RB5009: /interface vlan add interface=ether1 name=FTTH vlan-id=7 /interface pppoe-client add add-default-route=yes interface=FTTH name=TELEKOM user=xxx#0001@t-online.de /ipv6 dhcp-client add interface=TELEKOM pool-name=GUA-pool6 r...

jookraw

are you sure that you have 6.48.7? there is no such version on Mikrotik's website.

2021-09-19 172717.png

check also here:viewtopic.php?f=21&t=178417.

jookraw

Check your IPv6 routes, especially if you see 2 default routes on your WAN interface, with me, every time that my PPPoE connection restarts, I get a weird default route without a link-local address as nexthop the valid one should have a fe80:... as a nexthop/gateway not your interface, check if you ...

jookraw

@jookraw are you sure your devices are rebooting because of the l2mtu? My hapac2 has a relatively simple config and is also rebooting every few hours. Just checked the l2mtu settings on my device and most of them have 1594 / 1598 set. Will lower them to 1592, and see if the random reboots stop. Edi...

jookraw

Do anyone else have issues with MTU > 1500 on hAPac2 or RB4011, I mean, like just having a bigger l2mtu than 1592 make the device reboot randomly ( this happens on my hAPac2, did not tried the rc3 on the RB4011, because I need MTU 1600 on the vlan used for PPPoE). I'm aware of the issue regarding th...

jookraw

In v7.1 RC3 docker support is added so anyone who has/ will try implementing mDNS via container? It would need to be able to attach docker interfaces to each vlan on the existing bridge (as it needs to be on the same broadcast domain), if possible it could work, but, still not good as a native mDNS...

jookraw

My hAP ac2 keeps rebooting each 5-10 mins

jookraw

Do anyone knows if the RB5009 will be getting support for L3hw?

jookraw

Lets just remember that there is a open source implementation of it called avahi (that is actually what runs under the hood on EdgeMax routers for mDNS). Most people here against, never used mDNS, so they didn't test it. also, there is no multicast package on 7.1 yet. most people here for it, have u...

jookraw

Hello, The 1st thing that you need to do is make sure that you have on the CSS610 the latest version of SwOS Lite, any version before 2.13 was really bad, I recommend going with the 2.14 (latest one). on vlan ports configuration tab, change on the ports towards the modem's the vlan receive to "...

jookraw

@rextended Thanks for the workaround idea, but, for now, there is no multicast package for the ROS 7.x. @raimondsp I don't understand the resistance against mDNS repeater, yes could be complicated to have all of them correctly configured, but still, I don't get it. Also, putting the phone in the unt...

jookraw

I don't have the wireless version. the problem is the RTL8367, it does not support anything besides the same as a $10 switch. anyway, I don't use it, just the SFP+ port.

jookraw

With that settings I give some clue & hint for someone...
Simply "copy" broadcasted mDNS/SSDP between VLANs.
No something named "mDNS proxy" required...

not in the case of using a Routerboard without a switch chip or with a limited one (like RB4011).

jookraw

Yes, the question is, why separate the IoT, if you don't really need to separate ?

@normis, basically some users, like me, want to isolate IoT devices by the L2 domain. but still allowing some connections to start from the trusted side.
some times all this Ch***** crap you will never know...

jookraw

mDNS Repeater is needed to make some services work across vlans, like printing, casting and etc. You understand than mDNS do not do NAT, routing, firewall, etc. but just resolve address? If you can comunicate between VLANs... the VLANs for this do not have any sense! Understand? of course, I know t...

jookraw

You do not catch the point, (ignore mDNS) why make separate IoT VLAN if than must be continuosly on contact with "MAIN" VLAN? True nonsense!!! nonsense is your posts, if you don't see a reason to use it, does not mean that no one can have a reason to need it. Want a example? I want to all...

jookraw

Why a separate IoT vlan? because I want it, and why have a Mikrotik router at home and use it as a stupid ISP HG(aka router)? I want to have control of devices that I don't fully trust, those "black boxes", and having a vlan for it, I isolate it from the L2 domain. The main reason that I h...

jookraw

To those people asking for mDNS, can you give examples where it will be useful? Rextended provided solutions for the given examples. Maybe there are more examples? Hello normis, Actually, he did not provide any solution. mDNS repeater is needed in the case that you have an IoT vlan and you need to ...

jookraw

+1 for this
IPv6 Fasttrack is a must in 2021, as most of the MikroTik devices are not capable of gigabit routing when IPv6 is involved.
my hAP AC^2 is only capable of ~600mbit on IPv6. my RB4011 uses 22% of CPU when passing ~1gbit traffic

jookraw

I'm running SwOS 2.13 with PPPoE via VLAN on both my CRS305 and CSS610 without issues. try to introduce only one model at time to see if it is a model-specific bug.

jookraw

My OSPF stoped working after upgrade. When I downgrade back to 7.1beta5 it works again. . this also happened to me, I found that if the config for interface templates looks like this, it will not work: /routing ospf interface-template add area=ospf-area-0 interfaces=ovpn-in1,ovpn-in2 networks="...

jookraw

The CSS610 have issues with VLAN and DHCP on the SwOS version that it comes with, the update is done via your own browser, if something is not working you can find the current SwOS update for the CSS610-8G-2S+IN here: viewtopic.php?f=17&t=172607#p847859

jookraw

I had issues upgrading the hAP AC^2 from the v6 to v7.1b4, I used the netinstall to do it.
when I upgraded from the b4 to b5 it worked doing it via the packages menu in winbox

jookraw

Hi, Yes, you can do it. Just set the SFP port as trunk and allow the VLAN 35 as tagged, and on the other ports that go to the ATA and router, you set the vlan 35 as untagged, the devices connected will not see any vlan id, as it will be untagged. just by curiosity, are you replacing the WRT54GS as w...

jookraw

I just got the SwOS 2.13 on my device via auto-upgrade.

swos-css610.png

jookraw

Hi I just bought one of these and have tried to power up the CSS610 via POE IN port1, I have tried with a Netgear ProSafe JG524PE and an Aruba InstantOn 1930 switch and cannot power up Has anyone powered theirs up via POE IN, if anyone can shed light on this I would be grateful Thanks This switch o...

jookraw

Using RC6 and RC12 the SFP+ with an S+RJ10 module I get a huge packet loss to the rest of the network. I have a server connected via an SFP+ DAC cable at 10g without issues, so, for me, it seems to affect any speed with the 10GBase-T SFP+, did not test 10G or 5G, because of the lack of 10G NIC's for...

jookraw

I'm using Mikrotik's BaseT 10G SFP+, and I don't have packet drop issues on other versions.
I remember having DHCP issues on the same client but thought that was the packet drop that was causing it...

jookraw

which SwOS version you have? in the out of box version I had lots of issues with vlans and dhcp, the switch seemed to ignore any vlan config and strip the tag on each frame received. try to upgrade it to at least the 2.13rc5 on this thread: https://forum.mikrotik.com/viewtopic.php?f=17&t=167891 ...

jookraw

A new testing version 2.13rc12 is available - the VLAN and management connection through SFP+ ports are fixed. Please try upgrading your devices and share your feedback. Below are versions for CSS610-8G-2S+ https://box.mikrotik.com/f/0a98c88515a64596be3d/?dl=1 for CSS610-1Gi-7R-2S+ https://box.mikr...

jookraw

OMG, yea seriously!! Im LIVID I got this switch with a specific project in mind and cannot believe this has been released without even the most basic VLAN functionality. Ive spent hours questioning my skills and sanity. Now I have to rethink this whole thing and try to come up with some BS explaina...

jookraw

Hello All, like a few other users here I was surprised how bad the CSS610-8G-2S+ is (at least for now). Yesterday I got mine and went straight to installing it, in order to start using the 10g uplink to my server. After a few hours of troubleshooting why I couldn't get DHCP on any device connected t...

Search found 179 matches