MikroTik

jhbarrantes

I found 7.16 duplicating RIP routes. Shall I open a ticket to support?. When disabling RIP, the route is still there as dynamic but unreacheable. /routing rip instance add afi=ipv4 disabled=no name=rip /routing rip interface-template add disabled=no instance=rip interfaces=vlan-voip mode=passive /ip...

jhbarrantes

Very good news! Congrats @normis, looking quite nice.

jhbarrantes

What you are un-ticking is the list of columns shown, not the interface itself, that still as "yes" as you can read in the same screenshot. In addition, you cannot modify this interface, as it has been dynamically added by "internet detect" probe. You will need to create the inte...

jhbarrantes

Ahh! I get your point, I have been able to replicate your issue. As the DHCP Server is created dinamicaly out of the PPPoE session, neither DHCPv6 server or DHCPv6 binding to pool can be converted into static. However, you can still convert the PPPoE session to a static one (associated to the user) ...

jhbarrantes

Can you delegate the prefixes just by DHCPv6 Server? I mean, once the PPP session is stablished with your client you run the DHCPv6 Server on top of this interface, and client will request the PD using DHCPv6 Client. In the server side, you and do then static bindings to the prefixes delegated. I do...

jhbarrantes

Clamp in the tunnel interface is the "automated" way to do it, as long as you can calculate PDMTU (not blocking ICMP messages, aka "ping"). You can do the same with mangle, even do the calculation yourself and fix the TCP MSS to a fixed value.

Regards.

jhbarrantes

Yes, you can. It is installed in case you want to run CAPsMAN. But, if that is not your case of use, it is safe to remove it.

Regards.

jhbarrantes

Great, thanks @DarkNate!

jhbarrantes

Hi guys! I ended up with thew following configuration that (finger crossed) seems to be working just fine: /interface list member add interface=home list=LAN add interface=home list=VLANS add interface=guest list=VLANS add interface=v6only list=VLANS add interface=internet list=WAN /ipv6 address add...

jhbarrantes

I will give it a try, thanks! However, what is the point of enabling PIM-SM if I then need to add a manual entry to MDB for not breaking SLAAC, which is exactly what is happening and what I'm trying to correct?

Thanks!

jhbarrantes

I'm not messing up anything mate, my purpose is precisely this, to work with a single bridge. But if I'm messing up my IPv6 setup in the process, I rather go with two bridges to achieve my goal. As I mention, the issue is caused when turning on IGMP Snooping at the bridge, and I need this feature be...

jhbarrantes

Ummm… I shot fireworks too early. I must be close as the MDB table is populated and multicast groups are tracked properly, but neighbor discovery for IPv6 is broken, and que only way I have to get this working is by splitting it into different bridges: main for my vlan addressing & IPv6, second ...

jhbarrantes

Thank you very much indeed @DarkNate, that did the trick. My setup has a particularity, and this was the root cause of the issue. Appart from those set of VLANs, the bridge itself runs another VLAN (not declared in /interface/vlan, as I don't address it) between an eoip tunnel and a port inside the ...

jhbarrantes

What will it be an example setup with igmp-snooping + igmp-proxy, for this kind of setup? Bridge as upstream and vlans as downstream interfaces.

Thanks!

jhbarrantes

Hi, I found what is causing the issue, but really don't know why. I recently moved from two bridges configuration (one with IGMP Snooping + multicast, plus another one to vlan filtering) to a single bridge with all, vlan filtering + IGMP Snooping. Is that what is causing the issue, the IGMP Snooping...

jhbarrantes

Definitely something with the RA. I torched the interface v6only and the communication get stuck when trying to netogiate an address. As if I edit any parameter under ND (that I guess is re-launching RA process), the address gets allocated blazing fast. Anyone with something similar in 7.14? I'm run...

jhbarrantes

Hi, I have a pretty standard IPv6 configuration, as detailed below (home, guest and v6only are vlans). Since a couple of updates for stable versions (so not really related to latest 7.14), I'm getting a weird behaviour for clients doing SLAAC address autoconfiguration: it takes a lot of time for cli...

jhbarrantes

mAP AX in mAP Lite package, don't think so. Thermal issues. mAP package/size, maybe... that would be very sweet. Also good! I'm big fan of these two mini routers. Specially mAP (not mini version) saved me when doing netinstall froma laptop that doesn't have ethernet port. And mAP-Lite was for quite...

jhbarrantes

Indeed, joining to the wish list: mAP Lite AX: usb-c + PoE-IN + gigabit port + 2,4 wifi ax in a modern ARM architecture. And the magnet, don’t forget the magnet!

That will be an amazing swiss knife to carry on with you while traveling.

Regards!

jhbarrantes

Hi guys, an error detected with devices using "fash" as disk: command to reset device and then run script with "run-after-reset" option doesn't see flash drive. Autocomplete doesn't work and input the name of the file doesn't work either in 7.14. /system reset-configuration keep-...

jhbarrantes

OP clearly stated the obvious and you seem not to understand nor answer his question? So once again - how is something as queue-types related to the defconf or resetting the router? It has imo nothing to do with anyone expectations, nor wishes. Because this is a NEW queue type in RoS. Since it's ne...

jhbarrantes

Changes in defconf are not applied on upgrades, AFAIK. That is correct, you need to reset the device to defaults to see such changes. Or you can do /system/default-configuration/print and selectively cut/paste from that. (it is also possible to use file=filename with that, and download the file, fo...

jhbarrantes

*) defconf - use "fq_codel" queue as default interface queue for wired ports on LTE devices; What difference does this make in practice? My assumption would be that it only has an impact when the ethernet port is maxed out, but the likelihood is that the LTE will be maxed out first. Can y...

jhbarrantes

I think you can define whatever you want on the client side to do this split-tunneling behavior you mention. What you point out is just a reference.

Regards.

jhbarrantes

Regarding this *) leds - added "dark-mode" functionality for hAP ax3 and Chateau ax series devices; How do I enjoy this for hAP-ax3? I tried with ip leds settings but there is not a "dark mode" anywhere (set all leds off option was already there before this release, but it only s...

jhbarrantes

You need to accept UDP port in firewall filter, at input chain. dst-nat rule would only make sense if the server is somewhere below the router (it is a client of the natted network). You shouldn’t need anything on NAT to reach the gateway or other subnets that router may manage.

Regards.

jhbarrantes

Yes think so. I’m not 100% sure how it is implemented on their infra, but I would say announcing a /64 to the interface pointing to customer should do the work. I have tested this at home network, announcing a /64 from my prefix pool to wireguard interface pointing to a remote location site, and the...

jhbarrantes

Think client should be a /32, not /24. Could it be this?

Regards.

jhbarrantes

Could it be that google router is expecting this as a SLAAC address you can just advertise? Some implementations I’ve seen deliver both, a /56 as PD and another /64 with auto-configuration (most likely for internal router administration from provider), maybe this could solve the problem. Kind regards.

jhbarrantes

What do you spect from this hardware? It is very limited. If MTU is adjusted properly, next bottleneck will be CPU.

Regards.

jhbarrantes

Most likely, MTU issue. Adjust it using mangle rules, as this is not automatic (PDMTU) like in other protocols.

Kind regards.

jhbarrantes

Let's see if that helps. If I understood you properly, what you need is a proxy-arp request from your LAN Example detailed here: https://youtu.be/YJxVm6jZYiU?feature=shared&t=1680 PS: I do agree with @BartoszP, you won't get much help given that description, not attaching a simple line of code a...

jhbarrantes

The fq_codel type is set for wired (Ethernet, SFP) interfaces in order to reduce bufferbloat. No interface queue for LTE interface itself. That's true, physically ports can use "non rate limit" queues. But still not sure what the change does... e.g. what does "wired port" mean i...

jhbarrantes

/queue type add name=fq-codel-ethernet-default kind=fq-codel fq-codel-ecn=no
/queue interface set [find default-queue=only-hardware-queue] queue=fq-codel-ethernet-default

Why turning off ECN?

Thx!

jhbarrantes

Why migrated configurations (upgrade from 7.12.x to 7.13) has setup non default values for port-cost-mode=short at the bridge, as well as defining internal-path-cost + path-cost at ports?

Thanks!

jhbarrantes

Did anyone testing 7.12rc1in a wifiwave2 device (hAP-ax3 in my case) notice some kind of stickiness to 2,4GHz frecuency? Previously roaming to 5GHz works flawlesly in 7.11, but now it seems some devices are kind of lazy to roam, even when they are quite close to the AP (2m away, literaly), unless y...

jhbarrantes

Did anyone testing 7.12rc1in a wifiwave2 device (hAP-ax3 in my case) notice some kind of stickiness to 2,4GHz frecuency? Previously roaming to 5GHz works flawlesly in 7.11, but now it seems some devices are kind of lazy to roam, even when they are quite close to the AP (2m away, literaly), unless yo...

jhbarrantes

Does it also add the interface to the VLANs tab in the bridge as tagged? My VLANs for WiFi work fine regardless of the PVID setting on the port but they don't work at all unless the WiFi interface is added to the VLAN as "tagged". This happens automatically on legacy CAPsMAN. Yes, it does...

jhbarrantes

7.11 Introudces a vlan polution in bridge vlan table. Default vlan was still there even with frame types = admit only vlan tagged on the bridge. 7.12beta3 still with the same issue. Reported as SUP-125982.

Regards.

jhbarrantes

Upgraded 2 x 5009, 2 x cAP, 1 x mAP and 1 x cAP ax. I have had the issue reported by AdB and eworm that my 5009 running my capsman is "dropping" the VLANs for any VLAN edge ports on the 5009. This includes the management vlan that then drops the wireless networks. The rest are working fin...

jhbarrantes

Subnet ID is managed by RouterOS and you cannot influence its assignment when using from-pool. Currently Option 3 is your only solution, use dhcp-client's script to update prefixes when necessary. Please create a support request at help.mikrotik.com Thanks god for clarifying that loud and clear. I ...

jhbarrantes

Hi! I read several posts and still don't understand if I'm doing something wrong or simply this feature is not implemented in current ROS 7.x version Question: how in earth do you assign /64 addresses (subnets) to different interfaces when having a /56 dynamic prefix delivered to a pool by dhcp-clie...

jhbarrantes

Testing new 7.9rc4 with vlan filtering setup in ax3, equipment as AP. I can't see anything regarding this in the changelog, but as you touch wifiwave2, worth trying. If the problem is still there, I will confirm once wifi signal is vanished. I attached the configuration, just in case, even when it i...

jhbarrantes

Is anyone haivng wireles issues with a hAP-ax3 and the last 7.9rc3? Wireless interfaces suddenly went down with no aparent reason or error on logs (both, not only 5Ghz, so it is not a DFS issue). The only particular thing of this equipment is that is setup with VLAN filtering (couple of vlans coming...

jhbarrantes

Hi! I have the following topology in my network multicast-from-sites.png A, B and C are three different places (remotes) joined with wireguard tunnels. In site A, there is a multicast server feeding traffic into local bridge by IGMP Proxy, where it can be used with no problem. Local bridge in A cont...

jhbarrantes

Thank you for your reprots. We have managed to reproduce 7.7beta9 DNS type=FWD entry issue and will try to fix it as soon as possible. Sorry strods, I was out. In my case was even simpler: a brand new ax2 just rebooted with default configuration cannot resolve DNS queries when default gateway is us...

jhbarrantes

7.7beta9 dns-forwad STOP working failure: dns name exists, but no appropriate record downgrade to 7.7beta6 works well Same here with a hAP-ax2. I can’t use the router as DNS provider. Router can use its DNS to resolve internet domains, but not clients using router as dns provider. Wifi issues seems...

jhbarrantes

7.7beta8 totally screwed WiFi on hAP-ax2. Authentication failed for any device, no matter what kind of security you select (wpa2 only, wpa3 only, wpa2 + wpa3, not specify any authenticatio type). Only open wifi with no security seems to work.

Could you please review?

Thanks!

jhbarrantes

It's not supported that the local interface will be controlled by CAPsMAN. But given how configuration profiles work - CAPsMAN uses the same exact "configuration", "datapath", "security" etc., you can just set the same configuration profile on the local interface, as t...

jhbarrantes

Hi! I'm trying to replicate the CAPsMAN example you have in documentation for a brand new hAP-ax2. However, I'm unable to get the wireless interfaces up and running. As I'm trying to run CAPsMAN and CAP under the same device, the only modification I did from your example was to set caps-man-addresse...

jhbarrantes

The bug still exists as of v7.6.

@jhbarrantes did you send the ticket?

Yes, it is corrected in 7.7betaX.

Kind regards!

jhbarrantes

Amazing, thanks rextended!

jhbarrantes

Hi, I'm having problems when trying to read PPPoE profile context in v7.4.1. As per documentation, it seems the following items are exposed as context for this script: https://help.mikrotik.com/docs/display/ROS/PPP+AAA#PPPAAA-UserProfiles user local-address remote-address caller-id called-id interfa...

jhbarrantes

Think I bricked a mAP after upgrading it from 7.4 to 7.4.1. All LEDs are ON (solid) when powered, but device is unresponsive. I'm trying to netinstall, but struggling to put this in netboot mode. Anyone having the same issue with small devices? I'll try later tonight BUT ... on the Help page for RO...

jhbarrantes

Think I bricked a mAP after upgrading it from 7.4 to 7.4.1. All LEDs are ON (solid) when powered, but device is unresponsive. I'm trying to netinstall, but struggling to put this in netboot mode.

Anyone having the same issue with small devices?

jhbarrantes

set rtsp disabled=no ports=554,8554,7236

Was this setup for any specific application? If so, please share. Just enabling this, with 554 by default, works for most use cases.

Kind regards.

jhbarrantes

It seems to be working fine with Movistar IPTV (Spain) too! Very good news for all we were waiting for this to be implemented. You will get tons of happy customers when releasing this to the stable version. @Mikrotik Support, just to satisfy my own curiosity... What was the final implementation you ...

jhbarrantes

Perfect! Thanks a lot for clarifying.

jhbarrantes

The new RTSP helper in 7.5b4 works fine for me and solved my problems with Reolink cameras. Great news. I am in conversations to get it tested for movistar iptv. Let’s see if we can end up this post with very good news. Question for you, did the helper create any dynamic nat rule when it is in use,...

jhbarrantes

I just ordered an SXT LTE6 Kit and would like to know if I can safely run this release on it. I have no experience with any lte products from mikrotik. Usually I connect everything using dsl or fibre but this time the isp can't provide such a connection in time, so I have to use lte for a few weeks...

jhbarrantes

How do I open a ticket with Mikrotik? Has anyone had any success with the DHCP-Client Issue? I am no longer able to pull an IP address from my ISP on the WAN Interface.

Try testing version 7.4beta5. It corrected the error for me.

Regards.

jhbarrantes

@stroebs They added this to 7.4beta5: *) dhcpv4-server - placed option 53 as the first one in the packet; Hopefully this will fix our issue. Thanks for your work on this. Regarding the Nest cam issue when upgrading to 7.3.x, this is what I found: The DHCP Offer has re-ordered options compared to 7....

jhbarrantes

I'd take the offer. Give me some time and I will prepare this for you.

Thanks Larsa.

jhbarrantes

Repeat after me: There Are No Standards, Not Even for IPTV. :D Sniffing the Transport field in the outgoing RTSP request as defined in RFC2326 is enough to have all those IPTV solutions working. Transport: RTP; unicast;client_port=12345 OpenWRT manages to handle all those IPTV services with just th...

jhbarrantes

Same here with Movistar Spain and VLAN 3 for getting VoIP service. DHCP client is not even able to get an IP from that VLAN configured in Ether1 (which already have another VLAN configured for internet, delivered vía VLAN6 and PPPoE service). Something weird happening with DHCP Client in that versi...

jhbarrantes

Upgraded multiple devices inc CCR1009 / CRS317 / RB4011 / RB3011 / wAP AC all OK. However, I encountered an issue when upgrading my RB5009 from 7.2.3 to 7.3: it has a bonded WAN interface (Ether 2 and 3) connected to a Virgin Media HUB 4 (in modem mode). The bonded WAN interface is configured as a ...

jhbarrantes

Just to be clear, are we talking about the end user ie consumer market or the business side?

End users.

Regards.

jhbarrantes

I can't thank enough Mr/Mrs. @tangent for the kind of replies he/she is giving, and the pretty well knowledge about RTSP demonstrated. And I do agree with you @Larsa that RTSP has many different shapes or implementation variants. But let's be clear on what we need, that is fairly simple: something (...

jhbarrantes

Regarding RTSP helper which is the actual connection tracking module. We will look into this and this one is the one I was talking about there must be a very good reason why after 15 years it is still not a part of the Linux kernel. An RTSP helper is no more appropriate for inclusion in the kernel ...

jhbarrantes

but most of them relying on this implementation . Yes, that is the one we were looking at and one I was talking about. Yet again we come to the conclusion that by "implement RTSP helper" people mean different things. That is what I was talking about initially because a post "implemen...

jhbarrantes

Without a single word on what exactly is assumed by this letter combination RTSP is one of those protocols designed in the early days of the commercial Internet — 1996 — before NAT became a common thing. Its creators therefore felt free to continue the old assumption of a symmetric network: all cli...

jhbarrantes

A little bit in general about requests like: Please implement "four_letter_combination" feature. Without a single word on what exactly is assumed by this letter combination, followed by several +1 posts. It is immediately a red flag and most likely will be ignored. And stating that this &...

jhbarrantes

customer services do always count calls, tickets, emails, forum posts etc. and report to their supervisors... you get the idea... the more demand they receive from customers for a feature, the more priority it receives in implementation. dunno about forum rules, i try to be nice and friendly, thats...

jhbarrantes

they seem to be counting posts in forum imho so your users/friends can register and post their request in this forum topic thats all i know. Will still be valid if we keep a single post like this top high in comments? I mean, for not having too many replicas flowing throughout the forum, asking for...

jhbarrantes

MikroTik support #[SUP-78171]: hello there (regarding RTSP helper) Mon, 28 Mar 2022 17:59:00 +0300 (EEST) Artūrs C. (Jira) <support@mikrotik.com> —-—-—-— Please REPLY ABOVE THIS LINE ^ (for faster response, use our support portal). Hello, Thank you for contacting MikroTik Support. We do not have an...

jhbarrantes

Is not just about Movistar using RTSP for their VOD solution (by the way, about 3,8 million customers only in Spain.. if only tiny percent currently uses or think on using Mikrotik for their setups... these are LOTS of routers). Many CCTV camera system also uses the same protocol and will highly ben...

jhbarrantes

Great, thanks for letting me know mkx. I will prepare this email as well with those details you mention and link to this post.

Cheers.

jhbarrantes

Hi there, There is a bug introduced at some point in v7, when trying to update the LAN subnet vía quickset. The bug is quite simple to reproduce: reset the router NOT using "No default config" flag and just go to quickset and change your LAN's subnet to anything different than 192.168.88.1...

jhbarrantes

It's not directly listed in IP>Firewall>Service Ports under 7.2rc3. But have you tried using the "sip" ALG there with your RTSP port listed? ALG really deals with SDP, so the "sip" ALG may not care it's actually RTSP. Nope, it SIP ALG needs at least some SIP BEFORE fixing the SD...

jhbarrantes

We definitely need this to be implemented in RouterOS v7. The lack of this feature is negatively affecting to all MikroTik users in Spain, under the major ISP provider in this country, Movistar. This ISP uses this helper for mapping UDP ports for IPTV on demand traffic. Flow starts with a tcp packet...

jhbarrantes

Please change title of thread.

OP Limited in 7.1 Configured Router to Only Run 3 WG Interfaces - Please Help!!

Added SOLVED to your suggested title.

jhbarrantes

I stopped creating interfaces at 10 on mAP... Might be config related ? Please export config and post contents of the file here in between Code quotes. /export hide-sensitive file=anynameyouwish Problem found! I was creating the interface with the same port as other one already created, reason why ...

jhbarrantes

Hi,

I can only create 3 wireguard interfaces in an RB4011. When trying to create the fourth one, I've got an error in logs saying Could not create IPv4 socket

Anyone tested this so far? Is a bug or just a limitation?

Thanks!

jhbarrantes

For some reason the DHCP client on my hAP mini stopped working on 7.1rc6 and I lost any ability to connect to it, even though all the clients connected to it (both ethernet and wlan) had access to the internet. I reset the router using the hardware button, set up my configuration again, and then sa...

jhbarrantes

I recently migrate one of my router's to RouterOS v7rc4 version. I notice fasttrack counters (either packages/bytes) are the same for this firewall rule and for the subsequence one that accept new traffic in forward. If I'm not wrong, these counters should be different when fasttrack is active, due...

jhbarrantes

I recently migrate one of my router's to RouterOS v7rc4 version. I notice fasttrack counters (either packages/bytes) are the same for this firewall rule and for the subsequence one that accept new traffic in forward. If I'm not wrong, these counters should be different when fasttrack is active, due ...

jhbarrantes

Possibly an issue with MTU size and ICMP packets? Have a look at this topic: https://forum.mikrotik.com/viewtopic.php?f=2&t=154449 Hi eworm! First of all, really sorry not to reply to you before, I was very busy with work and couldn't find a gap to keep digging into the issue. I reviewed your s...

jhbarrantes

Hi, I'm trying to setup a very particular setup using CAPsMAN. The main idea is to join a "roaming" router, for traveling purposes, to my local (HQ router) network at home. Once both are linked, using any kind of tunnel, just pull wifi configuration from CAPsMAN running at HQ router. I hav...

Search found 88 matches