MikroTik

Znevna

Nah, I'm good.

Znevna

When staff intervenes to CONFIRM that to get this working they didn't touch any FreeBSD bits, but Larsa keeps insisting that this was FreeBSD-related. :roll: Larsa, for the love of all Latvian deities, please understand that this had nothing to do with the host operating system. We can try to make a...

Znevna

I like how an extra folder containing a single image file needed to be packed for distribution :P

Znevna

So I have a bunch of cAP ac's on which I've decided to test the wave2 driver and panic on the low space left, standalone mode, no CAPsMAN. All good, except one of them at a reboot I kept starring at the winbox window waiting for it to come back, all the others were already online, "welp, it bri...

Znevna

Please add a "Client MTU" option to wireguard peer configuration page, in order to set the MTU value in some occasion。 The interface MTU is device local. "Client MTU" must be set on the client side. For it to be part of the "Client Config" (that can be copy-paste) prov...

Znevna

So .. I had two partitions on a CCR2116-12G-4S+ running 7.14beta4 (both partitions with the same version and config), I've tried to update to 7.15rc3, the log on the first boot after update was telling that the update went fine but .. it booted into 7.14beta4, and the 2nd partition was.. empty. I've...

Znevna

@floaty, you seem to be a little lost, you ok?

Znevna

What's new in 7.15rc1 (2024-Apr-18 12:17):

!) system - added support for AMPERE (R) and ARM64 CHR installations (new ARM64 CHR image available);

wow :)

Znevna

That was regarding RAM.

Znevna

boy that's a crapload of money for a device with 16MB of ancient storage that was launched last year.
rip

Znevna

Noticed very high CPU Usage on an RB750Gr3 Profile showed that the "management" process was using almost between 24% and 27% of CPU and another "unclassified" process was using another 16% CPU NAME USAGE ethernet 0% console 1% ssh 0% firewall 0.1% networking 5.6% neighbor-discov...

Znevna

new release when

Znevna

Anything fancy in the config?
I have a 2116 that's still on 7.14beta something.

Znevna

Boy, you had some expensive bricks there for a while.

Znevna

What's new in 7.14.1 (2024-Mar-08 14:50): *) wireguard - do not attempt to connect to peer without specified endpoint-address; Needs more work. When a peer without endpoint-address connects and then disconnects - RouterOS still floods the log with useless messages (probably because now the peer doe...

Znevna

Soon: RouterOS Media Center Edition.
/s.

Znevna

All of them, because we need them. Who cares if there's not enough space for the router to function as a router.
Make your devices Open Source friendly! So we can run our bought MikroTik routers as routers without extra crap that we don't need.

Znevna

Oh wow, I'm ashamed because I was wrong on the internet. rofl. I don't know what the behaviour is on other wireguard clients under that scenario, maybe it is something MikroTik broke or maybe they used ancient sources and it was something that got fixed in more recent wireguard sources, who knows. T...

Znevna

Every channel feels like YOLO with MikroTik, that's why it's so exciting to manage MikroTik devices.

Znevna

Oh, the reply wasn't directed at you, sorry @ToTheFull.

Znevna

yes, this is the last feature that MikroTik devices needed, a broken half baked adlist.

Znevna

A fan going 13000RPM for no reason is easy to spot*, by noise or monitoring data. "Hey there's something wrong in this chart, memory usage is way higher after one hour, something must be leaking" "Hey this fan didn't spin that fast before the update" "oh we have two devices ...

Znevna

Hey @MikroTik, for a small fee and donated hardware I can test all these releases on all the equipment you send me, before going public with that release. So that you know, we can avoid crappy releases like these? Deal? We can even put togheter some testing "laboratory" over the internet w...

Znevna

There's a new stable in the beta channel.

Znevna

Can you post an example? I don't see any difference (besides wireguard) on my logs with v7.14. https://forum.mikrotik.com/viewtopic.php?p=1059747#p1059747 NTP, DNS, DHCP, ... all debug info now all of a sudden visible in log files. Can you provide the output of /system/logging/print sanity check.

Znevna

You seem to be contradicting yourself. Which one is it? I am not contradicting myself (if you had tried it you would understand). I keep insisting that it makes no sense for the passive peer without endpoint to constantly try to handshake, it's a debugging problem not a wireguard interface problem....

Znevna

Disable wireguard logging and stop bitching. That a passive peer (without endpoint) constantly tries to perform a handshake, transmitting data to nothing, just because it has a 0.0.0.0.0/0 in the allowed address, which is what is happening. This behavior is irregular, and is a bug to be fixed. Wire...

Znevna

Take it up to the wireguard devs. It's not something for MikroTik to fix.

Znevna

If you have to disallow it isn't disabled. Logic, right? Same as dhcp leases info and other random crap that gets logged by default, which, wait for it, YOU CAN DISABLE (hide..). I'd rather have logs that I can disable instead of no logs at all. Don't be lazy. Or bitch to MikroTik to improve the imp...

Znevna

Handshake for peer did not complete after 5 seconds, retrying (try 2) Handshake for peer did not complete after 5 seconds, retrying (try 2) Handshake for peer did not complete after 5 seconds, retrying (try 2) +1, the same by me +1 is very, very annoying especially with road-warrior type wireguard ...

Znevna

v7 stable but >90% functional when?

Znevna

Sounds familiar, Oh wait.
viewtopic.php?p=1059847#p1059847
viewtopic.php?p=1059520#p1059520

One could argue that having keepalive set for what you call "passive peers" is a little ... you know?

Znevna

Read the changelog.

Znevna

You have packets flying towards those peers.
Stop the packets, the flooding will stop. Or hide the messages.

Znevna

I like all this talk about Nokia, Cisco, Juniper etc.
But, MikroTik is routing the world.
Never forget.

Znevna

the author of those posts, anav, decided to edit his posts and remove all the information, the reason for complete deletion might be tied to this. Here, some older version of those threads: http://web.archive.org/web/20231002224436/https://forum.mikrotik.com/viewtopic.php?p=906567 http://web.archive...

Znevna

*) leds - added "dark-mode" functionality for hAP ax3 and Chateau ax series devices;

this is joke?

Screenshot_1.png

Screenshot_2.png

photo_2024-02-07_23-18-48.jpg

Aren't all those fields supposed to be enabled before you shut them off?

Znevna

I don't think MikroTik uses any MediaTek wifi chips?

Znevna

Ah, MikroTik changelogs. Anyway, the size is obviously not the same, probably another reason for those 120KB. I've checked the changelog posted above for beta8 and there's no mention of that. https://forum.mikrotik.com/viewtopic.php?p=1051007#p1051007 Not that I'm surprised by the missing informatio...

Znevna

Another bundle size increase for exfat and ntfs support?
No the size is the same as beta8

I'm sorry, you're right.

11,619,964 routeros-7.14beta8-arm.npk
11,742,852 routeros-7.14beta9-arm.npk

It's exactly the same size even, i don't know how they managed that.

Znevna

Another bundle size increase for exfat and ntfs support?

Znevna

All MikroTik routers have a Flux Capacitor, TP-Link routers do not.

Znevna

I still think that different RouterOS bundles for different devices with the same architecture would be the easier way to do. Just a way to prevent users from installing the wrong bundle for their device is needed.

Znevna

MikroTik development never stops! also years have a different meaning in Latvia, for them it's been like 8 months since it was reported.

Znevna

So they advertise the lifetime of the received prefix now? how sad. Do you prefer stale prefixes to linger for 30 days instead? RFC requires valid and lifetime values in advertisements of prefixes derived from PD to not exceed the parent PD. Note that if PD renews to the same value, no renumbering ...

Znevna

So they advertise the lifetime of the received prefix now? how sad.

Znevna

v6 long term wasn't like that, it had huge version bumps with a ton of new features and obviously new bugs, it had like what, 2-3 bugfix releases per major version?

Znevna

Well they have to do something if 7.14 is getting unusable on 16MB devices. The split I've mentioned above could be done easier than getting back to split packages, I think. They'd just have to implement a way for devices to get the proper firmware for them (since there will be more firmwares for th...

Znevna

Having a long term branch only with fixes, one can dream..

Znevna

routing is essential to install even connected and static routes for router to be able to forward anything at all. it does not makes sense to run router without a "routing package", which will render router useless. Lol, for the first time, I agree with MikroTik staff's opinion. This is h...

Znevna

These are the binary whales in the -arm firmware, used on stuff like, hAP ac2. We can observe that a pretty big one is the prestera dx module which does nothing on ac2. I wonder what that tiny almost 2MB .mem file is used for. Also, hotspot? wasn't that supposed to be out in a package? Maybe split t...

Znevna

It was replaced with a bigger binary.

Znevna

But it actually is about storage.

Znevna

MikroTik obviously saw this coming and will update the documentation before 7.14 reaches stable.

Znevna

Keep hoping to get the modularity back like never.
16MB devices seem deprecated soon with all this increase in bundle binary size.

Znevna

Most likely you have packets trying to reach those peers. Stop those packets and the unwanted logs will stop.

Znevna

Just disable wireguard logging, sheesh.

Znevna

WireGuard MTU = low level MTU - 80 for Ethernet, we use 1500-80=1420. for PPPoE. use 1500 - 8 - 80 = 1412. for my ISP, must use 1442 - 80 = 1362. This depends on how the peers talk with each other, for IPv4 the overhead is 60 bytes, for IPv6 it's 80, so if those peers will only ever talk via IPv4 y...

Znevna

Wireguard configuration should add an "Client MTU" parameter. WireGuard is a Peer-to-Peer protocol with built-in 4in6/6in4 mechanisms for easy encapsulation. There's no such thing as “server” or “client” in WireGuard protocol. There are only peers. Set MTU to 1420 on all peers and problem...

Znevna

Any news regarding this? viewtopic.php?t=201345#p1035100
Short version, ability to specify Client AllowedIPs in the new introduced WireGuard peer/client config section.

Znevna

Yeah, those are like the golden goose when it comes to the Wave2 drivers.
But again, you can't buy them anymore, new.
Unless MikroTik decides to renew the series with an upgrade.

Znevna

But the same specs page you linked above lists 128MB ... hmm. You ok? I bought over 100 of them and they were all 256MB! I think they wrote it wrong, it's even commented if I'm not messing around in threads back. There were a few (?) golden batches for hAP ac2 and cAP ac with 256MB (of RAM, anav, o...

Znevna

But the same specs page you linked above lists 128MB ... hmm. You ok?

Znevna

And they probably won't. cAP ac and hAP ac2 are in the same boat, too little memory (RAM) for the full featured drivers.
They could ship some -smallbuffers version of drivers for these devices, but doubt that this will see any light.

Znevna

cAP AC is IPQ4018 based and support max 300mbps data rate in the 2.4GHz band[...]

yes yes.. with the MikroTik drivers, not with the Wave2 capable ones.

Znevna

MCS-SNR-RSSI-Chart.png

MCS 8/9 (256-QAM) is not proprietary, just optional, check: https://en.wikipedia.org/wiki/IEEE_802. ... 3#Optional or some other source.
A few years late, but better late than never?..

Znevna

wow, what a comeback. So it could be done in the end, huh?
Sadly for those that have qcom devices with 128MB of RAM, that's pretty tight for the new drivers, you'd need to run those devices as pure access points and pray that they don't run out of free RAM even so.

Znevna

Ask your network administrator to take a look at your config looking for settings incompatible with fasttrack.

Znevna

That's a new low, even for you, DarkNATe.

Znevna

@Guscht: You didn't hear the news?
viewtopic.php?t=198462

Since RouterOS v7 is stable for a long time,
[....]

v7 is stable for a long time now.

Znevna

Why don't you pull the 7.11.1 release from downloads if it has a serious flaw?

Znevna

Do we know for a fact that the SOCs in question can even do line-rate hardware IPv6 routing, [...]

Yes.
viewtopic.php?t=175513#p959710

Znevna

I've asked about per core CPU utilization.
If one core is pegged to 100% yer screwed.
And afaik IPv6 is single core on some MikroTik hardware.
Regarding what you can do, nothing. Get another router if you want gigabit IPv6 speeds.
But I wouldn"t worry that much, not much traffic goes over IPv6.

Znevna

CPU bottleneck.
Check per core CPU usage during the IPv6 speedtest.

Znevna

What device do you own?
As mentioned by me above, anything else less powerful than an rb4011 is gonna suck on IPv6.

Znevna

Maybe closer than they were 10 years ago.

Znevna

T̶h̶e̶ ̶t̶e̶s̶t̶s̶ ̶a̶b̶o̶v̶e̶ ̶a̶r̶e̶ ̶d̶o̶n̶e̶ ̶v̶i̶a̶ ̶I̶P̶v̶4̶,̶ ̶s̶o̶ ̶t̶h̶e̶ ̶I̶P̶v̶6̶ ̶r̶o̶u̶t̶i̶n̶g̶/̶f̶i̶r̶e̶w̶a̶l̶l̶ ̶p̶e̶r̶f̶o̶r̶m̶a̶n̶c̶e̶ ̶o̶f̶ ̶t̶h̶e̶ ̶s̶a̶i̶d̶ ̶d̶e̶v̶i̶c̶e̶ ̶d̶o̶e̶s̶n̶'̶t̶ ̶m̶a̶t̶t̶e̶r̶.̶ LE: NOPE, It seems that they updated the servers/app to go via IPv6 too even th...

Znevna

Something as sketchy as this deservers a sketchy test program with sketchy results.
All good.

Znevna

It's too close in retail price to the rb5009. Not worth cheaping out.

Znevna

You can't please everyone.

Znevna

Well one thing, they ported yaffs to kernel 5.6.whatever, which is a total waste of time maintaining in future kernel updates.
And you wonder why they stick with the same version for eternity.
But hey, they have time for doing stupid things for no reason!

Znevna

Because they have some good hardware at a decent price.
Though, crippled by the customized bootloader.

Znevna

Re: RB3011 - still a good choice?
: No.

Znevna

You lost me right after "..it becomes a cycle:" .
Care to be more specific about that?

Znevna

I wonder why you want to run so an ancient ROS version (6.45.8) on your hAP ac2? Hacking disappropriated device (to put it mildly) is one use case that comes to my mind. Because later bootloaders are not supported by OpenWRT, which I want to install on my device. I specifically chose this model bec...

Znevna

yes yes, because if nothing else critical pops up as reproducible by support staff they'll just slap a stable tag on this rc4 and rebuild it calling it a stable release.

Znevna

Why is this marked as solved if it's still an unsolved bug?

Znevna

It doesn't work.

Znevna

They unlocked the section for existing topics, only new topics can't be created in there.
Ok, a little better, better than locking the whole thing at least.

Znevna

[...] I only this forum in ACTIVE TOPICS mode and don't separate stuff on sub-forums. [...] That's fine, still, after a fast scrolling between those I see at least two bigger topics that are listed under "Active Topics", topics that are now locked: New User Manager in RouterOS v7 New Back...

Znevna

Regarding: https://forum.mikrotik.com/viewtopic.php?t=198462 What a **** move, MikroTik. Feel free to replace **** with whatever you see fit. Context, as specified here: https://forum.mikrotik.com/viewtopic.php?t=152006 This forum section is only for bugs introduced in RouterOS version 7. If you hav...

Znevna

I'm so glad that this is the last bug/feature to be fixed in RouterOS while all the other bugs were reported and fixed already.
One could say that this makes RouterOS great again.

Znevna

[...]
What I found out, is that I made a "typo" on one of the address lists
[...]
is it something that I'm just not aware of?? (my quess is the second!!!)
Thanks in advance

You seem to do that a lot.

Znevna

Well, actually RouterOS is already doing that! Um.. no? https://help.mikrotik.com/docs/display/ROS/DNS#DNS-DNSconfiguration Servers are processed in a queue order - static servers as an ordered list, dynamic servers as an ordered list. When DNS cache has to send a request to the server, it tries se...

Znevna

So instead of relying on one known fast server you want to spam all your defined servers with queries? See, people like you hurt the internet. If we all did that, servers will be hammered with useless queries. This does not result in a "faster internet". Do what we all do, run an AdGuardHo...

Znevna

I don't know what branding has to do with this topic. So far this is only about a new feature request, as you discovered yourself (no easy way to kill an active user session). Anyway, one could kill the connection using the firewall, or even cut access to the management VPN for that user, as a good ...

Znevna

Active users can be seen, it's up to the admin doing the user cleaning to kill the connections too, or script it.

Znevna

Must be hot in Italy.

Znevna

They fixed it again in v7.11rc2 viewtopic.php?p=1017059#p1017059

What's new in 7.11rc2 (2023-Aug-03 10:50):
[...]
*) wireguard - fixed peer IPv6 "allowed-address" usage;

Znevna

What's new in 7.11rc2 (2023-Aug-03 10:50):

*) wireguard - fixed peer IPv6 "allowed-address" usage;

Is it fixed-fixed now for all platforms? You've been fixing it since February 2022.

Znevna

You fail to understand the problem described in these topics.

Znevna

Was this ever fixed? https://forum.mikrotik.com/viewtopic.php?p=888620#p888620 Regarding this topic, we have an old topic about pretty much the same issue https://forum.mikrotik.com/viewtopic.php?t=153437 Considering the age of this "missing feature", we should see it in about 7 years impl...

Znevna

Nice to see MikroTik employees using MikroTik hardware, congrats! Happy bug hunting and reporting!

Znevna

But spam isn't forbidden by current rules, because there are none.
Get it?

Znevna

Don't stress the forum users with rules, you'll get a ban or at least a ban warning.
But since there's no rule to prohibit editing posts and adding spam links, how should the bots know that it's not allowed?

Znevna

Wrong forum @anav, they don't want any rules in here.
I wonder how are the bots supposed to know that they aren't allowed to spam....

Znevna

This is the last time I'm saying this. There is no rule that forbids quoting the above post. If you harass people about it, ban for you

You see @normis, replies like that make this forum and the support staff great.
Thank you!

Znevna

Znevna

Some guidelines from 1995 for mailing lists are hardly "standards" for forum use, but sure, it's a starting point.

Znevna

This "Forum moderation volunteers" topic that was actually "Post approval volunteers" turned into something else sadly, probably I've contributed too in this matter, but that's only because I want for this forum to have actual moderators with some actual rules to follow and to im...

Znevna

I don't want my top secret attachments to be seen by every unregistered Bob out there.

Znevna

I didn't screenshot the whole page and I don't remember what's under your edit box, but if all the replies are still under your edit box, it's pretty easy to hit the quote button on the post you want to quote, which just inserts it at the cursor position. If not, you can always ctrl+c, close, quote,...

Znevna

— Don't quote a post if you are the next person replying on the topic to the post immediately preceding. I.e. don't quote the post directly over yours. It is completely pointless and causes unnecessary clutter and reduces readability/information assimilation speed. The problem with that is that you...

Znevna

[...] Is time to delete the ~6500 users without posts [...] I was a member in a forum for over 5 years before I've made my first post in there. You have to be registered in forums if you want to see attachments. So having no posts is not something you should delete users on. Actually you should nev...

Znevna

[...] 3. not teach people how to quote or how to write [...] If this forum had any decent rules and guidelines for users and moderators to follow (like any forum of this size should have), preventing abuse of certain annoying behavior from users, and preventing moderators from getting reports of &q...

Znevna

is there any plan to add feature to make mikrotik can resolve ipv6 domain.
example:
ping6 microsoft.com
thx

It's been over a decade since this topic exists: viewtopic.php?t=47189
Surely it'll be implemented soon.

Znevna

In other words, you can trash the DNS service with just setting some unsupported value in some setting that doesn't have input validation?
Interesting.

Znevna

Yeah, on discord you can't advertise your website with every post, sad for biznis.

Znevna

Sooooooo, did noone notice the 0.000 second timeout values? That automatically fails any dns request made. Same with the 00:00:00 second TTL... Maybe if something in that service is broken, settings can't be read and those are the default (not default service values, but default GUI values shown)? ...

Znevna

Oh, so if you're watching in real time the counter doesn't reset?
Probably that's what they mean that they can't recreate this ... they've never closed/reopened that page/menu/window?

Znevna

Wait... why is the MikroTik Android App using different units here? MB vs MiB? .... [admin@MikroTik] > :put [/interface/wireguard/peers/get [find where interface=wg-rw-01] value-name=rx ] 995382692 WinBox / WebFig shows 949.3 MiB The MikroTik App shows 995.4 MB We're not selling storage devices, Mik...

Znevna

They didn't block it for cheap.

Znevna

And.. what bandwidth control can you possibly make using the weak, old and slow CPU inside the RB2011? Putting each user on one of the 100Mbps interfaces? sure.. that's one way to do bandwidth control...

Znevna

Anyway, MikroTik is a little lacking of hardware on the FTTH front, maybe you should stick to FTTB for now

Znevna

??
hAP ax2 doesn't have a 2.5Gbps port, only hAP ax3 does.

Znevna

Easy fix, remove the ancient rb2011 from the picture and allow your users to use the internet.
Or configure it as a switch if you need a fancy switch.

Znevna

Behold, the power of using search
https://help.mikrotik.com/docs/display/ ... rkAdapters

Znevna

Bad employer, bad.

Znevna

Other vendors ? fasttrack? are you sure they call it fasttrack?

Znevna

Screenshot_20230531_233317_MikroTik.jpg

It was mentioned in that topic that it even goes negative in the Android App, welp.. t's true.. rofl
Surely they can't reproduce this either I presume..

Znevna

Reference: SUP-114497
Summary: WireGuard: Peers Rx/Tx counters stored as 32bit

Maybe it's platform dependent? I've only tested arm64 (rb5009).

Znevna

Well, surely it's easy to reproduce, setup two peers and push over 4GiB of data over them, but if they can't replicate the issue....
Ah, the old "bug reports lost in release topics" issue

Znevna

One month ago: wg-int.png wg-peer.png Now: wg-int-now.PNG wg-peer-now.PNG Impossibru. The interface only has this one peer, as you can see in both cases, now and one month ago RX counters match, as they are under 4GiB. But the peer TX counter rolled over a few times since then. I love the "can'...

Znevna

Hello, I never saw over 4GiB on wireguard per peer traffic counters, is it only me?
Support obviously can't reproduce this on their devices.

Znevna

Another brick in the wall?

Znevna

:lol: hilarious @mozerd, just hilarious. You know nothing about components, dear @mozerd. You can't even read labels, you've ordered the wrong switch for your customer: https://forum.mikrotik.com/viewtopic.php?t=173628 And even with the switch in your hands you were clueless why it has no PoE when i...

Znevna

Every respectable MikroTik client knows that upgrades are done with spares at hand and on the premises, not remotely, else there be dragons.
Oh yeah, and that spare updated already.
Shame on you.

Znevna

It should work, maybe you have some other issue preventing it from working properly.
Not the topic for that though.

Znevna

That's not the intention of the fix, failed resolve isn't the same thing as what you describe. As for your issue, it is easy fixable by setting `persistent keepalive` on both peers. `Failed resolve` fix is only there to fix cases where wireguard tries to bring up the peers but the rest of the networ...

Znevna

But this fix for an issue that nobody in my network can/will exploit is more important than stable WiFi, please understand. /sarcasm

Znevna

Is the "Select all" from a code block working for anyone? It only sends me to the top of the topic..
I don't think that this ever worked anyway..

Znevna

So you're hunting dusty topics that are not solved? for what purpose? The user which started this topic didn't join for more than a year, he might as well started fishing as a hobby instead of networking, since then.

Znevna

I powder other bloated forums too :p I'm not picky.

Znevna

All of that can be fixed locally. But it's kind of .. empty. clean_forum.PNG Only a few additions in uBlock. forum.mikrotik.com##.avatar-container forum.mikrotik.com##.profile-posts forum.mikrotik.com##.has-profile-rank.profile-main > .profile-rank forum.mikrotik.com##.profile-joined forum.mikrotik....

Znevna

Nobody is forcing anyone to use the forum.
Unless you're a MikroTik consultant.

Znevna

.... Would've been nice to have the "fixes" from 7.10beta5 in this release. I dont think so. That will be included in 7.10 stable release ! Mainwhile i got "MAC@wifi1 disconnected, key handshake timeout, signal strength -74" errors into console on my AX3 and devices not connecti...

Znevna

1st world problems..

Znevna

Complain in the proper topic viewtopic.php?p=1003542#p1003650

Znevna

It is possible the event organizer confused MikroTik with some other company or maybe a local reseller, this is why the info never reached us. MikroTik is based in Latvia (EU), we do not attend such events so far away. Your over the seas rockstar - MikroTik celebrity - knows nothing about this? Tha...

Znevna

You can change back to "Canvas" from the User Control Panel / Board preferences / Edit global settings / My board style
Update 2023-05-23: this no longer works, Canvas is the only theme now, for some reason.
Update 2023-06-02: "prosilver" is back as an option.

Znevna

Proper testing before pushing a major change to all users? :P nah, why bother.

Znevna

It's fine, it doesn't have the annoying button that adds useless quotes :)
Or it's harder to use it by accident at least.

Znevna

....
Would've been nice to have the "fixes" from 7.10beta5 in this release.

Znevna

[..] my issue is that you can ping all the other subnets[...]

Show us the firewall that is not working.

Znevna

Well, you have to keep the users in there entertained too with some fresh content.

Znevna

One step closer to the United Federation of Planets.

Znevna

If the Discord channel wouldn't be run by McBurgers, it would've been fine, but it's not fine.
LE: this post was made before the official Discord server was launched, my reply was aimed at one of the unofficial servers, the one with the dumb rules.

Znevna

Don't be silly, anav. We don't know how to internet properly, that's why we don't know what to use it for. Other great minds demanded this feature for a reason, those great minds know how to internet properly. PS: the feature mentioned in this topic is "Endpoint-Independent NAT" you're mis...

Znevna

Not related to the password change, but probably to the Notifications something that was enabled before the upgrade:

Notifications or Notifications.PNG

Which one does what?
Also the new waiting time before submit is annoying, you could put a little puzzle to solve while waiting.

Znevna

@msatter
Too much user just registered for 1 post, and add some time later spam on signature for index the link on google....

You can always insert a domain name in the "Location" field as our MikroTik superstar Kevin Myers did.

Znevna

At least with L009 we won't see many questions like "Why do I only get 100Mbps on half my ports?? Is this device broken??" etc

Znevna

I wonder (yet again) if it's that hard for them to have a test bench where they have devices pre-configured with every fancy feature they offer and actually test the releases before launching a stable version. They can't expect from users to jump on the beta and rc versions train and test all the fe...

Znevna

@revan: Or get a bigger monitor?
Or use winbox?
Or file a bug report to include some options to hide columns in the webfig that few gifted persons use it?

Znevna

I wish they didn't make running OpenWrt on their hardware so hard.
The last few stable release topics are .... well, not great.

Znevna

I'm sure that they can improve the feature in the future.

Znevna

This topic started about gaming, games requiring something like this for multiplayer, mostly, if not all, communicate over UDP.
So not that dumb.

Znevna

My ticket from 2021, November 29th, that was closed and reopened and closed again, just received an update that there's a fix incoming, also.
Snappy development.
Thank you, MikroTik!

Znevna

config

Znevna

Znevna

Why do you list servers that are unreachable?

Znevna

An app that does what?

Znevna

What router are we talking about?

Znevna

[...]The whole process for 120 routers took me just over 2.5 hours in total (100 hAP AC2, 40 hAP AC Lite). Overall the reboxing and labeling took as long as the configuration did. [...] You slap your Aditum label over MikroTik that fast? amazing. Anyway, other countries are fighting to get rid of s...

Znevna

We did also notice the issue with ambiguous characters and bad font. We will find a solution ASAP. One option is to switch to all caps letters only, another is to avoid O/0/I/l/1/8/B. In any case, we are workinng on it. Bitwarden, which is open source, in its password generator, has an option to av...

Znevna

Unless you use the mobile app, in which case it's needed and useful to show nice visualization of internet usage for the WANs in app.

The app should receive bug reports about `internet usage` not working without detect-internet.

Znevna

There's always the alternative in which you let the users configure their own routers.
Or provision them at actual install time, avoids having piles of hardware configured to maybe something obsolete that needs redone anyway.
But hey, you're the boss.

Znevna

Probably you should read the wiki again.
Free is not the same thing as Trial.

Znevna

The .csv file is not sent to distributors in "pure text", pay attention.

Znevna

Ah, I've missed the 1492 MTU on WAN. @casperionx: if you lower the link MTU along the path to your ISP you're not fixing anything, because your devices (PC etc) still have an MTU of 1500. Try the test again and use -t for trace mode, after changing the WAN MTU back to 1500, as @rextended suggested a...

Znevna

Provide an output of the linux utility "tracepath" or the windows utility "mturoute", in trace mode to some random external host.

Znevna

What is unclear in that picture?

Znevna

What does the mode column mean? Mode - Single tunnel - This is a site to site tunnel, a tunnel or is it referring to SHA1?. Mode - 256 tunnels - Is this 256 tunnels configured and transmitting/receiving traffic or is it referring to SHA256? rb750gr3-ipsec-0002.png ?? LE: edited initial picture (cro...

Znevna

And remember that we're at this stage because of the various clueless "installers" that contributed with customer devices to botnets over the years, leaving them with no passwords and management exposed to the wild internet. I'm sure that if you convince "The one and only Kevin Myers&...

Znevna

yes viewtopic.php?t=195430

Znevna

[...] Essentially the desired behavior is that a host behind a NAT router (MikroTik) opens a connection to the Internet to a server (STUN?) and that public IP:port mapping is recorded and then communicated to other hosts on other LANs behind other NAT routers to communicate to this host . Essential...

Znevna

[...] (I'd try something around 1700MHz just to be on safe side, I don't know what is nominal frequency)?

1400MHz.

@TeCer: what RouterOS version are you running on it? Anything fancy in the config?

Znevna

Regdb is filled up from such sources, but it could be outdated, for sure. Okay, let's take a look at https://www.asep.gob.pa/?page_id=13116 Page 131: it says 1W (30dBm) for the whole range from 2.4GHz to 2.4835GHz. While 1ch is 2412 MHz (2401–2423) and 13ch is 2472 MHz (2461–2483), and taking into ...

Znevna

I also have several PPPoE wan connections with MTU limited to 1492, since the ISP doesn't support rfc4638 everywhere. But even if ICMP isn't blocked and PMTUD works fine, I keep 1492 in RA settings, because not everything is TCP out there and even if you fix your side of things there's no guarantee ...

Znevna

I don't fully understand your issue then.
Some peers can connect to your IPv6 endpoint and others can't? Or?

Znevna

Facing similar issue in Ax3 also which is arm64. [...] That's in no way similar to the issue discussed in this topic. Allow your wireguard to work on IPv6 too, or disable IPv6 access to MikroTik IP Cloud in order for it to use IPv4 only: - disable IP Cloud so that the current entries are removed; -...

Znevna

You'll have to open a support ticket with your ISP so that they don't block ICMPv6 communication in order to allow PMTUD to work, this might be an easier task for them instead of adding support for RFC4638, and you'll want working ICMPv6 either way. Regarding google, it uses QUIC which is a totally ...

Znevna

Interesting, did you try to disable your IPv6 firewall drop rules for that test? Saw you have a custom set of rules there.
Also what OS is your test client running?

Znevna

[...] I figured it was an opportunity to mention how having the right distributor can make all the difference, too. The place or guy you buy the MikroTik gear from makes no difference on how that hardware & software behaves. So I'll respectfully don't agree with you here. As long as you buy the...

Znevna

Cloudflare has a few articles about this on their blog, I've mentioned them on other topics on this forum about IPv6 and MTU: This: https://blog.cloudflare.com/path-mtu-discovery-in-practice/ And this: https://blog.cloudflare.com/ip-fragmentation-is-broken/ And this: https://blog.cloudflare.com/incr...

Znevna

Or just do some tests and gather proof before blaming the ISP blindly.

Znevna

Obviously your wireguard tunnel isn't working.

Znevna

For increase the TX power over regulatory limits, just alter this file and save it on
[...]

I've got over 9000mW, thanks!

Znevna

What about all your posts that have helped somebody or have been involved in a discussion? I see what caused your post. We will try to deal with that. Some forums just disable and anonymize the user requesting account "deletion" (renaming it to something like AnonymousUser), preserving th...

Znevna

Apparently the original topic discussed here (changing prefix does not result in deleting old prefix at clients) has been fixed in version 7.9beta.
So it could be a good idea for those affected by that to test this version.
It's fixed, via hack.

What hack are we talking about?

Znevna

RB2011 is ~12 years old by now, what do you expect from it?

Search found 1691 matches