MikroTik

Shy

Unless you need the LTE, get HAP AC. Has super duper wireless.

Super duper? Really? Its device from 2016

Sent from my SM-A705FN using Tapatalk

Shy

I didnt have any issues.

Sent from my SM-A705FN using Tapatalk

Shy

Not good....

Sent from my SM-A705FN using Tapatalk

Shy

It works with DHCP on LTE interface.

Sent from my SM-A705FN using Tapatalk

Shy

11 for 2.4 and 25 for 5 s ok?

Sent from my SM-A705FN using Tapatalk

Shy

What about ch 2.4?
Ahat will be the values for 2.4Ghz and 5Ghz?

Sent from my SM-A705FN using Tapatalk

Shy

Who can help?

Shy

I have hEX s (CAPsMAN) with ac^2 (ap)
Doing some speed tests lately have some unstable situation..but not sure what is the root cause.

Sent from my SM-A705FN using Tapatalk

Shy

Yes and then to reprovision it will recreate it

Sent from my SM-A705FN using Tapatalk

Shy

Default settings in caps-man have local forwarding turned off and client to client forwarding turned off.

Gotsprings is right, client to client is turned off. Multicast is probably not related.

Shy

Following

Shy

Can you help?

Shy

I dont understand it either. Jusr noticed that once device configured as CAP the bridging all ports on lan is disabled by default. But the bridge which used is configed in CAP settings.

Shy

One question related to the TX power
I have noticed on my config that TX power is configured twice one for band and one for channel.
what should be the correct setting?

capschannelTXpower.PNG

capsconfigTXpower.PNG

Shy

Please share your settings ( /export hide-sensitive file=whateveryoulike ) thank you in advance # sep/01/2020 18:12:18 by RouterOS 6.47.1 # software id = X9GD-CZK4 # # model = RB760iGS # serial number = A36A0C819BFA /caps-man channel add band=5ghz-onlyac control-channel-width=20mhz extension-channe...

Shy

Is this about WiFi? Or about the router/firewall? There are 4 cores, may happen that one is exhausted by something. See the profiler. If it is WiFi, check antennas, radio sensitivity tx power and general situation around both places of ap and the client. How do i check antenna and radio sensitivity...

Shy

Ok. And the rest? How it behaves without the capsman? I had ac2 as all in one router (without the hEX s) the connection was a bit higher but not much stable. now getting 170mbit dl and 194 mbit up. on my older router I could achieve 200mbit dl and 200mbit up with no issues. I am doing my test to lo...

Shy

The ac2 is just a cap and hex s is the router. I don't see any evidence for high CPU load.

Sent from my SM-A705FN using Tapatalk

Shy

Hi Who can explain to me why i always get best results on upload (200mbit of 200mbit) and about 130-140mbit (out of 200mbit) in average. I could see some picks but up to 190 but they are very temporarily. Using ac2 as CAP behind hEX s with local forwarding. Not high cpu, during tests could get up to...

Shy

Ok thank you!

Shy

rates.vht-basic-mcs (none | MCS 0-7 | MCS 0-8 | MCS 0-9; Default: none) You can set MCS interval for each of Spatial Stream -------> they must be kidding! This DISABLES 802.11ac mode of operation. Good default is "MCS0-7" like it is set in the AP as default. Somehow i have to set to none,...

Shy

Happy to see that's it wasnt only to me
viewtopic.php?f=2&t=165569

Shy

Ok thnks for the info.

Sent from my SM-A705FN using Tapatalk

Shy

So when i upgrade the packages it doesnt upgrade the firmware itself?

Sent from my SM-A705FN using Tapatalk

Shy

I guess there is an issue with some redirections that tries to go on https on port 80

forum.PNG

can the site operators checks this?

it happen on new posting.

Shy

I guess there is an issue with some redirections that tries to go on https on port 80
can the site operators checks this?
it happen on new posting.

Shy

Who can explain the difference ?

routerboard.PNG

Shy

And i dont have hw retries configured.

Sent from my SM-A705FN using Tapatalk

Shy

I want the ac2 to be cap so how is it realted to local config?
For the power should i set it for 5gh or 2.4?

Sent from my SM-A705FN using Tapatalk

Shy

Shy

I dont understand why download stream is so low compares to the up stream

Sent from my SM-A705FN using Tapatalk

Shy

It was direct near the access point

Sent from my SM-A705FN using Tapatalk

Shy

this is how i have configured it /caps-man rates add name=default-rate basic=6Mbps supported=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 ht-supported-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,m...

Shy

Shy

always getting slow on download speed and good on upload
https://www.speedtest.net/result/9992998359
how come?
What are the values in your client registration? TX rate, RX rate, TX/RX CCQ, Signal strength, .....
May be something else than the wiki link also !

See attached

Shy

always getting slow on download speed and good on upload
https://www.speedtest.net/result/9992998359
how come?

Shy

When you mention defaults means not to config ratesin capsman?

Sent from my SM-A705FN using Tapatalk

Shy

I've reset all to defaults

Who could suggest which rates settings I should use?

Shy

Did it work for you?

Shy

I have something similar with raspberry pis when having capsman configured on ac^2

Shy

Final notes 6.47.1 isnt good ?
Whats the difference between long term to stable release?

Shy

What are the cli commands?

Sent from my SM-A705FN using Tapatalk

Shy

how do I lower the power of 2.4GHz ?
I could see that most of the clients refers to 2.4Ghz and connects there by default instead of 5GHz

Shy

I dont understand the last answer
You are saying that MT is not good enough and he should go with other vendors??

Shy

I though that capsman will be best when i will have additional cAP ac. With 1 ap there is no point for sure but just for playing and know its features.

Sent from my SM-A705FN using Tapatalk

Shy

Thank you
Do you think that Capsman will be too much for hex s ?

Shy

How do i get into profiler?

Sent from my SM-A705FN using Tapatalk

Shy

I am considering adding cAP ac as well - for now ac2 has enough coverage for me, far placeshas 2g reaches up to 40-50mbit which is enough for my use there. I considered to have HeX s as the main router and haP ac2 with cAP ac as APs. While i had using hEX s as CAPsMAN i had a lot of network failures...

Shy

Thanks for now i am using ac2 as all in one router because i had some issues with capsman losing connnectivity and since i am working from home i have to have stable connection so no time for playing. I would like to give it a try.
I have hEX s and AC^2.

Sent from my SM-A705FN using Tapatalk

Shy

/export hide-sensitive -file=capsman

Sent from my SM-A705FN using Tapatalk

Shy

Could you publish your working configurations please?

Shy

I think you are missing

/caps-man datapath
add bridge=bridge client-to-client-forwarding=yes local-forwarding=yes name=\
datapath.bridge

Sent from my SM-A705FN using Tapatalk

Shy

What if local forwarding is in used should i enable bridge for all interfaces?
Shy, did you try the above reply (resetting and configuring CAPs Mode)? That's like the only thing you have to do on the cAP ac.

Can you tell how the bridge needs to be aet while local forwarding is in used?

Shy

What if local forwarding is in used should i enable bridge for all interfaces?
Shy, did you try the above reply (resetting and configuring CAPs Mode)? That's like the only thing you have to do on the cAP ac.

It was already done.

Shy

What if local forwarding is in used should i enable bridge for all interfaces?

Shy

Also the wireless?

Shy

Please export your config
And yes i am refering to the bridge settings in on
https://wiki.mikrotik.com/wiki/File:Sim ... tep3_3.png

Shy

Did you enable bridge on the cap settings?

Sent from my SM-A705FN using Tapatalk

Shy

Ether2 was set as 192.168.88.1 probably as default and not by me. Following what you said about slaves it means that i dont need to configure bridge for CAP? When ether1 on ac2 was on a bridge it was when i tried to power up the ac2 with poe in. I figured out that hex s doesnt have enough power to d...

Shy

Couldn't find a flapping port. I have reset both devices to default. Set ac2 as cap and hex s as capsman and issue was reappear even when i connected the meraki so i am quite convinced that the issue is on hEX s . For testings i want to give few says with the ac^2 as main router and wifi as router. ...

Shy

Can you elaborate exacly what you did?
on hAP ac2 bridge the setting is the following and the wlan is assigned to that bridge

Shy

Is there any distance limitation?

Shy

What if i buy RBGPOE to power up the hap ac2 with his own power supply it wont work?

Shy

Which 48v to 24v converter is recommended?

So the flow will be 48v to 24v convertor powering with the converter you mentioned earlier one comes to the hex and second to rbgpoe to power up ac2?

Shy

So i need to purchase 48V additional power supply to power up the hEX s and RBGPOE injector + 48v dc to dc converter. How should i connect the RBGPOE with the converter?

Shy

following the spec hEX can supply 500ma while ac2 requires 800ma
so it means that it won't work?

Shy

Who can give some rates configuration example? Here is mine https://uploads.tapatalk-cdn.com/20200807/4efea3b036d92e723a0bff56818e5322.jpg Sent from my SM-A705FN using Tapatalk Hope one of the images will be good enough https://uploads.tapatalk-cdn.com/20200807/b9f0518ed138108953677798739f98ed.jpg

Shy

Who can give some rates configuration example? Here is mine https://uploads.tapatalk-cdn.com/20200807/4efea3b036d92e723a0bff56818e5322.jpg Sent from my SM-A705FN using Tapatalk Hope one of the images will be good enough https://uploads.tapatalk-cdn.com/20200807/b9f0518ed138108953677798739f98ed.jpg

Shy

Which rates settings are recommended?

Shy

What would be the rates set recommended for CAPsMAN with ac^2?

Shy

But ac2 is connected via ether1 poe to the capsman (hex s)

Sent from my SM-A705FN using Tapatalk

Shy

Hi i found on https://bgp.guru/2020/01/19/centrally-managed-wifi-with-mikrotik-capsman/ that it claims that It needs to configure adaptive-nosie-immunity could it be the case? /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode set [ find default-name=wlan2...

Shy

Its enabled on datapath1

Sent from my SM-A705FN using Tapatalk

Shy

If your data is on local forwarding then it is going across the bridges on the LAN between the CAP and your main router, so check the bridge config on both, could be related to STP settings, also make sure bridges have an admin-mac set. Well i "played" as well with my caps configuration a...

Shy

Hi following another thread that was closed already I am reopening this case because my issue wasn't solved yet. I have hEX s as CAPsMAN and hAP ac^2 as AP I have few lost of connectivity's and losing pings during some time to time - losing pings for 6-7 and once its back I see it reach 2000ms Captu...

Shy

Ceee means 5GHz (as 2.4GHz allows Ce at max). Here is (part of) my config: /caps-man channel add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2462 name=f-2462 tx-power=9 add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee frequency=5500 name=f-5...

Shy

Well i "played" as well with my caps configuration and i found that sometime i get some of loss connection even if the laptop stays in the same spot. I lose some pings (5-6) then the ping rasies to 3000ms and ~2000ms and gets back to normal. When having few zoom calls it just freeze. It di...

Shy

I'm currently using OpenWRT on my AC2 with ath10k ct smallbuffers driver, much better coverage than ROS (higher TX power I guess) and MU-MIMO is also enabled. The port still needs some additional work till it gets into mainline branch https://github.com/openwrt/openwrt/pull/3037 but it's more promi...

Shy

So for better performance it should be disabled?

Shy

ok good to know - you just fixed my slower speeds issues I had

thanks erlinden!
what is client to client forwarding?

Shy

how does enable local forwarding helps?
I am facing quite the same issues over wifi with hEX s (CAPsMAN) + hAP ac^2 (ap)

Shy

tx-power numbers are in dBm, so higher numbers mean higher Tx power. Maximum is either device capability or country-specific limit, whichever lower. And don't forget that to calculate actual Tx power output from wireless chip one has to substract antenna gain from set values (antenna gain for built...

Shy

Tnx for the explanation!

Shy

Ceee means 5GHz (as 2.4GHz allows Ce at max). Here is (part of) my config: /caps-man channel add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2462 name=f-2462 tx-power=9 add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee frequency=5500 name=f-5...

Shy

how do you make it? can you share an example? i am facing some raspberry pi3 that can't connect to the wifi since the change of the width to 20mhz with Ceee how do i allow 2.4? found it /caps-man configuration add channel=channel24 datapath=datapath1 installation=indoor mode=ap name=cfg24 security=...

Shy

how do you make it? can you share an example?
i am facing some raspberry pi3 that can't connect to the wifi since the change of the width to 20mhz with Ceee
how do i allow 2.4?

Shy

Can i do the 2.4 and 5 on the same cfg?

Shy

Hello
Does the hAP ac^2 could support 160Mhz or just up to 80Mhz?

WISP AP.PNG

How can I configure the following on the caps channel setting?

caps2.PNG

also if on my Capsman setting I dont have defined any channels how does it pick it?

hapac2interfaces.PNG

thank you

Shy

https://wiki.mikrotik.com/wiki/Manual:I ... e/HWMPplus

Shy

Tnx i did it.

Shy

Yes indeed, that's how i do it now

Shy

Tnx again!
I would also like to know since wisp ap has a more features way to use the ap as an ap and also as a router is it possible to connect the hAP ac^2 with usb lte and use it as another wan access?

Shy

For now capsman is stable since the bridge fix.

Tnx all
Also who can explain what is the differenxe between bridge and router mode on wisp ap?

Shy

I understand, so it just meters if i want to manage the wifi via caps or via dedicated device. I am looking what will be the best way to configure the wirless setings (like to avoid using b mode and to increase the 5ghz power) how do i do so in CapsMan

Shy

totally, thats what I did...
tnx much for your reply

Shy

Basically it didnt fix the way to change on wisp ap to bridge (it was just changed to cap) which i am not sure that i know what is the difference. Is there any guideness to find out more about WISP ap mode? I assume that to set cap for one device currently is less inportant now, when i will add mor...

Shy

Stop using quickset and start configuring the devices by hand.
Especially if you want to "study" something.

Ok so how do i switch between the modes?

Shy

You don't need "wisp ap mode" you need "cap mode". If you want to find differences: reset to no config, try first, export, reset to no config, try second, export - you will have two configs that you can study in any text redactor. Most likely loops are the result of adding cap i...

Shy

Basically it didnt fix the way to change on wisp ap to bridge (it was just changed to cap) which i am not sure that i know what is the difference. Is there any guideness to find out more about WISP ap mode? I assume that to set cap for one device currently is less inportant now, when i will add more...

Shy

I don't know if it has anything to do with these bridges, but FYI: quickset can be used only for initial setup . After you used it once or configured router manually you can never touch it again. I mean literally NEVER . And a piece of advice: better don't use it at all. ok now i understood what it...

Shy

the dhcp works on the bridge, when I use the webfig to change it to be using bridge on WISP AP it changes automatically to router and adds the ip of ether1

Shy

Why so many bridges? Why this: /ip dhcp-client add disabled=no interface=bridge coexist with this: /ip address add address=192.168.88.224/24 interface=ether1 network=192.168.88.0 and this: /interface bridge filter add action=drop chain=input dst-port=68 in-interface=ether1 ip-protocol=udp \ mac-pro...

Shy

Post config export of hap ac2. # jul/30/2020 00:19:31 by RouterOS 6.47.1 /interface bridge add name=bridge protocol-mode=none add name=bridge1 add name=bridge2 add name=bridge3 add name=bridge4 add name=bridge5 add name=bridge6 add name=bridge7 add name=bridge8 add name=bridge9 add name=bridge10 ad...

Shy

@Shy, read answers to your other topics. The information can be found easily (in the optional configuration step): https://forum.mikrotik.com/viewtopic.php?f=13&t=163767&p=808123#p808144 thank you found what was missing on my bridge on hap ac2 On bridge, change to protocol-mode=none. The de...

Shy

Hello i have hEX s with bridge on all ports 2-5 having on the ether5 connected hAP ac2 with bridge as well on all ports (poe in on ether1) i tried to setup a dhcp on the bridge1 interface but it doesn't get an IP on the interface. i could access hAP ac2 with webfix only once I have ip on ether1 what...

Shy

See attached # jul/29/2020 22:16:14 by RouterOS 6.47 /ip firewall filter add action=accept chain=input comment="Allow LAN DNS queries-UDP" dst-port=53 \ in-interface-list=LAN protocol=udp add action=accept chain=input comment="Allow LAN DNS queries - TCP" dst-port=\ 53 in-interfa...

Shy

I have checked the dns queries from wan which isnt working so probably it looks ok.

Shy

I also needed to allow DNS in firewall [admin@MikroTik] /ip firewall filter> add action=accept chain=input comment="Allow LAN DNS queries-UDP" dst-port=53 \ \... in-interface-list=LAN protocol=udp [admin@MikroTik] /ip firewall filter> add action=accept chain=input comment="Allow LAN D...

Shy

found the solution I think:) In Winbox under IP -> DNS ensure that Allow Remote Request Box is checked, that should be the first step. Then under IP -> DHCP Server -> Networks and the configurations that the DNS server is set to the IP of the router board, also specify a Domain suffix (eg Home.local).

Shy

Hey
I am facing some issues to use the hexs as dns. Suddenly it stopped to work... what can be the issue?

Shy

That's a great feature needed. I don't monitor that and i would love to.

Sent from my SM-A705FN using Tapatalk

Shy

I thought to use the hEX s as the capsman manager and if i would add more cAP ac or 2nd hAP ac^2 it will fit it.
doesn't it make any sense?

Shy

Hi I think tou might have some overlapping configuration. If the hAP ac^2 is connected to the ether1 with PoE init means that it has to be inside a bridge. If both network devices that had 192.168.88.0/0 and the second has the same IPs it will break the connection. Please give a better diagram with ...

Shy

Hi Should i prepare the hAP ac2 to be controlled by CapsMan on hEX s ? I am ordering cAP ac. I reviewed several youtubes that claims that capsman configuration takes 5 min. I am missing some parts of the setup. Do i config the cap interface on the capsman or on the cap device? Can capsman could be w...

Shy

Hi
I am facing the same issues
When reaching via mac sometimes it doesnt work as expected with the tik app. I couldnt find the root cause.the winbox is opened without specified IPs.

Shy

20/40MHz eC ?

Thank you for the recommendations

Sent from my SM-A705FN using Tapatalk

Shy

Only use CAPsMAN if you have like 3 or more accesspoints. Regarding the config: Reset the device without default configuration and start from there. If you want an accesspoint: Required create a bridge add all interfaces (LAN and WLAN) to the bridge (here your device will be unavailable for a short...

Shy

Reset the ip service winbox access to any it fixed.

Shy

i have enabled winbox and http accesss to the lan network and then it started to work.. pretty weird... before there was nothing written and I could reach from TikApp using MAC address and IP only from that mobile.

Shy

You need to follow the steps mentioned here: viewtopic.php?f=13&t=164020#p807279

Thats what i did
Can i export the config?

Sent from my SM-A705FN using Tapatalk

Shy

Right...
How do i allow access? Its ether1 connected as the uplink. Probably because its assigned as wan?
How do i configure bridge properly?

Shy

Thats what i did... but this bridge ip is available only from my mobile . I can't understand why

Sent from my SM-A705FN using Tapatalk

Shy

I do want the hap ac2 to be available on webconfig within the lan.
Also i wanted to have cspsman to manage the wifi but then i realized that it has to be cap only.

Sent from my SM-A705FN using Tapatalk

Shy

hello i am just completing the setup of using hAP ac^2 as an AP for now its configured as Home AP dual and I have configured all ports to be as a bridge, configrued an ip for the Bridge. hAP ac^2 is connected on the ether1 with PoE port on port 5 on hEX s first I would like to know how that is the h...

Shy

Don't use the app, use Winbox for configuration. Reset the device without default configuration and start from there. If you want an accesspoint: Required create a bridge add all interfaces (LAN and WLAN) to the bridge (here your device will be unavailable for a short period) configure WLAN setting...

Shy

Also found that ineeded to change to wisp mode.
What is the y to do so on the app and not via webfig?

Who can explain and give some details about what will be the best conf for wifi and how to configure with capsman ( to be preapared for additional cAP)

Shy

Finally i could make it work wheb webconfig was accessible on the bridge ip.
What would be the best wifi configuration for my position i tried to play with the configuration but its not sos table.
Upload is nuch higher rate than download.

Shy

Thanks !
How can i reset the caps man?

Shy

Thanks !
How can i reset the caps man?

Shy

Hi Please help me understand what i am doing wrong... Having hEX S as my router i wanted to connect hAP ac^2 as Access point manages by CapsMan For the first step i just wanted to power up the ac^2 with the PoE. When i am connected to the hAP ac^2 i don't have internet. Used the TikApp to configure ...

Shy

FWIW, I had been wrestling with this issue for years and finally got it thanks to this thread. For completeness, here is an actual working hairpin nat with port forwarding configuration: The first src-nat is the local-to-internet masquerade. Second src-nat is local-to-local masquerade. The dst-nat ...

Shy

Found the solution - thanks to @jhgorse
viewtopic.php?t=107851#p547024
thank you

Shy

You should open port 8291
I would recommend open it with Port knock

Sent from my SM-A705FN using Tapatalk

Shy

Who can help?

Shy

I already have "Sticky ISP" Mangle rules so the server is accessible outside through the right WAN
but I wonder if its better to let the "whole" route from that machine through the 2nd ISP link

Shy

if course if the LTE would be able to act as a "modem" only it would be preffered but I assume its possibly only on E3372 and not E8732

Shy

It has traffic monitor rule to move to lte once fiber is loaded (if...)

e.g.
who can help me to understand how mangle ports are doing a port forward from external ips when firewall rules do not "block" them by default?

Shy

external wan IP?
its not defined no where
the dongle is on 192.168.8.x

Updated: I configured dst address as none and incoming interface as lte1 and it worked!
now I just need to make sure that this host is routing through the lte1 as default...

Shy

Its opened as dmz already so it sbould be ok from the dongle side.
What i dont understand how that mikrotik will know fixedwanip belongs to lte interface

Shy

+---------------------------------------+ | +-----> Fiber (CAT6) ether1 (external IP ISP) | Mikrotik hEX s | | | | +-----> USB dongle E8732 (GW 192.168.8.1) | | 192.168.8.100 +--------------------+------------------+ | 192.168.88.1 | | | | | +--------------->+-------------------------------+ | | | ...

Shy

You are contradicting yourself........ " I do have Huwaei E8732 that is doing NAT ," " I am not behind NAT, that's why I mentioned fix ip " In any case, if the modem is getting a public IP and you have the MT setup on the MODEM as forwarding everything (all ports) to the MT, the...

Shy

Do you have a public IP at the LTE modem.

In the US... You don't unless you paid extra for a static IP.

I pay more for that

Shy

Let me explain it please, The LTE external IP has fix public ip. The Dongle itself is doing NAT on 192.168.8.0/24 and the Mikrotik gets 192.168.8.100 , on the dongle device 192.168.8.100 is configured as DMZ. I want the external IP of the LTE to do port forward from Ext ip x.x.x.x 》》 192.168.8.100 [...

Shy

I am not behind NAT, that's why I mentioned fix ip
since the lte interface doesn't familier with its external IP how do I make the right rule for that?

Shy

hi
I do have Huwaei E8732 that is doing NAT, I've configured the Mikrotik as DMZ on it and it should be published with its external IP (fix ip).
how do I config the port forward for the LTE interface with the external IP on the Mikrotik side ?

thanks in advance

Shy

Could you export the config hide sensitive data?

Sent from my SM-A705FN using Tapatalk

Shy

I will take a look
Thanks

Shy

Ok o have tried what tomas suggested i could see in logs that the traffic minitor chabges to isp2 but the traffic isnt going there. How can i run a debug for mangle rules?

Shy

I really recommended to learn and do this one HowTo who have got the best way to use many WAN's at ones. Next you can use any method netwatch/script/pcc etc to just flow the outgoing - then this is small stuff. Bandwidth-based load-balancing with failover. This presentation also covers Mangle. This...

Shy

Not even close.
Unless you know what you are actually putting down in the config, probably best to read and learn more prior to doing so.
Did you read my post or check out the Youtube video link for example..............

Yes I did, what is wrong in what I wrote?

Shy

If you have 2 servers which both serve web services on the same port then there is no way for router to decide what server send incoming connection traffic to. Harpin just lets to access local resource via external IP from LAN but the problem is the same: which server should receive packets send to...

Shy

Hi I have configured LTE with distance 1 as my primary ether1 wan access. both are currently working and once the ether1 is down its running to LTE. I wanted to have a specific route throught the LTE (and also have port forward from LTE to one of the clients) when I tried to configure specific route...

Shy

You are basically right, the reason to have hEX s is because i dont have too much space so i do have hEX S for the sfp part and poe out i will add hAP ac^2 to the setup.
Probably another ac^2 in the future for switch capabilities.

Sent from my SM-A705FN using Tapatalk

Shy

is it enough? /ip firewall nat add chain=dstnat dst-address=x.x.x.x protocol=tcp dst-port=xxxx \ action=dst-nat to-address=x.x.x.x add chain=srcnat out-interface=ether1 action=masquerade /ip firewall nat add chain=dstnat dst-address=x.x.x.x protocol=tcp dst-port=x.x.x.x \ action=dst-nat to-address=x...

Shy

port knock is the thing, works flawlessly

How do i allow access to the box from lan without needs to port knock?
tnx

Shy

Yes thats the reason i did a mistake by configured the route.

Sent from my SM-A705FN using Tapatalk

Shy

found the info for port knocking > https://wiki.mikrotik.com/wiki/Port_Knocking
how do I add secured addresses to the list?

And how do i make the ipsec setup?

Shy

hello I do have 2 web services that I would like to be avaialble locally with the external IP i read that its possible by running the following procedure https://wiki.mikrotik.com/wiki/Hairpin_NAT I do have dynamic IP on the WAN interface, what should be the right firewall nat rules that I should as...

Shy

Hello guys
I know that most of you are not a fan of opening access to the MT devices over WAN, I use the Mikrotik app very often on Wifi and I would like to have the ability to do so remotely as well

How can I open access from WAN for several IPs?
thanks in advance

Shy

I managed to solve it
there was a bad route configured.
now all works!
for those who intrested see the how to

https://blog.ligos.net/2018-03-01/Mikro ... lover.html

e.g. I did a mass cleanup of the uncesessary NAT rules that I had in the lab.
so thanks @anav for the followup

Shy

Hi The ip mentioned was just a test to see if i could reach over 4G using TikApp. Its not a static rule. The APN itself is PUB and is written in the WAN interfaces. The Nat rules you see were tested with some hairpin nat rules for some testing purposes. This device is holding some lab environment so...

Shy

Shy

How do i export?

Shy

I found this but I couldn't make it work https://blog.ligos.net/2018-03-01/Mikrotik-And-LTE-via-USB-and-Failover.html configured route to the lte1 gateway with distance of 2 (Changed for the test to be 1) but it didn't work on NAT table I could see a rule that reflects to WAN access but I couldn't a...

Shy

Hi I have hEX S with fibre connection, I would like to add LTE backup for the connectivity. connected HUWAEI USB dongle which I could see that the GW was added automatically once plugged in- I changed the APN and the check gateway to ping, I changed the metric to 2 and unplugged the Fibre connectivi...

Shy

Upgraded to 6.47
Did factory reset
Reconfigured my relevant rules

Everything is perfect.

Shy

well, I didnt config it manually
i believe it was there from the begining...
what do you recommend?

Shy

What do you mean enabled fastrack?
I thought it was enabled as part of the default forward filter rules?

Correct, It was.

Shy

Two things (1) Disable this rule as its functionality from what I have read as yet to be fully explored and may cause issues...... /interface detect-internet set detect-interface-list=all (2) The most discernible issue is that you are using the bridge but your IP address refers to ether2 so you nee...

Shy

is it possible to get the link?
its down

Shy

currently on 6.46.3
notticed that there is an upgrade to 6.47
should I run that?

also tried to enable fast track
the upload was better but download still the same

Shy

jul/02/2020 22:11:20 by RouterOS 6.46.3 # software id = X9GD-CZK4 # # model = RB760iGS # serial number = /interface bridge add admin-mac=48:8F:5A:2F:50:A5 auto-mac=no comment=defconf name=bridge /interface list add comment=defconf name=WAN add comment=defconf name=LAN /interface wireless security-p...

Shy

Throughput is 200mbit down 200 mbit up
Connected directly with cat6 to the hex s on port 1.

I am connected on p2p fiber so i get CAT6 to my apartment.

Shy

Hello
Finally i got my hEX s device, just connected i could see that speed performance is less good than my ISP router (200mbit dropped to 170mb max)
What would be the best practice configuration for better performance?

10q in asvance

Shy

I had the same concern, I have a fiber 200mbit symetric, waiting for the hAP ac^2 to arrive, I will keep you updated one i will recieve it and make some tests.

Shy

What will be the next products of hap ac^2 ??

Shy

Tnx again xvo for the info

Shy

So it was temporary and that's it?? Why?
What does it mean?

Shy

And how can i order from that batch ?

Shy

viewtopic.php?t=137786

Shy

From the product page:
Size of RAM 128 MB
Storage size 16 MB

So not sure where you are getting other information??

viewtopic.php?t=132051

Shy

Hi
I saw that on the specs page that hAP ac^2 is declared to be with 128MB ram.
On the other hand some people who claims thar they got a device with 256MB.
How can i make sure that my order will be with 256MB?

Shy

I mentioned 500mb as the wan link speed. 500/500 (currently its 200mbit up /200mbit down. If the hEX s could manage that i though to connect two hAP ac^2 (one in the main room and second in one of the rooms with the PoE of the heEX s. If it could make 400mb out of the 500mb in wifi it will be great....

Shy

Ac seems to be with more features like PoE and SFP but ac^2 has better CPU (quad vs single in AC Model)

Shy

:-) No i don't have the hAP ac, I just wanted to understand if it worth to buy it in 2020 since I know this model runs for 4 years already. I have ordered hEX s so I could have the mikrotik experience and I wanted to add APs so I ask what would be better for best performance with low budget. regards...

Shy

I dont have hAP ac.
I will have hEX s only. So to sum it up its better to put tplink than cAP ac or hAP ac. Right?

The only cons in this setup is that i cannot have the AP controlled centraly by mikrotik.

Shy

I have replaced a CAPAC in one location with a TPLink eap245 and so far it seems more stable. However I was also having issues with my router at the time, that may have been the root cause. However, I still have another capac working in the house and will probably put my spare capac in another loca...

Shy

Ok lets focus my question,
Which mikrotik ap will be strong as hAP ac?
Audience, wifi version of 4011.

Unortanetly Audience and 4011 are ~$160
Which is out of my budget..

Shy

Ok lets focus my question,
Which mikrotik ap will be strong as hAP ac?

Shy

By the way which recommended APs like strenght of hAP ac?

Shy

Thank you

Shy

With 2x2 and 80MHz width they both show around 400-450-500 in tests, that means in real life with walls, etc. you will have around 300. In case you have a 3x3 device, you can benefit from hAP ac, but not in the sense that you will get 900 (because of CPU bottleneck), but rather in sense that you wi...

Shy

So hapac still rocks even as AP, but not sure if it worth the money now and what will hapen in 1 year from now.
Unfortunately ac^3 is out of scope.

Shy

Thank you xvo
So do we have a challenge for getting 1 gb on hEX s?

Shy

Next question,
cAP AP will be similar by Ac speed as hAP ac does?

Shy

Thank you so much for that answers that really covers everthing. Its the first time that someone really says: hAP ac is too old. hAP ac^2 is not the best wifi solution so i should stick with another AP solution. hEX s will be good as the router. Regards the 1 gig i must say that for now i am on 200/...

Shy

From my understanding its not supported on OS

Shy

so I can make it as the follow:

ISP > hEX s > hAP ac

or i still need ac^2?

so

ISP > ac^2 > hAP ac

or

ISP > hAP ac

or

ISP > ac^2 > ac^2 (which won't give the best wifi solution)

Shy

Thanks for the diagrams, did you mention hEX s or hEX ? I talked about hEX s (RB760iGS) why do I need two uplinks between the hex s to the hAP AC^2? so I will be able to make 1 Gb through it? so on the other hand I could just make hAP ac^2 as a router gateway (if I will need sfp i will just need OLT...

Shy

Good idea
Tnx!

Search found 243 matches