MikroTik

mahfuzazam

Updated below models:
- 3 x RB4011iGS+RM
- 1 x CCR2004-16G-2S+
- 1 x CCR1036-12G-4S
- 1 x RB450Gx4

RB4011 is showing high in temperature, avg. is 48C. Downgrading to 7.10.2 makes the average temp 40C.

mahfuzazam

You have one Wireguard client correct? (1) THis is WRONG, as stated above, /ip firewall filter add action=accept chain=input comment="allow WireGuard" dst-port=13231 \ in-interface =wireguard-SKA protocol=udp For the last time, the initial handshake comes via the ISP connection. You have ...

mahfuzazam

Without a network diagram and a complete config, not more one can assist with. Too many details hidden /export file=anynameyouwish (minus router serial number and any public WANIP info). /interface bridge add name=bridge_ER add fast-forward=no name=bridge_LAN priority=0x2000 add name=bridge_SKA pri...

mahfuzazam

Damn... that's what you get when reviewing config from smartphone...

I've created supout and contacted support. Let's see what happens. Till then sticking to 7.3.1

mahfuzazam

holvoe 0 fezzfest 1 Fezzfest is absolutely correct! The initial handshake is done outside the tunnel. Stop drinking that crappy Belgium wine and get some real wine from rextended. /ip firewall filter add action=accept chain=input comment="allow WireGuard" dst-port=13231 in-interface=wireg...

mahfuzazam

Netinstall and apply same config.
Have seen it in the past as well.

If that does not help, create supout and contact support.

Exactly my thought right now. I've tried with netinstall and tried v7.7, 7.8 and 7.9 to be precise.

mahfuzazam

/ip firewall filter add action=accept chain=input comment="allow WireGuard" dst-port=13231 in-interface=wireguard-SKA protocol=udp This makes no sense. You will have connections coming in on port 13231 on your WAN interface, not on the wireguard interface. The in-interface=wireguard-SKA w...

mahfuzazam

However, I dont understand why the OP has any mangle rule. Please explain! /ip firewall mangle add action=mark-routing chain=prerouting comment=WG in-interface=wireguard-SKA new-routing-mark=Group-A passthrough=no src-address=192.168.100.0/24 Mangle rules are for Wireguard tunnel to have internet f...

mahfuzazam

Hi Team, We're having a strange issue with Wireguard settings for MikroTik CCR-12G-4S. The wireguard configuration is as below: /interface wireguard add listen-port=13231 mtu=1420 name=wireguard-SKA /interface wireguard peers add allowed-address=192.168.100.2/32 interface=wireguard-SKA public-key=\ ...

mahfuzazam

I have upgraded on CCR 1036-12G from 7.3.1 to 7.9
For some reason, pre-configured wireguard peer settings are not working. Reverting back to solve to 7.3.1 solves the issue.

mahfuzazam

Just set the following addresses:
Bridge1: 192.168.222.1/24
Bridge2: 192.168.48.1/22

I already did. The diagram shows the network addresses. But internally it's configured with default gw.

mahfuzazam

Two things to focus on:

Route: https://help.mikrotik.com/docs/display/ROS/IP+Routing

Firewall: https://help.mikrotik.com/docs/display/ROS/Filter

Thanks for the suggestions. I'm going through the documents. But I wasn't getting proper answers for two internal bridges in the same router.

mahfuzazam

Hi Guys, I have created two bridges with the following IP Address: Bridge1: 192.168.222.0/24 Bridge2: 192.168.48.0/22 Bridge1 contains a NAS server with the IP 192.168.222.35, and Bridge2 runs DHCP and is used for normal user-end internet connectivity. Now I want to do internal bridge-routing, for m...

mahfuzazam

I had issues with 7.6 on one RB4011 where all of the ports on one switch would randomly drop, and both switches would alternatively fail. I'd have to reboot it to get the failed ports to come back up. I submitted a ticket but got no response. I backed it off to 7.4.1 and have had no problems. I had...

mahfuzazam

7.7

I'm seeing posts on memory leak issue for 7.7 package. That's why a bit afraid to upgrade it.

mahfuzazam

Hello Folks,

Since there's no long-term system package for the RouterOS v7, please suggest the safest system package yet for the v7 for RB4011.

Currently, I'm running 3 of my RB4011 to 7.1.5 package. Shall I keep it as is or upgrade to another one for better performance? Please suggest.

mahfuzazam

the router model is CCR 1036-12G-4S. The router was purchased 7-8 years ago. What is the output of system health print [M@MikroTik] > system health print fan-mode: auto use-fan: main active-fan: main cpu-overtemp-check: yes cpu-overtemp-threshold: 100C cpu-overtemp-startup-delay: 1m voltage: 24V cu...

mahfuzazam

This isn't normal behavior for a CCR1036, what version of RouterOS are you running and how old is the CCR?

I'm running latest stable version 6.49.6 and the router model is CCR 1036-12G-4S. The router was purchased 7-8 years ago.

mahfuzazam

other end of that link is configured manually at 1g ? The line came from a media converter which auto negotiates to 1G when connected to switch via ethernet cable. Also, the same link works perfectly with SFP module, when connected to RB3011, 4011. This is why I'm confused. Is there any settings to...

mahfuzazam

I got it working with a simple startup script, which disables and then enables the SFP interface.

But wanted to know if this can be fixed without any scheduler. Thanks for helping

mahfuzazam

Have you asked for support on the Ubiquiti Forum or Ubiquiti Support?

This is happening with all SFP modules. Recently tried with ATOP modules as well, but had same result.

mahfuzazam

What RouterOS version and firmware are you using?

I'm using the latest stable v6.49.6 version.

mahfuzazam

Hi All, I'm having a strange SFP port issue with my CCR-1036-12G-4S router. As soon as I reboot the router, the SFP port goes down. I manually have to disable and enable the SFP port to work again. The Auto-negotiation is disabled and the speed is set to 1G. My SFP module details are below: Vendor: ...

mahfuzazam

I'm suffering from a similar issue. My router is CCR-1036-12G-4S-EM I need to manually disable and enable SFP interfaces after router reboot to make the SFP work. Is there any workaround for this? Please help. I'm using UF-RJ45-1G SFP modules. Auto-negotiation is disabled and set to 1G. The same SFP...

mahfuzazam

Updated below models from 6.49.5 to 6.49.6. The up-gradation process went smoothly and didn't face any issues so far.

- 2 CCR-1036
- 3 RB4011
- 2 RB3011
- 1 RB2011
- 1 hAP ac3
- 1 hEX
- 1 RB450G

mahfuzazam

While it is a bit worrying that your router does not show available updates (that might point to it being hacked and now updates are being controlled by someone other than MikroTik), there is no reason to install 6.49.5 on a 2011. When you have time you can try do a /export, examine it for things t...

mahfuzazam

Do you get some error message (unable to resolve DNS name, timeout when connecting) or does all seem OK but it shows no available update? The router only shows no available update and is installed to the latest version 6.49.4. Apart from this, all services are okay and I'm not having any network is...

mahfuzazam

Strange thing is, my RB2011 is not getting the latest stable update from the /system/packages/ menu. You need to investigate why that is! Strange fixed DNS entries, scripts you did not create, etc. Nothing is wrong from the router end. No unwanted scripts, rules, DNS entries are found. I'll perform...

mahfuzazam

Updated below models without any issues so far:

- 2 CCR-1036
- 3 RB4011
- 2 RB3011
- 1 hAP ac3

Strange thing is, my RB2011 is not getting the latest stable update from the /system/packages/ menu.

mahfuzazam

I guess most of (advanced) forum users agree that management access to router should be allowed in "allow few, block the rest" manner ... your firewall is in manner "block a few, allow the rest" which opens huge window of opportunity to try to hack it (by using a distributed cro...

mahfuzazam

Hi Guys, I'm getting log messages stating "login failure for user oracle, dell, etc. from 218.92.153.5 via ssh" I've followed the guideline from the link below. https://wiki.mikrotik.com/wiki/Bruteforce_login_prevention My configuration is below: /ip firewall filter add action=drop chain=i...

mahfuzazam

It's a misunderstanding of how the spanning tree works. If there is no ring topology, i.e. there is no other connection between the two switches but via the CCR1036, it doesn't matter at all which of the three devices is the root bridge. If there is a ring topology, you most likely don't want eithe...

mahfuzazam

You almost certainly want the CCR to be the root bridge, by setting the priority to say e.g. 0x7000 instead of 0x8000. This will then show two designated ports, to each of your CRS access switches. The root port will then show on each CRS. You can't have a root port on a root bridge. SW-1F is obvio...

mahfuzazam

Hi Guys, We have a core router CCR 1036, from which, 2 CRS328 switches , SW-1F & SW-4F, connected for LAN distribution. Both switches have LAG connectivity from the router, named "bonding-SW-1F" & "bonding-SW-4F" The network has default VLAN 1, and the bridge is running i...

mahfuzazam

Find the way to use netinstall on your PC. Tried to netinstall via the reset button as well as via console connection. My PC is not detected during the ether boot. Tried in exactly same way as the manual suggested. Tried with multiple ports as well apart from Ether1 for RB2011. But, I can factory r...

mahfuzazam

Hi All, Recently I've changed my system packages of RB2011 to v7.1beta6. But lately, I have had some issues with my EOIP tunnel, so decided to change back to the latest stable version 6.48.2. But, after downloading the packages and rebooting the router, the system package stays in the same version, ...

mahfuzazam

Hello Guys, I have a MikroTik RB3011 router, in which I run 2 WAN links, each giving 50M bandwidth, with a LAN network of /24. I run policy-based routing, i.e. 128 LAN users will use WAN1 and other 128 users will use WAN2, with failover for both links. I want to have a QoS configured to prioritize t...

mahfuzazam

My post is corrected at 13:29, re-read it again, I add some info on countries

Noted with thanks!!
Appreciate the help.

mahfuzazam

russia2 on export and bangladesh on image?

It was after the regulatory domain issue. Had to select one.

mahfuzazam

Click on the "reset configuration" button on the right side.
Your channel width doesn't look right, it could be eeeC or something, not XXXX

Okay. I Will reset the config and try again.

mahfuzazam

Great thanks! I'll try this!
Also, can you suggest the best regulatory domain for utilizing most channels? I've selected russia2 based on that. But is there any better option?

mahfuzazam

Hi There Guys, I've recently bought MikroTik hAP ac3 as my wireless router. I've done the settings checking forums and other videos. But, I'm facing issues with the setup of 5GHz WiFi. Whenever I select "Bangladesh" as my regulatory domain, the following error "No supported channels, ...

mahfuzazam

Hi All, I'm having trouble opening shortened URLs using my Mikrotik RB450G, especially with the redirecting links. But, I can open them using my mobile data. For example, given below an URL which I couldn't open using Mikrotik but works with the mobile data: https://bit.ly/322f3iJ Mikrotik is runnin...

mahfuzazam

I'm a beginner in Mikrotik and loving it in every way! I have a Mikrotik RB450G and I wanted to know if Fasttrack is actually supported in it or not. I can see the option in IP Firewall, also can allow Fast Path in IP > Settings. But, in the wiki, if says RB450G is not hardware supported. Link below...

Search found 44 matches