MikroTik

deadkat

*) system - improved handling of user policies;

What exactly was improved? I personally have not experienced any problems with user policies

deadkat

There is no way to make this device run SWOS, if that's what you're asking. However, RouterOS is capable of doing everything that SWOS can do. This device can function as, and is intended, to be a switch. CRS=Cloud Routing Switch the CRS 3xx series is notable because it is (starting with ROS v7) cap...

deadkat

does someone knows where I can find the old version like 3.34< in mikrotik sites? this mentioned and resolved in several places on the forum. please use the search bar before asking questions. one example (literally what Rextended said): https://forum.mikrotik.com/viewtopic.php?p=813908 I keep a tx...

deadkat

A coworker of mine was poking around in the terminal and noticed that one of the available operators inside of parentheses for a `put` or `if` statement is the following `<%% activate in environment` however it doesn't seem to be doing anything with different types of data given to it. does anyone u...

deadkat

home user here: most of my devices upgraded with no issues, devices upgraded include 1x RB3011 2x RBLHG-2nD 2x RBLHG-5HPnD 1x RB931-2nD (hAP mini) 2x RB960PGS (hEX poe) 1x RBmAP2n 1x RB952Ui-5ac2nD (hAP ac lite) the one device I attempted upgrading that failed was a RBD52G-5HacD2HnD (hAP ac2), "...

deadkat

In the past I have set devices to "try-ethernet-once-then-nand" under the assumption that this would exactly be what I need, but unfortunately it gets reset to "nand-if-fail-then-ethernet" after reboot. could something like this work? /system/scheduler/add name="set-boot-mo...

deadkat

@gittubaba, @tpedko we really need to stop pinging for containers on *release* threads. if it was released the note would be in OP. until then this is the last news we have: https://forum.mikrotik.com/viewtopic.php?t=178342#p900434 the ETA/time line is "its done when its done." I don't wan...

deadkat

LoRA is great for low bandwidth operations, but it maxes out at about 30Kbps. I run my whole home internet connection through the wireless bridge I mentioned and would like to get a minimum of 20-30 Mbps edit: I currently get 10-15Mbps reliably and sometimes if I leave some download(s) running overn...

deadkat

I'm not sure where is the best spot to put this but I would like to do what I can to request that Mikrotik makes some 802.11ah compatible products I currently use a 2.5mi (4km) wireless bridge running on a pair of RBLHG XL HP5 and based on the performance I get through trees I feel that similar link...

deadkat

404 - I wish I could give you something for all the wisdom in this post holo - your original reply is also great, I love it! I'm also just a homeowner, but I happen to have a small test network and I run v7 there and it seems fine for just firewall filter, nat-masquerade, and simple queues (ipv4 onl...

deadkat

I've been using 5Ghz wave 2 on RB4011. started using an old hAP I had gathering dust as my 2.4Ghz AP. seems to work really well. only old devices unable to join 5ghz ac network get linked to the hAP

deadkat

This was mentioned here viewtopic.php?t=107927

deadkat

1) in v6.x you have a separate field for NTP server and NTP server DNS names. in v7.x these fields are combined and you can enter a url into the primary/secondary server field on winbox 2) why are you trying to check for upgrades when you just installed the latest version? that aside......is this pr...

deadkat

from the WiFi Alliance's page Wi-Fi CERTIFIED™ is an internationally recognized seal of approval for products indicating that they have met industry-agreed standards for interoperability, security, and a range of application specific protocols. Certification means that a product has been tested in a...

deadkat

+1
I'm excited to hear about how this might be addressed on the ISP side

deadkat

@winap go make your own thread for wallowing and crying 'woe is me'.....This thread is for the v7.1 release. I'd be glad to hear about any specific problems you're having with v7.1.....many others here have mentioned problems or concerns they have with the new release and MT staff has been respondin...

deadkat

please run

/interface wireless config export hide-sensitive

and post output. make sure to scrub anything you care about by replacing it with ****

deadkat

I noticed the new :timestamp function in v7.1 and, although I don't have a use for it yet I immediately thought of converting the string it returns to a raw number of seconds... Really, I just thought this little diddy might be useful for someone else so I'm sharing it here :global unixT2S do={ :loc...

deadkat

is it possible 7.1 is showing logical cores instead of physical cores?

edit: searching for that exact cpu model shows it as a dual core. this may be something unique to that exact model and how it worked on v6?

deadkat

I've looked at that github. its made to be run from a PC on a LAN and will check ip addresses given as arguments when running. it checks if router is exploitable via CVE-2018-14847 and then if that fails it requests credentials from you so that it can login to your router... the only thing it checks...

deadkat

pretty sure (correct me if im wrong) MS has a section about automatic updates from them in their TOS. MT does not.

deadkat

RouterBOARD 3011UiAS .id=*d;name=voltage;type=V;value=27.8 .id=*e;name=temperature;type=C;value=22 RB4011iGS+ .id=*d;name=voltage;type=V;value=24.5 .id=*e;name=temperature;type=C;value=29 RB4011iGS+5HacQ2HnD .id=*d;name=voltage;type=V;value=24.4 .id=*e;name=temperature;type=C;value=27 CRS226-24G-2S...

deadkat

This is correct

deadkat

@mrz, you've prompted me to look through the kernel changelog, I referenced this page: https://kernelnewbies.org/LinuxChanges granted, I have only looked through the prominent features, network, and security sections of each release, and I am not smart enough to understand lot of what they mention. ...

deadkat

@pe1chl @anav, thanks for your replies. I appreciate the discussion if it really is easier for MT to increment kernel version going forward then I'm 100% for it. in a way, it could be viewed as "outsourcing" because the kernel maintainers will be doing some of the work that MT had to do pr...

deadkat

Is there any way I can enable packages? you don't disable or enable packages in v7. what is enabled or disabled in v6 doesn't matter and you're wasting time trying to roll back and enable or disable packages. as normis stated above memory usage is not affected by features not in use. i.e I might ha...

deadkat

the command
Code: Select all
/system health get temperature
does not work in v7.1

on my RB4011 running 7.1 stable the following works

:global systemp (([system health print as-value where name~"temp"]->0)->"value")
:put $systemp

edit: formatting

deadkat

With Protected Routerboot enabled you do not enter etherboot (aka netinstall mode) as described here: https://help.mikrotik.com/docs/display/ROS/Netinstall#Netinstall-Etherboot the above link only applies with protected routerboot disabled the settings to configure are /system routerboard settings s...

deadkat

I don't know if I understand completely...But it sounds like you're looking for Protected Routerboot to prevent others from netinstalling your devices and stealing them? "Protected Bootloader" section here: https://help.mikrotik.com/docs/display/ROS/RouterBOARD not noted in the docs is a r...

deadkat

What features or fixes do we actually gain from MT spending cycles on a new kernel update? For a vanilla desktop linux install it makes some sense to keep the kernel updated. In that case you're depending on the kernel maintainers to patch holes and provide new features But MT spends a fair amount o...

deadkat

jp, I had seen the exact same behavior from my dad's pc trying to log into out mikrotik gateway at home. I got scared and thought his pc was on meris for a bit. glad to hear it may just be his avast subscription that caused my heart attack

deadkat

are we missing an 'allow-dns' option for ZT or is it just me?

deadkat

From my RB4011, running RC6, output looks like this: [admin@RouterOS] > :put [/system health get] number: 0 .id=*d;name=voltage;type=V;value=24.1 [admin@RouterOS] > :foreach id in=[/system/health/find] do={:put [/system/health/get $id]} .id=*d;name=voltage;type=V;value=24.1 .id=*e;name=temperature;t...

deadkat

@East2, do they die when updating from 6.49 or did you first downgrade to an older version and then upgrade to 6.49.1 to test this?
I would appreciate more information regarding your experiences

deadkat

RouterOS already supports booting via DHCP or bootp just set

/system routerboard settings set boot-protocol=xxxx

or follow the instructions here https://wiki.mikrotik.com/wiki/Manual:RouterBOOT

What do you need to do that can't be done with these options?

deadkat

I would like to say I successfully updated all of my devices last weekend (both ROS and bootloader/firmware) with absolutely no problems. This includes an RB3011, a pair of LHG2, and pair of LHG5, an LHG R, a hap ac2, a hEX poe, a hEX poe lite, a RB922UAGS-5HPacD, a RB911G-5HPacD, two hAPs, and a CR...

deadkat

lights are ususally some combination of interface activity, and link speed/status. I would assume its the same as my RB450 where green is interface negotiated speed. a link will light green when negotiating full speed and will be off it it only negotiates 10Mb. orange is interface activity, will onl...

deadkat

Never got an update to https://help.mikrotik.com/docs/display/ ... col+Status for RC4. Can we get one for RC5?

edit: I guess I was impatient....The page just got updated

deadkat

Is there even an existing Distro that supports Tile cpu's? probably not, unfortunately. based on news article here https://www.phoronix.com/scan.php?page=news_item&px=Linux-4.17-To-Clean-Archs you will need a distro running kernel 4.16 or older Mikrotik is actively customizing the kernel on the...

deadkat

I'm open to ideas on how to do this remote. https://forum.mikrotik.com/viewtopic.php?t=178450 this thread has died off but I'm hopeful it'll provide a solution in the future. in my own testing it looks like Mikrotik has not included host networking mode from docker, only nat. so its difficult for n...

deadkat

@netfoundryskip, you would be better to make a new thread to discuss your issues rather than attempt to hijack the release announcement. your request is more likely to be seen this way vs putting it at the bottom of a very long thread. unrelated: I predict for the next release we have v7.2RC1 or v7....

deadkat

I would like it if containers didn't have to be placed behind NAT.... Please Mikrotik, at least add the ability to use host networking. others would be potentially useful but limiting us to only bridge networking limits what can be done inside a container running on a mikrotik device. https://docs.d...

deadkat

Hey Mikrotik, When I looked on some threads, you make very basic bugs in every new firmware...Is this normal programming? Because when I buy some crap Asus, TP-Link...it has more stable firmware, than this... In my view you don't understand, what you programming or what is some function for...Becau...

deadkat

6.49 and 7.1RC4 - there is no protected bootloader setting in the "System-RouterBOARD-Settings" section of Winbox

noted here viewtopic.php?p=881501#p881511
The option is still available in CLI.

deadkat

I would like to chime in for all saying Etherboot on the LCD screen == bricked......no. it just means you should backup config before an upgrade. which was mentioned in the very first post on this thread and other recent ROS release announcements. Then you get to netinstall your device and restore t...

deadkat

You can’t make any promises with nlos links. My long range link mentioned above will not work with 2.4Ghz but will work with 5Ghz. Rule 1) nothing is certain with nlos links. Having said that. I think your best solution may not be wireless. If you can get an antenna into the basement then why not a ...

deadkat

you can only achieve a higher antenna gain (dBi value) by using a different antenna. to stick with mikrotik your highest gain (also most precision required when aiming antennas) is the following: https://mikrotik.com/product/RB921UAGS-5SHPacD-NM with this as the antenna: https://mikrotik.com/product...

deadkat

I personally run a non-line of sight wireless link for my home internet connection using the following config on a pair of these https://mikrotik.com/product/RBLHG-5HPnD-XL This link is approx 3 miles long and runs through dense forest. I get a stable 15-20Mbps connection config: # oct/02/2021 15:48...

deadkat

My home connection runs over an R11e-LTE6 installed in an RBLHGR. Got this while at least one person was watching netflix, possibly two. We live in Elkmont, AL and if it wasn't for the LTE connection we would be stuck with a 10Mbps down, 512k up dsl connection

deadkat

https://help.mikrotik.com/docs/display/ ... iceSupport

deadkat

https://pulsesecurity.co.nz/advisories/Zerotier-Private-Network-Access from the article linked: Practical exploitation of this vulnerability would require an attacker to have knowledge of the target private network address and the addresses for at least two existing clients connected to the private...

deadkat

Why use an older beta? This could quite possibly be fixed in a later release. Try it with 7.1RC4.

deadkat

However, I still would love that Mikrotik would bring the old feature back where Winbox open windows would remain displayed on the screen if ones connectivity fails to the routerboard!! Maybe by putting a check option on the first main login screen somewhere. doesn't autosave session accomplish thi...

deadkat

looks like the protected routerboot option is gone from hAP ac3 LTE6 and RB4011 Protected routerboot seems to be gone from Winbox but still present in the CLI. confirmed, its still in CLI, sorry I didn't think to check that before posting. I've just rolled my 4011 back to RC3, RC2, RC1, and confirm...

deadkat

I didn't recognize what that is. first time I've even been in the /ip/cloud menu

deadkat

edited above picture...off topic but why is it necessary to hide the serial?

deadkat

This is different, it worked for netinstall, but continued to only boot to ethernet after netinstalling with no fallback to nand. This is also present in ROS 6.47.10 as well as being available in the current v7.1RC4 release. I don't think this option is related to https://forum.mikrotik.com/viewtopi...

deadkat

Noticed a new (to me) boot option on the RB4011iGS+5HacQ2HnD-IN, looks like it can boot to ethernet only. what would the practical use case for this be? Is there anyone using this regularly that can share how they use this? There is nothing about this option in the old wiki ( https://wiki.mikrotik.c...

deadkat

A couple of observations from poking around the new RC with a coworker today: the container package stays installed when downgrading from RC4 to 6.47.10. steps to reproduce: 1) have hardware running RC4, does not matter how it was installed 2) upload appropriate 6.47.10 NPKs for your device 3) /syst...

deadkat

... hap ac2, low speed when the fasttrack rule is off and high speed if the fasttrack rule is on ... on version 6 this was not FastTrack enabled means firewall, queues, etc don't apply to your traffic. this is not a bug. its how ROS works. https://help.mikrotik.com/docs/display/ROS/Basic+Concepts#B...

deadkat

The output from netinstall is correct for the linux version, now it just needs to see a device in etherboot. https://help.mikrotik.com/docs/display/ROS/Netinstall#Netinstall-Etherboot your PC and the device you wish to netinstall must be on the same layer 2 segment. less complexity is better for net...

deadkat

@Sn1p3r @kresozg

you need to email support@mikrotik.com for this.

deadkat

Please see viewtopic.php?t=45259 and try posting this again or clarifying in a comment on this thread.

deadkat

In our case my company configures and ships hundreds, sometimes thousands, of routerboards per month and we would like to create a station that allows for automating netinstall. Have a container host connected to one or more poe out crs that will telnet and automatically place a device into etherboo...

deadkat

I am also trying to create such a solution and will be sure to update here when we get it working

deadkat

How would this be different from the up-script and down-script options used by the netwatch tool?

deadkat

so, can we get an option? maybe it nags by default but you have an option for strict enforcement of password expiration?

deadkat

Just ran through the docs page linked above and it doesn't seem to be working for me. I'm on a CHR. commands I entered are as follows /interface veth add address=192.168.99.1/24 gateway=192.168.99.254 name=veth1 disabled=no /interface bridge add fast-forward=no name=docker protocol-mode=none /interf...

deadkat

I’ve always believed the long term branch to be better for deployments where stability is the most important.

However, I am curious to know if anyone uses stable or testing releases in a production system and why.

deadkat

Go to https://mikrotik.com/consultants/northamerica/usa and look for a listed consultant in your area. I’m sure they’d all be willing to help.

deadkat

+1 for making a quickset policy. It seems increasingly unlikely we will get separate packages (why that is boggles my mind…) but then we can at least disable it for certain users as mentioned above. And it can be in the full group by default so home users have it by default as normis stated.

deadkat

In the order you listed for the problems here. 1) more info about mikrotik config is needed. Can you post an export with the “hide-sensitive” option? 2 and 3) I’m not comfortable enough with vlans on Mikrotik to do anything more than refer you to someone that knows more than me. https://forum.mikrot...

deadkat

I have only used Mikrotik branded modems, either R11E-LTE-US or R11E-LTE6. Both have worked really well for me. New docs page has a list as well, I haven’t compared it to the list on the wiki but it might have some updated entries. https://help.mikrotik.com/docs/display/ROS/Peripherals The new docs ...

deadkat

Please also post an export file for your device

/export hide-sensitive file=LHG-LTE6_slow

deadkat

Basically just as the title says. I think it’d be immensely useful if we were allowed two cloud backup files per device instead of one.

Any ideas/comments?

deadkat

Passwords do not matter to netinstall. It will format any device and reinstall ROS.

What they mean is that the only way to recover from forgetting your password is to netinstall. If you don’t know the correct password then you must netinstall to regain access to the device.

deadkat

In ROS v7.1RC2 if my user's password is marked as expired I can simply click cancel or ctrl-c on cli and continue my login session. I think that changing an expired password should be required before the user is allowed to make changes to the router. Has anyone else experienced this? Thinking about ...

deadkat

Thanks! Using some self-signed certificates did it for me....The docs page really had me thinking that its possible to sign in via rest API without a certificate if default creds are used. Was hoping that I could use the rest API for config of new devices. Looks like I may try using netinstall plus ...

deadkat

first, yes this has been sent to Mikrotik (SUP-58177). My ticket has been open for a week with no replies from Mikrotik support. I have attempted using the REST API using the fetch tool from my home router, which runs ROS 6.47.10, out to a CHR which is currently running v7.1RC2. I have also tried th...

deadkat

Hello all! This is my first real forum post and I hope I can get some help. I've spent the last two-ish weeks working on these three scripts to detect if my LTE modem has hung and needs to be reset. can you please help me out with any grammar/syntax problems you see? I've never written more than 2-3...

Search found 80 matches