MikroTik

chuq

So described issue has been confirmed by mikrotik support, but without any clue when it will be fixed
Feels like it's pretty easy to fix, though

chuq

ipv6 is disabled
I have two WAN connections from different ISP
And if I add two default routes through them ( ECMP per se ) - BTH/wg doesn't work or very unstable
But if I leave only one route - all works fine
So I wonder if it's "expected" problem ?

chuq

I'm trying to setup BTH, but it's quite unstable for some reason.
It's behind NAT and there are ECMP routes - should it work this way ?

chuq

Tabs were much better both visually and practically, because you saw the options right away, and you needed one click, instead of two
Esc dosn't close window anymore
And in general hotkeys would be nice to have

chuq

Thanks, jaclaz!
So lookup action of a routing rule works just like route marking by firewall mangle ? Do I get it right ?

chuq

Thank you, infabo!
I saw these docs, but it explains nothing - that's why I'm asking here

chuq

There are two actions: lookup, lookup-only-in-table
What are the differences ?

And how it differs if I put a routing mark in firewall mangle ?

chuq

According to rfc7011 padding bytes must be zeroes, but they are not
To reproduce you must uncheck some of IPFIX fields in "Traffic Flow Settings" dialog

v7.15.2

chuq

I have an RD3011 UIAS-RM with 40 VPNs connected. When I send a ping from any station, to any of these VPNs that are turned off, the command
is normally accepted. What could it be?

What station ? So VPS are connected or turned off ? What command is accepted ?

chuq

Did you create the container in CLI of via WebFIG/Winbox ? Do you have the "logging" flag enabled too ? Winbox Sure logging is enabled, but nothing there from container, nor from disk errors or other strange messages. It just doesn't start, silently :( I've also tried to put /container/st...

chuq

My single container doesn't start on boot, but can be easily started manually afterwards.
Nothing in the log, and I have no idea what's wrong
Any ideas ?

chuq

I can't believe a usb port can cause much heating issues

For mikrotik guys: if your marketing team is forcing you to do that, blink "USB" in morse code in your next video

chuq

1. If several queues have parent global , does prioritization work between them ? 2. If one of queues doesn't have limit(s), how much will it get relative to others (with limits and priorities) ? for example: queue1 parent=global limit-at=1M max-limit=10M priority=3 queue2 parent=global limit-at=2M ...

chuq

any news here ? faced the same problem in terminal

chuq

Thanks @mkx
Do I get it right: a bridge packet goes through the routing chains only if it comes to a bridged port (the A entrance) ?

chuq

so it's just not working I don't see market packets on 3rd layer postrouting chain, and that explains why out-bridge-port matcher not working also asked here Does anyone know how it's supposed to work in theory ? Because there is no much explanation in documentation once again( I saw a bridge postro...

chuq

script errors (syntax, runtime) must be notified somehow
with a log message I suppose

chuq

There is a postrouting chain (bottom-left), and if packet goes to bridging after routing, does it mean, if use-ip-fw - the packet goes through the postrouting AGAIN ? Or is it some another postrouting ? https://help.mikrotik.com/docs/download/attachments/328227/04a_bridging_output.png?version=1&...

chuq

extended logging for scripts etc, with ability to specify the topic
like this

/log/write topic=script,info message="Doing fine!"

and to create a user defined topic

/system/logging/add topics=my-scripts action=memory

chuq

I have common router setup with uplink on ether1 and all other bridged for lan (default config, basically) In order to check if I can mark download traffic for specific client, I have added a mangle counter rule add action=passthrough chain=forward out-bridge-port=ether2 but the counters are all zer...

chuq

client-address is used for the client-server setup scenario, when the configuration is imported using a qr code for a client (for example, a phone), then this address for the wg interface is set on that device. Added to manual https://help.mikrotik.com/docs/display/ROS/WireGuard Can you confirm tha...

chuq

It looks like these properties don't affect anything
I've tried different values on both sides - nothing happens
have no idea what are they for

chuq

I do understand that, but I'd like to have a formal explanation
Weird thing is that official help doesn't even mention about those properties

chuq

good article! but there is no answer to my question

chuq

Can someone explain wg peer client properties
There is no much explanation in official documentation
For example:
client-address and client-endpoint vs endpoint-address,
client-listen-port vs endpoint-port vs listen-port

chuq

How do I access values from /interface/monitor-traffic ?

chuq

Is there a way to make a custom logging topic, and and produce a log message using it from script ?

chuq

Nexthop lookup is done only in the main routing table, even for routes with different value of routing-mark . It is necessary to restrict set of routes that can be used to look up immediate nexthops. Quite surprising :) and absolutely unclear why would they do that If I understand correctly, routin...

chuq

Found on this page: https://help.mikrotik.com/docs/pages/vi ... d=26476608

reroute.png

Why do we specify routing-table in the second part, but not in the first ?

chuq

OK, another question: is there a way to debug the route selection process somehow ? Some logging maybe ?

chuq

You have linked to an existing Mikrotik document which does work. If it doesn't, show your config indicating what doesn't go as expected. But if I understand your question correctly, you are (for now) on a theoretical level ? Maybe be a bit more specific as to what part you don't understand or thin...

chuq

Then this post contains all the answers you need.
Next.....

No, it's not.
That's why I'm asking the question.

I would recommend you to read the question before answering something.
Anyway, if you have noting to say, you can just don't say anything.
Cheers!

chuq

I cannot assist on a config if there is no config and no plan and no network diagram.

There is a plan, a diagram, and parts of config you can see following that link I posted in my original post

chuq

When you have a plan and network diagrams and a config, i can certainly discuss particulars otherwise read more https://forum.mikrotik.com/viewtopic.php?t=192736 https://forum.mikrotik.com/viewtopic.php?t=182373 Thank you for useful links! What plan or diagram you are talking about? Have you read m...

chuq

According to this manual https://help.mikrotik.com/docs/display/ROS/Per+connection+classifier I have to add routes specifying routing marks AND(!) also additional routes in main table "To enable failover..." But as I can see it doesn't work without these main table routes, even if there ar...

chuq

I have a usual router(NAT) with internet on ether1, and all others bridged for LAN
How do i prioritize one specific interface (say either2) for the most important client?

chuq

The problem was found here

/interface/wireless/connect-list/print

There was a rule allowing specific ap only.
To figure this out I had to enable logging for wireless driver

/system/logging/add topics=wireless action=memory

chuq

I have a hap lite device, it was used as a wifi-to-wire bridge (station pseudobridge mode), and it used to work as expected earlier. But now, when I started my setup after some time, it doesn't work anymore It just doesn`t want to connect to wifi, and I do not understand why I tried different statio...

chuq

Is there any information about MAC Telnet protocol ?
I wonder to make a client program to communicate with rb device

chuq

Here's the deal I want to have several WAN ports for different ISP with DHCP, and switch between them in defined order, if they goes down. I saw the solutions based on firewall and routing, but I would like to have my equipment in the ISPs network without NAT. So I've created a bridge for each WAN p...

chuq

BTW, I knew I read this at some point... The old wiki actually describe this in a "Tips and Tricks" – other useful gems likely in here that AFAIK aren't in the newer help.mikrotik.com docs: https://wiki.mikrotik.com/wiki/Manual:Scripting_Tips_and_Tricks#Accessing_global_variable_from_func...

chuq

...
Basically you need add ":global <varname>" for ANY variable/function defined outside the scope, you are going to use inside the current "scope" (e.g. do={} block here).

Thanks a lot ! Works fine

chuq

It's meaningless, like the phrase you wrote "extrasensory perception" Do two lines of code thrown out at random without description seem normal to you? There are three globals in the script, and two set commands - quite obvious. If script runned as it is, nothing happens, and no global ge...

chuq

It seems the system doesn't like my script :global activeCh first :global auxCh second :global setActiveCh do={ :if ($activeCh = $"ch") do={ :log info "Keep $activeCh" } else={ :log info "Switch $activeCh to $ch" :set auxCh $activeCh :set activeCh $ch } } I have found t...

chuq

show your code

As it turned out, I had a syntax error in my script, and the system didn't bother to tell me about it (what a shame!), and just ignore my script completely

chuq

What's the scope and lifetime of a global variable ?
I put a script in scheduler at system startup, it creates a bunch of global vars, but I don't see them in the environment
Should I move my code out of named script ? Or how do I make them available from other places/scripts ?

chuq

i'ts planned, but not sure when it will be ready

and now ?

chuq

What IP has your computer? No DHCP on that interface means no traffic if your computer is not manually configured. My pc has been also configured with static ip from the same network (say 192.168.88.7), but they didn't see each other. The problem disapeared when I switched them to another net (not ...

chuq

I've removed ether5 from lan bridge, and assigned 192.168.88.5 ip to it
But I can't connect to this ip from my pc, and in there is an "ether5 unreachable" message in the routes list gateway col.
Where I'm wrong ?

Search found 49 matches