MikroTik

JohnConnett

I have increased lease-time to eight days (691200 seconds), turned the boiler off then turned the boiler on. Will see how long this stays connected. The increased lease-time has greatly reduced the occurrence of lost connections. It can now stay connected for weeks. There have been two lost connect...

JohnConnett

This was the sequence of DHCP operations: Nov/08/2024 11:40:01 DISCOVER, OFFER, REQUEST, ACK Nov/08/2024 17:48:01 DISCOVER, OFFER, REQUEST, ACK Nov/08/2024 19:05:43 DISCOVER, OFFER, REQUEST, ACK Nov/08/2024 19:07:43 RELEASE, DISCOVER, OFFER, REQUEST, ACK Nov/09/2024 07:07:35 REQUEST, ACK I don't kno...

JohnConnett

Boiler back in action. Tried increasing lease-time to one day (86400 seconds). Good news is that the connection stayed up for well over one hour. Bad news is that when I checked this morning the connection was down and reporting Connection is being established . This was with just the hAP ax³ . Here...

JohnConnett

Before I resolved the issue by assigning static IPs, I suspected the Group Key renewal as a culprit. Best Group Key Rotation Interval Setting for Router: 0 or 3600? suggest that Cisco and Netgear routers use a Group Key Rotation Interval Setting of 3600 seconds. Might explain why the Wi-Fi connecti...

JohnConnett

Side question, but do you really-really need DHCP client on the boiler? I mean, if you don't go around with your access point (be it the ax or the ax2) the boiler should be pretty much static. Cannot you set it to a static address and see if the disconnecitons continue or stop? Just following the r...

JohnConnett

For the hAP ax³ the WinBox WiFi page shows the boiler as connected and the Uptime field is being incremented. However, the DHCP lease has expired because it timed out (waiting for a DHCP request?). Puzzling!

JohnConnett

Signal strengths, mentioned here (-19dBm, -21dBm), are worrying me. Are they real? If yes, they are around 20dB too high for WiFi receivers to work comfortably. And this would mean that the boiler device's wifi and AP are almost touching. In this case, try to move AP a meter or two (approx. 5 ft) a...

JohnConnett

some devices even ignore such a short lease-time ... gives all kinds of unexpected results I have captured debug logs for dhcp and wireless to files from power up to the loss of connection. For DHCP, it starts with the expected discover ; offer ; request ; ack . This is followed roughly every 5m by...

JohnConnett

A lease time of 10 minutes is
Adjust it to what makes sense, i.e. 4 or 8 hours. Or more.

I blame the Mikrotik configuration example: https://help.mikrotik.com/docs/spaces/R ... DHCP#Setup: "lease time: 10m"

JohnConnett

Had a look at the current config (for the hAP ax³ ). Here's the only line containing lease-time: add interface=bridge lease-time=10m name=defconf The problem definitely seems to occur every 60m which is puzzling. Here are the lines referring to the boiler: /interface wifi access-list [...] add actio...

JohnConnett

I have just had a Viessmann Vitodens 200-W (Type B2HF) gas boiler installed. It has Wi-Fi (and Zigbee). I have a hAP ax³ and a cAP ax running RouterOS 7.16.1 with CAPsMAN . The boiler connects using DHCP and operates without problem for around an hour. Connection is then lost and the boiler reports ...

JohnConnett

Mikrotik is Innocent OK . Managed to get my Sonos Roam 2 setup by following these steps: Sonos App - force stop Sonos App - uninstall Android - restart Android - connect to network (on Mikrotik) Android - install Sonos App Roam 2 - Factory reset Sonos App - setup Seriously weird behaviour!

JohnConnett

I suspect this may not be a Mikrotik specific issue. Tried with a Wi-Fi Hotspot on an Ubuntu 24.04.1 LTS system with an Intel Ax200 . Roam 2 setup failed ... Tried with my old Buffalo WZR-HP-G300NH (rtl8366s) running OpenWrt 23.05.5 . Roam 2 setup failed ... Hoping that the SONOS Community can provi...

JohnConnett

I'm wondering if it could be an mDNS issue? My mobile is issuing several Standard query 0x0005 PTR _sonos._tcp.local, "QM" question but doesn't appear to be receiving any responses. v7.16 [stable] is released! contains: *) dns - added support for mDNS proxy; There is also a /ip/dns/set md...

JohnConnett

I'm wondering if it could be an mDNS issue? My mobile is issuing several Standard query 0x0005 PTR _sonos._tcp.local, "QM" question but doesn't appear to be receiving any responses. v7.16 [stable] is released! contains: *) dns - added support for mDNS proxy; There is also a /ip/dns/set mdn...

JohnConnett

Would Packet Sniffer help in diagnosing the problem? Can you then analyse captured packets? I have set up Kismet on a system with an Intel AX200 WiFi card. All three devices are on my desk within 250mm of each other. I have captured WiFi traffic during an attempted setup of the Sonos Roam 2 to a .p...

JohnConnett

I found What happened to the Sonos app? A technical analysis . It's possible that the original setup of my (now deceased) Sonos Roam was completed successfully with the old app and it is the new app that is causing problems with my replacement Sonos Roam 2 . Would Packet Sniffer help in diagnosing t...

JohnConnett

Running the Sonos App on my GrapheneOS mobile emulating Android
What about genuine android device?

Similar results on my old Samsung Galaxy-S8 running genuine android ...

JohnConnett

I have a hAP ax³ and a cAP ax connected by Ethernet and CAPsMAN , both running v17.6. My Sonos Roam died and was promptly replaced with a Sonos Roam 2 . Thanks Sonos ! I think I set up the Sonos Roam when I just had the hAP ax³ and don't remember having any problems then. However, I am struggling to...

JohnConnett

Just tried again with a .ovpn file which is accepted and works with the latest OpenVPN Connect for Windows.

Still fails with progress: unsupported option '<tls-crypt>' on 7.15.1 ...

JohnConnett

Thanks for a really useful reply! Note that after step 2. there is NO password rather than the default password (took me a while to figure that out). Successfully completed steps 1. through 5. taking the DCHP client option at step 5.. The cAP ax is then operating as an Ethernet bridge with both the ...

JohnConnett

Thanks for the help. Setting poe-out=off and using a separate 15v power supply works fine.

My longer term solution will be to use DIN rail power supplies, a (smaller) 48v for the cAP ax and a 15v for the D1101V Door Station.

JohnConnett

Can you post the exact make/model of the powered device? <- Maybe some member have already some experience with the specific device DoorBird D1101V IP Video Door Station . The connection is via an RJ45 socket to 4-wires orange+white (T+), orange (T-), green+white (R+), green (R-). I suspect, but ha...

JohnConnett

I have a cAP ax being operated from the supplied 48v power supply. Also have a device that supports standard PoE 802.3af Mode-A, which requires only four wires of a network cable (it works fine with a TL-POE150S V3 Injector).

Is it possible to power this device from the cAP ax PoE-out port?

JohnConnett

I have a hAP ax³ router and have recently obtained a cAP ax . I would like to use the cAP ax as a Wi-Fi extender and Ethernet bridge. It is within Wi-Fi range of the hAP ax³ but there is no nearby wired Ethernet connection. It is a modest home network with few users. My intention is to use the two E...

JohnConnett

I have a hAP ax³ router and have recently obtained a cAP ax . I would like to use the cAP ax as a Wi-Fi extender and Ethernet bridge. It is within Wi-Fi range of the hAP ax³ but there is no nearby wired Ether net connection. It is a modest home network with few users and doesn't currently use RADIUS...

JohnConnett

Documentation ROSE storage says: RouterOS currently supports SED (Self-encrypting drives) and dm_crypt drive encryption. Does anyone know how to use dm_crypt drive encryption? Also LVM and LUKS are not mentioned in documentation, this means no logical volumes and luksFormat support? The documentati...

JohnConnett

Wish I had more info for you on BTH, but normands was on vacation today and didnt answer my BTH questions LOL. Just noticed that there is a /ip/nat-pmp in RouterOS 7.13 . It is not enabled by default. Maybe Mikrotik does have something to do with NAT-PMP ? As noted elsewhere, NAT PMP on RouterOS Of...

JohnConnett

You keep changing the story. Not intentionally. I intend to use WireGuard for outgoing traffic where that is suitable. I was mislead by the description of NAT-PMP into thinking that it might be possible to port forward back through the same connection. You have confirmed that it is NOT possible. A ...

JohnConnett

YES it can, just not through PROTON. You could host a CHR on VPS for example ( cloud server ) or linux OS etc............. (1) All users would go directly to the public IP of the CHR vice your public IP to connect to a server. (2) The CHR would then port forward that traffic INTO a wireguard TUNNEL...

JohnConnett

Just so I understand you have a hapax3 that gets a public IP......... The hAP ax³ obtains a dynamic IP address from the upstream Virgin Media device. Before enabling the VPN, the Home Assistant system used the DuckDNS add-on to associate a public DNS name of the form <something>.duckdns.org with th...

JohnConnett

Thanks for the detailed reply. My apologies for the lack of clarity in my requirements. I have a hAP ax³ in my home connected to Virgin Media broadband. I have set up Proton VPN on your MikroTik router so that all devices that connect to the internet through it are protected by Proton VPN following ...

JohnConnett

I have successfully set up WireGuard using How to setup Proton VPN on MikroTik routers using WireGuard . The configuration file was created using How to download WireGuard configuration files with the NAT-PMP (Port Forwarding) option enabled. Is there a way in RouterOS 7 to support port forwarding t...

JohnConnett

I am looking for something similar to Transparently Bridge two Networks using MPLS using a hAP ax^3 running 7.13 as the AP and a Raspberry Pi 2 Model B with an Archer T3U USB WiFi adapter running Raspberry Pi OS Lite as the Station . I only need to attach a single device to the 10/100Mb Ethernet on ...

JohnConnett

Here's the Feature Request.

JohnConnett

OpenVPN Access Server offers four options for TLS Control Channel Security : none ; tls-auth ; tls-crypt (default); tls-cryptv2 . TLS authentication is documented as a currently unsupported OpenVPN feature in RouterOS . Support for TLS authentication would allow better interoperability with OpenVPN...

JohnConnett

Received this today:

MikroTik support #[SUP-112121]: import-ovpn-configuration timed out
OpenVPN in RouterOS doesn't support "tls-auth" option.

Will submit a feature request to support the OpenVPN "tls-auth" option.
Still think a clear error message would be useful.

JohnConnett

*) ssh - added support for Ed25519 key export and import in PKCS8 format; Might be safer to provide a mechanism to export just the host public key (or encrypt the hosts keys with a passphrase). Ignore the first part of the above! ssh-keyscan router works fine to obtain the host public key (so long ...

JohnConnett

*) ssh - added support for Ed25519 key export and import in PKCS8 format; Does /user/ssh-keys/import also support Ed25519 public keys? If so, what format(s) are supported? I've tried (what I think are) OpenSSH and PKCS#8 without passphrases and both return unable to load key file (wrong format or b...

JohnConnett

Thanks! Still some issues with ssh keys: *) ssh - added support for Ed25519 key export and import in PKCS8 format; Export of hostkey in ed25519 works, reimport of the same key or other ed25519 keys will not import (tested on CHR(x86) platform): Haven't found a way to convert the exported host keys ...

JohnConnett

Same behaviour for both profile files in RouterOS 7.9rc1.

JohnConnett

Also tried RouterOS 7.9beta4 with a ProtonVPN generated profile (also confirmed to work with OpenVPN Connect v3 on Windows 11 Pro ). [admin@router] /interface/ovpn-client> import-ovpn-configuration file-name: node-uk-12.protonvpn.net.udp.ovpn progress: unsupported option 'key-direction' [admin@route...

JohnConnett

You have the exact steps of the instructions to follow, in the answer.
Did you do what is clearly written???

Yes, with a link back to this thread.
(MikroTik support #[SUP-112121]: import-ovpn-configuration timed out)

JohnConnett

I have an OpenVPN client configuration that works with NetworkManager on Ubuntu 22.04.2 LTS (Jammy Jellyfish) and with OpenVPN Connect v3 on Windows 11 Pro . Couldn't persuade it to work on RouterOS 7.8 . Saw that RouterOS 7.9beta has ovpn - added support for OVPN server configuration export and cli...

JohnConnett

I now have a working configuration broadly similar to my old router. It has been reliable this far with no obvious problems. The speed and range on the wifi are a big improvement! Had a reply from MikroTik Support who had seen my workaround on this forum. One thing I found during my investigation us...

JohnConnett

+1. Really surprised this still isn't supported in 2023!

JohnConnett

Document on IP/Services says that ROS uses TCP port 2000 for bandwidth testing service by default.

/tool bandwidth-server set enabled=no

closes the port.
Many thanks!

JohnConnett

I'm in the process of configuring my hAP ax³ running v7.8 . As part of hardening, I have disabled unnecessary services and set Available From to my local network addresses. However, nmap -Pn -p1-65535 router still shows port 2000/tcp open cisco-sccp . Is there a way to disable this? Will anything br...

JohnConnett

I have found a solution that works for me. Configure dhcp-client including the following: /ip dhcp-client option add name=option57 code=57 value=0x0240 /ip dhcp-client set dhcp-options=clientid,option57 Then: Power off the Virgin Media Super Hub Disconnect the old router Connect the new hAP ax³ rou...

JohnConnett

Tweaked the options on RouterOS using the following: /ip dhcp-client option add name=option57 code=57 value=0x0240 /ip dhcp-client option add name=option12 code=12 value=0x4d696b726f54696b /ip dhcp-client option add name=option60 code=60 value=0x526f757465724f53 /ip dhcp-client set dhcp-options=clie...

JohnConnett

I have tried to remove hostname(12) but this failed with Default options are not removable! using the CLI. Also had a similar failure using WinBox. Using /ip dhcp-client set dhcp-options=clientid from the CLI removes hostname(12). Hooray! Problem solved. Unfortunately not. It seems that hostname(12...

JohnConnett

Problem is still present in 7.8.

JohnConnett

Raised a support ticket: dhcp-client won't connect to Virgin Media broadband.

JohnConnett

After a closer reading of RFC 2131 I found this in 3. The Client Server Protocol : Several options have been defined so far. One particular option - the "DHCP message type" option - must be included in every DHCP message. This option defines the "type" of the DHCP message. Additi...

JohnConnett

Problem is still present in 7.8rc3.

JohnConnett

viewtopic.php?p=942098&hilit=option+53+ ... 3B#p942208

So fixed in 7.4beta5 for dhcpv4-server. My problem is with dhcp-client in 7.7.

JohnConnett

I have a brand new hAP ax³ and am struggling to connect it to my Virgin Media broadband. I suspect I may be suffering from the same issues and have raised it as dhcp-client problem with Virgin Media in General . I have tried to remove hostname(12) but this failed with Default options are not removab...

JohnConnett

I have a brand new hAP ax³ and am struggling to connect it to my Virgin Media broadband. I suspect I may be suffering from the dhcp client issues described in RouterOS beta and rc versions . To me, it looks like the DHCP options are presented in Code order, so hostname (12) is before DHCP Message Ty...

Search found 58 matches