Conrad thank you so much! I have never actually noticed that I there is a dedicated option for configuring what is logged.

I havent actually found the solution to that yet. I stopped searching for a while because I found out that rstp was the problem and I solved it. Actually it might even be a bug but I'm not sure and have not bothered to check any further. What have you found out exactly? I might not have found a way ...

It shouldn't but this is easy to check anyway. Hook up a pc and issue traceroute or tracert and check the hops. Or simpler, go a browser and type what is my ip address. You should see different public ip addresses when connecting to different bridges. For example, when using bridge x it shows x.x.x....

Merry Christmas to you too! I have only skimmed your configuration but I think the problem is that you have used a routing rule for scr-address 172.16.0.0/24 which looks ONLY at the Server 2 routing table ("action=lookup-only-in-table"). Problem is there is no route configured for Server 2...

Ok I found it. Port 587 is meant to receive traffic with the starttls command so when I do not enable starttls my request is rejected. Port 465 is exposed for static tls setting and now it works properly and the traffic is encrypted with tls version 1.2. This is not clearly stated in the google docu...

Thanks for the reply! I'll go read it in detail to see if I figure sth out. What's confusing is that the transfer IS encrypted with TLS when I set "starttls" which means that the TLS exchange works. It's a mystery to me why it fails with tls=yes. I've looked into the TLS mismatch thing but...

Hey folks, I'm trying to use /tool/email to automatically send some emails using smtp.google.com and I'm having the following issue: ISSUE When I set tls=yes to enforce usage of tls I get "Error sending e-mail <test>: TLS handshake failed" and the mail is not sent. When I use tls=starttls ...

I will check Terraform out, it seems that it's better suited for routeros (I can find extensive documentation at least). @inspiringsinger I might take this approach because I can't seem to find anything extensive about REST APIs on routeros. I actually started out using this approach (this is the tr...

Hi folks, I'm trying to use Ansible to automate the configuration of new switches on the network. So far I've had a pretty good understanding of the resources available for routeros but I'm stuck in how to simulate the "set" cli keyword in the Ansible playbook. I'm testing stuff out using ...

I don't think VLAN 1 is related at all. As a matter of fact setting frame-types=admit-only-vlan-tagged, as per the wiki (https://help.mikrotik.com/docs/display/ROS/Bridging+and+Switching) effectively disables default VLAN 1. Anyway the PVID value is used on access and hybrid ports and instructs the ...

Is there redundancy in the network? I see stp is disabled on the crs328. And PLEASE check if any of the radios has stp enabled and disable it if you don't need it. Maybe there are topology changes in the network (e.g., a client antenna with stp enabled comes online) and the radios need to reconverge...

Ok, can I have a clarification regarding the topology. So far I understand the following: Brocade MLX -> PTP Link (licensed) -> CRS 328 (or 326? you mention both 328 and 326) -> 24ghz PTP -> Brocade CES2048 I see that reboots also happen on the Brocade devices so it's probably nothing to do with the...

Didn't have any security considerations in mind but you're totally right! Big thanks!!!

Hi Eddie, might be able to help. I've used Mikrotik and Ubiquiti together a lot. Configurations would be nice but definitely check for PoE capacity of the switches and if it can handle all of your connected devices. With that said please let me know: 1) If the Prism APs (which model specifically?) a...

Thanks you both for chipping in! Sounds like what I was expecting. Although @mkx why do you say that "they should not be"? Will that interfere with the nat translations and forward traffic to the wrong place or is that a best-practice suggestion that could also be done differently?

Hey folks, got a question regarding additional ip ranges assigned to a company that belong in a different subnet from the WAN IP address: SCENARIO 1) WAN IP address = 10.10.10.2/30 (let's assume that this is a public IP) 2) Additional subnet assigned to the company = 10.20.20.0/29 (let's assume that...

Hi, I was looking for a way to log stp-related events and stumbled upon this post. How do you actually do it? I want to investigate what I think is an stp related issue but bridge filters don't seem to work for stp addresses (no stp traffic is captured even when logging all traffic across the bridge...

Hey guys, need some help over here. We're running multiple Mikrotik switches in the network and I cannot find a way to log stp changes. I need to log them because I'm trying to troubleshoot a strange issue with one of our switches that I suspect is related to (R)STP. Problem is that the issue might ...

For routeros you can try using the built-in packet sniffer (https://help.mikrotik.com/docs/display/ROS/Packet+Sniffer) and export to a .pcap file which you can import into wireshark. I use wireshark when I need to troubleshoot something (https://www.wireshark.org/) which works on most operating syst...

I think it would be best to approach the issue incrementally. You could capture packets along the way and see where the issue occurs: 1) Issue ping from your pc to one of the devices in the LAN that allows ICMP. This is important because if ICMP is not allowed you won't get replies anyway 2) Use the...

Hi Leo, I've not used wireguard yet but I can think of one thing that might have gone wrong: Are "allowed ips" configured properly on the PC? I mean if you've only specified 10.88.88.0/24 (i.e., the ip addresses on the tunnel) to be allowed through the wireguard tunnel, then the computer w...

Update: Damn it, issue is happening again on another switch. Think I will take the supout path. Anybody from Mikrotik got any idea what might be wrong? The same problem has occurred with firmware 6.49.8 and 6.49.10. I suspect it's sfp14 this time, although I'm not sure because the switch is not phys...

Seems like you're on to something here. The only non-DDM modules I got available rn are those s-rj01 from mikrotik and those are working fine. If I understand correctly there must be a problem with the bus connecting to sfp5 and relating to the DDM controller in the optical sfp module. Anyway, I wil...

Hey thanks for chiming in mkx, well I have tried a lot of things. I can tell you for sure that the module is not at fault since I have tried multiple sfp modules from multiple vendors and get the same result; plus, I have also tried switching a working module (from sfp10 specifically) with the one I...

Hi guys, I have a crs328-4c-20s-4s+ that is having the following weird issue: ISSUE: When I plug in an SFP in SFP port 5 I get "PSU1 entered state FAIL" and "PSU2 entered state FAIL". Notice that to replicate this I don't need to actually connect a cable to a device/client; just ...

Hello, I need your help on an issue we've been recently having. We got a CRS112-8p-4s hosting two Point-to-Mutlipoint antennas (Ubiquiti Rocket ac gen 2) and one Point-to-Point Uplink to the main network. One of the antennas is having this weird issue where all clients lose internet connectivity and...