MikroTik

ludvik

RB1100AHx2

Ether 11 do not show autonegotiation, rate, duplex, advertising and link partner advertising on Interface status page. In SNMP it is wrong too.

ludvik

You must set default-cost in area config (in CLI!). Default is "undefined" and with this is not default route. In previous versions is default 1.

ludvik

KNOT is confusing name ... https://www.knot-dns.cz/
:-(

ludvik

snmp-get still not working.

ludvik

/tool snmp-get working??? Last functional version is 6.45.6 ... SUP-8826

ludvik

winbox 3.24 64bit on win7, rb450gx4. Open interfaces, add Virtual ethernet. Winbox closed.

ludvik

OK. It is not bug, it is feature ... Microsoft's favorite answer. I don't use winbox for monitoring. But in lab I have long time sessions. And if sometime problems in network, winbox is fast for the detection. About the memory use, well, of course, if Winbox is displaying something, it will take up ...

ludvik

Winbox after a few days continuous connection to CCR2004 (it seems doesn't matter) with ROS 6.47.1. Used memory growed from 10 MB to 695.

winbox_memory.png

ludvik

/tool snmp-get not working! /tool snmp-get 10.1.57.117 oid=.1.3.6.1.4.1.41112.1.5.1.1.0 community=public error - contact MikroTik support and send a supout file (3) Same error in version 6.46.6 and >=6.45.7! For example, version 6.45.6 /tool snmp-get 10.1.57.117 oid=.1.3.6.1.4.1.41112.1.5.1.1.0 comm...

ludvik

I don't know ... it is same? Hashlimit has more parameters.

Please add hashlimit: http://ipset.netfilter.org/iptables-extensions.man.html

Isn't "dst-limit" what you're looking for?

ludvik

Please add hashlimit: http://ipset.netfilter.org/iptables-extensions.man.html

And second most wanted for me is ACL for DNS server. Solution by firewall needs conntrack.

ludvik

Read before write. And then for example: https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

ludvik

What bug exactly is solved by: *) ccr - improved packet processing after overloading interface;
thanks

ludvik

This tool exists http://manpages.ubuntu.com/manpages/dis ... ate.1.html

ludvik

viewtopic.php?f=21&t=147278
My solution may help.

ludvik

post deleted. my mistake. sorry.

ludvik

Upgrade from 6.42.9 on CCR1009. IPv4 DHCP server in winbox empty (and not working, of course), export from CLI empty too (and stuck terminal). Every CPU about 20-30 % load. In log: snmp, warning timeout while waiting for program 23 ----edit: problem is in leases. I use this configuration: /ip dhcp-s...

ludvik

Very please - do it backport to 6.40.x! It is last (very) stable version with old bridge.

ludvik

will it be backported to versions 6.40.x and 6.43.x?

Version 6.45beta22 has been released.

!) ipv6 - fixed soft lockup when forwarding IPv6 packets (CVE-2018-19299);
!) ipv6 - fixed soft lockup when processing large IPv6 Neighbor table (CVE-2018-19298);

ludvik

For CCRs is two ROS versions? 64 and 32 bit?

ludvik

Wrong firmware is not a malfunction. Upgrade will not be done.

If you login by winbox, what you see in top window border? Or in menu /system/packages? It is ARM.

ludvik

This vulnerablity is from 6.28. I try it:
https://github.com/BigNerd95/WinboxExploit
https://github.com/BasuCert/WinboxPoC

ludvik

Theoretically: yes
Practically: romon over EoIP not worknig.

ludvik

Firewall will as allways disable fastpath in your system. Setting source ip's allowed on the service is more direct lo level approach witch does not disable fastpath.

Unfortunately, the DNS server does not allow restrictions using ip / services.

ludvik

Mikrotik is not Cisco. Mikrotik doesn't have hardware routing, doesn't have ASIC chip. Mikrotik is software router based on Linux. Everything going to CPU (except L2 configurations on switch chip). Packet sniffer is tcpdump (or similar sw). Working in promiscuous mode - see everything in network (di...

ludvik

Packet sniffer see everything. IMHO. It work on lower level than IP stack.

Firewall rule is wrong. You droping packet on input, but packets are TX (output).

ludvik

This not working.
NAT rule change source-port to 1024.

to-ports parametr not working, if is same as src-port.

ludvik

Hi mikrotik. Feature needed: to use loopback ip address. Telling user manager (customer) to use specific source address. Or use IP address from request packet automatically ... In today situation, radius request arriving IP adress on router - but usermanager answer going from IP address by route tab...

ludvik

In version 6.37.1 I may write: ip firewall filter> add action=add-src-to-address-list address-list=sysVlan52 address-list-timeout=1h5m chain=forward connection-state=new in-bridge-port=vlan52 in-interface=bridge1 But in 6.37.2: add action=add-src-to-address-list address-list=ttt address-list-timeout...

ludvik

Yes. I need static prefix delegation. For example for servers behind router and theirs DNS records.

ludvik

Hi. I testing DHCPv6 (on ROS 6.34.6) with TP-Link router Archer C7 (with latest firmware 3.15). Basically everything work fine ... router got IPv6 prefix with DNS servers. But I cannot set this delegation static. After every reboot (or renew) tp-link got new prefix from pool. I thing, mistake is in ...

ludvik

It's sounds as bug for me ... Queues based on INPUT ports in bridge is OK, but based on OUTPUT ports is impossible? Why? In ROS 6.27. I need this! Marking packets in bridge filter working (counter increasing), but not usable in QT nor in SQ (in /ip firewall filter is also unusable). add action=mark-...

ludvik

Where is SNMP in 5.24 MIPSBE (RB450G)? Not working ... turned on, none firewall, snmp doesn't respond. Downgrade to 5.23 - it's OK. Same configuration, but POWERPC (RB1100AH) - everything fine. edit: without ANY configuration changes ... SNMP is working. I just waited an hour. I'm stupid, or ROS? I ...

ludvik

This "HUB" is maybe user's lowcost switch. There is no real change each device for home users. This feature is named "loopback-detection" and every better switch have it. This is a protection against trouble users. And every routerboard has switch chip. The outlined situation it ...

ludvik

IPv6 NAT will be in linux kernel 3.7. Probably stateless (1:1).

ludvik

Sorry. In 5.21 serial (RS232) UPS working well.

ludvik

Very good, very good ... One small step for man, one giant leap for mankind. In 5.67 will be fixed.

doesn't work with 5.21 either. Now the UPS shows as invalid.

ludvik

Problem with RS232 UPS is fixed?

http://forum.mikrotik.com/viewtopic.php?f=2&t=64785

ludvik

Search this forum. In 5.20 is UPS package unusable. Downgrade to 5.19

http://forum.mikrotik.com/viewtopic.php?f=2&t=64785

ludvik

AP9620 price is low ... about 40euro (official from APC is 45E). It's not standard "full" SmartSlot - only RS232 & USB is on it. Compatible APC Smart UPSes is SU and SC. Letter "M" in product number mean "Microlink protocol" - and thus doesn't work with apcupsd and ...

ludvik

New "SM" UPSes doesn't work in apcupsd too. APC changed protocol. You must use SmartSlot AP9620 card. UPS APC SMT1000I SMART 1000VA doesn't work with Mikrotik via Serial Cable ( G5 -> DB9) supplied with device. Anyone have experience with it? Works fine via USB, but this port is not presen...

ludvik

It's probably typo in source code. Small error - Why mikrotik not issued the new package? Why do we have to wait for the new full ROS release?

UPS doesnt work in 5.20, mistake of one of the best mikrotik programators....
You must wait till next release....

ludvik

Same here. APC Smart-UPS 620I on RS232 in RB450G Same here. v5.19 UPS package works fine, but not in v5.20. Put everything back to v5.19 and UPS is good and working. Need this fixed! Thanks! Brad When i try to add UPS - The following errors: "Couldn`t add New UPS - opening serial port failed: 2...

ludvik

system - routerboad - settings: Enter setup on delete key.

Default is "any key" and it is wrong.

ludvik

I know, what DUID client generate. I wrote it in this thread. My question is about SERVER. From RFC 3315: Clients and servers MUST treat DUIDs as opaque values and MUST only compare DUIDs for equality. Clients and servers MUST NOT in any other way interpret DUIDs. Clients and servers MUST NOT restri...

ludvik

Doesn't use RAM? And how its working? Worlds first computer without ram & storage ... :-) But you probably not inform your distributors about storage change. http://www.wifihw.cz/soubory/546/RB1100AH.pdf http://i4wifi.cz/img.asp?attid=241750 And I bought this device, because I seen 512MB NAND. T...

ludvik

Problem is redistribute-anything :-) Static or Connected doesn't matter. - routes to delegated prefixes are added to routing table with the "Dynamic Static" flags - I'd prefer to have the "Dynamic Connected" flags set (and Static unset) as the entry is not static and can disappea...

ludvik

What format DUID accept ROS DHCPv6 server? Tested with version 5.14 and 5.9 I have CPE with wide-dhcp6 client, DUID file content is 00:03:00:06:00:27:22:39:E5:B7 (DUID Based on Link-layer Address [DUID-LL]). But ROS isn't working: echo: dhcp,debug,packet recv server1 fe80::227:22ff:fe39:e5b7 -> ff02...

ludvik

In Quagga OSPFv3 areas doesn't implemented yet ... In mikrotik probably too.

ludvik

Please, add parameter router-preference to the ND configuration. http://www.ietf.org/rfc/rfc4191.txt If anybody have windows with "internet connection sharing", then advertise prefix to LAN with "medium" preference (i think). And ROS too. If switches is on lan without RA-guard (o...

ludvik

It's great ... 2GB RAM and 40MB HDD. Very funny ... >sys resource print uptime: 4d58m19s version: 5.11 free-memory: 1520936KiB total-memory: 1555456KiB cpu: e500v2 cpu-count: 1 cpu-frequency: 1066MHz cpu-load: 1% free-hdd-space: 24900KiB total-hdd-space: 41768KiB architecture-name: powerpc board-nam...

ludvik

I know, what is OSPF ... But usage of Mikrotik is "SOHO" - and disable-running-check is good option for many reasons. Why not be better than Cisco? We are small ISP, with small clouds with many PtP links - if i configure loop-back IP on every router, i have about 200 records in route table...

ludvik

No! I have some separate ethernet and separate VLAN with separate IP segments. I don't have bridge ...

ludvik

because "network operation center" software is connected only to ONE IP address of this router. And this routers have two or more backbone link to core network - can not be used one of them IP address, must be uset IP which is always available from every part of the network in every situat...

ludvik

Please, add parameter disable-running-check for ethernet interfaces. OSPF doesn't propagate route, if not link on interface. I have "management IP" on lan side of infrastructure routers. If customer power-off self switch or CPE connected on lan side, i lose route from global route table. C...

ludvik

Theoretically ... http://en.jirous.com/anteny-5ghz/jrc-29ex

What the model of you parabolic antenna?
it look very nice and i believe the performance should very great...

thanks.

ludvik

Hi. I have DHCP server on three interfaces. Eth, bridge and VLAN. If routerboard (RB1100AH) boot with no-link on physical interface (tested on VLAN), DHCP server is not active on this interface. If link is up (connect switch, for example) - dhcp still inactive. In winbox seems normal - as active. I ...

ludvik

Certify the problem described by OndrejSkipala. Client with new 711-5Hn (s/n 2F2801044309): -66 seen on access point, client RX signal is -45. But between 11 - 15 hours (CET) have -40 on access point (and rx signal is still same)! Yes, sunny noon ... It probably depends on the temperature. TX-Power ...

ludvik

2. DUID was generated from the first detected interface that had MAC address. We will add command in next version that will show what DUID will be used. Thanks. It would also be appropriate if it was persistent DUID to survive a reinstallation of ROS. Routerboard it meets (in most cases, network in...

ludvik

1. As per RFC only hosts should receive stateless address. Routers should not. A have a choice. I'm network administrator. But: without accept RA router doesn't default route! Global IP address may be absent, but default route not. I have to configure statically or using OSPFv3 (not usable in every...

ludvik

I have first experience with Ipv6 on mikrotik 5.11 in "client mode". It's horrible ... At first: I need accept router-advertisiments on routers. CPE doesn't have default route without RA (ospf is not applicable). It is linux problem, http://tldp.org/HOWTO/Linux+IPv6-HOWTO/proc-sys-net-ipv6...

ludvik

RB1100 doesn't boot with RS232 APC UPS (Smart-UPS 620I) connected. If I connect UPS after boot ROS, everything working fine. ROS version 5.5, latest firmware.
Any idea?

ludvik

Please! MT programmer, create patch for this problem in 4.x version. 4.17 has still bug in logout from API connection ("/user active" is a very very long list). Very please ...

ludvik

But: if ethernet interface does not link detect (pc or switch unplug), ospf NO REDISTRIBUTE any network assigned on this interface. Is a bug or feature? IMHO bug ... On wireless interfaces exists property disable-running-check, which is a solution this problem. But on ethernet ... nothing!(?) p.s.: ...

ludvik

I thing, frequency 5480 IS NOT illegal in most countries (specially in EU). Allowed frequency band starting at 5470, and frequency bandwidth 802.11a is 20MHz, so 5480 is absolutly legal. official document from Czech Telecommunication Office: http://www.ctu.cz/164/download/VOR/VOR-12-08-2005-34.pdf (...

ludvik

I try all of countries ... nothing.

For example zimbabwe: bad band and/or channel. Doesn't work ...

In versions prior 3.0 exists Albania, it work ... in new versions same as zimbabwe, doesn't work.

ludvik

Please, tell me why does Mikrotik (version 3.7) unsupported frequency 5480?

Band 5.4 in czech republic is from 5470 MHz to 5725 MHz with 1W e.r.i.p (in english: http://www.ctu.cz/164/download/VOR/VOR- ... 005-34.pdf), but mikrotik starting at 5500 MHz.

Please, fix it. Thank you.

Search found 67 matches