In case this helps, I just got an IPsec tunnel established to the Azure cloud (using Microsoft's own Azure gateway). Initially, I was seeing the problem that shows up in your last log record: "payload missing: SA." After performing a packet capture (sniff) on the MikroTik end, I noticed th...

Thumbs Up for this suggestion!
I agree that this would be very useful when deploying redundant MikroTik devices.

My number one suggestion and highest priority is to build in strong security from the start, not as an afterthought. MikroTik could show the rest of the network equipment industry how to establish best practices for securely maintaining network devices, and that should be the goal! Some suggested ap...

In some cases it would be useful to allow to add static DHCP leases with the same address but different MAC address. The warning message displayed now should remain, but with an option to ignore it. E.g.: we will get new printers. We like to keep the same addresses. The new printer will replace the...

OSPF randomly passes only part of the records to the routing table. It stops having fun. We're seeing this too. We have one building-to-building link, using dynamic-mesh WDS. The two buildings, and the WDS link, are all on distinct subnets, with routing managed by OSPF. When the routers were runnin...

I just encountered a problem with upgrading a RB850Gx2 to version 6.42.4. After the upgrade, Winbox will no longer complete connecting to the RB850Gx2. The main window opens, and a few subwindows start to populate, and then the Winbox connection hangs up, and eventually times out. The appearance is...

I just encountered a problem with upgrading a RB850Gx2 to version 6.42.4. After the upgrade, Winbox will no longer complete connecting to the RB850Gx2. The main window opens, and a few subwindows start to populate, and then the Winbox connection hangs up, and eventually times out. The appearance is ...

CHR should run containers, docker or whatever. clarify please. why and how? There are two ways that a containerized approach could be used with RouterOS. I'll use Docker as a viable/practical example: (1) A new CHR variant could be added that would be a Docker container. For many people, this would...

CHR should run containers, docker or whatever.

+1 Docker is attractive, but other container options might be worth considering in future plans.

As a follow up on this post, I have also encountered problems with PPTP relating to large packets and MTU/MRU issues. In your original post, you did not indicate what version of RouterOS you were using. From what I’ve seen, it appears that a problem with PPTP was introduced in recent versions of Rou...

I can confirm that I am seeing a similar problem to what you report when using PPTP between MikroTik routers running either 6.37.5 or 6.38.5 firmware. However, I have some further insights due to having had to debug a very esoteric problem with EoIP tunnels. Here is what I believe is happening. Appl...

Does anyone know of a means for flagging packets generated by The Dude under RouterOS for subsequent firewall filtering? We have the “output” chain for filtering packets generated by the router itself, including any packets generated by The Dude. However, what would be helpful is if we could disting...

RB433UAH (power 24V 2A) RouterOS 6.35 ...freeze/crash (uptime 5days) no winbox, no ssh, no http, no webpage internet..ping/dns work board/internet, statistic all graf no log graf routerboard power off/on works I also encountered some odd behavior when I upgraded an RB433AH. In my case the upgraded ...

I am confirming that I’ve seen a very similar problem to what you described, and I even went through many of the steps you outlined. Everything works fine with PSK for the IPsec tunnel, but I cannot find any way to get IPsec working with certificates with L2TP/IPsec clients. Note, I’ve successfully ...

I have an idea about comments. A really cool feature, for me at least, would be to have two types of comments. Current comments are attached to specific list items. Those are great for things like wireless access list, dhcp static leases, etc. But for e.g. firewall, I'd rather have some "block...

Winbox 3.0rc4 is now available from the MikroTik dowload site. Is there any information on what has been changed in rc4? I do note that one of the problems I had with rc2 seems to be fixed, where I could not load Winbox for a version 6.2x instance of RouterOS. The connection appeared to be successfu...

http://www.cisco.com/c/dam/en/us/td/i/200001-300000/230001-240000/231001-232000/231483.eps/_jcr_content/renditions/231483.jpg Cut MikroTik some slack. After all, they just started producing rack-mounted devices, so they're still getting the hang of these rack standards from the distant past of tube...

2 Points to MikroTik for using Velcro strips instead of zip-ties!

Yes, I know that Velcro doesn't work for outdoor installations, but zip-ties are a royal pain when used in indoor racks, especially those installed in dark corners.

I have two power routers deployed behind an imagestream router as my headend. I upgraded both of the power routers from 3.11 in once case and 3.17 in the other case to 5.17. The router upgraded from 3.11 is working flawlessly. No issues after the upgrade. The router upgraded from 3.17 is showing ex...

So, what is the problem with downloads from the USA mirror site? I cannot download the all_packages zip archive for any of the RouterOS versions. However, I can download the equivalent file for the "legacy" 4.17 version. I can also download just the .npk and netinstall versions. Did the zi...

what about a feature to disconnect current logged users? =) I'd like to add my vote to Chupaka's suggestion. This is a significant concern with MikroTik security since there is no way to force logout an active user. The list of active users can be printed, but there is nothing that can be done with...