MikroTik

urbinek

I am not sure if this is the proper place for this, but let's go :) I just found this on a local MikroTik Facebook group, and I'm wondering since when MikroTik has been producing high-end audio hardware :D? On the product's webpage (https://www.synergisticresearch.com/accessories/ethernet-switch-uef...

urbinek

I am trying move old version of CAPsMAN (ac on wireless driver) from my GW as it is now running new version of capsman+local interface. M entire setup is vlan based and was working on l009, but i must done something wrong on CRS305 In short, I've: - copied CAPsMAN configuration from L009 to CRS305 -...

urbinek

Hi! I've noticed weird messages after i enabled new capsman on L009UiGS-2HaxD and ROS 7.14 I am not doing anything special during that time and I can't find anything related to such message Mar 8 23:21:33 mt_gateway caps,info disconnected RBcAPGi-5acD2nD@C4:AD:34:40:7A:D7%*f7, configuration changed ...

urbinek

Missing ingredient was, actually tagging bridge on cAP and enabling filtering, lol /interface/bridge set [find where name=bridge-local] vlan-filtering=yes /interface/bridge/vlan add bridge=bridge-local tagged=bridge-local vlan-ids=64 /interface/bridge/vlan add bridge=bridge-local tagged=bridge-local...

urbinek

Okay, so it seems that adding manager in was unessesary /interface wifi configuration add channel=2-AC country=Poland datapath=capsman-ac disabled=no manager=capsman name=home_2-ac security=home ssid=urbinek_cAP-NEW add channel=5-AC country=Poland datapath=capsman-ac disabled=no manager=capsman name...

urbinek

Hi, I am running in circles now, not sure if vlans or something else is miss-configured, but to the point I have L009UiGS running old capsman on mipsbe and AC devices which is perfectly running with vlan separation per network segment vlan 64 - home eth+wifi vlan 48 - guest eth+wifi vlan 32 - iot et...

urbinek

Nice work, but when Capsman and vlans will work in similar fasion as previously?

urbinek

Board have two spots for for fan header, i didn't do any measurements, but is it possible to solder fan there?
If yes, will there be any control over it?

urbinek

Shame. From YT and press notes I was under impression that it will be possible to have wifiwave, legacy CAPsMAN and use onboard wifi interface

urbinek

Create supout.rif and contact support. With 7.13 it should be possible to have both active. Hm, it seems that it can't If You want to have both capsman then You have to install wireless package, but You won't be able to configure local 2Ghz interface. Unfortunately, that is a cost for having both C...

urbinek

I guess you need to have the "wireless" package enabled for legacy capsman to work. But hopefully it won't interfere with the ax hardware (it never supported the ax hardware, so I guess that won't be a problem after all). That's the problem When i enable wireless then wifi-qcom is automat...

urbinek

I might have confuse myself with names, sorry for that.

But that beeing said, I am unable to have wireless package and working local wifi interface at same time.
I can't fully go for wifiwave2 as i still have mipsbe devcices

urbinek

As in title I want to use L009 as central router for both CAPsMAN v1 and v2 with wireless package > /system/package/print Flags: X - DISABLED Columns: NAME, VERSION # NAME VERSION 0 X wifi-qcom 7.13 1 wireless 7.13 2 routeros 7.13 3 X wifi-qcom-ac 7.13 Which seems to work, except i've lost onboard w...

urbinek

I've just found this: https://www.procustodibus.com/blog/2021/01/same-key-multiple-peers WireGuard, in fact, uses a peer’s public key as the lookup key in its internal table of connected peers; when sending encrypted traffic to a peer, WireGuard consults this table to determine the public IP address...

urbinek

Yes and no, my end goal is simpler. I want to provide Internet access via my Mikrotik I do not want to have 0.0.0.0/0 as allowed-addresses but some specified network e.g. /24 that i can manage later. I do not care about client IPs in particular as long as they are from defined /24 network MT should ...

urbinek

/ip/arp/print
/interface/bridge/host/print

od you can play some music e.g. viewtopic.php?t=105058

urbinek

The catch is that when you have multiple peers connected to same interface, router must use something to determine what should it send to which client. Well, each peer have unique set of keys which are not shared across other peers so why it can't be used? They are used in logs for identifying peer...

urbinek

So many topics/issues tagged with WireGuard that have nothing to do with WireGuard.

Good that mine was actually related with bad WireGuard configuration fixed by propper WireGuard configuration

urbinek

Now it makes sense

For me it's natural to use IPs for vpn endpoints, but routing by interface might be more elastic in bigger environments i think

urbinek

Neglecting the ip address everyone is using, even himself on iPhone, I guess ?

How come?

urbinek

The other issue could be routes....... WHERE ARE THEY?? At a minimum you need dst-address=192.168.99.0/24 gwy=wireguard1 table=main You mean like the one created dynamically by MT whe i've added IP to WireGuard interface? [admin@home_CRS305] > /ip/route/print Flags: D - DYNAMIC; A - ACTIVE; c, d, y...

urbinek

You can't have same allowed-address=192.168.99.0/24 for multiple peers on same interface, it should be allowed-address=192.168.99.X/32 (where X is what that peer has). It seems that changing from network to host alone worked, but i am confused why. Documentation is not very descriptive on WireGuard...

urbinek

Could you explain a little bit more?

urbinek

I am not sure if i did someting wrong. I did simple RoadWarrior style configuration where mobile client is connecting to Internet via mikrotik and wireguard Initiallty this configuration worked but after a while it started to trow errors: 22:33:32 wireguard,debug wireguard1: bQe944f7N4kCSXROQcDf1khe...

urbinek

Yeah, i am generalising.

Any way, l2 answer works for me, thanks

urbinek

Okay, so there is no point in forcing it to use IPs as it would introduce additional payload?

urbinek

My CAPsMAN is not displaying IPs of remorte-cap's. On occasion it can display IP but it will go after reboot or re-provision [admin@urbinek_CRS305] > /caps-man/remote-cap/print detail 0 state="Run" name="[C4:AD:34:40:7A:D7]" base-mac="C4:AD:34:40:7A:D7" board="RBcA...

urbinek

I've found a solution, but it is more like workaround which ihmo isn't ideal. All i need to do was dissable fastpath by enabling firewall on bridge, and set RAW rules for CPU conservation /interface bridge settings set use-ip-firewall=yes use-ip-firewall-for-vlan=yes /ip firewall raw add action=acce...

urbinek

yup, but examples are easly findable in google

/ip firewall nat
add action=dst-nat chain=dstnat disabled=no dst-port=53 in-interface=bridge1 protocol=udp src-address=192.168.88.0/24 to-addresses=1.2.3.4

urbinek

Hello there! I've got a little but wierd issue. If i try to send large file (e.g. 10GB) over wire transfer is very nice - full 1Gbps whoever after couple seconds all MT interfaces are dropping and transfer stops. With smaller files (~1GB) problem is not occurring (whoever transfer is lower, aroung 4...

urbinek

Auto settings on 20/40MHz in area with 30+ 2.4Ghz network works just fine with mine rb951, so it should for him

urbinek

Awesome, key word was "any"

I assumet that log once treated would be ignored.

urbinek

AAAAAAAAAAAAAnd after reboot it stopped, still got logs in /log

urbinek

Okay... after upgrade it started o work! [admin@urbinekGW_v3] > /system logging pr Flags: X - disabled, I - invalid, * - default # TOPICS ACTION PREFIX 0 * info memory 1 * error memory 2 * warning memory 3 * critical memory 4 error remote 5 critical remote 6 ipsec remote 7 system remote 8 system mem...

urbinek

@lestard, what?

urbinek

that part was not intentional, not sure why !ssh was there

anyway after removing it, it still doesnt help

urbinek

I've modified it through winbox, still same > /system logging print Flags: X - disabled, I - invalid, * - default # TOPICS ACTION PREFIX 0 * info memory !ssh 1 * error memory 2 * warning memory 3 * critical echo 4 error remote 5 critical remote 6 ipsec remote 7 system remote !account !info 8 system ...

urbinek

still nope > /system logging print Flags: X - disabled, I - invalid, * - default # TOPICS ACTION PREFIX 0 * info memory !ssh 1 * error memory 2 * warning memory 3 * critical echo 4 error remote 5 critical remote 6 ipsec remote 7 system remote !account 8 system memory !account > /system logging expor...

urbinek

still same > /system logging export /system logging action set 3 remote=192.168.88.250 src-address=192.168.88.1 syslog-facility=syslog /system logging set 0 topics=info,!ssh add action=remote topics=error add action=remote topics=critical add action=remote topics=ipsec add action=remote topics=syste...

urbinek

still not working as i wanted /system logging set [find where topics=system] topics=system,!account /system logging set [find where topics=info] topics=info,!ssh > /system logging print Flags: X - disabled, I - invalid, * - default # TOPICS ACTION PREFIX 0 * info memory 1 * error memory 2 * warning ...

urbinek

I think i wasn't clear about what i want to achieve! I wan to 14:52:37 ssh,info publickey accepted for user: admin-ssh 14:52:37 system,info,account user admin-ssh logged in from 192.168.88.250 via ssh 14:52:37 system,info,account user admin-ssh logged out from 192.168.88.250 via ssh disappear from /...

urbinek

hello there! I am using ssh access to manage address lists via linux scripts, everything works fine whoever in MikroTik logs i've got A LOT of lines where script was logged in. Is there any way to ignore any login attempts with key or from specyfic IP? 14:14:24 ssh,info publickey accepted for user: ...

urbinek

Well, script is on server and it is only downloading/sending IP to MikroTik

It seems to be easier that using DNS zones

urbinek

Hello there! I've created little Linux script, that is blocking at MikroTi's firewall failed login attempts made on Linux servers This script will parse secure/auth logs from local (or remote) system and based on fail login attempts will: - create unwanted IP list, - download already blocked list fr...

urbinek

yup, solved in rc12

whoever there is no change log about this

urbinek

Hello there!

I've just noticed that in current rc branch ping window in WinBox doesn't work and is returning ERROR: no address

mikrotik_ping.png

Obviously in terminal command works just fine

screen is from rc5, but on rc11 of CHR behaviour is same

urbinek

Tosses him like a devil ;D

http://www.youtube.com/watch?edit=ev&fe ... 8_44WGD5Pc

ps. is not mine alu, I use the transmission
these people never heard of rain ??

in soviet Poland we have not

but srsly, you must do panel about weird installations at mum

urbinek

[offtopic]
how large CF flash card can i mount into my RB ?
its for new smb feature

, im hoping that it will work...

urbinek

deam ;/
it doesn't look fun
whoever ill sent supout file to support, maybe something changed...

urbinek

make supout while im formating card or cancel it ?

urbinek

hi, ive got problem with mounting my ST1 Series CompactFlash 5-GB Hard Drive in RB532a in Store List, in disks tab i can see system and CF, system is build-in flash memory and its ok whoever CF shows total space/free space 0kb, status invalid when im trying to format CF, cpu jumps to 100% and takes ...

urbinek

"#" this is just sorting button u still can move tham up and down
no, if you click on # the second time, it doesn't allow to move anymore

yes, but not in order and we want to be in order...

urbinek

create new user with read-only access rights

yeah, and have you tried to hammer nails with bare hand ;>?

this locking feature would be nice for all lists where order have meaning (mangle, nat)

urbinek

hi,
have you done this

?

urbinek

on debian up@date with wine from repo it works well
try open file window in winbox and drag files there, not into void space

urbinek

these tools are ran within the winbox. while other winbox cannot be ran inside other one. So, the best option is to use the Dude, if you require management over large network. just install server somewhere, make network map (you do not have to actually have to have a lot of probes to monitor someth...

urbinek

hi,
i cant find any info how reset settings of rb750g absolute 0 just link others routerboards - no renamed interfaces, qos, dhcp etc

so how can i do this ?

urbinek

ok,
i've got Compex WLM200NX (down slot) and RB52 (upper slot)
either they are disabled nor enabled leds are flicking

where i can find what it means ?

urbinek

as i said earlier i don't have any scripts

[admin@urbiszcze] > /system script print 
Flags: I - invalid

after googling i found that these leds are for mcpi cards but what it means ?
after disabling interfaces it still flicking

urbinek

after successful change cpu i had to chose keep cpu frequency and its all

solved.

urbinek

I noticed that top yellow and orange led are interchangeably flicking in 1s interval i cant find any info about in manual, where i can find any led codes table for rb532 ? p.s. i don't have any script or settings that change led behavior [admin@urbiszcze] > /system leds print Flags: X - disabled # T...

urbinek

hi! I have problem with CPU frequency on my RB532a. Since ever i've got cpu freq set to 399Mhz and routerboard was working just fine (and still it does) but i noticed that cpu is downclocked to 199MHz After quick lookout over board i've found some curved capacitors so i have replaced them all (sligh...

urbinek

well yes it have, but i want to modify 750G bit to buy new one

urbinek

if you saved yours configuration to PC then yes, you'll need only recovery password Password recovery from backups: It may happend that you loose/forgot the password but fortunately you made a backup file some time ago. Backup files are made by RouterOS and saved in format: MikroTik-DDMMYYYY-HHMM.ba...

urbinek

As little bonus, you will have Gbit ports instead of FastEthernet 100Mbps that are currently sported by RB750. are you saying that RB750 G is only 100Mbit router :P? well to be blunt - getting part, resoldering, getting device to work properly will be much more energy, time and money spent, than ge...

urbinek

its easy way and i've alredy got spare 750g

urbinek

hi,
is it possible to replace ram chip on rb 750g from lame 32mb to 64 or more?
will board/cpu handle this? i cant find AR7160 technical specyfication

i know that i loose my varrianty but i like to experiment

urbinek

hello, i must disable 1 IP in my proxy(squid on other PC) redirect rule 279 ;;; web proxy chain=dstnat action=dst-nat to-addresses=EXTERNAL_IP_PROXY to-ports=8088 protocol=tcp src-address=192.168.1.0/24 dst-address=!192.168.0.0/16 dst-port=80 and i don't know how, i cant add 192.168.1.28/30 (dst-add...

urbinek

i've tried on 12V/1A and 24V/0,75A (both tested on rb532a)
one support file without wlan is linked in first post, rest i'll try to catch..

urbinek

i've tried Tp-Link TL-WN662AG and MikroTik r52
and they work (now) on my RB532a with RoS v5.5

and i've tested it first on RoS v3.30 then v4.17 and now v5.5

urbinek

i've tried 2 others minipci cards with no effect

urbinek

weird, sometimes after reboot (hard or soft) routerboard detects mPCI wireless card...

urbinek

do i need replace CPU ?
i cant find more elements that management mPCI slot

urbinek

hi! i've got problem with my RB411, suddenly it lost wireless interfaces... i've been running on RoS 3.30, so i've upgraded it ro RoS 5.5 and firmware to latest revision but with no success... is there any way to fix it ? http://v.urbinek.eu/urbinek/img/mikrotik/2011-06-24-224136_1680x1050_scrot.png...

urbinek

hi, i've got strange behavior with my RouterBoard... i don't know how to explain it so here some pics http://valhalla.urbinek.eu/urbinek/img/mikrotik/2010-06-22_daily.gif http://valhalla.urbinek.eu/urbinek//img/mikrotik/2011-06-22-175617_1680x1050_scrot.png and bonus file http://valhalla.urbinek.eu/...

urbinek

do you using proxy ?
i've got similar problem on my rb133c, try delete proxy storage or if you cant create new active storage for proxy and delete old, it worked for me

urbinek

since i've created new and delete old store for proxy and cpu utilization back to normall
uptime 6d and everything is ok

urbinek

its gonna be a litle bit troublesome...
RB is rebooting when i'm trying make supout.rif when cpu is idle...

i'm suspecting power adapter (12V/1A), it can overheat and shutdown for a while... whatever

when i'll have file i'll send it to support

urbinek

ok, i'll wait until cpu reaches 100% and make supout.rif
or it isnt necessary ?

urbinek

in first screen i've show enabled packages, Hot-Spot is disabled and unused on this device (also on GW if you ask)
routing, dhcp etc is disabled
i'm using only wireless and bridge

urbinek

ok 've deleted this unused store by creating new one that i also cant remove

why is this happening ?
this rb is working only as AP Bridge

urbinek

proxy is disabled, whoever i've got web-proxy in stores and i cant delete it..
shortly after reboot it is disabled and i can remove it but after few seconds entry is back and active

urbinek

hello,
i've got same problem on my rb133... but i've got everything disabled except minimum functionality...
what is going on ?

urbinek

found the villain....
http://valhalla.urbinek.eu/urbinek/img/ ... _scrot.png
but how socks can overburn my CPU even when im not using them ?

urbinek

i've downgraded to ROS 5.1
still same problem...

urbinek

anyone ?

urbinek

hello, as in title, i've got problem with cpu usage on my rb i've got rb 532a with 128MB cf card mounted, not used and 2 mini pci cards runing on RoS 5.1 yesterday i've noticed strange behavior (hi cpu usage) so i've reboot board, and cpu back to normal, but now its again something wrong... whats is...

urbinek

i've install TheDude v3.6 server on RouterOS x86
and while configuration i've give wrong password and now i can't login again

how to recovery/reset whole dude configuration or password alone

Search found 88 matches