Just saw that myself. Confirm it's working!

It's the CA cert ... we made a new CA for testing and with that it works. We started off changing a few parameters at once, and it worked, Narrowed it down subsequently to the Signature / SignatureHashAlgorithms. SHA256RSA/SHA256 works, SHA512RSA/SHA512 doesn't.

Also the related ticket got no attention for 2 months. A bit disappointing ...

We found out that (for us) this is caused by our PKI using sha512 . Since some version 7.x our certificate based VPNs stopped working and we had to at least omit CRL checking. Since 7.8 bypassing the CRL also doesn't work, so we were forced to investigate deeper. So we created new CA/Intermediate/CR...

started various attempts with various CCR1009 with 7.x since official release. IPSec problems keep returning, after certain runtime (sometimes hours, sometimes days) CPU will raise towards 90-100%, IPSec tunnel shows established, but routes through the tunnel are failing because ping check fails. Di...

OMG why didn't anyone mention yet: UDP support on OpenVPN???

Feels like that was longer on the wishlist than anything else!

Is the any hardware requirements for ROS 7 (Beta 8 )? I have tried to test it on RB411UAHR (with Sierra MC8792V modem installed). First did regular upgrade but it ends in a boot loop. RouterBOOT booter 7.0beta8 RouterBoard 411UAHR CPU frequency: 680 MHz Memory size: 64 MiB NAND size: 64 MiB Press an...

Same here, hAP ac² ...upgrade from 6.43.2 to 6.45.1 .. .wrong username/password!!


EDIT: clearing Winbox cache (regular Windows 10 / 1903 ) solved issue. Phewww ... that was close.

Slavko, with a little fantasy you could create a "Tool" for that purpose i guess.

Same here ... if Routerboard is installed with single packages from the "all-packages... zip" , then the wireless package detected by DUDE's upgrade system is "wireless@". However, for units installed with the "Main" package "routeros-<platform>-.....npk" (and...

Thanks, that's a nice idea. So far i only used this setting when I had to manage multiple (WAN) IPs in the gateway subnet, never thought of using it this way.

This some old topic, but I came across the same problem now. I need (or would like) to define the source address used for probing etc.Since there seems to have been much work going on for the Dude, is there possibly a soluton to this meanwhile?

tool sms inbox message error all message recib error CCR1009-8G-1S-1S+ May/11/2001 07:15:07 GMT +11 a ekKECAdKGSESIC$o @@@@@@ SL@@@@@@d$@@@@@@@Xe@@@@@@@@*CUw@@@@@Ru=o$@@@@oae@@@@@@L;D@@@@@@0:haA @@@@(@@@@@@ Same here, SMS text garbled on RB411UAHR (factory reset done after upgrade 6.40.5), and also...

I am affected by this as well on mutliple routers, ROS 6.40.4 meanwhile . Hey Mikrotik, any news?

Thank you for your input on the topic, will have a look at the models you suggested. Aesthetics are absolutely not important here, and probably it will be sitting in a corner overlooking a narrow coverage area. And money definately only comes after functionality, so I'm not looking at the budget, bu...

Hi, since I have not much experience with Mikrotik WiFi in non-SoHo environments, am looking for a hardware recommendation for the following: -indoor AP with Gigabit uplink -2,4GHz -max. 50 clients transferring data at one time -low distance (10-20m) -queues shall be used to equalize all clients Can...

It seems in Webfig the "Design Skin" button can not be removed. Thats really bad if you want to give some operator restricted write access to the router for certain sections. I also want to mention that it would be really useful if NEW Webfig options would be disabled by default EXCEPT fo...

It seems in Webfig the "Design Skin" button can not be removed. Thats really bad if you want to give some operator restricted write access to the router for certain sections. I also want to mention that it would be really useful if NEW Webfig options would be disabled by default EXCEPT for...

Hi,

when using WinBox->Files->Backup, could you make it so the filename does not start with "Mikrotik-...", but rather use the value from System->Identity?

For example if you want to keep flash writes to a minimum, it would be good to have only DNS names stored in config, and have the resolved IPs in memory.

Hi, can anybody tell what is more efficient (or: "less CPU hungry") ? A: Add many routes in "/ip route" to cover my routing needs B: Mark connections, and then add routing marks in "/ip firewall mangle", and then have only few routes in "/ip route" I know that...

I found that SNMP access from a running "Dude" can cause very high management CPU load, this was also discussed in the forums after some of the 5.x series patches.

Did small test setup that does what you want to do, here's the config from the central router, the one for the external routers should be self-explaining (no need for policy routing I suppose) /ip address add address=10.1.1.1/24 disabled=no interface=ether1 network=10.1.1.0 add address=10.10.10.1/24...

Yes policy routing would be 1 step to the solution of your problem. Mark IPSec connection (in and outbound) via mangle rule, for OUTgoing packtes for this connection add routing mark, create route via eth10 for this routing mark. Don't know how far you are with your setup, it will involve some scrip...

I may have to add something ... after doing config reset on my test MetaRouters, I applied my test scenario fresh from start, and this time it seemed to work. But then I applied IPSec tunnel policy, and here is where it starts to act up (I swear i had the problem before even without IPSec, and not o...

Hi, for a while now I've been trying to find a good setup in ROS to cover our needs (redundant VPN with policy routing/failover via Multi-WAN, details are not too important). While I have some generally working solution, I would prefer another one, but I'm stumbling about one certain problem again a...