MikroTik

Ansy

poe-out, warning    Failed to upgrade poe FW on /dev/poe, diag code -778/0

Is it harmfull? I've high building setup with only PoE-based wireless connectivity to RB750UP.
It's working now... can I reboot it or I'll loose the control?

Ansy

I wonder why Mikrotik guys don't pin this instruction to every hAP lite (may be other cheap, low memory, smips) device: Don't expect too many features of it, especially memory hangry ones! Don't use bundled " Main package " RouterOS at all -- that files are too heavy for lite devices. Down...

Ansy

How about simply swap address-list (as ipset swap in Linux iptables)?

Ansy

May be don't include modules disabled by default in RouterOS package for smips?
advanced-tools, hotspot, mpls, routing, security -- that modules can be uploaded separately.

Ansy

Can't upgrade one of my hAP lite from 6.44 to 6.44.1 -- "not enough space for upgrade" :( Files are empty, all modules are disabled ( system is active only), 14.3MB free RAM. Configuration is based on static IP (two routes for failover), 10 default firewall filter rules, masquerade and one...

Ansy

Sorry, some records failed to add because of more than 63 chars length (I've specially tested this limit). A DNS name cannot be longer than 255 chars in total and no more than 63 chars in each "label" (part between dots). That is described in the standard, so when you expected to use long...

Ansy

What's new in 6.39.1 (2017-Apr-27 10:06): *) dns - made loading thousands of static entries faster; Wonder how many that "thousands of static entries" can I load (faster or not) into DNS server? dnsmasq manage about 50K eating 30MB RAM on x86... works well... wont the same in MT. Tested o...

Ansy

What's new in 6.39.1 (2017-Apr-27 10:06): *) dns - made loading thousands of static entries faster; Wonder how many that "thousands of static entries" can I load (faster or not) into DNS server? dnsmasq manage about 50K eating 30MB RAM on x86... works well... wont the same in MT. Tested o...

Ansy

I finally managed to recover hEX off the bootloop (some tryes & tricks used), but... MT , why, Why, WHY do you make undocumented changes breaking our scripts??? /ip proxy access remove numbers=[find action=deny] Works in 6.38.5, doesn't work in 6.39.1 /ip proxy access remove numbers=[find action...

Ansy

What's new in 6.39.1 (2017-Apr-27 10:06):
*) dns - made loading thousands of static entries faster;

Wonder how many that "thousands of static entries" can I load (faster or not) into DNS server?
dnsmasq manage about 50K eating 30MB RAM on x86... works well... wont the same in MT.

Ansy

!) firewall - discontinued support for p2p matcher (old rules will become invalid); So how we should detect p2p traffic now? p2p matcher with two-step method (add destination ip to address list and block/prioritize this list) is working very good for me. For BitTorrent traffic (sorry for video only...

Ansy

Updated 6.39 OK: two hAP lite ( smips RB941-2nD ) devices one RB751U-2HnD ( mipsbe ) device one hEX ( mmips RB750Gr3 ) device But another hEX RB750Gr3 bricked into bootloop (BEEP, reboot, BEEP, reboot, ... ) and doesn't accept any control actions -- netinstall too. What can I do with it? RMA?

Ansy

one for static record and another two for created A and PTR in cache I can't see any A or PTR type records in DNS cache for my static DNS records created... are they hidden? And why that STATIC records have to be cached at all -- if they are STATIC and always active? I am on 6.39RC and I have them ...

Ansy

one for static record and another two for created A and PTR in cache

I can't see any A or PTR type records in DNS cache for my static DNS records created... are they hidden?
And why that STATIC records have to be cached at all -- if they are STATIC and always active?

Ansy

I've tested creating static DNS records on RB2011 with 128MB RAM onboard. Device crashed under above 27K records (not regexp's -- plain names!) when free memory remains less than 5MB. I wonder how webproxy can manage 37K regexp's? The same content, the same strings and much more work to filter them ...

Ansy

FYI: It is possible to use dnsmasq to block Web advertising by using a list of known banner-ad servers, all resolving to 127.0.0.1 or 0.0.0.0, in /etc/hosts or an additional hosts file. The list can be very long, dnsmasq has been tested successfully with one million names . That size file needs a 1G...

Ansy

What's wrong about RAM, guys? Embedded web proxy always DOES this work with about 36K regexps (& about 38K IPs in firewall address list). Of course, it eats RAM (we need to store all that strings at last), but why DNS records have to eat more RAM than webproxy records? And IMHO DNS internal proc...

Ansy

How many /ip dns static records can I create? I've managed only about 1500... but I need 37'000+ for now (and growing). Yes, it's for strong traffic filtering purpose (sad, but that's government law) with fast growing "black lists". Not found any option to control or check this limit. It's...

Ansy

Is it planned Multi-choice for options in Show Columns submenu?
It's very frustrating to check-scroll-uncheck every item from so many ones, especially using remote desktop software on touch-screen gadgets...

Ansy

Mobile Tik-App for Android began to crash immediately after login to 6.36 upgraded devices. 6.35.4 worked OK . Many routers -- RB750UP, RB951U, RB2011, HAP lite. Please check, confirm and fix something. Thanks in advance. Hello, What phone are you using? Are you able connect to demo.mt.lv and demo2...

Ansy

Mobile Tik-App for Android began to crash immediately after login to 6.36 upgraded devices. 6.35.4 worked OK . Many routers -- RB750UP, RB951U, RB2011, HAP lite. Please check, confirm and fix something. Thanks in advance. Hello, What phone are you using? Are you able connect to demo.mt.lv and demo2...

Ansy

Mobile Tik-App for Android began to crash immediately after login to 6.36 upgraded devices.
6.35.4 worked OK.
Many routers -- RB750UP, RB951U, RB2011, HAP lite.
Please check, confirm and fix something. Thanks in advance.

Ansy

Updated RB750UP from 6.35. 2 to 6.35. 4 this night. Got some white hairs... This device itself has rebooted fine... but not all PoE-powered by it. Thus, Ubiquiti NanoBridge M2 and NanoStation M2 " auto on " PoE-ed OK. But -- Mikrotik RB2011UAS-2HnD-IN was dead (the same current ROS version...

Ansy

Winbox V3 problem including V3.3: Look at the picture, at my screen size 1280x800px, in Wireless - Advanced Mode window size too long. How about smaller screen pixel size such as notebook PC 1366x768 or netbook PC 1024x600? How can we set? Imagine if all buttons and info located at title bar (such ...

Ansy

MT guys , Is it possible to add graphical field History (Upload/Download) into Queue List table? Looking like History field in Tools - Traceroute result table. It would be very useful to monitor bandwidth distribution with another one dimension (time) in addition to sorted by Upload/Download (Avg) ...

Ansy

HI, THE CREATION OF SUPOUT.RIF FILE DOSNT WORK FINE. I TRIED SEVERAL TIMES BY USING THE COMMAND MENU "MAKE SUPOUT.RIF" AND THE EFFECT IS THE ROUTER DISCONNECT AND AFTER THE FILE IS NOT GENERATE COMPLETELY, JUST ONLY 24 KB. I wonder how much is CPU load just while supout.rif creating? This...

Ansy

+1

RB751U-2HnD -- 3+MB free RAM only... it's not leakage, it's Firewall Address Lists I think.
But without memory monitoring I can guess only. Should I change device/vendor or optimize configuration?

Memory usage feature would be very useful.

Ansy

I see PoE Out Voltage values are the same for every interface because of passive PoE implementation sheme in RB devices, so this is a global value for certain device. It uses whole wide column in Winbox Interface List table. But it's very important indicator -- what's about PSU health? Is UPS batter...

Ansy

I've upgraded bridging RB750UP to 6.33.2, Power-Cycle-Ping is fixed -- THANKS MT! I wonder how often powered devices are pinged? Power Cycle Ping Timeout value? What if my device starts to reply ping in 5-10-15 minutes after powered on (f.e. Cambium heater applied when cold weather), but I want to p...

Ansy

I can confirm, all my ports are bridged together, ROS v6.33.1 on RB750UP.
Can ping IP manually, but Power-Cycle-Ping ignores this fact and reboots connected/powered device.

Ansy

Another bug?

2015-11-09 16-56-23 Скриншот экрана.png

Why does it reboot my PoE device while it's online?

And what about "grace period" to NOT reboot while device is starting just after power cycle and before it become ready to ping reply?

Ansy

Разработчики и техподдержка без проблем понимают на русском, если написать им официальный тикет на почту support@mikrotik.com Отвечают, правда, транслитом (ну, не продают там современных клавиатур с кириллической раскладкой) -- все вполне понятно и по делу. А судя по применяемым оборотам речи -- сов...

Ansy

In addition to the closed topic http://forum.mikrotik.com/viewtopic.php?p=498465#p498465 I happened to notice in System - Resources that one of the spare RB750UP devices has 250MHz CPU frequency instead of the normal 400MHz . I do remember that just loaded ROS (twice) and upgraded firmware, but did ...

Ansy

I upgrade RB750UP from 6.15 to 6.32 and I did not have any problem. RB750UP is powering up 4 devices (1 RB Metal5, 2 RB912, 1 NetMetal). Do I have to downgrade in any case? The very same question! I needed to swap my RB750UP 6. 31 (AFAIK) devices due to unexpected huge port flapping/constantly rebo...

Ansy

Nightly I've updated my RB750UP ( yes, 3xPoE out ) to ROS 6.32/fw3.24, I was afraid but I really need in Use IP Firewall on Bridge + Simple Queues working there. Well done MT! Finally you (I hope, crossing my fingers... ) fixed it! :) [Ticket#2015080366000534] http://forum.mikrotik.com/viewtopic.php...

Ansy

New device from spare parts, fresh 6.30.2 with 3.24 firmware, old config. Bridge - Settings - Use IP Firewall still broken : NewRB750UPoldIssue.png Frozen interface to configure or just monitor something. Empty fields/lisits (console too), can't control anything . Periodically reboots by watchdog, ...

Ansy

That's UDP/53 traffic -- mainly DNS Amplification Attack to victim host 212.35.2.113. Mikrotik , please make option IP - DNS - Allow remote requests by default turned OFF . I see already 3-rd case of this attack on just installed our customers' RouterBoards. All of them have a real IP-addresses, and...

Ansy

Online Tools -Traceroute does the job, looks like mtr.
Offline... may be Graphing wil be usefull, but until reboot only... or wasting FLASH lifetime?

Ansy

Does just renaming that dummy accept rule to account rule solve the problem?

Ansy

So it looks to me that boards that already might have some issue on the ethernet part of connections (mismatch in settings on both ends or board with Gigabit connected to fastehternet port connected and both on 'auto' are a disaster. Under 6.27 my rb800 (gigabit ports) connected to a rb433AG (fastE...

Ansy

Updated to 6.31rc6 this night, RB750UP in Bridge mode + Use IP Firewall (+ NAT + Simple Queues) still here. [Ticket#2015071466000444] http://forum.mikrotik.com/viewtopic.php?p=490742#p490742 http://forum.mikrotik.com/viewtopic.php?p=490689#p490689 Works well until turn Bridge - Settings - Use IP Fir...

Ansy

Ansy - have you conacted MikroTik support about it ? Yes, contacting from early 6.28. Last [Ticket#2015071466000444] Support suggests NAND/partition format errors. But I've updated firmware & ROS RC's without problem many times and RC's, System - Resourses says 0 Bad Blocks too (is it NAND?) I...

Ansy

Try 6.27

I tried but without success http://forum.mikrotik.com/viewtopic.php ... 89#p490689
I will retry nearest nights, can't experiment with customers.
Now 6.31rc15 without Use IP Firewall, i.e. dumb Bridge.

Ansy

WirelessRudy , +100500! You save me a full screen of great words :) MT , you've completely broken Bridge + Firewall function in 6.29-6.30 . RCs sometimes worked, somewhere not... but let " get the graphs " now: mt_traf_2015-07-12.png mt_traf_2015-07-13.png mt_traf_2015-07-14.png AFAICS, l...

Ansy

Bridge + Firewall seems broken after 6.28-29 for me.
Mikrotik struggle it in 6.30rcXX with variable success.
Look:
http://forum.mikrotik.com/viewtopic.php ... 70#p486770
http://forum.mikrotik.com/viewtopic.php ... 63#p489563

Ansy

6.30rc29 Got " CPU overload by management process " issue returned :( http://forum.mikrotik.com/viewtopic.php?p=485836#p485836 Now I need to control my RB750UP only via telnet console again. Lists become empty too. Using Winbox hangs device to reboot by watchdog not pinging default gatewa...

Ansy

Please look my story http://forum.mikrotik.com/viewtopic.php?p=485836#p485836 The same CPU load, the same failure to get traffic (DNAT replies in my case). 6.27 all worked ok, 6.29 rebooted frequently, 6.29.1 fixed flash writes, but not other issues. 6.30rc19 fixed CPU overload, but Bridge + Simple ...

Ansy

What about broken Simple Queues in Bridge configuration? 6.30rc22 (from 6.29, 6.30rc19,...) http://forum.mikrotik.com/viewtopic.php?p=488000#p488000 http://forum.mikrotik.com/viewtopic.php?p=487990#p487990 It seems completely NO firewall, but IP Firewall box in Bridge Settings checked (screenshots)....

Ansy

Fasttrack will not be active if you don't add the firewall rule for it. And Fastpath can be disabled from IP->Settings and for bridge in Bridge->Settings too. Check also Queue->Interface queues. Well, screenshot is below. 2015-06-26 13-22-51 Скриншот экрана.png Interface Queues are all changed to w...

Ansy

Just made a test with queue. Mikrotik just ignores the queues at all if FastTrack is active. :) I don't use " Allow Fast Path " in " Bridge Settings ", but I do " Use IP Firewall " there. Beside of that, " Bridge Fast Path Packets & Bytes " counters are a...

Ansy

+1
I use a whole special PC (+ UPS & switch) with Linux & tinydns for that important task... but this is MINI-task and totally overkill for my up to 10 lines of DNS config. Would be great feature to little Mikrotik boxes.

Ansy

Please check CPU load in Tool - Profile . I wonder what process eats CPU? My case with RB750UP is here http://forum.mikrotik.com/viewtopic.php?p=485836#p485836 And yes, RB750UP rebooting often by watchdog since 9.29. Only 9.30rc19 solved (I hope) management process CPU overload issue, but other prob...

Ansy

It seems like FastPath/FastTrack cannot be switched off in configuration Bridge+Firewall+Queues (no routing) :( " Use IP Firewall " box is checked ON , " Allow Fast Path " is OFF in Bridge Settings , and either Firewall Filter fasttrack forward rule is DISABLED too. But -- Bridge...

Ansy

Installed 6.29.1 on my RB750UP that runs my office. Watchdog timer reboot the router every 5 minutes. ... Edit: Now that I'm not in a pinch, RB750UP, 6.20, NTP and DNS, couple of GRE links, tried 6.29.1, seemed okay, enabled Fasttrack, worked beautifully, CPU was like 16% while I was pushing it. Lo...

Ansy

There's mismatching info in official routerboard.com website: http://routerboard.com/RBOmnitikUPA-5HnD License level 5 This page, left column: Brochure: omnitik-upa-5hnd.pdf omnitik-upa-5hnd.pdf: Operating system MikroTik RouterOS v5, Level 4 license Please somebody here, look at your device for exa...

Ansy

0 items in Tools-->Profile on some upgraded devices

I can't realize what this issue depends of...

Ansy

http://www.neorouter.com/products.html NeoRouter is a cross-platform zero-configuration VPN solution that securely connects Windows, Mac, Linux and FreeBSD computers at any locations into a virtual LAN and provides a networking platform for various applications like remote desktop, shared folders an...

Ansy

Made one last try with [use SAME version of Netinstall and RouterOS!] http://download.mikrotikindonesia.com/index.php?dir=Firmware/V5/routeros-5.11/&file=netinstall-5.11.zip http://download.mikrotikindonesia.com/index.php?dir=Firmware/V5/routeros-5.11/&file=routeros-mipsbe-5.11.npk Yes, tha...

Ansy

Forget the hole with the screwdriver. 1) before power the rb, press reset button and leave pressed, insert power plug, and wait until devices are visible in netinstall (15~20sec) [assuming the pc is working], now release reset button. 2) If you can see correctly the device on netinstall 6.10, try t...

Ansy

if the rb start, open winbox and update BIOS: I'm glad to do it, but: My RB/750 turns all LEDs ON (despite of real state of Ethernet ports) and no reaction in WinBox , no traffic at all (after normal reboot) -- I've sniffed any packets with WireShark software. If I reset device to defaults (short c...

Ansy

elmer , I've got very same problem with my RB/750 upgrading it to v6.10. How do your hardware "work" exactly? My RB/750 turns all LEDs ON (despite of real state of Ethernet ports) and no reaction in WinBox , no traffic at all (after normal reboot) -- I've sniffed any packets with WireShar...

Ansy

NoQueues.gif

Rebooting repairs situation, but I've got this issue twice now...

Ansy

Please help me to choose too, guys. Due to direct NLOS between S and D points we making two clear LOS wireless links via AP-retranslator . A <--------- 4.2km --------> S P <-- 180m --> D Two half-links are asymmetrical in distance, but quite in the same direction from AP (may be 7-10 degrees sector)...

Ansy

after 19 working hour happens same problem , mishaM, May be it's simply " DNS Amplification Attack ", as I saw on my RB751U-2HnD . Eating memory, process dns eating CPU, many DNS queries in DNS cache (my case was xcqv.de from 178.100.10[0123].* ) I've switched off IP -> DNS -> Allow Remot...

Ansy

Please check, from where it picks garbage addresses into Torch when started from Simple Queues?

Ansy

Blank line at the end of file and ftp pre-removing .auto.rsc made my script to autorun again

Ansy

Actually the problem is something about "management" process. I started test from 2 RBs 751 using direction=transmit and I saw no problem. But when I started test from one RB 751 using direction=receiving "management" process reaches 6% on CCR1016 and after 90 seconds the router...

Ansy

I confirm this bug for RB750 with 5.24 RouterOS.
Please please MT, fix it!

Ansy

After upgrade to RC9, problem with Winbox still remains - after some time CCR stops responding to Winbox/telnet/SSH. There is extra info on this behavior: while all management access to router is gone, there are some interfaces and MAC adresses which DO respond to Winbox. Also, after few days of up...

Ansy

May be: intercept DNS query (UDP/53) and redirect it to onboard DNS server with static record for new URLs' domain part and filter HTTP query (TCP/80) for certain IP request (no DNS) and mangle it to new dst IP and filter URL query (TCP/some port) for undefined IP from any other DNS via Layer7 , the...

Ansy

It sounds very sad for me :( ... I'd like to have tinydns on my RB750 & RB750U-2HnD. We had to pay twice much for allocation extra servers in IX-datacenter, so we had to hold extra PC box only for our tiny zone DNS server. Placing DNS server deeper in local network and redirecting requests from ...

Ansy

Well, cheap chip for switch :) I've read that link and schemas twice before configuring RB751U, but found nothing there about only one master port available. May be it's time to append some info to documentation wiki? Can anyone post here schema/link of RB7xx internal switch interconnections like th...

Ansy

Hello MTikers! I need something about this config on my new brand fancy RB751U-2HnD : 2 ports ( eth1-eth2 ), with REAL static IP on master grouped in switch . 2 ports ( eth3-eth4 ), on another master grouped in another switch and bridged with wlan0 , with LOCAL IP on bridge interface, alltogether SR...

Search found 73 matches