Hi everyone, So with the latest RouterOS exploits, upgrading to a up-to-date RouterOS version is more important than ever. I wrote an article/how-to on an easy way to update RouterOS across your entire network. This article uses RouterOS Package Source feature to act as a local upgrade server. Unim...

I have the same problem. I want to build a bridge over one bonding-interface (802.3ad to CISCO SF300 with tagged VLANs) and one ethernet-port (tagged VLANs HP ProCurve) to have a L2 connection. For L3 inter vlan routing, my VLANs have the bridge as interface. But it does not work! Bonding slaves: L...

In the meanwhile i got it work.
I use switch-chip feature for VLAN-Tagging and forgot to assign both VLAN's to switch_cpu "port".

Now everything works fine.

Thx for your assistance!

eMuell

I've wrote to MT support and got the answer that they will fix the issue in one of the future versions of ROS.

Hi MT, since ROS 6.28 my non-Windows devices cannot connect with OpenVPN to my MT router anymore. The problem is that in ROS 6.28 the OpenVPN service sends the new option "topology=p2p" to the client. This option is not supported on non-Windows devices, see https://community.openvpn.net/op...

- ether1 is really the master port in switch group?
- you have identical problem on both routers?

Both -> Yes!

Which CAP to CAPsMAN connection type do you use ? Layer 2 or Layer 3 (IP) and if L3, do you use one of the two VLAN's for connection?

Yes, it should work, I have identical setup working - 2 routers, 3 VLANs, 3 SSIDs, trunk in between the routers and CAPsMAN 2. Can you paste or send me your configuration output on PM? Thats good news! ;-) Here is my configuration: /caps-man datapath> print 0 name="ps-privat" client-to-cl...

where are the mikrotik guy's ? :-) PLEASE, i only need a short statement if datapath.vlan-options should work for virtual ap interfaces or how i can manage two separted wireless-network interfaces through CAPsMAN in local-forwarding-mode? i would'nt ask this question if i find anything in the wiki o...

Thx for your reply.
Yes, there are both wlan Interfaces member of the bridge, but VLAN Tag seems to work only on Master Interface !?

Nobody has an idea ?
In CAPsMAN wiki there are no more infomations about datapath.vlan tag on slave/virtual ap interfaces. Should this work ?

Please help!

Hi @ All! Please consider following setup: I have 2 AP's (AP1/AP2) controlled by CAPsMAN which is installed on router1. Router1 has 2 VLAN's (private/public) which are in trunk port to AP1 and AP2. Now i will provision (over CAPsMAN) on both AP's two separeted WLAN's in local-forwarding mode, one fo...

´1.create two bridge - br-vlans and br-vlan25 2. create interface vlan: name:vlan25.to.eth1 on port eth1 and name:vlan25.to.wlan on br-vlans 3. bridge ports: vlan25.to.eth1 to bridge: br-vlan25 and vlan25.to.wlan to bridge: br-vlan25 4. change wireless - cap - bridge to br-vlans and try connect to ...

/caps-man datapath> print 0 name="ps-privat" client-to-client-forwarding=no local-forwarding=yes vlan-mode=use-tag vlan-id=25 1 name="ps-public" client-to-client-forwarding=no local-forwarding=yes vlan-mode=use-tag vlan-id=66 /interface> print Flags: D - dynamic, X - disabled, R...

Problem solved!!! I use vlan in datapath section: In CAPsMAN: add client-to-client-forwarding=no local-forwarding=yes name=\ office_guest_local_vlan vlan-id=52 vlan-mode=use-service-tag add client-to-client-forwarding=no local-forwarding=yes name=\ office_royal_local_vlan vlan-id=1 vlan-mode=use-se...

i can also confirm that since v6.11 "require-client-certificate" option does not work anymore!

thanks for the answer - i've already checked the system/certificate wiki-page but didn't found anything.
are there any plans to support CRL in openvpn in near future?

i have upgraded to ROS 6 und built my own self signed CA.
when i revoke my client certificate the openvpn connection is still working.

it looks like that the openvpn-server does not check the built-in CRL?

can anybody confirm that ?

Currently I'm using two SXT G-5HnD on 400m distance. The TX-power lowered to 5dB to achieve -60-62dB TX/RX Signal on both ends. Real TCP-throughput is 135-140Mbit/sec with maximum latency 20ms at full load. Before I used two RB600a+r52Hn with Cyberbajt Gigaether Duo 19dB dual pol. panel antennas fo...

Hi Dobby, at first - thanks for your reply (very interesting links). It's a private setup (outdoor-installation) and the regulations and laws in my country are very simmilar to germany because i am from Austria. :-) When i can reach the maximum throughput which is possbile by a SXT or SEXTANT (150Mb...

Hi @ All, i plan to connect 2 sites over a wireless link and don't know exactly which antenna should I use to get the best result. The distance between the sites is about 1km without any buildings, trees or other objects. I will transfer large amounts of data over the link. The main goal is therefor...

Sorry to bring this up again, but it's a interesting discussion and i am faced with the same question. RouterOS does exactly as it is written in RFC and what changeip said. If there is no match packets are discarded. in my case the tunnel is not always up. will the packages also discarded when the t...

Sorry to bring this up again, but it's a interesting discussion and i am faced with the same question. RouterOS does exactly as it is written in RFC and what changeip said. If there is no match packets are discarded. in my case the tunnel is not always up. will the packages also discarded when the t...