MikroTik

grusu

For me, USB port for storage is useless, it's not necessary for mkt devices, it's a feature like a box in recycled stuff. Not necessary for most uses cases.

USB port is good for log storage, software kits, scanner saved images, etc

grusu

hAP AX3 port 1 speed is 2.5Gbps.

grusu

When you tested the two APs, were they in the same room or on different floors? I have a similar setup with 3 equipment on three floors. I also turned on an AP on the first floor near the hAP axis and I noticed that, if both are turned on, the Tx changes, especially for 5Ghz. There were also bigger ...

grusu

https://www.youtube.com/watch?v=tjVUshB4HTU

grusu

Hi Normis,

It is possible that the firmware version also appears in Neighbors list?

Thanks,
Geo

grusu

Hi,

You can use something like LRS-35-24 and lower the output voltage to the minimum (21.6V):
https://www.meanwell.com/webapp/product ... rod=LRS-35
or something similar.

grusu

I have two Gree air conditioners and the wifi network in the house is composed of 3 Mikrotik AX APs. For all smart devices I made a separate wifi network. You can thus make settings in such a way that Gree works and the main wifi networks remain AX.

grusu

Something is wrong with the initial scan for 5 GHz. Every time at boot, the frequency is set to 5500 on all APs. This does not happen for 2.4 GHz where APs receive different frequencies.

grusu

Thank you for the remarks. I just wanted to say that "B" is not included in the documentation:

Screenshot 2024-06-11 152912.png

grusu

CRS320-8P-8B-4S+RM

What type of port is marked with "B"?

grusu

You don't have to set manager in the router's configurations. Only on cap.

grusu

Hi,
I think it's time to rewrite the documentation for the smb service.
Thanks!

grusu

Check for which interface you have set the rule.

grusu

It would be very useful if there was something similar when you have to set up a laptop.

grusu

/interface/wifi/provisioning> print detail Flags: X - disabled 0 supported-bands=2ghz-ax,2ghz-n,2ghz-g action=create-dynamic-enabled master-configuration=cfg-hf2.4 slave-configurations=cfg-x2.4 name-format="%I" 1 supported-bands=5ghz-ax,5ghz-ac action=create-dynamic-enabled master-configu...

grusu

Take a look:

grusu

What's new in 7.12rc4 (2023-Oct-27 11:51): *) lte - fixed FG621-EA possible timeouts during firmware upgrade; *) netinstall-cli - fixed "-k" key option (introduced in v7.12beta7); *) poe-out - removed "auto" mode support for L009 devices; *) routerboard - fixed "reset-button...

grusu

https://mikrotik.com/product/ccr2116_12g_4splus

grusu

Change the MTU to 9000.

grusu

Hi, Try resetting the network on your computer: Settings> Network & Internet> Network reset but be careful that this will reinstall all your network interfaces and bring your settings to the default. You will need to reset all network settings for wifi, ethernet and VPN. Best regards, Geo

grusu

Hello Dears ,
kindly be noted that I don't understand why we write network although we write subnet mask when we assigning IP to interface . Kindly check the attached screenshot.

Because... is normal.

grusu

Can you put some pictures here?

grusu

You can get 1000 Mbps throughput with the Asus RT-AC68U router: https://www.smallnetbuilder.com/old-tools/charts/router/bar/179-wan-to-lan-tcp if you use firmware from Merlin: https://www.asuswrt-merlin.net/ I own such a router and it was ok for the 1000 Mbps connection. Because a Mikrotik router is...

grusu

Here is a real example: hapac2_1.PNG As you can see, the uptime is over 36 days, being a client's router. If you use stable versions of RouteOS you will not have stability problems and you will not need to restart the router. At least not in the home setup. The router can support up to 1000 Mbps bet...

grusu

RB4011 for 80/20 VDSL connection? Maybe only if in the coming months it switches to fiber optics and 500-1000 Mbps connection. But I don't think it will happen in the next few years in the UK.

grusu

Hello, we observed that in the ccr and rbs used as pppoe concentrators there were reports of slow navigation - version 6.47. A rb1100 normalized when placing an earlier version Foarte interesant ce ai descoperit. Ai testat pe echipamentele tale sau informația ai luat-o din internet? Te rog să scrii...

grusu

From Quick Guide: Buttons and jumpers Reset button The RouterBOOT reset button has the following functions. Press the button and apply the power, then: • Release the button when a green LED starts flashing, to reset RouterOS configuration to defaults. • Release the button when the LED turns solid gr...

grusu

Please Give Advice how to i make solve this issue

when i make connect ip cloud ... local ok .. but remotley showing time out

The answer is right in the picture: the router is behind a NAT.

grusu

Maybe it's a restored backup?

grusu

If you do this for authentication reasons, it doesn't mean much. The MAC address can be easily changed in a router or in a computer. You could install a pppoe server on the network, maybe even on CRS326. If there are few apartments, I don't think it's a problem for the switch processor. Then each cl...

grusu

RouterOS version 6.46.5 has been released in public "stable" channel! *) winbox - added support for "Tools->WoL" menu; I can't choose the "bridge" interface for WoL. I have scripts like: /tool wol XX:XX:XX:XX:XX:XX interface=bridge-LAN and it works perfectly. WoL menu ...

grusu

Mikrotik has its own cable of this type:

https://mikrotik.com/product/q_bc0003_s

grusu

Check if the subnet used in the office is the same as the one used at home. Many people use 192.168.1.0/24 both at home and in small business networks.
If the subnet is the same, you will not be able to access the resources of the two networks at the same time.

grusu

Open Powershell window with administrator rights and run: Get-VpnConnection -Name "_vpn name_" You will see that SplitTunneling is "False" Set SplitTunneling: Set-VpnConnection -Name "_vpn name_" -SplitTunneling $True where _vpn name_ is your vpn connection name. After ...

grusu

You can split trafic at your client PC.
What operating system are you using?

grusu

Open one of them and check the memories inside.

ccr1036-8g-2s-1.jpg

grusu

The router CCR1036-8G-2S+ has two 2GB memories from the factory.
Someone changed them with two 8GB memories.
CCR 1 is undoubtedly older than CCR 2.

grusu

Hi, I do not recommend exposing the computer's RDP port to the Internet. Better use VPN. This year I saw with my eyes two computers from two different companies that were opened to the Internet RDP protocol and both were encrypted by hackers. On one of the computers the information was vital and the...

grusu

It has 64 bit processor so you have to wait for the routeros 7 to be released.

Just kidding.

I'm waiting for its appearance, too.

grusu

And problem with "Signal Strength Range"?

Capture.PNG

grusu

grusu what router are you using? RouterBOARD 1100Dx4 Dude Edition. I have multiple l2tp/ipsec connections to my clients. After update from 6.46beta59 to 6.46beta68 no connection has ever worked. And it seemed to me that certain sites were not loading properly. I don't know if it has anything to do ...

grusu

Hi,

After upgrading to version 6.46beta68, no IPSEC connection works anymore.

grusu

I did not say that ipsec / l2tp is generally better than openvpn but that, in the case of a mikrotik router, it is a better choice.
The implementation of openvpn on the routeros does not support udp and therefore it is not so fast.

grusu

You can use l2tp / ipsec which is quite secure and works on all platforms.
If you have a hardware accelerator router then it is even better:
https://wiki.mikrotik.com/wiki/Manual:I ... celeration

grusu

Hi,

You must use 48V power adapter.
RB4011 comes by default with 24V power adapter.

grusu

11:56:08 l2tp,ppp,info L2TP-Client: terminating... - old tunnel is not closed yet

Do you have an open connection on your PC?
You must close first.

grusu

Hi, From what I understood, if you use both sources simultaneously (28V and 48V), the switch should supply the equipment with the required voltage depending on the type of PoE: passive or active. It has a field where you can set the voltage to: Auto, Low or High. Annotation 2019-09-26 104004.png Nor...

grusu

Can they be combined with other APs using mesh? For example with cAP ac using ethernet connection eventually?

grusu

I can use wireless capability of current rb. Was already watcing for hex and hex s but didnt knew it can handle that troughput. Thank you Can handle 1000 Mbps and is capable of hardware accelerated encryption: https://mikrotik.com/product/hex_s#fndtn-testresults https://wiki.mikrotik.com/wiki/Manua...

grusu

wlanX is then the "name" of the interface ?

Yes. In my case wlan 5GHz interface is called "wlan5":

wlan.PNG

grusu

You can try: /interface wireless reset-configuration wlanX where "wlanX" is your 5 GHz wlan interface.

grusu

Hi,

You can configure a bridge to put the eth0 - eth4 and wlan (2.4 and 5 GHz - physical or virtual) ports. Wlans must be configured in "ap bridge" mode.

Best regards,
Geo

grusu

Or you can try other brands like:

https://www.fs.com/de-en/c/bidi-sfp-plus-64?10-20km=284

grusu

No.

https://i.mt.lv/cdn/rb_images/677_hi_res.png

grusu

Try to change the power adapter.

grusu

Hello, After the upgrade, the VPN client cannot connects. One of my colleague updated 5 routers. Please don't ask me why, but not working. Can I ask any expert where and what can I have to change to make it working again? :( TIA Hi, What VPN solution do you use? I guess you mean you can not connect...

grusu

I have 6 simultaneous L2TP/IPsec client connections and it works perfectly.

grusu

Hi,

You can set up everything in a router after which you export the configuration.
If you look into the exported file you will see that it contains all the commands that generate the settings made.

https://wiki.mikrotik.com/wiki/Manual:C ... Management

Best regards,
Geo

grusu

If the DNS server is the Mikrotik router, make a static record in it for that IP address.

grusu

You do not need to open it to see that mpcie slot connectors are missing.

grusu

A matrix with MikroTik products would be very useful. I have often looked for a specific product, and although I know them well enough, it would have been easier for me to make a comparison between them, especially when I had to make some compromises because none of them had all the characteristics ...

grusu

*) led - added "dark-mode" functionality Sunglasses not needed anymore? in my LDF I can not find the function.... Is not dark-mode function - is a functionality. On some devices, you can close the LEDs using the command: all-leds-off Read here: https://wiki.mikrotik.com/wiki/Manual:System...

grusu

Just a remark: Maybe it's not a good idea to put the router over a speaker with such a powerful magnet.

grusu

Winbox 3.18 - not working... When running it on a PC...

Try to clear cache:

Tools > Clear Cache

grusu

Well, I guess it should still be possible to login with Webfig or SSH?

Hi,

Try to update winbox to 3.18 version.
From which version you upgraded RouterOS to v6.44beta?

Geo

grusu

Upgraded now, and I am not able to login anymore. Password appears to be changed. Same problem in Webfig as SSH. Known issue? Any idea how to restore?

viewtopic.php?f=21&t=139189

grusu

Hi, I have 1 Gbps internet connection for a few years, and I really do not need equipment that has a 100 Mbps connection than when I plug in IP camera, for example. But think that not everywhere in the world where Mikrotik sells routers the people is so lucky. A few years ago I was in the UK to set ...

grusu

You can use Wireless Access List with VLAN.
You can even have a Private Pre Shared Key.

grusu

does Realtek RTL8367 manageable switch and support acl? Nope. It's crap :( https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features I think the chip has several possibilities implemented in hardware but are not yet implemented in RouterOS: http://www.realtek.com.tw/products/productsView.aspx?Lang...

grusu

I can't change the name of the admin user:

[admin@MikroTik] > /user set 0 name=test
failure: user name can't be changed

nor any other user.

grusu

And you always have one eye on the forum and one on security blog:

https://blog.mikrotik.com/

grusu

But I get error in the log: Blacklist Authorization failed

Which is the active and good script?

You must enable IP Cloud service first.

grusu

Dave, Have you considered using external to your network honeypots as source of offending IPs? I use as the first frontier such RAW drop rules and all the time there are some IPs on the list of attackers. add action=add-src-to-address-list address-list=RAWATTACK2 address-list-timeout=127m chain=pre...

grusu

Hi Dave,

In first list first address is 255.255.255.255 . Is that right?

Thanks,
Geo

grusu

As far as I can see in the first picture, the sys user can log only from IP 127.0.0.1 so you can only try from the serial port.

grusu

Hi,

Something is wrong with the Hash Algorithms in Peer Proposal setting in v6.43.51:

Peer Proposal mismatch.PNG

If I have to set the SHA1 algorithm, in WinBox I have to set md5.

grusu

https://mikrotik.com/product/CRS210-8G-2SplusIN

grusu

Ok but I can do about 5 pm. I have default configuration wifi 20/40/80 MHz Ceee. I don't know why is this problem. This model Mikrotik will be no problem 200-300 Mbit/s 5GHz yes? 2 meters to router. If you did the test between your computer and a WAN site you are limited by the 100 Mbps WAN connect...

grusu

How about RM(rackmount) version of Hex?

Better a frame in which to put up to 3 pieces.

Something like that:

IMG_20180517_131251.jpg

grusu

What do do : 1) Firewall the Winbox port from the public interface, and from untrusted networks. It is best, if you only allow known IP addresses to connect to your router to any services, not just Winbox. We suggest this to become common practice. As an alternative, possibly easier, use the "...

grusu

User Manager is available in 6.42rc RouterOS version.

grusu

Hi, I have a question what is the mode button on the routers (for example at top of RB 941) - foto in attachment When I press the button, there is no action (default and empty configuration). Thank you in advance for your help I have tested on cAP AC in 6.42 RouterOS version and it works: /system r...

grusu

Hi, just bricked two of my three RB962UiGS-5HacT2HnT by upgrading from 6.41.2 to 6.41.3. I did the following steps - as I did with the last update: 1. uploaded routeros-mipsbe-6.41.3.npk 2. reboot 3. uploaded active modules - advanced-tools-6.41.3-mipsbe.npk - dhcp-6.41.3-mipsbe.npk - ipv6-6.41.3-m...

grusu

I am referring to this:

xxxx.PNG

xx_xxx.PNG

grusu

I have found this feature in RouterOS v. 6.42rc41 on cAP AC.

Thanks!

grusu

Distance is already set "indoors" and, if I try to set Tx Power to "manual" or "card rates" does not work. Only the "all rates fixed" option seems to work. I have better performance but only in 2.4GHz if I disable the 5GHz interface. For 5GHz I have no improve...

grusu

You can use localy available power supply instead of the packed one. You can also request your local dealer to solve the problem if the plug type doesn't correspond to your local regulations. I haven't thought of buying a locally available power supply, but that could work. However, I think buying ...

grusu

Power Supply works between 100 - 240V~

https://img.routerboard.com/mimg/part11391161548m.jpg

grusu

For all you have trouble with wireless throughput please check if have both chains checked on wifi interfaces.
I found when I configured cAP AC set as follows:

cAP AC.PNG

However, with the two chains checked, the speed is smaller than it should. I hope this will improve in future RouterOS versions.

grusu

CRS328-24P-4S+RM is POE Out switch. Is the maximum power consumption of the switch with all ports active and POE Out ON (but no POE devices connected).

POE OUT consumption can be up to 450W in accordance with Quick Guide:
https://i.mt.lv/routerboard/files/15196 ... lus-qg.pdf

grusu

This type of equipment has only 16MB of flash. Everything you save in "/" is actually saved in RAM in fact. If you want to keep files save them in "/flash" but be careful that the space is limited.
Or add a USB stick and save it there.

grusu

I have a client to whom I have built wireles solution with APs from Mikrotik. With new RouterOS versions it was not possible to make a setup that works. The company is in a hall next to which is a tower full of apartments and so many wireless networks. Mikrotik AOsalways detects radars and trying to...

grusu

Hi becs,

When I try to upgrade CSS326-24G-2S+RM from the interface, the "Download & Upgrade" button is grayed out and Latest Available Version is 2.5rc2.

Best regards,
Geo

grusu

And you can use option 121 to set default route and gateway for client.

grusu

Make lease static for that MAC and set "Block Access".

grusu

http://wiki.mikrotik.com/wiki/Manual:Configuration_Management "The configuration backup can be used for backing up MikroTik RouterOS configuration to a binary file, which can be stored on the router or downloaded from it using FTP for future use. The configuration restore can be used for restor...

grusu

Hello everyone, i used Mikrotik devices over the last couple years and they have been very stable for me. My last configuration was my RB2011 as gateway and capsman in combination with a hAP Accesspoint. This configuration was stable but my neighbors seems to get a new wlan ap or printer every day ...

grusu

Hello, I don't know. I buy it to other person, maybe he could install RC.

Which is the stable firmware for this devices? Could I update it manually?

Best regards.

Which RouterOS version is on each SXT?

grusu

It would be great! Can anyone from mikrotik confirm that?

You can see more clearly here:

http://www.roc-noc.com/images/D/rb750Gr3_l_1200px.png

grusu

Exactly! 4g is best option for most people in Europe to get dual WAN failover. I can get 15gb for as low as 5€ /month.
I really can't understand lack of USB in 750 and 850gx2 (and sfp cage in this).

If you go back to the first post you will see a USB port in the photo.

grusu

http://i.mt.lv/routerboard/files/wAP-series.pdf

grusu

Ps. Running OS 1.14. I tried finding a download area to see if a newer firmware is available, but was unable to find it anywhere on your site.

http://www.mikrotik.com/download
You'll find below, in the SwitchOS section. Be sure to use right version.

grusu

http://routerboard.com/RB260GS You can use 9 - 30V power supply on eth 1 port. And yes, RBGPOE do the work. I suggest you to use power supply with larger allowable voltage value (24 - 30V) so cable losses to be as small as possible. Anyway, 12V power supply included is quite enough to be used with ...

grusu

maara,

Trust me and try what I said. Your PPTP clients connect to 192.168.3.1 which is an internal address of the router.
Traffic does not pass through forward chain. I checked on one of my routers.

grusu

If you want to block this type of traffic I think you have to block on input chain.

grusu

Even mikrotik routers are connecting out silently without telling you. It's not useless to have firewall rules in output chain.

Hi Jarda,
I absolutely agree with you. I have referred strictly to this case.

grusu

My mistake ... easy to fix if someone is following this thread add chain=output protocol=tcp dst-port=25,110,465...and_other+ports... action=add-src-to-address-list comment="add src smtp" add chain=forward protocol=tcp dst-port=25,110,465...and_other+ports... action=add-src-to-address-lis...

grusu

And you can have one rule combined for all add chain=udp protocol=tcp dst-port=25,110,465...and_other+ports... action=add-src-to-address-list comment="add src smtp" "chain=udp" is wrong. You can try to block spammers with rules like these: [color=black][font=monospace, Courier]/...

grusu

With the latest software update 6.36rc28 my RB3011 doesn't see any usb devices. With current version it works fine.

I can confirm. I tried with several USB device and does not work on 6.36rc28. All works fine in 6.35.4

grusu

add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no above rule is not working, when i apply this rule , my router became reobooted automatically. why? For me w...

grusu

Hi,

I'm sure this is captured somewhere, but I can't find it ...

What (maximum) speed of SPF does the RB260GS support?

Thanks!

http://i.mt.lv/routerboard/files/RB260G ... 112240.pdf

grusu

Thank you grusu. You managed to answer before us and answer is completely correct.

Until now I have used a script to resolve the dynamic IP address from where I manage routers. Now it is much easier.
Thank you!

grusu

How often is updated?
My question exactly
That's what I would like to know as well.

I will try to answer the question myself: I think the address is resolved at boot and when DNS TTL reaches 0 and is renew in cache.

grusu

Version 6.36rc16 has been released.
*) firewall - allow to add domain name to address-lists (dynamic entries for resolved addresses will be added to specified list);
Nice!!!

How often is updated?

grusu

On command prompt on your pc run "ipconfig /all" and come back with network settings.

grusu

notToNew - This is not LCD configuration but try to delete init-delay configuration and import afterwards. Does device on which you test import support init-delay and actually has firmware version with init-delay support? Starting with which firmware version supports init-delay? RouterBOOT_changelo...

grusu

On 2011UAS v6.34.3:

[admin@MikroTik-VF] > /system health print
voltage: 1106.5V

Same value in winbox.
Same after reboot.

grusu

Seems to be permanent. I can't reboot just now to see if this solve the problem.

grusu

On 2011UAS v6.34.3:

[admin@MikroTik-VF] > /system health print
voltage: 1106.5V

grusu

Already there: http://mum.mikrotik.com/2016/EU/agenda

Yes, but not all.

grusu

Hi Normis,

If is possible, please put all the presentations online.

Thanks,
Geo

grusu

There are two options. 1. change www server port in ip--> services , from winbox 2. drop from firewall access subnet to ip of mikrotik on port 80 but allow your ip Thanks for your advice. But my issue is I myself is a LAN user at home connected via PPPoE to my network. How can i view the graphs at ...

grusu

Why so? I have the hAP ac at home as my access point. In our country, we get speeds 100-500Mbit at home, so even just for an AP you need power. I also have a few devices with no WiFi, so the extra ports help. 500 Mbps at home?? That's it, I'm moving to Riga, Latvia!! :D We are starting to see speed...

grusu

Try with 30V 2.5A power supply.

grusu

Use layer 7 protocol to find youtube connections and mangle to mark them.
Or use layer 7 name direct in NAT rule.

grusu

Any news about the "Switch" menu in Winbox?
Did not even appear in the latest 6.34rc version.

grusu

Hi rodneal,

6.34rc20 was buggy version.

You will have to use Netinstall to install a good version of routeros.

grusu

On all my wifi Mikrotik router Hw. retries is default set to 7.

grusu

IPsec accelerator support for RB3011 is still being worked on, the HW acceleration is not yet supported for this model. The CPU is much faster than RB2011 even without HW accelerator.

But HW acceleration will be supported in the near future?

grusu

I try to update on RB951G-2HnD test echipament from 6.34rc20 but with no success.
I find "System rebooted because of kernel failure" message on log.
New packages: routeros-mipsbe-6.34rc22.npk and ntp-6.34rc22-mipsbe.npk is on router file system.

grusu

I believe is a driver problem.

grusu

Hi,

I tried to install RouterOS on MB Asrock N3150M on USB Stick with no luck.
Finally I managed to install RouterOS on SSD but can't see any devices connected to USB.
Is there any way that I can see the USB devices?

Thanks,
Geo

grusu

I'm glad I could help you.

grusu

You did the right settings in IP > DNS on Mikrotik router?
Run in terminal in your Mikrotik router "ping url.xx" where url.xx is URL address of your PPTP server to see if is resolved correctly.

grusu

On Mikrotik from where you try to connect, try the in terminal if that URL is solved correctly.

grusu

You can make a script on master router and send remote command like here:

http://wiki.mikrotik.com/wiki/Manual:Sy ... e_commands

grusu

/ip ssh set strong-crypto

grusu

http://demo.mt.lv/webfig/#System:Packag ... or_Updates

grusu

http://forum.mikrotik.com/viewtopic.php?t=96908

grusu

6.29 version seems to be ready:
http://demo.mt.lv/

grusu

Link for capsmanv2: http://www.mikrotik.com/download/share/wireless-cm2-6.29rc18-mipsbe.npk Change "mispbe" with you router architecture. THX alot! there are you get this? any archive or beta page with list of stuffs, or you simply write it with own logic? :) The information I got from an...

grusu

CAPsMAN v1 works fine if you have separate device for CAPsMAN and separate wireless devices, but if you are using for CAPsMAN router with wireless, it won't allow packets between wireless interface and other interfaces on this router. This bug apparently is corrected in v2. There is no exact mentio...

Search found 142 matches