MikroTik

hendry

Instead of EX:AM:PL:E0:00:01@wifi1 roamed to EX:AM:PL:E0:00:01@cap-wifi2, signal strength -81 I want: foobar@wifi1 roamed to foobar@cap-wifi2, signal strength -81 Where foobar would be a comment on EX:AM:PL:E0:00:01 via /ip/dhcp-server/lease Has anyone done something like that? I know you can transf...

hendry

Hi there, I have many several Mikrotik routers and I'm curious how others manage or monitor them. My current plan is to run https://vector.dev/ and set each of my mikrotiks to log to it. [hendry@red] > /system/logging/print Flags: * - DEFAULT Columns: TOPICS, ACTION # TOPICS ACTION 0 * info remote 1...

hendry

❯ grep bridge praze.rsc | grep wifi add bridge=bridge comment=defconf interface=wifi1 afaict wifi1 is added to the bridge. I followed the instructions here: https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-WifiWave2CAPsMAN What am I missing please? Here's my configuration https://gist....

hendry

Uptodate Archlinux user on a Thinkpad t14g3 (21CFCTO1WW) Qualcomm Technologies, Inc QCNFA765 Wireless Network Adapter (rev 01) is getting unusable wireless performance with the new L009UiGS-2HaxD. :/ 467 packets transmitted, 301 received, +16 errors, 35.546% packet loss, time 468921ms rtt min/avg/ma...

hendry

I want to switch to a L009UiGS-2HaxD-IN as my main entry point to my network. But since that is wifiwave2 I need to run "legacy" caps manager on one of my older devices. I learned this via https://forum.mikrotik.com/viewtopic.php?t=200091 I tried disabling caps manager on my main device an...

hendry

Thank you. Whoa, what a painful migration. :/ I'd like to get wifiwave2 caps manager running between the controller on RBD53iG-5HacD2HnD & the L009UiGS-2HaxD-IN as a cap for testing but I get no connection and I don't know why. https://s.natalian.org/2023-10-01/no-connection-to-capsman.png Siden...

hendry

https://s.natalian.org/2023-10-01/no-connection.png Not sure what is going wrong here... Around my property I manage: 1. RB952Ui-5ac2nD 2. RBD52G-5HacD2HnD 3. RBmAPL-2nD 4. RBwAPG-5HacD2HnD-BE 5. Potentially the L009UiGS-2HaxD-IN My goal is to get Caps Manager working first ASAP and then I'll local...

hendry

I upgraded to wifiwave2 on my hap ac3 as you recommend and now wireless doesn't work. I guess because capsman interface has changed. interface/wifiwave2> export # 2023-10-01 14:50:25 by RouterOS 7.11.2 # software id = D555-50G3 # # model = RBD53iG-5HacD2HnD # serial number = E7290D45E8BC /interface ...

hendry

I upgraded my RBD53iG-5HacD2HnD (hAP ac3) to the https://mikrotik.com/product/l009uigs_2haxd_in for faster wifi speeds 5->6 and extra ports. #1 issue, caps-man is missing?! https://s.natalian.org/2023-10-01/caps-man-missing.png When I search around I see https://wiki.mikrotik.com/wiki/Manual:CAPsMAN...

hendry

Tbh I haven't had a problem with a blank admin password, but bureaucrats do. I'm aware that there is ETSI legislation that Mikrotik doesn't (currently) meet https://www.etsi.org/deliver/etsi_ts/103700_103799/103701/01.01.01_60/ts_103701v010101p.pdf https://wiki.mikrotik.com/wiki/Manual:First_time_st...

hendry

With Michael's help, I got there with https://s.natalian.org/2021-08-01/vpn-working.rsc

hendry

Sorry, not sure what you are doing using a separate UK VPN?
One only needs wireguard and not some other VPN on top (too complicated for me, plus dont touch layer 7 with a ten foot pole))

ukvpn is a bridge, just so that I can organise a dhcpd for connected devices on ether{4,5}

hendry

I'm still confused about how to set up the routing for the ukvpn bridge. When I attach a client, it doesn't seem to know to go via wireguardUK! [admin@MikroTik] /ip/route> print Flags: D - DYNAMIC; A - ACTIVE; c - CONNECT, s - STATIC, d - DHCP, y - COPY; + - ECMP Columns: DST-ADDRESS, GATEWAY, DISTA...

hendry

Wireguard I know works, I'm familiar with using `sudo wg-quick up wg0` to use this UK VPN. Now I just want to get Mikrotik to effectively do the same thing with more devices.

hendry

If I can't bridge, how do I route my devices connected on ether4/ether5 that are reliant on dhcpd? Surely I route through to Wireguard via a NAT? The guide https://help.mikrotik.com/docs/display/ROS/WireGuard is incomplete to me because it doesn't show how to connect the VPN to a port. Furthermore i...

hendry

I asked on Reddit but didn't get a good answer: https://www.reddit.com/r/mikrotik/comme ... ific_port/

I don't understand how I connect my bridge network to the Wireguard interface.

Any tips please?

hendry

I've bridged my ISP's modem to my Mikrotik. I noticed from my ISPs network graphs that when I upload at 2AM I get these red fail streaks. https://s.natalian.org/2019-10-20/1571534285_2560x1440.png My ISP tech replied: I don't think your router is prioritising the LCP echo requests and this is why yo...

hendry

Has anyone got a netwatch script that makes the LCD panel point out that the Internet is down when 8.8.8.8 cannot be reached?

https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch

Many thanks!

hendry

I did manage to create a follow up video: https://www.youtube.com/watch?v=xAJlpSbbIhk The suggestions here seem to require introducing some intermediate steps to get a nice session in Wireshark. Which is far from ideal. Same goes in the Wireshark community's comments. https://ask.wireshark.org/quest...

hendry

Spent some of my good Friday trying some things out between two computers : "udp port 37008" is not a good solution since on both MacOS / Arch I get bytes missing in capture file when I follow the stream filter-stream option seems to have no effect macos's `brew cask install wireshark` doe...

hendry

Hi, I'm trying to update a tutorial that uses Mikrotik hardware to capture packets and send to a machine running Wireshark for analysis. The problem I have is noise . Lots of Code: 3 (Port unreachable) messages that don't make any sense. https://s.natalian.org/2019-04-18/code3.png Even filtering on ...

hendry

Trying to summarize here for my sanity. Isn't the real issue is that 127.0.0.1 from which CAPs Manager is run, is not considered from LAN? That would make the defconf firewall work... right? How do other services like dhcpd work, but CAPsMAN doesn't? Btw CAPsMAN is NOT on the WAN side. Heavens knows...

hendry

Ah, so https://s.natalian.org/2018-09-22/uptown.txt had WAN as add comment=defconf interface=ether1-gateway list=WAN Which wasn't on the PPPoE interface "unifi". I've since updated it to. add comment=defconf interface=unifi list=WAN I didn't understand what you said by "add whatever i...

hendry

Hi! I had to disable "defconf: drop all not coming from LAN" otherwise my local CAPs Manager would not work . Am I missing something? I actually don't quite understand the need for this rule. Isn't it best hinged on WAN? /ip firewall filter add action=accept chain=input comment="defco...

hendry

Just added some pictures with a blog to this awesome wireless setup for Malaysians: https://natalian.org/2018/09/22/Multi_A ... _Malaysia/

hendry

Figured it out! I think I had it right before months ago, turns out that I had a dodgy cable. /interface vlan add interface=ether1 name=vlan592 vlan-id=592 /interface bridge port add bridge=bridge-iptv comment=defconf interface=ether1 add bridge=bridge-iptv comment=defconf interface=ether2 add bridg...

hendry

Hi, https://s.natalian.org/2018-09-20/unifitv.png I need to setup a Mikrotik called "TV" (this replaces the Linksys in the diagram above) that has iptv (already untagged 600) and vlan 592 (bridge) incoming on ether1 from this configuration called "Uptown" . On ether2 (port 2, not...

hendry

Hi guys from Malaysia, I've made a video about the disabled by default on CAPsMAN datapath option client-to-client-forwarding . It needs to be enabled for devices like a Sonos to work on your network. https://www.youtube.com/watch?v=YVyj7N6O1kk I wish this wasn't the default, but I am told it's the ...

hendry

Hi there, I'm having a poor Facetime connection with my parents. I tried Torching the wireless interface the remote iPad was on, but I couldn't see much except UDP traffic coming and going and a connection to a akamai 195.59.189.189 IP. https://youtu.be/UP1k4O_lLQA Is there a way to plot the connect...

hendry

I have a spare Mikrotik that I quickly want to use temporarily for providing a guest password free wifi access. However I don't want it to be able to access my LAN's 192.168.1.x range. First off I'm confused by Fast track and Passthrough. What I currently have here doesn't work, since everything is ...

hendry

Of course, this does not preclude a better manual and maybe some wizard button to implement a default form of WMM similar to what you find in other equipment. Fine-tuning could be done by those who really care. For MikroTik, it would likely consist of: /interface wireless set [ find default-name=wl...

hendry

Since Apple recommends WMM support as the default: https://support.apple.com/en-sg/HT202068 I am curious as to why it doesn't appear Mikrotik have followed their decision for the default Home AP Dual quickset? The documentation that results from a "wmm mikrotik" search is https://wiki.mikr...

hendry

I have a Mikrotik with the default Home AP dual setup. I just got the l2tp-client going on an IP and I want to route everything through it. https://s.natalian.org/2017-08-31/l2tp.txt I expected "Add Default Route" in the l2tp-client to do it, but it just stops my internet working until I r...

hendry

Drop invalid rule is necessary if you use NAT on your router. It is possible that for different reasons packet can leave router with wrong (LAN) IP address. This firewall rule will drop such packets.

Oh, I don't use NAT, so I guess I'm fine?

hendry

Hi, I setup a Firewall https://www.reddit.com/r/mikrotik/comments/6rq85t/aa_hap_lite_configuration_for_home/ like so add action=accept chain=forward comment="LAN traffic can go anywhere" in-interface=aa add action=accept chain=forward comment="Established traffic" connection-stat...

hendry

What I have ended up doing, is setting up all three using the CAP mode quickset with identities "one", "two", and "three". I liked this mode since I don't want NAT. I don't want to worry about assigning IP addresses since I want to use the existing dhcpd on my network. ...

hendry

Hi there, I have 3 new hAP AC lites that I am hoping to daisy chain in my home network in order to extend the wireless network around a house. I've been following https://www.youtube.com/watch?v=1MWWsz-8hV4 & I've managed to navigate Mikrotik's UI to register all three CAPs (including the one th...

hendry

Thanks for taking my "critique" or rather comments on the chin! And push some JSON to 192.168.88.1 when you want to write? "In an ideal world", sure. To interact with the ideal Web API (which doesn't exist in the Mikrotik world. WTH is jsproxy anyway?!), a standard GET or POST pa...

hendry

"It scares me because it's big" is a nice new line of reasoning, even though it's a more subjective one. Is it a really a new line of reasoning to choose less code? ;) I also despise OO code. I must be unique! Not sure why Mikrotik have made charset conversion an issue. I assume they don'...

hendry

and so I must ask what made you choose the Denis Basta client?

Usually PEAR PHP packages scare me. And yours seems sadly no different.

12980 SLOC versus 540 SLOC. I choose less code. http://ix.io/mVS

hendry

RE fasttrack & connection sharing. Is that automatically setup or do I need tweak that typically?

Internet comes for a VLAN/PPPoE "Unifi" connection btw in Malaysia btw.

hendry

Hah, I thought my old Mikrotik would be too old / outdated. I guess mine would suffice, but alas it's in use!

Was wondering if the new hAP lite would suffice: http://routerboard.com/RB941-2nD

Cheers,

hendry

Thanks. I created the API & made a video about it:
https://www.youtube.com/watch?v=HaMNA5pUHiE

hendry

Hi there,

Looking for a recommendation for hardware for running a small cafe/co-working space in Malaysia.

The internet it connects to maxes out at 50Mbps down and 10Mbps up. The capacity of the place is about 50 people. That's mostly standing.

Thank you !

hendry

Hi there, Friend of mine runs a cafe. I'm trying to improve the situation here since the Asus is unstable. So I trying to sell the Mikrotik. The one problem I am hoping the Mikrotik can solve, is to provide a Restful API to query number of active DHCP leases. I.e. show number of users in the cafe at...

hendry

Can I Mikrotik device with a USB port be reconfigured to supply data (&power) to devices like the https://www.raspberrypi.org/blog/raspberry-pi-zero/ ?

hendry

I can't Winbox it since I don't have Windows. I hope Mikrotik improve their Web interface!

hendry

I don't use Windows. How is it more practical? I thought Webfig mirrored its functionality. Why shouldn't it?

hendry

Thanks. With the help of Mikrotik support I FINALLY have it working! http://ix.io/mlR :D WRONG: add interface=bridge-local l2mtu=1594 name=vlan592-eth5 vlan-id=592 add bridge=bridge-iptv interface=vlan592-eth5 RIGHT: add interface=ether5-local l2mtu=1594 name=vlan592-eth5 vlan-id=592 add bridge=brid...

hendry

I am creating VLAN592 not to send PPPoE, but to share the internet that the PPPoE internet provides over "bridge-local" IIUC with the DHCP service 192.168.88.x. Sorry there was a long delay replying since I going back and forth with Mikrotik support who just suggested a simple port 5 bridg...

hendry

Hi there, I'm trying to replicate the setup of http://wingloon.com/2012/01/22/how-to-setup-my-unifi-using-mikrotik-rb751u-2hnd-and-linksys-wrt54gs-v4-dd-wrt/ on my 951Ui-2HnD. But I didn't quite understand his instructions. I already know I have a working IPTV setup on port 5 with VLAN id 600. So I ...

hendry

But following station mode from http://wiki.mikrotik.com/wiki/Manual:Wireless_AP_Client doesn't work (routing) either, though with this method after Disconnecting... I'm at least able to join my network. What should the IPs look for the IP/Addresses part? I did find another tutorial: http://wiki.mik...

hendry

Hi there, I'm looking to bridge my Internet connected non-Mikrotik Wireless AP at 192.168.1.254 with my Mikrotik, wirelessly. I'm not allowed by my landlord to run cables to the router. I'm doing this so I can attach a couple of Raspberry PIs to the the Mikrotik so they can get Internet connectivity...

hendry

To get this working, do I have to install this scary script?! http://wiki.mikrotik.com/wiki/Setting_s ... DHCP_lease

Or is there another cleaner approach I'm missing?

hendry

ip firewall nat add chain=dstnat dst-address=122.7.219.77 action=netmap to-address=192.168.88.133

Perfect!!

That works. But what happens if my WAN IP changes? 122.7.219.77 could change to 122.7.219.78 (this IIUC is my vlan1 address). Depends on my ISP's whim.

hendry

IF you will connect the device on your WAN. Has WAN configured a DHCP-server? Not it's bridge-local IIUC http://s.natalian.org/2014-08-26/1409064532_1364x748.png add ports the interface that now connect to the WAN and another free ethernet interface. Connect the device to this ethernet port. I can ...

hendry

Hi there, I would like a local device to have the WAN IP, but still have the other devices behind the router on a NAT. Is that possible? Current 122.7.219.77 -> 192.168.88.161 & 192.168.88.et al Now I want 192.168.88.161 to basically be 122.7.219.77, but still have 192.168.88.* work. Thanks!

hendry

The default firewall is dropping any new connection from WAN (default WAN is ether1).

Oh, are you saying perhaps that my connection to the fiber modem is off the wrong port maybe? Hmmm.

IIUC my internet connection goes out upon ether1-gateway which looks the same as vlan1.

hendry

Ah... that makes sense. I need to firewall these ports ASAP. x220:~$ sudo nmap 121.7.219.77 Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-17 16:54 SGT Nmap scan report for bb121-7-219-77.singnet.com.sg (121.7.219.77) Host is up (0.015s latency). Not shown: 996 closed ports PORT STATE SERVICE 22/...

hendry

Just wanted to mention I think the wireless has improved with 6.9 # feb/06/2014 23:05:56 by RouterOS 6.9 # software id = RHMG-22TY # /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-below disabled=no distance=indoors frequency=2447 l2mtu=\ 2290 mode=ap-br...

hendry

I tried to file a bug about this DNS issue but the bug tracker captcha does not work: http://s.natalian.org/2014-01-28/1390875761_1364x748.png [admin@MikroTik] /ip dns> print servers: 8.8.4.4,8.8.8.8 dynamic-servers: 165.21.83.88,165.21.100.88 allow-remote-requests: yes max-udp-packet-size: 4096 que...

hendry

you could enable snmp and use a third party site for monitoring ex http://www.odmon.com it gives you a more granular graphic Hourly (1 Minute Average), Daily (5 Minute Average), Weekly (30 Minute Average), Monthly (2 Hour Average) and Yearly (1 Day Average) i use this site because i don't want to w...

hendry

I need it more granular than interfaces. Preferably by MAC/IP address.

Thanks!

hendry

Would prefer this information as a Web page.

PDF takes forever to load from Singapore.

hendry

I'm not that happy about my wireless speeds either with my 951Ui-2HnD: interface wireless export compact # jan/27/2014 10:59:50 by RouterOS 6.7 # software id = RHMG-22TY # /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above disabled=no distance=indoors...

hendry

I've discovered if I change the queue type from default-small (the default which doesn't work) to default, it works. Terrible UI/UX guys.

hendry

Ah... thanks!

My initial screenshot was from the Quick Set bit. I'm surprised you still use the Windows client. WebFig is great.

Is there any tricks to force up the speed for Wireless-N? It seems irritatingly variable.

hendry

http://s.natalian.org/2014-01-22/webfig-6.7-mikrotik.png How do I see the speed at which wireless clients are connected? In Mbit for example? What is the graph table below my wifi clients? How can I make use of it? I'm aiming to see at what speeds my Wireless-N devices are connected at, and I'm kee...

hendry

I'm keen to monitor/graph bandwidth on my network. I was told to use Queues. First problem is that I can't find "queues" in the CLI, only in WebFig. I think I correctly setup a queue to monitor my laptop. http://s.natalian.org/2014-01-22/1390361424_1364x748.png (Ideally I would monitor ALL...

hendry

Out of interest, how do you change the name from the CLI?

hendry

My router has DNS. It seems that it won't accept a domain name as an argument. Bit crap.

hendry

Thank you. UI could be better here.

hendry

Has WebFig been designed to be hard to use? Chrome or Firefox seem unable to cache the password. Why?

Is there a bug list?

hendry

In WebFig v.6.7 I expected to be able to set the wifi password.

I couldn't find the dialog. Am I missing something? I know it's in "Quick set"... but wtf?

hendry

I don't understand why WebFig calls this SNTP IIUC.

Also why can't I use 0.asia.pool.ntp.org instead of IPs? Or am I missing something?

hendry

When I do a mtr I noticed my MikroTik is called router.

Can I call it something different other than router?

Search found 76 matches