Community discussions

MikroTik App

Search found 462 matches

  • 1
  • 2
by troffasky
Mon Jul 01, 2024 4:50 pm
Forum: Wireless Networking
Topic: Wifi-qcom / WiFi-qcom-ac inconsistent country code regulations for United Kingdom
Replies: 17
Views: 2356

Re: Wifi-qcom / WiFi-qcom-ac inconsistent country code regulations for United Kingdom

You can install OpenWRT on many Routerboards, so definitely worth trying if you think it's "a software issue".
by troffasky
Mon Jul 01, 2024 4:42 pm
Forum: Wireless Networking
Topic: Connected client count OID in ROS7
Replies: 1
Views: 930

Re: Connected client count OID in ROS7

Ended up creating a Zabbix item of type "ssh.run" with an "Executed script" content of:
/interface/wifi/registration-table/print count-only
Only gives me a total rather than a per-radio breakdown, but it's good enough for me.
by troffasky
Sun Jun 23, 2024 10:50 pm
Forum: Wireless Networking
Topic: CAP ax Gen 6 mediocre performance
Replies: 45
Views: 5808

Re: CAP ax Gen 6 mediocre performance

This conflicts a bit with a lot of postings I have read (I think from Mikrotek) that the radiation pattern inside is basically spherical
If true, it would be an "isotropic radiator"
https://en.wikipedia.org/wiki/Isotropic_radiator
So I think we can conclude that it isn't.
by troffasky
Sun Jun 23, 2024 9:35 pm
Forum: Wireless Networking
Topic: Connected client count OID in ROS7
Replies: 1
Views: 930

Connected client count OID in ROS7

Three APs, two running ROS6, one running ROS7: $ snmpwalk -v2c -c public miaap .1.3.6.1.4.1.14988.1.1.1.3.1.6 MIKROTIK-MIB::mtxrWlApClientCount = No Such Object available on this agent at this OID $ snmpwalk -v2c -c public kitchen .1.3.6.1.4.1.14988.1.1.1.3.1.6 MIKROTIK-MIB::mtxrWlApClientCount.6 = ...
by troffasky
Sun May 19, 2024 5:43 pm
Forum: General
Topic: Configuration Reset - CAPS Mode
Replies: 4
Views: 16346

Re: Configuration Reset - CAPS Mode

So what is the actual answer? 5y later, this post is first hit on Google for 'system reset "caps mode"', and I'm none the wiser :D
by troffasky
Thu May 16, 2024 12:30 am
Forum: Announcements
Topic: Newsletter #118 | May 2024
Replies: 30
Views: 39002

Re: Newsletter #118 | May 2024

s/allow/require/
by troffasky
Mon Feb 05, 2024 11:29 pm
Forum: Announcements
Topic: Newsletter #116 | January 2024
Replies: 106
Views: 37312

Re: Newsletter #116 | January 2024

The best we can say about these devices being released today with too little storage and RAM is that it will force Mikrotik to optimise the software, and then everybody will benefit.
by troffasky
Tue Jan 23, 2024 2:18 pm
Forum: Wireless Networking
Topic: Point-to-Multipoint with 60G/5G failover
Replies: 14
Views: 5144

Re: Point-to-Multipoint with 60G/5G failover

Ended up switching off the 60G radio. Simply couldn't find a firmware version that was stable. Did you try RouterOS v7.11 or higher? According to the changelog there were some changes in v7.11 to improve system stability for these devices: What's new in 7.11 (2023-Aug-15 09:33): *) w60g - improved ...
by troffasky
Mon Jan 22, 2024 11:20 pm
Forum: Wireless Networking
Topic: Point-to-Multipoint with 60G/5G failover
Replies: 14
Views: 5144

Re: Point-to-Multipoint with 60G/5G failover

Ended up switching off the 60G radio. Simply couldn't find a firmware version that was stable.
by troffasky
Sat Sep 09, 2023 11:00 am
Forum: Announcements
Topic: Newsletter #114 | September 2023
Replies: 79
Views: 19703

Re: Newsletter #114 | September 2023

Well took forever to see this Newsletter just to release an LTE router and 8 port switch. From May to September. That hopefully means they are focusing on bugfixing the existing products. I can tell you now that if they put out a newsletter containing three different 6G routers with PoE-over-fibre,...
by troffasky
Thu Aug 03, 2023 12:34 pm
Forum: Announcements
Topic: MikroTik Devices Controller
Replies: 375
Views: 261255

Re: MikroTik Devices Controller

Would be great to see some progress from Mikrotik on this. Maybe the Back To Home thing is the first element of the Devices Controller, who knows.... It could even be a source of revenue as well, eg storing logging/traffic information for reporting on - you want more than 7d of data, you have to pay...
by troffasky
Thu Jul 20, 2023 7:06 pm
Forum: Announcements
Topic: MikroTik Devices Controller
Replies: 375
Views: 261255

Re: MikroTik Devices Controller

Seems like he has done more than Mikrotik have for a cloud RouterOS controller...even if it turns out to be a botnet controller or a data harvesting exercise :D
by troffasky
Fri Jun 23, 2023 6:06 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 116079

Re: v7.11beta [testing] is released!

Reboots on the AP, ie, did not improve stability.
by troffasky
Fri Jun 23, 2023 4:12 pm
Forum: Announcements
Topic: v7.11beta [testing] is released!
Replies: 373
Views: 116079

Re: v7.11beta [testing] is released!

*) w60g - improved stability for Cube 60Pro ac and CubeSA 60Pro ac devices;
The 7.11alpha I was given by support did not fix this one for me.
by troffasky
Mon Jun 19, 2023 3:13 pm
Forum: RouterOS beta
Topic: Zerotier to Mipsbe??
Replies: 109
Views: 39645

Re: Zerotier to Mipsbe??

I keep hoping to be surpised in release notes on MIPS support for ZeroTier – just be good to know if that hope is misplaced from Mikrotik.
Yeah, this! I search every new release thread posted for mentions of ZT. We live in hope.
by troffasky
Thu Jun 08, 2023 8:02 pm
Forum: Announcements
Topic: v7.10rc is released!
Replies: 183
Views: 58631

Re: v7.10rc is released!

*) w60g - improved interface stability for PTMP setups;
Not helping me, unfortunately. autosupout.rif sent to support....
by troffasky
Thu Jun 08, 2023 1:02 pm
Forum: Wireless Networking
Topic: Point-to-Multipoint with 60G/5G failover
Replies: 14
Views: 5144

Re: Point-to-Multipoint with 60G/5G failover

Seemed OK on the test bench, although we know test bench != the real world.
Yeah, about that.....now it's installed my CubeSA 60Pro ac has rebooted 7 times so far today, max uptime is 33 minutes. It seems like weak stations will cause repeated reboots. Going to try 7.10rc!
by troffasky
Fri Jun 02, 2023 10:54 pm
Forum: Announcements
Topic: EDITED Forum THEME / SKIN change
Replies: 92
Views: 14157

Re: EDITED Forum THEME / SKIN change

Thanks for putting the theme back, sanity is restored.
by troffasky
Wed May 31, 2023 2:29 pm
Forum: Announcements
Topic: EDITED Forum THEME / SKIN change
Replies: 92
Views: 14157

Re: EDITED Forum THEME / SKIN change

OK that's odd...from the "Your Posts" search, the icon column is not clickable but if I browse to another section, eg Announcements then every thread is clickable in the icons column with latest#latest on the end of the URL so it jumps to the first new post in the thread.
by troffasky
Sat May 27, 2023 12:35 am
Forum: Announcements
Topic: EDITED Forum THEME / SKIN change
Replies: 92
Views: 14157

Re: EDITED Forum THEME / SKIN change

For me link to last post work by middle click the posts icon.
Posts icon, I get it now. i in a circle most of the time, sometimes it's a flame. So it's still there, phew.
I have this site zoomed to 30% [yes, 30%, not 130%] to try and fit a bit more on the screen.
by troffasky
Wed May 24, 2023 7:27 pm
Forum: Announcements
Topic: EDITED Forum THEME / SKIN change
Replies: 92
Views: 14157

Re: EDITED Forum THEME / SKIN change

I hate this space-wasting theme. It also seems like jump to last-read-post doesn't work any more? Used to be a little icon in the link that would take you there, now I have to scroll through 200 posts to find last one.
by troffasky
Mon May 15, 2023 3:13 pm
Forum: Announcements
Topic: Newsletter #113 | May 2023
Replies: 103
Views: 46558

Re: Newsletter #113 | May 2023

When I saw in the newsletter that this was single band, I *knew* that was what would attract the most comment in this thread :-) 5GHz does seem like an omission to me, but despite all the comment, I do wonder what practical difference it would make to the use of the product - it seems to me at this ...
by troffasky
Fri Apr 07, 2023 12:17 pm
Forum: Wireless Networking
Topic: MikroTik hAP ax3 poor WiFi performance
Replies: 258
Views: 56754

Re: MikroTik hAP ax3 poor WiFi performance

iperf3 tests using TCP are quite a bit lower then when using UDP (albeit some minor packet loss can be observed, which does usually not happen with TCP). iperf3 does not report [or, possibly even know about] packet loss in TCP mode. It will make itself known in the retransmits value for that segmen...
by troffasky
Thu Apr 06, 2023 1:08 pm
Forum: Announcements
Topic: Newsletter #112 | April 2023
Replies: 66
Views: 14182

Re: Newsletter #112 | April 2023

@normis perhaps a quick documentation page on how to do mass deployment of blank devices after this change comes in, would be helpful.
by troffasky
Thu Apr 06, 2023 11:41 am
Forum: Wireless Networking
Topic: Point-to-Multipoint with 60G/5G failover
Replies: 14
Views: 5144

Re: Point-to-Multipoint with 60G/5G failover

Thanks Gu457v, that's basically where I got to, pretty much because I couldn't work out what to do next. Sounds like it's going to be fine. Seemed OK on the test bench, although we know test bench != the real world.
by troffasky
Wed Apr 05, 2023 2:43 pm
Forum: Wireless Networking
Topic: Point-to-Multipoint with 60G/5G failover
Replies: 14
Views: 5144

Point-to-Multipoint with 60G/5G failover

Reading this: https://help.mikrotik.com/docs/display/ROS/Fail-over+PtP+CLIexample It suggests to add primary=wlan60-station-1 slaves=wlan60-station-1,wlan1 to a bond interface. What should I do when there is more than one station [ie, PtMP]? Surely can't have wlan60-station1 as primary in the bond i...
by troffasky
Fri Mar 24, 2023 8:17 pm
Forum: RouterOS beta
Topic: Zerotier to Mipsbe??
Replies: 109
Views: 39645

Re: Zerotier to Mipsbe??

Any ideas @normis ? This one seems like a no-brainer. Teltonika manage to have Zerotier on all their architectures.
by troffasky
Fri Mar 24, 2023 8:12 pm
Forum: RouterOS beta
Topic: [FEATURE REQUEST] Direct access to ZeroTier local.conf
Replies: 4
Views: 3367

Re: [FEATURE REQUEST] Direct access to ZeroTier local.conf

I didn't specifically mean Winbox here, I meant the ROS CLI as well. Adding a ROS router to RANCID so I get config diffs when somebody makes a change is invaluable.
by troffasky
Fri Mar 24, 2023 7:14 pm
Forum: Announcements
Topic: v7.9beta [testing] is released!
Replies: 118
Views: 30149

Re: v7.9beta [testing] is released!

EDIT: It would be very practical if one could have access directly to local.conf using the cli. In this way, it would be possible to configure all possible settings such as TrustedPath, Multipath, BondingProfiles, etc without having to add all bells and whistles to Winbox. I'll create a feature req...
by troffasky
Wed Feb 01, 2023 3:07 pm
Forum: Announcements
Topic: v7.8beta [testing] is released!
Replies: 307
Views: 83798

Re: v7.8beta [testing] is released!

While I agree with many of the flaws, point #3 is generally referred to as SDWAN and is implemented in RoS using ZeroTier. Sure, so long as you're using ARM. Three times now we have deployed Zerotier for a customer and *not* used CHR for the soft-router element because it doesn't support Zerotier.
by troffasky
Wed Feb 01, 2023 3:05 pm
Forum: Announcements
Topic: v7.8beta [testing] is released!
Replies: 307
Views: 83798

Re: v7.8beta [testing] is released!


MT will never play any role in any SDWAN unless the boxes can understand & detect (many) application and steer accordingly.
Ask three network engineers what "SDWAN" is and you will get at least three different answers.
by troffasky
Fri Dec 23, 2022 5:02 pm
Forum: Announcements
Topic: Newsletter 109
Replies: 13
Views: 24535

Re: Newsletter 109

Page 5, it's spelt "MikroTik" not "MirkoTik" :-) Yes, yes, I know you're quoting STH, but still....
by troffasky
Wed Jul 13, 2022 12:31 pm
Forum: Announcements
Topic: Newsletter 106
Replies: 29
Views: 19334

Re: Newsletter 106

What are those "loops" on either end of the RB5009?
by troffasky
Sun Jun 05, 2022 12:28 pm
Forum: Announcements
Topic: MikroTik Devices Controller
Replies: 375
Views: 261255

Re: MikroTik Devices Controller


-It should definitely have a mode where the router reaches out to the controller, like how cnMaestro and UISP work. It allows devices behind NAT to be monitored and maintained without punching holes in a firewall.
Yes please, make sure endpoints work from behind CGN.
by troffasky
Fri Apr 08, 2022 11:43 pm
Forum: Announcements
Topic: NEWSLETTER 105
Replies: 56
Views: 48160

Re: NEWSLETTER 105

New logo looks fine to me, looks like an arrow pointing up and to the right.
by troffasky
Thu Feb 24, 2022 7:16 pm
Forum: Announcements
Topic: Newsletter 104
Replies: 54
Views: 27593

Re: Newsletter 104

In Newsletter say (write)"In our tests,the Cube 60Pro ac easily maintained a reliable connection over 2.4 km." Over means OVER 2,4 km. and not UNDER. Well it probably does mean "under", actually. I would be very surprised if it worked at 2.4km but not at 1.0km [although I wouldn...
by troffasky
Wed Feb 23, 2022 7:22 pm
Forum: Announcements
Topic: Newsletter 104
Replies: 54
Views: 27593

Re: Newsletter 104

Seems unlikely, they stopped making Tile-GX 72 core in October 2021 with a suggested replacement part of "N/A". So price would be going up not down.
by troffasky
Wed Feb 23, 2022 7:03 pm
Forum: Announcements
Topic: Newsletter 104
Replies: 54
Views: 27593

Re: Newsletter 104

Is the Cube 60Pro ac whether they would work at 7 km ?
If it worked at 7km then they wouldn't say 1km, would they? Or "as far as 2.4km" as it says in one of pictures...
by troffasky
Sun Feb 13, 2022 12:36 am
Forum: Announcements
Topic: v7.1.2 is released!
Replies: 127
Views: 42959

Re: v7.1.2 is released! => CCR1009 stuck in boot loop

Well of course this happens when I am away in holidays.
You need to add to your "going away on holiday" checklist, right after "cancel the milk", an entry saying "Disable ****ing script that updates my router without me there to test it".
by troffasky
Sat Feb 12, 2022 12:33 am
Forum: Wireless Networking
Topic: Horribly slow Wi-Fi on Mikrotik network
Replies: 134
Views: 28829

Re: Horribly slow Wi-Fi on Mikrotik network

You didn't respond to gotsprings's comment about local forwarding. That could account for lower performance with CAPsMAN.
by troffasky
Sat Jun 26, 2021 12:05 pm
Forum: General
Topic: Feature request for v7.x
Replies: 296
Views: 111560

Re: Feature request for v7.x

RANCID is a heap of scripts, with different collector plugins for different target platforms. It logs in on a schedule, executes whatever the native equivalent of "/export compact", "show run", etc, is and stores the output in a version control backend. It can email you a diff of...
by troffasky
Sat Jun 26, 2021 11:54 am
Forum: Announcements
Topic: Newsletter June 2021 (#100)
Replies: 54
Views: 37038

Re: Newsletter June 2021 (#100)

Not sure why you need an extra layer for authentication and encapsulation when you control the last mile? It's not just WISP networks, but in networks where the operator sells wholesale access, using PPP they can hand the login off to the relevant service provider's AAA server. I am sure you could ...
by troffasky
Thu Apr 29, 2021 11:53 pm
Forum: General
Topic: ICMP Packet loss when WAN is saturated
Replies: 5
Views: 1737

Re: ICMP Packet loss when WAN is saturated

Needing to know the speed is not some inherent trait of PPPoE, but the router can't really prioritise anything if it doesn't know how much bandwidth is available.

Try disabling discovery on the PPPoE interface:
viewtopic.php?p=767139#p767139
by troffasky
Thu Apr 29, 2021 3:10 pm
Forum: General
Topic: ICMP Packet loss when WAN is saturated
Replies: 5
Views: 1737

Re: ICMP Packet loss when WAN is saturated

Does the packet loss go away if you go back to your previous router? Are you sure the packet loss is at your end and not happening upstream at your ISP?
by troffasky
Thu Apr 29, 2021 3:08 pm
Forum: General
Topic: [SOLVED] Forum unreachable over IPv6
Replies: 3
Views: 1014

Re: [SOLVED] Forum unreachable over IPv6

Yep, working.
by troffasky
Thu Apr 29, 2021 11:53 am
Forum: General
Topic: Alternative Reset Option of LHG 60G Antenna
Replies: 1
Views: 592

Re: Alternative Reset Option of LHG 60G Antenna

Short the traces where the reset button was.
by troffasky
Thu Apr 29, 2021 11:43 am
Forum: General
Topic: [SOLVED] Forum unreachable over IPv6
Replies: 3
Views: 1014

[SOLVED] Forum unreachable over IPv6

forum.mikrotik.com is timing out on IPv6. Works fine on IPv4. $ wget 159.148.147.239 --2021-04-29 09:37:52-- http://159.148.147.239/ Connecting to 159.148.147.239:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://forum.mikrotik.com/ [following] --2021-0...
by troffasky
Fri Feb 12, 2021 12:30 am
Forum: General
Topic: MikroTik CRS309-1G-8S+IN PoE Input not Working
Replies: 2
Views: 1045

Re: MikroTik CRS309-1G-8S+IN PoE Input not Working

I would take what the model-specific documentation says https://mikrotik.com/product/crs309_1g_8s_in over a more general wiki page. Specs say it's 802.3af/at in, so I would expect it to work. However, that page also says max power is 17W "without attachments" and max power for 802.3af is 1...
by troffasky
Sun Feb 07, 2021 10:00 pm
Forum: General
Topic: Which mAP alternative with 5GHz and 802.3 af capabilities ?
Replies: 6
Views: 1946

Re: Which mAP alternative with 5GHz and 802.3 af capabilities ?

It is quite simple implementation (only checks for single inter-wire resistence
Doesn't sound very "passive" to me :-D

Thanks for the explanation.
by troffasky
Sat Feb 06, 2021 3:41 pm
Forum: General
Topic: Which mAP alternative with 5GHz and 802.3 af capabilities ?
Replies: 6
Views: 1946

Re: Which mAP alternative with 5GHz and 802.3 af capabilities ?

With a no-name 802.3af injector [48v] that had previously been powering the handset directly. I think the cAP AC came with a 24v PSU [can't find it at the moment] so it's unlikely that would have powered the handset.
by troffasky
Fri Feb 05, 2021 7:40 pm
Forum: RouterBOARD hardware
Topic: PowerBox Pro not powering with POE in
Replies: 4
Views: 3209

Re: PowerBox Pro not powering with POE in

Then you would need to revise the brochure as it is clearly stated:
"It also supports passive or standard 802.3at/af PoE input/output."
I guess they never got around to fixing the brochure, https://i.mt.lv/cdn/product_files/PowerBox_200318.pdf still says this today.
by troffasky
Thu Feb 04, 2021 9:52 pm
Forum: General
Topic: Which mAP alternative with 5GHz and 802.3 af capabilities ?
Replies: 6
Views: 1946

Re: Which mAP alternative with 5GHz and 802.3 af capabilities ?

I powered a cAP AC with a PoE injector, then connected a Mitel handset to the POE-out port of the cAP AC and it worked fine. I wasn't necessarily expecting the phone to power up as the cAP AC spec says it's passive PoE out.
by troffasky
Wed Feb 03, 2021 11:41 pm
Forum: General
Topic: X86 and RouterOS (to overcome speed problem)
Replies: 6
Views: 2292

Re: X86 and RouterOS (to overcome speed problem)

What is important is the size of the device (has to be be as small as possible) and establish multiple connections to Location A and receive as close as possible from it, the 200Mbits . Look at the "IPsec test results" section of any prospective router at mikrotik.com/routerboard. hEX S g...
by troffasky
Tue Feb 02, 2021 12:06 pm
Forum: General
Topic: TalkTalk FTTP Configuration Help!
Replies: 14
Views: 6348

Re: TalkTalk FTTP Configuration Help!

RB4011 will be fine. It may even outperform a slower-clocked 1st gen CCR for things that are single-threaded.
by troffasky
Fri Jan 08, 2021 12:20 am
Forum: General
Topic: TalkTalk FTTP Configuration Help!
Replies: 14
Views: 6348

Re: TalkTalk FTTP Configuration Help!

IME with Talktalk VDSL they accept anything at all as the username/password.
by troffasky
Thu Dec 24, 2020 2:26 pm
Forum: General
Topic: Difference between Winbox and Terminal
Replies: 5
Views: 1029

Re: Difference between Winbox and Terminal

CLI has been changed a lot in ROS7, did they fix it there?
by troffasky
Fri Dec 11, 2020 3:40 pm
Forum: Wireless Networking
Topic: Nray faulty or not
Replies: 6
Views: 2072

Re: Nray faulty or not

Ok is that another fault with not seeing any down times too on the master unit, on the slave i get down time. I just checked a link [not nRay, 60GAPx3 + CubeLite 60 running 6.45.9], AP has 12 link downs, station has 17. So showing 0 sounds wrong to me. Can't help you with the alignment question unf...
by troffasky
Wed Dec 09, 2020 7:29 pm
Forum: Wireless Networking
Topic: Nray faulty or not
Replies: 6
Views: 2072

Re: Nray faulty or not

2.3G PHY rate and no link downs? Sounds fairly stable to me. Do you have an actual connectivity problem? How does the same view look in Winbox, rather than via the web interface?
by troffasky
Thu Dec 03, 2020 3:31 pm
Forum: Wireless Networking
Topic: Increase performance of home WiFi
Replies: 18
Views: 19076

Re: Increase performance of home WiFi

Start by testing internally with a tool like iperf, rather than to the internet.
by troffasky
Wed Dec 02, 2020 11:36 pm
Forum: Wireless Networking
Topic: Sector Info changing rapidly [SOLVED]
Replies: 2
Views: 1467

Re: Sector Info changing rapidly [SOLVED]

Looks like this is something that happens for 5-10 minutes following a reboot. Rebooted this 5 times now and the numbers fluctuate for a bit, then settle down. Shortly after reboot: https://i.imgur.com/qJlEin9.png A few minutes later: https://i.imgur.com/4MgR1JL.png This must just be normal for 60G ...
by troffasky
Wed Dec 02, 2020 9:56 pm
Forum: Wireless Networking
Topic: Sector Info changing rapidly [SOLVED]
Replies: 2
Views: 1467

Sector Info changing rapidly [SOLVED]

wAP 60Gx3 AP, Cube Lite60 station. RouterOS 6.45.9. I can see that the tx-sector and tx-sector-info values are fluctuating rapidly. Does this indicate physical instability of the unit(s)? connected: yes frequency: 58320 remote-address: 48:8F:5A:88:97:6C tx-mcs: 1 tx-phy-rate: 385.0Mbps signal: 20 rs...
by troffasky
Wed Sep 23, 2020 6:44 pm
Forum: RouterOS beta
Topic: SDWAN using Zerotier [SOLVED]
Replies: 54
Views: 27736

Re: SDWAN using Zerotier

Yes, please add support for Zerotier. I love Mikrotiks, but they are seriously lacking in some kind of SDWAN solution. Zerotier would be a very cheap and easy way to set this up. How do you know it would be cheap? I don't see how they could comply with this license if they included it in ROS: https...
by troffasky
Wed Sep 23, 2020 6:07 pm
Forum: Announcements
Topic: Newsletter 97 (September 2020)
Replies: 87
Views: 40649

Re: Newsletter 97 (September 2020)

I have requested a climbing wall for our office. Might be a while until it's approved, however...
by troffasky
Sat Jun 27, 2020 1:30 pm
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM MPLS Support
Replies: 62
Views: 29949

Re: CRS317-1G-16S+RM MPLS Support

There will be wirespeed L2 switching on the CRS317. There will be no ASIC features, wirespeed L3 routing or MPLS switching. Some features may be added via software updates. Under-promise, over-deliver. Wirespeed L3 routing is "some feature", alright!: https://wiki.mikrotik.com/wiki/Manual...
by troffasky
Mon Jun 15, 2020 6:27 pm
Forum: Wireless Networking
Topic: Help changing wireless wire default ip address
Replies: 2
Views: 1489

Re: Help changing wireless wire default ip address

He means AP and station. To the OP: yes, you can change the IP there. They don't need their IPs for the bridging to work. I suggest you try out Winbox for management too. If you make a booboo with changing the IP you will still be able to get on to it with L2 management, and L2 management is not som...
by troffasky
Sun Jun 07, 2020 1:00 pm
Forum: RouterOS beta
Topic: UI/UX On WinBox
Replies: 23
Views: 9725

Re: UI/UX On WinBox

By all means Mikrotik, make a more beginner-friendly UI if you want, but do it to the web interface and leave Winbox well alone!
by troffasky
Wed May 13, 2020 11:09 pm
Forum: RouterOS beta
Topic: Future request - Configuration propagation similar to CAPsMAN
Replies: 6
Views: 3523

Re: Future request - Configuration propagation similar to CAPsMAN

It's a sensible idea and CAPsMAN seems like a logical enough place to start. The CAPs already get their wireless config from the CAPsMAN so why not extend it to other aspects of of the CAP's configuration?
by troffasky
Fri Dec 20, 2019 12:41 am
Forum: General
Topic: This Mikrotik forum is not 'friendly' toward Load Balancing
Replies: 23
Views: 5056

Re: This Mikrotik forum is not 'friendly' toward Load Balancing

Outbound per-connection load balancing that groups source/dest connections onto the same WAN [so when client A visits site A, the first connection goes out of the least-loaded WAN - say WAN A - then all connections between client A and site A use WAN A until client A no longer has any connections to...
by troffasky
Fri Dec 20, 2019 12:25 am
Forum: General
Topic: PoE switch for Dahua IP cameras
Replies: 12
Views: 4630

Re: PoE switch for Dahua IP cameras

Powerbox Pro.
by troffasky
Wed Oct 30, 2019 7:32 pm
Forum: RouterBOARD hardware
Topic: GPeR with non-poe destination device
Replies: 7
Views: 5035

Re: GPeR with non-poe destination device

Was the product page updated? I don't see anything here about passive PoE:
https://mikrotik.com/product/gper
but
https://i.mt.lv/cdn/rb_files/GPeR-1568972172.pdf
says PoE out is "Jumper selectable passive PoE Passthrough".
by troffasky
Tue Oct 29, 2019 3:28 pm
Forum: Wireless Networking
Topic: Huge wireless speed difference on RB2011UAS-2HnD
Replies: 8
Views: 2826

Re: Huge wireless speed difference on RB2011UAS-2HnD

It is quite normal that wireless download speed is higher than upload speed.
Yes, that's why he's posted asking for help.
by troffasky
Sun Oct 27, 2019 10:47 am
Forum: General
Topic: Failed echo requests on a constrained upload channel
Replies: 1
Views: 1206

Re: Failed echo requests on a constrained upload channel

But do I really need to get setup QoS just to get LCP echo requests? Your router *is* answering LCP echos, otherwise the graph would be solid red all the time. I think you want to limit your upload to slightly less than 100% of your available bandwidth. https://support.aa.net.uk/CQM_Graphs explains...
by troffasky
Sat Oct 26, 2019 3:24 pm
Forum: RouterBOARD hardware
Topic: Please make some DSL CPE
Replies: 2
Views: 2456

Please make some DSL CPE

Dear Mikrotik, Please, please, please could you make some DSL hardware? I am sick of having to use either low-quality+cheap+unsupported or high quality+overpriced+over-complex hardware to get DSL connectivity. I appreciate that there is little DSL in Latvia, but the world is crying out for a Mikroti...
by troffasky
Thu Sep 19, 2019 2:00 pm
Forum: RouterBOARD hardware
Topic: Did Rb 1100AH manage more than 700 Users?
Replies: 3
Views: 2899

Re: Did Rb 1100AH manage more than 700 Users?

How about saying how your 3011 is coping with your workload? That will give anyone reading this thread a better idea of how an 1100AH [presumably x4] would handle your workload.
by troffasky
Sun Apr 07, 2019 11:56 am
Forum: General
Topic: IPV6 passthrough rules
Replies: 16
Views: 9965

Re: IPV6 passthrough rules

IPv6 Connection Type: Passthrough WAN IPv6 Address: 2001:568:8561:3800:4a5b:38ff:fe27:120/64 WAN IPv6 Gateway: fe80::72f1:86ff:fe95:1530 LAN IPv6 Address: 2001:568:8561:3800:4a5b:38ff:fe25:120/64 LAN IPv6 Link-Local Address: fe80::4a5b:38ff:fe27:120/64 LAN IPv6 Prefix: 2001:568:8561:3800::/64 DNS S...
by troffasky
Wed Apr 03, 2019 12:40 pm
Forum: General
Topic: IPV6 passthrough rules
Replies: 16
Views: 9965

Re: IPV6 passthrough rules

/ipv6 address add address=2001:568:8561:39ff:82f1:86ff:fe85:1531 disabled=yes interface=ether1 add address=2001:568:8561:39ff:82f1:86ff:fe85:1530 interface=bridge Two IPs from same subnet on LAN and WAN interfaces? What are you expecting to happen here? Perhaps reconnect your old router and "i...
by troffasky
Thu Mar 14, 2019 11:47 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2019: new hardware
Replies: 66
Views: 29676

Re: MUM Europe 2019: new hardware

is a common designation use the term tri band router referring to a 2 x 5ghz + 1 2.4 ghz router
Just because it's common doesn't mean that it isn't idiocy. Shame that Mikrotik perpetuate this. It's like calling gigabit ethernet 2Gbps because it's 1Gbps in each direction.
by troffasky
Wed Apr 04, 2018 11:12 pm
Forum: General
Topic: Any plans to make cross-platform WinBox?
Replies: 33
Views: 8697

Re: Any plans to make cross-platform WinBox?

There doesn't have to be 2 separate apps, Mikrotik can abandon WinBox, it's UI looks a little archaic anyway and release a cross-platform Qt app :) Let's hope Mikrotik don't fix the "archaic" appearance of Winbox by turning it into some low-contrast abomination with gradient blends and an...
by troffasky
Wed Mar 28, 2018 6:01 pm
Forum: RouterBOARD hardware
Topic: LHG 60G
Replies: 63
Views: 21654

Re: LHG 60G

Is 'wireless wire dish' same thing as LHG 60G?:

https://www.mikrotik.com/download/share ... reDish.pdf
by troffasky
Wed Mar 14, 2018 11:34 pm
Forum: Wireless Networking
Topic: CAPs devices working as independent from CAPsMAN as possible
Replies: 5
Views: 2202

Re: CAPs devices working as independent from CAPsMAN as possible

I have considered some sort of back up scenario. Where the AP has the config in cap and it is set as the back up.
What we need is CAPsMANMAN to sync configs between main CAPsMAN and backup CAPsMAN. Maybe in v7.
by troffasky
Wed Mar 07, 2018 3:25 pm
Forum: Wireless Networking
Topic: CAPs devices working as independent from CAPsMAN as possible
Replies: 5
Views: 2202

Re: CAPs devices working as independent from CAPsMAN as possible

I agree. In scenarios where CAPsMAN is not involved heavily with station traffic [eg local forwarding, WPA2-Personal], CAPs should not freak out because they can't see CAPsMAN. Consider also a scenario where CAPsMAN is centralised and maybe WAN link is congested. There should be a way to tune how lo...
by troffasky
Tue Mar 06, 2018 2:56 pm
Forum: Wireless Networking
Topic: hAP ac + wAP ac (as Wi-Fi coverage improvement).
Replies: 16
Views: 4622

Re: hAP ac + wAP ac (as Wi-Fi coverage improvement).

Yes, you can keep both APs on the same network.
by troffasky
Fri Mar 02, 2018 11:30 pm
Forum: Wireless Networking
Topic: Xiaomi phone low Wifi TX rate [SOLVED]
Replies: 99
Views: 59237

Re: Xiaomi phone low Wifi TX rate [SOLVED]

Do you suggest choosing a phone specifically for the router? Because not all phones work well with your devices. Are you seriously??? He said "Either solution works fine", so you can choose a different phone if you must keep using the RB951, or choose a different AP if you must use a spec...
by troffasky
Wed Feb 21, 2018 11:55 pm
Forum: General
Topic: IPv6 is not advertising (over PPPoE)
Replies: 18
Views: 5456

Re: IPv6 is not advertising (over PPPoE)

ROS6 uses kernel 3.3.5.
by troffasky
Wed Feb 21, 2018 6:07 pm
Forum: General
Topic: How to configure MikroTik to be primary router?
Replies: 24
Views: 5406

Re: How to configure MikroTik to be primary router?

The MT should be a router. It should get the public IP. From there onwards the ASUS will be one of the clients of the MT and will be in Bridge mode (as advised by ExpressVPN) , then even more the devices will all be connected to the ASUS. How would the port forwarding look like? What type of VPN it...
by troffasky
Tue Feb 20, 2018 2:46 pm
Forum: General
Topic: Router capacity
Replies: 14
Views: 3329

Re: Router capacity

Should we increase the APs numbers? Should we place them in a certain way allowing users to evenly connect to one of them? Should we work with the hotel’s equipment? Other suggestions? Dual band AP for sure. Hopefully some clients end up on 5G radio and some on 2G. Also, high-density wifi design is...
by troffasky
Tue Feb 20, 2018 2:36 pm
Forum: General
Topic: RB1100Dx4 Multicore issue ?
Replies: 18
Views: 3928

Re: RB1100Dx4 Multicore issue ?

I just want you guys to know the CCR1009 just solved the problem. every single core works!
Did you log a ticket with support? I am sure they would be interested to know.
by troffasky
Tue Feb 20, 2018 2:32 pm
Forum: General
Topic: How to configure MikroTik to be primary router?
Replies: 24
Views: 5406

Re: How to configure MikroTik to be primary router?

"Reasonable" is a question that only you can answer because it's your network. If you explained why you want to use both routers at once, perhaps someone could hazard a guess.
by troffasky
Wed Jan 10, 2018 11:16 pm
Forum: RouterBOARD hardware
Topic: [Solved] Wireless wire indoor use
Replies: 5
Views: 2182

Re: [Solved] Wireless wire indoor use

"Same" if you're not bothered about lack of ethernet ports, yeah.
by troffasky
Sat Jan 06, 2018 2:45 am
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 215077

Re: Mikrotik VDSL / DSL Modem?

In case there's any lingering doubt about the economic viability of selling a DSL interface, look at how much red there is in the bar chart: https://www.ispreview.co.uk/index.php/2018/01/examining-countries-advertise-broadband-isp-speeds-vs-uk.html Two thirds of internet connections in the EU are su...
by troffasky
Thu Dec 28, 2017 8:09 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2017: new hardware incoming!
Replies: 86
Views: 31580

Re: MUM Europe 2017: new hardware incoming!

How is the CRS112-8P-4S coming along?
by troffasky
Thu Nov 30, 2017 2:56 pm
Forum: General
Topic: Forum troubles
Replies: 39
Views: 7262

Re: Forum troubles

I changed my forum theme to a forum theme that doesn't allow changing the forum theme, but as soon as I login to reply to this post, theme has gone back to the old default!
by troffasky
Sat Nov 25, 2017 12:56 am
Forum: Beginner Basics
Topic: Licensing quesiton.
Replies: 1
Views: 703

Re: Licensing quesiton.

All hardware from Mikrotik that runs RouterOS ships with a license key.
License-key-on-HDD is only relevant to non-Mikrotik hardware running RouterOS.
Licensing is not related to management of the router and who has access to it.
by troffasky
Sat Nov 25, 2017 12:53 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 219547

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) firewall - added "tls-host" firewall matcher (CLI only); Sweet. No more Layer 7 for HTTPS blocking :) How it works? Which packet matches? Does it support wildcards? I presume this is just a special case of a Layer 7 with some pre-defined pattern, and only works when SNI is used. No nee...
by troffasky
Wed Nov 22, 2017 6:05 pm
Forum: RouterBOARD hardware
Topic: mAP and wAP 48v DC Jack 8-57v - FALSE
Replies: 2
Views: 1537

Re: mAP and wAP 48v DC Jack 8-57v - FALSE

Probably better to email support if a proper response is required.
by troffasky
Wed Nov 22, 2017 12:38 am
Forum: Beginner Basics
Topic: Cisco ASA change to CCR1072
Replies: 6
Views: 2177

Re: Cisco ASA change to CCR1072

Dear Forum Users, I would like to change my two Cisco ASA 5520 for two MikroTik CCR1072-1G-8S+. The Cisco ASA 5520 firewall throughput 450Mbps. This value is few. I'm looking for a device that knows the following: - device redundancy ( High Availability / Failover ) Unfortunately there isn't native...
by troffasky
Wed Nov 22, 2017 12:17 am
Forum: Wireless Networking
Topic: Noise Floor
Replies: 7
Views: 17011

Re: Noise Floor

Do you actually get better speeds/lower packet loss?

A few possibilities:
- Better RF design with improved filtering and rejection will get you a better noise floor
- Perhaps old card wasn't seated/connected properly
- Cards may not be calibrated the same
- Different cards may have different firmware
by troffasky
Mon Nov 20, 2017 7:18 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 219547

Re: v6.41rc [release candidate] is released! New bridge implementation!

You have 15 sites of a problematic type for which it costs $1000 to make a support visit and you don't have a way to test a similar site from home (a subscription to the same satellite service)? Don't need a satellite dish to emulate the behaviour of a typical satellite link: https://wiki.linuxfoun...
by troffasky
Sat Nov 18, 2017 11:47 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 215077

Re: Mikrotik VDSL / DSL Modem?

BTW, are there any cheap mini-PCI VDSL
I haven't been able to find a mini-PCI(e) VDSL interface at any price, never mind cheap.
by troffasky
Sat Nov 18, 2017 12:11 pm
Forum: General
Topic: Where is my 10 Gb ?
Replies: 4
Views: 1463

Re: Where is my 10 Gb ?

Probably CPU can't saturate 10Gbps link, however, those results do seem a little low.
What happens if you try 1G copper link instead?
A more realistic result will be obtained by testing with a device connected to each switch.
by troffasky
Sat Nov 18, 2017 11:25 am
Forum: General
Topic: Global DNS Ping fluctuating in mikroitk ccr1009
Replies: 3
Views: 1092

Re: Global DNS Ping fluctuating in mikroitk ccr1009

Any other destinations affected? Even though it is regularly used as such, 8.8.8.8 is not a "monitoring service". I had to switch a customer from pinging 8.8.8.8 to 8.8.4.4 for state tracking, because the former stopped responding [but only on one of their WANs].
by troffasky
Sat Nov 18, 2017 12:21 am
Forum: General
Topic: Bug: SNMP over VRRP interface problem
Replies: 19
Views: 5692

Re: Bug: SNMP over VRRP interface problem

Look further up the page:

viewtopic.php?p=628352#p605812
by troffasky
Fri Nov 17, 2017 6:45 pm
Forum: RouterBOARD hardware
Topic: New hardware - mAP
Replies: 155
Views: 101162

Re: New hardware - mAP

You could read between the lines as follows - this page has been obsoleted:

https://wiki.mikrotik.com/wiki/Supported_Hardware

in favour of this page:

https://wiki.mikrotik.com/wiki/Manual:Peripherals

so you could read that as no, no USB NIC support.
by troffasky
Thu Nov 16, 2017 11:59 pm
Forum: Wireless Networking
Topic: Setup WISP for 1.5km from base...
Replies: 9
Views: 2117

Re: Setup WISP for 1.5km from base...

Whats the procedure to cover network for whole area ? Can u mention Network diagram and devices ? You need to backhaul your APs with something. You will struggle if you try to provide access and do backhauling in 2.4GHz band. Sure, Wifi repeater products exist [maybe even RouterOS can be persuaded ...
by troffasky
Thu Nov 16, 2017 6:39 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 3117

Re: HTTPS does not records in Mikrotik log

Ok, I understand now. is there is a expert way to trace the encrypted HTTPS requests? because I want to record all breached roles. You can monitor encrypted traffic but there are legal and technical obstacles. You need to a) work out if it's legal where you are b) get the monitored devices to trust...
by troffasky
Thu Nov 16, 2017 6:34 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 3117

Re: HTTPS does not records in Mikrotik log

How is the squid transparently proxying https without the end user getting problems?
Having re-read the thread, I have misunderstood. I had assumed the OP was using an explicit proxy not a transparent one.
by troffasky
Thu Nov 16, 2017 6:30 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 3117

Re: HTTPS does not records in Mikrotik log

This is not possible I have to disagree here. As an example, Squid logs the hostname that it proxied the connection to along with the number of bytes transferred. Hi troffasky, Could you please give me notes about squid logs to Monitoring of web searches and video viewing by employees especially &q...
by troffasky
Wed Nov 15, 2017 6:12 pm
Forum: General
Topic: HTTPS does not records in Mikrotik log
Replies: 13
Views: 3117

Re: HTTPS does not records in Mikrotik log

This is not possible
I have to disagree here. As an example, Squid logs the hostname that it proxied the connection to along with the number of bytes transferred.
by troffasky
Wed Nov 15, 2017 6:09 pm
Forum: Wireless Networking
Topic: Band Steering implementation?
Replies: 80
Views: 40045

Re: Band Steering implementation?

How different beacon intervals can assure that one will be always before another if none knows when a client starts to scan and at what frequency it will be and how long he will be scanning before he decides to select an ap to try to connect? You can't be assured [ie 100% certain], but you don't ne...
by troffasky
Wed Nov 15, 2017 6:06 pm
Forum: Wireless Networking
Topic: Setup WISP for 1.5km from base...
Replies: 9
Views: 2117

Re: Setup WISP for 1.5km from base...

If you literally mean "wifi repeater" then just give up now, because you won't get anywhere with it. If by "repeater" you mean "2.4GHz AP backhauled to <somewhere> with <something>" where <something> is a cable or a wireless connection on a different band, then you're g...
by troffasky
Sun Nov 05, 2017 11:18 pm
Forum: General
Topic: RouterOS supported hardware
Replies: 29
Views: 27177

Re: RouterOS supported hardware

Works for me.
by troffasky
Sun Nov 05, 2017 11:16 pm
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 17419

Re: Help me stop MAC spoofing

Off course someone can give login information to other people.
...which is an improvement on "other people" just taking your login without you knowing about it!
by troffasky
Sun Nov 05, 2017 1:40 pm
Forum: RouterBOARD hardware
Topic: Fastest Router for rough conditions
Replies: 2
Views: 1280

Re: Fastest Router for rough conditions

You might want to state what kind of operating temperature range you're seeing and expecting to see.
by troffasky
Sun Nov 05, 2017 1:38 pm
Forum: Wireless Networking
Topic: 5 GHz 360+ km Wi-Fi link via tropospheric ducting propagation
Replies: 2
Views: 1506

Re: 5 GHz 360+ km Wi-Fi link via tropospheric ducting propagation

I didn't even know DXing on 5GHz was a thing until I saw this. Impressive stuff!
by troffasky
Sun Nov 05, 2017 12:26 am
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 17419

Re: Help me stop MAC spoofing

wifi scanners scans for the ip range therefore if you prevent it from showing ip addresses mac addresses wont be listed too I think you are confused. I linked to a screenshot of a wifi scanner by the name of "kismet", a tool I have used myself [you can also verify this easily enough, beca...
by troffasky
Wed Nov 01, 2017 12:28 am
Forum: General
Topic: Ipsec Site to Site, again...
Replies: 14
Views: 4541

Re: Ipsec Site to Site, again...

The only thing i can think is: from terminal in mikrotik the ping is sent from the WAN interface and that's why i see the hops like a traceroute to a normal site. I'm on the right way? Deunan. Yes, you're close. You will probably find that if you add src-address=<LAN IP> to your ping command, it wo...
by troffasky
Tue Oct 31, 2017 2:43 pm
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 17419

Re: Help me stop MAC spoofing

what you can do is prevent wifi scanners from showing your clients,s mac addresses by changing the network prefix lenghth from 24 to 32 MAC addresses are not encrypted on wifi. You can confirm this yourself with a tool like Kismet, eg: https://lh6.googleusercontent.com/VjbpXPoLPKGEjt-1WDc7QlOGP9an7...
by troffasky
Tue Oct 31, 2017 11:01 am
Forum: Beginner Basics
Topic: Random Websites Will Not Load\Open
Replies: 5
Views: 4030

Re: Random Websites Will Not Load\Open

The definitive answer will come from your ISP, but generally speaking, 1500 if the service is delivered over ethernet, 1492 if it's coming over DSL. Also, blocking ICMP will prevent Path MTU Discovery from working and PMTUD can be helpful.
by troffasky
Fri Oct 27, 2017 3:12 pm
Forum: Beginner Basics
Topic: Business with limited Bandwidth and out of control usage
Replies: 6
Views: 1959

Re: Business with limited Bandwidth and out of control usage

Just looked at squid logs, CONNECT method shows bytes transferred as well. So not useless at all :-)
by troffasky
Fri Oct 27, 2017 5:44 am
Forum: Beginner Basics
Topic: VPN blocked in mikrotik?
Replies: 4
Views: 1461

Re: VPN blocked in mikrotik?

The issue with OpenVPN UDP and RouterOS is where RouterOS is terminating the OpenVPN connection, not with OpenVPN endpoints connecting through RouterOS.
by troffasky
Fri Oct 27, 2017 5:34 am
Forum: Beginner Basics
Topic: Random Websites Will Not Load\Open
Replies: 5
Views: 4030

Re: Random Websites Will Not Load\Open

I would start by checking out MTU.
by troffasky
Fri Oct 27, 2017 5:23 am
Forum: General
Topic: VoIP - Implemented in RouterOS
Replies: 23
Views: 6367

Re: VoIP - Implemented in RouterOS

Three points: Mikrotik need to focus on the fundamentals. Phone system probably doesn't belong in RouterOS. Mikrotik could build an "app store" of third-party RouterOS modules, of which one could be a phone system, I guess? The closest thing to a phone system that belongs in RouterOS is a)...
by troffasky
Fri Oct 27, 2017 5:09 am
Forum: Beginner Basics
Topic: Business with limited Bandwidth and out of control usage
Replies: 6
Views: 1959

Re: Business with limited Bandwidth and out of control usage

I would start by just putting Squid on the LAN and blocking web access from everything else. This would require that you explicitly configure the clients to use the proxy server. You can then watch the router to see who is still trying to get out on to the internet directly rather than via the proxy...
by troffasky
Sun Oct 22, 2017 12:17 pm
Forum: RouterBOARD hardware
Topic: Add WiFi interface to RouterOS in VirtualBox environment
Replies: 2
Views: 2311

Re: Add WiFi interface to RouterOS in VirtualBox environment

Have you looked in to PCI(e) passthrough? A quick Google suggests that it actually won't be easy, but it should be possible.
by troffasky
Sat Oct 21, 2017 4:28 pm
Forum: Beginner Basics
Topic: Help me stop MAC spoofing
Replies: 37
Views: 17419

Re: Help me stop MAC spoofing

The first thing you should do is re-read every reply you've had in this thread and make a list of all the terms you don't understand. Take each one you don't understand and Google it. Write down some notes about what you find to help cement your knowledge. Nobody is paid to post on these forums and ...
by troffasky
Sat Oct 21, 2017 1:49 pm
Forum: General
Topic: Manufacturer defect on two CCR1016-12S-1S+
Replies: 1
Views: 943

Re: Manufacturer defect on two CCR1016-12S-1S+

Try emailing support.
by troffasky
Sun Oct 08, 2017 10:23 pm
Forum: General
Topic: Odd VOIP Behavior on Mikrotik 3011
Replies: 12
Views: 2562

Re: Odd VOIP Behavior on Mikrotik 3011

Did disabling the SIP ALG make any difference to the observed behaviour?
You need a packet capture of a phone that is failing to register. SIP is quite readable in Wireshark.
by troffasky
Sun Oct 08, 2017 1:25 pm
Forum: RouterBOARD hardware
Topic: hEX NAT performance
Replies: 5
Views: 7052

Re: hEX NAT performance

BTW – MT Wiki says:
Fasttracked packets bypass firewall, connection tracking
So now with Fasttrack conntrack works or not?
Connection tracking is essential for NAT, so either that page is wrong, or there is a subtlety to the phrase "connection tracking" as they use it.
by troffasky
Sat Sep 30, 2017 11:51 am
Forum: Beginner Basics
Topic: Spectrum IPv6 - unreachable? [SOLVED]
Replies: 4
Views: 2887

Re: Spectrum IPv6 - unreachable? [SOLVED]

Your router only has one IP address and no link-local addresses. I am not 100% sure but I think you're not going be doing much routing if you only have one IP.
Does anything show up in the neighbour table? [/ipv6 neighbor print]
by troffasky
Tue Aug 29, 2017 5:25 pm
Forum: General
Topic: Internet starts working after i do IP Scan
Replies: 34
Views: 7185

Re: Internet starts working after i do IP Scan

If it didn't work when you connected your PC directly then you've eliminated the switches as the source of the issue.
by troffasky
Sat Jul 08, 2017 9:20 am
Forum: General
Topic: Way to Internet via EoIP is broken for MTU issue?
Replies: 5
Views: 3726

Re: Way to Internet via EoIP is broken for MTU issue?

You're going to have to give more detailed diagnostic information than "web sites still won't open" if you want a useful response. What troubleshooting have you tried and what was the outcome?
by troffasky
Sat Jul 08, 2017 8:59 am
Forum: General
Topic: Unexpected Local IPv6 Packet
Replies: 8
Views: 1862

Re: Unexpected Local IPv6 Packet

/ipv6 neighbour print

Doesn't really look like broadcast though as the destination is not a broadcast address. Perhaps include the port so you get an idea what the traffic is.
by troffasky
Fri Jun 30, 2017 11:58 pm
Forum: General
Topic: Half duplex 100 only and link duplex mismatch on hAP Lite and EPON
Replies: 22
Views: 10365

Re: Half duplex 100 only and link duplex mismatch on hAP Lite and EPON

keep in mind that 100mbps cable speed, on tcp protocol is approx 50-70 mbps.
Nah. I would expect 94Mbps TCP throughput on 100M ethernet. If you're getting 50-70M on 100M ethernet, something's wrong.
by troffasky
Fri Jun 30, 2017 11:52 pm
Forum: General
Topic: Make an ip act like another
Replies: 2
Views: 1188

Re: Make an ip act like another

You could NAT it, or you could specifically allow access to the printer's actual IP address.
by troffasky
Fri Jun 30, 2017 11:48 pm
Forum: General
Topic: Mikrotik router duplicates every single IP address on the network
Replies: 12
Views: 4230

Re: Mikrotik router duplicates every single IP address on the network

Do you have proxy-arp enabled on the interface?
by troffasky
Mon Jun 26, 2017 2:33 pm
Forum: RouterBOARD hardware
Topic: LHG 60G
Replies: 63
Views: 21654

Re: LHG 60G

was the internal mikrotik codename xmaster?
Am I the only one that read 'xhamster'? :lol:
Yeah, looks like it!
by troffasky
Sun Jun 25, 2017 12:48 am
Forum: General
Topic: Bug: SNMP over VRRP interface problem
Replies: 19
Views: 5692

Re: Bug: SNMP over VRRP interface problem

I can think of at least one reason why you'd want DNS queries to the virtual IP to work - high availability. If you give out one of the physical router IPs as the DNS server in DHCP options, what happens when that router fails over to the other one?
by troffasky
Wed May 31, 2017 12:08 am
Forum: Wireless Networking
Topic: LHG5 P2P and WPS Problem
Replies: 2
Views: 926

Re: LHG5 P2P and WPS Problem

Why use WDS if it's routed?
by troffasky
Tue May 30, 2017 9:49 pm
Forum: Scripting
Topic: Getting realtime traffic speeds from interface
Replies: 3
Views: 2502

Re: Getting realtime traffic speeds from interface

If it's true that once speed is above 1000kbps, it shows as 1553.0... then report it to support@
by troffasky
Tue May 30, 2017 9:47 pm
Forum: Scripting
Topic: fetch where the site employs redirect
Replies: 2
Views: 2792

Re: fetch where the site employs redirect

Fetch it with wget and see where the redirect goes, and use that.
by troffasky
Mon May 29, 2017 1:32 pm
Forum: Wireless Networking
Topic: 12x wAP & controlling frequency
Replies: 9
Views: 2081

Re: 12x wAP & controlling frequency

configure them in such a way that the wAP's with the same channel are as far as possible apart from each other. Have you verified that this has been effective? Also 5Ghz has been enabled. This setup is in a harbour, outside on the boot I've good WIFI connection, but inside the boot it still stays a...
by troffasky
Sun May 28, 2017 12:37 pm
Forum: Wireless Networking
Topic: wAP ac compatibility issues intel wifi
Replies: 10
Views: 5062

Re: wAP ac compatibility issues intel wifi

With regards to the rest of the thread, my experience is that the Intel wifi drivers do not allow >20Mhz channels on 2.4GHz, eg: https://communities.intel.com/thread/51241 I poked and prodded the iwlwifi module and settings with iw all I could but it stubbornly stays on 20MHz. My cheap'n'nasty Dynam...
by troffasky
Sun May 28, 2017 11:56 am
Forum: Wireless Networking
Topic: one network including AP and ethernet?
Replies: 7
Views: 1738

Re: one network including AP and ethernet?

So if I would use the same range of ip addresses on two networks there would be a problem if I bridge the two? You should bridge (or switch the two) if you want to use the same range of addresses (same L2 segment). I mean if I have one computer on one network with the ip address 192.168.1.10 and on...
by troffasky
Sun May 28, 2017 11:42 am
Forum: Wireless Networking
Topic: Connecting multiple CAPs
Replies: 3
Views: 1342

Re: Connecting multiple CAPs

No, you don't need another CAPsMAN:

https://wiki.mikrotik.com/wiki/Manual:C ... Connection
by troffasky
Sat May 27, 2017 10:31 pm
Forum: Wireless Networking
Topic: Dual wireless link - loadbalance/failover
Replies: 5
Views: 1922

Re: Dual wireless link - loadbalance/failover

That's the "easy" answer but doesn't fulfil your original requirement of load balancing. Maybe bonding the two links would, however?
by troffasky
Sat May 27, 2017 8:24 pm
Forum: Wireless Networking
Topic: Dual wireless link - loadbalance/failover
Replies: 5
Views: 1922

Re: Dual wireless link - loadbalance/failover

Ideally to do what you want, the radio would be connectorised so you can have the two sets of antennae some distance apart [so that when one is obscured, the other isn't, hopefully]. You haven't mentioned which of the two bands you're using at present. Are you able to repeat the obstruction on deman...
by troffasky
Sat May 20, 2017 6:49 pm
Forum: General
Topic: VLAN not working L2
Replies: 19
Views: 4008

Re: VLAN not working L2

i used and It working Maybe i didn't clarify my requirements. The model we are using is only a 2pon OLT. Maybe you used a 4 PON model which may have this function What part of what jimmytam said don't you understand? The datasheet says it will do what you're asking, jimmytam says it will do what yo...
by troffasky
Mon May 08, 2017 5:57 pm
Forum: General
Topic: [6.39.1] Performance-Issue: OVPN-Client + Simple Mangle Rule
Replies: 3
Views: 1614

Re: [6.39.1] Performance-Issue: OVPN-Client + Simple Mangle Rule

What is difference between CPU usage on "plain internet" and VPN'ed internet?

Edit: TBH there is probably no point asking here. If an export of the config is identical before/after upgrade, then it's a RouterOS performance regression and nobody on the forums can help you with that.
by troffasky
Thu May 04, 2017 8:28 pm
Forum: RouterBOARD hardware
Topic: Modern hardware
Replies: 7
Views: 1776

Re: Modern hardware

mind telling me the point of -> ac <- when your backbone is 100mbps?
If you are a performance junkie, you can either buy something else with gigabit ports, or trunk two 100M ports.
by troffasky
Wed May 03, 2017 1:11 pm
Forum: Beginner Basics
Topic: CRS226-24G-S+ Basic Switch Configuration
Replies: 1
Views: 1107

Re: CRS226-24G-S+ Basic Switch Configuration

There will be several different VLANs on all the 24 access ports and I like to use both 10G uplinks to other switches on the campus as trunk ports. I´m not able to configure "/interface ethernet switch egress-vlan-tag add tagged-ports" because I can only specify one of the SFP+ ports. Wha...
by troffasky
Tue May 02, 2017 7:00 pm
Forum: General
Topic: EoIP/IPSec poor performance
Replies: 4
Views: 1838

Re: EoIP/IPSec poor performance

I finally set it to blowfish and it's working, got around 50Mbps between Windows Station in TCP, but only 1Mbps in UDP From 'man iperf': CLIENT SPECIFIC OPTIONS -b, --bandwidth n[KMG] | npps set target bandwidth to n bits/sec (default 1 Mbit/sec) or n packets per sec. This may be used with TCP or U...
by troffasky
Tue May 02, 2017 6:51 pm
Forum: Beginner Basics
Topic: printer scanner very slow on capsman
Replies: 13
Views: 3341

Re: printer scanner very slow on capsman

What is the mode of printer/scanner ? B ? G? N ?
Unlikely to be B or G if it's connected at 58Mbps.
by troffasky
Sun Apr 23, 2017 12:33 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 61443

Re: wAP AC (General questions and experience)

Could you update this page accordingly?:

https://routerboard.com/RBwAPG-5HacT2HnD {,-BE}

Just says "PoE in 802.3at" [as do the websites of the usual vendors I have checked].
by troffasky
Mon Apr 17, 2017 10:40 pm
Forum: Forwarding Protocols
Topic: VRRP ipv6 vlan/crossover
Replies: 14
Views: 2925

Re: VRRP ipv6 vlan/crossover

Which is why I suggested trying to filter it.
by troffasky
Wed Apr 12, 2017 10:47 am
Forum: Forwarding Protocols
Topic: VRRP ipv6 vlan/crossover
Replies: 14
Views: 2925

Re: VRRP ipv6 vlan/crossover

The idea with the bridge sounds weird, have you ever seen that live?
No, hence describing it as a long shot.
by troffasky
Wed Apr 12, 2017 12:40 am
Forum: Forwarding Protocols
Topic: VRRP ipv6 vlan/crossover
Replies: 14
Views: 2925

Re: VRRP ipv6 vlan/crossover

Bit of a long shot....
Bridge your "crossover" link with your LAN uplink on each router. This is the long shot bit...can you apply a filter to just the LAN uplink that would block VRRP on that interface?
by troffasky
Wed Apr 12, 2017 12:09 am
Forum: General
Topic: Is it possible to create virtual interfaces and separate traffic between them?
Replies: 6
Views: 4790

Re: Is it possible to create virtual interfaces and separate traffic between them?

Perhaps look at exporting flows to a netflow collector instead? Assuming you actually want to do something with this information once you've got it, a collector is a good place to start.

Using a different subinterface for each client won't scale well.
by troffasky
Tue Apr 11, 2017 9:46 am
Forum: General
Topic: RouterOS hot standby via VRRP
Replies: 4
Views: 2343

Re: RouterOS hot standby via VRRP

One interesting thing is that it's possible to "mix protocols". Tell VRRP to use IPv6 and it will be happy with link-local addresses. And then you can add your single IPv4 address to virtual interface. I hadn't even thought of IPv6! A good justification for not using IPs in the same subne...
by troffasky
Sat Apr 08, 2017 1:15 am
Forum: General
Topic: RouterOS hot standby via VRRP
Replies: 4
Views: 2343

Re: RouterOS hot standby via VRRP

"Yes", some years ago: https://forum.mikrotik.com/viewtopic.php?t=58420 "No", more recently: https://forum.mikrotik.com//viewtopic.php?f=2&t=95829 I don't see why the virtual IP needs to be in the same subnet as the real IPs. So long as the two real IPs can see each other, wh...
by troffasky
Sat Feb 25, 2017 11:04 pm
Forum: General
Topic: Leaseline (Fibre Ethernet)
Replies: 6
Views: 1945

Re: Leaseline (Fibre Ethernet)

It seems it's my option to take the Cisco router or not however they cannot monitor the line without it.
What do you guys think?
Do you want them to monitor the line?
If you want them to monitor it, is the cost of having their router worth it to you?
by troffasky
Sat Feb 25, 2017 4:35 pm
Forum: General
Topic: NetDuma
Replies: 10
Views: 7205

Re: NetDuma

Don't quite see what the problem is?
Perhaps that's because there isn't one?
by troffasky
Sat Feb 25, 2017 12:38 pm
Forum: General
Topic: Subnet prefix capture for traffic analyis
Replies: 3
Views: 1105

Re: Subnet prefix capture for traffic analyis

ntopng has an AS view but it's not really for reporting, more for a real-time view of stats. Has to beat looking up stuff manually though.
by troffasky
Thu Feb 23, 2017 10:00 pm
Forum: General
Topic: https problem on hotspot
Replies: 97
Views: 126532

Re: https problem on hotspot

So what is actually happening, is that router does see the initial request from client and does redirect it, but client is not able to get the certificate and thus the browser displays an error, right? The client always gets a certificate but because the certificate offered doesn't have a common na...
by troffasky
Mon Feb 20, 2017 7:05 pm
Forum: General
Topic: https problem on hotspot
Replies: 97
Views: 126532

Re: https problem on hotspot

To start the SSL connection, doesn't the browser need first to connect to the server? By sending a request for connection, isn't it visible to the router on port 443 and as result redirected to hotspot login page? What am I missing here? When the client wants to connect to https://google.com, the c...
by troffasky
Sun Feb 12, 2017 6:51 pm
Forum: General
Topic: Research on Changing Serial Number for GPON ONU Module
Replies: 30
Views: 41386

Re: Research on Changing Serial Number for GPON ONU Module

Based on the hardware schematic and public available information, there is large chance that the module is more like a linux computer with two bridged interfaces.
This is fascinating, and a little bizarre. Surely running an entire OS on SFP is a massive overhead?
by troffasky
Sun Feb 12, 2017 5:30 pm
Forum: General
Topic: RB750Gr3 - port disable not work after reboot
Replies: 2
Views: 1054

Re: RB750Gr3 - port disable not work after reboot

The behaviour you're describing sounds like a bug and as it's a very simple scenario, try reporting it to Mikrotik, however...which behaviour are you expecting?
- Disable interface, reboot, interface is enabled
- Disable interface, reboot, interface is disabled [and lights stay off]
by troffasky
Sun Feb 12, 2017 4:44 pm
Forum: General
Topic: Brand New CRS with High "Management" CPU Usage...
Replies: 14
Views: 5885

Re: Brand New CRS with High "Management" CPU Usage...

What should level of CPU usage for management be?
by troffasky
Sun Feb 12, 2017 3:57 pm
Forum: Beginner Basics
Topic: Problem with access two SXT Mikrotiks in bridge mode in the same network
Replies: 1
Views: 1042

Re: Problem with access two SXT Mikrotiks in bridge mode in the same network

Did you perhaps import backup from SXT to the other to speed up your deployment [I know that's exactly what I would have done]? Backup contains MAC addresses so doing this will cause, ahem, interesting behaviour.
by troffasky
Sun Feb 12, 2017 3:33 pm
Forum: General
Topic: Reading a backup
Replies: 5
Views: 5927

Re: Reading a backup

backups are intended for a given routerboard device and ROS version. I sense a business opportunity here - many admins only discover that they should have done an 'export' instead of a 'backup'[1] when their original router dies and they need to restore it on replacement hardware! You could charge ...
by troffasky
Sun Feb 12, 2017 12:46 pm
Forum: Beginner Basics
Topic: If https url is encrypted, how walled garden allows it by regex?
Replies: 2
Views: 1566

Re: If https url is encrypted, how walled garden allows it by regex?

I won't claim to understand it, but certificate is not encrypted so common name/alt name can be read from it.
by troffasky
Thu Feb 02, 2017 10:53 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 215077

Re: Mikrotik VDSL / DSL Modem?

If so, this needs to be accessible remotely, ie through the usual RouterOS management tools.
by troffasky
Sun Jan 29, 2017 11:48 pm
Forum: RouterBOARD hardware
Topic: New hardware - mAP
Replies: 155
Views: 101162

Re: New hardware - mAP

So, in summary, can we pass 802.3af PoE in to the mAP2nD and get 802.3af PoE out of it? Not sure about 802.3af in ether2, but an active PoE device turns on instantly and works well... According to the manual for the Yealink W52P it is an 802.3af device, and I doubt that Cisco SB PoE switch is anyth...
by troffasky
Sun Oct 23, 2016 1:16 am
Forum: General
Topic: SNMP LTE signal strength
Replies: 16
Views: 13723

Re: SNMP LTE signal strength

Changing OIDs after a reboot or interface down/up is not a RouterOS bug, it is a problem in understanding how SNMP works. Sure it is an often-made mistake to hardwire OIDs that end in an interface number, assuming that this number is fixed. This is not guaranteed. I think you're under the impressio...
by troffasky
Sun Oct 23, 2016 12:59 am
Forum: General
Topic: Feature request for v7.x
Replies: 296
Views: 111560

Re: Feature request for v7.x

There is this small, not-well-known but very useful tool called "etckeeper" for Linux, which automatically commits all changes you do on your configuration to the version-control-system of your choice (git, svn...). An implementation of that for MikroTik would be interesting I suggest you...
by troffasky
Sun Oct 23, 2016 12:46 am
Forum: RouterBOARD hardware
Topic: New hardware - mAP
Replies: 155
Views: 101162

Re: New hardware - mAP

802.3af PoE is working OK this time. :)
So, in summary, can we pass 802.3af PoE in to the mAP2nD and get 802.3af PoE out of it?
by troffasky
Sat Aug 06, 2016 12:27 am
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 215077

Re: Mikrotik VDSL / DSL Modem?

If it's big enough to fit a PCIE card in, then the box is too big for me. MicroPCIE would work.
by troffasky
Wed May 25, 2016 3:22 pm
Forum: Wireless Networking
Topic: How do you weather proof your feed horn cables?
Replies: 5
Views: 2224

Re: How do you weather proof your feed horn cables?

use two layers and apply one in a clockwise direction and at the end of first layer apply the second in a anti-clockwise direction
Pardon me if this is a silly question, but doesn't that mean that each layer's tendency would be to unwrap the other?
by troffasky
Tue May 10, 2016 7:25 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 391
Views: 215077

Re: Mikrotik VDSL / DSL Modem?

anybody thinking this way about copper pair surely has not see the problems about isolation on outdoor cooper wires or/and induction ac or dc problems i think docsis has a better future because is more resistant to interference Which is all very well, but try explaining that to an ISP with millions...
by troffasky
Sun Jan 31, 2016 1:06 am
Forum: General
Topic: CCR-1036 only get 500mbps through put
Replies: 10
Views: 4257

Re: CCR-1036 only get 500mbps through put

Hmm thats pretty low.
Again, is it? Could be well within the indicated performance envelope, but without knowing the specifics, who knows...
There is a known limit of 1Gb/s on a single tcp stream.
I am certain that somebody from Mikrotik has denied this but I can't find the thread right now.
by troffasky
Sat Jan 30, 2016 12:28 pm
Forum: General
Topic: CCR-1036 only get 500mbps through put
Replies: 10
Views: 4257

Re: CCR-1036 only get 500mbps through put

You say "only" but have you checked the "Performance test results" table for your model? Depending how you do it and how you have it configured [wot Revelation asked], 500Mbps could be well within the expected performance for this model.
by troffasky
Sat Jan 30, 2016 1:04 am
Forum: General
Topic: CRS Vlan translation N-to-1
Replies: 1
Views: 1256

Re: CRS Vlan translation N-to-1

The answer to your question is probably "yes". http://wiki.mikrotik.com/wiki/Manual:CRS_features#Ingress.2FEgress_VLAN_Translation Here is a guess: /interface ethernet switch egress-vlan-translation customer-vid=100 new-customer-vid=1000 ports=??? /interface ethernet switch ingress-vlan-tr...
by troffasky
Sat Jan 30, 2016 12:43 am
Forum: General
Topic: Using an ADSL router as modem only.
Replies: 3
Views: 1227

Re: Using an ADSL router as modem only.

I am actually not sure if I should be using a ppp client, a PPPTP client or a PPPoE client.
The example you linked says the Mikrotik would talk PPTP to the modem.
by troffasky
Sat Jan 30, 2016 12:38 am
Forum: General
Topic: Can I open a .backup file locally ??
Replies: 3
Views: 4009

Re: Can I open a .backup file locally ??

Short answer: no. Long answer: Almost. 'strings' will reveal some info from a .backup file but it looks more like status than config, to me [for example, can't see any IPv6 addresses in it]. If you google, you will find a method [mtpass] involving OpenWRT that looks like a proper ball-ache. Actually...
by troffasky
Sat Jan 30, 2016 12:23 am
Forum: General
Topic: PPPoE woes
Replies: 2
Views: 1157

Re: PPPoE woes

From what you've posted, this is almost certainly a bug, so you'd be better off emailing support@.

Perhaps some config is hidden in the GUI?

/interface pppoe-client export verbose
by troffasky
Sat Jan 30, 2016 12:17 am
Forum: General
Topic: mikrotik curious about the name
Replies: 7
Views: 2007

Re: mikrotik curious about the name

If you can be bothered to post a response, why not include the answer to the question instead of just being a smart-ass?
by troffasky
Sat Jan 23, 2016 1:26 pm
Forum: General
Topic: Halting performance with CRS226
Replies: 3
Views: 1156

Re: Halting performance with CRS226

by troffasky
Sat Jan 23, 2016 1:20 pm
Forum: General
Topic: Ping Check All Clients With MikroTik Routers
Replies: 10
Views: 2670

Re: Ping Check All Clients With MikroTik Routers

I think "The Dude" is better for your solution. This is a monitoring tool by MikroTik itself.
Quite - it sounds like the OP is trying to implement The Dude himself with scripts :-)
by troffasky
Sat Jan 23, 2016 1:19 pm
Forum: General
Topic: Is there DNS Issue in Microtik ?
Replies: 6
Views: 1476

Re: Is there DNS Issue in Microtik ?

The only way to know is to test it. There is no reason to test on your live system either, as there are plenty of ways you can mock up a config in a virtual lab. Assign a test client with a selection of DNS servers, then create ACLs to block access to each DNS server in turn, and see how the client ...
by troffasky
Wed Jan 20, 2016 3:43 pm
Forum: RouterBOARD hardware
Topic: Request: Natively manageable DSL modem
Replies: 1
Views: 1238

Request: Natively manageable DSL modem

Would like to see from Mikrotik a DSL device that can be managed from RouterOS with some kind of module in ROS itself - similar I suppose to the way that CAPsMAN manages remote APs, although really only for local devices. If it could be powered with passive PoE from a Routerboard that would be great...
by troffasky
Tue Jan 19, 2016 11:34 pm
Forum: General
Topic: 10Gbps Real Life Performance
Replies: 11
Views: 3820

Re: 10Gbps Real Life Performance

...which is certainly not a problem the underlying OS has [64GB on 32-bit x86].
by troffasky
Sun Jan 10, 2016 2:07 pm
Forum: General
Topic: Seemlingly Random High Temperatures
Replies: 8
Views: 3174

Re: Seemlingly Random High Temperatures

RB1100AHx2 and CRS125 in the same rack running the same software. Polling temperatures with SNMP. Most of the time the temperatures track each other pretty closely, but occasionally the CRS125 jumps up by about 40 degrees, and then back to where it was on the next poll. This is obviously not the rea...
by troffasky
Sun Jan 10, 2016 1:29 am
Forum: Beginner Basics
Topic: Fire Wall
Replies: 22
Views: 5468

Re: Fire Wall

In my opinion, you need get a professional in to come and have a look at your network. You aren't going to get this fixed via the medium of back-and-forth posts on a forum.
by troffasky
Thu Jan 07, 2016 10:40 pm
Forum: General
Topic: google dns wierd issues
Replies: 2
Views: 3186

Re: google dns wierd issues

I have been having issues at some but not all of my sites where the captive portal will fail because their default home page is at an https site mostly google.com. Not really sure what you can do about this if the client device doesn't trust you, ie you can't give them a fake certificate for their ...
by troffasky
Thu Jan 07, 2016 10:17 pm
Forum: Beginner Basics
Topic: Mikrotik Asterisk
Replies: 1
Views: 1797

Re: Mikrotik Asterisk

Most likely issue when trying to load balance voice is that you've registered with a SIP peer from one WAN but then the load balancing sends a subsequent connection [signalling or media] out of another IP. Try turning off the load balancing first and see if it's the load balancing or the NAT that's ...
by troffasky
Thu Jan 07, 2016 10:13 pm
Forum: Beginner Basics
Topic: DHCP - lease taken from wrong server
Replies: 5
Views: 2542

Re: DHCP - lease taken from wrong server

it's all default configuration
It isn't, because none of the IPs you've listed are the default.
by troffasky
Thu Jan 07, 2016 10:11 pm
Forum: Beginner Basics
Topic: how to hide ip from arp
Replies: 9
Views: 3836

Re: how to hide ip from arp

ARP is an essential part of IP + Ethernet networking, so no - unless you're prepared to create static ARP entries where required.

What is the security issue that you think a lack of ARP will solve?
by troffasky
Wed Dec 30, 2015 12:43 am
Forum: General
Topic: Protected RouterBOOT
Replies: 127
Views: 94817

Re: Protected RouterBOOT

Email support.

But really, economic problem won't be fixed with technical workarounds. If you aren't charging enough to cover your costs, Mikrotik cannot fix this for you.
by troffasky
Thu Dec 24, 2015 2:50 pm
Forum: General
Topic: puplic IP over PPPoE (via NAT) ?
Replies: 13
Views: 3555

Re: puplic IP over PPPoE (via NAT) ?

If the clients get internet access then it's probably not a routing issue. Is there any NAT involved? When a client browses to the web, what public IP do they get? If it's not NAT or routing then perhaps it's a firewall rule.
by troffasky
Thu Dec 24, 2015 12:01 am
Forum: General
Topic: PPPoE and the Zen network in the UK.
Replies: 7
Views: 4222

Re: PPPoE and the Zen network in the UK.

What settings were changed over those three days?
by troffasky
Wed Dec 23, 2015 3:58 pm
Forum: General
Topic: Firewall technique / idea - feedback?
Replies: 13
Views: 3750

Re: Firewall technique / idea - feedback?

I think perhaps the "backwards router" analogy has outlived it's usefulness. The thing that makes it work is the connection/state tracking. You don't have to use NAT to use state tracking.
by troffasky
Wed Dec 23, 2015 12:44 am
Forum: General
Topic: Firewall technique / idea - feedback?
Replies: 13
Views: 3750

Re: Firewall technique / idea - feedback?

What you're doing is eminently possible. Think about it - it's just like a "home" router plugged in backwards; your home router wouldn't allow any traffic in unless it's related to an outbound connection. "What you're doing" should have said "What you're trying to do"....
by troffasky
Tue Dec 22, 2015 4:05 pm
Forum: General
Topic: puplic IP over PPPoE (via NAT) ?
Replies: 13
Views: 3555

Re: puplic IP over PPPoE (via NAT) ?

Scroll up?
by troffasky
Mon Dec 21, 2015 10:11 pm
Forum: Beginner Basics
Topic: Data limit on LAN interfaces
Replies: 4
Views: 1712

Re: Data limit on LAN interfaces

this isn't something we will be managing proactively for the client
You wish!
If you can do it from the CLI, you can script it. If you can script it, you can schedule it. If you can schedule it, the router can do it itself.
by troffasky
Mon Dec 21, 2015 6:26 pm
Forum: General
Topic: PPPoE and the Zen network in the UK.
Replies: 7
Views: 4222

Re: PPPoE and the Zen network in the UK.

Does it go back to being slow when you put the routerboard back on?
by troffasky
Mon Dec 21, 2015 4:48 pm
Forum: General
Topic: Firewall technique / idea - feedback?
Replies: 13
Views: 3750

Re: Firewall technique / idea - feedback?

Any feedback on this method / firewall rule? (or maybe im "trying to force a square into a round hole" ?) thanks What you're doing is eminently possible. Think about it - it's just like a "home" router plugged in backwards; your home router wouldn't allow any traffic in unless i...
by troffasky
Sun Dec 20, 2015 9:38 pm
Forum: General
Topic: puplic IP over PPPoE (via NAT) ?
Replies: 13
Views: 3555

Re: puplic IP over PPPoE (via NAT) ?

OK, re-read your post, you were asking for 1:1 NAT :-) Well, if your customers start demanding actual public IPs, you know where to start anyway.
by troffasky
Sat Dec 19, 2015 4:19 pm
Forum: General
Topic: puplic IP over PPPoE (via NAT) ?
Replies: 13
Views: 3555

Re: puplic IP over PPPoE (via NAT) ?

Proxy ARP:

http://forum.mikrotik.com//viewtopic.php?p=2010 [just one of many threads about this]
by troffasky
Sat Dec 19, 2015 1:04 pm
Forum: Beginner Basics
Topic: Cap2n extended home network
Replies: 2
Views: 1105

Re: Cap2n extended home network

Use powerline adaptors? If you want to bridge cAP1 to the Cisco, the Cisco will need to support WDS. Generally speaking, WDS throughput halves per-hop [if you're using single-radio devices] so by the time you've done three hops, performance is going to suck. And that's without considering that, with...
by troffasky
Sat Dec 19, 2015 12:50 pm
Forum: Beginner Basics
Topic: Frequent bridged ADSL PPPoE disconnects
Replies: 5
Views: 2745

Re: Frequent bridged ADSL PPPoE disconnects

I have quite a few RB951's deployed with ECI B-Focus and Huawei HG612 DSL modems, with PPPoE being initiated from the Routerboard. I do not see the kind of behaviour you're describing. Not much help to you, I know.

I think your best bet is to turn up the logging and take it from there.
by troffasky
Fri Dec 18, 2015 11:15 pm
Forum: General
Topic: High Speed VPN - 100Mbps +
Replies: 25
Views: 24784

Re: High Speed VPN - 100Mbps +

Publicly available material about RB3011 CPU says it has crypto acceleration. Either public info is wrong or Mikrotik have chosen not to implement it at this point. You have to assume Mikrotik would implement it if they were able to.
by troffasky
Fri Dec 18, 2015 12:34 am
Forum: General
Topic: SNMP LTE signal strength
Replies: 16
Views: 13723

Re: SNMP LTE signal strength

Tried "print oid" in the relevant section of the CLI? I don't have an LTE-equipped device to test with, but some examples: [admin@LivingRoom] > /interface wireless print oid 0 tx-rate=.1.3.6.1.4.1.14988.1.1.1.3.1.2.6 rx-rate=.1.3.6.1.4.1.14988.1.1.1.3.1.3.6 ssid=.1.3.6.1.4.1.14988.1.1.1.3....
by troffasky
Fri Dec 18, 2015 12:24 am
Forum: Wireless Networking
Topic: 2.4Ghz 3x3 or 4x4 MIMO solution?
Replies: 8
Views: 4849

Re: 2.4Ghz 3x3 or 4x4 MIMO solution?

This 2 could work, anybody tried those? : http://www.compexshop.com/product_info.php/cPath/57_89/products_id/422 https://blog.linitx.com/mikrotik-routeros-6-16-released/ "This is the first release to include support for 802.11ac, using the QCA9880/9882 rev2 (-BR4A) wireless chipsets." htt...
by troffasky
Thu Dec 17, 2015 11:06 pm
Forum: Beginner Basics
Topic: CRS125 as in-house switch
Replies: 2
Views: 1314

Re: CRS125 as in-house switch

Pretty sure it works out of the box as a switch, at least on ports 2-24. Port 1 may be a WAN port.
by troffasky
Thu Dec 17, 2015 11:05 pm
Forum: Beginner Basics
Topic: Where do I put the IP, on the ethernet port or the bridge.
Replies: 6
Views: 1808

Re: Where do I put the IP, on the ethernet port or the bridge.

Soft bridge = create a bridge interface, add ports to it. Bridged packets traverse router CPU and switch chip to CPU link. master ports = do the switching on the switch chip. Packets going between ports with the same master are switched on the switch chip at wire speed. CPU does not see switched fra...
by troffasky
Thu Dec 17, 2015 10:54 pm
Forum: General
Topic: Join 2 Big Network and use Site 2 Line. Scheme in Attachment
Replies: 4
Views: 1402

Re: Join 2 Big Network and use Site 2 Line. Scheme in Attachment

Edit your obnoxiously large PDF to reflect your new addressing scheme, re-upload. It sounds like what you've ended up with is two L3 networks in one L2 network. This can be made to work but obviously you can only have DHCP server, for example. If you want 192.168.178.0 to be able to reach 192.168.2....
by troffasky
Wed Dec 16, 2015 11:23 pm
Forum: Wireless Networking
Topic: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?
Replies: 8
Views: 2174

Re: Mikrotik router as dhcp + ap from another manufacturer + Active Directory - how to authenticate?

It requires you use certificates...unless you tell the clients not to validate them: http://serverfault.com/questions/155760/is-it-possible-to-use-wpa-enterprise-mode-without-having-to-use-or-issue-certifi But I'm not sure how portable this advice is, ie, can you even turn this check off in all clie...
by troffasky
Wed Dec 16, 2015 2:27 pm
Forum: General
Topic: DNS syn flood
Replies: 6
Views: 3386

Re: DNS syn flood

I don't think the concept of SYN even applies to UDP traffic.
by troffasky
Tue Dec 15, 2015 5:38 pm
Forum: General
Topic: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?
Replies: 18
Views: 6041

Re: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?

So you suggest yes or no ?
Neither, because I don't understand your network topology, or how to you intend to use your switch(es).
by troffasky
Tue Dec 15, 2015 12:22 pm
Forum: General
Topic: WISP core router configuration
Replies: 14
Views: 5079

Re: WISP core router configuration

FSP-150 is basically a glorified media converter - fibre in, copper out. It's probably a little more complex than that in reality [eg allows BT to monitor the state of the circuit]. No, you can't have access to it, and it doesn't do anything at L3 [possibly not even L2 for that matter]. BT will mana...
by troffasky
Tue Dec 15, 2015 12:15 pm
Forum: General
Topic: mikrotik dns static host without dot
Replies: 2
Views: 1631

Re: mikrotik dns static host without dot

I have tested this on my router [RB951, 6.33.3] and it works as expected. Try testing from a different client or use a packet capture to see what query the client is really sending.
by troffasky
Tue Dec 15, 2015 12:33 am
Forum: General
Topic: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?
Replies: 18
Views: 6041

Re: How is CRS212-1G-10S-1S+IN for Fiber Ring Network ?

Switching will be wirespeed, anything that gets passed to CPU on this switch will not be [pay attention to "Performance test results"]. I am having a hard time picturing your topology, however. Where in your network would the switch(es) go? At each tower + the CO? The confusion is because ...
by troffasky
Mon Dec 14, 2015 6:17 pm
Forum: General
Topic: CRS226 - loop protect, how?
Replies: 13
Views: 5956

Re: CRS226 - loop protect, how?

Yeah, this seems to work for mitigating loops. Just wish I'd known about it a few days ago - I installed a CRS125 at a remote site and put everything into a bridge!

Is there any way to monitor the state of this, eg see which ports are hitting the limit?
by troffasky
Mon Dec 14, 2015 12:40 am
Forum: General
Topic: WISP core router configuration
Replies: 14
Views: 5079

Re: WISP core router configuration

At this moment i had complaints from a few customers that they cant access sony playstation's portal. I assume this has to do with the vlans. Is my thought correct so far? VLAN = method of segmenting a L2 network playstation portal = a website? a range of IP addresses? some specific TCP and/or UDP ...
by troffasky
Mon Dec 14, 2015 12:33 am
Forum: Beginner Basics
Topic: Zen in the UK
Replies: 2
Views: 1252

Re: Zen in the UK

by troffasky
Sun Dec 13, 2015 12:33 pm
Forum: General
Topic: Tool>Graphing cannot graph more than 2.1Gbit
Replies: 4
Views: 2035

Re: Tool>Graphing cannot graph more than 2.1Gbit

Sounds like 32 bit signed int overflow. Normally I would say "just use ifHCinOctets" because it's 64-bit but the built-in graphs don't give you this level of control. Yes, it sounds like a bug so log it with Mikrotik.
by troffasky
Sun Dec 13, 2015 12:16 pm
Forum: General
Topic: Dynamic i.e. automatically use address list by VLAN on one network with two DHCP servers?
Replies: 2
Views: 989

Re: Dynamic i.e. automatically use address list by VLAN on one network with two DHCP servers?

Are you expecting your tagged and untagged clients to end up in the same network [L2 broadcast domain]? If you've already separated them by VLAN then surely it makes more sense just to have two different networks rather than trying to bodge it with one network and different DHCP options.
by troffasky
Sun Dec 13, 2015 11:45 am
Forum: General
Topic: PPPoE and the Zen network in the UK.
Replies: 7
Views: 4222

Re: PPPoE and the Zen network in the UK.

Should be fairly straightforward, eg:

https://support.zen.co.uk/kb/Knowledgeb ... oyager-205

If you're lucky, you won't be restricted to an MTU of 1492:

http://forum.mikrotik.com/viewtopic.php?t=100918
by troffasky
Sat Dec 12, 2015 10:10 pm
Forum: General
Topic: CRS226 - loop protect, how?
Replies: 13
Views: 5956

Re: CRS226 - loop protect, how?

You can do this by putting the ports into a bridge, but unfortunately that means the CPU is handling every frame, which will lead to performance that is somewhat less than wirespeed [as CPU has 1G link to switch chip].
by troffasky
Sat Dec 12, 2015 9:55 pm
Forum: General
Topic: Join 2 Big Network and use Site 2 Line. Scheme in Attachment
Replies: 4
Views: 1402

Re: Join 2 Big Network and use Site 2 Line. Scheme in Attachment

NAT on the hAP interface connected to the powerbeam, use the hAP as the default gateway at site 1. This would fulfil the "only use second site line" bit easily enough. With NAT enabled, site 2 won't be able to see into site 1's network without [for example] port forwards on the hAP. Adding...
by troffasky
Thu Nov 26, 2015 11:52 pm
Forum: Beginner Basics
Topic: Another help me with L2TP/IPSEC proxy-arp...
Replies: 11
Views: 6931

Re: Another help me with L2TP/IPSEC proxy-arp...

I would start by checking NAT and access rules. As you have access to the web interface on the outside IP while you are connected with VPN, this should be simple enough.
by troffasky
Tue Nov 17, 2015 11:19 pm
Forum: Forwarding Protocols
Topic: Assign public IP's to computers in LAN
Replies: 10
Views: 4562

Re: Assign public IP's to computers in LAN

A router with an interface in each of two subnets and not doing any NAT is just about as basic as it gets. How have you configured your router? What troubleshooting have you done?
by troffasky
Mon Nov 09, 2015 11:44 pm
Forum: Beginner Basics
Topic: Isolating Guest WifI/wlan2 or wlan1
Replies: 9
Views: 3290

Re: Isolating Guest WifI/wlan2 or wlan1

Absent an appearance from chechito to expand on what he was saying, I'm going to carry on down the firewall rule path. Let's say your "modem" network is 192.168.1.0/24 and your "pub customers" network is 192.168.2.0/24, your RB2011 lives in each network and does NAT between them....
by troffasky
Sun Nov 08, 2015 12:18 am
Forum: General
Topic: Could not connect to [MAC] (port 20561) - timed out!
Replies: 7
Views: 24297

Re: Could not connect to [MAC] (port 20561) - timed out!

I have two RB751U-2HnD as WiFi bridge (Mikrotiks without ip-addresses)
Bridge work, but i can connect only to one Mikrotik!
Can you mactelnet from one to the other?
by troffasky
Sat Nov 07, 2015 7:03 pm
Forum: Beginner Basics
Topic: DHCP Relay
Replies: 15
Views: 26919

Re: DHCP Relay

Yes, it's possible to do what you've asked.
by troffasky
Sat Nov 07, 2015 12:55 pm
Forum: Wireless Networking
Topic: Great news ROS v6.33, wireless transfers over single stream TCP connections will have nearly double the speed.
Replies: 9
Views: 2844

Re: Great news ROS v6.33, wireless transfers over single stream TCP connections will have nearly double the speed.

When we will expect improvements for nv2 protocol? Why does it apply only for ac chips ''at the moment''? "Standard" protocol support would be implemented by chipset vendor in wireless chipset. NV2 would have to be at least partly implemented on CPU. So CPU is more of a bottleneck for NV2...
by troffasky
Sat Nov 07, 2015 12:23 pm
Forum: General
Topic: Add VoIP Support
Replies: 11
Views: 14512

Re: Add VoIP Support

Not sure about having an actual PBX built into RouterOS [because you can already do whatever you want with metarouters], but more options on the SIP ALG would be useful.
by troffasky
Sat Nov 07, 2015 12:13 pm
Forum: Beginner Basics
Topic: DHCP Relay
Replies: 15
Views: 26919

Re: DHCP Relay

I would also like to add VLANs to the STUDENTS interface and forward them to other switches and AP's (restrict traffic with firewall), but do not if it's possible. Are you still intending to use the same subnet on all these VLANs? If you want to firewall traffic at L2, check out '/interface bridge ...
by troffasky
Sat Nov 07, 2015 1:27 am
Forum: Beginner Basics
Topic: 2 Networks.
Replies: 1
Views: 791

Re: 2 Networks.

In what way would you like to 'see' the traffic?
by troffasky
Sat Nov 07, 2015 1:25 am
Forum: Beginner Basics
Topic: DHCP Relay
Replies: 15
Views: 26919

Re: DHCP Relay

Do you intend your Routerboard to actually do anything at L3? From your description it just sounds like you want to use it as an L2 device [ie a basic switch/AP].
by troffasky
Fri Nov 06, 2015 6:14 pm
Forum: Beginner Basics
Topic: About Cloud Core Router
Replies: 6
Views: 1804

Re: About Cloud Core Router

In some countries all service providers are obligated to log such data and keep it for few years ;)
Yes, I understand that bit. When I asked what the mechanism for this is, I was asking karincanet how does one log such data to USB in RouterOS.
by troffasky
Thu Nov 05, 2015 11:56 pm
Forum: General
Topic: Two RB493G, different S/N but same MAC address???!?!?
Replies: 6
Views: 2666

Re: Two RB493G, different S/N but same MAC address???!?!?

A simple "don't import MAC addresses" option when restoring backups would help immensely here. The "principle of least astonishment" doesn't seem to have much of a following at Mikrotik :-)
by troffasky
Thu Nov 05, 2015 11:52 pm
Forum: General
Topic: LPR/LPD Printing over VPN
Replies: 6
Views: 3039

Re: LPR/LPD Printing over VPN

It's been a while since I've seen this, but I seem to remember it being something to do with MTU or fragmentation. The fix was to replace the ancient [they only had 10M ethernet ports] Jetdirect print servers with something else.
by troffasky
Thu Nov 05, 2015 11:36 pm
Forum: General
Topic: router and switch on crs125
Replies: 1
Views: 782

Re: router and switch on crs125

Generally speaking the CRS125 is very flexible so it can handle almost any scenario you throw at it, so the answer is probably yes. However, I'm not entirely clear what you're asking for so I can't offer any specifics.
by troffasky
Thu Nov 05, 2015 11:14 pm
Forum: Beginner Basics
Topic: About Cloud Core Router
Replies: 6
Views: 1804

Re: About Cloud Core Router

Out of interest karincanet, what is the mechanism for point 1? What do you define as "user activity"?
by troffasky
Thu Nov 05, 2015 11:10 pm
Forum: Beginner Basics
Topic: Isolating Guest WifI/wlan2 or wlan1
Replies: 9
Views: 3290

Re: Isolating Guest WifI/wlan2 or wlan1

If I understand you right, you just want to use the RB2011 as an AP? To isolate wireless clients from each other, untick the 'default forward' box on the wireless interface. To prevent the wireless clients from being able to see anything on the "modem" network, you will need to create a fi...
  • 1
  • 2