MikroTik

CsXen

Hi. I have another problem with RB951... I use it since 3-4 years, and recently it started giving out power on ETH1 ! It fried my modem's gigabit ether port with the sourced 12V. The power supply limited output current to 1A, so modem didn't catch fire, but the port melt.. and died. Something went w...

CsXen

RB532 is upgradable to RouterOS7 (which is not even released yet, but anyway). If you will have problems upgrading to v7 when it comes out, email support and we will help you. Are you sure, Normis ? :) I can not upgrade now an original RB532 from v3.30 to v4.17 because "failed: The connection ...

CsXen

Hi. RouterOS version 6.45.7 has been released in public "stable" channel! !) package - accept only packages with original filenames (CVE-2019-3976); !) package - improved package signature verification (CVE-2019-3977); !) security - fixed improper handling of DNS responses (CVE-2019-3978, ...

CsXen

Hi.
You need and old router with big memory. Than you need to install 2 meta-router inside.

These metarouters can receive multicast streams, and convert it to unicast stream... one per metarouter.
Two metarouter, two streams.

Best regards: CsXen

CsXen

Hi.

So... now it's working as expected and the culprit for the 200 ~ Mbps issue was? Route cache disabled..

So, where, and how did you changed the route cache seetings ?

Best regards: CsXen

CsXen

Hi. Updated my RB2011. After upgrade, I must adjust scripts. In 6.40.9, the command: :local localIP [:pick [/interface pppoe-client monitor PPPoE-Digi as-value] 6;]; worked well. In 6.45.6, it waits forever. The correct line is: :local localIP [:pick [/interface pppoe-client monitor PPPoE-Digi once ...

CsXen

Hi.

Why, instead of whining, don't you just try?

I tried... I can't got over about 100Mbps on the Giga ports. I think, this is because bridge is as fast as the slowest port in it.
When current issue will corrected (150M max even with fasttrack...) I will try again.

Best regards: CsXen

CsXen

Hi. I'm using 6.44beta54 on my RB951G configured with... So.. your RB951 has 1 (one) switch chip, my RB2011 has 2 (two) different speed switch chip, and I can't do bridge the bridges. (1 bridge for 1G and 1 bridge for 100M ports instead of switching... and can't bridge this 2 bridges. :) In old time...

CsXen

Hi. Speedtest.net gives 150 down/22 up On our 2011 this is the scenario too. When I upgraded it to 6.40.9 because of winbox vulnerability, it slowed down to about 150/28 Mbps... on a 350/30 UPC ConnectBox modem. If I test the direct link without 2011, just PC->UPC... there is a full 350/30 speed. So...

CsXen

Hi.
Your post is in one sentence without punctuation. I tried to understand it.
What does it mean "locked" ? No winbox, ssh or webclient access ?
Than NetInstall will be your best friend.

Best regards: CsXen

CsXen

Hi.
If you can, try to switch on the packet sniffer, and log everything to and from your WinBox/API port.. and stream it to another machine to record it.
Probably it can be help to discover and resolve the problem.

Best regards: CsXen

CsXen

Hi. if you just connect the device to network and you don't care about config at all, it become a ticking bomb for the rest of the network Well... our good old RB532A's gets no security updates, because MT retired the MIPSLE branch. Not backporting any security update. And the latests release (6.33....

CsXen

Hi.
Same problem with 6.40.9.
Anybody knows any good news ?

Best regards: CsXen

CsXen

Hi. I googled the error.. and got this: "From some research on UK forums, it seems turning off the auto download of next episode, resolves the issue, as it appears to be some issue with the box itself and some internal clash with both activities, watching downloaded program whilst auto download...

CsXen

RouterBOARD 941-2nD 6.43.1, upgrade error 6.43.2 "not enough space for upgrade" several attempts same error, after erasing files(files empty) same error :( after attempt, routeros-smips-6.43.2.npk remains in files. reboot causes same error. deleted routeros-smips-6.43.2.npk file and reboo...

CsXen

But frankly, the only thing they really need to do to remain compatible with old config's is an extra package that restores masterports Why do you need master ports back? You get the same thing with a bridge NO ! If I have 2 swich chip in my RB2011, and one is 100M, another is 1G, I can make 2 indi...

CsXen

Did the user 'test' already exist? Yes, it exists (not "test", I changed the name to "test" for anonymizing purposes). Did you change the password of user 'test' or only 'admin'? Yes, every user has changed password. What rights does user 'test' have? Fortunately only "logi...

CsXen

Hi. I looked into some of our routers log... and found some strange activity. aug/25 17:52:12 system,info verified routeros-mipsbe-6.42.7.npk aug/25 17:52:12 system,info installed routeros-mipsbe-6.42.7 aug/25 17:52:12 system,info router rebooted [...] aug/25 18:16:47 system,info script removed by a...

CsXen

Hi.

No need to downgrade.
Why do you need two bridges?

Because one group is for 1G ports, and another is 100M ports. If they are in the same bridge, the slowest will be the overall bridging speed.

Best regards: CsXen

CsXen

Hi. i have router board 1100 x2 i change the boot setting to either-net now it's stuck at either boot ? i installed new software by net-install but still stuck on either boot Do you think ether-boot ? Do you have any device on your network, which support boot image to your router ? If not, probably ...

CsXen

Hi. We tried Mac telnet and same issue. Does anyone know if we hard reset device will it clear the backups stored on device? Hard reset did not erase FILES on RouterBoard NAND storage... I tried it yesterday on our RB750GL. :) (If hard reset is: pushing reset, while powering up to go back default co...

CsXen

Hi. I tried to downgrade an RB750GL from 6.42.7 to 6.40.9. After reboot, I lost connectivity to router. No winbox, no ssh, no mac-telnet, no nothing... No ping reply, no DHCP-serving on any ports. I must hard reset to wipe off my config. (Probably the hardware offloaded bridge...) After hard reset, ...

CsXen

Hi.

LAN hosts does not communicate with mikrotik

The mikrotik does not communicate with LAN hosts

Did your routes set propely ? Did your firewall rules set properly ?
Without config, we can guess only...

Best regards: CsXen

CsXen

Hi. You can see RX and TX testpoints on the router's mainboard (lower right area, near EJTAG and the wireless antenne): https://blog.ich8.com/wp-content/uploads/2014/08/RB951UI-2HnD-PIC-1.jpg Try to connect there over a proper level translator (probably 3.3V or 5V TTL levels there). If it works, you...

CsXen

Hi.
I simply downgraded to 6.40.9. This version still supports master/slave switch groups, and I can bridge the two groups then.

Best regards: CsXen

CsXen

Hi.

port scanner drop: 192.x.x.x:59842->192.x.x.255:20561.

I think, UDP20561 is your router MAC telnet port...

Best regards: CsXen

CsXen

HI. ... create one bridge with all ports in the bridge, i.e. Ports 2 to 10 ... And how to filter traffic, which belongs to one side (eth6-9) not to reach the eth2-5 side, if these are in one big bridge ? :) In old days, before "bridge with hardware offloading", I can did it, because these ...

CsXen

Hi.

@CsXen can you please give me a guide or something on how to boot into an OpenWRT image over tftp ?

Try to start here.
https://wiki.openwrt.org/toh/mikrotik/common

You will need some server with tftp and dhcp.
Best regards: CsXen

CsXen

Hi.

So if I want to change IP address, in my case I need to wait around 3 minutes.
How can I short that time?

Terminate the ovpn-session too, when you disable the ppp-out1.

Best regards: CsXen

CsXen

Hi. In an old days, I made two switched group (eth2-eth5 and eth6-eth9) on my RB2011. After this, I put the master ports (eth2 and eth6) into bridge. At this point, I could define some filtering between the two master port in the bridge. Nowadays I made two bridge, which contains eth2-5 and eth6-9 r...

CsXen

Hi.

i tried by replace power supply 5v 1a but nothing change

RB951 uses 12V or 24V power supply. 5V is not enough for it.

Best regards: CsXen

CsXen

Hi.
For a last chance, try to boot into an OpenWRT image over tftp, and try to find and recover your scripts/firewall settings/etc. phisically from the filesystem.

Best regards: CsXen

CsXen

I am trying to reset a 532a router board back to factory so I can access it. They recomended using netinstall so I am. However every time I try I am getting an error. bind tftp general failed: Please advise what I can do to resolve this error Try it with a very old netinstall, which has been releas...

CsXen

When will you backport this vulnerability patches to the mipsle branch ? I want to upgrade our RB532's, RB133's every time, when I read this security warnings, but no .npk available. :) The v5 releases are NOT AFFECTED AT ALL. Quote from first post: from 6.29 Don't forget, the last version was rout...

CsXen

Hi.
If you use secured VPN channel, nobody can see your real activity.

Best regards: CsXen

CsXen

Hi. There are some photos from my album. It was a temporary installation just for 4 days. IMAG6040.jpg It's a stable link (about 2 km) for a local television... from sport arena to head end. IMAG8419.jpg How to serve a 3store building with only one Mikrotik... some VLANs and some smart switches. :) ...

CsXen

Hi.

When will you backport this vulnerability patches to the mipsle branch ? I want to upgrade our RB532's, RB133's every time, when I read this security warnings, but no .npk available.

Best regards: CsXen

CsXen

Upgraded RB951Ui, no issues so far.

Best regards: CsXen

CsXen

Hi. I have an infected RB951 with firmware 6.32.4. I detected strange traffic on UDP/33549 port. In the packets some readable parts: d2:ip6:T.e.. .1:ad2:id20:..6i sQ.J.)......F|.g e1:t4:....1:q4:p ing1:y1:qe E..}.n@. 6.....O.T.e..... .i..d1:ad2:id20: .f.;6.......O.Q. S..N9:info_hash2 0:/......[.5.e....

CsXen

Hi Normis!
You wrote:

Upgrade to v6.38.5 or above should fix the issue and clean your system.

Can you tell me please, how can I upgrade my RB532A (mipsle) to this level ?

Please make a security release for those old, but perfectly working boards on mipsle!

Thanks and best regards: Xen

CsXen

Hi.
ChangeIP down again ? If I try to connect to their webpage, I get:
>Warning: mysql_connect(): Too many connections in /var/www/html/cip/includes/configuration.php on line 210 Could not connect: Too many connections

Best regards: Xen

CsXen

Hi. Any news on uploading any file with TFTP to MT-RouterBoard ? I see an option in WinBox, which says: Read Only. I unticked this, but I can't upload anything to the routerboard. Error message: "tftp,error ERROR code:6 string:file exists" So how should I configure my routerboard if I want...

CsXen

Hi. It will be nice to have an option to make color-able any log entry. For example, I wanna paint wifi log to green , ppp log to purple , interface log to cyan ... or to other color, so I can find then faster with an eyeblick. :) (I think, ANSI colors would be enough, but more color, more fun.) An ...

CsXen

Hi. It's an old topic... but I have port flapping issue on my RB750GL board. 02:10:45 interface,info Tunnel6-PMH link down 02:10:47 interface,info ether5-master link up (speed 100M, full duplex) 02:10:47 interface,info Tunnel6-PMH link up 12:33:04 interface,info ether5-master link down 12:33:04 inte...

CsXen

Hi. I know, that Mikrotik dropped the mipsle platform support... I know... but.. Please, backport two fantastic changes to mipsle, specifically to RB532. 1. WPS client mode. 2. EAP-PEAP-MSCHAPv2 Please, make a "routeros-mipsle-6.32.5" package with these features to make our old routers hap...

CsXen

Hi. I see some great news at https://forum.mikrotik.com/viewtopic.php?f=21&t=116357&p=593227&hilit=peap#p593227 Version 6.39rc68 has been released. Changes since previous version: (...) *) wireless - added PEAP authentication support for wireless station mode; I will test it in a week. :...

CsXen

Hi. I tried it for hours... but i concluded, that error handling works just for internal commands (which starts with : like ":resolv"), and not works for path commands (which starts with /like "/tool dns-update..." In the first case you can catch an error with on-error={} , in th...

CsXen

Hi. We had trouble with changeip.com. I saw, my script, which worked perfectly until now, aborts halfway to heaven. :) The offending line: :do { :put [ /tool dns-update address=1.2.3.4 name=xxx.changeip.net key-name=name key=key ] } on-error={ :put "error happened" }; I've got a "conn...

CsXen

Hi. I found a piece of information for you: (https://twitter.com/changeipcom?lang=en) >Tweets > ChangeIP.com ‏@ChangeIPcom - 2016. dec. 12. >Due to the size of the database, restore process is taking longer than anticipated and we are unable to provide a firm recovery time. > ChangeIP.com ‏@ChangeIP...

CsXen

Hi.
My simplest solution:

/ip firewall filter add action=drop chain=forward in-interface=all-vlan out-interface=all-vlan

Best regards: CsXen

CsXen

Hi.
The new RB750Gr3 ? If I read correctly, it has no switch, all ports connected directly to CPU...

Best regards: CsXen

CsXen

Hi.

Is the new RB750Gr3 metarouter-capable ? Or this router counts as multicore... and I should wait for ROs 7.x to support metarouter ?

Best regards: CsXen

CsXen

Hi.
Has anybody a working (almost current) OpenWRT image for MetaRouter with a working FFMPEG package for mr-mips platform ?
(Or a working samplicator package... it would be sufficient for me, to clone UDP packets to their destinations.)

Best regards: CsXen

CsXen

Hi.
>i need to start this, I have already went through mauals but i am getting troubles to make OpenVpn client working.

You want to use Mikrotik as a client ?

remote SITE_OF_3RDPARTY_VPN.com 1194 udp

Mikrotik isn't implemented UDP !!! You can use TCP only services.

Best regards: CsXen

CsXen

Hi. I upgraded to the latest version. it was a BIG mistake. :) In the 0.0.13, app started very fast, I pushed Connect and I'm in. In 0.0.16 I got an "Downloading plugins" line for about a minute... It isn't too cheap on mobile internet. And it seems not cached. If I tried again to log into...

CsXen

Hi. Should we ask NOT to DISCONTINUE the good old RB750GL version ? It has 128MB Flash HDD capacity, AND 64MB RAM. The new and "better" RB750Gr2 (hEX) has only 16MB Flash... for the same price. :) (I bought one on last week, but today I gave it back to the distributor and changed to RB750G...

CsXen

Can you give us any example ?

CsXen

Hi.
I think, in the red squared area you can see the impedance matching circuit for the PCB antenne.
With your resistance probe, you can guess the type of the white items. Low resistance -> inductor... very high resistance -> capacitor.

Regards: CsXen

CsXen

Hi. Simply switch off the distance readings in your list. It is just an estimated number, based on the round-trip delay of packets. If any packet comes in (lets say) 1ms late, that will estimated to 300km distance, because the speed of light in the calculation. :) So the number depends on the other ...

CsXen

Hi.

Version 0.0.12 Not working with ROS 5.26 , i can see in ROS logs "user admin logged in from .... via winbox" but on phone it shows connecting ...

+1. On my old RB112 with ROS 5.26, I see the same issue. Connecting... forever. I tried on ETH and over wifi.

Regards: CsXen

CsXen

Hi.
I think, your 4G provider didn't gave you a static IP-address. In this case, I recommend you any client/server configuration (PPTP, SSTP, L2TP, OVPN) connecting to the main site. Over that connection, you can create an EOIP tunnel.

Regards: Xen

CsXen

HI. Are you on fiber with DIR-100 ? If you can connect the Media Server to Mikrotik, you can use the DLink for gateway only (no DHCP enabled). In this case, put MTik's IP into DMZ, and make the remaining configuration in Mtik. If you can't, you should configure MTik as Switch (in hardware or all int...

CsXen

Hi.
OVPN on Mikrotik is TCP-only. UDP is not implemented! (yet... still...)

Regards: Xen

CsXen

Hi.
I can't see your firewall settings. Did you NAT-ed properly your wifi network? And you must set the default route, setup your DHCP-Server, DNS...

Regards: Xen

CsXen

Hi.
For fast result, I usually do an IP SCAN (form tools). Most client answers to PING.

Regards: Xen

CsXen

Hi. Today I tested successfully the multicast to unicast conversion. I tested it with the following method: bigbunny.ts -> FFMPEG -> udp stream to 239.20.1.1:1234 -> from PC to Mikrotik RB951U -> NAT rule chain=dstnat action=dst-nat to-addresses=172.16.5.250 to-ports=58000 protocol=udp dst-address=2...

CsXen

Try to connect to it with WinBox MAC-address method.

CsXen

Hi.
Did you tried it with WinBox software? It can locate your router on local network without correct setup, just on MAC-address.

Best regards: Xen

CsXen

HI. If I want to see the LOG, i get: "There are too many items to show them all. Please specify more specific filter." Nowhere can I specify filter. And I can't see any entries. I hope, this will be great app for managing MTik. :) Feature request: On the interfaces page, can you put the st...

CsXen

Hi.
You need something like this:

/interface bridge filter
add action=drop chain=input comment="Deny DHCP over Bridge" src-port=68 dst-port=67 in-interface=Bridge1 ip-protocol=udp mac-protocol=ip

Regards: Xen

CsXen

I am trying to setup the following: 3 networks: 10.160.250.0/24 - Public Network 10.160.251.0/24 - Private Network 10.160.252.0/24 - Front Network ... /ip address add address=10.160.250.0/24 interface=ether2 network=10.160.250.0 add address=10.160.251.0/24 interface=ether3 network=10.160.251.0 Chec...

CsXen

Hi. I see 192.168.10.102 twice on both clients. True, or just a mistake ? Can be this the cause of slowness ? (NanoBeam is not a slow equipment, I use it for streaming video on 6Mbps over 2km link.) I think, you should put the Ubi-s into transparent bridge mode (with different management IPs), so RB...

CsXen

Hi. do i have to go in and configure all the ports of each wireless device and port forward on main router seems a lot to do as i have 20 odd in network. No. You should confgure only the main router to properly portforward incoming connections to exact routers. (for example: 8292 to 10.0.0.2/8291, 8...

CsXen

Hi.

For each MT Router you must choose an external port (like 8292, 8293, etc...) In the main router, simply forward these ports to the inner routers IP address, to TCP/8291 port (winbox service port).

Regards: Xen

CsXen

Hi.
You should check your route table. Are correct (and default) routes set ?
Firewall ? Any filtering ? ICMP dropping ?

Regards: Xen

CsXen

Hi.
Thx Normis (and all) and Merry Christmas.

Xen

CsXen

Hi.
Sob, finally... You are the greatest.

(Why can't we found this on official MikroTik website?)
Anybody has troubleshooting manual for RB532(A)... like these ?

Regards:Xen

CsXen

Hi.

Signal: -61dB, S/N: 27dB. (61+27=88) The noise floor is -88dB ? Very noisy environment or antenne/cable/connection/radio card problem?

Regards: Xen

CsXen

Hi. ... it's funny to read this list of emails. Majority of them do not look like one time fake email addresses, see? Agree. :) ... you have to use your knowledge of microelectronics. I will. But I must reverse engineer first the board to do the best. :) ... have you ever seen any repair manual for ...

CsXen

Hi. It's so funny that otherwise so smart people are putting their email addresses here. What do you all expect? I expected the shematic and/or service manual. I have some RB, which isn't covered with guarantie and the power block is dead, so I want to try repairing them. The e-mail... :) It's a fre...

CsXen

Hi.
>Simply chain=input interface=ether1 src-address=31.216.144.0/24 doesn't do anything useful.

Because it' on forward chain I think. A web server reply, routed to you? Ask your provider to block unwanted traffic... and do a packet sniff to see, what is it.

Regards: Xen

CsXen

Hi.
Simply move the SSH service to another port (like 122, 2022, 8022...

). This will stop most of botnet-robots.

Regards: Xen

CsXen

Hi.
What will be the source of the KEY? FTP ? Uploaded txt-file ? Some variable set somewhere?
You can get the board license-key with:

:put [/system license get software-id ]

The rest is yours.

Regards: Xen

CsXen

Hi.
>howto you make it?

I can't. MikroTik still has NO option to choose PEAP authentication in station mode. Not in winbox, neither in CLI.
So still waiting...

(And using Ubiquiti, because it can make EAP-PEAP-MSCHAPv2 out of box!)
But any idea or hack appreciated.

Regards: Xen

CsXen

Hi.
Try to get any compatible (12 or 24V / 1A) adapter somewhere. (Alibaba or any cheap distributor...)

Regards: Xen

CsXen

Hi.
I asked for service manual in September... but nothing. Anybody got it ?

Regards: Xen

CsXen

Still waiting...
I need EAP-PEAP-MSCHAPv2 in station mode.
It is essentially to connect to the new UPC Wi-Free network with a MT Routerboard.

Regards: Xen

CsXen

I also need the repair manual and shematic. Pls. send me too.

yuzmi012@freemail.hu

Thx: Xen

CsXen

Hi.

>I want to trick the Server into thinking it is receiving proper DNS queries without actually giving it net access.

Redirecting relevant ports to your Linux server ? Or simply put your server IP into dns1, dns2, gateway... Then you can "fake" any response...

Best wishes: Xen

CsXen

Hi.

> 3 ;;; SMTP SBS
> chain=dstnat action=dst-nat to-addresses=192.168.0.250 protocol=tcp
> in-interface=ether1-gateway dst-port=25

Are clients coming from eth1 ?

Best wishes: Xen

CsXen

Hi. What is your port settings ? Try 10M / fullduplex / no flow crtl... But not a lucky thing to loop back a port to itself. :) Put there a realy cheap old home router, and if you can ping it... there is no power outage. (If you have serial port on you RB, in /port/stats you can read back the serial...

CsXen

Hi.
How / where can I disable this "warning", or where can I set the limit, where warning will be triggered ?
(Of couse there is an excessive multicast, IPTV IS on multicast

)

Best wishes: Xen

CsXen

Hi.
You can try to uninstall some unnecessary packages from /system/packages (and reboot). This will free up some space.
If you have enough space, you can downgrade.

Best wishes: Xen

CsXen

Hi.

Try disable the IPSEC package under /system/packages... then reboot...

See at: http://forum.mikrotik.com/viewtopic.php?t=88224

Best wishes: Xen

Search found 94 matches