MikroTik

parham

Thanks for ZT update, have a good weekend all.

*) zerotier - upgraded to version 1.14.0;

parham

Can you please update the Zerotier package if needed.

parham

Hi, can you update the zerotier package too please, the new Version is out 1.14.0

parham

!) rose-storage - moved SMB service in the RouterOS bundle;
!) smb - removed legacy SMB service (replaced with newer and faster ROSE SMB service);

Great move, now remove pptp and l2tp and create a legacy vpn package for it

parham

Hi all

Suggestion

Can you create new package with remove all old and not necessary protocols such as, rip, pptp, l2tp, ppp, …
Make it as small as possible to leave the room for more new package such as ZT on 16mb nands

Thanks
Parham

parham

This upgrade does not in any way free disk space. However, on a device which does not need to have wireless package, for example, CRS which do not run CAPsMAN, you know have separate wireless package. It is not a part of bundle any more. You can now uninstall it, and you will not only save disk spa...

parham

Hi support & Dev team I was hope to have more free space with 7.13 but its less. check the before and after, I use WAP R AC with R11e-4G. before update 14.5MB of 15.2MB 4% free Screenshot 2023-11-14 at 12.49.18.png after update 14.9MB of 15.2MB 2% free Screenshot 2023-11-14 at 12.54.43.png As a ...

parham

Also just as idea nice to see RB5009UPr+S+IN with 5G sim and NVMe slot for container or even Chateau 5G ax with nvme slot for container (One solution for all features) with better ARM 64 and more Ram. I start deploy CCR2116-12G-4S+ for some clients and running few container very powerful router but ...

parham

Read our latest newsletter and learn more about: - The most affordable CAT6 LTE CPE's so far (indoor & outdoor) - CRS310-8G+2S+IN - 915 Omni antenna for LoRa® -New #MikroTips and tricks - MikroTik DISCORD server - Your MikroTik setup submissions https://mt.lv/news114 Very nice job on Hap Lite l...

parham

Nice job Devs Please add the two request in the next beta:

1- update the Zerotier package to latest 1.12.1 (https://www.zerotier.com/blog/zerotier- ... se-1-12-0/)

2- add the ping to any ip in the route (ip route add gateway=x.x.x.x check-gateway=ping host=1.1.1.1 )

Thanks

parham

Hi Dev,

Thanks for your all hard work, I have two request:

1- update the Zerotier package to latest 1.12.1 (https://www.zerotier.com/blog/zerotier- ... se-1-12-0/)

2- add the ping to any ip in the route (ip route add gateway=x.x.x.x check-gateway=ping host=1.1.1.1 )

Thanks
Parham

parham

Very nice upgrade,
*) netwatch - added "src-address" property;

Please add the option to be able the ping IP for failover in route. example: check gateway ping 1.1.1.1 that would helps

parham

I think we have isuee with Letsencript the multi dns has problem:

progress: [error] could not resolve '01.abc.xyz,'02.abc.xyz,'03.abc.xyz'

Can't resolve the dns when is multiple with single the is no issue

parham

anymore info please for *) ovpn - added initial support for V2 data transfer protocol;

parham

good work all, please update the ZeroTier from 1.10.3 to 1.10.6

parham

Hi all,

why there is missing zero tier on Arm?!!!

channel: stable
installed-version: 7.7
latest-version: 7.8
status: zerotier-7.8-arm.npk missing, use ignore-missing or disable package(s)

I know I can use ignore but that is not my question.

Thanks

parham

Hi My both WAP R with ZT can't be upgrade due to missing zerotier package /system/package/update> download channel: stable installed-version: 7.6 latest-version: 7.7 status: zerotier-7.7-arm.npk missing, use ignore-missing or disable package(s) You can find zerotier package in all_packages-7.7 zip ...

parham

Hi

My both WAP R with ZT can't be upgrade due to missing zerotier package

/system/package/update> download
channel: stable
installed-version: 7.6
latest-version: 7.7
status: zerotier-7.7-arm.npk missing, use ignore-missing or disable package(s)

parham

7.7RC2 looks like has issue with container on x86, autoboot not working, and container permission issue please check the ticket no: SUP-101353, thanks

parham

Netwatch now has extended functionality for ICMP, along with new probe types for TCP and HTTP GET. More information can be found here: https://help.mikrotik.com/docs/display/ROS/Netwatch Thank all very nice Jon, just why you all not considering adding the from-src-address: or from interface option ...

parham

The initial goal is to develop a protocol to apply and monitor config, hence the question about needed features that this protocol should be able to do. I see, are you going to developing something like Meraki or Unifi as a controller? is Mikrotik planing to have some king of NGFW feature in future...

parham

And also please make this topic HOT as this is the one of the best feature you all come up with.

parham

I have seen several mentions of config files, config compare ... Do you suggest for the controller to operate as a configuration export uploader? yes and No, would be good if controller can do the backup of the correct config, can do compare between the versions of the config and it would be great ...

parham

1- firmware update. 2- configuration backup and compare. 3- Wireguard VPN generator for client side (a file that can be import to fireguard software). 4- site to site ipse vpn 5- network and wifi settings to any mikrotik in the same site 6- firewall rules and NAT 7- IPS IDS 8- sd-wan 9- geo IP locat...

parham

Hello, MikroTik is planning to develop and build a controller app for MikroTik Devices. Currently we are researching possibilities and options, what should be there and how it could be done and implemented. At the moment we do not want to stick to a specific implementation or standard, but build ou...

parham

Hi Dev,

can yo please add src.add for Netwatch and address for route ping check like below or even just cli please

/tool netwatch add host=a.b.c.d src.address=x.x.x.x

/ip route add check-gateway=ping address=x.x.x.x

Thanks
Parham

parham

Hey all,

FAO Developers

1- Can you please add Src-address in net watch.
2- Can you please add host ip in the route for check gateway ping.

Thanks
Parham

parham

I can see the fix for LTE in 7.2rc1 "*) lte - fixed packet forwarding on R11e-4G and R11e-LTE-US;" but why is not in 7.1.1 which is the important fix.

parham

Totally agree, V7 need to be go forward as it has lots of new features, Normis but I don't have backup now, as updated to 7.1 and LTE stop working. :) LTE works fine in v7, please make a separate post or contact support via our portal MikroTik support #[SUP-67963] also with 7.1rc7.rif and 7.1.rif a...

parham

You should only move to v7 if all the needed features are there. A decision was made, that we will not hold v7 release for much longer, because so many people can already use it, and it works great for 90% of users. People with specific needs for specific functions can then test 7.2 or next release...

parham

Stable means it has no known serious issues affecting large groups of people, like crashes. It does not mean there are all features you want. We continue to work on new features in 7.2 branch.

v6 is still stable and still available, it is not being replaced.

MikroTik support #[SUP-67963] Thanks

parham

No Internet on LTE after upgrade from 7.1RC7 to 7.1, the default route is in the routing table but looks like one-way traffic.
Router RBwAPGR-5HacD2HnD + R11e-4G_V007.
Already sent emailing to support with full detail and Support for both Version 7.1rc7 and 7.1 stable but no ticket number yet.

parham

On each peer use /32 for the assign IP and then check.

parham

FYI: For people have route setup in ZT and also have OSPF or BGP running and don't want to have the Route coming from ZT. Step 1: disable ZT zerotier/disable zt1 Step 2: disable the push route and IP: zerotier/interface/set allow-managed=no zerotier1 Step 3: set the interface IP should be the same a...

parham

MikroTik cloud service (mynetname) is back online. We are deeply sorry for all inconvenience caused. We are actively working on better failover plans to avoid anything like this in the future 🙏

Thanks 🙏 Mikrotik.

parham

It is a known issue, follow also our social media, to be up to date: https://twitter.com/mikrotik_com/status/1435138440870379521?s=20 domain is suspended because of abuse by user(-s) or bad actors, not because of forgotten payment. we are working with registrar to solve it. Thanks Normis, It would ...

parham

here too 1.1.1.1 and 8.8.8.8 can't resolve but 4.2.2.4 can.

parham

If you using Layer3 dns 4.2.2.4 all works, but google and Cloudflare have issue.

parham

Same issue here.

parham

One More feature request, can we have a 2FA (MFA) Please

parham

Would be great if we can specify the Distance for the routes as by default add it to the route table with Distance of 1 and if you are using it as a backup then you end up with Issue.

love to see zerotier/interface/ add network=xxxx instance=zt1 route-distance=xxx

Thanks all

parham

who had the "wonderful" idea of swap STOP and CLOSE buttons ??

i am accidentally closing many times because of that change

retunrning to 3.28 because of that

trolling-winbox.jpg

Super annoying, please reverse it back to the right way. Thanks 🙏

parham

MT just released ZeroTier to Arm base MT.

viewtopic.php?f=1&t=178063

parham

And OSPF works fine.

Screenshot 2021-08-31 at 16.37.29.png

parham

WOW, wonderful Job all.

parham

Well done MT, hope soon we install stable version.

parham

@sergejs just install RC2 on RB3011 and Cake and FQ_CoDel both stable used interface to interface and ip to interface both was fine.

Please add both root certificate for DigiCert Global Root CA and GTS Root R1 to the Kernel then we have DOH working too.

Thanks Mikrotik

parham

Would be great if Mikrotik can add just two CA root certificate in the kernel for the next release, with just two certificate (DigiCert Global Root CA and GTS Root R1) you can cover the DOH for 1.1.1.1 family, 9.9.9.9 and 8.8.8.8

Also would be great to have additional line for DOH not just one.

parham

You can always use Dude and do the update with that.

parham

Hey, I have wrote a script that will update it to latest its on the time you specify, happy for anyone to summarise it and use it. /system script add dont-require-permissions=no name=auto_upgrade owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":global...

parham

Hey Mikrotik, What a fantastic job on lets encrypt, well done. very easy to generate, just need few more tweaks, can you please add a name during the setup as each time its generate new file. something like: certificate/enable-ssl-certificate dns-name=vpn.abcd.xyz name=Certificate also it will be go...

parham

no needed found it:
certificate/enable-ssl-certificate dns-name=

parham

no way!!!
!) added support for Let's Encrypt certificate generation;

Documentation pleaseeeee.

parham

Definitely Yes for ZeroTier. please added to V7

parham

Hey 👋, as vmware has released esxi for raspberry pi, can we have CHR for that please.

parham

I think we as LONG time MT customers should ask and suggest to put more time and resources to development of V7 for the ARM and CHR and release a weekly or so beta and then when V7 became stable or in the LTS then start adding more devices in if it possible. And I'm sure changing for 16MB to even 1G...

parham

Exactly. WinBox and long software support is what makes RouterOS so great. I assume that I wouldn't be the only customer who would be seriously disappointed, if after just few years I'd have to choose between no new features and bugfixes, and throwing out perfectly functioning and otherwise suffici...

parham

Currently we are having issues with beta3 booting on TILE architecture. Beta3 will be available when we get these issues sorted out. ... just stop the Tile hardwares, even Mipsbe, Smips, and please no more 16mb and 128mb, providing cheap hardwares is ok but they you are going to spend more money to...

parham

but device software support should be the MAX 5years. I'm not opposed to what you wrote before, but that sentence made me cry. Sorry, but having a look on climate change and limited ressources of the world it should be MINIMUM 5 years for every hardware/software vendor. There is no reason to ditch ...

parham

Currently we are having issues with beta3 booting on TILE architecture. Beta3 will be available when we get these issues sorted out. ... just stop the Tile hardwares, even Mipsbe, Smips, and please no more 16mb and 128mb, providing cheap hardwares is ok but they you are going to spend more money to...

parham

Currently we are having issues with beta3 booting on TILE architecture. Beta3 will be available when we get these issues sorted out. Hi Emils, just want to say thanks to all in Mikrotik for the hard work, but I believe you guys making your life too hard by supporting all hardwares, there is a retir...

parham

RouterOS version 7.1beta2 has been released in public "development" channel! What's new in 7.1beta2 (2020-Aug-21 12:29): !) added "bgp-network" output filter flag; !) added bonding interface support for Layer3 hardware offloading; !) added IPv6 nexthop support for IPv4 routes; !...

parham

I would love to see HAP Mini2 with following as Im traveling alot and this make sense. HAP Mini2 CPU arm 64bit LTE modem international support (one sim is not more) Dual wifi (2g for connect to hotel wifi and 5g for AP) 5v usb-c or lightning And please Mikrotik more Nand as 16m is just not enough. I...

parham

Hey All,

Sorry to asking this questions, 1- can we get feature add in Netwatch for adding srcaddress or ping from interface, and 2- did the fix applied for IPSec mode config spilt subnet?

Thanks for all your hard work.
Parham

parham

Just installed it on RB450G, IKEv2 VPN throughput increased from 10M to 35M.

Thanks Mikrotik.
Parham

parham

WOW, Congratulation to everyone that find the workaround and spent lots of time, you all know what, there is a very easy way once for all, to Mikrotik release the native WinBox. have you guys had a sec to think about that too.

parham

You already have native Web interface. What's wrong with it? Many macOS native app will not be much different, just no browser. Is there any technical limitation for Mikrotik to create a native WinBox for macOS and Linux? If yes, then I will delete my comment, and if there is no limitation to devel...

parham

You already have native Web interface. What's wrong with it? Many macOS native app will not be much different, just no browser. It is nothing wrong with it, as I have mentioned, just for troubleshooting its not and never be as useful as WinBox. With WinBox you can have lots of windows open and have...

parham

In advance, I'll apologised for anyone find this comment defensive or rude, I just ty be honest. I never thought that one day as a Mikrotik fans I will post this, but so disappointed after over 10 years been used Mikrotiks, they did disappoint me to just relay on wine developers, they are using macO...

parham

Hi All,

I believe the SMNP v3 is broken, I have chaged all my device to 2c.

Parham

parham

Changed the your@domain.com to your reception email

:foreach i in=[/tool sms inbox find] do={
/tool e-mail send to=your@domain.com subject=[/tool sms inbox get number=$i phone] body=[/tool sms inbox get number=$i message];
/tool sms inbox remove $i;
}

parham

parham

In the last photo press the upgrade and then wait 5 sec then reboot.

You are running on 6.43.4 as ros, but the hardware firmware need to update too.

parham

just to stop the attackers, create a whitelist IP address for example call Support and the the raw firewall

/ip firewall raw
add action=drop chain=prerouting dst-port=22,80,8291 log=yes protocol=tcp src-address-list=!Support

parham

I just checked most of my Routers, all was ok (6.40.7), but one of them on 6.41.3 had too much attacked but I had rule to collect and block them, no login was established, I believed it a bug in 6.41.3 in firewall filter, I had a whitelist for inbox but looks like it wasn't working, or somehow other...

parham

Yes, i got firewall, but winbox port was exposed in the internet. From it the attack came. Interesting, and by any chance did you used admin as a user or it was changed? I think the best way is use whitelist and netinstall the Router. But before doing that send a supout file to mikrotik. And the la...

parham

Hi, do you have any firewall setting in your Mikrotik? You can have a white list ip address to access winbox, by just changing the port for winbox in the services doesn’t mean no one can try to connect to, as well as you can have a black list for the ip that login with login failure, if you don’t ha...

parham

Then CSS does the job, if you have budget go for CRS better cpu.
Also SFP+ can aggregate up to 10GB

parham

Ok, are they in the one single location ot 5 different locations?

If one then CSS is ok, CRS with SWOS is better option.

If you have 5 different locations then You need one CCR and one CSS or CRS, CRS in it own Is not enough for Routing and switching when you have 1GB or 10GB.

parham

I just confused, ospf, mpls, ... are routing protocols.

Can you please explain bit more about your network, all the above are available on CRS ( just to let you know, you CRS326 is dual boot, RouterOS or SWOS)

parham

CSS is Layer 2 switch with vlan, bonding, rstp,stp, ... support.
CRS is Layer 3 switch with all above features + routing, dhcp, vpn, ...

I have used both, my recommendation will be CSR, but if you have limit budget then CSS is good too.

parham · Re: 16/32/48 ports can't wait to get rid of the Netgear, Cisco switches

can't wait to get rid of the Netgear, Cisco switches

parham

ok, working on it
horray..

thanks MikroTik.
but no promises! I'm just saying we will consider the possibilities

https://mum.mikrotik.com/presentations/ ... 914661.pdf

Thanks for delivering no promises

, ETA?

parham

*) radius - increase allowed RADIUS server timeout to 60s;

Thanks, Guys.

parham

upgraded to 2.6
very slow performance on SFP+
downgraded to 2.4 performance much better.

parham

does the number really matter?

No at all, as much as ROS and SWOS get more improvements and more features thats matter, just a suggestion its a time to add one important feature, let's encrypt, its now necessary for https, ikev2, sstp, ... hope see it in next RC release.

Thanks.

parham

In iPad Safari terminal tab seems ok but won't bring the keyboard up. with out the keyboard can't do anything.

parham

I agree having a native version for MacOS would be really nice to have as I am sure if you do a poll to see how many OSX users there are more then you think. Meanwhile the Wine version which is floating around works quite well, most of the time. You have to remember a lot of us and organisations do...

parham

Thanks guys for Fix. Can we have MacOS version of WinBox instead of wine wrapper or ... emulators. Cheers Use Webfig. It is not a WinBox and never be. with win box you can do way more stuff in few sec and compare and check in web your view is very limited to one page. ROS have a lot good feature co...

parham

Thanks guys for Fix.

Can we have MacOS version of WinBox instead of wine wrapper or ... emulators.

Cheers

parham

This is a SpeedTest.net run over 3x device over L2TP+IPSec

CPU was increased by %24

parham

https://s24.postimg.org/icupa0zol/Screen_Shot_2016_12_14_at_17_41_47.png Since every vendor is already switching to ikev2, there is no practical benefit to invest development time for old l2tp/ipsec setups. I have just managed to stablished 3x l2tp over ipse behind a IP address to my vpn server rou...

parham

thanks for adding domain address list which is very helpful in 6.36, but as IT consultant company with over 50+ Mikrotik in client side Which works perfect, I have few client asking for user activity not for blocking just the are interested about what staff doing i can provide the some with Ubiquit...

parham

the RouterOS l7 feature has no "regex" included. You can write anything on your own. Inspect the packets with Wireshark and write your own regex. Inspecting packets just to block facebook is a bad idea. Use address lists, the new domain address lists. thanks for adding domain address lis...

parham

I don't know if anyone requested adding DPI or User activity monitor but anyway can we have this feature Please.

parham

Hi All,

After you removed the Dude agent package we have lot of problem and there is one option to put a computer in each site and install Dude on it,

if you can create the dude agent for Raspberry Pi then be a perfect alternative for Dude in Mikrotik.

Search found 96 matches