@Bungelos If you really think you have a RAT on your phone I would do the following: Run Wireshark, when only your phone is on the LAN. Run for 1min and then see what it finds. You'll need to compare this VS a Wireshark scan AFTER you've set the DNS to 9.9.9.9 & 1.1.1.3, this should start to cre...

1. Ability to rollback controller firmware / 2. Ansible / Terraform support would be nice! 3. Install as Windows app, Linux/OSX app, VM, Docker-compose container, Kubernetes compatible, Pi x64 & maybe even an Android/iOS mobile app. Many people have old phones/tablets lying around that could be ...

Thank you for your replies. @satman1w & @holvoetn mAP does not meet my requirements for LAN ports. Sadly it does not have 5Ghz and looks to be a bit out of date / old. Lastly, I already have newer, more powerful / feature rich units like the hAP2AC & 3AC. @Ca6ko - I understand that English i...

Depending what you are forwarding, you may be better off using Cloudflare to allow secure access, without needing to open any ports.

HI all, Compliments of the season & a happy new years to all! I'll be traveling soon and I'd like to have my own portable "router swiss arm knife" of sorts. One that is hopefully cheap (<$200) and in stock at reasonable pricing, if I do need to replace it. Here are my thoughts so far, ...

Thank you @mkx.

Removing all i-faces and adding Eth1-5 + WLAN1-2 gave me the result I want. Seem's like adding the bridge, breaks the config. I think this is a lack of understanding on my side, and not a bug.

ISP router -> Mikrotik -> Hub -> TP-link router's in AP mode or with DHCP disabled (is this correct?) I sadly can't help much with the MT config but I can give some advice as follows: 1) Office VLAN for office computers EG workstations / laptops. Maybe something like 192.168.10.0/28 , or /29-26 if y...

I'm running a HAPAc2 in station mode (working fine thank you again @Ca6ko), via a PoE injector (Eth1). My understanding is that by design this does not allow Winbox to see the router. There are currently no firewall filter rules (removed config and started from zero config). I do however have a /Fir...

Desired outcome - Allow any Eth port on my HAPAC3 to be plugged into an existing network and have the existing DHCP range be passed-through to whatever else I plug into the other Eth ports / connect to the Wifi of the HAPAC3. On more basic routers like Asus / Tp-link etc, this is accomplished by dis...

EDIT: I rebooted my HAP Ac2 and I do have internet on the LAN now :) DESPITE the bridge not being able to ping 1.1.1.1. Is this expected? I think if you want to test ping on your router, you should select the WAN interface. Bridge isn't able to ping 1.1.1.1 on my RB box as well. Thank you erlinden ...

EDIT: I rebooted my HAP Ac2 and I do have internet on the LAN now :) Thank you @Ca6ko. DESPITE the bridge not being able to ping 1.1.1.1. Is this expected? HI erlinden Yes I do (WLAN1 192.168.110.48/24) which is part of the hotels IP range. It displays the following: IP/ DHCP Server / Networks Gatew...

Thank you for your assistance Ca6ko. I've removed all entries under Bridge - ports & ran the commands you provided in the terminal. These are accepted as you can see in the export below. The bridge can no longer ping 1.1.1.1. As soon as I add the bridge, then the bridge can ping 1.1.1.1. Export:...

Hi there. I've tried to figure my way out of this issue, but no luck. Desired result - Internet -> Hotel Router (192.168.110.0/24) -> My HAP-Ac2 (172.16.1.0/24) -> my devices (wired) 172.16.1.10-20 WLAN1 = connected to Hotel Wifi in station mode. *** CAN ping internet*** ETH1 = PoE In via injector, ...

@msatter - Thank you for your reply. I did try username of "Admin" & "admin" with no password - same result - login rejected. 3rd party does not have the login details, nor do I or the client - this is under control of the ISP who provide and manage the router. I simply manag...

HI there, Q - How can I catagorically show a 3rd party + my client that the 3rd party was NOT able to log into one of my routers ? Background: An onsite 3rd party (instructed by client for non MT work) recently told a client of mine that via WinBox he can log into their (large) ISP provided, managed...

@anav & @ConnyMercier

Thank you for your input! In my panic I totally forgot about Netinstall *face palm*. I'll share this with the ISP in question & ask that they comply with an onsite Netinstall.

HI there, I was recently referred to a new client, during my initial inspection I noticed the Mikrotik (951Ui) was running FW 6.43.2 (Sep 2018). This is an ISP provided unit that seemed to escape the ISP's 6-month checks for quite some time.. They (ISP) have since updated the router (remotely) to on...

<t>Hi all.<br/> <br/> I know what I'd like to do, just not 100% sure if it can be done, hence the post.I'm new to VLANS and Mikrotik, besides some very basic AP/DHCP configs. I know what I want (I think :P ) <br/> Physical: <br/> Internet (100 down / 50 up) -> fibre cpe -> MT2011Ui-AS-RM -> other de...