MikroTik

owsugde

saw this one on the wiki just now. super pumped for mikrotik to get into .bt finally. this will make implementation of long cable runs much less of a puzzle.

next we will need a compact outdoor device with .bt outputs.

owsugde

Install a AAA proxy in the middle (freeradius comes to mind) That seems like a good idea. Just looked up the proxy function in FreeRADIUS which I wasn't aware of. It should be doable using some combination of realms, domains and custom fields on the ROS side, and some Unlang conversion scripting on...

owsugde

Plenty other attributes that can be used, such as NAS-IP-Address ? Definitely, however the external service uses only Nas-Identifier and they likely won't change that just for me. I did ask, though So it's an unfortunate case of "hardcoded on both ends". Honestly it wouldn't be very hard ...

owsugde

Hello, is there any way to change the NAS-Identifier field that is sent through RADIUS hotspot requests? At first glance tt appears to be hardcoded to be the router identity, according to the ROS Wiki . I need to be able to control this somehow in order to run multiple different hotspots on the same...

owsugde

*) ovpn - improved system stability; Can confirm that the OpenVPN UDP issues described in https://forum.mikrotik.com/viewtopic.php?p=1024643#p1024643 have been fixed in 7.12, at least for me. So can we assume OpenVPN is in a state comparable to ROS 6 again, stability-wise? Every release after 7.6 h...

owsugde

OVPN stability is horrible for me as well. Two devices out of a big installed crashed completely (i.e. all interfaces down, watchdog failed to reboot, hard power cycle needed) a few hours apart. Selectively those two devices were running OVPN client, one on 7.8 (RB5009), the other 7.7 (wAP R ac with...

owsugde

Hello, I've noticed OmniTIK ac (PoE) boards have undergone a revision somewhere along the way such that the CPU is now able to run at 840 MHz. Is this recommended at all? Would stability likely suffer? As far as thermals I think the case has a lot of headroom. I'm thinking about using it on some of ...

owsugde

With the newest iOS app version (1.2.10) I'm being shown the "Secure your router by setting a password" screen with every login to any device.

And yes, I have in fact set passwords other than "admin".

owsugde

Before an upgrade: 1) Remember to make backup/export files before an upgrade and save them on another storage device; That would have helped me 0% here because the device got inacessible remotely. It still was responsive through the local net, though. All the bridges and ports failed to load after ...

owsugde

Updated an edge router at a client from 6.47.10 to 6.48.5, didn't show back up in VPNs (1 OVPN, 2 L2TP). Assuming it's crashed or worse. Have a backup, but not quite up to date... Building is closed for the weekend, will still drive there (40min) and try my luck through the admin WLANs. That's what ...

owsugde

*) wireless - improve regulatory compliance with DFS requirements;

Is there info on what has been changed with DFS a bit more precisely?

owsugde

*) fixed management access over SFP ports;

So is this the needed fix for the GPEN21 to behave more as a "3-port switch" (all ethernet ports and SFP bridged together), like everyone had expected?

Would be great, as I could remove an additional media converter.

owsugde

Ran head-on into the same trap today. Expected the GPEN21 to be basically a three-port switch, with one copper PoE in, one copper PoE out, and one SFP. Found out that ETH2 to SFP isn't switched at all, maybe even an undocumented combo port. Cool. The AP behind the ETH PoE is now isolated from networ...

owsugde

Somehow I managed to lose the short rack ear for a CRS112. Now it's "hanging" in the rack on only the long ear, showcasing a bad case of the physics of leverage. I've looked for replacements but it's not even that easy. MikroTik only sells RB4011 ears as "official" replacements p...

owsugde

Temperature and voltage sensors are gone in this version on Hex POE (RB960PGS). I had this too on some devices with that and similar boards, i.e. hEX PoE, Powerbox and OmniTik PoE (ac). Temperature showed -252°C right after update. It's working again after firmware upgrade (another reboot). Btw, th...

owsugde

For what it's worth, my w60G link of two 60G wAPs at ~205m is still considerably less stable on 6.47.7 (with the apparent improvements from 6.47.6) than it was on 6.45.9. Sure the range is basically maxed out here and it's not supposed to work perfectly anyway, but 6.45.9 really seemed to cope with ...

owsugde

- a table with quite some entries (firewall with > 200 rules, large connection table) - frequent updates (busy router where counters in the firewall or connection table are updating all the time) - holding down mouse button long enough so that updates come in that have to be displayed I think that ...

owsugde

Firewall and Bridge Filter rules lists are still misbehaving. As long as a rule detail window is open, the list itself will not let you drag and drop rules properly. When you're dragging a rule, it jumps to the very bottom of the list every second (on each window refresh). It seems to only happen wh...

owsugde

Almost identical indeed, except for the USB and Beeper ?

They even have the same bugs, e.g. PoE out power cycle not working.

I've always seen them as basically the same device.

owsugde

Perhaps this is already well-known, but I would like to know if a fix is possible for the non-operational "power cycle" option on devices based on QCA9550L, namely the hEX PoE, the OmniTik ac and similar devices. I'm not sure if it actually never worked or only hasn't worked for a (large) ...

owsugde

Found a small bug in the user interface, present in 6.45.9 and at least the one before as well. When you select "N/AC" as wireless band, under "HT" the fields for AMSDU settings get greyed out and aren't editable anymore. This is only the case for "N/AC", and just "...

owsugde

I did not have any issue updating two very differently configured CCR1009 either! It must be something particular to his config. I use many bridges as well. Sure not everyone seems to have this problem, otherwise we'd all be screaming right? Just saying take precautions, because for some installati...

owsugde

LOST ALL BRIDGES AND PORTS on update from 6.46.6 to 6.47. It's a CCR1009-7G-1C-1S+ (Tile 9 Core). Luckily I have another Internet uplink in that network, so I can reconfigure remotely. Will revert to 6.46.6 to check if settings are still there. Edit: In addition to bridges and bridge ports, Capsman...

owsugde

Ah yes, there it is. Thank you. Didn't know that list existed at all. Edit: Now I also know that all the 4-core ARM boards support it as well. Even a "lowly" cAP ac. Absolute (good) news to me. Checked with one of my small field installs that has a cAP ac as edge router (was sort of stop-g...

owsugde

I'm thinking about using the LtAP CAT6 (RBLtAP-2HnD) as an outdoor hotspot edge router for a temporary installation. Performance-wise (VPNs), it would be nice to have the same AES hardware acceleration as the newest hEX has, which has the same CPU/SoC (MT7621A). Is hardware encryption available on t...

owsugde

The window size should be stored in session file. Make sure you have autosave on or save the session before closing. It absolute does this, just not for all connections / remote devices. I wasn't able to isolate what actually causes this yet. Never happened before 3.22. Please test around a little ...

owsugde

Looking good so far! 3.22 seems to be the version 3.21 was supposed to be. DPI problems all but vanished, as far as I've seen yet.

Add: Well except the fact that if you reconnect, the window is always reset as tiny size and everything is smashed together. That's not so great a thing.

owsugde

owsugde - Is it possible that you are using a certificate verification feature which was introduced in this release? "ovpn - added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066)" I don't think this is it, because a cold reboot done by the customer "f...

owsugde

All I can say is be very careful with this update. I have rolled it out on some remote devices, and now, one isn't having ethernet connectivity at all (at the least) and the other isn't coming back up over OVPN. Can't say more about what has caused this in particular, yet. Probably will have to be o...

owsugde

It appears that UBNT is fighting the same problem (how to detect RADAR and not detect other pulses). The before-latest UBNT firmware introduces the same problem as MikroTik has had for years.... I had read that too. With the latest firmwares, my DFS detects went from zero to zero :D . Even if it ac...

owsugde

My biggest problem with MT wireless right now is the sensitivity of DFS detection. Even in relatively clear environments, I get far too many DFS changes each day. In urban settings with close device proximities and generally full spectrum, it just becomes ridiculous, with devices continually "d...

owsugde

Changes in this release: *) routerboot - fixed RouterOS booting on devices with particular NAND memory (introduced in v6.43); I suspect this fix to be incomplete, to say the least. Several of my wAP ac's in the field have become quite unstable, especially on reboots. Not sure if by .43.x or specifi...

owsugde

How could you think that 60g will work without clear line of sight? That's just wireless PHY basics. The smaller the wavelength gets, the penetrative wave properties decrease rapidly but the reflective ones increase. Think low/medium frequency ≈ broadcast radio (goes literally straight through the ...

owsugde

*) w60g - improved link stability;
*) w60g - improved maximum link distance;

Can anyone already quantify this in some way?

I'd like to know, because two NLoS pathways I tried were ever so slightly too far / too faint as of rc21/23. Maybe after some improvements they could actually work.

owsugde

Also got enticed to install rc17 because of features and fixes but then couldn't login. Old Winbox did work though. Thanks for the tip!

owsugde

Oh OK, I was under the impression that the problem was with updating from rc20 to rc24. Didn't know it was even worse than that.

owsugde

Installing 6.42rc30 from rc20 makes the RB3011 unbootable! See other descriptions of update bug.

Updated from rc20 to rc30, didn't boot back up. Resetting didn't do anything, so I had to netinstall back the stable. And that even only worked after three tries.

owsugde

6.42rc28 wrecked my CHR on libvirtd / Qemu KVM setup. Virtio network interfaces (or any interfaces at all) aren't recognized anymore. Do not install 6.42rc28 on KVM CHR! Still trying to salvage this thing, will write more later... Add: Just managed to get 6.41.2 installed. Had to get the stable pack...

owsugde

Just tried on current LEDE (former OpenWRT) release 17.01.4. The Linux kernel in there is of version 4.4.92. I have set up separate networks to route through, so that firewall gets active. WMM is enabled on WiFi and the following firewall rule is running on all packets: iptables -t mangle -A POSTROU...

owsugde

Well who am I to talk to Apple? I wouldn't even know where to write to. On the other hand, if MT could identify a problem here, they could either fix a potential bug if it's on their side, or they could maybe interact with Apple in order to get something going there. That said, I'm looking to try th...

owsugde

Did some more tests on a different device in a whole separate network. Same thing happens generally. I have some new observations to share, though. There seems to be some variability on which specific priorities cause problems. When AMPDU functionality is disabled , prios 1 and 3 seem to not work at...

owsugde

I've come across a very specific, but possibly quite critical problem with MacBooks connected as clients to Mikrotik APs with WMM enabled/required, running the latest ROS 6.41 (stable). The problem seems to be located somewhere in the interplay of the Mikrotik WMM implementation using priorities and...

owsugde

Nothing new really, still doing the ugly workaround. Haven't come upon a method to influence the DHCP's behavior yet.

Yes, the hotspot controller is set as DHCP authorative without delay.

owsugde

Not sure if this has been fixed yet in RC, but anyway, I need to report a (somewhat) critical bug with 6.39(.1): My Netmetal 5 (921UAGS-5SHPacT, the three chainer without PCIe) isn't able to use two transmit antennas anymore (say, chain 1 and 2, and not 0). All three is ok, only one is ok. With two,...

owsugde

I am having trouble with a specific detail of Mikrotik routers used as hotspot gateways. First some context: I'm running hotspot networks with a Mikrotik device as the main gateway. In a roaming environment with several access points bridged together, which is rather the norm, client devices sadly t...

owsugde

Yeah well, all mobile communications with moving terminals are severely affected (give or take, depends only on speed really) by Doppler shift, in particular Doppler spread. At least OFDM subchannels are flat-fading, so something will get through often enough. Even if the "orthogonal" part...

owsugde

For the receive part, I'm certain Mikrotik devices do feature spatial diversity gains for every receive antenna chain you activate, by making use of maximal ratio combining (MRC). You can check this happening quite easily in Winbox, Wireless -> Registration -> {radio name} -> Signal. Here, receive s...

Search found 47 matches