MikroTik

effndc

To be fair, regardless of what "stable" means I'd expect firmware updates _not_ to brick my devices. Yes, but so do we expect for "testing" or "development" updates. However, it is for a reason that the release topic always starts with: Before an upgrade: 1) Remember t...

effndc

Bricked on 750gr3 on upgrade and one WAPac RBwAPG-5HacT2HnD. Had to recover both with netinstall, not what I expected on "stable" tree.

effndc

A better test would have been the TP Link EAP245. This is a wifi5 device like the capac but peforms way better and has a reasonable form factor. I have one in the house (and a 660HD - high and out of sight LOL) and one at the mother in-laws house all working very very well. Curious what aspects of ...

effndc

Interested in the TP-link test. The mods done are not very related, even DHCP is not. We know that "dtim" cannot be altered in ROS (fixed at 100ms) But nevertheless, Apple itself is very chatty. (Bonjour etc) - in registration table you should see the "Last Activity(s)" counter ...

effndc

Have you increased the dhcp lease time?

In this environment my lease time has always been 14-days since I setup my HEx years ago.

effndc

I've been trying to solve some really unusual rapid battery rundown on iOS devices for quite sometime, I just happened to realize that the battery life is phenomenal when I am away from my house and abysmal when I return. When I am at home and my iOS devices (multiple models, has occurred for multip...

effndc

So far my iPhone XS has been the most stable it has been on my WiFi network since disabling AC, and IPv6 has been working perfectly fine since the change as well (where I had my tunnel disabled since getting my XS).

effndc

Have you tried to see if it works using IPv6 with "ac" disabled on your WiFi radio (i.e. just 5GHz-A/N)? I don't recall if I had, I just tested it now and interestingly enough my wireless throughput is improved by 20% or more with AC disabled. Currently everything is "working" w...

effndc

I don't know why this forum seems to so inconsistently subscribe me to email notifications on replies. In my case, my iPhone XS refuses to use my network period if I have my Hurricane Electric IPv6 tunnel active. I don't know if it is some broken pMTU thing on iPhone XS, which is rather strange as m...

effndc

This problem gets even more unusual, as it really seems to be something about the IPv6 tunnel I have from Hurricane Electric. Which even makes less sense when it works over 2.4GHz.

effndc

I notice you don't have a country set for your wireless interface. You should set that, otherwise the interface may be able to select a frequency that is not allowed in your country and the phone may then refuse to connect. There are other potential issues, but that jumps out as a possibility. This...

effndc

I am seeing a really odd issue/conflict between the new iPhone XS and the Mikrotik WAP ac (RouterBOARD wAP G-5HacT2HnD) currently running 6.43.2. The iPhone XS does not work well with the Mikrotik on 5GHz, the problem seems worst on 80MHz channels (Ceee) and the absolute worst is in the higher frequ...

effndc

You don't include any detail on how your blacklists are created or maintained, what the source sample is to determine which sites should be blacklisted, etc. So why exactly would someone decide to pay you $60/year for a service with no specifications of what the service is? Especially when there are...

effndc

Did you check your firewall on Windows? It blocks many such systems from working, I don't use Windows so I can't provide much guidance on that specifically.

You can always try to reset the wAP to system defaults by holding the reset button: https://wiki.mikrotik.com/wiki/Manual:Reset_button

effndc

What are your settings for multicast helper? Chromecast and Airplay, AFAIK, both operate using multicast and you need "full helper" enabled to get it to work reliably in my experience (AirPlay).

effndc

A bridge is a OSI layer 1/2 thing, what you need is layer3 routing. You cannot bridge between subnets, you can only route between subnets. At the MAC layer perhaps your devices could communicate (e.g. ARP), however IP is a layer3 protocol. You either have to have the same subnet on both computers (w...

effndc

The configuration is probably pretty common for any WISP, you have a CPE (customer premise equipment) that connects to the service provider, and then you have the hardware that provides network services to the customer itself. Perhaps this will get you on the right path: https://mum.mikrotik.com//pr...

effndc

Why are you using 100.64.0.0/24? You should be using RFC1918 space, that is reserved IP space and could be in use by your service provider (where it is intended). Are you saying that the 186.124.238.xxx address is actually assigned to another device? I am not sure that will work, I believe you must ...

effndc

To simplify the client DNS, just use the Mikrotik as the DNS server that is used by clients. Obviously you can replace the IP addresses with whatever name servers you want, and you can use something like namebench to find the fastest options once you get your system working. /ip dns set allow-remote...

effndc

BTW, I won't speak to the legality/ethics of using "free" WiFi that you don't have a business relationship with. If you are truly permanently fixed in a location you could check into getting your own Internet service delivered, or you could volunteer some of your time to improve the servic...

effndc

I've actually been planning to do something similar, as WiFiRanger is ridiculously expensive for what it is...since I am a technical professional I can't justify the premium for their "make it easy" software. I think the hardware you have have selected is fine, since you are stationary in ...

effndc

Maximum ethernet default packet size is 1500-bytes, anything larger doesn't prove/disprove anything. When you add any tunnel, the end-to-end MTU size decreases (or is forced to fragment) as you are now having to wrap the full packet within another packet. Management access may also have additional f...

effndc

What other packages do you have installed and configured? I have Dude server running on mine and it hasn't been an issue in the 10-months or so I've had it. /system resource print uptime: 2d22h27m1s version: 6.40.4 (stable) build-time: Oct/02/2017 08:38:30 factory-software: 6.36.1 free-memory: 124.2...

effndc

Does your transparent proxy capture HTTPS or is it only applying to HTTP? Facebook and Twitter both primarily use HTTPS which doesn't work with all proxy configurations.

effndc

Please tell us what model of MikroTik router you have, as the configuration may vary somewhat depending on the mode the interfaces operate in. You may also want to post your "/interface export hide-sensitive" output and I am sure we can give more direct guidance. I have several SSIDs isola...

effndc

I can get 748megabits over a 60-second iperf3 UDP test, with some intervals being as high as 948megabits. This is with an older MacBook Pro and the WAP ac being on the other side of 1 wall, total distance of ~15'.

effndc

Easiest option is to edit the existing masquerade tool under Firewall --> NAT. Edit it to add a source IP address subnet of your network that you want to have access to the internet, so if you are using 192.168.1.0/24 you would put that into the Src Address field. This will only allow that address t...

effndc

You likely need to provide more info, start with telling us what model of access point you are using and then how that connects to the rest of your network. You may also want to include the configuration from your access point (run /export compact hide-sensitive). To make it easier when you paste th...

effndc

You are using invalid IP addresses on your network, you cannot use 192.0.0.0/8 and expect to reach the Internet with consistency. Github happens to use 192.30.x.x for some of their servers, perhaps other IPs in different regions. $ host github.com github.com has address 192.30.255.112 github.com has...

effndc

Either through firewall or NAT rule changes, you could configure that subnet with explicit allow destination list and then have a deny all to block access to anything not in the approved destination list...or you could look at your NAT policy and have it actually specify the allowed source subnets f...

effndc

Additionally, I don't see any troubleshooting steps that you've taken. Confirm you can ping each of these from routerOS, the Hurricane Electric Server IPv4 Address and HE Server IPv6 Address. From there you should try to ping some known web site's IPv6 address: google.com has IPv6 address 2607:f8b0:...

effndc

Autocompletion is provided by the shell (bash in this case) and the ROS shell isn't bash, so autocompletion doesn't exist other than for routerOS CLI commands AFAIK.

effndc

I assume your AP is directly connected to your HEx Lite so that you can actually pass VLAN tags. The untagged default/native network already exists, otherwise you wouldn't be able to access anything. You are looking to add a new VLAN for your guest network, so you need to create the VLAN on the swit...

effndc

My impression is that Winbox calculates that value based on last-link-up-time vs current time.

effndc

Any particular reason you are trying to IPv6 mangle? Your devices should all get native IPv6 addresses, NAT (mangle) shouldn't be necessary at all. Here is what I have for my IPv6 firewall: /ipv6 firewall filter add action=accept chain=input comment="Allow related&established" connecti...

effndc

Well I think I made some progress, one I didn't know that having Winbox open showing interface counters put such a massive CPU load on the boxes. That alone made a difference in bandwidth of transfers, I also stumbled onto this deck from Baltic Networks: http://www.balticnetworks.com/docs/802.11AC%2...

effndc

Just to make sure all things are the same as the last test (which was conducted a year ago) I reconfigured my AirPort Extreme and added it back to the hard wired network. if I connect to the AirPort Extreme on 5Ghz (channel 161) the client bounces between a Tx rate of 878Mbps and 1053Mbps and 1170Mb...

effndc

I am seeing really abysmal performance on my new Mikrotik WAP ac (RBwAPG-5HacT2HnD-US) units. I was using Netspot to create heat maps with active scanning to compare to my previous network (Apple AirPort Extremes) in order to finalize placement and noticed really low transfer rates using iperf3. Tra...

effndc

Thanks for the pointers. I guess I must have done something off the first try, this time I went ahead and followed that guidance with a few more steps. I created the bridge, added an administrative MAC (copy of ether1) and set a DHCP client on the bridge. I was then able to add ether1 to the bridge ...

effndc

I was working on this this weekend, what I did: Reset without configuration Configure wan1 & wan2 and enabled them Added virtual wan3 (bound to wan1) & wan4 (bound to wan2) for my guest vlan Put it all in one bridge. Ran into some disconnects but in the end it all worked. Do the clients rec...

effndc

Just to rule out the RC RouterOS as a problem I downgraded this back to the release build 6.38.1 I am able to get my VLAN10 and VLAN1003 segments to work, but not the one that corresponds to the default LAN (VLAN1) segment. The clients that connect to what should be VLAN1 get this error from the 750...

effndc

Thanks for the responses. Here is the 750gr3 configuration, I removed my static DHCP leases, firewall filters, netwatch configuration, and scripts for the ddns and maintaining the HE IPv6 tunnel and obfuscated a few other items. # feb/06/2017 09:17:15 by RouterOS 6.39rc20 # software id = ABD4-FNNE #...

effndc

I cannot figure out what I am doing wrong, I am taking two brand new WAP ac units (RBwAPG-5HacT2HnD-US) and just trying to configure them as a pure hard wired access point. I have tried to do this with CAPsMAN which never works either, so trying to configure it as a basic IP without CAPsMAN for now....

effndc

I had originally posted this to the Beginners Basics but perhaps that wasn't the right place, so I am posting it to Wireless Networking and deleting the other thread. I tried doing some searches, have tried a dozen different settings and I must be missing something. My setup is this, I have Internet...

effndc

So the public IP address is assigned to a PPPoE connection on the Mikrotik? Do you have firewall forward rules to accept the incoming connection? dst-nat only tells the system what you want the packets re-written to, it doesn't give it permission to actually forward the traffic. You likely need to a...

effndc

I am using the following rule with no results: /if firewall nat add action=dst-nat chain=dstnat disabled=no dst-port=30080 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.88.31 to-ports=80 You likely need to add an associated firewall rule above your forward drop rule, perhaps somethi...

Search found 46 matches