MikroTik

floeff

Hello,

is that still state of the art, and does it work with VLANs? I'm looking to implement something like that.

Thanks,
Florian

floeff

Updated from 7.9.1 to 7.10.1. Worked well on 7x RBwAPG-5HacT2HnD (wap ac first gen) 1x CRS112-8P-4S 1x CRS226-24G-2S+ 1x CRS328-24P-4S+ 1x RBwAPG-5HacD2HnD (wap ac second gen) Did NOT work on 2x RBwAPG-5HacD2HnD (wap ac second gen) Did not have much time for debug, but device was not visible in RoMO...

floeff

Very simple setup here, PPPoE dialup, no production VLAN yet - updates on 4x RBwAPG-5HacD2HnD, 7x RBwAPG-5HacT2HnD, (all RBwAP with CaPSMAN), 3x CRS328-24P-4S+, 1x CRS226-24G-2S+ and 1x CRS112-8P-4S went well, no issues so far. Reluctant to update the CCR1009-8G-1S-1S+ yet due do the issues with DHC...

floeff

Hello,

apologies for a maybe stupid question, but I didn't find anything online:
Is it possible to deploy SSH keys with UserMan?
If not, would that be possible with another RADIUS server, or does RouterOS only support local SSH keys added on the device itself?

Thanks
Florian

floeff

I managed to chase down the problem a bit more, and it has - contrary to my assumption - nothing to do with 5 GHz or extension channels. It seems that when on wifi, my all Macs (10.14, not the recent Catalina) change their temporary IPv6 address in intervals ranging from 20 minutes to 3 hours, thus ...

floeff

Thanks, I will give it a try indeed.

floeff

Sorry for being a bit inaccurate - I am not disconnected from the wifi, there is just some packet loss, but that packet loss is enough to e.g. disconnect IRC. The wifi connection to the access point itself is up all of the time. It's also not related to my internet connectivity, as a ping to the rou...

floeff

Thanks for the fast reply! It seems that even with "XX" the connection drops every once in a while, as I've just discovered - but seems in much larger intervals (6 hours now vs. 1-2 hours otherwise). When you set the extention channel to XXXX can you confirm that unsupported channel appear...

floeff

Hello, I've been experiencing issues with packet loss only in a specific combination, as it seems: The device is a MacBook Air Late-2013 model, running macOS 10.14.6. The CAPs manager is a RB750Gr3 with RouterOS 6.44.5. As CAP client/access point, I've been trying both the cAP, as well as the wAP ac...

floeff

I'm experiencing something similar at the moment, and replied over at viewtopic.php?f=2&t=96720&p=739784#p739784

floeff

I'm experiencing something similar at the moment, and replied over at viewtopic.php?f=2&t=96720&p=739784#p739784

floeff

I can confirm this problem even with recent RouterOS 6.44.5, with a Sagemcom DOCSIS 3.0 modem. When the connectivity is gone temporarily due to cable operator outage, I need to explicitly release both IPv4 and IPv6 DHCP to get back connectivity. I'm currently playing with two scripts that could fix ...

floeff

One idea in case this really happens just without CAPsMAN: It sets a few defaults (e.g. WMM) that otherwise have to be set manually. Maybe it's related to that? Just a wild guess though...

floeff

Hello, is there any way to disable the system,error,critical login failure for user ... via ssh error message on the console, as it can be disruptive during configuration work? I know that I can remove specific topics from the echo message, but it seems all options are too wide and would filter out ...

floeff

I think I have a similar issue on my iPad 6th generation with iOS 12.1.1. I'm on RouterOS and RouterBOOT 6.42.10 with two wap AC access points running with CAPsMAN. The 2,4 GHz network works like a charm, but connected to 5 GHz, I get IPv4 and IPv6, signal strength is good, but data flows very slow ...

floeff

Hello, sorry for a maybe stupid question - but is it possible to completely unset log and log-prefix in a firewall rule? /ip firewall filter unset 6 log doesn't work, it always ends up with a input does not match any value of value-name Of course I can set the values to no and "" respectiv...

floeff

The main issue seems to have been addressed in recent versions

Maybe not - 6.40.5 seems to show the same issue; didn't test 6.41rc though

floeff

No problems on 3x cap 2n, 2x 951g-2hnd, 1x map lite and 1x ccr 1009. All from 6.40.4 to 6.40.5, with 3.41 RouterBOOT.

floeff

The main issue seems to have been addressed in recent versions However, today we had a power outage, and the modem and router both rebooted at the same time That particular cable modem needs 5-10 minutes after boot to hand out a IPv4 and IPv6; IPv4 gets a RFC1918 address until the "real" l...

floeff

Update worked like a charm on hEX, wap ac, CRS125, CCR1009, CRS226, RB951G and cap2n - thanks!

floeff

I might have hit a bug wrt. the bridge conversion. hAP lite, RouterBOOT 3.41, RouterOS 6.40. Device completely resetted, export only showed configuration of ether interfaces, nothing else (as intended). ether1 not configured further, ether2 not configured further. ether3-4 configured with ether2 as ...

floeff

Urgh - my bad, indeed, you're right. Sorry for the confusion!

floeff

Hello,

is there a reason that

/ip firewall filter print chain=forward

works like a charm but

/ipv6 firewall filter print chain=forward

is not implemented?

Thanks,
Florian

floeff

Hello, it seems that assigning an address of ::/64 to an ether interface makes Winbox not discover the device anymore. Manual connection via IP or MAC is possible though. If I use ::1/64 it works like a charm. Some documentation had the former sample, and you can end up with this if DHCPv6 client is...

floeff

Moving my configuration over to a fallback router that has no ethernet issues seems to show similar issues - so not sure if DHCPv6 in 6.40.1 isn't broken generally on first run.

floeff

Hello, I might have found a bug in the IPv6 DHCP configuration export order in 6.40.1 (didn't test with earlier versions). I exported via /export compact file=router.rsc Upon reimporting, however, the IPv6 DHCP server failed due to a missing prefix. The reason became clear upon inspecting the RSC fi...

floeff

Hello, I am currently migrating from one RouterOS device to another. While I can in general im- and export certificates, it seems that not all the flags are preserved. Upon re-importing to a new machine, the "Issuer" field was filled, but the "Issued" flag is not set. Not sure wh...

floeff

I can confirm that this happens on 6.41rc11

Thanks! I have to RMA my device due to a hardware issue, so not sure if I get a hand on testing before I send it to the distributor - so I'm glad you confirmed.

floeff

It seems that (at least on 6.40.1) when I run the DHCPv6 client to acquire a prefix, this fails with "error" in case the interface has issues when coming up, like late sync or issues with autosensing. DHCPv4 client retries until it gets an IP address, DHCPv6 client simply is stuck with &qu...

floeff

If you experience ethernet interface link speed issues with this RouterOS version, then please reboot router, reproduce the problem and generate supout file. Send this file to support@mikrotik.com and also give description of the problem - involved devices, cable description and what do you do in o...

floeff

I more and more think it's hardware-related.
I just put a switch in between the heX and the cable modem, and voilà, full sync with 1 Gbps

Putting off power from the device for an hour seems to have helped, having a sync with 1 Gbps again now.
Probably some short circuit/power leakage/creepage.

floeff

Maybe false alert, seems to be NOT related to 6.40.1. I had a chance to test with a friend's hEX. Worked reliably with 6.40, likewise with 6.40.1, both RouterBOOT 3.35. Thanks for the update ... I was too reluctant to go for 6.40.1 after your post ... now I may reconsider :) Anyways seems to me tha...

floeff

Cable modem only seen as 100 Mbps link now. It's being negotiated as 1 Gbps, stays up for a second, and after some tries falls back to 100 Mbps. Maybe false alert, seems to be NOT related to 6.40.1. I had a chance to test with a friend's hEX. Worked reliably with 6.40, likewise with 6.40.1, both Ro...

floeff

Updated from 6.39.2 to 6.40.1 on a hEX (RouterBOOT 3.35 before and after) Cable modem only seen as 100 Mbps link now. It's being negotiated as 1 Gbps, stays up for a second, and after some tries falls back to 100 Mbps. Old RouterOS logs confirm that previously it was 1 Gbps (I'm on a 200 Mbps line,...

floeff

Yep, it's correct.

> /system routerboard print
       routerboard: yes
             model: RouterBOARD 750G r3
     serial-number: ###
     firmware-type: mt7621L
  factory-firmware: 3.34
  current-firmware: 3.35
  upgrade-firmware: 3.35

floeff

Seeing quite a strange behaviour here: Updated from 6.39.2 to 6.40.1 on a hEX (RouterBOOT 3.35 before and after) Cable modem only seen as 100 Mbps link now. It's being negotiated as 1 Gbps, stays up for a second, and after some tries falls back to 100 Mbps. Old RouterOS logs confirm that previously ...

floeff

What should work (learned from MikroTik support) is to factory reset the device. If you restore the text backup (RSC file), the DUID is regenerated first time you use DHCPv6. Not sure what happens with a binary backup though.

floeff

Hello, I'd like to script initial installation of CAPsMAN. I setup the bridge, and then script to update all occurences of ether2 with the new bridge, e.g. /ip dhcp-server set interface=br-cap [find interface=ether2] That, however, doesn't seem to work for the firewall entries that become invalid as...

floeff

I also discovered a couple of

always-broadcast=yes

in my DHCP settings that were not supposed to be there, plus one

server=lan

that was missing. On these two, however, not sure if they had been in place before a previous upgrade.

floeff

hEX 6.39.1 to 6.39.2
Update killed my DNS settings that I did via

/ip dns set allow-remote-requests=yes servers=2001:4860:4860::8888,2001:4860:4860::8844,8.8.8.8,8.8.4.4

The servers were removed, which also blocked (or delayed) incoming SSH requests

floeff

I've changed my MAC address via /interface ethernet set ether1 mac-address= This new MAC seems to be used for the DHCPv4 client. However, for creating the DUID for DHCPv6, still the original MAC address is used. Is there any way to work around that? I need to change the DUID in order to get a new/la...

floeff

Thank you so much - I indeed did test from the terminal. Will have a look at the scripting feature!

Thanks a lot!

floeff

Thanks for the fast reply!
If WMM is on, that would be quite helpful, as this is what I seek for

Management Frame Protection would be nice as well with the "if available" setting, but not sure if CAPsMAN sets this...

floeff

Hello,

is it possible to simulate a keypress in a RouterOS script? I'd like to force a reboot in an upgrade script, but

/system reboot

always requires a "y" keypress. I checked the wiki, but didn't find any solution. I'm new to RouterOS, so bear with me.

Thanks a lot,
Florian

floeff

Hello, basic CAPsMAN configuration works for me like a charm, however it seems that certain settings cannot be done via CAPsMAN. From top of my head, I remember WMM Management Frame Protection that can be set in standalone APs, but not when managed via CAPsMAN. Is this on purpose, or is there any wo...

Search found 45 matches