As you have multiple DNS servers added by having the DHCP client setting use-peer-dns=yes there is no control over which of the listed servers will be used. If the ISPs only permit DNS lookups from their servers via their connection you may well get lookup failures. The simplest fix is to set one o...

Hi, I have a really simple dual wan failover setup. Both ISP give dynamic IP, so I configured two dhcp client /ip dhcp-client add default-route-distance=1 disabled=no interface=ether1 comment="ISP1" add default-route-distance=2 disabled=no interface=ether2 comment="ISP2" So far, ...

Hello, I recently upgraded my RB2011UiAS-2HnD from 6.49.2 to 6.49.3 I have an L2TP server up and running but after the upgrade and proper reboot, all secrets were gone, just the secrets. Profile and L2TP configuration was ok after the upgrade. Everything else is ok. It wasn't that bad, because I had...

Thanks @gotsprings.
AP are far from each other. About 60-70ft one from another. It's a long building.
Didn't care about same channel

Will try to scan on every spot and change channels for each cap.

Hello. I have an office with some mikrotiks, just 20 people. Main router is a RB2011UiAS-2HnD (firmware version 6.48.1) with CAPsMAN enabled. This router has 2 ISP (50MB and 30MB) in a simple failover setup (different distances) CAPsMAN manage 6 AP: an RB2011UiAS-2HnD, two RB951G-2HnD and three RB95...

Hi, I'm kind of new and I still learning. I had 1 ISP, and this hairpin script that worked # this is the global variable holding the last known public IP :global HairpinPreviousIP ; # get the current WAN IP :local currentIP ; :do { :set currentIP [/ip address get [find interface=ether1-gw] address] ...

Ok, I think I got this. I set Channel 1 to all cAP through CAPsMAN. But some clients kept disconnecting. So I installed a cheap Wifi USB (TL-WN725) and disabled the main wireless device on every notebook with issues. Zero problem since! I think that those clients disconnecting have problem with the ...

Sorry, I should have said that I have latest firmware (6.45.3) on all 4 devices. To give a better picture of this scenary: The building itself is a FFF faraday cage. 90% of inner walls are steel frame (dry wall). The building has 3 floors, ground floor have Main AP (CAPsMAN) and 2 AP; second floor a...

Hi. I have running a RB2011 as CAPsMAN and three RB951 as CAP. I made two SSID: one for work and another for guests and cellphones (each one has its own dhcp server). DL0-1, DL1-1, DL2-1 and DL3-1 are the work network (master configuration) and DL0-1-1, DL1-1-1, DL2-1-1, DL3-1-1 are the guest networ...

Hi, try to connect via Winbox but over ethernet. If you mess up the wifi configuration you'll be unable to reconnect (been there, lol). Also (best) you can try to access using MAC address instead IP. On Winbox you have System -> Reset Configuration that should clear invalid configs. Next time it boo...

Ok, I got it working. As I don't need vlan for the corporative network (just for the guest WiFi) I added a bridge_vlan, assigned an IP, DHCP server and select that bridge for the slave configuration on CAPsMAN. Posting my config: export hide-sensitive # aug/19/2019 18:16:30 by RouterOS 6.45.3 # soft...

Hi everyone. I got running CAPsMAN on a RB2011UiAS-2HnD , there're three CAPs RB951Ui-2HnD . All four devices have latest firmware 6.45.3 Initially I have a single SSID, it's a corporative network. On the RB2011: /interface wireless # managed by CAPsMAN # channel: 2412/20-Ce/gn(20dBm), SSID: DL, CAP...

@CZFan Yeah... but I can access ONLY from my phone (a Xiaomi Redmi Note 4). Can't access from any other device (laptops, PC or phones of any brand) I have a very basic config on a really simple network (10.0.0.0/24 with 54 devices), no vlans, posted firewall rules. The website started to fail in jan...

Upgrade Ros to 6.41.1. 6.41 has bugs with pppoe mss connection. *) ppp - fixed change-mss functionality in some specific traffic (introduced in v6.41); Just upgraded to 6.41.1. No changes... still can't access website. Making a last test, I used an anonymous proxy: https://us.hidester.com Bingo! I ...

Something really, really, REALLY ODD is happening. Connected to Wifi, from my Android phone using Chrome App I CAN ACCESS this f***ing site. But I can't access from any laptop Linux/Chromium; Linux/Firefox; Windows/Chrome; Windows/Firefox; Windows/Edge; Windows/IExplorer; neither from a wired server...

Here are original fw rules (I XXX the forwarded ports), I disabled changes for mtu and mss: /ip firewall filter add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: accept established,related" connection-state=...

Thanks Alain. This site is part of town government. All citizen can access through main site: http://www.parana1.com.ar/afim/ (under SIAT, opens a new tab) Oddly I can access from same ISP (different service 8MB) and other ISP. I can access from my home. Any time. So, that IP is online always. I'll ...

Hi, I have an RB2011 (routeros 6.41) with two ISP: 1 is Cable (primary, 25MB always running) and another is pppoe but managed by ISP modem (secondary 3MB, using it just as backup) * I have a problem with only 1 website: http://186.153.139.115/siat/gde/AdministrarAuthClaveTramite.do?method=inicializa...

ok, got it working now. Found this on the forum: Hairpin & DDNS Thanks to docmarius for giving the answer I was looking for. So after several tries I got these rules working: /ip firewall filter add action=accept chain=input comment="defconf: accept ICMP" in-interface=ether1-gw protoco...

Thanks lazarosk, Nope, I haven't done that. But I found where was my mistake . These 2 rules prevent me to surf the web: add action=dst-nat chain=dstnat dst-port=443 protocol=tcp to-addresses=192.168.0.19 to-ports=443 add action=dst-nat chain=dstnat dst-port=80 protocol=tcp to-addresses=192.168.0.19...

Sorry, wrong document!
I always export and save as txt.
Fixed my first post.

I have some issues trying to get working 951G. ether1 gets dynamic IP from my ISP. I can access all local hosts (some server in my lan); I can ping internet domains (i.e. can ping 8.8.8.8 or google.com) but can't surf. I feel I'm missing something but can't figure what. These are my firewall rules: ...

Hello. I recently bought a Routerboard 951G-2HnD. I used defaults since it's for my home LAN, I need no fancy configuration. Just some port forwarding that I already know how to do it. I changed network segment from 192.168.88.0 to 192.168.0.0 Problem is I have no local name resolution. Maybe you ca...

Done! [admin@DL0] > /ip firewall export # aug/15/2017 16:00:38 by RouterOS 6.38.1 # software id = ****-**** # /ip firewall filter add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: accept established,related"...

Thanks pe1chl, RouterOS is 6.38.1. [admin@DL0] > /ip firewall export # aug/15/2017 15:21:08 by RouterOS 6.38.1 # software id = ****-**** # /ip firewall filter add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: acc...

Hi, I have a RB2011UiAS-2HnD firmware version 3.33 (I have an upgrade planned for next week) Recently I started to see several login failures on logs All attempts are from outside (not my lan 10.0.0.0/24): login failure for user root from 125.212.226.227 via ssh login failure for user root from 125....

Hi to all. This is my scenario: An RB2011UiAS-2HnD-IN configured as router (port 1 & 2 are for ISP, failover mode) and DHCP server an unmanaged TP-Link switch and some TP-Link routers configured in bridged mode (as AP). I have two smart TV that would use netflix/youtube (One over Wifi and anothe...

Ok, I think I'm in the right path. I used two domestic routers to simulate two ISP. I started with the default configuration. Reassigned ether2-master to ether4-master in bridge, and released ether2 & ether3 to run dhcp-client on both (I should have three ports for ISP) Also defined routes and m...

Hello. I have a TP-Link ER5210 router that lets me have two ISP as failover. It just does the job but it's a horrible piece of hardware. So I purchased a RB2011UiAS-2HnD-IN. As I'm a newbie with RouterOS and it's my first Mikrotik device, I'm a little (too much) lost. Connecting a single ISP was a p...