DHCP doesn't deliver an address for a gateway

toolongformt · Wed Jan 24, 2024 10:13 am

Router OS 7.13 doesn't deliver an IP address for the gateway to DHCP clients.
Same config on older version works.

Wed Jan 24, 2024 10:33 am

You may want to flesh out the circumstances a bit more or nobody is going to be able to help.

- what device are you referring to ?
- how is it integrated in the network ?
- what does the config look like ? (export config, no screenshots please).

toolongformt · Wed Jan 24, 2024 10:58 am

crs112, 7.13
nothing is integrated, just a standalone switch and a notebook attached.
Switch is new, config is basic and very simple. One IP address, a bridge, a DHCP server that delivers ip's, bound to the bridge.
DHCP pool and DHCP config are correct; I have a crs328 for my productive network and the same config, just different ip range.

My second post isn't published or something went wrong when I sent it: After 2 hours I finally got an IP for a gateway. It took only 4 lease times to renew.
Want to reduce that to 5 minutes, if possible...
And I'm not sure if I want to now why the 328 makes it fast and reliable, and the crs112 doesn't.

Oh, playing that DHCP game with version 6.x made it easier to win the battle.

Wed Jan 24, 2024 11:01 am

And I'm not sure if I want to now why the 328 makes it fast and reliable, and the crs112 doesn't.

Still not convinced it's not config related but since you don't show it ...

toolongformt · Wed Jan 24, 2024 11:17 am

I have checked the configs 1:1

/ip dhcp-server print detail:
name=DHCP-Server
interface=bridge
lease-time=30m
address-pool=pool1
auth=yes
use-radius=no
lease script is empty

pools are nearly identical, just the ip-range is different. They contain the network, gateway (in both cases it's the corresponding crs-IP), and a DNS-server entry.

bridges contain the ethernet interfaces the point to local network.
One difference: the 328 has internet-connect on port eth24
The crs112 doesn't run that way, it needs internet-connection on port eth1
Therefore the bridges contain the same interfaces, but without the internet-facing one.

Wed Jan 24, 2024 11:21 am

And dhcp-server network settings ?

Best to use /ip dhcp-server export
Then we see all config under that section (remove serial from the output, all MAC addresses on the leases and please post between [code] quotes for easier readability.

rextended · Wed Jan 24, 2024 11:41 am

viewtopic.php?t=203686

Since my CRS112-8G-4S (specified the model in full, since there are multiple versions of "crs112") with software and firmware version 7.13.2,
completely empty, except the dhcp-server, ip and pool configured, with a directly connected Asus laptop it works instantly,
For now I have 5 hypotheses:
1) Update RouerOS to 7.13.2 (if it already is, be more specific about which version you use), probably fix it.
2) It could be a defect in the laptop's Ethernet port (in laptops these new self-retractable ethernet ports are s–t...) or the CRS, or the cable used.
3) You have configured the device badly, but you still don't want to provide the export (export IS NOT print or screenshot),
which obviously is NOT enough just the DHCP part but also everything else related,
such as the IPs on the interfaces, the pools, the firewall rules, and any bridge rules, etc.
4) The internal configuration database is damaged and the device must be netinstalled.
5) You have the preconception that the problem is located "there" so we cannot help you on the forum, if there is no collaboration.

toolongformt · Wed Jan 24, 2024 12:41 pm

viewtopic.php?t=203686

1) Update RouerOS to 7.13.2 (if it already is, be more specific about which version you use), probably fix it.
2) It could be a defect in the laptop's Ethernet port (in laptops these new self-retractable ethernet ports are s–t...) or the CRS, or the cable used.
3) You have configured the device badly, but you still don't want to provide the export (export IS NOT print or screenshot),
which obviously is NOT enough just the DHCP part but also everything else related,
such as the IPs on the interfaces, the pools, the firewall rules, and any bridge rules, etc.
4) The internal configuration database is damaged and the device must be netinstalled.
5) You have the preconception that the problem is located "there" so we cannot help you on the forum, if there is no collaboration.

1 ) already done. I forgot to add it in my previous post, sorry
2) tried a lot of different devices (and also I have the problem with the wifi clients, but I wanted to leave that out for now, to reduce the problem) and cables - and I checked them with the 328, so at least I can exclude that
3) I can export, but the network on the crs112 is not connected to the internet. So it's a lot of work to transfer the data to the notebook, bring the notebook to the location where I have internet,... but here it is:

/ip dhcp-server
add address-pool=pool1 interface=bridge name=DHCP-intern
/ip dhcp-server network
add address=0.0.0.0/24 dns-server=0.0.0.0 gateway=0.0.0.0 netmask=24
add address=192.168.21.0/24 dns-server=192.168.21.254 domain=g21.local gateway=192.168.21.254 netmask=24 ntp-server=192.168.21.254

The line with address 0.0.0.0 is new this morning. I have no idea where it comes from.

4) Delivery was on Monday (new device, unused). Yesterday I configured the device for the first time. And instantly internal config could be damaged? ok... well, I cannot exclude it
5) my experience with mikrotik is, that some things begin to work after some reboots, some de- and reactivate, some reset and replay the saved config,...

Also I don't understand, that the crs112 accepts its internetfacing port only on eth1. With eth8 it's not working. Though the rest of the config was adapted... But this is no important.

And my crs112 is also the CRS112-8P-4S, revision 2

rextended · Wed Jan 24, 2024 1:30 pm

3) Remove that line on dhcp-server network.
Most likely that is exactly the problem, but I don't rule out anything else because obviously, it's just a small piece of the configuration.

4) If you don't write things down, we don't know them.

5) Instead my experience, since 2007, with the exception of some buggy RouterOS versions, is that if I configure it that way, that way it stays and works as I expect, always.

rextended · Wed Jan 24, 2024 1:33 pm

Also I don't understand, that the crs112 accepts its internetfacing port only on eth1. With eth8 it's not working. Though the rest of the config was adapted... But this is no important.

I'm sorry, but objectively it's definitely a configuration error on your part.
As 0.0.0.0/24 came up in one point, there is certainly something else that is wrong or that you haven't considered,
because you think that your consideration, compared to everyone else on the forum, is enough to do things right.

toolongformt · Wed Jan 24, 2024 2:44 pm

well, yesterday this line (to 3.) ) was not there.
I've deleted it and restarted the device.
Now the router has lost all routing information. It got an ip address on the internet-faced port (eth1), but I cannot ping its gateway (no route to host).

rextended · Wed Jan 24, 2024 2:47 pm

It is true, goto point 4)

The internal configuration database is damaged and the device must be netinstalled.

If the problem persist, ask RMA from your distributor.

Wed Jan 24, 2024 2:52 pm

Obviously the problem is with your config or other parts which you are not telling us but since you refuse to show it or reveal the complete context, you can not expect others to solve your problem with only crumbles for information.
Since you know how to show only bits and pieces, one would expect you also know how to solve this problem, no ?

If you want us to help you, you have to help us to help you. You have to ALLOW us to help you.

Educated guess: did you make backup on that old device and imported it on the new one ?
If so, NEVER do that again.

Anyhow, netinstall and start over.

toolongformt · Wed Jan 24, 2024 4:03 pm

it's not a config from another device. As I said, the device and the config is brand-new, based on my little experience with my crs328.

/interface bridge
add admin-mac=48:A9:8A:B5:C3:2A auto-mac=no comment=defconf name=inside vlan-filtering=yes
add name=outside
/interface vlan
add interface=inside name=vlan1-LOKAL vlan-id=1
add interface=ether1 name=vlan99-INTERNET vlan-id=99
/caps-man datapath
add bridge=inside name=datapath1
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=security1-abcde12345
/caps-man configuration
add country=germany datapath=datapath1 installation=any mode=ap name=cfg1 security=security1-abcde12345 ssid=G21
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=pool1 ranges=192.168.21.101-192.168.21.130
add name=dhcp ranges=192.168.21.101-192.168.21.150
add name=vpn ranges=192.168.89.2-192.168.89.255
/ip dhcp-server
add address-pool=pool1 interface=inside name=DHCP-intern
/port
set 0 name=serial0
/ppp profile
set *FFFFFFFE local-address=192.168.89.1 remote-address=vpn
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg1 name-format=identity
/interface bridge port
add bridge=inside comment=defconf interface=ether2
add bridge=inside comment=defconf interface=ether3
add bridge=inside comment=defconf interface=ether4
add bridge=inside comment=defconf interface=ether5
add bridge=inside comment=defconf interface=ether6
add bridge=inside comment=defconf interface=ether7
add bridge=inside comment=defconf interface=ether8
add bridge=inside comment=defconf interface=sfp9
add bridge=inside comment=defconf interface=sfp10
add bridge=inside comment=defconf interface=sfp11
add bridge=inside comment=defconf interface=sfp12
add bridge=outside interface=ether1
/interface bridge vlan
add bridge=inside untagged=ether2,ether3,ether4,ether5,ether6,ether7,ether8 vlan-ids=1
add bridge=outside untagged=outside vlan-ids=99
/interface l2tp-server server
set enabled=yes use-ipsec=yes
/interface list member
add interface=ether1 list=WAN
add interface=inside list=LAN
/ip address
add address=192.168.21.254/24 interface=inside network=192.168.21.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
# DHCP client can not run on slave or passthrough interface!
add interface=ether1
/ip dhcp-server network
add address=192.168.21.0/24 dns-server=192.168.21.254 domain=g21.local gateway=192.168.21.254 netmask=24 ntp-server=192.168.21.254
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall filter
add action=accept chain=input dst-port=53 protocol=udp src-address=192.168.21.0/24
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (outside)
add action=masquerade chain=srcnat comment="masq. vpn traffic" out-interface=ether1 src-address=192.168.21.0/24
/ip route
add check-gateway=ping disabled=no dst-address=0.0.0.0/0 gateway="" routing-table=main suppress-hw-offload=no
#error exporting "/ip/ssh" (timeout)
/ppp secret
add name=vpn
/system clock
set time-zone-name=Europe/Vienna
/system identity
set name=G21-Mikrotik
/system note
set show-at-login=no

Amm0 · Wed Jan 24, 2024 4:13 pm

The line with address 0.0.0.0 is new this morning. I have no idea where it comes from.

Underlying issue is QuickSet. It had a bug in old versions that created a dhcp-network with 0.0.0.0 instead of the subnet from ether1. So I suspect OP changed the IP in QuickSet, which created the 0.0.0.0. Since upgrade does not change the default configuration that was already applied, the 0.0.0.0 bug from old version remain in the new config.

rextended · Wed Jan 24, 2024 4:16 pm

One example:
Upgrading from 7.12 to 7.13.2 and do a reset-configuration disk space is 7% free.
Netinstalling directly the 7.13.2 disk space free is 9%...
Something is left regardlessly the "reset"...

toolongformt · Wed Jan 24, 2024 4:25 pm

One example:
Upgrading from 7.12 to 7.13.2 and do a reset-configuration disk space is 7% free.
Netinstalling directly the 7.13.2 disk space free is 9%...
Something is left regardlessly the "reset"...

puh, netinstall...

toolongformt · Wed Jan 24, 2024 4:37 pm

One example:
Upgrading from 7.12 to 7.13.2 and do a reset-configuration disk space is 7% free.
Netinstalling directly the 7.13.2 disk space free is 9%...
Something is left regardlessly the "reset"...

we can forget netinstall.
It says "no package included".
I used the 7.13.2 for mips

rextended · Wed Jan 24, 2024 4:40 pm

It says "no package included".

Better you read the netinstall guide: If you don't download the packages and select on the netinstall the right folder, how do you install them?

toolongformt · Wed Jan 24, 2024 4:44 pm

It says "no package included".
Better you read the netinstall guide: If you don't download the packages and select on the netinstall the right folder, how do you install them?

I follow the guide! Exactly!
But the result is different. Where the manual shows how to load a package, my downloaded file from mikrotik is not a valid file for netinstall.

I browse for the folder containing the image, but the list of sets is empty.

If I wasn't to lazy I would throw the whole hardware into the recycle bin. The way to get a new device up and running is unacceptable long...

rextended · Wed Jan 24, 2024 4:50 pm

(see my next post)

Wed Jan 24, 2024 4:51 pm

If your GPS says "turn left here" but on your left is only the river ... do you take the turn ?
I hope not.
Sometimes we have to think and adapt based on what is available and what needs to be done.

Show EXACTLY which netinstall guide you are following.
Which packages (list EXACT name and extension) are you trying to feed into it ?

toolongformt · Wed Jan 24, 2024 4:54 pm

If your GPS says "turn left here" but on your left is only the river ... do you take the turn ?
I hope not.
Sometimes we have to think and adapt based on what is available and what needs to be done.

Show EXACTLY which netinstall guide you are following.
Which packages (list EXACT name and extension) are you trying to feed into it ?

https://help.mikrotik.com/docs/display/ ... %22BOOT%22.

toolongformt · Wed Jan 24, 2024 4:56 pm

If your GPS says "turn left here" but on your left is only the river ... do you take the turn ?
I hope not.
Sometimes we have to think and adapt based on what is available and what needs to be done.

Show EXACTLY which netinstall guide you are following.
Which packages (list EXACT name and extension) are you trying to feed into it ?

The manual says, I have to find the switchport where netinstall will run. Sometimes it's this port, sometimes another. I just try to figure out which one is the best port here...
The manual says, often it's labeled "boot". Not here. I have to "think myself". Aka "try myself"...

rextended · Wed Jan 24, 2024 4:58 pm

What you have made clear about yourself is sufficient.
I'm sorry, but before I get banned for what I could answer you, I better stop writing on this topic.

Addendum: Exact words

https://help.mikrotik.com/docs/display/ ... troduction

In short, the Netinstall procedure goes like this: Connect your PC directly to the boot port (Usually Ether1, the port labeled BOOT or as otherwise indicated in the product manual) of the device you will be reinstalling.

MikroTik devices are able to use Netinstall from their first port (Ether1), or from the port marked with "BOOT".

toolongformt · Wed Jan 24, 2024 5:05 pm

Addendum: Exact words

https://help.mikrotik.com/docs/display/ ... troduction

In short, the Netinstall procedure goes like this: Connect your PC directly to the boot port (Usually Ether1, the port labeled BOOT or as otherwise indicated in the product manual) of the device you will be reinstalling.

MikroTik devices are able to use Netinstall from their first port (Ether1), or from the port marked with "BOOT".

nothing is labeled boot. And booting from ETH1 doesn't show the device in netinstall.
I tried that 3 times now, the last time I hold the button several minutes, as the manual says "hole button until the device shows up"... but there's nothing coming up.

And I know, Port 1 is on the left, lower row

toolongformt · Wed Jan 24, 2024 5:15 pm

What you have made clear about yourself is sufficient.
I'm sorry, but before I get banned for what I could answer you, I better stop writing on this topic.

Addendum: Exact words

https://help.mikrotik.com/docs/display/ ... troduction

In short, the Netinstall procedure goes like this: Connect your PC directly to the boot port (Usually Ether1, the port labeled BOOT or as otherwise indicated in the product manual) of the device you will be reinstalling.

MikroTik devices are able to use Netinstall from their first port (Ether1), or from the port marked with "BOOT".

I wouldn't have any problem with that

it's far from what I think about the troubles I have with this "situation"... Day 3 just to get a DHCP working ... finding out that an upgrade is not useful, hearing that there was a bug, making the experience that netinstall isn't working at all,... Believe me, I'd rather throw those pieces into the recycle bin and buy something "easy" ... a Cisco ASA 5508, a Catalyst 2960X,... I manage those devices for a decade now and never had troubles with firmware or manuals... By now I wanted to learn something new, and my hope was to save money...

Amm0 · Wed Jan 24, 2024 5:29 pm

Boy that went south. Anyway.

I just do NOT see netinstall as being particular important here. If you want to use it, it's easier to from Linux IMO, since there's just less steps in setup.

If you used QuickSet originally to set the IP on the factory version — that could cause the 0.0.0.0 dhcp network — which is a terrible bug if your new (and someone likely would be... if there using QuickSet since that make sense to start). And unlikely cisco, RouterOS is way more relational in the configuration – so a "DHCP server" is made up of 3+ different config lines, in different places. And this make it difficult since you might focus only on the /ip/dhcp-server one (and not think there is "dhcp-server network", which is more like dhcp profile). Etc.

But is anything not working here?

Amm0 · Wed Jan 24, 2024 5:50 pm

e.g. if it just resetting the configuration, you can use the reset button.

That's only tricky since take a combo: powering unit off, depress the reset button/pin-hole for ~7 seconds (until "User" light flashes) AND powering on the unit at same time as holding. See https://help.mikrotik.com/docs/display/ROS/Reset+Button – they don't mention the time, but it more than 5 second and less than 10 to reset to default configuration.
Since you've already upgraded to 7.13, it will have the more recent default configuration (e.g. the default config changes with the version – but only used if you do an explicit reset-configuration). I suspect you'll be able to set the IP address, DHCP server range, etc. using winbox app (you can use the web page, but best if you just use the winbox app on desktop)

toolongformt · Wed Jan 24, 2024 5:53 pm

Boy that went south. Anyway.

I just do NOT see netinstall as being particular important here. If you want to use it, it's easier to from Linux IMO, since there's just less steps in setup.

If you used QuickSet originally to set the IP on the factory version — that could cause the 0.0.0.0 dhcp network — which is a terrible bug if your new (and someone likely would be... if there using QuickSet since that make sense to start). And unlikely cisco, RouterOS is way more relational in the configuration – so a "DHCP server" is made up of 3+ different config lines, in different places. And this make it difficult since you might focus only on the /ip/dhcp-server one (and not think there is "dhcp-server network", which is more like dhcp profile). Etc.

But is anything not working here?

less? I need to buy a new computer to install linux, after finding the right distribution, and a way to boot it,... This is everything else than less work for someone who has no linux computer on hand. But I know exactly what you mean. If I had linux PC, I'd use it.

toolongformt · Wed Jan 24, 2024 5:56 pm

e.g. if it just resetting the configuration, you can use the reset button.

That's only tricky since take a combo: powering unit off, depress the reset button/pin-hole for ~7 seconds (until "User" light flashes) AND powering on the unit at same time as holding. See https://help.mikrotik.com/docs/display/ROS/Reset+Button – they don't mention the time, but it more than 5 second and less than 10 to reset to default configuration.
Since you've already upgraded to 7.13, it will have the more recent default configuration (e.g. the default config changes with the version – but only used if you do an explicit reset-configuration). I suspect you'll be able to set the IP address, DHCP server range, etc. using winbox app (you can use the web page, but best if you just use the winbox app on desktop)

Reset doesn't work. The cars has the same config as before. Tried a hundred times now...
Same for the access points...

And following the guide the crs112 show boot into netinstall setup. It doesn't. After power cycling with pressed reset-button the switch starts normally with "my" last config (not the basic config).

Wed Jan 24, 2024 5:57 pm

There is one other thing I am wondering here ...
CRS112 is a MIPSBE device having only 16Mb storage.
Can it digest 7.13 ? Might be better to stick with maximum 7.12-version (it's smaller, not much but maybe enough to keep it stable).

Netinstall:
can you place a dumb switch in between ? It sometimes helps.
Since you use Windows, are you sure ALL network interfaces except that one ethernet port are disabled ?

If you see it has your config, you can also reset it from Winbox.
System / reset configuration
Tick Keep users and Do Not Backup
Untick Caps mode / No Default Configuration
Hit "Reset configuration"

toolongformt · Wed Jan 24, 2024 6:06 pm

There is one other thing I am wondering here ...
CRS112 is a MIPSBE device having only 16Mb storage.
Can it digest 7.13 ? Might be better to stick with maximum 7.12-version (it's smaller, not much but maybe enough to keep it stable).

Netinstall:
can you place a dumb switch in between ? It sometimes helps.
Since you use Windows, are you sure ALL network interfaces except that one ethernet port are disabled ?

I bought the device because I wanted to have the features that mikrotik adverts. Some are only available with 7.13
And then the crs112 won't run that? Shall I destroy it and buy the biggest flagship mikrotik offers? just to get a DCHP server running and to access points managed?

Sorry, but then I will have a look back on Cisco. Their devices are ready to use the software they develop...

toolongformt · Wed Jan 24, 2024 6:09 pm

Netinstall:
can you place a dumb switch in between ? It sometimes helps.
Since you use Windows, are you sure ALL network interfaces except that one ethernet port are disabled ?

I never have dumb switched. So no, not at this moment.
Yes, I'm sure that wifi is off. It's the only network IF besides eth.

Amm0 · Wed Jan 24, 2024 6:10 pm

There is one other thing I am wondering here ...
CRS112 is a MIPSBE device having only 16Mb storage.

In theory, yes. And seems able to get to the configuration, it's working.

On the CRS112, if you can get to the configuration, then you can use System > Reset Configuration. You may want to check "Do Not Backup" and also check "Keep Users". This will get you back to WAN on ether1, LAN on ether2-8 configuration with the default IP 192.168.88.1

toolongformt · Wed Jan 24, 2024 6:17 pm

System / reset configuration

After attempt #194 reset worked. Could cry... the whole config is gone... (I knew that, but seeing it is really bad) 2 days of work getting those access points running.
To be honest, that demotivates me. After 3 full days I only can reset that damn thing, do the same sh* again and I know I will end up with the same problems, the same situation.
Because we didn't change anything here

I'll have to decide if I give it a second try or if I will send the 400 euro into the recycle bin.

DHCP is just one problem.. there's no, absolutely NO performance with wifi... out of the box 50mbit to the local lan.
@mikrotik: this is not fair! My cisco Ads from 10 years ago don't need wifi 5 or 6, they deliver 1300 MBit out of the box, Clustering (management of 6 APs!!) is ONE CLICK! Exactly one click!
Including roaming without interruption ...
They same goal with mikrotik will cost me years, if everything runs as smooth as this ... stuff.

toolongformt · Wed Jan 24, 2024 6:18 pm

There is one other thing I am wondering here ...
CRS112 is a MIPSBE device having only 16Mb storage.
In theory, yes. And seems able to get to the configuration, it's working.

On the CRS112, if you can get to the configuration, then you can use System > Reset Configuration. You may want to check "Do Not Backup" and also check "Keep Users". This will get you back to WAN on ether1, LAN on ether2-8 configuration with the default IP 192.168.88.1

no WAN on eth1. Empty. Everything.

Wed Jan 24, 2024 6:24 pm

DHCP is just one problem.. there's no, absolutely NO performance with wifi... out of the box 50mbit to the local lan.
@mikrotik: this is not fair! My cisco Ads from 10 years ago don't need wifi 5 or 6, they deliver 1300 MBit out of the box, Clustering (management of 6 APs!!) is ONE CLICK! Exactly one click!
Including roaming without interruption ...
They same goal with mikrotik will cost me years, if everything runs as smooth as this ... stuff.

You definitely got off on the wrong track but for what it is worth in general there is nothing wrong with MT devices.
A steep learning curve, definitely !! Still learning new things at least a week myself.

As for wifi performance: those cap ACs (if properly configured) can reach 400Mbps in a interference-free environment.
Using wave2 drivers it can go close to 700.

But FIRST we need to get that CRS functional.
So I suggest we do that.

How is your WAN port connected to ISP modem ?
Simple ethernet ? PPPoE ?

Can you open terminal and use
/export file=anynameyouwish
Move file to PC
Edit and remove serial number
Post contents back here in between [code] quotes

rextended · Wed Jan 24, 2024 6:34 pm

@holvoetn

1) The CRS112-8P-4S is a PoE switch, not a router.
2) There is a total lack of professionalism in the user's speeches which makes me believe he is here to act as a troll,
rather than actually wanting help. He took this forum as one vent because he doesn't know the product.
3) The device costs me less new than what is written on the MikroTik site (~$200), so how he can pay €400 for it is a mystery.

Wed Jan 24, 2024 7:04 pm

1) The CRS112-8P-4S is a PoE switch, not a router.

It can be used as a router. Low performance, yes and it will perform a lot better as a switch, but it can be done.

toolongformt · Wed Jan 24, 2024 8:15 pm

@holvoetn

1) The CRS112-8P-4S is a PoE switch, not a router.
2) There is a total lack of professionalism in the user's speeches which makes me believe he is here to act as a troll,
rather than actually wanting help. He took this forum as one vent because he doesn't know the product.
3) The device costs me less new than what is written on the MikroTik site (~$200), so how he can pay €400 for it is a mystery.

1. But it acts very well as a router, at least the software. I used it many month as an esxi vm as my primary router in my home network and pppoe client. Very stable! Meanwhile I switched to another kind of connection and got a router, but the vm acts as a firewall, router, vpn dial in,...
2. I'd really want to have help, but until now there's nothing I can do. Resets don't work (you could come here and show me what I do wrong when I press a reset button).
The access points should deliver a connection on port 2 - but it doesn't in my case. New device, one config as caps client, and an update from 6.48 to 7.13.2.
A lot of things that are written here just don't work.
3. I pay in Euro, it's a little more. And the price is for the crs112 and 2 access points together.

You're right, I'm not a pro on mikrotik at the moment, I'd like to be getting better - really!
But the manuals differ from current software from page 2, YouTube videos are too old when they are from 2022...
Without correct information it's hard to onboard the mikrotik world.

By now I only use a switch with some vlans, a vm router, an access point (for tests) running in my home office. I wanted to replace the Cisco environment with mikrotik. But they don't seem to deliver 1,3 Gbit/s. Cisco does. Sorry, what shall I do

- no trolling, just facts.

ips · Wed Jan 24, 2024 8:30 pm

From newbie to newbie, are you able to access the device with winbox? Can you post your current full config (minus sensitive data)?

infabo · Wed Jan 24, 2024 8:32 pm

The access points you just bought (cap ac I assume) aren't even promising you 1,3gbit anywhere on the datasheet like your Cisco device.

infabo · Wed Jan 24, 2024 8:39 pm

. there's no, absolutely NO performance with wifi... out of the box 50mbit to the local lan.
@mikrotik: this is not fair! My cisco Ads from 10 years ago don't need wifi 5 or 6, they deliver 1300 MBit out of the box, Clustering (management of 6 APs!!) is ONE CLICK! Exactly one click!
Including roaming without interruption ...
They same goal with mikrotik will cost me years, if everything runs as smooth as this ... stuff.

in the other topic you reported on 5Mbit. you should keep consistent in story telling.

Why do you want to replace 6 perfectly working Cisco APs that give you 1,3gbit wireless throughput? With just 2 cap AC devices? This sounds like a troll story. sorry, I am out.

Ca6ko · Wed Jan 24, 2024 9:33 pm

3 days is a very short time for microtik, usually you need 2 weeks to understand its peculiarities.
You're trying to use your cisco experience and it's all wrong here, this experience is getting in the way.
Let's start with the basics, the quick settings tab is one-size-fits-all. You can enter it once during the initial setup from the default settings and click Ok. After that, if you accidentally entered this tab and clicked Ok, you need to reset the device back to factory settings and customize it again.
Now on the DHCP, you changed the factory setting and added the ether1 port to the bridge. After that all the settings of the DHCP where this interface is specified stopped working (this error is written to you in red in the config) Why make a bridge with 1 interface? If you add an interface to the bridge, it becomes a slave and in the DHCP settings you need to change the interface to the bridge.

toolongformt · Wed Jan 24, 2024 9:41 pm

. there's no, absolutely NO performance with wifi... out of the box 50mbit to the local lan.
@mikrotik: this is not fair! My cisco Ads from 10 years ago don't need wifi 5 or 6, they deliver 1300 MBit out of the box, Clustering (management of 6 APs!!) is ONE CLICK! Exactly one click!
Including roaming without interruption ...
They same goal with mikrotik will cost me years, if everything runs as smooth as this ... stuff.
in the other topic you reported on 5Mbit. you should keep consistent in story telling.

Why do you want to replace 6 perfectly working Cisco APs that give you 1,3gbit wireless throughput? With just 2 cap AC devices? This sounds like a troll story. sorry, I am out.

first a correction: my auto-correction replaced APs with the word "Ads". Sorry, didn't see that before.

5 Mbit, 50 MBit, it depends on which devices I just tested, and after which new configuration. In fact they are always the same... but the results differ. Maybe interferences...

It's easy, I wanted to replace my whole network with mikrotik devices, because I generally love the winbox / webinterface, the tools, the prices,... I've to decide if I sell my Cisco stuff to a friend who is looking for exact those Cisco APs (and I know why), I'd get fair money for it. Alternatively he would buy and use the 2 mikrotik APs in the first step. He just needs 3 APs, so when he took my APs, he had a few spares, they are hard to get. After I already have some mikrotik devices in use, I thought I replace my stuff with the mikrotik APs.
I can now decide if I want to keep my ciscos, or sell them and replace with mikrotik. My Meross home-devices had troubles with Cisco, they often disconnected and "forgot" to reconnect.
With the latest update from Meross they seem to work and even survive a power outage of the Cisco APs (after power outage I had to completely reset all meross devices and reconfigure them - 2 days of work), so my initial reason to sell the ciscos is gone, hopefully it keeps like that.
The second reason is that I need to create a plan, when and how I replace the Cisco stuff in our company. By now there's nothing that could replace the 2960x catalysts, but they will run out of all warranties and I have to replace them. Cisco won't be an option, to expensive. HP maybe, but also pricey. So I thought, mikrotik could win the battle.

In the end I try to get confident with mikrotik's strategies, but to be honest, the more I learn / the more I know, the more I think it's a nice place to play around.
But I cannot take them seriously as a replacement for catalysts in a business environment, and I cannot replace my WAP371 with those access points that need at first a different software to deliver the performance that mikrotik advertises... and the ciscos are extremely stable, even under really heavy load.
The later the evening, the more I don't see a future with the mikrotik APs in my house.
I configured the crs112 the same way like before, the caps-man, the APs, and again they don't send a signal.
Same as yesterday... None of the guides I use target this issue, so 7.13.2 must have a change that I cannot find anywhere.

But one good info: DHCP is working for LAN by now. But I still don't have internet connection configured, no vlan, no firewall rules,...

ips · Wed Jan 24, 2024 9:47 pm

You probably missed my post: can you post your current full config of the crs112?

toolongformt · Wed Jan 24, 2024 9:48 pm

3 days is a very short time for microtik, usually you need 2 weeks to understand its peculiarities.
You're trying to use your cisco experience and it's all wrong here, this experience is getting in the way.
Let's start with the basics, the quick settings tab is one-size-fits-all. You can enter it once during the initial setup from the default settings and click Ok. After that, if you accidentally entered this tab and clicked Ok, you need to reset the device back to factory settings and customize it again.
Now on the DHCP, you changed the factory setting and added the ether1 port to the bridge. After that all the settings of the DHCP where this interface is specified stopped working (this error is written to you in red in the config) Why make a bridge with 1 interface? If you add an interface to the bridge, it becomes a slave and in the DHCP settings you need to change the interface to the bridge.

I work with Cisco since around 2018/2019, when I got the first device to replace a fritzbox for LTE-internet. It didn't work at all. But later I got the info that the nearest antenna of the provider failed on a regular basis... but that was too late, meanwhile I switched to DSL and got a new fritzbox, that made everything better.
So I know it for years, but really working with it started around middle 2023.

The quick config destroyed 75% of my config. I want to get it running without it.
The config by now is that I cannot post it, bc I don't get the output to this computer.
As soon as I configured the crs for internet access, I can post the config so far.

ips · Wed Jan 24, 2024 9:55 pm

I often use usb memory stick in these cases. Maybe they help you too. Or you can export to the PC, switching to the good old Cisco gear and post the configuration from that PC.
I apologize, but without config is almost impossible assisting you in resolving this issue.

toolongformt · Wed Jan 24, 2024 10:07 pm

I often use usb memory stick in these cases. Maybe they help you too. Or you can export to the PC, switching to the good old Cisco gear and post the configuration from that PC.

it would be much easier when the crs112 on ether 1 would get a DHCP address from the router it is connected to...

I cannot believe that it's so hard for a device like that to JUST. GET. AN. IP.

(
sorry, that makes me exploding. Basics, mikrotik, basics. GETTING AN IP from a working DHCP server... is that rocket science???

EDIT: Ok, Port 23 on my brand new 328 has a defect. Doesn't deliver an address. A different port from the same bridge delivered.
With which of the 20 options / commands do you want to have the config printed? As I heard, some deliver only interesting things, other deliver more interesting things, other deliver things no-one needs,...

Ok, now WINBOX (NOT inbox... someday I'll punch those "I know better what you wanted to type"-guys into the ground) (newest version) crashes after every mouse click, after I'm connected to the 112...

toolongformt · Wed Jan 24, 2024 10:19 pm

2 APs - 4 CAP Interfaces (I know why, 2.4 and 5 Ghz x 2 APs).
But why the hell is one of them "possible regulatory info mismatch with CAP" ?
If it was AP1, why aren't both frequencies red?
If it was only one frequency, why isn't that red on both APs?

Such are the things I don't understand, and I don't want to understand. It's just coincidence. No plan behind...

toolongformt · Wed Jan 24, 2024 10:22 pm

I often use usb memory stick in these cases. Maybe they help you too. Or you can export to the PC, switching to the good old Cisco gear and post the configuration from that PC.
I apologize, but without config is almost impossible assisting you in resolving this issue.

Here it is, but it seems incomplete...?

[admin@MikroTik] > export
# 1970-01-02 04:23:05 by RouterOS 7.13.2
# software id = BS5E-85HC
#
# model = CRS112-8P-4S
# serial number = ***
/interface bridge
add admin-mac=48:A9:8A:B5:C3:2A auto-mac=no comment=defconf name=bridge
/caps-man interface
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E3:C4 master-interface=none name=cap1 radio-mac=48:A9:8A:89:E3:C4 radio-name=48A98A89E3C4
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E3:C5 master-interface=none name=cap2 radio-mac=48:A9:8A:89:E3:C5 radio-name=48A98A89E3C5
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E9:56 master-interface=none name=cap3 radio-mac=48:A9:8A:89:E9:56 radio-name=48A98A89E956
# possible regulatory info mismatch with CAP
add disabled=no mac-address=48:A9:8A:89:E9:57 master-interface=none name=cap4 radio-mac=48:A9:8A:89:E9:57 radio-name=48A98A89E957
/caps-man datapath
add bridge=bridge name=datapath1
/caps-man configuration
add country=germany datapath=datapath1 installation=any mode=ap name=g21 ssid=G21
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=security1
/interface list
add name=LAN
add name=WAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp-pool-intern ranges=192.168.21.130-192.168.21.180
/ip dhcp-server
add address-pool=dhcp-pool-intern interface=bridge name=dhcp1
/port
set 0 name=serial0
/caps-man manager
set enabled=yes
/caps-man provisioning
add master-configuration=g21
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=sfp9
add bridge=bridge comment=defconf interface=sfp10
add bridge=bridge comment=defconf interface=sfp11
add bridge=bridge comment=defconf interface=sfp12
add bridge=bridge interface=ether8
/interface list member
add interface=bridge list=LAN
add interface=ether1 list=WAN
/ip address
add address=192.168.21.254/24 comment=defconf interface=bridge network=192.168.21.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=192.168.21.0/24 dns-server=192.168.21.254 domain=r403.local gateway=192.168.21.254 netmask=24 ntp-server=192.168.21.254

toolongformt · Wed Jan 24, 2024 10:28 pm

I think I'll let the export command run for some weeks... it's not the fastest, and not stable, and not ready (programmed).
During typing I got Error exporting "/ip/ssh" (timeout).

Sorry, I cannot post the complete config with that crash.
Shall I reset again, and again, and again, @MIKROTIK ...???

infabo · Wed Jan 24, 2024 10:33 pm

First, step back and as you already found out in previous posts: it is not always ROS to blame. Especially for hardware defects on other devices.

sorry, that makes me exploding. Basics, mikrotik, basics. GETTING AN IP from a working DHCP server... is that rocket science???

the answer to this is already in your config export:

/ip dhcp-client
add interface=ether1

Looks easy and quite understandable, do you agree?

infabo · Wed Jan 24, 2024 10:39 pm

During typing I got Error exporting "/ip/ssh" (timeout).

Sorry, I cannot post the complete config with that crash.
Shall I reset again, and again, and again, @MIKROTIK ...???

No, not again and again. You do that once (https://help.mikrotik.com/docs/display/ ... ationReset) and if that does not help on the "export timeout" you can try to netinstall (https://help.mikrotik.com/docs/display/ROS/Netinstall). If the timeout issue is still there after netinstall you can file a support ticket at Mikrotik helpdesk and send them over your supout.rif file (they would request one anyways). https://help.mikrotik.com/docs/display/ROS/Supout.rif

toolongformt · Wed Jan 24, 2024 10:42 pm

During typing I got Error exporting "/ip/ssh" (timeout).

Sorry, I cannot post the complete config with that crash.
Shall I reset again, and again, and again, @MIKROTIK ...???
No, not again and again. You do that once (https://help.mikrotik.com/docs/display/ ... ationReset) and if that does not help on the "export timeout" you can try to netinstall (https://help.mikrotik.com/docs/display/ROS/Netinstall). If the timeout issue is still there after netinstall you can file a support ticket at Mikrotik helpdesk and send them over your supout.rif file (they would request one anyways). https://help.mikrotik.com/docs/display/ROS/Supout.rif

as the thread (or was it the other one I opened?) says, netinstall doesn't work. I tried that already. 1. the switch doesn't appear, 2. the package is not valid.
Netinstall is completely useless under windows. And sorry, I have no computer running linux by hand

toolongformt · Wed Jan 24, 2024 10:48 pm

First, step back and as you already found out in previous posts: it is not always ROS to blame. Especially for hardware defects on other devices.

sorry, that makes me exploding. Basics, mikrotik, basics. GETTING AN IP from a working DHCP server... is that rocket science???
the answer to this is already in your config export:
Code: Select all
/ip dhcp-client
add interface=ether1
Looks easy and quite understandable, do you agree?

Well, this was just missing in the output... There are some lines missing... I export over and over again, and every time I see some lines more or less.
But the DHCP client is definitely there. And now, after 1/2 hour, it seems to have an IP address on eth1.
I recognized that while writing an answer, and let a ping ran to the DHCP-server aka gateway in my productive network.
It took some minutes until it changed from timeout to reply times.
I see that behavior every time I do things like that... they need some minutes or hours, and suddenly they work. Or stop working after hours...

ips · Wed Jan 24, 2024 10:50 pm

My suggestion is to run:

/system reset-configuration no-defaults=yes skip-backup=yes keep-users=yes

And then using the quickset.

infabo · Wed Jan 24, 2024 10:51 pm

# possible regulatory info mismatch with CAP

You can use google or mikrotik forum search to find some maybe relevant or helpful information.

* viewtopic.php?t=174193
* viewtopic.php?t=115855

So I would say: Ensure the CAPs run the same version of ROS. Then ensure they don't have any local configuration that "interferes" with the capsman config. Then try to reboot "cap4" and see if the issue persists. You can trigger provisioning of cap4 manually in capsman via winbox.

ips · Wed Jan 24, 2024 10:53 pm

Here we are dealing with another issue. Shall we try to keep the focus on the "wired problems" first?

infabo · Wed Jan 24, 2024 10:54 pm

Netinstall is completely useless under windows. And sorry, I have no computer running linux by hand

There is a step by step guide with pictures on how to use Netinstall. Even describing the pitfalls. https://help.mikrotik.com/docs/display/ROS/Netinstall

toolongformt · Wed Jan 24, 2024 10:55 pm

During typing I got Error exporting "/ip/ssh" (timeout).

Sorry, I cannot post the complete config with that crash.
Shall I reset again, and again, and again, @MIKROTIK ...???
No, not again and again. You do that once (https://help.mikrotik.com/docs/display/ ... ationReset) and if that does not help on the "export timeout" you can try to netinstall (https://help.mikrotik.com/docs/display/ROS/Netinstall). If the timeout issue is still there after netinstall you can file a support ticket at Mikrotik helpdesk and send them over your supout.rif file (they would request one anyways). https://help.mikrotik.com/docs/display/ROS/Supout.rif

After every reset I have different problems. One time DHCP-server not working (cause for this thread), then the APs that don't work, next time it's the password that suddenly doesn't work anymore... I do the same every time... I could as well export a config, do a reset, replay the config, and send another rif to the support with completely different problems.
To me it seems as if either all my devices are faulty, or they all aren't tested to run 7.13.2 ... but they all show it as possible update, so it's surely my fault to install updates

infabo · Wed Jan 24, 2024 10:57 pm

But the DHCP client is definitely there. And now, after 1/2 hour, it seems to have an IP address on eth1.

Got To "IP / Adresses" in Winbox and lookup. Or enter "/ip/address/print" on CLI.

ips · Wed Jan 24, 2024 11:00 pm

My suggestion is to run:
Code: Select all
/system reset-configuration no-defaults=yes skip-backup=yes keep-users=yes
And then using the quickset.

I insist. One reset and let us face the issues that arise.

toolongformt · Wed Jan 24, 2024 11:04 pm

My suggestion is to run:
Code: Select all
/system reset-configuration no-defaults=yes skip-backup=yes keep-users=yes
And then using the quickset.
I insist. One reset and let us face the issues that arise.

No, not another reset. I did 3 resets and configurations today.
3 times different errors and problems. Not again. I'm already at 2% of what I need. I'll have about 18 month ahead until this thing works when my success continues like that.
And no quick set. As I heard, it causes only troubles. I have enough troubles without that crap of "quick shifter"

ips · Wed Jan 24, 2024 11:08 pm

I understand your frustration, but you will certainly understand that I cannot help you any more. Good luck for your journey.

toolongformt · Wed Jan 24, 2024 11:09 pm

Netinstall is completely useless under windows. And sorry, I have no computer running linux by hand
There is a step by step guide with pictures on how to use Netinstall. Even describing the pitfalls. https://help.mikrotik.com/docs/display/ROS/Netinstall

Step by step to a great heap of **** that does exactly NOTHING!
* switch doesn't boot to netinstall
* netinstall doesn't accept the packages
* ...
To all beginners: don't try netinstall with windows. Like my favorite song: LOSING TIME

toolongformt · Wed Jan 24, 2024 11:12 pm

I understand your frustration, but you will certainly understand that I cannot help you any more. Good luck for your journey.

If there's no option to configure a switch with a set of commands of which the developer thinks their device does something helpful, you'll certainly allow me to ask if my future is with exactly THIS company and those products.

Amm0 · Wed Jan 24, 2024 11:20 pm

Folks are trying to help here. Totally right, reset-configuration and/or netinstall is going to get you a blank (or default install).

But you still have to configure it to do what you want. Nothing is automatic, unless you have a one DHCP-provided WAN on ether1, and want a LAN on remaining ports – that the default. If it's empty, you can follow the help.mikrotik.com on VLAN, briding, firewalls, etc. or other post here also have good info to build a config "from scratch".

But NO ONE here is clear what exactly you're trying to accomplish is the issue. Get your replacing X cisco devices with Y Mikrotik devices, but say little at what config is needed on the mikrotik.

Perhaps describe what you expect at the end / "100%" here, and the Mikrotik stuff you have.

infabo · Wed Jan 24, 2024 11:26 pm

You are approaching this situation with extreme prejudices, and it seems like you don't really want to solve the problem. It's all about complaining and venting frustration. A hardware defect cannot be ruled out, but if one refuses to proceed methodically and step by step, then the issue will never be identified.

CRS112 is an MIPSBE device. You could try ROS 6.x instead of 7.x as long as the new WIFI drivers are not necessary.

toolongformt · Thu Jan 25, 2024 9:32 am

Folks are trying to help here. Totally right, reset-configuration and/or netinstall is going to get you a blank (or default install).

But you still have to configure it to do what you want. Nothing is automatic, unless you have a one DHCP-provided WAN on ether1, and want a LAN on remaining ports – that the default. If it's empty, you can follow the help.mikrotik.com on VLAN, briding, firewalls, etc. or other post here also have good info to build a config "from scratch".

But NO ONE here is clear what exactly you're trying to accomplish is the issue. Get your replacing X cisco devices with Y Mikrotik devices, but say little at what config is needed on the mikrotik.

Perhaps describe what you expect at the end / "100%" here, and the Mikrotik stuff you have.

1. I have a DHCP provided WAN on ether1; it's my home network. When the device is ready, it will be shipped, where also a DHCP provided WAN is waiting.
2. The manuals refer to older versions of RouterOS. A lot of things just don't fit. And when something doesn't work, there's no explanation. Asking for solutions means "reset the device". So these guides are kind of useless on the long way, aren't they?
3. initially I just wanted to have a DHCP server on this new crs112. The rest was already working so far. Could I image that it will need a reset? I thought, DHCP-config would work without a reset. I thought, when the initial setup is wrong, there'd be a way to correct it. But resetting every time something has been made wrong, is hard.

I complain mostly about manuals that don't fit to current RouterOS versions, and the fact that they are not complete. I didn't find a guide 'how to capsman' that is really working. Every time something is missing. When I downgrade the RouterOS that fits to the guide, I cannot use technologies that mikrotik has advertised. So it's a lose-lose-situation.
And yes, I am frustrated that as a Cisco semi-expert on catalyst, asa and wap's for over a decade I'm not able to setup a switch that far that it hands out IP addresses. After more than half a year of experience...

Ok, I would like to stop discussing the "why" and what I don't like. I'm here to learn. And I don't want to learn how to reset. I know how it should work. When it doesn't, there are ways to solve the problem: recycling, and buying a new one. No problem.

To the idea to downgrade to ROS 6. - no, I lose too much functions, for which I bought the devices. Capsman is #1, and everything prior to 7.13. doesn't support capsman on that device.

Thu Jan 25, 2024 9:52 am

If you want to learn, we can definitely continue

The first things you may have to be aware of to prevent all this resetting:
1) access device using MAC address via Winbox (and best to remove one port from bridge for that purpose)
2) use SAFE MODE. Whenever you mess up config locking yourself out, this can be a safeguard since it detects connection to Winbox is lost and then it will REVERT all earlier made steps.
So you can make modifications in safe mode, when you see things still work, disable safe mode so config gets saved, then move into safe mode again for next steps.

Secondly (my view): don't attack everything at once.
You want your device to act as a router and as capsman.
Router part first then.
When that's done, we move to capsman.

Manuals are available but not everything to the same level of completeness and detail. One of the problems is that some parts are also available for old versions or old status ... I do agree some cleanup is needed there.
Best starting point for ROS7:
https://help.mikrotik.com/docs/display/ROS/RouterOS

(wiki is mostly ROS6 stuff)

BTW about ROS7 vs ROS6: that last one ALSO has capsman ability for the legacy radio devices which your cap ACs are. Except for the fact those cap ACs can also run wave2 drivers since 7.13. Huge difference (though I wonder it is worthwhile with the bottleneck which will be created by using CRS112 as router. Capability of cap AC without wave2 is already more then CRS112 can digest. My view ...).
But let's not get into that right now.

So, let's start ...
Can you access device using Winbox and MAC address ? Use any port except ether1.

toolongformt · Thu Jan 25, 2024 10:07 am

If you want to learn, we can definitely continue

The first things you may have to be aware of to prevent all this resetting:
1) access device using MAC address via Winbox (and best to remove one port from bridge for that purpose)
2) use SAFE MODE. Whenever you mess up config locking yourself out, this can be a safeguard since it detects connection to Winbox is lost and then it will REVERT all earlier made steps.
So you can make modifications in safe mode, when you see things still work, disable safe mode so config gets saved, then move into safe mode again for next steps.

Secondly (my view): don't attack everything at once.
You want your device to act as a router and as capsman.
Router part first then.
When that's done, we move to capsman.

Manuals are available but not everything to the same level of completeness and detail. One of the problems is that some parts are also available for old versions or old status ... I do agree some cleanup is needed there.
Best starting point for ROS7:
https://help.mikrotik.com/docs/display/ROS/RouterOS

(wiki is mostly ROS6 stuff)

BTW about ROS7 vs ROS6: that last one ALSO has capsman ability for the legacy radio devices which your cap ACs are. Except for the fact those cap ACs can also run wave2 drivers since 7.13. Huge difference (though I wonder it is worthwhile with the bottleneck which will be created by using CRS112 as router. Capability of cap AC without wave2 is already more then CRS112 can digest. My view ...).
But let's not get into that right now.

So, let's start ...
Can you access device using Winbox and MAC address ? Use any port except ether1.

thank you!

1) I always access my devices via winbox

2) I know safe mode, yes.
3) I can access the device using winbox for Mac and winbox for windows. In both cases I have the latest version. I have a configuration so far, which I can post again:

# serial number = ****
/interface bridge
add admin-mac=48:A9:8A:B5:C3:2A auto-mac=no comment=defconf name=bridge
/caps-man interface
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E3:C4 master-interface=none name=cap1 radio-mac=48:A9:8A:89:E3:C4 radio-name=48A98A89E3C4
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E3:C5 master-interface=none name=cap2 radio-mac=48:A9:8A:89:E3:C5 radio-name=48A98A89E3C5
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E9:56 master-interface=none name=cap3 radio-mac=48:A9:8A:89:E9:56 radio-name=48A98A89E956
# possible regulatory info mismatch with CAP
add disabled=no l2mtu=1600 mac-address=48:A9:8A:89:E9:57 master-interface=none name=cap4 radio-mac=48:A9:8A:89:E9:57 radio-name=48A98A89E957
/caps-man datapath
add bridge=bridge name=datapath1
/caps-man configuration
add country=germany datapath=datapath1 installation=any mode=ap name=g21 ssid=G21
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=security1
/interface list
add name=LAN
add name=WAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp-pool-intern ranges=192.168.21.130-192.168.21.180
/ip dhcp-server
add address-pool=dhcp-pool-intern interface=bridge name=dhcp1
/port
set 0 name=serial0
/caps-man manager
set enabled=yes
/caps-man provisioning
add master-configuration=g21
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=sfp9
add bridge=bridge comment=defconf interface=sfp10
add bridge=bridge comment=defconf interface=sfp11
add bridge=bridge comment=defconf interface=sfp12
add bridge=bridge interface=ether8
/interface list member
add interface=bridge list=LAN
add interface=ether1 list=WAN
/ip address
add address=192.168.21.254/24 comment=defconf interface=bridge network=192.168.21.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=192.168.21.0/24 dns-server=192.168.21.254 domain=r403.local gateway=192.168.21.254 netmask=24 ntp-server=192.168.21.254
/system clock
set time-zone-name=Europe/Vienna
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=10.43.210.254

toolongformt · Thu Jan 25, 2024 10:10 am

So, let's start ...
Can you access device using Winbox and MAC address ? Use any port except ether1.

yes, I use port ETH8 and I am connected via MAC address.
Currently I use a Mac and winbox for Mac. If that leads to a problem, I can change to a windows notebook, but it will make things a little more complex as long as I won't get access to the internet.

rextended · Thu Jan 25, 2024 10:14 am

Facts:
Winbox for Mac does not exist,
unless your name is @Normis and you want to tease.
You have not specified either the version of Winbox used, nor the version of netinstall, nor the exact name of the packages downloaded.

Thu Jan 25, 2024 10:14 am

OK, as a simple router/switch, I don't see anything wrong at first sight.

AS A ROUTER: does this config work for you right now or are there issues ?
- can you connect to any of the ether ports (2-7) and get valid IP address ?
- can you access internet from that client ?

Winbox for MAC ? Doesn't exist as far as I know.
Should be the same Winbox for Windows but running via Wine or other Windows emulator, I believe ?

toolongformt · Thu Jan 25, 2024 10:39 am

Facts:
Winbox for Mac does not exist,
unless your name is @Normis and you want to tease.
You have not specified either the version of Winbox used, nor the version of netinstall, nor the exact name of the packages downloaded.

Yes, winbox under wine, of course. And I know, it's not the best option...
//My name is Chuck Norris, and I run .exe files directly under MacOS

- and on my coffee machine if necessary!

But I also have the current winbox64 running under native windows.
Also netinstall, I downloaded everything yesterday from the mikrotik website.

toolongformt · Thu Jan 25, 2024 10:51 am

OK, as a simple router/switch, I don't see anything wrong at first sight.

AS A ROUTER: does this config work for you right now or are there issues ?
- can you connect to any of the ether ports (2-7) and get valid IP address ?
- can you access internet from that client ?

Winbox for MAC ? Doesn't exist as far as I know.
Should be the same Winbox for Windows but running via Wine or other Windows emulator, I believe ?

as a router? not really.
The notebook, attached via cable to port ETH7 got an ip address from the network of the crs112 - that is perfect.
It also got gateway and dns address - both are the ip of the crs, it shall work as dns server and gateway.
Later the dns-server will be replaced.
The crs112 shall be connected to my home office network via site2site vpn (I had that already running with another homeoffice which is no longer in use now) and use my internal dns server; I have a domain running, and the clients have to be connected to it.

So the next step for me is to tell the router that it should route from LAN to WAN. Normally I would have a bridge for the LAN ports and vlan1 as well as port eth1 in vlan 99 (which I always use for internet-faced ports). Any suggestions how I could make this better? Or at least different? Is my solution useless and are there better ways...?

Thank you!

Thu Jan 25, 2024 11:01 am

If you check from terminal /ip route print
What does it show ?
Is there a default route to your "wan" gateway ?

toolongformt · Thu Jan 25, 2024 11:04 am

my next step was to insert masquerading into the set of firewall rules (which are empty yet... oh, you saw that in the config

).
now I can pint from notebook on port 8 with IP address from G21 LAN to external resources, e.g. 8.8.8.8 - I get a reply, that looks good so far.
Any improvements? Even if it sounds like I'm absolute beginner, I just want to learn if the steps I know so far, are best practice or if I learned "bs"

So please correct me - thanks!

toolongformt · Thu Jan 25, 2024 11:05 am

If you check from terminal /ip route print
What does it show ?
Is there a default route to your "wan" gateway ?

ip route print shows what I expect:
[admin@MikroTik] > ip route print

Flags: D - DYNAMIC; A - ACTIVE; c - CONNECT, d - DHCP
Columns: DST-ADDRESS, GATEWAY, DISTANCE
    DST-ADDRESS      GATEWAY        DISTANCE
DAd 0.0.0.0/0        10.43.210.254         1
DAc 10.43.210.0/24   ether1                0
DAc 192.168.21.0/24  bridge                0

Thu Jan 25, 2024 11:10 am

Make sure to perform those tests also from any of ether2-7 ports.
So IP access external works, but not named.
Then we need to look at DNS.

What does /ip dns print show ?
In DHCP client settings, do you have Use Peer DNS enabled ?
Can you add manually DNS server (just to be sure a valid option is available) ?

toolongformt · Thu Jan 25, 2024 11:13 am

ok, I'll have to do some other work and meanwhile I'm out of office.
c u later
thanks!

rextended · Thu Jan 25, 2024 11:13 am

toolongformt · Thu Jan 25, 2024 11:16 am

Make sure to perform those tests also from any of ether2-7 ports.
So IP access external works, but not named.
Then we need to look at DNS.

What does /ip dns print show ?
In DHCP client settings, do you have Use Peer DNS enabled ?
Can you add manually DNS server (just to be sure a valid option is available) ?

hm, I wanted to check again. I didn't change anything, but now ping is failing. I let it run with -t and will see, if anything changes...

toolongformt · Thu Jan 25, 2024 11:19 am

Make sure to perform those tests also from any of ether2-7 ports.
So IP access external works, but not named.
Then we need to look at DNS.

What does /ip dns print show ?
In DHCP client settings, do you have Use Peer DNS enabled ?
Can you add manually DNS server (just to be sure a valid option is available) ?

DNS is the ip of the crs112 - that's ok for now. The crs has to ask my internal dns servers, 10.43.210.11 and 12, which is already configured.

toolongformt · Thu Jan 25, 2024 11:20 am

hm, I wanted to check again. I didn't change anything, but now ping is failing. I let it run with -t and will see, if anything changes...

ok, solved (cable). Ping works again.

toolongformt · Thu Jan 25, 2024 11:31 am

I moved the router and the access points physically to another desk where I have more space to work.
Therefore I disconnected the crs from network and power.
Now restarted, ip route print is empty, eth1 doesn't get an ip from my internal lan.
I had this situation over and over again. I mean, there's nothing wrong here, just rebooted, used the same cables, the same ports,...
/offtopic: This is strange. This is, what I don't understand.

I'll have to move on now doing my other stuff. I'll report what changes when I'm back. After some minutes of waiting eth1 is still searching for a DHCP lease...

Thu Jan 25, 2024 11:40 am

I understand and this is also why I hinted earlier about the fact it might be a better idea not to put 7.13 on that device.
It's a 16Mb storage device and there are quite a bit of known issues when 7.13 is on such a device, depending on the used config.

I realize this is not what you want to hear but personally I would downgrade to 7.12.1 to rule out any possible conflict coming from that fact.
And stay there until some way or the other they downsized the packages a bit to accommodate for those 16Mb devices.

Downgrade when having access is rather easy:
download npk file
drop on files (if anything is there which you do not need, remove it or move to your PC for future usage)
go to system packages and hit downgrade.

If that's not possible due to storage limitation (which I suspect), then the only remaining way is netinstall.
But be advised dropping additional packages on that device (like e.g. for capsman wave2 in future) might be out of the question already. Storage ...

toolongformt · Thu Jan 25, 2024 2:02 pm

ok, I'm back and I will now move on with the config.
The issue of the ping I lost was definitely my crs328. When I changed the cable to sort it out as a cause, I put the replacement cable into the same switch (328), but into another port.
This port seems to be faulty, I'll check that.
Now I put the cable in 328 into another socket and the running ping -t from notebook via crs112 into my local network startet instantly getting a reply.
So, getting an IP via eth1 works perfectly at the moment, and I want to believe this will be consistent.
To be sure, I'll give the 112 a few reboots to check. When this is stable, I would like to try (taking the risk) 7.13
In the end mikrotik seems to let it run on that device, I mean, it's not a hack, it has been offered. Therefore I want to give mikrotik another chance to let me build a new trust in what they do.
Nevertheless, I'll keep in mind that you recommend to downgrade.
If any serious problem occurs that is not on our plan, I'll take those steps. Means: getting netinstall running... an extra task for some hours, because I already sorted out what I can...

Thank you!

Who is online