hAP ac2 already had PoE in. It is only the PoE out that is new. And hopefully now it is 802.11af/at instead if "passive PoE"...Awesome! Nice to see PoE in
Too bad though PoE In and Out are on the same port from what I can see.
hAP ac2 already had PoE in. It is only the PoE out that is new. And hopefully now it is 802.11af/at instead if "passive PoE"...
hAP ac3 should already provide most of what hAP ax2 has to offer... no need to buy a new one again, I would say.Eish!!!! And I just upgraded from AC2 to AC3 a couple of months ago, now I have to buy a new one
I don't understand that either. I would expect the PoE out on ether5. But maybe it saves some components...Too bad though PoE In and Out are on the same port from what I can see.
What would be the logic behind that ?
This is smallest dual-band ax device i have seen so far - i think this is one of many compromises they had to make for this form factor.I don't understand that either. I would expect the PoE out on ether5. But maybe it saves some components...Too bad though PoE In and Out are on the same port from what I can see.
What would be the logic behind that ?
Well, I totally agree with you. Normis stated that MT does not restrict their clients with a subscription. But, I consider a small disk a restriction.1GB RAM... I wonder when we will finally get RAMDISK on devices like that, otherwise it will be useless to have it.
Let's see how much FLASH we get this time
i think is not easy to cramp features in so small footprint
Maybe hAP AX3 with SPF and 2,5 GB ports?no need to quote preceding post - use "Post Reply"
Errm ... it does.the hap ac2 did not have either
All FLASH storage type have a RAMdisk!1GB RAM... I wonder when we will finally get RAMDISK on devices like that, otherwise it will be useless to have it.
Let's see how much FLASH we get this time
hAP AC2s do have a USB port.the hap ac2 did not have either
i think is not easy to cramp features in so small footprint
And Audience ax² ???Also, cAP AX^2 when?
I don't know... Antenna gain invariably comes with directivity. The directivity could be different for the chains, and it could help in that case, but normally more antenna gain means less transmitter output, and you only gain some receive sensitivity.also like the antenna gain
Wireless antenna max gain 2.4 GHz (4.5 dBi), 5 GHz (4 dBi)
Looking to be a good performer in a "standard" house
No, only the devices with 16MB FLASH and >32MB RAM do have RAMdisk.All FLASH storage type have a RAMdisk!1GB RAM... I wonder when we will finally get RAMDISK on devices like that, otherwise it will be useless to have it.
Let's see how much FLASH we get this time
This would be very necessary for NAND storage type!
128MB will be the new 16MB, it seems... how long until that again is a bottleneck?Storage 128 MB, NAND
For simple wifi and routing ?The device will be ROS 7 only as well which isn't exactly the most stable platform,....
you are right tx power looks like this:I don't know... Antenna gain invariably comes with directivity. The directivity could be different for the chains, and it could help in that case, but normally more antenna gain means less transmitter output, and you only gain some receive sensitivity.also like the antenna gain
Wireless antenna max gain 2.4 GHz (4.5 dBi), 5 GHz (4 dBi)
Looking to be a good performer in a "standard" house
Operating temperature -40°C to +50°C
From the photo's already being shown, it looks like USR led is still on the back (with power and POE led).If I can suffer two things from this new product it is to add two front LEDs for the two wifi interfaces (2.4 and 5 Ghz) maybe one orange (2.4) and one blue or green (5). Maybe by moving the Power and USR LEDs also frontally.
Can you give me an example of this?No, only the devices with 16MB FLASH and >32MB RAM do have RAMdisk.
All FLASH storage type have a RAMdisk!
This would be very necessary for NAND storage type!
Its main purpose is to have space to download updates into the RAMdisk and then apply them to the (too small) FLASH.
Devices with >16MB FLASH do not have this feature, they download the updates into the flash.
However, having RAMdisk can also be useful as scratcpad for user scripts, to hold containers, as proxy cache, and generic file storage.
So it would be useful when all devices with >32MB RAM enabled the RAMdisk. E.g. in a /ramdisk directory in the files space.
1. yes, included in wifiwave2Now the questions are:
1. Will it support beam forming?
2. Will it support fast roaming between different APs?
3. We can all say "Yes" to #1 and #2, but the follow-up question would be: When?
4. And what about CAPsMAN support?
I am happy for MT to finally showing signs of catching up the train, but I already spent my money elsewhere :/ Will continue to use RB4011 for routing needs nevertheless.
He asked fast roaming........Nope. But you cannot not mention the missing piece of the puzzle.Did I wrote 802.11 v ??????
And thát doesn't work yet either for now. Only on SSIDs on the same AP for now (so moving from 2.4 to 5 and vice versa provided they have the same SSID).When your device roams from one AP to another on the same network,...
not sure about this... how do you know?And thát doesn't work yet either for now. Only on SSIDs on the same AP for now (so moving from 2.4 to 5 and vice versa provided they have the same SSID).When your device roams from one AP to another on the same network,...
It surely will come but not now.
please do not write nonsence. 802.11 r is supported from stable version 7.4. In the new 7.5 beta is another roaming support for 802.11 k and 802.11 w has been already supported in wifiwave2 too.This just shows the state of confusion of what is supported vs not and what works vs it doesn't Fast roaming between APs is still not supported. Only within the same AP, between interfaces. And beta firmware's should not be used to state that something is supported.
Until something gets GA, it is not supported (as in like officially supported by the vendor if you have a situation where a good portion of your engineering will have to focus on, instead of doing what they should be typically doing, which is net new development, and not bug fixing. Typically 80/10/10 ratio. 80 for ongoing project/feature delivery, 10 for maintenance and 10 for innovation, aka geek time).
The official documentation provides all that, not some forum rando. cheers!I think it is. Offering clarity for people, to ensure they do a proper knowledgeable decision, instead of instantly regretting it after finding out things are still not as expected. [blabla]
True. Roaming apparently is a "work in progress". Initial implementation (probably leveraging the support in the manufacturer's drivers) is made now, but it has some way to go until it can support roaming between APs. That requires some backbone between APs, and it would be most obvious to integrate that into something like CAPsMAN. But that does not support wifiwave2, so more work is to be done.The initial implementation of 802.11r introduced in RouterOS 7.4beta4 only supports fast transition of client devices between the interfaces which are local to each AP.
Totally agree with this. Need USB, for many reasons.This is a great router, and it's just terrible that it does not have USB.
Same reason as why other devices do have usb ?What does a regular home owner need a usb port for ?? Just asking?
It's very handy to connect to a mobile network in case your wired internet connection is interrupted. No need to reconfigure your WiFi interface, just plug in an Android phone, enable USB tethering and you are good to go.What does a regular home owner need a usb port for ?? Just asking?
by any chance you know priceing of this?For NEXT Home/SOHO Mikrotik Wireless Router, I'll dreaming something like this https://wallystech.com/Routerboard/DR60 ... A-SFP.html
It can use Wifi 6E card https://wallystech.com/Network_Card/DR9 ... -11ax.html ...
1 x 1Gbps Ethernet Ports & POE3 x 1Gbps Ethernet Ports , 1x 2.5Gbps Ethernet Port
1x SFP port
NGFF Slot M.2 (NGFF) “E Key” Socket with MiniPCIe 3.0
1x SD Card Slot <= I think this can removed since not really need, can be replaced by USB Flash Disk for storage...
1x USB 2.0 Port
.....
I am sure that the vast majority of home users would never use a serial console, but I find one extremely useful. I was surprised the RB5009 "lab router" didn't have a serial console built in, but at least it has USB.Usb serial port
https://wallystech.com/Routerboard/DR60 ... A-SFP.htmlby any chance you know priceing of this?For NEXT Home/SOHO Mikrotik Wireless Router, I'll dreaming something like this https://wallystech.com/Routerboard/DR60 ... A-SFP.html
It can use Wifi 6E card https://wallystech.com/Network_Card/DR9 ... -11ax.html ...
1 x 1Gbps Ethernet Ports & POE3 x 1Gbps Ethernet Ports , 1x 2.5Gbps Ethernet Port
1x SFP port
NGFF Slot M.2 (NGFF) “E Key” Socket with MiniPCIe 3.0
1x SD Card Slot <= I think this can removed since not really need, can be replaced by USB Flash Disk for storage...
1x USB 2.0 Port
.....
Why not? Poe hat is working 24/7 for last 6 month witout any issue.THAT I wouldn't do unless you're ready to troubleshoot powering problems on that PI.Powering rpi
There is (almost) nothing in MikroTik routers that dictates you to use certain ports for certain functions. Most routers just contain a switch chip connected to the CPU, and all ports are equal, function is only derived from the configuration.Bringing PoE out back is fantastic, and I especially like that its on port1. This is way, way, way more practical and useful for a WISP. Port1 is and should be used for internet connectivity and often thats connected to the radio injector. Now can throw that away and just use the AX2 alone with a single power point
That is why interface lists have been created and should be used. Just move ether1 from WAN to LAN and ether5 from LAN to WAN and everything is working again.In theory and on paper yes. In reality no
The reality is port1 is used for internet connectivity, thats precisely why the factory default config blocks on port1, and almost everyone will use port1 for that purpose
There's been plenty of times we've done an installation (or even just pre-provisioned in the office, like say with config scripts) that utilize port1 as the WAN facing port
Having it on port5 meant manually redoing parts of the config to shift it to port5
Being passive PoE it is kind of pointless for powering the device anyway. Who does not use 802.3af/at? The only viable scenario is to have two MikroTik devices daisy-chained on a single supply (e.g. a second hAP ax2 used as AP) and it now requires your "complicated reconfiguration" in order to connect the AP to ether1.So yeah in theory fine, could have been port3. Practical and real world usability will tell you that it should be port1
For the argument of an AP, that only works if its a Ubiquiti or MikroTik AP. Pretty much everything else uses 48v/802.3af/at and hence pointless. Doubly pointless if you want more than 1 AP and a PoE switch is in order anyhow
Other small providers than you put a PoE-out switch on a fiber link and distribute this as ethernet to their customers in a building, powering the customer routers/WiFi AP from that central switch.For the environments I work with, port1 is exactly where PoE out should be. And no need for PoE in on a CPE oriented device
RB/CCR devices are for a different purpose and I don't care what the output port is, if any
To everyone complaining about no USB, you do realise majority of us do not use USB port.Its supposed to be cheap home device and there is no need to raise price for everyone with something they wont use.Personally, I find the design of the device disappointing on the following points
Major
- No SD card or USB store
Minor
- POE In/Out in one port? - no 802.3af/at - no daisy chain
Why not a design like hEX, hEX S, hAP ac, hAP ac³
- Ports are gigabit only
hAP - $45.00 - USB:Yes
hAP ac lite - $59.00 - USB:Yes
hAP ac² - $79.00 - USB:Yes
RB951G-2HnD - $79.95 - USB:Yes
hAP ax² - $99.00 - USB:No
hAP ac³ - $109.00 - USB:Yes
hAP ac - $129.00 - USB:Yes
hAP ac³ LTE6 kit - $219.00 - USB:Yes
Chateau LTE18 ax - $299.00 - USB:Yes
Chateau 5G ax - $595.00 - USB:Yes + M.2 slots
Guys, EVERYONE is entitled to have their own opinion. Doesn't make it right or wrong.And please don't stone me for an opinion that is in no way unfounded. And as for the color, exclusively pink with blue, glowing stars
You need to understand that most MikroTik products have only a single big chip that does everything.I voiced my opinion and I don't expect Mikrotik to grab their heads and say, "Sorry we designed it wrong!". I'm sure Mikrotik has "some" reasons for this, maybe the price tag, but why not have at least the USB port. This is otherwise a nice and powerful device (WiFi6 - ARM64 / 4C 864MHz / 1GB RAM and 128MB storage), but where to put the Dude or containers?
In reality it has become worse with RouterOS v7. maybe the new specs are for v7 while the ac2 specs were still measured using v6.I hope that´s going to get better with newer, more optimized releases!
CPU hAP ax²? It's IPQ6010 ? https://zhuanlan.zhihu.com/p/382127563
When that chip happens not to have a USB port, there will be no USB port. Because adding an extra controller just for the USB port would be too expensive.
For example, the RB4011, a flagship router from the previous series, also has no USB port. While the low-cost hAP ac2 (the predecessor of this hAP ax2) does have it.
If they buy OEM hardware, what another manufacturers use the same platforms?It is very hard for an OEM to select the features to include or exclude.
Maybe they didn't enable WiFi6 on the 2.4 radio?And why is 2.4 GHz still listed as Wi-Fi 4 instead of Wi-Fi 6?
RB4011 has 2 different chips for Wifi. Most likely the one for 2.4GHz is not supported.I mean... if you load the Wave2 driver on a 4011 with WiFi, the 2.4 goes dead.
I have few questions about features of new hAP:
And I miss serial console, user's best friend when something goes really wrong. I understand that having the whole ready-to-use thing is waste of resources, because it won't be ever used on 99,99% devices. What I don't understand is when they add (and they do) incomplete "add your own components to use" version (there are connection points on board) that could work, but then disable it in software, because ???.Also note that MikroTik has really shaved off BOM cost over the years, probably considering for every feature "who would really use that?".
Early routers had touch-LCD screens, an RS232 port, and a beeper. That is now all gone.
I sometimes miss the beeper.
Yes!I am still upset about the beeper being removed from recent products, e.g. CCR2216, CCR2116, RB5009, CCR2004
Almost off-topic but BRING BACK THE BEEPER !
https://www.qualcomm.com/products/appli ... m#OverviewWhen that chip happens not to have a USB port, there will be no USB port. Because adding an extra controller just for the USB port would be too expensive.I voiced my opinion and I don't expect Mikrotik to grab their heads and say, "Sorry we designed it wrong!". I'm sure Mikrotik has "some" reasons for this, maybe the price tag, but why not have at least the USB port. This is otherwise a nice and powerful device (WiFi6 - ARM64 / 4C 864MHz / 1GB RAM and 128MB storage), but where to put the Dude or containers?
Another reason can be that the USB support of the chip is internally used for some other purpose, and they decided not to include a USB hub.USB 3.0 is listed as a supported interface but I'm not sure whether or not that means an embedded controller is included.
Maybe the placement of the USB port by the mode button interfered with the antenna design and they decided not to find an alternative location?
The hAP ax2 was designed for the home user and not the Network nerd ….….. nobody is going to run containers on it.
Routers with an unreasonable amount of RAM have been in the MikroTik product gamma for a long time.I agree some of the design decisions appear to be somewhat unbalanced. I mean, what's the point of 1GB RAM in hAP ax2? Containers could definitely use all RAM you can get, but without USB and small 128MB storage, nobody is going to run containers on it.
Routers with an unreasonable amount of RAM have been in the MikroTik product gamma for a long time.I agree some of the design decisions appear to be somewhat unbalanced. I mean, what's the point of 1GB RAM in hAP ax2? Containers could definitely use all RAM you can get, but without USB and small 128MB storage, nobody is going to run containers on it.
There appears to be only a single use case: a number of full-table internet BGP feeds.
Precisely my point - why would a home user need 1GB of RAM? Even hAP ac3 with its wifiwave2 support has only 256GB. Perhaps AX requires even more.The hAP ax2 was designed for the home user and not the Network nerd ….
This is likely the actual reason. Very often market conditions are such that it's less expensive to get a mass-produced prepackaged solution than a customized one which uses less raw material.It could also be that under current conditions, that 1Gb RAM is actually the cheapest option for their setup.
will be beautiful if:It would be nice to see an ARM successor of hEX
Maybe the new specs are for v7 while the ac2 specs were still measured using v6. ac2 can run v6 but ax2 cannot, so that would be fair.I think these are preliminary performance numbers with much room for improvement/optimization.
Yes, the manual says "don't turn on the device without antennas"
Larger enclosure, less heat overall, and once they release an AX access point without the need to also handle the general routing job, I'll get that. It won't need a lot of cpu/ram/storage. Then I can just turn off the wifi in the ac3 and remove the antennas, and use the AX access point.
Anyone see a flaw in that logic?
Easier, but not sufficient to prevent damage.Keeping wifi disabled on ac3 might be easier then fiddling with antenna replacements ?
That's why there is BIG yellow sticker on the back when you unpack it saying exactly thatEasier, but not sufficient to prevent damage.Keeping wifi disabled on ac3 might be easier then fiddling with antenna replacements ?
I was asking myself the same question, as the new WiFi Wave2 does not have vlan tag as a option on the wifi interface options.Will hAP ax2 support bridge HW offloaded vlan-filtering?
I know it. this is why the Bridge HW Vlan filtering is neededIt doesn't work that way anymore in wifiwave2.
Vlan via bridge.
Does that mean that wifiwave2 also cannot assign a VLAN number via MAC access list or RADIUS? That was the "dynamic" form of this feature. I hope that is not going to be dropped, because it is a much simpler way of having some different networks for different device classes. No need to make a different SSID for each VLAN (reducing the airtime efficiency).It doesn't work that way anymore in wifiwave2.
Vlan via bridge.
This is one of the things that sets wifiwave2 out of scope for my implementations so far. Dynamic VLAN assignment is important, and provisioning one SSID per VLAN need is only a limited workaround.Does that mean that wifiwave2 also cannot assign a VLAN number via MAC access list or RADIUS? That was the "dynamic" form of this feature. I hope that is not going to be dropped, because it is a much simpler way of having some different networks for different device classes. No need to make a different SSID for each VLAN (reducing the airtime efficiency).It doesn't work that way anymore in wifiwave2.
Vlan via bridge.
Yes, HW offload for wlan does not make sense, but, when using the same device as a AP and a switch, not having HW offload for the wired devices, makes the switch almost useless for any traffic bigger than 300mbps on those underpowered devices.HW offloading for wifiwave2 interfaces makes no sense for them. The WLAN and wifi interfaces are not connected to the switch, but are served via CPU.
HW offloading does handle the ethernet interfaces, but setting "VLAN filtering enable" on the bridge, will in many cases disable the HW offloading for the underlying switch.
VLAN filtering enable on the bridge is needed for the VLAN tag/untag action of the bridge.
You are wrong, the topic is about the hAP ax2, HW offload for vlan filtering is something that is relevant for a low powered device like th new hAP (anything below 1.2GHz is low nowadays).We are not discussing HW offload for wired devices. Please don't go offtopic.
Maybe I was misunderstood, I'm talking about the wired HW offloading, which is disabled on most mikrotik devices when bridge vlan filtering is enabled, something that mandatory for wwave2 and vlans on ssid.@jookraw,
can you, please, indicate (at least one) access point (of any brand) for the home / small office that supports hardware offload between wireless and ethernet?
HW offload is not mandatory for wifiwave2 to work with VLANs, bridge vlan-filtering is. HW offload is only necessary for ether-ether performance and doesn't help with wireless (or any other interfaces that are not handled directly by switch chip) at all.I'm talking about the wired HW offloading, which is disabled on most mikrotik devices when bridge vlan filtering is enabled, something that mandatory for wwave2 and vlans on ssid.
Home users need a usb 3.0 port. It doesn't have to be used to attch a harddrive or ssd as NAS. Afterall it's useles as NAS, because mikrotik not support modern filesystem (ext4, ntfs, exfat).The hAP ax2 was designed for the home user and not the Network nerd ….
Now we are talking! I wonder if this is because of v7.5rc.Hi,
Mikrotik has changed the test results and hAP AX2 is now more powerfull in routing and it is now much better than hAP AC2. Pitty that USB is missing now....
Routing 25 ip filter rules 2625.1 Mbps
Mikrotik didn't say anything about RAM type.
IPQ6010 supports DDR3L and DDR4.
will be nice to see an hap ax3 with cpu at 1.800 mhz and DDR4
It means ax2 could be awful if mikrotik limits ipq6010 frequency.the only tests where ax2 surpass ac2 is on fast-path probably because switch to CPU link now supports more bandwidth improving from 2-gbit to 2.5-gbit
the other test show very similar performance with the expected penalties from comparing Ros 6.x Vs Ros 7.x
surely when comparing ax2 to ac2 both on Ros 7.x ax2 will win but for a close margin
more interestingly ax devices with CPU clock 1.800mhz (Chateau 5G ax) show an improvement around 30% over ac2 except on simple queue test, maybe a memory bandwidth starvation consequence
cumulative advantage of Chateau 5G ax over hap ax2 is between 25% - 40%
will be nice to see an hap ax3 with cpu at 1.800 mhz
I agree with u....and another rb450gx4 mark iiMikrotik didn't say anything about RAM type.
IPQ6010 supports DDR3L and DDR4.
Chateau LTE18 ax and Chateau 5G ax datasheets show RAM type DDR3L
so now i saywill be nice to see an hap ax3 with cpu at 1.800 mhz and DDR4
Hi,Hi,
that´s for 1518byte packets, for 512bytes (it´s not the "truth", but probably a more realistic measure) you have now:
hAP ax2 912.9
hAP ac2 986.3
Still ac2 wins if you just want a router, at least with ROS6. And yes, also because of the USB and the lower price. The tests for the ax as opposed to the ac are also missing IPSec. Probably becuse HW acceleration is not yet implemented.
W
the switch chip in the hAP ax² is a QCA8075 - the IPQ-6010 is the cpu chipset...
Switch chip model IPQ-6010...
oh okay, thanks for the clarificationNo, a PHY is not a switch. It is the part of the ethernet controller that sits behind the isolation transformers and controls the signals over the twisted pairs, modulating/demodulating the bits on the wire and sending them as nice 3.3v digital signals to the next chip in the chain, which in this case is a SoC with built-in switch functionality.
They have small first batch 2 weeks ago. My on the way.Getic has announced it will have 1200 units in stock... in late January. Ewww
How many watts does it idle at?I have received my hAP AX2
at 20v I got a reading of ~4.5wHow many watts does it idle at?
it does not support 48V, max is 28v.At 48V it will most likely be the same
Sorry, did not catch that was a joke, no problem.It was a joke but ok, not well received.
Also the power source can have same problem.It is possible to have difference in power usage, due the internal voltage regulators, they can be more efficient in some voltages and less in anothers.
I'm getting 750+Mbps on mine. Hard to say what is wrong, it can be a lot of different things, like channel utilization, noise and etc.I have a hAP ax2 router from today and I am a bit disappointed. I have a UPC 750/200 Mbit link and on the UPC router I get speeds of about 500 Mbit / s over Wi-Fi 5. I connected the ax2 router to it and configured it for Wi-Fi 6. On the iPhone 13 speedtest I only have about 250 Mbit / s.
export
You don´t need 160Mhz to get more than 500Mbps as you can see below:ax2 has maximum 80MHz channel? Not support 160MHz?
But on UPC router Wi-Fi 5 I have 500 Mbit/s…
# oct/19/2022 22:06:59 by RouterOS 7.6
# software id = NAHX-XSTS
#
# model = C52iG-5HaxD2HaxD
# serial number = <CENSORED>
/interface bridge
add admin-mac=18:FD:74:BB:9E:5D auto-mac=no name=bridge
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ax .skip-dfs-channels=\
10min-cac .width=20/40/80mhz configuration.country=Poland .mode=ap .ssid=\
MT5 disabled=no security.authentication-types=wpa2-psk,wpa3-psk
set [ find default-name=wifi2 ] channel.band=2ghz-ax .skip-dfs-channels=\
10min-cac .width=20/40mhz configuration.country=Poland .mode=ap .ssid=MT \
disabled=no security.authentication-types=wpa2-psk,wpa3-psk
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=bridge list=LAN
add interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" \
src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" \
dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=Europe/Warsaw
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Was something lost in translation? convenience doesn't seem like the correct word to me. My understanding was that the reason for not publishing serial numbers is related to cloud backups and perhaps dynamic dns.For your convenience do not post serial numbers...
Why is that?since serial number is kind of sensitive
No, I don't thing that reads in English any better. That sounds more like a threat "You better not touch my stuff or I''ll ..."On the previous post I meant it more like "the museum has a cafeteria for your convenience"
"you better" is more appropriate for what I meant?
"You better do not post serial numbers..."
But what about my cool port knocker?Oh, for the "ip cloud ddns" function you mean? I never use that...
Also, I never configure a device with login from internet enabled. Stupid to do that.
Please can you disable 2.4ghz wifi, your 270 speed test sound like your iphone is choosing the 2.4ghz ax instead of the 5ghz axOk
Please help me why I have slowly speed on my ax2 router...
So that's why there's more holes on the case now, my AC2 idles at 3w.Just got my hAP ax2, firsts impressions, the wifi is atually good and fast.
at 20v I got a reading of ~4.5wHow many watts does it idle at?
Because caps-man is built on the old driver.Hopefully you not saying that we will not be able to have one CapsMAN with multiple AX and AC/N caps which would mean that the cost could be enormous as we would need to change all caps to AX?
Why does the wireless driver matter if they are connected with a wire to CapsMAN?
I get that but they should be able to rebuild CapsMAN with new libraries that will support this correct?Because caps-man is built on the old driver.Hopefully you not saying that we will not be able to have one CapsMAN with multiple AX and AC/N caps which would mean that the cost could be enormous as we would need to change all caps to AX?
Why does the wireless driver matter if they are connected with a wire to CapsMAN?
The AX units don't support that driver.
So they can't be caps-man managed.
I've done some tests between my hAP ax2 and RB5009. Directly connected btest on zt inteface, I get ~200Mbps UDP and 200 RX TCP (from the RB5009) and 120Mbps TX TCP.I'm also gonna build a small SD-WAN style deployment with ZeroTier.
I assume that you'll be using this on connections that does not saturate the CPU.
And here I am playing with VXLAN between my hAP AC2 and In Laws hAP AC2.I've got 5 of these showing up today. In addition to testing the AX WiFi, I'm also gonna build a small SD-WAN style deployment with ZeroTier.
Have been working with an enterprise client on replacing Cisco APs for remote workers with MIkroTik ARM devices to tunnel back to the DC using ZeroTier. These seem to be perfect for that use case and will save over 90% as compared to the Cisco solution.
Exciting times for MikroTik users
/interface/wifiwave2/radio/print detail
Flags: L - local
0 L radio-mac=xx:xx:xx:xx:xx:xx phy-id=0 tx-chains=0,1 rx-chains=0,1
bands=5ghz-a:20mhz,5ghz-n:20mhz,20/40mhz,5ghz-ac:20mhz,20/40mhz,
20/40/80mhz,5ghz-ax:20mhz,20/40mhz,20/40/80mhz
ciphers=tkip,ccmp,gcmp,ccmp-256,gcmp-256,cmac,gmac,cmac-256,gmac-256
countries=all 5g-channels=5180,5200,5220,5240,5260,5280,5300,5320,5500,
5520,5540,5560,5580,5600,5620,5640,5660,5680,5700,5720,5745,5765,
5785,5805,5825
First impression of the coverage are pretty good. At the far end of the flat, this seems to be around on par with Ubiquiti AC Lite (Wifi 5), if not bit better, after a short bit of testing. hAP ac2 was useless here.Can someone compare hAP ac2 & hAP ax2 in terms of coverage zone (bigger, smaller, same) and speed at the coverage zone edges? Thanks.
They can, and they have indicated that they are doing this currently.I get that but they should be able to rebuild CapsMAN with new libraries that will support this correct?
You didn't answer his question at all.Explain what?
I have already replied to your other post, do not spam same question muiltiple time.
viewtopic.php?t=189397#p963637
Could you please clarify what issue this advice will potentially fix?please try this :
in queues -> interface queues
on wireless interfaces change from wireless-default to only-hardware-queue
/interface/wifiwave2/security/print
0 name="wpa2-wpa3" authentication-types=wpa2-psk,wpa3-psk encryption=ccmp,gcmp,ccmp-256,gcmp-256 passphrase="SuperSecurePass"
/interface/wifiwave2/security/print
2 name="wpa2" authentication-types=wpa2-psk encryption=ccmp,gcmp passphrase="SuperSecurePass"
/interface/wifiwave2/security/print
1 name="auto" passphrase="SuperSecurePass"
Depending on the country set, the TX-power might be different. (It is for Europe/ETSI). The classic MT driver is using the non-TPC EIRP limit, while the wifiwave2 driver is using the TPC-EIRP limit, like other brands and drivers do. The non-TPC limit is 3dB lower than the TPC limit. And for Europe, the EIRP limit is the TX power limiting factor. viewtopic.php?t=188338First impression of the coverage are pretty good. At the far end of the flat, this seems to be around on par with Ubiquiti AC Lite (Wifi 5), if not bit better, after a short bit of testing. hAP ac2 was useless here.
Yeah, I did that.You can work around it by creating a separate network for such crap, with a separate SSID and authentication configuration.
Yeah, I've used no_country_set and superchannel, and now had to play with countries (Guatemala is good =) ).Depending on the country set, the TX-power might be different. (It is for Europe/ETSI). The classic MT driver is using the non-TPC EIRP limit, while the wifiwave2 driver is using the TPC-EIRP limit, like other brands and drivers do. The non-TPC limit is 3dB lower than the TPC limit. And for Europe, the EIRP limit is the TX power limiting factor. viewtopic.php?t=188338
Does the new driver actually have TPC? Or is it just a matter of "when others do it, we can get by with it too"?The classic MT driver is using the non-TPC EIRP limit, while the wifiwave2 driver is using the TPC-EIRP limit, like other brands and drivers do.
That's super odd, I have no issues with old devices in WPA2/WPA3 mixed-mode (AES only) on a non-MT AP. TKIP should definitely not be required / enabled on any modern network.Yeah, I did that.You can work around it by creating a separate network for such crap, with a separate SSID and authentication configuration.
But the interesting thing is that I can't manually configure the same behaviour that auto does: in my case, it seems, Ring cameras want TKIP enabled for some reason, and if I enable it manually, I'm getting a warning that it will break some clients.Yeah, I've used no_country_set and superchannel, and now had to play with countries (Guatemala is good =) ).Depending on the country set, the TX-power might be different. (It is for Europe/ETSI). The classic MT driver is using the non-TPC EIRP limit, while the wifiwave2 driver is using the TPC-EIRP limit, like other brands and drivers do. The non-TPC limit is 3dB lower than the TPC limit. And for Europe, the EIRP limit is the TX power limiting factor. viewtopic.php?t=188338
Thank you for the first link, I just was searching how to verify if BSS Coloring & Airtime Fairness work.
Yes, 160 MHz and 80+80 MHz are not supported. hAP ax² radio is based on QCN5052:In terms of channels, 160 MHz and 80+80 MHz appear to be options in the menu, however, once selected, the SSID does not appear in the list of connectable networks.
One more reason to provide a stripped down "wifiwave2-light" package for hAP ac²/cAP acall your CAPsMAN network will have to consist of AX devices (or more specifically, any devices with wifiwave2.npk driver)
jookraw Give me your Messenger or What's Up? Are You from Poland?You don´t need 160Mhz to get more than 500Mbps as you can see below:ax2 has maximum 80MHz channel? Not support 160MHz?
But on UPC router Wi-Fi 5 I have 500 Mbit/s…
Speedtest-from-LAN.pngSpeedtest-from-internet.png
Screenshot from 2022-10-19 21-36-40.png
Yes, I'm. <removed>jookraw Give me your Messenger or What's Up? Are You from Poland?
rb5009, hap ax2 and hap ax3 ipsec numbers were updated on product pagesI think the HW accelaration is not implemented yet in this deivice. And when it will be it could be as RB5009 horible HW acceleration.
Could you please confirm that new AX capable devices (wifiwave2) cannot be added to existing CAPsMAN managed networks that contain older N and AC devices (even when local forwarding is used on the caps)?It can't be used as CAP (yet), it has a completely different wireless driver, which does not have any CAPsMAN support.
CAPsMAN for 802.11ax devices is coming soon, but all your CAPsMAN network will have to consist of AX devices (or more specifically, any devices with wifiwave2.npk driver)
Does this work for anyone? I set all-leds-off to "after-1h" several hours ago, but the green port leds in the front are still active. With hap ac2 this setting is working fine.
- All LEDs off? most probable (hope so)
default@MBP-2020-M1 ~ % iperf3-darwin -c192.168.178.8 -R -P5
[SUM] 0.00-10.02 sec 976 MBytes 818 Mbits/sec 2731 sender
[SUM] 0.00-10.00 sec 963 MBytes 808 Mbits/sec receiver
default@MBP-2020-M1 ~ % iperf3-darwin -c192.168.178.8 -P5
[SUM] 0.00-10.00 sec 795 MBytes 667 Mbits/sec 0 sender
[SUM] 0.00-10.01 sec 788 MBytes 660 Mbits/sec receiver
default@MBP-2020-M1 ~ % iperf3-darwin -c192.168.178.8 -R
[ 5] 0.00-10.00 sec 1.09 GBytes 937 Mbits/sec 53 sender
[ 5] 0.00-10.00 sec 1.09 GBytes 935 Mbits/sec receiver
default@MBP-2020-M1 ~ % iperf3-darwin -c192.168.178.8
[ 5] 0.00-10.00 sec 1.09 GBytes 939 Mbits/sec 2729480 sender
[ 5] 0.00-10.00 sec 1.09 GBytes 937 Mbits/sec receiver
Any issues with your Mac connecting to the ax2 or staying connected to it ?
I opened and was thankful to find TTL console headers on the hEX S.. If that hadn't been there, the router would have been bricked..
And I miss serial console, user's best friend when something goes really wrong.
I'm interested in this, is there a thread where you posted about how you did this? I have an ER-X that I have a Raspberry Pi "debug/console" cable 3.3V TTL connected all the time. It is really useful. The ER-X has header pins soldered in, the hEX S doesn't (that's not an issue, but I thought I read somewhere that the console was disabled in some versions of bootloader, so even if a cable was connected, it was not "enabled".I opened and was thankful to find TTL console headers on the hEX S.. If that hadn't been there, the router would have been bricked..
USB serial didn't work but the TTL points did.. I *needed* to change a setting in the bootloader to recover the router.
My hEX S, the router was stuck on NetInstall in the bootloader..I'm interested in this, is there a thread where you posted about how you did this? I have an ER-X that I have a Raspberry Pi "debug/console" cable 3.3V TTL connected all the time. It is really useful. The ER-X has header pins soldered in, the hEX S doesn't
With MikroTik netinstall, it may be less of an issue.
not officially supported on hEX (S)I'm interested in this, is there a thread where you posted about how you did this? I have an ER-X that I have a Raspberry Pi "debug/console" cable 3.3V TTL connected all the time. It is really useful. The ER-X has header pins soldered in, the hEX S doesn't (that's not an issue, but I thought I read somewhere that the console was disabled in some versions of bootloader, so even if a cable was connected, it was not "enabled".
On the ER-X, it is required for some things like manual TFTP recovery. With MikroTik netinstall, it may be less of an issue.
Yes.. Same as every RouterBoard with a console port, it is always active.The question is, if you connect a 3.3V UART to these pads, does the firmware in the hEX S active them and allow a serial login?
pins, pads, sockets, contacts ... call it whatever you want them to call.I guess your definition of pins is different than mine. What I see on the RB760iGS circuit board are pads for machine testing with pogo pin probes. These could have wires soldered to them, but there aren't any pins like exist on the Raspberry Pi for GPIO, and that's what I was referring to on the ER-X.
The question is, if you connect a 3.3V UART to these pads, does the firmware in the hEX S active them and allow a serial login?
Grab a support file on 7.8, downgrade to 7.7, if it works again using 7.7, open a support ticket.
Instead of posting a result from speedtest, you could better post config and perform a throughput test with a tool like iPerf.I'm not sure, maybe something wrong with my settings, but 1 meter away from the router all I can get over WiFi is
I solved the problem by setting the frequency to 5745