Yes but it seems like they might possibly have it enabled on the router side, as the router is logging an attempt every xx seconds.

Do you have persistent keepalive disabled?

I can't update from within Winbox, and I can't download from the Mikrotik download website.

503 Service Unavailable
No server is available to handle this request.

This is the entire config: /interface bridge add name=bridge1 /interface wireless set [ find default-name=wlan1 ] disabled=no mode=station-pseudobridge ssid=MyWiFi /interface wireless security-profiles set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys ...

I know I've done this in the past successfully, but today I was unable to make it work. I deleted the config so it is completely blank (not default) and then added only the following: Wireless: Type = station pseudobridge (and I set the ssid and password). Bridge contains wireless and ether1 That's ...

I have found that if you set the dhcp server to use the vrrp interface, instead of the actual interface, then the dhcp server is automatically enabled/disabled with the vrrp interface itself getting enabled/disabled.

I've been reading here about various methods to deal with 2 routers each having a dhcp server, and how to stop 1 from serving addresses. Some methods include a script to enable/disable on vrrp up/down. Or to set 1 dhcp server to 10 seconds so it wont sever unless the primary doesn't respond. Or to s...

Everything I read says that in firewall filter rules, use the actual vlan interface for interface matching instead of the vrrp-interface. However, for in-interface, it only matches if I use the vrrp interface. I have a bridge with a few vlans. Each of those vlans contains 1 vrrp interface (vrrp is i...

I found that it actually works as expected if I change the WAN interface MTU instead of the LAN interface MTU. I don't know why though.

On the LAN side, I changed the bridge and the individual interfaces, but that didn't make any difference. There is no vlan.

I can do ping -f -l 1472 walmart.com from my laptop and it returns a successful ping. GOOD. I can do ping -f -l 1473 walmart.com from my laptop and it says packet needs to be fragmented. GOOD. Then, I change the MTU on the LAN interface in Mikrotik from 1500 to 1300. I would expect both test above w...

The VLAN issues seem to be fixed in 7.12beta3! I just installed it, and re-enabled HW, all is good.

That isn't an upgrade issue then, assuming you did actually downgrade both the package and the router board firmware. but i tried with another acess point i still get bad wifi speed. before i update mikrotik .i didnt had problem. with cable i get full speed. its very strange problem That isn't a mi...

İ have tplink acess point on mikrotik LDF5 outdoor. İ had 7.10.2 version . i updated 7.11 after that my tplink acess point wifi speed about 1 mbps or more less but my with cat6 cable speed 86 mbps. i downrage 7.10.2 but still nothing change. its seems my wifi totaly broken with all version software...

All upgrade went well (no issues) BUT I have 2 hEX S with VLANs and those simple come up but users get timeout. Doing a downgrade restores the process so I think there is a bug there.

The hex vlan workaround is a few posts up. No need to downgrade.

Mikrotik replied to my supout ticket and they have confirmed that they have reproduced the VLAN issues on HEX/HEX-S in 7.11 and are working on that fix.

Thanks again for the feedback! The issue with vlan-filtering bridge running together with CAPsMAN has been reproduced and we are looking for a fix. @ bommi, jayooo, dredex - regarding issues with HW offloaded vlan-filtering bridges on hEX or hEX-S. Can please you share supout.rif files to support@m...

Wait, you did a upload and downgrade? Invited downgrade, no result. Upload and reboot, no success. Didn’t try this option. If I can get a connection again I will try this If you are manually rebooting, you are doing it wrong. Upload the old package file, then click Downgrade button. It will reboot ...

Thanks for the feedback on RB4011/RB1100AHx4 with HW offloaded vlan-filtering. The problem is reproduced, and we are working on a solution. It is related to the FastPath fix (introduced in v7.11rc1): *) bridge - fixed MAC learning on "switch-cpu" port with enabled FastPath Running Torch o...

The following works properly with 7.10, no problems at all. However, upgrading to either 7.11 or 7.12 beta causes the network speed to barely above 0. Almost nothing works. I'm not sure if my config is bad, and it just happens to work on 7.10, or if something in 7.11/7.12 is broken. Downgrading to 7...

Upgrading to 7.11 makes my HEX unusable. Internet speed is barely above 0, and nowhere even near 1mbps. I am using vlans, both tagged and untagged. I see that there are a lot of vlan changes in the changelog. Based on the fact that so many people here are having no issues, I assume it is something t...

v7.10 If I use a Bridge, with bridge-filter to mark packets, and use that mark-packet in Queue Tree, the Queue Tree bandwidth limiting works properly. Everything is good. However, if I then disable the bridge-filter rules, and put them in the ip firewall mangle rules, and turn on use-ip-firewall... ...

v7.10 Scenario: No Routing, only transparent traffic shaping with bridge Bridge interface 1-5 interface 1 goes to the uplink gateway interface 2-5 goes to internal devices Bridge Filters: Outgoing interface 1 mark-packet=upload Interface List interface-5 mark-packet=download (and other packets marke...

upgrade 7.2 to 7.2.1 on hAP941 fix memory and cpu usage on hEXr3? i lost, all bridges, all filter and nat rules, all wireguard interface (peers is ok) :-( not fix, one hAP have still problem 19:43:31 system,error,critical router was rebooted without proper shutdown 19:43:31 system,error,critical ke...

Would this fix be related to running scripts such as the ATT gateway bypass? My ATT gateway bypass was broken in 7.2 but working in 7.1.5 EDIT: Just tested on an RB4011, ATT gateway script still not working. Reverted back to 7.1.5. This fix is ONLY to stop routers getting bricked during an upgrade ...

The local-address has to be a valid address on the router, and when there is NAT involved it has to be the NAT'ted address (not the external address).

Yes, it is. It is attached to an empty bridge. And, I can ping both addresses from both routers.

I have GRE tunnels in multiple places, manually setup over an IPSEC tunnel. It works great, except at 1 place I have this oddity: I have an IPSec tunnel, 10.0.0.1 at site-A and 10.0.0.2 at site-B. The routers can ping each other with those addresses, no problem there, the IPSec tunnel is solid. Now,...

Regarding this particular release - it fixes a very rare situation when a router could brick itself during the upgrade process by removing/corruption filesystem so the device could not read system files anymore. So, basically the way I am reading this, if we are already on 7.2, there is no need to ...

Why isn't partition available on CHR? There is obviously going to be plenty of space, and it would be beneficial for the same reasons that it is used on routerboards that support it.

Using Windows Remote Desktop through a Wireguard connection that terminates on Mikrotik 7.2rc3, I am often getting this Remote Desktop error message: "Because of an error in data encryption, this session will end. Please try connecting to the remote computer again." This is Client PC -> Mi...

I have 2 Mikrotik boxes, connected by a GRE tunnel. I have a tcp port from box #1 dst-natted to box #2. Box #2 forwards that to a PC with a web server. Ok. so I connect my device to the IP address of box #1 and the forwarded port, and I successfully hit the web server IF I use masquerade on the GRE ...