MikroTik

JohnConnett

Thanks for a really useful reply! Note that after step 2. there is NO password rather than the default password (took me a while to figure that out). Successfully completed steps 1. through 5. taking the DCHP client option at step 5.. The cAP ax is then operating as an Ethernet bridge with both the ...

JohnConnett

Thanks for the help. Setting poe-out=off and using a separate 15v power supply works fine.

My longer term solution will be to use DIN rail power supplies, a (smaller) 48v for the cAP ax and a 15v for the D1101V Door Station.

JohnConnett

Can you post the exact make/model of the powered device? <- Maybe some member have already some experience with the specific device DoorBird D1101V IP Video Door Station . The connection is via an RJ45 socket to 4-wires orange+white (T+), orange (T-), green+white (R+), green (R-). I suspect, but ha...

JohnConnett

I have a cAP ax being operated from the supplied 48v power supply. Also have a device that supports standard PoE 802.3af Mode-A, which requires only four wires of a network cable (it works fine with a TL-POE150S V3 Injector).

Is it possible to power this device from the cAP ax PoE-out port?

JohnConnett

I have a hAP ax³ router and have recently obtained a cAP ax . I would like to use the cAP ax as a Wi-Fi extender and Ethernet bridge. It is within Wi-Fi range of the hAP ax³ but there is no nearby wired Ethernet connection. It is a modest home network with few users. My intention is to use the two E...

JohnConnett

I have a hAP ax³ router and have recently obtained a cAP ax . I would like to use the cAP ax as a Wi-Fi extender and Ethernet bridge. It is within Wi-Fi range of the hAP ax³ but there is no nearby wired Ether net connection. It is a modest home network with few users and doesn't currently use RADIUS...

JohnConnett

Documentation ROSE storage says: RouterOS currently supports SED (Self-encrypting drives) and dm_crypt drive encryption. Does anyone know how to use dm_crypt drive encryption? Also LVM and LUKS are not mentioned in documentation, this means no logical volumes and luksFormat support? The documentati...

JohnConnett

Wish I had more info for you on BTH, but normands was on vacation today and didnt answer my BTH questions LOL. Just noticed that there is a /ip/nat-pmp in RouterOS 7.13 . It is not enabled by default. Maybe Mikrotik does have something to do with NAT-PMP ? As noted elsewhere, NAT PMP on RouterOS Of...

JohnConnett

You keep changing the story. Not intentionally. I intend to use WireGuard for outgoing traffic where that is suitable. I was mislead by the description of NAT-PMP into thinking that it might be possible to port forward back through the same connection. You have confirmed that it is NOT possible. A ...

JohnConnett

YES it can, just not through PROTON. You could host a CHR on VPS for example ( cloud server ) or linux OS etc............. (1) All users would go directly to the public IP of the CHR vice your public IP to connect to a server. (2) The CHR would then port forward that traffic INTO a wireguard TUNNEL...

JohnConnett

Just so I understand you have a hapax3 that gets a public IP......... The hAP ax³ obtains a dynamic IP address from the upstream Virgin Media device. Before enabling the VPN, the Home Assistant system used the DuckDNS add-on to associate a public DNS name of the form <something>.duckdns.org with th...

JohnConnett

Thanks for the detailed reply. My apologies for the lack of clarity in my requirements. I have a hAP ax³ in my home connected to Virgin Media broadband. I have set up Proton VPN on your MikroTik router so that all devices that connect to the internet through it are protected by Proton VPN following ...

JohnConnett

I have successfully set up WireGuard using How to setup Proton VPN on MikroTik routers using WireGuard . The configuration file was created using How to download WireGuard configuration files with the NAT-PMP (Port Forwarding) option enabled. Is there a way in RouterOS 7 to support port forwarding t...

JohnConnett

I am looking for something similar to Transparently Bridge two Networks using MPLS using a hAP ax^3 running 7.13 as the AP and a Raspberry Pi 2 Model B with an Archer T3U USB WiFi adapter running Raspberry Pi OS Lite as the Station . I only need to attach a single device to the 10/100Mb Ethernet on ...

JohnConnett

Here's the Feature Request.

JohnConnett

OpenVPN Access Server offers four options for TLS Control Channel Security : none ; tls-auth ; tls-crypt (default); tls-cryptv2 . TLS authentication is documented as a currently unsupported OpenVPN feature in RouterOS . Support for TLS authentication would allow better interoperability with OpenVPN...

JohnConnett

Received this today:

MikroTik support #[SUP-112121]: import-ovpn-configuration timed out
OpenVPN in RouterOS doesn't support "tls-auth" option.

Will submit a feature request to support the OpenVPN "tls-auth" option.
Still think a clear error message would be useful.

JohnConnett

*) ssh - added support for Ed25519 key export and import in PKCS8 format; Might be safer to provide a mechanism to export just the host public key (or encrypt the hosts keys with a passphrase). Ignore the first part of the above! ssh-keyscan router works fine to obtain the host public key (so long ...

JohnConnett

*) ssh - added support for Ed25519 key export and import in PKCS8 format; Does /user/ssh-keys/import also support Ed25519 public keys? If so, what format(s) are supported? I've tried (what I think are) OpenSSH and PKCS#8 without passphrases and both return unable to load key file (wrong format or b...

JohnConnett

Thanks! Still some issues with ssh keys: *) ssh - added support for Ed25519 key export and import in PKCS8 format; Export of hostkey in ed25519 works, reimport of the same key or other ed25519 keys will not import (tested on CHR(x86) platform): Haven't found a way to convert the exported host keys ...

JohnConnett

Same behaviour for both profile files in RouterOS 7.9rc1.

JohnConnett

Also tried RouterOS 7.9beta4 with a ProtonVPN generated profile (also confirmed to work with OpenVPN Connect v3 on Windows 11 Pro ). [admin@router] /interface/ovpn-client> import-ovpn-configuration file-name: node-uk-12.protonvpn.net.udp.ovpn progress: unsupported option 'key-direction' [admin@route...

JohnConnett

You have the exact steps of the instructions to follow, in the answer.
Did you do what is clearly written???

Yes, with a link back to this thread.
(MikroTik support #[SUP-112121]: import-ovpn-configuration timed out)

JohnConnett

I have an OpenVPN client configuration that works with NetworkManager on Ubuntu 22.04.2 LTS (Jammy Jellyfish) and with OpenVPN Connect v3 on Windows 11 Pro . Couldn't persuade it to work on RouterOS 7.8 . Saw that RouterOS 7.9beta has ovpn - added support for OVPN server configuration export and cli...

JohnConnett

I now have a working configuration broadly similar to my old router. It has been reliable this far with no obvious problems. The speed and range on the wifi are a big improvement! Had a reply from MikroTik Support who had seen my workaround on this forum. One thing I found during my investigation us...

JohnConnett

+1. Really surprised this still isn't supported in 2023!

JohnConnett

Document on IP/Services says that ROS uses TCP port 2000 for bandwidth testing service by default.

/tool bandwidth-server set enabled=no

closes the port.
Many thanks!

JohnConnett

I'm in the process of configuring my hAP ax³ running v7.8 . As part of hardening, I have disabled unnecessary services and set Available From to my local network addresses. However, nmap -Pn -p1-65535 router still shows port 2000/tcp open cisco-sccp . Is there a way to disable this? Will anything br...

JohnConnett

I have found a solution that works for me. Configure dhcp-client including the following: /ip dhcp-client option add name=option57 code=57 value=0x0240 /ip dhcp-client set dhcp-options=clientid,option57 Then: Power off the Virgin Media Super Hub Disconnect the old router Connect the new hAP ax³ rou...

JohnConnett

Tweaked the options on RouterOS using the following: /ip dhcp-client option add name=option57 code=57 value=0x0240 /ip dhcp-client option add name=option12 code=12 value=0x4d696b726f54696b /ip dhcp-client option add name=option60 code=60 value=0x526f757465724f53 /ip dhcp-client set dhcp-options=clie...

JohnConnett

I have tried to remove hostname(12) but this failed with Default options are not removable! using the CLI. Also had a similar failure using WinBox. Using /ip dhcp-client set dhcp-options=clientid from the CLI removes hostname(12). Hooray! Problem solved. Unfortunately not. It seems that hostname(12...

JohnConnett

Problem is still present in 7.8.

JohnConnett

Raised a support ticket: dhcp-client won't connect to Virgin Media broadband.

JohnConnett

After a closer reading of RFC 2131 I found this in 3. The Client Server Protocol : Several options have been defined so far. One particular option - the "DHCP message type" option - must be included in every DHCP message. This option defines the "type" of the DHCP message. Additi...

JohnConnett

Problem is still present in 7.8rc3.

JohnConnett

viewtopic.php?p=942098&hilit=option+53+ ... 3B#p942208

So fixed in 7.4beta5 for dhcpv4-server. My problem is with dhcp-client in 7.7.

JohnConnett

I have a brand new hAP ax³ and am struggling to connect it to my Virgin Media broadband. I suspect I may be suffering from the same issues and have raised it as dhcp-client problem with Virgin Media in General . I have tried to remove hostname(12) but this failed with Default options are not removab...

JohnConnett

I have a brand new hAP ax³ and am struggling to connect it to my Virgin Media broadband. I suspect I may be suffering from the dhcp client issues described in RouterOS beta and rc versions . To me, it looks like the DHCP options are presented in Code order, so hostname (12) is before DHCP Message Ty...

Search found 38 matches

Re: cAP ax as Wi-Fi externder / Ethernet bridge?

Re: cAP ax PoE-out to 802.3af Mode-A?

Re: cAP ax PoE-out to 802.3af Mode-A?

cAP ax PoE-out to 802.3af Mode-A?

cAP ax as Wi-Fi externder / Ethernet bridge?

cAP ax as Wi-Fi externder with CAPsMAN v2?

Re: ROSE storage

Re: Port forwarding through Proton VPN?

Re: Port forwarding through Proton VPN?

Re: Port forwarding through Proton VPN?

Re: Port forwarding through Proton VPN?

Re: Port forwarding through Proton VPN?

Port forwarding through Proton VPN?

Transparently bridge two lans using wifi?

Re: import-ovpn-configuration timed out

[FEATURE REQUEST] OpenVPN TLS Control Channel Security options for ovpn-client

Re: import-ovpn-configuration timed out

Re: v7.9rc is released!

Re: v7.9rc is released!

Re: v7.9rc is released!

Re: import-ovpn-configuration timed out

Re: import-ovpn-configuration timed out

Re: import-ovpn-configuration timed out

import-ovpn-configuration timed out

Re: dhcp client issues

Re: Feature Request: Ed25519 SSH keys

Re: Port 2000/tcp open cisco-sccp?

Port 2000/tcp open cisco-sccp?

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

Re: dhcp client issues

dhcp-client problem with Virgin Media