This has nothing to do with updating or not. I am obligated to report on what devices (all of which were immediately upgraded) were impacted by the CVE. In order to do that I must know which versions are affected. It's as simple as that. The exploit code that was published specifically targets the l...

CVE actually says: cpe:2.3:o:mikrotik:routeros:6.47.9:*:*:*:*:*:*:* cpe:2.3:o:mikrotik:routeros:6.46:*:*:*:*:*:*:* cpe:2.3:o:mikrotik:routeros:6.46.8:*:*:*:*:*:*:* cpe:2.3:o:mikrotik:routeros:6.47.10:*:*:*:*:*:*:* https://www.opencve.io/cve/CVE-2021-41987 I completely agree with your statement about...

Guntis - do you know when the vulnerable code was first introduced? Is the list of versions supplied complete, or are there other versions? I note the CVE says 6.46.*, does that mean all 6.46 versions? What about 6.45, etc?

Have had 3 of 3 RB2011 6.49 firmware upgrades result in bricks. Definitely something here.

We have a number of CRS328-4C-20S-4S+RM deployed in production, running 6.47 ROS as FTTP terminator switches, with a mixture of Maxxwave MW-1315-SM-US SFPs in sfp1-20 and c1-4 to customer premises. We are finding that these switches are periodically locking up. When the switch locks up, the sfp-sfpp...

Two out of three features you've mentioned - IGMP snooping and DHCP snooping - are only applicable to switches, and the first CRS device ever was first announced in the Fall 2013, i.e. only 1,5 years ago (I can point you to a relevant newsletter, if you cannot find it yourself). And the first real ...

ok, igmp snooping, dhcp snooping, openvpn upd, etc, when? when v6 stable? These all are missing features, that have never been supported by any of the ever released versions of RouterOS / Mikrotik devices, and have nothing to do with stability . Latest v6 releases are already quite stable. If you t...

Switches mikrotik without igms snooping and DHCP snooping is cheap toys !
Why these toys you produce?

+1 for DHCP snooping and IGMP snooping. These are the #1 blocking issues preventing us from deploying MT more widely.

Maybe you do not need to use /31 address at all. You can put /32 address to your interface and gateway address to network address field: add address=192.168.1.111/32 interface=ether6 network=192.168.1.1 Try it. While this does 'work', this is not the right solution. The routing table then contains ...

Yea, that's a fair representation. You might only see a single TTL exceeded due to the small size of the route database; I get a few more in the lab but I'm pinging at 50-100ms intervals. In production, it takes a while longer due to the sheer number of routers. In either case, those TTL exceeded's ...

Appreciate the feedback. This behavior is reproducible in a lab environment with a trivial configuration. :) I think I will lab this up just for my own edification - in your experience, how long does convergence take? How many routes are in your table? (so I make a fair comparison) Do you use stati...

Appreciate the feedback. This behavior is reproducible in a lab environment with a trivial configuration. :) Just to be clear, router D has 3 interfaces. 2 face other routers, one faces customers. Recosting the active interface causes packets bound for the customer interface to go ICMP unreachable (...

Say you have a ring of 5 routers, A-B-C-D-E-A, and the OSPF costs dictate that traffic from D to A will travel in the East direction of the ring (ie, through E). It comes time to do maintenance on the link between D and E, but the link is traffic-bearing. No big deal, right? Just change the costs so...

JetJosh - If you're serious about buying this WISP and replacing the internet feed, PM me. I have access to wholesale fiber and transit in the Pacific Northwest, and can help you out.

We strongly request this feature, as well.

You can't. It's one of the features not available in MikroTik's implementation.

Ouch. No route pushing. That's a painful feature to lose in an openVPN server...

Hi All, Has anyone figured out how to push routes from a ROS OpenVPN server to a client? With the regular OpenVPN server, you just put a 'push x.x.x.x/x' entry into the servers configuration. I don't want to manage the routes in the client's configuration file, because I expect to add more networks ...

Apologies for replying to the aging topic, but I wanted to chime in with the solution (so the next guy who is googling can figure it out sooner!) If you're getting this error, then you're probably following the wiki article which says that in the PPP profile, you should set the local address to an I...

Hi All, I've been deploying MikroTik routerboard systems for a while now, and have a fair number in the field. Recently, I started looking at the SwOS products. I decided not (at least for now) to move forward on deploying them. Perhaps my concerns are unwarranted (and therefore, my decision is alte...