MikroTik

fleg

I have a workroom in my house (without cable connection) where is my PC but NAS is on the 2nd floor with the GW(AP) and 100-150Mb/s via AC2-AC2 over 5G is too slow sometimes for me. I`d like to upgrade using ax. I`ve tested 2 ax2 on the desk and get fantastic 900Mb/s over 5GHz so my expectations are...

fleg

I was confused because radio was connected via pseudobridge e.g but searching ip address.
Is there only way to add subnet in the gw/ap or using NAT at this moment?

fleg

I had 2xAC2 at home...one is gw(ap), 2nd AC2 is client with cable pc. I changed ap(gw) today for ax2 and my client don`t want get ip address anymore.I have all interfaces in the bridge with dhcp client in the bridge. This setup working with AC2 as AP properly. Now I hade to remove wlan1 from the bri...

fleg

I have home network with AC2 as gw(AP) and AC2 is client in my room. Is it possible to connect AC2 in client mode with 2.4 and 5GHz in the same time and use entire capacity of both radios? I`ve tried it via bridge, via bonding like in ethernet`s interfaces but without success. I suspect this is not ...

fleg

But letters could be bigger.
That's where a smartphone camera with zoom comes in quite handy (I got the same problem yet my smartphone is always with me)

Of course I`ve have to used smartphone.

fleg

But letters could be bigger.
Btw debug mode in country are gone forever too?

fleg

F...you guys...I``m old man with old eyes and you added little pasword with nano letters on the bottom?
Very very bad idea.
Thanks for answer mate.

fleg

Today is super day...2pcs of Ax2 ordered in 2022 are delivering today. Or not? I can`t login via Winbox or web to these routers because wrong user or password. I`v tried reset the both with no change. I can use netinstall but my question is...is there some news in login or pass in Ax2 or ROS 7.6? Ha...

fleg

RB5009UPr+S+IN looks very good...if I`ll be able tu put in to the case I`m in.
Dimensions are on the edge.

fleg

I have this device in routing mode. admin@Switch_Hv] > ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 X ;;; defconf 192.168.88.1/24 192.168.88.0 bridge 1 10.100.8.1/28 10.100.8.0 bridge 2 10.100.4.129/26 10.100.4.128 ether5 3 10.100.5.129/26 10.100.5.128...

fleg

Here`s my config for better understanding. 2 bridges Flags: X - disabled, R - running 0 R ;;; defconf name="bridge" mtu=auto actual-mtu=1500 l2mtu=1600 arp=enabled arp-timeout=auto mac-address=2C:C8:1B:1A:98:C8 protocol-mode=rstp fast-forward=yes igmp-snooping=no auto-mac=no admin-mac=2C:C...

fleg

.... in bridge and virutal vlan managed by capsman... . ...I don`t use any vlans... @fleg I was using your words. I suspect that you have misled us and we are not talking about wlan interfaces, but about cap interfaces. If you set action "create dinamic enabled" in your Capsman Provisioni...

fleg

One note for you, mate I don`t use any vlans a this is not capsman`s problem. This is ROS problem because virtual AP got wlan number from local AP, not from capsman. The problem is wlan number is not the same every time and I have unknow interface in the bridge then a dhcp server can deliver IP addr...

fleg

I have several AP managed by capsman. Every AP has bridge wlan1,2 (physical radios) in bridge and virutal vlan managed by capsman (slave config) has typically wlan3 in bridge1. The problem is radio restart or disconnecting from capsman because local AP change wlan3 e.g for wlan7 and wlan7(or wlan5.....

fleg

Edit:
It`s strange because I can see all radios in XS status but I can see connected clients in capsman now.

fleg

Make all services available only from LAN and VPN subnet and you don`t need to make any fail2ban. This is example of classic 3rd floor defense. 16 ;;; SSH blacklist chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_stage3 address-list=ssh_blacklist add...

fleg

I think you`re right wtih the "DFS delay", today they called me they be able to connect internet via 5GHz today so it seems it`s all right.

fleg

I have 3011 as GW with capsman manager. I have 4 cAP, everything in bridge mode (eth1,2,wlan1,2). Now I`d like to separate 5GHz clients from 2.4GHz clients. My setup: 1. I created bridge-wifi with 192.168.10.1/24 addressin the GW(capsman) 2. I`ve setup dhcp on the bridge-wifi 3. I Made 2nd datapath2...

fleg

I have a client MT gw in my network (10.100.4.171) with activated L2TP server. When I tried connect from my network 10.100.0.0/16 connection was made succesfully. But I`d like to connect via main GW with public static IP. I forwarded udp 500 and 4500. 3 ;;; VPN repack chain=dstnat action=dst-nat to-...

fleg

How can one ask for a "logical explanation" if theory is not accepted? One more...I`ve made a tens of tests in the past and I NEVER got these results. I had the same hw, probably similar ROS (some 6.4.x), the same clients. I tried tested on the desk with ideal conditions and every time I`...

fleg

Theoretical interface rates are well known: https://mcsindex.com/ 2.4GHz will only use HT part of that table (802.11n) , so max interface rate for dual stream is MCS15 , for 40MHz wide channel is 300Mbps. 5GHz 802.11ac uses VHT table. Typical 866Mbps in 2-Stream, 80 MHz wide channel. (2x MCS09) To ...

fleg

I`v made a lot fo tests of MT`s indoor wifi in the past and my result was not good for MT. I`ve used AC2, AC3, RB4011 in my test ant try AC2-AC2, AC3-AC2....and all APs vs clients and made tens of tests. Max speed in 2.4GHz was abou 100-120Mb/ and ~200Mb/s in 5GHz. New story. I was replaced some TP-...

fleg

This is my home networok, mate. I don`t need the maximum speed up to Gb/s (I have only 50Mb net connection). But I`d like to get better speed because sometimes I make big-data moving and my NAS is in the rack, so I`m connected only via wifi to the rack. My idea is using the both wifi connection base...

fleg

You have to use pigtail or cable with smar + your antena conector (N-male usually).

fleg

I have ac2 like gw in my house and another ac2 as a client in my desk (for pc). I tunned my connections via 2.4GHz and 5Ghz, 5GHz via nv2 has the best throughput but with random lags, 2.4GHz is mor stable but with 60-70Mb/s in max. I have an idea make load balancer from 2.4 and 5GHz like I made seve...

fleg

My hapAC2 works pretty good. I get about 350mbps within 5ft and about 200mbps in 30ft with 1 wall. I don't have ac3, but it should work better due to the same chip but better antenna gain. Did you turn on the adaptive noise immunity in advanced mode ? Or try a different frequency? Sorry I can`t bel...

fleg

I tried to make independet guest network in my ap managed by capsman and I falied. Because: - If AP is in capsman I can`t activate and set simple virtual AP (out of capsman). - If I have static interface create via provisioning I`m able to make guest AP via add cap interface, but this ap is slave wi...

fleg

AC3 is very big disappointment for me. I`ve tested Archer C6 vs AC2 vs AC3 in 5GHz (latest fw). I made several desk test with ideal connection a then several common tests (8 meters over 2 walls in the house). Desk tests (Iperf 100s) AC3 ~180Mb/s AC2 ~180Mb/s C6 ~ 230Mb/s over walls AC3 - big problem...

fleg

How solved? I can`t see any hint;o).
I have the similar problem too.

fleg

I have this problem a longer time. I have several various Dude servers. E.g. If I have server 6.48.2, but Dude client is 6.48.3 it started, I can see updating info and then it closed itself. I can run dude.exe again and again with the same result. Another problem is automatic attemp to connect last ...

fleg

Alternatively you can add route definitions to entries in PPP Secrets, these static routes are automatically added to the dynamic interface as it is created when the VPN connects.

This is the right way what I needed.

fleg

I have one camera connected via VPN (pptp). If camera`s site lost connection and reconnect again I have to add static route again in the table because old record has unknown gw. Can I fix it permanently? 1 ADC 192.168.1.0/24 192.168.1.1 bridge 0 2 ADC 192.168.2.0/24 192.168.2.100 ether1 0 3 ADC 192....

fleg

Problem "solved". I tried 7 beta with wifiwave2 and speed went up...180 vs 150 in TCP (Bandwith test) and 400 vs 250 in UDP. I had upgraded only AP (AC3), AC2 is not in compatbile list. All packages are very very in beta stage, because there is not possible to connect with station bridge m...

fleg

The huge problem is that I have a little over 200 with full rate (866/80/2S/SGi). This is not normal, I`ve found another topics of angry RB4011 users. This is not good to read because MT is my main product for networking for several years and all my network (over 100 devices) are mostly from MT`s de...

fleg

Sorry guys I can hear from all sides the common TP-Link or Asus can make 400-500Mb (e.g. Archer c6) and I`m not saying that UBNT or something more profi can give over 500Mb easy (Ì`m using UNIFI in my client`s sites). Sometimes someone write he has 400mb in his RB4011, or AC2...but Google is full of...

fleg

If both devices are on the desk, then maybe get some more space between them, as the radios are probably screaming at each other and causes noise This is my 2nd test, previous (several moths ago) was made on the another desk with same result (ac2 vs ac2). I`ve found several threads in this forum wi...

fleg

Can you please share your config (and only use WPA2 AES, nothing else)? Did you test with one client connected through cable and the other client wireless connected? What are the client specs? There is only added security profile, the rest is in default settings. I have pc---ac3(ap mode)----wifi(pt...

fleg

I`m finally testing ac3 on the desk (delivered over 2 month;o)) with ac2 and I ran into old problem, which I had in ac2-ac2 test...I could`t break 200Mb. I tried different settings (NV2, diiferent channels...etc)... but the best avarege speeds was little over 200Mb. Ok with built-in traffic manager ...

fleg

I have classic pptp server in MT GW. I have vpn profil and local and remote address are from this pool. I have secrets where are vpn clients and several users has static ip address from VPN-pool (have vpn-profile all). Sometimes vpn client obtain reserved address for another user. Is this issue? Is ...

fleg

Reset router to factory default and you should be able to configure it correctly.

I agree because fw will be downgrade to default ver, am I right?
But what will be next step? After upgrade I`ll have the same problem.

fleg

I have CRS125 in "gw" mode...2 ports as WAN, rest in bridge. After upgrade to 6.48.1 port1 is not anymore in the bridge because master port can`t be in bridge...but this port was in the bridge with previous version ROS (I don`t remeber version), I`m not able to get eth1 back to the bridge ...

fleg

Do you have the terminal window open in Winbox?

Each terminal in Winbox spawns it's own job - maybe you had a saved session that contained terminals, so when you logged in, Winbox re-launched those terminal windows, and that's why you see active jobs?

You`re right, Great work.

fleg

I`ve found the way...I have to connect twice...after 1st disconnecting when I use reconnect I`m able to login correctly.

fleg

Couldn`t see the versions mate? There are various ROS versions.
Of course mostly I`m using connection only from VPN range.
I know known ROS vulne. because I had hacked several gws a few year ago;o)

fleg

Is this normal? I can see in my some gws when I log in (via winbox) I can see new job(s)...see attach. obrázek_2021-01-25_203649.png I`m confused because I tried about 10 MTs and there are half to half....somewhere I can see jobs after log in somewhere not). Btw there are various ROS (6.43 yes, 6.47...

fleg

i`m interesting where did you find this script? In which rsc?

fleg

I already known it, of course I try to set up legacy mode too. No change. I`ll be with the customer on Monday but I`m afraid I have to be reset to the default his switch because I have no way how can I log in with 0.0.0.0 IP. I always tried mac telnet from another MTs in the network but I can`t conn...

fleg

I have a strange issue with new Winboxes (not only newest I think), I can`t connect to the older devices with some older RoS via L2...I tried connect...I can see 3 dots logining in and then disconnecting. E.g. I was with the customer today and there is one CRS switch (1xx) with IP 0.0.0.0. I wanted ...

fleg

This practice make NAT for all VPN clients but I want to NAT only one. Is there another way except making another VPN2 profile for cam vpn client?

fleg

I have connected 2 MTs via vpn (PPtP) and there are NATs(Masquerade) on the both site of connection, My problem is if connection is broken, nat in pptp server is disabled because virtual pptp interface is missing. Connection is restored in few seconds, virtual interface is again on, but NAT stay set...

fleg

It`s working...but I can`t be at VPN. I tried connect via mobile`s data and it working with double masquerade.
But I``m not still understand why it doesn`t working via VPN.
Edit: Hm it`s working via vpn too...I`m crazy about it.
Resolved.

The question is if is the best scenario for this case.

fleg

Safe mode is not working correctly every time;o). Now I tried make masquerade in the both side of tunnels and enable again dst-nat in HOME and it seems packet is lost from my pc because counter in fw is 0. For better understanding. my pc------VPN(Office)---------GW(Office)-------VPN-----Gw(HOME)----...

fleg

Add masqurade helped with ping...I can ping 192.168.88.248 via VPN now, but I still can`t make telnet connection from pc. Very strange is ping (tracert) working corectly. I added route 192.168.100.0/24 in HOME (this is VPN subnet) and now I can tracerouting win machine from my pc via VPN and win mac...

fleg

From what you've posted and what you haven't, it sounds like two distinct issues. First, to redirect (dst-nat) the initial request packet from the client somewhere in the internet to the tunnel towards HOME at OFFICE, and then use another redirection at HOME to the actual device, is just one part o...

fleg

You can make graphing (via IPs) or see counter in simple queues (show columns---total download bytes).
For daily measuring you have to scripting it.

fleg

I need to resolve this issue. I have one MT with public IP (Office) and another MT with non-public IP (Home). I have a service runnig in HOME network in Windows PC. I`d like to access from internet to this service. What I tried. I`ve made a pptp connection between HOME and OFFICE and add the both pr...

fleg

why they connected after 10 min if I make any change in AP`s wifi and I haven`t no radar detected in log. Told you before, didn't I, its not only with radar detected, it is is with EVERY change, that the 10 minutes wait time must be respected. "The wait times are triggered at wifi startup and ...

fleg

Guys again I know it, the question is not about meteo radars. Question are why clients don`t reconnect after radar detection (I have to change channel or disable/enable radio) and why they connected after 10 min if I make any change in AP`s wifi and I haven`t no radar detected in log. Example from t...

fleg

"(why 10minutes?)." Channel 120-124-128 are weather radar channels. The mandatory wait time is 10 minutes for any connection that includes one of those. The other DFS channels have 1 minute delay (listening for radar) as mandatory wait time. During wait time the AP radio is silent/dead. T...

fleg

I have a few problems last days. I have 2 PtMP sites, one with rb433 + r52h (6.47.1) and second rb metal (645.7)....the both with 16dB sectors. The both sites have been working together over 7-8 years without any problems only I have to use nv2 because 802.11 was not stable and every client (about 1...

fleg

Is there possible to set Capsman for dual wifi ap? If I set wlan1 managed by capsman (enable cap) I can`t set wlan2 too because then wlan1 is not managing by capsman anymore. Of course I have the both wlan1 and wlan2 in bridge (wlan1 is 2GHz, wlan2 is 5GHz). Finally it seems I can have only one wifi...

fleg

Thank you for your goodwill but can you write me examples rather? How you solving these tasks? Let`s assume classic unboxed MT with factory default fw settings (SRCNAT, DSTNAT). How can I block ALL DSTNAT connections from specified IP at the specifed time in the INPUT? How can I block ALL conections...

fleg

Hello guys, I have a strange issue in my MT fw. I have one rule in INPUT a one rule in forward but they are no working properly. First input rule is the client from internet should be connect to the server behind GW (MT) except defined hours. 1 ;;; Block PC client Heneken BA chain=input action=drop ...

fleg

My situation. I have 3 duals AP, 1 and 2 with the same SSID, 3rd has another. I have 4 config, 2G and 5G for 1,2 and 2G and 5G for 3rd AP (becouse another SSID) I have a problem with 5G AP. My provisioning. radio-mac=CC:2D:E0:97:B0:FE hw-supported-modes="" identity-regexp="" comm...

fleg

I have 2 problems with Capsman. I have 3 dual AP managing via gw (capsman). I`d like to add 5GHz ap too but I can`t via winbox and if I`d try interface wireless cap set interfaces=wlan2 I disable wlan1 in this RB. I have latest 6.45.3. 2nd question is how can I manage one AP from another config. I t...

fleg

I have a gw CRS226-24G-2S+ and now I`ve bought a new one CCR1009-7G-1C-1S+. I`d like to transfer all settings from old to new but I think it is not possible to use backp and restore between architectures. I tried it in my home AP (RB941 vs RBD52G-5HacD2HnD-TC, hAP ac2, mipsbe vs arm) and I couln`t r...

fleg

I have a lot of MT home AP with private IPs. I`d like to manage this APs so I`ve made pptp connections for every home AP with my own GW. I can login in APs via telnet from my gw, but I`d like to use my winbox. There is a problem the main gw "doesn`t route" packets to pptp clients, I can pi...

Search found 67 matches