MikroTik

BartoszP

But it's hard to win a Nascar race if you never drove a car. You need a good driver

BartoszP

Did you ever configure any MT device?

BartoszP

Look at the timelines rextended. He was probably reading the original post and drafting a reply when you added your input. Imagine he went to get a coffee or take a piss............ Neither coffee nor a toilet were involved but the rest of the theory is correct :) Coming back to ports: from user po...

BartoszP

Yes, you can. They are connected to the 3rd switch but there is no difference for daily use from using other ports
Check the diagram how packets flow from port to port: https://i.mt.lv/cdn/product_files/RB110 ... 180118.png

BartoszP

new version, new rules.

BartoszP

You want to fix scanning bots or other abusing devices sweeping all router ports to check if your device is vulnerable.

BartoszP

I would say that self healing works behind the scenes.

BartoszP

Did you read the manual? Backup should be restored only on the device you did the backup. Different model ... you aksked for trouble ... and you have what you asked for.

BartoszP

Change the topic name plese. It's not "Zerotier public IP change" but "change of public IPs of my routers on Zerotier account".

Now it suggest worldwide Zerotier system change.

BartoszP

Boys ... stay calm

.. I would start with testing 6.48.6 on another 911 device to check if it's or not a problem of "beeing-tired-long-running-device-with-leaked-capacitors-week-power-supply--or-wrong-grounding-and-no-future-plans-for-next-years-to-be-on-duty-as-I-want-to-retire".

BartoszP

Normis, not really ... the topic drifts to "how to configure router from scratch as I'm from Iran". Do you think that MT wiki is blocked in Iran? On the other hand the user name looks like automatically generated one ... lots such names are active lately on the forum with simple questions....

BartoszP

Use your favourite search engine and you will find: https://wiki.mikrotik.com/wiki/Manual:C ... rtificates
Is it really so hard to read any manual before asking the simplest question?

BartoszP

...Even though the text is small enough that anyone whos eyes are starting to go will have problems seeing them. For years sn#, model names, types, voltage and a lot of other info on laptops, PSU etc. are embossed with laser on chassis the way that it's impossible to read it without 20-years old ey...

BartoszP

....Would this be a viable solution for a small (yet expanding) company? The first answer is "Yes" ..... but the real answer is "No" ... look for and hire professional who would be able to solve your problems. No LAN diagram, no info about planned NICs ... copper or FO, no info ...

BartoszP

Kind of oxymoron: to trust ZeroTrust.

BartoszP

We tried asking ChatGPT about debugging Mikrotik scripts... I do not believe ... really? It took years to persudae people that search engines are only additional tools for finding information and the answers should be verified. I'm still not sure if it succeded. Now we face the same problem ... how...

BartoszP

... Among other things, I still have to apologize to BartoszP because until I did it too I didn't understand what it meant to moderate a herd of Users... Been there, done that for quite some years. And it can be VERY time-consuming ... much respect for those trying to keep things tidy from behind t...

BartoszP

Maybe this could help search.php?keywords=gmail+problem

BartoszP

Back to the roots. I request to Forum Admins to prohibit posting of ChatGPT scripts on the forum, without specify the source. Why? Just today two users post help request on script maded by ChatGPT without specify that those script are generated by ChatGPT. I'm happy to help, but what I can't stand i...

BartoszP

Blast from the past:

viewtopic.php?f=1&t=93307&p=490460#p490402
viewtopic.php?p=519235#p519235

BartoszP

I'm curoius why do you want to change your router into a tool like this? https://upload.wikimedia.org/wikipedia/commons/2/22/Colorful_bus_Pakistani.jpg?20100602124926 SMB/NFS/RAID/encryption/Authorization ... then maybe PiHole/extraDNS/monitoring .... do you think that CPU would be strong enough to ...

BartoszP

I'm new to the CCR1016-12S-1S+. I got the WAN working, then realized that there were NO fw rules. So, I put some basic ones in. Setting up a basic small WISP . Does anyone want to put in a sample of their CLI fw rules (with notes) so that I can study it ? Thanks -Richard OMG ... it's like ... I've ...

BartoszP

So what are you posting this nonworking code for? Just to promote chat?

BartoszP

Sample code generated by ChatGBT:...

Really? Can't believe it ...

BartoszP

Edit photo please and anonymize serial and MAC.

BartoszP

No matter what, there is one final solution ... find someone with professional LAN tester and validate the cable. No amount of spells and incantations will help if the cable is broken.

BartoszP

Netinstall?

BartoszP

Search search.php?keywords=routeros+vlan
leads to
viewtopic.php?t=143620

BartoszP

Check the very first answer from https://forum.mikrotik.com/search.php?keywords=nat+harpin https://gregsowell.com/?p=4242 As you have dynamic IP you should use address list as a point of reference, not the particular address. Address list should dynamicaly resolve your external address what could be...

BartoszP

...You created the bridge and only put port 2 into the bridge. You need to add the rest of the ports ( except the WAN port 8 ) into the bridge.... To dazzaling69: Think of a bridge as of virtual switch with no ports which could be used to connect devicese and pass traffic to them. Just a box with n...

BartoszP

Simple search search.php?keywords=vlan+tagged+routeros
leads to viewtopic.php?p=706996#p706996 as a "must read".

BartoszP

Do not repair if it works. Model & configuration checked and proven to be reliable ... stay with it.

BartoszP

/export show-sensitive
terse optional

Do not know of certificates as have no implemented but for home router i doubt that it could be a problem ... but never say "never"

BartoszP

It's quite simple: /export file=text_backup /import file=text_backup Import has to be monitored and text backup checked for bindings to particular nonexistend interfaces or particular MACs which obviously change when you move from one device to another. BTW which brand allows seamless transfer of co...

BartoszP

viewtopic.php?p=963122&hilit=restore+co ... on#p963122

BartoszP

Rule of thumb for 80% of network problems:

1. If there is a connectivity problem, check cables.
2. If problem still exists, goto 1.

BartoszP

5 years old topic.
Have you tried netinstall?

BartoszP

... More and more home routers are starting to support Full Cone NAT, and users only need to turn on this option to solve the online gaming problem. I think RouterOS should also follow this.... I don't think so. If you want "one button" solution then buy other SOHO brands. If you want to ...

BartoszP

viewtopic.php?p=982567#p982567
or using
search.php?keywords=vlan+dhcp
you get
viewtopic.php?p=983559&hilit=vlan+dhcp#p983559

BartoszP

Anav ... are you sure that that answer is in proper topic?

BartoszP

Topic more or less similar to your problem
viewtopic.php?p=982567#p982567

BartoszP

https://wiki.mikrotik.com/wiki/Manual:License All Licenses: never expire can use unlimited number of interfaces are for one installation each offer unlimited software upgrades When you buy any computer with preinstaled software is this software always the latest fully patched version from the day of...

BartoszP

Basic economics: supply and demand.
There is an offer and maybe there would be a buyer.

BartoszP

viewtopic.php?p=983160#p983160

BartoszP

IMHO decision is easy.
Do replace 260GS with hEX. If it would fit your needs as replacement then stay with it. If not, just go back to 260GS as a switch and use hEX just for routing and DHCP in place of ASUS.

BartoszP

Can you provide any configuration details?

BartoszP

https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

BartoszP

viewtopic.php?t=143620#p706996

BartoszP

If traffic from 192.168.1.100 goes via router then you can block it so you have connect this particular device to any port which belongs to 192.168.1.0/24 subnet/bridge. If devices use any external switch they bypass router talking directly and router is involved only when thet talk to WAN.

BartoszP

Do not start many topics on the same subject: viewtopic.php?t=193064

BartoszP

viewtopic.php?t=143620

BartoszP

BartoszP

https://wiki.mikrotik.com/wiki/Manual:Tools/Ping

BartoszP

Install full-fledged ftp server.

BartoszP

https://wiki.mikrotik.com/wiki/Manual:System/Backup RouterOS backup feature allows you to save your current device's configuration, which then can be re-applied on the same or a different device (with the same model name/number) 3011 is not the seame model as 951. BTW ... restoring backup on a diffe...

BartoszP

Rule 1. Check & replace cables if necessary.Goto Rule 2
Rule 2. Verify if problem has gone. If not Goto Rule 1.

BartoszP

https://wiki.mikrotik.com/wiki/Manual:Queues_-_Burst

BartoszP

If you think that there is a problem with them then show what makes you fear?
Study the dafault configruation line by line.

BartoszP

There is no way to block incoming traffic from a switch. You can filter it and do let pass it to the rest of network. Not more.
This traffic is as a crowd waiting to enter the venue. You can pass only validated ones but you can not stop the new ones to clog gates trying to get into without tickets

BartoszP

Nowhere.

You need external logging server to keep such data for analysis

BartoszP

Hi,

Isn't it time to refresh that wallpapers with new logotype?

BartoszP

Why do you quote whole preceding posts? Even your ones.
Is it a problem to just use "Post Reply" button? Is It a problem to just answer?
Do you repeat the question of your interlocutor if you discuss?

BartoszP

It was not a allusion to you but explanation to a whole audience as some tend to interpret words too directly if it comes to technical receipes/explanations.

BartoszP

search.php?keywords=gmail+problem

BartoszP

... If you experience strange behavior, it might be needed to netinstall device, clean config, and re-import via terminal config from earlier backup (block by block, could be some parts have been re-ordered and may cause errors but that should be pretty obvious) .... To prevent mistakes: In that co...

BartoszP

So the conclusion is: not offcialy. That it is the compatibility matrix for

BartoszP

Half a year later still the question is valid? You did nothing or you just reached the limit?

BartoszP

How to do it? Search the forum for failover topics and apply them to your configuration. There are plenty of discussions on that topic.

BartoszP

https://help.mikrotik.com/docs/display/ROS/IPsec

BartoszP

Free thoughts

How to distinguish that 127.127.127.127 is an IP address not the domain?
If 127.127.127. is send to DNS resolver then it asks upper level servers for an answer and receives empty answer.

BartoszP

@telecom...

PLEASE DO USE proper tags instead of posting 3 screens long configuration as a post.
Use proper tags eg. "code" one to post code

BartoszP

Are all devices in one L2 domain to let brodcasts broadcast?

BartoszP

Maybe this could help resolving problem ... I know that it's an old post but ... who knows? It depends on your browser. Firefox, for example, sends hostname to SOCKS proxy without resolving it. You can confirm that by Wireshark. PS. assume you are using a SOCKS5/4a proxy. SOCKS4 does not support hos...

BartoszP

https://stackoverflow.com/questions/330 ... n-browsers

BartoszP

Suggestion: one picture is sometimes worth more than thousends words.

BartoszP

Maybe you can elaborate more? Any chance?

BartoszP

320Mb channel width? ... say goodbye to 16 channels at once ... a few devices will "kill" whole block of flats especially if default configuratin set the max power "just to be safe not to be weekest one".
BTW ... what channel combintaion in 5GHz spectrum will let using 320MHz mode?

BartoszP

Upload it as rsc file and execute it with

/import file=thenameofuploadedfile

Read this to prepare import file properly

viewtopic.php?p=606832#p606832

BartoszP

You could be proud. Even the smallest brick makes the wall ... upsss... firewall

P.S.
Do not paint that wall with ugly sentences as thay could stay forever uncleaned

BartoszP

https://help.mikrotik.com/docs/display/ ... figuration

Is it so hard to find?

BartoszP

@pe1chl

Please do stop making such unpleasant comments on Tik's programmers, their attitude to work etc. We are aware of your point of view and you do not help.

Next time you'll treat yourself to a short "detox".

BartoszP

Some forget that most mods are volunteers and their days last only 24h as for the rest of mortals. Both reported & unreported mails have to be read as both types hide a lot of information to be corrected to let the forum be readable and get better and better. If only users had been writing bette...

BartoszP

IMHO "..."is an idiocy" could be written as " ...should be rewritten to system-non-hogging version using scheduler instead of looping a delay"

BartoszP

Do we need a crystal ball to find what is your configuration?

BartoszP

3 topics about the same problem during 2 days. Use "search" function.

viewtopic.php?t=192289
viewtopic.php?p=976179#p976179

Closing topic.

BartoszP

... but of a lacking convenience ...

Convenience is not a "friendly word" for admins. Expect doing things the hard way

BartoszP

Hmmm ... you have running network with connection to Internet and what do you want to connect to Internet? Device from your LAN? Your router? Device from WAN side to your network? Even crystall ball says nothing what is the problem. https://www.learnreligions.com/thmb/6IAt904rjjZk4DV-xc8gd6G7yxU=/15...

BartoszP

.backup is a binary copy of configuration for particular device.
No possibility to restore it to the new one in a trusty way.

BartoszP

Closing duplicated topic about same problem started almost at the same time
viewtopic.php?t=192289

BartoszP

It would help if you provide info what region is your region. No need to advertise an exact address just country

BartoszP

model ax3 is for eXperienced as X states

BartoszP

netinstall

BartoszP

MTU size?

BartoszP

I actually like that, because I think the "modern look" interfaces usually are not an improvement. Obviously you use a windup watch :) What a shame in 2023 to use grandpa's device ... time to buy the new fancy one with a big touch screen, pay functions, an internet connection and ability ...

BartoszP

search forum for Dual WAN .. lots of topics.

BartoszP

Something like this script set for DHCP lease should work. You can extend the idea as you need: :local zone "mylocalzonemail" :local dnsrecord [/ip dns static find where address=$leaseActIP ] :if ( $leaseBound = 0 ) do={ :if ( [ :len $dnsrecord ] > 0 ) do={ :log warning ("DNS release ...

BartoszP

What version of ROS do you use?

BartoszP

Set "inline comments" to "on"

BartoszP

What do you not understand? license level 4 included in 751 allows only 200 users https://mikrotik.com/product/RB751U-2HnD levels of license are described there https://wiki.mikrotik.com/wiki/Manual:License If you run hotel services with low cost RB751 for 2000 guest ... you are brave man ... do you...

BartoszP

What abiout this ? https://serverfault.com/questions/82497 ... -permitted

BartoszP

I always plan mounting AP that way that from each point in the office you "talk to" at least two of them.
If one goes down, the second could take over clients.

BartoszP

Look for Harpin scenario

https://gregsowell.com/?p=4242

https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

BartoszP

Some call that efficiency. Less useless writing, more job done :) In Poland we say "1kg of thinking is worth more than 1kg of labour" As someone who has written scripts and configs that have been used thousands of times by hundreds of dealers... WHILE I WAS TOO DRUNK TOO REMEMBER THAT &qu...

BartoszP

...those Europeans, you know get up when they want too, have some wine for lunch, a siesta in the afternoon, lucky to get 15 minutes of decent work in a day.... So two months is probably accurate. ;-PP Some call that efficiency. Less useless writing, more job done :) In Poland we say "1kg of t...

BartoszP

Anyway, the automatically created rule should match on MAC address instead of IP address.

Till a kid find how to activate "Use random MAC address" in the phone/computer?

BartoszP

What is your offer for such help?
https://mikrotik.com/consultants
English Translation...
"SHOW... ME... THE... MONEY!!!"

If location is good then it could be bartered for accomodation for whole family for 2 months in a high season

BartoszP

I've got public IP and own domain. I read some articles about NAT Hairpin, Port Forwarding etc.
...

Read them again rest router to defaults and search this forum for harpin to find what to do?

BartoszP

What is your offer for such help?
https://mikrotik.com/consultants

BartoszP

Start from here and do search forum for export + import + configuration keywords.
There were a lot of topics about "How to ..."

BartoszP

But ... you do not buy software installed in that device ... you buy rights to use it as a subscription or as "forever license" but you buy them according to the license.

BartoszP

... Obviously there is a difference between an access point inside the house and a Core Router that serves 2000 users... About the device that won't restart... Better to find out in a planned way than by surprise... again this time it can apply to everyone... Absolutely .. so is it time for pizza a...

BartoszP

It as simple as that: https://help.mikrotik.com/docs/display/ROS/RouterOS+license+keys RouterOS licensing scheme is based on Software-ID / System-ID where: RouterBOARD software-id is bound to storage media (HDD, NAND ) . x86 software-id is bound to MBR CHR system-id is bound to MBR and UUID I wrote ...

BartoszP

Starting from the last What newer version of ROS has common to manually crafted firewall's rules? I do not understand this question Leaving an old version of RouterOS only makes you hope that the firewall is always well configured and that there are no exploits around... You implied that firewall co...

BartoszP

Yes, I know, I know ... maintanance, new versions nightmare, replacjing capacitors in the 2 years old device ... so called "must have tasks".... "let him cast the first spell/upgrade" .. do always everyone upgrade crucial devices? What about ... "if it's not broken, DO NOT R...

BartoszP

Maybe VPN supplier does disconnect too long sessions and your router does not get aware of this and keeps trying to send traffic over "semi-open" interface.
Write a script which would be disabling/disconnecting VPN tunnel and starting it every eg. 24 hours to refresh connection.

BartoszP

Mount more APs across whole corridor. I would place one AP per 4 rooms.

BartoszP

viewtopic.php?p=966306#p966306

The crucial part to understand "why not in menu?"

*) wifiwave2 - added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only);

BartoszP

Again and again ... It's called Harpin NAT https://forum.mikrotik.com/viewtopic.php?p=971300#p971300 https://forum.mikrotik.com/viewtopic.php?p=957334&hilit=mikrotik+harpin#p957334 https://forum.mikrotik.com/viewtopic.php?p=964608&hilit=mikrotik+harpin#p964608 or https://forum.mikrotik.com/s...

BartoszP

...
4) GOTO 1

Nice BASIC attitude to the problem

BartoszP

RB1036 ROS6.48.3 485 days so far for a "big boy" at main office
hAP ac lite 6.47.10 477 days ... not bad for such "little one" installed on a construction site.

BartoszP

maybe this could enlight a little bit your problem

viewtopic.php?p=508981#p508981

Sob.

It seems that you described in other words what had been already described but not read

BartoszP

Suggestion, don't do car analogies, they don't work. MikroTik made the same mistake when explaning why you can't upgrade license levels ("Just like you can't easily upgrade your car's engine from 2L to 4L just by paying the difference, you can't switch license levels as easily."), and it'...

BartoszP

... Excuse me but if you read from the beginning I am not asking for a hardware guarantee, in this case and to follow your example I fixed the engine with my own technicians and that engine was working fine , I am asking if we can transfer the old license and migrate it to the new one ID.. but why ...

BartoszP

...It is an absurd policy of Mikrotik not to recognize the license because after you prove the ownership of your device, what was the cause of the damage and the possible solution, in this forum it has been published that this device and others suffer from this problem in the NAND, the that we took...

BartoszP

Simple question: is it a Mikrotik router? What device you you talking about? What configuration?
For the second time today I have to use my profi tool to try understand the problem.

ball.PNG

EDIT: OP edited the oryginal post following anav's suggestion

BartoszP

maybe this could enlight a little bit your problem

viewtopic.php?p=508981#p508981

BartoszP

Did you try /system/ntp/client/reset-freq-drift ?

BartoszP

By the second one so the average usage will be < 10% and you will have spare device in case of failure

BartoszP

What are you writing about?
Do you expect that we know what "..the last Mikrotik youtube video about the Hairpin NAT.." means?
I even asked my professional "gues what the question was about" tool and I didn't receive any answer

ball.PNG

BartoszP

Spammers rely on the particular behaviour of most users ... accepting overquoting and NOT READING what is quoted.

spam.PNG

Topic closed, spammer blocked.

BartoszP

Ask support how to resolve problem

BartoszP

VLAN + DHCP again? The nth time in a week or two.

People ... do you search the forum before asking a question?

Have you checked this? search.php?keywords=DHCP+VLAN and especially this viewtopic.php?t=143620

BartoszP

Hire professional. https://mikrotik.com/consultants

BartoszP

VLAN + DHCP again? The nth time in a week or two.
Have you checked this? search.php?keywords=DHCP+VLAN
and especially this viewtopic.php?t=143620

BartoszP

Do you have knowledge what kind of cables do work reliably for Mikrotik ... except Mikrotik ones of course

I tried CISCO and HP refubrished ones but they link @1Gb only despite any combination of port settings.

BartoszP

I think that the configuration you use should be shared.

BartoszP

Time to recap.

BartoszP

Some would rather starve to death than use Mikrotik but others love such yummy fish ...

BartoszP

First of all your IP addresses on two different WAN connections are the same in the diagram, WHY? ...

They are not the same.

BartoszP

The Nth new topic about VLAN+DHCP last time ... I wonder why?

BartoszP

Did you consider buying somthing newer instead of Alix? Why still Alix with ROS 5.20?

BartoszP

Pool should be set to 10.0.0.0/24 or to 10.0.0.2-10.0.0.254
10.0.0.1/24 is one address pool equal to address of the router.
Look for any on-line IP calculator and check how mask and addresses fit.

BartoszP

Could you provide any diagram and the configuration of the CRS?

BartoszP

What are subnets behind Fortigate, what is VPN subnet in Forigate and what is subnet of CHR.

IMHO the problem is with routing between these subnets if they are different. If e.g. IP assigned to VPN users cover subnet behind CHR then you have "clash" to be solved.

BartoszP

Yes, there are changes in syntax. You should check your scripts.

The best way for me is to use CLI and do "print" them from "scripts menu" to see all places with syntax errors marked.

BartoszP

You should read this topic:

viewtopic.php?p=606832#p606832

BartoszP

What IP has your computer?
No DHCP on that interface means no traffic if your computer is not manually configured.

BartoszP

https://wiki.mikrotik.com/wiki/Manual:Interface/L2TP

BartoszP

...Normally on HP I have assigned a voice parameter to the voice vlan so the switch will automatically know to add the phone to the voice vlan....

Could you elaborate e liitle more on that? What is "Voice Parameter"?

BartoszP

backup recovery works only for the exact same device.
Otherwise you should use .rsc file

BartoszP

Could you post your config? That screen does not tell to much.
I suggest using WinBox instead of smartfon to configure your eouter.

BartoszP

MTU size problem?

BartoszP

Why WebFig? Use WinBox ... dedicated tool for admins ... forget WWW

BartoszP

Are you sure that VPN traffic is not blocked at ISP level?

BartoszP

Filter out all traffic to WAN originating from !172.16.2.xxx addresses

BartoszP

BartoszP

The answer is CAPSMAN, your next mate

https://wiki.mikrotik.com/wiki/Manual:S ... sMAN_setup

BartoszP

... Also, there is the problem of an arms race. When one user increases power, the other users will have more interference and may be tempted to increase power too. After that, the advantage has mostly disappeared. Thank you for saying what I didn't said just pointing that too much power of any dev...

BartoszP

Bypass Unifi switch and make tests then.

BartoszP

Could you scan your environment for foreign WiFi networks? Did you set channels manually or you have "auto" mode which "fights" with other APs for the best band? Once on that forum there was VERY WISE statement: "AP are as speakers of a HiFi set. If you turn the volume up to...

BartoszP

standard shell access on ssh, on RouterOS I only get a limited non-standard shell

What is "standard" and what is "limited"? Can you explain?

BartoszP

https://wiki.mikrotik.com/wiki/Manual:Reset

EDIT:

BTW this wired connector is intentionally unwired

BartoszP

You are not alone

viewtopic.php?p=946635#p946635
viewtopic.php?p=950321#p950321

BartoszP

Something from the list? https://mikrotik.com/products/group/ethernet-routers

BartoszP

No need to apologize

BartoszP

ROS updated to newer version?

BartoszP

Solution is quite simple:

https://wiki.mikrotik.com/wiki/Manual:Interface/EoIP

BartoszP

Not so simple. What is FQDN of NAS from the example? And what IP it should resolved to? If local domain of computer is set manually to a different name than the local and remote network then what is the proper one used to resolve? What if there is NAS called NAS in the local subnet and NAS called NA...

BartoszP

6.9? Really ... you should go up to 6.40 , good copy , jump to 6.41 which changed "a lot", then up to 6.49.x and then to 7.x

BartoszP

No way to block incoming traffic without help from ISP.

BartoszP

And The Winner Is ... closing long discussion on other brands.

BartoszP

No need for "Schlammschlachten". Closing

BartoszP

It seems that most questions are asked far far too late as the LTB happened 6 months ago and production line is closed as last shipments happened 2 weeks ago.
This is the crucial answer is the answer to:

Does Mikrotik have millions in stock or just a few hundred?

BartoszP

You should be able configure them via WWW in the browser.Connect with IP.

BartoszP

"Use your force" search.php?keywords=Wireguard+Slow+upload

BartoszP

It's not MT guilty but IP is banned. Ask ISP for different IP or check how to ask blacklisting organization for whitelisting

BartoszP

There is a very usefull function of forum called "Search" search.php?keywords=mikrotik+harpin

and then
viewtopic.php?t=189249

BartoszP

Have you tried simple: search.php?keywords=ax2+capsman ?

BartoszP

7.6 on hex as in a branch office connected to main office based on 6.4x versions.
IP-IPsec + GRE-IPSec + OSPF + iBGP + typical set of rules ... works. What to say more?

BartoszP

Did you try search.php?keywords=bgp+1072+2004 ?

BartoszP

connect camera directly to computer which should be set to 192.168.0.2/24 netowrk settings. Access camera with 192.168.0.64. Reconfigure it to DHCP. Done.

There is no simpler way to have your camera accessible from your 88 network.

BartoszP

Search the forum for "failover".

BartoszP

Removed configuration, created again. Same antivirus configuration managed centrally. Configuration made as for other hundreds of clients.
Nothing special. This one particular computer connects to VPN and stops to connect to Internet.
Computer is 600 km away so it's not so easy to debug the problem.

BartoszP

Why not? If you have 64A capable power line supplied to your house it does not mean that you can draw 64A from a power network all the time by each device at home. IMHO everyone accepts facts that fridge + iron + hoover + dishmashine could overload your home cables. Even if they work together then i...

BartoszP

It should be explained clearly in the agreement that link is 1Gbp capable not the traffic the world and it works as a funnel for all users in the same location. Otherwise they will be complaining "My connection works at 300Mb ..." forgetting that they have 802.11n cards in computer or that...

BartoszP

I have same problem as Longinus.

One Win11 computer connets to VPN and stops to communicate with the world .. other clients work normally. Other computer of user, connecting with same place works as expected. No idea what next could be done.

BartoszP

Check the capacitor on power adapter, try to replace it with another new...(any between 12V/24V is good, but must be 1A at least)

Capacitor or fuse as 1A requirement for capacitors makes no sense.

BartoszP

@Panbambaryla: L2 protocol used for MAC level access to device is really uncommon feature not available for other brands. It's a HUGE adventage when it comes to configuration errors and lets you to go back from "point of no return" but ... L2 protocols are not so simple to manage as settin...

BartoszP

If you started own new topic of "docker+pihole" then wait for help in it.

BartoszP

I just thought it was irornic ...

So did I ... that is why I wrote about me in the third person

BartoszP

AFAIK BartoszP complains when whole preceding posts are unnecessarily quoted to be commented. It's is like a discussion when someone repeats whole preceding or even "grand-preceding or grand-grand-preceding" sentence of interlocutor just to comment it or even without need.

BartoszP

Please decide what you operate? 1. Hotspot created and fully managed in Mikrotik with mikrotik APs 2. Hotspot created with 9 UniFi APs with Mikrotik as a router 3. Mix of different vendors' APs providing WiFi and configured locally as "desert islands". Draw you network diagram and define w...

BartoszP

Quite easy.

If you are aware of configuration for the bridge you already have, then create the second bridge with the only eth3 port assigned,
clone configuration from current bridge but use IPs from the "other" pool.

BartoszP

Did you check that these CVE are for 5.x kernel (checked 3 of them)? ROS 6.xx is based on older kernel and wifi drivers are made by Mikrotik

BartoszP

Just "dreaming" ... no need to implement anything else than predictible known order.

BartoszP

Not a Mikrotik problem.

BartoszP

Limit access only to known MAC addresses.

BartoszP

Nothing fancy, just sortkey="script-like expression" which should evaluated for each record and used to sort.
Maybe the 'optimize-search' switch for the best sorting-tree order and simple 'asc'/'desc' ones.

BartoszP

Most logical would be ip address, no ? A. Chronological order as items were added. B. Listname + IP C. IPs first then subnets or subnets then IPs? D. Subnets with higher or lower mask first? E. Lowest timeout first or last? F. maybe the order which is used internally by search algorithm to make sea...

BartoszP

I wonder: "What order key should be used during export?"

Search found 2352 matches