MikroTik - Search

TomSF

This is a "never mind" moment. As I pasted the two configurations in this response, I saw that my failing security profile had an extra letter in the passphrase vs. explicitly putting the passphrase in the configuration. After fixing that everything works as expected.

TomSF

I observed this issue with v7.10rc3 and do not know if it applies to other versions. The ax^3 is configured as an AP directly (no capsman). I added a device to my world that required a 2.4G wifi which I already had configured on the ax^3. The device would connect and disconnect 2 seconds later. It n...

TomSF

Many of the bugs fixed in version 7.9 have been introduced in the 7.8 beta. And many errors seem to occur randomly. This is a sign of bad programming: before 'fixing' old bugs, you should review your development team. which is why us old timers used to love the long term release tree, but now that ...

TomSF

I upgraded my AX3 from 7.8 to 7.9 and it killed my wireless with disconnection issues, see https://www.reddit.com/r/mikrotik/comments/137yhg8/hap_ax3_ros_79_issues/ for more people who are having the issues. I downgraded back to 7.8 and wifi is working again. Configuration is pretty basic with 2 VL...

TomSF

... the "patch" of having a different capsman for wifiwave2 is *horrible*... I couldn't agree more. I waited a long time for ax^3 availability and was shocked when I found out about the capsman situation. Luckily, I only have one wifiwave2 device and as it turns out, new capsman couldn't ...

TomSF

I have a very similar setup to yours and have never had any problems. Do you use vlans? For the record, I have the problem and do not have vlans. Also, I do not have to do anything special after a reboot for devices to start registering again. As far as MT's QA procedures, I naively assumed somebod...

TomSF

So 3 people with the same problem then so far. I am not sure if I am one of the three but include me in the list. I am using wpa2 & 3 and as I had reported, registrations get dropped and no new ones can be created with my ax^3, thus requiring a reboot. Holvoeth's post hopefully narrowed things ...

TomSF

v7.9 on hap ax^3 drops wifi registrations and will not allow new ones until a reboot. This problem was observed and reported by at least 2 of us using v7.9 rc4. It seemed fixed in rc5 and v7.9 stable but after 3 days of running, all registrations were gone. There were registrations last evening and ...

TomSF

ROS 7.9 seems to have broken IPv6 for at least tile on a CCR1009-7G-1C. With 7.9 there are no connections to global WAN addresses. Trying to ping one says there is no route. I downgraded to 7.8 and immediately had lots of IPv6 global connections. I reinstalled 7.9 and again could not get any global...

TomSF

你使用有状态或slaac吗?我用slaac。The dhcpv6 client asks for and gets a prefix for ND. I add an address from the pool for the router which creates a route. This works fine with 7.8 but not 7.9. I will dig into it later but was curious what is working for you. I am using DHCPv6 PD c...

TomSF

在7.9版本的IPv6对我来说很不错你强g stateful or slaac? I am using slaac. The dhcpv6 client asks for and gets a prefix for ND. I add an address from the pool for the router which creates a route. This works fine with 7.8 but not 7.9. I will dig into it later but was curious what is w...

TomSF

Since I upgraded to 7.9 (from 7.9rc2) my Homepod seems to have connection issues. I'm getting "The Home hub is not responding / The Home hub is now responding" notifications several times a day. Wifi controller shows an uptime of 1d+ for this device without an increased rate in retransmis...

TomSF

ROS 7.9 seems to have broken IPv6 for at least tile on a CCR1009-7G-1C. With 7.9 there are no connections to global WAN addresses. Trying to ping one says there is no route. I downgraded to 7.8 and immediately had lots of IPv6 global connections. I reinstalled 7.9 and again could not get any global ...

TomSF

Bug #2: If I open Webfig on hAP ax3 and click on: Wireless -> Radios → wifi1 (5GHz radio) Webfig hangs, and I need to reload webpage again. If I click on Wireless -> Radios → wifi2 it works. Using Winbox it works for both radios. On hAP ax2 it works for both wifi1 and wifi2 in Webfig and Winbox, so...

TomSF

Problems with v7.9rc4 on hAP ax^3. Using the ax^3 as AP only. I have now rolled back to v7.8. 1) The system has crashed and restarted once. 2) Two times all clients registered with the AP have disappeared, and no clients can register or register without an AP reboot. As a general question, is the IP...

TomSF

Comcast recently upped my speed to 1.2 gb/s so I am trying to bond two ports to take advantage. The cable modem is a Motorola MB8600 in which I have enabled "LAG(Link Aggregation Group, or Ethernet Port Bonding)". My router is a CCR1009-7G-1C (no switch chip). Until now, WAN was ether1 and...

TomSF

Your configuration looks pretty close to mine. I didn't specify any frequencies, chains or vlan-id though. When I run monitor, I do not see the available channels listed, as your output shows. I have seen weirdness testing with my android phone. At times, usually after turning off wireguard, a speed...

TomSF

I turned off hardware offload individually for each of the 5 ax3 bridge ports. I had bridged all the ports. I just noticed that my wireless interface has it turned on, but it was dynamically added to the bridge, and I do not see a way to turn it off. While I was troubleshooting the performance issue...

TomSF

I turned on rstp, but not sure where you disable hardware offloading. Any clues? I found two places that look relevant. In the switch settings, uncheck the box that says, "Switch all ports". Then for each bridge port (I have all ports in the bridge), uncheck the box that says, "Hardw...

TomSF

Thanks, that didn't seem to do anything for me, still stuck at 500Mbps with capsman enabled compared to 7-800Mbps without.

I am not using capsman, since I only have 1 wifiwave2 device and its capsman cannot configure my other 7 access points.

TomSF

I turned on rstp, but not sure where you disable hardware offloading. Any clues? I found two places that look relevant. In the switch settings, uncheck the box that says, "Switch all ports". Then for each bridge port (I have all ports in the bridge), uncheck the box that says, "Hardw...

TomSF

A brief update. I found Mikrotik documentation that said hardware offload for the IPQ PPE chip used in the ax3 is a work in progress and to not use it. Instead, turn on rstp for the bridge. I turned off hardware offload for all the ports and turned on rstp. Speedtest now has 764 download speed! That...

TomSF

My problem has been solved, and it only took me most of the day!! Once I turned off hardware offload for the ax3 port connected to the ccr, the order of magnitude difference between Tx and Rx went away. My Speetest results went from 94.7 to 233 (not quite as good as the 241 when I was associated wit...

TomSF

Great info, thanks. Yes, I know not to run btest on the router but desperate times call for desperate measures. In my testing I only experienced packet loss when I had the direction set to "both". I have done so many tests that I have gotten totally confused. I am going to rerun tests and ...

TomSF

Between ax3 and rb5009, close to 2.3g using 2.5 ether port.
Up and down.
Both devices on 7.8

Thanks for the info. Just to be sure, you were using btest reported numbers?

TomSF

Yes, I meant LAN only. For now, I have taken wifi out of my investigation, although I wonder if the LAN-only weirdness is related to my poor wifi performance. Sorry for all the confusion. I realized I had not tested one btest scenario; ax3<->ccr. With client on ax3 - receive=95.4 - send=955 With cl...

TomSF

Hi, your tests make no sence..how you can get on AC 945Mb/s? Iguess you mean thorough LAN. Yes, I meant LAN only. For now, I have taken wifi out of my investigation, although I wonder if the LAN-only weirdness is related to my poor wifi performance. Sorry for all the confusion. I realized I had not...

TomSF

radios show 0-1 chains Or shows/means chains 0-1 , that is 2 chains, number 0 and number 1. This is confirmed by the documentation. 2.4GHz has 2 chains (named chain 0 and 1), 5 GHz has 2 chains (named chain 0 and 1). The chains on radio 2.4GHz and 5 GHz are independent, they can use the same antenn...

TomSF

Those who have poor throughput performance, what PHY speed do you see? I use ax3 whit capsman v2 and performance is great. Real wold speeds are around 500-600mbps in the same room/open space. ac2 performance was x2 slower as capsman v1 throughput is around 350mbps (80mhz channel). With my Surface I...

TomSF

(snip) ...hAP ax3, OTOH, has only 2 chains and thus supports up to 866Mbps interface rate (if running in ac compatibility)or 1200Mbps interface rate (if running in ax mode). All numbers are for 80MHz channel, according to specs hAP ac doesn't support 160MHz channels. ... (snip) This relates to my e...

TomSF

Hi, your tests make no sence..how you can get on AC 945Mb/s? Iguess you mean thorough LAN.

Yes, I meant LAN only. For now, I have taken wifi out of my investigation, although I wonder if the LAN-only weirdness is related to my poor wifi performance. Sorry for all the confusion.

TomSF

I thought I posted the following but do not see it so here I go again. I ran a bunch of btest's involving 2 hap ac's and the ax3. All of them flow through the CCR router. The results are mysterious but maybe related to the wifi issues. AC1 <-> AC2 - sending @ 755Mb/s - receiving @ 790Mb/s - it does ...

TomSF

54C. I do not know how to put it under load but typically there are only about 6 wifi clients at a time and three clients connected via ethernet ports. In other words, it is never highly loaded.

TomSF

It says 26. 2G tx power is 27.

TomSF

I just got an ax3 as a drop-in replacement for a hap ac and quickly discovered the poor wifi bandwidth issue discussed in this thread. Using the same test devices (Samsung Galaxy s10e, Windows 11 PC with Intel Killer wifi 6E ax1675x adapter, and Microsoft Surface w/ Intel wireless) from the same loc...

TomSF

That makes sense. I had a filter to allow untracked on the forward chain, but the packet probably never got that far. Thanks.

TomSF

I have a device that opens an IPv4 TCP connection to a specific port on the WAN. This device loses functionality when that connection goes away which happens when the TCP established timeout occurs. I want to bypass connection tracking for that device to that port. I created a Raw rule to set no-tra...

TomSF

"And scripting, well, it's unending source of amusement... if you're into black or morbid humor.

"

Amen to that!!!!

TomSF

I agree that it appears ROS detects in-use addresses. Adding an address has benefits in that it automatically creates a prefix and a route, but for me there are too many other weird things happening. For years, things worked as expected and then they stopped working. I am going to stick with my scri...

TomSF

One thing that is different, but I doubt it makes a difference, is my pool is dynamically created by the DHCP6 client. The way I wrote my script, it puts an ...:890::/64 prefix on privateBridge and an ...:891::/64 prefix on the guestBridge. There are no address list entries corresponding to the brid...

TomSF

The suggestion "/ipv6 address add interface=privateBridge address=::1/64 from-pool="IPv6 Prefix" advertise=yes" creates an address of xxxx:xxx:8584:890::1/64 on privateBridge, and a used pool prefix of xxxx:xxx:8584:890::/64 on privateBridge. Changing ::1/64 to ::2/64 and assigni...

TomSF

Thanks for the blackhole explanation. Per your suggestion, I ripped out and rebuilt my IPV6 configuration. I even rebuilt the firewall per Mikrotik documentation. Nothing changed. I am now in the process of writing a DHCP6 client script to add the prefix to ND and add a route, both of which used to ...

TomSF

我希望我不是劫持this thread, but my issues seem relevant. I am running ROS 7.3.1 on a CCR1009, but the issues precede the latest release. For literally a couple years, I have had private and guest bridges, each getting delegated a /64 prefix from the pool created by the DHCP6 server, which...

TomSF

Same zero mac address problem but with IPv6. My neighbor list has 177 items, 48 of which have zero mac addresses. None of these IPv6 addresses w/ zero mac addresses match IPv6 address w/ valid mac addresses. I am running ROS v7.2.3. Things seem to be working OK, but I wish I understood the zero mac ...

TomSF

My ISP (Comcast) has recently started giving me DHCP client information with which I cannot ping my gateway. I get an IP address of x.x.110.6/22, on network x.x.108.0 with a gateway of x.x.108.1. The default route added by the DHCP client has the x.x.108.1 gateway for address 0.0.0.0/0 and x.x.108.0...

TomSF

I think what you have would work. I was only interested in catching those that were not using the router DNS. I probably catch all DNS access, but I don't think that really matters. I did it a little different in that I did not use !dst-address as a test. I used !intrface list (I had WAN defined). I...

TomSF

It looks like it was previously working by luck. I had the DHCP client add a default route and as you said, it was using the DHCP server address as the address. I also had forwarding set but not accepting router advertisements. Both have been fixed and all looks good after a router reboot. Thanks.

TomSF

This might be an ISP issue, but I don't know how to diagnose it. The issue is that there is no IPv6 traffic to or from the LAN to the WAN. I know there used to be about a week ago and I have not changed the configuration. The router has gotten an IPv6 address and prefix for LAN delegation. The clien...

TomSF

Good explanations. I have change the dst-nat rules to only apply to not-WAN input. There are rules for both TCP and UDP, Thanks.

TomSF

I run DNS and NTP servers on my router. Most of my network clients use them but there are a few that use hard coded addresses. I recently added dst-nat rules to redirect DNS and NTP requests to the servers on the router. Since then, my default drop rule for the input chain has been logging lots of e...

TomSF

There is a default.json file dated 11/25/2017. There was an .npk file accidently placed in the skins folder which I have now deleted. Should I delete default.json and try v7 again? Yes, that is probably the cause of the problem. Delefe that file and reboot the device. It was the cause. Thanks for t...

TomSF

如果我做了,这是一个自从我甚至不kn事故ow what a webfig skin is. Where would I look for one? There would be a json file in the skins folder under Files. Skins are used to allow you to simplify the MikroTik interface for certain roles, devices and user types. For instance we hide a lot of...

TomSF

That is interesting since I have a CCR1009-7G-1C. Did you do anything special to make it appear? With v6, the winbox list of sections begins Quick Set, CAPsMAN, Interfaces, etc. With v7 WireGuard is in the position where CAPsMAN would be and CAPsMAN is nowhere to be found. Did you happen to make a ...

TomSF

Is CAPSMAN supposed to be in v7.1 tile? I installed 7.1 and there was no capsman so I downgraded back to 6.49rc2 immediately. It is there and works just fine. Using it on CCR1009. That is interesting since I have a CCR1009-7G-1C. Did you do anything special to make it appear? With v6, the winbox li...

TomSF

Is CAPSMAN supposed to be in v7.1 tile? I installed 7.1 and there was no capsman so I downgraded back to 6.49rc2 immediately.

TomSF

I just upgraded Winbox to 3.29 and ROS to v7.1rc2 (tile). Winbox no longer has capsman in its highest level categories, but I still had a capsman window open from before the upgrades. Additional info: I restored winbox 3.28 from a backup but it will not run with v7.1. I downgraded back to 6.49b54 an...

TomSF

Does anybody have problems with ipv6? Firewall filters are totally broken. Just added this /ipv6 firewall filter add action=reject chain=forward reject-with=icmp-no-route add action=reject chain=input reject-with=icmp-no-route add action=reject chain=output reject-with=icmp-no-route And still have ...

TomSF

Regarding DNS caching not working, i.e. using all the cache memory but not retaining cache entries longer than a few seconds, for what it is worth it works fine on v7.1 beta6. It is using all the cache memory allocated but not discarding the entries. v7.1 has a minimum cache size of 512, which v6.49...

TomSF

I am running v7.1b6 tile, and attempted to upgrade mipsbe and arm AP's via capsman (7 in total). I did this one by one, rather than a mass upgrade. Every attempt failed with a log message acknowledging the request and then a failure message saying it failed to download the file, no such file found. ...

TomSF

我刚刚升级到v7.1 beta6 (tile) from 6.49beta54. I logged into my admin account with Winbox and my log shows 294 logout and login entry pairs for my admin account in the first 7.5 minutes. Each logout and login entry pair has the same timestamp. Winbox continued to function normally and after 7...

TomSF

CAPsMAN has almost the same information.

TomSF

Wow, there is a ton of information there. I wish I would have know about that a long time ago, I could have used a lot of it. Interestingly, I have no Wireless Registration information. Could that be because I use CAPsMAN to manage the APs? CAPsMAN does have registration information.

TomSF

DHCP服务器分配从192.168.1.10and there are no leases below that. I did discover connections from the router to all APs and to itself using port 8291 (the Winbox port). I logged into an AP and it has an active user logged in via Winbox on 7/6/2021 but at a different time. The ro...

TomSF

I have a home network with a router, 7 access points and a couple switches. I am running v6.49beta54. Beta54 automatically installed at 1:00 AM on June 6. I noticed in my log that my admin account logged in via winbox at 1:18:42 AM that day from address 192.168.1.1 which is the local, NAT-ed address...

TomSF

Just upgraded to 6.49beta54 and I can confirm that the DNS cache issue is still present. I was able to reproduce it using the same POC I provided to support (SUP-51096). My earlier post said it was fixed for me. The fix didn't even last for 24 hours. It is again discarding all cache entries after a...

TomSF

Is anyone having DNS cache issues with 6.49beta46 ? I just discovered this issue. Entries appear in the cache and then disappear a few seconds later, rendering DNS caching useless. beta 54 was released a few hours after this post and it fixed my dns issue. The cache now has entries that stick and t...

TomSF

Is anyone having DNS cache issues with 6.49beta46 ? RouterOS shows cache is full but looks like there is nothing in the cache. If I keep running /ip dns cache print I notice everything that enters the cache is immediately purged due to lack of cache space. Should I contact support and send them a s...

TomSF

Detect-internet was the cause of those messages. I turned it off and they stopped. What value is detect-internet supposed to provide? It must be there for a reason. Anyway, thanks for the advice.

TomSF

How do I disable it?

I am still getting the log messages but discovered they are part of the association process. Whenever a client gets connected, one of those "detect lan" messages appears with the same timestamp.

TomSF

I considered that but haven't done anything with that feature. I didn't even know it was available from the Winbox Interfaces menu. Upon invoking it from the Interfaces menu it had blank names for LAN, WAN and Internet lists. I fixed that and looked at the statuses, which I had done via Terminal. An...

TomSF

I have 7 dual-band Mikrotik access points. Each AP has my normal SSID on each band and a guest virtual AP on each band. One has a second virtual AP on the 2.4 band. It has been this way for a few years. Periodically I would see a log message (info buffer, interface topic) that I never understood but...

TomSF

That may be the answer. I have been running without loose tracking for a couple days and have had no log entries for new connection attempts from the WAN. Thanks.

TomSF

I have a rule to drop invalid packets and another to drop new connections, both for the forward chain from the WAN. The new connection rule logs the packets. Both rules are blocking packets but the log shows TCP flags of ACK,PSH for the new connection rule. I would expect to see SYN. If there is no ...

TomSF

Anyone who has been having trouble uprgading from 2.10 to 2.11 or 2.12 i turned RSTP on and after that i managed to upgrade the swOS no problem. Don't know why that is the case. Turning on RSTP on all ports allowed me to upgrade too. After turning it on, the first attempt failed but the second atte...

TomSF

I am not able to upgrade a CSS106-5G-1S. it detects there is a new version but every time I "Download and Upgrade" it fails. I downloaded the upgrade and tried to manually upgrade and it failed too. After upgrade failure, the switch will not respond to its DHCP provided IP address until I ...

TomSF

I ran into another MIPSBE problem on a hAP ac running 7.0 beta 8. It has a virtual AP configured by capsman for use by my main printer. The printer associated with the virtual AP and got an IP address but nothing could communicate with it. The router couldn't even ping it. I had to downgrade the AP ...

TomSF

Thanks for the info. I was able to leave the router at 6.47 and upgrade 5 of my 7 APs to 7.0 beta8. However, my two wAP ac APs became inoperable after upgrade. I have other MIPSBE APs that upgraded OK though. Outdoor APs with POE are not the easiest to work with but I was able to see that one was fl...

TomSF

I ran into a lot of issues after upgrading my CCR1009 from R.47rc2 to v7.0 Beta 8 and had to downgrade back to R.47 to have a functional network. Here are the issues: - I expected the upgrade would use the same configuration as R.47 but it didn't. It used the default configuration as if I had reset ...

TomSF

Is there a way to change the default username and password for discovered devices? All the devices get set with username of admin and I am guessing a blank password since that is the factory default for Mikrotik. It is a real PITA to go to every Mikrotik device and change those.

TomSF

I remember links getting added automatically and found the following sentences in Manual:The Dude v6/Links: "The Links pane shows all connections between devices that are shown on the map. New Links can be added on the map by clicking Add and then choosing Link. When using the Discovery interfa...

TomSF

Dude 6.46 Beta 35. I am not a regular user of Dude but played with it in the past and have seen its network maps with links between the devices. I now need a network map and cannot get Dude to layout the network well or show any links between devices. It just plops all discovered devices in a big pi...

TomSF

MikroTik supports assured me the file is safe so I installed it.

TomSF

I just downloaded the Dude client installation and Windows Defender flagged it as Trojan:Win32/Detplock. Has it been checked for a trojan and should I allow it to run?

TomSF

/system script set dont-require-permissions=yes was the explanation. Thanks.

TomSF

Thanks for the example. Using it, and examples from the Manual, I came up with something that seems it should work but has a problem. Following the example in the manual I created two simple scripts; ISPup and ISPdown. The ISPdown script is: /log warning "ISP down", ISPup is: /Log warning ...

TomSF

Having lots of ISP reliability problems. When WAN goes down, users have great wifi connections but no internet due to ISP going down. Is there a way to detect the WAN connection going down and back up? Ideally some notification would be sent, but I would settle for log entries.

TomSF

I thought I found the problem, but it seems to only solve it for Windows. The bridges created by Setup Repeater on the cAP had ARP disabled. Once ARP was enabled on both bridges things started working for both radios. I do not know how ARP got disabled on the cAP. I reset the cAP configuration to no...

TomSF

More additional information: Playing with the cAP only, I tried various mode settings on the 2G interface just to see what happened. I rescanned and reconnected to the hAP after each change. None resolved the problem. I then returned the mode setting to station pseudo bridge which is what the Setup ...

TomSF

Additional information: I hard coded the DNS address of 8.8.8.8 in the wireless adapter and connected the client to the cAP. I already had firewall rules in the router to record who accesses external DNS servers and what servers were being accessed. Packet sniffer and the address lists verified that...

TomSF

Let's start with the hAP and cAP configurations. If needed I can post the router configurations but the problem doesn't seem to be with the router. Any client connecting directly to the hAP works fine. It is the client connecting to the cAP, which is an extender of the hAP, that do not get any DNS r...

TomSF

As an intro, I have read (and tried) pretty much all I could find on setting up a cAP ac as a repeater/extender, including watching lots of videos. Ignoring all the dead ends and issues, the closest I could come to success is by resetting the cAP to have no initial configuration and using the Setup ...

TomSF

To complete this thread, an interface list can be used in a capsman access list. This is fixed in 6.45beta62. Mikrotik support said the fix would eventually get added to the stable release.

TomSF

I have a working access list with two entries to accept connections with strong enough signals and reject those that are too weak. They specify an interface of any. I know they work because, as I accidentally discovered, if the entry has a comment then the comment shows in the registration table. I ...

TomSF

True. In fact some devices seem to have Google server and OpenDNS addresses hard coded, such as Firestick, Roku stick and even iPad. They usually use the router DNS server but sometimes go to the Internet. I have firewall rules to log their IP addresses and destinations. In your case, you could crea...

TomSF

Router: CCR1009-7G-1C (tile) ROS: 6.42.7 Networks: 192.168.1.0/24 LAN 192.168.2.0/24 Guests Bridges: privateBridge - all router ports and wireless users associated with non-guest SSIDs guestBridge - wireless users associated wtih guest SSIDs Goal: All hosts to use the router DNS server. The router D...

TomSF

Follow up to my post in case you decide to go that route. One more step is needed. After completing the DHCP Setup, go to the Networks tab of the DHCP window. Open the network just created and add a single DNS server being the same address as the gateway. I discovered that without it, the clients ar...

TomSF

That did it, thanks. I was making it more complicated than needed.

TomSF

I already know the best answer is to replace all APs with MikroTik and I have done that with 4 APs. I am happy with the guest network with the MikroTik APs, controlled by CAPsMAN, where guests are on one subnet and non-guests are on another. However, there is one remaining Engenius AP I am trying to...

TomSF

I am struggling with VLANs myself (which is how I found this thread) for a different reason but I too want to direct hosts to the local server for both IPV4 and IPV6. For IPV4 I do it through an IP DHCP server. Using the DHCP Setup button in Winbox, I put the server on the LAN bridge, defined the ad...

TomSF

The DHCP server lease information has MAC address and Active MAC address which might be related to what you mentioned. For the Samsung, they are both the same. Someday I might string a long cable from one of my other Samsung TV's to see if the problem is Samsung wide or just related to this model.

TomSF

I did not check the ARP tables before the change and can't see the tables on the TV but I did some more tests. I have confirmed that the key is the DHCP Server setting for add ARP for leases. It seems that this would be a desirable setting but with it enabled, the Samsung cannot get to the internet....

TomSF

我得到了三星working! The following are the changes between a configuration that didn't work and one that does. In some cases, my action resulted in using default values for a parameter. I don't know which one(s) was the key one and would welcome any explanations or opinions. If desired, I can ...

TomSF

调试这个问题,我开始了。电缆to the router is on ether1 of the hAP. I disabled CAPsMAN manager on the router and factory reset the hAP into CAP mode. CAPsMAN had not provisioned the hAP. A wired Windows netbook could access the internet but the wired Samsung could not. It was the...

TomSF

If you mean the Netgear, it connects to a single Ethernet port and connects to the wifi network so that a single wired-only device can communicate wirelessly. Using that, the Samsung accesses the Internet fine. What is odd is that the TV gets the same IP address, gateway and DNS server through the N...

TomSF

I have an older Samsung smart TV with an Ethernet port. I bought a Netgear WNCE3001 universal wifi adapter which plugs into the Ethernet port and gets its power from a USB port. This has always worked well. I recently bought a hAP AC and placed it next to the TV, connected to a CCR1009-7G-1C-PC Clou...

TomSF

谢谢你的澄清。这是关键got provisioning automatically going to the right radios, since only 5g can have a and ac. I was able to manually force a provision to a radio but now it does it automatically when I just provision the CAP.

TomSF

That seems reasonable; a 5g radio can't be set to 2.4g. I have separate channel specification for 5g (Band 5ghz-n/ac) and 2.4g (Band 2.4gh-g/n) and separate configurations for 5g and 2.4g. Because each radio has a master and slave (the slave is for guests), that implies 4 configuration; 2 for each f...

TomSF

I had similar problems but tried so many things that I am not sure what fixed it. I recommend starting all over by resetting the AP to CAPs mode. That clears out any configuration that might have been done manually and puts the device in bridge/ap mode. Ultimately, the only thing I configured manual...

TomSF

It is working now. Leaving out the 90% of things I tried that did not work, here is a summary of everything. Background: A simple home network with guest Wi-Fi clients isolated from non-guests for IPV4 and IPV6. The router is a MikroTik CCR1009-7G-1C, MikroTik AP is a RB962UiGS-5HacT2HnT (dual band)...

TomSF

Helpful. I was close but using the hardware supported modes per recommendation got deployment working correctly. BTW, I also have virtual APs for each radio for guests with guest SSIDs and separate security configurations. I duplicated each of the two configurations to specify those for a total of 4...

TomSF

I have it sort of working through only router configurations; both guests and non-guests seem to have IPV6 connectivity. Basically, the capsmon configuration will add the guest wifi's to a guest bridge. Then the guest and non-guest bridges need to get the prefix delegated from my ISP. I am strugglin...

TomSF

This may be a stale thread but hopefully not. I am new at Mikrotik APs and CAPsMAN. I just bought a dual band AP to learn. This is a home network with an 8 port Microtik router, some non-Mikrotik APs and my new AP. I manually got the AP configured mostly functional and then reset it to be a CAP so I...

TomSF

Replying to dksoft. It has been an adventure getting Win 10 to get the DNS address from the DHCPV6 server. One machine did it one time and then refused to get it again. I know there have been issues with Win 10 and IPV6 but I read that as of the Creator update (April 2017) it was supposed to support...

TomSF

Per the suggestion, I am testing a "new connection" rule right above the syn flag checking rule. So far it has caught everything. I will see if anything falls down to the default rule. The log entries look just like the syn checking and default rules; proto TCP (SYN). I did notice that it ...

TomSF

I have a firewall rule to block any TCP connection attempts on the interface connected to the Internet. It does this by testing for a TCP SYN flag with all the other TCP flags explicitly set to the NOT condition. This rule works and if I turn on logging for it, the log shows only the SYN flag for th...

TomSF

I enjoyed the comments. For whatever it might be worth, I also figured out the dryer also sends out ICMP type 135 (Neighbor Solicitation), code 0 packets without problems and it does not seem to send out any Router Solicitation packets other than codes 6 and 168.

TomSF

I have a "smart" washer and dryer. When the dryer starts, I get radvd warnings that it received Router Solicitation packets with invalid code=6 or code=168. If have determined that they can come on either the input chain or forward chain. Not knowing what they are for I am tempted to block...

TomSF

I have the same need and interpretation. Did you ever figure out if the interpretation is correct?

Search found 118 matches