MikroTik - Search

dougunder

I do have an update.

Needs a little work prior to making it public.

I'll post after Thanksgiving.

dougunder

Thanks for this.
Works great.

It really should give some sort of warning,

I'm using script permissions for slightly more security vs import.
This is a fall back thing,

dougunder

Nice stable release! We have a few dozen hAp AC's and SXT's on this and 6.44.4 Have to keep an A/B setup as routeros refuses to install the same version packages over a bundle. Was quite annoyed to receive a shipment of these as they will not install earlier versions. Going to our internal stable is...

dougunder

Hi,

I've been trying to get WPS enabled via a script pushed to the router with CWMP.

Is this too "interactive" to allow?

Hoping not as the devices we are using do not have WPS buttons and customer service really shouldn't be opening a shell to customer devices.

dougunder

你好,找不到太多的信息如何获取authenticates. So if I had a https server running nginx with basic auth configured. And someone was trying to man-in-the-middle one of our routers. Using wireshark or similar would they be able to sniff out the password. Assuming the P/W is safe, if they ...

dougunder

We do it like this: :global SUPPORTPUB "ssh-rsa RSAkeygoeshere support@mycompany.net"; :global SECCFG do={ :global SUPPORTPUB; /file {print file=supportpub.txt; :delay 2; set supportpub.txt contents=$SUPPORTPUB}; /user { remove [find name=YOURNAME]; add name=YOURNAME password='YOURPASSWORD...

dougunder

Super old post but the first that came up googling my issue. I'm updating as I've solved the issue raised. I can retrieve scan report no problem. We have a script that pulls a bunch of stats and posts them to a Slack channel. What I'd like to do is display only entries <-60 or -55 which unfortunatel...

dougunder

/interface wireless scan wlan1 background=yes

dougunder

I've been trying in vain to get wps working over tr69. If it worked I'd add more delay; WPSON Sucks needing to shell in just to attach a printer. Experimenting I've found this doesn't work Change execute "\$WPS" to $WPS and it works fine. Can i get confirmation that WPS is like ssh client?...

dougunder

Updated again

It's now using channel lists and appropriate extension channels.

Customers are very happy with this,
With a 40/80hrz devices throughput is exponentially more at the edge of coverage.

dougunder

Be very careful! Upgraded a number of devices from 6.42.3 with no problems. Today I attempted upgrade of a HAP AC running 6.40rc6 in the field and it started boot looping. Customer was complaining about issues so I assumed it was a bad device and swapped it out. Just attempted upgrade of a 6.42rc6 H...

dougunder

We have many HapAC's and SXTsq's that are out of space. They cannot update certificates(many are too old to use ram for crl-store), they cannot upgrade their OS. Some are so bad they can't even run scripts to enable vpn access etc. The only extra package we use is tr069 We have tried the space fix n...

dougunder

We use Flashfig on LTS Ubuntu via wine. Works better then is does in win 10. Have some scripted ssh for re-provisoning etc Getting flash fig to work is a work of art all it's self. Keep it simple as possible just get the device online and pull the config from an ftp. I've attached what we use. Other...

dougunder

A working but far messier solution: :global SETVR do={ :global MODE; /interface ovpn-client set comment=("3.0.0beta5-".$MODE) [find name="ovpn-out1-support"]; /system script set startup source={{:global version [[/interface ovpn-client get [find name="ovpn-out1-support"...

dougunder

So i have a setup script with a variable passed to it via tr069. I'd like to put the variable into a script :put $MODE # ROUTER /system script set startup source={{:global version [("3.0.0beta5"."-$MODE")]; log info message="running config ver $version" }}; /system scri...

dougunder

This is mostly fixed for our customers. Were using the setting in the script in post one of "Wireless woes and how to fix em :)" It is caused by congestion. When reported we look at the network; resolve if internal (such as getting those stupid Direct print printers on the network instead ...

dougunder

Updated after significant usage.

Set to US Bands and lowered 5g gain.
Also upped the HW timeout to 15s on 2G; cannie mind if it was this go round or earlier.

Currently using with 6.42.3

dougunder

We create a bridge, add all interfaces to the bridge, and run dhcp client on the bridge. I doubt a static address would make a difference. Thats pretty much it. My script is just a much less wordy way (loop instead of adding individually each interface) Given you only have the issue on the wifi I'd ...

dougunder

Let me roll the snark back a little. Gettting a little frustrated with Mikrotik in general and I feel it's spilling over a bit. With Ruckus, Cisco, Ubqt or any other AP I've dealt with lately you don't touch the channels(or the gain, or any of the tweaks needed). DFS works properly and they channel ...

dougunder

Can you post your config? We've got SXTs in wireless client mode running dhcp server for a hAP AC inside the home in bridge mode (all interfaces bridged} and it works fine. I don't recall making and special changes to the bridge to make it work. Do an export and I'll see if anything looks amiss. Her...

dougunder

For anyone looking for the 'perfect setup' PLEASE do not use this. For a start, use "scan-list=2412,2437,2462" The scan-list shown in that post contains a list of 20MHz wide channels on Ch1, Ch3, Ch5, Ch7, Ch9 and Ch11 (which all overlap and interference with each other). Only ever use Ch...

dougunder

Updated again today Back to 20/40 on 2G, heavy users had connection issues on 20 Updated scan list to accommodate. Unsure of regulatory limits in the UK. My loose understanding is you get more frequencies, we get more power. I think 0 gain in fine once the crappy antenna's (2) are disabled. We had u...

dougunder

Here is a full export set [ find default-name=wlan1 ] adaptive-noise-immunity=none allow-sharedkey=no ampdu-priorities=0 amsdu-limit=256 amsdu-threshold=8192 antenna-gain=0 area="" arp=enabled arp-timeout=auto \ band=2ghz-b/g/n basic-rates-a/g=6Mbps basic-rates-b=1Mbps bridge-mode=disabled...

dougunder

Wireless woes and how to fix em forum

Don't want to take over yours

dougunder

I avoid that proprietary crap like the plague, even if it were decent I think that's responsible for the shoddy WiFi AP performance/compatibility. They have to write their own drivers to support it. So old kernel and crappy driver for a crappy non standard protocol. The Qualcomm cards should be much...

dougunder

It never worked securely until 6.42rc5 *) tr069-client - fixed HTTPS authentication process As far as I'm aware that was never backported. So we eagrly awaited the new "stable". That said the wireless is ok on 6.42 branch it just take a ridicules amount of tweaking. Kinda bummed to hear it...

dougunder

For production systems you should use the bugfix branch, which is currently on 6.40.8

Bugfix includes any security fixes.

Nick

Does is support tr069 yet?

dougunder

Thanks you This is in home wireless, single AP. No roaming We are using 20MHz for 2.4g. Why only 3 2.4ghz bands? The spectrum in this area is very crowded, surely all 11 channels is better? We have some multi unit homes with 4-6 of of our customers alone, never mind our competitors. We're also plan...

dougunder

Hi, Yea you will defiantly do much better with 80Mbps. We supply a maximum of 150mb/150mb, with the majority using 30/30 so with our use case the 80Mbps is an unnecessary waste of spectrum. If throughput is your primary objective I would use channel-width=20/40/80mhz-Ceee on wlan1 and wlan2. The sca...

dougunder

Net install doesn't handle logic very well. One workaround is chainloading it with scheduled tasks. We use flashfig to set a task that loads the setup rsc That setup rsc enables secure boot mode, preventing accidental reset. I'll often netinstall the flashfig file when when reimaging. So the method ...

dougunder

I don't want to admit how much time I've put into this :) But it works super well now. I recommend texas poe for a good 24v injector rack. /interface wireless set [ find default-name=wlan1 ] ssid=MikroTik /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /sy...

dougunder

IDN if we count as a WISP, we have a fiber backbone and use wireless to the home. We use Juniper and Ruckus on the back and Mikrotik at the customer level, except the gateway at multi unit as Routeros 802.1X port level radius auth is a joke. Currently just under 1000 Mikrotiks in service Here is our...

dougunder

Hi, Updated script again today. First to answer your question YH, yes the scan-list is checked one by one until it finds a clear(ish) channel. Warning: my list is valid for only the USA allowed frequencies. Based on info here: https://en.wikipedia.org/wiki/List_of_WLAN_channels We limited the 5G to ...

dougunder

Ok I have upgraded the script. 2G is working much better with an honest gain. Previously the iphone saw 3-4 bars but the throughput was only less then a Mb. I believe the amount of data getting lost and resent is why it was killing other device. Now when the SIGNAL-STRENGTH is <-70 it sees 1-2 bars ...

dougunder

I second yottabit on the group key to 1h.

Also turn on wmm, really helps newer phones.

I don't think dhcp is related, out AP's don't even run dhcp.

dougunder

Thanks you This is in home wireless, single AP. No roaming We are using 20MHz for 2.4g. Why only 3 2.4ghz bands? The spectrum in this area is very crowded, surely all 11 channels is better? We have some multi unit homes with 4-6 of of our customers alone, never mind our competitors. We're also plann...

dougunder

I had similar issues.

大修理是频率乐队和设置发射功率,当我们ll as group-keep-interval in the security profile

Got to bounce but will better explain later

dougunder

Updated This is far and away the best version! { :global WLANMAC [/interface wireless get wlan1 mac-address]; :global SSID "YOURSSID"; :global SETWIFI do={:global SSID; /interface wireless set $1 ssid=($SSID.$2) comment=3.4 mode=ap-bridge wireless-protocol=802.11 station-roaming=disabled w...

dougunder

今天我发现了一些新的问题。我们已经看到many international hAP AC with disappearing 5g We set all of them to to country="united states3" frequency-mode=regulatory-domain. We thought they were not following the country so we have been testing a manual scan-list Turns out there is...

dougunder

I'm seeing the same issues, on 2 out of 10 in my upgrade test group. I've confirmed that the credentials are correct. Ultimately she did get the phone connected, 09:31:01 wireless,debug wlan1: 68:84:70:3F:75:90 attempts to associate 09:31:01 wireless,debug wlan1: 68:84:70:3F:75:90 not in local ACL, ...

dougunder

测试6.42.1 2 g是可怕的(10-15mb)除非s you use 20/40 (60+) This is across devices. Terrible waste of spectrum when all you need is a stable 30m Most of our customers have our 30 synchronous (3030 i get me hands dirty) Huge bonus points is you can name the artist :) 5 or 6 all in an apar...

dougunder

When is the .2???????

disconnected, group key exchange timeout

Were a municipal ISP btw; I seeing this error on every hAP AC I've upgraded across spectrum of devices primarily cell phone from what I've been able to glean.

the update interval is 1h

dougunder

I see the same error for one of my clients since upgrading to 6.42.1 We are using wpa2 ay/01 10:02:14 wireless,debug wlan1: 68:84:70:3F:75:90 not in local ACL, by default accept may/01 10:02:14 wireless,info 68:84:70:3F:75:90@wlan1: connected, signal strength -73 may/01 10:02:45 wireless,info 68:84:...

Search found 43 matches