The official Mikrotik router thread

[DieBeer]

TR069 ‍♂

Good Morning
I have a VOX fiber line
I use Getflix smart dns to stream USA shows and rugby and cricket. My problem is that Netflix, ESPN and CBS periodically stop stating either unable to load/proxy used or content not availible outside the USA. I am advised by getflix to then reboot my router and then do a force ip update on the grtflix site to correct this. But this happens 5 to 8 times a day and is really cumbersome. I stream through my Roku device. I will appreciate your advice, assistance and guidance here please to this newbie.

 

[Jbn222]

PSA - Scoop have received their HAP-AC2 stock
Just picked mine up <3

View attachment 651286

is the Mikrotik hP ac Lite suitable to handle 20/2 speeds?

 

[powermzii]

is the Mikrotik hP ac Lite suitable to handle 20/2 speeds?

Yes it is - the hAP series is pretty decent for the price point. 20/2 shouldn't be an issue - when you get to 100 up/down then it might struggle depending on the process load (firewall rules, mangles, queues) you place on it.

 

[Thor]

Any way to do a speedtest on a tik?

I want to send that result off to a DB to log it, currently do it at home via raspberry but at this client site I cannot put down a pi so looking to script the tik itself.

 

[netcruiser]

Any way to do a speedtest on a tik?

I want to send that result off to a DB to log it, currently do it at home via raspberry but at this client site I cannot put down a pi so looking to script the tik itself.


View attachment 756068

You need two Mikrotiks to use the bandwidth test. On one you run "BTest Server" under tools and the other "Bandwidth Test".

 

[PsyWulf]

There's a few public BTests to use,try not to spam to death though

 

[Thor]

You need two Mikrotiks to use the bandwidth test. On one you run "BTest Server" under tools and the other "Bandwidth Test".

That IP is apparently the official btest server (Google the IP quickly - I'm not at a pc, on a Hotspot atm.)

 

[Thor]

There's a few public BTests to use,try not to spam to death though

That's one of them, like most of them, it never works.

Is there anyway to run a speedtest cli version on a tik?

 

[PsyWulf]

Never had issues when I was testing earlier this year other than the exact test settings being janky
Have Pi running speedtest CLI since it hosts my monitoring anyway so can't comment there

 

[powermzii]

Hi Guys, do you know if it is possible to do MAC-based VLAN tagging?

Scenario
I have a hAP lite doing my routing + firewalling and its connected to a MESH system that provides WiFi throughout the house. The mesh is quite basic in terms of configuration but it does allow different BSSIDs to use different MAC addresses on the APs.

So on the Tik - would it be possible to find out which MAC the wifi devices are connecting from , apply a VLAN tag and then do all the VLAN routing ? e.g. Tag the MAC for Guest Wifi and apply speed restrictions

 

[Hamish McPanji]

Hi Guys, do you know if it is possible to do MAC-based VLAN tagging?

Scenario
I have a hAP lite doing my routing + firewalling and its connected to a MESH system that provides WiFi throughout the house. The mesh is quite basic in terms of configuration but it does allow different BSSIDs to use different MAC addresses on the APs.

So on the Tik - would it be possible to find out which MAC the wifi devices are connecting from , apply a VLAN tag and then do all the VLAN routing ? e.g. Tag the MAC for Guest Wifi and apply speed restrictions

Mark then apply priority.

Am in the sticks, so my internet is really bad at the moment.

Maybe something like this:

 

[powermzii]

Mark then apply priority.

Am in the sticks, so my internet is really bad at the moment.

Maybe something like this:

Thanks - will watch and try this out

 

[ToxicBunny]

FFS, I feel like a right royal tit at this point in time

(in the true tradition of announcing stupidity online) I've been trying for at least a week to setup a VPN on my Mikrotik with NordVPN and following their tutorial and all that and I was just getting constant errors about "unable to verify peers certificate from store".... turns out I hadn't set the clock properly after the last load shedding incident and it was out by 2 days... FFS.. correct that and all is happiness now.

 

[Genisys]

FFS, I feel like a right royal tit at this point in time

(in the true tradition of announcing stupidity online) I've been trying for at least a week to setup a VPN on my Mikrotik with NordVPN and following their tutorial and all that and I was just getting constant errors about "unable to verify peers certificate from store".... turns out I hadn't set the clock properly after the last load shedding incident and it was out by 2 days... FFS.. correct that and all is happiness now.

You can automate that, go to IP>Cloud and enable "Update time". Works very well for me and always sets it to the correct time after a power outage.

 

[ToxicBunny]

You can automate that, go to IP>Cloud and enable "Update time". Works very well for me and always sets it to the correct time after a power outage.

That is enabled, but I think the time had drifted a bit too far out for it to work (if it operates like some of the other NTP implementations I have seen out there)

 

[r00igev@@r]

That's one of them, like most of them, it never works.

Is there anyway to run a speedtest cli version on a tik?

You can run the bwtest from a script with parameters. Personally, I prefer iperf3 but not supported on the tik. Also on Linux I have often used speedtest-cli. Again, not available on the tik.

 

[powermzii]

Picked up an update on my hAP Lite today, dated Dec 29th

Now on version 6.46.1

 

[Genisys]

Nothing special about it, just an update to fix a few bugs from the previous release

 

[r00igev@@r]

Nothing special about it, just an update to fix a few bugs from the previous release

They been fixing more than a few bugs. This bloke from Tenable can hack!!! https://medium.com/tenable-techblog/routeros-chain-to-root-f4e0b07c0b21

 

[Genisys]

They been fixing more than a few bugs. This bloke from Tenable can hack!!! https://medium.com/tenable-techblog/routeros-chain-to-root-f4e0b07c0b21

That has been fixed in 6.45.7 however. Plus, only vulnerable if a router isn't secured, ie. Winbox is exposed to the internet. Either way, always better to run the latest version on Current or Long term with decent security measures in place. Please don't expose Winbox to the internet.