The official Mikrotik router thread

Deanoblado said:
Like i said above, it was a mistake on my side. i will show myself out. Thanks.
Click to expand...
Not chasing you away, just ping the UDM and see if it has any bearing on your issue. Probably not, but at least then you have it eliminated. 8.8.8.8 is an external public IP, and the UDM will be your gateway internal private IP 192.168 / 10.0 / 172 etc
 
Deanoblado said:
Like i said above, it was a mistake on my side. i will show myself out. Thanks.
Click to expand...
Ping on ethernet

Code: 
Ping statistics for 192.168.5.1:
    Packets: Sent = 22, Received = 22, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 2ms, Average = 1ms

Ping on Wifi
Code: 
Ping statistics for 192.168.5.1:
    Packets: Sent = 22, Received = 22, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 15ms, Average = 3ms

Definitely some wifi variability even my side (unifi network) so its to be expected - not sure if your extremely high ping is normal though
 
Just
Willie Trombone said:
I have a Mikrotik hAP ax3 with 2 WAN ports (Wan1, Wan2) and 3 ethernet ports (Eth1, Eht2, Eth3). I want to block all traffic from Eth1 to Eth2 and Eth3 but not Wan1 or Wan2 - in other words, I want Eth1 to be able to communicate on the internet but not see the rest of the LAN.
Is this an easy to do thing?
Click to expand...
Give each port their own IP and masq the ip
 
Willie Trombone said:
I have a Mikrotik hAP ax3 with 2 WAN ports (Wan1, Wan2) and 3 ethernet ports (Eth1, Eht2, Eth3). I want to block all traffic from Eth1 to Eth2 and Eth3 but not Wan1 or Wan2 - in other words, I want Eth1 to be able to communicate on the internet but not see the rest of the LAN.
Is this an easy to do thing?
Click to expand...
/ip firewall filter add action=drop chain=forward in-interface=Eth1 out-interface=Eth2
/ip firewall filter add action=drop chain=forward in-interface=Eth1 out-interface=Eth3

Or make a LAN list, or even a WAN list

/interface list
add name=WAN
/interface list member
add interface=Wan1 list=WAN
add interface=Wan2 list=WAN

/ip firewall filter add action=drop chain=forward in-interface=Eth1 out-interface-list=!WAN
 
So you guys are probably the best source for this, being clever and all that :)
Question: is there benefit to running IPv6 on the Mikrotik for my internal (home) network devices.
If so, any advice for setting it up (I know IPv4, but f0k0l really about v6)
 
LandyMan said:
So you guys are probably the best source for this, being clever and all that :)
Question: is there benefit to running IPv6 on the Mikrotik for my internal (home) network devices.
If so, any advice for setting it up (I know IPv4, but f0k0l really about v6)
Click to expand...
Only problem with ipv6 on Mikrotik is its not fasttrack yet , so the routing is all done via cpu
On my router (Hex poe) I only get around 150mbit on ipv6 vs 400mbit line speed on ipv4
I still use it as I need it for work

Setup will depend on your isp , both my ipv4 and ipv6 are static allocations so I just add the address on my bridge interface , add the default route to my wan peer, and enable RA on the bridge interface
Make sure you still have at least the defconf ipv6 firewall rules , as your addresses are all routable :)

If you isp is on mybroadband there is a good chance someonoe has posted mikrotik config on their threads.
 
6/28 7:36
RouterOS 7.15.2 [stable]

What's new in 7.15.2 (2024-Jun-26 14:42):

*) bth - improved system stability;
*) defconf - configure the default-route property for PPP clients only on devices with a built-in modem;
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) route - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15);
*) ssh - fixed SSH cryptographic accelerator selection (introduced in v7.14);
*) switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
*) system - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15);
*) winbox/webfig - fixed skins (introduced in v7.15);
 
Just ordered myself a hAP ax³.
I have a problem only a Mikrotik can solve.

Currently staying in a roomshare house until next year, but I am irritated by two issues: 1) My phone is able to see (and cast to) other people's TVs and smart speakers, 2) I have to turn on my VPN back to SA everytime I need to access my server or watch F1 TV.

So the Mikrotik will be my own private network, and I will be able to route specific traffic through the VPN back to SA while keeping all other traffic routing out through Virgin Media.

I am excited to get back into RouterOS.

EDIT: Forgot to mention... Pi-Hole is going into a container on the hAP ax³.
 
Last edited:
IceQB said:
Have you tried the new adlist in DNS?
Click to expand...
Also not tried but like the look of this! Currently use NextDNS DoH which costs R300/year but this could be better as it compares the file every hour opposed to downloading all. Would be less overhead in the long run.

They going to add whitelist and I assume the ability to change the reload time to like every 24hr or something to reduce overhead.

Very cool for a no subscription and no extra service / server add on.
 
Leno said:
How is the new hAP going, I was looking at that model
Click to expand...
Its a great router.
My setup has kind of grown a little bit.

So I have the hAP ax3 connecting to the landlord's wifi over 5GHz.
But when I was running a 5GHz AP from the router I was getting half bandwidth since I was asking the 5GHz radio to do two jobs at the same time.
So I got a Unifi AP AC Pro from the office and set that up as my AP and turned off the APs on the hAP.

I am running an AdGuard Home container on it, got a VPN back to my server in SA and got my routes set up.

The router itself is very sexy and I am very happy with it.
 
RouterOS 7.15.3 [stable]
Jul 25th 2024, 05:34
What's new in 7.15.3 (2024-Jul-24 13:36):

*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
 
Anyone planning on upgrading to newer hardware before the year is up?

Still love my little HeX S, what a trooper. I got rid of my 2nd WAN connection though, so I managed to simplify my mangle rules a lot.
 
PhireSide said:
Anyone planning on upgrading to newer hardware before the year is up?

Still love my little HeX S, what a trooper. I got rid of my 2nd WAN connection though, so I managed to simplify my mangle rules a lot.
Click to expand...
Not really, too many Miks already xD. Hasn't really been anything too exiting recently for "home" use
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X