Double check dns settings > Allow remote request

Ip Firewall > Masquerade > Ppoe unifi

This post has been edited by MX510: Jan 3 2019, 06:14 AM

Hi, guys can you share guide. To setup ipv6 for the current firmware update.

Hi Guys... Just a little update. I managed to get the router working. Strange i repeated the steps from soonwai a few times only now got it up.

Also can i check does the google n open dns still works? The unifi router goes crazy when i inpt those valeues

Google and OpenDNS works. Put the IPs in /ip dns and uncheck pppoe-client's "use peer dns". Uncheck so your router only use the DNS defined by you. Checked also can, your router will use the DNS you set plus the ones that PPPoE gets from TM.

This post has been edited by soonwai: Jan 13 2019, 11:35 PM

I use below console command, "Unifi PPPoE" is my pppoe dialer interface, you need to replace it with your interface name.

- interface=bridge-local (bridge-local is my data vlan bridge, replace with your data vlan bridge name)

I have problem with some site like lowyat, therefore i temporary disable it. Didn't really spend extra time checking it.


____________________

/ipv6 nd
set [ find default=yes ] disabled=yes
/ipv6 dhcp-client
add add-default-route=yes interface="Unifi PPPoE" pool-name=general-pool6 request=prefix
:delay 10s
print

/ipv6 address
add address=::1 from-pool=general-pool6 interface=bridge-local advertise=yes

:delay 10s
/ipv6 nd
add interface=bridge-local ra-interval=20s-60s


/ipv6 firewall filter
add chain=input action=drop connection-state=invalid comment="Drop (invalid)"
add chain=input action=accept connection-state=established,related comment="Accept (established, related)"
add chain=input action=accept in-interface="Unifi PPPoE" protocol=udp src-port=547 limit=10,20:packet comment="Accept DHCP (10/sec)"
add chain=input action=drop in-interface="Unifi PPPoE" protocol=udp src-port=547 comment="Drop DHCP (>10/sec)"
add chain=input action=accept in-interface="Unifi PPPoE" protocol=icmpv6 limit=10,20:packet comment="Accept external ICMP (10/sec)"
add chain=input action=drop in-interface="Unifi PPPoE" protocol=icmpv6 comment="Drop external ICMP (>10/sec)"
add chain=input action=accept in-interface=!"Unifi PPPoE" protocol=icmpv6 comment="Accept internal ICMP"
add chain=input action=drop in-interface="Unifi PPPoE" comment="Drop external"
add chain=input action=reject comment="Reject everything else"
add chain=output action=accept comment="Accept all"
add chain=forward action=drop connection-state=invalid comment="Drop (invalid)"
add chain=forward action=accept connection-state=established,related comment="Accept (established, related)"
add chain=forward action=accept in-interface="Unifi PPPoE" protocol=icmpv6 limit=20,50:packet comment="Accept external ICMP (20/sec)"
add chain=forward action=drop in-interface="Unifi PPPoE" protocol=icmpv6 comment="Drop external ICMP (>20/sec)"
add chain=forward action=accept in-interface=!"Unifi PPPoE" comment="Accept internal"
add chain=forward action=accept out-interface="Unifi PPPoE" comment="Accept outgoing"
add chain=forward action=drop in-interface="Unifi PPPoE" comment="Drop external"
add chain=forward action=reject comment="Reject everything else"

This post has been edited by weikee: Jan 6 2019, 06:03 PM

hi guys..

so need any pro user here to advice. im going to upgrade my router (RB951G-2HnD) that support my newly turbo-ed 800mbps. Atleast can support faster wifi speed than previous model.

thank you in advance

This router only support 2.4ghz, the wireless won't be able to support 800mbps. You need wireless with 5ghz. With 5ghz 2x2 mimo you maybe can achieve 800 speed at very close range.

This post has been edited by weikee: Jan 7 2019, 07:50 PM

hAP AC2 & hEXGr3 are the 2 cheapest Mikrotik's that can support up to 800Mbps.

I suppose you want to upgrade your wifi to AC. If that's the case then hAP AC2 is the obvious choice.

If you need router only, no wifi then hEXGr3 is slightly cheaper.

A few things to note. From my experience using hEXGr3.

hEXGr3:
1. Can support 800Mbps with Fasttrack, no problem. ie: basic config is OK but once you start using queues or other stuff, it'll slow down. Worst case (Fasttrack off) 300-400Mbps.
2. If you use VLANs, eg: internal VLANs or a HyppTV/Internet trunk. The most it can handle is 500-640Mbps. This is because bridge port hw_offload is disabled when vlan filtering is on. Maybe can be avoided using switch chip vlans.

hAP AC2:
Have not played around much with this but it looks good. It can handle 500Mbps with Fasttrack off. Have not tested with 800Mbps.
https://forum.lowyat.net/index.php?showtopi...post&p=90581142

I'm planning on replacing the hEXGr3 with hAP AC2 in the next few days to see how well it handles the vlans and my HyppTV trunk.

As of now, I think go for the hAP AC2. The only things going for hEXGr3 are more RAM (256vs128) and SD card slot. Also early production runs of hAP AC2 had 256MB instead of 128MB.

This post has been edited by soonwai: Jan 14 2019, 08:06 AM

hmm..i having hard time to properly work ipv6 on windows 10, sometimes it works..sometimes it dont. On android device, mostly works flawless. Not sure the cause of the problem

thank you for the info bro

Hi Bro,
router hAP AC2 can support how many user? is it can support up to 100 user? for office purpose.tq in advance

Hello guys,

Need some advice here, currently my office using router Asus AC-RT3200. We have connectivity problem since last year. Already make report to TM more than 50 times but the problem keep repeated. The speed is 100Mbps and now upgraded to 800Mbps but the problem still occur. Sometimes the wifi connected but dont have internet connection. Total users are around 100 devices.

1. What mikrotik router is the best for my situation?

2. I have bought RB2011UiAS-2HnD-IN. Is is sufficient to cater all user with stable connectivity?

3. Does this Asus AC-RT3200 is suitable for office usage?

Your help is really appreciated


This post has been edited by azmanshah89: Jan 11 2019, 10:08 AM

Use RB2011 for routing, and the ASUS as wireless access point. Whether the ASUS is good enough for your office depends on the layout.

1 AP is good for 20 +/- clients. Solutions add more AP or buy a better AP from mikrotik / ubiquity etc

Need help from Mikrotik expert.

Im trying to do NAT(portfoward) 443. The good news, the port foward works. But all HTTPS websites breaks (inaccessible). So, no good.

This is the settings:
chain=dstnat action=dst-nat to-addresses=192.168.1.5 to-ports=22 protocol=tcp in-interface=MY_INTERFACE dst-port=443 log=no

*EDIT

Manage to resolve with below settings

chain=dstnat action=dst-nat to-addresses=192.168.1.5 to-ports=443 protocol=tcp in-interface=pppoe-out1 log=no log-prefix=""

This post has been edited by ruffstuff: Jan 13 2019, 07:37 AM

Trying out hAP AC2 as my RB750Gr3 was not fast enough to handle Turbo800 due to my use of local VLANs and a VLAN trunk for HyppTV and Internet.

Happy to report hAP AC2 more than capable. See the screen recording for CPU usage. HyppTV is also streaming at the same time as the test. Have to put off buying the RB4011 for now.

hAP AC2
ether1 - Unifi BTU
ether2 - vlan 50 and 600 trunk to RB2011UAS downstairs
ether5 - to my MacBook Pro (Thunderbolt GbE adaptor)

Fasttrack: ON
Bridge ports hw_offload: OFF (auto off due to vlans in bridge)

VLANs configured are 500, 600, 50 (ipv4 LAN), 56 (ipv6 LAN) and 70 (IoT LAN)




https://res.cloudinary.com/soonwai/image/up...t-cpu_usage.gif

This post has been edited by soonwai: Jan 13 2019, 11:37 PM

Great sharing bro

Wow that's a good speed from Singapore

Yeah, pretty good right? And quite consistent too with OVH SG.

Normally I would use speedtest.tm.com.my but I've been getting fluctuating results from both 203.121.106.74 and 58.26.239.30 of 500-750Mbps. Seldom goes above 800. Not sure what the problem is. Perhaps many people, like me , who still haven't gotten over the novelty of speed testing 800meg.

Anyway the most consistent tests now are with http://testyourspeed.time.com.my and speedtest.net OVH Cloud SG.

This post has been edited by soonwai: Jan 14 2019, 12:52 PM

Hap ac2 is good, but it generate higher heat than previous models. Now thinking to change to another model.