Mikrotik Routers (RouterBoard & RouterOS)

Lowyat.NET forums

Lowyat.NET Kopitiam Garage Sales

Lowyat.NET Rules and Regulations FAQ Help Search Members

Welcome Guest ( Log In | Register )

Lowyat.NET -> Networks and Broadband

Bump Topic Add Reply RSS Feed

26 Pages « < 24 25 26Bottom

Outline · [ Standard ] · Linear+

Enterprise Networking Mikrotik Routers (RouterBoard & RouterOS), User and owner discussion group

views

soonwai	Sep 21 2024, 01:43 AM Return to original view \| IPv6 \| Post #501
 All Stars 11,454 posts Joined: Oct 2007 From: KL	QUOTE(biatche @ Sep 18 2024, 07:08 AM) I've deployed mikrotik AP's to customers in the past, its often the apple devices that have issues connecting to the MT's. What channels do you have the AP's setup on? 1 AP is 2.4Ghz/5Ghz and one more is 5Ghz only. Just 2 to cover my house. As for the channels, 5Ghz is set to AX 80Mhz, no channels specified except to skip all DFS. 2Ghz is set to AX, 20Mhz, channels 1, 6 & 11. So far I've no probs with my Apple devices (Mac minis, phones, laptops, HomePods & watches) with the above config. This current problem just started with macOS 15 and only for my MacBooks and Mac minis. iPhones, iPads & watches all OK. This post has been edited by soonwai: Sep 21 2024, 01:44 AM
Card PM	Report Top Like Quote Reply

soonwai	Sep 21 2024, 03:33 PM Return to original view \| IPv6 \| Post #502
 All Stars 11,454 posts Joined: Oct 2007 From: KL	QUOTE(soonwai @ Sep 18 2024, 01:28 AM) Updated to macOS 15.0 on 2 x MacBook Airs and 1 x Mac mini and all unable to connect to Wifi. iPhones, iPads & HomePods updated to 18.0 are OK. APs are hAP ax2 and hAP ax3 capsman managed by RB5009. All on latest stable 7.15.3. Will troubleshoot tomorrow. Update: • Turned off FT (Fast Transition) and the Macs connect again. No idea whose fault it is. • The Macs had no problem connecting to neighbour's wifi. One is Skyworth and the other one, I think, is DLink. From Mikrotik forum and working for me too. encryption=ccmp,gcmp,ccmp-256,gcmp-256 to encryption=ccmp,gcmp Now working with FT enabled. skywardsword liked this post
Card PM	Report Top Like Quote Reply

soonwai	Mar 8 2025, 05:28 PM Return to original view \| Post #503
 All Stars 11,454 posts Joined: Oct 2007 From: KL	QUOTE(soonwai @ Sep 21 2024, 03:33 PM) From Mikrotik forum and working for me too. encryption=ccmp,gcmp,ccmp-256,gcmp-256 to encryption=ccmp,gcmp Now working with FT enabled. Hmm, this prob still happening after 6 mths with my Mac mini M1. Didn't test any other device. RB5009 managing ax2 & ax3. All on 7.18. Mac mini M1 on macOS 15.3.1 This post has been edited by soonwai: Mar 8 2025, 05:29 PM
Card PM	Report Top Like Quote Reply

soonwai	May 2 2025, 05:02 PM Return to original view \| IPv6 \| Post #504
 All Stars 11,454 posts Joined: Oct 2007 From: KL	mhwee asked about VLAN config for VLAN400 in pm. I set mine long time ago so might not be the 100% correct way to do it. Better I post here for contributions from others. Mine was done mostly by googling & trial & error until it worked. His config is sfp01 to Unifi, ether1 to LAN and ether8 to VOIP. If using bridge for the vlans. It'll be something like this. CODE /interface vlan add interface=sfp01 name=vlan400 vlan-id=400 add interface=sfp01 name=vlan500 vlan-id=500 /interface bridge add name=bridge1 add name=bridge400 /interface bridge port add bridge=bridge400 ingress-filtering=no interface=vlan400 add bridge=bridge400 ingress-filtering=no interface=ether8 Something like that. Can also use bridge vlan for this. CODE /interface bridge vlan add bridge=bridge1 tagged=ether3-trunk1,bridge1 untagged=ether1,ether4,ether5,ether6,ether7,ether8,sfp-sfpplus1 vlan-ids=50 add bridge=bridge1 tagged=ether2-wan1,ether3-trunk1,bridge1 vlan-ids=600 add bridge=bridge1 tagged=ether2-wan1,bridge1 vlan-ids=500 where: VLAN50 is local LAN traffic ether2-wan1 is to unifi modem ether3-trunk1 is a trunk for VLAN50 & VLAN600 to another part of the house. This post has been edited by soonwai: May 2 2025, 05:03 PM ahlong liked this post
Card PM	Report Top Like Quote Reply

soonwai	May 21 2025, 09:51 PM Return to original view \| IPv6 \| Post #505
 All Stars 11,454 posts Joined: Oct 2007 From: KL	The Mikrotik AI bot actually not bad. No need for setup guides already. I use this prompt. "Can you help me with a script to setup my internet connection? My ISP gave me the following info: Internet is using vlan 500. IPTV is using vlan 600. Connection is pppoe with username and password for authentication. WAN ip is dynamic. Router is acting as the gateway and firewall. I'd also like a basic set of firewall rules. My mikrotik router has 5 ethernet ports and the ISP modem is connected to ethernet port 5 and the TV is connected to port 3. The remaining ports are connected to my LAN. Please use bridge vlan filtering." The generated script seems to be OK at a glance. If "Please use bridge vlan filtering." is left out, it will use the alternative way of vlan & bridges. » Click to show Spoiler - click again to hide... « CODE # Create bridge and add all ports /interface bridge add name=bridge1 vlan-filtering=yes /interface bridge port add bridge=bridge1 interface=ether1 add bridge=bridge1 interface=ether2 add bridge=bridge1 interface=ether3 add bridge=bridge1 interface=ether4 add bridge=bridge1 interface=ether5 # VLAN interfaces for Internet (500) and IPTV (600) /interface vlan add name=vlan500-internet interface=bridge1 vlan-id=500 add name=vlan600-iptv interface=bridge1 vlan-id=600 # Assign VLANs to bridge ports /interface bridge vlan add bridge=bridge1 tagged=ether5,bridge1 vlan-ids=500 add bridge=bridge1 tagged=ether5,bridge1 untagged=ether3 vlan-ids=600 # PPPoE client on VLAN 500 /interface pppoe-client add name=pppoe-out1 interface=vlan500-internet user="YOUR_USERNAME" password="YOUR_PASSWORD" use-peer-dns=yes add-default-route=yes disabled=no # Assign LAN IP to bridge (adjust subnet as needed) /ip address add address=192.168.88.1/24 interface=bridge1 # Basic firewall rules /ip firewall filter add action=accept chain=input connection-state=established,related add action=drop chain=input connection-state=invalid add action=accept chain=input protocol=icmp add action=accept chain=input in-interface=bridge1 add action=drop chain=input add action=fasttrack-connection chain=forward connection-state=established,related add action=accept chain=forward connection-state=established,related add action=drop chain=forward connection-state=invalid add action=drop chain=forward in-interface=pppoe-out1 connection-nat-state=!dstnat # NAT masquerade for internet /ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-out1 # Enable VLAN filtering /interface bridge set bridge1 vlan-filtering=yes # Optional: restrict bridge to only accept VLAN-tagged frames #/interface bridge set bridge1 frame-types=admit-only-vlan-tagged ahlong, cyberic, and 1 other liked this post
Card PM	Report Top Like Quote Reply

« Next Oldest · Networks and Broadband · Next Newest »

26 Pages « < 24 25 26Top

Add Reply Options

Change to:

0.0188sec

0.69

7 queries

GZIP Disabled
Time is now: 27th November 2025 - 01:10 PM

All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)

Removal Request

Powered by Invision Power Board © 2025 IPS, Inc.