Packets DownRange
Some of you may have noticed a new menu item pop up in winbox labeled dot1x Dot1x is implementation of IEEE 802.1X standard in RouterOS. Main purpose is to provide port-based network access control using EAP over LAN also known as EAPOL. 802.1X consists of a supplicant, an authenticator and an authentication server (RADIUS server). … Read more
Mikrotik has released RouterOS 6.45.1 with some security vulnerability fixes. Some of these have been known and fixed before, while others are new fixes.
For those of you running newer routerOS versions you should be aware of this. Downgrading to any version prior to v6.43 (v6.42.12 and older) will clear all user passwords and allow password-less authentication. Please secure your router after downgrading. I am not sure when this actually started as it shows up in the changelog of … Read more
Taken directly from Mikrotik newsletter 89. https://download2.mikrotik.com/news/news_89.pdf R11e-LoRa8EU – a new LoRaWAN concentrator Gateway card in miniPCIe form factor based on Semtech SX1301 chipset. It enables LoRaWAN connectivity for any MikroTik product that has miniPCIe slot with connected USB lines. With the support of 8 different channels in 868EU band, Listen Before Talk (LBT) and … Read more
Mikrotik Releases 6.43.16 update to router os.
Doing a basic setup of a Mikrotik router with some best practices and tips to configure
For the purpose of part one of this article we will talk about communities and how they can be utilized for traffic coming into your network
One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. The Mikrotik Wiki Entry Firewall NAT action=masquerade is unique subversion of action=srcnat, it was designed for specific … Read more
Recently there has been some activity on integration with LetsEncrypt and Mikrotik. WHile Mikrotik does not directly support Letsencrypt directly yet, you can make it work with this setup https://github.com/gitpel/letsencrypt-routeros
Recently we had an issue with an IPsec tunnel on Mikrotik passing multiple subnets across a tunnel with multiple policies
Become a Patreon
From the Mikrotik Wiki input – used to process packets entering the router through one of the interfaces with the destination IP address which is one of the router’s addresses. Packets passing through the router are not processed against the rules of the input chain (DST address of the router) forward – used to process packets passing … Read more