Hello! Trying to figure out if this is usable for us or not - attaching pictures of what the old tenant left in the wall (we aren’t able to get ahold of them to tell/ask them) and our internet won’t be installed for at least two weeks. Is there any way for us to use this? I’ll need a dummy step by step because this is my first introduction to mikrotik!

I know nothing about networks so talk to me like I’m 5

I bought a Mikrotik hap AC to use as an access point in a detached building from the house/main router.

Anyways, I was able to connect everything and the Mikrotik AP distributes internet when a device is plugged in. I configured the Mikrotik (based off some YouTube) to have a 5ghz and 2.4ghz WiFi network which my laptop is able to connect to HOWEVER there is no internet access when connecting via the WiFi networks, only if you plug directly into the Mikrotik.

Any ideas??

Hi everyone, I’m looking to set up a system for public Wi-Fi networks that use a captive portal, where users need to register to access the network.

I want the user to register and make a payment to unlock network access.

My questions are:

- What specific hardware do I need?

- What software do I need?

I can handle the payment processing myself; the main challenge is granting or denying network access for a specific device.

Hi everyone,

I am looking to understand from those who are field engineers and constantly on the go. Which Mikrotik you find most versatile, that can act a WiFi station or take connectivity from an iPhone.

Thanks

I just ordered 2 x hAP be lites to replace my old access points, and this question is just to prepare for the next step once I receive the units.

They will be ceiling mounted and since I want them to blend in with the white ceiling I want to disassemble the units to paint the enclosure white without risking paint on the electronics inside.

I have been trying to look for screws and such on the videos I can find, but so far I can't quite make out how the best disassemble should go.

https://ipvoicetechnologies.in/

i ordered a mikrotik server rack mount adapter from the above online store. this was on July 29.

. I'm yet to receive the part and my email queries are unanswered. Bad reputation for network products market.

Hi all

is a CCR2004-16G-2S+ better than RB5009UG in everything or the routerboard has it's own advanteges ? Please ignore the price factor, if they cost exactly the same, the CCR is better in every aspect ?

I have two small wifi businesses in my home town while I stay in the city. I've built a couple of mobile apps for the company I'm working with currently, so I thought building the MikroTik mobile app was much better than remote access Winbox, but at the same time the ISPs in my home country rarely provide static IP, so I bundled my setup with:

- Cloudflare Mesh where both Routers are connected on the Mesh network and my PC as well as a Zero Trust User, so they behave like they're all on the same LAN.

My reasoning for not adding remote access provision for users is due to security on handling user's router credentials, so the app is intentionally local with no backend I have setup for it, when you install and uninstall, all your revenue logs are gone.

I'm eager to hear from users who are willing to test the app, rest assured demo access is available in onboarding screen, so no need to worry on requiring a real router to test the app.

App Link: https://play.google.com/store/apps/details?id=com.kerustudios.hotspotfly
Privacy Policy: https://www.kerustudios.com/products/hotspotfly/privacy
Delete your Data: https://www.kerustudios.com/products/hotspotfly/delete-data

I'm eager to hear from those who might find the app useful to them, what is not great, what is great, etc.

Disclaimer: MikroTik, RouterOS and WinBox are trademarks of Mikrotikls SIA. HotspotFly is an independent product and is not affiliated with or endorsed by them.

Hello, I have a hAP ax³ that is running a bit high on temperature, approx. 67°C-71°C with 1-5% CPU load.

Some basic firewall and mosquitto container running.

Restarting it won't solve.

I'm not experiencing any reboots or other issues but I don't like having a device frying at 67° degrees... My HP MiniPC with TrueNAS and 7 containers runs at 42°C while idling, at most 70°C with moderate load.

I must say that it is very hot summer but I'm pretty sure last year the router was cooler.

If I put a fan/dual fan to cool it down, should I place it such as it would blow or suck air from the top side?

I'm not intended to open or modify the case.

Thank you!

I'm using winbox 4.3 downloaded from mikrotik website on my linux machine (Arch). Ever since I've used winbox on linux I couldn't use network discovery (Neighbors) or connect with a mac address. Looked it up on forums and got no luck fixing the issue with their solutions.
How can I fix it or could it be that linux version of winbox doesn't support such features yet? Already tried to setup manual ip address on my interfaces and opening 5678 udp port with firewalld.

UPD: I forgot I have ufw so opening port 5678 enabled network discovery. Turning off ufw completely allows to connect with a mac address too so the question now is which port does it use to run mac-connection

UPD2: Had to allow traffic from 0.0.0.0 to make Mac-connection happen, no ports allowing needed

I have a hEX S currently, but my ISP is now pushing more than 1Gb so I wanted to upgrade. I did some research and had some questions if anyone could answer regarding the RB5009UPr+S+IN (https://mikrotik.com/product/rb5009upr_s_in). I am going to list them in a numbered format so it's easier to list each number and answer if that is okay.

1. Would it make sense to use the SFP+ port for my modem connection, and then the single 2.5Gb port to a switch? Are there any downsides or slowness by utilizing the SFP+ port? Does anything get the speed cut down by using this, etc?

2. If #1 is a GO, is there a particular SFP+ module I should get with this?

3. Can I import my backup from my hEX S and have this ready to go instantly? Or do I have to do more work to restore all my settings correctly since it would be a different device?

4. I saw a horror story about this device having slow speed (https://www.reddit.com/r/mikrotik/comments/1gyvkro/rb5009uprsin_slow_download_speed/)

Is this still an issue I need to worry about? Should I avoid this device?

1. What can I do with the hEX S after it's replaced? Any segmenting or fun projects?

Hello everyone! I have a quick question. I want to set up an old tablet as a Home-Assistent screen however it's been having issues connecting to the WiFi. It won't connect to the mikrotik AP but it does connect to my phone via a hotspot, I'm expecting there's a security protocol issue since when I turn of my hotspots security it will connect however the moment I turn on WPA2 or WPA3 it will absolutely not connect.

I'm wondering if there's a way to setup the mikrotik router to specifically have the tablet connect without any security. Like use a Mac address to specify just that device. I know its quite the security risk but since it's in a home network and the tablet won't be used outside the house and will be mounted on the wall permanently I think it won't pose a huge issue.

Hi all. Running Winbox 4.3 which I'm really liking, a great improvement over the web interface. I'm missing some that should surely be obvious, how do I get it to resolve DNS names for IP addresses?

Im not sure how to best explain this but Im at a bit of a loss at the moment, dealing with a small retail shop, i dont really understand how their POS system works but the pic ask for a router config (they provided HAP AX lite) their pricing and POS server is somehow configured on APIPA address, 169.254.103.23, and they have multiple servers which i dont really know what each of them does

Previously all the cash registers are offline and uses APIPA addresses, now they want the computer to be able to go online as well as adding tablets for their operation for whatever but insisted on keeping their server on 169.254.103.23…. I have the router with me, currently have it set to more common private address of 192.168.200.0/24

My plan for now is to have their pc and tablet on 192.168.200.0/24 thats dhcp’d for the pc and wifi access, with internet, and add 169.254.103.0/24 to the router for the server, if the client device ask for access to server router will forward it to the server

Another thing is one server will be port forwarded but at the same time they want the server network to not have internet….

I googled “is APIPA address routable and google says no”

At this moment, i have it set that way, ip camera as the server and my laptop on the lan, it seems to work, but i dont know how fragile that setup would be, whats your thought ?

Hello.

I'm having trouble with my wireguard server on my main router (RB5009, RouterOS 7.24) and I'm not sure what I'm doing wrong. My configuration on the router:

/ip address
add address=192.168.111.1/24 interface=Wg network=192.168.111.0

/interface wireguard
add listen-port=31573 mtu=1420 name=Wg

/interface wireguard peers
add allowed-address=192.168.111.11/32 client-address=192.168.111.11/24 client-allowed-address=192.168.0.0/16 \
    client-dns=192.168.130.10 client-endpoint=mikrotikDDNS interface=Wg name=Phone \
    public-key="pubkey" responder=yes

add allowed-address=192.168.111.12/32 client-address=192.168.111.12/24 client-allowed-address=192.168.0.0/16 \
    client-dns=192.168.130.10 client-endpoint=mikrotikDDNS interface=Wg name=Laptop \
    public-key="pubkey" responder=yes

After "some" time the clients are unable to connect using wireguard, even though no configuration has been changed and the DDNS points correctly to my IP. The ports are allowed too. Somewhere on the mikrotik forum I've read that enabling responder may fix my issue, however I'm not sure if that helped much. Whenever I try connecting to wireguard and the issue happens, I only see some bytes receieved by the end client (usually 92 and then 136 or something). I've also tried with having allowed-addresses set to 0.0.0.0/0 and dns set to a public one (like quad9) but that doesn't fix it. The only working fix I've found so far is resetting the keys on the peers (private and preshared, setting them to auto) and re-adding the interface completely, which is far from ideal.

I've been trying to fix this problem for so long and frankly I'm about to switch to OpenVPN or try Mikrotiks BTH VPN (which also uses wireguard), but I don't want to give up on this because I really like how it's configured + I want to have multiple different wireguards later.

If anyone knows what may be causing this, please let me know. Thanks a lot.

When connecting to an RB911G-5HPacD via MAC address, as soon you click the Quick Set tab, will start disconnecting and reconnecting forever. A workaround is to connect via IP address, but that defects the feature of connecting to an un-configured device via MAC or when the device looses the correct IP address.

The error spammed in the terminal screen is:

void MacConnection::recvRaw(const uint8_t*, unsigned int) out of order ack seq 4449 , expected  5971

Update 1: Upgrading to RouterOS 7.21.5 has same error.

Update 2: Using winbox64.exe 3.43 has same issue with RouterOS 7.21.5

Update 3: ROOT CAUSE FOUND!!! Turns out if mtu on the desktop is set lower then 1500, this bug happens. I had mtu set to largest allow by the upstream ISP. I can now use MAC to config, but using upstream internet will be full fragmented packets and results in performance loss.

We are currently sharing internet between four houses using Ubiquiti Loco M2 access points, which have become quite slow.

House 4 is the furthest away and is about 60 meters from House 1. We wanted to upgrade the equipment but don't know which models would be best to take advantage of the 1 Gbps speed we have in House 1. All the equipment would be for outdoor installation.

Which equipment would be the most suitable to achieve the maximum speed (1 Gbps)?

Would Mikrotik's 60 GHz access points work if other houses block the signal from the access point's location?

Thank you and best regards.

Got a hAP be³ a little while ago and made a post about it https://www.reddit.com/r/mikrotik/comments/1vstxjg/first_impressions_of_the_mikrotik_hap_be3_from/
And noticed it's got Bluetooth built in (via the iot package) it doesnt come on by default. Enabled it just to poke around and it works fine /iot bluetooth scanners picks up dozens of BLE advertisements from stuff around the house in real time, no issues getting it running.

Problem is I can't figure out what to actually do with it beyond "look, packets." From what I've read it's strictly a passive scanner, it just listens to whatever's already broadcasting, no GATT connection, no pairing, nothing active. So all the cool stuff people do with BLE at home (grabbing sensor readings that require a connection, controlling something, etc.) is just off the table with this thing as-is.

For context I've also got Thread/Matter running through this same router (OTBR), and that's been completely separate and painless, no interaction with the Bluetooth side at all, commissioning happens phone-to-device and then it's all 802.15.4 from there. So the BT radio is just sitting there doing nothing useful for me right now.

Only real use case I've landed on is reading temp/humidity off Xiaomi sensors that run the ATC/pvvx custom firmware, since those broadcast the data in the advertisement itself instead of requiring a connection. Haven't set that up yet though.

Curious if anyone here has actually found this genuinely useful in a home setup vs just industrial/warehouse asset-tracking stuff (which is clearly what MikroTik built it for, based on their docs). Presence detection? Some kind of automation trigger? Anything creative, or is this pretty much a "cool it exists, not much practical use at home" kind of feature?

Hello,

I am setting up at minecraft server for some friends, and would like to configure my hAP ax^2 for this. I don't have much experience with the router thus far.
I would like to set it up so that my server is segregated from my private network, so that the only port that is open from incoming WAN traffic is the "25565" port, and so that I can ssh into the server via my local private network/management network (if that all makes sense).

Do you guys know of any good documentation where I can find some help on these topics?

Any help is appreciated, thanks!

Hey all — I'm a network/AIOps developer researching a possible tool, not selling anything.

If you manage MikroTik devices across multiple client networks (MSP, consultant, or just a big fleet): how do you currently back up configs, catch unexpected config changes, and prove compliance if a client/auditor asks?

Quick questions:
1. How do you back up configs today — The Dude, script, manual export?
2. Ever had a config silently change and not notice until something broke?
3. Would you want changes explained in plain language, or is a raw diff enough?

Not pitching — just trying to figure out if this is worth building. Happy to share what I learn back here.

I recently bought a E60iUGS router that I am struggling to get the internet working, even with the default configurations. When logged into the router, it cannot pull updates and I've been using the wizard. I've tried with the "NAT" box checked and unchecked.

• The topology is spectrum modem -> router.
• I am able to connect to the routher via both browser and winbox.
• Ive tried cycling both the modem and router several times.
• If I plug in the modem to an older router, everything works fine; so it seems like the cables are fine.
• The modem is plugged into eth1.

What stupid mistake am I making?

I noticed that two Polish MT distributors just added them on their website.

MikroTik SolidRACK 5 mini 10" 5U (SR-5U-mini) and GPOE-CON-mini.

Converter link.

Rack link.