You might’ve noticed the EU and Latvian flags in our recent brochures. Over 50% of our products are already made in the EU — and that number’s growing.

We’re bringing production closer to home to ensure quality, supply chain security, and transparency.

It’s not just a label. It’s a promise. 🇱🇻🇪🇺

buyFromEU @[email protected]

What is Quality of Service? What it is its purpose? But more importantly how can you configure it in RouterOS? In this video we go over all the possible ways you could deliver the Quality of Service your network users are looking for. @[email protected]

https://www.youtube.com/watch?v=7Ak0856Q490

I mean the wAP ax is cheaper and offers faster wifi, plus it's waterproof so you can use it outdoors. One advantage of the cAP ax is a faster cpu and more RAM, but if you need a complex firewall or VPN, a dedicated server makes more sense I guess.

Tbf the cAP has two Ethernets and PoE out so you can Daisy chain them. But is that all or am I missing something?

I recently got fiber internet and wanted to bypass all ISP equipment with the was110. Since I needed a router with SFP (I've had an Edgerouter-X for years) I decided to go switch to Mikrotik.

The l009 is such a nice router! I ended up pairing it with a cheap no-name multi gigabit managed switch (4x 2.5gb rj45 and 2x sfp+ for high speed transfers to my NAS) and a Mikrotik wAP AX for wifi, which is powered through the passive PoE on the l009.

I've been playing with LACP bonding, VLANs, firewalling and IPv6 and there is so much to it. It is such a great way to learn.

Mikrotik is a pretty cool company too. Fair prices, based the EU, have a fediverse presence (shout out @[email protected]) and support old hardware pretty much forever.

Granted, their equipment has a quite high learning curve. But if you have the time and patience, it is really rewarding.

Wow, fediverse mentioned!

Screenshot from the video:

I can't see pricing yet.

What's new in 7.18 (2025-Feb-24 10:47):

*) 60ghz - improved system stability;
*) bgp - fixed certain affinity options not working properly;
*) bgp - improved system stability when printing BGP advertisements;
*) bgp - make NO_ADVERTISE, NO_EXPORT, NO_PEER communities work;
*) bond - added transmit hash policies for encapsulated traffic;
*) bridge - added MLAG heartbeat property;
*) bridge - avoid duplicate VLAN entries with dynamic wifi VLANs;
*) bridge - do not reset MLAG peer port on heartbeat timeout (log warning instead);
*) bridge - fixed endless MAC update loop (introduced in v7.17);
*) bridge - fixed missing S flag on interface configuration changes;
*) bridge - improved stability when using MLAG with MSTP (introduced in v7.17);
*) bridge - improvements to MLAG host table updates;
*) bridge - process more DHCP message types (decline, NAK, inform);
*) bridge - removed controller-bridge (CB) and port-extender (PE) support;
*) bridge - show VXLAN remot

Well I couldn't find this on the internet anywhere-

I was having issues setting up active-backup bonding on my Mikrotik router via this guide.

Whenever I turned on both interfaces, I experienced packet loss.

The solution was to TURN OFF hardware offloading. It doesn't work with active-backup. The docs even say it doesn't work with hardware offloading, but it failed in a way that was hard for me to debug.

So yeah! Now works great, router <-> unmanaged switch with bond bridged.

What's new in 7.17 (2025-Jan-16 10:19):

!) device-mode - after upgrade, mode "enterprise" is renamed to "advanced" and traffic-gen, partition (command "repartition"), routerboard and install-any-version features will be disabled;
!) webfig - redesigned HTML, styling and functionality;
*) 6to4 - fixed issue where 6to4 relay would not forward traffic unless destination address is set;
*) adlist - improved logging;
*) adlist - improved system stability;
*) adlist - optimized import on system with low disk space;
*) api - fixed REST API serialization of binary data;
*) arm64 - fixed for bare-metal servers to be able to access more than 2GB RAM;
*) arm64 - show CPU frequency on bare-metal installations;
*) arm64/x86 - added missing PCI id for mlx4 driver;
*) bonding - hide mlag-id property on non-compatible devices;
*) bridge - add HW offload support for active-backup bonds on 98DXxxxx, 88E6393X, 88E6191X and88E6190 switches;
*) bridge - added interface-list support

Or can I hard-reset the device into the default configuration again?

Hi,

I would like to create a LAN where each node need to authenticate before gaining access to the LAN.

and secondly be able to monitor the data consumption of each node and even limit the speed for a node when exceeded.

is this is possible with RouterOS ?

Thanks.

Hi All,

I'd like to block a couple of "guest" devices from accessing any devices on my LAN, but allow them internet access. They're streaming media boxes from a foreign country, and I'm not convinced they are, or will remain clean of malware.

Yes, the easiest solution is to simply remove them, or block them entirely, but there are "family issues" at work, and I'd like a short-term solution until the family members leave and take their device with them.

I've already rate limited them with queues so they don't have a significant upload speed so their ability to participate in any DOS business will be limited.

I have the device's MAC and have it locked to a static IP, so I'd like to deny 192.168.x.x and allow anything else.

Any ideas?

I used to have Proton VPN set up through IPSec, but that hasn't been functioning for a while, and now Proton has removed the setup guide for it. My SO hates the VPN, so I have their devices set up in a firewall address list to bypass it.

I'd like to be able to set up Proton in Wireguard, but I need to be able to bypass it, so any help with that would be appreciated.

7.16 2024-09-24

What's new in 7.16 (2024-Sep-20 16:00):

::: spoiler Spoiler because the list is very long. *) 6to4 - fixed 6to4 tunnel LL address generation after system reboot;
*) 6to4 - improved system stability when using 6to4 tunnel without specified remote-address;
*) 6to4 - limit keepalive timeout maximum value;
*) address - added "S" flag for addresses that belong to a slave interface;
*) arm64 - fixed "disable-running-check" for ARM64 UEFI;
*) arm64 - increased reserved storage space for bootloader;
*) arm64/x86 - added rtl8111/8168/8411 firmware;
*) arp - fixed possible issue with invalid entries;
*) bgp - fixed BGP sessions missing vpnv6 afi;
*) bgp - fixed cluster-list and originator-id;
*) bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
*) bgp - fixed minor logging typo;
*) bgp - fixed vpnv6 safi;
*) bgp - small logging improvements;
*) bridge - added dynamic tagged entry when VLAN interf

Hi,

I would like to assign different subnet to devices connecting to my switch/router Mikrotik (RouterOS v6.40).

To avoid devices connected on subnet 1 to reach devices on subnet 2 and moreover to disable access to the WWW on one of those two subnet

Is it possible with RouterOS to set the DHCP server to lease two set of ip (subnet) base on a Whitelist, meaning if a device is on the white list it get subnet1 if not subnet2 ?

Or do you have more practical solutions ?

Thanks.

WinBox 4.0 with native linux version!

AUR package already updated: https://aur.archlinux.org/packages/winbox