July 2016 - Public - talk.mikrotik.com.au

VDSL modems
by Mike Everest 07 Oct '16

07 Oct '16

Hi Folks, A few months back, I asked for opinions on a good adsl modem to use a bridge for MikroTik PPPoE. With increase in prevalence of VDSL services (especially with #nbwhen ;) does anyone have some opinion of readily available and 'good' (not necessarily cheap ;) vdsl modems? Cheers! Mike.

10 14

RB962 wireless issue?
by Nick Pratley 05 Aug '16

05 Aug '16

Hi All, Recently upgraded the RB951 at home with a RB962 AC model. Ever since swapping this out, (running the same configuration), traffic to / from any device on wireless suffers high latency. There is absolutely no loss from the router to the server. Makes working on the server extremely difficult. Thought maybe a bridge issue, as I couldn't replicate from the mikrotik to the laptop, however left the pings running for a while this morning and it started from here also which makes it that much more interesting. Any ideas what this could be before I format and re-install the macbook? CPU at ~5%, have tried wireless-fp and wireless-cm2 packages. Haven't tried moving the laptop to the 2.4G AP as yet. .1 - mikrotik .10 - laptop .251 - server >From Mikrotik 0 192.168.15.10 56 64 213ms 1 192.168.15.10 56 64 33ms 2 192.168.15.10 56 64 59ms 3 192.168.15.10 56 64 79ms 4 192.168.15.10 56 64 109ms 5 192.168.15.10 56 64 128ms 6 192.168.15.10 56 64 151ms 7 192.168.15.10 56 64 170ms 0 192.168.15.10 56 64 213ms 1 192.168.15.10 56 64 33ms 2 192.168.15.10 56 64 59ms 3 192.168.15.10 56 64 79ms 4 192.168.15.10 56 64 109ms 5 192.168.15.10 56 64 128ms 6 192.168.15.10 56 64 151ms 7 192.168.15.10 56 64 170ms >From server 64 bytes from 192.168.15.10: icmp_seq=144 ttl=64 time=75.1 ms 64 bytes from 192.168.15.10: icmp_seq=145 ttl=64 time=2.42 ms 64 bytes from 192.168.15.10: icmp_seq=146 ttl=64 time=955 ms 64 bytes from 192.168.15.10: icmp_seq=147 ttl=64 time=7507 ms 64 bytes from 192.168.15.10: icmp_seq=148 ttl=64 time=6508 ms 64 bytes from 192.168.15.10: icmp_seq=149 ttl=64 time=5508 ms 64 bytes from 192.168.15.10: icmp_seq=150 ttl=64 time=4509 ms 64 bytes from 192.168.15.10: icmp_seq=151 ttl=64 time=3509 ms 64 bytes from 192.168.15.10: icmp_seq=152 ttl=64 time=2510 ms 64 bytes from 192.168.15.10: icmp_seq=153 ttl=64 time=1510 ms 64 bytes from 192.168.15.10: icmp_seq=154 ttl=64 time=511 ms 64 bytes from 192.168.15.10: icmp_seq=155 ttl=64 time=138 ms 64 bytes from 192.168.15.10: icmp_seq=156 ttl=64 time=2003 ms 64 bytes from 192.168.15.10: icmp_seq=157 ttl=64 time=1003 ms 64 bytes from 192.168.15.10: icmp_seq=158 ttl=64 time=4.11 ms 64 bytes from 192.168.15.10: icmp_seq=159 ttl=64 time=27.7 ms 64 bytes from 192.168.15.10: icmp_seq=160 ttl=64 time=51.1 ms 64 bytes from 192.168.15.1: icmp_seq=1 ttl=64 time=0.272 ms 64 bytes from 192.168.15.1: icmp_seq=2 ttl=64 time=1.95 ms 64 bytes from 192.168.15.1: icmp_seq=3 ttl=64 time=0.190 ms 64 bytes from 192.168.15.1: icmp_seq=4 ttl=64 time=0.124 ms 64 bytes from 192.168.15.1: icmp_seq=5 ttl=64 time=0.244 ms 64 bytes from 192.168.15.1: icmp_seq=6 ttl=64 time=0.140 ms 64 bytes from 192.168.15.1: icmp_seq=7 ttl=64 time=0.143 ms Cheers Nick

3 8

Release notes?
by Karl Auer 31 Jul '16

31 Jul '16

This may be a stupid question but - where are the release notes for RouterOS? I need to know whether I can upgrade a client system to 6.36. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 6D59 8AE6 810D 44E3 7626 7040 4DD6 F89F 3053 4774 Old fingerprint: 9DCA 0903 BCBD 0647 BCCC 2FA7 A35C 57A1 ACF9 00BB

2 2

New OpenSSH
by Karl Auer 31 Jul '16

31 Jul '16

After upgrading to Ubuntu 16.04, I found myself unable to log into MikroTik routers via ssh - mine and clients'. Most of the systems I support are on 5.24. The problem is that ssh no longer supports DSA by default. I'm not sure what the best solution is. By telling ssh to use DSA and also to allow smaller groups, I could get to a password prompt, but publickey logins still didn't work. These lines in ssh_config in a Host stanza or (not so good) globally: HostkeyAlgorithms +ssh-dss KexAlgorithms diffie-hellman-group14-sha1 My current solution is to upgrade to RouterOS 6.36 and add an RSA public key. RSA has been supported since 6.31. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 6D59 8AE6 810D 44E3 7626 7040 4DD6 F89F 3053 4774 Old fingerprint: 9DCA 0903 BCBD 0647 BCCC 2FA7 A35C 57A1 ACF9 00BB

1 0

Latest ROS Version
by Paul Julian 29 Jul '16

29 Jul '16

Hi guys, I noticed in the change log of the latest ROS version 6.36 it talks about wireless packages and needing to uninstall wireless-fp package before installing the upgrade, apart from a lot of changes in this one ! So apart from visiting all of our sites running this package so that we can connect via Ethernet to upgrade these routers does anybody have more information as to the impact or alternate options to achieve the upgrade over the wireless link ? *) wireless - wireless-fp is discontinued, it needs to be uninstalled/disabled before upgrade Regards Paul

3 6

Omnitik Access on default config
by Paul Julian 28 Jul '16

28 Jul '16

Hi guys, I have a slight problem, I have chucked an Omnitik on a mast straight out of the box to use as a redundant spare and I can't get into the damn thing now I am back at the office...... I have plugged into ether 1 to get the POE to power it and the default config won't let me in on port 1 no matter what I try. I can't see it in neighbours from the device on the other end of the cable and I really don't want to have to get up on the roof again. Any suggestions on how I might be able to get into it ? I have power cycled it to no avail, I have tried to Mac Telnet to it but it drops the connection. Any suggestions would really be appreciated as it's a PITA to get back on this roof......now I am in the predicament I seem to recall this is always a problem on these Omnitiks ! Regards Paul

4 8

High Latency on LTE Interface
by Dave Browning 27 Jul '16

27 Jul '16

Hi Guys, Have a Telstra 4GX dongle plugged into an RB2011. Don’t know why, but I am getting randomly high latency from the Mikro to the dongle. Would’ve thought it should be <1ms given it’s plugged directly in? [admin@Mikrotik] > ping 192.168.1.1 SEQ HOST SIZE TTL TIME STATUS 0 192.168.1.1 56 64 27ms 1 192.168.1.1 56 64 30ms 2 192.168.1.1 56 64 28ms 3 192.168.1.1 56 64 19ms 4 192.168.1.1 56 64 19ms sent=5 received=5 packet-loss=0% min-rtt=19ms avg-rtt=24ms max-rtt=30ms Dave Browning | Network Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

2 2

Mikrotik, PPPOE and Dynamic QOS
by Paul Julian 19 Jul '16

19 Jul '16

Hi all, I have been toying with the idea to try and play around with some way of doing QOS for our customers who have VOIP and continually hammer their downloads, doing basic QOS on the CPE isn't that hard as you know which interface you are dealing with, but trying to prioritise packets to them from our network seems to be more challenging as we are using PPPOE. I have had a look around on the forums and MUM presentations but can't really find anything I can get my teeth into. Does anybody have any suggestions on where to start with this ? I really only have one requirement and that is to prioritise voice traffic over everything else that we send to each client, so I can imagine that we need one parent queue per customer with two child queues, one for VOIP and one for everything else, but I'm not sure how or if it's even possible to create more than one dynamic queue for a PPPOE session when it starts up. Any advice or links to real-life scenarios would be appreciated J Thanks Paul

2 2

Akamai CDN and Win10 update delivery breaking TCP flow control
by Jeremy Hall 17 Jul '16

17 Jul '16

Hi all I came across this post: https://forums.whirlpool.net.au/forum-replies.cfm?t=2530363 ..and thought it might be of interest or help to many users in this mailing list. The post/thread describes an issue with Akamai's (and probably other CDN's) implementation of FastTCP (or some custom TCP stack) where TCP flow control breaks/is broken, and the receiving network or gateway is sent packets until the link is saturated and rendered unusable - effectively a DOS attack. Because of the DOS-like nature of the flood of received packets, no QoS queues or connection limiting strategies can mitigate the effect. The only current workaround is to block the offending network range, but then Akamai will just direct the client to another location. At the moment, it seems to be mainly (only?) Windows 10 updates causing the effect, so disabling updates over the internet is another temporary workaround. There is some interesting discussion in the thread above, including packet captures and observations. A couple of the posters are Mikrotik users so a Mikrotik-specific solution may well find its way there. Cheers Jeremy

1 0

USB 4G Modem for Vodafone
by Russell Hurren 16 Jul '16

16 Jul '16

Hi everyone I've seen the list of supported USB modems (http://wiki.mikrotik.com/wiki/Supported_Hardware#4G_LTE_cards_and_modems) but does anyone know if there's one that I can use for a client who's with Vodafone (and where I could acquire one)? It's just for a backup link in case the ADSL goes down, so if not I may just tell them to get a Telstra pre-paid device. Regards Russell

3 5