January 2019 - Public - talk.mikrotik.com.au

Axiom Cyber Shield
by Philip Loenneker 27 Jan '21

27 Jan '21

Hi all, After seeing their presentation at the Melbourne MUM, we've been having a look at Axiom Cyber Shield. Is anyone on here using it and happy to provide some feedback, on-list or off-list? It certainly sounds like a good product, but I only seem to be able to find sales pitch information, not unbiased reviews. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

3 7

Re: [MT-AU Public] Radar detection Chaos Since 6.40.4
by Mike Everest 31 May '19

31 May '19

Hi Harry, thanks for the comments! (have you tried subscribing to the public list? What happens when you try to add a subscription?) That is only the LIPD class license document but it does not list the relevant standards. The standards list some of the ETSI specifications which according to MT include radar detect operation. From MT perspective, they claim that DFS implies Radar Detect in the relevant standards. I have no doubt that it DOES make that link in the EU specification, but since our AU compliance requirements also refer to some ETSI standard then it is possible that our rules are also affected by the recent updates to relevant ETSI standards simply by association and since ACMA have not explicitly excluded that revision... This is what I am attempting to ascertain ;) So far, I have not been able to find the direct relationships and have been doing the rounds of some compliance folks to try to get to the bottom of it all. It may take some time :-1 Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel > -----Original Message----- > From: Harry Fiotakis [mailto:Harry.Fiotakis@tasmanet.com.au] > Sent: Monday, 23 October 2017 10:39 AM > To: Mike Everest (mike(a)duxtel.com) <mike(a)duxtel.com> > Cc: Philip Loenneker <Philip.Loenneker(a)tasmanet.com.au> > Subject: RE: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > Morning Mike, Phil forwarded me the latest correspondence as I still have not > been approved on the mailing list :( > > https://www.legislation.gov.au/Details/F2015L01438 (Radiocommunications > (Low Interference Potential Devices) Class Licence 2015) > > 5250-5350 Must use DFS > 5470-5600 Must use DFS > 5650-5725 Must use DFS > > No Radar Detect required (it is not implied) > > We will have to seek official clarification on that if Mikrotik require it, but > with it forced on we are downgrading Mikrotik radios or simply not using > them. > > > Regards, > > Harry Fiotakis | TasmaNet > 40-50 Innovation Drive, Tas 7010, Australia > M: 0418 540 806 P: 1300 792 711 > Email: harry.fiotakis(a)tasmanet.com.au > > > -----Original Message----- > From: Philip Loenneker > Sent: Monday, October 23, 2017 10:30 AM > To: Harry Fiotakis <Harry.Fiotakis(a)tasmanet.com.au> > Subject: FW: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Monday, 23 October 2017 9:50 AM > To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Radar detection Chaos Since 6.40.4 > > Further update on this issue, > > I've had a bit of correspondence with them, but they are 'fighting' it. Latest > comment from them is that "ETSI standard mentions when you use DFS and > those ranges you need to use the Radar-detect. Radar detect is happening > only for 1 minute." > > The line they are taking is that since our LIPD class license specification says > that DFS must be enabled for the sub 5785 channels, then radar detect must > also be enabled. I've been trying to pore through all the relevant ACMA > documentation so that I can find some definitive paragraph that clarifies the > situation, but so far have drawn a blank. > > I need someone who has some specific familiarity with the relevant rules and > standard that can find something that will convince them to turn it off - any > takers? :-} > > Cheers, Mike. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

5 26

OSPF with BFD Issues
by Paul Julian 31 Jan '19

31 Jan '19

Hi All, We have just finished building a new virtualised MT core network which is running very sweetly indeed. We have OSPF running in the core to handle redundancy between core routers, we will also run OSPF between core routers and edge routers as we do now, however in the new core we decided to use BFD to improve failover times should a problem occur. In the core network OSPF and BFD have been stable for some time, no problems, however we brought our first new site into the core last night and BFD just wouldn't come up on the link. The link comes in on a VLAN to the core, nothing fancy, just OSPF interface with BFD enabled, and OSPF Network definition. OSPF came up fine, just BFD wouldn't. BFD was still up on all other OSPF interfaces on the core router, however when we disabled BFD on the new interface to the site it took down OSPF on the entire router, same when you enable it on just that interface. We have checked MTU's and everything we can think of but BFD just won't come up on this link. We even upgraded ROS to latest bugfix on both ends of the link, no change. Firewall rules allowing OSPF protocol and BFD ports have been setup also. I'm just wondering if anybody has come across this issue before, firstly the BFD not working, but secondly the entire OSPF area going down on the router just by enabling or disabling BFD on one static OSPF interface. Thanks Paul

3 4

OSPF with backup paths
by Paul Julian 30 Jan '19

30 Jan '19

Hi all, Hoping somebody can offer a suggestion here. We run a number of sites with a single fibre back to our DC, we have a virtualised redundant core network there and want to take the fibre vlans to each core router for termination rather than just one so that we have redundancy in the core. We have a /30 going from each site to each core router and OSPF running at both ends. By using OSPF interface costs in the DC we can preference the traffic flow through one core router or another, but when there is only one interface at the remote site what's the options for preferencing that traffic flow coming back using OSPF ? Any suggestions would be appreciated. Thanks Paul

2 3

Reliable RouterOS 4G Router
by Dave Browning 29 Jan '19

29 Jan '19

The LtAP Mini’s couples with EC25 seems to be a complete heap and unreliable. Our go to DUXCELL is no longer on the market. What are people actively using and know are solid? Band28 is relatively important too. Cheers, Dave

3 3

How to get connectivity between VPN clients.
by Malcolm Faed 29 Jan '19

29 Jan '19

Hi all, I am attempting to get VPN connectivity between multiple SSTP Mikrotik VPN clients. I have set up a cloud hosted router (CHR v 6.42.11) on a hosing service. ($4 per month on Binary Lane) I can connect multiple clients and ping to the cloud router, but need to be able to obtain connectivity between clients. I have added the bridge to the profile and selected proxy-arp on the CHR bridge. Thanks for any assistance. Regards, *Malcolm Faed*Network Broadcast Engineer malcolm(a)avcomm.com.au Av-Comm +61 2 9939 4377 <++61+2+9939+4377> Unit 24 / 9 Powells Road, Brookvale - NSW 2100 avcomm.com.au [image: Twitter] <https://twitter.com/AvCommSatellite>[image: Google Plus] <https://plus.google.com/+AvcommAustralia/>[image: Youtube] <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] <https://www.linkedin.com/company-beta/6583589/> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

5 10

SXTSq ac Radio problems
by Paul Julian 11 Jan '19

11 Jan '19

Hi all, Just wondering if anybody has experienced random reboots from the SXTsq ac radios with the new ARM chipset ? I have read about some woeful results when using NV2 on the MT forums and people also seem to have other issues, but can't seem to see any rebooting problems. We have only just started using them and the first one has been fine, 30 days uptime so far with no issues, but the second one just rebooted randomly about 5 times a day and the latency was all over the shop. We replaced it with a brand new one and it does exactly the same thing. Even after upgrading to latest long term OS and firmware no change, and I can't find anything in later version change logs which refer to any issues being fixed like this. We are only trying to use it in 802.11 a/n mode, not even ac, and we have tried 802.11 an NV2 options, connecting to an Omnitik. Power is OK as we are powering a powerbox from the same injector and power pack now with an old SXT ac connected to it, no reboots, no drops, working as expected. Any thoughts ? Thanks Paul

3 2