January 2020 - Public - talk.mikrotik.com.au

State of 3G/4G fallback on MikroTik?
by Karl Auer 01 Sep '21

01 Sep '21

We need to quote to a client for two routers capable of running a VPN between two sites - easy, that's a MikroTik. But they want a fallback to 3G/4G so that the site that falls back keeps Internet access AND so that the VPN keeps running. What's the state of MikroTik 3G/4G fallback? Last I looked it seemed very roll-your-own, and supported only a few very specific dongles... Ideally it would work like the (vastly more expensive) Merakis and just fail everything over to the secondary link if the primary fails, where "fail" would be either a ping test or interface down. That said, I'm OK with a solution that needs more work, as long as once done it is set-and-forget. Any pointers? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

7 12

Axiom Cyber Shield
by Philip Loenneker 27 Jan '21

27 Jan '21

Hi all, After seeing their presentation at the Melbourne MUM, we've been having a look at Axiom Cyber Shield. Is anyone on here using it and happy to provide some feedback, on-list or off-list? It certainly sounds like a good product, but I only seem to be able to find sales pitch information, not unbiased reviews. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

3 7

Re: [MT-AU Public] upgrade from RB2011UiAS to something faster - RB450Gx4 ?
by Chris Herrmann 23 Feb '20

23 Feb '20

Sounds like the RB3011 will fit the bill... I don't quite need to push 1.8Gbps per stream :) The RB3011/4011 are both more $$ than the RB450Gx4 or 750Gr3. If the extra $ are necessary to meet what i want then that's fine, but if the smaller unit will do it - then that would be better as it's smaller... presumably lower power and cheaper. @Russell I think the VLAN on switch chip might be the thing that tripped me up with one of the other units I played with, in which case the 3011 would be a better option? Cheers, Chris

3 3

CHR VPS with megaport
by Mike Everest 23 Feb '20

23 Feb '20

Anyone have a favourite VPS provider for CHR with Megaport connectivity? We currently use Zettagrid for various systems and services, but looking for alternatives to add/expand/enhance existing solutions :) All comments and suggestions are welcome! Cheers, Mike.

3 2

Unable to connect to Telstra BigPond AP?!?
by Karl Auer 10 Jan '20

10 Jan '20

I've temporarily relocated because of the fires and am currently ensconced at a relative's home armed with enough compute power to run a small country. My MikroTik routers do not want to talk to the local Telstra BigPond ADSL router, specifically a Thomson TG782T. There's one for sale on GumTree if you want to see pictures: https://www.gumtree.com.au/s-ad/castle-hill/modems-routers/bigpond-adsl -modem/1207553894 I've changed the wlan1 interface to mode=station and the ssid="TheCorrectSSID". I've changed the default security profile to set mode=dynamic-keys authentication-types=wpa-psk,wpa2-psk wpa-pre-shared-key="ThePSK" wpa2- pre-shared-key="ThePSK" If I change only the SSID and PSKs in the above settings, the MikroTik connects to my phone's hotspot immediately. My phone and several other devices can connect to the Testra router. Is there some trick I'm missing here? This isn't routing or anything like that, it's more fundamental - the wlan1 in station mode never gets to "Running" state. I've tried a hAP Lite and a 951G-2HnD. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

2 4

SSL and MT hotspot?
by Karl Auer 09 Jan '20

09 Jan '20

I've just had my first look at the MT hotspot, and while it's pretty clunky, it's reasonably effective. With one HUGE exception: No SSL! Not even a default self-signed one. There seem to be a few scripts around that will do LetsEncrypt certs, but they all require that the certbot runs on a separate system, so they are of limited usefulness. Did I miss something? Does anyone know of an on-board SSL mechanism (LetsEncrypt or anything else) for MikroTik? Without SSL, a MikroTik hotspot is a complete non-starter. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

2 1