May 2020 - Public - talk.mikrotik.com.au

State of 3G/4G fallback on MikroTik?
by Karl Auer 01 Sep '21

01 Sep '21

We need to quote to a client for two routers capable of running a VPN between two sites - easy, that's a MikroTik. But they want a fallback to 3G/4G so that the site that falls back keeps Internet access AND so that the VPN keeps running. What's the state of MikroTik 3G/4G fallback? Last I looked it seemed very roll-your-own, and supported only a few very specific dongles... Ideally it would work like the (vastly more expensive) Merakis and just fail everything over to the secondary link if the primary fails, where "fail" would be either a ping test or interface down. That said, I'm OK with a solution that needs more work, as long as once done it is set-and-forget. Any pointers? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

7 12

Axiom Cyber Shield
by Philip Loenneker 27 Jan '21

27 Jan '21

Hi all, After seeing their presentation at the Melbourne MUM, we've been having a look at Axiom Cyber Shield. Is anyone on here using it and happy to provide some feedback, on-list or off-list? It certainly sounds like a good product, but I only seem to be able to find sales pitch information, not unbiased reviews. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

3 7

Canberra Mikrotik
by Malcolm Faed 20 May '20

20 May '20

Hi all, I am after a gigabit Mikrotik switch / router in Canberra tomorrow morning. Can anyone suggest a shop that might have stock on the shelf. Cheers, Sent from my mobile. Malcolm Faed. Network Broadcast Engineer malcolm(a)avcomm.com.au Av-Comm Office +61 2 9939 4377 Mobile +61 424 957 053 Unit 24 / 9 Powells Road, Brookvale - NSW 2100 avcomm.com.au This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

1 0

cAP AC
by Tim Warnock 19 May '20

19 May '20

Hey Guys, I have a single out-of-support UBNT AC AP at home that uses a ton of power and is literally falling apart. Looking at either going a newer UBNT or maybe a cAP AC. There's a couple of things the UBNT boxes do that I don't like (single MAC per registration is one and the controller software is both a blessing and a curse). If you had a choice, what would you choose? Any odd behaviour or weird incompatibilities with the cAP AC? Thanks Tim

4 6

RB2011UiAS stuck in boot loop after reset
by Chris Herrmann 18 May '20

18 May '20

Hi all, I'm trying to pass on my old RB2011 to a friend... so did a reset: /system reset-configuration skip-backup=yes keep-users=no but now it's stuck in a boot loop. when it boots, it gets to: (console) MikroTik 6.45.7 (stable) MikroTik Login: login as admin, get about 2/3 of a page of the startup text... then it reboots. I've been trying a few things: Select which booter you want to load: * 1 - load regular booter 2 - force backup-booter loading your choice: 2 - force backup-booter loading tried to change the boot device fo "boot Flash Configure mode" I assume that it's got a corrupt FS or something - but... what's the quickest way to get this back to a factory default point from here, ready to do the initial walkthrough? Thanks! Chris

2 2

Assistance with CHR on ESX6, Vlan-ing and an HP2910 troubleshooting
by deadlift 12 May '20

12 May '20

Hi everyone, Either there is a fundamental lack of understanding on my part, (highly likely) on MT Vlan-ing/routing, or I'm just having a bad day. I have spun up a CHR box with two VM Nics, one on (VMNetwork) ether1 for management on my local subnet 192.168.1.0/24 which has a dhcp client, use this for winbox mgmt, etc. The other is direct ethernet connection to an HP Procurve 2910al, port 25 for now. VM Nic ether2 (LAN NIC for want of a better term) with Static IP on CHR 10.10.20.200/24 Hoping this can be the management Vlan network. (10.10.20.0/244) This is where i start getting lost in nomenclature and it really starting to get the better of me. This "link" would be: Trunk in Cisco Trunk in MT (?) not sure Tagged in HP As i understand it, I've followed this guide. https://forum.mikrotik.com/viewtopic.php?t=143620 For now, I do understand the 2910 will do layer 3 routing, i have chosen to keep with no ip routing on the switch. The reason for now is that most IP services are on the router. Moving routing may be beneficial but the current goal would like to get my devices correctly administered on layer 2 and 3. My only signs of layer two life is a ping from the HP to the CHR ether2 10.10.20.200 is responsive, 10.10.20.1 is not. Also I cannot ping the Vlan IP on the HP (10.10.20.254/24) from the CHR either via the management vlan interface or ether2. At the moment the switch is administered over serial. Attached is the router and switch config for you enjoyment, please let me know where I've gone awry in your eyes and I will try and knock this over, then write up something for posterity. thanks Simon.

4 5

empty connection-state value in filter rule?
by Karl Auer 08 May '20

08 May '20

In a filter list, I have several rules that have connection-state="" in them. For example: chain=ssh action=accept connection-state="" \ protocol=tcp dst-port=22 \ log-prefix="" What do people think would be the behaviour? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254 Old fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556

2 5