- Public - talk.mikrotik.com.au

Claude and Mikrotik. Wow!
by Malcolm Faed 19 Jul '26

19 Jul '26

Hi all, I've been meaning to post this for a while. I was struggling with IPv6 config on Aussie broadband. I could see that my config probably should have been working but it wasn't. So I called in my 'expert'. I opened a command prompt (Windows) and ran Claude in CLI mode. I didn't want to give Claude write access to the router, so I made a separate account it could use to SSH into the 'tik with read only permissions. Then the fun started. Claude found I had putty installed in path so used that for SSH. After some mucking around with authentication and keys, it got an export of the config. Then it made various suggestions and I asked it to respond with CLI commands for copying to winbox terminal. I checked each command for sanity before pasting it into the terminal. Iteratively it helped get the config right by searching online for ABB related issues, reading the MT docs, enabling verbose logging for DHCP, reading and disecting logs,etc. This blew my mind. Then I set it to optimise my network (5 x Mikrotiks including 2 x APs and the gateway.) It downloaded the configs diligently from each device and it recommended various optimisations that I had missed, or overlooked over years of firmware updates. Something on my mind was turning one MT into a honeypot. I gave it R/W access to a less critical device and told it what I wanted. Logging, email alerts, an extensive service list, and lo and behold, it built up and tested the configuration, including scripts to email summaries of access to the honeypot. Don't panic about losing your job to Claude. You really need to hold its hand and direct it! Another task it did for me was to update my years old FW update scripts and my backup to email scripts. I did find it helps to tell claude what version of FW you are using to reduce the number of erroneous commands. Anyway, if you haven't tried it, give it a go. BTW, would love to see another MUM occur one day. All the best, Mal _____________________________ email:malcolm@faed.name mobile:0409 601 747 Blog http://malfunction.faed.name _____________________________

3 2

MACsec for Dark Fibre
by Christopher Hawker 07 May '26

07 May '26

Hello folks, We've got a dark fibre circuit being delivered over the coming weeks. We've ordered 3 x CRS326-24S+2Q+RM (one for each end plus a cold spare). Our plan is to route local network traffic over the service, which obviously requires us to secure it through some form of encryption. This then leads me to my next question. Some people I've spoken to are telling us to run an IPsec tunnel across between the two FortiGate appliances we have at either end, some are telling us to look at MACsec to offload the traffic from the L3 side of things onto L2. How new is the MACsec implementation on the CRS326? What performance benefits or detriments are we likely to see from using MACsec as opposed to IPsec tunnels? The only reason I'm considering it is because it reduces the IP overhead and reduces the workload on the FortiGate appliances. Regards, Christopher Hawker

3 2

Greasy RB4011
by Karl Auer 24 Apr '26

24 Apr '26

I have come into possession of an RB4011iGS+5HacQ2HnD-IN. It works, but its life was spent in a cafe, and the outer casing at least has a thin layer of grease from (I guess) aerosolised grease in the air around the fryers. The top is worst, the bottom and sides seem much less affected. The four antennas are very greasy, and one seems broken. I haven't taken it apart yet to see if the innards are greasy too (don't have a small enough allen key). As it is passively cooled it seems likely that it'll be OK. It was running 24/7 in that environment, so I think anything that was going to catch fire would have done so by now :-) So I have two questions! 1: What's the best way to get the grease off (and possibly out of) this thing? Isopropyl alcohol doesn't do much. If I can get the PCB out of the case I might just wash the case with detergent and a brush :-) If I'm carefull I could probably do the same with the antennas. There are people on the Internet saying to do much the same thing with the PCB as well but... 2: Are the antennas on this model replaceable? They don't seem to want to unscrew or unplug. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 2

DuxSpot - a horror movie still
by Karl Auer 19 Jan '26

19 Jan '26

Dunno if the list accepts image attachments. If it does: This is a pic of a DuxSpot access point, as recently adjusted by the customer. The cover has been removed and the antennas splayed out. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 4

Monitor RAID on ROSE
by Steve Sugden 14 Jan '26

14 Jan '26

Hi All, I am looking for a good way to monitor the RAID state, disks, and other components on a ROSE server. I would prefer a solution similar to how one might monitor a NAS using SNMP. Do you know if there is a tool or method for this, or do you have any other suggestions? Thanks, Steve -- Steve Sugden *Director* *Valve Networks Pty Ltd*ABN: 31 168 442 288 ACMA Carrier Licence: 447 Office: Level 3, Space Building, 328 Scottsdale Drive, Robina, QLD, 4226 Phone: 1300 458 136 | Mobile 0413 440 479 Email: steve(a)valvenetworks.com.au | Web: www.valvenetworks.com.au

4 5

Bandwidth oddity/problem
by Karl Auer 14 Dec '25

14 Dec '25

We have a 100% MikroTik network. When we run a speedtest while directly connected (Ethernet) to our gateway router, which is connected to the NBN on an FTTP service, we see expected results: Over 250 down, over 100 up. Three 10G fibre hops, a switch, a 1GB fibre hop and another switch later, those numbers are very slightly lower. All good. BUT: Connected via 5GHz wifi to an access point attached to the first of the abovementioned switches, we get the same download speeds, but only around 35 up. With essentially no other traffic on the wifi, the test device (a laptop) no more than three metres from the access point, and with no intervening objects. My thinking is this has to be a limitation in the test device's wifi or a limitation in the access point (MikroTik CAP aX). Not sure how to prove it one way or the other. We get the same result on three different laptops, but they are all similar vintage and same manufacturer (Lenovo). Is there any way this could be a *configuration* issue? It's very consistent. Am I ignorant of a known asymmetry in 5GHz wireless speeds? Hoping for ideas, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

5 9

WTB: 6 x RB3011UiAS-RM
by Christopher Hawker 11 Dec '25

11 Dec '25

Hey folks, I'm currently in the market for 6 x RB3011UiAS-RM for a small routing lab. If you have any available, please feel free to reach out to me off-list. Regards, Christopher Hawker

1 0

GET CERTIFIED - MTCNA - one 'subsidised place' available to the first willing applicant to apply!
by Mike Everest 10 Nov '25

10 Nov '25

Hi Folks! As usual, MTCNA works best with even numbers, and we presently have an odd number attending MTCNA class in Melbourne starting Wednesday (day after tomorrow ; ) If you have 3 full days available and would like to attend – please add your enrolment (follow the steps up to but don’t include payment ; ) then send me direct email to training(a)duxtel.com <mailto:training@duxtel.com> to say you want to claim the spot. In case more than one applicant submits, also tell me your maximum ‘bid’ to take it up – valid ‘bids’ are anywhere from $0 to half price 😄- i.e. if there is only one applicant, it’s your for $zero : ) Remember – only ONE spot available :-} Cheers! Mike. ------------------------------------------------------------------------------------ Why Choose DuxTel for all your MikroTik needs? 10 good reasons: <http://duxtel.com/why_duxtel> http://duxtel.com/why_duxtel ------------------------------------------------------------------------------------ Follow our tweets for news and updates: <http://twitter.com/duxtel> http://twitter.com/duxtel

1 0

ROSE DS Drive Hotspot?
by Steve Sugden 27 Oct '25

27 Oct '25

Hi All, Does anyone know or have experience with ROSE DS and if the drives can be hot swappable? Regards -- Steve Sugden *Director* *Valve Networks Pty Ltd*ABN: 31 168 442 288 ACMA Carrier Licence: 447 Office: Level 3, Space Building, 328 Scottsdale Drive, Robina, QLD, 4226 Phone: 1300 458 136 | Mobile 0413 440 479 Email: steve(a)valvenetworks.com.au | Web: www.valvenetworks.com.au

7 16

BGP Route Refresh - Invalid Subtype
by Christopher Hawker 27 Aug '25

27 Aug '25

Hello all, I'm seeing a possible bug (?) on my CCR2004-1G-12S+2XS running 7.19.4, where the router receives a route refresh from an IX route server with subtype 0 (which is a normal refresh in RFC 7313), the Tik warns that it is an invalid subtype. Is anyone else seeing similar? Regards, Christopher H.

3 3