- Public - talk.mikrotik.com.au

MACsec for Dark Fibre
by Christopher Hawker 07 May '26

07 May '26

Hello folks, We've got a dark fibre circuit being delivered over the coming weeks. We've ordered 3 x CRS326-24S+2Q+RM (one for each end plus a cold spare). Our plan is to route local network traffic over the service, which obviously requires us to secure it through some form of encryption. This then leads me to my next question. Some people I've spoken to are telling us to run an IPsec tunnel across between the two FortiGate appliances we have at either end, some are telling us to look at MACsec to offload the traffic from the L3 side of things onto L2. How new is the MACsec implementation on the CRS326? What performance benefits or detriments are we likely to see from using MACsec as opposed to IPsec tunnels? The only reason I'm considering it is because it reduces the IP overhead and reduces the workload on the FortiGate appliances. Regards, Christopher Hawker

3 2

Greasy RB4011
by Karl Auer 24 Apr '26

24 Apr '26

I have come into possession of an RB4011iGS+5HacQ2HnD-IN. It works, but its life was spent in a cafe, and the outer casing at least has a thin layer of grease from (I guess) aerosolised grease in the air around the fryers. The top is worst, the bottom and sides seem much less affected. The four antennas are very greasy, and one seems broken. I haven't taken it apart yet to see if the innards are greasy too (don't have a small enough allen key). As it is passively cooled it seems likely that it'll be OK. It was running 24/7 in that environment, so I think anything that was going to catch fire would have done so by now :-) So I have two questions! 1: What's the best way to get the grease off (and possibly out of) this thing? Isopropyl alcohol doesn't do much. If I can get the PCB out of the case I might just wash the case with detergent and a brush :-) If I'm carefull I could probably do the same with the antennas. There are people on the Internet saying to do much the same thing with the PCB as well but... 2: Are the antennas on this model replaceable? They don't seem to want to unscrew or unplug. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 2

DuxSpot - a horror movie still
by Karl Auer 19 Jan '26

19 Jan '26

Dunno if the list accepts image attachments. If it does: This is a pic of a DuxSpot access point, as recently adjusted by the customer. The cover has been removed and the antennas splayed out. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 4

Monitor RAID on ROSE
by Steve Sugden 14 Jan '26

14 Jan '26

Hi All, I am looking for a good way to monitor the RAID state, disks, and other components on a ROSE server. I would prefer a solution similar to how one might monitor a NAS using SNMP. Do you know if there is a tool or method for this, or do you have any other suggestions? Thanks, Steve -- Steve Sugden *Director* *Valve Networks Pty Ltd*ABN: 31 168 442 288 ACMA Carrier Licence: 447 Office: Level 3, Space Building, 328 Scottsdale Drive, Robina, QLD, 4226 Phone: 1300 458 136 | Mobile 0413 440 479 Email: steve(a)valvenetworks.com.au | Web: www.valvenetworks.com.au

4 5

Bandwidth oddity/problem
by Karl Auer 15 Dec '25

15 Dec '25

We have a 100% MikroTik network. When we run a speedtest while directly connected (Ethernet) to our gateway router, which is connected to the NBN on an FTTP service, we see expected results: Over 250 down, over 100 up. Three 10G fibre hops, a switch, a 1GB fibre hop and another switch later, those numbers are very slightly lower. All good. BUT: Connected via 5GHz wifi to an access point attached to the first of the abovementioned switches, we get the same download speeds, but only around 35 up. With essentially no other traffic on the wifi, the test device (a laptop) no more than three metres from the access point, and with no intervening objects. My thinking is this has to be a limitation in the test device's wifi or a limitation in the access point (MikroTik CAP aX). Not sure how to prove it one way or the other. We get the same result on three different laptops, but they are all similar vintage and same manufacturer (Lenovo). Is there any way this could be a *configuration* issue? It's very consistent. Am I ignorant of a known asymmetry in 5GHz wireless speeds? Hoping for ideas, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

5 9

WTB: 6 x RB3011UiAS-RM
by Christopher Hawker 11 Dec '25

11 Dec '25

Hey folks, I'm currently in the market for 6 x RB3011UiAS-RM for a small routing lab. If you have any available, please feel free to reach out to me off-list. Regards, Christopher Hawker

1 0

GET CERTIFIED - MTCNA - one 'subsidised place' available to the first willing applicant to apply!
by Mike Everest 10 Nov '25

10 Nov '25

Hi Folks! As usual, MTCNA works best with even numbers, and we presently have an odd number attending MTCNA class in Melbourne starting Wednesday (day after tomorrow ; ) If you have 3 full days available and would like to attend – please add your enrolment (follow the steps up to but don’t include payment ; ) then send me direct email to training(a)duxtel.com <mailto:training@duxtel.com> to say you want to claim the spot. In case more than one applicant submits, also tell me your maximum ‘bid’ to take it up – valid ‘bids’ are anywhere from $0 to half price 😄- i.e. if there is only one applicant, it’s your for $zero : ) Remember – only ONE spot available :-} Cheers! Mike. ------------------------------------------------------------------------------------ Why Choose DuxTel for all your MikroTik needs? 10 good reasons: <http://duxtel.com/why_duxtel> http://duxtel.com/why_duxtel ------------------------------------------------------------------------------------ Follow our tweets for news and updates: <http://twitter.com/duxtel> http://twitter.com/duxtel

1 0

ROSE DS Drive Hotspot?
by Steve Sugden 28 Oct '25

28 Oct '25

Hi All, Does anyone know or have experience with ROSE DS and if the drives can be hot swappable? Regards -- Steve Sugden *Director* *Valve Networks Pty Ltd*ABN: 31 168 442 288 ACMA Carrier Licence: 447 Office: Level 3, Space Building, 328 Scottsdale Drive, Robina, QLD, 4226 Phone: 1300 458 136 | Mobile 0413 440 479 Email: steve(a)valvenetworks.com.au | Web: www.valvenetworks.com.au

7 16

BGP Route Refresh - Invalid Subtype
by Christopher Hawker 27 Aug '25

27 Aug '25

Hello all, I'm seeing a possible bug (?) on my CCR2004-1G-12S+2XS running 7.19.4, where the router receives a route refresh from an IX route server with subtype 0 (which is a normal refresh in RFC 7313), the Tik warns that it is an invalid subtype. Is anyone else seeing similar? Regards, Christopher H.

3 3

Router backup Management
by doatesy+duxtel＠gmail.com 13 May '25

13 May '25

Hi All, Just wondering how other people manage their router backups? We manager a few routers across different clients, and we have been doing email backups to a office 365 mailbox for a while to keep historic backups of routers (both an Export/rsc and binary .backup files) , but every time I go to set it up and wage war with modern antispam configurations, I think there should be a better way. I was playing with the idea of creating a small custom SMTP server receive my mikrotik backup emails and store them appropriately (depending on client, router, and date, etc) and then do Git commits to keep track of changes on the .rsc/plain text backups, but thought I'd find out if anyone else has some good ideas. Also going down this route I can make sure all my backups go via VPN to our backup server which would be nice now that I think of it. I did notice that Mikrotik have a Cloud based backup service (which seems to be a paid option), but I always like having control over my own data (and I'll spend days of time to avoid a $5 subscription) hence the hesitation there. Anyways, would be very interested to hear anyone else's perspective on this. First time poster too, so hope this kind of question is appropriate. Thanks, Dave

8 7