- Public - talk.mikrotik.com.au

Re: [MT-AU Public] IPSec puzzlement
by Karl Auer 16 Jul '21

16 Jul '21

On Fri, 2021-07-16 at 20:14 +1000, Karl Auer wrote: > I have these two routers which *were* doing an IPSec VPN quite > successfully, but for reasons unclear now no longer have a (VPN) > connection. There is Internet connectivity between them, but IPsec > stays stubbornly down. I'm at a bit of a loss, because the setup > seems ridiculously simple! I'm almost too embarrassed to write this, but here goes. Basically I made the cardinal mistake of assuming something instead of just noting the symptoms. I assumed the VPN was down; but all I really knew was that my test traffic was not being delivered as it should have been, and that it should have been going over the VPN. The policy at one end says run traffic over the VPN if it comes from 192.168.102.0/24 and is going to 192.168.103.0/24. The policy at the other end says vice versa. I was testing from the routers themselves - which have many interfaces and thus many possible source addresses. And I was not specifying a source address for my tests, so my test packets were not coming from source addresses that matched the policies. The penny dropped as I watched (for the thousandth time) a host unreachable come back from the ISP's next hop address, and oh-so- belatedly twigged that my test packets were not being directed over the VPN at all... As soon as I specified the right source addresses in my tests, the traffic went over the VPN. And when I then tested from the networks on the LAN sides of the routers (something I should have tried a lot earlier), that worked too. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

1 0

RB951G-2HnD - upgrade 6.36 to 6.47.10?
by Karl Auer 11 Jul '21

11 Jul '21

Two MikroTik RB951G-2HnD routers have sort of swung back into my orbit with the return after some time of an old customer. These routers both have 6.36 on them, and I'm thinking I should upgrade them to 6.47.10 LTS. Is that too big a jump? Will chunks of the current configuration fail? It's all fairly plain-vanilla except for an IPSec VPN running between the two devices. The particular model is barely mentioned in any of the (many, many) release notes since 6.36, and nothing really relevant. Any hints appreciated. Thanks, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

2 1

MF823's on routerOS?
by Damien Gardner Jnr 10 Jul '21

10 Jul '21

Hi Folks, We had a bit of an outage at work this morning, and I was a little surprised that my 'net at home went down - it should have just failed over to going via VPN over the MF823 with Telstra 4G that I have had plugged in for YEARS here.. Finally had some time to sit down and check, and the LTE interface is nowhere to be found. Rebooted the CRS109 incase something was hinkey.. No go. Moved the MF823 to another CRS109.. Still no go. Swapped in a spare MF823.. STILL no go.. These are on 6.47.10 and 6.46.8. Tested on our travel router (RB2011, 6.45.6), and lte1 comes up fine! Have Mikrotik removed support for MF823's in the last 12 months?? Anyone have a suggestion of something not crazy expensive to replace them with? :) -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

2 1

Re: [MT-AU Public] MF823's on routerOS?
by Two Fat Monkeys - Dirk Bermingham 10 Jul '21

10 Jul '21

Hi Damien, I have no idea on the CRS109 support. However, I've generally given up on 4G USB modems as I've found too many times they let you down when failover is critical due to a quirk of some sort... My go to now are the Teltonika RUT240 (sorry Mike ☹) the bonus is they have Band 28 support too, I've got a few dozen scattered around with 100% reliability so far. Hope this helps, DB -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Damien Gardner Jnr Sent: Saturday, 10 July 2021 2:50 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: [DKIM Failure] [MT-AU Public] MF823's on routerOS? Hi Folks, We had a bit of an outage at work this morning, and I was a little surprised that my 'net at home went down - it should have just failed over to going via VPN over the MF823 with Telstra 4G that I have had plugged in for YEARS here.. Finally had some time to sit down and check, and the LTE interface is nowhere to be found. Rebooted the CRS109 incase something was hinkey.. No go. Moved the MF823 to another CRS109.. Still no go. Swapped in a spare MF823.. STILL no go.. These are on 6.47.10 and 6.46.8. Tested on our travel router (RB2011, 6.45.6), and lte1 comes up fine! Have Mikrotik removed support for MF823's in the last 12 months?? Anyone have a suggestion of something not crazy expensive to replace them with? :) -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - https://click.pstmrk.it/2t/www.rendrag.net%2F/YYsaliMN/OHBV/RUqHRZAp5S -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au https://click.pstmrk.it/2t/talk.mikrotik.com.au%2Fmailman%2Flistinfo%2Fpubl…

1 0

PS180-T upgrade firmware issue solved!
by Mike Everest 29 Jun '21

29 Jun '21

For all who are following the PS180-T issue, we are finally able to offer a solution - details in the article: https://shop.duxtel.com.au/article_info.php?articles_id=98 Questions are always welcome as usual! Regards, Mike.

4 7

EC25-AU FA is ok EC25-AU GC is not
by Matt Hall 24 Jun '21

24 Jun '21

Hello, The EC25- AU GC works in PPP but not in LTE. Using an ltap mini. It's enabled but not running even though it's registered to the LTE network. Any idea why? I have 3 of the GC units, have tested 2 same result. Any suggestions Thank you, Matt

1 0

Update on Proscend PS180-T VDSL modem issue
by Mike Everest 17 Jun '21

17 Jun '21

Hello all! For those who have been following the firmware update issue, we have an updated notice available here: https://shop.duxtel.com.au/article_info.php?articles_id=97 Some good news, some not so.. Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel

8 13

Updated Firmware for the Proscend 180T SFP VDSL2 Modems?
by Damien Gardner Jnr 08 Jun '21

08 Jun '21

Does anyone know if there is an Updated firmware available for the Metanoia/Proscend VDSL SFP's? There is a note from NBNCo relating to them being made unusable in the next three months due to incompatibility with new features being enabled on FTTN DSLAM ports. THe note seems to suggest by 'older' firmware that maybe there is a newer firmware available? Anyone know? Would be nice if I could keep using mine :) "A Metanoia SFP device with older firmware failed to negotiate synchronization at all once SOS and ROC was enabled on the DSLAM port. RSPs with services identified with these devices (approximately 700 network wide) will be notified to coordinate an update or replacement of these devices before network SOS/ROC deployment occurs." Thanks, DG -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

7 18

GPER units
by Isaac Lo 20 May '21

20 May '21

Hi, Anyone using the GPER passive ethernet repeaters? As they aren't quite passive, we are interested in what the reliability of the units have been like? Our use-case will be for it to be installed in a building riser. Regards, Isaac

1 0

Chateau LTE drama
by Jason Hecker 08 May '21

08 May '21

Hi Any Chateau users here? I have one set up with 7.1b5, LTE firmware EG12EAPAR01A09M4G and the Optus SIM I discussed earlier. It's been working all week here in Ballarat with up to 3 CA's used and speedtests in the middle of the day exceeding 40Mbit. I sent it up to the client in Brisbane who is surrounded by Optus towers on all bands and it just wants to stick to B28 and UMTS with terrible speeds and lots of flapping. The B28 signals seem OK with an RSSI of -68. A cell scan doesn't show any of the other Optus cells except the ones with B28. No B1/3/7 etc. Can Optus selectively deny access to an IMEI on various channels? I updated the LTE firmware today to the latest and in the transition the client got a message that the SIM wasn't compatible with the service they were providing. A reboot fixed that though but the behaviour of sticking to B28 and UMTS was the same. I have disabled 3G and it's firmly stuck on B28. Any suggestions - need to get this running "normally" for Monday. Regards, Jason Hecker <https://www.upandrunningtech.com.au/> <https://www.upandrunningtech.com.au/>

1 0