- Public - talk.mikrotik.com.au

Re: [MT-AU Public] Public Digest, Vol 81, Issue 3
by Chris Herrmann 11 Jan '21

11 Jan '21

Hi Malcolm, it's been a very long time since I used any fortiwifi kit, because my experience was so bad... I like the fortigate firewalls, but can't recommend their other stuff. Also the 30 series will be the bottom of the range. I for testing / learning, but I would never attempt to use a 30 series in production. Learnt that the hard way. In my experience you're generally better off going a model "up" if you want to use the full utm. Utm is both memory and cpu intensive. Regards, Chris > On 11 Jan 2021, at 12:00, public-request(a)talk.mikrotik.com.au wrote: > > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: Axiom Cyber Shield (Malcolm Faed) > 2. Re: Axiom Cyber Shield (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 11 Jan 2021 09:14:41 +1100 > From: Malcolm Faed <malcolm(a)avcomm.com.au> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Axiom Cyber Shield > Message-ID: > <CAOnABO2Ny74EnDMiwO9io5d9wUXHNG8kf3Hhc7UEszPSRANBxA(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > Hi all, > > Thanks Mike, > > Yes that helps. I was asked to see if we could use a MT solution to go up > against a FortiWiFi 30E > > It seems the Axiom Cyber Shield would go some way toward meeting the > functionality of the Fortigate. > > Cheers, > > *Malcolm Faed.* > Broadcast Network Engineer > > *Av-Comm* > avcomm.com.au > malcolm(a)avcomm.com.au > 24/9 Powells Road, Brookvale, NSW 2100, Australia > P: +61 (2) 9939 4377 > M: +61 409 601 747 > > [image: Twitter] <https://twitter.com/AvCommSatellite> > <https://plus.google.com/+AvcommAustralia/>[image: Youtube] > <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] > <https://www.linkedin.com/company-beta/6583589/> > > This e-mail message may contain confidential or legally privileged > information and is intended only for the use of the intended recipient(s). > Any unauthorised disclosure, dissemination, distribution, copying or the > taking of any action in reliance on the information herein is prohibited. > E-mails are not secure and cannot be guaranteed to be error free as they > can be intercepted, amended, or contain viruses. Anyone who communicates > with us by e-mail is deemed to have accepted these risks. Av-Comm is not > responsible for errors or omissions in this message and denies any > responsibility for any damage arising from the use of e-mail. Any opinion > and other statement contained in this message and any attachment are solely > those of the author and do not necessarily represent those of the company. > > >> On Sat, 9 Jan 2021 at 13:56, Mike Everest <mike(a)duxtel.com> wrote: >> >> Hi Mal and all, >> >> We did run an evaluation subscription for a while, and can confirm that it >> certainly 'works as advertised' but in the end we found that the reporting >> data (at the time valuated) was rudimentary at best and we thought it was >> difficult to find the value in a USD300/year subscription cost per router. >> >> The analytics essentially came down to "we detected 'x' packets of type 'y' >> during the Last month". We didn't detect any noticeable change in network >> or generic attack activity while running it, but it could easily depend on >> the type of network node and profile of the operator... >> >> It's not something that I would recommend that /everyone/ needs to sign up >> to for every router they manage, but it is definitely a reasonable option >> for those who are actively seeking that kind of service :) >> >> Does it help? >> >> Cheers, Mike. >> >> ---------------------------------------------------------------------------- >> -------- >> Why Choose DuxTel for all your MikroTik needs? >> 10 good reasons: http://duxtel.com/why_duxtel >> >> ---------------------------------------------------------------------------- >> -------- >> Follow our tweets for news and updates: http://twitter.com/duxtel >> >> >> >> >>> -----Original Message----- >>> From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of >>> Malcolm Faed >>> Sent: Thursday, 7 January 2021 2:31 PM >>> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> >>> Subject: Re: [MT-AU Public] Axiom Cyber Shield >>> >>> Hi Philip and Mike, >>> >>> Two and a half years later..... >>> Did you end up running it? >>> I am interested in it and wondering if it has been worthwhile. >>> If you subscribed to the analytics, do you find it useful? >>> >>> Cheers, >>> Mal >>> >>> *Malcolm Faed.* >>> Broadcast Network Engineer >>> >>> *Av-Comm* >>> avcomm.com.au >>> malcolm(a)avcomm.com.au >>> 24/9 Powells Road, Brookvale, NSW 2100, Australia >>> P: +61 (2) 9939 4377 >>> M: +61 409 601 747 >>> >>> [image: Twitter] <https://twitter.com/AvCommSatellite> >>> <https://plus.google.com/+AvcommAustralia/>[image: Youtube] >>> <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: >>> Linkedin] <https://www.linkedin.com/company-beta/6583589/> >>> >>> This e-mail message may contain confidential or legally privileged >>> information and is intended only for the use of the intended >> recipient(s). >>> Any unauthorised disclosure, dissemination, distribution, copying or the >>> taking of any action in reliance on the information herein is prohibited. >>> E-mails are not secure and cannot be guaranteed to be error free as they >> can >>> be intercepted, amended, or contain viruses. Anyone who communicates >>> with us by e-mail is deemed to have accepted these risks. Av-Comm is not >>> responsible for errors or omissions in this message and denies any >>> responsibility for any damage arising from the use of e-mail. Any opinion >> and >>> other statement contained in this message and any attachment are solely >>> those of the author and do not necessarily represent those of the >> company. >>> >>> >>>> On Wed, 4 Jul 2018 at 16:15, Mike Everest <mike(a)duxtel.com> wrote: >>> >>>> G'day! >>>> >>>> We've been running it on one of our development routers for a couple >>>> of weeks, still getting to know the system and how it all works, but >>>> looking very good so far! :) >>>> >>>> (we are considering becoming their premier partner for Australia ;) >>>> >>>> Cheers! >>>> >>>>> -----Original Message----- >>>>> From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf >>>>> Of >>>> Philip >>>>> Loenneker >>>>> Sent: Wednesday, 4 July 2018 2:21 PM >>>>> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> >>>>> Subject: [MT-AU Public] Axiom Cyber Shield >>>>> >>>>> Hi all, >>>>> >>>>> After seeing their presentation at the Melbourne MUM, we've been >>>>> having a look at Axiom Cyber Shield. Is anyone on here using it and >>>>> happy to >>>> provide >>>>> some feedback, on-list or off-list? It certainly sounds like a good >>>> product, but I >>>>> only seem to be able to find sales pitch information, not unbiased >>>> reviews. >>>>> >>>>> Regards, >>>>> Philip Loenneker | Network Engineer | TasmaNet >>>>> 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia >>>>> P: 1300 792 711 >>>>> >>> philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.co >>>>> m.au >>>>>> >>>>> www.tasmanet.com.au<http://www.tasmanet.com.au/> >>>>> >>>>> _______________________________________________ >>>>> Public mailing list >>>>> Public(a)talk.mikrotik.com.au >>>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.co >>>>> m.au >>>> >>>> >>>> _______________________________________________ >>>> Public mailing list >>>> Public(a)talk.mikrotik.com.au >>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. >>>> au >>>> >>> _______________________________________________ >>> Public mailing list >>> Public(a)talk.mikrotik.com.au >>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au >> >> >> _______________________________________________ >> Public mailing list >> Public(a)talk.mikrotik.com.au >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au >> > > > ------------------------------ > > Message: 2 > Date: Mon, 11 Jan 2021 09:25:58 +1100 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Axiom Cyber Shield > Message-ID: <07de01d6e79f$92231f80$b6695e80$(a)duxtel.com> > Content-Type: text/plain; charset="us-ascii" > > Hi Mal, > > You'd probably also need to add a dns based web filter for a closer match to > Fortiguard functionality. > > Cheers! > > Mike. > >> -----Original Message----- >> From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of >> Malcolm Faed >> Sent: Monday, 11 January 2021 9:15 AM >> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> >> Subject: Re: [MT-AU Public] Axiom Cyber Shield >> >> Hi all, >> >> Thanks Mike, >> >> Yes that helps. I was asked to see if we could use a MT solution to go up >> against a FortiWiFi 30E >> >> It seems the Axiom Cyber Shield would go some way toward meeting the >> functionality of the Fortigate. >> >> Cheers, >> >> *Malcolm Faed.* >> Broadcast Network Engineer >> >> *Av-Comm* >> avcomm.com.au >> malcolm(a)avcomm.com.au >> 24/9 Powells Road, Brookvale, NSW 2100, Australia >> P: +61 (2) 9939 4377 >> M: +61 409 601 747 >> >> [image: Twitter] <https://twitter.com/AvCommSatellite> >> <https://plus.google.com/+AvcommAustralia/>[image: Youtube] >> <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: >> Linkedin] <https://www.linkedin.com/company-beta/6583589/> >> >> This e-mail message may contain confidential or legally privileged >> information and is intended only for the use of the intended recipient(s). >> Any unauthorised disclosure, dissemination, distribution, copying or the >> taking of any action in reliance on the information herein is prohibited. >> E-mails are not secure and cannot be guaranteed to be error free as they > can >> be intercepted, amended, or contain viruses. Anyone who communicates >> with us by e-mail is deemed to have accepted these risks. Av-Comm is not >> responsible for errors or omissions in this message and denies any >> responsibility for any damage arising from the use of e-mail. Any opinion > and >> other statement contained in this message and any attachment are solely >> those of the author and do not necessarily represent those of the company. >> >> >>> On Sat, 9 Jan 2021 at 13:56, Mike Everest <mike(a)duxtel.com> wrote: >>> >>> Hi Mal and all, >>> >>> We did run an evaluation subscription for a while, and can confirm >>> that it certainly 'works as advertised' but in the end we found that >>> the reporting data (at the time valuated) was rudimentary at best and >>> we thought it was difficult to find the value in a USD300/year > subscription >> cost per router. >>> >>> The analytics essentially came down to "we detected 'x' packets of type > 'y' >>> during the Last month". We didn't detect any noticeable change in >>> network or generic attack activity while running it, but it could >>> easily depend on the type of network node and profile of the operator... >>> >>> It's not something that I would recommend that /everyone/ needs to >>> sign up to for every router they manage, but it is definitely a >>> reasonable option for those who are actively seeking that kind of >>> service :) >>> >>> Does it help? >>> >>> Cheers, Mike. >>> >>> ---------------------------------------------------------------------- >>> ------ >>> -------- >>> Why Choose DuxTel for all your MikroTik needs? >>> 10 good reasons: http://duxtel.com/why_duxtel >>> >>> ---------------------------------------------------------------------- >>> ------ >>> -------- >>> Follow our tweets for news and updates: http://twitter.com/duxtel >>> >>> >>> >>> >>>> -----Original Message----- >>>> From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf >>>> Of Malcolm Faed >>>> Sent: Thursday, 7 January 2021 2:31 PM >>>> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> >>>> Subject: Re: [MT-AU Public] Axiom Cyber Shield >>>> >>>> Hi Philip and Mike, >>>> >>>> Two and a half years later..... >>>> Did you end up running it? >>>> I am interested in it and wondering if it has been worthwhile. >>>> If you subscribed to the analytics, do you find it useful? >>>> >>>> Cheers, >>>> Mal >>>> >>>> *Malcolm Faed.* >>>> Broadcast Network Engineer >>>> >>>> *Av-Comm* >>>> avcomm.com.au >>>> malcolm(a)avcomm.com.au >>>> 24/9 Powells Road, Brookvale, NSW 2100, Australia >>>> P: +61 (2) 9939 4377 >>>> M: +61 409 601 747 >>>> >>>> [image: Twitter] <https://twitter.com/AvCommSatellite> >>>> <https://plus.google.com/+AvcommAustralia/>[image: Youtube] >>>> <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE- >> yw>[image: >>>> Linkedin] <https://www.linkedin.com/company-beta/6583589/> >>>> >>>> This e-mail message may contain confidential or legally privileged >>>> information and is intended only for the use of the intended >>> recipient(s). >>>> Any unauthorised disclosure, dissemination, distribution, copying or >>>> the taking of any action in reliance on the information herein is >> prohibited. >>>> E-mails are not secure and cannot be guaranteed to be error free as >>>> they >>> can >>>> be intercepted, amended, or contain viruses. Anyone who communicates >>>> with us by e-mail is deemed to have accepted these risks. Av-Comm is >>>> not responsible for errors or omissions in this message and denies >>>> any responsibility for any damage arising from the use of e-mail. >>>> Any opinion >>> and >>>> other statement contained in this message and any attachment are >>>> solely those of the author and do not necessarily represent those of >>>> the >>> company. >>>> >>>> >>>> On Wed, 4 Jul 2018 at 16:15, Mike Everest <mike(a)duxtel.com> wrote: >>>> >>>>> G'day! >>>>> >>>>> We've been running it on one of our development routers for a >>>>> couple of weeks, still getting to know the system and how it all >>>>> works, but looking very good so far! :) >>>>> >>>>> (we are considering becoming their premier partner for Australia >>>>> ;) >>>>> >>>>> Cheers! >>>>> >>>>>> -----Original Message----- >>>>>> From: Public [mailto:public-bounces@talk.mikrotik.com.au] On >>>>>> Behalf Of >>>>> Philip >>>>>> Loenneker >>>>>> Sent: Wednesday, 4 July 2018 2:21 PM >>>>>> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> >>>>>> Subject: [MT-AU Public] Axiom Cyber Shield >>>>>> >>>>>> Hi all, >>>>>> >>>>>> After seeing their presentation at the Melbourne MUM, we've been >>>>>> having a look at Axiom Cyber Shield. Is anyone on here using it >>>>>> and happy to >>>>> provide >>>>>> some feedback, on-list or off-list? It certainly sounds like a >>>>>> good >>>>> product, but I >>>>>> only seem to be able to find sales pitch information, not >>>>>> unbiased >>>>> reviews. >>>>>> >>>>>> Regards, >>>>>> Philip Loenneker | Network Engineer | TasmaNet >>>>>> 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia >>>>>> P: 1300 792 711 >>>>>> >>>> >> philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.co >>>>>> m.au >>>>>>> >>>>>> www.tasmanet.com.au<http://www.tasmanet.com.au/> >>>>>> >>>>>> _______________________________________________ >>>>>> Public mailing list >>>>>> Public(a)talk.mikrotik.com.au >>>>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikroti >>>>>> k.co >>>>>> m.au >>>>> >>>>> >>>>> _______________________________________________ >>>>> Public mailing list >>>>> Public(a)talk.mikrotik.com.au >>>>> > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. >>>>> au >>>>> >>>> _______________________________________________ >>>> Public mailing list >>>> Public(a)talk.mikrotik.com.au >>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.co >>>> m.au >>> >>> >>> _______________________________________________ >>> Public mailing list >>> Public(a)talk.mikrotik.com.au >>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. >>> au >>> >> _______________________________________________ >> Public mailing list >> Public(a)talk.mikrotik.com.au >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 81, Issue 3 > *************************************

1 0

Mikrotik USB LTE
by Tim Sandy 09 Jan '21

09 Jan '21

Unfortunately there aren't any Mikrotiks out there that feature both internal LTE and an SFP cage. >From a friend's recommendation, I've ordered for testing an external LTE bridge modem (NetGear LB2120) that passes the IP through to RouterOS - but this is an external device and another power supply. Does anyone have a product recommendation for a USB modem that presents an LTE interface and the LTE IP address to RouterOS? With the exception of the Chateau - which doesn't have an SFP cage - the Mikrotik LTE solutions don't support band 28. And an additional question - Does anyone know of any 5G hardware available that does the same? Thanks! Tim

4 3

Re: [MT-AU Public] Public Digest, Vol 80, Issue 5
by Matt Hall 22 Dec '20

22 Dec '20

Perhaps try winbox> terminal then: /system reset-configuration no-defaults=yes and start from scratch. You can copy and paste sections of your config to make the rebuild faster if it helps. For example, prior to wiping the box: /ip firewall export will give you your complete firewall config On 22 Dec 2020, at 12:00, public-request(a)talk.mikrotik.com.au wrote: Send Public mailing list submissions to public(a)talk.mikrotik.com.au To subscribe or unsubscribe via the World Wide Web, visit http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au or, via email, send a message with subject or body 'help' to public-request(a)talk.mikrotik.com.au You can reach the person managing the list at public-owner(a)talk.mikrotik.com.au When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..." Today's Topics: 1. Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. (Jim Woodward) 2. Re: Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. (Andrew Oakeley) ---------------------------------------------------------------------- Message: 1 Date: Tue, 22 Dec 2020 11:17:50 +1100 From: "Jim Woodward" <jim(a)alwaysnever.net> To: <public(a)talk.mikrotik.com.au> Subject: [MT-AU Public] Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. Message-ID: <001c01d6d7f7$e2a95350$a7fbf9f0$(a)alwaysnever.net> Content-Type: text/plain; charset="US-ASCII" Hi All, Long time listener, first time caller. I have a weird issue, I had a RB2011 some time ago which has two switch chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 and aside from resetting MAC addresses and changing the WAN uplink port there was very little else to alter (they were both running the same RouterOS at the time) However, there is some remnants of the RB2011 that I can't seem to clear which is the Fast Ethernet switch config (switch2) it shows up as follows: [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 MediaTek-MT7621 none none 1 I switch2 (unknown) none none [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print Flags: I - invalid # NAME SWITCH VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID 0 E2 switch1 disabled auto 1 E3 switch1 disabled auto 2 E4 switch1 disabled auto 3 E5 switch1 disabled auto 4 I E6 switch2 5 I E7 switch2 6 I E8 switch2 7 I E9 switch2 8 I E10 switch2 9 E1 switch1 fallback 1 10 switch1-cpu switch1 disabled auto 11 I switch2-cpu switch2 [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> There doesn't seem to be a way to remove this from WinBox and I cant seem to find an easy way to clear it from the command line, does anyone have any hints? Would I need to do a different kind of export and re-import? Kind Regards, Jim. ------------------------------ Message: 2 Date: Tue, 22 Dec 2020 00:53:06 +0000 From: Andrew Oakeley <andrew(a)oakeley.com.au> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. Message-ID: <162C13E6-BA05-40DB-9B17-0090DBBDADFE(a)oakeley.com.au> Content-Type: text/plain; charset="utf-8" Hi, Did you restore a config? OP Did you restore a backup? Restoring a backup between devices is not supported. Andy Sent from my iPhone > On 22 Dec 2020, at 08:20, Jim Woodward <jim(a)alwaysnever.net> wrote: > > ?Hi All, > > > > Long time listener, first time caller. > > > > I have a weird issue, I had a RB2011 some time ago which has two switch > chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 > and aside from resetting MAC addresses and changing the WAN uplink port > there was very little else to alter (they were both running the same > RouterOS at the time) > > > > However, there is some remnants of the RB2011 that I can't seem to clear > which is the Fast Ethernet switch config (switch2) it shows up as follows: > > > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print > > Flags: I - invalid > > # NAME TYPE MIRROR-SOURCE > MIRROR-TARGET SWITCH-ALL-PORTS > > 0 switch1 MediaTek-MT7621 none none > > 1 I switch2 (unknown) none none > > > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print > > Flags: I - invalid > > # NAME SWITCH > VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID > > 0 E2 switch1 > disabled auto > > 1 E3 switch1 > disabled auto > > 2 E4 switch1 > disabled auto > > 3 E5 switch1 > disabled auto > > 4 I E6 switch2 > > 5 I E7 switch2 > > 6 I E8 switch2 > > 7 I E9 switch2 > > 8 I E10 switch2 > > 9 E1 switch1 > fallback 1 > > 10 switch1-cpu switch1 > disabled auto > > 11 I switch2-cpu switch2 > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> > > > > > > > > There doesn't seem to be a way to remove this from WinBox and I cant seem to > find an easy way to clear it from the command line, does anyone have any > hints? Would I need to do a different kind of export and re-import? > > > > > > > > Kind Regards, > > Jim. > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ Subject: Digest Footer _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ End of Public Digest, Vol 80, Issue 5 *************************************

1 0

Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config.
by Jim Woodward 22 Dec '20

22 Dec '20

Hi All, Long time listener, first time caller. I have a weird issue, I had a RB2011 some time ago which has two switch chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 and aside from resetting MAC addresses and changing the WAN uplink port there was very little else to alter (they were both running the same RouterOS at the time) However, there is some remnants of the RB2011 that I can't seem to clear which is the Fast Ethernet switch config (switch2) it shows up as follows: [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 MediaTek-MT7621 none none 1 I switch2 (unknown) none none [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print Flags: I - invalid # NAME SWITCH VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID 0 E2 switch1 disabled auto 1 E3 switch1 disabled auto 2 E4 switch1 disabled auto 3 E5 switch1 disabled auto 4 I E6 switch2 5 I E7 switch2 6 I E8 switch2 7 I E9 switch2 8 I E10 switch2 9 E1 switch1 fallback 1 10 switch1-cpu switch1 disabled auto 11 I switch2-cpu switch2 [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> There doesn't seem to be a way to remove this from WinBox and I cant seem to find an easy way to clear it from the command line, does anyone have any hints? Would I need to do a different kind of export and re-import? Kind Regards, Jim.

3 4

Re: [MT-AU Public] Public Digest, Vol 80, Issue 2
by Matt Hall 20 Dec '20

20 Dec '20

Roger, If you want to play around and do some “lab” experiments you might want to try an EC-25 modem in your lte mikrotik unit instead. Be aware that whilst the EC-25 and your desired Mikrotik LTE unit are licensed for use independently when combined they are not. I’ve mucked around a little with this so if you want some info feel free to get in touch. You’ll need to communicate directly with the modem via the at chat protocol to lock it to band 28. You can do that via the command line within one box or via ssh. Matt On Sat, 19 Dec 2020 at 12:00, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: LTE6 and B8 and B28 (Roger Plant) > 2. Re: CCR 1036 PSU (Andrew Gilbett) > 3. Re: CCR 1036 PSU (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 18 Dec 2020 13:03:10 +1100 > From: "Roger Plant" <rplant(a)melbpc.org.au> > To: public(a)talk.mikrotik.com.au > Subject: Re: [MT-AU Public] LTE6 and B8 and B28 > Message-ID: <5FDC0DDE.4296.DC7E4(a)rplant.melbpc.org.au> > Content-Type: text/plain; charset=US-ASCII > > Hi, > > I did look at it, but in addition to the lte6 not supporting B28, from > memory the gain of the dish at 700MHz is > less than 0db. > > The RFI LTE-XPol-002-5g (And its Poynting twin) Antenna seems good, but > pricey. > And you then have to find something to plug into it. > > Regards > Roger > > > Date sent: Fri, 18 Dec 2020 11:46:03 +1100 > From: "Jason Hecker" <jason(a)upandrunningtech.com.au> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] LTE6 and B8 and B28 > Send reply to: MikroTik Australia Public List < > public(a)talk.mikrotik.com.au> > > [ Double-click this line for list subscription options ] > > Has anyone managed to get any of the LTE6/CAT6 Mikrotik routers > working on B8 (900MHz)? > > I have an LTE6 dish to try out but doesn't do B28 (700Mhz) and all the > towers I want to try it in this remote location only have B28 (Optus > and Telstra). The Chateau of course does B28 just fine, but it's not > in a dish. :) There is one tower in the region with B8 proposed but > not yet operational according to RFNSA's site. > > The LTE6 stuff is a bit strange, they support B17 which is 700MHz (and > not used in Australia) as well but can't seem to do B28. > > I did try the Chateau in another remote location connected to a > dual-cable directional roof antenna set up for a Telstra B618 and it > Speedtested a stonking 129Mbit at 18km range. It used B3 (20MHz) with > CA of B3 (10MHz) and B7 (20MHz) on Optus. Telstra only worked on B28 > with 32Mbit tests which is a bit faster than the B618. > > Regards, > Jason Hecker > <https://www.upandrunningtech.com.au/> > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au---------------------------- > Roger Plant > > > > > > ------------------------------ > > Message: 2 > Date: Fri, 18 Dec 2020 15:53:11 +1100 > From: Andrew Gilbett <andrew(a)gilbett.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] CCR 1036 PSU > Message-ID: > <CABF3X9sjP= > afOgKYXfCc-pE7uNDJEzhMpwGkWsyNBi1oKMKCVw(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > Thanks for the response, Mike. > > I did double check polarity and current ratings and voltage before I > powered up. > > The magic smoke all remained inside!! > > Andrew > > On Fri, Dec 18, 2020 at 11:46 AM Mike Everest <mike(a)duxtel.com> wrote: > > > Hi Andrew! > > > > They are all 24V power supplies, but some have higher power rating - so > > long > > as you substitute one with a higher rating than the one required, it > should > > be all OK ; ) > > > > There is also a slightly different cable (and possibly connector plug) > > configuration between some (as you seem to have discovered) so you also > > need > > to be careful that you get polarity right (we all know what happens when > > you > > reverse the polarity on those power couplings scotty ; ) > > > > Cheers! > > > > Mike. > > > > > -----Original Message----- > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > > Andrew Gilbett > > > Sent: Thursday, 17 December 2020 11:04 PM > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > > > So the evidence seems to be that it has the same mounts but a shorter > > cable on > > > the 1036 and some modifications to the grounding setup. > > > > > > But it works in the 1036 incase any one else gets stuck in a little > jam. > > > > > > On Thu, Dec 17, 2020 at 7:22 PM Andrew Gilbett <andrew(a)gilbett.net> > > wrote: > > > > > > > Hi Brains Trust, > > > > > > > > I have a CCR 1036-12G-4S whose psu has gone on the fritz. From What I > > > > can tell it is a 24V 4A Supply. > > > > > > > > I have a CCR1016-12S-1S+ It appears that there is a minor revision > > > > between the part numbers, as per Duxtel's website. > > > > > > > > WT2400400R3 -CCR1016 > > > > WT2400400-R6 -CCR1036 > > > > > > > > Does anyone know what the differences are and whether I can swap it > > > > out with the 1016 psu as a temp solution.... > > > > > > > > I got the 1036 going again so its back in service so looking under > the > > > > hood is a little risky atm and I have a few minutes to peacefully > come > > > > up with another solution :-) > > > > > > > > Any thoughts would be appreciated. > > > > > > > > Regards > > > > Andrew > > > > > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 3 > Date: Fri, 18 Dec 2020 17:32:43 +1100 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] CCR 1036 PSU > Message-ID: <161b01d6d507$97605ad0$c6211070$(a)duxtel.com> > Content-Type: text/plain; charset="UTF-8" > > ? :-) > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Andrew Gilbett > > Sent: Friday, 18 December 2020 3:53 PM > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > Thanks for the response, Mike. > > > > I did double check polarity and current ratings and voltage before I > powered up. > > > > The magic smoke all remained inside!! > > > > Andrew > > > > On Fri, Dec 18, 2020 at 11:46 AM Mike Everest <mike(a)duxtel.com> wrote: > > > > > Hi Andrew! > > > > > > They are all 24V power supplies, but some have higher power rating - > > > so long as you substitute one with a higher rating than the one > > > required, it should be all OK ; ) > > > > > > There is also a slightly different cable (and possibly connector plug) > > > configuration between some (as you seem to have discovered) so you > > > also need to be careful that you get polarity right (we all know what > > > happens when you reverse the polarity on those power couplings scotty > > > ; ) > > > > > > Cheers! > > > > > > Mike. > > > > > > > -----Original Message----- > > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf > > > > Of Andrew Gilbett > > > > Sent: Thursday, 17 December 2020 11:04 PM > > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > > > > > So the evidence seems to be that it has the same mounts but a > > > > shorter > > > cable on > > > > the 1036 and some modifications to the grounding setup. > > > > > > > > But it works in the 1036 incase any one else gets stuck in a little > jam. > > > > > > > > On Thu, Dec 17, 2020 at 7:22 PM Andrew Gilbett <andrew(a)gilbett.net> > > > wrote: > > > > > > > > > Hi Brains Trust, > > > > > > > > > > I have a CCR 1036-12G-4S whose psu has gone on the fritz. From > > > > > What I can tell it is a 24V 4A Supply. > > > > > > > > > > I have a CCR1016-12S-1S+ It appears that there is a minor revision > > > > > between the part numbers, as per Duxtel's website. > > > > > > > > > > WT2400400R3 -CCR1016 > > > > > WT2400400-R6 -CCR1036 > > > > > > > > > > Does anyone know what the differences are and whether I can swap > > > > > it out with the 1016 psu as a temp solution.... > > > > > > > > > > I got the 1036 going again so its back in service so looking under > > > > > the hood is a little risky atm and I have a few minutes to > > > > > peacefully come up with another solution :-) > > > > > > > > > > Any thoughts would be appreciated. > > > > > > > > > > Regards > > > > > Andrew > > > > > > > > > _______________________________________________ > > > > Public mailing list > > > > Public(a)talk.mikrotik.com.au > > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.co > > > > m.au > > > > > > > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > > > au > > > > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 80, Issue 2 > ************************************* > -- Matt MAC, PC, Smartphone & Multimedia Consulting, Training, Support & Fix-it scream*S*aver "When You Just Want *IT* to Work" mobile 0412 067 226 email matt(a)screamsaver.net

1 0

24VPSU and Injector aution
by Jason Hecker 19 Dec '20

19 Dec '20

Hi For those that don't have enough already, I am auctioning 24V plugpacks and Gigabit injectors. http://www.ebay.com.au/itm/114582795667 <http://www.ebay.com.au/itm/114582795667?ssPageName=STRK:MESELX:IT&_trksid=p…> http://www.ebay.com.au/itm/114582732095 <http://www.ebay.com.au/itm/114582732095?ssPageName=STRK:MESELX:IT&_trksid=p…> I know you're all thinking you really should do that same with your piles. Regards, Jason Hecker

1 0

CCR 1036 PSU
by Andrew Gilbett 18 Dec '20

18 Dec '20

Hi Brains Trust, I have a CCR 1036-12G-4S whose psu has gone on the fritz. From What I can tell it is a 24V 4A Supply. I have a CCR1016-12S-1S+ It appears that there is a minor revision between the part numbers, as per Duxtel's website. WT2400400R3 -CCR1016 WT2400400-R6 -CCR1036 Does anyone know what the differences are and whether I can swap it out with the 1016 psu as a temp solution.... I got the 1036 going again so its back in service so looking under the hood is a little risky atm and I have a few minutes to peacefully come up with another solution :-) Any thoughts would be appreciated. Regards Andrew

2 4

LTE6 and B8 and B28
by Jason Hecker 18 Dec '20

18 Dec '20

Has anyone managed to get any of the LTE6/CAT6 Mikrotik routers working on B8 (900MHz)? I have an LTE6 dish to try out but doesn't do B28 (700Mhz) and all the towers I want to try it in this remote location only have B28 (Optus and Telstra). The Chateau of course does B28 just fine, but it's not in a dish. :) There is one tower in the region with B8 proposed but not yet operational according to RFNSA's site. The LTE6 stuff is a bit strange, they support B17 which is 700MHz (and not used in Australia) as well but can't seem to do B28. I did try the Chateau in another remote location connected to a dual-cable directional roof antenna set up for a Telstra B618 and it Speedtested a stonking 129Mbit at 18km range. It used B3 (20MHz) with CA of B3 (10MHz) and B7 (20MHz) on Optus. Telstra only worked on B28 with 32Mbit tests which is a bit faster than the B618. Regards, Jason Hecker <https://www.upandrunningtech.com.au/>

2 1

G.fast modem demand in AU?
by Mike Everest 27 Oct '20

27 Oct '20

Hi Folks! As many of you will be aware, the Proscend PS180-T SFP module modem seems to offer a serviceable means to add VDSL interface to MikroTik and other devices and reports suggest that performance is acceptable on most cases. Proscend have recently released a G.fast version (PS190-T - https://shop.duxtel.com.pdf/DM-190-T- G.fast-SFP-Modem-051011.pdf) and we are considering whether it is worth going down the tangled path of AU compliance certification for that one too... :-} I understand that NBNCo are in process of roll-out of G.fast in FTTC networks, but there is scant information as to whether they intend to supply the CPE side of the link also... I'm interested to hear any feedback/comments/suggestions on whether you think that there might be any value in bringing the new modem to the AU market? Thanks for any responses! (even criticisms! ;) Cheers, Mike.

4 3

iBGP over OSPF
by Philip Loenneker 22 Oct '20

22 Oct '20

Hi all, I have multiple MikroTik routers connected to non-MikroTik switches with OSPFv2 and v3 enabled on routers and switches (isolated VRF) to distribute loopbacks and interconnect subnets. No other subnets are in the IGP. I can establish iBGP peers between loopbacks and exchange all routes (showing recursive next hop), including default route, but I can't connect to subnets behind other routers. In a traceroute the switches report that there is no valid next hop. This all seems logical, except that all the guides say to do it this way. I've seen some guides say to run MPLS over the top to get reachability, but I don't want to have that, especially since some routers are CHR and have issues with MPLS on some hypervisors. Does anyone have any advice on this? Do I need to have L2 as adjacency between all routers eg with a tunnel over the OSPF loopbacks, or MPLS, or should this work as the guides all suggest? I'm sure I'm missing something obvious... Regards, Philip

3 5