- Public - talk.mikrotik.com.au

ccr1072 power supply
by Alex Samad 20 Jul '18

20 Jul '18

Hi Is there any way from the command line to detect the health of the power supplies ? I looked at /system health but couldn't find anything related to health of each power supply A

2 2

Mikrotik 60Ghz Gear
by Paul Julian 20 Jul '18

20 Jul '18

Hi, according to Duxtel some 60Ghz kit has already flown out the door, who is using it and what's it like ? I am looking for some real world experience on the new LHG 60 Ghz gear. What is it like in the real world ? What distance are you comfortably seeing from it ? What about colocation on the same mast ? Thanks Paul

2 2

Maxxwave Rack Mount Adapter
by Russell Hurren 18 Jul '18

18 Jul '18

Does anyone know where I could get a rackmount adapter for a hex-s like this one or similar? https://www.balticnetworks.com/mikrotik-rackmount-adapter-for-routerboard-2… Shipping from the US is several times more expensive than the adapter itself. Wouldn't mind buying 2-3 so I've got some spares on hand, but I only need one at the moment. Regards Russell Hurren

3 2

Mikrotik My Account login issues
by Philip Loenneker 03 Jul '18

03 Jul '18

Hi all, I know this is probably more suited to the Mikrotik forums or support email, but was hoping someone on here might be able to confirm if it's an issue. I seem to be unable to log in to https://mikrotik.com/client/ When I try, it goes to https://mikrotik.com/client/login which has the "recover login name and password" section added to the bottom. I need to get in to check on some CHR licenses. Can someone else please confirm if they can or can't get into the My Account section of the Mikrotik site? Cheers. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

2 4

Mini PCIe 3G/4G
by Dave Browning 26 Jun '18

26 Jun '18

Hi All, What 3G/4G cards are people having the best luck with in RouterOS devices? Our go to DUXCEL isn’t a thing anymore as Sierra discontinued the MC7304 I’m told. Dave Browning | Network Engineer P 1300 791 678 Level 1, 12 Railway Tce, Milton QLD 4064

1 0

LTE B28
by Jason Hecker (Up & Running Tech) 18 Jun '18

18 Jun '18

I just got the newsletter. Will any of the LTE units Duxtel are certifying support B28 (700MHz)? -- <https://www.upandrunningtech.com.au>

4 4

CAPsMAN & Channels
by Dave Browning 14 Jun '18

14 Jun '18

Hi All, Has anyone had luck with setting channels in a CAPsMAN config? Whenever I try to set channels, regardless of it be 2 or 5 ghz, all cAP's report "No supported channel" - The location in the configuration is set to Australia and from what I'm reading the frequencies and width's I'm trying to set are all within AU spec. For reference, this particular deployment is CCR CAPsMAN and 30 odd RBwAPG-5HacT2HnD cAP's all running the latest release channel Cheers, Dave Browning | Network Engineer P 1300 791 678 Level 1, 12 Railway Tce, Milton QLD 4064

2 1

DNS Resolution Case Response
by Dave Browning 11 May '18

11 May '18

Hi All, Anyone else see this from their Ripe’s when using a Mikrotik as DNS? -------------------- DNS Resolver Mangles Case What does this mean? RFC 1034, which defines DNS, states in Section 3.1 that the letter case of a query (i.e. whether the domain name is spelled in upper case, lower case or a mix of the two) should be preserved. In 2008, a technique to improve the security of DNS was proposed that makes use of this feature. In this technique, each letter in a DNS query is randomly set to upper or lower case. When the reply arrives, the letter case is checked to see whether it corresponds to the query. This prevents an attacker from blindly spoofing replies. This technique never became very popular, but did make it into the DNS stub resolver in the libevent library, which is used by the RIPE Atlas measurement code. Unfortunately, some DNS resolvers do not preserve the letter case of queries. Typically, it is the home router that is at fault. Common DNS resolver software, such as BIND and Unbound, cause no problems. A RIPE Atlas probe that is configured to use a resolver that does not preserve the letter case of the query causes measurements that rely on looking at the target of the measurement in DNS to fail. Measurements that target IPv4 or IPv6 literals are unaffected. How can I fix this? You could try to use a different DNS resolver (if you're in charge of the configuration), or use a different type of (home) router. -------------------- Can confirm the DNS implementation on Mikro doesn’t appear to adhere to section 3.1 of RFC 1034; Resolving against a Mikrotik dig sEnTrIaN.CoM.AU @192.168.1.1 +noall +answer ; <<>> DiG 9.10.6-P1 <<>> sEnTrIaN.CoM.AU @192.168.1.1 +noall +answer ;; global options: +cmd sentrian.com.au<http://sentrian.com.au>. 3600 IN A 52.64.78.207 Resolving against non Mikrotik dig sEnTrIaN.CoM.AU @1.1.1.1 +noall +answer ; <<>> DiG 9.10.6-P1 <<>> sEnTrIaN.CoM.AU @1.1.1.1 +noall +answer ;; global options: +cmd sEnTrIaN.CoM.AU. 3590 IN A 52.64.78.207 Doesn’t really cause issues, just interesting the implementation. Cheers, Dave Browning | Network Engineer P 1300 791 678 Level 1, 12 Railway Tce, Milton QLD 4064

1 0

[BYPASS} Potential external Winbox vulnerability
by Timothy Neilen 23 Apr '18

23 Apr '18

A colleague passed this one to me from the Mikrotik forums (https://forum.mikrotik.com/viewtopic.php?f=2&t=133438) Might be an idea to block access to 20, 80, 8291 externally unless from trusted sources if you don't already. TN Regards,Timothy Neilen - Systems Engineer | +61 7 3123 7929Answers IT | 6/192 Evans RoadPh +61 7 3123 7929 | www.answersit.com.au

10 11

BGP & Routing Tables
by Shane Clay 20 Apr '18

20 Apr '18

Hi All I’m curious as to how many people are using Mikrotik devices as border routers? We’re using three CCR1072’s at three different datacentres. The problem (as you can probably guess) is the BGP implementation. We’re taking partial routes from peers (IX’s, local networks we work with, our own downstream IaaS platforms, etc). Currently we’re taking around 250k routes in each routers. They are already struggling. Given we don’t take full tables and we have default routes at each site, convergence isn’t necessarily a huge problem (although it is slow). But, things like “routing bgp advertisements print where peer=”ABC”” being used as part of diagnostics are taking over a minute to run and becoming a problem. How many others are actually using these devices in these sorts of scenarios? I’m beginning to think that once you reach this point, these things need to tossed aside for the real hardware which can cope in the real world… Thoughts? Shane

3 2