- Public - talk.mikrotik.com.au

LTE modem with B28 support
by Andrew Gilbett 25 Sep '17

25 Sep '17

Hi All, I am wondering what your latest experience is with lte modules in mikrotiks especially devices that support Band28, aka 700MHz? Andrew

2 1

Mikrotik AP range
by Erin Murphy 22 Sep '17

22 Sep '17

Hi all I've started to use Mikrotik on a regular basis on my installs and have found the range on their AP's are far short of some of the other brands I've been using. Have used Unifi, Luxul, Ignitenet etc and now Mikrotik. Have found I need up to 3 WAPACS where I would normally use 1 with another brand. I have regulatory country set in my Capsman controller and tx strength at default. Is this what others have found? The price of Mikrotik still makes it viable but the roaming between 3 AP's as opposed to 1 is a worry. Long time stalker, first time poster. Regards, Erin Murphy CHASE AV t. 0429 336606 e. erin(a)chaseav.com.au w. www.chaseav.com.au a. P.O. Box 933, Narrabeen, NSW, 2101 <http://www.chaseav.com.au>

4 12

smartphones connected to directional antennas
by Andrew Radke 21 Sep '17

21 Sep '17

Hi all, I was wondering if any of you have had any experience, or done any testing, of smartphones connected to APs with directional antennas at multi-km distances. I have an extremely radio quiet rural valley that I’d like to push wireless signal into for VoIP but over distances of 1 - 5km. There would be APs on the range beside it with clear line of sight into the whole valley. To help reduce the issue of the hidden node problem (if any devices can even connect at all) I’d look at putting bandwidth limiting on each connected device of maybe 100-200 Kbps to keep the throughput of each one, and therefore collisions with other transmitting devices, as low as possible. I’d also only allow VoIP traffic through the router or AP to make sure that downloading emails doesn’t ruin their phone calls (or maybe just limit non-VoIP data to a very small fraction of throughput if needed). The VoIP client will mostly take care of jitter and buffering, and almost anything would still be better than than not even having a 3G signal as is the case at the moment. Obviously there are a mountain of gotchas and it depends in this scenario but I’d love to hear from anyone that has tried something similar. Thanks, Andrew

3 3

VLAN support with RB750Gr3
by Chris Herrmann 18 Sep '17

18 Sep '17

Hi all, I've ended up going for the RB850Gx2 with Mike because it has the Atheros8327 switch chipset. This is the same as the RB2011 unit that it's replacing, which means that the switching performance & configuration should be closer and the 850 has faster IPSEC than the 2011. Cheers, Chris

1 0

Dynadish Images
by Paul Julian 15 Sep '17

15 Sep '17

Hi All, just wondering if anybody has an image of a Dynadish installed on a mast somewhere I could use ? We are doing some land access notices and like to include photos of the gear we are installing as part of it but haven't actually installed one of these as yet. Thanks Paul

3 3

VLAN support with RB750Gr3
by Chris Herrmann 12 Sep '17

12 Sep '17

Hi all, Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>? The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets. Anyone using it for this? Thanks! Chris

4 8

LAN support with RB750Gr3
by Chris Herrmann 11 Sep '17

11 Sep '17

Hi all, thanks for the replies. Mike there's a comment from a Mikrotik staff member on this post: https://forum.mikrotik.com/viewtopic.php?t=113724&start=50 and other similar pages. The exact comment on this from MK specifically is: "RB750Gr3 switch chip does not have full VLAN tagging/untagging support yet, it is planned to implement it in future. Currently, you should use RB750Gr3 switch chip only for basic switching." that was in November 2016, so was hoping that maybe things had changed since then. as for whether I'll go a virtual or hardware switch I'm not sure at this point. In general I'd try and use hardware support for things because dedicated ASICs tend to give you better performance than relying up the main CPU to achieve a feature (this isn't a MK specific comment btw, true of any vendors I've come across). So currently I'm using the switch chip vlan not routerOS virtual interface tagging. If I could continue to use it, that would be my preference... but if not does it change the actual config design a lot? I'm guessing once you have the VLAN interface up then all your other rules are still referring to object(x) which just happens to be a virtual interface instead of a switch chip vlan? Or not...? Thanks! Chris

1 0

Re: [MT-AU Public] m2m network design ideas
by Darren Clissold 08 Sep '17

08 Sep '17

Hi Jeremy, Mostly been using this setup for SNMP and remote management of devices, however as a test I've seend Netflix streamed from the US over a SSTP tunnel without any problems. The biggest limitation will be the 3G, as it's dependant on available bandwidth in the area. Darren. On 7/09/2017 4:35 AM, Jeremy Hall wrote: > Thanks, Darren - very useful! > > Any comments or observations on real-world performance of SSTP tunnels > (TCP over TCP) over 3G/LTE connections? > > Cheers > Jeremy > > On Tue, Sep 5, 2017 at 10:10 PM, Darren Clissold <darren(a)duxtel.com > <mailto:darren@duxtel.com>> wrote: > > Remote router connects to VPN router by SSTP, and route a subnet > down the connection for the LAN. > > Remote router dialing in has the advantage in that you can have > more than one gateway (can have a DHCP on a eth and 3G/4G just > adjust distances) and it will connect on either and still have the > same addressing, no need to worry about the remote sites outside > IP either as you never connect to it directly. > Can use the router secrets table or a Radius server for greater > control (extra routes). > > Darren > > > On 27/08/2017 8:33 AM, Jeremy Hall wrote: > > Hi all, > > I have a small project coming up that involves a m2m network > for remote > monitoring and control of distrubuted equipment, and I am > interested in > hearing about the designs and architectures that folks here > may be using > for this type of application. > > The project will involve multiple remote sites, all with > similar or > identical industrial equipment (PLCs, IP cameras etc) and most > likely > connected to a dedicated 3G/4G service via a Mikrotik gateway. The > equipment on the remote sites will need to be accessible over > the network > by a server (to collect data from equipment), a few > individuals (for > maintenance purposes) and by end customers (who should only be > able to > access devices on their own site/s, and not the whole network). > > I have previously implemented a similar project where these > remote sites > (RB912 or similar) would run a VPN client and establish a PPTP > tunnel back > to a head office router (RB1100AH). The connection was over a > 3G service or > where permitting, would be plugged right in to the customer's > own network > (using NAT and DHCP-client) and get internet access. Per a helpful > suggestion from Mike, each remote network had the same subnet, > which > allowed for much simpler 'copy and paste' site setups, and the > router/tunnel was allocated a single static address > (representing a single > site) on the VPN network. DST-NAT rules on the remote router > were used to > gain access to specific equipment on the remote network using > arbitary > ports. > > This worked well enough, but had a couple of disadvantages; > mainly that the > DST-NAT port forwarding could create issues and confusion, but > also that > the whole lot was dependent on the office router/network being > available, > PPTP could not really be claimed to be 'secure' and customers > could not > access their equipment unless we gave their remote site router > a public IP > address and opened up access that way. > > Facing a similar project now, I'm curious about other > implementations and > approaches, and how other folks might have built out solutions > around > similar requirements. > > For instance, I'm currently dreaming of a solution along the > lines of a VPN > server running on a cloud provider, also running a reverse > proxy (nginx) > open to the internet, such that authenticated (?) customers > can create TCP > connections to a device using a hostname like ' > device.site.customer.mycompany.com > <http://device.site.customer.mycompany.com>' or > 'customer.mycompany.com/device > <http://customer.mycompany.com/device>' (via > proxy_pass and url rewrite directives in nginx). Each remote > site has a > small unique subnet (perhaps a /26) so every device is individualy > addressable. Maintenance staff can connect to the VPN server > from wherever > and have access to the full network. > > If anyone has anything to contribute regarding your own set > up, that would > be most helpful! > > Cheers > - Jeremy > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au <mailto:Public@talk.mikrotik.com.au> > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > <http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au> > > > > --- > This email has been checked for viruses by Avast antivirus software. > https://www.avast.com/antivirus <https://www.avast.com/antivirus> > >

1 0

m2m network design ideas
by Jeremy Hall 27 Aug '17

27 Aug '17

Hi all, I have a small project coming up that involves a m2m network for remote monitoring and control of distrubuted equipment, and I am interested in hearing about the designs and architectures that folks here may be using for this type of application. The project will involve multiple remote sites, all with similar or identical industrial equipment (PLCs, IP cameras etc) and most likely connected to a dedicated 3G/4G service via a Mikrotik gateway. The equipment on the remote sites will need to be accessible over the network by a server (to collect data from equipment), a few individuals (for maintenance purposes) and by end customers (who should only be able to access devices on their own site/s, and not the whole network). I have previously implemented a similar project where these remote sites (RB912 or similar) would run a VPN client and establish a PPTP tunnel back to a head office router (RB1100AH). The connection was over a 3G service or where permitting, would be plugged right in to the customer's own network (using NAT and DHCP-client) and get internet access. Per a helpful suggestion from Mike, each remote network had the same subnet, which allowed for much simpler 'copy and paste' site setups, and the router/tunnel was allocated a single static address (representing a single site) on the VPN network. DST-NAT rules on the remote router were used to gain access to specific equipment on the remote network using arbitary ports. This worked well enough, but had a couple of disadvantages; mainly that the DST-NAT port forwarding could create issues and confusion, but also that the whole lot was dependent on the office router/network being available, PPTP could not really be claimed to be 'secure' and customers could not access their equipment unless we gave their remote site router a public IP address and opened up access that way. Facing a similar project now, I'm curious about other implementations and approaches, and how other folks might have built out solutions around similar requirements. For instance, I'm currently dreaming of a solution along the lines of a VPN server running on a cloud provider, also running a reverse proxy (nginx) open to the internet, such that authenticated (?) customers can create TCP connections to a device using a hostname like ' device.site.customer.mycompany.com' or 'customer.mycompany.com/device' (via proxy_pass and url rewrite directives in nginx). Each remote site has a small unique subnet (perhaps a /26) so every device is individualy addressable. Maintenance staff can connect to the VPN server from wherever and have access to the full network. If anyone has anything to contribute regarding your own set up, that would be most helpful! Cheers - Jeremy

3 2

Mikrotik Reboots
by Paul Julian 24 Aug '17

24 Aug '17

HI all, has anybody else seen a sharp increase in MT devices just rebooting for no reason of late ? In the past month or so we must have had about 10-15 reboots for no reason. We have seen a mix of OS versions doing it, even ones with the latest bugfix version on them. CCR's, RB1100AHx2's, Grooves, QRT's, Omnitiks, they just seem to be rebooting out of the blue, it's really strange. We run a lot of MT gear and we are seriously seeing a couple a week just reboot for no reason and I am getting a bit concerned about it. They are all rebooting due to watchdog failure, just the default OS one. I'm interested to see if anybody else is experiencing the same. Regards Paul

4 7