- Public - talk.mikrotik.com.au

Re: [MT-AU Public] Public Digest, Vol 80, Issue 5
by Matt Hall 22 Dec '20

22 Dec '20

Perhaps try winbox> terminal then: /system reset-configuration no-defaults=yes and start from scratch. You can copy and paste sections of your config to make the rebuild faster if it helps. For example, prior to wiping the box: /ip firewall export will give you your complete firewall config On 22 Dec 2020, at 12:00, public-request(a)talk.mikrotik.com.au wrote: Send Public mailing list submissions to public(a)talk.mikrotik.com.au To subscribe or unsubscribe via the World Wide Web, visit http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au or, via email, send a message with subject or body 'help' to public-request(a)talk.mikrotik.com.au You can reach the person managing the list at public-owner(a)talk.mikrotik.com.au When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..." Today's Topics: 1. Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. (Jim Woodward) 2. Re: Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. (Andrew Oakeley) ---------------------------------------------------------------------- Message: 1 Date: Tue, 22 Dec 2020 11:17:50 +1100 From: "Jim Woodward" <jim(a)alwaysnever.net> To: <public(a)talk.mikrotik.com.au> Subject: [MT-AU Public] Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. Message-ID: <001c01d6d7f7$e2a95350$a7fbf9f0$(a)alwaysnever.net> Content-Type: text/plain; charset="US-ASCII" Hi All, Long time listener, first time caller. I have a weird issue, I had a RB2011 some time ago which has two switch chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 and aside from resetting MAC addresses and changing the WAN uplink port there was very little else to alter (they were both running the same RouterOS at the time) However, there is some remnants of the RB2011 that I can't seem to clear which is the Fast Ethernet switch config (switch2) it shows up as follows: [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 MediaTek-MT7621 none none 1 I switch2 (unknown) none none [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print Flags: I - invalid # NAME SWITCH VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID 0 E2 switch1 disabled auto 1 E3 switch1 disabled auto 2 E4 switch1 disabled auto 3 E5 switch1 disabled auto 4 I E6 switch2 5 I E7 switch2 6 I E8 switch2 7 I E9 switch2 8 I E10 switch2 9 E1 switch1 fallback 1 10 switch1-cpu switch1 disabled auto 11 I switch2-cpu switch2 [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> There doesn't seem to be a way to remove this from WinBox and I cant seem to find an easy way to clear it from the command line, does anyone have any hints? Would I need to do a different kind of export and re-import? Kind Regards, Jim. ------------------------------ Message: 2 Date: Tue, 22 Dec 2020 00:53:06 +0000 From: Andrew Oakeley <andrew(a)oakeley.com.au> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config. Message-ID: <162C13E6-BA05-40DB-9B17-0090DBBDADFE(a)oakeley.com.au> Content-Type: text/plain; charset="utf-8" Hi, Did you restore a config? OP Did you restore a backup? Restoring a backup between devices is not supported. Andy Sent from my iPhone > On 22 Dec 2020, at 08:20, Jim Woodward <jim(a)alwaysnever.net> wrote: > > ?Hi All, > > > > Long time listener, first time caller. > > > > I have a weird issue, I had a RB2011 some time ago which has two switch > chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 > and aside from resetting MAC addresses and changing the WAN uplink port > there was very little else to alter (they were both running the same > RouterOS at the time) > > > > However, there is some remnants of the RB2011 that I can't seem to clear > which is the Fast Ethernet switch config (switch2) it shows up as follows: > > > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print > > Flags: I - invalid > > # NAME TYPE MIRROR-SOURCE > MIRROR-TARGET SWITCH-ALL-PORTS > > 0 switch1 MediaTek-MT7621 none none > > 1 I switch2 (unknown) none none > > > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print > > Flags: I - invalid > > # NAME SWITCH > VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID > > 0 E2 switch1 > disabled auto > > 1 E3 switch1 > disabled auto > > 2 E4 switch1 > disabled auto > > 3 E5 switch1 > disabled auto > > 4 I E6 switch2 > > 5 I E7 switch2 > > 6 I E8 switch2 > > 7 I E9 switch2 > > 8 I E10 switch2 > > 9 E1 switch1 > fallback 1 > > 10 switch1-cpu switch1 > disabled auto > > 11 I switch2-cpu switch2 > > [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> > > > > > > > > There doesn't seem to be a way to remove this from WinBox and I cant seem to > find an easy way to clear it from the command line, does anyone have any > hints? Would I need to do a different kind of export and re-import? > > > > > > > > Kind Regards, > > Jim. > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ Subject: Digest Footer _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ End of Public Digest, Vol 80, Issue 5 *************************************

1 0

Restored a RB2011 config to a RB750Gr3 and have a zombie switch left in the config.
by Jim Woodward 22 Dec '20

22 Dec '20

Hi All, Long time listener, first time caller. I have a weird issue, I had a RB2011 some time ago which has two switch chips, 5 port Gigiabit and 5 Port Fast Ethernet. I restored it to a RB750Gr3 and aside from resetting MAC addresses and changing the WAN uplink port there was very little else to alter (they were both running the same RouterOS at the time) However, there is some remnants of the RB2011 that I can't seem to clear which is the Fast Ethernet switch config (switch2) it shows up as follows: [jim@aruma-RB750Gr3-gw] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 MediaTek-MT7621 none none 1 I switch2 (unknown) none none [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> print Flags: I - invalid # NAME SWITCH VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID 0 E2 switch1 disabled auto 1 E3 switch1 disabled auto 2 E4 switch1 disabled auto 3 E5 switch1 disabled auto 4 I E6 switch2 5 I E7 switch2 6 I E8 switch2 7 I E9 switch2 8 I E10 switch2 9 E1 switch1 fallback 1 10 switch1-cpu switch1 disabled auto 11 I switch2-cpu switch2 [jim@aruma-RB750Gr3-gw] /interface ethernet switch port> There doesn't seem to be a way to remove this from WinBox and I cant seem to find an easy way to clear it from the command line, does anyone have any hints? Would I need to do a different kind of export and re-import? Kind Regards, Jim.

3 4

Re: [MT-AU Public] Public Digest, Vol 80, Issue 2
by Matt Hall 20 Dec '20

20 Dec '20

Roger, If you want to play around and do some “lab” experiments you might want to try an EC-25 modem in your lte mikrotik unit instead. Be aware that whilst the EC-25 and your desired Mikrotik LTE unit are licensed for use independently when combined they are not. I’ve mucked around a little with this so if you want some info feel free to get in touch. You’ll need to communicate directly with the modem via the at chat protocol to lock it to band 28. You can do that via the command line within one box or via ssh. Matt On Sat, 19 Dec 2020 at 12:00, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: LTE6 and B8 and B28 (Roger Plant) > 2. Re: CCR 1036 PSU (Andrew Gilbett) > 3. Re: CCR 1036 PSU (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 18 Dec 2020 13:03:10 +1100 > From: "Roger Plant" <rplant(a)melbpc.org.au> > To: public(a)talk.mikrotik.com.au > Subject: Re: [MT-AU Public] LTE6 and B8 and B28 > Message-ID: <5FDC0DDE.4296.DC7E4(a)rplant.melbpc.org.au> > Content-Type: text/plain; charset=US-ASCII > > Hi, > > I did look at it, but in addition to the lte6 not supporting B28, from > memory the gain of the dish at 700MHz is > less than 0db. > > The RFI LTE-XPol-002-5g (And its Poynting twin) Antenna seems good, but > pricey. > And you then have to find something to plug into it. > > Regards > Roger > > > Date sent: Fri, 18 Dec 2020 11:46:03 +1100 > From: "Jason Hecker" <jason(a)upandrunningtech.com.au> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] LTE6 and B8 and B28 > Send reply to: MikroTik Australia Public List < > public(a)talk.mikrotik.com.au> > > [ Double-click this line for list subscription options ] > > Has anyone managed to get any of the LTE6/CAT6 Mikrotik routers > working on B8 (900MHz)? > > I have an LTE6 dish to try out but doesn't do B28 (700Mhz) and all the > towers I want to try it in this remote location only have B28 (Optus > and Telstra). The Chateau of course does B28 just fine, but it's not > in a dish. :) There is one tower in the region with B8 proposed but > not yet operational according to RFNSA's site. > > The LTE6 stuff is a bit strange, they support B17 which is 700MHz (and > not used in Australia) as well but can't seem to do B28. > > I did try the Chateau in another remote location connected to a > dual-cable directional roof antenna set up for a Telstra B618 and it > Speedtested a stonking 129Mbit at 18km range. It used B3 (20MHz) with > CA of B3 (10MHz) and B7 (20MHz) on Optus. Telstra only worked on B28 > with 32Mbit tests which is a bit faster than the B618. > > Regards, > Jason Hecker > <https://www.upandrunningtech.com.au/> > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au---------------------------- > Roger Plant > > > > > > ------------------------------ > > Message: 2 > Date: Fri, 18 Dec 2020 15:53:11 +1100 > From: Andrew Gilbett <andrew(a)gilbett.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] CCR 1036 PSU > Message-ID: > <CABF3X9sjP= > afOgKYXfCc-pE7uNDJEzhMpwGkWsyNBi1oKMKCVw(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > Thanks for the response, Mike. > > I did double check polarity and current ratings and voltage before I > powered up. > > The magic smoke all remained inside!! > > Andrew > > On Fri, Dec 18, 2020 at 11:46 AM Mike Everest <mike(a)duxtel.com> wrote: > > > Hi Andrew! > > > > They are all 24V power supplies, but some have higher power rating - so > > long > > as you substitute one with a higher rating than the one required, it > should > > be all OK ; ) > > > > There is also a slightly different cable (and possibly connector plug) > > configuration between some (as you seem to have discovered) so you also > > need > > to be careful that you get polarity right (we all know what happens when > > you > > reverse the polarity on those power couplings scotty ; ) > > > > Cheers! > > > > Mike. > > > > > -----Original Message----- > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > > Andrew Gilbett > > > Sent: Thursday, 17 December 2020 11:04 PM > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > > > So the evidence seems to be that it has the same mounts but a shorter > > cable on > > > the 1036 and some modifications to the grounding setup. > > > > > > But it works in the 1036 incase any one else gets stuck in a little > jam. > > > > > > On Thu, Dec 17, 2020 at 7:22 PM Andrew Gilbett <andrew(a)gilbett.net> > > wrote: > > > > > > > Hi Brains Trust, > > > > > > > > I have a CCR 1036-12G-4S whose psu has gone on the fritz. From What I > > > > can tell it is a 24V 4A Supply. > > > > > > > > I have a CCR1016-12S-1S+ It appears that there is a minor revision > > > > between the part numbers, as per Duxtel's website. > > > > > > > > WT2400400R3 -CCR1016 > > > > WT2400400-R6 -CCR1036 > > > > > > > > Does anyone know what the differences are and whether I can swap it > > > > out with the 1016 psu as a temp solution.... > > > > > > > > I got the 1036 going again so its back in service so looking under > the > > > > hood is a little risky atm and I have a few minutes to peacefully > come > > > > up with another solution :-) > > > > > > > > Any thoughts would be appreciated. > > > > > > > > Regards > > > > Andrew > > > > > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 3 > Date: Fri, 18 Dec 2020 17:32:43 +1100 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] CCR 1036 PSU > Message-ID: <161b01d6d507$97605ad0$c6211070$(a)duxtel.com> > Content-Type: text/plain; charset="UTF-8" > > ? :-) > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Andrew Gilbett > > Sent: Friday, 18 December 2020 3:53 PM > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > Thanks for the response, Mike. > > > > I did double check polarity and current ratings and voltage before I > powered up. > > > > The magic smoke all remained inside!! > > > > Andrew > > > > On Fri, Dec 18, 2020 at 11:46 AM Mike Everest <mike(a)duxtel.com> wrote: > > > > > Hi Andrew! > > > > > > They are all 24V power supplies, but some have higher power rating - > > > so long as you substitute one with a higher rating than the one > > > required, it should be all OK ; ) > > > > > > There is also a slightly different cable (and possibly connector plug) > > > configuration between some (as you seem to have discovered) so you > > > also need to be careful that you get polarity right (we all know what > > > happens when you reverse the polarity on those power couplings scotty > > > ; ) > > > > > > Cheers! > > > > > > Mike. > > > > > > > -----Original Message----- > > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf > > > > Of Andrew Gilbett > > > > Sent: Thursday, 17 December 2020 11:04 PM > > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > > Subject: Re: [MT-AU Public] CCR 1036 PSU > > > > > > > > So the evidence seems to be that it has the same mounts but a > > > > shorter > > > cable on > > > > the 1036 and some modifications to the grounding setup. > > > > > > > > But it works in the 1036 incase any one else gets stuck in a little > jam. > > > > > > > > On Thu, Dec 17, 2020 at 7:22 PM Andrew Gilbett <andrew(a)gilbett.net> > > > wrote: > > > > > > > > > Hi Brains Trust, > > > > > > > > > > I have a CCR 1036-12G-4S whose psu has gone on the fritz. From > > > > > What I can tell it is a 24V 4A Supply. > > > > > > > > > > I have a CCR1016-12S-1S+ It appears that there is a minor revision > > > > > between the part numbers, as per Duxtel's website. > > > > > > > > > > WT2400400R3 -CCR1016 > > > > > WT2400400-R6 -CCR1036 > > > > > > > > > > Does anyone know what the differences are and whether I can swap > > > > > it out with the 1016 psu as a temp solution.... > > > > > > > > > > I got the 1036 going again so its back in service so looking under > > > > > the hood is a little risky atm and I have a few minutes to > > > > > peacefully come up with another solution :-) > > > > > > > > > > Any thoughts would be appreciated. > > > > > > > > > > Regards > > > > > Andrew > > > > > > > > > _______________________________________________ > > > > Public mailing list > > > > Public(a)talk.mikrotik.com.au > > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.co > > > > m.au > > > > > > > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > > > au > > > > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 80, Issue 2 > ************************************* > -- Matt MAC, PC, Smartphone & Multimedia Consulting, Training, Support & Fix-it scream*S*aver "When You Just Want *IT* to Work" mobile 0412 067 226 email matt(a)screamsaver.net

1 0

24VPSU and Injector aution
by Jason Hecker 19 Dec '20

19 Dec '20

Hi For those that don't have enough already, I am auctioning 24V plugpacks and Gigabit injectors. http://www.ebay.com.au/itm/114582795667 <http://www.ebay.com.au/itm/114582795667?ssPageName=STRK:MESELX:IT&_trksid=p…> http://www.ebay.com.au/itm/114582732095 <http://www.ebay.com.au/itm/114582732095?ssPageName=STRK:MESELX:IT&_trksid=p…> I know you're all thinking you really should do that same with your piles. Regards, Jason Hecker

1 0

CCR 1036 PSU
by Andrew Gilbett 18 Dec '20

18 Dec '20

Hi Brains Trust, I have a CCR 1036-12G-4S whose psu has gone on the fritz. From What I can tell it is a 24V 4A Supply. I have a CCR1016-12S-1S+ It appears that there is a minor revision between the part numbers, as per Duxtel's website. WT2400400R3 -CCR1016 WT2400400-R6 -CCR1036 Does anyone know what the differences are and whether I can swap it out with the 1016 psu as a temp solution.... I got the 1036 going again so its back in service so looking under the hood is a little risky atm and I have a few minutes to peacefully come up with another solution :-) Any thoughts would be appreciated. Regards Andrew

2 4

LTE6 and B8 and B28
by Jason Hecker 18 Dec '20

18 Dec '20

Has anyone managed to get any of the LTE6/CAT6 Mikrotik routers working on B8 (900MHz)? I have an LTE6 dish to try out but doesn't do B28 (700Mhz) and all the towers I want to try it in this remote location only have B28 (Optus and Telstra). The Chateau of course does B28 just fine, but it's not in a dish. :) There is one tower in the region with B8 proposed but not yet operational according to RFNSA's site. The LTE6 stuff is a bit strange, they support B17 which is 700MHz (and not used in Australia) as well but can't seem to do B28. I did try the Chateau in another remote location connected to a dual-cable directional roof antenna set up for a Telstra B618 and it Speedtested a stonking 129Mbit at 18km range. It used B3 (20MHz) with CA of B3 (10MHz) and B7 (20MHz) on Optus. Telstra only worked on B28 with 32Mbit tests which is a bit faster than the B618. Regards, Jason Hecker <https://www.upandrunningtech.com.au/>

2 1

G.fast modem demand in AU?
by Mike Everest 27 Oct '20

27 Oct '20

Hi Folks! As many of you will be aware, the Proscend PS180-T SFP module modem seems to offer a serviceable means to add VDSL interface to MikroTik and other devices and reports suggest that performance is acceptable on most cases. Proscend have recently released a G.fast version (PS190-T - https://shop.duxtel.com.pdf/DM-190-T- G.fast-SFP-Modem-051011.pdf) and we are considering whether it is worth going down the tangled path of AU compliance certification for that one too... :-} I understand that NBNCo are in process of roll-out of G.fast in FTTC networks, but there is scant information as to whether they intend to supply the CPE side of the link also... I'm interested to hear any feedback/comments/suggestions on whether you think that there might be any value in bringing the new modem to the AU market? Thanks for any responses! (even criticisms! ;) Cheers, Mike.

4 3

iBGP over OSPF
by Philip Loenneker 23 Oct '20

23 Oct '20

Hi all, I have multiple MikroTik routers connected to non-MikroTik switches with OSPFv2 and v3 enabled on routers and switches (isolated VRF) to distribute loopbacks and interconnect subnets. No other subnets are in the IGP. I can establish iBGP peers between loopbacks and exchange all routes (showing recursive next hop), including default route, but I can't connect to subnets behind other routers. In a traceroute the switches report that there is no valid next hop. This all seems logical, except that all the guides say to do it this way. I've seen some guides say to run MPLS over the top to get reachability, but I don't want to have that, especially since some routers are CHR and have issues with MPLS on some hypervisors. Does anyone have any advice on this? Do I need to have L2 as adjacency between all routers eg with a tunnel over the OSPF loopbacks, or MPLS, or should this work as the guides all suggest? I'm sure I'm missing something obvious... Regards, Philip

3 5

Re: [MT-AU Public] [OFF-TOPIC] Reverse question
by Karl Auer 17 Oct '20

17 Oct '20

On Sat, 2020-10-17 at 11:35 +1100, Stephen Schwetz wrote: > You can definately place the Telstra router behind a mikrotiks. If > you are lucky they will have an area if they have more then 2 lines. > You can request to have the lines on the router moved to the ata and > then you don't have to worry about it anymore > I'm sorry, I understood literally none of that. Why would I put the Telstra router *behind* a Mikrotik? What "area" do you mean? What are "the lines on the router". What is an "ata"? I've decided not to bother with Telstra routers any more. They will be discarded and replaced with devices that behave rationally and predictably. In my work with these Telstra routers I've also found them to be amazingly slow to boot, with absolutely hopeless (and extremely limited) user interfaces. In the particular case at hand, the client has decided not to bother with a VPN at all, and instead move their entire dataset to Dropbox! Not my idea :-) Thank you to all those who helped, I certainly learned a lot. And the upshot basically has been to drive me further into the arms of Mikrotik :-) Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254 Old fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556

1 0

[OFF-TOPIC] Reverse question
by Karl Auer 17 Oct '20

17 Oct '20

This is not really a Mikrotik question, but the people here have lots of experience with routers generally so I will ask anyway... I (of course) use a Mikrotik router at home. I also have a Synology NAS at home, which supports an LT2P/IPsec VPN (with PSK). I have forwarded UDP ports 1701, 500 and 4500 through the Mikrotik, and connections from outside work flawlessly. When I configure another Synology, this one at a client site, the exact same way, the port forwarding through the Telstra-supplied router just doesn't work. I have disabled the in-router VPN. The client says that the L2TP negotiation failed. Now here's the thing: Connecting to the VPN from inside the network works fine. So L2TP, IKE, IPsec-NAT-T, the pre-shared key and the NAS user credentials are all demonstrably correct. Attempt from outside the network and - nope. Not sure of the model of Telstra router (it's the black-faced vertical one with the big blue-lit button at top). Anyway, I have a couple of other Telstra routers, one a Netgear DEVG2020, on a Technicolor TG799vac. and as far as I can tell they don't work either! Is this a Telstra thing - don't let VPNs through? Is there a trick to it? Short of replacing the things with Mikrotiks, which I am seriously considering recommending... Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254 Old fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556

6 11