- Public - talk.mikrotik.com.au

Best tutorial on VPN access for Windows?
by Karl Auer 03 Sep '18

03 Sep '18

I've always used SSH tunnelling to get access to stuff behind MikroTiks, but a client has just asked for VPN access from his Windows box at home to a network behind a MikroTik. Can anyone point me to a good tutorial or doco on making that happen? A lot of the stuff out there seems to just be PPTP, which doesn't seem very secure. And a lot of it seems old. I'm not a Windows guy, but I am hoping that there is a way to set this up on the MikroTik so that a Windows VPN can be set up out of the box. Yours hopefully, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D Old fingerprint: 58F8 09D4 97E4 D74A 0940 44BC 8D6D C28C 3BC9 B0CB

4 10

Mikrotik IPSEC VPN Tutorial - shared.pdf
by Ben Jackson (via Google Drive) 03 Sep '18

03 Sep '18

I've shared an item with you: Mikrotik IPSEC VPN Tutorial - shared.pdf http://drive.google.com/file/d/1OfgxfL2i_rQjxsMpX7EAKXJBylUnXtQF/view?usp=s… It's not an attachment -- it's stored online. To open this item, just click the link above.

1 0

Holy snapping RB4011!
by Jason Hecker (Up & Running Tech) 31 Aug '18

31 Aug '18

Wow! https://files.i4wifi.cz/inc/_doc/attach/StoItem/7150/en_datasheet_RB4011iGS… Mike, when will this be approved and for sale? :) -- <https://www.upandrunningtech.com.au>

3 4

Fwd: xDSL SFPs
by Jason Hecker (Up & Running Tech) 27 Aug '18

27 Aug '18

That's flat out wrong. Have a look at the PDF on http://www.acma.gov.au/ Industry/Suppliers/Regulatory-arrangements/EMC- Electromagnetic-compatibility/emc-standards-list and see page 5. All IT equipment - no exceptions - must be tested (by an approved tester) to and comply with CISPR-32 and get a C-Tick for use in Australia. Upshot is don't import and use or sell the SPF modules unless the supplier has ensure it's complied. Duxtel know all about this - they supply all their Mikrotik gear (including boring old routers with no Wifi) with pretty little compliance stickers. On 9 August 2017 at 17:05, Paul Julian <paul(a)oxygennetworks.com.au> wrote: > Agreed, the VC-231's are Tick approved, PSU and Bridge, we use a lot of > them when deployed as a NTU for a VDSL2 DSLAM Implementation or as a point > to point VDSL2 link. > > C tick or A tick approval is only required when connecting > telecommunication devices to public communication networks, C tick or A > tick approval is required for radio communications devices, so if it's a > telecommunications device connected to a private wire you don't need > approval, if it's a radio communications device you need approval no matter > what. > > The ACMA make it pretty clear on their website if you aren't sure. > > http://www.acma.gov.au/theACMA/bringing-communications- > equipment-into-australia > > Regards > paul > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Jason Hecker (Up & Running Tech) > Sent: Wednesday, 9 August 2017 4:52 PM > To: MikroTik Australia Public List > Subject: Re: [MT-AU Public] xDSL SFPs > > That's partly true. As it's an active device it still needs C-Tick > approval for electromagnetic compatibility and susceptibility reasons. > There are likely even considerations for electrical isolation as it can > connect two sites on different AC phases and potentials. Considering it's > pumping HF energy into a long wire it's like a radio transmitter anyway so > it definitely needs to comply. > > On 9 August 2017 at 16:45, Paul Julian <paul(a)oxygennetworks.com.au> wrote: > > > If it's a private CAT3 cable there are no approvals required as it's > > just a private link. > > > > We use the Planet VC-231 bridges for that sort of thing, they are > > pretty good and will do 100/100 over a couple of hundred metres with > good cable. > > > > Regards > > Paul > > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Jason Hecker (Up & Running Tech) > > Sent: Wednesday, 9 August 2017 4:41 PM > > To: MikroTik Australia Public List > > Subject: Re: [MT-AU Public] xDSL SFPs > > > > Yes the belt and braces and correct way is to find a version that > > someone has had approved for use in Australia. I don't think anyone > > has done that yet! It'd be nice if the manufacturer did the legwork > > but they only do FCC and CE. > > > > On 9 August 2017 at 16:33, Russell Hurren > > <russell(a)zeropointnetworks.com> > > wrote: > > > > > I've just had a client call me and ask for a WiFi repeater to go in > > > the house next to their motel. There's already CAT3 running between > > > the buildings, so something like that would be a good option for me. > > > I'd be willing to order a pair and give it a try, but I'm not sure > > > about the legality - I presume it'd need an A-Tick approval? > > > > > > I've got a CRS125 in the main building and I could put a hAP ac in > > > the house and it'd be a nice clean option, compared to using > > > something like a Planet VC-231. > > > > > > -----Original Message----- > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf > > > Of Jason Hecker (Up & Running Tech) > > > Sent: Wednesday, 26 July 2017 8:37 > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > Subject: Re: [MT-AU Public] xDSL SFPs > > > > > > That said, the http://www.proscend.com/en-gb/product/sfp/180cr.html > > > looks interesting for linking buildings that have old CAT3 cabling > > > in between. I reckon I could have used that sort of thing in a few > > > places instead of wireless. Has anyone tried these sort of VDSL2 > > bridges? > > > > > > On 26 July 2017 at 10:20, Philip Loenneker <Philip.Loenneker@tasmanet. > > > com.au > > > > wrote: > > > > > > > If anyone would care to donate a unit, I have a service I can test > > > > it > > on. > > > > And as an RSP, we have direct access to the NBN portal to request > > > > reactivation if it gets blocked :) > > > > > > > > -----Original Message----- > > > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On > > > > Behalf Of Jason Hecker (Up & Running Tech) > > > > Sent: Wednesday, 26 July 2017 10:17 AM > > > > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > > > > Subject: Re: [MT-AU Public] xDSL SFPs > > > > > > > > I think we're all pretty excited about the prospects of those > > > > VDSL2 and G.Fast SFP modules (I am getting FTTC so G.Fast is > > > > probably on the cards one day). I guess you can be the guinea pig > > > > and be the one to risk explaining to your ISP why your port should > be unlocked. > > > > ;) > > > > > > > > On 26 July 2017 at 10:09, Damien Gardner Jnr <rendrag(a)rendrag.net> > > > wrote: > > > > > > > > > If you plug in a modem which does not support G.vector, the port > > > > > will get shut down within ~10 minutes, and requires a support > > > > > request from your > > > > RSP > > > > > to NBNco to have the port re-enabled. They don't specifically > > > > > detect > > > > modem > > > > > model and shut down if they don't know the model though, as far > > > > > as I > > > > know. > > > > > > > > > > IPOE on ADSL is an interesting one, that'd make setup very easy! > > > > > > > > > > On 26 July 2017 at 10:05, Jason Hecker (Up & Running Tech) < > > > > > jason(a)upandrunningtech.com.au> wrote: > > > > > > > > > >> Be careful, I remember reading that modems not tested and > > > > >> authorised for NBN use can cause the port to be locked. Until > > > > >> someone goes to the expense of having them tested and approved > > > > >> for use in Australia (cough .. Mike?) you may not get much joy. > > > > >> They might work on a bog standard ADSL line. > > > > >> > > > > >> Speaking of which, I might be late to the party but I noticed > > > > >> that > > > > Telstra > > > > >> ADSL now supports IPoE as well as PPPoE/A. I reset an old > > > > >> cheapie/dodgy TPLink modem the other day for someone and > > > > >> without doing anything the PC connected did a DHCP request and > > > > >> got a public IP/DNS! When I set the modem up to do IPoE it > > > > >> picked all that up as well but for some reason wouldn't NAT or > > > > >> proxy the DNS. Wrote the modem off and we proceeded to order an > NBN service. > > > > >> > > > > >> On 26 July 2017 at 09:57, Damien Gardner Jnr > > > > >> <rendrag(a)rendrag.net> > > > > wrote: > > > > >> > > > > >> > Anyone else ordered one of the 180-T's yet? innet24.de are > > > > >> > now > > > > selling > > > > >> > them, but are waiting on a firmware update (due out next > > > > >> > week) before they're shipping more units. Looking forward to > > > > >> > getting one and > > > > seeing > > > > >> how > > > > >> > they go on NBN, if I can remove one device from the network > > > > >> > at home, > > > > >> I'll > > > > >> > be very happy! > > > > >> > > > > > >> > On 19 May 2017 at 08:08, Thomas Jackson > > > > >> > <thomas(a)thomax.com.au> > > > wrote: > > > > >> > > > > > >> > > Thanks for the responses everyone > > > > >> > > > > > > >> > > Looks like we're using the double-sided tape again this > > > > >> > > time around > > > > :) > > > > >> > > > > > > >> > > > > > > >> > > > > > > >> > > Sent from mobile > > > > >> > > > > > > >> > > Thomas Jackson > > > > >> > > Managing Director > > > > >> > > +61 2 8378 5555 > > > > >> > > > > > > >> > > > On 18 May 2017, at 12:54 pm, Mike Everest > > > > >> > > > <mike(a)duxtel.com> > > > > wrote: > > > > >> > > > > > > > >> > > > Hi Everyone, > > > > >> > > > > > > > >> > > > I thought I'd chip in some commentary here since there is > > > > obviously > > > > >> > > plenty > > > > >> > > > of interest :-} > > > > >> > > > > > > > >> > > > There are at least two products around that implement > > > > >> > > > some form of > > > > >> vDSL > > > > >> > > in > > > > >> > > > an SFP module, but there are lots of hurdles preventing > > > > >> > > > release to > > > > >> AU > > > > >> > > market > > > > >> > > > which are partly commercial (vendor requests significant > > > > >> > > > - circi > > > > >> > USD100K > > > > >> > > - > > > > >> > > > commitment prior to even proving viable operation on any > > > > >> > > > given > > > > >> network) > > > > >> > > and > > > > >> > > > partly technical (vDSL definition is somewhat 'loose' in > > > > >> implementation > > > > >> > > such > > > > >> > > > that there is no guarantee that something that works well > > > > >> > > > with one > > > > >> > vendor > > > > >> > > > DSLAM will also work with every other) > > > > >> > > > > > > > >> > > > At DuxTel, we've been trying to work out a solution for > > > > >> > > > many > > > > months, > > > > >> > and > > > > >> > > > although we are closing on a potential outcome, there is > > > > >> > > > no firm > > > > >> date > > > > >> > for > > > > >> > > > market readiness. > > > > >> > > > > > > > >> > > > One thing that we know of thus far: > > > > >> > > > - devices are real, and actually exist ;) > > > > >> > > > - devices work with MikroTik RouterOS to the extent that > > > > >> > > > they are > > > > >> > > recognised > > > > >> > > > by SFP drivers and 'inserted module' parameters are > > > > >> > > > reported > > > > >> correctly > > > > >> > > > - MikroTik are 'on board' to develop further support to > > > > >> > > > implement > > > > >> some > > > > >> > > form > > > > >> > > > of configuration interface for routerOS and this type of > > > > >> > > > device > > > > >> > > > > > > > >> > > > Here is what we don't have yet: > > > > >> > > > - commercial agreement with manufacturing vendor/s to > > > > >> > > > support > > > > >> > > development of > > > > >> > > > solution to work with any given vDSL service (read: NBN) > > > > >> > > > - compliance testing documentation to support RCM > > > > >> > > > eligbility for > > > > AU > > > > >> > > > environment > > > > >> > > > > > > > >> > > > What needs to happen before they are made available to > > > > >> > > > the AU > > > > >> market: > > > > >> > > > - compliance testing and certification > > > > >> > > > - testing (and probably some driver/firmware development) > > > > >> > > > to work > > > > >> with > > > > >> > > NBNCo > > > > >> > > > DSLAMs and other DSLAM vendors > > > > >> > > > > > > > >> > > > The big hurdle to the above is in coming to some > > > > >> > > > commercial > > > > >> agreement > > > > >> > > with > > > > >> > > > one or more vendors that satisfies their need to cover > > > > >> > > > costs of > > > > >> final > > > > >> > > stages > > > > >> > > > of development and compliance testing. > > > > >> > > > > > > > >> > > > My assessment of where this is all at is that the > > > > >> > > > manufacturer/s > > > > >> have > > > > >> > > > developed some 'proof of concept' hardware that seems to > > > > implement a > > > > >> > > general > > > > >> > > > form of vDSL (with ADSL fallback) BUT (and that's a big > > > > >> > > > BUT) there > > > > >> is a > > > > >> > > lot > > > > >> > > > of technical work to be done to deliver sufficient > > > > >> > > > confidence that > > > > >> they > > > > >> > > will > > > > >> > > > work reliably over any particular or general vDSL network. > > > > >> > > > That > > > > is > > > > >> not > > > > >> > > even > > > > >> > > > beginning to consider whether they are likely to meet any > > > > particular > > > > >> > > > regulatory compliance requirements for AU or any other > > > > jurisdiction > > > > >> ;) > > > > >> > > > > > > > >> > > > So short story is: they are coming, perhaps, but probably > > > > >> > > > not any > > > > >> time > > > > >> > > soon > > > > >> > > > :-J > > > > >> > > > > > > > >> > > > Questions (on or off list) are welcome! > > > > >> > > > > > > > >> > > > Cheers, Mike. > > > > >> > > > > > > > >> > > > > > > > >> > > > _______________________________________________ > > > > >> > > > Public mailing list > > > > >> > > > Public(a)talk.mikrotik.com.au > > > > >> > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > > > > >> > mikrotik.com.au > > > > >> > > > > > > >> > > _______________________________________________ > > > > >> > > Public mailing list > > > > >> > > Public(a)talk.mikrotik.com.au > > > > >> > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mi > > > > >> > > k > > > > >> rotik.com.au > > > > >> > > > > > > >> > > > > > >> > > > > > >> > > > > > >> > -- > > > > >> > > > > > >> > Damien Gardner Jnr > > > > >> > VK2TDG. Dip EE. GradIEAust > > > > >> > rendrag(a)rendrag.net - http://www.rendrag.net/ > > > > >> > -- > > > > >> > We rode on the winds of the rising storm, We ran to the > > > > >> > sounds of thunder. > > > > >> > We danced among the lightning bolts, and tore the world > > > > >> > asunder _______________________________________________ > > > > >> > Public mailing list > > > > >> > Public(a)talk.mikrotik.com.au > > > > >> > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mik > > > > >> rotik.com.au > > > > >> > > > > > >> > > > > >> > > > > >> > > > > >> -- > > > > >> <https://www.upandrunningtech.com.au> > > > > >> _______________________________________________ > > > > >> Public mailing list > > > > >> Public(a)talk.mikrotik.com.au > > > > >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > > > > mikrotik.com.au > > > > >> > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > Damien Gardner Jnr > > > > > VK2TDG. Dip EE. GradIEAust > > > > > rendrag(a)rendrag.net - http://www.rendrag.net/ > > > > > -- > > > > > We rode on the winds of the rising storm, We ran to the sounds > > > > > of thunder. > > > > > We danced among the lightning bolts, and tore the world asunder > > > > > > > > > > > > > > > > > > > > > -- > > > > <https://www.upandrunningtech.com.au> > > > > _______________________________________________ > > > > Public mailing list > > > > Public(a)talk.mikrotik.com.au > > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mik > rotik.com. > > > > au > > > > > > > > > > > > > > > > -- > > > <https://www.upandrunningtech.com.au> > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > > > au > > > > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > > > au > > > > > > > > > > > -- > > <https://www.upandrunningtech.com.au> > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > > au > > > > > > > -- > <https://www.upandrunningtech.com.au> > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > -- <https://www.upandrunningtech.com.au> -- <https://www.upandrunningtech.com.au>

8 19

breaking news - fire at MikroTik warehouse
by Mike Everest 27 Aug '18

27 Aug '18

Breaking news: "Big Fire Hits MikroTik Warehouse" https://eng.lsm.lv/article/economy/economy/big-fire-hits-mikrotik-warehouse. a289329/ Ouch - that is the 'old' warehouse, but as far as I know, it is still in operation while the new facility is in final stages of readiness. For reference, this is what the damaged warehouse USED to look like: https://goo.gl/maps/4BvwGjEzNZz And the NEW location (just a few 100m down the road) is ALMOST ready, but not yet fully operational: https://twitter.com/DuxTel/status/1025044261094359040 Here's hoping for a quick recovery from this small disaster by all our friends at MikroTik! Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel

2 2

Re: [MT-AU Public] LNS Function using L2TP and Multilink PPP
by Nick Pratley | Servers Australia 27 Aug '18

27 Aug '18

Hey Paul, I am sure it’s a tick box on the LNS side, saying allow multiple connections for this user. Have a look with a static user under ppp secrets? I’ll have a look at my config soon if it’s not there. Nick Pratley Senior Network Operator P: (02) 8115 8817 4 Amy Close, Wyong, NSW 2259 Need assistance? We are here 24/7 +61 2 8115 8888 --- original message --- > Sat, 25 Aug at 9:13 am, <paul(a)buildingconnect.com.au> wrote: > Hi Nick, > I am actually just trying to test with 2 NBN links which are handed off to my LNS as L2TP tunnels, I am using MT as the LNS which is working great, but just can't find any settings to enable MLPPP on the server side. > The client side is easy as you just add more interfaces into the PPPOE client configuration, and according to the doco as long as the server can do MLPPP it will work, but I can't find anything that actually confirms that. > I know on Cisco it's a simple matter of enabling multilink PPP, but I can't find anything on the Mikrotik which states that. > Regards > Paul > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Nick Pratley > Sent: Saturday, 25 August 2018 8:58 AM > To: MikroTik Australia Public List > Subject: Re: [MT-AU Public] LNS Function using L2TP and Multilink PPP > Actually, on second thought - nothing says it needs to be vdsl or adsl to test, right? > Grab to routerboards and throw two Ethernet cables between them. Pull up a l2tp server / client over that :-) > Doesn’t really matter what’s in the middle, that is just tunnel switched. > You just need both ends. > On Sat, 25 Aug 2018 at 8:53 am, Nick Pratley <nick(a)npratley.net> wrote: >>> Yeah, you’ll need multiple interfaces on the client side to fully test >>> end to end, but no reason it shouldn’t work. On my tik lns I have the >>> option to allow mlppp per client. >>> >>> Have only tested between MikroTik client and Cisco lns though - so >>> cannot confirm that the setting works. >>> >>> On Sat, 25 Aug 2018 at 7:28 am, Damien Gardner Jnr >>> <rendrag(a)rendrag.net> >>> wrote: >>> >>>> I was going to say I'll test it.. But it looks like MLPPP on 'Tik is >>>> all mostly automatic, you just specify multiple interfaces on the >>>> PPPOE session >>>> - so I'd have to HAVE multiple VDSL links here, to test it, I think..? >>>> With the same interface specified twice, the link came up fine with >>>> no errors from either end though.. >>>> >>>> https://wiki.mikrotik.com/wiki/Manual:MLPPP_over_single_and_multiple_ >>>> links >>>> Is the documentation for it.. >>>> >>>> On 24 August 2018 at 13:06, Philip Loenneker < >>>> Philip.Loenneker(a)tasmanet.com.au> wrote: >>>> >>>> > Hi Paul, >>>> > >>>> > Just to be clear - do you control all the equipment end to end, or >>>> > is >>>> it a >>>> > case of buying wholesale services off an upstream provider which >>>> > are delivered to your LNS? >>>> > >>>> > I haven't done anything with MLPPP, only "regular" PPP, but I >>>> > imagine >>>> that >>>> > it wouldn't take much to spin up a couple of PPPoE servers on one >>>> MikroTik, >>>> > and a couple of clients on another that is directly connected, to >>>> > test >>>> the >>>> > basic functionality before trying to do it over a more complex data >>>> path. >>>> > >>>> > I'm curious to hear any results you get, if you don't mind sharing >>>> > :) >>>> > >>>> > Regards, >>>> > Philip Loenneker | Network Engineer | TasmaNet >>>> > 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia >>>> > P: 1300 792 711 >>>> > philip.loenneker(a)tasmanet.com.au >>>> > www.tasmanet.com.au >>>> > >>>> > -----Original Message----- >>>> > From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of >>>> > Paul Julian >>>> > Sent: Friday, 24 August 2018 11:05 AM >>>> > To: 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> >>>> > Subject: [MT-AU Public] LNS Function using L2TP and Multilink PPP >>>> > >>>> > Hi all, >>>> > >>>> > Just wondering if anybody has got Multilink PPP working when using >>>> > a MT router as an LNS using L2TP termination and PPPOE on the >>>> > client end, Mikrotik both ends ? >>>> > >>>> > I can't find any concrete doco on whether this actually works or >>>> > not, >>>> from >>>> > what I can find my thoughts are that maybe MT can do the client >>>> > MLPPP >>>> but >>>> > might not be able to handle the server side. >>>> > >>>> > Any thoughts ? >>>> > >>>> > Regards >>>> > Paul >>>> > _______________________________________________ >>>> > Public mailing list >>>> > Public(a)talk.mikrotik.com.au >>>> > >>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com >>>> .au >>>> > >>>> > _______________________________________________ >>>> > Public mailing list >>>> > Public(a)talk.mikrotik.com.au >>>> > >>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com >>>> .au >>>> > >>>> >>>> >>>> >>>> -- >>>> >>>> Damien Gardner Jnr >>>> VK2TDG. Dip EE. GradIEAust >>>> rendrag(a)rendrag.net - http://www.rendrag.net/ >>>> -- >>>> We rode on the winds of the rising storm, We ran to the sounds of >>>> thunder. >>>> We danced among the lightning bolts, >>>> and tore the world asunder >>>> _______________________________________________ >>>> Public mailing list >>>> Public(a)talk.mikrotik.com.au >>>> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com >>>> .au >>>> >>> -- >>> >>> Kind Regards, >>> *Nick Pratley* >>> P: 0448 379 418 >>> E: nick(a)npratley.net >>> >>> -- >> Kind Regards, >> *Nick Pratley* >> P: 0448 379 418 >> E: nick(a)npratley.net >> _______________________________________________ >> Public mailing list >> Public(a)talk.mikrotik.com.au >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au >> _______________________________________________ >> Public mailing list >> Public(a)talk.mikrotik.com.au >> http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au --- end of original message ---

5 17

LNS Function using L2TP and Multilink PPP
by Paul Julian 25 Aug '18

25 Aug '18

Hi all, Just wondering if anybody has got Multilink PPP working when using a MT router as an LNS using L2TP termination and PPPOE on the client end, Mikrotik both ends ? I can't find any concrete doco on whether this actually works or not, from what I can find my thoughts are that maybe MT can do the client MLPPP but might not be able to handle the server side. Any thoughts ? Regards Paul

4 7

conntrack timing for tcp session
by Alex Samad 24 Aug '18

24 Aug '18

Hi ROS has a default of tcp-established-timeout: 1d But I have asym routing and not all the routers will see syn nor fin. I am thinking of bringing this down to 2 hours to match up with linux timeout . currently i have keep alive set to 30 min on my linux boxes. I don't think there is any reason why this should cause an issue. ??? Alex

2 8

Planet VC-231G VDSL Modem
by Russell Hurren 16 Aug '18

16 Aug '18

Hi everyone I'd looked into using the Planet VC-231G VDSL modem with the NBN a while back, and the distributor told me that it wasn't tested and they didn't know if it would work. I've since read a bit more about it, and found this document (skip to page 43) - https://www.nbnco.com.au/content/dam/nbnco2/documents/sfaa-wba2-product-cat… I've asked Planet whether it meets the requirements, and they just told me that it uses a Metanoia MT5311GB VDSL2 Chipset and a Qualcomm QCA8337N Gigabit Ethernet Chipset and suggested that I test it. I'm aware that Duxtel and others have been looking at SFP modules with Metanoia chipsets, and was wondering if anyone would know whether the VC-231G would be likely to work with the NBN? I don't believe there's any compliance issues, the only question is whether it works. The Planet device looks more professional than the alternatives (eg Draytek Vigor 130), so I'd rather use it if it'll work. I had a Telstra technician tell my client that the TP-Link TD-8817 ADSL bridges I supplied mightn't be able to cope with the number of users on the network (because he didn't understand the difference between a router and a bridge). Regards Russell

2 1

rate limiting - shapping
by Alex Samad 16 Aug '18

16 Aug '18

Hi Okay - say I have a CCR 1072. 1 interface connected to TPG say 100M connections (int A) 1 interface into my vlan where my firewall is connected. (int B) I want to shape / limit / ?? in boud and out bound traffic. I believe - from a quick read of the routeros pages that I apply the limiter to the int B. and apply up and down for 100Mb/s - this is the max Then I can carve out - well what I want is from 1 ip I want to allow full 100Mb. from 2 other I want to allow up to 80Mb and for the rest up to 60Mb/s I think I create a tree of shappers the top being the full capacity and then add nodes to match each of the above. plus I don't want drop I want it to hold the packects and release when it can does that sound about right ? A

4 7