- Public - talk.mikrotik.com.au

Re: [MT-AU Public] Getting out of CAP mode
by Roger Plant 22 Oct '23

22 Oct '23

Sorry if this is a duplicate, It seems to have bounced earlier. Hi, Not sure if this is in the spirit of the exercise, but traditionally a cap had no password and no firewall. If this is still the case, just login (with winbox via mac address if need be) and reset to defaults? Otherwise my only suggestion is: https://help.mikrotik.com/docs/display/ROS/Reset+Button Which I am fairly sure you have looked at more than once... Regards Roger To: MikroTik Public <public(a)talk.mikrotik.com.au> Date sent: Sun, 22 Oct 2023 13:18:03 +1100 Organization: Nullarbor Consulting pty Ltd Subject: [MT-AU Public] Getting out of CAP mode From: Karl Auer via Public <public(a)talk.mikrotik.com.au> Send reply to: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Copies to: Karl Auer <kauer(a)nullarbor.com.au> [ Double-click this line for list subscription options ] Skip to end for actual question. Otherwise: So. Did I miss something? Is there a special trick for getting out of CAP mode? Is this behaviour possibly even intended? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ---------------------------- Roger Plant

1 0

Getting out of CAP mode
by Karl Auer 22 Oct '23

22 Oct '23

Skip to end for actual question. Otherwise: I have a spare/test Mikrotik 951G 2HnD here at home. We've been through many adventures together. I trust it. I think it trusts me. Today I thought: CAPSMAN looks interesting! I took my trusty spare router, did the reset thing and put it into CAP mode. Configured up another router as a manager and it all worked swimmingly. Still have to figure out multiple SSIDs and VLANs, but that is for another day. Tired but happy, and wanting to revert my trusty spare router back to default settings for our next adventure, I pressed the reset pin while plugging in the power, waited the usual few seconds until the ACT light started flashing, and released the pin. The unit remained in CAP mode. Huh. Repeat. Repeat carefully. Repeat even more carefully. Repeat. Repeat. Speak gently to router and repeat. Speak forcefully to router and repeat. Apologise to router and repeat. Sigh. So I read numerous web pages, as one does. It seems a lot of people have difficulty distinguishing flashing LEDs from solid LEDs, distinguishing mode buttons from reset buttons, locating small holes, counting to five, coordinating their limbs etc, but these defects do not apply to me. I have reset this specific router many dozens of times. Possibly hundreds. It has always returned faithfully to a usable default configuration. OK, dragged out NetInstall (Linux version, yay!). It duly sent a new copy of RouterOS7 over to my little friend. Which remained in CAP mode. Kind of expected, so I repeated the process with "-r" to clear the configuration. And finally, finally, my little friend and I fell sobbing into one anothers' arms. So. Did I miss something? Is there a special trick for getting out of CAP mode? Is this behaviour possibly even intended? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

1 0

SPF bounces - oops!
by Mike Everest 19 Oct '23

19 Oct '23

Hi Folks! I spotted a whole bunch of list unsubscribes due to excessive bounces today - due to (mostly gmail) remote servers rejecting posts due to lack of SFP record <d'oh!> FWIW, we *did* have SPF configured for the domain, but overlooked the fact that emails come from '@talk.mikrotik.com' :-} It's now fixed and I re-activated those disabled memberships - there's no search function that let's me find all of the affected subscriptions, so I can't be certain that I fixed all of them - so if I overlooked you, please accept my apology! (but if I overlooked you, I suppose you'd never know that I did - does it keep me 'safe'? ; ) Cheers! Mike.

1 0

Re: [MT-AU Public] Mikrotik and Starlink
by Karl Auer 19 Oct '23

19 Oct '23

On Sun, 2023-10-15 at 14:55 +0000, Andrew Oakeley wrote: > I'd be inclined to set your allowed-address for the peers to > 0.0.0.0/0 On Mon, 2023-10-16 at 09:10 +1100, Roger Plant wrote: > On the Server, You need to add 192.168.16.3 to the allowed > addresses in the Client peer entry. > > On the Client, You need to add 192.168.16.1 (or maybe .16.0/24 if > there will be other peers attached to server in future) to > the allowed addresses in the Server peer entry. I had already tried what Roger suggested, and had added ",192.168.16.0/24" to the allowed-address on each end. It changed the error, but only on the client end, from the error 126 to a timeout. So I just now tried what Andrew suggested, and FMS it then worked; I could ping each Wireguard interface address from its "opposing" address on the link. But WHY?!? Why was it not enough to add just the Wireguard link subnet to each end's allowed-address list? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

4 13

BGP Multithreading on ROS v7
by Christopher Hawker 16 Oct '23

16 Oct '23

Hey All, I need to call on the wisdom of the brains trust here... I'm needing to enable multithreading on a CCR1009 that is taking in 4 full tables (2 x v4 and 2 x v6). From what I've read, the input and output affinity needs to be configured on the sessions however I'm uncertain as to how it should be set or what options need to be enabled. Would anyone have working configs for this or know how to best set them? Thanks! CH

1 0

Mikrotik and Starlink
by Karl Auer 16 Oct '23

16 Oct '23

Wondering if anyone has any tips here. A client has acquired a company whose office has a Starlink connection. This client also has an existing office with an NBN connection. The latter is connected to a Mikrotik that does plain old DHCP to get its WAN address from the NPN. Now the client wants to use the acquired company's office instead. They want to move the Mikrotik there and keep more or less the same network behind it that they have now. They've done the obvious thing and just plugged the WAN interface on the Mikrotik into an Ethernet port on the Starlink router, but no go. "No go" in this case means that PCs on the inside network don't have Internet access, and that's as far as they know how to go. I have never seen the new office or the Starlink router (or any Starlink routers). I have no idea if they connected the right Mikrotik interface to it. In fact I don't even know if the port on the Starlink router is in fact an Ethernet port. My searching on the subject finds numerous articles saying that Starlink routers have no Ethernet ports, that additional hardware must be purchased from Starlink and talking about "Bypass Mode", none of which is inspiring... Anyway, if anybody has run a small network behind Mikrotik using a Starlink router as the WAN connnection can share any info, that'd be great. Many thanks in advance, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

8 20

Conntrack count vs. total-entries, different values?
by Matthew Kobayashi 09 Oct '23

09 Oct '23

Hi all, I've come across something in RouterOS that I don't quite understand, and I was hoping someone could shed a little light on what I'm seeing. The values for the output of the below commands on my router are always quite different (approx. 150-200 apart) and I'm not sure why. As best I can tell from the documentation, these values should be identical (or at least very close), but they never seem to be close to one another. Does anyone know of a reason why they wouldn't be the same? Does total-entries mean something other than the total number of connections currently in the conntrack table? [matthew@gateway] > /ip/firewall/connection/print count-only 445 [matthew@gateway] > :put [/ip/firewall/connection/tracking/get total-entries] 648 Kind regards, Matthew Kobayashi

3 3

ROS V7
by Andrew Gilbett 19 Sep '23

19 Sep '23

Hi Team, I am interested in what the collective brains trust thinks about ROS v7 in production. It appears that the availability of CCR's that support V6 is dwindling and that V7 is the future. The question is: What has your experience with V7 been like and what type of env are you running it in? And are you ready for 100% v7?

7 6

WTB: Mikrotik CCR1009-8G-1S-1S+ housing
by Christopher Hawker 27 Aug '23

27 Aug '23

Hi all, I'm currently looking for a Mikrotik CCR1009-8G-1S-1S+ enclosure. I have a router here that has dents all over it, however when I pull the board out and power it on it's still working perfectly. I'm hoping someone here has an old router laying around that has died or may know where I can source one from. If you do, please reply to me off-list. It'd be much appreciated. Thanks, Christopher H.

2 1

Re: [MT-AU Public] RB4011 and LR9 Kit for sale
by Jason Hecker 17 Jul '23

17 Jul '23

So far my old Epson Workforce 435 printer refuses to connect to the hAPAX2 on 2.4GHz. It used to work fine on all other Mikrotik APs. Regards, Jason Hecker <https://www.upandrunningtech.com.au/> <https://www.upandrunningtech.com.au/> On Mon, 17 Jul 2023, at 14:33, Spiro Bombos wrote: > Hi Gents > > Slightly off topic this subject but how is everyone handling issues with 2.4 gear trying to connect to acx hardware ie ring door bell , it might be isolated but have had an issue with one site in particular, and the end result was to replace it with the AC hardware > > But our hardware mainly newer laptops are performing as really with with the newer acx hardware > > > Regards > > Spiro Bombos > > -----Original Message----- > From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Mike Everest > Sent: Monday, July 17, 2023 2:23 PM > To: 'Jason Hecker' <jason(a)upandrunningtech.com.au>; 'MikroTik Australia Public List' <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] RB4011 and LR9 Kit for sale > > Good to hear! : ) > > I have had similar results, but can never be sure if it's "just me" due to some happenstance of the setup and/or environment - and didn't post any reviews because, well, nobody would believe me anyway ;-) > > > > Cheers! > > > > From: Jason Hecker <jason(a)upandrunningtech.com.au> > Sent: Monday, 17 July 2023 2:14 PM > To: Mike Everest <mike(a)duxtel.com>; MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] RB4011 and LR9 Kit for sale > > > > Hi > > > > I am using 2 hAPAX2's with an RB5009 and the latest beta with Wifiwave2. Roaming about the house works well and the logs shows that a clients has roamed - Facetime ran super smooth across roams. 802.11r/v/k are all active too which assist with roaming. Speedwise 802.11ax seems to make better utilisation of bandwidth and a laptop a few metres away with an Intel AX200 card was getting 950MBit/s with iperf. SSID's on another VLAN work fine too. I am very happy with them and they seem to perform in a way the older AC gear doesn't (but always hoped it would). I had replaced 2 hAPAC's with the hAPAX2's at either end of the house. > > > > Regards, > > Jason Hecker > > > > On Mon, 17 Jul 2023, at 09:42, Mike Everest wrote: > > G'day! > > > > Just wondering - do you have any opinions on the ax2 model? I replaced one of my home APs with that model, and have to > > say I was very impressed with performance... > > > > Are you noticing some improvements? > > > > Cheers! > > > > Mike. > > > > -----Original Message----- > > From: Public <public-bounces(a)talk.mikrotik.com.au <mailto:public-bounces@talk.mikrotik.com.au> > On Behalf Of Jason Hecker > > Sent: Saturday, 15 July 2023 8:42 AM > > To: public(a)talk.mikrotik.com.au <mailto:public@talk.mikrotik.com.au> > > Subject: [MT-AU Public] RB4011 and LR9 Kit for sale > > > > I am moving some used Mikrotik gear on if anyone is interested. > > > > LR9 LoRa kit with antenna. Where I live now there is no LoRa activity alas. > > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.ebay.com.au%2fitm%2… > > > > RB4011-with-Wifi. I have upgraded to an RB5009 with hAPAX2s. > > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.ebay.com.au%2fitm%2… > > > > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.upandrunningtech.co…> > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au <mailto:Public@talk.mikrotik.com.au> > > https://linkprotect.cudasvc.com/url?a=http%3a%2f%2ftalk.mikrotik.com.au%2fm… > > > > > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au <mailto:Public@talk.mikrotik.com.au> > > https://linkprotect.cudasvc.com/url?a=http%3a%2f%2ftalk.mikrotik.com.au%2fm… > > > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > https://linkprotect.cudasvc.com/url?a=http%3a%2f%2ftalk.mikrotik.com.au%2fm… >

2 1