- Public - talk.mikrotik.com.au

MTCNA Training Duxtel USB
by Dave Browning 23 Aug '22

23 Aug '22

Hi All, Wandering if anyone has the USB that you receive from the Duxtel MTCNA training? I recall it having a PDF of the training material, as well as some configs and useful tools. I just have no idea where I put mine 😂 Cheers, Dave

1 0

Partial internet on MacOS. Unable to browse to Mikrotik
by Chris Herrmann 24 Jun '22

24 Jun '22

This might be related to a routing issue that we saw earlier. We had connectivity issues to a range of Akamai & AWS IP space from a variety of end points domestic & international. It seemed to be picked up and mitigated quickly by Australian 4G operators, but there are several ISPs locally & internationally I'm aware of who didn't fix it - and they only got visibility again once the underlying issue was sorted. >From our side we saw everything come up again ~11am Sydney time (GMT+10). If it's now working OK for you... then that was probably it. If it's still broken... then probably not... Cheers, Chris

2 1

Partial internet on MacOS. Unable to browse to Mikrotik
by mamancc＠hotmail.com 24 Jun '22

24 Jun '22

Hi, I have Mikrotik RB4011 with the following setup working beautifully for the past 4 years:NBN Device Netcomm - Mikrotik RB4011 (RouterOS v6.49.6) - Netgear Orbi (not acting as a router). We switched over to a new ISP about 3 weeks ago and internet has been working beautifully as well till last night. I don't think the ISP change is the cause but I thought I share it. Our NBN is FTTP. >From last night we have not been able to browse internet using our Macbooks:1. we have 2 Macbooks, used both macbooks to attempt browsing through Firefox and Safari, none works; however sending/receiving iMessage works!;2. cleared Cache and Browsing History/Data; still not working3. rebooted the Macbook, still not working4. my attempts to navigate/connect to Mikrotik via the browser is challenging. It takes many attempts to connect. Once connected I attempted to Check for Update, and it returns Error. When I hit the Close button from the Check for Update page, I recall it took me to a page with option to Downgrade, and on that page there appears to be a selection/list of modules and (IP6 was greyed out) so I clicked on IP6 and hit enable. It doesn't appear to do anything. Internet appears to still work via:1. mobile phones, but not all applications2. Windows laptop browser able to browse to internet, however unable to navigate/connect to Mikrotik still I am yet to reset Mikrotik configuration. Hoping someone able to shed some light on what may be the issue please. Cheers,Adrian

7 10

Re: [MT-AU Public] Partial internet on MacOS. Unable to browse to Mikrotik
by mamancc＠hotmail.com 24 Jun '22

24 Jun '22

Mike, To add, other applications on the Macbooks are able to access internet: AppleTV app on Macbook, Spotify, and Apple Store. What makes me think it's something to do with the Mikrotik is the struggle to simply browse locally to the Mikrotik or Netgear Orbi, either via the Macbooks or Windows laptop. Yes I have rebooted both the Mikrotik and Netgear Orbi a couple times at least. Regards,Adrian On Friday, June 24, 2022 at 07:56:00 AM GMT+8, mamancc(a)hotmail.com <mamancc(a)hotmail.com> wrote: Hi Mike, What works:1. TV,2. Mobile phones most applications 3. Windows browser browsing internet4. Macbooks iMessage What does NOT work:1. Macbooks browser browsing internet or even attempting locallly to connect to Mikrotik or Netgear Orbi2. Windows browser attempting to connect to Mikrotik or Netgear Orbi3. The wife tells me that certain mobile phone messaging application does not work Cheers,Adrian On Friday, June 24, 2022 at 07:34:29 AM GMT+8, <mike(a)duxtel.com> wrote: Do you think it is only macbook, or something else? i.e. can you access internets OK using some other devices, like TV, PC, mobile phones, etc? Cheers! -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of mamancc(a)hotmail.com Sent: Friday, 24 June 2022 9:24 AM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: [MT-AU Public] Partial internet on MacOS. Unable to browse to Mikrotik Hi, I have Mikrotik RB4011 with the following setup working beautifully for the past 4 years:NBN Device Netcomm - Mikrotik RB4011 (RouterOS v6.49.6) - Netgear Orbi (not acting as a router). We switched over to a new ISP about 3 weeks ago and internet has been working beautifully as well till last night. I don't think the ISP change is the cause but I thought I share it. Our NBN is FTTP. >From last night we have not been able to browse internet using our Macbooks:1. we have 2 Macbooks, used both macbooks to attempt browsing through Firefox and Safari, none works; however sending/receiving iMessage works!;2. cleared Cache and Browsing History/Data; still not working3. rebooted the Macbook, still not working4. my attempts to navigate/connect to Mikrotik via the browser is challenging. It takes many attempts to connect. Once connected I attempted to Check for Update, and it returns Error. When I hit the Close button from the Check for Update page, I recall it took me to a page with option to Downgrade, and on that page there appears to be a selection/list of modules and (IP6 was greyed out) so I clicked on IP6 and hit enable. It doesn't appear to do anything. Internet appears to still work via:1. mobile phones, but not all applications2. Windows laptop browser able to browse to internet, however unable to navigate/connect to Mikrotik still I am yet to reset Mikrotik configuration. Hoping someone able to shed some light on what may be the issue please. Cheers,Adrian _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

Sponsored placed available at MikroTik Certification Training coming up in Brisbane in May
by mike＠duxtel.com 14 May '22

14 May '22

Hi all! We have some certification classes coming up in Brisbane during May 2022 and, as usual, we like to offer one or more 'sponsored' places at one or more of those training events to support tech communities, education and charity type organisations. Applicable classes are MTCRE (Routing) and MTCINE (Internetworking) - eligible candidates must be MTCNA certified, or significant and demonstrable background experience with MikroTik products, and should have some association with one of the mentioned organisation types above, or particular personal circumstances that may warrant sponsorship. Anyone interested in exploring these opportunities further, please get in touch with us direct via training(a)duxtel.com <mailto:training@duxtel.com> , or just reply direct to myself : ) Cheers! Mike Everest. ------------------------------------------------------------------------------------ Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ------------------------------------------------------------------------------------ Follow our tweets for news and updates: http://twitter.com/duxtel

6 11

Isolated VLAN for Android 6.0 device
by Ben Williams 11 Apr '22

11 Apr '22

Hi folks, I've had a new air conditioning controller installed, an Airtouch 4. Turns out it's just a little tablet running Android 6.0 - truly an example of the old phrase, "the S in IOT stands for Security" :D It connects to wifi and offers remote control (both on the local network and over the internet). So I'm thinking what I want to do is isolate it on its own vlan that has no outgoing access to the rest of my network, but still has external internet access and inbound access from the LAN so the phone apps still work to control it. I've got a Mikrotik 951G-2HnD running RouterOS 6.49.2, with LAN (NBN HFC) hanging off port 1, a single Unifi wireless AP hanging off port 2 (the 951G's wireless is turned off), and other stuff off ports 3, 4, & 5 (other switches, a NAS, etc). It's all on a single network; the 951G runs DHCP for 10.1.1.0/24 on the bridge interface, there's a basic firewall configured, and IPv6 is enabled and running. So I assume what I need to do is some kind of vlan config to separate traffic, and some routing and firewall config, but I really am not sure how to achieve it. Maybe something like: - Create 2 new vlans, one for the unrestricted devices and one that I'll use for isolated devices - Add both vlans to all ports? The Unifi AP can do vlan tagging by the looks, so I could create a seperate wireless network for the restricted vlan as well. (Or maybe the easier way would be to turn the 951G's wireless back on purely for this restricted access, take the Unifi AP out of the picture) - Create a new DHCP range for the restricted vlan (can I decide which dhcp range will respond based on the vlan tag?) - Create a new firewall config to prevent the restricted vlan from communicating to the unrestricted vlan? - Routing config of some kind? I'm not much of a networker, so any help would be much appreciated. - Ben

2 1

Draytek modem firmware update
by Roger Plant 09 Apr '22

09 Apr '22

https://faq.draytek.com.au/2021/11/11/nbn-vdsl2-connection-update/ For those with vigor 130's, etc in front of the Mikrotik. Regards Roger---------------------------- Roger Plant

3 3

Odd IMAP failures, seems to be network
by Karl Auer 09 Apr '22

09 Apr '22

I run a Mikrotik router as my home router, have done for years. I personally have never had an issue with it. The current one is an hAP ac^3 running 6.47.10 with plenty of free RAM and disk space and virtually zero CPU usage. However one of my "users", running Thunderbird on Windows, has an ongoing problem using IMAP. When she sends an email, the email is not saved to the (IMAP) "Sent" folder. If she saves a draft, it fails to save to the (IMAP) "Drafts" folder. In both cases the failure comes after a long wait, indicating IMHO a network problem. This does not happen all the time, but often enough (well more than half the time) to be extremely frustrating. We can discern no commonality between the affected messages - large, small, addressees, attachments etc. Sometimes if she disconnects from the network and then reconnects, the message will work the second time around, but IMHO this is just blind luck. The thing is, this does NOT happen when she is using the same computer outside our home - on a public network, her phone's hotspot or whatever. Only at home. I have excluded wifi as the problem; she gets the same issue on a wired connection. I have set up my own IMAP connection (though not as yet with Thunderbird) and cannot replicate the problem. She and I use the same local network, the same email provider and the same connectivity provider (ADSL from iiNet). The link is slow (about 14/0.4), but has been dependable and as I say, I do not have any problem other than with speed. This has been going on for probably about two years now, getting steadily worse, to the point where she now leaves the house to work (which is a big deal, as it's a 40-minute round trip to a suitable location). I'm at a bit of a loss as to what it might be, and am asking here to see if anyone has a router-related clue. Or any ideas as to how I might go about troubleshooting this. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 9FB6 C08F 91CB 5093 30EF 3E2F 8C94 EEBD 117C 4A10 Old fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254

5 11

Re: [MT-AU Public] Network Routing Issues
by Michael Junek 04 Feb '22

04 Feb '22

Windows firewall on the workstation perhaps? ________________________________ From: Christopher Hawker <chris(a)thesysadmin.dev> Sent: Thursday, 3 February 2022 19:05 To: MikroTik Australia Public List Subject: Re: [MT-AU Public] Network Routing Issues Hi Dave, That was my thought too, however I've placed a rule at the top #1 that allows ICMP from any IP on any zone to reach any other IP on any other zone, same result. ________________________________ From: Public <public-bounces(a)talk.mikrotik.com.au> on behalf of Dave Browning <dave(a)dlbnetworks.com> Sent: Thursday, February 3, 2022 6:39 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Network Routing Issues Given you can get one way, it’ll be a firewall issue. I reckon your are being “Sophos’d” and it’s simply blocking inbound ICMP. > On 3 Feb 2022, at 5:32 pm, Christopher Hawker <chris(a)thesysadmin.dev> wrote: > > Hello all, > > I'm trying to work on a setup using 2 x CHRs at separate locations, with an EoIP tunnel between them. The tunnel itself works, and I am able to route across it. > > At the A-side is a workstation (192.168.0.1) with a Sophos router as the default gateway (192.168.0.254) and the A-side CHR is the tunnel gateway (192.168.0.253). At the Z-side, there is the single CHR (172.16.100.254) which is acting as the default gateway and a Windows server (172.16.100.1) behind it. I have BGP configured between the two sites over the tunnel and this works as expected. Sessions are up and routes have propagated. > > 192.168.0.1 is able to ping and can traceroute to 172.16.100.1 and results are returned however, 172.16.100.1 cannot ping/traceroute to 192.168.0.1 which has me puzzled. I did some more digging, and the traceroute to 192.168.0.1 shows that the last hop before timeout is 192.168.0.253. > > I apologise for my poor explanation; however I hope it makes sense to someone. Would anyone be able to shed some light on why it may be doing this, or what I am missing? > > Thanks, > CH > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

5 5

Network Routing Issues
by Christopher Hawker 03 Feb '22

03 Feb '22

Hello all, I'm trying to work on a setup using 2 x CHRs at separate locations, with an EoIP tunnel between them. The tunnel itself works, and I am able to route across it. At the A-side is a workstation (192.168.0.1) with a Sophos router as the default gateway (192.168.0.254) and the A-side CHR is the tunnel gateway (192.168.0.253). At the Z-side, there is the single CHR (172.16.100.254) which is acting as the default gateway and a Windows server (172.16.100.1) behind it. I have BGP configured between the two sites over the tunnel and this works as expected. Sessions are up and routes have propagated. 192.168.0.1 is able to ping and can traceroute to 172.16.100.1 and results are returned however, 172.16.100.1 cannot ping/traceroute to 192.168.0.1 which has me puzzled. I did some more digging, and the traceroute to 192.168.0.1 shows that the last hop before timeout is 192.168.0.253. I apologise for my poor explanation; however I hope it makes sense to someone. Would anyone be able to shed some light on why it may be doing this, or what I am missing? Thanks, CH

3 3