Hi all, I've been meaning to post this for a while. I was struggling with IPv6 config on Aussie broadband. I could see that my config probably should have been working but it wasn't. So I called in my 'expert'. I opened a command prompt (Windows) and ran Claude in CLI mode. I didn't want to give Claude write access to the router, so I made a separate account it could use to SSH into the 'tik with read only permissions. Then the fun started. Claude found I had putty installed in path so used that for SSH. After some mucking around with authentication and keys, it got an export of the config. Then it made various suggestions and I asked it to respond with CLI commands for copying to winbox terminal. I checked each command for sanity before pasting it into the terminal. Iteratively it helped get the config right by searching online for ABB related issues, reading the MT docs, enabling verbose logging for DHCP, reading and disecting logs,etc. This blew my mind. Then I set it to optimise my network (5 x Mikrotiks including 2 x APs and the gateway.) It downloaded the configs diligently from each device and it recommended various optimisations that I had missed, or overlooked over years of firmware updates. Something on my mind was turning one MT into a honeypot. I gave it R/W access to a less critical device and told it what I wanted. Logging, email alerts, an extensive service list, and lo and behold, it built up and tested the configuration, including scripts to email summaries of access to the honeypot. Don't panic about losing your job to Claude. You really need to hold its hand and direct it! Another task it did for me was to update my years old FW update scripts and my backup to email scripts. I did find it helps to tell claude what version of FW you are using to reduce the number of erroneous commands. Anyway, if you haven't tried it, give it a go. BTW, would love to see another MUM occur one day. All the best, Mal _____________________________ email:malcolm@faed.name mobile:0409 601 747 Blog http://malfunction.faed.name _____________________________
I've been doing similar things recently. Tonight around dinner time, a customer reported intermittent connectivity issues. I gave Claude read-only access to their router, and asked it to troubleshoot. It determined their was a problem upstream. I gave it read-only access to my primary BNG and went to watch TV, and it found the problem while I was gone (runaway BGP issue). I've been working on simulating my whole network in EVE-NG and having Claude run tests from every device any time I make a change, to make sure changes don't adversely affect other customers. * Russell ________________________________ From: Malcolm Faed via Public <public@talk.mikrotik.com.au> Sent: Sunday, 19 July 2026 17:47 To: public@talk.mikrotik.com.au <public@talk.mikrotik.com.au> Cc: Malcolm Faed <malcolm@faed.name> Subject: [MT-AU Public] Claude and Mikrotik. Wow! Hi all, I've been meaning to post this for a while. I was struggling with IPv6 config on Aussie broadband. I could see that my config probably should have been working but it wasn't. So I called in my 'expert'. I opened a command prompt (Windows) and ran Claude in CLI mode. I didn't want to give Claude write access to the router, so I made a separate account it could use to SSH into the 'tik with read only permissions. Then the fun started. Claude found I had putty installed in path so used that for SSH. After some mucking around with authentication and keys, it got an export of the config. Then it made various suggestions and I asked it to respond with CLI commands for copying to winbox terminal. I checked each command for sanity before pasting it into the terminal. Iteratively it helped get the config right by searching online for ABB related issues, reading the MT docs, enabling verbose logging for DHCP, reading and disecting logs,etc. This blew my mind. Then I set it to optimise my network (5 x Mikrotiks including 2 x APs and the gateway.) It downloaded the configs diligently from each device and it recommended various optimisations that I had missed, or overlooked over years of firmware updates. Something on my mind was turning one MT into a honeypot. I gave it R/W access to a less critical device and told it what I wanted. Logging, email alerts, an extensive service list, and lo and behold, it built up and tested the configuration, including scripts to email summaries of access to the honeypot. Don't panic about losing your job to Claude. You really need to hold its hand and direct it! Another task it did for me was to update my years old FW update scripts and my backup to email scripts. I did find it helps to tell claude what version of FW you are using to reduce the number of erroneous commands. Anyway, if you haven't tried it, give it a go. BTW, would love to see another MUM occur one day. All the best, Mal _____________________________ email:malcolm@faed.name mobile:0409 601 747 Blog https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmalfunction.faed.name%2F&data=05%7C02%7Crussell%40zeropointnetworks.com%7C4d0a1bd3f3994abae1a008dee584d8f5%7C11ff14afea684cb1af94b4c5be201f2d%7C0%7C0%7C639200556068641046%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C60000%7C%7C%7C&sdata=niEikm8zW74rB%2BjtnmNckAntgQqREdf%2BIpReSGO3Y%2B4%3D&reserved=0<http://malfunction.faed.name/> _____________________________ _______________________________________________ Public mailing list -- public@talk.mikrotik.com.au To unsubscribe send an email to public-leave@talk.mikrotik.com.au
On 19/07/2026 19:47, Malcolm Faed via Public wrote:
Hi all, I've been meaning to post this for a while.
I was struggling with IPv6 config on Aussie broadband.
I could see that my config probably should have been working but it wasn't. So I called in my 'expert'.
There's AI, then there's AI I dealt with an issue for someone a few months back who called on 2 AI models for a config on their small business RB they were given for their FTTN to FTTH upgrade, the configs were, about 98% perfect in my eyes, except for one glaring problem, which was obvious to me but not to either of the two AI's, the first tey generated with, tried to resolve, and the second AI to try resolve that agreed with the first that it was a perfect hahaha whats their fave word... "deterministic" configuration, but their internet still didn't work. That glaring problem I saw immediately, and that they both missed, a little line in /ip firewall nat .. some apparently irrelevant thing now days about srcnat :P As for aussiebroadband and ipv6, yeah, depending where you be, depends on the options, something with pool-name IIRC, thats a butchering network, they change it all the time and deny any changes were made, despite your evidence there has been. -- _Regards,_ _Noel Butler_
participants (3)
-
Malcolm Faed -
Noel Butler -
Russell Hurren