MikroTik

npyoung

While I agree in principle, this kind of response is pointless and over-used. It certainly doesn't help the poster's situation any. And it doesn't help that MikroTik is pushing all these releases out as "stable." Of course by now, most of us know better, but when MikroTik's team come on t...

npyoung

If you don't want to go out of business probably you should've made some tests with these upgrades on equipment that wasn't "live". While I agree in principle, this kind of response is pointless and over-used. It certainly doesn't help the poster's situation any. And it doesn't help that ...

npyoung

Thanks MED001. I'll give it a try.

npyoung

I have all my production devices (over 4000) on 6.46.8 long-term (2020 Oct 29), from border router to AP of end user (the AP of end users are not counted, and not updated, except for exploits), and I have just one RB5006 device with 7.2.3 (netinstalled), obviously v7, and actually I have no one sin...

npyoung

If you don't mind going out of business you'll love upgrading to 7.31. it's absolutely blowing our network up, with all sorts of ospf related errors. Upgraded from 6.49 to this thing, in stages, following the advice that these kind of routing errors would be solved by upgrading adjacent routers to 7...

npyoung

nstance { version: 2 vrf: 0 router-id: 10.10.172.1 } area { 0.0.0.0 } interface { p2mp-broadcast wlan1 10.10.129.1 } neighbor { router-id: 10.10.128.1 state: Full } received wrong LS Ack for router 10.10.102.1 10.10.102.1 0x8026a523 expected 0x8026a524 Anyone have an idea why this is happening? Kill...

npyoung

Same issue here. Damn!

npyoung

On upgrading our Dynadishes to 6.43.X, we show a loss of memory, from 128MiB to 16MB. Happens every time now. Once there, not possible to upgrade further due to lack of memory! Shows a new drive, /flash, but access to the remainder of the memory in the device doesn't seem possible. What's the story ...

npyoung

Has anyone documented exactly what the hack does? Is it possible to expunge it completely without overwriting the device with a new clean restore file? When it comes to CPEs, the wireless interface precludes doing this remotely, as it's MAC doesn't match up with the MAC that the clean restore was ge...

npyoung

If the hacker has left the devices with old software, u can use the same Holes to get the set passwort, there are some Python scripts avaible for proof of concept..... Problem is that of the Dynadishes that are the hard nuts to crack (ie; not responding to Winbox as it's disabled by the hack, http ...

npyoung

They do respond partially on port 80, but act strangely. What do you mean by that? They are responding normally on port 80 now that I've put them behind a NAT, which I think should cut off access by the hacker. But, the username and/or password has been changed. Seems like there was a "service...

npyoung

How do you recover from this attack? We have 40 Dynadishes that are not responding to Winbox. They do respond partially on port 80, but act strangely. No SSL or telnet was enabled on these CPE's , so that approach is out. Any suggestions? You could use netinstall to reinstall them. See: https://wik...

npyoung

They do respond partially on port 80, but act strangely. What do you mean by that? They are responding normally on port 80 now that I've put them behind a NAT, which I think should cut off access by the hacker. But, the username and/or password has been changed. Seems like there was a "service...

npyoung

npyoung, just make sure you have not removed your mikrotik.com account or put mikrotik.com in some spam filter, because MikroTik did send mails about this and other vulnerabilities. Also, since the issue was patched back in april, I suggest to also check our communication channels more often (socia...

npyoung

npyoung, just make sure you have not removed your mikrotik.com account or put mikrotik.com in some spam filter, because MikroTik did send mails about this and other vulnerabilities. Also, since the issue was patched back in april, I suggest to also check our communication channels more often (socia...

npyoung

How do you recover from this attack? We have 40 Dynadishes that are not responding to Winbox. They do respond partially on port 80, but act strangely. No SSL or telnet was enabled on these CPE's , so that approach is out. Any suggestions?

npyoung

Is there a way to log into these compromised devices remotely? The devices that were compromised today are not reachable using telnet, ssh, or winbox. They are still running, presumably performing their Internet access function, but I've lost control of them. Maybe MT, having seriously dropped the b...

npyoung

Getting down to fixing this cluster. Is the reset button disabled? Or can a person go to each router site, hit the reset button and put an upgraded OS on it, and the new setup? Or is the hardware now trash?

npyoung

I am furious angry! My router had admin disabled and most of the services such as SSH/Telnet etc. The username I used was a long name and the password had 16 chars. I had a proper configuration on firewall, lots of scripts etc. YET... Today I went on Google and got the CAPTCHA. I knew right of the ...

npyoung

Got to say I love this device. 100Mpbs to the customer, pretty easy to assemble and set up. GB Ethernet, and the full featured MT software we are all familiar with. (Being a MT customer for 15 years.) And...I also love the packaging. Back in the day, CPE's came with in Styrofoam packing, and this re...

npyoung

I see the same problem and blaming it on tcp/ip seems very bogus. So, if we have: RouterA<-(wireless UBNT 40Mbps)->RouterB(wireless MT 40Mbps, bridged RB433GLs,nstreme, dual polarity-N, 40MHz)->RouterC and all routers are not overly loaded (CPU<20%) we "should" see 40Mbps between RouterA a...

npyoung

Thanks for the tip, but tried setting tdma-period-size down to 1 from 2 ms. Not much change in throughput.

npyoung

I can confirm this same problem with the RB/411GL. Had to switch back to using nstreme from nv2. My customers about killed me during the process...after recovering from a lightning strike on a backhaul site. Most unfortunate that this information was hidden from those of us trying to improve our net...

npyoung

So, what are the run times on these boards before problems emerge? I'm seeing boards fail right at 4 years in service...but I don't know that this is the problem. My RB411's fail but still power up as far as lights go, but no ethernet, no boot. Anyone know when MT changed the design and started usin...

npyoung

So, have your problem RB411r's been in service about 4 years?

npyoung

To clarify, the third in the series failed also, after being upgraded from v.3.27->4.11 and of course, the license upgraded also. What I didn't do is upgrade firmware. What I'm doing to fix, in absence of any information at this point, is to upgrade the RB11/R's in the field that were installed in s...

npyoung

I have a rash of RB411/411r's failing in the field after exactly 4 years of service. I suspect some sort of software timer. After two that had been installed on the same day in 2008 failed, I looked at my records and checked out the next RB411/RB411r in the sequence and updated the firmware from 3.2...

npyoung

Tried it on a RB600 and it's not coming up. 5.0rc5. It's remote so I can't see what's happening. Worked fine on the bench with a RB600. It may be something up with the wireless interface.

npyoung

Ubiquiti has it. We should have it.

npyoung

BTW, noticed that as long as there wasn't much traffic going through the RB433AH's that were undergoing serial kernel failures with rc2 they would stay up long enough for me to upload rc1 and downgrade. So...if you are testing on a board that isn't in production (of course you are), you may not see ...

npyoung

Tried it on several of our RB433AH...serial kernel failures and reboots. Had to roll back to rc1.

npyoung

Hi Colbert, it's probably not NV2, as I have other links on different hardware that are pretty good in the jitter area...although I have an RB600 that is rebooting every several hours now on 5.0rc1..but others in the mix are not, so go figure (and it won't produce a supout on crash, either). I'm goi...

npyoung

One of our links, using NV2 and 5.xGHz is experiencing regular latency spikes. It's a long haul, 17mi., signal at -59, connect rates settle in at 243Mbps/270Mbps on between two RB433AH's with R52Hn feeding PacWireless 32db DB dishes . Latency is all over the map, and I've tried it on frequencies I'm...

npyoung

search the forum for hw-retries discussed many times Looked, nothing specific to upgrading from 3.x to 4.x, 5.x. BTW, I love NV2 performance--really rocks (good work!), but something isn't right in the wireless packages from 4.x upward. I mean, the difference in performance is dramatically worse. I...

npyoung

Question.. Why is it that 4.x and 5.x wireless package seem to be the most robust to date? I mean my 3.30 link was 100% all across the board, load no load, storms u name it.. Anything 4.x + doesnt seem to compare to wireless package that comes with 3.30. I don't understand this either. I mean, this ...

npyoung

On downgrade question, yes. To 3.30 from 5.0rc1 no problems.

npyoung

Same situation here. If I go beyond v.3.30 my PtMP links go to heck. What a shame, b/c nv2 with N on PtP using 5.x, links absolutely rock. But my legacy 2.4 PtMP links on the same board just start sucking air...I guess I'll need to keep my PtP hardware separate from my PtMP hardware and keep the PtM...

npyoung

Final word from MT support...you have to add the public IPs to the public interface in order to use netmap. No shortcuts.

npyoung

Sounds good, but I can't seem to make this routing work. I'm fine as long as I assign a corresponding public IP from the /24 space that I'm using in the /24 netmapped private space. So, for example, for 207.xx.xx.102/24 assigned to the public interface netmapped to 172.20.103.102/24 works great. Shi...

npyoung

I'm trying to set up netmap, and I just have one question; is it really necessary to add all the public ip addys to the public interface in order to make this work? So, for instance, I have two public /24 ranges...which means I need to add 500 ips to the public interface? (!) Is there some sort of e...

npyoung

HW retries unknown, I was in such a panic to get the link fixed. Next time I want to waste a few hours (wee hours), I'll give it another try.

npyoung

I experienced wireless problems without Nstreme being on in 4.5. Really screwed up a day, and pissed quite a few customers off. Didn't realize that the problems I had with a new link established some time ago were related to 4.x, then ran it yesterday on one of our main bhs assuming that any bugs we...

npyoung

How about the ability to specify a type of account instead of having to enter specific information for each customer account on the b.w. limitations? So, say, a global specification, like Fast with say a 3M/1M burst, with 1.5M/512K steady. That way, if Fast were to change due to say, competitive rea...

npyoung

What would also be nice is to have a type of account, say for instance, Bronze, Silver, Gold...etc that corresponds to a specific bw limit, and be able to change the settings on those types and have it change it for whereever that type of account is specified, instead of just having to specify parti...

npyoung

Thanks!

npyoung

I'm getting this error when trying to restore a general configuration I use as a template on the RB411 for customer CPEs (no sense in reentering that info again and again). The board is running V3.10. I also experienced this on the Crossroads board using V3.13.

npyoung

We had the same experience on a RB150 with 3.7. Wiped the OS off it, as far as I could tell. Had to retrieve it and use netinstall on it.

npyoung

I was hoping for some more room for user-manager. The last board we tried the user-manager on, the logs filled the memory up rather quickly and userman stopped working.

npyoung

Sorry if this sounds stupid, but I've put a CF flash card (Adata Speedy 8GB) in a RB600 and I cannot get it to be recognized. I've tried both slots, and confirmed that the card is good by plugging it into a USB/CF adapter for my desktop. Does it need to be preformatted or something?

npyoung

Hey Serge, update. Got usermanager to work (and what a great software it is), but only one hop away from the router's it's used on. So far, I've only been able to check stuff that is connected by wired ethernet one hop away, and as I said that works great. I've been testing by checking the ability o...

npyoung

Well, I've had good success in upgrading the RB532 on production boards to 3.3...until I got to the one that was very inconvenient to access, and of course, that one failed. So, tomorrow it's up to the mountain on skis...with new RB600 in hand (backpack). So beware until MT gets this solved. (BTW, I...

npyoung

Thanks Serge, but I've tried all that again and again. I've tried it using two routers in our network that are connected via ethernet, in case it's some sort of wireless issue (it's not). Any way I can check connectivity between the systems for ports 1812 and 1813 from Winbox? I've been testing usin...

npyoung

I find that User Manager works great on the same machine that it's hosted on, but not any remote. The remotes can see the User Manager machine, and vice versa, but they cannot seem to authenticate against it. Just see Radius timeout, on the client router, and the User Manager host shows no record of...

npyoung

Hi, I can get usermanager to work fine on the router it's hosted on (say, using it for user authentication as a test), but when I try it on any remote MT routers I get a radius timeout. The routers (both the usermanager host and client router) can see each other, so I'm wondering why it won't work. ...

npyoung

Confirmed that it seems to be just this type of radio (tried several of the four I had purchase to make certain it wasn't a DOA). Tried an SR9 in the RB502/532 combo on the miniPCI on the RB502 and it came right up. Plug in a XR5 and it's a no go. The light on the XR5 comes on, so it's getting power...

npyoung

The radio doesn't show up when plugged into either of these expansion daughterboards but does show up if plugged into one of the two main RB532 miniPCI sockets. Possible power issue?

npyoung

Thank you, gentlemen. That worked just fine.

npyoung

I have a problem with NATed customer(s) spamming on our router's IP address, so I want to restrict everyone that is NATed to using only our SMTP server, which is on a public IP outside of the NAT. I'm sure this is simple, but anyone have an example on how to do this? So, for example, our gateway rou...

npyoung

Errr, within bounds. But since it is the core router for our system the budget is flexible.

npyoung

I have a solar/wind WIPOP that has been running MT for about 6 years, hardware being upgraded when necessary. Up until a couple of weeks ago we had one RB532 running, but it was maxing out on CPU. We added another RB532 two RB532's running up there, while better than before, they are also maxing out...

npyoung

Or US based commercial users will not be able to use their software. The discussion below talks about the ramifications of this on innovation: http://www.eff.org/Privacy/Surveillance/CALEA/?f=faq.html Subcommittee TR-45.2 of the Telecommunications Industry Association (TIA), along with Committee T1 ...

npyoung

Thanks, Jeff, I'll give it a go.

npyoung

When these failures occur, syslog isn't showing anything other than PPPoE customers disconnecting on the effected interface. Nothing to indicate that something just tilted; just that the effected interface stops passing traffic. By the way, the interfaces so far effected are connected to two differe...

npyoung

Just had an ethernet interface (Eth6) fail in the same way on the same board. Only a reboot would bring it back to passing traffic. This is some very fragile hardware. I'm not impressed. I cannot run a reliable service across it. The RB 230 was rock-steady, but just couldn't support the number of et...

npyoung

I'm having problems on a RB530 with Eth 2. It seems to stop passing traffic now and again (the frequency of outages is increasing). The only way to bring this interface back (it shows normal operation in the CLI/Winbox) is by rebooting. Dis/Enabling doesn't do anything, changing Auto Negotion to man...

npyoung

We have a RB532 with the daughterboard running 2.9.1 and we are experiencing lockups, and ethernet interfaces that just stop passing traffic. We're running the board right at 23vdc b/c it's at a 24vdc solar site, which is in spec, but I wonder about being on the high side of the spec. I'm going to t...

npyoung

I tried the same proceedure from a RB230 V2.9rc4 to RB532 V2.9.1. Don't even get a RS-232 connection now. Any way to reinstall the software?

npyoung

I'm looking at the simple queue features in beta 11, and I'd like to address several problems, which may argue for an interface to existing software, or new software. What I'd like to see is a web page that the customer can look at their bw consumption on a hourly, daily, weekly, monthly, yearly bia...

npyoung

I really like the new? Graphing in simple queues. I'm wondering if there is any examples existing of polling that information and sending it to Cricket or somesuch a website for user feeback/accounting on bandwidth consumption?

npyoung

I've been trying to get some traffic flow data on a MT running .11 using SNMP, and so far no luck. I get data...just a string of zeros. Using MIB of 1.3.6.1.2.1.2.2.1.10.5

By the way, MT 2.9b11 loaded on a routerboard very nicely...no issues so far.

npyoung

Makes sense, I agree. But I got some Routerboards that I needed for a backhaul, and wanted to try some new features....so now I have 2.9b6 on them, and want to get some more functionality, that I can't get in 2.8...

npyoung

I'm afraid to try it. I'm running 2.9b6, and it works well (accept for having to power cycle the router to get it to load additional packages...). I'd like to try b8, but can't afford the downtime to have to rebuild the router configurations from the serial console.

npyoung

Cameron, client radio (10.61.32.xxx/24)--> MT(2.4 AP)10.61.32.24/24-->MT(5GHz station)10.61.32.22/24-->MT(5GHz AP)10.61.32.33/24bridged to ethernet-->switch--->core MT(10.61.32.1/24) All this stuff must be bridged to make it work. That's a lot of bridges. I'd route your MT(5GHz) link, using say, 10....

npyoung

Queuing doesn't work in 6, so I have rolled back to 5. I'll beta test again when queues work.

npyoung

Do simple queues not work at all, or is it rather that there are no statistics gathered? I can see that there is no feedback on data going through the queues in beta6, but I'm wondering if the queues are working anyway? Also on the idea expressed above, great! I'm wondering if there is a way to set ...

npyoung

64MB, and it's whatever ships with the Routerboards from routerboard.com. The licence is level 5. The amout of RAM is 64MB also.

npyoung

Routerboard 230's, to be exact. And they don't reboot when issued the command from 2.9beta2-5...they hang. Both of 'em. Most disturbing when hardware from other manufacturer's works without a glitch w/MT, and the Routerboards don't. The other big problem IMHO is the fact that you cannot get a comple...

npyoung

Good to hear that the Soekris is working well. I too, haven't had any problems with MT on third party hardware. Ironically, the problems are manifested on Routerboard alone, in my experience (and I have two of them to play with), and are quite frusterating with 2.9. Again, hanging on reboot (every t...

npyoung

Was able to downgrade back to beta4 OK. Still a mystery why 1) Beta5 won't load completely, and 2) why a power cycle is required after a reboot (routerboards just freeze on reboot).

npyoung

I've tried several times to get beta5 to load completely from beta4 on one of my routerboards (it loaded on another... but always just some of the packages would load initially, others had to be ftped up again, and again before being "taken"). The problem child is the wireless package (nat...

npyoung

I've got a couple of 230 Routerboards, and both of them do this. Tell them to reboot, be it from Winbox or Telnet, and they hang, with a power cycle required to bring them back. Both are running 2.9beta4.

npyoung

My experience has been good using the standard PoE injector shipped with the routerboards (as of a month or so ago) at 24vdc (24-28) off batteries.

npyoung

I've got two routerboards using the 100mW Atheros a/b card over a 17.8 mi. link, and am getting 10Mbps at 5.8, on 5805MHz using two 32dB PacWireless dishes. ACK setting is on automatic. I find that Nstreme or encryption, or 5GHz-turbo just slows things down. I also find that playing with the power l...

npyoung

I've got two routerboards using the 100mW Atheros a/b card over a 17.8 mi. link, and am getting 10Mbps at 5.8, on 5805MHz using two 32dB PacWireless dishes. I find that Nstreme or encryption, or 5GHz-turbo just slows things down. I also find that playing with the power levels just degrades performan...

npyoung

I have a NATed user base as well, and I used to limit bw the way you are approaching it. Now I just use simple queues to limit each customer by IP. It's, well, simple....

npyoung

How is this accomplished in 2.9?

npyoung

I've been playing with Nstreme on the bench with two 230 Routerboards and the Atheros a/b radios in "a" mode. Best I've been able to achieve in terms of throughput is 24Mbps, with the connect rates at 54Mbps, and this is without Nstreme enabled. Enable Nstreme and that drops to 20Mbps. I'v...

Search found 87 matches