Community discussions

Search found 57 matches

  • 1
  • 2
by mada3k
Tue Mar 19, 2019 9:04 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 65
Views: 9843

Re: v6.44.1 [stable] is released!

MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces. Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly. We'll need to lab this, to provide more granular detail... Thats worrying, But I can't confirm this at home [xxxxxxxx@rba] > /ip neighbor pr ...
by mada3k
Fri Mar 15, 2019 2:51 pm
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 41330

Re: Statement on Vault 7 document release

I wasn't asking for an explanation of netinstall.
by mada3k
Thu Mar 14, 2019 9:57 am
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 41330

Re: Statement on Vault 7 document release

And thats unfortunately a security flaw itself. Preferably the whole system should be replaced on update, but at least the the complete startup-chain (kernel -> init -> rc etc..)

Netinstall is not always possible. Can be very remote or hard to reach devices.
by mada3k
Wed Mar 13, 2019 11:45 am
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 41330

Re: Statement on Vault 7 document release

I'm not sure if this is still the case, but: While I agree that a Mikrotik is "secure" by default (ships with firewall enabled and so on) and other vendors gets their exploits as well. Many vendors have their software contained in a single image file (e.g like Cisco, Juniper) that becomes replaced w...
by mada3k
Mon Mar 11, 2019 12:32 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2019: new hardware
Replies: 54
Views: 5218

Re: MUM Europe 2019: new hardware

1.5km extended ethernet sounds pointless when single-mode SFP's costs next to nothing today.
by mada3k
Wed Mar 06, 2019 6:11 pm
Forum: Announcements
Topic: February Newsletter #87
Replies: 64
Views: 11187

Re: February Newsletter #87

Is it possible that Marvell® Prestera® is the future choice for the CCR-line ?
by mada3k
Tue Mar 05, 2019 8:28 pm
Forum: RouterBOARD hardware
Topic: Burnt Mantboxes and Netmetal
Replies: 1
Views: 152

Re: Burnt Mantboxes and Netmetal

That quite a lot of soot and burn marks. Looks like far more juice than only PoE.
by mada3k
Mon Feb 25, 2019 10:27 am
Forum: RouterBOARD hardware
Topic: RB750GR3 support
Replies: 4
Views: 641

Re: RB750GR3 support

RB750GR3 handles 100/100 fine. For queues I can't tell.
by mada3k
Sat Feb 23, 2019 11:29 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 40
Views: 4433

Re: hardware idea for a multiport switch

I agree, SFP-ports is important, however I think all ports should be on the same side.
by mada3k
Sun Feb 17, 2019 10:44 am
Forum: RouterBOARD hardware
Topic: Advice me: Hardware for high performance routing
Replies: 5
Views: 468

Re: Advice me: Hardware for high performance routing

Hyper-V is slow. For 10G+ speeds you should run on bare metal - at least. Also for those speeds I think you have to either put your money big players (e.g Cisco, Juniper, Arista etc. with custom ASICs), or well chosen and tuned x86_64 hardware. CCR1072-1G-8S+ can handle some impressive loads of traf...
by mada3k
Fri Feb 08, 2019 9:32 pm
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 55
Views: 24660

Re: Why people pair UBNT APs with MikroTik routers?

People chooses UniFI/UBNT because
  • Better looks
  • Better range and performance
  • Simplier and better looking WebGUI

And all above is true - but Mikrotik is far better at routing and more in depth functions.
by mada3k
Tue Feb 05, 2019 6:31 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature request: MQTT Subscribe/Publish
Replies: 4
Views: 1179

Re: Feature request: MQTT Subscribe/Publish

I'm using NodeRed to parse syslog messages and publish event/values to MQTT (wireless clients/dhcp lease)
by mada3k
Tue Feb 05, 2019 10:27 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Decline of Mikrotik?
Replies: 102
Views: 24127

Re: Decline of Mikrotik?

It will at least give some additional protection for the winbox-protocol (that some does over the Internet) that has been exploited several times.
by mada3k
Sat Feb 02, 2019 12:22 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Decline of Mikrotik?
Replies: 102
Views: 24127

Re: Decline of Mikrotik?

I'm also curios (and somewhat worried) where Mikrotik is going nowadays. Trying to compete in the "TR-069 segment" is pointless. Big ISPs only make deals with cheap OEM's like Huawei/Compal/Technicolor where they can control everything. Ubiquti is very strong in "Prosumer" WiFi & WISP solutions. Man...
by mada3k
Wed Jan 30, 2019 6:20 pm
Forum: RouterBOARD hardware
Topic: DAC cables on CCR1036-12G-4S not working.
Replies: 3
Views: 222

Re: DAC cables on CCR1036-12G-4S not working.

CCR1036-12G-4S is gigabit only - not 10G ports.
by mada3k
Thu Jan 17, 2019 9:01 pm
Forum: RouterBOARD hardware
Topic: SFP module is extremely hot
Replies: 32
Views: 7903

Re: SFP module is extremely hot

I also noticed this behavior when mixing certian vendors. Why is that?

Does it feed with to high voltage/current or drive the transciever to fast?
by mada3k
Fri Jan 11, 2019 10:00 pm
Forum: RouterBOARD hardware
Topic: port security mikrotik crs
Replies: 1
Views: 260

Re: port security mikrotik crs

I don't think that RouterOS implents any port-security like RADIUS or 802.1x.

Cisco-style "port-security sticky" would be nice.
by mada3k
Mon Jan 07, 2019 9:29 pm
Forum: RouterBOARD hardware
Topic: MikroTik PWR Line EU - Outdoors [request]
Replies: 4
Views: 430

Re: MikroTik PWR Line EU - Outdoors [request]

If it's an temporary outdoor setup and the looks doesn't matter, just use armored multimode-fiber or outdoor cat5/6.

I people use this devices at home because running cat5/6 is not an option (concrete walls or rental apartment)
by mada3k
Fri Jan 04, 2019 12:00 pm
Forum: RouterBOARD hardware
Topic: HOW TO GET SIM CARD NUMBER
Replies: 6
Views: 585

Re: HOW TO GET SIM CARD NUMBER

/interface lte info 0 once

the look for the uicc
by mada3k
Thu Jan 03, 2019 1:13 pm
Forum: RouterBOARD hardware
Topic: LTE modem, public IP
Replies: 2
Views: 307

Re: LTE modem, public IP

I have no experience of ZTE but it should be possible to login on the router (192.168.35.1) and enable pass through mode in some way.
by mada3k
Tue Jan 01, 2019 1:40 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+RM no switch settings?
Replies: 37
Views: 3984

Re: RB4011iGS+RM no switch settings?

I agree that Mikrotik sometimes goes in to unnecessary low-price warfare. It would be better to spend some $ to use proper components for the pure non-consumer products.

I'm still curious what the future holds for the CCR line, they are an very important product, and is less price-sensitive.
by mada3k
Mon Dec 31, 2018 2:00 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+RM no switch settings?
Replies: 37
Views: 3984

Re: RB4011iGS+RM no switch settings?

Do you expect full gigabit with IP-firewall enabled trough a $45 device?

As someone mentioned, the RB4011 is not a switch, it will never be good at it.
by mada3k
Sat Dec 29, 2018 11:39 am
Forum: RouterBOARD hardware
Topic: Connector type help need
Replies: 1
Views: 178

Re: Connector type help need

Thats a test-point for wireless calibration during manufacturing, not an connector to external antennas.

To use another antenna, the signal path must be cut before entering the built in antenna. This of course is very risky and voids warranty.
by mada3k
Fri Dec 28, 2018 12:07 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+RM no switch settings?
Replies: 37
Views: 3984

Re: RB4011iGS+RM no switch settings?

Yes, Realtek is indeed a sad choice. But my guess is that Mikrotik isn't using the RTL8367 for the purpose of a ethernet-switch, it's used for "port extender/splitter" for the 2.5Gbps SGMII channels and are not actually performing any switching port-to-port. If you need to move data in non-blocking ...
by mada3k
Thu Dec 27, 2018 11:41 am
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 9
Views: 769

Re: 2*10gb ports for a CCR ?

Router on a stick works well and many SoHo routers works by this way internally.

I also don't know how a residential customer could saturate 10GbE internet link.
by mada3k
Wed Dec 26, 2018 9:50 am
Forum: RouterBOARD hardware
Topic: Supermicro AOC CGP i2
Replies: 3
Views: 361

Re: Supermicro AOC CGP i2

That looks non-standard. I guess that it's some kind of add-on module for a specific motherboard
by mada3k
Sat Dec 15, 2018 12:15 pm
Forum: RouterBOARD hardware
Topic: PWR-Line block diagram - lack of PLC interface?
Replies: 3
Views: 570

Re: PWR-Line block diagram - lack of PLC interface?

I don't have the PWR-Line but I have a smilar kit from TP-Link (AV1200 8030 something) and it uses Qualcomm/Atheros chipset. Using VLAN works fine. My guess is that the PLC-chipset (AR7420) is connected to one of the (5) integrated ports on the QCA9533 with RMII-interconnect. So it's basically Ether...
by mada3k
Sat Dec 15, 2018 11:56 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 40
Views: 4433

Re: hardware idea for a multiport switch

Is port-density an actual problem today? Especielly since we're getting affordable 10/25/40GE.

I would like to see an DIN-mounted switch of some kind that fits nice in outdoor/industrial enclousures. Maybe with 6-12 ports and some combos.
by mada3k
Sat Nov 24, 2018 11:55 am
Forum: RouterOS v6 RC and v7 BETA
Topic: v6 RC and v7 BETA
Replies: 76
Views: 12760

Re: v6 RC and v7 BETA

And hopefully some new ARM64-based hardware as CCR replacement.
Indeed. The CCR-line is a key product for many customers. It would be very welcomed with an refreshed version with similar number/type of interfaces.
by mada3k
Tue Nov 20, 2018 9:32 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2018 - New hardware incoming
Replies: 50
Views: 14103

Re: MUM Europe 2018 - New hardware incoming

Nice switches. I was hoping for an RB1100AHx4 with some 2-4 combo/sfp ports.
by mada3k
Sun Nov 18, 2018 4:32 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4
Replies: 6
Views: 1549

Re: RB1100AHx4

The bridging/switching is then most likley done in software/cpu.
by mada3k
Sat Nov 17, 2018 7:25 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1035
Views: 177257

Re: Feature requests

  • Netinstall for Linux/BSD
  • DMVPN or something smilar would be great
  • SNMP monitoring of OSPF-neighbour and BGP peer-status
  • Sectioned view in Firewall/Filter.
  • TACACS
  • 802.1x
by mada3k
Sun Nov 11, 2018 11:36 am
Forum: RouterBOARD hardware
Topic: Qualcomm IPQ8074
Replies: 7
Views: 2159

Re: Qualcomm IPQ8074

(and I like the plane/rocket style of the RAX120, it has a big WOW factor).
Personally I think those kind of routers looks absolutly horrible. Who likes a big flashing spaceship or something with 22 antennas all over the place? Gamer-routers.
by mada3k
Thu Nov 01, 2018 6:46 pm
Forum: Beginner Basics
Topic: SXT LTE kit (product code RBSXTR&R11e-LTE)
Replies: 3
Views: 483

Re: SXT LTE kit (product code RBSXTR&R11e-LTE)

How weatherproof is the SXT LTE, will it handle heavy rains and storms?

Because I can't see any rubber gaskets or cable pass through sealing. It just looks like simple hatch with an hole for the cable?
by mada3k
Sun Jul 08, 2018 2:02 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Any plans for SD WAN?
Replies: 16
Views: 4798

Re: Any plans for SD WAN?

The great concept of SD-WAN is that you let the software decide and build tunnels/routes. You just define a routing domain or logical topology and deicide what members that will be included, then the nodes establishes the routes/tunneling, whether it's Ethernet, leased MPLS or 3G/LTE.
by mada3k
Mon Jun 04, 2018 10:51 pm
Forum: The Dude
Topic: Dude not set snmp name device
Replies: 8
Views: 1787

Re: Dude not set snmp name device

I can also verify this. Seems to be a bug. SNMP hostname is ignored.

Sure, I can use the OID on the device label. But when there is a connection problem, then the device becomes just a nameless blob on the map.
by mada3k
Fri Jan 19, 2018 2:02 pm
Forum: The Dude
Topic: Dude v6 - Feature request list
Replies: 60
Views: 12448

Re: Feature request list for Dude v6

  • HTML5 Web client - we are trying to avoid Windows.
  • Run commands on one or groups devices
  • Configuration management - make sure that all devices is configured the same in some aspects
  • Central backup & collection of devices
  • View VRFs, BGP peers and other stuff
by mada3k
Fri Jan 19, 2018 11:17 am
Forum: Announcements
Topic: MikroTik used by Amazon in their cloud datacenters
Replies: 34
Views: 16493

Re: MikroTik used by Amazon in their cloud datacenters

I've sen a couple of CRR1036 in shared datacenters, used by smaller or municipal sized ISPs. Great stuff!
by mada3k
Thu Mar 02, 2017 2:29 pm
Forum: Scripting
Topic: Scripted /ip address enable/disable ?
Replies: 2
Views: 1108

Re: Scripted /ip address enable/disable ?

That did the trick. Stupid me not to try that. All tough, it never complained when running it manually in CLI.

Thanks!
by mada3k
Thu Mar 02, 2017 9:38 am
Forum: Scripting
Topic: Scripted /ip address enable/disable ?
Replies: 2
Views: 1108

Scripted /ip address enable/disable ?

I have two routers in different parts of the building, running VRRP to determinate the active one. The active node activates the ISP-facing interface, the backup node disables it (uses dhcp) However, I need to run some additional commands, specify /ip addres enable/disable in some way. But i can't g...
by mada3k
Fri Feb 24, 2017 3:28 pm
Forum: RouterBOARD hardware
Topic: wAP AC + PoE injector + HP 1820-8G
Replies: 2
Views: 407

Re: wAP AC + PoE injector + HP 1820-8G

Yes, no problems at all with a Netgear GS105E and a RB260GS. Using a 5M UTP Cat6. Sorry, forgot to mention that I've tested a couple of the other ports, and the issue remains. The ports works fine with other devices and the switches mentioned above. RouterOS 6.38.1 / FW 3.33. Ethernet1 is set to Aut...
by mada3k
Fri Feb 24, 2017 10:52 am
Forum: RouterBOARD hardware
Topic: wAP AC + PoE injector + HP 1820-8G
Replies: 2
Views: 407

wAP AC + PoE injector + HP 1820-8G

When connecting a wAP AC with Mikrotik Gigabit PoE injector (fed with 24V) to a HP 1820-8G switch, it goes in to constant linkflap (sometimes settles on 10M/FD with massive packet loss). It was no issues with a older Netgear GS105 Gigabit switch or a Mikrotik GS260G. Using 5 meters of CAT6 cable. Wh...
by mada3k
Mon Jan 16, 2017 11:12 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1035
Views: 177257

Re: Feature requests

I'm quite satisfied for the most part, but there is some things i miss from higher-end platforms.
by mada3k
Wed Jun 22, 2016 1:45 pm
Forum: General
Topic: The purpose of MikroTik firmware...
Replies: 3
Views: 614

Re: The purpose of MikroTik firmware...

For my understanding it's the bootloader (think BIOS+GRUB, uboot, redboot etc.) It might even contain some board-specific configuration (GPIO, CPU-freq, Memory addresses etc).
by mada3k
Thu Jun 02, 2016 11:29 am
Forum: RouterBOARD hardware
Topic: RB922UAGS-5HPacD, ether1 broken?
Replies: 4
Views: 891

Re: RB922UAGS-5HPacD, ether1 broken?

I never used the jumper/pads, did it in CLI (/system reset-configuration) But for what I understand, you simply should short the connection between the pads som something conductive. Anyways.. My problem got solved. The antenna was to close to the Ethernet-chip, causing it to reset. When a moved the...
by mada3k
Wed May 25, 2016 2:50 pm
Forum: RouterBOARD hardware
Topic: 100Mbps VPN
Replies: 6
Views: 1183

Re: 100Mbps VPN

I use two hAP with IPSec tunnel. Since it lacks crypto-offload, it maxes out about ~30Mbps I suggest IPSec with some board with crypto-offload in hardware. OpenVPN support on RouterOS isn't that great (and IPSec is much better for permanent/static tunnels) If security is not a concern, you could use...
by mada3k
Sat Jan 09, 2016 5:10 pm
Forum: RouterBOARD hardware
Topic: 256-bit OpenVPN @ 200/200 mbps
Replies: 14
Views: 10666

Re: 256-bit OpenVPN @ 200/200 mbps

OpenSSL is 100% CPU based and single threaded. In order to achieve what you want you will need a high-mhz CPU. X86 is really the only option. Not entirely true. OpenSSL can take advantage of kernel-module based crypto engines (/proc/crypto) Some ARM/MIPS hardware actually has crypto offload hardwar...
by mada3k
Fri Jan 08, 2016 10:30 am
Forum: RouterBOARD hardware
Topic: 256-bit OpenVPN @ 200/200 mbps
Replies: 14
Views: 10666

Re: 256-bit OpenVPN @ 200/200 mbps

400Mbps troughput is quite a lot. You will either need a beefy CPU or SSL/crypto-hardware.

Not use if any of the Mikrotik's have it.
by mada3k
Wed Jan 06, 2016 2:42 pm
Forum: Wireless Networking
Topic: AR9287 problems and results
Replies: 6
Views: 1712

Re: AR9287 problems and results

I found an AR9287 in a old laptop. My RB922UAGS with 6.33.3/wireless-cm2 detects it and lists it, but unable to use it.

AR9287 Wireless Network Adapter (rev: 1)
Vendor ID 0x168c
Device ID 0x002e

Did your AR9287 work?
  • 1
  • 2