MikroTik

ToTheCLI

Thanks for the quick response When pinging through either interface from tools ping I get a response, whenever I enable mangle even your edited ones I don't pass pings from pppoe client connected to pppoe server on mikrotik, so the issue is what is going on with the routing marks and mangle on arm!!!

ToTheCLI

I can not get mangle to work on hap ac2 with routing marks if I enable the mangle rules no ping goes through, tried 7.13.5-7.15b9 none worked. following is config pppoe client receives internet only with mangle rules disabled. Config.txt /routing table add disabled=no fib name=WAN1 add disabled=no f...

ToTheCLI

Hi, I have a 5009 with eth1 used at 2,5Gbps as WAN (FO) and I bought some S-RJ10 to connect it to a LASN Switch 24 10G ports. The issue is quite common (as I understood later): the transceiver goes so hot ! Is there a solution (no, I cannot add fan or extra heatsink)? I saw other compatible transce...

ToTheCLI

In Android IPSec identifier has to be set to something or will not connect.
I have the same problem how to solve? not sure what to add there.

Set on Android side only to any value.

ToTheCLI

Has anyone else noticed issues with firewall rules inside of VRF's (Besides Main), in the latest 7.14 release ? None of my existing firewall rules in 7.13.5 that are in my VRF's are working.

What routerboard are you using?

ToTheCLI

On my testbed Hap ac2 all releases of ros that I tried from 7.13-7.13.5 stable to 7.15b9 VRF and routing table marks is completely broken especially with mangle rules, unfortunate that mikrotik can not get its act together and release functional software this far in ros 7!!!

ToTheCLI

You can try right.cn OpenWRT firmware on the FS SFP it might work...
Do you happen to have a link and/or howto?

Contact me on Discord itsahamemario
This is the Discord server for GPON SFPs https://discord.gg/3bB42c3SMt

ToTheCLI

Additional Note: If you discover that the EEPROM information is absent in Winbox, despite utilizing a recent RouterOS version, this suggests that the transceiver's EEPROM lacks the necessary data. To remedy this, you will need to manually enter the information into the EEPROM of the transceiver. Fo...

ToTheCLI

Hi guys... I'd need some help with FS GPON ONU SFP module. I watched Tomaz's yt and bought couple of the modules myself. Instead of the Fritzbox the ISP provided another ONT - Innbox G23. I replicated serials/MACs/... as close as I could and in gtop everytrhing seems fine, but instead of passing th...

ToTheCLI

Installed my first RB5009UPr+S+IN yesterday. Picked this one as it shows a 130Watt power budget for devices. Since this is pretty small install... Picked this unit to drive 3 Cambium XV2-21X. These are pretty small APs and have a max power draw of 13 watts each. Units keep rebooting and I can't get...

ToTheCLI

Similar issue here: viewtopic.php?t=199051
Open a bug report with support.

ToTheCLI

I find it strange that this has not been fixed yet, is it a hardware issue?

ToTheCLI

Check ARP Table for duplicate's
viewtopic.php?p=1043705&hilit=arp#p1043705

ToTheCLI

What extra info is expected (Temp, Rx, Tx and etc)?

ToTheCLI

Hi, 1) Will the RB5009 traffic shape (CAKE / SQM) at 1 Gbps WAN? 2) Will the PoE power passive PoE devices like the Unifi AP AC Pro Lite? (Power method: PoE 24V Passive PoE (Pairs 4, 5+; 7, 8 return) / Power Supply UniFi PoE switch 24V, 0.5A Gigabit PoE adapter*. Max. power consumption 6.5W) 3) Wil...

ToTheCLI

I have the same issue with several mobile phones from Oneplus and Samsung this bug seems to be on mikrotiks side, Opened a ticket.
RB5009 on 7.13Stable

ToTheCLI

It's been a while since I commented in this thread because I've successfully replaced my ISP SFP GPON in one from FS.com but only now decided to make a video about it, to help others that might stumble upon this thread. Here you go: https://youtu.be/Hi7JMTojT-4 Nice video Tomaz!! If only you stumbl...

ToTheCLI

Looks like your ISP is the issue try connecting to an IPsec/IKEv2 PSK VPN tunnel from the native Android VPN Client as it uses the same ports and Protocol.

ToTheCLI

CCR2116, WireGuard isn't working, replaced it with ZeroTier, in details: - delete and re-add the peer may solve the problem but once you disconnect you can't connect back. - It shows 94bytes received, 'Handshake did not complete after 5 seconds' - Same behavior on iPhone, iPad, Windows and MacOS - ...

ToTheCLI

On Hap AC2 with wifi-qcom-ac package when setting Management Protection to Allowed or Required bandwidth does not exceed 20Mbps, and when disabled I get full speed (600Mbps). Create a ticket. In my 4011(RB4011iGS+5HacQ2HnD + wifiwave2) When config: /interface wifiwave2 security add disable-pmkid=ye...

ToTheCLI

On Hap AC2 with wifi-qcom-ac package when setting Management Protection to Allowed or Required bandwidth does not exceed 20Mbps, and when disabled I get full speed (600Mbps).

ToTheCLI

Upping this topic.
Did anyone find any improvements?
Is it worth trying to feed U6 enterprise from 5009's PoE or would I be better off ordering a separate PoE injector?

You can also use a 56V2A PSU, that will allow for 23.5 Watts to the U6 enterprise instead of 20.16 Watts with the original PSU.

ToTheCLI

I upgraded to 7.13beta1 after 7.12stable from winbox on hapac2 and then removed wireless package and then installed qcom-ac package, noticed bandwidth was so low about 20Mbps, so I reset the hapac2 without default config, and bandwidth improved, even better then with 7.12stable (600Mbps on 80Mhz wid...

ToTheCLI

Managed to get DFP-34X-2C2 working with Vodafone España NEBA connection. But be aware VLAN for internet would be not 24 (as in VF router) but 57 (I don't really understand why). PS Important update: Vodafone España obligated by law to give PLOAM_PASSWORD and PPPoE credentials by user request. On th...

ToTheCLI

I have the same issue, connected to the MikroTik with the module status showing as 'Yes,' but since I don't have the fiber yet, it seems to stay disabled. It has no status in Winbox and is italicized as 'disabled. Can someone shed some light on this? RB760iGS 7.11.2 xpon.PNG Some Routerboards and e...

ToTheCLI

What's the difference between private and bridge modes?

ToTheCLI

http://www.irouteros.com/?p=1808
Will there be a +WiFi Version of this?

Still waiting for +WiFi version of RB5009, any news?

ToTheCLI

Try this one: https://www.aliexpress.com/item/1005003515662920.html (xPON)

ToTheCLI

You should look at Meanwell power supply's, for e.g. this one is more than enough: https://www.meanwell-web.com/en-gb/ac-dc-industrial-desktop-adaptor-with-pfc-output-gst220a48--r7b That one is 48v, and given the RB5009Upr has a max amps per port of 0.42a would mean 20.16w max to one device. I foun...

ToTheCLI

The u6 ships with a 48v/.5a injector while the 5009 would provide 48v/.42a max. The u6 states the max power consumption would be 22w, which is more than what the 5009 with the default power supply can provide. You should probably look for a 57v/2a power supply (a 53v/2a might work) to power your 50...

ToTheCLI

I have a symmetrical 1Gbps connection when using the RB5009 as a peer for a Wireguard VPN server(Node close by) I get about ~800Mbps down and when I connect to RB5009 as a Wireguard server with a PC connected by ethernet I get ~800Mbps but I get ~170Mbps to the RB5009 even when connected on same Net...

ToTheCLI

*) pppoe - fixed PPPoE client trying to establish connection when parent interface is inactive;

So when parent interface is inactive what happens, does it not try to initialize connection?

ToTheCLI

Just updated to 7.10 firmware and routerboard on RB5009 everything working as expected with MA5671A.

ToTheCLI

In Android IPSec identifier has to be set to something or will not connect.

ToTheCLI

Hi, so if I understand correctly I should follow this guide https://help.mikrotik.com/docs/display/ROS/IPsec#IPsec-RoadWarriorsetupusingIKEv2withRSAauthentication But instead of "auth-method=digital-signature" I have to use "pre shared key"? Thanks Just to say that IKEv2 PSK wor...

ToTheCLI

In Android 13 IKEv2/IPSec PSK has native support in OS, How to setup the Tik as a server for IKEv2/IPSec PSK VPN tunnel?

ToTheCLI

In Android 13 IKEv2/IPSec PSK has native support in OS, How to setup the Tik as a server for IKEv2/IPSec PSK VPN tunnel?

ToTheCLI

PPPoE Scan in RB5009 works now in 7.10beta5.

ToTheCLI

Is there any way to power cycle an SFP port?
On RB5009 the SFP remains powered even when router is rebooted!!!

ToTheCLI

PPPoE Scan in RB5009 works now in 7.10beta5.

ToTheCLI

How do you receive a WAN IP (PPPoE or DHCP, VLAN)?
Also is allow fastpath in IP-Settings enabled, also try deleting all Firewall rules and test maybe it is a CPU Bottleneck...

ToTheCLI

I'm able to reach the 2.5Gbps speed using a GPON SFP and 3 PPPoE Clients with RB5009, So I don't think it is a CPU Bottleneck, Could you post more about how you configured the devices and what SFP module you used?

ToTheCLI

upgraded from 7.6 (x86), looks like "PPPoE Scan" is broken

Someone told me that is broken from 7.8
Someone told me it works on my computer.

Does that someone happen to be you!!!
On a less sarcastic note what router are you using?

ToTheCLI

Still Not working 7.9 Stable

ToTheCLI

This depends on the SFP Module you choose if they support multi-gigabit speeds (2.5Gbps)
I would recommend the Wiitek SFP+ to RJ45 Copper Modules for mikrotik as they support those speeds and are less

hot then the mikrotik SFP+ module.

ToTheCLI

On RB5009 PPPoE Scan Not working in v7.9rc4 - v7.8 Stable Regression since v7.8beta3
*) pppoe - fixed PPPoE client scan showing only one server;
please fix

ToTheCLI

2.5Gbps Fixed rate on GPON SFP (Huawei MA5671A) works but PPPoE Scan is not working (shows no entries) was working on 7.7 stable on RB5009.

ToTheCLI

Was working on v7.7 Stable not working on v7.9rc2.

ToTheCLI

For those with the RB5009 and a GPON SFP, Does Forcing 2.5Gbps rate work on v7.9rc1?

ToTheCLI

For those with the RB5009 and a GPON SFP, Does Forcing 2.5Gbps rate work on v7.9rc1?

ToTheCLI

indeed when rebooting the router the module is not restarted (I have then to manually reboot the module), and in my case if I don't do it I'm limited to 30 MB/s, instead of 500 MB/s.

How do you receive WAN IP by PPPoE or IPoE(DHCP)?

ToTheCLI

+1 for SFP power cycle

ToTheCLI

I read about using my own ONT, which might be GPON or XGSPON For GPON you might use your own GPON SFP (e.g ODI xPON SFP, Huawei MA5671A(with Openwrt firmware), etc) see this https://github.com/Anime4000/RTL960x and https://hack-gpon.github.io/ For XGSPON no such option exists your best bet is to pu...

ToTheCLI

RB5009 on 7.8 Stable does not recognize Huawei MA5671A GPON SFP at all (with auto-neg on or off) was working fine on 7.7 stable (with auto-neg on and off fixed 2.5Gbps)

ToTheCLI

What's new in 7.8beta2 (2023-Jan-20 12:27):

*) sfp - fixed reading of SFP EEPROM on single SFP port devices;

ToTheCLI

Has anyone had PVID (Tagging VLAN) working on RB5009 with ODI DFP-34X-2C2?

ToTheCLI

Hello! Using Mikrotik RB2011 + SFP GPON module, works fine.

SFP module has UART console, and it works fine, when connected outside Mikrotik.

Any ideas how to get there from Mikrotik device? Or there is no way to connect to it?

Thanks.

what is the gpon sfp model?

ToTheCLI

RB5009 2.5G SFP module support introduced in 7.7beta8 no longer appears to be working. It was working in 7.7beta8 & 7.7beta9. My ISP uses a GPON module that can link at 2.5G. With 7.7beta8 and 7.7beta9, I was able to get my full download bandwidth of ~1280Mbps by plugging the GPON directly into...

ToTheCLI

Not true. You can have fasttrack work on connections that aren't mangled. Sindy explains a lot of it here: https://forum.mikrotik.com/viewtopic.php?t=182096 Thank you sindy's solution works by making it selective, you have to add e.g. connection-mark=no-mark to action=fasttrack-connection rule, to ...

ToTheCLI

It is expected behaviour, fastpath and mangle are not compatible.

The issue is that throughput is reduced to less then 1Mbps for the connections that go to mangle pre routing mark routing , pre routing mark connection , output mark routing when allow fast path is on.

ToTheCLI

I would go with the RB5009UPr+S+IN more powerful CPU + SFP+ Port and take the fact that Wifi 6 ax is still not fully baked at Mikrotik. hAP ax³ has more powerful CPU RB5009UPr+S+IN - 350-1400 (auto) MHz hAP ax³ - auto (864 - 1800) MHz This is the main reason I am writing this post. hAP ax³ IPQ-6010...

ToTheCLI

I would go with the RB5009UPr+S+IN more powerful CPU + SFP+ Port and take the fact that Wifi 6 ax is still not fully baked at Mikrotik.

ToTheCLI

I use mangle rules on the RB5009Upr to let specific devices (by mac address) use different PPPOE connections when Fastpath is off (IP-Settings) everything works well but once I turn Fastpath on speeds Plummet to less then 1Mbps, I do not think this is expected behavior. Does anyone else encounter si...

ToTheCLI

When I removed the sfpplus port from the bridge problem went away even though Internet is on PPPOE by VLAN on the SFP.

ToTheCLI

The issue seems to affect throughput also I can not get past 500Mbps download

ToTheCLI

i think you must share this on current beta version thread

viewtopic.php?t=190351

This only happens on the RB5009Upr on both stable and beta firmware, this does not happen on hap ac2

ToTheCLI

When downloading anything or running speedtest the Tx stats on all the ethernet interfaces seem to all go up almost as if it adds bridge traffic to every interfaces traffic this does not happen to upload. Why is this happening and how to fix it? Tried both latest stable and beta firmware. Screenshot...

ToTheCLI

# cat /proc/lan_sds/lan_sds_cfg
lan_sds_mode = 4(HiSGMII PHY)
# flash get LAN_SDS_MODE
LAN_SDS_MODE=0

I can confirm it is working

By turning auto-neg off and setting it on 2.5Gbps Full-Duplex

ToTheCLI

What's new in 7.7beta4 (2022-Oct-27 09:00):

*) sfp - added 2.5G SFP module support for RB5009;

Seems it is supported now in latest beta can you check.

ToTheCLI

Is there something wrong with mangle routing marks?
I can not make a device (by src.mac address) go to secondary WAN.
Used to work on 7.5 stable

Update:
After Disabling fastpath in IP settings the mangle rules work again

ToTheCLI

A lot of GPON SFPs support 2.5Gbps(HiSGMII and 2500baseX) and the Marvell switch chip in the 5009 series also supports this mode.
Only thing missing is Mikrotik firmware support.
Please Mikrotik add support for this feature.

ToTheCLI

Problem still there tried on the 5009Upr latest stable and beta with a Wireless Access Point (Netgear WAX610) and I get reduced speed and significant latency spikes compared to 1Gbps rate.

ToTheCLI

This is support's reply "Thank you for your report! Software fix will be available for this issue in upcoming versions of RouterOS. At the moment as a workaround you could use crossover cable."

ToTheCLI

We're trying to power a Wireless Wire radio from a new RB5009 running RouterOS 7.5 while powering the 5009 with PoE. No power is delivered to the radio, and the comment field on all interfaces when we try is "poe-out status: no_valid_psu". As soon as we plug in to the power jack on the 50...

ToTheCLI

When connecting the MikroTik RB5009UPr+S+IN to an Edgeswitch 8-150W (POE+) by the first port in the Mikrotik all ethernet ports begin to flash yellow lights randomly and it becomes nonfunctioning nothing else is connected to the Mikrotik. Only when disabling the POE+ Output on the Edgeswitch and con...

ToTheCLI

Does the new RB5009UPr+S+IN have the same problem or is it fixed on those new boards?

ToTheCLI

Has the issue been fixed yet?

ToTheCLI

I learned how to setup the GPON SFP from this GitHub repository
https://github.com/Anime4000/RTL960x
It also has recommendations on which SFP to usehttps://www.aliexpress.com/item/1005003515662920.html

ToTheCLI

I Hope Mikrotik add support on RB5009 for 2500BASE-X on SFP+ Port soon

ToTheCLI

It is possible that the RB5009 will add support for 2500Gbps with auto-negotiation disabled, as they have done with other models, though it took 2-3 years before support materialized. The existing switch chip 88E6393X used in RB5009 supports 2500BASE-X natively Marvell® Link Street® 88E6393X device...

ToTheCLI

RB5009UPr+S+IN PSU Only 96w and Max power consumption 150 Watts!!
Do we need to buy additional Power Supply?

ToTheCLI

I tried VLAN 8 which should correspond to the VPC 8/35 ... But got no luck.

Try them all

ToTheCLI

I bought a ALLNET ALL4781-VDSL2-SFP for my VDSL2 17a G.Vector (ITU G.993.5) line using 1&1 in germany. It's sold as a 100Mb/s VDSL2 line and syncs at around 109Mb/s on a fritzbox 7412. Can somebody tell me if this SFP can only do VDSL or is also compatible with ADSL ? I plugged it on my ADSL li...

ToTheCLI

He is referring to HGSMII such as in GPON SFPs has been added to some switches since v7.3beta33

*) sfp - added 2.5Gbps rate for SFP+ and QSFP+ interfaces on 98DXxxxx and 98PX1012 switches (requires disabled auto-negotiation);

ToTheCLI

*) sfp - added 2.5Gbps rate for SFP+ and QSFP+ interfaces on 98DXxxxx and 98PX1012 switches (requires disabled auto-negotiation);

Can this be added for RB5009 SFP+ Port?

ToTheCLI

I have an xPon SFP and I get to O5 and see Flows but PPPoE is not connecting. OMCI Log 0x2a5e Ontg SyncTime(0x0000) 0x2a5e Ontg SyncTimeRsp(0x0000,Result=0x0) 0x2a5f OntData MibReset(0x0000) 0x2a5f OntData MibResetRsp(0x0000,Result=0x0) 0x0000 EthUni AVC(0x0401) 0x0000 EthUni AVC(0x0401) I suspect t...

ToTheCLI

Thanks for the advice, I think I will go with the RB4011

MC

Or the RB5009 looks more future proof and a better buy

ToTheCLI

I have an xPON SFP V2801F, I can achieve O5 But no Internet connection I suspect I have to Clone Mac Address of Original Huawei ONT and HWVER So I need VS_AUTH_KEY to stop reboot when I change ELAN_MAC and HWVER Parameters.
HWVER:172D.A

Please help generate VS_AUTH_KEY.

ToTheCLI

http://www.irouteros.com/?p=1808
Will there be a +WiFi Version of this?

ToTheCLI

Wireguard as client is not working even with MSS Clamp fix was working in beta 5.

ToTheCLI

Hummm so the restart is related to the change on the SN? I don't know, not sure to be honest. The thing is that even if I leave it untouched, with its original value, it does reboot when I plug the fiber. If I leave the fiber disconnected it never reboots. The only thing related to the firmware tha...

ToTheCLI

@galvesribeiro,
So I think the best approach here would be to modify the firmware on the device and/or just copy a different omci_app into it and try to run that instead.

Can that be done by SSH?

ToTheCLI

Now all we need is to be able to write back...

That is what I feared as there is no way to do that by SSH that I know of.

ToTheCLI

Progress... SSH enabled with `/bin/dropbear -R &`...

Now need to find which files need to be patched in order to make the tool to work correctly and change SLID, MAC, Serial, etc...

Good Work
Do you think it is possible to patch the UFiber Instant and change SN so that it survives a reboot?

ToTheCLI

I have the Hap AC upgraded to ROS 6.35 when I input "int eth mon sfp1" it doesn't show me the GPON side SN but it shows sfp-vendor-serial which is not what I'm looking for to recap:
Hap AC on ROS 6.35
GPON SFP Module
still can't obtain GPON-side SN with "/int eth mon sfp1"

ToTheCLI

I have the Hap AC upgraded to ROS 6.35 when I input "int eth mon sfp1" it doesn't show me the GPON side SN but it shows sfp-vendor-serial which is not what I'm looking for to recap:
Hap AC on ROS 6.35
GPON SFP Module
still can't obtain GPON-side SN with "/int eth mon sfp1"

ToTheCLI

I think it is possible to obtain the MKTKxxxxxxxx SN by reading the eeprom of the module and then searching for the hex code: 4d 4b 54 4b (which is hex for MKTK) the 8 hex digits after it will give you the rest of the SN if you have a SFP PCIe adapter then just boot linux open terminal and write: su...

ToTheCLI

Yes exactly

ToTheCLI

I think it is an oversight on Mikrotik's part not to have any way of reading the SN or changing it, I spent a lot of time and money to have the GPON connection go straight to my equipment and throw away the ISP crap but because of this oversight it is not possible.

ToTheCLI

Try using ethtool commands like
# ethtool -m <interface>
I will receive one tomorrow will see what I can find.

ToTheCLI

It turns out the SN isn't written on the module itself and the numbers written are for the product itself not what the SFPOUN uses to authenticate with the OLT and the SN starts with: MKTKxxxxxxxx (x being hexadecimal digits)

ToTheCLI

If I give you the Product No can you give me the specific SN of that GPON SFP Module? (AKA do you have a database with that kind of info)

ToTheCLI

And is the SN that authenticates with the OLT written on the box or module if not how do I find it?

ToTheCLI

Is there any way to change it?

ToTheCLI

The reason I ask is because the ISP requires the EEPROM SN format to be in 16 Hexadecimal Digits

ToTheCLI

What is the Serial Number format of the SFPONU is it 16 Hexadecimal Digits (0123456789ABCDEF)?

ToTheCLI

Is the SFPONU Module serial number composed of 16 hexadecimal (0123456789ABCDEF) digits or does it have a different format?

Search found 107 matches