Logged a support ticket with Mikrotik and get the following response:
Hello,
By checking your supout rif file, the led are disabled, please recheck the configuration and reset/ reinstall the device.
MikroTik support offers assistance if there is a problem or bug with RouterOS or other MikroTik products.
If you require assistance with configuration, we ask you to contact the company from which you did purchase this product:
https://mikrotik.com/buy
If you require premium support, then you can contact our consultants in order to get assistance with network planning and/or configuration:
https://mikrotik.com/consultants
You can also try to ask for help on our user forum:
forum.mikrotik.com
Or you can learn from our software manuals:
https://wiki.mikrotik.com/wiki/Main_Page
https://help.mikrotik.com/docs/
Best regards
So pretty much out of luck with their support. I had already preformed a configuration reset and there was nothing ‘disabled’. They took the time to look at the supout file but couldn’t tell me where the LED is evidently ‘disabled’ (it isn’t). I performed a RouterOS upgrade to 7.2.3 tonight, wiped configuration and didn’t apply the default config so a blank slate… still no power LED. Its not hardware because it comes on at boot and then turns off.
Reset to default config again and still no LED. The ‘dark-mode’ script is default config. I tried disabling the /system routerboard mode-button and rebooting but it made no difference.
❯ ssh admin@192.168.88.1
Warning: Permanently added '192.168.88.1' (RSA) to the list of known hosts.
admin@192.168.88.1's password:
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 7.2.3 (c) 1999-2022 https://www.mikrotik.com/
Press F1 for help
-------------------------------------------------------------------------------
The following default configuration has been installed on your router:
Welcome to RouterOS!
1) Set a strong router password in the System > Users menu
2) Upgrade the software in the System > Packages menu
3) Enable firewall on untrusted networks
4) Set your country name to observe wireless regulations
-------------------------------------------------------------------------- TE CPE Router with wireless AP:
IP address 192.168.88.1/24 is set on bridge (LAN port)
DHCP Server: enabled;
DNS: enabled;
wlan1 Configuration:
mode: ap-bridge;
band: 2ghz-b/g/n;
tx-chains: 0;1;
rx-chains: 0;1;
installation: indoor;
wpa2: no;
ht-extension: 20/40mhz-XX;
wlan2 Configuration:
mode: ap-bridge;
band: 5ghz-a/n/ac;
tx-chains: 0;1;
rx-chains: 0;1;
installation: indoor;
wpa2: no;
ht-extension: 20/40/80mhz-XXXX;
WAN (gateway) Configuration:
gateway: lte1 ;
ip4 firewall: enabled;
ip6 firewall: enabled;
NAT: enabled;
Login
admin user protected by password
-------------------------------------------------------------------------------
You can type "v" to see the exact commands that are used to add and remove
this default configuration, or you can view them later with
'/system default-configuration print' command.
To remove this default configuration type "r" or hit any other key to continue.
If you are connected using the above IP and you remove it, you will be disconnected.
Confirming configuration
jan/02/1970 00:00:17 system,error,critical router rebooted without proper shutdown, probably power outage
jan/02/1970 00:00:18 system,error,critical router rebooted without proper shutdown, probably power outage
jan/02/1970 00:01:06 system,error,critical login failure for user from 38:C9:86:36:87:04 via winbox
jan/02/1970 00:00:18 system,error,critical router rebooted without proper shutdown, probably power outage
jan/02/1970 00:01:07 system,error,critical login failure for user admin from 192.168.88.2 via winbox
jan/02/1970 00:01:09 system,error,critical login failure for user from 192.168.88.2 via winbox
[admin@MikroTik] >
[admin@MikroTik] > export show-sensitive
# jan/02/1970 00:05:32 by RouterOS 7.2.3
# software id = 8DD5-P647
#
# model = RBD53G-5HacD2HnD
# serial number = C8CA0CB0B626
/interface bridge
add admin-mac=48:8F:5A:11:24:D8 auto-mac=no comment=defconf name=bridge
/interface lte
# SIM not present
set [ find ] allow-roaming=no band="" name=lte1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=MikroTik-1124DD wireless-protocol=\
802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=MikroTik-1124DE \
wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system routerboard settings
set auto-upgrade=yes
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
\n :if ([system leds settings get all-leds-off] = \"never\") do={\r\
\n /system leds settings set all-leds-off=immediate \r\
\n } else={\r\
\n /system leds settings set all-leds-off=never \r\
\n }\r\
\n "
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
Is there way to wipe NVRAM completely and recovery from netinstall? Not sure if there is some setting that is not being wiped when performing the /system/reset-configuration no-defaults=yes
The power led comes on at boot and then turns off. Interestingly that factory dark-mode script will turn off the lte, ethernet and wifi LED’s and turn them back on again, it has no effect on the power led.
