Hap ax3 bricked? Can't load the configuration, can't net install neither

[redstoneminer]

Hi,
received it yesterday, configured the wifi and static ips for the dhcp server, configured the openvpn client to connect to my openvpn server, everything was working fine last night, today I decided to turn off the openvpn interface, routing tables and rules related to that, worked fine, few hours later the router stopped responding…

Rebooted the router normally

Rebooted to default settings

Rebooted in netinstall mode

Netinstall on windows 10, could not detect any interface(maybe because it can’t detect the router?)

---

Winbox 4, connecting, doesn’t load the router interface, two messages show up at times:

If I connect with the MAC

1. Too many resends. The other part is not acknowledging data receivement. Timeout.
2. MAC Syn Connection Timed Out

Can’t connect to 192.168.88.1

---

With Winbox 3.43 no errors appear, but it loads the interface, displays this then drops the connection off:

Attached two captures for the winbox 4 and 3.43, not sure if this is helpful

wireshark_captures_winbox_4_343.zip (12.9 KB)

I have also tried to use all the ethernet ports, same thing.

Netinstall won’t work, disabled all the interfaces, firewall, restarted the computer.

---

This is important, I measured the PSU included and the readings are very odd, from 8 to 16v, I changed it for a 14 fixed DC volts PSU that I had, but it is 1000ma, not sure if it is enought for the router or if the faulty PSU burned part of it’s neurons.

Honestly, I don’t know what else to do, so I will really appreciate any help.

Thank you
Martin

[anav]

Probably threw up on the OpenVPN, I only feed my devices with Wireguard VPN.

Netinstall is the only thing I would try..........

Reminds me of this song....... Brick Baby that's what I'm gonna throw upside your head!

Nuthing but the blues, Albert Collins, AC Reed on sax, Casey Jones on drums, and Johnny B. Gaden on base, the best version of the band, which I got to see live a number of times circa 1980!

https://www.youtube.com/watch?v=IXwO4tQWKck

[redstoneminer]

it was working with OpenVPN, I disabled that in the morning to access a page that doesn’t like that kind of IPs, so it was working, I suspect on the PSU to be honest… But is it dead? I may try tomorrow from a raspberry pi

[Amm0]

@redstoneminer

Netinstall on windows 10, could not detect any interface(maybe because it can’t detect the router?)

It's tricky to get netinstall working on Windows, you have to pay attention to the directions in docs (typically the firewall).

@redstoneminer

This is important, I measured the PSU included and the readings are very odd, from 8 to 16v, I changed it for a 14 fixed DC volts PSU that I had, but it is 1000ma, not sure if it is enought for the router or if the faulty PSU burned part of it’s neurons.

Max power draw is 15 watts without "accessories"... so 14V*1A is lower than max power of hAPax3. And something like a VPN is going to use the CPU, thus need more power. So does seem power may not be enough, and router turns off...

Typically a hard crash from power failure does not corrupt the configuration, but certainly possible – especially as some components may start failing before others if you're tight on power...

But I doubt you burned it out it's "neurons", more likely corrupted the flash file system, and also Netinstall being a PITA on Windows to get working.

[redstoneminer]

do you recommend me to use the netinstall cli for linux instead of using the windows netinstall?

[Amm0]

If you have a Linux box, that's often easier for netinstall. I'd try that if you have it.

[mkx]

Before trying with netinstall, definitely connect a beefier power adapter. If device will panic (due to tight power budget) during netinstall, that can cause real problem.

[jaclaz]

You should get (and keep in your toolbox or in the drawer of "things that may come useful one day") one of those "universal" power bricks for laptops and similar, they come with a set of connectors and have usually selectable voltage output 12V /15V/16V/18V/19V/ 24V, typically with 60W or so.

The original power brick coming with the Ax3 is a 24V 1.5 A one, if you measure 8-16 V on it is definitely dead.

A 14V 1A is a bit short on requirements, you never know what these adapters can actually provide, usually they are not current limited (so even if marked 14V 1A they may provide something more, like 1.2A) but it could well be that it is providing something less, like 0.8-0.9A.

In any case, wait until you have a proper power supply before attempting netinstall, netinstalling with a flaky power supply is a perfect recipe to risk bricking a device.

[redstoneminer]

I enjoy too much buying stuff to be used some day indeed, but I don’t have that one exactly, I’m managing to get that PSU before net installing the brick..

[redstoneminer]

since raspberry pi is not supported I launched my USB with ubuntu 24, ran the netinstall cli, router doesn’t responds to the commands..

this image is the router status after any of the boot types:

1. remove the power cable
2. press the reset button
3. first led status(fixed blue I think), first boot type
4. second led status(blinking green or yellow), second boot type
5. third led status(stopped blinking, fixed green or yellow), third boot type
6. release the button

I tested, the third boot type, also tested first type, then third type…

please confirm me the death, and the departure to the router dimension. So I can proceed with the funeral arrangements.

less than 24 hours it worked..

thank you

Martin

[Amm0]

Same steps. Hold it for 7 seconds (between 5-10), and it go to defaults — that really should work without netinstall. MikroTik suggests Hold this button until the LED light starts flashing, and release the button to reset RouterOS configuration to default., but I just wait 7 seconds.

If you want to netinstall, hold for at least 15 seconds. There is no 1st boot, 2nd boot, etc., there are just different modes, CAPsMAN mode that happen between 10-15 seconds.

But in all cases it is absolutely critical the button is pressed when power is re-applied - which can be tricky logically.

Finally keep in mind, you'll need to use Wi-Fi or ether2+ to access the router after it goes to defaults, since ether1 will be firewall protected.

[redstoneminer]

I did that for 20 seconds, same results

[redstoneminer]

I ran tcpdump and I’m seeing the incoming packets from the router, that is happening from the port eth5, doesn’t happen on port eth1 from the router..

this was pressing the reset button for at least 15 seconds, and, without the reset button pressed, it outputs the same. So it is the natural state of this router

[jaclaz]

It is well possible that you are hitting one of the known issues with netinstall (it is picky/tricky).

A modern Linux may have some firewall settings that need to be disabled.
The "known to surely work" approach (though a tad bit complex) is using a VM, see:

https://tangentsoft.com/mikrotik/wiki?name=Run%20NetInstall%20in%20a%20VM

[redstoneminer]

I’m pretty busy this week, but I will try next week trying to use netinstall on windows 11, if not success, then I will try the VM option, thank you

[infabo]

you do not need to specify IP when using "-i" flag.