How to enable ROMON correctly? (I have three switches with identical ID)

I enabled ROMON and noticed that three of the switches have an identical ROMON id.

This is the config:

/tool romon
set enabled=yes id=00:00:00:00:00:00
/tool romon port
set [ find default=yes ] cost=100 disabled=no forbid=no interface=all

There is an additional line where I set the three secrets.

However, three routers are the same. Not sure why. I can set ID manually, but not sure to what to default?

What MAC adres should be set as ROMON ID?

EDIT: When I just enable ROMON like this, it assigns an unique MAC to each router and I don’t touch it afterwards. Not sure what to do now.

Good question.
I leave it blank/deselected and then it will take bridge MAC address on most of my routers (which usually makes most sense).
It should be a unique identifier or you may run into problems further on when using romon.

OK, so played with the setting and one one CRS328 when set again to 00:… it took up MAC from the bridge, and on the other it did not. I tried setting the bridge mac and removing the setting again a few times, but it again defaulted on a specific MAC? I can’t find on the device.

I have a management port on all of the devices - should I maybe set ROMON ID as a MAC from management port, or manually set the bridge one?

In the end it doesn’t matter as long as it is a unique value.

I will set it to MGMT port MAC then by default, as the native functionality does not provide unique ID.

Thanks

I wouldn’t not mess with the “ID” – leave as default/unset. It will be automatically be assigned. I’ve used it for years, and never messed with id / mac-address, only secret.

The “secret” on all routers DO need to MATCH (or all be blank).

When enable, do the 3 routers all show up in the “/tool/romon/discover”? If 3 show up… it may be how your using winbox+RoMON, as that part can be confusing

Unfortunately, for me three different switches gotten the same ID. When I connected to ROMON relay, the names alternated in the same spot. What should I have do?

Perhaps limit interfaces= to where you want RoMON?

I guess you can use id=00:00:00:00:00:01 id=00:00:00:00:00:02 id=00:00:00:00:00:03 since RoMON used different ethertype & likely best it’s NOT same as anything else. But I’ve let it figure it out and never seen an issue… so I may not be much help.

Hm. TBH I thought the whole point of ROMON is to leave it turned on all interfaces (except WAN)?

From online resources I searched for, they all stated that I just let it make its own ID, however IDs quite clearly duplicated on me (I checked in each config), so I didn’t know what to do?

(And I will admit that I don’t fully understand how romon works…)

Maybe you actually have duplicate mac-address on the bridge interface someplace & it’s not an RoMON issue? I’d really use leave id= unset.

If it’s switching look at the mac-address it’s switching between, and compare with /ip/arp/print and /interface print proplist=name,mac-address.

“all” should be fine, just suggestion to troubleshoot. But I’m not thinking you may have dup mac’s.

RoMON should just work, as long as connections are all ethernet/ethernet-like. The other thing to try is removing secrets, to see if that has an effect. Once you saw it working, trying secrets again.

I did compare. The MAC used did not appear anywhere else.

As for the second point I did not check that, but I assumed (and kind of was right about it) that if the MAC is the same, several devices will be under same ID, that is why it alternated as it enumerates constantly.

Same here. I never set anything there. Not even selected and leave empty.
Just unset.

Maybe this is related? v7.12beta7 has an RoMON fix…so maybe something was/is broken…

What version are these RoMON problems happening?

Nope, this is about terminal dumping with error message about not being tty when connecting through ROMON.
Had the pleasure to see it a couple of times, 7.12b3.

Oddly enough, connection through WG to that same device worked flawlessly.

When there is one bug… RN’s in things that I think are working worry me :wink:

I don’t regularly use RoMON, but have it enabled. But just tested winbox connect to a local RoMON 7.12beta7 test box, which is also connect via ZT to RoMON-enabled network. It lets me connect 2 hops away to MIPS routers that don’t have ZT. So it’s not generically broken.

For me it was on 7.11.2.
I reported this to MikroTik, we will see if they will consider it a unusual behaviour.

I also have problems with romon on CRS318-1Fi-15Fr-2S it keeps changing and disconnecting my winbox. On the remote switch I manually set an ID equal to the MAC Address of the ethernet port connected to the main router.
it seems to work

Maybe you should report it. When I did then could not replicate and after setting the address manually it worked OK for me.

it keeps changing

Bridge addresses change when ports go up/down (up/down like wifi interface does when clients are connected or not). Set “Admin. MAC address” on a bridge, to keep it steady.

playing with ID of Romon on v7.14beta4, will stop acess to the router, so u need to reboot it