RB5009 crashed

pomah · February 23, 2026, 8:55pm

Hi my new, 1 month old, RB5009 just crashed. Did not want to allow any physical connections on any of the inputs, only ether1 was responding the others did not blink “orange” (poe) or green when connected through cable.

I tried all ports with, different cables, all of them showed a green light on eth1 but on no other ports.

I ended up with a reset of the RB5009 and then I restored using my stored config.

Now to my question, how can I find out what the reason for the crash was? I have the following files on it:

RB5009.backup is the one I uploaded after the reset, the others were on the router after the rest.

jvanhambelgium · February 24, 2026, 6:20am

You can open a case with Mikrotik and provide them the “autosupout.rif” file. That is generated when stuff usually goes wrong.

Not 100% sure it can identity what caused the sudden crash but you can try.

What release are you running ?

pomah · February 24, 2026, 6:28am

Thanks, I'll do that then

I'm running 7.20.8

pomah · February 24, 2026, 8:32pm

Well it crashed today again, this time I was at home and managed to reboot back to life. Same issue suddenly the wired ports stopped working, POE still active but no green light indicating traffic.

After a reboot I got this in my logs:

liviu2004 · February 24, 2026, 8:38pm

Did you also updated the firmware?

pomah · February 24, 2026, 8:39pm

Yes, both RouterOS and firmware are 7.20.8

liviu2004 · February 24, 2026, 8:50pm

New Terminal

/export file=configname

edit the contents of this file to remove sensitive data, post the contents here.

I’m running the same RB5009 poe version for years, rock solid.

Too bad the wifi is crap, and I realize that 15 years too late.

infabo · February 24, 2026, 8:52pm

rb5009 has no wifi. so yeah, it's crap.

pomah · February 24, 2026, 8:59pm

# 2026-02-24 21:58:49 by RouterOS 7.20.8
# software id = 093K-3LRT
#
# model = RB5009UPr+S+
# serial number = 
/interface bridge
add admin-mac=78:9A:18:F7:19:AA auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment="Nokia 5G"
set [ find default-name=ether2 ] comment="CAP AX"
set [ find default-name=ether3 ] comment="POE OFF NAS" poe-out=off
set [ find default-name=ether4 ] comment="POE OFF TV" poe-out=off
set [ find default-name=ether5 ] comment=SLZB-06Mg24
/interface wireguard
add comment=back-to-home-vpn listen-port=33010 mtu=1420 name=back-to-home-vpn
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifi channel
add band=2ghz-ax disabled=no frequency=2412,2437,2462 name=chan2 reselect-interval=12h..14h skip-dfs-channels=10min-cac width=20mhz
add band=5ghz-ax disabled=no name=chan5 reselect-interval=9h..12h skip-dfs-channels=10min-cac width=20/40/80mhz
/interface wifi datapath
add bridge=bridge disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk connect-priority=0/1 disabled=no ft=yes ft-over-ds=yes name=madlub
/interface wifi configuration
add channel=chan5 comment="5 ghz" disabled=no name=5ghz security=madlub ssid=madlub
add channel=chan2 comment="2.4 Ghz" disabled=no name=24ghz security=madlub ssid=madlub
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/certificate settings
set builtin-trust-anchors=not-trusted
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp-sfpplus1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wifi capsman
set enabled=yes package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=5ghz supported-bands=5ghz-ax,5ghz-ac
add action=create-dynamic-enabled disabled=no master-configuration=24ghz supported-bands=2ghz-n,2ghz-ax
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip cloud
set back-to-home-vpn=enabled ddns-enabled=yes ddns-update-interval=10m
/ip cloud back-to-home-user
add allow-lan=yes comment=RB5009UPr+S+ name="Pixel 8" public-key="orcbwOBxKxFonN9tCzPTZcoVt88udYwBZTNkc2/ixjc="
add allow-lan=yes comment="RB5009UPr+S+ - Share 1" name="Pixel 8a Noel " public-key="5UX00koxJ5zHVr83L7+vvaWgXgdbyjtWK5G65MDepHg="
add allow-lan=yes comment="RB5009UPr+S+ - Share 2" name="Pixel 6a Levi" public-key="b1wBgqOoDHzqpMzfinBtK87b+ItfJt57pKzNHCZuBXk="
add allow-lan=yes comment="RB5009UPr+S+ - Share 3" name="Pixel 9a Nadja" public-key="Sq4U28pvxuTXmw37F5Aqab5dsh+iG7KNTQcFVdoY+CU="
add allow-lan=yes comment="RB5009UPr+S+ - Share 4" name=SP12 public-key="WxuMIskMUsUIP2WRwCZFqYiYNCPf1WbLRx0kXsBoOXc="
/ip dhcp-client
add comment=defconf default-route-tables=main interface=ether1
/ip dhcp-server lease
add address=192.168.88.21 comment="Lenovo clock 1" mac-address=70:F7:54:83:5A:82 server=defconf
add address=192.168.88.22 comment="Lenovo clock 2" mac-address=70:F7:54:83:66:06 server=defconf
add address=192.168.88.24 comment="Audio Pro C5 MKII" mac-address=70:F7:54:AC:42:11 server=defconf
add address=192.168.88.100 client-id=1:1c:c1:c:c4:72:5 comment=N200 mac-address=1C:C1:0C:C4:72:05 server=defconf
add address=192.168.88.102 client-id=1:94:45:60:6d:98:58 comment="Pixel 8 Roman" mac-address=94:45:60:6D:98:58 server=defconf
add address=192.168.88.2 client-id=1:f4:1e:57:a7:45:e2 comment="CAP AX" mac-address=F4:1E:57:A7:45:E2 server=defconf
add address=192.168.88.9 client-id=1:0:a0:98:47:fa:9d comment=HAOS mac-address=00:A0:98:47:FA:9D server=defconf
add address=192.168.88.20 client-id=1:b0:4a:39:7e:f8:ca comment=Roborock mac-address=B0:4A:39:7E:F8:CA server=defconf
add address=192.168.88.10 comment=TrueNAS mac-address=6C:BF:B5:04:65:F7 server=defconf
add address=192.168.88.30 client-id=1:28:37:2f:25:7e:9c comment="Ebike charger" mac-address=28:37:2F:25:7E:9C server=defconf
add address=192.168.88.101 client-id=1:8c:1d:55:7:21:b4 comment=SP12 mac-address=8C:1D:55:07:21:B4 server=defconf
add address=192.168.88.103 client-id=1:a6:4f:ad:27:76:a6 comment="Pixel 6a Levi" mac-address=A6:4F:AD:27:76:A6 server=defconf
add address=192.168.88.104 client-id=1:8a:5f:27:7c:53:10 comment="Pixel 8a Noel" mac-address=8A:5F:27:7C:53:10 server=defconf
add address=192.168.88.105 client-id=1:fa:f3:e2:6c:2a:b2 comment="Pixel 9a Nadja" mac-address=FA:F3:E2:6C:2A:B2 server=defconf
add address=192.168.88.25 client-id=1:88:c9:e8:d7:fd:b0 comment="Sony TV" mac-address=88:C9:E8:D7:FD:B0 server=defconf
add address=192.168.88.26 client-id=1:b4:3a:45:18:12:34 comment="Typhur Sync One" mac-address=B4:3A:45:18:12:34 server=defconf
add address=192.168.88.27 client-id=1:20:f8:3b:9:6a:bd comment="HA Voice" mac-address=20:F8:3B:09:6A:BD server=defconf
add address=192.168.88.23 client-id=1:84:b8:b8:3:32:23 comment="Lenovo Master bedroom" mac-address=84:B8:B8:03:32:23 server=defconf
add address=192.168.88.18 client-id=1:40:91:51:2a:e3:e7 comment=SLZB-06Mg24 mac-address=40:91:51:2A:E3:E7 server=defconf
add address=192.168.88.28 client-id=1:5c:62:5a:d6:25:43 comment="CANON Printer" mac-address=5C:62:5A:D6:25:43 server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" dst-port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=Europe/Stockholm
/system package update
set channel=long-term
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

pomah · February 24, 2026, 9:05pm

I had my previous RB5009 for 5 years with no issues, then it burned with the rest of the basement so I bought a new one, 1 month in and almost no load it gives some weird issues

infabo · February 24, 2026, 9:54pm

pretty much default config with some additions. did you update firmware as well? Already asked. but double check: /system/routerboard/prin

pomah · February 24, 2026, 10:19pm

       routerboard: yes         
             model: RB5009UPr+S+
     serial-number: 
     firmware-type: 70x0        
  factory-firmware: 7.8         
  current-firmware: 7.20.8      
  upgrade-firmware: 7.20.8

wfbuton · February 24, 2026, 10:22pm

Remove the serial number…

patrlind · February 25, 2026, 12:55am

Maybe you have tried this already, but try a netinstall to refresh all software from scratch in memory. Maybe something has gotten corrupted on the flash storage.

pomah · February 25, 2026, 10:56am

I’ll try a netinstall tonight when I get home, lets see if it crashes today aswell

RaresC95 · February 25, 2026, 11:41am

Netinstall it but do not restore the config directly from a backup or a script, start with the default or an empty config and by following your old config, manually set back the config step by step.

infabo · February 25, 2026, 11:44am

first step just Netinstall with keep configuration. See if this already helps.

pomah · February 25, 2026, 3:42pm

Workin with testing myself I can inform that the recommended action is to change one thing at a time.

So I’ll try to netinstall and restore using backup and in step two to start from scratch

erlinden · February 25, 2026, 3:58pm

As long as "backup" is not a real backup but instead the export that you import I agree. You might want to keep the users.

pomah · February 25, 2026, 3:59pm

I’m not sure about the difference? So far I have used a “real” backup and not restored using the terminal and manually “readding” everything, partly because I do not want to setup my B2H on all the family phones again