Something NEEDS to be done about the default passwords

Thanks, I also update previous post for reference.

Thanks for fixing the docs. Incorrect documentation is worse than no documentation.

Thanks for making the Mikro Tip about FlashFig and all your other Mikro Tips as well.
(Edit: Just notice you posted a new one to address the issue of new devices coming with preconfigured passwords)
Default passwords: WHY?!

Hopefully we may see you around the forums as well, but I realize that forums can be a time sink.

You have obviously thought this through.

I have never needed to deploy MikroTik routers, but it seems that router boot is pretty flexible in what it allows.

I did a google search for "MiktroTik FlashFig" and found an old article from 2016 Using Flashfig to bulk upgrade Routerboard devices

How much has changed in the last 7 years?

I thought it was worth cross-posting my latest RouterOS article here because it includes a method for resetting the default password on one of the new routers using netinstall-cli. It’s tested and working here. There are subtleties, but if you have a default configuration you want to apply anyway, you might as well add the single line at the end of the new configuration script file anyway.

Just got multiple new cAP AX, AX3 and 1 RB5009.
In neither of those packages was the sticker on the quickguide paper.
To soon, perhaps ?
I’ll make sure to take pictures for my own sanity …

Moving on …
just prepped one of those AX3 mentioned above with default passwd containing both 0 and O yet no strike through 0 (zero, that is).
Slightly noticeable but only with x3 zoom and the correct lighting.
S/N and MAC addresses DO show the striked zero (which is why I first thought on the password it was the letter O )
After the 3th attempt the light bulb in my head went on.

Funny … NOT !
Clearly someone who is not used to entering passwords from a label who didn’t think about avoiding that combo or making sure to use the CORRECT font everywhere.

Hi,

I would like to remove the password from my new AX3. Is this setup correct?

I will set ax3 to the basic settings and export file(backup). Then I will use the flashfig with the exported file?

Is it possible to make the AX3 to set the default config without the password from MT? I mean when you reset the devie it is asking you if you would like to keep the default pre-config?

Thank you

Well, no.

Once you get into the router, you can change the password to whatever. Or likely better to create a new account with “full” rights in /users (or System>Users in webfig/winbox) and then disable the the default “admin” name as cheap security

The default password only comes back if you reset the router to defaults (using button or /system/reset-configuration) – that will also put back the default password. And, if you want to remove even that, you need to use netinstall, not webfig. See posts from @rextended above on that one…

Last edited by bpwl on Wed Apr 19, 2023 8:13 pm, edited 2 times in total.



.

Perhaps a Netinstall container be quicker – LOL, oh wait, you need to device-[un]lock in person…

5 looks like S too… Only only have a handful of these, but that one got me.

I think it’s noted above the distributors have them, so you can ask them for it as alternative to a factorial problem.

EDIT: Maybe 0ALIM 0AYQ3G zero-alfa-lima-india-mike-zero-alfa-yankee-queen-three-golf

Maybe telnet is disabled in the default configuration, somehow?

The fact it responds with invalid username or password, would indicate it does work.
No ?

I was referring to /tool/mac-telnet which I want to say does prompt then try. But I see it’s real telnet from photos… More WAG here.

And there are 10 digits AFAIK … so even U = L I does not make sense.

Curious puzzle, but poor @bpwl

Yeah, mission accomplished 2000% here. Super secure.
Nobody’s able to get in.
Not even the owner. Surely that can not be the intention.

@bpwl: I would return it to distributor or request them the password via email based on MAC address.

That 3th character is for me U (Uniform).
Zoom out and you will see. There is no separation between what you think might be L and I.
But if you’re thinking that way, it could also be India Julliet. But still then, I think it’s Uniform.

Last edited by bpwl on Wed Apr 19, 2023 8:13 pm, edited 2 times in total.

Can your friend access using wifi ?
And then Teamviewer on Pc/Mac via 2nd cable or hotspot ?

Edit: stupid suggestion… you still need admin.

Edit2: don’t know where you live but I have one spare on my desk in Antwerp area.
If it’s urgent…

I spend 30 minutes at the wrong time to figure of the S vs 5 – I was hoping it was that…

The netinstall over VPN seem like your best bet in shity sitution – at least while numerous/tedious to do all the config/plumbing, at least it’s a series of steps (e.g. who knows a sticker could have gotten swapped so lookup may not help)… it least you be able to remove the password for good & have a recipe for next time…

Might want to have the on-site person do the unlock the container feature, assuming you get in. At least with ax3 that be option in future.

Last edited by bpwl on Wed Apr 19, 2023 8:13 pm, edited 2 times in total.