Community discussions

MikroTik App
 
ffries
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Wed Aug 25, 2021 6:07 pm

Unlocking rule without serial access [Fixed]

Sun Jan 09, 2022 12:58 pm

Dear all,

I am running GNU/Linux, so I am using only serial console and https admin.
Currently, I am testing the RB5009UG+S+IN and I locked it with a wrong IP firewall rule.

Is there a way to unlock it?
I am quite surprised there is no unlocking rule (like under OpenWRT),.
I am thinking about allowing TCP port 22 on an ethernet port to allow unconditional SSH access.

What would be your recommendation?

Kind regards,
FF
Last edited by ffries on Sun Feb 06, 2022 6:32 pm, edited 2 times in total.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11444
Joined: Thu Mar 03, 2016 10:23 pm

Re: Unlocking rule without serial access

Sun Jan 09, 2022 1:12 pm

For starters get winbox ... although it's windows executable, it runs just fine under wine on linux.

Winbox allows MAC connectivity and that one is not subject to IP (or IPv6) firewall. Blocking this access is done under /tool mac-server sub-tree.

Another solution is hardware (involves wireless): WOOBM.

Next time you perform potentially dangerous configuration, enable safe-mode (available in both GUIs and CLI). If management connection breaks (due to any reason, but most often that's due to new configuration), device will revert configuration to state at point safe-mode was enabled - so make sure you exit safe mode when you're done before manually closing management connection.
 
sindy
Forum Guru
Forum Guru
Posts: 10206
Joined: Mon Dec 04, 2017 9:19 pm

Re: Unlocking rule without serial access

Sun Jan 09, 2022 2:37 pm

Instead of Winbox, you may also use mac-telnet on another Mikrotik device if you happen to have one. This includes a CHR.
 
ffries
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Wed Aug 25, 2021 6:07 pm

Re: Unlocking rule without serial access

Sun Feb 06, 2022 6:30 pm

Many thanks for the information.
 
ffries
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Wed Aug 25, 2021 6:07 pm

Re: Unlocking rule without serial access [Fixed]

Sun Feb 06, 2022 6:33 pm

Next question: how to disable Woobm-USB on a Mikrotik device?
i.e. how to disable USB completely.

Who is online

Users browsing this forum: Bing [Bot] and 78 guests