- Public - talk.mikrotik.com.au

Re: RouterOS 7.24.5 and Router IDs on BGP Sessions
by Christopher Hawker 14 Oct '26

14 Oct '26

I've tried both 3.43 and 4.4, both yield the same result. Issue looks to be with ROS and not WinBox itself. Regards, Christopher Hawker On Wed, 14 Oct 2026 at 07:10, Spiro Bombos <spiro(a)itcentre.tech> wrote: > Which version of winbox are you using > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* Christopher Hawker via Public <public(a)talk.mikrotik.com.au> > *Sent:* Wednesday, 14 October 2026 00:26:57 > *To:* public(a)talk.mikrotik.com.au <public(a)talk.mikrotik.com.au> > *Cc:* Christopher Hawker <chris(a)thesysadmin.au> > *Subject:* [MT-AU Public] RouterOS 7.24.5 and Router IDs on BGP Sessions > > Hello all, > > I wanted to see if anyone else is able to either replicate or confirm > this... > > I've just deployed 2 x CCR2004-1G-12S+2XS running 7.24.5, and configured a > transit and peering session on each with an iBGP session between them. > Config all went well. Except for one thing. > > I set the Router ID on each session in Winbox, restart the router, and the > router ID does not appear to stick. Also happens when enabling or disabling > connect or listen on the same session. > > This appears to be an issue on 7.24.5 stable and 7.23.8 long-term. Went as > far back as 7.24.2 stable and it's still got the same issue. > > Regards, > Christopher Hawker > _______________________________________________ > Public mailing list -- public(a)talk.mikrotik.com.au > To unsubscribe send an email to public-leave(a)talk.mikrotik.com.au >

1 0

RouterOS 7.24.5 and Router IDs on BGP Sessions
by Christopher Hawker 14 Oct '26

14 Oct '26

Hello all, I wanted to see if anyone else is able to either replicate or confirm this... I've just deployed 2 x CCR2004-1G-12S+2XS running 7.24.5, and configured a transit and peering session on each with an iBGP session between them. Config all went well. Except for one thing. I set the Router ID on each session in Winbox, restart the router, and the router ID does not appear to stick. Also happens when enabling or disabling connect or listen on the same session. This appears to be an issue on 7.24.5 stable and 7.23.8 long-term. Went as far back as 7.24.2 stable and it's still got the same issue. Regards, Christopher Hawker

1 0

MikroTik GPON
by Mike Everest 08 Oct '26

08 Oct '26

Hello! Apparently MikroTik product development team are considering plans to release a new line of GPON equipment and seeking advice on what OLT products by other manufacturers should be prioritised for support - Huawei, ZTE, FiberHome, other? Cheers! Mike. ---------------------------------------------------------------------------- -------- DuxTel Pty Ltd <https://duxtel.com> https://duxtel.com <https://store.duxtel.com> https://store.duxtel.com 1300-DUXTEL (+61-3-5273-4905) The Premier Distributor for MikroTik, RF Elements, Mimosa Wireless in Australia and Pacific Region. Data Network Solutions: Hardware, Software, Training, Consulting ---------------------------------------------------------------------------- -------- Follow our social pages for news and updates: <https://www.linkedin.com/company/duxtel> https://www.linkedin.com/company/duxtel <https://fb.com/duxtel> https://fb.com/duxtel <https://x.com/duxtel> https://x.com/duxtel ---------------------------------------------------------------------------- -------- Subscribe to our (quarterly) Newsletter: <https://duxtel.com/news> https://duxtel.com/news

1 0

MikroTrick and CVE
by Noel Butler 09 Sep '26

09 Sep '26

Since I've not heard or seen this before today.... (albeit a week late even) Cert Poland released this "Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended " But we all secure ssh anyway... right.... https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-activ… https://mikrotik.com/supportsec/september-2026-vulnerability/ -- _Regards,_ _Noel Butler_

2 1

Claude and Mikrotik. Wow!
by Malcolm Faed 20 Jul '26

20 Jul '26

Hi all, I've been meaning to post this for a while. I was struggling with IPv6 config on Aussie broadband. I could see that my config probably should have been working but it wasn't. So I called in my 'expert'. I opened a command prompt (Windows) and ran Claude in CLI mode. I didn't want to give Claude write access to the router, so I made a separate account it could use to SSH into the 'tik with read only permissions. Then the fun started. Claude found I had putty installed in path so used that for SSH. After some mucking around with authentication and keys, it got an export of the config. Then it made various suggestions and I asked it to respond with CLI commands for copying to winbox terminal. I checked each command for sanity before pasting it into the terminal. Iteratively it helped get the config right by searching online for ABB related issues, reading the MT docs, enabling verbose logging for DHCP, reading and disecting logs,etc. This blew my mind. Then I set it to optimise my network (5 x Mikrotiks including 2 x APs and the gateway.) It downloaded the configs diligently from each device and it recommended various optimisations that I had missed, or overlooked over years of firmware updates. Something on my mind was turning one MT into a honeypot. I gave it R/W access to a less critical device and told it what I wanted. Logging, email alerts, an extensive service list, and lo and behold, it built up and tested the configuration, including scripts to email summaries of access to the honeypot. Don't panic about losing your job to Claude. You really need to hold its hand and direct it! Another task it did for me was to update my years old FW update scripts and my backup to email scripts. I did find it helps to tell claude what version of FW you are using to reduce the number of erroneous commands. Anyway, if you haven't tried it, give it a go. BTW, would love to see another MUM occur one day. All the best, Mal _____________________________ email:malcolm@faed.name mobile:0409 601 747 Blog http://malfunction.faed.name _____________________________

3 2

MACsec for Dark Fibre
by Christopher Hawker 07 May '26

07 May '26

Hello folks, We've got a dark fibre circuit being delivered over the coming weeks. We've ordered 3 x CRS326-24S+2Q+RM (one for each end plus a cold spare). Our plan is to route local network traffic over the service, which obviously requires us to secure it through some form of encryption. This then leads me to my next question. Some people I've spoken to are telling us to run an IPsec tunnel across between the two FortiGate appliances we have at either end, some are telling us to look at MACsec to offload the traffic from the L3 side of things onto L2. How new is the MACsec implementation on the CRS326? What performance benefits or detriments are we likely to see from using MACsec as opposed to IPsec tunnels? The only reason I'm considering it is because it reduces the IP overhead and reduces the workload on the FortiGate appliances. Regards, Christopher Hawker

3 2

Greasy RB4011
by Karl Auer 24 Apr '26

24 Apr '26

I have come into possession of an RB4011iGS+5HacQ2HnD-IN. It works, but its life was spent in a cafe, and the outer casing at least has a thin layer of grease from (I guess) aerosolised grease in the air around the fryers. The top is worst, the bottom and sides seem much less affected. The four antennas are very greasy, and one seems broken. I haven't taken it apart yet to see if the innards are greasy too (don't have a small enough allen key). As it is passively cooled it seems likely that it'll be OK. It was running 24/7 in that environment, so I think anything that was going to catch fire would have done so by now :-) So I have two questions! 1: What's the best way to get the grease off (and possibly out of) this thing? Isopropyl alcohol doesn't do much. If I can get the PCB out of the case I might just wash the case with detergent and a brush :-) If I'm carefull I could probably do the same with the antennas. There are people on the Internet saying to do much the same thing with the PCB as well but... 2: Are the antennas on this model replaceable? They don't seem to want to unscrew or unplug. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 2

DuxSpot - a horror movie still
by Karl Auer 19 Jan '26

19 Jan '26

Dunno if the list accepts image attachments. If it does: This is a pic of a DuxSpot access point, as recently adjusted by the customer. The cover has been removed and the antennas splayed out. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

3 4

Monitor RAID on ROSE
by Steve Sugden 14 Jan '26

14 Jan '26

Hi All, I am looking for a good way to monitor the RAID state, disks, and other components on a ROSE server. I would prefer a solution similar to how one might monitor a NAS using SNMP. Do you know if there is a tool or method for this, or do you have any other suggestions? Thanks, Steve -- Steve Sugden *Director* *Valve Networks Pty Ltd*ABN: 31 168 442 288 ACMA Carrier Licence: 447 Office: Level 3, Space Building, 328 Scottsdale Drive, Robina, QLD, 4226 Phone: 1300 458 136 | Mobile 0413 440 479 Email: steve(a)valvenetworks.com.au | Web: www.valvenetworks.com.au

4 5

Bandwidth oddity/problem
by Karl Auer 15 Dec '25

15 Dec '25

We have a 100% MikroTik network. When we run a speedtest while directly connected (Ethernet) to our gateway router, which is connected to the NBN on an FTTP service, we see expected results: Over 250 down, over 100 up. Three 10G fibre hops, a switch, a 1GB fibre hop and another switch later, those numbers are very slightly lower. All good. BUT: Connected via 5GHz wifi to an access point attached to the first of the abovementioned switches, we get the same download speeds, but only around 35 up. With essentially no other traffic on the wifi, the test device (a laptop) no more than three metres from the access point, and with no intervening objects. My thinking is this has to be a limitation in the test device's wifi or a limitation in the access point (MikroTik CAP aX). Not sure how to prove it one way or the other. We get the same result on three different laptops, but they are all similar vintage and same manufacturer (Lenovo). Is there any way this could be a *configuration* issue? It's very consistent. Am I ignorant of a known asymmetry in 5GHz wireless speeds? Hoping for ideas, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au, he/him) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 Please feel free to deal with this email during your own working hours.

5 9