June 2019 - Public - talk.mikrotik.com.au

Axiom Cyber Shield
by Philip Loenneker 27 Jan '21

27 Jan '21

Hi all, After seeing their presentation at the Melbourne MUM, we've been having a look at Axiom Cyber Shield. Is anyone on here using it and happy to provide some feedback, on-list or off-list? It certainly sounds like a good product, but I only seem to be able to find sales pitch information, not unbiased reviews. Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 1300 792 711 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

3 7

USB lte/ppp hardware minus nat
by Aaron Chidiac 25 Jun '19

25 Jun '19

Hi All, As many of you on this list may of experienced, a typical USB LTE modem done by Huawei (i.e E3372 or E8372) has a fun feature called ‘hilink’ which makes it near-impossible to expose the WAN IP directly from the Mikrotik (nat you can’t disable), I’ve spent quite a bit of time looking at forums/learning russian to force it into ‘stick mode’ which would allow just basic ppp but I have not been successful (flashing the stickmode firmware fails when your modem is at a certain hilink version – plus it’s a huge list to get it there so not very feasible if were selling these often)… So my question is. Does anyone have a USB LTE modem working in Mikrotik without the NAT/DMZ/router mode? Whether it be a ppp interface or LTE. We are aware of the newer wAP LTE Kit and have a few of them out working perfectly (Thanks DuxTel & Mike!) in passthrough mode for failover but we want to see what options are there for USBs. We have an Optus layer 2 setup so we chuck our IPs on it. https://wiki.mikrotik.com/wiki/Manual:Peripherals is a good list; but a modem that’s listed as ‘working’ may still have the double NAT situation so we are hesitant to go out and buy 10 different USB modems to see which works. Thanks, Aaron

3 3

Core Routers and Connection Tracking
by Shane Clay 24 Jun '19

24 Jun '19

Hi All We have a few CCR1072's as our border routers, core routers and PE routers. They are pure routers (OSPF, BGP, Routing) with no NAT, Mangle, etc. They just route packets around on public IPs. We're providing internet services to our customers and our IaaS environment. In this scenario it makes sense to me that we would disable connection tracking. Extra over head with no real value? However, once you turn this of you lose the ability to use Established/Related rules in your firewall input chain, making DNS/upgrading/NTP etc a bit of a pain since return packets are dropped. So, I'm curious, are others using CCR's in these scenarios? Do you have connection tracking on or off? Why? Shane

4 5

Mikrotik gear in Colombo Sri Lanka
by Matt Chipman 21 Jun '19

21 Jun '19

Hi guys I know this is probably a long shot but I am here for the weekend doing some work for a friend and need some PTP gear for a max 50meter link. Does anyone know of any local suppliers? thanks, Matt

1 0

UHF Data Radio
by Matt Perkins 20 Jun '19

20 Jun '19

I seem to remember that Mikrotik had a point to point data device that operated I think it was in the LIPD band at 32cm or perhaps 70cm. I cant really remember. It was low speed and I seemed to remember it only has a small amount of access to the band as it did not line up correctly with Australian band plan. I cant seem to find it any more. Does anyone know what im talking about ? Matt /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt(a)spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */

2 3

GNS3 and ROS
by Andrew Gilbett 17 Jun '19

17 Jun '19

Hi Guys, Been playing with GNS3 and ROS and it seems to work well. I have been developing a MPLS test bed to play with. I am using the CHR with no license applied it is just the Free license which should be fine just a speed limit of 1Mbps. I have been trying to get a bgp signaled VPLS to work... but I am not getting a full mesh of connectivity. Diagram at link below. https://paste.pics/88be8dae7c194ad981b142e6655473b8 Router Configs are below https://pastebin.com/xaGDCtR8 I am not able to get traffic between CE1 and CE2 but all other connectivity works... I can see that the VPLS is established between PE1 and PE2 but no traffic traverses it... I am only trying to ping so the packet size should be small... so not an MTU issue yet... If anyone has any ideas that would be most helpful, I suspect that it is something simple. Andrew

1 0

MikroTik Certified Training - opportunities for 'sponsored' places
by Mike Everest 14 Jun '19

14 Jun '19

Hello, We have some 'sponsored' places available at the MikroTik Certifcation training program happening in Melbourne next month (Mon 22 - Wed 24, Thu 25 - Sat 27) Sponsored places are subsidised by MikroTik to help candidates to become mikrotik certified when cost of certification is a barrier for entry - if interested, contact me directly (off-list ;) Cheers! Mike.

1 0

Filtering by part of URL
by Malcolm Faed 05 Jun '19

05 Jun '19

Hi all, I would like to filter access by a portion of the URL. I have a HLS streaming server where the URLs are in the form: http://123.123.123.123:4545/hls/1/1.m3u8 http://123.123.123.123:4545/hls/2/2.m3u8 http://123.123.123.123:4545/hls/3/3.m3u8 (These can not be changed) The server is behind DST-NAT I need to allow / block access from different IP public addresses based on the " hls/1/1.m3u8" part of the URL. Here has been my naive approach that did not work. I tried creating a layer 7 filter add comment="Match HLS stream for CCTV" name=CCTV regexp="\/hls\/1\/1.m3u8" And using this in the filter add action=drop chain=input comment="Drop all traffic to CCTV except allowed" dst-address='my public ip' dst-port=4545 layer7-protocol=CCTV log=yes protocol=tcp src-address=!203.123.168.150 I also tried the forward chain based on the wiki, but since this is behind a DST NAT, I think input is correct. Any advise appreciated. TIA, Mal *Malcolm Faed*Network Broadcast Engineer malcolm(a)avcomm.com.au Av-Comm Office: +61 2 9939 4377 Mobile+61 424 957 053 Unit 24 / 9 Powells Road, Brookvale, NSW 2100, Australia. avcomm.com.au [image: Twitter] <https://twitter.com/AvCommSatellite>[image: Google Plus] <https://plus.google.com/+AvcommAustralia/>[image: Youtube] <https://www.youtube.com/channel/UCO8ZtcnwoTH7e54LAndE-yw>[image: Linkedin] <https://www.linkedin.com/company-beta/6583589/> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorised disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Av-Comm is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

4 7

Mikrotik router & FTTC
by MamAn toO 04 Jun '19

04 Jun '19

Hi, I have recently signed up on an NBN FTTC plan with Internode. I have opted not to buy one of the ISP modem router as I'm wanting more ports (total of minimum 10 Gb ethernet ports). I have spoken to the ISP tech support and they are not familiar with Mikrotiks hence unable to provide advice on which model will be suitable. They however advised the requirement for the modem router to support VLAN ID/VLAN Tagging. I have noted that Mikrotik RB3011UiAS-RM support VLAN ID/VLAN Tagging. Questions are: 1. Has anyone else use Mikrotik RB3011UiAS-RM and able to confirm this can is suitable for FTTC? 2. Which Mikrotik routers have others used successfully with FTTC? 3. Apart from username, password, DNS configurations; is there any NBN FTTC configurations details/information or some sort available to make the Mikrotik router work with FTTC? The ISP has provided the following link to a video which shows the connection will be from telephone socket -> NCD -> Router <https://iihelp.iinet.net.au/NBN_FTTC_Setup_Video> https://iihelp.iinet.net.au/NBN_FTTC_Setup_Video Regards,

5 7