- Public - talk.mikrotik.com.au

API Wildcard search
by Mike Everest 15 May '14

15 May '14

Hi folks, Anyone have some experience using routerOS API? I've been extending the configuration group functionality of our DuxTel Commander, and come up against a challenge in filtering API query (http://wiki.mikrotik.com/wiki/API#Queries) The deal is that I use 'comment' field as a way to cross-reference router configuration entries with the configuration database items. For example, a firewall rule might look like: ip firewall filter add chain=forward src-address-list=blocked action=drop comment='Managed by DuxAdmin SetID:443 ItemID:27' So when I want to find all the firewall rules with SetID:443, I can do this: /ip/firewall/filter/find ?>comment=Managed by DuxAdmin SetID:443 Which seems to work OK, but I can't work out how to return just those entries that include 'ItemID:27' I'll put the question to MT support and post a solution (if there is one) if/when they respond, but if anyone has some suggestions, I'm 'all ears'! ;-) Cheers, Mike.

4 7

PPPoE client with ADSL modems
by Russell Hurren 12 May '14

12 May '14

Is anyone successfully using the PPPoE client on a Mikrotik router with an ADSL bridge? I'm using Draytek Vigor 120 routers and I'm having to run them in half-bridge mode and terminate the PPPoE connection on the device rather than on the Mikrotik router. In the past I've been able to connect to Telstra Bigpond from the Mikrotik, but I'm not able to anymore and I've never been able to connect to my primary ISP (WebVault). I've used the same draytek devices in full bridge mode with other brand routers making the PPPoE connection, so I'm fairly sure the issue is with the Mikrotik PPPoE client. I'd be interested to hear what ISP and hardware you're using if you've got this to work. I've contacted Mikrotik support and found a similar issue in the forum (http://forum.mikrotik.com/viewtopic.php?f=2&t=46384) but no-one's answering me. Regards Russell Hurren Managing Director Zero Point Networks PTY LTD +61 8 6262 9376

5 13

CRS default trunked vlan script
by Andrew Cox 07 May '14

07 May '14

Hey All, I've been playing around with v6.13rc1-12 over the last week on a CRS125-24G-1S and have put together a an example script for provisioning the CRSwitches with a user and admin vlan that is trunked back via the SFP port. Hopefully this is useful to some of us; I know I've been waiting for a long time to have a usable and readable switch chip config on the CRS platform :-) In the config: vlan20 is the user facing vlan (untagged on ether1-24, tagged on sfp1) vlan90 is the admin vlan (tagged on sfp1) vlan90 is attached to the router cpu 10.0.0.2/24 is assigned to vlan90 10.0.0.1 is set as the default gateway Cheers, Andrew Cox

3 4

Re: [MT-AU Public] Dodgy winbox after upgrades to V6.x when using VPN
by Karl Auer 06 May '14

06 May '14

On Tue, 2014-05-06 at 15:42 +1000, Paul Julian wrote: > Hey Mike, any suggestions on how to get the supout off a router I can > only SSH to from another router ? If you can get to the router with ssh, then you can move stuff to and from the router with scp. scp me@myrouter.com.au:/myfile.txt . There's a space before the rightmost period. The above command copies myfile.txt from the root directory of the router to your local current directory, assuming the account "me" exists on the router and has read access to myfile.txt. If you are using Windows, you will need am scp program, I believe the puTTY suite has one. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 231A B066 CF91 1216 4F0F F2AC CE25 B8AA 46DC CC4F Old fingerprint: 1DB8 0599 13F0 E774 3811 6CA6 D6D0 AFA9 D91A 004C

1 0

Dodgy winbox after upgrades to V6.x when using VPN
by Paul Julian 06 May '14

06 May '14

Hi guys, I was hoping somebody may have come across this issue before and might have a fix. We have a customer with a 2.4Ghz wireless network in a resort, the AP's are all RB411AH units and seem to be working fine in general. The AP's are backhauled to the main building using some Omnitiks and SXT's, the backhaul is very reliable and stable, average signal is about -55, these are running in A/N mode and happy. The AP then connects into our hotspot gateway and everything works happily. All customer AP's are bridged back to the hotspot gateway via EOIP tunnels, once again that works fine. For management we have a VPN from each device which goes back to our data centre, as the backhaul network and all devices are fully routed these VPN's just travel across the network and out the Internet connection and work fine. The problem we have is that we have upgraded a couple of AP's and backhaul radios to v6.11, they were previously 5.4, as soon as we upgrade them we can't winbox to them anymore. We first noticed the issue a couple of days ago and didn't really think the upgrades were the cause, but I have spent a couple of hours tonight just going through configs, firewall rules, ACL's etc trying to find some reason why winbox won't work to these units, I have now got to the point where I reckon that it's something to do with the upgrades as the units which still haven't been upgraded connect up instantly without an issue. I thought I might be the winbox cache on my windows 7 PC so I deleted it, I can connect fine to other routers which I have upgraded to v6.10, but not with 6.11 or 6.12 which is what I am using on these radios. Has anybody come across this issue before and have any suggestions as I am all out of them now. The curly one with this problem is though that the issue only occurs when accessing the routers via VPN, direct access works fine, and I have reduced MTU's and tried everything but they should work with the same PPTP settings as the other routers on V5.4 as they are connected exactly the same way and are configured exactly the same way with exception to the ROS version. Any suggestions would be greatly appreciated ! although I am happy with CLI it's just easier to do some things in the GUI and you can see graphs and stuff J Thanks Paul

2 13

'announcements' list?
by Mike Everest 30 Apr '14

30 Apr '14

Hi folks, A couple of people have asked me about submitting commercial news to this list, but since the original intent was to always keep this one free of commercial content, marketing material and general advertising, I continue to advise that we should avoid that kind of post to this list. The next question, then, is whether anyone considers some value in a new list just for that kind of material. We already have jobs@talk.mikrotik.com.au for employment opportunity posts, would it be worth also creating a list like announcements@talk.mikrotik.com.au for posts like when new products are available or training programs are planning? Perhaps revision of the rules (and name) for jobs list to /include/ announcements? We have about ½ dozen subscribers to jobs at the moment, would anyone consider subscribing to announce? Suggestions/comments? Cheers! Mike.

6 6

Problems with multiple RBMetal2SHPn devices failing at one site
by Steve at Digitronics 30 Apr '14

30 Apr '14

We have lots of groove type devices out there, plastic and metal, but there is one installation where we are having consistent problems, and it is the only place we have had any problems. Over the last 6 months or so we have had kernel failures and script errors logged on four different devices at the same site, the last three being RBMetal2SHPns. The four devices have been installed at the same site with the last three as subsequent replacements for the prior unit because it was playing up. Typically, a device works ok for a while (up to a month) but then starts logging kernel faults and exhibiting other weird symptoms such as script failures, and vanishing scripts. Sometimes only a reboot or a power cycle will get a failed unit going again. The chances of their being actual faulty devices is now so vanishing small as to be discounted, so we are trying to figure out what it is at this site that could be causing the same persistent failures on the series of devices. The device mounting and sealing has been checked. The antenna VSWR has been checked. The antenna cabling has been checked. The CAT5 cabling has been checked. The PSU and POE injector have both been changed at different times. The PSU is on a UPS. The site is not subject to lightning strikes or subsequent voltage gradients. The device is only 15m from the POE injector. When it is working the wireless data throughput is as expected. The device is on a private CAN so cannot be publicly hacked. The times and frequency of failures do not follow any obvious throughput, temperature, humidity or time of day patterns. The unit at the other end of the link has never had a failure of any kind. We are struggling to think of any other possible site specific environmental or equipment influence(s) that could be causing these failures, and I am really hoping that someone on the list can give us some fresh ideas or can share the resolution to similar circumstances they have experienced. TIA. Steve.

5 6

heartbleed and routerOS
by Mike Everest 29 Apr '14

29 Apr '14

Responding to some questions about this topic, the official word is that routerOS is not affected: http://forum.mikrotik.com/viewtopic.php?f=2 <http://forum.mikrotik.com/viewtopic.php?f=2&t=83815> &t=83815 according to the posts, routerOS prior to 6.11 used an older version of openSSL that did not have the reported vulnerability, and 6.12 onward has a newer version of openSSL that has the vulnerability fixed. Thus it seems that due to a lack of attention in keeping public maintained libraries up to date has been counted as a win for routerOS users this time around ;) Cheers! Mike.

1 0

Cloud Core Router Bargains!
by Mike Everest 14 Apr '14

14 Apr '14

Hi All, Take a search on bay.com.au - rackcentral have 'outgrown' some CCR 1036+ (10 gig SFP models), and offloading them at bargain basement prices. They can't be more than a couple of months old, and will still carry their original warranty (from DuxTel ;) Even if you don't need one right now, maybe it's a price too good to let it go! :) Cheers, Mike.

2 1

CCR Tips and Tricks
by Andrew Cox 11 Apr '14

11 Apr '14

This presentation by Janis has a lot of detailed info about the current status of routing functions in v6 and the best way to fully utilise the performance of them; also what will be changed in v7! Thought you might all find it useful: http://mum.mikrotik.com/presentations/RU14/megis.pdf Cheers, Andrew Cox

3 6