- Public - talk.mikrotik.com.au

CHR VPS with megaport
by Mike Everest 23 Feb '20

23 Feb '20

Anyone have a favourite VPS provider for CHR with Megaport connectivity? We currently use Zettagrid for various systems and services, but looking for alternatives to add/expand/enhance existing solutions :) All comments and suggestions are welcome! Cheers, Mike.

3 2

Unable to connect to Telstra BigPond AP?!?
by Karl Auer 10 Jan '20

10 Jan '20

I've temporarily relocated because of the fires and am currently ensconced at a relative's home armed with enough compute power to run a small country. My MikroTik routers do not want to talk to the local Telstra BigPond ADSL router, specifically a Thomson TG782T. There's one for sale on GumTree if you want to see pictures: https://www.gumtree.com.au/s-ad/castle-hill/modems-routers/bigpond-adsl -modem/1207553894 I've changed the wlan1 interface to mode=station and the ssid="TheCorrectSSID". I've changed the default security profile to set mode=dynamic-keys authentication-types=wpa-psk,wpa2-psk wpa-pre-shared-key="ThePSK" wpa2- pre-shared-key="ThePSK" If I change only the SSID and PSKs in the above settings, the MikroTik connects to my phone's hotspot immediately. My phone and several other devices can connect to the Testra router. Is there some trick I'm missing here? This isn't routing or anything like that, it's more fundamental - the wlan1 in station mode never gets to "Running" state. I've tried a hAP Lite and a 951G-2HnD. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

2 4

SSL and MT hotspot?
by Karl Auer 08 Jan '20

08 Jan '20

I've just had my first look at the MT hotspot, and while it's pretty clunky, it's reasonably effective. With one HUGE exception: No SSL! Not even a default self-signed one. There seem to be a few scripts around that will do LetsEncrypt certs, but they all require that the certbot runs on a separate system, so they are of limited usefulness. Did I miss something? Does anyone know of an on-board SSL mechanism (LetsEncrypt or anything else) for MikroTik? Without SSL, a MikroTik hotspot is a complete non-starter. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D

2 1

Re: [MT-AU Public] Public Digest, Vol 70, Issue 2
by kevin＠scottsip.com.au 11 Dec '19

11 Dec '19

I have predominantly been installing the Netgear DM200 -100AUS modems, updating the firmware and placing them in Bridge mode so that a Mikrotik device can do the Authentication / ip addressing. https://www.netgear.com.au/home/products/networking/modem-routers/DM200.aspx It works well, just make sure that you set the modem to "other" as the provider and let it synchronise correctly. That means pull the configuration of the connection down to the modem or you will have issues. V 1.0.0.61 is the firmware that I have been using with TPG/iiNet/AAPT NBN installations <-- needs to be this firmware or higher else you will have internet connection issues. FTTC / FTTB (close to the node connections) Bandwidth synchronises at the modem around 107 Mb for 100 Mb NBN connections - close to 97 Mb using speedtest.net / google speed test. Regards, Kevin -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of public-request(a)talk.mikrotik.com.au Sent: Wednesday, 11 December 2019 12:00 PM To: public(a)talk.mikrotik.com.au Subject: Public Digest, Vol 70, Issue 2 Send Public mailing list submissions to public(a)talk.mikrotik.com.au To subscribe or unsubscribe via the World Wide Web, visit http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au or, via email, send a message with subject or body 'help' to public-request(a)talk.mikrotik.com.au You can reach the person managing the list at public-owner(a)talk.mikrotik.com.au When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..." Today's Topics: 1. Re: RB760iGS with PS180-T VDSL SFP (Jason Hecker) ---------------------------------------------------------------------- Message: 1 Date: Tue, 10 Dec 2019 18:03:07 +1100 From: "Jason Hecker" <jason(a)upandrunningtech.com.au> To: public(a)talk.mikrotik.com.au Subject: Re: [MT-AU Public] RB760iGS with PS180-T VDSL SFP Message-ID: <520c5bdf-1079-497f-b9d0-8216c3d785f5(a)www.fastmail.com> Content-Type: text/plain Another basic (and small) VDSL2 modem you can put in bridge mode is the Netgear DM200. They retail for around $80. Regards, Jason Hecker <https://www.upandrunningtech.com.au/> <https://www.upandrunningtech.com.au/> On Fri, 29 Nov 2019, at 16:51, Russell Hurren wrote: > I've also tried one. It works fine on my home connection at 25/5 but it's slower at my office on 100/40. It does get a bit hot, but I've still found it to be stable. > I've worked with Duxtel and Proscend to analyse the data I collected, but there wasn't anything more we could do to improve the connection speed, so I'll keep using Draytek Vigor 130s for now. > > The DV130 was reaching speeds in excess of 100Mbps downstream, while the VDSL module was only reaching 90Mbps. I can't prove that the DV130 isn't misreporting it's speed, and I haven't had a chance to do an accurate speed test (my ISP only just set up their own speed test site recently). > > Only thing I had to do to make it work was to disable auto-negotiation. If you want the tool to measure the speed, Duxtel can send it to you. > > Regards > > > Russell Hurren > > > -----Original Message----- > From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Darryl > Ross > Sent: Friday, 29 November 2019 11:16 > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] RB760iGS with PS180-T VDSL SFP > > Hey All, > > I have a client that has 8 sites, all of them are going to be ethernet handoff (FTTC or HFC) except for one site that is going to be FTTB (VDSL). I'm planning on dropping RB760iGS into each store. > > I see on the duxtel site that the VSDL SFP module has passed compliance testing in September, does that mean it's now been approved for use on the NBN or just that its compliant with the specs? Anyone had issues running one in the desktop MTs? > > -Darryl > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au > ------------------------------ Subject: Digest Footer _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ End of Public Digest, Vol 70, Issue 2 *************************************

2 1

RB760iGS with PS180-T VDSL SFP
by Darryl Ross 10 Dec '19

10 Dec '19

Hey All, I have a client that has 8 sites, all of them are going to be ethernet handoff (FTTC or HFC) except for one site that is going to be FTTB (VDSL). I'm planning on dropping RB760iGS into each store. I see on the duxtel site that the VSDL SFP module has passed compliance testing in September, does that mean it's now been approved for use on the NBN or just that its compliant with the specs? Anyone had issues running one in the desktop MTs? -Darryl

4 3

NBN DHCP interface config example for Aussiebroadband HFC
by Chris Herrmann 24 Nov '19

24 Nov '19

Thanks everyone, HFC is alive again... and I'm up and running. Thankyou for all the suggestions. A couple of things tripped me up: * My attempt to use a different native VLAN didn't work - DHCP wouldn't pick up an IP because it was coming with no VLAN tag / nothing, but the interface was set to a different native VLAN. It's not in the bridge so i figured it really wasn't a big deal. * It kept using the old ADSL connection as the default route. Both had a routing cost of 1, but the new route had a flag "DS" instead of DAC and would only route to the next hop. I ended up modifying the routing cost of the ADSL to get around this. Now the ADSL is higher than the NBN, so effectively it's unused (which is fine). I'll leave the ADSL connected for a while until I'm satisfied that the NBN is actually working ok. * IPSEC just got really unhappy. It refused to connect on either the old WAN or new WAN. in the end I moved the VPN to the new WAN, but the thing that messed it up was that the /ip ipsec policy just borked - they had the old sa-src-address in there. So I updated that using /ip ipsec policy edit 1 sa-src-address <update to new IP> peer peer1 #This had become null and wasn't working after that it all started working and it's working well now. I've compared backups of the config and it looks like it freaked out and corrupted the peer value, and then because there was no peer it didn't update the sa-src-address values. getting 92/40 so pretty happy with that... so long as HFC doesn't fall over again... Cheers, Chris

1 0

Re: [MT-AU Public] Public Digest, Vol 69, Issue 4
by kevin＠scottsip.com.au 23 Nov '19

23 Nov '19

According to AussieBroadband DSL Mode/Interface Type: Ethernet Wan Internet Connection Type: Dynamic or IPOE or DHCP No VLAN ID So as you have done so already isolate ether10, remove it from the bridge... use dhcp client for ether10 Set up a route to 0.0.0.0 via ether10 (IP Address allocated to the nic) Set up a masquerade rule to use ether10 as the new outbound wan port. You may also need to change or add a few DNS settings depending on the provider. Go to grc.com and use shields up in case you have inadvertently opened up your firewall and network to the outside world Block anything that you need and happy internetting. Regards, Kevin -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of public-request(a)talk.mikrotik.com.au Sent: Saturday, 23 November 2019 12:00 PM To: public(a)talk.mikrotik.com.au Subject: Public Digest, Vol 69, Issue 4 Send Public mailing list submissions to public(a)talk.mikrotik.com.au To subscribe or unsubscribe via the World Wide Web, visit http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au or, via email, send a message with subject or body 'help' to public-request(a)talk.mikrotik.com.au You can reach the person managing the list at public-owner(a)talk.mikrotik.com.au When replying, please edit your Subject line so it is more specific than "Re: Contents of Public digest..." Today's Topics: 1. NBN DHCP interface config example for Aussiebroadband HFC (Chris Herrmann) 2. Re: NBN DHCP interface config example for Aussiebroadband HFC (Chris Herrmann) 3. Re: NBN DHCP interface config example for Aussiebroadband HFC (Andrew Oakeley) ---------------------------------------------------------------------- Message: 1 Date: Fri, 22 Nov 2019 14:36:34 +1100 From: Chris Herrmann <chrisherrmann7(a)gmail.com> To: public(a)talk.mikrotik.com.au Subject: [MT-AU Public] NBN DHCP interface config example for Aussiebroadband HFC Message-ID: <CAE+JXUWyiz1K_GVvGxUgymEhezOS0KOWjkSUL9+7f7wdb=9cmA(a)mail.gmail.com> Content-Type: text/plain; charset="UTF-8" Hi guys, Aussiebroadband HFC NBN getting installed today. Does anyone have some pointers for what I'm missing... What I need to achieve is port10 acting as a DHCP client on Native VLAN. I've broken port 10 out of the bridge, and set it to native / default VLAN 11 (because I don't want it on the default VLAN 1). What I can't work out, is how to tell it to make the interface act as a DHCP client (which I'm guessing should in turn build default routes etc etc etc)? I've tried creating a VLAN interface under the physical but this doesn't have any DHCP client options either... I don't need PPPOE - I just need DHCP. Any suggestions? Thanks! Chris ------------------------------ Message: 2 Date: Fri, 22 Nov 2019 14:38:56 +1100 From: Chris Herrmann <chrisherrmann7(a)gmail.com> To: public(a)talk.mikrotik.com.au Subject: Re: [MT-AU Public] NBN DHCP interface config example for Aussiebroadband HFC Message-ID: <CAE+JXUX3T7ngpU5Ag_pAs+KU06Lon8Q4AxRD42He-d+0xoGbZQ(a)mail.gmail.com> Content-Type: text/plain; charset="UTF-8" d'oh /ip dhcp-client now I just need the nbn outage in my area to go away... On Fri, 22 Nov 2019 at 14:36, Chris Herrmann <chrisherrmann7(a)gmail.com> wrote: > Hi guys, > > Aussiebroadband HFC NBN getting installed today. Does anyone have some > pointers for what I'm missing... > > What I need to achieve is port10 acting as a DHCP client on Native VLAN. > > I've broken port 10 out of the bridge, and set it to native / default > VLAN > 11 (because I don't want it on the default VLAN 1). > > What I can't work out, is how to tell it to make the interface act as > a DHCP client (which I'm guessing should in turn build default routes > etc etc etc)? > > I've tried creating a VLAN interface under the physical but this > doesn't have any DHCP client options either... > > I don't need PPPOE - I just need DHCP. Any suggestions? > > Thanks! > > Chris > ------------------------------ Message: 3 Date: Fri, 22 Nov 2019 03:48:46 +0000 From: Andrew Oakeley <andrew(a)oakeley.com.au> To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] NBN DHCP interface config example for Aussiebroadband HFC Message-ID: <MEXPR01MB0855EA427FFD1CB8C796106DF4490(a)MEXPR01MB0855.ausprd01.prod.outlook. com> Content-Type: text/plain; charset="us-ascii" Hi, Don't forget to add the following on that interface too - Drop All firewall rule on the input chain - masquerade rule on the outbound traffic from that interface in NAT Andrew -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of Chris Herrmann Sent: Friday, 22 November 2019 11:39 AM To: public(a)talk.mikrotik.com.au Subject: Re: [MT-AU Public] NBN DHCP interface config example for Aussiebroadband HFC d'oh /ip dhcp-client now I just need the nbn outage in my area to go away... On Fri, 22 Nov 2019 at 14:36, Chris Herrmann <chrisherrmann7(a)gmail.com> wrote: > Hi guys, > > Aussiebroadband HFC NBN getting installed today. Does anyone have some > pointers for what I'm missing... > > What I need to achieve is port10 acting as a DHCP client on Native VLAN. > > I've broken port 10 out of the bridge, and set it to native / default > VLAN > 11 (because I don't want it on the default VLAN 1). > > What I can't work out, is how to tell it to make the interface act as > a DHCP client (which I'm guessing should in turn build default routes > etc etc etc)? > > I've tried creating a VLAN interface under the physical but this > doesn't have any DHCP client options either... > > I don't need PPPOE - I just need DHCP. Any suggestions? > > Thanks! > > Chris > _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ Subject: Digest Footer _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ------------------------------ End of Public Digest, Vol 69, Issue 4 *************************************

1 0

NBN DHCP interface config example for Aussiebroadband HFC
by Chris Herrmann 22 Nov '19

22 Nov '19

Hi guys, Aussiebroadband HFC NBN getting installed today. Does anyone have some pointers for what I'm missing... What I need to achieve is port10 acting as a DHCP client on Native VLAN. I've broken port 10 out of the bridge, and set it to native / default VLAN 11 (because I don't want it on the default VLAN 1). What I can't work out, is how to tell it to make the interface act as a DHCP client (which I'm guessing should in turn build default routes etc etc etc)? I've tried creating a VLAN interface under the physical but this doesn't have any DHCP client options either... I don't need PPPOE - I just need DHCP. Any suggestions? Thanks! Chris

2 2

upgrade from RB2011UiAS to something faster - RB450Gx4 ?
by Chris Herrmann 05 Nov '19

05 Nov '19

Hi all, I've been using the rb2011 for several years now, happy user. I'm about to get faster internet (NBN - please stop snickering), so I'm looking at models that will handle higher throughput and after people's recommendations. Things I care about... * I'm running a few VLANs. there was one rb or Hex model that I played with that didn't handle VLANs as well as the 2011 but I can't remember the reason now. Might have been a software switch and not hardware or something like that. * IPSEC - the 2011 tops out around 16Mbit before it flakes out in my experience. Would like to get more throughput.. if I look at the RB450Gx4 specs and pick the worst-case IPSEC throughput, it claims to do 20Mbit which is better than my real-world experience with the RB2011. * Non-IPSEC NAT - would like it to comfortably handle 100Mbit * I'm running a few other things but nothing that should be too taxing (logging, not a huge number of policies, only a little bit of mangling). * Don't want wifi on it * Don't need POE * Would love to be able to export / import my RB2011 config and have that work :) but I'm guessing it'll have to be a rebuild based upon prior experience switching models. Cheers, Chris

4 3

Asterisk Monitoring with The Dude
by Paul Julian 31 Oct '19

31 Oct '19

Hi all. I am wanting to monitor an asterisk box with our Dude implementation, I know I have done it before years ago but can't find any info on how. There are some other ways or doing it but ultimately I want to monitor the asterisk SIP port and make sure it is accepting connections and responding. Does anybody have any probe configuration information that works and that they are willing to share ? Any help would be appreciated. Thanks Paul

2 1