New version! #MikroTik RouterOS 7.21.4 is available in the Long-term channel https://mikrotik.com/download

New post: Part 4 of running my own AS.

A direct BGP session with Hetzner on FogIXP, a fourth FreeBSD edge in Zürich, and a MikroTik at home speaking iBGP into the /48 - so my home LAN now has provider-independent IPv6 and exits AS201379 like any other site.

Plus a two-condition route-map that steers DTAG-bound traffic over Vultr.

https://blog.hofstede.it/running-your-own-as-direct-hetzner-peering-a-fourth-edge-and-bringing-the-home-lan-into-the-fabric/

#BGP #FreeBSD #IPv6 #FRR #MikroTik #Networking

New version! #MikroTik RouterOS 7.23rc1 is available in the Testing channel https://mikrotik.com/download

Funny deadlock situation... I’ve reached peak security on my remote MikroTik Router (AS201379).

By "peak security," I mean I’ve successfully locked everyone out - including myself. SSH, WWW, and WinBox are dark. Even the Hypervisor management is trapped behind the router's new, very effective, accidental firewall rules.

The data plane is running perfectly, which is the ultimate taunt. See you tomorrow for the 80-mile "Serial Cable Walk of Shame" to the datacenter.

This is a brutal reminder that the "Safe Mode" button in WinBox isn't just a feature. It’s a lifeline.

#sysadmin #mikrotik #networking #fail #AS201379 #PacketPushers

@MikrotikTrainer I’m doing multiple VLANs for quite some time now using MVRP on my #mikrotik devices and *thats* the way I call easy!

Single mvrp enabled bridge. Easy access port setting. Dynamic setting of trunk ports. Pure fun!

Try to change your #wireguard MTU from 1420 to 1380 if

* using IPv6
* client is behind CGN (therefore is using IPv6!)
* you encounter any other strange behavior

#mikrotik

This return of a long missed MikroTik CAPsMAN feature should be shouted from the rooftops not hidden with the help documents! 😀
CAPsMAN user traffic can now once again be remotely forwarded to a bridge on the controller. It’s like the old “remote forwarding” but they’ve renamed it “traffic-processing”. They’ve also added encryption 🥳 Thank you #MikroTik!! This is going to make running multiple SSIDs without needing vlans programmed on all the many switches MUCH easier! ❤️

Alt...

Excerpt from MikroTik Documentation. “traffic-processing (on-cap / on-capsman / on-capsman-secure) This setting is only available starting with 7.21beta2 version. • on-cap, will make it so that the CAP itself is responsible for handling all WiFi traffic (same as any standalone AP would); • on-capsman, will make it so that the CAP's WiFi traffic is forwarded to a pseudo-tunnel to the CAPSMAN and the CAPSMAN becomes responsible for CAP's traffic handling; • on-capsman-secure, will make it so that the CAP's WiFi traffic is forwarded to an encrypted pseudo-tunnel to the CAPSMAN and the CAPsMAN becomes responsible for CAP's traffic handling. When using traffic-processing=on-capsman setting, be aware, that since all the CAP's WiFi traffic now gets handled by the CAPsMAN (gets pushed into the CAPSMAN), it will increase CAPSMAN's resource consumption (CPU and RAM usage).

New version! #MikroTik RouterOS 7.23beta5 is available in the Development channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.23beta4 is available in the Development channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.22.1 is available in the Stable channel https://mikrotik.com/download

USA bans any new foreign #router! Now they are completely nuts! #mikrotik #fritzbox

https://www.fcc.gov/document/fcc-updates-covered-list-include-foreign-made-consumer-routers

https://mikrotik.com/products/group/wireless-for-home-and-office

New version! #MikroTik RouterOS 7.23beta2 is available in the Development channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.22 is available in the Stable channel https://mikrotik.com/download

Running first #wireguard connection between #mikrotik 😍 and #LANCOM 🤢 router!

@gyptazy Nice! Mine are just small companies with just one server but in need of a good strategy for backups. I motitor them using https://github.com/rcourtman/pulse connected to me by #wireguard and #mikrotik ! Backup with local pbs to a remote pbs through wireguard vpn. Simple, safe and secure.

New version! #MikroTik RouterOS 7.22rc4 is available in the Testing channel https://mikrotik.com/download

New version! #MikroTik RouterOS 7.22rc3 is available in the Testing channel https://mikrotik.com/download

@mikrotik have a Fediverse account. And not only that- they even have their own instance! :o

https://mikrotik.social/@mikrotik

#mikrotik #router #switch #networking

The discounted ticket price for the third #MikroTik Professionals Conference will end next weekend. Price will rise from €159 to €308 very soon. If you’re still undecided take a look at the Agenda with speakers that are at the top of their game coming to present high level MikroTik topics. Enjoy meeting like-minded professionals. Come enjoy a free beer with us in Prague on March 11th! Lets talk MikroTik. https://mtpc.world/agenda/

Alt...

Website screenshot. Shows a green paper ticket stating “Admit One”. A price of €308 is crossed out and it is shown on sale with the reduced price of €159. Below this is a photo of a glass of ice cold beer. It is advertising the VIP Dinner for a price of €59

A very very important note about @mikrotik CAPsMAN.

There are two different WiFi "stacks" for RouterOS: wireless and wifi-qcom. Both provide CAP/CAPsMAN but they are not compatible. A CAP device using wireless package can't talk to a CAPsMAN device using wifi-qcom (and vice versa I guess).

For example, cAP Lite runs on wireless package and to control it from RB5009 you need to install the wireless package on the latter!

#mikrotik #capsman #wifi

New version! #MikroTik RouterOS 7.22rc2 is available in the Testing channel https://mikrotik.com/download

@mikrotik @fdroidorg installed by copying the original link with key by getting rid of everything before the #mikrotik https

The #MikroTik TikApp is now also available on #FDroid via our own repo:

https://fdroid.link/#https://cdn.mikrotik.com/fdroid/repo?fingerprint=78C22C6CB2A014F57373A10D15FB5AA68D64A94C8DF0E4F56C3C04914D73B9B1

From: @fdroidorg
https://floss.social/@fdroidorg/116086115016017602

@justdude Beware! Hard times coming once you are addicted to #mikrotik ! Trust meeeeeeeeee! 💉

Remarkable machines and OS those #mikrotik devices…
Once you start reading the extra's are overwhelming

what a functions, what a vast amount of things the device can be configured to do.
It adds complexity because OPNsense for example does do some th8ngs automatically and with this you have to think… but thats ok.

Automated scripting, api calls to send logs, update firewall entries (crowdsec on a separate device)! Add a rp2040 in the usb port to block ads with an adblocker like pihole.

😎

Anyone here use a #Mikrotik router via ssh? One thing that's always bothered me is that `/log print` doesn't paginate, which seems utterly bizarre to me given that other `print` commands paginate by default. There is a `without-paging` argument for `/log print`, which seems utterly redundant given that it never paginates anyway. Aside from filtering the log by time (which is very fiddly) or topic (which doesn't always help much), is there some way to make the damned thing paginate or at least print a tolerable number of lines?

New version! #MikroTik RouterOS 7.21.3 is available in the Stable channel https://mikrotik.com/download

I wanted to set up presence detection in Home Assistant without exposing my installation to the internet, and without giving the companion app on my phone access to location data.

I use MikroTik network gear at home, so I added the Mikrotik integration to Home Assistant. It showed my phone as a MAC address, connected through Wifi, and I used that as device tracker. Everything seemed fine, but then the next afternoon. the device tracker still showed me as Away.

I then discovered that GrapheneOS (edit: Android rather, see below) uses a different random MAC address for each connection to a network, as default. Changed it to use a static random MAC for my home network, and now it works as intended.

All this to avoid running the Morning Coffee automation if I'm not even home.

#homeassistant #mikrotik #grapheneos

https://www.home-assistant.io/integrations/mikrotik/

Alt...

Screen shot from Home Assistant -> History for person Michael, showing me Home, Away, and then Home again. This matches my phone's connection to the home network.

The speakers at the third #MikroTik Professionals Conference have now been published on our website. We have selected MikroTik experts from all over the world who are coming to MTPC Prague in March to explain how to use many of the new features added to RouterOS v7 in the last few years. Tickets are still available for sale. Free beer (other drinks are available) the evening before! Plus of course, the famous free raffle! https://mtpc.world/agenda/

New version! #MikroTik RouterOS 7.22rc1 is available in the Testing channel https://mikrotik.com/download

Exactly four years ago, I upgraded from #mikrotik #routeros 6.x to 7.x (7.1.2). What a magic moment! So many new features and of course my favorite is #wireguard ! Others are #macsec and #vxlan… Forgot to mention #mvrp ;-)

New version! #MikroTik RouterOS 7.20.8 is available in the Long-term channel https://mikrotik.com/download

@justine For automatic backups of #mikrotik configs (and many other!) give #unimus a try!

https://unimus.net/

Simple and free for up to 10 devices!

NOTE - I live in a wooden house not a brick in sight.

@rachel Nice idea! Perhaps you could ask the #mikrotik forum?

Worse idea time:

Could I plug a CCR2004-1G-2XS-PCIe into a external GPU enclosure, or just some thingy designed for a raspberry pi, and have a tiny inexpensive 2-port 25gb router? (likely only need 10g speed)
#Homelab #Mikrotik #BadIdeas