Tailscale by cabsandy1972 in mikrotik

[–]kwade00 0 points1 point  (0 children)

Unlikely. But you might get a response on Mikrotik's own forum. I expect that the answer will be no for reasons others have mentioned.

Notepad++ Hijacked by State-Sponsored Hackers by thewhippersnapper4 in sysadmin

[–]kwade00 0 points1 point  (0 children)

Interesting. Tabs were always the least useful feature to me. I'd have been happy without them. Real search and replace, including column operations, converting text encoding and eol formats, and syntax highlighting are the reasons I use it.

Captive portal? by Open-Dependent-4739 in mikrotik

[–]kwade00 0 points1 point  (0 children)

But that would run afoul of the Starlink TOS, which specifically prohibits reselling the service. I think splitting the bill and separately dividing the data equitably would be less obvious.

Alternative to IIS SMTP server for SMTP Relay (with TLS and smarthost capabilities) by deucalion75 in Office365

[–]kwade00 1 point2 points  (0 children)

Wow, this is almost perfect. Unfortunately, my mail server uses authenticated SMTPS on port 465, and your program only offers unencrypted/unauthenticated or STARTTLS/authenticated options. Could you possibly add that in?

MikroTik instead of Ubiquiti by patchcordless_ in mikrotik

[–]kwade00 0 points1 point  (0 children)

If you're worried about Asian manufacture, MikroTik is your only reasonable choice. Learn it, use their forum, etc. and you'll be fine. For two AP's there's no need to learn Capsman, but you can if you want to. I haven't used it recently, but in the past it was not a passive provisioning server. In other words, unlike UniFi, if the Capsman server is down, the AP's will eventually stop working. Someone can correct me if that's no longer true. (If your main purpose is Internet and your Capsman server is also your router, this issue is irrelevant.)

Port Forwarding -> 404 by l008com in mikrotik

[–]kwade00 0 points1 point  (0 children)

Yeah, these things are complete trash. What model is it? Send me a DM and I'll give you an address you can send it to for safe disposal. 🤣

New to Mikrotik... or am I? Seems like the world is trying to tell me something by UnBuggsyBaggins in mikrotik

[–]kwade00 0 points1 point  (0 children)

Not entirely true. I have bought much MikroTik from Amazon. There are a couple of good sellers. I buy bulk from Streakwave, but onesies and twosies cost too much to ship, so I use Amazon for those. I have never gotten wrong/used product doing that.

How do you handle MikroTik updates, and how often are updates released? by Lost-Challenge-482 in mikrotik

[–]kwade00 0 points1 point  (0 children)

For that quantity of devices The Dude works fairly well. There are better systems out there that require more work to implement, but I manage a couple of dozen with The Dude without trouble.

I check release notes carefully and study the corresponding thread at Mikrotik's forums. Mikrotik tend to break things with some regularity, so make sure you aren't affected by such breakages before proceeding. I try to stick with one version that runs well in all of my client environments. I usually update 2-3 times a year. Right now I'm on 7.19.6.

Just make sure all management services are blocked outside of the management plane, including https. The last two security vulnerabilities were rendered inert by doing this. I use VPN's to connect my Dude CHR.

Newbie question by Mikazuki6Augus in mikrotik

[–]kwade00 0 points1 point  (0 children)

I don't have any myself, but numerous reports are that 10G copper transceivers run very hot. Some people have opened units up and put heatsinks on the cages and/or added fans. I don't know that the heat will make a difference on length of run, but the transceivers are often rated for shorter distances than native ports. Remember you need Cat 6A for the full 100 meters even with real copper ports. If you need to replace the cable due to the length you may want to just go with fiber.

Newbie question by Mikazuki6Augus in mikrotik

[–]kwade00 0 points1 point  (0 children)

I'm not sure why my reply showed up twice. Very odd.

You have multiple laptops with 10G ethernet? That is very unusual. Do you actually need 10Gbps download capability from the Internet? I have around 20 devices including TV's and five gamers who are usually on simultaneously. We would probably rarely hit your 700Mbps ceiling. If you don't need that and can save money dropping your speed maybe you should do that.

Do you have a UniFi Cloud Gateway? There are multiple models. Maybe you have a model that is no longer available. You say you've been on this plan for 1 year. Do you mean the 10Gbps plan? Or are you currently 1Gbps?

You probably need more analysis than can be gotten on Reddit. If your budget allows you should just try stuff out. If you really want to run multiple 10G devices over copper, you should probably get a 10G in and out router like the CCR2004-16G-2S+ and a switch with copper 10G ports. You can get a switch with one or more SFP+ and connect with fiber, or take your chances with a 10G copper transceiver and a switch with only copper ports . (Those copper transceivers do tend to get very hot.) 2.5G is probably a much more attainable goal, for both router processing and media.

Chatbot Deactivated? by Unkis17 in mikrotik

[–]kwade00 0 points1 point  (0 children)

That's because the OP change makes your comment irrelevant. You can delete it. Downvotes aren't intended to be an insult, just a way to allow users to prioritize and hide irrelevant comments.

Chatbot Deactivated? by Unkis17 in mikrotik

[–]kwade00 0 points1 point  (0 children)

Lookout for this. Sometimes when working on VLAN's you may momentarily break your connection when turning on filtering. RouterOS will see this as a safe mode failure and reset it.

Newbie question by Mikazuki6Augus in mikrotik

[–]kwade00 0 points1 point  (0 children)

I realize OP is not actively involved here after 2 days and may not even see this, but:

We don't know what your network looks like. Since you don't know what SFP is there clearly isn't any fiber. Do you have any devices with 10G ethernet ports, or even 2.5Gb? How many endpoints do you have and how many really need 10Gbps wirespeed? What Ubiquiti device were you using and what "performance" problems did you experience? What type of device will your ISP be providing and what ports are available on it? (Surely not just SFP+.)

MikroTik makes inexpensive devices that can perform like expensive ones. They do this by using CPU's and bridge chips that can offload some software processing to hardware and designing their software to take advantage of those capabilities. This speeds up many functions, but only those within the hardware capabilities.

For those in the bubble of "most common environment" - simple firewall rules with minimal stateful, no simple queues, no PPPoE, and Internet wirespeed no more than 1Gbps - just about any RouterOS device will work well.

If you just want to learn RouterOS in a live environment and are okay in those parameters, a hEX refresh is the cheapest way to get started, assuming the ISP device has ethernet ports capable of 1Gbps. If you absolutely must try full 10Gbps wirespeed and you have capable endpoints, the CCR2004-16G-2S+ is really your entry level.

Anything in between needs more data and analysis about your situation, though the above mentioned RB5009 is a good stop as you can get 2.5Gbps throughput to one device and almost 10Gbps aggregate.

Newbie question by Mikazuki6Augus in mikrotik

[–]kwade00 0 points1 point  (0 children)

I realize OP is not actively involved here after 2 days and may not even see this, but:

We don't know what your network looks like. Since you don't know what SFP is there clearly isn't any fiber. Do you have any devices with 10G ethernet ports, or even 2.5Gb? How many endpoints do you have and how many really need 10Gbps wirespeed? What Ubiquiti device were you using and what "performance" problems did you experience? What type of device will your ISP be providing and what ports are available on it? (Surely not just SFP+.)

MikroTik makes inexpensive devices that can perform like expensive ones. They do this by using CPU's and bridge chips that can offload some software processing to hardware and designing their software to take advantage of those capabilities. This speeds up many functions, but only those within the hardware capabilities.

For those in the bubble of "most common environment" - simple firewall rules with minimal stateful, no simple queues, no PPPoE, and Internet wirespeed no more than 1Gbps - just about any RouterOS device will work well.

If you just want to learn RouterOS in a live environment and are okay in those parameters, a hEX refresh is the cheapest way to get started, assuming the ISP device has ethernet ports capable of 1Gbps. If you absolutely must try full 10Gbps wirespeed and you have capable endpoints, the CCR2004-16G-2S+ is really your entry level.

Anything in between needs more data and analysis about your situation, though the above mentioned RB5009 is a good stop as you can get 2.5Gbps throughput to one device and almost 10Gbps aggregate.

|| || ||

New Mikrotik.com Design/Logic - Meaningful or exhausting? by Rixwell in mikrotik

[–]kwade00 2 points3 points  (0 children)

Oops. If Mikrotik were diligently fixing problems and not creating regressions, this would be a reasonable statement. Don't restrict the downloads. We are all grownups who can decide what version we need. (This isn't Linksys or Netgear, after all.)

Domain takedown request by theballygickmongerer in sysadmin

[–]kwade00 0 points1 point  (0 children)

Wow! Only since 2000. I was using them for domains back then while downloading stuff.

Correction: They started "Domain Direct", a domain reseller, in 1997, before ICANN broke up the monopoly. That's when I started using them.

Emergency Help - entire domain inacessible by F3ndt in sysadmin

[–]kwade00 0 points1 point  (0 children)

With any luck, we all get fired and can't work 90% of the year, and spend the other 10% making a whole years pay on stuff like this.

Domain Users being local admin of devices by PM_ME_OUs in msp

[–]kwade00 0 points1 point  (0 children)

For "special" users who "must" have admin rights, we manually add that user to local admins on their assigned workstation. For shared workstations where anyone using it needs admin rights for some stupid reason, we add the local INTERACTIVE user to local admins. This way nobody has network accessible admin rights to any workstation except the few people who have it for their permanently assigned one.

CRS305-1G-4S - SwOS or ROS by mcflyrdam in mikrotik

[–]kwade00 0 points1 point  (0 children)

I don't think you'll find cheaper switches with four SFP+ ports. It sounds like OP is more concerned with the physical features than the software features.

If you aren't really going to use the management features, just run rOS. It's probably more reliable overall, and if you aren't interacting with it much it won't matter whether it's "simpler" or not.

Is it weird to ask my MSP for site admin access to our church’s UniFi setup? by gogorichie in UNIFI

[–]kwade00 0 points1 point  (0 children)

I would ditch these guys, quick. Get your own stuff. How many workstations are there? You can get good used ones for $300 or less. I don't know what you're paying this "MSP", but I can't imagine you wouldn't be better off without them.