Category Archives: Hardware

Setting up and using Traffic Flow in Mikrotik

Enable Traffic Flow on the Mikrotik router:

ip traffic-flow set enabled=yes cache-entries=4k set active-flow-timeout=30m inactive-flow-timeout=15s interfaces=all

View settings:

ip traffic-flow print

Specify the IP address and port of the computer that will receive the Traffic-Flow packets:

ip traffic-flow target add address=192.168.88.240:1234 disabled=no version=9 v9-template-refresh=20 v9-template-timeout=30m

or

ip traffic-flow target add address=192.168.88.240:1234 disabled=no version=5

View settings:

ip traffic-flow target print

To configure through the GUI, the settings can be found in the menu IP -> Traffic Flow.

For monitoring under Windows, you can install the program ManageEngine NetFlow Analyzer, which will work as a server, receive packets from the specified port and generate graphs and statistics via a web server that can be opened by the browser.

For monitoring under Linux, you can install and configure for example flow-tools.

How to find out the password for Huawei EchoLife HG8245

Configured today GPON ONT Huawei EchoLife HG8245C to OLT and it was necessary to go to its web interface to change the password on Wi-Fi, and the standard root login and password admin did not fit. I had to perform several manipulations.
Of course, to begin with, connect to any of the LAN ports, wait until the DHCP ONT is turned on, it will give out IP, such as 192.168.1.2 or set it manually.
Connect via telnet to ONT IP 192.168.1.1, enter login root and password admin.
Then type the following commands one at a time:

shell
cd /mnt/jffs2/
grep admin  myconfig.xml

As a result, the last command gives information about what is happening in the web interface:

useradmin
vufum

and

telecomadmin
nE7jA%5m

Passwords can also be written on the device label. In the settings you can change the password, in this case the user will be useradmin and the specified password.
For HG8245, the standard administrative login and password telecomadmin \ admintelecom, for users – admin/admin. For Chinese HG8245C standard – telecomadmin \ nE7jA%5m.
There may be further passwords for telecomadmin:

NWTF5x%RaK8mVbD
NWTF5x%

See also: Create profile on Huawei SmartAX MA56XX for Huawei Echolife Hg8245

Configuring an FTP server on MikroTik Router OS

Usually an FTP server on MikroTik Router OS is enabled and uses ports 20 and 21 for communication.
Connection type without encryption, login and password are same as for access to mikrotik.

You can connect by typing the ip address of the router in the browser’s address bar:
ftp://192.168.88.1

Via the graphical interface, the FTP service is turned off and turned on in the “IP” – “Service”

Through the command line:

ip service disable service_number
ip service enable service_number

View a list of services:

ip service print

To view the information about the files, you can run the following command:

file print detail
disk print detail

Adding ONT PICOTEL PU-G510 on Huawei SmartAX MA5683T

Suppose that we set up Huawei SmartAX MA5683T and added lineprofile/srvprofile using this instruction: Configuring Huawei SmartAX MA5683T through the console

Next, add ONT similarly as I wrote in the article Alcatel-Lucent I-010G

On the test after adding ONT PICOTEL PU-G510 to OLT Huawei SmartAX MA5683T, when connecting the computer to ONT – the Internet worked, when connecting the router – no.
Therefore, I still had to open the ONT web interface, pointing in the address line http://192.168.1.1 (login and password – admin), before registering the computer with a static IP 192.168.1.2.
In the web interface, select the menu “Admin” – “GPON Settings”, where “OMCI OLT Mode:”, if using Huawei OLT – select “Huawei OLT Mode” and click “Apply Changes”.

See how I did it on video:

Etnernet ports are disabled on ONT Huawei EchoLife

I recently noticed a problem that, when ONT, the Huawei EchoLife HG8110, HG8120 and HG8120R watched the Ethernet ports shutdown about 30 seconds after the ONT was turned on.
At the same time, ONT continued to work, the optical connection did not disappear.
On the Huawei EchoLife HG8110 the link did not disappear, but the interface ONT 192.168.100.1 stopped pinging.

The cause was defective power supplies.

Adding ONT Huawei EchoLife HG8120 and HG8120R

On the test I will use ONT Huawei EchoLife HG8120 (works only in Bridge mode as a media converter) and Huawei EchoLife HG8120R (can work as Router & Bridge, with reset settings has no configuration, so it works the same as HG8120 in Bridge mode).
The standard IP for both models is 192.168.100.1, the login is telecomadmin, the password is admintelecom.
I will use VLAN 228 for the Internet.

Continue reading “Adding ONT Huawei EchoLife HG8120 and HG8120R”

Firmware Update TP-Link TL-WR841N

It was necessary to flash TP-Link TL-WR841N router, because it periodically hung up, disconnected from the Internet, the router itself was pinging at that moment, but it was impossible to enter its web interface.

First, check the hardware version of the device, usually it is indicated on the label under the router, in our case it’s V8. I note that updating the firmware not from that version of the device can spoil it! Also, you can not update the firmware on Wi-Fi and turn off the power of the router during the firmware!

And so, to update the firmware you need:
1) Download the archive with the new firmware from the official site and unpack it
https://www.tp-link.com/us/download/TL-WR841N.html

2) Open the router settings by typing in the browser address http://192.168.0.1 and enter your login – admin, password – admin.

3) In the menu choose System Tools -> Firmware Upgrade, click the “Browse” button, select the previously downloaded firmware. Click “Upgrade”. Wait for the firmware to be installed and the device will reboot automatically.

After updating the firmware, the settings in the router are reset to standard.

Done.

This router model also has unofficial firmware DD-WRT
http://www.dd-wrt.com/site/support/router-database

Firmware Update D-Link DIR-815

For the test, I will update the firmware on the router D-Link DIR-815 revision A1.
The router has firmware 1.00 (Fri 06 Aug 2010), on official FTP found version 1.04, b03 (Wed May 15, 2013).

To update the firmware in the D-Link DIR-815 router, perform the following necessary steps:

1) Let’s see the revision on the label under the router and download the new firmware from the official FTP for it http://ftp.dlink.ru/pub/Router/DIR-815/Firmware/
Updating the firmware of the router for the wrong revision can lead to its failure.

2) Open the router settings by typing in the browser address http://192.168.0.1 (can be 192.168.1.1) and enter the default login — admin without password.

3) In the opened interface at the top, open the tab “Tools“, left in the menu select “Firmware“. On the opened page the current version of the firmware will be displayed, if it is older than downloaded, then click “Browse” and select the previously downloaded new firmware file, and then click “Upgrade” to start the update process.

We will wait for the update to be completed, usually about 5 minutes. After the termination the router itself will reboot.
Categorically, you can not turn off the power when the firmware is updated.

How to catch broadcast storms on FoxGate switches

First of all, let’s look at the statistics of active traffic on ports:

show interface ethernet counter rate

Then we’ll look at the packet counters, especially pay attention to the BroadCast (pkts) column:

show interface ethernet counter packet

For a specific port, we will execute the command to view the statistics of the network interface several times:

show interface ethernet 1/25

And let’s pay attention to how the incoming and outgoing values of the broadcast packets change, if they do not change, then the broadcast packets do not go through this port, if the digit increases rapidly, then maybe there is a broadcast storm.

If necessary, we will enter the competing mode and set the limit of transmitted broadcast packets in kilobits (minimum value 1) for the required ports:

config
Interface Ethernet1/1
storm-control broadcast 50
Interface Ethernet1/2
storm-control broadcast 50
Interface Ethernet1/3
storm-control broadcast 50
...

Note that with a low broadcast bandwidth limit, DHCP broadcast requests from clients can also be blocked.

See also:
Block DHCP servers on FoxGate switches
Configuring the Foxgate S6224-S2 Switch