troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective...
Transcript of troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective...
![Page 1: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/1.jpg)
Mikrotik as the
troubleshooting tool
![Page 2: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/2.jpg)
Who Am I
Greg Sowell – A+, Network+, CCNA, CCNP, CCIE
Written, MTCNA, MTCRE, MTCINE, Mikrotik Certified
Trainer
VP of Technology FIBERTOWN Datacenters
Consultant – GregSowell.com
Author at Lynda.com/gregsowell
![Page 3: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/3.jpg)
TheBrothersWISP.com
WISP/Network industry scuttlebutt
Greg Sowell - Texas
Andrew Cox - Australia
Andrew Thrift – New Zealand
Tomas Kirnak – Slovakia
Tom Smyth – Ireland
Mike Hammett - Chicago
JJ Boyd – North Carolina
Alex Heart – Oregon
Justin Miller – Virginia
Justin Wilson – Indiana
![Page 4: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/4.jpg)
Assumptions
You are familiar with the Mikrotik interface
Adding Addresses
Adding Static Routes
Configuring Interfaces
Etc.
![Page 5: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/5.jpg)
Troubleshoot W/ Mikrotik as Router
“I can’t reach GregSowell.com!”
1. Try from my desk
2. Ping from router
3. Traceroute from router
4. Traceroute from customer
![Page 6: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/6.jpg)
How about now
![Page 7: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/7.jpg)
And now
![Page 8: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/8.jpg)
Router Is The Failure
“I can’t reach GregSowell.com!”
1. NATing issue
2. Firewall filter
3. Tunnel problem
4. Internal routing issue
![Page 9: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/9.jpg)
Utilizing a test Mikrotik
“I can’t reach GregSowell.com!”
1. Test outside of network *if possible*
2. Test at your desk
3. Use “Test” Mikrotik
4. Test from border
![Page 10: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/10.jpg)
ICMP Testing
Can the client ping the resource – (developed in 1983)
Collect Trace Routes(1987) from client(both directions if
possible), test Mikrotik, border, outside resource
![Page 11: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/11.jpg)
ICMP Results
![Page 12: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/12.jpg)
Multiple Gateways
Test to failed resource
Test to affected client
![Page 13: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/13.jpg)
Telnet for TCP Port Testing
Telnet to address on perspective
port – desk, test mtk, border
Good for plain text protocols
especially – www, telnet, SMTP, etc.
This can be paired with torch/packet
sniffer to show two way
communication.
Doesn’t 100% duplicate the
experience
![Page 14: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/14.jpg)
Testing Via VPN Tunnel
Security isn’t a concern, just test the resource(PPTP,
L2TP, SSTP, whatever works)
![Page 15: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/15.jpg)
Test WiFi
The WiFi is down…or nah?
Scan function to look for other APs/look at frequency utilization
Utilizing a VRF for network segregation
![Page 16: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/16.jpg)
Test WiFi
Put WLAN1 into a VRF with routing mark “wifi-test”
Add DHCP client to run on WLAN1 interface
Add masquerade rule for WLAN1 interface
Connect WLAN1 to the SSID/AP in need of testing
![Page 17: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/17.jpg)
WiFi Test Demo
![Page 18: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/18.jpg)
WiFi Test W/VPN Tunnel
Test from the router like any WiFi client
![Page 19: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/19.jpg)
WiFi Test W/VPN Tunnel
Enable pptp server
Create ppp secret for testing/edit default-encryption profile
Create pptp server interface “pptp-wifi-test”
Add pptp interface to VRF
![Page 20: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/20.jpg)
WiFi VPN Test Demo
![Page 21: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/21.jpg)
Utilize Out-Of-Band Management
Allows for access to network during severe issues
Use VRF for non-OOB interface(similar to wifi test
config)
Ethernet in VRF instead of WLAN1
![Page 22: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/22.jpg)
Mikrotik As Serial Console
Connect Mikrotik serial port to another device
Available via CLI or direct access
Disable serial port in system console
Connect to system-terminal
Ctrl-A + q quits
Ctrl-A + r changes rates
![Page 23: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/23.jpg)
Serial Console Demo
![Page 24: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/24.jpg)
Probe Test Mikrotiks
Probe test Mikrotiks via internal/external NMS
![Page 25: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/25.jpg)
L2 Troubleshooting
Communications issue on L2 segment
Not through router, how to test?
![Page 26: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/26.jpg)
Sniff Mirrored Switch Traffic
Configure Mirror/SPAN on switch
Torch on Mikrotik
Packet Sniff on Mikrotik
![Page 27: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/27.jpg)
Sniff Mirrored Demo
![Page 28: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/28.jpg)
RSPAN – Remote Mirroring
Mirror any LAN switchport to the collection port of
test Mikrotik
![Page 29: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/29.jpg)
Questions?
![Page 30: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/30.jpg)
One last thing, shake my hand,
tell me your story, and buy the
brothers a beer!
Thanks and happy routing!
![Page 31: troubleshooting tool - MikroTik · Telnet for TCP Port Testing Telnet to address on perspective port –desk, test mtk, border Good for plain text protocols especially –www, telnet,](https://reader033.fdocuments.net/reader033/viewer/2022052216/5b5911577f8b9a655d8cd53d/html5/thumbnails/31.jpg)
Resources
Greg’s Blog http://GregSowell.com
TheBrothersWISP
http://thebrotherswisp.com/
Link to script files
http://gregsowell.com/files/MUM2016Scripts.zip