News: MikroTik and Ubiquiti fix WPA2 Client Vulnerability

For those unfamiliar with this latest WPA2 Security Vulnerability, please bear in mind the problem is on the client device, not the AP. Therefore rushing to patch your APs is not going to solve all the problems in your network from this vulnerability!

Of course, if you’re using WPA-TKIP (or using ‘both’ TKIP and AES), you DO have more problems than this attack. Therefore please ensure that any support for TKIP is disabled!  If you’re using WEP, this vulnerability will not affect you, but then again, you have even bigger problems anyway!
Continue reading “News: MikroTik and Ubiquiti fix WPA2 Client Vulnerability” »

Ubiquiti UAP AC IW in UK Back boxes

Mounting the UAP AC In-Wall

The Ubiquiti UAP AC in wall (UAP-AC-IW) has arrived and unlike the previous In-wall Unifi the AC variant is built to support multiple mounting and back box designs including UK back boxes.

The Unifi AC In-Wall does not mount in wall like the name would suggest, instead it mounts to the surface of the backbox leaving 30mm sticking out. This is better for RF performance as the radio will have less wall to power through improving performance.
Continue reading “Ubiquiti UAP AC IW in UK Back boxes” »

News: LinITX joins UK WISPA

LinITX are pleased to announce that we have joined the UK Wireless ISP association (UKWISPA).

The UK Wireless Internet Service Providers Association (UKWISPA) is the official trade body recognised by UK Authorities. Our mission is to promote the interests of the industry and ensure that services provided by its members are of the highest standards possible.

Continue reading “News: LinITX joins UK WISPA” »

Ubiquiti Amplifi UK

We have been working closely with Ubiquiti over the past few months to get their latest product ready for the UK market. Amplifi UK is the first product from Ubiquiti to come with a UK plug as standard, no adapters needed.

AMPLIFI is available in 3 flavours with UK specific plugs. The AMPLIFI HD Home Router, the AMPLIFI HD Mesh Point and the full AMPLIFI HD Kit.
Continue reading “Ubiquiti Amplifi UK” »

News: MikroTik PowerBox Pro Gigabit Outdoor PoE

We now have stock of the MikroTik PowerBox Pro

The MikroTik PowerBox Pro is an outdoor five Gigabit Ethernet port router with PoE output on four ports. The PowerBox Pro features a sleek outdoor enclosure, making it suitable for various types of installations such as radio towers.

The PowerBox also supports passive or standard 802.3at/af PoE input/output. Ethernet ports 2-5 can power PoE capable devices with the same voltage as the unit is supplied with, making for a cleaner install. It can power 802.3at and af mode B compatible devices, if 48-57V input is used. The MikroTik PowerBox Pro has an SFP port for a fiber connectivity, it is small, affordable and easy to use. But at the same time comes with a powerful 800MHz CPU, capable of all the advanced configurations that RouterOS supports.

News: MikroTik release RouterOS 6.38.7 (bugfix tree)

MikroTik have a new release in the bugfix tree.
https://mikrotik.com/download

What’s new in 6.38.7 (2017-Jun-20 10:55):

!) bridge – fixed BPDU rx/tx when “protocol-mode=none”;
!) bridge – reverted bridge BPDU processing back to pre-v6.38 behaviour (v6.40 will have another separate VLAN-aware bridge implementation);
*) 6to4 – fixed wrong IPv6 “link-local” address generation;
Continue reading “News: MikroTik release RouterOS 6.38.7 (bugfix tree)” »

MikroTik release RouterOS 6.36

MikroTik have released 6.36 in the current release channel. Here is their changelog:

What’s new in 6.36 (2016-Jul-20 14:09):

*) arm – added Dude server support;
*) dude – (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=110428);
*) dude – server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from our cloud. So workstations on which client is used will require access to wan. Alternatively upgrade must be done by reinstalling the client on each new release;
Continue reading “MikroTik release RouterOS 6.36” »

News: Latest Ubiquiti vulnerability info

As many of you are probably aware, a lot of Ubiquiti devices running old firmware are under a new wave of attack taking advantage of an old vulnerability that was fixed a year ago.

In response to this latest wave of problems for some WISPs, Ubiquiti have thoughtfully emailed everyone on their mailing lists with their latest advice, namely:

“In recent days, we’ve seen virus activity taking network devices offline. In most cases, devices are reset to factory defaults. In other cases, devices are still operational, but inaccessible. The virus is using an HTTP/HTTPS exploit that doesn’t require authentication. Simply having a radio with out-of-date firmware and having its HTTP (port 80)/HTTPS (port 443) interface exposed to the Internet is enough to get infected.”
Continue reading “News: Latest Ubiquiti vulnerability info” »

HowTo: MikroTik Secure VPN Part 1.5 MikroTik to MikroTik with IPSec

This is a short HowTo which will cover the set-up of Mikrotik to Mikrotik VPN but secured with IPsec. The use of IPsec can be very CPU intensive and it is recommended that the VPN server be set up on a Mikrotik which supports hardware based AES/IPsec encryption such as the Mikrotik RB850Gx2RB3011 or any CCR series router.

I will be using a RB850Gx2 as my VPN server and a Mikrotik mAP as my VPN clients, all the heavy IPsec processing will be done on the RB850Gx2 which has AES hardware for offloading IPsec calculations. ROS 6.33.3 or higher on the client side is required in order to make use of the ‘easy IPsec connect’ feature.
Continue reading “HowTo: MikroTik Secure VPN Part 1.5 MikroTik to MikroTik with IPSec” »

HowTo: Optimising MikroTik Firewall rules

When creating complex firewall rules on MikroTik routers, especially those with high levels of packet throughput, it is important that any rules are processed in an efficient manner. Firewall rules are processed top down. Every new packet is tested against each rule until a match is found. For high packet count traffic, this could mean that all those packets are having to be processed many times before it is matched. This can require a higher processing power than necessary and if the CPU reaches 100%, packet loss will occur.
Continue reading “HowTo: Optimising MikroTik Firewall rules” »