Skip to content
· Support · 5 min read

How to Enable MikroTik RoMon Access on UBNT EdgeSwitch and EdgePoint Devices

How to Enable MikroTik RoMon Access on UBNT EdgeSwitch and EdgePoint Devices

Umut Can Yıldız Umut Can Yıldız
How to Enable MikroTik RoMon Access on UBNT EdgeSwitch and EdgePoint Devices

With RouterOS v6.28, RoMon (Router Management Overlay Network), which has become an essential management tool for system administrators using MikroTik infrastructure, is automatically blocked because it is detected as an undefined L2 communication protocol by the EdgeOS operating system used in the UBNT EdgeSwitch and UBNT EdgePoint product groups. Due to this restriction, MikroTik devices running behind EdgeSwitch and EdgePoint switch models cannot be accessed via the RoMon protocol.
To fix this issue, which has been encountered in all EdgeOS versions released so far, you can connect to your switches via SSH, TELNET, or the CONSOLE Port and apply the following steps:
enable // (type this and press Enter) // Depending on the software version you are using, you may be asked for your login password again. // Type your login password and press Enter. Default password: ubnt configure // (type this and press Enter) mac access-list extended global // (type this and press Enter) permit any any // (type this and press Enter) exit // (type this and press Enter) mac access-group global vlan 1 in // (type this and press Enter) // In the step above, you allow RoMon packet forwarding on VLAN ID 1, which is the default VLAN ID of your switch. // If you also want to enable RoMon forwarding for different VLANs on the switch, // replace the number 1 in the command above with the VLAN ID you want // and run the command again. Example command: mac access-group global vlan 200 in exit // (type this and press Enter) quit// (type this and press Enter) // You will see the warning: Would you like to save them now? (y/n). // To save the changes you made, press the y key. // Your command-line connection will be closed automatically after the changes are saved.

!! IMPORTANT: This procedure was performed in a test environment and has not been tested on actively running systems. Before applying the rules, do not forget to take a backup as a precaution!

!!! NOTE-1: If you cannot connect to your switches via SSH, you can enable the SSH connection feature of your switches with the help of this article: https://goo.gl/svdGwe

!!! NOTE-2: The booklet below was used while performing the procedure above. https://goo.gl/uAT9nk (Pages: 386 to 399)

Visit the store to browse and purchase wifiAnten products.

Enter store

Comments

No comments yet. Be the first to comment.

Leave a comment

Sign in with Google first to post a comment.

Questions

No questions yet. Be the first to ask.

Ask a question

Sign in with Google first to ask a question.

Share:
Umut Can Yıldız

Written by

Umut Can Yıldız

Sistem destek uzmanı