Lowyat.NET: Latest topics by Anime4000

D-Link DPN-FX3060V OpenWrt Firmware

Anime4000 — Fri, 16 Oct 2026 09:05:52 +0800

D-Link DPN-FX3060V GPON OpenWrt Router
A GPON WiFi Router (All in One) based on Realtek SoC Processor that given by TM for Unifi Ultra Subscriber,
it share same Realtek LUNA SDK as my PON Stick Project. So I quite familiar with the layout.

Porting Effort
As I dissemble the firmware back then in May 22 2024, it's look promising that DPN-FX3060V can be ported to OpenWrt, at early stage OpenWrt boot and basic LuCI came up.
LUNA SDK manage quite different than LuCI way, so I need make a bridge between LUNA <> LuCI interface, more I work on Ghidra, I feel lazy to do it as effort are too much and not worth it, especially decomp effort are high. All my research, LUNA SDK stash away...
With help of Open PON Community, Pedro Teixeira Lantiq Falcon source code, LUNA SDK and Claude + Ghidra MCP made porting possible...

Stock Finding...
1. This router (RTL9607DQ) actually has all 4 LAN port HiSGMII (2.5Gbps), just need to interface with RTL8221B each port (this will increase BoM cost)
2. BSS Coloring is disabled, probably compatibility to play nice with WiFi 5 (Ethernet Thinking)
3. TWT not supported, SoC has but kernel disabled and cannot enable
4. OFDMA disabled...
5. Adhere to Regulation, Radio power and HE drop when DFS in effect and stay slow indefinitely, because of this WiFi become so crap
6. 802.3ad/balance rr not supported by SoC You cannot do bonding out of A1 ONT

Verdict, wasted opportunity for WiFi 6.

NIJIKA Firmware A part of Open PON Foundation

1. BSS Coloring enabled by default, WiFi 5 (you just background energy now)
2. OFDMA enabled by default
3. Reduce Radio Tx Power but never drop HE when DFS in effect
4. TR069 Daemon disabled by default (VLAN still received IP, because some OLT needs it for Profile & Internet Activation)
5. SNMP disabled by default
6. Alibaba MQTT binary removed
7. DNS over HTTPS!!! enable by default

If don't have any legacy device, now can force 802.11ax only (WiFi 6) and this will kick out WiFi 5/4 from connecting, enjoy true Cellular Wireless like LTE/5G

Our goal to make ISP router great again until user no need to call 3rd party~

Planning Add
1. Userland Wireguard
2. Mikrotik EoIP (driver backport)
3. IPIP Tunnel
4. maybe some vless?

as long DPN-FX3060V rootfs has space...

Screenshots
WebGUI is very basic of OpenWrt, cosmetic can be done later... PON & PPPoE connected to Perfect Internet

Take note that all of this connected to my OLT

Firmware Download
D-Link DPN-FX3060V, Hardware A1 (White):
NijikaWrt-r45-25.12.5-dlink_dpn-fx3060v-a1-factory.bin (Upgrade from Stock)
NijikaWrt-r45-25.12.5-dlink_dpn-fx3060v-a1-sysupgrade.bin (OpenWrt > OpenWrt)

D-Link DPN-FX3060V, Hardware B1 (Black):
not yet, I don't have it, anyone want to donate?

Revert Firmware
To roll back, just enable SSH in the WebGUI and do this:

CODE

nijika boot toggle && reboot

WARNING!
This firmware still early stage, feedback appreciated

Project Repo
Available at: https://github.com/PururinCollective

ΕΛΠΙΣ DNS (ELPIS) - Community Secure DNS

Anime4000 — Sun, 06 Sep 2026 13:49:53 +0800

Hi all,

Sharing the public encrypted DNS we run under the Pururin Collective Initiative. Nodes are spread across SEA (MY / SG / ID), on six networks in several datacentres.

ΕΛΠΙΣ is Greek for hope, pronounced "elpis".

Project started in September 2024:

» Click to show Spoiler - click again to hide... «

▍ WHAT'S NEW (7 October 2026)

New website. Pick your region, filter and protocol, and it builds the DNS address for you.
ΕΛΠΙΣ Resolver 2.4.4 "Celestial Equations". Encrypted queries to the root, TLD and name servers (ADoX), stricter post-quantum DNSSEC, and ready for the root key rollover on 11 October.
New network: AS204535 Kevin Tan Networks (Kuala Lumpur), via MyIX, with new endpoints and resolvers.
ΕΛΠΙΣ Resolver now also runs in Jakarta, Indonesia.

▍ ΕΛΠΙΣ DNS WEBSITE
https://elpis.violetnetworks.xyz
https://elpis.pururin.moe (mirror)

Choose Malaysia, Singapore or Indonesia, Standard or Family, DoH or DoT, and the website builds the address for you.

Get your DNS · Setup guide · Network · Resolver · ML-DSA-44 · Partners

Vendors and MSPs: you can now give your customers ΕΛΠΙΣ DNS under your own domain name, for free. See Partners.

▍ THE NETWORK

AS154516 — Perfect Network (MY, Semenyih), Colo, via MyIX, CDN, XLAT/DNS64, ΕΛΠΙΣ Resolver
AS204535 — Kevin Tan Networks (MY, Kuala Lumpur), Colo, via MyIX, ΕΛΠΙΣ Resolver NEW
AS135134 — Shana Network (SG), Colo, ΕΛΠΙΣ Resolver NEW
AS219206 — Interdata Networks (MY, Cyberjaya), VPS, Volunteer [@syahpian]
AS140389 — DewaBiz (ID, Jakarta), VPS, run by Ryukura, ΕΛΠΙΣ Resolver NEW

Every site runs DNS Guard, the encrypted, filtering front you connect to. Three of them also run ΕΛΠΙΣ Resolver.

The SG side has been running since 2022, so it is well settled for SEA routing. ΕΛΠΙΣ as a public project launched March 2026.

▍ QUICK START

MY Endpoint via AS154516

CODE

DoH : https://quic.undo.it/dns-query
DoT : tls://quic.undo.it
DoT : quic.undo.it (Android Private DNS)

SG Endpoint via AS135134

CODE

DoH : https://mcmc.undo.it/dns-query
DoT : tls://mcmc.undo.it
DoT : mcmc.undo.it (Android Private DNS)

MY Endpoint via AS204535 (Kuala Lumpur) NEW

CODE

DoH : https://dns.kevin.moe/dns-query
DoH : https://dns.pig.my/dns-query
DoH : https://anime4000.pururin.moe/dns-query
DoH : https://sakurako.pururin.moe/dns-query
DoH : https://89.23.82.53/dns-query
DoH : https://89.23.82.82/dns-query
DoT : tls://89.23.82.53
DoT : tls://89.23.82.82

* Same filter as the endpoints above. DoT here works on the IP addresses only (IPv4), so Android Private DNS can't use it. For Android, use one of the endpoints above.

DNS64 Endpoint (IPv4 -> IPv6, Prefix: 2402:4e20:b00b:7fff:64:ff9b::/96)

CODE

DoH : https://64.undo.it/dns-query
DoT : tls://64.undo.it
DoT : 64.undo.it (Android Private DNS)

PLAIN DNS (Port 53/udp)

CODE

151.158.198.49
87.76.160.30

2402:4e20::b00b
2a0d:9842:0:100::1068
2a0d:9842:0:100::1069
2a0d:9842:0:100::106a
2a0d:9842:0:100::106b

* DoH and DoT are the priority. Plain DNS is accepted but proxied and rate limited to roughly 20 QPS — fine for a router or a household, not for hammering.
* Behind CGNAT? Please avoid plain DNS: everyone sharing your IPv4 address shares the same rate limit. Encrypted DNS has no rate limit.

NORMAL DNS

CODE

DoH : https://zero1.hitoha.moe/dns-query
DoT : tls://zero1.hitoha.moe
DoT : zero1.hitoha.moe (Android Private DNS)
Plain: 151.158.198.10

CODE

DoH : https://zero2.hitoha.moe/dns-query
DoT : tls://zero2.hitoha.moe
DoT : zero2.hitoha.moe (Android Private DNS)
Plain: 151.158.198.11

* No blocklist on these, just normal DNS like Google or Cloudflare, but answered by our own recursive resolvers.

▍ ΕΛΠΙΣ RECURSIVE RESOLVERS

A recursive DNS resolver in portable C99, for people who would rather not send every lookup to Google or Cloudflare.
It does the recursion itself - root servers, TLDs, authoritative servers - so your queries stay between you and the servers that actually hold the answers.

2nd resolver in the world to validate ML-DSA-44 (post-quantum) DNSSEC, after Cloudflare!

Current version: 2.4.4 "Celestial Equations"

ADoX: asks the root, the TLDs and each domain's name server over DNS over TLS wherever they take it, and plain DNS where they don't. So far b.root-servers.net and Facebook's name servers do.
ML-DSA-44, as strict as Cloudflare: when a zone says it's signed with ML-DSA, a classic P-256 signature can't stand in for a broken ML-DSA one.
Root key rollover on 11 October 2026: ready. The new root key, KSK-2024 (key tag 38696), is already trusted.
Tested: passes all 313 dnscheck.tools DNSSEC tests (1.1.1.1 passes 285), and answers over 30 million queries a day across our resolvers.

ADoX:

ML-DSA-44:

CODE

your phone / PC / router
│
│ DoH / DoT, encrypted
▼
┌───────────────────────┐
│ DNS Guard │ the encrypted, filtering front
│ (AdGuard Home) │ you connect to, at every site
└───────────┬───────────┘
▼
┌───────────────────────┐
│ ΕΛΠΙΣ Resolver │ recursion, cache, DNSSEC
│ │ (ML-DSA-44 included)
└───────────┬───────────┘
│ DNS over TLS where the server takes it (ADoX),
│ plain DNS where it doesn't
▼
root ──► TLD ──► name server

Public resolvers — unfiltered on purpose. Use them as the upstream for your own AdGuard Home or Pi-hole: you keep your block lists, we do the recursion and DNSSEC. Mix groups (one Sakurako, one Fizo, one Kevin) so one going down for an upgrade never takes your DNS with it. In Indonesia, add Ryukura Jakarta.

CODE

Server IPv4 IPv6 Where
Sakurako-1 151.158.198.49:5301 2402:4e20:b00b::1001 Semenyih, MY
Sakurako-2 151.158.198.49:5302 2402:4e20:b00b::1111 Semenyih, MY
Fizo-1 151.158.198.47 2402:4e20:c0de::b00b Semenyih, MY
Fizo-2 151.158.198.46 2402:4e20:c0de::bab1 Semenyih, MY
Kevin-1 89.23.82.53 2a0f:1cc6:bab1::1111 Kuala Lumpur, MY
Kevin-2 89.23.82.82 2a0f:1cc6:bab1::1001 Kuala Lumpur, MY
Ryukura Jakarta 103.253.245.167:5301 (IPv4 only for now) Jakarta, ID

All seven run ΕΛΠΙΣ Resolver with ML-DSA-44. Step-by-step for AdGuard Home and Pi-hole: Resolver page

ΕΛΠΙΣ Resolver source code is available at Pururin Collective GitHub (GPL-2.0)

ΕΛΠΙΣ Resolver download: static binary at Releases (generic x86-64), run it on your own setup

▍ VERIFY

https://dnscheck.tools/
DNSSEC should pass, and ADoX in the bottom bar means our resolver reached the test server over TLS.

https://dnstest.dev/
Cloudflare's checks for post-quantum (ML-DSA-44) DNSSEC and for the root key rollover.

https://www.speedtest.net/ (Your ISP Changed to ours)

▍ About DNS64

DNS64 works together with our XLAT service to convert IPv4 destinations into IPv6, allowing IPv6-only devices and networks to access IPv4 websites and services effortlessly.

Example:

CODE

2402:4e20:b00b:7fff:64:ff9b:1.1.1.1

▍ Support

Forum: https://www.pururin.moe/
GitHub: https://github.com/PururinCollective/ElpisDNS/issues
Discord: https://discord.gg/aw8pt2SWnv

This project is supported by Perfect Network, Origin TechLab, Shana Network and Kevin Tan Networks.

Our team take care...

Signing off...

Epic HTML5 Animation https://89.23.82.53/ (.prproj to .html via Claude)

D-Link DPN-FX3060V GPON WiFi Router

Anime4000 — Wed, 22 May 2024 12:41:46 +0800

D-Link DPN-FX3060V GPON Router
A GPON WiFi Router (All in One) based on Realtek SoC Processor that given by TM for Unifi Ultra Subscriber,
it share same Realtek LUNA SDK as my PON Stick Project. So I quite familiar with the layout.

Official Warranty
1. 1-Year Limited Warranty: Provided by TM, ensuring coverage for manufacturing defects.
2. Free Replacement: Available for customers who are currently under contract with TM.
3. Contractual Implications: For customers not under contract, a replacement will automatically initiate a new 2-year contract with TM.

Avoiding Contract
If you want to avoid committing to a 2-year contract, you can opt for a custom-built GPON Stick or a managed GPON device compatible with TM's OMCI, available for purchase.

Specification
SoC: RTL9607DQ (Cortex A55), 4 Core @ 1GHz, AArch64, ARMv8
RAM: 512MB DDR3L @ 1866MT/s
MEM: 256MB SPI Flash Winbond
OS: Realtek ASDK64, Linux Kernel 5.10.70 (glibc v2.30)
MB: Realtek Taurus ENG Board

A1 (White)
WiFi6: RTL8852CE (2.4GHz & 5GHz)

B1 (Black)
WiFi6: RTL8192XBR (2.4GHz) + RTL8832CR (5GHz)
LAN1: RTL8221B Switch Chip (HiSGMII to 2500Base-T)

Internal
Image of A1 Hardware a gift by [@chong601]
Image of B1 Hardware

Block Diagram
A1 (White)

B1 (Black)

Discovery 10G
I found stock firmware has 10G PON (XGPON, XGSPON). Maybe TM have planning to migrating

Known Issue
1. Prior to B1 Hardware @ V2.0.2 have issue to set bridge mode on certain OLT, temporary fix is by accessing UART at change FwdOp to 0x02
2. Prior to B1 Hardware @ V2.0.2 when in bridge mode, LAN side management such as WebGUI, SSH, Telnet being killed by deep ME 171 (ex: Alcatel-Lucent/Nokia OLT)
3. Both Hardware has so called "Cloud IoT" for D-Link Air, it always running and always watching, other considered this as Backdoor

Vulnerability ⚠️
Two user has been verified there several CVE or more.
If you are concern about security and want to minimise risk of attack, DON'T USE THIS DEVICE

Use of Dumb ONT Bridge to avoid backdoor, can re-use this D-Link as ATA Device, I recommend get own ATA or Desktop SIP Phone

It appear that Firmware V2.0.3 as same vulnerability as previous version

VoIP User Agent

CODE

DPN-FX3060V_V2.0.2 (SIP-std-R11448)

Management Entities Issue
OMCI ME can be very complex and total control of your ONT even without TR069! This mean TM can disallow Bridging and Force creation of PPPoE inside the Router!

Example of Simple OMCI Stack

* based on Alcatel-Lucent/Nokia OLT

ME Point
The RLT9607DQ has HiSGMII which can be paired with RLT8221B for 2.5GbE Access, but it use wrong ME Point, this can be fix by adjusting the OLT or Hack

Nijika Firmware A port form PON Stick Project

I have ported my PON Stick Project to both hardware, In my spare time, I manage to add OLT Info page and bug fix!

OLT Info
ZTEG/5a544547 (ZTE)

ALCL/414c434c (Alcatel-Lucent/Nokia)

ALCL/414c434c (Alcatel-Lucent/Nokia) by [@jonathanwhm]

As you can see, even on same OLT, the way VLAN is being push, set and manage is different, for example my fiber VLAN400 (VoIP) doesn't exist on LAN1 UNI but only exist on VEIP UNI
This discrepancy among OLT's make many user unable to bridge!

OLT Vendor Id
| ASCII | HEX |
| ALCL | 414c434c |
| FHTT | 46485454 |
| FHTT | 0x00* |
| HWTC | 48575443 |
| UBNT | 55424e54 |
| ZTEG | 5a544547 |
| - | 0x00** |
* FHTT send 0x00 to ONT as allowing other ONT work on FHTT OLT
** Sometime TM use off-brand OLT on Kampung/under-develop area

OLT Issue
On my experience during PON Stick deployment, there are many ME 171 to map. Rank from top (most troublesome)

1. Fiberhome (FHTT) (most troublesome)

QUOTE

A. FHTT doesn't show it's OLT Vendor Id when in Universal Mode, it cause to display as 0x00.
B. Also FHTT push ME 171 varies from customer to customer, mostly are able to bridge until ME 171 become Router Mode which is need a special IGD hack to fool OLT and quietly bridge VLAN 500 to SFP Interface
C. Speed issue are very common on FHTT, It's has lack proper QoS and doesn't have DSCP, wrong ME 277 (Priority Queue) cause speed drop or even worst: 2000Mbps Download, 67Mbps Upload

2. Alcatel-Lucent/Nokia (ALCL)

QUOTE

A. ALCL has very deep ME 171, even it can kill WebGUI, disable LAN Ports even crash the ONT by sending same VLAN on PPTP and VEIP!
B. Bridging VoIP from VEIP to LAN/SFP side can very tricky, but possible to override!
C. First time activation, only one ME 171 profile for you for all ONT you have!
D. ALCL has proper QoS and DSCP, this give user more speed especially upload speed can be max as 1100Mbps!

3. Huawei (HWTC)

QUOTE

A. HWTC have different Forwarding Operation (FwdOp) depend on legal TM ONT, mostly HWTC would use 0x04 or 0x10 for other ONT
B. Bridging VoIP from VEIP to LAN/SFP side can very tricky, but possible to override!
C. Plugging different ONT cause HWTC set different ME 171 profile to match that ONT, as simple fix!

4. ZTE (ZTEG) (least troublesome)

QUOTE

A. ZTEG in Universal is very easy to handle, ME 171 also simple
B. ZTEG has very highest speed performance! Download speed can be max as 2129Mbps! overtake ALCL for Download performance!
C. ZTEG also has proper QoS despite lack DSCP feature!

If you ask me, FHTT is crap to work with! I hate FHTT Priority Queue so much!

Share OLT Status Page
Please update the firmware to correct Hardware A1 or B1, and share your OLT Info just like screenshot above,
This way we here can know which OLT are you on, either troublesome FHTT or awesome ZTEG

Firmware download can be found on next post

Turn D-LINK DPN-FX3060V as ATA/VoIP

Anime4000 — Mon, 23 Oct 2023 01:33:52 +0800

Want to use GPON ONU SFP but want to keep VoIP? No problem, I have done re-search on D-LINK DPN-FX3060V

Now you can enjoy pure 2Gbps+ and working VoIP!

This part of my project user replaceable device
1. Ditch ONU/ONR, use GPON SFP on Business Grade Router and get pure 2Gbps!
2. Ditch Router, use Maxis 4G LTE Backup on other device
3. Ditch Router, use Maxis VoIP on other device
4. Turn D-LINK DPN-FX3060V as ATA This Thread

Step 0
If you haven't setup D-LINK DPN-FX3060V yet, please plug UPC fiber and run setup: use Setup Wizard/Quick Setup and with Default GPON Router first!* Important!

Your PPPoE

Wireless
Do what ever you want, later can bridge WLAN1 & 5 (no NAT)

And put your VoIP Credential

After done setup D-LINK DPN-FX3060V as usual, check VoIP Status, make sure it's show Registered

Step 1
1. After your D-LINK DPN-FX3060V has working internet and VoIP, you can disconnect the UPC fiber and plug back into your GPON ONU SFP
2. Now create VLAN Bridge on your favorite router (Asus ROG Rapture AXE16000 or Mikrotik RB5009)

For Mikrotik user, you can move all VLAN to bridge as parent interface, then sfp-sfpplus1 as bridge member

* this will expose Unifi VLAN into your network, you can use any LAN port easily!
* Plus, you can re-use D-LINK DPN-FX3060V as 2nd NAT Router (via DHCP) or Bridge to LAN Port or WiFi !!!

For non-Mikrotik user (Asus, TP-Link, ...) create a VLAN to specific LAN Port, probably those router do PVID (Tagged to Untagged), thus additional D-LINK DPN-FX3060V configuration is needed by disable VLAN of VoIP at D-LINK DPN-FX3060V

Step 2
1. Login into D-LINK DPN-FX3060V, Disable your PPPoE at Setup -> WAN Mode

2. Then and go to Setup -> WAN Mode -> Select RG Mode

2. Click OK to reboot, because turn this D-Link as normal Router, thus GPON module is disabled
3. LAN 1 of D-LINK DPN-FX3060V as WAN now, plug your LAN cable to WAN

Step 3
1. Once D-LINK DPN-FX3060V is done rebooting, login and verify that VoIP Interface has an IP Address:

2. Verify VoIP is Registered

Now, you have done make D-LINK DPN-FX3060V as ATA Device!

Take note that you may not getting VoIP IP Address as OLT not provisioned to bridge and GPON ONU SFP simply respecting OLT.
Currently I doing testing to override some OMCI just to bridge VoIP as is, more test is needed.

Huhu

Ditch Router, use Maxis VoIP on other device!

Anime4000 — Thu, 17 Feb 2022 22:38:44 +0800

Hi, Finally I can confirm that Maxis VoIP can work on Yealink IP Phone

This part of my project user replaceable device
1. Ditch ONU, use GPON SFP on Business Grade Router
2. Ditch Router, use Maxis 4G LTE Backup on other device
3. Ditch Router, use Maxis VoIP on other device This Thread

This should work on any Maxis on any fiber, however, I tested on TM-Maxis.

TLDR:
Phone ID / Username:
Your Phone ID and Username, it should be same

CODE

0123456789

Password:
Your password, you can find just do Account Number + Last 4 Digit phone number

CODE

00000000006789

SIP Server:
Note: This FQDN routable via Proxy, it will resolved IP Address to 14.192.234.109

CODE

homesip.maxis.com.my

Proxy Server:
Note: This FQDN routable only on Maxis Network (PPPoE, 4G, VLAN), it will resolved IP Address to 202.75.146.26

CODE

homegw01.maxis.com.my

Codec:
Note: using unsupported codec result no incoming or outgoing call

CODE

1. G.711 ALaw (PCMA)
2. G.711 uLaw (PCMU)

Register Expires (sec):

CODE

900

Register Retry Interval (sec):

CODE

DTMF:

CODE

In-Band

User-Agent:
Note: Maxis VoIP only accept valid User-Agent sub-string, without this, you will get Error 405: Method Not Allowed

TP-Link Archer C5v

CODE

TPLINK ARCHER C5V BUILD v1.0_191212-3202049003674

KaonMedia AR2140 (Provided by [@darthobiguan])

CODE

Brcm-Cctk/v2.2.0 M5T SIP Stack/4.1.10.16 1.2.50_r11 <SN>

Aminia MA131 (Provided by [@ruifung])

CODE

MA131 SIP-stdR11448 2.1.13m_20200214 <SN>

As you can see, I highlighting User-Agent in RED! This is the reason your VoIP not work on other place, SIP Server looking specific sub-string before get Authenticated.

Tested Device:
Yealink T21 E2
Configure like this, simple is better
[attachmentid=11095319]

You need change Yealink User-Agent via CFG file, Export, Edit, Import!
[attachmentid=11095291]
[attachmentid=11095301]

NOTE: Yealink custom User-Agent will append like this, not total replace, it may not work in the future.
[attachmentid=11095314]

Tested SoftPhone:
MicroSIP (Windows)
Open MicroSIP and add 1 account like this, then close MicroSIP
[attachmentid=11095315]

Then edit microsip.ini find userAgent= and paste it, like this:
[attachmentid=11095316]

Then open MicroSIP, try call:
[attachmentid=11095320]

3CX PABX
Refer to this shahrul8404 post

FreePBX
Refer to this ruifung post

Android / iOS
So far I didn't find suitable SoftPhone that allow custom User-Agent, if you find one, let me know~

ONU POTS
I tried on HG8240H and HG8240H5, not working even with custom User-Agent, apparently TM OMCI override VLAN 822 IPoE, you can try if TM OMCI not strict as mine here...

Accepted Network
1. VoIP VLAN
2. Maxis PPPoE Internet
3. Maxis 4G/LTE

I have tired on non-Maxis (TIME, Unifi, ) it seem FQDN sgb-cvx1.146.26 are not reachable

SIP ALG
You can use VoIP without VLAN, however, your router must support SIP ALG.
Ubiquiti EdgeRouter having trouble with SIP ALG, you must use VoIP VLAN

What is the reason Unifi provide very slow upload

Anime4000 — Sun, 26 Dec 2021 22:04:05 +0800

What is the reason Unifi provide very slow upload speed?

Story
My friend NAS is dead due to flood, he start off-site backup to my TrueNAS, while saving themselves.
I been monitoring the progress, the transfer are half-way.
The NAS is ruined, send to Data Recovery pros and the disk is beyond recover!

Even with 200Mbps upload takes 4.4 days to complete whole, not to mention that 200Mbps is not 100% all time (TM cheat speedtest to satisfy customer)

---
I write this just to told this story, having a NAS not mean immune to data loss, even with off-site backup in place, still limited to ridiculous Unifi upload speed.

Even with public cloud, still limited to internet speed.

However, I still have my friend backup 6 month ago... you know why...

Unifi cannot reach 192.203.230.10

Anime4000 — Thu, 15 Jul 2021 02:41:35 +0800

I trying to setup my friend home server, some IP Address under Unifi are unreachable.
Especially IP Address begin with 192.*.*.* unreachable.

Address that cannot reached by Unifi:

CODE

198.41.0.4
199.9.14.201
192.33.4.12
199.7.91.13
192.203.230.10
192.5.5.241
192.112.36.4
198.97.190.53
192.36.148.17
192.58.128.30
193.0.14.129
199.7.83.42
202.12.27.33

Also IPv6

CODE

2001:503:ba3e::2:30
2001:500:200::b
2001:500:2::c
2001:500:2d::d
2001:500:a8::e
2001:500:2f::f
2001:500:12::d0d
2001:500:1::53
2001:7fe::53
2001:503:c27::2:30
2001:7fd::1
2001:500:9f::42
2001:dc3::35

There is something wrong with Unifi? or TM disallow that IP Address for some reasons?

PPPoE @ MTU 1500

Anime4000 — Sat, 10 Apr 2021 04:11:24 +0800

I been reading xPON technology especially GPON standards as
Malaysia ISP using it as part of my project GPON Stick ONU SFP

I notice that GPON standards has fixed L2 MTU which is 2000 bytes

I login into my Mikrotik and set MTU to 1508 bytes (Baby Jumbo Frames) on sfp1 and vlan1.621, also set PPPoE MTU to 1500 bytes:
[attachmentid=10837448]

Initiate PPPoE Connection... It works without MRRU (Active Links: 1)!
[attachmentid=10837449]

I just to make sure run a ping MTU test:
[attachmentid=10837450]

Ping MTU test via Windows (1500 - 28):
[attachmentid=10837451]

For me, Maxis Fibre support RFC4638 via imse01.mc_rsh-re0 [F0:1C:2D:22:87:C3]

How about other Fibre ISP?
Can anyone try PPPoE MTU 1500? See which ISP support RFC4638 (you may need router that support)

It is good use Link Local IPv6 for Printer/IoT

Anime4000 — Thu, 25 Mar 2021 23:25:45 +0800

I deploying large quantity HP LaserJet Printer in City Hall.

Firstly, their network has no DHCP, finding unused IP appear to be difficult, scanning for address not guarantee host is online or offline or unused.

After all struggle, I found that Link Local IPv6 become very handy, even survive when factory reset, since it follow EUI64 (IP MAC Address) as far I see.

After that, I connect all AIO Printer using Link Local Address, when accessing WebGUI printer using IPv6 (http://[fe80::dead]) it bypass corporate network to access local device.

Even survive change of Router/Switch/Hub/etc... Even survive change of place in new environment, as long bring same PC's and Printer under same Switch!

It seem using IPv6 make deployment faster, just hard to remember and type hex address.

Question to expert network administrator, it is good practice to use Link Local IPv6 to connect Printer/Scanner/IoT?

High power TX laser can cause burned OLT?

Anime4000 — Sun, 14 Mar 2021 23:38:38 +0800

I tried high power xPON that rated 100KM, Class C+, Rated TX 50dBm on Unifi line.
It's possible that high power xPON laser can cause burn due to wrong rated distance?

Who own this 121.123.204.200 address

Anime4000 — Sat, 06 Mar 2021 00:36:23 +0800

I believe this address (121.123.204.200) own by Maxis
but SSL Certificate being wrong... are ISP can crack Encryption?
[attachmentid=10804421]

Certificate used on that server:

» Click to show Spoiler - click again to hide... «

CODE

GITN Problem Access Microsoft/HP/Dell Update

Anime4000 — Tue, 05 Jan 2021 22:50:17 +0800

as per title, my job to check system health, disk health or any issue,
most importantly Update Windows to latest security patch, also Intel ME/Chipset driver, and End Point Antivirus.

I have trouble to run these update, I have local windows admin account, so I can use VPN and update from Admin sessions, but VPN are not working,

OpenVPN 443 also not working, many foreign server get black-holed

so I use my home VPN (Maxis Home Fiber) under 121.122.0.0/17 and 121.123.0.0/17: not working

is there any technician has been done this job before? how to mitigate this?

Mikrotik RB3011UiAS-RM USB 3.0 SFP 10x Port

Anime4000 — Tue, 22 Dec 2020 12:43:14 +0800

Item(s): Mikrotik RB3011UiAS-RM (Bought from Amazon US)

Package includes: RB3011UiAS-RM, AC Adapter

Price: RM650

Warranty: 1 Year

Dealing method: CoD or Postage J&T

Location: Seremban (Terminal One) or Bangi (Bangi Gateway)

Contact method/details: WhatsApp

---

Item(s) conditions: 9.9/10

Picture:
[attachmentid=10733335]
[attachmentid=10733336]
[attachmentid=10733337]
[attachmentid=10733338]

Reason for sale: Upgrade to more advanced router for self-learning

Mikrotik LAN unable to display Steam LAN Server

Anime4000 — Mon, 14 Dec 2020 19:23:24 +0800

I have several game server running in home, using RB3011UiAS

game server connected at LAN Port 4 while My PC connected at LAN Port 6,

Steam Server Browser unable to show running server unless I use TP-Link Switch, it able to show server list within LAN

Server is running and have player in it, but can see server list/status:
[attachmentid=10723847]

There are any setting need to configure? apparently game use 255.255.255.255 to broadcast, Mikrotik seem unable to accept

Unifi IPv6 is really slow?

Anime4000 — Tue, 01 Dec 2020 23:15:31 +0800

Currently I remote client computer and send large file via HTTP under IPv6, this particular client has 500/200 speed (Unifi free upgrade).
Transferring data within same state, just different ISP.

As my per experience using Streamyx, IPv6 is slow, I thought Unifi will be faster, but, this client downloading under IPv6 and very slow, not even use all my max upload speed.
[attachmentid=10709504]

Can VLAN increase speed? 1Gbps > 2Gbps

Anime4000 — Sun, 06 Sep 2020 13:15:00 +0800

I wondering, will VLAN increase speed on single Gbit Port?
Like, bonding multiple VLAN

» Click to show Spoiler - click again to hide... «

point.putrajaya.my is really that slow?

Anime4000 — Mon, 24 Aug 2020 15:46:35 +0800

How to tell Ubuntu not to choose point.putrajaya.my as default? Really shame to show a slow speed
[attachmentid=10562010]

LG Ultrawide Monitor 34UC79G 34" 2560x1080 144Hz

Anime4000 — Thu, 30 Jul 2020 20:04:50 +0800

Item(s): LG Ultrawide Monitor 34UC79G 34" 2560x1080 144Hz FreeSync

Package includes: Monitor, Stand, Power Adapter, DP, HDMI, USB 3.0 Upstream

Price: RM1700, can slightly nego

Warranty: Registered, ‘till October 2021

Dealing method: COD

Location: Seremban Gateway, Bangi Gateway, nearby places

Contact method/details: WhatsApps to 012-9769422
---

Item(s) conditions: 9/10, this monitor just return from Warranty, LCD Panel is new 10/10. (Only use for test run after warranty)
Reason for Sale: Extra, bought new monitor while waiting from the warranty.

Picture:
[attachmentid=10546239]
[attachmentid=10546240]
[attachmentid=10546242]
[attachmentid=10546244]
[attachmentid=10546246]
[attachmentid=10546248]
[attachmentid=10546250]
[attachmentid=10546253]

Windows 10 Home is Illegal use in Business

Anime4000 — Tue, 21 Jul 2020 18:21:02 +0800

Today Microsoft ambush to my office to inspect pirated Windows 10 activation.

All of my computer is Windows 10 Home that I bought.

They said Windows 10 Home is not allowed in Business Environment, also they offer discount summons if I bought Windows 10 Pro from them.

Which part of EULA mention Windows Home edition is illegal use in Business?

Very loud Cisco 2900 Series & Networking Stuff

Anime4000 — Thu, 16 Jul 2020 23:10:24 +0800

1. Is anyone manage to reduce noise from Cisco 2900 Series Router?

2. Since GPON can split from 1:2, 1:4, 1:8, 1:16, 1:32, ... will GPON speed reduce each split? or maintain same speed with increased latency? (D2488/U1244 Mbps)