MikroTik

amorsen

/interface/bridge add name=lanbridge /interface/list add name=lan /routing/ospf/interface-template add interfaces=lan ambiguous value of interface, more than one possible value matches input Apparently RouterOS is trying to autocomplete, and somehow getting confused. If I rename the interface group...

amorsen

Most vendors have support for /31 by now. RouterOS however has some peculiarities. I would really like RouterOS to ARP for the remote address, to avoid flooding the network with broadcasts and to interop with other vendors. Testing against a Fortigate with 1.2.3.5/31, but I believe most vendors beha...

amorsen

That looks amazing!

It would be even better if there was a safe-mode for the API, to recover from mistakes that block access.

amorsen

Enable safe mode and then run import. This does not seem to work if you use common libraries. When using ssh programmatically, you tend to send one command and get the result from that command. The next command is sent as a separate entity, having no relation to the previous command. This makes it ...

amorsen

I have a (hopefully) simple feature request that would make automatic changes on routers more foolproof. Add a parameter safe-mode to the /import command. When that is set, activate safe-mode before doing the import, and if connection is lost, do the rollback just like regular ctrl-X-style safe mode...

amorsen

Do not vote for features that I propose. This feature request (from 2008) is a good example of why my current score is zero feature requests accepted.

Find someone with more influence with Mikrotik to propose the features you need.

amorsen

Good point, we definitely need some option to stop bridge if all bridge ports are down (or to run it only if there are active ports). Someone just needs to contact support@mikrotik.com with that request :) I contacted support multiple times. They refused to accept that it is an issue. Oh well, Juni...

amorsen

So, the old master-port code is gone. Now we are stuck with bridge interfaces being always up, whether there are any ports up in the switch. I have posted repeatedly why this is unacceptable.

Please bring back security fixes for the 6.40.x releases.

amorsen

If you start with the standard configuration, ether2 has ether3-5 as slave ports, and none of the ports ether2 through ether5 have cables attached, any IP addresses assigned to ether2 will be inactive. After the upgrade to rc and the switch to the new bridge implementation, any addresses assigned to...

amorsen

Insinuating that I have not read the RFC is not particularly helpful either. The RFC tells how to select the best path which is advertised to other peers. It does not specify which routes you put into the hardware forwarding table, that is a policy decision which is outside the scope of the RFC prot...

amorsen

Considering that most of your competitors can do it, "by design" is not very convincing. But fair enough, choices are the good thing about competition

amorsen

http://wiki.mikrotik.com/wiki/Manual:BGP_Load_Balancing_with_two_interfaces#Example_with_eBGP describes how to achieve load balancing per-flow. It is however a rather complicated setup. I tried to use the much simpler solution of just adding the second router as two eBGP peers on two different inter...

amorsen

I am trying to use raw RSA authentication to interoperate with Openswan. The challenge is that Openswan keeps its public keys in a format like pubkey=0sA... whereas RouterOS apparently expects a PEM file. Is there any way to convert the Openswan format to something which RouterOS can use?

/Benny

amorsen

Is there a handy way to create a backup which will restore to a different router?

The built-in backup function in 4.6 does not get all settings transferred correctly when restored to a different router of the same model (where MAC-adresses are different).

amorsen

Thank you very much SmalleR. I'll go for the 82576 then.

It's a bit sad if RouterOS actually uses legacy IRQ's though; that's quite a waste of a multiqueue NIC.

amorsen

Did the beta version 5 add support for 82576? I'm looking around for a more performant card for our current x86-based routers, and I'd like to pick a card which has RouterOS support so we can switch them to RouterOS one day. The choice seems to be Intel 82576 on an Intel-brand card or NetXen NX3031 ...

amorsen

Good old PCI is 133MB/s, which would be enough for almost all our customers. You'll be CPU limited before you hit 1Gbps on the RB600 anyway.

Not that it helps us though, we'd need a 1U rack mountable cabinet for it and that's difficult with a daughterboard.

amorsen

So 13 ports, 1U, PPC CPU.

Still wondering about CPU speed and whether any of the ports are SFP. I couldn't see the interfaces clearly in the video.

amorsen

I'm deeply impressed by your ingenuity. I don't think we'll be able to support that solution for our customers, but it's really really clever.

Hopefully Mikrotik will come up with something simpler.

amorsen

Thanks Chupaka! That's brilliant!

"For every complex problem, there is a solution that is simple, neat, and wrong."

Apparently for this particular problem there is also a solution that is simple, neat, and correct...

amorsen

I have a need for setting the 802.1p tag based on the DSCP tag. I.e. basic DSCP-to-CoS translation, like vconfig set_egress_map does on plain Linux. It seems like there are two possible workarounds for achieving this on RouterOS: I can use the bridge chip to do the mapping. Unfortunately the platfor...

amorsen

It would be very convenient if you switched to asplain for printing. asplain is the preferred format.

See e.g.: http://ripe.net/ripe/maillists/archives ... 00018.html

amorsen

But first we need better ethernet port diagnostics. I was somewhat shocked today when I realized that there are no ethernet diagnostics in routeros. Ouch. This is certainly making me reevaluate whether the RB1000 is an appropriate platform for our customers. For the customers with RB450 it's a nice...

amorsen

For me it's not a matter of not trusting the results. Wine isn't going on the servers in our data center. You can call that religious, but it isn't going to change. Not that a non-free-software bandwidth test application is going on them either.

amorsen

I just want to second the request for a Linux BTest server. The lack of it is causing grief among our support staff.

amorsen

If you're willing to depend on RADIUS, you could send the DHCP request off to a different DHCP-server -- possibly even running on the RADIUS-server. Our problem is that we want the local net to work even when the WAN is down, and in most of our locations the RB is the only "server". The on...

amorsen

It would be very nice if DHCP could set specific options depending on MAC-address. In our case we have some Snom-phones which expect the TFTP-server option to be in this weird format: "http://provision.example.com/somewhere/{mac}", whereas the Linksys PAP2 expects the more conventional &qu...

amorsen

It would be very nice if the built-in DNS server could selectively forward domains to servers. In dnsmasq this is done with the syntax: server=/lan/10.1.2.3 This will send all requests ending in .lan to 10.1.2.3. This is especially useful when e.g. the Active Directory servers are behind a VPN conne...

amorsen

Obviously this was a case where "debugging by maximising potential embarassment" was the right answer.

I am stupid, I AM actually getting 2x2Mbps -- right now I have two flows at 1Mbps and 1 flow at 2Mbps (with a little variation.)

RouterOS works brilliantly as always.

amorsen

I have two S.HDSL lines at 2Mbps each. I would like to bundle them to one line. I am currently simulating the two lines in a lab setup with two RB600's. If I just set the ethernet interfaces to 10Mbps and bundle them, I can get (almost) 2x10Mbps if I start two downloads. It works perfectly. However,...

amorsen

It would be nice to have LLDP in routeros. Newer Procurve switches don't have CDP anymore; and LLDP is a better standard anyway...

amorsen

I have a rather strange problem: [admin@router2] > /interface ethernet export # jan/01/1970 00:01:33 by RouterOS 3.10 # software id = PL88-PTT # /interface ethernet set 0 arp=enabled auto-negotiation=yes comment="" disabled=no full-duplex=yes mac-address=00:0C:42:21:20:70 mtu=1500 name=eth...

amorsen

Let me repeat myself from the first post: "I have an RB500 running v3.0beta9, with two physical links to a Linux-router running quagga." There are only two routers involved here, one runs RouterOS, the other runs Quagga. Therefore there is no point in changing the router ID on the Quagga b...

amorsen

Will using multiple instances actually work in this case? It sounds like both of them will try to insert routes into the kernel routing table; which instance will win?

amorsen

I don't see any way to set the router-id on a peer basis. I just have this: [admin@MikroTik] /routing bgp peer> set 0 ? Change properties of one or several items. <numbers> -- List of item numbers address-families -- comment -- Set comment for items disabled -- hold-time -- in-filter -- instance -- ...

amorsen

Change quagga so that it sends one routerid via one link and another routerid via another link? I haven't heard about such functionality and a quick search didn't unearth anything like that.

amorsen

I have an RB500 running v3.0beta9, with two physical links to a Linux-router running quagga. On the RB500, ether1 has address 10.1.1.1/24, ether2 has address 10.1.2.1/24. Similarly, the Linux router has 10.1.1.2/24 on eth0 and 10.1.2.2/24 on eth1. I would like to establish two iBGP sessions between ...

Search found 37 matches

Cannot use interface group in routing ospf interface-template

/31, RFC 3021

Re: REST

Re: /import safe-mode (feature request)

/import safe-mode (feature request)

Re: Feature request: per-domain forwarding in DNS

Re: v6.42.9 [long-term] is released!

Re: v6.42.9 [long-term] is released!

New bridge keeps IP addresses up

Re: eBGP load balancing

Re: eBGP load balancing

eBGP load balancing

Raw RSA IPSEC authentication

Backup with restore to different router

Re: [REQUEST] Eth adapter driver | MT can't recognize adapte

Re: [REQUEST] Eth adapter driver | MT can't recognize adapte

Re: RB600/RB800 SFP Daughtercard?

Re: RB1100

Re: Feature request: per-domain forwarding in DNS

Re: Setting 802.1p tag (CoS) based on DSCP

Setting 802.1p tag (CoS) based on DSCP

Re: Feature request - BGP 32bit AS numbers

Re: RB493

Re: BTest server for Linux

Re: BTest server for Linux

Re: DHCP options by MAC-address pattern

DHCP options by MAC-address pattern

Feature request: per-domain forwarding in DNS

Re: Equal cost multipath and shaping

Equal cost multipath and shaping

LLDP

Cannot turn off ethernet autonegotiation, RB600

Re: BGP multiple peerings

Re: BGP multiple peerings

Re: BGP multiple peerings

Re: BGP multiple peerings

BGP multiple peerings