MikroTik

chrone

Just tested this out on Proxmox VE 4.2 Linux KVM. Both virtio disk and net work great.

Will there be support for virtio net 10GbE in the future?

chrone

Is there a way to get to the sysctl or procfs settings?

Would love to set net.ipv4.tcp_slow_start_after_idle=0 as well.

chrone

Does Mikrotik disable the tcp_slow_start_after_idle and enable bigger TCP_INIT_CWND in its kernel for better TCP performance?

net.ipv4.tcp_slow_start_after_idle=0
TCP_INIT_CWND 10

references:
http://chimera.labs.oreilly.com/books/1 ... n_behavior

chrone

BUG: Tx and Rx Flow Control settings always get reset on reboot on RB450 ROS v6.12 with firmware v3.10.

I tested on 2 RB450s to enable the Tx and Rx Flow Control in Interface > Ethernet with no luck sticking the setting on reboot.

chrone

ROS 6.12 has this feature. Is it recommended to turn both Tx and Rx FC on or auto?

chrone

i guess you are experiencing the same symptom with me. take a look at system resource, check the cpu frequency, i hope it's not 100Mhz. you could set the frequency back to its normal value via command line if it happens to be set 100Mhz after the upgrade. or through the gui in winbox on the routero...

chrone

after being told by Sergejs, changing the max-udp-packet-size from 512 to 4096 solved this problem.

chrone

Hello! Faced with the device RB450G that after you upgrade from version 4.17 to any version 5.9-5.11 is the performance drop by 2-3 times (at the 4.17 rate was about 200 megabits, but now more than 50 does not rise, due to the 100% CPU usage) It is also sometimes result in an error of the kernel. W...

chrone

mikrotik could not achieve maximum bandwidth throughput by accessing Rb450G from LAN if using windows machine (7 pro sp1 64bit) (30KBps to 1Mps range only, mostly below 1MBps). funny thing, after tested from ubuntu machine (11.10 desktop x86) the thoughput went through 6MBps ! the router eth0 is Gi...

chrone

Hey Normis, after tweaking and testing around, it seems on my windows machine, the ipv6 is enabled, while on ubuntu the ipv6 is disabled on purpose. i can confirm that login to winbox and torch to see the throughput really hurts own machine LAN performance to the the Mikrotik. by exiting winbox and ...

chrone

Before using a 450G, I had a N330 dual core Atom with 4 NICs... There is no possible comparison, Atom is way faster (I can't believe I say that from an Atom CPU...) and can do much more than a routerboard without any hardware or software limit. BUT, that's comparing oranges with apples, RB is 6W, d...

chrone

mikrotik could not achieve maximum bandwidth throughput by accessing Rb450G from LAN if using windows machine (7 pro sp1 64bit) (30KBps to 1Mps range only, mostly below 1MBps). funny thing, after tested from ubuntu machine (11.10 desktop x86) the thoughput went through 6MBps ! the router eth0 is Gi...

chrone

mikrotik could not achieve maximum bandwidth throughput by accessing Rb450G from LAN if using windows machine (7 pro sp1 64bit) (30KBps to 1Mps range only, mostly below 1MBps). funny thing, after tested from ubuntu machine (11.10 desktop x86) the thoughput went through 6MBps ! the router eth0 is Gig...

chrone

try to downgrade to 5.9 and test again. also use nslookup. i can confirm this happens sometimes on routeros 4.17 as well. the ip address of www.klikbca.com is already listed on mikrotik dns cache, but it seems the browser don't know what to do. i tested this bug with firefox 8.01, chrome 15.x, oper...

chrone

dear all, i've found a bug on which routeros DNS. it fails to forward dns packet request to the client for the following site: www.klikbca.com and vpn.tarumanagara.com browse to www.klikbca.com, firefox could not connect blablabla. i'm using opendns on mikrotik routers set 208.67.222.222 and 208.67....

chrone

Hi, Look here: http://forum.mikrotik.com/viewtopic.php?f=2&t=41102 Regards, Grzegorz. thanks for the link. My RB750 just died after do the tips in that link. all the ethernet port keeps flashing repeatedly. :( /system routerboard pr /system routerboard settings set force-backup-booter=no /syste...

chrone

I just found out what's the culprit regarding the automatically disconnect pptp connection when idle for more than 10 minutes. It's because of the old setting from routeros 3.30 which I somehow add gateway interface of the abacus-pptp interface into the /ip routes. Once I deleted the gateway interfa...

chrone

dear all, i've been experiencing failures with routerboard rb750. on aug 4, i bought rb750 and it's preinstalled with ros 4.7. since all of my routerboards running on ros 3.30 i downgraded it to 3.30, it worked. but when i tried to downgrade the firmware to 2.20 it locked up, wouldn't boot at all. i...

chrone

make supout.rif when problem appears and send to support@ with detailed description

i have sent them but still no reply.

chrone

I've been having issues when using 4.x routeros version. I switched back to 3.30 back then. But now I'm trying the new routeros 4.11 but still having problems with pptp client, it just keeps get disconnected after 10 minutes of idle though i have already set in the ip routes to check gateway with pi...

chrone

dear all, i just upgraded to ros 4.6 on rb450g, it seemed the check gateway ping on /ip routes of a pptp connection seemed didn't work out pretty well. by looking at the pptp interface status, the thing kept idle the same amount of time since it was connected. it didn't happen before while using the...

chrone

dear all, have you ever tried ntp server to work with windows client? i'm using mikrotik routerboard rb450g with routeros 3.30. i've set the ntp client to ntp.ubuntu.com and time.windows.com and it synchronized the mikrotik very well. i've also set ntp server by just enabling the enable only without...

chrone

HI, for me works very wel. But I have problem on how to manage IP adresses from blocking content? nice to hear that. i hope in the future, mikrotik will be able to filter/block hostname, not translated into their real ip address. "chrone" Do you have any idea on how to divide my 40 PC on ...

chrone

You can already do this. There is a howto in wiki. Dont have the link handy right now.

oh i see, will look the wiki for sure. thanks

chrone

dear all,

i want to suggest a feature which enables mikrotik to do hostname in ip firewall instead of using the real ip address, we only need the hostname to use in src-address or dst-address. this could be useful to block some url, or to nat a dynamic ip address using dynamicdns or so.

/chrone

chrone

HI, for me works very wel. But I have problem on how to manage IP adresses from blocking content?

nice to hear that. i hope in the future, mikrotik will be able to filter/block hostname, not translated into their real ip address.

chrone

can rb750 use multiple ISP?
Yes, of course it is possible.

oh ok, is it the same as with rb450? thanks for the info.

chrone

can rb750 use multiple ISP?

chrone

have you upgraded RB's firmware?..

after upgraded to v4.0 i didn't see any firmware update from /system routerboard pr. the system showed 2.23 as i recall.

chrone

http://www.mikrotik.com/download/netinstall-4.0.zip use this netinstall (NOT 4.1!!!) and downgrade router os to version 4.0. In Version 4.1 the Ethernet Ports are not working on RB450G!! I spent today 3 hours to find a way to fix this. :-( dahuafschmied voila! finally somebody has found the issue. ...

chrone

IMHO Every Mikrotik professional should own a serial cable and learn how to use netinstall. It is not that difficult, and will save you time in the future. Tom yeah i guess so. i'm an average mikrotik guy. will purchase the serial cable next monday though and try it out for first time. i hope mikro...

chrone

netinstall? i sent it back to the store i purchased here in surabaya, indonesia. they will reinstall the routerboard and finish it next monday. i currently don't have serial console cable (female to female jack), that's why i could not do netinstall. :( the board could boot with one beep, but when ...

chrone

using routerboard 450g, i failed to boot after upgrading from routeros v4.0 to v4.1. how to fix this?

chrone

BW test packets are generated by router, so they have to be marked in output or postrouting. Also you can always set local-tx-speed and remote-tx-speed in bandwidth test tool. oh okay, i'll try the post-routing mangle. it's good to have a managed own router bandwidth, especially when get flooded fr...

chrone

BW test packets are generated by router, so they have to be marked in output or postrouting. Also you can always set local-tx-speed and remote-tx-speed in bandwidth test tool. oh okay, i'll try the post-routing mangle. it's good to have a managed own router bandwidth, especially when get flooded fr...

chrone

hm... from http://www.balabit.com/downloads/files/ ... README.txt :

Squid-3 has official support of TProxy v4.1

it's not as easy as on the readme.txt. trust me.

chrone

oh ok thanks. i just somehow didn't able to build tproxy + squid on ubuntu 8.04 for transparent proxy with ip spoofing.

chrone

i know it's a weird question, but how to limit mikrotik own's bandwidth? internet-mikrotik-client for instance, i have 2 mikrotiks and i bandwidth test them both through mikrotik's tool bandwidth test, and while i'm doing this, the client on both sides could not browse the internet since the bandwid...

chrone

does mikrotik webproxy support ip spoofing so the requested client ip address are pushed forward to the bandwidth management and not the mikrotik ip address itself?

chrone

I am having this same issue on a new RB450G. CPU sits at 6% or so, then I torch a busy Ethernet interface and CPU spikes to 100% and no output data. I had same problems on a RB150. Thoughts? Happy to provide additional data. have you tried to upgrade to the latest routeros 3.28 yet? i have no probl...

chrone

i guess this issue has been solved on v3.27, while using torch, the cpu usage is at its minimum. glad they hear us out.

chrone

It is DNS related problem. We fixed it already, will be included in the next
release. To avoid this you can disable DNS caching.

thanks mikrotik support team. this was a quick response.

chrone

ok just sent the supout.rif files to support.

chrone

send mail to support with 2 supouts: 1) just after the reboot 2) when it is possible to see memory leak. they will compare and fix. how to generate the supouts? and what is the support email address? it restarted three times today, and now after 6 hours of running, there's only 3mb free available m...

chrone

after upgrade to v3.26 from v3.25, today the routerboard has restarted itself twice. :( using the same setting as it was from v3.25, the routeros showed that it consumed all the memory which was 29Mb. i don't know if it's new version a resource hog, and when the system is out of memory it restarts i...

chrone

no, all ip is static and only certain ip can access for the unlimited time and rest of the ip is block from 0800-1800. the unlimited list could be like this depends on what you need: 102 ;;; src address list unrestricted chain=forward action=add-src-to-address-list src-address=192.168.0.2 address-l...

chrone

but the address can access unlimited is cannot put on a.b.c.d/x, i explain: rule 1: only address 10.0.0.5/10/19/27 can access unlimited rule 2: rest of the address cannot access facebook from 0800-1800 problem 1: i don't understand how to make in address list with random ip because i already try an...

chrone

can you help me for the example ? and i want only a few ip address can access for unlimited and the rest is block by time thank's albert make a rule to filter the address you want to set unrestricted access to the internet: /ip firewall filter add chain=forward src-address=a.b.c.d/xy action=add-src...

chrone

how about if i want to use time based, ex: i want user cannot login from 9.00-18.00 ?

type on the terminal: /ip firewall filter add chain=forward action=drop dst-address=a.b.c.d/xy

go to the ip firewall filter, double click the rule you just made, then go to menu extra > time.

chrone

Just drop or reject in firewall dst-address=69.63.0.0/16

thanks, i did it couple month ago using ip addresses collected from ns records from robtex.com, the site really helped me out.

chrone

dear all, the tools ip scan is not resolving netbios or hostname anymore. i couldn't find their hostname on the scan result. thus i have to use angry ip scanner software from http://www.angryziber.com/w/Download is there something wrong with my mikrotik routeros or it's just not supported anymore on...

chrone

i really would like to have mikrotik with blocking url feature without the need to enable web-proxy. it's just like firefox addon procon latte.

chrone

chrone - I see this issue pretty consistantly. Using RB333, RB433AH and RB411 - all with ROS 3.22 and lateast firmware - 2.20 I believe. Previous ROS 2.9.50 on RB500 or Intel CPU did not exhibit this behavior. There was another post on this, and it had something to do with time out values being cha...

chrone

i keep getting ping timed out randomly from windows machine though i've already updated to the new version 3.22 using firmware 2.20 and resetting the configuration.

chrone

dear all, have you guyes experience that sometimes you got ping timed out issues from windows (xp, vista, windows 7) machines while simultaneously from linux (ubuntu 6.06, ubuntu 7.04, ubuntu 8.04) machines the ping time are perfect?? i happened twice, one was when i'm using routeros 3.20, and just ...

chrone

it seems the Tools > Torch which is causing the high cpu utilization on this routerboard. too bad seems torch is quite good tool for monitoring traffic in real time.

chrone

dear all,

have you noticed this symptoms i'm experiencing as following:

ping from windows xp & windows 7 to rb450 often gets ping timed out, while the same utp cable works well with ubuntu 8.04.2 without having ping timed out at all.

is this a bug in RB450 (routeros 3.20, firmware 3.19)??

chrone

using the new version of winbox 2.2.14 up from 2.2.13 reduces the cpu utilization to average 50%.

chrone

if you just log in and do not open any windows - does CPU utilisation increases? what is traffic throughput of the router? what firewall, if any how many queues, if any is latest version of winbox, is latest version of RouterOS installed on the router, is last RouterBOOT upgrade installed? with win...

chrone

sorry for my bad english... configuration is good .. but in the "mangle" are misplaced the "marks" .. First: put the "mark connection" with the ip you want to make routing (activate passthrough) Second: put the "mark routing" that you like make routing with t...

chrone

i thought RB450 was not powerful enough for my office network due to it kept me showing above 80% and often reach 100% of cpu utilization. i used to connect winbox all the time at work to monitor traffic in real time, but then i found out that winbox caused this issue since if i didn't connect winbo...

chrone

thank you normis and airstream, i found it accidentally with using the "dst-path=/filnamehere" yesterday. it works.

chrone

please specify dst-path when doing fetch. we will fix correct default dst-path in next version. currently your file is saved outside your reach

dear sir, what is the dst-path to the default files directory on mikrotik routeros v3.16?

chrone

dear all, have you guys experience this symptom? [chrone@mikrotik] > /tool fetch address=ixp.mikrotik.co.id src-path=/download/nice.rsc status: connecting status: finished [chrone@mikrotik] > but there's no file actually saved into hdd :( it works on 3.14 and 3.15 very well but not on this new versi...

chrone

oh i see, i just pick random site to see whether it's cached or not. hehe

chrone

i like the new feature cache hit dscp (tos) in ros v3.x, but it seems v2.9.x web-proxy is better in caching websites since there's few site is not cached well with v3.x but v2.9.x did well. i also encountered problem with equal bandwidth sharing among users with pcq in the new ros v3.7, using the sa...

chrone

dear all,

how to bypass HIT cache from ROS 2.9.51 web-proxy so that it won't be limited by bandwidth management using pcq for equal bandwidth management?

thanks in advance!

chrone

upgraded to v3.7, this queue tree wouldn't work with this new ROS version. :( downgrade to v2.9.51, this queue tree works well again. *confused* perhaps i'm sticking with this v.2.9.51 since it has better bandwidth management with pcq for equal sharing. anyway, does anybody here knows how to bypass ...

chrone

downgrade to v2.9.51 and voila! apple.com is cached again. i notice v2.9.x web-proxy is better than v3.7. the only cons in v2.9 is how to by pass hit cache so we get full LAN speed.

does anybody here know how to by pass ROS 2.9.51 internal web-proxy HIT cache?

chrone

pardon me, i don't get what your point is. i also notice the bandwidth management is not working so well when using this new proxy from mikrotik. fyi, i'm using mikrotik routeros v3.7. will serialize-connections make bandwidth management out of control when someone is using the whole bandwidth throu...

chrone

dear all,

i'm using ros v3.7 and tried the new cache hit dscp (tos) and it works. somehow i notice not all sites are cached, for example, apple.com is not being cached by mikrotik proxy no more.

are you guys having same problem with me?

chrone

this v3.7 proxy, it does caching some sites, but i wonder why it's no more caching apple.com site?

chrone

which version of RouterOS you are using ? (pakai versi berapa ?) v2.9.49 :P btw, just checking, it seems we have to separate our upstream and downstream in order to get the equal bandwidth sharing both for upload and download. with my configuration above, after doing some tested, it only work for d...

chrone

finally, it really works! woohoo! :D:D:D:D:D using similar configuration as in the manual, the secret is in queue tree setting. at parent queue we set our max bandwidth in max-limit. at child queue we set our max bandwidth minus 8k or 16k in max-limit. so if you get 512k from your isp, set the max-l...

chrone

Okay.... here is my solution... I am using global out and in because i have 2 interfaces for clients... My local ip adresses: 10.31.xxx.xxx Packet mark for internet download: chain=forward action=mark-packet new-packet-mark=Net dl passthrough=yes src-address=!10.31.0.0/16 dst-address=10.31.0.0/16 P...

chrone

dear all, need help on pcq - equal bandwidth sharing, as in ROS 2.9 manual configuration, it does equal the bandwidth among user when there's no download manager involve. firefox, opera, and safari download manager runs fine with pcq, but when i tried to use download manager which has multiple downl...

chrone

dear all, how to dst-nat a public ip address to a local ip address behind a routed gateway (routing-mark)? if i used only 1 isp and there's no routing-mark in the mangle, i could locate my public ip address to a local ip address with chain=dst-nat and action=dst-nat. but when i used multiple isp and...

chrone

dear all, i'm confuse in choosing parent for my pcq quee tree :( i'm using 2 isps and 1 lan so it will be (2 public interfaces, and 1 local interfaces. the best setting i could get is to set the download queue to parent global-out (as a replacement to the parent local) and set each public interfaces...

chrone

can anyone help me with my configuration? please..

chrone

dear all, i'm confused how to set my bandwidth management right with pcq for equal bandwidth. i'm using two ISPs. indosat (isp 1) is on dedicated bandwidth (512/512kbps), while speedy (isp 2) is on sharing bandwidth (64/384kbps). interfaces: 1. local (192.168.0.1/24) 2. indosat (10.0.0.254/24) 3. sp...

chrone

dear all,

just tried routeros 2.9.27, how to set the router so this block of ip address 192.168.0.x and 192.168.1.x can connect eachother such as file sharing and so on?

thanks in advance!

Search found 81 matches