MikroTik

nuskope

MikroTik RouterOS 6.37rc40 still having same issue. as you can see it gets worse and worse over time, sep/22/2016 22:32:52 dude,critical queued 33558295 bytes for write to db. Please consider faster storage otherwise out of memory condition or data loss can occur sep/22/2016 23:40:12 dude,critical q...

nuskope

yes the disk is responding fine.
i considered getting a second SSD drive to test.

Its happening quite often too, every few hours especially if a few things go up and down.

nuskope

hi all, having some issues of late with the Dude, we keep getting this message pop up in the terminal, sep/19/2016 23:05:19 dude,critical queued 33615129 bytes for write to db. Please consider faster storage otherwise out of memory condition or data loss can occur sep/20/2016 03:01:09 dude,critical ...

nuskope

Hi all, im lost on this one, We have a client who i have removed their old modem and replaced with a Mikrotik because they where using something made in the 1700's unfortunately i have a single problem with their locally hosted mail server. I have all the NAT/Firewall rules setup, however, their mai...

nuskope

hi,

i am unable to copy items form one map to another.
I can still copy, but when i Paste they are pasted in the originating map, not in the new one as before.

nuskope

HI all, We have 6 CCR’s in a PPPOE server cluster, What we have always done is just have a number of PPOE servers and they generally automatically load balance, I had also previously set “Max Sessions” to 500 on each CCR to prevent one getting too many connections. However recently we have moved to ...

nuskope

Could one of the CCR's configured remote DNS servers be failing and it just so happens that this is the one the router will try using first? I had the same thing when 4.2.2.2 stopped answering DNS queries to me the other day.... (yes, 4.2.2.2!) Tried that, I was actively testing 8.8.8.8 on one comp...

nuskope

yes I know they where disabled, forgot to remove that from the export.
At the time I exported them I had them off for Debug.

...regardless that's not the cause of the problem.

nuskope

Hi All, Having on of those days today. So our main DNS server stopped working, and while we have a backup I figured ill setup DNS to work form one of our spare CCR's that's doing nothing. I have tried this in the past and then noticed the same issue but I didn't bother giving it too much time. So I ...

nuskope

I agree...

+1

nuskope

This is what I have now, from the above posted wiki. hwoever, my problem is after say 1-2 hours it starts adding IP's and after 12 hours it adds almost every ip on my network. Its almost like its never clearing the connections, so it counts them and never resets the counters. add action=log chain=no...

nuskope

Over the last few months I have tried both of the options above for detecting DDOS however we get too many false positives. I have scripts in place (as below for use by others) that once an address is added to the address list, using a scheduled task that runs every minute, the script automatically ...

nuskope

We have 600mbit of traffic on a CCR 1036 (AU based)

What would be the performance hit on running interception on 600mbit of data, or for a start, roughly 2,000 users?

We have 1500Gbit and roughly 6000 tails. Its going to be a nightmare...

nuskope

Try to use the argument "=numbers=" or the "remove" instead of "=.id=". Better yet, I suggest you upgrade RouterOS to at least 6.7 (if it's not there already) and instead of removing expired entries, when adding them, use the "timeout" argument to specify a d...

nuskope

HI all, I have made a walled garden for my non-paying customers as a replacement for my old method of disconnecting them. We however have a LNS cluster so I need to add and remove the Addresses form the address list on 10 routers. This part was easy. the problem im having is for some reason, sometim...

nuskope

Well, sad day over here in the land of Oz The government in all their wisdom have drafted a law that when (and it will) it passes the senate we, as the ISP, will be required to play BigBrother. At our own expense. The draft requirements are we record all Metadata for all users and store it for a min...

nuskope

For a true DDOS blocking it locally has little benefit. Unless we advertise the BGP community back to our peers, the traffic will still be hitting the router, with high CPU load and max out our transits. Advertising the community basically blocks the traffic all the way back to the Tier-1 internatio...

nuskope

Hi all, Like most we occasionally get a DDOS attack, they are annoying and in the range of 900+ Mbit so it sucks up all of our transit. Luckily both our upstream providers support 'black hole' BGP groups, so we can advertise a BGP community for a /32 ip address and it goes down the black hole. I alr...

nuskope

Hi all. We have several CCR's in production now, and have been quite happy with their performance in handling large amounts of PPPOE connections and routed traffic. In our early years, we have some very details QoS rules that we ran to keep bandwidth usage under control, however as time went on we e...

nuskope

Considering it's been over a month now, have you filled the role? I do microtik hotspot development as part of my day job, and can do better imo in personal projects. HI, I put it on hold for a while due to another project but looking to do this very soon. can you email me email: Michael@nuskope.co...

nuskope

there are ways with HTML5 and a little bit of JavaScript. one thought I had was the JavaScript is what forwards the device onto the 'internet' and that script could be on a 15 second delay while the 15 second add runs.. Another way is for the add to display and once it does it provides a link out of...

nuskope

HI all, I figured I would post here before advertising somewhere else and get a fellow Mikrotik user to assist rather than an external developer. We have a project underway that requires some advanced hotspot pages made up, basic brief below: I have attached the PDF with the basic brief, you can als...

nuskope

HI all, We have been getting a few DDOS attacks of late, Luckily both our upstream providers support 'black hole' BGP groups, so we can advertise a BGP community for a /32 ip address and it goes down the black hole. Unfortunately this is a manual process, so we first need to detect an attack, locate...

nuskope

Hey, we have about 2500 users on our network, and use titanwireless MikroNoc's for our LNS (pppoe servers) my advise is simply to have 2-3 of them on the same network. They basically self load balance, you will see about a 45/55% ratio of users logging into each box. the biggest benefit to this othe...

nuskope

This fix should potentially fix the problem when BGP route is withdrawn from routing table, but router still routes packets via that non existent route. Can you please back port this bug fix to 5.25? We have been fighting this irritating bug for-$&@!ing-ever, and there is no way we can let RC c...

nuskope

portscan your customer being attacked. They probably have an IRC server running or something like that without their knowledge. You'll do everyone a favor by identifying it and having them clean it up. The attacks are all DNS ones. basically getting 100000's od DNS queries to our customers IP's ran...

nuskope

HI all. over the last two months we have noticed an increase in attacks against our network. now its very strange how they occur. Suddenly a customer’s IP address is flooded with 1000's of incoming connections each doing 1-30Mbit. well beyond the capabilities of the customers link but the connection...

nuskope

HI all, got my 2 CCR last week and shoved them into action. so far happy with the CPU usage 3% compared to 20-40% on my old x86 'Mikro noc 8400's from titan wireless' i am getting the ' 14:14:36 system,error,critical router was rebooted without proper shutdown error every 10-30 mins. I only noticed ...

nuskope

21st today..
iphone 5 comes out... and only 9 days left to the end of Q3.

CCR1036 * 3 I have 3Ru of space awaiting your arrival..

nuskope

BUMP...

plz Mikrotik o mighty gods of routing..
don't forget this feature

nuskope

Yes it would seem as though Mikrotik alone at this time cannot do the task. So We put a Cisco in there, and have it doing the LAC, and passing though the end l2TP-ppp connections. at this time i have only tested one line, but seems to be working fine. Allowing us to use all our Mikrotik API's ect on...

nuskope

another +1 for this!!!!!!

nuskope

The problem i am having, i see the l2tp request come through. but the it stops and fails before it gets to the part where it tries to Auth agaisnt the mikrotik ppp secrets. 12:58:25 l2tp,debug,packet rcvd control message from 10.10.10.1:1701 12:58:25 l2tp,debug,packet tunnel-id=26, session-id=0, ns=...

nuskope

Hi All, With some Googleing, and coming though the forum archives i have failed to find much information on L2TP Tunnel Authentication. Basically we are about to start offing ADSL services, in addition to our wireless ones, And using the same LNS setup would be preferred, as all of our systems are b...

nuskope

"Version 6.x is a very early development version,
please use only in testing environment and report any problems "

Unfortunately our Core and Border and LNS routers are a little too important to put 6.x just yet

nuskope

to many outages to try now;

but when we did first setup the units it was on auto-neg, i turned it off to see if it resolved the porblem (it didn't)

nuskope

we are still getting the issue. Thus to stop it we put a Cisco switch between the routers, fixed the issue. (messy and un-necessary use of extra equipment though)

nuskope

We are seeing an issue with RX Drops between (2) x86 systems. We have 2 of these routers connected via a direct cat5 cable (less than 1 meter) negotiated at 1GB FDX port speeds. The RX Drop counters of the interfaces connecting the (2) routers are increasing on both routers. There are no TX or RX e...

nuskope

+1 to the same issue.

had it 4 months ago, forgot about it. just tried it then and yeah same thing...

its not to do with images, even if you make custom device names but use stock images it drops them.

nuskope

i don't want anything to happen

thats the plan..

IN theory if i add 'another' rule with just the time and the packet mark it will probably swap over but that seems s little off as the existing rules should work and not need a 'off time' rule...

any of the big lads have any ideas?

nuskope

hi guys. > V5.7 on X86 I am having an annoying issue with Simple Queue times. the rules are as follows Q1 - 15:00:00-23:59:59 Q2 - 00:00:00 - 01:30:00 (rule to run from 3pm-1:30am) my issue, it swaps ok from Q1-Q2 but then when the time expires on Q2 it keeps the rule running, untill... i log in to ...

nuskope

Fantastic - any chance of seeing the code that you used to redirect to iphone page based on device? Here in Willunga SA, we have the new Australian NBN. But we are setting up a hotpot on the main streets, I'm about to Google this myself, was just on the site now getting some ideas. but if anyone is...

nuskope

Hi all. We have 2 providers, and a third local peering group. Obviously data over the peering group is significantly cheaper (we have 1Gb connection, only ever use 10-20 Mbit) We get large lists of IP's and AS Numbers, i would like to know if its possibly with Mikrotik (i had it working on cisco) to...

nuskope

all fixed, knew it was something stupid.

had an IP address in with the wrong network. *derrrrr*

Now to work out BGP/AS preferences on mik to try send traffic though specific links.

nuskope

Yeah, it was more a quick post :) now I'm rather sure it is the communication or something between the 2 routers. one thing i did notice, when i monitored the traffic on the Ethernet, is i could see one of our servers trying to ping 8.8.8.8 but traffic was only 'one way' it was as if it was firewall...

nuskope

hi all, so last night i tried to make the new MikNoc7500 active as a border router. I installed all 3 of our 'peers' in the BGP table, and they all connected and received updated ect. I had our IP range listed in the 'networks' i had our AS number in 'instances' i was able to ping (for example 8.8.8...

nuskope

hi all, so last night i tried to make the new MikNoc7500 active as a border router. I installed all 4 of our 'peers' in the BGP table, and they all connected and received updated ect. I had our IP range listed in the 'networks' i had our AS number in 'instances' i was able to ping (for example 8.8.8...

nuskope

ok, 1:30am blues here but ill try get words to what im attempting to do. Currently we have a Layer2 network, with 11 towers, each with 2-10 AP's all connecting back into our LNS what i want to do, for scalability and management reasons, is divide our Layer 2 network into 4, each segment would be its...

nuskope

Hi all. We have recently undertaken a massive network upgrade and thus have some spare equipment laying around, and some decommissioned links that are skill in place, i would like to make them active acting as redundancy/extra capacity. Note: the entire network is Layer 2 and must remain so for the ...

nuskope

One of our main thoughts is we want Full BGP routs, the only reason we don't have them at the moment is due to ram constraints. Here is a basic display of our current setup. http://www.nuskope.com.au/images/DataCenter.jpeg the border router handles BGP and some firewall the core router handles inter...

nuskope

HI guys, just a quick one. We run a combination of UBNT/MIKROTIK devices on our network depending on the application. in the dude 'appearance' options id like to be able to display the channel/frequency of each AP/station the function i wrote works but only on the 'client side' for the life of me i ...

nuskope

wealready dont get full tables, Static routs with maybe 10,000 local bgp routs.
memory on the router isnt the issue, its the CPU sitting at 99.8%

It has been tweaked and modded by cisco engeneers for the last 12 months to get more out of it but its simply too small a router.

nuskope

also,

i was wondering how the OS would, if it can, handle 'traffic balancing'
as in, one of our links is 100Mbit, the other two are 40MBit each... can the mik os utilize the different links via bgp if we somehow tell it how much traffic each interface can handle?

nuskope

Hi all, currently we have a cisco border router that is fast approaching its maximum capacity, i was wondering if anyone is using RouterOS to act as a border router. we have 3 internet feeds from 3 different providers, with full BGP, and AS how advanced is the BGP now days in RouterOs compared to ci...

nuskope

Ok, so to send a SMS via our API script im having The DUDE open a URL with the execute on server (or locally)
it opens the webpage, sends the sms. then crashes...

4.0beta3 ACCESS VIOLATION at: 7716a080

any thoughts / ideas?

nuskope

I too am interested in this.

I just last night got DUDE working, and added my DW's

i may do some trial and error testing later but keep the thread updated if you have any luck, ill do the same.

nuskope

upgrading to 5.0 has worked.

so ill try to 5.5 later in the day, Customers dont like the 2 min outages i cause

maybe there was just a bug going from such an older firmware to the newer one.

nuskope

unfortanatly nothing.
as by the time i log in with winbox, 400-1000 pppoe sessions have filled the log file.

in a few hours im going to try upgrade to 5.0 first, then if that works 5.5

but i cant just now, as its 8pm, so peak time for us..

nuskope

We have a x86 currently running v5.0rc4 I have downloaded the routeros-x86-5.5.npk, uploaded it to the files list and rebooted. previous upgrades the .npk is removed and the firmware is updated, however this time the .npk remains and the firmware is unchanged. our license is for up2 v7 with the .npk...

nuskope

ok, i got a reply on a PHP help file, and fixed the issue. by adding htmlspecialchars into the function below, i also removed the commented out lines for debugging, and i have just left it this way as i dont care what shows on the web-output i just want the code to work :) Hope this helps someone el...

nuskope

HI all, ok, so i had been using this API for about a year with no problems. Recently i have updated my radius servers and now the API no longer works. I have trouble shooted the issue, and its not a issue with the API itself, put perhaps php. the issue is as follows, when i send the command: /interf...

nuskope

i have similar setup to you without the upload issue post your config maybe we can help you then seems a little strange

It ended up being a one way switching issue, traffic was fine one way but had RX mis matches.

nuskope

nuskope

don't know if this is what your after, But we have a very advanced, customizable 'radius server' using freeradius the system has customer 'plans' with data limits and set speeds ( such as 1500/512 or 12Mbit/1mbit) it bills, it shapes users when they hit monthly limit ( to 128k) it auto unshapes them...

nuskope

We use a Mikrotik LNS (x86) just updated firmware to 5.0rc4 (has not fixed issue) we have about 400 users who PPPOE in via the Mikrotik LNS, using a separate radius server (freeradius with heavily customized dileupadmin interface) we are able to set the customers speeds using the Queues system. For ...

nuskope

Well, P2P again
I found "connection rate" mutch better for that, read this:

Does this work well using Radius with PPPOE?

Could you please help me locate an example of this for PPPOE?

nuskope

I am trying to limit the amount of connection users can have open to stop the damage of p2p. I have seen bits on how to implement restrictions so only a small number of connection can be opened with ports over 1024. This is the current config i'm using which is not working. I'm trying to limit the a...

nuskope

Have you tried to create a masquerade rule in the firewall? If so what is the rule? Thanks for your response. No I haven't created s masquerade rule, I'm just stuck on on the inital routing i would have to do. The address of the pppoe will be assigned by the radius server so im just not sure how pl...

nuskope

It would be nice if someone could please help.

nuskope

I have followed the setting up pppoe client instructions, i can get it to connect and dial in but not get NAT to work to the local address of the unit. The local address is set to 192.168.1.1 while the radius assigns a public IP to the pppoe interface. I need to know how to get them to work.

nuskope

Anyone?

nuskope

I have not been able to find a guide on how to setup of NAT on a RB411 using it to connect as a PPPoE client. Could anyone please give me some help on how I can setup the cliet from the beginning to use PPPoE.

Thanks.

nuskope

Greetings all, Long time Star-OS user first time mikrotik. Very impressed thus far with the software on our test board and if we can sort out a few little issues we will probably be swapping most of our distribution boards over to mikrotik and phase out star-os. We have a Test board working one of o...

Search found 73 matches