MikroTik

KimC

It's a very long time ago, I wrote this post. Suddenly, I got a hint, that I should correct my errors :-) Well, I can say so much, that the general scheme desribed still in the original post still holds true in our large network (+3000 private households and +1000 ip-phones). However, reading throug...

KimC

Hello Here is our hotspot system. Not not very fancy to look at, but we like the funktionality: Integrated payments via our own payment gateway, and instant logon (no userinput) via MAC-auth as long the account is valid. The system also supports delivery of credentials via SMS. We are using asp.net ...

KimC

Hello friends For every larger scale WISP, one of the biggest problems is the allways improving Bittorrent with encrypted protocols etc. The Mikrotik "all-p2p" is not powerfull enough to do the job. And if you don't handle this problem, you often see entire cells totally dominated by one o...

KimC

OK, it´s easy:

Add two MiniPCI's to the router.
Add a bridge
Add the two wlan interfaces to the bridge
Add the hotspot gateway address to the bridge
Run the hotspot setup wizard

You'r done !

Happy hotspotting...

KimC

How do you get max throughput on a transparent bridge ? Hardware: 2 x RB600 with UBNT SR71-A Test tool: 2 x RB1000 as "RB1000 - RB600 - RB600 - RB1000" - all bridged together in one subnet. All tests have been made indoor with 2x2 Mimo config. Signal levels adjusted to approx. -50 dB, whic...

KimC

I have been experimenting with different ways to make a transparent bridge across two 5Ghz-N-only units. Hardware: 2 x RB600 with UBNT SR71-A Test tool: 2 x RB1000 as "RB1000 - RB600 - RB600 - RB1000" - all bridged together in one subnet. All tests have been made indoor with 2x2 Mimo confi...

KimC

about 1: Last time when I tested with pfifo - the packet drops just happened You only use pfifo for voip - and increase buffer until it don't drop packets anymore. Remember, that one voip-connection at most is 160 Kbit total, so you need a really large network to come into trouble, if your identifi...

KimC

Networkpro, 1. The best queue types. Yoy really need to RTFM. However, the most important is to watch and try. I found, that sfq is useless when coping with high rates. Pfifo is best with voip, but you need to watch for dropped packets. Red seems to be best as general purpose. In any case: Adapt que...

KimC

Hello guys and girls ! We found (as many others did before us), that voip on a large unprioritized WLAN with many MT-boxes is at least difficult ;-) Random jitter, disconnections, lost voice in one direction etc. and many other problems are daily issues. Therefore we had to implement qos. After coun...

KimC

Well, a CPE setup is not exactly our typical setup. It is very close to a factory default. We are using MT for infrastructure only. I would like to hear from experienced users with installations beyond "vanilla" setups, using wds, nstreme, bonding, firewall, nat, multiple ip, routing, dns-...

KimC

We can't see any pattern. The problems has been with many RB532 of different age and hardware version. However, it seems to be worse with a more complicated set of firewall and mangle rules. All units are with wireless interfaces (a mix of mt-cards and various ubnt cards in g/a/a-turbo). But my poin...

KimC

Hello We have a lot of different RB's (age, type) with various versions 2.9.x. Before v3, we were normally upgrading as soon as this forum indicated that there were no major problems. With V3, it is another situation. Many upgrade attempts from 2.9.x to 3.x has resulted in broken links, climbing, un...

KimC

We are also focusing on the last mile customers. However, our model is somewhat different: We are a non-profit organisation 100 % owned by our members/users. We distribute high-end fiber-bandwidth via Mikrotik equipment, and our CPE-devices are very low-cost. All members pay the same low rate (appro...

KimC

You have a very limited number of IRQ's avaliable on a pc for external nics. Normally less than 5 with as much disables in bios as possible.

Your setup cannot work !

Use a vlan-switch and only 3 - 4 nics. Remember, that each port must have an unique IRQ in order to work properly.

KimC

I think, that your problem is related to IRQ-sharing - and not to RF. When you are using an Intel platform, irq's are a sparse resource. Therefore remember to disable any IRQ consuming resource you aren't using. Sometimes, it is possible to change IRQ-usage in the BIOS. Anyway, always pay attention ...

KimC

You have to pay attention to your wireless connections. Not everything is about bonding - all the basics must be in order. When you have fixed your links (if on your desktop, then dont use more antenna, than abt 2 cm of paperclip. Make sure, that the signal is around 50 dB on all radios), you will s...

KimC

Hi Bill

Pls take a look at my previous post above. You should be able to get going with the posted info.

Regards Kim C

KimC

OK, I think the problem is bad nic's. Changing one nic on one pc gave the following with udp/both: 67Mbps/42 Mbps, and with udp one-way I get about 90 - 95 Mbps. This is lab-results, however, but it is surely impressive !!! Mikrotik: Why don't you document this stuff ? This is what everybody are ask...

KimC

I made a test on two RB333 with two R52 each. Setup: Add a bridge to each router Add ether1 to the bridge on each router Add one ip (i.e. 192.168.10.71/24) to bridge1 on R1 and one ip (i.e. 192.168.10.72/24) to bridge1 on R2 R1: wlan1 and wlan2 in bridge mode, 5ghzTurbo, good channel separation, dyn...

KimC

Hello We have a fairly large number of RB500 boards (of various hardware rev. and with the latest few versions of ROS) in outdoor operation. Recently, we have noticed an increase in failures, where a replace is necessary. This is not very convenient, as they are often not very accessible ;-) The pro...

KimC

Go to ip, traffic flow and configure what you want. It is well documented in the manual.

The key is the collector sw. Here you need google

KimC

Hello First, I think that you should try some different frequencies. Your noise floor is too high. I think, that your link will improve a lot if you find a spot where the noise is better than -100. Interference can kill any link. Secondly - the various comments to your wds-mode: They may not know, t...

KimC

Upgraded to 2.9.45 on a number of sites - some with 1 ap and some with more ap's (cell sites). on the single ap-sites everything is fine, but on the sites with more than one ap with same ssid (different freq), the registration table now shows the same mac more than once. I suppose this is a programm...

KimC

Hi Fabrício first - you can easily have more 2.4 GHz channels in the same tower, as long as you keep them 3 or 4 channels apart. This is how you make a sectorized tower. Just make sure, that you use different ssid for the two standards. And to get the best performance, both AP and clients must be se...

KimC

OK - more details: A low-power card with an 8 dB omni G-only can be a good solution. It gives you lots of reflections, and in many cases a very good short distance coverage. However - nothing beats "brute force"... ie high antenna gain at radio power - if you need NLOS or long distance. It...

KimC

A few suggestions: - Don't complicate things - use bridging in favour of complex routing - Make sure, that your backbone is perfect - lots of cpu-power and minimal noise - Have enough basic high quality bandwidth avaliable - If you are in a noisy area, then use horisontally polarized antennas - Use ...

KimC

Thanks - that solved the problem. I just thought that I could avoid the usermanager.

Regards Kim

KimC

Hello If you want to sell hotspot tickets for unlimited usage in one day, two days etc., how should this be done ? We are using different user profiles for each "ticket type", but using "Session timeout" seems to relate to the total time logged in, and not to the total time passe...

KimC

Yoy need to add the following command to your wireless interface:

int wi set <interface number> allow-sharedkey=yes

that should do the trick

KimC

Well, I found a rather primitive solution: a vbs script using the wscript.shell api and SendKeys, runníng a batch of telnet sessions to a bunch of routers. It is slow, but working.

However, there should be a better way ???

KimC

I need to be able to activate a script on demand without directly accessing the router. Is there a way to do this ??

Regards Kim

KimC

Problem solved ! :D The reason was noise from an unknown source in the building where we installed the hotspot. Our signal was jammed, and even amplified by the antenna. We moved the hotspot some 100 m away, changed the sector antenna to an even narrower (90/17) type and increased the tilt to 10 deg...

KimC

OK Gwisa, it may be a good idea with two antennas. I didn't try that here. But we need enough power to let the tourists connect with their laptops directly - and not necessarily with direct LOS. Our current solution works wery well on a number of other sites. Would it be an idea to use an AP with di...

KimC

I understand your point, but the thing is, that electronics and seawater does not mix well. Therefore, we want to have the gear located in one spot if possible at all. And the place is not that big...

KimC

The idea of using a HG-sector is to shield off against a lot of wlan (the antenna has the back against land), while at the same time covering the area of intererst. If you us an omni, you will pick up noise form a much larger area and get interference.

KimC

Hello We are in the process of installing a 2.4 GHz hotspot in a small harbour. In top season there might be as many as 500 ships in various sizes - all with alu-masts and other reflecting gear. The idea is to give access to the internet for the many tourists bringing a laptop along on their holiday...

KimC

Yes, reboot with short intervals, and I did not have licence problem

Remember to upgrade firmware in the process. I did this before upgrade via the serial interface.

KimC

Our many FWA-clients are authenticated via fixed ip's. The enforcing is done in the firewall, which is working very well. We do not want to worry about MAC-adresses, and changing to DHCP is not an option. Is there (or will there be in the future) any way to get the firewall in cooperation with Userm...

KimC

Tried it too on a board, that has been working flawless for months. It was fixed with a bios reset and an netinstall

KimC

It is a well known problem, and it seems to be connected to certain batches of RB. We have seen it on both 532 and its variants, but never on RB220/230. We do not have experience with the 100-series. We have tried to work around it with shielded cables, perfect grounding, different PSU's with and wi...

KimC

Thank you for commenting, but with all respect - I don't think that you are even close.

Please pay attention to the logs and to the regularity in the disconnects. It happens precicely every 3h55min...

KimC

Hi all, on a 5 GHz wds-link, which has been in stable operation for at long time, some strange things are suddenly happening. Every 3 hours and 50 minutes we get a disconnect. Including the learning period for the bridge, the connection is offline for 40 s. The interval is exactly the same each time...

KimC

Hello all ! On our multiple link 5 GHz backbone, we have allways experienced a significant speed difference between upstream and downstream - often a factor 2 or more better in direction of the users. We see this on real traffic and also when testing with various techniques. This is too bad, when yo...

KimC

It seems, that I got it solved. The trick was to add BOTH wds and wireless to the bridge. Uldis paper on meshing didn't mention this - and really, the docs are almost invisible in this area. Now I have to test the solution a little, before moving to the production environment. Thank you anyway, GWIS...

KimC

The routing should be simple as I see it. However: Router 1: wlan1, 5 GHz client, 10.1.1.10/24 on wlan1 wlan2, 2.4 GHz ch6, ap-bridge, wds, rstp, bridge wlan2, 10.10.10.1/24 on bridge1 Router 2: wlan1, 2.4 GHz ch6, ap-bridge, wds, rstp, bridge wlan1, 10.10.10.2/24 on bridge1 A laptop with 10.10.10.2...

KimC

Hello ! Please consider the following setup (classic repeater): Router 1: wlan1: client, 5.x Ghz Uplink - subnet A wlan2: ap-bridge, 2.4 Ghz, wds, rstp, bridge wlan2 - subnet B Router 2: wlan1: ap-bridge, 2.4 Ghz, wds, rstp, bridge wlan1 - subnet B I would like all 2.4 GHz clients on both routers to...

KimC

Make sure, that you set

allow-sharedkey=yes

on your wireless interface

KimC

Budi, pls be more specific. With static discharge, you probably think of one of these cases: a) static discharge, while I'm handling the card: I'm handling a lot of cards and routers. Why is it only R52 on a few of them that can't stand my treatment ? b) thunderstorm: We haven't had any this summer ...

KimC

Hello We have a number of R52 sitting on RB532 boards, running as AP (2.9.27). On a few of these, we have seen significantly loss of power and sensitivity after some weeks in good operation. The problem comes gradually, and the signal loss is at least 10 dB. It looks like bad pigtail/cable/antenna, ...

KimC

Sorry, I didn't make my self clear: If trying to connect to the clean, updated and reset RB220 via ethernet, you don't succeed. Then you connect via serial interface and change speed settings on the RB220 to 10 Mbps. When this is done, you can connect via ethernet. The problem happened when it was s...

KimC

Hello,

I have a RB220, where the only functional ethernet speed is 10Mbps. It is running the latest ROS and the latest firmware.

What can I do to get 100 Mbps back ??

Thanks in advance for your input...

KimC

Please, Devrim

I don't understand what you ar saying. I just followed your previous post:

/ip firewall nat add chain=srcnat src-address=192.168.0.0/16 action=same to-addresses=xxx.xxx.xxx.100-xxx.xxx.xxx.254

KimC

On 2.9.23 I have made many attempts to make nat with action=same work without adding the many external adresses. Here are my results: address, internal interface: 192.168.10.1/24 address, external interface: 10.76.20.10/24 src-nat: chain=srcnat out-interface=Uplink src-address=192.168.10.0/24 action...

KimC

Hello,

in the wireless forum, reference is made to this MT-document http://wiki.mikrotik.com/wiki/Super_wireless_test. The document mentions, that the test was performed with "per-packet load balancing".

How is this done with RouterOS ??

Thanks in advance.

KimC

For some version numbers ago, an undocumented parameter "TCP SynCookie" in connection tracking was introduced. It is default disabled.

Can someone please explain, what this cookie does ?

Thanks

KimC

I have updated a couple of P4-routers with Intel Gbit ethernet. It seems to work ok now, but for some reason the adaptors are not recognized in the hardware list.

We continue to use this version...

KimC

Same here...

Also, the Intel Gbit adapters are still not correctly recognised in System/Resources/PCI

KimC

It is a well known fact, that upgrading from 2.8.x to 2.9.x kills all firewall rules, mangle rules etc.

Allways remember to make an export first !!!

KimC

We are actually NATting to these users today - but not with Mikrotik (using Windows server). We want to simplify the setup... And performance is not a problem at all. But in order to do this with Mikrotik, you need to add 1000 global adresses to the public interface. This is errorprone and not elega...

KimC

Hello guys ! If I want to make a full nat for 1000 users (we have plenty of global ip's), then how should I do this the smart way (like the NAT on 2003-server). I perfectly understand the netmap-feature, but adding 1000 /32 adresses doesn't seem to be smart... And no, we do not want to expose our qu...

KimC

We had the same doubts - but decided after some reading in this board that it should be safe... Yesterday, we upgraded a number of links in different configurations (plain, bridged, wds, etc) on both RB220/230, RB500 and plain PC. We are generally pleased with the results - several of our links has ...

KimC

I followed my idea about incompatibility between 2.9.11 and 12. It was completely wrong ! After upgrading the last two links to x.12, the chain became useless. Ping in the range 200 - 500 ms, dropped links, kernel faliures etc. After disabling the wireless package and enabling the legacy package, fo...

KimC

Hey Guys ! You are missing something... I have made a 2.9.12 upgrade as well on "half" a radio chain (two out of four hops). On 2.9.11 I had a ping of 4 - 5 ms to the gateway (with a load of 6 - 8 Mbps and all links in good condition on 5Ghz turbo). Now the pings average on 11 - 15 ms, whi...

KimC

Hello again I can confirm, that I have a problem in WinBox accessing the menu "Interfaces". It is 100 % reproducable... When clicking on the menu it blows up ! Setup: ROS 2.9.12 (on RB220) Loader 2.2.8 - just downloaded for the occation XP Pro SP2 - in healthy condition It happens on two d...

KimC

Sure,

I also get a Windows critical error and a shutdown of WinBox when I access Interfaces.

Please fix it !

Regards
Kim C

KimC

We have several RB500 with two SR5 - all rock solid. Some are running with direct power, and some are running with the standard 18V POE. We also use other combinations, such as SR5/CM9, SR5/R52 and SR2/Old 5211 100 mW. However, I would like to know if any improvements could be obtained with tx-power...

KimC

OK - it is solved. The two routers with problems both had the wireless interface as station. As soon it was changes to bridge everything worked as expected.

The only problem is, that I don't understand why you can't bridge an interface in station mode ???

Thanks for your help.

Kim C

KimC

Good point ! Both routers with problems are running station mode - the others bridge.

I will be back...

KimC

Hello there I have not been able to configure a working bridge on a couple of RB220 with ROS 2.9.10. When trying the same on RB500, I had no trouble. The symptoms are, that you can set everything up correctly, but no traffic (neither layer 2 nor layer 3) can pass the bridge. However, two neigbor rou...

KimC

Hello !

Are there anybody around with experience with QoS for SIP on RouterOS ?

How do you mangle the datastream (udp on a wide range of ports)

Thanks in advance
KimC

KimC

You've got a point there - that is why I'm asking.

Basically I don't think that it is ok to sell something broken - even if you write outside the package that it is broken ;-)

KimC

Hello

I will ask again: Shouldn't an upgrade from one supported version to an other, maintain trivial configuration settings ???

If you upgrade from ANY 2.8 to ANY 2.9 you WILL loose all your mangle rules !!!

Please fix it !

Regards
KimC
Djursland
Denmark

KimC

That was the first I did - but no luck.

But I suppose I must do it again.

KimC

As I said, the counters in the forward chain stopped, as there were no traffic (but it is passing 10 Mbps through) In the input-chain changes to a rule (modify/add) made the counters jump to very high values. After a "Reset All Counters" things looks normal until next change. The router we...

KimC

Hello, after some days in operation, the counters in the firewall starts to act funny. On the input-rules, any change results in VERY large numbers. The forward-rules simply stops counting. You can se an example of stopped forward rules on demo2.mt.lv - as I can't make changes, it is not easy to rep...

KimC

Hello guys I have a number of routers running with 2.8.26/27. The licences have been purchased for less than one year ago - but on all of the routers i question, the router reports, that the upgrade period has expired (which is not the case). When trying to upgrade these routers to 2.9rc-x, the log ...

KimC

Hello all,

anybody knows, if it makes any difference to upgrade the MT-box running ap-bridge, when you have a mix of 2.8 and 2.9 clients. Are there any performance improvements in a "clean" 2.9 environment ?

KimC

KimC

Fix it with a separate proxy-server with two interfaces - one for your second dsl and one connected to MT. Then let MTs proxy run with the parent proxy pointing to the SquidNT. Effectively, you now direct all http-traffic to the second dsl, and the rest of the traffic to the first directly connected...

KimC

How come, that I don't get an "official" reply ??? Is it so, that the relatively low price for an RB500 includes a severe limitation in use ???

We certainly would like to know ???

Regards
Kim C
Djurslands.net
Denmark

KimC

Sorry, I did not make my self clear.

The problem is in the WinBox loader - not WinBox it self.

KimC

KimC

Please fix this anoying bug:

Winbox cannot remember it's size, and it cannot be maximized. We are some with a lot of routers ;-)

KimC

KimC

We bought a handfull of RB532. They have been installed with AR5211 in 5 GHz turbo mode (no nstreme) and working well - considering still in beta.

However, we are missing the transparent proxy, which we are normally using for high level routing.

When do we get it back ????

Kim C
Djurslands.net/DK

KimC

We had this attack a lot on our routers with global external ip.

It stopped completely, when we uninstalled the ip-security package, which we had no use for.

Never leave any packages in the routers you don't need !

Kim C

KimC

Check the HowTo for transparent WDS-bridge configuration. This is the setup you want.

Regards
KimC
Djurslands.Net

KimC

We only use the legacy wireless package, but on various platforms (n-streme is not for a production environment yet !!!).

On all routers, the 5211 disconnected momentarily up to 10 times per day. After upgrading to 2.8.17, this issue has disappeared. Many users are happy now !

Kim

KimC

Hello we have just tried something similar. The wireless signal and speed were reporting OK and running stable, but with a very low real throughput in one of the directions. The reason was an incompatibility/driverproblem with a 4-port MT-NIC and a Via-based motherboard. Please check the ethernet pe...

KimC

We have a similar problem with Atheros 5211 (5.5 GHz turbo) on RB230.

About 3 - 5 times per day, the main ap drops the connection to the three clients. The links are down for about 30 s - then everything comes back up.

Kim

KimC

Hi, we have a setup like this. Everything is Mikrotik, and the wireless part is MT's RB/B4O package running in 5.5 GHz turbo mode. The wireless links are between 3 and 8 km. Gateway router | Station1 || || AP-bridge --- router --- users (subnet1/16) || ||==Station2 --- router --- users (subnet2/16) ...

KimC

Me too !!! My last polite question regarding this din not give one answer. It may not be easy, but our clients LOVE Msn with all the fancy features.

Regards
KimC

KimC

We all want Mikrotik to implement a dsl-concentrator as jober asks for. It would be really cool to be able to get 6 Mbit/s from 3 lines with each 2 Mbit/s. And sure - it is possible !!!!!

The company name is ePipe. Web on http://www.ml-ip.com/ Have a look your self.

Regards
Kim C

KimC

Hello there, I just can't figure out how to get the two messengers working with all their popular features. It seems, that the Windows Messenger has less problems than MSN. Generally, chat works, but sound, video etc. don't. I am sure, that the problem is NAT traversal. I have enabled UPnP on te bor...

KimC

I test both situations between two directly attached mikrotik routers with the included bandwidth testing tools. This means, that the bandwidtht testing software runs on different cpu´s (2.8 GHz P4) than the routerboard based radios. The reason for this is, that the testing tools are consuming a ver...

KimC

To Tully I can say, that the tx/rx is the negotiated speed. I have found, that reducing the tx-power to 17 - 18 dBm gives a better connection. Now I get clean 10 Mbps over the two hops. The ip setup is: station 1, wlan: 10.72.1.200 station 1, lan: 10.76.1.10 AP, wlan: 10.72.1.100 AP, lan: 10.74.1.10...

KimC

Hello I have a setup with 3 5.4 MHz Atheros/Routerboard radios for backhaul. It looks like this: Station1 ------ 6 km ------ AP ------ 9 km ------ Station2 --- Gateway Station1: 30 dBi MT dish ack-timeout=43 (dynamic) signal=72 dBm Tx power=20 dBm Noise floor=100 Tx/Rx rate 24 - 36 Mbps AP: 13 dBi 5...

Search found 94 matches