MikroTik

dsdee

i had a setup similar to this on my original MT 532. My switch supported VLANs, so I had a VLAN for each ISP/router on the outside so that they both weren't connecting to the same "LAN" on the single MT port. Since both that cablemodem and DSL modem that I had at the time used DHCP for me ...

dsdee

macagiver, your example won't work for the cases when there are two different ISPs with two different address spaces, and adaptations of the wiki samples will work. With two different ISPs, you can't route packets with source addresses of one ISPs interface over the other ISPs network (and vice-vers...

dsdee

No, I don't have a misunderstanding. I have two natted connections for my external communications. If I disable connection tracking, then the connection that is "still" working will no longer be "work" and I will lose all those working connections... as well as the "broken&q...

dsdee

ok, and i have (probably similar) scripts that watch the interface, the next-hop gateway, and the dhcp-rewnewal state to make the decision when to fail over or nto. But for me, I cannot restart all of connection tracking, because not _all_ connections traversomg the router are going thru the now &qu...

dsdee

New connections will indeed be created as-needed What I need is for certain long-term connections to end-immediately, so that they can be re-routed. I have two internet connections, different ISPs, and when one fails or becomes unresponsive, I need the connection-oriented traffic that is passing ove...

dsdee

Fantastic :( In response to my 3rd time (3.15, 3.16, 3.17) asking Mikrotik support about it in early December, they told me: Hello, Currently connection removing is broken on big-endian platforms such as RB400 series and RB333.RB600 and RB1000. This fix will be available in next RouterOS release. Re...

dsdee

I see that v3.18 is out, but I can't upgrade for at least another week.

Can someone who has upgraded an RB493 to 3.18 confirm whether or not that the "/ip firewall connection remove ###" problem has been fixed, or not ??

Thanks,

dsdee

I see that v3.17 is out today. If someone has upgraded already to 3.17, can they verify, please, if "/ip firewall connection remove ###" works, or does not? (or, the equivalent command in Winbox -- Firewall/Connection tab, then click right and delete a connection) ?? Thanks in advance, David

dsdee

on v3.16 on a RB493 here. Those two counting methods are both working for me, and consistent with what i see in Winbox, too. So, I'm not sure that's it (heck, i'm not sure the /ip firewall connection remove --> 'action failed 6' problem is true across the board for v3.16 on all platforms, or not).

dsdee

You don't state what version of ROS you are using. I have this same problem with my SIP connections when one of my gateways fails and I need to move the connected SIP connections over to the other interface. You can use the /ip firewall connection remove ... command to remove an existing connection....

dsdee

I upgraded to v3.16 this morning, and am still experiencing the "action failed (6)" error on trying to click [-] when trying to remove a connection.

Anyone else?

dsdee

There are cases when I need to remove connections from the connection table that are active in the connection table, but no longer functionally active because routing has changed. This function has worked well, with only a few hiccups, back into the 2.9 versions of the code. Clearly the "action...

dsdee

Both in WinBox and via the command line, I am no longer able to remove active connections, receiving an error: MikroTik> /ip firewall connection MikroTik> print (output snipped) MikroTik> remove 120,121 action failed(6) the similar corresponding pop-up happens when I try to remove a connection in wi...

dsdee

I recently upgraded from an RB500 running v3.14 to an RB493 that I have at v3.15. I have a WAP that acts as a DHCP Relay to my RB500, so that the RB500 can dole out DHCP Addresses. The configuration works fine. I copied nearly the whole configuration over from the 500 to the 493 (the DHCP configurat...

dsdee

yeah, that's along the lines what I had churning in my mind this AM when I wrote the email and headed out to work.

I'll work on that this evening.

Thanks!

dsdee

But i've already built the 3.0 config from scratch, effectively moving over section by section that i needed to from the base system config.

so in-effect, that's how it is already configured.

Any ideas on how to capture a sup-out.rif if the machine is too busy to be writing one?

dsdee

Six days later, and my load average has slowly risen throughout the day today, to be nailed near 100% right now. I have started a "/system sup-output" but it has not returned yet. Last time it timed out and logged me out before creating the .rif file. So, the firmware upgrade obviously is ...

dsdee

Glad to hear it's not just me.

I am not running hotspot.

I do have a PPTP client connected to my RB532 most of the time. But I haven't correlated that connection being up with the CPU load. I'm not seeing an influx of traffic around my high-load times either.

dsdee

There was indeed progressive memory consumption, but not down enough to the point where it should have been unusable. There is usually 10-12 MB remaining free on my 32 MB RB532. attaching RRD graphs of the past month, where you can see the trends. The Load Avg ramp-up usually starts 1.5-2 days befor...

dsdee

Hmmm, current is 2.12, I see now that there is a 2.15 (there wasn't one, last time i looked) I will upgrade it now, which will buy me another week. I checked the changelog for 2.15, but there doesn't appear to be anything related to my problem. Was there a discussion on this problem somewhere else??...

dsdee

Hello; I'm on a RB 532, running RouterOS 3.10. I have been experiencing my problem over the past several months, on the past few ROS versions. After the router being up about 5 days, the load average will slowly start to climb, and then it spikes and hangs the router sometime late in the 6th day or ...

dsdee

OK, so since we got some bit of verification that it is showing "next hop gateway down" when it goes up, and vice-versa, how do we get Mikrotik to take note of it for change in a next release?

dsdee

[bump]

Has anyone else noted this?? I can't be the only one using the check-gateway feature !!!

dsdee

I have an RB500 running RouterOS 3.7. I have my RB500 set up so that the default route will ping its gateway with the "check-gateway=ping" parameter. Every time I lose connectivity on that route, I get the following messages in the syslog: Apr 28 14:16:04 sentry route,event Next hop gatewa...

dsdee

That's different from what I was originally seeing, I think, where it would hang, and then finally come back I have seen what you show, but I have seen it (recently) when it is a repeated packet stream trying to keep the connection alive, such as a SIP/RTP connection, where as soon as you would kill...

dsdee

It's working on a RB500, too, on v3.7

Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?

dsdee

Yep, seems to be working well! Thanks!

dsdee

I have not.

I had only logged it here, since I was under the impression this was the place to raise issues with beta versions, and this issue has been present since I first migrated over to the 3.0 Release Candidates.

dsdee

Same here. I've upgraded to 3.1 on my RB532, and the

/ip firewall connection remove ###

on the console hangs til I hit ^C, or until it times out.

Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.

dsdee

Hello; I've now upgraded to rc14 and am still having this problem. [dsdee@sentry] > /ip firewall connection remove [ find connection-mark = "web_conn" ] action timed out - try again, if error continues contact MikroTik support and send a supout file (13) [dsdee@sentry] > I don't think it g...

dsdee

Good deal, then it isn't just me.

Just to verify that it's not a "quantity of connections in the list" issue, I only have 75 or so, and it is still behaving as described above.

dsdee

[bump]

Can someone else try to remove a connection from the active connection table and verify that the router does indeed not respond/time out for the command?? I can't be the only one experiencing this problem...

dsdee

I just upgraded from 2.9.45 to 3.0 rc10 this past weekend, totally cleared out my ruleset, so i could start fresh. I'm noting a problem trying to remove established (or any listed) connection from the connection tracking, both thru the GUI and thru the CLI: ... 51 SA tcp 192.168.200.8:1754 x.x.x.x:1...

dsdee

There are many places within WINBOX where it only shows a subset of the available columns of information that are available through the Command Line. Many of these columns are important to many people, many are not. Alternatively, many of the columns that are currently viewable, have no relevance to...

dsdee

ok, so now that i've upgraded to 2.9.18, the Sniffer starts as it should, and stays started. Yeay ! ok, now I have a problem that the CPU load shoots up to 55 and stays there. This didn't happen in previous versions. Here's my sniffer config: > /tool sniffer print interface: int_if only-headers: no ...

dsdee

... just need to make sure MikroTik knows it's a problem, since it was something that was broken along the way, they need to know it's now broken so that it can be fixed...

dsdee

i'm already on 2.9.17, and it's doing it there. 2.9.13 was fine...

dsdee

i'm having a similar issue here. It's starting, and then dying. I created a script, below, that restarts it every 5 minutes in case it's not running, since I'm running snort on my server that it is supposed to be streaming to. Anyways, every 5 it runs, it logs that the sniffer is not running. It use...

dsdee

I uploaded 2.9.17 and rebooted 2 more times. The 2nd time, it didn't kernel-panic on the way down during the reboot, and the install actually "took" and all packages now show as 2.9.17. Nothing changed on my end; same procedure of SCP the image up there, and reboot. Not sure if the disable...

dsdee

I disabled all packaged except for routeros-rb500 and system, because it would not let me disable all packages, and i rebooted as per your suggestion. THis did not work, because the router was then unable to route, nor to fetch a DHCP address from my cable provider, so I was dead in the water til I ...

dsdee

ok, i'll try to disable/remove them and reboot after-hours tonight, and will let you know.

Thank you!

dsdee

Why so ??? I've never had to do that before on the RB500; the upgrade has always replaced all packages.

Is this a change in the way the OS upgrade is all packaged together ??

dsdee

I attempted to upgrade from 2.9.13 to 2.9.17 this morning, and it didn't work. or, it half-worked. or it fully worked.... I just am not sure.. As usual, I uploaded the new .npk to the Routerboard 500 for 2.9.17, and issued a "/system reboot". During the shutdown portion of the reboot, the ...

Search found 43 matches