MikroTik

iDen

fixed port isolation on CRSs

What is port isolation on MT?
How is it implemented on MT?

Nothing found on forums/wiki.
Any info links please.

iDen

off course FIRST OF ALL something should be done with RoS especially on CCRs as soon as possible. But I want to share some of my experince... I have 3 CCRs serving core net. 2 of them serving my net for 500 users and last one serving separate plain net for 200 users. in plain i mean that it has no m...

iDen

+1 for Dude

Especially when Dude is used by person who has nothing to do with Mikrotik devices at all.
Lots of people monitoring their Nets or servers with Dude.

iDen

I have one edge router connected with provider via eBGP and to the core network via iBGP, running RoS 5.26. Using routing-filters on provider neighbor I'm receiving only 0.0.0.0/0 from him. I have to transparently send this 0.0.0.0/0 received from provider to my core via iBGP without default-origina...

iDen

I had two CCR's doing this port flap. In both cases all active ports would flap. I checked further and found on both units there was at least one device connected that was NOT set to Auto-Negotiate while all CCR Ports WERE set to Auto-Negotiate. Have now set the appropriate ports to fixed 100Mbps/F...

iDen

yeah it looks like this on my site. before it was like in most screens only 1-2 port flaps. now it's like this already for 2 weeks. What parameters did you use to make watchdog reboot the ccr while experiencing the port flap? Mine never seems to activate. standard params... just entering ip address...

iDen

yeah
it looks like this on my site.
before it was like in most screens only 1-2 port flaps. now it's like this already for 2 weeks.

iDen

CCR-1016
still port-flapping
in more obvious way.
before 6.6 ports were going down and that's it
now it flaps ports many times before restart by watchdog.
first week on 6.6 was very stable I thought it is final holy aid....
no...

iDen

Attention support provided me with 6.6 packages without any suffixes (pre, rc, beta) this attempts "bricked" my CCR1016-12G twice. device goes in infinite loop. first time from 6.2 -> 6.6 second time 6.5 -> 6.6 while tried to connect via etherboot (ether1) netinstall not catching device......

iDen

... So anybody who expected to use the CCR in a production environment in such a short timeframe can't seriously been working in networking for a long time. Or just hasn't the slightest idea of concurrency or software design in general. To defend MT, they told everybody, that the CCR is still in de...

iDen

this lame absolutely non production platform drives me crazy (and not only me) CCR-* on tile + RoS v6.5 is hell ... i have 3 CCRs 1016-12g 2 of them are heavily configured, especially one which has: routing, mpls, mangle, queues, 1500+ virtual interfaces (vlans vpls', bridges), and not so big traffi...

iDen

Yes, it does. But if you will use purely as a router, remember that it's performance is not so high (it is a MIPS CPU). You could assign some ports to be a router, and the rest for switching. Yes, it will support BGP and MPLS, just like any RouterOS device. sure no huge configurations for such low-...

iDen

I'm interested:
If RoS is fully functional on CRS125-24G.
Especially if it normally supports MPLS and BGP?
And what is MTU on ports?

iDen

Hi...

As always, no sufficient documentation.

What is Hw. Fast Path? and what is diffrence compared to simple Fast Path?

What is RP filter ?????

???

iDen

It will be great to be able export/import list of saved connections in winbox.
Will help while system reinstall or move to new workstation.

iDen

After restart some bridges not running on ccr1016. this was on v6.1 and now happened on v6.2. This time loopback0 bridge was down so OSPF MPLS BGP weren't going UP. Full system was down untill mentioned that actually loopback bridge for process instances is not running. solution is to disable/enable...

iDen

5.x working perfectly and current version is most stable version ever(stability returned since 5.22) From your post i can say that you just don't have enough knowledge to configure it. 4.17 is outdated, 5.x syntax should be same in most cases, but 6.x syntax, especially queue, is completely differen...

iDen

of course i did all possible tricks with duplexes , negotions and other possible autos and not autos. yep those are prehistoric switches. but possibilities of 3550 (fastethernet or gigabit models) helping out in many cases, especially when cost is 150$ and not 600$+ (used 3560) At the risk of starti...

iDen

Yeah i know about this article. This thing looks and should be trivial. Interface with lower cost should override interface with higher cost but nothing happens. Desired interface accepts inetrface only while i'm doing some changes to this "primary" interface. After this unwanted interface...

iDen

c3500XL not working with 411AH interface flapping on cisco - tested with simple L2 bridge and OSPF setups. causing RB2011 to hang. only manual restart of RB helps. hundred options tested and only idea left that RB2011 and c3500xl can't leve together.(tested on different devices, on other devices ex...

iDen

In my network i have router with 3 outgoing interfaces. 1 - directly connected to backbone, 14 neighbors, bad wifi link 2 - has 1 hope to backbone, 1 neighbor, good wifi + optics 3 - has 2 hopes before backbone 1 neighbor, # wifi links I want to pass traffic on the second link coz of its quality whi...

iDen

Lol, try google.....

http://www.youtube.com/watch?v=YHeyuD89n1Y

iDen

so from your words i can think that it will be implemented in some v6 release anyways.
great.
thanks.

iDen

Hello
We have upgraded our core network with several ccr1016
ROS on them v6rc7

I can't see metarouter.

Where is it ? How to enable it?
If not available yet, will it be available in future release ?

iDen

only standard vpls over ldp are working at the moment

a+
Thierry

sorry, what is standard VPLS?
isn't there two types of vpls static (standard as i know) and BGP VPLS.

and while testing both VPLS variants wasn't working...see my message above.

iDen

Can't add BGP-VPLS in RoS 6.0rc4 both through GUI or cmd. RB2011L interface vpls bgp-vpls add name=10 route-distinguisher=10: 0 import-route-targets=10:0 export-route-targets=10:0 site-id=8 bridge=britge.10 b ridge-horizon=1 action timed out - try again, if error continues contact MikroTik support a...

iDen

OK. Thanks. +1

I have tried to find but had no luck....
http://forum.mikrotik.com/viewtopic.php?f=2&t=53802

iDen

I have tried to find but had no luck....
i can give you dozen examples where it starts from the beggining and yes in most cases from the end

iDen

Hello, I'm interested if why RoS DHCP server gives IPs sometimes from the end of the IP pool and sometimes from start. How to make it give ips always from start or end of pool? Also when one of that leased IPs in the mifddle of given pool becames free, why dhcp server doesn't assign it to request as...

iDen

Hello everyone. I need your help. Before posting i did search but found nothing. I have to block facebook youtube etc. For these purposes i went with transparent web proxy. But it works only few minutes after router restarted. and then it again allows everyone acces to blocked sites. Any suggestions...

iDen

Hello i'm trying to setup Hotspot on RB433AH ros v 5.14 while trying to connect with user added to user manager getting error that "NO VALID PROFILE FOUND" created profiles manually from UserManager web interface, "assigned" them to created users but nothing works i'm trying simp...

iDen

+ not working well on Win7x64

every left mouse click considered like Add operation on field add, interface add or just "Enter"(Return) in terminal

iDen

Hello
Any hardware for 6Ghz wireless ?

iDen

Thanks!

Max L2MTU on RB2011 series:
ether1-ether5: 4047; ether6-ether10: 2028

iDen

what is MTU on Gigabit and FastEthernet ports ?

iDen

I have same problem. Setup is rb411ah and rb493ah with BFD configured only on Ether1 ports... fastethernet connection between routers with 0% packet loss and 1ms timeout between routers: BFD configuration on both routers look same: add disabled=no interface=ether1 interval=1s min-rx=10s multiplier=5...

iDen

I've supout file but without wireless debug

normal action is to enable wireless debug logs, make supout.rif file, send to support, and only then downgrade. otherwise, we can't fix the problem, if you don't report it.

how should i enable wireless debug? or just sys logging wireless topic ?

iDen

since 5.12 wireless connect is very unstable.
very often disconnects for seconds.
approximately once in 30 minutes

downgraded back to 5.11 much more stable

iDen

why bridge selects for itself mac from wifi interface? simple bridge: wifi interface is always Port number 1 ethernet interface is port number 2 bridge with vlans on ether and wifi wifi vlan port is number 1 ether vlan port is number 2 and only when WDS mode. vlan under wds, wds under wlan and only ...

iDen

thanks
worked

iDen

Link on RB411AH mode station bridge On station: IP on Wifi interface On AP: IP on bridge which contains eth1 and wifi interfaces While restarting Station after 1-2 seconds loosing IP connectivity with AP. Still can connect by mac. Tested if loosing IP connetivity from station to network: yes, while ...

iDen

thanks for definition

iDen

Hello i have Dude 3.5
And i thought to update winbox app inside dude.
2.2.18 is latest, and dude 3.5 which is installed hundred years ago as central server should have older version.
can't update dude to newest 4.0 beta
Is it possible? Or it is hardcoded in dude exe ?

iDen

thanks

iDen

hello mikrotik "support"

I know about this table but there are now mtu for models i have requested

iDen

what is mtu of following boards:
RB711-5HnD
RB711G-5HnD
RB711GA-5HnD

??

iDen

How to disable this option when wifi link shrinks it's band when it is idle and no traffic on it ?
I need to achive stable wifi link for ospf/mpls/vpls purposes.
and i don't like this thing when it's idle i have ping timeouts and 300ms to Station site

iDen

it's not my case i don't need transparent bridge between two same networks. i had to devide one LAN on 2 different lans on AP or station sites. but fantasticaly few hours ago i've found solution !!! wireles modes: ap bridge, station bridge...protocol NV2 AP MPLS = mpls interface - bridge(wlan+ether1...

iDen

Hello Already one month i'm trying to make MPLS/VPLS link through wireless 411ah link. I need to separate network on station or AP side but not to do transparent bridge Transparent wds bridge works fine but i need L3 separation on one of the sites. tried AP bridge and station separated (not in bridg...

iDen

think i have same problem
my original thread: http://forum.mikrotik.com/viewtopic.php?f=14&t=56735

iDen

every 30 minutes router loosing route to other connection. it occurred when i had setup loopback for OSPF router-id. here is topology: http://img39.imageshack.us/img39/5021/ospf.png router A losing route to router B but still occurs in B's neighbors list. No routes advertised from A to B... no route...

iDen

i have same problem every 30 minutes router loosing route to other connection. it occurred when i had setup loopback for OSPF router-id. here is topology: http://img39.imageshack.us/img39/5021/ospf.png router A losing route to router B but still occurs in B's neighbors list. No routes advertised fro...

iDen

Hello I have backbone network on OSPF.... After i have implemented loopback interfaces as Router IDs i have start losing connectivity between routers. aprox every 30 min i'm loosing connection between two routers... one of the routers changing it's state from FULL to INIT Plus this loopbacks should ...

iDen

hi Is it possible to divide WiFi link on L3 segment an get working MPLS/VPLS tunnels ? Two MPLS/VPLS routers connected to each other by WiFi link. while link is transparent bridge vpls between routers working OK, traffic goes through VPLS. But i need to have another network on one end of MPLS networ...

iDen

Hello Everybody. I'm in big troble which i can't figure out. Please help MPLS network I have some clients connected to my office via VPLS tunnels. They are getting IP via DHCP without problems. Their vpls access ports are on 493AH which is connected to L2 network via ethernet... everything works fla...

iDen

Hello I've problems with mpls binding filtering Simple example: Two MPLS VPLS routers, and BGP route reflector outside MPLS network (OSPF reachable ofcourse) Net1 Net2 (BGP RR) <====> (R1 <---> R2) MPLS MPLS netwrok is only between R1 and R2 with separate network. BGPrr is connected via ospf When i'...

iDen

downgrade helped

iDen

i've tried but system package remains same under routeros package.....
i'll try to downgrade RoS now

Yes. Download all packages and from the archive install only packages you need.

iDen

so is it possible right now to install system package separately like it was before, and not under routeros package like now ? There is tree view by default. If packages are installed separately then you simply can't see tree, because there is no hierarchy. When you install combined package it shows...

iDen

hello i've suddenly updated routerboard 493ah with routeros-mipsbe package. now in system packages there is tree; routeros -system how can i return view of packages to normal view ? is it possible for sure i can't remove package system even if i have uploaded system package on routerboard before res...

iDen

Try disabling SIP and H.323 helpers in
Code: Select all
/ip firewall service-port
section instead of disabling connection tracking. Is NAT applied twice to this traffic?

Thanks i'll try disabling helpers.
No NAT at all, bridged network

iDen

In RoS v5.2, if enable Connection Tracker on bridge interface, it starts blocking SIP and h.323's established TCP connections are dropped also.

So:
After enabling Connection tracker on interface, SIP and H.323 calls stop working.

Annoying....

iDen

Hello Is it possible to make auth by Radius for NV2 WiFi links (nv2 or "nv2 nstream") As i got from Wiki, NV2 doesn't support security_profiles ? But in feature list said that in 5.0rc3 it begun supporting "RADIUS authentication features" So how ? from standard security profile ?...

iDen

Hello everybody. I'm testing next scheme for over month: http://img29.imageshack.us/img29/6074/hwmpproblem.th.jpg Problem is thet this setup absolutely unstable. I'm trying to transport user VLANs over mesh network: from client to gateway. Trying to test mesh self recovery occurred next things : Try...

iDen

VLAN interfaces created on transport RSTP or MESH bridges and then bridged with clinet port (ethernet, or other vlan created on actual interface) become inactive. Solution i've found is to delete vlan interfaces on this transport bridges and then create them from begging and after again bridge this ...

iDen

so for reference.... full frame on any routerboard on its interface is L2MTU + Ethernet 14 (no fcs, as wiki says it's being discarded) for example on 450g L2MTU 1524 + ETH 14 = 1538 bytes So BT generates packet size of 1524, takes 24 bytes from VLAN MPLS headers or whatever else. then interface adds...

iDen

1. So, in routerboard interfaces information L2MTU option means "FULL FRAME L2 MTU" ???? maximum L2 packet size with all headers included Ethernet and etc ? 2. And changeable option MTU in interface options means IP data ????? (1480+20) without L2 headers like VLAN MPLS VPLS ETH. ?????????...

iDen

can i get some discussion regarding my questions right here? i saw this picture and read this wiki hundred times. so you say that ethernet headers are not included in this interfaces options and are added to frame by default...... and l2mtu means amount of data with VLAN, MPLS, VPLS only ? MTU means...

iDen

hello just for reference i'm asking MT support to answer me about this things: in RB winbox interface: L2MTU is full L2 ethernet frame with data accepted from upper layers ? It is unchangeable option in interface menu. Is it active by default and is accepting this maximum frames on interface? MTU is...

iDen

it would be very nice to have minimize feature inside winbox windows for diffrent operations/catecories windows. it's very annoying to have huge firewall/mangle windows opened, have to close it and in other second u need it again searching in drop down menus. i'm talking about feature like adobe pho...

iDen

i've setup OSPF MPLS and BGP-VPLS network with central BGP route reflector almost always only one of the routers can't receive NLRIs and can't establish VPLS. after connecting with BGP-RR it discards connection after 3 minutes because not receiving updates. it sends 1 update (1 VPLS) to RR and last ...

iDen

oops :S

thanks
didn't mention it

iDen

it would be very useful to have task manager on routerbords, to see which process are using CPU time, memory.
something like: top, ps in linux or "sh proc cpu" in cisco

iDen

please make it fully compatible with IEEE standards.
to allow mikrotik communicate with other devices like cisco using this protocol RSTP/MSTP.

iDen

hello how should i configure Mikrotik RSTP to communicate with Cisco RSTP/MSTP protocol ??? I've tried everything from cisco/mikrotik manuals. but cisco cisco still can't see mikrotik Bridge, and receiving it's BPDU's. But i can see that cisco (3550) sending it's BPDUs but seems to be mikrotik isn't...

iDen

VLAN interfaces are inside bridge, and not created over it. (in future i'm creating user vlans over this bridges for transport)

iDen

forgot to sy that tested on rc7 rc8 i also tried to follow cisco recomendations: Valid priority values are 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected. also tried to enable spanning-tree mst pre-standard ...

iDen

I'm trying to build high speed L2 transport network with RSTP. Seems to be Cisco not recognizing Mikrotik's BPDU packets, and configuring it's spaneening tree topology properly. While scheme is build directly on routerbards everything works as it should be. I have even replaced RSTP with HWMP+ prtoc...

iDen

i have Mikrotik+option 82+freeradius+dhcp snooping working fine, (+ arp inspection and ip source guard). the same problem with characters in Remote Agent/Circuit ID. i think problem is in libpcap, but cant test it right now (lazy) waiting for new centos. but other radius on perl RADIATOR can see eve...

iDen

when turning on "Passthrough" column in IP Firewall Mangle, it doesn't show Passthrough option for "mark connection" type rules , if it YES or NO

iDen

I know what to use for now and wrote that (bridges).
Just suggested to implement in VPLS names already preconfigured names from BGP VPLS.

iDen

Hello Let me suggest you to make dynamic VPLSs in VPLS window take it's names from BGP VPLS configuration which has VPLS name field. RouterboardOS applies generic names like vpls1, vpls2, vpls3 ... Sometimes and in general it's difficult to find out what is that generic vpls. you have look at peers ...

iDen

after several hours it has fully established by its own
i've touched anything.....last time i've checked R3 status it was same way connecting/disconnecting.

could it be NTP problem and something about time synchronization ?

iDen

Hello i'm trying to built BGP-VPLS network it looks like this: http://img64.imageshack.us/img64/8906/newschemenetwork.jpg Actually i've built this scheme many times and everything worked perfectly. In this case i've problem that R3 peer not receiving updates from BGP Rout Reflector. BGB signals only...

iDen

i've seen that my feature request were implemented in RouterOS v5rc7
and haven't seen my name in wiki:Feature_Requests

Your partners:
Denis Iskandarov @ Caucasus Digital Network Ltd.
Tbilisi, Georgia

iDen

iDen

проверил checked snmpwalk shows correct results. even checked snmpwalk from Dude, which shows exact structure of sent queries in tables with values. but general subject of this article is to add Alias field inside interface configuration with its output snmp query ifAlias as other have. it would giv...

iDen

sorry, no matters which int.
it equall
one ETHERNET shows only UPload
and
one VLAN int on other ethrnet shows only DOWNload

iDen

also one interfaces shows only Upload other interface shows only Download Dude shows both Down/Up cacti, poller, rrdtool checked and rechecked nothing wrong. other interfaces ~20 with same config are just OK showing both Down/Up but i've mentioned that this happens mostly on Ethrnet interfaces.........

iDen

also not all interfaces sending proper SNMP queries some interfaces remane with brocken names when in the same time other hundred interfaces got their names from query by snmp/cacti variables: example: Broken name: |query_ifAlias| - Int: |query_ifName|(|query_ifIndex|)@RB450G-49 One working interfac...

iDen

Hello everyone and especially RouterOS developers. I'm setting up cacti for bandwidth monitoring and archiving in my network.(Using Dude as well but it's other kind of thing) So when i'm adding devices like Cisco or Zyxell to Cacti SNMP poll, i can see aliases on interfaces e.g. comments/description...

iDen

what is maximum MTU size on different interfaces for rb493G ?

iDen

I’m testing setup: Mikrotik DHCP server Option82 + FreeRadius . Agent-Remote-Id, Agent-Circuit-Id incorrect format. I mentioned that Agent-Remote-Id and Agent-Circuit-Id sent in some strange format with slashes. Like : Agent-Remote-Id = "\000\006\000\r\355!\244\200" Agent-Circuit-Id = &quo...

iDen

Hello. I'm trying to do next MPLS setup: 3 routers connected in one mesh network 1 router connected to this mesh ring with OSPF MPLS over LDP running everywhere. BGP-VPLS tunnels between ports mesh routing in the ring works fine. OSPF routing between mesh ring and separate router = works (can ping a...

iDen

Mikrotik don't support eap ttls or peap as client! you can use eap tls with certificate on both sides. man read carefully first strings of my message :) Hello I'm trying to do WDS WPA2-EAP TLS authentication of 2 RB600 i told about ttls to notify that generally my radius-sql-daloradius is working. ...

iDen

Hello I'm trying to do WDS WPA2-EAP TLS authentication of 2 RB600 Simple WDS AP+station without EAP is working. I've already searched forum for related topics. but they didn't help me. So what do i have: 2x RB600 CentOS 5.5 => freeradius2-2.1.7-7.el5 + mysql Ver 14.12 Distrib 5.0.77 , + daloRADIUS 0...

Search found 96 matches