Community discussions

MikroTik App

Search found 131 matches

by j2sw
Mon Feb 05, 2024 1:30 pm
Forum: Forwarding Protocols
Topic: ERROR: RECV RouteRefresh with invalid subtype: 0
Replies: 19
Views: 4984

Re: ERROR: RECV RouteRefresh with invalid subtype: 0

AFAIK this does not do any harm. Do you have any actual problem? If not and you simply do not like warnings, then those can be hidden or reconfigured to be recorded in different buffer. Yes, I have an actual problem. Problem ! as mentioned by a previous poster. I have issues refreshing with bird ro...
by j2sw
Mon Feb 05, 2024 1:13 pm
Forum: Forwarding Protocols
Topic: ERROR: RECV RouteRefresh with invalid subtype: 0
Replies: 19
Views: 4984

Re: ERROR: RECV RouteRefresh with invalid subtype: 0

Any word on this? I'm seeing this more and more in trying to mix v6 and v7. Mainly for migration purposes. Can't migrate both sides at once in many instances.
by j2sw
Fri Dec 29, 2023 5:19 am
Forum: Forwarding Protocols
Topic: V7 Route Filter Deny-ALL
Replies: 2
Views: 831

V7 Route Filter Deny-ALL

I am trying to figure out the proper syntax to deny all prefixes to and from a BGP peer. As best practice, we turn up BGP with peers and do a DENY-ALL filter where we don't accept anything from them nor send them anything. This way we can monitor the session or announce routes during a maintenance w...
by j2sw
Mon Apr 03, 2023 6:20 am
Forum: Forwarding Protocols
Topic: Deny OSPF prefix out a certain interface
Replies: 1
Views: 2025

Deny OSPF prefix out a certain interface

I have a router connected to two upstream routers for redundancy. I am going to be adding a QOE/Preseem box in between. However, I do not want to advertise a few prefixes across the Preseem interface. Can I accomplish this in V7? In otherwords I will have 3 uplinks. One is for Preseem. The other two...
by j2sw
Fri Mar 17, 2023 6:57 pm
Forum: General
Topic: winbox safe mode
Replies: 0
Views: 247

winbox safe mode

Here is a feature request. If a user forgets to release safe mode it would be nice if the next time someone logged in the router would say "Someone has taken safe mode". We had an incident where I logged in and took safe mode. Somehow this session was forgotten about or something. Another ...
by j2sw
Fri Mar 03, 2023 4:12 pm
Forum: Forwarding Protocols
Topic: BGP syncronization questions
Replies: 3
Views: 1995

Re: BGP syncronization questions

Totally missed the boat on this.

Never said it was ebgp
Never said it was in production
Never said it was on an IX.
None of those are the case.
by j2sw
Fri Mar 03, 2023 1:33 pm
Forum: Forwarding Protocols
Topic: BGP syncronization questions
Replies: 3
Views: 1995

BGP syncronization questions

I have a design question. This network has a single /24 of IPV4 space. Let's pretend 10.10.10.0/24 is routable IP space for the sake of this discussion. I have attached a crude diagram of the setup. My questions are. 1.I don't want to blindly (no BGP synchronization) advertise the block out the upst...
by j2sw
Sat Nov 26, 2022 2:04 am
Forum: General
Topic: Cant stream Netflix via VPN
Replies: 2
Views: 2190

Re: Cant stream Netflix via VPN

+1 to this! Netflix , PrimeVideo and others stop working when they detect a VPN. https://www.comparitech.com/blog/vpn-privacy/how-easy-is-it-to-detect-a-vpn/ Had a problem in my installation where I used SSTP and PPTP as failover VPNs in my LAN. Primevideo gave an error when passing over my local VP...
by j2sw
Sat Nov 26, 2022 2:02 am
Forum: Forwarding Protocols
Topic: OSPF Assistance Required - RouterOS V6.49.5
Replies: 2
Views: 1775

Re: OSPF Assistance Required - RouterOS V6.49.5

Make sure all your OSPF-speaking routers are all o the same RouterOS version. -Make sure you are using loopback -Maker sure you are not using larger networks than what are bound. For example, if you have 10.10.10.0/29 don't use 10.10.10.0/24 if your OSPF networks. There are a host of other things th...
by j2sw
Sat Nov 26, 2022 2:00 am
Forum: Wireless Networking
Topic: Quectel modems and V7
Replies: 1
Views: 624

Quectel modems and V7

We are running into issues with LHG devices with QUECTEL modems and v7. These device are just fine on v6, but if we try to upgrade to anything in 7, including the latest beta they become unresponsive. Our latest test shows the ethernet port does not even allow access. Has anyone run into this? These...
by j2sw
Thu Jun 09, 2022 5:28 pm
Forum: General
Topic: RouterOS + FreeRadius + Active Directory
Replies: 3
Views: 1204

Re: RouterOS + FreeRadius + Active Directory

What is used after 6.43?
by j2sw
Fri May 21, 2021 9:10 pm
Forum: Wireless Networking
Topic: LTE Log messages
Replies: 3
Views: 1931

LTE Log messages

Can anyone shed some light on what these mean? 13:07:19 lte,async,raw LHGR: lte1: sent QAT$QCRSRP? 13:07:19 lte,async,raw LHGR: lte1: rcvd $QCRSRP: 020,2000,"-085.70" 13:07:19 lte,async,raw LHGR: lte1: sent QAT$QCRSRQ? 13:07:19 lte,async,raw LHGR: lte1: rcvd $QCRSRQ: 020,2000,"-12.80&...
by j2sw
Mon Jan 18, 2021 4:58 pm
Forum: General
Topic: PPPoE pool best practices
Replies: 0
Views: 395

PPPoE pool best practices

Folks, I have, for years, daisy-chained pools in this fashion add name=PPPOE_03 next-pool=PPPOE_04 ranges=192.168.65.2-192.168.66.254 add name=PPPOE_01 next-pool=PPPOE_03 ranges=192.168.68.1-192.168.68.126 I have ran into some issues where pools are not being exhausted before it moves onto the next ...
by j2sw
Sat Dec 19, 2020 1:53 pm
Forum: Forwarding Protocols
Topic: Full BGP tables with two upstream ISPs using CHR - Performance question
Replies: 18
Views: 14196

Re: Full BGP tables with two upstream ISPs using CHR - Performance question

We have multiple instances where we have CHRs running with 2+ full internet v4/v6 feeds. Here are my observations. 1.Make sure your convenience time issues are not related to being able to pass traffic. I have seen many instances where the underlying hardware was not enough to keep up with the traf...
by j2sw
Sat Dec 19, 2020 1:44 pm
Forum: Useful user articles
Topic: Tool: Using Splunk to analyse MikroTik logs 3.3 (Graphing everything) 💾 🛠 💻 📊
Replies: 472
Views: 309003

Re: Tool: Using Splunk to analyse MikroTik logs 3.1 (Graphing everything)

Awesome post! I have pushed this out to my blog as I think it is a very helpful tool!
by j2sw
Sat Dec 19, 2020 1:30 pm
Forum: Forwarding Protocols
Topic: CCR1072 with 2 Provders BGP Full Tables
Replies: 7
Views: 3640

Re: CCR1072 with 2 Provders BGP Full Tables

The biggest question in my mind. Do you think v7 is stable enough for your production environment? V7 is awesome, just not sure if I would put it into production yet.
by j2sw
Sat Dec 19, 2020 1:29 pm
Forum: Forwarding Protocols
Topic: Full BGP tables with two upstream ISPs using CHR - Performance question
Replies: 18
Views: 14196

Re: Full BGP tables with two upstream ISPs using CHR - Performance question

We have multiple instances where we have CHRs running with 2+ full internet v4/v6 feeds. Here are my observations. 1.Make sure your convergence time issues are not related to being able to pass traffic. I have seen many instances where the underlying hardware was not enough to keep up with the traff...
by j2sw
Sat Dec 19, 2020 1:22 pm
Forum: General
Topic: Cisco and Mikrotik bonding
Replies: 2
Views: 591

Re: Cisco and Mikrotik bonding

After reviewing configs on a similiar setup I found my error I think.
port-channel load-balance dst-ip

I need that to add to my cisco. Your response helped jog my memory.
by j2sw
Fri Dec 18, 2020 8:52 pm
Forum: General
Topic: Cisco and Mikrotik bonding
Replies: 2
Views: 591

Cisco and Mikrotik bonding

I have a Cisco 3560-X switch and a 1036. Trying to get some bonding working. Cisco Config interface Port-channel1 switchport trunk allowed vlan 11,350,3200,3201 switchport mode trunk ! interface GigabitEthernet1/0/1 description TO_CCR1036_PORT1 switchport trunk allowed vlan 11,350,3200,3201 switchpo...
by j2sw
Tue Oct 06, 2020 4:13 pm
Forum: Forwarding Protocols
Topic: Modern IBGP design questions
Replies: 1
Views: 1121

Modern IBGP design questions

Want to see what folks are doing in this scenario. Two Mikrotik Routers. Each has an ISP pulling in default routes via eBGP. Are you doing a separate instance to establish iBGP? If so, are you doing "redistribute Other bGP" in the instance? Client to CLient reflection? in the peer are you ...
by j2sw
Thu Apr 02, 2020 7:46 am
Forum: Scripting
Topic: Dual sim. Determine which connection is better?
Replies: 1
Views: 1858

Dual sim. Determine which connection is better?

I have a Mikrotik LtAP mini with a TMobile SIM and an AT&T SIM, and I need to figure out a script that can determine which connection is better and toggle to that SIM. I know the SIMs on this model can't be active at the same time since it is one modem with 2 slots. The scenario is we send this ...
by j2sw
Fri Sep 06, 2019 6:44 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 101095

Re: RouterOS v7.0beta1 (ARM)

If anyone is having issues installing the beta like I did on a hAP ac2, I had to update the firmware in System>Routerboard before the v7 beta would boot properly.
Makes sense. Latest firmware on the router board for the latest software.
by j2sw
Fri Sep 06, 2019 6:09 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 101095

Re: RouterOS v7.0beta1 (ARM)

Folks who are expecting multi-core BGP are not understanding how BGP works on other platforms. Cisco is not multicore BGP. They have what is called soft-reconfiguration. This make a huge difference. Push for this instead of multi-core BGP. It will help more.
by j2sw
Mon Jun 03, 2019 11:41 pm
Forum: General
Topic: feature: show ospf and bgp on snmp
Replies: 14
Views: 11507

Re: feature: show ospf and bgp on snmp

We still need this.
by j2sw
Sat May 18, 2019 5:15 pm
Forum: The Dude
Topic: Dude up alerts make it but down don't
Replies: 3
Views: 2938

Re: Dude up alerts make it but down don't

So is it not enough to have the up->down status checked? down->up is also checked.
by j2sw
Fri May 17, 2019 4:30 pm
Forum: The Dude
Topic: Dude up alerts make it but down don't
Replies: 3
Views: 2938

Dude up alerts make it but down don't

We have a situation where the Dude notifications on a device being up will make it through, but the down notifications do not. Some info. 1. Mail server does not show any logs for the down alerts. It's like it is never hitting it. 2. Up alerts come through just fine. Both are going to the exact same...
by j2sw
Mon Apr 29, 2019 9:09 am
Forum: The Dude
Topic: Dude v6 - Dependencies - How does it work?
Replies: 6
Views: 5375

Re: Dude v6 - Dependencies - How does it work?

I think I am experiencing the same issues. I get notifications when I really should not be getting them.
by j2sw
Tue Apr 23, 2019 10:03 pm
Forum: The Dude
Topic: Parents under Dude 6
Replies: 1
Views: 2792

Parents under Dude 6

How is a parent supposed to work under Dude 6? I was under the impression if a device was a child it would not alert if the parent went down. Is this not the case or do I have something not set right?
by j2sw
Tue Jan 22, 2019 9:17 am
Forum: Forwarding Protocols
Topic: Filtering oddities
Replies: 1
Views: 1851

Filtering oddities

This has been happening for awhile now. I see very odd behavior with filter rules and BGP. For example add action=discard chain=DENY protocol=bgp may work when add action=discard chain=DENY protocol="" does not And sometimes just the opposite works, just depends on the peer. Sometimes movi...
by j2sw
Tue Jan 08, 2019 9:05 pm
Forum: Virtualization
Topic: CHR, LACP, and VMware
Replies: 3
Views: 6520

CHR, LACP, and VMware

I have a vmware setup where we are trying to bond multiple 10 Gig SFP+ with a Cisco Nexus. The Cisco says the port members are Individual (I). The Mikrotik bond is set on 802.3ad and this setup works on CCRs. Should I do the bonding in VMWare? I have not done this before. Thoughts?
by j2sw
Sat Nov 18, 2017 12:43 pm
Forum: General
Topic: PPPoE and search domains
Replies: 0
Views: 629

PPPoE and search domains

Does PPPoE have the notion of DNS search domains like what DHCP does?
by j2sw
Sat Nov 18, 2017 12:41 pm
Forum: The Dude
Topic: up notifications working but not down
Replies: 0
Views: 808

up notifications working but not down

We have an issue with down notifications across a dude setup. We get the up notifications when something comes back online, but we are not getting the initial down notifications. I have double checked the alerts to make sure down notifications are checked. e-mail does work because we get the up noti...
by j2sw
Thu Jul 27, 2017 8:38 am
Forum: Forwarding Protocols
Topic: OSPF vs BGP route of the same
Replies: 2
Views: 2716

OSPF vs BGP route of the same

If a router is learning a route from OSPF and the same route via BGP which one wins? Mikrotik will not install the BGP route into the table will it? At what level does this happen? "Who" determines the behavior? OSPF or BGP or..?
by j2sw
Mon Jun 05, 2017 10:23 pm
Forum: General
Topic: Can I block HTTPS site with proxy?
Replies: 10
Views: 5962

Re: Can I block HTTPS site with proxy?

https, by design, is very hard to introduce something in the middle, such as a proxy. The protocol has mechanisms in it to prevent man in the middle hijacking, which is essentially what a re-direct proxy does. If you have ever been to a hotspot that complains about the security certificate when it t...
by j2sw
Mon Jun 05, 2017 10:20 pm
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 179
Views: 58853

Re: Which types of ports would you like to see for a high speed router

I would like to see a modular router with add in cards for 25G, 40G, and possibly 100G. If I buy a router that I am doing 25G today I want to be able to upgrade that to 100G at one point.
by j2sw
Mon Jun 05, 2017 10:17 pm
Forum: General
Topic: Switch vs Bridge config
Replies: 1
Views: 1678

Switch vs Bridge config

I am looking for a real explanation on why this behavior happened. Have several 450's deployed. Have just been creating a bridge and bridging the ports together. Mainoy due to familiarity, and no "switch" open in winbox. This setup has worked fine up until today. Installed a new 450 plugge...
by j2sw
Thu Feb 23, 2017 5:41 am
Forum: Forwarding Protocols
Topic: Adding ipv6 to existing BGP peer
Replies: 5
Views: 2553

Re: Adding ipv6 to existing BGP peer

You should have a separate IPV6 peer for BGP. You announce IPV6 over the V6 peer.
by j2sw
Thu Feb 23, 2017 5:25 am
Forum: Forwarding Protocols
Topic: OSPF - what to put in one area
Replies: 3
Views: 1582

Re: OSPF - what to put in one area

OSPF areas came to be due to memory limitations. In modern networks you can push more routers and routes into an area.
Part of it depends on your overall design. In an ISP network you can put customer networks into their own area.
by j2sw
Wed Nov 16, 2016 7:29 pm
Forum: Forwarding Protocols
Topic: OSPF - loopback interface
Replies: 23
Views: 11820

Re: OSPF - loopback interface

OSPF will be more stable with a loopback address and that address specified as the router ID.
by j2sw
Wed Nov 16, 2016 7:26 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ or a Supermicro server with x86 routerOS ?
Replies: 7
Views: 4256

Re: CCR1072-1G-8S+ or a Supermicro server with x86 routerOS ?

I am sticking with the CCR's, even with the BGP issues, mainly because they are fully supported by Mikrotik. I figure any future changes will be weighted toward their own hardware.
by j2sw
Wed Nov 16, 2016 1:20 am
Forum: General
Topic: Decline of Mikrotik?
Replies: 102
Views: 42613

Re: Decline of Mikrotik?

Scenarios where i routinely need to do stuff with routing filters. 1.Blackholing traffic to a blackhole peer (Cogent, etc.). I routinely have to drag filters around to make this happen. 2.Adding downstream peer advertisements 3.Adding padding or AS path manipulation It's not necessarily how often yo...
by j2sw
Thu Nov 12, 2015 5:32 pm
Forum: The Dude
Topic: How do I upgrade RouterOS v.6.24+ using The Dude
Replies: 4
Views: 5333

Re: How do I upgrade RouterOS v.6.24+ using The Dude

Mikrotik has continually said the Dude is not dead, but this puts a nail in the coffin. Can reproduce this across the board.
by j2sw
Tue Nov 10, 2015 9:24 pm
Forum: The Dude
Topic: How do I upgrade RouterOS v.6.24+ using The Dude
Replies: 4
Views: 5333

Re: How do I upgrade RouterOS v.6.24+ using The Dude

Any update on this? Still having issues
by j2sw
Mon Jan 05, 2015 2:21 am
Forum: General
Topic: MikroTik MetroEthernet 2.0 Certification
Replies: 10
Views: 4143

Re: MikroTik MetroEthernet 2.0 Certification

I too would like to see this happen.
by j2sw
Thu Aug 28, 2014 9:36 pm
Forum: RouterBOARD hardware
Topic: CCR1072 availability update?
Replies: 8
Views: 3811

Re: CCR1072 availability update?

OHHHHHHHH!!!!!!!!

Nedgasm
by j2sw
Tue Aug 26, 2014 8:12 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

Thanks for the help. I will have to dig into this more because the chain I create in prefix lists is not an option under route filter "Match Chain"
by j2sw
Tue Aug 26, 2014 7:13 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

I see the logic on the prefix lists, but how do they get referenced? I see you can only specify one chain per peer, and any chain I add in prefix lists does not show up as an option. I am confused on how to reference more than the 1 chain and how to reference a prefix list chain. Any link to any doc...
by j2sw
Tue Aug 26, 2014 6:34 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

I thought you could only apply one filter per peer? How do I apply the Common-prefixes and the peer specifics?
by j2sw
Tue Aug 26, 2014 6:11 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

So Right now I have a chain per peer because I have to deny certain prefixes to certain peers. So I have like 900 lines of filters. I have a line per prefix (60 some prefixes to advertise) and 30 peers. So Each peer has around 70 lines of prefixes. The key here is It would be quite handy to advertis...
by j2sw
Tue Aug 26, 2014 5:59 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

I see what is being said by the chains. It just seems clunky. Right now I have a chain that includes all the prefixes and I apply that to the peers. But then I have to have to copy that chain per peer to deny certain prefixes to just that peer.
by j2sw
Tue Aug 26, 2014 5:52 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

Re: BGP Advertisements in address list

Okay here is another way to approach it. I have an internet exchange where I have 30 peers. Each of those peers needs to receive around 60 advertisements EACH. They are all basically the same prefixes except their own. So I have 30 peers with 60 advertisements each. If I could reference one address ...
by j2sw
Sat Aug 23, 2014 4:44 am
Forum: Forwarding Protocols
Topic: BGP Advertisements in address list
Replies: 13
Views: 5114

BGP Advertisements in address list

We are beginning to get more and more BGP peers in an Internet exchange. It would be really handy if I could have an address list and be able to reference that address list in a route filter. Is there a particular reason why this can't be done?
by j2sw
Sun Oct 06, 2013 10:53 pm
Forum: General
Topic: CCR BUG: All ports flap simultaneosly with mangle route mark
Replies: 21
Views: 10246

Re: CCR BUG: All ports flap simultaneosly with mangle route

I am seeing the same thing. Not caught it enough to do a support file and send off. It happens randomly. My CCR is pushing close to 400 megs on peaks. I have disabled SNMP as well to see if we have an further complications. I updated to 6.4 last night.
by j2sw
Fri Oct 04, 2013 9:31 pm
Forum: General
Topic: Mikrotik and cisco SG300-10 not running on 1Gbps
Replies: 15
Views: 6140

Re: Mikrotik and cisco SG300-10 not running on 1Gbps

Look through the changelogs in v6.2, 6.3. They addressed some Cisco issues. I had problems not negotiating on our Cisco 4506 chassis. But just on the copper ports. This was known and addressed. My problem was fixed.
by j2sw
Wed Mar 20, 2013 6:18 am
Forum: General
Topic: Winbox for Mac OSx & Windows & Linux
Replies: 48
Views: 47085

Re: Winbox for Mac OSx & Windows & Linux

I have been using Winbox under VMware fusion. Works quite well. With an SSD windows boots in about 5 seconds.
by j2sw
Thu Mar 14, 2013 3:38 am
Forum: RouterBOARD hardware
Topic: Routerboard Hardware wish list
Replies: 61
Views: 18947

Re: Routerboard Hardware wish list

Omnitik in 2.4GHZ
by j2sw
Wed Oct 03, 2012 3:06 am
Forum: RouterBOARD hardware
Topic: 2011 Packet loss
Replies: 2
Views: 1605

2011 Packet loss

All, I have deployed some 2011's now. My standard setup is a 2011 at the top with a run of fiber coming down plugged into another 2011. I am trunking some VLANs across the SFPs. I have created VLANs on the 2011 by bridging the VLANs together. I have a VLAN on the SFP and one on the physical ethernet...
by j2sw
Wed Oct 03, 2012 2:40 am
Forum: Forwarding Protocols
Topic: OSPF across VLANS not making sense
Replies: 8
Views: 10279

Re: OSPF across VLANS not making sense

BTW: I fixed this. I had the physical port bridged with the VLANs. Once I removed this all was good
by j2sw
Tue Oct 02, 2012 6:16 pm
Forum: RouterBOARD hardware
Topic: toolless rj45 plugg
Replies: 6
Views: 2030

Re: toolless rj45 plugg

I just sounds like a "less than ideal" idea to me. I don't see the benefit of this vs. a normal connector. Actually looks like more work.
by j2sw
Sun Sep 23, 2012 10:13 pm
Forum: Forwarding Protocols
Topic: OSPF across VLANS not making sense
Replies: 8
Views: 10279

OSPF across VLANS not making sense

All, I currently have the following setup for a new pop we are doing 2011 tower.jpg My problem is I can not get OSPF to establish across the VLAN. If I move the IP and OSPF to one of the physical ports I can get it to establish, but not totally. The routes do not get exchanged. I can reproduce this ...
by j2sw
Fri Mar 11, 2011 5:30 am
Forum: Forwarding Protocols
Topic: Can't reach network without NAT
Replies: 1
Views: 1233

Can't reach network without NAT

I have a 3 router setup. See the attached Visio. Router 2 can ping a network (192.168.150.0/24) attached to router 3 without a problem. Router 1 can not ping anything on 192.168.150.0/24 without having nat turned on on router 2 specifying the destination address of 192.168.150.0/24. However, router ...
by j2sw
Wed Mar 09, 2011 6:50 pm
Forum: Wireless Networking
Topic: Macbook (Broadcom) optimizations in 5.0rc11..long ping times
Replies: 7
Views: 1796

Re: Macbook (Broadcom) optimizations in 5.0rc11..long ping t

I have not seen slowdowns on my Macbook pro connecting to 5.0rc11 yet.
by j2sw
Tue Nov 02, 2010 8:24 pm
Forum: General
Topic: Help with P2P
Replies: 6
Views: 1878

Re: Help with P2P

It is not encrypting the traffic is it? Some newer versions encrypt the traffic by default.
by j2sw
Fri Oct 22, 2010 9:01 pm
Forum: Beginner Basics
Topic: Separating APs from WiFi users
Replies: 17
Views: 4313

Re: Separating APs from WiFi users

Vlans, Firewal rules, and different subnets. Those 3 can keep customers away from the APs.
by j2sw
Mon Aug 16, 2010 9:42 pm
Forum: Beginner Basics
Topic: Please Educate :D
Replies: 6
Views: 2077

Re: Please Educate :D

There are also some videos on youtube which are a different approach. Do a search for either ccna subnetting or subnetting.
by j2sw
Thu Jul 29, 2010 6:33 pm
Forum: General
Topic: Sample Installations - Sticky Please
Replies: 225
Views: 159359

Re: Sample Installations - Sticky Please

IMG_0364.JPG
IMG_0004.jpg
by j2sw
Thu Jul 29, 2010 6:28 pm
Forum: General
Topic: Sample Installations - Sticky Please
Replies: 225
Views: 159359

Re: Sample Installations - Sticky Please

We have put several small UPSes in little enclosures. No problem with them. All our UPSes are on 2 year replacement cycles though.
by j2sw
Tue Jun 22, 2010 4:57 pm
Forum: Forwarding Protocols
Topic: OSPF works than STOPS by ITSELF
Replies: 19
Views: 7496

Re: OSPF works than STOPS by ITSELF

Bring your OS versions to the same level and things will improve. Add in loopbacks and they will get even better.
by j2sw
Fri May 28, 2010 8:10 pm
Forum: Forwarding Protocols
Topic: Success Story OSPF/BGP
Replies: 10
Views: 3311

Re: Success Story OSPF/BGP

Doing any padding or anything of the like?
by j2sw
Fri May 21, 2010 2:57 am
Forum: Beginner Basics
Topic: Can I allocate the bandwidth only when needed?
Replies: 9
Views: 2322

Re: Can I allocate the bandwidth only when needed?

You can also do some bursting with Mikrotik. Not exactly your answer, but might be able to be worked into a set of rules.
by j2sw
Mon May 17, 2010 7:52 am
Forum: Wireless Networking
Topic: RB411 No longer connects to my network
Replies: 3
Views: 1050

Re: RB411 No longer connects to my network

Things I would try:

-Have the AP and the client at the same OS version (ie/ 4.9).
If that does not fix any issues I would do a /system reset-configuration on the client and reset things up. I have had this solve weird issues, even though nothing has changed in months.
by j2sw
Wed May 12, 2010 10:17 pm
Forum: RouterBOARD hardware
Topic: Begginer Question, Wifi network for rural area
Replies: 3
Views: 1450

Re: Begginer Question, Wifi network for rural area

Typically most "hotspots" are a single omni and some sort of Internet feed (wireless backhaul, DSL, etc.). The thing you want to watch is blasting the signal out too far if you are looking for laptop users. You don't want to get into a situation where the laptops can hear the base station ...
by j2sw
Wed May 12, 2010 5:45 pm
Forum: Beginner Basics
Topic: DHCP with multiple pools?
Replies: 6
Views: 4549

Re: DHCP with multiple pools?

Easy enough to do: Go to IP...DHCP Server...leases. Click on the plus. Type in the address from the pool of the IP you want your client to get. Next put in the MAC address of the wireless card/device. Next is the client ID. This is where it gets tricky. Depending on the device it varies on what goes...
by j2sw
Wed May 12, 2010 4:57 pm
Forum: Beginner Basics
Topic: Grouping Access Polints using vlans.
Replies: 2
Views: 1245

Re: Grouping Access Polints using vlans.

If it were me I would have a separate IP subnet for the APs. Kind of six one half dozen of the other way to do it. With the IP way you can apply rules to those APs and still put them on a separate VLAN.
by j2sw
Wed May 12, 2010 4:35 pm
Forum: Beginner Basics
Topic: DHCP with multiple pools?
Replies: 6
Views: 4549

Re: DHCP with multiple pools?

Are you wanting to do a DHCP reservation?
by j2sw
Mon May 10, 2010 6:46 am
Forum: General
Topic: Building a 3000+ CPE network, looking for advice
Replies: 18
Views: 6274

Re: Building a 3000+ CPE network, looking for advice

Some Best practices I go by when looking to scale. These are very generic and some people consider basic. 1.Router at ever pop. 2.PPPoE is good. Centralized authentication is always a good thing. Easy to enable/disable people with billing issues, viruses, etc. 3.Funneling data to a central "poi...
by j2sw
Mon May 10, 2010 6:42 am
Forum: Beginner Basics
Topic: Mikrotik to replace linux based DNS, DHCP, OpenVPN, PXE TFTP
Replies: 2
Views: 1752

Re: Mikrotik to replace linux based DNS, DHCP, OpenVPN, PXE

IMHO mikrotik is decent as a caching DNS server, but not a full blown replacement for DNS. If you are looking to replace a VPN concentrator then Mikrotik is a good choice. Hardware will dictate how many active sessions you can have.
by j2sw
Fri May 07, 2010 5:20 pm
Forum: SwOS
Topic: RB-250GS VS RB-450G, why switch so expensive?
Replies: 7
Views: 8422

Re: RB-250GS VS RB-450G, why switch so expensive?

That was surely a misprint. I have seen them much cheaper. If it wasn't they wont sell many.
by j2sw
Fri May 07, 2010 5:18 pm
Forum: RouterBOARD hardware
Topic: Ethernet port on rb411/rb433
Replies: 4
Views: 1589

Re: Ethernet port on rb411/rb433

I haven't worried too much about it because the throughput is different than the Over the Air rate. On those boards they are most likely going to run out of CPU before they run out of 100 meg of ethernet.
by j2sw
Fri May 07, 2010 5:14 pm
Forum: Beginner Basics
Topic: Firmware upgrades.... necessary?
Replies: 3
Views: 1415

Re: Firmware upgrades.... necessary?

If you don't see any bugs, oddities stick with what works. I know operators who have 2.9.x still out there and it works. No reason for them to spend the energy to mess with them.
by j2sw
Fri May 07, 2010 5:11 pm
Forum: Beginner Basics
Topic: problem wit two card on a router board
Replies: 1
Views: 1011

Re: problem wit two card on a router board

There was a thread on an earlier list where a guy took a spectrum analyzer to a 433 with 2 cards stacked on top of each other. They both were interfering with each other. If you took the same cards and put them in a rb600 or some other board where they were not stacked on top of each other much of t...
by j2sw
Fri May 07, 2010 4:50 pm
Forum: General
Topic: Mikrotik Management for iPhone Available Now
Replies: 141
Views: 37912

Re: Mikrotik Management from iPhone (soon)

Sounds interesting. Might be worth it to have an ipad version too. Most iPhone to iPad versions are just zoomed. If you write an ipad version too it would be great.
by j2sw
Fri May 07, 2010 4:44 pm
Forum: General
Topic: some packages not included in all_packages-*.zip
Replies: 2
Views: 1701

Re: some packages not included in all_packages-*.zip

I haven't personally seen the "all packages" zip file not have everything. Did you get it from the mikrotik site or where? Sounds like maybe not a complete download? just guessing.
by j2sw
Fri May 07, 2010 5:22 am
Forum: Forwarding Protocols
Topic: OSPF works than STOPS by ITSELF
Replies: 19
Views: 7496

Re: OSPF works than STOPS by ITSELF

Did you try both routers with the same version? If so were you able to duplicate the problem?
by j2sw
Thu Apr 29, 2010 6:49 pm
Forum: Beginner Basics
Topic: Tunnel differences EoIP vs IPIP
Replies: 8
Views: 18193

Re: Tunnel differences EoIP vs IPIP

Have several EOIP tunnels runnign for access customers. Have yet to see one complaint. One tunnel handles 30 megs of traffic from 700+ customers on a routine basis.
by j2sw
Wed Apr 21, 2010 7:43 pm
Forum: Forwarding Protocols
Topic: Which routeros version works best with ospf v2?
Replies: 8
Views: 3126

Re: Which routeros version works best with ospf v2?

Make sure all your OS versions are the same level. This helps quite a bit.
by j2sw
Wed Apr 21, 2010 7:33 pm
Forum: General
Topic: Protect an IP against accidental deletion
Replies: 6
Views: 1858

Re: Protect an IP against accidental deletion

I would go with read only for people you are concerned about. Other than that you can always use safe mode, & mac-telnet should some things go wrong.
by j2sw
Tue Mar 30, 2010 5:35 pm
Forum: Wireless Networking
Topic: sr9 vs xr9 for new deployment?
Replies: 13
Views: 2856

Re: sr9 vs xr9 for new deployment?

We have had much success with XR9 cards. I don't put them on par with Canopy, but they have their place. I have one link that is a point to point link. It is less than a mile through quite a bit of trees. I would say 4 tree lines easy. I am only 9DB over the noise but can pass 2 megs tcp across the ...
by j2sw
Tue Mar 30, 2010 5:32 pm
Forum: Wireless Networking
Topic: Need direction w/ simple AP and Client over 900mhz
Replies: 6
Views: 1574

Re: Need direction w/ simple AP and Client over 900mhz

900 almost always needs an antenna. I would invest in some little rubber ducky type antennas for testing. Either that or the mag mount style. You can get them in 900, 2.4 and 5.8.
by j2sw
Sun Jan 24, 2010 7:16 pm
Forum: Beginner Basics
Topic: Sector Issues serious help
Replies: 13
Views: 13387

Re: Sector Issues serious help

ANy chance you have a way to measure the LMR cable? See if it tests out okay. You could use a multimeter and some calculations.
by j2sw
Sat Jan 23, 2010 4:54 pm
Forum: Beginner Basics
Topic: Sector Issues serious help
Replies: 13
Views: 13387

Re: Sector Issues serious help

I wouldn't worry about the sectors until you have exhausted everything. I have had radios take direct strikes and the sector is still okay.
by j2sw
Fri Jan 22, 2010 8:56 pm
Forum: Beginner Basics
Topic: Sector Issues serious help
Replies: 13
Views: 13387

Re: Sector Issues serious help

I would check your jumper, radio card, or pigtail. Especially if the signal dropped. All the antenna does it take the power it is given and outputs it. It's not really like it has to have a certain power level to "power it up". If you saw a -59 and now don't you either wave a bad jumper, b...
by j2sw
Fri Jan 22, 2010 2:56 am
Forum: Beginner Basics
Topic: Sector Issues serious help
Replies: 13
Views: 13387

Re: Sector Issues serious help

When you hook up the radios can you not see the broadcast? What is not happening? Most radio to sector issues can be traced to bad jumpers. Not much can be wrong with a sector. Not ruling it out, but that's the last thing I would look at, unless it has physical damage.
by j2sw
Fri Jan 22, 2010 2:51 am
Forum: Beginner Basics
Topic: How do I set bridge with wlan and lan on RB433?
Replies: 10
Views: 15867

Re: How do I set bridge with wlan and lan on RB433?

From the gui.
1.Add a bridge.
2.Go to ports. Add your ethernet & WLAN.

Done. You can assign IPs to that bridge.

Or paste the code netrat posted.
by j2sw
Mon Jan 18, 2010 6:01 am
Forum: General
Topic: Sample Installations - Sticky Please
Replies: 225
Views: 159359

Re: Sample Installations - Sticky Please

PIC_0121.jpg
by j2sw
Mon Jan 18, 2010 5:57 am
Forum: General
Topic: NOT TO DO. Weird instalations?
Replies: 385
Views: 278061

Re: NOT TO DO. Weird instalations?

Note all the exposed wiring.
PIC_0239.jpg
by j2sw
Mon Jan 18, 2010 5:45 am
Forum: Beginner Basics
Topic: How to feed internet to mikrotik board
Replies: 13
Views: 2557

Re: How to feed internet to mikrotik board

DHCP client + Nat=good to go
by j2sw
Tue Jan 12, 2010 8:31 pm
Forum: General
Topic: XBOX Live and ROS 3.0RC13
Replies: 71
Views: 34139

Re: XBOX Live and ROS 3.0RC13

We do 1:1 nats for XBOX customers that call. Most of the time that fixes the issue. If the customer has multiple machines that need public services then 3074 fixes their issues. We saw issues with 3.10 and Xbox but 3.30 has been golden. Not tried going above that just yet.
by j2sw
Mon Jan 11, 2010 8:41 pm
Forum: Wireless Networking
Topic: Mikrotik with 2 or 4 AP
Replies: 2
Views: 909

Re: Mikrotik with 2 or 4 AP

The more wireless cards you put in the more power you will draw. If it were me I would break it up to keep from a problem taking everything out.
by j2sw
Sat Jan 09, 2010 6:58 am
Forum: Wireless Networking
Topic: Supplying power to equipment on tower installs?
Replies: 17
Views: 3759

Re: Supplying power to equipment on tower installs?

Higher is better can work with proper downtilting. If your goal is to have the clients look up as much as possible it is a great way to go. I have seen towers at much higher elevations with forests around them. By placing the sectors at 270ish feet they were able to get clients in a 5-7 mile radius ...
by j2sw
Fri Jan 08, 2010 5:45 pm
Forum: General
Topic: Sample Installations - Sticky Please
Replies: 225
Views: 159359

Re: Sample Installations - Sticky Please

We have been posting some install photos on our page at http://www.mtin.net/blog. Been trying to post one a day
by j2sw
Fri Jan 08, 2010 5:39 pm
Forum: Wireless Networking
Topic: Surge protection?
Replies: 9
Views: 3651

Re: Surge protection?

My thought is you need something to bleed off the static. These little boards are not going to help very much if a fair amount of voltage passes through them. It will just jump across and continue on. I like the APC modules that fit inside the little APC case. I can't think of the model numbers offh...
by j2sw
Fri Jan 08, 2010 5:35 pm
Forum: Wireless Networking
Topic: Supplying power to equipment on tower installs?
Replies: 17
Views: 3759

Re: Supplying power to equipment on tower installs?

Seperate cat-5 runs up the tower. I have seen 25 par cables on tower too. This makes one big bundle going up the tower. The only thing I don't like about those is the punchdown blocks you have to have. Makes for another point of failure.
by j2sw
Mon Oct 19, 2009 6:07 am
Forum: Forwarding Protocols
Topic: OSPF and Multiple Areas
Replies: 4
Views: 3506

Re: OSPF and Multiple Areas

R3 is same config, just different networks.
by j2sw
Mon Oct 05, 2009 5:51 pm
Forum: Forwarding Protocols
Topic: OSPF and Multiple Areas
Replies: 4
Views: 3506

Re: OSPF and Multiple Areas

R2 /routing ospf /routing ospf> print router-id: 0.0.0.0 distribute-default: never redistribute-connected: as-type-1 redistribute-static: as-type-2 redistribute-rip: no redistribute-bgp: no metric-default: 1 metric-connected: 20 metric-static: 20 metric-rip: 20 metric-bgp: 20 mpls-te-area: unspecifi...
by j2sw
Mon Oct 05, 2009 5:47 pm
Forum: Forwarding Protocols
Topic: OSPF and Multiple Areas
Replies: 4
Views: 3506

Re: OSPF and Multiple Areas

R4. Some stuff XX'ed out for security purposes. /routing ospf /routing ospf> print router-id: 0.0.0.0 distribute-default: never redistribute-connected: as-type-1 redistribute-static: as-type-2 redistribute-rip: no redistribute-bgp: no metric-default: 1 metric-connected: 20 metric-static: 20 metric-r...
by j2sw
Fri Oct 02, 2009 10:40 pm
Forum: Forwarding Protocols
Topic: OSPF and Multiple Areas
Replies: 4
Views: 3506

OSPF and Multiple Areas

All, I have some OSPF routing issues I am trying to work out. Below is the general concept of what is going on. ospf.jpg R1 is generating the default route. As long as the connection between R1 and R4 is alive things are happy. If this connection breaks we experience one of the following issues: 1.D...
by j2sw
Thu Sep 10, 2009 5:01 pm
Forum: General
Topic: NOT TO DO. Weird instalations?
Replies: 385
Views: 278061

Re: NOT TO DO. Weird instalations?

PIC_0080.jpg
PIC_0003.jpg
by j2sw
Thu Sep 10, 2009 4:10 pm
Forum: Beginner Basics
Topic: Certification tracks?
Replies: 1
Views: 1016

Certification tracks?

I am seeing lots of Certification Acronyms popping up. Does Mikrotik now offer several different certifications (MTCWE, MTCTCE, MTCRE, MTCUME)? If so where can one find info on these?

Thanks in advance
by j2sw
Fri Jul 24, 2009 6:03 am
Forum: Scripting
Topic: AutoUpgrade script
Replies: 24
Views: 6792

Re: AutoUpgrade script

Any hints on this script? I can't get it to run.
 /system script run Upgrade
interrupted
           bad name
by j2sw
Fri Aug 29, 2008 8:07 am
Forum: General
Topic: Tranzeo DHCP Issues
Replies: 1
Views: 872

Tranzeo DHCP Issues

We are handing DHCP out and have issues with just Tranzeo clients. I have read on here this has to do with the way Tranzeo does it's discover packet. Anyone have a workaround? The server continually offers the address to the CPE which never gets it. We are running 3.6.7 Firmware from Tranzeo. Thanks...
by j2sw
Thu Jul 31, 2008 9:30 pm
Forum: Wireless Networking
Topic: DHCP on 3 Sector AP?
Replies: 0
Views: 1123

DHCP on 3 Sector AP?

I am contemplating a Mikrotik AP with 3 Cards (we run this setup alot already). However I would like to have each sector (total of 3) to have it's own IP space. The setup will consist of an AP with 3 sectors on the tower and a routerboard at the bottom. The routerboard will be doing DHCP, shaping,et...
by j2sw
Thu Jul 17, 2008 8:19 pm
Forum: RouterBOARD hardware
Topic: Daughtercards..where have they gone?
Replies: 1
Views: 1124

Re: Daughtercards..where have they gone?

And yes I realize I can put a switch in that speaks vlans. However, many of our locations do not allow for such space.
by j2sw
Thu Jul 17, 2008 8:14 pm
Forum: RouterBOARD hardware
Topic: Daughtercards..where have they gone?
Replies: 1
Views: 1124

Daughtercards..where have they gone?

Any replacement or roadmap for more than 4 ethernet ports on a Mikrotik? We were used to using 532's with daughtercards, then went to 600's with daughtercards. Now we see they are not available. Any information others can share? Are they going to be replacing them with something? Or...? Thanks, Justin
by j2sw
Tue Jul 15, 2008 8:10 pm
Forum: Scripting
Topic: Backup script fails in 3.11
Replies: 1
Views: 1313

Backup script fails in 3.11

Why does the following script fail in 3.11, but works in previous versions? It increments and that's about it: / tool e-mail set server=1.2.3.4 from="ME@SOMEDOMAIN" /system script add name=ebackup source={/system backup save name=([/system identity get name] . "-" . \ [:pick [/sy...
by j2sw
Mon Jun 30, 2008 9:12 am
Forum: General
Topic: RB 1000 as a core router
Replies: 15
Views: 3421

Re: RB 1000 as a core router

The problem with going to an x86 board is getting it to load on the newer p35 chipsets. We are not having any success.
by j2sw
Sun Jun 22, 2008 1:44 am
Forum: General
Topic: X86 Lockup Issues
Replies: 0
Views: 767

X86 Lockup Issues

Setup is this: X86 ECS motherboard. 3GHZ processor. Dual RB44 Cards. 1 Onboard Nic. 1GB ram Problem: System will be running along fine and then all the nics except one (seems to be random) drops to 900k. Out of 9 nice 8 of them all drop to the same exact speed. Sometimes it is 900k. Other times it i...
by j2sw
Mon Apr 14, 2008 1:52 am
Forum: Wireless Networking
Topic: 900mhz traffic drops, but ping don't
Replies: 0
Views: 1058

900mhz traffic drops, but ping don't

I have an issue with a 900MHZ link. Here is some detail. The link is .6 miles. I have a 333 board on one end, and a 411 board on the CPE end. There are two clients associated to the AP. Only one is having the problem (me). Both are in the lower -70's with upper 90 some percent overall ccq. The 900 M...
by j2sw
Mon Jan 28, 2008 4:49 pm
Forum: Wireless Networking
Topic: 3.65Ghz FCC certification
Replies: 50
Views: 17142

Re: 3.65Ghz FCC certification

Check these folks out: http://www.agiletestgroup.com/site/fcccompliance.html?gclid=CL2cq5qVmZECFQIUPAodYyw1Og They are great to work with. Very professional. The last Mikrotik stuff we got certified is certified for 3 components: 1.antenna 2.Radio Card 3.Pigtail It's not as expensive as everyone thi...
by j2sw
Tue Jan 15, 2008 10:13 pm
Forum: General
Topic: Large WISP network design ..
Replies: 15
Views: 8279

Re: Large WISP network design ..

an all bridged network is also bad, especially once you get above a couple of hundred customers. Central point of failure is bad too.
by j2sw
Tue Jan 15, 2008 4:35 pm
Forum: General
Topic: Large WISP network design ..
Replies: 15
Views: 8279

Re: Large WISP network design ..

My thoughts: -Route as many locations as possible. This will make your backhauls much more efficient. -Use /29 or similiar small subnets for the backhauls. This will help with broadcast traffic. -Have redundant links into each POP as you can. You can take advantage of OSPF. In essence you have two r...
by j2sw
Mon Jan 14, 2008 4:55 pm
Forum: General
Topic: VRRP Revisited
Replies: 0
Views: 827

VRRP Revisited

Hi all, I am investigating if VRRP will work in our situation. I have been reading through the older posts and have seen where VRRP is more suited for multiple ISPs. Our situation is we want to have hardware redundancy in case of hardware failure. We are not worried about our Internet going gown (OS...
by j2sw
Fri May 04, 2007 10:07 pm
Forum: Scripting
Topic: Denying connections after so many
Replies: 3
Views: 1633

Denying connections after so many

We are currently running a snort box and a cisco router. We have the snort box setup where if it sees more than 20 smtp or ssh connections from a single IP it will ssh to the Cisco and write an access list entry that blocks that ip. 15 minutes later it sshes back and removes the access list entry. T...
by j2sw
Thu Mar 29, 2007 7:42 pm
Forum: General
Topic: 112 and 2 8602 cards?
Replies: 0
Views: 716

112 and 2 8602 cards?

Will the 112 Board support 2 8602 cards? I am concerned about power draw etc.

How about an 8602 and an sr-5 in a 112?

Justin
by j2sw
Fri Mar 09, 2007 6:43 pm
Forum: General
Topic: High Pings to Ethernet
Replies: 6
Views: 1962

yes that is what it is doing. If the 2 interfaces are bridged should routing not be going on?
by j2sw
Fri Mar 09, 2007 6:30 pm
Forum: General
Topic: High Pings to Ethernet
Replies: 6
Views: 1962

If it were the cabling would the pings to the clients not be high as well?

I can ping from a laptop, up the tower, through the mikrotik to a client connected to the SR2 *faster* than I can ping from a laptop, up the tower, to the ethernet port of the mikrotik.

Justin
by j2sw
Fri Mar 09, 2007 6:11 pm
Forum: General
Topic: High Pings to Ethernet
Replies: 6
Views: 1962

CPu usage is less than 10 percent. Bandwidth is around a meg going through.

Justin
by j2sw
Fri Mar 09, 2007 5:23 pm
Forum: General
Topic: High Pings to Ethernet
Replies: 6
Views: 1962

High Pings to Ethernet

We just put a 532 board with an SR-2 card. We are seeing high pings from the ethernet side when traffic jumps. Let me explain the scenarios: The AP has the SR2 and ethernet bridged. It is not doing routing, shaping, anything else. We have a MT router at the bottom of the tower that does this. We hav...
by j2sw
Thu Nov 02, 2006 3:38 am
Forum: Wireless Networking
Topic: deauth problem
Replies: 8
Views: 3539

maybe try another card, there have been many problems reported on here with the NMP-8602's...
Is this still a known issue with these cards?
by j2sw
Mon Sep 04, 2006 6:02 am
Forum: General
Topic: Weird Routing Problem in but not out
Replies: 0
Views: 1034

Weird Routing Problem in but not out

First here is the setup. Internet coming in goes through a pfsense box. Then out to a MT box that is acting as an AP to another MT box. We have put both the MT boxes on a 192.168.128.250 and .251 ip space. The Pfsense box is 192.168.128.1. I have setup the non-AP with the following stuff: 192.168.12...