MikroTik

PortalNET

are you running in v7? if yes can u please check the IRQ on the v7 system if the intel i340 cards support full cpus cores on IRQ traffic? some cards only work on cpu0 core.. packtes.. i am trying to find out which 4 ports do have full support for all cpu cores on IRQ on mikrotik v7.. heard of newer ...

PortalNET

Hi i know

this is old thread but did you manage to test the I350F4 4 port SFP card on mikrotik x86? i found some of them online for cheap prices.

wondering if they work ok on mikrotik v7.. to connect mikrotik to device on SFP port.. IRQ split packes on all cpu cores?

PortalNET

Attached video...

https://youtu.be/2udqK7ldBlk

PortalNET

Hello, We are running a 2216 at an internet exchange point. The 2216's cpu running more than %70 percent 7/24 and we would like to replace it. Since there is nothing greater than 2216 from MikroTik, we think to replace with an x86 system. To put it simply we are pushing around 17G to a BGP peer(40G...

PortalNET

looks like its a problem with cpu 0 only used on all queues..

whilst other card nic vendores mellanox chelsio etc.. use auto cpu and split it across all cpus.

PortalNET

Ok so further testing i have actually noticed something.. the intel X710da4 and the intel X520da2.. somehow on the IRQ ... all queues are being used only on CPU 0 the other 47 cores are not beeing used.. but on the mellanox queues card i can see all different queues beeing spread out across all 47 c...

PortalNET

i have similar issue RX drops in x86 ros 6.58.5 stable version. this happen in my x86 dual xeon, almost all interface with high traffic above 100mbps has a little drop.. sometime increased every day by hundreds ..sometime only tens.. depending on how much traffic running on that time.. however, i h...

PortalNET

i guess something´s up on with new ixge drivers intel running on the routerOS V7.1XX I am running bare metal x86_64 on server BGP with Mellanox Connect-x4 CX4121 2 Ports and a Intel X710da4 mezzanine card with 4 portas sfp+ and on the other server PPPOE server with Mellanox 2 ports and intel i5xx wi...

PortalNET

Hi guys.. so further testing done, on the same server we have Mellanox ConnectX4 CX4121 model, and on this dual interface sfp+ NIC we don´t get any tx-queues Drops rx-drops.. but on the same server we have intel x520 da2 we see the rx-drops only... but we have left ping cmd for hours running on exte...

PortalNET

RouterOS version 7.16beta4 hi guys testing this version with BCM57840 quadport sfp+ it crashes mikrotik keeps rebooting server... it was supposed to have the missing PCI IDs to bnx2x driver added.. but somehow is crashing server.. if i downgrade for 7.15stable.. it does not crash server.. but ofcour...

PortalNET

Run torch or packet sniffer and see if they go away while running. The RX Drops are also caused by unknown vlans coming into an interface. If you run packet sniffer or torch then all vlans are allowed in the kernel and it wont drop them. Just a way to test if thats the issue. ok did the test.. runn...

PortalNET

Just get new disk and instlal routerOS v7 directly on the hdd.

PortalNET

Thanks for your suggestion. I tried increasing the mq pfifo to 4000+, but the rx errors still increase. Before this, mq pfifo only solved the problem of tx queue drops. hi on the interface-queue try selecting the interface with error and change from only-hardware-queue to multi-queue-ethernet-defau...

PortalNET

I have same problem, bare metal with mikrotik installed use 82599 and two ports bonding to huawei6730. In mikrotik, one port get rx error a lot, another port had fewer rx errors. no error in huawei6730 switch. When I disable the port with many rx errors, all the error packets will go to another por...

PortalNET

Hiya

as an update whilst googling i found ukrainian site where people were stating the same issue with intel nics on x86 version rOS 6.4xx

and i will give it a tryout later on, even do its an issue related only on the VLAN port on his side..

teste3.png

test2.png

test1.png

PortalNET

Hard to say what was the cause but did you connect intel to mellanox card between servers and see behaviors? Hi.. i didn´t make that testing yet.. but we do have other ports of the intel card also running connected directly to the OLT fiber devices.. and no errors on those ports.. we have vlans on ...

PortalNET

... but not sure if its wise to leave Flow control enabled as it could interfere with latency and other aspects also ? In theory flow control kicks in when receiver's buffers get nearly full. With flow control enabled the receiving device will ask sender to pause transmission for a while. This make...

PortalNET

Is it managed switch and its stripping all unknown vlans? its a CRS317 switch.. in between BGP and PPPOE x86 servers.. this way i get no RX-ERRORs on both sides.. if i remove the CRS317 mikrotik switch and connect direct both servers x86 bgp and pppoe with fiber cable or dac , with intel, mellanox,...

PortalNET

Run torch or packet sniffer and see if they go away while running. The RX Drops are also caused by unknown vlans coming into an interface. If you run packet sniffer or torch then all vlans are allowed in the kernel and it wont drop them. Just a way to test if thats the issue. Thanks i will make som...

PortalNET

Hiya.. me too on the same boat.. the only difference on our testing was.. put a switch between and the RX-errors will stop in my case we did make all hardware tweaks possible and changed and swapped different hardwares to try and find the best working scenario, but we keep getting RX-ERRORS if we pl...

PortalNET

Hi guys it looks like it either goes passed by and no one notices the threads..or perhaps the development team his not making tests on the rOS x86 bare metal hardwares? we have a couple of licenses L6 running in Ros V7.14.xx and latest stable v7.15x as we have upgraded in order to see if issue would...

PortalNET

Hi friend @z4ki

which SFP module are you using connected from mikrotik x86 server to ccr1036 ? i am getting same problem after 48h runnign around 4000 tx/rx errors

PortalNET

I'm not aware of any 'magic' walls so far, only misconfigured systems. We're able to shovel several hundred gigabits using modern io-srv and no-copy drivers without any major inpact on our bng systems. That goes for both IB and ETH drivers. Well they do exist on bare metal... its the PCI-e lanes.. ...

PortalNET

ampere version is released and available on the download page

To run on which ARM64 hardware?

PortalNET

Go to Queues/Interface Queues. Select your interface and set the queue type to "multi-queue-ethernet-default" queue.png Repeat for all interfaces showing tx queue drops. Well i must now confess after months of trying to figure out the issue on mikrotik RoS V7 x86_64 with SFP+ NiC i was ge...

PortalNET

which port numbers? is it 67 / 68 or something else ? Hi guys, I have the same thing, however it is running on port 67/68. and once again my ip is set with static ip, please help me for this problem, what can i do. Thank you. Hi guys old topic but i am running version long term 6.49.10 and i have t...

PortalNET

Hi. Will Mikrotik v7 support L2MTU for x86? I have an Intel X710 DA-2 card to experiment with. The card is determined by the OS and everything works. But for MPLS, you need to raise MTU. And if I understand correctly, if I do it manually, then there will actually be packet fragmentation. Thank you....

PortalNET

I like all this talk about Nokia, Cisco, Juniper etc. But, MikroTik is routing the world . Never forget. Untill it meets DDdoS world... and its software routing crashes... whilst other vendors are using hardware based routing, firewall etc....which makes a hughe difference in the end compared to so...

PortalNET

As someone said this, Mikrotik is not plug and play it's more like plug n pray

jeezzzz LFMAO

PortalNET

Thumbs up.. any news on this card support?

PortalNET

Dear all, i'm experiencing issue using flow control when there is a speed change from 10G link to 2.5G. The specific case is about GPON ONT (with line profile 2.5Gbps download an 1.0Gbps upload, both tested on SFP ONT or RJ45 external ONT), during an upload beacause the link is not symmetric, the O...

PortalNET

Hi Guys i know i know this is an old thread, i love digging old topics put them alive.. lets make flow-control more strange and awkward.... we are running mikrotik v7 hardware and we have a couple of OLTs... due to limitation on V7 mikrotik hardware we have few 10g ports.. we are using in the middle...

PortalNET

Firs you need to format USB pendrive then afte download rufus download mikrotik x86 install image https://download.mikrotik.com/routeros/7.13.5/install-image-7.13.5.zip format HDD or HDDs if running raid mode.. and upack insall-image.zip extra img file and load on RUFUS and bur into USB.. power up t...

PortalNET

I'm a bit mixed on the new high core count moves. Frankly, for pure routing the 2004 and 2116 are blazing fast, optimizing routeros to use more cores would just keep making those better and better. The biggest problem I'm seeing still comes down to single core performance. BGP is way faster, but st...

PortalNET

I am using baremetal with Mellanox ConnectX-5 series. I initially tried newer Intel cards but had odd issues. Support stated that there were issues with the Intel driver so I swapped over to Mellanox and haven't had any issues since. The other stuff to keep in mind is NUMA. I converted my dual cpu ...

PortalNET

So any news on the CPU version Ampere mikrotik will use? at leat they have more cpus, highger clock-rates.. are they trying to reach high performance now.. similar to V7 with XEON E5-2699v4 models? hehehe.. i hope they really make further support for newer AMD EPYC cpus also on mikrotik... 128 Cores...

PortalNET

Hi could you please share RouterOS V7? CHR? or BareMetal? And which SFP+ NICs are you using? i am having troubles with a old R620 with E5-2697v2 cpus.. 128GB ram.. and Intel X520 cards.. getting RX-ERRORS.. on low traffic average 130Mbps.. i did run bandwidth test prior from 2 ccrs1036 via crs317 s...

PortalNET

A suggestion is to start by focusing on the network interface which is generally the most crucial component whether is used as "bare metal" or as a virtual Network Interface Card (vNIC) in CHR. A well-developed driver is also a prerequisite and can be a showstopper determining whether the...

PortalNET

I have 4 x RouterOS v7 bare metal routers running on Intel E5-2699 CPU. They load a full Internet BGP table in like 15-20 seconds. 10G both direction (20G aggregate)tcp speedtest in winbox from Mikrotik to Mikrotik (both E5-2699) is 20% load. Hi could you please share RouterOS V7? CHR? or BareMetal...

PortalNET

This problem can be solved. Go to the Interface Queues section. Select the interfaces where there are errors and change the queue type from "only-hardware-queue" to "mq-pfifo" and set the limit to 5000. Hi ok so i did further testing... upgraded intel i350, i340, x520, x540 card...

PortalNET

Hiya it looks like i am not the only one having issues then? I am running V7.12.1 stable.. just realized also... i was having queue drops and rx-erros.. queue drops increase i have fixed it using interface queues changing hardware defaul queue to multi-queue-ethernet-default.. but the RX-errors sti...

PortalNET

Hello unfortunatelly no solution which is the strangest.. we tried changing the queue-type default from PFIFO 10 or PFIFO 50 to SFQ with perturb 5 and allot 1514.. we got initially better results up to 400mbp download.. but nothing better then that... the odd part is PPPOE-sever running.. secret se...

PortalNET

I know this is an old thread but I was able to correct the pause problems on my RB260GSP's easily and wanted to share. I was consistently experiencing pauses for 90% of 64k packets, so I would have 3mil packets with 2.6mil pauses on my VLAN Trunk ports. I found the RBs on the other end of those Tru...

PortalNET

Hi :) - What is the queue of the ether1 interface ? If you increase it, do you have less TX Drops ? Change from only-hardware-queue to some Queue type multi-queue-ethernet-default and increase from 50 to 1000 only for test ? (could add jitter for those packets that will not be dropped anymore which...

PortalNET

The queue type (kind) is about packet buffering and packet processing mechanism. IMHO, PCQ (default size) performs best, offering both zero-packet loss and lowest ping/jitter. //queue type set [find name=default] kind=pcq /queue interface set [find] queue=default /queue simple set [find] queue=defa...

PortalNET

After upgrade to RouterOS v7.12, my router on x86 experiencing RX errors on 10Gb interface on Intel X520 card. Can anybody help me to solve this problem? Hiya it looks like i am not the only one having issues then? I am running V7.12.1 stable.. just realized also... i was having queue drops and rx-...

PortalNET

Just a suggestion:- try to change change the queue type to multi-queue-ethernet and also look into how to enable that for the nic via the hypervisor / Vmware. Hi guys i am having the same issue on RoS V7.12 x64bits running with 2 intel X520 da2 cards.. anyone find a fix for that? on interface queue...

PortalNET

Hi guys

i am having issue in changing the L2MTU on V7.12.1 X64

Running 2 cards Intel XDA-520 and Mellanox Card dual 40Gbps all nics show up the same MTU 1500 and L2MTU 0 i cannot change the L2MTU.. is this done automatically? how can i change the L2MTU manually?

MTU.png

PortalNET

Hi guys.. so here i am also looking for the exact same thing... basically we bought a L6 license for a 48 core dell server Dell 12th gen server.. as we plan to run it as pppoe-server with high volume.. i just came across wireless , wireguard, capsman enabled.. tried to disable it via system packages...

PortalNET

Ok so more tests done..

Memory upgrade on servers to 78GB R420 and 96GB on R620...

somehow it increased the speeds as expected we are now getting 64Gbps aggregate troughput between servers

PortalNET

Ok Guys so i did some more testing and it looks like X16 is 64GBps max... on 8 x 8 gbps.. just need to figure out on how to fine tune this based on the CPUs cores 48threads and 2nd server 40threds it should work fine.. so far i could get around 34Gbps aggregate speeds on TCP using 100G NIC on one si...

PortalNET

@PortalNET PPPoE is an encapsulation protocol, it made sense in the era of hubs and massive L2 domains back in 1998 with DSL era. Now we are living in PON world with QinQ/VLAN support. There's no reason to use PPPoE except to stick to an outdated protocol just as many do with IPv4 instead of IPv6. ...

PortalNET

Hi ok guys so after some more searching it looks like its a hardware limitation on the Dell R620 and R420 sides... based on the speeds of the PCI-e 3.0 slots.. of max 16G aparently there are some tweaks available and tunning but it seems to be base on the R630 and R730.. so next stepp will try to ge...

PortalNET

Hi guys continuing testing.. it seems that advertise on Mikrotik running the MCX354A-FCBT in ethernet mode switch... advertises ports as 5G FULL.. strange.. even disabling auto-negotiation and seting 40Gbps... it wont go past 5gbps in TCP.. in UDP it goes both tx and rx in 9.8GB forward test.. i am ...

PortalNET

Hi guys I am having some troubles in testing some routerOS x86_64 hardwares. we have setup 2 dell servers R620 and R420.. setup R420 2 E5-2470v2 cpus.. for full capacity + mellanox MXC354-FCBT dual port 40GB (with firmwware upgradede and switched to ethernet mode) setup2 R620 with 2 E5-2697v2 cpus +...

PortalNET

Hi guys Sorry to bump on a old thread.. but i am having the following issue... we have setup 2 dell servers R620 and R420.. setup R420 2 E5-2470v2 cpus.. for full capacity + mellanox MXC354-FCBT dual port 40GB (with firmwware upgradede and switched to ethernet mode) setup2 R620 with 2 E5-2697v2 cpus...

PortalNET

Will try it out tomorrow on our test servers.. as i just came to the forum related to other speed issue on our servers Mellanox 40Gbps and 100Gbps adapter cards running ethernet mode.. speed issues..

will try it out tomorrow.

PortalNET

Hi guys

looks like perc6/e also not supported .. i am trying to install from v6 up to v7 images via usb pendrive on a disk raid0 on perc6/e controller on a Dell R710.. and it allways get stuck on FATAL ERROR no CD-ROM found..

PortalNET

Use whichever actually work with ROS. I don't know how is v7 support for storage, v6 was less than stellar in this regard. I'm not running any kind of similar setup, so I don't have 1st hand experience. But AFAIK ROS only uses permanent storage for own files, config and some limited amount of volat...

PortalNET

Hi guys we have a couple of Servers available R630, R730s with E5-2699v4 dual cpus.. we are planning to make some testing on a BGP solution with routerOS v7.. we have already the 100G network cards available and compatible.. now before we go ahead and buy the L6 licenses.. we are searching for a bes...

PortalNET

hi, does anyone know if some of these sfp+ nics are supported?? solarflare sfn7122 solarflare sfn5122 mellanox cx312a (connectx3) Hi yes they work.. directly on router os v7.. i can also confirm Mellanox 40gbps works.. and mellanox 100GBps card works but you have to go into nvidia to downlaod lates...

PortalNET

Hi

i would like to request support for BCM57840 quad-port 10G sfp+ support drivers on RouterOS v7..

its showing on the PCI but ports are not available on ethernet or interfaces..

any chance of adding support for this Broadcom Netextreme II cards?

PortalNET

Hi guys i am having troubles also in getting the Brocadom BCM57840 QUAD PORT SFP+ 10g to work its not recognized in the RoS 7.1.11 latest stable version. aldo the other dual port SFP+10g broadcom BCM57711 is recognized and working well in 7.1.11 i tought of swapping the 2 port with a 4 port card, bu...

PortalNET

Connectx-4 40G or 100G not working. Will there be any update for these drivers? Hi aparently it will work but you need to switch Card driver mode to Ethernet.. i Can confirm that RouterOS v7 is also working 100% with Mellanox ConnectX-3 cx354a at first when the card arrived, after inserting on the ...

PortalNET

Hi guys i have come across this Mellanox MCX416A-CCAT ConnectX-4 Dual-port 100G for a affordable prices, is this card compatible with RouterOS v7 x86_64? not CHR virtualization o mean Bare metal on v7 version? Includes: 1 x Mellanox ConnectX-4 CX416A 2-Port 100GbE QSFP28 Network Adapter MCX416A-CCAT...

PortalNET

Hi

has anyone tried the MCX416A-CCAT ConnectX-4 on RouterOS V7? i have found some pretty good deal prices on this cards i was wondering if this would be supported on RouterOS x86_64 v7

PortalNET

Hi guys

about 90% Of the Forum topics seem to be closed.. locked.. any special information we are all missing?

PortalNET

Hi guys is the forum Locked?

i am trying to access and reply on different topics, and all showing up LOCKED.

PortalNET

You can use freeradius and set "default Auth-Type := Accept" into users file!!! Hi i am trying to set this to allow all radius to login on a specific server.. but cannot find users files.. only have clients.conf and radiusd.conf.. u mean clients.conf file? because i am using mysql db to a...

PortalNET

Mellanox and Chelsio adapters work with v7. I have personally tested Mellanox CX516A and CX515A as well as Chelsio T62100-SO-CR others should work as well. Keep in mind that only Ethernet mode is supported, if adapter is in Infiband mode, it has to be "switched" to Ethernet mode beforehan...

PortalNET

You're overthinking it. There will be zero difference in CPU usage. PPPoE sessions terminate and then must hit the routers CPU. No they are not tied to individual cores or anything like that Just throw everything into a bridge with a horizon value (same on all) to avoid traffic flowing between cust...

PortalNET

Hi guys sorry to bump into old thread

can anyone confirm is this NIC Mellanox ConnectX-3 cx354a 40gbe qsfp MCX354A-FCBT is compatible with routerOS?

PortalNET

We found funny specificity when using x86_64 on server platform. Example. We have server Dell R720 with next hardware setup (one of typical NATs per 2k users): - 2 CPUs x Xeon E5-2650L v2 - basic clock 1,70 GHz - turbo boost 2.0 up to 2,10 GHz - 10 cores / 20 threads per CPU - 25 MB smart cache per...

PortalNET

Regarding NIC support (which includes 10Gbps NICs) there are 3 ROS variants: ROS v6 x86 Due to age of ROSv6 and underlying linux kernel it generally lacks support for newer devices. Which (sadly) includes most 10Gbps NICs apart from NIC based on early chipsets. Nothing much will change about suppor...

PortalNET

Hi guys so we got hold of an old R910 with 4 cpus. Each 10Core/20threads total 40core/80threads 2.8Ghz speed intel xeon We have decided to give it a go on RouterOS V7 x64 direct install on the machine, my only doubt now is the fully compatible 10g sfp+ Fiber NIC cards 100% compatible with Mikrotik x...

PortalNET

Hi, Honestly, I don't have a magic number for you on my 6 months experience with MT on a similar scenario from you we were able to push at least 1K user and counting from two CCR1036 one is dedicated as PPPoE server and the other is doing plain NAT. On the PPPoE server we disable connection trackin...

PortalNET

For sure, use one PPPoE Server per VLAN. Much better than bridge them Hi guys sorry to bump into an old topic.. but this somehowe has confused me now.. i have the following scenario ATM..and i have some doubts regarding cpu usage and pppoe-server we have a deployed scenario with CCR1036 2SFP+ model...

PortalNET

Hi guy old topic.. but we have same sort of issue..or at least similar our issue is on WIFI.. on cable pppoe goes easy 800 to 900mbps fia fiber GPON olt connected on 10G uplink direct to sfp+2 on ccr1036 where pppoe-server is setup.. but problem is on wifi6 ax.. and wifi5ghz.. cannot go over 400mbps...

PortalNET

Hi, We have the same problem did you fix it on your setup? Hello unfortunatelly no solution which is the strangest.. we tried changing the queue-type default from PFIFO 10 or PFIFO 50 to SFQ with perturb 5 and allot 1514.. we got initially better results up to 400mbp download.. but nothing better t...

PortalNET

hi guys

any updates on NIC cards with 40G and 100G support in RoS v7 ?

i am planning on testing this model Qsfp28 Pci 3.0 X16 0n64d3 Omni Path on a Dell R730 but not sure if its worth spending $$ buying for testing without support.

PortalNET

supports only ide disks What do you expect to do with RouterOS on Dell? I want to Install Mikrotik Router OS on Dell Poweredge Bairbone, not willing to install it on Xen or Vmware I know it might be late.. but disable, raid , perc remove.. just install SSD or HDD SATA VIA sata cable connector on mo...

PortalNET

I know lol. Support didn't explicitly say that but after what they wrote it appears as if that is already a known issue to them: Hello, Thank you for the reply! This is a software issue and we look forward to fixing it in future SwOS lite releases, but I cannot share the release date. Best regards...

PortalNET

Hi guys i know this is odd but i have not found any information on the SwitchOS description infos... I would like to know the default MTU size set on the SFP+ interfaces on the CRS317 running switchOS mode.. because its not displayed in any of the menus avaiable is it MTU1500 ? is it L2MTU 1598 ? ju...

PortalNET

try enabling flood unknown multicast

Hiya

i did tried it.. enabled on all ports.. but it did not connect neither could ping from one device to another..

PortalNET

try enabling flood unknown multicast

Hi..

will give it a try later and post output results.

PortalNET

Router OS support plans for HP dual SFP+ 10G card? Hi guys i am trying out the x64 bits RoS v7 stable on and old PC servers.. just to compare some results with CCRs so far so good.. pretty impressive results on the troughout internal core cpus.. as it shows 24 cores as described on the picture below...

PortalNET

TL;DR ... if you have IGMP snooping enabled on switches, disable it and see if it works then. I don't have first-hand experience with SwOS, but AFAIK IGMP snooping on both SwOS and ROS is broken and breaks IPv6. At least that was the case in ROS v6 and I haven't checked it with recent ROS versions....

PortalNET

OK so i have checked IGMP.. seems to be disabled all blank, nothing showing up on the IGMP menu.. i check ACls menu also blank nothing added or saved in the Menu as pictures below described.. other options RSTP is disabled also i have disabled it.. type EDGE showing as on picture.. its running on ST...

PortalNET

ACLs or anything that messes with multicast? igmp snooping etc.

hmmm i think igmp snooping is disabled on the switchOS i will check in the menu.. does it need to be ON or off?

does multicast need to be ON ? or off ?

PortalNET

Hi guys i have 2 CRS devices.. running in switchOS mode.. 1 crs305 and 1 crs317 both running 2.13 firmware latest upgraded... and on both sides we have CCR1036 running long term 6.48.6.. all connected in 10G spf+ both ends.. i have setup static route ipv4.. and working 100% i tried setting up ipv6 /...

PortalNET

what makes me more confused is the 2.13 firmware details txt which states the following

*) always forward link local IPv4 & IPV6 packets;

what would it means? it can only forward packtes in link local?

PortalNET

Hi guys we have a CRS317 on point A and a CRS305 on Point B..and connected on boths CRS devices running switchOS mode.. we have 2 CCRs1036 on both sides.. both devices are connected via IPv4 on 10G SFP+ ports.. now i have setup a ipv6 1/126 IP on BGP point A... and 2/126 IP on BRAS PointB device... ...

PortalNET

Or move to DHCP and dump PPPoE. PPPoE has MTU and CPU overhead due to encapsulation, DHCP does not have any such issues.
I would dump PPPoE, but my radius/billing software is limited on other ways to AAA dhe dhcp clients.

Same problem here..stuck on radius because of that.

PortalNET

Or move to DHCP and dump PPPoE. PPPoE has MTU and CPU overhead due to encapsulation, DHCP does not have any such issues. Hi i know its an old thread.. but called my attention on your post.. could you elaborate a litle bit more on that? i am running a 1036 2S+ rev2 just running PPPOE and i am having...

PortalNET

I'm experiencing the same thing, pppoe also. Were you able ger to the bottom of whata happening here? Hi guys i know this is an old thread.. but basically i am facing a similar issue but on another hardware i am having the issue on a CCR1036 2S+ model 8GB ram rev2 version. i am running ROS 6.48.x l...

PortalNET

Please, can you say about your x86 router status? How many traffic real time? BGP? OSPF? CGNat? Pppoe server? We run 5x NCA-5520A (with 1 x Intel Xeon Silver 4215R and 3x NCS2-IXM405A) on ROS 6.84.6 as BRAS with max 8000 Session per System (average Users per System: ~ 4000). In case of maintance or...

PortalNET

I would just implement it and go measure, and be ready to roll back. Pound it flat with artificial traffic at 4am? (I am one of the authors of fq_codel and cake, but I do not have enough data either, on how well this stuff scales on given bits of mikrotik hardware). In most cases it is the per cust...

PortalNET

i have setup a pppoe-server specific on that CCR1036 ethernet port.. just with the router wifi6.. and just with profile default from mikrotik with no limits.. max speed download wifi 300 ao 390mbps.. and upload speeds up to 700mbps .. tested with custom specific profiles created for 500mbps and 600...

PortalNET

Hi guys i have an odd issue we are currently using a 1036 2S+ Core router being used as PPPOE-SERVER.. our clients are all fiber connections with speeds 300mbps and 500mbps plans... our OLTs have uplink 10G port.. connected to 1036 sfp+ port with specific vlan tagged mode.. our ONU devices are all b...

PortalNET

I guys i know this is an old thread.. but i have a similar issue.. we have 2 CCR devices connected on a static route.. Point A to Point B in Ipv4 working great.. inside a VLAN and this CCRs connect to switchOS CRS305 and 317 due to use of SFP+10g ports.. now i am trying to setup a IPv6 PTP from poin...

PortalNET

Hi guys.. sorry for hijack this thread but we have some interesting results for PPPOE-server and PPPOe clients on some devices i would like to know if someone else is facing the same issue.. we currently have some PPPOE-servers CCR1036 with 2SFP+ 10G ports.. SFP+1 WAN link from BGP with specific VLA...

PortalNET

Hello! I have an idea to run on my MT script which will send me telegram message when it is NO internet on it or MT switched off =) Sounds interesting, doesn't it? How MT will send a message if it is down or no internet? But I have an idea! When router loaded and have an internet - it will send me ...

PortalNET

Hi guys first of all let me say big thanks for this topic.. i made both scripts run, on telegram and configured the /setcommands and i can get communication from telegram to mikrotik and vice-versa.. now if i want to print traffic from specific interface on the mikrotik is there any ready scripts av...

PortalNET

Hi guys i know this is an old thread but we have the same problem with switch CRS328 on the 4 ports sfp+ ports flapping all the time.. if we plug the same gbic for 10gbps on our switch CRS305 it link 10gbps normal with no issue at all and they work normally, but we need to expand and we bought 2 CRS...

PortalNET

Hi guys Problem solved, after digging for more information and some reading, i managed to find out that OSFP does not send packets if both devices are being connected via Switch running SwitchOS mode. plugged in cable direcly on both devices on other ether ports and OSFP connected each other.. In or...

PortalNET

Hi, elbob2002. Do you mean I can run ospf in CRS326-24G-2S+RM only booted with RouterOS. OSPF is a routing protocol. Requires a router. When run under SwitchOS, the CRS326 is functioning as a switch - not a router. Hiya.. first of all let me thank your for your comment as i having problemas setting...

PortalNET

BTW i am just wondering if this could be a CRS317 Switch issue, as i am running it in SwitchOS mode boot.. in version 2.13.. not sure if this impacts..

as i am using the CRS in the middle to be able to connect both devices using just SFP+ port..

PortalNET

Hi guys i am having troubles connecting OSFP on PTP mode on 2 devices Device 1 = CCR1016 Device 2 = RB4011 Basically i have both of the devices connected via SFP+ port directly to a Switch CRS317 each one on separate SFP+ port.. Device 1 will be CGNAT and Device 2 will be PPPOE server, i am trying t...

PortalNET

Hi guys we have recently accquired from a small isp which was sold out, a CCR1036-8-2S+ EM 16GB ram model with 2 slots 8GB ram. we noticed that the motherboard is bigger then the other CCR1036-8-2S+ model which comes with dual PSU.. but unfortunatelly this model only comes with 1 PSU unit output 24v...

PortalNET

Nothing you can do if your pipe is smaller than the attack bandwidth. Has to be mitigated upstream. Yes indeed.. upstream provider is having dificulties.. aparently Wanguard is not being able to mitigate it aparently. wondering if CCR2216 with 100G uplink port.. would be able to soften the hammerin...

PortalNET

Since you've got a common rule for multiple ports, it is not possible to say whether it counts the SSDP packets or the other ones. Create separate rules (TCP, UDP) with dst-port=1900 alone and place it before the common one. But that's only for analysis, otherwise it should work the way you've set ...

PortalNET

What is attracting the attacks....... specific servers??

well they are attacking full ASN IPs.. all blocks /24 being attacked with thousands of spoofed ips.. with random ports ICMP packages with lenghts 161 and 70bytes.. with that ssdp inside.

PortalNET

What is the output of /ip firewall raw print and /ip firewall raw print stats. If the requests are properly dropped, RouterOS should not be sending any ICMP packets back.

Hi

attached pic of IP firewall RAW..

PortalNET

Hi guys some ISP using mikrotik are getting attacked with DDOS with SSDP... some peaks of 50gbps, any ideas on how to mitigate this?? the Upstream provider is having some dificulties also... below some pics of traffic packet sniffer during the attack whilst all CPU cores on 1036 and 1072 jam at 100%...

PortalNET

Hi guys i know this is an old thread, but somehow fits my problem description we are getting the same flavour of attack.. both 1016 and 1036 max out cpu.. BGP and PPPOE servers.. the attacks only last average 20 seconds.. then stop.. our main backhaul internet provider told us that the attack monito...

PortalNET

We use 5x X86 as BRAS System, each System does 3k PPPoE Users (CPU is at 20%). We use this Systems with XEON (XEON E5-1650v4): https://www.landitec.com/products/x86-network-appliance-hardware/rackmount-appliances/nca-5510-detail/ And 10G Cards: https://www.landitec.com/products/x86-network-applianc...

PortalNET

Hi guys i have found some similar threads but without detailed information we currently have a CCR1009 in deployment with around 650 PPPOE connections fiber clients with isp plans from 100mbps to 600mbps.. on tools profiling we can see firewall draining almost all of the cpus.. so we have removed CG...

PortalNET

I think this one is going to be our replacement for CCR1072 s. Any idea on the release date ? https://www.balticnetworks.com/docs/MikroTik-CCR2216-1G-12XS-2XQ-3-Datasheet.pdf https://www.youtube.com/watch?v=7_uLxZYYEpQ OMG........ thats not funny.. mikrotik don´t know how to play anymore.. 2 100G.....

PortalNET

Hi guys interesting topic i came across, i have setup a monitoring tool to monitor all our traffic and recently we are seeing alot of traffic from certain IPs.. named bot-smokeloader, bot-ponyloader trying to connect on our ASN network. i was wondering if there is any way to block this traffic manua...

PortalNET

Hi guys i am trying to write a project, where it fetches all the data from the api via /log/print result.. and stores it on a table in php format. i can output the log now.. but i would like to update it every 5seconds or so, so it could fetch utomaticaly the new logs, but i am kind of lost here.. t...

PortalNET

Hi guys.. i know its a litle bit late on ansewers, but its better late then never right, ok so my working version of the code to fetch on newer Versions rOS 6.46, 6.47 the total RX-BYTES and TX-BYTES working code below.. if ($API->connect($iphost, $userhost, $pass, $port)) { $stats = $API->comm('/in...

PortalNET

Hi guys i know, this is old news and old threats, but as i am working on a new project development ISP Management system with freeradius 3xx and full system monitoring via snmp, api.. we are implementing from scratch a new system, and each time we come across some searches on google it ends up here ...

PortalNET

Hi guys just an update managed to get it working with routerOS php api , my cmd was wrong obviously as shown on the previous post working code if ($API->connect($iphost, $userhost, $pass, $port)) { $ARRAY = $API->comm("/ppp/active/print", array("count-only"=> "",)); pri...

PortalNET

Hi guys i know this is an old thread, but could someone post the php code, to print the ppp active secrets? i have tried executing the cmd on the mikrotik cmd and it works /ppp active print count-only and it prints out the number of the total pppoe clientes connected.. i need to output it to php for...

PortalNET

Hi i know its an old thread but i have found somewhere on google i think o DaniC website a ssh mikrotik implementation class, perhaps this could be usefull for some ssh php project.. for php7 needs some changes on the code.. as split and other functions have been deprecated. <?php error_reporting(E_...

PortalNET

ok nearly 12 years later... but as we know.. the PHP api stopped working on the latest versions of Mikrotik 6.4xx so why not use ssh2_connect in order to send cmds and fetch the output result from mikrotik 1st you need to have a server machine the first cmd will depend on your linux distro version, ...

PortalNET

I did find information on how to set a NAT rule to correct the problem of clients not showing the correct public ip address. That works fine now. I also found that I needed a couple of filters in the firewall rules to allow inbound and outbound traffic that's using the public ip addresses. I also f...

PortalNET

whilst on the public ips on ASN we have created the accept rule to pass all traffic without blocking ports on the public ips.. so i am guessing that these types of attacks must be hammering the clients routers with attempts to access the devices.. i have seen on the net that there could be a ton of...

PortalNET

Yes, use FIREWALL on pppoe-server Drop any incoming unsolicited connection from outside directed to IP of clients. If some clients required open ports DO NOT OPEN 20,21,22,23,53,80,443 and open only what requested, and on firewall rule add the expected IP of remote source. Problem is we have ASN IP...

PortalNET

picture attached

https://pasteboard.co/K4mhc8b.png

PortalNET

Who is the idio-t than pay Pricing Based on network size, starting from $2,500 per annum. https://www.spamhaus.com/product/border-gateway-protocol/ For one rule on "/firewall raw" (drop all prerouting when source is on combined drop-edrop-c&c list) https://www.spamhaus.org/drop/drop.t...

PortalNET

Just thought I would share this with the Mikrotik community. I've always been a proponent of keeping garbage traffic off our network in an effort to conserve our very expensive infrastructure resources. Besides doing the usual things like blocking Bogon IP traffic and block certain TCP/UDP ports, w...

PortalNET

Hi guys we have obtained recently ASN block IPv4 /22 on our ISP.. and we have setup BGP .. after a couple of weeks of testing this IPs blocks, updating the Region/country of the ASN ip block, aparently this block was accquired from another region country to our country so after setting up the ASN an...

PortalNET

Thank you very much Setting out-interface=<WAN interface> solved the problem in both cases. Thanks once again Unfortunately this did not work for us.. We have BGP with our IPV4 /22 configured.. then we forward our public ips in smaller blocks to other Mikrotik devices.. then from one specific devic...

PortalNET

Hi guys it looks like i have the same or a very similar issue here we have a ASN /22 block.. we have setup a client static public ip with /30 and client company has setup a mikrotik on their end.. so IP1 gateway on our side, and IP2 on client side.. internet working just fine.. but when external con...

PortalNET

Hi guys i have messed up a wireless radio at a 20 mile distance whilst playing with vlans on the device and a mikrotik interface on the PTP ... basically i have setup de ip address netmask and gateway on the radio.. but i have setup wrong basically the correct settings would be on the mikrotik inter...

PortalNET

What exactly do you want to test? When testing by bandwidth test in ROS between two devices you are not really testing network performance, but rather CPU performance of the devices. To test bandwidth properly you should test through your devices, not between them. And you can do so for SwOS as wel...

PortalNET

Hi guys i have 2 CRS305 units which i am doing some tests, 1st test in RouterOS mode, as described plugged both CRS305 units via SFP+ 10G cable, it links on bothsides, created an IP/address to connect between each other and started the bandwidth tests.. as expected the results were the same as on th...

PortalNET

Hi guys i have accquired 3 units, so far i have done the testing in RouterOS mode, bandwidth test, from one device to another via 10g sfp+ connection.. so far TCP and UPD max bandwidth with MTU 1518 size is 1235mbps to 1240mbps thats pretty much what is advertised on the mikrotik test results.. now ...

PortalNET

Hi guys as the title describes,can anyone confirm if TX/RX packet limit exists? is it configurable? i do not plan to limit rate speeds on tx/rx rate limit... we have a odd issue with some pppoe users who like to hire their internet and become a small ISP sitting on a residential home internet , inst...

PortalNET

From Lan1 IP 10.1.10.26 i can only Ping to LAN2 Gateway 10.1.10.125 From Lan2 IP 10.1.10.126 i can only ping to LAN1 Gateway 10.1.10.25 You have not introduced "Lan1" and "Lan2" with the above IPs. Are they distinct from "LAN1" and "LAN2"? If yes, what are th...

PortalNET

Hi guys i have a strange issue we have been recently assigned a Public IP /22 to our company , so BGP route is running all setup default BGP route, and we have peers working already. So we have created the filter rule to accept everything inside our /22 block on second mikrotik device we the followi...

PortalNET

Hi

once u boot into the switchOS

you will only be able to login via web interface on IP 192.168.88.1 or 192.168.88.2

so u have to setup a static ip on your pc NIC interface on the same range in order to be able to connect.

then u can upgrade it to switchOS 2.11 via the web interface

PortalNET

Hiya i had a similar issue, when i switched to SwOS and rebooted.. i lost access via winbox, i could only use the web interface page.. and the IP on the swOS did not changed to the configured one, i was able to access it using the 88.1 default ip, then on the system page configured back the IP from ...

PortalNET

Hi Guys

going further a litle bit on the configuration, this is a litle scenario diagram below..

i just need to trunk port BGP with specific VLAN, and PPPOE-SERVERS with another different vlan , but need the BGP to receive all vlans, not shure if this would be the correct configuration

PortalNET

Hi guys i have recently purchased one of this devices into our company for daily usage, but i am kind of lost with missing information about configuration.. i have setup switchOS firmware and booted on switchOS, upgraded it to version 2.11 switchOS, which is now running in switchOS mode only so i ha...

PortalNET

Hi guys quick question does anyone have this new RB4011 with SFP+ port running with PPPOE-server? i amd wondering what kind of maximum bandwidth speed you can reach with it lest say for a PPPOE-SERVER with around 400 to 500 users active maximum.. i am looking at the data specs and it states that for...

PortalNET

Hiya i would like to know if this exploit could affect the Mikrotik routers, its a exploit on the PPP daemon that has been wide open for the last 17 years CVE-2020-8597 Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers The US-CERT today issued advisory warning users of a new danger...

PortalNET

Sounds like an MTU issue, the default PPPoE server setup has an MTU of 1480. Its strange but doesnt sound like an mtu issue.. i thinks its something in the mangle , or mark-routing that its not accepting it to filter it correctly on Static LAN ips from another interface, tbh i am kind of lost now.....

PortalNET

Let's call CCR1009 (the ISP facing) R1. And let's call CCR1036 (the remote one) R2. The simplest case: if R1 and R2 are (more or less) completely independent from L3 (IP) point of view, then you could bridge two SFP interfaces on R1 (one currently used for WAN and one currently used to connect to R...

PortalNET

Well

thats exactly what i need i will give it a try, and will post the outcome result.

PortalNET

Again, it depends how the ISP route it. When they route the second /30 via the 1st, you can just set it on a link between your two routers and it will work. But when they route the second block just directly on the line (address2 via address1) you will need to use tricks. Hi yes indeed they use the...

PortalNET

Hi guys i have a small issue, and i am having hard times finding a working solution for .. My ISP service provider offers me 2 static IPs , split into 2 different blocks, meant to be used simultaneously on the same Mikrotik device. example Block 1 = 189.xxx.xx2.90/30 Block 2 = 201.xxx.xx9.124/30 Bot...

PortalNET

This was their response: Network IP *.*.135.188/30 Subnet Mask *.*.255.252 Host IP's *.*.135.189 & *.*.135.190 (Usable IP's) Broadcast *.*.135.191 Most likely a litle bit late for posting the outcome, but basicaly a /30 just means you have 2 IPs, one will be your gateway and the other will be y...

PortalNET

Hi

Have a look at VRF/routing rules, with it you can setup independent routing for specific incoming interfaces.

Hi Sebastia thxs

i will do some research on it..

BTW forgot to ask before, can i use 2 different VLAN on one specific Interface on the Mikrotik without being bridge interface?

PortalNET

Hi guys I am having some issues forwarding 2 WAN Links via 1 specific interface using 2 Separate VLANs So i have 1 CCR where i have 2 Links input, each configure with separate Static IP and Gateway, on this specific CCR i have 2 PPPOE-Servers and i can forward traffic via IP profiles to each separat...

PortalNET

I just wanted to throw this in to the community for discussion. I operate a WISP in Spain who's client base consist of a large proportion of expats who use illegal UK IPTV services. We find ourselves having to pay for very expensive bandwidth, that is not normally required, to keep these services ...

PortalNET

Hi guys, We sell IP transit to some smaller ISPs and also offer High Speed to residential clients and our current Router solution is reaching the limit, I would like to deploy a new Mikrotik Router for 40Gbps of traffic. I don't consider the CCR1072 because it only has 10Gbps ports and I'm consider...

PortalNET

Hi guys

i have a script that runs daily backups from the mikrotik RB

one of them died so i need to export the ppp user list and pppoe server configuration from the daily backup, to copy on a new RB ccr diferent model from the one that died, is this possible, if yes with what tools?

PortalNET

Hi Guys I have some doubts and i have searched on the forum for some specific information regarding my issue i have found some old posts with some vague information, or perhaps i dit not understand it fully. I will ask again is someone can point me on the right direction approach to what i am trying...

PortalNET

I can't see the photos but you have to run multiple up or tcp streams to use all codes. What way are you testing? Also the numbers you get are crazy good for this Cpu. Do you really mean Gbps? The Cpu only has 4 threads as Amd do not have hyperthreading until Ryzen, called SMT I think. Also this Cp...

PortalNET

Hi boys i have some doubts regarding the x86-64 architecture... but first things first, is it just me or there seems to have a bug on all versions of mikrotik x86 that cannot read RAM memory available correctly? or is it just some versions or Memory RAM modules that does not display it correctly? i ...

PortalNET

Hi guys Ok so i have decided to give it a try and test RouterOS 6.39.xx bugfix on a Spare machine i have here used in the past for bitcoin mining.. i wanted to check the troughput i could get out squeezing all the cpu cores.. PC specs: Amd Fx-4300 3.8ghz Am3 8mb Cache (4 Cores 8Threads) as we know M...

Search found 163 matches