Hi All I need support on CPU utilization which is always in between 40 to 50 % always .Total PPPOE USER approx 3k & public hs user approx 2k , Our radius server for pppoe is on cloud ,for public wifi open speed speed ,no limit defice .only dhcp is running on server .Total traffice is 3.5G . I ha...

Your mistake is sharing only few rules, because the rest matters too. But the mangle rule does show the problem, you're checking the list for every single packet. So of course it's going to be slow. You need to check the list only for new connections, mark them and don't check the list again, somet...

What's the rest of your firewall rules? I am sharing sample of my router configuation --plz check and support me for any mistake there ........... currently i have done such configuration which has been enabled now in live network .some websites even get open (i have check that website ip are not g...

I'm afraid there is no such link!
When you "need to block websites" the best advise is to close down your network.
That will create the best overal happiness amongst users and administrators.

thanks for wonderful advice

Hi All

share me any link where I can find best way to block websites but it should not increase the CPU and also work fine.

Hi All below are the configuartion I have done . let me know if more need to do or how to do ? thanks /ip firewall filter add action=drop chain=forward dst-address-list=DoT-block /ip firewall address-list add address=xmovies8.com list=DoT-block add address=xmovies8.ru list=DoT-block add address=xmov...

Hi

Please support me. How I can block the website so that my Mikrotik ccr 1072 CPU utilization remail normal.waiting for response

what is the /tool profile indicating? could you share details on how the blocking works? find the policy how we are blocking /ip firewall filter add action=drop chain=forward dst-address-list=DoT-block /ip firewall address-list add address=xmovies8.com list=DoT-block add address=xmovies8.ru list=Do...

what is the /tool profile indicating? could you share details on how the blocking works? find the policy how we are blocking /ip firewall filter add action=drop chain=forward dst-address-list=DoT-block /ip firewall address-list add address=xmovies8.com list=DoT-block add address=xmovies8.ru list=Do...

Hi Can you let us know what is the best way to block website .we are running ISP and traffic is 2Gbps+1G Peering with a number of customers is approx 2000 (public hotspot )+ home customer 2000 .we are using Mikrotik ccr 1072 and using third party Radius server for AAA .we have approx 100+ list of ip...

Can you suggest me what would be the best way? what devise I should use in place of ???? AT CITY B switch or router ?. let me know .. ..our issue is still there ..when we use the router in bridge mode and all the gateway configure on location A .. .slow speed we get. ..but when we use the router at ...

Just use the src-nat rule with to-addresses set to that public pool (or its subrange). You don't need L2 for this, the NAT can be done anywhere on the path. So default route of city A via the NOC router with no NAT on the outbound interface, and NAT on the internet-facing interface of the NOC route...

thanks.. I think ,i check tool profile on ccr 1009 in bridge mode .which was normal ....i will check other parameters also... just wanted to know ...since we are running public hotspot (EXPRESS WIFI BY FACEBOOK ) . ..my motive is to nat ever private ip pool of /24 or /25 customer with single public ...

Hi .. request to support me over this issue .. We have main NOC with two ISP as uplink (CCR 1072).... now we have taken L2 circuit from one ISP from city A to our NOC . when we configure the router of City A in bridge mode(model ccr 1009) and all the interface ip are configure at noc .. we get speed...

Hi We are running express wifi by facebook project "iconnectwe.com" . currently we have take a Peeing & ILL (1 G) in location A. .now that Isp has provide the L2 connectivity to different location of B,C,D small town ...issue is that .if we configure the all configuration of gateway ip...

Pool 10 11 2 has not a next pool

Enviado desde mi Redmi 3 mediante Tapatalk

Okay.thank.. I will try this also ..looking for single rage pool of /23 or /22 ...

Can you export the rest of your config? /export hide-sensitive Hi the configuration is too long . we are running Express wifi by facebook . open ssid in rual village . apart from this we are given internet to remote area with the support of facebook .that limit of speed of done by them on there por...

What is the model number of the router you are using? What is the license level on the router? The below link show the limitations of each license level. https://wiki.mikrotik.com/wiki/Manual:License [mukesh@KOTA-NOC-R2] > /system license print software-id: J4CK-XKRR nlevel: 6 features: [mukesh@KOT...

Thanks for the config. Try with the following changes: /ip pool set POOL-10.11.2 next-pool=POOL-10.11.5 set POOL-10.11.5 next-pool=none Are you linking each user to the "2M_Plan@10" or the "2M_NN_Plan@10" profile? Is there any specific reason why you are also running the followi...

Can you export your config? [mukesh@KOTA-NOC-R2] > /ip pool export # mar/05/2019 22:56:10 by RouterOS 6.43.4 # software id = J4CK-XKRR # # model = CCR1072-1G-8S+ # serial number = 7272066B87A0 /ip pool add name=POOL-10.11.2 ranges=10.11.2.6-10.11.2.253 add name=POOL-10.11.5 next-pool=POOL-10.11.2 r...

Can we create the PPPoE user pool for 500 or 1000? .. i tried .but found only /24 pool is working .no one getting ip from next pool . i mean . if i have pool of of 192.168.1.10-192.168.2.253. .customer will not get ip from next pool of 192.168.2.253 after exhaust of ip from 1st pool . .. It has been...

/ip pool add name=POOL-192-series ranges=192.168.1.192.168.2.253 /ip dhcp-server add address-pool=POOL-192 interface=ENT-VLAN-901 lease-time=23h59m name=Vlan-901 /ip dhcp-server option /ip dhcp-server network add address=192.168.0.0/23 dns-server=8.8.8.8,4.2.2.2,8.8.4.4 gateway=192.168.1.1 netmask=23

I have issue in PPPoE ppol .when in pool i have define the pool 192.168.1.10-192.168.2.250 .. but found issue that no one get ip from 192.168.2.x series .when the ip get full from 192.168.1.x . no next client get from next series i.e 192.168.2.x ..

Hi Team I have same situation .wanted to know how to do the configuration on router so that i can use the peering .. wan 1 :- ISP1 -310 Mbps wan 1 : ISP 2 - 500 Mbps- google-Peering BGP i have my own AS number .share to both ISP . bgp has been establish with both . in Peering i have prifix count is ...

can you explain more ...i did't get you ..what should change Well are you getting routes in your routing table for the Peering? What routes are you getting for "international"? Yes ..we are getting approx 800 prefix learn vi peering . .Peering AD is 20 . INTERNET has AD (static route ) - ...

Setup BGP peering with the route servers and collectors at the internet exchange......
Those routes will then be injected into your routing table and everything else will e.g go out your default route for international.

can you explain more ...i did't get you ..what should change

I have taken the one peering of 500Mbps and 310 Mbps of ILL (INTERNET ) with bgp . i have my own as number and bgp has been establish with both . peering provider & ILL Provider .. now what should be policy and router so that i can utilize peering . ..current it has 1:1 traffice load sharing due...

Thanks for reply .. Now I am using netmap with my private ip pool 192.168.1.0/24 with public ip pool of 103.x.x.0/24 ip address . and its working .. .. now again my quatation is if my private ip is beyond /24 . mean number of user is like 500 ..will this policy work or not ... is it one to one nat p...

Hi
Can you please help me how to do Dynamic nat of apporx 100 private ip with /24 public ip pool . thanks

Hi I am facing similar issue . my l2tp client get disconnected after every 1 minute 14 sec. I have tried to check keepalive time and session time but could get success. can you guide me what could be the issue . I get following log on l2tp client disconnected initializing connecting..... termination...

Hi I am facing similar problem . I have configured l2tp client .it get connected and able to ping all private ip of remote .but i get disconnected after every 1:14 sec. i try to set keepalive time and session time .but still issue is same . on every 1.14 sec it get disconnected and reconnected .it t...