MikroTik

darkiesan

Hi darkiesan! Thanks for your input on my issue with the Dual WAN Load Balancing with Automatic Fail-over. Here's my current routing table: /ip route add check-gateway=ping comment="I-Gate ISP GW" distance=1 gateway=X.X.X.65 routing-mark=to_ISP1 add check-gateway=ping comment="BayanT...

darkiesan

Thanks you both for your replies It's a little tricky to get the failover to work with netwatch: it would have been nice to have a netwatch over the interface aswell - I have three WAN links to handle in my failover scenario (belt & braces) Orange doesn't allow us to ping their servers, therefo...

darkiesan

Hi Caci99, As I've said, I'm using PCC on a multiple VLAN (multiple subnets) environment under a single bridge interface. My requirements is to have a DUAL WAN Load-balancing with Fail-over set-up. I'm not sure if load-balancing can also bond the two equal bandwidth of my two providers (6M + 6M = 1...

darkiesan

Hi I'm not sure if this is standard behaviour for a router, even so I don't understand why it would be. I have two default default routes, which are each attached to a separate interface on my RB951G I have a distance differentiator so as to privilege one default route over the other; therefore whi...

darkiesan

I want to print a subset of the inetrfaces via script, i.e. something like: "/interface print where name="ether*"

Unfortunately I havent yet found a way to use regexp or wildcards to achieve this. Any tips?

darkiesan

Profile reports that most CPU time is spent on queuing and firewall rules.
A bit disappointing, but it seems to be tru that with a certain number of connected HotSpot users, RB1100AH can perform more than 100 Mbps..

Good thing the 16 core and 32 core 1100AH is released

darkiesan

Hello, Can somebody show me and example of a Radius Attribute to be used with Mikrotik and Freeradius? I have 2 hotspots. I want set Mikrotik-Rate-Limit different for each hotspot. Hotspot1: Mikrotik-Rate-Limit = 512k/1024k for all users of this hotspot. Hotspot2: Mikrotik-Rate-Limit = 1024k/1024k ...

darkiesan

1100AH is single core and I doubt it will ever reach 600mbps in an production enviroment. Is very important what configuration you have. If you have hundreds of rules in firewall or Queues, 90mbps is expected. Just the basic hotspot rules installed by the hotspot wizard. Still dont think it should ...

darkiesan

Hello, I am running a Routerboard 1100AH in a Hotspot application with a fibre uplink (600 Mbps capacity). Clients are downstream on ethernet using switches to aggregate. The solutiosn works fine functionmality wise, but I see a performance problem where 1 Mbps = 1% CPU, i.e. the box wont do more th...

darkiesan

[quote="Chupaka"]it's all in 'pptp' helper now - look at post's date =)[/quote]

Too bad for me

Cause PPTP wont do proper NAT traversal. What am I missing. I NAPT GRE and NAPT TCP 1723. Hoover Dam!

darkiesan

>Hey Sam, >Thanks very much. You got me on the right track. My router was letting port 1723 TCP through, as well as protocol 47 GRE, but I had to enable the NAT >traversal and then everything started working. > >For future reference, go to: > >/ip firewall service-port > >and enable gre (option 5) a...

darkiesan

Guys, Problem simply was as I suspected that the SIM card wanted a PIN CODE. Didnt find any good way to send PIN CODE through AT mode. Best trick then is to take the SIM CARD from the HUAWEI and put it into your normal cell phone. Then start the cell up and use the SIM card maintenance menus on your...

darkiesan

Sligth correction, I actually have: [admin@climat-gw] > interface ppp-client print Flags: X - disabled, R - running 0 name="ppp-out1" max-mtu=1500 max-mru=1500 mrru=disabled port=usb2 command-channel=0 data-channel=0 info-channel=0 user="" password="" profile=default ph...

darkiesan

Guys, Got Huawei E220. I can find the device ans serial port for the ppp client. I create this ppp-client: [admin@climat-gw] > interface ppp-client print Flags: X - disabled, R - running 0 name="ppp-out1" max-mtu=1500 max-mru=1500 mrru=disabled port=usb2 command-channel=0 data-channel=0 in...

darkiesan

Mine looks great too!

darkiesan

Add a rule that accepts outgoing traffic from your internal clients and then add rules to accept established answers and related answers.
Everythign else you drop.

darkiesan

Please mail me at df@webkom.pp.se and I ll try to help you.

ANd yes, one IGP should be enuff

So it would be nice if you didnt have ti run RIP!

darkiesan

Try change to routing-test, but alsoplease mail me or post here on the forum a network diagram.

darkiesan

And BTW, do you have a network diagram with areas IP networks, routers and interfaces specified?

darkiesan

Do you use routing-test or normal routing package?

darkiesan

First of all, it may only be ONE backbone area. So it must be contigous. Design so that all routers that gate to another area always have one interface in the bakcbien area. Meaning that all routers in the backbone area either interconnect area border routers or are area border routers. An area bord...

darkiesan

Even worse if it did work and then stopped working...

darkiesan

Dunno... actually I havent tested it... I will just presume that it never have worked...

darkiesan

If we both send thatin as a feature request... maybe we'll get it!

I sure want it!

darkiesan

LOL, I reported same bug! But anyways... BGP sitll needs to be tweaked a bit... For instance, when using an incoming filter to set locaslpref, communites etc... it doesnät stick to the routes. Check the BGP attr tab on properties for a route in the route table... bothing seems to stick... is this a ...

darkiesan

Oh bother... I realized the incoming filters applied to a peer dont do what they should... I dont get prepend, localpref, communites, whatever impirnted in the routes I receive...

darkiesan

With the fixes in 2.9.38 it works beatifully!
Thank you Mikrotik!

NOw, lets see what bugs I can find in the OSPF/BGP interaction

Very happy!
Patrik

darkiesan

Will routing-test 2.9.37 contain any fixes for the Ticket#2006111616001051 BGP route recalc?

I am dying to get my BGP uplink towards my transit provider to work!!!

darkiesan

2.9.36 was withdrawn from the site due to problems with RB112. They prolly will rerelease it later!

darkiesan

I have a few old Sparc2:s and Sparc5:s at home. Some of them use as ex. Firewall-1:s with multiple ethernet interfaces. MT, how well is you compiling backend built? Can you theoretically also build for sparc assembler so I could get to use my old Sparc "corpses"? Or even more kool, more mo...

darkiesan

Also make sure the syslog server you are runnign accept remote messages. On a Unix they dont by default, needs to be configured.

darkiesan

:LOL:
Should'a saved my old 2.8.x RouterOS:s

Maybe they will become valuable

darkiesan

I checked the Changelog, it didnt say a word about BGP or DNS fixes. I havent tried it. But then again, you withdrew it from your webpage. I tried the update you guys sent me in the form of a routing-test.npk with special build in v.2.9.35. That didn't help. Reported back on that this morning with n...

darkiesan

I managed to download the 2.9.36 before it was withdrawn. Lucky for me that I ain't got no RB112:s in my network!

I look forward to a 2.9.37 that also contains fixes for my DNS and BGP problems

darkiesan

Well. I have registered a but with supout files. SO they should figure it out... I hope... I dont wanna downgrade to an older version since so many other issues have been fixed with OSPF etc...

and none of the fixes in .29 or .28 relates to my problem

darkiesan

Sounds good that you null route the whole prefix. Should handle the IGP synch problem, IF RouterOS does handle it correctly. Could be a bug there. Or a bug in the routing engine in general? I mean since you say it stops announcing the prefix if the OSPF has a recalc and take away the OSPF route for ...

darkiesan

Well I must admit that Quagga (IP infusions freeware) is compelling since it actually works. But I have heard Mikrotik bought IP infusion licenses for OSPF and BGP daemons. So I was kinda hoping they would get it to work. And it is so close... I just want them to figure put why it is sending updates...

darkiesan

Very good. It is very bad practice to EVER redist anything to BGP. As it sounds, Mikrotik is not handling IGP synchronization correctly. A prefix (network or aggregate statement if no redist is taking place) should only be announced via BGP if it exists enough IGP prefixes to cover the whole prefix ...

darkiesan

After further testing my conclusion is that BGP and Mikrotik/RouterOS is not functionable. Normal routing package dont conatain the neccessary tools to policy my routing as I would like to do as an ISP. The routing-test package do contain the right tools, but dont function since it kills my CPU. Any...

darkiesan

Of course SSL traffic can be NAT:ed.
You need a dst-nat entry and a src-nat entry for static NAT to towkr properly.

darkiesan

I am running a BGP test with two routers connected to each other. (RouterOS 2.9.35 and routing-test package). The set up the BGp connection fine and dandy. But it runs BGP route recalc every second for some reason, totally killing the CPU on both routers. It seems to be running the BGP route recalc ...

darkiesan

Are you running redist between bgp and ospf?

Search found 42 matches

Re: SCRIPT: Dual WAN Load Balancing with Fail-over

Re: Inactive default gateway blocks traffic

Re: SCRIPT: Dual WAN Load Balancing with Fail-over

Re: Inactive default gateway blocks traffic

Re: How to get "interface-name" by its' id ?

Re: Performance with Hotspot on Routerboard 1100AH

Re: Radius Attribute - Mikrotik-Rate-Limit

Re: Performance with Hotspot on Routerboard 1100AH

Performance with Hotspot on Routerboard 1100AH

Re: Mikrotik RouterOS not routing PPTP GRE through NAT

Re:

Re: Huawei usb 3g modems (used by vodafone)

Re: Huawei usb 3g modems (used by vodafone)

Re: Huawei usb 3g modems (used by vodafone)

RouterOS on other archs?

BGP route recalc