MikroTik

Rfulton

same issue here, 13 RS ;;; LivingRoom name="ether11-LivingRoom" driver-rx-byte=724 719 959 657 driver-rx-packet=567 322 636 driver-tx-byte=281 251 050 275 driver-tx-packet=289 718 722 rx-bytes=727 007 009 723 rx-too-short=0 rx-too-long=0 rx-unicast=567 289 029 rx-broadcast=27 213 rx-pause=...

Rfulton

If i hook two computers to the ccr2004 and do an iperf i get literally 5-10 out of order packets in a 10 second iperf test. If i test between the ccr2116 the same method i get the same. If i test from a computer hooked to ccr2116 and iperf to a computer hooked to the ccr2004 i get massive out of ord...

Rfulton

Hello, Doing a few iperf tests through my equipment. I get tons of out of order packets doing iperf from Computer => ccr2116 =>ccr2004 => to another computer if i test Computer => ccr2116 => computer I get no out of order packets if i do Computer =>ccr2004 => computer I get no out of order packets I...

Rfulton

Rfulton

Rfulton

Where is Janis? Hes on lunch maybe?

Rfulton

Right now I'm just pretending eth1 is the provider networking and doing svlan2100 (outer) and cvlan20(inner) and just trying to make that work first.

They are directly connected.

Rfulton

A computer hooked to either Tik on ethernet2 can reach the default gateway (main-vlan20) and login to winbox

Rfulton

Mac-telnet and Mac-ping do not work.

Very weird.

Rfulton

" 21:51:19 and 21:51:46 (time span of 27 seconds) while pcapB.pcap fiel shows times between 22:13:40 and 22:14:18 (time span of 38 seconds)."

NTP is off on the devices since they don't have network connectivity. good find at least.

Rfulton

I'm still not getting network connectivity though. something is not working as intended i believe.

I can get more pcaps for you, but they were running at the same time perhaps not the same length of time.

Rfulton

Anyone else want to try and load the config and take a look?

I swear this should work with vlan2100 tagged as 20 in bridge>vlan.

It works when you tag vlan2100-QinQ20 as 20 in bridge>vlan, but this results in a double stack of cvlan.

Rfulton

These are lined up, check this.

Pcap3.7z

Rfulton

Here's some more though.

Pcap2.7z

Rfulton

Look above. I must have uploaded during your reply.

Rfulton

I made the suggestion again either way to show pcaps and config.

tag20vlan2100.7z

Rfulton

"I'm pretty sure that if they were both correctly configured (so that they would work with single CVID), then everything would work as well." Wow amazing analysis. Turns out though no other configuration works. Let me clarify for the third time. TAGGED VLAN 20 down VLAN2100-QinQ works Unta...

Rfulton

Hello,

The provider does require an s-vlan across their network.

Attached is the packet captures when its working.

Rfulton

Let me clarify, I also set pvid to 20 on vlan2100-QinQ20 and set it to untagged in bridge > vlan and the headers are correct but it doesn't work either.

only the tagged vlan2100-QinQ20 works, but gives me svlan 2100, cvlan 20, cvlan 20.

Rfulton

I did set pvid to 1 on vlan2100-QinQ20 which results in unchanged behavior.

"instead you could use eth1-vlan2100 as bridge port, tagged with VID 20."

I did do this, which gives you the correct headers but doesn't work.

Any ideas?

Rfulton

Like the subject says. I have one cvlan Vlan20 and one svlan 2100(outer) https://imgur.com/a/DBcuEu8 https://imgur.com/a/DBcuEu8 Vlan 20 gives out 192.168.20.x at both locations (no overlap) The currently uploaded config works, but I'm seeing 1svlan and 2cvlans come across the provider network. If I...

Rfulton

Same issue on restart.
Wireguard won't initiate unless disable and re-enable the peer.

Rfulton

if you are unhappy you can buy diffrent brand :) hihi

>don't like society? make your own!

Why does society tolerate people like this?

Rfulton

Running on CCR2004

Rfulton

I've read about 20 different threads on this subject, some people say you can't use HTB with Cake, some say you can. Some are telling me you can only use Cake as an interface queue with the built in Shaper. I want to know is, Can you use HTB with Cake, if you can, is it even worth it? Does cake work...

Rfulton

I have lost track... can an interface queue also shape inbound?

Seems to be egress only.

Rfulton

It's clear the developers for Mikrotik and CAKE refuse to communicate, and I can kinda tell who's end it's on.

Reminds me of PFSENSE and wireguard where they both got so mad at each other they made entire blogs telling each other how wrong they were lmao.

Rfulton

Looks like it's back to TP-Link

Rfulton

Hi! Can somebody take a look at my CAKE config and tell me if there's anything I can do to get as close to line-speed as possible. Some background: Zen VDSL2 connection (80/20) into Vigor 130 modem (VLAN 101); PPPoE connection established via RB4011 on ether1. Jumbo packets enabled (ether1 MTU 1508...

Rfulton

What are you talking about? It's been working over here just fine?

A developer is me. Things were looking good.

Then maybe you should read the latest patch notes?

Rfulton

!) queue - do not allow using CAKE type in simple and tree setups (already configured queues will be disabled);

Cake confirmed dead for Mikrotik.

I assume Mikrotik has never tried to contact the developer?

Rfulton

the cake was a lie all along bros....

Rfulton

CAKE type was always meant only for interface queue, it had no effect when used in simple queue.

so my queue trees are worthless? I can only use cake with interface queue? is it always going to be like this?

Rfulton

!) queue - do not allow using CAKE type in simple and tree setups (already configured queues will be disabled);

WTFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Rfulton

No, still not working.

Interfaces exist for a couple minutes after bootup but then disappear and cannot bring them back without another reboot.

Rfulton

PIM-SM still broken.

Rfulton

The on brand Copper 1gb SFP work from mikrotik.

Working.PNG

The Cisco AFP are not working.

not working.PNG

Even if i force non negotiate and set manually it does not receive any packets, only sends.

Rfulton

PIM-SM still not working on CCR2004-1G-12S+2XS

Rfulton

Not working still. FBI has been notified.

Rfulton

7.2 on CCR2004-1G-12S+2XS

PIM-SM still does not work.

I will be submitting an FBI tip.

Rfulton

Maybe not so stable from invasion like I first speculated. I wonder if ruskis would fix PIM first?

Rfulton

PIM on ccr2004 still not working. no interface shows up as dynamic after making template.

Rfulton

still not working in 7.1.3

Rfulton

When I do a packet capture on the CCR2004 *BEFORE NAT*

I can see 10 requests for purple.com on both the 9200 and ccr2004.

It appears to be an intermittent issue with NAT

Rfulton

Here's the captures, my cisco 9200 gets 100% of the DNS requests on the packet capture.

The ccr2004 only services about 25% of them i can tell in the packet capture.

0x0072 was serviced,
0x0073-77 wasn't
0x0078 was serviced

Rfulton

I disabled IPV6 for testing.

Rfulton

The requests reach the adguard 100% of the time. the response reaches the client maybe 25% of the time. Let me actually correct this, It's only NATing to the Adguard around 25% of the time. If i do a packet capture with these parameters. I can see the successes. On the failures I have no entry from...

Rfulton

Sob, you have a great point. I've tracked it back to the CCR2004 which is why I've made this forum post.

If it was having issues on my cisco 9200, I'd be on the cisco forums and not here.

Rfulton

Atom 270N does not work Hairpin Nat Broken. It definitely would help if you provide more details to describe problems. Do you ask your doctor for help saying "I'm feeling ill"? :) I typically only report problems anymore because I'm around 0-10 of getting a fix, but here is the forum post...

Rfulton

The requests reach the adguard 100% of the time.

the response reaches the client maybe 25% of the time.

Rfulton

Hairpin Nat Broken.

Rfulton

# jan/06/2022 13:54:52 by RouterOS 7.1.1 # software id = BB3F-L5VJ # # model = CCR2004-1G-12S+2XS # serial number = D4F10D99618F /interface bridge add name=VPN-Bridge /interface ethernet set [ find default-name=sfp-sfpplus12 ] name=SFP12-WAN set [ find default-name=sfp-sfpplus1 ] advertise=\ 10M-ha...

Rfulton

Could you please point out the rule that is having the issue? # serial number = D4F10D99618F /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN /ip firewall nat add action=dst-nat chain=dstnat comment=Plex dst-port...

Rfulton

Forgot to attach image

Rfulton

Having an issue where my DNS redirection isn’t working correctly. my client at 192.168.91.5 asks for a dns request from 1.1.1.1 when it finally reaches 192.168.255.1 (ccr2004) it should be DST-NAT to the adguard server at 192.168.90.38. The rules should be correct, when it comes in from anything !Ad...

Rfulton

OSPF 100% broken after update.

Not seeing neighbors anymore.

Rfulton

No it's not working.

Frankly at this point stable probably means "stable from invasion from Russia" Hopefully Putin can change management when he finally invades this failed former soviet state.

Rfulton

PIM-SM interface not showing up on CCR2004. Works fine on 4011. _________________________________________________________________ [admin@MikroTik] /routing/pimsm> export # dec/03/2021 10:06:09 by RouterOS 7.1rc7 # software id = S813-IYL4 # # model = RB4011iGS+ # serial number = D1270BEDA968 /routing...

Rfulton

I've worried, for example, that BQL support didn't make several mikrotik device drivers, and thus running fq_codel or cake at line rate (which is way less cpu intensive than shaping) won't work as well as it could. Do you think it will ever be fixed? Is it possible someone can translate your fixes ...

Rfulton

I want to get as much of this in writing as I can. Just to clarify, you claim that the CCR2004, which was built FOR ROS7 which all 25, and 10gb SFP+ ports, can't to 2gb because of route caching, something that you didn't expect to exist on ROS7. To be clear, my ccr2004 won't reach 2gb without Cake, ...

Rfulton

Just like the title says.

900mbps on ros6 ~5-10% cpu usage.

Same config on ros7 ~35% cpu usage.

With Cake I'm at ~60% cpu usage.

Can we expect improvements in the future? Or will I need a more powerful model to get 2gb consistently with Cake.

Rfulton

Ive reported IPV6 connection tracking being broken with queues for a long time now.

They repeatedly told me they can't recreate the issue, buy a TP-Link instead.

Rfulton

CCR2004 rebooted after 8 days of uptime. It's over.

I've contacted my bank to conduct a chargeback on my purchase. I'm not paying for shipping.

Rfulton

Rfulton, what do you expect from us on the forum? Nobody here can help you - please create a supout.rif after the crash and send it to support.

Ain't that the absolute 100% truth. Nobody can fix my kernal panics or it would be fixed already.

Rfulton

KERNAL panic after 3 days on rc2. ccr2004. no i won't log a ticket

Rfulton

CCR2004 Still crashes when a cap tries to register, but not provision. I want a formal apology. Currently there are no known issues with CAPsMAN in v7. Please open a formal bug report through support@mikrotik.com "Currently there are no known issues with CAPsMAN in v7." I just found it, a...

Rfulton

CCR2004 Still crashes when a cap tries to register, but not provision.

I want a formal apology.

Rfulton

Does CCR2004 still crash using capsman?

I will ask daily, no worries.

Rfulton

"?" has been replaced by F1
Hi Raimonds,

Why was this changed?

My first guess based on history is change quotas. ROS7 is the star citizen of networking.

Rfulton

Does CCR2004 still crash using capsman?

Rfulton

Will wifiwave2 ever be supported via capsman? Running it on my Audience and the speeds are awesome in comparison to regular wireless, but missing capsman.

capsman doesn't work at all in ros7 so it might be a long while.

Rfulton

I don't think any of "stable" let alone "long-term" releases ever had any CLI-only item.
https://mikrotik.com/download/changelogs
Stable > Expand > Search "CLI Only"
Screenshot_3.png

You didn't have to embarrass him in front of everyone, but I'm glad you did.

Rfulton

"Only available from commandline" has been around for years. It's not v7 specific.

You think they would have fixed it for V7. I don't have to jump out of ASDM for cisco just to manage my ASA.

Rfulton

So people that get RC2 early will have to update to RC2?

There will be two different RC2 floating around with the same version number? Are you sure you are making sense?

Rfulton

why isn't RC2 posted on the main page so we can tear it apart?

Rfulton

Can someone confirm enabling capsman does not cause it to crash on ccr2004?

You don't have to configure it whatsoever, simply enabling capsman on ccr2004 rc1 causes it to reboot every minute or so.

Rfulton

Is the CCR2004 stable on RC2?

Does capsman work?

Rfulton

You are welcome for Alpha testing this new product, when can we expect the Beta version?

Rfulton

Creating a new WIFI Wave 2 interface and assigning the same country code as the physical interfaces reports "Country not allowed"

I cannot create a sub interface whatsoever.

Rfulton

CCR2004 rebooted after 12 hours.

Reverting back to stable.

Rfulton

Wave 2 on audience can't do vlan tagging. srsly.....

Rfulton

capsman crashes immediately on ccr2004

Rfulton

Can someone confirm that GRE Keepalive timers are working?

Rfulton

Might have resolved it, you might have to use passthrough on the connection mark so it will get to the packet mark.

Rfulton

Removed

Rfulton

Anyone who has some problems with OSPF please contact support with attached supout files and brief description on what exactly is not working. "OSPF not work" doesn't help much.

So they can tell you "Sorry works on my machine" lmao alright fam.

Rfulton

OSPF doesn't work on CCR2004.

Simple queues targeting an interface makes all ipv6 traffic marked as invalid in firewall filter.

Rfulton

My issue was resolved by disabling queues that target 0.0.0.0/0.

Rfulton

Can you post the rules? Ive seen 3 others post about ipv6 connection tracking being broken. Another one is in this exact same thread. Hi, you can get the rules from your own device easily: /system default-configuration print Make sure your window is wide enough first or the ends of the lines will b...

Rfulton

It appears IPV6 connection tracking does not work on 7.5Beta5? It works fine for me, but I am using the factory default MikroTik IPv6 firewall config and not the one from help.mikrotik.com that you pasted. Can you post the rules? Ive seen 3 others post about ipv6 connection tracking being broken. A...

Rfulton

It appears IPV6 connection tracking does not work on 7.5Beta5?

Rfulton

Using the rules from
https://help.mikrotik.com/docs/display/ ... d+Firewall

IPV6 connectivity fails across the board.

https://www.ipvoid.com/ipv6-ping-test/

https://test-ipv6.com/

Rfulton

My drop invalid rule is dropping pings on the return from internal on IPV6 Drop Invalid forward: in:UplinkToCisco-LAN out:ETH1-WAN, src-mac 7c:21:0e:d9:cc:c0, proto ICMP (type 129, code 0), 2600:ccc0->2604:2001, len 64 9 ;;; defconf: drop invalid chain=forward action=drop connection-state=invalid lo...

Rfulton

Fix GRE keepalive please.

Rfulton

Is there no way to redistribute default route 0.0.0.0/0 to WAN using new OSPF? my other routers aren't getting it.

Rfulton

on my 4011, it's stuck "calculating download size"

https://imgur.com/a/uO2Oaju

Rfulton

"If you want anyone to learn a lesson or something, you should probably direct this to someone from MikroTik" Let's be serious, of course I want them to learn a lesson, the same lesson I want my dog to learn when I leave steaks on the floor and he eats them when he shouldn't. Do you think ...

Rfulton

Yall have me so impressed with your support, I went ahead and bought 153k worth of cisco devices https://imgur.com/a/AXtvX44 Comes with 3 year good support :) https://imgur.com/a/lOPPDwC Maybe next year mikro-whatever. Also, if you manage to get routerOS install on an X86 without a cd-rom, please sh...

Rfulton

Daily bump.

Rfulton

I made the common name the WAN address of the OVPN as well. I've spent roughly 4 hours doing every variation of tutorial and option. https://www.youtube.com/watch?v=LxxF7YFL3Ds https://www.youtube.com/watch?v=ssrRrY8bDiA https://www.medo64.com/2016/12/simple-openvpn-server-on-mikrotik/ https://suppo...

Rfulton

Hello, I'm having an issue where I'm using a Mikrotik Device as an OVPN Server https://imgur.com/a/wbJU0xf The CA certificate(CA CRL host as WAN IP) and the Client Certificate(with password) was exported, and then imported into a Mikrotik device to be the OVPN Client. https://imgur.com/HFw7ZG0 Any h...

Rfulton

Here's what my LSA with the Pfsense over GRE looks like. instance=default area=backbone type=router id=3.3.3.3 originator=3.3.3.3 sequence-number=0x8000003D age=289 checksum=0x6872 options="E" body= flags=EXTERNAL link-type=Point-To-Point id=1.1.1.1 data=0.0.0.16 metric=10 link-type=Stub i...

Rfulton

Hello, I have a GRE tunnel build with a pfsense box across a wan link, That is working great. When setting up OSPF between the two, I get a dynamic link as such. 1 D interface=GRE cost=10 priority=1 authentication=none authentication-key="" authentication-key-id=1 network-type=point-to-poi...

Rfulton

Yes, it works on every other computer. Client worked after a reformat. Not even reinstalling the WAN L2TP adapter fixed it.

Thanks for the look though.

Rfulton

Most likely a broken l2tp in windows installation.

I installed checkpoint ssl vpn client and it hasn't worked since, even after uninstall. Lesson learned!

Rfulton

Getting this when authenticating, works on every other computer but a single one.

Error logs not showing a whole lot, or I can't interpret them good enough.

Not sure where to go from here to be honest.

Rfulton

nah doesn't work.

I literally removed eth5 from the bridge.

I simple create a new vlan interface on eth 5.

I assign the addresses and the dhcp server to the vlan interface on eth5,

It just gives no ip address whatsoever.

Rfulton

So keep the ethernet 5 interface,

Make a vlan on it,

then remove the port from all bridges?

That should be all it takes besides assigning address and DHCP to the new vlan interface?

Rfulton

I just want any traffic on port 5 to get a vlan tag of 500.

I also want my DHCP to assign addresses based on that VLAN tag as well.

No luck in implementing it though.

Rfulton

Scoured the internet 3 days on this. I literally just want to setup a vlan on a single port on my Hex router. Diagram as follow Modem -----------RD750GR3 Port 1 off router = WAN Port 2 = Switch Port 5 = Port i want a vlan of 500, from what i understand this is a vlan access port where all traffic is...

Rfulton

"Make sure your port forward/dstnat does NOT use an in-interface filter from WAN otherwise hairpin will not work as you are comming from bridge-local (or whatever your LAN is)."

For anyone wondering what the issue was.

Rfulton

Hello, before I send my mikrotik back i wanted to consult the forums one last time. I can access my terraria server externally using my domain name and the port. 5 ;;; Hairpin Terraria chain=srcnat action=masquerade protocol=tcp src-address=192.168.1.0/24 dst-address=192.168.1.100 dst-address-type=l...

Search found 112 matches