MikroTik

natanielklug

Hello!

Yes and no. I have now about 17000 subscribers over PPPoE. All the IPPool is running over a redundant PostgreSQL and the AAA is running over a MaxScale/GaleraCluster MariaDB with 3 hosts. It's working fine but the IPPool is not working over MariaDB.

natanielklug

Whatever the spec you had in mikrotik... when PPPOE request attack happen from multiple devices , it definitely slow the authentication for all other PPPOE clients . :( even you got less than 20% of cpu usage. :? ISP People who told all are fine in Mikrotik PPPOE server means the reason behind it i...

natanielklug

First Scenario: Mikrotik RoS v5.24 over Dell R410 (x86) Sorry to bring up a old post, but how did you manage to install ROS on a R410? We're *seriously* battling. Not detecting disks during boot, tried all the different SATA modes available in the BIOS, with/without RAID controller, etc... Are you ...

natanielklug

Hello max,

If you want to understand better this solution in the future, feel free to contact me.

natanielklug

Hello max, Assuming that I ever had a solution for that (hehehehe)... I solved the problem by using Freeradius with PostgreSQL for the IP Pool and running them with a new tag so my Freeradius can see if a connection is still open for a NAS (I've set up a new column on lippool and radacct tables wher...

natanielklug

Hello all, As I was told by Mikrotik Support this issue was addressed in RoS v6.5. On my stress test over a CCR1016-12G I was able to open 1500 PPPoE Sessions without trouble. As I was testing this new version I made a more stressful test and I send almost 3000 PPPoE Sessions. My CCR crashed on 2400...

natanielklug

Hi there guys, i'm experiencing the same problem on 3 CC36 with RoS 6.2 installed. Any news about this issue? Thank you all in advance! :D Hello Max, Can you enlight us with more information? How many PPPoE Sessions you can achieve before "Running No" became? Is there an ammount of traffi...

natanielklug

One thing you might consider to alleviate the issue, is to stop routing at the edge and backhaul the customers at each location in a VLAN via VPLS to the PPPoE NAS/BRAS. That way you can maintain small routing tables at the edge for MPLS/OSPF and put the larger /32 table in a core router/NAS that h...

natanielklug

Hello Celtic, A couple of things are not fully clear from the diagram. Could you let us know: Which area numbers each router is in including Router 01. In that diagram Border, PPPoE NAS and Router01 are talking OSPF using backbone area (0.0.0.0). Router02 is talking OSPF with Router01 on backbone ar...

natanielklug

Hello all, I am trying to setup an enviroment and it's getting some trouble to understand a simple concept: area range. Let me show what is the scenario: http://i42.tinypic.com/15p30oj.png So as you can see I have a bunch of PPPoE NAS Concentrator wich redistributes a lot of /32 IPs. I can't summari...

natanielklug

I'm also having the same problem, is there any solution?

Hello hbuzatto (ou melhor olá!),

I found a counter solution using PFIFO and Queue Size of 50 packets. It's not a solution but it solved the problem for custormers running speeds of 20/4 Mbps.

natanielklug

It's simple... Just a DEFAULT group with a Auth-Type := Accept. Already implemented over here.

natanielklug

Hello, I am trying to set something up for my scenario. Some customers are trying to connect to my PPPoE NAS (Mikrotik) and they are not allowed by Radius for any reason. What I would like to do is: let this guy in with some specific parameters like a Pool-Name so it get an IP Address for a pool wit...

natanielklug

thanks for attention Does this problem exist in ROS 5.x? I never saw this on RoS v4 or v5. The problem in those version is that you use a high amount of your CPU for the firewall rules - every single PPPoE Session creates a 2 new entries into your firewall to change TCP MSS. In version 6 all sessio...

natanielklug

Hello, My friend this is a problem in version 6 of RouterOS. I first found this on RoS 6.0rc4. The problem is that for OSPF/BGP to redistribute a new route for a PPPoE tunnel it needs the PPPoE tunnel to be "Running": http://img545.imageshack.us/img545/8190/q0iq.png Uploaded with ImageShac...

natanielklug

Hello all, I need help setting up an environment to deliver the best solution to my internal network. Now I have several Freeradius running and all of them are redundant. They use SQL as authentication, authorization and accounting purpose and I am running a SQL IPPool for my NAS. I need sqlippool a...

natanielklug

Hello all, Was there any news on this problem? I am trying to run a HA over my Radius in Mikrotik (running as a PPPoE NAS) but it's sending duplicate accouting to my Radius Server and it's recording duplicate entries in my radacct table. I am trying to change queries inside Radius but it's a hard wo...

natanielklug

Thank you Omid. I will try this 6.2rc1.

natanielklug

People in this post should read this new one:

http://forum.mikrotik.com/viewtopic.php ... 02#p376202

natanielklug

Hello all, I've sent a lot of messages about the PPPoE problem when Mikrotik RoS is running as a NAS. The problem was reported in this post: http://forum.mikrotik.com/viewtopic.php?f=1&t=72044 After the stable connection we made and update over our NAS servers and we have 3 of them: RB1100AH - C...

natanielklug

You need to configure buffered accounting on your FreeRADIUS Server.
It drastically improves the rate at which accounting updates are written to MySQL.

daffster,

I am looking into buffered acct over Freeradius. I had never saw this before. Thank you.

natanielklug

What is the size of your database? It sounds like your hardware should be just fine for this kind of work. Unless the database is massive. We encountered this problem when we had years worth of old accounting records for nothing. Perhaps trim off old records? How many rows and what is the disk size...

natanielklug

Your timeout should be plenty. If it does not interfere with anything else you have running, try 20 minutes on the interim interval. To me, it is better not to get updates as often and freeing up the radius server to handle logins. Sounds like you need more power somewhere. Surfer, The only problem...

natanielklug

Thank you guys. SuferTim, I've already set interim to 10 minutes and timeout to 5 seconds. It's not working fine and I have a lot of slow queue in MySQL and, for so, my customers are not allowed to log in throw PPPoE. boen_robot, I will look into MySQL Cluster. I am not familliar on how to use this ...

natanielklug

Hello all, I own a system that we run Freeradius as AAA for our PPPoE customers. Now we have something about 7000 PPPoE Sessions and MySQL is showing some trouble to run. It's not been able to write down accouting (radacct) in time and this is causing us a lot of problems. I would love to hear from ...

natanielklug

Anytime...

natanielklug

I think this will be my last update in this case: we are nun running for 10 days with 6.0rc14 and no problem found.

The problem about routes was something over the ethernet interface (ether6). Changed to ether13 solved the problem.

natanielklug

+4 from Certto Telecom (Brazil).

MTR on Mikrotik would be a wonderfull tool.

natanielklug

Hello all, Quick update: the problem I run over last week was "solved" by using RB1100AHx2 ethernet port 13 (I was using ethernet port 6). For some reason after a period of time OSPF stop sending information over ether6 (even over vlans runnins over ether6). So now, without any reboot, mac...

natanielklug

A quick update... Going further into the analysis of the problem I found that the 2nd to 3rd day dead line is something true (or not). Look at this screen: http://s12.postimg.org/q4nm01xnt/Ashampoo_Snap_2013_04_25_08h39m01s_001.jpg In this screen you can see many VLAN's as neighbours but at CSC-auth...

natanielklug

And the problems continue... I said my dead line was something between 2nd and 3rd day. The problem is that I got to the company and looking into one of my PPPoE Concentrator I saw that just some customers were there (about 20 customers) and it should have +300 PPPoE Sessions. Looking into logs I fo...

natanielklug

Quick Update:

1d17h running RB1100AHx2 v6.0rc14 no problem found.

PS.:
I had a problem over OSPF where many interfaces got "discarding locally originated packet" and running version 6.0rc14 this message is not showing anymore.

natanielklug

Hello all, Almost 24 hours running v6.0rc14 for tests and, untill now, no reboot from my RB1100AHx2. I am running a PPPoE Concentrator Cluster and for now I have 3 machines (2 RB1100AHx2 and 1 x86 Dell hardware). Just for understanding: CSC-auth-08 = RoS v6.0rc14 CSC-auth-09 = RoS v6.0rc11 CSC-auth-...

natanielklug

Try pre-release 6.0rc14 http://www.mikrotik.com/download/share/ ... .0rc14.zip

*) improved PPPoE interface encapsulation performance;

honzam,

I will try and return in the forum. Thank you.

natanielklug

Hello all, I am running Mikrotik as a PPPoE Concentrator at my network border and I get all customers here using EoIP. I have not noticed any problems regarding EoIP tunnels but I will explain all the problems I got (this all where over RB1100AHx2 hardware): v5.24 (stable) PPPoE got a very strange l...

natanielklug

Hello all, We experienced problems while disabling PPPoE Servers on RB1100AHx2 running v6.0-rc12. I am attaching a autosupout.rif from the episode. After that we downgraded it to v6.0-rc11 but now we have a bunch os stalled admin connections and the CPU load, because of console usage, is going too h...

natanielklug

The color of ethernet cable should be black in the towers and in outside instalations (like subscribers over UTP)... So the laws.

natanielklug

joshaven, In Brazil it's not legal to have your authentication over the last mile. It has to be in your border. That's a strange law but we have to be in the law... For the routing and IP distribution we use FreeRadius + PostgreSQL + Ippool... It's awsome and distribute the IP over the network very ...

natanielklug

joshaven,

It's really amazing the trick configuration for this setup but we already have a balance using EoIP and the bridge is only in the remote equipment, where our subscribers are connected. Thank you for your help. I will try to understand better this option and see if this is useful here.

natanielklug

Hello all, I am trying to run a PPPoE Concentrator over Mikrotik and I am running over several problems. I am using Mikrotik as PPPoE Concentrator for 8 years, at least, and now as my network grow it is going to a leak. I will explain the scenario and all things I already done: First Scenario: Mikro...

natanielklug

Xeon 3060 on Supermicro motherboard with integrated dual intel nics.

Thank you.

natanielklug

Run over 1000 on x86 dual core. No issues. Hello hci, Can you provide me a more accurate info about the machine? Like: [admin@CSC-auth-12] > system resource print uptime: 20h12m54s version: 5.22 free-memory: 1846632KiB total-memory: 1943428KiB cpu: Intel(R) cpu-count: 2 cpu-frequency: 2133MHz cpu-l...

natanielklug

I have exact same issue, with 3500 PPPOE sessions, and 300/s incoming bad requests (wrong credentials, expired, etc) my radius server going to explode soon! that's amazing 5 years of topic start and no answered yet Hello shap, I would love to know how are you rinning 3,5k PPPoE sessions over Mikrot...

natanielklug

No reply? Not even from Mikrotik?

natanielklug

Hello all, I am running a network with many fiber optic connections and I wish to run PPPoE server to make my AAA. The problem is that for conections over 2,5 Mbps I can't deliver the full bandwidth to the client. I made some testes running this configuration over FreeRadius: Mikrotik-Rate-Limit = 2...

natanielklug

Hello all, I am trying to setup a network in an ISP. This network requires that I deliver more than 2,5 Mbps over a PPPoE connection to our clients. The problem is in my tests I am not beeing able to provide more than 3,2 Mbps in TCP traffic. I tryed to change the kind and specifications of queue ty...

natanielklug

I think you had OSPF misconfigured. I have the setup you are looking for and it balances 50% of the traffic to each of 2 sets of radios. I have a router on each end of the link setup with OSPF and 2 sets of wireless backhauls connected to each router. I am acheiving nearly 200megs between the 2 rad...

natanielklug

Hello Simon,

Thank you for your comments. I think this should be something about Mangle Firewall Rules. I can do it. I am not sure I got the script but I will try to understand that and I will make something in my lab first. Thank you again.

natanielklug

Hello all, I am trying to build a setup where I can use 2 radios in both ends and aggregate this links so I can put some more traffic in the network. I've been trying some solutions but none worked as I want. This is my configuration: (sideA) - (radio.ptp.A.1) <> (radio.ptp.A.2) - (sideB) - (radio.p...

natanielklug

Hello Cha0s,

I managed to solve the problem running The Dude on a MS Windows Machine. Now it's working fine even thou I still need to restart the service at least once a day so the SNMP oids work again... Dude is problematic but it's the best free tool we have.

natanielklug

This is a known problem and many requests have been made to have it fixed, my only suggestion is to email support... Thank you lebowski... I was reading some of the posts and the best suggestion was to use The Dude server as a Windows Service. As I have a Windows 2008 Server I am running a new copy...

natanielklug

Hello all, I am seeing a problem running The Dude (both v3.6 or v4.0beta3) when I try to export the configuration. First I noticed the problem when running v3.6 over a x86 box with a level 3 license (RouterOS). I made some maps and I tried to export and lost the connection to Dude and, the worst par...

natanielklug

Hello all, I am having a similar problem. I was using The dude v4.0beta3 and I had some problems with "invalid OiD" in most of the SNMP communications even getting all the information I need throw SNMP Walk. So I decided to test the v3.6 of The Dude and it is now working fine for most of t...

natanielklug

Upgrade the box to ver5 and check the licence. If you have the 24hours trial licence then buy a new licence based on the ver5 soft ID.

Thanks everyone that helped. I updade the box to version 4.17 and them to 5.7 and that's working fine.

Att,

Nataniel Klug

natanielklug

Hi, You can not upgarde to V5.x for more info visit http://wiki.mikrotik.com/wiki/Manual:License It describe clearly. Sade, As I said in my message I KNOW that I cant upgrade WITHOUT paying for that. The question is: can I buy a new license over the same license ID? I dont mind to pay again. I just...

natanielklug

Hello all,

I have a very old machine that runs Mikrotik since version 2.7 I think. This machine is running, now, v3.30 and I can updade it to v4.17 but I need to use some new functions that are just inside v5.x.

How can I updade it? I should buy a new license? How can I work this out?

natanielklug

Hello everyone, I am having some troubles configuring a network using OSPF and failover in my network. The picture attached bellow show the exact configuration of my network (in this picture I am using fake IPs): http://img51.imageshack.us/img51/1483/desenho1s.th.png Uploaded with ImageShack.us The ...

natanielklug

Hello guy, Here I am again. I am trying to configure this sumarize but I am still having trouble to make this happens in the final router. My layout for testing purposes is like this: R01 br_ether1 - 172.16.0.1/30 area: backbone (0.0.0.0) R02 br_ether1 - 172.16.0.2/30 area: backbone (0.0.0.0) br_eth...

natanielklug

Set up all ppp in different ospf area nad use ospf area-range to aggregate /32 routes

Hello mrz,

Please can you be more specifc? How can I setup each ppp in different ospf area if they are client connection? I use Mikrotik as PPPoE server for my clients...

natanielklug

Thank you all for the replies about sumaryzation. I did not know what term to use and could not find... This will help me a lot. Thanks all!

natanielklug

Hello all, I am trying to use OSPF to forward some route from my PPPoE Mikrotik NAS Server. The problem is that OSPF get every single PPPoE connection and create a new forward so, the routing tables, get bigger then necessary. How can I use OSPF over PPPoE tunnels but just forwarding the network tha...

natanielklug

What version of ROS are you running? Have you tested the RAM (memtest?)? Does it run other apps properly (e.g. can you boot off a live CD and does it stay running)? How often does it reboot? What is the router configured to do? How many users/connections does it have? 1) It was running v3.27. I try...

natanielklug

Hello all, I am with a big problem. I have this box that do PPPoE conections for my clients. This is it's resources: [admin@auth] > /system resource print uptime: 17h23m34s version: "3.27" free-memory: 1908564kB total-memory: 1946132kB cpu: "Pentium(R)" cpu-count: 1 cpu-frequency...

natanielklug

Hello all, I am having a problem that I don't know how to solve. I have a network where all client stations are dumb terminals that connect to a desktop server (Windows 2003). This RDP server has access to the internet. My client want's that some users in this RDP server have or not access to intern...

natanielklug

Hello all, I am having the same isue as posted but with some different layout. AP: Mikrotik RouterBoard RB433AH with ROS 3.20 level 5 (mode ap-bridge with dynamic wds, wpa2 enabled, mac authentication using radius) Client WDS: Ubiquiti NS5 v3.3.1 When I made tests using this both I put security wpa2...

natanielklug

Hello all, I am having a serius problem. I have a Mikrotik RouterOS box that runs v3.10. It has 4 wireless interfaces running on 2.4 Ghz, 802.11b, to serve my clients with broadband. This wireless nics are connected into 12 dBi, 90 degres, sector panel antennas one to each side of my tower. They are...

natanielklug

Did you fix this yet? BTW have you tried just making one simple queue at one interface? (intead of 2 rules) Like queue>general>max TX>6M and max RX>6M then on advanced interface> xxxx It's what I use and it works fine.... Jorge Dear Jorge, I did not fixed it and I have quite on trying this. Yes. I ...

natanielklug

Target address means your local addresses not destination throughout internet. Faton, This is the same problem. I have 12 networks that will pass throu this router. I need to make QoS based on ports or protocolos (layer7). PS.: I already quite from trying mikrotik for this. I will make this QoS ser...

natanielklug

Check for errors on interfaces, and do you by any chance have TC applied in the Linux. Regards. Faton Dear Faton, I already have checked errors... None. There is no TC in Linux becouse if I disable queue into Mikrotik I get about 20 Mbps upload + 30 Mbps download at the same time. This is the bandw...

natanielklug

Please... Anyone?! Some help needed!

natanielklug

try with queue type set ethernet-default pfifo-limit=4294967295 queue type set default pfifo-limit=4294967295 And set your Interface queue to be default or ethernet-default and reply me if it works , tnks in advice! Not a chance. It has the same result as before... :( When I am trying to upload and...

natanielklug

Hello all, I am still having problems with Mikrotik used as router (just betwen my backbone, that cames from a Telco, and my internal network). My layout is just like this: http://img224.imageshack.us/img224/6266/networklayoutwo4.png Let me explain about the enviroment: Internet: this is, for my tes...

natanielklug

something isnt right. cpu should be loaded more when using bridge, not less. Bad cabling possibly ? is this a clean install with only ip addreses on interfaces and no filters, etc? you should be able to get almost full throughput on a wired connection I think. Dear ChangeIP, I have made cables usin...

natanielklug

Well, the RB150 is probably the problem. I've never used a 150 before, but the CPU is fairly slow, and just running the bandwidth test eats up a lot of the CPU. My friend, I don't think this is the answer. Even if I put the RB150 in bridge mode (no interference at all) it still gets only 20 Mbps. C...

natanielklug

Hello all, I am doing some tests and, as a result, I get something anoying. I have this layout for tests: linux.box.server <> mikrotik 3.7 (rb150) <> my.laptop <> equal to cross-over ethernet cable There is no MASQUERADE. I have a route in linux box that points to the network where my laptop is... S...

natanielklug

Hi, this problem was reported on PPPoE poor performance topic and Mikrotik team is working to solve it. We are waiting for version 3.7 for the fix.

I could not find this topic. Can you send me a link to that?

natanielklug

Hello all, Today I received an information that when a client connect/disconnect into Mikrotik PPPoE Server the other clients gets a package loss. I have made some tests and this is correct. Let me explain what I have done: 1) I have a full PPPoE Server running with an average user connect about 100...

natanielklug

Hello all, I have a question that fits best into routerboard.com fórum but this is not working for new users so I decided to post here. The question is about the hardware itself. I have a small ISP and I am working with 8 Mbps frame-relay backbone (that comes from a telco). Now I have a fiber caming...

natanielklug

Hello all, I am trying to make a simple queue work and I am having no sucess. The topology is like this: - I have 3 network cards: "wan", "lab" and "adm" - The interface named "wan" get the link from the isp - The interfaces "lab" and "adm"...

natanielklug

Check for setting for Simultaneous-Use in /etc/raddb/users. There is where you can set Simultaneous-Use setting. Otherwise, you might want to check freeradius's site... http://wiki.freeradius.org/Main_Page Matt, Simultaneous-Use is working fine. The problem is that when my NAS reboots (without prop...

natanielklug

no idle-timeout ? or keep-alive ? Dear omega-00, Can you explain what is idle-timeout and keep-alive? I know that Freeradius uses checkrad to verify if a user is still connected to a NAS but, checkrad will only work in some NAS (livingstons, cisco, etc). As you can see Mikrotik é set as "other...

natanielklug

Hello all, I am having a problem concerning Mikrotik RouterOS. I have to authenticate my clients over a FreeRadius server. This server has Simultaneous-Use set to 1. The problem is that when my mikrotik pppoe nas reboots (like energy drop or something like that) this do not send ANY information abou...

natanielklug

you can give keep alive timeout to your clients in radreply table. nk neeraj_k, I user radius in text mode (I am just already migrating my system to a new MySQL based radius, but it will last a little bit more time). You mean that I can put a timeout condition in radius? Into /etc/raddb/users I hav...

natanielklug

Hello all, I have a small WISP and I am using PPPoE (Mikrotik) and a CentOS v4.4 FreeRadius server. All my PPPoE concentrators are in the same networks as my FreeRadius server (so the latency betwen than are less than 20ms). The problem occur when a PPPoE client just turn off the computer and, when ...

natanielklug

It's just simple noise problem, it's very hard to resolve that. When I can't resolve noise issues I just replace atheros with prism and my problems are gone. It is true that atheros have better performance, but when it comes to noise and "dirty" enviroment it's performance is disaster. If...

natanielklug

well, what about frequency ?

Only 802.11b at 2.4 Ghz.

natanielklug

check cables , antennas .
type of cables is very important ,
copper or silver .

Hi skynoc,

I am using about 12~16 mt of RGC213. Client signal is ok (I only let a client to enter my network if its SNR is over 20 dB so, this way, I can make a little QoS into signal side).

natanielklug

cmacneil, Unfurtunately here, in Brazil, omni antennas are not allowed to use (there is only one kind that is too much expensive). Besides that I dont think one only omni could handle more tham 200 clients... This is my case. So I have to usee more setorial panels to have this much clients. Dependin...

natanielklug

Hello all, I am having a problem that I could read in many other posts is about the same (high ping) but I have another question that is making me nervous: my wireless clients are getting disconnected from a wireless network (mikrotik) without a reason and, when they try to come back, the wireless n...

natanielklug

What solution make the difference for you: separete the hardware in two, or change the channel? How many clients do you have simultaneous in each antenna? Because my hardware in city 2, have only two PCI cards, two antennas, in this time, I'm having a lot of problem with ping timeout... if I disabl...

natanielklug

I'm in Brazil too... and I'm having the same problem, some times works fine, but some times (about 12:00 - 16:00) the ping goes to 900ms, and a lot of timeouts... I'm using regular PC (P4 1.7GHz, 256MB) with 4 DLink AG530, one in 5.8 for link and 3 in ap-bridge (setorial antenna 17db 90º hyperlink)...

natanielklug

Then best results you should get setting channels like: http://www.extremetech.com/article2/0,1 ... 281,00.asp

yancho,

Thank you for that information. I will try this line of arrangement.

natanielklug

elj03 and elj04 has the same frequency, try change frequency to 2412, 2432, 2452, 2472

yancho,

As I am in Brazil (and it uses the same rule as FCC) I can only use channels from 2412 to 2462. This way I can not use 2472.

natanielklug

Hy, try to (temporarely) disable "elj01" and "elj03", and look if performance goes better (latency, throughput,ecc...). If yes (as i suppose), you need to buy another MT routerboard, and leave "elj01" and "elj03" on the first board, place "elj02" an...

natanielklug

Hello all, This is my first post to this forum and I need a help to make a quality connection for my clients. I ma using Mikrotik with Atheros AR5212 based PCI cards. I only use 802.11b and the cards are set like this: [admin@mk.elj.cnett.com.br] > /interface wireless print Flags: X - disabled, R - ...

Search found 95 matches