MikroTik

seriousblack

Hello... I have two routers: (ISP1)PE1 - (ISP2)PE2 connected via BGP. In PE1 (which has a full RT) I have specified (OUT-FILTERS) to only announce block 8.8.8.0/24 to PE2, I(IN-FILTERS) to accept their block 1.1.1.0/24 and discard the rest. Both in and out. NAT is disabled. 1. We have announced one ...

seriousblack

Any update on this?

seriousblack

Any update on this?

We need something better than 1072? or a 1072 with 40G/100G

seriousblack

It seems to be pretty simple. Create an eBGP peering with the cache box using the ASN and IPv4/IPv6 space that Google allocates and then advertise all prefixes for customers that are normally advertised on transit peers. This is the way most content caches work. https://support.google.com/interconn...

seriousblack

I think limiting the clients with the PPPOE usernames limits the clients to the Cap specified on the dynamic Queues by radius both for v4 & v6. Yes, limits have always been working, that is not the problem. The issue is tracking the prefix that the customer receives, which is often a legal requ...

seriousblack

Hello..

I think limiting the clients with the PPPOE usernames limits the clients to the Cap specified on the dynamic Queues by radius both for v4 & v6.

This has worked for me since I rolled out v6. 3 weeks ago. Doing 6.48

seriousblack

Getting an error when trying to update the packages via an IPv6 only connected device.

v6.48

seriousblack

$client = zero_says $wofBIT=$API->comm("/ppp/active/getall", array( ".proplist"=> ".id", "?name" => $client, )); $API->comm("/ppp/active/remove", array( ".id" => $wofBIT[0][".id"], ) ); That works for me

seriousblack

Hello..

Managed to do this ?

seriousblack

Hello..

Using a 1036 with two peers with full tables and some local peers.

Everything seems to be okay. No delays / -ve's

seriousblack

No is the option here?

Had an issue with one provider with two sessions; Local and INt traffic.

Strict limited me much. Setting it to loose solved the issue of the two same asn sessions but limited me on another peer.

Try option No to see how it goes.

seriousblack

asymmetric routing & rp-filter don't go hand-in-hand.

Changing the rp_filter to loose Solved this.

I'll try the No option as another Peer can't seem to follow some traffic engineering rules I set.

seriousblack

Hello..

Anyone?

seriousblack

None aon..

Decided to use Unbound as Mikrotik sorts this.

seriousblack

Kinda..

Radius uses simple queues; default-small - pfifo.

I've tried modifying the Queue size to 2000 and everything's kinda okay mate.

Got a 1072 so RAM's sorted :)

Anyone with a better solution, Shed light ;)

seriousblack

Go to their site fs.com, they'll ask the equipment you'll be using on both ends then advise you accordingly.

Everything works well.

I have used their modules with CCR 1009, 1016, 1036, 1072, CRS 317 & 328.

seriousblack

North America (East Coast) 64:1000 North America (West Coast) 64:2000 Europe 64:3000 Asia 64:4000 Africa 64:5000 What I should prioritize via the local session is 64:5000 The rest should come from the Int Session.

seriousblack

I have prepended the local session. Getting traffic from the international session. I have tried setting a higher loc_pref on their local routes community as tehy suggested; but it seems not to work. What exactly should i tell them to get that working? International routes from the int session and l...

seriousblack

My goal is to get local traffic from the local session & International traffic from the Int session.

Each session should give traffic for the routes it gives us Without affecting the other.

seriousblack

My provider gives be international traffic and local traffic separately via diff BGP sessions. I have one /24 block assigned by AFRINIC. The international session has some routes announced on the local session tagged with a diff community but have very high latency. Tried weight nothing... I have tr...

seriousblack

Currently only the long-term version channel (v6.46.7) has all the necessary fixes for this CVE. We are working on getting them published in stable and testing channels as well. Sorry for any inconvenience.

Thanks.. Let's wait for that.

seriousblack

Update on this CVE-2020-11881

seriousblack

Remember the Error msgs First. I'll help out :)

seriousblack

Very disappointing if this was disclosed to them in April! Luckily SMB is not a feature that should be enabled by most users.

So sad! This' a blow

seriousblack

security@mikrotik.com be like

Hope this wakes them Up!

Considering RPKI isn't in Prod yet ;(

seriousblack

Any progress in patching this Vulnerability?

https://github.com/botlabsDev/CVE-2020-11881

seriousblack

We have a 27km Fiber link. When we use 80km 10g on both sides the link is ok. Hmm. :-) What about using the working 80km cable for the 27km distance? :-) Ok, is a little bit oversized, but hey, it at least works! :-) Are you the project manager? Doing 80km 10g+ SFPs now.. Works fine.. getting FCS e...

seriousblack

Are you using SFP? Is the firmware up to date? Which ROS version?

Using radius for dynamic queues.

Yes. Using 10G+.
Latest routeros

seriousblack

max-concurrent-queries: 1048576 Could it be possible you have incorrectly configured the firewall and your DNS server is open to public? This number ir much higher than you claim you have users. Blocked all requests from my WAN ports. Those are my clients' requests mate. DoH seems not to be stable ...

seriousblack

I recommend LibreNMS. Intelligent Light fast and easy to setup.

seriousblack

I have seen similar but can't narrow it down using 1036 as pppoe Concentrators simple queues setup automatically by radius attributes...

Anyone else seen this

On 6.24 I think

A solution for this ?

seriousblack

Anyone?

seriousblack

Hello Mates, Using a CCR1036-8G-2S+ with 1k+ pppoe sessions who still use it as a DNS server (DoH). I'm getting a dohError.png DoH max concurrent queries reached, query ignored.[/u][/i] Configs: ip dns pr servers: dynamic-servers: use-doh-server: https://dns.google/dns-query verify-doh-cert: yes all...

seriousblack

From My Experience... It cant support that or more 2000 Sessions with firewall + other features enabled.

seriousblack

We have a 27km Fiber link. Routers 1036 1016 & 1009. Switches 317 16+. (2) We have tried 40km Huawei 10G sfps, the power is okay but there is the no link status. We tried a 100km 10g sfp+ plus a 40km, still shows no link but the power is okay. When we use 80km 10g on both sides the link is ok. T...

seriousblack

Experiencing the same..

Anyone got a way to fix it ?

Search found 36 matches

BGP STATIC ROUTE BUG

Re: pool6 refused acquire: bad preferred prefix! (6)

Re: Which types of ports would you like to see for a high speed router

Re: BGP Configuration for Google Global Cache (GGC)

Re: IPv6 Radius Accounting Not Working for PPPOE Clients (Delegated Prefix)

Re: IPv6 Radius Accounting Not Working for PPPOE Clients (Delegated Prefix)

v6.48 IPV6 ONLY PACKAGE UPDATE FAIL

Re: PHP API - Add/Remove/Edit PPP user

Re: BGP Configuration for Google Global Cache (GGC)

Re: Full BGP tables with two upstream ISPs using CHR - Performance question

Re: BGP peering route stall and rpfilter

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Re: DoH max concurrent queries reached

Re: Video Streaming Issue in CCR 1036 Router Board

Re: FS.com BiDi SFPs?

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Re: CVE-2020-11881 PATCH [SOLVED]

Re: v6.47.3 [stable] is released!

Re: RADIUS REJECTING MY DEVICES

Re: CVE-2020-11881 PATCH [SOLVED]

Re: CVE-2020-11881 PATCH [SOLVED]

CVE-2020-11881 PATCH [SOLVED]

Re: SFP+ no link

Re: Video Streaming Issue in CCR 1036 Router Board

Re: DoH max concurrent queries reached

Re: Interfaces monitoring [SOLVED]

Re: Video Streaming Issue in CCR 1036 Router Board

Re: DoH max concurrent queries reached

DoH max concurrent queries reached

Re: CCR 1036- Max number of PPPoE Support

SFP+ no link

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]