MikroTik

elbob2002

Very interesting!

Mine has been behaving itself with all recent updates.. The nosiest things in my room now are a couple of HP Proliants. Not much I can do about them though!

elbob2002

I still consider 7.x as a pre-Beta as it just reboots you touch someting that is untouchable. You only will know it was untouchable because, after the reboot the change was lost. I went back to a stable Beta within minutes after walking into reboot walls. Yeah. I wasn't expecting too much but I fou...

elbob2002

Upgraded my RB3011 this morning to 7.1beta 2. I reset the router before upgrading and only configured it with a WAN connection to upgrade to Beta2. Upgrade seemed to go okay so I set about configuring it correctly. First issue was renaming an interface (ether1 renamed to WAN) would result in a reboo...

elbob2002

Hey - Could I ask how you accessed those graphs ? Is it within the RouterOS Software or some other 3rd party?

Sure - I'm using LibreNMS. SNMP monitoring of RouterOS.

Unfortunately if you're using SwOS then SNMP is quite a bit neutered.

elbob2002

Then you as a customer, together with other customers, should say "no" and demand IPv6, or you'll go elsewhere. The tricky part is how to increase your numbers above around five people. And then there's the tough decision, if you're really prepared to live without internet, when ISP also says "no"....

elbob2002

What make are your physical NICs? There are severe issues with some Intel NICs with some Linux Kernels. Specifically Intel i218/i219 using the e1000 driver in kernels from 4.15 https://github.com/torvalds/linux/commit/b10effb92e272051dd1ec0d7be56bf9ca85ab927 you can turn off TCP segmentation offload...

elbob2002

I don't know many routers that can route at the speed of all ports combined, so this CCR2004 is no exception. In most situations this is not a problem. Indeed but if there's intense traffic across 4 interfaces could completely choke up the router. Tile CCRs while only 1Gb can router wirespeed acros...

elbob2002

CCR is a router without a switch chip so switching performance would be terrible as it's not designed to be a switch. CRS is a switch and has terrible routing performance as the CPU, while fine for managing a switch is not really suited for routing. I believe the hardware acceleration you're referri...

elbob2002

Looking at the CCR2004-1G-12S+2XS. So it has 12 SFP+ ports and 2 25G SFP 28 ports. However looking at the block diagram there's a PIPE connecting to the CPU with 2 x 25G for a total of 50G throughput. Does this mean it has a maximum throughput of 50Gb? The test results show routing with fastpath at ...

elbob2002

Free tier does not need any kind of activation or renewal. Trial mode of any paid tier lasts for 60 days. And even after that it will still let you log in. So your problem has nothing to do with CHR licensing. You are wrong. 60 day trial requires an account on Mikrotik.com and you need to login to ...

elbob2002

I believe you have to activate them. Once they evaluation period lapses they enter the "free tier"

You won't be able to update them though.

However you should still be able to access them sa I believe if they haven't been activated they revert to a 1Mb limit on the interfaces.

elbob2002

Your license is probably restricting you.

While with a P10 license will restrict you to 10Gb per interface this probably includes your LAG interface too.

elbob2002

It's a matter of preference. I think Hyper-V is crap and that VMware is the best hypervisor for CHR. In all seriousness, there are pros and cons of each. If you already have Hyper-V in your environment then use that. If you have a VMware environment - use that. Keep in mind BGP is single threaded so...

elbob2002

Contact Mikrotik Support I'd say but first hide your keys!

elbob2002

We've all been there. Sometimes it's easy to go blind and oversee the obvious.

elbob2002

Isn't there an incorrect IP address? If you're using /30 that gives you a maximum of 2 hosts. On R2-161 you have 10.39.255.4/30 and 10.39.255.2/30 10.39.255.2/30 is fine because your network is 10.39.255.0 and broadcast is 10.39.255.3 10.39.255.4/30 is wrong because your network should be 10.39.255....

elbob2002

I have three CHRs in production. Spanning two locations in two countries via EOIP tunnels. One runs on ESXi 6.7 (AMD Opteron 6344) and two are on 6.0 (Intel i7 7700) I've never had a problem with any of them and they're upgraded regularly as you can see by the near identical uptimes. CHR-Uptime.PNG

elbob2002

There is a limit of 10 NICs per VM in ESXi.

So unfortunately it can't be done.

https://configmax.vmware.com/guest?vmwa ... gories=1-0

elbob2002

Run your own NTP server?

My DNS servers also double as my NTP servers.

elbob2002

What version of RouterOS are you running?

There was an issue previously with port flapping when an 100Mb devices were connected.

elbob2002

To be honest if you're running RouterOS then make sure you're running the latest version and you won't have to swap out any fans. Whatever changes they made means mine is practically silent with fans running at 270RPM instead of 4000RPM. Of course this is at the expense of temperature which is now 5...

elbob2002

*) crs328 - adjust fan speed based on SFP and CPU temperature;
*) health - improved fan control on CRS3xx and CCR1016-12S-1S+r2;

Yes indeed. I should have known better than to upgrade. Edit: This is a CRS328-24P-4S+

SW-TEMP.PNG

elbob2002

The Hypervisor is the obvious difference. There are a few here who swear HyperV is better for hosting CHR and others (myself included) swear by VMware. But I'm biased slightly as I used to work for VMware. I'm assuming you are using the P unlimited license as on my ProLiant DL385p G8 I only get 9.2G...

elbob2002

Do you need 4 SFP ports? For almost the same price you could get more ports albeit with two SFP instead of 4.The CRS326 has SFP+ ports. More ports are always handy if you want to add cameras etc. mtikswitches.PNG (I have no involvement with the reseller above other than I buy my devices from them!)

elbob2002

v6.45.3 is released! but when I tried to update my system then it shows an error windows defender error 577 , I really have no idea how to remove this error. if you have any idea about it then please share with me. How are you updating? The device itself downloads the updates if you do it through W...

elbob2002

Yeah. I understand the NAT side of it. it would be nice to have something like Carp from the BSDs. I know that the features of Carp aren't fully achievable on routerOS but I was seeing how close I could get.

Thanks again for you help!

elbob2002

Thanks Sindy,

I've made those changes but they don't seem to have resolved my issue. I'll investigate further today.

elbob2002

Hi all, I'm tearing my hair out with this one. I'm trying to set up VRRP and have two CHRs (6.44.5) configured successfully with External VRRP interface (EXT) and internal (INT) VRRP interface Everything on LAN is configured to use the virtual IP on INT as their gateway (192.168.80.254) and can ping...

elbob2002

Glad to hear you got sorted.

elbob2002

Use a SRC-NAT rule on the IPsec interface (out interface). That way all traffic from your IP pool or corporate LAN should appear to come from the IP address of your IPSec Interface.

elbob2002

After 13 days and 18 hours following an upgrade to 6.44.3 my core switch had an unscheduled reboot. The switch is a CRS328-24P-4S+ running RouterOS as SwOS was causing so many issues. As this is a coreswitch, several devices powered by PoE also rebooted from loss of power resulting in considerable d...

elbob2002

You need to resize the disk before powering on the VM for the first time.

It should automatically resize on the first boot.

elbob2002

Can you check please the fan speed too?

Sure! From LibreNMS:

CRS328.png

elbob2002

Sounds good! One more question: does this also mean that if I have only a limited POE power request (8 devices with max 7 Watt/port) then my device won't turn on the fans? How it goes in your case? I only have 4 PoE devices connected to mine: ether1 ether2 ether11 ether24 poe-out: auto-on auto-on a...

elbob2002

I had the same issue and changed from SwOS to RouterOS which resolved the fan issue I was having. I had a thread here somewhere about it.

At the moment it's running perfectly on 6.44. as it's a core switch I haven't had a chance to update it in a while.

elbob2002

Most likely the firewall configuration prevents you from connecting on the public IP address:

https://wiki.mikrotik.com/wiki/Manual:T ... r_settings

elbob2002

I just did a test between two CHR on one of my ESXi 6.0 servers. From a CHR with a P1 license to one with a P10 license: status: done time-remaining: 0s ping-min-avg-max: 57us / 106us / 264us jitter-min-avg-max: 0s / 30us / 168us loss: 0% (0/200) tcp-download: 11.1Gbps local-cpu-load:37% udp-upload:...

elbob2002

You seem to have consistent results with and without hyperthreading (with the exception of the last MTU setting) . I'm wondering if you're not hitting a limitation elsewhere?

You could try using iperf on a couple of VMs?

elbob2002

Yes you can. With RouterOS only though.

elbob2002

I'd be curious to see what performance you would get with hyperthreading disabled on the hosts.

elbob2002

It would be helpful to know where you are.

I could make a recommendation but I doubt my Irish insurer would cover you if you are based in another country!

elbob2002

can someone confirm this... try double clicking on top right field "cpu or memory or uptime" after that you cant terminate winbox, menu and windows inside winbox are inaccesible. you have to right click many times random inside winbox to make menu and windows accesible. when you double click that a...

elbob2002

I had the exact same issue with the same model. I have a thread on it here somewhere. Turned out there was nothing wrong with the unit. It was SwOS. I changed over to RouterOS and it's been running fine since. SwOS 2.9 has been released since but unfortunately mine is in production now so I can't ma...

elbob2002

There is a setting in the swOS web admin to boot to RouterOS. I can't recall exactly where it is but it is there as I used it on my CRS328. License should be there automatically so you won't need to install one. It shouldn't void your warranty either. I would recommend changing from SwOS to RouterOS...

elbob2002

A SwOS device will appear in the neighbor list in Winbox but you cannot connect to it using winbox. Double click on the SwOS device in the list and it will open your default browser to the device's web page. However if it doesn't have an IP address then of course you will not be able to connect. As ...

elbob2002

I'm open to correction on this but I'm pretty sure there is no hardware offload for the wlan interface. At least not on mine: # INTERFACE BRIDGE HW PVID PRIORITY PATH-COST INTERNAL-PATH-COST HORIZON 0 H ether1 LAB yes 1 0x80 10 10 none 1 I H ether2 LAB yes 1 0x80 10 10 none 2 I H ether3 LAB yes 1 0x...

elbob2002

A reset should do it for you. Quickset as WISP AP and make sure Bridge All LAN Ports is ticked.

elbob2002

SwOS isn't available for the CRS125.

To ensure it's in switch mode simply create a single bridge and have all ports (interfaces) as members of that bridge.

edit - I forgot mention you need to be running 6.41 or higher I think for that to work.

elbob2002

I ran in to similar issue in my lab setup.

Reducing the MTU on the MPLS interface from 1508 to something lower (1472) worked for me. Had to do it on all MPLS devices.

elbob2002

You will have to enable promiscuous mode on the vswitch or vswitches the CHR is connected to. On VMware that is.

elbob2002

are you using SwOS or RouterOS? Which verison? I did have an issue with one port not powering a device and just plugged it into another port and it worked. I thought maybe I hadn't pushed in the connector properly. I'm running RouterOS 6.43.7 on mine. Routerboard firmware is 6.43.4 because I can't r...

elbob2002

After seeing this thread yesterday I bought two CHR P10 licenses. Seamless order processing, outstanding value and I had the keys in my Mikrotik.com account this morning.

I'm based in the E.U. though so not sure if being outside the E.U. would make much of a difference.

elbob2002

I gave up on SwOS in the end. Booted to RouterOS and haven't had any issues since.

elbob2002

Mine says 2.8 (built at Fri Jul 13 2018 12:37:17 GMT+0100 (IST))

However I see there is now an update available:

Latest Available Version 2.8 (built at Wed Oct 03 2018 07:02:09 GMT+0100 (IST))

Will upgrade later this evening and see how it goes.

elbob2002

The only thing that worked for me was to reboot the switch.

I had a power failure here recently and since the power came back I've had no issues since. It's very strange.

elbob2002

The only way I got traffic across VPLS tunnels was to set the vSwitch to promiscuous mode anyway. Also had to change the MPLS MTU to 1478 on ESXi 6.7. Before making these changes I was only able to ping, traceroute etc. Transferring large data would stall. Also because of my own VLAN requirements I ...

elbob2002

What is the CPU usage? How many cores have you assigned to CHR?

Finally have you enabled FastTrack?

https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

elbob2002

Forced a reboot of the switch and fans are working again!

CPU Temperature 39C
Board Temperature 35C
FAN1 4440 RPM
FAN2 4410 RPM

elbob2002

I’m out of the office now but thanks! I’ll try reinstalling the update and post my results here.

elbob2002

Buy a CHR license. It's only $45

elbob2002

Upgraded to SwOS 2.8. Now getting this: CPU Temperature 67C Board Temperature 0C FAN1 0 RPM FAN2 0 RPM PSU1 526mA @ 26.65V Fans aren't spinning. Were before and were quite noisy. SwOS 2.7 reported temperature in and around 30 to 38 degrees and fan speed around 4000rpm. RB3011 sitting on top of the 3...

elbob2002

SwOS 2.8 was released this morning and has several fixes for SFP. Time to upgrade and see?

elbob2002

I jumped the gun! The download links for the CRS328 are now on the download page.

elbob2002

I have a CRS328-24P-4S+ and I just noticed that on the download page that SwOS 2.8 is released. However there seems to be no version for the CRS328. Is one of the other firmware compatible? I can't use the auto upgrade feature as the switch can't access the internet as i can't specify a gateway to u...

elbob2002

When it was in RouterOS did you update it? if in RouterOS try upgrading the firmware too. I bought exactly the same model just last week and it's been running fine. I do believe there is an issue with SFPs. There's a thread here about it: https://forum.mikrotik.com/viewtopic.php?f=17&t=126274 I don'...

elbob2002

From: https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS Bugfixed-only version is the most stable release without new features, just most important fixes. Updated rarely, only when a critical issue is found in a bugfixes-only release. Current includes the same fixes plus improvements and new f...

elbob2002

You probably could but you may need to rename or remap interfaces and adjust firewall rules etc.

Also the RB3011 does not have a wireless card.

Search found 67 matches