MikroTik

Gombeen666

I would like request some advice on the config setting for STP between TPlink (T2600G-28TS) to RB960PGS, the TP-link uses port7 as master and port8 as backup, So I would like have TPlink port 7 to port 1 of RB960 ( master STP active ) TPlink port 8 to port 2 of RB960 ( backup ) What I am a little co...

Gombeen666

Hi,

I currently have Zabbix monitoring our network and would like to ask can anyone offer advice on how I could have winbox integrated on Zabbix!

Gombeen666

Running NV2 on N protocol what is (or is there any way to discover !) the best setting for AP's + CPE's AMSDU limit, AMSDU threshold, AMPDU priorities , I have read suggestions to use 2048 or 4096 for AMSDU limit but don't understand why AMSDU threshold should be the same as the limit figure! https:...

Gombeen666

RBLHGG-60ad kit , should the master unit have level 4 licence ( ap-bridge) and the slave have level 3 licence for "station-bridge",
As i have a kit with level 3 licence on both units ?

Gombeen666

Just to add another question will VRRP work on VLAN interfaces R1 configuration: /ip address add address=192.168.1.100/24 interface= Vlan100-Ether1 /interface vrrp add interface= Vlan100-Ether1 vrid=49 priority=254 /interface vrrp add interface= Vlan100-Ether1 vrid=77 /ip address add address=192.168...

Gombeen666

Many thanks for replies - in VRRP examples ( https://wiki.mikrotik.com/wiki/Manual:VRRP-examples ) load sharing looks promising but as the radius server has just one gateway ( 192.168.1.1) , Could I set in R1 and R2 the same gateway IP? Configuration R1 configuration: /ip address add address=192.168...

Gombeen666

I have one Radius Server which on its gateway is 192.168.1.1 but is connected to two routers, my question is how do i set gateway address on each router and if one router fails?

Gombeen666

snmp - added "tx-ccq" ("mtxrWlStatTxCCQ") and "rx-ccq" ("mtxrWlStatRxCCQ") values;

Is this now working and is there setup examples?

Gombeen666

@Normis you should have mentioned that newer versions of Dude does not have Winbox, which is strange as they are using port 8291 (unless the installation of Winbox on dude is hidden!) I had to go back to V4.beta3 and simply added via "tools" winbox exe path this solves "missing plugin...

Gombeen666

So much for upgrading and discovering that Winbox is not part of the Dude ? I have gone back to V4.beta3 and simply added via "tools" winbox exe path this solves "missing plugin for winbox"

Gombeen666

Can someone explain -
"The Dude requires "winbox" policy instead of "dude" to monitor v6.46.4 and v6.47beta30+ RouterOS type devices."

Gombeen666

In Tools there is a option to add !
On the Wiki
https://wiki.mikrotik.com/wiki/Manual:T ... /Interface
Winbox is listed in Tools ?

So my question remains how do I add Winbox to V6.46.6 or do I have to roll back to V6.34rc45 as listed in the Wiki?

Gombeen666

I don't understand why Winbox is not linked to this version of Dude?

Gombeen666

ROS x86 V6.46.6 Dude - Winbox is missing from the tools menu ? Is there a solution

Gombeen666

I have a dynamic route created by OSPF but in error I had configured the same /30 ip address for two routers ? and core router is now listing both routers in one dynamic route, how do get rid of this dynamic entry?

Gombeen666

If I understand correctly then any tagged VLAN can be added to a (PVID 2020) ports, with untagged vlan's (1) is just one untagged vlan per PVID port or could it be more than one (2) If more than one untagged Vlan is connected to another port that was also using PVID 2020 does it now require a differ...

Gombeen666

I trying to understand when assigning a PVID number (say 2020) to port 1, 2, 3 does this mean that the exact VLAN's numbers must be used on these ports? Example port1 = Vlan100, Vlan200, Vlan300 port2 = Vlan100, Vlan200, Vlan300 port3 = Vlan100, Vlan200, Vlan300 or could it be port1 = Vlan100, Vlan2...

Gombeen666

On a PPPoE server we have enabled all 4 authentication types
(1) pap
(2) chap
(3) mschap1
(4) mschap2

Is all 4 required and is there any performance improvement by not using them all?

Gombeen666

/ip firewall filter add action=fasttrack-connection chain=forward comment="Fasttrack UDP" dst-port=53 in-interface=all-ppp protocol=udp add action=fasttrack-connection chain=forward comment="Fasttrack TCP" dst-port=53 in-interface=all-ppp protocol=tcp I am considering applying fa...

Gombeen666

I managed to add NTP package to the AP's, The AP uses DHCP server to assign management ip ( 10.100.X.X) to the CPE DHCP clients but so far selecting on the CPE DHCP client "Use Peer NTP" does not sync time /ip dhcp-server network add address=10.100.10.0/24 dns-none=yes gateway=10.100.10.1 ...

Gombeen666

Just checked packages and now Calea has been added, I am sure it was NTP and not Calea package I had in files but will try again

Gombeen666

I updated a AP to 6.46.6 added ntp-6.46.6-mipsbe.npk to files - rebooted but no NTP server ? I am really confused

Gombeen666

I am trying to add NTP package to the AP's so that the AP will serve as NTP server for CPE clients but so far by simply adding NTP to files and reboot does not work?

Gombeen666

How do I add NTP package to ROS versions 6.45.7, 6.46.3 ?

Gombeen666

I have a lot of customers who have the PPPoE client on their WiFi Router for port forwarding ( etc...) trying to run scheduled tasks on the CPE's overnight is a challenge as I have to manually correct the time on the CPE's that have incorrect clock times that could be several many days out ? If only...

Gombeen666

My current CPE configuration gives internet access only when a PPPoE session is established, when the PPPoE client on the CPE is disabled internet access ceases and this results in no clock time sync? I use this on scheduler to keep the clock in sync /system ntp client set enabled=yes primary-ntp=[:...

Gombeen666

What is the effect of increasing or decreasing Authentication & Accounting interim-update time ?

/ppp aaa
set interim-update=5m

Gombeen666

@ mbovenka - Thank you

Gombeen666

Can someone recommend where in Europe to purchase outdoor fibre cable?

Gombeen666

I did a quick search for +48V failover module and so far +30V appears to readily available but only came across OMRON S8VK-R20 Module which goes to +60V?

Gombeen666

Looks like dual +48v DC PSU are difficult to locate so option B is look for a DC failover switch, once again any recommendations are welcome!

Gombeen666

I am looking for a dual +48v DC PSU ( Failover ) with battery terminals to connect battery bank?

Gombeen666

Many thanks for replies - So as i understand
(1) ...180secs of no communication before the BGP session goes down...
(2) ...convergence time for OSPF by default is 40secs.... how fast is iBGP to recover

Gombeen666

Is it possible to save a winbox custom layout?

Gombeen666

Is this screenshot of a CPE ether stats providing any information to help me answer my question!

Gombeen666

I am using Dude 4.0Beta3 and when I try to open mmips routers I get error "missing plugin for winbox" How do i fix?

Gombeen666

I would like to ask is there a throughput difference between PPPoE MTU 1480 or MTU 1492?
Has anyone done comparisons?

Gombeen666

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

How many routes and routers do you have and what OSPF network types are you using - boradcast, point-to-point, etc?

We have just short of 800 routes with over 60 routers, ospf type is mostly PTP

Gombeen666

Presently L2 bridged because 5min re-adjacency with OSPF was just too long for customers which they noticed and complained?
so now OSPF is used for management and L2 bridged for client PPPoE?

Gombeen666

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

Gombeen666

We are currently considering changing to iBGP on our network but can I ask will OSPF error's ( like new master flag=false, malformed init mesage, reject, ......) impact the same on iBGP?

Gombeen666

Is there a way of checking the network path in and out used for traffic coming from a CPE at each Mikrotik device

Gombeen666

The answer is quite simple: there is no "save-file" option to frequency-monitor.

Thanks for replying!

Any other option or method available to remote frequency monitor (or frequency usage!) CPE's ?

Gombeen666

I am trying to save a frequency monitor scan to file? :local sub1 :set sub1 ([/system identity get name]) /interface wireless frequency-monitor wlan1 duration=120 save-file="$sub1 frequency-monitor.txt" but getting error > {:local sub1 {... :set sub1 ([/system identity get name]) {... /int...

Gombeen666

Traffic Priortization, RouterOS QoS Implemetation https://wiki.mikrotik.com/wiki/Traffic_Priortization,_RouterOS_QoS_Implemetation QoS in Nv2 network https://wiki.mikrotik.com/wiki/Manual:Nv2#QoS_in_Nv2_network DSCP based QoS with HTB https://wiki.mikrotik.com/wiki/DSCP_based_QoS_with_HTB QoS on Vla...

Gombeen666

How do I work around bridged VLAN's that carry the PPPoE interface on a CPE ?

Gombeen666

I use this on a network to have different priorities for VoIP, normal and background traffic. We mostly use only 3 DSCP values: - Expedited Forwarding (2e) for VoIP traffic - Normal (00) as a default - Background (08) for background transfers like backups But we have 8 queues in the queue tree to h...

Gombeen666

I have a few questions and maybe some could comment? (1) We have PPPoE Vlan's will DSCP or priorities work on that interface (2) For Mikrotik CPE's that have public IP assigned is "DSCP" a better option (3) Where CPE does not have public IP but is assigned to TP-link router connected to CP...

Gombeen666

I get error "input does not match any value of parent"

Anyone got a complete file to test please?

Gombeen666

deleted post

Gombeen666

On a update to the error messages, I have been applying VLAN filtering to CPE's + AP's + PTP and this was when the error messages appeared at the core router,
I have all my PPPoE VLAN's on one interface (Ether5) , is it possible to VLAN filter at the core router!

Gombeen666

Is there a current list of ROS devices that have a switch chip available?

Gombeen666

Does NetMetal 5SHP have a switch chip ?

Gombeen666

I have random AP + PTP lockup's and with nothing in the logs to indicate the cause of the issue, I am currently follow solutions listed in Manual:Layer2 misconfiguration https://wiki.mikrotik.com/wiki/Manual:Layer2_misconfiguration and applying to our network but tagged and untagged is confusing me,...

Gombeen666

I am slowly beginning to realise that the next connected device will determine if tag or untag is required on the bridge vlan settings?
also can Vlan which as mentioned is untagged be set to tagged on the bridge vlan

Gombeen666

So If i understand this, a Vlan is it added as untagged and ether (or Wlan) is added as tagged?

Gombeen666

On a AP - Interface Bridge Vlan I have added tagged Vlans for ether + Wlan interfaces but in status they are appearing as "untagged" when I activate Vlan filtering, is this normal or do I change the vlan interfaces to untagged?

Gombeen666

I was trying to get more information on the Wiki about bridge admin mac address , it's function and pro's and con's of using this setting!

Gombeen666

@ Anumrak Thank You

Gombeen666

At the moment they are all set to horizon=100 is this the correct setting!

Gombeen666

On a bridge port that has 40+ Vlan's on a single interface, what is the recommended mode setting
(1) mode = none
(2) mode = rstp

Gombeen666

On a core router I would like ask with 40+ bridge port vlan's on a single interface what is the recommended split-horizon setting ,
(1) should they be all the same (horizon=50)
(2) should all 40+ have different setting
(3) or same number for a network segment

Gombeen666

Being dropped for what reason ?

Configuration issue, the VLAN passes traffic for a short period and then stops?

Gombeen666

I should have asked How do i detect if VLAN frames are being dropped by a bridge port interface?

Gombeen666

I would like to request advice on how do I check for traffic loops on bridge port interfaces!

Gombeen666

On the core PPPoE server occasionally on the logs there is PPPoE "authentication Failed" which if the client used correct username but incorrect password I can lookup the radius server but if they use incorrect username which is not listed on the radius server ! How do I trace the PPPoE ba...

Gombeen666

I would like ask is ROS optimized for CPU multi threading ?

As I am considering swapping for my AP's + PTP's - 912UAG-5HPnD, 911G-5HPnD, 911G-5HPacD boards for RBM11G + R11e-5HacD?

Or can someone recommend a better ROS upgrade option ?

Gombeen666

from the core router /interface bridge host print I notice there is some enteries with Age in excess of 1 min, is this normal

Gombeen666

Please try to disable neighbours. I mean ip-neighbours-none. if problem solved. please let me know

I have set on the core router ip-neighbor=none and will check logs tomorrow

Gombeen666

And the problem was gone ?

No - problem still present, I was asked which version I had installed ?

Gombeen666

This info on the core logs only appeared when I updated almost all the network to 6.45.7 + Interface port Isolation + Bridge port PVID "Ingress filtering" "admit only VLAN tagged"
Hey. It's long-term or stable ver? Try degrade to long-term.

I installed the stable version !

Gombeen666

This info on the core logs only appeared when I updated almost all the network to 6.45.7 + Interface port Isolation + Bridge port PVID "Ingress filtering" "admit only VLAN tagged"

Gombeen666

On core router CCR1009-8G-1S-1S+ I get every 12 hours or so vlan error messages, I have checked the paths of the vlans listed but unable to locate the fault,
Is there any general guidelines in fault finding a issue like this?

Gombeen666

Confused why some AP's bridge ports all of which have one VLAN + WLAN - some have
Both interfaces = designated port , while more have interface WLAN=root port and interface VLAN=designated port
Should they all be the same as they all have similar paths back to the core !

Gombeen666

On a access point bridge the bridge ports have a VLAN + WLAN but both interfaces have role="designated-port" ? is this correct or should the VLAN be role=root
and if so how do I change bridge port stp priority (hex value)

Gombeen666

No. Winbox has a nice feature named Safe Mode

https://wiki.mikrotik.com/wiki/Manual%3 ... #Safe_Mode

https://www.youtube.com/watch?v=ZMMpza-O7_w

Time:34:00 approx - no mention of safe mode but listed was scheduler or RoMON for recovery?

Gombeen666

So most CCR's don't have a switch chip? how is port isolation achieved! Only with vlan isolation i believe: https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table But it better be a good switch chip. Try to figure out how to use these switch ports to make an organized isolated network. I was readi...

Gombeen666

From reading https://wiki.mikrotik.com/wiki/Manual:Spanning_Tree_Protocol it reads "...RouterOS is capable of running bridge interfaces with (R/M)STP support in order to create loop-free and Layer2 redundant environment. It is always recommended to manually set up each bridge's priority, port p...

Gombeen666

So most CCR's don't have a switch chip?
how is port isolation achieved!

Gombeen666

Why on a CCR1009-8G-1S-1S+ only 4 ports are on a switch, I would have thought that a CCR would have all ports on switches ?

Gombeen666

To follow on my questions on the best bridge mode setting, Bridge Loopbacks (OSPF, MPLS) bridge mode = ( NONE : STP : RSTP : MSTP) ?

Gombeen666

Good news solved! , was reading on the forum about access issues with older versions of Winbox , I had tried first from the Dude and then from a new version of Winbox to both the IP (PTP side of router Ether1) + mac address of the router but no luck, then as mentioned I had noticed that I had to dis...

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:Switch_Router Confused why Isolated VLANs /interface ethernet switch rule add dst-address=192.168.20.0/24 new-dst-ports="" ports=ether2 switch=switch1 add dst-address=192.168.10.0/24 new-dst-ports="" ports=ether3 switch=switch1 by including n...

Gombeen666

AP Version 6.45.7 on Netbox + RB912UAG + RB911G ... I am unable to add port isolation ! How do I

Gombeen666

I upgraded RB750Gr2 to V6.46 and was able to login and add switch port isolation but when I added switch rule to ether1 that connects to PTP link , I lost connectivity ? From PTP side to ether1 trying telnet access my login credentials are not working along with two other user accounts ! I also trie...

Gombeen666

As I am dealing with Live production devices, I am trying not to cause service outages ! I picked a section of the network that is giving very issues and applied to the AP's bridge RSTP and on the RB960 added Port-Isolation + switch rules /interface ethernet switch port-isolation set ether3 forwardi...

Gombeen666

Last night I switched a number of AP+PtP to RSTP on their bridges and this morning i find in the core router (CCR1009) interface, warning logs with several entries "VlanXXXX bridge port received packet with own address as slave address ( XX.XX.XX.XX.XX.XX ), probably loop" I switched back ...

Gombeen666

How do I setup layer 2 isolation on a AP or PTP ?

Gombeen666

Thanks for the reply!

Just reading
https://wiki.mikrotik.com/wiki/Manual:S ... _isolation

I am unclear as I am also using VLAN's if I should use both
(1) /interface ethernet port switch port-isolation (forwarding-override)
(2) /interface ethernet switch vlan

Gombeen666

On a AP with Bridge port entries for Ether + Wlan , what is the most suitable bridge mode ( NONE : STP : RSTP : MSTP) For a RB960 which has 4 bridges ( bridge1 ports =ether1 + Ether2 ) ( Bridge2 ports=ether1 + Ether3 ) ( Bridge3 ports=ether1 + Ether4 ) ( Bridge4 ports=ether1 + Ether5 ) Once again wh...

Gombeen666

I am trying to figure out a way of packet delay comparsion coming from Netflix and pirate(s) streaming servers.

Gombeen666

For client management there is a VLAN on the AP Wlan interface, DHCP server is using this VLAN, on the client CPE the DHCP client is using this VLAN to assign management IP , OSPF on the AP has in routing/ospf/network a /24 and ospf/interface has a static entry with network type=broadcast, I didn't ...

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:I ... st_Forward

On a bridge with two ports - ether using Hardware Offload and a VLAN, my question is will or possible for the VLAN interface use "fast forward"

Gombeen666

Our VLAN's are working but have a intermittent fault ( every few weeks or so) a PTP or AP will lockup and have to recycle power to the effected device, I thought that VLAN would help but on reading , Bridge VLAN filter disables hardware offloading and reduces performance ? So now I have just applied...

Gombeen666

Thanks for replies and I am still confused ( as always !) the TP-link T2600G-28TS managed switch is showing the VLANs in and out as "tagged"

But in Mikrotik /interface bridge when I add vlan-filtering the "tagged VLAN" is coming up as "untagged" ? Is this normal

Gombeen666

I noticed our TP-link managed switches have VLAN's using tagged ports but the VLAN's on the CCR + PTP + AP's don't have "Use service tag" enabled, Should the Mikrotik devices have service tag enabled, Which is best when using a lot of VLAN's (<80) when they start and finish on Mikrotik dev...

Gombeen666

Does NetBox 5 support bridge VLAN filtering?

Gombeen666

My question - Is there a best of both worlds in a mixed L2 bridged with VLAN's and OSPF network, OSPF used for management for now at least until OSPF on our network is more resilient ?
and should the VLAN's be using quote "new school rather than old school approach"

Gombeen666

With the present config I have errors like "Database Description packet has init bit set in middle of an exchange" + "new master flag=false" appearing on devices connecting by the /30 vlan's across the tp-link switches, So I was considering using a different "area" for ...

Gombeen666

I have over 25 /30's VLAN's connecting across TP Link managed switches , /routing ospf network is using the /30's as backbone , /routing ospf interface has static entries with network=Point-to-Point, However I was reading about /routing ospf virtual-link and wonder if this was better suited for my c...

Gombeen666

I recently observed where PPP profile local address /32 was appearing in OSPF interfaces as a dynamic listing!

Can someone explain the advantages of having this OSPF interface entry?

Gombeen666

Would the higher state changes on one side indicate that the OSPF issue is at that side of the interface?

Gombeen666

I would like ask if someone could explain why is there a difference in the number of state changes on a VLAN interface, where on side shows 14 and the other side shows 4 state changes for same adjacency uptime?

Gombeen666

(but beware of having /32 routes for each session and updating them via auto-routing, that also causes issues)
Could you explain a little more ?

Gombeen666

Many thanks for the replies so far, " ...very advisable to have each service (L2-switching, BRAS, firewalling, core-routing, edge-routing) on it's own (specialised) platform. " Also forgot to mention BGP is also used "... RouterOS is very versatile platform that sometimes leads us to ...

Gombeen666

We have two CCR1009 and one is active but every few months we have to reboot it to fix dns error for our PPPoE clients? An active CCR is using primary services - OSPF, L2 Bridged Vlans , Firewall , PPPoE server The reason for L2 Bridged Vlans for PPPoE is because Mikrotik OSPF is not robust and was ...

Gombeen666

Anyone using 17GHz Transverter from maviradio?

Gombeen666

I would like to ask others have they tried or experience using Mikrotik CPE's to InfiNet AP? As my preference is to continue using Mikrotik Equipment.

Gombeen666

For starters I would like to test that for example - Mikrotik router A should be getting only tagged VLAN packets for two Vlan's ID=1010 and 1020, then router B should be getting tagged VLAN packets for another two vlan's ID= 2010 and 2020 ?

Gombeen666

Is it possible to check on a network for leaking vlan packets from other vlans ?

Gombeen666

What spectrum analyser are you using !

Gombeen666

How do I detect if a weather radar is active at a new site ?

Gombeen666

........................ or tunnel everything back into a common layer2 bridge somewhere which ultimately just doesn't make any sense and provides zero benefit over PPPoE The reason we moved back to L2 bridged was because we reckon our OSPF configuration was not correct and was causing intermittent...

Gombeen666

I am asking if Mikrotik will give me OSPF detailed info like the way Cisco does?

Gombeen666

OK - what command will tell me what OSPF function the router is (IR, Backbone, ABR, ASBR )

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:Routing/OSPF

/routing ospf monitor
Does not work!

/routing ospf ospf-router
Does not work!

From reading Cisco OSPF - "show ip ospf" or "show ip ospf interface brief" - what are the Mikrotik equivalents !

Gombeen666

Can anyone advise where I could source a 19" rack Gigabit POE panel with 12-16 ports and very important to have LAN control to switch off/on individual POE ports ?

Gombeen666

Having a POE out option on a device is becoming must have for power off/on to solve devices that occasionally lock up! The 4011 doesn't appear to have POE out option. It has, but only on 1 port (port 10). For this feature to be useful in this use case, it would be better when it e.g. supported 5 PO...

Gombeen666

I'd use a 4011...compact and 10 gig capable if needed. It's a fantastic tower router and can even be a border router.

Having a POE out option on a device is becoming must have for power off/on to solve devices that occasionally lock up!
The 4011 doesn't appear to have POE out option.

Gombeen666

At a site we have 20Meter POE ethernet leads connecting AP's + PTP's and we have noticed that occasionally OSPF state changes can be high (20-60) over a 24 hour period, we have tried using different OSPF network type = Point to Point and Broadcast Is there anything else we can do to reduce state cha...

Gombeen666

We are encountering at random times AP's (mostly but some times PTP's ) that lockup and there is no access by mac-telnet on ether or wlan to run supout file, I have tried Watchdog and ticked "Automatic Supout" After power restart there is nothing in the logs prior to the restart indicating...

Gombeen666

With 4 L2 bridges on a RB750 I am trying to figure out static IP route (s) ? dst-address=0.0.0.0/0 gateway= ? Do I have to create a gateway for each bridge and/or for each interface port / vlan? (confused!) Port 1 is PTP has Vlan's (a + b + c + d ) Port 2 has AP1 Vlan01 - Bridge A (port 1 + 2) Port ...

Gombeen666

I would like ask on a network that uses the same VRF route mark name ( PPPoE_Mark ) on many devices could this cause confusion or should the name be unique on each device
or does it matter!

Gombeen666

My PPPoE server uses
max-mtu=1480
max-mru=1480
mrru=1600

PPPoE Client
/interface pppoe-client monitor 0
mtu:1480
mru:1480

Just wondering is MRRU setting correct or should it be disabled?

Gombeen666

........... Could somebody give me a 'mtu and PPPoE server for dummies' explanation so I can enhance the performance of our network and silence the complaints from some clients....? I would also like to ask how do you test MTU settings when running PPPoE Central Concentrator + MPLS + VPLS + VLAN's ...

Gombeen666

use-service-tag=yes means to use 802.1ad tag, use-service-tag=no means to use 802.1Q tag. They differ by ethertype value. Don't use use-service-tag=yes unless you're perfectly sure why you do. I am trying to solve a intermittent problem where AP's lockup and have no mac-telnet access by either ethe...

Gombeen666

At present the vlans on the AP's don't use Service Tag, so I wonder if i checked this option and used service tag option for the RB750 and for other routers in that segment and Tagged rather than Untagged vlan is this recommended?

Gombeen666

I am trying to establish if I need additional VRF route marks, which in my case has RB750 3 AP's Vlans + 1 local admin vlan connected by 4 bridges to port 1 Port 1 is PTP has Vlan's (a + b + c + d ) Port 2 has AP1 Vlan a - Bridge A (port 1 + 2) Port 3 has AP2 Vlan b - Bridge B (port 1 + 3) Port 4 ha...

Gombeen666

In that case the traffic is separated at L2 layer by running on individual bridges; to prevent routing between IP subnets which use those bridges, the firewall rules or vrf as suggested above can be used. As i am a newbie ? could I ask for the four bridges do I need to create 4 routing marks on fou...

Gombeen666

How you add Port1 to four different bridges?

I created individual Vlans for each port and then added them in bridge/port
so for bridge 2 - it has vlans port1 + vlanport2 , bridge 3 has vlanport1 + vlanport3 .......

Gombeen666

what you want is prevent one side to have a route to another side -> routing issue -> adjust routing config Some options: separate routing table for each interface (=VRF) or just deny routing between them using routing rule (ex: action=unreachable) Can i ask for advise for the best way to isolate f...

Gombeen666

......OSPF on MikroTik is generally stable with some caveats, i've found point-to-point network type to be the most reliable so I always use that. Even when its a multipoint (use separate VLAN's for each connecting router and make them point-to-point links)..... Does this mean creating creating VLA...

Gombeen666

@millenium7 Can I once again thank you for taking time to answer and offer very good advise! Another big reason for us moving off PPPoE inside our backhaul is to massively reduce the downtime that can happen when a link is interrupted. PPPoE tunnels seem ok with a short interruption but say 5+ secon...

Gombeen666

@millenium7 Many thanks for your detailed reply, ...OSPF on MikroTik is generally stable with some caveats, i've found point-to-point network type to be the most reliable so I always use that. Even when its a multipoint (use separate VLAN's for each connecting router and make them point-to-point lin...

Gombeen666

Need more info on the topology For instance are PPPoE sessions terminated closest to the customer, or are they all terminated at a central PPPoE concentrator? If the latter are you using VPLS tunnels (or something else like EoIP?) Do you have BGP running internally in the network? These answers cha...

Gombeen666

Just curious asking why on our network that a previous techie would create both OSPF and MPLS loopbacks on routers each with there own ip range ?
Cause he was a massive goose?

As I am newbie to this could you explain further?

Gombeen666

.................... When getting one firewall in front of the pair, keep in mind that you add another SPOF (unless you deploy a HA cluster of at least two devices) and you certainly add another layer of complexity. ........................... I agree it's another single point of failure but i gues...

Gombeen666

As it stands I believe that the firewall settings have to duplicated on both CCR's and if not done then there is no failover, so I thought have a hardware firewall in front of the CCR's,

Gombeen666

Which is best a single hardware firewall in front of two CCR1009 or use the firewall on both CCR's?

Gombeen666

As a WISP I have setup the AP's in OSPF into multi areas rather than having the complete network on Area0 but would like ask what is optimum configuration for clients who get their public ip from PPPoE! Should the area be stub or NSSA , OSPF Instance - distribute-default setting , redistribute-conne...

Gombeen666

Main advantage is spreading your risk to have a pppoe server at every pop. Second advantage is that not one router is doing all queues/firewall/natting for all clients. Sounds good the advantage but by having the PPPoE at the tower does it mean that traffic must transverse the network to PPPoE serv...

Gombeen666

Are the firewall rules to be on the AP or CPE or both! also is necessary to specify the interface!

Gombeen666

If you have loops, enable xSTP

(1) How can I test if I have loops?
(2) is xSTP RSTP, MSTP....If so I don't have STP between routers ?

Gombeen666

Has anyone got suggestions or recommendations on best practice to reduce or prevent broadcast storm on a L2 bridged network, each Vlan has it's interfaces connected to a separate bridge ?

Gombeen666

As a WISP can I ask what is the advantages/ disadvantages of having PPPoE server at each tower when running
(1) OSPF
(2) L2 Bridged
(3) Both OSPF + L2 Bridged

Gombeen666

Can I ask when creating a Bridge the default protocol used is "RSTP", with no spanning tree being active on that bridge should the protocol "None"

Gombeen666

Just curious asking why on our network that a previous techie would create both OSPF and MPLS loopbacks on routers each with there own ip range ?

Gombeen666

When setting ospf interface "all" as passive is it normal that state is "Down" 1 P interface=all cost=10 priority=1 authentication=none authentication-key="" authentication-key-id=1 network-type=broadcast instance-id=0 retransmit-interval=5s transmit-delay=1s hello-inte...

Gombeen666

To have two loopback addresses on a router (ospf + mpls) or will the ospf loopback do for mpls?

Gombeen666

I would also like ask the same question ."..How much horsepower does it take to run MPLS/VPLS....."

Gombeen666

@Anumrak
Thanks for your reply!
On re-reading my question I will have to rephrase,
Static routing for L2 bridged and Dynamic for OSPF, I want the options that if static routing is unreachable that OSPF dynamic routing will take over until static is reachable?

Gombeen666

In Winbox is it possible to save a preferred layout rather than having to use to default layout - for example I want to add in routing ospf neighbor display "State" and "Adjacency" and save this layout?

Gombeen666

For a network that was OSPF + MPLS + VPLS and now L2 bridged and PPPoE using Vlans for public ip's ! - OSPF is now used for management
Can static routes co exist with dynamic routes coming from OSPF?

Search found 153 matches