MikroTik

Gombeen666

With ROS V7 when creating ospf templates do I also have to create one for bridge ospf loopback interface?
Just watched two video's on V7 OSPF and both did not mention this or create one?

Gombeen666

On A CCR2116 I noticed in /routing/nexthop (screenshots - attached ) I

With terminal options are "dump-dot find print unset" How do I remove or trace what this entry is from!

Gombeen666

What i find strange and maybe someone could advise ? CCR2116 OSPF V2 For example - (1) When using /24 broadcast state=init between 2116 to HEX 5 port (2) When setup as a test to the same Hex 5 port using /30 PTP I have state=full on the 2116 I used packet sniffer then opened with wireshark (attached...

Gombeen666

I would like to ask a question about Multicast Traffic with Mikrotik (2116) connected to a single port of a Managed D-link switch using tagged Vlans which in turn this switch in connected to other Mikrotik devices,
For multiple Vlans used for OSPF, should I use Trunk or Hybrid settings?

Gombeen666

As I have L2 managed switches ( TP-link + D-Link ) between links, Is there a guide i can follow to check if there is multicast restrictions ?

Gombeen666

Static neighbors are typically for situations where the multicast groups that OSPF depends on can't be used easily or have issues that don't affect unicast traffic. Common examples are VPNs, PTP RF links that don't support multicast well or Layer 2 circuits that have multicast restrictions. Thank y...

Gombeen666

I notice that in V7 OSPF neigbors are listed as dynamic - Is this correct ?
Should I add static neighbors ?

Gombeen666

I have a VM running CHR but I noticed that no L2 MTU is listed is this normal ?

Gombeen666

Can I ask how do I locate what router is assigned as designated router! In my very limited knowledge I was able to locate devices assigned as "Dr.Other" or "Backup" with winbox but there is some devices which I don't have direct access and would like to know if it's one them, Als...

Gombeen666

Many thanks for your reply and I also had a preference for trunk mode but not sure how it would work with mikrotik ?

Before I post on D-link forum can i ask do you use "Allowed VLAN Range" tagged with "Ingress Checking" enabled or just allow all Vlans's on the trunk ports?

Gombeen666

(1) D-link switch DGS-1510-28X
(1) D-link switch DGS-1250-28X

Are used either side of the PTP ?

The vast majority of our network is Mikrotik for AP's + HexPOE RB960PGS + some PTP's - Ubiquiti AF-5XHD used now for PTP's

Gombeen666

On our network we have multiple tagged VLAN's ( 90+ ) from CCR2116 to D-Link 24 port switch > PTP > D-Link 24 port switch and this switch it has some PTP's + AP's connected to most ports! Now this my question - as each connected has multiple Tagged VLANs - (1) Should each port be set as "Trunk&...

Gombeen666

As it appears new is not available to purchase so I am looking for used MikroTik RBLHG-5HPnD - LHG XL HP5 antenna's that are working ?
Has anyone got some ?

Gombeen666

@mkx Can I explain further when the Ingress and Egress ports have only tagged VLANs and no untagged VLAN's on them ? Example port 1 has VLAN10, VLAN20, VLAN30, VLAN35 VLAN40, VLAN50, VLAN55, VLAN60, VLAN70, VLAN80, VLAN90, VLAN100 port 2 has VLAN10, VLAN40, port 3 has VLAN20,VLAN50,VLAN55 port 4 has...

Gombeen666

Does tagged VLAN traffic on the ingress + egress of a switch ignore PVID number of a port ?
For example
Tagged VLAN20 ports 1 + 2 with PVID 1 on both ports
Tagged VLAN30 port 1 + 3 with PVID 1 on both ports
Tagged VLAN40 port 1 + 4 with PVID 1 on both ports

Gombeen666

I searched 5 suppliers in the EU but none had MIKROTIK ROUTERBOARD LHG XL HP5 (LIGHT HEAD GRID EXTRA LARGE) in stock and none listed when stocks were arriving in?
Has Mikrotik stopped manufacturing this antenna?

Gombeen666

@loloski

Thank you !
By looking at your config I noticed that I hadn't added
/routing ospf instance router id ?

Gombeen666

Can some advise why OSPF PTP from V6 to V7 will not populate OSPF neighbor ? In ip neighbors all devices are listed and can ping all the devices ip's ? [admin@CCR2116] > routing/ospf/export # jan/10/1970 00:41:49 by RouterOS 7.1.2 # software id = DX6R-SFZM # model = CCR2116-12G-4S+ /routing ospf ins...

Gombeen666

To answer the question exactly as it was asked, vlan-filtering affects only the bridge on which you activate it. But if you currently have multiple interface vlan linked to the same ethernet interface, and you bridge the tagless ends of /interface vlan together (aka bridge-per-vlan configuration), ...

Gombeen666

I have multiple bridges setup on a RB960 To me that defeats the purpose of VLANs... RB960 supports VLANs under the Switch menu... So why would you make multiple Bridges ? If you enable VLAN filtering everything will be done in software in that specific device ... Also, when multiple Bridges are cre...

Gombeen666

With reference to VLAN in bridge with a physical interface https://wiki.mikrotik.com/wiki/Manual:Layer2_misconfiguration#VLAN_in_bridge_with_a_physical_interface I would like to ask does VLAN filtering only just apply to the bridge it's set up for ! Or can this action effect other bridges setup on a...

Gombeen666

@pe1chl

I totally agree that syntax converter should be available for this !

After spending all day today I was able to import the V6 rsc file after applying a lot of syntax corrections ?

Gombeen666

Normally importing a exported rsc file from V6 to V6 is no problem but this time I notice that OSPF has changed on V7 ! /routing osfp network no present area= backbone not present /routing/ospf> add interface=OSPF_Loopback network=broadcast passive=yes bad command name add (line 1 column 1) [admin@C...

Gombeen666

To add to my woes!

It appears that I have a VLAN loop on my TP-Link switch (TP-Link T2600G-28TS)

Any recommendations as the logs on the TP-link are not reporting anything ?

Gombeen666

Is it possible to do a selective FDB entries reset?

Gombeen666

Update - I setup a similar PTP circuit with new test VLAN's from the CCR RBM11G PTP > RBM11G PTP > RB750 > RBM11G AP > LHG 5 CPE And using new test Vlan's, the test CPE has internet connectivity using the D-Link switch! But when I move the patch lead for the active production PTP from TP-link Switch...

Gombeen666

@tangent
Yes for clarity I edited the output !
There was no HW on output ?

Also as this PTP is in active production!
I think it's best so not to disturb customers that I build a similar PTP so I can fault find why this config works with TP-link and not D-Link switch?

Gombeen666

Here you go - > interface bridge port print detail Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload ;;; PPPoE_AP01 interface=VLAN3500_Ether1 bridge=VLAN3500-Br priority=0x80 path-cost=10 internal-path-cost=10 edge=auto point-to-point=auto learn=auto horizon=none auto-isolate=no restric...

Gombeen666

@ tangent hopefully this info will help? I have setup all my bridges with protocol-mode=none as I am not using STP ? /interface bridge add comment="PPPoE_AP01" name=VLAN3500-Br protocol-mode=none Here is some of the interface bridge port monitor output! /interface bridge port monitor 1 ;;;...

Gombeen666

I must do some more reading and convert over to a single VLAN-aware bridge, strangely I have no issue when the RBM11G is connected to a TP-Link T2600G-28TS switch but the D-Link DGS-1510-28X switch just does not accept my current Vlan configuration? Many thanks to you both for this very helpful advi...

Gombeen666

Hopefully this will provide more info on my VLAN config ! /interface bridge add comment="PPPoE_AP01" name=VLAN3500-Br protocol-mode=none add comment="MGT_AP01" name=VLAN3508_Br protocol-mode=none add comment="PPPoE_AP02" name=VLAN3510-Br protocol-mode=none add comment=&...

Gombeen666

Here is a few vlan's on the RBM11G which I create a bridge for each Ether + Wlan interfaces? [admin@M11G] > interface vlan print Flags: X - disabled, R - running # NAME MTU ARP VLAN-ID INTERFACE 0 R ;;; PPPoE_AP01 VLAN3500_Ether1 1500 enabled 3500 ether1 1 R ;;; PPPoE_AP01 VLAN3500_Wlan1 1500 enable...

Gombeen666

I am trying to figure out when multiple VLAN's coming out of Mikrotik router (RouterBOARD M11G) and connecting to a D-Link DGS-1210-28 Managed Layer 2 Switch port,
are the VLAN's tagged or untagged !

Gombeen666

Is there any method of checking if VLAN packets going into a L2 switch (Ingress ) and out (Egress) are being dropped

Gombeen666

If you have IP connectivity then most likely a firewall rule blocking BTest There is no firewall rules used ? Just to add (1) No static routing is done for the VLAN's (2) Vast majority of VLAN's for Management are a /30 (3) I am using OSPF for Management routing and the /30 Vlans are OSPF interface...

Gombeen666

First many thanks for the detailed replies received so far! I should have mentioned that the current network is L2 bridged using Mikrotik CCR's - TP-Link L2 managed 24port switches - RB960 - RBM11G! And I just wanted to ensure that the current configuration was optimal, I think the Mikrotik's are us...

Gombeen666

Like many others I am confused if a PVID setting is needed in certain configurations, my understanding is PVID will give a tag to untagged packet coming into that port, if the PVID is set at PVID=200 then untagged packets will be given a VLAN tag=200, Here is my questions, (1) If a port on the switc...

Gombeen666

I am using Zabbix 6.4 and would like to ask for advice on how i could check if a Mikrotik device is sending SNMP info back to Zabbix, or if SNMP is being blocked elsewhere on the network!

Gombeen666

Interfaces are irrelevant, Bandwidth Test connects to an IP address, BTest Server will listen for connections on all local IP addresses. I am testing to the VLAN ip address and I get "can't connect", Also I can ping and open VLAN IP address's on Winbox and Dude There is a TP-Link L2 manag...

Gombeen666

Can someone advise me why bandwidth test in tools can't connect to VLAN interfaces but can connect to Ether or Wlan interfaces elsewhere on the network!

Gombeen666

I can confirm that the OID .1.3.6.1.4.1.14988.1.1.1.3.1.10 for CCQ only works if wireless protocol is plain 802.11. It returns 0 otherwise.
Many thanks for the detailed information!

An old post !
But has anyone been able to get CCQ graphing to work with NV2 to Zabbix ?

Gombeen666

@mikeeg02 Many thanks for your post! We had no option to retain customers is to switch to L2 bridged VLAN's for our PPPoE ! So far I don't understand why ONLY OSPF adjacencies is effected, thankfully PPPoE and wireless registration are not effected by any fluctuations in CCQ, signal levels or if pr...

Gombeen666

Here is the OSPF errors we are getting from OSPF neighbours that have reduced uptime, strangely as mentioned earlier there has not been any wireless registration interruptions ? Database Description packet has init bit set in middle of an exchange Ignoring Link State Acknowledgment packet: wrong pee...

Gombeen666

Vast majority ROS V6.49.1 plus a few V6.48

Gombeen666

At present on our small network all OSPF area is area=backbone , So I am wondering if the sections with lower adjacency uptime are effecting overall OSPF performance, should these sections be setup as different area's and would this reduce the effect of their recalculations on area backbone?

Gombeen666

I don't understand why OSPF loses adjacency and establishes on PTP link's but wireless registration has not disconnected and reconnected ! Is OSPF simply not good enough for wireless ?

Gombeen666

We have a few OSPF Point to Point interfaces that have reduced uptime in comparison to other interfaces,I have double checked the setting for any omissions and cannot find any ! These OSPF interfaces span over wireless and the wireless registration does not have any interruptions on uptime! How do I...

Gombeen666

From terminal is it possible to sort by say address or identity /ip neighbor print

Also from /ip neighbor is there a search or find available

Gombeen666

...... 1) You can be certified and still have no idea what you're doing 2) Certifications are the beginning of network engineering knowledge and are often broad in scope - they are nowhere near definitive Be careful in using that as the only measure to justify a network design or practice ............

Gombeen666

ospf does not care whether you have 20 /30 routes or 1 /8 (or any other mask that summarizes the other ones) They do the same exact thing. I understand this but while a 1 /8 could be used on the initial network configuration setup but once the 20 /30 etc have been setup then disable or remove the 1...

Gombeen666

Is this normal that a CHR (x86_64) running on a VM would have L2 MTU at 0 !

Gombeen666

No that's not how ospf is suppose to works. If your going to go in and enable and disable routes then you need to go back to static routes. Without seeing the big picture that looks to be someone learning how to use ospf. and was making a network statement for every network until they realized they...

Gombeen666

You only need the network statement once, why are you creating multiple /30 network statements in ospf when you already have it declared with the 1 /8?. MAke sure you summarize routes on area border routers, to prevent flapping I don't know what you mean they are used for a backup. The original con...

Gombeen666

Thanks for replies so far and apologies if I haven't explained better my question! As regards migration to a routed network, we had no option a few years ago to migrate from routed to bridged network using vlan's, We use a 100% Mikrotik network and OSPF used on wireless interfaces is simply not resi...

Gombeen666

Originally our WISP network was using OSPF but because of adjacency disconnections on wireless interfaces, we had to start using bridged VLAN's for PPPoE , OSPF is now used for management and just wondering if the the original IP's + OSPF network setting were correct ? Example if a one side of PTP w...

Gombeen666

I would like to ask for example 192.168.1.0/24 which has new ip's added that are using /30, can existing or new ip's still use /24 on that subnet?

Gombeen666

Just wondering as we have a Dell PowerEdge R530 if this would make a good replacement or would we have to add some hardware items ?

Gombeen666

Currently we have 2 X CCR1009's with approx 1000 PPPoE sessions on bridged VLAN's , OSPF used for network management and this loaded 50:50 between both CCR's and both would go up to 50% CPU, A Packet Sniffer samples when taken from both CCR's during peak usage hours, on opening with Wireshark had a ...

Gombeen666

Wiki https://wiki.mikrotik.com/wiki/Manual:PPP_AAA "If there are more that 10 simultaneous PPP connections planned, it is recommended to turn the change-mss property off, and use one general MSS changing rule in mangle table instead, to reduce CPU utilisation." We have hundreds of dynamic ...

Gombeen666

We have a PPPoE server from our CCR to clients using bridged VLAN's over wireless Mikrotik network, and would like to ask how do optimise PPPoE Server setting! I am confused by what the Max MTU, Max MRU, MRRU setting should be when using VLAN's? /interface pppoe-server server add default-profile=XYZ...

Gombeen666

I am using LHG 60G over 1.6KMs ( V6.49rc2 ) and would like ask what does as in the screenshot, TX Sector 44 on one side of the PTP mean when the other side is TX Sector 0
Also does TX Sector Info indicate which direction(s) to move the antenna ?

Gombeen666

I am trying to understand what appeared to be a faulty LHG antenna with one polarity ! ( screenshot with -88/-72 Ch1) We tried 2 other LHG antenna's and exactly the same issue with the others, We raised the hight of the antenna and there was no issue with fresnel zone clearance, Finally we tried a h...

Gombeen666

OK - finally sorted it out it appears what was missing was the inverted commas around "[Device.Password]"

"C:\mikrotik\winbox64.exe" [Device.FirstAddress] [Device.UserName] "[Device.Password]"

Gombeen666

With double spaces between the variables , getting "ERROR: wrong username or password" I remove old password (if its there as there no option to reveal password) and enter password Winbox opens, I close Winbox and reopen the same device and once again get "ERROR: wrong username or pas...

Gombeen666

I get "ERROR: could not connect to XX.XX.XX.XX
This is an indication that you can not reach or connect to the device for some reason..

It is not a problem related to The Dude and Winbox ...

When I open Winbox exe program outside of the Dude - No problem connecting to devices !

Gombeen666

Many thanks for your reply but this a configuration issue! "C:\MikroTik\WinBox64.exe" [Device.FirstAddress] [Device.UserName] [Device.Password] When I select winbox In the "Connect To" field is IP + user + Pwd is also listed Remove user + Pwd details from the "Connect To&quo...

Gombeen666

I added Winbox to "tools" menu of Dude 6.48.3
"C:\mikrotik\winbox64.exe"
[Device.FirstAddress]

On selecting it opens winbox but does open selected device !
I get "ERROR: could not connect to XX.XX.XX.XX

Any advice is welcome!

Gombeen666

Got the issue fixed by (1) first importing and applying my oldest backup 2019 which worked - I copied the dude.db (2) then imported a 2020 backup ( dude prompted about vacuuming ...) worked OK - once again copied dude.db (3) then I imported a backup created 3 days ago and this gave the malformed dis...

Gombeen666

Ok solved the incomplete ftp file transfer !

Now I have "echo: dude,critical db failure: database disk image is malformed"

Any suggestions as the dB is working OK on Dude 4.0beta3

Gombeen666

I just created a CHR VM on Proxmox - (credit to smileymattj https://www.youtube.com/watch?v=wI98U1WBFFI ) There is 10G free space and the issue I have is that on dude database FTP upload stops around 100M on any of my backup's - (note my backup's are from Dude 4.0beta3 which I am now migrating to 6....

Gombeen666

CCR1009 with a single bridge and 40 Vlans added bridge ports for PPPoE, is there a more efficient method for the reduction of CPU load!
Each Vlan is a /30

Gombeen666

I would like request some advice on the config setting for STP between TPlink (T2600G-28TS) to RB960PGS, the TP-link uses port7 as master and port8 as backup, So I would like have TPlink port 7 to port 1 of RB960 ( master STP active ) TPlink port 8 to port 2 of RB960 ( backup ) What I am a little co...

Gombeen666

Hi,

I currently have Zabbix monitoring our network and would like to ask can anyone offer advice on how I could have winbox integrated on Zabbix!

Gombeen666

Running NV2 on N protocol what is (or is there any way to discover !) the best setting for AP's + CPE's AMSDU limit, AMSDU threshold, AMPDU priorities , I have read suggestions to use 2048 or 4096 for AMSDU limit but don't understand why AMSDU threshold should be the same as the limit figure! https:...

Gombeen666

RBLHGG-60ad kit , should the master unit have level 4 licence ( ap-bridge) and the slave have level 3 licence for "station-bridge",
As i have a kit with level 3 licence on both units ?

Gombeen666

Just to add another question will VRRP work on VLAN interfaces R1 configuration: /ip address add address=192.168.1.100/24 interface= Vlan100-Ether1 /interface vrrp add interface= Vlan100-Ether1 vrid=49 priority=254 /interface vrrp add interface= Vlan100-Ether1 vrid=77 /ip address add address=192.168...

Gombeen666

Many thanks for replies - in VRRP examples ( https://wiki.mikrotik.com/wiki/Manual:VRRP-examples ) load sharing looks promising but as the radius server has just one gateway ( 192.168.1.1) , Could I set in R1 and R2 the same gateway IP? Configuration R1 configuration: /ip address add address=192.168...

Gombeen666

I have one Radius Server which on its gateway is 192.168.1.1 but is connected to two routers, my question is how do i set gateway address on each router and if one router fails?

Gombeen666

snmp - added "tx-ccq" ("mtxrWlStatTxCCQ") and "rx-ccq" ("mtxrWlStatRxCCQ") values;

Is this now working and is there setup examples?

Gombeen666

@Normis you should have mentioned that newer versions of Dude does not have Winbox, which is strange as they are using port 8291 (unless the installation of Winbox on dude is hidden!) I had to go back to V4.beta3 and simply added via "tools" winbox exe path this solves "missing plugin...

Gombeen666

So much for upgrading and discovering that Winbox is not part of the Dude ? I have gone back to V4.beta3 and simply added via "tools" winbox exe path this solves "missing plugin for winbox"

Gombeen666

Can someone explain -
"The Dude requires "winbox" policy instead of "dude" to monitor v6.46.4 and v6.47beta30+ RouterOS type devices."

Gombeen666

In Tools there is a option to add !
On the Wiki
https://wiki.mikrotik.com/wiki/Manual:T ... /Interface
Winbox is listed in Tools ?

So my question remains how do I add Winbox to V6.46.6 or do I have to roll back to V6.34rc45 as listed in the Wiki?

Gombeen666

I don't understand why Winbox is not linked to this version of Dude?

Gombeen666

ROS x86 V6.46.6 Dude - Winbox is missing from the tools menu ? Is there a solution

Gombeen666

I have a dynamic route created by OSPF but in error I had configured the same /30 ip address for two routers ? and core router is now listing both routers in one dynamic route, how do get rid of this dynamic entry?

Gombeen666

If I understand correctly then any tagged VLAN can be added to a (PVID 2020) ports, with untagged vlan's (1) is just one untagged vlan per PVID port or could it be more than one (2) If more than one untagged Vlan is connected to another port that was also using PVID 2020 does it now require a differ...

Gombeen666

I trying to understand when assigning a PVID number (say 2020) to port 1, 2, 3 does this mean that the exact VLAN's numbers must be used on these ports? Example port1 = Vlan100, Vlan200, Vlan300 port2 = Vlan100, Vlan200, Vlan300 port3 = Vlan100, Vlan200, Vlan300 or could it be port1 = Vlan100, Vlan2...

Gombeen666

On a PPPoE server we have enabled all 4 authentication types
(1) pap
(2) chap
(3) mschap1
(4) mschap2

Is all 4 required and is there any performance improvement by not using them all?

Gombeen666

/ip firewall filter add action=fasttrack-connection chain=forward comment="Fasttrack UDP" dst-port=53 in-interface=all-ppp protocol=udp add action=fasttrack-connection chain=forward comment="Fasttrack TCP" dst-port=53 in-interface=all-ppp protocol=tcp I am considering applying fa...

Gombeen666

I managed to add NTP package to the AP's, The AP uses DHCP server to assign management ip ( 10.100.X.X) to the CPE DHCP clients but so far selecting on the CPE DHCP client "Use Peer NTP" does not sync time /ip dhcp-server network add address=10.100.10.0/24 dns-none=yes gateway=10.100.10.1 ...

Gombeen666

Just checked packages and now Calea has been added, I am sure it was NTP and not Calea package I had in files but will try again

Gombeen666

I updated a AP to 6.46.6 added ntp-6.46.6-mipsbe.npk to files - rebooted but no NTP server ? I am really confused

Gombeen666

I am trying to add NTP package to the AP's so that the AP will serve as NTP server for CPE clients but so far by simply adding NTP to files and reboot does not work?

Gombeen666

How do I add NTP package to ROS versions 6.45.7, 6.46.3 ?

Gombeen666

I have a lot of customers who have the PPPoE client on their WiFi Router for port forwarding ( etc...) trying to run scheduled tasks on the CPE's overnight is a challenge as I have to manually correct the time on the CPE's that have incorrect clock times that could be several many days out ? If only...

Gombeen666

My current CPE configuration gives internet access only when a PPPoE session is established, when the PPPoE client on the CPE is disabled internet access ceases and this results in no clock time sync? I use this on scheduler to keep the clock in sync /system ntp client set enabled=yes primary-ntp=[:...

Gombeen666

What is the effect of increasing or decreasing Authentication & Accounting interim-update time ?

/ppp aaa
set interim-update=5m

Gombeen666

@ mbovenka - Thank you

Gombeen666

Can someone recommend where in Europe to purchase outdoor fibre cable?

Gombeen666

I did a quick search for +48V failover module and so far +30V appears to readily available but only came across OMRON S8VK-R20 Module which goes to +60V?

Gombeen666

Looks like dual +48v DC PSU are difficult to locate so option B is look for a DC failover switch, once again any recommendations are welcome!

Gombeen666

I am looking for a dual +48v DC PSU ( Failover ) with battery terminals to connect battery bank?

Gombeen666

Many thanks for replies - So as i understand
(1) ...180secs of no communication before the BGP session goes down...
(2) ...convergence time for OSPF by default is 40secs.... how fast is iBGP to recover

Gombeen666

Is it possible to save a winbox custom layout?

Gombeen666

Is this screenshot of a CPE ether stats providing any information to help me answer my question!

Gombeen666

I am using Dude 4.0Beta3 and when I try to open mmips routers I get error "missing plugin for winbox" How do i fix?

Gombeen666

I would like to ask is there a throughput difference between PPPoE MTU 1480 or MTU 1492?
Has anyone done comparisons?

Gombeen666

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

How many routes and routers do you have and what OSPF network types are you using - boradcast, point-to-point, etc?

We have just short of 800 routes with over 60 routers, ospf type is mostly PTP

Gombeen666

Presently L2 bridged because 5min re-adjacency with OSPF was just too long for customers which they noticed and complained?
so now OSPF is used for management and L2 bridged for client PPPoE?

Gombeen666

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

Gombeen666

We are currently considering changing to iBGP on our network but can I ask will OSPF error's ( like new master flag=false, malformed init mesage, reject, ......) impact the same on iBGP?

Gombeen666

Is there a way of checking the network path in and out used for traffic coming from a CPE at each Mikrotik device

Gombeen666

The answer is quite simple: there is no "save-file" option to frequency-monitor.

Thanks for replying!

Any other option or method available to remote frequency monitor (or frequency usage!) CPE's ?

Gombeen666

I am trying to save a frequency monitor scan to file? :local sub1 :set sub1 ([/system identity get name]) /interface wireless frequency-monitor wlan1 duration=120 save-file="$sub1 frequency-monitor.txt" but getting error > {:local sub1 {... :set sub1 ([/system identity get name]) {... /int...

Gombeen666

Traffic Priortization, RouterOS QoS Implemetation https://wiki.mikrotik.com/wiki/Traffic_Priortization,_RouterOS_QoS_Implemetation QoS in Nv2 network https://wiki.mikrotik.com/wiki/Manual:Nv2#QoS_in_Nv2_network DSCP based QoS with HTB https://wiki.mikrotik.com/wiki/DSCP_based_QoS_with_HTB QoS on Vla...

Gombeen666

How do I work around bridged VLAN's that carry the PPPoE interface on a CPE ?

Gombeen666

I use this on a network to have different priorities for VoIP, normal and background traffic. We mostly use only 3 DSCP values: - Expedited Forwarding (2e) for VoIP traffic - Normal (00) as a default - Background (08) for background transfers like backups But we have 8 queues in the queue tree to h...

Gombeen666

I have a few questions and maybe some could comment? (1) We have PPPoE Vlan's will DSCP or priorities work on that interface (2) For Mikrotik CPE's that have public IP assigned is "DSCP" a better option (3) Where CPE does not have public IP but is assigned to TP-link router connected to CP...

Gombeen666

I get error "input does not match any value of parent"

Anyone got a complete file to test please?

Gombeen666

deleted post

Gombeen666

On a update to the error messages, I have been applying VLAN filtering to CPE's + AP's + PTP and this was when the error messages appeared at the core router,
I have all my PPPoE VLAN's on one interface (Ether5) , is it possible to VLAN filter at the core router!

Gombeen666

Is there a current list of ROS devices that have a switch chip available?

Gombeen666

Does NetMetal 5SHP have a switch chip ?

Gombeen666

I have random AP + PTP lockup's and with nothing in the logs to indicate the cause of the issue, I am currently follow solutions listed in Manual:Layer2 misconfiguration https://wiki.mikrotik.com/wiki/Manual:Layer2_misconfiguration and applying to our network but tagged and untagged is confusing me,...

Gombeen666

I am slowly beginning to realise that the next connected device will determine if tag or untag is required on the bridge vlan settings?
also can Vlan which as mentioned is untagged be set to tagged on the bridge vlan

Gombeen666

So If i understand this, a Vlan is it added as untagged and ether (or Wlan) is added as tagged?

Gombeen666

On a AP - Interface Bridge Vlan I have added tagged Vlans for ether + Wlan interfaces but in status they are appearing as "untagged" when I activate Vlan filtering, is this normal or do I change the vlan interfaces to untagged?

Gombeen666

I was trying to get more information on the Wiki about bridge admin mac address , it's function and pro's and con's of using this setting!

Gombeen666

@ Anumrak Thank You

Gombeen666

At the moment they are all set to horizon=100 is this the correct setting!

Gombeen666

On a bridge port that has 40+ Vlan's on a single interface, what is the recommended mode setting
(1) mode = none
(2) mode = rstp

Gombeen666

On a core router I would like ask with 40+ bridge port vlan's on a single interface what is the recommended split-horizon setting ,
(1) should they be all the same (horizon=50)
(2) should all 40+ have different setting
(3) or same number for a network segment

Gombeen666

Being dropped for what reason ?

Configuration issue, the VLAN passes traffic for a short period and then stops?

Gombeen666

I should have asked How do i detect if VLAN frames are being dropped by a bridge port interface?

Gombeen666

I would like to request advice on how do I check for traffic loops on bridge port interfaces!

Gombeen666

On the core PPPoE server occasionally on the logs there is PPPoE "authentication Failed" which if the client used correct username but incorrect password I can lookup the radius server but if they use incorrect username which is not listed on the radius server ! How do I trace the PPPoE ba...

Gombeen666

I would like ask is ROS optimized for CPU multi threading ?

As I am considering swapping for my AP's + PTP's - 912UAG-5HPnD, 911G-5HPnD, 911G-5HPacD boards for RBM11G + R11e-5HacD?

Or can someone recommend a better ROS upgrade option ?

Gombeen666

from the core router /interface bridge host print I notice there is some enteries with Age in excess of 1 min, is this normal

Gombeen666

Please try to disable neighbours. I mean ip-neighbours-none. if problem solved. please let me know

I have set on the core router ip-neighbor=none and will check logs tomorrow

Gombeen666

And the problem was gone ?

No - problem still present, I was asked which version I had installed ?

Gombeen666

This info on the core logs only appeared when I updated almost all the network to 6.45.7 + Interface port Isolation + Bridge port PVID "Ingress filtering" "admit only VLAN tagged"
Hey. It's long-term or stable ver? Try degrade to long-term.

I installed the stable version !

Gombeen666

This info on the core logs only appeared when I updated almost all the network to 6.45.7 + Interface port Isolation + Bridge port PVID "Ingress filtering" "admit only VLAN tagged"

Gombeen666

On core router CCR1009-8G-1S-1S+ I get every 12 hours or so vlan error messages, I have checked the paths of the vlans listed but unable to locate the fault,
Is there any general guidelines in fault finding a issue like this?

Gombeen666

Confused why some AP's bridge ports all of which have one VLAN + WLAN - some have
Both interfaces = designated port , while more have interface WLAN=root port and interface VLAN=designated port
Should they all be the same as they all have similar paths back to the core !

Gombeen666

On a access point bridge the bridge ports have a VLAN + WLAN but both interfaces have role="designated-port" ? is this correct or should the VLAN be role=root
and if so how do I change bridge port stp priority (hex value)

Gombeen666

No. Winbox has a nice feature named Safe Mode

https://wiki.mikrotik.com/wiki/Manual%3 ... #Safe_Mode

https://www.youtube.com/watch?v=ZMMpza-O7_w

Time:34:00 approx - no mention of safe mode but listed was scheduler or RoMON for recovery?

Gombeen666

So most CCR's don't have a switch chip? how is port isolation achieved! Only with vlan isolation i believe: https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table But it better be a good switch chip. Try to figure out how to use these switch ports to make an organized isolated network. I was readi...

Gombeen666

From reading https://wiki.mikrotik.com/wiki/Manual:Spanning_Tree_Protocol it reads "...RouterOS is capable of running bridge interfaces with (R/M)STP support in order to create loop-free and Layer2 redundant environment. It is always recommended to manually set up each bridge's priority, port p...

Gombeen666

So most CCR's don't have a switch chip?
how is port isolation achieved!

Gombeen666

Why on a CCR1009-8G-1S-1S+ only 4 ports are on a switch, I would have thought that a CCR would have all ports on switches ?

Gombeen666

To follow on my questions on the best bridge mode setting, Bridge Loopbacks (OSPF, MPLS) bridge mode = ( NONE : STP : RSTP : MSTP) ?

Gombeen666

Good news solved! , was reading on the forum about access issues with older versions of Winbox , I had tried first from the Dude and then from a new version of Winbox to both the IP (PTP side of router Ether1) + mac address of the router but no luck, then as mentioned I had noticed that I had to dis...

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:Switch_Router Confused why Isolated VLANs /interface ethernet switch rule add dst-address=192.168.20.0/24 new-dst-ports="" ports=ether2 switch=switch1 add dst-address=192.168.10.0/24 new-dst-ports="" ports=ether3 switch=switch1 by including n...

Gombeen666

AP Version 6.45.7 on Netbox + RB912UAG + RB911G ... I am unable to add port isolation ! How do I

Gombeen666

I upgraded RB750Gr2 to V6.46 and was able to login and add switch port isolation but when I added switch rule to ether1 that connects to PTP link , I lost connectivity ? From PTP side to ether1 trying telnet access my login credentials are not working along with two other user accounts ! I also trie...

Gombeen666

As I am dealing with Live production devices, I am trying not to cause service outages ! I picked a section of the network that is giving very issues and applied to the AP's bridge RSTP and on the RB960 added Port-Isolation + switch rules /interface ethernet switch port-isolation set ether3 forwardi...

Gombeen666

Last night I switched a number of AP+PtP to RSTP on their bridges and this morning i find in the core router (CCR1009) interface, warning logs with several entries "VlanXXXX bridge port received packet with own address as slave address ( XX.XX.XX.XX.XX.XX ), probably loop" I switched back ...

Gombeen666

How do I setup layer 2 isolation on a AP or PTP ?

Gombeen666

Thanks for the reply!

Just reading
https://wiki.mikrotik.com/wiki/Manual:S ... _isolation

I am unclear as I am also using VLAN's if I should use both
(1) /interface ethernet port switch port-isolation (forwarding-override)
(2) /interface ethernet switch vlan

Gombeen666

On a AP with Bridge port entries for Ether + Wlan , what is the most suitable bridge mode ( NONE : STP : RSTP : MSTP) For a RB960 which has 4 bridges ( bridge1 ports =ether1 + Ether2 ) ( Bridge2 ports=ether1 + Ether3 ) ( Bridge3 ports=ether1 + Ether4 ) ( Bridge4 ports=ether1 + Ether5 ) Once again wh...

Gombeen666

I am trying to figure out a way of packet delay comparsion coming from Netflix and pirate(s) streaming servers.

Gombeen666

For client management there is a VLAN on the AP Wlan interface, DHCP server is using this VLAN, on the client CPE the DHCP client is using this VLAN to assign management IP , OSPF on the AP has in routing/ospf/network a /24 and ospf/interface has a static entry with network type=broadcast, I didn't ...

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:I ... st_Forward

On a bridge with two ports - ether using Hardware Offload and a VLAN, my question is will or possible for the VLAN interface use "fast forward"

Gombeen666

Our VLAN's are working but have a intermittent fault ( every few weeks or so) a PTP or AP will lockup and have to recycle power to the effected device, I thought that VLAN would help but on reading , Bridge VLAN filter disables hardware offloading and reduces performance ? So now I have just applied...

Gombeen666

Thanks for replies and I am still confused ( as always !) the TP-link T2600G-28TS managed switch is showing the VLANs in and out as "tagged"

But in Mikrotik /interface bridge when I add vlan-filtering the "tagged VLAN" is coming up as "untagged" ? Is this normal

Gombeen666

I noticed our TP-link managed switches have VLAN's using tagged ports but the VLAN's on the CCR + PTP + AP's don't have "Use service tag" enabled, Should the Mikrotik devices have service tag enabled, Which is best when using a lot of VLAN's (<80) when they start and finish on Mikrotik dev...

Gombeen666

Does NetBox 5 support bridge VLAN filtering?

Gombeen666

My question - Is there a best of both worlds in a mixed L2 bridged with VLAN's and OSPF network, OSPF used for management for now at least until OSPF on our network is more resilient ?
and should the VLAN's be using quote "new school rather than old school approach"

Gombeen666

With the present config I have errors like "Database Description packet has init bit set in middle of an exchange" + "new master flag=false" appearing on devices connecting by the /30 vlan's across the tp-link switches, So I was considering using a different "area" for ...

Gombeen666

I have over 25 /30's VLAN's connecting across TP Link managed switches , /routing ospf network is using the /30's as backbone , /routing ospf interface has static entries with network=Point-to-Point, However I was reading about /routing ospf virtual-link and wonder if this was better suited for my c...

Gombeen666

I recently observed where PPP profile local address /32 was appearing in OSPF interfaces as a dynamic listing!

Can someone explain the advantages of having this OSPF interface entry?

Gombeen666

Would the higher state changes on one side indicate that the OSPF issue is at that side of the interface?

Gombeen666

I would like ask if someone could explain why is there a difference in the number of state changes on a VLAN interface, where on side shows 14 and the other side shows 4 state changes for same adjacency uptime?

Gombeen666

(but beware of having /32 routes for each session and updating them via auto-routing, that also causes issues)
Could you explain a little more ?

Gombeen666

Many thanks for the replies so far, " ...very advisable to have each service (L2-switching, BRAS, firewalling, core-routing, edge-routing) on it's own (specialised) platform. " Also forgot to mention BGP is also used "... RouterOS is very versatile platform that sometimes leads us to ...

Gombeen666

We have two CCR1009 and one is active but every few months we have to reboot it to fix dns error for our PPPoE clients? An active CCR is using primary services - OSPF, L2 Bridged Vlans , Firewall , PPPoE server The reason for L2 Bridged Vlans for PPPoE is because Mikrotik OSPF is not robust and was ...

Gombeen666

Anyone using 17GHz Transverter from maviradio?

Gombeen666

I would like to ask others have they tried or experience using Mikrotik CPE's to InfiNet AP? As my preference is to continue using Mikrotik Equipment.

Gombeen666

For starters I would like to test that for example - Mikrotik router A should be getting only tagged VLAN packets for two Vlan's ID=1010 and 1020, then router B should be getting tagged VLAN packets for another two vlan's ID= 2010 and 2020 ?

Gombeen666

Is it possible to check on a network for leaking vlan packets from other vlans ?

Gombeen666

What spectrum analyser are you using !

Gombeen666

How do I detect if a weather radar is active at a new site ?

Gombeen666

........................ or tunnel everything back into a common layer2 bridge somewhere which ultimately just doesn't make any sense and provides zero benefit over PPPoE The reason we moved back to L2 bridged was because we reckon our OSPF configuration was not correct and was causing intermittent...

Gombeen666

I am asking if Mikrotik will give me OSPF detailed info like the way Cisco does?

Gombeen666

OK - what command will tell me what OSPF function the router is (IR, Backbone, ABR, ASBR )

Gombeen666

https://wiki.mikrotik.com/wiki/Manual:Routing/OSPF

/routing ospf monitor
Does not work!

/routing ospf ospf-router
Does not work!

From reading Cisco OSPF - "show ip ospf" or "show ip ospf interface brief" - what are the Mikrotik equivalents !

Gombeen666

Can anyone advise where I could source a 19" rack Gigabit POE panel with 12-16 ports and very important to have LAN control to switch off/on individual POE ports ?

Gombeen666

Having a POE out option on a device is becoming must have for power off/on to solve devices that occasionally lock up! The 4011 doesn't appear to have POE out option. It has, but only on 1 port (port 10). For this feature to be useful in this use case, it would be better when it e.g. supported 5 PO...

Gombeen666

I'd use a 4011...compact and 10 gig capable if needed. It's a fantastic tower router and can even be a border router.

Having a POE out option on a device is becoming must have for power off/on to solve devices that occasionally lock up!
The 4011 doesn't appear to have POE out option.

Gombeen666

At a site we have 20Meter POE ethernet leads connecting AP's + PTP's and we have noticed that occasionally OSPF state changes can be high (20-60) over a 24 hour period, we have tried using different OSPF network type = Point to Point and Broadcast Is there anything else we can do to reduce state cha...

Gombeen666

We are encountering at random times AP's (mostly but some times PTP's ) that lockup and there is no access by mac-telnet on ether or wlan to run supout file, I have tried Watchdog and ticked "Automatic Supout" After power restart there is nothing in the logs prior to the restart indicating...

Gombeen666

With 4 L2 bridges on a RB750 I am trying to figure out static IP route (s) ? dst-address=0.0.0.0/0 gateway= ? Do I have to create a gateway for each bridge and/or for each interface port / vlan? (confused!) Port 1 is PTP has Vlan's (a + b + c + d ) Port 2 has AP1 Vlan01 - Bridge A (port 1 + 2) Port ...

Gombeen666

I would like ask on a network that uses the same VRF route mark name ( PPPoE_Mark ) on many devices could this cause confusion or should the name be unique on each device
or does it matter!

Gombeen666

My PPPoE server uses
max-mtu=1480
max-mru=1480
mrru=1600

PPPoE Client
/interface pppoe-client monitor 0
mtu:1480
mru:1480

Just wondering is MRRU setting correct or should it be disabled?

Gombeen666

........... Could somebody give me a 'mtu and PPPoE server for dummies' explanation so I can enhance the performance of our network and silence the complaints from some clients....? I would also like to ask how do you test MTU settings when running PPPoE Central Concentrator + MPLS + VPLS + VLAN's ...

Gombeen666

use-service-tag=yes means to use 802.1ad tag, use-service-tag=no means to use 802.1Q tag. They differ by ethertype value. Don't use use-service-tag=yes unless you're perfectly sure why you do. I am trying to solve a intermittent problem where AP's lockup and have no mac-telnet access by either ethe...

Gombeen666

At present the vlans on the AP's don't use Service Tag, so I wonder if i checked this option and used service tag option for the RB750 and for other routers in that segment and Tagged rather than Untagged vlan is this recommended?

Gombeen666

I am trying to establish if I need additional VRF route marks, which in my case has RB750 3 AP's Vlans + 1 local admin vlan connected by 4 bridges to port 1 Port 1 is PTP has Vlan's (a + b + c + d ) Port 2 has AP1 Vlan a - Bridge A (port 1 + 2) Port 3 has AP2 Vlan b - Bridge B (port 1 + 3) Port 4 ha...

Gombeen666

In that case the traffic is separated at L2 layer by running on individual bridges; to prevent routing between IP subnets which use those bridges, the firewall rules or vrf as suggested above can be used. As i am a newbie ? could I ask for the four bridges do I need to create 4 routing marks on fou...

Search found 224 matches