MikroTik

jfreak53

Well that idea is gone now. All of the crypto servers have been offline for 48 hours and still doing it, now more frequently.

Anyone have links to firmware 2.2 or 2.12 that we can put on these and try?

jfreak53

I was just curious if it "had" to be from the switch port or if I could go directly to server. I'll do that here this week and see what I get. Thanks!

jfreak53

If I have access to one of the servers doing it, creating the traffic, could I run wireshark on that server directly capturing the NIC port?

jfreak53

@jfreak53: if you can pinpoint the problem to certain packet contents, then you'd make MT (and humanity) a favour if you could sniff off those frames and send MT the capture file. IMO this is the only way allowing MT to actually fix it. Unless they see those packets and analyze which combination of...

jfreak53

I can confirm this is still happening! I'm running SwOS 2.16, two different TOR switches, CRS354. I am currently running 6 different 354's as TOR's, each with massive traffic and VLANs. Out of the 6 only two of them have this issue, and it only happens with certain packets. I've tracked it down to t...

jfreak53

I ended up temporarily fixing it by resending the javascript ajax call to post to the page, but with no ACL rules. I saved another ACL list on another switch the same model and copied its post payload.

So its obviously something wrong in the error checking code for SwOS. Anyone have any ideas?

jfreak53

I got this error after putting 3 new ACL rules into my switch today: https://cdn.microtronix-tech.com/imgs/Screenshot_at_2024-11-11_16-40-47.jpg Its a CRS354-48G-4S+2Q+ running SwOS 2.16 like all my other ones. Once I put that ACL in it worked fine for about 20 min or so, then all of a sudden this c...

jfreak53

Awesome! Thanks for the info! So based on that I found a fresnel calculator: https://proxim.com/products/network-tools/online-calculators/fresnel-clearance-zone/ I gave it 60GHz and 0.16 miles. It gave me 1.86r, based on that site I need roughly 2ft under my line of sight if I'm reading the calculat...

jfreak53

Got it! Ok, that makes sense. I noticed that this has better distance than the RBLHGG-60ad, so same speeds, but better distance. Is it "worth it"? My max distance is roughly 500 to 600m, but we do have Ohio weather. I've used the RBLHGG-60ad already, but shorter distances, like 150ft type ...

jfreak53

I'm looking at a pair of nRAYG-60's, they say aggregate speed is 2Gbps, but port speed max input is 1Gbps. Anyone test these, is the port speed a 2.5G RJ45 and truly capable of 2Gbps? I have an RB4011 at each end, my idea is RJ45 SFP+ optic up to antennas, but no point if they don't get 2G speed. Di...

jfreak53

Trying most recent credentials and it won't connect. My public IP I'm connecting from is 66.213.68.133. Did I get blocked?

jfreak53

I'm trying to create a script to log an optics signal strength, but its just not working. When I run it, it outputs the whole status of the sfp port, instead of just the tx and rx power. Here is my command: /interface ethernet monitor sfp-sfpplus1 once do={ :log info ("sig:Rx/Tx:$"signal-s...

jfreak53

I've got two fiber ports coming into our main router, in round-robin mode for fail-over as well. All that works great. But I'm trying to configure it to auto-fail over in case of port A or B line being down in the middle of the night. This script is what I have, will this work or is there a better w...

jfreak53

The thing i did not mention is that we have two of these 1072 devices at our core edge. Both of them upstream to a different ISP getting full tables and are interconnected again. Both of them started exhibiting the same problem at the same time - running the same version. This is why we suspect its...

jfreak53

I know it sounds crazy - we have had similar issues with the 1072 for the past month without changing anything and for no reason we have been plagued with random packet loss every 30s - its about 1% causing issues with udp traffic like gaming, voip , RTP. Running 6.48.5 which has been rock solid fo...

jfreak53

We've been using the 1072 series now for a bit over a year, just below 2G sustained normal traffic on port 1 coming from a 10G upstream port. Nothing crazy traffic wise. We are BGP announcing nothing major, 9 routes, 3 of which are IPv6. So nothing major route wise nor traffic wise. Everything has b...

jfreak53

I can draw a diagram tomorrow morning and post. Can I ask how do I assign subnet to interface without vlans? Didn't realize I could do that. I assigned one to eth3 and that ip just didn't work.

jfreak53

Probably, I understand VLAN configs under normal circumstances, Router setup, then switches force the ID onto X or Y port. But this CRS using ROS to force the ID onto a port is new to me and not making much sense. In essence, in the CRS I want to separate my entire /24 into smaller /29's, each physi...

jfreak53

Yes, this is what I want. The CRS is acting as the in between router, it has ROS installed on it. Replacing VLAN tags is not routing. If you want your CRS to do routing, then don't mess with VLAN tags, assign IP addresses to all 3 VLANs and configure devices on all 3 subnets to be aware of your rou...

jfreak53

This is what ARP print gives me: [admin@RouterOS] /ip arp> print Flags: X - disabled, I - invalid, H - DHCP, D - dynamic, P - published, C - complete # ADDRESS MAC-ADDRESS INTERFACE 0 D 192.168.2.23 vlan20 So it gets an IP since I've got this server set to static, but no mac and I can't ping it from...

jfreak53

Yes, this is what I want. The CRS is acting as the in between router, it has ROS installed on it. The IP address from port ether3 is showing up, but no MAC applied to it, and I cannot ping it. I added two new rules to take 110 back to 20 and 30 on the switch coming from SFP1 to ETH3 and 5, so that's...

jfreak53

So do you mean I have to have 30/20 to 110, then two other rules to take 110 back to 30/20 in reverse direction for bi-directional communication?

jfreak53

I'm trying to force-tag traffic on switch ports 3 and 5 on a CRS326, and having a heck of a time. Using ROS, not SWOS for this task as we need more granular control in the long run on this device. I need to force the VLAN ID like when you do the force checkbox for VLANS in SWOS, but need to do that ...

jfreak53

Any ideas? I'm at my witts end with it. Do I need a peer remote address on IPv6 to advertise IPv6? Right now my advertising AS peer if a v4 remote address. While it's possible to advertise both BGP AFIs over an IPv4 peering, very few ISPs do this. You should have an IPv6 address for peering from yo...

jfreak53

Any ideas? I'm at my witts end with it. Do I need a peer remote address on IPv6 to advertise IPv6? Right now my advertising AS peer if a v4 remote address.

jfreak53

I've tried all those options, still won't advertise.

jfreak53

1. disable the static routes for the /48 as unreachable 2. disable the bgp aggregate config 3. remove the synchonize check box on the BGP network statements for your /48s Then post the output of: routing bgp advertisements print where peer=peer_name Thanks for the help! Still no go advertising, onl...

jfreak53

Anyone got any thoughts on what I'm missing? Thanks!

jfreak53

The network statements will be looking for an exact match of the prefix length because you have synchronize turned on which will look for that route in an IGP. For the aggregate statements, you need make sure you have component routes within those ranges that are smaller than the summary. Can you p...

jfreak53

We've just recently setup IPv6 in our BGP table, but for the life of me I can't get it to show up in my advertising list in BGP. All our IPv4 ranges are advertising just fine, I've enabled IPv6 in our peer and reconnected it as well, still no go. I've created the routes, and some of them are showing...

jfreak53

Thank you MKX. Last one, how do I stop a server from grabbing an ip it's not been assigned in arp?

jfreak53

Out of a whim before I switched to ROS I upgraded from 2.10 to 2.13.....it worked!! No other changes, it just worked. So now that it's working, I'm trying to figure out without success, and I've googled a few times but not finding what I need. I need to assign multiple ips to one server, one nic. I'...

jfreak53

Any ramifications of using ROS instead of SwOS on this that you can think of? Might it heat up more or choke on bandwidth because of the ROS overhead?

jfreak53

If you still can't get it to work with SwOS, would you consider using ROS instead of SwOS on the CRS326-24S+2Q+RM? At least that has a text mode config that you can export to upload to the forum. That is an awesome idea!! I should never be using the 326 for tagging since it's purpose is bandwidth t...

jfreak53

By multi level I mean two level of switches, router, switch one for passthrough tagging only, switch 2 for actual tagging ports. Tagging ports works if I plug it directly into router. Doesn't work as a second level after switch 1.

jfreak53

Interesting, I plugged the 48 port directly into the SFP on the CCR1072 and the tagging worked! No changes to tagging at all, it just worked plugged in. To me that means that my multi-level tagging is what's causing the issue, so the issue is on port 24 and 23 on the CRS326Q. Any thoughts? Since the...

jfreak53

Yes, I don't want the person using that server hooked to that port to tag different traffic to get in our internal network. I want to force them on that lan regardless. If I don't check that they can change their lan.

But I've tried with it off, doesn't work either.

jfreak53

Trying to get VLAN tags to work over multi-level fiber switches and it's just not working at all. Edge CCR1072 SFP8 (out) -> CRS326Q-24S+2Q+ (SFP23 in) -> SFP24 (out) -> CRS354-48G-4S+2Q+ (SFP2 in) For my SFP ports I am using all S+85DLC03D. DHCP is working fine. I have another 24 port Gigabit mikro...

jfreak53

Did some forum searching, last post on this I saw was from 2015, wanted some fresh opinions since there is a lot of new hardware. Has anyone used Mikrotik for DC applications, more importantly as edge routers and switches for 10G fiber connections? Mikrotik has two devices the CCR1072-1G-8S+ and the...

jfreak53

Does routeros support 3rd party development of plugins? Looking to create a plugin to send info off-site.

jfreak53

I'm trying to change an Audience routers LED color to solid red all the time. Tried following this code, but it always returns an error.

/system leds
add leds=user-led:red type=on

input does not match any value of led

user-led is there, doesn't return anything if I leave the red part off.

jfreak53

I am sorry, I figured since I was doing the DHCP on the CAP all the work and problems were on the CAP, not the 3011, figured since the problem was on the CAP I didn't need to post the 3011. There is no need to be rude please, I was asking for help simply in what I did wrong. Two bridges, wrong only ...

jfreak53

Any thoughts?

jfreak53

I've got an RB3011 setup as the main network router, working great. I've then got a Cap AC for wireless, I've got the cap setup with the main two WLANS set for staff, it's set in WISP AP mode and Bridge mode. The staff WLANS grab IP from the 3011 just fine, 88.0/24 range, no problem there. The 3011'...

jfreak53

Do you have ethernet jacks available at various locations or were you planning on using wifi for connecting access points? Yes, we are running cable for them. Looking at Ruckus their prices are obnoxious! I do understand the high power output and antennas the units have, but still. What is the best...

jfreak53

What do you want to actually achieve ? Do you just need a link from one side of the warehouse to the other side or do you need cover the warehouse for wifi for cranes,forklifts,inventory management ? I've done Blanket installs and you'll need much more than 1 AP and probably move to Ruckus,Aruba,Ca...

jfreak53

Thanks for the advice! Do I take it Mikrotiks Basebox2 or 5 doesn't come close to Ruckus wifi signal ability?

jfreak53

A laptop for work, other than that cell phones from roughly 5 to 8 workers.

Not high isles, maybe 12 ft racks and not many of those even. Most of the racks are on the walls. Other than that, just CNC machines on the sides and open main isle.

jfreak53

What would be recommended equipment for a 10,000 sq ft warehouse with a couple of walls in between? It's open but a lot of metal since it's a machine shop, racks and machine and such. I'd like to get away with 1 unit if possible, but I know 2 might be necessary. I know without doing a site audit and...

jfreak53

Which unit has more signal output power for 2.4 and 5Ghz, the Basebox 2 or the Powerbox?

I'm looking for the most output radius distance for connected devices, not interantenna.

Thanks!

jfreak53

Any thoughts? I'm sure I'm missing something simple but not sure what.

jfreak53

I've got an RB4011 as my main office router, setup fine, all working. I then have a cAP ac wireless access point I want to use to give Staff access and a HotSpot that authenticates against a Radius server. I've had an RB4011 with WiFi integrated working with this same setup, but getting this non-wif...

jfreak53

I my QoS configured correctly? It's still garbled and a major issue. Only happens when 3 phones are off the hook at the same time, meaning it's total bandwidth.

jfreak53

Below is how I have QOS configured, direct to the IPs of the phones. https://cdn.microtronix-tech.com/imgs/Screenshot_at_2019-10-04_09-16-21.png https://cdn.microtronix-tech.com/imgs/Screenshot_at_2019-10-04_09-16-49.png https://cdn.microtronix-tech.com/imgs/Screenshot_at_2019-10-04_09-17-09.png htt...

jfreak53

RouterOS Version 6.44.4. I've currently got SIP disabled:

jfreak53

Trying to configure a mikrotik routerboard to replace a sophos sg105 that was super over complicated for the needs. Network works great, phones are another issue. We have polycom phones with weave voip services. I have disabled sip alg, and created what I think is basic qos on the phone ips. I've up...

Search found 56 matches