MikroTik

gottin

Hi, After adding the feature to specify time-zone I decided to make use of it. However it's wrong for our capital. The offcet for Europe/Sofia should be +02:00. It is +03:00 in MT. The problem persists in the last beta7 version too. I'll be glad to see it's correct in future versions. Please let us ...

gottin

If you don't want 192.168.x.y routers to be distributed - try to create and apply a filter.

gottin

Well, I coped to run it on linux with X. However it's better this application to be run as a deamon without being nesessary any graphics.

gottin

I'm interested in this issue, too

gottin

Well, I checked 3.0beta4 and the Dude works. However, I don't know how stable it is.

I have an appeal to MT team. Well, in case it exists as a MT package, why don't you release it as a standalone Linux deamon. It will be a lot comfortable

Thank you,
Stanislav

gottin

Hi swiss,

Please read a little bit more about dscp. I represents , I think the first 3 of 8 bits for the TOS field. For example, tos=64 is equivalent to dscp=4 or somethink like that.

Anyway, it will be good to has a general dscp support in MikroTik

Regards,
Stanislav

gottin

Would someone from MT support explain us why MT 2.9.x can not mark packets that are flowing through bridge interfaces? Should we wait for a fix?

gottin

I can not understand what exactly do you mean. However, there is a problem about marking whatever traffic on bridge interfaces in 2.9.x versions

.

gottin

I am using traffik marking and sending that traffic to different PCQ queues.

Have you tried that?

gottin

Here the problems is not the same. Here there's no graphing at all. Moreover in case that I get to log into that router I can see that the CPU is not at 100%. Three other MT 2.9.18 are working fine with that version. Again, If it is a buggy state , I can not log in. However it can get out of it alon...

gottin

your problem is probably due to bad traffic. May be something is generating lots of packets or just buggy packets. However it's not the easiest task to debug it from your MT machine. May be a linux machine with traffic analyser installed in clients' segment of network will help

gottin

Yes I have sent the support output file. However there is no resolution for that problem, still.

gottin

It really looks that I can not shape traffic on a transparent bridge. However it is strange that the guys from MikroTik have posted an article HowTo shape on it! (http://www.mikrotik.com/Documentation/H ... How_shaper)

gottin

Well I have my bridge set up and running, however I can not shape traffic on it.

gottin

Shaping p2p works for be when making queues into "/queue tree"

gottin

I have the same problem on 2.9.6 version. I have done a lot of shapes on non bridge interfaces and they work fine. However when marking traffic in/out of interface (that is specified to be a bridge port) that traffic is not going into any queue. I tried to use "/queue simple" as explained ...

gottin

Well, when I tryed to check drivers it reported an error. [admin@router] driver> pr Flags: I - invalid, D - dynamic # DRIVER IRQ IO MEMORY ISDN-PROTOCOL action timed out - try again, if error continues contact MikroTik support and send a supout file (13) I looks it really has a driver/interface prob...

gottin

It's not so easy to change that machine. Taloot, has that problem been gone after changing your chipset?

gottin

Hi you all. I am registering a strange/buggy condition of one of my main MT routers. You can see it on a graph. http://tu.botevgrad.com/data/graph_image.jpg MikroTik version = 2.9.18 (It was the same situation win ver2.9.17) So, it doesn't stop to work at all. However when it is time of a "blan...

gottin

dsdee, may be a kind of package conflict occures. In case that routeros-rb500 contains all other packages , why do you left the system package. I think that if the system package is 2.9.13 all others wont be upgraded. I suppose that in the case with only routeros-rb500 i system packages active , the...

gottin

Are you transffering files in binary mode. You should transffer your .npk files in binary ftp mode.

gottin

I think that after upgrading to 2.9.17 there are problems with my shapes too. There are a few reports from my colleagues. I am investigating this problem now.

gottin

It's working fine without the prefix-list. The most important is to put the 3 routers to talk to each-other in three different "canals" (/30 nets) instead of one network that takes in an IP address from all the routers. Btw, I read a lot about OSPF and I think that a configuration that &qu...

gottin

OK, I think I resolved my problem with OSPF. So I will summarise to help others with same problems. With the topology that I presented above ( 3 routers in one switched network segment ) the solution is: 1) You should have /30 networks between the 3 routers (BR, R1, R2 ) BR 10.8.1.1/30 <=> 10.8.1.2/...

gottin

What do you mean to use a bridge.

Btw, I'm using routing-test. Should I use on routing package?

gottin

That is my config. I use one RADIUS server and have different IP-pool settings for all clients with dynamic IPs, however the problem with static routing is with clients that get static IPs. So my routers should understend someway on which access server is connected this client with static address. I...

gottin

There are pppoe servers on 100.100.0.2-3 and I is not sure on which one of them a client will connect. That's why a routing protocol is necessary in this situation. I have routed staticly all possible networks.

gottin

I tried what you offered me. http://tu.botevgrad.com/topology.gif I removed the prefix-list-import from all areas. All routers 100.100.0.1-3 had ospf network = 100.100.0.0/24 on the backbone area. I also added to additional areas 10.10.0.1-2 that are run on other interfaces as you suggested. Again t...

gottin

Well it looks it's not problem conserning the number of hosts, because with 50 hosts the situation was same

.

gottin

Mapik, is it a porblem for you to post your successful config, because I still experience problems

gottin

Yes, I'm using a backbone area: / routing ospf set router-id=x.y.z.a distribute-default=never redistribute-connected=as-type-2 redistribute-static=no redistribute-rip=no \ redistribute-bgp=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20 metric-bgp=20 / routing ospf area set ba...

gottin

I have same problem as Mapik with 2.9.17. My routers are seeing each other , however they don't redistribute their routes. My topology is:
AS1 <=> switch <=> AS2
................... |
............... router

Is it a problem that all of them are in one layer2 segment?

gottin

I tried on a second box with 2.9.17 installed and the same netwatch rules installed - the same problems occured.

gottin

I upgraded from 2.9.12 in which everithing was working. Now I will test if it will be working with less than 60 monitored hosts. There are about 90 hosts with interval 2m20s and timeout 1s - it is still not working properly. There are hosts that are marked with down and in the same time they are ful...

gottin

Netwatch is not working for me for sure. What interval and timeout are you using? I've tested with:
timeout / interval
2s 30s
2s 1m
1s 30s
1s 1m

I have almost 100 monitored hosts.

gottin

Yes, I can ping manualy the netwatch host. I'll read again the documentation about OSPF more carefully than before and I'll try to set it up again. I suspicious thing about my current ospf config is that I have two networks on the interfaces that are sending ospf messages to each other. I have 192.1...

gottin

I have hoped so much that version 2.9.17 will be a stable one, however it looks that it's not. Last night I experienced lots of problems after upgrading core routers to 2.9.17. For example after trying to setup OSPF one of the routers get loaded up to 100% (3.3 Ghz Intel). There were problems and wt...

gottin

I upgraded from 2.9.12 to 2.9.14 and I have to problems wit comments of rules. All of them are in place.

gottin

What about the RIP protocol? Does anyone have experienced problems with it. I had one 2.9.12 and two 2.8.26 MTs runing rip among them. However, the 2.9.12 MT started receiving different gateways for an certaing address advertices by one of the 2.8.26 MikroTiks. For example, in one moment 2.9.12 is s...

gottin

Hi guys. I have a problem setting up bridge interfaces in MT. I'll start with explaining the topology: ____________________ _____ | s w i t c h | ----- | LAN |-----[ PC ] 192.168.1.1 ------------------------------- -------- | eth0 MT1=(wir ~ ~ ~ ~ wir)=MT2 192.168.1.2 My idea and goal is to bridge e...

gottin

I thinkg that there's no problems with this functions. It really don't show the routes with distance of 120 , however if you have routes with distance greater that 120 the RIP ones take precedence.

gottin

OK, I read it. However I didn't find anything specifcaly related to RIP. Do you mean that the whole 2.9.13 routing-test package is brocken.

gottin

I found some problems with RIP and version 2.9.13. Well, I have One main router and two acces servers. Between all of them RIP is set up. The problem is that sometimes the router (version 2.9.13) have uncorrect rip rules. For example, a host is connected to AS1, while the router has a route rule (ri...

gottin

In general I'm changing the MSS only of some of my clients. I think it is a problem of some LAN cards. There are cards that don't allow packets bigger than 1500bytes. The problems for my clients come with some sites (most often with sites that use Microsoft technologies , like ASP). I think that som...

gottin

well, I've enabled one-seesion-per-host. I have also enabled ppp in aaa. That were not the problems for sure. Something other that I noticed is that with about 350 connected users and 300Mbit traffic going through the MT it was loaded to 100%. I think that the network traffic and lots of ppppoe conn...

gottin

Today I upgraded our AccessConcentrator to 2.9.10. There were a lot of bugs. Half of the users were getting addresses=0.0.0.0. There were a lot of users logged in more than once ( e.g. 5times). A lot of radius timeouts... I really think that there are real problems with 2.9.10 and pppoe connections....

gottin

I'm using "/queue tree" where queue type is PCQ. So I'm marking whole nets, putting them in the specific "/queue tree" queues of specific type. If you want to achieve those port priorities you should build far more complex mangle rules. Wheres all markings for a net has one paren...

gottin

There's a changelog:
http://www.mikrotik.com/download/CHANGELOG_full

gottin

Consider marking a whole net and putting it into a queue with PCQ type. It's the easiest way. However it's good idea to read up "Bandwidth management" from the official documentation.

gottin

Check for accepts of that traffic earlier than the conn. marks.

gottin

wildbill442, would you explain what is the difference btween port based and based on MAC vlans.

10x

gottin

well, there is no problem with win XP. It is only with win98 PCs. Today there have been more than 20 calls for such problems. I'm iterested if there's a solution with configuring the upgraded router.

gottin

OK, I have a similar problem. Network schema is this: (Clients) <=> (AccessServer) <=> (Router) <=> (The world of WWW) After upgrading the Router from 2.8 to 2.9.5 a interesing thing did hapened. Some clients that are using Windows98 can connect to the AccessServer without problems but they do not h...

gottin

10x Eugene.

I have one more question. Where should I put prefix-length?

In this rule: 1 chain=bgp-out prefix=50.50.50.0/25 action=accept or in separate one?

gottin

I think that routing-test is in working state, but as a whole I can't claim MT 2.9.x is in production state. About routing-test problems you cat raad this: http://forum.mikrotik.com/viewtopic.php?t=4971. I have a 2.9.5 MTrouter in a production environment and it does not have serious problems that I...

gottin

Check this configuration: /routing filter 0 chain=bgp-out prefix=84.22.28.0/24 action=accept 1 chain=bgp-out prefix=50.50.50.0/25 action=accept 2 chain=bgp-out prefix=0.0.0.0/0 action=discard /routing bgp peer 0 remote-address=212.116.131.9 remote-as=29667 multihop=no in-filter="" out-filt...

gottin

Yes, I know that it outputs only what is actually being used , however it's more dificult to orientate than it was in 2.8 versions with "print brief".

gottin

10x for your response normis

gottin

I would be very glad in case that someone can explain why "/routing bgp network" has to be removed and no similar functionality added. Why people have to use hacks like "add an empty bridge interface, filter ... and so on"?

gottin

Is there a reason for not implementing "print brief" function for firewall in 2.9 version? I'm asking because I'm working only with terminal console and filter, nat and mangle tables when become large are very difficult to maintain. It is at least 2 times more difficult for me to maintain ...

gottin

Yes, I loked into /routing filter, howver couldn't find a solution. Moreover there's almost no documentation about it. If somebody knows s.th. relating this problem, please post some comments here.

10x

gottin

I found that my problem is questioned here. Well, I'm interested how to specify which networks to announs when routeing-test is installed. Said in other words - what is the equivalent of "/routing bgp network" when routeing-test is installed.

Search found 62 matches

incorrect system clock timezone

I need an Advice/Idea

netwatch is not working on 2.9.17

bridge interfaces

PPPOE SERVERs - DO NOT upgrade to 2.9.10

Is it a bug of BGP advertising?

print brief