MikroTik

sirbryan

above quoted line from the manual > "you can use the "save config" button to copy it over to other partitions."" this can be done without any device mode changes, limitation only is applied to manual re-booting to other partition, if main one is still working And this is th...

sirbryan

Let me remind you, that if your device has some need to be routinely switched between partitions all the time, send somebody to unplug it from power ONCE in it's lifetime, to enable device mode setting for this. Let me remind you that you guys are adding both fixes and features in RouterOS 7 at a f...

sirbryan

The documentation says: [D]evices running versions prior to RouterOS version 7.17, all devices use the advanced/enterprise mode and: (Disabled features in advanced mode) traffic-gen, container, partitions, bootloader and, as mentioned in another post: container, fetch, scheduler, traffic-gen, ipsec,...

sirbryan

I use and enable partitions remotely ***all the time*** (on anything with large enough flash, particularly RB4011/5009/CCR's). And sometimes I forget to set all the things while I have physical access to it (i.e. on the bench/in the lab) before I deploy the router in the field. Blocking the ability ...

sirbryan

Any reason we couldn't get this to work on a decent-sized CCR with containers? I'm thinking at minimum a CCR2004 4GB RAM and external storage or more likely a CCR2116/2216 with SSD's. Can you please provide more information? Installation method? any errors you face? and which part is not working? P...

sirbryan

As an internet Service Provider, that also is considering more of a Managed Service Provider role: For my own stuff, locally-hosted servers are a must, and containers (or an NPK on a CCR2xxx/CHR would be cool). I like how Ubiquiti keeps UniFi separate from UISP. I use UniFi to manage customer's inte...

sirbryan

Have those of you having issues tried older versions of RouterOS? I have been running the iOS 18 betas on my phone since WWDC. I have also installed dozens of hAP AX3's since then, which I test from my phone or M1 MacBook Pro (which has been running the Sequoia betas). I netinstall 7.14.x (2 or 3, f...

sirbryan

I am currently looking at the CCR2004-1G-12S-2XS myself, but leaning more towards the CCR2116-12G-4S+. I think it will be a better buy. Just a bit worried about the power consumption. The 2004 12S is probably best suited for someone who needs to have a lot of SFP+ ports connected but only with burs...

sirbryan

Any reason we couldn't get this to work on a decent-sized CCR with containers? I'm thinking at minimum a CCR2004 4GB RAM and external storage or more likely a CCR2116/2216 with SSD's.

sirbryan

ZeroTier is Wireguard wrapped up in a nice management package. How much processing power you need boils down to how many clients you plan to have connected to it, and how much traffic (packets per second more than bandwidth) you're going to push. If all you're connecting is a bunch of smart devices ...

sirbryan

After further inspection, CRS300's (CRS310, NetPower16/CRS318) that are participating in OSPF/BGP had really low RAM available numbers, related to the number of days of uptime (4 days = 64MB of RAM left, 8 days uptime = only 22MB of RAM left), whereas those acting as switches are fine (160-170MB of ...

sirbryan

I've submitted a ticket, but wanted to post here just in case someone else has seen a similar problem. I have five CCR2116's in a full iBGP mesh. Three are peers with other providers, two sit in our core. We take full routes, but filter out AS-PATH's longer than 2 ASN's. For a couple of years this h...

sirbryan

I feel like the combo box to select what used to be tabs is a regression. It takes up the same about of verticle space but now requires 2+ clicks. I preferred tabs in some of the windows like interface settings/status/traffic for example, now it's on a roll down within the main window. It's ok, may...

sirbryan

What does your "default" template look like? Does the Cisco VPLS NLRI need to be set (this isn't for VPLS, is it)?

sirbryan

Props to the developers. This work is not an easy feat to accomplish. Looking forward to the progress in coming releases. I don't want to sound so negatively but some really bad practices (in terms of UI) made it into this new Winbox. Are there any UI/UX designers working for/at Mikrotik? Welcome to...

sirbryan

It means that you've maxed out the L3 HW-offload memory, and any packets destined for routes that aren't in the ASIC will be routed by the CPU like any other CCR or RB device. The only way to "fix" this "problem" is to create filters reducing the amount of routes your router inge...

sirbryan

Unless (or until) it's been fixed, MPLS is limited to a single CPU core in one direction (encapsulation or decapsulation, I forget which) in RouterOS 7. There's a thread about it on the forums. (I tested it on a pair of 2004's and posted my results there.) Since the 2116 has more slower cores than 2...

sirbryan

FYI: MLAG issue: two CRS317 in MLAG, with ESX hosts dual connected to CRS317 (not LACP, but having ESX decide which switch to send traffic based on the port up status, and the MAC address of the VM). When switch 1 goes down for firmware upgrade, all is ok, ESX starts using switch 2 for all VMs. Whe...

sirbryan

Does /routing/bgp/advertisements/print on the ROS7 -> Cisco match what you see on ROS -> ROS?

sirbryan

Thank you, got your point. What I have done is that although I have enabled bridge vlan filtering but I have tagged all the vlans that would be used by CPE in that region and also few management vlans. What I have understood from your point is that I should create vlan 2003,2004 on bridge interface...

sirbryan

That's not how the standard works, which is years-old, by the way. (Google for Channel Switch Announcement, 802.11h.) Oh, did not know that there is a separate standard. Thanks for the information. Googled it, should be defined in IEEE 802.11-2012. But when it really is this, I would want Mikrotik ...

sirbryan

But it could also be that the AP just promotes the 2ghz BSSID when the 5ghz BSSID goes down for scanning (or vice versa)...

That's not how the standard works, which is years-old, by the way. (Google for Channel Switch Announcement, 802.11h.)

sirbryan

As for the ISP speed that was just what they called it, I would guess it really is 2.5Gb. I will look into the bonded pair, have looked at LACP but as I understand it that only gives 1Gb with redundancy. An ISP can sell whatever they want and call it whatever they want. Comcast/Xfinity out here has...

sirbryan

But with the change of 7.16 something changed and it may not noticable because anymore: *) wifi - send channel switch announcements to clients when switching channels at requested re-select intervals; But I don't know what it actually does. Mikrotik did not explain it thoroughly. The AP has the abi...

sirbryan

Two years later... still no TG, still max 8 stations per AP. Meanwhile the U competitor has increased the number from 15 to 24, and have GPS sync, and channel 6 too (much longer range). The max station per AP limit is a function of the chipset. Qualcomm's limit is at 8. Peraso (Ubiquiti and Tachyon...

sirbryan

Chateau is deployed for LTE or 5G areas. This is what these Chateaus makes expensive: their modems. You can expect which speeds on LTE/5G in real world? And with these tremendous speeds 5G/LTE offer it makes no sense to have an SFP port. It makes even no sense to have more than 2.5g ports. And agai...

sirbryan

And thats it? At first glance it might have worked.

Generally, yes. The low number (in your example, 1460) just needs to be below the threshold of whatever is blocking larger packets upstream.

sirbryan

Unless you want to keep specific VLANs from going through the link, don't mess with bridge VLAN filtering and don't add them to the bridge VLAN table. For just two radios in a PTP config, it's simply enough to create a VLAN interface (attached to the radio's bridge) with the VLAN tag (2003 or 2004) ...

sirbryan

This sounds like an MTU problem. Are you using a VPN?

There should be a mangle rule that clamps the TCP MSS to the MTU. Sometimes it's automatic if you have a PPP-based link.

sirbryan

If you set up a filter for OSPF out, it will, by default, reject everything and only allow what you want to go out. So, for example, if I want 10.0.0.0/24 to go out, my filter would be: if (dst==10.0.0.0/24) { accept; } In this case, I want to allow any subnets within the 10.0.0.0/8 range. Use "...

sirbryan

you must choose: 16mb or SFP+. Can't have both 😅 But joke aside: Chateau line is ISP equipment. Why would one need SFP+ on a consumer device. Because companies like Google are offering 2.5Gbps and 5Gbps service. Even if nobody needs it, an SFP+ port allows the customer (or ISP providing customer eq...

sirbryan

Why do you think badly? It wasn't to contradict you, but to confirm: I also modified my previous post...

OK, that makes more sense.

sirbryan

I own two of them and have run a series of throughput tests, both bridging across ports and routing across ports. They are lousy at routing much over 3Gbps unless you have zero filters/rules, at which point the CPU can push about 19Gbps in+out (at 99% utilization). By including the diagram, you're p...

sirbryan

The CCR2004-1G-12S+2XS does not have a switch chip. All ports are bridged to the CPU by way of the PIPE chip thing. The CCR2004-16G-2S+ (and Passively Cooled version) has two 8-port switches. (We're ignoring the PCIe version of the CCR2004.) The RB4011 has two 5-port switches. The SFP+ ports on the ...

sirbryan

The RB4011, RB5009, and CCR2004 all have relatively the same speed of quad-core processor, with 4011 being arm32 and 5009 and 2004 arm64. The 5009 has three ways to power it (triple redundancy), and has a POE-out option should you need/want it. Heck, you can get two or three RB5009's for $600. The C...

sirbryan

Why is it important? Maybe somebody else has another "very important" variable they need everywhere. We can't cram everything in one screen. Some of us manually manage hundreds to thousands of devices (radios, routers, switches), and being able to see at a glance (like we used to be able ...

sirbryan

Good to know, thanks, but in normal operation is 5 GHz completely disabled or - since it is a (useful BTW) sort of failover link - it is in a sort of standby mode (thus consuming anyway some power)? From experience with other devices in "normal operation" devices consume anyway much less ...

sirbryan

In the meantime, WISPs worldwide wait for a vendor to bump existing 48-57V passive POE switches from 1Gbps to 2.5Gbps ports (and more than four of them) to run their Wave and Tachyon gear, and with 40-90W, it would even support their Cambium and Siklu (and others?) PTP links. The RB5009Pr-outdoor wa...

sirbryan

I made a typo and put 192.168.0.x instead of 192.168.10.x (post edited), but my point still stands. Your vlan10-ether1 interface's IP address is 192.168.1.11x with a network of 192.168.10.0. Your vrrp1-ether2-vlan10 is 192.168.10.254 with a network of 192.168.10.254. The network should match that of...

sirbryan

If your VRRP interface is using an IP address in the same subnet as the master interface (192.168.10.0/24), then the network (192.168.10.0) and subnet mask (/24 or 255.255.255.0) has to match. The network for the IP address 192.168.10.254 should be 192.168.10.0, not 192.168.10.254. If you were to us...

sirbryan

1) Frequency = 62640 or 66960

At 20 feet, these will run pretty hot regardless of the channel.

66960 is best for long range, followed by 64800 and 58320.

62640 or 60480 have the highest oxygen absorption (although at 20 feet it really won't matter).

sirbryan

You might have to resort to using two VRF's and mangling traffic to split across the two VRF's. It wouldn't be ECMP, but it would accomplish the same purpose. If you really want ECMP, two routers could do it, one in front with two VRF's, each with a PPPoE link and a gigabit port, handing off those t...

sirbryan

If it's any consolation, the US rules for U-NII-1 and U-NII-3 have allowed for more power for almost a decade, particularly in PTP outdoor mode on the upper end of the band. Yet all of the "designed for outdoor use" radios are arbitrarily limited to 30 or 36dBm for yet-to-be-explained reas...

sirbryan

I'm a one-man shop, so this may not be as exciting to you. But I take my hAP's and netinstall them to whatever version I feel most comfortable (presently 7.14.x) with my stock config. When I do the install at the customer, I put on the finishing touches, like AP SSID and WPA password, hostname, etc....

sirbryan

I never found a stable PtMP on these but I gave up and went with wave also. Would love to hear someone elses experience with newer firmwares though, did they solve the disconnects? I just looked and realized I have as many people on MikroTik as I do on Wave (around 150 each). As I posted earlier, 6...

sirbryan

Bump on this please, has everyone else given up on MLAG on the CRS platform? I haven't. CRS312, CRS354 MLAG'd together with a CCR2116 on one side and a pair of MLAG'd CRS317's on the other. The 312 and 354 are running 7.15, tied together on SFP+ ports with a DAC. (The QSFP+ ports on the 354 have br...

sirbryan

What you can charge is not just dependent on what the market can bear, but what the customer can bear. The market is an average across customers in your demographic (country, region, city, neighborhood, industry). Add to that what the individual customer can handle. A small public school is likely t...

sirbryan

Just wondering, what kind of rule do you use for source nat? I'm having issues using srcnat action=src-nat and action=netmap when L3HW offloading is enabled. It only seem to work with masquerading otherwise traffic halts... So what are you using please? When i disable L3HW offloading, everything wo...

sirbryan

Depending on how large your POPs are determines whether you have one just one router for customers to connect to, or a stack of routers, with one being customer-facing (PE or Provider Edge), and another one at the POP being that POP's core. On small networks, like mine, I have one switch/router faci...

sirbryan

Has anything improved?

I have no experience with the CubeSA 60 Pro's. The latest 6.49 and 7.9-7.12 have been fine for my wAP 60's and Cube 60's (first and second generation).

sirbryan

But we could also discuss other needs, for instance high speed <500m links with full obstruction. Some people may have such usecases as well... Fiber is a great NLOS technology, and you can get amazing speeds...... RF physics is tough to overcome, until we figure out how to harness quantum entangle...

sirbryan

If you are fine with the 5GHz equipment and dishes you have, then go for it. 3km should be no problem, and with 40MHz channels, I can't see why you couldn't get 100-200Mbps over that. Same for the 6km link. Personally, I'd use 60GHz radios. Presuming they're available and you can use them in your co...

sirbryan

What does the script do?

You can likely just copy the script over from the 1016 to the ARM router. You'll have to adjust the script for 7.2 and for the new architecture, regardless of whether you upgrade the one or not.

sirbryan

This is what I use to keep from leaking routes learned from other peers that I don't provide transit for: if (bgp-as-path "(1234|5678|1000)") { reject; } This keeps me from announcing routes learned from AS's 1234, 5678, and 1000, no matter where they are in the AS path. On top of that, I ...

sirbryan

Don't do a "both" UDP test. Try "send" and then "receive." Your limiting factor will be the CPU's of the radios, so as suggested elsewhere, do your "official" testing with devices on either end of the radios, ideally something with more horsepower like two com...

sirbryan

My adguard container won't start after update , nothing in log, anyone else has problem with containers ?

No problems here on a CCR2116. Six containers (pihole, open-speedtest, samba, uptime-kuma, home-assistant, esphome).

sirbryan

We do not have massive complaints regarding the subscriber experience behind a connection that uses cgnat IP. In addition to CPU usage and traffic, what other variable would you recommend we take into account?. It really depends on how it's connected to the rest of the network, but in theory you sh...

sirbryan

Hello, I am from a small ISP in Argentina. I ask you two concerns. What is the private IP to public IP ratio that you are using in CGNAT? How much is the maximum volume you reached in CCR1036/CGNAT? Up to what volume of traffic do you consider it advisable to take it? I've since sold the 1036 and h...

sirbryan

ACHTUNG !!! ALERT ! Do not use this version with CRS354 !!! Huge packetloss, huge performance drop, unusable on some ports. Oh darnit. I already upgraded my CRS354. And I'm not seeing what you're seeing. Mine's in an MLAG pair with a CRS312, both connected to a 2116 on one side and another MLAG pai...

sirbryan

Hmmm, I am aware of ZeroTier but I used to think about it as a VPN for those who don't have a public ip. Correct me if I'm wrong, but the traffic between devices is "coordinated" by a third party? I don't think the actual traffic goes through another server (I hope it doesn't), but there ...

sirbryan

Larsa Where is the server that these links connect to? And that's the reason you're paying a couple hundred bucks. Someone else has built the solution, hosts stuff in a datacenter, and has bandwidth/power/development costs associated with doing so. I'd view ZeroTier as the tool to build something a...

sirbryan

??? How not distributing 127.0.0.1 address is "stripping functionality"? It does not even make sense to distribute 127.0.0.1, it is called "localhost" for a reason. as others have said, if the changelog entry really means "we won't redistribute 127.0.0.1 as a connected rout...

sirbryan

What’s the SUP for this so we can reference it? This seems like a critical bug that should hopefully be easy for them to address, hopefully in time for 7.15 if treated as urgently as it likely should be. Not a bug. It's by design. See the FCC paperwork for these radios. They would have to get it ce...

sirbryan

Looking at your design, here's what I'd do pretty quickly. ISP A -> 2216 no. 1 ISP B -> 2216 no. 2 Customers -> 2216 no. 3 (& 4?) 2216 nos. 1, 2, & 3 (& 4) all connected via backbone. ----- Internet comes into border routers. Borders may aggregate all routes between each other, or may fe...

sirbryan

Provision customers with Q-in-Q, strip the outer VLAN on the aggregation switch, and trunk the inner VLAN back to the BGP kit. You want to allow your customers to pick the outer VLAN ID (the outer VLAN ID can be decided by the customer; it makes no difference to you. The inner VLAN ID is picked by ...

sirbryan

OK, I received my two NetBox 5 AX's and installed them at 19.3km with 26dBi 2'/600mm antennas (Siklu dual-band 5GHz/80GHz). I expected to be able to get a decent amount of throughput based on MikroTik's link calculator, but with the way MikroTik "nerfs" the radio TX power, it's no wonder t...

sirbryan

I don't see where you specified an STP mode on the bridge...I'm not sure what that defaults to...But you need to define that for "proper" operation. It defaults to RSTP. Again...Just "labbing" up the connections and seeing the "state" as "up" isn't enough to ...

sirbryan

Has anyone had any issues with MLAG between 4 RouterOS systems? I want to form two mlag-ids, one per two devices and those would link together, via LACP. Thoughts? Something like this: Sw01 ---- peer-link ---- Sw02 | | | | Sw03 ---- peer-link ---- Sw04 I would have MLAG between Sw01 and Sw02 with m...

sirbryan

That's too bad. I just got it working. In this lab, I have two CRS326's that have been reset to defaults and upgraded to 7.14.3. There is no configuration, which means no bridge and no IP addresses. This way all ports are disconnected from each other, ensuring no bridge loops or other oddities durin...

sirbryan

Thanks for replying and including detailed config. Yes, this is the config without MLAG active as doing so breaks STP. Yes, my MLAG peer port is sfp-sfpplus1 and I'd set its PVID to 999 which was to be my dedicated ICCP VLAN. I'd tagged VLAN1 as one of the guides I was following said it was require...

sirbryan

A bunch of your relevant config is missing. But the PVID of your MLAG port has to be a different VLAN. You're tagging VLAN 1 across what I assume is supposed to be your MLAG port (your MLAG line is missing), and that won't work. Here is the relevant (scrubbed) config from one of my working MLAG setu...

sirbryan

So the assumption is that: ISP comes into RB5009's 2.5G port SFP+ on RB5009 goes into one of CRS310's SFP+ ports (using a cheap DAC) All 2.5Gbps devices go into CRS310 All remaining devices can go into RB5009's ports 2-8 or CRS310's remaining 3 ports This gives you the most LAN throughput from any d...

sirbryan

How many of you who are still complaining have read all the thread entries, particularly the one pointing out the release notes from 7.14.2/7.15rc1: "wifi-qcom - added configuration.distance setting to enable operation over multi-kilometer distances" ...and actually applied the setting via...

sirbryan

no, there are very few antenas on the market. I would by NetBox 5 AX if there was small 20cm omnidirectional anntena

That's a pretty uninformed statement. What kind of antenna do you want?

(The following is just from one distributor.)

Screenshot 2024-05-15 at 8.33.11 AM.png

sirbryan

Just unboxed and installed this switch, but I'm getting only 100 Mbps on all the ports? Is there a default setting that needs to be changed upon startup? This is a replacement unit for a different switch, all Cat6 cabling, so it's definitely the Mikrotik. ISP service is 1Gbps. Tested on direct conn...

sirbryan

My current 27km AirFiber 5XHD link on 3' (1m) 34dBi antennas and 100MHz of spectrum ... This setup hardly qualifies as "wifi based link". While it does use frequency from U-NII-3 band, it obviously doesn't use 802.11-compliant channel width (which would be either 80MHz or 160MHz) ... and ...

sirbryan

Install the wifi-qcom-ac drivers on them, set one up as an AP, one as a station bridge. On the bench, I get 600-700Mbps on hAP AC3's to my newer devices that support WiFi5 Wave 2 (i.e. iPhone, MacBook Pro). The hAP AX3's get closer to actual 800Mbps of throughput on AX capable devices. On AC and lat...

sirbryan

I did a quick google search and it says 60GHz 1Gbit device. Sorry I'm not an expert in other brands, but in 5GHz you can't get 1Gbit over 30+ KM AirFiber is a line of devices, in 4.9GHz, 5GHz, 11GHz, 24GHz, and 60GHz. The 4/5 GHz radios can get around 500-700Mbps aggregate, 11GHz about 550Mbps full...

sirbryan

Mind you, other than non-standard illegal amateur work, you can't expect anything good in terms of bandwidth from a 30km 5GHz link. This is why the maximum connection distance I make is less than 16km. My current 27km AirFiber 5XHD link on 3' (1m) 34dBi antennas and 100MHz of spectrum (US UNII-3 58...

sirbryan

The Cube60SA has always seemed to have problems. I use wAP 60's as AP's and the original Cube 60's, LHG60's, and Cube 60 Pro's as CPE, and regularly get 300-700Mbps through them (straight Layer 2, DHCP). Is the MTU 1600 to allow for PPPoE and VLAN overhead? Are all the Cube60's on the latest RouterO...

sirbryan

I second what @mkx said, as that echoes my experience. You've hit the limit of what the quad-core CPUs' can handle on RB5009, RB4011, and CCR2004. The ports are fine, and if you're able to come up with a scenario where you're just switching or bridging, then more of it hits the hardware. But speed t...

sirbryan

Either way, no. You have to balance the traffic at one point only (e.g one main router) but the CRS326 is a bad router for this purpose. The other option is to staticly balance the users/switches between the four RB5009 (that then will balance the connections between the four 5G-modems) From the de...

sirbryan

It looks like four 5G connections coming into each 5009, and each of the four 5009's is feeding a number of VLANs to which the WiFi AP's will be attached. What throughput are the 16 routers going to give you that 4 couldn't? Does the service provider 1) throttle throughput to 100-500Mbps per 5G rout...

sirbryan

I was using a pair of UBNT AF60LR (with a 300mt link), so no 5Ghz backup. Latecy point to point was 0.8-0.9 ms. Do you think a pair of RBLHGG-60ad or nRAYG-60ad could perform better? Generally I've seen more jitter on MikroTik's and Ubiquiti's Qualcomm-based radios than on Tachyon and Ubiquiti's Pe...

sirbryan

You can either have hardware-accelerated connection tracking (FW/NAT) or routing, but not both at the same time.

Try disabling HWoffload on all the ports, but leave it on for the switch, and see if that fixes anything performance-wise.

sirbryan

He said 30km or longer, guys. I had a pair of dual-band LHG XL's at 32km, from the valley floor to a mountain top, but both the 5GHz and 2.4GHz links were pretty weak and we only got about 10-20Mbps out of it after maxing everything that we could (for US region). I don't think the noise floor helped...

sirbryan

I haven't dug into that myself. I'm still figuring out how to best leverage all these BGP knobs.

sirbryan

Without posting some of your config, it's hard to know how you're doing things. But it sounds like what's happening is if you don't put the /24 somewhere on your router, it stops announcing it to your upstream provider. You need to at least blackhole route the /24 to the router itself so the BGP ann...

sirbryan

Specificity always trumps almost anything else. If provider Z doesn't give you anything but the default route, then you'll need to filter out everything from the other providers except for the default route. With your use case, unless you're saturating one of your providers on outbound, slurping in ...

sirbryan

One thing is missing. You haven't marked the blue links as a LAG with an MLAG ID (it can be the same for both sides if you like).

The blue links themselves are a LAG between the MLAG pairs. To the switches, they will need to be configured just like the links going to the PVE stacks.

sirbryan

The short answer to your question is that it should work and your diagram looks good. I did a similar configuration in the core of my network, with two CRS317's in one MLAG setup feeding six routers, and another MLAG pairing with a 312 and 354 feeding my home/office router (a 2116). Then I connected...

sirbryan

Short answer (from what Raimond pointed to):

For NAT to work, the traffic has to hit the CPU initially, and then it pushes those NAT sessions to the ASIC. You therefore can't enable L3HW Offload on the WAN ports or else it'll never hit the firewall. You can only enable it on the LAN ports.

sirbryan

to get a maximum throughput of 500mbit on freakin masquerading is simply surprising for what's otherwise a 2.5G device. The CRS310's are great routers, if you don't need the CPU to do anything (queueing, firewall, NAT, etc.). I have a few of the 5SFP/4SFP+ CRS310's at customer-facing sites, paired ...

sirbryan

If all ports are part of a bridge, and you enable IP firewall on the bridge, then, unless hardware offload (switching) is enabled on the individual ports (which it is by default), it should send all traffic through the firewall. At that point, you can use whatever Layer 3 rules you want to keep devi...

sirbryan

I don't see how anyone but Mikrotik devs can really help, it's not a configuration issue... Sounds like a good reason to open a ticket, then, if you haven't already. The forum is for users to share what works and what doesn't with each other, with only the slight possibility that a dev might see it.

sirbryan

I am using a 5009 with several ports with VLANs (all on a common VLAN-aware bridge) and I have not yet observed such a problem... I have set the STP mode to "none", as I always do in places where there is no need for STP. Unfortunately, STP is needed on this router due to some uplink redu...

sirbryan

I have an RB5009 where I've started noticing it randomly stop talking to devices on one of the ports. It takes a reboot to fix it. No amount of port-bouncing or bridge tinkering works. I suspect it's seeing occasional route loops or some other packet it doesn't like and it silently shuts down the p...

sirbryan

Mikrotik has "general rule" about not touching existing configs, except during major upgrades where a config update is necessary. Usually, changing connection tracking settings falls under that "not a major upgrade" category. Except they did just this with VRFs and firewall rule...

sirbryan

Well, among other things I just found and fixed the UDP timeout (which is amazing, Mikrotik changing it for new setups but not changing it for existing installations where the user has not changed the default value - talk about breaking systems) which fixed SOME of the issues (RDP it seems). Now I ...

sirbryan

7.14.x reverts/restores BGP as-path filter behavior on egress to previous behavior. Why isn't this mentioned in the release notes? Before and up to 7.7, any outgoing as-path would be filtered based on an incoming AS's number (their ASN was first in the match list). Sometime after 7.7 (not sure which...

sirbryan

The 2116 is a beauty, with plenty of resources for homelabbing.

sirbryan

do you still have use cases where the ARM devices work as full-fledged routers, so using any ROS feature, and not only as APs. If second, why not offer a slimed main package for the "as AP only mode"? I have situations where I use dynamic routing protocols and VPNs on low-power devices li...

sirbryan

Hi, any another experience with 60 Ghz for long distances? Thank you That's kind of a generic question for a year-old post. What exactly are you needing? MikroTik's 60GHz distance limitations have been discussed in several threads. For close-range (<500m for PTMP, <800m for PTP, Cubes don't go as f...

sirbryan

Guys, remember that most of the lab devices they are developing on have nothing else on the disk, so 7.14/7.15 etc. all fit and work fine because likely the CI/CD setup is wiping those test devices with a fresh netinstall every time. You can't expect a lab device to load up all the cruft many of us ...

sirbryan

Is there ISP gear that can be powered via PoE in? I'm not aware of that (at least in Italy). Yes, my antenna was powered by port1 of the ax3, so there are a real use cases. I use AX3's when my customer's wireless CPE is capable of 500-2500Mbps. If it's a MikroTik 60GHz radio, the router automatical...

sirbryan

I have OOB access to the serial console so it isn't a big deal to actually recover if I make a mistake. I guess I'm going to have to test it on site, sadly I don't have OOB connection T_T. Kind regards, Set up ROMON between the routers. All routers connected via Layer 2 will see each other and be m...

sirbryan

L3HW offload is hit and miss on the 2116's. I have it disabled for now on all of mine. There are known issues with ECMP (multiple identical-cost routes) and L3HW offload. They fixed some of it (for plain routing) a release or two ago, but I found new issues with it when NAT is enabled on a 2116. Wit...

sirbryan

Yeah, POE + 2.5G + 24V to me doesn't make sense. It seems one can only use two out of the three features of that port. We use Tachyon radios in parts of our network, and it is nice to see that 2.5G port light up. But they want too much juice to use the router's POE, as do Wave radios. I use them wit...

sirbryan

I ran into this when trying to install a customer's connection. It was at 5GHz, not 60GHz, but concept was the same. I was trying to align it down my side of the street, straight towards the AP, but it was going through a couple of trees. I was watching my phone while turning the radio and noticed t...

sirbryan

Remember that in other posts, MikroTik pointed out that it would actually make file sizes larger to split some things out. Over half what the OP requested be removed is part of the stock Linux kernel (ppp, ipsec, wireguard, etc.). ppp, for example, is required for pppoe, a standard still used by ISP...

sirbryan

Individual ports are added to the bond, and the bonds are added to the bridge.

sirbryan

Back to 7.15b6: My home/office CCR2116 stalled overnight. Log says kernel panic. I had to power-cycle it to get it to come back. It had been running for two or three days (since b6 came out) just fine. Aside from OSPF & BGP to external network, it's got a few containers (piHole, homeassistant, o...

sirbryan

Only one strange thing, after reboot my active interfaces without POE devices were red, "PoE out status: short circuit"... Then you probably upgraded from a quite old version. Always mention your previous version. You can go to interfaces->ethernet and open each interface and set PoE to &...

sirbryan

After messing around with it as bare metal on the Honeycomb (extra-nics was installed), I booted back into Ubuntu and got it working through QEMU/KVM. With 2 or 8 cores, I can get it to receive 1.5Gbps and transmit 700Mbps, so I'm guessing there's a bit of optimization yet to be had. iperf3 on the h...

sirbryan

Huzzah! Just like with QEMU, two NVMe drives works. But it doesn't see any of the NICs or USB interfaces. That would probably explain why the install kernel doesn't see the USB drive after it takes over from UEFI. In System/Resources/PCI it lists just the NVMe drives. I wonder what cards in Ampere s...

sirbryan

I made a tiny bit of headway trying to boot the installer on my Honeycomb LX2. Using a UEFI image from SolidRun, the ISO boots via USB. It looks for an NVMe drive (SATA are ignored), and then burps because it can't find the CD-ROM. Based on what we saw with QEMU, I wonder if it expects the CD-ROM to...

sirbryan

I'm personally running ARM64 variant on my Rock 5B now via KVM virtualization, and it achieves maximum throughput! I'll have to try it via KVM on my SolidRun Honeycomb LX2 that's collecting dust. It doesn't support UEFI boot and their UEFI shim is out of date. Otherwise I'd have spent some more tim...

sirbryan

Sweet. I got it installed and booted.

Now to figure out how to boot it under Apple's Virtualization Framework to get closer to the CPU.

sirbryan

I'm excited to see what people come up with now that the Ampere ISO is out. I tried messing around with it but I can't get things to boot. I tried on Equinox Metal, but couldn't get it work. I do not think it's Mikrotik fault... Metal uses iPXE with netboot.xyz for custom OSes. I use VMWare on X86....

sirbryan

I said quite the opposite. I said we listen to all users, not just the forum In what language? What you said was very clear, and you made no mention of listening to all users. In fact, it seemed to be, if anything, stating that home users, ME included, dont come to the forums, nor all the people I ...

sirbryan

I'm excited to see what people come up with now that the Ampere ISO is out. I tried messing around with it but I can't get things to boot.

sirbryan

*) media - added support for DLNA;

I was happy to see SMB leave the default system package, but DLNA is even worse.

SMB didn't leave. It was replaced with ROSE's version of SMB.

sirbryan

Regarding the "Handshake for peer did not complete" log messages from WireGuard... I confirmed that these were coming from my passive peer entries where I had configured a persistent keepalive. The keepalive configuration was the "trigger". Removing that keepalive stopped the me...

sirbryan

Is this the Fasttrack inactive the intended behavior? According to https://forum.mikrotik.com/viewtopic.php?t=182658 FastPath should be supported with VLAN filtering since 7.2 so this condition should still be met for Fasttrack, shouldn't it? RB5009 doesn't qualify for hardware-offloaded routing, j...

sirbryan

VLAN MTU Issue We have reproduced multiple issues regarding VLAN MTU not applying correctly or resetting to default after reboot. Unfortunately, it is too late to incorporate the fixes into 7.14, so those will be available in the upcoming 7.15beta. Is this an issue introduced in 7.14? I see heavy d...

sirbryan

Should more of us file support/feature requests for generic UEFI support in CHR?

sirbryan

I had a site where this was happening. I don't remember whether it was warm or cold when it happened, but I eventually replaced it with a 5009. All ports (except maybe one) were being used. I have other 4011's still out there with only 3-4 ports being used, mostly on 1-5, and they haven't exhibited ...

sirbryan

IP WAN ports (like eBGP Transit, IXP port, PNI port, residential broadband DHCP, PPPoE etc) are meant to be independent PHY ports outside any bridge, if they need VLAN tagging on egress, you directly create layer 3 sub-interface VLAN on top of the port. This has been discussed ad nauseam. In all of...

sirbryan

Something seems wrong in the code, i do not think that it is a setup problem. If it where a setup problem, i think that the MTU value would be rejected during setup, not silently after a random time. I've seen this on a number of releases over the past year or so, but in my case it can take weeks o...

sirbryan

I tried this tonight WITHOUT using UTM, only Apple. I used some swift from an Apple sample project that used VZEFIBootLoader() & another sample with the serial console window. To confirm, This window is not the VGA graphics from the CHR VM, but a SwiftUI window connecting to the serial port of ...

sirbryan

I can't speak for the 309 as a NAT router, but as L3HW offloaded router, I've got a pair doing it right now as my core aggregation routers, talking to CRS310's and NetPower 16's out in the field. I have two CCR2116's doing CGNAT, and with L3HW offload, NAT load drops to near zero. Unfortunately, it ...

sirbryan

Outdoor AP's cover both WISP and WiFi needs. Better to get those out and on the market because it reaches a wider audience. Likewise, a WISP can start upgrading their sites (since it's backwards compatible) in preparation for CPEs to come. Am I missing something? The new ax hardware is not backward...

sirbryan

Outdoor AP's cover both WISP and WiFi needs. Better to get those out and on the market because it reaches a wider audience. Likewise, a WISP can start upgrading their sites (since it's backwards compatible) in preparation for CPEs to come.

sirbryan

When mixing MTU sizes on VLAN interfaces on the bridge, anything that's not 1500 starts up as 1500, breaking OSPF adjacencies and causing PMTU issues. And now, even if I run my script at startup to "fix" the VLAN interface's MTU (by disabling and enabling all of them >1500), something post...

sirbryan

Short answer: Yes. On AP side put all 60GHz and 5GHz radios in the same Layer 2 network (bridge/LAN/VLAN) and set up CPE bond to be active/passive (or active/backup, whatever it is). This will also allow you to pass VLAN tags through, so long as the bridge/switch/router at the AP side has all VLANs ...

sirbryan

I use these in PTMP deployments as well, with OmniTik 5AC's as the 5GHz AP and its POE out powering a couple of wAP60's at half of my MikroTik-based sites. The rest are 60GHz-only to wAP60's. The bond on the CPE side is active/passive, with the 60GHz as primary, and all of the AP's (5GHz + 60GHz) in...

sirbryan

7.13 crashing when winbox is left open is a known bug

OK. Makes me feel better. Sort of. I thought I had seen/read it before.

sirbryan

So, people with reboots must send their supout files to Mikrotik, please. 🙂 After posting that I had had none, I had two within the past 72 hours, one a 1036 and the other a CRS317. The only difference between the weeks (and months) of them running without reboots and the last couple of days was my...

sirbryan

It is an advantage of RouterOS that MikroTik releases new versions for old devices for a very long time. Other manufacturers have a separate image for every device, and they simply stop releasing updates for older devices, except sometimes for security issues. It could be considered to have a "...

sirbryan

So it's not entirely random, it's tied to some particular configuration. I'd say that's an useful input for mikrotik devs who will try to chase the problems down. And I agree with @whatever, none of my devices (running 7.13) suffer from reboots either. Indeed I'm not using neither openvpn nor wireg...

sirbryan

Multiply that by all routing protocols and on 16MB devices most likely you will not be able to install routing package at all. That's the point: almost nobody will want to run routing protocols (none but static routing, which should not require any executable to run) on devices with only 16MB flash...

sirbryan

I will add that even though it's single-core bound, the throughput on 2004 was still 8Gbps full duplex, or 9Gbps one-way (due to testing on 10Gbps ports, of course) with the router bridging an entire interface with the VPLS, routing it over the second to the second router, which passed the traffic b...

sirbryan

That was me. :D Well, I was one ISP who spent some time tonight testing from a 2116 to a 1036 through two 2004's (as well as with another ISP's two 2004's from a 1036 the other night) and determined it was single-core on egress. (All boxes under test are on 7.13.2.) According to the WISP Talk Facebo...

sirbryan

In a past life (job) we had some devices with mixed AC/DC power supplies in a -48V environment and I don't recall any issues.

sirbryan

Yes it will work.

In pretty much all redundant PSU situations, each PSU steps down to board voltage (for most of MikroTik that's 12V) and the board draws from one or all online PSU's.

sirbryan

See this post: viewtopic.php?p=1043459#p1043459

Try swapping the A/B pins (+/-) between the DRS and KNOT. Also, I couldn't get the /iot/modbus/transceive commands to work, but using a TCP app to connect to the KNOT works just fine.

sirbryan

For lack of a better spot to put this, I'm dropping it in general. I'm having a heck of a time getting a KNOT to talk to a mean well DRS-240 unit that has modbus exposed on an rj45/8x8 connector. pins 6(+) and 7(-) on the mean well running to A+ and B- on the KNOT. .... I've also tried hitting this...

sirbryan

No single device would get better bandwidth than one of the links, That is accurate and NOT bonding, and thus as stated it is not possible, just another form of load sharing. You can bond two EoIP links using LACP, if you really wanted to. It's not as good as using Layer 3 techniques, though.

sirbryan

Yes, you can--sort of. If you build two tunnels over the different connections back to your own office, you can bond over the tunnels. No single device would get better bandwidth than one of the links, as the current bonding technologies assign individual flows to one path or the other. Simply put d...

sirbryan

Vendors are competing for your business. Lots of people get hung up on only using one vendor/manufacturer because of "reasons." But, as a provider, it's up to you to find and use the best tool for your business and customers, and if a vendor isn't making that tool, they're not holding you ...

sirbryan

I'm doing CGNAT for 500+ people on a 1036 with 2.5-3Gbps of traffic at peak and only 5-10% of CPU load running RouterOS 7.11.2. Minimal firewall rules (to protect the router itself) and minimal shaping (about 30 of the 500+ customers).

sirbryan

I don't know how many filter rules you have on that firewall, but that's probably why your CPU is higher. I know I can get about 800Mbps on the CRS300's I've tested without any firewall rules (maybe one or two), so you could try testing to see which rule (or set of rules) is causing the CPU load. Or...

sirbryan

The log says there's no version of the Unifi container that will load on that particular CPU. From https://gist.github.com/jasco/2d39fdc808a1c482ed3c295d0e09c116 : "The instructions for setting up the Unifi Controller on ARM do not cover ARM64. The documentation states that ARM64 is not support...

sirbryan

Pardon the "me too" post, but I observed an OSPF regression between 7.13Beta 2 and 7.13RC2. The beta ran fine on my home/office CCR2116 for a number of days (a week or two I believe). Loaded the RC for a few minutes (it peers via OSPF and BGP to the core of my ISP network) and adjacencies ...

sirbryan

ZeroTier is Wireguard, with their additional relay tech. And now MikroTik is doing their own thing with Back to Home. I'm not disputing the benefits, especially for the double NAT scenarios you speak of (both ends), where there is no choice but to relay. ZT and BTH make that easy. But I also know my...

sirbryan

Fwiw, ZeroTier is already integrated into ROS v.7. As for remote management, I’d choose ZeroTier anytime over WireGuard but the latter might serve well as backup access. ZeroTier is a great tool/service for automagically creating Wireguard tunnels between peers, especially for management & tele...

sirbryan

I know I'm coming in on this conversation late, but I'd like to throw in a couple ideas that you can look at once you get Starlink squared away. 1) I would use Wireguard (if possible) for the management VPN. If one end (your office) has a static IP, the remote end(s) (the router(s) behind Starlink) ...

sirbryan

You might have luck by enabling L3HW offload in (webfig/winbox) Switch -> (select the only switch) -> L3 HW offloading. That only works presuming you've followed all the steps in the L3HW offloading documentation. Since you're doing NAT, do not enable it on any of the switch ports too. Otherwise you...

sirbryan

While I agree with this, there's also a good side to it. I'm thankful for all the people who do run the beta and report issues - I don't have the time to do it - even when they run it in production. It will result in a better final version. Alpha and Beta testing have their place on production netw...

sirbryan

The CRS310's CPU is quite a bottleneck for anything but the simplest of tasks. hAP AX3 or RB5009 would be far more powerful (and cost-effective) options for USB3 drive hosting. If you really need some kind of all-in-one solution, CCR1036 and CCR2116 have M.2 slots for PCIe NVME drives, plus plenty o...

sirbryan

In another case, we have a BGP router with Full Internet (and we have around 300.000 connections), so I have some doubts that L3HW work. Until today we didn't have the courage to activate it (also due to bad previous experiences). Anybody have experiences in these cases? L3HW can give some relief w...

sirbryan

If mikrotik releases a poe variant of the CRS310-8G+2S+IN we will buy hundreds of them. @Normis do you want to share if this might be in the works?

If you open up the new CRS310, you'll see lots of interesting stuff related to POE on the circuit board...

IMG_1262.jpeg

sirbryan

Your configuration looks pretty straightforward, i.e. no routing, just switching, which is good. What speeds are the ports reporting? Do they show up as 10G? Are all the devices in the same LAN subnet?

sirbryan

@gotsprings I haven't used the SA's at this point. I'm using wAP60's and Cube60's as AP's with up to 8 CPE at a time and have over 100 customers deployed on them. Cube 60 Pro's as CPE work very well, along with the older Cubes and LHG's. I use Cubes up to about 500m and LHG60 up to 750m. For redunda...

sirbryan

Also, the 2004 uses less CPU if the traffic flow goes from the SFP28 to an SFP+ port (or vice versa). And I've noticed the machine on the receiving end (all other things being equal) ends up using more CPU than the sender, at least for TCP.

sirbryan

One of my 8010 links is fiber with FS.com modules into a CRS317 at one end and copper into a UF-RJ45-10G in a CRS309 at the other. The second 8010 link uses a DAC I found on Amazon into a CCR2116 at the mountaintop side, and FS.com modules into a CCR2116 at the data center side. The CRS309 is on 7.7...

sirbryan

Yes. As strictly a DHCP server, almost anything (including a Raspberry Pi) would work with DHCP relay configured on the routers back to the DHCP server. If you're asking if the 1072 can act as a router for 7000 clients, that's a different story, and depends on how much bandwidth you want to route th...

sirbryan

If you remove the ethernet ports from the RouterOS bridge, then you can assign IP addresses to the ether1 interface and the radio becomes a router. You can do it on the CPE, the AP, or both. Leave the AP as a bridge (unless you plan to add more CPE) and the CPE side as station bridge, and leave them...

sirbryan

You have to disable Fasttrack in IP -> Firewall.

sirbryan

Don't create a bond on the AP side. Set it to AP bridge as well. The CPE side will handle the failover. This is how I do it in PTMP setups, with a wAP 60 AP and an OmniTik 5AC at the AP end. I connect Cube60's and Cube60 Pro's to both AP's, but configure the 60GHz radio as primary in the bond and 5G...

sirbryan

If you have the original circle starlink dish, those you could bypass as well, and don't need the ethernet adapter... but still need the router. I have an original Dishy kit and you can use it without the router. You plug your Mikrotik into the white port on the power supply (which is just a fancy/...

sirbryan

Because some people don't like or need the complexity of RouterOS's bridge/VLAN configuration
Because there are a few smaller chips they use that don't have the capacity to run RouterOS, but make a great platform for creating cost-effective switches

sirbryan

Yeah, like I care about what some random dude on the internet thinks about it. You can think what you want, we're never crossing paths in real life, I never worked with and will never work with Latin America network operations, mainly due to financial issues in your region, compared to North Americ...

sirbryan

I can confirm it is the same on CCR2216, although the CLI command still works, so it looks like it's some sort of web ui specific issue.

Yeah, support acknowledged it as well. I did what I needed to with the CLI, but wanted to report it here.

sirbryan

I opened a support ticket [SUP-129558], but I'm going to post it here, too. On both builds 7 and 9, when attempting to add any kind of dynamic interface (bridge, VLAN, bonds, IPIP/EOIP tunnels, etc.) from within Webfig, I get an error that the interface type is not supported. Screenshot 2023-09-29 a...

sirbryan

It's included/installed at the factory for rack-mount versions, and included in the kit of screws and mounting hardware for the outdoor version. Phoenix Contact part number MC 1,5/ 2-ST1-5,08 - PCB connector (1900772). It's a 5.08mm pitch 2-position Mini COMBICON (MC) connector. https://www.phoenixc...

sirbryan

It says it's off by 5 degrees. How did you align them? At 78m you should be in the -40's or higher, not -60's.

Personally, I place my phone against the face of the Cube and center it on the remote end.

sirbryan

Somebody doesn't know that RouterOS pushes switching (and now Layer 3 routing) to the switch CPU. I have several of these in production routing (and switching) traffic at wire speed.

sirbryan

If you had an option to switch between 2-pair or 4-pair passive POE, then you could feed the switch with 27V and still run AirMax/MikroTik 24V devices alongside LTU, Wave, etc.

sirbryan

I had issues with 7.11.2 on my CCR2116; had to back it off to 7.11. My CRS310/318's are running 7.10, and my CRS317 and 2216's are on 7.11. Whenever I have issues with L3HW offload, even for devices that have been running for hours or months, I end up bouncing it just to ensure it transfers everythi...

sirbryan

I have a hard time seeing the problem you're trying to solve. You could set up the RB5009 with a CRS3XX in a router-on-a-stick configuration, with the RB5009's CPU handling the Internet and VPN traffic, and the CRS3XX handling inter-VLAN traffic and switching. One of the CRS3XX's SFP+ ports would go...

sirbryan

Can you guys clarify the use case of 2.5G ports but with PoE output? I thought this kind of switch was great for high end PC's, not for plugging in more routers? Access points. Indoor and outdoor. Indoor you've got new WiFi 6 AP's that have 2.5G ports and more powerful radios. Outdoors, as mentione...

sirbryan

What version are you running? Have you disabled/enabled L3HW offload after you added all the VLAN interfaces and IP addresses? Whenever my CRS300's stop routing properly, I have to disable/enable L3HW offload on the switch to get it to resync the bridge and routing tables from the CPU to the switch ...

sirbryan

VPN traffic is handled by the CPU, not by the ASICs. Many of the CPU's have encryption acceleration, so in this case you want the CPU to take that load.

sirbryan

I have this exact same setup. For L3HW offload to work properly (for any CRS3xx or CCR2xxx device): There must only be one bridge on the switch, and all VLANs must belong to it. VLANs cannot belong to ports. All ports participating in switching (or routing between VLANs) must belong to that bridge. ...

sirbryan

I upgraded one partition of my CCR2116 office router from 7.11 to 7.11.2 and OSPF had all kinds of issues keeping adjacencies with a couple of its peers (via VLAN interfaces) and so half of the network's routing table was missing or not installed properly. (Log was full of OSPF up/down entries). I'm...

sirbryan

(OT) I like how Ubiquiti has configured their forum software to accept private uploads on the first post of a thread. Well, I HATE that and I refuse to use it! My point is less about the means or methods, and more about the idea that the issues and feedback are exposed to both internal and external...

sirbryan

(OT) I like how Ubiquiti has configured their forum software to accept private uploads on the first post of a thread. This allows both the support teams to get the files they need, as well as allowing other members of the community to see that a particular issue has been reported. Others can then pi...

sirbryan

7.11rc2 broke iBGP for my office CCR2116 as an rr-client to my two RR's (2011's running 7.10rc4). It was working on 7.11b6 and 7.11rc1. Fortunately I had 7.11b6 saved to disk. Unfortunately there's not a way to get 7.11rc1 back from the website.

sirbryan

I have a second bridge used as "loopback0" on all of my CRS300 switches and CCR2116's. All switch ports belong to "bridge", meaning no ports belong to "loopback0". L2 switching, CPU routing, and L3HW offload all work fine on all of them. I think the undefined behavior c...

sirbryan

I upgraded a RB4011iGS+5HacQ2HnD to 7.11rc1 and MTU's were no longer being applied to vlans on a bridge, they were all at 1500. Rolling back to 7.10, the MTUs were correctly set. It looks like this has been broken for a while, and I didn't notice. I have played around with it a bit, and it looks li...

sirbryan

Is it an NVMe SSD in an M.2 form factor?

sirbryan

I upgraded one of our BGP core router : a CCR1072 to 7.10.2 (included firmware) and the situation was problematic. All CPUs continuously going from 60 to 100% utilization. Anecdotally, when I loaded down a couple of my 7.10 CCR2116's using a 10Gbps speed test after having just inserted over 300K ro...

sirbryan

Another CCR2116 device running a full BGP table on 7.10 is causing sluggishness with 100% load on one CPU after enabling an input route filter. Has this issue been fixed using 7.11b5 or newer? What's the filter? I've got three inbound filters and they work fine: if (dst in 0.0.0.0/0 && dst-...

sirbryan

6.49.x has been the best for me on 60GHz. 7.10 has fixes for 802.11ay devices, but I've seen little to no difference for the original 802.11ad devices. (I have half my AP's on 7.10 and half on 6.49.x). The drops most often occur due to low signal levels, interference, reflections/multipath, and, of ...

sirbryan

What happens if you change it via the web interface (webfig) instead of Winbox? I have over a hundred 60GHz radios (wAP 60, LHG 60) in service and haven't seen this issue, but then I'm always managing them via Webfig. ROS versions range from 6.47 to 7.10.

sirbryan

Yes. The CCR2116 is designed to support NVME M.2 SSD's. I have several such setups and they work beautifully.

sirbryan

I found issues with full BGP tables and high throughput causing sluggishness etc. on 7.10. I loaded 7.11b5 the other day (or 6, whatever the version was before the 24th) and I saw significant improvements in my 2116's. You might give that a try.

sirbryan

On the 2216's I manage, RTSP is enabled, VLAN filtering is enabled on the bridge, with the EtherType set to 0x8100. PVID on bridge and on connected ports is 1, and Frame Types is set to "all" on both as well. Priority of both bridges is also identical.

sirbryan

What does your bridge, bridge VLAN, and port/connectivity look like? Is VLAN filtering enabled on the bridge, and what is the EtherType for the bridge?

Search found 521 matches