MikroTik

benoitc

What would be the easiest way to configure a set of machine to only send and receive data from one WAN? I have actually 2 wan with a physical port on a CRS2004 and wanted to be able to route all the incoming/traffic to one particular WAN for TVs and other entertainment device. Unfortunately I can't ...

benoitc

is this possible to set ECMP with GMP? While I can stup fail over easy or a prefered route i don't see a way to set an equal path for the default route :/

benoitc

I have a CCR2004-1G-12S+2XS that does advertise and get a default route via 2 links over BGP. This router then have 2 roles: pass network to the LAN with 3 vlans NAT & IPv6 over 3 vlans with some firewall rules Pass connections to servers and let them advertise their IPS using BGP. The router is...

benoitc

The RB5009UPr+S+IN won’t provide enough voltage (PoE+) for the Access-Points and the rest of the UniFi products. For the record I did try to power 3 APS (2 nano HD, 1 WALL HD) and 2 camera + Controlleur + PI via POE adapter (home assistant) and it was working well, the budget power is very low for ...

benoitc

Did the USW break, missing some feature you require, or do you just not want to have to configure the switch with the UniFi controller? You should be able to the the USW with the CCR2004-16S+2X, you will just need to use the vlan only mode when configuring the USW. Tom Lawrence (Lawrence Systems) u...

benoitc

Maybe having a spare CRS328 identically-configured but still having to reconnect everything in case the PSU is gone (additionally, the CRS328 PSU is not hot-swappable)

I see. I think we really miss a new switch from MK. But actually i may have some empty space to have 2 CRS328 on the rack.

benoitc

Current Home network is handled like this. 1 CCR2004-16S+2X that receives 2 incoming 1G link BGP multi homed .
You must be quite the enthusiast, or are you running a data center in your home?

That's a micro pop. nothing fancy also one of the link is using a tunnel

benoitc

Current Home network is handled like this. 1 CCR2004-16S+2X that receives 2 incoming 1G link BGP multi homed . The CCR2004 is connected to - a Unifi USW-PRO 24 POE switch. On teh 24 POE switch are connected 3 unifi APS, the cloud key , 1 Unifi NVR, 4 cameras (for now) and 1 Home assistant appliance....

benoitc

i have make a research and i have found this CRS328-24P-4S+RM and this cisco CBS350-24T-4G.

I Think you want to compare it to the 350-24P-4X which is POE and 4xSFP+ ?

benoitc

To address your broader question, the cameras can go anywhere else on the LAN; that's one of the things VLANs give you. Presumably each camera is nearer one of the PoE switches than another, so that would set your best wire-pulling path. That makes sense yes. The way you turned it was letting me th...

benoitc

Or have an DC input in addition to AC like the recent ones.

totally agree. That would be far enough. I am myself hesitate between buying a new CRS328 or just use 2 rb5009 ...

benoitc

hrm i ws thinkings it was using less RAM... thanks for the answer

benoitc

. That would be a much better use of these ports than IP cameras, which IMHO should be shielded deeply inside the private network, not out on the border like that.

what do you mean there ? Fritzbox -> rb5009 -> switch ? Where camera would be on the switcb in their vlan?

benoitc

Since the RB5009UPr+S+IN use a NAND storage, would it be enough to manage a small container? I'm thinking to put in the unifi controller to control the APS. Thoughts?

benoitc

i think you need a product way beyond consumer

maybe military equipment or something like that

if that is not your case, then off course any civil wireless equipment is vulnerable to jamming so this too

ok i see... i wonder what they use in city for their wireless camera network

benoitc

Is there anything like MTP250-53V47-OD than can be put on a DIN rail?

benoitc

I'm thinking to add some security camera outside of an house but using wired connections will be hard. So I am looking to put some PtP devices to pass the network in some zones. But I'm worried the signal could be jammed. I'm new in such area so Are 6O Ghz devices lke the wireless wire (https://mikr...

benoitc

- new regulations on default passwords An idea :-) Why not using the MAC for the default password together with a simple brute force protection? The MAC is printed on all devices, easy to implement and much more secure than the default password (not secure at all, but much better). this is what is ...

benoitc

The idea of using the new RB5009 as a PPPoE termination is interresting. So t clarify, you use it as a termination and for example plug it to a 10G switch like the CRS13 ? I would presume they are referring to the same type of deployments we started doing ~15 years ago with APs up on the tower runn...

benoitc

The idea of using the new RB5009 as a PPPoE termination is interresting. So t clarify, you use it as a termination and for example plug it to a 10G switch like the CRS13 ?

benoitc

Currently we only have the CRS328 with 24 ports ans 1 power input which makes resiliency more difficult. Would be interesting to have 1 model with dual powezr inputs like you can find on other hardware. This at least prevent shutdown when having one circuit down or a UPS maintenance. With more RAM w...

benoitc

ok I see. that's too bad we don't have a switch like the CRS317 in the middle

I will try for now to play with the CCR2004 and use the 100G switch only for the transport then.

benoitc

I am thinking to use this swithch as a simple gateway MPLS + OVPN and simple L3 routing. Did anyone tried it for such purpose. How does it performs? . Indeed there is a very small amount of RAM on this switch compared to what has the CRS317 or what others do on the market. So it's surprising for thi...

benoitc

ok ... so that's probably mean I will have to use MPLS waiting for it :/

benoitc

Has anyone tried to setup a vxlan between a mikrotik switch and an arista (or cisco) switch? I don't see any remote ip setup in arista documentation. Would the command [ICODE]flood vtep[/ICODE] works in such case?

benoitc

With this option can we imagine to setup a vxlan over the internet with a higher MTU ? Would it ref-fragment it when it comes?

benoitc

ok I see, wondering if someone tested this setup and provide some feedback though.

I think I ma have been interesting to provide a shelf that allws to put the power input and the router on it (or é routees) that would be awesome

benoitc

I'm interested by putting the 4 RB5009 I have in 1U but hI am wondering how much the heat is dissipated. Do you think it will be OK in the summer ? For example would it work in room between 30-35° ? (which can happen when the AC fails or it's too hot outside). Any feedback i welcome.

benoitc

I have setup one router with a simple BGP mulihoming with 2 ISP and failover by dapting the scenario in the wiki: https://wiki.mikrotik.com/wiki/Manual:Simple_BGP_Multihoming for routeros 7. What I would like know is to stop relaying connections from the servers in one interface when the main interf...

benoitc

I have a core router that does BGP multi-homing . 2 ebgp sessions using 2 ISP. The router correctly received its default route. Now I would like to have machines behind this router announcing their prefix to this core router but not above. I think iBGP should be used for it but I failed to setup it ...

benoitc

Is GRE is offloaded on the CCR2004 series? If not should I expect the same impact on the CPU load with the CRS317 switches?

benoitc

i added more info to the support and will close this topic. For the record i had an ip wrongly set a loopback bridge instead of the interface. This was creating a loop and only one core was used 100%. which was for some reason blockings other tasks while routing was still OK... Anyway if it alao hap...

benoitc

anyone? Looks like a bug for me but no answers from support still...

benoitc

Is this an issue with the hardware or a software bug? I have the following error with the CCR2004-1G-12S+2xS: [benoitc@ENKI-R1] > /routing/bgp/session/print Flags: E - established action timed out - try again, if error continues contact MikroTik support and send a supout file (13) This also happen w...

benoitc

I get the error pool6 refused acquire: bad preferred prefix! (1) when providing a/56 prefix to a UNIFI UXG using dhcpv with the following configuration: > /ipv6/pool/print Flags: D - DYNAMIC Columns: NAME, PREFIX, PREFIX-LENGTH, EXPIRES-AFTER # NAME PREFIX PREFIX-LENGTH EXPIRES-AFTER 1 office 2001:d...

benoitc

Has it been implemented since?

benoitc

Now, you can synchronize static leases (using some script that exports relevant configuration subtree on both servers, merges it and uploads resulting file to both), but it's not possible to do it for dynamic leases (and I personally don't see a point in doing it). hrm OK, but then what should be d...

benoitc

Is there a way to synchronize dhcp leases between 2 nodes in HA (or using OSPF) ? Should I use an extra aggregation layer? Same for IPv6 how to ensure if one node crash that others keeps their IPs (or get a new one?

benoitc

in the RB5009 they are using a CRS317 fo link the 4 r b5009 I believe. But I'm thinking to use 4 porta on the ccr2004 that is already connected. Would it work enough fast?

benoitc

Yes, Ubiquiti 24, 48, and 50-55V POE injectors should work just fine, depending on the load you plan to draw. What's wrong with the provided power supply? You could easily cut the DC plug off if you needed to wire it from the side instead of the front. well nothing wrong :) I am just trying to get ...

benoitc

So would the Ubiquiti Edge Power 54V/150 W [1] works to provide supply to 1 or 2 RB5009UPr+S+IN connected using WAGO in // ? Or do I need to add something like a Power Distribution Module from CZH-Labs [2] and a DC-DC converter DDR-240C-24 [3] from Meanwell . Ideally I would prefer to not have to do...

benoitc

I'm interrested to know if some people are actually trying to use 4 RB5009UPr+S+IN with the K-79 rackmount kit in their setup? myself I'm tempted to replace my current design by it. The current design is using a CCR2004-1G-12S+2XS as a core router handlinkg2 uplinsk using BGP. This router provide th...

benoitc

I can't stand those bricks so picked up a Mean Well DIN power supply ( HDR-30-24 ) and a rack mountable DIN rail ( WatchfulEyE DIN Rail ). probably a stupid questio, but what DC output would be more efficient: * 48 VDC, current range ~0-5A, peak 7.5A * 24 VDC, current range ~0-10A, peak 15A I think...

benoitc

A multi-dc outlet would allow me to plug it to the UPS easily. Taking the PoE path means only the power delivery device needs UPS power. A nice bonus falls out of this if you were using the fiber port on the 5009 as the LAN core uplink. While you might be tempted to reject this idea since you can't...

benoitc

i'm wondering how much the system can resists to power overload and how balancing between the 2 power input works on the ccr2004-16g-2s+. I have for now plugged it to two APC UPS but i'm thinking to only keep one and plug on of the input directly on AC (behind a differential switch sensible to 30mA)...

benoitc

one thing annoying using the 4 rb5009 in 1u design is the position of the 2-pin input. There isn’t a lot of room to put a cable for the one at the bottom right (front view)… Would have been better to have them in front…

benoitc

Regular static route, where gateway is link-local (fe80:...) address of target machine.

thanks!

benoitc

Is there a way to route correctly an IPv6 /56 prefix to another machine without using DHCPv6? The idea is to route this prefix to another interface and then from then send /64 addresses to pmahines connected to this router using RA. Any hint is welcome

benoitc

anyone?

benoitc

RB5009UPr+S+IN can be powered by 3 different ways: DC barell jack, 2-pin terminall and PoE-in. However it seems that if PoE-in is active power source, PoE-out is disabled.

I will test it but did you have a source for this. This is very interresting

benoitc

I used this 48V 3A power supply: https://www.amazon.com/dp/B07G21P3KD Coupled with these DC splitters: https://www.amazon.com/dp/B07J28SX6Y The power supply goes into one splitter, which feeds to two more splitters, and each splitter goes to a pair of RB5009's in the rack (two on the left, two on t...

benoitc

I'm not a pro in that domain. I am wondering what would be the best way to power in the office the RB5009UPr+S+IN so it can resist to power outage and go on the battery if it crashes. Any idea is welcome. So the main connection right now is handled by a CCR22004 dual BGP homed that is plugged to two...

benoitc

sorry for the silly question but what adapter can be used to plug the rb5009 using the 2-pin terminal? are ther any simple dc adpater pluggable to an outlet available? These? https://www.te.com/usa-en/product-796634-2.html Well I am more looking for DC adapter or multi-dc outlets if it exists. A mu...

benoitc

OK I see. Thanks for the answer! now i will have to look to a way connect when we have four of themn in 1 u . i wish people from mokkrotik would have put more place for it. and an easy way unplug. the raxk tool could be improved.

benoitc

Is there any hardware you could advise that can receive 1-2 full views in IPv4 and IPv6 to connect /switch servers in 10G or 25G ? Everybody is advising cisco or juniper hardware but it may be a little out of budget for now so I'm thinking to use a mikrotik. Can the CCR2004-1G-12S+2XS fit? Or better...

benoitc

sorry for the silly question but what adapter can be used to plug the rb5009 using the 2-pin terminal? are ther any simple dc adpater pluggable to an outlet available?

benoitc

What is the command in router os 7 that is replacing `set-in-nexthop-direct` ?

benoitc

CRS is a switch

CCR is a router

what does it means? today we see more and more L3 switch, same for the CRS with routeros. So how it differs there, what performance improvements in L3 brings the CCR2004 vs the CRS317 with L3 offload?

benoitc

The L3 HW offload feature are supported on the CRS317-1G-16S+ but not on the CCR2004-1G-12S+2XS. Is there any reason to still use the CCR2004 then if we don't need the 25G ports? My use case is quite simple: I have 2 links one with PPPOE, one with a GRE tunnel on it on which i get a 1 /48 IPv6 and a...

benoitc

I am looking for advises to optimise my installation there to possibly reduce the power usage but also improve the cabling. I'm struggling to see if the current hardware and current installation is OK or i I could maybe replace all by a single router. Any help is welcome :) First let's start by desc...

benoitc

Why doesn't adding of one ipv4 VRRP interface and one ipv6 VRRP interface to the same physical interface not suit your needs?

I was looking for something more complicated

Thanks for the enlightenment!

benoitc

I am reading https://help.mikrotik.com/docs/display/ROS/VRRP but I don’t see a proper way to have IPv4 and IPv6 over a vrrp interface. How can it be done?

benoitc

My provider support IPV6: /interface/lte> at-chat lte1 input="AT+CGDCONT=\?" output: +CGDCONT: (0-15),"IP",,,(0-3),(0-4),(0,1),(0,1),(0-2),(0,1) +CGDCONT: (0-15),"IPV6",,,(0-3),(0-4),(0,1),(0,1),(0-2),(0,1) +CGDCONT: (0-15),"IPV4V6",,,(0-3),(0-4),(0,1),(0,1),(...

benoitc

CAT12, CAT16, 5G. Due to lack of modules from Mikrotik I was forced to get Quectel EM12-G on my own to get decent speeds.

Did you put it in a wAP ? Do you have any doc / post about it?

benoitc

wAP 5G powered by POE or DC with a little more ram / disk space would definitely make my day :)

benoitc

I like the RB5009 for its ability to be powered using multiple source. This make it really useful. Unfortunately we doin't find such hability on chateau devices. An the wAP ac LTE6 kit is limited to LTE6. Can we expect to have an LTE/5G device with multiple power inputs soon?

benoitc

Other than that routing is just routing so if you have done this with ipv4 you should not have any issues with this

Right, but not sure that performances are the same. It seems that everything in IPV4 is offloaded but nit with IPv6 . At least on the CCR2004. But maybe I'm wrong?

benoitc

The questions a good start but a bit broad, are you able to give us an idea on the end functionality, do you want specific services to only go out one ip, do you just want it per connection, do you want to bond the interfaces and improve the throughput etc. There are many different ways to set this...

benoitc

On a CCR2004,I have setup 2 WAN (2 different lines/ISPs) for IPV6 failover using BGP. Failover is working fine but I know would like to fully use these connections. Is this possible using internet rules? Or should I use 2 routers each connected to a different ISP?

benoitc

Seems to not work. A DAC is working but not when using an optic. The Mikrotik doesn't detect the SFP28 and try to use it as QSFP28 module so the memory space is not the same and DOM is not read correctly :/

benoitc

on wich version?

benoitc

updated the CRS504-4XQ-IN and ow freebsd noses are not able to discover their neighbors(IPV6) even after a reboot.

benoitc

It was just a reply to your "dear god" reply above that was a reply to your own previous post, take it with a little bit of salt. I forgot to say about how often admins use ROS7 in production, I'm sorry. If you found a serious bug, report it. But please don't go "oh dear god imagine ...

benoitc

did someone try to use a QFP28 to SFP28 converter on the CRS504-4XQ-IN. Does it support the read of the SFP28 DOM (temperature and others informations) in such cases?

benoitc

example of simple "ring" implementation each pop has a CRS 504 switch to build the "ring" i put a ccr2216 as example of network in each POP, can be routers, switches, both etc RING-CRS-504.png oh right. Thanks for the diagram. I didn't think about putting the switches in the ring.

benoitc

This will be a great inexpensive breakout switch for peering and transit where 100G physical is required but the actual throughput purchased is less. Also great for small rings as previously mentioned. Coming back to that thread. I fail to see what you mean by "small ring" there. In my mi...

benoitc

So on your CCR /ip address add address=10.101.1.1/32 interface=sfp12 network=RR.SS.TT.UU which will automatically add the /32 route And if the other device were a Mikrotik /ip address add address=RR.SS.TT.UU/32 interface=ether1 network=10.101.1.1 /ip route add comment="default gateway" di...

benoitc

Mikrotiks and various other devices support /32, you can use any local address on the Mikrotik for the CCR end and one of your spare public addresses for the machine end. If the public addresses are attached to a layer 2 network you will have to enable proxy ARP. so if assign to sfp12 10.101.1.1/32...

benoitc

My ISP provided me a /28 that I announce using BGP on a CCR2004. I would like to have one machine behind it using one of the IPS in this /29 as its public address but don't want to have NAT on the core router (CCR2004). The machine below will act as the router for a LAN and do NAT itself. I am not s...

benoitc

i think 4 x 100g is very well suited to build some simple ring implementation

any examples in mind?

benoitc

You can easily fallback to 2x10G using a QSFP breakout to 4x10G. This works well

benoitc

Concur, the only reason to have live switchover is extremely critical connectivity. In other words the requirement will dictate and pay for such a setup. Otherwise, the redundancy needed 99% is independent ISP multi-wan and also possibly redundant servers........ I have already dual homing using my...

benoitc

Can you tell us more about the genomic data ´network use case? From the presentation of the CRS504-4XQ-IN it seems you connect a login node to the switch to handle the connection. Are you using a redundant connection? Or is this only one link of 100GB. More generally speaking I would be interrested ...

benoitc

In this time where the cost of energy inrease I am wondering if it worth inside a company to have redundant network hardware or just one spare racked or not with its configuration ready. Especially since I looked at the https://mikrotik.com/product/crs504_4xq_in that seem to imply to use one switch ...

benoitc

@EdPa i think is using vlan99 as the example shown in https://help.mikrotik.com/docs/display/ROS/Multi-chassis+Link+Aggregation+Group#MultichassisLinkAggregationGroup-Quicksetup @benoitc can you check if you have vlan filtering on the bridge? Best Regards, Diego yes it has filtering enabled. . I wi...

benoitc

Hi benoitc, * shutdown primary router introduces a delay before the connection is up again. I don't why exactly. Maybe a bug in freebsd 13 or a setting to change ? How long is the introduced delay? Could it take up to 30 seconds? When both MLAG switches are up, the secondary switch will change the ...

benoitc

Can you post your interface configuration? I think maybe is related to the vlans and you have same problem that op has on this post: https://forum.mikrotik.com/viewtopic.php?p=917617&hilit=mlag#p903356 Best Regards, Diego yeah I think i handled it but I wouldn't be against of another pair of ey...

benoitc

Would the CCR2004-1G-2XS-PCIe work in 1U server like HPE DL360?

benoitc

this seems to be related to freebsd asthe interface is automatically up in the routers. But can someone confirm the behaviour is expected (putting on pause the peer port status) ? so to summarize: * shutdown/rebooting secondary switch is done without any issue, network stays up * disconnecting a cab...

benoitc

I am testing the MLAG feature and I have an issue when primary switch is down. When I launch a reboot, the MLAG is put on pause on the second switchj annd all slave sconnectiosn stops to work. Capture d’écran 2022-03-26 à 15.54.07.png For this exampel I have put upstream routers and one freebsd mach...

benoitc

so the trick is to bond in terface in the upstream routers of course

benoitc

I am trying to setup MLAG but I have issue with STP. Each time i am connecting the 2 bridge alltogethers the connection between them takes priority (the root port is the peer port) and RoMon Packet doesn’t traverse anymore the network. The current network is the following: * 2 routers (CCR2004) conn...

benoitc

I will manage my VPNs on my own, don't need and don't want any external service for that. It is possible (and fairly easy) to run your own ZeroTier One controllers and use that to manage your own ZeroTier networks. There's even an open-source web interface (that mimics my.zerotier.com) somewhere on...

benoitc

Does failover work with zerotier? I have setup for now zerotier with one FTTH connection but want to add failover on LTE using the WaP LTE6. Is this possible. If the connection switch to another route will it be handled?

benoitc

Mikrotik doesn't really have any 2.5Gbits Switches.... a friend of mine bought the QNAP QSW-2104-2S Switch to connect some 2.5Gbits Devices and he is very pleased with it ! well the CRS 10G RJ45 and SFP+ models are able to handle 2.5G using the appropriate receiver for the SFP+ models. But yes I ag...

benoitc

1. @benoitc you forgot the Title, it still says "Routing" =) 2. May i ask why you want / need 2.5 Gbps for your Project? fixed thanks :) as for 2.5G i am not sure i will have a usage for it. but I see some hardware coming with 2.5G porte now like QNAP NAS so best to prepare a little for it.

benoitc

If you need 10 up to 10G ports then the CRS317 would be the best fit if you plan on using some 1G only SFP adapters or if you are going to use SFP+ DACs for some connections. https://wiki.mikrotik.com/wiki/S%2BRJ10_general_guidance do i need to let space with only 1G S-RJ01 ? i only plane to usr wi...

benoitc

Routing or Switching ?

If switching
How about the CSS610-8G-2S+IN ?

It has 8x 1Gbits and 2x 10Gbits
The only disadvantage is the Swoslite

I meant switching sorry (i fixed it). CSS610 is only 1G though, isn't it?

benoitc

For a project I need to be able to switch max 8 ports at 1Gbps or 2.5Gbps and connect the switch to to two 1OG routers.

I am tempted to reuse the CRS317 with an RJ45 SFP module, but would it requires to have empty SFP+ slot between connections? Is this better in such case to use a CRS312-4C+8XG-RM ?

benoitc

would be cool if you can upgrade the version of zerotier on next release. Right now the version provided for arm is 1.6.6. Where latest is 1.8.x. Also any idea how we can handle failover with it? I would like to be able to fail over LTE when the fiber connection is down.

benoitc

According to https://mikrotik.com/product/ccr2004_16g_2s_ , it does not have POE-IN.

I was talking about the coming version (PC) announced in the video. According this version it will have POE-IN.

benoitc

The CCR2004-16G-2S+PC has 2 SFP+ ports and 1 POE-In ports and I am wondering how to use it. I was thinking to use a POE switch and connecting one SFP+ port to the router sfp+port and 1 1G port to the switch to power it. Would it work though? Is this the expected usage?

benoitc

Is MLAG working better with these latest releases? There are still issues in rc4 with MLAG. Specifically if you add ports to the bridge that has MLAG ports in it, it will cause traffic flow across the bridge to stop to some ports. You then need to disable/enable the bridge to get it working, or reb...

benoitc

Is MLAG working better with these latest releases?

benoitc

The best way to start is to apply for an ASN and an IPv6 prefix with your Regional Internet Registry (https://en.wikipedia.org/wiki/Regional_Internet_registry). You can sign up for an account at the RIR webpage and most of them have FAQ guides to help you begin the process. ARIN which covers North ...

benoitc

So both /48 and /56 prefixes typically mean that you have provider-dependent (PD) IPv6 space and not a provider-independent (PI) IPv6 prefix. In order to use the two prefixes you already have, you would need every host to use an address from each range. Have you contacted your RIR to apply for a PI...

benoitc

right sorry for the lack of details. It’basically multi homing over 2 links with one ISP. 2 links connected to one 1 ISP using 2 different ISPs. 1 link is using a direct internet connection to the isp over PPPOE and the other is using a GRE tunnel. on each CCR2004 I have an interneal As usinGP sessi...

benoitc

Policy routing is not mandatory to have BGP multihoming.

hrm ok. how would you do it for ipv6 ? is there a way to do some load sharing or sort of?

benoitc

I’m looking for some guidance on how to setup IPV6 multihoming with BGP ?the wiki[1] is about ipv4 and i don’t think we have routing policy with ipv6.

[1] https://wiki.mikrotik.com/wiki/Manual:S ... ultihoming

benoitc

I have right now 2 CCR2004 routers, each configured to a different providers and 2 DNS64 servers. Using eBGP they are announcing a /48. One is preferred over the other. Until now I configured a router behind them as a SPOF to handle the network on the LAN. I would like to remove it and just use the ...

benoitc

The 317 with L3 HW offload will do the trick for IPv4, but offload has as yet no support for IPv6.

ah that’s unfortunate :/ . I will use the rb4011 i have then. It’s too bad it doesn’t have 2sfp+ ports :/

benoitc

would the crs317 with l3 offload under ROS7 beta do the trick? what is the state of BGP on it?

benoitc

I would like to pass an IP or a range of IP to an internal router. This IP /range will be advertised using BGP but the other router (an udm pro) doesn’t handle it. So I was thinking to use router onntop but I figured that an L3 switch would be enouggh. Thid switch wiuld be p’ugged to the 2 core rout...

benoitc

The CCR2004 is probably not the right choice for this - it's a router and still has some stability/performance issues. What are you trying to connect in a redundant way. Servers, Storage, ISP Customers? right. I'm trying to connect converged proxmox servers . I agree the CCR2004 may not be the righ...

benoitc

I would like to setup a redundant arch lookings like the case B there but using 2 CCR2004 for the L3 level for now:

fig16.gif

What would be the most efficient way to build a bridge and pass some vlans between them. Also which bandwidth/latency could I expect from it?

benoitc

@benoitc I think you misunderstood again. That post is not addressed to you. I don't want discuss about that. I just try to help to find one alternative solution UNTIL mDNS is available. I was just describing the utility of segregating devices none vlan while wanting to access to them from others. ...

benoitc

It is much easier to assign PC to both VLANs with IP 192.168.10.1/24 and 192.168.20.1/24 for VLAN 10 and 20 respectively and to prevent (by simply not creating) routing between 192.168.10.0/24 and 192.168.20.0/24 networks. I had to look, but this is apparently not something possible on an iPhone or...

benoitc

>>>you have an IoT gadget It might not need internet so you want to block internet access for it Simply do not provide a gateway and DNS on lease >>>you can use IP firewall filter if you know gadget's IP address ...no... >>>The later part can be tricky with IPv6 and dynamic addresses... ...no... go...

benoitc

@benoitc why you write that quoting my post? to reply to your "Do not have any sense make separate VLAN of IoT devices and then set Google and Smart TV on "main" Wi-Fi" . I may have misunderstood. But as I understand the principle, devices were on IOT vlan but accessed from othe...

benoitc

(please do not quote on useless way, use "post reply" instead) >>>I keep my IoT on a separate vlan = VLAN of IoT devices >>>I have my smart tv and google home devices on the same IoT vlan = TV and Google Home on same VLAN of IoT devices >>>How do I connect the smart tv and google home fro...

benoitc

even the edgerouter has a mdns repeater..

benoitc

cool thanks for the answer :)

benoitc

Can the POE port of the RB4011iGS+RM be usezd as WAN/LAN port or is it only for powering the router?

benoitc

It sounds like you just need a transport segment for servers/VMs to connect to the router so they can peer. Build a VLAN and a /24 (or larger if needed) and use that for peering between the servers and the CCR2004. Then the servers can advertise /32s with the /24 providing the next hop. thanks for ...

benoitc

I am announcing a /29 on my network on the CCRR2004 and would like to have machines connected to it to annonunce a /32 behind. The idea is to allows easy fail over between machines. Any idea how to do it? This is inspired from https://blog.cloudflare.com/cloudflares-architecture-eliminating-single-p/

benoitc

Hey. Yes that is correct, advertising them as /32's split between your two routers with different local preferences should be possible to make it load balance and redundant. Though, since your default gateway is set to the same PE router, you have to make sure where your bandwidth is limited for yo...

benoitc

Do you have you own AS for your /29 and /48 ? Are you natting at this point ? Are you running GRE with the same router you have the directly connected BGP session to ? Sharing the load will probably be difficult if you are gonna source your traffic from the same addresses on both routers as you can...

benoitc

I have a service that provides me a /48 IPv6 and a /29 IPv4 ranges using BGP. I access to it via 2 ISPs, 1 can open a session directly to it, and the second do it over a GRE tunnel. They are for now configured in failover mode on one router. But I would like to split both connection over 2 routers (...

benoitc

Instead of combining VRRP and BGP which normally isn't recommended, consider using this design with BFD which is simlilar to what you're asking for

What would be the configuration on mikrotik for it?

benoitc

gobblity gook means BGP discussion is over my head LOL too complex............
I am just a simple man who grew up using a rotary dial telephone ;-)

:) I see. Nice expression :)

benoitc

I was able to provide advice until you added the gobblity gook stuff at the bottom, In general where ISP_interface= etherport name, PPPOE-out name, or vlan name /ip route add distance=5 gateway=ISP1_interface check ping-gateway add distance=5 gateway=ISP2_interface check ping-gateway add distance=5...

benoitc

Hi all, I have a CCR204 on which i would like to setup 2 ISPs (ISP A, ISP B) links for 2 groups (Office, Dev) at the office in the following manner: The office group would mainly use the ISPA and fail over to the ISP B in case of failure and the Dev group would use mainly the ISB P and fail over on ...

benoitc

I confirm the synchronisation of connection tracking state was working in 7.1beta something, it just sometimes started consuming lots of CPU and had other issues (stopped working when the master/backup roles changed forth and back or something). I haven't checked the state of the art in 7.1beta6 ye...

benoitc

so do i have only the choice of vrp and eventually synchronize the configuration in routeros 6? i am not sure how routeros7 will work, will it add something similar to pfsync?

benoitc

Not sure if this is the right functionality but VRRP might be one approach. Basically create a virtual router with inputs from two physical routers. One drawback is apparently you can lose natted connections............. as the traffic came in one physical interface and cannot go out a non-existing...

benoitc

I am thinking to have ... For example, if you have a warm spare of everything, but only one cable / fiber / ptp connects your location to the internet, probably the cable / fiber / ptp is the first to break well i have 2 fiber links nd a 5G baxkup… They are using different paths also. On that part ...

benoitc

I am thinking to have 2 CCR2004, one as a warm spare. I was reading this document using meraki https://www.willette.works/mx-warm-spare/ and i am wondering if something similar could be done. Can we handle crrp messages directly between ccr2004 with a dedicated port for it? or any other similar way ...

benoitc

There is almost no heat transfer through the top- and bottom plate, so for heat it will not make much of a difference. The heat should be transferred out of the units by airflow through front and back. I may be too much worried about that, thoughI noticed that top and bottom are getting hot over th...

benoitc

thanks! Also thanks for the hint wit the S-RJ modules. I will do the change :)

benoitc

but what if I just stack them like they are sometimes? Will it increase the heat?

benoitc

Do you let 1 empty U between a router and a switch on a rack when you can? Since both the CCR2004 and the CRS317 do passive cooling , I am wondering if I shouldn't let 1 U between them. Especially since I have 2 routers and 2 switches (to do VRRP and SRTP for failover)

benoitc

Bridge is something like a switch. So if machines are in same VLAN / IP subnet, then you want ports bridged/switched. If machines are in different VLANs / IP subnets, then you can't do anything else than routing and for that ports have to be treated as separate interfaces, each having own IP addres...

benoitc

I'm indof of puzzled with the bridge definition. I have 4 NICs plugged on a CRS312-4C+8XG-RM . I need 2 pass two isolated vlans (1 for iscsi and the others for metadata) between these machines which have all a static ip set. Do I need to to place these 4 ports in a bridge or is it ok to let them apa...

benoitc

VRRP is a layer 3 technology - it's not meant for load balancing on L2, and in fact not at all for load-balancing, as only a single VRRP member can be a "master" owning the virtual IP. VRRP should ever only be running on routers (nodes acting as gateways), not on switches. You are likely ...

benoitc

RouterOS version 6.48 has been released in public "stable" channel! Before an upgrade: 1) Remember to make backup/export files before an upgrade and save them on another storage device; 2) Make sure the device will not lose power during upgrade process; 3) Device has enough free storage s...

benoitc

Is there any good way to handle VRRP between 2 CRS3x switches to handle load balancing? Each switches (CRS312-4C+8XG-RM) are connected to a CCR2004-1G-12S+2XS router .

benoitc

Mikrotik do not support bonding / LAG across multiple switches, if you connect the pair of interfaces on a server to different switches then only layer 2 option is spanning tree. As you have a single point of failure with a single router anyway adding switch failover may introduce additional potent...

benoitc

Which router do you have?? Which switches do you have? Assuming orange devices will never be allowed to talk to blue devices I am using 2 CRS312-4C+8XG-RM switches. The router is a CCR2004-1G-12S+2XS . Well That's actually a good question. Orange and blue are for now defining the 2 different NIC. B...

benoitc

I'm looking for some guidances to setup a resilient network (handle possible crash of a switch for ex) between 3 machines using 2 switches and a router. On this network there will be multiple VLANS with different priorities ((o separate a metadata network from data and management networks). The 3 ma...

benoitc

Is CRS317-1G-16S+RM suitable as storage network switch (iSCSI)? https://i1.wp.com/www.virtualtothecore.com/wp-content/uploads/2013/12/iscsi-vsphere.jpg https://www.virtualtothecore.com/howto-configure-a-small-redundant-iscsi-infrastructure-for-vmware/ related to this topic, how would the switches b...

benoitc

and the answer is yes:
https://mikrotik.com/product/crs312_4c_ ... ifications

Capture d’écran 2020-11-25 à 01.02.33.png

sorry for the noise....

benoitc

Does routers like the CRS312-4C+8XG-RM support NBase-T ? I would like to be able to plug a 2.5 GbE NAS from QNap to this switch. Or are there any other hardware that support it?

benoitc

Can the UPS package be used to share the UPS informationn with other machines on the network. Is this possible for example to connect a synology server to it? For the context I've setup nut on a spare machine but while I can connect synology to it, it doesn't seem possible to do the same with the ro...

benoitc

You can run Netinstall with Wine.

This is what I finally did, but this is only working on linux there. I wasn't able to run it on latest mac os (or previous). I guess this is because netinstall is compiled for win32. Would be cool to have a win64 version..

benoitc

I just received a new CRS312-4C-8XG but it constantly reboot. I tried the documentation available there : https://help.mikrotik.com/servicedesk/servicedesk/customer/kb/view/8323160?applicationId=fa10dde4-64f2-39d1-9ee6-614de6ec6149&spaceKey=RKB&portalId=1&title=Reboot%20loop But no succe...

benoitc

IKEv2 VPN,,,,,,,,,,,,,already stated LOL

i meant the machine :)

benoitc

Correct, the safe/secure way is to use VPN to get to the router Some people use port knocking but is best as a work around until you get vpn working. I use IKEv2 with the mikrotik phone APP to access the router when away. Lots of folks here are adept at helping you setup VPN as well. Its not exactl...

benoitc

I read this wiki: https://help.mikrotik.com/docs/display/ROS/Securing+your+router but i am still unsure how i can administrate securly. I probably shouldn’t expose winbox to the world or even ssh. So I am thinking to use a vpn behind or an ssh bastion. Is this the right way to do it? Iam interrested...

benoitc

Build your VPN network for this purpose. You can use any router as a server, with the others connected to it. I use on each PPP profile with a selected bridge/vpn br/ created for this purpose and a specified IP address from the VPN network. Example I have chosen to use sstp with certificates for VP...

benoitc

I a considering to allows only "local" network to configure the router and for remote maintenance having a VPN. Is this considered a good practice in such case? How do others, are there any good recipes around?

benoitc

So I have the 1 router (CCR) connected to 2 cloud router switches (CRS-1 & 2) and one AP like this: CCR / | \ CRS CRS LTE Switches and AP are connected using SFP+ on the router CCR. How could I ma,age each device by connecting to the router. I put all of them in a bridge. By doing that I'm ensur...

benoitc

RoMON

do you have any example on how to use it ? the doc is quite succinct

benoitc

A good tutorial about VLANs in RouterOS: https://forum.mikrotik.com/viewtopic.php?t=143620 Depending on switch type the resulting configuration might not be wirespeed, but it should get you moving. After you get acquainted to VLANs, you can reconfigure switch for higher performance (VLAN switching ...

benoitc

A good tutorial about VLANs in RouterOS: https://forum.mikrotik.com/viewtopic.php?t=143620 Depending on switch type the resulting configuration might not be wirespeed, but it should get you moving. After you get acquainted to VLANs, you can reconfigure switch for higher performance (VLAN switching ...

benoitc

i've a router port connected to a switch and and I'm trying to ensure that machines connected on the ports 1,3,5 are on the vlan 10. What's the way to do i? On the router I moved the vlan 10 on the port connected to the switch. This port has an IP 10.10.1.1 for ther vlan 10 and vlan10 is assigned to...

benoitc

can it be the bridge port ? Or should I take one from the switch? I'm not sure what kind of scenario you have in your mind. But anyway, if you're thinking about management VLAN, then configuring switch to use that VLAN for management is separate isssue from configuring all LAN gear for you to be ab...

benoitc

How do you manage CPE of you customers. On the ubiquiti stack I can prepare some configuration I can upluoad and reemotly access to the using pre-adopted device to UNMS. Is there any good tool for it with mikrotik hardware? How do the ISPs using mikrotik HW?

benoitc

You can also create management VLAN, but that means you'll have VLANs on your main router as well, you might configure one of CRS ports as access port to that VLAN and/or you'll allow routing between VLANs, optionally blocking access to management VLAN from most LAN devices. In this case, router/fi...

benoitc

How do you configuree the cloud router switch so you can access to its configuration from the LAN ? I have the following configuration Router (ER-12 waiting mikrotik one) 192.168.1.1 | | Cloud Router Switch ? How do you setup the cloud router switch so it get the correct IP to be administered by the...

benoitc

It would be cool to have a POE OUT on such model. With POE IN accepting POE++ that would allows to power either a phone or another switch...

benoitc

Are you expecting traffic to grow beyond 1G? If so, i'd go with the CCR2004. Also, if you have the budget, the cost of the CCR2004 is only a few hundred dollars more, so unless you're on a tight budget, the CCR2004 is a better choice. That said, the 4011 will do 2G to 3G of Internet traffic (1500 M...

benoitc

I have actually 2 1Gbps connections that come as rj45 and a 2 10 G switches both connected using SFP+. I.m thinking to use the CCR2004 vs the rb4011 since it has 2 fans and redundant power. does it makes sense vs 2 rb4011? can we power rge rb4011 using the AC and POE?

benoitc

Is there any tool (possibly opensource) like UNMS that can be used for mikrotik hw?

benoitc

just read this article : https://www.servethehome.com/mikrotik-c ... ent-470693

and it says. 41.8dba. But one comment says updating the firmware reduce it. Can actually anyone confirm it? I would be interrested by any recentmeasures

benoitc

How much noisy is this model? Can anyone share the result in db about it? I think this model is interresting but i'm worrying it can be too noisy even if placed in the attic.

benoitc

Does anyone know if the wAP ac LTE6 kit can be powered by the EdgeRouter 12? The edgerouter does 24V with max 20W passive POE output which seems to be accepted by the LTE6 but I'm unsure. Any feedback is welcome.

benoitc

Can we power the LTE6 Kit with the RB4011iGS+RM POE out? Will it be standard POE where the connected ethernet port can be used as standard port also?

Search found 177 matches