MikroTik

ericsooter

We have 7.12 running on border and core routers in a few of our main datacenters (probably about 5-8GB) traffic. Running OSFP and BGP and using a mix of 2216 and 2100 routers. It's been solid over the last 3 months. I haven't been brave enough to try hardware offload yet. But that will be our plan a...

ericsooter

This flash problem seems to be a pretty common reason for the failure of these units (including the 2011s). We've probably had this happen to us about 6 times on field routers. On our production routers we've pretty much swapped them all out with RB4011 or 5009's.

ericsooter

Thanks for the information. Linking to a Fiberstore switch with 100G QSFP28's and also had to use fec-mode=fec91. "Auto" was a fail.

ericsooter

Disabling connection tracking was my fix. There is some sort of bug currently affecting 2004 and 2116 models on 7.6, 7.7 and 7.8beta2 in certain configurations. I tried all combos with both models and was rebooting 2-5 times daily. Currently being discussed in this thread: https://forum.mikrotik.com...

ericsooter

I'm still stable since disabling connection tracking and moving NATs. If you want to compare configs. I did include our sanitized configuration (blanked out public ips and passwords). With NAT and connection tracking on, both 2004 and 2116 reboot 2-3 times a day. Sometimes they chain reboot several ...

ericsooter

Sirbryan, thanks for that information. I did try disabling the watchdog timer with a blank watch address; but that just caused it to eternally lock up when the time came (had to physically reboot it). It's always the crazy 100pct on 4 cores before it reboots or locks. My router is still stable so fa...

ericsooter

I've sent them quite a few supout files. So hopefully they are taking a look.

ericsooter

So I moved my NATs to another router and completely disabled "Connection Tracking". So far, been stable for about 4-5 days (instead of 1-2 reboots per day); longest run so far. This router was in front of our server network which was handling our private servers and some office network. So...

ericsooter

CCR2116 started chain rebooting yesterday with watchdog error. Just to confirm what has already been mentioned. I did pull up the CPU load and watched 4 cores slowly max out to 100pct and then it rebooted. So this tends to be the pattern. I even tried the latest 7.8beta2 just to see if it changed an...

ericsooter

I tried disabling the bonding port and it didn't seem to make a difference. So I downgraded the CCR2116 back to 7.6 and so far no reboots for a few days. On version 7.7, it was rebooting 2-3 times daily and sometimes chain-rebooting (2-3 times in a row). So 7.7 made rebooting MUCH worse. If 7.6 is a...

ericsooter

We also had a CCR2004 that also would do random chain reboots everyone few weeks with the "watchdog" error message. Upgraded it to 7.7 and problem seemed to worsen (watchdog reboots every few hours). So I replaced router with a CCR2116-12G-4S+ running version 7.7. Now it's not chain reboot...

ericsooter

I was finally able to get this working properly on 7.6 without doing any redistribution. The key was using type "ptp" in the template instead of "broadcast". /routing ospf interface-template add area=pppoe-area type=ptp disabled=no \ networks=10.100.34.0/24 passive This also allo...

ericsooter

We just converted our first router that was acting as a PPPoE server to 7.4. All seemed to look good; but I'm not able to get the PPPoE routes to advertise properly in OSPF. Not using any summaries or areas. Here is the basic configuration: /routing ospf instance add disabled=no name=default-v2 rout...

ericsooter

I believe another quick and dirty way to get game consoles (xbox, playstation, etc) running properly is to turn UPNP on in the client cpe.

ericsooter

It shouldnt break a sweat. I have one handling 600 queues, about 70 firewall rules, 500MB of traffic, natting on 4 networks, 14 vlans; with ospf and bgp routing. Don't think I've ever seen the cpu load above 4pct.

ericsooter

Excellent, thanks.

ericsooter

I had a quick question on the CRS Switch. I purchased a CRS125-24G-1S. If I add ether1-10 and the sfp to the switch chip, will everything be wire speed on that group of ports? I have a management IP on the bridge and a few firewall rules to prevent access to the management IP.

ericsooter

Guys, I've been with Mikrotik since the late 1.x versions. So I'm pretty familiar with the ways things go. Every major release usually has some bugs to work out. Yes, it would be nice for them to have a beta testing system, like Cisco and Juniper (giant companies with much more expensive routers). I...

ericsooter

Hi, I use CCR with BGP, OSPF, QUEUE... 800 Mbps, everything works ok.

Thanks guys for the info. I'll move forward.

ericsooter

I have a CCR1036 and want to swap it out with my 1100AHx2. With 6.3, is it ready for live production with BGP, OSPF and some rate-limiting queues? Backhaul bandwidth is around 300MB. Just wondering if anyone is using this as a core router with a similar setup? If not, I can wait a few revisions for ...

ericsooter

I would like to block all traceroutes from the Internet to my network. I used the following rules and they don't seem to work: /ip firewall filter print 4 X ;;; Drop traceroutes from Internet chain=forward action=drop protocol=icmp in-interface=ether4-inet icmp-options=11:1 5 X ;;; Drop traceroutes ...

ericsooter

Thanks for the reply Normis. Due to our summer heat, I'll probably just overclock on our indoor and climate-controlled boxes.

ericsooter

Thanks for the information Inox. I'll probably just do the 912. I forget about toggling CPU speeds. If you toggle the CPU high, is that like overclocking? Will it increase the failure rate of the routerboard? Also does it still maintain the same temperature specs of the board? Or does the extra heat...

ericsooter

I don't think you need to redistribute connected unless you are not advertising on the connected network. So if your "Connected" network is listed in the "Networks" tab of OSPF, then AFAIK you shouldn't need to redistribute those connected routes. By default OSPF will calculate a...

ericsooter

I was looking at using the new RB912UAG-5HPnD boards for 5g backhauls. How do they fare vs 411AH boards. The newer boards are GigE. I see on the spec sheet that they are 600mhz vs the 680mhz on the 411AH. But how does the Atheros AR9342 processor compare to the AR7161? Is it a similar speed CPU? Did...

ericsooter

We just did a similar migration for a school district. The network was flat with a very similar topology as you are showing. They had Gig Fiber links between all branches in a star topology. We toyed with the notion of putting routers at each branch site; but instead chose to go the Vlan route. They...

ericsooter

We have some RB750G and RB750UP's in the field acting as local PPPoE servers at the tower sites. Typically we will bridge 3 ethernet ports together and put them in a pppoe-bridge (connecting 3 sector radios). Then we will run the PPPoE server on the pppoe-bridge interface. When one of the ethernet c...

ericsooter

If this is a water tank or rooftop, we typically bond #2 stranded ground cable from a copper bus bar near antennas. You will then want to bond everything to it: enclosures, coax (via coax ground kits), and antenna masts. If this is a commercial tower, there is typically a ground system or bus bar th...

ericsooter

I currently use 750G and 750UP's as PPPoE servers at my tower sites. They have been running great. But after recent upgrades to 5.22 (they were 5.16); I've noticed some pretty big performance problems. The sites in question are NATing with a 10.100.x.x/24 private address pool. The problem is odd; ty...

ericsooter

I believe there is a known issue with Apples and using TKIP. I've had similar issues with certain tablets. AES supports hardware encryption; so it's better anyway.

ericsooter

I guess I was looking more into changing the "Wireless" link appearance. I hadn't thought about just changing it to point-to-point. Thanks for the information.

Eric

ericsooter

Is there a way to change the link appearance symbol? I would like to use a dotted line for wireless links instead of the zig-zag line. I found "Link Apperance" under Settings->Map. But it only seems to allow changing of colors. I don't mind the zig-zag symbol; but if the link stretches out...

ericsooter

Ubiquiti Antennas make spectacular Mikrotik sectors. My only gripe is the the RPSMA connector. We have had good luck with them and found them to be very cost effective.

Eric

ericsooter

I skimmed the thread; so this might have been mentioned. Always use STP ethernet cable. Otherwise you will blow ethernets with lightning strikes from 4-5 miles away. We are in Oklahoma (US), which is the 2nd largest lightning state behind Florida. When I started our WISP, we used just used UTP cable...

ericsooter

he sound is fixed in v5.19, it was a bug that ca

Thanks guys. Thought I got a bad batch of boards.

ericsooter

Janisk, thanks for the info on the ethernet port. As for the sound; it is very slight. But should I be hearing this light clicking sound coming from the board? Like I said, it was coming from all 3 board that I purchased. Configuration was reset and firmware and software was to current version (5.18...

ericsooter

You would not have an easy way of connecting POTS lines without some sort of gateway device. But you could easily purchase sip trunks from a vendor such as phonebooth.com (no hardware needed). If you must have POTS line integration, you can get a VOIP gateway such as this: http://www.voipsupply.com/...

ericsooter

I purchased 3 411uahl boards. All the boards have a slight clicking sound when operating. Sounds like it is coming from the middle of board. I have tried POE and power header. Also tried 3 different power supplies; the boards all still click. Is this normal? Do I need to be concerned? Also on anothe...

ericsooter

Same here. Been liberally upgrading to 5.14 with Ap's and backhauls. No known issues. Pretty sure from 3.30 to 5.x there were a few major revisions to the wireless package. I think there is better wireless performance with the higher firmwares.

Eric

ericsooter

Hello and thank you for the information. I have a question: If they use it without the source-addresses it will work for the hole board if there are 3 wireless-client-cards with addresses 192.168.1.0, 192.168.2.0 and 192.168.3.0? Or have I to write all the rules particular for each address? Saludos...

ericsooter

Unfortunately, I think the reason is that Airmax and NV2 are called proprietary protocols.

ericsooter

Back to the topic. Anyone else had any luck running 802.11n 1x1 versus plain 802.11a for point-to-point links? We are in a heavy lightning area; so we generally change out older blown cards (r5h, xr5, etc) to r52nh cards. I know that using dual pol antenna's and running 2x2 would be a huge increase;...

ericsooter

We have many of links were we have swapped out old R5h cards with R52nh's. Is there a benefit to upgrading these links to 1x1 802.11n versus keeping the old 802.11a settings? What are your thoughts?

-eric

ericsooter

Sector antennas are best. You can minimize interference much more easily if there are sectors. You can also use dual-polarity sectors are run 802.11n and get some extremely good bandwidth.

ericsooter

Awesome guys, thanks for the info.

ericsooter

Thanks for the info Sam. I was hoping to take full routes from both upstreams and let BGP choose the optimal paths. 1 Gig ram should handle that?

ericsooter

We are looking at making our ISP dual-homed. I am currently using a power router with 1 Gig ram. We are looking at using a second one for the other provider and running BGP. I had heard of some issues with BGP on Routeros in the past. Is anyone running BGP in a production environment without problem...

ericsooter

Also, make sure you have ground kits on your coax cables/jumpers coming from antenna.

ericsooter

I agree with kkolev. But I have still seen these types of illogical signals with improper alignment. Particularly when you are just catching the side lobe of the signal.

ericsooter

Same here, worked great. Mine is on a 220 ft cell tower. I did run into surge problems because I was using a short sma to N pigtail. I had to use a slightly longer jumper and ground it; also added a couple 5ghz lightning arrestor and all has been good for about 15 months. (in a very heavy lightning ...

ericsooter

Main problem is signal. You don't want a point-to-point link to be in the 80s. With that distance and a 30db dish, signal should be in the -60s or better. I would bet on alignment. 30db dish antenna need to be in almost perfect alignment. There is very little room for error. If not, the only other i...

ericsooter

This might be a more appropriate forum for this: http://www.dslreports.com/forum/wisp Sounds like they have alot of money. I'm not sure if they are a new start-up or an existing company. Either way they are taking a big hit every time they do a free installation. So they can't do it forever. I offer...

ericsooter

I hate to awaken threads with a few months inactivity; but the lockups I have experienced seem to be very related to heat. Up to a few days ago; we hadn't had any lockups on the RB750's for about 4 months. Of course we are in the winter months and out of the 100 degree weather. But a few days ago I ...

ericsooter

Maybe an issue with memory. Had this happen on a 750 board. After rebooting it all is well.

ericsooter

G is much more susceptible to interference. Most like interference is the problem. Have you tried finding another clear channel?

ericsooter

Sounds like either the dishes are not completely aligned or maybe the fresnel zone is obstructed. I would think at 7 miles with 32db dishes your signal should be in the 60's; possibly 50's if higher powered card. Those 4ft dishes have a very narrow path and are extremely sensitive; the azimuths and ...

ericsooter

Thanks for the reply. It is going to be indoor only and shouldn't be a huge coverage area. But there will be walls and obstructions. The plan was to use a Pac enclosure and place 2 7db omni antennas about 8-10 inches apart. I will give it a shot.

ericsooter

I have used 802.11n in outdoor environments with dual pol antennas; but do not have experience with indoor 802.11n. I am looking to setup 3 N AP's for a school system. I had planned on using some sort of indoor/outdoor enclosure with some small 7db mesh antennas screwed into the enclosure. When sett...

ericsooter

You might look at your registration tables. For instance if all your radios are linking up around 54MB/54MB and you have a few linking up at 2MB/1MB; once the really bad connections start pumping much data it will hose everyone on the tower. Usually you'll start to see extremely high pings and PPPoE...

ericsooter

Also, I believe MAC telnet bypasses the firewall rules since it is Layer 2.

ericsooter

I've had pretty good luck with these guys. But the last order we deployed have had problems with Ethernet lockups. They are all in outdoor box environments. All are running 4.10. Although, I'm not sure about firmware versions. In one location we are having to reset the box daily. Replaced box and po...

ericsooter

Thanks Tom. I'll change them out with newer boards. Is there a particular way to identify if it is an older run with an inadequate capacitor?

Eric

ericsooter

You might also make sure the board firmware is also upgraded. I had some problems in the past with some strange firmware issues. Other problems I've seen with that error are faulty power supplies and water getting in the ethernet cable.

ericsooter

It might have something wrong with the slot. I've run into this on a few rare occasions with the older 532 boards.

ericsooter

A problem that we have always noticed with 400 series routerboards is that when there is a quick power brownout they tend to completely lockup. It seems that the only way to fix problem is to power cycle. This problem is typically remedied by putting our 433 AP's on small battery backups. Although, ...

ericsooter

Ugh, I'm an idiot. Evidently, I did have a Framed-IP-Address value. I'm using Radiator radius server and didn't notice another field on the test account. Anyway it works even with another value in "Remote Address" under pppoe-profile. So Framed-Pool is working exactly as it should; overrid...

ericsooter

hmmm... what if you remove 'Framed-Pool' attribure from RADIUS response? can you connect to pppoe server?

Yes, either way, it connects. It just doesn't use the specified pool.

Eric

ericsooter

Was wanting to setup a simple radius profile for suspended users. The plan was to issue them an alternate IP pool called "suspend-pool", and then to redirect all HTTP requests(from the suspend-pool) to a "Pay your bill" web page. The problem is that the "Framed-Pool" ra...

ericsooter

I still haven't had much of a chance to fully test throughput. But I know customer complaints on the network are way down. The 512 on RTS seems to be a good setting. I really am guessing at the 768 frag setting. It was good reading the article on fragmentation. I got that setting from a few forum re...

ericsooter

I went with RTS at 512 and Frag at 768 and so far it looks real good. Noticed when traffic gets busy, its still holding at 2-10 ms pings. So far so good.

Eric

ericsooter

Ste,

Thanks for the information. I'll give it a try next week.

Eric

ericsooter

We are a WISP in a rural setting mostly running 802.11b and b/g. Some of our ap's are starting to hit the 30-50 mark in clients. And as a result we are seeing more latency on AP's in busier hours, to the point of PPPoE connection timeouts. Looks like we need to dive into setting up RTS/CTS on our ra...

ericsooter

We run PPPoE servers on our wireless ap's. I notice that when opening a winbox terminal window and pinging a client that it "times out" all pings that are over 1000ms. When pinging from non-mikrotik devices, it shows the +1000ms pings that otherwise times out on RouterOS. Is there a way to...

ericsooter

Oh, that was too easy. Thank you very much for the tip.

Eric

ericsooter

We have a PPPoE server running on a RB433 with 3.30. It is linked up in a ring topology via eth0 and wlan1. The pppoe server runs on wlan2. Now we are running OSPF and it is working great. Unfortunately all OSPF updates seem to be going to all the PPPoE client connections. Now I know you can mark an...

ericsooter

Just thought I'd let everyone know that it was indeed the antenna. Also realized that it wasn't a Comet but a 13db Pac Wireless Omni. It appears that moisture got into the antenna housing. We replaced it with a brand new Comet 12 db omni. Not only did it fix the problem but signals are quite a facto...

ericsooter

if you are using 4.x, samply downgrade it to 3.30 and see the miracle.... Unfortunately it is not V4. We are running 3.25. Also yes we changed board, pigtail, card, and coax, injector and power supply. Only things we didn't change were Comet 13 db omni and ethernet going up tower (which is pretty o...

ericsooter

We are in a very rural area. So -98 to -100 noise floors are not that uncommon. Either way I have a new antenna on order. So I'll see if that is it.

Eric

ericsooter

What is the noise floor on the AP, under status?

I tried that first. Noise floor stays around -99 to -100.

Eric

ericsooter

We have a small tower that has been going well for about 2 years. Currently there are about 15-20 subscribers. Suddenly last night, most of the clients dropped out and the few that are left (bout 2 or 3) are showing terrible signals (about 30 db lower). We have a 13 db Comet omni antenna, RB433 with...

ericsooter

Wow, this is a very old thread. We have several of those Pac Omni's in service and have never had a blown card with the following: 1. Lightning arrestor on coax cable 2. Good ground point on tower with a ground bus similar to this: http://www.tessco.com/products/displayProductInfo.do?sku=413474&...

ericsooter

We are trying a 16db sector later this week. Connectors are a SMA (can't remember if its reverse-pol).

ericsooter

Could this be helped with WMM? I haven't used it; but it looks to provide pretty good QOS at the radio layer.

ericsooter

I think 3 omni's can get messy. If you have overcrowding and interference; you might try horizontal sectors. And if your CPE's support the feature, use narrow channels. Narrow channels will greatly help to mitigate interference.

Eric

ericsooter

I have only experimented with L7 rules. For one thing, they are extremely heavy on the router's cpu. It looks like your queues are catching traffic. They only show as queued bytes when the queues hit their limits. Not seeing all your mangle rules; I do know that sometimes you have to mangle them in ...

ericsooter

I don't see why not. It should work fine.

ericsooter

Does this card work with RouterOS? Looks like it is an AR9920 Atheros chipset. Here are the specs:

http://www.ubnt.com/products/sr71a.php

Eric

ericsooter

Sometimes you can have a very good signal strength and very poor quality. Be sure you check the CCQ. You want the value as close to 100 as possible. Generally when your ping times get that bad, CCQ falls down below 20. Many factors affect CCQ, from interference to multi-path.

Eric

ericsooter

We had a similar thing happen. We upgraded from 3.10 to 3.25 on a 433. After upgrade, everything was good. But after upgrading firmware, bridges were disabled, wlan cards were reset. Gave us a big scare.

ericsooter

Not sure how you did the test. But make sure neither endpoints of the nstreme link is generating traffic for the speedtest. The bandwidth test is very cpu intensive. Nstreme by its nature is more cpu dependent. This would cause the test results to be skewed.

ericsooter

I have done this. You just need to turn on dynamic WDS on both virtual ap's. I also turned on WPA for security. Also make sure you set the WDS AP to join the correct bridge.

ericsooter

We've been running pppoe servers on all our Routerboards for around 3 years. They have always worked great. But on a newer tower we are seeing some bizarre problems with pppoe. Basically, it is 3 R52H cards connected to 3 120 deg sectors around a water tank. The customers per sector/radio is as foll...

ericsooter

I don't have a problem with them making cards. The R52's are a very good card. And for the most part the R52H has been good lately. I definitely believe the R5H's have some manufacturing problems (could just be some bad assembly runs). So far the good R5H's that have been deployed work very well (al...

ericsooter

Same thing here. I just started using them and 2 out of 4 started smoking in a RB433. The cards were attached to pigtails. Power was left at default settings. It happened when one of the cards was enabled.

ericsooter

I dont use a framer policy and seems to work fine... what would be advantage of using one over not... Framer policy aggregates smaller packets into larger frames. This can help to optimize the link, particularly if there are many small packets. Framer policies do add extra CPU overhead. I believe s...

ericsooter

I believe that it was probably a problem with the 333 board. It is the only time
I've ever seen it. Was wondering if the 333 boards are susceptible to this type
of problem.

ericsooter

I am doing all are AP's and some CPE's with Routerboards. As for bandwidth control, We do all ours with PPPoE/radius. I'm pretty sure you can limit bandwidth via mac address. I have never done this; but I would guess you would mangle the traffic by mac address, and then put the mangle in a simple qu...

ericsooter

I've noticed one of my towers performing badly. All signals around 15-20 db lower than normal. It was a RB333, omni, and XR2. First thought was a bad XR2 card; after swapping it out there was no change. Upgraded software and firmware on RB333, still no change. Grasping for straws, I swapped out the ...

ericsooter

I'm pretty sure that ANI is an Atheros chipset feature (in newer chips I believe). And the nano's are based on the newer atheros chips. Also, this is the only tower it made a really big difference. I've turned it on on other towers and it didn't do much (I'm sure it was because noise wasn't an issue).

ericsooter

Actually on this particular tower it helped immensely. There were some Ubiquiti nanostation CPE's that were getting terrible CCQ (2-8) and Pthroughput was around 80k-200k. After changing to Client and AP ANI then CCQ jumped to (50-60) and Pthroughput was around 20000K. Also clients quit dropping con...

ericsooter

What is the difference with "Client Mode" and "AP and Client Mode" on adaptive noise immunity? I switched one of my towers to "AP and Client Mode" and CCQ went way up. Can someone explain what these different settings do?

Eric

ericsooter

Typically, I will mount that type of arrestor in the enclosure. Just make sure the enclosure has enough room. Then I ground the enclosure (metal) to some #10 copper or something similar. If it is a good grounded tower, then I ground it to the tower. If not (such as a water tank), I run it down the s...

ericsooter

Not quite sure your config. But if you are using a public address pool and it is on the same subnet as the Internet side of the link then you will need to turn on "proxy-arp" under the interface/bridge on the Internet side. Otherwise, you would actually need two seperate subnets. This also...

ericsooter

I run a short duel nstreme link. I'm not sure what is an optimal stat. I'm assuming dividing retransmits by total transmits will give you a retransmit rate. Looks like your running about 20pct retransmit rate. I have a short link (about 1/2 mile) but has a tree smack in the way and I run about 33pct...

ericsooter

Ok, I did notice that I was on 2.11 on bios. I upgraded to 2.16. Hopefully that will help.

ericsooter

Yeah, I also spoke too soon. My RB333 has rebooted about 3 times today.

-Eric

ericsooter

So far I've been stable for 3 days since turning off all my EOIP interfaces. Again its still too early to tell if that was it.

Eric

ericsooter

I also have to say MMCX. SMA is a very nice connector. But as some have already pointed out it might take up a bit too much space. Also, I can see a possible problem when cramming a couple of SMA cables in an enclosure might put too much stress/torque on the fragile mpci cards.

Eric

ericsooter

Started putting these in the RB enclosures and so far I haven't lost an ethernet yet.

http://www.titanwirelessonline.com/Prod ... PE-IISG-48

Started doing these about 6 months ago, so it is still early.

Eric

ericsooter

I am also getting this. It all began when I decided to upgrade from 3.2. I tried 3.10 and 3.11. Also, I have a RB333. Not sure how to check boot version. The supply is 24V. Didn't have any problems with 3.2. I'm debating on downgrading it back. I did have 2 unused EOIP interfaces. I disabled them an...

ericsooter

1km should be no problem. I actually have some links that go up to 10 miles (16 km) with the following configs: base: (water tower about 120 ft) rb333 2.4 600mw card 13db pac omni 20 ft lmr400 coax low noise floor (rural area) client radio: (clear line of site and fresnel zone) rb411 + 400mw sanao b...

ericsooter

I have used 133 as AP's on some small repeaters. Even with less than 10 clients I noticed depredation. There is just not much power there. Also, when RAM runs low you can get very unpredictable results. I eventually upgraded all to 333/433/411A boards.

ericsooter

There is some discussion on it here:

http://forum.mikrotik.com/viewtopic.php ... tive+noise

-eric

ericsooter

I can confirm 433 (w/10mb eth1) had same problem with same fix. Moved the ethernet from the first to third and all is good now. Wondering if that bug affects most of the 3.9 builds.

-eric

ericsooter

I have a 433 and also see the problem with 3.9 and 3.8.

Eric

ericsooter

Sounds great. I just saw this post in the routerboard forum and it concerned me. Are we going to have ultra-high cpu loads from doing this? Here are clips of that thread: QPox: I'm running RouterOS 3.7 on a Routerboard 333 with 3x R52. And my CPU load jump from 70% to 100% (about an average of 50% o...

ericsooter

Is there a benefit to this setting? I noticed some posts regarding how turning on Noise Immunity causes CPU usage to go
high. Going by the name, ANI seems like a good thing. Anyone have any thoughts on this?

Eric

ericsooter

In response to the earlier talk about 180 deg sectors, I did find some low cost 180 sectors. They look interesting, basically they are an omni ant with a reflector. Anyone had any experience with these? I normally use 120 deg; but there has been a few smaller towers where this would come in handy. h...

ericsooter

I haven't tested WDS with a DLINK AP, but WDS can be incompatible from vendor to vendor. I would strongly recommend ditching that Dlink for a Routerboard 133c or something similar. All RouterOS gear will talk WDS to each other all day.

Eric

ericsooter

I think I spy a level 4 version of the 411. Still only one eth/mpci; but still not bad. Looks like 64MB ram.

http://www.wisp-router.com/wri/itemdesc ... 1A&eq=&Tp=

Eric

ericsooter

So are there plans for a level 4 license/3 ethernet version of this card? It would make a very good mini-repeater.

Eric

ericsooter

I though basically all Atheros cards support WPA/2 via hardware. In which case, should not impact performance.

Eric

ericsooter

As long as your PPPoE concentrator is on the same bridge as your AP you should be good. Set your CPE card to "station" mode. Setup a PPPoE client on your wlan1 with the proper username/password settings. Setup DHCP server on your ethernet. Setup NATing in your firewall rules.

Eric

ericsooter

Just make sure that your coax connecting your antenna to the omni is grounded. If you are using LMR-400, they sell a ground kit for about $20. I ground the cable and lightning arrestor and haven't lost a single card to diversity since. I am also in a very high wind/thunderstorm area. I've seen the P...

ericsooter

I have not tried. I do have them running 3 350mw R52 cards. I did try to test this; unfortunately three xr2/5 cards don't fit.

Eric

ericsooter

I really like the throughput on these. These are definitely more powerful than the 133's. Is there a level 4 license version of this card?

ericsooter

I just recently set up a link with Nstreme2 using a dual polarity ant w/enclosure. It is just a short link; around 1/4 mile. But so far is working very well. It has only been up for about 1 week. But so far has been stable with good throughput. I am using R52's with RB333 boards.

Eric

ericsooter

By far the easiest to centrally manage is running a PPPoE server on the routerboard. It should handle 40 users fairly easy. WDS generates alot of overhead when running more than 5 at once. Of course if your totally bent on bridging, the pseudobridge on ROS 3 looks pretty nice. I have not tried it pe...

ericsooter

Gerard,

Thanks, that did the trick.

Eric

ericsooter

Well, I just bought a bunch of 411's. Hopefully they have good performance.

ericsooter

What is connection quality (CCQ)? Could be interference or alignment issues. CPU shouldn't bottleneck until you get over about 10 mb, in which case turning off connection tracking helps quite a bit (if you are not natting).

Eric

ericsooter

I have a routerboard on top of a tower that has either a SR9 or XR9. Unfortunately, I'm not sure which card it is. Is there a way to determine this from winbox without climbing the tower?

Eric

ericsooter

One more gotcha with pppoe clients. Make sure that you are natting through the pppoe-out interface and not the wlan card. That has gotten me a few times.

Eric

ericsooter

Is Mikrotik phasing out the 133c in place of the 411? It appears the 411 board is superior in specs. Is there
a reason to still buy the 133c boards?

Eric

ericsooter

In my experience, Atheros cards w/omni seem to be susceptible to static discharge. Make sure you have a good ground running to the base of the tower. Also, make sure that the coax running from the omni to the radio has a ground kit on it (very important). And even better, make sure there is a lightn...

ericsooter

I have one RB532A running two nstreme links using polling. Connection tracking is off and traffic isn't too bad, around 500k-1MB running through both interfaces. But CPU usage seems to run around 94-99pct fairly constant. Currently it is running 2.9.50. CPU usage seems awfully high for just such low...

ericsooter

Anyone used these cards? Are they compatible with RouterOS?

Eric

ericsooter

Thanks guys for the input. I think I'll upgrade my 532A tonight.

ericsooter

I currently have a setup at one of my towers with 60 PPPoE wireless users on one radio. Also, I am very aware that I need to sectorize this tower because of the amount of users. I have that project planned in the future; but I am considering upgrading it to 3.3. It is a Routerboard 532a. I've read a...

ericsooter

Very nice. I will try it out.

Eric

ericsooter

I would also be interested in this. Sometimes I have need for a decent ethernet switch that is POE powered. If it could be used in switch mode at wire-speed that would be fantastic. I remember this being talked about in the the forum about a year ago and it wasn't available at the time.

ericsooter

I used to use amplifiers in the early days. But they do seem to be problematic. Also, links can attain greater throughput without them. With the advent of high-powered cards, they are less needed. But if you really think an amp is necessary, I've had the most luck with rflinx bidirectional amps. I'v...

ericsooter

Serge, thanks I'll check it out.

ericsooter

Can anyone verify any improvements with p2p traffic identification in V3.x? Still seems like some p2p still gets through my limiters on 2.9.50.

Eric

ericsooter

One application of diversity is for long Point-to-point links. Over extremely long distances, a signal can be diminished with k-factor (atmospheric refraction) and snow/rain. The reliability of the length can be improved be vertically spacing two identical antennas on both ends. Sometimes, you will ...

ericsooter

I saw that this is now on RouterOS 3. This will be nice. Kudos to Mikrotik!!!

Eric

ericsooter

Also, it would be nice if I didn't have to drop all p2p traffic and only drop the protocols I can't control, such as ares (which I do block). It would be nice if we could just drop encrypted bittorrent and allow regular torrent traffic. I'm guessing that is not an option at this time?

Eric

ericsooter

As far as I know, they haven't added this yet. Not even sure if it's on v3.0. I'm not sure why it's not in; the ifconfig command in Linux will show all these errors. Seems like it would be pretty easy to implement it.

Eric

ericsooter

Normis,

Can you drop only encrypted bittorrent with routeros? If so, what is the rule?

Eric

ericsooter

Tully is right. The power supply will need to handle the amps. A 48V/500mA PS can handle 24Watts. But a 24V/500mA PS can only handle 12 Watts. I do think that the 333 has a bit more consumption than the 532.

ericsooter

Dual nstreme is full duplex. The only way to acheive true full duplex is with two pairs of radios. Also, I saw at one of the MUMS, Butch Evans showed that full duplex can also be achieved with non-nstreme via two pairs of radios by using OSPF and path costs. Looked real interesting, it transmitted t...

ericsooter

On site1, I don't believe that a 532 board can support 3 600mw card. In fact I don't think it will even support 2 of them. As for the 3 sectors running WDS, I've not tried it. But I've asked about it and have received mixed responses. The argument is regarding self-interference from being on the sam...

ericsooter

natedogg104 wrote: the linksys will crap out as they always do This is your opinion. Nate is right. Linksys will crap out. A very inferior product compared to the router board. I live in an area with alot of thunderstorms and it seems that a slight surge or brownout will many times reload factory d...

ericsooter

Also, not sure if you have lightning arrestors also. If so, make sure they are rated for 0-6ghz. That got me once on a 5.2 link.

ericsooter

/ ip firewall filter add chain=input protocol=tcp dst-port=21-22 \ src-address-list=!secure-addresses action=drop comment="Only allow FTP \ and SSH from our network" disabled=no Define a list called "secure-addresses" and put all your allowable subnets. This will shutdown those b...

ericsooter

At Orlando, one of the Mikrotik guys told me they are working on QinQ. I'm guessing they will have to get their routers to pass jumbo frames to make this work.

ericsooter

Why do we still need a super channel license for 5.4 in the US? I thought that the frequency was recently unlicensed.

Eric

ericsooter

I would say in the 40-45 would do alright. But due to the nature of wifi, a few users can still bring base station to it's knees. So it's also a good idea to have good bandwidth management.

Eric

ericsooter

The main reason is central management with a radius server. Our radius server is tied to our ISP software so that accounts are automatically turned off for non-pay. Also IP's can be managed. Bandwidth management and simple queues can also be managed via radius w/PPPoE.

Eric

ericsooter

80 per card is pretty high. I think 40-45 works good for moderate traffic. If you want to get maximum bandwidth, then more like 25 per radio.

ericsooter

I saw this on the new 2.9.45 firmware list. Does this have something to do with it:

*) implement hw-retries setting for wireless;

-Eric

ericsooter

Can Dude run with x86 RouterOS as the host OS? I thought I heard something about this at the last conference.

Eric

ericsooter

I've noticed that I've only lost atheros cards when there is improper grounding. I usually have a gas tube arrestor closest to the radio, which still seems to not be a guarentee. We have been putting ground kits on all of the coax cable. I would say that one thing has helped immensely. So far I have...

ericsooter

Did I see with the newer version of The Dude that it could be installed without a host OS or maybe on routerOS? If so, what is the procedure to do this?

Eric

ericsooter

Pac Wireless makes the feedhorns for this frequency and they can be bought in the US.

ericsooter

Aren't those frequencies unlicensed in the US now? I thought I heard talk about it at the MUM in Orlando.

ericsooter

Is there a way to unlock the 5.4 to 5.7 frequencies on either CM9 or SR5 cards? If so how to I go about it?

-Eric

ericsooter

We currently sell DSL and are using a Cisco 3600 router with a 4 port IMA card. Right now we are doing all the PPPoE services on the Cisco Router. But I would love to be able to move the PPPoE concentrator to a Mikrotik box. Now I'm aware that Mikrotik doesn't have ATM support. But shouldn't I be ab...

ericsooter

Ugh, your right Normis. I wasn't thinking straight.

Eric

ericsooter

Also, I thought some of the intelligent multiple Ethernet NICS support port-to-port transfers (across same card) without ever using the PCI bus. Does this particular card work that way?

ericsooter

Is there a place on RouterOS that shows Ethernet errors? I am using a RB532a. I think I have some ethernet problems but can't find the error counter. Anyone know were I can find this?

ericsooter

Haven't found any yet. Looks like wisp-router.com is carrying the 133c board now, although it is out of stock last I checked.

Eric

ericsooter

Just got the following update announcement from Mikrotik: MikroTik's RB532r5 (currently shipping) has a few nice improvements: - CPU Factory tested at 400MHz - higher speed memory to support 400MHz DDR - 3.3V power supply improved to handle more high-power radios (20W available at 3.3V) - over-volta...

ericsooter

What about 2 400mw cards and 1 cm9?

ericsooter

I understand that the 532 can only support two 400mw cards. Has anyone tried to run 2 400mw cards + 1 cm9? Also, has anyone tried to run 3 400 mw cards just to see if it runs stable? I know that it is above spec, but it seems that much of the time specs are set low for the sake of worst case scenari...

ericsooter

Actually, I see the 153 board as a nice SOHO CPE router that would make a good substitute for those nasty Linksys routers. In fact, I've deployed them in Small to Mid-size Business environments and they seem to work well. I definitely view it as a CPE solution and not something for the AP (except ma...

ericsooter

I have seen this before also; only with XP. Oddly, sometimes the only way to fix the problem, is to simply recreate the PPPoE connection in XP.

ericsooter

Yes, I have about 6 towers up using a 532 in this type of config. My largest one has 40 clients on it with an Nstreme backhaul and I'm running some p2p queue rules, and CPU hovers around 20pct. So far it works like a champ. Some of my towers have been going nicely for about a year and a half now. I ...

ericsooter

It is amazing how many differing opinions on this topic. I've recently had an Indian tribe come into my town and setup a muni wifi and they are using 24 sites on storm sirens in the town. They are using Mikrotiks with 4 2.4 90 deg sectors on each pole. They are running WDS with everything on Channel...

ericsooter

I use an appliance from 8e6.com that passively observes the traffic at the edge and filters the necessary IP's or users. Unfortunately, it is not free. I've heard of people having some luck running transparent proxy and Dan's Guardian, which is free.

ericsooter

I think it was intended for the 153 to be more of a drop in replacement for the Linksys type AP's in indoor environments. I've personally used them in this scenario when building out indoor AP's for businesses; and they work very well. As for outdoor QOS and high traffic use, they are probably not o...

ericsooter

What about running WPA on the PtP backhaul? I thought that I heard someone say that if your using Atheros cards; that wireless encryption has very little impact on the router. As opposed to IPSEC, etc that directly impact router CPU.

Eric

ericsooter

Yeah we are completely using PPPoE on everything. But very few people are running encrypted PPPoE. But even with PPPoE w/encryption; if I am running the RB512's at the tower as the PPPoE conecentrator, wouldn't it still be pretty unsecure on the backhaul?

ericsooter

I've got several backhauls using RB512's and SR5 cards. I run Nstreme on all the links. Is everyone encrypting their backhauls if they are running nstreme? What are your suggestions for a good encryption scheme?

Eric

ericsooter

Not sure about hotspot. But I currently have Rodopi interfacing with my Radius server (Radiator) and then authenticating all the users with PPPoE. I think hotspot can also be setup to authenticate with a radius server. Either way, Rodopi (along with other ISP billing solutions) need an event script ...

ericsooter

Not sure what your using for PPPoE client. But if your using Windows, I think it has some buggy issues with PPPoE and encryption.

Eric

ericsooter

Under IP->DNS, make sure you fill out the DNS information and check "Allow remote requests"

I'm pretty sure the PPPoE profile defaults to using the RouterOS's caching server and then the public ones that are specified.

Eric

ericsooter

Hello Russ from Iowa. I was at MUM Dallas with you.

Would you recommend routing-test over the main routing package?

Eric

ericsooter

Or how about the routing-test OSPF implementation? Is this running very stable?

ericsooter

It really smells like a NAT problem. Savage's rule should have worked: / ip firewall nat add chain=srcnat out-interface=net action=masquerade Now that is assuming that the "net" interface is truly the public interface on the router. Anyway, I'm actually using an ADSL connection right now w...

ericsooter

I'm trying to run a pretty simple 3 router OSPF configuration. The main edge router is a Cisco 3640 and the other two are RB532's running 2.9.27 and 2.9.28. The RB532 running 2.9.28 seems to not be functioning properly. It is sending out LSA's all the time, constantly changing link states (like arou...

ericsooter

Just go into Winbox under "IP->Address" and add as many as you want to any interface.

Eric

ericsooter

Dan, I had my OSPF working fine, when it was just 1 mikrotik and 2 cisco routers. But since I switched to 2 mikrotiks and 1 cisco, I am still not getting it to work (from thread http://forum.mikrotik.com/viewtopic.php?t=10281 ). I'm hoping my problem just has to do with configuration. But both my ro...

ericsooter

I have a small 3 router OSPF backbaul setup. Just pretty basic setup; not using areas. Here is the config Router 1 (Cisco 3640) At NOC 200.41.124.1/24 <- Ethernet Interface 10.24.32.9/30 <- ATM Sub-interface Router 2 (RB532 with 2.27) at DSL location <- Just swapped out with a Cisco 2600 # / routing...

ericsooter

Ok, from what I can tell. Now I just sort of glanced at your configuration. But it looks like your ether2 and wlan1 are both private interfaces with private IP's on them; and your ether1 is your public. I think the problem is that wlan1 and ether2 are on the same subnet without any bridging setup. F...

ericsooter

Yeah, I hear you. Your right, 2.4 loss can be fairly tolerable on a longer run. I still hate the worry of bad crimping or moisture seepage. And at 5.8 the loss can get very problematic. And heliax gets expensive. I love the connectors though, they just seem extremely rock solid. Even with bad weathe...

ericsooter

Not exactly knowing your configuration, sounds like you don't have NAT turned on.

ericsooter

I would recommend a lower loss cable. There is some smaller 1/2" heliax that is nice and is lighter than LMR400, but actually better than LMR600. If cost is a major fact, probably LMR600 would be the best. As for amplifiers, I don't like using them. But RFLinx seems to have the best ones. Some ...

ericsooter

Very interesting, djape. I'll try it out.

Eric

ericsooter

I have found CM9 working the best at 30 !!! Try it and you'll see signal strength improvement. I have 8 AP's with cm9 and no problem for more than 1 month, latency is not afected, everything works fine and stable. I wish somebody else try this and post results in here. Cheers... Can you really driv...

Search found 285 matches