MikroTik

connectlife

Good morning, following the update of all our devices to version 7.16.1 we noticed that after 4/5 days of uptime the devices, which do OSPF/BGP/PPPoE Server go into an apparent block state. They are reachable from the management on a dedicated vlan but (example) the PPPoE sessions by our customers d...

connectlife

The only version that works decently with MLAG is 7.6

All the others bring serious problems

connectlife

Anything fancy in the config?
I have a 2116 that's still on 7.14beta something.

Nothing special.. BGP/OSPF/BFD. With v7.14 the problem never occurred..

connectlife

Hi everyone, we have a CCR2216-1G-12XS-2XQ updated with ROS 7.14.1 which randomly restarts every 2/3 days. After the restart we notice the KERNEL FAILURE error in the LOGs. Does this happen to anyone else?

SUP-147284

connectlife

Hi everyone, we have a CCR2216-1G-12XS-2XQ updated with ROS 7.14.1 which randomly restarts every 2/3 days. After the restart we notice the KERNEL FAILURE error in the LOGs. Does this happen to anyone else?

SUP-147284

connectlife

if (dst == 0.0.0.0/0) { set bgp-local-pref 300; accept; } else {reject}

connectlife

To take advantage of hardware offload the switch must have a ONLY bridge.. by creating the vlans on the bridge (as you did) you will exploit the switch chip and not the CPU. this is the correct way to handle vlans on mikrotik switches on routers instead you will have to create the vlan interfaces fr...

connectlife

Leave the PVID on 1 and set admit all or admin only VLAN Tagged on Frame Types, in this way only packets with the VLAN TAG you set on /interface/bridge/vlan will pass through the port

connectlife

Are you sure the traffic isn't going to layer 3 from a gateway that the two port groups share? did you leave the default vlan 1 on all ports? the configuration is correct as the ports of both switches will only communicate on the tagged vlan. try posting your switch settings

connectlife

You have to put all the ports on the same bridge anyway, along with the ICCP port

You will tag group 1 ports with vlan (example) 100 (along with the ICCP port) on both switches

You will tag group 2 ports with vlan (example) 200 (along with the ICCP port) on both switches

connectlife

hi Dimitri, can you share the configuration of your switches? in our configuration we do not have the problem you encountered

connectlife

good morning everyone, Good thing they confirm it - I was going crazy. I will install version 7.6 to see if it is stable on my network and in case of new instabilities - I will unmount MLAG until it is stable. I already knew I had to test it in my lab first... but "rush" is what they have...

connectlife

could you please share with us what is SUP-116233? is it the wifi problem?

Fix this:

viewtopic.php?p=1007009

connectlife

Hi, does this resolve support request SUP-116233 ?

*) bridge - fixed incorrect host moving between ports with enabled FastPath;

Thank you

connectlife

Hi, Mikrotik Support has reproduced and confirmed the bug: Hello, Thank you for the report! We have managed to reproduce the issue locally in our labs and look forward to fixing it on upcoming RouterOS versions, unfortunately, I cannot provide a release date now. Unfortunately, I cannot suggest any ...

connectlife

Hi, Mikrotik Support has reproduced and confirmed the bug: Hello, Thank you for the report! We have managed to reproduce the issue locally in our labs and look forward to fixing it on upcoming RouterOS versions, unfortunately, I cannot provide a release date now. Unfortunately, I cannot suggest any ...

connectlife

Hi, what configuration do you have? We also found that MLAG on ROS versions higher than 7.6 (so 7.7, 7.8 and 7.9) does NOT work, especially if you have two pairs of switches in MLAG (4 devices) We also have 2 device setups with ROS 7.9 and MLAG works fine... https://forum.mikrotik.com/viewtopic.php?...

connectlife

Incoming traffic on unconfigured VLANs Hello, i have 2 mikrotik switches in mlag to which a router in lacp is connected. On both switches the lacp port is bridged with different vlans tagged. I find on the router the traffic in rx that I see through the flashlight is traffic coming from the vlans ta...

connectlife

MLAG on 4 CRS326-24S+2Q+ starting from version 7.7 up to 7.10 beta 5 is broken..

On 7.6 everything works fine. The problem seems to start from 7.7, version which makes several changes to the bridges

SUP-116274
SUP-115519
SUP-116233

connectlife

I have performed extensive tests in the laboratory and I confirm that if the configuration is MLAG on 2 switches everything works correctly even on version 7.9 (7.7 and 7.8) If MLAG is done between 4 switches (as per schema) the functioning is compromised from version 7.7 (including 7.8 and 7.9) Sin...

connectlife

Hi I have 4 Mikrotik Switches CRS325-24S+2Q+, is full mesh MLAG configuration supported? Has anyone managed to implement this without RSTP going into effect? I'm referring to the (4) High Availability configuration in the image below https://upload.wikimedia.org/wikipedia/commons/2/2f/Using_Multi-Ch...

connectlife

The problem starts from v7.7, if you notice it contains many changelogs related to the Bridge: *) bridge - added support for static MDB entries; *) bridge - disallow port-controller while the bridge has MSTP enabled; *) bridge - fixed "edge=yes" setting for MSTP; *) bridge - fixed MSTP com...

connectlife

Then you also confirm the problem.. No, support never replied to the ticket

connectlife

#[SUP-115519]

connectlife

Hello, I have a WORKING configuration in MLAG with 4 switches CRS326-24S+2Q+ and ROS 7.6 which I will call SW1 - SW2 - SW3 - SW4 SW1/SW2 are in MLAG with each other via the 40GBps port SW3/SW4 are in MLAG with each other via the 40GBps port SW1 does LACP with SW3/SW4 via two SFP ports, one going to ...

connectlife

Hello, I have a WORKING configuration in MLAG with 4 switches CRS326-24S+2Q+ and ROS 7.6 which I will call SW1 - SW2 - SW3 - SW4 SW1/SW2 are in MLAG between logos thanks to the 40Gbps port SW3/SW4 are in MLAG between logos thanks to the 40Gbps port SW1 does LACP with SW3/SW4 via two SFP ports, one g...

connectlife

Hi, we use this radius configuration to assign a static IP via iPOE to our clients in DHCP and rotate an additional subnet on it: Framed-IP-Address = 100.64.23.25 Framed-Route = 154.60.xx.xx/32 100.64.23.25 1 Session-Timeout = 10 Everything works, dhcp client receives 100.64.23.25, subnet on BNG 154...

connectlife

I also have the same configuration and I noticed instability regarding filtering. Let me explain better, 3 routers in our network (EDGE routers) must send the default route ::/0 to the BNG routers via OSPFv3. BNGs sometimes receive 3 def routes in ECMP, other times they receive it only from R1 or R2...

connectlife

viewtopic.php?t=192253

Do you happen to have the same problem in the above post??

did you open a report to Mikrotik?

connectlife

Hello, since we updated our CCR2216-1G-12XS-2XQ we notice some abnormal restarts. In the log we see: router rebooted without proper shutdown, probably power outage Any power supply problem should be excluded as we have lines under two separate UPSs (one for each power supply) Also on the same line a...

connectlife

Post the configuration otherwise we can't help you..

We have several Juniper/Mikrotik BGP sessions on ROS 7.7 and 7.8 and they work fine

HI

connectlife

Hi, the ospf outgoing filters seem to no longer work on 7.8. Putting a complete reject on 7.7 the routes are not announced while on 7.8 everything passes despite the filter with reject on the chain out..

connectlife

Lakh???

connectlife

Same problem here...

viewtopic.php?t=192253

connectlife

I add more details that I also shared with Mikrotik support: The report concerns 2 BUGS but mrz's answer seems to be related only to filters. Let's skip the filters for now and focus on the OSPF 3 problem in IPv6. We have 3 routers that do EBGP with our transits, the routers are called R1, R2, R3. E...

connectlife

Hi mrz that's not how OSPF 3 behaves in ROS 7.6 We had the configuration checked by Alessandro Campanella, an Italian tranier who also confirmed the presence of anomalous behavior Version 2 behaves as you described, best path wins, in version 3 NO. There are other open reports (SUP-103238) from othe...

connectlife

I also opened a ticket: SUP-103634

viewtopic.php?t=192253

connectlife

Mikrotik, here is the ticket number: SUP-103634

connectlife

Hello, I inform you that I have detected a series of BUGs on ROS 7.6 concerning filters and IPv6. OSPF3 over IPv6 installs learned routes into the routing table without any sense. Suppose we have 4 routers with the same cost and priority and all 4 participate in OSPF on the backbone area 0.0.0.0. R1...

connectlife

hi you don't need to use scripts. on the bgp session raise the weight of the MED or add an AS in order to make the path less preferred to your isp. traffic will always go through R1, as soon as R1 dies all traffic will go through R2

connectlife

You define a point to point network for each ospf3 adjacency?

connectlife

I see that I'm in good company then.. have you already reported to Mikrotik? we use OSPF to announce the default router from EDGE to BNG and core routers. it happens that the default route to the BNG comes from the cores that have a higher cost than the weight that the route directly from the EDGE h...

connectlife

hello we also have problems in ospf3 ipv6. routes re-propagated even if not present in the filters.. the ros sometimes prefers the default route re-propagated by another router, completely ignoring the metrics

connectlife

How do you announce the routes? In type1 or type2?

connectlife

Hi,

Routing > OSPF > Interface Templates > Cost

Change the cost of the interface that should have lower priority

connectlife

Hi, can you post your configuration?

connectlife

Hi you have to create an accept filter and associate it in the bgp peer as output bgp filter. in this you will redistribute all the table of your router

by default bgp rejects everything..

connectlife

Hi, it's not a NextHop problem. all routers know about nexthops thanks to OSPF

connectlife

Hello, I have a strange situation in RouterOS 7 (but also in 6 it happens) I have 2 Routers: Router 1 peers with a transit provider, COGENT Router 2 peers with an IXP both routers do iBGP with a Reflector sending all learned routes to it. However, the reflector does not send back the R1 / R2 routes ...

connectlife

Hello, we keep getting this error in the logs from our PEER EBGP
RECV RouteRefresh with invalid subtype: 0

RouterOS version 7.6

Depends on what?
Does it cause problems in receiving / updating routes?

connectlife

What version of ROS are you using?

connectlife

There are usually other ways of handling that without resorting to making a VLAN per customer. this is the way OF and TIM deliver access customer to isp in Italy Hi, that's not quite the case .. They send you the traffic on a collection SVLAN where they then encapsulate a Customer VLAN. In your BRA...

connectlife

Hi, currently we all have os v6 routers doing bgp / ibgp and ospf to each other with bfd. since ros7 doesn't support bfd yet, what do you recommend? 1. Bring all routers to v7, give up BFD but be able to do IBGP on loopbacks even in IPv6 (on v6 you can't) and take advantage of multicore 2. Leave the...

connectlife

Hi guys, I solved it. First of all it is not a RouterOS BUG but a problem on the firewall. From a more thorough check in our filters we have the ICMPv6 protocol blocked and we only authorize certain queues. Having the type CODE 130 (Multicast) blocked the MAC of the cards could not ping the IP Link ...

connectlife

Hi, do you get a FULL Table from your ISPs? Do you do BGP sessions with them?

connectlife

OSPF3 to BIRD also works perfectly on ROS 6.49.7. Completely broken on 7.6 stable

connectlife

Hello, there is the open tt SUP-95248 Both Bird and RouterOS exchange HELLO packets correctly but it does not appear in the neighbors and obviously does not learn the routes. Only deactivating and reactivating the instance solves the problem for a few minutes. On ROS 6 it works correctly (exact same...

connectlife

I just tested on ROS6.49.6 and the OSPF v3 session is stable

connectlife

Some more info, the problem is also between ROS 7.6rc3 and FRR instead of BIRD If I launch a packet sniffer in ROS we see that when BIRD disappears from the neighbors the HELO packets are correctly sent and received as set in HELO INTERVAL. Even in BIRD from debugging we see the sending and receivin...

connectlife

Hello, I think I found a bug on OSPF v3 in RouterOS 7.6rc3. I have an OSPF v2 and v3 setup with BIRD 2.0.10, everything works fine and the routes are swapped. If I restart BIRD, the OSPFv3 session on RouterOS does not automatically resume, I have to deactivate the instance and reactivate it in Route...

connectlife

do you mean some filters on the reflector router side? because I thought of creating a filter on the mikrotik rr to discard all the prefixes that have as originator ID itself .. unfortunately there is no expression to detect the originator ID from the RouterOS filters .. maybe i should look if i can...

connectlife

from MT wiki: Also note that next-hop is not changed on route reflection, except when it's set in the filter. so u need routing/filter/ rules Hi Nicky, it's not about the next hop .. here's what the support replied: Thank you for the report, It is a known problem and will be fixed in the future. Un...

connectlife

Hello, I'm setting up a reflector router with FRR in the lab. I have a Mikrotik ROS 7.6rc2 peering eBGP with a provider, the provider sends me about 145,000 routes. On the Mikrotik I have configured an iBGP peer towards the Route Reflector, the routes are then correctly propagated to the router refl...

connectlife

moderator note: do not quote whole preceding mail. Use "Post Reply" instead.

I didn't even find the command from the CLI .. it's amazing that you can't see the number of routes of a BGP peer!

connectlife

Hi, is it normal that in BGP sessions the prefix count is always 0? It seemed to me it was fixed in 7.6 beta10 or am I wrong?

connectlife

Hi, is it normal that in BGP sessions the prefix count is always 0? It seemed to me it was fixed in 7.6 beta10 or am I wrong?

connectlife

Help me

connectlife

Unfortunately we do not have the direct management of the DSLAM, which is why I am unable to aggregate them upstream. if I simulate or this configuration in the laboratory, however, the 802.3ad lag works, both ports of the eoip tunnel are seen to be active. I took two routerboards, configured 2 eoip...

connectlife

Hi, we are an ISP and for one of our customers we have to aggregate two VDSL lines. is it possible to use the 802.3ad protocol on the EOIP tunnel? because only balance-rr seems to work. when we activate 802.3ad we only have one port of the EOIP tunnel on active, the other is on inactive. also not th...

connectlife

yes we also have these times. I have to try with v7 even though it doesn't have bfd. what version are you using?

connectlife

yes we also have these times. I have to try with v7 even though it doesn't have bfd. what version are you using?

connectlife

Hi, we also have a similar network, two CCR1072 routers doing eBGP with UPSTREAMs (R1 / R2) Two PE (R3 / R4) CCR1072 doing iBGP with each other and with R1 / R2. The PEs have 2 uplinks on 2 different switches. If I restart a switch and then lose the OSPF path of that link, the PEs also take 30 secon...

connectlife

Hi, thanks for your feedback

connectlife

Let's suppose we have a login like: test@test.com, this login is configured on an FTTC access and test1@test.com on an FWA access. Both logins must deliver the same IP / Subnet address to the customer. The FTTC login is the master, the FWA login is the backup. Both logins are configured on the same ...

connectlife

Solved

connectlife

connectlife

I did further tested it is an ARP problem .. the notification to the switches in the vcenter portgroup is active. The problem does not always appear, to solve I saw that I don't even have to disable the interface, I just need to empty the ARP table of RouterOS ...

connectlife

Hi guys, I have a VCENTER cluster with 2 ESXi7 servers with a VM RouterOS CHR 6.49.6 inside If I migrate the machine from one Host to another I then have to enter WINBOX and switch the interface off / on again otherwise the interface does not respond to the PING (it does not work) What could it be d...

connectlife

I am attaching a screenshot of the packet sniffer

There is no IP on the source / dest

On torch I see:

806 (arp) src (empty) dst 0.0.0.0 with traffic of about 50kbps

connectlife

Hi, yes, 2 routers have a VRRIP interface .. But packets also come from physical interfaces and also from routers that do not have VRRIP, for convenience I have only reported 1 ... The only thing that unites these 4 routers is the fact that I run OSPF .. On the network there is another Router (which...

connectlife

Hi guys, our network currently consists of 4 Mikrotik routers that communicate with each other via the OSPF protocol on a dedicated vlan. Another vlan is dedicated to WAN traffic Yesterday we activated a VM with routerOS CHR which will serve as a transparent firewall for some virtual machines. we ma...

connectlife

Hi everyone, I have a Mikrotik PPPoE server that handles about 1000 connections (we are an ISP) To some of our customers we provide a backup line with different technology from the main one, for example the main one in FTTH, backup via FWA / Wireless. Both lines authenticate to our PPPoE Server In t...

connectlife

Hi, yes we currently have 5 routers in OSPF2 all configured in Point Point .. I have not tried the multipoint point but with the PTP it currently works. The routers see each other correctly and the routes are exchanged .. We use 2 vlan as the routers connect to 2 switches, on one switch we pass the ...

connectlife

Hello everyone, do you understand that with OSPFv3 an interface configured as PTP only connects to an adjacent device? With OSPFv2 if for example I configure the vlan850 as PTP and this vlan is configured on 4 routers, in the neighbors I see the routerID and the routes of all 4 routers With OSPFv3 i...

connectlife

Anyone who has encountered this problem?

connectlife

Good morning I have a CHR v 6.49.2 router that works as LNS to give connectivity via pppoe to our customers. our partner has a CISCO LAC. our LNS authenticates sessions via RADIUS. everything works correctly, the client receives the IP address and from the PPPOE server I can ping it and vice versa. ...

connectlife

Fantastic.....

connectlife

News????

connectlife

Hi, just set up the eBGP session with the second Upstream. If both providers send you the Full Table, the router will select the best path based on the internal algorithm that takes into account various parameters (AS-PATH, local-pref etc.) With a standard configuration, outgoing traffic will then g...

connectlife

Update: I confirm the behavior with more than one route announced. If you announce only one, just deactivate / reactivate

If you announce 2 I have the same behavior as you

connectlife

Hi, I have just tried it on my lab with v7.1.1 and I confirm the problem .. However, if I deactivate and reactivate the network on the address list, it is announced. Did you send an email reporting the problem to support@mikrotik.com?

I just notified Mikrotik support too

connectlife

From the tests I carried out assuming an optimal network condition, where all the ports are UP, the traffic passes through the bonding interfaces, without therefore asking the peer port. The traffic on the peer port passes when the client must necessarily do so from the peer port to reach the destin...

connectlife

Hi, I think I have found a BUG on RouterOS 6.49.2 CCR1072-1G-8S + apparatus There are some active BGP and OSPF sessions If I activate a simple queue and then deactivate it winbox freeza, for example the firewall rules, interfaces etc. do not appear. If I restart the winbox the device generates the s...

connectlife

Hi every CCR can announce your networks to peers. The VRRP you have to use for the redundancy of what you have downstream of the bgp peers, so usually the IP VRRP is the gateway of your network and you will associate it to the bonding interface previously created so as to also have redundancy on the...

connectlife

Hi, I am doing tests with 2 CRS in MLAG version RouterOS v7.1 stable I have not encountered any problems so far You have to bond the interfaces of your CCRs to their respective Switches The peer port must have an untagged VLAN with PVID eg 200, on both sides All VLANs must also be tagged on the peer...

connectlife

Hi everyone, I have a strange problem with BGP COGENT I activated the BGP session in our border router and announced our subnet / 24. There is still no server with one of the configured IPs, not even the border router reports one. The problem is that I see traffic on the peer port. Doing an analysis...

connectlife

After mikrtoik support reply i can tell that MLAG on v7.1 is working The problem was the missing TAG on the PEER port exchange VLAN (in my case the qfsplus1) On VLAN 3000 the peer port must also be tagged, unfortunately it was missing on the config so when the exchange had to take place between two ...

connectlife

I confirm that the problem is also in the rc7. The multilag works without any logic ..

connectlife

Yes but in fact we are running MLAG on 2 CRS326-24S + 2Q +

but it is completely broken

I also sent the full analysis of the problem to support@mikrotik.com

Let's see if they respond .. Meanwhile, I'm trying the v7rc7

connectlife

What version are you running now? Because on v7.1 stable the problem still exists ..

connectlife

Hi, the ports between the two switches are both in untagged dedicated vlan, see photo (applies to both switches) Have you tried to interrupt the active port on one of your devices? From the tests I did it only works if the entire switch is broken and not the single port https://www.connectlife.it/pe...

connectlife

No it has not been fixed .. From what I am trying the bonding works if both active ports on the routers are on the same switch. If I restart the switch the state of the ports changes on both routers and everything works correctly but if I force the shutdown eg. of the sfp-sfpplus1 port of router 1 t...

connectlife

This is the network diagram used for the configuration

connectlife

Situation where all ports are active and switch are up The peer bonding peer on switch 1 reports: status: connected system-id: 2C:C8:1B:65:97:BA active-role: secondary -------------------------------------------------------------------- The peer bonding peer on switch 2 reports: status: connected sy...

connectlife

Hello, the MLAG protocol is not working correctly in RouterOS v7.1 Stable . We are carrying out tests on the following devices: 2 x CCR1036-8g-2S+ 2 x CRS326-24S + 2Q + It appears that bonding only works on the active port on the switch marked primary In fact, by simulating port downs, sometimes we ...

connectlife

Good morning, We are evaluating the upgrade to RouterOS v7 of our CRS326-24S+2Q + mainly to take advantage of the MLAG functionality between our switches I am following very carefully the various problems on v7, what do you recommend? We also have mikrotik core routing devices, but for now we prefer...

connectlife

Hi, we are an ISP we are currently set up like this: Loopback IP Router 1: 5.133.xx.252 Loopback IP Router 2: 5.133.xx.253 R1 IP to R2: 100.64.0.1/29 (ether2) R2 IP to R1: 100.64.0.2/29 (ether2) The iGP session between R1 and R2 is ok On the R2 routing table I have a situation like this: -----------...

connectlife

Hi people, I need to redesign our network following the attached diagram as we have 2 transit ISPs connected respectively to 2 CCR cloud cores. I would like to ask two things: Can the IPs of the OSFP area be private or do they have to be public? We have to announce a subnet / 24 via our ASN and I wo...

connectlife

Hi, thanks for answering me. Two questions, I must also have GRE TUNNEL and NAT services, do you recommend me to have a third router or can I publish them in the two routers running BGP? Are there particular configurations on the Core Switch running the ROUTE REFLECTION or is it enough to enable the...

connectlife

Hi guys, I currently have a peering session with a subnet / 30 to my upstream provider on a Mikrotik CCR. I need to have a failover between another Mikrotik CCR but I probably have no way to start another BGP session with my upstream. How can I manage hardware failover, if one mikrotik dies, the oth...

connectlife

Hi, yes static public IP (same for all tunnels). It seems I can't tell which tunnel the exchange IPSec key comes from. Maybe because for every GRE Tunnel with IPSEC I have to have a static IP?

connectlife

Hi Guys, I have a problem with GRE Tunnel on Mikrotik Routerboard There are 5 locations connected to the main office via GRE TUNNEL. Everything works correctly, the problem arises if I activate IPSec on these tunnels, only 1 works at a time and on the logs I read: 128.116.xx.xx parsing packet failed...

Search found 112 matches