MikroTik

cartes

Thanks Brian for the reply. We were hoping to get a Quad Port of the same chipset (82576), but the Mikrotik Support page says not supported on version 4.5. But, the support for the Dual Port mentions version 5.8.

Would it be safe to get the quad port one?

cartes

I think this is a very critical issue here. We were doing some digging, and found that this is not possible at all. Even if we create another user, as suggested by sergejs, any command line history still stays in memory, and returns once the user is recreated, even after reboots! We were creating an...

cartes

While the tcpdump or wireshark capture works, it makes certain analysis (like finding only UDP packets) almost impossible with filters. It would immensely helpful if someone could point to an online reference of a tool that would strip the packets off the tzsp headers.

cartes

Aah... You're the man!

Do you recommend I move to the latest 4.5? Or stick with 3.30? I'm running a production system consisting of 24 MTs, of which 3 have quite a complex setup (lots of rules, queues, etc).

cartes

Thanx for the quick response! I'm using RouterOS 3.6. Is that known to have that issue? I don't want to match every packet with that list also, but when I tried to do this: /ip fir man add chain=prerouting src-address-list=ggnn action=jump jump-target=mychain /ip fir man add chain=mychain src-addres...

cartes

UDP is a connection-less protocol, meaning there is no concept of "connection", and therefore, "connection-limit" cannot be applied.

cartes

Hi, I have created a rule that puts some matching IP addresses on an address list, then use the list to do other stuff. However, during the day, I have seen that the rule that "matches" the address list (using it in the scr-address-list field), does not seem to work, and the next rule come...

cartes

Hi,

Did you change to R52 and try out your adventure into Mikrotik?

--- Hassan

cartes

Thx for the quick answer NetworkPro. Here is my response to your remarks, I'm just putting in my answer, without quoting your reply to avoid making a long email: Q1: I also think he is doing PCQ or something elsewhere which is not in this config. Q2: Yes, I have tested this. Actually I was burnt ver...

cartes

Excellent work Fatonk. This is such an eye opener! However, I have the following questions: Q1: I couldn't find out where you control the speed of individual customers at 1Mbit or 2Mbit, as you said at the beginning of your article. Or are you doing it somewhere else in your config that you didn't p...

cartes

Hi,

I apologize before hand if I'm asking the mundane... But, can someone explain why it is not possible?

If it is possible, would it be too difficult to implement? Anyone else think this could help them in their usage scenario?

Thx.

cartes

Give this info:

1. What is your Local LAN Network
2. What is your Squid IP
3. What are the IP in the 3 interfaces of Mikrotik.

cartes

Thank you for your suggestions. We're in an early weekend session right now. We'll come to office again on Saturday, and try without bridge. Takes almost 5 - 6 hours before the problem occurs. Let's hope it works!

cartes

I've been trying to make a transparent traffic shaper using MT. I've got a Core 2 Quad with 1 GB RAM system with 3 LAN cards using the Realtek RTL 8169 Gigabit LAN cards. I made a bridge interface, and added 2 ether ports to the bridge. I then "diverted" the local part of my core router pu...

cartes

Let us say you've got three interface, as you say you have, on the MT with the following IPs assigned to them: 1_ether1 => a.b.c.d (Real IP) 2_ether2 => 192.168.100.1/24 (Private IP) 3_ether3 => 10.100.100.1/29 (Private IP for Squid) Put 10.100.100.2/29 IP on squid box and connect to 3_ether3 Put 19...

cartes

We're doing Fibre to the Business (FTTB) at the moment using active optics as opposed to passive optics. The last mile is also fibre, and usually the drop cable ends in a safe place of the customer's premises, from where the link is converted to RJ45 copper media before connecting to the customer's ...

cartes

Hi, shouldn't the mangle rules have "passthrough=no"? It looks like your packets are getting through the complete chain. Can you explain in more detail on what you do? We've done policy based routing before where we had to market packets / connection through mangle then route them to diffe...

cartes

While you are correct in your statement that optics is the connection method of choice when it comes to maximizing speed, in many scenarios such is not an option because of exorbitant costs. In rural areas, where density is low, cost per customer for laying down fibre is very expensive. So, Wireless...

cartes

I just found another post in the forum: http://forum.mikrotik.com/viewtopic.php?f=2&t=27555 which has some interesting suggestions. I'll try to get my hands wet using these principles in the coming days and let you know how it goes. In the meantime, if you do get around doing these things, I wou...

cartes

Ok, first, what I see from your config is, Squid Proxy and the MT are connected to a switch, which in turn is connected to your uplink. What you should ensure first is: 1. You have a working squid. For this, try connecting a PC to the same "uplink switch", and use IP 10.10.10.2 or some oth...

cartes

If this would help you, we've got the following on our MT: 2000+ Mangle rules (mostly doing Nth as per the load balancing wiki) 500+ NAT rules 300+ Queues Hardware is generic Intel Core 2 Quad 2.4 GHz with 2 GB RAM. The one thing that we have separately is the Proxy. We've got a separate squid array...

cartes

We are not in a radio deployment at all, as we live in a very densely populated city (13M living on 200sq km). But, this year in Communicasia, I came across a company based in SG called SmartBridges who does seem to offer much power CPEs at quite reasonable costs. I did have a preliminary talk with ...

cartes

Thx Chupaka, that was a great hint on how Random works! We use Nth extensively for src-nat'ting. We have 4000+ users, who are distributed to 252 different groups using Nth. Each group is the src-nat'ted through different Real IPs. The problem we face is, the 252 groups are not evenly loaded, meaning...

cartes

Yes, dankerr. That is certainly possible, adding ethernet interfaces to PCs. But, what I would love to see is Fibre Optic offerings like RouterBoard. I would like to have CPEs from Mikrotik that have Fibre Optic interface on the Wan side. Granted it is going to be more expensive, but for wired netwo...

cartes

Thx for the links desertadmin, but as jp pointed out, Fibre is going to be the king of last-mile for the next 15 - 20 years, if not more. Fibre Optic has immense possibilities, and we're working hard to build a fibre optic network for the last mile in our country. Mikrotik has a great product, and a...

cartes

It would be nice though to see MT offering Fibre Optic based alternatives as well. We are planning to deploy a moderate (5000+ clients) FTTH test roll out this year, and would definitely give MT a preference if they had something to offer.

Regards
HASSAN

cartes

Hi, This is an interesting discussion. To answer Janisk about a more specific requirement, my scenario is as follows: Total BW is 10 Mbps, and total 500 customers 3 Classes of Shared Clients (kbps down / kbps up) SC1 => 512 / 128 SC2 => 256 / 64 SC3 => 128 / 64 2 Classes of Dedicated Clients (kbps d...

cartes

Thank you for this tip! Will try it out definitely and let you know the results.

On this note, which value do you suggest we try? max-limit? Or limit-at?

cartes

In our case we're not doing PPPoE. We are just doing traffic shaping using PCQ. When the user gets this error, we simply disable and re-enable the simple queue. That solves the problem.

cartes

gustkiller: You're running 3.7, which is also not causing these clocking issues on our Intel Core 2 Quad systems running on Asus motherboards. These problems started to happen when we upgraded to 3.13 and above. Since then, we've gone back to using 3.6 / 3.7 and no more clocking issues. However, tho...

cartes

Yes, we're doing that too. All our interfaces that connect to the LAN are configured as "reply-only" ARP type. Then, we're putting static ARP entries into the ARP table. I guess the best way to move forward would be to use PPPoE. We want to use PPPoE too, but we want to use it using a sepa...

cartes

Hi,

We also provide static IP to the user, but how do we authenticate once we provide them static IP?

Thanks in advance for your help.

cartes

Hi, This sounds interesting. Did you get around making this app? Could you specify what changes in the interface are you looking for?

cartes

Hi,

Could you be elaborate on what problems this version is supposed to have fixed? Your graphs were not very clear.

Thanx in advance for your input.

Regards
HASSAN

cartes

Hi, If the crash follows the 6th day rule religiously, then this might be a different problem that what I think it is. Otherwise, I think web-proxy under MT could give problems after a certain load. In my testing, links over 5 Mbps and more than 200 customers should avoid using web-proxy in MT, and ...

cartes

We are also having clock problems on versions 3.14 and up (even with 3.16). We are back to using 3.6, which does not have this problem. Our mobo is Asus P5KPL-AM (G31 Chipset) http://www.asus.com/products.aspx?modelmenu=2&model=2266&l1=3&l2=11&l3=563&l4=0 We're not doing any over...

cartes

Hi, We also have a similar problem, but not exactly the same. On a random basis, some users would get no ping replies from this MT server. And, usually, these users would belong to a handful of subnets, say around 5 - 10 subnets would occassionally have users complaining. To explain our network, we ...

cartes

Hi, I'm not a MT Guru, but in our experience, MT is good as a proxy for lower speeds / user-base. We've moved our proxy to a separate box since the day we went beyond 10 Mbps. Today we're at 70 Mbps, and we've got 2 separate dedicated proxy boxes to handle our load. Just my two cents. Hope it helps....

cartes

Hi, I had run into similar situations as you have, and have found my solution (as you've mentioned) in a 2 box setup with 1 box running MT and 1 box running squid. In my testing while I was setting this up, the following is important: 1. MT box is not good at handling proxy for "very large"...

cartes

Thank you normis for your answer. We have an MT router (Core 2 Quad 2.33 GHz and 2 GB RAM) running as BW Manager, and also doing NAT using http://wiki.mikrotik.com/wiki/Load_Balancing_Persistent as a guideline to src-nat our home users of over 4,000 to 250+ real IPs. Our total backbone is 70 Mbps an...

cartes

We have been having the same issues with 3.15. We have around 3,000 uses whose BW we manage through using PCQ for both upload and download. When we used to be on 3.6 or 3.7 version, the queues worked pretty fine, and all users would get the proper bandwidth. However, as soon as we migrated to 3.15, ...

Search found 41 matches