MikroTik

In theory I agree with the idea that the focus should be put on WebFig. However, WinBox is just so nice to use, especially for things like Torch and having multiple windows open for troubleshooting. WinBox and "The Dude" need an overhaul to use better toolkits for the front-end e.g. QT This will mak...

I hope adding VRF support to PPP is still on the roadmap for v7 !

Any chanfs of the sfp tab on interfaces appear on x86 with this new version? Important information is not reported to sfp card users. What tasks are ready for multiprocessing today in v6? and what happened to be in v7? what is the implementation order for them? Mikrotik can definitely get the SFP i...

CHR +1

It kind of works now. You can download a torrent by enabling the service (/ip/torrent/set enabled=yes) and downloading a .torrent file to the router. It should automatically detect the file and it will appear under /ip/torrent/torrents/print. The implementation is quite old and basic and "download-...

We would appreciate further compartmentalizing of Router OS features to increase device efficiency and reduce attack surface. Put SMB, Torrent, and other things that have no place in ISP infrastructure into another package. Put BGP, MPLS, and other things that have no place in consumer devices into...

Recursive nexthops in v7 works without any scripts.

The "demo" I saw recently (no idea if it was a hoax) showed at least the use of some more cores for BGP, when multiple peers are present. Not a completely multithreaded version which would use most or all cores on a CCR1072, but at least it is something. (it appeared to handle each peer's updates i...

BGP will not work perfectly on CCR1072 because it can not make full use of its multi-core architecture. ROS v7 is supposed to solve this handicap I don't think that is still on for v7. There will supposedly be improvements in the speed but apparently it is not feasible to make it multi-threaded. It...

The new switches look pretty amazing

which features are missing now?

MU-MIMO

Could the new LtAP be used as GPS-based stratum-1 NTP server?

I really hope so!

The big issue I see for some of those switches by the time they are released QSFP might be a dead standard more or less.
Starting to get hard to find modules , as everybody and their mother has now focused on getting into the QSFP28 and SFP28 space.

I 100% agree

I hope I'm not missing the point, but isn't this IKEv2 & policy routing something that would be best solved by what's known as route/interface-based VPN, VTI, etc? I remember it used to be popular request here few years ago. If I understand it correctly, Linux implementation provides interfaces for...

The 802.11ax (Wifi6) SoC's are not available in quantity from Qualcomm yet.. They are sampling, and shipping in low quantity but that is it.

What RouterOS version are you running ?

I think there's a high risk that some architectures/platforms will be stuck on ROS v6 for flash-size and toolchain reasons. v7 will probably be ARM and x86_64 only, and will probably lack some features thats simply not portable (I guess MPLS- and tunnel stuff).

This is my expectation as well.

I have dealt with two people at Mikrotik in regards to MPLS over the past 5 years. In the last 2 years though I have only dealt with one. Mikrotik support seem to allocate certain engineers to the more specialist areas e.g. wireless and MPLS. For other areas I have had responses from many different...

One of the selling points is performance. Especially on embedded devices userspace is not okay.

Most high performance packet forwarding is done in user space!

Check out VPP, DPDK and OFP

You can buy 802.11ax routers on the shelf in retail stores already, yet zero communication from Mikrotik about their timeline... this is rather worrying.

It's only one month until the EU MUM. Maybe they will announce some 802.11ax gear.

Mikrotik should not allow nv2 to be selected on 802.11ac hardware.

It is clearly broken, why even give the customer the option of being disappointed

Hello,

That guide you linked is very old. Both RouterOS and FortiOS have had major IPSEC changes.

As you have a Phase1 error I would check the basics, e.g. the auth parameters match, as well as the pre-shared key.

Also, are you intentionally meant to be using NAT-Traversal ?

SOLVED We get after a lot of work and trouble solving the problem of CCR1072 no longer restart or freeze. Solved the problem was relatively easy, after more than 3 months waiting for the mikrotik team to position on the problem, solved. We traded the CCR1072 for an MX-80 Juniper. So....you went fro...

I only need ARM fixed versión
What's wrong with ARM? It looks fine on hAP ac2

NV2 and Nstreme are broken on ARM based products

I prefer this design personally:

The concept is very creative, but in a "real world" deployment it would be a nightmare to cable.

I would prefer the traditional 96port 2RU option.

MC-LAG is not currently supported.

I agree that it should be implemented on the CRS3xx line of products .

Email support@mikrotik.com to request the feature.

Me too. I bet Europe MUM

I gave up betting on RouterOS v7 release dates many years ago after incurring significant losses

I do still hope it will be released at next years European MUM !

Use the CLI it works

Hi

Old post, but what was the final outcome of this?

Brad

The same as anything to do with routing in RouterOS v6, "Fixed in v7".... Since 2013

Thank you to the Mikrotik team for getting this "Long-Term" release out.

It solves some pain we were experiencing due to the Traffic Flow NAT bug.

https://download.mikrotik.com/routeros/ ... beta01.npk

hahahaha

https://download.mikrotik.com/routeros/ ... beta01.npk

would have built even more excitement for you to destroy

Hi!

I think you first need to learn how to make stackable hardware.

WBR,
Fyodor.

Which other routers are stackable ?

I believe Mikrotik have been making some high volume products in China or Taiwan for at least the last 9 years.

I see some complaining about MS-CHAPv2 support in Winbox. We like the MS-CHAPv2 support for Winbox because it allows us to no longer have to store the passwords unencrypted on the authentication server, so I hope it is retained in some way. We do not wish to go back to regular CHAP in our case. Agr...

I don't care about stacking, but MC-LAG would be great.

+1 for TACACS+ support

Maybe the devs are on holiday.
Maybe. And maybe there are few programmers...
See: https://darbs.mikrotik.com/darbs/

Mikrotik have had that same ad up for the last 10 years...

The Qualcomm IPQ8064 has a 10Gbit interface.

Just saying....

New beta versions has alignment mode included (it will update information much faster)
to use run from CLI:
/interface w60g align wlan60-1

Thanks guys.

40gig is older generation now. No new gear is coming out with 40G on it any more, everything new is 100G QSFP28 as the chipsets cost the same whether they have 40G or 100G ports. Also, the carrier/service provider industry has never embraced 40G, it has always been 10G, 25G, 100G, 200G and now 400G.

+1

This sounds amazing.

Most definitely not. But they are very popular devices.

They will be even more popular with POE out on ether5

How to speed up v7 development

find . -type d \( -name "tile" -o -name "ppc" \) -exec rm -rf {} \;

Any chance of 6.42.10 with the IP Traffic Flow NAT fixes ? Can you provide more details (or a link) of what's broken, please? I am not him but this is pretty clear: 6.43.4 Stable - https://mikrotik.com/download/changelogs#show-tab-tree_1-id-165a2d6018018c24467cf033626d2540 *) traffic-flow - fixed p...

Who said any of these pictures are showing the latest folders

True, they are missing arm64 folder.

Any chance of 6.42.10 with the IP Traffic Flow NAT fixes ?

At this rate, when hell freezes over

I know they are working on them, if they are going to be announced it will likely be at the EU MUM in 2019

Im hoping for something Cavium Octeon TX based with multiple 10 and 100gig ports.

Soon since 2013

Oddly that is from the same OEM as the original PCB type PSU in the CCR's.

Just waiting for about 4 years ...

Only 4 ?

I've been waiting over 9 years now... My hair literally has turned gray

Mellanox basically finished the EZchip design integrating their stuff, it is not obvious where they will take it going forward. Tile-Mx was going to have A53. It seems 16 A72 would be equivalent to 40 A53. Cavium was acquired by Marvell. NXP also has a 16x A72 processor with PCIe 4.0 and 100GbE: ht...

I hope it's a case of "once burned twice shy" with the choice of chipset for the CCR replacement. Tilera while technically very interesting turned out to be a bit of a lemon. I want to see Mikrotik use the Cavium Octeon TX processors in their CCR replacement. Cavium and Marvell are big supporters of...

I think Mikrotik should just make a version with the 98DX3336 and 128MB storage and call it a router if they want.

+1

I think they should do this for a bunch of their products. The 24port PoE models would make a killer POP Router.

*) rb3011 - implemented multiple engine IPsec hardware acceleration support;

Thank you for finally getting the RB3011 IPSEC engine working, and for getting all crypto blocks operating. This breathes new life into this product for me.

I have been following VPP for 3 or so years now. It is impressive, but very limited.

I think OpenFastPath/OpenDataPlane are better technologies for Mikrotik to persue.

Mikrotik do not have any products in this segment.

Stick with ASR9k or look at Juniper MX

@bradnz

Have you emailed support@mikrotik.com about your issues?

*) bridge - added support for DHCP Option 82 (disables hardware offloading, CLI only); *) bridge - added support for DHCP Snooping (disables hardware offloading, CLI only); Could we please get some examples of how to use these features on the Wiki ? I cannot see any of the options I would expect, e...

I can confirm that VLAN stacking with 0x88a8 and 0x8100 ether-types is now possible on CRS3xx series switches running RouterOS 6.43rc51 or greater. Mikrotik have also kindly brought the terminology in line with the rest of the industry by renaming "vlan-protocol" to "ether-type" and listing the actu...

This is pure speculation based on what Mikrotik have done in the past, but my bet is on a split release. RouterOS v7 will be a continuation of RouterOS v6 with a bumped 3.xx Kernel, e.g. 3.7 and support for all current architectures. It will have the new routing engine, but will rely on the same for...

Thanks Mikrotik guys. This should reduce the amount of panicked calls I get from customers.

We do not have plans to implement ISIS at least not in near future.

Hi Shane,

That documentation is for the CRS1/2 series which are Qualcomm based.

The CRS3xx is Marvell based. Check out https://wiki.mikrotik.com/wiki/Manual:C ... 8Q-in-Q.29 for your switch.

e.g I bought a bunch of Juniper EX4600 switches, why? Mikrotik has no 10Gbps SFP switches with 40Gbps uplinks. They also do not support selective q-in-q and some other features. i.e a missed market. I complained about exactly this, and was told I was the only customer who had complained. Yeah, I co...

Concerning the CCR/CRS'es, while being very ambitious at the beginning, to me it seems Mikrotik has lost it's interest in getting into the core-routing and -switching market. Maybe the competition among the industry leaders like Cisco and Juniper is just too strong for MT in that segment - who know...

rc45 contains Nv2+ARM fix. It will be released within the next 24 hours.

Thanks Normis. Great effort from the team at Mikrotik.

I am looking forward to testing NV2+ARM performance on the OmniTIK 5 PoE ac2

This bug has been driving me insane for the last 8 years. It is like Mikrotik's routing developer left 8 years ago. There have been only minor bug fixes, and no improvements to BGP/OSPF/RIPv2/PIM/LDP/RSVP in this time period, even when there are a large number of repeatable bugs. It is extremely fru...

I think everyone in this thread appreciates VERY MUCH that LLDP is implemented at all. And I personally thank the MKT team a lot for this. But I think all of us here wish the work on LLDP would continue, since there is still a lot that can be improved. Also separation of LLDP from MNDP would probab...

The cAP ac and hAP ac2 are beasts from a processing perspective, but their RF performance leaves a LOT to be desired.

With a cAP ac in a 3 bedroom townhouse with wooden walls, I can barely use 5Ghz in the room next to the cAP ac

Please clarify "not doing anything"? LLDP initial support was added in 2016-Sep-30

RouterOS is still missing LLDP-MED which allows the router/switch to signal to VoIP phones which vlan they need to use. This is one of the main reasons for using LLDP, and is a standard feature on switches.

A little bug, When running 6.43rc42 on a cAP AC running "/system health print" outputs nothing, and the health menu is gone from WinBox.

I have a crazy feature request.

Abandon the current GUI framework that WinBox is using and move to QT. Yes, I know it will be a LOT of work, but it will make life easier for Mikrotik developers, and allow Mikrotik to add more features in the long run.

Nv2 improvments and 60GHZ gears says that there is a new hope

60Ghz progress is amazing.

In 5Ghz I am very hopeful we can see NV2 matching AirMAX and AIP performance.

CHR does not support FastPath, yet...

#soon

So my big question is: Is it the problem in CRS317 or in CCR1072, or maybe the mix of both? I think it has some relationship with bonding... We have about 30 x CCR's installed in exactly this fashion, Bonding interface with LACP to a switch (Extreme x620/x670 and Juniper EX4550) and have not experi...

Did a quick look in the current RC with initial qinq support and then what port settings for stack trunk or stack access. setting vlans marking them as outer q? no. MT Will this surface later in the development or did you not think this through? I requested these features as soon as rumors of the C...

Mikrotik have been too busy implementing "kid control"

You can buy a used Cisco for dirt cheap these days, just do that if you need a LAC

It's more like 6 years....

IPSEC is not accelerated on the hAP ac or hAP ac Lite.

The new hAP ac2 does however have HW IPSEC acceleration

Also add to firewall address-list from routing filter and isolated VRFs

These are my top requests also

I am waiting for "new routing" they could call it "RouterOS Flying Sphagetti Monster" for all I care, as long as it has the new routing engine in it.

At first I was frustrated, but then I saw the funny side of it :) They only added the feature 3 weeks ago, we are probably the only people to test it. I would say everyone who tries to use this feature will give them the same feedback. I purchased a CRS317 specifically to test this feature and provi...

It is not possible to tag SVID and CVID with 0x8100 on CRS3xx using 6.43, and Mikrotik support don't seem to believe me that this is the most common method for QinQ.

Please email support@mikrotik.com and let them know you need it too.

To keep you guys busy with speculations

Thank you Maris

/ip cloud set sdwan-enabled=yes

My cAP AC are performing flawlessly with a variety of devices including Macbook,'s, Thinkpad's, iPhones, Samsung tablet, One plus phones.

I can't wait until the Omnitik AC POE, Dynadish, hEX POE are updated with this CPU

I agree with almost everything @brotherdust has said above, his comments match my own feelings on the current state of Mikrotik. I have been a huge fan of Mikrotik's RouterOS, but I am using it less and less. The service provider market has kept evolving but RouterOS has not evolved with it. Mikroti...

Sten is correct. Interface MTU is irrelevant when the packet egressing is an MPLS labelled packet. I usually make the MTU the same as my MPLS mtu purely to make fault finding easier e.g. If 1530 byte packet with DF bit set will traverse the path than 1530byte MPLS packet should, if it wont pass the...

Sorry to pitch in on a 10 (yes 10!) year old thread but can Mikrotik give us ANY indication of v7 or LAC function being implemented? PLEASE NTB Hi NTB. Your best bet would be to email support@mikrotik.com - The forum is for User to User support, while the Mikrotik guys do post here, the official ch...

Oh how I wish Mikrotik would implement this !

I lost 10MB of disc space when I upgraded from RC19 to RC21 on a CCR. Ive seen this same thing on PPC and MIPSBE.. MT Support replicated it and is working on it. After a few upgrades or downgrades you can run out of space and then the only thing you can do is Netinstall as your stuck on whatever ve...

All those photos of you in Hawaii and not one of them showing you in a swimsuit at the beach. For shame

+1

+1 from me

That looks like a nice product. I think sticking within the Marvell/Cavium portfolio may be better for Mikrotik, commercially and technically. They will only need to develop against one switch vendors ABI, and get better purchasing power if they are buying SoC and switch ASIC from the same vendor. M...

For the CRS305-1G-4S+IN, it mentions "Support for high speed ring topology", can there be a little more said for that? Does it do something with TRILL like the IgniteNet MeshLinq switch? I'll second that. Would be nice to know if it supports something beyond (R)STP like for example Metro Ring Proto...

False, they use there own driver, based on open source and not the closed source one from Qualcomm, that is the reason we missing Spectral Scan etc..... I'm no authority on the matter, but my understanding is that Mikrotik use a closed source driver that uses code from Qualcomm as well as their own...

v7 is only a number. What do you expect from a number change? All I expect from MIKROTIK is the NV2 working and soho ap. Version numbers are not interested. There is a lot that is expected from v7 beyond the fluffy stuff Mikotik keep back porting to v6. Just a small selection: 4.x Linux Kernel * IP...

Doing MPLS/VPLS and VXLAN in Hardware on switches is a HUGE opportunity for Mikrotik to carve out a niche.

I know if this was supported, I wouldn't be buying 1 or 2 switches per year, it would be hundreds if not thousands of switches per year.

I am still not sure why Mikrotik didn't go with IP Infusion....

That is not the problem.

The problem is getting a modern kernel that boots on all of the platforms while supporting hardware offloads.

Just my opinion...

The security issues are happening too frequent on MikroTik recently...

It is just that with Mikrotik's increasing popularity, hackers are now targeting RouterOS. Exploits exist on all equipment, just look at Cisco and Fortinet if you want an example...

IS-IS can scale much larger than OSPF due to the way it designs the hierarchy of flooding domains and by using Incremental SPF. This is why it's used as the IGP of choice for most large ISPs and Data Centers I have an ISP customer with around 200 POP's and OSPF scalability is a real problem. We hav...

I also have a ticket open for the same problem.

I have not had an update for around 5 months.

I think the real answer has to be yes.
If I were Mikrotik, I would move to ARM by now.
And thats what they will do.

I agree Mikrotik should move as much as possible to ARM.

Mikrotik CCR is the only commercial use of the Tile architecture I am aware of

Are people seeing improvements with 802.11ac or is this 802.11n only ?

In what universe can you actually reach 200Mbit in ptmp? We have a problem getting 200Mbit even in ptp. (N, 20/40-Ce) 200Mbit in TCP. Of course, with the growing number of clients, the chart is real. We had a 6km PtP link doing 200mbit TCP with 802.11n using Jirous 24dBi dishes. Doing it on PTMP th...

Please email support@mikrotik.com and let them know you want this feature.

There are several "Fast Path" style code examples for this from OpenFastPath/ODP teams, Open vSwitch and FD.io

Hopefully we see VXLAN and eVPN support soon.

Configman and 3x wAP - all great. TX up 100mbit/s depending on the quality signal This same config in configman and connected only new 3x cAP (tyhsi same metod, vlan for capsman) - Tx under 10mbit/s when -49dB quality. Not good. Support whats going one ? Capsman, wAP and cAP in version 6.41.2 and t...

I think it may be worth to proceed with extensive security audit of Mikrotik BGP implementation... It's not Quagga! Also, I can see some clear misunderstanding. BGP is a routing "control" protocol. It does no forwarding of packets so changing/upgrading BGP engine will have no effect on the packet f...

Prior to 4.x Mikrotik were using Quagga, but I believe the current BGP implementation was developed in-house.

I would not be surprised if Mikrotik are using parts of Quagga with some additional in-house developed modules, the zserv API makes that easy....

I was about to post what I thought was important, then realized boen_robot has written everything I was going to

So +1 to everything he said..

Please would MikroTik consider allowing us to set granular pps (packets per second) filtering on ports, instead of percentage. 1% of 10 Gbps is still 100 Mbps, this would rapidly exhaust MAC address tables and take the network offline. +1 Please do this!! On our Extreme and Juniper switches we set ...

The CRS326 and CRS328 have identical chipsets.

and there will be one made by MT ?

I am hopeful, But only time will tell.

The CRS328 looks like the first step towards an epic product line.

I can't wait for DC input option and Prestera DX33xx chipset for wirespeed Layer3

One of the main things for me - and I'm sure I'm not the only one - is the total lack of support for the newer Sierra Wireless MC74xx models. I've got emails dating back 3 years from MikroTik telling me "v7 will support it". Mikrotik trying to support all the 3rd Party LTE modules will be a never e...

Normis is right. A huge number of the "v7" features have been added to RouterOS v6. Mikrotik have done an outstanding job of backporting features. The missing features and unresolved bugs are mostly related to the "new routing" engine that has been long promised, or rely on a newer Linux Kernel. "ne...

Yeah the antenna in the UAP-AC-Pro is very large. The UAP-AC-Pro design maximises antenna gain, which will improve RX sensitivity, which in my opinion is a better approach than using high TX power which just results in the "lighthouse" effect.. The hAP ac2 and cAP ac look to have Mikrotik's traditio...

Just missing BGP routing in multicore cpu....need this please !!!!

Please see viewtopic.php?f=3&t=129649#p638204

This product seems more balanced than hAP ac. So i think it will be a new bestseller from mikrotik.

I agree this will be a great seller.

Hopefully there is a variation with PoE out on ether5.

ROS7 will be ready in a year I think.

I think the same. For the last few years

5 years and counting for me

I am not exaggerating when I say my hair has turned gray in the time it has taken for v7 to be released...

Damn that german shop should be banned for that one

Mikrotik announced the new products at the Philippines MUM, so Meconet are not doing anything wrong.

The hAP ac2 and cAP AC have the same price point at $69USD each, that is very nice.

The hAP ac2 is missing a few features that the hAP ac had:
- PoE out on ether5
- SFP port

CCR grade router with 64bit ARM processor and multiple "next-gen" interfaces, e.g. SFP28, QSFP28 TILE-Mx100 CPU looks like the logical successor the the current Tile-Gx? => http://www.ezchip.com/files/drim__EZchip_LinleyDataCenterConference_Feb2015_7671.pdf I personally hope that the new CCR's are ...

Can you give me an example of a package that is not multicore capable ? Not package, but BGP, BW test and other ale single core... On the BW test point, I agree it would be great if Mikrotik split the individual tests into seperate threads. On the BGP/Routing however I disagree. A few points: 1) Co...

They better start with ROS7 in this year, ARM Products only badly supported, and Wave 2 Chipsets are buggy with ROS6

I don't disagree.

most Packages are not multicore capable

Can you give me an example of a package that is not multicore capable ?

I suspect a whole slew of new ARM based products will be announced at the EU MUM in April. Products we know for sure: cAP ac hAP ac2 SXTsq ac LHG 5ac Products I think we may see, in order of likeliness: CCR grade router with 64bit ARM processor and multiple "next-gen" interfaces, e.g. SFP28, QSFP28 ...

Impressive spotting!

Mikrotik have hinted as much. Im even more excited about EU MUM now

*) dhcpv4-server - fixed framed and classless route received from RADIUS server;

What exactly was "fixed" ?

@Jeanluck I have installs of FastNetMon at 3 ISP I look after and I am seeing "False Positives" at all of them. Clients with low average PPS rates will be detected as being under attack, even though that is not the case. I am using RouterOS 6.39.x and have seen the behavior with Netflow v9 and IPFIX...

FNM relies on the "sysUpTime" field to be sent within the flow data. This allows FNM to get a time scale on the packet arrival. Unfortunately it seems RouterOS does not correctly send this, meaning FNM detection on flows from RouterOS is wildly inaccurate. I have a ticket open with Mikrotik for this...

This new driver is needed to take advantage of 802.11ac Wave 2 wireless devices which MikroTik does not have currently (if I am not mistaken). The SXTsq AC is 802.11ac Wave2. As is the un-announced cAP AC which has passed FCC testing. I expect to see a bunch more Mikrotik products be given the ARM+...

What version of RouterOS?

There are bugs with ARP prior to 6.41 that will cause the problem you are describing.

+1

This feature is long overdue.

I get asked by consulting clients if Mikrotik have a product that can do this about twice a Month (they always mention WiTek), so there is definitely demand. A CRS3xx with gigabit ports that can be backfed power from multiple ports, and has G.8032v2 (to build redundant ring topologies) would be an a...

ZeroByte, what version of RouterOS are you testing with?

We reported this exact issue as a bug and worked with Mikrotik support to fix it recently.

It is resolved in newer releases. 6.39 and newer...

I agree with sup5

The current implementation does not support HW forwarding when it's a PHP point.

It does support HW IPSEC.

The headers have an identical pin-out to Raspberry pi. Mikrotik have not said what they are for, but I am sure you can think of the potential

*) firewall - added "tls-host" firewall matcher (CLI only);
Sweet. No more Layer 7 for HTTPS blocking
How it works? Which packet matches? Does it support wildcards?

At a guess, its based on xt_tls which can support wildcards, see https://github.com/Lochnair/xt_tls

And thats exactly how it works...

I hope Mikrotik implement this soon, its causing us a lot of issues on our large deployments.

We bought a year ago a CCR1072, We are using with 4 peers providing us full routing and with more than 800 filters. After a reboot, it takes more than 2 hours to apply all routes and filters and it's only using 2% of CPU. Resume: Sh it product. That is a lot of route filters for such a small number...

I am interested to know also..

stop right there. this stuff above literally translates to wave2, right?

Wave2 you say... You mean like this:
https://fccid.io/TV7CPGI5ACD2ND/Interna ... os-3602640

Oh look 160Mhz channel support

*) wireless - new driver with initial support for 160 and 80+80 MHz channel width;

I see a lot of Nokia 7210 SAS in that video along with Juniper MX2xx and 4xx

In New Zealand if I visit co-location style Datacentres, almost every rack will have a Mikrotik router in it. However in the big Tier3+ DC's used by enterprises it is primarily Juniper, Nokia(AlcaLu) and Cisco.

According to unconfirmed information in first half of Jan 2018 will be anounced new SOHO Acess Point with Wave2 support instead hAP AC (+ ISP version with SFP support) We wait :) PS:I'm more concerned about the poor quality of antennas, which affects the range. This is the biggest problem! They do ...

Thanks Fernando, these will be really useful.

Will we see DSL modems soon?

Hopefully we will

the Mikrotik cAP AC just passed FCC compliance and has an 802.11ac Wave2 capable chipset.

So it looks like we will have Wave2 #soon

AFAIK. . yes but via software w/o hardware assistance

Having no HW support makes it pointless...

It probably would require the new routing engine in v7, so whenever that happens is the earliest we can expect FlowSpec.

I still want it ASAP, though.

v7 is a myth

What is it, 5 years overdue now ?

Hopefully Mikrotik take a look at the way Juniper have implemented LSP Load Blancing, it works brilliantly.

https://www.juniper.net/documentation/e ... -lsps.html

+1 to modular PSU.

Redundancy is pointless if you cannot swap out the dead PSU without downtime...

I think Mikrotik doesn´t need VXLAN, as there is EoIP support. I disagree. EoIP is a proprietary Mikrotik protocol. VXLAN (RFC 7348) is the industry standard, with "Fast Path" support across multiple vendors and chipsets, e.g. Broadcom Trident/Tomahawk, Marvell Prestera, Mellanox Spectrum, Intel xl...

Selectable auth mechanisms for RADIUS-based AAA on system login. currently it varies based on the access vector, and Winbox requires chap which requires reversible cryto / plaintext password store. Or add LDAP auth client, but I'm sure simply allowing MS-CHAPv2 / PAP as auth mechanisms for existing...

Data Centre Interconnect - VPLS will be able to be used to "backhaul" Layer2 traffic between data centres. . I´m dreaming of "Ethernet Over IP" (EoIP) with hardware acceleration on CRS317, .i.e. 10Gbit/s EoIP tunnels for Vmware VMotion (layer 2 interconnect). Would this be possible with the CRS317?...

So with the 6.41rc releases Mikrotik have added "MPLS Forwarding" to the CRS317. In my opinion just being able to forward MPLS packets based on the label is pointless. It wont make me buy the CRS317 over any other plain Layer2 switch. The MPLS features that would make me buy a CRS317 over another de...

The reason I ask is that this box also looks interesting as an outdoor NID type of device for FTTH where you could deploy them in rings of active ethernet (supposing that the switching is wire speed capable and you're not looking to oversubscribe the rings by any serious margin) Bring on G.8032v2 s...

From the pictures it does not look like it has -48volt input capability

We have multiple vendors routers in our networks, Juniper, Cisco, Nokia and Mikrotik. All but Mikrotik support ISIS :( so for now we are running OSPF as our IGP. We would love to move to ISIS due to: - Less complex architecture at scale - Layer2 protocol minimises attack surface - Support for IPv4 a...

APC is recommended for RF over fibre, e.g. GPON networks as it has lower reflection than PC/UPC connectors.

APC is also required if you are using optical circulators.

Yes all SFP with LC connectors are PC.

This means you need PC or UPC patch leads.

You can use APC to UPC patch leads to connect SFP to your APC patching.

How are you connecting the CAP to the CAPsMAN? Are you using Local-forwarding or CAPsMAN forwarding? Are you using VLAN in our setup?

Hi Uldis, it is Layer3 with CAPsMAN forwarding.

Even downgrading to the previously working 6.41rc20 through Package/Downgrade, the problem still remains

DANGER

If you are running CAPSMAN avoid 6.41rc23

6.41rc23 breaks CAP communication with CAPSMAN, at least when using a tunelled datapath. Downgrading to 6.41rc20 does not fix the problem

Mikrotik support are aware of this issue.

To highlight the problem with the CCR1036, the following screenshots are from two routers that are installed 1U apart from each other in the same rack, in a Tier4 datacentre: CCR1036-8G-2S+ http://i.imgur.com/CMTH9n7.png CCR1072-1G-8S+ http://i.imgur.com/Liirwuh.png Note the huge difference in tempe...

Thank you for the response Normis. In my non-expert opinion, turning on redundant fans may cool the CPU by an extra 3degrees, but the fans are ducted so only draw air from the front of the CCR over the CPU and out the back. I would be very surprised if this made any difference to the operating tempe...

This is a hardware limitation of the SXT LTE. You can only source traffic from the LTE WAN IP,. e.g. NAT

I had a similar fault and worked with support on it, only to find out it is a chipset limitation.

You are best to use a wAP LTE or Huawei me909s-120 which will work with PI routing.

Please don't add docker/container support to RouterOS.

There are plenty of other simple ways to run docker. Adding it to RouterOS will add more attack vectors and also likely make RouterOS less reliable.

If it has an FCC ID it must not be long until release.

#soon

Hi Normis, Thank you for asking us. My top suggestions would be: * evpn and vxlan support * Open Data Plane/DPDK accelerated forwarding * New Kernel and "New Routing" aka v7 * ixgbevf and i40evf drivers * virtio-net driver with multiqueue support * Some form of dynamic VPN, or as the marketing folk ...

In any case. Thanks for the suggestion, we will consider hot-swap dual power supplies for another model, most likely it will be higher price class. It would be great to see all rack mount CCR's and CRS's have replaceable power supplies. Mikrotik could ship with either no PSU's installed, or a singl...

Also how easy is the power supply to replace for a non-technical user if I just ship a bunch of spares? Pretty easy. The one I pictured above was swapped by a non technical user. Only gotcha to remember is the screws closest to the back are longer, and remember to screw through the earth lug. They ...

Another one bites the dust:

This one was in a Tier4 datacentre.

That makes it 100% of all CCR1036-8G-2S+ that we have purchased have now experienced this fault.

We have fixed it in v7.

If only we could use v7..

here you can find photos and a small post on the CRS326 and the marvell SOCs used in it.

https://tikguy.wordpress.com/2017/08/17 ... -24g-2srm/

Great write up, thank you doneware !

The PCB does not look to have any fan pins on it.

OSPF is how this is done... or ISIS if it was supported

Use OSPF to distribute your loopback addresses and link-nets. It will easily scale to over a hundred PE's.

Use BGP for signalling the L2VPN and L3VPN.

I hope this helps.

Newsletter has been updated to show more of the SXTsq

Those comparison graphics between the SXT and SXTsq are great!

Hi Tom,

Thank you for doing this testing and publishing your results.

Can anyone post a working config for using a Mikrotik as an LAC to a Cisco LNS?

RouterOS cannot act as a LAC.
You can only use RouterOS as a LNS currently.

Ahh,

You can set the source IP for traffic flow from the CLI, it's just not in winbox.

*) mmips - added support for NVME disks; what possible current mmips based router has slot/interface to get an nvme ssd attached to it? afaik nvme is pcie, and the hexR3 (the sole mmips based mikrotik device) doesn’t have anything similar... The upcoming RouterBoard M3 has a M.2 slot which could be...

What Hypervisor are you running CHR on ?

1GB for just one BGP feed that's a lot.

I agree, that is a lot.

The CCR1072 does not support MC-LAG or stacking.

Those are generally switch features.

What is your use case?

The CRS3xx series is brand spanking new.

The switch chips are certainly capable of it, Mikrotik probably have not had enough time to expose all the features via RouterOS/SwitchOS just yet.

The one place we still have Cisco in our network is as an LNS, and even then we are looking at moving to Nokia vBNG.

Mikrotik are missing AAA routing and SSS equivalent functionality, as well as RADIUS VSA's to terminate a session into a particular VRF.

Maybe one day....

The equivalent of Cisco VPDN Profile / SSS or even AAA profile functionality does not currently exist in RouterOS.

I would suggest emailing support@mikrotik.com to request this functionality.

I would like a a 48 SFP's with one or 2 SFP+'s
ideally if it can be Stack-able to have expansion

That sounds like a switch rather than a router..

"What is old, is new again"

The RB1100AHx4 power design looks very similar to RB532a, RB600 and RB800.

Nice work!

About what is hiding under the mount plates

Oh look, there they are!

Thank you Normis.

Hi Normis,

Is the RB1100AHx4 a positive ground, or negative ground ?

and is the DC input isolated ?

I am interested to know this as well.

I cannot see the usual transformer/opto-isolater arrangement required for DC-DC isolation, but they could be hiding under the 2.5" mounting bracket....

I believe Mikrotik are working on this feature request.

Hopefully they can make it happen

We would really like to be use the new wAP LTE, ltAP and ltAP Mini to bridge LTE to their ethernet interfaces.

For the "more ports" people, check out 802.1BR If Mikrotik were to implement 802.1BR on their routers and switches, it would allow "port extension", e.g. there could be a Mikrotik Router connected to a Mikrotik Switch in "Port Extender" mode, all of the ports on the switch would then appear as if th...

Thank you for all the work on IPSEC

I want 100gb and -48vdc power.

Don't we all ?

48x SFP+
6x QSFP

as a BGP router...

edit: any ETA?

I think Mikrotik are talking about a high-touch(services) router, not a low-touch router. This will be a services router like the CCR that can run PPP/NAT type services, not a "low-touch" router/switch that can just forward frames quickly.

Search found 1817 matches