Community discussions

Search found 418 matches

  • 1
  • 2
by onnoossendrijver
Thu Feb 28, 2019 2:25 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 609
Views: 151805

Re: RouterOS v7.0 beta1 - when?

The only feature that makes me sometimes buy from the other guys is ipsec with VTI support. So please implement this :)
by onnoossendrijver
Tue Feb 19, 2019 5:40 pm
Forum: RouterBOARD hardware
Topic: How to update RB450G from 3.23 ?
Replies: 3
Views: 422

Re: How to update RB450G from 3.23 ?

If I remember correctly.. You need to update the license somewhere in the upgrade path. I would do this: Upgrade to latest 3 release. Try to update the license. Upgrade to latest 4 release. Upgrade to latest 5 release. Upgrade to latest 6 release. Update bootloader. You can find the upgrade files in...
by onnoossendrijver
Thu Dec 20, 2018 12:38 pm
Forum: General
Topic: Protected RouterBOOT
Replies: 115
Views: 27707

Re: Protected RouterBOOT

The link to the universal package is not working: File does not exist.
Can you fix the link?
by onnoossendrijver
Tue Apr 24, 2018 12:15 am
Forum: Announcements
Topic: Advisory: Vulnerability exploiting the Winbox port [SOLVED]
Replies: 204
Views: 158627

Re: Advisory: Vulnerability exploiting the Winbox port

Hello please tell me how I will update my 3000 mikrotiks again quickly and easily is already the second time that this happens ... If you know how to manage 3000 devices you must have heard of The Dude or expect scripting. At work we use expect scripting to automate a lot of networking related tasks.
by onnoossendrijver
Wed Mar 21, 2018 10:58 pm
Forum: Wireless Networking
Topic: how to use d-link wireless adapter with routerOS 5.20 on a Computer
Replies: 9
Views: 789

Re: how to use d-link wireless adapter with routerOS 5.20 on a Computer

They will not work in any RouterOS version currently available. The chipset is unsupported.
by onnoossendrijver
Sun Feb 25, 2018 6:46 pm
Forum: Wireless Networking
Topic: Any chance to see NV3?
Replies: 24
Views: 3012

Re: Any chance to see NV3?

What about:
*) wireless - added initial support for "nstreme-plus";
In the latest beta changelog
by onnoossendrijver
Mon Dec 18, 2017 11:05 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 122398

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) ipsec - improved hardware accelerated IPSec performance on 750Gr3;
Can you tell me more about this?
by onnoossendrijver
Wed Nov 08, 2017 12:58 pm
Forum: Wireless Networking
Topic: New home wire install...CAT6, OM3, OM4..Need help...
Replies: 1
Views: 341

Re: New home wire install...CAT6, OM3, OM4..Need help...

I'd stay away from fiber to each room. It may be cheap, but it is difficult wo work with, can't do PoE and requires 'special' equipment. Good quality cat6 or better is fine for 10g speeds at home. I have only a two fibers at home: between router and switch (because DAC cable didn't work), and a fibe...
by onnoossendrijver
Fri Nov 03, 2017 11:02 am
Forum: Announcements
Topic: Newsletter 78 with 1GBPS WIRELESS PRODUCT ANNOUNCEMENT!
Replies: 109
Views: 28963

Re: Newsletter 78 with 1GBPS WIRELESS PRODUCT ANNOUNCEMENT!

Would the new S+RJ10 establish 10Gbps connection over 50 meters cat5e cable? My cables are in walls of my home and can not be upgraded.
According to the spec. sheet it probably will not work.
https://i.mt.lv/routerboard/files/sfp_s ... 151033.pdf
by onnoossendrijver
Thu Oct 26, 2017 6:09 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3569

Re: Please add performance results for IPsec tunnel!

Maybe EoIP is responsible for that. Can you check without EoIP ?
I think it is still a good result for such device.
by onnoossendrijver
Wed Oct 25, 2017 12:35 pm
Forum: Wireless Networking
Topic: Problem after upgrate to 6.40.4
Replies: 2
Views: 475

Re: Problem after upgrate to 6.40.4

Maybe because these are old devices, you should try the latest RouterOS 5 (5.26) also..

Also.. try configuring a fixed rate.
by onnoossendrijver
Tue Oct 24, 2017 4:26 pm
Forum: RouterBOARD hardware
Topic: Replace 1921 cisco with routerboard
Replies: 6
Views: 865

Re: Replace 1921 cisco with routerboard

https://mikrotik.com/product/RB750Gr3 if at home
or
https://mikrotik.com/product/rb1100ahx4 if you have the budget or business use.. :)

CCR mentioned by nemanja82 is also good, but a little more expensive.
by onnoossendrijver
Tue Oct 24, 2017 2:23 pm
Forum: Wireless Networking
Topic: DISAPPOINTED 10Km link+netmetal+CCQ>94%+650Mbps@80Mhz < 180Mbps Throughtput
Replies: 13
Views: 1567

Re: DISAPPOINTED 10Km link+netmetal+CCQ>94%+650Mbps@80Mhz < 180Mbps Throughtput

Do not test with the RB devices. Their CPU is not suited for a decent speed test. You should use a normale PC/laptop and a tool like IPerf3.
by onnoossendrijver
Wed Sep 20, 2017 3:53 pm
Forum: RouterBOARD hardware
Topic: best integrated board for vehicle mount
Replies: 10
Views: 1408

Re: best integrated board for vehicle mount

how about LTE modem, I want to ensure I can set a static Ip on the mikrotik LTE interface, but I hear the Huawei sticks are only NAT modem, DMZ as an option, but have not tried this yet. Any suggestions on an LTE stick that works well as bridge and compatible with mikrotik hAP ac lite? Huawei stick...
by onnoossendrijver
Sun Sep 17, 2017 10:42 am
Forum: General
Topic: Backup mikrotik configurations
Replies: 10
Views: 1792

Re: Backup mikrotik configurations

I use rancid http://www.shrubbery.net/rancid/ for config backup. At a previous employer they use it to backup 10s of thousands devices with great success.
by onnoossendrijver
Fri Sep 01, 2017 9:48 pm
Forum: RouterBOARD hardware
Topic: RB M11G 802.3af/at
Replies: 8
Views: 1256

RB M11G 802.3af/at

Hi,

I cannot find a conclusive answer on the web...
Can I power the RB M11G with a regular 802.3af/at switch(and have gigabit connectivity)?
by onnoossendrijver
Wed Aug 02, 2017 1:32 pm
Forum: Beginner Basics
Topic: Backup All Mikrotik Configuration
Replies: 13
Views: 83613

Re: Backup All Mikrotik Configuration

If you need to backup all your network devices automatically, use RANCID.
http://www.shrubbery.net/rancid/

I use it at several customers to backup Cisco, Juniper, Mikrotik, Ubiquiti, etcetera.. devices.
by onnoossendrijver
Fri Jun 02, 2017 2:22 pm
Forum: General
Topic: only half duplex in 10Mbps Ethernet
Replies: 5
Views: 1246

Re: only half duplex in 10Mbps Ethernet

Set all interfaces to autonegotiation and try to change the cable.
by onnoossendrijver
Wed May 17, 2017 2:44 pm
Forum: General
Topic: Feature Request: IPSEC Improvements
Replies: 60
Views: 15516

Re: Feature Request: IPSEC Improvements

VTI +2 (me and a friend of mine)
IPSec VTI +2 here also :)
by onnoossendrijver
Wed Apr 12, 2017 2:47 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2017: new hardware incoming!
Replies: 86
Views: 20592

Re: MUM Europe 2017: new hardware incoming!

Can someone tell me what CPU is used in the CRS328-24P-4S+RM?
I hope for at least a Mediatek CPU like in the RB750Gr3...
by onnoossendrijver
Tue Apr 04, 2017 5:56 pm
Forum: General
Topic: wap-ac PoE issue with Dlink switches , help needed please ! [solved...]
Replies: 20
Views: 2648

Re: wap-ac PoE issue with Dlink switches , help needed please !

I have 2 WAP AC's functioning correctly on both a Netgear GS110TP(v1) and a Juniper EX2300C-12P (my current switch).
Both are gigabit switches.
by onnoossendrijver
Tue Apr 04, 2017 5:03 pm
Forum: Beginner Basics
Topic: RB-450G with Fiber Optic 200/50M ?
Replies: 2
Views: 438

Re: RB-450G with Fiber Optic 200/50M ?

Have you configured Fasttrack?
by onnoossendrijver
Fri Mar 31, 2017 11:20 am
Forum: RouterBOARD hardware
Topic: MUM Europe 2017: new hardware incoming!
Replies: 86
Views: 20592

Re: MUM Europe 2017: new hardware incoming!

Great lineup! I'd like to hear about release dates and prices.
by onnoossendrijver
Fri Mar 10, 2017 6:26 pm
Forum: Announcements
Topic: v6.39rc [release candidate] is released
Replies: 391
Views: 81580

Re: v6.39rc [release candidate] is released

Version 6.39rc51 has been released.
!) tile - fixed IPsec hardware acceleration out-of-order packet problem, significantly improved performance;
Can you tell more about this?
Does this also improve IPsec on other multicore platforms like RB750GR3?
by onnoossendrijver
Wed Mar 01, 2017 6:00 pm
Forum: General
Topic: Are units in ROS base 2 or 10?
Replies: 3
Views: 498

Re: Are units in ROS base 2 or 10?

Telecommunications have used SI units/powers for as long as I remember :)
by onnoossendrijver
Wed Feb 15, 2017 3:55 pm
Forum: RouterBOARD hardware
Topic: Question about DAT cable maximum length.
Replies: 5
Views: 813

Re: Question about DAT cable maximum length.

I believe 10g optics and a piece of fiber are cheaper than a 10 meter (active) DAC cable...
by onnoossendrijver
Thu Feb 02, 2017 11:44 am
Forum: RouterBOARD hardware
Topic: What is exactly direct attach cable?... Does it contain SFP+ interface?
Replies: 15
Views: 2614

Re: What is exactly direct attach cable?... Does it contain SFP+ interface?

DAC cables are usually the best option for the very short distances, unless electrical isolation matters.
It is much simpler (less electronics). They use less energy than fiber and much less than UTP.
by onnoossendrijver
Wed Jan 04, 2017 12:25 pm
Forum: Announcements
Topic: v6.38 [current] is released!
Replies: 168
Views: 36778

Re: v6.38 [current] is released!

Really would appreciate you or others to confirm if there is a serious problem with this upgrade on RB750Gr3.

Thanks in advance.
I experienced no problems when upgrading my RB750Gr3 from version 6.37.3 to version 6.38
by onnoossendrijver
Wed Dec 21, 2016 3:06 pm
Forum: RouterBOARD hardware
Topic: Lower ISP speeds after swapping 450G to CRS125-24G
Replies: 10
Views: 5970

Re: Lower ISP speeds after swapping 450G to CRS125-24G

I believe there is something else wrong in your setup. The 2011 should not drop packets that massively.
Do you see the TX Drop counter increment on the Interface TX Stats Tab?
by onnoossendrijver
Mon Nov 28, 2016 10:30 am
Forum: RouterBOARD hardware
Topic: New CPU - new product RB750Gr3 - RB750G family - now mmips
Replies: 180
Views: 66844

Re: New CPU - new product RB750Gr3 - RB750G family - now mmips

Maybe if that BGP session does not import a full routing table and you don't use heavy firewall and qos rules.
by onnoossendrijver
Tue Nov 22, 2016 4:39 pm
Forum: RouterBOARD hardware
Topic: Only 100mbit on 1000mbit ethernet ports
Replies: 11
Views: 6493

Re: Only 100mbit on 1000mbit ethernet ports

Make sure you only use 100% copper cables, not the cr.ppy ;) CCA types.
by onnoossendrijver
Tue Nov 22, 2016 11:31 am
Forum: RouterBOARD hardware
Topic: New CCR1009-7G-1C-1S+PC ?
Replies: 5
Views: 3364

Re: New CCR1009-7G-1C-1S+PC ?

It was announced at Dutch MUM:
7x Gigabit UTP ports
1x combo gigabit SFP/UTP port
1x SFP+ 10G port
NO switchchip, only direct ports
by onnoossendrijver
Wed Oct 12, 2016 2:40 pm
Forum: Beginner Basics
Topic: RB450G max wan speed?
Replies: 10
Views: 2495

Re: RB450G max wan speed?

First, you should enable Fasttrack.
But even then I doubt if the RB450G can handle 300 mbit/s.
The CPU on this router is not very fast compared to modern routers.
by onnoossendrijver
Wed Oct 05, 2016 10:44 am
Forum: RouterBOARD hardware
Topic: New CPU - new product RB750Gr3 - RB750G family - now mmips
Replies: 180
Views: 66844

Re: New CPU - new product RB750Gr3 - RB750G family - now mmips

What is the CPU in this device? Does it support hardware encryption for ipsec?
by onnoossendrijver
Mon Oct 03, 2016 1:50 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44048

Re: wAP AC (General questions and experience)

So, is Wap AC 802.3af compliant ??
According to the specs it is :)
by onnoossendrijver
Sun Oct 02, 2016 8:08 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44048

Re: wAP AC (General questions and experience)

af Power problem wit netgear GS110TP. Switch will deliver no power to device. Regardless of power mode. Port was running with unifi AP pro without an issue ... I just borrowed a WAP AC from Quindor (thanks!). It's working fine on my Netgear GS110TP (v1) switch running firmware 5.4.2.25. Power is de...
by onnoossendrijver
Wed Sep 28, 2016 5:11 pm
Forum: Announcements
Topic: v6.37 [current] is released!
Replies: 197
Views: 34399

Re: v6.37 [current] is released!

Is TPC support on the RouterOS roadmap?
by onnoossendrijver
Mon Sep 05, 2016 1:19 pm
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44048

Re: wAP AC (General questions and experience)

The GS110TP is just an ordinary 802.3af switch.
It is supposed to work.
by onnoossendrijver
Mon Sep 05, 2016 11:39 am
Forum: RouterBOARD hardware
Topic: wAP AC (General questions and experience)
Replies: 118
Views: 44048

Re: wAP AC (General questions and experience)

Damn, I was about to order 3 pcs. of WAP AC to connect to my Netgear GS110TP :(

Do you have version1 or version 2 of this switch? Are you running the latest software version?
by onnoossendrijver
Tue Jul 26, 2016 1:39 pm
Forum: General
Topic: Unknown Upload!
Replies: 8
Views: 1291

Re: Unknown Upload!

This looks like a DNS amplification attack.
Drop port 53 just like InoX above me suggests.
by onnoossendrijver
Fri Feb 26, 2016 1:51 pm
Forum: RouterBOARD hardware
Topic: Supported/tested SFP for single fiber networks
Replies: 2
Views: 919

Re: Supported/tested SFP for single fiber networks

Mikrotik sells these modules by themselves: http://routerboard.com/S-3553LC20D. They should work I think :wink:
I will soon try a Draytek module in a Miktrotik device.
by onnoossendrijver
Fri Feb 26, 2016 1:48 pm
Forum: General
Topic: Mikrotik does not recongnise Alfa wireless card AWUS036H
Replies: 5
Views: 1254

Re: Mikrotik does not recongnise Alfa wireless card AWUS036H

I believe Mikrotik only supports Qualcomm / Atheros wifi chipsets, no Realtek.
by onnoossendrijver
Thu Nov 19, 2015 2:46 pm
Forum: General
Topic: 6.33.1 version is released!
Replies: 48
Views: 12537

Re: 6.33.1 version is released!

If you have had imported configuration from old export, then you will have this: /tool romon port add If you will run "/tool romon port" print then now you will have two entries for port=all. You can delete one of them. Old export was incorrect and now if you import it, then it seems like it is inc...
by onnoossendrijver
Thu Nov 19, 2015 12:32 pm
Forum: General
Topic: 6.33.1 version is released!
Replies: 48
Views: 12537

Re: 6.33.1 version is released!

Well, this is not a config that you can copy/paste in a router. The CLI expects some input after 'add'.
by onnoossendrijver
Thu Nov 19, 2015 11:52 am
Forum: General
Topic: 6.33.1 version is released!
Replies: 48
Views: 12537

Re: 6.33.1 version is released!

I think I found a little bug. export shows this: [...] /tool romon port add On the previous 6.33 version it showed: [...] /tool romon port set [ find default=yes ] cost=100 forbid=no interface=all secrets="" add cost=100 disabled=yes forbid=no interface=all secrets="" Something is missing :) I found...
by onnoossendrijver
Wed Nov 11, 2015 1:33 pm
Forum: Wireless Networking
Topic: Setting up AC Link
Replies: 14
Views: 3389

Re: Setting up AC Link

I have 1 AC link with my neighbor:
2x NetMetal 5
cheap dual-polar antenna on both sides.
currently running RouterOS 6.33 with wireless-cm2 package and NV2

Speeds: 300-320 mbit/s for a single TCP session (iperf)
-55dB signal
by onnoossendrijver
Thu Nov 05, 2015 10:39 pm
Forum: General
Topic: When will there be a new stable version of RouterOs?
Replies: 5
Views: 1326

Re: When will there be a new stable version of RouterOs?

What's wrong with the current stable version? Since Mikrotik decided to release a stable, current, beta and legacy version things have been really good.
by onnoossendrijver
Wed Nov 04, 2015 9:51 am
Forum: General
Topic: Fasttrack on CCR 1009-8G-1S-1S+
Replies: 9
Views: 1520

Re: Fasttrack on CCR 1009-8G-1S-1S+

Fasttrack is only helping for connections that need connection tracking. NATed connections for example. Regular routing does not benefit from Fasttrack. What does help is Fastpath. You don't need to enable anything to enable fastpath. It just works when the hardware and configuration supports it. Al...
by onnoossendrijver
Mon Nov 02, 2015 2:21 pm
Forum: General
Topic: submask 22
Replies: 4
Views: 577

Re: submask 22

Is the subnetmask configured correctly on both the router interface and the pc's interface?
by onnoossendrijver
Wed Oct 28, 2015 2:24 pm
Forum: Beginner Basics
Topic: RB 1200 max user
Replies: 4
Views: 586

Re: RB 1200 max user

Also monitor the amount of sessions you are using.
by onnoossendrijver
Wed Oct 28, 2015 2:22 pm
Forum: RouterBOARD hardware
Topic: CRS226 throughput problem - only 28Mbps
Replies: 8
Views: 1152

Re: CRS226 throughput problem - only 28Mbps

A CRS can do much more than 28 Mbps. Try enabling fasttrack (search for the fasttrack topic on this forum).
by onnoossendrijver
Wed Oct 28, 2015 2:17 pm
Forum: RouterBOARD hardware
Topic: hEX nand size ONLY 16MB !!!!
Replies: 61
Views: 16711

Re: hEX nand size ONLY 16MB !!!!

Flash is not very good for writing large volumes of data. Logging to flash can wear the flash really fast.
by onnoossendrijver
Wed Oct 28, 2015 11:36 am
Forum: Beginner Basics
Topic: RB 1200 max user
Replies: 4
Views: 586

Re: RB 1200 max user

There is no such thing as 'max users' per router. There is, however, something like maximum number of simultaneous sessions per router. If you download a file, that counts as a session, opening a webpage is like 50 sessions (a download for every image, html page, stylesheet, etcetera..) Every router...
by onnoossendrijver
Wed Oct 28, 2015 9:28 am
Forum: General
Topic: CCR1016 CPU load not balanced ok
Replies: 6
Views: 579

Re: CCR1016 CPU load not balanced ok

If CPU load is less than 10-15% all is ok, if any goes over that there is droped data.
I don't think the CPU load is the problem here. You should be able to hit near 100% CPU load on any core without any dropped packets.
by onnoossendrijver
Tue Oct 27, 2015 5:52 pm
Forum: General
Topic: TCP 80 forwarding for webserver (how relevant are TCP flags)
Replies: 9
Views: 1193

Re: TCP 80 forwarding for webserver (how relevant are TCP flags)

How relevant is it also to set the TCP flags ACK, SYN, PSH, FIN in firewall rules? How must be the TCP flags set for the two firewall rules that the routing is secure? In this case it is not relevant. I saw that TCP connections to the webserver are very long established - can I set a lower timeout?...
by onnoossendrijver
Tue Oct 27, 2015 1:04 pm
Forum: General
Topic: CCR1016 CPU load not balanced ok
Replies: 6
Views: 579

Re: CCR1016 CPU load not balanced ok

Why is that a problem? Some processes can not run on multiple cores.
If you try to add 2 and 4, it does not matter is you are doing the calculation only in your own head or if you have 15 colleagues to help with the calculation.
by onnoossendrijver
Tue Oct 13, 2015 11:19 am
Forum: RouterBOARD hardware
Topic: RouterBOARD 912.
Replies: 4
Views: 857

Re: RouterBOARD 912.

If there are cables connected to CH0 and CH1, why would you need to cover it?
If there ar NO cables connected, I don't think it really matters if they are covered. Just make sure that the radio is disabled and clean the connectors when you are going to use them again.
by onnoossendrijver
Tue Oct 13, 2015 10:10 am
Forum: General
Topic: junos to mikrotik trunk does not function
Replies: 5
Views: 778

Re: junos to mikrotik trunk does not function

Can you put your juniper config in a block. Right now it is missing large parts of configuration.
by onnoossendrijver
Thu Oct 08, 2015 10:06 am
Forum: Forwarding Protocols
Topic: BGIP Routing in CCR1009, ISP given WAN, my /24 needs to work
Replies: 11
Views: 1141

Re: BGIP Routing in CCR1009, ISP given WAN, my /24 needs to work

You say that you see your subnet on the Advertisements tab? That's good! You can do a traceroute from your PC to an internetaddress (8.8.8.8 from google for instance) and see where it ends. You can also do a traceroute from a different internet connection to your own subnet and see where that ends. ...
by onnoossendrijver
Thu Oct 08, 2015 9:51 am
Forum: Forwarding Protocols
Topic: BGIP Routing in CCR1009, ISP given WAN, my /24 needs to work
Replies: 11
Views: 1141

Re: BGIP Routing in CCR1009, ISP given WAN, my /24 needs to work

NAT translates your locally used IP addresses to your WAN IP. That's not what you want, so disable NAT. Because you are running BGP you need to make sure that you announce the addresses that you want to be reachable from the internet to your ISP. One way to do that is to enable "Redistribute connect...
by onnoossendrijver
Thu Sep 03, 2015 3:09 pm
Forum: General
Topic: v6.33rc release candidate (final testing)
Replies: 203
Views: 36785

Re: v6.33rc1 release candidate

*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Sounds nice!

Will 6.32 return in a fixed form or do we have to wait for 6.33 to become stable?
by onnoossendrijver
Fri Jul 17, 2015 3:08 pm
Forum: Beginner Basics
Topic: Abnormally high traffic on My Wan Port
Replies: 7
Views: 4136

Re: Abnormally high traffic on My Wan Port

Disable access to your DNS service from the WAN connection.
This type of attack is called: DNS amplification attack.
by onnoossendrijver
Fri Jul 17, 2015 11:38 am
Forum: Announcements
Topic: v6.30.x bugfix release
Replies: 136
Views: 33422

Re: v6.30.1 bugfix release

You said you would present 6.31.1 as the next bugfix upgrade to someone on 6.30.3, and I say this is wrong because it does not guarantee that all the bugs introduced in 6.31.0 are fixed. Going up the minor version is a feature upgrade, even to a bugfix release. They will not endlessly provide bugfi...
by onnoossendrijver
Mon Jun 15, 2015 8:31 pm
Forum: General
Topic: Auto terminate TCP connections after client disconnects.
Replies: 2
Views: 435

Re: Auto terminate TCP connections after client disconnects.

You can change that under IP>Firewall>Connections
by onnoossendrijver
Sat Jun 13, 2015 11:17 pm
Forum: General
Topic: 921UAGS-5SHPacT WLAN 'Card' and License
Replies: 2
Views: 861

Re: 921UAGS-5SHPacT WLAN 'Card' and License

Enable the wireless-fp driver and reboot. The you should have your wireless interface back.
by onnoossendrijver
Thu Jun 11, 2015 1:00 pm
Forum: Announcements
Topic: FastTrack - New feature in 6.29
Replies: 237
Views: 138951

Re: FastTrack - New feature in 6.29

I really like the latest beta/rc release! Better speeds than before. Don't know if it is because of the AC improvements or the FastPath/VLAN support..
by onnoossendrijver
Wed Jun 10, 2015 2:40 pm
Forum: General
Topic: Wan balance + merge
Replies: 2
Views: 468

Re: Wan balance + merge

That is not possible, unfortunately.
by onnoossendrijver
Tue Jun 02, 2015 3:31 pm
Forum: General
Topic: Netherlands: 1M+ >100Mbps subscribers - Spain: 1.8M FTTH
Replies: 7
Views: 858

Re: Netherlands: 1M+ >100Mbps subscribers - Spain: 1.8M FTTH

interesting info. on cable ( i supose is docsis ) how many channels are they using for download on a node supporting 100+mbps speed clients?? upload speed?? Download: Currently most systems support 8 channels, but most ISP's are in the process of upgrading to 16 channels. 500M Down / 40M Up account...
by onnoossendrijver
Fri May 29, 2015 1:13 pm
Forum: Forwarding Protocols
Topic: OSPF not work between 2 mikrotiks.
Replies: 5
Views: 1450

Re: OSPF not work between 2 mikrotiks.

Also check MTU on all participating interfaces and check if you really are able to send maximum sized packets.
by onnoossendrijver
Thu May 28, 2015 7:32 pm
Forum: Wireless Networking
Topic: NetMetal 5 AC ( 921UAGS-5SHPacT ) Triple Chain after upgrade to 6.29 Issue
Replies: 9
Views: 1227

Re: NetMetal 5 AC ( 921UAGS-5SHPacT ) Triple Chain after upgrade to 6.29 Issue

The question is: what tool are you using and on which device is it running?
by onnoossendrijver
Wed May 27, 2015 10:25 am
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 92832

Re: Feature request: OpenVPN compression LZO and UDP

I agree OpenVPN is very easy and straightforward to install. PPTP is about as easy but requires GRE to pass through and is not as secure. IPsec is also okay, but requires a bit more configuration and doesn't like NAT very much. Still, I think this kind of functionality does not belong on a router. I...
by onnoossendrijver
Mon May 25, 2015 6:57 pm
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 92832

Re: Feature request: OpenVPN compression LZO and UDP

I don't understand why you would desperately need OpenVPN/UDP support. I can't think of any professional router manufacturer that has OpenVPN support.
Besides that there are many good (better?) alternatives to OpenVPN.
by onnoossendrijver
Thu Mar 05, 2015 12:45 pm
Forum: RouterBOARD hardware
Topic: Celeron j1900 routing performance
Replies: 3
Views: 2331

Re: Celeron j1900 routing performance

My guess would be: better than anything non-CCR, and probably better than most CCR's depending on what the router needs to do.
by onnoossendrijver
Thu Feb 19, 2015 4:06 pm
Forum: RouterBOARD hardware
Topic: CRS226-24G-2S+ routing speed
Replies: 2
Views: 688

Re: CRS226-24G-2S+ routing speed

Unfortunately routing is completely done in software/CPU. Performance will be nowhere near 10G, even 1G is impossible.
Replace one of the CRS with a CCR for much faster routing.
by onnoossendrijver
Tue Nov 25, 2014 8:40 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47238

Re: RB850Gx2 - Release date?

5. ~150-200Mbps
That would be great. It's more than most routers do with hardware encryption enabled.
by onnoossendrijver
Tue Nov 11, 2014 11:02 am
Forum: RouterBOARD hardware
Topic: RB2011 serial port voltages
Replies: 5
Views: 1214

Re: RB2011 serial port voltages

I'm pretty sure they are official RS232 level.
If you see garbage then your serial speed is probably incorrect.
by onnoossendrijver
Sun Nov 02, 2014 7:10 pm
Forum: Beginner Basics
Topic: Untag and tag again the same vlan
Replies: 3
Views: 741

Re: Untag and tag again the same vlan

You can create a second tunnel for only vlan546 traffic.
by onnoossendrijver
Sun Nov 02, 2014 3:52 pm
Forum: RouterBOARD hardware
Topic: Where can I download RouterBoot for RB850G?
Replies: 2
Views: 1019

Re: Where can I download RouterBoot for RB850G?

6.0rc13? That's soooooo old.
In general you should not downgrade to a lower version than the version the router was shipped with.
I'm pretty sure that 6.0rc13 does not support the RB850G.
Maybe netinstall can fix this.
by onnoossendrijver
Wed Oct 29, 2014 8:29 pm
Forum: General
Topic: yosemite
Replies: 4
Views: 2055

Re: yosemite

I can confirm that :)
by onnoossendrijver
Thu Oct 23, 2014 10:15 am
Forum: General
Topic: v6.20 released!
Replies: 146
Views: 58466

Re: v6.20 released!

I have no problems with OSPF between 6.19 and 6.20 machines. Can you check all MTU settings on both devices? OSPF is very picky about wrong MTU sestings.
by onnoossendrijver
Fri Oct 03, 2014 8:37 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47238

Re: RB850Gx2 - Release date?

It is available since a few days.
by onnoossendrijver
Fri Oct 03, 2014 4:40 pm
Forum: General
Topic: 32Mb RAM devices and ROS 6
Replies: 24
Views: 4543

Re: 32Mb RAM devices and ROS 6

Well, 10MB is not 0MB free :)

It can work fine, but I would monitor RAM usage on the device using SNMMP/Cacti (just like with any other device).
by onnoossendrijver
Tue Sep 23, 2014 4:57 pm
Forum: General
Topic: Viber not working??
Replies: 3
Views: 1739

Re: Viber not working??

I don't know Viber, but Triple NAT is certainly not helping.
Maybe you need port-forwarding on all these routers for Viber to work.
by onnoossendrijver
Mon Sep 22, 2014 1:37 pm
Forum: General
Topic: v6.19 released
Replies: 256
Views: 93115

Re: v6.19 released

Tested 6.19 on SXT5G-HnD Link... but Throughput is very bad. Link is Only-N, 20/40 above, nv2 signal -40dB to -45dB on both chains. no wireles-fs enabled 6.19 winbox freeze ... try BTest and Throughput is 1-10mbps (WTF?) in 1TCP connection Downgrade to 6.18 Try Btest and Throughput si 70-80Mbps in ...
by onnoossendrijver
Mon Sep 15, 2014 10:44 am
Forum: RouterBOARD hardware
Topic: CRS125-24G & CRS226-24G L2 performance
Replies: 7
Views: 2093

Re: CRS125-24G & CRS226-24G L2 performance

You can safely assume that traffic through the switchchip is linerate.
by onnoossendrijver
Tue Aug 26, 2014 2:03 pm
Forum: Wireless Networking
Topic: SXT AC withouth line of site
Replies: 9
Views: 2013

Re: SXT AC withouth line of site

I recently build a connection like this through 3 buildings. It works very well. Speed and reliability are fine. I used normal SXT.
This depends very much on the buildings and on the used/allowed TX-Power.
Of-course... When there is no line-of-sight it is always a bit of a gamble.
by onnoossendrijver
Tue Aug 26, 2014 10:42 am
Forum: Wireless Networking
Topic: SXT AC withouth line of site
Replies: 9
Views: 2013

Re: SXT AC withouth line of site

I recently build a connection like this through 3 buildings. It works very well. Speed and reliability are fine. I used normal SXT.
by onnoossendrijver
Fri Aug 15, 2014 7:30 pm
Forum: RouterBOARD hardware
Topic: Millions of connections - CCR1036 or x86?
Replies: 5
Views: 1802

Re: Millions of connections - CCR1036 or x86?

The amount of sessions only matters if you do something that needs connection tracking.
If you do simple routing this is not an issue, but if you are doing NAT, this can be an issue.
by onnoossendrijver
Fri Aug 15, 2014 7:29 pm
Forum: General
Topic: Maximum number of NAT users / sessions
Replies: 9
Views: 10557

Re: Maximum number of NAT users / sessions

65500 is about the maximum number of session per single NAT IP (in general your public IP). If you need to do more sessions, make shure you have more IP's to do NAT on.
by onnoossendrijver
Sat Aug 09, 2014 1:33 pm
Forum: RouterBOARD hardware
Topic: 160MHz channel width support?
Replies: 2
Views: 1449

Re: 160MHz channel width support?

The current chipset doesn't support this. But there is a new Qualcomm chipset on its way that does support 160MHz channels.
by onnoossendrijver
Wed Jul 30, 2014 12:36 pm
Forum: General
Topic: Weird LACP Issue
Replies: 7
Views: 2737

Re: Weird LACP Issue

this is one problem with proper 802.3ad from what i mostly see - its a per-flow kind of load balance means at best you might get a 70/30 balance, and a single stream always only 1 link worth. Mikrotiks own balance-rr gives proper bonding in my eyes, yet to get Mikrotik + Cisco doing good proper loa...
by onnoossendrijver
Tue Jul 29, 2014 11:11 pm
Forum: General
Topic: Weird LACP Issue
Replies: 7
Views: 2737

Re: Weird LACP Issue

Can you tell me the layer 3 configuration of this part of the network?

If the Mikrotik only receives on 1 interface that's because the Cisco sends only on 1 interface :)
The Cisco is the problem here.

What is the hash policy on the Cisco?
by onnoossendrijver
Mon Jul 28, 2014 9:02 am
Forum: General
Topic: Downgrade from 6.15 to 5.12 on 911-5Hn
Replies: 7
Views: 1114

Re: Downgrade from 6.15 to 5.12 on 911-5Hn

I don't think they even support version 5.x.
In general you should not downgrade to a version lower than it was shipped with. This is also true for Cisco and other manufacturers.
by onnoossendrijver
Sun Jul 27, 2014 7:54 pm
Forum: General
Topic: Newsletter 60: 802.11ac
Replies: 104
Views: 54643

Re: Newsletter 60: 802.11ac

Question, why the heck are you guys making the R11E-AC card a Mini-PCIe, instead of all the standard PCI cards? Does it support faster speeds on PCI or something?
(mini)PCI-E is the industry standard these days. (mini)-PCI es getting extinct. Current wifi chips do NOT support PCI, only PCI-E.
by onnoossendrijver
Tue Jul 22, 2014 8:18 pm
Forum: Wireless Networking
Topic: Is wireless-fp useful for something besides CAPsMAN?
Replies: 15
Views: 4695

Re: Is wireless-fp useful for something besides CAPsMAN?

On the contrary... I've seen devices not working with wireless that are now working correctly with wireless-fp :)
by onnoossendrijver
Tue Jul 22, 2014 9:34 am
Forum: RouterBOARD hardware
Topic: RB2011UiAS-2HnD-IN, is Gigabit routing possible?
Replies: 33
Views: 20014

Re: RB2011UiAS-2HnD-IN, is Gigabit routing possible?

The link is full-duplex, but it your WAN and LAN are on the same switchchip the traffic flows from switchchip to CPU twice.
That way you can reach only 500 mbit/s full-duplex or 1gbit/s half-duplex maximum.
by onnoossendrijver
Sun Jul 20, 2014 3:54 pm
Forum: General
Topic: Newsletter 60: 802.11ac
Replies: 104
Views: 54643

Re: Newsletter 60: 802.11ac

And yes, as I said it is possible to use 2 batteries serial-connected to deliver 24v, but that does NOT mean that you get double the power in cause of power failure. If serial connected to 24v you get higher voltage, but current(Ahours) remain THE SAME! Example: -If you have 2 x 100Ah batteries 12v...
by onnoossendrijver
Sat Jul 19, 2014 7:51 pm
Forum: General
Topic: Doubts about pppoe MTU
Replies: 5
Views: 932

Re: Doubts about pppoe MTU

Normally PPPoE supports maximum MTU of 1492. I you need more then BOTH server and client need to support RFC4638.
by onnoossendrijver
Sat Jul 19, 2014 1:31 pm
Forum: General
Topic: Newsletter 60: 802.11ac
Replies: 104
Views: 54643

Re: Newsletter 60: 802.11ac

It's sad that 12v is not supported anymore. But I like the fact that 48v is supported now.
by onnoossendrijver
Sat Jul 19, 2014 1:30 pm
Forum: General
Topic: v6.17 SNMP - Interface Stats
Replies: 56
Views: 16741

Re: v6.17 SNMP - Interface Stats

I had the same problem with 6.16. I lost all 64bit (HC) counters. When upgrading to 6.17 this was fixed. It was probably the reboot itself that fixed this.
by onnoossendrijver
Tue Jul 15, 2014 12:53 am
Forum: Wireless Networking
Topic: No luck with Compex WLE600v5-23
Replies: 4
Views: 1100

Re: No luck with Compex WLE600v5-23

It's from the datasheet on the compex site.
by onnoossendrijver
Mon Jul 14, 2014 1:46 pm
Forum: Wireless Networking
Topic: No luck with Compex WLE600v5-23
Replies: 4
Views: 1100

Re: No luck with Compex WLE600v5-23

Did you verify this is a v2 card? (QCA9882-AR4x)
Did you connect the 5v pin to a 5v powersource? As I read on the site this is mandatory.
by onnoossendrijver
Thu Jul 10, 2014 10:40 pm
Forum: Wireless Networking
Topic: NV2 link with a very different speed in TCP and UDP
Replies: 22
Views: 3116

Re: NV2 link with a very different speed in TCP and UDP

The CPU on most routerboards isn't fast enough for TCP testing. Use a normal PC behind the device at test.
by onnoossendrijver
Thu Jul 10, 2014 9:56 am
Forum: RouterBOARD hardware
Topic: new AC products
Replies: 4
Views: 3151

Re: new AC products

Well, the devices from the other big manufacturer in the same segment had/has its fair share of problems with their AC products.
by onnoossendrijver
Wed Jul 09, 2014 1:34 pm
Forum: General
Topic: v6.16 RC test release now includes 802.11ac support
Replies: 52
Views: 20304

Re: v6.16 RC test release now includes 802.11ac support

Do you support only the v2 cards (-AR4A ?) and not the v1 cards (-AR1A?), like many other AC implementations?
by onnoossendrijver
Thu Jul 03, 2014 8:31 pm
Forum: RouterBOARD hardware
Topic: Case for RB953GS-5HnT
Replies: 23
Views: 9998

Re: Case for RB953GS-5HnT

Here are some pics...
The pigtails I use in these pictures are a little 'large'. Normal sized cable will fit fine.
by onnoossendrijver
Thu Jul 03, 2014 5:43 pm
Forum: Beginner Basics
Topic: Cant ping past Mikrotik rb1100hx2
Replies: 18
Views: 2849

Re: Cant ping past Mikrotik rb1100hx2

Quick question I need my 10.0.0.* devices to be able to report to the 192.168.1.3 address's I can ping and ssh into the 10.0.0.* devices but they have no route back. I have tried some nat addresses and have been able to port 10.0.0.0 address to 192.168.1.0 address's but that does not solve the prob...
by onnoossendrijver
Thu Jul 03, 2014 10:50 am
Forum: RouterBOARD hardware
Topic: Case for RB953GS-5HnT
Replies: 23
Views: 9998

Re: Case for RB953GS-5HnT

Just got my RB953GS-5HnT. CA/433 case fits fine :) I've looked at that previously but the cut outs on the rear panel of the CA433 case doesn't match the RB953GS-5HnT (antenna & SFP cages). Did you modify the case ? I did not modify the case. The cuts don't match but there is enough space for pigtai...
by onnoossendrijver
Wed Jul 02, 2014 7:12 pm
Forum: RouterBOARD hardware
Topic: Case for RB953GS-5HnT
Replies: 23
Views: 9998

Re: Case for RB953GS-5HnT

Just got my RB953GS-5HnT. CA/433 case fits fine :)
by onnoossendrijver
Mon Jun 30, 2014 11:06 am
Forum: General
Topic: LACP Question...
Replies: 15
Views: 10516

Re: LACP Question...

Regarding load-balancing with LACP... Mikrotik switches behave exactly the same as other switches with LACP functionality. You need more than one session to use the extra bandwidth. Windows 2012/8 with SMB3 supports the 'multichannel' feature to achieve higher bandwith with a single action. 'Under t...
by onnoossendrijver
Wed Jun 25, 2014 2:49 pm
Forum: Wireless Networking
Topic: is the trunk mode allowed by the Wireless bridge ?
Replies: 2
Views: 857

Re: is the trunk mode allowed by the Wireless bridge ?

Look in the Wiki for WDS.

Maybe a more elegant solution: make wifi routed and use VPLS on top of it to transport VLANs.
by onnoossendrijver
Wed Jun 25, 2014 1:57 pm
Forum: General
Topic: BUG was found. IPsec works not stable
Replies: 12
Views: 1813

Re: BUG was found. IPsec works not stable

Well, this is by 'design' and not a bug. You should explicitly take precautions to keep the tunnel up. On Juniper and Cisco you need to do the same thing.
An IPSEC tunnel only stays up when there is traffic.
by onnoossendrijver
Wed Jun 25, 2014 12:18 pm
Forum: General
Topic: v6.15 released
Replies: 302
Views: 102935

Re: v6.15 released

:P
We have absolutely no problems with 6.15 on our 'neighbor-network' with 8 Mikrotik's.
Running OSPF, OSPFv3, DHCP, VPLS/LDP, Queues, VLANs, NAT, DHCP, NV2, 80211 wireless, etcetera..
by onnoossendrijver
Wed Jun 25, 2014 9:56 am
Forum: General
Topic: When will we have 802.11ac Support?
Replies: 33
Views: 9975

Re: When will we have 802.11ac Support?

You did enable the wireless-fp package?
by onnoossendrijver
Tue Jun 24, 2014 11:26 am
Forum: RouterBOARD hardware
Topic: Case for RB953GS-5HnT
Replies: 23
Views: 9998

Re: Case for RB953GS-5HnT

Luckily I have some SMA to N cables lying around :)
by onnoossendrijver
Tue Jun 24, 2014 10:53 am
Forum: RouterBOARD hardware
Topic: Case for RB953GS-5HnT
Replies: 23
Views: 9998

Case for RB953GS-5HnT

I can't find any casings for the RB953GS-5HnT.
It looks like the CA/433 case fits if I modify the rear-end of the case. Am I right?
by onnoossendrijver
Mon Jun 16, 2014 7:14 pm
Forum: General
Topic: How to raise "upgradeable to"?
Replies: 22
Views: 3492

Re: How to raise "upgradeable to"?

What kind of board is it and what software version is it running?
I bought my RB600A years ago with version 3.x, which was upgradeable to version 4 at the time. Now I'm running version 6, without ever buying a license.
by onnoossendrijver
Sat Jun 14, 2014 12:24 pm
Forum: Beginner Basics
Topic: slow ping
Replies: 10
Views: 1834

Re: slow ping

First rule of network testing: NEVER use the device under test as endpoint for the test: NO pings to/from a router, only pings THROUGH the router. Same for bandwidth test: ONLY test THROUGH the router. The ISP I work for has expensive testers from Spirent behind every big Juniper MX or T router, but...
by onnoossendrijver
Mon Jun 09, 2014 11:04 pm
Forum: General
Topic: CCR1016 fw6.14 -reverts to old config on reboot
Replies: 2
Views: 610

Re: CCR1016 fw6.14 -reverts to old config on reboot

I don't know why you have this problem, but if you use 'rancid' you can get a config backup every X hours and see the differences you made over a period of time.
by onnoossendrijver
Mon Jun 09, 2014 10:12 pm
Forum: Forwarding Protocols
Topic: IP address on ospf link
Replies: 5
Views: 985

Re: IP address on ospf link

I think I understand now..
Can't you just let the wireless 'bridges' also route? Enable OSPF on them, that way OSPF will allways make sure there is a working path (if possible).
by onnoossendrijver
Mon Jun 09, 2014 8:56 pm
Forum: Forwarding Protocols
Topic: IP address on ospf link
Replies: 5
Views: 985

Re: IP address on ospf link

Use the IP addresses on the loopback/bridge interfaces to access the router. This IP address will not go down if the physical interface goes down.

Maybe I don't understand your question..
by onnoossendrijver
Mon Jun 09, 2014 8:10 pm
Forum: Forwarding Protocols
Topic: IP address on ospf link
Replies: 5
Views: 985

Re: IP address on ospf link

Not only add an IP address to the interface, but also add a bridge interface to OSPF (for loopback, without physical interfaces added) and give that bridge an IP address.
by onnoossendrijver
Mon Jun 09, 2014 6:34 pm
Forum: General
Topic: v6.14 released
Replies: 115
Views: 24369

Re: v6.14 released

I really like the wireless-fp package. I had one device that would not even see my AP. Now works fine.
Speeds are much better too.
by onnoossendrijver
Sun Jun 08, 2014 6:38 pm
Forum: Wireless Networking
Topic: NV2 vs Nstream vs 802.11
Replies: 6
Views: 7012

Re: NV2 vs Nstream vs 802.11

And... 6.13 works great on my x86 :)
by onnoossendrijver
Thu Jun 05, 2014 4:11 pm
Forum: General
Topic: What is better, NAT or Route
Replies: 1
Views: 578

Re: What is better, NAT or Route

The second one is better. NAT=dirty and gives problems with several protocols like SIP and FTP.
double NAT is even worse than single NAT :)
by onnoossendrijver
Thu Jun 05, 2014 12:10 pm
Forum: General
Topic: DNS Requests coming from my public interface?
Replies: 12
Views: 1924

Re: DNS Requests coming from my public interface?

Disable DNS access from the WAN.
by onnoossendrijver
Thu Jun 05, 2014 10:41 am
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 92832

Re: Feature request: OpenVPN compression LZO and UDP

Come on guys... You know UDP support will not be available. Also: No other high-end router manufacturer even supports OpenVPN. Not Cisco, not Juniper, not Alcatel... I think IPsec is the way to go if you need a secure connection. And if you really need OpenVPN, just pick a cheap x86 (atom) machine w...
by onnoossendrijver
Wed Jun 04, 2014 1:38 pm
Forum: General
Topic: how to disable ipsec encryption ??
Replies: 4
Views: 1398

Re: how to disable ipsec encryption ??

If you currently run IPsec with ESP you can change to AH. AH will not encrypt the data payload.
by onnoossendrijver
Tue Jun 03, 2014 10:55 pm
Forum: General
Topic: Enclosure for four (4) antennas?
Replies: 6
Views: 1536

Re: Enclosure for four (4) antennas?

Oh.. I Like that one! :D
by onnoossendrijver
Tue Jun 03, 2014 5:34 pm
Forum: General
Topic: Enclosure for four (4) antennas?
Replies: 6
Views: 1536

Re: Enclosure for four (4) antennas?

Buy a basebox2/5 with an extra mini-pci-express card and pigtails.
This way you have 4 or 5 antenna holes (RP-SMA).
by onnoossendrijver
Sun Jun 01, 2014 12:39 am
Forum: Beginner Basics
Topic: VPN bonding = low speed
Replies: 3
Views: 1504

Re: VPN bonding = low speed

Bonding on VPN links? I don't think that's a good idea.
You will very like suffer from out-of-order packets. Very bad for your speed.
Can you draw a picture of your setup?
by onnoossendrijver
Fri May 30, 2014 8:19 pm
Forum: RouterBOARD hardware
Topic: CPU to 100% in some cores ! CCR1036-12G-4S
Replies: 6
Views: 3767

Re: CPU to 100% in some cores ! CCR1036-12G-4S

Well, what does the Routerboard itself say about CPU usage?

As for any SNMP monitoring of bandwith: Always select the HC / 64bit counters.
Cacti has absolutely no problem with 64bit SNMP counters.
by onnoossendrijver
Thu May 29, 2014 12:21 pm
Forum: Wireless Networking
Topic: Questions about rb912uag series
Replies: 3
Views: 1060

Re: Questions about rb912uag series

Correct me if I'm wrong, but I believe you can only use one of these for USB. Remember that miniPCIe has USB pins, which are mainly used for 3G cards in the miniPCIe slot. So, if you have a miniPCIe card that does not require USB (most (all?) wifi cards) you can use both USB and miniPCIe at the same...
by onnoossendrijver
Wed May 28, 2014 5:16 pm
Forum: General
Topic: High Speed VPN - 100Mbps +
Replies: 25
Views: 15066

Re: High Speed VPN - 100Mbps +

GCM is not hardware encrypted, so in this case you can get max 80Mbps gre/ipsec traffic on CCR1009.
Will GCM be hardware-encrypted in future software?
by onnoossendrijver
Tue May 27, 2014 11:18 am
Forum: General
Topic: v6.13 released!
Replies: 177
Views: 48665

Re: v6.13 released!

You can add a 'vlan interface' to a physical port and give that interface a specific vlan tag.
Then you can do whatever you want with that interface. All traffic from that interface will have the specified vlan tag on the underlying physical interface.
by onnoossendrijver
Fri May 23, 2014 10:38 pm
Forum: RouterBOARD hardware
Topic: CPU to 100% in some cores ! CCR1036-12G-4S
Replies: 6
Views: 3767

Re: CPU to 100% in some cores ! CCR1036-12G-4S

Some things cannot be balanced over multiple cores. Among things that can only run on 1 core: the routing protocol processes (routing itself is multithreaded) and scripts. Tool -> Profile can give you a hint on what's causing load on the CPU. Some of these singlethreaded things will ultimately be ma...
by onnoossendrijver
Fri May 23, 2014 10:57 am
Forum: Beginner Basics
Topic: Wierd Traffic in a Poin to point /30 network
Replies: 2
Views: 521

Re: Wierd Traffic in a Poin to point /30 network

Well... If you only see traffic belonging to that subnet it would mean that there is only traffic originating from the first router with destination the 2nd router. The traffic you see is traffic originating from different parts of your network being routed to other parts of your network, traversing...
by onnoossendrijver
Wed May 21, 2014 11:10 am
Forum: General
Topic: If supported Alcon AP ACP-2405g?
Replies: 4
Views: 526

Re: If supported Alcon AP ACP-2405g?

I don't think there is any standard for AP management, so you won't find any controller that is able to manage an Alcon AP.
You need to buy a controller from Alcon to do that.
by onnoossendrijver
Wed May 21, 2014 10:05 am
Forum: General
Topic: New Wireless package
Replies: 53
Views: 27510

Re: New Wireless package

How did you test the TCP and UDP speeds?
by onnoossendrijver
Tue May 20, 2014 9:15 am
Forum: General
Topic: CRS125-24G-1S-RM and LACP: Bottlenecks?
Replies: 10
Views: 4639

Re: CRS125-24G-1S-RM and LACP: Bottlenecks?

I think the name is wrong. A trunk is a port that carries more than 1 virtual connections. VLANs in our ethernet world :)
by onnoossendrijver
Thu May 15, 2014 9:44 am
Forum: Beginner Basics
Topic: log: excessive or late collision, link duplex mismatch ????
Replies: 24
Views: 46453

Re: log: excessive or late collision, link duplex mismatch

You should always configure both ends of the connection the same way. So if you configure one end to autonegotiation you need to configure the other end also for autonegotiation. If you configure one end to 100/full, the other end must also be 100/full. Configuring one end to autonegotiation and the...
by onnoossendrijver
Tue May 13, 2014 9:22 pm
Forum: Beginner Basics
Topic: Resolving external DNS:Ports to IP's
Replies: 5
Views: 1131

Re: Resolving external DNS:Ports to IP's

It depends on what's running on port 3900, but in general you can not do this. You need a real public IP per server. (Update) I believe there are application aware routers/firewalls that can do this. Maybe even a Mikrotik with correctly configured L7 filter can do this, but it will be very slow and ...
by onnoossendrijver
Tue May 13, 2014 9:05 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4226

Re: How Do I add a link local address?

Is that correct would the link local be the same on 2 different bridges?
Look more closely.. it is not the same :)
The link-local address usually contains the mac-address of the interface. That's why they only differ slightly.
by onnoossendrijver
Tue May 13, 2014 11:55 am
Forum: General
Topic: ICMP
Replies: 1
Views: 322

Re: ICMP

So your latency is too high... Get a better ISP. If you are on DSL, switch to cable or fiber access.
by onnoossendrijver
Tue May 13, 2014 11:11 am
Forum: General
Topic: v6.12 released
Replies: 237
Views: 57052

Re: v6.12 released

As Mikrotik has said many times there will be no UDP support for OpenVPN.
There are lots of alternatives for OpenVPN.
And if you desperately need OpenVPN with UDP you can install OpenWRT in metarouter or just use a second physical router for OpenVPN. These things are VERY cheap and power efficient.
by onnoossendrijver
Mon May 12, 2014 2:56 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx2 or CCR1009-8G-1S-1S+
Replies: 19
Views: 12056

Re: RB1100AHx2 or CCR1009-8G-1S-1S+

Both have hardware encryption and both are fast enough for your connections. If you think the redundant PSU is worth the extra money... go for the CCR, else the 1100AHx2 will be fine.
by onnoossendrijver
Fri May 09, 2014 12:17 pm
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3313

Re: IPv6 BGP Routes Show as unreachable

The interface should at least have 2 IPv6 addresses: 1. an fe80:/64 IP address, this is called a link-local address. 2. your 2001:xxxx::/112 address from cogent The fe80 link-local address is used for most host-to-host communication. For example OSPFv3 uses this address for communication with neighb...
by onnoossendrijver
Fri May 09, 2014 10:27 am
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3313

Re: IPv6 BGP Routes Show as unreachable

It should work automatically. From Wiki: A link-local address is required on every IPv6-enabled interface, applications may rely on the existence of a link-local address even when there is no IPv6 routing, that is why link-local address is generated automatically for every active interface using it'...
by onnoossendrijver
Thu May 08, 2014 7:32 pm
Forum: RouterBOARD hardware
Topic: 10GBASE-T SFP+?
Replies: 4
Views: 3284

Re: 10GBASE-T SFP+?

I don't think there are any available yet.
It probably has to do with power consumption. I believe that an SFP+ port can deliver about 2 watts, but a 10G UTP transceiver currently requires about 5 watts.
I hope they will soon produce more energy efficient 10G transceivers.
by onnoossendrijver
Thu May 08, 2014 3:37 pm
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3313

Re: IPv6 BGP Routes Show as unreachable

Well, does your interface have a link-local address? (fe80:....)
If not, add one :)
by onnoossendrijver
Wed May 07, 2014 11:36 pm
Forum: RouterBOARD hardware
Topic: CCR1009-8G-1S-1S+ General info & Questions
Replies: 100
Views: 68583

Re: CCR1009-8G-1S-1S+ General info & Questions

+1 thank you for this excellent overview. Much appreciated. So then, it does not route over 1 gigabit over a single upstream port? What is the 10 gigabit SFP+ port for then?
What about inter-vlan routing on the 10g port? :)
by onnoossendrijver
Wed May 07, 2014 4:01 pm
Forum: Forwarding Protocols
Topic: Bridged (rstp) + OSPF (nbma) possible ?
Replies: 3
Views: 1228

Re: Bridged (rstp) + OSPF (nbma) possible ?

Unless there is a reason for a large layer 2 network PLEASE consider making all connections between routers layer 3 / point-to-point. Also add a bridge interface with IP address to the OSPF process and use it as router ID. This will make a MUCH more stable network. If you need layer 2 services over ...
by onnoossendrijver
Fri May 02, 2014 3:19 pm
Forum: Beginner Basics
Topic: Where do you masquerade you network?
Replies: 3
Views: 698

Re: Where do you masquerade you network?

Well, if you only have 1 public IP address you can only perform masquerading right after the modem.
by onnoossendrijver
Thu May 01, 2014 10:59 pm
Forum: General
Topic: [bug][CRS226] SFP module does not normally Linkup
Replies: 8
Views: 3110

Re: [bug][CRS226] SFP module does not normally Linkup

This is what the datasheet tells: First port supports 1.25G/10G modules, second port only 10G modules.
I assume that's not the problem here?
by onnoossendrijver
Tue Apr 29, 2014 11:29 am
Forum: RouterBOARD hardware
Topic: packet loss with ethernet cable
Replies: 2
Views: 1041

Re: packet loss with ethernet cable

I assume that these (UDP!) packets are dropped because the CPU is on 100% utilization. Do a TCP test test instead, You will see lower speeds, but no drops. BTW: A speed test between these boards is useless. You are testing the CPU on both boards, instead of its throughput. If you want to do a good t...
by onnoossendrijver
Tue Apr 29, 2014 8:36 am
Forum: RouterBOARD hardware
Topic: RB912UAG 5HPnD not stable
Replies: 8
Views: 1551

Re: RB912UAG 5HPnD not stable

I ordered a 12V, 2A power supply from a Chinese seller on ebay (5 euro incl. shipping). I will try that one (I will put it on a scope, and measure the harmonics with a spectrum analyzer) to see, if it gives "problems" for the RF part. Please do not buy cheap power supplies on ebay! In general they ...
by onnoossendrijver
Sat Apr 26, 2014 6:55 pm
Forum: General
Topic: PCC with VRRP? Wise to do so?
Replies: 5
Views: 1175

Re: PCC with VRRP? Wise to do so?

That can only work if the VRRP implementation supports load-sharing. I don't know if Mikrotiks implementation supports that.
by onnoossendrijver
Sat Apr 26, 2014 6:31 pm
Forum: General
Topic: VRRP Pair
Replies: 1
Views: 434

Re: VRRP Pair

Why not? Every device that can do VRRP should be able to work together.
by onnoossendrijver
Thu Apr 24, 2014 1:32 pm
Forum: Wireless Networking
Topic: Full Duplex Wireless Links, Multi-Radio, Wireless network
Replies: 8
Views: 1697

Re: Full Duplex Wireless Links, Multi-Radio, Wireless networ

What about:
Creat also a connection from 1 to 2 and from 2 to 3.
Make the whole network routed and run VPLS on top of that.
If the AP link dies the connection would be rerouted via station 2.
by onnoossendrijver
Sun Apr 20, 2014 12:22 pm
Forum: General
Topic: CRS question about tagged/untagged and SVI
Replies: 5
Views: 1357

Re: CRS question about tagged/untagged and SVI

Ah sh*t... I read CCR, instead of CRS. I can't help you with CRS. Sorry.
by onnoossendrijver
Fri Apr 18, 2014 11:56 am
Forum: General
Topic: CRS question about tagged/untagged and SVI
Replies: 5
Views: 1357

Re: CRS question about tagged/untagged and SVI

Create a VLAN interface per VLAN on every physical interface. for example: ether1_vlan30 ether1_vlan40 ether2_vlan30 ether2_vlan40 Create a bridge for every VLAN and put the VLAN interfaces for that VLAN in that bridge: bridge_vlan30 -ether1_vlan30 -ether2_vlan30 bridge_vlan40 -ether1_vlan40 -ether2...
by onnoossendrijver
Thu Apr 17, 2014 3:28 pm
Forum: Forwarding Protocols
Topic: RFC 5185 OSPF Multi-Area Adjacency
Replies: 4
Views: 1839

Re: RFC 5185 OSPF Multi-Area Adjacency

I'm not sure but maybe you can abuse OSPF Virtual Link to achieve the same?
by onnoossendrijver
Wed Apr 16, 2014 12:16 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

Sorry didn't understand what you meant. You want 3 power sources? Yes, it's possible, but you need to use less than 24V for PoE. 22V or something like that. PoE and PSU can't have equal voltage, and PSU gives 24V That's great! I'd like to use 48v PoE and 1 or 2 IEC connections. Will PoE then be the...
by onnoossendrijver
Wed Apr 16, 2014 11:54 am
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

It's in the brochure:
It says nothing about PoE as backup.
by onnoossendrijver
Wed Apr 16, 2014 10:32 am
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

2x IEC C14 power jacks AC 110/220V, PoE
in 12-58V, 802.3af/at compliant
Cool! What about redundancy? Can you connect both IEC and PoE and have them failover?

I saw some prices online: 350-400 euro.
by onnoossendrijver
Tue Apr 15, 2014 7:20 pm
Forum: Forwarding Protocols
Topic: Proper IPv6 support
Replies: 7
Views: 2155

Re: Proper IPv6 support

Are you guys for real? IPv4 reserves are almost depleted worldwide and we still don't have proper IPv6 dynamic routing in RouterOS? OSPFv3 does not work when using VLAN on the same interface (apparently somebody forgot link-local addresses are, well, link local...) RIPng is, well, RIP... And even i...
by onnoossendrijver
Tue Apr 08, 2014 11:31 am
Forum: General
Topic: SSH client is not working
Replies: 12
Views: 3108

Re: SSH client is not working

What's not working?
On 6.11:
 > system ssh address=10.10.10.10 user=blabla
password:
Welcome to Ubuntu 12.04.4 LTS (GNU/Linux 3.2.0-60-generic x86_64)
by onnoossendrijver
Tue Apr 08, 2014 10:08 am
Forum: General
Topic: Heartbleed vulnerability OpenSSL [RouterOS IS NOT affected]
Replies: 9
Views: 8176

Re: Heartbleed vulnerability in OpenSSL - RouterOS affected?

Quote from some time ago:
We don't use GnuTLS. We use OpenSSL which has no such problems

http://demo2.mt.lv/help/license.html
Seems like it's vulnerable.
by onnoossendrijver
Mon Apr 07, 2014 1:17 pm
Forum: Beginner Basics
Topic: It's good to block ping........
Replies: 14
Views: 18603

Re: It's good to block ping........

Most ping/ICMP traffic is way too useful (for troubleshooting ) to block in my opinion.
Blocking it is definitely not a security measure.
by onnoossendrijver
Sat Apr 05, 2014 12:08 am
Forum: General
Topic: Multicore CCR
Replies: 3
Views: 772

Re: Multicore CCR

Well.. the CCR has 16 or 32 relatively slow cores. The Xeon probably has 4 fast cores. Some things will be faster on Xeon and some things will be faster on CCR. The Xeon probably wins in general. But taking into account that the Xeon needs expensive NICs and is much larger the CCR is better value fo...
by onnoossendrijver
Fri Apr 04, 2014 9:34 pm
Forum: General
Topic: Multicore CCR
Replies: 3
Views: 772

Re: Multicore CCR

Multicore is very fany..... When i run big script ...script run on on core (90%) after while another one core (90%) and another one..... Sorry this is not multicore router !!!!! :) That is to be expected. You need to explicitly program a script to be multithreaded to be able to run effectively on m...
by onnoossendrijver
Mon Mar 31, 2014 10:48 am
Forum: Wireless Networking
Topic: BaseBox5 PtP 25km wireless link
Replies: 2
Views: 1322

Re: BaseBox5 PtP 25km wireless link

How did you configure the power and regulatory domain settings? Did you enable both antenna chains?
by onnoossendrijver
Mon Mar 31, 2014 10:45 am
Forum: RouterBOARD hardware
Topic: RB953GS-5HnT
Replies: 16
Views: 6692

Re: RB953GS-5HnT

I'd like to get an update on the release date for this one. I need a RB953GS-5HnT to replace a RB600A :)
by onnoossendrijver
Thu Mar 20, 2014 10:52 pm
Forum: General
Topic: MUM Europe 2014 - Italy, Venice, February 20-21
Replies: 146
Views: 58899

Re: MUM Europe 2014 - Italy, Venice, February 20-21

I see mini-pci-express!! CCR=Fastest accesspoint available! :-P
by onnoossendrijver
Tue Mar 11, 2014 1:19 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

Update.. I was wrong.. See comment from normis below.
by onnoossendrijver
Fri Mar 07, 2014 2:22 pm
Forum: Wireless Networking
Topic: Slowdown over the network
Replies: 3
Views: 840

Re: Slowdown over the network

What is the CPU load on CPE during BTest?
It is probably maxing out... BTest is quite heavy for a RB43x.
by onnoossendrijver
Thu Mar 06, 2014 1:40 pm
Forum: General
Topic: CC1036 Performance issues
Replies: 10
Views: 2682

Re: CC1036 Performance issues

Remember that with high-bandwidth links the latency becomes very important. Is latency higher with CCR instead of Dell?
by onnoossendrijver
Mon Mar 03, 2014 4:13 pm
Forum: General
Topic: RS232 signal across a wireless link
Replies: 9
Views: 1401

Re: RS232 signal across a wireless link

Ah... Ok.. I misunderstood.
I believe this feature was recently added to a beta release and removed one release later because it's was not stable.
So I don't think it's possible unfortunately.
by onnoossendrijver
Mon Mar 03, 2014 11:03 am
Forum: General
Topic: RS232 signal across a wireless link
Replies: 9
Views: 1401

Re: RS232 signal across a wireless link

If it RS232 there is no difference.
RS232 is standardized.
by onnoossendrijver
Sun Mar 02, 2014 1:50 am
Forum: General
Topic: CC1036 Performance issues
Replies: 10
Views: 2682

Re: CC1036 Performance issues

A single thread will never be faster than the speed of a single link.
by onnoossendrijver
Sun Mar 02, 2014 1:49 am
Forum: RouterBOARD hardware
Topic: CCR1036-8G-2S+ issue bonding SFP+ ports
Replies: 10
Views: 3566

Re: CCR1036-8G-2S+ issue bonding SFP+ ports

Have you done any performance testing... I haven't been able to push a single stream of TCP faster that 1Gb...
That is to be expected. If you want more make sure you do more simultaneous sessions, every session with a different source and/or destination IP.
by onnoossendrijver
Thu Feb 27, 2014 12:09 pm
Forum: General
Topic: Recommended Hardware for Office Dual Band Access Points?
Replies: 3
Views: 1539

Re: Recommended Hardware for Office Dual Band Access Points?

RB951 can not do dual-band.
I would recommend the RB912UAG-2HPnD or BaseBox2 and add a R11e-5HnD card for 5GHz.
Later you can change this card for an AC card.
by onnoossendrijver
Wed Feb 26, 2014 4:14 pm
Forum: General
Topic: MUM Europe 2014 - Italy, Venice, February 20-21
Replies: 146
Views: 58899

Re: MUM Europe 2014 - Italy, Venice, February 20-21

Well, that was quick :P
by onnoossendrijver
Wed Feb 26, 2014 9:46 am
Forum: General
Topic: CCR 1036. High load loses packets. Big problem.
Replies: 25
Views: 8847

Re: CCR 1036. High load loses packets. Big problem.

btest is unreliable. Get two good PC's and test THROUGH the CCR using the tool called iperf.
by onnoossendrijver
Tue Feb 25, 2014 8:52 am
Forum: General
Topic: Help with 802.3ad Bonding (only 1 link being used)
Replies: 1
Views: 1364

Re: Help with 802.3ad Bonding (only 1 link being used)

Choose a different 'Transmi hash policy'. You probably have the Layer 2 hash policy selected. It balances by mac address. Because the source and destination mac addresses are the same for both sessions the mechanism chooses the same link for both sessions. You should balance by IP and/or higher laye...
by onnoossendrijver
Sun Feb 23, 2014 11:35 pm
Forum: General
Topic: mpls/vpls minimum hardware reccomendation
Replies: 3
Views: 809

Re: mpls/vpls minimum hardware reccomendation

What about the new RB850Gx2?
I don't know what MTU it supports, but since it is very new I hope for 1600+ bytes.
by onnoossendrijver
Sun Feb 23, 2014 5:00 pm
Forum: Wireless Networking
Topic: Connect RB951 to WPA2-Enterprise as Client
Replies: 1
Views: 734

Re: Connect RB951 to WPA2-Enterprise as Client

I like to know this as well :)
by onnoossendrijver
Thu Feb 20, 2014 8:48 pm
Forum: Forwarding Protocols
Topic: OSPF Router ID
Replies: 6
Views: 2587

Re: OSPF Router ID

See http://en.wikipedia.org/wiki/Open_Shortest_Path_First The router ID is a unique number that identifies the router. Although it can look like an IP address it is NOT. It is just a number. The router ID is used in identifying the Designated Router. Snippet from Wikipedia: DR's exist for the purpos...
by onnoossendrijver
Wed Feb 19, 2014 10:08 pm
Forum: Beginner Basics
Topic: log: excessive or late collision, link duplex mismatch ????
Replies: 24
Views: 46453

Re: log: excessive or late collision, link duplex mismatch

In my experience (mostly with Cisco devices) late collissions are the result of bad cables.
by onnoossendrijver
Sat Feb 15, 2014 3:03 am
Forum: General
Topic: Glassfiber speed
Replies: 2
Views: 595

Re: Glassfiber speed

1gbit/s is the maximum of the rb2011. A different cable will not help.
by onnoossendrijver
Wed Feb 12, 2014 8:48 pm
Forum: Beginner Basics
Topic: Clarification needed: 1 megabit = ? kilobits
Replies: 4
Views: 1538

Re: Clarification needed: 1 megabit = ? kilobits

Well.. Not everyone agrees with that :)
Drive manufacturers also use '1K' for '1000'. Linux (and probably other OSs also) show size in 1000 = 1K or 1024 = 1Ki. See http://en.wikipedia.org/wiki/Binary_prefix for more information.
by onnoossendrijver
Tue Feb 11, 2014 10:32 pm
Forum: General
Topic: Slow TCP Speeds
Replies: 3
Views: 1001

Re: Slow TCP Speeds

That would hold water if the CPU was spiking anywhere near the maximum but it isn't.
Maybe.. still, try iperf. Routers are always better in handling traffic going through than traffic to/from the router itself.
And of course, that is what you want to know the performance of.
by onnoossendrijver
Tue Feb 11, 2014 8:20 pm
Forum: General
Topic: Slow TCP Speeds
Replies: 3
Views: 1001

Re: Slow TCP Speeds

Don't use btest on the router itself. It is cr*p. The CPU in most routers is not suitable for all the tasks required to test TCP speeds. If you need to do a decent test just get 2 ordinary PC's with a modern OS like Windows 7 or better, Linux with 3.x kernel or Mac OS X 10.9 and do a bandwith test u...
by onnoossendrijver
Tue Feb 11, 2014 8:16 pm
Forum: Beginner Basics
Topic: Clarification needed: 1 megabit = ? kilobits
Replies: 4
Views: 1538

Re: Clarification needed: 1 megabit = ? kilobits

1000 actually :)

In datacommunication it is always the same as in the real world ;)
1K = 1000
1M = 1000000 = 1000K
1G = 1000000000 = 1000M = .....
by onnoossendrijver
Mon Feb 10, 2014 9:19 am
Forum: General
Topic: 6.9 released!
Replies: 223
Views: 79289

Re: 6.9 released!

It is really a shame, but do not overestimate the big ones like Juniper and Cisco.
Most of the releases from Juniper from last year have one or more serious bugs (MX, T and SRX routers).
Cisco about the same..

BTW: I personally have no problems with 6.9
by onnoossendrijver
Fri Feb 07, 2014 10:22 pm
Forum: General
Topic: Vodafone Sure Signal Booster
Replies: 7
Views: 1980

Re: Vodafone Sure Signal Booster

Every Mikrotik can do 1500 byte MTU. Does your ISP use PPPoE or any other 'low MTU' protocol?
by onnoossendrijver
Tue Feb 04, 2014 11:51 am
Forum: General
Topic: CCR1036 PPPoE 1000+ clients 400+ Mbit/s degraded perfomance
Replies: 10
Views: 4102

Re: CCR1036 PPPoE 1000+ clients 400+ Mbit/s degraded perfoma

Hi, we are using a CCR1036 RouterOS 6.6 as a PPPoE concentrator with simple queues for shaping. In the evening the number of online PPPoE connections reaches 1500. I started to notice that in the evening when the number of online PPPoE sessions exceeds 1000, clients' throughput starts to degrade. T...
by onnoossendrijver
Tue Feb 04, 2014 9:22 am
Forum: General
Topic: Please recommend storage media for RouterOS for x86
Replies: 2
Views: 609

Re: Please recommend storage media for RouterOS for x86

Are you sure the freeze was because of the USB drive?
I use a USB stick in my home router (x86). It is rock stable for months.
The stick is a Kingston DT SE9.
by onnoossendrijver
Sat Feb 01, 2014 11:49 pm
Forum: General
Topic: 6.9 released!
Replies: 223
Views: 79289

Re: 6.9 released!

Any successful upgrades of the x86. I guess ROS 6.9 has issues understanding the hard disk.
I have no issues with my x86 booting 6.9 from USB stick.
by onnoossendrijver
Fri Jan 31, 2014 12:13 pm
Forum: RouterBOARD hardware
Topic: RB14e(u)
Replies: 2
Views: 1046

Re: RB14e(u)

Thank you!

The reason I ask about the PLX chip is because of the power needed.. I want/need it to be very energy efficient.

Update: I found the chip: PEX 8606, 1.3 watt TDP.
by onnoossendrijver
Fri Jan 31, 2014 11:17 am
Forum: RouterBOARD hardware
Topic: RB14e(u)
Replies: 2
Views: 1046

RB14e(u)

I have two questons about these cards..
1. What PLX chip is exactly used?
2. How many SMA holes are there in the bracket?
by onnoossendrijver
Wed Jan 29, 2014 6:20 pm
Forum: General
Topic: Connecting Mikrotik router to a QinQ provider network
Replies: 2
Views: 1061

Re: Connecting Mikrotik router to a QinQ provider network

I assume both ends of the ISP link are configured the same?
If so.. switchport mode dot1q-tunnel allows you to transport whatever vlan configuration you want.. No tag, or tagged, of even both. The VLAN tag is preserved when crossing the ISP link.
by onnoossendrijver
Mon Jan 27, 2014 2:23 pm
Forum: Wireless Networking
Topic: wired AND nv2 802.11n multi hop throughput issue
Replies: 29
Views: 6509

Re: wired AND nv2 802.11n multi hop throughput issue

gringoZ is probably right. Low throughput is often the result of high latency.
Lowering the latency of the link or increasing the TCP window size on the endpoints will probably fix your problems.
What is your speed when testing UDP?
by onnoossendrijver
Thu Jan 23, 2014 1:14 pm
Forum: Wireless Networking
Topic: wired AND nv2 802.11n multi hop throughput issue
Replies: 29
Views: 6509

Re: wired AND nv2 802.11n multi hop throughput issue

How do you test this link? Using btest or iperf? Remember that these mikrotik devices don't have a very fast CPU and are not able to saturate most links when testing TCP performance using btest.
by onnoossendrijver
Mon Jan 20, 2014 9:39 pm
Forum: Beginner Basics
Topic: 2 Different Network how can i ping from 1 to other
Replies: 2
Views: 605

Re: 2 Different Network how can i ping from 1 to other

Make sure that the machines in the network have the correct gateway IP configured (The IP address on the bridge that machine is connected to).
by onnoossendrijver
Fri Jan 17, 2014 12:27 pm
Forum: General
Topic: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payload)
Replies: 18
Views: 5201

Re: Support for PPPoE MTU > 1492 (via RFC4638 PPP-Max-Payloa

I would really like RFC4638 support too!
by onnoossendrijver
Wed Jan 15, 2014 8:03 pm
Forum: Beginner Basics
Topic: RB951G-2HnD relatively low speeds on lan/wlan
Replies: 5
Views: 2483

Re: RB951G-2HnD relatively low speeds on lan/wlan

Hi, Just got a new RB951G-2HnD. After unboxing and connecting I've made a firmware update to 3.10 and RouterOS to 6.7. After that the only changes I've made to the default configuration is a new password for wlan/admin account, UPnP on and one VNC port forward for one machine. When this was done I'...
by onnoossendrijver
Sat Jan 11, 2014 11:04 am
Forum: General
Topic: CRS125-24G-1S-RM vs RB2011UiAS-RM (perfomance)
Replies: 3
Views: 1593

Re: CRS125-24G-1S-RM vs RB2011UiAS-RM (perfomance)

CRS will perform exactly the same. If you need more power go for RB800, 1100AHx2 or CCR.
by onnoossendrijver
Tue Dec 31, 2013 12:51 am
Forum: General
Topic: IP TCP Window-Size
Replies: 1
Views: 794

Re: IP TCP Window-Size

No, that is something you need to configure on the end-devices (PC's).
by onnoossendrijver
Fri Dec 27, 2013 4:23 pm
Forum: RouterBOARD hardware
Topic: Gigabit NAT, home-use, router recommendation
Replies: 21
Views: 16692

Re: Gigabit NAT, home-use, router recommendation

It probably does. All those routers do NAT in hardware. I tested a Dlink DIR-868L a few months ago.. 1Gbit/s NAT was no problem.
by onnoossendrijver
Tue Dec 24, 2013 12:35 pm
Forum: Wireless Networking
Topic: mpcie 802.11n cards for Routerboard
Replies: 17
Views: 6357

Re: mpcie 802.11n cards for Routerboard

Weird, I have absolutely no problems with the detection of these cards.
by onnoossendrijver
Wed Dec 11, 2013 11:48 am
Forum: Beginner Basics
Topic: MT RouterBoard 750GL Problem
Replies: 2
Views: 729

Re: MT RouterBoard 750GL Problem

Is the WAN interface Up?
Are you sure you need to configure the interface as 10M/full duplex? That is very uncommon.
by onnoossendrijver
Tue Dec 10, 2013 11:53 am
Forum: General
Topic: ROS6.6 goes to 100% CPU doing 1 stream TCP test at 1Kbps ?!?
Replies: 5
Views: 1476

Re: ROS6.6 goes to 100% CPU doing 1 stream TCP test at 1Kbps

Do not run a bandwidth test on a non-x86 routerboard. You should use 2 PC's connected on to the RB750 and run an iperf test between those, via the RB750.
by onnoossendrijver
Sun Dec 08, 2013 11:36 am
Forum: RouterBOARD hardware
Topic: Gigabit NAT, home-use, router recommendation
Replies: 21
Views: 16692

Re: Gigabit NAT, home-use, router recommendation

Until I read "PPPoE" I wanted to advise on using an Ubiquiti EdgeRouter Lite. But the EdgeRouter Lite does not have PPPoE hardware accelerated. 1 Gbit/s of PPPoE is a LOT.. What about buying a modern Intel Atom / Pentium J based board and install the x86 version of RouterOS on it? Maybe the CCR hand...
by onnoossendrijver
Fri Nov 22, 2013 11:20 pm
Forum: General
Topic: Bridging w/failover?
Replies: 2
Views: 739

Re: Bridging w/failover?

OSPF :)
by onnoossendrijver
Sun Nov 17, 2013 11:01 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1013890

Re: CLOUD CORE ROUTER

You can, with the bridge function in the software. This should be (near) wire-speed on the CCR.
by onnoossendrijver
Sun Nov 17, 2013 3:29 am
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1013890

Re: CLOUD CORE ROUTER

There are no switch chips in the CCR.
by onnoossendrijver
Sun Nov 10, 2013 1:06 pm
Forum: General
Topic: ssd for mikrotik routeros
Replies: 6
Views: 2285

Re: ssd for mikrotik routeros

You don't write that much every day. Ofcourse you should not do lots of logging to the SSD.
Personally I use a USB stick in one machine. Not much logging to disk, only to syslog server. It should survive for many years :)
by onnoossendrijver
Sun Nov 10, 2013 1:04 pm
Forum: General
Topic: RouterOS v6.6 released
Replies: 164
Views: 72424

Re: RouterOS v6.6 released

My atom upgraded fine.. Intel DN2800MT board.
by onnoossendrijver
Sat Nov 09, 2013 11:36 am
Forum: Forwarding Protocols
Topic: Lots of unreplied dns connection
Replies: 12
Views: 6375

Re: Lots of unreplied dns connection

DNS amplification attack... Disable access to your DNS ports from the outside..
by onnoossendrijver
Sat Nov 09, 2013 12:57 am
Forum: General
Topic: ssd for mikrotik routeros
Replies: 6
Views: 2285

Re: ssd for mikrotik routeros

The cheapest SSD you can find is good enough.
It is only used for storing the operating system, which is only 20 MB in size.
You don't get any benefits from using a bigger or faster SSD.
by onnoossendrijver
Fri Nov 08, 2013 4:16 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

Will there be a CRS desktop-sized case (or smaller) for the CCR1009?
by onnoossendrijver
Thu Nov 07, 2013 11:25 am
Forum: General
Topic: MTU FRAME SIZE
Replies: 4
Views: 1247

Re: MTU FRAME SIZE

9600 bytes is very large.. There are not many devices that are able to do that. Not even Cisco/Juniper and other manufacturers.
by onnoossendrijver
Thu Nov 07, 2013 8:52 am
Forum: General
Topic: 6.5 released!
Replies: 185
Views: 69162

Re: 6.5 released!

My guess: They are working on a Routerboard based on a chip with hardware acceleration like the Cavium Octeon. That would me really nice :) I hope they do a better job than Ubiquiti with offloading tasks to the hardware.
by onnoossendrijver
Tue Nov 05, 2013 1:34 pm
Forum: General
Topic: Switching with RouterOS / CRS Questions
Replies: 81
Views: 43389

Re: Switching with RouterOS / CRS Questions

If you want to do heavy routing (more than several-hundreds of mbit/s) it is not enough. For management tasks and light routing tasks it is more than enough.
If you want wirespeed layer 3 switching/routing you should consider a CCR.
by onnoossendrijver
Wed Oct 30, 2013 8:33 am
Forum: General
Topic: What happens to mikrotik with routeros?
Replies: 12
Views: 2476

Re: What happens to mikrotik with routeros?

Wise words! :)
by onnoossendrijver
Fri Oct 25, 2013 4:22 pm
Forum: RouterBOARD hardware
Topic: Power consumption of rb44ge iddle 4-5W
Replies: 8
Views: 1434

Re: Power consumption of rb44ge iddle 4-5W

..you also need a bridge chip to connect 4 nics to 1 pci-e connector.
by onnoossendrijver
Fri Oct 25, 2013 2:37 pm
Forum: RouterBOARD hardware
Topic: Power consumption of rb44ge iddle 4-5W
Replies: 8
Views: 1434

Re: Power consumption of rb44ge iddle 4-5W

4 NIC chips ( +/- 0.5 to 1 watt each) a bridge chip and supporting electronics.. 4-5 watt seems OK.
by onnoossendrijver
Tue Oct 22, 2013 8:50 pm
Forum: Wireless Networking
Topic: mini PCI-E Intel AC 7260 HMVG
Replies: 5
Views: 2717

Re: mini PCI-E Intel AC 7260 HMVG

Mikrotik has never supported Intel Wifi chips. I have this Intel card. It is not much faster than my current NV2 link, but that could be because of the bad drivers. Mikrotik NV2 connection: 200 mbit/s TCP Intel 802.11ac to Dlink DIR-868L: 250 mbit/s TCP Of course this not a scientifically correct te...
by onnoossendrijver
Tue Oct 22, 2013 5:48 pm
Forum: Beginner Basics
Topic: Low performance on rb2011uas-2hnd
Replies: 20
Views: 2627

Re: Low performance on rb2011uas-2hnd

Well.. using the bridge function means that all the traffic flowing trough that bridge must pass the CPU. This is a lot of work for most embedded CPU's. 35MB/s is what can be expected of the CPU in the RB2011. If you want better performance you need to redesign your network in a way that this traffi...
by onnoossendrijver
Fri Oct 18, 2013 4:22 pm
Forum: Beginner Basics
Topic: Can't use Personal Computer as router after install RouterOS
Replies: 8
Views: 2108

Re: Can't use Personal Computer as router after install Rout

> system routerboard print Output I get: routerboard: no. I see there is no routerboard configured with my "RouterOS installed system". Should I do something else? How can I overcome this problem? You see this becouse a PC is not a routerboard :) Do a /export compact to see if the configuration is ...
by onnoossendrijver
Mon Oct 07, 2013 2:06 pm
Forum: General
Topic: ccr 1000 full no autoneg
Replies: 2
Views: 601

Re: ccr 1000 full no autoneg

Autonegotiation is required for gigabit ethernet. That's why there is no autonegotiation option.
by onnoossendrijver
Sat Oct 05, 2013 12:35 pm
Forum: SwOS
Topic: Port trunking help
Replies: 4
Views: 3832

Re: Port trunking help

The current RB switches can only output tagged OR untagged traffic.
Your vlan 1 is tagged, while the AP probably expects vlan 1 to be untagged.
by onnoossendrijver
Wed Oct 02, 2013 10:12 pm
Forum: Wireless Networking
Topic: mpcie 802.11n cards for Routerboard
Replies: 17
Views: 6357

Re: mpcie 802.11n cards for Routerboard

I would recommend a AR9380 card. You can find them for about 12 euros on Ebay. Just look for AR9380.
Most cards are 'Apple' cards, but they are just reference design Atheros AR5BXB112 cards.
by onnoossendrijver
Wed Oct 02, 2013 10:06 pm
Forum: General
Topic: Got IPv6, what to do with it?
Replies: 2
Views: 510

Re: Got IPv6, what to do with it?

Just keep using internet like you normally do :)
That fe80 address is a 'link local' address en is not routeable on the internet. I think you need to do some more steps to get full IPv6 internet access, like enableing DHCPv6-PD.. Ask your provider about it.
by onnoossendrijver
Wed Oct 02, 2013 2:04 pm
Forum: RouterBOARD hardware
Topic: long distances SFP module
Replies: 5
Views: 1600

Re: long distances SFP module

Look for 1000Base-EX or 1000Base-ZX SFP's.
by onnoossendrijver
Wed Oct 02, 2013 11:19 am
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24270

Re: CCR 1009

If Mikrotik adds 6RD support I will buy one for at home without any hesitation :)
by onnoossendrijver
Tue Oct 01, 2013 11:53 am
Forum: Beginner Basics
Topic: CloudCore Router and switching
Replies: 3
Views: 992

Re: CloudCore Router and switching

You have to create a bridge and add the ports you want to be in a 'switch' to that bridge.
by onnoossendrijver
Mon Sep 30, 2013 11:35 pm
Forum: Wireless Networking
Topic: Bandwith test and real throughput to the Internet
Replies: 6
Views: 1927

Re: Bandwith test and real throughput to the Internet

@onnoossendrijver: The window size is calculated for the latency of the link and nv2 add latency to the link. How many connections are you using in iperf? You are right about the window size and how that's related to the latency. With only 1 TCP session in iperf I get speeds of 180 to 210 mbit/s (2...
by onnoossendrijver
Mon Sep 30, 2013 10:51 pm
Forum: Wireless Networking
Topic: Bandwith test and real throughput to the Internet
Replies: 6
Views: 1927

Re: Bandwith test and real throughput to the Internet

I don't think NV2 has anything to do with window size, and only little with latency.
My NV2 link performs great, also with TCP test (done using iperf).
by onnoossendrijver
Thu Sep 26, 2013 12:39 am
Forum: Wireless Networking
Topic: RB912UAG-5HPnD-OUT 13kms test
Replies: 7
Views: 3569

Re: RB912UAG-5HPnD-OUT 13kms test

You should test as follows: connect on both sides of the link a PC to the Routerboard and run an Iperf session between them. If you use btest on the Routerboard itself you are, in fact, testing its CPU and not the link. Doing a TCP bandwith test on the router itself is very demanding for most router...
by onnoossendrijver
Wed Sep 25, 2013 4:41 pm
Forum: General
Topic: v6.4 released
Replies: 170
Views: 60692

Re: v6.4 released

With a company policy in place that says all networking devices must at all times have the latest firmware/OS releases, and with RouterOS' supposedly stable releases causing all kinds of havoc, my job is on the line if a router should misbehave. Sorry to be rude, but that is a very stupid policy. W...
by onnoossendrijver
Tue Sep 24, 2013 12:12 am
Forum: RouterBOARD hardware
Topic: New products
Replies: 5
Views: 1545

Re: New products

I'd like to replace my Juniper SRX210 at home with the CCR1009, but please implement 6RD support :)

Also, will the RB953GS-5HnT be available in 2.4GHz version and have 802.3af PoE support?
by onnoossendrijver
Tue Sep 24, 2013 12:04 am
Forum: Forwarding Protocols
Topic: BGP Full Routes - CCR1036-12G-4S - CPU Question
Replies: 4
Views: 3056

Re: BGP Full Routes - CCR1036-12G-4S - CPU Question

I don't have experience with the CCR, but this is probably due to the BGP process. Full-table BGP is pretty heavy for most routers, even the large Juniper routers I work with. There is no real harm in this, routing just continues. Only the routing updates can take some time for being installed in th...
  • 1
  • 2