MikroTik

kellogs

Hi Mrz,

Is this correct?

chain=in prefix=8.8.8.0/24 prefix-length=24 invert-match=no action=passthrough set-bgp-weight=100 set-bgp-prepend-path=""

I would apply this to the BGP1?

Thanks!

kellogs

I have 2 BGP providers. BGP1 and BGP2

I want my clients to go out to 8.8.8.0/24 via BGP1

How do i set it in BGP?

Thanks!

kellogs

Hello

Did you enable firewall on your winbox service on your BGP Mikrotik router?

or you just set the known address?

From my understanding if we enabled the ip firewall filter, all the ipv4 fast path would not be utilised?

kellogs

I have a bonding1 interface which connected to a switch port. The switch port is set as trunk and tagged with vlan 400 and 1688 I have server1 connected to eth1 and server2 connected to eth2 on the mikrotik server1 IP belongs to vlan 1688 and server2 IP belong to vlan 400 (the server i can set tagge...

kellogs

issue resolved.

The problem was i did a backup and restore to another unit.

I was not aware that backup and restore would copied all the previous unit mac address as well.

All is good now

kellogs

I have a simple setup for testing 2 x SFP+ interface on CCR setup as bonding 802.3ad and hash mode layer 2. Setup lacp on my switch and now my switch is complaining Mac address flapping Mac Flapping detected, VlandID = 1, Original-Port = 10GE1/0/1 (connected to SFP+1 on CCR), Flapping port 1 = 10GE2...

kellogs

Dear All, I am in dilemma at the moment ... we need 4x10G. 2x10 bonding for BGP peering traffic and 2x10G for internal server facing traffic ... The only product that is available is 1072 which has more than 2 10G SFP+ port but that is USD 3K device ... too expensive ... Otherwise I am thiking to us...

kellogs

that is USD 3K device ... too expensive ...

I am looking for cheaper one around 1k++ USD and just 4 x SFP+ is enough ...

Otherwise I am thiking to use 2x10G setup bonding and create 2 vlans 1 for BGP facing and 1 for Server facing

What do you think?

kellogs

Hello

May i know if there is any plan to release ccr which has 4 sfp+ ports?

kellogs

Hi Guys,

I am using srcnat masquerade and it works fine.

Is there anyway I could configure if the traffic is UDP and port 514, do not apply the srcnat masquerade?

Thanks!

kellogs

Upgraded to this version and my bgp stop passing traffic!

Had to revert back

kellogs

Actually I do not need source nat ... just set proxy-arp on the LAN facing interface would fixed this issue

kellogs

I have a remote mikrotik router 10.10.10.21 connected via L2TP to office mikrotik router 10.10.10.1 I would like to masquerade the IP address 10.10.10.21 on the office mikrotik router so it can access hosts behind office mikrotik router. I have setup a rule such as this chain=srcnat action=masquerad...

kellogs

According to http://wiki.mikrotik.com/wiki/Manual:Fast_Path

one of the rule it said

1. firewal rules are not configured;

kellogs

Dear Member,

How would you secure your mikrotik services such as winbox without using built in firewall so that fastpath can kick in?

This is a BGP router and you want the best performance ever.

Thanks!

kellogs

Dear Members,

I am wondering how do you secure your Mikrotik to achieve fastpath on all traffics?

I have disabled all the ip services except winbox and did you restrict the access to it via available from field?

Syn Cookies enabled as well.

Is there anything need to watch out for?

kellogs

SOLSept19-core-network.jpg Dear Mikrotik Experts, I am in the process of adding another EBGP routers with 2 upstream providers and would like to establish IBGP to the existing EBGP router via vlan 101 on this diagram. Is it better for me to enable client-to-client-reflection on both EBGP router? Be...

kellogs

I have 2 EBGP router Each EBGP router has 1 upstream which we would receive full routing table. Both EBGP router are connected using IBGP and with client to client reflection enabled on both EBGP instances Beneath these two EBGP routers have 5 Distribution routers R1 R2 R3 R4 R5 Each Router is conne...

kellogs

In OSPF Networks setting, should i specify each of the downstream subnet such as /29 or i could use /24?

Anyone could share the best practise please?

kellogs

Hi guys, may i know which 10g sfp+ stackable switch are you using with your mikrotik?

kellogs

I am running ibgp between the 2 bgp routers so with full routes it is able to send to optmised path. We have multiple distribution router so with ospf to two bgp routers we would have redudancy on the default gateway. I noticed that it takes 45 seconds for the failed bgp default route withdraw from ...

kellogs

Dear Member, I have 2 BGP routers which both are receiving full routing tables from upstream. Below this 2 BGP routers, I have a distribution router which I am thinking to run OSPF to those 2 BGP routers. I am hoping those 2 BGP routers would inject default route to this distribution router via OSPF...

kellogs

Dear Member,

Anyone built 10G SFP+ Mikrotik on Supermicro server before?

If yes., May I know what is your hardware configuration like please?

Thanks!

kellogs

Dear Celtic, The links are fiber optic. I have two questions on the OSPF router on each area ... 1. do i need to config redistribute connected routes? on the main distribution OSPF router I have configured it Redistribute Default route always as type 1 and I can see 0.0.0.0/0 is being pushed to the ...

kellogs

Dear Ip Architect,

Thank you for your reply.

Please kindly refer to this diagram.

I am planning to add 2 OSPF router per area as listed on this diagram.

May i have your opinion please

OSPFv1.png

kellogs

Do you guys use OSPF with VRRP for router redundancy when the downstream router uses the OSPF router as default gateway and they dont participate in OSPF?

kellogs

Thank you for your reply.

My main objective is if the DR router has failed, BDR would take over as well ...

I guess that would do it

kellogs

Dear Members, Currently I have 1 upstream router and 1 downstream Mikrotik router. Upstream router connect to the ISP Downstream router connect to the customer. I am thinking to add another upstream and downstream router and use OSPF for either router or link redundancy Router Upstream 1 (DR) and Ro...

kellogs

Dear Member I have the following config on Cisco interface FastEthernet0/0 ip address 2.1.1.1 255.255.255.252 interface FastEthernet0/1 ip address 1.1.1.1 255.255.255.252 interface Vlan1 description -=LAN-1=- ip address 192.168.1.1 255.255.255.0 Interface 0/0 and 0/1 IPs are for BGP with 2 upstream ...

kellogs

Is the cisco ZX or similar supported on Mikrotik 2011?

kellogs

Dear member,

Is there any 60KM SFP which would works with http://routerboard.com/RB2011UiAS-RM ?

I noticed the longest distance for Mikrotik SFP is 20KM.

Thanks!

kellogs

Is there such product?

kellogs

Dear Rex,

Client as using different type of DNS servers thus we are not able to use the mentioned rule

kellogs

Dear Members,

I have 2 DNS Servers.

I would like to force all DNS request port 53 UDP/TCP to these 2 DNS Servers IP.

I could use the regular DS-NAT but it is only capable to forward to 1 IP address.

May I know what is the best way to do this?

kellogs

Is there anyway to insert a x-forwarded http header with client private source IP when using Mikrotik as a NAT device?

kellogs

karma donated

Do you have any example rules?

kellogs

Hi Members,

I have about 100Mbps bandwidth and has about 5 web servers.

I want to always allocate 10Mbps fixed for these 5 web servers and the rest of the 90Mbps can be used by other servers/office/internet

Any good example rules I could follow?

Thanks!

kellogs

I am willing to pay for thedude...

come on mikrotik ... do something about it!

kellogs

I am having the same issue. Did you manage to resolve this? Thanks! Hello, I have an curious problem with The Dude 4 beta 3 and Mikrotik 5.x (currently 5.4 and 5.5) and APC UPS. After about 7 days The Dude lost connection to SNMP of those devices. When I try to use SNMP Walk it ends by Time-Out. Whe...

kellogs

Dear Members, Recently one of our friend uses the dude and able to list out all our Mikrotik devices even though he does not know our SNMP community string. I am wondering if anyone has seen something similar before? May I know what is your approach so that all Mikrotik Services are out of bound for...

kellogs

Dear Tomaskir,

I really hope so. Initially i created those 3750 vlans as a child vlans on Mikrotik and that failed.

Going to test is 3 hours time!

Wish me luck

kellogs

Hi I have a similar situation as well cisco 3750 <--> eth2 mikrotikA eth1 <--> eth1 mikrotikB <--> eth2 cisco 3750 I have configured service tag vlan on eth1 for both MikrotikA and MikrotikB The can ping each other on the service tag IP address Next I create a bridge on both mikrotik and added eth2 ...

kellogs

Hi Guys I have a service tag vlan 20 and it has 4 sub vlans 100,200,300,400 (all these 4 vlan without service tag checked and configured to use vlan 20 as parent) vlan 20 with service tag parent is eth1 eth2 is where the cisco router would be connected and the cisco device is configured with vlan 10...

kellogs

Dear Ozelo,

I am having the exact same issue but I am using RB2011il

I am using service tag to carry innervlan as well.

I can ping up to 1496

May I ask what I need to do?

kellogs

Anyone has an experience where you issue /interface print and it hang on a remote telnet session? For example the following: [admin@DDD] /ip> /interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE MTU L2MTU MAX-L2MTU MAC-ADDRESS 0 R ether1-WAN ether 1508 1598 4074 D4:C...

kellogs

do you guys have packet loss issues on 6.12?

kellogs

Good Day Everyone We have the following setup customer switch (customer own vlans) -> (Mikrotik) Customer End - HP-Procurve <= vlan tag 201 => HP Procurve - Customer End (Mikrotik) <- customer switch (customer own vlans) We are transporting customer traffic from 1 location to another using a vlan ta...

kellogs

Dear Members, I have the following setup switchA -tagged vlan100, tagged vlan101- switchB customer1 (vlan100) customer 2 (vlan101) <- switch A (tagged vlan100, tagged vlan101) -a single RJ45- switch B (tagged vlan100, tagged vlan101) -> customer1 (vlan100) customer 2 (vlan101) customer1 would have i...

kellogs

help anyone?

kellogs

http://routerboard.com/distributors

None has it.

I have searched.

kellogs

Hi,

I am in Asia.

Where can i order this http://routerboard.com/CCR1009-8G-1S-1Splus ?

Thanks!

kellogs

i found a simple way

on master i added

/routing bgp peer enable 0
/routing bgp peer enable 1

on backup i added

/routing bgp peer disable 0
/routing bgp peer disable 1

It works beautifully

kellogs

Thank you for the reply

I have managed to set it all up but I am thinking to disable the BGP peers when the CCR is a backup VRRP member.

I am wondering if anyone has such script or could share with me how to disable bgp peers when a mikrotik is a backup VRRP member?

kellogs

Hi Member,

I am on routerboard.com and unable to find a SFP+ (10G) Mikrotik Rack Mount Switch

Anyone know such product exist?

kellogs

we are going to put 2 CCR into production with 6.11 code

primary use bonding, vlan, vrrp and bgpd

bad move?

kellogs

Hi Guys,

I have 2 interfaces bonded as bonding1 and I am planning to use this bonded interface on vlan300 and in vlan300 I would setup VRRP

So i am planning to select vrrp1 as the inteface in vlan300 and this vrrp1 points to bonding1

any comment on this setup?

kellogs

Dear jaykay2342 The reason why I want VRRP for front end is to have hardware redundancy IE 2 CCRs (Active - Standby) per eBGP peer. Since CCR/Mikrotik does not have Active Standby cluster config, I am looking of utilizing VRRP so if RouterA failed, RouterB could take over while I am fixing/replacing...

kellogs

Good Day, Today I got hold of 2 CCR routers and upgraded to version 6.11 I am planning to use VRRP to setup a "front end" interface for eBGP peering and "back end" interface for static routing. Has any successfully setup Mikrotik using VRRP for router redundancy? Please share you...

kellogs

multi core bgp
"show ip bgp route" command and process it faster than the current one

kellogs

any luck on this?

kellogs

Dear Member

We are running latest http://cactiez.cactiusers.org/ and wondering if anyone has Mikrotik template for Simple Queue graphing?

We are more than happy to make it as a paid job if you could help us with this.

Thanks Much!

kellogs

Hi Guys, I got this crazy idea. On a core network switch setup a port mirror for the main port where upstream is connected connect a mikrotik port to the mirrored switch port setup IBGP sessing between Mikrotik and core BGP routers If DDOS detected x number of packets per sec to a single IP on the c...

kellogs

Mikrotik support case [Ticket#2013051666000288] with suport file I have a 3G modem and recognized and works well in 5.x I have tried to use it on CCR1036 anbd under system resources -> USB i can see it recognize as Globetrotter HSUPA Modem Device 1:3 But I dont see the port under /port print Anyone ...

kellogs

Dear Member, I am looking at this article http://wiki.mikrotik.com/wiki/DDoS_Detection_and_Blocking I am wondering what is the best number for number of new connections per seconds? I have tweaked on my ends and it appears 250/sec is the most acceptable ... Based on your production experience, what ...

kellogs

Hi Dobby,

I have ordered 1 unit and waiting for it.

So your experience is good or bad?

Thanks!

kellogs

Dear Members, Could you kindly share with us the feedback or review of this product? I have just ordered 1 unit from roc-noc and if the tests is well ... we are going replace all our x86 mikrotik with this model of product! I am mainly looking forward to see 1. what you dont like about it 2. what yo...

kellogs

bugs or issues would not necessary appear when you are running/testing in a home/lab environment - perhaps you might just noticed some comestic bug. the real issues would appear when loads are putting to it meaning in production networks. anyway i am not interested to debate with you as this is just...

kellogs

CCR will come preinstalled with RouterOS v6, and is only compatible with RouterOS v6. The CCR could be available much sooner if you guys helped us test RouterOS v6 to give us more confidence, that the software is stable enough. We are doing what we can, to test ourselves, but to speed things up - d...

kellogs

even if it is USD2K or 3K is not a problem.

I guess the product must be not stable thus they are delaying from releasing ...

kellogs

could it be the product is not stable for production use cases thus it has not been released?

kellogs

Hi rodolfo,

Do you think if it is better for me to setup a filter in and out for the iBGP peer?

kellogs

Hi Rodolfo,

We are using x86 Mikrotik with 8 Cores CPU.

The CPU Load is very little during the peering.

Is it a known bug that it would caused such problem?

kellogs

Hi Cbrown, That works :) Thank you. Now i just need to figure out how to populate Router1 BGP route to Router2 so that when It is being forced to use Router2 as default gateway, it still can get Router 1 BGP route for local internet exchange traffic. I have tried to setup ibgp but that hang both mik...

kellogs

the routes from ISP3 is 8129 But I think routes from ISP1, ISP2, ISP4 and ISP5 would be exchanged on this link as well. Each ISP we are receiving full routing table about 420K prefixes. The channel which I am using to setup this iBGP is a dedicated interface. Each router has 2GB Memory and each of t...

kellogs

Router1: ISP1 ISP2 ISP3 (local internet exchange) Router2: ISP4 ISP5 I have established sesson between these two routers 1 and 2 so that Router 2 is able to learn the route from Router1 for ISP3 (local Internet change) but it crashed the Mikrotik where both units became unresponsive. To fix this pro...

kellogs

I have tried this before but the route is being ignore and traffic is still being forwarded on the original 0.0.0.0/0 route. we are running BGP two 2 peers (X and Y) I am trying to make sure traffic comes in X ... goes out via X as well and not Y. Right now traffic comes in via X and goes out via Y ...

kellogs

I would add like to add another default gateway for destination = 0.0.0.0/0 if the source IP equal 10.10.10.0/24

kellogs

Dear Members, How do i force Miktrotik to forward any traffic if the source IP = a /24 subnet to another gateway which is connected? my address list "subnet1" 10.10.10.0/24 my mangle rules chain=prerouting action=mark-connection new-connection-mark=subnet1 passthrough=yes dst-address-list=...

kellogs

I have a VPN which keep getting disconnected. Upon checking on Mikrotik, It has connection tracking enabled and the tcp-established-timeout is set to 1D Does it mean any established TCP connection would be tear down after 1D forcefully by Mikrotik? How do i prevent it from happening? Disable connect...

kellogs

Hi Ali, Thank you for the reply. Based on your diagram if the 3rd box which is connecting to the local network is down, we are going to have a sitedown since it is only single unit. I am also thinking about the redundancy for the L2/3 switch which would be used for inter connecting these devices as ...

kellogs

Good Day Everyone, I am planning to purchase 4 x86 boxes and each unit install Mikrotik on it. This is for BGP peering only I am wondering if this would work no of ASN = 1 no of Upstream = 4 No of prefix = 4 /24 Each of the x86 box would peer with 1 upstream and advertise the 4 /24 Would this work?

kellogs

I am not sure if that question was for me but I am planning to run Clustering on the Vyatta for this pair of router and if one fail, the other would take over the BGP session.

May I ask if Mikrotik has this clustering feature (Active-Standby)

Thanks!

kellogs

Why do you want to waste electricity and money with this x86 beast? RAID in a router? Impress your GF with something she can see not with stuff that is sitting in a server room. If the disk fail, I wont need to bring down the router to repair it. I need a router which can process as many PPS as pos...

kellogs

My configuration for the would to be Vyatta BGP router ... I am really hoping Cloud Router could appear now. Btw does Mikrotik Support HA such as Clustering? Intel ivy Bridge Xeon E3 1270v2, 4x 3.5Ghz cores, 8M L3 SuperTalent 8GB (2x 4GB) ECC unbuffered DDR3-1600, 2x open, 32GB Max 2x Hitachi Ultras...

kellogs

Hi Djarum,

Did you ever get reply on this?

kellogs

I am about to order 2 x big x86 box to load with Vyatta for BGP purpose.

I am wondering if i should wait for this cloud router or go ahead with the Vyatta??

kellogs

Hi Changeip,

Thank you for the tips.

Now We have peered through a private as such as

my AS --> private As --> ISP3AS

but our private AS and ISP3AS is being shown on bgp.he.net now ...

Did i do something wrong?

kellogs

Dear members, I am writing this post hoping some one could help me in this situation. I have 3 ISPs upstream. ISP1 ISP2 and ISP3 I would like to peer with this 3 ISPs and advertise all our prefixes to ISP3 but when users go to a website such http://bgp.he.net I would like our ASN is NOT showing that...

kellogs

Hi Ladies and Gentleman,

With the increasing of customer installation, we are facing with a headache on tracking on our mikrotik radio, routers and etc ...

May I know what inventory system do you use to keep track of your equipment?

TIA!!!!

kellogs

I have announced both /22 on both peers and also 4 /24 on both peers For incoming load sharing, each of the 2 /24 prefix has bgp prepend 4 so incoming is shared equally +- the problem is with outgoing connection which I think i need to do policy routing. I am looking for the right documentation/wiki...

kellogs

i have the same problem too 5.11

any help?

kellogs

Dear Members

I have 2 Peers each with same amount of transit

I have 4 /24 prefix

I would like to configure that for the 4 prefix outbound, it would be round robin on these 2 peers and if one of the peer is down, all 4 prefixes would switch to the survival peer.

Any help is appreciated

kellogs

hi changeip,

Thank you for the tips, It has been sorted out

kellogs

One of our /24 has been hijacked.

We have route object set with our AS as origin ... and we advertise to our upstream using /24

Anyone how to fix this please?

kellogs

I have 2 ISPs peering with. One of them needs to route to US before can access this 3rd network, the other ISP has direct peering. For some strange reason, our path has been chosen to use the one that needs to traverse to US. I would like and hoping to achieve BGP advertising routes for us based on ...

kellogs

Hi Fewi,

Is there anyway to automatically sending user to the best path without manually setting the attributes?

Thank you for the reply

kellogs

Hi Guys,

We are running v4.11 and multi homed with 2 providers.

currently when I did a traceroute from a 3rd network, I have noticed that BGP is not sending our the traffic to the best path.

Any tips to make sure traffic/routes is advertise to the best path for our user?

kellogs

Hi Skillful, It is very strange, I have an user which i set 1d as his pre paid time Now in IP/HotSpot/Active i still see him online with Session Time Left 2d 06:08:28 He has logged in more than 24 hours ... Do i need to sync Mikrotik to NTP to make sure the accounting works? (radius, user manager an...

kellogs

Hi

May i know what is the metric for User Manager Credit Time?

May i insert 1d or it must be presented in seconds?

kellogs

Good Day,

is it possible to view if the radio is connected to antenna a or b from winbox?

Thank you

kellogs

Good Day, I have followed Janis ip mangle example and rules and modify it to target port 80 only the goal is when LAN users downloaded/uploaded more than 2Mb his connection will be throttle. I am unsure if the rules work after my modification. If anyone got a chance, please kindly give some tips. Th...

kellogs

Normis,

That is a pretty neat tool!

I wont afraid of losing connectivity now!!!

kellogs

wow ... i did not know about safe mode untill now!

I cant find any documentation about it.

Do you have any link?

TIA!

kellogs

I just set it to 10 for the TX power and lost the link.

Our guy is going to the site at the moment.

kellogs

Hi Andrea,

Should i set to all rates fixed to 10?

Thank you

kellogs

Hi Andrea, Both are using identical antenas, wireless interface and routerboard 433 AH this info tx/rx : -45/-37 dBm is taken on the station wds so -45 is the signal strength on the station wds and -37 is on the other side (the ap bridge)? in this case i need to adjust the power on the ap bridge? (l...

kellogs

10 Mbps is 2 way TCP tests

16Mbps if it is UDP 1 way (send or receive)

I wonder how i could improve the performance.

Thank you

kellogs

Hi Everyone, I have a LOS between these two points (PTP) about 1KM ... both are running 433AH and they are capable to perform 10Mbps 2 ways using TCP bandwidth test. signal to noise 59 dB noise floor -95 dBm tx/rx signal strenght -45 / -38 dBm overall Tx CCQ - 89 to 100% Nstreme has been enabled wit...

kellogs

i am having the exact issue over packet loss on the ethernet interface.

Do you happen to get it fixed?

kellogs

sample result 192.168.11.4 64 byte ping: ttl=64 time<1 ms 192.168.11.4 64 byte ping: ttl=64 time<1 ms 192.168.11.4 64 byte ping: ttl=64 time<1 ms 192.168.11.4 ping timeout 192.168.11.4 ping timeout 192.168.11.4 ping timeout 192.168.11.4 ping timeout 192.168.11.4 64 byte ping: ttl=64 time<1 ms 192.16...

kellogs

Good Day I have the following setup All equipment 433AH CoreSwitch - 1(ether1 + radio WDS) -wireless link- 2(WDS radio + ether1) - switch - 3(ether1 + radio WDS) - wireless - 4(radio WDS + ether1) - switch (client) I have tried to ping from 2 to 3 or vice versa ... most of the time i am getting <1ms...

kellogs

Hi

I am using Mikrotik as a pure bridge device to deliver the last mile (wlan1 and ether1 as WDS)

Question:
1. Am i able to queue traffic based on ip address that passes through the Mikrotik?
2. Anyone has a command line example to queue interface ether1 lets say 512kbps up and down?

TIA
Kellogs

kellogs

Hi I am new to mikrotik and get hold 1 unit froma buddy of mine. Power it up and assigned an IP address to ether1 Connects Ether1 directly to my laptop (which LAN interface has the same IP subnet as Ether1 on Mikrotik) I am trying to ping it from this laptop to the ether1 assigned IP address resulte...

kellogs

Good Day Friends :) After searching everywhere for an affordable and stable with solid features for wifi gear, i stumbled on this site At this moment I am planning to set the following up and would like the expert to advice :) SITE A --> 40KM 10Mbps LINK 1 (over water and line of sight) --> SITE B M...

Search found 114 matches