MikroTik

NetworkPro

Success with native booted Linux.

Ohhh yeah.

NetworkPro

That's a different crowd to talk to over there, here as you can see, a more enterprise crowd of different people, who have made the choice, to be more serious, is available.

Do you want to talk to friendly professionals or edgy hackers potentially gangsters?

Make a routing decision

NetworkPro

I endured the biggest one on the internet at the time and managed to stay up at all times thanks to CCR whatever the flagship was at that time. And my own efforts of course. And a scrubbing center of course. You know that abstract interface in the end simple simple a mindblower. However I also did d...

NetworkPro

I am also interested.

@Ingdaka bro relax it's a good thing the OpenWRT comes in handy too often. He is just asking if someone is already knowledgeable about it. He is not asking you to support it in an enterprise or telecom scenario. Don't attack. Rather be helpful in any way.

NetworkPro · Re: Netinstall sending offer, but not installing [SOLVED] by RouterBOOT 6.43.12

by RouterBOOT 6.43.12

NetworkPro

1100ahx4 formatted flash now netinstall is not installing - sending offer missing probably the netbios setting mentioned above all other settings Ive already tried tried many combos of the mentioned and other solutions found by me in the past, nothing worked this time must try Linux cli next please ...

NetworkPro

We also have this problem. We can try idle-timeout 60 seconds on the profile however this is not ideal at all.

We should use one session per host setting and each client to come with his own MAC.

NetworkPro

If you can ask your question so clearly, you can figure out the answers without my help. I am busy on other scripts. Regards.

NetworkPro

Hello dear MikroTik developers, Please consider adding and taking future care of the following features: - multiple vitual interfaces attached under a physical interface - each with own MAC address, similar to how VRRP can be used - and/or the ability to add multiple VLANs, including untagged, that ...

NetworkPro

@usmany this should solve it for you backup your config with a backup file, as well as export to text format upgrade to the latest beta with only the packages you are using and you want to keep system security advanced-tools wireless dhcp ppp upload only these npks if everything goes fine, then swit...

NetworkPro

yes, I remember, however this breaks the pref-src functionality, so I report it as a (design) bug. I think pref-src should actually adjust the outgoing IP in this scenario as well.

NetworkPro

pref-src in alternative routing table, in combination with output mangle routing do not set the correct output IP

NetworkPro

Clean install and restore a backup

NetworkPro

but what exact rules do you use that are similar to the PCC rules?.. just wonder... 1. Let ECMP route the first packet of a connection randomly 2. Mark connection based on outgoing interface, after ECMP has done it's randomness 3. Mark routing to force the packets to use the specific route even aft...

NetworkPro

Hi :) - What is the queue of the ether1 interface ? If you increase it, do you have less TX Drops ? Change from only-hardware-queue to some Queue type multi-queue-ethernet-default and increase from 50 to 1000 only for test ? (could add jitter for those packets that will not be dropped anymore which ...

NetworkPro

Honestly an SDN Layer that abstracts this crap would be preferably nowadays. Vendor 1 supports 1 thing and didn't really document it, vendor 2 supports another - I do not want to waste time with shitty configurations of shitty implementations of shitty standards. I have a packet flow from few server...

NetworkPro

6.39rc20 address-list problem had address list edning in 0/24 changed it to start_ip-dash-end_ip and it broke the start ip -> dash -> end ip syntax (192.168.1.1-254) does not even work 192.168.1.1-192.168.1.254 - this more explicit one, works tried to change it again - cant change it anymore to anyt...

NetworkPro

It needs to be Enterprise grade, is this diode solution sold pre-made somewhere ?

NetworkPro

Hello MikroTik staff,

The Feature Request is an easy to use L2 VPN Mesh (P2P) with NAT Traversal, where the specifics are controlled and assisted by the server (RouterOS).

NetworkPro

Hi,

It seems RouterOS can not decode the CDP from vmware dvswitch when its set to advertise or both advertise and Listen

Can this be made compatible ?

Thank you

NetworkPro

I revived the CCR1072 by NetInstall with preserve configuration.

However now there is a problem with LCD: it is white and does not display anything.

6.36rc6

NetworkPro

entire device went silent on reboot and does not come up

datacenter reported port is flapping so it must be in a reboot loop

NetworkPro

After some clicking I sniffed and saw that packet indeed goes out. Its just not catched by mangle rule.

Now current problem is that MASQ rule does not change the source IP of the packet as it goes out.

NetworkPro

routing is not working or packet mark is not working packet comes in on interface and is logged by prerouting after which it disappears supout sent to support reproduce: create Route Rule that sends packet to some other router that routes it back to this one on another interface receive same packet ...

NetworkPro

nand - implemented once a week nand refresh to improve stored data integrity (will increase sector writes)

Also for USB Flash in x86 ?

NetworkPro

If you need to send out packets without delay or drop, you will have to configure packet queue settings that are already present.

There is no such thing as LLQ this is made up and does not exist. It's a lie.

For more info check the link in my signature.

NetworkPro

haha :lol: NetInstall still does not work tested on 2 PCs Win 10 x64 it worked however on a 32 bit Win 10 actually it worked after enabling all the disabled protocols on the adapter and rebooting the PC I think without rebooting the PC between tries it will not work. @ Mikrotik, more QA is needed.

NetworkPro

Hi, These line speeds are not fast, todays websites are heavy and the experience will be "slow". "bonding" would require a piece of equipment in a datacenter, or someone to provide it as a service: http://simonmott.co.uk/images/vpn-bonding/vpn-bonding-diagram.png The ADSL lines m...

NetworkPro

Interesting what Qualcomm Atheros has to bring to the noisy world of Wi-Fi and what Mikrotik are willing to put in their devices.

NetworkPro

My solution is to turn on the max secure settings and select Wi-Fi clients that are compatible with, and work with these settings (Management Protection).

NetworkPro

FUTURE VERSION of this script may use nested loops to compare the NAT entries as unsorted Arrays:

http://www.google.com/search?q=nested+l ... comparison

Contributions are Welcome!

NetworkPro

That value sounds risky in terms of security.

Does it actually fully solve the problem?

NetworkPro

I've posted about this here http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

Let me know if anything still blocks you from achieving the goal and I will add the information to the wiki.

NetworkPro

Export a supout rif and send it to mikrotik support e-mail. Write ~ "Please add support for Intel i210, supout rif attached." Include URL to motherboard site. Wait some time for the support to be added and use another while you wait. Register for nightly testing versions in your www.mikrot...

NetworkPro

Hello,

MSTP would be nice and easy to use and should provide even better position on the market.

-NetworkPro

NetworkPro

Did anyone got these working?

I am sending a supout.rif to support but our project will force us to replace the modem with another one due to tight scheduleds.

BR.

NetworkPro

I found one solution like this: #global variable is loaded with IDs of Dynamic NAT entries :global UPnPs [/ip firewall nat find dynamic]; #compares IDs with the ones from previous run :if ($UPnPs != $UPnPz) do={ #copies current IDs to secondary variable UPnPz which will be used for comparison on nex...

NetworkPro

Hello, I need some help with a script: I want to put all Dynamic NAT rules in a variable for comparison. I need to execute the below script, in case Dynamic NAT entries have changes. It is about this: http://wiki.mikrotik.com/wiki/UPnP_Multi-WAN foreach i in=([/ip fi nat find dynamic]) do={/ip fi na...

NetworkPro

No, the prefect time to give UPnP a face lift would have been about 7 to 10+ years ago. I am pissed at the Latvian guys about this as well but I guess experienced developers don't grow on trees and they certainly don't prioritize work on stupid features like UPnP :( Scripting can be used to "dy...

NetworkPro

Actually CRS crashed and had to be unplugged and plugged back in when I made an L2 loop

I had similar problems on a bunch of other routerboard throughout the years

NetworkPro

Single PPPoE Server on Bridge interface. Bridge would have filter on forward, so incoming packets wont be sent out "duplicated" but the PPPoE server will serve vlan0 and other vlans. This is one possible use. Currently to accomplish this - there needs to be a manageable switch in front of ...

NetworkPro

should be 2000 for each bro

NetworkPro

using value of avg rate of local queue would not make sense for such a purpose

more sense would make to lower max based on traffic conditions such as icmp delay if that can be measured with a script.

Going Up with the max limit - probably by hard set scheduled time.

NetworkPro

Did you find the reason or what did you do to fix this ?

Regards.

NetworkPro

In my experience such problems are due to performance limitations in the design but mostly configuration issues. I believe RouterOS is quite the miracle already. "QoS" code have been recently improved. You may post your specific configuration in a separate thread if you are comfortable wit...

NetworkPro

So what is the question exactly and why didn't you make a new thread since this one is for v6?

QoS for Dual-Wan should control the max tx and rx of each WAN.

I don't have time to pay more attention to this at the moment so good luck from me.

Regards.

NetworkPro

So the same device does not have a ppp/dial-up connection when used with Windows laptop ? Or it does ?

NetworkPro

Update: grabbed new driver for client adapter from station-drivers (god bless the french) (updated all drivers on that pc actually not just the wi-fi)

problem fixed

NetworkPro

try connection tracking yes rather than auto and some "ip->settings" tweaks possibly as well

NetworkPro

What happend with the HTML files of hotspot ? after I made the upgrade they vanished.

cheers

You will have to copy them from elsewhere with different version or from a backup. In RC14 they are mysteriously missing.

NetworkPro

So what big deal with the naming? Are you going to explain what the problem is and CONTRIBUTE or are you going to be annoyed and chatty on the forums?

Time to be annoyed has long passed. Nothing you can do about that.

NetworkPro

Intel PRO/1000 (e1000?) VLAN tagging fail :) 2 device="02:01.0" name="82547EI Gigabit Ethernet Controller (rev: 0)" vendor="Intel Corporation" category="Ethernet controller" vendor-id="0x8086" device-id="0x1019" (OnBoard Intel Server Board ...

NetworkPro

yeah at least router crash prevention would be nice before v6 final release

later some bridging with vlan0 would also be nice, in a way that prevents user looping their network or shooting themselves in the foot and prevents silly support requests as well

NetworkPro

Dynamic rates? Setting another queue as the parent of a simple queue will not work for you ?

Looks like the big number of simple queues can safely replace PCQ especially for big number of packets per second?

NetworkPro

Cheer up. If there are no crashes and the queues actually work, when v6 final is realease, - you should be able to use the new design to do what you need

NetworkPro

interesting situation - this is a good question so you have a radio network with high pps rates ? If you test the same setup on Gigabit Ethernet what would be the result ? - problem is elsewhere - LLQ is a silly thing pushed by Cl$c0 to increase sales (sleazy weasels can put their marketing up their...

NetworkPro

Problem happens with OpenWRT as well. Switching to cable. Mar 17 18:50:06 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE) Mar 17 18:50:08 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: authenticate...

NetworkPro

It is slower.

NetworkPro

Yeah my attempts did not work and I did not want to turn on b/g/n to test that.

I want to run OpenWRT trunk on a separate partition now.

NetworkPro

Blah ! Always hard to have fully compatible sh*t! I am trying with this config on MT side: /interface wireless security-profiles add authentication-types=wpa2-psk eap-methods=passthrough group-key-update=3m management-protection=allowed management-protection-key=<PASSWORD> mode=dynamic-keys name=wpa...

NetworkPro

Sorry I am unsubscribing from this topic. Good luck to all.

NetworkPro

http://www.rdm.com/en/co/products/produ ... logie.aspx

NetworkPro

Decent explanation. When doing such things, you do realize that shielding would create a path to ground that you have to manage, right? Any "dirty" electrical currents that travel through that should not be let to interfere with the Ethernet stuff - usually this means - managing to NOT cre...

NetworkPro

OK sounds good.

There may be packet-loss when it happens, are you testing by pinging with a fast ping (decreased "timeout" value) ?

NetworkPro

What solution? You want to replace components on the PCB now?

Ubnt had the tough cable + plugs I think for similar reasons.

So your question is - how to measure, to be sure that the reason is outside the RB such as electrical?

NetworkPro

topic is exhausted - replace things

NetworkPro

Hmmm so what Cisco are doing is setting a challenge for the world's reverse-engineers? To see if the EIGRP could be fully open-sourced by not looking at Cisco's source code but just ripped spec, compiled code and the packets on the wire? Well if an open-source project starts existing, which contains...

NetworkPro

Yes. MT plz add this, yes?

http://www.youtube.com/watch?v=o_InjAmW5rI

NetworkPro

Ah so MikroTik should have done the same/similar ?

NetworkPro

Yes.

I wonder if redirection technique exists that would not break https? and if it is accepted as standard in the browsers.

NetworkPro

http://wiki.bluecrow.net/index.php/Mikrotik configuration scripts snippets collection (as it should be - on a WiKi) (stumbled upon this by chance)

Hmm no syntax highlighting .... yet ...

NetworkPro

yep I do not approve this design though :]

NetworkPro

Yep. Pretty awesome, nowadays.

NetworkPro

Increasing the complexity and adding technologies significantly increases the chance of performance degradation, less than optimal results, decreased scalability, usability and people's perception of the any aspect of the whole thing. Unless you are a Virtual Box software developer, then it's your j...

NetworkPro

you will have to provide supout rif, or at least if other OS is installed at the moment - export hardware ID info - VID PID that sort of stuff - and send that to MT support otherwise there is high chance your specific board has different chip than what could be found with < favorite web search engin...

NetworkPro

Any successful configurations in high PPS multi-WAN multi-LAN environments?

Do not brag - just post the config.

NetworkPro

Alright what was the issue after all man ?

NetworkPro

Do you have any Queues in your config ? ISP can't guarantee anything since they have dozens of peering partners use lot of IP transit providers and path to the destination is dynamic (lot of hops, all under different ownership) - So real Internet. can you test again and this time include traceroute ...

NetworkPro

This material is no proof of anything. Unless your ISP makes proper engineering measurements (they know and control their network) - you cannot yet prove the issue is in the router that you have. I have 100/100Mbps dedicated ports on a Cisco switches in a DC. Without MT router 100/100 is not an issu...

NetworkPro

Yes, we want to authenticate ourselves to a proxy with the fetch tool and I think https support will help in some of these cases.

Or is there a better way to auth to a Squid/ISA/Forefront/usual ones ?

Regards.

NetworkPro

This stuff here is important in x86 context. Well done martini and macgaiver. Fresh new questions kind of on the topic (also sent to support and waiting optimistic answer): - What Kernel Options / tweaks of this sort (https://help.ubuntu.com/community/BootOptions#Common_Kernel_Options ACPI, APIC, IR...

NetworkPro

Hello, Let us start using graphs that are averaged in a way that preserves the real maximum reached bandwidth? Time for average - no more than 3 seconds? Currently the graphs are not very useful for information- how much the traffic was peaking: http://demo2.mt.lv/graphs/iface/ether1/ In order to ma...

NetworkPro

Yeah they could give US visibility over what THEY DO but that's not very polite to ask in the first place, with the current surrounding culture.

NetworkPro

I have decent experience with the recent RC versions, Thank you MikroTik guys !!! On two mipsbe I put the package from 5th December from the development page, it has RouterBOOT 3.02 , if you could consult with your colleagues and let us know if we can install it on the router OR wait for the next bu...

NetworkPro

What PPP authentication is used ?

Can you show the configuration of the MT that was "replaced" ?

- Lag problem from first post I think is due to Queues. -> How do you limit the users on the new Linux solution?

NetworkPro

add ipid linux: iptables -t mangle -A POSTROUTING -j IPID --ipid-pace 1 routeros how to set? config NETFILTER_XT_TARGET_IPID 385 tristate '"IPID" hoplimit target support' 386 depends on IP_NF_MANGLE || IP6_NF_MANGLE 387 depends on NETFILTER_ADVANCED 388 ---help--- 389 This option adds the...

NetworkPro

no, please do not rely on this "working" because it is not a feature at all. it just uses first added address of interface

use isntedad of masquerade actioon=src-nat and put in the IP that you want

NetworkPro

oh-no

who is using masq with more than 1 IP ? cange to src-nat and paste the IP in there

NetworkPro

Codel + no drop option of some of our packets that is enough to begin with and to keep it simple

NetworkPro

If compared fedora 32bit pure routing (no iptables) vs fedora 64 bit which will pass more packets per second while retaining minimal processing delay?

NetworkPro

reason is amount of work and amount of testing, driver related work who knows what else that goes on underneath there

NetworkPro

RouterOS x86 is sufficient as 32 bit and it has been stated in the MUMs that there are no plans for x64 version for x86_64.

I am satisfied with the 32 bit version. Why would you need a different one ? Thanks.

NetworkPro

6rc2 queues sometimes need disable/enable to make 'em work after tweaking them/after tweaking some small parameter of the queue tree a rb133 disappeared after 6rc3 dev was uploaded to it (was wlan nv2 connection back to us) bridges with vrrps wlan eth and stuff sometimes did not respond to remove co...

NetworkPro

I like short posts - easy to read. RB is tuned out of the box. Speedtest on a website rarely fills up providers' advertised speed. Download many well seeded torrents and see amount on traffic on RB port. p.s. port auto-negotiation issue is not "performance" or "tuning" issue - po...

NetworkPro

Good point. I am not subscribed to MIT network related publications and drafts. I don't know if there is a way to be subscribed? An RSS feed?

NetworkPro

http://www.technologyreview.com/news/429722/a-bandwidth-breakthrough/ A Bandwidth Breakthrough A dash of algebra on wireless networks promises to boost bandwidth tenfold, without new infrastructure. October 23, 2012 Academic researchers have improved wireless bandwidth by an order of magnitude—not b...

NetworkPro

I use this method - its faster and more predictable. This will be the install stage - fat32 with the npk files right?

NetworkPro

Only opennesses we need is to put three routers in a lab and test the one in the middle with Traffic Generator. We put our heavy config on it and test if it will pass all the packets without loss , out of order and weird delays. Then we know we have true power. And we go to celebrate after that.

NetworkPro

Cool man. Let us know if you discover an interesting useful HTB setup. Thank you.

NetworkPro

Why would you put these types of packets into a 128 packet sized queue that gives only sfq-allot bytes of transmission on each RR cycle?

Have you tough of some actually useful benefit of this?

NetworkPro

I figured out the answer to my question two posts above http://forum.mikrotik.com/viewtopic.php?p=338374#p338374 . The router forwards at the gigabit speed and sends the frames to the 100 megabit NIC. The NIC buffer fills and tail-drop occurs there. We prevent this by having a HTB that will drop 9 o...

NetworkPro

How much pps will we get if we put all of the packets through HTB or are we going to have hardware HTB already?

NetworkPro

its a dev build I've asked them via e-mail if they do not reply I assume they are working on it.

NetworkPro

We can use address-list to mark packets and use the packet mark for SQs

NetworkPro

Test this when stable v6 gets out.

NetworkPro

We can use SQ for a subnet with queue type PCQ.

NetworkPro

We have this choice I agree with having freedom to choose. The Simple Queues have a parent setting so all client's SQs will be under one parent, this way they should reach the max-limit of their parent. This is just again HTB "Queue Tree" structure but it was called "Simple Queue"...

NetworkPro

I believe if we put a Queue Tree on the LAN interface for Download customers max-limit, one Queue Tree on the WAN interface for upload customers max-limit we will still have the Global to put two more Queue Trees - one for upload QoS and one for Download QoS. (separate upload/download packet marks n...

NetworkPro

Queue Tree max=-limit=the max limit of the WAN connection -Gaming / limit-at=3Mbps / queue type: default-small -Streaming Video (netflix) /limit-at=1-2 streams at the same time/ queue type: default / priority=1 -Browsing-High (first Xmb of connection) / queue type: PCQ /priority=2 -HTTP downloads / ...

NetworkPro

I think you can attach the Queue Trees on the interfaces HTBs + Global (mark unidirectional).

NetworkPro

We do not reorder. We discard. We do not have conditions for reordering. Ethernet is a serial technology - one frame at a time, with decently low latency on Gigabit and up. MikroTik RouterBOARDs and x86 routers send out packets at Ethernet speeds. If outgoing is 100Mbps and incoming is a flood of 10...

NetworkPro

rarely a solution - very custom I would say No to this Thank you for bringing it up.

NetworkPro

the queue-ing delay is because of the current configuration v6 will not "fix the issue" I bet 10 levas. You can on the other hand "fix the issue" now. instead of like this name="Basic Down" kind=pcq pcq-rate=80k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=20...

NetworkPro

So after you did this you do not have more port-flap?

Please do a sniff of the traffic that you believe might have caused an issue and send it to support. Thank you.

NetworkPro

You should be able to do what you want/need/have now in v5 with the new v6. Please give us the goals of the current Queue Tree/paste current current Queue Tree configuration and we will assist.

NetworkPro

if you're sure it is a bug - take it to support (send them an e-mail with the supout.irf file)

NetworkPro

If it beeps (correction per below post by Normis: I mean when it beep-beeps not beep-jrrps) - it is running, if its brand new - it has default config which should be working. Therefore, ff no connection after beep - cabling / Ethernet issue that usually is solved by reconnecting Ethernet port. It co...

NetworkPro

Configuration and/or cabling issue.

P.S. and/or capacity (not)planning issue

NetworkPro

WinBox not working - try this http://forum.mikrotik.com/viewtopic.php ... 18#p337918

memory is consumed - turn off Web Proxy and use latest stable relese version. If prolem still happens - make supout.rif and send to support as "memory leak bug report".

rgrds

NetworkPro

Nothing to worry about. I change mine from the default 8291 to something else and do not have such problem. It may happen if UPnP dynamic DNS rule takes over this port. It may happen without visible reason sometimes (probably malicious packets hit the port and broke the service). In this case - log ...

NetworkPro

Reinstall with NetInstall, (clean the config). Update the bootloader(firmware) and try again. Use latest RouterOS (5.21 at this time).

Good luck!

NetworkPro

There are workarounds/MirkroTik's own way for these purposes at the moment. Before a filter rule you can have the same rule with action=log and log prefix so it will be available in the logs. I use this a lot. Instead of port lists at the moment you can put a lot of ports in a single firewall rule. ...

NetworkPro

I can see how this can be useful. I am with you buddy.

NetworkPro

The quickest and easiest way is to use OpenDNS account for your company router and do a redirect of the DNS queries to your MT. I think OpenDNS has proxy category. Another option is to allow the users to be playful (including facebook/whatever) during work hours considering their tasks are done. Sho...

NetworkPro

lol dont worry man its not a problem that those empty files (fake as you put it) exist on the server and we can hit their URLs by manually requesting it 5.21 is not released no one is forcing us download empty files Monday normal work time someone will fix that stuff. And rebuild/release/put on deve...

NetworkPro

Try this one http://www.sendspace.com/file/6lqbn9 Package Built Oct/10/2012 12:19:33 if something breaks - the person who installed it will take responsibility because this is a development test version which has not been released. I've tested it only on RB450G.

NetworkPro

It may have been dangerous. Have you tried 6.0rc2 that is on there ? I think it works... except if some Ethernet drivers are not in it for x86 platform.

NetworkPro

It would be great to have the same features as seen here in Tomato Firmware: upnpnat.jpg http://forum.mikrotik.com/download/file.php?id=8608 Can we please have decent/best in world UPnP already ? I am talking about making it usable in ISP/Wireless ISP environments with higher requirements about sec...

NetworkPro

RTL8111 driver missing in 6rc2 2012.10.12 x86 as well. Supouts submitted to Support as test reports

I had access to the router over other interface + backup before test upgrade so I was able to restore previous version in 3 reboots.

NetworkPro

Dual Queue-ing/shaping is Real until v6 where we have Global instead of Global-In/-Out/-Total . If user hel above do not believe this then he can do/go whatever/wherever he wants, no one cares.

NetworkPro

Thank you. I trust MikroTik have their up/down detection right. Netgear example is hardware issue. Good post still every case is specific. I can agree that if you put electronic components in a plastic sealed box and overheat them (in the sun included) then anything on the PCB may become damaged. Re...

NetworkPro

Do you have HotSpot on the interface with that MAC ?

NetworkPro

Janis gives this info here http://tiktube.com/video/IJfq3ioIeGIoDEmloCFvJrFuIlooDIpK= I support MikroTik with their optimisation decision. We can do fine without dual queue-ing in one box. Janis' dual QoS with PCQ can be re-invented to a single step solution - just put the PCQ as a queueing in the f...

NetworkPro

its work in progress, I like the 6.0rc2 from today available from the dev testing page in your mikrotik.com account upon request from support I havent tested on x86 though..

NetworkPro

Yes. You do not see how. I do because I have more information. I am giving you the relevant. The problem that you have can not be solved with RouterOS. You would be needing a WAN optimisation solution. The piece of software I recommended - I have tested. Pirate it for all I care.

NetworkPro

The described flapping is rare so that hardware Quality Assurance did not even think of doing such test or they can't even reproduce such harsh environment to do such test. So the statement "poorly designed/cheap" is not one I would use because this problem exists on the competition's ~20-...

NetworkPro

I read page 1 and 3 of this thread. I had most port flaps and issues in my experience due to RJ45 plug being smaller than the port or the port being too deep for the plug to have 100% contact every time. Such patch cables I destroyed fully and chucked in the bin. I never bought cheap patch cables an...

NetworkPro

Have you tried to put all users through a Windows PC with cFosSpeed and no other queues and limitations after that ? This PC can be Intel Atom 14W. You can have a slow and useful proxy in another 14W consumption. You can let your buddies test these on 3g ~ same variable bandwidth situation and send ...

NetworkPro

Can I make labs with each core running a separate RouterOS configuration, IP adresses etc? By connecting for example eth1 with eth2 so on to simulate many routers connected together?

This would be useful for everyone to test MPLS etc before implementing it in the production network

NetworkPro

I think its this stuff right here ? http://www.google.com/search?q=codel+site%3Akernel.org

NetworkPro

give leaf with limit-at to the dedicated customer in a queue tree that has other leafs for the other clients and manages all traffic, read this http://wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service and ask here if it leaves unanswered questions do not worry about the holes in the WinBox gra...

NetworkPro

I hear there are specific telephony boxes that do this conversion to Ethernet at least - for a number of lines/simultaneous calls whatever its called.

NetworkPro

Why do we still have wireless-default (SFQ) as the default on the Wi-Fi interface in v5.21 2012.10.10 ?

I think we should now have 1. codel queue (as best option) plus 2. only-hardware-queue as second best ?

NetworkPro

This is to enable legacy voice to be transported over Ethernet, right ? For telecoms interconnections etc ?

NetworkPro

When I read your reply I have condensation in my mind, I don't know if that sounds logical though.

NetworkPro

Can you demo this in a youtube video or something because still a bit mystical. Awesome if it delivers whats promised though, a must have for VSATs and 3g setups.

NetworkPro

Sorry if this sounds crazy, but have you tried a Windows PC to be the VSAT gateway and to have cFosSpeed turned On on that PC? After this PC you can have a RouterBOARD for max-limit per user and additional control. Not to mention you need a web proxy. P.S. and three more VSAT accounts to loadbalance...

NetworkPro

please screenshot of wireshark window with unwanted traffic

NetworkPro

Hello,

If this does not explain it all http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

I will redact it to include answers to your specific questions, if you have any.

Thanks.

NetworkPro

Thanks for pointing this out Same issue here http://forum.mikrotik.com/viewtopic.php?p=336987#p336987 I believe I can come up with a Queue Tree that has PCQ for user max-limit just in its low priority part so that we achieve QoS for some of users packets while treating the rest "download" ...

NetworkPro

Sorry if too late but read this http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service and if you have any additional question -ask.

NetworkPro

Yes. RouterOS provides best NAT compared to anything else out there even 20 times the price. RouterOS can NAT a connection back out the interface it came in, masking the source to be the router's IP address. Example: /ip firwall nat add chain=dstnat action=dst-nat in-interface=WAN src-address=<conne...

NetworkPro

Use PCC - one (TCP, UDP) connection will occupy one of each loadbalanced WAN link. If you want one connection to go up to the combined bandwidth - you can do tests with having a RouterBOARD on the other end of the WAN links as well and do "bonding" of tunnels. If you have jitter - bonding ...

NetworkPro

When you bridge - put in filters for dhcp in the bridge (forward).

Put your own DHCP server on the bridge interface itself.

Put more filters (output) not to allow your own DHCP onto someone else's network (where that other DHCP that you are alredy blocking is).

Simple.

NetworkPro

you can script on RouterOS itself , the script to change a queue at specific time is simple

what event will trigger the change in your case ?

NetworkPro

this question is not specific to be provided an answer

sounds like you need general IPSEC assistance

If you managed to get it to work - please paste here the configuration on both sides so others can learn from it - remove any password and private IPs.

NetworkPro

You don't need to NAT the VPN clients, they can be routed to the VoIP soft-pbx.

Give karma if this helped

NetworkPro

I think rebooting first before uploading the npk is better then uploading npk and rebooting. First reboot step may help clean out any bugs, memory leaks, whatever, before the second reboot for the actual installation of the new version. The bricked boards can be reinstalled with NetInstall and work ...

NetworkPro

Did you turn off RPS and turn on multi-cpu ? -this I think may relate to the issue

NetworkPro

From Aug to now, did you have any hiccups or did the server require any software maintenance to run smoothly? Are you still recommending it? For how many clients ? Thanks.

NetworkPro

Yes I did do that. That part worked. It was the later step that failed when I click Install.

NetworkPro

I have a VMware thing installed.

NetworkPro

Last time I had ideas about squid sending out requests with different IPs and some 1:1 nat but that meant lower limited number of users.

NetworkPro

Excellent question.

NetworkPro

During this time I became an authority on MirkroTik QoS. Being any expert, do you have any recommendations for getting QoS to work properly on an N-Streme link? If there is queueing (latency) in your particular link - for reasons of aggregations and such - then I recommend marking a little bit of p...

NetworkPro

Wait - you mean when we put in a Rate limit in the PCQ ? I remember back in the day when the dual QoS first came out I just put the PCQ as the queue in the first step solving this problem and shifting it to a problem of not specific user limit :D . :) Sorry I had forgotten about this :) Thanks for b...

NetworkPro

We drop low priority packets before they get to the PCQ to cause queueing and dropping of the high priority ones. This is the two setp QoS that Janis Megis gave us.

NetworkPro

Nice one. I have to test this and sniff it to be able to know for sure.

I have faith in MikroTik such that such silly problem should not f. with the RouterBOARD.

NetworkPro

Yes nice nice.

Read here http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

and I hope you achieve higher quality there.

Ask if you have any question.

NetworkPro

I understand your two posts now. I am able to put the PCQ queueing in slightly different perspective now - it's like "bufferbloat". In this case we have to drop rather than queue stuff in PCQ, right ? Let's put the priority packets in another queue which has nice limit-at setting. Is this ...

NetworkPro

Ensure Layer 2 connectivity to the interface that the HotSpot is running on.

VLANs and Bridges is cleaner than EoIP and bridges.

If you bridge stuff on Layer 2 - put filters on the bridge so that the separate L2 segments talk to the HotSpot only and not to eachother over that bridge.

NetworkPro

lol I do not believe - an application triggering port flap ?

Can you reproduce it every time to be sure that the app causes it? (With its specific packets probably)

NetworkPro

Which is? I tried with Compatibility mode.

NetworkPro

Ah sorry about that man. I do not have a nice clean solution for looking at individual IPs' graphs.

Maybe MikroTik can make some statement about how Simple Queues in v6 will help with this?

NetworkPro

Different part of the whole packet is counted on each? Different number of packets are counted on each? No one ever cared so no one ever compared the values?

NetworkPro

Thanks for the reply. Let's see if we can not miss each other's point so that we all get what is the truth rather than something we think we can imagine. The VoIP/gaming/ packets arrive in between other packets as they were put on the wire by customers PC. Before we can reorder packets in the router...

NetworkPro

Interference may come from, let's say - someone testing new digital TV transmitter - and can cause discrepancy of the Ethernet such that lower level software decides to flap the port. It was not noticed before because for example that lower level code may be just dropping frames rather than flapping...

NetworkPro

Sorry for butting in but I prefer a nice clean Queue Tree with PCQ for example. No Simple Queues and no scripts - we do not need to make life harder than it is.

NetworkPro

LOL Cisco TAC have closed issues in such a silly way that the truth is in our own ability to solve our problem rather than someone else's.

But if you found happiness in using 2911 and dumping trucks of gold and diamonds on Cisco - then good for you

NetworkPro

VLAN per customer - nice level of control, yes.

Recently there have been client routers which put weird stuff on the broadcast domain. It looked like DoS attack. (Tenda, TP-Link..)

We replaced those client routers with RB750 etc and everything was fine

NetworkPro

If you want one button reset on x86, the common way to give hardware commands to a router is through the serial port. This may involve hardware solution that would execute a script in RouterOS to set the configuration to what you want to reset to. Another cool thing is SMS to execute a script when y...

NetworkPro

Excellent. I have modified this stuff http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service to represent the actual truth while having relevant useful information.

High five!

NetworkPro

This is a good question. http://wiki.mikrotik.com/wiki/NetworkPro_on_Quality_of_Service I would mark the local traffic by having a nice big address-list with all the local (country/exchange) subnets. Then I would use a Queue Tree to manage that traffic together with the rest. To keep the customers h...

NetworkPro

Good question. Looks like portforward issue to me. Directly to the PC - the 1.5Mbps connection is probably directly to the receiver. Where as behind the RB whcih has NAT - the connection is not the same type. With NAT - try UPnP - it has proven useful at multiple setups that I have built and configu...

NetworkPro

Oh no please do not turn on Flow Control.

Please turn it OFF everywhere.

Are they joking with this stuff?

How did the problem affect loss and latency and capacity?

What are these parameters now that you supposedly have Flow Control?

NetworkPro

I didnt read 100% of this thread but do you guys protect the port from interference on the frequencies Ethernet and GigabitEthernet operate on? I would not expect stable behaviour unless shielded cable is used (may not be grounded I think not to create a path for any lightning) as well as the board ...

NetworkPro

Nice one. What did support say? Do you have the "Submit this post as a bug report to MikroTik Technical Support:" checkbox at the top of a Newpost ?

NetworkPro

http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

NetworkPro

Hello guys.

If we think about it in a simple way, the strict prio/LLQ will make a sub-millisecond difference some of the time. Do we really need something like this?

If you read this http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service do you have any further questions?

Thank you.

NetworkPro

Whats the auto-negotiation setting of the device on the other end of that port?

NetworkPro

What about 5.20 ?

NetworkPro

Did you have the router bootloader (firmware) upgraded?

NetworkPro

If you could make a packet capture of the client traffic who is launching and connecting with this application, maybe we could look at that and figure out what to block safely.

NetworkPro

Test any machine with:

- only one GigabitEtherent interface on PCI-e bus connected to a Switch with VLANs
- turned off multi-threading in the BIOS and turned off multi-cpu in RouterOS

do not use Simple Queues and dynamic stuff

Report back.

NetworkPro

What does the ping look like when the speed reduces?

After you read this and apply the know-how to your setup, do you find a solution? http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service

Thank you.

NetworkPro

Use a Queue Tree. http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service use this as information and if you have any question - ask here.

NetworkPro

Full height.

NetworkPro

So MikroTik will adjust WinBox to auto-strip any formatting and trailing spaces in the future?

NetworkPro

compare pings between the two setups while downloading one single file

NetworkPro

RouterOS version, screenshot and what do you mean DRR?

Search found 1376 matches