MikroTik

marsark

I have this problem too. Tested with my two RB850 with different versions of ROS. MAC connection fails every time. I have also problems with handling small DNS (UDP) packets. In my opinion RB850 is crappy platform.

marsark

I can confirm, that I wasn't able to reproduce this behaviour on RB750G, RB450G or RB2011 with exact same configuration as my two RB850s. It is obvious that this DNS problem is hardware dependant.

marsark

Yes, this is strange also for me, but when RB850 is removed or replaced by another router, problem is gone.

marsark

It look like that only RB850Gx2 platform is affected by this issue.

marsark

Hi, my two RB850 are also affected with this issue. Running latest RouterOS 6.34. I can see following behaviour for example when downloading with wget - output from strace on my linux desktop. Please, see 5 second "jump" and timeout in the log. 01:03:36.510162 uname({sys="Linux",...

marsark

Thanks. Yes. Assignment of the IP address did the trick, but configuring DHCP client with broken gui took me 30 minutes at least. Everything is OK when connecting WinBOX to the IP address.

marsark

Hi, I have brand new RB850x2 on my desk and I noticed following problem. I use WinBox 3rc16 running in Wine and it's interface is very lagy and data missing (see attachment). There are no interface, addresses, uptime, cpu load ... simply nothing. Time to time a managed to connect and data are there ...

marsark

I would appreciate any fix of "inline comments". It is very annoying to me when connecting to dozen of boxes couple time a day.

marsark

Sorry. I missed existence of 3.0beta3 - but no luck with it. Still have to enable inline comments a columns every time.

marsark

I'm refreshing this thread because Load previous session and persistence of users setting doesn't work for me. I usually log to RB devices from my desktop or laptop with Linux OS and WinBox (3.0beta2) running in Wine. I have to enable inline comment and configure requested columns in interfaces scre...

marsark

By chance I have found one RB with nice uptime

Any other ? Even better ?

marsark

I upgraded to 6.20, let see what happens next time

marsark

Hi, our CCR1036-8G-2S+EM (ROS 6.11, Connection tracking enabled) was taken down by 200kpps DDoS in a role of a firewall yesterday. Some details about incoming traffic: target was IP address of our SMTP relay server, traffic came from different IPs and random port. Type UDP packets, size from 128 to ...

marsark

Hi, you can use may be something from HomePNA. I saw some HomePNA units in student college in Tampere 6 years ago. They used POTS wiring for delivering connectivity to the dorms. There had to be some concentrator in the basement of the building.

marsark

Hi, my cable operator boosted my line to the 240/24 Mbps for summer, but sadly I wasn't able to achieve this speed with RB2011. packet mangle, some shaping and NAT => 174 Mbps mangling and NAT => 190 Mbps only NAT => 214 Mbps In all cases CPU is driven to 100%. Without NAT only with switching I can ...

marsark

I know Netgear GS110TP. I have some installations with this switch, but point is that I want to get rid of the 48V/24V DC/DC convertors

marsark

Thanks, I missed that ubnt makes also switches

I will try it.

marsark

Hi,

could someone recommend me a small PoE switch (5-8 ports, 100M or gigs) which is able directly deliver power to the following devices without any additional injectors/converters ?

RB433AH

ubiquiti Nanostation M5

IP camera compliant with 802.3af

Thanks.

marsark

nope ... i tried this many times

[admin@felk-fw] > /system leds set 1 disabled=no interface=te2 leds=eth1-led2 type=interface-speed   
failure: This preset is read-only!

marsark

So, I upgraded to the ROS 6.11, but attempts to restore default LED config in console still fails with: no such item, but i was able to add configuration in the Winbox dialog LEDs. [admin@felk-fw] /system leds> set 1 disabled=no interface=te2 leds=eth1-led2 type=interface-speed no such item There is...

marsark

this is productional, mission critical box, it is save to upgrade to 6.11 ?

marsark

nope... [admin@felk-fw] /system leds> set 0 disabled=no interface=te1 leds=eth0-led1 type=interface-speed no such item [admin@felk-fw] /system leds> set 2 disabled=no interface=te1 leds=eth0-led2 type=interface-activity no such item [admin@felk-fw] /system leds> set 3 disabled=no interface=te2 leds=...

marsark

output is empty

/system led print
Flags: X - disabled, * - default 
 #    TYPE                     INTERFACE                                                                        LEDS

marsark

Our box is actually running ROS 6.7 with bootloader 3.10. Both SFP+ port are used, communication is running but no lights.

marsark

I have same problem with SFP+ port on CRS1036-8G-2S+ with Direct Attach Cables. Actually running ROS 6.7 with bootloader 3.10.

more here:
http://forum.mikrotik.com/viewtopic.php?f=3&t=79874

marsark

I finally did some more test fit SR/LR SFP+ modules instead of DAC and noticed no problem with LEDs. So it look like support for DAC in CCR is somehow unfinished.

Does any body else runs CCR with DAC? I have a DAC only from one vendor, so I'm just curious if it is problem of brand or DAC in general.

marsark

Yes, it seems to be some problem with DA cables at the side of CCR. I tested more different cables with no difference in behavior. Some SR/LR will arrive on Monday, so I plan to do more testing.

marsark

I have finally got my hands on the CCR1036-8G-2S+ and started testing it in our network. But suddenly I have fallen in troubles with Direct Attach Cables which are connecting CCR to Extreme Networks X670. First of all I X670 was unable to establish a link with CCR, but on the side of CCR port was ru...

marsark

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?

marsark

I'm not sure if I'm not mistaken but I thing that CAM or TCAM is a part of ASIC chipsets in really bigboxes like Juniper EX4550 or Extreme Networks X670 or some similar class of the box. On the other side CCR is a software based solution where routing decisions are made by CPU (tiler64) ?! If not, p...

marsark

I hope there will be some update soon. Needs urgently such boxes.

marsark

So, after 48 hours testing I can conclude, that v6.3 runs much more better. No more IPsec problem at this moment.

marsark

Thanks for a hint. Now I'm testing v6.3, so lets see.

marsark

Sigh, too bad for me. My IPsec sessions dies in the period of 5 to 10 minutes. Sometimes helps to ping trough from one side. Is there any ROS version, compatible with new revision of the RB2011, which behaves better than v6.1, even a rc ?

marsark

Hi, I had to upgrade my RB450 (because burned out capacitors) to RB2011 (new revision compatible only with v6.x ROS) But I am not able to get IPsec work. Other party is also RB2011. Both sides running ROS 6.1. I used just same configuration from the old box (v5.21) that worked flawlessly. But no luc...

marsark

Hi, Is there any update concerning CCR1036-8G-2S+ availability date?

marsark

The CPU and switch chipset doesn't have performance and bandwidth for so many 10Gbps ports.

marsark

These connectors are probably only measuring points for testing/diagnostic purposes.

marsark

OMG... how someone can do that?! Blown it up.

marsark

After all, I did some modification to my unit. I have added internal power supply module and power socket. Hopefully it won't blown away

One more thing, the unit with attached rack mounting clamps it little bit to wide so I had to use more force to mount unit in the rack (standard Triton).

marsark

Hi, my RB2011UAS-RM has finally arrived. At first glance it is a nice box, but at the second glance, I am little disappointed with its mechanical quality of the make. First flaw is a narrow hole for a power cable from the adapter. Edges of the hole are sharp enough to damage cable and it will sooner...

marsark

It seems to be fixed.

https://stat.ripe.net/query/visibility- ... 2:610::/32

marsark

Hm, so AAAA record should be removed from www.mikrotik.com DNS. This way is Mikrotik web poorly available for nodes with dual-stack.

marsark

Hi, I have noticed problems with reachability of the http://www.mikrotik.com web site over the IPv6 connectivity. DNS query for http://www.mikrotik.com returns AAAA record without any problem. But the target network is not reachable. I did some tests from two independent locations with native IPv6 c...

marsark

No problem with 1000uF here. See my very first post.

marsark

Hi, one of my customers produces control units for heating, air-conditioning and venting system (HaCVS). This unit is in the power rack, DIN rail mounted. It is equipped with one Ethernet interface. Setting of the HaCVS is done via local matrix display with keypad or via ssh/web access. He ask me if...

marsark

Merry Xmass. There is no RB751G so there is no Santa Claus or any other "gifts delivering" person. Some update, date, ETA ?

marsark

So, some update on RB751G availability?

marsark

Some time has passed by. Do we have any news, any update, any relase date of RB751G ?

marsark

So, how does it work than when I define two radius server profiles? Which one is used? Both?

marsark

I have AP with two virtual AP interfaces (vwl0, vwl) and and each has own security profile (vwl0-staff, vwl1-guests). Finally, there are two RADIUS servers. I don't know how to get certain security profile in relation with certain server. Is there any way?

marsark

Yes, rack mounted 24 port SwOS based switch would be appreciated. Also rack mounted version of rb450/g would be welcomed.

marsark

Why there is a MMCX connector in RB751 instead of RSMA? (size, price, ...) ? I think that RSMA is more usual. IMHO, nice product. Looking forward for RB751G.

marsark

Thanks. I will examine it more closely.

marsark

I have missed point. What does it mean that RB has wireless with two chains? Thanks.

marsark

Hopefully, it will be precisely one year after its paper presentation at MUM in March.

marsark

So, any progress? Or RB751G is going to be delayed as others from new models?

marsark

If remembered it correctly, I have seen PVLAN in the administration of Accton Edge-Core ES4528V http://www.edge-core.com/ProdDtl.asp?sno=306, it also have complete IPv6 management. I got one for 400€ with VAT (in CZ).

marsark

For a sake, is there any option how to enable inline comments in WinBox everywhere and forever? I have to switch forms to inline comment after each login. Running Winbox in Wine.

marsark

Thanks, looks promising. But price per AP is out of scope.

marsark

why do you consider the mentioned as an "enterprise" device? what properties do you find most appropriate for this name, enterprise? UniFi lack lot of necessary features, so I'am looking for similar device based on ROS. Requested properties for such a device are: centralized management (D...

marsark

My broken caps ware green. I'll try to read lettering in the evening. Hope it is still readable.

marsark

I'm looking for nice enterprise AP, such as is Ubiquiti UniFi but based on RouterOS. Does Mikrotik plan to offer similar device with decent enterprise design, 802.11n, 802.3af and management via Dude?

marsark

My RB450G was bought in 05.2009. RMA Guarantee has passed, luckily replacing of caps fix it

marsark

Oh, such a quick response. Good to know. But now I have two brand new RB450 on my desk. I have bought them this morning, hour ago. I it seems that vendor of caps is also Su'scon, same as in the broken caps case.

marsark

One of my RB450 went down yesterday evening because of two on-board capacitors which exploded (6.3V 660 uF) - hope that I was able to read values correctly, their cases ware to damaged. It look like a very cheep bad quality parts. I thing that RBs deserve more reliable parts. Luckily I have solderin...

marsark

So, there is almost an end of August, and RB751G nowhere. When will be available?

marsark

So, August is here. How does it looks like with RB751G availability? Does we have a real hardware to buy?

marsark

I asked sales yesterday. They are now saying August.

Tom

Hm, sounds good. Let's see.

marsark

So, no date? When will be RB751G available? Next month? In September? At Christmas? Next year?

marsark

Nice case. Hope to get it soon.

marsark

Is there any 19" rack case for RB450G with internal power supply?

marsark

RB435G is really nice piece of hardware, but for my needs it is little bit a "overkill machine". RB751G is exactly router I need.

marsark

Hi, is there any estimation of date when the RB751G RouterBoard become available? I need urgently gigabit router with wireless. I have to mix a RB450G with RB411 these days. I will prefer one box.

marsark

Ok, I will try DSCP. I can't use different networks, because it is a network in a lab and we need to have all user in one broadcast domain. There is installed lot of embedded boxes an PLCs and so. Some of them are wireless but dummy (don't understand 802.1x). Users should log in with credentials aga...

marsark

Hi, I'm trying to deal with following setup. I have a RB411AH as wifi AP and RB450G as NAT/router. AP is configured like this: eth0 has two tagged VLAN interfaces vlan5 a vlan17, and wifi ath0 has two VirtualAP interfaces wvlan0 and wvlan1. The wvlan0 uses WPA2-PSK, wvlan1 uses 802.1x and Radius. et...

marsark

Now I have a one IPv6 server and two IPv4 servers in the DNS config. And works.

marsark

Yes. I checked it now and ROS sends DNS server address in RA, only if the list of DNS servers contains at least one IPv6 address.

marsark

I have checked Router Advertisement packet sent by ROS 5_rc8 in the WireShark, but there were no DNS advertise records included. Advertise DNS option is enabled.

marsark

I have checked this according to the note in the changelog:

*) radv - fixed problem when wrong link local address was used to send advertisements on bridge interface;

I installed ROS v5rc8 at my RB450G and RB433AH and RAs works for me now. So it is fixed - finally. I will open a bottle.

marsark

I upgraded my RB433AH to ROS 4.12. But problem with "Invalid argument" persist. It is related to the wifi interface and bridge above it. wireless,info 00:1B:77:B8:2E:EA@ath0: connected radvd: received Router Solicitation on interface=br0 radvd: sending Router Advertisement on br0 radvd: ad...

marsark

Hm, this sounds good. If it will be so. I will open a bottle.

marsark

Where can I get 5.0rc2 ?

marsark

Nope, no info, no progress, no changes.

marsark

If OpenVPN droped, I will have to leave Mikrotik and ROS. Could someone tell me for what is Windows only crap tunneling protocol good?

marsark

I have opened a support ticket months ago, but MTs they never respond.

marsark

I noticed same issue on another site. Result is identical, RB locks and VPN crashes. It is caused by newer version of OpenVPN at server side.

marsark

I have noticed after the upgrade of my Linux server, that ovpn client fails to connect to openvpn server 2.1.2, version 2.1.0 is ok. RB411 fails to connect to server and RB433AH hangs partialy. It is unable to list interfaces in WinBox. Console says: Time Out, when tried to list interfaces.

marsark

Troubles with RA are described in this thread http://forum.mikrotik.com/viewtopic.php?f=2&t=38166, but sadly there is no sufficient solution.

marsark

Nothing changed in ROS 4.11, radvd log is still full of Invalid argument messages.

marsark

Yes, the strange thing is that temporal interval until failure. It varying from minutes to hours and when failure occurs, than I have log full of the following messages: Jul 19 16:06:02 r4bu110 radvd,debug: radvd: sending Router Advertisement on br0 Jul 19 16:06:02 r4bu110 radvd,debug: radvd: adding...

marsark

Hm, let me guess. It's lack of the skilled HW designers a necessity of do all from scratch or buy an IP core. Use linux kernel is much more easier. I think, that there is some problem in the ROSs implementation of the radvd. May be MAC address handling in case of bridge, VLANs and so on. I can accep...

marsark

Time to move the thread up.

marsark

It seems that there is no progress in fixing this nasty bug. I encountered with this bug again these days. Now I have the RB750G as an end point of the 6to4 tunnel. The eth1 interface has four tagged VLANs - vlan2, 3, 4, 5, 6. There is one /64 prefix which is advertised at vlan4 interface and the se...

marsark

I also didn't find any pattern or reason why radvd daemon stops to work. I did last week some test with RB750G. I has only one port in use. It act as a 6to4 tunnel endpoint and announces router and prefix to the native IPv6 network (our customers) via VLAN. There is no problem, it seems that radvd i...

marsark

IMHO, DHCPv6 can't provide router address to the clients. Router must advertise itself.

marsark

Hm, the real pain is that RA issue time dependent. Sometimes it works for hours than only for minutes. I can understand that there is a problem in the software. But I do not understand that Mikrotik stuff ignores it. I need some statement to this. I have equipped my customers with RBs, and now I am ...

marsark

Hm, I tried to use a internal switch, but I noticed serious issues with Queues. Simply Queue Tree was unable to keep enough bandwidth for voip calls. So I drop switch and use bridge.

marsark

Hi, look at this thread: http://forum.mikrotik.com/viewtopic.php?f=2&t=38166. May be it is a same cause. I had problems with IPv6 and RA. Finally last week i have found some workaround.

marsark

So, my troubles was caused by scheduler scripts which enables/disables wifi. For a workaround I added rows:

interface bridge disable br0
interface wireless disable ath0
interface bridge enable br0

And similarly for enabling script. Now, problems with broken RA are gone.

marsark

OK, I understand now. The bridge configuration or its interfaces state can't be change after the boot.

marsark

Hi janisk, Configuration look like this br0 = ath0 + eth1 + eth2, where br0 is local LAN and eth0 is WAN interface. There is a NAT between LAN and WAN. ath0 is Wistron CM9 WiFi card which is disabled by scheduler script at 23.30 and enabled at 8.30. I described this issue in more detail in this thre...

marsark

I have discovered some new thing about not working RA. I have updated ROS to 4.10 on Monday at night. Than RA worked correctly until the morning when scheduler script enables ath0 device which is bridged with eth0 and eth1 to br0. I'm disabling WiFi for night. I have found following in logs: Jun 1 0...

marsark

IPv6 Router Advertisement is still broken in ROS 4.10. It worked only for a few hours. Than failed again. Jun 1 08:19:40 r4bu110 radvd,debug: radvd: sending Router Advertisement on br0 Jun 1 08:22:06 r4bu110 radvd,debug: radvd: sending Router Advertisement on br0 Jun 1 08:26:44 r4bu110 radvd,debug: ...

marsark

I looks like the IPv6 Router Advertisement on bridge bug has been fixed. Now running ROS 4.10 on RB433AH and it seems that RA packets are being sent as expected. So I let it more time.

marsark

If your tunnel is running, there is no more setting than I have described in previous post. Did you set the route at the server side? Try to imagine how the router have decide what to do with your packet. Your PC send packet to it's default gateway (your RB750) because don't know better target for i...

marsark

I am using OpenVPN in same way you want. I have network behind OpenVPN client (MT) and also network behind OpenVPN server (linux pc). PC from one network can talk with PC in other network. So, If you have OpenVPN tunnel running, it is necessary to tell RB750 and linux server how to reach PCs at the ...

marsark

Hi. I have RB433AH when eth0 is internet connection and eth1 and eth2 are bridged together with ath0 to br0 bridge. I have also Queue Tree for VoIP and VPN prioritize. This works perfectly. Than I have tried to replace the br0 bridge partly with internal switch functionality. I set master port for e...

marsark

More about troubles with ROS and IPv6 can be found here: http://forum.mikrotik.com/viewtopic.php?f=2&t=38166

marsark

I'am giving up. Still no solution and too many hours spent with no success. I have to look for another hardware than Mikrotik, because there is no presumption when will be RA in ROS fixed.

marsark

Hi. I'am also looking for RB450G 19" rackmount case (something similar to RB1000 or RB1100). Any ideas or links?

Thanks.

marsark

Yes, same situation here. I have set up a few RBs by my customers and reason was IPv6. Than shows that IPv6 sucks on RB and I looks like a stupid sod.

marsark

I tried to disable/enable interface and export/import settings. It works, but only until midnight :) After the midnight there are no more RA packets. I know that 5.0 beta solve this bug, but I don't dare to install 5.0 beta at production routers. Hope that fix will be back ported to the 4.xx branch....

marsark

I have got RB433AH and the behavior is same as in case of RB450G. So this seems to be a general problem of all RBs. The must be a bug in the RADVD daemon, because it claims that RA packet has been sent but no packet appears in Wireshark. Devs, please provide some fix. RA is key feature of IPv6. I ca...

marsark

So I have found cause and solution of the problem. It was caused by Internal switch in RB433AH. Now it is ok, when moved back to bridge.

marsark

I have cable connectivity with 10.6 Mbps download and 1160 kbps upload (real measured values) and using Queue Tree to ensure fairy policy in attached network and to have enough bandwidth for VoIP calls. Now I have discovered small problem which I don't know how to deal with. When I saturate upload a...

marsark

NO, IPv6 RA bug has been not fixed in ROS 4.7 yet. More can be found here http://forum.mikrotik.com/viewtopic.php?f=2&t=38166

marsark

So I let ROS to send logs to my syslog and discovered this: Apr 25 21:33:42 r4bu110 radvd,debug: radvd: sending Router Advertisement on br0 Apr 25 21:33:42 r4bu110 radvd,debug: radvd: adding link-layer address option, mac-address=01:00:00:00:01:00 Apr 25 21:33:42 r4bu110 radvd,debug: radvd: adding p...

marsark

I did some more test. But I have to confirm that Router Advertisement at bridge is still broken. I managed to get it work, but it works only for certain time. It looks like there are no RA packets after the midnight

Than I have to restart the router.

marsark

So, I have tried to get IPv6 work with ROS 4.7, but still without any success. Still no RA packets in my network, still no IPv6 :( In ROS 4.7 is my advertised prefix marked as invalid in Neighbor Discovery window ( has flags Dynamic, Invalid). I don't know why? 0 ID prefix=2001:470:1f15:692::/64 int...

marsark

It is fixed in latest build of ROS 4 or ROS 5beta ?

marsark

But IPv6 Router Advertisement mechanism is broken in current stable ROS 4.6 (when want to run RA at bridge interface). More about this issue can be found here in this thread http://forum.mikrotik.com/viewtopic.php?t=38166. What's the status of IPv6 RA in ROS v5 beta? Thanks.

marsark

Yes, this is a big problem. Thus I am unable to use IPv6 in my networks for months. IPv6 implementation in ROS seems to be buggy.

marsark

I have similar problem with RB433AH.

http://forum.mikrotik.com/viewtopic.php?f=2&t=38166

marsark

So bug still exists in ROS 4.6. No response from support for more than three weeks.

marsark

I celebrated too early. It suddenly stop to work. No advertisement packets anymore. I have to restart br0 interface to get packets again.

marsark

So, I can really confirm, that manually set MAC address of the bridge is a functional workaround for missing Advertisement packet issue. BUG IN ROUTEROS REMAINS.

marsark

Yes, I don't want to be hasty, but it seems to work. Manualy set MAC address of the bridge interface do this.

marsark

Yes. The br0 device get local link address automatically. It's same as eth2 IPv6 address. I played with ND setting but without any effect. I created new specific rule for br0 and set shorter time for Advertisement, but no effect. In case when "bridge was out" shorter time caused shorter pe...

marsark

Hope, will be fixed soon in the next RouterOS

marsark

So I have torn out eth1 from the bridge and disabled br0. Now it looks like Router Advertisement is being sent approx. every 250s. Now, it works. But I need eth1, eth2 and ath0 bridged.

UPDATE: I get it back to the previous state and now no more advertisement. Is this bug or a feature?

marsark

So, I did some experiments with EUI64 enabled and disabled, but without any success. Still no sign of the Router advertisement packet.

More ideas? Thanks.

marsark

Ok, I'll try in the evening. But I'm afraid, that EUI64 is the key part of the IPv6 auto-configuration mechanism.

marsark

Here is important part of my configuration: /interface 6to4 add comment="HE IPv6" disabled=no local-address=84.42.xxx.xxx mtu=1280 name=sit1 remote-address=216.66.84.46 /ipv6 address add address=2001:470:1xxx:xxxx::2/64 advertise=yes comment="6to4 tunnel endpoint" disabled=no eui...

marsark

I have found that also interface disable/enable cause that ONE Router Advertisement message is send. But still no solution.

marsark

I have a same problem at RB433AH running RouterOS 4.5 . Simply router doesn't send Router Advertisment ICMPv6 message. I have a 6to4 tunnel to HurricaneElectric Broker. When I reboot the router while PCs are running, everthing is ok. After the routers boot PCs get Advertisment message and set IPv6 a...

marsark

I have captured some packets in Wireshark. They are in attached files.

1) capture from PC and nsupdate (this works)
2) capture from Routerboard (this is bad)

marsark

Hello, I have same problem. RouterOS 3.27 (recently 3.25 - same behavior) Routerboard RB433AH My update command is: dns-update dns-server=x.x.x.x name="ocean" address=y.y.y.y key-name="rndc-key" key="PNLMjMn8J44aND89pKicCrPGT5hOJnwnLr3XW2P5t6Q=" zone="domain.tld&qu...

Search found 138 matches