Community discussions

Search found 714 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 15
by roadracer96
Fri Apr 28, 2017 3:38 am
Forum: RouterOS v6 RC and v7 BETA
Topic: ETA v8
Replies: 21
Views: 3354

Re: ETA v8

Right. But they don't run bgp and ospf and fib updates and filtering and xxxxxxx under the same process. That's why a dual core major brand router can handle several hundred peers with convergence times 5x faster than 2 peers on a mikrotik. I guess you are waiting for some specific feature, not the ...
by roadracer96
Fri Feb 17, 2017 3:33 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug in ipv6 link-local address is now generated from tunnel local-address
Replies: 8
Views: 1299

Re: Bug in ipv6 link-local address is now generated from tunnel local-address

It's intentional. It used to be generated from the tunnnel name so if you created a tunnel called sitea_siteb on both routers they would have the same ll address and ospfv3 wouldn't work over them.
by roadracer96
Fri Feb 17, 2017 3:30 am
Forum: RouterOS v6 RC and v7 BETA
Topic: V7 ....
Replies: 23
Views: 4952

Re: V7 ....

Doesn't matter to me. I pulled out all my mikrotik stuff except in some "cheap" areas of my networks. Too little development was happening on features that really matter. Too much development on bullshit creature features. It's like they don't care to fix all the big problems that would take a lot o...
by roadracer96
Wed Dec 21, 2016 6:09 am
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM MPLS Support
Replies: 53
Views: 11424

Re: CRS317-1G-16S+RM MPLS Support

You know damn well what he meant. It had a very specific and obvious question. "Will this device support MPLS at wire speed?. The answer is no. There is no yes answer. It will forward Ethernet frame at wire speed. It will likely have no concept of what mpls is other than perhaps the ethertype and ev...
by roadracer96
Tue Dec 20, 2016 12:05 am
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+RM MPLS Support
Replies: 53
Views: 11424

Re: CRS317-1G-16S+RM MPLS Support

Mrz. I really gotta hand it to you. You are an enormous moron. I really wonder what goes through your head sometimes.

You do realize there is an entire world of cam forwarded mpls switches out there, right?

Your answer is just stupid beyond all belief.
by roadracer96
Sun Oct 30, 2016 3:51 am
Forum: RouterOS v6 RC and v7 BETA
Topic: SSTP Server - routes for clients
Replies: 2
Views: 1116

Re: SSTP Server - routes for clients

You can blame Microsoft for that.

There is no means to push routes to clients in sstp. I'm pretty sure windows running as the sstp server can't even do it.
by roadracer96
Wed Oct 26, 2016 6:35 am
Forum: RouterOS v6 RC and v7 BETA
Topic: mikrotik hacked!?
Replies: 14
Views: 3074

Re: mikrotik hacked!?

There is no hacker proof. And you can't even get close with mikrotik. A couple of lacking features off the top of my head that prohibit their use as a firewall in an enterprise/smb environment. SSL decryption and inspection. Application identification/policy. Ids/ips signatures. Vulnerability signat...
by roadracer96
Mon Oct 24, 2016 10:57 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: mikrotik hacked!?
Replies: 14
Views: 3074

Re: mikrotik hacked!?

Or it connects to a DNS name that was hijacked and an the exploit downloaded. Lots of those dvr systems create connections automaticallly. The little webcam I use to watch my kiddo sleep tunnels out to the net and you can connect to it by knowing a serial # or something. That's why you need to log i...
by roadracer96
Sun Oct 09, 2016 5:10 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 21410

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

Maybe that look at all he brocade 7450s. They have an available IPSec module. Now. Keep in mind this isn't really useful for road warrior. It's only designed for router to router links.
by roadracer96
Sun Oct 09, 2016 5:08 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: IPv6 testing, some help required
Replies: 14
Views: 1538

Re: IPv6 testing, some help required

It doesn't request a /64 for the WAN. It requests a NA address and derives the prefix of the subnet fro router advertisements. Dhcpv6 from a single client standpoint (i.e.: not a PD request) has no concept of a subnet mask.
by roadracer96
Sat Oct 08, 2016 2:28 am
Forum: RouterOS v6 RC and v7 BETA
Topic: IPv6 testing, some help required
Replies: 14
Views: 1538

Re: IPv6 testing, some help required

Depends on your configuration. We use /64s and /60s for residential users. Nobody has used a /60 yet. And a single IP for the wan interface. In reality you don't need the single IP in the wan. It's not used for anything in 99% of situations. Source guarded ports so users can't egress traffic with un...
by roadracer96
Sat Oct 08, 2016 2:20 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 21410

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

Brocade MLXs. Having 400gbit of IPSec throughout and 2.4million hardware route scale is just a happy side effect. The reality is. We collapsed a lot of devices into 1 per building (9 total MLXs). The internet facing units have the newer 20 port 10gig IPSec enabled line cards.
by roadracer96
Wed Oct 05, 2016 2:59 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)
Replies: 134
Views: 21410

Re: Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread)

The problem with misordered packets is that the receiving side has to wait for everything to come in so it can reorder them and feed them to the application. This results in the connection slowing down and scaling the window size smaller in order to guarantee delivery. You could tweak the settings i...
by roadracer96
Mon Aug 31, 2015 10:59 pm
Forum: RouterOS v7
Topic: Feature Request: PEAP-MSCHAPv2 in station mode
Replies: 6
Views: 1624

Re: Feature Request: PEAP-MSCHAPv2 in station mode

Its already there. I think its only available from the CLI.
by roadracer96
Mon Aug 03, 2015 4:56 pm
Forum: RouterOS v7
Topic: Feature Request: Specify IPv6 VRRP Link Local address
Replies: 0
Views: 728

Feature Request: Specify IPv6 VRRP Link Local address

Other hardware I use allows me to specify the virtual link local address on IPv6 VRRP sessions. Its much easier to have the gateway be fe80::1 on every segment of the network. instead of the default VRRP link local address.
by roadracer96
Fri Jul 31, 2015 2:49 am
Forum: RouterOS v6 RC and v7 BETA
Topic: DHCPv6 Relay not saving config? 6.30.1
Replies: 0
Views: 443

DHCPv6 Relay not saving config? 6.30.1

It works fine. Just doesn't keep across reboots of router.

Anyone else? RB1100AHx2, 6.30.1
by roadracer96
Thu Jun 11, 2015 8:54 pm
Forum: Forwarding Protocols
Topic: What BGP setups need to be optimized
Replies: 58
Views: 18911

Re: What BGP setups need to be optimized

Multicore
SNMP monitoring/traps
Graceful restart
Flap dampening
Native multipathing


Would be nice:
IRR lookups
by roadracer96
Sat May 16, 2015 2:47 am
Forum: RouterOS v6 RC and v7 BETA
Topic: NPTv6 / RFC 6296 Support?
Replies: 19
Views: 3525

Re: NPTv6 / RFC 6296 Support?

You lost my attention at "ssl vpns are better". Lol. Really?
by roadracer96
Sat May 16, 2015 12:47 am
Forum: RouterOS v6 RC and v7 BETA
Topic: NPTv6 / RFC 6296 Support?
Replies: 19
Views: 3525

Re: NPTv6 / RFC 6296 Support?

Good point. Announce 2 prefixes with RA and with a low lifetime. Failover by disabling a prefix announcement. Any sort of nat outside of 6to4 for IPv6 only hosts should be abolished. The point of wasteful assignments is really not founded. The address space really is that vast that it doesn't matter.
by roadracer96
Sat May 16, 2015 12:41 am
Forum: RouterOS v6 RC and v7 BETA
Topic: NPTv6 / RFC 6296 Support?
Replies: 19
Views: 3525

Re: NPTv6 / RFC 6296 Support?

Don't do it. Do it the right way. Not the hack way. I'm not sure what the real costs are but a few thousand euros per month sounds pretty steep for announcing a prefix. It'd be a couple hundred dollars a month in the states. Cost of doing business. Do it right or don't do it. it's not a business. i...
by roadracer96
Fri May 15, 2015 1:54 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: NPTv6 / RFC 6296 Support?
Replies: 19
Views: 3525

Re: NPTv6 / RFC 6296 Support?

I'm personally against anything to do with nat and IPv6. We don't need another bandaid like nat originally was. Use IPv6 the way it was intended to be used. any comments on how to balance a few IPv6 uplinks? or just failover for the home Internet? Don't do it. Do it the right way. Not the hack way....
by roadracer96
Fri May 15, 2015 5:39 am
Forum: RouterOS v6 RC and v7 BETA
Topic: NPTv6 / RFC 6296 Support?
Replies: 19
Views: 3525

Re: NPTv6 / RFC 6296 Support?

I'm personally against anything to do with nat and IPv6. We don't need another bandaid like nat originally was. Use IPv6 the way it was intended to be used.
by roadracer96
Tue May 12, 2015 3:24 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: RSTP for CRS to build ring network
Replies: 23
Views: 5057

Re: Feature Request: RSTP for CRS to build ring network

Ethernet rings are l2. Vpls from Mikrotik is shoddy for that purpose. Not to mention convoluted solution to a small problem. Rings are very simple and very fast.
by roadracer96
Fri May 08, 2015 4:38 am
Forum: Forwarding Protocols
Topic: BGP & ICMP
Replies: 9
Views: 1081

Re: BGP & ICMP

The Mikrotik is announcing the IP range :-)
I meant the ips between you and them. The /30 between you is peeled off of a latger subnet that they might not announce.
by roadracer96
Thu May 07, 2015 3:35 am
Forum: Forwarding Protocols
Topic: BGP & ICMP
Replies: 9
Views: 1081

Re: BGP & ICMP

The ISP isn't announcing the peering ips most likely.
by roadracer96
Thu May 07, 2015 3:31 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: RSTP for CRS to build ring network
Replies: 23
Views: 5057

Re: Feature Request: RSTP for CRS to build ring network

Rings work better there than stp and are simpler. Mlag would be better for that scenario though. Mikrotik is really behind the times when it comes to basic redundancy considerations.
by roadracer96
Mon May 04, 2015 4:30 am
Forum: RouterOS v6 RC and v7 BETA
Topic: TCP Acceleration
Replies: 4
Views: 2024

Re: TCP Acceleration

That's not really a router function. That's a de facto saas application. You can setup squid to do the same thing. Not to mention the fact that it's a diminishing market.
by roadracer96
Thu Apr 23, 2015 7:49 pm
Forum: RouterBOARD hardware
Topic: CRS226-24G-2S+ Poor routing performance
Replies: 35
Views: 23789

Re: CRS226-24G-2S+ Poor routing performance

Switches in routers in the non "soft" world are the same thing these days.. IPs/routes get programmed in hardware and forwarded at line rate. I wish MT would actually start programming the forwarding tables in the switch chips to make them line rate routers.. that'd be the cats PJs. Kinda fun how pe...
by roadracer96
Thu Apr 23, 2015 7:44 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: RSTP for CRS to build ring network
Replies: 23
Views: 5057

Re: Feature Request: RSTP for CRS to build ring network

Rings work great.. STP, kinda well... sucks.. it works, but not super duper fast.

G8032 rings in a switched environment are awesome. No reason the feature shouldn't be included.
by roadracer96
Thu Apr 23, 2015 3:00 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Plex and browser in iOS does not work in Mikrotik
Replies: 2
Views: 784

Re: Plex and browser in iOS does not work in Mikrotik

Configuration problem. Plex works fine with my iOS devices.
by roadracer96
Sat Apr 11, 2015 12:19 am
Forum: RouterBOARD hardware
Topic: CCR IPSec performance
Replies: 39
Views: 13492

Re: CCR IPSec performance

Why not? It's a real world test ... Because first of all this is a testing i/o of your laptops and then network devices :) after testing with traffic generators you should always test with the type of traffic you will normally have to deal with as network admin... if your users use smb, ftp or nfs ...
by roadracer96
Sat Apr 11, 2015 12:15 am
Forum: RouterBOARD hardware
Topic: CCR IPSec performance
Replies: 39
Views: 13492

Re: CCR IPSec performance

Sounds damn close to what I got... And they kept telling me I was wrong. What numbers are correct? :) Maybe there is something wrong with your laptops? I do not like the idea to download some file in such tests... GRE over IPSEC between 2 CCRs will perform very fast if you do the speed test from on...
by roadracer96
Sat Feb 14, 2015 2:26 am
Forum: RouterBOARD hardware
Topic: CCR IPSec performance
Replies: 39
Views: 13492

Re: CCR IPSec performance

Sounds damn close to what I got... And they kept telling me I was wrong.
by roadracer96
Mon Nov 24, 2014 11:01 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CAPsMAN auto frequency
Replies: 38
Views: 22563

Re: CAPsMAN auto frequency

Doesn't matter if you are indoor or outdoor. If you want to use 80mhz channels in ac, you have to use dfs or only have 2 non overlapping channels.
by roadracer96
Mon Nov 17, 2014 8:09 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CAPsMAN auto frequency
Replies: 38
Views: 22563

Re: CAPsMAN auto frequency

In RouterOS 6.22 CAPsMANv2 frequency auto-select does NOT work. Every provisioned CAP lands on the same frequency. I haven't tried v2 but it works for me on v1. Did you try it on v1, and did it work for you on v1, too? One thing that I have noticed is that if I boot up all of my CAPs at the same ti...
by roadracer96
Sat Nov 15, 2014 1:49 am
Forum: General
Topic: 6.22 released!
Replies: 151
Views: 50911

Re: 6.22 released!

HE.net 6to4 tunnel works fine at home.. 6.19,6.20,6.21.1,6.22 MTU set to auto didn't work until 6.22 though. Currently running 1480 MTU and can pull 600+mbit across it up and down. CCR-1016. Also, as of the 6.21 release, I stopped MSS clamping in mangle with the new feature to auto clamp MSS on the ...
by roadracer96
Fri Nov 14, 2014 6:19 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CAPsMAN auto frequency
Replies: 38
Views: 22563

Re: CAPsMAN auto frequency

Auto select doesn't work. It did seem to sort of work in 6.19 Capsman. But not when the device first came up. Only if you disable/reenabled the interface after it rebooted. Then it would work. On 6.21 and 6.22, it seems about as useless as a box of rocks. But when are you going to (re)support TRUE ...
by roadracer96
Fri Nov 14, 2014 2:47 am
Forum: RouterOS v6 RC and v7 BETA
Topic: CAPsMAN auto frequency
Replies: 38
Views: 22563

Re: CAPsMAN auto frequency

Auto select doesn't work. It did seem to sort of work in 6.19 Capsman. But not when the device first came up. Only if you disable/reenabled the interface after it rebooted. Then it would work. On 6.21 and 6.22, it seems about as useless as a box of rocks. But when are you going to (re)support TRUE D...
by roadracer96
Wed Nov 12, 2014 8:20 pm
Forum: General
Topic: 6.22 released!
Replies: 151
Views: 50911

Re: 6.22 released!

Opened a case about 6.21.1 today... VRRP IPv6 no worky worky. Backup router flaps constantly. Was working on 6.19, broken in 6.21

Guessing that fix isn't in it...
by roadracer96
Thu Nov 06, 2014 7:51 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: EAP-TTLS/EAP-PEAP
Replies: 15
Views: 5560

Re: Feature Request: EAP-TTLS/EAP-PEAP

They aren't turned on right now, but you have to do it in the CLI, not through winbox or webfig. in the security profile or on the wireless interface there is an option for mschap username and mschap password and identity. Connects as a station just fine. Then we GRE tunnel back to a CCR1036 and do ...
by roadracer96
Thu Nov 06, 2014 7:45 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: GRE over IPSEC, CCR, VERY SLOW
Replies: 38
Views: 14225

Re: GRE over IPSEC, CCR, VERY SLOW

It is very difficult to find other vendors selling TILE. For now you should try my advice on having multiple tunnels. CPUs like TILE and GPUs are something new to mikrotik so there are bound to be difficulties making full use of it. Yeah. Because I really want to go from 10 tunnels to 40 just to ge...
by roadracer96
Tue Oct 28, 2014 5:02 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: GRE over IPSEC, CCR, VERY SLOW
Replies: 38
Views: 14225

Re: GRE over IPSEC, CCR, VERY SLOW

In my test setup between two CCRs, gre over ipsec had no problems fowarding 500Mbps with 1450 byte packets.
Its pretty obvious that your perfect conditions test case doesn't reflect real world performance.
by roadracer96
Tue Oct 28, 2014 4:59 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: EAP-TTLS/EAP-PEAP
Replies: 15
Views: 5560

Re: Feature Request: EAP-TTLS/EAP-PEAP

I haven't tried eap-ttls in station mode, but eap-mschapv2 does work in station mode. Works fine on our eduroam network.
by roadracer96
Tue Oct 07, 2014 4:36 am
Forum: RouterBOARD hardware
Topic: DO NOT USE CCR1036 WITH 2 BGP SESSIONS
Replies: 6
Views: 1540

Re: DO NOT USE CCR1036 WITH 2 BGP SESSIONS

Running 2 with 3 full v6 and v4 feed with OSPF and ospfv3. Was up to 48 days before going to 6.19.
by roadracer96
Wed Sep 24, 2014 1:22 am
Forum: RouterOS v7
Topic: Feature request: CAPsManager - roaming
Replies: 68
Views: 16749

Re: Feature request: CAPsManager - roaming

I understand the request and it is a good one, but just wanted to note, that you can already configure access list to disconnect client with bad signal, and the client will then reconnect to the nearest AP That's not even close to the capability of a fully managed zero handoff roaming situation. Ze...
by roadracer96
Wed Sep 10, 2014 9:33 pm
Forum: Forwarding Protocols
Topic: Loss of BGP function after 3-4 weeks
Replies: 16
Views: 2787

Re: Loss of BGP function after 3-4 weeks

I have a 2x 1036s running 3 full v4 and v6 feeds.. one is at 47 days uptime on 6.17 right now... the other was up to about 60 days before I rebooted to test something (6.15).

Plus some queuing and simple policy routing.
by roadracer96
Sat Sep 06, 2014 6:52 pm
Forum: Wireless Networking
Topic: Disassociate device (CoA, SNMP ...)
Replies: 15
Views: 3236

Re: Disassociate device (CoA, SNMP ...)

Radius comes from the controller. Not the ap. In your case it's both.
by roadracer96
Wed Sep 03, 2014 10:35 pm
Forum: General
Topic: v6.19 released
Replies: 256
Views: 88571

Re: v6.19 released

roadracer96,
please provide us (support@mikrotik.com) with support output file from your router.

I couldn't get one. Any time I tried to do that or export config, it would reboot. I had to net-install it.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 15