Community discussions

Search found 111 matches

by ScottReed
Wed Oct 17, 2018 9:59 pm
Forum: General
Topic: Feature request: BGP4-MIB (RFC 4273)
Replies: 32
Views: 5623

Re: Feature request: BGP4-MIB (RFC 4273)

+1 for this feature.
by ScottReed
Thu Sep 06, 2018 3:18 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

I believe we resolved this problem by using dielectric grease on the Ethernet connection on the AF24HD radio side. I believe it is a similar problem to the one listed here: @mducharme - That article appears to be unrelated to what this topic is in regards to. The issue here is that we are logging '...
by ScottReed
Thu Sep 06, 2018 3:11 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Did you find a solution for that problem? @Stril - No, I did not. We still have several AF links in the network which clock FCS errors at the Mikrotik devices. I believe we resolved this problem by using dielectric grease on the Ethernet connection on the AF24HD radio side. I believe it is a simila...
by ScottReed
Wed Mar 14, 2018 3:58 pm
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 31301

Re: v6.41.3 [current]

We have improved handling of operations on TILE based devices (CCRs). This fix will not affect anyone negatively, but might help in rare cases with different random problems. For example, there were users who used CCR1072 and CPU core was stuck on 100% usage due to IPsec HW encryption. This fix res...
by ScottReed
Fri Oct 13, 2017 5:51 pm
Forum: General
Topic: Misplaced ARPs
Replies: 6
Views: 814

Re: Misplaced ARPs

Update. Went in today and disabled check-gateway on both of my 0.0.0.0/0 default routes. Ran an export while sniffing traffic and sure enough the misplaced ARP requests went out again. Proceeded to disable both the default routes. Again, ran the export while sniffing traffic and again I logged ARP r...
by ScottReed
Mon Sep 18, 2017 10:51 pm
Forum: General
Topic: Misplaced ARPs
Replies: 6
Views: 814

Re: Misplaced ARPs

This is still an ongoing issue with no resolution. After many hours of troubleshooting, the "trigger" has been found to be caused by initiating a configuration export. /export compact file=export Without failure, every time the export is performed my upstream logs multiple misplaced ARPs. Mikrotik s...
by ScottReed
Fri Jul 21, 2017 3:36 pm
Forum: General
Topic: Misplaced ARPs
Replies: 6
Views: 814

Re: Misplaced ARPs

Any check-gateway statements in /ip route with the gateway IP set to the wrong IP for the interface? I do not believe so. Here is the route export. IP's masked. 1.1.1.2 = gateway of ISP on sfp-sfpplus1 2.2.2.20 = gateway of ISP on sfp-sfpplus2 /ip route add check-gateway=ping distance=1 gateway=1.1...
by ScottReed
Thu Jul 20, 2017 9:52 pm
Forum: General
Topic: Misplaced ARPs
Replies: 6
Views: 814

Misplaced ARPs

CCR1072-1G-8S+ rOS 6.39.2 There is an ongoing ticket for this with Mikrotik but I thought I'd ask about it here too... I've masked the MACs and IPs for security purposes. One of my upstream providers alerted me of my router sending out ARP requests for an IP in a subnet attached to a different inter...
by ScottReed
Wed May 17, 2017 4:25 pm
Forum: Forwarding Protocols
Topic: Multiple BGP sessions to one provider
Replies: 10
Views: 2683

Re: Multiple BGP sessions to one provider

Does your IPv6 peering use link-local addressing or globally-unique (public) addressing? I've seen some issues with link-local next hop in ROS's IPv6 BGP. Thanks for the reply. Both my interface to the exchange and interface to Zayo have global IPv6 addresses. I'm in a /64 at the exchange and /126 ...
by ScottReed
Tue May 16, 2017 3:35 pm
Forum: Forwarding Protocols
Topic: Multiple BGP sessions to one provider
Replies: 10
Views: 2683

Re: Multiple BGP sessions to one provider

I am having a similar issue. CCR1072 rOS 6.37.4 Yesterday I tried to bring up a second session with Zayo for IPv6. Full routes from them and one advertisement from me. Within 3 minutes my routing table is empty and the network is completely down. My OSPF instance is also affected. I get BGP Hold Tim...
by ScottReed
Sat May 06, 2017 3:45 pm
Forum: Forwarding Protocols
Topic: Netflow and AS numbers
Replies: 9
Views: 1408

Re: Netflow and AS numbers

Unfortunately I think they won't implement it that fast.
This has been requested 7 (!!!!!) years ago, see viewtopic.php?t=43853
:lol: yeah, I know.

But, wishful thinking on my part. It can't hurt to hope!
by ScottReed
Sat May 06, 2017 3:32 pm
Forum: Forwarding Protocols
Topic: Netflow and AS numbers
Replies: 9
Views: 1408

Re: Netflow and AS numbers

What was the response?
Has been added to the feature request list.

I also requested that it be added to a 6.37.6(bugfix) if possible. So people still on 6.37 in production environments don't need to make a risky upgrade to an entire new release.
by ScottReed
Sat May 06, 2017 3:26 pm
Forum: Forwarding Protocols
Topic: Netflow and AS numbers
Replies: 9
Views: 1408

Re: Netflow and AS numbers

Email support@mikrotik.com with your feature request. That is the official channel.
Already done! Received response almost immediately.
by ScottReed
Fri May 05, 2017 5:02 pm
Forum: Forwarding Protocols
Topic: Netflow and AS numbers
Replies: 9
Views: 1408

Re: Netflow and AS numbers

Hey Mikrotik Support, bump on this one! We need SrcAS and DstAS exported from Traffic Flow.

Thanks.
by ScottReed
Thu May 04, 2017 3:38 pm
Forum: General
Topic: RouterBOOT 3.33 Memory Test
Replies: 2
Views: 600

RouterBOOT 3.33 Memory Test

I have a CCR1072 out in production that intermittently crashes and wanted to run the memory test on it. Booted into the RouterBOOT menu and I do not see option "t" to run the test. I've ran this test on other boards in the past so not sure if this is a feature that has been eliminated or something e...
by ScottReed
Mon Mar 13, 2017 7:26 pm
Forum: General
Topic: ROS 6.38 serious DHCP server problem
Replies: 91
Views: 29891

Re: ROS 6.38 serious DHCP server problem

But it is worth to mention that this just will work in the meantime the device is not rebooted in which case it has to be applied again. This statement is correct. I had to reboot the affected router over the weekend and DHCP subsequently stopped working. I've setup a 'startup' scheduled script to ...
by ScottReed
Fri Mar 10, 2017 6:27 pm
Forum: General
Topic: ROS 6.38 serious DHCP server problem
Replies: 91
Views: 29891

Re: ROS 6.38 serious DHCP server problem

Problem in v6.38.5 also. Upgraded a CCR1036 this morning per Mikrotik support request on another issue entirely. DHCP stopped working after the update.

Seeing "SERVER offering lease x.x.x.x without success" in log.

I disabled RSTP on the bridge interface and the issue appears to be resolved.
by ScottReed
Tue Feb 28, 2017 8:58 pm
Forum: General
Topic: Q-in-Q 802.1ad MTU Issue
Replies: 1
Views: 876

Re: Q-in-Q 802.1ad MTU Issue

Well, Calix just informed us that their 801g ONT is fixed at 1496. So, that explains why i'm losing 4-bytes and fragmenting.
by ScottReed
Tue Feb 28, 2017 8:37 pm
Forum: General
Topic: Q-in-Q 802.1ad MTU Issue
Replies: 1
Views: 876

Q-in-Q 802.1ad MTU Issue

I am wracking my head against the wall on this issue for two days now. I cannot get 1500 byte MTU without fragmentation. 1496 is the cap. 4-byte difference has got to be q-in-q. I think? the resolution right now is to have customers set WAN port MTU to 1496. But, I'd like to nix this issue so that i...
by ScottReed
Tue Jul 26, 2016 10:51 pm
Forum: Announcements
Topic: v6.36 [current] is released!
Replies: 183
Views: 42165

Re: v6.36 [current] is released!

Pantech UML295 LTE modem support appears to be broken in 6.36 on RouterOS x86. Downgraded back to 6.35.2. Yes There is issue with all simple CDC_Ether and RNDIS modems who uses web config  in 6.36 we need to add exact ID for support.  One client have already sent us Pantech UML295 LTE supout.rif fi...
by ScottReed
Tue Jul 26, 2016 1:59 pm
Forum: Announcements
Topic: v6.36 [current] is released!
Replies: 183
Views: 42165

Re: v6.36 [current] is released!

Pantech UML295 LTE modem support appears to be broken in 6.36 on RouterOS x86.

Downgraded back to 6.35.2.
by ScottReed
Tue Jun 07, 2016 5:22 pm
Forum: General
Topic: is there any way to log NAT?
Replies: 20
Views: 12532

Re: is there any way to log NAT?

Sorry for bringing this old post back to life. We just recently were challenged to figure out a logging solution to see NATs. Specifically because of third party analytical firms like IP Echelon sending us emails about users downloading/sharing illegal content. So the question here is how do you gen...
by ScottReed
Wed May 18, 2016 4:45 pm
Forum: The Dude
Topic: The Dude, v6.36rc test builds.
Replies: 112
Views: 20455

Re: The Dude, v6.36rc test builds.

Any word on adding SNMP Trap capability?
by ScottReed
Fri Apr 08, 2016 12:01 am
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

We had experiment those kind of issue with CCR and RB1100AHx2 few month ago, and then decide to put it on test in lab. Setup two airfiber with radio at very low power cause distance is about 20 meters in our warehouse. No FCS error at all for about two hours transmitting at 500/500 Mbps using BTest...
by ScottReed
Mon Feb 08, 2016 5:16 pm
Forum: General
Topic: Port flapping (ether6 link down/up) on RB3011UiAS-RM
Replies: 29
Views: 14603

Re: Port flapping (ether6 link down/up) on RB3011UiAS-RM

You've checked the obvious like the patch cord from ETHER6 to your switch? You've tried another port on your switch/RB? I took a look at your configuration and one thing I did notice is your switch configuration. I'm assuming you want all the ports ( except ETHER1 and the SFP ) in a switch configura...
by ScottReed
Mon Feb 08, 2016 4:41 pm
Forum: Scripting
Topic: "print" to file truncating results at 80 columns
Replies: 11
Views: 2066

Re: "print" to file truncating results at 80 columns

did you try "print detail" and "print detail without-paging" ? Normis, thank you so much for your reply. Yes, I have. That works fine for preserving all the details, but the output is not in selectable columns. I could write some code to take the "print-details" output and get the data I want, but ...
by ScottReed
Mon Feb 08, 2016 4:04 pm
Forum: Scripting
Topic: "print" to file truncating results at 80 columns
Replies: 11
Views: 2066

Re: "print" to file truncating results at 80 columns

This is what you need - very nice feature really. http://wiki.mikrotik.com/wiki/Manual:Console_login_process Just use "admin+120w" as the username instead of "admin". Sam Thank you, but as stated in my OP, I already tried increasing the terminal width. It does not fix the issue with "print" truncat...
by ScottReed
Thu Feb 04, 2016 4:19 pm
Forum: Scripting
Topic: "print" to file truncating results at 80 columns
Replies: 11
Views: 2066

Re: "print" to file truncating results at 80 columns

I assume that you are worried that some of the fields are not visible.? 'print details' outputs all parameters and doe snot truncate anything. First, thank you for your reply. It is much appreciated. Unfortunately, that is not the desirable output for this particular case. While 'print detail' does...
by ScottReed
Tue Dec 22, 2015 5:21 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Setting flow control to "auto" on the CCR is not helping.

To those of you who were successful with this, are you also enabling flow control in the AF?
by ScottReed
Thu Dec 10, 2015 3:13 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

@bycabral - Can you confirm your success with Flow Control set to "auto"?

@vipnet - Please provide the source of this information. Who at UBNT told you they recalled Gen 1 AF's?
by ScottReed
Thu Oct 08, 2015 4:35 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

@bajodel

No, I do not. Only "Rx FCS Error"
by ScottReed
Wed Aug 26, 2015 5:05 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

@diegodriguez

Thanks for the suggestion. I thought you were on to something because I made these changes on one AF5 and one AF24 link and my FCS errors stopped. But only for seven minutes and then went back to the 1 minute intervals!!

So, back to square one.
by ScottReed
Tue Jul 21, 2015 2:43 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

UPDATE Yesterday we installed a brand new AF5 link. Included new cabling (UBNT ToughCable) and UBNT end connectors. The end at a CCR1036 is logging FCS Errors. The end at a RB1100 AHX2 is not logging FCS Errors. So the common denominator here is CCR. But, if you put a switch between the radio and t...
by ScottReed
Mon Jul 20, 2015 5:45 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Not seeing any errors in the dmesg on any of the AF24 radios. 'ifconfig' is clean too. I use VLANs at the site routers, but on other interfaces where customer networks are configured. I do not have any tagged VLAN traffic leaving any of my routers. No VLANs on the interfaces where the AF24's are pat...
by ScottReed
Mon Jul 20, 2015 4:20 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Yeah, they are in production. I don't have a choice really, as they are two main "arteries" back to my core router in locations where we need large available bandwidth. We are talking about doing some licensed links which would push one of these AF24 links into a higher path cost and become a backup...
by ScottReed
Mon Jul 20, 2015 3:48 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

No, no news. No fix. The issue is prevalent on CCR1016 and CCR1036 at my end. In an OSPF ring consisting of 2x 1016's and 1x 1036, they all log FCS errors on the ports in which the AF24's are attached. Furthermore, one of those aforementioned 1016's has an AF5 link to a RB1100. While the 1016 logs F...
by ScottReed
Fri Jul 17, 2015 7:47 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Issue is still prevalent with all AF24, including replacements and brand new units.
by ScottReed
Fri May 15, 2015 10:51 pm
Forum: Scripting
Topic: "print" to file truncating results at 80 columns
Replies: 11
Views: 2066

"print" to file truncating results at 80 columns

When running this... /ip dhcp-server lease print file=dhcp_leases where ! dynamic and status="bound" The resulting file truncates the output and abruptly ends at column 80. I have tried via SSH with increased column width. Tried via Winbox terminal. Same results. If I run the command at the console ...
by ScottReed
Thu Mar 26, 2015 2:26 pm
Forum: General
Topic: CRL size limit exceeded, ignoring
Replies: 15
Views: 3396

Re: CRL size limit exceeded, ignoring

CCR1036-12G-4S... still happening with 6.27.
by ScottReed
Wed Mar 11, 2015 6:30 pm
Forum: General
Topic: Feature Request: IPerf
Replies: 50
Views: 11051

Re: Feature Request: IPerf

This would be a welcome addition.

+1
by ScottReed
Thu Feb 26, 2015 6:03 pm
Forum: General
Topic: OSPF and choice of addressing
Replies: 6
Views: 1205

Re: OSPF and choice of addressing

The IP addresses in your config don't match up to the IP's on your diagram for PPPoE Server and AP1. Also, you show no config for Router BTSC. Also, you specify a loopback (lo) but you never add its subnet to /routing ospf network . You should, as it will tie the lo interface to the default instance...
by ScottReed
Thu Feb 26, 2015 3:55 pm
Forum: General
Topic: OSPF and choice of addressing
Replies: 6
Views: 1205

Re: OSPF and choice of addressing

Hey @ibm - Sorry if I'm missing something here but which router is your core where your internet connection ties into your network? I'm assuming you're running a single OSPF instance all in the backbone area? The router which maintains the default route to the internet should be the only router and ...
by ScottReed
Thu Feb 26, 2015 3:36 pm
Forum: Forwarding Protocols
Topic: EoIP and routing
Replies: 7
Views: 3292

Re: EoIP and routing

What you are doing is not recommended. If you have a 10.0.0.0/8 subnet and you want it flat layer2 across your network, then why are you even using routers? You should have one core router with your internet connection and then just uplink to a switch and build off that across wireless links. Bear i...
by ScottReed
Thu Feb 26, 2015 3:21 pm
Forum: Forwarding Protocols
Topic: OSPF stuck in Init State
Replies: 5
Views: 4092

Re: OSPF stuck in Init State

I have struggled with OSPF across wireless links in my network for some time now. As stated in my original posts, I switched from BROADCAST to NBMA and it helped at the time. But, as I've upgraded RouterOS and upgraded AirOS, I've since reverted back to BROADCAST. The bottomline here is that the OSP...
by ScottReed
Wed Jan 14, 2015 4:18 am
Forum: General
Topic: Centralized RADIUS for PPPoE Authentication
Replies: 2
Views: 973

Re: Centralized RADIUS for PPPoE Authentication

@NathanA

I wish that was the case. I went into /tool user-manager router and ensured I had an entry for each external facing IP of each router.
by ScottReed
Wed Jan 14, 2015 3:00 am
Forum: General
Topic: CCR1036-12G-4S now locking up constantly
Replies: 4
Views: 1379

Re: CCR1036-12G-4S now locking up constantly

@tonyd I had a CCR1016-12G with similar issues. I went to utilize port 12 and every time the port went active, the router rebooted and logged a kernel failure . At the time I was migrating to a CCR1036-12G-4S so I just went ahead and swapped the products. I took the 1016 back to the shop and was abl...
by ScottReed
Tue Jan 13, 2015 11:41 pm
Forum: General
Topic: Centralized RADIUS for PPPoE Authentication
Replies: 2
Views: 973

Centralized RADIUS for PPPoE Authentication

I have a test lab setup with three routers using OSPF. I'm currently working on a project to implement PPPoE authentication into our production network. One one router I am running UserManager and on the other two I have setup PPPoE Servers/Profiles and have opted to have the authentication requests...
by ScottReed
Tue Jan 13, 2015 2:51 am
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

Re: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquit

@wispvt As stated in my post, I resolved this by replacing the 1200 with an 1100. I will also point out that this issue started to occur on more of my 1200's over the last six months. In every instance we just swapped with 1100's. Furthermore, the majority of the routers that did have the issue were...
by ScottReed
Thu Oct 23, 2014 7:28 pm
Forum: RouterBOARD hardware
Topic: CCR1036-12G-4S and Winbox MAC Access
Replies: 24
Views: 8773

Re: CCR1036-12G-4S and Winbox MAC Access

This is still an issue.

Just got new CCR1036-12G-4S and cannot connect via MAC Winbox.

Same issue with my CCR1016

Have tried from multiple laptops.
by ScottReed
Fri Oct 03, 2014 7:52 pm
Forum: Forwarding Protocols
Topic: OSPF Interface Status "Unknown Network Type"
Replies: 1
Views: 881

OSPF Interface Status "Unknown Network Type"

Why am I seeing this?

Doesn't appear to be causing me any problems, but it looks like it started AFTER rOS v6.11

Image

I am seeing this on RB1100 AHX2 running any rOS after v6.11

Typically in my situation this field would say "BROADCAST"

Thanks,
Scott
by ScottReed
Thu Sep 11, 2014 7:30 am
Forum: RouterBOARD hardware
Topic: CCR SNMP interface query issues
Replies: 6
Views: 1829

Re: CCR SNMP interface query issues

Thanks for the helpful post. This has been burning me for a while now. I had Cacti set for IN/OUT Bits Per Second Total Bandwidth and all my interfaces exceeding 100mbps were clipping. I had to go into Graph Management, select the device to filter, and then selected each interface and DELETE. I also...
by ScottReed
Wed Aug 06, 2014 1:41 am
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

FINAL POST The response that I got after weeks of troubleshooting, swapping radios, re-cabling, etc... I suggest to fill up an RMA for the device. You can check with your local reseller/distributor if they can help you with the RMA of the device. This response comes after they clearly knew I had sw...
by ScottReed
Tue Jul 15, 2014 4:52 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

As I stated earlier in the post - the issue is not related to Mikrotik. The original symptoms had me dead set that it was a CCR issue but after working through days of troubleshooting with UBNT and on my own, I have narrowed it down to the UBNT device - an AF24 in my case. UBNT has been working on t...
by ScottReed
Sat Jun 28, 2014 2:36 am
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

RouterOS downgrade did not fix it. I put a managed switch in between the AF 24 and the CCR. As stated by someone above, the switch begins to log errors on the port connected to the AF 24 and the issue is eliminated from the router. I went back to UBNT support on this and am awaiting a reply. This is...
by ScottReed
Tue May 27, 2014 9:53 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

@tgrand Interesting, but as @marcin21 points out, he has no problems with CCR on RouterOS v6.5. My scenario is very similar to his, I was also pushing 400-450mbps and no FCS Errors while on RouterOS v6.7 My problem started after the upgrade to v6.12 I will be downgrading next Monday and will post re...
by ScottReed
Fri May 16, 2014 7:39 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

@colinhowlin

Let me know what RouterOS v6.13 does for you. Also, if it has a new firmware upgrade in it too.

We get the FCS errors logged one a minute, both ends of the link.

CCR at root. RB1200 at remote.

Never saw these ever before until I upgraded the CCR to v6.12

Scott
by ScottReed
Fri May 09, 2014 11:42 pm
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

SOLVED - Re: RouterOS v6.11 and Ethernet issues with Ubiquit

ISSUE RESOLVED

I pulled the RB1200 and installed an RB1100AHx2 running RouterOS 6.10 and firmware 3.10 <--- SOLUTION

No issues for over 48 hours.

I will edit and mark solved once I feel the issue is gone.
by ScottReed
Tue May 06, 2014 8:12 pm
Forum: General
Topic: Gateway outside IP subnet
Replies: 4
Views: 1556

Re: Gateway outside IP subnet

This Thompson device, is it setup to terminate a PPPoE or PPPoA with a DSL provider? Is it setup as a bridge (non-router mode)? On your Mikrotik router, please ensure that your DHCP client is configured to "Add Default Route" set to YES. Make sure the DHCP Client is configured on the interface that ...
by ScottReed
Tue May 06, 2014 8:03 pm
Forum: General
Topic: RB433AH dead after upgrade 4.17 -> 5.2
Replies: 9
Views: 1648

Re: RB433AH dead after upgrade 4.17 -> 5.2

We use DLI products. Their Web Power Switch and PoE Switch POER24. http://www.digital-loggers.com/ Great products and will autoping devices and cycle power to specific ports on loss of ping. Whenever I remote upgrade a router I ALWAYS setup an autoping to it just in case the router doesn't come back...
by ScottReed
Mon May 05, 2014 6:16 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

@sasskass

I am aware of the changes to ethernet.

I am running firmware v3.13 as of the day I upgraded the CCR to v6.12

I have enabled flow control on both the AirFibers and on the CCR. Doesn't seem to help.

Thanks,
Scott
by ScottReed
Sun May 04, 2014 6:20 am
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

@IPANetEngineer The speed and duplex is matched at both ends using autonegotiation. I double checked to make sure the radios and the router interfaces are all 1000/FULL - and they are. There are no speed/duplex issues. I downgraded both AirFibers to 1.5. I continue to see one "FCS ERROR" per minute ...
by ScottReed
Fri May 02, 2014 6:08 pm
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

Re: RouterOS v6.11 and Ethernet issues with Ubiquiti

Issue is still prevalent. I downgraded from 6.11 to 6.10. Replaced the ethernet cable. Changed ports on the router. Changed ports on the PoE switch. Changed the patch cable. Changed the radio. Even went as far as disabling the EoIP tunnel on the interface. Ran great for seven hours and went down aga...
by ScottReed
Tue Apr 29, 2014 5:42 pm
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

Re: RouterOS v6.11 and Ethernet issues with Ubiquiti

@n21roadie - Isn't that the truth now, isn't it!

I'm hoping some other people chime in here about this.
by ScottReed
Tue Apr 29, 2014 5:28 pm
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

Re: RouterOS v6.11 and Ethernet issues with Ubiquiti

Thank you for your replies, but I'm not jumping on the "upgrade firmware" bandwagon anymore.

Per the release notes for v6.11 it was indicated that TX/RX Flow Control was added to ETHERNET. Obviously there is something more happening here which is affecting link state with the radios.
by ScottReed
Tue Apr 29, 2014 5:23 pm
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

Re: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error

OK, slightly updated information to share. First of all, the CCR on v6.12 is logging hundreds of "fcs error on link" events. About one per minute. The problem started on 4/24/14 when I upgraded the CCR from v6.7 to v6.12. To be exact, it started at 11:22 exactly one minute after I upgraded the route...
by ScottReed
Tue Apr 29, 2014 8:34 am
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

Re: RouterOS v6.11 and Ethernet issues with Ubiquiti

Yes. RouterOS firmware updated.
by ScottReed
Tue Apr 29, 2014 7:01 am
Forum: General
Topic: RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS
Replies: 76
Views: 29147

RouterOS v6.x with Ubiquiti AirFiber 24 v2.0 - RX Error FCS

Have an AF 24 link running v2.0 firmware. Root end terminated at a CCR1016-12G on RouterOS v6.12. Remote end terminated at a RB1200 on RouterOS v6.7. Using stock PoE injectors. UBNT ToughCable all within distance spec. Grounded. Since going to AF 24 v2.0 I'm seeing ridiculously high Rx FCS ERRORs an...
by ScottReed
Tue Apr 29, 2014 6:54 am
Forum: General
Topic: SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti
Replies: 14
Views: 3041

SOLVED - RouterOS v6.11 and Ethernet issues with Ubiquiti

Recently upgraded six RB1200 routers to v6.11. Three went from v5.26 and three went from v6.7. Now, we experience unstable ethernet connectivity to Ubiquiti radios (NanoBridge and RocketM5). I am seeing negotiated link speed fluctuating from 100/FULL to 10/HALF to 10/FULL. Hard setting the radio and...
by ScottReed
Fri Feb 21, 2014 6:14 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

Re: OSPF "Flapping" Issues

Mikrotik, are you investigating this?

If not then please provide me assistance with MPLS/VPLS configuration.

We continue to sink thousands of dollars into your gear and it's the least you could do.

Thanks,
Scott
by ScottReed
Mon Feb 17, 2014 6:44 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

Re: OSPF "Flapping" Issues

Bysard - I hear ya' about RIP! Trust me, I'd use it exclusively if I could but I need the instantaneous fail over that OSPF provides. IPAN - In regards to MTU, that makes the most sense and we have already addressed that at a few locations but the problem persists. I'm assuming you are making refere...
by ScottReed
Tue Feb 11, 2014 5:08 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

Re: OSPF "Flapping" Issues

When I say OSPF and no EoIP I basically mean a wireless link that does not have an EoIP tunnel configured between the two routers the link spans. That doesn't mean that either router doesn't have EoIP configured on another link. We do not use VLANs. The issue is prevalent across any links stemming f...
by ScottReed
Thu Jan 23, 2014 10:33 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

Re: OSPF "Flapping" Issues

I have, but I have not tried it. I do not have any experience with that.

Do you mind maybe sharing your configuration? Just a snippet would be helpful.

Thanks,
Scott
by ScottReed
Wed Jan 22, 2014 10:49 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

Re: OSPF "Flapping" Issues

That's a hard question to answer because of the diversity of sites we have and user levels. First off, we use EoIP to keep an old legacy layer 2 network running as we attrition people off to UBNT and onto our routed L3 network. So basically at most of our sites we have legacy gear + new gear and a r...
by ScottReed
Wed Jan 22, 2014 9:35 pm
Forum: Forwarding Protocols
Topic: OSPF "Flapping" Issues
Replies: 14
Views: 8172

OSPF "Flapping" Issues

All - For months now we have been struggling with OSPF "flapping" where OSPF will simply lose adjacency with a neighbor and then come back up. I opened an issue with Mikrotik about it back in November and was told to upgrade to RouterOS v6.x. We have thirty+ routers, but I upgraded where I could. Th...
by ScottReed
Mon Oct 28, 2013 11:10 pm
Forum: General
Topic: EoIP slow high latency
Replies: 13
Views: 6884

Re: EoIP slow high latency

I know this is an older post, but we were struggling with the same issue of high latency across EoIP tunnels via wireless UBNT links. In a nutshell, we are using EoIP to tunnel legacy gear running in a flat layer 2 network across all our new routed links. After a lot of screwing around we found the ...
by ScottReed
Mon Oct 28, 2013 11:05 pm
Forum: General
Topic: Firewall Assistance
Replies: 1
Views: 560

Firewall Assistance

All - I have a fairly large network consisting of 26 Mikrotik routers, predominantly RB1200's. Not going to use real IP's below... Overview Each router has a 1.1.x.x/22 subnet off it and then we do 2.2.2.x/29 backhaul links off other interfaces and run OSPF. Some sites have redundancy, some do not. ...
by ScottReed
Fri Jun 14, 2013 1:58 am
Forum: Forwarding Protocols
Topic: OSPF Will not form full adjacency
Replies: 9
Views: 4268

Re: OSPF Will not form full adjacency

bney - You may have just solved the SAME issue for me. I could not get OSPF to run over a PtP link with RocketM5's running v5.5.6 with multicast enabled in Advanced. Also have another PtP link with the same issue, RocketM5's running v5.5.4 - multicast enabled in Advanced. Changed to NBMA and right u...
by ScottReed
Fri Jun 14, 2013 1:53 am
Forum: Forwarding Protocols
Topic: OSPF stuck in Init State
Replies: 5
Views: 4092

Re: OSPF stuck in Init State

Just found this: http://forum.mikrotik.com/viewtopic.php?f=14&t=70108 I changed the OSPF interface from Broadcast to NBMA. Appears to be working now... I have absolutely no clue why this would solve my issue, as I have used broadcast on all my links and run OSPF without issue. The PTP link consists ...
by ScottReed
Fri Jun 14, 2013 1:16 am
Forum: Forwarding Protocols
Topic: OSPF stuck in Init State
Replies: 5
Views: 4092

OSPF stuck in Init State

We have been having some headaches with OSPF in our "backbone" area. About a year ago we started to route our network and began by installing an RB1200 at our largest tower site. Our "core" router is also an RB1200 and resides at our fiber handoff location. We built a dedicated wireless link between...
by ScottReed
Mon Oct 22, 2012 8:04 pm
Forum: Beginner Basics
Topic: Populating email BODY with output of "/print"
Replies: 4
Views: 853

Re: Populating email BODY with output of "/print"

@deejayq - "get" works great, but how do I get all the entries in a list? I'm assuming some "for" loop?

@mrz - That's what I have been doing, but i'm tired of having to open an attachment on my phone when the message arrives.

Thanks,
Scott
by ScottReed
Mon Oct 22, 2012 2:58 am
Forum: Beginner Basics
Topic: Populating email BODY with output of "/print"
Replies: 4
Views: 853

Populating email BODY with output of "/print"

Trying to do this: /tool e-mail send tls=yes to="someone@somewhere.com" subject="Current 172.30.6.0s-IN_USE" body="$[/ip firewall address-list print without-paging where list=172.30.6.0s-IN_USE]" Email comes through fine but BODY is empty. Instead, the printed output is sent to the console. How can ...
by ScottReed
Sat Sep 29, 2012 10:56 pm
Forum: General
Topic: Segmenting customer traffic
Replies: 0
Views: 403

Segmenting customer traffic

I am building a network that currently has two remote sites and one main tower site where my fiber comes in and I am co-located. The remote sites will house access points for customer access. I'm trying to develop a plan to segment the customer traffic as to protect my management network. I have RB1...
by ScottReed
Tue Jan 18, 2011 8:26 pm
Forum: General
Topic: EoIP Config with VLAN
Replies: 0
Views: 666

EoIP Config with VLAN

Hi all - I have nine remote RB433's with HughesNet connections that I use EoIP tunnels to make a connection back to a central location for running Dude and admin purposes. Is there a way I can put all of this admin traffic across the EoIP tunnels into a single VLAN? Below is a snippet configuration ...
by ScottReed
Thu Jul 08, 2010 6:31 am
Forum: General
Topic: RB433 - Wireless Interface Anomalies
Replies: 3
Views: 810

Re: RB433 - Wireless Interface Anomalies

I have just performed the fw upgrade to 2.23 on one of the RB433's. Where are these fw upgrade changelogs kept? I poked around Mikrotik website but was unable to find any information.

Thanks,
Scott
by ScottReed
Wed Jul 07, 2010 8:28 pm
Forum: General
Topic: RB433 - Wireless Interface Anomalies
Replies: 3
Views: 810

Re: RB433 - Wireless Interface Anomalies

Was onsite at one of the locations experiencing the problem and noticed that the Wireless Interface shows as enabled but not running under Interfaces. The only resolution is a reboot.

Please, any ideas?

Thanks,
Scott
by ScottReed
Fri Jun 25, 2010 3:04 am
Forum: General
Topic: RB433 - Wireless Interface Anomalies
Replies: 3
Views: 810

RB433 - Wireless Interface Anomalies

I have 12 identical RB433's w/ R52h wifi cards. Running OS 4.5. Each RB433 has a HughesNet HN9000 on the Ether1 interface and the R52h hosting DHCP service and hotspot. Ether 2 and 3 disabled. In two of my locations I have consistently been experiencing an issue where the wireless interface stops re...
by ScottReed
Fri Apr 02, 2010 9:54 pm
Forum: The User Manager
Topic: UM 4.5 - User Search
Replies: 5
Views: 1771

Re: UM 4.5 - User Search

Bookmarked the link. Now this is starting to make sense!

Thank you very much for your help. I really appreciate it.

Scott
by ScottReed
Fri Apr 02, 2010 6:14 pm
Forum: The User Manager
Topic: UM 4.5 - User Search
Replies: 5
Views: 1771

Re: UM 4.5 - User Search

What you've shown me is exactly what I want. I appreciate your time. But, I do not know where you are grabbing that screen shot from. My User Manager 4.5 looks completely different. :? I access User Manager from http:// router ip /userman/ Is there another frontend that I am unaware of? Thanks, Scott
by ScottReed
Wed Mar 31, 2010 11:55 pm
Forum: The User Manager
Topic: UM 4.5 - User Search
Replies: 5
Views: 1771

Re: UM 4.5 - User Search

Please, anyone?

There must be away to modify the columns within User Manager when viewing/adding users.

Or, at a minimum, how can I dump a list of all the users with passwords in a clean CSV? Exporting from the terminal and then trying to delimit within Excel does not work well.

Thanks,
Scott
by ScottReed
Fri Mar 26, 2010 10:15 pm
Forum: The User Manager
Topic: UM 4.5 - User Search
Replies: 5
Views: 1771

UM 4.5 - User Search

Am I missing something? :? Why can I not search by first / last name in User-Manager? I've seen older posts on here about the functionality working - but I cannot figure it out. Edit: And, that leads me to one other question: Why can you not choose which columns to display in the Users view? Thanks,
by ScottReed
Thu Mar 04, 2010 7:03 pm
Forum: Beginner Basics
Topic: Help, Web Proxy on RB433
Replies: 1
Views: 675

Re: Help, Web Proxy on RB433

There are easy to follow docs on setting up the proxy in RouterOS. Just make sure you create a firewall filter rule to block access to port 8080 coming IN on your internet interface. Also, you will need to create a firewall nat rule to forward requests for port 80 to port 8080. This will create a tr...
by ScottReed
Tue Feb 23, 2010 1:02 am
Forum: Beginner Basics
Topic: Replicating Configurations
Replies: 0
Views: 561

Replicating Configurations

This is not a question, but more a How-To on replicating a standard configuration to other routerboards. I'm putting this together because I had a real need for this in my application and I found some other posts from people receiving "short" answers and being told that the necessity to do this is "...
by ScottReed
Mon Jan 18, 2010 4:58 pm
Forum: The User Manager
Topic: User "Group" question
Replies: 4
Views: 1465

Re: User "Group" question

Bax -

Thanks. No, I am not using PPP profile. I am using 'hotspot' profile for RADIUS.
by ScottReed
Fri Jan 15, 2010 7:12 pm
Forum: The User Manager
Topic: User "Group" question
Replies: 4
Views: 1465

User "Group" question

I have installed User Manager, configured and used the local RADIUS server - configured per the documentation. When I create a User in User Manager can I use one of my two Hotspot User Profiles and assign it to the user? For example, I have two pre-defined profiles in /ip hotspot user profile and ea...
by ScottReed
Wed Dec 23, 2009 8:25 pm
Forum: Beginner Basics
Topic: RouterOS is blocking internet connection sharing
Replies: 5
Views: 2440

Re: RouterOS is blocking internet connection sharing

From what I can tell from your post, you don't have any Mikrotik products involved at your end at all. It appears that your T41 has an ISP provided PCMCIA card that establishes your internet connection. I would use ICS on the T41 and treat the WRT54G as a standard access point with switch instead of...
by ScottReed
Mon Dec 21, 2009 6:48 pm
Forum: Beginner Basics
Topic: v4.3 and RB433's
Replies: 4
Views: 1230

Re: v4.3 and RB433's

I finally got it to downgrade via the serial console. This probably would have worked from the beginning, but I could not connect to the router using the standard 115200 8N1 console config. Ended up working at 2400 8N1 - go figure. Not sure what sparked me to try this... I had another RB433 that I h...
by ScottReed
Thu Dec 17, 2009 10:33 pm
Forum: Beginner Basics
Topic: v4.3 and RB433's
Replies: 4
Views: 1230

v4.3 and RB433's

Upgraded from 4.2 to 4.3 to check out the spectrum analyzer on my RB433. After reboot I am now experiencing intermittent ethernet connectivity on all three ports. Cannot MAC Telnet. Cannot access the device.

How can I downgrade without losing the config?

Thanks
by ScottReed
Wed Nov 18, 2009 12:13 am
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

/ip hotspot profile set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot http-proxy=0.0.0.0:0 login-by=http-chap name=default rate-limit="" smtp-server=\ 0.0.0.0 split-user-domain=no use-radius=no add dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot http-proxy=0.0.0.0:0 ...
by ScottReed
Tue Nov 17, 2009 11:47 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

Did some more messing around and found that if you create the rule as you initially stated and put it before the hotspot rules then it works as we expected and the subsequent hs-input rule is no longer even processing packets. Actually, the subsequent rule isn't even processing packets after the cli...
by ScottReed
Tue Nov 17, 2009 10:11 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

What version RouterOS are you using? 4.2 Can you post the output of "/ip firewall filter print all"? I'm curious what the differences are. Flags: X - disabled, I - invalid, D - dynamic 0 D chain=forward action=jump jump-target=hs-unauth hotspot=from-client,!auth 1 D chain=forward action=jump jump-t...
by ScottReed
Tue Nov 17, 2009 8:43 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

Got it! You need to use hs-input for the chain!
/ip firewall filter chain=hs-input action=drop protocol=tcp src-address=!192.168.100.0/30 dst-port=21,22,23,80,443,8291,8728
by ScottReed
Tue Nov 17, 2009 8:35 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

It has something to do with the Hotspot. I disabled the Hotspot and the rule works as we expected it to.

I am going to keep digging.
by ScottReed
Tue Nov 17, 2009 7:50 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

I'll show the rules I added - anything else was added by the HS when I turned it on. I do not have an Mangle rules. Filter Rules - /ip firewall filter add chain=input action=drop protocol=tcp src-address=!192.168.100.0/30 dst-port=21,22,23,80,443,8291,8728 NAT Rules - this is the only one I added. T...
by ScottReed
Tue Nov 17, 2009 7:42 pm
Forum: Beginner Basics
Topic: A simple router with rules
Replies: 1
Views: 566

Re: A simple router with rules

how simply can i configure a routerboard 433 with no wireless needed Don't buy a wireless mini-pci card for the RB433 and you won't have a wireless interface to configure. :D act like a simple router ADSL WAN on eth1 You will plug the DSL modem from the ISP into ether1 (if you are using PoE then yo...
by ScottReed
Tue Nov 17, 2009 6:58 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Re: Block access to the default MT Admin page

OK, I removed the other rules and tried adding the new filter rule you provided. Same thing. It is processing packets but I can still access that page. Both ether2 (1.0/30) and wlan (20.0/27) are part of a hotspot profile. ether1 (0.0/30) is a HughesNet sat modem, the default gateway and is masquera...
by ScottReed
Tue Nov 17, 2009 5:32 pm
Forum: Beginner Basics
Topic: Block access to the default MT Admin page
Replies: 14
Views: 4084

Block access to the default MT Admin page

I want to prevent access to the default MT Admin page that allows access to Webbox, Graphs, Winbox, Docs, etc... I changed /ip services so that Winbox, SSH and www are only available from my mgmt interface (ether3 100.0/30). The rest of the services are disabled. After doing that I could still acces...
by ScottReed
Fri Nov 13, 2009 10:45 pm
Forum: General
Topic: RouterOS + HughesNet 7000/9000
Replies: 1
Views: 532

Re: RouterOS + HughesNet 7000/9000

I figured it out. The subnet mask of the Sat Modem is /30 (255.255.255.252) I setup the interface with the correct subnet and then turned on masquerading and everything is working perfect. /ip address add address=192.168.0.2/30 interface=ether1 /ip route add gateway=192.168.0.2 /ip firewall nat add ...
by ScottReed
Fri Nov 13, 2009 7:52 pm
Forum: General
Topic: RouterOS + HughesNet 7000/9000
Replies: 1
Views: 532

RouterOS + HughesNet 7000/9000

I am running RB433's with RouterOS 4.2. Migrating from old SOHO WiFi router's to the RB433 in seven locations with HughesNet installations. I cannot seem to get any of the ethernet ports to obtain an address from my HughesNet HN7000S or 9000 series sat modems. The dhcp-client is just in "Searching.....
by ScottReed
Fri Sep 25, 2009 12:42 am
Forum: General
Topic: Firewall rules bypassed after enabling Web Proxy
Replies: 2
Views: 517

Re: Firewall rules bypassed after enabling Web Proxy

Fewi -

Thanks. Moving the rules into the "Input" chain has worked. I am again processing my L7 rules.

Scott
by ScottReed
Thu Sep 24, 2009 10:59 pm
Forum: General
Topic: Firewall rules bypassed after enabling Web Proxy
Replies: 2
Views: 517

Firewall rules bypassed after enabling Web Proxy

Am running RouterOS 4.0 beta4. I have two L7 Protocols defined and two Firewall Filter Rules to go along. Both have been working fine. Today I enabled Web Proxy to begin blocking traffic to certain sites based on DNS names. I setup a new NAT rule to redirect packets through the proxy and I noticed t...