Community discussions

Search found 387 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 8
by Xymox
Sat Jul 13, 2019 8:30 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

I have posted some pretty negative posts in this thread about 6.45.1.. So.. I have run across something good and I thought I would pass it along.. Well.. Sorta good.. I netinstalled a CCR1036 on 6.44.3 which was the last stable I knew worked for sure in all the things I do. I then restored a backup ...
by Xymox
Fri Jul 12, 2019 7:55 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

( s i g h ) So I had a CCR1036-8G-2S+ that I am using as a beta as my clients all have these in high end homes. I had it on 6.45.1 and it *SEEMED* fine. I decided to move it to 6.46rc6 because 6.45.1 seemed unstable and I was hoping some issues were addressed in the RC.. Again, everything *seemed* f...
by Xymox
Fri Jul 12, 2019 4:34 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

Just a FYI... Going to 6.45.1 on a RB4011iGS+5HacQ2HnD-IN and then dropping 6.44.3 on and downgrading because a list iist of issues caused the WLAN interfaces to be scrambled. Lost all settings and even lost WLAN 1 replaced with a greyed out WLAN 3 with the WLAN 1 chip. The newly created WLAN 3 and ...
by Xymox
Mon Jul 08, 2019 7:47 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

I was running the 45RC betas and I did not notice these issues. but maybe I was not using the features that now have issues. So all the issues in this thread were in the RC ? Or were these issues introduced after the RC ? Were the 5 CVEs patched in the RCs or did those patches only get included in t...
by Xymox
Wed Jul 03, 2019 5:07 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

Upgraded RB4011 from 6.44.3 to 6.45.1 - no issues Well, actually there is one - the bridge MAC address has changed so the network discovery on Windows must be done again. In my case the bridge MAC addr is the same as for eth7 interface. Interesting what it depends on... Best Bam Well, the bridge MA...
by Xymox
Tue Jul 02, 2019 10:15 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 55315

Re: v6.45.1 [stable] is released!

4011 fail. Sorta. Its remote and started rebooting and being really weird. It would come up and seem fine, but then, go offline again.. For some reason it wont switch back to the partition with 6.44.3 in it. It shows A but when I reboot it does not switch back to it. Its not up long enough to realy ...
by Xymox
Tue Jun 18, 2019 8:45 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

DOCSIS=DODO bird. If you are not using fibreop by now you must have a single eyebrow! ;-) Or my residential clients can never get fiber. The V A S T majority of US residential clients will NEVER get fiber. However EVERY client I have has DOCSIS 3.1 cable. Maybe you missed the link I provided above....
by Xymox
Mon Jun 17, 2019 7:54 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

. krisjanisj: Let me remind everyone that this forum is not meant for advertisement but for the community to help each other and share knowledge. Please refrain from posting duplicate links in separate posts with the intention just to bump the thread. How is this a advertisement ? Its a plea for hel...
by Xymox
Mon Jun 10, 2019 8:20 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Cablelabs Micronets
Replies: 4
Views: 483

Cablelabs Micronets

In about a year, or less, the largest ISPs in the US that are cable based will launch Micronets. This is a SDN. This is the future. Its a open standard and Cablelabs is working with Cisco, Netgear, Arris, Technicolor and chip makers Intel and Broadcom to name just a few. I need Mikrotik to support M...
by Xymox
Sun Jun 09, 2019 9:14 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Ability to change MAC of bonded interface
Replies: 1
Views: 208

Ability to change MAC of bonded interface

I want to be able to do this:

/interface bonding set mybondedinterface mac-address xx:xx:xx:xx:xx:xx:xx:xx
by Xymox
Mon Apr 29, 2019 7:49 pm
Forum: General
Topic: Can't update firmware from scheduled script
Replies: 4
Views: 290

Re: Can't update firmware from scheduled script

None. Can I turn up the verbosity of logging for scripts ?

Your script does not use the same method as the one above from the manual. For my use I would prefer the simpler method above.

So both my examples above work from command line perfectly but do not work from script.
by Xymox
Mon Apr 29, 2019 7:54 am
Forum: General
Topic: Can't update firmware from scheduled script
Replies: 4
Views: 290

Re: Can't update firmware from scheduled script

Ive tried everything now.. Different hardware.. Tried lots of different ways.. Tried different permissions.. Tried stable and development firmware. ... These commands work from command line. They do not work from scripts. They did once upon a time.. But i don't know where they stopped working in sof...
by Xymox
Sat Apr 27, 2019 9:38 pm
Forum: General
Topic: Can't update firmware from scheduled script
Replies: 4
Views: 290

Can't update firmware from scheduled script

According to the manual https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS You can automate the upgrade process by running a script in the scheduler: After v6.31: /system package update check-for-updates once :delay 3s; :if ( [get status] = "New version is available") do={ install } This does ...
by Xymox
Tue Apr 23, 2019 9:39 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

Hmm... Yes I guess i agree.. Mikrotik should not work on publishing bonding results as that would get really complex. The reason im bringing it up is that all new Cable modems for DOCSIS 3.1 are going to come with 2 ports and 802.3ad. Cable companies are going to 2Gbps and to 10Gbps "multigig".. A t...
by Xymox
Mon Apr 22, 2019 4:15 am
Forum: General
Topic: No way to change MAC of Bonded interface ?
Replies: 3
Views: 240

Re: No way to change MAC of Bonded interface ?

Changing the MAC of the members did not work. After a lot of playing I found something that did. This script gives me a new MAC each time I run it. I have NO idea why. This is sloppy and I need to clean it up some as it leaves a interface list member dangling. I need to change the MAC of the bonded ...
by Xymox
Mon Apr 22, 2019 1:26 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

So to wrap this up, the only way LAG/LACP 802.3AD works at high speeds speeds is to use ports that do not go thru switch chips to CPU via 1Gb internal link ? Thats correct right ? So Mikrotik might want to make that more clear in the specs ? So for example .. https://mikrotik.com/product/CCR1009-7G-...
by Xymox
Sun Apr 21, 2019 4:29 am
Forum: General
Topic: No way to change MAC of Bonded interface ?
Replies: 3
Views: 240

No way to change MAC of Bonded interface ?

I do not see a way to change the MAC address of a bonded interface ?
by Xymox
Sun Apr 21, 2019 2:50 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

Image
by Xymox
Sun Apr 21, 2019 12:24 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

THAT WAS IT !!!

Problem solved.. I can now pull 996Mbps from the modem.

THANK YOU... Great call.. Don't use ports 1-4 for 802.3AD bonding..
by Xymox
Sat Apr 20, 2019 11:57 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

OoooOo... Interesting... Thank you... I will go reconfigure and try this..

I think it might also be the modem. They just updated firmware and added LAG in the last 2 weeks. So its a brand new feature for them.
by Xymox
Sat Apr 20, 2019 10:45 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

This is from a Speedtest.net test.. You can see its spreading out the load for download and upload nicely across both ports. But they only reach 150/150.

My CPU only shows a 1-2% increase during these tests.

If I unplug either cable the speed test will reach 980Mbps.
LAG.gif
by Xymox
Sat Apr 20, 2019 10:28 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

I'm afraid that bonding is hardware offload only in crs3xx series. In CCR series bonding is done on software. But I've reached 2gbps with bonding on ccr1009 in a transit router. I mean, different IP addresses for source and destination. So there should be a problem in your setup. Enviado desde mi M...
by Xymox
Sat Apr 20, 2019 10:24 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

Hash settings make no difference.. So my config is that im using Ether1 and Ether2, in a bonded 803.2AD group. I have played with all the hashes and for the speedtest.net that I am using for testing ( or iperf public servers ) the layer 3/4 seems to have the best results for hashing. I test out the ...
by Xymox
Sat Apr 20, 2019 9:54 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

Well I turned off all my firewall rules and the problem persists.

I should be able to get 980Mbps thru a 802.3AD bonded set of 2 x 1Gbps ports on a 1009 or 1036 right ?

Bonding for 802.3AD is done in the switch chip ? Its layer 2 ?
by Xymox
Sat Apr 20, 2019 11:35 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

Re: LAG 802.3AD slowness

Maybe its a hardware limitation ? Maybe I need a CCR 1036 vs the CCR1009 ?
by Xymox
Sat Apr 20, 2019 10:01 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 881

LAG 802.3AD slowness

So recently my cable modem ( Arris SB8200 ) gained LAG.. I created a bonding interface and set it for 802.3AD with 2 ports.. Im using a CCR-1009.. Everythign works. I see the data spread out across both boths.. BUT... My speeds went way down.. I have gigabit service and I speedtest.net at 950Mbps do...
by Xymox
Thu Mar 21, 2019 10:37 am
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

In the above pic, and in the packet stream, I can start up packet sniffer at start up and KEEP fasttrack running. As shown in the example pic. This seems wrong. It produces less packets. If I then stop and then start packet sniffer the indicator for fasttrack goes off and I get a higher level of tra...
by Xymox
Wed Mar 20, 2019 11:02 am
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

Hmmm.... Looking at the fasttrack wiki it states if I have sniffer running fasttrack is disabled. I start sniffer on startup with a script. Doing seems to leave fasttrack running AND packet sniffer running.. If I then stop and then start manually then fasttrack is disabled. So having fasttrack start...
by Xymox
Wed Mar 20, 2019 10:14 am
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

( crickets chirping ) Well OK I will let you know what I have experenced so far. Seems to work great. Ive had no issues. Snort is running and the router packet sniffer is set to feed all the interfaces to it except the one feed the FreeBSD server running Snort. You gotta exclude that port or a feedb...
by Xymox
Tue Mar 19, 2019 5:16 am
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

So no one has any experience with this tool then ?
by Xymox
Tue Mar 12, 2019 3:47 am
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

Just asking this again..

So Fasttrack, Fast Path and Fast Forward all cause a bypass of the packet sniffer tool ? So these packets also bypass CALEA ?
by Xymox
Mon Mar 11, 2019 7:14 pm
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Re: Snort / Packet sniffing / NIDSing

Ive noticed that the vast majority of traffic does not get sniffed. Packets that are processed with hardware offloading enabled bridge will also not be visible https://wiki.mikrotik.com/wiki/Manual:Tools/Packet_Sniffer So Fasttrack, Fast Path and Fast Forward all cause a bypass of the packet sniffer...
by Xymox
Sun Mar 10, 2019 8:09 pm
Forum: General
Topic: Snort / Packet sniffing / NIDSing
Replies: 8
Views: 550

Snort / Packet sniffing / NIDSing

I want to run a IDS 24/7. I am using tzsp2pcap to pull in the stream from the router packet sniffer. Im then using SnortALog to generate reports via Cron. This is working pretty well so far. This is my first attempt at doing this. Is this the best way to do a NIDS with Mikrotik ? Do I need to put a ...
by Xymox
Sun Mar 10, 2019 9:35 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

BIG players are going to be deploying this...

[link removed]
by Xymox
Sun Mar 10, 2019 9:31 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

Man this stuff is annoying... But consumers are going to fall completely for this... They have NOTHING that will use 10Gbps. But consumers think 10Gbps will make browsing faster, it will make everything faster and better... jeeze... And in comes the micronet Trojan horse... https://www.10gplatform.c...
by Xymox
Wed Mar 06, 2019 3:46 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

:lol: Well.. im not sure about the koolaid yet.. Im concerned that koolaid is being prepared and dispensing begins next year.. I am concerned. The koolaid looks soothing and delicious, but, you never know whats in it. I don't think there is any way to make micronets safe from ISP perversion to gain ...
by Xymox
Tue Mar 05, 2019 7:15 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

i have sent a email making Cablelabs aware of this forum thread. Maybe they might want to comment.
by Xymox
Tue Mar 05, 2019 7:07 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

I am glad to see other networking pros opposed to this. Its too late tho. Its coming to the US next year. It will come with a huge advertising campaign backed by all the major ISPs. In 2 years it will be in every home. It DOES have some possible very good things it can do. 1. It can isolate things o...
by Xymox
Tue Mar 05, 2019 5:23 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

Even in Brazil. Its a firmware update and works on existing gear. Even on pre DOCSIS 3.1 according to the webinar. It allows a ISP a new buis model with the ability to charge for each device and service. It also provides really advanced security. All at little cost to the ISP. I completely agree tho...
by Xymox
Tue Mar 05, 2019 5:16 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small business networking

As far as adoption goes.. Comcast, the largest ISP in north America with 14 million subscribers in 39 US states has fully committed..Intel is committed for the silicon. https://www.lightreading.com/cable/ccap-next-gen-nets/ces-2019-cables-10g-tech-will-work-/d/d-id/748715? This is the future of netw...
by Xymox
Tue Mar 05, 2019 4:24 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small buisness networking

ALSO.. As Cablelab sets standards that the whole world uses, rest assured this is coming to every DOCSIS based ISP world wide.
by Xymox
Tue Mar 05, 2019 3:51 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small buisness networking

My main concern is that Mikrotik support the protocols. YES, its a evil and bad idea, but... Its coming anyway.. At CES 10G with all this micronet stuff was EVERYWHERE. There is a PUSH for this for homes like ive never seen before. It allows ISP to do scary things. Like charge you per device on wifi...
by Xymox
Sun Mar 03, 2019 10:31 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Re: Radical change coming for home and small buisness networking

A Lot is about to change for small buis networking if its connected to cable based ( DOCSIS ) networking..

[link removed]
by Xymox
Wed Feb 27, 2019 6:57 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 37
Views: 2476

Radical change coming for home and small business networking

Cablelabs has standardized a SDN system for use by ISPs in the US ( and the world ) for Cable based systems. This is going to be implemented with a firmware update on MSO CPE gateway gear. This will make the use of a 3rd party router unusable unless it incorporates the new standards. This was announ...
by Xymox
Mon Jan 28, 2019 2:39 pm
Forum: Beginner Basics
Topic: Route all traffic through NordVPN?
Replies: 19
Views: 7466

Re: Route all traffic through NordVPN?

Ive been asking and posting about this for years. I do not understand why Mikrotik refuses to address this. Its very easy to add this. They added "kid control" which was far more difficult and involved. Could there be some reason they have intentionally not implemented OpenVPN fully ? Does it create...
by Xymox
Sat Oct 20, 2018 10:31 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Can't update firmware from a script
Replies: 4
Views: 846

Re: Can't update firmware from a script

Permissions on script and on scheduler are: read, write, reboot, test..

It seems to not run from scheduler.
by Xymox
Sat Oct 20, 2018 10:28 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Can't update firmware from a script
Replies: 4
Views: 846

Can't update firmware from a script

This issue has been around for a while but I am just now getting around to posting it. I can't createa scheduled script to update firmware. I used to be able to do this. It broke someplace along the line. /system package update check-for-updates /system package update install YES,,, I understand the...
by Xymox
Thu Jul 05, 2018 11:50 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 107946

Re: v6.43rc [release candidate] is released!

"*) package - free up used storage space consumed by old RouterOS upgrades;"

Awesome ! thank you.. I will test and report back.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 8