MikroTik

AlexN

There should be a global setting to restore the old behaviour.
There are large networks which don't use the switch-chip-feature at all and cannot be upgraded at once.

Totally agree. MikroTik team, please, implement this feature. This would be really helpful.

AlexN

Changes with RSTP is a complete disaster!!! IMHO such changes are not the subject for release branch! RPVST was great approach with high level of flexibility. Now if we just update all our routers in L2 segment it won't work at all (fortunately tested on the table) and I'm talking about network that...

AlexN

Forgot to say that manual addition of profile works ok but assignment of the profile via paypal doesn't work at all with 6.28rc20.

AlexN

Hi! I also has this problem and I've opened ticket #2015040366000416 a week ago but without any answers at all despite I wrote almost every day after that. I sent supout attached and I can replicate this problem every time! I tried to get things working with clean setup and tried it with one surely ...

AlexN

Hi!
Can anybody send me ROS 6.28rc18 for tests? Because 6.28rc20 has some issues with profile assignment nevertheless successful payment.

Thanks!

AlexN

I tried 6.28rc20. We have notification about successful payment and handshake is ok, user gets activated but profile NOT assigned correctly and user cannot log in. Does anybody see the same?

AlexN

Hi Friends, since last March 24 paypal not return correctly: PayPal - ssl connection error: handshake failed: unable to get local issuer certificate (6) Can you test your returns? Thanks. https://ppmts.custhelp.com/app/answers/detail/a_id/1236 https://www.paypal-notify.com/eventnotification/event_d...

AlexN

Add pppoe specific logging on your pppoe-server and repeat experiments.

AlexN

So, really no one can confirm?

AlexN

Good day to everyone. I have RB1100AHx2 that routes traffic from my customers to internet, preforms NAT and traffic shaping. I have three uplinks. Traffic shaping performs within queue tree and simple queues. In both cases I use pcq as queuing discipline. Also I must say that I have just 14 simple q...

AlexN

Let assume that your incoming interface called ether1. Then you need: /interface vlan add disabled=no vlan-id=20 interface=ether1 name=vlan20 /interface vlan add disabled=no vlan-id=30 interface=ether1 name=vlan30 If you put ether1 to the bridge you must specify that bridge as value of "interfa...

AlexN

Thank you for your reply. Problem looks like has been solved thanks to MT support. Those packets didn't belong to established connections so adding filter rule to drop connections with invalid state looks like helped. Now I'm interesting what is the cause of generation of "wrong" packets a...

AlexN

Hi. Recently I've noticed that some packets form my clients behind NAT-route going through it without being masqueraded. After a closer look I discovered that packets with flags FIN, RST or PSH are affected. Looks like my clients have no any issues according to this matter but I'm concerned about ga...

AlexN

So have anyone new information about this?

AlexN

Could you post the versions of your firmware/bootloader please?

(btw. it's most probably not about RouterOS version, I had the latest 5.21 on everything)

Thanks,
-exa

I've tested it with firmware version 3.0.

AlexN

In this case using of usermanager at the main router or external RADIUS server can be useful to get your job done.

AlexN

Good day to everyone. Today I made following setup to investigate this issue: linux box <-cable-> SXT5HPnD <----wi-fi---> SXT5HPnD <-cable-> linux box I used RouterOS 5.21 with new bootloader. Between SXTs was just few meters. I used nstreme as wireless protocol. FTP download and TCP BTest (both in ...

AlexN

So you need no dhcp-relay. You need to add address-pool, for example: /ip address pool add name=pool ranges=192.168.1.1-192.168.1.100 Then change default or add new one profile for ppp. Assuming you decided to change default: /ppp profile set default local-address=192.168.1.254 remote-address=pool T...

AlexN

You need dynamic addresses assigning via pppoe connection or you need that your users have addresses assigned via dhcp besides pppoe?

AlexN

Try to modify first rule in the next way: add action=add-src-to-address-list address-list="port scanners" \ address-list-timeout=2w chain=input comment="Add NMAP NULL scan to Port Scanners address list" disabled=no \ in-interface=ether1-WAN protocol=tcp \ tcp-flags=!fin,!syn,!rst...

AlexN

This manual page may be useful for you http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Relay

AlexN

When traffic that passing through the router reaches 140 Mbps its cpu load reaches 100%. Meaning static routing, ip firewall but without connection tracking, no shaping.

AlexN

Hi to all. Does value 0 of parameter tunnel-id has some special meaning or behavior? My setup is a bit complicated but I'll try to explain it if no one has a quick answer. In short, tunnels with tunnel-id=0 ignore some firewall rules (in table filter, chain input) while establishing when tunnels wit...

AlexN

Did you set "Change TCP MSS=yes" in your pptp profile?

AlexN

Try to use scripting with traffic monitor http://wiki.mikrotik.com/wiki/Manual:To ... ic_Monitor and PCC load balance.

AlexN

Thor, this really looks like my problem. Turning off hyperthreading at least made my router working 24 hours without any trouble at the moment. I'm gonna do some tests. I'll write about this later. Thor, thanks a lot

AlexN

Ok. I'll check if it could be my case. Thank you.

AlexN

You can use this manual page http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features for looking for answers on your questions.

AlexN

To rodolfo: yes, I checked this option. Without it router cannot even see more than one cpu. To Chupaka: local console also hangs up and there is no reaction on keyboard input. To jspool: I didn't used restore from backup. Reboot has usually solved the problem. I'll think about your advice. Thanks. ...

AlexN

To avoid misunderstanding: "hangs up" means that router stops to serve clients and become unreachable from the network.

AlexN

Strange behavior was noticed with multicore hardware on platform x86. I tested ROS 5.6 and 5.7. In both cases my x86 router hangs up every 4-6 hours. There is no apparent reason why this is happens: no unusual amount of traffic (about 50 Mbps), no unusual cpu usage (about 50%). It was working about ...

AlexN

I think, you need ask about this at mikrotik support rather than at this forum.

AlexN

In this case I think it's won't work. Maybe you should try equal cost multipath or something.
http://wiki.mikrotik.com/wiki/Manual:IP ... .29_routes

AlexN

http://forum.mikrotik.com/viewtopic.php?f=14&t=49862
Use your bonding interface as your wan in firewall rules.

AlexN

And how to solve problem if links are not equal?

I am also working on this problem. Looking on MPLS TE tunnels. Any suggestions would be appreciated.

AlexN

If DSL links are equal why don't you try bonding with "balance rr".

AlexN

Didn't work with mpls later. But if this is solution, I'll try. Tank you.

AlexN

Hi to all. I have two channels with different bandwidth - 16Mbps and 30Mbps. Goal of setup: traffic must flow through channel with bandwidth 16Mbps and only if its bandwidth consumed traffic flows through both channels. Is it possible? And what is the best way to do this? P. S. I tried bonding with ...

AlexN

How long it works fine after reboot?

AlexN

This weekend I experienced interesting problem. I don't now what happened with D-Link DIR-100 but it turned it to DoS machine. It wasn't unusual amount of traffic on interface, D-Link DIR-100 just was sending auth requests on port 1723 but it almost completely turned off my pptp-server on RouterOS. ...

AlexN

Show your config, please.

AlexN

Looks like the only chance to get answer on this question is to send mail to support. I'll write about it.

AlexN

Bridge your wireless interfaces with the same value of horizon and set your PPPoE service to bridge.

AlexN

Take smart smitch. Let's assume that you have 3 APs and one PC router. Than you need 4 ports. for example 1 - for PC router, 2 - for AP1, 3 - AP2, 4 - AP3. Than you need to create 3 vlans with different tags through the switch, for example with tag 1001 through ports 1 and 2, with tag 1002 through p...

AlexN

Just set them via winbox or ssh ot telnet. Why do you need to set that values with snmp?

AlexN

No, it doesn't. Nor postrouting chain too.

AlexN

/ip firewall mangle add chain=forward src-address-list=shape_list action=mark-packet new-packet-mark=upload passthrough=no /ip firewall mangle add chain=forward dst-address-list=shape_list action=mark-packet new-packet-mark=download passthrough=no Also, using pppoe and the same rules and queues sha...

AlexN

Anybody? It's realy big problem for me now! Please, help.
Thank you.

AlexN

Mark all VoIP packets and all other packets with different packet marks in /ip firewall mangle. Then add parent queue to outgoing interface in qtree. Attach to this parent queue to queues: one for VoIP and one for all another traffic. Do not shape traffic for parent queue and queue for VoIP but shap...

AlexN

Guys from the staff, is it a bug? Please, give comments for this matter.

AlexN

I am using pptp-server on RouterOS. If it works with encryption then all traffic that shapes with queue-tree and packet mark shapes correctly: if I set max-limit 1Mbps, I get 1Mbps. If it works with no encryption then if I set max-limit 1Mbps, I get 512Kbps. But queue shows me that it consumes 1Mbps...

AlexN

Ok. I've made it to "work". "Work" in quotes because in UM logs I have messages "authorisation success", but Windows client 802.1x (Windows XP SP3) reports that authentication failed. Tried PEAP and md5 check. Any solutions?

AlexN

If you use RADIUS for login to router than you can use UM users for bandwithtest, I think.

AlexN

I have smart switch that supports 802.1x authentication with EPA per port. Is it possible to make it work with UM? If yes, than how? Thank you.

AlexN

I have the same disconnects even with 3.30, 3.28, 3.25. Only one stable link - RoS 3.25 and 3.22. And I have noticed that decreasing of maximum size of frame limit improves link reliability.

AlexN

What wireless card do you use?

AlexN

Changing HW.retries and disconnect timeout was the first thing I did for increasing stability. It decreased disconnections from several times in a day to one.

AlexN

Looks like I found solve for my problem. I decreased frame limit value from 3200 to 3000 (framer policy = best fit). Bandwith of my link also decreased aproximately for 2-4 Mbit/s, but stability have increased. I also did the experiment: with "framer policy = exact size" and "frame li...

AlexN

In my case sometimes this is "extensive data loss" and sometimes "too many poll timeouts".

AlexN

Usually nstreme consumes a lot of cpu. Also cpu usage proportionally grows according to amount of passing traffic.

AlexN

Disconnects are totally intermittent.

AlexN

I used different frequencies with the same effect, I scanned air with REAL spectrum analyzer, so if I say "zero interference", that's realy what I mean. All my unstable links working with same ver. of RoS (3.30 with 3.30, 4.5 with 4.5, 4.10 with 4.10) and only one link, which has differnet...

AlexN

The same problem on 5 links with different distances (1 km - 40 km), with different cards (R52H, XR5, Alfa AWPCI085h), with zero interference. All links withe Nstreme and WDS. Great signals (-65, -70), great bandwith (28 Mbps for 40 km) but badly unstable - few disconnects in day. Usualy it tooks ab...

AlexN

I wasn't been able to make it work without MIMO.
http://forum.mikrotik.com/viewtopic.php?f=7&t=43066

AlexN

Can any answer?

AlexN

Depending what do you mean "manage"?

AlexN

I configured on the table two cards SR71-A one with ap-mode=ap-bridge and another with ap-mode=station in 2,4GHz-onlyg. I got link only with next HT settings: enabled Tx/Rx chain 0, Tx/RX chain 2. As I understood HT settings responsible for switching antenna output. That means that this cards won't ...

AlexN

If you are using bridge on client you MUST use station-pseudobridge to avoid such problem.
http://wiki.mikrotik.com/wiki/Manual:In ... figuration

AlexN

Wireless interface can't be bridged while it in station mode. Check this out.

AlexN

Thanks to all for help.

AlexN

But what can cause such voltage spike if there are no thunderstorm?

AlexN

Yes, we have grounding, and we used method for diagnostic broken cards. Accordingly it the cards are broken.

AlexN

Distance - 2,3 km. You need no ACK when you using Nstream with disabled CSMA.

AlexN

For last three months I have 8 (!) R52H failed and several cards before that. Symptomes are: decrease of signal strength on both AP and client, respectively highly decrease of link quality. Method of check: if changing Antenna mode from "antenna a" to "antenna b" (pigtail on card...

AlexN

I've got the same problem on some distant links. Thus I have clear view between wireless points, not everheaded freqency and signal strength -65/-66 dBm, CCQ 99/95. Despite this I have my link disconnected one time in several days. I using Nstream, static WDS, no encryption, default security profile...

AlexN

Sorry for long silence. Your advice looks like working. Thanks a lot

AlexN

Yes, I know that. The matter is that I need that frames with service provider tag lived router with ethertype 0x8100 instead of 0x88A8 (default ethertype of service provider vlan in RouterOS). Thank you.

AlexN

Is it possible to change ethertype of service provider vlan from 0x88A8 to 0x8100?

AlexN

Thank's a lot. Helped

.

AlexN

Looks like just wrong username or password. Your external radius also locates on virtual machine?

AlexN

The matter is that I must double max-limit if I not using encryption profile.

AlexN

Hi to all. First of all I want to say thanks to development team of RouterOS for awesome “Swiss knife” for network administrator. The problem, that I have faced, exists (I know exactly) in RoutersOS 3.22, 3.25, 3.30, 4.5. So, I have clients, which authenticate to router (by the way, I used RB433, RB...

Search found 82 matches