MikroTik

dominicbatty

Just in case anyone else reads this, I thought I'd post an update in relation to my default route issue. My BGP peers to ISP1 are accessed via a specific PPPoE interface for that ISP hence what I've managed to in the inbound routing filter for those BGP peers is ignore the next hop provided to me fr...

dominicbatty

Many thanks for the advice, this is very helpful.

dominicbatty

Dear all, I have a BGP concept type of question. We have two BGP sessions to one of our ISP's through "Interface-X" and we establish these to "BGP-Peer-A" and "BGP-Peer-B". In order to route to these peers before the BGP sessions come up, we have fixed routes in place t...

dominicbatty

Thanks for the heads-up, I noted that in another post I read so I've already black holed the PI block. Thanks.

dominicbatty

Hi, I've managed to resolve this issue with my ISP. When I wasn't seeing incoming traffic on the PI network I referred it back and they found a problem in their inbound routing to me. All looks to now be working fine. Many thanks.

dominicbatty

Thanks for getting back to me, yes, BGP all checked using HE's services and BGP routes are all in place. I can traceroute back as far as my ISP from a remote test server but not into my router. I'll load the configurations tomorrow as I don't have access to that device from here.

dominicbatty

Dear all, I'm wondering if someone might be able to offer me any suggestions to my current IPv6 routing dilemma. We have a dual-homed mikrotik device where one of our providers is now supporting IPv6 and the other one will shortly. We also have a /48 PI IPv6 block and an AS number. Our PPPoE connect...

dominicbatty

Thanks, apologies for the reply, I wasn't notified of your message. Regards, Dominic.

dominicbatty

Hi guys, I wonder if someone might be able to answer me a configuration/concept question. We have recently acquired an IPv6 PI block and our own AS number and are just in the process of setting up peering with our primary ISP using RouterOS v7. The ISP has given us 2x BGP peers in their network, the...

dominicbatty

We have been testing 7.1.2 on a CCR1009-7G-1C-1S+ device for the last few days and other than the change to the TLS command notation on the /tool e-mail function in v7 the device has been stable. However, we have noticed that some but not all of our IPSEC links, are showing as up and established but...

dominicbatty

Oh dear, it turned into one of those mornings. Upgraded device to 6.38.1 only to discover the problem with VLAN on a bridge interface not working, pushed onto 6.39rc20 where this all came right and must be fixed but now I'm finding a 4 port Ethernet switch trunk link between 2x CRS226-24G-2S+ device...

dominicbatty

Further to my previous post, my CRS226 is definitely struggling to maintain an "up" status for my fibre SFP module for any version after 6.36.3. If I downgrade back to 6.36.3 it works great and is extremely stable and has been for some time, if I push it to 6.37.1 it's all over the place. ...

dominicbatty

I am seeing the loss of a remote CRS224 switch, which is linked to the network via a fibre SFP module. If I take the unit back to 6.36.3 it works fine, upgrade to either 6.37.1 or 6.38rc10 and it does not appear to allow traffic over the SFP module link. If I connect to the remote switch directly it...

dominicbatty

Hi guys, can anyone give me some help with a VLAN configuration on a CRS. Three ports being tested ... ether22 and ether23 - traffic comes in untagged and gets tagged to VLAN=1000 ether24 - traffic leaves the router tagged. If I connected devices to ether22 and ether23 they can see each other but if...

dominicbatty

Hi, I've had a CCR226-24G-2S+ for a couple of months and I've already had one go at trying to configure my VLAN configuration on the device and I just have a few questions now I am getting more into it I was hoping someone could just give me a couple of yes/no's on the attached questions. Winbox > S...

dominicbatty

it's already a difficult push for people to move to IPv6, however, it's going to be impossible if the IPv6 facilities are not at the very most basic level equivalent to the IPv4 facilities, you would assume addressing this issue would be one of the most important things facing Mikrotik at the moment?

dominicbatty

I am also having the same problem with a multiple routing scenario and I can see what is happening but cannot explain why, I'm not sure if it's a bug but perhaps someone could see if they think it should be logged. 2 interfaces with public IP addresses 1.1.1.1 and 2.2.2.2 Local SIP server on private...

dominicbatty

Our sstp is from windows clients to an RB2011. I'll throw some data through it this week and let you know how it stands up.

dominicbatty

Our sstp vpn is extremely stable on 6.15, cannot comment on performance as application that runs over it uses only minimal bandwidth.

It looks like 802.11ac support is hardware related and is supported by 6.16 OS.

dominicbatty

thanks for the update, the problem I have is knowing which ones to clear but I've plumped for the whole lot which seems to be working ok.

dominicbatty

I know but the problem is as follows ... Interface 1 - normal traffic Interface 2 - VOIP traffic Interface 2 goes down, I can therefore detect all connections that had a source IP address associated with interface 2 and delete them so this would be ok. Interface 2 comes back up, I know have an estab...

dominicbatty

yeah, thanks for this. It appears running

/ip firewall connection tracking set enabled="no"
:delay 1
/ip firewall connection tracking set enabled="auto"

appears to reset the list for me.

Thanks for your assistance.

Regards, Dominic.

dominicbatty

Hi, I have an odd NAT session problem I was wondering if someone might be able to give me a little guidance on. I link to my VOIP provider by making a connection from an internal address through the firewall which is NAT'd to my external IP and a session created to my VOIP provider. Lets say for exa...

dominicbatty

Has anyone tested the reported long term routing-mark issue in any of the v6.16 rc versions yet and is it perhaps fixed? The reason I ask is that we have routing marks that route our VOIP(SIP) traffic up another line via a mangle rule and a route with a routing mark set to pick these up and send it ...

dominicbatty

you should log that query with Mikrotik support, with that amount of incredible detail I'm sure you'll get an answer in no time ...

dominicbatty

it would be better if within RouterOS you could control the DNS enablement and also the TTL directly on a per device basis.

dominicbatty

Won't that only be until the DNS entry expires?

dominicbatty

Hi everyone, just a quick heads up with some issues I have been having on 6.15. I am not sure it is specifically 6.15 related but it is down to some configuration changes I have made whilst on 6.15. We have always used a single IP per interface but have recently started using a single WAN IP and an ...

dominicbatty

For anyone with sntp client issues take a look at the release notice for the version.

dominicbatty

Is anyone seeing PPP issues between routerboard devices in 6.15. I have an RB2011UAS-2HnD (6.15 firmware 3.16) (client) connecting to a RB2011UiAS (6.15 firmware 3.16) (server) Making connections from the client router to the server router. PPTP clients - will not connect at all. SSTP and L2TP clien...

dominicbatty

With all the moans and groans over OpenVPN on these forums, and what appears to be little further development of the features included within RouterOS, I came across this today and wondered if it might be a viable alternative?

https://www.softether.org/

dominicbatty

Hi, has anyone else experienced the following problem and if so would opinion suggest this is a bug, I'd like to canvas opinion on the topic. I have two routers with a shared VRRP interface Router 1(R1) - priority 100 Router 2(R2) - priority 50 So the "live" router is R1. If I decide to do...

dominicbatty

Has anyone successfully connected a Cisco SPA phone to RouterOS using the built in Cisco VPN that comes with the phone?

Thanks, Dominic.

dominicbatty

I had routing mark problems in 6.9 and 6.10 but on checking routes some of the "check gateway" fields were not set and setting these to "ping" appears to have solved the problem.

dominicbatty

My RB2011UiAS-RM keeps locking up and stops routing any traffic or being available to connect to. Only solution is a reboot and it comes back up ok. I have auto supout turned on but I am not getting that so it must think it is working ok .. Does anyone have any suggestions as to what I can do to log...

dominicbatty

upgraded RB2011UiAS-RM to 6.10 - looking ok with the exception of all L2TP/IPSEC tunnels that won't come up.

dominicbatty

Hi, thanks for your reply, following my post I did some testing between two mikrotiks and what you have stated is correct, VLAN=1 and "normal" traffic do not interact so I understand now my issue. The problem, I think was that I was confused by the Netgear (my switches) implementation of V...

dominicbatty

the odd thing is that it works fine for about 24 hours then I come in the following morning and all my VOIP traffic is going up the main line so I reboot and hey presto, all working again. I'll try and see if I can downgrade and get something together for support. Are other people having this proble...

dominicbatty

Can anyone confirm that they are working this through with Mikrotik support as I have also discovered the same problem in 6.9 and I see no merit in logging the issues with Mikrotik if someone in this forum is already on the case.

dominicbatty

Hi,

I am trying to install an R11e-2HPnD card into a BaseBox5 (RB912UAG-5HPnD-OUT) but the R11e does not come with the screw required to secure it to the RB912 board.

Can anyone tell me what size screw this needs to be and if it should have been delivered with this mounting screw?

Thanks, Dominic.

dominicbatty

forget it, turns out the Vodafone sure signal only works if you can get 1500 byte MTU out to the internet.

dominicbatty

I'm not sure I follow, a basebox5 will have three available interfaces, a 5Ghz wireless interface and an ethernet interface on from the board and a 2.4 Ghz one from the additional card. For all intents and purposes it will be no different to a router with 3 ethernet ports if you want to think about ...

dominicbatty

So I have an RB2011UiAS with ... interface bonded1 (MTU=1508, mode=802.3ad) with slaves ether1 + ether2 (MTU 1500, L2 MTU 1598) I have a VLAN (MTU 1508) on bonded1 so I can push PPPoE traffic via the switch to my BT FTTC modem at MTU 1500 - this all works fine and I get full 1500 MTU to the internet...

dominicbatty

Hi, has anyone managed to get a Vodafone Sure Signal 3G booster connected and working behind a RouterOS device, it is supposed to make an IPSEC connection to the Vodafone network over the internet but nothing I do appears to allow it to work. Any help will be gratefully received.

dominicbatty

I was wondering if someone could give me some advice. We have, for some time had an RB751G-2HnD (802.11b/g/n, 20Mhz, WPA-PSK2, AES) to service the general wireless requirements of our office (laptops/phones etc.) and also to use for our Cisco SPA VOIP phones which also run over wireless. The problem...

dominicbatty

Thanks for that. Dominic.

dominicbatty

Does anyone know if a R11e-2HPnD will fit physically in a Basebox5 given the larger heat sink on it?

dominicbatty

Hi, I'm thinking of using the Basebox 5 along with an R11e-2HPnD to build a dual band wireless access point in my office. I just had a couple of questions ... 1. the obvious one being, does this sound like a good plan and if not what would others advise using for the same dual band access point? 2. ...

dominicbatty

aha, that will explain it.

Is this something that is planned to be done, it's going to be difficult implementing IPv6 without this type of thing being supported. If you have any timescales that would be helpful.

Thanks, Dominic.

dominicbatty

Hi, I have been trying to use an IPv6 address as the connection address when configuring an L2TP-Client interface but it gets reported as being an invalid address by winbox. I tried a number of other clients, SSTP, PPTP etc. and none of them will accept an IP6 address. I've got the IPv6 package inst...

dominicbatty

Hi, yes I see packets coming down both links but I csannot tell if either are causing retries, I know if the download lines work individually then they are fine, I'm not sure if there is something wrong with the download logic at the A&A end but then if that was the case why are my lines not wor...

dominicbatty

Hi Celticcomms, RouterOS with three ethernet interfaces at 1500 MTU, 2x interfaces linked into the BT Openreach provided FTTC modems using ethernet cables, the other linked into the LAN. 2x PPPoE connections at 1492 connected via the BT modems to A&A (ISP). Single IP block (/29) at A&A selec...

dominicbatty

I'm after any pointers with the following if anyone fancies a challenge ... download bandwidth is roughly specified for information but you'll get the gist. I've tried an RB493G and a VMWARE based RouterOS installation with the following and found the same results. 2x FTTC lines, 150m from cabinet. ...

dominicbatty

I've resolved this problem. When you create the first Virtual AP it offsets bit 2 of the MAC address of the primary wireless interface to create a unique MAC address for the Virtual AP. It does this each time you create a brand new Virtual AP giving each one an individual MAC address. However, what ...

dominicbatty

I have an RB751G-2HnD with an active wireless connection as follows. name="wireless" mtu=1500 mac-address=D4:CA:6D:67:C0:71 arp=enabled interface-type=Atheros AR92xx mode=ap-bridge ssid="abaca-hidden" frequency=2412 band=2ghz-b/g/n channel-width=20/40mhz-ht-above scan-list=defaul...

dominicbatty

Your reply is gratefully received, this topic commenced in March 2012 and I think there are some earlier posts on the topic as well. There are obviously a lot of frustrated users left wondering how/what they were going to do to implement IPv6 but this now gives some clarity. Are you stating that the...

dominicbatty

Yeah, it's such a shame that something this important has been missed from IPv6 with no real acceptance or indication by Mikrotik of this being any sort of problem or issue they plan to address. Ignorance doesn't make problems go away, it just annoys people. They should indicate their plans and why ...

dominicbatty

bump, same problem, bit rubbish!

dominicbatty

I've just received word from Mikrotik support that my 100% CPU issues with SSTP have been found and fixed in 5.21 RC1 for which they have sent me a download link to try. Might be worth you trying as well, email me dominic at abaca.co.uk if you want a copy of the link as I don't really know if I shou...

dominicbatty

Hi gr0mit, When I trialled this I setup an L2TP tunnel to A&A over IPv4 so the tunnel IPv4 traffic was marked and thus round robin balanced up multiple lines then I routed my IPv6 traffic through this L2TP tunnel hence by the nature of going through the tunnel operated the same way and was load ...

dominicbatty

I also have some issues with SSTP reported to support, which appear to be the SSTP running at 100% for no reason which is resolved by stopping and starting the SSTP server on the router. Disconnecting users has little effect and I've also seen SSTP-connections coming back in without users. Mikrotik ...

dominicbatty

Hi James, out of interest, did you get to the bottom of your issues?

Regards, Dominic.

dominicbatty

James, out of interest, who is your ISP?

dominicbatty

woof .... RFC4638 ...

dominicbatty

Also, from the Mikrotik support option above, I think the MRRU option is only related to MLPPP link isn't it?

This is going to become a massive issue shortly as the BT FTTC roll out goes through in the UK and every man and his dog with Router OS is going to start asking about RFC4638.

dominicbatty

There appear to be lots of replies on the net simply stating that you just have to up the ethernet interface to 1508 and the PPPoE interface to 1500 and this should solve the problem. However, the BT supplied VDSL modem requires the inclusion of the RFC4638 PPP-Max-Payload Tag in the PADI and PADR p...

dominicbatty

Hi, I was wondering if anyone might be able to tell me why the following script would report "expected variable name (line 1 column 6). It is clearly complaining about the "item" variable but I don't understand why? Can't I use :set in the :parse command? :local item "xxxxxx"...

dominicbatty

I actually per packet round robin my IPv4 traffic up my three ADSL lines to Andrew and Arnold, equally they per packet round robin the data down to me in the same way. To achieve this I have to use mangle to mark each packet per block of 3 with router1, route2 and route3 then the routing table picks...

dominicbatty

no real way to achieve this without this functionality. I'm going to use an L2TP tunnel over my IPv4 bonded link to tunnel my IPv6 in for the time being until this can be sorted.

It's a shame, was hoping to be live for World IPv6 day today but alas, no joy.

Dominic.

dominicbatty

Hi just wondered if you found a solution to your problem, I have something similar I cannot solve. Thx. Dominic

dominicbatty

Did you find the problem, I have something similar. Thx. Dom.

dominicbatty

any news .... this is a really important feature that gives us increased bandwidth and resilience over our ADSL circuits, was it just missed from the IPv6 implementation, is it removed for good reason or is it planned to be done in the future.

dominicbatty

no worries. TBH I use email in most of my scripts for failover monitoring and other such stuff ... glad you are sorted. Dominic.

dominicbatty

I'd start by simply replacing the "from=$namE" with "from=<a known address>" to see if it's a function call or variable issue. You could also try a ":log info $namE;" right before the call to see what is actually in the $namE variable in case you have something wrong th...

dominicbatty

Hi, does anyone know if there is a plan to implement the "action=mark-routing" and "new-connection-mark=<routing mark> in IPv6, firewall, mangle rules. Our IP services are served by multiple links so we round robin packets up the links to the ISP who provide us with native IPv6 addres...

dominicbatty

that's a great help rock, thanks for your reply. Dominic.

dominicbatty

Hi, I was wondering if anyone could answer me the following. Take a command that populates a local variable "link1interfacestatus" with the current status of a pppoe-client interface with a name of "bob". :set link1interfacestatus [/interface pppoe-client get [/interface pppoe-cl...

dominicbatty

excellent and much needed addition .... thanks Mikrotik!

dominicbatty

Hi, I thought it might be useful to post the following information regarding my experience of recently installing a 3G USB modem into a Routerboard. RB493G The RB493G does not supply 5V on the USB port so I have a cable from this USB port to a USB powered hub. ZTE MF-112 plugged into the powered hub...

dominicbatty

We do use a number of mangle rules doing route marking for outbound traffic?

dominicbatty

No, we don't use OSPF .... we also seem to be having the same issues in v5.0 as well this morning.

dominicbatty

Came in this morning after monitoring v5.2 all weekend with no obvious problems to find as soon as the users started routing traffic through it, it started jumping up and around >95% CPU load and started dropping packets. I've dropped back to v5.0 to see if I can establish if it is a configuration c...

dominicbatty

Interesting comment about the lock up on the 493. My 493G has been having problems since moving from 5.0 to 5.2 with CPU peaking really high and giving me quite serious packet loss for short periods of time. I just noticed I've also got an autosupout today as well. I downgraded to 5.1 but looking at...

dominicbatty

the distance for the routes, routing mark and non-routing mark are both 1. I thought that ECMP was done by having multiple gateways under a single route and then it selecting them in turn? I tried increasing the distance of the default route but this does not seem to have any effect.

dominicbatty

I think there may be still be routing issues in v5.2 associated with routing marks. I've only just noticed this and it might also be apparent in prior versions, I'll check next week but perhaps someone could clarify what is happening below. If I mark all "OUTPUT" traffic from the router in...

dominicbatty

Hi, I was wondering if someone could explain the following behaviour and why it might be happening. 2x internet interfaces I-1 and I-2 L2TP IPSEC VPN from remote sites connecting into I-2 Remote site ip address is R-1 1. If I set the default route for the router to gateway=I-2 then the incoming conn...

dominicbatty

Just for information, whatever was causing this problem was still apparent in v5.0rc9 but has been solved with v5.0rc10

Cheers, Dom.

dominicbatty

Just for information, whatever was causing this problem was still apparent in v5.0rc9 but has been solved with v5.0rc10

Cheers, Dom.

dominicbatty

Hi, could someone tell me if I am missing something. 2 internet links on an RB493G router (both PPPoE if it makes any difference), link 1 is the default gateway for the router. i.e. 0.0.0.0/0 using link1 as the gateway. Incoming L2TP IPSEC connections coming in through link1 work fine and connect wi...

dominicbatty

Interesting problem .... I just added the IPv6 package to me seemingly stable v5.0rc8 493G routerboard and all my L2TP IPSEC VPN's to my remote sites did not come back after a restart. I then set it to uninstall the IPv6 package, rebooted and they all came back straight away. Just to confirm, I didn...

dominicbatty

Hi, I'm just after a little bit of help regarding a routing problem I have. I have two connections to the internet via gateways 1.1.1.1 (on interface I-A) and 2.2.2.2 (on interface I-B) and I have two IP routes as follows 0.0.0.0/0 to 1.1.1.1 bound to routing-mark="R-A" 0.0.0.0/0 to 2.2.2....

dominicbatty

I cannot believe this is still broken in RC2, I logged this originally in Beta4. My entire fail over scripting is based on the use of this /ping command which only works under the schedule once on the very first call to it, after which fails to work. I appreciate that they are working on "more ...

dominicbatty

Hi guys, I've come across 4x Sangoma S518 cards in my cupboard that I don;t want and it seems a shame to sell them if someone can use them, if anyone is based on the UK and wants them then let me know. Cheers, Dominic.

dominicbatty

/ping is still not working under scripts in the RC1 release (except for the very first time it is used), I'm not sure that going to an RC1 and not beta7 is strictly correct if there are things that worked perfectly in a previous version that have not yet been resolved in a beta version, upgrades are...

dominicbatty

the /ping command in Beta5 only works in the scheduler the very first time it is used ... i.e. Script that does .... :log info ("ping result1=" . "$[/ping 8.8.8.8 count=3]"); :log info ("ping result2=" . "$[/ping 8.8.8.8 count=3]"); :log info ("ping resul...

dominicbatty

ok, Mikrotik have confirmed this is a known problem to be resolved in v5.0 beta 5. No timescale at the moment for the beta 5 release.

dominicbatty

That last sentence had too many v4's in it and should read ...

I don't have a v4.xx router to try and I only started beta testing v5.0 at beta4. It would be handy if someone could test on a v4.xx platform for me.

dominicbatty

Has anyone noticed that the ping command does not return any response when used in v.5.0 beta 4 under some conditions. I have a script ... :log info ("ping result=" . "$[/ping 8.8.8.8 count=5]") which should put "ping result=5" into the log file if it runs ok. If I run ...

dominicbatty

Found a workaround for the Mikrotik ... with thanks to <Chaos> for his input. Run the SSTP server on port 4430 (not 443) which will bind it to both IP addresses on the router 1.1.1.1 and 1.1.1.2. Use dstnat to forward traffic for 1.1.1.1:443 to the internal web server at 192.168.1.1:443 Use dstnat t...

dominicbatty

Is it possible to bind the SSTP server to a specific IP address. The problem is that it has ro run on port 443 as this is the only acceptable port that a windows client can connect into as there is no way to change this in windows. It is also the port that HTTP SSL must run on for secure web sites. ...

dominicbatty

I've run into a problem with the SSTP server in the new v5. The SSTP server runs on port 443 and it has to run on this port as Windows clients can only connect on port 443 as there is no configuration option in Windows to connect to any other port as this is considered the default for HTTP SSL. The ...

Search found 101 matches