MikroTik

terintamel

One similarity between both routers for me is that both have a Netonix switch connected to one of the first 5 ports doing router-on-a-stick setup with Vlans.

Do you have vlans or any similar setups on ports 1-5 on your routers that had this issue?

terintamel

Of the two routers this happend to it is odd as one was installed on 9-29-23 and it was fine until the first port lockups on 2-16-24. The other router was installed on 1-26-24 and it just happend to it the first time today.

terintamel

Found another thread with the same issue. https://forum.mikrotik.com/viewtopic.php?p=1059106#p1059106 Of the two routers this happend to it is odd as one was installed on 9-29-23 and it was fine until the first port lockups on 2-16-24. The other router was installed on 1-26-24 and it just happend to...

terintamel

I am curious if 7.13.x fixes it. I just have had in the last 3 weeks two separate RB4011 routers running 7.12.1 do the same thing. Both were new routers that were set to no configuration after upgrading from factory FW to 7.12.1. They were then configured manually. Maybe an issue with the switch chi...

terintamel

I have had now two different RB4011 routers running 7.12.1 that have had ports 1-5 (same switch chip) go offline for seemingly no reason in the last 3 weeks. A reboot of the router fixes it. Base configs are the same on each, but the port configuration is different and one is running OSPF and the ot...

terintamel

Nevermind. I forgot I had a firewall rule on the core router that would only allow ospf from certain IP addresses and I did not have the Elm router in the list.

terintamel

Can a Bonded 802.3.ad interface cause issues where two routers cannot become neighbors via OSPF? I have a setup as below. Core router -> Core Switch->Elm Tower router The link between the core router carries vlans for each site that connects to the core switch. The link between the core switch and t...

terintamel

I guess to summarize I want to have two PtP wireless links work in an active/failover setup where one tower only has a switch (Netonix) and the other side has a router. Right now it works with the router side running V6, but that could be do to dumb luck and not because I have it configured properly...

terintamel

Issue 2: I went out today and replaced the tower router (RB450Gx4) running 6.47.7 with a RB4011 running 7.12.1. When I did that bridge ports were both active with one mostly sending traffic and the other mostly receiving. When I logged into the Netonix switch at the other tower instead of the ports ...

terintamel

Question 1: Is there anything wrong with the above setup. Should I be doing something differently to get the same results? Issue 1: If the ethernet link on one of the radios on the switch side drops the link failsover properly. However if I unplug one of the ethernet ports in the Bridge on the route...

terintamel

V6 Ports Gen.PNG

V6 Ports Status.PNG

V6 Ports STP.PNG

terintamel

I have as setup that has worked well for a couple of years. What I have is I have a router at a grain elevator that then feeds another tower wirelessly. At the other tower I have Netonix switch. That tower is fed by two radios. An Airfiber 60-LR and an Airfiber 5XHD. The 60-LR is the primary while t...

terintamel

Thank you. That fixed my issue.

terintamel

See this post. https://community.cambiumnetworks.com/t/mikrotik-dude-and-epmp-snmp-mibs-not-detecting-or-using-epmp-mibs/40174/6 Basically the issue is the Canopy-SYS-MIB file. On the older Dude that ran as a windows application you could delete the file. However, it seems since the dude server is n...

terintamel

What is happening is The Dude is reading from the Canopy-SYS-MIB file first before trying the Cambium-PMP80211-MIB file and before it finishes the Canopy MIB it errors out. If I could removed the Canopy-SYS-MIB file or have it scan the Cambium MIB file first it would work properly. Why Mikrotik made...

terintamel

It looks like the Canopy MIB file that appears to be conflicting with the ePMP mib file cannot be deleted as it is part of the default Dude installation.

terintamel

Well it looks like the file cannot be deleted as it is part of the Dude. I created a new CHR with no files on it. When I enabled the Dude Server on it those files were created and I could not delete the Canopy mib file that is causing me issues.

terintamel

I might have found my problem. I have two mib folders in The Dude and under one of them is an old Canopy MIB file that I think is conflicting with the Cambium MIB file. However, I cannot delete anything from that folder as when I try to remove the Canopy MIB file I get and -action failed (6) error. ...

terintamel

I have the dude setup on a CHR. It has been setup for years. I found I have two MIB folders. One is dude/files/default/mibs and the other is dude/files/mibs. I can delete files from the dude/files/mibs folder and mibs I place in the folder show up as mibs in The Dude. The other folder has some outda...

terintamel

I was able to walk the device using a third party SNMP browser (FramFlow SNMPBrowser) and the ePMP 4500L device walked fine using the Cambium MIB. It must be an issue on Mikrotik's side I guess.

I will open a ticket with them and see if they can explain what gen err (6) means.

terintamel

I get the same error if I increase polling time or just select the Cambium subtree to scan.

It is not the device as I can SNMP walk other MIB files for this device like the old Canopy MIB or the RFC MIBs it just gives this error when trying to scan the ePMP Cambium Mib file.

terintamel

What does the gen err (6) message mean when doing an SNMPwalk on a device. I have a Cambium 4500L AP and imported the MIB file into The Dude but when I walk this MIB it get nothing but this error. The device returns data for other MIBs like RFC1213 ect, but always fails on the Cambium Mib file. I j...

terintamel

What does the gen err (6) message mean when doing an SNMPwalk on a device.

I have a Cambium 4500L AP and imported the MIB file into The Dude but when I walk this MIB it get nothing but this error. The device returns data for other MIBs like RFC1213 ect, but always fails on the Cambium Mib file.

terintamel

AS path can be encoded in two ways, as set and sequence.
Warning indicates that peer received aggregated route where part of the as path is encoded as set and other as sequence, and converts whole as path to as set.

Is that a problem with the setup on my end and does it need to be corrected?

terintamel

I recently migrated from an x86 CHR running ROS v6 to a CCR2116 running 7.7. I copied my configs and setup the BGP using the equivalent v7 settings. Everything is working fine, but I get the following warnings when the BGP sessions are established and then again every couple of days. This happens on...

terintamel

Is there a know bug with multi-threading and the RB450Gx4? I have an issue where on two of these routers it seems to get stuck processing everything on pretty much one core (core 3). A simple reboot of each router seems to fix the issue and load is more evenly distributed between all the cores. One ...

terintamel

Capture.PNG I have changed my design and have it working now. The above is a simplified image of my main routers. The Edge to the Internet is via eBGP and the core to the Edge is via static routes. I have three Areas. Area 0 (backbone) is green. Area 2 (yellow). Area 3 (blue). 10.0.0.0/24 is my loo...

terintamel

I might have fixed it. On R3 I had the loopback interface as part of the Backbone area. Once I disabled that network 10.0.0.3/32 the routes were installed in R3. Question then is I have a loopback IP on each router 10.0.0.1/32 (R1), 10.0.02/32 (R2) and 10.0.0.3/32 (R3). Following an example online I...

terintamel

Area 1 is backbone.

terintamel

Capture.PNG Forgive the crude drawing. Here is what I am attempting to do. R1 connects to R2 via fiber. R1 connects to R3 via fiber R2 connects to R3 via wireless What I want is clients on R3 to get to the internet via R1 unless the R3->R1 link is down. If the R1->R3 links is down I instead want th...

terintamel

I am just getting into learning OSPF and have run into and issue. Setup Internet->R1-->R2-->R3 In the initial setup I have R1,R2,R3 in backbone area. R1 has static default route towards the internet. R1 has its instance set to distribute-default always-as-type-1. With all routers in the same area al...

terintamel

I see on the Mikrotik CWDM-MUX8A unit it says "You can use a single optical fiber cable to create up to eight independent 1.25Gbps SFP (up to 40km) or 10Gbps SFP+ (up to 10km) links, offering more affordable alternative to installing more fiber or leasing additional fibers." My question ar...

terintamel

It appears to have been fixed in 7.6beta7.

terintamel

I reported it to support as a bug and they have duplicated the issue but don't have and ETA on when the fix update will be released.

terintamel

I opened a bug ticket report for this. Here is a summary of my issue. I have a test router with 20 routes on 7.5. I upgraded to 7.6b6 and 10 of the routes disappeared from the /ip/route/ table in Winbox and do not show up doing an /ip/route/print from the CLI. I then import my missing routes and the...

terintamel

Try routing/route/print

Thanks that shows and explains why the IP Route table shows 20 out of 22 routes. One DAC IPV6 route and one Link route for the managment interface. Still does not explain the seeming bug of the routes disappearing from Winbox ip/route list.

terintamel

Well I downgraded to 7.5 stable and 38 routes show in Winbox/terminal now. It looks like some bug with 7.6b6 as I kept importing the routes again and they kept disappearing from winbox/terminal but were still there so I had several duplicates after downgrading. However it still show 20 items out of ...

terintamel

Just noticed that in Winbox it shows only 16 routes but it says 16 items out of 36. I go to the terminal and print the routes and it only shows 16. Where are the other 20 routes Winbox/terminal are not showing?

terintamel

I have a test router CCR2116 on ROS 7.6b6 and I keep having routes deleted from the routing table.

This is a test router and is not actually routing any traffic.

I import the routes again and they are there (inactive) and after a few minutes they just dissappear.

terintamel

Not sure if this answers your questions but I have two BGP feeds that I manually load balance using BGP advertisements (for incoming traffic) and routing filter Local Pref for outgoing traffic. I do not use prepending at all. I have had this in place for years with no issues. I have a /20 IP block s...

terintamel

I setup a test BGP between ROS 7.2.2 and 6.48.2. It is a simple BPG connection just to test functionality. Well I found that if I did not specify a Keep Alive time on the ROS v6 router then the Hold time would expire on the BPG session. I see you have a keep alive time set on the v7 but I do not see...

terintamel

Got it so in my v7 routing table I would have to have 192.168.96.0/20 192.168.96.0/21 192.168.104.0/21 Do all three routes have to be enabled? Could I put in the /21s and set them 'disabled'? Also the distance value for each route does not matter for the BGP advertisement, so I could have the /21s a...

terintamel

I am working on converting a v6 BGP setup to a new router running V7 and have a question on the advertisements. Here is the example setup (Using private IPs just for example purposes) BGP Peer1 (172.16.5.1)->border router eth1 -> border router eth3 -> core router eth1 BGP Peer2 (172.16.10.1)->border...

terintamel

Upgrade from 6.44.3 to 6.49.5 fixed the problem.

terintamel

FW upgrade fixed the issue. Load now spread evenly across the 4 cores.

terintamel

I do care about vulnerabilities but not every exploit affects everyone. Some do depend on your router configuration. Anyway I have not had one router compromised in the 8-10 years I have Mikrotik deployed. I do employ firewall rules to lock down everything I can and make sure access is only from app...

terintamel

Any particular reason for running old (and very old) firmwares? I know for sure there were a lot of vulnerabilities solved. Do you experience the same behaviour when firmwares are equal? No particular reason. I just don't usually upgrade FW unless there is a specific issue that the new one resolves...

terintamel

Here is the traffic load for each. Each router FW is just the standard Fasttrack/Accept Established/Related with a couple of input rules to protect router management access. The rest of the config is just DHCP server/leases. No NAT or PPPoE. Router 1 6.44.3 traffic.PNG Router 2 6.47.7 traffic.PNG

terintamel

Here is the cpu profile for each router.

As you can see one one RB450Gx4 everything is pretty much running on 1 core

Router 1

6.44.3 Profile.PNG

Router 2

6.47.7 Profile.PNG

terintamel

I have two RB450Gx4 routers deployed with basically the same basic configurations and on one of them the CPU load is fairly evenly distributed between all 4 cores but on the other the load is pretty much all on one core and IRQ is all on one core. One is running 6.44.3 and the other is 6.47.7. Was t...

terintamel

Here are the exact messages I get. That MAC is the address of the Bridge and the address of port ether5. Should I have an Admin Mac address configured for the Bridge or does that haven nothing to do with it?

Capture.PNG

terintamel

I have a setup where I have a RB450Gx4 on one end and a Netonix Switch on the other end. I have two wireless links between the devices. I have the Netonix configured as such. Capture.PNG On the RB450 I have a bridge set to RSTP. I have added ether2 and ether 5 to the bridge. The issue is both ether2...

terintamel

I sent a ticket to Mtik support about some issues I had with Dude client. Here is the most important section in their reply.

We will check what we can do about it when we will get back to active Dude development, currently, it's delayed because of other priorities.

terintamel

This is something that just started recently happening but is happening on multiple PCs. Basically when I double click a device in the Dude Windows Client or right click and open Device Settings it takes multiple minutes for it to open the device's settings page. While it is waiting to open the Dude...

terintamel

No this ESXI host was purchased for just running one instance of CHR and nothing else. Hyper-threading is disabled. NICs are Vmxnet3. Not sure about disk controller. Have not checked System or Virtual BIOS settings. As this is running as our Border router I will have to schedule downtime to check th...

terintamel

I am wondering what is the expected CPU overhead for the Hypervisor? My ESXI host shows a CPU used % as around 67-70%. However my CHR VM in Winbox shows CPU usage of around 30%. Is it correct that the Hypervisor has around 40% overhead? That seems excessive. My HW Specs • CPU: LGA1151 socket for 7th...

terintamel

Hyperthreading is off and the box came that way from BalticNetworks. However they setup the CHR to use 4 virtual cores, but the host only has 4 physical cores. Would I get better performance if I set the CHR to use 3 cores which would leave 1 core always open to the hypervisor than having the CHR us...

terintamel

So sometimes the Profile listed usage and the Resource listed usage are within a few % but at other times they can be 20-30% off from each other. Right now Winbox/Resource listed usage is 47%. When looking at the usage under /system resources per core It is as follows. cpu0 - 44 cpu1 - 44 cpu2 - 36 ...

terintamel

Bought a physical machine that came with CHR running on it on top of Esxi 6.5. Sorry for not being clear. It replaced a 5yr old x86 Mikrotik server. Product Specifications: • CPU: LGA1151 socket for 7th Generation Intel® Core™ i7 processor • Processor: Kaby Lake 7th Gen. i7-7700. Speed: 3.6GHz/8M • ...

terintamel

Sorry. I just re-read and realized I did not explain.
https://www.balticnetworks.com/maxxwave ... ption.html

terintamel

If I do an internal UDP btest to 127.0.0.1 the CPU usage in Profile and Resources then do match and show 100%. I am confused.

terintamel

Question. Should the CPU usage shown in the Profile tool match the CPU usage shown in Winbox and shown in the /System Resources section? I am trying to track down a CPU usage issue https://forum.mikrotik.com/viewtopic.php?f=15&t=147817 and I am having a hard time because the CPU usage between Pr...

terintamel

I'm sorry to say I have not been so disappointed with an ~$3000 router before. Here I am in the afternoon pushing around less data and using 20-30% more CPU power to do it. Is this really the best this flagship router can do? I mean I am pushing no more than 1Gbps of internet traffic and the CPU is ...

terintamel

Capture10.PNG

Capture11.PNG

terintamel

So it looks like most of the time 3 out of the 4 cores show little usage on the Routing process. Is the routing process multi-threaded? What could cause one core to be randomly taking on almost all of the routing duty? Routing process Capture8.PNG Routing process just a few seconds later with no maj...

terintamel

Looking at the CPU profile in Winbox it seems the every few minutes one of the 4 core goes from 20-30% usage to 100% usage. This corresponds with a sudden increase in the routing process. Not sure the cause as there was no sudden spike in traffic.

terintamel

I went with the Vengeance (x86 CHR) due to my success with an x86 ROS router before. Also I went with it over the CCR1036 as I needed at least 3 sfp+ ports and I went with it over the CCR1072 due to wanting the faster BGP performance as I take 2 full tables. Now I wonder if that was a mistake.

terintamel

After having the vengeance in for the last 11 hours I will say I am not as impressed with the performance as I thought I would be. While I expect is will be more stable than my older router it still seems to have much higher CPU usage than my 5 year old router with the same config. Is there somethin...

terintamel

I just replace my Linktechs Powerrouter V3 (https://www.streakwave.com/itemdesc.asp?ic=PRV3) bought in 2014 with the Vengeance as the Powerrouter has major interface issues after the upgrade to ROS 6.x from 5.x and the mfg says these routers are not supported above 5.x. Basically the sfp interfaces ...

terintamel

Nevermind I finally found some other threads asking the same thing. CHR does not support fasttrack.

terintamel

I just replaced an old x86 router running ROS with a MAXXWave Vengeance running ESXI and CHR. I have Fast Track setup in my forward chain just like I have used it on our other Mtik Routerboards. However while the Fast Track rule is showing traffic going through it neither the FastTrack dummy rule or...

terintamel

I deploy hap lite or hap minis to all our new internet installs to use as a soho router. We have done this for well over a year but recently I just received 3 customers calling about internet dropouts. We use the Dude to monitor our remote access to the router and we are not dropping connection to t...

terintamel

I have used this command for x86 ROS fine before. However I an setting up a CHR instance in ESXI and this command does not do anything.

How do you get this to work on a CHR?

terintamel

Well I found it in the change log for 6.41. I did not notice that MAC server now uses the Interface Lists under /interfaces for ACL instead of setting the interfaces directly under MAC Server.

terintamel

I cannot find any documentation on the /tools MAC Server for ROS. It apparently has changed in the later versions and I seem to no longer be able to set specific interfaces as allowed. Basically I want to have it setup to only allow access from the LAN side of my soho router. I can do that easily in...

terintamel

In fact it is so bad that you do not even have to Hit OK to mess it up. Just clicking in the drop down box has the potential to change the wifi settings and actually selecting a different channel width will "break" the router. This is extremely dangerous as I have no way to prevent a curio...

terintamel

Here is an example Skin Designer - I cannot hide those items or set to read only DesignSkin.PNG Here is then what the customer see when logging in an using my custom skin Website.PNG If they for example change channel width to 5mhz the configuration then gets so screwed up that the only fix is to us...

terintamel

That worked, but I do not find that an acceptable solution. I have the router setup to export the router configuration weekly to a router.rsc file. If the customer messes things up I now have to copy the backup file off the router to my computer and then edit it to include the :delay 15s. If this is...

terintamel

I run an WISP and we provide hAP Lite routers to the customers. Now we manage the routers remotely, but do give the customer a limited user account to make some simple changes like SSID and wireless password along with creating their own port forwarding rules. I do this by using the Skin Designer an...

terintamel

Slight correction. Most of the time it will either not load the configuration from the router.rsc file, or it will only load part of it. I cannot get it to load the whole configuration using the Run After Reset command. It will only load the whole configuration if I reset and then run the import com...

terintamel

I have been having this issue lately with 6.4x and higher ROS versions. If I run the following command /system reset-configuration no-defaults=yes run-after-reset=router.rsc the system will reboot but it will not load the configuration from the router.rsc file. If I then logon to the router via MAC-...

terintamel

I get huge discrepancy in Ping latency using the Dude on a CHR 6.35. Pings from Winbox are good. Pings from Dude client are bad.
http://forum.mikrotik.com/viewtopic.php?f=8&t=107519

terintamel

I just spooled up a CHR 6.35 Dude server in VMware. I successfully imported my current Dude DB and am having problems with the reported ping times. If I ping an IP address using the ping tool in Winbox on the CHR router I get the following. Good proper ping times. From Router.PNG However if I ping t...

terintamel

Not sure what section this belongs under.
http://forum.mikrotik.com/viewtopic.php?f=2&t=102354

terintamel

What is the best Interface queue-type for CCR routers assuming you are not using simple queues or queue trees? Based on what I read it is not clear on if 'hardware-only' or 'multi-queue' is best. "only-hardware-queue leaves interface with only hw transmit descriptor ring buffer which acts as a ...

terintamel

Kind of disappointing that I get more help on UBNT forum for MK equipment than on MK official forum.
Many readers will skip a longwinded post like yours, TLDR.

Wow!!

terintamel

So far since defaulting the 750, removing the default config, and reprogramming from scratch I have not had any further issues. I tested sending 1500 byte packets with Dont Fragment set and they go through fine. Anything larger than 1500 comes back as too large. That is what I would expect as my MTU...

terintamel

First off I use Mikrotik extensively for my WISP as our edge, core, and tower routers and never have had any issues. Any way I have just installed at my home a 750GL in a standard soho setup and I am having a hard to track down issue that may be router related? Background: I just got setup with a lo...

terintamel

Just doing some research into IPV6 and I was wondering how I would accomplish the payment redirection I do currently on IPV4? Right now I have a dstnat rule that redirects all TCP port 80 to the Mikrotik web proxy port of 8080. I then in the proxy redirect their page request to our local web server'...

terintamel

Sorry. False alarm. The script works fine, but for some reason when I migrated to 6.27 my DHCP servers did not have a pool attached so pool usage was at zero. Would have found this out the hard way when clients wanted to renew their leases and could not get an address. Now that I have corrected the ...

terintamel

I have a DHCP usage script that I got from another website (can't remember) that goes through my DHCP pools and alerts me if the usage is over a defined threshold. It then creates a file and emails me the file. Below is the script. # List stats for IP -> Pool # # criticalthreshold = output pool disp...

terintamel

Not sure the best place to post this.
http://forum.mikrotik.com/viewtopic.php ... 04#p475904

terintamel

Here is the CPU usage per core when the Managment usage spikes.

Core Usage.PNG

terintamel

I just replaced a RB493G running 4.17 for a RB850Gx2 running 6.27. The configs are the same between devices however the CPU usage has large spikes as you can see on the Usage graph attachment Usage Graph.PNG . If you look at the Normal CPU attachment this shows how the CPU usage is normally Normal C...

terintamel

Is there a way to do it without switching from bridging to routing and running OSPF. Our core switch the Cisco is a L3 switch and to my knowledge does not do OSPF.

terintamel

I need some help. I have a fiber-optic customer that currenly has a brigded link back to our core switch. He has a wireless backup, but right now he has to manually remove the fiber link and then connect the wireless link. I would like to setup a way that he can have both connected and if the fiber ...

terintamel

Hello, I am setting up a Mikrotik box to do traffic shaping and then per customer rate limiting. Following the examples on the wiki page I am going to mark traffic for shaping in prerouting and prioritize in global-in, then remark traffic in chain forward and rate limit in interface queue. My questi...

terintamel

Was able to get in through console port. Was able to google for the commands to disable the bad firewall rule.

terintamel

Hate to be a bother, but a firewall rule was added accidentally that drops all established connections on input chain and I can no longer get into the device. It is a PowerRouter 732. Could anyone please advise me on how to get access again (via serial cable??) and how to modify or remove the firewa...

Search found 99 matches