MikroTik

faisali

Just a suggestion:-
try to change change the queue type to multi-queue-ethernet
and also look into how to enable that for the nic via the hypervisor / Vmware.

faisali

Care to post the code of your filter ... i.e how are you controlling what you are advertising ?

faisali

You can do this with static routes and distance settings, i.e. installing static routes on all three pointing to each other and using gateway check to remove them from being active... or you can do this via dynamic protocol.. i.e. setup OSPF on all three routers < ---- That would be the preferred wa...

faisali

static routing or dynamic routing (ospf) both will do the job.

faisali

Check out these threads ..

viewtopic.php?t=64572

viewtopic.php?t=72898

faisali

Check out this article..
https://wiki.mikrotik.com/wiki/Manual:B ... n_RouterOS

hint.... issue peer refresh command after changing filters !

faisali

I will be more than happy to compare notes.. since I just had to do this and have it working on our MT Routers.. Two Edges, doing RR to each other.... Had to use Ipv6 prefix between the connections (no link state). Additionally on a 3rd router, I had to put static route to 2nd Edge router to get aro...

faisali

Happy to report...... the issue is not there on the newer image...
Had to dump the older image and install the new one.

faisali

Here is what I got back from support ! :( --------------------------------------------------------- Hello, Please use newest version (6.36rc version is the old one). Install 6.39.2, then your CHR will be licensed properly. Best regards, Sergejs -- MikroTik.com ---------------------------------------...

faisali

I am having the same exact issue....
I have sent a support ticket request....

Let's see what they come back with..

CHR_License_Issue_LI (2).jpg

faisali

Follow the instructions in the Mikrotik WIKI...
Chances are you have not done the two settings for route reflection.

faisali

BGP Convergence time, is an issue on the CCR but not on the X-86 or CHR platforms.

faisali

FYI.. the BGP Community is a Label.. you can define it as you like... it is considered best practices to use one's ASN as the first part of the tag, this way it is always unique.. but there is no rule which says it has to be this way.... e.g. you can use 12345:111 and that would be valid too.

faisali

Can u test it without the Bridge on the CCR ? i.e. just use a single port and n bridge feature... (just for testing).

faisali

It could be something to do with CCR & 1 CPU Core for BGP .... I can tell you that is not an issue on the X86 or CHR platform... We have multiple X86 based routers doing all kinds of BGP sessions v4 & v6 (multiple full tables etc etc) without any issues... different versions of ROS 6.32 to 6...

faisali

Thank you all for your suggestions and comments... I feel incredibly stupid...... after staring at it and doing the packet capture.... I realized that I was using my-own IP address (as assigned by the Peering Exchange) for the other peers remote address.

faisali

Any chance the remote router ID is in use in any other BGP session?

Not with that peer.... I have also shutdown all of my bgp session on this Edge Router, and then just turn up this particular peer, and I still get the same duplicate router-id message.

faisali

We use a public IP for the Router Loopback interface, and we use that same IP address as the Router-ID (in the bgp instance). Yes, I did change the Router-ID in the bgp instance (default instance), and verified.. This particular peer, when I enable it, gives me the same error message, duplicate rout...

faisali

Tried to use a different IP for the Router-ID, the session is still complaining but now with the new Router-ID (duplicate-id).

faisali

Is it possible you've used a RFC1918 IP as your loopback IP and just out of sheer luck and coincidence this peer used the same one? A troubleshooting step would be just to change your router-id in the BGP instance. Sadly this will (should) reset the BGP sessions you have causing routes to flap once...

faisali

Hello, We are experiencing a very strange issue... If any one can shed some light, it would be great. Background: We have more than a hand full of X-86 RouterOS Routers working as Edge Routers in different parts of our network, some of them with as many as 80-90 BGP Peering sessions (connecting to d...

faisali

ok... let's play devil's advocate for a moment... You said, you don't want to update filters on all of your upstream routers when a client announces/adds a new prefix.. .. In reality doing so would be considered a best practices, because it will force you to keep your filters updated and clean.. bes...

faisali

If it works for you, great.... we do this in a simpler way.. we build our filters chains for all of our down-stream BGP customers with the prefix-length option.. e.g. chain=XYZASN prefix=xx.yy.zz.0/21 prefix-length=21-24 invert-match=no action=accept etc.. all of our bgp sessions have in filters and...

faisali

Hrmmm... Filtering out routes on the IX towards our customers unfortunately wouldn't stop us learning a more specific route to the customer via a path we don't want to limit capacity on. I suppose I could jump to a chain which I could build via a script, which would filter out prefixes if they resi...

faisali

If I am understanding you correctly, then I think you are building filters which are prefix specific.... We build our filters in such a manner e.g. chain=XYG:12345 prefix=xx.yy.zz.0/21 prefix-length=21-24 invert-match=no action=accept the prefix-length option selects all prefix lengths from /21 to /...

faisali

Here is a nice resource to do that.

https://www.dan.me.uk/filtergen

faisali

Well, now you know the reason why IP Transit providers do not 'peer' with their customers over the peering exchanges... Having said that, keep in mind that this is a bit of a business position vs technical position balance on how to manage the traffic. Chances are that the IP Transit being provided ...

faisali

in regards to the routing filters.. When you define them with a prefix such as in section # 1... then you will only have an exact match .. e.g. add chain=ospf-out prefix=10.0.0.0/8 action=accept ............will only accept 10.0.0.0/8 prefix nothing more nothing less add action=accept chain=ospf-in ...

faisali

Review this for what you need to accomplish..

http://mum.mikrotik.com/presentations/US12/tomas.pdf

faisali

Review this to see if it helps you in your design.

http://mum.mikrotik.com/presentations/H ... ktech1.pdf

faisali

How about the following:-

in the default ospf instance, do not redistribute static routes
and put the prefix you want to re-distribute in the network sections of ospf

faisali

Request to fix the logic/selection of prefixes when using BGP Communities only in the selection criteria in the chain/filter list. ------ Background:- When you have prefixes with multiple BGP communities tags, ACL filters will not properly select prefixes if the BGP community tag is not the first co...

faisali

Not quite sure what your question is...

But having said that, you will also need to create an ibgp session between all of your routers (mesh) unless you are doing a RR (route reflector) config.

faisali

Unfortunatelly ROS does not have "delete-community-by-regex", so my internal communities will go to internet :) since communities consist of two # (ASN:XXXX) having your internal communities being sent to your upstream has no affect. Additionally, if you want you can override them in our ...

faisali

I believe you are pretty confused and overthinking this...
I would suggest that you do this very simply, use static routing, or dhcp to hand out the ip's to the daryteks.

faisali

interesting post, with great painstaking detail. I can also say that I have seen such a problem with our mix of x86 MT Routers (variety of 6.x versions, doing bgp, ibgp etc.). Sorry for being vague... Couple of weeks back, I had to chase down a problem where we are seeing a 'ghost route' on our edge...

faisali

There is a small possibility that this is due to particular type of setup your upstream may have on their BGP.. We have seen this type of behavior with e.g. Hibernia networks. When a bgp session goes down under certain conditions, they will not allow a re-establish, until, unless the session is rese...

faisali

Sounds like you are not using any out-bound filters, and quite possibly advertising the routes you are receiving from one ISP to the other. You need to setup filters for inbound and outbound on each of the connections to receive that you should be receiving and sending only what you should be sending.

faisali

Post your config....
you can see the status of the BGP peer via winbox under the Routing, BGP, Peers tab.
you can see how many prefixes you are sending and what you are receiving.
Additionally system logging can also give you some clues as to what could be wrong.

faisali

This is a bit of a complex topic... Balancing traffic to two provider via BGP is more of an art than science... because of how Traffic Engineering is done in the BGP world. Having said that.. if you want to select some routes to go out via ISP1 and others go out via ISP2, you can use the Local Pref ...

faisali

Doing ip route lookup with full tables or multiple tables can take a very long time.... Exact matches are much faster.. or doing route look up of smaller prefix with a listing of all routes with larger prefix within it are faster via winbox. But in general anything other than exact route look up can...

faisali

For static routes, you have the option pref-source option that you can set For OSPF routes, you have ospf-in filters where you can set the pref-source option. I had to deal with a specific situation with BGP (Peering) where I had to set the pref-source for incoming routes ... I have not played much ...

faisali

Yes, it can be done using filters.

faisali

Why two out interfaces ?

also, the dst-nat rules should be infront (before) of the src-nat rules.

faisali

possible port conflict with the mikrotik web interface (80) ?
move the mikrotik web interface to a different port ...

faisali

post your config... you most likely have an error ....

faisali

Most likely you are maxing out the CPU to 100% when you are running the btest, as a result of this the PPPoE Connections are getting dropped...

faisali

I was not offering you an explanation on why it happens ..... I was offering you the way to solve it.. I often have to remind myself and others, in our business, when standards are not followed (or proper configuration not done) the net result is not something broken but more realistically something...

faisali

BGP is not designed to offer ---> load balance on per connection basis between two WAN links.

faisali

Your out filters are correct..... if the only problem is that you are still advertising all of your prefixes to both providers, then I suggest you bounce one of the BGP sessions to confirm the filters taking affect (this is the brute force way of doing it).

faisali

This is not something that is broken... it is just something that needs to be managed via setting the pref-src attribute, when you have a interface with multiple IP's. http://wiki.mikrotik.com/wiki/Manual:IP/Route ----------------- pref-src (IP; Default: "") Which of the local IP addresses...

faisali

The Config i have: Mikrotik Main 172.16.1.1/30 172.16.1.0 ether2 1.x.x.x./28 109.166.155.32 ether1 - WAN 192.168.88.1/24 192.168.88.0 ether5 172.16.10.2/30 172.16.10.0 MTMain-Client - this is the tunnel interface 172.16.255.3/32 172.16.255.1 loopback 192.168.88.1/24 192.168.88.0 VRRP1 Simple BGP: /...

faisali

While I realize that this is an old thread, I just wanted to let folks know that I recently came across this..

http://joshaven.com/resources/tricks/mi ... ress-list/

faisali

Remember, cost of ospf link needs to be set in each direction.....

faisali

Take a look at this ..... will sort you out..

http://robert.penz.name/779/howto-setup ... k-routers/

faisali

The answer to your question is, you can set it up do what you like... e.g if you wanted to load balance across the two interfaces, http://wiki.mikrotik.com/wiki/Manual:BGP_Load_Balancing_with_two_interfaces or if you wanted to do load sharing... http://wiki.mikrotik.com/wiki/Manual:Simple_BGP_Multih...

faisali

Let's see if we can give you a big picture explanation......Ask you provider to send you the full list of communities. If they are one of the major providers, you can do a google search to see if their full communities list is available. Most IP Transit providers these days do traffic innerspring, w...

faisali

Question / Suggestion:- Are you not able to run BGP with ISP3 ? that would allow for a much more consistent network setup .... setup eBGP with one peer on each of the routerboards. run iBGP between the three routers (a mesh) run ospf between the three, and your internal network. This way you can con...

faisali

Never knew about that recommendation.....
we have multiple x86 routers doing multiple full feeds, and we use SNMP to monitor them.

(too bad that BGP snmp mib is not there.. but monitoring interface and bandwidth has not been an issue)

faisali

هل يعمل كا اكسس بوينت عادي

Yes it does work as an 'normal' wifi access point .. indoor use.

faisali

There are multiple ways to 'skin this cat'..... a) If you are the only connection for the customer to the internet, then it does not matter if you 'originate' the routes via your router to your upstream, and do static IP to the customer or run bgp with your customer, if there is a problem on the cus...

faisali

You would do it, one step at a time... You will have to use filters in your bgp advertisements .... and define your prefix appropriately...(as long as the prefix is in your active routing table) bgp process will advertise it to the peer. You can use the network aggregation section of bgp to aggregat...

faisali

Thanks Faisal, I have tried your proposa, but I have the same problem, this filter send the full table and not only the route tagged with the community 1234:1. The output communities filter seem to be not working fine. L. Post your config, you may have a typo some where. You can always troubleshoot...

faisali

This should do what you want..

----------------
add chain=output-1234 action=accept invert-match=yes bgp-communities=1234:1
add chain=output-1234 action=discard invert-match=no
---------------

Faisal

faisali

is it possible that you are getting confused between how OSPF works vs BGP ? or something is getting lost in the translation... OSPF maintains a separate routing table database, from which only certain routes are added to the main routing table. however with BGP, all in-coming routes are put thru th...

faisali

Try your filter without the "protocol=bgp"

as long as the route is active / valid in the routing table it should get advertised out via bgp..

faisali

I though OSPF would summarize the routes that passes over HQ, so it woud not need to learn all routes.

If you want to do route summarization, then take a closer look at this example how to ...
http://wiki.mikrotik.com/wiki/OSPF/Summ ... ex_example

faisali

You are asking a fair question.... we can wait to see if Normis or someone else from MT can shed more light...
But my experience is that these filters are not 'stackable'..... i.e. each (set) gets evaluated and applied individually

faisali

Fair ..... looks like you are playing / exploring the system and how bgp works... Your results with the two BGP instances, is as expected, I cannot think of any circumstances in which one would need to do the config (two instances of the same ASN), however I can see the circumstances where it is nee...

faisali

Best practices suggest that the Router ID to be a valid (single /32) IPv4 Address which is also setup a a Loopback IP on the router.

faisali

In testing BGP route filters I have noticed the following behavior and wonder if it is correct. It seems that for an out filter the order of operations is as follows: 1) BGP instance out filter 2) BGP VRF out filter 3) BGP peer out filter The trouble is it seems that accept rules in the VRF filter ...

faisali

it is my understanding that on the MT you can have multiple instances of BGP running on the single router, with each instance being a different ASN... in such case, the redistribute-other-bgp will exchange routes between the two instances.

faisali

OK I get it now. redistribute-other-bgp=no has no effect because both peers are in the same BGP instance. if they were in different BGP instances then this setting could stop them from sharing routes. am I right ? I have never used that feature / configuration, but yes, that is what my understandin...

faisali

Yes I know about filters. but you say it is normal for mikrotik router to simply announce all my routing table if I have not filtered it ? so why is there route-reflection settings ? why is there redistribution settings ? why is there Networks settings ? because mikrotik is going to announce everyt...

faisali

http://wiki.mikrotik.com/wiki/Manual:Routing/BGP You are looking at the /routing bgp instance ..... this is for the instance of bgp running on the MT. the settings for each peer is under /routing bpg peer You will see from the manual (link above) that there is another property for Filter in both sec...

faisali

I will post this as a IPv4, feel free to translate to IPv6... (First Item) How to Build Filters in MT / ROS ... /routing filter add chain=NAMEOFCHAIN prefix=68.122.0.0/19 prefix-length=19-24 invert-match=no action=accept set-bgp-prepend-path="" The above is equivalent to :- ---------------...

faisali

What is advertised to the Peer is controlled by the Filter in/on the peer configuration.

What do you have defined on the BGP Peer Filter ?

The default behavior is to advertise all active routes....

faisali

Tell you what.... Take the first crack at it, and post your config, it will be easier to suggest corrections to it, than building you a full config from scratch. Quagga Configuration is similar to Cisco's... so you can use this a starting point: http://wiki.mikrotik.com/wiki/BGP_CiscoToMT Also look ...

faisali

The sites doesn't communicate between them. They only can reach the HQ. It does not really matter ... Once the tunnels are established, it is simply a routing issue.... if the sites can communicate to HQ, and you have a tunnel to HQ. You should be able to reach the sites, and the sites reach you, a...

faisali

Just a wild guess.... possibly Missing default route on the Raspberry Pi ?

faisali

I'm talking about inbound to me. I make the necessary changes with AS Prepend and I can see those changes through the HE Looking Glass but it doesn't make a difference to inbound traffic. I'm assume our provider is ignoring this? If I've got R1 and R2 both advertising my /24 could I block any IPs f...

faisali

Needless to say it a bit 'wonky'.... I had to play with it.... (Took a bit of patience :) ) 1. if you are going to use Route Comment, then just use Route Comment, and not communities, in your filter. 2. Make sure that the route is active on your router, that you are advertising from. I had a couple ...

faisali

I can't belive that noone had such problem.
Everyone is using static routes, or not using load balancing at all?

Gona do TE next week gues, hope that will work.

Load balancing over per-connection basis is preferred, it does not break Secure Traffic.

faisali

How familar are you with MT ROS ?
How Familiar are you with BGP ?
Are you looking to hire someone to do this ?
or Are you stuck and looking for some hints ?

faisali

if the customer sites can talk to each other (i.e. routing if working between all of their sites) then all you would need to do is add the routes between your office and their sites, no need for additional tunnels..

faisali

@faisali This might be a good hint to make it work, but looks more like a workaround than a correct solution. It is true that ospf routes will be prefered, but there are no BGP routes announced, that's why OSPF is prefered. Please see this.. http://wiki.mikrotik.com/index.php?title=Manual:Route_Sel...

faisali

Your questions are appropriate but there is no simple answer to them.
I would suggest that you google for OSPF best practices, and or ISP/NSP Best Practices to get familiar with the why to do and why not to do arguments.

faisali

Go over Tomas's presentation carefully, you have missed something....

faisali

.. What is you bgp-out filter looks like ? best practices, suggest that you don't do redistribute-ospf, redistribute-other-bgp <--- this is not what you think it is... If you are going to do 'redistribute-static, make sure you have a static route for the /24 (even if you set it up with a very high d...

faisali

There are a number of ways to do this.... Depending on the preference of solution choice... You could do this via OSPF.... http://wiki.mikrotik.com/wiki/Dual_Setup_with_OSPF (you will need to modify the setup to suit your needs) You could do this via BGP.. (massive overkill) You could do this via li...

faisali

How can I prevent ospf replicating our routes to network attached based on interface level instead of some strange mask+prefix that does not work anyway ? For example) I have local networks attached to an ospf router: eth1=192.168.1.0/24, eth2=172.16.1.0/24 and eth3=192.168.16.0/24. But I want ospf...

faisali

A couple of quick pointers:- iBGP requires every participating router to talk to each other, i.e. a mesh..... so you also need to rung iBGP between R1 & R3 Additionally, I would include R2 into the OSFP network as well. so your connected interfaces route via ospf....(since ospf is going to be pr...

faisali

Here is a mum presentation on how to do exactly what you are wanting to do.

http://mum.mikrotik.com/presentations/H ... ktech1.pdf

faisali

We do something similar, tag communities (append) on inbound routes, and use this info in filters to outbound routes . one thing I have noticed is that when you append communities, e.g. a route has multiple communities on it, the MT filters don't work.... However, this is not a problem if you are no...

faisali

Just touching base again on this one. Is there any way to block a particular subnet from accessing the network through a particular connection? I realise this does away with multi-homing but I'm OK with that for the time being. Is there any way I could redirect a connection? This question need more...

faisali

Post your config... sounds like you may have something mis-configured.

faisali

First time BGP setup. I have the basic BGP working fine on 1 of my 2 connections with cogent using full routes. Right now I am advertising a /24 out of one of my /21s and internet is working great. However Cogent will not allow me to advertise smaller than a /24. Is there a way around this? Here's ...

faisali

if you have your WAN / Serial side IP's configured correctly on both sides (your router & ISP # 2), then you should be able to ping the other side ... (this would be a connected route, and thus not going via the routing table)..... If you are not able to do that, then you have a physical layer c...

faisali

Take a look at this old thread discussion....

http://forum.mikrotik.com/viewtopic.php ... 24&p=60288

-----------
Make note of the ... ' pppoe server needs to be in it's own ABR and not backbone ' for route summary to work.

faisali

You can use null route to do so as well.

Here is a nice discussion and with how to info ..

http://forum.mikrotik.com/viewtopic.php?f=6&t=2413

faisali

To setup iBGP on Mikrotik, there are two settings you have to turn on.. one is "Client to Client Reflection" .. .located under the default bgp instance setting the 2nd one is under the BGP peer setting "Route Reflect" Your input is appreciated! Do those need to be turned on both...

faisali

Take a look at this presentation http://mum.mikrotik.com/presentations/RU13/megis.pdf

According to slide # 22...... output chain on bridge does not go thru HTB Queue Tree.

faisali

Your question has been asked, discussed and answered before ..... Do a bit of searching on the Forums. e.g. here is one such thread. http://forum.mikrotik.com/viewtopic.php?f=14&t=82738 Btw that link is more about iBGP to eBGP peer. My question is the exact opposite. Routes learned via eBGP is ...

faisali

I already did searching in forums, that link you posted is among the open tabs in my web browser. However those are all workarounds for the simples functionality in all other vendors. Also I did not quite understand your workaround. Are you adding and stripping some arbitrary communities to the rou...

faisali

Your question has been asked, discussed and answered before ..... Do a bit of searching on the Forums.

e.g. here is one such thread. http://forum.mikrotik.com/viewtopic.php?f=14&t=82738

faisali

Also if anyone has used the MW-RM1300-i7 - Routermaxx 8 Port Gigabit Core i7 Router I would like to hear about it as well. What would you like to know ? We have been using core2duo based units (powerrouter or routermaxx), some of them we have recently replaced with the i7 Versions (needed to to 10g...

faisali

Take a look at this.. it not only shows how to do this, but also explains step by step.

http://mum.mikrotik.com/presentations/US12/tomas.pdf

faisali

Hard to comment on your claims .... Could it be what you are experiencing is due to some missing configuration ?

You can post a config, and use that to start a discussion...

faisali

1) Make sure you have loopback interface setup with IP address. For eBGP or iBGP peers? Do you use public or private IPs for loopback? the only one with different settings is the ibgp peer (it has route reflector setup) you have route reflector enabled on both routers for iBGP? BGP Best Practices r...

faisali

So I moved from EOIP to VPLS, and I encountered some problems *here* is the network layout example. Everything is bridged via local bridge, but on router 10.0.0.1 I created separated bridge called "switch" and assigned eth4 port to it, I also created two VPLS interfaces with different VPL...

faisali

Thanks for the link, strated implementing the process . Just want to know is it passable to use policy based PCC load balancing in BGP environment with 2 BGP peers as in the earlier network diagram. in BGP world different methods are used for traffic engineering, as-prepend to influence inbound tra...

faisali

Thanks for the reply, I've been doing more reading on this topic and I think I will move to an mpls backbone in the future, though for now I will use the EoIP tunnel. As far as migrating to an MPLS Backbone, is there a way to do it smoothly with minimal or no down time? Take a look at this MUM pres...

faisali

It gets even more interesting.... :) There are many ways to do so, but each has it's own set of challenges.... I suggest you break them down to make things manageable... The how to details in Tomas's presentation are excellent since they explain what each setup does. Depending on your level of exper...

faisali

While doing this configuration via VRRP is one possibility, it will give you hardware redundancy as well.. but you can see that the complexity of setting this up to work properly is greatly increased... Having said that, if you wanted to have a 'simpler' way of having your fail-over redundancy..... ...

faisali

we are peering with a couple of dozen networks, the basic setup is the same, and then each has it's own specific setup. i.e. external peers are same as listed in the config, only difference is filters. the only one with different settings is the ibgp peer (it has route reflector setup) (Peer detail ...

faisali

ok, looks like you are transitioning from a cisco system.. no worries, you will get the hang of it real quick. You are doing something goofy with the filters.... May I suggest that you set them up modular, See my message on this thread.... http://forum.mikrotik.com/viewtopic.php?f=14&t=82738 The...

faisali

post your config...

we are using a similar setup, we have two routers doing bgp to multiple peers each, and we are running ibgp & OSPF between the two. (OSPF is running on other routers as well)

faisali

Take a look at my post on this thread.

http://forum.mikrotik.com/viewtopic.php?f=14&t=82738

It should give you the basics to get started.

faisali

Yes, is it possible to announce the /24's to both BGP peers. This is exactly what BGP is designed for. How to do 'Load Sharing'..... that is the million dollar question... FYI, Influencing traffic on BGP Peering is more of an Art than a Science... There a number of methods available to influence inb...

faisali

Configuration looks right...

What is making you say that prepend is not working ? How are you determining the prepend status ?

faisali

hello guys i thing some one can hep me about my problem i already tired to solve this problem i using RB1200 and i already open port fron 1065 -650000 but still got one way audio i hope any one can help me thank guys. you need to provide more details, bigger picture on the setup for any meaningful ...

faisali

Hello all, i have two IBGP routers and established peering with its loopback address. Also i configured both router the next hop choice -force self option. So, now the receveied routes will set the loopback address as next hop. but i don't want to use loopback ip address as next hop. i want the nex...

faisali

Hello i have simple network infrastructure one CCR1016 (alpha) with 3 x eBGP sessions and another (beta) with 1 x eBGP session and both combined to iBGP with public ASN alpha and beta load full prefixes from eBGP peers beta get all prefixes from alpha when alpha getting some prefixes sometimes 30-5...

faisali

We do this today in our network. We have two Edge routers, doing eBGP to different External Peers, and iBGP and OSPF running between the two Edge routers. A Couple of hints / tips etc. In our case we want to have a full table on both iBGP peers, as such we have route-reflection setting turned on. Th...

faisali

Hi I have two peers with full tables, ISP A broadcasts 508k ISP B broadcasts 504K I want to check which routes are missing in the table BGP from ISP B, how to do it? Wanting to do that / needing to do that is a bit extreme and meaningless, (it is quiet normal to have a variation of the total number...

faisali

Thanks for the replies. Our secondary provider is not willing to facilitate bgp, hence the dilemma. So we have settled for NATing in cases of emergency. However, here is another question that we have been contemplating as well; Our routers are is 100% mikrotik, with OSPF in one area. I would like t...

faisali

Hi All. I have been fighting a setup in my lab for a good few hours now trying to get Equal-cost multi-path routing (ECMP) working with BGP. Is this an option on RouterOS at this time? Thanks. Take a look at this ... http://wiki.mikrotik.com/wiki/Manual:BGP_Load_Balancing_with_two_interfaces (check...

faisali

Thanks Faisali for the help, i am just wondering is the hub and spoke right method for ospf ? using a switch ? or shall i put each link in its own port and make a point to point ? as on hub to spoke i dont have much control on cost of the link. Many thanks. Well, if you are going to do hub and spok...

faisali

How about a filter ? e.g. /routing filter add action=accept chain=junk disabled=no invert-match=no prefix=0.0.0.0/0 prefix-length=0 set-bgp-prepend-path="" add action=accept chain=junk disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32 set-bgp-prepend-path="" add a...

faisali

How about a filter ? e.g. /routing filter add action=accept chain=junk disabled=no invert-match=no prefix=0.0.0.0/0 prefix-length=0 set-bgp-prepend-path="" add action=accept chain=junk disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32 set-bgp-prepend-path="" add ac...

faisali

Let me see if I understand this correctly... R3 & R4 have TWO links to the Switch, one fiber and the other Fixed wireless... So you have two things going on here.. one is a 'link bonding' at Layer2 and the other is Dynamic Routing (OSFP).... You can go about fixing your problem in two ways. one ...

faisali

There are a few things you need to sort out....before you come up with a solution.. 1. Having IP address provided by upstream does not mean BGP is not possible. BGP, is simply a way of exchanging routing tables (a dynamic protocol), it has nothing to do with Who is the Owner of the IP Address Space....

faisali

Can you also post what vlan is in what bridge ?

and why are you modifying the l2mtu on the bridge ?

faisali

Why do you say it is not working ?

When I point my browser to your IP and port, I get 401 Unauthorized .... (you might want to delete the gui screenshots.... IP and port # are on the Window Bar...

faisali

on another box, where I had blown away the default config, and built the config from scratch... I had to add the WAN Ip address to the dst-nat statement... e.g. add action=dst-nat chain=dstnat disabled=no dst-address=204.xxx.xxx.xx \ dst-port=3283 protocol=udp to-addresses=192.168.10.10 to-ports=328...

faisali

for a quick and dirty test.. just go to the IP Firewall Filter Rules, and disable all of them....

(I believe this is what I did to make one of these work, where I had started out with the default configuration out of the box).

faisali

Why such a complicated config ? ( I am getting throw off by the mark routing mark ?? what are you trying to do with that ? ) Personally speaking, is it a bit hard to follow what your config is doing... My suggestion to be to strip down your config, and apply it in layers to figure out what is causin...

faisali

Okay here is another way to approach it. I have an internet exchange where I have 30 peers. Each of those peers needs to receive around 60 advertisements EACH. They are all basically the same prefixes except their own. So I have 30 peers with 60 advertisements each. If I could reference one address...

faisali

We are beginning to get more and more BGP peers in an Internet exchange. It would be really handy if I could have an address list and be able to reference that address list in a route filter. Is there a particular reason why this can't be done? Not quite sure what you mean.... we commonly build fil...

faisali

How to setup the 3 x AS number in one BGP router? Any advice? A few comments :- 1. You can have multiple PEERS on one single ROUTER using BGP, as long as your hardware can support it. We have 20 to 30 peers (peering fabric connection) all on one MT Router. 2. Bringing up additional BGP Peers after ...

faisali

However, as a general rule, we tend to put as much horsepower as possible on designs that involve MikroTik routers and full BGP global tables. CCRs are a great choice for this. You might want to reconsider the above statement about CCR being a great choice for an Edge Router specifically for multip...

faisali

Hi, Any suggestions on the best method to announce all routes to a specific peer within the same bgp instance? Currently I am filtering (dropping) everything except our prefixes. I want to provide "transit" to a specific peer. MT If you are asking on how to build a filter for sending all ...

faisali

Is it because the certain prefix carry the community internet (0:0) ? as the 0:0 will match any filter. All my incoming prefix had been modified the community from what so ever to 65530:XXXX for router internal routing purpose, so that all community internet will be erased. Thank you for replying o...

faisali

Ok. You're right. I didn't make myself clear. I would know what are advantages bgp could bring if implemented into a general network. In my scenario, I got 2 dsl connections (two border gateways) that provides internet access to some clients. So I would like to understand if BGP could help. e.g. in...

faisali

Take a look at this... http://mum.mikrotik.com/presentations/HU11/linktech1.pdf It goes thru a very decent explanation of BGP as well as OSPF, and shows an example of what you are trying to achieve. While it may not give you the MT config, it give you all the info that is needed (as long as you have...

faisali

Maybe I did not explain it clearly? BGP is simply a way of exchanging routes, Autonomous System or AS determine if BGP is External BGP (between two different ASN) or Internal BGP (Between Same ASN) Your question is a confusing, it is not clear what is it that you are wanting to achieve ? My Questio...

faisali

Hello, We are seeing something strange.. We tag certain prefixes announced to us with bgp communities, eg. 11280:115 etc. (ROS ver 5.21 as well as 5.26) We use these communities in our bgp filters for prefix announcements. e.g. chain=out-filter match-chain=XYZ invert-match=no action=accept set-bgp-p...

faisali

Hi All! I have RB2011LS: - RouterOS v6.7 - current-firmware: 3.10 I run a BGP session and want to pass about 800 networks from RB2011 to ASR1002 with /32 mask. Then i try do it, the routerboard annonce only 200 networks and generates error - "failure: number of BGP networks is limited to 200&q...

faisali

I don't understand, what would I match in the rule? Should I put packet marks on OSPF traffic? I thought the routing filters could tell which chain to use based on which instance the route advertisements were received or sent on. What is the point in setting an "in filter" or "out fi...

faisali

Hi all. Cisco as some bgp feature that extends the functionality of the BGP Local-AS. Does routerOS support a feature similar to replace-as? Cisco conf: # neighbor 10.3.3.33 local-as 300 no-prepend replace-as thank you. I am not an expert, but I have not seen this feature in ROS .... I am going to ...

faisali

I also had some initial struggles with them....but, here are a few more tips. Take a look at this site... some more specific info http://networklessons.com/bgp/bgp-regular-expressions-examples/ for example using bgp-as-path= ^10784_174_[0-9]*$ should match all routes having AS10784_AS174_* in the pa...

faisali

Documented example of what you are looking for are listed in the wiki.

http://wiki.mikrotik.com/wiki/How_to_li ... Local_ones

http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP

faisali

You are over thinking it.... Upstream Providers or DownStream Customers ..... the BGP is configured in pretty much the same manner, with the exception of filters... (You should be using some method of filtering the sent & received routes ) For an upstream peer, you are advertising Your IP Blocks...

faisali

------- add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=2.2.2.2 routing-mark=to_ISP2 scope=30 target-scope=10 add check-gateway=ping disabled=no distance=10 dst-address=0.0.0.0/0 gateway=1.1.1.2 routing-mark=to_ISP2 scope=30 target-scope=10 ---------- Possible Typo ? Shou...

faisali

Here is a tutorial on what you want to accomplish.

http://blog.butchevans.com/2008/10/usin ... less-links

faisali

Consider using a Filter ?

faisali

Fair,

Not sure what hardware (MT router) you are using... you may also have another option that you might want to consider.

Create a MetaRouter, which can provide you with a full virtual router for handling branch office traffic...

Regards
Faisal

faisali

First of all... why do you have Two BGP sessions, and another 2 'Internet Connectivity" ?

However having said that....
You are on the right track...
However I would not mark the bgp traffic, but do the policy routing for the other two internet connections.

Faisal

faisali

Salamat. Most likely you have to review your setup. Keep in mind that Port 5900 is an example port. (Tcp 5900 is used by VNC, if that is what you are testing or trying to make it work, first make sure you have VNC configured and running on your local machine, and you can access your local machine vi...

faisali

Anybody explane this error 20:39:50 route,bgp,error Terminating connection, too much routes received 20:39:50 route,bgp,error RemoteAddress=10.xx.xx.xxx 20:39:50 route,bgp,error RoutesReceived=1 With BGP, one can filter routes/prefixes by a few different methods. On of these methods is by limiting ...

faisali

I am confused... You want to bond two Ethernet links (ETHERNET) ... you can do that via LACP Group Since Ethernet is Full Duplex, why should one care for which way traffic flows ? Now if you want to bond two Ethernet Links which are actually Two Fixed Wireless Links, then one may care how the traffi...

faisali

Is this the correct way to accomplish the above ? The following commands on each of the Mikrotik's ----------------------------------------- /interface bridge filter add action=set-priority chain=forward disabled=no in-bridge=BrVoice_Vlan101 \ new-priority=5 passthrough=yes add action=set-priority c...

faisali

Speaking in general.. What do you want to accomplish by running OSPF to the Fortinet via IPSec Tunnel ? When running dynamic protocols in a tunnel, one has to pay attention to a few key items. 1. You have to setup the External Routing as static, so that when you activate the dynamic routing protocol...

faisali

Hello All, I can use some some help in trying to determine what is the right command to accomplish this (below). Mikrotik A(Eth 5 Trunk Port) ----------(Fixed Wireless Bridge PTP/WDS) --------------- (Eth 5 Trunk port)Mikrotik B BR_Vlan 101 ->Eth 1-------------------------Vlan 101---------- Br_vlan1...

faisali

1. Is there an easy way to determine whether the SFP port is functional? Loopback cable with a transceiver installed? 2. I'm just trying to setup a fiber to media converter box (Gig Fiber<-->GigE) to experiment with the SFP port. Does anyone have a good media-converter box/transceiver/cable combina...

faisali

Background: We recently upgraded a production RB750UP to 5.21 and also updated the POE Firmware to 2.0 Prior to upgrade, the 750UP was powering two Ubiquity Radios one on port 5 and the other on port 2. Working without any issues. :) After the upgrade, the POE Firmware upgrade, the router keeps powe...

faisali

Running 6 BGP Peers, 4 of them with full tables... on a Routermaxx 1200 with 2GIG Ram, memory used is about 700meg .... ROS ver 5.5

All is good.

faisali

Here is what we did to get the peering going:- Recipe for Cogent Peering (A & B) IPV4 on a Mikrotik Router. First:- add a loopback bridge you can name it what you like, we did 'cogent-loopback' assign it the /32 IP address as provided by Cogent add another loopback for your own router ID, and as...

faisali

FYI... with ver 5.x if you have winbox open to the router, while doing BGP updates, the cpu utiliation shoots up high, and accepting routes takes a lot longer...
(BUG with WINBOX ?)

Close Winbox, use SSH or even the Webfig interface..

We see this behavior on x86 boxes as well.

faisali

No issue in particular, have seen some comments and posts about folks setting 'set-in-nexthop' on the bgp in filter and others commenting on using/ modifying target and scope to route received.

Was really looking for feedback as to what is the best practice setup with Cogent.

Thanks.

faisali

Hello, For those who have 'perfected' the BGP Peering setup with Cogent.... is there anything special (settings wise, target scope next hop etc) that you have found to be best ? Other than the basic setup of Peer A, advertising routes, as well as the /32 loopback, and accepting the single /32 loopba...

faisali

awesome... Thanks this helps me a great amount to understand how the filters work as well.

is there a good resource that you would recommend reading so as to be able to get a better understanding on all the different CLI options possible when writing the filters ?

Many Thanks

faisali

Cool. Thanks..

faisali

When multiple conditions are defined on the match side of a single line in the filters, are these conditions (AND) or are the (OR) e.g /routing filter add chain=tnn-out bgp-communities=11280:661 invert-match=no action=accept set-bgp-prepend=1 /routing filter add chain=tnn-out bgp-communities=11280:6...

faisali

The ~ operator takes regular expressions. Here a quick example from my home router - can't show communities here, so instead a filter to print all routes that have a gateway that starts with a capital A: [felix@rb750g] > ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - ...

faisali

hello

what would be the command line equivalent to showing routes that have BGP Communities 'contains' XXXX:XX ?

i.e. in /ip route print where bgp-communities 'contain' XXXX:XX

what is the symbol for 'contains' ?

Thanks.

faisali

You could set a comment on the static route. Connected routes are dynamic and can't have any of their properties edited. Well the idea behind the cisco config is that with the Static Routes also able to to have the bgp community attribute tagged to them, then one can do a simple one step filter for...

faisali

Hello, Any suggestions on how to accomplish this if it is possible ? (translating from Cisco world). ip prefix-list our-cidr permit 68.142.0.0/19 le 24 route-map static-bgp permit 10 match ip address prefix-list our-cidr set origin igp set community 11280:115 I know I can use the instance filter to ...

faisali

Thanks for the pointers and correction.... so far am able to make this work. :) ps. also found out a couple of things (bugs ?)... 1) If I modify the filter via Winbox, it insists on inserting ' prefix = 0.0.0.0' , the only way to remove it is to remove the rule and re-enter it via CLI.. 2) I cannot ...

faisali

Hello All, I am a newbie in trying to figure out Mikrotik BGP Routing Filters. (am trying to change a config from Cisco :D ) Short summary of what I am trying to achieve:- At the moment, am trying to accomplish two things: 1. Trying to Advertise routes (our-cdir) to the BGP Peer, and send Communitie...

Search found 180 matches