MikroTik

SoKaR

Hello, I simply wanna sniff some PPPoE LCP Pakets from one of our Customers. Am I doing something wrong? PPP LCP (MAC Protocol) should be 0xc021 in hex what i set in the filter? If I set the interface to Eth-Port i can only see the PPPoE Session Stream. LCP.png When i'm sniffing the complete PPPoE S...

SoKaR

Okay will give a second try now :-S We also found an IPsec issue that could be related to your specific config, so problem still exists on our site too. We will make a special fix for you to test. Yes all packages are the same release now and IPSec will still crash. Do you need again a supout file?

SoKaR

Okay will give a second try now :-S

SoKaR

SoKaR need more information as all known IPSEC problems where resolved in 6.2

I just sent u an E-Mail (support@mikrotik.com) few seconds ago with two supout files.

SoKaR

Oh hell... just updated and now same sh** as 6.1 ! What are u doing guys?

Again crashing, again kernel panic and again it seem's to be an IPSec problem?!

6.2.png

SoKaR

Thanks again

Now i believe i found the right way: http://wiki.mikrotik.com/wiki/Manual:Connection_Rate
Will test it with logging and throttling so i can get more informations out of it.

SoKaR

Sounds good, but i would prefer another opportunity if it's possible. What Filterrules could i add to "track" these massive bursts?

SoKaR

Thanks for the advise, but you will understand i can't sit 24 hours in front of the torch tool. We also have more than 60k connections / second from our customers, so torch tool hangs up many times.

SoKaR

These bursts are any kind of attacks. If i would know which kind of packets are sent, i could stop that :-/ Don't know how to track this. It looks like a DDoS yes ... Any ideas how i can stop that or to find out which protocolls these are?

SoKaR

Hello together, since a few weeks i can watch irregular incoming bursts, but i don't know how i can handle it in a better way. Maybe someone could help me with that problem? Here are my filters what i've done till now: Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Allow Input AccessList chain=...

SoKaR

The best way to manage logs in Mikrotik - and frankly just about anything - is to export them via Syslog to a Dude server. You can then filter/sort/export them to your hearts content. Go one step further an deploy SIEM if you wish to do correlation etc... http://communities.alienvault.com/ I havent...

SoKaR

I can confirm the problem with IPSec and ROS v6. Now back to 5.25, all fine! Please fix this bug soon, want to use my CCR again ...

SoKaR

What is new 6.1RC1 ? i see this demo.mt.lv is coming new release :) What's new in 6.1rc1 (2013-May-27 08:19): *) api - added support for API over TLS (SSL); *) api - api service is now enabled by default; *) ppp - do not show R flag for locally authenticated users; *) vrrp - fixed ah authentication...

SoKaR

Push it to the limit

SoKaR

L2TP-Client default-encryption is crashing the Router. First i tried RC7 now RC6 but same result.

1.jpg

2.jpg

SoKaR

That's sad to hear! In our country, it is usual to get a new IP after re-dial-in. Especially if you have a 24hour-disconnect in your trade terms!
At the moment we're using FreeRadius, so i also give a try to this solution. Hard work, more than 35x RB 1200 are waiting to be reconfigured :-S

SoKaR

Not exactly what i searched for, but i will give a try. A little bit modified^^

Is there another solution for this "problem"?

SoKaR

Hi there, i just wanted to let you know:

Last week we bought a new NIC ( Intel 82574L EXPI9301CT ) and now all problems are gone! No more RX Drops, no more OSPF crashes. Running for over 2 Days... all fine!

SoKaR

Thanks! yeah and actual this is what i want to know! how to prevent assigning the previous ip

SoKaR

Sorry for missunderstanding, i wanted to avoid that a pppoe caller get's same IP Address on next dial-in.

SoKaR

Hi there,

i just wanted to ask if i could clear the owner/info pair in ip pool without(!) to reboot the machine?

Thanks so far!

SoKaR

Got answer from Support. The reason is found, but it won't makes me happy:

http://wiki.mikrotik.com/wiki/Supported ... t_chipsets

Intel 82541GI/PI Gigabit Ethernet Controller (rev: 5) 2.9.49 Working but with high traffic (>100M) and many packets makes drops

SoKaR

I'm nearly upset within this problem! No solution? Wrote for over a week ago Mikrotik support with all information suppout file etc. but no response yet. Nothing. I would appreciate not to move OSPF to another manufacturer. I also contacted our distributor to solve this problem but he also hadn't an...

SoKaR

Hi there, im fighting for weeks now with a stupid problem! The issues: 1. OSPF stops working 2. Cause of OSPF Stop, all L2TP connections went down until OSPF is restarted 3. RX Drops on Ethernet Version 5.22 on x86 System with NIC Intel PRO 1000 First we replaced the wire to our switch. Then we repl...

SoKaR

/bump

SoKaR

Hi again, for now the Drops are gone. Few packets are dropped, don't know why but 255.000.000/500 Sent/Dropped are okay for me! ;) Maybe the MT-Stuff could implement the new intel driver in an official stable 5.x release?! Edit: RX Drops are back. Seems to be related to OSPFv2 bug Edit2: Support fou...

SoKaR

Update to 6.0rc3 seems to be okay, no more RX Drops for now! Just continue monitoring!

SoKaR

What's new in 5.22 (2012-Nov-23 09:28):

*) l2tp server - added keepalive-timeout setting;

Thanks!

SoKaR

Hi Normis, thanks for reply.

I already know a few things:

*Model: generic Noritake Soekris HD66712 LCM-162
*Working on IPCop: http://www.ipcop-forum.de/forum/viewtop ... 22&t=26948
*Driver: ftp://212.18.29.48/ftp/pub/allnet/utili ... .0.tar.bz2

SoKaR

Sorry for grabbing this old thread out, but i've the same problem with Intel 1000 Pro. Any solution yet?

SoKaR

No one?

SoKaR

Hello together, I recently bought the low budget server "ALLNET FW8888" and put a mikrotik CF in it. Now i wanted to ask, how i can configure the LCD panel. LCM: generic Noritake Soekris HD66712 LCM-162 Manual: ftp://212.18.29.48/ftp/pub/allnet/utility-server/fw8888/ALLFW8888_QIG_V1.0.pdf ...

SoKaR

Yeah but if sync breakes and comes up again under 30seconds. The l2tp tunnel is created dynamic, this is what i prefer to avoid.

SoKaR

Hi,

sry to pick up this old thread again, but i've the same problem. Any solution yet?

I don't understand why it's so hard to implement this feature. The effort would be so low

Greetz

SoKaR

Found another solution. Thanks.

Drop Input - SRC Address List
ppp profile - incoming filter

SoKaR

Backbone <-> L2TP Server + Radius + Management NMS <->L2TP Client + PPPoE Server <-> WiFi CPE (which have to reach the Management NMS) <-> PPPoClient # may/31/2012 09:30:59 by RouterOS 5.16 # software id = ZFR7-4PTV # /interface ethernet set 0 arp=proxy-arp auto-negotiation=yes disabled=no full-dupl...

SoKaR

Okay, not so good as i thought. Is there really no option to select PPPoE Server als interface for all Users?

SoKaR

Good Approach! I'm testing the rule "drop all traffic to management subnet with in-interface=!management-interface". Thanks so far.

SoKaR

Hi there, i just wanted to ask if there is an option to block traffic from PPPoE Clients to Management Subnet on MT with an interface rule? (not SRC IP) I saw there is an option to add a filter rule with incoming interface "pppoe-in1", but my problem that's just for particular users. Or am...

SoKaR

Okay, done by myself. Can be closed!

SoKaR

Hi together, i wanted to ask if you could help me in following configuration: MT BRAS (with Radius Client over L2TP & local PPPoE Server) --> L2TP Client --> L2TP Server --> MT Core --> Radius My idea was, to link both Mikrotik (RB1200) over L2TP and to transfer data traffic through the tunnel. ...

SoKaR

Nore more ideas? :-S

Perhaps because i have a proxy-arp bridge?

SoKaR

Tested it, same result. Keep-alive time out ...

What i noticed, when the pptp client connects the pptp server is no longer pingable.

SoKaR

[SoKaR@SKR Production] > /ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 95.90.227.254 0 1 ADC 95.90.226.0/23 95.90.xxx.xx...

SoKaR

Hello and thanks for your advices. Tried your ideas but same result. It keeps disconnecting me with reason: terminating... - keepalives timed out

What can i do / log to find the problem? Should i sniff the traffic?

SoKaR

I checked it, but same problem.

SoKaR

Hello together, I'm new with Mikrotik an need some help. Till now, i used Windows 7 VPN service to connect to my company, but i'd like to handle it with mikrotik. What i've done: SoKaR@SKR Production] /interface pptp-client> print Flags: X - disabled, R - running 0 R name="pptp-out1" max-m...

Search found 47 matches