MikroTik

syadnom

as said by Halfeez92, you can't split that /64 and use SLAAC. You CAN bridge a VLAN into the same broadcast domain so long as the MTU matches. WiFi APs are bridges for example, so anything that looks like ethernet will work so long as you keep your MTUs good and have a good network design.

syadnom

If Mikrotik had radios with multiple GigE ports, 2.5GbE or SFP+ slot, then it would be possible to really use entire 802.11ad channel. But with just single GbE it's a waste of channel bandwidth. So far 60GHz interference is not a big problem, but for how long? What will happen when Terragraph is wi...

syadnom

minimal gains to be had on 'ad hardware. It would be nice to have a 2.5/5/10Gbps port to get full capacity out of these 'ad devices but I don't see a big value until 'ay chips come out. Then 2.5/5/10 will become necessary. I'm very very close to buying cambium V5k so I'd really really love to see a ...

syadnom

U can just write script to monitor voltage then cut some poe power when below threshold u want. Then just use scheduler to execute your script every minute.

Like I said, I can , but this means a less maintainable system because of more difficulty cross training

syadnom

We understand it's coming, but best not to be last to deploy. When should we start placing our orders for terragraph-level gear? I hate the idea of committing to a vendor and then switching... If I hang cambium gear (the current leader...) then it's going to be difficult to hang mikrotik terragraph....

syadnom

just bumping this. AWS is going to be the larges LoRaWAN server out there. We really need integrations. also, a hAP AC2 like device with LoRaWAN built in (supporting AWS...) would also be really great. Reading through their dev guide, they host the server on https and you need to install a cert for ...

syadnom

Mikrotik / @Normis, can we get an update? Evaluating other products and I feel like the pricing is going to kill this entire model. Will you guys swoop in and save the day? These 200m distances for DNs with $1200+ price tags are a real let-down and the reasonably priced CPE are also ~200m in the rai...

syadnom

I've been using PoE port priority to selectively drop ports as volts drop, for example when mains fails and we're on batteries. This is really not that useful because it doesn't do anything to preserve power, just tries to keep 'most important' links up. I would like to see something more like a vol...

syadnom

Can we get an update to the lorawan stack to allow connection to AWS LoRaWAN service please.

syadnom

I'm eager for more information here too. To get max uplink between DN radios I'm seeing they recommend not more than 90meter separation (more if only 1Gbps uplink). Most are going for ~$2000/DN MSRP and $650/CN and we are crossing our fingers to get enough clients connected taken from DOCSIS 3 to m...

syadnom

SXT and virtually all MikroTik antennas except parabolics are patch antennas, which are the cheapest and craziest antenna design. Horns are wave guide with isolating layers. The horn will put more signal towards your customer for the same dB rating because none is lost to sideloges and backside radi...

syadnom

Simply put, version drift is bad. Even if older devices get a limited version, having everything on a single version level is valuable.

syadnom

Is there a known functional firmware for the 60gx3 that doesn't have the often encountered disconnect issue? I'm interested in the device, but I don't want to sign up for customer complaints.

syadnom

hoping to see the CRS318 line, specifically the netpower 16p, with hardware accelerated routing.

syadnom

yeah, very much looking forward to this. lots of mixed reviews on the 'ad based 60gx3 units, looking for the next-gen there. 'ad and 'ay are not compatible though, so that pretty new nRay and Cube AC are stuck on 'ad offerings. a) Love to know what the future holds for terragraph, when it's planned,...

syadnom

Ok, so there's been a want for a proper winbox for Mac for a while. Currently, you can run it on WINE so it's workable. With the upcoming ARM based Macs, this now means WINE on Rosetta2. Who knows how well this will work. Yes, this seems like a small corner case, but there are a LOT of techs out the...

syadnom

I want outdoor 'ax radios from Mikrotik. Look, here's the truth of it. Mikrotik is running vanilla 'ac mode. I get it, porting nv2 to 'ac is a big effort and probably not worth it. 'ax though.... it's all baked in. 'Just' making the driver work and a config interface and bob's yer unkle, Mikrotik ha...

syadnom

ISIS would be a nice feature to have. I'm using eBGP as an iBGP to overcome the slowness and other oddities with OSPF and complexity of dual stack with OSPF. ISIS would be a welcome add for sure.

syadnom

Could also have some debug code enabled or the compiler may be using conservative or non-threading flags. Can you guys run cpu profile while you test? I’m not entirely sure if we should expect multi-threading for a single tunnel. Could potentially get these speeds simultaneously on 4 separate tunnel...

syadnom

Interesting. Now I'll have to perform a ipsec benchmark later today. I'm curious to see the delta.

rb4011 has the Annapurna Labs 21400 which is an ipsec beast. Do AES256CBC w/ SHA256.

syadnom

Rb4011 yields me about 300Mbps through a 1Gbps pipe. How are you benchmarking that? I benchmarked using iperf. I have a Linux VM at a cloud provider functioning as the "client" to my Linux box within my home network functioning as the "server". These results were just taken and ...

syadnom

Rb4011 yields me about 300Mbps through a 1Gbps pipe.

How are you benchmarking that?

syadnom

4k monitor, have to zoom 3x to use it. Even a '+' in the menu bar would be better than menu zoom/menu zoom/menu zoom. Irritating.

syadnom

Do you have a next-gen 2.4 and/or 5Ghz wireless product in the pipe? I started out mikrotik wireless, and I really love the flexibility and nstream dual even pops up in nostalgia conversations these days fairly often. tik got left behind in 'ac wireless IMO. I get that NV2 wasn't 'ported' up to AC a...

syadnom

I would bet that bandwidth test is being used to generate this flow and that's affecting the throughput a bit too. Pretty impressive IMO.

syadnom

By BGP signalled VXLAN, I assume you mean eVPN ??

If so, I _really_ want this feature. It would be one of my Top10 feature requests for RouterOS v7 in the medium term.

evpn, or something that looks like it, yes please.

syadnom

What's the state of VXLAN and/or what's the V7.0 target feature set?

More specifically, will we see BGP signaled VXLAN in V7.x?

Also, will VXLAN be CPU dependent or hw-offload?

syadnom

ARGGGG!! The default zoom level sucks! Why can't this setting be remembered? Win10 64bit w/ 4k monitor, tried 32 and 64 bit winbox, been like this for a few versions now. Have to manually zoom in twice to be able to read the text. Is there a solution?

syadnom

Wireguard as a stand alone tunnel type in mikrotik with a simply key generator that can be copied/pasted like you'd do setting up an EoIP tunnel is immensely useful without any added frills. If mikrotik would add that then it would have the baseline features for adding nebula or other wireguard base...

syadnom

bone stock, enabled dhcp-client, changed identity. # jan/03/1970 21:43:46 by RouterOS 6.47 /interface bridge add admin-mac=xxxxxxx auto-mac=no comment=defconf name=bridge /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip hotspot profile set [ find defaul...

syadnom

this is without a doubt an issue with that card. searching for it brings up a ton of threads about issues with it. Not an rb2011 issue.

syadnom

Even with multiple ports connected, still no 'H' , status doesn't show hardware offload

syadnom

See attached image. This is default config. 'Hw Offload' is not checked on any interface. Interfaces don't show 'H' either. What am I missing here?

netpower_hw_offload_no.jpg

syadnom

I'll be using this as an access switch. No routing. Prefer winbox/romon for management. No bridge filters except vlan filtering, ideally just the bridge with all the ports added, vlans, and pvid set and tagged/untagged vlans.

syadnom

In the brocher I see switching test results on RouterOS v6.45.7 at the expected speeds. So which is true and is there anything I have to do to get this performance in routeros?

syadnom

Just got the CRS318-16P-2S+OUT.. Wondering how to extract maximum performance. I'm looking at the Xena networks testing and it says that using routeros bridge mode with fast path is actually slower than routing via the CPU by a hair. Is this true and performance will be this limited in routeros? Do ...

syadnom

I see that L3 hardware offloading is supported only on the CRS317. I'm wondering, is this simply because that's the chosen test-bed for this in ros7? I'm looking at some other devices (Netpower 16P big time) that also have the 98DX series chip in them. Hoping all DX based devices see the hardware of...

syadnom

yes, there is another thread, it's over 6 months old so time for new!

Is this product going to see the light of day?

syadnom

just to reiterate my position a bit here. I have a substantial network of Unifi APs, approaching 3,000, hosted on just a few cloud controllers. I have some on-prem systems for ubiquiti and manage a few on-prem systems from other vendors as well. Zero of these installations are reliant on perfect upt...

syadnom

I'm sure we each have different experiences. Mine are with Cisco, Unifi, Meraki, Ruckus, Aruba. Each of these allows the AP to stay operational when communication to the controller is lost. Some stats are lost, but there is no 'outage'. If you wanted to argue about Meraki you could, but as long as t...

syadnom

You can have multiple CAPsMAN device manager on the same network. When one is offline, CAPs connects to another one. while shutting down all the WiFi interfaces and bringing them back up, say 10 seconds of outage for the end user. This is the ONLY management platform I know of that doesn't have the...

syadnom

Kinda kills it as a replacement for unifi. If the path to the device manager goes down for some reason, you really don't want all the APs to go down. That doesn't mean the internet is down. Just rebooting the manager for an update shouldn't kill all the APs connected.

syadnom

I'm wanting to run capsman remotely but have the local APs keep the WiFi up even when the connection to capsman is lost. It seems that when capsman disconnects, all the APs go down as soon as they try to connect to capsman again. Any ideas on how to keep the APs online? edit: I am using Local Forwar...

syadnom

The number of devices is an important part. Space, moving parts, complexity etc. Wireguard is a very efficient tunnel, you can spin up a very large number of them without taxing a CPU all that much. Wireguard can beat hardware AES-NI in software with it's ChaCha encryption. Wireguard can handle over...

syadnom

IPSEC VTI would also be welcome, but wireguard solves shortcomings in nat traversal and connectivity that no other VPN tech does. wireguard can roam seamlessly as end users switch networks without dropping for example. It doesn't care about the IP addresses packets are coming from and will update th...

syadnom

wtf guys. I asked HOW to do something. Why did this turn into an argument about why something should or shouldn't be done? Just stop. I have my answer, all is well.

syadnom

100% zero chance whatsoever you'll see a commercial wrapper (tailscale) on wireguard on mikrotik.

syadnom

20+20 was what I was after. I found that I can just select Ce/eC/XX and a 20Mhz channel and that enables the auto 20/40 mode.

syadnom

I can't seem to get capsman to accept a 2.4Ghz 40Mhz turbo channel 2412 @ 40 Turbo extensino Ce = 'no supported channel' I've run up through all the channels and switched Ce to eC. Removed extension channel config. Just can't figure out when I'm supposed to put in here to get the 40Mhz extension wor...

syadnom

and you can always run a GRE tunnel across wg if you need other protocols, but I don't think that's widely needed. wg offers a next-gen very capable vpn for road warriors which is probably the main reason for so many requests. Not to say that's the only use, but that's a big one and it suits that ro...

syadnom

Really need gps+time , and really the time needs to be pulled from gps so trilateration is more accurate.

syadnom

I had the same issue. One card would not show up no matter what trick I tried. Got a replacement and it shows up, but occasionally it's dropping out and a reboot solves it.

concerned about the stability for this kit right now...

syadnom

Thanks, we will start including time in the next RouterOS versions.

Which version? Next stable or next beta? Can I get this by installing the 6.47beta49?

syadnom

We are seeing an empty 'time' field in the lorawan forwarded packets. This is non-standard. We should see an actually system time, or that field should be omitted. Any ideas? up-to-date firmware.

syadnom

TechShip have got only one who pass your band's and LTE >=6, this is
https://techship.com/products/sierra-wi ... c7411-nam/

yeah, but it's just announced, nothing you can buy.

syadnom

71 is really needed..

syadnom

I just got an EC25-AF card which supports all my channels, but is just a cat4 modem. I really need to find a cat6+ modem supporting 2,4,12,66,71 for T-Mobile. Anyone have any idea what a good match is? I need carrier aggregation and those channels.

syadnom

I think a CBRS implementation would be a big sell for the US market that is being dominated by Telrad, Baicells, and some Cambium (450m can do it today, cnRanger shortly). I would also like to see some atypical bands, like a 2.4Ghz and a 900Mhz maybe by band-mapping a Band8 for instance. These bands...

syadnom

The fix was a second round of
"/port firmware set ignore-directip-modem=yes"
reboot
"/port firmware set ignore-directip-modem=no"
reboot

now it shows up.

syadnom

syadnom I picked up one of these cards, swapped it for an R11e-LTE-US model and it's not recognized by routeros... Please read this: https://forum.mikrotik.com/viewtopic.php?f=7&t=150149 about ECM mode and post feedback if this give you success or not. Of course please upgrade ROS to stable or ...

syadnom

US/T-Mobile. I import Quectel modems personally. For your application I would use the EC25-AF It's a Cat4 that supports B2/B4/B5/B12/B13/B14/B66/B71 I use it with Verizon, T-Mobile, AT&T with no problems. I picked up one of these cards, swapped it for an R11e-LTE-US model and it's not recognize...

syadnom

I used the VxLAN lab from IPANetEngineer's example configuration post. VxLAN destroys my 951ui2hnd's 100% CPU at around 60Mb to 75Mb TCP. Same lab with HAPAC2 is better I average 220Mb but it's not balancing across the CPU's. With my computer plugged into R1 when I'm downloading it uses 100% of one...

syadnom

There's good reason to skip AES-NI. It's a speed limit. The lowly atom with AES-NI has the same performance as a 6 core i7 with AES-NI because that little component is a speed limit. Wireguard is FAST with it's ciphers. It's basically as fast as AES-NI on modest hardware but if you through a serious...

syadnom

Cube 60 looks great, but I want a gigabit version..

syadnom

sent, thanks.

syadnom

agreed. I'm thinking something almost like 'ip packing' where you add it to an existing tunnel. Pepwave is getting pretty serious in the product lines as well. The key here is 'end to end', not just some EC on any given leg of the link, but between two devices that may have many paths including fail...

syadnom

I did install the LoRa package, the interface doesn’t show up in the lora config screen.

syadnom

note that I am trying to do /system routerboard usb set type=mini-PCIe that doesn't work. exporting that config shows nothing as if that usb section wasn't active [admin@MikroTik] /system routerboard usb> export # feb/17/2020 18:07:23 by RouterOS 6.46.3 # software id = x # # model = RBwAPR-2nD # ser...

syadnom

I have a wAP R 2nD that I'm trying to get a R11e-LoRa9 card working in. This wAP-R supports LTE and has a sim slot so the assumption is that the LoRa9 card is compatible. Ideas?

syadnom

Evan just vxlan and Bridges is awesome if the crs3xxx line can bridge the vxlan to a port in hardware, but full EVPN kit would be stellar.

There is nothing in this price range by a mile.

syadnom

yeah, CRS3xx and Routeros7 with vxlan is a game changer... The prospect of this really puts some other hardware purchases in jeopardy.

syadnom

+1 for zerotier.

edgerouters do NOT have support for zerotier. Updates kill zerotier installed by hand. Need first-class support. I bet the zerotier guys would help with creating a mikrotik package for user install also.

syadnom

just another vote for the fantastic wireguard kit..

syadnom

Will vxlan have a fast-path option for hardware accelleration? I'm seeing some overhead in a VM with bandwidth test over vxlan right now. I know it's early, but this is a very interesting subject matter for me.

syadnom

US/T-Mobile.
I import Quectel modems personally. For your application I would use the EC25-AF It's a Cat4 that supports B2/B4/B5/B12/B13/B14/B66/B71 I use it with Verizon, T-Mobile, AT&T with no problems.

Have a reasonably priced source?

syadnom

US/T-Mobile.

syadnom

note way. Ports would be filled with dust etc and become useless.

way better to have a dual stack switch in the normal orientation but with a second switch right behind the first in the same U with just enough gap and cable management.

syadnom

Is there a *good* list of known working LTE mini-pci-e cards that support bands 4/66,12, and ideally 71? I'm only getting partial band support in the existing LTE modems and really need to find something. I could live with a USB modem in some circumstances, but really needing an outdoor device so th...

syadnom

16Mb is enough for RouterOS, and this is a CPE device that ISP gives for home users, you will not use advanced logging or user manager here. I would even say, that most users of this one will not know it runs RouterOS completely agreed. We hang other routers off these like it were a docsis or dsl m...

syadnom

Key bands for me. 4/66,12,71. Even a cat4 modem handling all would be welcome, but a version of the LTE6 supporting these would be much better.

syadnom

I want 2,4,5,12,66,71, so no need to put in the useless 1,3,7,20, and 38. They're pointless. In all seriousness though, the newly announced LTE CAT6 units have 1,2,3,5,7,8,12,17,20,25,26, 38, 39, 40, 41n. That covers most everything EXCEPT 4 which is the primary channel in my area on most towers :/ ...

syadnom

Trying to get this back on track.... as was mentioned, Wave2 AC can segment transmissions on 20Mhz increments. Ie, an 80Mhz Wave2 AC channel can be 4 separate transmissions to a client. This requires Wave2 APs though, so very limited scope of value here. Wave1 APs won't do this. 802.1ax and OFDMA on...

syadnom

dignome and you're running v7 with openvpn udp support right now? just checking...

syadnom

dignome, apparently it's just you and I that wants think. I feel like mikrotik just doesn't care about any feature requests ever.

syadnom

Are the interfaces in a bridge, or is there any reason arp might get confused with changing Mac addresses? I find that if I turn on horizon on the interfaces, ptmp works great. In a static environment I just give in an run a vlan and do PTP mode over the vlan. Seems to be the simplest solution. I do...

syadnom

I figured it out, set the Ethernet as WDS.

syadnom

This contrasts with regular hub-type networks, where a failure in a central router or switch could cut large parts of the network off from each other. Repeaters, on the other hand, do not increase a network's resilience. If the router or access point broadcasting the original wireless signal goes d...

syadnom

Audience does not use classic MESH with repeating...! Its better than that...! Classic Mesh does NOT use repeating period. be careful not to get into the weeds on a 'repeater'. HWMP+ mesh 'repeats' the ethernet frames through the HWMP+ forwarding mechanism, but it doesn't use 802.11 repeating where...

syadnom

Buy one and see by your self... Or you can read here https://forum.mikrotik.com/viewtopic.php?f=7&t=152628 I'm looking directly at a config a friend of mine posted and it sure looks like the mesh is HWMP+ just like I stated above. I don't need one of these and I can't really find a place for an...

syadnom

With the addition of Audience, I think it's time to bring this up again. There should be no technical or licensing limits stopping this feature and it's in mainline kernel for a long time. mikrotik's current mesh is not very good. It's little more than an RTSP replacement for 'repeater mode' APs and...

syadnom

Audience does not use classic MESH with repeating...!
Its better than that...!

ok... then export the config from audience and show me that it doesn't have that radio just shoved into the mesh interface.

syadnom

I believe that Audience is simply putting the 3rd WiFi interface in WDS dynamic mesh with WDS bridged to an HWMP+ mesh and letting it run. What I found is that putting the ethernet port in as a WDS interface cures the problem of it not being part of the mesh. The problem is that this implementation ...

syadnom

Just popped in for a similar post, same issue. Did you ever find a resolution?

syadnom

I have a small mesh I'm testing on. 2 hAP AC2 and 1 hAP lite. hAP AC2 'A' hAP AC2 'B' hAP lite 'C' a single mesh identical and default settings on all, A set to mesh portal. All 3 have Ap Bridge configured on 2.4Ghz with dynamic WDS and the mesh interface as the WDS target. A & B have 5Ghz confi...

syadnom

fire up excel and build some charts with that data!

syadnom

80Mhz is near impossible to pull off full performance outdoors in 5Ghz. You’d have to be in the wilderness 20 miles from any homes and well below the tree line.

syadnom

speaking of openvpn, https://community.openvpn.net/openvpn/ticket/949
there's a FEC enabled build with results. This is exactly what I'm wanting to see.

syadnom

Yes, I also use BFD the same way. It works ok for when a link goes completely down, but when there's packet loss it either flaps up and down over and over, or doesn't even bother (if the loss is too low). So, again manual intervention is needed for cases like that. I haven't used tinyfecvpn, but fr...

syadnom

Mimosa uses the Quantenna chipset which is a BEAST. That said, their deployment model doesn't seem to take advantage of all it's power, and they still don't have a firmware with proper MU-MIMO despite chipset support. If you are talking any apples to apples scenario though, Mimosa will beat mikrotik...

syadnom

At the moment there is no fully automated method in ROS to switch from a bad uplink (bad as in slight packet loss or increased latency somewhere between you and the destination - but still functional as far as ROS is concerned) to a backup/good one. You either have to resort to cumbersome scripts a...

syadnom

I guess what you guys missed is that I'm using this to great effect already, I just want to get it included in Mikrotik to remove an extra piece of hardware and simplfy design. The internet itself is slightly lossy. Pick ANY connection and ping essentially any off-net resource and wait. Their will b...

syadnom

I’m not sure why the narrow focus on the last mile. MOST isps are going to be some 6-15 hops on 3-5 different carries to get to a remote resource. So who cares that LTE has built in error correction that converts loss into latency. The delivery tech has no bearing on the goal. End to end FEC to redu...

syadnom

This seems like something a lot of people could use, especially those using VoIP. No interest?

syadnom

I would imagine that we won't see this even considered until ros7 comes out..

syadnom

Multiple LTE cards is the way to go IMO It would be nice to have an AT&T/TMobile version that supports 2,4,5,12,17, 66, 71 These two vendors (especially TMobile) are extrememly popular in the US for the types of services mikrotik fits. I'm using wAP LTE-US with TMobile now and it's great having ...

syadnom

must be.

syadnom

nothing? why is it so hard to find a compatible modem.

syadnom

I'm looking for an LTE card that is known working that covers bands 2,4,12,66,71

The Mikrotik US modem does 2,4,12, but I'm finding areas where the best service is on 66 and now 71.

I would also settle for a USB modem that supports these and works if a mPCIe isn't available/known.

syadnom

Standard T-Mobile sims work perfectly. Something about the m2m/iot plan filters IMEIs for anything that is known to ‘tether’ apparently.

syadnom

@gotsprings

I think you missed my need.

I need a slow but constant flow of data. Say a range of 10-200Kbps with an average of 20Kbps.

Ends up right about 6GB/Month.

This fits the T-Mobile M2M 512k plan perfectly, but I can't get the wAP LTE-US to reliably connect with mikrotik's radio.

syadnom

I need a steady stream of packets that end up being ~4-6GB The $10 2GB plan just doesn't cut it and the 6GB plan is too expensive.

M2M SIMs are a perfect fit, if I can find a modem that is allowed on that network and is mikrotik compatible.

syadnom

T-Mobile’s M2M service doesn’t work though. It’s imei filtered and the mikrotik LTE card isn’t on the approved list.

syadnom

I’d prefer not to test or of my own wallet...

syadnom

For use with the wAP R and/or ltAP mini, I'm wanting to use one of the following LTE modems Sierra Wireless MC7455 Telit LM940 This is based on the T-Mobile IoT certified hardware list which supposedly works with their M2M plans. The M2M plan *does not* work with the mikrotik LTE modules. I've looke...

syadnom

I really hope we get some info on these and whatever is coming to replace the CCR. I'm not buying anymore TILE systems. The 450Gx4 and RB4011 are really awesome, but we still need something that will handle 10G and there's no non-TILE system that can right now. CSR with hardware MPLS would completel...

syadnom

PE/LER in hardware would be *fantastic*

I've heard from a reliable source that the 309 doesn't have LSR mode enabled in the software (yet?)

syadnom

Hardware looks great! I've been waiting for this hardware, very exciting. but.... I really need to see MPLS LSR in hardware. The chipset supports this, but the CPU just can't handle this in software at any usable speed. I would be using this with OSPF for transit and loopbacks, and the CPU is just f...

syadnom

out of frustration I nuked all the rules and re-added and it's working. idk what's happening, I have ~150 mikrotik's in the field and never run across this exact issue before.

syadnom

I'm struggling on getting route filters working properly in >=6.42 I can't seem to discard ranges. ie, if there is a 10.100.5.0/24 subnet, I have to put exactly 10.100.5.0/24 in the prefix, I can't get it to work putting in 10.0.0.0/8 in prefix and setting prefix length to 8-32. BGP still advertises...

syadnom

Thanks, I completely spaced out the ppp up scripts.

added this to the profile:

/routing bgp peer set disabled=yes [find where established!=yes]
/routing bgp peer set disabled=no [find where disabled=yes]

That cured it.

syadnom

I'm using BGP to handle some VPN routing because it updates the routing table quickly (WAY better than OSPF, and simpler). The problem I'm having is that if a tunnel interfaces goes down and then comes back up, it takes BGP about 30 seconds to try to peer again. If I disable the peer and enable it's...

syadnom

upvote. also expanding on the netwatch, it's not fast enough AND it's CPU utilization is WAY too high. I did a simple netwatch to ping an off-net address and file the distance on a route, running this in even 1 second intervals adds ~10% CPU load. Not good enough. Now get it down to .1*3 second BFD ...

syadnom

I would really like to see BFD enabled on static routes as well as on interfaces. Here's the scenario: dual L2TP tunnels on different WAN links. tunnel1 loses connectivity, it takes as much as 60 seconds (default keepalive) to discover that it's down. tunnel2 is up but nothing is routed there until ...

syadnom

CRS305, use it as a switch.

syadnom

I'd like to use an RBM11G with a Compex WLE1216 minpcie board. It appears that mikrotik already has the ath10k drives due to the IPQ-4018 in a couple AC products.

This module is a 4 chain board though.

Anyone tried this or know if there is support in routeros for 4 chain ath10k radios?

syadnom

Are you sure about this? I seem to be able to transfer at wire speed across all the ports without hitting the CPU. This is NOT the case through the bridging method. I was seeing <100Mbps that way. I do have another issue. Now I can't add a VLAN to an interface including the bridge. I can't put the u...

syadnom

The CRS3x series look really great actually.

syadnom

I'm not enabling vlan filtering on the bridge. The guides I found on using the switch chip dont suggest that. Right now, port 5 and port 4 cannot see each other. If I assign a VLAN 14 interface on the hEX connected to port 5 (ie, PVID=15) it can't communicate with port 4. So Vlans are being properly...

syadnom

The mips based crs are pretty slow routers. New arm units look great

syadnom

vecernik87 was in fact correct. Ultimately, the need is for hEX-PoE-port2 to end up in RB850Gx2-Port1vlan12 hEX-PoE-port3 to end up in RB850Gx2-Port1vlan13 hEX-PoE-port4 to end up in RB850Gx2-Port1vlan14 hEX-PoE-port5 to end up in RB850Gx2-Port1vlan15 I've configured the switch on the hEX so that al...

syadnom

vecernik87, I was able to configure this through the switch and bridge all the ports.

syadnom

I'm setting up a hEX PoE as a switch-on-a-stick set. RB850Gx2 as the router, hEX PoE off port 2. I've configured 4 vlans on the router into port 1 on the hEX. Then 4 bridges for ports 2,3,4,5. Added eth2 and e1v2 to bridge-port2, eth3 and e1v3 ot bridge-port2 and so on. Problem is, only the first et...

syadnom

What I'm looking at is this unit was announced in the newsletter the same time as the wireless wire dish and a few other items which are out. Personally, most interested in the CRS305. I really don't need 10G for anything except proxmox clusters. No other decently priced switch has 3 SFP+ ports to d...

syadnom

The CRS305-1G-4S+IN was announced back in may, but I haven't seen anything about it since. Streakwave has some on order, but it's not even on the 'tik website.

This is basically perfect for a small proxmox cluster. Love to get my hands on a couple.

syadnom

also, I'm already doing the redundancy with dual tunnels and OSPF. But even with BFD the reaction time to switch tunnels is over 1 second AND requires a relatively complex setup AND OSPF on the second link eats LTE data. Can't use a bond because that's ethernet based and I need non-ethernet tunnels ...

syadnom

I need a new tunnel type. Could be a modified tunnel. Need 2 features in one. Forward error correction and backup tunnel. a) FEC added to the tunnel using reed-solomon or Raptorq. Essentially if there is some packet loss within the configured thresholds the packet will get rebuilt. tinyfecvpn can be...

syadnom

Calling admins! I have a feature that I'm really really needing and willing to pay for development on. How can I talk with someone at Mikrotik to see if it's something you guys are willing to do?

syadnom

I've got a couple of stubborn devices that can't use a DHCP option for VLAN assignment. Most can use DHCP 132 to set it but some grandstream ATAs cant I'm autoprovisioning these and if I force the VLAN in provisioning, I lose some flexability so it's a no-go. What I'd like to do is put their MAC in ...

syadnom

telepro, just ran across this thread. Verizon sims work in the US version but you have to add an APN for vzwinternet and select that in the interface. You can enable or disable the default route, you can setup a different routing table and send out the lte interface too so you can more easily config...

syadnom

I'm using a kit called tinyfecvpn, it's based on UDPSpeeder which is a UDP tunnel with forward error correction via reed-solomon encoding. I would love to see a tunnel type that included FEC. Maybe a check box in EoIP and GRE tunnels for this. The usefulness of FEC on tunnels is as follows, especial...

syadnom

OSPF just for BGP, can scale out to thousands. ISIS for this role is just lazy.

syadnom

I'm using 'tiks for CPE routers and kid control is an awesome feature. I'd really like a much better webui for it though, or maybe a smartphone AP. It's not intuitive at all to add a device to a kid. I'd like some add buttons or something in the device list to make this actually easy. Also, a calend...

syadnom

How did I not know this!

syadnom

I'd love for the firewall to automatically open ports matching NAT entries.

If I NAT port 80 in ether1 to an on ether2, I'd like to see a firewall rule dynamically created that is in-interface-ether1, port 80.

syadnom

I'd like to see 1 of 2 things....be a huge help:

1) Add the ability to select multiple protocols in NAT and Firewall rules. Specifically, UDP+TCP. Could be a multi-select box or just an entry that says UDP and TCP.

or

2) Protocol list, just like address list but let us put the protocols together

syadnom

I would like to see an extension to RoMON to allow a remote, ip based connection. For instance, if you do an EoIP tunnel then you can access the remote device via RoMON, but this can be tricky for dynamic IP addresses or devices behind NAT. So, you can L2TP or SSTP tunnel to another routeros device ...

syadnom

I'm looking for a way to get the 'broadcast' mode for bonding to discard the extra packets. The purpose is that I want to have a rock solid VoIP connection between two points. Either link may go down and I want failover to be instant because the packet was already on the second 'wire'. broadcast doe...

syadnom

Using a MUM presentation on the subject: "Using Mikrotik CHR as a BGP edge router" https://mum.mikrotik.com/presentations/EU18/presentation_5188_1524562405.pdf loading the LINX table took 4 minutes and 46 seconds on VMWare and an i7-7700k. OUCH. Now add load, they pushed 5G through it and ...

syadnom

I'd like to see a larger Powerbox Pro as well. The 4 powered ports is a bit limiting. What I've done when a site 'outgrows' a powerbox pro is add a second and run the backhauls on the first setup as a router and then connect the second via the unpowered port or SFP DAC cable and do port based VLANs ...

syadnom

I would really love to see a proper x86-64 release for bare metal installs. There are a number of benchmarks out there between the various hyper-visors and one thing is quite clear. The hyper-visor IS in the way of maximum performance. For example, VMWARE is the absolute slowest for BGP. Hyper-V is ...

syadnom

Anyone know when the RB450Gx4 or the hAP AC2 should be available in the US? Everywhere I look they are pre-order.

syadnom

Probably use a 4S BMS chip but I need to know the details on maximums etc

syadnom

Any idea what the maximum battery voltage is for the mUPS?

I want to build packs with 18650 calls with nominal voltage of 3.7 per cell, so that puts me around 14.8 fully charged with 4 series batteries.

Also, what is the charging voltage output by the mUPS?

syadnom

Ive seen reports of 2km but drops in rain..

syadnom

we may see it in v7 whenever that comes out.
Can't tell if those are the words of a man who has had a sneak peek of something…

…or words that are heavily laden in sarcasm!

#2

syadnom

This is a complicated need. CCR sits with 2 WAN links. WAN1 has a /29 , WAN2 has a /29 (different subnets) Customer behind the CCR *requires* a public IP address but I have no access to routed IPs. So, bridge-wan1(WAN1, CUSTPORT1) and turn on bridge firewall so I can use queues. Problem is that I ca...

syadnom

I'm looking to create a backup link via cellular with a wAP LTE. The remote sites would have a standard internet connection (Cable, DSL, etc) with a tunnel (L2TP+ipsec probably, though EoIP+ipsec would be an option). The idea is to run OSPF+BFD on the main link and if it goes down, have an immediate...

syadnom

lots of people didn't read all the posts :/ @normis, can you share when the LHG60 will be released? Do you have specs on it's range? Maybe a chart of range vs throughput and MSRP? 60Ghz is great. It's extremely predictable. unlike 5Ghz which can feel a bit like black magic and only season magicians ...

syadnom

I'm setting up a new rack with dual WAN. I need to get some performance metrics to select the right gear. WAN1 300x20 w/29 WAN2 100x20 w/29 The setup will be a bit 'odd'. I'm going to create a WAN1-bridge with 3 ports and a WAN2-bridge with 3 ports. The reason for this is that I cannot get routed IP...

syadnom

Is it known to be compatible though...

syadnom

Also doesn't support band 17 on AT&T which is what is in my area

syadnom

The post was before that device was released.

syadnom

I pulled all my ubiquiti 900Mhz gear out, so I'm not needing to integrate with them. m900 radios only passing 1-2Mbps when the math says it should do 12Mbps, and old old canopy gear is doing 6Mbps+. I have a few areas that are heavily treed. I can push m2 gear through but can't get above 1-2Mbps, 90...

syadnom

come on normis, buddy, give us some details not just a 'no'.

Are you going to beat the ignitenet price? and when will we see this things in action?

syadnom

just revisiting this. wondering where mikrotik is at on the 'next gen' v7. edgeos is very very quickly encroaching on the wisp routing market. Mikrotik had a very strong place in even cambium and ubiquiti networks but I'm seeing pretty rapid switchover these days. Many wisps are flocking to edgerout...

syadnom

@mducharme how well is the m900 working for you compared to ubiquiti m900 radios? what antennas are you using? I could put these to use if they were decent.

syadnom

@normis, how about some specifics on the 60Ghz device?

syadnom

I'm having a heck of a time finding a confirmed working AT&T (US) LTE modem that I run plug into a hEX. Any suggestions?

syadnom

Why is the metarouter button still in the UI at this point? 7 years later?

syadnom

I'm looking for an elegant way to have 2x L2TP or PPtP tunnels sourced from different WAN interfaces for the purpose of redundant links. I'm currently adding routes to 2 IP addresses on my remote side via each interface's gateway. IE: wan1 10.0.0.16 gw 10.0.0.1 wan2 10.10.0.16 gw 10.10.0.1 remote CC...

syadnom

Ubiquiti wireless outperforms Mikrotik wireless. It wasn't always the case, and there was a time that mikrotik's nv2 was better than airmax. Those times are passed. I've thoroughly tested both AC implementations and Ubiquiti's comes out as much better, with more stable latencies and stable links, an...

syadnom

The obvious one.

syadnom

I also have the bug where I have to disable/enable or move rules to make them work, or reboot the router. I was all 'tik all the time for years. TONs of devices deployed. Not any more. I feel like I've had to regress a bit as I'm building APU/PFSense boxes for some clients that don't want edgerouter...

syadnom

I'm playing around with using bonding broadcast because I have multiple internet connections with each having latency spikes and dropped packets. bonding broadcast will send each packet down both links (in this case, EoIP tunnels) for the purpose of the remote side getting the 'fastest' packet. Late...

syadnom

CCR are multi-core and as a result, performance is variable depending on how data flows. A single stream, ie, one ipsec tunnel isn't going to be all that fast. I highly doubt any CCR will be anywhere close to 500Mbps ipsec on a single tunnel.... if it's many ipsec tunnels, then yeah, doable. Someone...

syadnom

500Mbps of ipsec?

syadnom

As far as I know, there isn't currently a way to do this, so this is either a feature request or an open door to been corrected! I really need to be able to identify traffic that has been queued. Right now, we have a few hundred simple queues but no way to identify traffic that skips the queue excep...

syadnom

They are currently directly connected. The problem is that I can't get quorum for a drbd cluster this way so I need a switch and this crs is by far the cheapest option for 2 sfp+ ports. A third cluster node would be on gigabit in the same switch group, but that would only have the cluster volume on ...

syadnom

The 10Gbps ports are just for drbd sync.

The proxmox hosts will have multiple gigabit ports for virtual machines, but this is really just about having a very fast storage network.

syadnom

I need 2 SFP+ ports for a project (2 VM hosts, 10Gbps NICs) and am looking at the CRS210 as a possible option. I'm looking at the block diagram here http://i.mt.lv/routerboard/files/CRS210-150409135339.png and it suggests that the SFP+ ports are on the same switch as the 8 1Gbps ports . Question is,...

syadnom

This has been asked before, but the thread seems dead.

I really need to find a Verizoni LTE card/adapter than can handle DirectIP for a reasonable price. Any ideas?

syadnom

well, the VM has 4 CPUs at 2.66Ghz and 4GB RAM. Database is 52MB in the tgz, 163MB decompressed.

Also note that this isn't the first run. I've imported the database in and waited until /dude print said status 'running' and connected up.

syadnom

6.36rc37 is the first release that the database imported for me and status says running. The Dude takes a VERY long time to get data though.... Minutes. It's really slow.

syadnom

Yes ^^^^

It's not just about routeroz, it's about what the host expects to see and how the host will behave. No sane vm host will hard kill a vm unless explicitly told to do so

syadnom

"I would like to suggest a Cloud Hosted Dude Server for free."

$40 is too much for your could hosted monitoring ?

syadnom

any updates? dude v4.0b3 wont run on anything new so I'm really stuck here.

syadnom

note, I know how to do concatenate("value1","value2") but then it's all one big line! If I could put a new line/ carriage return in the concatenate that would work too.

syadnom

I'm using an if statement to determine device type and then I want to print some oid info out like so if(oid_raw("0.0.0etc")=1, "station signal: oid("1.2.3etc") ", "unknown") The problem is that the double quotes in oid() breaks the function. If I escape the ...

syadnom

I'm trying to make a customized label for devices. I want a function to determine device type and output based on that. I've tried: [if("AP"="AP","AccessPoint","other")] this returns either 'AccessPoint' or 'other' just like you'd expect. but [if([Device.Ty...

syadnom

+1

I'd doing this on another box and copying the cert over. would be fantastic to have this in routeros!

note.... ub****ti's routers can do this... if that's at all motivating lol

syadnom

I'm already pulling the accounting snapshot to get all the dst addresses and comparing those to my queues with some awk-fu. really like to see some routeros method to do it instead.

syadnom

I've got a 'catch all' queue at the bottom of my 400 deep simple queue list. I'm looking for a way to figure out what IP addresses are hitting that catch all queue to see who doesn't have a queue setup. Doing it manually is a pain and it's not very convenient to pull it to a linux box to sort. Ide...

syadnom

CCR-1009-8G-1S-1S+ at 6.35.2
Cannot get micro sd cards to recognize. Tried a 1,2,4,8,16GB card, tried rebooting and full power cycle to recognize. Ideas?

note, flash drive plugged into from w/ usb adapter works fine.

syadnom

Any chance for an update here? Having to hunt for old versions and running MIPS routerboards with outdated firmware to fill this gap...

syadnom

any news on this?

syadnom

I'm trying to scan a network for SIP phones that only respond to pings and http requests. They wont respond to any SIP packets that aren't well-formed. I'm looking for a way to make a probe to look for a string in the http reply. It would be great to somehow use ARP to get the MAC of the IP and just...

syadnom

I agree, this is much needed. I do see a beta on ARM, but the cheapest ARM box is the 3011...

I've been lucky enough that I could drop in a CHR on existing VM infrastructure, but I really need a cheap dude agent on MIPS like we've had in the past.

Thanks.

syadnom

Also need an update on ipsec+tunnels (EoIP, GRE, etc)

If this is still an issue, I'll have to go with another vendor's product.

syadnom

Normis, I don't get the unlimited license. At this point, it's pretty unrealistic to get 10Gbps+ from a CHR and that's unlikely to change. VM playforms simply aren't able to provide such speeds and wont for some time. Can we have a similar option to do a 'site' or 'cluster' license? and allow unlimi...

syadnom

do any tunnel interfaces ie IPIP, GRE, EoIP, actually use the src-address to source out an interface? for example, 2 WANs wan1 1.0.0.1 wan2 2.0.0.1 I want 2 tunnels to a remote host 3.0.0.1 add tunnel1 1.0.0.1<>3.0.0.1 add tunnel2 2.0.0.1<>3.0.0.1 -or- does anyone have any clever solution to tie a t...

Search found 487 matches