MikroTik

syadnom

just to reiterate my position a bit here. I have a substantial network of Unifi APs, approaching 3,000, hosted on just a few cloud controllers. I have some on-prem systems for ubiquiti and manage a few on-prem systems from other vendors as well. Zero of these installations are reliant on perfect upt...

syadnom

I'm sure we each have different experiences. Mine are with Cisco, Unifi, Meraki, Ruckus, Aruba. Each of these allows the AP to stay operational when communication to the controller is lost. Some stats are lost, but there is no 'outage'. If you wanted to argue about Meraki you could, but as long as t...

syadnom

You can have multiple CAPsMAN device manager on the same network. When one is offline, CAPs connects to another one. while shutting down all the WiFi interfaces and bringing them back up, say 10 seconds of outage for the end user. This is the ONLY management platform I know of that doesn't have the...

syadnom

Kinda kills it as a replacement for unifi. If the path to the device manager goes down for some reason, you really don't want all the APs to go down. That doesn't mean the internet is down. Just rebooting the manager for an update shouldn't kill all the APs connected.

syadnom

I'm wanting to run capsman remotely but have the local APs keep the WiFi up even when the connection to capsman is lost. It seems that when capsman disconnects, all the APs go down as soon as they try to connect to capsman again. Any ideas on how to keep the APs online? edit: I am using Local Forwar...

syadnom

The number of devices is an important part. Space, moving parts, complexity etc. Wireguard is a very efficient tunnel, you can spin up a very large number of them without taxing a CPU all that much. Wireguard can beat hardware AES-NI in software with it's ChaCha encryption. Wireguard can handle over...

syadnom

IPSEC VTI would also be welcome, but wireguard solves shortcomings in nat traversal and connectivity that no other VPN tech does. wireguard can roam seamlessly as end users switch networks without dropping for example. It doesn't care about the IP addresses packets are coming from and will update th...

syadnom

wtf guys. I asked HOW to do something. Why did this turn into an argument about why something should or shouldn't be done? Just stop. I have my answer, all is well.

syadnom

100% zero chance whatsoever you'll see a commercial wrapper (tailscale) on wireguard on mikrotik.

syadnom

20+20 was what I was after. I found that I can just select Ce/eC/XX and a 20Mhz channel and that enables the auto 20/40 mode.

syadnom

I can't seem to get capsman to accept a 2.4Ghz 40Mhz turbo channel 2412 @ 40 Turbo extensino Ce = 'no supported channel' I've run up through all the channels and switched Ce to eC. Removed extension channel config. Just can't figure out when I'm supposed to put in here to get the 40Mhz extension wor...

syadnom

and you can always run a GRE tunnel across wg if you need other protocols, but I don't think that's widely needed. wg offers a next-gen very capable vpn for road warriors which is probably the main reason for so many requests. Not to say that's the only use, but that's a big one and it suits that ro...

syadnom

Really need gps+time , and really the time needs to be pulled from gps so trilateration is more accurate.

syadnom

I had the same issue. One card would not show up no matter what trick I tried. Got a replacement and it shows up, but occasionally it's dropping out and a reboot solves it.

concerned about the stability for this kit right now...

syadnom

Thanks, we will start including time in the next RouterOS versions.

Which version? Next stable or next beta? Can I get this by installing the 6.47beta49?

syadnom

We are seeing an empty 'time' field in the lorawan forwarded packets. This is non-standard. We should see an actually system time, or that field should be omitted. Any ideas? up-to-date firmware.

syadnom

TechShip have got only one who pass your band's and LTE >=6, this is
https://techship.com/products/sierra-wi ... c7411-nam/

yeah, but it's just announced, nothing you can buy.

syadnom

71 is really needed..

syadnom

I just got an EC25-AF card which supports all my channels, but is just a cat4 modem. I really need to find a cat6+ modem supporting 2,4,12,66,71 for T-Mobile. Anyone have any idea what a good match is? I need carrier aggregation and those channels.

syadnom

I think a CBRS implementation would be a big sell for the US market that is being dominated by Telrad, Baicells, and some Cambium (450m can do it today, cnRanger shortly). I would also like to see some atypical bands, like a 2.4Ghz and a 900Mhz maybe by band-mapping a Band8 for instance. These bands...

syadnom

The fix was a second round of
"/port firmware set ignore-directip-modem=yes"
reboot
"/port firmware set ignore-directip-modem=no"
reboot

now it shows up.

syadnom

syadnom I picked up one of these cards, swapped it for an R11e-LTE-US model and it's not recognized by routeros... Please read this: https://forum.mikrotik.com/viewtopic.php?f=7&t=150149 about ECM mode and post feedback if this give you success or not. Of course please upgrade ROS to stable or beta...

syadnom

US/T-Mobile. I import Quectel modems personally. For your application I would use the EC25-AF It's a Cat4 that supports B2/B4/B5/B12/B13/B14/B66/B71 I use it with Verizon, T-Mobile, AT&T with no problems. I picked up one of these cards, swapped it for an R11e-LTE-US model and it's not recognized by...

syadnom

I used the VxLAN lab from IPANetEngineer's example configuration post. VxLAN destroys my 951ui2hnd's 100% CPU at around 60Mb to 75Mb TCP. Same lab with HAPAC2 is better I average 220Mb but it's not balancing across the CPU's. With my computer plugged into R1 when I'm downloading it uses 100% of one...

syadnom

There's good reason to skip AES-NI. It's a speed limit. The lowly atom with AES-NI has the same performance as a 6 core i7 with AES-NI because that little component is a speed limit. Wireguard is FAST with it's ciphers. It's basically as fast as AES-NI on modest hardware but if you through a serious...

syadnom

Cube 60 looks great, but I want a gigabit version..

syadnom

sent, thanks.

syadnom

agreed. I'm thinking something almost like 'ip packing' where you add it to an existing tunnel. Pepwave is getting pretty serious in the product lines as well. The key here is 'end to end', not just some EC on any given leg of the link, but between two devices that may have many paths including fail...

syadnom

I did install the LoRa package, the interface doesn’t show up in the lora config screen.

syadnom

note that I am trying to do /system routerboard usb set type=mini-PCIe that doesn't work. exporting that config shows nothing as if that usb section wasn't active [admin@MikroTik] /system routerboard usb> export # feb/17/2020 18:07:23 by RouterOS 6.46.3 # software id = x # # model = RBwAPR-2nD # ser...

syadnom

I have a wAP R 2nD that I'm trying to get a R11e-LoRa9 card working in. This wAP-R supports LTE and has a sim slot so the assumption is that the LoRa9 card is compatible. Ideas?

syadnom

Evan just vxlan and Bridges is awesome if the crs3xxx line can bridge the vxlan to a port in hardware, but full EVPN kit would be stellar.

There is nothing in this price range by a mile.

syadnom

yeah, CRS3xx and Routeros7 with vxlan is a game changer... The prospect of this really puts some other hardware purchases in jeopardy.

syadnom

+1 for zerotier.

edgerouters do NOT have support for zerotier. Updates kill zerotier installed by hand. Need first-class support. I bet the zerotier guys would help with creating a mikrotik package for user install also.

syadnom

just another vote for the fantastic wireguard kit..

syadnom

Will vxlan have a fast-path option for hardware accelleration? I'm seeing some overhead in a VM with bandwidth test over vxlan right now. I know it's early, but this is a very interesting subject matter for me.

syadnom

US/T-Mobile.
I import Quectel modems personally. For your application I would use the EC25-AF It's a Cat4 that supports B2/B4/B5/B12/B13/B14/B66/B71 I use it with Verizon, T-Mobile, AT&T with no problems.

Have a reasonably priced source?

syadnom

US/T-Mobile.

syadnom

note way. Ports would be filled with dust etc and become useless.

way better to have a dual stack switch in the normal orientation but with a second switch right behind the first in the same U with just enough gap and cable management.

syadnom

Is there a *good* list of known working LTE mini-pci-e cards that support bands 4/66,12, and ideally 71? I'm only getting partial band support in the existing LTE modems and really need to find something. I could live with a USB modem in some circumstances, but really needing an outdoor device so th...

syadnom

16Mb is enough for RouterOS, and this is a CPE device that ISP gives for home users, you will not use advanced logging or user manager here. I would even say, that most users of this one will not know it runs RouterOS completely agreed. We hang other routers off these like it were a docsis or dsl m...

syadnom

Key bands for me. 4/66,12,71. Even a cat4 modem handling all would be welcome, but a version of the LTE6 supporting these would be much better.

syadnom

I want 2,4,5,12,66,71, so no need to put in the useless 1,3,7,20, and 38. They're pointless. In all seriousness though, the newly announced LTE CAT6 units have 1,2,3,5,7,8,12,17,20,25,26, 38, 39, 40, 41n. That covers most everything EXCEPT 4 which is the primary channel in my area on most towers :/ ...

syadnom

Trying to get this back on track.... as was mentioned, Wave2 AC can segment transmissions on 20Mhz increments. Ie, an 80Mhz Wave2 AC channel can be 4 separate transmissions to a client. This requires Wave2 APs though, so very limited scope of value here. Wave1 APs won't do this. 802.1ax and OFDMA on...

syadnom

dignome and you're running v7 with openvpn udp support right now? just checking...

syadnom

dignome, apparently it's just you and I that wants think. I feel like mikrotik just doesn't care about any feature requests ever.

syadnom

Are the interfaces in a bridge, or is there any reason arp might get confused with changing Mac addresses? I find that if I turn on horizon on the interfaces, ptmp works great. In a static environment I just give in an run a vlan and do PTP mode over the vlan. Seems to be the simplest solution. I do...

syadnom

I figured it out, set the Ethernet as WDS.

syadnom

This contrasts with regular hub-type networks, where a failure in a central router or switch could cut large parts of the network off from each other. Repeaters, on the other hand, do not increase a network's resilience. If the router or access point broadcasting the original wireless signal goes d...

syadnom

Audience does not use classic MESH with repeating...! Its better than that...! Classic Mesh does NOT use repeating period. be careful not to get into the weeds on a 'repeater'. HWMP+ mesh 'repeats' the ethernet frames through the HWMP+ forwarding mechanism, but it doesn't use 802.11 repeating where...

syadnom

Buy one and see by your self... Or you can read here https://forum.mikrotik.com/viewtopic.php?f=7&t=152628 I'm looking directly at a config a friend of mine posted and it sure looks like the mesh is HWMP+ just like I stated above. I don't need one of these and I can't really find a place for an ind...

syadnom

With the addition of Audience, I think it's time to bring this up again. There should be no technical or licensing limits stopping this feature and it's in mainline kernel for a long time. mikrotik's current mesh is not very good. It's little more than an RTSP replacement for 'repeater mode' APs and...

syadnom

Audience does not use classic MESH with repeating...!
Its better than that...!

ok... then export the config from audience and show me that it doesn't have that radio just shoved into the mesh interface.

syadnom

I believe that Audience is simply putting the 3rd WiFi interface in WDS dynamic mesh with WDS bridged to an HWMP+ mesh and letting it run. What I found is that putting the ethernet port in as a WDS interface cures the problem of it not being part of the mesh. The problem is that this implementation ...

syadnom

Just popped in for a similar post, same issue. Did you ever find a resolution?

syadnom

I have a small mesh I'm testing on. 2 hAP AC2 and 1 hAP lite. hAP AC2 'A' hAP AC2 'B' hAP lite 'C' a single mesh identical and default settings on all, A set to mesh portal. All 3 have Ap Bridge configured on 2.4Ghz with dynamic WDS and the mesh interface as the WDS target. A & B have 5Ghz configure...

syadnom

fire up excel and build some charts with that data!

syadnom

80Mhz is near impossible to pull off full performance outdoors in 5Ghz. You’d have to be in the wilderness 20 miles from any homes and well below the tree line.

syadnom

speaking of openvpn, https://community.openvpn.net/openvpn/ticket/949
there's a FEC enabled build with results. This is exactly what I'm wanting to see.

syadnom

Yes, I also use BFD the same way. It works ok for when a link goes completely down, but when there's packet loss it either flaps up and down over and over, or doesn't even bother (if the loss is too low). So, again manual intervention is needed for cases like that. I haven't used tinyfecvpn, but fr...

syadnom

Mimosa uses the Quantenna chipset which is a BEAST. That said, their deployment model doesn't seem to take advantage of all it's power, and they still don't have a firmware with proper MU-MIMO despite chipset support. If you are talking any apples to apples scenario though, Mimosa will beat mikrotik...

syadnom

At the moment there is no fully automated method in ROS to switch from a bad uplink (bad as in slight packet loss or increased latency somewhere between you and the destination - but still functional as far as ROS is concerned) to a backup/good one. You either have to resort to cumbersome scripts a...

syadnom

I guess what you guys missed is that I'm using this to great effect already, I just want to get it included in Mikrotik to remove an extra piece of hardware and simplfy design. The internet itself is slightly lossy. Pick ANY connection and ping essentially any off-net resource and wait. Their will b...

syadnom

I’m not sure why the narrow focus on the last mile. MOST isps are going to be some 6-15 hops on 3-5 different carries to get to a remote resource. So who cares that LTE has built in error correction that converts loss into latency. The delivery tech has no bearing on the goal. End to end FEC to redu...

syadnom

This seems like something a lot of people could use, especially those using VoIP. No interest?

syadnom

I would imagine that we won't see this even considered until ros7 comes out..

syadnom

Multiple LTE cards is the way to go IMO It would be nice to have an AT&T/TMobile version that supports 2,4,5,12,17, 66, 71 These two vendors (especially TMobile) are extrememly popular in the US for the types of services mikrotik fits. I'm using wAP LTE-US with TMobile now and it's great having 2,4,...

syadnom

must be.

syadnom

nothing? why is it so hard to find a compatible modem.

syadnom

I'm looking for an LTE card that is known working that covers bands 2,4,12,66,71

The Mikrotik US modem does 2,4,12, but I'm finding areas where the best service is on 66 and now 71.

I would also settle for a USB modem that supports these and works if a mPCIe isn't available/known.

syadnom

Standard T-Mobile sims work perfectly. Something about the m2m/iot plan filters IMEIs for anything that is known to ‘tether’ apparently.

syadnom

@gotsprings

I think you missed my need.

I need a slow but constant flow of data. Say a range of 10-200Kbps with an average of 20Kbps.

Ends up right about 6GB/Month.

This fits the T-Mobile M2M 512k plan perfectly, but I can't get the wAP LTE-US to reliably connect with mikrotik's radio.

syadnom

I need a steady stream of packets that end up being ~4-6GB The $10 2GB plan just doesn't cut it and the 6GB plan is too expensive.

M2M SIMs are a perfect fit, if I can find a modem that is allowed on that network and is mikrotik compatible.

syadnom

T-Mobile’s M2M service doesn’t work though. It’s imei filtered and the mikrotik LTE card isn’t on the approved list.

syadnom

I’d prefer not to test or of my own wallet...

syadnom

For use with the wAP R and/or ltAP mini, I'm wanting to use one of the following LTE modems Sierra Wireless MC7455 Telit LM940 This is based on the T-Mobile IoT certified hardware list which supposedly works with their M2M plans. The M2M plan *does not* work with the mikrotik LTE modules. I've looke...

syadnom

I really hope we get some info on these and whatever is coming to replace the CCR. I'm not buying anymore TILE systems. The 450Gx4 and RB4011 are really awesome, but we still need something that will handle 10G and there's no non-TILE system that can right now. CSR with hardware MPLS would completel...

syadnom

PE/LER in hardware would be *fantastic*

I've heard from a reliable source that the 309 doesn't have LSR mode enabled in the software (yet?)

syadnom

Hardware looks great! I've been waiting for this hardware, very exciting. but.... I really need to see MPLS LSR in hardware. The chipset supports this, but the CPU just can't handle this in software at any usable speed. I would be using this with OSPF for transit and loopbacks, and the CPU is just f...

syadnom

out of frustration I nuked all the rules and re-added and it's working. idk what's happening, I have ~150 mikrotik's in the field and never run across this exact issue before.

syadnom

I'm struggling on getting route filters working properly in >=6.42 I can't seem to discard ranges. ie, if there is a 10.100.5.0/24 subnet, I have to put exactly 10.100.5.0/24 in the prefix, I can't get it to work putting in 10.0.0.0/8 in prefix and setting prefix length to 8-32. BGP still advertises...

syadnom

Thanks, I completely spaced out the ppp up scripts.

added this to the profile:

/routing bgp peer set disabled=yes [find where established!=yes]
/routing bgp peer set disabled=no [find where disabled=yes]

That cured it.

syadnom

I'm using BGP to handle some VPN routing because it updates the routing table quickly (WAY better than OSPF, and simpler). The problem I'm having is that if a tunnel interfaces goes down and then comes back up, it takes BGP about 30 seconds to try to peer again. If I disable the peer and enable it's...

syadnom

upvote. also expanding on the netwatch, it's not fast enough AND it's CPU utilization is WAY too high. I did a simple netwatch to ping an off-net address and file the distance on a route, running this in even 1 second intervals adds ~10% CPU load. Not good enough. Now get it down to .1*3 second BFD ...

syadnom

I would really like to see BFD enabled on static routes as well as on interfaces. Here's the scenario: dual L2TP tunnels on different WAN links. tunnel1 loses connectivity, it takes as much as 60 seconds (default keepalive) to discover that it's down. tunnel2 is up but nothing is routed there until ...

syadnom

CRS305, use it as a switch.

syadnom

I'd like to use an RBM11G with a Compex WLE1216 minpcie board. It appears that mikrotik already has the ath10k drives due to the IPQ-4018 in a couple AC products.

This module is a 4 chain board though.

Anyone tried this or know if there is support in routeros for 4 chain ath10k radios?

syadnom

Are you sure about this? I seem to be able to transfer at wire speed across all the ports without hitting the CPU. This is NOT the case through the bridging method. I was seeing <100Mbps that way. I do have another issue. Now I can't add a VLAN to an interface including the bridge. I can't put the u...

syadnom

The CRS3x series look really great actually.

syadnom

I'm not enabling vlan filtering on the bridge. The guides I found on using the switch chip dont suggest that. Right now, port 5 and port 4 cannot see each other. If I assign a VLAN 14 interface on the hEX connected to port 5 (ie, PVID=15) it can't communicate with port 4. So Vlans are being properly...

syadnom

The mips based crs are pretty slow routers. New arm units look great

syadnom

vecernik87 was in fact correct. Ultimately, the need is for hEX-PoE-port2 to end up in RB850Gx2-Port1vlan12 hEX-PoE-port3 to end up in RB850Gx2-Port1vlan13 hEX-PoE-port4 to end up in RB850Gx2-Port1vlan14 hEX-PoE-port5 to end up in RB850Gx2-Port1vlan15 I've configured the switch on the hEX so that al...

syadnom

vecernik87, I was able to configure this through the switch and bridge all the ports.

syadnom

I'm setting up a hEX PoE as a switch-on-a-stick set. RB850Gx2 as the router, hEX PoE off port 2. I've configured 4 vlans on the router into port 1 on the hEX. Then 4 bridges for ports 2,3,4,5. Added eth2 and e1v2 to bridge-port2, eth3 and e1v3 ot bridge-port2 and so on. Problem is, only the first et...

syadnom

What I'm looking at is this unit was announced in the newsletter the same time as the wireless wire dish and a few other items which are out. Personally, most interested in the CRS305. I really don't need 10G for anything except proxmox clusters. No other decently priced switch has 3 SFP+ ports to d...

syadnom

The CRS305-1G-4S+IN was announced back in may, but I haven't seen anything about it since. Streakwave has some on order, but it's not even on the 'tik website.

This is basically perfect for a small proxmox cluster. Love to get my hands on a couple.

syadnom

also, I'm already doing the redundancy with dual tunnels and OSPF. But even with BFD the reaction time to switch tunnels is over 1 second AND requires a relatively complex setup AND OSPF on the second link eats LTE data. Can't use a bond because that's ethernet based and I need non-ethernet tunnels ...

syadnom

I need a new tunnel type. Could be a modified tunnel. Need 2 features in one. Forward error correction and backup tunnel. a) FEC added to the tunnel using reed-solomon or Raptorq. Essentially if there is some packet loss within the configured thresholds the packet will get rebuilt. tinyfecvpn can be...

syadnom

Calling admins! I have a feature that I'm really really needing and willing to pay for development on. How can I talk with someone at Mikrotik to see if it's something you guys are willing to do?

syadnom

I've got a couple of stubborn devices that can't use a DHCP option for VLAN assignment. Most can use DHCP 132 to set it but some grandstream ATAs cant I'm autoprovisioning these and if I force the VLAN in provisioning, I lose some flexability so it's a no-go. What I'd like to do is put their MAC in ...

syadnom

telepro, just ran across this thread. Verizon sims work in the US version but you have to add an APN for vzwinternet and select that in the interface. You can enable or disable the default route, you can setup a different routing table and send out the lte interface too so you can more easily config...

syadnom

I'm using a kit called tinyfecvpn, it's based on UDPSpeeder which is a UDP tunnel with forward error correction via reed-solomon encoding. I would love to see a tunnel type that included FEC. Maybe a check box in EoIP and GRE tunnels for this. The usefulness of FEC on tunnels is as follows, especial...

syadnom

OSPF just for BGP, can scale out to thousands. ISIS for this role is just lazy.

syadnom

I'm using 'tiks for CPE routers and kid control is an awesome feature. I'd really like a much better webui for it though, or maybe a smartphone AP. It's not intuitive at all to add a device to a kid. I'd like some add buttons or something in the device list to make this actually easy. Also, a calend...

syadnom

How did I not know this!

syadnom

I'd love for the firewall to automatically open ports matching NAT entries.

If I NAT port 80 in ether1 to an on ether2, I'd like to see a firewall rule dynamically created that is in-interface-ether1, port 80.

syadnom

I'd like to see 1 of 2 things....be a huge help:

1) Add the ability to select multiple protocols in NAT and Firewall rules. Specifically, UDP+TCP. Could be a multi-select box or just an entry that says UDP and TCP.

or

2) Protocol list, just like address list but let us put the protocols together

syadnom

I would like to see an extension to RoMON to allow a remote, ip based connection. For instance, if you do an EoIP tunnel then you can access the remote device via RoMON, but this can be tricky for dynamic IP addresses or devices behind NAT. So, you can L2TP or SSTP tunnel to another routeros device ...

syadnom

I'm looking for a way to get the 'broadcast' mode for bonding to discard the extra packets. The purpose is that I want to have a rock solid VoIP connection between two points. Either link may go down and I want failover to be instant because the packet was already on the second 'wire'. broadcast doe...

syadnom

Using a MUM presentation on the subject: "Using Mikrotik CHR as a BGP edge router" https://mum.mikrotik.com/presentations/EU18/presentation_5188_1524562405.pdf loading the LINX table took 4 minutes and 46 seconds on VMWare and an i7-7700k. OUCH. Now add load, they pushed 5G through it and convergenc...

syadnom

I'd like to see a larger Powerbox Pro as well. The 4 powered ports is a bit limiting. What I've done when a site 'outgrows' a powerbox pro is add a second and run the backhauls on the first setup as a router and then connect the second via the unpowered port or SFP DAC cable and do port based VLANs ...

syadnom

I would really love to see a proper x86-64 release for bare metal installs. There are a number of benchmarks out there between the various hyper-visors and one thing is quite clear. The hyper-visor IS in the way of maximum performance. For example, VMWARE is the absolute slowest for BGP. Hyper-V is ...

syadnom

Anyone know when the RB450Gx4 or the hAP AC2 should be available in the US? Everywhere I look they are pre-order.

syadnom

Probably use a 4S BMS chip but I need to know the details on maximums etc

syadnom

Any idea what the maximum battery voltage is for the mUPS?

I want to build packs with 18650 calls with nominal voltage of 3.7 per cell, so that puts me around 14.8 fully charged with 4 series batteries.

Also, what is the charging voltage output by the mUPS?

syadnom

Ive seen reports of 2km but drops in rain..

syadnom

we may see it in v7 whenever that comes out.
Can't tell if those are the words of a man who has had a sneak peek of something…

…or words that are heavily laden in sarcasm!

#2

syadnom

This is a complicated need. CCR sits with 2 WAN links. WAN1 has a /29 , WAN2 has a /29 (different subnets) Customer behind the CCR *requires* a public IP address but I have no access to routed IPs. So, bridge-wan1(WAN1, CUSTPORT1) and turn on bridge firewall so I can use queues. Problem is that I ca...

syadnom

I'm looking to create a backup link via cellular with a wAP LTE. The remote sites would have a standard internet connection (Cable, DSL, etc) with a tunnel (L2TP+ipsec probably, though EoIP+ipsec would be an option). The idea is to run OSPF+BFD on the main link and if it goes down, have an immediate...

syadnom

lots of people didn't read all the posts :/ @normis, can you share when the LHG60 will be released? Do you have specs on it's range? Maybe a chart of range vs throughput and MSRP? 60Ghz is great. It's extremely predictable. unlike 5Ghz which can feel a bit like black magic and only season magicians ...

syadnom

I'm setting up a new rack with dual WAN. I need to get some performance metrics to select the right gear. WAN1 300x20 w/29 WAN2 100x20 w/29 The setup will be a bit 'odd'. I'm going to create a WAN1-bridge with 3 ports and a WAN2-bridge with 3 ports. The reason for this is that I cannot get routed IP...

syadnom

Is it known to be compatible though...

syadnom

Also doesn't support band 17 on AT&T which is what is in my area

syadnom

The post was before that device was released.

syadnom

I pulled all my ubiquiti 900Mhz gear out, so I'm not needing to integrate with them. m900 radios only passing 1-2Mbps when the math says it should do 12Mbps, and old old canopy gear is doing 6Mbps+. I have a few areas that are heavily treed. I can push m2 gear through but can't get above 1-2Mbps, 90...

syadnom

come on normis, buddy, give us some details not just a 'no'.

Are you going to beat the ignitenet price? and when will we see this things in action?

syadnom

just revisiting this. wondering where mikrotik is at on the 'next gen' v7. edgeos is very very quickly encroaching on the wisp routing market. Mikrotik had a very strong place in even cambium and ubiquiti networks but I'm seeing pretty rapid switchover these days. Many wisps are flocking to edgerout...

syadnom

@mducharme how well is the m900 working for you compared to ubiquiti m900 radios? what antennas are you using? I could put these to use if they were decent.

syadnom

@normis, how about some specifics on the 60Ghz device?

syadnom

I'm having a heck of a time finding a confirmed working AT&T (US) LTE modem that I run plug into a hEX. Any suggestions?

syadnom

Why is the metarouter button still in the UI at this point? 7 years later?

syadnom

I'm looking for an elegant way to have 2x L2TP or PPtP tunnels sourced from different WAN interfaces for the purpose of redundant links. I'm currently adding routes to 2 IP addresses on my remote side via each interface's gateway. IE: wan1 10.0.0.16 gw 10.0.0.1 wan2 10.10.0.16 gw 10.10.0.1 remote CC...

syadnom

Ubiquiti wireless outperforms Mikrotik wireless. It wasn't always the case, and there was a time that mikrotik's nv2 was better than airmax. Those times are passed. I've thoroughly tested both AC implementations and Ubiquiti's comes out as much better, with more stable latencies and stable links, an...

syadnom

The obvious one.

syadnom

I also have the bug where I have to disable/enable or move rules to make them work, or reboot the router. I was all 'tik all the time for years. TONs of devices deployed. Not any more. I feel like I've had to regress a bit as I'm building APU/PFSense boxes for some clients that don't want edgerouter...

syadnom

I'm playing around with using bonding broadcast because I have multiple internet connections with each having latency spikes and dropped packets. bonding broadcast will send each packet down both links (in this case, EoIP tunnels) for the purpose of the remote side getting the 'fastest' packet. Late...

syadnom

CCR are multi-core and as a result, performance is variable depending on how data flows. A single stream, ie, one ipsec tunnel isn't going to be all that fast. I highly doubt any CCR will be anywhere close to 500Mbps ipsec on a single tunnel.... if it's many ipsec tunnels, then yeah, doable. Someone...

syadnom

500Mbps of ipsec?

syadnom

As far as I know, there isn't currently a way to do this, so this is either a feature request or an open door to been corrected! I really need to be able to identify traffic that has been queued. Right now, we have a few hundred simple queues but no way to identify traffic that skips the queue excep...

syadnom

They are currently directly connected. The problem is that I can't get quorum for a drbd cluster this way so I need a switch and this crs is by far the cheapest option for 2 sfp+ ports. A third cluster node would be on gigabit in the same switch group, but that would only have the cluster volume on ...

syadnom

The 10Gbps ports are just for drbd sync.

The proxmox hosts will have multiple gigabit ports for virtual machines, but this is really just about having a very fast storage network.

syadnom

I need 2 SFP+ ports for a project (2 VM hosts, 10Gbps NICs) and am looking at the CRS210 as a possible option. I'm looking at the block diagram here http://i.mt.lv/routerboard/files/CRS210-150409135339.png and it suggests that the SFP+ ports are on the same switch as the 8 1Gbps ports . Question is,...

syadnom

This has been asked before, but the thread seems dead.

I really need to find a Verizoni LTE card/adapter than can handle DirectIP for a reasonable price. Any ideas?

syadnom

well, the VM has 4 CPUs at 2.66Ghz and 4GB RAM. Database is 52MB in the tgz, 163MB decompressed.

Also note that this isn't the first run. I've imported the database in and waited until /dude print said status 'running' and connected up.

syadnom

6.36rc37 is the first release that the database imported for me and status says running. The Dude takes a VERY long time to get data though.... Minutes. It's really slow.

syadnom

Yes ^^^^

It's not just about routeroz, it's about what the host expects to see and how the host will behave. No sane vm host will hard kill a vm unless explicitly told to do so

syadnom

"I would like to suggest a Cloud Hosted Dude Server for free."

$40 is too much for your could hosted monitoring ?

syadnom

any updates? dude v4.0b3 wont run on anything new so I'm really stuck here.

syadnom

note, I know how to do concatenate("value1","value2") but then it's all one big line! If I could put a new line/ carriage return in the concatenate that would work too.

syadnom

I'm using an if statement to determine device type and then I want to print some oid info out like so if(oid_raw("0.0.0etc")=1, "station signal: oid("1.2.3etc") ", "unknown") The problem is that the double quotes in oid() breaks the function. If I escape the quotes ie oid(\"1.2.3etc\") then it just...

syadnom

I'm trying to make a customized label for devices. I want a function to determine device type and output based on that. I've tried: [if("AP"="AP","AccessPoint","other")] this returns either 'AccessPoint' or 'other' just like you'd expect. but [if([Device.Type]="AP","AccessPoint","other")] this re...

syadnom

+1

I'd doing this on another box and copying the cert over. would be fantastic to have this in routeros!

note.... ub****ti's routers can do this... if that's at all motivating lol

syadnom

I'm already pulling the accounting snapshot to get all the dst addresses and comparing those to my queues with some awk-fu. really like to see some routeros method to do it instead.

syadnom

I've got a 'catch all' queue at the bottom of my 400 deep simple queue list. I'm looking for a way to figure out what IP addresses are hitting that catch all queue to see who doesn't have a queue setup. Doing it manually is a pain and it's not very convenient to pull it to a linux box to sort. Ide...

syadnom

CCR-1009-8G-1S-1S+ at 6.35.2
Cannot get micro sd cards to recognize. Tried a 1,2,4,8,16GB card, tried rebooting and full power cycle to recognize. Ideas?

note, flash drive plugged into from w/ usb adapter works fine.

syadnom

Any chance for an update here? Having to hunt for old versions and running MIPS routerboards with outdated firmware to fill this gap...

syadnom

any news on this?

syadnom

I'm trying to scan a network for SIP phones that only respond to pings and http requests. They wont respond to any SIP packets that aren't well-formed. I'm looking for a way to make a probe to look for a string in the http reply. It would be great to somehow use ARP to get the MAC of the IP and just...

syadnom

I agree, this is much needed. I do see a beta on ARM, but the cheapest ARM box is the 3011...

I've been lucky enough that I could drop in a CHR on existing VM infrastructure, but I really need a cheap dude agent on MIPS like we've had in the past.

Thanks.

syadnom

Also need an update on ipsec+tunnels (EoIP, GRE, etc)

If this is still an issue, I'll have to go with another vendor's product.

syadnom

Normis, I don't get the unlimited license. At this point, it's pretty unrealistic to get 10Gbps+ from a CHR and that's unlikely to change. VM playforms simply aren't able to provide such speeds and wont for some time. Can we have a similar option to do a 'site' or 'cluster' license? and allow unlimi...

syadnom

do any tunnel interfaces ie IPIP, GRE, EoIP, actually use the src-address to source out an interface? for example, 2 WANs wan1 1.0.0.1 wan2 2.0.0.1 I want 2 tunnels to a remote host 3.0.0.1 add tunnel1 1.0.0.1<>3.0.0.1 add tunnel2 2.0.0.1<>3.0.0.1 -or- does anyone have any clever solution to tie a t...

syadnom

one major need is for live migration. Without xentools, live migrations are done using a method that locks up CHR. Add xentools and live migrations will work. This issue exists on vanilla linux as well. Secondly, without xentools, CHR locks up when altering CPU priority. This issue exists on xentool...

syadnom

The dude agent already exists and the new version isn't that much of a departure from the old. This is a much needed option for a lot of people.

syadnom

I'm trying to do some dual eoip links to bond over WAN (w/ ipsec). The remote side is a datacenter and has plenty of bandwidth. The local side has a few slow links and they need to be aggregated. this will be easy with eoip tunnels, except that I have to add specific routes to different public IP ad...

syadnom

I still can't get an import done. I've tried 'import-db' which is failing, and I've tried to copy the dude.db and 'files' directory over and enabling but that just sits in the "status: applying settings: enabling: reading db object #4801" loop.

syadnom

I should also not that I was running 6.34.2 and also tried 6.35rc19 with the exact same issue.

It's still running strong with 1 CPU, but now i have to do a few more days of testing and will still be nervous about production...

syadnom

I was just about to deploy a CHR, but in the last minute testing it's been rebooting whenever traffic starts to flow. XenSever6.5 on intel X5650 CPUs. I flipped every switch, went to the most basic config I could find with no solution, until I set the VM to only have a single CPU. Can't say for sure...

syadnom

I can live-migrate... but without the xentools kernel module installed, the CHR is freezing on resume. I've found plenty of posts about the linux kernel freezing the same way then xentools isnt installed. I can't pull anything of value out of the CHR's logs so can only assume this is the issue. Also...

syadnom

I have everything logging to disk and get zero entries in the log, just the standard 'router was rebooted without proper shutdown'

syadnom

I think this is due to not having xentools installed. When I live migrate a CHR between two XenServer hosts, the CHR locks up and is completely non-responsive. no console, no pings, etc.

Anyone else confirm this or have a solution? CHR 6.35rc14 and a number of previous versions tested.

syadnom

just linking in my request http://forum.mikrotik.com/viewtopic.php?f=1&t=105277

I really would like to have this setup in HA, but need the integration tools/kernel module to do so. I believe this should be pretty easy to integrate, but can only be done by mikrotik.. Thanks.

syadnom

Can we get vmware and xentools into the CHR release asap please? This facilitates a number of features, especially in xenserver. You can't do live-migration and full HA without the xentools.... I have a pair of servers running xenserver 6.5sp1. I'd LOVE to be able to have my CHR for the wISP be true...

syadnom

Is there any way to change how the name of a queue created with DHCP backed by userman? I'd like it to include info on the user.. now it's the mac and the interface... not very readable. I'm spreading my queue compute cycles out to the sites with RB850Gx2 units and CCR1009 units and using RADIUS for...

syadnom

Is there any way to identify packets that miss the queues? Say there were 20 simple queues for clients, but there were 21 clients... one passes without a queue. I have a 'catch all' queue at the end so they don't get unlimited, but I'd like to be able to identify these without going to time-consumin...

syadnom

I can't figure out how to get this to work. I want the loopback IP address to be how I connect my radius 'userman' server to the client routers but I can't get it to work. Will only work when hitting an actual external interface. Using OSPF to route, so loopback interface and IP is what I need. note...

syadnom

how about with a single top-level queue (parent) and 300-400 child queues?

syadnom

What kind of throughput can I expect on the CCR1009 with simple queues? I can't seem to find any good performance numbers out there.

syadnom

Hi. I have a CCR1009-8G-1S-1S+ with RouterOs veresion 6.15, about ~1700 simple queues and ~300 firewall rules. Max CPU usage 70%. I cant reach queue max limit. I can only achive about 70% of speed. For testing purposes I left about 400 queues, then speed limitation works correctly. Is MikroTik/CCR ...

syadnom

How much throughput can be expected on an RB3011 for simple queues? I just had a hardware failure and I'm looking for a good value replacement that can handle a few hundred Mbps... I have a hEX in place right now which is ~90% CPU all the time, I have a couple RB850Gx2 units in UPS and I'll swap one...

syadnom

thanks.

syadnom

I had a piece of x86 hardware fail. I've pulled the drive and can see the files. All I really need is to pull the queues out, I see that they are in rw/store/net... but the idx and dat files are of an unknown format so I'm not able to get usable output... ideas?

syadnom

What virt environment? Some don't support vlans...

syadnom

@krisjanis, any ideas here?

syadnom

I'm about 6x in and haven't gotten one to complete yet.

syadnom

I'm still unable to import into v6.35rc7. Fresh backup from a windows dude box. stuck on:

backup-file: bu.tgz
status: applying settings: enabling: reading db object #174
or
status: applying settings: enabling: reading db object #175

same issue, same object numbers.

syadnom

Just installing my first install CHR and playing with it. Hyper-V host. The time service is off. It seems to take the time from the host. But it ignores the datetime offset. If I configure CHR timezone, the offset gets applied twice ;) Quite obvious for me, as I am in europe, the machine in chicago...

syadnom

Please try importing it one last time in v6.34rc45 and if it fails then generate supout file after this attempt and sent it to support@mikrotik.com we will check why db does not want to load.

I've done this, no response....

This is about the only thing holding me up...

syadnom

yeah, about 20 minutes in, same thing....

syadnom

Went 24 hours at 100% CPU on 6.35rc4, trying again on 6.35rc5...not hopeful because it's already sitting on "status: applying settings: enabling: reading db object #174"

syadnom

I've tried 6.34, 6.34.1, and 6.35rc4. Now, it's starting to import, but getting hung up on status: applying settings: enabling: reading db object #174 or status: applying settings: enabling: reading db object #175 CPU 100%. At least it stays 'connected' to the import-db run now, but never seems to c...

syadnom

Any updates on making an OVA so it doesn't take 47 steps to get into vSphere? I just did it once and have imported the same 'bare image' a bunch of times. Then generate a new ID once you've booted it up. Now that I figured out (...was told what to do...) updating, this is really simple and takes ju...

syadnom

just for fun, I stopped the dude on the windows box and vacuumed the database (sqlite3.exe dude.db "VACUUM;")
this shrank the db file from 111MB to 90MB.

relaunched the dude, exported, transferred, imported, same results.

syadnom

support file sent

syadnom

ok, dude 4b3 on Windows. Export file backup-2016.01.27.tgz copy to files on 6.34rc45 on 6.34rc45 /dude set enable=no remove dude directory /dude set enable=yes /dude import-db backup-file=backup-2016.01.27.tgz status: importing: 45% complete status:importing database object .... /dude print now show...

syadnom

I've done this 3 times now. Full export of the tgz backup, then import-db the file. Same thing.

syadnom

I just uses VMware workstation to do it.

For vcloud you can just use it as is, then resize it once deployed. Boot up your fav partitioning iso and resize.

syadnom

I'm exporting my existing dude database and trying to import it into a CHR. I'm copying the file over as backup.tgz /dude import-db backup-file=backup.tgz It imports, then seems to bail out at 99% and my dude client gets an 'Error: Connect failed: 10061:No connection could be made becaus...' /dude p...

syadnom

got it. thanks.

syadnom

syadnom
whan you mean - upgradable? It should be from the start upgradable to newer version. Only when you run out of the lincese time upgrade is not possible.

right now I only see the images on the download page, no 'upgrade' packages.

I'm on rc41, but rc45 is available. How do I upgrade?

Search found 449 matches