MikroTik

cupis

Is there any way I can advertise the route as egp?

The routes will automatically be eBGP, because your ASN is different to the peers ASN.

cupis

Does anyone know how the "masquerade" action selects the src-ip for masquerading? I coudlnt find anything about this in the documentation. masquerade used the outbound interface to select the outbound IP address -so it if picked a bridge maybe this the interface your traffic is leaving vi...

cupis

Is there a possibility to prevent this?

Add this firewall rule on the mikrotik:

/ip firewall filter chain=forward connection-state=new in-interface=WAN reject-with=icmp-port-unreachable

where WAN is your WAN port.

cupis

Instead of using src-nat, using masquerade might be more appropriate to your setup. Something like (not tested): add action=masquerade chain=srcnat src-address=192.168.1.0/24 out-interface=ISP_UP with the "masquerade" action i had the problem that it did take the private ip assigned to a ...

cupis

The workstation gets an IP from a DHCP service on the router, and can ping the gateway fine. I can ping google.com from inside the router, but the problem is that I can't ping google.com from the workstation. Can you ping 8.8.8.8 from the workstation? If you can, then it sounds like a DNS issue. If...

cupis

Instead of using src-nat, using masquerade might be more appropriate to your setup. Something like (not tested):

add action=masquerade chain=srcnat src-address=192.168.1.0/24 out-interface=ISP_UP

cupis

I have over 60 routers on the network between the two. What I was thinking was running iBGP on the same AS between the two routers over the network. Then peering with the upstream and try to watch the load balance over the gateways. Does this sound more like a solid plan? Absolutely, yes. When you ...

cupis

This will be first time for me setting up BGP with 2 peers, but on two separate networks(locations). Here is a diagram of what I have, and what I am trying to accomplish.(these are dummy ips of coarse) Is this even possible to do this? Or am I on the right track? You are on the right track. The mai...

cupis

In this respect it would be no different to DHCP. The OPs problem is not to do with IP allocations, it is to do with trying to force the traffic between two devices to go through the router (where it can be firewalled) rather than directly between the two devices (because they on the same subnet an...

cupis

DHCP would not help force the traffic to go via the router, in your example. :roll: :roll: ok what about the PPPoE server... the pool will be controled by the router In this respect it would be no different to DHCP. The OPs problem is not to do with IP allocations, it is to do with trying to force ...

cupis

server + my PC + other host -> switch -> RB1000U -> internet the server, your pc and other host are connected to switch so if you use a static ip then the RB can't do any thing to you in your local network... to solve the problem you must use DHCP server in your RB to control the traffic between th...

cupis

Is your second workstation getting an IP address correctly allocated via DHCP?

cupis

Can you post your configuration using /export compact? Do you have NAT rules (masquerade) setup for VLAN2 (10.0.1.0/24)? Does you second PC get an IP address via DHCP, or can it not even see the router? *** Spanish via Google Translate *** ¿Se puede publicar su configuración utilizando "/export...

cupis

i want filter not to advertise any route to cllient. just default route should be advertised. help would be appreciated Setup a Routing Filter to the above specification, then apply it as the out-filter in the BGP session to your client. Something like: /routing filter add action=accept chain=DEFAU...

cupis

The prerouting rule works for forwarded packages, but I need to enter into the router: e.g.: ssh 200.20.x.2 And this doesn't work when the main link is down, correct? If so, add something like this: /ip firewall mangle add chain=input interface=ether2 action=mark-connection new-connection-mark=poli...

cupis

Does 192.168.210.121 have a firewall which could be blocking the traffic?

cupis

I'd start with routing 173.194.0.0/16 to the cable modem and go from there.

cupis

Can you confirm that the devices in each subnet are using the Mikrotik as their default gateway?

You also almost certainly do not want accept-redirects on, so run:

/ip settings set accept-redirects=no

cupis

I have a problem with policy routing This is the router configuration: /ip address add interface=ether1 address=200.10.x.2/24 add interface=ether2 address=200.20.x.2/24 /ip route add dst-address=0.0.0.0/0 gateway=200.10.x.1 pref-src=200.10.x.2 add dst-address=0.0.0.0/0 gateway=200.20.x.1 pref-src=2...

cupis

but i can't go outside, ping don't respond... ping google.com and timeout...

Maybe your ISP has not got that /24 setup to route to your router, so return traffic is not making it to you...

cupis

I've not seen this issue, but IPv6 does not use ARP, it uses Neighbour Discovery, so you might look at your options in that menu. As a separate point, it might be worth getting more detail on the type of failure - do devices lose their IPv6 addresses/routes, are they able to ping each other, does th...

cupis

The source address for the ICMP replies is not going to be your routers address. Either just allow all ICMP, or try allowing (related,established) packets through to your router.

cupis

thanks for your support. I have some queries. when i connect to different AS like 65000 and 65001 why does it shows in mikrotik <>>bgp <> advertise<>origin ---- igp. I'm not sure I understand your question, but I suspect one of your routers will show the route as originating from it's own AS (igp) ...

cupis

How about:

:local ipam "";
:for i from=1 to=2 do={
 :if ( $ipam != "" ) do={ :set ipam "$ipam;"; };
 :set ipam ( $ipam . "10.15.32.$i" );
}
:put $ipam;

cupis

You can put both WAN IPs on the interface facing your provider. You can then use src-nat to specify which IP will be used to NAT each of your private networks (assuming that that is what you want to do).

cupis

What's new in 6.0rc9 (2013-Feb-08 08:15):

*) ospf - fixed Summary-LSA prefix length check for OSPFv3, was not
accepting valid LSAs;

Does anyone know if this fix will be implemented in a 5.x version?

cupis

local-pref will not propagate between two routers configured with different AS numbers. This is not a Mikrotik issue, that is just how BGP works.

cupis

they are static routes. we had added bgp local pref = 200 in static routes. but still my peer shows no local pref

Can you show your config, please? Can you confirm that both routers are configured with the same AS?

cupis

Are you originating the route, or learning it from elsewhere? If the latter, set the localpref when you learn the route, in your inbound filter, rather than in your outbound filter. If these are static routes on the Mikrotik, you need to set localpref under IP/Route. Otherwise, could you give us mor...

cupis

Perhaps ask them if they can send you Partial Routes so your router can use the additional information to make its routing decisions?

cupis

To expand on the previous answer sounds like the problem is being caused by the lower MTU on your GRE tunnel.

Are you blocking ICMP at all, as ICMP can deal with this (Path MTU Discovery). The other option might be clamping MSS on your TCP traffic, but this will not help with UDP.

cupis

this is working as like as my code. the upload is going over one upstream.

How many routes are your learning (via BGP) from each upstream? Are they sending you anything more that just a default route?

cupis

Thanks. But i didn't get you as I know BGP very little :( Please explain with code. Instead of: add chain=UPSTREAM_1_IN prefix=0.0.0.0/0 action=accept bgp-local-pref=150 add chain=UPSTREAM_1_IN action=discard add chain=UPSTREAM_2_IN prefix=0.0.0.0/0 action=accept bgp-local-pref=300 add chain=UPSTRE...

cupis

The SIP ports are forwarded to a device in my lan. i added this: add action=dst-nat chain=dstnat disabled=no dst-port=5060-5061 in-interface=\ pppoe-out1 protocol=tcp to-addresses=192.168.1.250 to-ports=5060-5061 But not work. testing ports from internet not work. this same rule with port 21 works ...

cupis

Why don't you accept more routes than just a default from your providers? If both providers gave you a full or partial routing tables then BGP route selection would hopefully result in you splitting your upload between the two providers, with automatic failover in the event of a failure of one of th...

cupis

that is set to 0

Can you set that to a higher value or just delete it from the configuration and see if that fixes it?

cupis

Do you have max-prefix-limit set in your BGP config?

cupis

Is 192.160.0.10 a host, and 192.168.0.2 your Mikrotik router? Something like this will allow access to your router 192.168.0.2 only from 192.168.0.10: /ip firewall filter add action=accept chain=input src-address=192.168.0.10 add action=reject chain=input This is probably more restrictive than you r...

cupis

Can you show us the routing table on both routers, and just double check the diagram and make sure it is correct/accurate, please?

Regards,

cupis

is it possible to filter all subnets 10.x.x.x/x ?

Yes, use something like:

/chain=drop10 prefix=10.0.0.0/8 prefix-len=8-32 action=discard

This will filter all routes in 10.0.0.0/8, with any prefix from /8 down to /32.

Regards,

cupis

the problem is that my RB seems to work fine, but i have a lot of lost pings. 5-10%. to my providers peer ip. This does not necessarily indicate an issue, they could just be rate-limiting ICMP and/or their router could be dealing with them as a lower prioirity. Are you seeing any packet loss connec...

cupis

If you expand the filters you have above, none of them will match the routes you've listed above. Can you try the following and see if it matches, please? /chain=drop10 prefix=10.0.0.0/8 prefix-len=24 action=discard http://wiki.mikrotik.com/wiki/Manual:Routing/Routing_filters If network mask is not ...

cupis

Any idea why? prepend=3 not enough? maybe prepend=10 should do it? ... I am not receiving full routes from ISP's should I ask them to forward those to me? I'd suggest that you need to advertise your allocated /20 route (216.150.32.0/20). If your router will handle it, you can also ask your provider...

cupis

$newarray = array();
foreach( $mikrotikarray as $a )
    $newarray[] = $a["address"];

Then look at

$newarray

.

cupis

I have routerboard 450g and public IP /27 and I want configration to this router to convert subnetmask IP/29 , IP/29, IP/29,.... how I can do this sipcalc will do this: $ sipcalc 192.0.2.32/27 -s29 -[ipv4 : 192.0.2.32/27] - 0 [Split network] Network - 192.0.2.32 - 192.0.2.39 Network - 192.0.2.40 - ...

cupis

I'm getting the following error,

Nexthop 202.xxx.xxx.1 is not on network shared with remote peer.

Try enabling multihop for this peer and see if this resolves the issue.

Regards,

cupis

Hi,

You should probably start a new topic for this issue, perhaps with the subject "32-bit ASN issue".

Regards,

cupis

Based on the information you've provided, I think you need to refer this to your provider for further investigation.

cupis

It is /32 because it's the ISP interface(WAN) and i have just 1 (one) ip from the 86.x.x.176/28 (sorry it's not /27 it's /28) that's why i have 86.x.x.185/32 and even i modfy this it doesen't work: Based on the information you've given so far, it sounds to me like it should be /28, not /32, otherwi...

cupis

I have routing problem, my ISP routed to my MT a subnet 82.xx.xx.128/25 IPv4 public throught a public IP ( 86.xx.xx.185/27 ). Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 ;;; default configuration 82.x.x.130/25 82.x.x.128 eth1 1 86.x.x.185/32 86.x.x.177 WAN So shouldn...

cupis

Can you check the IP addresses allocated to your interfaces (and perhaps show the output/configuration here)? 2 ADC 86.xx.xx.177/32 86.xx.xx.185 WAN 0 From your description, I would have expected the above to be: 2 ADC 86.xx.xx.160/27 86.xx.xx.185 WAN 0 I imagine you cannot currently ping 86.x.x.177...

cupis

With this rules, it announce the three Prefixes but also the whole 213.177.64.0/19 that I don't want... I want only the 3 prefixes... But you also want it to automatically pick up any new routes without you having to update the filter? You could set prefix-length to 20-32 maybe? Otherwise can you b...

cupis

My network 213.177.64.0/19 between RB1100AH2 and Cisco 7206VXR I woudl like to redistribute connected route. It is working but I can't make a good filter from Mikrotik to control what it is send to the 7206. today I have these working lines to announce only these 3 prefixes. It working ok but when ...

cupis

It sounds like you need to look into "source" or "policy" routing, so that any traffic from the /29 is routed to a specific peer, rather than using your main routing table (which may cause the traffic to be sent out via the "incorrect" peer). Some online examples/docume...

cupis

I want to announce my networks on two ISP. I've seen the example in Wiki but i still have a question, Have i to write some new route on RIPE database? You should have a route object in the RIPE DB, with your ASN in it. What is your IP prefix and ASN? You won't need multiple route objects for a sing...

cupis

BGP doesn't really work quite how you want it to, but to get a good approximation: * you should have a filter on your BGP sessions limiting what prefixes you send to your suppliers (create filter under /routing/filter and then apply it to your BGP session as an "out-filter" * you can set a...

cupis

Is there changelog for Beta2? At the: http://www.mikrotik.com/download/CHANGELOG_6 is only: What's new in 6.0beta1 (2012-Apr-13 15:26)

6.0beta2 changelog is now at the above URL.

cupis

It looks like serious trouble with 2a02:610::/32 prefix BGB delegation. Does anybody else such problems with http://www.mikrotik.com IPv6 reachability? 2a02:610::/32 does not seem to be globally visible in the global routing table the moment, testing from a few locations and third party route-serve...

cupis

Have a look at the routing tables on the affected devices - I suspect that they do not have the routes installed that you think they should. Specifically look at whether .185 and .186 have the "correct" routes for the router you are testing from and for the destination you are testing to. ...

cupis

Do you have the /24 route in your own local routing table? i.e. an active route sending the traffic somewhere locally? If not then you will not announce the route as being local and you will just see the route from the internet (which you might try to advertise back out).

Regards,

cupis

What is your actual ASN, so we might look at the global routing tables to see the existing configuration from the point of view of "The Internet", please? Also, can you dump the routing tables on the routers whilst Telco 1 or 2 is down, so we might be able to see how your routers route aro...

cupis

OSPFv3 is run between the BR and the two PPPoE Mikrotik routers. OSPFv3 works fine, and the BR happy advertises its default route of ::/0 to the PPPoE servers. However, this is where difficulties begin. On the PPPoE server, we can happily see the IPv6 route for the customer: 2 ADS XXXX:1800:700:100...

cupis

I hadn't heard from Mikrotik support for a while but recieved this email this morning: Thank you for the report, we will try to fix this issue in one of the nextversions. Has anyone heard anything further on this issue? The changelogs do not suggest this is fixed yet in 5.6 (still running 5.4 atm)?

cupis

Ah, please disregard this post. SNMP polling is indeed responding from the loopback/bridge interface when it is queried against. The issue I was experiencing appears to have been routing-related.

Regards,

cupis

Is it possible to configure SNMP on RouterOS to respond using a specified bridge/loopback interface as a the source IP address? By default the response originates from the IP address on the outgoing interface, I think.

Regards,

cupis

what is the most convenient way for vpls+mpls: bgp or ospf ? I think you have to use BGP for this. OSPF is an interior gateway protocol, so you would normally just use this to distribute loopbacks etc between the routers - BGP would carry all customer routes, etc. You might want to look at the guid...

cupis

Hello, I am accessing to my MT via winbox. Yesterday I noticed that someone had many attempts to log on the MT, but in vain, as he did not guess password. Could you please advise me how prevent access via HTTP completely and allow only winbox from only my place? Look into the "IP->Services&quo...

cupis

is there another method to configure the Routerboard initially??? You can connect via ethernet and then use telnet/ssh/winbox etc. http://wiki.mikrotik.com/wiki/Manual:First_time_startup Every router is factory pre-configured with IP address 192.168.88.1/24 on ether1 port. Default username is admin...

cupis

Are you saying that adding a bridge, with no physical interfaces linked to it, and adding an ip address on that bridge, solves this issue ? What would you suggest that the router id might be: the ip on the recently created bridge ? The IP you add on the loopback should be a /32 (single IP, not a ra...

cupis

10.10.10.1/30 on port 1 which gives one usable IP 10.10.10.2 and this 10.10.10.9/29 which gives the range 10.10.10.10-14 on port 2 the above ones are working perfectly but suppose I want to give a range of 20 IP addresses to port 3, and give all of them to one server when I create any block other t...

cupis

You will need to provide the Cisco config defining the two prefix-lists:

"sh run | i default"
and
"sh run | i GW-OUT"

Regards,

cupis

How have you setup SNMP on the router and in PRTG at the moment? Can you post details of your existing configuration?

cupis

IPv6 doesn't use ARP, it uses Neighbour Discovery.

Have a look at the options under IPv6/ND.

Regards,

cupis

I saw exactly the same thing: RouterOS will pick up everything except the /128s, and I too use those for BGP. Good to know someone else can confirm it. Hopefully Mikrotik will fix it eventually. Have you heard anything from Mikrotik on this? I am seeing the same issue with a mixed Mikrotik/Cisco ne...

Search found 74 matches