MikroTik

Jeanluck

hank you very much, it is clear then that we should buy the 2216.

Jeanluck

Both models have the same L3 HW-Offloading capacity?
I know that the 2216 model has faster ports, but apart from that difference, and since they have the same processor, their L3-HW-Off performance is identical?

Jeanluck

Mikrotik guys, could you answer please? Will this bonding failover work properly in a PtMP setup, when done only on the station side? (Cube as station, connected to separate 5GHz and 60GHz sector APs on the same switch.) Yes, this can be reconfigured to work in such way. On 60GHz AP side add VLAN, ...

Jeanluck

In my experience, of 4 units I bought, 2 units were defective at the hardware level.
The ones I have now work fine with 6.44.6. I am afraid that in addition to a problem with RouterOS, there is a quality HW problem with this model.

Jeanluck

I bought a new 1072 and it works perfectly. Conclusion: I think Mikrotik has modified something in the hardware of the CCR1072 since some date, and the first units (I don't know for how long) don't work with new RouterOS versions, and the newly bought ones do. This is just a hypothesis. If all CCR10...

Jeanluck

I upgrade 6.38.3 (working fine for years) to 6.45.8 and CCR1072 died completely within 48 hours. It was lost even the configuration.
I'm waiting for Mikrotik to tell me if it's a failure of the unit or RouterOS 6.45.8

Jeanluck

Remember that CCR1072 works fine with v6.38.3, I use this version without issues the last years.

Jeanluck

Go back to 6.38.3 and all will works fine... (close service ports for avoid vulnerabilities)

Jeanluck

Could be some random attack? Try to register cpu usage every second looking for high cpu usage

Jeanluck

What reboot frequency did you have previously?

Jeanluck

Thanks, 6.43 discarded then... let's see if there's luck with 6.44.
I have the 6.38.3 and only had one reboot in 3 years

Jeanluck

Please let us know how it works in a few days

Jeanluck

can anyone confirm that version 6.44.5 is stable with the CCR1072?

Jeanluck

My CCR1072 works at 37-39

Jeanluck

Closing 1072 well with IP/Services with subntest + ip firewall, is protected. If I have to choose between restarting it every day by watchdog or protecting it well manually....

Jeanluck

That confirms what I thought.... I will not move from the 6.38.3 that works perfect! In the 6.42.1 changed the firmware to improve performance for CCR1072, I don't know if it will have anything to do ...

Jeanluck

I use the 6.38.3 without problems, except high cpu for pppoe disconnections (no nat, no masquerade, no reason...)
Precisely I don't update for fear of what I read is happening...

Jeanluck

I had to change the CCR1072 because I just couldn't find a solution. New hardware and everything solved, with the same .backup of the unit that failed.

Do you have the option to change the hardware and check if it fixes the problem?
(remember to do a reset-macs if you load the .backup)

Jeanluck

Thank you so much, I'll try!

Jeanluck

Works fine for me with 6.38.3, can you use this version?

Jeanluck

DFS is off. I try several frecuencys, but with the same result always

Jeanluck

It's a problem that's giving me a headache. Can you think of a reason? Nobody's ever had the same thing?

Jeanluck

I have several omnitik installed and I have the same problem by about 50%. It happens with the classic model and the AC model. The problem is that from time to time, all sxt-slaves lose the connection for 3 seconds (with a constant ping there are 3 or 4 timeouts). The sxt doesn't lose register on AP...

Jeanluck

Select 64Ghz instead of auto, and aim well... (patience...)

Jeanluck

I use only public IPs, and I have no "masquerade" rules, and I have no "dstnat" (only are executed under restricted conditions to access to managemen devices), and I have no OSPF, so, although I saw https://www.youtube.com/watch?v=D80_a_O86jc i have no answer to my problem :-( I ...

Jeanluck

Is this problem solved with v.6.42.x in 1072?
(because of change of firmware for CPU tile optimize)

Jeanluck

I have a CCR1072 with RouterOS 6.38.3 and it works perfectly. I wanted to update it to 6.42.6 but reading this thread I'm afraid... Has anyone ever tested if the problems go away with 6.42.6? Can anyone tell me if these problems exist only after version 6.38? (I need to know if the problem is determ...

Jeanluck

I had the same problem. Look at your layer7 rules, they can cause 100% CPU with lower pps rate. What version of routeros you use? The best way for a definitive solution is detect the attack with a external machine that send your attacked ip to blackhole (Fastnetmon + PorMirroing for example is an op...

Jeanluck

I'm not sure how to do it. I need: untagged bonding1 <----> untagged bonding2 tagged bonding3 vlan151 <------> tagged port1 vlan151 I had them in 2 bridges because I need them to be totally isolated and I'm not sure how to do it, because there is no drop that I can configure between them. Could it b...

Jeanluck

You're right, thank you!

Jeanluck

Are you planning to expand it in future versions?
If so, is there an estimated time frame?

Jeanluck

I have found that the HW. offloading works without problems in the first bridge I created.
However, on the second bridge, under the same conditions as the first, there is no way to activate HW.offloading.
Does v6.42.6 on the CRS-317 only allow active Hw. offloading on a single bridge?

Jeanluck

With SWOS I left it for impossible. With RouterOS v6.42.6 it works fine, although there seems to be a bug with the VLAN tags if vlan_filtgering is not on YES
I recomend you use RouterOS or wait for more stable SWOS

Jeanluck

Problems with CRS317 that required active RTSP after a reboot (or no traffic....) have been solved. RTSP is off and everything is working properly.
Note: I had problems linking to an RJ45 (1gbps) module of the "MT" type, with those that start with "6", no problem.

Jeanluck

I have some similar problem. With RTSP active works fine, but without it, no traffic after reboor (6.42.2)
How do you solve the problem? using 6.41.x version?

Jeanluck

With SWOS was imposible for me. With RouterOS works fine

Jeanluck

Bonding is fundamental to me. Buy the unit for that reason. What kind of problems do you have exactly? Is there anything documented? I was going to put the switch into "production" soon with the RSTP on

Jeanluck

All other devices have RSTP disabled. In fact, the CRS317 marks as RTSP root interface the MAC of the ether1 interface, which is the only one I have outside the bridge (along with the port for mirroring), because I only want the ether for management. Therefore, the RSTP I understand that it should n...

Jeanluck

I can't get the traffic to be stable, when I reboot the unit I have no traffic. If I enable and disable a bridge port, or disconnect and connect a port the traffic returns (not at 100%), but if I do nothing after restarting the unit, I have no traffic. The only way for the unit to send traffic after...

Jeanluck

I just bought a unit, which I wanted to make LACP with two interfaces. I couldn't practically test it, the result was constant loss of links on almost all CRS317 interfaces, and even reboots of the CRS. A chaos.... I reset-configuration and started again several times, being careful not to do anythi...

Jeanluck

I never made a port-mirroing and I need to do port-mirroring with a CS317 of 2 ports belonging to a Bonding-802.3ad. My doubts are: 1.- Is it possible to port-mirror the virtual bonding interface to a physical SFP+ interface? 2.- If it is not possible to do port-mirrorin of the bonging, is it possib...

Jeanluck

The minimum active flow timeout time is 60 seconds, which is a very long time for DDOS attack detection. Why doesn't Mikrotik allow lower times? Logically, CCRs do not have sFlow, nor PortMirroring, and if we only have NetFlow to extract traffic information with a minimum of 1 minute of time, we are...

Jeanluck

Hi, to detect UDP attacks (is my big problem now), you say "inactive flow timeout = 1s". What time are you using for "Active Timeout" and what cache entries size in "Traffic Flow Settings"? Actually I have 1 minute for active flow connection, 15 seconds for inactive flo...

Jeanluck

I have 6.38.3 version, and I want to upgrade, but I want to avoid DHCP Server fail on bridge. What version is afected? Can I upgrade to 6.40.6 without risk of this bug?

Jeanluck

105547111 - You see this option on your device by mistake. Of course, since you do not have a SIM slot, you should not see SIM related options on CRS125 device; docmarius - This problem required re-work of DHCP service functionality on bridge interface. Since it was more like a re-written functiona...

Jeanluck

The only issue I have with all of this is that mine worked perfectly with the CCR1036, only now that we have installed a CCR1072 has this become a problem. Latency spikes and packet loss whenever someone disconnects from PPPoE. (CPU is only hitting 50% so surely that should not happen?) We are remo...

Jeanluck

I agree, It has sense, I don't think that 5 nat entrys can be the problem. Then there is not configuration solution since connection tracking can not be removed (in my case), and only Mikotik can improve this problem, it I think. Sorry for being unclear. The issue is related to NAT in terms that if...

Jeanluck

I agree, It has sense, I don't think that 5 nat entrys can be the problem. Then there is not configuration solution since connection tracking can not be removed (in my case), and only Mikotik can improve this problem, it I think. As I say at my first, can be resolved with: "!) tile - improved o...

Jeanluck

Thanks for answer!
All my pppoe customer have public IP, although exists a NAT table in the same router with a few entrys (5 exactly) for other purposes.

Can be the nat table the trouble?
Is not too much cpu usage that one pppoe client going down use 30% of CPU of 72 core router?

Jeanluck

Every time that a pppoe-client go down, my ccr1072 has a cpu-peak (30%-40% CPU usage increase).
It will be solved with "!) tile - improved overall system performance and stability ("/system routerboard upgrade" required)" of 6.41.3?

Thanks

Jeanluck

I work in a small ISP with 2500 customers, and 1Gbps-2Gbps used by them. In the last five days I have no "False Positives". At first I had false positives by huge pps. But after changing "Active Flow Timeout" to 60 seconds on the CCR and "average_calculation_time=60" on...

Jeanluck

Hi nz_monkey,
I don't notice anything strange at the moment.
What are the real symptoms of the problem? No attacks detected? Incorrect information in fastnetmon_client?
How could I see the problem?

Jeanluck

Hi!, I can't download yours .json files for grafana (I'm using https://github.com/openbsod/grafana_dashboards but grafana show "no data points") Your post show that I no have permissions. Can you make it public or sendme by email? FastNetMon works fine with 6.38.3 with your configuration, ...

Jeanluck

Today, ALL my rb750r2 are die. No one survive.... more than 20 units....

Jeanluck

(Under CCR1072 and v6.38.3) I have a branch in a quetree, whose father is a vlan on an bonding interface. This branch has only one type of PacketMark, and I have verified that it is not able to move more than approximately 500Mb. I've tried several types of queue, default, sfq, red, but the result i...

Jeanluck

I just save .backup file, put another 1072, load configuration.... and cpu is better now I think that this 1072 was wrong. Try save .backup and load it. If continue with high cpu, change sfp modules (I changed sfps and 1072 at same time) And if you are using PCQ queues with more than 500Mb of traffi...

Jeanluck

ok!! great!!

Jeanluck

It is basic, telecom places works on 48v!
We are in July? Mikrotik, when it will be available?

Jeanluck

I will send it in a few days. Actually this core is working and to generate .rif file, sometimes cause a reboot of CCRs.
In the next night maintenance, we will create the file .rif

Jeanluck

Hi,
simple queue is created dinamically by pppoe-server, but upload-rate-limit not work.
I can see in dynamic pppoe interface the upload traffic, but it is not registered by the dynamic simple queue (upload) of this interface

Jeanluck

On CCR1072 + v6.38.3

I have pppoe server on a bridge, and when activate "Use IP Firewall For PPPoE" on bridge settings, upload limit not works. If I disable it, it works fine. I think that this option must be enabled.
Why fail?

Jeanluck

Hello, I have the same issue, anybody relsoved this problem?

Jeanluck

Please,
some one can tell me, posible reasons for high cpu of "networking" proccess?
I can't fix it

Jeanluck

Great!!!! It works perfectly, and only take 30 seconds VS 2 hours!!
Thank you!!

Jeanluck

Hi, I write a script for know how many ips has a single MAC. But every iteration take 3-4 seconds in my core. Why?? I have 3000 macs, and the script take 2 hours :log info "Start" #1 :foreach i in=[/ip arp find disabled=no] do={ :local MacNull "00:00:00:00:00:00" :local Mac "...

Jeanluck

After read several examples, I check that connection-limit count connections that match previus filters (and not use these match to stop and count all connections of client). Is basic.... sorry by the question...

Jeanluck

Hi,
when I use connectiom-limit with tcp/syn filter (as wiki recomend), count only tpc connections for given ip o subnet? or count tcp + udp + icmp connections?

Thanks

Jeanluck

Hi,
Do you find solution for your problem?
I have similar issue.

Regards

Jeanluck

Hi, I have a CCR-1072 with RouterOS 6.38.3, and use "hardware-queue-only" ininterfaces Starting at 800Mb the networking process sometimes goes up to 30% -40%, and it stays for several minutes. Then returns to normal values without reason, even with the same bandwidth consumption. I do not ...

Jeanluck

In "limit" wiki mikrotik is: "burst - initial number of packets or bits to match: this number gets recharged every 10ms so burst should be at least 1/100 of rate per second " (every 10ms, not every 1seg, so I don't understand well) Can be then? - Burst = packet limit every 10ms -...

Jeanluck

Thanks!

But, I check that 100,1 cause a lot of packets drop in the next drop rule, but 80,20 has no packet loss.
Then, if just "burst" packets are not checked, why 100,1 drop a lot, and 80,20 none? may be the same or similar

Jeanluck

It's not right... Sometimes the atacker use a bit only, but cause a 100% CPU

Please someone can explain me, what make exactly the burst parameter. I think that 400,5 is not right.

Jeanluck

Hi, I check that: add chain=SYN-Protect connection-state=new limit=400,5 protocol=tcp tcp-flags= syn with a single user with less than 200 total connetions, skip this rule, and the netxt drop rule, drop several connections. I check the point is "burst" parameter, 5 is too low, but in all e...

Jeanluck

8 of every 10 units failed in my network, and mikrotik don't fix it.... It is clear for me. Don't buy these model......

Jeanluck

After much research, I know which is the reason.
The difference between my failed configuration, and others, is that I do a reboot every 3 days (scheduled) . If reboot is not done, I think it does not fail.

I think there is a random problem at boot the units.

Jeanluck

I have a mountain of broken rb750r2. Today one more fail.
My dealer knows this problem. It is general.

Mikrotik, will be honest tell us the problem, to identify and to replace the affected units installed in our customers...

Jeanluck

In 6.34:
*) net - fix bridge firewall chain check (broken since 6.33.2);

But is not in 6.33.5 fix list.
Is not fixed in 6.33.5?

Jeanluck

I reboot all nights this Omnitiks, and are UPA model with 64Mb (32Mb Omnitik fail with 6.xx with several sxt clients).

I have observed, when exists a CUT in this Omnitik, another Omnitik 700 at meters (on another frequency) has no CUT, but has very low transfer rate in those same seconds.

Jeanluck

First, thank you very much for your answer. I honestly did not know the "spectral-history tool", so I will study it, may be that I see something. I used all the other tools, except that.... The CPU uses 40% -50%, and when there is a cut, low at 20%. When I'll study the "spectral histo...

Jeanluck

I reinstalled 260GS for avoid this. Mikrotik denies the problem so RB750r2 is not a option at this moment for me....

Jeanluck

Thanks for your response. I agree with you. In fact I do not need an equivalent. My problem is the 2-3 seconds cuts between Omnitik and all SXT clients every few minutes (seconds some times). I don't know how to solve the problem .... and I am desperate. I changed the hardware, I tried with all freq...

Jeanluck

I would like to replace my Omnitik for something equivalent in AC. That is, 360, double poralizacion.

But Mikrotik not have this version. There will be an AC Omnitik version soon?
Can you advise me some idea to a Omnitik equivalent for change it?

Thank's

Jeanluck

Hi, In two Omnitiks I have a wireless cuts (for 2-3 seconds) every few minutes in all SXT. I tried all frequencies, I changed the Omnitik, cable, RJ45 connectors SAI, updated to 6.32.3 the Omnitik and all its clients. In fact, one of the omnitik (already replaced yesterday) worked well until last we...

Jeanluck

Every week, 1-3 RB750r2 dies.... all IN THE SAME WAY.

There is obviously a serious problem. Mikrotik not recognize the problem and does not give a solution.
How many warnings are required for Mikrotik to accept the problem?
Please .... a solution!

Jeanluck

LACP/LAG is a common feature in switchs... but it is not hardware implemented now, and a poor 400Mhz CPU is not enough...

Is there some date for this??

Jeanluck

I used a passive poe + original 12v RB750r2 power adapter.
I test power adapter, and it's OK

Finally, the RJ45 cable was OK, the fault was in previus 260GS, that don't work well, and all ether ports of this switch was wrong with continues link on/link off, and in some way, kill the RB750r2

Jeanluck

Hi, I have news. This week has died two rb750r2. Neither has been recovered with the reset button. They definitely dead. But one of them we know why: First one: It was powered by poe in ether1. Power contacts in RJ45 POE works perfectly, but data contacts of POE was wrong. That is, the link: on/off/...

Jeanluck

thank you!
It has become very clear.

Jeanluck

I do not understand

,sorry
CRS has hw support for LACP? (yes/no is enough)

Jeanluck

I need hw support on CRS.... I need wire speed.
honestly, I am not clear if possible after read the posts....

CRS has hw support for LACP?

Jeanluck

ok!, thanks!

Jeanluck

Once installed, I only access to the router to: - Enable or disable ether ports (to add or delete customers access) - Set mac address in bridge filter to allow only router mac address of the customer and just this. There is no other uses. I use winbox to access. In a first step I use Chrome, and whe...

Jeanluck

Hi, I use /system package update, because this router was installed in a client. There is no more relevant information.... I just upgrade and reboot... and then it die with all leds off. One script that I cut in the previus script, was a reboot every four days (and I think that others routers die at...

Jeanluck

Thank you very much for answer. I am not able to access the router after the fault by IP address (mac telnet and mac winbox are always disabled in my configuration, but the LEDs are off when it fails, so I think that is impossible to access, I do not know...) To get access again, I push the back but...

Jeanluck

indeed, I believe that the fatal error occurs when attempting reboot

Jeanluck

Hi,
I need bonding LACP under CRS at wire speed (without CPU usage).
Is this posible actually? exists some web with examples?

I need a simple usage, for example:
input in ether1 and output in a ether2/ether3 bonding interface

Thanks

Jeanluck

I install a lot of RB750 without any problem. The rb750r2 with exactly the same configuration have a high RMA. All exactly have the same symptom: all LEDs off, and is only accessible by pressing the reset button.... The setup is simple: Bridge over all ports, IP over the bridge, and a MAC bridge fil...

Jeanluck

Upgrade 6.27 to 6.30.2 in hEX Lite = dead....
All leds off, and is not more accesible even with a power off/on

Jeanluck

Mikrotik? can you say somethin about this new improve in 6.30?

Jeanluck

Please, can someone say me more about this improve?
I'm starting to install AC radios.... and all of my clients are N now

Jeanluck

ok, the units are very old. So is a new feature of newer verions of routeros
Thanks!

Jeanluck

Mikrotik? someone know about this?

Jeanluck

I update several SXT from 6.11 to 6.29.1, all with 3.10 firmware
After reboot, the Current Firmware version was 3.22, but I never upgrade firmware version!

So, firmware version is automatically upgraded now??

Jeanluck

Thank you very much. I was very wrong ... If I understand correctly, then If I select in WLAN setttings: Frecuency "5580Mhz" and "20/40Mhz HT Above" then Central channel = 5570-5590 and extension channel=5590-5610 (20Mhz for central + 20Mhz for extension) Total range = "5570...

Jeanluck

I always thought one thing... and today thought that I'm wrong .... If I choose: A) 5600Mhz - 20 / 40MHz HT Above B) 5600Mhz - 20 / 40MHz HT Below Which frecuency really I'm using? 5600-5640 for A (above) and 5580-5620 for B (bellow)? or 5600-5640 in both cases and "Above" and "Bellow...

Jeanluck

ALL my clients with Cisco routers have problems.
With v5 everything works fine. With v6, Cisco routers are renewing IP constantly (seconds, or few minutes in the best case) with cuts in the conection in this operation.

Some idea?

Jeanluck

Thank you very much for your help
I think you are right and I'll replace all omnitiks by 64Mb version

Jeanluck

I check memory resurces when fail.

At start after reboot, Omnitik has 7-9Mb free, and when fail, has betewen 5-7Mb (with continue smalls oscilations)
But never less than 5Mb, so I supose that is not a memory resource problem.

Some idea?

Jeanluck

memory? I had not thought of that ....
I will check in the next failure (today ...)
Thanks!

Jeanluck

yes, these omnitik have 25 sxt or more (but SXT SA to, and not fail) My setup is the same that v5, nothing especial.... bridge betwen wlan1 and ether1 and a few firewall rules for input access. And in wireless zone, I use "only N" , only NV2, 40Mhz, disabled nstream and wps, cell radius 10...

Jeanluck

I recently changed several Omnitik by Omnitik UPA. For now the UPA have not failed, but is soon to ensure that work well.
The remaining normal Omnitiks, all fail (without exception with v6). I have two with v5.26 and works fine in this issue.

Jeanluck

All these omnitik are conected to SAIs, so never lost power (I'm not sure what is "blackout", I think that you are asking for power supply lost...)

Jeanluck

Yes, is 3.22, I always update routerboard firmware when upgrade RouterOS version

Jeanluck

yes, are in v6.27

Jeanluck

After a lot of months to verify this, now I'm sure that exists a problem. I have a lot of APs, and this bug affect only to Omnitiks (SXT SA, etc. works fine) Randomly, the clients registered in AP, fall again and again, and only a few of them are registered. The other try and try reconnect, but omni...

Jeanluck

In RouterOS Wiki: http://wiki.mikrotik.com/wiki/DoS_attack_protection SYN filtering /ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-state=new \ action=jump jump-target=SYN-Protect comment="SYN Flood protect" disabled=yes /ip firewall filter add chain=SYN-Protect...

Jeanluck

Hi,
I use all SFP modules in this switch, in a 20ºC-30ºC room.
The temperature in ALL modules is over 80ºC!, even 89ºC

Is normal??
In the CRS212-1G-10S-1S+IN, all SFP modules are too closer....

Jeanluck

I loss 30% of packets with CRS212, I thought that with 6.23 firmware in the CCR1016 connected to CRS212 the problem was solved, but not. Finally the CCR1016 is wrong.... with other CCR unit all works fine.
Even if you think the problem is in the CRS like me, maybe on your CCR

Jeanluck

Downgrade of CCR (not CRS) from 6.27 to 6.23 and now works fine....

Jeanluck

I check all links/duplex, and is correct. If I put a RB2011 before, so, RB2011 has the main input optic cable and after connect a RJ45 from RB2011 to CRS212 master-port (with SFP RJ45 module) then all works fine with no packet loss. Why if I put a RB2011 before and connect CRS2112 with RJ45 all work...

Jeanluck

Yes, I'm sure CRS212 is working as switch. Only sfp1 is master, and all others are slave of sfp1. No queues, no firewall or bridge rules, no high cpu, no routes I tried default config, with only these changes: - SFP1 is the master port - Auto negotiation in SFP module is OFF (set to 1gb) I have seen...

Jeanluck

CRS212 loses 25% of all RX traffic. The TX traffic works perfectly. I have a CCR-1016 and RB2011, and put in the middle a CRS212. Without the CRS212 everything works perfectly, no packet loss between CCR1016 and RB2011, but with CRS212, traffic is a mess, and RB2011 not recive a lot of packets. I tr...

Jeanluck

ok, now works

I reset to factory defaults and re-aply the configuration and now works fine.
Apparently the configuration is the same, but obviously there is a difference that I can not know.

Jeanluck

It is strange, because 260SP has a limit of 1A in each port, so the limit should be 1A for ALL ports in the wors case (not 500ma). Supposedly Port1-PoE In would accept only 1A. And Normis says in this post that is the same (PoE / jack). But PowerBox is outdoor.... maybe that it has a different desig...

Jeanluck

Hi, I'm trying to test a basic port isolation but fail. I read and apply: http://wiki.mikrotik.com/wiki/Manual:CRS_examples (port isolation example) I want use 3 ports: ether1-master as uplink (it can see all ports) sfp1: only can see ether1 (isolated port) sfp3: only can see ether1 (isolated port) ...

Jeanluck

So if I connect by passive PoE, the same energy source that powers the Jack, I can do exactly the same use?

Jeanluck

So I think too ... Mikrotik, stablish this please.

But in that case, if outdoor .... Is it logical?
If outdoor cable jack will not be long enough.
And if we use RJ45 and there are restrictions, this product is not valid for me....

Jeanluck

please, Mikrotik support, can you answer the question?

Jeanluck

The new PowerBox
http://routerboard.com/RB750P-PB

Jeanluck

If the input energy is in ether1 by poe, the limit remains at 2.2A for the four ether poe outs and 1A for each one? That is, the use of ether1 poe has capacity restrictions of energy with respect to the standard power adapter? is limited at 1A input? (and therefore the limite of 1A is for the four p...

Jeanluck

Not for now

Support? some comment?

Jeanluck

ok, I'm sure that this will happen next time again.
What do you need from me for detect this bug?

Jeanluck

Yesterday, It failed again on a Omnitik with 5.26 (and 3.0x Firmware) with this configuration (only changing AP mode and noise adaptation), try with a Omnitik please (with sxt fail to for me) /interface bridge add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes disabled=no forwar...

Jeanluck

Thank you very much for your interest. The problem does not exist with v.6.13 but yes with 6.24 and some earlier. Always update the same way: I upload the router-mipsbe-v6.xx.npk and ntp-6.xx-mipsbe.npk (only theses two files) The second file, I upload it to avoid problems of ntp synchronization Res...

Jeanluck

Update from 5.26 to 6.24 loses the wireless settings in Omnitik / SXT. AGAIN! like older v6.xx versions... Please ... do some minimal testing ....
I update version because I am bound by problems with nv2 ... maybe a good idea to freeze a version and not develop more new functions (only fix bugs)

Jeanluck

What value should be this parameter? always zero?
Or should be the value of each antenna (for example 16 for SXT, 7 for omnitik, etc.)

Thanks!

Jeanluck

I have the same problem with 6.22 (I use CAcert.org)

Jeanluck

Hi, I'm trying to use DHCP Relay, but it doesn't work. Config is simple (I try a lot of options....): Relay: /ip dhcp-relay add dhcp-server=10.0.1.1 disabled=no interface=bridge1 local-address=10.0.1.2 name=relay1 /ip address add address=10.0.1.2/24 interface=bridge1 network=10.0.1.0 Server (With IP...

Jeanluck

Upgrading Omnitik from 5.24 to 6.13 works fine.
But after that, upgrade from 6.13 to 6.22 delete all my wlan1 configuration, exactly in the same way that 5.26 to 6.14.....

Jeanluck

My RB2011 always says "No link", why?

I try a lot of SFP modules that works fine on 260GS and CCR-1016, but not in my two RB2011 units.
I try with 6.20 and 5.26, but module "is not present"

Some idea?

(RJ45 SFP Module works fine)

Jeanluck

My RB2011 always says "No link", why?

I try a lot of SFP modules that works fine on 260GS and CCR-1016, but not in my two RB2011 units.
I try with 6.20 and 5.26, but module "is not present"

Some idea?

(RJ45 SFP Module works fine)

Jeanluck

From http://wiki.mikrotik.com/wiki/Manual:Nv2 Nv2-qos=default In this mode outgoing frame at first is inspected by built-in QoS policy algorithm that selects queue based on packet type and size. If built-in rules do not match, queue is selected based on frame priority field, as in Nv2-qos=frame-prio...

Jeanluck

please, someone?

Jeanluck

thanks. I did not find exactly a response to my question in this MUM.
Someone knows the answer to my question? or where is a article that explain it?

Jeanluck

Can someone explain the advantage (or a link) of using dscp-from-high-bit-3 in 6.xx compared to standar use of "Set priority" with DSCP in 5.xx?
I have read the Wiki documentation but I can not find the advantage

Thanks

Jeanluck

1.- The wireless option disappears and the connection is lost with the remote antenna
2.- At local (ether1), after reboot the wireless option exists again, but the wlan interface is disabled and the SSID is equal to "system identity"

Jeanluck

Here is a Wireless Snooper capture. All 5660 frequency devices are my Omnitik + 27 SXT Clientes. The first device with the high consumption is the omnitik AP.
The screenshot was made by a SXT a little far, so the signal values are high. But the values are correct for the AP.

Jeanluck

I have several omnitiks, all works fine with the same configuration (NV2). There is one, and only one, that one-two days at week is not working properly, and the Tx rate is 2Mb-6Mb for hours. And without reason, come back to normal values. I changed 2 times OmniTIK, the UPS (offline to Interctive), ...

Jeanluck

Please,
Is not ip firewall mangle valid to mark calea traffic??

Jeanluck

I have a ip firewall calea rule that catch traffic. I want to mark this output traffic for priorize in queue tree, but I can't, counters are always 0 My mangle rule is: /ip firewall mangle add action=mark-packet chain=output comment=Calea disabled=no new-packet-mark=calea passthrough=no port=5555 pr...

Jeanluck

I have the same problem. I use: /ip firewall calea add action=sniff-pc chain=forward connection-bytes=0-1492 disabled=no dst-address=!10.0.0.0/24 packet-size=90-2048 protocol=tcp sniff-id=105 sniff-target=XXX.XXX.XXX.XXX sniff-target-port=5555 src-address=10.0.0.0/24 This send the first packet, but ...

Jeanluck

Honestly I did not use it finally, but this works fine in my tests...

Jeanluck

Thanks!

Jeanluck

please, some advice?

Jeanluck

In a typical environment PCQ, for example with 2Mb download and 1Mb upload for each user: If you also want that the bandwidth allocated for each user by PCQ, prioritize web pages over the rest of the traffic, as would be done? Is correct/posible to create childs queues in the PCQ main branch? (one f...

Jeanluck

thank you very much for your article. It has helped me a lot!

Jeanluck

ok, thank you very much.

I believe that too. I had doubts because placing OmniTIK close to SXT create interferences, and the final data rate from point A, to end clients, it was not good. The only solution I found is to separate as much as possible the antennas frequencies.

Jeanluck

I have a question, very general wireless infrastructure: If I want to send a wireless signal from point A to point B, and in B I want to put a OmniTIK, which is better: - (Point A) SXT Bridge ----> (Point B) SXT Bridge Station to receive + OmniTIK for AP - (Point A) SXT Bridge Station ---> (Point B)...

Jeanluck

thank you very much

Is there some other possible reason that should be considered?
(the frequency is only used by me)

Jeanluck

Hi,
I have an AP (OmniTIK) with 21 clients. From other SXT I can see the freq.usage% of this AP.
I do not understand why AP use 25% of freq. usage when no traffic is sended (less than 1Mb)
Why I have this value? is normal??

Thanks

Jeanluck

Hi, When I try to enter from Windows to SXT Lite with MAC Winbox access, I am not able (SXT has a vlan on ether1) . However I can enter from MAC Telnet to SXT from the core. I have checked Windows firewall, Tools-> Mac Server (all interfaces are added including vlan), Ip-> Neighbors is ok. What may ...

Jeanluck

Hello, I spend hours and hours trying this same configuration and hardware (I have an untagged connection and simply want to add a tagged vlan for voip) When I test with two bridges with two tagged vlan in the SXTs, everything works fine, the connection with the SXT and the connection to the custome...

Jeanluck

When CALEA save in pcap file a user http request, all downloaded http web is saved in the pcap file. Is it normal??
This is a lot of information! Should it only save the main petition and response header?

Thanks

Jeanluck

I have the same problem.
Date is always 1970 under WireShark when load a calea file, and my routerOS clock works fine.

RouterOS 5.26
Some idea??

Jeanluck

Thanks

, I did not know it

Jeanluck

I am required by law to store all of my users connections and http requests. Connections can be stored easily with the firewall syslog. But how I can store the http requests? Mikrotik proxy is not an option, gives many problems (unless there is a way to use exclusively for log). What options I have?...

Jeanluck

I try it, and works fine, but layer 7 http://l7-filter.sourceforge.net/layer7 ... orrent.pat works better in one rule (I use it in mangle)

Jeanluck

Export: /ip firewall nat add action=redirect chain=dstnat disabled=no dst-port=80 protocol=tcp to-ports=8080 Proxy config, I try everything.... access and direct rules, even set memory cache to zero. /ip proxy set always-from-cache=no cache-hit-dscp=2 cache-on-disk=no enabled=yes max-cache-size=1400...

Jeanluck

All my clients with Samsung Smart TV can't navigate.... the TV show a connection problem.
If I disable the web server, then all ok.

Even I try use direct access for the sites that samsung use for connection test, but does not work.
Some idea?

Thanks

Jeanluck

Netwatch could launch a lot of false falls... I recomend you a script for that with several pings for assure the real state of device if you receive too mails (like me...)

Jeanluck

I have several cores x86, that when power on, or restart, always make a check disk integrity, why??
How I can disable this permanent check?

Thanks

Jeanluck

/interface bridge filter add action=drop chain=input in-interface=!ether1 mac-protocol=ip add chain=forward in-interface=ether1 add chain=forward in-interface=!ether1 out-interface=ether1 add action=drop chain=forward in-interface=!ether1 /interface bridge port add bridge=bridge1 interface=ether1 ad...

Jeanluck

I can work with public ip or internal lan without problems, just changing the Dest. IP. May be a problem with firewalls?

Jeanluck

I have:
set 3 bsd-syslog=yes name=remote remote=10.0.0.3 remote-port=514 src-address=10.0.0.1 syslog-facility=daemon syslog-severity=auto target=remote

It works fine with Syslog Watcher 4

Jeanluck

Anyone can say me just if it is normal or not?
Thanks

Jeanluck

In a typical schema: One omnikti AP with several SXT conected. Omnitik with default forward disabled. When I activate the Firewall connection tracking in one SXT, then I can see sometimes connections with "U" state from "CloudPublicIP --> Client IP", but this client IP doesn't ex...

Jeanluck

I did it... but all requests are received from 10.0.0.1, not from user IP whe configured squid as parent proxy

In any case, is posible with RouterOS only?
Thanks

Jeanluck

Please, some advice?

Jeanluck

yes... I think you are right, thanks!

Jeanluck

Hi, I was reading your article, and I think that solves my problem casually. I have a problem at mark routes that you do correctly. I have a doubt with your script when you use: new-routing-mark = to_ISP1 new-routing-mark = to_ISP2 Where is "to_ISP1" and "to_ISP2" defined and use...

Jeanluck

Hi, I need to store a log of the http requests from users. WebProxy + Mikrotik Log works great. The problem is that WebProxy have trouble navigating with Samsung SmartTV and others problems, and I can not longer use it. Is there some way to register the http requests without WebProxy? Or is there so...

Jeanluck

Support say that works fine on Windows XP (fails in Windows 7)

Jeanluck

When I try install routeros 6.2 to x86 machine, the error "Could not stat key file!" is showed.
Is not posible to try RouterOS 6.x without a license key file as the previous 5.x??

Jeanluck

Thanks The problem is just that the 'set' command destroy the variable completely, and the router becomes unstable when latest value of variable is not "0.0.0.0". So, this code don't solve the issue :( I reported the problem to Mikrotik. My RB2011 probably is wrong ... becaus it is no sens...

Jeanluck

:log info "Start" :global gip1 :set gip1 "0.0.0.0" :log info "End" if the variable has a previous value, for example, 10.0.0.5, then the global variable gip1 is destroyed, it can not be displayed in the environment tab under winbox, or printed from the telnet console (e...

Jeanluck

I have the same problem.
Do you fix it??

Jeanluck

Yes, I use "bridge1" and "Global-out" as main parents in my queue tree. In global-out childs, packets marked in "mangle forward chain" are managed. What is the difference in 6.0? if you can write me some link whith this information (or a briefly explained) I would be gr...

Jeanluck

I have a normal configuration in my RouterOS x86 Server (DHCP Server, firewall rules, mangle and queue tree basically)
Is sufficient with update to 6.0 normally? settings should work? or is necessary to make any manual changes?

Thanks

Jeanluck

I know this, but if "Advanced / Connection rate" counts download+upload, if I have 30000 for download and 15000 for upload in the currently connection and I want to mark traffic only if upload rate is not higher than 20000, if I set "Advanced/Connection rate" field to 20000 then ...

Jeanluck

Hi,
I need to mark packets of a connection according to the upload connection rate.
In "Advanced / Connection rate" takes into account the upload+download rate.
Is there any way under RouterOS to distinguish by upload or download rate?

Thanks

Jeanluck

I need to mark the traffic according to bandwidth consumption, can anyone tell me the difference to know which one to use?
Thanks

Jeanluck

Hi, I have read and fully understand the use of "Connection Rate". However, the documentation of "Extra / Limit" is not enough clear, and I can not find a difference between them. What is the practical difference between "Extra/Limit" and "Advanced/Connecion Rate&q...

Jeanluck

With 250GS, port lock works fine:
Check on port lock + static mac address = traffic allowed only for this macs

with 260GS/1.8 the same configuration don't works, and all macs are allowed.
change log of 1.9 don't say nothig about this

Soma advice??

Jeanluck

Indeed, I have "/system led" empty. I do not know why, this with the default settings, I never touch that.
thank you very much

Jeanluck

Yes, 5.25 and 3.07.

I honestly do not see /system led, because I had never needed to touch ... I'll take a look
Thanks

Jeanluck

yes, they are in station mode, like others working SXT (not lite). Only fail in SXT Lite

Jeanluck

Yes, I try with 3 SXT 5nD r2, and nothing....
Router OS 5.24 and 5.25

Yes, they are in station bridged mode.
I've been installing SXT for months, and I have only this problem with the SXT Lite (configuration is identical to that of the other antennas)

Jeanluck

The SXT lite is properly connected and with good signal but LEDs are off.
Is a limitation of this model?
The other SXT model leds, works fine.

Thanks

Jeanluck

First of all, thank you very much for the long answer and time spent. It has been very useful. Concretely my setup: - I have two wan of 10mb download and 1mb upload - I want to share it to several users so that they have a maximum of 5Mb download and 500kb upload, so I use PCQ to share the existing ...

Jeanluck

Then you use the same mark for upload tree?, or you are not controling upload?

thank you very much for your help

Search found 280 matches