Community discussions

Search found 26 matches

by XTX
Mon Jul 29, 2019 1:14 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33510

Re: v6.45.2 [stable] is released!

Did you check your firewalls allow inbound GRE? If you check the notes there was a fix for a bug that allowed it when it shouldn't've been allowed. ...and while fixing that one, another one has been introduced which incorrectly labels the initial packet of a GRE connection with connection-state=inv...
by XTX
Mon Jul 29, 2019 8:51 am
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 33510

Re: v6.45.2 [stable] is released!

at 6.45.1, gre tunnels stopped working. Redid all 15 routers on ip tunnels. 3 weeks after the release of 6.45.2, the ip tunnels stopped working .... Exactly the same here ! Upgraded from 6.42.7 to 6.45.2 on a CCR1036 and all the GRE tunnels stopped working. Ok I know that the Mikrotik guys can't te...
by XTX
Thu Jan 04, 2018 8:51 am
Forum: General
Topic: CCR 1072 IPsec speed issue [SOLVED] [SOLVED]
Replies: 7
Views: 972

Re: CCR 1072 IPsec speed issue [SOLVED]

Sounds like fragmentation issue to me. Did you try to set change MSS rules for TCP traffic or send packets from iperf with lower MTU? Yeah could be, but we set the clamp mss, also tried with 1400, 1360, 1300...no difference. Each ccr was also an entry point for l2tp/ipsec road warrior scenario...bu...
by XTX
Wed Jan 03, 2018 4:45 pm
Forum: General
Topic: CCR 1072 IPsec speed issue [SOLVED] [SOLVED]
Replies: 7
Views: 972

Re: CCR 1072 IPsec speed issue [SOLVED]

Hi

Same problem here...
2x CCR1036-8G-2S+ each connected 10Gb/s to the net...max speed over ipsec tunnel around 160Mb/s...SHA1/AES-CBC-128, this speed was also confirmed with iperf3 run on workstations on each side...the unencrypted routed speed is 9.8 Gb/s with ease...
by XTX
Mon Jul 17, 2017 9:36 am
Forum: General
Topic: L2TP is disconnect after every 8 hours
Replies: 47
Views: 6707

Re: L2TP is disconnect after every 8 hours

Hi
I have exactly the same problem...all my L2TP/IPSEC session get disconnected after exactly 8 hours

Did someone manage to find a solution to this ?
by XTX
Thu Feb 25, 2016 10:07 pm
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397686

Re: 3.5 GIG - Public-Mikrotik-Bandwidth-Test-Server

FYI - Although I am running my ROS in a VMware ESXi environment, I am running two Intel Xeon 10-core E5-2690 3-GHz CPUs (20-meg CPU cache) (Hyper-Threading disabled), of which I have allocated 2 CPUs to the virtual ROS. I was not aware that btest only used a single core. I might drop it down to a s...
by XTX
Thu Feb 25, 2016 9:39 pm
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397686

Re: 3.5 GIG - Public-Mikrotik-Bandwidth-Test-Server

Hi Tom Just tried it ! 2G down and 1.3G up :) Not bad since there is the Atlantic ocean between us :) And for the 1.3G up...I'm testing from a CCR 1036-8G-2S+, and at that speed one core hits 100% and that's it :) LOL - that actually made a needle like spike in my Cacti bandwidth graphs If you don'...
by XTX
Thu Feb 25, 2016 2:37 pm
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397686

Re: 3.5 GIG - Public-Mikrotik-Bandwidth-Test-Server

Hi Tom

Just tried it !

2G down and 1.3G up :)

Not bad since there is the Atlantic ocean between us :)

And for the 1.3G up...I'm testing from a CCR 1036-8G-2S+, and at that speed one core hits 100% and that's it :)
by XTX
Tue Feb 23, 2016 2:08 pm
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397686

Re: Public-Mikrotik-Bandwidth-Test-Server

Hi Tom

Works like a charm :)

1.2G up, 1.2G down
by XTX
Mon Dec 21, 2015 11:48 am
Forum: RouterBOARD hardware
Topic: CCR1036-8G-2S+ SFP Problems
Replies: 48
Views: 37371

Re: CCR1036-8G-2S+ SFP Problems

The solution from krisjanis worked for me...3rd post from the top...
by XTX
Wed Jul 15, 2015 5:59 pm
Forum: General
Topic: Cloud Core IPSEC performance
Replies: 15
Views: 6680

Re: Cloud Core IPSEC performance

Two reasons for this: * fragmented packets * out of order packets You can see in ipsec stats a lot of state-sequence-errors, which means that packets arrive out of order and get dropped by ipsec driver. If it is UDP traffic make sure that you send packets with size that do fit without fragmentation...
by XTX
Wed Aug 27, 2014 6:55 pm
Forum: RouterBOARD hardware
Topic: New - RB951G-2HnD
Replies: 68
Views: 99337

Re: New - RB951G-2HnD

i have -48db with android phone through 2 walls. i recive signals a few killometers away ... yes, receive. android can't talk back, because it doesn't have such big antennas. it can "hear", but AP will not "hear" what it "says". This will result in the Android having a signal, but internet will not...
by XTX
Sat Feb 22, 2014 8:21 am
Forum: General
Topic: MUM Europe 2014 - Italy, Venice, February 20-21
Replies: 146
Views: 58709

Re: MUM Europe 2014 - Italy, Venice, February 20-21


Thanks :)

ccr 1072...smartcard...what will it be used for? console (physical router access) authentication ?

Storing certificates.

Makes sense...
by XTX
Fri Feb 21, 2014 8:27 pm
Forum: General
Topic: MUM Europe 2014 - Italy, Venice, February 20-21
Replies: 146
Views: 58709

Re: MUM Europe 2014 - Italy, Venice, February 20-21


Thanks :)

ccr 1072...smartcard...what will it be used for? console (physical router access) authentication ?
by XTX
Thu Feb 20, 2014 7:31 pm
Forum: General
Topic: MUM Europe 2014 - Italy, Venice, February 20-21
Replies: 146
Views: 58709

Re: MUM Europe 2014 - Italy, Venice, February 20-21

Hey

Where is the PDF with those nice slides and the imaginary release dates ? :)
by XTX
Tue Feb 04, 2014 2:02 pm
Forum: RouterBOARD hardware
Topic: CLOUD CORE ROUTER
Replies: 1374
Views: 1012536

Re: CLOUD CORE ROUTER

Hi

6.7 -> 6.9 DDM info is gone in SFP interface (only wavelenght is present, temperature, tx rx power , bias, voltage all gone) CCR 1036-8G-2S, finisar sfp

All the DDM info was present in 6.7...

Did somebody else observe this "feature" ?
by XTX
Mon Feb 03, 2014 5:49 pm
Forum: General
Topic: 6.9 released!
Replies: 223
Views: 79011

Re: 6.9 released!

Hi

6.7 -> 6.9 DDM info is gone in SFP interface (only wavelenght is present, temperature, tx rx power , bias, voltage all gone) CCR 1036-8G-2S, finisar sfp

All the DDM info was present in 6.7...
by XTX
Mon Sep 30, 2013 8:40 pm
Forum: General
Topic: un-idntified traffic and CPU at 100% RB450G
Replies: 9
Views: 1413

Re: un-idntified traffic and CPU at 100% RB450G

Hi

Try what "rufee" suggested...
by XTX
Mon Sep 30, 2013 5:53 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24193

Re: CCR 1009

Thank you very much for the info, Normis ! :)
by XTX
Fri Sep 27, 2013 4:52 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24193

Re: CCR 1009

hmmm...while it's true that 1009 has a "smaller" CPU...it has one SFP and one SFP+ port (and thus 10G option)

So that's why I'm asking where it will be positioned price-wise

PS: and don't get me started with your car comparison... :)
by XTX
Fri Sep 27, 2013 3:40 pm
Forum: RouterBOARD hardware
Topic: CCR 1009
Replies: 102
Views: 24193

CCR 1009

Hi If it's not a highly classified data... :) Could someone from MT give a little more info on the CCR 1009 ? What version of the Tile GX 8009 is used ? 10C, 10CE, 12C, 12 CE ? How much RAM will be onboard ? When approximately will it be launched ? (in Q's is fine :) Will it be cheaper or more expen...
by XTX
Tue Sep 24, 2013 5:05 pm
Forum: General
Topic: MUM Live video from St. Louis starting now!
Replies: 52
Views: 17713

Re: MUM Live video from St. Louis starting now!

Hi Normis

Can you elaborate a bit more on the CCR 1009 ?

Scheduled release date ? Price range...more or less than a CCR1016 ?

Some specs sheet maybe ? :)

THX
by XTX
Wed Aug 15, 2012 3:31 pm
Forum: General
Topic: IPSec Policy Generation Issue w/Windows Client
Replies: 13
Views: 5346

Re: IPSec Policy Generation Issue w/Windows Client

Hi

I'm having the same issue. Did anyone solve this problem ? Would appreciate some help...
by XTX
Wed Jun 08, 2011 8:50 pm
Forum: Beginner Basics
Topic: EOIP over IPSEC TWO RB750
Replies: 21
Views: 12437

Re: EOIP over IPSEC TWO RB750

OK...I'm dying a slow and painfull death here :D I have managed to establish an eoip connection between the 2 routers and it works perfect...I have also managed to establish a ipsec connection between them...that works also. But i just can't merge those two together My procedure: First I create an e...
by XTX
Sat Jun 04, 2011 10:35 pm
Forum: Beginner Basics
Topic: EOIP over IPSEC TWO RB750
Replies: 21
Views: 12437

EOIP over IPSEC TWO RB750

Hi I have a RB750 on location A(wanip:x.y.v.z, lanip 192.168.0.1/24-dhcp) that works like a charm. Now I want to install another 750 at location B (wanip:a.b.c.d). But I want that all the devices that are connected to the 750 on the B location, access the internet over the 750 on location A and that...