MikroTik

adyb76

Hi, I've been trying to figure this out for a few hours today. I have an APC UPS that communicates well with RB1100AHx2, if I replace the routerboard with a CCR I can not get any communications with the UPS. I have disabled the serial terminal, set specific serial baud rates etc, but just can not ge...

adyb76

Hi, Just updated our core edge router this morning and I've noticed that graphing does not work correctly when data flow exceeds somewhere around 2Gbit/s. I'll find a more exact figure later today when we pass 2gbit/s Here's our graphs post update: daily.gif weekly.gif There has been no downtime - o...

adyb76

Hi, I've always specified IP Pools in CIDR notation in our routers, not really thinking about the broadcast and network addresses. We're running low on IP addresses and looking through our radius logs it's apparent that RouterOS doesn't allocate either the broadcast or network addresses to PPPoE cli...

adyb76

You need the mipsbe packages mipsl are only for RB1xx, RB5xx, Crossroads routerboards.

adyb76

Post the rest of your configuration - what you have looks ok to me

adyb76

Hi, You need to use firewall mangle rules to identify the traffic that you want to apply QoS to. Create an address list for the hosts you want to limit /IP firewall address-list add address=192.168.1.0/24 list=limit Then create the firewall rules to mark the connections and use the connection mark t...

adyb76

Hi,
I have noticed that ROS version later that 6.31 that Radiusmanager, whilst logging on via the API, does not change the simple queues on the fly anymore.
I was unable to verify 6.33 as it broke our PPPoE and I had to revert to the version I find most stable which is 6.7

Ade

adyb76

Hi,
We are again experiencing FCS errors when using Ubiquiti AirFibre 24 point to point links.
This does not occur when we are using RoS 6.7

We experienced this previously and the engineers at Mikrotik fixed the issue.

Ade

adyb76

Seems to me there are too many source nat masquerade rules.
Do you really need/want to masaquerade everything going through the router which is what rule 0 is doing, as there are no filters on that rule at all.
Do the xDSL modems have a route entry back into your network?

adyb76

Has something changed within OSPF - we've had major issues upgrading and all OSPF related. The upgraded router did not communicate with the lower version router, all our interfaces are nbma.

Had to dive back to 6.7 which is the version I find most stable

adyb76

Rather than just limiting with a pcq I would use firewall rules to limit what services your customers can actually use (ie limit to just web browsing and email - just a suggestion) - and then put a pcq limit in place, but it may be just your upload being saturated that is causing the slowdown...

adyb76

Hi, RouterOS is an operating system in its own right. You can run in on a virtualised PC, but not on top of an existing OS. When I've done this in the past I've just set up the vitrual system, with no OS, mounted the ISO and booted the PC from the mounted ISO file and it's installed itself in a bree...

adyb76

My guess is yes - I bet you've still for the DHCP Client enabled on the WAN interface. Don't forget though to program a default route and DNS servers too, as they will most probably be given out by your DHCP server. Post the config if you want a response that's not just a guess.

adyb76

Are you marking the packets that you want to leave via this other internet connection? If not then the routing mark attribute on the default route will mean that route will not pass any traffic.

adyb76

Post your (security edited) config please....
Open a new terminal and type export file=export
Go to the files menu and drag that file to your desktop, it is an ASCII file so can be edited in Notepad. Remove any information you don't want to disclose and post the remainder on here....

adyb76

Sure, use simple queues. Create a simple queue and specify the limits you need, put the target as the IP address of the device you want to limit. That should sort it our for you.

adyb76

My bad, it should be prerouting chain

adyb76

This can be done easily, but it not user selectable. The only way you can make is a user choice is by using different subnets on your LAN and the user can then chose which subnet their device is a member of. Once you have sorted this out you need: default route specifying a routing mark for each gat...

adyb76

You need to use IP firewall mangle rule to add a route mark to packets from the IP you want to leave via the different gateway and add a default rule specifying the gateway and the packet mark. I don't have a router board to hand right now, but the script it along these lines: /ip firewall mangle ad...

adyb76

Do you have your own anechoic chamber or are you using the facilities of a third party test lab?

adyb76

Hi, We have quite a few AF24 links that are terminated directly into a CCR1036. Using routeros 6.7 there are no FCS errors logged, using 6.25 there are. If we use a different routerboard in place of the CCR running the 6.25 firmware there are no FCS errors logged. I have reported this issue previous...

adyb76

Hi, I recently reinstalled mrtg onto a new server and set it up to monitor the traffic for our CCR edge router running ros 6.19. I used the cfgmaker to create the config file, and having reviewed it I am happy that it is monitoring the correct interfaces. The problem is that there is a magnitude of ...

adyb76

Hi,

We have recently upgraded to 6.19 from 6.7 on couldcore router with ubiquiti AF24 and now have FCS errors on interfaces that have an AF24 connected to them.
We have this issue previously and you guys managed to fix it but it's reared its ugly head again....

Thanks,

Adyb

adyb76

set up ip firewall rules so that all https traffic is routed down one connection only. /ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=to-https-wan passthrough=yes protocol=tcp dst-port=443 /ip route add dst-address=<IP OF ROUTER> routing-mark=to-https-wan That should s...

adyb76

My suggestion would be to use the web proxy, set up deny rules for *.facebook.com etc and use scheduler to enable/disable the proxy at the times you deny/allow access. Either configure each device to use the proxy, or use a firewall rule to redirect http traffic. Either that or setup dns entries for...

adyb76

Hi,

We use dmasoftlabs Radius Manager.
Don't use it to hand out your IP addresses though, it's not pretty.

Adyb

adyb76

Hi nbeacham,

We're in a similar position to you so here's hoping we get some worth wile information...

Adyb

adyb76

Installed on our CCR1036 which is our QoS, with many mangle rules and a comprehensive queue tree, passing over 800mbit/s at peak times. All went ok, not sure about performance improvements yet - tonight will be the best time to check this out.

Adyb

adyb76

Hi try this:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=5900 action=dst-nat to-address=192.168.55.150

Ade

adyb76

Hi, I have a small ISP network running OSPF as iGP. Our IP addresses for CPE are assigned from central Radius server and distributed via OSPF... We have 3 links in our network that are different speeds and I want to use TE to load balance these better, as we are ECMP at the moment. I have the TE tun...

adyb76

RB450, RB2011UiAS-2HnD, RB1100AHX2, CCR1036-12G-4S all updated ok

Running PPPoE, OSPF, MPLS and TE

Ade

adyb76

When will the CCR work properly with Queues, by which I mean spreading the load effectively and efficiently across all the cores?

Thanks,
Ade

adyb76

Upgraded CCR1036 which is used solely for QoS and reverted to 6.10 this morning.

Routerboard locked up several times, had to MAC telnet onto device to issue reboot command.

adyb76

No - snmp has never been enabled on this particular device.

So it's not related to snmp. The port flapping does come and go - so far it's been 3 days since the last instance.

Ade

adyb76

I'd blame the cable modem - it's probably assigning an IP address whilst it connects properly to the ISP at which point the ISP should assign an IP address via dhcp or pppoe direct to your mikrotik - assuming the cable modem is a layer 2 bridge when it's fully booted and connected up.

adyb76

Same problem here...running ROS6.4 and Firmware 3.09 with both copper and fibre interfaces.

adyb76

Hi, I noticed some strange behaviour on one of our ccr last night. The log entries are: [admin@queue] > /log print sep/18 07:39:59 interface,info ether12 link down sep/18 07:40:00 interface,info sfp2 link up (speed 1000M, full duplex) sep/18 07:40:00 interface,info sfp1 link up (speed 1000M, full du...

adyb76

I've given up emailing and posting on his facebook group. He doesn't even give the courtesy of a reply. Wonder in this script has now become abandonware?

adyb76

Hi, We have cloud core routers sat at either end of a high capacity wireless link. The ethernet ports are negotiated at full 1gbit/s the wireless link itself is 366 mbit/s. We can attain 300 mbit in each direction if we speed test. Is it recommended to place a simple queue with the interface specifi...

adyb76

Hi, At one of our sites we have 2 1100AHx2 running as we need the extra ports and rather than go back to L2 with a switch I put another RB in there and set up a /30 between them both. Performance, however, has taken a hit. If I bandwidth test from 1 RB to the other UDP I get close to 1Gbit/s however...

adyb76

Hi, We have a couple of POPs that need additional access points installing - we have reached the number of interfaces on the 1100AHx2. I have placed a switch in line and this is working as expected. We are running OSPF and PPPoE so I'd rather install a second routerboard and migrate from the switch ...

adyb76

Also, how many packets are you handling with this router? Are any getting dropped? What is the CPU usage while it is passing data? Can you provide a diagram of your setup so I can help more?

Cheers,
Ade

adyb76

Have you got OSPF running in nbma mode - it should be over a wireless link due to multicast issues over wifi. Also, is the wireless link a true WDS bridge? Again it should be.

Ade

adyb76

Please paste the script for more information.

Sorry can't do that. Nice try though!!!

Ade

adyb76

Sounds like an ethernet negotiation issue - does the negotiated speed and duplex for the outbound interface make sense?

adyb76

Hi, I purchased Butch's QOS script a couple of months ago and have tried to implement it on a X86 - turns out I've been using a server with a dodgy ethernet controller. It's been swapped onto Mikrotik's 36 core CCR running 6.0rc11 - due to the lack of global-in and out I've substituted these with th...

adyb76

Hi, We have a routed network with about 700 customers. We are looking to implement a PPPoE server, which would ideally be located at our central pop. I realise that the PPPoE packets will not cross our routers - we are currently replacing them all with routerboard devices - is the way to go to imple...

Search found 47 matches