MikroTik

barkas

It's probably useless to argue this. If you can't see it yourself, I can't make you.

Obviously any use of login credentials regardless of the network topology it is used in must always be encrypted.

barkas

You could also try to run l2vpn over mpls through that link.

barkas

Have you drunk their koolaid?

barkas

For some reason mikrotik routers sometimes go into a boot loop after an update. I wish they'd fix that.

barkas

For non professionals I highly recommend ubiquiti networks, perhaps unifi.

Mikrotik really is more for the network engineer.

barkas

TP-Link T1700G-28TQ?
I'm not interested in 1G ports. Already have couple of such switches.
I want to upgrade my network to 10G.

I was thinking about buying CRS317-1G-16S+RM but idea of having
so many copper SFP+ modules makes me cringe.

As far as I have seen so far, there are no t-sfp+ modules.

barkas

Mikrotik recommended SSTP when I asked about this at MUM. I haven't played with it yet, but this appears to be more profile-driven than just a basic IPIP6 tunnel would be. If you're using Mikrotik as the SSTP server, then this will not help much because it won't be able to perform DS-Lite NAT64 (no...

barkas

In redundant setups, statefulness might not be wanted since state tables are not replicated.
Also, performance.

barkas

1GB for just one BGP feed that's a lot.
Just wait till you see some of the L3VPN/L2VPN NLRI on a service provider on a route reflector. It's far more than that.....

Full table doesn't fit in 1GB anymore.

barkas

Maybe use l2tp/ipsec?
Then you can assign configurations based on ppp profiles.

barkas

Maybe use l2tp/ipsec?
Then you can assign configurations based on ppp profiles.

barkas

Tacacs is the proper solution for network device user management.

I would very much like to have that, too.

barkas

Public addresses doesn't necessarily mean reachable from the Internet and is as such not an evil in itself.

barkas

Trunking should work, but mikrotik switches are a pain to configure.
Which brings me to question 2: no, because the switches work differently from the routers, to be precise, switched ports work differently.

Another thing, are you sure about the way your qos doesn't work?

barkas

barkas

Prefix translation please.

barkas

If you answer that you know whose ip that was, best be absolutely sure.

So, you can not be sure, since you have no logs and the lease expired at least once.

barkas

Everybody uses 2048 bit rsa keys at the moment.

barkas

All about risk management. Four letters... VRRP. Sent from my SM-G920I using Tapatalk VRRP is great for edge routers, but not for core routers. MT really needs to implement a different type of clustering that supports state synchronization for seamless failover without dropping connections. Then,...

barkas

So you're looking for a 24 port router? Good luck with that.

Better buy a solid 24 port switch (like tp-link Jetstream or cisco sg300) and combine that with a router.

barkas

According to Normis, you have to use the other package download with individual packages and install those instead.

barkas

You have your views Chaos, and I respect that, but you are being a bit naive to think that your every move is not already being spied on. As it happens the STB's are the next big target for the piracy police so I dont think it is something we will have worry about much longer. The only thing you ...

barkas

Your question has little meaning without more detail. What kind of environment is this? What is the purpose...are you trying to tunnel your internal network to an IPV6 broker because your ISP only provides IPv4 at this time? Or just trying to set up a VPN server to listen on an IPv6 address? No...

barkas

Good network design with subnets is the answer here.

barkas

bajodel - This is different fix for other issue.
I got it, so I must wait..
Please.. answer.. when do you plan to make partitions work on RB3011/ARM ?

Please

barkas

Please make winbox logins with radius as a backend not CHAP-only. CHAP seems like a good idea at first, until you have to severely compromise password security on the radius server by storing all passwords in cleartext. Also, usage of two factor authentication is not possible with CHAP. So please en...

barkas

If there is a problem with this packet, I can't see it.

I suggest disabling hw checksums on the capturing system. Our just check if the content of the packet is OK.

barkas

Can't really go wrong with bind.

barkas

I don't buy mikrotik because I want to be able to do less stuff with the device. It's just a silly decision to limit the hardware in that way.

barkas

They do use the hardware features of the socs though, unlike mikrotik.

So faster, but not as capable. Otoh if you need a faster mikrotik, there are options.

barkas

but dat "accelerations" severely compromise security. its improve things bout 5x-12x times on most modern (AES-NI aware) x86 chips but at that cost ... think about that: there is no "free cheese/beer" in real world and "improvements" that let CPU do things 10x faster(w...

barkas

Most of those using bcp should be able to transport v6.

barkas

Netinstall loses the configuration. Hence you being able to login afterwards.

barkas

Latest firmware.

Partitioning doesn't work.
It also doesn't hold time, even with active ntp it loses sync after a while.

barkas

Rb3011 if you are brave

.

barkas

That is extreme range for 10G mm.

barkas

If you have multiple subnets in your tunnel, the policy has to be set to encrypt=unique, I found out yesterday.

barkas

Nat is not supposed to protect anything.

barkas

There is mikrotik support in rancid, BTW.

barkas

Note that there are no 10ge copper sfps.

barkas

I haven't had that problem, you should take it up with mikrotik support.

barkas

User accounts for example, on purpose. Please elaborate.

barkas

metaROUTER is another thing that is very questionable on SOHO routers. Is it? Mikrotik Routers are the Swiss army knives of networking, so little flash seriously cramps my style. I will not buy any mikrotik device with 16mb flash, either privately or professionally. Because of that at work we are b...

barkas

Good point, I can't remember. I shall have to go over that again. The RFC I used is 4890. EDIT: I don't think your ICMPv6 codes are quite right (as were mine, btw, I think I mixed it up with ICMPv4). So here's the new version (I have no IPv6 atm, so I default drop on forward): /ipv6 firewall address...

barkas

There is an RFC for that out there, BTW. Because if you block some of that stuff, v6 will stop working at all. Here's my working ruleset for v6, it pretty much implements said rfc: /ipv6 firewall address-list add address=fe80::/64 list=link-local /ipv6 firewall filter add chain=establishedaccept con...

barkas

I don't think you can do anything against attackers with physical access to the device.

barkas

Hello, We have a FritzBox router (from T-Home) in out firm that uses a DSL line to connect through PPPoE. Now behind it we use a MiktoTik CRS125-24G-1S-2HnD-IN that gets a connection through LAN from the First router. Our servers aren't functioning properly in terms of port-forwarding. Is it possib...

barkas

i think It's an administrator decision which servers he trust and how he want them to be specified - by name or by ip. Sure, but the NTP server does not support selecting servers by name and neither does it support resolving DNS on every poll. That is because an NTP server tries to lock the clock a...

barkas

With the real ntp package there are no dns names at all.

barkas

I couldn't get any routing protocol to work reliably between ubnt and MikroTik. I blame ubnt.

barkas

I don't think you really want to do authentication via radius over the Internet.

barkas

Yes please.

barkas

Mikrotik switch vlan CONFIG is a major pain to use.
I recommend tp-link Jetstream series.

barkas

Yes you are right. I stated it in a wrong way. I meant that in our network there are multiple vlans which divide clients by region (area), regardless that the former engineer didnt keep them in tact. Obviously these vlans have various ip ranges assigned to them, so on layer 3 firewall policies may ...

barkas

All of my ERL3's have suffered from faulty onboard USB storage.
Wait a second... you're saying whole OS is on the USB stick?!

It's ridiculous and unreliable

Yes and yes.

barkas

My experience...it depends on your understanding of "beating"..... I have just, finally, thanks my God, replaced an ERLITE-3 by an RB/3011 on a 300/300 Mbits PPOE/Nated fiber connection with IPTV and IP phone...unbeliable: back to have a router in a corner of my house acting as a router a...

barkas

I agree partially. But my problem is the lack of documentation which leads to such problems. I cant find a way to overcome all these issues so far. I got problems like this and i cannot solve them

You can solve that only by dumping all configs and understanding your network.

barkas

My advice is to use Mikrotik routers, and buy switches somewhere else.

barkas

There is no documentation at all. Not even the private ip ranges that are used. This makes it difficult in order to make a full customers list with ip and etc. The first thing i am planning to do is to change all the clients into pppoe clients on the bras server. And when its done i want to impleme...

barkas

Get an expert.
Recover that password.
Understand the access products.
Then think about it again.

Edit: because from what you wrote, that seems like a sensible setup to me (doing similar stuff for a major European carrier).

barkas

There is no hardware loop prevention in CRS.

barkas

I have no doubt that the erl is faster - within its operational parameters.

It's a limited, but very fast device. It's a good device in its class.

That said, even if the benchmarks by Mikrotik are optimistic, I think it's faster than ubnt claims in that PDF.

barkas

we have something better than hardware NAT, it is called Fasttrack.

Now that's just marketing bs.

Please define what better means for you in this case.

barkas

So if I want full ntp, I'm out of luck?

barkas

Already possible for about a year now: /system ntp client set server-dns-names="server1.example.net,server2.example.net" It's just missing from WinBox. That property doesn't exist on my RB850 with 6.32.3. I only have primary-ntp and secondary-ntp. /system ntp client> set Change properties...

barkas

It still ends up as Ips in the configuration.

barkas

You could, but I can not recommend Mikrotik switches.
Better use the router and a separate switch. Tp-link builds nice cheap ones (the Jetstream series) .

barkas

Yes please.

barkas

Devices have a tendency to hang on to weak signals so that doesn't work too well usually.

802.11r please.

barkas

I need to be able to use the partition feature, 16mb flash is useless to me.
Please document flash sizes.

barkas

It's pretty much standard Linux firewalling.

barkas

Thanks for the pointers. One more question if you don't mind, is there any reason to put public transit inside a VRF? Vrf is always an easy way to control who speaks to whom, which may be easier than using a lot of firewall rules to shield your router loopbacks from customers. But then, a lot of ne...

barkas

http://routerboard.com/RB951G-2HnD You're welcome. And FYI Mikrotik routers are primarily for enterprise users. Yeah, true enterprise. That's why we see 1000 bugs every new version. I mean in every version atleast 1 major stuff is broken. Come on.... Mikrotik is a cheap alternative to a true enterp...

barkas

Not working on my 450g, it restarts every few minutes.
On second router 2011 works fine.

Same here, rebooting on 450g, stable on 850g.

This is not acceptable, even at home I could not run a Mikrotik setup without redundancy preferably with different models.

barkas

The dude is dead.

barkas

You can not directly compare clocks, please refer to the routerboard datasheets.

barkas

If you don't need many ports, I would buy the new version of the RB850Gx2.

2nd that, it's very much fast enough.

barkas

Obviously the are more advanced techniques to solve that problem, but stp / rstp is should be a supported baseline.

barkas

Segment routing seems to be the thing to do at the moment to build a mpls network. Any plans?

barkas

Still kills my rb450g, last working os is 6.29.1.
Please describe "kills"

All ports stay down. I sent a mail to Mikrotik support, no answer yet.

barkas

Still kills my rb450g, last working os is 6.29.1.

barkas

Bridge is in software and really slow.

barkas

There's nothing different. Have you tried a serial crossover cable?

barkas

CRS is quite slow as a router, it is intended to be mainly a switch. My recommendation is RB850Gx2 as a minimum. I can do 500Mbps natting with RB2011 and FastTrack at 65% CPU, but not if the port is in a RouterOS bridge. But I see this is a symmetric connection, so I don't think the RB2011 would be...

barkas

CRS is quite slow as a router, it is intended to be mainly a switch.

My recommendation is RB850Gx2 as a minimum.

barkas

As of today there is no multi core metarouter support.

barkas

After installation on rb450g after boot it takes all interfaces offline and there is no way to get at it anymore. Did netinstall, worked at first, but after configuration restore it is unreachable again. Then I reset the configuration but it's still unreachable. Nothing on serial console either. Now...

barkas

Mikrotik routers are great, I'd stay away from the switches.

barkas

Firewall rules.

barkas

Depends on if the unmanaged switch will pass vlans. If not, it's probably best to just buy a managed switch, they are quite cheap by now. Our you could do some tunneling between the routers, like l2tp for each ssid.

barkas

No. Gigabit means rb1100ahx2 or ccr anyway. You can not expect a 70eu router to do everything you could ever want. There are performance considerations when buying a router which you ignored completely and you have nobody to blame for that but yourself. Instead you feel cheated and blame Mikrotik, t...

barkas

http://routerboard.com/RB951G-2HnD You're welcome. And FYI Mikrotik routers are primarily for enterprise users. Which is the feature for maximum bandwith for pppoe? At least you can see mode bridging and routing and talk about 25 filter rules, I have 9 filters rules and 39 nat not active when do th...

barkas

http://routerboard.com/RB951G-2HnD

You're welcome.

And FYI Mikrotik routers are primarily for enterprise users.

barkas

RB850Gx2 is still relatively low cost. If you buy an enterprise level connection from a big provider at this speed, the cpe will most likely be a Cisco asr1000 series router, which is truly expensive. Then, understand that the people here do this for fun in their free time. I have zero patience for ...

barkas

There is nothing wrong at all. The isp cpe probably is a cheap chip that does exactly what is needed in hardware and nothing else. Mikrotik is an all purpose router that does it all in software.
And don't complain that it's slow. Go buy a $2000 cisco router and see how fast that is in comparison.

barkas

Try checking the label switching tables, something is probably wrong there somewhere.
Be aware that single hops in mpls may not actually be label switched, so your multi hop scenario might be very different from your single hop test.

barkas

Actually, with connection tracking off, a 951g does the gigabit just fine, pure routing. With pppoe, probably not. You might just the provider cpe to do that and deploy the Mikrotik behind it. I'm fuzzy on what FastTrack actually is and what its limitations are, so you'd have to experiment on that a...

barkas

I can't understand this answer, is incredible for me not receve solutions and have to read this thinks... My router is in my house not is profesional use, in forums in Spain all proole talk about this, I would like can use all the bandwith that I pay to my provider. I not need all bandwith, you nee...

barkas

I can't understand this answer, is incredible for me not receve solutions and have to read this thinks... My router is in my house not is profesional use, in forums in Spain all proole talk about this, I would like can use all the bandwith that I pay to my provider. I not need all bandwith, you nee...

barkas

Do buy a rb850, relatively inexpensive and very much fast enough.

barkas

I'm doing enterprise fixed line stuff only so I can not really tell you anything about wireless.

barkas

You need to implement authentication of some sort asap, even if it is only wpa2 enterprise, or you are really screwed, probably sooner rather than later.

barkas

Does it matter how it is achieved if the router gives you wirespeed? Yes. It always matters how something is done. If you don't understand the underlying tech and the pros/cons of various methods to choose from, then you're just pushing buttons until it works, and not truly designing something that...

barkas

This reads as if you have no prior isp experience in which case you should hire someone who has. Then, think about your customer - who is he and how will you connect him? End users will typically be connected using cheap routers and dynamic Ips. Don't use an authentication technique you are not sure...

barkas

Bump! I would really appreciate some feedback on this. Regards, Henry. This should be fairly easy. I'm not sure you have understood vlan trunking though. There is no intervlan trunking and the term suggests a misconception on your part. Thank you for your constructive answer! You are correct, I hav...

barkas

Bump!

I would really appreciate some feedback on this.

Regards,
Henry.

This should be fairly easy. I'm not sure you have understood vlan trunking though. There is no intervlan trunking and the term suggests a misconception on your part.

barkas

This config is easy to solve with Cisco using VTP. Im curious about solving this issue on Mtik.

What in the world has this to do with vtp?

barkas

The security level design of the asa is really bad. It's much too simplistic to do anything useful with and then just stands in the way. I think the security level doesn't even do anything once you start putting actual input/output rules onto interfaces. I was experimenting with an older version of...

barkas

The upcoming hap ac seems to be the device to get.

barkas

Please elaborate.

barkas

Does it matter how it is achieved if the router gives you wirespeed?

barkas

The security level design of the asa is really bad. It's much too simplistic to do anything useful with and then just stands in the way.

barkas

That is actually the Asa being weird.

barkas

If you have a scenario where you want the functionality, go for it. If not, don't.
By that I mean vrf lite. Mpls is really only relevant if you have multiple routers.

barkas

Bogons do exist and are the physical particle of bogusness.

barkas

I wouldn't think so, but you have to try that for yourself, obviously.

barkas

Usually, always disable the sip helper.

barkas

Proxy is not the solution, i want it to forward any traffic aimed at the specified dns name. Just like using regexp and layer 7 for outgoing traffic. I just dont know if it is possible. /HW No, it's not possible like you're asking, and when you think about it you'll see why: DNS only resolves a hos...

barkas

Cool idea, but usually you would use a http proxy to do that.

barkas

No.

switch is a name that has come into use for a multiport bridge that is quick and realized in hardware. Meaning, the older name bridge fits better in this case.

barkas

Cluster the servers or use different pools.

barkas

Mikrotik is a router, not a firewall.

barkas

That's not very helpful, he obviously needs some sort of redundancy in his network.

barkas

That may be possible to some degree using the rule engine of the switch chip, but it is just a l2 device, no l3 switching possible.

barkas

It is not for load balancing. I am trying to set up a hardware failover with VRRP. I have two leased lines with fixed IPs in /29 subnet. Is it possible to have two different fixed WAN IPs in two different subnets? This basic example doesn't work. Mikrotik doesn't allow me to create two 192.168.1.1/...

barkas

why you say it will be bad?
i realy expect to have Gbit on those 5x Gbit ports.

In that case you need to use the switch, with master/slave ports. Those need to be separate for the two switch chips and you can then bridge those.

barkas

Hi barkas, What do you mean by the primary router would have the .2, backup .3, and vrrp ip would have the .1? Shouldn't the Primary and Backup be in a /32 subnet? Thanks. All addresses in a VRRP need to be in the same network. So for example the virtual address would be 192.168.0.1/24, while the r...

barkas

Doesn't matter, bridge is in software anyway.
Performance will be bad no matter what you do.

barkas

On a working vrrp setup, the primary router would have the .2, the backup would have the .3 and the vrrp ip would have the .1, all in the same subnet. Your Ips look strange to me.

barkas

Ipsec?

barkas

You must use master slave for any kind of speed. The CPU of this is quite slow.

barkas

Barkas,

Do you think the 850g2 will do 1000mpbs wan to lan when it becomes available?

Iperf result was 950 MBit with one nat rule and 1500byte mtu.

Still, with 1g I would go with the 1100 or a small ccr.
Or with ubnt edgerouter if you want to go that way.

barkas

This router can be a better choice because includes wireless.
http://routerboard.com/RB951G-2HnD
It can reach 300mbps. It is also overclockable to 750Mhz, stable.

This one is about 20% faster than the 750gl,so, not fast enough.

barkas

I recommend the RB850Gx2, it's very quick for its price. The bytes refer to packet sizes. Download tests will usually use full sized (1500B) packets. Which to look at you have to decide for yourself, it depends on the real world packet size mix this router will actually encounter. Also, those are st...

barkas

Seems reasonable to me.

barkas

Better to use switched spokes then. Cheaper and easier. I'd even switch the hub in such a small network and connect the router to the hub switch.

barkas

Isis should come first.

barkas

You should take a look at the ccr line.

barkas

FYI this is a problem on most routers, sip alg should almost always be disabled.

barkas

I don't think he actually is a troll in the classic sense, it's just who he is, but that doesn't really make any difference in the end.

barkas

No, he's right, I noticed that on mine too. I would expect the rest to be reserved for some internal use by the hardware.

barkas

Don't feed the troll.

barkas

Don't assume that's the fastest you can get just by looking at what they sell to the private sector.

barkas

This is my very favorite thread.

barkas

Lol you can download and run routeros freely, without key it is a trial. Can you do nothing yourself?

barkas

If it's not new, established or related, it's invalid.
Which means it's not part of a known tcp connection and is not opening a new one.
That may be because of some attack on a flow or because the conntrack table is full.

barkas

So according to the Note from the RouterOS manual I am testing correctly, the router in the middle, in my case I test the speed of CRS125 (at least according to the official documentation). What do you guys think about that? I think the official documentation does not match the received wisdom on t...

barkas

A ubiquiti edgerouter will nicely do 1g with an OK feature set.

barkas

Thanks for the responses. I'm still a bit confused though. If I was to do this network with a Ubiquiti solution, it'd be Unifi Secure Gateway router -> ToughSwitch POE -> ethernet wall sockets + 2x Unifi AP-LR. I want to build the network with Mikrotik gear. The CAP2n units can replace the Unifi AP...

barkas

Watch out. CRS is not router. You might be disappointed by its routing speed when you use it as router. It is a switch. Maybe that with 100Mbps there will be no impact but you have to think of future also. Are you going to rise your connectivity? If that's the case, why does the Routerboard site sa...

barkas

Why not just read the bottom of this page. http://routerboard.com/RB750GL I did read the bottom of this page, which is what started to raise my concern, I was looking for feedback from those with practical experience rather than the benchmark tests, I am not sure if I will actually get 25 rules in ...

barkas

The Mt testing is only technically true. A rb750g is capable of gigabit doing purely routing. If you do any sort of useful firewalling, this goes down considerably.
In other words, a erl is much faster. For Internet uplink use the rb750g is fine, but not for internal gigabit firewalling.

barkas

No mipsbe Mikrotik router is capable of those speeds using meaningful firewall rules. The PPC ones may be. I'd recommend the ubiquiti edgerouter, which is cheap and does gigabit wirespeed.

barkas

Additionally you should always filter the routes a cpe advertises to you, who knows what the customer does with it.

barkas

I agree with Barkas. However, the wiki ( http://wiki.mikrotik.com/wiki/Manual:MPLSVPLS ) clearly states that LDP by default distributes labels for active IGP routes (that is - connected, static, and routing protocol learned routes, except BGP). I added the loopback address (/32) to the bgp networks...

barkas

Interesting, I suggest you test it.

barkas

Yes. All that's needed is a routed infrastructure - the protocol used is irrelevant.

barkas

In filters on both pops that only accept the customers network.

barkas

i believe routerOS already supported stp/rstp in bridging but i dont know about switching. You dont need STP/RSTP if you are connecting your switches using a star networked topology. If you are connecting your switches together to create some kind of loop than you will need STP. However if you are ...

barkas

Unfortunately STP is one of the many features missing from the CRS. It's a shame for a manageable switch but it's somewhat understandable at that price point. No it's not. Even the cheapest managed switch by, say, netgear does stp. Without that, you can't build redundancy, so it's useless as a swit...

barkas

Obviously routeros is very flaky sometimes, but my experience with Cisco ios is frankly not much better.
Any real carrier tests that stuff intensively before deployment anyway.

barkas

barkas, Why shouldn't I use Mikrotik switches ? They provide me 24 ports which works at the wire speed, beside this I have access to router features (as you said). What is bad in this ? Moreover, this is very cool to have a switch with router capabilities Also I like very much to see 48 port switch...

barkas

Port security is the keyword here.

barkas

The hardware seems reasonable at least. But you really need someone to come in and analyze this if you can't do it yourself.

barkas

Do yourself a favor and don't use MikroTik switches. They are more like 24 port routers.

barkas

For just one customer it doesn't make sense to deploy an mpls backbone.
Mpls works on top of an existing structure with l2 links and existing routing.
That said, I think mpls is worthwhile for any sp. Just test it in the lab first. Metarouter is an excellent tool for that.

barkas

Kicking a dead horse.

barkas

You can't. The components are there, but not the management. And dmvpn is all about the management.

barkas

The dude is dead, sorry.

barkas

No mpls over layer 3.

Look into eoip or l2tp.

Edit : you can do vpls over mpls over l2tp over ipsec if you want to

.

barkas

Will the 850Gx2 have metarouter support or will it be similar to the RB1100AHx2, with no support?

Currently metarouter does not seem multicore capable.

barkas

I have the same setup and just use a dummy user and password, the server ignores it.

barkas

Dear all, which device should i choose to make my home Full WiFi no need to install second wifi routers to cover blank area. As per my knowledge Basebox5 will do with 8dbi Antenna. i need some more suggestion from mikrotik pros :) kindly help. You need 2.4GHz or 5GHz Access Point? i think 5GHz AP w...

barkas

Nm I don't answer to post spam.

Gesendet von meinem Xperia Z1 Compact mit Tapatalk

barkas

Once I started DHCP server and NAT, back to 250Mbps with almost 100% CPU (through pre-defined Home AP). I'm really disappointed that you cannot have a CPU able to suspend much faster speed (for this, I thought, was a high end router) that's a realistic speed with connection tracking enabled. There ...

barkas

As with the RB450G before it, this unit is only really useful with metarouter I'm sure that's the case for you, but plenty other people find ethernet routers useful for other things :) It having a dual core probably means it doesn't have this feature We have plans for a major rework in this are som...

barkas

As with the RB450G before it, this unit is only really useful with metarouter. It having a dual core probably means it doesn't have this feature. Anyone from Mikrotik?

barkas

There is always going to users who prefer Mikrotik or UBNT, I will say Mikrotik offers something that UBNT cannot and that is you can customize antenna build, I also prefer Mikrotik But in some cases UBNT has something that Mikrotik cant offer :) Can you say me examples? reliability. I have not had...

barkas

The RB850Gx2 have identical dimension, serial port, reset, jack, ethernet placement and characteristics of 450G except of:

Dual Core 500MHz PPC CPU (Single core 680MHz MIPS-BE CPU on 450G)
512MB RAM (256MB on 450G)

has it?
Block diagram please.

ARBEIT ANGST KONSUMTERROR

barkas

If you want a very reliable device for this job, I would recommend you to buy a Brocade CER 2000 Series router. Sure, it's much more expensive than a CCR, but they are great devices. Lots of power (Hardware Routing) and stable as a rock. I don't see the EdgeRouter Series as a real alternative to th...

barkas

Yes, I would do a circle... this is not possible?

Only with stp or something similar. Without that, it's called a loop, which is bad.

ARBEIT ANGST KONSUMTERROR

barkas

Hi Guys, I need to install 5 CRS switches in to a rack. I will have to install these in series. What's the best config to run on these in that configuration? I'm looking at linking them via one port only. usually you would do a circle but since the crs doesn't do stp... Do yourself a favour and buy...

barkas

HI All, Just got my first CRS. it looks very promising, the LCD is a nice thing to have on a switch instead of a name label and IP also the port infor is great. And it is silent as well:D One thing I'm not sure is where is the layer 3 switching? should I configure IP the normal way, once I do that ...

barkas

Vrf?

ARBEIT ANGST KONSUMTERROR

barkas

That would usually be done with private vlans, which... Wait for it... The crs does not support.

Possibly something can be done using filters on the switch.

ARBEIT ANGST KONSUMTERROR

barkas

I have not yet seen a router with active /passive failover capability and that includes cisco up to crs. Routers always do hsrp/vrrp. You are thinking about firewalls.

ARBEIT ANGST KONSUMTERROR

barkas

You know you should test this stuff before deploying.

ARBEIT ANGST KONSUMTERROR

barkas

With firewall you will get nowhere near 1gbps. The official test results are all with connection tracking disabled, a fast but useless configuration.

ARBEIT ANGST KONSUMTERROR

barkas

When we can expect IGMP snooping on CRS?

don't hold your breath.

ARBEIT ANGST KONSUMTERROR

barkas

My guess: They are working on a Routerboard based on a chip with hardware acceleration like the Cavium Octeon. That would me really nice :) I hope they do a better job than Ubiquiti with offloading tasks to the hardware. Actually ubnt did a nice job on it, at least by now. There were some problems ...

barkas

Thank you Normis. Can you briefly explain what is the difference between a Layer 3 Switch and a router? It means that if you add ports to the switch group, you have a fully featured smart switch, and if you remove them, you have a router. In switch mode, you will get wire speed, just like with a re...

barkas

The enterprise market is waiting for a layer 2 10G switch 48 port in the price range of sub 2K$. It should have minimal options like igmp snooping and QOS. I think its a great time for mikrotik to get into the enterprise market. Good luck. No it's not. Compared with real enterprise switches the L2 ...

barkas

L2MTU is 4064 CPU clock variants are min 500/ default 600/ max 750MHz Coo coo coo, thank you much Normis. A 25% could always help out for CPU starved situations. Sorry if I seem harsh, but where the hell do you get your infos from?! They aren't expensive anymore and also they aren't that difficult ...

barkas

Ok, the first question here, is CRS a router or a switch? In my opinion, it's a switch, the CPU is much too weak for so many ports. And I do mean switch here, not bridge. That means the usage scenario is datacenter or access layer and it means primarily L2 through the hardware switching functionalit...

barkas

2011 should be about 20% faster than 450g in my experience.

barkas

I have to bump this now that crs seems to be here.

So what is the functionality of this?

barkas

7600 seems too much. How about asr9k or one of the 7200 series? Or a 6500?

If you do mt, you will have to use ospf instead of eigrp.

Gesendet von meinem XT890 mit Tapatalk 2

barkas

Vrf

Gesendet von meinem XT890 mit Tapatalk 2

barkas

Here's the thing. A gang of us all share an ISP plan through one NATted gateway with one public IP. So if one of us did attract the attention of 'the authorities' what could I, as telecommunications service provider, to do help the authorities? All they would have, presumably, would be a warrant sa...

barkas

Best test that before you deploy anything.

Seems a bit much to me.

Search found 260 matches