Community discussions

Search found 51 matches

  • 1
  • 2
by Kevo
Tue Jan 22, 2019 8:57 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 108
Views: 15030

Re: CCR1072 watchdog reboot

I've just completed removing any connection tracking from ours. We had some DDoS issues and from what I've read connection tracking can be a big problem in that case. So I've rearranged my firewall rules and adapted things to run in the raw table as much as possible and turned off connection trackin...
by Kevo
Fri Jan 18, 2019 11:38 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 108
Views: 15030

Re: CCR1072 watchdog reboot

For those whose 1072 is rebooting are you running at 1200MHz or 1000MHz. We are running the long-term/bugfix version and haven't had any reboots or lock ups. It has always been set to 1000MHz. It came that way as far as I know. I'm wondering what feature or setting makes the difference. We have 3 in...
by Kevo
Mon Dec 31, 2018 6:03 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 18
Views: 2583

Re: CSS326-24G-2S+RM hangs until power cycle

We still run 2.4 on our CSS326 and it has been running fine so far. We only use it as a basic switch and don't have any extra features or functionality turned on. I'm pretty sure we did have to reboot it once after some storms, but we are thinking it was do to one or more of our wireless backhaul ra...
by Kevo
Tue Dec 11, 2018 7:41 pm
Forum: Forwarding Protocols
Topic: Is it possible to host 2 web servers within the same public IP address
Replies: 8
Views: 925

Re: Is it possible to host 2 web servers within the same public IP address

You need a proxy server to handle that sort of setup. I use haproxy for that sort of thing. It can handle more than just websites as well. OPNsense and pfSense offer haproxy plugins to do this sort of thing. Otherwise you can run the proxy inside the lan and forward the ports to it and let it proxy ...
by Kevo
Thu Dec 06, 2018 3:28 pm
Forum: SwOS
Topic: SwOS 2.8 10G SFP+ link not working
Replies: 5
Views: 943

Re: SwOS 2.8 10G SFP+ link not working

Just manually change the filename in the URL. If the URL shows 2.8 for instance, just change the 8 to 7.

Not sure if there is a better method, but that's how I've done it in the past and it works fine.
by Kevo
Wed Aug 22, 2018 3:05 am
Forum: General
Topic: Any tips for dealing with DDoS attacks and such?
Replies: 0
Views: 294

Any tips for dealing with DDoS attacks and such?

We had two IPs on our network attacked in the last few days. We've had this happen a couple of times before, but it seems this is becoming more common with all the bad router firmware out there. The two attacks we had were somewhat different, but similar effects. The first one was a lot of bandwidth...
by Kevo
Fri Jun 15, 2018 5:14 pm
Forum: Forwarding Protocols
Topic: Cleaning Up an OSPF Mess and Future optimizations
Replies: 2
Views: 548

Re: Cleaning Up an OSPF Mess and Future optimizations

It sounds to me like the mess is a management mess, not necessarily a performance mess in terms of bandwidth delivered. OSPF is just populating routing tables. I can't imagine it's going to have a major effect on bandwidth delivered. Now when you say there are random static routes and things were ki...
by Kevo
Fri Mar 02, 2018 11:57 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS326 and bonding [SOLVED]
Replies: 12
Views: 1641

Re: CRS326 and bonding [SOLVED]

did you start with an empty config?
by Kevo
Tue Feb 20, 2018 8:48 am
Forum: General
Topic: How to turn off spanning tree?
Replies: 4
Views: 2372

Re: How to turn off spanning tree?

There is no bridge to set protocol mode on, so I'm not sure how to apply that info.
by Kevo
Mon Feb 19, 2018 5:21 pm
Forum: General
Topic: How to turn off spanning tree?
Replies: 4
Views: 2372

How to turn off spanning tree?

I have a CCR (6.41) with no bridges set up. On it I have a port with a vlan configured. On this port when I capture packets I see spanning tree for bridges running with packets going out every 5 seconds it seems. I can't find any way to turn this off? Is it possible to turn it off? If not why not?
by Kevo
Mon Nov 20, 2017 11:56 am
Forum: Forwarding Protocols
Topic: OSPF and BGP Issues
Replies: 10
Views: 1716

Re: OSPF and BGP Issues

We've seen this problem a couple of times now on our 1072. It looks like something happens with OSPF and then a little while after we get the hold timer error with BGP and the routing fails. After some minutes bgp will come back up. We've only run bugfix releases and this has happened before on 6.37...
by Kevo
Fri Oct 27, 2017 1:13 am
Forum: Announcements
Topic: v6.39.3 [bugfix] is released!
Replies: 47
Views: 14930

Re: v6.39.3 [bugfix] is released!

We don't use PPPoE and I haven't seen the unknown interface issue on any of our CCRs, 1036s and 1009s. We have a few with multiple OSPF adjacencies.
by Kevo
Fri Oct 20, 2017 4:22 pm
Forum: Announcements
Topic: SwOS version 2.6 released!
Replies: 30
Views: 11033

Re: SwOS version 2.6 released!

Kevo, it means that it will take 10s after reboot for SwOS DHCP Client to reach timeout and the previously configured static IP will become available again.
Thanks. I was hoping that would be the case.
by Kevo
Thu Oct 19, 2017 4:59 pm
Forum: Announcements
Topic: SwOS version 2.6 released!
Replies: 30
Views: 11033

Re: SwOS version 2.6 released!

I have a CSS326. Does this mean if I upgrade remotely to 2.6 from 2.3 I will not be able to log back into the switch if I am currently running with a static IP? We don't have a DHCP server on that network and it's remote in a datacenter. Or, does it mean that it will simply take a few seconds for th...
by Kevo
Thu Sep 14, 2017 4:49 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS125-24G-1S locks up, passes only ARP traffic
Replies: 13
Views: 1657

Re: CRS125-24G-1S locks up, passes only ARP traffic

1 month of uptime with no issues so far. I think it's safe to say at this point that the new switch is not affected by whatever issue was causing the old one to fall over 1 a week or so. Whether or not that is more related to this one running SwitchOS instead of RouterOS or it's the different chipse...
by Kevo
Tue Aug 29, 2017 8:39 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS125-24G-1S locks up, passes only ARP traffic
Replies: 13
Views: 1657

Re: CRS125-24G-1S locks up, passes only ARP traffic

Well, we just passed the 2 week mark with no issues to speak of. It was almost unheard of for the CRS226 to go 1 week much less 2. Keeping fingers crossed we don't even have to look at this thing again until we're ready to upgrade or replace it.
by Kevo
Thu Aug 24, 2017 5:52 am
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS125-24G-1S locks up, passes only ARP traffic
Replies: 13
Views: 1657

Re: CRS125-24G-1S locks up, passes only ARP traffic

We switched to the CSS326 and have over 8 days uptime so far. That's longer than the CRS226 has gone in a long time, so hopefully this new switch will function this well going forward. It's a really good value for sure if it's stable.
by Kevo
Wed Aug 16, 2017 3:43 pm
Forum: SwOS
Topic: can't access RB260GSP admin page via http
Replies: 5
Views: 1014

Re: can't access RB260GSP admin page via http

The problem seems to have been resolved after a reboot. I have it working with SNMP now too. Hopefully everything will be stable now.
by Kevo
Tue Aug 15, 2017 9:57 pm
Forum: SwOS
Topic: can't access RB260GSP admin page via http
Replies: 5
Views: 1014

Re: can't access RB260GSP admin page via http

I'm also having this problem intermittently with our CSS326. I was able to get to it earlier, but now I can't. I can't even ping it at the moment, but it's working fine as far as I can tell. I looked on the wiki and it seems it doesn't work the way typical devices do. There's no default gateway and ...
by Kevo
Tue Aug 08, 2017 2:16 am
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS125-24G-1S locks up, passes only ARP traffic
Replies: 13
Views: 1657

Re: CRS125-24G-1S locks up, passes only ARP traffic

Hello, I had the same issue. I emailed Mikrotik several times, opened a trouble ticket. They had me flash to current rev firmware; it still continued. This is a problem which would take down our entire WISP. I replaced it with a competitor's model and have had no problems. We are at 100% uptime sin...
by Kevo
Tue Aug 08, 2017 2:12 am
Forum: RouterBOARD hardware
Topic: MikroTik SFP+ DAC 1m cable - does it support 10G?
Replies: 19
Views: 4179

Re: MikroTik SFP+ DAC 1m cable - does it support 10G?

Any news on these 10Gbps links with SFP+ ports? We have a CRS226 that blows up every few days and I have one of the new CSS326's to try out, but it sounds like it's a bad idea to even try at the moment.
by Kevo
Sun Jul 09, 2017 4:51 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS125-24G-1S locks up, passes only ARP traffic
Replies: 13
Views: 1657

Re: CRS125-24G-1S locks up, passes only ARP traffic

Has anyone tried swapping in a CRS326 for one of these locking up switches. We have a CRS226 that locks up every few days, and no firmware changes have seemed to help the problem. I think we are just going to have to bite the bullet and get something else. I noticed the 326 has a different chip in i...
by Kevo
Sat Jun 17, 2017 3:51 pm
Forum: Announcements
Topic: v6.39.2 [current]
Replies: 122
Views: 33972

Re: v6.39.2 [current]

The new style webfig terminal seems buggy. It doesn't seem to work the first time I click the button. I have to click out to webfig and click back to terminal. Also, on Safari, the terminal size flashes back and forth like it's opening up too big to fill the window, which triggers the scrollbars, wh...
by Kevo
Fri May 05, 2017 1:37 am
Forum: Announcements
Topic: v6.39.1 [current]
Replies: 158
Views: 35970

Re: v6.39.1 [current]

There is a single wireless package now.
by Kevo
Tue Mar 21, 2017 4:21 am
Forum: General
Topic: [Solved] PCQ Rate and Simple Queue - Per IP Shaping Problem
Replies: 21
Views: 12530

Re: PCQ Rate and Simple Queue - Per IP Shaping Problem

I have mine setup with a mangle to mark the upload and download. It works fine from my testing, but I'm not sure it's necessarily the best way. This router is a hex that typically serves 25 users or less. /ip firewall mangle add action=mark-packet chain=forward new-packet-mark=client_upload \ out-in...
by Kevo
Thu Mar 02, 2017 2:57 am
Forum: General
Topic: Are units in ROS base 2 or 10?
Replies: 3
Views: 476

Re: Are units in ROS base 2 or 10?

Interesting. I checked speedtest.net and it seems to use power of 2. Google's speedtest seems to agree with speedtest.net. So was it the case with IDSN and T1 lines that they use power of 10 when when coming up with 64kbps and 1.54Mbps? Also, one other area I noticed discrepancies is when uploading ...
by Kevo
Wed Mar 01, 2017 5:47 pm
Forum: RouterBOARD hardware
Topic: Which 80km fiber SFP+ modules 10G-ZR work
Replies: 12
Views: 2660

Re: Which 80km fiber SFP+ modules 10G-ZR work

I'm not sure how to answer the question. The case of the module is metal and a dull silver color. We ordered customized from the SFP+ 10G section. (#50008) The part# shows up as SFP-10GZR-55 in our router. It's a 1550nm wavelength, but it wasn't customized, so whether it uses the same optics as what...
by Kevo
Wed Mar 01, 2017 5:36 pm
Forum: General
Topic: Are units in ROS base 2 or 10?
Replies: 3
Views: 476

Are units in ROS base 2 or 10?

I noticed while testing bandwidth that the traffic generator seems to count Mbps as a power of 10, 1000 instead of the more traditional power of 2, 1024. It was slightly confusing to see the bandwidth number sent on the Mikrotik being noticeably larger than what was shown on our backhaul radios. Is ...
by Kevo
Tue Feb 28, 2017 3:09 pm
Forum: RouterBOARD hardware
Topic: Which 80km fiber SFP+ modules 10G-ZR work
Replies: 12
Views: 2660

Re: Which 80km fiber SFP+ modules 10G-ZR work

We did get some of the fiberstore modules and they seem to be working. First shipment we got from them didn't work for some reason, but the replacements seem to be working fine.
by Kevo
Tue Feb 21, 2017 7:49 pm
Forum: RouterBOARD hardware
Topic: Which 80km fiber SFP+ modules 10G-ZR work
Replies: 12
Views: 2660

Re: Which 80km fiber SFP+ modules 10G-ZR work

Have you actually used those modules? If so how did they perform for you?
by Kevo
Fri Feb 17, 2017 2:31 pm
Forum: RouterBOARD hardware
Topic: Which 80km fiber SFP+ modules 10G-ZR work
Replies: 12
Views: 2660

Which 80km fiber SFP+ modules 10G-ZR work

Who has used an 80km fiber SFP+ module. I need some modules to try and I haven't found anything on the wiki about what has been known to work. Anyone have and model numbers and results they can share? TIA
by Kevo
Tue Jan 17, 2017 3:00 am
Forum: Announcements
Topic: Winbox 3.9 released!
Replies: 35
Views: 15197

Re: Winbox 3.9 released!

Noticed this in 3.8 but now I see 3.9 is out and it still occurs. When quitting winbox wine is left running. (OS X 10.12.2, app built with winebottler 1.8-rc4 - resulting in wine 1.8-rc4) Steps to reproduce: - launch winbox - connect to a device - click on the session menu and then select exit (or ...
by Kevo
Mon Jan 16, 2017 10:15 pm
Forum: Announcements
Topic: v6.38.1 [current]
Replies: 73
Views: 23544

Re: v6.38.1 [current]

Latest for Mac hasn't been done yet... http://joshaven.com/resources/tools/winbox-for-mac/ Still stuck on 3.7.. Just upgrade from within winbox using the check for updates under tools. Works fine for me, although I am using my own wrapped version. It's pretty easy to do yourself if you want to lear...
by Kevo
Mon Nov 07, 2016 12:13 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1111
Views: 196124

Re: Feature requests

Could we get a quickset mode for travel router. I'd like to have a mode that let's someone take a map lite and go to quickset and use it to log into the hotel wireless and have wireless repeater mode setup with an SSID they can log into for their devices. Ethernet could be setup with an option for l...
by Kevo
Wed Oct 12, 2016 1:18 am
Forum: Announcements
Topic: v6.38rc [release candidate] is released
Replies: 331
Views: 73923

Re: v6.38rc [release candidate] is released

Chupaka - You can see the limit in IP/Firewall/Connections menu. At the bottom of the table there is Max Entries value. I tried to check this on our main router and I gave up trying to get to the end of the table. (Which brings up a problem with Webfig. There should be a paging mechanism or a scrol...
by Kevo
Tue Oct 11, 2016 10:17 pm
Forum: Announcements
Topic: v6.38rc [release candidate] is released
Replies: 331
Views: 73923

Re: v6.38rc [release candidate] is released

Chupaka - You can see the limit in IP/Firewall/Connections menu. At the bottom of the table there is Max Entries value. I tried to check this on our main router and I gave up trying to get to the end of the table. (Which brings up a problem with Webfig. There should be a paging mechanism or a scrol...
by Kevo
Fri Sep 23, 2016 5:50 pm
Forum: Wireless Networking
Topic: Howto? mAP Lite repeater mode?
Replies: 6
Views: 5205

Re: Howto? mAP Lite repeater mode?

I think I was testing with rc40. I'll update to the release version and test again.
by Kevo
Fri Sep 23, 2016 6:30 am
Forum: Wireless Networking
Topic: Howto? mAP Lite repeater mode?
Replies: 6
Views: 5205

Re: Howto? mAP Lite repeater mode?

I managed to get this working for the most part. You can start with quickset configured for AP or CPE. Then you add a virtual wireless interface for the other function. So if you start in AP mode you add a virtual wireless interface for station. Vice versa for CPE mode. Then you can change the DHCP ...
by Kevo
Thu Sep 22, 2016 11:40 pm
Forum: Wireless Networking
Topic: Howto? mAP Lite repeater mode?
Replies: 6
Views: 5205

Re: Howto? mAP Lite repeater mode?

I've been trying to get this setup too, but it doesn't seem to work for me. I'm not real sure how it's supposed to work wither. Every time I try the setup repeater I end up getting locked out of the mAP and have to reset it to defaults to get back in. My attempts to set it up have so far been met wi...
by Kevo
Mon Sep 19, 2016 11:37 pm
Forum: General
Topic: 1Gb/s single tunnel IPSEC on X86
Replies: 1
Views: 534

Re: 1Gb/s single tunnel IPSEC on X86

You'd have to search the forum and double check my memory, but IIRC, the CCR is the fastest option currently and I think it does something close to what you are seeing now on a single tunnel. Unless recent updates have improved performance, I think you may end up having to spend some $$$$.
by Kevo
Mon Sep 19, 2016 4:50 am
Forum: General
Topic: Using L2TP/IPSec VPN with iOS 10
Replies: 30
Views: 70988

Re: Using L2TP/IPSec VPN with iOS 10

I was able to set mine up, settings the same as above going by memory, and it works fine from my phone over wi-fi, but not over cellular. I think there may be an issue with the cell provider that fouls up the connection. I'm not sure exactly what it is, but in the router I can see the SAs. One direc...
by Kevo
Sat Aug 27, 2016 6:19 am
Forum: Announcements
Topic: v6.37rc [release candidate] is released, only one wireless package!
Replies: 321
Views: 55989

Re: v6.37rc [release candidate] is released, only one wireless package!

48db signal to noise sounds just about impossible in the real world on unlicensed freq. We have licensed links running under -50 that don't see 48db SNR. I would guess the first set of numbers are more accurate.
by Kevo
Sun Jan 31, 2016 6:20 pm
Forum: Announcements
Topic: v6.34 [current] is released!
Replies: 91
Views: 22454

Re: v6.34 [current] is released!

Also, voltage shows 0.0 under system heath now. CCR1072.
by Kevo
Sun Jan 31, 2016 5:20 pm
Forum: Announcements
Topic: v6.34 [current] is released!
Replies: 91
Views: 22454

Re: v6.34 [current] is released!

We also are seeing traffic graph issues with the release. rc41 was fine. After upgrade to the release the graph shows lower values than the interfaces do.The only lines in the graph that look to be proper size are ones that were drawn while refreshing the graph page. So the first two graph lines at ...
by Kevo
Fri Dec 04, 2015 2:12 am
Forum: RouterOS v6 RC and v7 BETA
Topic: 6.34 release candidate version topic!
Replies: 201
Views: 42458

Re: 6.34 release candidate version topic!

My SIP problem seems to be unrelated to the upgrade. Just a coincidence that the problem occurred shortly after the upgrade.
by Kevo
Wed Dec 02, 2015 11:49 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: 6.34 release candidate version topic!
Replies: 201
Views: 42458

Re: 6.34 release candidate version topic!

Settings changes didn't fix the SIP issue. I may try downgrading later and see if it goes away. It's going to be a hassle to try and capture packets on our sip box since it runs on a Pi.
by Kevo
Tue Dec 01, 2015 9:10 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: 6.34 release candidate version topic!
Replies: 201
Views: 42458

Re: 6.34 release candidate version topic!

We've apparently been having some SIP helper issues since loading 6.34rc11 on a 750GL. This is the first new version I've tried on it since 6.30.4. The problem is intermittent and has been happening off and on. I've just started looking into it. The problem appears to involve bogus sip invites. I ha...
by Kevo
Wed Oct 12, 2011 11:50 pm
Forum: General
Topic: PPTP Server issue: cannot access LAN after connection
Replies: 4
Views: 5101

Re: PPTP Server issue: cannot access LAN after connection

I've definitely narrowed it down to the firewall rules. I have an input rule accepting tcp 1723 and that allows the pptp connection in the first place, but I also have a series of forward rules allowing connection to internal servers on specific ports on my lan segment and dmz segment. That all work...
by Kevo
Wed Oct 12, 2011 10:35 pm
Forum: General
Topic: PPTP Server issue: cannot access LAN after connection
Replies: 4
Views: 5101

PPTP Server issue: cannot access LAN after connection

I have successfully setup a PPTP server on my RB750GL and can connect to it. However, I cannot access any LAN devices and there doesn't seem to be any traffic going out from the RB750 to my PPTP client. I basically turned on the PPTP server and set up a secret with username and password, using the d...
by Kevo
Wed Oct 12, 2011 8:36 pm
Forum: General
Topic: Looking for DMZ example config
Replies: 2
Views: 17288

Re: Looking for DMZ example config

Thanks. That's what I needed. My initial attempt was thinking in the right direction, but I wasn't quite understanding the operation of NAT properly. I wasn't using the forward chain where I should have been, and I had srcnat's for the DMZ ips that weren't needed. I really did search a lot and looke...
  • 1
  • 2