MikroTik

shyrwall

Bricked in 7.14.1 also even with this, *) sfp - improved system stability for CR2004-1G-2XS-PCIe (introduced in v7.14); I guess I'm waiting for the "*) We actually mean stable this time. And it really works for CR2004-1G-2XS-PCIe" according to your logic. You need to watch out for changel...

shyrwall

Didn't say Cisco/Juniper don't have tons of bugs but I've never come across a "recommended release" that does not allow the product to boot after upgrade. Especially now in recent years when there's an impact/compability check etc before upgrading. Ok but that is where you are going wrong...

shyrwall

Dumbest I've heard. Can't even imagine Cisco or Juniper putting out a stable release that bricks the product. 1. Stable should mean they tested it on all their products that supports upgrading to that version. 2. If the issue was mentioned for a beta version then of course it should be fixed before...

shyrwall

Dumbest I've heard. Can't even imagine Cisco or Juniper putting out a stable release that bricks the product. But you pay 3 times the money for a comparable product. Your decision. They can only compete in the home to small business segment and for nice special features like wireguard. For other ar...

shyrwall

Warning! CCR2004-pcie doesn't come back after upgrade. it's crazy what You do at mikrotik, to release fw *STABLE* that bricks cloud core unit. looks like boot-loop. Well, I would call it quite irresponsible to install a freshly released 7.xx version at a remote location within a day after release, ...

shyrwall

Warning! CCR2004-pcie doesn't come back after upgrade. it's crazy what You do at mikrotik, to release fw *STABLE* that bricks cloud core unit. looks like boot-loop. HOW to get it working back on remote location!??? Same. And it also causes a kernel panic in the host everytime it "reboots".

shyrwall

Is there some hack to get vlan counters when using l3hw? Or is it something that will be fixed later? Hoping it's possible to fix..

shyrwall

what cpu usage you obtain in that conditions??

20% with l3hw. 60% without.

Without l3hw its really only capable of 35G. And im at 20G now. Specs says 70 but its in+out so 35.

shyrwall

v7.8 Filed bug report but I want to know if someone else had this problem. Also I'm sick of these basic bugs which makes it feel that the product has not even been tested. /interface/ethernet/switch/l3-hw-offloading yes ipv6 hw no fasttrack hw no No fw rules, all fastpath, bridge with 1x100G (shows ...

shyrwall

Same 7.6rc2 -> rc3 Possibly because of wifi2wave, wlan: [69:E:QDF] qdf_fs_read[55]: Fail to Open File /lib/firmware/.fileindex wlan: [69:E:QDF] qdf_fs_write[137], Failed to open file /lib/firmware/.fileindex wlan: [69:E:ANY] ramdump_work_handler: ** STARTING DUMP options:2 wlan: [69:E:ANY] ol_get_t...

shyrwall

Upgrading HAP AC3 (RBD53iG-5HacD2HnD) from 7.6rc2 results in "kernel failure in previous boot". Multiple retries.
Same 7.6rc2 -> rc3

We're so far unable to reproduce this locally. Please open a support ticket and provide a supout file.

shyrwall

Upgrading HAP AC3 (RBD53iG-5HacD2HnD) from 7.6rc2 results in "kernel failure in previous boot". Multiple retries.

Same 7.6rc2 -> rc3

shyrwall

Upgrading HAP AC3 (RBD53iG-5HacD2HnD) from 7.6rc2 results in "kernel failure in previous boot". Multiple retries.

shyrwall

If they designed it without communication between the peer-processes and the filter process(es) then I can understand why it wouldn't work. But that would be a strange way of designing it. The filter process gets the remote peer ip etc also so it's not that it just sees routes flying in without kno...

shyrwall

This is completely false and shows no understanding on threading. If we're able to use filters for export/import of prefixes that shows there should not be any reason not to also add a counter to that since there's already logic in place to permit or deny prefixes. Peeking from the outside in the b...

shyrwall

You are missing the point, should we stop working on these features then just to implement prefix counter to show up in BGP session? You are willing to tolerate BGP crashes that we could fix instead of possibility to get a counter in a specific manner? Yes you should. You first implement basic feat...

shyrwall

If it is that much difficult to implement basic stuff like showing the prefix count and advertisements (and no, pcap dumps is a joke), that it would take sooo much time from implementing and fixing other BGP stuff, then something is seriously wrong with the new BGP implementation. Either that, or y...

shyrwall

7.1 on CCR1072 crashed after ~5h. Needed manual power cycle.

shyrwall

Maybe known already but couldn't find it mentioned. The simple queue limits is a 32-bit unsigned int so the maximum bw limit one can specify is 4294967295 (~4.29Gbit/s). Same bug in 6.x . Please fix

shyrwall

Hmm ok. It seems that if i create it from cli then it works. So just not via winbox.

shyrwall

Hi I might be wrong about this or it might have been mentioned before but I haven't been able to find it in a past topic. When setting ospf v2 area to for example 0.0.0.0 in v7 then v6 (and other ospf implementations i assume) sees it as blank. For example setting 0.0.0.1 is seen as 0.0.0.1 in v6 bu...

shyrwall

Create an option under /ip/settings called "ICMP Errors Ingress Reply" Description : Makes the router reply with the ip of the ingress interface to icmp errors. -- The checkbox just does echo 1 > /proc/sys/net/ipv4/icmp_errors_use_inbound_ifaddr --- Extremely easy features request. No reas...

shyrwall

BTW3 - So instead of Mikrotik just making it behave like any other router out there i should buy other hardware? :D Mikrotik has many virtues but high speed firewalling is not one of them. I'm not saying MT should avoid this merket, but it's obvously not in their focus ... not right now. There shou...

shyrwall

So, where did I not answer question? OP somehow think that conntrack and fasttrack don't have anything in common. However, the truth is that fastrack is actually a smart way of using conntrack tables, without conntrack it can't work. One can't have the former without the later. BTW, not many smart ...

shyrwall

I've never seen any explanation about how fasttrack really performs (could be that MT considers it a trade secret). It, however, seems that fasttrack completely bypasses (stateful part of) firewall for packets belonging connections marked for fasttracking. Which means only non-fasttracked packets g...

shyrwall

With conntrack and fasttrack enabled only the first packet of a connection is checked over (established). All packets on the same connection are then waved through and not checked at all. You have to to tell conntrack which traffic should be waved through after checking the first package. Like I sa...

shyrwall

With conntrack and fasttrack enabled only the first packet of a connection is checked over (established). All packets on the same connection are then waved through and not checked at all. You have to to tell conntrack which traffic should be waved through after checking the first package. Like I sa...

shyrwall

Hi I need clarification on something i don't really understand. So let's first say I have 1 firewall rule. What the rule does is not important. But it's there so "fastpath" is disabled. I then also disable all connection tracking by using "no track" in the RAW table (haven't trie...

shyrwall

Bringing up this again for input because I still don't get why it's not implemented. Using the "devel"-login and setting, # echo 1 > /proc/sys/net/ipv4/icmp_errors_use_inbound_ifaddr shows that it works and there's no kernel issue from custom MT code or anything to make it work. Please giv...

shyrwall

Hi

Not sure which versions this concerns but v6.45beta54 allows API login without password for all users incl admin.

Can someone verify and possibly also verify other versions so it's fixed asap.

Thank you

shyrwall

I'm tired of RouterOS behaving differently than any other router on the market. ICMP error replies should be sent from the same interface that received the ICMP request. Without this tracerouting to something which passes through RouterOS-equipment and is multihomed is useless. I'm just asking Route...

shyrwall

Ok. So as I thought then. No difference on how it works just how it looks in cli/winbox. I'm just trying to imagine on how it looks in the internal "database" (or however its stored). To keep track of where a rule in the chain is I feel that there has to be some internal number unique for ...

shyrwall

Hi So if I understood this correctly the routing filters are processed from top to bottom in the same chain. Each rule in the filters has a rule number. Example, routing filter print. 0 chain=IPV4-TRANSIT-IN invert-match=no action=accept set-bgp-local-pref=100 set-bgp-prepend-path="" set-b...

shyrwall

Not sure if I should post this here but..

When flashing the BIOS of my RB450G to 2.38 the CPU Mhz gets set to 100Mhz.

Took a while to figure out because I upgraded to 5.9 at the same time.

Just a heads up if some people are complaining about performance problems after upgrading RouterOS.

Search found 34 matches

Re: v7.14 [stable] is released!

Re: v7.14 [stable] is released!

Re: v7.14 [stable] is released!

Re: v7.14 [stable] is released!

Re: v7.14 [stable] is released!

Re: v7.14 [stable] is released!

L3HW Interface Counters

Re: CCR2216 - L3HW unusable at >10Gbit/s

CCR2216 - L3HW unusable at >10Gbit/s

Re: v7.6 [stable] is released!

Re: v7.6 [stable] is released!

Re: v7.6 [stable] is released!

Re: v7.6 [stable] is released!

Re: v7.3beta [testing] is released!

Re: v7.3beta [testing] is released!

Re: v7.3beta [testing] is released!

Re: v7.3beta [testing] is released!

Re: v7.1 is released!

Re: v7.1rc4 [development] is released!

Re: OSFP area [SOLVED]

OSFP area [SOLVED]

Re: Feature requests

Re: FastPath/FastTrack with conntrack off

Re: FastPath/FastTrack with conntrack off

Re: FastPath/FastTrack with conntrack off

Re: FastPath/FastTrack with conntrack off

Re: FastPath/FastTrack with conntrack off

FastPath/FastTrack with conntrack off

Re: Make ICMP replies from ingress interface

API Security Vulnerability

Make ICMP replies from ingress interface

Re: Routing filter order

Routing filter order

Re: RouterOS v5.9 released