Community discussions

Search found 164 matches

by plankanater
Mon Jul 08, 2019 3:58 am
Forum: The Dude
Topic: Dude SNMP Ubnt Edge Switch 48 Not Displaying all ports
Replies: 0
Views: 139

Dude SNMP Ubnt Edge Switch 48 Not Displaying all ports

Dude is pulling SNMP from a 48 port Edge Switch. It seems to only display the last 63 interfaces (8 through 71) For some reason when it is building the list is shows interfaces 1 and start building then the higher it goes it deletes interface 1 through 7 I dont know if it is a limit of the number of...
by plankanater
Fri Jul 05, 2019 10:37 pm
Forum: General
Topic: M.2 Drive not Found RB1100AHx4 [SOLVED]
Replies: 2
Views: 204

Re: M.2 Drive not Found RB1100AHx4 [SOLVED]

Ah, that makes sense.
by plankanater
Fri Jul 05, 2019 7:53 pm
Forum: General
Topic: M.2 Drive not Found RB1100AHx4 [SOLVED]
Replies: 2
Views: 204

M.2 Drive not Found RB1100AHx4 [SOLVED]

I have a Samsung NVMe M.2 512GB drive. Putting it into the M.2 slot on the new CCR1036 shows the drive and I am able to format it. Putting the same drive into the 1100AHx4 Dude Edition does not read the drive. I have tried both slots, with and without the factor 60g M2 Drive.

Any Ideas?
by plankanater
Thu May 30, 2019 6:35 am
Forum: Scripting
Topic: Script NTOP to stop DDOS
Replies: 4
Views: 627

Re: Script NTOP to stop DDOS

Does anyone have a good walk through on how to get fast net Mon working?
by plankanater
Fri Apr 05, 2019 4:28 am
Forum: Scripting
Topic: Script NTOP to stop DDOS
Replies: 4
Views: 627

Re: Script NTOP to stop DDOS

We are looking at that. We were just trying to figure out if NTOP can do it instead, since we already run NTOP.
by plankanater
Thu Apr 04, 2019 4:20 am
Forum: Scripting
Topic: Script NTOP to stop DDOS
Replies: 4
Views: 627

Script NTOP to stop DDOS

Does anyone know how to use ntop to stop a DDOS? We have ntop setup and it is working perfectly. Alerts work also, but i would like to be able to trigger a mikrotik to add the IP that has the alert to be added to the BGP - Networks tab of a mikrotik. Alerts for working https://www.ntop.org/guides/nt...
by plankanater
Thu Mar 28, 2019 3:16 am
Forum: RouterOS v7
Topic: Feature request: BGP4-MIB (RFC 4273)
Replies: 32
Views: 5207

Re: Feature request: BGP4-MIB (RFC 4273)

Do we know if it can be implemented in v6 or does it need a newer kernel?
by plankanater
Mon Mar 25, 2019 3:14 am
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 553
Views: 131471

Re: RouterOS v7.0 beta1 - when?

would love BGP information sent via SNMP
by plankanater
Fri Mar 15, 2019 9:14 pm
Forum: RouterOS v7
Topic: Feature request: BGP4-MIB (RFC 4273)
Replies: 32
Views: 5207

Re: Feature request: BGP4-MIB (RFC 4273)

+1 from me. Any chance getting it in version 6?
by plankanater
Fri Nov 30, 2018 8:11 pm
Forum: Forwarding Protocols
Topic: Routing Filter Set In Nexthop IPv6 [SOLVED]
Replies: 1
Views: 393

Re: Routing Filter Set In Nexthop IPv6 [SOLVED]

I got this to work by checking the box "BGP" under "Protocols"
by plankanater
Thu Nov 29, 2018 5:50 pm
Forum: Forwarding Protocols
Topic: Routing Filter Set In Nexthop IPv6 [SOLVED]
Replies: 1
Views: 393

Routing Filter Set In Nexthop IPv6 [SOLVED]

“Set in Next Hop for IPv6” route filter does not appear to be working. “Set in Nexthop” on IPv4 works but not IPv6. I am running 6.43.4 on a CCR1036-8G-2S+
by plankanater
Sat Nov 17, 2018 10:21 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1230

Re: OSPF - BGP - Route Reflector

We have over 10 edge routers. We are switching to route reflectors because a full mesh is too taxing on the 1072s. Turning up more peers also wont help share the BGP routers when the OSPF routes override the BGP. For now I have "Redistribute OSPF" into bgp then filtered the crap out of the outbound ...
by plankanater
Fri Nov 16, 2018 10:23 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1230

Re: OSPF - BGP - Route Reflector

I need the Edge router to prefer the OSPF because I do not want to route traffic through the reflector.
by plankanater
Fri Nov 16, 2018 4:15 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1230

Re: OSPF - BGP - Route Reflector

Why not use one public AS for your edge routers (presumably doing BGP with the outside world), and a private AS for the access routers, and eBGP between them? Then you don't need route reflection. Or do the access routers need to peer with customers over the public AS? This is the same issue you de...
by plankanater
Fri Nov 16, 2018 4:02 pm
Forum: Forwarding Protocols
Topic: BGP IPv6 route reflection
Replies: 27
Views: 4144

Re: BGP IPv6 route reflection

I am having this issue with IPv4. Because OSPF overrides the BGP routes (making them not active) the router will not reflect the BGP routes. How do i fix this? Is it a v7 thing? I have Client to Client Reflection turned on, I have tried enabling "Redistribute other BGP" nothing seems to make it work...
by plankanater
Fri Nov 16, 2018 1:38 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1230

Re: OSPF - BGP - Route Reflector

Correct.. the access routers are also running bgo for customers to peer with.

I also have a total of 8 upstream peers and 3 downstream. That's why I am building the route reflectors. To improve scaling.
by plankanater
Fri Nov 16, 2018 4:29 am
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1230

OSPF - BGP - Route Reflector

I have edge routers and access routers peering with a route reflector. My access routers run OSPF to all my edge routers. The route reflector holds my public networks but the access routers hold the actual blocks. For the example of the issue i am having i will use block 200.200.200.0/24 as an examp...
by plankanater
Mon Oct 08, 2018 3:35 pm
Forum: The Dude
Topic: Dude Log User Actions
Replies: 3
Views: 897

Re: Dude Log User Actions

Was going to dig this up again. It would be nice if under "history actions" it showed the user name of who did the action.
by plankanater
Thu Sep 20, 2018 6:26 pm
Forum: General
Topic: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]
Replies: 4
Views: 603

Re: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]

It seems to be fixed in 6.43.3
by plankanater
Fri Sep 14, 2018 9:59 pm
Forum: General
Topic: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]
Replies: 4
Views: 603

Re: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]

Ok so i defaulted the switch running 6.43 and it let me enable and disable the forward invalid vlans. so it must be something in the config. interface ethernet set [ find default-name=ether1 ] name="1 - N 5.2" speed=100Mbps set [ find default-name=ether2 ] name="2 - East 5.2" speed=100Mbps set [ fin...
by plankanater
Fri Sep 14, 2018 9:53 pm
Forum: General
Topic: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]
Replies: 4
Views: 603

Re: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]

This appears to be an issue with the new firmware. Exported my config and put it on a 6.42 router and it worked and let me turn off the foward invalid. I then updated to 6.43, the box was still unchecked. After trying to recheck the box it gives me the same error. "Couldn't change Switch Settings - ...
by plankanater
Fri Sep 14, 2018 7:48 pm
Forum: General
Topic: CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]
Replies: 4
Views: 603

CRS112-8P-4S Invalid VLAN v6.43 [SOLVED]

I have set up a CRS112 with vlans using the switch menu. I am trying to then turn off "Forward Invalid VLAN" so that vlan 1 will no longer work through the bridge. I uncheck the box and hit apply and it responds with "Couldn't change Switch Settings - cpu flow control not supported (6)" This is the ...
by plankanater
Thu Aug 30, 2018 4:41 pm
Forum: RouterBOARD hardware
Topic: Memory Upgrade Ram
Replies: 2
Views: 541

Re: Memory Upgrade Ram

The EM model is out of stock. We are running full table bgp. While I know the 2 gig is ships with is enough to load a full table, we still want to upgrade.
by plankanater
Wed Aug 29, 2018 11:54 pm
Forum: RouterBOARD hardware
Topic: Memory Upgrade Ram
Replies: 2
Views: 541

Memory Upgrade Ram

We are looking at upgrading the memory on a CCR1036-8G-2S+. I have looked but to do not see anything about what memory is recommended. I noticed the 1072 comes with ECC ram, is that what is recommended? Should we use ECC ram to upgrade the 1036? Or just regular memory?
by plankanater
Fri Mar 09, 2018 4:01 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 in CCR duplex mismatch
Replies: 1
Views: 390

Re: S+RJ10 in CCR duplex mismatch

Response from support Hello, You should enable Rx Flow Control on SFP+ ports where S+RJ10 modules are inserted to prevent packet overflow because on the host side CCR1036 and S+RJ10 establishes 10G link but the module itself can also negotiate lower link speeds as 5G, 2.5G, 1G, 100M, 10M. I will tes...
by plankanater
Thu Mar 08, 2018 10:43 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 in CCR duplex mismatch
Replies: 1
Views: 390

S+RJ10 in CCR duplex mismatch

I have a S+RJ10 in a CCR1036-8G-2S+ it is linking to a 2.5G metro link. The metro link registers 2.5G on the Ethernet port but the CCR says 10G under interface and status. Traffic is also sporadic and acts like there is a duplex mismatch.
by plankanater
Mon Jan 22, 2018 11:29 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ BGP Locking Up
Replies: 11
Views: 1808

Re: CCR1072-1G-8S+ BGP Locking Up

We run BGP with about 4 peers at each router. Has been some what stable. Issue is I can not afford the downtime to reboot every new firmware that comes out. Plus with the frequency of releases I would not have a long enough up-time for the issue to repeat itself. Every support ticket we open gets hi...
by plankanater
Mon Jan 15, 2018 5:00 am
Forum: RouterOS v7
Topic: anyone notice there is a bugs on OSPF?
Replies: 3
Views: 903

Re: anyone notice there is a bugs on OSPF?

What OSPF bugs are there? Can you post a link?

This is one I posted about a while ago. Not huge, just causes me to not be able to have the same IP at different routers. Was told would be fixed in version 7.
viewtopic.php?f=14&t=113706
by plankanater
Thu Jan 04, 2018 4:07 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ BGP Locking Up
Replies: 11
Views: 1808

Re: CCR1072-1G-8S+ BGP Locking Up

Pausing the Queue has the same effect. Looks like it hiccups all forwarding traffic for a brief moment.
by plankanater
Wed Jan 03, 2018 5:45 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ BGP Locking Up
Replies: 11
Views: 1808

Re: CCR1072-1G-8S+ BGP Locking Up

It looks like removing queues causes traffic through the router to take a hit. Tested on a different router and when removing a 300M queue, traffic went from 300M down to about 20M then back up to 350M
by plankanater
Tue Jan 02, 2018 11:05 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ BGP Locking Up
Replies: 11
Views: 1808

Re: CCR1072-1G-8S+ BGP Locking Up

So, it has been running smooth for quite a while on 6.40.4. Then today I went in and removed a simple queue that was put in place for a DDoS attack. As soon as it removed the rule I was kicked out of the winbox and all OSPF neighbors dropped and router did not renegotiate OSPF until the router was w...
by plankanater
Sat Dec 09, 2017 2:23 pm
Forum: Forwarding Protocols
Topic: Blocking Private ASN inbound
Replies: 7
Views: 889

Re: Blocking Private ASN inbound

I want it to drop the private as anywhere in line.

So should it be more like this

add action=discard bgp-as-path="^_(6451[2-9]|645[2-9][0-9]|64[6-9][0-9]{2}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])_*" chain=XO_In
by plankanater
Fri Dec 08, 2017 6:20 pm
Forum: Forwarding Protocols
Topic: Blocking Private ASN inbound
Replies: 7
Views: 889

Re: Blocking Private ASN inbound

So i changed the rule to add action=discard bgp-as-path="^(6451[2-9]|645[2-9][0-9]|64[6-9][0-9]{2}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])_*" chain=XO_In It is still letting the route in but just dropping the private as off of the as path 0 ADb dst-address=191.243.72.0/24 gateway=70.34.190.113 gate...
by plankanater
Fri Dec 08, 2017 5:56 pm
Forum: Forwarding Protocols
Topic: Blocking Private ASN inbound
Replies: 7
Views: 889

Re: Blocking Private ASN inbound

So this is the rule I have entered in. add action=discard bgp-as-path="^(6451[2-9]|645[2-9][0-9]|64[6-9][0-9]{2}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]).*" chain=XO_In But is still seems to be letting some things in, for example 0 ADb dst-address=191.243.72.0/24 gateway=207.238.201.5 gateway-status...
by plankanater
Wed Dec 06, 2017 11:46 pm
Forum: Forwarding Protocols
Topic: Blocking Private ASN inbound
Replies: 7
Views: 889

Re: Blocking Private ASN inbound

How would I write the 4-byte ASNs in regular expression?
by plankanater
Thu Nov 30, 2017 6:25 pm
Forum: Forwarding Protocols
Topic: Blocking Private ASN inbound
Replies: 7
Views: 889

Blocking Private ASN inbound

Is there a way in filters to block all private ASN (64512 to 65535) inbound?
by plankanater
Tue Nov 28, 2017 10:31 pm
Forum: General
Topic: Traffic Flow - Setup Help
Replies: 0
Views: 178

Traffic Flow - Setup Help

I am setting up Traffic Flow. All the walk-through's say to enable it on all ports, but will this duplicate the traffic going through the router in the forward chain?

I have tried it on all and on just the up-link ports but did not see any major difference in traffic.

Thanks.
by plankanater
Mon Oct 09, 2017 4:05 am
Forum: SwOS
Topic: Cannot Change Password on V2.5 on CSS106
Replies: 11
Views: 1488

Re: Cannot Change Password on V2.5 on CSS106

Mikrotik knows about the issue. I opened a support ticket and their answer is to downgrade. If that is their answer I stunned as to why they have not pulled the 2.5 firmware file.
by plankanater
Mon Oct 09, 2017 4:02 am
Forum: Beginner Basics
Topic: Xbox One DMZ?
Replies: 7
Views: 1734

Re: Xbox One DMZ?

Setting up UPNP always fixes the strict nat settings for me.
by plankanater
Mon Oct 09, 2017 3:57 am
Forum: General
Topic: CCR 0.3%+ packet loss whenever above 5% CPU
Replies: 26
Views: 3264

Re: CCR 0.3%+ packet loss whenever above 5% CPU

What router model and what ports are you using? From your video it looked like a 1072. You are not using the Ethernet port are you? If you are viewtopic.php?f=3&t=125361
by plankanater
Mon Oct 09, 2017 3:53 am
Forum: Beginner Basics
Topic: Here is my last attempt - RB3011 - No Server outbound connection
Replies: 20
Views: 1683

Re: Here is my last attempt - RB3011 - No Server outbound connection

The module will work. The reason they are all telling you to plug into ether 1 is because the quickset and default configs, configure ether 1 as the WAN port. Use the SFP port as you LAN not WAN then you can use Quickset. That would be the simplest setup. You can make the SFP a WAN port but there is...
by plankanater
Sun Oct 08, 2017 5:58 am
Forum: The Dude
Topic: Feature Request
Replies: 1
Views: 542

Feature Request

Bring back Dude web page. And allow ability to give different users access to different network maps.
by plankanater
Fri Oct 06, 2017 4:40 pm
Forum: Announcements
Topic: SwOS version 2.5 released!
Replies: 34
Views: 11352

Re: SwOS version 2.5 released!

Yeah, I know that works but I am not sure why they would leave a firmware posted with such a major bug that they are aware of. At least without posting the 2.4 firmware online with instructions to upgrade to that first.
by plankanater
Mon Oct 02, 2017 5:03 pm
Forum: Announcements
Topic: SwOS version 2.5 released!
Replies: 34
Views: 11352

Re: SwOS version 2.5 released!

Can we get a fix for the password issue or can you post 2.4 back online. It has made it so I can not roll out any new switches.
by plankanater
Mon Oct 02, 2017 5:01 pm
Forum: SwOS
Topic: Cannot Change Password on V2.5 on CSS106
Replies: 11
Views: 1488

Re: Cannot Change Password on V2.5 on CSS106

So it seems to learn the password when you change it.

Because changing the password makes you put in the old password.

But you are able to log in without a password.
by plankanater
Mon Oct 02, 2017 4:28 pm
Forum: Forwarding Protocols
Topic: CCR1072-1G-8S+ BGP Locking Up
Replies: 11
Views: 1808

Re: CCR1072-1G-8S+ BGP Locking Up

Mine looks like total lockups. I am running on 6.40.1 and it has not locked up yet. Being a core router its hard to justify rebooting cores every 2 weeks for firmware.
by plankanater
Fri Sep 08, 2017 3:51 pm
Forum: RouterBOARD hardware
Topic: CCR 1072 Faulty Ether1
Replies: 4
Views: 1039

Re: CCR 1072 Faulty Ether1

Response from Mikrotik Hello, Please check the block diagram: https://i.mt.lv/routerboard/files/CCR1072-150831130622.png ether1 is connected to a PCIe controller and it was designed that way since ether1 was only intended to be used as a management port. rx-overflow counter is increasing when you ha...
by plankanater
Thu Sep 07, 2017 10:34 pm
Forum: RouterBOARD hardware
Topic: CCR 1072 Faulty Ether1
Replies: 4
Views: 1039

Re: CCR 1072 Faulty Ether1

One thing I have also noticed is that Fast Path counters are counting on all ports but the Ether1 on the CCR1072
by plankanater
Thu Sep 07, 2017 10:33 pm
Forum: RouterBOARD hardware
Topic: CCR 1072 Faulty Ether1
Replies: 4
Views: 1039

CCR 1072 Faulty Ether1

I have 3 different CCR1072 all of them are getting RX overflow and RX control counters accumulating and all have .5% packet loss on the circuit. All the routers are moving under 300M on the ether1. No other ports in any of my other Cloud Cores or Routers have the RX overflow accumulating. Are the Et...
by plankanater
Thu Sep 07, 2017 12:11 am
Forum: RouterBOARD hardware
Topic: CCR1072 Showing 1Gps in Winbox but 100M in Terminal
Replies: 0
Views: 316

CCR1072 Showing 1Gps in Winbox but 100M in Terminal

Below is a photo and the terminal command "interface Ethernet print detail" Winbox says 1gig - Airfiber says 1000M moving 120Megs of traffic. We are noticing a lot of RX overflow packets. I think this is a result of the mikrotik thinking the link is 100M Any Advice? 0 R name="ether 1 - Air Fiber" de...