MikroTik

Maggiore81

Hello
but FASTTRACK works with a "change MSS" in the ppp profile?

Maggiore81

Absolutely yes! You should do a single bridge and put VLAN there, otherwhise they are via CPU! Attaching the VLAN to the phisical port is an old-way procedure that has been replaced by the single bridge! https://help.mikrotik.com/docs/spaces/ROS/pages/30474317/CRS3xx+CRS5xx+CCR2116+CCR2216+switch+ch...

Maggiore81

In the past happened to me on two CCRs, the password were reset to blank.

It was a failing flash drive.

Maggiore81

Are you using the single-bridge configuration to benefit from l3-hw?
can you post your config?

Maggiore81

Hello
My mail is admin at spadhausen dot com
I dont know how PM here works.

Maggiore81

1. Install Mikrotik CHR on a PROXMOX server with an Intel Xeon CPU E5-2699C v4 (88 cores) that I already own. I'm open to exploring other solutions as well. Your advice and recommendations would be greatly appreciated. Thanks in advance! That CPU is 22 core, dont confuse cores with threads. I sugge...

Maggiore81

Hello I have made some test with iperf3 and if we send from the 2.5G to the 10G port, to another unit with 10G port and the flow is with up/down, as buffer full, buffer empty and so on. If I keep the uplink port to 2.5g the stream is linear and without up/down. I will try to explain my question: The...

Maggiore81

thank you for your answer.
however my question is now:

if we keep switched ports to the same speed, and have another port ROUTING, we should avoid the issue?

Maggiore81

Hello CRS310 8G+ with 7.16.1 A single bridge with all the ports on it. Uplink port 10G all the ports to servers with 2.5G (each server has 2x2.5) I have tried configuring the bond to LACP, I am not able to saturate the uplink. There is an evident buffer issue. Peak speed, low speed, peak speed, low ...

Maggiore81

I assume yes
viewtopic.php?p=1109373#p1109373

Maggiore81

we have 2x 3mt DAC from mikrotik
1x GPON SFP+ from zyxel 2.5G
nothing else

I dont know if it uses that bus.
maybe the situation described here?

viewtopic.php?t=186200

Should I change kind of RB? Maybe a 1036 or 1009?

Maggiore81

the very same even with the latest version beta

no activity on the router, really idle

Maggiore81

when a customer cancel the contract with us, we unmount the devices and the link from their house.

Maggiore81

Hello CCR2004 16S+ with 7.16.1 installed into a data center with 20° C suddenly appeared the blu lines in the logs. the router doesnt even open console terminal box. cpu at 0% no snmp daemon on it. just a idle router at the moment... no services exposed to the internet. just a plain l2tp to the rout...

Maggiore81

Yes
I receive from the sfpplus2 some q-q

A VLAN (the first list of vlans in the configuration) attached to the interfaces.
then I add a second VLAN (inner vlan) , attached to the first vlan (attached to the interfaces)
then i bridge together only the inner vlans!

Maggiore81

Thank you for your reply. I have a phisical port towards the carrier that is giving me the VLANs. So the PVID could be anything. I will try to add all the VLANs, but wich one? The OUTER vlans, or the inner? I could avoid the isolation, it is not necessary. The issue will be... how to have a single b...

Maggiore81

sfpplus 1 (WAN) sfpplus2 towards provider /interface vlan add comment=MIR interface=sfp-sfpplus2 name=2492_service_COS0_100 vlan-id=\ 2492 add interface=sfp-sfpplus2 name=4029_service_COS0_100 vlan-id=4029 add interface=sfp-sfpplus2 name=4030_service_COS0_100 vlan-id=4030 add interface=sfp-sfpplus2 ...

Maggiore81

https://help.mikrotik.com/docs/spaces/ROS/pages/28606465/Bridge+VLAN+Table check this out. Here you create L2 q-in-q, then just add /interface/vlan ontop of bridge (not bridge existing vlan interfaces as this is a described misconfiguration https://help.mikrotik.com/docs/spaces/ROS/pages/19136718/L...

Maggiore81

hello! We use a CCR2116 with ROS 7.15.3 and we accentrate there a bunch of VLAN from a carrier. We use the VLAN in the old way, attached to the interfaces. We have SFPPLUS3: vlan tag 8000 (outer) then we have VLAN 10 (inner), 11, 12 ,13 and so on, inner VLANS. We then create a bridge and we bridge t...

Maggiore81

hello CRS326 and 7.15.3 the l3-hw works perfectly, both v4 and v6. I have a question: the switch rules works fine for ipv4 but I am not able to have it working for v6. If I set a v6 address or class, the rule dont work and the v6 traffic is not flowing. are there any sections in the docs that I need...

Maggiore81

You wrote NO DETAILS about the configuration.
no export of the conf
no routeros version
no basic diagram of the network

how do you think we can help you?
We are not wizards.

Really man... not to be rude, but what are you expecting from your post?

Maggiore81

It is an upcoming product.
the info are detailed in the PDF.

Maggiore81

viewtopic.php?t=211715 as written in the last post, it works.

Maggiore81

I tried today again, it worked:

if (bgp-path-len > 2 ) { reject; }

Maggiore81

Hello I would like to use a CRS317 to do L3-HW of a partial/filtered FRT table. My idea is to receive the whole FRT and fine a way to filter all the routes that has an AS PATH bigger than 2. In the ROS 6 the route was not even listed in the ip route list... but in the v7 we see them with the I flag....

Maggiore81

Hello
I have seen that page, but it is set as "Only Readable Properties"

could provide me with an example?

"if (bgp-path-len in 3-50) { reject; }"
then and accept rule ?

I tried both the if... and the other method:

if (bgp-path-len < 2 ) { reject; }

but it doesnt work

Maggiore81

Hello
I have seen that page, but it is set as "Only Readable Properties"

could provide me with an example?

"if (bgp-path-len in 3-50) { reject; }"
then and accept rule ?

I tried both the if... and the other method:

if (bgp-path-len < 2 ) { reject; }

but it doesnt work

Maggiore81

Hello a quick question: I have a router that receives the FRT I would like to limit the number of prefix to receive. I would like to ignore all the prefix with an AS PATH higher than 2 so I can leave the rest to the default route. I have found this post: https://forum.mikrotik.com/viewtopic.php?t=19...

Maggiore81

It means that you've maxed out the L3 HW-offload memory, and any packets destined for routes that aren't in the ASIC will be routed by the CPU like any other CCR or RB device. That should be the expected behaviour. If we have CCR2116 with 2/3 FRT, we could keep the l3-hw offload ON so we can benefi...

Maggiore81

Hello any real experiences of CCR1009 with 7.15.3 (or similar v7) and its handling of 3x FRT? The v7 is optimized for multi-core BGP. Assuming we use the affinity to default (I have seen on 1036 and it creates separate BGP processes for each peer, and I didnt have the need to set manually the settin...

Maggiore81

you could add some extra fans in the switch, making a custom modification.

Maggiore81

My final solution is:
UDP timeout to 30
set a static DHCP lease to ATA device or SIP Phone, set netwatch to ping it every 5 sec.
Issue disappeared. The issue seems to be related to the ARP entries getting removed automatically (since the default lifetime is 30sec).

Maggiore81

:put ([/interface ethernet monitor ether1 once as-value]->"rate")

can you give me a more detailed hint ?

Maggiore81

Hello I have a question: I have on some devices the issue that sometimes, when there is a storm or other events, that the eth ports flaps and goes from 1G to 100M. What can I run as a script or similar every xx minutes that checks a specific port? in the event that ports is at 100M it can do some th...

Maggiore81

/system/resources/usb/print

Does the device show up there?

No, 0.
I think the PCIe card died...
I will try next week to disassemble another one and replace the card to see if it is the card. So I can order one separately.

Maggiore81

No logs after reboot. The internal LTE card seem disappeared. I have taken another WAP and it sees the LTE PCIe card.
Tried downgrading, upgrading etc, no issue. I have opened the unit the card is nicely warm, everything is connected there... maybe the card just died ?

Maggiore81

Hello I dont know if it is related. I have a WAP R LTE kit. working flawlessy with 7.14.3 I upgrade to 7.15.3 the interface appears RED INVALID I downgraded to 7.14.3 - the interface just disappears. I upgraded to the latest 7.16rc1 the interface LTE is invalid RED. The sim card works on a mobile ph...

Maggiore81

this is a non-problem. Being a trainer, not sure why the facts are not good enough??? What the heck is operator vlan, like making up new terms to confuse people............... If your fishing for personal opinions. One bridge all vlans, WAN not on bridge, vlan for WAN is separate from other vlans. ...

Maggiore81

Hello Quick question: we have for example an Hap AC2 with switch chip. Wich is better: a) VLAN created on ethernet port (ETH1) as a WAN device. DHCP-client on it to receive the IP from the ISP. eth 2-3-4-5+wifi as a single bridge for LAN part. NAT Masquerade and so on, as a home router. Fasttrack et...

Maggiore81

There is nothing stopped being supported. It most likely is (on a hAP ac2) the exhaustion of flash space that corrupted the configuration. Sorry. No. > system resource/print uptime: 11h50m4s version: 7.15.1 (stable) build-time: 2024-06-07 12:49:11 factory-software: 6.44 free-memory: 62.7MiB total-m...

Maggiore81

They disappeared also on the CLI. The Hap AC2 is installed from netinstall to 7.15 - no wireless package installed, just the ROS 7. We use tens of these routers as CPE on customers's site. We install then in dual-wan setup using BGP with no issue. FASTPATH and no other particular settings. They work...

Maggiore81

It was a CPE at a customer site. eth1 FTTH, eth2 FWA, eth5 - customer CPE with a /30

Maggiore81

Upgraded from 7.15 to 7.15.1 (Hap aC2) - disappeared routing filters + bgp peers !!!!

Maggiore81

ax^3 works fine, single disconnections I see in the logs is related to the device which is the 5 floors away and signal is -86/-90 - so, it is expected.

Ax3, have problem wi-fi, always disconnected

skrin.png

greetings, from Chisinau too :-)

Maggiore81

We used successfully, option 43 works perfectly

Maggiore81

Reduce the established to 1h, and increase the udp from 10 to 30 sec

That should remove the issue.
It is no sense nowadays to have 1d established timer.

I would also disable loose tracking, we had only issues with that!

Maggiore81

Hello.
I dont have CRS518, but everywhere where I need stability, I have 7.13.5
stable for us in BGP, firewall, l3-hw, with 0 issues.

Maggiore81

Hello does anyone here experience in installing an IRC eggdrop in a contiainer on a MT router? I have a 4011 (with lacks of external storge) to make some test. I have no pratical experience in installing docker... are there any real concrete aspect to consider? (I have read the whole docs before pos...

Maggiore81

I also think that the 7.13.5 (till now) it is the more stable for us.
I woule love that MT gets this branch for the longterm... maybe we can see 7.13.6 with more bugfixes.

Maggiore81

At least a full conf, with hide sensitive...
A diagram...

Maggiore81

we are NOT magicians.
what do we understand from your short post?
nothing.
Be more verbose and we might help.

Maggiore81

Any ideas? Do I have something configured incorrectly?

How can we know?
If we reverse the situation, if you were a forum user... do you have information to analyze that situation?

Where is the conf?

Maggiore81

Hello
The switching part is not an issue since it is a SWITCH.
Routing through the 3011, with v7 is an issue if you have a bridge.

Maggiore81

viewtopic.php?t=185242

Maggiore81

make a search in the forum before posting...
thank you

Maggiore81

I have a 1036 r3
I made a post but with no answer. Can someone tell me wich are the differencies ?

Maggiore81

Thank you.
As I think, single bridge on a single hw switch to keep the HW offload.
thank you for the link.

Maggiore81

Hello
I know how to implement the single-bridge way to do VLANs in Mikrotik.
I have a question:

what to do in devices as RB1100AHx2, or CCR2004-16G that have two switches onboard?

Maggiore81

Well I use cloudflare, since 7.13 it worked perfectly. now it cannot verify certificate. i tried to reimport the certificate with no avail. no trusted certificate found. I dont know how to resolve. edit: /tool fetch https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem /certificate import file-n...

Maggiore81

A lot of things are not in the docs.
Since the 7.13 I need to uncheck the checkbox to verify the certificate, otherwise no DOH works.

Maggiore81

May it be related to cpu scaling ?
what is on system routerboard settings ?

Maggiore81

In general you can migrate 1:1 if the new device has the same ports, you may need to adapt the configuration a little, but in general you can replace an old device with a new one and have the same functionality.

Maggiore81

All changes are equal, but some are more equal than others

Cit. George Orwell, "Animal Farm"

Maggiore81

Hello Since we dont know what the router do, I mean, wich is the conf, it is hard to make suggestions. I can see that with the v7 I have a superb cpu load distributions and the whole CPU of all of my CCR dropped a lot! Please post the conf or explain in detail what do you do with the router. 1.6Gbit...

Maggiore81

I think that the real issue, that no one noticed, is that the user is not using fasttrack in the nat configuration. That is the reason of high CPU load. We use HEX for 1G internet connections and the HEX can do 1g symmetric with no issue (fasttrack enabled and very simple (basic) firewall rules to k...

Maggiore81

Just my two cents on the package system in the MT units: I suggest a combined package that contains the "old way" featuring systems: dhcp ppp system security ipv6 A basic package that can do DHCP, NAT, firewall, SSH (security), IPv6 on board, and some basic tools (traceroute ip scan etc). ...

Maggiore81

I replaced the CCR with a ARM cpu router (as the 2004) and the issue disappeared.

Maggiore81

@normis are you planning to revert the modification with spaces? We have THOUSAND of MT on the network with spaces in the "system identity", and they are without backup. Don't tell me you made the mistake of installing an update in production before waiting at least 3 months in testing???...

Maggiore81

@normis are you planning to revert the modification with spaces? We have THOUSAND of MT on the network with spaces in the "system identity", and they are without backup.

Maggiore81

Enable tcp syn cookies
Disable loose tcp tracking

Maggiore81

you will avoid null connections, established connections with 0 replied byte.
enable it asap.
I have it enabled. But advice was to disable it. So I am quite confused now

Disable Loose tcp....

Maggiore81

The very first set I will disable LOOSE TCP Connection in ip firewall connection tracking Do I understand well, that it reestablishes nat entry in case of some timeoutst? That turning it off it makes it more strict for evalluating what is new connection (must have syn flag and does not match any ex...

Maggiore81

I know. But you cannot change overnight the behaviour of the system without writing in the changelog

Maggiore81

I perfectly understand your position and I generally agree.
But since it has been always allowed to have spaces, because of the modern era... it is not a nice move to CHANGE unilaterally this behaviour and have existings scripts useless.

Maggiore81

Please share the conf without sensitive informations.

The very first set I will disable LOOSE TCP Connection in ip firewall connection tracking

share the conf or we are blind and cannot help you

Maggiore81

:-D
chi sei, da che operatore?

Maggiore81

Thank you rextended
I have opened SUP-140393

Maggiore81

@rextended thank you, the issue is that we have spaces in ALL our system identities.
I have opened SUP-140393

Maggiore81

This script has issue since 7.13
viewtopic.php?p=1048250#p1048240

Maggiore81

Hello
I have partially solved with the latest 7.13.1 and this
/queue type add name=fq-codel-ethernet-default kind=fq-codel fq-codel-ecn=no
/queue interface set [find default-queue=only-hardware-queue] queue=fq-codel-ethernet-default

Maggiore81

I have issues with the backup script. I made an export then upload via FTP. 7.12.1 works, from 7.13 no. The script is described here: https://forum.mikrotik.com/viewtopic.php?p=1048251 05:00:01 system,info,account user spadadmin logged out from 100.127.255.253 via winbox 05:00:02 script,info Config ...

Maggiore81

Upgraded from 7.13 to 7.13.1 and DOH stopped working.
DoH server connection error: SSL: ssl: certificate not yet valid (6)

Time is OK. everything is OK. downgraded to 7.13 and it works

Maggiore81

Hello I am able to do switch rule to filter/ redirect to CPU some IP/ports , when using L3-HW I would like to redirect to CPU some IPv6 ports/host to manage them via RAW rules. Is it possible? I tried but I can set just the v6 HOST not the port. If I mix the v4 port/protocol and the v6 host, the res...

Maggiore81

I upgraded a CRS328 from 7.11 to 7.12 and then to 7.13
SFP flapped permanently, excessive broadcast, duplex mismatch etc...
downgraded to 7.12.1 and problem disappeared.

Maggiore81

We connected them to an external 12V power supply.
These are pics during work in progress.
I connected together the two s+rj10 to have them on and heating

Maggiore81

The real issue is when using 2x S+RJ10 :-) that is my user case. We installed 4 fans 40x40x10 one in the back two blowing on the sfp+ glued on the case one aspiring air upside (we made some holes on the case). when it is possibile I will send the pic the temperature went from 87C (sfp+) to 61 and th...

Maggiore81

What about fasttrack? We have some 1036 for our wholesale customers, with the 7.11.x on it, the average cpu is very very low (thanks to the 36 cpu), bgp on it just for about 2000 internal routes. Both v4+v6 we reach easily 4/5G with very very very very low cpu and 0 issues. I would check if fasttrac...

Maggiore81

I have read the docs, but on a CRS326 I havent any other way to use them!

Maggiore81

Hello I followed your advice and installed a 24V 40mm fan in the back , blowing air outside the case for my CRS326. The issue is that I put 2x S+RJ10 and their temperature went to 87 C and a blue line in the logs... the internal temperature was to 50+ the ambient temperature was 16 °C. what can I do...

Maggiore81

Please share the conf!

Maggiore81

Where are the results?

Maggiore81

Hello sorry to resurrect an old thread, but the question is still valid, also for me. From the ISP we got vlan (100), and then other different vlans (10,11,12,13) At the moment we use the cisco's way to handle them: vlan 100 on the sfpplus interface, vlan 10,11,12 on the vlan 100 interface. Then in ...

Maggiore81

https://mikrotik.com/product/s_ao0005
Thats an AOC. A DAC is Copper.
I also frequently make this error. :)

you are right!
I read "5m SFP+ 10Gbps Active Optics direct attach cable"

Maggiore81

Hi, Maggiore81. Can you create supout.rif files from both devices in the bad state and send them to support? Just a small note, we do not make 5m DAC cables. Could you test if these errors appear when using a different DAC? https://mikrotik.com/product/s_ao0005 I can't take the supout file, but not...

Maggiore81

[/quote]
Did you also upgrade the RouterBoard FW to 7.12.1?
[/quote]

Of course, it is part of the standard upgrade procedure.
RouterOS upgrade, upgrade routerboot, reboot. Enjoy :-)

Maggiore81

I upgraded two routers, connected together via mikrotik 5mt DAC cable. Their version was 7.11.2 1x CCR2004 16G 1x CCR1036 v3 I upgraded the first to 7.12.1 After upgrading the 2004, on the SFP port on the 1036 appeared fcs error and code error on the port. upgraded also the 1036, it was the same. do...

Maggiore81

I solved setting the wpa rekey timeout to 24h.

Maggiore81

Hello. The router is new, reset to default with no configuration, as I wrote before. Blank configuration, no firewall rules. If I make a portscan in the first state, nmap show closed port and that is fine, while shows 53 open. After I start and then stop the l2tp server, the port become open and sta...

Maggiore81

Hello Brand new router 7.11.2 reset configuration with no default configuration enabled the dns server (to have an open udp port) just assign on ip on the eth port where I am connected to. I do a port scan on UDP port 53,1701 so have a comparison. 53 is open (dns server running) 1701 is closed. I en...

Maggiore81

Hello https://mikrotik.com/product/CCR1036-8G-2Splus On the page of the 4S version writes: "The new r2 version has onboard 4GB of RAM, onboard M.2 slot, full size USB slot and dual PSU for redundancy!" On the page of the 8G-2s+ writes: "The new version of CCR1036-8G-2S+ has onboard 4G...

Maggiore81

Sometimes is better not to answer a question if you know since start that you aren't going to help. Suggesting me to shut down a service, is not the answer. For sure it is a way to secure the router, without doubt! I need to have the SSH opened, for a handful of reasons, so, since the "old"...

Maggiore81

The best protection is not to leave the service ports open to the world... Have you ever heard of (not outdated) VPNs? Hello, sorry man, but your answer seem a bit aggressive... Of course I know about VPNs, I own an ISP, I know, thanks. We use outdated VPNs to access our network (L2TP+IPsec). :-) S...

Maggiore81

Hello! I have used for years the brute force protection that was indicated on MT website, it seem to work. There are the "old" rules: https://wiki.mikrotik.com/wiki/Bruteforce_login_prevention Now I have found this new set of rules: https://help.mikrotik.com/docs/display/ROS/Bruteforce+pre...

Maggiore81

first upgrade to the latest 6.x
export the conf
run the tool profiler

if you want to optimize the cpu utilization, upgrade to v7

Maggiore81

Also with 7.11.2, the discovery don't work on bonded interfaces.
If I remove the bond, it works immediately.

Maggiore81

First you should upgrade your router,
then post your configuration without sensitive informations.

Maggiore81

@lkk what is the error?

Maggiore81

My hEX S is now hanging every two days and need to be powercycled every time. No clue on why, happened twice after the upgrade to 7.11. Very anoying since the router has been reliable pre 7.11. My configuration has not changed for over half a year. Just downgrade the unit to 7.10.2 and also downgra...

Maggiore81

Support for 2.4GHz interface for RB4011 while using the WifiWave2 package is not planned at this time. Thank you. Please keep in mind that the 4011 can perform very well in 5Ghz with the wifiwave2 package, but the lack of 2.4g is a no-go to deploy in our home customer's enveroniment. Please think a...

Maggiore81

It affects other devices as well. We were running a CCR1009 with v6 at work, bought a CCR2004 with v7 both to have a spare for that important router but also to test v7 with easy rollback (plug the old one back in), but now the CPU load is noticably higher (1.5-2x or so) even while that new router ...

Maggiore81

I know that too.
According to the docs:

"* The 2.4GHz wireless interface on the RB4011iGS+5HacQ2HnD is not compatible with the wifiwave2 package. It will not be usable with the package installed."

Maybe someone from MT can explain if there are any plans?

Maggiore81

So, is V7 definitely a bad choice for this machine ? It is not a matter of bad choice. I think we should use v7 whenever possibile to have new features, newer kernel etc. In the case of the 3011, the performance hit is noticeable. I keep v6 on my 3011, with the 3011 I have higher cpu load and also ...

Maggiore81

Hello
any known plans to have the 2.4G working on the 4011 with the wifiwave2 package?
thank you

Maggiore81

Well, my personal opinion is that there are a lot of "old" routerboards and devices can be useful these days. I have some towers with 3011, 190 users, 300Mbit simmetric fiber uplink, queues for some users, fasttrack for other ip in NAT, no-track for ip with public IPs... and the 3011 is wo...

Maggiore81

The very first step I would take, I would upgrade the router to the latest v7, so we can benefit of the missing route cache (less issues), the better kernel and a better load distribution over the cores.
You have a very old and vulnerable ROS version.

Maggiore81

We cannot give hints or advices based on nothing.
or you show us some concrete data. Cpu loads, traffic etc, or it will be difficult to advice.

Maggiore81

marketing is one aspect, reality is an other fact!

It depends! To give a better advice, we need concrete figures.
About L3-HW, I am not able to have it work on my 2116.

Maggiore81

First of all, I would use the v7 because of better cpu load distribution among cores.
For you heavy nat traffic, I would use the 1072 because of more cpu to process the nat entries.

You didnt show any figures about the current cpu load. Wich is the current installed Ros?

Maggiore81

I think you may have a sort of malaware on it if you have some scheduled tasks. you should try to enter in console and then make an export, maybe only at the scripts part, so we can have a look. You should definitely disconnect it from the network, maybe in the night, then examinate the router. remo...

Maggiore81

Did you try to upgrade to v7 ?

Maggiore81

I made a whole of tests. Now we are at 7.10.2 I tried changing the udp timeout to 30, but no avail. sometime works, sometimes no. I have upgraded yesterday a bunch of rb, with latest 6.49.x . I upgraded them since I wanted to get rid of issues of BGP connections stuck sometimes in "open sent&qu...

Maggiore81

Hello We have a number of RB that just do BGP and nothing else. For example we install a RB with the latest 6 long-term, no firewall rules, in fast-path for bgp. we deliver (for exmaple) multiple connections to our end users. eth1: WAN gpon eth2: WAN FWA eth5: to the customer routers. It happens a l...

Maggiore81

You are right! I just wrote quickly

Maggiore81

Yes, I read. It says "might not work". I just reported my experience.

Maggiore81

I tried to upgrade... upgrade file is corrupt, on three different pc

EDIT: I tried the auto-upgrade mode and if failed with 3 different PCs.
I didnt replace the exe though.

Maggiore81

please check this topic:

viewtopic.php?t=186705

Maggiore81

On CRS2xx, do you suggest keeping v6 ? We use them as plain switch to aggregate fibers... no use to put v7 on them?

Maggiore81

Hello
I have a stock of Hap AX3, brand new.
I connect as usual the lan cable from the LAN, and I cannot login
admin/nopassword is no longer accepted.
How can I login?
Did it change something in the last releases?
Onboard there is the 7.7

Maggiore81

Where is your full config and a DETAILED description of what you do with the device?
Do you think we have the wisdom to see beyond our monitors?

Maggiore81

hello I have a 4011 on 7.10.2, I checked the wiki at: https://help.mikrotik.com/docs/display/ROS/Switch+Chip+Features I would like to limit the eth3 port to 100M (leaving autoneg to 1G), so I tried to apply setting switch rule - rate, but it tells me cannt add rule, not supported on this switch any ...

Maggiore81

Try L2TP or a plain IPsec with hardware encryption, choosing a combination of settings to match the hw-capability.

Maggiore81

This issue reminds me the RDP connections that dies.
try to change the udp timeout from 10sec to 30sec and check if it helps.
we dont have any issues on ROS 7, but we changed this setting en-masse.

Maggiore81

Lo so

ma non funziona!
Se metto ALL, e cavo il bond, funziona immediatamente.
Nei router clienti è impostato su !dynamic ed è sempre funzionato.
metto all e non cambia nulla.

Maggiore81

I have tried with all.
no changes.

Maggiore81

no firewall rules on the bond interfaces

/ip neighbor discovery-settings
set discover-interface-list=!dynamic

interface list none

Maggiore81

Hello I have noticed that discovery doesn't work on bonded interfaces. I have CCR2116 with 7.9.2 and a bonding interface, hardware offloaded in bridge and the ip neighbours discovery fails to discover devices. I have tried also the sofware bond without the bridge configurations, and also doesnt work...

Maggiore81

Hello
the forum is not for tech support, for that there are many consultant!
It is your first post... please lurk on the forum first, then post the question.

It is a topic that has been widely discussed.

Maggiore81

can you explain wich part you revised?
can you post the relevant part of config, before and after, so can be usefult for the users?

Maggiore81

please export the full conf.

Maggiore81

Hello.
So the fix is only for 4011 ?
Or also for the 2004 and the hAP ac series and other ARM devices?

@strods

Maggiore81

Sorry

Maggiore81

Hello
any plans to build a Media Converter for 2.5G/10G units?

I need to sell a 2.5G FTTH, but I dont want to put a 4011... I would like to sell Hap AX2/3 with a RJ45 copper port.
Any hints do to that?
I am ok to put a 10G sfp+ to link it, but need something to convert.

Maggiore81

Hello.
So the fix is only for 4011 ?
Or also for the 2004 and the hAP ac series?

Maggiore81

Latest winbox
open logs
try to move a column (for example #) to the right, winbox crashes.

Maggiore81

The issue we have is that we have a fleet of Hap Ac1, AC2, etc with only the needed packages on them.
I am not able to upgrade any devices to v7.

On someone I managed to put the combo package, but on the 95% it says not enough space to upgrade.
how can I do ?

Maggiore81

may/10 15:33:39 interface,info ether1 link down may/10 15:33:39 interface,info ether2 link down may/10 15:33:39 interface,info ether3 link down may/10 15:33:39 interface,info ether4 link down may/10 15:33:39 interface,info ether5 link down may/10 15:33:39 interface,info ether7 link down may/10 15:33...

Maggiore81

I have upgraded my routers from 7.7 to 7.9 everything is running OK. The issue with L3-HW is still not resolved. The ticket is open since january. We wait... I have noticed that on the 4011 the CPU is now set to auto and its speed is dynamic. Maybe to reduce heat? Hi, What is the issue with l3-hw p...

Maggiore81

I have upgraded my routers from 7.7 to 7.9 everything is running OK.
The issue with L3-HW is still not resolved. The ticket is open since january.
We wait...

I have noticed that on the 4011 the CPU is now set to auto and its speed is dynamic. Maybe to reduce heat?

Maggiore81

@massinia
can you share your wireless config?

Maggiore81

I agree with you but a lot of devices (home lamps, chinese cheap devices for domotics works in WPA1 ... so I cannot drop completely WPA1.
WPA3 still gave me a lot of issues

Maggiore81

Hello
the network disappears from the devices.
I will try the 7.9rc and revert to the previous conf (with a single CFG) for both wlans (as on the HAP AC3) and I will test.

Maggiore81

Hello HAP AX3 config built from scratch everything in a bridge except eth1 this is an extract of the conf, regarding only the wave2 part. /interface wifiwave2 security add authentication-types=wpa-psk,wpa2-psk management-protection=allowed name=protetto passphrase=xxxzzzyyyy wps=push-button /interfa...

Maggiore81

@sirbryan can you share partially your config ?

I have created on a AX 3:

cfg1 for wlan1 (5ghz)
cfg2 for wlan2 (2ghz).
that is pretty default, only the DFS channels set to 10min on wlan1 and to ALL to wlan2

Maggiore81

Maggiore81 - Why do you say so? If we sum up the topic, then basically we have found out that few SFP modules are not working properly, which were working on v7.7. Rest of the issues discussed here are already known issues from previus versions, misconfiguraiton, or minor bug reports about trivial ...

Maggiore81

I have tried also with 7.7 with the SIP helper on and off.
no changes.
It appears that I have solved setting an higher udp timeout (the same issue as RDP) from 10 to 20secs.

Maggiore81

After a quick check on this topic, I see the 7.8 as an ALPHA... not a "stable" release...

Maggiore81

News on this topic?

Maggiore81

you should ask mikrotik direct via mail and then post here the info.

Maggiore81

Hello again.
The remote devices are L2 reachable, I did that on the v6 when some units become sluggish and unresponsive.
after a reset and paste of the conf, the devices were running perfect.

Maggiore81

Hello.
Unfortunately I dont always have a second box in the same L2 segment.
Do you think that a factory reset with no default could be a good action to refresh the device?

Maggiore81

Hello I remember a pratice that I had in the past in the 5.x and 6.x releases. After a lot of upgrades I was used to reset to factory default the device and then past back the configuration (previously exported compact). This was a kind of refresh of the device. I did that on the POP routers or very...

Maggiore81

@chechito: it is an excellent way to filter the router, but you need an extra device to do that, and you should have a switch that supports an high number of rules. They are stateless rules and works at wire-speed.

Maggiore81

MT is currently missing a big point. Apart from routing features present in v6 that are not available on v7... they advertise the L3-HW that is BROKEN! I have since 7.4 a support file, that is not fixed and they dindt give me any ETA for the fix. We need every one hour to stop and restart the l3-hw ...

Maggiore81

Hello I have a 2116 running smoothly. we use: sfpplus1 and sfpplus2 in a 802.3ad bonding, hardware offloaded in the bridge, working OK. sfpplus3 was a 10G interface where we have q-n-q vlans, working OK. We have the inner VLANS bridged together in a bridge, and it is correctly working NAT, firewall,...

Maggiore81

Has been removed the selection "MAKE STATIC" in DHCP Leases, with right-click menu. Now it is in the upper bar.
Please put back because it was placed in a better position.

Maggiore81

Sorry to resurrect an old thread. Do you have any updates for that?
If you want Mikrotik to check that, you have to open a support ticket to them providing all the infos.

Maggiore81

Just immediately downgrade to 6.48.6, and you will have again low cpu load.

Maggiore81

You can take a 1036 with ROS 7.x
we have lot of them and running ultra stable.

Maggiore81

Hello I have got the answer from support that they have been able to reproduce the issue, but at the moment there is no fix. the workaround is to schedule the l3-hw off and on, and to clear the arp. we have 7.6 with no drawbacks than 7.4.1 I had issues with L3HW offload with 7.6 on my BGP border CCR...

Maggiore81

Can you please produce a rough list/table of the main types of RB, and their rank about performances, then the bus bandwith, bits, and OoO execution capability? You seem very competent and I would like to learn more.

Maggiore81

I can confirm that setting UDP timeout to 20s resolves the issue. For me with Server 2019. However, the machine is not fully patched yet and I'm not sure when it is going to be.

How can you keep a running server with no patches ?

Maggiore81

Hello
you didnt provide us any info about what the router does, apart a very short description.
wich is a configuration (export with hide-sensitive)
a brief network diagram.
we dont have any info about your setup to discuss with.

tools profile
cpu resource print

Maggiore81

Hello.
Wich cable do I need to use a 100g port to 4 devices at10g with sfp+? Can someone explain the qsfp28 vables how they work? Thank you

Maggiore81

Any updates on SUP-95367 ?

Maggiore81

We still have issues on 7.6 . When we open for example the queue list, we cannot see all the queues, we need to resize and then maximize.

Maggiore81

The question is: at the moment are there any new features that are on v7, that you need now on your older devices? if not, please keep 6.48.x and the device will be OK. you could netinstall v7 to better use flash disk inside your device, to avoid issues due to low storage. If it is a older device wh...

Maggiore81

Hello It is strongly suggested to search the forum to avoid unnecessary threads. The 3011 has an issue when you use a bridge in the ports, if you use it without any bridge in the switchports, the routers goes well. The higher cpu is also because of the missing route cache. I suggest to keep the 3011...

Maggiore81

Confirm WHAT? The claim "7.7beta8 looks stable than" is not even clear. LESS stable? MORE stable? it does not tell it. i speak about my scenario i don't know yours. Well. a switch is always a switch. wich is your scenario, wich data do you have to confirm that in your scenario is going be...

Maggiore81

7.7beta8 looks stable than 7.6 on 750 gr3 as a switch.

Hello
what is the concrete data to confirm this?

Maggiore81

Hello. I have made further tests. the CRS317 with l3-hw offload enabled, since it is just a plain switch, keeps the cpu at 2-3-4 % max, even if I do bond in the standard way without puttin it into a bridge. I have tried doing the full hardware configuration, putting the three bonds in the bridge, ev...

Maggiore81

... can manage with 1% cpu load all the bond in "software". Block diagram of CRS317 says that switch-CPU interconnect is mere 3Gbps ... so if CPU won't glow, this interconnect will definitely severely limit your bond performance. Hello, sincerely I dont understand. Well, I understand your...

Maggiore81

Thank you chechito for your detailed answer. I have read carefully the docs and last night I made some tests. On the 317 I configured a single bridge, and I put inside only the "bond" interfaces. Only one get offloaded, the second bond no. I have set different PVID to avoid broadcast/multi...

Maggiore81

Yes I know.
so how can I offload multiple bonds?
I think about putting differents bond in the same bridge, then use different PVID and the same horizon
may be correct?

Maggiore81

Thank you all for your input. I have made some test on heavy used links: Basically I have created a bridge on the 2116 and put inside the bond interface. It works flawlessy, no CPU usage change. The H appears in the interface "bonding" in the bridge list. The same test did with a CRS317 I ...

Maggiore81

Hello according to docs here: https://v.ip6.io/archive/helpmt/docs/display/ROS/CRS3xx,+CRS5xx,+CCR2116,+CCR2216+switch+chip+features.html "CRS3xx, CRS5xx series switches, and CCR2116, CCR2216 routers support bridge hardware offloading with bonding interfaces. Only 802.3ad and balance-xor bondin...

Maggiore81

When you have dude running fine and you want to do backup or other activities, please STOP dude before doing them,
just put a script and STOP dude before doing operations.
In this way we stopped having corruptions and issues on dude.

Maggiore81

Hello any news as of 7.6 on 4011? if we enable the wave2 drivers, can we have standard wifi on 2.4ghz ? I used with success the hap ac3 with wave2 drivers and everything works perfect. I have 4011 in production and I cannot just make tests on 4011. anyone has 4011 and wave2 drivers? does it work cor...

Maggiore81

Hello some updates. I have seen that on heavy traffic (mixed) about 6-7Gbps, in routing, some random routes stop responding. If we do traceroute we se the packet bouncing ont he crs317 ip... stop and start again l3-hw is the solution. We have scheduled 2 daily restart (in the early morning and in th...

Maggiore81

Anyone encountered the issue with l3-hw that some routes stop being reached? The solution is to stop and start again l3-hw ?

Maggiore81

I opened the ticket with no answer from MT. It happens every 1-2 days that some routes stop working... if I traceroute to them, there is a loop at the CRS317.. The solution is that I made a script that disables L3-hw, delay 5 seconds, then turns it again ON. In this way the issue got resolved. I sch...

Maggiore81

Hello, do you have any issues with RB1100AHx2 after upgrading to 7.6 from 7.5?

No.
We have on duty 3x 1100AHx2 that were upgraded successfully with no issues.

Maggiore81

Hello.
I assumed that the reason was really the SMIPS device.
However I didnt read anywhere in the docs.

Maggiore81

Hello
I have noticed that is missing the BGP page in the hAP lite (smips) on 7.6, upgrading from 6.48.6
it is missing the bgp row in the "routing" menu.

Maggiore81

We tried v7 since 7.4 and got a really nice improvements also on older CCR. Better cpu utilization and distribution of loads.
Really nice!

Maggiore81

do you think it makes a difference whether I'm running V6 or V7 on the devices? in 2116/2216 you will no have another option than running v7 if you are asking about performance improvements, you will not have any performance improvement moving your 1072/1036 to v7 to date the only relevant motivati...

Maggiore81

Hello
wich are the differencies betweeen RC3 and final ? This night I applied the 7.6RC3 :-) on a CRS317

Maggiore81

hello I have replaced a 1072 with a CRS317 for pure routing purposes bgp v4+v6 I route about 1000 ipv4 routes and 900 ipv6. I have replaced the 1072 to the 317 to have more ports, hardware lacp, and hardware routing. no other services on it. I have seen the following. on the network, at 6 hop distan...

Maggiore81

@normis any news?

Maggiore81

Tried. No diffeewnce

Maggiore81

Did you have any answer from MT?
I too opened a similar topic that got in the dust.

Search found 657 matches