MikroTik

lashguti

Seems clear enough, but I don't see why it shouldn't work. I'll try to test it and I'm pretty sure it will be ok.

Test it on ccr, as some of the reports say ccr has this problem. Mine also is ccr1036

lashguti

I know the purpose of the tunnels. This tunnel is peering a bank, which needs public Ip on my side as a service dest., that's why dst nat is needed as intrernal server of the company sits in private pool. It worked fine for 8 years till v7 and it's very usual practice in such scenarios. Hope it's cl...

lashguti

/ip ipsec policy group add name=group2 /ip ipsec profile add enc-algorithm=3des name=profile_1 /ip ipsec peer add address=remote_peer_public_ip/32 local-address=local_peer_public_ip name=to_company_x profile=profile_1 /ip ipsec proposal set [ find default=yes ] disabled=yes enc-algorithms=aes-128-cb...

lashguti

I can tell you that /ip firewall nat add src-address=X dst-address=Y action=dst-nat to-addresses=Z is simple rule that definitely works in v7. If yours doesn't, then it's probably caused by something else in your config, but since nobody else has any idea what you might have there... simple ipsec w...

lashguti

No, you didn't share any details. You just wrote that some dstnat rule supposedly broke in v7 and it's probably somehow related to IPSec tunnel, because you mentioned it. That's all. You didn't share the dstnat rule, didn't explain how it's related to IPSec tunnel, nothing. As far as I can tell, ds...

lashguti

So something with IPSec and dstnat works for you in v6 and not in v7. You didn't share any details beyond that, so nobody can really know what's happening. And you'd like to know if it's going it change. I don't think we can tell you without knowing what exactly it is. I have shared enough details ...

lashguti

Is router faced on public network?

yes it is

lashguti

no, an exact match is required. If you know that there wont be exact matching IGP route, simply add the static blackhole route.

Will exact match be required in future releases too?
yes I fixed it with static route, then asked it here.
Can you check my other posts of today about v7 also?

lashguti

It is not a bug, v7 needs route synchronization.

Will BGP announce x.x.x.x/24 if IGP[ ospf ] has /28 /27 /29 subnets of this /24 network and synchronization on?

lashguti

Hi,

As I see the networks which are not in the ROS7 routing table do not get announced via BGP. In v6 this was no problem.
When it will be fixed in V7?

lashguti

Hi,

Upgraded my ccr1036 from v6.46.8 to v7.2.3 and I had 100% cpu on 10+ cores, after reboot it began to work normally, till reboot fast-track had no effect whether it was enabled or disabled. Load on router cpu was the same. Is it going to fix?

lashguti

Hello,

Upgraded CCR1036 v6.48.6 to v7.2.3 , ipsec tunnel was established, but incoming packets were not matching against DST_NAT rule. So the traffic was not able to pass the tunnel.
Rolled back to v6 and all is good.
Is it going to be fixed in next v7 release ?

lashguti

+1 for channel sizes

100mhz or 200mhz steps will be better, at least 500mhz steps. not all need 1gb in ptp and in PTMP ( 8 online ) for sure

lashguti

and where is LHG 60G PRO? do you have specs, photos, diagrams, something?

lashguti

Hello, Wanted to share my opinions with you. 1.To begin with easy step: will be good if we have narrower channel support for ptp and ptmp as full gigabit is not always needed and sometimes better to have more frequencies ( especially when one 2000mhz channel in 60ghz has advantage over another in te...

lashguti

Hello, I have wireless link between two routers. and it was working fine, could do bandwidth test. then I replaced rb2011 on one side with rb3011, and now when i start btest I have near 100% loss to remote router (no problem to remote link) and throughput in btest no more then 2-5mb, in this situati...

lashguti

Hello, for queuing I am marking connection first from one subnet to another( using address lists) then I mark packets according to this connection mark add action=mark-connection chain=forward comment=subnet1 new-connection-mark=subnet1_conn passthrough=no src-address-list=subnet1 add action=mark-pa...

lashguti

Hi, I have to mention that routeros 6.23 and routeros 6.32.4 both have better per core queue balancing and performance results than ROS 6.34 or 6.35, exactly same network loading, same hardware and everything the same leads us to following results for the production router queuing 38% vs <23% CPU co...

lashguti

thank you for suggestion

lashguti

Hello, I had CCR1016-12G tried Routeros 6.23, 6.30.2 and 6.33.3 with the same problem, following config: /ip firewall mangle add chain=prerouting disabled=yes dst-address=172.22.1.1 src-address=10.2.4.222 add action=mark-routing chain=prerouting disabled=yes new-routing-mark=slk passthrough=no src-a...

lashguti

I have a CCR1009-8G-1S-1S+. My question is, what interfaces can be used-for best performance, if this CCR will by used as edge router. With one Eth port as LAN and other port as WAN. Traffic 300 - 400Mbps, with routing and NAT. Thank you very much. why nobody answered your post? I think you should ...

lashguti

Have you tried a netinstall to get them back up and running. Sounds like you may have a corrupted image upload or bad flash. I pressed download&update button in winbox, If one wants to make carrier class router it should be updating without problems, it was core router, another router which was...

lashguti

after trying to upgrade our CCR every effort is useless, even after reset it's not able to boot correctly,

who is responsible of the damage ?

lashguti

ROS 6.22

L2tp Server CCR1016
L2tp client rb951-2hnd

mtu mru 1460 everything on default

having high latency inside tunnel even when it does not pass traffic,

same with ROS 6.18

Sending mail with support files to Mikrotik support

lashguti

Hello, I have hub and spoke l2tp design, from hub when I ping one of client routers with regular ip address I get 7ms ping, when pinging tunnel I am getting the same, all other spoke routers I can ping from hub with 7ms but ping tunnels with 2x 3x higher latency routeros 6.22 CCR1016(hub) and rb951-...

lashguti

if 1500 queues are on the top level (no parents) queues should be fine, also all ethernets are using all CPU cores, so if you see 100% load on one core it is something else, some other part of configuration. You should ether post whole export or send mail to support. when disable these queues cpu s...

lashguti

Is this true? I heard same thing too from some forum, 1 core per port. Means CCR1016-12G won't user core 13-16?

it is using all cores for some tasks, but for shaping seems it can not load balance

lashguti

Mikrotik??

where is fix

lashguti

Hello, I have ~1500 simple queues(like on photo attached) on my CCR1016, I see that CPU_1 is 100% loaded and speeds are awful. CCR does not share cpu amont cores when shaping when this behavior will be fixed and when will shaping load balanced among all cores, will address-list issue be fixed in 6.2...

lashguti

Testing done yet? share your results please

lashguti

sit and read it then again and again

lashguti

Nothing new. You should search forum first. http://forum.mikrotik.com/viewtopic.php?t=88642 in first place that topic is called " New problems appears 6.19 kernel failures " second in v 6.17 it works fine in 6.19 not , so it's relatively new third, you have time to give suggestions that a...

lashguti

v 6.19 CCR1016 does not show address-list values in dhcp-server lease tab, it does not show address-list parameter in CLI too if I add it in winbox it appears in winbox only (not in cli) and after restarting winbox it disappears. somehow it adds them to address-list in firewall when lease is bounded...

lashguti

Found out that, it assigns IP, address-list and rate limit fine if only I enter debugging mode: freeradius -X here is a log: Ready to process requests. rad_recv: Access-Request packet from host 149.30.11.107 port 60203, id=128, length=120 NAS-Port-Type = Ethernet NAS-Port = 2202009973 Calling-Statio...

lashguti

In order to get useful FreeRADIUS debug information with radiusd -X, you need to do the following: 1) Stop the FreeRADIUS service (service radiusd stop if you're on a RHEL based distro, not 100% sure of the Debian way to do it) 2) Use radiusd -X to start FreeRADIUS in debug mode 3) Make the DHCP re...

lashguti

Hello, if without address-list attribute my radius server can assign a client correct ip address, but when I add "Mikrotik-Address-List" attribute to mysql as shown on the photo attached it says access-rejected and it does not assign even ip address, I have included dictionary file located...

lashguti

You brought up some good points though I don't think you entirely see the point of view we are coming from in that we currently have a lot of functionality out of ROS from the get go but a lot of these features are semi broken or buggy in many cases.I agree with the Virtual Links thing even though ...

lashguti

Hello,

Is this achievable via CRS125?

example:

port group A(isolated ports 4-16) ---> promiscuous ports for that group 1 and 2,
port group B(isolated ports 17-22) ---> promiscuous ports for that group 23 and 24

lashguti

it was " ; "'s fault, which was needed at the end of each if script was called from scheduler,
if script was run directly then it worked fine without " ; "

lashguti

I achieved the script to work, but now I can't run the script from scheduler, if I place script name in scheduler it says that it runs in scheduler but it does not run in scripts menu when I place script content directly into schedulers "on event" field it works fine, script itself works w...

lashguti

Thanks for reply

I have tried that way too before I made first post:

:if($speed != "2Gbps")do={
:log info speed;
}

but it does not match

I even tried:

:tostr $speed but nothing worked

lashguti

:global speed [/interface ethernet get 1 speed]

:if($speed != 1Gbps)do={
:log info speed
}

"if" statement is not matching, if I do :put $speed , it shows correct speed

lashguti

Here is my topology: R1(l2tp-client) ----> internet -----> R2(l2tp-server) R1 pri ip:211.1.1.1 /24 R1 tunnel ip 1.1.1.1 R2 ip: 37.5.5.5/24 R2 sec ip: 4.4.4.4/24 R2 tunnel ip 1.1.1.2 I want to pass dest prefix 172.16.0.0/24 traffic which is originating from R2 through tunnel to R1 Here is mangle from...

lashguti

If you do not solve anything then sit on your place and be calm Do not put Normis and other guys next to you, they are doing well, my post is towards you two and your likes, publishing links here like chatting women,(all see his tone is hurting:) ) I can repeat it for you if you wish, and do not for...

lashguti

I am talking about a little wisp ( not classic ISP approach) little wisp with many subnets(400 + /24 to /30) it's quite bad to watch all these, it just asks you to summerize :) But ospf does not allow it if in single area, and if use many areas topology does not allow to directly connect them to are...

lashguti

Mikrotik, waiting for your respond, emailed all the needed info and scenario to support@mikrotik.com

lashguti

all routers are ROS6.15, on green segment dhcp clients obtain ip addresses from dhcp-server, on black segment they do not. all configured as in manual, if I add secondary ip addresses on dhcp-server incoming(from relay) interface it stops working even on green segment, I have problem now with black ...

lashguti

I sent support files, had latest ros, config worked well on previous versions, what else is needed

lashguti

I wrote about another problem and where is answer?

lashguti

H3G --:):) how can any company in enterprise or ISP business stand next to Cisco)) I like Mikrotik and prefer it over cisco routers for "feature rich - low cost - high bandwidth" ability. But in stability it needs to be worked on a lot, for small WISP networks OSPF is overkill, This is not...

lashguti

the same with 6.15

lashguti

EIGRP is the fastest recommended protocol in medium environments, it has backup paths precalculated and it's DUAL algorithm needs far less resources then ospf, it has summarization on any interface that's needed in our networks or we have many subnets going with updates from router to router and SPF...

lashguti

Flow control is disabled, it's local segment not remote end, link status was up all the time( R mark) it was passing traffic,
I upgraded to 6.15 let's see what happens, till now on the same hardware 6.2 worked fine for months

lashguti

Here is Ping from router 1100ahx2 to airfiber24

why is it doing so, fiber has lots resources and routeros cpu is not full too, they pass <170mb traffic

lashguti

Cisco has already opened EIGRP in 2013, when is Mikrotik going to add this protocol to routeros? using ospf is overkill and not optimal in most networks, Eigrp is the most effective protocol in the networks we are building as Wisps, It has summarization at each interface and convergence is fast, it'...

lashguti

I do not know, anybody from Mikrotik confirm, I have already changed to one ip per interface scheme

lashguti

you'd better to not make such "hurting" mistake again, understand?

lashguti

is this your sntp remake?

who needed such useless modification, and sntp unicast mode is not working, input fields are read-only

lashguti

example shown here: http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Port-level_Isolation does not match CLI commands, I checked isolated ports section, I managed to do it via GUI, it is working well, but I have question, How should I make so that router was accessible on all ports, I can only acce...

lashguti

example shown here: http://wiki.mikrotik.com/wiki/Manual:CR ... _Isolation

does not match CLI commands, I checked isolated ports section,
how should be configured switch if we want to access them on all interfaces?

lashguti

Interesting,

As I see here, it has exact same power as rb912-out, but I wonder, can I put there rpsma to connect it to Ubiquiti Titan sector?
or Can you advice another shielded high quality sector 60 or 90 degrees to pair with this AP?

Are not you planning put rb912-out in metal case?

Thanks

lashguti

Where is manual? is it ready?

lashguti

I think that rb912 in plastic is failure, would be great if Mikrotik will make shield for Ap and Antenna itself,
I placed rb912 plastic Ap on Ubiquiti Titan sector, it works great, but shielding of AP is very important( I understand that pigtails need to be shielded too)

lashguti

Janisk,

Is Mikrotik working about this issue? No one answers on email support@mikrotik.com

Not good to have such poor support

lashguti

where is promised documentation, without it crs is useless, and previous link with crs_examples needs to be updated as syntax has changed

lashguti

I am really surprised why RB912UAG-5HPnD-OUT has plastic case, when it's very important to put board in metal case, Why are not you make metal APs, RB912UAG-5HPnD-OUT is great even with plastic in the same place where Rocket M5 Titan drops rx mcs periodically to 6.5mb, but has packets loss 1-4% I th...

lashguti

We had packet loss on ports in CCR1036 with 6.5 and 6.7 as well as prerouting rules were stopping traffic passing through them,
it was enough to disable and enable them to continue working for 10-15 minutes and stop again,

we downgraded back to 6.2, everything fine

lashguti

remove src-port=53, everything else is correct, and set the same rule in input chain on public interface if you use your Mikrotik router as dns proxy too.

lashguti

yes it's configured properly, it works on interface which has 1 ip address, but when interface has several ip addresses it does not work,

I need solution for that

lashguti

Is Mikrotik doing anything about the issue I described, I am waiting for it more then a week already

lashguti

Hello, I have central router with dhcp server, and two other routers configured as relays, one is working fine and gives leases to clients from central router, second one makes requests but does not receive replies from central server. In torch on central router I see UDP src 68 to dest 67 coming fr...

lashguti

We are working on complete manual for CRS, it will be available very soon with configuration examples and description about the features. Great Sergejs, CRS125 seems pretty interesting product, please try to include DHCP snooping,IP source guard, port security and dynamic arp inspection if they are...

lashguti

Where is manual for crs125? I saw examples about simple vlans but syntax needs to be updated in this example, Where is additional instructions, there are so many tabs in routeos switch menu We need documentation, Can someone provide configuration commands needed to setup isolated private vlans? Mikr...

lashguti

add links to the manuals of these features from other manufactures, so that it is completely clear what you are talking about. If someone does not know what they mean, they don't need them, Mikrotik knows them, yes? + one feature which simply said is port isolation and in modern way it's called pri...

lashguti

Hi,

We need DHCP SNOOPING, IP SOURCE GUARD and DYNAMIC ARP INSPECTION as soon as possible

will be great if it will be included in next routeros release 6.8

Thanks

lashguti

Well, Basic L2 managed switch functionality: 1.Vlan access ports ( should be done simply by creating vlan and setting port mode to access and to make it member of this vlan) 2.Vlan trunk ports (should be done by choosing port mode to be trunk) 3.Port isolation (choose with one click) Advanced L2 swi...

lashguti

Great, there are others too))

The more we are sooner will be OLT in production

lashguti

Would be great product line I am sure)

lashguti

Hello, Would be great if Mikrotik makes PTP link Like SXT with directional low width antenna( at least 23dbi) beam and with 60 000+ pps capability. This type of link is very needed, because I have one link capable of 180mb/s but on IMIX traffic it can only do 150 and cpu hangs, We need all in one so...

lashguti

Hello, Would be great to make Routerboard with GEPON OLT functionality with at least two fixed ports or modular one, and if ONUs will be from Mikrotik too, it would be great. It's very needed in the life of high-speed internet service providing to compete with cable providers, wi-fi is not enough it...

lashguti

I read in poe datasheet on ubiquiti website that it's efficiency is around 70%, that's why I am concerned.
Poe adapter is converting 220 to 24 and it will have a loss, but 30% is too much, it looses lots of energy in solar setup + inverter loss upto 10%

lashguti

We need converting voltage for Ubiquiti APs 24 and 48v version, If we use Poe adapter when main power is cut and batteries are running on inverter then both inverter and pow adapters have loss, If you put there 750UP too it will have loss itself and I wonder RB is more efficient or Pow adapter? Ubiq...

lashguti

In general we have two kinds of situation on our towers 1. solar/wind power 2. There is 230v power possible I am concerned about backup batteries, how should we setup tower electricity that there was minimal power loss due to conversion. If we use 12v batteries then we have two choices: 1) use conve...

lashguti

Would be great if Mikrotik will make new routerboard which will have at least 8 ports and will be able to power APs. Would be nice if voltages will be selectable 24/48 from user interface as it's in Edgemax. And Very important thing that such router should not have 400mhz cpu like 750UP has, 750 UP ...

lashguti

what about 150+mb/s tcp? I achieved with SXT in lab environment with NV2

lashguti

As you see from my previous post there is more then 100mb/s with SXT G version, G versions of 711 and SXT do have much powerful cpu, no doubt, at least 3x power then SEXTANT and 100mb/s versions, if in your setup during peak throughput cpu is less then 90%-95% then cpu is not your problem, but if yo...

lashguti

quite good results, SEXTANTS have 100mb/s port and less power of cpu I think, in your situation it's quite good result, I have 3km link with nanobridge 25dbi and I have 80mb/s throughput there, clean LOS and free spectral environment, but 8 devices on 5ghz band on the same tower, how much is peak th...

lashguti

sure, I experimented with nstream and nv2 too, what I noticed was that nstream had more stability in throughput then nv2 , but it gave ~122mb/s of tcp, nv2 was jumping to ~150-160 but then was dropping to 60mb/s-90mb/s for a second and then up again, and I did not like that--- This was with default ...

lashguti

Yes it's pure TCP, not btest tcp, but actual download from one pc to another,
with Jperf same result,
this throughput screened , was there most time, range was from 145-165mb/s

upload is pure tcp ack + microsoft rdp traffic

lashguti

This is my lab setup, range 3-4m from each other , tx power=1dbm,

lashguti

Hello, I have purchased gigabit version of SXT for my ptp link, I tested it in my lab and results are quite good, I achieved 145-155mb/s real TCP download with ~4mb/s upload at the same time,( I was testing only download) cpu usage <85-90% peak; I imagine what rb800 or rb411GL will do, I will try to...

Search found 91 matches