Community discussions

Search found 197 matches

by bbs2web
Tue Aug 06, 2019 1:51 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Suggestion: Completely virtual router based on two physical routers
Replies: 81
Views: 12818

Re: Suggestion: Completely virtual router based on two physical routers

RouterOS 6.45+ sets the VRRP interface to standby when the associated parent interface is not running. Whilst this makes perfect sense for classic VRRP implementations it causes a problem with the use of VRRP in the context of this high availability implementation. The problem is that since the sync...
by bbs2web
Wed Jul 17, 2019 7:07 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 61840

Re: v6.45.1 [stable] is released!

The old API login method used CHAP (challenge authentication protocol), which requires the router to store the password in plain text. Passwords are now stored as a hash so you need to send the original password, which the router then hashes to compare to the stored password. Use API-SSL if you are ...
by bbs2web
Sat Jul 13, 2019 3:28 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 61840

Re: v6.45.1 [stable] is released!

Could someone else please check if routing crashes when viewing OSPF LSAs via Winbox or running '/routing ospf lsa print' via CLI?
by bbs2web
Sun Jul 07, 2019 2:21 am
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 61840

Re: v6.45.1 [stable] is released!

Does someone have a problem with mac telnet login via neighbours?

Won't login with any user and pass or without pass, nor admin..
Unfortunately yes, not all devices though and resetting credentials does not help...
by bbs2web
Sat Jun 22, 2019 10:41 am
Forum: Announcements
Topic: v6.44.3 [stable] is released!
Replies: 123
Views: 30221

Re: v6.44.3 [stable] is released!

We have identified an issue with IP neighbour discovery packets, specifically Cisco Discovery Packets (CDP), being transmitted when ports are members of a bridge and spanning tree has detected the port as an alternate path towards the root bridge. Whilst STP correctly disables forwarding it still tr...
by bbs2web
Wed May 22, 2019 6:45 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 68239

Re: v6.45beta [testing] is released!

*) firewall - process packets by firewall when accepted by RAW with disabled connection tracking; Please could we have a little more detail regarding this change? We use raw 'no-track' rules extensively, to avoid packet loss on core routers and filtering appears to be working. I assume this is a fi...
by bbs2web
Tue Apr 23, 2019 4:59 pm
Forum: Forwarding Protocols
Topic: First subnet of blackhole route not advertised in OSPF
Replies: 4
Views: 440

Re: First subnet of blackhole route not advertised in OSPF

Readvertise connected or static is not recommended. If running only OSPF you should define the subnet/s covering the interfaces you want to advertise and you can summarise smaller ranges by defining a summary route. A more scalable way would be to only use OSPF for the router loopback IPs and interf...
by bbs2web
Sun Apr 21, 2019 8:47 am
Forum: Forwarding Protocols
Topic: First subnet of blackhole route not advertised in OSPF
Replies: 4
Views: 440

Re: First subnet of blackhole route not advertised in OSPF

Check the LSA entries for the routes that are being advertised so understand where they originate from. Summarised routes are announced to cover smaller ones so they may be originating from other routers in your network.
by bbs2web
Thu Apr 11, 2019 1:03 am
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 108
Views: 23000

Re: IPv6 recursive nexthops via iBGP

We've been running IPv6 since September last year without issues. Multiprotocol IPv4 BGP sessions set next hop as the router's loopback IPv4 or IPv6 addresses and IPv6 is MPLS switched between routers, avoiding route lookups at each hop. Core routers don't run BGP, only IPv4 with MPLS so reconvergen...
by bbs2web
Sat Mar 23, 2019 12:38 am
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 17646

Re: v6.44.1 [stable] is released!

This is definitely an issue with 6.44.1... I unfortunately haven't had an opportunity to distil this yet but have a client's router on which this problem also occurs with a far simpler setup than our own. Presume it's related to bond interfaces, when they interface via a switch... MAC telnet broken ...
by bbs2web
Tue Mar 19, 2019 9:07 pm
Forum: Forwarding Protocols
Topic: bgp prefered route
Replies: 3
Views: 350

Re: bgp prefered route

Longer prefix match (/24) will always beat /20. Filter x.x.x.x/20 prefix length 21-24 from peer 2...
by bbs2web
Tue Mar 19, 2019 8:52 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 17646

Re: v6.44.1 [stable] is released!

6.44.1 does not make it possible to stop MikroTik neighbour discovery announcements. Winbox shows settings from 6.44 but advertisements are still broadcast and export config contradicts Winbox: #> /ip neighbor discovery-settings set discover-interface-list=!external #> /ip neighbor export /ip neighb...
by bbs2web
Tue Mar 19, 2019 2:38 am
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 17646

Re: v6.44.1 [stable] is released!

MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.

Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly.

We'll need to lab this, to provide more granular detail...
by bbs2web
Wed Mar 13, 2019 8:58 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 68239

Re: v6.45beta [testing] is released!

Would be really useful to have if then logic within DHCP. The following snippet servers no file to Snom VoIP phone, x64 EFI PXE executable to UEFI PXE devices and normal PXE binary to compatibility devices. From ISC DHCP subnet declaration: if substring(binary-to-ascii(16, 8, ":", hardware), 0, 9) =...
by bbs2web
Tue Mar 05, 2019 9:54 pm
Forum: Forwarding Protocols
Topic: Using OSPFv3 as transport for IBGP with V6 traffic
Replies: 2
Views: 277

Re: Using OSPFv3 as transport for IBGP with V6 traffic

I documented a solution to this in the following thread. RouterOS IPv6 bug pertaining to link local address generation on bridge interface was reported as having been fixed but I've retained admin mac on our routers:
viewtopic.php?f=14&t=42268&p=688490#p688490
by bbs2web
Sat Mar 02, 2019 7:58 am
Forum: Forwarding Protocols
Topic: Force single IP through one BGP
Replies: 1
Views: 258

Re: Force single IP through one BGP

You can't do this with hop-by-hop routing and either need a tunnel interface or use MPLS to switch traffic to the appropriate PE, elected by the ingress PE in to the MPLS cloud.

IP routing rules or mangle firewall rules can be used to setup source routing...
by bbs2web
Sat Mar 02, 2019 7:54 am
Forum: Forwarding Protocols
Topic: Transit and IX problem
Replies: 5
Views: 532

Re: Transit and IX problem

Also ensure your Cogent and IX peers are associated with the same BGP instance, multiple instances are when you need totally separate BGP for isolated VRFs.
by bbs2web
Sat Mar 02, 2019 7:44 am
Forum: Forwarding Protocols
Topic: Vlans + VRRP + Multiple Public IP addresses
Replies: 9
Views: 812

Re: Vlans + VRRP + Multiple Public IP addresses

Operat0r: You may want to search these forums for the MikroTik high availability script solution, where a single VRRP interface is used to track router master status and configurations are automatically transferred between them. It generally requires switches to be used to provide uplink to both rou...
by bbs2web
Sat Mar 02, 2019 7:35 am
Forum: Forwarding Protocols
Topic: Vlans + VRRP + Multiple Public IP addresses
Replies: 9
Views: 812

Re: Vlans + VRRP + Multiple Public IP addresses

The VRRP parent interfaces also don't need to match the subnet of IPs attached to the VRRP interfaces. Documentation and training will always show them being in the same subnet but you can run /30 or even /31 on VRRP interfaces. Clients often want redundant links and infrastructure and therefore ass...
by bbs2web
Fri Mar 01, 2019 10:31 am
Forum: Forwarding Protocols
Topic: VRF Management
Replies: 5
Views: 1740

Re: VRF Management

We work with this the other way around, management via main routing table and customer traffic in VRFs. We drink our own Kool-Aid though, so our own offices have routers where our traffic is in a VRF and we subsequently didn't have access to routers from within our own network. The following rules e...
by bbs2web
Sun Feb 17, 2019 1:40 am
Forum: Forwarding Protocols
Topic: Create prefix list from learned peer routes
Replies: 7
Views: 630

Re: Create prefix list from learned peer routes

Herewith the thread with the discussion around what I believe you to be after: https://forum.mikrotik.com/viewtopic.php?f=14&p=592989 The referenced script automatically builds prefix filters for customers that we provide IP transit for, to avoid us picking up more specific prefixes via trusted peer...
by bbs2web
Tue Feb 12, 2019 9:19 pm
Forum: Forwarding Protocols
Topic: Create prefix list from learned peer routes
Replies: 7
Views: 630

Re: Create prefix list from learned peer routes

Apologies, I read your initial post again and realised that you're actually wanting to filter out customer prefixes from peers, internet exchanges and upstreams. An issue we once had was a down stream customer advertising a /20 via us and more specific /24 prefixes only on an exchange we also peer o...
by bbs2web
Tue Feb 12, 2019 12:45 am
Forum: Forwarding Protocols
Topic: Create prefix list from learned peer routes
Replies: 7
Views: 630

Re: Create prefix list from learned peer routes

This feature unfortunately does not exist, would be great if it did though. Have you logged a feature request? NB: The more people individually ask, the more likely Mikrotik will listen... Have a look at the following, appears that it may do what you're looking for: https://forum.mikrotik.com/viewto...
by bbs2web
Mon Feb 11, 2019 11:00 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 11692

Re: v6.43.12 [stable] is released!

There is a bug in this version as it does not show the routes received from the IPv6 sessions. New_terminal: /ip route print detail where received-from=Peer_X You're expecting IPv6 routes to be shown when querying IPv4 routes... Only upgraded a single router to 6.43.12 which has IPv6 BGP, receives ...
by bbs2web
Fri Feb 08, 2019 6:37 am
Forum: Forwarding Protocols
Topic: IRR Advice
Replies: 1
Views: 360

Re: IRR Advice

Internet Routing Registries provide methods via which others can retrieve information relating to how IPs, ASNs and other resources are delegated. It allows others to, for example, query who is responsible for an IP or subnet and what prefixes are authorised to be announced by what ASN. Your regiona...
by bbs2web
Wed Jan 23, 2019 1:00 am
Forum: Forwarding Protocols
Topic: VPN - MTU - Change MSS - Wiki
Replies: 2
Views: 1333

Re: VPN - MTU - Change MSS - Wiki

Windows ping command sets the ICMP payload as 1450 bytes, you would need to add 28 bytes (IP and ICMP headers) to get the Mikrotik command line equivalent (1478 bytes). Run '/ppp active print' and ensure that your sessions are actually using IPSec. We use a maximum MTU of 1379: 1500 bytes - 40 for L...
by bbs2web
Mon Jan 14, 2019 9:06 pm
Forum: Forwarding Protocols
Topic: OSPF load balancing
Replies: 8
Views: 957

Re: OSPF load balancing

We exclusively use OSPF to distribute router's loopback IPs and necessary point to point or broadcast IPs to reach the loopbacks. All customer, peer or IXP routes are distributed using iBGP route reflectors. I've detailed the structure in another post, which you can reference here: https://forum.mik...
by bbs2web
Fri Dec 07, 2018 6:12 am
Forum: Forwarding Protocols
Topic: BGP peer slow to come up after interface enabled
Replies: 3
Views: 567

Re: BGP peer slow to come up after interface enabled

You could also just adjust the OSPF interfaces to set hello as 1 second, dead timer as 10 seconds and then set the type as point-to-point.
by bbs2web
Fri Dec 07, 2018 6:10 am
Forum: Forwarding Protocols
Topic: BGP peer slow to come up after interface enabled
Replies: 3
Views: 567

Re: BGP peer slow to come up after interface enabled

Create a PPP profile which enables the peer on 'up' and disables it on 'down', then apply that profile to your VPN connection.
by bbs2web
Thu Dec 06, 2018 10:58 am
Forum: Announcements
Topic: v6.43.7 [stable] is released!
Replies: 53
Views: 11627

Re: v6.43.7 [stable] is released!

We notice no such problem after upgrading a CCR1016-12S-1S+ from 6.43.4 to 6.43.7: We access RouterOS using SSL API service. Upgraded router yesterday evening at around 9:30pm: http://i63.tinypic.com/2afg508.jpg Since upgrading from 6.43.4 to 6.43.7 on all of my MikroTik devices, API-SSL does not wo...
by bbs2web
Wed Dec 05, 2018 6:25 am
Forum: Forwarding Protocols
Topic: OSPF loses routes after days
Replies: 23
Views: 2232

Re: OSPF loses routes after days

We exclusively use OSPF to distribute router's loopback IPs and necessary point to point or broadcast IPs to reach the loopbacks. All customer, peer or IXP routes are distributed using BGP. I've detailed the structure in another post which you can reference here: https://forum.mikrotik.com/viewtopic...
by bbs2web
Mon Nov 19, 2018 11:08 pm
Forum: Forwarding Protocols
Topic: Wrong src_ip in some cases
Replies: 1
Views: 439

Re: Wrong src_ip in some cases

I always disable the SIP NAT helper modules and use STUN when the phone needs to communicate with a SIP server behind NAT:
/ip firewall service-port
set sip disabled=yes
by bbs2web
Mon Nov 19, 2018 10:59 pm
Forum: Forwarding Protocols
Topic: Redirect DNS to Local Server
Replies: 12
Views: 4998

Re: Redirect DNS to Local Server

My home MikroTik runs a permanent tunnel to our offices. DHCP configures devices to send DNS requests to the MikroTik which then either proxies the requests to Google or forwards it to our AD server. AD realm = ad.lair.co.za AD server = 192.168.1.3 /ip dns set allow-remote-requests=yes servers=8.8.8...
by bbs2web
Mon Nov 19, 2018 10:42 pm
Forum: Forwarding Protocols
Topic: MPLS FIB differente from OSPF FIB
Replies: 2
Views: 557

Re: MPLS FIB differente from OSPF FIB

Could you provide feedback after matching or reducing MPLS LDP interface hello and dead timers to be smaller or equal to OSPF timers? I've not had a re-occurance since matching my timers to that of the OSPF interfaces and assigning labels out of reserved ranges. More detail here: https://forum.mikro...
by bbs2web
Thu Oct 25, 2018 9:59 pm
Forum: Forwarding Protocols
Topic: BGP route filtering
Replies: 2
Views: 762

Re: BGP route filtering

You need to escape out $ via cli, eg:
bgp-as-path="^(111_)+(222_)+\$"
by bbs2web
Thu Oct 25, 2018 9:57 pm
Forum: Forwarding Protocols
Topic: BGP route filtering
Replies: 2
Views: 762

Re: BGP route filtering

There unfortunately isn't a + or - operator, so you need to set local preference explicitly.

/router filter add bgp-as-path="^(111_)+(222_)+$" set-bgp-local-pref=150
as111 is transit and as222 origin

"_222$"
Originated by as222

"_111_"
Transits as111
by bbs2web
Wed Oct 24, 2018 7:01 am
Forum: Forwarding Protocols
Topic: ISP BGP techniques - Building a reliable and scalable network
Replies: 0
Views: 537

ISP BGP techniques - Building a reliable and scalable network

Many micro ISPs build their networks without using freely available information from various network operator groups (NOGs). The following slides contain probably the best compact collection of techniques ISPs of any size should use to construct a reliable and scalable network. https://www.slideshar...
by bbs2web
Sun Oct 21, 2018 7:24 pm
Forum: Forwarding Protocols
Topic: BGP Prefix Count vs Route LIst load times
Replies: 2
Views: 1110

Re: BGP Prefix Count vs Route LIst load times

Are you filtering prefixes? Full public internet tables can be resource drain when: - Clearing BGP communities used within your network - Filtering IPv4 and IPv6 bogons - Filtering your own and downstream customer prefixes - Appending BGP community values, setting local preference and setting weight...
by bbs2web
Sat Oct 20, 2018 3:42 pm
Forum: Forwarding Protocols
Topic: BGP Prefix Count vs Route LIst load times
Replies: 2
Views: 1110

Re: BGP Prefix Count vs Route LIst load times

The longer load time is primarily due to the information being sent to Winbox and it dynamically updating the route display as it populates the data. Would be miles faster to snapshot and transfer the routing table data and for Winbox to subsequently display the information.
by bbs2web
Sat Oct 20, 2018 3:36 pm
Forum: Forwarding Protocols
Topic: BGP sending wrong link local nexthop
Replies: 1
Views: 486

Re: BGP sending wrong link local nexthop

There is another way to avoid the problem, which is to change the gateway address from 41.0.0.1/27 to something else, such as 41.0.0.30/27. In my humble opinion MikroTik should lookup opposite protocol IPs using the interface name directly, if the peering session's update-source is set as an interfa...
by bbs2web
Sat Oct 20, 2018 11:15 am
Forum: Forwarding Protocols
Topic: BGP sending wrong link local nexthop
Replies: 1
Views: 486

BGP sending wrong link local nexthop

We extended IPv6 to a specific router and noticed that prefixes were referencing an unreachable link local address. We transport IPv6 to remote provider edge routers via MPLS switched path (VPLS) so nexthop should be global IPv6 address of the PE's loopback interface. BGP peer could ping both IPv4 a...
by bbs2web
Sun Oct 14, 2018 11:56 am
Forum: Forwarding Protocols
Topic: ipv6 - accept redirects
Replies: 0
Views: 688

ipv6 - accept redirects

GUI and CLI are inconsistent but Wiki (https://wiki.mikrotik.com/wiki/Manual:IPv6/Settings) concurrs with CLI:
Image

Has anyone confirmed that RouterOS 6.43.2 ignored IPv6 redirects when forwarding is enabled? Possibly via Wireshark?
by bbs2web
Mon Oct 08, 2018 9:21 pm
Forum: Forwarding Protocols
Topic: BGP IPv6 route reflection
Replies: 27
Views: 4301

Re: BGP IPv6 route reflection

We got something similar to Cisco 6PE working by using route reflectors to distribute IPv6 prefixes between PE (provider edge) routers. Prefixes are originated in to iBGP using the PE router's IPv6 loopback IP and the same IP is assigned to a BGP signalled VPLS bridge interface with a /64 subnet mas...
by bbs2web
Thu Sep 27, 2018 11:53 pm
Forum: Forwarding Protocols
Topic: 1 VPLS Tunnel / multi vlan / 1 Dhcp server
Replies: 6
Views: 677

Re: 1 VPLS Tunnel / multi vlan / 1 Dhcp server

Filtering, natting and queues should be distributed, core routers should be minimalistic with aggregation functions on dedicated provide edge routers.
by bbs2web
Thu Sep 27, 2018 11:48 pm
Forum: Forwarding Protocols
Topic: Setting localpref
Replies: 2
Views: 439

Re: Setting localpref

create a route filter rule which sets the local preference and then configure the peer to apply that inbound prefix filter.
by bbs2web
Tue Sep 25, 2018 1:44 am
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 108
Views: 23000

Re: IPv6 recursive nexthops via iBGP

As you state the advertise option is not needed and was most probably only effecting a change by it flapping the IPv6 address when applying the change. Problem resurfaces if the layer 2 VPLS tunnels re-establish and automatically get removed and added to the bridge, thereby changing its MAC address....
by bbs2web
Sun Sep 23, 2018 9:37 am
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 108
Views: 23000

Re: IPv6 recursive nexthops via iBGP

My intention with this lab exercise was to find a solution to efficiently switch IPv6 packets between provider edge (PE) routers R1 and R5, through an IPv4 MPLS core, using iBGP. RouterOS 6.43.2 can not be used to recursively resolve IPv6 iBGP nexthop using OSPFv3 and running OSPFv3 without IPv6 MPL...
by bbs2web
Sun Sep 23, 2018 8:28 am
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 108
Views: 23000

Re: IPv6 recursive nexthops via iBGP

IPv6 appears extremely unreliable in the GNS3 virtual lab I put together. The following initially only worked in one direction (R1 -> R5) until I restarted R5, after which it worked in both. Added IPv6 prefix filter to the route reflector (RR1): /routing filter add chain=bgp-in address-family=ipv6 p...
by bbs2web
Sun Sep 23, 2018 6:59 am
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 108
Views: 23000

Re: IPv6 recursive nexthops via iBGP

The point is to get IPv6 ingressing at a PE switched across P routers using MPLS. You also missed the fact that I can ping R5's IPv6 loopback from R1 and vice versa, so the gateways are reachable. We then assigned IPv6 /128 loopback IPs and assigned the same IP with a /64 subnet to the VPLS bridge i...