Community discussions

MikroTik App

Search found 1323 matches

by IPANetEngineer
Sat Mar 06, 2021 12:25 am
Forum: Forwarding Protocols
Topic: Static Router with OSPF Network
Replies: 11
Views: 502

Re: Static Router with OSPF Network

What's the output of
ip route print
and
routing ospf lsa print detail
on the AS_Router ?
by IPANetEngineer
Fri Mar 05, 2021 11:42 pm
Forum: General
Topic: can't see route(s)/address for ipv6/slaac
Replies: 8
Views: 321

Re: can't see route(s)/address for ipv6/slaac

That's definitely not normal, when I issue the same command on my home or office router which are both dual stack, I get the global unicast addresses and the default route.

I would recommend downgrading to the LTS version 6.47.9 and see if the issue persists.
by IPANetEngineer
Fri Mar 05, 2021 11:34 pm
Forum: General
Topic: can't see route(s)/address for ipv6/slaac
Replies: 8
Views: 321

Re: can't see route(s)/address for ipv6/slaac

These two should get you what you need. Most of what you're looking for will be in the ipv6 menu
ip dns print
and
ipv6 address print
by IPANetEngineer
Fri Mar 05, 2021 11:05 pm
Forum: Forwarding Protocols
Topic: resolve ibgp routes recursively from ebgp? [SOLVED]
Replies: 1
Views: 101

Re: resolve ibgp routes recursively from ebgp? [SOLVED]

Recursive routing for iBGP next hops in MikroTik only works with IGPs (OSPF and RIP) and static routes.
by IPANetEngineer
Mon Mar 01, 2021 7:14 pm
Forum: Forwarding Protocols
Topic: Default Route advertisement eBGP failover
Replies: 9
Views: 509

Re: Default Route advertisement eBGP failover

Normally, you only want the default to originate at the border router where you are peering or have DIA with an upstream.

Then:

  • Default Originate (if installed) on all eBGP peerings
  • Permit it via all other eBGP peers in
by IPANetEngineer
Mon Mar 01, 2021 6:38 pm
Forum: Forwarding Protocols
Topic: Default Route advertisement eBGP failover
Replies: 9
Views: 509

Re: Default Route advertisement eBGP failover

Is this an eBGP design where every tower is a separate ASN? From reading the notes, it seems that way If so, you'll want to default originate if-installed for every ebgp peering, You also need to make sure that you have a valid and active default route for it to pick up and make sure your in and out...
by IPANetEngineer
Tue Feb 23, 2021 4:52 pm
Forum: RouterBOARD hardware
Topic: recommendation to x86 hardware?
Replies: 3
Views: 274

Re: recommendation to x86 hardware?

We've also found that in addition to higher clock speeds, the amount of cache in the CPU helps with performance. Get more if you can afford it.
by IPANetEngineer
Sat Feb 20, 2021 8:07 pm
Forum: General
Topic: 172.16.0.0/12 RFC1918 in ROS [SOLVED]
Replies: 25
Views: 1102

Re: 172.16.0.0/12 RFC1918 in ROS [SOLVED]

Probably need more details, I've used 172.16.0.0/12 without issue for years in RouterOS...what's the specific configuration giving you issues?
by IPANetEngineer
Tue Feb 16, 2021 3:38 pm
Forum: Useful user articles
Topic: Dark Mode for Winbox
Replies: 2
Views: 238

Re: Dark Mode for Winbox

This is a good idea...would like to see this.
by IPANetEngineer
Fri Feb 12, 2021 12:49 am
Forum: Forwarding Protocols
Topic: iBGP IPv6 not sending any routes from corerouter 1 to corerouter 2.
Replies: 3
Views: 276

Re: iBGP IPv6 not sending any routes from corerouter 1 to corerouter 2.

This is a known limitation of ROSv6. Recursive routing doesn't work in IPv6. This is fixed in v7, but it's still in beta.

Some notes about this are in this article:

https://stubarea51.net/2020/12/30/mikro ... spfv3-bgp/
by IPANetEngineer
Thu Feb 11, 2021 5:09 pm
Forum: RouterBOARD hardware
Topic: High CPU Load on CCR1036-8G-2S+
Replies: 1
Views: 162

Re: High CPU Load on CCR1036-8G-2S+

What are the firewall rules/config? Even one rule can make a difference if a large volume of packets hits it.
by IPANetEngineer
Thu Feb 11, 2021 5:07 pm
Forum: Forwarding Protocols
Topic: How Donot Change Community In bgp
Replies: 3
Views: 314

Re: How Donot Change Community In bgp

It would be helpful to see your configuration
by IPANetEngineer
Thu Feb 04, 2021 4:05 pm
Forum: General
Topic: Mikrotik CRSxxx STP/RSTP/MSTP block on ports.
Replies: 2
Views: 327

Re: Mikrotik CRSxxx STP/RSTP/MSTP block on ports.

Try adding

add stp-type=config

to your filter rule and then create another filter rule for TCN. This should match and only drop BPDUs and not all outbound traffic.
by IPANetEngineer
Thu Feb 04, 2021 3:46 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta4 [development] is released!
Replies: 184
Views: 23939

Re: v7.1beta4 [development] is released!

Really excited to see a REST API in this release. Thanks MT!
by IPANetEngineer
Tue Feb 02, 2021 4:28 pm
Forum: Forwarding Protocols
Topic: Juniper to MikroTik - OSPF
Replies: 1
Views: 281

Juniper to MikroTik - OSPF

Continuing the Juniper to MikroTik series. It translates MikroTik CLI into Juniper to make things easier to learn as well as build multi-vendor networks. This post that will show you basic OSPFv2 commands for config and troubleshooting in both ROS and Junos syntax. Enjoy! https://stubarea51.net/2021...
by IPANetEngineer
Thu Jan 28, 2021 9:18 am
Forum: General
Topic: Hardware choice for BGP+OSPF 1/2/10G
Replies: 4
Views: 352

Re: Hardware choice for BGP+OSPF 1/2/10G

This depends on whether you want full tables or not.

If you don't need full tables, i'd recommend a CCR1036-8G2S+ , if you are going to do full tables, a hypervisor and the CHR will give you the best performance until v7 is out as stable code.
by IPANetEngineer
Sun Jan 24, 2021 8:21 pm
Forum: Forwarding Protocols
Topic: Juniper to MikroTik - BGP
Replies: 0
Views: 252

Juniper to MikroTik - BGP

Continuing the tradition with a series that I've had out for several years now. It translates MikroTik CLI into other popular network vendors like Cisco to make things easier to learn as well as build multi-vendor networks. This time we are diving into Juniper. Here is a post that will show you basi...
by IPANetEngineer
Sun Jan 24, 2021 7:22 pm
Forum: Beginner Basics
Topic: Changing port vlan config
Replies: 4
Views: 396

Re: Changing port vlan config

You don't need to remove it from the bridge, it can be set and changed. However, if spanning tree is running on the bridge and this is a prod network, be mindful of changes that can cause the STP topology to reconverge.
by IPANetEngineer
Sun Jan 24, 2021 6:18 pm
Forum: Virtualization
Topic: Mikrotik - 10 Gbit NAT
Replies: 3
Views: 558

Re: Mikrotik - 10 Gbit NAT

I'd use the CHR for this task...easy to scale for growth as needed. As the CCR2xxx series matures and they release more models, I expect it will be a good choice as well.
by IPANetEngineer
Wed Jan 20, 2021 5:08 pm
Forum: General
Topic: Feature requests
Replies: 1302
Views: 311512

Re: Feature requests

IS-IS and Segment Routing (SR-MPLS)

Discussion is here:

viewtopic.php?f=1&t=171278&p=837339#p837339
by IPANetEngineer
Sat Jan 16, 2021 6:22 pm
Forum: General
Topic: css326 and rb4011 getting errors with 10G SFP+ uplink
Replies: 10
Views: 770

Re: css326 and rb4011 getting errors with 10G SFP+ uplink

There were problems with using the SFP+ port on the 4011 with DAC cables in the past. The issue has been fixed in RouterOS, but we still use optical connections on 4011s and have no issues.

I would change to optical and see if the FCS errors continue.
by IPANetEngineer
Sat Jan 16, 2021 4:06 pm
Forum: Beginner Basics
Topic: howto create a trunk between mikrotik & mikrotik
Replies: 2
Views: 448

Re: howto create a trunk between mikrotik & mikrotik

Here is an article I wrote to make Cisco to MikroTik VLAN trunking easier.

https://stubarea51.net/2019/02/06/cisco ... and-vlans/
by IPANetEngineer
Fri Jan 15, 2021 4:40 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

Sooooo move away from PPPoE to what exactly? We are talking 15.000 CPEs, I’m open to suggestions. Movistar, my home fibre ISP, with millions of customers, runs PPPoE... This really depends on why you want PPPoE. In 2021, PPPoE is typically deployed because you want: 1) Traffic accounting via RADIUS...
by IPANetEngineer
Thu Jan 14, 2021 5:35 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

The software quality of major network vendors like Cisco/Juniper has gone down in the last 5 years as they lean more on customers for QA.

We've been incredibly successful using the long term version of RouterOS in production networks for both enterprise and service provider.
by IPANetEngineer
Wed Jan 13, 2021 9:18 pm
Forum: Forwarding Protocols
Topic: ASN Blocking
Replies: 6
Views: 664

Re: ASN Blocking

ASN isn't a piece of information carried in the packet header - only the routing table of a BGP border router.

Do you have a border router with a full table and no default route?
by IPANetEngineer
Wed Jan 13, 2021 5:43 pm
Forum: Forwarding Protocols
Topic: ASN Blocking
Replies: 6
Views: 664

Re: ASN Blocking

If there are specific ASNs you want the list of prefixes for to then add to a FW rule, the easiest way would probably be a route-set query

https://www.arin.net/resources/manage/irr/
by IPANetEngineer
Wed Jan 13, 2021 5:10 pm
Forum: RouterBOARD hardware
Topic: SFP+ DAC cable not working with CCR2004-1G-12S+2XS & CRS326-24G-2S+RM
Replies: 2
Views: 291

Re: SFP+ DAC cable not working with CCR2004-1G-12S+2XS & CRS326-24G-2S+RM

Try setting the speed explicitly on each end to be 10G or 1G and see if that resolves the issue.
by IPANetEngineer
Wed Jan 13, 2021 4:51 pm
Forum: Beginner Basics
Topic: VLAN routing bottleneck on CRS354
Replies: 4
Views: 315

Re: VLAN routing bottleneck on CRS354

At some point in the future, you'll be able to use the CRS354 to route between VLANs without using CPU. The functionality is there in many of the CRS3xx switches in the v7 beta software. However it's not production ready yet. Capabilities are here: https://help.mikrotik.com/docs/display/ROS/CRS3xx+s...
by IPANetEngineer
Wed Jan 13, 2021 4:40 pm
Forum: General
Topic: High CPU Crs328
Replies: 4
Views: 390

Re: High CPU Crs328

What is the output of the following command?

interface bridge port print where hw-offload=yes
by IPANetEngineer
Wed Jan 13, 2021 4:31 pm
Forum: Forwarding Protocols
Topic: BGP FIRT
Replies: 2
Views: 236

Re: BGP FIRT

I would ask your provider to send you a full table + default so that you can discard the full table. However, if you decide to leak specific routes or allow the full table in the future, it doesn't require a change by the upstream provider.
by IPANetEngineer
Thu Jan 07, 2021 6:28 pm
Forum: General
Topic: Some websites unavailable on IPv6 [SOLVED]
Replies: 12
Views: 1088

Re: Some websites unavailable on IPv6 [SOLVED]

It totally stinks and that's great. I hate these broken MTU promoters. My primary uplink provider still caps MTU at 1460 on their so-called "next-gen" fibre infrastructure. Some people never graduated 1500 ethernet MTU basics. First day on the Internet with MTU? :-) His effective MTU was ...
by IPANetEngineer
Fri Jan 01, 2021 7:01 pm
Forum: RouterOS v7 BETA
Topic: Segment Routing and IS-IS
Replies: 13
Views: 1561

Segment Routing and IS-IS

Kicking off the new year to reiterate my MikroTik wish list....while there are many things i'd love to see in ROSv7, these are my top 2. 1) Segment Routing - In the service provider and data center space, MPLS is rapidly moving over to SR-MPLS because it simplifies both label exchange and traffic en...
by IPANetEngineer
Fri Jan 01, 2021 4:55 pm
Forum: General
Topic: BGP Configuration for Google Global Cache (GGC)
Replies: 3
Views: 1124

Re: BGP Configuration for Google Global Cache (GGC)

It seems to be pretty simple. Create an eBGP peering with the cache box using the ASN and IPv4/IPv6 space that Google allocates and then advertise all prefixes for customers that are normally advertised on transit peers. This is the way most content caches work. https://support.google.com/interconne...
by IPANetEngineer
Thu Dec 31, 2020 2:26 am
Forum: General
Topic: qinq - stripping outer vlan with hardware offloading
Replies: 3
Views: 372

Re: qinq - stripping outer vlan with hardware offloading

Seems like they have an example of this in the new help docs.

If i'm reading it right, you'll need a bridge set with ether-type=0x88a8

https://help.mikrotik.com/docs/display/ ... VLAN+Table
by IPANetEngineer
Wed Dec 30, 2020 11:56 pm
Forum: RouterOS v7 BETA
Topic: v7 Dynamic routing using IPv6 and OSPFv3/BGP with examples
Replies: 1
Views: 732

v7 Dynamic routing using IPv6 and OSPFv3/BGP with examples

I've been working on a lab for ROSv7 to provide examples for IPv6 config with OSPF and BGP. Details are in the blog post. Hope it's helpful! https://stubarea51.net/2020/12/30/mikrotik-routerosv7-first-look-dynamic-routing-with-ipv6-and-ospfv3-bgp/ https://stubarea51.net/wp-content/uploads/2020/10/im...
by IPANetEngineer
Wed Dec 30, 2020 6:18 pm
Forum: Forwarding Protocols
Topic: OSFP Public IP Subnet [SOLVED]
Replies: 2
Views: 469

Re: OSFP Public IP Subnet [SOLVED]

There are two different articles that I think would help you here: The first is an overview of migrating from bridged to routed for a WISP https://stubarea51.net/2019/09/15/wisp-design-migrating-from-bridged-to-routed/ The second addresses your concern of getting IPs from a /24 out to the towers. VP...
by IPANetEngineer
Mon Dec 14, 2020 5:23 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 82
Views: 15489

Re: New High Performance Routers ! ?

Large ISP often has several platforms for different workloads. They never do everything in one single platform. Even in smaller ISPs, this is how I design. Trying to fit every service into a couple of routers almost always ends up being more complex than splitting workloads out into Internet Edge, ...
by IPANetEngineer
Mon Dec 14, 2020 5:18 pm
Forum: General
Topic: Ryzen build for Routeros
Replies: 7
Views: 1532

Re: Ryzen build for Routeros

If you're going x64, go for VyOS instead of RouterOS. RouterOS doesn't have many basic features such as NPTv6, Routing Marks for IPv6 etc and the fact that RouterOS v7 has been in development for a decade if not more. VyOS is enterprise-ready (go through their documentation and confirm yourself) an...
by IPANetEngineer
Sat Dec 12, 2020 5:04 pm
Forum: Forwarding Protocols
Topic: iBGP+VPNV4 issue : routing OK but prefix unreachable
Replies: 4
Views: 410

Re: iBGP+VPNV4 issue : routing OK but prefix unreachable

Here is a blog post I wrote on MikroTik and VPNv4. In this example, the P routers are Juniper but the PEs are MikroTik and using VPNv4 The lab config is included in the article. https://stubarea51.net/wp-content/uploads/2020/01/MikroTik-to-Juniper-MPLS-and-VPNv4.png https://stubarea51.net/2020/01/22...
by IPANetEngineer
Sat Dec 12, 2020 4:59 pm
Forum: Forwarding Protocols
Topic: BGP Multihoming with load balancing
Replies: 1
Views: 334

Re: BGP Multihoming with load balancing

The very best way to do this is with communities. With only two upstreams, you may need to break your /20 into a few smaller advertisements like /21s or /22s and then use the traffic engineering communities of your upstream provider to set preferences. Technically you can do this without communities...
by IPANetEngineer
Sat Dec 12, 2020 4:38 pm
Forum: Forwarding Protocols
Topic: iBGP+VPNV4 issue : routing OK but prefix unreachable
Replies: 4
Views: 410

Re: iBGP+VPNV4 issue : routing OK but prefix unreachable

VPNv4 requires an MPLS forwarding plane for prefixes to be reachable. Do you have LDP enabled?
by IPANetEngineer
Sat Dec 12, 2020 4:35 pm
Forum: Forwarding Protocols
Topic: CCR1072 with 2 Provders BGP Full Tables
Replies: 7
Views: 944

Re: CCR1072 with 2 Provders BGP Full Tables

This really depends on what your goals are for maintaining full tables. If you want all traffic to leave via Cogent and only the traffic local to Bulgaria to be sent to the local provider, you can take a default route from Cogent and then learn the ~7000 local routes over the other provider. If you ...
by IPANetEngineer
Thu Dec 10, 2020 2:27 pm
Forum: General
Topic: L2 ring redundancy protocol support?
Replies: 16
Views: 1099

Re: L2 ring redundancy protocol support?

G.8032 is definitely the way to go....would love to see this in the CRS3xx series.
by IPANetEngineer
Thu Dec 10, 2020 2:24 pm
Forum: Forwarding Protocols
Topic: BGP Route distinguishers reversed
Replies: 4
Views: 516

Re: BGP Route distinguishers reversed

I wrote a blog article on this issue and a workaround when doing VPNv4 between MikroTik and Juniper.

https://stubarea51.net/2020/01/22/junip ... 4-interop/
by IPANetEngineer
Wed Dec 09, 2020 4:47 pm
Forum: General
Topic: Mikrotik physical connection recommendations to other products.
Replies: 2
Views: 342

Re: Mikrotik physical connection recommendations to other products.

I've done this quite a bit with MikroTik and Fortigate for Enterprise and Data Center networks. Typically I use a design that employs dynamic routing and L3 switch stacks for a few reasons 1) Failover isolation - the border routers can failover independently of the firewall pair if there is an inter...
by IPANetEngineer
Wed Dec 09, 2020 4:05 pm
Forum: General
Topic: Sending multiple VLAN's through an EVC - Configuration
Replies: 2
Views: 253

Re: Sending multiple VLAN's through an EVC - Configuration

The configuration example you need to do QinQ on a CRS3xx switch is in the MikroTik Wiki here:

https://wiki.mikrotik.com/wiki/Manual:I ... 8Q-in-Q.29

The support was added in 6.43rc13
*) crs3xx - added initial Q-in-Q hardware offloading support (CLI only)
by IPANetEngineer
Wed Dec 09, 2020 3:54 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42979

Re: v7.1beta3 [development] is released!

Hi IPANet, I am in awe of your network designs........... I don't know or think I will ever need fz-codel or cake functionality but I can guarantee you I will probably be eating cake when I read your posts demonstrating such features !! :-) Thanks for the feedback, I appreciate it :-) We'll definit...
by IPANetEngineer
Wed Dec 09, 2020 3:52 pm
Forum: Forwarding Protocols
Topic: VLAN over VPLS Link
Replies: 9
Views: 629

Re: VLAN over VPLS Link

If you want to pass all VLANs like a trunk over VPLS without specifying each VLAN, here is a blog article I wrote with config examples on how to use S-Tag for this. https://stubarea51.net/2018/08/07/mikrotik-isp-design-building-an-802-1q-trunk-between-sites-using-vpls-and-s-tag/ https://stubarea51.n...
by IPANetEngineer
Sun Dec 06, 2020 3:41 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42979

Re: v7.1beta3 [development] is released!

I am ***soo*** excited to finally see fq-codel and cake in RouterOS, this is going to be a game changer for shaping options in ISP networks.

Nice work MikroTik :)
by IPANetEngineer
Sun Nov 29, 2020 7:00 pm
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1507

Re: How is your public IP address determined?

... the fact that using stateless address assignment means everyone on the Internet knows your device's MAC address. What's so special about my tablet's MAC address that nobody should know it? This is why RFC4941 exists - Windows, Mac and Linux all support privacy extensions to obscure the MAC addr...
by IPANetEngineer
Sun Nov 29, 2020 6:47 pm
Forum: General
Topic: How is your public IP address determined?
Replies: 23
Views: 1507

Re: How is your public IP address determined?

Thank god for NAT and IPV4, not sure what disaster IPV6 will bring. ;-P IPv6 is faster than IPv4 and enables end to end connectivity. You *need* to be deploying IPv6 :-) https://www.zdnet.com/article/apple-tells-app-devs-to-use-ipv6-as-its-1-4-times-faster-than-ipv4/ We've run it in dual stack for ...
by IPANetEngineer
Sun Nov 29, 2020 6:14 pm
Forum: RouterBOARD hardware
Topic: The big CCR2004 reboot thread (was 2004 hardware issues?)
Replies: 159
Views: 15690

Re: 2004 hardware issues?

I need to upgrade the CCR2004 in my lab and see if the stability improves. We've used them for several clients but have also had some stability issues. I think this router will be amazing after a few more months of bug fixes from MikroTik. This is pretty typical of a new router release...it takes a ...
by IPANetEngineer
Sun Nov 29, 2020 4:35 pm
Forum: General
Topic: Some websites unavailable on IPv6 [SOLVED]
Replies: 12
Views: 1088

Re: Some websites unavailable on IPv6 [SOLVED]

Set your IPv6 MTU to 1280 and see if that solves the issue as there are places on the internet that are still 1280 for IPv6. If that resolves it, you can slowly raise it until things break again to understand what your effective MTU is.

https://blog.cloudflare.com/increasing-ipv6-mtu/
by IPANetEngineer
Sun Nov 29, 2020 4:28 pm
Forum: General
Topic: Redundant connection between Cisco VSS LACP and two routers
Replies: 3
Views: 552

Re: Redundant connection between Cisco VSS LACP and two routers

Why not build LACP channels from the 4500X to two different MikroTiks and connnect the MikroTik routers together via BGP?

What role do the MikroTik routers and 4500X play in this network? what are their jobs?
by IPANetEngineer
Mon Nov 23, 2020 5:51 pm
Forum: Beginner Basics
Topic: CRS 317-1G-16M+RM WITH CISCO DAC SFP-H10GB-CU3M
Replies: 4
Views: 339

Re: CRS 317-1G-16M+RM WITH CISCO DAC SFP-H10GB-CU3M

In general, MikroTik does not care about which vendor made the SFP or DAC cable. I've used Cisco DACs and SFP Optics in MikroTik without issue. I've also had a lot of success with FiberStore SFPs and DAC cables. They work well with MikroTik and Cisco. If you have issues with the DAC cable working, t...
by IPANetEngineer
Sat Nov 21, 2020 4:43 pm
Forum: General
Topic: Network architecture recommendations
Replies: 6
Views: 567

Re: Network architecture recommendations

Having designed and built hundreds of WISPs, i've got a few things to share with you that may be helpful. We typically deploy a "switch-centric" design where all connections go into a switch because it lowers operational overhead. This is similar to your first design drawing. We've scaled ...
by IPANetEngineer
Sat Nov 21, 2020 4:26 pm
Forum: RouterBOARD hardware
Topic: Enquiry on 100Gbps SFP Router
Replies: 3
Views: 549

Re: Enquiry on 100Gbps SFP Router

Earlier this year, a model number for a 100G router from MikroTik was leaked. That's about all we know. https://forum.mikrotik.com/viewtopic.php?p=819880 CCR2016-1G-12XS-2XQ is the model number which would have 2 x 100G interfaces and 12 x 25G interfaces The wiki was updated this year to reflect 100...
by IPANetEngineer
Sat Nov 14, 2020 3:38 pm
Forum: Forwarding Protocols
Topic: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)
Replies: 8
Views: 654

Re: SAME ASN 2 BGP SESSIONS (LOCAL & INTERNATIONAL TRAFFIC)

Can you share the community list for each of the peerings.?

Prepending isn't going to work if you only have one /24
by IPANetEngineer
Tue Nov 10, 2020 4:43 pm
Forum: Forwarding Protocols
Topic: Hardware FailOver with 2 CCR and BGP
Replies: 2
Views: 480

Re: Hardware FailOver with 2 CCR and BGP

Ideally, you'd push for another peering with your provider or get a second provider and peer with them. Have you asked your upstream if this is possible? I've seen many providers do this if asked by a customer. In that type of design, you'd want to build it like this: https://stubarea51.net/wp-conte...
by IPANetEngineer
Tue Nov 10, 2020 4:17 pm
Forum: Forwarding Protocols
Topic: Suggestion for routing
Replies: 2
Views: 423

Re: Suggestion for routing

It appears you are trying to build a mesh VPN where any site can reach any other site. Honestly, as much as I love MikroTik, ZeroTier is a better solution for this. https://www.zerotier.com/ If you're going to use MikroTik, I would consider using L2TP and build tunnels to/from all routers. You can b...
by IPANetEngineer
Tue Nov 10, 2020 4:12 pm
Forum: Forwarding Protocols
Topic: MPLS/VPLS and HTB / EXP bits
Replies: 15
Views: 3121

Re: MPLS/VPLS and HTB / EXP bits

Can you post details of the config?
by IPANetEngineer
Tue Oct 20, 2020 4:16 pm
Forum: Useful user articles
Topic: CCR Takes the heat
Replies: 5
Views: 4018

Re: CCR Takes the heat

Ever since I first started using MikroTik 10 years ago, I've been very impressed with how well they handle higher temperatures when a climate controlled environment is not available.
by IPANetEngineer
Tue Oct 20, 2020 3:57 pm
Forum: Forwarding Protocols
Topic: VRF and overlapped IPs
Replies: 3
Views: 453

Re: VRF and overlapped IPs

You cannot use subnets that are directly overlapped in different VRFs in RouterOS v6...this is fixed in RouterOSv7
by IPANetEngineer
Tue Oct 20, 2020 3:54 pm
Forum: Forwarding Protocols
Topic: Manage third party router through winbox
Replies: 2
Views: 278

Re: Manage third party router through winbox

You cannot use Winbox to manage an Arista device as winbox is specific to MikroTik. You can use it as a route reflector if you want though and that will give you some visibility....but is that a good fit for your network architecture? However, you can use programs like Unimus or Ansible to manage al...
by IPANetEngineer
Tue Oct 20, 2020 3:50 pm
Forum: Forwarding Protocols
Topic: Problems with ID routers in OSPF Instance
Replies: 2
Views: 370

Re: Problems with ID routers in OSPF Instance

Please post the output of the following commands

/routing ospf export

/routing ospf neighbor print detail

/routing ospf as-border-router print detail
by IPANetEngineer
Tue Oct 20, 2020 3:23 pm
Forum: General
Topic: Feature Request: IP Multicast Routing/mDNS/Zeroconf/Bonjour
Replies: 39
Views: 20945

Re: Feature Request: IP Multicast Routing/mDNS/Zeroconf/Bonjour

mDNS would be a great addition to enable things like chromecast between subnets.
by IPANetEngineer
Sat Oct 17, 2020 5:58 pm
Forum: Forwarding Protocols
Topic: OSPF2 network-type
Replies: 5
Views: 387

Re: OSPF2 network-type

That's why we normally use the ptp OSPF type on RF links and it works very well with rapid convergence.

What radios are you using that don't support multicast?
by IPANetEngineer
Sat Oct 17, 2020 4:55 pm
Forum: RouterBOARD hardware
Topic: CCR2004 packet loss
Replies: 86
Views: 8209

Re: CCR2004 packet loss

Have you tried changing the interface queues for both ports from hardware-only to ethernet-default ? You need buffering when mixing interface speeds on any router and i'm not sure what the default buffer capabilities are for the CCR2004. I would at least try a few different queue types for the inter...
by IPANetEngineer
Sat Oct 17, 2020 4:39 pm
Forum: General
Topic: Rookie Error - Lost management access while attempting to set up blackhole routing [SOLVED]
Replies: 7
Views: 493

Re: Rookie Error - Lost management access while attempting to set up blackhole routing [SOLVED]

If you can plug into it locally, use mac-telnet with winbox which will bypass all L3 and login to the router
by IPANetEngineer
Sat Oct 17, 2020 4:22 pm
Forum: Scripting
Topic: Syntax highlighting for Notepad++
Replies: 18
Views: 14197

Re: Syntax highlighting for Notepad++

same problem as well
by IPANetEngineer
Fri Oct 16, 2020 5:12 pm
Forum: RouterOS v7 BETA
Topic: CAPsMAN2 maybe we can have NETsMAN in the future
Replies: 1
Views: 638

Re: CAPsMAN2 maybe we can have NETsMAN in the future

It seems like this would be a natural extension of the DUDE. I would love to see NETCONF capabilities to standardize with the rest of the networking industry.
by IPANetEngineer
Fri Oct 16, 2020 5:10 pm
Forum: Forwarding Protocols
Topic: OSPF2 network-type
Replies: 5
Views: 387

Re: OSPF2 network-type

I'm curious, what is the intent behind not wanting DR/BDR?

You might consider eBGP for RF links. It converges pretty fast and doesn't require multicast
by IPANetEngineer
Thu Oct 15, 2020 11:52 pm
Forum: RouterBOARD hardware
Topic: CCR2004 packet loss
Replies: 86
Views: 8209

Re: CCR2004 packet loss

What's the lowest throughput (on the 1G) you've seen the packet loss?
by IPANetEngineer
Thu Oct 15, 2020 10:12 pm
Forum: Beginner Basics
Topic: Using hAP lite as a dumb WISP device? [SOLVED]
Replies: 7
Views: 534

Re: Using hAP lite as a dumb WISP device? [SOLVED]

Depending on the type of wireless device you're connecting to, you need to verify the station type under your wireless interface settings. station-bridge is ideal if the other router is a MikroTik. Otherwise you can try station-pseudobridge, but you'll have some limits outside of IPv4 traffic. If it...
by IPANetEngineer
Thu Oct 15, 2020 4:38 pm
Forum: Beginner Basics
Topic: Using hAP lite as a dumb WISP device? [SOLVED]
Replies: 7
Views: 534

Re: Using hAP lite as a dumb WISP device? [SOLVED]

If i'm understanding what you're trying to do, all you really need is to bridge the wireless interface on the hAP lite to the physical ports the security devices are plugged into. That will extend the RFC1918 network in the home router through to those devices. 1. under 'bridge' add a new bridge usi...
by IPANetEngineer
Thu Oct 15, 2020 4:30 pm
Forum: RouterBOARD hardware
Topic: CCR2004 packet loss
Replies: 86
Views: 8209

Re: CCR2004 packet loss

We have mainly packet loss pinging from the remote end to ccr2004 gigabit interface, the problem probably occurs when the upstream traffic from the 10G->1G fullfill the ethernet..

So does the packet loss only occur when the 1G interface is full?
by IPANetEngineer
Thu Oct 15, 2020 4:18 pm
Forum: Forwarding Protocols
Topic: Default Route forwarding via eBGP
Replies: 4
Views: 381

Re: Default Route forwarding via eBGP

Yes, you'll need to enable default-originate (if installed) on all peerings in this type of design. I would use BGP communities to set either weight or localpref I did a presentation a few years ago on this type of design at the US MUM in Denver. Here is an overview of the way we used communities. e...
by IPANetEngineer
Tue Oct 13, 2020 5:38 pm
Forum: Forwarding Protocols
Topic: Graceful restart
Replies: 7
Views: 3209

Re: Graceful restart

This is great news...have been waiting for this feature for a while.
by IPANetEngineer
Tue Oct 13, 2020 3:18 pm
Forum: RouterOS v7 BETA
Topic: CRS 3xx - L3 ASIC performance testing
Replies: 30
Views: 3154

Re: CRS 3xx - L3 ASIC performance testing

Thanks for the feedback...i'll check the hypervisor and see if it's creating a bottleneck somewhere.
by IPANetEngineer
Mon Oct 12, 2020 8:40 pm
Forum: RouterOS v7 BETA
Topic: CRS 3xx - L3 ASIC performance testing
Replies: 30
Views: 3154

CRS 3xx - L3 ASIC performance testing

Did some work on testing the L3 performance last week in 7.1beta2 and published it today.

https://stubarea51.net/2020/10/12/mikro ... e-testing/

Image
by IPANetEngineer
Mon Oct 12, 2020 3:55 pm
Forum: General
Topic: L2 Design for PPPOE Service Delivery
Replies: 2
Views: 253

Re: L2 Design for PPPOE Service Delivery

I would build a highly available BRAS for PPPoE and use x86 +CHR. We wrote an article on how to design it

https://stubarea51.net/2018/04/23/pppoe ... atorsbras/

Image
by IPANetEngineer
Sun Oct 11, 2020 4:10 pm
Forum: RouterBOARD hardware
Topic: need inquiry
Replies: 2
Views: 356

Re: need inquiry

Either an RB4011 or a CCR1009 will handle this task easily.
by IPANetEngineer
Sat Oct 10, 2020 5:55 pm
Forum: Forwarding Protocols
Topic: Routing Advices
Replies: 7
Views: 689

Re: Routing Advices

While you can create a bridge and tunnel as others have said, honestly ZeroTier is the easiest way to do this and has the best performance Just install it on each computer and they'll be connected with great performance and none of the typical issues that come with L2 extensions. https://www.zerotie...
by IPANetEngineer
Fri Oct 09, 2020 4:40 pm
Forum: General
Topic: ECMP balancing sometimes breaks TCP connection
Replies: 9
Views: 602

Re: ECMP balancing sometimes breaks TCP connection

Just curious, what application are these servers hosting? It seems like an application load balancer would be a better tool than ECMP in routing since you're expecting TCP sessions from a specific source to stay with the server they hit.

This is the exact problem a load balancer solves :-)
by IPANetEngineer
Fri Oct 09, 2020 3:39 pm
Forum: Virtualization
Topic: DHCP on CHR not working with ESX
Replies: 2
Views: 279

Re: DHCP on CHR not working with ESX

Check the security settings on the ESXI VSWITCH and make sure they are as permissive as possible.
by IPANetEngineer
Fri Oct 09, 2020 3:26 pm
Forum: RouterOS v7 BETA
Topic: [bug] Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]
Replies: 2
Views: 593

Re: [bug] Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]

I may have found an answer to this in the v7 docs. I am going to test this with an empty route filter and see if it only advertises interfaces in OSPF that are configured. EDIT: 10/10/2020 - This was the issue - verified it in the original lab https://help.mikrotik.com/docs/display/ROS/ROSv7+Basic+R...
by IPANetEngineer
Thu Oct 08, 2020 4:50 pm
Forum: General
Topic: Wireless and DHCP problems
Replies: 8
Views: 745

Re: Wireless and DHCP problems

We need more details and examples of your configuration and DHCP lease output to be helpful
by IPANetEngineer
Tue Oct 06, 2020 7:15 pm
Forum: Forwarding Protocols
Topic: MPLS and MTU
Replies: 5
Views: 757

Re: MPLS and MTU

Mikrotik default MPLS mtu is 1530, if I understood correctly, then it must be raised if the end customer needs qinq, for example.

yes if you want QinQ then you'll need at least 1534 to support two tags.

IP ArchiTechs has engineers in the EU (+2 time zone) as well as North and South America.
by IPANetEngineer
Tue Oct 06, 2020 5:21 pm
Forum: Beginner Basics
Topic: RouterOS/SwitchOS Test Result Questions
Replies: 6
Views: 423

Re: RouterOS/SwitchOS Test Result Questions

If you're going to keep the traffic at Layer 2, then you'll be able to achieve 10Gbps between hosts that are connected to the switches. In RouterOS v7, L3 at wirespeed is possible since routing is offloaded into hardware. https://help.mikrotik.com/docs/display/ROS/CRS3xx+series+switches#heading-L3Ha...
by IPANetEngineer
Tue Oct 06, 2020 5:16 pm
Forum: General
Topic: Mikrotik Max Limit
Replies: 2
Views: 245

Re: Mikrotik Max Limit

Can you share more about the network topology and configuration? The CCR1072 will support 15G of traffic
by IPANetEngineer
Tue Oct 06, 2020 4:21 pm
Forum: Forwarding Protocols
Topic: Modern IBGP design questions
Replies: 1
Views: 275

Re: Modern IBGP design questions

A few thoughts here. 1) You don't want separate instances...that would require redistribution and isn't needed 2) You want a router that isn't a border to act as a route reflector often these are core routers - this can even be out of path like a CHR 3) You need to either set next-hop-self on each b...
by IPANetEngineer
Mon Oct 05, 2020 7:47 pm
Forum: General
Topic: Not pingable within a bridge
Replies: 3
Views: 293

Re: Not pingable within a bridge

When you say teaming with ESXi 6.0 do you mean active/passive teaming or LACP?
by IPANetEngineer
Mon Oct 05, 2020 3:31 pm
Forum: General
Topic: ipv6 issue behind modem router.
Replies: 23
Views: 1193

Re: ipv6 issue behind modem router.

That's not the same. The laptop will most likely get the address using SLAAC, or possibly using DHCP but asking for a single address, not for a prefix. You can actually use Linux to test for prefix delegation. This is the syntax for debian based flavors. dhclient -d -6 -P <interface_name> --prefix-...
by IPANetEngineer
Mon Oct 05, 2020 3:27 pm
Forum: Forwarding Protocols
Topic: OSPF / PTMP no subnets
Replies: 5
Views: 475

Re: OSPF / PTMP no subnets

Id love to understand why (in which situations) Id use PtMP? PtMP was very commonly implemented about 10 to 15 years ago in Frame Relay and ATM networks that were not broadcast capable but could otherwise have more than two hosts on a Layer 2 segment. It is sometimes used in wireless networks with ...
by IPANetEngineer
Mon Oct 05, 2020 3:18 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 984

Re: VRF status with RouterOS v7

Yes of course, it will be implemented.
Is VPNv6 planned for implementation as well?
by IPANetEngineer
Mon Oct 05, 2020 3:16 pm
Forum: Beginner Basics
Topic: proplem with dhcp
Replies: 7
Views: 489

Re: proplem with dhcp

why the dhcp give same address to active user ppp ??? i check everything But I couldn't solve the problem
SERVER : 1100AHX2 (6.47.4)
I use Radius
What does the radius log say for those two connections?
by IPANetEngineer
Mon Oct 05, 2020 2:21 pm
Forum: RouterOS v7 BETA
Topic: [bug] Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]
Replies: 2
Views: 593

Re: Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]

I tried with a simpler config and got the same result. This appears to be a bug and not configuration related.
by IPANetEngineer
Fri Oct 02, 2020 6:52 pm
Forum: General
Topic: ipv6 issue behind modem router.
Replies: 23
Views: 1193

Re: ipv6 issue behind modem router.

Have you tested that prefix delegation is working with another non-mikrotik device or a laptop?
by IPANetEngineer
Fri Oct 02, 2020 4:36 pm
Forum: RouterOS v7 BETA
Topic: L3 hardware offload in FW mode - will there be any other devices than CRS317 supporting this mode?
Replies: 7
Views: 1302

Re: L3 hardware offload in FW mode - will there be any other devices than CRS317 supporting this mode?

I agree that HW accelerated security devices at a low price point is a *huge* gap in the market. One feature that would really push the adoption of this is a stateful failover feature between two CRS switches so that it doesn't have to be a customized script + vrrp.
by IPANetEngineer
Thu Oct 01, 2020 6:58 pm
Forum: Beginner Basics
Topic: Please Help . PPPoE Terminating
Replies: 3
Views: 361

Re: Please Help . PPPoE Terminating

This is typically caused by a duplication of a MAC address in two sessions. How many PPPoE clients do you have and what type of router are you using?
by IPANetEngineer
Thu Oct 01, 2020 4:57 pm
Forum: Beginner Basics
Topic: Using Mikrotik Router as a Public IP Forwarder
Replies: 6
Views: 375

Re: Using Mikrotik Router as a Public IP Forwarder

If the /29 isn't routed to you and your ISP will be the GW for the /29, then you really have two options

1) Bridge all the ports together and use L2 to connect hosts together
2) Use Proxy ARP and assign a /32 public to each endpoint (as a loopback) with a route pointing to the /32 on your router.
by IPANetEngineer
Thu Oct 01, 2020 2:36 pm
Forum: Beginner Basics
Topic: Bridge and VLANs configuration
Replies: 7
Views: 667

Re: Bridge and VLANs configuration

According to the bridge hw offload guide, that model doesn't support Bridge VLAN filtering in HW offload. Have you tried the same config under the switch menu?

https://wiki.mikrotik.com/wiki/Manual:I ... Offloading
by IPANetEngineer
Thu Oct 01, 2020 2:29 pm
Forum: RouterBOARD hardware
Topic: So, there is a 100g switch coming?
Replies: 9
Views: 1046

Re: So, there is a 100g switch coming?

I really hope so, 100G on a CCR or CRS would be amazing!!

We have use cases in the data center and in service providers for 100G ports this would be perfect for.
by IPANetEngineer
Wed Sep 30, 2020 9:16 pm
Forum: General
Topic: CCR2004 vs rb4011 [SOLVED]
Replies: 2
Views: 511

Re: CCR2004 vs rb4011 [SOLVED]

Are you expecting traffic to grow beyond 1G? If so, i'd go with the CCR2004. Also, if you have the budget, the cost of the CCR2004 is only a few hundred dollars more, so unless you're on a tight budget, the CCR2004 is a better choice. That said, the 4011 will do 2G to 3G of Internet traffic (1500 MT...
by IPANetEngineer
Wed Sep 30, 2020 4:45 pm
Forum: RouterOS v7 BETA
Topic: [bug] Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]
Replies: 2
Views: 593

[bug] Issue with unexpected advertisement of OPSFv3 prefix [SOLVED]

I'm doing some lab work with IPv6 routing and ROS7.1beta2 CHR. I'm trying to understand why OSPFv3 is advertising a specific prefix as I didn't explicitly configure it to be advertised and it doesn't show up as an external route indicating redistribution. Here is the network topology https://stubare...
by IPANetEngineer
Wed Sep 30, 2020 3:53 pm
Forum: Forwarding Protocols
Topic: BGP Can only access certain websites
Replies: 4
Views: 517

Re: BGP Can only access certain websites

Have you created IRR entries for your aggregate ranges? That will often cause a prefix to be dropped from advertisement to peers.

You can either do this with your RIR (aka ARIN, RIPE, etc) or an independent IRR like https://www.radb.net/
by IPANetEngineer
Wed Sep 30, 2020 2:52 am
Forum: Forwarding Protocols
Topic: BGP Can only access certain websites
Replies: 4
Views: 517

Re: BGP Can only access certain websites

It sounds like your prefixes either aren't being advertised or accepted/announced by your upstream.

What is the output of the following command?
routing bgp advertisements print peer=peer_name
by IPANetEngineer
Tue Sep 29, 2020 7:47 pm
Forum: Beginner Basics
Topic: Routing between connected subnets - ICMP but not TCP
Replies: 4
Views: 331

Re: Routing between connected subnets - ICMP but not TCP

The first thing i'd try is to disable all FW, NAT and MANGLE rules, even if you're sure they aren't interfering and test to see if TCP passes through to that host.
by IPANetEngineer
Tue Sep 29, 2020 7:29 pm
Forum: General
Topic: Is there a router/switch to beat the 4011?
Replies: 21
Views: 2287

Re: Is there a router/switch to beat the 4011?

Yes the 4011 will beat the CPU of any CRS switch for routing. Using a router to act as the gateway for LAN subnets and terminate the WAN as well as a switch for port density is a very reliable setup that has been used for over 20 years. It's nice to be able to combine the functions together and the ...
by IPANetEngineer
Sun Sep 27, 2020 3:23 pm
Forum: Forwarding Protocols
Topic: MPLS and MTU
Replies: 5
Views: 757

Re: MPLS and MTU

i know that MPLS is sensitive about MTU. Any recommendations / basic rules? I typically recommend that most ISPs running MPLS start with the settings below. This is from a presentation I gave at the MikroTik US MUM https://mum.mikrotik.com/presentations/US16/presentation_3327_1462279781.pdf https:/...
by IPANetEngineer
Fri Sep 25, 2020 4:35 pm
Forum: Forwarding Protocols
Topic: eBGP routes not being advertised to iBGP peer [SOLVED]
Replies: 4
Views: 610

Re: eBGP routes not being advertised to iBGP peer [SOLVED]

Start with basic reachability checks...can you ping the GW using ICMP or ARP?

Are you peering on a directly connected subnet and not the loopbacks?
by IPANetEngineer
Fri Sep 25, 2020 3:56 pm
Forum: Forwarding Protocols
Topic: MetalLB BGP ECMP
Replies: 5
Views: 741

Re: MetalLB BGP ECMP

MikroTik will only load balance (ECMP) with iBGP when peering via loopbacks and using an IGP (OSPF or RIP) or static routes.

https://wiki.mikrotik.com/wiki/Manual:B ... _with_iBGP
by IPANetEngineer
Tue Sep 01, 2020 2:33 pm
Forum: Beginner Basics
Topic: MPLS/VPLS/OSPF Problem
Replies: 4
Views: 941

Re: MPLS/VPLS/OSPF Problem

Normally, you don't want spanning tree running on the bridges that connect VPLS together. Trying to converge RSTP across a large network creates a lot of problems. I would eliminate loops and turn spanning tree off. If this isn't possible, I would at least use MSTP instead of RSTP as it calculates t...
by IPANetEngineer
Tue Sep 01, 2020 2:19 pm
Forum: RouterOS v7 BETA
Topic: state of VXLAN?
Replies: 4
Views: 1496

Re: state of VXLAN?

I really hope so. BGP EVPN and VxLAN would be an amazing combination for MikroTik.

We could also use Type 5 routes for VRF signalling and have a replacement for MPLS in certain use cases.
by IPANetEngineer
Sun Aug 30, 2020 11:43 pm
Forum: RouterOS v7 BETA
Topic: DHCPv6 Server
Replies: 29
Views: 1847

Re: DHCPv6 Server

Here is an article I did with a basic overview of DHCPv6-PD config on MikroTik

https://stubarea51.net/2018/09/14/wisp- ... your-wisp/


Image
by IPANetEngineer
Thu Aug 27, 2020 7:45 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

True that I consider Cisco today more really as a software company, where 5-10 years ago "hardware" was more the focus with monolithic software designs. Agree on the licensing too, you almost need a phd to understand that (same with Microsoft etc) and pricing. Like you say, sooo much equi...
by IPANetEngineer
Thu Aug 27, 2020 7:17 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

So yes ... they pack a lot of performance. Should jolly well hope so for £3,500!! Do Mikrotik do a 48 port switch? I can find MikroTik CRS328-24P so would need two for £750. Serious question, what extra does the Cisco Catalyst 9300 bring to the table? For context (because i'll probably be called a ...
by IPANetEngineer
Wed Aug 26, 2020 8:51 pm
Forum: Forwarding Protocols
Topic: BGP Load Balancing with two interfaces
Replies: 1
Views: 324

Re: BGP Load Balancing with two interfaces

If you can bond the links, it's much simpler and you should use LACP.

BGP Load balancing is for use cases when bonding is not possible.
by IPANetEngineer
Wed Aug 26, 2020 1:45 am
Forum: General
Topic: Architecture and growth - how to know when to change
Replies: 7
Views: 1418

Re: Architecture and growth - how to know when to change

From an architecture perspective as it relates to PPPoE you need something that can load balance and scale laterally. This is true whether it's MikroTik or Cisco/Juniper. This will allow you to add resources as needed based on load and performance observations. Most of the time we use CHR to termina...
by IPANetEngineer
Tue Aug 25, 2020 10:23 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

This is an unfair comparison. The CCR is a fix-chassis toy compared to the ASR1006-X which was (waaaaaaaaaay)³ too powerful for such simple requirements stated...so whoever "spec'ed" this setup overdid it...A LOT. You can blast 10 interfaces with 10Gbits/sec each concurrently and it will ...
by IPANetEngineer
Tue Aug 25, 2020 8:59 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

I think, that Mikrotik is overly complicated in a lot of things. For example Layer-2 configuration: - subinterfaces plus bridges - vlan filtering within the bridge - vlan-handling on the switch itself This is very annoying. No other vender forces you to learn three ways to do simple VLAN stuff. Rea...
by IPANetEngineer
Tue Aug 25, 2020 6:53 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 113
Views: 8593

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

Since we run the largest MikroTik consulting firm in the world, I have some thoughts on this :) We have used MikroTik in very large environments for enterprise, data center and ISPs around the world. Like any other piece of network equipment, you have to understand how to design and deploy it. One o...
by IPANetEngineer
Tue Aug 25, 2020 2:14 am
Forum: RouterOS v7 BETA
Topic: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN
Replies: 13
Views: 1496

Re: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN

Not needed as they are inherently secure. That doesn't make any sense....UTM is not just Internet facing, it's designed to detect internal and external threats across an organization's infrastructure. Can you share some details of how blockchain and torrent would prevent malware from replicating on...
by IPANetEngineer
Tue Aug 25, 2020 1:03 am
Forum: RouterOS v7 BETA
Topic: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN
Replies: 13
Views: 1496

Re: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN

UTM could be done for free if all routers had Torrent and BlockChain

How does this solve the problem of analyzing and mitigating threats at L4 - L7?
by IPANetEngineer
Mon Aug 24, 2020 7:00 pm
Forum: Forwarding Protocols
Topic: EBGP routes not advertised to IBGP peer [SOLVED]
Replies: 4
Views: 546

Re: EBGP routes not advertised to IBGP peer [SOLVED]

I just noticed you're talking about IPv6. In IPv4, this works However woth Ipv6, recursive routing does not work in RouterOS 6.x so iBGP does not work...the routes will advertise but are not reachable. You'll have to use OSPFv3 past the BGP Border router to advertise routing reachability. This has b...
by IPANetEngineer
Mon Aug 24, 2020 6:51 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN
Replies: 13
Views: 1496

Re: Feature Request - Enterprise features like VSS, ZTP, IPv6 L3 HW offloading and SD-WAN

1. MikroTik is already working on stacking, I've talked with them at length about the need for this at the MUMs. The last I heard, MikroTik was using a standards based protocol to implement a redundant switching control plane but I don't remember which one. A decent guess would be either SPB (https:...
by IPANetEngineer
Sat Aug 22, 2020 6:16 pm
Forum: General
Topic: WireGuard Released !
Replies: 41
Views: 28754

Re: WireGuard Released !

can anyone please help me to configuring wireguard

i setup peer and wg interface
but traffic cant go throw the tunnel

There is a good tutorial here from Rick Frey

https://rickfreyconsulting.com/wireguard/
by IPANetEngineer
Tue Aug 11, 2020 5:52 pm
Forum: Forwarding Protocols
Topic: Unable to apply BGP communities for 32 bit ASN
Replies: 1
Views: 926

Re: Unable to apply BGP communities for 32 bit ASN

This feature is available in Router OS v7.1 beta1 so you can test it, but it's not considered ready for production

https://help.mikrotik.com/docs/display/ ... col+Status

"Routing filter match community/large community lists"
by IPANetEngineer
Sat Aug 08, 2020 4:35 pm
Forum: Forwarding Protocols
Topic: Traffic control over redundant topology (conceptual). [SOLVED]
Replies: 1
Views: 890

Re: Traffic control over redundant topology (conceptual). [SOLVED]

Here is one method of traffic engineering that works very well with MikroTik. From a presentation I did at the MIkroTik US MUM in 2017

https://mum.mikrotik.com/presentations/ ... 062656.pdf

Image
by IPANetEngineer
Sat Aug 08, 2020 4:30 pm
Forum: Forwarding Protocols
Topic: Mpls performance on CCR1036-8G-2S.
Replies: 6
Views: 2012

Re: Mpls performance on CCR1036-8G-2S.

With BFD on for OSPF, you should be able to fail over in a few seconds even without fast reroute.
by IPANetEngineer
Wed Aug 05, 2020 5:56 pm
Forum: Forwarding Protocols
Topic: OSPF MPLS Setup Convergence
Replies: 10
Views: 3204

Re: OSPF MPLS Setup Convergence

Have you tried BFD?
by IPANetEngineer
Wed Aug 05, 2020 5:46 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 383
Views: 118185

Re: RB4011

Just got my RB4011, and I can confirm that SFP+ works very well with passive DAC. Of course I didn't use the Mikrotik cable. ;) iperf shows around 800 MB/s against my NAS, so I'd say it actually works. Also, I didn't see any flapping. I would be careful until they officially come back with word tha...
by IPANetEngineer
Wed Aug 05, 2020 5:32 pm
Forum: General
Topic: ipv6 bgp filters broken ? [SOLVED]
Replies: 2
Views: 785

Re: ipv6 bgp filters broken ? [SOLVED]

Can you share which prefixes you do want to advertise....it looks like you're trying to write a rule to block all IPv6 prefixes
by IPANetEngineer
Wed Aug 05, 2020 5:19 pm
Forum: Forwarding Protocols
Topic: Mpls performance on CCR1036-8G-2S.
Replies: 6
Views: 2012

Re: Mpls performance on CCR1036-8G-2S.

Hi Leandro, There are some _major_ issues with MPLS in RouterOS v6. The major ones being the lack of Fast Re-Route, RSVP paths not failing over(or back), NLRI not being updated for L3VPN's and stale labels causing traffic to disappear. It is usable for basic stuff like VPLS, but it is all done 100%...
by IPANetEngineer
Tue Aug 04, 2020 7:07 pm
Forum: Forwarding Protocols
Topic: Cisco Router to Mikrotik Router Etherchannel(Bonding) issue
Replies: 2
Views: 1713

Re: Cisco Router to Mikrotik Router Etherchannel(Bonding) issue

MikroTik is using the slow LACP PDU rate of 30s, what rate is the Cisco LACP channel using? If it's set for 1s, i'd reconfigure to 30 and retest.
by IPANetEngineer
Tue Aug 04, 2020 7:01 pm
Forum: Forwarding Protocols
Topic: OSPF MPLS Setup Convergence
Replies: 10
Views: 3204

Re: OSPF MPLS Setup Convergence

I'm setting up a couple new CCR2004 with 3 redundant paths between them on the bench using a OSPF, BGP, MPLS, VPLS configuration. When I drop out the link carrying traffic, it takes 20 seconds for traffic to re-establish on the backup link. Is this normal convergence time, or possibly a setting I a...
by IPANetEngineer
Tue Aug 04, 2020 6:52 pm
Forum: Forwarding Protocols
Topic: Point-to-point (/31) addresses
Replies: 77
Views: 54127

Re: /31 network between two mikrotik devices - here is how you do it

/31 network between two mikrotik devices - here is how you do it First thing - you do not actually use a /31 in the IP address ( this is important ) Here is how you use a /31 network of only two IP address to get two Mikrotik devices to talk to each other. I am going to demonstrate 192.168.168.0/31...
by IPANetEngineer
Tue Aug 04, 2020 6:30 pm
Forum: RouterBOARD hardware
Topic: CCR Recommendation
Replies: 4
Views: 1458

Re: CCR Recommendation

What are your throughput requirements?
by IPANetEngineer
Tue Aug 04, 2020 6:29 pm
Forum: Virtualization
Topic: CHR with Proxmox does not pass 10Gb
Replies: 3
Views: 1562

Re: CHR with Proxmox does not pass 10Gb

Have you disabled hyperthreading in the BIOS of the host?
by IPANetEngineer
Thu Jul 30, 2020 7:09 pm
Forum: Forwarding Protocols
Topic: MPLS/VPLS/MTU Question??
Replies: 3
Views: 1416

Re: MPLS/VPLS/MTU Question??

I'm not sure if you're running a WISP, but this MUM presentation I did will probably be helpful. Essentially you need to set MTU in 3 places: L2MTU on the interface MTU (which is Layer 3) on the interface or VLAN - This is 1500 by default which is fine for VPLS but if you want to test larger packets...
by IPANetEngineer
Thu Jul 30, 2020 5:12 pm
Forum: Forwarding Protocols
Topic: VRF Interface Limit
Replies: 14
Views: 3953

Re: VRF Interface Limit

v7beta does not have this limit.

So if I understand this answer correctly, VRFs are limited to system resources available? Which should mean that several thousand is realistically possible
by IPANetEngineer
Tue Jul 21, 2020 4:40 pm
Forum: Forwarding Protocols
Topic: BGP - Advertise a prefix to only one upstream??
Replies: 1
Views: 599

Re: BGP - Advertise a prefix to only one upstream??

What is the output of

routing bgp advertisements print peer="peer_name"

by IPANetEngineer
Mon May 18, 2020 5:34 pm
Forum: Forwarding Protocols
Topic: Need for IBGP?
Replies: 1
Views: 654

Re: Need for IBGP?

an iBGP peering ensures that both border routers have a full view of the routes of the other router and also the interior of the network (if you're iBGP based on the inside) In most cases, an iBGP peering is desired between two routers in the same ASN that take in full tables. Otherwise, traffic cou...
by IPANetEngineer
Mon May 18, 2020 4:42 pm
Forum: Forwarding Protocols
Topic: OpenFlow feature?
Replies: 13
Views: 9061

Re: OpenFlow feature?

OpenFlow is still very much in use! ISPs, Internet Exchanges and Data Centers all have use cases for OpenFlow. There is a fantastic open source controller called Faucet that is easy to get up and running. https://faucet.nz/ We have been working on a project to use OpenFlow to manage traffic engineer...
by IPANetEngineer
Tue May 12, 2020 7:32 pm
Forum: RouterBOARD hardware
Topic: CCR2004 : BGP Benchmarks
Replies: 41
Views: 11804

Re: CCR2004 : BGP Benchmarks

I'm waiting on my CCR2004 to get here. Then i'm going to benchmark it with our iperf3 and BGP full table performance lab that we've used for MUM Presentations in the past.

We maxed out the CCR1072 when it first came out with 80Gbps of traffic, so we should be able to make the CCR1004 fall over ;-)
by IPANetEngineer
Mon May 11, 2020 9:34 pm
Forum: Forwarding Protocols
Topic: BGP advertise smaller prefix than /24 [SOLVED]
Replies: 7
Views: 3848

Re: BGP advertise smaller prefix than /24 [SOLVED]

It's also worth pointing out, that many IP transit providers (not all) will allow you to announce a prefix length greater than a /24 (i.e /25 through /32) over multiple connections to the same provider & will aggregate the prefix to /24 or less when announcing it to peers in the DFZ.
by IPANetEngineer
Mon May 11, 2020 9:16 pm
Forum: General
Topic: CCR2004 w/ARM64 : Where to download packages ? [SOLVED]
Replies: 7
Views: 2169

Re: CCR2004 w/ARM64 : Where to download packages ? [SOLVED]

I'm curious to know the answer to this as well.

Does the long term image load and run properly?
by IPANetEngineer
Mon May 11, 2020 4:16 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 39
Views: 17680

Re: WE NEED EIGRP

However for WISP networks, hands down EIGRP. And since it's quite simple i'd wager its a lot easier to program and implement than IS-IS As consultants, we design and build a *lot* of WISP networks globally and I can probably count on one hand the number of times i've seen EIGRP used in a WISP in th...
by IPANetEngineer
Fri Apr 03, 2020 6:43 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: RFC3021 /31 point-to-point support in v7
Replies: 4
Views: 2673

Re: Feature Request: RFC3021 /31 point-to-point support in v7

I don't disagree that /31 would be useful but i'd rather see the time spent on improving IPv6 support. The number of IPv6 networks we've been doing consulting work on in the last 12 months has skyrocketed. Once dual stack is in place, IPv4 public requirements don't disappear but are certainly dimini...
by IPANetEngineer
Thu Mar 26, 2020 4:15 pm
Forum: Forwarding Protocols
Topic: BGP orgin route are incomplete/invalid
Replies: 7
Views: 2470

Re: BGP orgin route are incomplete/invalid

when Router C receive the route it is not complete and it will not choose as best path, this is the issue

If a route is not valid or active, it often means the next hop is unreachable. Check that first.
by IPANetEngineer
Wed Mar 25, 2020 5:02 pm
Forum: Forwarding Protocols
Topic: Help with capacity solutions
Replies: 11
Views: 3299

Re: Help with capacity solutions

Are you going to put all of the 1Gbps links into the same data center?
by IPANetEngineer
Wed Mar 25, 2020 4:57 pm
Forum: Forwarding Protocols
Topic: BGP orgin route are incomplete/invalid
Replies: 7
Views: 2470

Re: BGP orgin route are incomplete/invalid

This is normal for most BGP routes and does not indicate a problem. This is typically due to a route being redistributed into BGP. Here are the origin types from the BGP-4 RFC (EGP is no longer used so it's listed but not important anymore) https://tools.ietf.org/html/rfc4271 a) ORIGIN (Type Code 1)...
by IPANetEngineer
Wed Mar 25, 2020 4:53 pm
Forum: Forwarding Protocols
Topic: BGP networks and advertisements
Replies: 2
Views: 1722

Re: BGP networks and advertisements

Does you upstream provider support BGP communities? If so, I'd use those instead of prepending which doesn't work as well anymore.

Can you post the config and routing table for each router?
by IPANetEngineer
Sun Mar 15, 2020 3:08 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 8242

Re: Feature Request - BGP RPKI

Yes, please add this to the list. More and more people are asking for it.
by IPANetEngineer
Wed Mar 11, 2020 5:17 am
Forum: Forwarding Protocols
Topic: VPLS woes, tunnel will not come up
Replies: 4
Views: 2972

Re: VPLS woes, tunnel will not come up

Can you post configs for all 4 routers in the A,B,C,D chain and the output of the following on A and D?

mpls ldp neighbor print detail

mpls forwarding-table print detail

interface vpls print detail
by IPANetEngineer
Mon Mar 09, 2020 11:15 pm
Forum: Forwarding Protocols
Topic: Will Errors on OSPF impact on iBGP
Replies: 8
Views: 3318

Re: Will Errors on OSPF impact on iBGP

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

How many routes and routers do you have and what OSPF network types are you using - boradcast, point-to-point, etc?
by IPANetEngineer
Mon Mar 09, 2020 11:13 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 4212

Re: OSPF and multiple areas

Is stubbing and range/summary mandatory for take advantage of the benefits? It definitely helps. The topology information is what contributes to CPU overhead and thus convergence time. When you're summarizing, you're only sending routes and not the detailed area topology info. At what level (# of r...
by IPANetEngineer
Mon Mar 09, 2020 7:44 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 4212

Re: OSPF and multiple areas

You can definitely run an additional area and connect it at more than one point. This is why the backbone area exists and when there are redundant paths, they will be used. Areas will definitely help with scaling OSPF when applied to areas of the network that aren't core transit. CPU should be a bit...
by IPANetEngineer
Mon Mar 09, 2020 7:34 pm
Forum: Forwarding Protocols
Topic: Will Errors on OSPF impact on iBGP
Replies: 8
Views: 3318

Re: Will Errors on OSPF impact on iBGP

Yes, OSPF (or any IGP) is needed to provide loopback reachability for an iBGP AS so issues in OSPF that cause routes to flap can affect BGP and cause the peerings go down.

If the network is well built and designed, this shouldn't happen very often.
by IPANetEngineer
Sat Mar 07, 2020 4:26 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 39
Views: 17680

Re: WE NEED EIGRP

You can't separate them. OSPF no matter how much you want to try and pretend differently, it has certain design restrictions that are very restrictive for service providers. Those restrictions make sense in many enterprise environments because of the vastly different topologies and real world condi...
by IPANetEngineer
Sat Mar 07, 2020 3:34 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 39
Views: 17680

Re: WE NEED EIGRP

But we have no other protocol to use, we have OSPF and thats it. So rather than picking OSPF to 'solve problems' we have to figure out ways to solve the problems of an OSPF design. Problems like summarization at key points, but spanning multiple areas. I've had to use multiple OSPF area 0 instances...
by IPANetEngineer
Sat Mar 07, 2020 3:16 pm
Forum: Forwarding Protocols
Topic: Juniper - Mikrotik LDP/BGP based VPLS
Replies: 11
Views: 7055

Re: Juniper - Mikrotik LDP/BGP based VPLS

I have not tried to replicate this exact issue, but I did publish an article a few months ago about Juniper to MIkroTik MPLS with VPNv4 which works well. You can at least use it to verify MPLS between MikroTIk and Juniper. https://stubarea51.net/2020/01/22/juniper-to-mikrotik-mpls-and-vpnv4-interop/
by IPANetEngineer
Fri Mar 06, 2020 4:41 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 39
Views: 17680

Re: WE NEED EIGRP

OSPF works fine for corporate/enterprise IS-IS works far better for 'service provider' environments EIGRP works in both This is **NOT** the way to look at routing protocols. Routing protocols solve problems. We have to stop looking at them as enterprise vs. service provider. OSPF and ISIS are link ...
by IPANetEngineer
Fri Mar 06, 2020 4:35 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 39
Views: 17680

Re: WE NEED EIGRP

I would much rather have IS-IS or OSPF segment routing for WISP environments. Nobody wants to run MPLS on EIGRP when you have SR available

EIGRP while released to open standards, wasn't completely opened up so most of the best features are missing anyway.
by IPANetEngineer
Wed Mar 04, 2020 2:02 pm
Forum: Wireless Networking
Topic: Starting a WISP: guide to selecting a routing architecture
Replies: 2
Views: 2599

Starting a WISP: guide to selecting a routing architecture

This is more of a general WISP post than anything but there are some specific MikroTik references in here. i've been wanting to do this for a long time but it needed some depth and attention so it's been on the back burner for a while. I finally got a basic comparison written of all the major WISP r...
by IPANetEngineer
Fri Feb 28, 2020 6:09 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 198
Views: 39813

Re: RB4011 and RB1100 AHx4 "bricks" randomly

We've run into this with a few clients that run the 4011 and have used the following as a workaround while we work on a ticket with MikroTik. It seems to be more stable in the few we have tested.

Set the CPU frequency to 1200mhz
system routerboard settings set cpu-frequency=1200
by IPANetEngineer
Fri Feb 28, 2020 6:02 pm
Forum: RouterBOARD hardware
Topic: RB-4011GS lock up issue
Replies: 5
Views: 3713

Re: RB-4011GS lock up issue

We've run into this with a few clients that run the 4011 and have used the following as a workaround while we work on a ticket with MikroTik. It seems to be more stable in the few we have tested.

Set the CPU frequency to 1200mhz
system routerboard settings set cpu-frequency=1200
by IPANetEngineer
Wed Feb 26, 2020 4:24 pm
Forum: General
Topic: Best practice for Upgrading RouterOS on >50 routers?
Replies: 2
Views: 1439

Re: Best practice for Upgrading RouterOS on >50 routers?

We use Unimus for our Data Center and also for our clients. It can backup, notify about config changes and execute automated commands on multiple devices. It supports MikroTik and lots of other vendors as well. It is not expensive and is an excellent tool. https://unimus.net/ https://unimus.net/imag...
by IPANetEngineer
Tue Feb 25, 2020 5:39 pm
Forum: RouterOS v7 BETA
Topic: vxlan performance?
Replies: 18
Views: 8520

Re: vxlan performance?

Having VxLAN support in HW on the CRS326-24S+2Q+RM would be just amazing.
by IPANetEngineer
Mon Feb 24, 2020 4:02 pm
Forum: Forwarding Protocols
Topic: How can i do BGP Peer and Route?
Replies: 1
Views: 1958

Re: How can i do BGP Peer and Route?

A couple of questions:

Can you ping the subnets from within your ASN? Also can you post your routing table?
by IPANetEngineer
Fri Feb 21, 2020 4:20 pm
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 20
Views: 6686

Re: Mikrotik hardware accelerated routing

I completely get that it's not trivial. I spend a lot of time consulting in disaggregated networks where we deploy IP Infusion or Cumulus Linux on ONIE switches and sometimes we have to contend with issues in getting the FIB pushed down into the ASIC. My point is that it's possible in software and t...
by IPANetEngineer
Fri Feb 21, 2020 1:59 pm
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 20
Views: 6686

Re: Mikrotik hardware accelerated routing

There is an important point the OP is asking about that is not being addressed. The marvell prestera ASIC that is in the CRS317 and CRS309 is capable of routing in hardware (not the CPU). The question he is asking is if MIkroTik is considering enabling that functionality (which already exists in the...
by IPANetEngineer
Thu Feb 20, 2020 9:02 pm
Forum: Forwarding Protocols
Topic: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network
Replies: 4
Views: 2285

Re: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network

Confederation is really designed to allow eBGP style policy enforcement within an iBGP AS and break up smaller sub-ASNs within one logical ASN. I've done migration and merging of Public ASNs a numer of times and what you really want to look at is running different instances of BGP on routers that ne...
by IPANetEngineer
Tue Feb 18, 2020 7:44 pm
Forum: RouterOS v7 BETA
Topic: CRS3xx MC-LAG in RouterOS 7
Replies: 19
Views: 6649

Re: CRS3xx MC-LAG in RouterOS 7

Now that VxLAN is supported in v7, EVPN would be fantastic to have as well to use as a control plane for VxLAN and for multihoming.
by IPANetEngineer
Tue Feb 18, 2020 7:16 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2766

Re: Connection between two LANs

Can you post the full config and active routing tables for the MikroTik and PF Sense device?
by IPANetEngineer
Tue Feb 18, 2020 6:47 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2766

Re: Connection between two LANs

So the MikroTik router is receiving the ICMP traffic from the host behind the PF Sense firewall and sending it back. Have you performed a capture on the PF Sense FW to see if it receives the traffic? It seems like your issue is in PF Sense based on the data you sent. The MikroTik is routing correctly.
by IPANetEngineer
Mon Feb 17, 2020 6:15 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2766

Re: Connection between two LANs

If you look correctly, he need to route 192.168.0.0/16, as 192.168.5.1 is a part of this network
You're correct, I missed that it's a /16 mask, but I believe the route will still need to be on PF Sense.
by IPANetEngineer
Mon Feb 17, 2020 5:58 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2766

Re: Connection between two LANs

Hello, You'll need to add a route : ip route add dst-address=192.168.0.0/16 gateway=10.100.0.60 distance=1 He shouldn't need a route on the MikroTik as both of these will be directly connected networks. More than likely (making an assumption from the drawing), the default GW for the 10.0.0.0/8 netw...
by IPANetEngineer
Mon Feb 17, 2020 5:51 pm
Forum: Beginner Basics
Topic: Deny internet access when VPN is down
Replies: 2
Views: 1388

Re: Deny internet access when VPN is down

Netwatch would probably be the easiest tool.

You can ping a VPN endpoint and then take an action when it is up or down...like enabling a firewall rule to block all traffic out a certain port to the Internet or changing the routes.

https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch
by IPANetEngineer
Mon Feb 17, 2020 4:26 pm
Forum: General
Topic: CRS Ethernet TX Drops
Replies: 8
Views: 3357

Re: CRS Ethernet TX Drops

If you are going to be moving a lot of traffic between ports at different speeds , you may be exceeding the buffer (which is required for moving traffic between ports of different speeds.
by IPANetEngineer
Mon Feb 17, 2020 4:08 pm
Forum: RouterOS v7 BETA
Topic: VXLAN config issues
Replies: 3
Views: 3059

Re: VXLAN config issues

In the lab, I just lowered the VxLAN MTU to 1400 because it was quick and easy. But in production, I would raise the IP MTU of the routed network to something larger like 9000 so that 1500 byte frames can pass without issue.
by IPANetEngineer
Mon Feb 17, 2020 3:43 pm
Forum: Forwarding Protocols
Topic: Maximum amount of BGP routes in MikroTik routes
Replies: 2
Views: 2433

Re: Maximum amount of BGP routes in MikroTik routes

The CCRs will be too slow until RouterOSv7 is out as a stable option with BGP. The example below is 17 minutes of convergence on CCRs. Here are some examples of convergence time for CCR vs. CHR using Free Range Routing as the RR. The full presentation from MUM US 2019 is here: PDF https://mum.mikrot...
by IPANetEngineer
Sun Feb 16, 2020 5:55 pm
Forum: RouterOS v7 BETA
Topic: VxLAN example configuration
Replies: 8
Views: 8837

Re: VxLAN example configuration

You're welcome! I'm not sure if an IPv6 underlay is supported, but I may try that later today :D

EDIT: Looks like the VTEPs and VxLAN interface group multicast address are IPv4 only for now.
by IPANetEngineer
Sat Feb 15, 2020 11:20 pm
Forum: RouterOS v7 BETA
Topic: VxLAN example configuration
Replies: 8
Views: 8837

VxLAN example configuration

Here is a blog post I did with a VxLAN lab in EVE-NG between 3 routers and 3 linux servers:

The blog and configurations are available here:
https://stubarea51.net/2020/02/15/mikro ... ook-vxlan/

Image
by IPANetEngineer
Sat Feb 15, 2020 10:55 pm
Forum: RouterOS v7 BETA
Topic: VXLAN config issues
Replies: 3
Views: 3059

Re: VXLAN config issues

Here is an example working lab in EVE-NG between 3 routers and 3 linux servers from an article I wrote:

Configs are in the link here:
https://stubarea51.net/2020/02/15/mikro ... ook-vxlan/

Image
by IPANetEngineer
Sat Feb 15, 2020 4:01 am
Forum: RouterOS v7 BETA
Topic: vxlan performance?
Replies: 18
Views: 8520

Re: vxlan performance?

Agreed. If we see EVPN added to BGP to support VxLAN in the future, MikroTik will see a massive increase in sales from people who need inexpensive devices to act as a VTEP.
by IPANetEngineer
Fri Feb 14, 2020 1:09 pm
Forum: General
Topic: BGP ERROR
Replies: 5
Views: 2774

Re: BGP ERROR

This meas TCP port 179 for BGP is not answering on the remote end which can be one of several things

1) The source of your peering
2) Firewall rules
3) Issue with the router you are peering with.
by IPANetEngineer
Thu Feb 13, 2020 3:19 pm
Forum: Beginner Basics
Topic: VLAN Tagging between two CCR
Replies: 6
Views: 1986

Re: VLAN Tagging between two CCR

Can you post your config? What type of AirFibers are you using?
by IPANetEngineer
Wed Feb 12, 2020 4:42 pm
Forum: General
Topic: Basic vlan layer 2 config on CRS317-1G-16S+ [SOLVED]
Replies: 8
Views: 3996

Re: Basic vlan layer 2 config on CRS317-1G-16S+ [SOLVED]

This article I wrote will probably be very helpful since you're familiar with Cisco. It translates cisco switching configs for VLANs to the MikroTik equivalent.

https://stubarea51.net/2019/02/06/cisco ... and-vlans/
by IPANetEngineer
Wed Feb 12, 2020 4:38 pm
Forum: Forwarding Protocols
Topic: VRF
Replies: 1
Views: 1721

Re: VRF

Yes, you can do this. Here is an example witjh two Loopback/bridge interfaces

[admin@lab1.iparchitechs.com] > ip route vrf add routing-mark=vrf-1 interfaces=lo1,lo2
by IPANetEngineer
Wed Feb 12, 2020 4:29 pm
Forum: Forwarding Protocols
Topic: Very strange BGP Best Route Selection
Replies: 4
Views: 2586

Re: Very strange BGP Best Route Selection

Typically when everything else is identical, the oldest route wins
by IPANetEngineer
Wed Feb 12, 2020 7:18 am
Forum: Forwarding Protocols
Topic: How to filter OSPF transit traffic
Replies: 4
Views: 2446

Re: How to filter OSPF transit traffic

If you have 200 sites, then OSPF is not the right protocol anyway.

I would look at BGP and filtering to solve this problem
by IPANetEngineer
Tue Feb 11, 2020 9:01 pm
Forum: Forwarding Protocols
Topic: How to filter OSPF transit traffic
Replies: 4
Views: 2446

Re: How to filter OSPF transit traffic

I really prefer BGP for what you're trying to do as I really dislike filtering in OSPF. That said, you could filter the routes for each HQ on the ospf-out chain at the Branch. That should prevent the HQs from transiting the branch in an outage but let the branch still talk to each HQ. Probably somet...
by IPANetEngineer
Tue Feb 11, 2020 6:28 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 49
Views: 19239

Re: Overruns on CSS326-24G-2S+RM

I agree, i'd like to see buffer numbers on all the switching chips to be able to plan. The Marvell Prestera chipset this switch is based on (98DX3236) is used in a few other platforms and the listed buffer space is 12MB for the 24 port model. https://eltex-co.com/upload/iblock/9af/MES_2324P_2348P_da...
by IPANetEngineer
Tue Feb 11, 2020 4:28 pm
Forum: Forwarding Protocols
Topic: Very strange BGP Best Route Selection
Replies: 4
Views: 2586

Re: Very strange BGP Best Route Selection

This is happening because you have them in separate instances. The BGP best path algorithm is only used for routes within the same instance. Otherwise MikroTik's general route selection algorithm is used between instances. From the wiki: "Best path algorithm compares routes received by a single...
by IPANetEngineer
Tue Feb 11, 2020 3:41 pm
Forum: General
Topic: Mikrotik Rack-mounted Devices Visio Stencils
Replies: 43
Views: 40255

Re: Mikrotik Rack-mounted Devices Visio Stencils

Cool....thanks for all the hard work!
by IPANetEngineer
Sun Feb 09, 2020 5:11 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 5359

Re: CRS317 326 and 328 performance problem ?

I would look at this platform on either side if you want to solve the window problem.

http://wanos.co/wan-optimization/how-wa ... ion-works/
by IPANetEngineer
Sun Feb 09, 2020 4:38 pm
Forum: Useful user articles
Topic: Using RouterOS to QoS your network - 2020 Edition
Replies: 216
Views: 277523

Re: Using RouterOS to QoS your network - 2020 Edition

Agreed, this is great work. :)
by IPANetEngineer
Sun Feb 09, 2020 4:31 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 5359

Re: CRS317 326 and 328 performance problem ?

I think a routed Data Center Interconnect (DCI) is better than Layer 2, so yes I would route between them and then use VPLS if you must extend VLANs.

But, to be clear, this will not solve the TCP window problem.
by IPANetEngineer
Sun Feb 09, 2020 6:56 am
Forum: Beginner Basics
Topic: Configuration
Replies: 3
Views: 1524

Re: Configuration

Here is an article we did on high availability for PPPoE servers. It has example configs in it. Hope it helps!

https://stubarea51.net/2018/04/23/pppoe ... atorsbras/
by IPANetEngineer
Sun Feb 09, 2020 6:50 am
Forum: Forwarding Protocols
Topic: HELP - Network Mikrotik with Radwin (SMALL ISP)
Replies: 2
Views: 2098

Re: HELP - Network Mikrotik with Radwin (SMALL ISP)

I would recommend using OSPF for transit subnets/loopbacks and iBGP (peering to an RR with loopbacks) for customer subnets. Add MPLS if you want to deliver L2VPN or L3VPN services. Here is a topology overview: https://stubarea51.net/wp-content/uploads/2020/02/WISP-Routing-Arch.png Take a look at thi...
by IPANetEngineer
Sun Feb 09, 2020 2:32 am
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 5359

Re: CRS317 326 and 328 performance problem ?

But how can it help if we cannot change the window size on the tunneled clients connections ? The only way I've ever been able to deal with this is by having a WAN optimization box between the DCs like Riverbed or WanOS. We had a DC migration between DCs with 50ms latency and had to use a Riverbed ...
by IPANetEngineer
Fri Feb 07, 2020 6:35 pm
Forum: Forwarding Protocols
Topic: BGP Default Routes from two ISP
Replies: 3
Views: 2375

Re: BGP Default Routes from two ISP

iBGP is a little easier. OSPF can support ECMP and since iBGP uses a loopback to peer - advertised in OSPF as a recursive next hop, it works well.

The only caveat is if you also run MPLS - the LDP implementation that MikroTik uses is not ECMP capable.
by IPANetEngineer
Fri Feb 07, 2020 6:31 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 5359

Re: CRS317 326 and 328 performance problem ?

Are the data centers in production? How much traffic is normally on the link while you are testing? The CRS326 most likely has 12 MB of packet buffer memory (based on other Marvell Prestera DX3236 board specs) while the CRS 317 packet buffer memory is unknown. As primarily a 10 gig switch, i'd assum...
by IPANetEngineer
Fri Feb 07, 2020 4:07 pm
Forum: Forwarding Protocols
Topic: BGP Default Routes from two ISP
Replies: 3
Views: 2375

Re: BGP Default Routes from two ISP

The only way this works without using routing marks (which i'd avoid) is if you have an eBGP multi-hop peering.

https://wiki.mikrotik.com/wiki/Manual:B ... interfaces
by IPANetEngineer
Wed Feb 05, 2020 4:11 pm
Forum: RouterOS v7 BETA
Topic: new feature request MLAG!!!
Replies: 22
Views: 7972

Re: new feature request MLAG!!!

I would much rather see stacking. MLAG is fine for Layer 2, but it's a nightmare for Layer 3. Stacking works well for both. Considering a lot of the CRS3XX chipsets have L3 HW offload that has yet to be taken advantage of, it would be nice to be able to form an LACP chanel across two or more switche...
by IPANetEngineer
Wed Feb 05, 2020 4:09 pm
Forum: RouterOS v7 BETA
Topic: fq_codel or cake in v7
Replies: 62
Views: 20909

Re: fq_codel or cake in v7

This is the way.
Indeed :lol:

It would be nice to be able to run either fq_codel or cake in RouterOS for better shaping options. Please consider adding this MikroTik.
by IPANetEngineer
Wed Feb 05, 2020 4:06 pm
Forum: RouterOS v7 BETA
Topic: ROS-7-xxx-Dev--X86-64Bit-BGP
Replies: 3
Views: 3569

Re: ROS-7-xxx-Dev--X86-64Bit-BGP

I am anxious to test this as well. There are a number of things in BGP that v7 is supposed to fix/improve.

Hopefully we'll see a new RouterOS v7 in February with BGP added :)
by IPANetEngineer
Wed Feb 05, 2020 4:02 pm
Forum: RouterOS v7 BETA
Topic: New features : Locator ID Separation Protocol
Replies: 1
Views: 2061

Re: New features : Locator ID Separation Protocol

LISP is a protocol that Cisco helped to develop and it never really saw widespread use.

https://orhanergun.net/is-lisp-locator- ... ocol-dead/

What's the specific use case you have in mind to implement in MikroTIk?
by IPANetEngineer
Wed Feb 05, 2020 7:59 am
Forum: Forwarding Protocols
Topic: Using OSPF on private ranges to route internet traffic
Replies: 2
Views: 2040

Re: Using OSPF on private ranges to route internet traffic

One idea I had was to change everything to internal addressing and set up MPLS then have a VPLS instance to each base station and run a central PPPoE concentrator in our datacenter. The problems with this setup is loss of the data-center or the concentrator would cause a 100% outage everywhere. It ...
by IPANetEngineer
Tue Feb 04, 2020 6:30 pm
Forum: Wireless Networking
Topic: WIFI 6 Roadmap
Replies: 80
Views: 41505

Re: WIFI 6 Roadmap

I sure hope so! MIkroTIk WIFI6 would be amazing!
by IPANetEngineer
Tue Feb 04, 2020 3:45 am
Forum: Forwarding Protocols
Topic: Using OSPF on private ranges to route internet traffic
Replies: 2
Views: 2040

Re: Using OSPF on private ranges to route internet traffic

I would consider the CGN NAT range for this as it's not publicly routable 100.64.0.0/10 We use it extensively in our designs for PTP addressing where public addresses would otherwise be used. It works very well. You can then use a public loopback to NAT the traffic to. Here is an example: https://st...
by IPANetEngineer
Tue Feb 04, 2020 2:46 am
Forum: General
Topic: Which 10Gb adapter for server connected to CRS326
Replies: 3
Views: 1511

Re: Which 10Gb adapter for server connected to CRS326

Intel server cards like the DA520 require Intel chipped optical SFPs or coaxial DACs.

If you are using generic SFPs (either optical or DAC), they must be chipped for Intel on the NIC side.

The CRS326 will use a generic SFP without issue.
by IPANetEngineer
Mon Feb 03, 2020 9:24 pm
Forum: RouterBOARD hardware
Topic: Is Good ? x86 Maxxwave Routermaxx Vengeance
Replies: 4
Views: 3921

Re: Is Good ? x86 Maxxwave Routermaxx Vengeance

Yes, it is a great platform. We have used it to test the CHR for each of these presentations. CHR as a BGP Border Router https://mum.mikrotik.com/presentations/EU18/presentation_5188_1524562405.pdf CHR as an MPLS router https://mum.mikrotik.com/presentations/EU19/presentation_6291_1554448059.pdf CHR...
by IPANetEngineer
Mon Feb 03, 2020 6:09 pm
Forum: General
Topic: mikrotik and pfsense pppoe problem
Replies: 2
Views: 933

Re: mikrotik and pfsense pppoe problem

What error is the PPPoE client showing in the log for not connecting?
by IPANetEngineer
Mon Feb 03, 2020 6:08 pm
Forum: Virtualization
Topic: CHR Hyper-Threading [SOLVED]
Replies: 1
Views: 4271

Re: CHR Hyper-Threading [SOLVED]

It's a performance issue. Hyperthreading is helpful for certain types of applications, but not for virtualized routing. There is a good explanation by @TomjNorthIdaho in the linked thread https://forum.mikrotik.com/viewtopic.php?t=138549 Why disable hyper-threading ? Hyper-Threading is a CPU trick t...
by IPANetEngineer
Mon Feb 03, 2020 6:01 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 135
Views: 101813

Re: Add DNS over HTTPS (DoH) support

I prefer 9.9.9.9 / 2620:fe::fe

It has malware protection and is very transparent about not storing or tracking user data.

https://www.quad9.net/policy/
by IPANetEngineer
Mon Feb 03, 2020 4:28 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 135
Views: 101813

Re: Add DNS over HTTPS (DoH) support

But the privacy/restriction problem will only move from the ISP resolver to the DoH resolver chosen. Whether that is an improvement, depends on the local situation. That's a great point, but at least the user has the choice of which DNS resolver to trust and it's obscured to the transit providers.
by IPANetEngineer
Mon Feb 03, 2020 4:10 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 135
Views: 101813

Re: Add DNS over HTTPS (DoH) support

I might be a minority here, but all this DNS over https/TLS,etc, in my opinion, has nothing to do with user's privacy at all, but it has everything to do with making ad blocking and corporate filtering obsolete. I would tend to disagree. The case you mention is only one possible application of DNS ...
by IPANetEngineer
Mon Feb 03, 2020 3:57 pm
Forum: General
Topic: QoS setup
Replies: 9
Views: 2940

Re: QoS setup

Have you done a packet capture of your video to ensure that all ports/protocols and src/dst have been properly identified to mark?

What does your config look like?
by IPANetEngineer
Sun Feb 02, 2020 4:43 pm
Forum: General
Topic: CRS3xx Q-in-Q MTU max 1496?
Replies: 5
Views: 1563

Re: CRS3xx Q-in-Q MTU max 1496?

The Maximum MTU on that model is 10218 bytes for ports 1-24 and the sfp+ ports ref: https://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards The following commands should raise the MTU for what you need. select the interface numbers to apply interface ethernet set l2mtu=10218 ...
by IPANetEngineer
Sun Feb 02, 2020 1:52 am
Forum: General
Topic: EoIP Tunnels stopped working
Replies: 2
Views: 899

Re: EoIP Tunnels stopped working

Are you using the same version on both sides?
by IPANetEngineer
Sat Feb 01, 2020 5:55 pm
Forum: Forwarding Protocols
Topic: Create BGP Peer within VRF
Replies: 10
Views: 7517

Re: Create BGP Peer within VRF

I believe in version 7, MikroTik is using the native VRF capability of the Linux Kernel, so it will be interesting to see if this is resolved once BGP is released in the beta
by IPANetEngineer
Sat Feb 01, 2020 5:52 pm
Forum: Forwarding Protocols
Topic: Point-to-point (/31) addresses
Replies: 77
Views: 54127

Re: Point-to-point (/31) addresses

Just a warning on using two /32 addresses as a workaround for the /31 problem.

We've had a number of problems with OSPF stability using this approach if you're planning on using OSPF for a dynamic routing protocol.
by IPANetEngineer
Sat Feb 01, 2020 4:56 pm
Forum: General
Topic: CRS326 Port Security
Replies: 1
Views: 719

Re: CRS326 Port Security

What does your current config look like?
by IPANetEngineer
Fri Jan 31, 2020 2:49 am
Forum: Forwarding Protocols
Topic: OSPF - Can't get Symmetrical routing working
Replies: 3
Views: 1962

Re: OSPF - Can't get Symmetrical routing working

Can you also post the routing tables for each node and the IPs of the VPLS endpoints?
by IPANetEngineer
Thu Jan 30, 2020 6:09 pm
Forum: Forwarding Protocols
Topic: BGP as Transit/IP Provider
Replies: 6
Views: 5948

Re: BGP as Transit/IP Provider

I wouldn't redistribute into OSPF for reachability. It would be better to build iBGP in your AS and then build a full table route reflector so that you can deploy a PE router to peer with customers. Here is an example and the presentation I did last year: https://mum.mikrotik.com/presentations/US19/...
by IPANetEngineer
Thu Jan 30, 2020 5:56 pm
Forum: General
Topic: Stacking question
Replies: 3
Views: 1234

Re: Stacking question

Currently, it is not possible, but because of a lot of customer requests for it, we are strongly considering to implement it! :]

This is the single most important switching feature our customers for MikroTik consulting are asking for.
by IPANetEngineer
Thu Jan 30, 2020 1:07 am
Forum: RouterBOARD hardware
Topic: Mikrotik Switch Lenovo Server [SOLVED]
Replies: 8
Views: 7478

Re: Mikrotik Switch Lenovo Server [SOLVED]

So it may be helpful to clarify that you have two options to connect the server to the MikroTik switch 1) You had originally asked about a DAC cable which is a coaxial copper cable with SFPs molded and permanently attached to the ends. You can either purchase one from Lenovo, one that is compatible ...
by IPANetEngineer
Tue Jan 28, 2020 7:00 pm
Forum: Beginner Basics
Topic: Dual Stack IPv6 Configuration
Replies: 4
Views: 2460

Re: Dual Stack IPv6 Configuration

Here is a sample config that may be helpful for a subscriber router from an article I did on IPv6 for ISPs It sounds like you are almost there. Make sure you have assigned a subnet from the IPv6 prefix that's delegated to the router. It needs to be on the interface/bridge that yourwired/wireless net...
by IPANetEngineer
Tue Jan 28, 2020 6:01 pm
Forum: Announcements
Topic: MikroTik newsletter January 2020 (#93)
Replies: 26
Views: 24975

Re: MikroTik newsletter January 2020 (#93)

I especially enjoyed reading about the network in Serbia to detect hail. Good stuff!
by IPANetEngineer
Tue Jan 28, 2020 5:42 pm
Forum: Beginner Basics
Topic: vrrp
Replies: 6
Views: 2469

Re: vrrp

It should be the real one...VRRP only answers ARP for the common MAC address and passes the traffic to the real interface. IIRC outbound traffic should originate from the physical interface.
by IPANetEngineer
Tue Jan 28, 2020 2:00 pm
Forum: Virtualization
Topic: Broadcast loop in CHR bridge [SOLVED]
Replies: 2
Views: 3932

Re: Broadcast loop in CHR bridge [SOLVED]

Is there any reason you wouldn't use DHCP relay instead of bridging a Layer 2 tunnel segment?
by IPANetEngineer
Tue Jan 28, 2020 1:58 pm
Forum: Forwarding Protocols
Topic: MIkrotik BGP Monitoring
Replies: 60
Views: 26396

Re: MIkrotik BGP Monitoring

Still, SNMP monitoring of BGP parameters (peer up, number of prefixes received, number of active routes to that peer) would be welcome, e.g. for graphing.

I agree, I've been dying to get SNMP monitoring of BGP peers for a long time.
by IPANetEngineer
Tue Jan 28, 2020 1:22 pm
Forum: Forwarding Protocols
Topic: OSPF - Can't get Symmetrical routing working
Replies: 3
Views: 1962

Re: OSPF - Can't get Symmetrical routing working

A few things to look at

1) Cost can be set on both sides of the link, so make sure you've set the cost on the correct side
2) Cost does not cross areas, if one of the links is in a different area, that could also contribute to the problem

Can you post the MikroTik and Cisco configs?
by IPANetEngineer
Mon Jan 27, 2020 8:37 pm
Forum: Forwarding Protocols
Topic: OSPF Transit Fabric
Replies: 8
Views: 2749

Re: OSPF Transit Fabric

I’ve just received an answer from MikroTik: Thank you for the report. There is a known problem with enabled connection tracking and fragmented packets. If OSPF packet is being fragmented, then connection tracking passes it to OSPF twice, causing an error. Currently as a workaround I can suggest to ...
by IPANetEngineer
Mon Jan 27, 2020 6:27 pm
Forum: Forwarding Protocols
Topic: BGP reflection, no filtering?
Replies: 4
Views: 2135

Re: BGP reflection, no filtering?

It looks like you're applying this on routes learned inbound. Have you tried applying a similar policy to the routes as they are advertised out to the RR clients?
by IPANetEngineer
Mon Jan 27, 2020 6:24 pm
Forum: Forwarding Protocols
Topic: how to disable in RIP settings redistribute RIP received routes
Replies: 2
Views: 1811

Re: how to disable in RIP settings redistribute RIP received routes

If the routes are received by RIP from a RIP neighbor, they are not "redistributed" but rather learned routes in RIP. You can however filter the routes with a prefix list by interface. First create the prefix lists with the routes you want to permit/deny in and then another prefix list for...
by IPANetEngineer
Mon Jan 27, 2020 12:49 pm
Forum: Forwarding Protocols
Topic: BGP reflection, no filtering?
Replies: 4
Views: 2135

Re: BGP reflection, no filtering?

A few questions:

1) What version or versions of RouterOS are involved?
2) Are the RR clients all MikroTIk/RouterOS or are there other NOS?
by IPANetEngineer
Mon Jan 27, 2020 12:20 am
Forum: RouterBOARD hardware
Topic: Mikrotik Switch Lenovo Server [SOLVED]
Replies: 8
Views: 7478

Re: Mikrotik Switch Lenovo Server [SOLVED]

This is a pretty simple solution. You can purchase DAC cables that are flashed on one end for Lenovo and are generic at the other end (since MikroTik accepts almost all types) https://www.fs.com/c/10g-sfp-dac-1114 We've had a lot of success with FS.com when connecting hypervisors, servers, storage, ...
by IPANetEngineer
Sun Jan 26, 2020 5:30 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 8242

Re: Feature Request - BGP RPKI

It's only a matter of time before RPKI becomes a standard for most IP transit peerings. This is a feature we desperately need to keep using MikroTik routers to peer into the DFZ.

BGP FlowSpec is also important for DDoS mitigation.
by IPANetEngineer
Sat Jan 25, 2020 9:44 pm
Forum: Forwarding Protocols
Topic: Customer ASN and Prefix
Replies: 1
Views: 1653

Re: Customer ASN and Prefix

You need to use iBGP throughout your AS - redistributing in and out of OSPF for this kind of use case is something i'd avoid. Here are config examples from a presentation I did: https://mum.mikrotik.com//presentations/US13/kevin.pdf Ideally you want a full table Route Reflector to take full tables a...
by IPANetEngineer
Sat Jan 25, 2020 8:35 pm
Forum: General
Topic: PPoE server - clients disconected after 5min
Replies: 14
Views: 2169

Re: PPoE server - clients disconected after 5min

A few questions

1. How many PPPoE sessions do you have?
2. What is the total throughput?
3. Did you recently add more clients?
4. What do the CPU/Memory resources look like?
by IPANetEngineer
Sat Jan 25, 2020 8:25 pm
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 6
Views: 5599

Re: VRF Lite [SOLVED]

OSPF is not an ideal routing protocol for hub/spoke tunnels, issues with one spoke can affect all the others - it's not scalable. You'll find similar guidance in Cisco as well. BGP is really the way to go as it has much better filtering options and you can assign a different AS for each spoke site t...
by IPANetEngineer
Fri Jan 24, 2020 4:15 am
Forum: Forwarding Protocols
Topic: OSPF Transit Fabric
Replies: 8
Views: 2749

Re: OSPF Transit Fabric

Glad you found the transit fabric helpful!

One of the largest WISPs in the US who is a client of ours (2000+ towers) uses it in certain areas of their network to increase capacity between towers.

You should file a bug report with MikroTik since you found a repeatable error so that work isn't lost
by IPANetEngineer
Wed Jan 22, 2020 2:08 pm
Forum: Forwarding Protocols
Topic: Blog how-to: Juniper to MikroTik - MPLS and VPNv4 interop
Replies: 1
Views: 1896

Blog how-to: Juniper to MikroTik - MPLS and VPNv4 interop

Kicking off the new year of blog posting with an article on MPLS and VPNv4 interop between Juniper and MIkroTik. Here is the article link and overview of the design with the configs from EVE-NG. https://stubarea51.net/2020/01/22/juniper-to-mikrotik-mpls-and-vpnv4-interop/ https://stubarea51.net/wp-c...
by IPANetEngineer
Wed Jan 22, 2020 6:31 am
Forum: Beginner Basics
Topic: Unable to talk to Proxmox
Replies: 5
Views: 1307

Re: Unable to talk to Proxmox

I've used quite a few x520s in Hypervisors and they definitely need Intel-chipped DAC or SFPs. That's most likely your issue.
by IPANetEngineer
Wed Jan 22, 2020 4:19 am
Forum: RouterBOARD hardware
Topic: Update on CRS354 Switches? (moved post)
Replies: 13
Views: 4892

Re: Update on CRS354 Switches? (moved post)

Awesome, now all we need is stacking on the 40G ports. MikroTik was working on it when I talked to them in Vienna last year at MUM Europe. I hope we see that as a feature this year. It would be nice to be able to build LACP channels across multiple switches.
by IPANetEngineer
Wed Jan 22, 2020 3:07 am
Forum: Forwarding Protocols
Topic: Access between VRFs
Replies: 1
Views: 1942

Re: Access between VRFs