Community discussions

MikroTik App

Search found 1180 matches

by IPANetEngineer
Mon May 18, 2020 5:34 pm
Forum: Forwarding Protocols
Topic: Need for IBGP?
Replies: 1
Views: 323

Re: Need for IBGP?

an iBGP peering ensures that both border routers have a full view of the routes of the other router and also the interior of the network (if you're iBGP based on the inside) In most cases, an iBGP peering is desired between two routers in the same ASN that take in full tables. Otherwise, traffic cou...
by IPANetEngineer
Mon May 18, 2020 4:42 pm
Forum: Forwarding Protocols
Topic: OpenFlow feature?
Replies: 7
Views: 1919

Re: OpenFlow feature?

OpenFlow is still very much in use! ISPs, Internet Exchanges and Data Centers all have use cases for OpenFlow. There is a fantastic open source controller called Faucet that is easy to get up and running. https://faucet.nz/ We have been working on a project to use OpenFlow to manage traffic engineer...
by IPANetEngineer
Tue May 12, 2020 7:32 pm
Forum: RouterBOARD hardware
Topic: CCR2004 : BGP Benchmarks
Replies: 14
Views: 2490

Re: CCR2004 : BGP Benchmarks

I'm waiting on my CCR2004 to get here. Then i'm going to benchmark it with our iperf3 and BGP full table performance lab that we've used for MUM Presentations in the past.

We maxed out the CCR1072 when it first came out with 80Gbps of traffic, so we should be able to make the CCR1004 fall over ;-)
by IPANetEngineer
Mon May 11, 2020 9:34 pm
Forum: Forwarding Protocols
Topic: BGP advertise smaller prefix than /24 [SOLVED]
Replies: 7
Views: 2023

Re: BGP advertise smaller prefix than /24 [SOLVED]

It's also worth pointing out, that many IP transit providers (not all) will allow you to announce a prefix length greater than a /24 (i.e /25 through /32) over multiple connections to the same provider & will aggregate the prefix to /24 or less when announcing it to peers in the DFZ.
by IPANetEngineer
Mon May 11, 2020 9:16 pm
Forum: General
Topic: CCR2004 w/ARM64 : Where to download packages ? [SOLVED]
Replies: 7
Views: 1239

Re: CCR2004 w/ARM64 : Where to download packages ? [SOLVED]

I'm curious to know the answer to this as well.

Does the long term image load and run properly?
by IPANetEngineer
Mon May 11, 2020 4:16 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 38
Views: 15537

Re: WE NEED EIGRP

However for WISP networks, hands down EIGRP. And since it's quite simple i'd wager its a lot easier to program and implement than IS-IS As consultants, we design and build a *lot* of WISP networks globally and I can probably count on one hand the number of times i've seen EIGRP used in a WISP in th...
by IPANetEngineer
Fri Apr 03, 2020 6:43 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: RFC3021 /31 point-to-point support in v7
Replies: 4
Views: 1831

Re: Feature Request: RFC3021 /31 point-to-point support in v7

I don't disagree that /31 would be useful but i'd rather see the time spent on improving IPv6 support. The number of IPv6 networks we've been doing consulting work on in the last 12 months has skyrocketed. Once dual stack is in place, IPv4 public requirements don't disappear but are certainly dimini...
by IPANetEngineer
Thu Mar 26, 2020 4:15 pm
Forum: Forwarding Protocols
Topic: BGP orgin route are incomplete/invalid
Replies: 7
Views: 1627

Re: BGP orgin route are incomplete/invalid

when Router C receive the route it is not complete and it will not choose as best path, this is the issue

If a route is not valid or active, it often means the next hop is unreachable. Check that first.
by IPANetEngineer
Wed Mar 25, 2020 5:02 pm
Forum: Forwarding Protocols
Topic: Help with capacity solutions
Replies: 10
Views: 2278

Re: Help with capacity solutions

Are you going to put all of the 1Gbps links into the same data center?
by IPANetEngineer
Wed Mar 25, 2020 4:57 pm
Forum: Forwarding Protocols
Topic: BGP orgin route are incomplete/invalid
Replies: 7
Views: 1627

Re: BGP orgin route are incomplete/invalid

This is normal for most BGP routes and does not indicate a problem. This is typically due to a route being redistributed into BGP. Here are the origin types from the BGP-4 RFC (EGP is no longer used so it's listed but not important anymore) https://tools.ietf.org/html/rfc4271 a) ORIGIN (Type Code 1)...
by IPANetEngineer
Wed Mar 25, 2020 4:53 pm
Forum: Forwarding Protocols
Topic: BGP networks and advertisements
Replies: 2
Views: 1299

Re: BGP networks and advertisements

Does you upstream provider support BGP communities? If so, I'd use those instead of prepending which doesn't work as well anymore.

Can you post the config and routing table for each router?
by IPANetEngineer
Sun Mar 15, 2020 3:08 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 6444

Re: Feature Request - BGP RPKI

Yes, please add this to the list. More and more people are asking for it.
by IPANetEngineer
Wed Mar 11, 2020 5:17 am
Forum: Forwarding Protocols
Topic: VPLS woes, tunnel will not come up
Replies: 4
Views: 2261

Re: VPLS woes, tunnel will not come up

Can you post configs for all 4 routers in the A,B,C,D chain and the output of the following on A and D?

mpls ldp neighbor print detail

mpls forwarding-table print detail

interface vpls print detail
by IPANetEngineer
Mon Mar 09, 2020 11:15 pm
Forum: Forwarding Protocols
Topic: Will Errors on OSPF impact on iBGP
Replies: 8
Views: 2734

Re: Will Errors on OSPF impact on iBGP

Ok - next question is re-adjacency – with OSPF can take up to 5mins will iBGP be the same

How many routes and routers do you have and what OSPF network types are you using - boradcast, point-to-point, etc?
by IPANetEngineer
Mon Mar 09, 2020 11:13 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 3498

Re: OSPF and multiple areas

Is stubbing and range/summary mandatory for take advantage of the benefits? It definitely helps. The topology information is what contributes to CPU overhead and thus convergence time. When you're summarizing, you're only sending routes and not the detailed area topology info. At what level (# of r...
by IPANetEngineer
Mon Mar 09, 2020 7:44 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 3498

Re: OSPF and multiple areas

You can definitely run an additional area and connect it at more than one point. This is why the backbone area exists and when there are redundant paths, they will be used. Areas will definitely help with scaling OSPF when applied to areas of the network that aren't core transit. CPU should be a bit...
by IPANetEngineer
Mon Mar 09, 2020 7:34 pm
Forum: Forwarding Protocols
Topic: Will Errors on OSPF impact on iBGP
Replies: 8
Views: 2734

Re: Will Errors on OSPF impact on iBGP

Yes, OSPF (or any IGP) is needed to provide loopback reachability for an iBGP AS so issues in OSPF that cause routes to flap can affect BGP and cause the peerings go down.

If the network is well built and designed, this shouldn't happen very often.
by IPANetEngineer
Sat Mar 07, 2020 4:26 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 38
Views: 15537

Re: WE NEED EIGRP

You can't separate them. OSPF no matter how much you want to try and pretend differently, it has certain design restrictions that are very restrictive for service providers. Those restrictions make sense in many enterprise environments because of the vastly different topologies and real world condi...
by IPANetEngineer
Sat Mar 07, 2020 3:34 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 38
Views: 15537

Re: WE NEED EIGRP

But we have no other protocol to use, we have OSPF and thats it. So rather than picking OSPF to 'solve problems' we have to figure out ways to solve the problems of an OSPF design. Problems like summarization at key points, but spanning multiple areas. I've had to use multiple OSPF area 0 instances...
by IPANetEngineer
Sat Mar 07, 2020 3:16 pm
Forum: Forwarding Protocols
Topic: Juniper - Mikrotik LDP/BGP based VPLS
Replies: 11
Views: 6133

Re: Juniper - Mikrotik LDP/BGP based VPLS

I have not tried to replicate this exact issue, but I did publish an article a few months ago about Juniper to MIkroTik MPLS with VPNv4 which works well. You can at least use it to verify MPLS between MikroTIk and Juniper. https://stubarea51.net/2020/01/22/juniper-to-mikrotik-mpls-and-vpnv4-interop/
by IPANetEngineer
Fri Mar 06, 2020 4:41 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 38
Views: 15537

Re: WE NEED EIGRP

OSPF works fine for corporate/enterprise IS-IS works far better for 'service provider' environments EIGRP works in both This is **NOT** the way to look at routing protocols. Routing protocols solve problems. We have to stop looking at them as enterprise vs. service provider. OSPF and ISIS are link ...
by IPANetEngineer
Fri Mar 06, 2020 4:35 pm
Forum: Forwarding Protocols
Topic: WE NEED EIGRP
Replies: 38
Views: 15537

Re: WE NEED EIGRP

I would much rather have IS-IS or OSPF segment routing for WISP environments. Nobody wants to run MPLS on EIGRP when you have SR available

EIGRP while released to open standards, wasn't completely opened up so most of the best features are missing anyway.
by IPANetEngineer
Wed Mar 04, 2020 2:02 pm
Forum: Wireless Networking
Topic: Starting a WISP: guide to selecting a routing architecture
Replies: 2
Views: 2152

Starting a WISP: guide to selecting a routing architecture

This is more of a general WISP post than anything but there are some specific MikroTik references in here. i've been wanting to do this for a long time but it needed some depth and attention so it's been on the back burner for a while. I finally got a basic comparison written of all the major WISP r...
by IPANetEngineer
Fri Feb 28, 2020 6:09 pm
Forum: General
Topic: RB4011 and RB1100 AHx4 "bricks" randomly
Replies: 93
Views: 17984

Re: RB4011 and RB1100 AHx4 "bricks" randomly

We've run into this with a few clients that run the 4011 and have used the following as a workaround while we work on a ticket with MikroTik. It seems to be more stable in the few we have tested.

Set the CPU frequency to 1200mhz
system routerboard settings set cpu-frequency=1200
by IPANetEngineer
Fri Feb 28, 2020 6:02 pm
Forum: RouterBOARD hardware
Topic: RB-4011GS lock up issue
Replies: 5
Views: 3084

Re: RB-4011GS lock up issue

We've run into this with a few clients that run the 4011 and have used the following as a workaround while we work on a ticket with MikroTik. It seems to be more stable in the few we have tested.

Set the CPU frequency to 1200mhz
system routerboard settings set cpu-frequency=1200
by IPANetEngineer
Wed Feb 26, 2020 4:24 pm
Forum: General
Topic: Best practice for Upgrading RouterOS on >50 routers?
Replies: 2
Views: 1229

Re: Best practice for Upgrading RouterOS on >50 routers?

We use Unimus for our Data Center and also for our clients. It can backup, notify about config changes and execute automated commands on multiple devices. It supports MikroTik and lots of other vendors as well. It is not expensive and is an excellent tool. https://unimus.net/ https://unimus.net/imag...
by IPANetEngineer
Tue Feb 25, 2020 5:39 pm
Forum: RouterOS v7 BETA
Topic: vxlan performance?
Replies: 18
Views: 6309

Re: vxlan performance?

Having VxLAN support in HW on the CRS326-24S+2Q+RM would be just amazing.
by IPANetEngineer
Mon Feb 24, 2020 4:02 pm
Forum: Forwarding Protocols
Topic: How can i do BGP Peer and Route?
Replies: 1
Views: 1606

Re: How can i do BGP Peer and Route?

A couple of questions:

Can you ping the subnets from within your ASN? Also can you post your routing table?
by IPANetEngineer
Fri Feb 21, 2020 4:20 pm
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 19
Views: 4994

Re: Mikrotik hardware accelerated routing

I completely get that it's not trivial. I spend a lot of time consulting in disaggregated networks where we deploy IP Infusion or Cumulus Linux on ONIE switches and sometimes we have to contend with issues in getting the FIB pushed down into the ASIC. My point is that it's possible in software and t...
by IPANetEngineer
Fri Feb 21, 2020 1:59 pm
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 19
Views: 4994

Re: Mikrotik hardware accelerated routing

There is an important point the OP is asking about that is not being addressed. The marvell prestera ASIC that is in the CRS317 and CRS309 is capable of routing in hardware (not the CPU). The question he is asking is if MIkroTik is considering enabling that functionality (which already exists in the...
by IPANetEngineer
Thu Feb 20, 2020 9:02 pm
Forum: Forwarding Protocols
Topic: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network
Replies: 4
Views: 1711

Re: BGP merging two ASN to one i.e. operating two ASN simultanously in one part of the network

Confederation is really designed to allow eBGP style policy enforcement within an iBGP AS and break up smaller sub-ASNs within one logical ASN. I've done migration and merging of Public ASNs a numer of times and what you really want to look at is running different instances of BGP on routers that ne...
by IPANetEngineer
Tue Feb 18, 2020 7:44 pm
Forum: RouterOS v7 BETA
Topic: CRS3xx MC-LAG in RouterOS 7
Replies: 19
Views: 4917

Re: CRS3xx MC-LAG in RouterOS 7

Now that VxLAN is supported in v7, EVPN would be fantastic to have as well to use as a control plane for VxLAN and for multihoming.
by IPANetEngineer
Tue Feb 18, 2020 7:16 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2261

Re: Connection between two LANs

Can you post the full config and active routing tables for the MikroTik and PF Sense device?
by IPANetEngineer
Tue Feb 18, 2020 6:47 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2261

Re: Connection between two LANs

So the MikroTik router is receiving the ICMP traffic from the host behind the PF Sense firewall and sending it back. Have you performed a capture on the PF Sense FW to see if it receives the traffic? It seems like your issue is in PF Sense based on the data you sent. The MikroTik is routing correctly.
by IPANetEngineer
Mon Feb 17, 2020 6:15 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2261

Re: Connection between two LANs

If you look correctly, he need to route 192.168.0.0/16, as 192.168.5.1 is a part of this network
You're correct, I missed that it's a /16 mask, but I believe the route will still need to be on PF Sense.
by IPANetEngineer
Mon Feb 17, 2020 5:58 pm
Forum: Beginner Basics
Topic: Connection between two LANs
Replies: 13
Views: 2261

Re: Connection between two LANs

Hello, You'll need to add a route : ip route add dst-address=192.168.0.0/16 gateway=10.100.0.60 distance=1 He shouldn't need a route on the MikroTik as both of these will be directly connected networks. More than likely (making an assumption from the drawing), the default GW for the 10.0.0.0/8 netw...
by IPANetEngineer
Mon Feb 17, 2020 5:51 pm
Forum: Beginner Basics
Topic: Deny internet access when VPN is down
Replies: 2
Views: 1192

Re: Deny internet access when VPN is down

Netwatch would probably be the easiest tool.

You can ping a VPN endpoint and then take an action when it is up or down...like enabling a firewall rule to block all traffic out a certain port to the Internet or changing the routes.

https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch
by IPANetEngineer
Mon Feb 17, 2020 4:26 pm
Forum: General
Topic: CRS Ethernet TX Drops
Replies: 4
Views: 1859

Re: CRS Ethernet TX Drops

If you are going to be moving a lot of traffic between ports at different speeds , you may be exceeding the buffer (which is required for moving traffic between ports of different speeds.
by IPANetEngineer
Mon Feb 17, 2020 4:08 pm
Forum: RouterOS v7 BETA
Topic: VXLAN config issues
Replies: 3
Views: 2280

Re: VXLAN config issues

In the lab, I just lowered the VxLAN MTU to 1400 because it was quick and easy. But in production, I would raise the IP MTU of the routed network to something larger like 9000 so that 1500 byte frames can pass without issue.
by IPANetEngineer
Mon Feb 17, 2020 3:43 pm
Forum: Forwarding Protocols
Topic: Maximum amount of BGP routes in MikroTik routes
Replies: 2
Views: 1630

Re: Maximum amount of BGP routes in MikroTik routes

The CCRs will be too slow until RouterOSv7 is out as a stable option with BGP. The example below is 17 minutes of convergence on CCRs. Here are some examples of convergence time for CCR vs. CHR using Free Range Routing as the RR. The full presentation from MUM US 2019 is here: PDF https://mum.mikrot...
by IPANetEngineer
Sun Feb 16, 2020 5:55 pm
Forum: RouterOS v7 BETA
Topic: VxLAN example configuration
Replies: 6
Views: 3852

Re: VxLAN example configuration

You're welcome! I'm not sure if an IPv6 underlay is supported, but I may try that later today :D

EDIT: Looks like the VTEPs and VxLAN interface group multicast address are IPv4 only for now.
by IPANetEngineer
Sat Feb 15, 2020 11:20 pm
Forum: RouterOS v7 BETA
Topic: VxLAN example configuration
Replies: 6
Views: 3852

VxLAN example configuration

Here is a blog post I did with a VxLAN lab in EVE-NG between 3 routers and 3 linux servers:

The blog and configurations are available here:
https://stubarea51.net/2020/02/15/mikro ... ook-vxlan/

Image
by IPANetEngineer
Sat Feb 15, 2020 10:55 pm
Forum: RouterOS v7 BETA
Topic: VXLAN config issues
Replies: 3
Views: 2280

Re: VXLAN config issues

Here is an example working lab in EVE-NG between 3 routers and 3 linux servers from an article I wrote:

Configs are in the link here:
https://stubarea51.net/2020/02/15/mikro ... ook-vxlan/

Image
by IPANetEngineer
Sat Feb 15, 2020 4:01 am
Forum: RouterOS v7 BETA
Topic: vxlan performance?
Replies: 18
Views: 6309

Re: vxlan performance?

Agreed. If we see EVPN added to BGP to support VxLAN in the future, MikroTik will see a massive increase in sales from people who need inexpensive devices to act as a VTEP.
by IPANetEngineer
Fri Feb 14, 2020 1:09 pm
Forum: General
Topic: BGP ERROR
Replies: 5
Views: 2297

Re: BGP ERROR

This meas TCP port 179 for BGP is not answering on the remote end which can be one of several things

1) The source of your peering
2) Firewall rules
3) Issue with the router you are peering with.
by IPANetEngineer
Thu Feb 13, 2020 3:19 pm
Forum: Beginner Basics
Topic: VLAN Tagging between two CCR
Replies: 6
Views: 1646

Re: VLAN Tagging between two CCR

Can you post your config? What type of AirFibers are you using?
by IPANetEngineer
Wed Feb 12, 2020 4:42 pm
Forum: General
Topic: Basic vlan layer 2 config on CRS317-1G-16S+ [SOLVED]
Replies: 8
Views: 2385

Re: Basic vlan layer 2 config on CRS317-1G-16S+ [SOLVED]

This article I wrote will probably be very helpful since you're familiar with Cisco. It translates cisco switching configs for VLANs to the MikroTik equivalent.

https://stubarea51.net/2019/02/06/cisco ... and-vlans/
by IPANetEngineer
Wed Feb 12, 2020 4:38 pm
Forum: Forwarding Protocols
Topic: VRF
Replies: 1
Views: 1392

Re: VRF

Yes, you can do this. Here is an example witjh two Loopback/bridge interfaces

[admin@lab1.iparchitechs.com] > ip route vrf add routing-mark=vrf-1 interfaces=lo1,lo2
by IPANetEngineer
Wed Feb 12, 2020 4:29 pm
Forum: Forwarding Protocols
Topic: Very strange BGP Best Route Selection
Replies: 4
Views: 2098

Re: Very strange BGP Best Route Selection

Typically when everything else is identical, the oldest route wins
by IPANetEngineer
Wed Feb 12, 2020 7:18 am
Forum: Forwarding Protocols
Topic: How to filter OSPF transit traffic
Replies: 4
Views: 2003

Re: How to filter OSPF transit traffic

If you have 200 sites, then OSPF is not the right protocol anyway.

I would look at BGP and filtering to solve this problem
by IPANetEngineer
Tue Feb 11, 2020 9:01 pm
Forum: Forwarding Protocols
Topic: How to filter OSPF transit traffic
Replies: 4
Views: 2003

Re: How to filter OSPF transit traffic

I really prefer BGP for what you're trying to do as I really dislike filtering in OSPF. That said, you could filter the routes for each HQ on the ospf-out chain at the Branch. That should prevent the HQs from transiting the branch in an outage but let the branch still talk to each HQ. Probably somet...
by IPANetEngineer
Tue Feb 11, 2020 6:28 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 46
Views: 15139

Re: Overruns on CSS326-24G-2S+RM

I agree, i'd like to see buffer numbers on all the switching chips to be able to plan. The Marvell Prestera chipset this switch is based on (98DX3236) is used in a few other platforms and the listed buffer space is 12MB for the 24 port model. https://eltex-co.com/upload/iblock/9af/MES_2324P_2348P_da...
by IPANetEngineer
Tue Feb 11, 2020 4:28 pm
Forum: Forwarding Protocols
Topic: Very strange BGP Best Route Selection
Replies: 4
Views: 2098

Re: Very strange BGP Best Route Selection

This is happening because you have them in separate instances. The BGP best path algorithm is only used for routes within the same instance. Otherwise MikroTik's general route selection algorithm is used between instances. From the wiki: "Best path algorithm compares routes received by a single BGP ...
by IPANetEngineer
Tue Feb 11, 2020 3:41 pm
Forum: General
Topic: Mikrotik Rack-mounted Devices Visio Stencils
Replies: 39
Views: 29206

Re: Mikrotik Rack-mounted Devices Visio Stencils

Cool....thanks for all the hard work!
by IPANetEngineer
Sun Feb 09, 2020 5:11 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 4450

Re: CRS317 326 and 328 performance problem ?

I would look at this platform on either side if you want to solve the window problem.

http://wanos.co/wan-optimization/how-wa ... ion-works/
by IPANetEngineer
Sun Feb 09, 2020 4:38 pm
Forum: Useful user articles
Topic: Using RouterOS to QoS your network - 2020 Edition
Replies: 167
Views: 219248

Re: Using RouterOS to QoS your network - 2020 Edition

Agreed, this is great work. :)
by IPANetEngineer
Sun Feb 09, 2020 4:31 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 4450

Re: CRS317 326 and 328 performance problem ?

I think a routed Data Center Interconnect (DCI) is better than Layer 2, so yes I would route between them and then use VPLS if you must extend VLANs.

But, to be clear, this will not solve the TCP window problem.
by IPANetEngineer
Sun Feb 09, 2020 6:56 am
Forum: Beginner Basics
Topic: Configuration
Replies: 3
Views: 1334

Re: Configuration

Here is an article we did on high availability for PPPoE servers. It has example configs in it. Hope it helps!

https://stubarea51.net/2018/04/23/pppoe ... atorsbras/
by IPANetEngineer
Sun Feb 09, 2020 6:50 am
Forum: Forwarding Protocols
Topic: HELP - Network Mikrotik with Radwin (SMALL ISP)
Replies: 2
Views: 1679

Re: HELP - Network Mikrotik with Radwin (SMALL ISP)

I would recommend using OSPF for transit subnets/loopbacks and iBGP (peering to an RR with loopbacks) for customer subnets. Add MPLS if you want to deliver L2VPN or L3VPN services. Here is a topology overview: https://stubarea51.net/wp-content/uploads/2020/02/WISP-Routing-Arch.png Take a look at thi...
by IPANetEngineer
Sun Feb 09, 2020 2:32 am
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 4450

Re: CRS317 326 and 328 performance problem ?

But how can it help if we cannot change the window size on the tunneled clients connections ? The only way I've ever been able to deal with this is by having a WAN optimization box between the DCs like Riverbed or WanOS. We had a DC migration between DCs with 50ms latency and had to use a Riverbed ...
by IPANetEngineer
Fri Feb 07, 2020 6:35 pm
Forum: Forwarding Protocols
Topic: BGP Default Routes from two ISP
Replies: 3
Views: 1731

Re: BGP Default Routes from two ISP

iBGP is a little easier. OSPF can support ECMP and since iBGP uses a loopback to peer - advertised in OSPF as a recursive next hop, it works well.

The only caveat is if you also run MPLS - the LDP implementation that MikroTik uses is not ECMP capable.
by IPANetEngineer
Fri Feb 07, 2020 6:31 pm
Forum: RouterBOARD hardware
Topic: CRS317 326 and 328 performance problem ?
Replies: 16
Views: 4450

Re: CRS317 326 and 328 performance problem ?

Are the data centers in production? How much traffic is normally on the link while you are testing? The CRS326 most likely has 12 MB of packet buffer memory (based on other Marvell Prestera DX3236 board specs) while the CRS 317 packet buffer memory is unknown. As primarily a 10 gig switch, i'd assum...
by IPANetEngineer
Fri Feb 07, 2020 4:07 pm
Forum: Forwarding Protocols
Topic: BGP Default Routes from two ISP
Replies: 3
Views: 1731

Re: BGP Default Routes from two ISP

The only way this works without using routing marks (which i'd avoid) is if you have an eBGP multi-hop peering.

https://wiki.mikrotik.com/wiki/Manual:B ... interfaces
by IPANetEngineer
Wed Feb 05, 2020 4:11 pm
Forum: RouterOS v7 BETA
Topic: new feature request MLAG!!!
Replies: 9
Views: 3404

Re: new feature request MLAG!!!

I would much rather see stacking. MLAG is fine for Layer 2, but it's a nightmare for Layer 3. Stacking works well for both. Considering a lot of the CRS3XX chipsets have L3 HW offload that has yet to be taken advantage of, it would be nice to be able to form an LACP chanel across two or more switche...
by IPANetEngineer
Wed Feb 05, 2020 4:09 pm
Forum: RouterOS v7 BETA
Topic: fq_codel or cake in v7
Replies: 26
Views: 10614

Re: fq_codel or cake in v7

This is the way.
Indeed :lol:

It would be nice to be able to run either fq_codel or cake in RouterOS for better shaping options. Please consider adding this MikroTik.
by IPANetEngineer
Wed Feb 05, 2020 4:06 pm
Forum: RouterOS v7 BETA
Topic: ROS-7-xxx-Dev--X86-64Bit-BGP
Replies: 3
Views: 2953

Re: ROS-7-xxx-Dev--X86-64Bit-BGP

I am anxious to test this as well. There are a number of things in BGP that v7 is supposed to fix/improve.

Hopefully we'll see a new RouterOS v7 in February with BGP added :)
by IPANetEngineer
Wed Feb 05, 2020 4:02 pm
Forum: RouterOS v7 BETA
Topic: New features : Locator ID Separation Protocol
Replies: 1
Views: 1556

Re: New features : Locator ID Separation Protocol

LISP is a protocol that Cisco helped to develop and it never really saw widespread use.

https://orhanergun.net/is-lisp-locator- ... ocol-dead/

What's the specific use case you have in mind to implement in MikroTIk?
by IPANetEngineer
Wed Feb 05, 2020 7:59 am
Forum: Forwarding Protocols
Topic: Using OSPF on private ranges to route internet traffic
Replies: 2
Views: 1605

Re: Using OSPF on private ranges to route internet traffic

One idea I had was to change everything to internal addressing and set up MPLS then have a VPLS instance to each base station and run a central PPPoE concentrator in our datacenter. The problems with this setup is loss of the data-center or the concentrator would cause a 100% outage everywhere. It ...
by IPANetEngineer
Tue Feb 04, 2020 6:30 pm
Forum: Wireless Networking
Topic: WIFI 6 Roadmap
Replies: 22
Views: 11190

Re: WIFI 6 Roadmap

I sure hope so! MIkroTIk WIFI6 would be amazing!
by IPANetEngineer
Tue Feb 04, 2020 3:45 am
Forum: Forwarding Protocols
Topic: Using OSPF on private ranges to route internet traffic
Replies: 2
Views: 1605

Re: Using OSPF on private ranges to route internet traffic

I would consider the CGN NAT range for this as it's not publicly routable 100.64.0.0/10 We use it extensively in our designs for PTP addressing where public addresses would otherwise be used. It works very well. You can then use a public loopback to NAT the traffic to. Here is an example: https://st...
by IPANetEngineer
Tue Feb 04, 2020 2:46 am
Forum: General
Topic: Which 10Gb adapter for server connected to CRS326
Replies: 3
Views: 1212

Re: Which 10Gb adapter for server connected to CRS326

Intel server cards like the DA520 require Intel chipped optical SFPs or coaxial DACs.

If you are using generic SFPs (either optical or DAC), they must be chipped for Intel on the NIC side.

The CRS326 will use a generic SFP without issue.
by IPANetEngineer
Mon Feb 03, 2020 9:24 pm
Forum: RouterBOARD hardware
Topic: Is Good ? x86 Maxxwave Routermaxx Vengeance
Replies: 4
Views: 3468

Re: Is Good ? x86 Maxxwave Routermaxx Vengeance

Yes, it is a great platform. We have used it to test the CHR for each of these presentations. CHR as a BGP Border Router https://mum.mikrotik.com/presentations/EU18/presentation_5188_1524562405.pdf CHR as an MPLS router https://mum.mikrotik.com/presentations/EU19/presentation_6291_1554448059.pdf CHR...
by IPANetEngineer
Mon Feb 03, 2020 6:09 pm
Forum: General
Topic: mikrotik and pfsense pppoe problem
Replies: 2
Views: 699

Re: mikrotik and pfsense pppoe problem

What error is the PPPoE client showing in the log for not connecting?
by IPANetEngineer
Mon Feb 03, 2020 6:08 pm
Forum: Virtualization
Topic: CHR Hyper-Threading [SOLVED]
Replies: 1
Views: 2309

Re: CHR Hyper-Threading [SOLVED]

It's a performance issue. Hyperthreading is helpful for certain types of applications, but not for virtualized routing. There is a good explanation by @TomjNorthIdaho in the linked thread https://forum.mikrotik.com/viewtopic.php?t=138549 Why disable hyper-threading ? Hyper-Threading is a CPU trick t...
by IPANetEngineer
Mon Feb 03, 2020 6:01 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 101
Views: 26403

Re: Add DNS over HTTPS (DoH) support

I prefer 9.9.9.9 / 2620:fe::fe

It has malware protection and is very transparent about not storing or tracking user data.

https://www.quad9.net/policy/
by IPANetEngineer
Mon Feb 03, 2020 4:28 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 101
Views: 26403

Re: Add DNS over HTTPS (DoH) support

But the privacy/restriction problem will only move from the ISP resolver to the DoH resolver chosen. Whether that is an improvement, depends on the local situation. That's a great point, but at least the user has the choice of which DNS resolver to trust and it's obscured to the transit providers.
by IPANetEngineer
Mon Feb 03, 2020 4:10 pm
Forum: General
Topic: Add DNS over HTTPS (DoH) support
Replies: 101
Views: 26403

Re: Add DNS over HTTPS (DoH) support

I might be a minority here, but all this DNS over https/TLS,etc, in my opinion, has nothing to do with user's privacy at all, but it has everything to do with making ad blocking and corporate filtering obsolete. I would tend to disagree. The case you mention is only one possible application of DNS ...
by IPANetEngineer
Mon Feb 03, 2020 3:57 pm
Forum: General
Topic: QoS setup
Replies: 8
Views: 1331

Re: QoS setup

Have you done a packet capture of your video to ensure that all ports/protocols and src/dst have been properly identified to mark?

What does your config look like?
by IPANetEngineer
Sun Feb 02, 2020 4:43 pm
Forum: General
Topic: CRS3xx Q-in-Q MTU max 1496?
Replies: 5
Views: 1208

Re: CRS3xx Q-in-Q MTU max 1496?

The Maximum MTU on that model is 10218 bytes for ports 1-24 and the sfp+ ports ref: https://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards The following commands should raise the MTU for what you need. select the interface numbers to apply interface ethernet set l2mtu=10218 ...
by IPANetEngineer
Sun Feb 02, 2020 1:52 am
Forum: General
Topic: EoIP Tunnels stopped working
Replies: 2
Views: 679

Re: EoIP Tunnels stopped working

Are you using the same version on both sides?
by IPANetEngineer
Sat Feb 01, 2020 5:55 pm
Forum: Forwarding Protocols
Topic: Create BGP Peer within VRF
Replies: 10
Views: 6288

Re: Create BGP Peer within VRF

I believe in version 7, MikroTik is using the native VRF capability of the Linux Kernel, so it will be interesting to see if this is resolved once BGP is released in the beta
by IPANetEngineer
Sat Feb 01, 2020 5:52 pm
Forum: Forwarding Protocols
Topic: Point-to-point (/31) addresses
Replies: 67
Views: 46365

Re: Point-to-point (/31) addresses

Just a warning on using two /32 addresses as a workaround for the /31 problem.

We've had a number of problems with OSPF stability using this approach if you're planning on using OSPF for a dynamic routing protocol.
by IPANetEngineer
Sat Feb 01, 2020 4:56 pm
Forum: General
Topic: CRS326 Port Security
Replies: 1
Views: 552

Re: CRS326 Port Security

What does your current config look like?
by IPANetEngineer
Fri Jan 31, 2020 2:49 am
Forum: Forwarding Protocols
Topic: OSPF - Can't get Symmetrical routing working
Replies: 3
Views: 1574

Re: OSPF - Can't get Symmetrical routing working

Can you also post the routing tables for each node and the IPs of the VPLS endpoints?
by IPANetEngineer
Thu Jan 30, 2020 6:09 pm
Forum: Forwarding Protocols
Topic: BGP as Transit/IP Provider
Replies: 6
Views: 5301

Re: BGP as Transit/IP Provider

I wouldn't redistribute into OSPF for reachability. It would be better to build iBGP in your AS and then build a full table route reflector so that you can deploy a PE router to peer with customers. Here is an example and the presentation I did last year: https://mum.mikrotik.com/presentations/US19/...
by IPANetEngineer
Thu Jan 30, 2020 5:56 pm
Forum: General
Topic: Stacking question
Replies: 3
Views: 909

Re: Stacking question

Currently, it is not possible, but because of a lot of customer requests for it, we are strongly considering to implement it! :]

This is the single most important switching feature our customers for MikroTik consulting are asking for.
by IPANetEngineer
Thu Jan 30, 2020 1:07 am
Forum: RouterBOARD hardware
Topic: Mikrotik Switch Lenovo Server [SOLVED]
Replies: 8
Views: 3945

Re: Mikrotik Switch Lenovo Server [SOLVED]

So it may be helpful to clarify that you have two options to connect the server to the MikroTik switch 1) You had originally asked about a DAC cable which is a coaxial copper cable with SFPs molded and permanently attached to the ends. You can either purchase one from Lenovo, one that is compatible ...
by IPANetEngineer
Tue Jan 28, 2020 7:00 pm
Forum: Beginner Basics
Topic: Dual Stack IPv6 Configuration
Replies: 4
Views: 1298

Re: Dual Stack IPv6 Configuration

Here is a sample config that may be helpful for a subscriber router from an article I did on IPv6 for ISPs It sounds like you are almost there. Make sure you have assigned a subnet from the IPv6 prefix that's delegated to the router. It needs to be on the interface/bridge that yourwired/wireless net...
by IPANetEngineer
Tue Jan 28, 2020 6:01 pm
Forum: Announcements
Topic: MikroTik newsletter January 2020 (#93)
Replies: 26
Views: 22794

Re: MikroTik newsletter January 2020 (#93)

I especially enjoyed reading about the network in Serbia to detect hail. Good stuff!
by IPANetEngineer
Tue Jan 28, 2020 5:42 pm
Forum: Beginner Basics
Topic: vrrp
Replies: 6
Views: 2165

Re: vrrp

It should be the real one...VRRP only answers ARP for the common MAC address and passes the traffic to the real interface. IIRC outbound traffic should originate from the physical interface.
by IPANetEngineer
Tue Jan 28, 2020 2:00 pm
Forum: Virtualization
Topic: Broadcast loop in CHR bridge [SOLVED]
Replies: 2
Views: 1896

Re: Broadcast loop in CHR bridge [SOLVED]

Is there any reason you wouldn't use DHCP relay instead of bridging a Layer 2 tunnel segment?
by IPANetEngineer
Tue Jan 28, 2020 1:58 pm
Forum: Forwarding Protocols
Topic: MIkrotik BGP Monitoring
Replies: 60
Views: 23241

Re: MIkrotik BGP Monitoring

Still, SNMP monitoring of BGP parameters (peer up, number of prefixes received, number of active routes to that peer) would be welcome, e.g. for graphing.

I agree, I've been dying to get SNMP monitoring of BGP peers for a long time.
by IPANetEngineer
Tue Jan 28, 2020 1:22 pm
Forum: Forwarding Protocols
Topic: OSPF - Can't get Symmetrical routing working
Replies: 3
Views: 1574

Re: OSPF - Can't get Symmetrical routing working

A few things to look at

1) Cost can be set on both sides of the link, so make sure you've set the cost on the correct side
2) Cost does not cross areas, if one of the links is in a different area, that could also contribute to the problem

Can you post the MikroTik and Cisco configs?
by IPANetEngineer
Mon Jan 27, 2020 8:37 pm
Forum: Forwarding Protocols
Topic: OSPF Transit Fabric
Replies: 8
Views: 2022

Re: OSPF Transit Fabric

I’ve just received an answer from MikroTik: Thank you for the report. There is a known problem with enabled connection tracking and fragmented packets. If OSPF packet is being fragmented, then connection tracking passes it to OSPF twice, causing an error. Currently as a workaround I can suggest to ...
by IPANetEngineer
Mon Jan 27, 2020 6:27 pm
Forum: Forwarding Protocols
Topic: BGP reflection, no filtering?
Replies: 4
Views: 1680

Re: BGP reflection, no filtering?

It looks like you're applying this on routes learned inbound. Have you tried applying a similar policy to the routes as they are advertised out to the RR clients?
by IPANetEngineer
Mon Jan 27, 2020 6:24 pm
Forum: Forwarding Protocols
Topic: how to disable in RIP settings redistribute RIP received routes
Replies: 2
Views: 1428

Re: how to disable in RIP settings redistribute RIP received routes

If the routes are received by RIP from a RIP neighbor, they are not "redistributed" but rather learned routes in RIP. You can however filter the routes with a prefix list by interface. First create the prefix lists with the routes you want to permit/deny in and then another prefix list for the outbo...
by IPANetEngineer
Mon Jan 27, 2020 12:49 pm
Forum: Forwarding Protocols
Topic: BGP reflection, no filtering?
Replies: 4
Views: 1680

Re: BGP reflection, no filtering?

A few questions:

1) What version or versions of RouterOS are involved?
2) Are the RR clients all MikroTIk/RouterOS or are there other NOS?
by IPANetEngineer
Mon Jan 27, 2020 12:20 am
Forum: RouterBOARD hardware
Topic: Mikrotik Switch Lenovo Server [SOLVED]
Replies: 8
Views: 3945

Re: Mikrotik Switch Lenovo Server [SOLVED]

This is a pretty simple solution. You can purchase DAC cables that are flashed on one end for Lenovo and are generic at the other end (since MikroTik accepts almost all types) https://www.fs.com/c/10g-sfp-dac-1114 We've had a lot of success with FS.com when connecting hypervisors, servers, storage, ...
by IPANetEngineer
Sun Jan 26, 2020 5:30 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - BGP RPKI
Replies: 23
Views: 6444

Re: Feature Request - BGP RPKI

It's only a matter of time before RPKI becomes a standard for most IP transit peerings. This is a feature we desperately need to keep using MikroTik routers to peer into the DFZ.

BGP FlowSpec is also important for DDoS mitigation.
by IPANetEngineer
Sat Jan 25, 2020 9:44 pm
Forum: Forwarding Protocols
Topic: Customer ASN and Prefix
Replies: 1
Views: 1305

Re: Customer ASN and Prefix

You need to use iBGP throughout your AS - redistributing in and out of OSPF for this kind of use case is something i'd avoid. Here are config examples from a presentation I did: https://mum.mikrotik.com//presentations/US13/kevin.pdf Ideally you want a full table Route Reflector to take full tables a...
by IPANetEngineer
Sat Jan 25, 2020 8:35 pm
Forum: General
Topic: PPoE server - clients disconected after 5min
Replies: 14
Views: 1628

Re: PPoE server - clients disconected after 5min

A few questions

1. How many PPPoE sessions do you have?
2. What is the total throughput?
3. Did you recently add more clients?
4. What do the CPU/Memory resources look like?
by IPANetEngineer
Sat Jan 25, 2020 8:25 pm
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 2698

Re: VRF Lite [SOLVED]

OSPF is not an ideal routing protocol for hub/spoke tunnels, issues with one spoke can affect all the others - it's not scalable. You'll find similar guidance in Cisco as well. BGP is really the way to go as it has much better filtering options and you can assign a different AS for each spoke site t...
by IPANetEngineer
Fri Jan 24, 2020 4:15 am
Forum: Forwarding Protocols
Topic: OSPF Transit Fabric
Replies: 8
Views: 2022

Re: OSPF Transit Fabric

Glad you found the transit fabric helpful!

One of the largest WISPs in the US who is a client of ours (2000+ towers) uses it in certain areas of their network to increase capacity between towers.

You should file a bug report with MikroTik since you found a repeatable error so that work isn't lost
by IPANetEngineer
Wed Jan 22, 2020 2:08 pm
Forum: Forwarding Protocols
Topic: Blog how-to: Juniper to MikroTik - MPLS and VPNv4 interop
Replies: 1
Views: 1563

Blog how-to: Juniper to MikroTik - MPLS and VPNv4 interop

Kicking off the new year of blog posting with an article on MPLS and VPNv4 interop between Juniper and MIkroTik. Here is the article link and overview of the design with the configs from EVE-NG. https://stubarea51.net/2020/01/22/juniper-to-mikrotik-mpls-and-vpnv4-interop/ https://stubarea51.net/wp-c...
by IPANetEngineer
Wed Jan 22, 2020 6:31 am
Forum: Beginner Basics
Topic: Unable to talk to Proxmox
Replies: 5
Views: 976

Re: Unable to talk to Proxmox

I've used quite a few x520s in Hypervisors and they definitely need Intel-chipped DAC or SFPs. That's most likely your issue.
by IPANetEngineer
Wed Jan 22, 2020 4:19 am
Forum: RouterBOARD hardware
Topic: Update on CRS354 Switches? (moved post)
Replies: 13
Views: 4113

Re: Update on CRS354 Switches? (moved post)

Awesome, now all we need is stacking on the 40G ports. MikroTik was working on it when I talked to them in Vienna last year at MUM Europe. I hope we see that as a feature this year. It would be nice to be able to build LACP channels across multiple switches.
by IPANetEngineer
Wed Jan 22, 2020 3:07 am
Forum: Forwarding Protocols
Topic: Access between VRFs
Replies: 1
Views: 1549

Re: Access between VRFs

by IPANetEngineer
Wed Jan 22, 2020 2:58 am
Forum: General
Topic: Internode and IPV6 Prefix and addresses
Replies: 4
Views: 866

Re: Internode and IPV6 Prefix and addresses

add address=2001:44b8:2159:cf01::1 interface=ether2 add address=2001:44b8:2159:cf00::1 advertise=no interface=ether1 add address=2001:44b8:2159:cfff::1 advertise=no interface=pppoe-out1 Are these all supposed to be /128? I don't see a mask assigned. I wrote a brief primer for designing and deployin...
by IPANetEngineer
Tue Jan 21, 2020 6:29 pm
Forum: Beginner Basics
Topic: MSTP for high availibility
Replies: 1
Views: 755

Re: MSTP for high availibility

If you want more rapid and reliable failover than Layer 2 MSTP, a routed network with OSPF or BGP would be more resilient and could failover in milliseconds using BFD.
by IPANetEngineer
Tue Jan 21, 2020 6:19 pm
Forum: General
Topic: VPN and IPv6
Replies: 5
Views: 734

Re: VPN and IPv6

Take a look at OpenVPN on RouterOS. You can put it into the ethernet mode and hand out IPv4 and IPv6.

https://wiki.mikrotik.com/wiki/OpenVPN#Bridge_mode

There is a client for Android and Apple.
by IPANetEngineer
Tue Jan 21, 2020 6:06 pm
Forum: General
Topic: Double IPsec connection - failing [SOLVED]
Replies: 8
Views: 1389

Re: Double IPsec connection - failing [SOLVED]

edit: forgot the most important bit, thanks IPANetEngineer for chiming in! No prob....the other thing you might want to consider for mgmt if it only allows outbound connections is an SSTP outbound tunnel (which traverses NAT with no issue) to a MIkroTik CHR in Digital Ocean or AWS. That way you can...
by IPANetEngineer
Tue Jan 21, 2020 5:04 pm
Forum: Forwarding Protocols
Topic: default route via OpenVPN
Replies: 4
Views: 1702

Re: default route via OpenVPN

There is a good thread on it here.

viewtopic.php?t=136465
by IPANetEngineer
Tue Jan 21, 2020 4:32 pm
Forum: Forwarding Protocols
Topic: SD-WAN with Mikrotik
Replies: 1
Views: 1374

Re: SD-WAN with Mikrotik

This is a pretty broad topic. What features do you need and what kind of network/locations will this serve?
by IPANetEngineer
Tue Jan 21, 2020 9:49 am
Forum: General
Topic: Can't browse through VRF
Replies: 14
Views: 1759

Re: Can't browse through VRF

The behavior you described sounds a lot like an MTU problem. Have you tried pinging from a user computer with the DF bit set to see if you can get 1500 bytes through?
by IPANetEngineer
Tue Jan 21, 2020 6:52 am
Forum: Forwarding Protocols
Topic: WISP MPLS/VPLS Hardware
Replies: 3
Views: 1599

Re: WISP MPLS/VPLS Hardware

Well shucks. That adds about 23 grand to the project. I guess I'll need to rethink the whole thing. Would I be able to pay you to go over this design in a little more detail with me? Charles No problem, shoot an e-mail to consulting@iparchitechs.com with your contact info. We've designed and built ...
by IPANetEngineer
Tue Jan 21, 2020 4:47 am
Forum: General
Topic: WAN Failover with Cradlepoint
Replies: 3
Views: 528

Re: WAN Failover with Cradlepoint

Instead of using the interface list on the NAT statement, try creating two NAT rules with explicit out interface statements - one for the fiber WAN and one for the LTE interface

I've done a similar setup numerous times without issues switching from fiber to LTE on the private LAN side.
by IPANetEngineer
Tue Jan 21, 2020 3:42 am
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 2698

Re: VRF Lite [SOLVED]

VRF Lite in MIkroTik would be using the routing marks as a standalone without MPLS/VPNv4. This is supported.

Are you trying to use routing protocols in a VRF as well?
by IPANetEngineer
Tue Jan 21, 2020 12:13 am
Forum: Forwarding Protocols
Topic: default route via OpenVPN
Replies: 4
Views: 1702

Re: default route via OpenVPN

The problem you are having is more than one default route. With a few exceptions that prob don't apply here, you can't have more than one active. The solution depends on whether you use the router for more than just this VPN or of it's dedicated to only the VPN. If yes, then you may want to create a...
by IPANetEngineer
Tue Jan 21, 2020 12:06 am
Forum: Beginner Basics
Topic: Can't connect to my router anymore [SOLVED]
Replies: 7
Views: 1513

Re: Can't connect to my router anymore [SOLVED]

Your other option would be to use the RJ45 serial port, console in with the proper serial cable and USB adapter and re-enable mac-telnet from the CLI.

It's not Winbox, but you wouldn't have to wipe the config. If the config is very brief, that may be the easiest though.
by IPANetEngineer
Mon Jan 20, 2020 11:52 pm
Forum: Beginner Basics
Topic: Routed public IP’s over transit from upstream provider
Replies: 3
Views: 847

Re: Routed public IP’s over transit from upstream provider

If that's the case, you'll probably want to use each IP individually as a loopback to NAT the traffic to and advertise them in iBGP or just in OSPF. Here is a blog I did that has some of the config you need. You can skip the VPLS/MPLS sections and just use the OSPF/Loopback portion to do this. https...
by IPANetEngineer
Mon Jan 20, 2020 11:09 pm
Forum: Wireless Networking
Topic: 60gHz link with 5gHz failover + Scotch Whisky
Replies: 16
Views: 2772

Re: 60gHz link with 5gHz failover + Scotch Whisky

Technically you could use both with unequal load balancing if you use OSPF and the method outlined below. We've done this on a number of networks with a lot of success. It's certainly not the simplest way to go, but it's reliable and will use all the bandwidth available. https://stubarea51.net/2016/...
by IPANetEngineer
Mon Jan 20, 2020 8:57 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 156
Views: 28900

Re: CCR1072 watchdog reboot

The only solution is to NOT BUY this model is a scam. I wouldn't say that. we have a lot of clients that use it successfully and when it first came out, we were able to sustain 80 Gbps of iperf traffic without issue. I am curious about the config and conditions that are causing the reboots. From re...
by IPANetEngineer
Mon Jan 20, 2020 8:44 pm
Forum: General
Topic: VPN and IPv6
Replies: 5
Views: 734

Re: VPN and IPv6

Are you trying to VPN over IPv6 and get IPv4 and IPv6 or over IPv4?
by IPANetEngineer
Mon Jan 20, 2020 8:37 pm
Forum: General
Topic: Bonding 802.3ad issue
Replies: 9
Views: 1151

Re: Bonding 802.3ad issue

What type of links are you connecting to the ports in the bridge? copper/fiber/RF? If i understood correctly the OP says that there are 2 Bondings inside the same Bridge. If those 2 Bondings inside the same Bridge are 802.3ad there is packet loss, when different there is no packet loss .. so why sh...
by IPANetEngineer
Mon Jan 20, 2020 8:29 pm
Forum: General
Topic: Double IPsec connection - failing [SOLVED]
Replies: 8
Views: 1389

Re: Double IPsec connection - failing [SOLVED]

If you want to test and fallback to the previous config you can always use safe mode. Alternatively or in conjunction with safe mode, you can put a /32 static route in that goes back to the Internet connection you're accessing from. That way it will always be the most specific route in the table for...
by IPANetEngineer
Mon Jan 20, 2020 8:15 pm
Forum: Forwarding Protocols
Topic: WISP MPLS/VPLS Hardware
Replies: 3
Views: 1599

Re: WISP MPLS/VPLS Hardware

We work on a lot of WISPs with MikroTik using the design you mentioned with MPLS/VPLS. I would not use the CRS hardware for anything other than Layer 2 in this type of network. The CPU is not designed for heavy Layer 3 workloads. I'd look at using the CCR family along with a stackable Layer 2 or 3 s...
by IPANetEngineer
Mon Jan 20, 2020 6:55 pm
Forum: Beginner Basics
Topic: Can't connect to my router anymore [SOLVED]
Replies: 7
Views: 1513

Re: Can't connect to my router anymore [SOLVED]

If IPv6 is enabled, you can connect using the link local address.
by IPANetEngineer
Mon Jan 20, 2020 6:48 pm
Forum: Useful user articles
Topic: Using RouterOS to QoS your network - 2020 Edition
Replies: 167
Views: 219248

Re: Using RouterOS to QoS your network - 2020 Edition

You need to use 'limit-at' to guarantee bandwidth instead of 'max-limit' try that and see if you get different results.
by IPANetEngineer
Mon Jan 20, 2020 6:39 pm
Forum: Forwarding Protocols
Topic: Further BGP improvements?
Replies: 4
Views: 1774

Re: Further BGP improvements?

Awesome! Can't wait to try it :D
by IPANetEngineer
Mon Jan 20, 2020 6:24 pm
Forum: Beginner Basics
Topic: Routed public IP’s over transit from upstream provider
Replies: 3
Views: 847

Re: Routed public IP’s over transit from upstream provider

How this needs to be done depends on how many routers you have. Is it just the one, or do you have routers at towers as well?
by IPANetEngineer
Sun Jan 19, 2020 11:27 pm
Forum: RouterOS v7 BETA
Topic: SDWAN using Zerotier
Replies: 13
Views: 5554

Re: SDWAN using Zerotier

I would also love to see ZeroTier implemented.

We use it for remote access to DCs as well as an encrypted transport path between DCs. It's one of my favorite SDWAN implementations.
by IPANetEngineer
Sun Jan 19, 2020 10:44 pm
Forum: Forwarding Protocols
Topic: OSPF+MPLS+VPLS
Replies: 4
Views: 1827

Re: OSPF+MPLS+VPLS

vpls one side is up and other end is down help please, i have checked LDP and MTU on both routers but still its the same and i m stuck Be sure that the transport address is set on the LDP interface or global LDP options. VPLS requires dynamic targeted LDP sessions which must have a consistent trans...
by IPANetEngineer
Sun Jan 19, 2020 10:37 pm
Forum: General
Topic: Bonding 802.3ad issue
Replies: 9
Views: 1151

Re: Bonding 802.3ad issue

What type of links are you connecting to the ports in the bridge? copper/fiber/RF?
by IPANetEngineer
Sun Jan 19, 2020 10:36 pm
Forum: Forwarding Protocols
Topic: question about bgp community
Replies: 5
Views: 1671

Re: question about bgp community

Can you be a little more specific?

Do you want to filter by prefix/length with a community and by prefix/length without a community?
by IPANetEngineer
Tue Oct 15, 2019 4:31 pm
Forum: General
Topic: config mikrotik router as BRAS
Replies: 2
Views: 761

Re: config mikrotik router as BRAS

Here is a guide on HA PPPoE BRAS with MIkroTik that may be helpful.

https://www.stubarea51.net/2018/04/23/p ... atorsbras/
by IPANetEngineer
Mon Oct 14, 2019 7:47 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 48
Views: 10369

Re: New High Performance Routers ! ?

CHR is super unstable product (at least on vmware). We use it only for "the dude" monitoring and 3 ppptp servers for managment. Total throuput is not even 10mbit/s And Even in that case, it locks up. Needs reboot every week. It looses its winbox port and ssh accesibility. We reboot it from the vm c...
by IPANetEngineer
Mon Oct 14, 2019 7:43 pm
Forum: General
Topic: how to split isp multicast iptv on crs326
Replies: 8
Views: 1070

Re: how to split isp multicast iptv on crs326

Are you trying to get PIM or IGMP working or both?
by IPANetEngineer
Mon Oct 14, 2019 7:42 pm
Forum: General
Topic: MikroTik CHR on AWS with IPSec [SOLVED]
Replies: 15
Views: 2752

Re: MikroTik CHR on AWS with IPSec [SOLVED]

Thanks for the update....glad you got it working. :-)

Please mark this as solved
by IPANetEngineer
Sun Oct 13, 2019 6:27 pm
Forum: Forwarding Protocols
Topic: 3 branch offices VLAN over PPTP?
Replies: 5
Views: 2088

Re: 3 branch offices VLAN over PPTP?

Sometimes an onsite visit to see what issues people are having can make all the difference in the world.

Glad you figured it out :D
by IPANetEngineer
Sun Oct 13, 2019 5:55 pm
Forum: General
Topic: Is MikrotikOS good enough to support two networks independent of each other? (one needs PPPoE)
Replies: 41
Views: 6542

Re: Is MikrotikOS good enough to support two networks independent of each other? (one needs PPPoE)

Here are some example configs and a diagram that should point you in the right direction. A few notes on this - I tried to keep the config as simplistic as possible since you're dealing with very low speeds. There are more efficient ways to do this, but it requires more config. Also, I used 10M down...
by IPANetEngineer
Sun Oct 13, 2019 4:14 pm
Forum: Virtualization
Topic: Routeros docker container image
Replies: 9
Views: 6140

Re: Routeros docker container image

I hope so...it would be very useful!
by IPANetEngineer
Sun Oct 13, 2019 3:40 pm
Forum: Beginner Basics
Topic: Using RouterOS to VLAN your network
Replies: 134
Views: 56656

Re: Using RouterOS to VLAN your network

If you're coming from Cisco, this may also be helpful for bridge VLAN configuration in MIkroTik.

https://www.stubarea51.net/2019/02/06/c ... and-vlans/
by IPANetEngineer
Fri Oct 11, 2019 5:39 pm
Forum: Forwarding Protocols
Topic: Filters for +500 prefixes
Replies: 9
Views: 3029

Re: Filters for +500 prefixes

It definitely would be nice to reference a prefix list directly and MikroTik has stated they are working on it. However, from a CPU standpoint, Cisco and Juniper do the same thing mostly Cisco has a route-map that references a prefix list for BGP peers - which requires two different constructs Junip...
by IPANetEngineer
Fri Oct 11, 2019 5:25 pm
Forum: Beginner Basics
Topic: IPv6 how to use it right
Replies: 68
Views: 8442

Re: IPv6 how to use it right

Here is an overview of IPv6 in MikroTik and how it goes from the BGP edge to the last mile with a customer handoff....it might be helpful. The configs for the entire network are in the article. :D https://www.stubarea51.net/2018/09/14/wisp-design-an-overview-of-adding-ipv6-to-your-wisp/ https://www....
by IPANetEngineer
Fri Oct 11, 2019 5:21 pm
Forum: Virtualization
Topic: CHR PROXMOX Performance
Replies: 4
Views: 3566

Re: CHR PROXMOX Performance

Here is a performance comparison I did between ESXi, ProxMox and HyperV

https://www.youtube.com/watch?v=xcgdGA1W_0o
by IPANetEngineer
Thu Oct 10, 2019 4:10 pm
Forum: General
Topic: Best VPN for Mikrotik Router
Replies: 13
Views: 3473

Re: Best VPN for Mikrotik Router

I wouldn't celebrate yet, there's udp in v7, but it wasn't the only missing feature. So it's great step for own use, but not much changed for interoperability with someone else's service using standard OpenVPN. We've been able to interop with non-MikroTik OpenVPN linux builds. It takes a little wor...
by IPANetEngineer
Thu Oct 10, 2019 4:08 pm
Forum: General
Topic: HAVING ISSUES WITH EOIP TUNNEL ON SXT/LHG
Replies: 2
Views: 858

Re: HAVING ISSUES WITH EOIP TUNNEL ON SXT/LHG

What version of RouterOS is running on each device?
by IPANetEngineer
Wed Oct 09, 2019 4:44 pm
Forum: Beginner Basics
Topic: RB2011 slow internet even with fasttrack
Replies: 102
Views: 21990

Re: RB2011 slow internet even with fasttrack

The route cache is set here

[admin@R1] > ip settings set route-cache=no
by IPANetEngineer
Wed Oct 09, 2019 4:03 pm
Forum: Beginner Basics
Topic: Very high latency on CHS with P10 trial.
Replies: 4
Views: 1021

Re: Very high latency on CHS with P10 trial.

Something is definitely off - we don't normally see high latency in the CHR like that.

Have you licensed it with a trial license? If not it's restricted to 1 Mbps throughput and that can def cause latency
by IPANetEngineer
Tue Oct 08, 2019 8:50 pm
Forum: Beginner Basics
Topic: Forwarding port 443 causes internet problems to anyone else?
Replies: 4
Views: 913

Re: Forwarding port 443 causes internet problems to anyone else?

In the last couple of weeks, whenever I forward port tcp 443 I get internet issues. All my other port forwardings work fine, except this one. And it's disabled in IP SERVICES before someone asks :) Seems to be on the latest versions, because today I messed around with an 6.43.16 RB and it worked fi...
by IPANetEngineer
Tue Oct 08, 2019 8:45 pm
Forum: General
Topic: IPSec VPN fails to start - shows errors that I don't know how to solve
Replies: 2
Views: 938

Re: IPSec VPN fails to start - shows errors that I don't know how to solve

The last rule appears to be an IPv6 ipsec issue.

Are you trying to terminate the tunnel on IPv4 or IPv6?
by IPANetEngineer
Tue Oct 08, 2019 8:39 pm
Forum: General
Topic: Best VPN for Mikrotik Router
Replies: 13
Views: 3473

Re: Best VPN for Mikrotik Router

Now that OpenVPN has UDP support in ROSv7, I expect we'll see a large migration to that once ROSv7 is prod and stable.

We've scaled OpenVPN to more than 100,000 clients with MikroTik for IoT solutions....it works really well
by IPANetEngineer
Tue Oct 08, 2019 8:35 pm
Forum: General
Topic: IGMP Snooping on the new bridge implementation (6.41 +)
Replies: 4
Views: 3113

Re: IGMP Snooping on the new bridge implementation (6.41 +)

I worked on an IPTV network recently using CCRs in bridge mode with IGMP Snooping and PIM Sparse and I don't think we ran into any issues. Maybe it was a problem in the older ROS version?
by IPANetEngineer
Tue Oct 08, 2019 8:25 pm
Forum: Forwarding Protocols
Topic: MPLS bug?
Replies: 5
Views: 2754

Re: MPLS bug?

The MIkroTik implementation of MPLS/LDP does not have fast reroute, so first OSPF timers must expire and then LDP timers have to also expire before a path is moved over. Sometimes this happens under a minute and sometimes it takes longer. In, general though, we've deployed a large number of MPLS bas...
by IPANetEngineer
Tue Oct 08, 2019 8:22 pm
Forum: Forwarding Protocols
Topic: IPSec/L2TP
Replies: 3
Views: 2029

Re: IPSec/L2TP

You'll probably need a bit of trial and error with this one but I think this is a fairly close translation into RouterOS from iptables

/ip firewall filter
add action=accept chain=input dst-port=1701 in-interface=ether1 protocol=udp src-port=500
by IPANetEngineer
Tue Oct 08, 2019 8:10 pm
Forum: Forwarding Protocols
Topic: Core DHCP-RADIUS / MPLS/VPLS+VLAN
Replies: 2
Views: 1993

Re: Core DHCP-RADIUS / MPLS/VPLS+VLAN

I've done this for a number of clients with Radius DHCP over VPLS except for the dynamic VLAN assignment which can be done one of two ways with radius: via dot1x or on wireless using CAPSMAN. If those don't work for you, I would probably use the API to set the VLAN based on the radius response. Also...
by IPANetEngineer
Tue Oct 08, 2019 4:37 pm
Forum: General
Topic: Best VPN for Mikrotik Router
Replies: 13
Views: 3473

Re: Best VPN for Mikrotik Router

This often depends on what the clients will be... Phones, Laptops, servers, firewalls?? You also need to consider the type of Internet connection the clients will be coming from - in some cases, TCP/443 behind NAT is all you are allowed to use. UDP based VPNs are great if they meet the requirements ...
by IPANetEngineer
Tue Oct 08, 2019 4:28 pm
Forum: Beginner Basics
Topic: ISP Setup
Replies: 9
Views: 1632

Re: ISP Setup

I would strongly recommend the use of a switch-centric design for the core as shown below for several reasons: - Scale - Operational flexibility - Ease of migration and adding capacity - Simplifies failover https://www.stubarea51.net/wp-content/uploads/2018/09/Switch-centric-IPA.png Then utilize Mi...
by IPANetEngineer
Tue Oct 08, 2019 4:12 pm
Forum: Forwarding Protocols
Topic: HTTP Downloads cancels when LDP enabled
Replies: 5
Views: 2020

Re: HTTP Downloads cancels when LDP enabled

Typically the issue you are describing indicates a problem with MTU somewhere.

What are your MTU settings for.

L2
L3
MPLS

?
by IPANetEngineer
Mon Oct 07, 2019 11:25 pm
Forum: General
Topic: Daisy Chain on Wire Speed [SOLVED]
Replies: 12
Views: 3942

Re: Daisy Chain on Wire Speed [SOLVED]

Also, if you use the following page, it will tell you what features are supported in 'hw-offload'

https://wiki.mikrotik.com/wiki/Manual:I ... Offloading
by IPANetEngineer
Mon Oct 07, 2019 11:19 pm
Forum: Forwarding Protocols
Topic: nat question
Replies: 3
Views: 1934

Re: nat question

Awesome....can you please change the thread to "solved"
by IPANetEngineer
Mon Oct 07, 2019 7:37 pm
Forum: Forwarding Protocols
Topic: Filters for +500 prefixes
Replies: 9
Views: 3029

Re: Filters for +500 prefixes

The option to do this is there, you just have to build more than one filter. First build the prefixes common to multiple peers /routing filter add action=accept chain=as-65000-prefixes prefix=203.0.113.0/29 prefix-length=29-32 add action=accept chain=as-65000-prefixes prefix=203.0.113.8/29 prefix-le...
by IPANetEngineer
Mon Oct 07, 2019 4:00 pm
Forum: Forwarding Protocols
Topic: nat question
Replies: 3
Views: 1934

Re: nat question

Here is an example of forwarding port 80 on two different IPs using 203.0.113.0/24 "public" network and the 192.168.0.0/24 private network. /ip firewall nat add chain=dstnat dst-address=203.0.113.11 dst-port=80 action=dst-nat to-addresses=192.168.0.11 to-port=80 /ip firewall nat add chain=dstnat dst...
by IPANetEngineer
Sun Oct 06, 2019 7:04 pm
Forum: Forwarding Protocols
Topic: Static MPLS configuration
Replies: 4
Views: 2962

Re: Static MPLS configuration

OSPF is very easy to setup MPLS with LDP.

Do you have a specific reason why static label distribution is required?
by IPANetEngineer
Sun Oct 06, 2019 7:00 pm
Forum: Forwarding Protocols
Topic: How to connect access router to core router
Replies: 8
Views: 3008

Re: How to connect access router to core router

If you're doing PPPoE, this means that you're working with /32 networking , i'd probably use OSPF to get started and then move to iBGP with OSPF advertising the transit and loopback subnets. You'll have to break OSPF into areas to summarize the users and OSPF is happiest in MIkroTik when you keep th...
by IPANetEngineer
Thu Sep 19, 2019 6:27 pm
Forum: Forwarding Protocols
Topic: UNABLE TO PING OVER EOIP TUNNEL
Replies: 4
Views: 1850

Re: UNABLE TO PING OVER EOIP TUNNEL

Can you share your config?
by IPANetEngineer
Wed Sep 18, 2019 4:56 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53749

Re: RouterOS v7.0beta1 (ARM)

Out of interest is there an expected release date of new revisions, e.g v7.0beta2 every couple weeks? Or would we only get updates every quarter? Thanksk There are no set release schedules for the next beta releases. We will release beta2 once were done fixing current bugs that were found in beta1 ...
by IPANetEngineer
Sun Sep 15, 2019 5:11 am
Forum: Wireless Networking
Topic: Migrating a WISP from Bridged to Routed
Replies: 0
Views: 784

Migrating a WISP from Bridged to Routed

Although not specifically a MikroTik article, there are a lot of WISP operators in here and thought this might be helpful for some of you (and MikroTik is mentioned :wink: ) If you're struggling to figure out how to migrate a WISP from Bridged to Routed, here is a guide to help you get started. http...
by IPANetEngineer
Sat Sep 14, 2019 3:30 pm
Forum: Forwarding Protocols
Topic: OSPF down problem
Replies: 11
Views: 3656

Re: OSPF down problem

I would suggest running a long term packet capture only for IP Protcol 89 on each side of the link so that we can look at the packets as it's failing. You may need to let it run for a while so be sure to give it enough memory and only allow OSPF packets which are small. That's how I normally trouble...
by IPANetEngineer
Fri Sep 13, 2019 11:37 pm
Forum: General
Topic: MikroTik CHR on AWS with IPSec [SOLVED]
Replies: 15
Views: 2752

Re: MikroTik CHR on AWS with IPSec [SOLVED]

AWS gives you full control over the FW. To permit IP Protocol 50, you need this type of rule


Image
by IPANetEngineer
Fri Sep 13, 2019 11:20 pm
Forum: Forwarding Protocols
Topic: REACHING BRANCHES THROUGH DHCP
Replies: 1
Views: 1665

Re: REACHING BRANCHES THROUGH DHCP

What you're trying to do is a little unclear...do you have a drawing of what you want to do or can you make one?
by IPANetEngineer
Fri Sep 13, 2019 4:56 pm
Forum: General
Topic: MikroTik CHR on AWS with IPSec [SOLVED]
Replies: 15
Views: 2752

Re: MikroTik CHR on AWS with IPSec [SOLVED]

Here is a good tutorial on how to open ports in AWS. And I do not agree that you should just open all ports. Unless you are an ISP or Hosting Data Center that has other security appliances deployed, You should only allow the ports that you need and deny the rest. AWS Has great security appliances th...
by IPANetEngineer
Thu Sep 12, 2019 11:59 pm
Forum: General
Topic: Redundant routers/switches
Replies: 11
Views: 1693

Re: Redundant routers/switches

You'll never get 10 Gbps through the CRS317 when routing L3 packets. It maxes out at 2 to 3 Gbps because L3 is handled by a CPU not an ASIC. https://mikrotik.com/product/crs317_1g_16s_rm#fndtn-testresults Here is a guide I did on MikroTik and VLANs to convert from Cisco that may be helpful (testing ...
by IPANetEngineer
Thu Sep 12, 2019 9:07 pm
Forum: General
Topic: MikroTik CHR on AWS with IPSec [SOLVED]
Replies: 15
Views: 2752

Re: MikroTik CHR on AWS with IPSec [SOLVED]

I literally finished setting this up myself this morning. Absolutely as above. You get a private LAN which is 1:1 NAT with a real public IP. You need NAT traversal and the key for me was IPSEC-ESP being open in the firewall. My CHR at home connects no problem as well as parents RB750 but I had to d...
by IPANetEngineer
Thu Sep 12, 2019 5:45 pm
Forum: General
Topic: Public IP Routing
Replies: 6
Views: 1155

Re: Public IP Routing

You don't need to use a public subnet between routers, you can use 10.x.x.x or 100.64.x.x ranges.

Then you can put a single IP on the Router that has the PCs using a new bridge as a loopback and NAT to the single IP. Just replace the /30 route with a /32 route.
by IPANetEngineer
Thu Sep 12, 2019 5:41 pm
Forum: General
Topic: MikroTik CHR on AWS with IPSec [SOLVED]
Replies: 15
Views: 2752

Re: MikroTik CHR on AWS with IPSec [SOLVED]

AWS Doesn't normally pass a true public to the guest VM so you need to make sure that you have NAT Traversal enabled for IPSEC. What are the settings you are using? Can you share your config?
by IPANetEngineer
Thu Sep 12, 2019 5:38 pm
Forum: General
Topic: Redundant routers/switches
Replies: 11
Views: 1693

Re: Redundant routers/switches

The CRS317 is intended for 10G L2 switching and not routing.

What kind of throughput do you need through the Hypervisors?
by IPANetEngineer
Thu Sep 12, 2019 1:53 am
Forum: RouterOS v7 BETA
Topic: Should OSPF work?
Replies: 3
Views: 3502

Re: Should OSPF work?

I'm trying to configure OSPF for IPv6 to test recursive routing in v7 to route ipv6 you should use OSPFv3. as far as i see, you have set this under /routing ospf instance using the new 'version' attribute [admin@hgw] /routing/ospf/instance> print Flags: D - dynamic, X - disabled, I - inactive 0 ver...
by IPANetEngineer
Wed Sep 11, 2019 11:41 pm
Forum: RouterOS v7 BETA
Topic: Should OSPF work?
Replies: 3
Views: 3502

Should OSPF work?

I'm trying to configure OSPF for IPv6 to test recursive routing in v7 Since this is a limited release, should it be working? Everything seems in order and I can ping on the /64 between routers, but there is no neighbor adjacency R1 - RB3011 /routing ospf instance add name=ospf-instance-1 router-id=1...
by IPANetEngineer
Wed Sep 11, 2019 9:31 pm
Forum: General
Topic: Feature requests
Replies: 1216
Views: 261995

Re: Feature requests

Is it what you expect or what you're afraid of? Because it's like this by design: if you broke access 'forever', it will be rolled back. But generally ssh is quite tolerant to network instability. Well, it is certainly a weak point in the RouterOS "safe mode" that it immediately rolls back all chan...
by IPANetEngineer
Wed Sep 11, 2019 9:11 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 179321

Re: RouterOS v7.0 beta1 - when?

Recursive nexthops in v7 works without any scripts.
❤️
Woahhhhhhhhhhhh!!!!

+1000000000000 :lol:
by IPANetEngineer
Sat Sep 07, 2019 5:00 pm
Forum: Forwarding Protocols
Topic: OSPFv3 problem
Replies: 2
Views: 1758

Re: OSPFv3 problem

I believe this problem was discussed here:

viewtopic.php?f=14&t=151650

The workaround was to run two OSPF instances since there is no way to change the link local
by IPANetEngineer
Fri Sep 06, 2019 4:46 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 53749

Re: RouterOS v7.0beta1 (ARM)

Image
by IPANetEngineer
Wed Sep 04, 2019 6:34 pm
Forum: Forwarding Protocols
Topic: Packet marking by BGP peer
Replies: 2
Views: 1848

Re: Packet marking by BGP peer

When you say that you need to "account" for it, what does that mean exactly?

Seems like you could use netflow for this purpose and then pull the data out of a netflow collector instead of adding the CPU overhead of marking every single packet
by IPANetEngineer
Sat Aug 31, 2019 3:25 am
Forum: Forwarding Protocols
Topic: OSPF redundancy and load balancing with different capacity
Replies: 5
Views: 2379

Re: OSPF redundancy and load balancing with different capacity

We came up with a design to solve this problem for a client WISP and then published the solution which is here: https://www.stubarea51.net/2016/10/27/wisp-design-using-ospf-to-build-a-transit-fabric-over-unequal-links/ We took it a step further and paired it with BGP and presented the design at the ...
by IPANetEngineer
Wed Aug 28, 2019 7:46 pm
Forum: General
Topic: VLAN configuration approach, correct or not ?
Replies: 5
Views: 1112

Re: VLAN configuration approach, correct or not ?

I actually wrote an article to help people who have learned Layer 2 in Cisco migrate to MikroTik VLAN configuration.

https://www.stubarea51.net/2019/02/06/c ... and-vlans/
by IPANetEngineer
Wed Aug 28, 2019 6:01 pm
Forum: Forwarding Protocols
Topic: BGP and more specific routes.
Replies: 10
Views: 2817

Re: BGP and more specific routes.

Try using 'aggregate' instead of 'network' and check the include IGP option, that should fix the issue you're seeing.
by IPANetEngineer
Wed Aug 28, 2019 4:44 pm
Forum: Forwarding Protocols
Topic: VPN4 BGP routes loading [SOLVED]
Replies: 5
Views: 2775

Re: VPN4 BGP routes loading [SOLVED]

Any chance you can grab a packet capture from BGP / MPLS when the routes are going in and out? Might provide a clue as to what it's unhappy about
by IPANetEngineer
Wed Aug 28, 2019 4:41 pm
Forum: Forwarding Protocols
Topic: IPTV with CRS328-24P-4S+RM 700 Mbit
Replies: 1
Views: 1735

Re: IPTV with CRS328-24P-4S+RM 700 Mbit

Are you trying to create a Rendezvous Point for the headend feed from your upstream provider?
by IPANetEngineer
Wed Aug 28, 2019 3:47 pm
Forum: Forwarding Protocols
Topic: BGP and more specific routes.
Replies: 10
Views: 2817

Re: BGP and more specific routes.

Turn synchronization off and announce the prefixes you need. Unlike Cisco, MikroTik will announce whatever prefix length you specify in networks if synchronization is turned off. You don't need a static route for the BGP advertisement.
by IPANetEngineer
Tue Aug 27, 2019 7:05 pm
Forum: Forwarding Protocols
Topic: BGP Multihomed (Single Router)
Replies: 5
Views: 2124

Re: BGP Multihomed (Single Router)

I agree with pe1chi , if you're using your border routers as a stateful firewall for traffic to customers and BGP full tables, you need to redesign the way you are doing things and break out security devices into a separate box - independent of the border router.
by IPANetEngineer
Tue Aug 27, 2019 6:50 pm
Forum: Forwarding Protocols
Topic: BGP Multihomed (Single Router)
Replies: 5
Views: 2124

Re: BGP Multihomed (Single Router)

Prepending doesn't work very well these days so i'd choose another strategy. If your ISPs support communities and most large ISPs do, then you can set communities on your routes to either prioritize or deprioritize them via a specific peer. You can also split the prefixes up and advertise specific r...
by IPANetEngineer
Tue Aug 27, 2019 6:25 pm
Forum: Forwarding Protocols
Topic: OSPF Redundant On bridged network
Replies: 3
Views: 1746

Re: OSPF Redundant On bridged network

Why not put the subnet into a VPLS tunnel? Then it will exist as one L2 segment at each switch and you can have a routed network with failover underneath it. here is an example....you don't have to use S-Tag though, you could set it to untagged or a standard 802.1q tag https://www.stubarea51.net/201...
by IPANetEngineer
Tue Aug 27, 2019 5:00 pm
Forum: Forwarding Protocols
Topic: OSPF Redundant On bridged network
Replies: 3
Views: 1746

Re: OSPF Redundant On bridged network

OSPF is not going to help you when the network is bridged. You need to convert to independently routed subnets between the routers and at the towers. Here is an example of migrating from bridged to routed in a presentation I did last year Bridged https://www.stubarea51.net/wp-content/uploads/2019/08...
by IPANetEngineer
Mon Aug 26, 2019 7:15 pm
Forum: Forwarding Protocols
Topic: Site-to-Multisite VPLS
Replies: 3
Views: 1866

Re: Site-to-Multisite VPLS

Watch this podcast (which I am a guest on) and you can listen to us discuss the issues with extending Layer 2

https://thenetworkcollective.com/2017/0 ... nd-layer2/
by IPANetEngineer
Mon Aug 26, 2019 6:03 pm
Forum: Forwarding Protocols
Topic: Site-to-Multisite VPLS
Replies: 3
Views: 1866

Re: Site-to-Multisite VPLS

Extending Layer 2 is complicated and not recommended across countries for data centers. I strongly recommend against this.

Is there a specific reason why each datacenter can't have a routable subnet assigned to it?
by IPANetEngineer
Mon Aug 26, 2019 5:17 pm
Forum: Forwarding Protocols
Topic: EoIP no RX on main side of the bridge
Replies: 5
Views: 2012

Re: EoIP no RX on main side of the bridge

You have an MTU Mismatch and it appears to be inheriting it from the bridge. You need to get the MTUs to match even if you have to lower the whole segment MTU

192.168.30.15
actual-mtu=1380

10.14.100.81
actual-mtu=1458
by IPANetEngineer
Mon Aug 26, 2019 5:08 pm
Forum: Forwarding Protocols
Topic: VPN4 BGP routes loading [SOLVED]
Replies: 5
Views: 2775

Re: VPN4 BGP routes loading [SOLVED]

What does your MPLS config look like?
by IPANetEngineer
Mon Aug 26, 2019 5:01 pm
Forum: Forwarding Protocols
Topic: /ip route print where ... slow
Replies: 2
Views: 2348

Re: /ip route print where ... slow

Route lookups and routing table convergence is significantly faster when using the CHR as a border router.

Here is a presentation I did at MUM Europe in 2018 on that topic.
https://www.youtube.com/watch?v=xcgdGA1W_0o
by IPANetEngineer
Mon Aug 26, 2019 4:34 pm
Forum: Forwarding Protocols
Topic: OSPF Network Statement [SOLVED]
Replies: 3
Views: 2500

Re: OSPF Network Statement [SOLVED]

OSPF, by design will learn and advertise all subnets that it learns to every other router in the area.

What problem are you trying to solve by limiting the subnets that are advertised?
by IPANetEngineer
Tue Jul 16, 2019 4:59 pm
Forum: Forwarding Protocols
Topic: Multicast to PPP clients
Replies: 12
Views: 2950

Re: Multicast to PPP clients

What is the TTL set for on the multicast source? If it's too low, it won't work. If you can't see or set it on the multicast source, then do a packet capture at the PIM RP and see what it's set to.

Run into this issue more than once.
by IPANetEngineer
Tue Jul 16, 2019 4:54 pm
Forum: Forwarding Protocols
Topic: PPPoE over VPLS Tunnel - Client Ping mac server pppoe but it does not connect
Replies: 6
Views: 2230

Re: PPPoE over VPLS Tunnel - Client Ping mac server pppoe but it does not connect

Be sure that you are explicitly defining LDP interfaces and setting the transport to the loopback address. In your configs, it doesn't appear to be set.

VPLS requires targeted LDP sessions and needs the transport IP explicitly set.
by IPANetEngineer
Tue Jul 16, 2019 4:36 pm
Forum: Forwarding Protocols
Topic: OSPF Interface all passive
Replies: 9
Views: 2879

Re: OSPF Interface all passive

Are you saying the interfaces are physically up but show as down in OSPF passive?
by IPANetEngineer
Mon Jul 15, 2019 9:34 pm
Forum: Forwarding Protocols
Topic: MPLS, BGP and OSPF design for wisp
Replies: 28
Views: 8794

Re: MPLS, BGP and OSPF design for wisp

I'd use a 4011...compact and 10 gig capable if needed. It's a fantastic tower router and can even be a border router.
by IPANetEngineer
Mon Jul 15, 2019 8:10 pm
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 44
Views: 16433

Re: IS-IS

Also, in the world of ever increasing security threats, IS-IS runs at Layer 2 and not Layer 3 to form IGP adjacencies, so it is much harder to DDoS the control plane when it doesn't use L3.
by IPANetEngineer
Mon Jul 15, 2019 7:36 pm
Forum: Forwarding Protocols
Topic: OSPF Loopback + MPLS Loopback
Replies: 7
Views: 2752

Re: OSPF Loopback + MPLS Loopback

The other reason for this would be for ECMP as MikroTik does not implement ECMP for LDP.
by IPANetEngineer
Mon Jul 15, 2019 7:35 pm
Forum: Forwarding Protocols
Topic: How to correctly work an OSPF multi area network?
Replies: 3
Views: 1936

Re: How to correctly work an OSPF multi area network?

The backbone area is a fundamental part of OSPF.

What kind of network is this? ISP, Data Center?
by IPANetEngineer
Sat Mar 30, 2019 1:47 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47286

Re: UKNOF 43 CVE

Normis...i'm pretty confident we have replicated the conditions of one of the CVEs from doing some digging on our own for this issue. Without the rules, the router crashed. When we added the rules the router stayed online. Meanwhile CVE-2018-19299 still needs fixing, because even with those perform...
by IPANetEngineer
Sat Mar 30, 2019 2:03 am
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47286

Re: UKNOF 43 CVE

We believe that we have now recreated the conditions of both CVEs and have been able to cause a memory leak and router crash in both of the conditions listed below using software from a common offensive linux security tool for IPv6. soft lockup when forwarding IPv6 packets (CVE-2018-19299); soft loc...
by IPANetEngineer
Fri Mar 29, 2019 6:15 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47286

Re: UKNOF 43 CVE

Until we release the next beta with memory exhaustion fix, this firewall config should stop any attack even with small amount of RAM: admin@MikroTik] /ipv6 firewall> export /ipv6 firewall filter add action=drop chain=forward connection-mark=drop connection-state=new /ipv6 firewall mangle add action...
by IPANetEngineer
Fri Mar 29, 2019 10:01 am
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47286

Re: UKNOF 43 CVE

Would somebody please post some additional information about this. I need to understand what is the problem, the potential impact and what vulnerabilities are possible. Where can I find information to read/learn about this? I am not aware of any workarounds or mitigations any of us can use. I belie...
by IPANetEngineer
Fri Mar 29, 2019 9:45 am
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47286

Re: UKNOF 43 CVE

That's normal standard from Mikrotik when they are faced with a problem to resolve That is not true at all! We have always reacted to issues quickly, all the previous vulnerabilities have been fixed within hours or days time. Even in this case, we did reproduce and acknowledge the issue. In this ca...
by IPANetEngineer
Thu Mar 28, 2019 4:07 pm
Forum: General
Topic: Running IPv6 on Mikrotik? You're out of business in 12 days time
Replies: 32
Views: 18460

Re: Running IPv6 on Mikrotik? You're out of business in 12 days time

Even if there is no way to firewall it on a MikroTik, i'm assuming that once we know what is being set in the packet header, it can be mitigated with another solution based on flow detection and dropping the traffic in a switch. That won't work for everyone obviously, but it would work for a lot of ...
by IPANetEngineer
Thu Mar 28, 2019 3:17 pm
Forum: General
Topic: Running IPv6 on Mikrotik? You're out of business in 12 days time
Replies: 32
Views: 18460

Re: Running IPv6 on Mikrotik? You're out of business in 12 days time

This is also a new one for me...will be digging into it
by IPANetEngineer
Thu Mar 21, 2019 3:34 pm
Forum: Forwarding Protocols
Topic: bgp routing best practice for outbound?
Replies: 3
Views: 1951

Re: bgp routing best practice for outbound?

AS Path prepending is not a technology used for outbound route selection (it controls inbound) and it has limited use in the BGP Global Table these days due to provider traffic engineering with localpref overriding it. My question before commenting would be what are you trying to achieve? Equal load...
by IPANetEngineer
Thu Mar 21, 2019 3:27 pm
Forum: Virtualization
Topic: CHR Hardware
Replies: 14
Views: 5252

Re: CHR Hardware

Hyper-V is hands down the best hypervisor for using a CHR as a BGP edge router. Mostly this is because MikroTIk spent a lot of time building the Hyper-V drivers for the CHR and they used off the shelf drivers for KVM/ESXi The single biggest impact is to get a CPU with a higher clock speed and fewer ...
by IPANetEngineer
Wed Feb 06, 2019 2:50 am
Forum: General
Topic: Cisco to MikroTik – A guide to switching and VLANs
Replies: 0
Views: 666

Cisco to MikroTik – A guide to switching and VLANs

This MikroTik to Cisco article has been on my to-do list for a while. If you know Cisco and want to understand how to work with VLANs in MikroTik's CRS3xx series of switches, here is a guide to get you started. https://www.stubarea51.net/2019/02/06/cisco-to-mikrotik-switching-and-vlans/ https://www....
by IPANetEngineer
Mon Jan 07, 2019 8:21 pm
Forum: Forwarding Protocols
Topic: Redundancy with OSPF
Replies: 2
Views: 1268

Re: Redundancy with OSPF

If you want absolute control over your traffic paths, eBGP will work well, otherwise OSPF will be better than static routes but is more limited in its ability to manipulate traffic. Here is a presentation I did at the US MUM in 2017 which covers a lot of the questions you have in the first half. htt...
by IPANetEngineer
Sun Jan 06, 2019 6:43 pm
Forum: Forwarding Protocols
Topic: BGP/OSPF interaction weiredness (simple lab setup)
Replies: 5
Views: 1487

Re: BGP/OSPF interaction weiredness (simple lab setup)

Nothing weird about this. R2 is going to pick the best route for prefix 3.3.3.0/24 to put into the FIB and it has two choices. 1) An iBGP route with an admin distance of 200 2) An OSPF intra-area route with an admin distance of 110 It's going to pick the OSPF route which means there will be no activ...
by IPANetEngineer
Fri Jan 04, 2019 5:39 pm
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 2367

Re: OSPF Database error

What are your MTU settings for Layer 2 and Layer 3 on each side of the link OSPF is trying to form a neighbor on? Normally getting stuck in two way indicates MTU, have also seen it occur as the result of a network type mismatch. What is the config for the other router? Here is a presentation I did o...
by IPANetEngineer
Thu Jan 03, 2019 5:18 pm
Forum: Forwarding Protocols
Topic: MPLS LDP Neighbor Addresses Blank
Replies: 6
Views: 2406

Re: MPLS LDP Neighbor Addresses Blank

The VPLS MTU is the size of the MTU you want to hand off to your customer. The interface MTU should be set to accommodate the overhead of VPLS. You need at least 1530 to send an 802.1q tagged frame through a VPLS tunnel. https://wiki.mikrotik.com/images/3/35/MTUVPLS.png Take a look at this MUM prese...
by IPANetEngineer
Thu Jan 03, 2019 4:38 pm
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 2367

Re: OSPF Database error

Can you post your configuration?
by IPANetEngineer
Sat Nov 10, 2018 4:06 pm
Forum: Forwarding Protocols
Topic: mpls/vpls over vlan
Replies: 5
Views: 2198

Re: mpls/vpls over vlan

Take a look at this if you want an example of a production deployment with HA for VPLS and public subnets. Configs are in this post - https://www.stubarea51.net/2018/04/23/wisp-design-building-highly-available-vpls-for-public-subnets/ https://dev.stubarea51.net/wp-content/uploads/2018/08/vpls-1.png
by IPANetEngineer
Sat Oct 13, 2018 5:25 pm
Forum: Forwarding Protocols
Topic: RB4011 vs. CCR1009 BGP
Replies: 46
Views: 12444

Re: RB4011 vs. CCR1009 BGP

Thanks for doing the testing MIke! I'm looking forward to putting a 4011 in our lab and benchmarking it against a hardware router.

I'm excited about where MikroTik is headed with more ARM based routers :-)
by IPANetEngineer
Mon Oct 01, 2018 9:37 pm
Forum: Beginner Basics
Topic: BGP Route not used on router
Replies: 3
Views: 493

Re: BGP Route not used on router

Can you post your config minus sensitive information?
export compact hide-sensitive 
by IPANetEngineer
Fri Sep 28, 2018 11:47 pm
Forum: Forwarding Protocols
Topic: MIkrotik BGP Monitoring
Replies: 60
Views: 23241

Re: MIkrotik BGP Monitoring

This would be really nice to have ;-)
by IPANetEngineer
Fri Sep 21, 2018 4:27 pm
Forum: Forwarding Protocols
Topic: OSPF: wrong lsa type
Replies: 14
Views: 1559

Re: OSPF: wrong lsa type

To clarify what you are trying to do here... Are you trying to advertise a summary route out of the stub area? If so, the area range command is what you're looking for. /routing ospf area range add advertise=yes area=backbone cost=default disabled=no range=192.168.88.0/24 add advertise=yes area=area...
by IPANetEngineer
Tue Sep 18, 2018 5:39 pm
Forum: General
Topic: CCR1009 +- 1500 pppoe
Replies: 2
Views: 600

Re: CCR1009 +- 1500 pppoe

I would consider a design like this with multiple CCRs so that you have redundancy and the ability to add resources. This can also be done in a CHR very well. We've deployed this for clients with a lot of success. https://www.stubarea51.net/2018/04/23/pppoe-high-availability-design-incorporating-mul...
by IPANetEngineer
Tue Sep 18, 2018 5:19 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 48296

Re: v6.43.1 [stable] is released!

Thanks! Just tried it on a CRS317-1G-16S+ and it worked perfectly for the RouterOS and Firmware upgrades :-)
by IPANetEngineer
Mon Sep 17, 2018 6:19 pm
Forum: Forwarding Protocols
Topic: OSPF: Filter routes using firewall
Replies: 4
Views: 767

Re: OSPF: Filter routes using firewall

It might be more helpful to understand why you want to filter OSPF?
by IPANetEngineer
Sun Sep 16, 2018 5:09 pm
Forum: General
Topic: Mikrotik attacked. No idea how.
Replies: 7
Views: 1215

Re: Mikrotik attacked. No idea how.

We've worked with a number of clients that have had compromised routers. As others have suggested, the two best things you can possibly do are

1) Netinstall
2) Restore config from text

When we have done this, we have not seen any further issues with the routers
by IPANetEngineer
Sat Sep 15, 2018 5:30 pm
Forum: Forwarding Protocols
Topic: Juniper - Mikrotik LDP/BGP based VPLS
Replies: 11
Views: 6133

Re: Juniper - Mikrotik LDP/BGP based VPLS

Can you post the output of the MPLS forwarding tables for the Juniper and MIkroTIk routers?
by IPANetEngineer
Sat Sep 15, 2018 5:10 pm
Forum: Forwarding Protocols
Topic: OSPF: Manual cost on PPTP [SOLVED]
Replies: 9
Views: 1440

Re: OSPF: Manual cost on PPTP [SOLVED]

Many many thanks for your great help and idea! It did exactly what I wanted!
Perfect, glad I could help...just update the status of the thread to 'Solved' :-)
by IPANetEngineer
Sat Sep 15, 2018 3:55 pm
Forum: Forwarding Protocols
Topic: OSPF: Manual cost on PPTP [SOLVED]
Replies: 9
Views: 1440

Re: OSPF: Manual cost on PPTP [SOLVED]

No problem! OSPF can be very complicated and takes a while to learn :-) To makes things much easier for yourself, here is what I would do. 1. Put all subnets that connect routers together into the backbone area aka transit links like your PPTP interfaces/subnets 2. Put all subnets that aren't involv...
by IPANetEngineer
Sat Sep 15, 2018 3:05 pm
Forum: Forwarding Protocols
Topic: OSPF: Manual cost on PPTP [SOLVED]
Replies: 9
Views: 1440

Re: OSPF: Manual cost on PPTP [SOLVED]

At first glance, the main issue is with your design. If you look at the MIkroTik Wiki on OSPF area design, you'll see that multiple areas are all attached to the backbone area.But not Area 1 going to Area 2 https://wiki.mikrotik.com/images/c/cf/Image6006.gif OSPF is not intended for areas other than...
by IPANetEngineer
Sat Sep 15, 2018 2:30 pm
Forum: General
Topic: MikroTik WISP Design – An overview of adding IPv6 to your WISP
Replies: 2
Views: 721

MikroTik WISP Design – An overview of adding IPv6 to your WISP

Just wrote an article on how to add IPv6 to your WISP using MIkroTik, complete with configs. It covers adding IPv6 at the Core, the Tower and the subscriber as well as a subscriber device. Hope this is helpful for someone! https://www.stubarea51.net/2018/09/14/wisp-design-an-overview-of-adding-ipv6-...
by IPANetEngineer
Sat Sep 15, 2018 2:21 pm
Forum: Forwarding Protocols
Topic: Routing bug
Replies: 1
Views: 567

Re: Routing bug

There are a lot of stable MIkroTik networks with BGP, OSPF, MPLS/VPLS on the CCR series.

Can you post your config? Do you have a network diagram?
by IPANetEngineer
Sat Sep 15, 2018 2:15 pm
Forum: Forwarding Protocols
Topic: OSPF: Manual cost on PPTP [SOLVED]
Replies: 9
Views: 1440

Re: OSPF: Manual cost on PPTP [SOLVED]

Can you post your config? That might be helpful.

Also please post the output of these commands on each router:
routing ospf interface print detail
routing ospf network print detail
routing ospf lsa print detail
by IPANetEngineer
Sat Sep 15, 2018 7:40 am
Forum: Forwarding Protocols
Topic: MPLS, BGP and OSPF design for wisp
Replies: 28
Views: 8794

Re: MPLS, BGP and OSPF design for wisp

You definitely don't want to do it with a small CRS. Look at using a 3011 at smaller sites and CCR at others.
by IPANetEngineer
Fri Sep 14, 2018 9:42 pm
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 49
Views: 114612

Re: Winbox v3.18 released!

Thanks! will test it in our MirkoTik lab :-)
by IPANetEngineer
Fri Sep 14, 2018 6:51 pm
Forum: Forwarding Protocols
Topic: Injecting partial BGP/Aggregate routes into OSPF
Replies: 7
Views: 1517

Re: Injecting partial BGP/Aggregate routes into OSPF

On the BGP routers, turn on bgp redistribution then add only the wanted routes into ospf-out filter denying the others, so it will redistribute only those? Done this? I fear as the BGP process is single threaded and eats a whole cpu of the CCR it may cause problems. You have to get into hundreds of...
by IPANetEngineer
Thu Sep 13, 2018 5:25 am
Forum: Forwarding Protocols
Topic: MPLS, BGP and OSPF design for wisp
Replies: 28
Views: 8794

Re: MPLS, BGP and OSPF design for wisp

Thanks. On the MTU size, I see some people set it to 1530 for MPLS, some 1580, 1600, and 2000. Is there any downside to setting it to 2000 across the board? Also I am having issues getting the MPLS working out in the field through the various wireless links even though on my lab it works fine. I ha...
by IPANetEngineer
Wed Sep 12, 2018 9:14 pm
Forum: Forwarding Protocols
Topic: Injecting partial BGP/Aggregate routes into OSPF
Replies: 7
Views: 1517

Re: Injecting partial BGP/Aggregate routes into OSPF

How many routes do you want to put in OSPF?
by IPANetEngineer
Wed Sep 12, 2018 4:46 pm
Forum: Forwarding Protocols
Topic: MPLS, BGP and OSPF design for wisp
Replies: 28
Views: 8794

Re: MPLS, BGP and OSPF design for wisp

Here's an example of OSPF/MPLS/VPLS for a WISP with HA DCs and with configs....I'll see what I can dig up for BGP :-)

https://www.stubarea51.net/2018/04/23/w ... c-subnets/
by IPANetEngineer
Mon Sep 10, 2018 2:26 am
Forum: Forwarding Protocols
Topic: MPLS, BGP and OSPF design for wisp
Replies: 28
Views: 8794

Re: MPLS, BGP and OSPF design for wisp

This depends on your use case. Some ISPs may use LDP signalled VPLS for private transport circuits. Other ISPs may use BGP signalled VPLS. In most cases, it's helpful to have iBGP to advertise public subjects and /32 loopbacks even if the majority of traffic is in VPLS. In short, having BGP on the i...
by IPANetEngineer
Sat Sep 08, 2018 9:49 pm
Forum: Forwarding Protocols
Topic: BGP ECMP (multipathing)
Replies: 36
Views: 14453

Re: BGP ECMP (multipathing)

I've been wanting to see this as well, but i'd rather have recursive routing in IPv6 for BGP fixed first. :-)