MikroTik

andrewe02000

This is my basic BGP filtering setup that I wanted to share for others to help clean up the internet. Don't forget to drop your own networks inbound. /routing filter add action=discard bgp-as-path="\\b(0)\\b" chain=bgp_in_filter comment=\ "Reserved RFC7607" add action=discard bgp-as-path="\\b(23456)...

andrewe02000

Does anyone here have an active ONOS implementation using Mikrotik with openflow?

andrewe02000

Load distribution between cores can be done without multithreading. https://www.youtube.com/watch?v=NbfKplzda7I Yes, I have seen that video. It appeared to me that it was one core per session which will help but with the growing routing tables sizes I think it would be a game changer to have multi-...

andrewe02000

What I'm really asking then is not for BGPq3 to support mikrotik but to be able to automate routing filters directly from ROS7 with or without BGPq3 from IRR records. Whether it be ARin, RADB, or other IRRs.

andrewe02000

I am curious if your implementation of bgp will be one core per bgp session or if it will truly be multi-threaded with one bgp session using multiple cores.

andrewe02000

Is it possible to add this to have automated routing policies from the IRRs?

andrewe02000

Currently work in progress Thank you @mrz I am super excited to start playing with whatever you release and give feedback for BGP. I cannot wait to be able to finally share full routing tables between my edge routers to have a truly blended table of all connections let alone to start filtering out ...

andrewe02000

Its to bad we can't have a Virtual MUM... Hint Hint. Wink Wink. Maybe a possibility. I would still enjoy a format like this.

andrewe02000

I have three routers. Router A=> <=Router B=> <=Router C>. A default route exists on Router A to my provider. All routers are setup with OSPF and all internal routes function as normal. Router A has Redistribute Default Route always as type 1. Router B has Redistribute Default Route never. Router C ...

andrewe02000

4x4 MIMO would be greatly appreciated. All the antennas we use currently for Telrad are 4x4 which offers better coverage in the country. Also most of the small cell antennas are 4x4 such as https://www.commscope.com/catalog/anten ... x?id=53481 which we use.

andrewe02000

It's only a matter of time before RPKI becomes a standard for most IP transit peerings. This is a feature we desperately need to keep using MikroTik routers to peer into the DFZ.

BGP FlowSpec is also important for DDoS mitigation.

+1 for BGP Flow Spec as well.

andrewe02000

ROS didn't use Quagga and no there will not be FRR.

What about RPKI? Is it being discussed at least?

andrewe02000

I would also like to see CBRS as I currently run a Telrad Network for band 48. Having the power of ROS on top of CBRS would be a game changer for us.

andrewe02000

3550 - 3700 (CBRS) works great for people in the USA. https://www.fcc.gov/wireless/bureau-divisions/broadband-division/35-ghz-band/35-ghz-band-citizens-broadband-radio Eventually you'd need a software feature for the radios to talk to the SAS (spectrum access database). It looks like we could make ...

andrewe02000

Please add BGP RPKI Filtering.

https://www.arin.net/resources/manage/rpki/

andrewe02000

Please implement NAT64/DNS64 persistent Carrier Grade NAT for those of us that would prefer not to buy a giant A10Networks ThunderCGN.

TAYGA is one open source implementation. http://www.litech.org/tayga/

andrewe02000

Please add ability for LTE equipment to interface with a CBRS SAS. https://cbrs.wirelessinnovation.org/release-1-standards-specifications Really hoping Mikrotik will extend its LTE AP line to the CBRS band in the US for Indoor Category A devices and Outdoor Category B Devices. I wantz to buy a lot. :)

andrewe02000

I would also get a lot of use from this. Please Implement.

andrewe02000

Thank you for the response. I did figure out to reset them. I've been meaning to post back on this for a bit. I would love to see a feature added to ROS to allow the ability to choose whether to use the old devices MAC addresses or just accept the MAC addresses of the new device. Unless there is way...

andrewe02000

+1 for this!

andrewe02000

Thank you for listening and looking into it.

andrewe02000

OK I know why its not working now but I'm at a loss as to why its like this. both of the CR1036-12G-4S routers have the same MAC addresses on the ports. Shouldn't the MAC addresses be different between devices? Why would this be like this?

andrewe02000

I have two CCR1036-12G-4S in production use with ROS v6.25 on each. SFP4 of the first router and SPF1 of the second router is connected to a fiber E-LINE between the two. I am able to pass all traffic normally except that the two CCR1036-12G-4S routers cannot ping each other. The first CCR1036-12G-4...

andrewe02000

I am requesting that the ability to specify the listening interface for the dns service so a firewall rule doesn't have to be written every time an ip is added to the router. I shouldn't have to drop packets because the dns service is listening on all ports. This way theres less overhead as no packe...

andrewe02000

I'm requesting that Suricata be included in ROS 7.

andrewe02000

Where is the latest .FWF file for RB2011UiAS-RM? It's not on routerboard.com. Thank You

andrewe02000

I have 2 RB450Gs connected to each other on ports 2 to 2 and 3 to 3. I then have ports 2 and 3 bonded on each RB450G with active backup set and port 2 set as primary. The connection is established at a gigabit rate but when I speed test from RB450G to RB450G using the built in BTest tool I don't get...

andrewe02000

I would love to see a competitive alternative to RadUSA's TDMoIP SFP gateways that ar $800+. You make fiber SFPs... How about showing TDMoIP some love.

andrewe02000

Its a cloud core and i'll work on getting a config.

andrewe02000

All I would really like to see is this http://meraki.cisco.com/technologies/layer-7-visibility implemented as a feature in ROS. I would like to know from someone at Mikrotik if there is work being done on this and or Suricata. Any feedback from Mikrotik would be much appreciated as this would add gr...

andrewe02000

I have a public address space with a gateway of "x.x.x.1" on a router provided by our fiber provider. On our Mikrotik router connected to the fiber router we have a bridge with an IP of "x.x.x.2". When I speedtest from a host even though the gateway is set to "x.x.x.1" it shows the network as "x.x.x...

andrewe02000

Did you look at this page from the wiki? I was checking it out because I want to setup a simple queue on my virtual AP subnet http://wiki.mikrotik.com/wiki/Manual:Queue#Simple_Queues Thank you. Yes I did look at that and tried to implement it although it did not appear to have any affect on the ban...

andrewe02000

So I want to limit the download and upload speed of a customer on my network. The customer has a public IP address of x.x.x.39 and the Cloud Core is set as a public bridge with the ip x.x.x.2 with gateway x.x.x.1
How do I configure the simple queue? Thank You.

andrewe02000

you'd better ask your ISP to route that address block to you, not to bridge. I would but I don't have my ASN in place yet. Can I have them route it to me without it? I didn't think you could do that. Even with the IP's assigned to me I would like to have a single port be the gateway for both networ...

andrewe02000

Is there a repository that we can get the most recent beta software from to add to the auto upgrade feature? Thanks.

andrewe02000

I see that a few have viewed this page but no help yet. Anyone have any ideas on how this can be done? Thank You.

andrewe02000

I have the following network spaces. IP's are changed to keep anonymous. Public Network: 183.90.145.0/25 Public Gateway: 183.90.145.1 This is a Cisco router where I get a hand off from our ISP. Internal Private Network: 192.168.20.0/21 Private Gateway:192.168.20.1 I want to use only 2 ports on the c...

andrewe02000

Browse the et repository via http. its very comprehensive.

I did parse through the library and yes there is an extensive list of IDS/IPS rulesets but not an extensive protocol detection support as nDPI. Maybe I'm missing something but I really don't see them.

andrewe02000

Browse the et repository via http. its very comprehensive. As long as I can see what traffic is on my network I will be happy. Suricata... nDPI... as long as there is going to be future support for DPI. That's all I'm looking for for right now. I would like to hear from Mikrotik on whether/when it ...

andrewe02000

Do you have a more direct link? I'm having trouble finding a list of protocols for layer 7 visibility.

andrewe02000

How about being able to plug your Android phone or tablet into the USB port. Think of the touch LCD screen on the cloud core router but now on steroids.

andrewe02000

I have heard of them but haven't looked in a while. I agree that being able to mark packets is a huge plus. Me personaly I want the same functionality that we get with our Meraki switches but having IDS/IPS ability is a definite plus. Does suricata have the same protocol detection support as nDPI? L...

andrewe02000

I am requesting that nDPI be made available in ROS for the cloud core. I believe this is possible now due to being able to leverage the performance of the Cloud Core Platform. Thank You.

Search found 43 matches