MikroTik

Ascendo

omg its working now

Nope. dnschecker.org not able to resolve any mynetname.net A records from any location.

Ascendo

Where can we find information about switch packet buffers?

Ascendo

There is stock of them where I stay.

Ascendo

Hi all

We usually buy WAP LTE devices for wifi with 3G/4G connectivity, but there seems to be no stock anywhere. Would we be able to build something similar with Basebox 2 + R11e-LTE mini-PCIe card? If so, what antennas should we use?

Thanks

A

Ascendo

Problem solved - some ISP between us and Mikrotik infrastructure was filtering some routes.

Latest Hyper-V CHR image is definitely still corrupt though - "Missing Operating System" when powering on.

Ascendo

Hi all

I'm experiencing difficulty getting CHR to talk to the license server - it just says "connection timed out". This seems to happen on all versions except the RC releases (the latest RC one seems to be corrupted as well, so can't use that either!)

Any ideas?

Thanks

A

Ascendo

90/90 on a 2011 is impressive! RB1100AHx2/4 or CCR1009 should easily get you line rate, probably with encryption too.

Ascendo

Can you do interface bonding with the CRS317? In SwOS the link aggregation on CRS317 is supported at hardware level. In RouterOS it will become available in future. https://wiki.mikrotik.com/wiki/SwOS/CRS317#LAG Great, thanks. Any information on the packet buffer size? We often have problems with p...

Ascendo

Can you do interface bonding with the CRS317?

Ascendo

No problem! Live migration, ESXi or KVM?

Neither...Hyper-V

Ascendo

To be honest I'd start with spanning-tree unless you have significant issues with ports flapping. Remember you can also bring spanning-tree up on the EoIP bridges (on the RBs). If you are looking for load balancing you could do an etherchannel between the sites. You could build on the redundancy by...

Ascendo

Well this is embarrassing: I checked the remote end there was no BPDU filtering enabled. However the local side looks like this: interface GigabitEthernet1/0/23 switchport mode trunk load-interval 30 spanning-tree bpdufilter enable So that would explain the no BPDUs in either direction! While on thi...

Ascendo

We have EoIP between two sites (RB1100AHx2, 6.32) and it's working great. At either end we are running Cisco switches with RAPID-PVST. We are noticing that BPDUs sent from site A do not get to site B and vice versa. Is this by design? Is there a way to make it work? While on the subject, can you set...

Ascendo

Yes, in perfect conditions AHx4 will be twice as fast as AHx2.

That's great, since we can get nearly Gbit on x2 right now.

Ascendo

AHx4 can outperform CCR in single stream setups, but total HW accelearion throughput on CCRs is better.

Now for the $64000 question - can the AHx4 outperform AHx2 in single stream?

Ascendo

@Ascendo For DDoS we're highly specialized on that. For uplinks and edge we use ASR9k. As distribution nexus. But we're now creating a parallels network and mikrotik seems to be fine. This is the project we're building http://seflow.net/2/index.php/en/blog/seflow-european-network-expansion-roadmap ...

Ascendo

Interesting use case for Mikrotik. Do you have any strategy in place for DDoS attacks? How well is the 1072 handling that many peers? For DDoS - Andrisoft Wanguard + RTBH and Source-based blackhole - (set RP Filter to Loose is an absolute must - https://forum.mikrotik.com/viewtopic.php?t=114664). Y...

Ascendo

About 12 clients, mostly 5ghz. That is the total size - the house is mostly a rectangular shape and is very open, except for the bedrooms which are down a small passage. The other option is keep the AC Lite and connect it to Ethernet over powerline (in addition to another AP).

Ascendo

Indoor only, single floor, 300sqm. Internet connection is 100mbps. Mix of 2ghz and 5ghz clients.

Ascendo

Hi all

Have a home coverage issue when using an HAP AC Lite - the coverage is not quite good enough for weaker mobile devices. Running cabling and adding an additional AP is not an option.

Which of the above devices would offer better range? Or is there a better Mikrotik option?

Thanks

A

Ascendo

Interesting use case for Mikrotik. Do you have any strategy in place for DDoS attacks? How well is the 1072 handling that many peers?

Ascendo

Can you get a full BGP table into 1GB? Is it upgradeable?

Ascendo

Anyone have a release date for this? I'm ready to upgrade all of my sites and this unit would cover just about every use I can think of.

Available in stock with some suppliers already.

Ascendo

It is faster with multiple streams

Fair enough. Do you think the RB1100AHx4 can beat the x2 with low stream count?

Ascendo

200Mbps TCP traffic over single ipsec/eoip tunnel is good result. To increase overall performance you need multiple streams (tunnels)

RB1100AHx2 from 5 years ago can do 500mbps+ on a TCP single stream on one EoIP+IPSEC tunnel. 700mbps with multiple TCP streams. Should the CCR not be faster?

Ascendo

What is your clamp MSS setting on the EoIP? If you disable encryption how much faster is it?

Ascendo

If you copy a number of files at once, does it increase the throughput?

Ascendo

What CPU usage are you seeing during that copy?

Ascendo

Looks very low. Can you force it to AES128 and see if there is improvement? May also be getting fragmentation issues.

Ascendo

Thanks. Found the information in the quick start guide too...should probably have checked there first!

Ascendo

Hi all Perhaps a stupid question, but is it possible to connect non passively powered Ethernet devices to port 5 on these routers (e.g. switch, PC, printer etc) without causing damage? I see some other devices have an auto detection feature for the PoE out port but the brochure does not make mention...

Ascendo

We have deployed this to a couple of small, low bandwidth remote sites (CCR1009) and are happy to report that the performance is now exactly what it should be. Will hopefully do some testing this week with more throughput but so far so good.. @Ascendo: What throughput do you get with IPSec on CCR10...

Ascendo

We have deployed this to a couple of small, low bandwidth remote sites (CCR1009) and are happy to report that the performance is now exactly what it should be. Will hopefully do some testing this week with more throughput but so far so good. @MT - thanks for getting this sorted. Hopefully it'll be p...

Ascendo

So I did some additional testing, I can actually push around 800Mbit with a UDP flow and CPU usage is pretty good. However, when I run a TCP benchmark, CPU usage is very high (networking/cpu under profile) which I believe is constraining the TCP throughput now. I think I may have an issue with frag...

Ascendo

So I did some additional testing, I can actually push around 800Mbit with a UDP flow and CPU usage is pretty good. However, when I run a TCP benchmark, CPU usage is very high (networking/cpu under profile) which I believe is constraining the TCP throughput now. I think I may have an issue with frag...

Ascendo

Nathan1, what sort of speeds are you getting per flow, and how high is the latency between the devices? At least there is some progress... Latency is .7ms RTT and I was seeing around 300Mbit, very similar to the ctr. Blasting UDP peaks around 350Mbit, in clear I can push 1Gbit. I was only able to b...

Ascendo

Nathan1, what sort of speeds are you getting per flow, and how high is the latency between the devices? At least there is some progress... Latency is .7ms RTT and I was seeing around 300Mbit, very similar to the ctr. Blasting UDP peaks around 350Mbit, in clear I can push 1Gbit. I was only able to b...

Ascendo

Nathan1, what sort of speeds are you getting per flow, and how high is the latency between the devices? At least there is some progress...

Ascendo

Glad to see this issue is getting attention still. Been waiting to see a fix on it ever since Alex brought it up at the 2016 US MUM.

An actual update from Mikrotik staff would be great...

Ascendo

We've been struggling to get GCM (i.e. software only encryption) working between our CCR1009s and Cisco ASAs. As such I'm in a real pickle having recommended Mikrotik. We'll take any kind of workaround right now (e.g. run CCR1009 as single core router) until there is a proper fix. For now, RB1100AH...

Ascendo

We've been struggling to get GCM (i.e. software only encryption) working between our CCR1009s and Cisco ASAs. As such I'm in a real pickle having recommended Mikrotik. We'll take any kind of workaround right now (e.g. run CCR1009 as single core router) until there is a proper fix. For now, RB1100AHx...

Ascendo

How much IPSEC throughput can it do currently (software only)?

Ascendo

So just to confirm what i am reading, Hex v3 to Strongswan ipsec in transport will yeild somewhere around 100Mbits, and in tunnel can yield more? I want to put one of these in front of my 2011 for the aes128 HW encryption wanna make sure i can hit at least 75/75 Finally received a RB750Gr3 yesterda...

Ascendo

We are looking to replace a pair of old Cisco ASA5510 firewalls with something like a CCR1036 (obviously a pair in VRRP for HA). We just need basic L4 firewalling/NAT (Netflow would be nice too), but have about 350 access rules in place. Will this many access rules cause a problem for the 1036 model...

Ascendo

I wonder if this is related to the issue we are having with the RB1100AHx2: after some time (1-2days) encryption drops from 500+mbps to around 20mbps. Our solution is to disable/enable the IPSec encrypted EoIP tunnel with the scheduler. We gave up with support on this as our workaround only results ...

Ascendo

Problem fixed...lack of understanding of CAPsMAN on my side.

Ascendo

As per subject, I'm using CM2 and if I create slave cap interfaces (to support multiple SSID per radio), I cannot authenticate from the client devices to the slave interface at all (simple wpa2-psk).

Any ideas what could be causing this?

Ascendo

We are running VRRP on a VLAN interface on our CCR1036.

If we create mangle rules referencing the parent interface, will the rules apply for the VRRP interface as well? We want rules to work whether or not the interface is currently active. Or do we need to duplicate the rules for both interfaces?

Ascendo

I bought a p1 license ,but the CHR's license is still free,how can i make it work ? i tried to renew and also restarted the CHR,but it is still free [admin@MikroTik] > /system license renew account: *** password: ************ level: p1 status: done [admin@MikroTik] > /system license print system-id...

Ascendo

Disappointing that the PSU isn't inside the case.

Ascendo

Yes, I believe I've set this up. I haven't tried this configuration before, so you'll want to look at the config with some skepticism. Still, I see the SA byte counters moving, so it looks like the traffic is crossing both the EOIP tunnel and the IPSEC. Here's one side: # feb/24/2015 20:34:11 by Ro...

Ascendo

If you have some time, would you be able to create an EoIP tunnel and encrypt the endpoints? I would be very keen to see if your performance drops 90%+ like it did for us.

Ascendo

Just an update here for anyone interested. After extensive tweaking and simplification of the config, we've managed to extract around 680mbit/sec out of the two RB1100AHx2 routers (including clocking them up to 1333MHz). We bought 2xCCR1009s for another project, and decided to see how fast they woul...

Ascendo

Hi all

As per subject, is this possible? We want to create an Etherchannel between two Cisco switch stacks over two separate EoIP links created with Mikrotik routers. Gut feel says it will work, but searching has produced nothing of any attempts to do this.

Thanks

A

Ascendo

Hi all

Does anyone know if Cisco MACsec/Trustsec encryption will function across two Mikrotik routers providing EoIP connectivity between two networks?

This does not work over a L2 VLAN or L2 QinQ connection, which is all the carrier can offer between the sites.

Thanks

A

Ascendo

Hi all From http://wiki.mikrotik.com/wiki/Manual:IP/ARP " router with properly configured proxy ARP feature acts like a transparent ARP proxy between directly connected networks." Will a Mikrotik router respond to ARP requests to an IP not directly connect if it has a route to that IP? I h...

Ascendo

Thanks, how long will a full table transfer from a peer take?

Ascendo

Hello everyone

I would like to implement 3 of the above to 3 upstream providers, and run iBGP between them.

Traffic expectation will be around 60-80mbps per provider and they will do routing only.

Do you think it would work, or do I need something more powerful?

Thanks

A

Ascendo

Update: we bought 2 RB1100AHx2 and are running EoIP+IPSec between them across the WAN. Works great, getting over 400mbit/sec!

Ascendo

CCR1036 can do up to 3.5GBit of IPsec encrypted traffic

Thanks. I assume that means CCR1009 can do at least 150mbit/sec IPSec. Will combining with EoIP tunneling cause much slowdown? I read in some other thread about IPSec encrypted GRE tunnels being slow - will the same issue affect me here?

Ascendo

Hello all We currently link two sites together with L2TPv3+IPSec using Cisco 2900 routers, but the IPSec performance is horrible (max 50mbps @100%CPU). We want to replace with one of the above routers at either side. Obviously CCR is newer but is the IPSec hardware accelerated yet? Will either of th...

Ascendo

Greets all Trying to create a wireless ptp bridge (indoor, short distance) with two of the above routers. Have upgraded to 6.7. As soon as I use webfig or winbox quickset function, the router is disconnected and I cannot reconnect. Winbox detects the router on the local segment, but it cannot connec...

Ascendo

Thank you for the useful information. Will pick some of those up.

Ascendo

Hi all

I have a new RB2011 which has Eth1 as PoE input. However, when I try supply power through this interface (from a Cisco 2960S), the router does not power on at all. The port on the Cisco is able to power a phone/AP when connected.

Any ideas?

Thanks

A

Ascendo

Hi all

Just bought the above router and I need to know the default IP address for the router and which port I can access it on.

Any help appreciated.

Thanks

A

Ascendo

The NIC is visible, but does not pass traffic. I've spent many hours trying to get this to work to no avail.

Ascendo

Unfortunately not an option for us (6 data centres, all Hyper-V). We'd pay good money to have even the legacy NIC working (as in ver 4.x).

Ascendo

Unfortunately, since version 5.x, even the "'Legacy NIC" in Hyper-V does not work. RouterOS detects the NIC, but it cannot pass any traffic at all. No ARP, no IP, nothing. :( I have tried this on multiple different servers/PCs, with Hyper-V 2.0 and 3.0 (Windows 8), and it simply does not w...

Search found 68 matches