Hello, I'm having issues with changing MSS for traffic going to an IPsec VPN tunnel. Looking at packet captures, the MSS change works fine when the traffic is excluded from the tunnel, but when it is included, the MSS doesn't seem to change. I've tried both forward and postrouting chains for the cha...
Dear Team, Unfortunately after upgrading RB951G-2HnD to 6.34.4 my IPsec/L2TP from Android clients is not working. Downgrading back to 6.32.4 solves the issue, but even upgrading to the latest 6.35rc45 is not working. The connection just time-outs and does not give any particular error. It seems that...
Hi there, Can you please advise if it's possible to change the order of ingress/egress VLAN translations on Cloud Router Switch ? Currently I am using RouterOS v.6.27 and Winbox 3.0rc12 and to change the order it seems I have to delete the translations and add them in the intended order. It would be...
Hey SwagLord, Thanks for your response, Well that's actually the setup which was causing issues : all three interfaces added to the bridge -> traffic was blocked after a while for a period of time. If it did not work at all, fair enough. But this seems to me as a bug rather than anything else ;) I w...
That example is a bit confusing, how does the switch in the middle knows what ports are assigned to what service-vlan ? I also tried adding a port to egress-vlan-tag to attach the service tag, but nothing was attached : /interface ethernet switch egress-vlan-tag add tagged-ports=ether9 vlan-id=400 a...
Dear All, Can somebody please advise how the egress VLAN tag works when the switch is in service-vid bridge mode ? As I cannot see any difference in frames captured leaving the interface if I enable / disable the following : (none of the tags have changes) /interface ethernet switch egress-vlan-tag ...
I can confirm there is a bug with egress-vlan-translations if you try to assign a customer-tag as a new service tag, it does what it suppose to but then you cannot change it back ( it changes the config but doesn't work ). One then have to remove the rule and create a new one to make it work. But, y...
Am I right if I say that : When I assign a port to a vlan : /interface ethernet switch vlan add ports=ether1 vlan-id=200 learn=yes 1) It should tag the incoming traffic with this tag ( in case of customer bridge mode, it should use the customer vlan (.1q) tags , and if service bridge is used, it sho...
It terms of vlan tag modification / removing , it looks CRS treats .1q tags just as if there was just one and if you send stacked .1q tags to the interface you can modify / remove the outer .1q tag , also you can put an extra .1ad tag on the top. as the frames leave a port, you can do the same , mod...
Hi there, Can you please advise how the vlan port assignment work in case you set the Cloud Router Switch in service vlan bride mode ? /interface ethernet switch set bridge-type=service-vid-used-as-lookup-vid In case of standard customer vlan bride mode, the vlan assignments dictate what port belong...
Dear all, Can you please advise if the following scenario is achievable using the Could Router Switch and how would the configuration look like : CRS_internal_qinq.JPG Basically, I would like the switch separate the traffic based on Service Tag rather than Customer Tag. The reason is that I want to ...
The switch also behaves differently when gets rebooted, is there any configuration applied only after a reboot ? I have also managed to remove the vlans above 4000 ( by factory default and applying the same configuration ) .. which should not be the case .. But the switch still leaks like a hub, com...
Hi there, Can you please advise how the console on the Core Router Switch works ? As I have tried different cables but still not getting output, if I press enter it prints one unknown character. I have tried original cisco console cable, straight and rollover cable with juniper RJ45 to DB-9 adapter....
Dear All, Can you please help with issue I have with CRS125 and simple VLAN scenario where ethernet-1 is a trunk port with vlans 1,100 and port8 should be access port for vlan 1 and port16 access port for vlan100. Unfortunately I cannot make a port as an ACCESS port on this switch, when I mirror the...
What do you mean by changing it from gateway to normal one? Are you doing NAT on that router ? If yes, change masquerade rules to your new 'gateway' interface. Check your DHCP, IP addressing and bridge to swap 1st port with 10th.
Hello, I am using ports 2,3 and wlan1 on RB951G-2HnD to switch traffic within one subnet (192.168.0.0/24). There is a server + another device behind port 2 and several hosts behind port 3. (+some wireless clients on the wlan1 interface) I have a bridge configured to join port2,3 and wlan1, but : -Wh...
The interface changed again :/ , I did not do any change nor the switch restarted and the web interface changed to RB260 :/
I am using chrome, by accessing through separate incognito windows I get the original RB250 interface. The switch is using swOS1.13.
It is a bit weird to be honest
Okay, I got it sorted, It works under a different browser / it stored some wrong information in the browser and messed up the web interface.
I don't know why I did not think of this in the first place
Hiya,
The method using RouterOS works fine to recover RB250GS after downgrading from 1.13 to 1.10.
If you haven't got any routerOS device by hand, you might try tftpd from http://tftpd32.jounin.net/ which is a lightweight tftp server and the latest version can serve as DHCP server as well.
Hi all, My RB250GS started to behave very oddly after playing with VLANs. It seems that the switch thinks it is RB260 as the interface changed and I can also see SFP tab in the menu. I was using swOSv1.12 and added 3 VLANs , vlan1,vlan100 and vlan 200. I set the port 1 as passing all three vlans and...
Here is the code for 2 websites, it can be easily modified to test more addresses. It is rather simple and could be done better but it might help you. Please be aware that the script expects the InternetStatus to be already set, meaning it runs the '#do something commands' just when the status chang...
You are welcome, to add more hosts would be easy, how many would you like to check for how many repeats? Do you want to consider the link down only if all the attempts fail?
As for the netwach functionality, i believe it pings just once and makes its decision upon the outcome.
Hi cicserver, instead of the inbuilt watchdog I am using a simple script which ping an IP address 5 times not just once and just after all 5 failed attempts it performs an action ( this can be adjusted to less than 5 ) . Hope this might help : :local i 0; :local F 0; :local date; :local time; :globa...
Hi there, Could somebody please explain or give a hint what could cause this behaviour ? I have a RB751G-2HnD set up as a client and connected to a wireless AP ( which I have no access to ). The router connects to the wireless just fine, can reach all it needs as well as the clients behind RB751G's ...
Hi, is there any solution for this particular problem but with dynamic Public IP and also default gateway ?
I have a similar problem with my mikrotik and ADSL modem, but I get different Public IP and default gateway IP for each connection.
Thanks