Community discussions

Search found 377 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 8
by mikruser
Sun Aug 04, 2019 7:41 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 14
Views: 1574

Re: GPeR question

normis
Tue Jul 30, 2019 9:57 am
The GPER is a passive device that connects wires together, you can call it Layer1. This is not really a hub.

normis
Fri Aug 02, 2019 3:14 pm
Yes, there is a basic switch chip inside.


Two completely different answers.
You are Dr Jekyll and Mr Hyde??
by mikruser
Thu Aug 01, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 14
Views: 1574

Re: GPeR question

If GPER is just a passive device that connects wires together, then the price is perplexing (50% of Raspberry Pi 4 computer)
by mikruser
Mon Jul 29, 2019 10:31 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 14
Views: 1574

Re: GPeR question

1) Of course it matters (and two port has nothing to do with it)
2) ???
3) Ok
by mikruser
Mon Jul 29, 2019 12:20 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 14
Views: 1574

GPeR question

Hello,
1) at what OSI layer this device work? at L1 like hub, or at L2 like switch?
2) what delay does this device add?
3) why distance is limited to 1500 m?
by mikruser
Tue Jun 11, 2019 1:03 pm
Forum: General
Topic: SNMP traffic monitoring bug
Replies: 2
Views: 225

SNMP traffic monitoring bug

Hello,

CHR 6.44.2
PRTG Network Monitor SNMP Traffic sensor

When i copy file via gigabit adapter, SNMP sensor show only 430 Mbit/s

This is a bug in Mikrotik SNMP or in PRTG?
Image1_snmp_.png
by mikruser
Tue Apr 23, 2019 1:38 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Suggestion: Protocols for Bandwidth Test
Replies: 0
Views: 280

Suggestion: Protocols for Bandwidth Test

Hello,

please add not only udp and tcp, but also protocols 4, 47, 50.
by mikruser
Fri Mar 22, 2019 12:08 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: GRE over IPSEC, CCR, VERY SLOW
Replies: 39
Views: 15482

Re: GRE over IPSEC, CCR, VERY SLOW

GRE+IPsec still slow:
viewtopic.php?f=2&t=146665
by mikruser
Mon Mar 18, 2019 6:49 pm
Forum: General
Topic: Slow speed through gre+ipsec tunnel
Replies: 0
Views: 361

Slow speed through gre+ipsec tunnel

Hello, CHR, 6.44.1, 2 vcpu Xeon Gold CCR1009, 6.44.1 WAN with 45 ms latency [CHR]---wan(tunnel gre+ipsec)wan---[CCR1009] aes128cbc/sha1, Actual MTU = 1426 (Auto) OR aes128ctr/sha1, Actual MTU = 1446 (Auto) Bandwidth Test on CHR to CCR (tcp, receive, 1 connection): between public ip = up to 300 Mbps ...
by mikruser
Mon Mar 18, 2019 5:53 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Please add the ability to choose Proposal
Replies: 11
Views: 1205

Re: Please add the ability to choose Proposal

All my tunnels are configured with IPsec Secret enabled, and I will not change it.

We simply need the ability to choose Proposal for each tunnel.
by mikruser
Mon Mar 18, 2019 4:45 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Please add the ability to choose Proposal
Replies: 11
Views: 1205

Re: Please add the ability to choose Proposal

I still do not see any real benefit of your request. It literally takes 2 seconds to change proposal value for your policies to a different one. /ip ipsec proposal add name=newproposal copy-from=default /ip ipsec policy set [find proposal=default] proposal=newproposal I was just posting this exact ...
by mikruser
Thu Mar 07, 2019 12:19 pm
Forum: General
Topic: Why AES CTR is not hardware accelerated on the CHR?
Replies: 1
Views: 174

Why AES CTR is not hardware accelerated on the CHR?

Hello,

Why AES CTR is not hardware accelerated on the CHR?
Image_chr_.png
by mikruser
Mon Mar 04, 2019 11:58 am
Forum: General
Topic: Does the System\Watchdog on the CHR make sense?
Replies: 0
Views: 159

Does the System\Watchdog on the CHR make sense?

Hello,

Does the System\Watchdog on the CHR make sense?
Can he restart the VM if CHR hangs?
by mikruser
Thu Feb 21, 2019 11:49 am
Forum: General
Topic: vlan question
Replies: 6
Views: 564

Re: vlan question

but I don't want to create additional vlan interfaces
by mikruser
Thu Feb 21, 2019 11:25 am
Forum: General
Topic: vlan question
Replies: 6
Views: 564

Re: vlan question

I can not merge bridges, because bridges have different ip-addresses and dhcp-servers on them.
by mikruser
Wed Feb 13, 2019 6:23 pm
Forum: General
Topic: vlan question
Replies: 6
Views: 564

vlan question

Hello, We have routerboard with ether2 and ether3 - in bridge1 ether4 and ether5 - in bridge2 now we need special port ether6 which should be a member of both bridges, but in bridge1 as untagged default vlan (vlan1), and in bridge2 as tagged vlan2. This is can be done very simply on a managed switch...
by mikruser
Fri Feb 08, 2019 5:01 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Why Fast Path not supported with hardware accelerated IPsec?
Replies: 1
Views: 360

Why Fast Path not supported with hardware accelerated IPsec?

Hello,

Why Fast Path not supported with hardware accelerated IPsec?
by mikruser
Mon Jan 21, 2019 11:12 am
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 462

Re: restore to different hardware

I see a very large number of messages
expected end of command

looking at all, export/import procedure is very bugged on Mikrotik
by mikruser
Mon Jan 21, 2019 10:42 am
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 462

Re: restore to different hardware

but cli command /import do not work:

expected end of command (line 24 column 26)
by mikruser
Fri Jan 18, 2019 6:28 pm
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 462

restore to different hardware

How to copy configuration from router1 to router2 (different hardware)?
I see this post: viewtopic.php?t=115073
My question: how to export and import via Winbox GUI? (not via terminal cli!)
by mikruser
Tue Jan 15, 2019 11:35 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Suggestion: drag and drop rules between routers
Replies: 1
Views: 349

Suggestion: drag and drop rules between routers

Hello,

please add the ability to drag and drop (copy) rules (and other stuff) from one Winbox window to another Winbox window.
by mikruser
Thu Dec 27, 2018 11:41 am
Forum: General
Topic: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]
Replies: 3
Views: 538

Re: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]

in case there is NAT between server and client: google "AssumeUDPEncapsulationContextOnSendRule"
Thanks, it helped!
by mikruser
Thu Dec 27, 2018 10:50 am
Forum: General
Topic: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]
Replies: 3
Views: 538

Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]

Hello, CCR1009, 6.43.8 cannot connect to L2TP server from Windows 7 and Windows 2008 R2. ipsec, error no suitable proposal found. ipsec, error x.x.x.x failed to get valid proposal. ipsec, error x.x.x.x failed to pre-process ph1 packet (side: 1, status 1). ipsec, error x.x.x.x phase1 negotiation fail...
by mikruser
Tue Dec 25, 2018 12:51 pm
Forum: General
Topic: Question about IKE2
Replies: 0
Views: 200

Question about IKE2

What types of authentication does Mikrotik router support with Windows client?
Only "Use machine certificates"? Or also "Use EAP"?
by mikruser
Mon Dec 17, 2018 10:22 am
Forum: General
Topic: Ipsec peers
Replies: 0
Views: 216

Ipsec peers

Hello, I already have several ipsec peers with unique ip addresses (it is used for l2tp/ipsec site-to-site vpn's). Now I need to make a IKEv2 server for incoming connections from remote notebooks. For this i need to create ipsec peer with address 0.0.0.0/0. Is it possible to use this peer with other...
by mikruser
Tue Nov 27, 2018 3:57 pm
Forum: General
Topic: Backup/restore without mac-addresses
Replies: 2
Views: 488

Re: Backup/restore without mac-addresses

My question about Backup/Restore

(Import/Export do not work on my devices)
by mikruser
Tue Nov 27, 2018 3:39 pm
Forum: General
Topic: Backup/restore without mac-addresses
Replies: 2
Views: 488

Backup/restore without mac-addresses

Hello,

How to backup config without mac-addresses?
or how to restore config without changing mac-addresses?
by mikruser
Tue Nov 27, 2018 11:51 am
Forum: General
Topic: Backup/ Restore issue and duplicating Ethernet MAC address [SOLVED]
Replies: 4
Views: 1410

Re: Backup/ Restore issue and duplicating Ethernet MAC address [SOLVED]

But why i do not see Import/Export in Winbox?
by mikruser
Fri Nov 23, 2018 6:57 pm
Forum: General
Topic: After upgrade to 6.41, Ethernet Interface Bandwidth is gone
Replies: 2
Views: 530

Re: After upgrade to 6.41, Ethernet Interface Bandwidth is gone

up!
Why is it removed from Winbox GUI???
(but it is still available from command line: /interface ethernet set ether1 bandwidth=unlimited/unlimited)
by mikruser
Wed Nov 07, 2018 12:20 pm
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 353

Re: Сan't rename interface [SOLVED]

After the command /interface ethernet set ether4-local bandwidth=unlimited/unlimited
I was able to rename the interface
by mikruser
Wed Nov 07, 2018 11:57 am
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 353

Re: Сan't rename interface [SOLVED]

I have this problem again after restoring the configuration
by mikruser
Wed Nov 07, 2018 11:20 am
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 353

Сan't rename interface [SOLVED]

RB750Gr3
ROS 6.43.4
Winbox 3.18

restoring configuration incorrectly restored interfaces, and I need to rename them
but when I try to change the name I get an error: Couldn't change Interface - not supported on this interface (6)
Image_interface.png
by mikruser
Fri Oct 26, 2018 6:44 pm
Forum: RouterBOARD hardware
Topic: New CPU - new product RB750Gr3 - RB750G family - now mmips
Replies: 180
Views: 66321

Re: New CPU - new product RB750Gr3 - RB750G family - now mmips

When will AES-CTR be added to RB750Gr3?
by mikruser
Fri Oct 26, 2018 1:29 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Suggestion: Reconnect action
Replies: 1
Views: 573

Suggestion: Reconnect action

Hello,

Please add "Reconnect" action to Right Click (Context) menu for all interfaces in Winbox
(reconnect = disable+enable)
by mikruser
Fri Oct 19, 2018 12:45 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 3674

Re: Problem with IPsec after update to 6.42

can you explain your setup and logic behind your policy configuration here? I can not think of a single case where responder should generate a dynamic policy with dst-address=0.0.0.0/0. We have a large number of subnets, and instead of creating a separate policy for each subnet, we create one polic...
by mikruser
Thu Oct 18, 2018 7:56 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 3674

Re: Problem with IPsec after update to 6.42

This behavior can be easily reproduced in the test lab.
by mikruser
Thu Oct 18, 2018 4:42 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 21770

Re: v6.43.4 [stable] is released!

This is not a configuration issue (this configuration worked fine for 7 years)
problem occurs after upgrade to 6.42.x or 6.43.x
by mikruser
Thu Oct 18, 2018 4:22 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 21770

Re: v6.43.4 [stable] is released!

This IPsec bug still not fixed viewtopic.php?f=2&t=136445
by mikruser
Thu Oct 18, 2018 1:46 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 3674

Re: Problem with IPsec after update to 6.42

6.43.4 also have this issue!
by mikruser
Fri Oct 05, 2018 1:33 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3510

Re: Please add performance results for IPsec tunnel!

I also tested two hAP ac^2 with 6.43.2

EoIP with IPsec (aes-128 ctr), file copy is only 34 MB/s:
hapac2_eoip_ipsec_ctr.png
EoIP without IPsec, file copy is 68 MB/s:
hapac2_eoip.png
by mikruser
Wed Oct 03, 2018 6:51 pm
Forum: RouterBOARD hardware
Topic: RB751-U-2nHD 100% cpu
Replies: 20
Views: 5282

Re: RB751-U-2nHD 100% cpu

6.43.2 also have this issue
by mikruser
Tue Oct 02, 2018 12:42 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 80933

Re: v6.44beta [testing] is released!

what is "multiple engine"??
by mikruser
Tue Sep 25, 2018 7:55 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3510

Re: Please add performance results for IPsec tunnel!

You can use minimal (fastest) config, required for EoIP+IPsec or L2TP+IPsec or GRE+IPsec.
by mikruser
Tue Sep 25, 2018 7:47 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 3674

Re: Problem with IPsec after update to 6.42

6.43.2 also have this issue!
by mikruser
Tue Sep 25, 2018 2:06 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3510

Re: Please add performance results for IPsec tunnel!

>>The throughput results are there for you to evaluate the IPsec crypto engine performance, not to show you throughput results with various different configurations. IPsec crypto engine performance is a "spherical cow in a vacuum", and does not show real life results. >>check for packet fragmentati...
by mikruser
Tue Sep 25, 2018 12:40 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3510

Re: Please add performance results for IPsec tunnel!

>>Adding or enabling any additional RouterOS feature apart from IPsec policies can reduce the throughput significantly. That's why I already suggested that you also publish the results for some popular tunnels+ipsec (l2tp+ipsec, gre+ipsec, eoip+ipsec) https://forum.mikrotik.com/viewtopic.php?f=3&t=...
by mikruser
Mon Sep 24, 2018 4:53 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 3510

Re: Please add performance results for IPsec tunnel!

I also tested two RB3011 with 6.43.2, connected via EoIP tunnel with IPsec.
They showed an even lower speed, even with hardware acceleration: file copy only 22 MB/s with aes-128 cbc/ctr (this is very far from declared 407.7 Mbps).
Profile:
rb3011_eoip_ipsec.png
by mikruser
Fri Sep 07, 2018 11:42 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 354
Views: 63582

Re: RB4011

Very unbalanced router
https://i.mt.lv/cdn/rb_files/RB4011iGSp ... 135303.png

Each switch have 5*1G port, but only 2.5G link to CPU.

What for this router have 10G sfp+ port? All switches summary have only 5G throughput.
by mikruser
Mon Sep 03, 2018 2:34 pm
Forum: RouterBOARD hardware
Topic: RB751 CPU usage get too high
Replies: 15
Views: 9725

Re: RB751 CPU usage get too high

I found that even just viewing the settings in the Winbox also often causes a 100% CPU load.

I suspect that the developers simply do not test the latest versions ROS/Winbox on RB751U.
Image100cpu.png
by mikruser
Sat Sep 01, 2018 9:05 pm
Forum: RouterBOARD hardware
Topic: When Mikrotik releases router that can handle single IPsec tunnel at 2.5G, 5G, 10G?
Replies: 1
Views: 431

When Mikrotik releases router that can handle single IPsec tunnel at 2.5G, 5G, 10G?

Hello,

When Mikrotik releases a router that can handle single IPsec tunnel (or MACsec) at 2.5G, 5G, 10G?
by mikruser
Thu Aug 30, 2018 10:52 pm
Forum: General
Topic: How to downgrade the ROS below the factory version?
Replies: 5
Views: 609

Re: How to downgrade the ROS below the factory version?

May I ask why downgrade to such a vulnerable version? Wouldn't be better to upgrade the other equipment if having the same version on all hardware is important?
Due to a this bug in 6.42.x:
viewtopic.php?t=136445
  • 1
  • 2
  • 3
  • 4
  • 5
  • 8