Community discussions

MikroTik App

Search found 512 matches

  • 1
  • 2
by mikruser
Fri May 14, 2021 1:27 pm
Forum: General
Topic: Tunnel limit throughput to TCP connection socket
Replies: 3
Views: 420

Re: Tunnel limit throughput to TCP connection socket

It is very likely that you also encountered a known bug with MT hardware routers: https://forum.mikrotik.com/viewtopic.php?t=146665#p769858 You can replace hardware routers to CHR (CHR do not affected by this issue). Also please create ticket to MT support https://help.mikrotik.com/servicedesk/servi...
by mikruser
Thu May 13, 2021 6:26 pm
Forum: General
Topic: Tunnel limit throughput to TCP connection socket
Replies: 3
Views: 420

Re: Tunnel limit throughput to TCP connection socket

what rtt between routers?
by mikruser
Wed May 05, 2021 10:37 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

anav The point is that the problem described in the ticket is easy to reproduce. It was studied not only by me, but also by the user KENYx120, for example: https://forum.mikrotik.com/viewtopic.php?t=146665#p769858 Let's do an experiment - you will also reproduce this issue on your hardware, and cre...
by mikruser
Wed May 05, 2021 6:52 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

First accused me of lying, and then writes "I never offended you".
It looks like the troll is you.
by mikruser
Wed May 05, 2021 6:26 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

You're stupid? why did you decide that I should post my personal mail-address on a public forum?
by mikruser
Wed May 05, 2021 5:38 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

>>It's your point of view or it can be a lie. Proof - see screenshot they did not respond to my last message and they did not explain why the ticket was closed. sup.png >>This is user forum, complain directly with mikrotik How do you propose to communicate with them if they refuse to solve the issu...
by mikruser
Wed May 05, 2021 3:42 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

Today MT tech support just closed the ticket without solving it and without explanation!
MT, what's happening??? This is absolutely unacceptable behavior of tech support for a company that claims to the corporate market!
by mikruser
Fri Apr 23, 2021 1:22 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

What are you trying to achieve here?
I am trying to solve the issue described in the ticket.

You have lots of similar tickets already open
No, only SUP-44879 wait for support.

Please wait for the rest of your tickets to be dealt with.
I do not have other tickets for support.
by mikruser
Thu Apr 22, 2021 12:38 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

Re: How long does it take for MT tech support to respond?

And what should I do? Create a ticket again?
by mikruser
Tue Apr 20, 2021 3:03 pm
Forum: General
Topic: How long does it take for MT tech support to respond?
Replies: 18
Views: 1330

How long does it take for MT tech support to respond?

Hello,
How long does it take for MT tech support to respond?
I created a request a month ago but still no response.
by mikruser
Mon Mar 22, 2021 4:03 pm
Forum: Virtualization
Topic: How to change x86 to CHR?
Replies: 3
Views: 1303

Re: How to change x86 to CHR?

I thought that due to the fact that they are using the same distribution package, it would be enough to simply replace the license key
by mikruser
Mon Mar 22, 2021 11:40 am
Forum: Virtualization
Topic: How to change x86 to CHR?
Replies: 3
Views: 1303

Re: How to change x86 to CHR?

Answer from MT support: ............ Olga Ļ.4 hours ago Hello! If you want to use CHR you should use CHR image for this. It is not possible to make CHR from x86 disk (image). You can download the images here: https://mikrotik.com/download ........... I am very surprised by this answer, because Route...
by mikruser
Mon Mar 15, 2021 6:02 pm
Forum: Virtualization
Topic: SR-IOV work in CHR ?
Replies: 5
Views: 4587

Re: SR-IOV work in CHR ?

Any news about SR-IOV support?
by mikruser
Thu Mar 11, 2021 1:47 pm
Forum: Virtualization
Topic: How to change x86 to CHR?
Replies: 3
Views: 1303

How to change x86 to CHR?

Hello, I have VM with x86 ROS: [admin@MikroTik] /system resource> print uptime: 20m29s version: 6.47.9 (long-term) build-time: Feb/08/2021 12:48:33 free-memory: 103.7MiB total-memory: 128.0MiB cpu: Intel(R) cpu-count: 2 cpu-frequency: 2533MHz cpu-load: 0% free-hdd-space: 215.0MiB total-hdd-space: 24...
by mikruser
Wed Mar 10, 2021 12:04 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

Another example: SUP-22475
They simply refused to fix the problem and forcibly closed the request.
by mikruser
Tue Mar 09, 2021 2:09 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

I absolutely do not care if there are any fields there or not.
I say that after a certain version of the ROS there was a issue.
by mikruser
Tue Mar 09, 2021 12:00 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

Chupaka You may simply sniff your Traffic Flow packets and check with WireShark if there are postNATSourceIPv4Address, postNATDestinationIPv4Address, postNAPTSourceTransportPort and postNAPTDestinationTransportPort fields. These fields are present, but issue is also present even with latest version...
by mikruser
Wed Mar 03, 2021 4:47 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues. And lies. Again.
Replies: 2
Views: 1514

MT support refused to fix issues. And lies. Again.

MT hardware routers have old issue with low and unstable speed via VPN tunnel on high latency WAN link: https://forum.mikrotik.com/viewtopic.php?f=2&t=146665 I also create ticket SUP-22475, but MT support refused to fix issue. Do you want to know what reason they gave? .......... Hello, There is...
by mikruser
Tue Feb 16, 2021 2:41 pm
Forum: General
Topic: L2TP/IPSec VPN performance on 1G links
Replies: 4
Views: 753

Re: L2TP/IPSec VPN performance on 1G links

vikinggeek
Its known issue with Mikrotik RouterBoards: viewtopic.php?t=146665#p769858
You should contact technical support or replace hardware router to CHR.
by mikruser
Mon Feb 15, 2021 11:54 am
Forum: General
Topic: EOIP TCP problem
Replies: 17
Views: 2596

Re: EOIP TCP problem

this is a known problem with mikrotik routers on high latency links.
this has been discussed many times on the forum.
you must contact support.
by mikruser
Tue Feb 09, 2021 1:14 pm
Forum: RouterBOARD hardware
Topic: bridge hardware offload [SOLVED]
Replies: 2
Views: 994

Re: bridge hardware offload [SOLVED]

Thanks, after set STP Protocol mode = none, hw offload is active.
by mikruser
Tue Feb 09, 2021 12:41 pm
Forum: RouterBOARD hardware
Topic: bridge hardware offload [SOLVED]
Replies: 2
Views: 994

bridge hardware offload [SOLVED]

RB750Gr3, hardware offload enabled for bridge ports ether2 and ether3.
Why hardware offload is inactive?
image_750gr3_bridge.png
by mikruser
Fri Feb 05, 2021 5:54 pm
Forum: General
Topic: National letters in Winbox
Replies: 0
Views: 308

National letters in Winbox

Hello,

How to enter non-english letters to Winbox?
Tried copy-paste, but got ????????.??
by mikruser
Mon Feb 01, 2021 4:33 pm
Forum: General
Topic: ROS speed degrade on high-latency WAN
Replies: 4
Views: 770

Re: ROS speed degrade on high-latency WAN

This topic not about IPsec.
Try without a tunnel.
1) do not use fasttrack
2) one side should be Tile (CCR) or ARM (RB3011)
3) both PC should be Windows
4) for testing: copy big file via shared folder
by mikruser
Sat Jan 30, 2021 12:15 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

True, sometimes they answer "No, will not fix it until v7", or "will fix in the future" - and future is one year from now. One year - is still optimistic. Issue with CCR Ipsec packet reordering they fixes ~5 years (and for a long time did not even admit that there was a problem)...
by mikruser
Fri Jan 29, 2021 6:06 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

blingblouw

this issue: viewtopic.php?f=2&t=171165

(and I very much suspect that my other problem is caused by the same reasons viewtopic.php?t=146665 )
by mikruser
Fri Jan 29, 2021 5:34 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

Paternoot The way to do this is taking out everything that has nothing to do with the problem - a router with minimal configuration. I already wrote why this is impossible. I also tested on RB3011 with simple configuration and sent them the result, but they ignored it for contrived reasons. Usually ...
by mikruser
Fri Jan 29, 2021 1:26 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

You do have a lot of other configuration on the device. Any router in real life have some configuration. Your routers are not designed for this? Do they only work with very basic configuration? Why then there is no warning about this on the site? We asked if you can test with basic config, you refu...
by mikruser
Fri Jan 29, 2021 1:08 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

We have requested several things for you to test, but have not received results. I sent you everything I could. what other things do you want? Also, can you test the same installation with another, computer, cables, etc maybe you will read the entire conversation with technical support? I tested di...
by mikruser
Fri Jan 29, 2021 12:26 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

Re: MT support refused to fix issues

SUP-37480
by mikruser
Fri Jan 29, 2021 12:21 pm
Forum: General
Topic: Slow speed through gre+ipsec tunnel
Replies: 13
Views: 5692

Re: Slow speed through gre+ipsec tunnel

KENYx120 Have same issue (support ticket SUP-3459) with IPSec between CCR1036 (ROS/ROB 6.44.6) and StrongSwan on CentOS 7 connected to 1Gbp/s links with 300Mbit/s ISP (download/upload) throughput. Latensy between sides abount 18.0ms. did you get a response from technical support? or did they refuse...
by mikruser
Fri Jan 29, 2021 12:06 pm
Forum: RouterBOARD hardware
Topic: MT support refused to fix issues
Replies: 15
Views: 2202

MT support refused to fix issues

What is MT technical support (https://help.mikrotik.com/servicedesk/servicedesk) for?
I created a request.
They simply refused to fix the problem and forcibly closed the request.
by mikruser
Mon Jan 25, 2021 1:36 pm
Forum: General
Topic: Decrease in software quality from mikrotik?
Replies: 16
Views: 1698

Re: Decrease in software quality from mikrotik?

Yes, RouterOS has low quality. I also have some issues ( https://forum.mikrotik.com/viewtopic.php?f=2&t=171165 https://forum.mikrotik.com/viewtopic.php?t=146665 ) MT support is also very bad - they refuse to admit there is a problem. After replacing device to another vendor all problems disappea...
by mikruser
Fri Jan 22, 2021 6:14 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 114
Views: 11703

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

pe1chl You are very inattentively reading what they write to you (or deliberately divert the conversation in the other direction). The system is characterized not by the error, but by the reaction to it. 1) a good company would remove the buggy firmware from Downloads ASAP (to minimize problems for ...
by mikruser
Fri Jan 22, 2021 11:28 am
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 114
Views: 11703

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

a MONTH(!!!) has passed since the bugged version 6.48 appeared! this version remains presented on the download page!
there are still no fixes!
in my opinion this is an EPIC FAIL!
such a company should leave the market.
by mikruser
Wed Jan 13, 2021 12:51 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 76050

Re: v6.48 [stable] is released!

Mountaineer I'm sticking to Long Term for future upgrades to any critical equipment. Mikrotik is not intended for use in any critical equipment or enterprise. Repeatedly spoken about this, for example https://forum.mikrotik.com/viewtopic.php?f=2&t=165391 Why hasn't this release been removed from...
by mikruser
Fri Jan 08, 2021 2:44 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 114
Views: 11703

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

What about the story with "stable" version 6.48? They released a buggy version a week before the new year, and there is still no fix!
They haven't even removed it from the download page!
by mikruser
Mon Dec 28, 2020 5:51 pm
Forum: General
Topic: ROS speed degrade on high-latency WAN
Replies: 4
Views: 770

Re: CCR1009 speed degrade on high-latency WAN

I tested also on RB3011 and it has the same problem: >iperf-2.0.14a-Dec14_20-win.exe -c x.x.x.x -w 1024K -e -i 1 -t 20 ------------------------------------------------------------ Client connecting to x.x.x.x, TCP port 5001 with pid 17972 (1 flows) Write buffer size: 131072 Byte TCP window size: 1.0...
by mikruser
Mon Dec 28, 2020 1:46 pm
Forum: General
Topic: ROS speed degrade on high-latency WAN
Replies: 4
Views: 770

ROS speed degrade on high-latency WAN

Hello, I have WAN link 200Mbps to remote Windows server with latency 37 ms. With direct connected PC over WAN iperf show good speed in both directions: >iperf-2.0.14a-Dec14_20-win.exe -c x.x.x.x -w 1024K -e -i 1 -r ------------------------------------------------------------ Server listening on TCP ...
by mikruser
Sat Dec 26, 2020 12:56 am
Forum: RouterBOARD hardware
Topic: Why hAPac2 and RB3011 have identical ipsec test results?
Replies: 1
Views: 640

Why hAPac2 and RB3011 have identical ipsec test results?

Hello,
Why hAPac2 and RB3011 have identical ipsec test results?
https://mikrotik.com/product/hap_ac2#fndtn-testresults
https://mikrotik.com/product/RB3011UiAS ... estresults
hapac2_rb3011_ipsec_test_results.png
by mikruser
Thu Dec 24, 2020 11:17 pm
Forum: General
Topic: Slow speed through gre+ipsec tunnel
Replies: 13
Views: 5692

Re: Slow speed through gre+ipsec tunnel

Issue still not fixed on 6.48:
image_bwtest_tcp_ccr_648.png
mikrotik technical support is silent...
by mikruser
Thu Dec 24, 2020 5:45 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 76050

Re: v6.48 [stable] is released!

why are you upgrading to beta-version?
it has been repeatedly said that
"long-term" = Stable
"stable" = Beta
"testing" = Alpha
by mikruser
Wed Dec 23, 2020 12:50 am
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 114
Views: 11703

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

Mikrotik cannot be used in enterprise. Its only for home with low-speed wan. Its too bugged and have very poor support. For example - see CCR\GRE\IPSEC saga: https://forum.mikrotik.com/viewtopic.php?t=84465 https://forum.mikrotik.com/viewtopic.php?t=87892 https://forum.mikrotik.com/viewtopic.php?t=8...
by mikruser
Tue Dec 15, 2020 9:31 pm
Forum: General
Topic: OpenVPN Maximum Speed
Replies: 4
Views: 1325

Re: OpenVPN Maximum Speed

Only ipsec hardware accelerated, not openvpn. Avoid using openvpn.
by mikruser
Tue Dec 15, 2020 6:16 pm
Forum: General
Topic: 100% CPU usage at random times
Replies: 10
Views: 3389

Re: 100% CPU usage at random times

This is a widespread problem on older models. But Mikrotik team does not want to solve this problem (
viewtopic.php?t=56656
viewtopic.php?t=59185
by mikruser
Sun Dec 13, 2020 2:03 pm
Forum: Virtualization
Topic: Why RouterOS CHR and x86 use the same distribution package?
Replies: 5
Views: 1497

Re: Why RouterOS CHR and x86 use the same distribution package?

but distributions cannot be the same:
CHR should contain only virtual device drivers and VMware tools.
x86 should contain a large number of real device drivers.
by mikruser
Thu Dec 10, 2020 6:38 pm
Forum: Virtualization
Topic: Why RouterOS CHR and x86 use the same distribution package?
Replies: 5
Views: 1497

Why RouterOS CHR and x86 use the same distribution package?

Hello, Why RouterOS CHR and x86 use the same distribution package? https://mikrotik.com/download/ : x86 Main =https://download.mikrotik.com/routeros/6.47.8/routeros-x86-6.47.8.npk CHR Main=https://download.mikrotik.com/routeros/6.47.8/routeros-x86-6.47.8.npk x86 Extra =https://download.mikrotik.com/...
by mikruser
Fri Nov 27, 2020 8:16 pm
Forum: General
Topic: How does AutoMTU work for VPN tunnels?
Replies: 2
Views: 1211

Re: How does AutoMTU work for VPN tunnels?

6.47.8 still have this issue!
by mikruser
Fri Nov 27, 2020 8:13 pm
Forum: General
Topic: Why Mikrotik forcibly reset my password for forum account????
Replies: 1
Views: 297

Why Mikrotik forcibly reset my password for forum account????

Why Mikrotik forcibly reset my password for forum account????
I have been using this account for many years, and suddenly the password stopped working!
you have nothing else to do there ???
by mikruser
Thu Aug 13, 2020 1:42 pm
Forum: RouterBOARD hardware
Topic: CCR2004 : BGP Benchmarks
Replies: 42
Views: 14479

Re: CCR2004 : BGP Benchmarks

BGP Insertion (4xFullviews, ~3,2M routes) : 1. RB4011 : 3m45s 2. CCR2004 : 5m38s 3. CCR1016 : 10m09s 4. CCR1009 : 10m45s BGP Removal (4xFullviews, ~3,2M routes) : 1. CCR1016 : 3m18s 2. CCR1009 : 3m25s 3. RB4011 : 8m25s 4. CCR2004 : 19m58s SUGGESTION: These numbers also should be published on Test r...
by mikruser
Fri Aug 07, 2020 7:05 pm
Forum: General
Topic: Suggestion: Address List in Routes
Replies: 1
Views: 572

Suggestion: Address List in Routes

Hello,

please add ability to use Address List in Dst.Address in Routes
by mikruser
Wed Aug 05, 2020 2:42 pm
Forum: General
Topic: How does AutoMTU work for VPN tunnels?
Replies: 2
Views: 1211

Re: How does AutoMTU work for VPN tunnels?

Any ideas?
by mikruser
Tue Aug 04, 2020 3:48 pm
Forum: General
Topic: What TCP Congestion Control algorithm is used in Bandwidth Test-tcp?
Replies: 0
Views: 445

What TCP Congestion Control algorithm is used in Bandwidth Test-tcp?

Hello,

What TCP Congestion Control algorithm is used in Tools-Bandwidth Test-tcp?
by mikruser
Mon Aug 03, 2020 6:22 pm
Forum: RouterBOARD hardware
Topic: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)
Replies: 16
Views: 3556

Re: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)

Paternot
Can you provide proof that chip IPQ-4018 (and other) has a 16MB flash limitation?

krafg
I use System-Packages-Check for updates-Download&install
by mikruser
Mon Aug 03, 2020 5:35 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

I dont known why Mikrotik support talk about "NAT events". Answer from ManageEngine Netflow Analyzer developers: Hi , Mikrotik device do not send NAT information in the netflow packets. If the device can send NAT information over the flows, we will be able to show you the details. How happ...
by mikruser
Mon Aug 03, 2020 4:35 pm
Forum: RouterBOARD hardware
Topic: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)
Replies: 16
Views: 3556

Re: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)

>>If you could remove packages, it means you put them there. Yes, i always install Extra packages zip from https://mikrotik.com/download >>I can just suggest that you do not install extra packages on small NAND devices. In this case remove Extra packages zip for these devices from https://mikrotik....
by mikruser
Mon Aug 03, 2020 12:14 pm
Forum: RouterBOARD hardware
Topic: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)
Replies: 16
Views: 3556

Re: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)

I already solving this issue by deleting unused packages via System-Packages-Uninstall.

but that doesn't remove the question of why you're saving 50 cents on the cost of creating problems for users.
by mikruser
Mon Aug 03, 2020 12:00 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

Chupaka I think you should ask Netflow Analyzer if they support necessary fields I asked Mikrotik support. First they blamed the analyzing software, but then they admitted: we currently don't have NAT events available in current stable/long-term releases. We are working to implement the support for...
by mikruser
Mon Aug 03, 2020 12:17 am
Forum: General
Topic: L2TP not connecting on Windows client
Replies: 4
Views: 3630

Re: L2TP not connecting on Windows client

Set these values:
Proposal: aes-128cbc/sha1/modp1024
Profile: sha1/aes-128/ecp256
by mikruser
Mon Aug 03, 2020 12:01 am
Forum: RouterBOARD hardware
Topic: Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)
Replies: 16
Views: 3556

Why Mikrotik puts only 16MB flash on many devices? (not enough space for upgrade)

32/64MB chips are very very cheap, but Mikrotik puts only 16MB. Why???
On hEX, hAPac2 i get errors:
system, error: not enough space for upgrade
by mikruser
Sat Aug 01, 2020 10:40 pm
Forum: RouterBOARD hardware
Topic: Question about IPsec test results
Replies: 4
Views: 1513

Re: Question about IPsec test results

floaty
in a stream-cipher with an pre-shared or diffie-hellman'ed key, should the cpu-load for de- & encrypt pretty much the same
No. In aes-cbc mode decryption is much faster than encryption.
by mikruser
Sat Aug 01, 2020 5:50 pm
Forum: General
Topic: Suggestion: redesign Tools-Profile in Winbox
Replies: 2
Views: 920

Re: Suggestion: redesign Tools-Profile in Winbox

no problem. this compact table may fit on full-hd screen even with CCR1072.

(currently many-rows table should have 1008 rows for 13 services on 72 cores. it doesn't fit on any monitors)
by mikruser
Sat Aug 01, 2020 4:38 am
Forum: General
Topic: Suggestion: redesign Tools-Profile in Winbox
Replies: 2
Views: 920

Suggestion: redesign Tools-Profile in Winbox

Hello,
Instead of many-rows table
image_profile.png
you can use this compact and more informative table:
image_profile_suggestion.png
by mikruser
Thu Jul 30, 2020 1:56 pm
Forum: RouterBOARD hardware
Topic: Question about IPsec test results
Replies: 4
Views: 1513

Question about IPsec test results

Hello,

https://mikrotik.com/product/RB3011UiAS ... estresults
https://mikrotik.com/product/CCR1009-7G ... estresults

these IPsec test results throughput are for encryption or for decryption?
by mikruser
Wed Jul 22, 2020 3:04 pm
Forum: General
Topic: Rename Address-List
Replies: 5
Views: 3550

Re: Rename Address-List

changeip
your code do not work.

Also have this question - how to rename address list via Winbox?
by mikruser
Sun Jul 19, 2020 1:20 pm
Forum: General
Topic: How to set Pref.Source for dynamic routes?
Replies: 1
Views: 709

How to set Pref.Source for dynamic routes?

Hello,
How to set Pref.Source for dynamic routes type DAS (dynamic active static)? (for example pptp/l2tp/sstp)
by mikruser
Wed Jul 15, 2020 11:29 pm
Forum: General
Topic: Slow speed through gre+ipsec tunnel
Replies: 13
Views: 5692

Re: Slow speed through gre+ipsec tunnel

Issue is still observed on 6.47.1:
image_bwtest_tcp_ccr_6471.png
first graph - test from ccr to chr public ip
second graph - test from ccr to chr private ip (via tunnel)
by mikruser
Tue Jul 14, 2020 7:10 pm
Forum: General
Topic: Why Mikrotik OVPN Server do not support AES-128-GCM cipher?
Replies: 0
Views: 570

Why Mikrotik OVPN Server do not support AES-128-GCM cipher?

Hello,

Why Mikrotik OVPN Server do not support AES-128-GCM cipher?
by mikruser
Mon Jul 13, 2020 12:04 pm
Forum: General
Topic: Feature Request for Bandwidth Test
Replies: 0
Views: 477

Feature Request for Bandwidth Test

Hello,

Please add to Bandwidth Test:

TCP Retransmissions count and %
out-of-order packets count and %
duplicate packets count and %
fix Lost Packets info for correct results
more protocols for test (example: gre, sctp)
interface selection for the test
by mikruser
Fri Jul 10, 2020 1:50 pm
Forum: General
Topic: Why UDP Bandwidth Test always show Lost Packets = 0?
Replies: 4
Views: 1209

Re: Why UDP Bandwidth Test always show Lost Packets = 0?

So you say that the mikrotik developers created a fake Bandwidth Test udp with a fake "Lost Packets" field?
by mikruser
Fri Jul 10, 2020 12:11 pm
Forum: General
Topic: Why UDP Bandwidth Test always show Lost Packets = 0?
Replies: 4
Views: 1209

Why UDP Bandwidth Test always show Lost Packets = 0?

Hello,

I already tested the channels using tcp test: viewtopic.php?f=2&t=163469
and the results looks like there are packet loss.
But why UDP Bandwidth Test do not show packet loss?
by mikruser
Fri Jul 10, 2020 12:52 am
Forum: General
Topic: Strange TCP Bandwidth Test
Replies: 1
Views: 745

Strange TCP Bandwidth Test

Hello,

Why TCP Bandwidth Test is sawtooth graph?

To 100M ISP1 WAN link:
image_bwtest_tcp_100M.png
To 200M ISP2 WAN link:
image_bwtest_tcp_200M.png

UDP test perfectly smooth with 0 lost packets even at full link speed.
by mikruser
Thu Jul 09, 2020 8:30 pm
Forum: General
Topic: Feature Request: IPerf
Replies: 59
Views: 18208

Re: Feature Request: IPerf

+1 for iperf with charts
by mikruser
Thu Jul 09, 2020 4:36 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

Now I'm using this Mangle rule:
add action=mark-routing chain=prerouting dst-address-list=!LAN_private new-routing-mark=to_ISP3 passthrough=no src-address=192.168.0.1
by mikruser
Thu Jul 09, 2020 2:55 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

I already wrote what I want - I need the default route for packets from 192.168.0.1
by mikruser
Thu Jul 09, 2020 2:25 pm
Forum: General
Topic: ipv4 neighbor table overflow
Replies: 11
Views: 8559

Re: ipv4 neighbor table overflow

I also have this issuue! (CHR v6.45.9)
by mikruser
Thu Jul 09, 2020 1:23 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

in this case, the use of Route Rules is not suitable, and I am forced to use the mangle.
by mikruser
Thu Jul 09, 2020 1:13 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

see my first message with image - I need default route with source based routing.
by mikruser
Thu Jul 09, 2020 12:23 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

but routing rule doesn't work as expected with the default route (dst.address=0.0.0.0/0). I expected to see specific routes (in Routes tab in main table) first, and only if no specific route is found will the default route rule be used. but this rule sends absolutely all packets from 192.168.0.1 to ...
by mikruser
Wed Jul 08, 2020 11:33 pm
Forum: General
Topic: How to create multichannel VPN tunnel?
Replies: 6
Views: 1432

Re: How to create multichannel VPN tunnel?

In that case, why I do not get a speed boost (through using SMB Multichannel) when I copy a file through a tunnel?
by mikruser
Wed Jul 08, 2020 11:18 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Re: Is it possible to use source based routing without Mangle?

Mikrotik Wiki do not have information about "Rules" tab settings for unknown reasons (https://wiki.mikrotik.com/wiki/Manual:IP/Route)
can you give more information?
by mikruser
Wed Jul 08, 2020 10:54 pm
Forum: General
Topic: Is it possible to use source based routing without Mangle?
Replies: 16
Views: 3294

Is it possible to use source based routing without Mangle?

Hello,

Is it possible to use source based routing without Mangle and marking?
I just need to add a field "Src.Address" to the standard Route form:
image_source_based_routing.png
by mikruser
Wed Jul 08, 2020 4:42 pm
Forum: RouterBOARD hardware
Topic: Fancon IRQ
Replies: 7
Views: 1923

Fancon IRQ

Hello,

is it normal for a Fancon to generate so many IRQ? ~1400 per "tick".
image_fancon_irq_ccr.png

CCR1009, v6.47
by mikruser
Tue Jul 07, 2020 9:07 pm
Forum: General
Topic: How to create multichannel VPN tunnel?
Replies: 6
Views: 1432

Re: How to create multichannel VPN tunnel?

>>you may try to spread the traffic among multiple tunnels but many tunnels will require many public ip-addresses... and I may need 8 or 16 connections to fully utilize wan link... maybe there's a way to create tunnels not on different ip-addresses, but on different ports of the same address? >>You...
by mikruser
Tue Jul 07, 2020 4:46 pm
Forum: General
Topic: How to create multichannel VPN tunnel?
Replies: 6
Views: 1432

How to create multichannel VPN tunnel?

Hello, We have two offices connected via high latency high speed WAN links. This WAN links show good speed only with multiple connections. Offices connected via GRE+Ipsec tunnel. For file copy we use Windows10 PC's with network adapter that support Receive Side Scaling (RSS) and SMB Multichannel (4 ...
by mikruser
Sat Jul 04, 2020 12:30 am
Forum: Wireless Networking
Topic: hap ac2 do not see my AP in 5GHz band
Replies: 1
Views: 773

hap ac2 do not see my AP in 5GHz band

Hello,
I have WiFi on Ubiquiti AP Pro (one SSID on 2.4 and 5GHz).
Any device work without problem on both band.
But Mikrotik hap ac2 (station mode) do not see my SSID on 5 GHz band.
Why?
by mikruser
Fri Jul 03, 2020 3:51 pm
Forum: General
Topic: Suggestion: Ethernet Cable Test analog signal information
Replies: 2
Views: 722

Suggestion: Ethernet Cable Test analog signal information

Hello,
Please add to Ethernet Cable Test analog signal information like signal strength, signal-to-noise ratio, etc. for each pair. (like Fluke tester)
by mikruser
Thu Jul 02, 2020 7:15 pm
Forum: General
Topic: How do you check some port for availability from a router?
Replies: 8
Views: 1378

Re: How do you check some port for availability from a router?

that you don't understand?
You're on a mikrotik router (for example via winbox).
Now you need to check for port availability at some address (for example 1.2.3.4:945 or 5.6.7.8:1843)
by mikruser
Thu Jul 02, 2020 4:47 pm
Forum: General
Topic: How do you check some port for availability from a router?
Replies: 8
Views: 1378

Re: How do you check some port for availability from a router?

You do not understand the question.
by mikruser
Thu Jul 02, 2020 3:40 pm
Forum: General
Topic: How do you check some port for availability from a router?
Replies: 8
Views: 1378

How do you check some port for availability from a router?

Hello,

how do you check some ip:port for availability from a mikrotik router?
by mikruser
Tue May 19, 2020 5:23 pm
Forum: General
Topic: Why hashing done in software?
Replies: 0
Views: 579

Why hashing done in software?

Hello,

https://wiki.mikrotik.com/wiki/Manual:I ... celeration
x86 (AES-NI) ***
*** AES-CBC and AES-CTR only encryption is accelerated, hashing done in software.


Why hashing is not hardware accelerated?
AMD CPU support SHA extensions: https://en.wikipedia.org/wiki/Intel_SHA_extensions
by mikruser
Thu May 07, 2020 1:11 am
Forum: General
Topic: High CPU usage
Replies: 6
Views: 1706

Re: High CPU usage

I know what's loading the CPU.
My question is, why so much?
One EPYC Rome core can do 1.7 GBytes/s AES encryption.
Two cores can 2*1.7*8=27 Gbits/s
My traffic is very small, only 0.5 Gbit/s
CPU load caused by encryption should be lower than 2%
by mikruser
Wed May 06, 2020 4:59 pm
Forum: General
Topic: High CPU usage
Replies: 6
Views: 1706

High CPU usage

Hello,

I have ESXi 6.7U3 host with AMD EPYC 7502P processor, and VM (2 vCPU) with CHR 6.45.8
On CHR created vpn-tunnel GRE+IPsec (aes-128 ctr sha1)

When i do vMotion via this tunnel at speed 500 Mbit/s, this cause VM CPU usage 45%

Why CPU usage so high?
by mikruser
Thu Apr 23, 2020 2:06 am
Forum: General
Topic: FEATURE REQUEST: Dynamically created VPN+routes (each to each)
Replies: 1
Views: 978

FEATURE REQUEST: Dynamically created VPN+routes (each to each)

For example - you have multiple offices: HQ-office and branch-offices, each office have piblic IP and private subnet. Very simple solution: HQ-office Mikrotik (master) and branch-offices Mikrotik (slave) have this table: public_ip, private_subnet 1.1.1.1, 192.168.1.0/24 2.2.2.2, 192.168.2.0/24 ........
by mikruser
Thu Feb 13, 2020 7:31 pm
Forum: General
Topic: Suggestion: view packets on Rule
Replies: 0
Views: 1633

Suggestion: view packets on Rule

Hello,

Please add button "View packets" (like Torch or Sniffer) on Rule Statistics tab!
by mikruser
Fri Jan 31, 2020 6:17 pm
Forum: General
Topic: How to disable promiscuous mode?
Replies: 2
Views: 1158

How to disable promiscuous mode?

Hello,
How to disable promiscuous mode on ether1?
by mikruser
Wed Jan 29, 2020 12:57 pm
Forum: Announcements
Topic: v6.45.8 [long-term] is released!
Replies: 87
Views: 70723

Re: v6.45.8 [long-term] is released!

there are no other versions between them
Image_.png
by mikruser
Wed Jan 29, 2020 11:48 am
Forum: Announcements
Topic: v6.45.8 [long-term] is released!
Replies: 87
Views: 70723

Re: v6.45.8 [long-term] is released!

>>Changes since 6.45.7
previous version was 6.44.6
by mikruser
Tue Jan 28, 2020 5:53 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

I have same issue as described in mdpeterman first post.
NetFlow Analyzer -> Inventory -> Devices-> SomeRouter -> InternalInterface -> Destination (OUT)
shows me external public IP instead of internal private ip-addresses
by mikruser
Tue Jan 28, 2020 5:37 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

maybe you do not understand my message?

I also have this issue
by mikruser
Tue Jan 28, 2020 12:11 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

all of these items are already selected by default
by mikruser
Mon Jan 27, 2020 1:54 pm
Forum: General
Topic: NetFlow. No longer showing NAT'd destination address - Something chnaged
Replies: 34
Views: 7003

Re: NetFlow. No longer showing NAT'd destination address - Something chnaged

Also have this issue!

6.44.6, Traffic Flow Version: 9

How to fix it?
by mikruser
Tue Jan 21, 2020 4:28 pm
Forum: General
Topic: GRE issues with dual WAN
Replies: 4
Views: 1093

Re: GRE issues with dual WAN

why did the router send packets from the wrong interface

I do not see your config.
maybe you do not have the necessary mangle output rules,or maybe you do not have the necessary route rules...
by mikruser
Mon Jan 20, 2020 8:04 pm
Forum: General
Topic: GRE issues with dual WAN
Replies: 4
Views: 1093

Re: GRE issues with dual WAN

You should exclude PublicIP-to-PublicIP connections from NAT'ing
by mikruser
Wed Jan 15, 2020 12:31 pm
Forum: General
Topic: TCP congestion Illinos
Replies: 5
Views: 1464

Re: TCP congestion Illinos

havrla
illinos is very super for fast and long lines. (VDSL, WIFI, )

"Westwood" is much better:
aed1d4d480366a904cf94a6f3977b383.png
by mikruser
Sun Jan 12, 2020 10:52 pm
Forum: Forwarding Protocols
Topic: TCP port forward doesnt work
Replies: 15
Views: 3904

Re: TCP port forward doesnt work

don't listen to noobs, you no need add public ip to nat rule.

you need add firewall rule:
accept
forward
dst.address=your internal ip
protocol=tcp
dst.port=your internal port
by mikruser
Sun Jan 12, 2020 6:11 pm
Forum: General
Topic: Why MT Wiki contains incomplete information?
Replies: 2
Views: 689

Why MT Wiki contains incomplete information?

for example https://wiki.mikrotik.com/wiki/Manual:IP/Route
do not have information about "Rules" tab settings.
by mikruser
Fri Jan 10, 2020 6:27 pm
Forum: General
Topic: Why gre+ipsec tunnel always use default proposal?
Replies: 3
Views: 739

Re: Why gre+ipsec tunnel always use default proposal?

Because it doesn't work as you think. Proposal is linked to policy and policy is linked to peer. Not the other way around. So what you created just sits there and does nothing, because automatically created peer won't use it. You are wrong. Dynamic policies are generated from a template policy: htt...
by mikruser
Fri Jan 10, 2020 5:49 pm
Forum: General
Topic: Why gre+ipsec tunnel always use default proposal?
Replies: 3
Views: 739

Why gre+ipsec tunnel always use default proposal?

Hello,

I have multiple gre-tunnels with ipsec secret enabled. In gre-tunnel i cannot select custom ipsec proposal.
I created custom IPsec Policy Template (priority#0) for Protocol:47 and custom proposal, but my gre-tunnels still use default proposal.

Why?
by mikruser
Thu Jan 09, 2020 1:33 pm
Forum: General
Topic: ipsec established, but gre tunnel not
Replies: 6
Views: 1460

Re: ipsec established, but gre tunnel not

yeahbunin
read my previous message
by mikruser
Thu Jan 02, 2020 8:12 pm
Forum: General
Topic: Port Forwarding doesn't forward
Replies: 4
Views: 888

Re: Port Forwarding doesn't forward

>>add action=accept chain=forward dst-port=65022 protocol=tcp

you need change port to 22
by mikruser
Thu Jan 02, 2020 4:10 pm
Forum: General
Topic: ipsec established, but gre tunnel not
Replies: 6
Views: 1460

Re: ipsec established, but gre tunnel not

>>Have you specified local and remote addresses of GRE on both routers?
Yes

>>Do you allow proper protocols to pass firewall?
Yes, full access for these addresses (without "IPsec Secret" gre-tunnel link up successfully).

I think this is a bug in ROS...
by mikruser
Thu Jan 02, 2020 9:09 am
Forum: General
Topic: ipsec established, but gre tunnel not
Replies: 6
Views: 1460

ipsec established, but gre tunnel not

Hello, I created GRE tunnel (with IPsec Sercret) between CCR and CHR. (6.44.6) 1) policy created dynamically successfully (ph2 state established) 2) peer created dynamically successfully 3) identities created dynamically successfully 4) remote peers and installed sa created dynamically successfully ...
by mikruser
Thu Dec 26, 2019 6:45 pm
Forum: General
Topic: How to see %lost datagrams of VPN tunnel?
Replies: 0
Views: 815

How to see %lost datagrams of VPN tunnel?

Hello,
Is it possible to see in Winbox %lost datagrams related to outer (connectionless/stateless) protocol of VPN tunnel?
by mikruser
Thu Dec 12, 2019 1:08 pm
Forum: General
Topic: How does AutoMTU work for VPN tunnels?
Replies: 2
Views: 1211

How does AutoMTU work for VPN tunnels?

Hello,

How does AutoMTU (Actual MTU) work for VPN tunnels?

For example: i have gre+ipsec tunnels sha1/aes-128 ctr

CCR1009(AMTU1446)----(AMTU1434)RB3011

CCR1009(AMTU1446)----(AMTU1434)hAPac2

Why MTU is different on both sides?
by mikruser
Wed Dec 04, 2019 4:23 pm
Forum: RouterBOARD hardware
Topic: MikroTik MQS
Replies: 34
Views: 11048

Re: MikroTik MQS

Where can I download admin guide with a detailed description of all settings?
by mikruser
Mon Dec 02, 2019 4:37 pm
Forum: General
Topic: How to set priorities for the encryption algorithms in the default IPsec proposal?
Replies: 0
Views: 688

How to set priorities for the encryption algorithms in the default IPsec proposal?

Hello,

How to set priorities for the encryption algorithms in the default IPsec proposal?

I have "aes-128 cbc" and "aes-128 ctr" selected, and need now set priority1 to ctr, and priority2 to cbc.
by mikruser
Thu Nov 28, 2019 2:09 pm
Forum: General
Topic: How to select interface in Bandwidth Test tool?
Replies: 1
Views: 603

How to select interface in Bandwidth Test tool?

Hello,
I have router with 3 WAN interfaces.
How to select interface in Bandwidth Test tool? (like in Traceroute tool)
Image_mikr_bt.png
by mikruser
Wed Nov 27, 2019 5:41 pm
Forum: RouterBOARD hardware
Topic: can't login to MQS [SOLVED]
Replies: 3
Views: 7877

Re: can't login to MQS [SOLVED]

Ok, it works...

but this is a very inconvenient setup method.

please add ability to configure through USB!
by mikruser
Wed Nov 27, 2019 5:30 pm
Forum: RouterBOARD hardware
Topic: can't login to MQS [SOLVED]
Replies: 3
Views: 7877

can't login to MQS [SOLVED]

I'm trying login to MQS as described in https://i.mt.lv/cdn/rb_files/1572339613 ... %20web.pdf
but no success
I can connect to wireless network RBMQS_AP1, but computer can't get ip address.
I'm trying reset MQS, but no success.
by mikruser
Sat Nov 23, 2019 5:43 pm
Forum: General
Topic: Block a huge list of IP-addresses [SOLVED]
Replies: 17
Views: 4281

Re: Block a huge list of IP-addresses [SOLVED]

use blackhole route
by mikruser
Fri Nov 22, 2019 5:33 pm
Forum: General
Topic: Feature request: Virtual Interface
Replies: 36
Views: 8081

Re: Feature request: Virtual Interface

Any news about implementing this feature (VI)?

ISP gave me an additional IP-address on a different subnet.
Now i need create additional (virtual) interface on ether1. MAC address must be different.
by mikruser
Fri Nov 01, 2019 3:10 pm
Forum: General
Topic: Suggestion: VPN over ICMP
Replies: 3
Views: 1473

Re: Suggestion: VPN over ICMP

Absolutely incorrect.
Normal providers do not touch transit icmp traffic.
by mikruser
Fri Oct 25, 2019 5:36 pm
Forum: General
Topic: What type of tunnel should be used in this case?
Replies: 1
Views: 674

What type of tunnel should be used in this case?

Hello, What type of vpn tunnel should be used in this case: 1) server and clients are Mikrotik routers. 2) server have public ip address. 3) all clients have private ip addresses (behind nat). 4) some clients behind same nat (l2tp+ipsec do not work in this case). 5) MPPE encryption or certificates s...
by mikruser
Fri Oct 25, 2019 2:17 pm
Forum: General
Topic: Bug
Replies: 5
Views: 891

Re: Bug

mikrotik's "stable" = beta version in real life
by mikruser
Fri Oct 25, 2019 12:25 pm
Forum: General
Topic: Bug
Replies: 5
Views: 891

Re: Bug

6.44.5
by mikruser
Thu Oct 24, 2019 7:48 pm
Forum: General
Topic: Bug
Replies: 5
Views: 891

Bug

Interface lte1 - General - APN Profile:
this setting is not remembered between reboots
by mikruser
Tue Oct 15, 2019 1:18 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 82
Views: 17357

Re: New High Performance Routers ! ?

doneware NAT - is not really a CPU intensive process but in real life author writes something else: doush Router only does NAT and nothing else. CCR1072 CPU consumption is %50 with 18gbit/s total throuput + firewall + NAT plus some cores hitting %80. doneware using a dedicated CPU instruction set (...
by mikruser
Sat Oct 12, 2019 8:58 pm
Forum: RouterBOARD hardware
Topic: New High Performance Routers ! ?
Replies: 82
Views: 17357

Re: New High Performance Routers ! ?

I am very surprised that Mikrotik does not use hardware NAT'ing.
by mikruser
Wed Aug 28, 2019 12:07 am
Forum: General
Topic: Suggestion: VPN over ICMP
Replies: 3
Views: 1473

Suggestion: VPN over ICMP

Hello,
Please implement VPN over ICMP (ICMP Tunnel)
(it can be very useful in some countries with a totalitarian regime)))
by mikruser
Sun Aug 04, 2019 7:41 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 23
Views: 8207

Re: GPeR question

normis
Tue Jul 30, 2019 9:57 am
The GPER is a passive device that connects wires together, you can call it Layer1. This is not really a hub.

normis
Fri Aug 02, 2019 3:14 pm
Yes, there is a basic switch chip inside.


Two completely different answers.
You are Dr Jekyll and Mr Hyde??
by mikruser
Thu Aug 01, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 23
Views: 8207

Re: GPeR question

If GPER is just a passive device that connects wires together, then the price is perplexing (50% of Raspberry Pi 4 computer)
by mikruser
Mon Jul 29, 2019 10:31 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 23
Views: 8207

Re: GPeR question

1) Of course it matters (and two port has nothing to do with it)
2) ???
3) Ok
by mikruser
Mon Jul 29, 2019 12:20 pm
Forum: RouterBOARD hardware
Topic: GPeR question
Replies: 23
Views: 8207

GPeR question

Hello,
1) at what OSI layer this device work? at L1 like hub, or at L2 like switch?
2) what delay does this device add?
3) why distance is limited to 1500 m?
by mikruser
Tue Jun 11, 2019 1:03 pm
Forum: General
Topic: SNMP traffic monitoring bug
Replies: 2
Views: 756

SNMP traffic monitoring bug

Hello,

CHR 6.44.2
PRTG Network Monitor SNMP Traffic sensor

When i copy file via gigabit adapter, SNMP sensor show only 430 Mbit/s

This is a bug in Mikrotik SNMP or in PRTG?
Image1_snmp_.png
by mikruser
Tue Apr 23, 2019 1:38 pm
Forum: General
Topic: Suggestion: Protocols for Bandwidth Test
Replies: 0
Views: 687

Suggestion: Protocols for Bandwidth Test

Hello,

please add not only udp and tcp, but also protocols 4, 47, 50.
by mikruser
Fri Mar 22, 2019 12:08 pm
Forum: General
Topic: GRE over IPSEC, CCR, VERY SLOW
Replies: 39
Views: 19646

Re: GRE over IPSEC, CCR, VERY SLOW

GRE+IPsec still slow:
viewtopic.php?f=2&t=146665
by mikruser
Mon Mar 18, 2019 6:49 pm
Forum: General
Topic: Slow speed through gre+ipsec tunnel
Replies: 13
Views: 5692

Slow speed through gre+ipsec tunnel

Hello, CHR, 6.44.1, 2 vcpu Xeon Gold CCR1009, 6.44.1 WAN with 45 ms latency [CHR]---wan(tunnel gre+ipsec)wan---[CCR1009] aes128cbc/sha1, Actual MTU = 1426 (Auto) OR aes128ctr/sha1, Actual MTU = 1446 (Auto) Bandwidth Test on CHR to CCR (tcp, receive, 1 connection): between public ip = up to 300 Mbps ...
by mikruser
Mon Mar 18, 2019 5:53 pm
Forum: General
Topic: Please add the ability to choose Proposal
Replies: 12
Views: 3271

Re: Please add the ability to choose Proposal

All my tunnels are configured with IPsec Secret enabled, and I will not change it.

We simply need the ability to choose Proposal for each tunnel.
by mikruser
Mon Mar 18, 2019 4:45 pm
Forum: General
Topic: Please add the ability to choose Proposal
Replies: 12
Views: 3271

Re: Please add the ability to choose Proposal

I still do not see any real benefit of your request. It literally takes 2 seconds to change proposal value for your policies to a different one. /ip ipsec proposal add name=newproposal copy-from=default /ip ipsec policy set [find proposal=default] proposal=newproposal I was just posting this exact ...
by mikruser
Thu Mar 07, 2019 12:19 pm
Forum: General
Topic: Why AES CTR is not hardware accelerated on the CHR?
Replies: 1
Views: 568

Why AES CTR is not hardware accelerated on the CHR?

Hello,

Why AES CTR is not hardware accelerated on the CHR?
Image_chr_.png
by mikruser
Mon Mar 04, 2019 11:58 am
Forum: General
Topic: Does the System\Watchdog on the CHR make sense?
Replies: 0
Views: 538

Does the System\Watchdog on the CHR make sense?

Hello,

Does the System\Watchdog on the CHR make sense?
Can he restart the VM if CHR hangs?
by mikruser
Thu Feb 21, 2019 11:49 am
Forum: General
Topic: vlan question
Replies: 6
Views: 1173

Re: vlan question

but I don't want to create additional vlan interfaces
by mikruser
Thu Feb 21, 2019 11:25 am
Forum: General
Topic: vlan question
Replies: 6
Views: 1173

Re: vlan question

I can not merge bridges, because bridges have different ip-addresses and dhcp-servers on them.
by mikruser
Wed Feb 13, 2019 6:23 pm
Forum: General
Topic: vlan question
Replies: 6
Views: 1173

vlan question

Hello, We have routerboard with ether2 and ether3 - in bridge1 ether4 and ether5 - in bridge2 now we need special port ether6 which should be a member of both bridges, but in bridge1 as untagged default vlan (vlan1), and in bridge2 as tagged vlan2. This is can be done very simply on a managed switch...
by mikruser
Fri Feb 08, 2019 5:01 pm
Forum: General
Topic: Why Fast Path not supported with hardware accelerated IPsec?
Replies: 1
Views: 784

Why Fast Path not supported with hardware accelerated IPsec?

Hello,

Why Fast Path not supported with hardware accelerated IPsec?
by mikruser
Mon Jan 21, 2019 11:12 am
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 1152

Re: restore to different hardware

I see a very large number of messages
expected end of command

looking at all, export/import procedure is very bugged on Mikrotik
by mikruser
Mon Jan 21, 2019 10:42 am
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 1152

Re: restore to different hardware

but cli command /import do not work:

expected end of command (line 24 column 26)
by mikruser
Fri Jan 18, 2019 6:28 pm
Forum: General
Topic: restore to different hardware
Replies: 5
Views: 1152

restore to different hardware

How to copy configuration from router1 to router2 (different hardware)?
I see this post: viewtopic.php?t=115073
My question: how to export and import via Winbox GUI? (not via terminal cli!)
by mikruser
Tue Jan 15, 2019 11:35 am
Forum: General
Topic: Suggestion: drag and drop rules between routers
Replies: 1
Views: 849

Suggestion: drag and drop rules between routers

Hello,

please add the ability to drag and drop (copy) rules (and other stuff) from one Winbox window to another Winbox window.
by mikruser
Thu Dec 27, 2018 11:41 am
Forum: General
Topic: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]
Replies: 3
Views: 3098

Re: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]

in case there is NAT between server and client: google "AssumeUDPEncapsulationContextOnSendRule"
Thanks, it helped!
by mikruser
Thu Dec 27, 2018 10:50 am
Forum: General
Topic: Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]
Replies: 3
Views: 3098

Cannot connect to L2TP server from Windows 7: no suitable proposal found [SOLVED]

Hello, CCR1009, 6.43.8 cannot connect to L2TP server from Windows 7 and Windows 2008 R2. ipsec, error no suitable proposal found. ipsec, error x.x.x.x failed to get valid proposal. ipsec, error x.x.x.x failed to pre-process ph1 packet (side: 1, status 1). ipsec, error x.x.x.x phase1 negotiation fail...
by mikruser
Tue Dec 25, 2018 12:51 pm
Forum: General
Topic: Question about IKE2
Replies: 0
Views: 531

Question about IKE2

What types of authentication does Mikrotik router support with Windows client?
Only "Use machine certificates"? Or also "Use EAP"?
by mikruser
Mon Dec 17, 2018 10:22 am
Forum: General
Topic: Ipsec peers
Replies: 0
Views: 559

Ipsec peers

Hello, I already have several ipsec peers with unique ip addresses (it is used for l2tp/ipsec site-to-site vpn's). Now I need to make a IKEv2 server for incoming connections from remote notebooks. For this i need to create ipsec peer with address 0.0.0.0/0. Is it possible to use this peer with other...
by mikruser
Tue Nov 27, 2018 3:57 pm
Forum: General
Topic: Backup/restore without mac-addresses
Replies: 2
Views: 1318

Re: Backup/restore without mac-addresses

My question about Backup/Restore

(Import/Export do not work on my devices)
by mikruser
Tue Nov 27, 2018 3:39 pm
Forum: General
Topic: Backup/restore without mac-addresses
Replies: 2
Views: 1318

Backup/restore without mac-addresses

Hello,

How to backup config without mac-addresses?
or how to restore config without changing mac-addresses?
by mikruser
Tue Nov 27, 2018 11:51 am
Forum: General
Topic: Backup/ Restore issue and duplicating Ethernet MAC address [SOLVED]
Replies: 4
Views: 3368

Re: Backup/ Restore issue and duplicating Ethernet MAC address [SOLVED]

But why i do not see Import/Export in Winbox?
by mikruser
Fri Nov 23, 2018 6:57 pm
Forum: General
Topic: After upgrade to 6.41, Ethernet Interface Bandwidth is gone
Replies: 2
Views: 1063

Re: After upgrade to 6.41, Ethernet Interface Bandwidth is gone

up!
Why is it removed from Winbox GUI???
(but it is still available from command line: /interface ethernet set ether1 bandwidth=unlimited/unlimited)
by mikruser
Wed Nov 07, 2018 12:20 pm
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 1191

Re: Сan't rename interface [SOLVED]

After the command /interface ethernet set ether4-local bandwidth=unlimited/unlimited
I was able to rename the interface
by mikruser
Wed Nov 07, 2018 11:57 am
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 1191

Re: Сan't rename interface [SOLVED]

I have this problem again after restoring the configuration
by mikruser
Wed Nov 07, 2018 11:20 am
Forum: General
Topic: Сan't rename interface [SOLVED]
Replies: 3
Views: 1191

Сan't rename interface [SOLVED]

RB750Gr3
ROS 6.43.4
Winbox 3.18

restoring configuration incorrectly restored interfaces, and I need to rename them
but when I try to change the name I get an error: Couldn't change Interface - not supported on this interface (6)
Image_interface.png
by mikruser
Fri Oct 26, 2018 6:44 pm
Forum: RouterBOARD hardware
Topic: New CPU - new product RB750Gr3 - RB750G family - now mmips
Replies: 180
Views: 82559

Re: New CPU - new product RB750Gr3 - RB750G family - now mmips

When will AES-CTR be added to RB750Gr3?
by mikruser
Fri Oct 26, 2018 1:29 pm
Forum: General
Topic: Suggestion: Reconnect action
Replies: 1
Views: 988

Suggestion: Reconnect action

Hello,

Please add "Reconnect" action to Right Click (Context) menu for all interfaces in Winbox
(reconnect = disable+enable)
by mikruser
Fri Oct 19, 2018 12:45 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

can you explain your setup and logic behind your policy configuration here? I can not think of a single case where responder should generate a dynamic policy with dst-address=0.0.0.0/0. We have a large number of subnets, and instead of creating a separate policy for each subnet, we create one polic...
by mikruser
Thu Oct 18, 2018 7:56 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

This behavior can be easily reproduced in the test lab.
by mikruser
Thu Oct 18, 2018 4:42 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 34996

Re: v6.43.4 [stable] is released!

This is not a configuration issue (this configuration worked fine for 7 years)
problem occurs after upgrade to 6.42.x or 6.43.x
by mikruser
Thu Oct 18, 2018 4:22 pm
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 34996

Re: v6.43.4 [stable] is released!

This IPsec bug still not fixed viewtopic.php?f=2&t=136445
by mikruser
Thu Oct 18, 2018 1:46 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

6.43.4 also have this issue!
by mikruser
Fri Oct 05, 2018 1:33 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 6325

Re: Please add performance results for IPsec tunnel!

I also tested two hAP ac^2 with 6.43.2

EoIP with IPsec (aes-128 ctr), file copy is only 34 MB/s:
hapac2_eoip_ipsec_ctr.png
EoIP without IPsec, file copy is 68 MB/s:
hapac2_eoip.png
by mikruser
Wed Oct 03, 2018 6:51 pm
Forum: RouterBOARD hardware
Topic: RB751-U-2nHD 100% cpu
Replies: 20
Views: 6863

Re: RB751-U-2nHD 100% cpu

6.43.2 also have this issue
by mikruser
Tue Oct 02, 2018 12:42 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 125834

Re: v6.44beta [testing] is released!

what is "multiple engine"??
by mikruser
Tue Sep 25, 2018 7:55 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 6325

Re: Please add performance results for IPsec tunnel!

You can use minimal (fastest) config, required for EoIP+IPsec or L2TP+IPsec or GRE+IPsec.
by mikruser
Tue Sep 25, 2018 7:47 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

6.43.2 also have this issue!
by mikruser
Tue Sep 25, 2018 2:06 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 6325

Re: Please add performance results for IPsec tunnel!

>>The throughput results are there for you to evaluate the IPsec crypto engine performance, not to show you throughput results with various different configurations. IPsec crypto engine performance is a "spherical cow in a vacuum", and does not show real life results. >>check for packet f...
by mikruser
Tue Sep 25, 2018 12:40 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 6325

Re: Please add performance results for IPsec tunnel!

>>Adding or enabling any additional RouterOS feature apart from IPsec policies can reduce the throughput significantly. That's why I already suggested that you also publish the results for some popular tunnels+ipsec (l2tp+ipsec, gre+ipsec, eoip+ipsec) https://forum.mikrotik.com/viewtopic.php?f=3&am...
by mikruser
Mon Sep 24, 2018 4:53 pm
Forum: RouterBOARD hardware
Topic: Please add performance results for IPsec tunnel!
Replies: 32
Views: 6325

Re: Please add performance results for IPsec tunnel!

I also tested two RB3011 with 6.43.2, connected via EoIP tunnel with IPsec.
They showed an even lower speed, even with hardware acceleration: file copy only 22 MB/s with aes-128 cbc/ctr (this is very far from declared 407.7 Mbps).
Profile:
rb3011_eoip_ipsec.png
by mikruser
Fri Sep 07, 2018 11:42 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 385
Views: 134485

Re: RB4011

Very unbalanced router
https://i.mt.lv/cdn/rb_files/RB4011iGSp ... 135303.png

Each switch have 5*1G port, but only 2.5G link to CPU.

What for this router have 10G sfp+ port? All switches summary have only 5G throughput.
by mikruser
Mon Sep 03, 2018 2:34 pm
Forum: RouterBOARD hardware
Topic: RB751 CPU usage get too high
Replies: 15
Views: 11275

Re: RB751 CPU usage get too high

I found that even just viewing the settings in the Winbox also often causes a 100% CPU load.

I suspect that the developers simply do not test the latest versions ROS/Winbox on RB751U.
Image100cpu.png
by mikruser
Sat Sep 01, 2018 9:05 pm
Forum: RouterBOARD hardware
Topic: When Mikrotik releases router that can handle single IPsec tunnel at 2.5G, 5G, 10G?
Replies: 1
Views: 930

When Mikrotik releases router that can handle single IPsec tunnel at 2.5G, 5G, 10G?

Hello,

When Mikrotik releases a router that can handle single IPsec tunnel (or MACsec) at 2.5G, 5G, 10G?
by mikruser
Thu Aug 30, 2018 10:52 pm
Forum: General
Topic: How to downgrade the ROS below the factory version?
Replies: 5
Views: 1739

Re: How to downgrade the ROS below the factory version?

May I ask why downgrade to such a vulnerable version? Wouldn't be better to upgrade the other equipment if having the same version on all hardware is important?
Due to a this bug in 6.42.x:
viewtopic.php?t=136445
by mikruser
Thu Aug 30, 2018 6:43 pm
Forum: General
Topic: How to downgrade the ROS below the factory version?
Replies: 5
Views: 1739

Re: How to downgrade the ROS below the factory version?

This is correct behavior.
But why??
We have another hAP ac^2 router and it works fine with version 6.41.4:
Image_hapac2.png
by mikruser
Thu Aug 30, 2018 5:58 pm
Forum: RouterBOARD hardware
Topic: Suggestion: release routers with preinstalled Factory Software from Bugfix release chain
Replies: 6
Views: 1401

Suggestion: release routers with preinstalled Factory Software from Bugfix release chain

Hello,

Suggestion: release routers with preinstalled Factory Software only from Bugfix release chain.
by mikruser
Thu Aug 30, 2018 4:59 pm
Forum: General
Topic: How to downgrade the ROS below the factory version?
Replies: 5
Views: 1739

How to downgrade the ROS below the factory version?

We have hAP ac^2 with Factory Software 6.42.3
How to downgrade the ROS below the factory version (to 6.41.4)?
After /system package downgrade
we get error
error: omitting package system-6.41.4: min RouterOS version is 6.42.3
by mikruser
Wed Aug 29, 2018 12:55 pm
Forum: General
Topic: PCQ - Queue - where to set limit
Replies: 1
Views: 710

Re: PCQ - Queue - where to set limit

see answer in this topic: viewtopic.php?f=1&t=138427#p682693

Cha0s
Have you tried TP-Link or D-Link?

I am sure they are much easier with all their wizards whistles and bells.

If you find RouterOS hard, then it's probably not for you.
by mikruser
Tue Aug 28, 2018 7:15 pm
Forum: General
Topic: Suggestion: simple speed limiter
Replies: 8
Views: 2234

Re: Suggestion: simple speed limiter

Advanced tab also not enough in this case.
by mikruser
Tue Aug 28, 2018 6:06 pm
Forum: General
Topic: Suggestion: simple speed limiter
Replies: 8
Views: 2234

Re: Suggestion: simple speed limiter

we are talking about only first tab
by mikruser
Tue Aug 28, 2018 12:53 pm
Forum: General
Topic: Suggestion: simple speed limiter
Replies: 8
Views: 2234

Re: Suggestion: simple speed limiter

Simple queue is perfectly adequate for this. Just use the first tab.
With only first tab is impossible to perform an elementary task in one queue:
set summary limit + set per IP limit
by mikruser
Sat Aug 25, 2018 3:09 pm
Forum: General
Topic: Feature requests
Replies: 1374
Views: 343841

Re: Feature requests

Feature request: AES hardware acceleration for OpenVPN
by mikruser
Fri Aug 24, 2018 7:04 pm
Forum: General
Topic: Suggestion: simple speed limiter
Replies: 8
Views: 2234

Suggestion: simple speed limiter

Hello,

current Queues has a very large number of settings and a very complex and confusing.

Please add simple speed limiter.
by mikruser
Thu Aug 23, 2018 5:25 pm
Forum: General
Topic: Please add "Benchmark" button to Winbox IP-IPsec-Proposals
Replies: 1
Views: 988

Please add "Benchmark" button to Winbox IP-IPsec-Proposals

Hello,

Please add "Benchmark" button to Winbox IP-IPsec-Proposals
for benchmark selected algorithms "encryption", "decryption", "encryption+decryption" speed on any platform
(like VeraCrypt Tools-Benchmark):
Image_bench.png
by mikruser
Mon Aug 20, 2018 1:26 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

6.42.7 also have this issue!
by mikruser
Fri Aug 17, 2018 2:04 pm
Forum: General
Topic: Why Fast Path not active?
Replies: 4
Views: 2968

Re: Why Fast Path not active?

IPv4 fast path is automatically used if following conditions are met:

firewal rules are not configured;


LOL, in this case Fast Path absolutely useless
I do not have routerboards without firewall rules
by mikruser
Fri Aug 17, 2018 1:09 pm
Forum: General
Topic: Why Fast Path not active?
Replies: 4
Views: 2968

Why Fast Path not active?

Hello,

Fast Path enabled
But why Fast Path not active?
Image1_fp.png
by mikruser
Thu Aug 16, 2018 1:54 pm
Forum: General
Topic: Suggestion: backup restore wizard
Replies: 0
Views: 626

Suggestion: backup restore wizard

Hello,

Please add to Winbox backup restore wizard:

Interfaces remapping
Interfaces MAC addresses: preserve/reset
DHCP leases: preserve/remove
by mikruser
Wed Aug 08, 2018 4:50 pm
Forum: General
Topic: Please add the ability to choose Proposal
Replies: 12
Views: 3271

Re: Please add the ability to choose Proposal

I already have a configuration with a very large number of Ipsec policies (all these policies use proposal:default).

Now I created a l2tp connection with "Use Ipsec", and i need another custom proposal for this.
by mikruser
Wed Aug 08, 2018 1:11 pm
Forum: General
Topic: Bug after upgrade to 6.42.6
Replies: 4
Views: 1216

Re: Bug after upgrade to 6.42.6

After investigation, I found that the bug is in Firewall-Service Ports-sip
After disable this port, 6.42 also works fine
by mikruser
Wed Aug 08, 2018 12:12 pm
Forum: General
Topic: Please add the ability to choose Proposal
Replies: 12
Views: 3271

Please add the ability to choose Proposal

Hello,

Please add the ability to choose Proposal (in L2tp with "Use IPsec")
by mikruser
Wed Aug 08, 2018 1:07 am
Forum: General
Topic: Suggestion: SMB WAN Accelerator
Replies: 0
Views: 698

Suggestion: SMB WAN Accelerator

Hello,

Please add SMB WAN Accelerator (for high latency VPN links)
like this: https://www.silver-peak.com/applications/cifs-smb
by mikruser
Thu Aug 02, 2018 9:51 pm
Forum: General
Topic: Suggestion: add crypto unit % usage
Replies: 0
Views: 837

Suggestion: add crypto unit % usage

Hello,

Some RouterBoard models have encryption engine.
Central Processing Unit (CPU) and Crypto Processing Unit (CrPU)

But currently in Tools-Profile we can see only CPU % Usage.

Suggestion: please add to Profile also CrPU % Usage.
by mikruser
Tue Jul 31, 2018 2:27 pm
Forum: General
Topic: AES-GCM HW acceleration in CCR
Replies: 10
Views: 2274

Re: AES-GCM HW acceleration in CCR

This topic about CCR
by mikruser
Tue Jul 31, 2018 12:14 pm
Forum: General
Topic: AES-GCM HW acceleration in CCR
Replies: 10
Views: 2274

Re: AES-GCM HW acceleration in CCR

There is a plan to make HW acceleration for GCM. 
Thank you for the confirmation Maris.
As it turned out, the confirmation was not true
by mikruser
Fri Jul 27, 2018 6:43 pm
Forum: General
Topic: chr support fast path?
Replies: 6
Views: 1579

Re: chr support fast path?

The presentation says the VMXNET3 NIC supports fastpath. Are you using that?
CHR always uses VMXNET3
by mikruser
Fri Jul 27, 2018 6:29 pm
Forum: General
Topic: chr support fast path?
Replies: 6
Views: 1579

Re: chr support fast path?

Also have this question.
Any official comments?
Image_chr_fp.png
by mikruser
Fri Jul 27, 2018 3:25 pm
Forum: General
Topic: How to optimize VPN tunnel over high latency link?
Replies: 3
Views: 1444

Re: How to optimize VPN tunnel over high latency link?

Yes, Windows share file copy.
I also tried vSphere vMotion, but it did not exceed 60 Mbit/s.
by mikruser
Fri Jul 27, 2018 12:54 pm
Forum: General
Topic: How to optimize VPN tunnel over high latency link?
Replies: 3
Views: 1444

How to optimize VPN tunnel over high latency link?

Hello, We have WAN-link with 1Gbit/s throughput, but 40 ms latency. iperf3 UDP test really can do 1Gbit/s almost lossless. We have L2TP IPsec tunnel over this WAN-link: LAN1---[CHR]---(l2tp_ipsec_vpn)---[CCR]---LAN2 Now file copy between LAN1 and LAN2 is only 6 MB/s maximum. I try different aes mode...
by mikruser
Thu Jul 26, 2018 2:27 pm
Forum: General
Topic: Bug after upgrade to 6.42.6
Replies: 4
Views: 1216

Re: Bug after upgrade to 6.42.6

I do not see changes in SIP
by mikruser
Thu Jul 26, 2018 11:54 am
Forum: General
Topic: Feature Request: IPerf
Replies: 59
Views: 18208

Re: Feature Request: IPerf

kasparskr

do you can release Traffic Generator for Windows?
by mikruser
Thu Jul 26, 2018 11:35 am
Forum: General
Topic: Bug after upgrade to 6.42.6
Replies: 4
Views: 1216

Bug after upgrade to 6.42.6

Hello, We have this setup: [FreePBX]---[CCR1]---(l2tp_ipsec_tunnel)---[CCR2]---[sip_clients] At night I updated ССR from 6.40.8 to 6.42.6. As a result, about half of sip clients/trunks can not register (FreePbx reboot did not help). After downgrade CCR back to 6.40.8 everything again worked fine. Wh...
by mikruser
Thu Jul 26, 2018 5:13 am
Forum: General
Topic: Please add to l2tp client Dial Out page "IPsec proposal" field
Replies: 0
Views: 692

Please add to l2tp client Dial Out page "IPsec proposal" field

Hello,

Please add to l2tp client Dial Out page "IPsec proposal" field
by mikruser
Thu Jul 26, 2018 4:40 am
Forum: General
Topic: "unclassified" cpu usage during btest
Replies: 1
Views: 1266

"unclassified" cpu usage during btest

Hello,

What is "unclassified"?
Image1_btest_profile.png
by mikruser
Wed Jul 25, 2018 7:03 pm
Forum: General
Topic: Question about Tools - Bandwidth Test (tcp)
Replies: 0
Views: 531

Question about Tools - Bandwidth Test (tcp)

Hello,

Question about Tools - Bandwidth Test

What TCP Window Size does the test use?
by mikruser
Wed Jul 25, 2018 5:34 pm
Forum: General
Topic: btest - Where Is
Replies: 7
Views: 72654

Re: btest - Where Is

Any official info about Bandwidth Test for Windows?
by mikruser
Sun Jul 22, 2018 12:51 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

Thanks, it works. You are a genius.
by mikruser
Sat Jul 21, 2018 11:15 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

>>You may start by removing the additional 2.2.2.x addresses in your current setup

these are the necessary addresses, they must be accessible from the Internet
by mikruser
Sat Jul 21, 2018 11:13 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

>>simply remove one Ethernet interface from an existing bridge and add IP address 2.2.2.1/27 to that interface.
which Ethernet interface?
from which bridge?
why only 2.2.2.1?

I do not see it in your diagram
by mikruser
Sat Jul 21, 2018 10:40 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

On your diagram I do not see addresses from 2.2.2.0/24 subnet. (on my diagram these 30 addresses resides on Mikrotik2 <2.2.2.2>interface as additional addresses)
by mikruser
Sat Jul 21, 2018 9:39 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

Аbsolutely did not understand you.
Could you draw a diagram with addresses from my example?
by mikruser
Sat Jul 21, 2018 6:23 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

>>what is currently between the two Mikrotiks nothing. direct connection. Post the current configurations of both Mikrotiks For example (Mikrotik #1 is only routing, #2 routing and NAT): (Internet, provider gateway)---(1.1.1.0/30)---<1.1.1.1>[Mikrotik1]<2.2.2.1>---(2.2.2.0/24)---<2.2.2.2>[Mikrotik2...
by mikruser
Sat Jul 21, 2018 6:01 pm
Forum: Virtualization
Topic: CHR and KVM
Replies: 1
Views: 2907

CHR and KVM

Hello,
When i try Make RouterOS Image, i get error:
Couldn't start - this is not a host system
Image_kvm_chr.png
by mikruser
Sat Jul 21, 2018 3:35 pm
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

Re: 2-in-1 ? [SOLVED]

How possible create router inside router? Using VRF? KVM? Or more simple solution?
by mikruser
Sat Jul 21, 2018 3:09 am
Forum: General
Topic: 2-in-1 ? [SOLVED]
Replies: 13
Views: 1885

2-in-1 ? [SOLVED]

Hello, Currently i have this: (Internet)---(MyPublicSubnet1)---[Mikrotik1]---(MyPublicSubnet2)---[Mikrotik2]---(MyPrivateSubnet) MyPublicSubnet1 with 2 public ip MyPublicSubnet2 with 30 public ip Mikrotik1 is only routing Mikrotik2 is routing, nat, l2tp_ipsec_vpn My question: it is possible to creat...
by mikruser
Thu Jul 19, 2018 12:59 pm
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Re: Please add numbers on Y-axis in Bandwidth Test

Bandwidth Test shows results every 1 second. Snmp monitoring software can not show so frequently.
by mikruser
Thu Jul 19, 2018 12:35 pm
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Re: Please add numbers on Y-axis in Bandwidth Test

this is a joke? how do you imagine a bandwidth test through snmp?
by mikruser
Thu Jul 19, 2018 12:15 pm
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Re: Please add numbers on Y-axis in Bandwidth Test

we need more than one number, we need a few numbers (at least two - at the bottom and at the top)
image_bt_num.png
by mikruser
Thu Jul 19, 2018 12:04 pm
Forum: General
Topic: Feature requests
Replies: 1374
Views: 343841

Re: Feature requests

by mikruser
Thu Jul 19, 2018 11:39 am
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Re: Please add numbers on Y-axis in Bandwidth Test

We need numbers on the Y-axis so that they can be seen in the screenshots (if you do not understand this from the first message).
by mikruser
Thu Jul 19, 2018 11:09 am
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Re: Please add numbers on Y-axis in Bandwidth Test

vecernik87
You are troll? Try mouse over my screenshot.
by mikruser
Fri Jul 13, 2018 10:10 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

>>I am running several IPsec tunnels using various 6.42.x versions and things like this do not happen

You also use 0.0.0.0/0 in Src.Address (and Generate Policy on other side)?
by mikruser
Fri Jul 13, 2018 7:05 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Re: Problem with IPsec after update to 6.42

I found a bug in the 6.42.x version:
6.42 generate policy with incorrect Dst.Address: instead of 0.0.0.0/0 (in 6.41) i see public ip of remote router (in 6.42)

Mikrotik, please fix this bug ASAP!
by mikruser
Fri Jul 13, 2018 5:08 pm
Forum: General
Topic: Please add numbers on Y-axis in Bandwidth Test
Replies: 24
Views: 3851

Please add numbers on Y-axis in Bandwidth Test

Hello,

Please add numbers on Y-axis in Bandwidth Test
image_bt.png
by mikruser
Fri Jul 06, 2018 5:12 pm
Forum: General
Topic: CHR do not support hardware acceleration (AES-NI)?
Replies: 0
Views: 625

CHR do not support hardware acceleration (AES-NI)?

Hello,

I create l2tp ipsec tunnel (sha1 aes-128-cbc) Encoding: cbc(aes) + hmac(sha1)
It work, but without hardware acceleration: show E (E-ESP) instead of EH (E-ESP H-Hardware AEAD)

ESXi 6.7, CHR 6.42.5
by mikruser
Wed Jul 04, 2018 3:40 pm
Forum: General
Topic: Problem with IPsec after update to 6.42
Replies: 18
Views: 10060

Problem with IPsec after update to 6.42

Hello,
After updating from 6.41.4 to 6.42.5 the traffic does not go through the tunnel (tunnel is established, but the traffic does not go).
After downgrade to 6.41.4 everything works fine again.

What changes in 6.42. led to this?
by mikruser
Sun May 27, 2018 11:53 pm
Forum: General
Topic: How to see real (physical) ether interface number?
Replies: 3
Views: 900

How to see real (physical) ether interface number?

Hello,
The interface Name can be anything and does not match the real (physical) number. (for example: ether interface number 2 can have Name 'ether5')
How to see real (physical) ether interface number? (remote, via Winbox)
by mikruser
Wed Mar 21, 2018 1:28 pm
Forum: RouterBOARD hardware
Topic: S+RJ10 question
Replies: 0
Views: 698

S+RJ10 question

Hello,

Is the module S+RJ10 (https://mikrotik.com/product/s_rj10) compatible with other vendor switches (like HPE, Dell, etc)?
by mikruser
Fri Mar 16, 2018 4:09 pm
Forum: General
Topic: Please add ability to connect to neighbors via MAC Winbox
Replies: 6
Views: 3352

Re: Please add ability to connect to neighbors via MAC Winbox

>>Remeber that neighbours seen by the router on the "other end" of interface could not be reachable from your LAN segment.

Router on the "other end" should act as a "proxy for winbox" in this case.
by mikruser
Fri Mar 16, 2018 2:47 pm
Forum: General
Topic: Please add ability to connect to neighbors via MAC Winbox
Replies: 6
Views: 3352

Re: Please add ability to connect to neighbors via MAC Winbox

I do not see "MAC Winbox" in your red circle
by mikruser
Fri Mar 16, 2018 12:50 pm
Forum: General
Topic: Please add ability to connect to neighbors via MAC Winbox
Replies: 6
Views: 3352

Please add ability to connect to neighbors via MAC Winbox

Hello,

Please add ability to connect to remote neighbors via MAC Winbox
(Menu "IP" - "Neighbors")
by mikruser
Tue Mar 13, 2018 6:33 pm
Forum: RouterBOARD hardware
Topic: Overclocking is officially supported?
Replies: 1
Views: 2064

Overclocking is officially supported?

Hello,

Some models can be overclocked +25% via System - Routerboard - Settings - CPU Frequency.
Is it officially supported? In this case, do we need special conditions for this (eg additional cooling)?
cpu_rb951.png
cpu_hapac2.png
by mikruser
Mon Mar 12, 2018 9:28 pm
Forum: General
Topic: L2TP VPN Tunnel problem
Replies: 3
Views: 4915

Re: L2TP VPN Tunnel problem

Any answer from Mikrotik?
When will you fix this bug?
This is a very serious problem!
by mikruser
Fri Feb 16, 2018 12:28 pm
Forum: RouterBOARD hardware
Topic: RB750Gr3 with PoE. When?
Replies: 6
Views: 2552

Re: RB750Gr3 with PoE. When?

No, i mean RB750Gr3
by mikruser
Fri Feb 16, 2018 11:38 am
Forum: RouterBOARD hardware
Topic: RB750Gr3 with PoE. When?
Replies: 6
Views: 2552

RB750Gr3 with PoE. When?

Hello,

When we can expect the appearance hEX (RB750Gr3) with PoE out (802.3af/at)?
by mikruser
Wed Feb 14, 2018 11:41 am
Forum: General
Topic: L2TP VPN Tunnel problem
Replies: 3
Views: 4915

Re: L2TP VPN Tunnel problem

Also have this issue CCR1009, 6.39.3 sometime l2tp tunnel cannot connect: l2tp-out1: initializing... l2tp-out1: connecting... l2tp-out1: terminating... - session closed l2tp-out1: disconnected... l2tp-out1: initializing... l2tp-out1: connecting... l2tp-out1: terminating... - old tunnel is not closed...
by mikruser
Sat Feb 10, 2018 9:39 pm
Forum: RouterBOARD hardware
Topic: dual-band access point
Replies: 4
Views: 1050

Re: dual-band access point

You can see it on Specifications page for all dual-band AP:

https://mikrotik.com/product/RB962UiGS-5HacT2HnT
https://mikrotik.com/product/cap_ac
https://mikrotik.com/product/hap_ac2
Image_mikr_ap.png
i do not see "a" and "n" for 5 GHz...
by mikruser
Fri Feb 09, 2018 4:58 pm
Forum: RouterBOARD hardware
Topic: dual-band access point
Replies: 4
Views: 1050

dual-band access point

Hello,

Mikrotik dual-band SOHO access point really do not support "n" and "a" standards in 5 GHz?
  • 1
  • 2