MikroTik

Nevon

Found this..
https://netxms.com/blog/monitoring-of-m ... -naturally

But I cant find anything on how to run the agent on the Mikrotik.. help!

Nevon

Go fully layer 3 and use iBGP between CRS<>CRS and eBGP for CRS to CCR. Enable ECMP using route filters on each device, set route learnt distance to 1 for both paths on each device to get even load balancing. Remove MLAG/VRRP completely in this way. Is it possible to run iBGP on CRS326 with full sp...

Nevon

I want to build something like the image.

mlag-vrrp-bgp.jpg

The MLAG stack isnt any problem. But I want to know if I would use several VLANs should they all be under the VRRP interface?

Nevon

Can you elaborate on that problem?

Updated my ticket.

Nevon

Upgraded a CRS354-48P-4S+2Q+RM MLAG paired stack. After this weekend customer reported extreme slow network speed. Made a return to 7.2.3 and now everything works again. I made a ticket with Mikrotik support last week when we ran into a problem on SW02 in the MLAG stack where port 1-12 stopped worki...

Nevon

[Removed unneeded quotation]

Skärmavbild 2022-08-25 kl. 08.56.29.png

Im trying in another network. I get this error.. or TX error.

Help.

Nevon

I have tried with and without to specify src adress on the radius no luck.
[Removed unneeded quotation]

Nevon

Hi I'm trying to set up dot1x in an existing environment. there is a mgmt network as shown in the picture and the switch can ping the radius server via vpn. is there a problem with me running the traffic through two other servers and a router in the way that makes it not work or what am i missing? t...

Nevon

Is there anyway to make a "shortcut" that I can place in dock?

Nevon

Thanks!

Nevon

Can I force a certain IP subnet a certain way in and out if I have several BGP peers.
So I want to prioritize a certain Peer for this subnet.

Possible?

Nevon

Changelog does not say that this feature is added, so 7.1.2 does not have bgp/advertisements equivalent yet. @mrz - Thanks for clarifying. We have 20 full mikrotik bgp routers with loads of filters and 200+ peers. I understand there are many things to cover in 7.x but its really hard not to have bg...

Nevon

Hi, I am doing tests with 2 CRS in MLAG version RouterOS v7.1 stable I have not encountered any problems so far You have to bond the interfaces of your CCRs to their respective Switches The peer port must have an untagged VLAN with PVID eg 200, on both sides All VLANs must also be tagged on the pee...

Nevon

I plan that as soon as ROS7 is stable use MLAG stacked CRS switch against my core routers. How to think? VRRP? Has two CCR routers with each eBGP full table with iBGP in between. How can I build the best redundancy with a stack of CRS MLAG underneath? Skärmavbild 2021-12-19 kl. 10.52.08.png ?? Thanks.

Nevon

I just got live with one of our BR that got two eBGP full feed and one iBGP. I must say that everything is going ok.. but I feel like Im fumble in the dark to have control over what I advertise.. In the peer windows prefix count is 0 on all of my peers... 🙈 Looking forward to next version to get som...

Nevon

Im trying IPv6 and if I dont use default template the eBGP peer announce my blackhole prefix.
But router2 who uses default template doesnt announce blackhole prefix until i check box static in redist....
Im confused...

Nevon

I have setup three ROS7.1 routers router1 has eBGP to router2 that got iBGP to router3 If I on router2 make a blackhole for 192.168.0.0/24 and filter (bgp-network) and on eBGP peer to router1 it announce the prefix correct according to wiki. If I do the same on router2 on the iBGP peer to router3 it...

Nevon

I would love to have some help to convert filters from V6 to V7 Transit filters eBGP: Incoming filter: add action=discard chain=bgp-in prefix=0.0.0.0/0 add action=discard chain=bgp-in prefix=xxx.xxx.xxx.xxx prefix-length=24-32 add action=discard chain=bgp-in prefix=xxx.xxx.xxx.xxx prefix-length=24-3...

Nevon

I am not really sure what you are asking, what "reject" would look like if you type it? Here you can find detailed description on how to use routing filters: https://help.mikrotik.com/docs/pages/viewpage.action?pageId=74678285 Some basic stuff to start with as well: https://help.mikrotik....

Nevon

With "reject" action.

what would such a thing look like? Would like to start testing ROS7 BGP

Nevon

ROS v7 doesn't have "discard" action.

How does Mikrotik think then?
We must help BGP-community to make sure that the wrong information does not come in or out. For example. I want to make sure I do not get my own prefixes from eBGP peers.

Nevon

But if I want to accept everything else then my own? I read something about automatic discard... sounds wrong.. Most important is to have control over what Im announcing.. Found somewhere that I can make adress-list not only for announce but also for incoming filter? Right? to accept only your prefi...

Nevon

Hi! Anyone who can help me. Im looking forward to test some ROS7 BGP. But I need to have some help with filtering. On my TRANSIT-peer IN-filter I want to ensure that I discard if somehow my own prefix are received. I allsow want to discard default-route On my TRANSIT-peer OUT-filter I want to ensure...

Nevon

Try adding add stp-type=config to your filter rule and then create another filter rule for TCN. This should match and only drop BPDUs and not all outbound traffic. Hi thanks for the reply. I added those two.. but I still recive RSTP from those ports... but now the traffic is not blocket.. and I can...

Nevon

This is a known limitation of ROSv6. Recursive routing doesn't work in IPv6. This is fixed in v7, but it's still in beta. Some notes about this are in this article: https://stubarea51.net/2020/12/30/mikrotik-routerosv7-first-look-dynamic-routing-with-ipv6-and-ospfv3-bgp/ But should send routes and ...

Nevon

Im installing a corerouter 2.
corerouter 1 is a 1072 ROS6.46.8 and corerouter 2 is ROS7b4. IPv4 is working great sending iBGP correct without routereflect.
But now when I have installed a linknet IPv6 BGP establish but none routes are being annonsed.

Help!

Nevon

Hi wonder if someone can help me.
Trying to setup a iBGP IPV6 between a ROS6.46.8 to ROS7b4 router. ROS6 router has full table but I dont get it to share the routes. I have already IPv4 workin..

Nevon

Hi Im trying to understand what Im doing wrong when I try to apply these settings to block STP|RSTP|MSTP on customer ports in our L2 network. From wiki: Don't send out BPDUs from a certain port /interface bridge add name=bridge1 /interface bridge port add bridge=bridge1 interface=ether1 add bridge=b...

Nevon

Updated our CRS328-4C-20S and CRS326-24S+ and we got problem that randomly freezing connectivity in the network. We notised it by SIP stream and other UDP services that disconnected.
Downgraded to 6.47.8 and no problem notised yet..

Nevon

... /interface bridge filter add action=drop chain= forward dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF log=yes log-prefix="STP DROP" out-interface=sfp-sfpplus1 ... make this: /interface bridge filter add action=drop chain= output dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:F...

Nevon

Hi!
Any updates regarding native winbox for Macos and M1 (ARM) core?

Thanks.

Nevon

Is anyone else seeing port-flapping with 7.1b3 on RB3011's ?

Flapping on my CCR2004

Nevon

Lost connectivity between my CCR1072 with 6.46.8 and CCR2004 7.1b3... SFP+ flapping.. and no neigb. no IP or IPv6... worked with 7.1b2...
Tip?

Nevon

We have an CCR1072 with two bridged LAN interfaces with RSTP for L2 redundans.
According to Observium that we have for SNMP log. the FDB is nearly full.. how come and what to do?..

Nevon

I sold a Chateau and when I installed the SIM it put it self in boot-loop with no return.. I had to do a netboot and downgrade it to B5. B6 is not public soo..
It has worked fine sins.

Nevon

One question.. do I have to do MSTIs vlan mapping if I want to use default as port cost?
Or should I use a vlan mapping 1-4096 "map"?

Nevon

SNMP stoped workin...
Did you get an autosupout file? I already created a ticket for this issue.

No

Nevon

SNMP stoped workin...

Nevon

Someone tried wine staging 5.0 rc2?

Nevon

Someone else who has problems sometimes to paste text in terminal thru winbox..?

Nevon

Someone who can help me. Updated my own CCR1009 to V7 and could connect 3 times with my wine winbox app.. now when I try to connect the window disapper..

Nevon

This actually got even simpler: https://github.com/nrlquaker/winbox-mac

If you don't want to read - just use brew.

brew cask install nrlquaker-winbox

Works flawlessly on Catalina

How do you import addresses?... where?

Nevon

Thanks for all your help.

When the native MacOS app will be released? I’m thinking on wait and do not upgrade to Catalina until we have this version, because all of our work depends on winbox...

I made that mistake to upgrade to Catalina...
Waiting.. for a real macOS app.

Nevon

Drag and drop doesnt work for my.. when I try to upload firmware.. upload button in files doesnt do anything more then hang winbox. How far aways are we from a real winbox app for macOS? Parallels isnt an option.. to slow to start.. and resourses. Is their anyway to get rid of terminal when winbox i...

Nevon

What is "cata"? Yes Macos Catalina.. Winbox is already working in macOS catalina. Are you planing to release a real macos app?.. or is this what we have to live with?.. the old winbottler was ok.. maybe I have done somthing wrong.. but its disturbing with the terminal in the background.

Nevon

Is it possible that a Mikrotik router can handle VRFs that could share DHCP-WAN NAT?

Nevon

What is "cata"?

Yes Macos Catalina..

Nevon

Will their ever be a workin winbox in cata? Dont feel that Im a fan of this terminal thing..

Nevon

We are aware and are working on all of that.

Waiting.... ^^

Nevon

+1 for a winbox for macOS and 64.

Thanks!

Nevon

Im having the same problem today.. its working fine with SSTP tunnel but with L2TP ill get 20% packet loss.
It started a year ago.. no news!?

Nevon

IPsec.. I have two CCR1009 where I have L2TP/Ipsec tunnel between them. Sins 6.42.7 I have problem that I have almost 10% packet loss.. when I ping if I ping the other side of the tunnel. I have 0% loss if I ping Internet IP outside the tunnel. Both of the CCR have other L2TP/Ipsec tunnels to other ...

Nevon

Have 3-4 WAP LTE Kit at different customers and all of them are set up to passthrough public ip-address to customers router. Everything works fine until day 2-3 when the router loses the DHCP lease and get no new.. If i reboot the WAP LTE it will work fine for a day or two again.. what have I done w...

Nevon

I try to setup a dual ISP failover with netwatch as the "checker" of internet on WAN1. WAN1 and WAN2 is DHCP-client. My config is: /interface ethernet set [ find default-name=ether1 ] comment=WAN1 set [ find default-name=ether2 ] comment=WAN2 /ip dhcp-client add comment=WAN1 dhcp-options=h...

Nevon

Someone who has an working script for a failover script that deletes SIP connection back and forward?

Thanks

Nevon

This morning we got a problem at work. We started to get 403 error on some websites.
I can't ping those sites..

I have tried to reset the CCR and inactivate all FW rules. Nothing helps. If I change the router to another Mikrotik it works great.

Help plz.

Nevon

I have two mikrotik connected with OSPF/BGP and separate BGP/VPNV4 peer to RS-server for mgmt and MPLS LDP between.
Everything is workin correct to the first one. But nr two inte the chain is returning MGMT traffic on global "main" VRF.

Help plz.

Thanks Markus

Nevon

Please provide model of lte card.

Upgrade to 6.35.4 and enable lte logging
Code: Select all
/sy logging add topics=lte
Paste log output here.

Now I got this error..
lte1: rcvd +CME ERROR: 1

Nevon

Please provide model of lte card. Upgrade to 6.35.4 and enable lte logging /sy logging add topics=lte Paste log output here. Model of card is Huawei ME909u-521 It has worked but two weeks after they changed to telenor from tele2 in sweden it stoped. but they have 4 more of this kit that still ...

Nevon

Please provide model of lte card. Upgrade to 6.35.4 and enable lte logging /sy logging add topics=lte Paste log output here. 00:07:20 lte,async lte1: sent AT E0 V1 00:07:20 lte,async lte1: rcvd OK 00:07:20 lte,async lte1: sent AT+CFUN=7 00:07:20 lte,event ^ECCLIST: "112","911&quo...

Nevon

I have a problem.
A customer to me bought 5 of these and now after some months one of the stopped connecting with the LTE. They have Telenor as operator.
If I take the samt SIM card and place in in SXT LTE it connects. I have changed the LTE card in 912 but no luck.
Someone who has any idé!?

Nevon

When will we see vpn6 in BGP?

Nevon

Hello, dan5 As I understand the problems with your CRS226 appear when they have a bridging configuration. We are aware of such problems and the new RouterOS v6.33 release will contain fixes for them. v6.33 will be released very soon. In case any problems remain in the new version, please write an e...

Nevon

+1

Hi

Can you give us an estimated date? This year? Next year? In 5 Years?
Many of us needs to plan future networks and it would be great to know when things "will work" (BGP MIB, IPv6 Recursive Gateway lookup, BGP Multicore, ...)

Thanks and regards
Patrick

Nevon

Would like to know as last post.. Mikrotik.. are we talking 4 weeks or 4 years?
Please lets us know any information..

/Markus

Nevon

Ah saw that now.. thanks.. then we are looking forward for routerOS7 then... soon... very soon..

Nevon

All ipv6 routes that I got from BGP ipv6 is unreachable.
Seems that It cant use roots from OSPF-v3... or?

Nevon

I have found rp-filter in "IP/Settings" but I want to add rp-filter on specified interfaces not the whole mikrotik is that possible?

//Markus

Nevon

Assuming this is not another CCR bug, it sounds like you have a slow BGP peer on your hands. This is not unique to RouterOS and can be caused by one of several things: 1. TCP communication issues 2. Missing information in BGP updates that requires resending 3. Intentional due to router policy - usu...

Nevon

Assuming this is not another CCR bug, it sounds like you have a slow BGP peer on your hands. This is not unique to RouterOS and can be caused by one of several things: 1. TCP communication issues 2. Missing information in BGP updates that requires resending 3. Intentional due to router policy - usu...

Nevon

What ros are you using? Its working well in my ccr and 6.4

we are useing 6.4

Nevon

We are trying to make our new CCR 1036 with two peers load a full table but after some secounds it stops.. the CPU goes to 100% on one core and after.. a secound or two it goes down to 0% and it loads only 4.000-10.000 prefix. It has now been online for 17h and has still only got 40.000prefix. What ...

Nevon

Im trying to add BGP over the "loopback" bridges on two CCR. I can ping the loopback interfaces from R1 to R2 och R2 to R1. But when I add BGP to the loopbacks it wont connect. But if I change on R1 so that it should connect to the local interfacce it connects back from loopback... Whats w...

Nevon

I have one CCR with failover with two ISP.
This CCR is connected as a PPTP-client to a PPTP-server.

When one of the ISP goes down the PPTP tunnel doesnt time-out or it takes some time.. and time to reconnect.. how do I solve that easiest?
Script or does CCR have any solution for that?

//Markus

Nevon

I have a CCR with two ISP failover config.
ISP 1 is prio och ISP2 is failover.

My problem: When I connect with VPN/PPTP I want my traffic to only use ISP2 interface.

How?

Nevon

I have a CCR with two ISP failover.

ISP 1 is prio and ISP 2 is failover.
My problem is:
When I connect with VPN/PPTP I want my traffic to always use ISP 2 the failover interface.

How do I solve this?

//

Search found 76 matches