Community discussions

Search found 38 matches

by NodeMax
Wed Aug 16, 2017 12:55 pm
Forum: General
Topic: REST API v7 Make Our Day ! +1 it Please
Replies: 17
Views: 5946

Re: REST API v7 Make Our Day ! +1 it Please

i was just asking for "/whatever print json" (or /whatever print xml [for the serious old school folks) functionality in addition to "xxx print terse" or "xxx print detail" a while ago. doesn't seem to be a big deal for me at all. to be honest sending commands over ssh does work just fine, and i ha...
by NodeMax
Wed Aug 16, 2017 12:23 pm
Forum: General
Topic: REST API v7 Make Our Day ! +1 it Please
Replies: 17
Views: 5946

Re: REST API v7 Make Our Day ! +1 it Please

what does REST API offer the the current doesn't? The current API takes 3~5 minutes to setup and is very simple to use. I disagree, that it takes 5 minutes to use, it depends on what language you are using? and with an API it shouldn't How much can you do in the existing API that you can do in Winb...
by NodeMax
Tue Aug 15, 2017 11:18 am
Forum: General
Topic: REST API v7 Make Our Day ! +1 it Please
Replies: 17
Views: 5946

REST API v7 Make Our Day ! +1 it Please

I know I put this up before. (Please add a +1) Guys, would it benefit you? Please think about it. Guys can we encourage Microtik to add REST API for Microtik. Nearly all the API's we use now days are REST. To use REST is 5 minutes, to use the Microtik API, well it's not 5 minutes :( REST, JSON and X...
by NodeMax
Sun Feb 12, 2017 4:10 am
Forum: General
Topic: v7 REST API
Replies: 3
Views: 2198

v7 REST API

Hi

Rest API for v7 would be nice.

So hard to understand the existing API

Tony
by NodeMax
Mon Oct 12, 2015 10:27 pm
Forum: Forwarding Protocols
Topic: How do I route ether3 to ether4 (tagged vlan) on CCR
Replies: 7
Views: 2216

Re: Can I put a Trunk on a Microtik CCR same as this one I have on a Cisco?

On just about any MikroTik, you can bridge the VLAN subinterface of one physical interface to the vlan subinterface of another physical subinterface. Or you can bridge a physical port to a vlan subinterface if you need untagged to tagged. Here is an example from the 1072 in our lab For tagged to ta...
by NodeMax
Mon Oct 12, 2015 9:41 pm
Forum: Forwarding Protocols
Topic: How do I route ether3 to ether4 (tagged vlan) on CCR
Replies: 7
Views: 2216

Re: Can I put a Trunk on a Microtik CCR same as this one I have on a Cisco?

I suppose what I am asking: If I plug a carrier into ether 3 and I have ether4 with a tagged vlan say vlan10 [windows vlan10]--[XEN host]--[cisco4948]--[vlan10 ether4 microtik1036 ether3] ---[point to point---carrier--voip sbc How do I get ether 3 to talk to VLAN10 which is tagged. For example: In W...
by NodeMax
Mon Oct 12, 2015 9:27 pm
Forum: Forwarding Protocols
Topic: How do I route ether3 to ether4 (tagged vlan) on CCR
Replies: 7
Views: 2216

Re: Can I put a Trunk on a Microtik CCR same as this one I have on a Cisco?

CCR its a router, i think you are comparing to a cisco switch Well my cisco's doing switching and routing. I know the CCR is a router I have 8 of them 4 are the new 72 core 10Gb/s This is only a VLAN trunking port, I can do that on either a Cisco switch or Cisco router. So does the CCR do the same?...
by NodeMax
Mon Oct 12, 2015 8:06 pm
Forum: Forwarding Protocols
Topic: How do I route ether3 to ether4 (tagged vlan) on CCR
Replies: 7
Views: 2216

How do I route ether3 to ether4 (tagged vlan) on CCR

(I have re written this post) If I plug a carrier into ether 3 and I have ether4 with a tagged vlan say vlan10 [windows vlan10]--[XEN host]--[ trunk cisco4948 trunk]--[vlan10 ether4 microtik1036 ether3] --[point to point--carrier-voip sbc How do I get ether 3 to talk to VLAN10 which is tagged. For e...
by NodeMax
Thu Jul 09, 2015 1:55 am
Forum: General
Topic: Feature Request v7 MacSec CCR 72 Core
Replies: 6
Views: 2117

Feature Request v7 MacSec CCR 72 Core

Feature Request v7 MacSec
10Gb/s fibre links

:D
by NodeMax
Sun Jun 07, 2015 2:00 pm
Forum: Forwarding Protocols
Topic: Encrypt 10Gb/s Links
Replies: 5
Views: 1810

Re: Encrypt 10Gb/s Links

Sounds like you might need something like this.

http://www.senetas.com/encryptors/layer-2-encryptors/

They look reassuringly expensive!

Can you encrypt data layer 2 multi hop when we only have control of devices both ends not in the middle?

regards

Tony
by NodeMax
Sun Jun 07, 2015 1:52 pm
Forum: Forwarding Protocols
Topic: Encrypt 10Gb/s Links
Replies: 5
Views: 1810

Re: Encrypt 10Gb/s Links

We have a full lab of everything from Cisco 6509-E to just about ever flavor of CCR and rack mount MikroTik. When I get a chance I'll try this on a couple of VMs that go through our 40 Gbps CCR Data Center lab. Here is thread where MikroTik comments on IPSEC throughput in CCRs and it appears to top...
by NodeMax
Sat Jun 06, 2015 10:48 am
Forum: Forwarding Protocols
Topic: Encrypt 10Gb/s Links
Replies: 5
Views: 1810

Encrypt 10Gb/s Links

Hi If you had a 10Gb/s link between 2 CCR's and you wanted to encrypt the link what tunnel/encryption would you use and what speed do you lose due to the tunnel/encryption? Is it possible with CCR's to encrypt that link? While I do lots of encrypted tunnels with microtik I have never wanted to take ...
by NodeMax
Fri Jun 05, 2015 11:37 am
Forum: General
Topic: 72 Core CCR
Replies: 13
Views: 3840

72 Core CCR

Hi,

Any ideas of the date for the 72 Core CCR and how many 10Gb/s interfaces full wirespeed?

Thanks

Tony
by NodeMax
Sun Apr 19, 2015 4:11 pm
Forum: Scripting
Topic: via API - Get All Connections on a CCR
Replies: 1
Views: 535

via API - Get All Connections on a CCR

Hi,

Is it possible to get all the connections via the API say every 30 seconds on a CCR 16GB ram.

Thanks

Tony
by NodeMax
Fri Mar 13, 2015 9:24 pm
Forum: Announcements
Topic: Newsletter 64
Replies: 28
Views: 11217

Re: Newsletter 64

72 Core CCR date ?
by NodeMax
Sat Jan 24, 2015 2:15 am
Forum: General
Topic: Feature Request - Block Country by IP Using Firewall
Replies: 16
Views: 9246

Re: Feature Request - Block Country by IP Using Firewall

latest maxmind DB
https://www.maxmind.com/en/geoip2-country

So is it possible to write a script on Microtik that can interface the Maxmind Bindary DB?
by NodeMax
Sat Jan 24, 2015 1:26 am
Forum: General
Topic: Feature Request - Block Country by IP Using Firewall
Replies: 16
Views: 9246

Re: Feature Request - Block Country by IP Using Firewall

Why May you want to do this? block traffic by Country on a CCR Say you run an anycast network and you have 30 pops all 72 core 10gb interface CCR. An attack starts and you look at the botnet and it happens to be all machines from countries in Asia attacking 1 IP Your client base happens to be UK, an...
by NodeMax
Wed Jan 21, 2015 5:50 pm
Forum: General
Topic: Feature Request - Block Country by IP Using Firewall
Replies: 16
Views: 9246

Feature Request - Block Country by IP Using Firewall

Hi, In CloudFlare you can block a country which they will be doing by IP block. On Microtik CCR I really would like to be able to block Countries by using the firewall. So tick boxes. Create a Rule. Select Countries, set rule to drop packets Now could use MaxMind binary DB or another ... Make my lif...
by NodeMax
Sun Nov 30, 2014 8:08 pm
Forum: General
Topic: GeoIP (Country - Max Mind) in Firewall CCR
Replies: 2
Views: 3260

Re: GeoIP (Country - Max Mind) in Firewall CCR

Why ban them just un-plug it .... no Joking aside! GeoDNS is becoming quite big now. How useful would Geo Firewall be in a CCR and Geo Routing? So could have it in the firewall Use it for MPLS or routing decisions based on Country.... The Maxmind db is just a binary DB sure you could upload that to ...
by NodeMax
Sat Nov 15, 2014 10:56 am
Forum: General
Topic: GeoIP (Country - Max Mind) in Firewall CCR
Replies: 2
Views: 3260

GeoIP (Country - Max Mind) in Firewall CCR

Hi Firewall - Geo IP We use lots of CCR's and will use the new one when it comes out 72 core. When our website customers get Dos attacked by Bot nets we can manage it often by moving them to Cloudflare if the attacks are massive, we can also do some Geo IP DNS stuff and BGP stuff but to make it much...
by NodeMax
Fri Oct 10, 2014 10:43 pm
Forum: Forwarding Protocols
Topic: BGP configuration and performance of flow problem.
Replies: 2
Views: 1221

Re: BGP configuration and performance of flow problem.

We have:

2 x CCR 16gb ram same as below on each BGP
v6.12

1 x copper 100mb flow control off auto negotiation on
1 x fibre 1 gig speed fixed 1 gig flow control off (this link did not work on auto negotiation)

No issues

regards
Tony
by NodeMax
Wed Oct 01, 2014 5:46 pm
Forum: General
Topic: Add Right Click Lock Firewall Rule
Replies: 5
Views: 878

Add Right Click Lock Firewall Rule

Hi We use access lists & port knocking on external CCR. Internal fw netscreen has SQL open to world when we port knock on perimeter CCR. Its very easy to delete move the wrong rules on Microtik. I do put a comment on rules do not DELETE or Move but mistakes easy and effect could be disaster. On Fire...
by NodeMax
Sun Jul 27, 2014 3:45 am
Forum: General
Topic: CCR & MetaRouter
Replies: 49
Views: 19955

Re: CCR & MetaRouter

How about MetaRouter on the CCR with Docker containers?

Then I can run all my Telecoms switches in Docker containers on on 72 core CCR's

Good bye x64 Servers !

:)
by NodeMax
Tue Jul 22, 2014 6:31 pm
Forum: Forwarding Protocols
Topic: Add OpenVPN Route to another CLOUD Core
Replies: 1
Views: 901

Add OpenVPN Route to another CLOUD Core

Hi, I have 2 CLOUD core routers I have Snom IP phone users connecting to the routers via OpenVPN over the internet. When a users Phone connects to either router A or router B router and their is an IP route added to that router how can I inject that route into the routing table of the other router. ...
by NodeMax
Thu May 29, 2014 6:26 pm
Forum: Forwarding Protocols
Topic: CCR and Internet BGP - survey of user experiences
Replies: 24
Views: 9496

Re: CCR and Internet BGP - survey of user experiences

2 CCR both – CCR1036-12G-4S
2 feeds each with 2 sessions each feed, dualstack

1 carrier on fibre other on ethernet on each router

2 ipv4 on each with 244k routes and 488K the other
2 ipv6 on each with 15K and 12K on the other

software 6.12

No problems ... :D
by NodeMax
Tue May 13, 2014 9:21 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Hi,

That will teach me to leave my glasses down stairs, your correct, I have just done the other router and that is fine also with 2 different link locals and ipv6 BGP all good :)

Thanks

regards

Tony
by NodeMax
Tue May 13, 2014 8:53 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Hi, thank you That worked .. but not sure its right ... Now the bridge is saying designated bridge where as the other says root bridge and the link local is the same as the link local on the other bridge, is that right ? All I did was take the peer down, disable the peer and instance, give a router ...
by NodeMax
Tue May 13, 2014 8:39 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Sorry duplicate as one below
by NodeMax
Tue May 13, 2014 7:31 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Hi 2 ipv6 BGP peers 1 on each interface, /interface print 0 RS ether1 ether 1500 1590 10226 D4:CA:6D:77:DD:AA 12 RS sfp1-Cogent ether 1500 1590 10226 D4:CA:6D:77:DD:A6 /interface bridge> print 0 R name="ipv6-cogent" mtu=1500 l2mtu=1590 arp=enabled mac-address=D4:CA:6D:77:DD:A6 protocol-mode=rstp pri...
by NodeMax
Tue May 13, 2014 4:12 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Hi,

Can some one from Microtik Support point me in the right direction on this?

Thanks

Tony
by NodeMax
Tue May 13, 2014 1:06 am
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

hi The /112 is on the interface connected to cogent. There is no link local on that interface I think for that to be created automatically on a Microtik it is has to be a /64 The other provider gave us a /64 and that has dynamically created a link local on the other interface where the /64 exists. S...
by NodeMax
Mon May 12, 2014 7:35 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

Re: How Do I add a link local address?

Hi

Comes from Cogent as a BGP link it's static /112 ipv6

Thanks

Tony
by NodeMax
Mon May 12, 2014 4:41 pm
Forum: Forwarding Protocols
Topic: How Do I add a link local address?
Replies: 13
Views: 4227

How Do I add a link local address?

Hi, I have a /112 from cogent, because its a /112 Microtik doesn't create a link local. I need the link local so the incoming BGP routes are routable. My other ipv6 BGP feed I was given is a /64 and works fine as the link local was created automatically. How do I add a link local when I only have a ...
by NodeMax
Fri May 09, 2014 10:54 am
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3314

Re: IPv6 BGP Routes Show as unreachable

Hi,

I think it would be automatic if a /64 but the ipv6 address on that interface is /112 from Cogent which can't be link local.

So I am confused on this.

regards

Tony
by NodeMax
Fri May 09, 2014 2:04 am
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3314

Re: IPv6 BGP Routes Show as unreachable

Hi

mmm nope..

OK how do I add a link local address and what format is it?

Happy to read how to do it do you have a link/URL?

Thanks

Tony
by NodeMax
Thu May 08, 2014 1:08 pm
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3314

Re: IPv6 BGP Routes Show as unreachable

Hi OK getting closer. The IP address from Cogent is a /112 as 2001:978:2:21::59:2/112 Now the IP in their BGP route is link local. Does Micortik allow /112 addresses as link local? How do I get the router to see that as reachable or can I over write their BGP gateway with a filter and specify the ga...
by NodeMax
Thu May 08, 2014 12:24 am
Forum: Forwarding Protocols
Topic: IPv6 BGP Routes Show as unreachable
Replies: 6
Views: 3314

IPv6 BGP Routes Show as unreachable

Hi, I have 2 x CCR's both running full ip4 BGP to multiple upstreams all working fine. I have started to set up dual stack ipv6 separate sessions to ipv4. Ipv6 is up and announces my /32 I have a default route out which routes fine, I can ping ipv6 Google DNS and I can ping from USA to my ipv6 inter...
by NodeMax
Sat Nov 30, 2013 12:02 am
Forum: General
Topic: L2TP+ IPSec Unable to Pass web Traffic but trace and Ping OK
Replies: 1
Views: 921

L2TP+ IPSec Unable to Pass web Traffic but trace and Ping OK

Hi v6.6 on CCR and 1100AHx2 From PC Host 192.168.0.166 When L2TP is up. Web browsing, ping trace OK via tunnel out of CCR From PC Host 192.168.0.166 When IPSec is up with L2TP ping and trace fine out via CCR, web Browsing hangs and does not work I have an LT2P IPSec VPN from Office to data Centre. C...