MikroTik

tberg

Thanks jaclaz! I didn't think about the mAP. Yes, it will work as a monitor. Ordering a hAP AC to test.

tberg

I was hoping to have 1 device that could be a home router as well as monitor voltage from a battery backup source. So I'm looking for a lower cost router that has Wi-Fi and has voltage monitoring. So far I've found the hAP lite, ac2, ac3, ax2 and L009 do not have voltage monitor unless I missed it. ...

tberg

Yes, thank you! I mistakenly put in a different router id for our upstream peer on one of the routers, which I'm assuming creates a new instance. I just fixed the router id, but it appears to still be in a different instance. Is there a way to tell for sure? Also, what do I need to do to get into th...

tberg

Enabling redistribute other BGP for the iBGP peer got it working. I thought redistribute other BGP was for redistribution from another BGP instance. At least that's what it says in the older documentation. So maybe it's changed with v7. It also doesn't make sense that one of the peers was advertisin...

tberg

I setup a little lab and it seems to be working as expected there. I guess I will try a reboot overnight.

tberg

Thank you! I have tried both resend and refresh on the appropriate routers with no difference. The resend pcap file doesn't show any update messages, so I'm almost positive the routes aren't being sent.

tberg

I just upgraded our border routers from CHRs on v6 to 2216's on v7.9. We have 2 border routers, each connected to a single upstream ISP and an iBGP peer between them. Everything seems to be working fine except routes are not being advertised from 1 of the border routers to the other. One router is a...

tberg

Thanks so much! This is what I thought, but wanted to make sure before deploying.

tberg

Trying to understand the total PoE out budget of the Netpower 16 if you're only using 48V. The specs say: 2.8A (18V-30V) & 1.4A (48V-57V) x2 A. Does this mean there are 2 48V banks, each capable of 1.4A? Or is it 1 24V bank and 1 48V bank?
Thanks,
Todd

tberg

Hadn't thought about the route cache, however it has less than 400 routes total. I disabled spanning tree, SNMP, and most of the firewall rules and no difference. For the most part, it is just passing 500 Mbps through the router and that is taking 40% CPU.

tberg

Good point I forgot to mention. The old 1009 was on 6.48.x (don't recall the specific version). Our 4011s are mostly 6.48.6. The configuration was copied from the CCR1009 to the 5009, with the exception of the new way to configure OSPF and BGP. Looking at Mikrotik's test results page, routing w/ 25 ...

tberg

We recently had a CCR1009 at a tower site die so replaced with a 5009 running r7.7. CPU usage jumped from 5-10% to 30-40%. Profile shows even distribution across CPUs and Networking is the large portion. Router is passing 350-750Mbps depending on time of day. Using OSPF & private BGP, approx 400...

tberg

Has anyone who opened a support ticket received any updates on this issue? It was pretty easy to replicate in a lab with 3 CubeSA 60Pros on 6.49.6. 1 in AP Bridge mode and the other 2 station bridges. Within 10-20 seconds after initiating a speed test from the AP to 1 of the stations, the other stat...

tberg

We have a wAP60AP serving 3 LHG60s about 400M away. They have been working great for over 6 months. But, now we are seeing the links intermittently stop passing traffic. Typically happens to 1 client at a time, but has happened to all 3 clients at different times. The the wap AP still shows the link...

tberg

Yes, pretty much that setup. In my case, I had a few ports that I wanted to be hybrid with some tagged VLANs and a PVID. For config, all ports, including the SFP were put into a bridge with VLAN filtering disabled. Then switch config looked like this. /interface ethernet switch port set 1 default-vl...

tberg

Thank you! I didn't think this would help that much because almost all traffic would be going through the SFP port and thus switch CPU. But setting it up this way made significant improvement. In test lab, 500B UDP bandwidth test went from 500M/500M to 900M/900M. In production, CPU went from 60-70% ...

tberg

I'm trying to use a powerbox pro to do some basic VLAN switching with a few hybrid ports trunked out the SFP port via fiber. The SFP port is not part of the switch, so I am using the bridge to do the VLAN tagging and filtering. CPU is hitting 60-80% when traffic is 300-500Mbps. Only config other tha...

tberg

Nice article. I noticed MLAG requires STP/RSTP. We have that disabled in most of our switches. We have a switch-centric setup and layer3 ring in our core and couldn't make it work with STP enabled. Might have been because I wasn't smart/patient enough to make MSTP work. But I also thought a complex ...

tberg

However, there is a major bug with the current release version of swOS not working with VLANS properly, which makes them unviable for anything except a lab setting. I would advise waiting until 2.13 is officially released. Not sure where you got this? Maybe related to the new Netpower 7r? swOS is w...

tberg

I haven't played with the Controller Bridge & Port Extender. But If I understand it correctly, if the controller bridge dies the port extenders stop functioning. So it seems it is more of a feature to streamline management/config than to increase redundancy. At least at this point.

tberg

Not sure if there are other ways to do this, but one is to use firewall mangle rules and PCC (per connection classifier). Here is a link to a MUM presentation on the topic. https://mum.mikrotik.com/presentations/ ... 038928.pdf

tberg

Sorry so long to respond. Didn't realize you replied. I think the issue might have been hardware related. My original lab was some old 450/450Gs we had laying around. I tried to re-create with some 4011s we were getting ready to deploy and everything worked as expected.

tberg

I am re-designing our network to use OSPF for transit subnets between sites and eBGP to advertise customer subnets at each site. Many of our sites have multiple hops to our core with at least 2 paths at each site. This will give me greater control over traffic paths. Anyway, wondering whether the de...

tberg

It looks like the VPN server is outside the NAT firewall of the Orbi. If the Mikrotik is doing NAT, you might be able to change the Orbi to AP/bridge mode. I don't know if Orbi supports this mode, but most Netgear routers do.

tberg

I am testing a new design we are planning to implement and running into a strange issue. The network consists of 2 edge routers each connected to a different upstream peer and an iBGP connection between them. Everything works fine until I disable the iBGP connection between the 2 edge routers. After...

tberg

Looks like your sa-src-address should be 1.1.1.1, not 0.0.0.0

tberg

Same thing with BGP peer I recently learned the hard way. Took about a minute for all the routes to come back.

tberg

Thanks! Yes I'm sure that is it. On the worst port, it is about .1%. We're moving to switch centric architecture and upgrading routers. Once routers are all 10G, part of the problem should go away. However, it's got me thinking about uplink to access switches with 1G backhaul and APs. It might be be...

tberg

Looking closer, they must be buffer overruns. They are only happening on 1G ports on switches that have 10G ingress and multiple 1G egress. I assume you cannot change interface queue type without breaking hardware offload.

tberg

We recently installed a few CRS317 and 328P switches. I am noticing TX Drops incrementing on some Ethernet interfaces. What are TX drops? Are they buffer overflows or filtered traffic with incorrect/unallowed VLAN tags?

tberg

It's hard to say without more info, but most WISPs that size use OSPF to control routing across the ring/rings and BGP to their upstream Internet provider. The guys at IP Architechs have a few write ups and presentations on their blog page at: https://stubarea51.net/. You will also find some relevan...

tberg

+MC-LAG

tberg

I agree, and often the best way to know what to do as an engineer is test for yourself. I guess I don't understand your statement that you should use the same on both ends because they have different radiation patterns. What do you mean by that? I know they have very different antenna patterns. I ca...

tberg

I can see using same on both side for P2P, but if you're doing multipoint and need to go more than 200M you would want the larger gain on the client end. Maybe shouldn't use Mikrotik for any multipoint? That's part of what we're trying to learn. This link is just a backup and we wanted to test multi...

tberg

Installing our first 60G link. 500M link with a wAP AP on one end and LHG60 on the other. I'm wondering what we should expect for RSSI. I tried the Mikrotik wireless link calculator but don't see where it shows any signal levels. It just says the link status is reliable. We are getting -62 at the wA...

tberg

That worked. Thank you very much!!

tberg

I think you are right on the snmp counter, but I don't see how to change the default for graphing bit rate on a link. I just have the 'Graph bit rate' box checked for the link and using SNMP for mastering type. The SNMP profile for the device is SNMP v2. Also, the monitoring interval is 1 min and se...

tberg

I haven't tested this in a lab to verify yet, but it seems like our Dude interface graphs start cutting out at around 575 Mbps. At first I thought this was an issue with the Cisco 3750 we were using for the graphing. But I changed to graph the interface on a CRS317 and get the same results. Graphing...

tberg

We are unable to monitor interface traffic on our edge routers because the Dude pulls the entire bgp routing table from the router. Is there a way to prevent the Dude from walking the entire MIB on a device but still poll interface stats?

tberg

It's a little confusing, but for the traffic generator set up you don't need to be concerned with GW 1 & 2. Assuming you have a route from 1.1.1.1 to 4.4.4.4 and back, your packet template in 1.1.1.1 would have ip-dst=1.1.1.1 and ip-gateway=4.4.4.4. In my case GW1 and GW1 are Mikrotik routers, b...

tberg

Yes, that is possible. I've not done it over the public Internet, but don't see why it wouldn't work. I've done it across multiple router hops in our ISP network.

tberg

Set the Dst to be the IP of the generator and the Gateway to be the IP of the remote Mikrotik you are testing to. You can leave the Src blank.

tberg

Is there a way to modify what is displayed when you hover mouse over a device or link?

tberg

Where are you located? I'm just North of Denver.
Todd

tberg

Thanks!!
I set up a graph of rate(diff32(oid("1.3.6.1.2.1.2.2.1.10.1")))*8 and compared to the standard link graph that gets created when you check 'Graph bit rate' on the History tab of the link. Both graphs looked the same.
Todd

tberg

Anyone know how the Interface.OutBitRate and InBitRate are calculated? In the case of out, is it difference in out octets between consecutive polls / poll interval / 8 bits/octet? So if poll interval is 1 min., it would be avg over the minute?

Thanks,
Todd

tberg

asik, I'm having similar or same issue with devices on the same map and I've set the Parents field with upstream device. I'm getting mixed results and haven't had time to try to isolate exactly what is happening. We monitor independent customer sites. At some sites I seem to get a notification for a...

tberg

Haven't tried this for individual devices, but sometimes use different emails for different networks. Should work the same. Go to Notifications and create a new email notification. Can copy existing email notification and change to address. Then go to the settings for the specific device, select Pol...

tberg

I am unable to get the Cambium ePMP MIBs to show textual OIDs when doing a snmpwalk on an ePMP device. It appears that the Dude is picking up the older CANOPY-SYS-MIB that is included with the default MIBs instead of the Cambium MIB I copied into the mibs folder on the Dude server. They both have th...

tberg

Try putting the image files in the dude/files/images dir. Mibs go in the dude/files/mibs dir. I found it much easier to use ftp than Winbox.

tberg

More info. SNMP values are being collected and displayed correctly in appearance and SNMP tab of device. It is just snmpwalk tool that times out.

dude_snmp.png

tberg

The Snmpwalk tool appears to not work with 6.38rc19. I've tried on a number of devices and get a timeout for all of them. All of these devices have various SNMP services working correctly. Snmpwalk was working with 6.37.

tberg

There are a few good tutorials on this if you do a google search. But the process in general is: 1. Do a SNMP Walk of the access point to find the oid for the wlan channel/freq you are looking for. 2. Then create a function to use that oid. Here's an example for Ubiquiti Airmax channel and frequency...

tberg

We are also having this problem on Windows 8.1 & 10. One WIn8 machine works fine and the other doesn't. Tried on 4 different Win10 machines. None worked initially, but I was able to get one of them to work after removing a few other programs. I thought the problem program was Wireshark, but ...

tberg

Boy do I feel dumb. Thank you!!

tberg

When I manually add a link to a map, it does not show up on the map, but does show up on the Link table. It does not matter what type I choose. If I do a discover, the links are automatically added and show on the map as expected. I select Add - Link and click on a device on the map and set the appr...

tberg

Correct, Dude now needs to be installed on Routerboard with Tile or ARM processor. Better yet, install ROS x86 or CHR on a VM. Install the Dude server on 1 of these devices and Dude client on a WIndows machine and set up to connect to the server.
Todd

tberg

Thanks Geoff. I wasn't sure how to add smtp software to RouterOS, but I did get it set up on another Linux server on the same network using postfix.
Todd

tberg

Anybody have suggestions for how I could setup email notifications using a host name for SMTP server instead of IP address. I've seen examples using Windows server and scripts to resolve IP from host name. But I'm not sure how to update dude smtp server.

Thank you,
Todd

tberg

I have client that is at a minimum, amplifying an attack. Their router is setup as a NAT router with a single WAN and single LAN interface. The firewall connections list shows many connections with its WAN IP address as the source address. I put a firewall rule to log the connections. They are in th...

tberg

I must be missing something basic. I am unable to get a Dude server to connect to a Mikrotik RB4XX running the Dude package. For the server, I've tried both Dude 3.6 & 4.0b3 on both Win7 & Win 2k3 server with firewall turned off. The router is a 450G w/ 5.24 s/w and I put it on the same loca...

Search found 61 matches