Hello, I am trying to send traffic from "1 interface no vlan" to "1 interface multiple vlans" using a RB1100AHx2 6.36.3 and it only works for one VLAN. TG router has the following config: /interface vlan add interface=ether6 name=ether6.10 vlan-id=10 add interface=ether6 name=eth...

You can also prepend the /24 prefixes you want less per ISP.

You can route /32 from that /26 directly over your network or over IP tunnels, with or without OSPF.

Two big use cases for MPTCP are link aggregation (load balancing) and link redundancy (fail over). While it is true it is end to end, it does not mean that it cannot be useful starting from the router. How ? On the "aggregation" router, establish a TCP tunnel with a "provider" ro...

Hello,
is there a way to redistribute IPsec tunnels "routes" to other routers using OSPF ?
It is possible using IPIP or GRE over IPsec, but what about plain IPsec tunnel ?
Thanks.

OK thank you for the answer.

First, thank you for your answer :) short answer: no security implication, just speedup cause fastracked sessions will avoid firewall processing, so they won't bump though the rules till they are accepted or rejected. longer version: fastrack works with connection table entries. so if you have a new...

Hello, I am a little bit concerned using FastTrack because of this sentence on the wiki: Fasttracked packets bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip traffic-flow(restriction removed in 6.33), ip accounting, ipsec, hotspot universal client, vrf assignmen...

Hello, I have configured a simple virtual LAB (using CHR 6.32 and VirtualBox). I keep getting these messages about expired BGP keepalive timers. I believe this should not happen. Is there something wrong in my setup ? Topology: R1 and R2 are connected with 2 VLANS on ether2 (2x /30). R1 and R3 are c...

Hello with CRS you have to think about how the packet enters and leaves the switch, what VLAN it belongs to, and what operation you have to do to it. port 2-4 VLAN 2 Native, Tagged ports 7-10, 15, 19 Here, packets that enter the port without a VLAN tag have to be associated with VLAN 2. That means y...

Hello, I believe you can achieve this with traditional policy routing. Use firewall mangle rules to mark packets/connections when they enter your router coming from your networks. Then use these routing marks with routes received from your upstreams. Lab it first though :-) By the way, if you advert...

Hello I have tried to set AS Prepend on Peer2 to make Rx (incoming traffic) less preferable path. However, no matter what AS Prepend number I tried, 5, 10, and 15, it seems no difference. Rx is still more than Rx on Peer1. Notes: after the filter modified, I did run /routing BGP peer refresh (peerna...

Hello, I am trying to configure VLAN id translation between 2 ports. It works, but I have questions. The topology is: vlan id 2 <===> [ ether2 ] CRS [ ether 3 ] <===> vlan id 122 The configuration is: /interface ethernet set [ find default-name=ether2 ] name=ether2 set [ find default-name=ether3 ] m...

Did you apply the filters to your BGP peers as out-filter and reset the BGP sessions ?

The CRS125, configured properly, should be more than enough for the speeds you mention and a home network.

Post "/routing export" and "/interfaces" of your 3 BGP routers.
Without it, I think it will be difficult to help you.

You can bond EOIP tunnels taking different paths between two routers. The bond algorithm will take care of load balancing and fault tolerance. Be aware that unless mikrotik has implemented weighted round robin algorithm, you will get at most x times the speed of the slowest link, where x = number of...

Unfortunately STP is one of the many features missing from the CRS.
It's a shame for a manageable switch but it's somewhat understandable at that price point.

See the link posted earlier: http://wiki.mikrotik.com/wiki/Manual:CR ... s#Trunking

If you switch packets from between ether1 and trunk1=ether2+ether3, then you can set master-port=ether1 on ether2 and ether3.
If you wish to route packets on a trunk, then I don't know. I don't plan to use a CRS as a router.

The switch chip in CRS supports port trunking. It provides failover and will balance outgoing packets equally on each port of the trunk. Thus, if your switch switches 1000 packets from ether1 to trunk ether2+ether3, it will send 500 packets on ether2 and 500 packets on ether3. LACP is not supported ...

I see two possible reasons for this:
1) your providers do not forward routes to you with your own AS number in the AS path
2) you have set the parameter allow-as-in=no for your BGP peers

Hello, what is the use of this command ? It seems that adding or removing it has no effect on the packets flow in my CRS125-24G-1S (test setup), RouterOS 6.20 . Here is the scenario (mimic of real production environment): ports 1 and 2 are connected to our core router, with our well defined internal...

If you use wireshark to see what packets look like on ether23, you should see packets tagged with vlan id 230. On ether24 you should see packets with vlan id 240. You want to change the vlan id of packets going out of ether23 and ether24 so you need to add egress-vlan-translation rules. /interface e...

Sorry to resurrect an old post but this is important to me :-) I am looking at CCR (probably 1009 or 1012 because of redundant PSU) as an edge router: - 3 BGP full routing tables - 2 IX peers (main and backup route-servers of the IX) - LACP trunks - redistribution of default route to iBGP peers - si...

I get that. I think im getting it. I can use aggregates to advertise as /24 but internally route them smaller right?

Yes, that's it.

Ah perfect thank you

Hello, I followed with quite some interest the presentations from US14 MUM and I would like to get the HD versions and slides of some presentations if possible. Especially the presentations from IP Architechs: US14: Network Architecture - Validated designs utilizing MikroTik in the Data Center by Ke...

Edit: I was wrong, it does not work this way. OK I found something which is working. However, it uses a lot of CPU (up to 40% for gigabit speed). Is this the correct way ? /interface ethernet set [ find default-name=ether23 ] name=ether23 set [ find default-name=ether24 ] master-port=ether23 name=et...

Hello, I need to bridge networks on 2 different ethernet interfaces. Each network has a different VLAN ID on both interfaces. I read the examples on the wiki, but there is no change of VLAN ID in there. The networks and VLAN IDs are the following: https://i.imgur.com/EZoVhHo.png My first idea is to ...

A different solution was found that does not involve listing the known Apple sites. The credit goes to Matthias Strubel of Wiesbaden in Germany. It makes use of the User Agent (UA) data transmitted by the iOS7 device. A typical string looks like: CaptiveNetworkSupport-277 wispr The URL requested wi...