Community discussions

MUM Europe 2020

Search found 16 matches

by dev246
Fri Sep 27, 2019 4:32 pm
Forum: General
Topic: CRS 326 Bonding no TX in torch and packet sniffer
Replies: 1
Views: 297

CRS 326 Bonding no TX in torch and packet sniffer

Hi. I have problem with torch and packet sniffer on CRS on Bonding (802.3ad) interface, . I'm unable to see tx traffic. Traffic is passing without problem but simply mikrotik doesen't show . On interface status i have normal TX traffic, simple ping pass thru (with replay) without problem, but when i...
by dev246
Thu Jan 24, 2019 1:54 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Re: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

I'm reading through MT1.rsc ... and one thing seems odd to me. Shouldn't there be also this config present? /interface ethernet switch egress-vlan-tag add tagged-ports=T1,T2,ether5,sfp12 vlan-id=20 At least on T1 and T2? And E5 and T2 on MT2? I think similary but on wiki we have : Note: Management ...
by dev246
Thu Jan 24, 2019 1:48 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Re: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

mozerd why are you cluttering up a thread ? If you do not have anything constructive to say, do not write anything I'm known that MAC session uses network broadcasts and is not 100% reliable but is very useful tool in emergency situation and when i have possibility to use something that can help my ...
by dev246
Wed Jan 23, 2019 6:51 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Re: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

In first post I attach 3 files. One is schematic MTLab.jpg, and two other files are configuration export form MT1 and MT2, file names MT1.rsc and MT2.rsc And in the body of that first post i present few scenarios explaining when i can connect to Mikrotik by MAC address (layer 2) via Winbox and when ...
by dev246
Wed Jan 23, 2019 6:16 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Re: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

I can't connect to mikrotik via winbox using layer2 (MAC address) like on attached screen, without being directly connected to that Mikrotik, but being in this same VLAN. .
by dev246
Wed Jan 23, 2019 1:50 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Re: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

Hi mkx. I attach complete configuration both MT. Its only few lines. /tool mac-server export show you mean /tool mac-server print . Result = allowed-interface-list: all /interface list member are empty. VLAN interfaces look as if they are well configured becouse properly isolating traffic between di...
by dev246
Wed Jan 23, 2019 12:26 pm
Forum: General
Topic: Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx
Replies: 11
Views: 805

Layer 2 acces via Winbox on VLAN CRS1xx/CRS2xx

Hi. I configure my lab environment just like in the attached picture. MT are configured based on https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_VLANs_with_Trunks using hardware switch features. My Management VLAN is VLAN20 created as VLAN interface under bridge. Everything works as should be, Vlan...
by dev246
Tue Jan 22, 2019 5:46 pm
Forum: General
Topic: mac-level-isolation CRS1xx/2xx
Replies: 1
Views: 322

mac-level-isolation CRS1xx/2xx

Hi

Can anyone explain to me what the mac level isolation option is for ? (/interface ethernet switch)
Because on wiki we have a very extensive description : "Enables or disables MAC level isolation"
by dev246
Thu Jan 26, 2017 3:39 pm
Forum: General
Topic: Forward pppoe-client ip address to my server
Replies: 3
Views: 441

Re: Forward pppoe-client ip address to my server

Your Atom server should be at front of the connection, and then that atom server must forward packet to your mikrotik. If you have only 1 public/static IP you must use NAT so your microtik will be behind nat, and have private IP. And probably your atom serwer as well as your mikrotik probably will b...
by dev246
Thu Jan 26, 2017 12:29 pm
Forum: General
Topic: SSTP change encryption from CBC to CTR
Replies: 2
Views: 521

Re: SSTP change encryption from CBC to CTR

Hi.

So what can call problem with very poor transfer on SSTP. Place where is Mikrotih have 600/60Mbps line, and client computer have 40/40Mbps line.
On PPTP and use TCP single connection i got transfer arount 35 Mbps, with is fine, but on SSTP i got only 1 - 1,3 Mpbs.
by dev246
Thu Jan 26, 2017 11:45 am
Forum: General
Topic: SSTP change encryption from CBC to CTR
Replies: 2
Views: 521

SSTP change encryption from CBC to CTR

Hi.

Is any way to change default encryption algorithm in SSTP from AES 256 CBC to AES 256 CTR ?. Because mikrotik has known issue with CBC causing very poor performance and for now only way to improve that is change to CTR at least in IPSEC, and i suppose this same is in SSTP.
by dev246
Wed Apr 27, 2016 5:43 pm
Forum: Announcements
Topic: v6.36rc [release candidate] is released, wireless-fp package is discontinued!
Replies: 295
Views: 67084

Re: v6.36rc [release candidate] is released, wireless-fp package is discontinued!

Hi. nz_monkey wrote: dev246 wrote: Hi. Is any chance to improve TCP performance on single session over IPSEC on IPIP/GRE tunnel in this version? Now is max 40-80 Mbps per session regardless of device model (tested on CCR 1009 and CCR 1036). What encryption are you running? We see close to 600mbit/s ...
by dev246
Fri Apr 22, 2016 11:16 am
Forum: Announcements
Topic: v6.36rc [release candidate] is released, wireless-fp package is discontinued!
Replies: 295
Views: 67084

Re: v6.36rc [release candidate] is released, wireless-fp package is discontinued!

Hi.

Is any chance to improve TCP performance on single session over IPSEC on IPIP/GRE tunnel in this version?
Now is max 40-80 Mbps per session regardless of device model (tested on CCR 1009 and CCR 1036).
by dev246
Fri Apr 01, 2016 2:09 pm
Forum: General
Topic: Very low TCP transfer speed on IPIP+IPsec on CCR1009 and CCR1036
Replies: 11
Views: 4265

Very low TCP transfer speed on IPIP+IPsec on CCR1009 and CCR1036

Hi. I have several offices and i want to jojn them using IPIPtunnel witch IPsec so i bought several MT CCR1036 and CCR1009 because they have hardware IPsec acceleration very good throughput (based on ruouterbord.com). But when I setup everything I was surprised by very low speed when i try copy file...