Attached is what most recent CPU usage during peak traffic looks like. It turns out this was due to my firewall setup. I've changed it to do more matching on interfaces instead of address lists. It looks Simple Queues are processed with multiple cores just fine. I'm still unsure how PCQ would handle...

Hi all, I recently enabled about 400 simple queues with one or more /32s set as the target as my WAN interface set as the destination (no packet-marks, no parent), on a CCR1009. It handled the load I threw at it fine (each queue is for a wireless service with a max-rate between 5Mbps and 15Mbps, tra...

I'm throwing this on the list a second time. Support for RFC6939, i.e, the client link-layer address option, enabling a DHCPv6 relay to pass a client's link-layer address (MAC address) as an option (number 79) to a DHCPv6 server, whereupon the server can use that information for static lease reserva...

RFC6939 for the DHCPv6 relay.
Would be extremely useful for doing MAC address based DHCPv6 reservationsRFC4649

Hi, If I had for example 1 mangle rule to 'mark-connection' and another to 'mark-packet' in both IPv4 and IPv6 firewall (giving the same packet-mark in each), and a simple-queue set up to rate limit that packet-mark, and then did that for every one of my 300 users: does anyone how a CCR1009 will han...

Hi all, I am looking to use Mikrotik to shape my user's IPv4 and IPv6 traffic. I want user traffic to be limited at our head end router and not at the CPE - CPE is not practical for us as we often serve multiple customers behind a dumb switch behind a single CPE - the CPE only allows interface based...

Does this help you? http://wiki.mikrotik.com/wiki/Manual:VPLS_Control_Word

Sure does!

The answer was to /interface vpls set <interface> use-control-word=yes on both routers
use-control-word=default is the default and that wasn't doing it.

Hi, I have an existing VPLS network that is working great with a MTU of 1540 active on all my bridge links enabling full-sized 1514 byte ethernet frames to be encapsulated in VPLS tunnels. I just acquired a new leased L2 link between two points in my network over an infrastructure that currently onl...

Hi all, I'm wondering if RouterOS already has the functionality of https://tools.ietf.org/html/rfc6957 built in? I'm in the situation described by this RFC, and I'll bet there's a lot of other RouterOS users that are too. It basically turns your router (which is first hop away from customer gear) to...

SO! How about a screenshot of the MAIN tab of the UBNT radios (better yet post it on the UBNT forums)? I really don't expect it to be an issue with the configuration of routing, briding, NAT, etc. The 1100AHx2 should have no problem bridging 500Mbps. BUT IT IS POINTLESS TO USE A 1100AHx2 AS A BRIDGE...

Bumping since I posted on a quiet day and may not have been seen..
The "preferred src" address is a viable option if it also set the arp "reply to" address used when sending ARP requests for those routes that don't actually have an IP on the interface.

Another option for me would probably be just to configure to VPN to exclude routing this one particular "lowest IP" over it, so ARPs can be responded to. I'm gonna try that next.. That worked.. but I still desire some way to set the "reply to" address. I use the same traffic red...

*edit* sorry for the long post, might be worth the read thou :) I just tried that, and ARPs are still being sent with the lowest IP of the bridge as the "reply to" address :( . So, since the "reply to" address being used is an IP routed over my VPN, a minute or two (when the mtik...

Hi guys, I'm gonna try to explain this as simply as possible (for you and me) :-D Typically an ARP request is sent out with the "reply to" address set to the IP of the interface (or in the case of multiple subnets on a single interface, from the IP of the interface that is in the same subn...

I'm willing to share some NodeJs code I made today, it uses the library that you linked. This is my first ever Nodejs code.. It simply logs all NAT translations into a mysql table with schema: CREATE TABLE `nat_translations` ( `unixTime` int(10) unsigned NOT NULL, `lanSrcAddr` int(10) unsigned NOT N...

I've heard of SiLK and currently use a great tool that is compatible with it: flow-viewer

Time to look into some SiLK

Just wanted to post that I have figured this out, using the equivalent of cisco's "local proxy arp" feature. In my original post I mentioned wanting L2 communication between customers. That was wrong, I want L3 (IP) communication to be allowed and all L2 traffic to be blocked from travelin...

Hello! I'm new here, but have been lurking the forums for a couple of weeks now.. I'm new to this kind of stuff in general, I don't have any hands-on experience with the actual design and implementation of production networks.. I've just read a lot of theory over the path handful of months. I've set...