Community discussions

Search found 80 matches

by rwrocket
Thu Feb 08, 2018 6:12 am
Forum: General
Topic: Possible to set DHCPv6 option 16?
Replies: 1
Views: 341

Possible to set DHCPv6 option 16?

I am investigating how to deploy TR-069 setup with my PPPoE Customer CPE and I found that the ACS url can be set with DHCP option 60 or DHCPv6 option 16 I am not using DHCP for CPE but prefer to use PPPoE, however I am currently passing IPv6 prefixes to the CPE by way of DHCPv6 PD Pool It would be a...
by rwrocket
Wed Jan 17, 2018 7:17 am
Forum: General
Topic: Another PCQ clarification thread
Replies: 3
Views: 431

Re: Another PCQ clarification thread

on pcq queue you can change "pcq-rate=30M" for "pcq-rate=0" is not necesary to specify this value becaus you are limiting on the simple queue, this value is used t o limit per host speed values for 30m/20m i will recommend: download: limit 999 and total limit of 99999 upload: limit 999 and total li...
by rwrocket
Fri Jan 12, 2018 1:09 am
Forum: General
Topic: Another PCQ clarification thread
Replies: 3
Views: 431

Re: Another PCQ clarification thread

*bump*

hate having to bump my own thread but more often than not my posts get 0 replies, maybe I am asking too difficult questions?
by rwrocket
Wed Jan 10, 2018 6:26 am
Forum: General
Topic: Another PCQ clarification thread
Replies: 3
Views: 431

Another PCQ clarification thread

I have been revisiting PCQ queues recently and have found it difficult to find a straight forward formula or definitive answer on how to calculate the PCQ settings. I will give two different examples just so I can get it clear in my head. I have so far left the default pcq-limit of 50Kib and 2000Kib...
by rwrocket
Mon Nov 20, 2017 5:40 am
Forum: General
Topic: Why are these packets invalid?
Replies: 2
Views: 932

Re: Why are these packets invalid?

Thank you for the reply, I am not clear what you are mean though or if it is normal or not?

The majority of these packets come from my customer side (PPPoE clients) attempting to reach outside (internet) addresses
by rwrocket
Fri Nov 17, 2017 7:44 am
Forum: General
Topic: Why are these packets invalid?
Replies: 2
Views: 932

Why are these packets invalid?

If I turn on logging/blocking of invalid forward traffic in this intermediate router I get a lot of packets that seem to be legit but are being marked as invalid. For now I am allowing it in case it causes problems for our customers so I hope someone might be able to explain why I am seeing this. To...
by rwrocket
Thu Nov 02, 2017 5:20 am
Forum: General
Topic: Calea server not collecting any info?
Replies: 0
Views: 259

Calea server not collecting any info?

I have setup calea server and sender as per the wiki https://wiki.mikrotik.com/wiki/CALEA I can see packets being sent by the intercept client and they appear to be getting to the calea server (I can see traffic on the interface suggesting this) But I see no files in the created folders and when I d...
by rwrocket
Wed Oct 18, 2017 7:48 am
Forum: Scripting
Topic: Abuse IPDB API check for IP on list
Replies: 0
Views: 1185

Abuse IPDB API check for IP on list

I know there are a few topics on dynamically updating blacklists on here and one very good recent one by IntusDave by the looks of it, However I was thinking it would be useful to be able to lookup Abuse IPDB automatically using their provided API from either within mikrotik or via some fancy script...
by rwrocket
Wed Oct 18, 2017 4:14 am
Forum: SwOS
Topic: SwOS compatibility for CRS226,CRS210 and CRS125
Replies: 0
Views: 827

SwOS compatibility for CRS226,CRS210 and CRS125

I have these CRS switches some in production and some laying around and I kind of hating using them as a switch due to the RouterOS switching implementation Is there any hope of running SwOS on them as from what I can see they are not supported and still auto update to ROS. I remember in the beginni...
by rwrocket
Thu Aug 17, 2017 3:59 am
Forum: Forwarding Protocols
Topic: Redundant radio links OSPF NBMA priority
Replies: 3
Views: 1093

Re: Redundant radio links OSPF NBMA priority

Hi Priority only used in OSPF protocol for selected DR and BDR. Your network uses Link-Link DR and BDR respectively do not need. Use the point-to-point network type and set up the Hello and the Dead interval What are your losses on the channel and delay? Sorry but as stated I don't want to use PTP ...
by rwrocket
Wed Aug 16, 2017 9:32 am
Forum: Forwarding Protocols
Topic: MPLS/VPLS for large scale networks
Replies: 4
Views: 1292

Re: MPLS/VPLS for large scale networks

Surely this can be done with eBGP also just as effectively as OSPF?
by rwrocket
Wed Aug 16, 2017 4:11 am
Forum: Forwarding Protocols
Topic: Redundant radio links OSPF NBMA priority
Replies: 3
Views: 1093

Redundant radio links OSPF NBMA priority

I have the following setup in which I previously had problems with OSPF dropping in PTP or PTMP mode so I switch to NBMA for stability as these are 20+km wireless links (mixture of cambium and UBNT radios) ROS Versions were 6.38-6.39 Traffic should flow over the primary link at all times unless the ...
by rwrocket
Mon Jul 03, 2017 4:48 am
Forum: General
Topic: Choose when to expire PPPoE Session
Replies: 0
Views: 671

Choose when to expire PPPoE Session

We use a 3rd party radius solution based on freeradius + mikrotik for PPPoE VDSL customers. Mikrotik is connected to a VDSL2 DSLAM which then connects to customer VDSL2 modems. For accurate daily statistical accounting information we set PPPoE session timeout to 24 hours on Mikrotik profile. The pro...
by rwrocket
Thu Feb 09, 2017 4:35 am
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 314
Views: 89487

Re: Mikrotik VDSL / DSL Modem?

+1
I need this yesterday :(
by rwrocket
Mon Nov 28, 2016 6:25 am
Forum: Forwarding Protocols
Topic: Load Sharing BGP
Replies: 5
Views: 1571

Re: Load Sharing BGP

ZeroByte I am unfortunately in a situation with my transit providers that fits what you described about the local pref. Prepending does not work unfortunately because of the ISP upstream of our transit provider has set a high local pref for our backup transit provider over our primary where we have ...
by rwrocket
Fri Nov 04, 2016 7:19 am
Forum: Forwarding Protocols
Topic: OSPF multiple OSPF nieghbours on layer 2 segment
Replies: 2
Views: 618

Re: OSPF multiple OSPF nieghbours on layer 2 segment

I understand how to set the metrics in multiple instances, but I am not sure if I understand if multiple OSPF instances would be the solution here/might cause more problems?
by rwrocket
Thu Nov 03, 2016 7:03 am
Forum: Forwarding Protocols
Topic: OSPF multiple OSPF nieghbours on layer 2 segment
Replies: 2
Views: 618

OSPF multiple OSPF nieghbours on layer 2 segment

This may well be an OSPF design flaw by myself and I could potentially fix it but I wanted to ask if there is another way before I decide to run vlans over my router connections. Basically I have R3 connected to R1 and R2 via an external providers fibre connection. The external provider has given me...
by rwrocket
Tue Oct 25, 2016 8:52 am
Forum: General
Topic: CRS untagged vlan not working when connected to CCR1009 router
Replies: 1
Views: 503

Re: CRS untagged vlan not working when connected to CCR1009 router

FYI in case anyone strikes this problem Hello, Your configuration has multiple master-ports, they create a simple port isolation solution but CRS switch-chip VLANs can work only on the first port group with a master-port. You should reconfigure CRS to use one master-port for all ports if you want to...
by rwrocket
Mon Oct 24, 2016 4:25 am
Forum: General
Topic: CRS untagged vlan not working when connected to CCR1009 router
Replies: 1
Views: 503

CRS untagged vlan not working when connected to CCR1009 router

So this is very strange and driving me mental All I want to achieve is to have port 24 trunk (tag multiple vlans) and then have port 22 and later other ports untagged on selected vlans. I setup a trunk vlan and untagged vlan setup to suit my environment following the Example 1 (Trunk and Access port...
by rwrocket
Wed Sep 21, 2016 9:31 am
Forum: Virtualization
Topic: ROS guest Virtio ethernet MTU problem
Replies: 1
Views: 1733

Re: ROS guest Virtio ethernet MTU problem

*BUMP* I have the same problem

MTU over 1500 seems very problematic
by rwrocket
Wed Sep 21, 2016 7:18 am
Forum: General
Topic: CHR and max MTU
Replies: 2
Views: 1638

Re: CHR and max MTU

*BUMP*

I would really like to know about this as I am using CHR on Unetlabs and I think I have ran into the MTU greater than 1500 problem
by rwrocket
Wed Jun 29, 2016 4:54 am
Forum: Forwarding Protocols
Topic: HELP Set BGP local Pref not working
Replies: 7
Views: 1736

Re: HELP Set BGP local Pref not working

One more note on MED, instead of relying on your IGP metrics, you can just specify a MED when sending routes to an eBGP neighbor. In routing filters, there is a BGP action "set BGP MED" - put MED of 50 on R1, and MED 100 on R2. This will be the simplest (and in my opinion, the most appropriate) way...
by rwrocket
Wed Jun 29, 2016 2:39 am
Forum: Forwarding Protocols
Topic: HELP Set BGP local Pref not working
Replies: 7
Views: 1736

Re: HELP Set BGP local Pref not working

Thank you once again ZeroByte for being my hero and explaining things so clearly. I didn't know that communities = local pref, I thought they were something completely different and not related. I think it will make more sense now if I tell you that I am using communities already on both R1 & R2 and...
by rwrocket
Tue Jun 28, 2016 5:01 pm
Forum: Forwarding Protocols
Topic: HELP Set BGP local Pref not working
Replies: 7
Views: 1736

Re: HELP Set BGP local Pref not working

But here's the thing, the routes I am sending to the upstream peer are learned from OSPF, so I am originating them...
I am receiving only default route from upstream router

I already asked the ISP if they can set the local pref on their inbound route map but they told me it's something I need to do.
by rwrocket
Tue Jun 28, 2016 9:34 am
Forum: Forwarding Protocols
Topic: HELP Set BGP local Pref not working
Replies: 7
Views: 1736

HELP Set BGP local Pref not working

I have two CCR1009-8G-1S-1S+ running 6.35.4 lets call them R1 and R2 the configuration is this: one upstream BGP peer on both routers(I am unable to alter configuration on this router) The Upstream BGP peer, connects to both my routers inside a /29 network. I want R1 to be the primary path for outgo...
by rwrocket
Fri Apr 22, 2016 9:22 am
Forum: General
Topic: What SFP module do I need?
Replies: 6
Views: 946

Re: What SFP module do I need?

Thanks all

the 31DLC10D worked

Now I just need to find if there is a switch mikrotik make that has dual power and supports it
by rwrocket
Thu Apr 21, 2016 5:03 am
Forum: General
Topic: What SFP module do I need?
Replies: 6
Views: 946

Re: What SFP module do I need?

The cable is LOOPED so 23 goes into 24 I asked about this and was told that we need to use both ports (TX and RX) and it was looped for testing but we are free to remove the cable and insert our own. I also found reference to duplex SMOF in the order for connection between demarc and our rack which ...
by rwrocket
Thu Apr 21, 2016 4:29 am
Forum: General
Topic: What SFP module do I need?
Replies: 6
Views: 946

What SFP module do I need?

fdfsd.jpg The picture attached is of a cables only 10gig service we have with one of our upstream providers. The information I have is that we need to connect to both ports 23 & 24 as one is TX and the other RX This makes me inclined to think that it is single mode fiber What I am not sure about is...
by rwrocket
Fri Jan 15, 2016 3:09 am
Forum: General
Topic: 6.16 import stops when there is a duplicate entry
Replies: 15
Views: 6791

Re: 6.16 import stops when there is a duplicate entry

Strongly agree

this is just silly

such a time waster to have to edit all duplicate interface names out of a config file to do a clone backup
by rwrocket
Tue Dec 01, 2015 1:03 am
Forum: General
Topic: Netwatch tool, help required #BUG CONFIRMED#
Replies: 3
Views: 578

Re: Netwatch tool, help required

########BUG confirmed##### Hello, Thank you for your e-mail. There was indeed a bug regarding your issue. Looks like we managed to fix it, but the fix is not jet published thus not tested either. The fix will be available for testing in v6.34rc12 and latter. I will also inform you when it gets teste...
by rwrocket
Mon Nov 30, 2015 5:48 am
Forum: General
Topic: Netwatch tool, help required #BUG CONFIRMED#
Replies: 3
Views: 578

Re: Netwatch tool, help required

Just guessing here... Could it be when you ping you measure trip time from A to B, but what you refer in netwatch is timeout? If time for a packet to travel from A to B is 4ms, for netwatch probe to get a packet from A to B (4ms) and the reply back from B to A (another 4ms) = 8ms. Too tight for 9ms...
by rwrocket
Fri Nov 27, 2015 1:01 am
Forum: General
Topic: Netwatch tool, help required #BUG CONFIRMED#
Replies: 3
Views: 578

Netwatch tool, help required #BUG CONFIRMED#

#### UPDATE, BUG confirmed see last post ############ I am trying to use the Netwatch tool but am finding the timeout value confusing. I am running 6.32.2 ROS I have the interval set to 00:00:10 if I set the Timeout Value to 10ms the netwatch status goes to UP If I set the Timeout value to 9ms the n...
by rwrocket
Fri Oct 30, 2015 2:32 am
Forum: General
Topic: CCR1036 PPPoE & large 40mbit+ queues help/advice
Replies: 4
Views: 678

Re: CCR1036 PPPoE & large 40mbit+ queues help/advice

I have been having good success with wireless-default type actually in my recent tests

Hopefully it stays this way but looks like I may have found my solution
by rwrocket
Thu Oct 29, 2015 11:57 pm
Forum: General
Topic: CCR1036 PPPoE & large 40mbit+ queues help/advice
Replies: 4
Views: 678

Re: CCR1036 PPPoE & large 40mbit+ queues help/advice

As I said.....

PPPoE

this implies simple queue because as far as I know PPPoE can only use simple queues.

There is no queue config as such, they are created dynamically upon successful PPPoE radius auth
by rwrocket
Thu Oct 29, 2015 8:20 am
Forum: General
Topic: CCR1036 PPPoE & large 40mbit+ queues help/advice
Replies: 4
Views: 678

CCR1036 PPPoE & large 40mbit+ queues help/advice

Currently I am running 6.32.2 I have long struggled with suspecting that queues in Mikrotik are slowing down my customers more than it should. I thought I had solved the problem by going away from using the default-small queue type but I found the problem seems to be back. Here is the scenario PPPoE...
by rwrocket
Mon Oct 12, 2015 4:31 am
Forum: General
Topic: eduroam: VLAN assignment based on RADIUS 802.1x reply
Replies: 40
Views: 15441

Re: eduroam: VLAN assignment based on RADIUS 802.1x reply

*BUMP*

Uldis any update on this?

This would be a game changer for us
by rwrocket
Thu Oct 08, 2015 7:34 am
Forum: General
Topic: ADD DYNAMIC VLAN ASSIGNMENT.
Replies: 37
Views: 16425

Re: ADD DYNAMIC VLAN ASSIGNMENT.

BUMP

Need this too
by rwrocket
Wed Aug 19, 2015 3:48 am
Forum: General
Topic: PPPoE Server on Bridge, only one client works at a time
Replies: 8
Views: 1424

Re: PPPoE Server on Bridge, only one client works at a time

Split Horizon indeed does solve my issue, seems to be the most elegant solution also

thanks all
by rwrocket
Wed Aug 19, 2015 2:38 am
Forum: General
Topic: PPPoE Server on Bridge, only one client works at a time
Replies: 8
Views: 1424

Re: PPPoE Server on Bridge, only one client works at a time

I will experiment with both of these solutions and get back to you both

thanks for your input
by rwrocket
Tue Aug 18, 2015 9:23 am
Forum: General
Topic: PPPoE Server on Bridge, only one client works at a time
Replies: 8
Views: 1424

Re: PPPoE Server on Bridge, only one client works at a time

I have found out the solution to this problem myself It is because my VLAN MAC Addresses are the same In my case I had my vlans attached to an INTERFACE BOND so they all had the same MAC address I am not sure the best way to get around this however Doesn't seem like I can change the MAC address on t...
by rwrocket
Mon Aug 17, 2015 4:59 am
Forum: General
Topic: PPPoE Server on Bridge, only one client works at a time
Replies: 8
Views: 1424

Re: PPPoE Server on Bridge, only one client works at a time

Well I am glad to know it is not only me

However I don't have QinQ, I am just adding VLANs to a bridge then putting a PPPoE Server on that bridge.
by rwrocket
Wed Aug 12, 2015 8:45 am
Forum: General
Topic: PPPoE Server on Bridge, only one client works at a time
Replies: 8
Views: 1424

PPPoE Server on Bridge, only one client works at a time

I have a PPPoE Setup I am testing Previously I had 2 PPPoE clients and two PPPoE servers running on their vlan interfaces respectively all on mikrotik hardware. I plan to deliver PPPoE using Radius to configure IP's etc so I thought I could create just one PPPoE Server on a bridge and bridge all my ...
by rwrocket
Tue Aug 11, 2015 8:17 am
Forum: General
Topic: Only getting 100 Mbps per user from a 200 Mbps link
Replies: 13
Views: 1914

Re: Only getting 100 Mbps per user from a 200 Mbps link

RB2011 non fastpath with firewall and NAT will only net about 130mbps I believe from my testing
by rwrocket
Mon Aug 10, 2015 6:59 am
Forum: General
Topic: FORUM PM's stuck in Outbox???
Replies: 0
Views: 288

FORUM PM's stuck in Outbox???

Sorry I know this is not ROS related but it's driving me crazy and I can't find a forum for posting forum bugs/issues.
by rwrocket
Tue Aug 04, 2015 5:47 am
Forum: Forwarding Protocols
Topic: VPLS Tunnel won't pass traffic using OSPF NSSA
Replies: 2
Views: 1263

VPLS Tunnel won't pass traffic using OSPF NSSA

Rather new to MPLS + VPLS on Mikrotik and trying to get it working for PPPoE delivery in my lab however I have run into a problem I don't think is MTU related. For now I have removed all switches bridges etc while I try to troubleshoot why one of my tunnels is not passing traffic. Here is the scenar...
by rwrocket
Wed Jul 29, 2015 2:57 am
Forum: Forwarding Protocols
Topic: MPLS+VPLS Tunnels PPPoE Delivery design question
Replies: 5
Views: 1621

Re: MPLS+VPLS Tunnels PPPoE Delivery design question

Thanks very much for the reply djmitch Most of what you did I already understood and had planned to do, Any reason why you use NBMA OSPF instead of PTP/PTMP? I have found PTP to work great over wireless with mikrotik so far. For the scripting redundancy, this is really what my question was as I am u...
by rwrocket
Tue Jul 28, 2015 5:32 am
Forum: Forwarding Protocols
Topic: MPLS+VPLS Tunnels PPPoE Delivery design question
Replies: 5
Views: 1621

MPLS+VPLS Tunnels PPPoE Delivery design question

Wondering if some gurus can help me plan this in my head. I understand how MPLS and VPLS tunnels work over an OSPF infrastructure and I plan to test and implement this in my OSPF network soon. I am wanting to move to PPPoE as well and like the idea of having a central PPPoE server connected to the C...
by rwrocket
Fri Jul 17, 2015 3:37 am
Forum: General
Topic: CRS Need help with switch configuration
Replies: 2
Views: 829

Re: CRS Need help with switch configuration

The other end will be mikrotik also but not directly opposite via layer2

It will go through some radio links

I had decided to do this by bonding EOIP tunnels but as you said it is putting load on the cpu instead of using the switch capabilities.
by rwrocket
Thu Jul 16, 2015 5:03 am
Forum: General
Topic: CRS Need help with switch configuration
Replies: 2
Views: 829

CRS Need help with switch configuration

Hoping someone can please help me because I am pulling my hair out here. I have a CRS125-24G-1S-IN Here is the configuration I need Eth1 & Eth 2 in a active backup bond. Management vlan 20 attached to switch1 cpu and tagged these ports Customer vlan 10 on tagged on these ports ANy other port /all po...
by rwrocket
Thu May 21, 2015 4:12 am
Forum: Forwarding Protocols
Topic: Possibly a simple eBGP question for BGP gurus
Replies: 7
Views: 1231

Re: Possibly a simple eBGP question for BGP gurus

In general terms, the network statements in BGP are a list of prefixes which the router will originate if it sees a matching route (exact match, both destination and mask) in the active routing table. In other words, it's a set of destinations that the router will tell the world it knows how to rea...
by rwrocket
Wed May 20, 2015 4:24 am
Forum: Forwarding Protocols
Topic: Possibly a simple eBGP question for BGP gurus
Replies: 7
Views: 1231

Re: Possibly a simple eBGP question for BGP gurus

Advertise your /24 in both places AND announce your more specific prefixes. I assume of course that your customers in geographic region A all come from a specific subset of your IP space (the same /27 for instance) and region B is also able to be aggregated into a single prefix. In order for MEDs t...
by rwrocket
Tue May 19, 2015 7:14 am
Forum: Forwarding Protocols
Topic: Possibly a simple eBGP question for BGP gurus
Replies: 7
Views: 1231

Re: Possibly a simple eBGP question for BGP gurus

Ahh sorry I was not clear The answer to your question is, you can set it up do what you like... e.g if you wanted to load balance across the two interfaces, http://wiki.mikrotik.com/wiki/Manual:BGP_Load_Balancing_with_two_interfaces or if you wanted to do load sharing... http://wiki.mikrotik.com/wik...
by rwrocket
Tue May 19, 2015 2:28 am
Forum: Forwarding Protocols
Topic: Possibly a simple eBGP question for BGP gurus
Replies: 7
Views: 1231

Possibly a simple eBGP question for BGP gurus

I am pretty new to BGP so forgive me if this is a rather straight forward question. Say I have my own AS number and I have two independent links to my upstream ISP Lets call these links link A and link B. Both connecting to the same ISP and thus peering to the same AS number So lets say for the argu...
by rwrocket
Wed May 13, 2015 3:17 am
Forum: Scripting
Topic: How can I log failures importing configuration
Replies: 9
Views: 1550

Re: How can I log failures importing configuration

Ok so I think I found what is causing the disconnect set [ find default-name=ether12 ] l2mtu=1590 From what I can see, the ROS defaults for 6.28 on a CCR1036-12G-4S are 12mtu=1580 it must have previously been 1590 because I certainly did not change this but it is in my config file Also this causes t...
by rwrocket
Wed May 13, 2015 2:22 am
Forum: Scripting
Topic: How can I log failures importing configuration
Replies: 9
Views: 1550

Re: How can I log failures importing configuration

Thanks Connect to router MAC via WinBox (i.e. layer2), upload the file to the RB, then go to terminal and issue /import verbose=yes file-name=YourExport.rsc That way you should see where the error is. Thanks Pukkita, making progress Found a couple of errors in my config and fixed them but now I got ...
by rwrocket
Tue May 12, 2015 10:20 am
Forum: Scripting
Topic: How can I log failures importing configuration
Replies: 9
Views: 1550

Re: How can I log failures importing configuration

If I do that all that happens is I am disconnected from winbox

And when I reconnect doesn't appear like any of the config has been written.

Can I send you my config ? I will try PM you.

Seems to me like the memory is filling up or something, it is quite a large config
by rwrocket
Tue May 12, 2015 6:03 am
Forum: Scripting
Topic: How can I log failures importing configuration
Replies: 9
Views: 1550

Re: How can I log failures importing configuration

I can send it to you but don't really want to attach it here for obvious reasons.

But I don't see why that really matters because I just want to know how to log errors when importing a config file
by rwrocket
Fri May 08, 2015 5:06 am
Forum: Scripting
Topic: How can I log failures importing configuration
Replies: 9
Views: 1550

How can I log failures importing configuration

Title says it all.

I am frustrated with my backup restore script not working so I need to see where it fails in the import process.

I need to log errors to a file because when I import the configuration file I get disconnected from winbox so I never see the output in the terminal.
by rwrocket
Fri May 08, 2015 3:42 am
Forum: General
Topic: CCR1036 6.28 Possible Queue Tree bug?
Replies: 2
Views: 604

Re: CCR1036 6.28 Possible Queue Tree bug?

I was right it is a bug

Fixed in the latest nightly RC build apparently

However I am not brave enough to run a pre-release update on a production router :(
by rwrocket
Thu May 07, 2015 9:27 am
Forum: RouterBOARD hardware
Topic: NEW PRODUCTS WISHLIST 2015
Replies: 50
Views: 8065

Re: NEW PRODUCTS WISHLIST 2015

I Would like to see a Routerboard with integrated Dual band dual chain radios + at least one Mini-PCI-E expansion slot. This will be something to replace Ubiquity UAP Pro and UAP AC . It will have the ability to serve both 5Ghz and 2.4Ghz simultaneously as well being able to add one more additional ...
by rwrocket
Wed May 06, 2015 3:20 am
Forum: General
Topic: CCR1036 6.28 Possible Queue Tree bug?
Replies: 2
Views: 604

Re: CCR1036 6.28 Possible Queue Tree bug?

And it looks like my old friend the "every queue stops getting traffic when a queue is changed" bug is back again

If I disable all Queues and re-enable it fixes it but this concerns me greatly.
by rwrocket
Mon May 04, 2015 4:59 am
Forum: General
Topic: Honeypot for port scanners picks up google DNS
Replies: 5
Views: 2483

Re: Honeypot for port scanners picks up google DNS

You reply before I fix my reply ;))) [...] but I have created that rule and I'm using it for months and google DNS IPs never go to that list. You put 8h timeout on the address list entry, my timeout is: when routerboard is rebooted.... [...] The IP do not have any related DNS name? [...] What other...
by rwrocket
Mon May 04, 2015 4:41 am
Forum: General
Topic: Honeypot for port scanners picks up google DNS
Replies: 5
Views: 2483

Re: Honeypot for port scanners picks up google DNS

Why you not ask directly on the original post where you find the rule? viewtopic.php?f=2&t=54607&p=480275&hilit=%40SCANNER#p480275 Sorry I forgot where I got the rule from, thanks for replying here. but you are fully secure than your dst-address is really unused? What other services go to @SCANNER ...
by rwrocket
Mon May 04, 2015 1:57 am
Forum: General
Topic: Honeypot for port scanners picks up google DNS
Replies: 5
Views: 2483

Honeypot for port scanners picks up google DNS

I have a rule like so to catch people scanning our subnets XXX.XXX.XXX.XXX = an unused IP on our customer subnet. 1 ;;; HONEYPOT chain=forward action=add-src-to-address-list dst-address=XXX.XXX.XXX.XXX src-address-list=!WHITELIST address-list=@SCANNER address-list-timeout=8h in-interface=WAN1 log=no...
by rwrocket
Thu Apr 30, 2015 8:04 am
Forum: Scripting
Topic: Seeking ultimate backup script
Replies: 0
Views: 476

Seeking ultimate backup script

I have a great backup script that emails me backups every day of my CCR1036 Problem is that it doesn't seem to be generic enough to restore correctly on a duplicate device which worries me because if I have a hardware failure it will take some time to recover. I have been testing restores today and ...
by rwrocket
Mon Apr 27, 2015 6:03 am
Forum: General
Topic: CCR1036 6.28 Possible Queue Tree bug?
Replies: 2
Views: 604

CCR1036 6.28 Possible Queue Tree bug?

I have a scenario like so: prerouting marking connection from A to B prerouting jumping to chain AB AB chain marking everything else as "AB Traffic" (passthrough) AB chain Marking http traffic type as "HTTP" (no passthrough) When I create a queue for HTTP under global and limit the speed it works Wh...
by rwrocket
Thu Apr 23, 2015 7:19 am
Forum: Scripting
Topic: Need to script a hotspot restart the least intrusive way
Replies: 2
Views: 645

Re: Need to script a hotspot restart the least intrusive way

Don't think it is that, it happens with MAC addresses never used before.
by rwrocket
Wed Apr 22, 2015 5:32 am
Forum: Scripting
Topic: Need to script a hotspot restart the least intrusive way
Replies: 2
Views: 645

Need to script a hotspot restart the least intrusive way

Subject is not very clear but here is the problem I am facing. I have a hotspot setup and working well with radius and MAC authentication. Only problem is that changes to MAC authentication in the radius server seem to require a hotspot restart on the mikrotik router for it to take effect. This does...
by rwrocket
Tue Apr 14, 2015 4:47 am
Forum: Scripting
Topic: How to start Wireless Sniffer in a script?
Replies: 4
Views: 1387

Re: How to start Wireless Sniffer in a script?

Can anyone advise me on how I can script this to run for a time period then stop? I see the sniff commands can be run with the following attributes but I am also not sure what they do. <interface> -- append -- as-value -- do -- file -- interval -- once -- without-paging I can press Q to stop it runn...
by rwrocket
Tue Apr 14, 2015 2:26 am
Forum: Scripting
Topic: How to start Wireless Sniffer in a script?
Replies: 4
Views: 1387

Re: How to start Wireless Sniffer in a script?

Great that was what I needed, the sniff command.

Now if only I could run it with a filter? but as far as I have read so far there is no filter commands for the wireless sniffer like there is for the other packet sniffer?
by rwrocket
Mon Apr 13, 2015 9:16 am
Forum: Scripting
Topic: How to start Wireless Sniffer in a script?
Replies: 4
Views: 1387

How to start Wireless Sniffer in a script?

Title says it all

I cannot find any information on how to run the Wireless Packet Sniffer any other way than clicking on the start button.
by rwrocket
Mon Apr 13, 2015 7:03 am
Forum: Wireless Networking
Topic: BYO Wireless Statistic Gathering/Monitoring + AP
Replies: 2
Views: 835

Re: BYO Wireless Statistic Gathering/Monitoring + AP

Thanks for the reply

You confirmed my findings, that I need a dedicated radio for monitoring.

Now that I have come to terms with this I have a few ideas on how to achieve it.

BYO using routerboards seems entirely possible but not cost effective.
by rwrocket
Fri Apr 10, 2015 3:39 am
Forum: Wireless Networking
Topic: BYO Wireless Statistic Gathering/Monitoring + AP
Replies: 2
Views: 835

BYO Wireless Statistic Gathering/Monitoring + AP

I am not sure if this has been discussed in here before, I was unable to find anything matching what I intend to do. Anyone familiar with Cisco Aironet or some other big Wireless vendors will know they have software and hardware to monitor beacons from any wireless device nearby a Wireless AP while ...
by rwrocket
Tue Mar 10, 2015 4:39 am
Forum: Forwarding Protocols
Topic: Simple OSPF topology, seeking advice
Replies: 6
Views: 1270

Re: Simple OSPF topology, seeking advice

Thanks again :)
by rwrocket
Tue Mar 10, 2015 1:36 am
Forum: Forwarding Protocols
Topic: Simple OSPF topology, seeking advice
Replies: 6
Views: 1270

Re: Simple OSPF topology, seeking advice

Ok I just tested by changing to translate "candidate" and Voila

Working as expected!!

Thank you ZeroByte this is awesome, kinda expected it to be something simple I had missed.

One final question.

Should I be redistributing connected as Type 1 or Type 2 in this example?
by rwrocket
Fri Mar 06, 2015 1:07 am
Forum: Forwarding Protocols
Topic: Simple OSPF topology, seeking advice
Replies: 6
Views: 1270

Re: Simple OSPF topology, seeking advice

FIrstly thanks for your reply. One thing I noticed on R2 (I think) you put 10.255.255.0/24 into both areas, which is a no-no... EDIT****** Just noticed this was a typo, in my lab I have 10.255.255.0/24 only in Area 0.0.0.0 on R2. Will update the first post to reflect this there cannot be an ASBR in ...
by rwrocket
Wed Mar 04, 2015 3:49 am
Forum: Forwarding Protocols
Topic: AirControl through gateway
Replies: 1
Views: 2951

Re: AirControl through gateway

Your diagram is most confusing, can you advise if the radios you want to monitor are out on the internet somewhere else or inside some of the subnets you listed in your diagram? If the latter there should be no problem as seems like there would be no NATing happening. There is a setting in AirContro...
by rwrocket
Wed Mar 04, 2015 3:27 am
Forum: Forwarding Protocols
Topic: Simple OSPF topology, seeking advice
Replies: 6
Views: 1270

Simple OSPF topology, seeking advice

I have a fairly standard OSPF setup in my lab that I am trying to get my head around and I need someone to explain to me what is possible without adding static routes. Here is my current setup. OSPF testing over wireless using NBMA R1 (ASBR) Gateway to internet Default backbone OSPF RID 10.255.255.1...
by rwrocket
Wed Mar 04, 2015 2:52 am
Forum: Forwarding Protocols
Topic: OSPF and default route switching
Replies: 6
Views: 1236

Re: OSPF and default route switching

You haven't given very detailed information but as I understand it you should be able to do it by setting a static default route on R2 with a distance of 180 or something that will not take precedence over the default route coming from OSPF. You may need to adjust your OSPF instance on R2, by that I...
by rwrocket
Mon Nov 24, 2014 8:22 am
Forum: Beginner Basics
Topic: VRRP NOT SO BASIC help required
Replies: 0
Views: 381

VRRP NOT SO BASIC help required

Recently new to RouterOS and am falling in love with my CCR1036 units . However I am confusing myself while attempting to setup VRRP in a hot spare type scenario. Here is what I am trying to achieve : Wan interface is tagged into vlan 10 Bridge created called WAN-BRIDGE and contains the VLAN10 inter...