Community discussions

Search found 488 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 10
by amt
Wed Jan 09, 2019 10:09 am
Forum: Forwarding Protocols
Topic: ECMP settings for Outgoing packets uses same routing decision
Replies: 3
Views: 186

Re: ECMP settings for Outgoing packets uses same routing decision

in chain=prerouting
thanks sebastia,
do I need mark mark-connection ?
by amt
Tue Jan 08, 2019 3:43 pm
Forum: Forwarding Protocols
Topic: ECMP settings for Outgoing packets uses same routing decision
Replies: 3
Views: 186

ECMP settings for Outgoing packets uses same routing decision

Hello, at wiki page for Outgoing packets uses same routing decision there are few mangle rules as below; / ip firewall mangle add chain=input in-interface=wlan1 action=mark-connection new-connection-mark=wlan1_conn add chain=input in-interface=wlan2 action=mark-connection new-connection-mark=wlan2_c...
by amt
Mon Jan 07, 2019 11:11 am
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

Re: OSPF Database error

This exactly matches a client issue I had a while ago. Is this a UBNT link? Try changing the OSPF network type on both sides to point-to-point. Please note, this will drop the adjacency so if you do not have redundancy to connect to the far side without this link, do the remote side first. If this ...
by amt
Mon Jan 07, 2019 9:22 am
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

Re: OSPF Database error

Can you show the same information on 172.17.36.21, I want to see if there is a network type mismatch on that segment /routing ospf area add area-id=0.0.0.1 default-cost=1 inject-summary-lsas=no name=area1 type=stub /routing ospf instance set [ find default=yes ] router-id=10.255.255.33 /routing osp...
by amt
Mon Jan 07, 2019 8:22 am
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

Re: How can I reeduce load over 1072 to 2 x 1036

Always prefer 2x 1036 than a 1072. See the topic ... https://forum.mikrotik.com/viewtopic.php?f=3&t=122525 We are still waiting for mikrotik's official position on the CCR1072 freezes without any solution or information. Complete wrapping of your best product, fix, worst product. you are absolutely...
by amt
Sat Jan 05, 2019 11:44 am
Forum: General
Topic: EoIP MTU for pppoe server tunnel
Replies: 12
Views: 1044

Re: EoIP MTU for pppoe server tunnel

hello idlemind, no problem for delay, thanks for still interesting with my topic. You can provide 1500 MTU directly to your customers over PPPoE in 2 ways. You can use EoIP to bridge over any underlying MTU what appears to be natural Ethernet at any MTU you choose. EoIP is capable of providing fragm...
by amt
Sat Jan 05, 2019 9:52 am
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

Re: OSPF Database error

Also check the remote side priority, since network statement is broadcast, I bet you are having a DR issue. You can post the remote side configuration here so we can all take a look. If the priority is set to a non-default value, try setting it to the default. Also, how many OSPF speakers are on th...
by amt
Sat Jan 05, 2019 9:38 am
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

Re: OSPF Database error

What are your MTU settings for Layer 2 and Layer 3 on each side of the link OSPF is trying to form a neighbor on? Normally getting stuck in two way indicates MTU, have also seen it occur as the result of a network type mismatch. Hello, all mtu's default 1500 on layer2 and layer3, I do not touch mtu...
by amt
Fri Jan 04, 2019 3:47 pm
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

Re: OSPF Database error

Can you post your configuration? thanks for anwer here is ospf config; /routing ospf area add area-id=0.0.0.1 default-cost=1 inject-summary-lsas=no name=area1 type=stub /routing ospf instance set [ find default=yes ] router-id=172.17.36.172 /routing ospf interface add authentication=md5 authenticat...
by amt
Wed Jan 02, 2019 8:12 am
Forum: Forwarding Protocols
Topic: OSPF Database error
Replies: 10
Views: 435

OSPF Database error

Hello, I faced this problem and I want to ask what can be the problem, I faced this problem before but reboot can solve the problem but now reboot cant solve the problem. what can cause this error ? 10:23:26 route,ospf,info OSPFv2 neighbor 172.17.36.22: state change from Full to 2-Way 10:24:07 route...
by amt
Tue Dec 25, 2018 11:26 am
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

Re: How can I reeduce load over 1072 to 2 x 1036

hello mducharme; amt - I'm afraid I don't quite understand the problem here. If the traffic is coming from the clients and passing through router A and B on the way to the BGP router, why not just do NAT there? Why do you need to send the traffic back to router A and router B after it has come from ...
by amt
Mon Dec 24, 2018 1:18 pm
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

Re: How can I reeduce load over 1072 to 2 x 1036

ip route
add comment=to_roterA and RouterB distance=1 dst-address=xxx.xxx.xxx/24 gateway=10.10.1.5,10.10.1.2,10.10.1.10

Tested and not work :=)
by amt
Sat Dec 22, 2018 10:04 am
Forum: Announcements
Topic: v6.43.8 [stable] is released!
Replies: 143
Views: 17508

Re: v6.43.8 [stable] is released!

i'm wondering what's differences between new "installation" and distance?
actually what the new feature does?

Thanks
me too :)
by amt
Fri Dec 21, 2018 12:30 pm
Forum: General
Topic: NAT performance - CCR1072
Replies: 1
Views: 306

Re: NAT performance - CCR1072

Hello all , I have a strange <<problem>> with some nating im doing in a 1072 CCR . Im bandwidth testing between a virtual machine and a physical server . Virtual machine sits in a hypervisor connected to a Dell 100Gbit switch . Physical server has internet access through the CCR with NAT . Also the...
by amt
Fri Dec 21, 2018 11:19 am
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

Re: How can I reeduce load over 1072 to 2 x 1036

can I route all puplic ip's to both Router A and routerB then nat on them ? for ex; /ip route add comment=to_roterA and RouterB distance=1 dst-address=xxx.xxx.xxx/24 gateway=10.10.1.5,10.10.1.2,10.10.1.10 For Router A there are 2 interface comes from bgp router so 10.10.1.5,10.10.1.10 use for it.. i...
by amt
Fri Dec 21, 2018 11:12 am
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

Re: How can I reeduce load over 1072 to 2 x 1036

Where is the CCR 1072 located? I don't see it in the drawing. Is not visible because you have been drawing the target scenario with Router A+B (2x 1036?) already replacing the 1072? Or is the CCR 1072 called "BGP Router" in the drawing? hi peterh Bgp router is 1072 and connected to our upstream pro...
by amt
Thu Dec 20, 2018 10:35 am
Forum: General
Topic: TCP performance over Mikrotik
Replies: 14
Views: 10668

Re: TCP performance over Mikrotik

yep, you basically allowed your interfaces to use multiple CPU cores (i assume that it is multi-core router.) Simple FIFO force all stream to use single CPU core. Hello, all 36 cores selected only-hardware-queue by default, change that interface queue to multi-queue-ethernet-default can affect traf...
by amt
Mon Dec 17, 2018 4:24 pm
Forum: General
Topic: ❓ what's the best solution for OSPF and PPPoE service
Replies: 30
Views: 3577

Re: ❓ what's the best solution for OSPF and PPPoE service

The answer is NSSA and filters.
you mean pppoe_server's should be in area with nssa and routing filter's should use for discard thesee ip's ?
by amt
Sun Dec 16, 2018 10:51 pm
Forum: Forwarding Protocols
Topic: How can I reeduce load over 1072 to 2 x 1036
Replies: 8
Views: 561

How can I reeduce load over 1072 to 2 x 1036

Hi All, I want to share load on ccr 1072 and divide it to two router... I share simple diagram to you all may help me.. bgp router connected to our upstream provider and we have 2 x /22 puplic ip and natting customer's ip with them on CCR1072.. but I would like to nat customer's ip's on Router A and...
by amt
Sun Dec 16, 2018 7:03 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

I turn this arround in RAW, only allow the ports I use and the have a block-all for TCP and UDP. For specific filtering on allowed ports I group similar rules under a Jump. So when traffic is not for that ports it has to pass only one line. It is always a good to look if block or accept is more eff...
by amt
Sat Dec 15, 2018 8:11 am
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

"tune (=reduce) conn tracking timeouts" is only relevant if you want to do connection tracking. Do you? If yes: you could reduce the timeout timing, so that connections are cleaned up sooner. Ex: "TCP established timeout" /ip firewall connection tracking settings Further make sure FastTrack rule is...
by amt
Thu Dec 13, 2018 10:59 am
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

From forwarding point of view, following rules are applicable: add action=accept chain=forward comment="ACCEPT established & related" connection-state=established,related add action=drop chain=forward comment="DROP invalid" connection-state=invalid add action=accept chain=forward comment="SecureCon...
by amt
Wed Dec 12, 2018 3:55 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

* what is the typical connection count through that router? while connection tracking disabled; ip firewall connection print count-only :: 2801 while connection tracking enabled; ip firewall connection print count-only:: 20458 * do you need/have to protect your inner / forwarded networks? yes I nee...
by amt
Tue Dec 11, 2018 4:19 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

what is the purpose of this router: only natting? or natting + forwarding? If also forwarding and it's sizeable amount, use no-track in raw to not do conntracking for it... That will save cpu together with FastPath. Hi sebastia, thanks for your answer. Just fowarding traffic to other routers. I alr...
by amt
Tue Dec 11, 2018 2:30 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

any other suggestion ?
by amt
Tue Dec 11, 2018 2:25 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

Correct, for both. If you want to have more areas, renumber your networks so that they can be easily summarized with area ranges. However, I don't think it is that necessary with the small areas you describe. OSPF areas are helpful once you start having several hundred routes, or for things like PP...
by amt
Tue Dec 11, 2018 11:05 am
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

Sorry I missed that you asked for routes, Area1 60 routes, Area2 33 routes, Area3 44 Routes if i collect them in one area total routes will be 137. too much or its very low for one area ? That is fine for one area, you don't need three. It especially doesn't make sense to split things into differen...
by amt
Mon Dec 10, 2018 10:17 pm
Forum: General
Topic: ❓ what's the best solution for OSPF and PPPoE service
Replies: 30
Views: 3577

Re: ❓ what's the best solution for OSPF and PPPoE service

The answer is NSSA and filters.
Thanks for your answer,

Can you give a simple example ?
by amt
Mon Dec 10, 2018 11:14 am
Forum: General
Topic: ❓ what's the best solution for OSPF and PPPoE service
Replies: 30
Views: 3577

Re: ❓ what's the best solution for OSPF and PPPoE service

In general, I'd recommend as best practices that you never use redistribute connected unless it's just unavoidable for some reason (I can't imagine many such scenarios), and don't redistribute static routes except at the very edge of your OSPF domain - on access routers mostly - and in those router...
by amt
Mon Dec 10, 2018 10:22 am
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

But how many OSPF routes in the routing table? My thought is you probably do not need so many areas, especially if you only have a couple hundred routes. More areas used to be needed with older routers, but those were recommendations based on 1990's or early 2000's routers. Sorry I missed that you ...
by amt
Sat Dec 08, 2018 9:42 am
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

Then how many OSPF routers and how many routes?
60 ospf installed router and 100 not installed(which is AP or P2p Link)
by amt
Sat Dec 08, 2018 9:39 am
Forum: General
Topic: Renew IP address of PPPoE client
Replies: 10
Views: 733

Re: Renew IP address of PPPoE client

I mean if you use /24 for pppoe pool divide it to /25 and create 2 x ip pool and use next pool option

here is an example
/ip pool
add name=PPPoE_Pool-1 ranges=100.64.16.0/25  next-pool=pool1
add name=pppoe_pool-2 ranges=100.64.16.128/25
by amt
Fri Dec 07, 2018 11:23 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

Please explain what you mean by 160-170 "devices". Do you mean 160-170 OSPF routers (ex. 160 powerboxes)? 160 device but ospf not working all of them, for example p2p links connected with /29 , AP's with connected to powerbox with /30. Only power box or Rb1100 works with ospf if AP attached on it o...
by amt
Fri Dec 07, 2018 1:38 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

Are you sure it is not just somebody trying to attack your router and it's doing it's job? Does/Has the CPU usage subside(d)? Yes Im sure, when disable firewall filter rules CPU usage subside... also I tried to add your firewall rules that suggest to me as below but traffic down from 300 to 200 :) ...
by amt
Fri Dec 07, 2018 12:20 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

With firewalls my personal ethos is drop everything and allow only what you want. Your firewall was allowing what you want and dropping "some" stuff. Your rules can be much simpler if you set them up as per below and that may transpire into better CPU utilisation. Nobody has asked what model router...
by amt
Fri Dec 07, 2018 12:13 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

Slightly wipe the firewall rolls sequence. The input section always ends with 'drop all' # drop all other input add chain = input action = drop comment = "drop everything else" And the 'forward' chain - # drop all other forward add chain = forward action = drop comment = "drop everything else" You ...
by amt
Fri Dec 07, 2018 12:11 pm
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

Re: firewall is pushing the cpu

when you use firewall the router have to check every packet,so when you have heavy traffic,the cpu will go up fast . you can make mark(/ip firewall mangle) the connection then mark the packets,this will reduce you cpu cost . thanks for your answer... you mean I will create mangle that mark the port...
by amt
Fri Dec 07, 2018 10:41 am
Forum: General
Topic: Renew IP address of PPPoE client
Replies: 10
Views: 733

Re: Renew IP address of PPPoE client

Hi, I need to change an IP address of one customer that is connected to our network throught a PPPoE server configurated on a CCR1036. But every time the customer connects the Mikrotik give him the same IP address! How can I force the Mikrotik to renew the IP address of PPPoE connections on every r...
by amt
Fri Dec 07, 2018 10:28 am
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

If the public IP ranges are mixed randomly in all areas, one solution can be to tunnel the customers back to a central router (or routers) using either VPLS tunnels (preferred) or EoIP tunnels. That central router (or routers) can then have an OSPF stub area with an area range to summarize the adve...
by amt
Fri Dec 07, 2018 8:49 am
Forum: General
Topic: firewall is pushing the cpu
Replies: 25
Views: 1113

firewall is pushing the cpu

Hi everyone, yesterday I realized that the firewall that I used on all devices increase cpu usage which device on heavy traffic on it. I wanted to share the firewall that I put on all devices below may firewall rules wrong. When I disable all rulses in ip firewal filter ,cpu returns to normal. /ip f...
by amt
Fri Dec 07, 2018 8:16 am
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

Hi amt, you use an "area range" on router B to summarize the area to other areas. You can create it under Routing->OSPF->Area Ranges. hi mducharme, thanks for your answer... it was like as you said, I was using area range to summarize but it was one area before and I used 3 x /24 ip range at this o...
by amt
Thu Dec 06, 2018 10:46 am
Forum: Forwarding Protocols
Topic: OSPF loses routes after days
Replies: 22
Views: 1147

Re: OSPF loses routes after days

How many routes do you have? We have not experienced this issue at all with OSPFv2 with 450 OSPFv2 routes and 130 routers. It's been completely stable. hi mducharme, I have some problems on ospf, you have experience on ospf and can you help me with this topic https://forum.mikrotik.com/viewtopic.ph...
by amt
Wed Dec 05, 2018 2:20 pm
Forum: Forwarding Protocols
Topic: OSPF loses routes after days
Replies: 22
Views: 1147

Re: OSPF loses routes after days

I encountered the same problem, some times ospf router's lost routes and after reboot it start to work again, I was using the stub area an i thought i put many devices in one stub are and divided them into different stub areas.. now problem does not repeat again I'm waiting if problem continue... bu...
by amt
Tue Dec 04, 2018 11:34 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

no answer ?
by amt
Mon Dec 03, 2018 4:58 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

any update ?
by amt
Sat Dec 01, 2018 11:14 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

ohh, ok got it... so the main question here will be, does the router B have interfaces assigned to each area (I mean area 0, area 1 and area 2); or only each PowerBox has one interface at the backbone area and the other one in the default area? The rule is that only the ABR (area border router) or ...
by amt
Sat Dec 01, 2018 8:35 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 1196

Re: ospf summarization help [SOLVED]

HI! if you're trying to summarize routes using OSPF, then the PPPoE server will be the ABR (area border router) or ASBR; but you'll need to standardize your subnets, as example PPPoE 1 will have clients at only one range (a.e. 172.16.0.0/24); then you can do a redistribute connected and the add a s...
by amt
Sat Dec 01, 2018 1:01 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 318
Views: 52215

Re: v6.44beta [testing] is released!

Dude multithreading support when?
and bgp multithreading support when?
by amt
Sat Dec 01, 2018 12:56 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 318
Views: 52215

Re: v6.44beta [testing] is released!

if it is worked without problem, I will install too :)
Only on test CCR, which you can Netinetall any time!
exatly, both 1072 are at very critic area, so I will wait :)
by amt
Sat Dec 01, 2018 9:04 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 318
Views: 52215

Re: v6.44beta [testing] is released!

if it is worked without problem, I will install too :)
  • 1
  • 2
  • 3
  • 4
  • 5
  • 10