Community discussions

MikroTik App

Search found 19 matches

by Nissarin
Tue Jan 11, 2022 11:18 am
Forum: RouterOS beta
Topic: v7 inter VRF route leak doesn't work for local IPs
Replies: 38
Views: 12560

Re: v7 inter VRF route leak doesn't work for local IPs

On Linux VRF is implemented by (among other things) placing routing rule to search special table "l3mdev-table". By default this rule is placed with pref value of 1000, while one of the default rules - local - have pref value of 0, meaning it's associated routing table is searched first. A...
by Nissarin
Tue Dec 13, 2016 6:31 pm
Forum: Announcements
Topic: v6.38rc [release candidate] is released
Replies: 331
Views: 122479

Re: v6.38rc [release candidate] is released

*) profile - added ability to monitor cpu usage per core;
IMHO it would be better to change current drop down list with standard filter, at least it would make much more sense on CCRs, where I would be able to tell how specific task (like firewall) is spread among the cores.
by Nissarin
Tue Dec 13, 2016 1:22 am
Forum: General
Topic: V7 ALPHA/BETA Testers needed?
Replies: 45
Views: 16672

Re: V7 ALPHA/BETA Testers needed?

Mikrotik has NEVER said 7.0 would be soon. They have always stated "when it's ready" I'm too lazy to look for it but I'm pretty sure I saw in some presentation that alpha should be released by the end of 2015/early 2016, of course that was unofficial information but combined with "th...
by Nissarin
Thu Dec 08, 2016 10:15 pm
Forum: Announcements
Topic: v6.38rc [release candidate] is released
Replies: 331
Views: 122479

Re: v6.38rc [release candidate] is released

*) winbox - fixed icons in disabled state (introduced in v6.38rc44); I see no change on my system (linux/wine), when I tried removing current winbox config/cache I noticed there were no files for rc45 and it seems winbox (re)creates "6.38rc44-763096560" instead. On another note, I've been...
by Nissarin
Wed Nov 23, 2016 4:48 pm
Forum: Announcements
Topic: v6.37.2 [current] is released!
Replies: 50
Views: 25948

Re: v6.37.2 [current] is released!

Nissarin - This is not related with this RouterOS version. When interface is used as standalone interface it is not the same thing as interface which is, for example, in bridge. That's not the issue here - the issue is that in/out-bridge-port rules doesn't work anymore: 1. If you add the rule from ...
by Nissarin
Wed Nov 23, 2016 12:14 pm
Forum: Announcements
Topic: v6.37.2 [current] is released!
Replies: 50
Views: 25948

Re: v6.37.2 [current] is released!

Originally I noticed this on another device but I've made some test with clean RB2011: [admin@MikroTik] > /interface bridge add [admin@MikroTik] > /interface bridge port add bridge=bridge1 interface=ether10 [admin@MikroTik] > /interface bridge settings set use-ip-firewall=yes [admin@MikroTik] > /ip ...
by Nissarin
Fri Jul 08, 2016 2:57 pm
Forum: Forwarding Protocols
Topic: Bgp blocklist to prevent dos on 1 ip?
Replies: 21
Views: 5317

Re: Bgp blocklist to prevent dos on 1 ip?

{         :local addrlist [:toarray ""]         :foreach i in=[/ip firewall address-list find where list=bgp-blackhole] do={                 :local addr [/ip firewall address-list get $i address ]                 :local addrstr                                          :if ([:typeof $addr]...
by Nissarin
Mon Jun 27, 2016 12:15 am
Forum: General
Topic: Suggestion: more friendly and intuitive Firewall in Winbox
Replies: 33
Views: 6925

Re: Suggestion: more friendly and intuitive Firewall in Winbox

First, any change you've suggested would break a lot of existing scripts, make various examples obsolete and I even don't want to imagine what would happen when you would try to upgrade (or worse - downgrade) machine running complex fw system. Now then, combining various fields into input/output sou...
by Nissarin
Thu Apr 28, 2016 6:11 pm
Forum: Announcements
Topic: v6.36rc [release candidate] is released, wireless-fp package is discontinued!
Replies: 295
Views: 106762

Re: v6.36rc [release candidate] is released, wireless-fp package is discontinued!

TLDR: Perhaps it would be more consistent to rename the list to zones and move it under firewall prefix, i.e. /ip firewall zones. Long story: The name 'list' is not that bad but the command 'interface list' suggest something different than it should really do in this case (like list of all interface...
by Nissarin
Wed Apr 27, 2016 6:39 pm
Forum: General
Topic: Queue parent - global vs specific interface
Replies: 0
Views: 864

Queue parent - global vs specific interface

Is there any difference (like CPU/core utilization) when using specific interface instead of catch-all global ? Looking at the flow diagrams alone there shouldn't be any but since global is essentially artificial interface one can expect some kind of overhead, unfortunately after some digging on the...
by Nissarin
Sat Apr 23, 2016 1:57 am
Forum: Announcements
Topic: v6.36rc [release candidate] is released, wireless-fp package is discontinued!
Replies: 295
Views: 106762

Re: v6.36rc [release candidate] is released, wireless-fp package is discontinued!

Are you speaking for Mikrotik as an authority of what will, and what won't lock up? Or should I just roll the dice? :? If I ran a company like Mikrotik, I wouldn't want people to think that my product might include "deadly bugs". :shock: MT might not be rock solid and probably never will,...
by Nissarin
Wed May 13, 2015 4:06 pm
Forum: Forwarding Protocols
Topic: BGP Community Priority
Replies: 12
Views: 3189

Re: BGP Community Priority

If you want to balance traffic somewhat your only choice is to play with prepends, both on your side and your isp side (via communities). Local preference is an "absolute" value, i.e. if there are multiple ways to access remote network, path with highest preference will always be selected,...
by Nissarin
Mon Apr 20, 2015 4:18 pm
Forum: General
Topic: v6.28 will be released this week!
Replies: 72
Views: 27098

Re: v6.28 will be released this week!

Yes I did try that as well (Both on and off configurations). In theory that should only affect the media flow though, and not registrations correct? My issue is with initial registrations not even happening. I had similar issue when I replaced my Linux based gateways with CCR and it helped. It's ma...
by Nissarin
Sun Apr 19, 2015 2:54 pm
Forum: General
Topic: v6.28 will be released this week!
Replies: 72
Views: 27098

Re: v6.28 will be released this week!

@jdog
Have you tried disabling SIP direct media in firewall settings ?
by Nissarin
Sun Apr 05, 2015 1:13 am
Forum: Forwarding Protocols
Topic: What BGP setups need to be optimized
Replies: 57
Views: 31999

Re: What BGP setups need to be optimized

Anyway to Bind more cores to the routing processes? Currently see only core dealing with this... would like to see more CPU for this. If I remember correctly from the presentation about v7, the way routing (at least some parts of it) is implemented in Linux makes it impossible to take advantage of ...
by Nissarin
Tue Mar 17, 2015 5:10 pm
Forum: Forwarding Protocols
Topic: What BGP setups need to be optimized
Replies: 57
Views: 31999

Re: What BGP setups need to be optimized

* how many peers; * how many routes in routing table; 2x full bgp feed * is there also OSPF,MPLS, VPLS, RIP etc running on the router; Not at the moment * what are the hardware specs; CCR1036-12G-4S * are there routing filters; ~15 per peer (in/out) - basic filtering + prepends * average BGP update ...
by Nissarin
Fri Mar 06, 2015 2:32 pm
Forum: Forwarding Protocols
Topic: Transition to routed (MPLS based) network - sugestions ?
Replies: 6
Views: 2887

Re: Transition to routed (MPLS based) network - sugestions ?

I'm not really concerned about clients switching between APs, even now they can't do it in our network. What I want to avoid is having some stale entries polluting the routing table, I can think of a few ways to solve it using scripting but it's 'itchy'. Right now the DHCP server have the ability to...
by Nissarin
Thu Mar 05, 2015 3:22 pm
Forum: Forwarding Protocols
Topic: Transition to routed (MPLS based) network - sugestions ?
Replies: 6
Views: 2887

Re: Transition to routed (MPLS based) network - sugestions ?

I've personally done the proxy-arp thing and it is very good at causing a single supernet to appear in multiple locations as if it were a flat network, but in reality being a routed backbone. I routinely added the same "default GW" address and broadcast address to a loopback interface on ...
by Nissarin
Mon Feb 23, 2015 4:43 pm
Forum: Forwarding Protocols
Topic: Transition to routed (MPLS based) network - sugestions ?
Replies: 6
Views: 2887

Transition to routed (MPLS based) network - sugestions ?

Hi Recently I've decided to finally start moving our wireless infrastructure from good old bridged network to something more complicated but also more secure and performant. After digging through couple of topics on forum and elsewhere my current plan looks as follow: - network nodes running MPLS/OS...