MikroTik

karwos

The OP probably did not make a good backup of the original machine, but rather made a "clone" and used that. This clone has a different MAC address and won't accept the same license. Instead he should have shutdown the machine, copied its files, then power back on and keep the copied file...

karwos

Hello, CHR is useless for disaster recovery scenarios. Imagine you have nice backups made weekly or daily.. stored VM images on some external SAN. On disaster recovery, You can restore image using just one click. No, no - not with Mikrotik. After restore licence will be set to FREE (1mbit tx cap on ...

karwos

ESXi 7.0 introduced long-waiting Watchdog Timer. However, it needs to be supported ('kicked' by guest os), else Guest will be constantly rebooted.
This is really needed feature, as long as CHR tends to just hangup during high througphut conditions.

Thanks !

karwos

Observe port errors for collisions, late collisions and deferred packets.

Mikrotik swos have great stability problems.
For example, autonego fallback to halfduplex.
After some time whole switch goes offline (mgmt)

karwos

Any chances to get either 1. Snmp Traps for port link up/down event 2. Link up/down counter 3. Not dreaming of rx/tx errors/drops traps (like rmon) Simple to implement but... will mikrotik consider adding that? I know swos is simple, but cmon - how to run professional network on such limited softwar...

karwos

Seems devs R still looking...

karwos

Dont even think of chr. https://forum.mikrotik.com/viewtopic.php?t=148310 "Hello, TSO & LRO are disabled on virtual Ethernet drivers since 6.41rc14. Our devs are looking possibility to fix TCP connection offloading issue." It simply breaks end2end connectivity by reassembling tcp conns...

karwos

It would be big step forward - adding sr-iov drivers. They are regular ethernet drivers, so if MT can handle that out, I think baremetal x64 ROS dream would come true.

karwos

In SwOS? Yes, i know it is avaiable in ROS, but I dont see it nowhere in SWOS.

Xan You post screenshot and tell me whixh device does have it?

I know swos have diffrences between devices but...

karwos

In the end, all traffic is handled by specialised switch chip. Its just the way how HW registers of such specialises chip is configured (vlans, speed, acls, port isolations), but also way how administration os done (snmp, routeros), personal preferences. Routeros is more complex, but also can be con...

karwos

I think it's most missing feature, so port flaps events are much harder to diagnose.

Please consider.

karwos

"Hello,

TSO & LRO are disabled on virtual Ethernet drivers since 6.41rc14. Our devs are looking possibility to fix TCP connection offloading issue."

karwos

Hi, It's been 2 years now and problem is not fixed (it was reported problems w/ MPLS). I have ESXI 6 box. ESXi have disabled following flags: Net.Vmxnet3SwLRO Net.Vmxnet3HwLRO And in general, all things related to TSO/LRO, software emulation, etc. I can verify this approach in esxcfg-info -n | less ...

karwos

It uses hashing: Source Address, Destination Address, Protocol, Source Port, Destination Port

That is if you are talking about IPv4

Then why single tcp connection during transfer gets randomly swapped between nexthops ?

karwos

How ECMP nexthop is calculated in Mikrotik implementation? Does it hash src addr/dst addr/ports ? Or other method ? I have tested and single TCP connections and it get switched during transfer between interfaces, so looks like it's like some round-robing algorithm not related to identified flow. Is ...

karwos

Guys, disable conn tracking and problem will gone.
It's been known for a long time. It dies once DDOS kicks in. They not fixed that, but I can confirm disabling conntracks not causing CPU to go offline and machine halt.

karwos

How ECMP nexthop is calculated in Mikrotik implementation? Does it hash src addr/dst addr/ports ? Or other method ? I have tested and single TCP connections and it get switched during transfer between interfaces, so looks like it's like some round-robing algorithm not related to identified flow. Is ...

karwos

Yes, we know 5.x is legacy systems, but since they were extremely stable, we secured them well and held upgrade process, seems will need to little speedup that. Don't use Winbox v3.11 with v5.x systems. They aren't properly closing Winbox sessions and when you open users->active session you will get...

karwos

Okay Now we're confused, we double checked the download link on https://mikrotik.com/download and the link for "version 2.8 for CRS328-24P-4S+" links to the https://download2.mikrotik.com/swos2/css328p/swos-css328p-2.8.bin CSS version ? Not sure if this is a fluke for not. But since the u...

karwos

Already tried that 3 times, waiting increasingly amounts of time 30 sec, 5 mins and 30 mins. Still no access to the gui. After upgrade to v2.8, switch goes from "static IP" to "DHCP with fallback", - looks like a bug. so put DHCP server on top of swtich and use that dynamic assi...

karwos

Hi, it's nice that you added SNMP for optical table. However, I couldn't get TX and RX power for CSS106. I can see all SFP info in webinterface, but in snmp i can get all values (bias, temperature, interface name, wavelength) but no TX/Rx Power. The OID i use for temperature is 1.3.6.1.4.1.14988.1.1...

karwos

Is there any way to fix that damn bug?
DDM read works fine for other Mt products (crs106), but for crs125 i have to physically re-insert module (after switch bootup).. after that, DDM is readen ok...

karwos

Same here, on CRS106-all OK.
On CRS125 works only if you re-insert SFP module after CRS bootup. try it and let know about results.

karwos

Hi, I am *supposing* bug with rp_filter=loose option. From time to time, I am loosing connectivity with one of peering partners. Thats not L2 problem, I can refresh, resend routes, i see established session and everything seems to be OK. However, i don't see RX traffic on that interface (besides of ...

karwos

Disable conntrack

karwos

My experience of new NV2 implementation: 1) Overall throughput increased, that's true. Previously, as I look on graphs on 2 test APs it didn't reached 40MBits. Now can reach 85mbits easily. 2) However there is some problem with TDMA timing. For example, let run btest between AP with 6.42 and some 2 ...

karwos

Does 5.26 to 6.41 upgrade go without problems? Jumping 43 versions ahead with MAJOR change of bridge and switch implementations? Brave move.

5.26 to 6.40 - no problems, Mr Smartie

karwos

SXT bricked after 5.26 upgrade to 6.42
Please withdraw this release or add some warning on top.

karwos

Phone: huawei p9 lite Problem: slow Wlan throughput and packet loss Reported: year ago :D Fixed: in v6.43rc3 Speedtest before upgrade: 19mbit / 39mbit After upgrade: 89mbit/89mbit Wondering if "auto" channel problems fixed too. It would be prefferable to merge that fix to current/bugfix br...

karwos

I think it may be worth to proceed with extensive security audit of Mikrotik BGP implementation... It's not Quagga! Also, I can see some clear misunderstanding. BGP is a routing "control" protocol. It does no forwarding of packets so changing/upgrading BGP engine will have no effect on th...

karwos

Bump:
When router will eventually recover from lock-up (with holdtimer expired message), even if it's receiving traffic from bgp - it's not forwarding that traffic.

Conclusion: whole routing package is going to die.

karwos

I think it may be worth to proceed with extensive security audit of Mikrotik BGP implementation...

karwos

Quagga Security Note 2018-1114 ============================== https://www.quagga.net/security/Quagga-2018-1114.txt Affects: -------- - Likely to affect all versions of Quagga Summary ------- The Quagga BGP daemon, bgpd, can double-free memory when processing certain forms of UPDATE message, containi...

karwos

Quagga Security Note 2018-1975 ============================== https://www.quagga.net/security/Quagga-2018-1975.txt Affects: -------- - Quagga version 0.99.9, and all later versions - All versions, if the "override-capability" neighbour option is set (not the default). Summary ------- The Q...

karwos

If Mikrotik use Quagga fork, then it may be worth fixing, cos I'm experiencing DenialOfService since last 48hrs on BOTH , independant bgp routers... Still diagnosing though. BGP Flaws Patched in Quagga Routing Software Friday, 16 February 2018 Administrator Security News 0 Comments Several vulnerabi...

karwos

If anyone knows, I would be thankfull for the answer.

karwos

Does mikrotik use Quagga ? BGP Flaws Patched in Quagga Routing Software Friday, 16 February 2018 Administrator Security News 0 Comments Several vulnerabilities that could lead to denial-of-service (DoS), information disclosure, and remote code execution have been patched this week in the Quagga rout...

karwos

This have to be related with malcious BGP UPDATEs received. I have observed Slave server now and it looks like this: 1) It takeover traffic, when Master goes down 2) Traffic flowing NORMALLY through two BGP peers 3) It gets UNRESPONSIVE for 10-15 seconds, while i see Traffic with 1st BGP peer is 0by...

karwos

It have to be traffic related, there is no other f**g way. Master server crashed 19:06:59 Then, Slave took over traffic and crashed 19:07:04 I have tried 6.40.6 - no luck Testing RC with open-vm-tools now... is there anyway to enable kernel debugging and intercept the kernel panic stack calls ???

karwos

Any clue. Locking up on both machines. VMWare log: 2018-03-13T14:32:22.381Z| vcpu-0| I120: Vix: [35317 vmxCommands.c:7739]: VMAutomation_HandleCLIHLTEvent. Do nothing. 2018-03-13T14:32:22.381Z| vcpu-0| I120: MsgHint: msg.monitorevent.halt 2018-03-13T14:32:22.381Z| vcpu-0| I120+ The CPU has been disa...

karwos

+1
Chr lockup getting to be more and more frequent and annoying

karwos

Hi! As i stated yesterday, we had hardware failure of BGP machine yesterday. I have restored BGP image on second machine. Same ESXi version, SAME hw configuration, same BGP CHR Mikrotik Image w/configuration. It worked stable since yesterday, today it hanged up and got this message in ESXi events: &...

karwos

Hi Mikrotik Team, Today i had another blackout, and needed couple of long minutes to work it out what exactly happened. However, this time I cannot 100% blame Mikrotk, anyway something might be done *better* so other might have their ass saved in future. So, I have two BGP servers: 1) BGP1 2) BGP2 B...

karwos

i tested the above rules with hotspot login page. when i click rapidly (F5) refresh in chrome at login page i can see that mikrotik cpu usage was 20-30%. the above rules didnt filter this. when i was rapidly pressing a bookmark http link (http://www.imdb.com) at chrome the cpu usage was normal 5-10...

karwos

Hi R1CH, Thanks for your reply. Everytime this happens I block the MAC in Hotspot > IP-Binginds. So it happened again today and here are some informations: http://prodatastelecom.com.br/assets/images/attack2.png http://prodatastelecom.com.br/assets/images/attack3.png Sometimes it does not take 100%...

karwos

Guys, I think CHR should be kept clean, as it is now. It's damn small, and you can backup and restore your vm image in disaster recovery scenario quickly. Thats virtual router, not full blown linux machine. Thats why routeros (beside its bugs, sometimes) is rock solid. Adding too much stuff will en...

karwos

Hi, we have installed a CHR realease of rouuteros on a vmware VM on a dedicated host phisical machine in our datacenter. It acts as pppoe server on our network, 1850 subscribers active. On peak hours, subscribers have packet loss when they ping hosts on the internet (se when they pass through the p...

karwos

Hi, we have installed a CHR realease of rouuteros on a vmware VM on a dedicated host phisical machine in our datacenter. It acts as pppoe server on our network, 1850 subscribers active. On peak hours, subscribers have packet loss when they ping hosts on the internet (se when they pass through the p...

karwos

Guys, I think CHR should be kept clean, as it is now. It's damn small, and you can backup and restore your vm image in disaster recovery scenario quickly. Thats virtual router, not full blown linux machine. Thats why routeros (beside its bugs, sometimes) is rock solid. Adding too much stuff will end...

karwos

@TomjNorthIdaho Uplink/Downlink ratio support doesn't work. Test many times in p2p & p2mp scenario 0 extra download ratio for clients only limit upload too 20%. 0 extra download speed for clients NV2 MT 6.40 vs 6.38.5 no matter dynamic or fixed ratio. Yeah, it will limit UP speed to 20%, becaus...

karwos

I am running two BGP servers and they are just work perfect in CHR. what traffic do you have on them? BGP without full view works perfect on any RB hardware :) total ~800k routes CHR 6.37.5 vmxnet3 driver and PVSCSI driver Connection tracking ON, few queue trees, 1k simple queues, couple of firewal...

karwos

You should create a direct cable link between the two routers and allow them to forward packets between each other directly. This would fix your problem because when VRRP comes up, the newly-booted router could pass traffic through the well-established router while its routing table gets populated ...

karwos

Change operator. they should route a subnet for you - this is correct way.
But in this case i think VLAN is only way to go.

karwos

Guys is there any real *benefit* from running CHR in x86_64 native environment? I know VM puts some overhead, but c'mon, that's not 2006, It's 2017 when most of hardware, including CPUs and NICs have hardware virtualization support. Overhead is small nowadays, I am running two BGP servers and they a...

karwos

Hi, I am having two BGP servers in VRRP cluster, Both of servers having established BGP sessions to upstream, and prepending paaths according to VRRP situation. This work smooth and with 100ms vrrp interval, outage is no loger than 300ms. I am using preemption, because 1st server is always prefered....

karwos

Hi, i have setup a SNMP trap in various of CRS switches. However, traps are reported only in slave ports. Master ports remain active, even after disconnection of cable. So please change behaviour, because it is now useless on master ports - no SNMP trap becoming because link state becomes still &quo...

karwos

After upgrading to v2.3 i could disable flow ctrl on sfp normally.
Weird, no any info about that in changelogs.

karwos

Set WLAN channel manually.
Auto have known problems, MT dont hesistate to fix that.

karwos

Has anyone tried swapping in a CRS326 for one of these locking up switches. We have a CRS226 that locks up every few days, and no firmware changes have seemed to help the problem. I think we are just going to have to bite the bullet and get something else. I noticed the 326 has a different chip in ...

karwos

Problem showed up again today,
I have rebooted switch with System->Reboot (so no power-off, power-up), and all back online again.
So it must be SW problem

karwos

Bump ....

karwos

Bad blocks 0%
Unit still work flawlessy, because eth wasn't reconnected

karwos

Any way to disable flow control on this model?
I can only disable flowctrl on ports 1-5, no way doing that on SFP port.

Any clues?

karwos

If there is speed mismatch like 1gbit to 100mbit links, and flow control is enabled, L2 device may send pause frames and that may decrease network throughput.

Avoid using flow ctrl, tcp handles that stuff best.

karwos

The unit was tested on-site, and after founding the fault it was moved to lab, where we used diffrent poe, diffrent cable (1meter of 5e patch cable), diffrent power supply. Also, unit was reset to factory defaults - same problems. We moved it back on-site and it works now around 8 hours. No single t...

karwos

Long time no bugs :D Welcome again ! So here we are, Groove A-52HPn r2. Tested firmware versions: 6.34.3, 6.37.5 (stable), 6.38.1, 6.39.1 Tested routerboard version: factory (3.33), current (3.38) Wlan and ether1 bridged, RSTP is disabled. Loop protection is disabled. Device works only first time af...

karwos

We just left 2 big Mikrotik swamps, and entered another one :) Situation: CRS125-24G-1S, v6.37.3, latest Routerboot firmware (3.33). Acts as a core router, ports splitted on 3 partitions, first partitions use VLANs etc. Today it had simply locked up . But it wasn't regular lockup, It was normally re...

karwos

Use pvscsi controller instead legacy IDE emulation mode.

karwos

Router migrated to 6.37.5 and applied P1 licence
Seems packet loss problem were fixed
Thx

karwos

I know it's illegal, but i've reverse enigineered Mikrotik :D And I can confirm, all this Nova stuff - they do care about security, most of intermediate libs/sw is writted by them in C++, and finding exploits surely is possible, but TAKES TIME AND MONEY, unlikely open-sourced UBNT products, as we sa...

karwos

The RPS is software IRQ load balancer. It's helpful when your ethernet card have 1 Rx/Tx queue and IRQ, and you wanna spread incoming packets through 4-8-16 cores. If you use ESXi and vmxnet3, which have 4 TX innterrupts, and 4 RX interrupts, just disable RPS, and use multi-queue-ethernet default fo...

karwos

I WANT DESIGN AND CONSTRUCT HOUSE BUT I DONT KNOW ANYTHING ABOUT IT.

SHALL I USE CONCRETE OR WOOD ??

SHALL I MAKE PROJECT FIRST , IN PAINT MAYBE?

karwos

EU idiots ... they know better, what is good to us. Just wait and see how this EU zone goes more and more fragmented. Can't wait to see it. Thanks god we will always have CIA exploits ;-) at least one bright side of it Besides of it, market don't like empty spaces. Unlockers and 3rd party tools and ...

karwos

Because every day we find new critical bugs, we started to pray Saint Rita every time before logon to winbox - hope it will help, beacuse even basic changes can cause kernel oooooooooooooops or other bugs... we are too afraid doing anything on router, because ANYTHING can cause ANYTHING unpredictab...

karwos

This is known problem by us too, and there is atleast 2 problems with WLAN in this product: 1. Compatibility problems (connect huawei p9 lite and performance is DEAD, solution is to use 20mhz channel width) 2. When using frequency=auto, there is sometimes performance problems too, network is visible...

karwos

Bump...

karwos

Can anyone actually confirm these chipsets works with V6 tree?
We're scheduling update plan from v5, however I heard there is lots of problem with packet loss on this chip and V6

Also: 82574l, 82579 - any feedbacks?

karwos

you can spin up any number of CHR trial instances, this is the beauty of CHR. It needs no license and it is virtual. You are right, this is big pro of CHR. However I meant for example x86 version. For example, we've found simple queues bug last days. v5, Router keeps rebooting, sometimes each hour,...

karwos

I am not dare to test it until confirmed and put stable.
Everyday we find new nasty bugs. Moving to each new version is too big pain.

karwos

Dear mods,
the thread is marked as a [FIXED] one,
however at moment I do not see any new version released with fixed problem.
I still need to use P unlimited trial licence.

karwos

Just wanted to beware, and inform everyone (maybe with similiar problem) about some really bad bug in Mikrotik CHR licencing. We have launched new BGP CHR server instance (v6.37.1) in December. We've obtained 60 days P unlimited licence. Everything has been working like a dream during trial period. ...

karwos

Hi. I've been using Mikrotik hAP lite for quite a while now, maybe year. I've used it with with various devices, some G-band, some N-Band, some 150mbs rated, some 300mbs rated. In the past, experienced some problems with auto-channel selecting, however after manually selecting channel all back's to ...

karwos

[ As I mentioned possibly modules them selves are acting up sometimes. System can stop attempting to read ddmi if there are to many failed attempts. These modules DDM works perfectly in other manufacturer equipment (i.e. DASAN networking). I can send you one module for tests, or make some tests/deb...

karwos

Please FINALLY FIX SFP DDM INFORMATION READING On CRS125, there is nothing shown in SFP tab... HOWEVER i've successfully readen DDM data (and RX/TX power was updated few times a seconds too) today on CRS125. How it's fixed? Run CRS125 without SFP module. Tick system restart, while restarting PLUG S...

karwos

Please FINALLY FIX SFP DDM INFORMATION READING On CRS125, there is nothing shown in SFP tab... HOWEVER i've successfully readen DDM data (and RX/TX power was updated few times a seconds too) today on CRS125. How it's fixed? Run CRS125 without SFP module. Tick system restart, while restarting PLUG SF...

karwos

CRS125 : after installing 6.34.1 and "RESET CONFIGURATION", device is being put into ROUTER MODE and ether1 is gateway (even not SFP).

Previous behaviour was: bridge mode (hw switch). As for switch, I think it should defaultly act as a switch, not router.

Greetings

karwos

When set AUTO in channel mode, sometimes all going totally wrong. Wireless performance about 0.5 MBIT, ping timeouts, etc. COmplelty mess. After changing channel to manual (2412,2450 or any) all going back to normal (50-90mbit). This is surely not a noise problem - i've tried all of channels, and al...

karwos

Dear support, FIRST of ... SFP DDM has gone in this (or some of previous) version. I could read DDM data normally from my SFP modules (AscentOptics OEM, branded and popular in Poland like OPTON, OPTEC, etc) from other devices, like : Transceiver type: SFP or SFP+ Transceiver: 1000BASE-LX Length: 3 K...

karwos

I bet 100% this is same bug, experienced the same, however fixed it :

http://forum.mikrotik.com/viewtopic.php?f=2&t=98272

Maybe check it out, it's something wrong with MAC mechanisms

karwos

bump ...................... c'mon guys, if you are really too lazy to check this, get me access to kernel and OS and i will debug and find out this for you ...

karwos

I've encountered several DDOS attacks in my network. The more interesting fact was that attacking device was Mikrotik RouterOS itself. I've successfully reproduced problem and confirmed that causative device was MT router... . Configuration: RouterOS v5.20 on x86 platform, around ten gigabit etherne...

karwos

bump ...

karwos

Queue work only on layer 3 traffics, So don't work on bridge ports.
Queue don't limit traffics forward through bridge ports.

I though "interface queue" is last queue before calling hw transmit - so it should work on L2 as well. any comment from MT engineers?

karwos

Add new attributes to PCQ classifier: dst-mac-addr, src-mac-addr IP working only on plain IP packets (etherType=0x800), when device working in bridge mode and passing VLAN, VLAN-in-VLAN, PPPoE packets - it's not properly placing packets in queue (they are bpassed). Solution is to make few other chec...

karwos

Hi, seems current PCQ classifiers (dst-ip-addr, src-ip-addr) working only on etherType=0x800=ip packet when device working in bridge mode and bridging packets, when it's attached QUEUE on INTERFACE, it's only classyfing plain IP packets. Packets with etherType=pppoe sesssions, or packets with VLAN h...

karwos

Considering following environment: 1) There is some Routerboard device, working in bridge mode 2) On Interface Queues, is attached properly working PCQ queue Then, how pcq-dst-addr or pcq-src-addr qualifier works? Considering, through bridge are bridgeg both plain-IP packets (etherType 0x800) and IP...

Search found 96 matches