Community discussions

Search found 23 matches

by bjornr
Thu Sep 13, 2018 3:09 pm
Forum: General
Topic: Port mirroring not working with CRS326-24G-2S+
Replies: 1
Views: 374

Port mirroring not working with CRS326-24G-2S+

I'm not able to get port mirroring working on a CRS326-24G-2S+. The unit runs 6.43 and the new bridge VLAN setup. [admin@coreswitch] /interface ethernet switch> print Flags: I - invalid # NAME TYPE MIRROR-SOURCE MIRROR-TARGET SWITCH-ALL-PORTS 0 switch1 Marvell-98DX3236 none none [admin@coreswitch] /...
by bjornr
Mon Sep 10, 2018 11:35 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 28939

Re: v6.43 [current] is released!

Interface speeds seem to be set explicitly after upgrading, is this related to the SNMP speed report changelog entry? I haven't tried connecting an interface at other speeds yet, but can I assume that this setting, while a part of /export, will change accordingly? /interface ethernet - set [ find de...
by bjornr
Tue Aug 21, 2018 7:55 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 31029

Re: v6.42.7 [current] is released!

Why did 2 fans appear in the last print? For some reason, fan speed is only shown in "System Health" when the fans are running. So during the last screenshot the fans were running, but in the other two the fans were off. A curious side effect of this is that (at least with Linux and Wine) the "Syst...
by bjornr
Tue Aug 21, 2018 5:29 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 31029

Re: v6.42.7 [current] is released!

After upgrading to 6.42.7, my CRS328-24P-4S+ logs increased CPU temperature from SNMP readouts. [...] Tried downgrading to 6.42.6, and CPU temperature is shown as 8-10 degrees lower than with 6.42.7 - both in System -> Health and with SNMP. 6.42.7 before downgrade: 6.42.7.before.png Downgraded to 6...
by bjornr
Tue Aug 21, 2018 8:43 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 31029

Re: v6.42.7 [current] is released!

After upgrading to 6.42.7, my CRS328-24P-4S+ logs increased CPU temperature from SNMP readouts. The attached graph shows a significant change in CPU temperature after upgrading (at around 23:00). The switch's CPU load (also from SNMP) has not increased. Were there any changes to the SNMP output for ...
by bjornr
Tue Dec 12, 2017 12:00 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123797

Re: v6.41rc [release candidate] is released! New bridge implementation!

Sure thing! /interface bridge add fast-forward=no igmp-snooping=no name=bridge priority=0x1000 protocol-mode=none vlan-filtering=yes The docs I referenced uses pvid=1 for the bridge and for holding the VLANs, so my bridge sets no pvid. Instead, I've assigned the IP directly to a VLAN Thanks bjornr,...
by bjornr
Mon Dec 11, 2017 2:52 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123797

Re: v6.41rc [release candidate] is released! New bridge implementation!

Sure thing! /interface bridge add fast-forward=no igmp-snooping=no name=bridge priority=0x1000 protocol-mode=none vlan-filtering=yes The docs I referenced uses pvid=1 for the bridge and for holding the VLANs, so my bridge sets no pvid. Instead, I've assigned the IP directly to a VLAN: /interface vla...
by bjornr
Mon Dec 11, 2017 1:42 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123797

Re: v6.41rc [release candidate] is released! New bridge implementation!

I was under the impression that one of the benefits of the new setup is being able to apply VLANs to the bridge and not to a physical interface without loss of speed. For what it's worth, a config similar to viewtopic.php?t=125251#p616970 works quite OK in my lab network.
by bjornr
Sat Nov 25, 2017 12:59 am
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 123797

Re: v6.41rc [release candidate] is released! New bridge implementation!

Upgrading a CRS326-24G-2S+ to 6.41rc56 broke DHCP relaying through it, the requests are passed through but the responses (OFFERs) are never seen by the client. Reverting to rc52 fixed this issue. Don't know exactly what caused this, but if it helps identifying the issue I'm employing VLANs, bonding ...
by bjornr
Tue Nov 10, 2015 7:22 am
Forum: General
Topic: 6.33 - strange packets outgoing
Replies: 13
Views: 1515

Re: 6.33 - strange packets outgoing

[quote="onlineuser"]Yes, it seems to be the same problem. How did you sniff the URL which is always treid to open?[/quote] I simply set up DST-NAT firewall rules to send the request to my laptop, with a small web server running on it. The important part was to let the devices receive a response to t...
by bjornr
Mon Nov 09, 2015 9:52 pm
Forum: General
Topic: 6.33 - strange packets outgoing
Replies: 13
Views: 1515

Re: 6.33 - strange packets outgoing

[quote="onlineuser"]Yes, but I did not change anything from the 6.32.3 up to 6.33. But why will the packets out from my public IP to port 169.254.169.254:80?[/quote] These seem to be leftovers from autoconfiguration, possibly from testing. The traffic is requests for an ssh key and a hostname. If yo...
by bjornr
Mon Nov 09, 2015 8:54 am
Forum: Announcements
Topic: 6.33 version released!
Replies: 140
Views: 34254

Re: 6.33 version released!

bjornr and ckleea would be nice if you sent support output files to the support. Create the file after your attempt to start your image file. Also, while at it, check if you have kernel and initrd files supplied for the configuration. I just submitted the supout from one of the devices. Please note...
by bjornr
Mon Nov 09, 2015 1:29 am
Forum: Announcements
Topic: 6.33 version released!
Replies: 140
Views: 34254

Re: 6.33 version released!

[quote="bjornr"]After upgrading I see a lot of unsolicited HTTP requests towards 169.254.169.254:80 from all devices, on most of which no scripts or scheduled jobs are running. The request is rather persistent until the device receives some kind of answer, and happens (at least) after reboots. This ...
by bjornr
Mon Nov 09, 2015 12:58 am
Forum: Announcements
Topic: 6.33 version released!
Replies: 140
Views: 34254

Re: 6.33 version released!

After upgrading I see a lot of unsolicited HTTP requests towards 169.254.169.254:80 from all devices, on most of which no scripts or scheduled jobs are running. The request is rather persistent until the device receives some kind of answer, and happens (at least) after reboots. This is the HTTP requ...
by bjornr
Thu Oct 29, 2015 1:49 pm
Forum: General
Topic: DMZ with public IP address
Replies: 4
Views: 1385

Re: DMZ with public IP address

Everything is checked by the firewall. If you don't want that, you will need to add some firewall rules (early!) that makes the traffic pass through unchecked - something like accepting everything that comes in on interface1 and goes out on interface3, and vice versa. You could of course remove all ...
by bjornr
Thu Oct 29, 2015 10:58 am
Forum: General
Topic: DMZ with public IP address
Replies: 4
Views: 1385

Re: DMZ with public IP address

[quote] The DMZ port seems to be working well, however, when locking down the router, I'm noticing some traffic coming through the firewall. The traffic is: forward: in 1, out 3. There is nothing in the log about it coming from port 3 and going out 1, which is what I'd expect. I also wouldn't expect...
by bjornr
Thu Oct 08, 2015 12:05 am
Forum: General
Topic: Blocking icmp blocks Internet access
Replies: 14
Views: 3152

Re: Blocking icmp blocks Internet access

> /ip firewall filter add chain=input protocol=icmp action=drop in-interface=WAN > > If I use this command it blocks all internet access from other routers that have internet access via this router Yes. ICMP is much more than ping, and by blocking ICMP in general you also block useful mechanisms. Yo...
by bjornr
Sat Sep 19, 2015 5:39 pm
Forum: General
Topic: problem in connect
Replies: 3
Views: 454

Re: problem in connect

When presenting a problem, you should provide the configuration in use. In your case you should show us the output from /ip export

Also, on your PCs that you expect to ping eachother, show the IP configuration (in a command prompt, use /ipconfig all)
by bjornr
Sat Aug 15, 2015 7:21 pm
Forum: General
Topic: Upload Issue !!
Replies: 1
Views: 552

Re: Upload Issue !!

1- what is problem with my router ? That's a bit difficult to say without more information. You should ask your ISP what they see, and you should use Torch on the interfaces to find out what is wrong. Also try to enable only one IP address (not three) on your router and see if that works better. 2- ...
by bjornr
Thu Aug 06, 2015 8:53 am
Forum: General
Topic: Calea sniffing rules
Replies: 1
Views: 848

Re: Calea sniffing rules

From http://wiki.mikrotik.com/wiki/CALEA: * sniff - generates a tzsp stream that can be directed to any Wireshark (Ethereal) server * sniff-target - IP address of the data retention server With your current (dulicated) rules, you submit the sniffed traffic to whatever exists on 192.168.1.222. You mi...
by bjornr
Tue Aug 04, 2015 7:43 pm
Forum: General
Topic: ROS 6.30.2 [Time problem with web proxy/error page]
Replies: 3
Views: 631

Re: ROS 6.30.2 [Time problem with web proxy/error page]

As you can see, the time zones are different.

I would guess that the error message from the proxy is given as GMT because of RFC 2616: "All HTTP date/time stamps MUST be represented in Greenwich Mean Time (GMT), without exception."

RFC 2616: http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html
by bjornr
Tue Aug 04, 2015 7:34 pm
Forum: General
Topic: Anyone know how to change this to the name i want?
Replies: 3
Views: 592

Re: Anyone know how to change this to the name i want?

You can't. The wifi analyzer app checks the MAC address of the AP, and looks up the vendor.

The same can be done with other online tools, e.g. https://www.wireshark.org/tools/oui-lookup.html