Community discussions

Search found 179 matches

by sri2007
Sat May 25, 2019 1:34 am
Forum: Forwarding Protocols
Topic: How to block neighbours Advertisment
Replies: 6
Views: 3164

Re: How to block neighbours Advertisment

:shock: yep you're right... seems like that allow rule that I've configured in my firewall is useless :( ; however there's a new way of blocking neighbors directly at the /ip neighbors discovery-interface, using interface-lists, the steps are first add a new list named as you want (deny-mndp, it's m...
by sri2007
Tue May 14, 2019 6:33 am
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 530

Re: Jumbo Frames, L2MTU mismatch with RouterOS crashing

No prob!! I think that this is the idea of the forum :) But, yes.. I can't believe it yet, it's been like a week that we did that change and the network has stay stable, interesting point here, I do have some GRE tunnels between cities, with a lower MTU and RoMON enabled before and it still was work...
by sri2007
Mon May 13, 2019 6:17 pm
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 530

Re: Jumbo Frames, L2MTU mismatch with RouterOS crashing

Hi everyone, or at least who read this before and had no idea about a solution; I think that we found the real issue, it was related to RoMON; we had that fixture enabled in our entire network for a long time (when we were using the default L2MTU) and it keeps running with the part of my network wit...
by sri2007
Thu May 02, 2019 11:37 pm
Forum: Forwarding Protocols
Topic: VLAN-interface on VRRP-interface not ping
Replies: 1
Views: 289

Re: VLAN-interface on VRRP-interface not ping

That's because your mixing concepts, a VLAN is in a layer2 domain, and VRRP is in layer3, what that means is that you can create different VLANs interfaces facing your switch, and configuring VRRP over the VLAN instead of the VLAN over the VRRP.
by sri2007
Thu May 02, 2019 11:35 pm
Forum: Forwarding Protocols
Topic: Routing on 2 WAN Interfaces
Replies: 2
Views: 422

Re: Routing on 2 WAN Interfaces

and i have Connection Tracking and setting Routing-Marks ...
And for some reason you haven't shown us any of that, so we have no idea what's happening...
:D x2!
by sri2007
Wed May 01, 2019 8:41 pm
Forum: Forwarding Protocols
Topic: Blocking/Allowing Subnets RIP
Replies: 2
Views: 376

Re: Blocking/Allowing Subnets RIP

I think that best way of achieving your goal will be deploy OSPF at your network, at redesign everything to /30 WANs. But, the main question here will be how will your remote CHRs be connected to your couple Central routers??
by sri2007
Wed May 01, 2019 8:37 pm
Forum: Forwarding Protocols
Topic: Create BGP communities [SOLVED]
Replies: 3
Views: 517

Re: Create BGP communities [SOLVED]

Hello, yes you can set communities using RouterOS easily, those can be done using route-filters, you can check that here:

https://wiki.mikrotik.com/wiki/Manual:R ... ng_filters

Summary version, there is a set-bgp-community & append-bgp-community that can work for you.
by sri2007
Tue Apr 30, 2019 5:46 am
Forum: Forwarding Protocols
Topic: 3 POP BGP with Failover across Wireless network
Replies: 1
Views: 289

Re: 3 POP BGP with Failover across Wireless network

Hello! I've configured that solution before ant it works, you'll need to set up iBGP inside your network and all of your Edge routers with a route reflector in the middle with OSPF as IGP and it can works, also you can try your scripts at EVE-NG or GNS3, that works for me when I have some weird idea...
by sri2007
Tue Apr 30, 2019 5:42 am
Forum: Forwarding Protocols
Topic: OSPF : Default Route Disappearing
Replies: 2
Views: 440

Re: OSPF : Default Route Disappearing

Hi!! I've tried that before too, same result, the default route suddenly disappear, I've changed that to a multi area solution without stub or nasa area type in the middle and everything went fine.
by sri2007
Tue Apr 30, 2019 5:38 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 584

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

Hi!! Seems like we're not able to use the export to a file either :( the result is truncated too.
by sri2007
Tue Apr 30, 2019 5:32 am
Forum: Forwarding Protocols
Topic: Valid router to use in a peering point
Replies: 6
Views: 623

Re: Valid router to use in a peering point

Hello!! I think that you should think at the forwarding traffic too, a CCR1009 can handle easily like 4Gbps of traffic if you disable the connection tracking and configure this router as an edge router only, which means BGP / OSPF (probably as the IGP) and that's it, it works really nice!! I've play...
by sri2007
Thu Apr 25, 2019 3:28 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

millenium7, if your WISP grows enough you'll see that an OSPF structured design combined with BGP is a great advantage, I've seen so many networks that grows in many directions became really unstable You can't always structure it the way OSPF wants you to due to its inherently restrictive enterpris...
by sri2007
Thu Apr 25, 2019 3:20 pm
Forum: Forwarding Protocols
Topic: How to implement Balancing PCC with OSPF network
Replies: 5
Views: 411

Re: How to implement Balancing PCC with OSPF network

Got you, then you won't be able to do a load balancing using OSPF or any other protocol between you and your providers, best solution will be PCC, or a most interesting design doing the load balancing based in nodes, like node a is going to be nated only by provider A; and if that goes down, that no...
by sri2007
Thu Apr 25, 2019 4:51 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

At only 7 sites in and 250 routes, we are already looking for a new solution before we grow out of control. The concept of Area0, no area-to-area communication (must go through area0) and all area's must connect to 0, no ability to summarize except at ABR's is just awful for WISP design where the n...
by sri2007
Thu Apr 25, 2019 4:38 am
Forum: Forwarding Protocols
Topic: How to implement Balancing PCC with OSPF network
Replies: 5
Views: 411

Re: How to implement Balancing PCC with OSPF network

Hi!, i don't think that OSPF is designed to be used between service providers, if you want to do that, we'll need more info to help you, basically two main questions; 1. Do you establish any BGP peer between your providers and you?? or 2. Do your providers assign you public IP addresses and your rou...
by sri2007
Thu Apr 25, 2019 4:33 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

No prob amt! Actually I don't have issues related to ECMP, I think that OSPF do the load balancing per connection, and I don't care if the traffic is symmetric (same interface in/out), in my tests the only inconvenience is when my customers need to to a classic bandwidth test using speediest.net, so...
by sri2007
Tue Apr 23, 2019 8:35 pm
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 530

Jumbo Frames, L2MTU mismatch with RouterOS crashing

Hello everyone! Hope you can help us, and I want to check if I'm wrong or the RouterOS has a bug (currently using 6.42.12 long-term) Our topology consists in like 350 routers deployed around the country, and it's working with OSPF (multitarea) + BGP; everything was going fine, except when we got the...
by sri2007
Tue Apr 23, 2019 7:55 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 966

Re: LAG 802.3AD slowness

It depends on the ccr1009 model. Not all shares the same block diagram

Enviado desde mi Mi A2 mediante Tapatalk
Got you! thanks!! I've tried that with the CCR1009-7G-1C-1S+ using the 6.42.12 long-term version.
by sri2007
Tue Apr 23, 2019 7:51 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

Hello Brough, answering your questions: Actually, we're handling like 200 wireless links (Airfiber 5XHD / AirFiber24X / Netmetal) deployed around the country, and found an interesting problem in RouterOS, that problem was caused by a L2MTU mismatch (I don't have the reply from the Mikrotik suport te...
by sri2007
Tue Apr 23, 2019 7:38 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

ECMP load-balancing works great too, it's my best solution to deploy a 20gig ring between two cities in the country, or even to aggregate some wireless links (using AirFiber 5xHD) to add them as a single port to increase the total throughput of that node. do you use any mangle rule while using ecmp...
by sri2007
Tue Apr 23, 2019 12:58 am
Forum: Forwarding Protocols
Topic: BGP Multihoming
Replies: 10
Views: 3145

Re: BGP Multihoming

The load balancing scenario that you're looking can be accomplish using those prepends (recommended by ahmadzai), but it can be done by publishing a most specific prefix by one provider and a summarized version of that by the other (as example: 1.1.0.0/24 advertised to ISP A / 1.1.1.0/24 advertised ...
by sri2007
Tue Apr 23, 2019 12:50 am
Forum: Forwarding Protocols
Topic: How to set OSPF cost on two routes on one port.
Replies: 1
Views: 218

Re: How to set OSPF cost on two routes on one port.

Hello, the best solution for you will be deploy different VLANs to connect each wireless link; so you'll need to configure the addressing into the VLAN interface directly and the OSPF cost will be attached to that vlan too.
by sri2007
Tue Apr 23, 2019 12:43 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 966

Re: LAG 802.3AD slowness

Wow, that's interesting, but I've done those bondings using the balanced-xor mode instead of 802.3ad using the first 4 ports of the CCR1009, that config works great it goes up to 3.5Gbps (real traffic) being forwarded between two Mikrotiks (CCR1009 + CRS326) -> that's because the lack of 10gig ports...
by sri2007
Tue Apr 23, 2019 12:36 am
Forum: General
Topic: Site to Site vpn (L2TP and OpenVPN)
Replies: 4
Views: 409

Re: Site to Site vpn (L2TP and OpenVPN)

Actually what sindy told you is true, L2TP & OpenVPN are two totally different protocols, so you'll need to chose one and configure the server and client with the perfect protocol for you, based in my experience, the best server is OpenVPN, it's easy to deploy, it's safe if you add the right SSL Cer...
by sri2007
Tue Apr 23, 2019 12:14 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1211

Re: Your experience with larger/diverse Area0 OSPF networks?

Hello guys!! I think that I'm the one who can help you, currently my network is like 350 routers which were deployed under the same backbone area, that network is actually moving like 30gbps of traffic in a Mikrotik only architecture (at the routing level), the entire BGP/OSPF network is actually mo...
by sri2007
Fri Apr 12, 2019 4:55 am
Forum: Forwarding Protocols
Topic: Default route and virtual link
Replies: 5
Views: 989

Re: Default route and virtual link

It is a known problem that virtual link does not work properly in ROSv6.
Hello mrz, do you know if the issue with virtual link is still present at the last version of ROSv6?
by sri2007
Fri Apr 12, 2019 4:47 am
Forum: Forwarding Protocols
Topic: BGP Distribute default route
Replies: 2
Views: 374

Re: BGP Distribute default route

Hello, you should be able to distribute the default route using the default-originate option at the peer configuration (if you want to distribute that default route every time then choose always; and if you only want to send that route only if the router receives the default route from a provider th...
by sri2007
Thu Jan 31, 2019 10:56 pm
Forum: Forwarding Protocols
Topic: Multihoming and connection tracking
Replies: 5
Views: 629

Re: Multihoming and connection tracking

Hi I currently have that network running successfully without issues related to asymmetric traffic flow. And totally I recommend you to disable connection tracking it will totally improve your router behavior, just be careful if you're using NAT or any firewall rule related to tracking (like matchin...
by sri2007
Sat Dec 01, 2018 10:28 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 2136

Re: ospf summarization help [SOLVED]

ohh, ok got it... so the main question here will be, does the router B have interfaces assigned to each area (I mean area 0, area 1 and area 2); or only each PowerBox has one interface at the backbone area and the other one in the default area? The rule is that only the ABR (area border router) or t...
by sri2007
Sat Dec 01, 2018 7:10 pm
Forum: Forwarding Protocols
Topic: Wrong priority for some routes in bgp
Replies: 4
Views: 839

Re: Wrong priority for some routes in bgp

Hi, can you help us bu posting the filters for each prefix? and the peer configuration too?
by sri2007
Sat Dec 01, 2018 7:02 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1277

Re: OSPF - BGP - Route Reflector

HI! I think that the best solution for you will be to work with both protocols in a recursive way, I mean, you'll need to set up OSPF for convergence and loopback distribution only, it won't announce any public IP on it, so you can set up an iBGP session between each router to the RouteReflector (us...
by sri2007
Sat Dec 01, 2018 5:44 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 2136

Re: ospf summarization help [SOLVED]

HI! if you're trying to summarize routes using OSPF, then the PPPoE server will be the ABR (area border router) or ASBR; but you'll need to standardize your subnets, as example PPPoE 1 will have clients at only one range (a.e. 172.16.0.0/24); then you can do a redistribute connected and the add a su...
by sri2007
Sat Dec 01, 2018 5:37 pm
Forum: Forwarding Protocols
Topic: Google Cloud Platform GCP - VPN - BGP [SOLVED]
Replies: 6
Views: 1697

Re: Google Cloud Platform GCP - VPN - BGP help [SOLVED]

hello! If you have already an IPSec Site-to-Site between Google and your Mikrotik then I think that you'll need to create some special routes using policies and rules to reach the remote server, theoretically I think that it is possible, however can you please post the configs at both sites?
by sri2007
Sat Oct 13, 2018 4:24 pm
Forum: Forwarding Protocols
Topic: Routing Traffic from one network to other
Replies: 5
Views: 674

Re: Routing Traffic from one network to other

Hi! I think that you'll need some routes between your devices, can you upload a simple diagram of your network? it may be easiest to understand your problem.
by sri2007
Tue Sep 11, 2018 7:30 pm
Forum: Forwarding Protocols
Topic: PPPoE and DHCP problems
Replies: 9
Views: 633

Re: PPPoE and DHCP problems

Hi, if you're experimenting that i'll check the layer2 domain of your network, is the PPPoE server and the DHCP server running on the same router ?
by sri2007
Tue Sep 11, 2018 5:07 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 768

Re: PPPoE Client on router A, physical connection to modem on router B

Question for you - for that 'switch stack', is it a single switch or a group of switches in some kind of failover configuration? I am using a single switch at this point, a CRS326, as I am still testing. The idea is to add failover once I get it working. Hi! Well, we've developed this design by usi...
by sri2007
Thu Sep 06, 2018 5:03 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 768

Re: PPPoE Client on router A, physical connection to modem on router B

Well that works, but I can tell a new solution for that issue, at the router add as many bridges as providers, then add only VLAN 1 to bridge 1, VLAN 2 to bridge 2 and so on, what’s the idea, if you set up a bridge interface you can manually change your MAC address so it will work too. I’m assuming ...
by sri2007
Wed Sep 05, 2018 5:41 pm
Forum: Forwarding Protocols
Topic: [SOLVED] IBGP over OSPF Single POP ISP Problems
Replies: 2
Views: 585

Re: [SOLVED] IBGP over OSPF Single POP ISP Problems

Hi! I thing that the best solution for you will be testing this new drawing, it's one of our most stable and scalable designs that we've done before. And checking your things: First one: Few things: 1: I had routing loops due to default route problems in ibgp, moving default routing to ospf sorted i...
by sri2007
Wed Sep 05, 2018 5:32 pm
Forum: Forwarding Protocols
Topic: GRE Tunnel Connected Successfully but Cant pint internal IP subnets
Replies: 2
Views: 1228

Re: GRE Tunnel Connected Successfully but Cant pint internal IP subnets

Hello, do you have any firewall rules enabled? The first step for me will be testing that you can reach the remote router by sourcing the local side of that tunnel, if you can do that, then I'll configure that IP as local-address on each GRE tunnel, then you'll need to double check if there is any r...
by sri2007
Wed Sep 05, 2018 1:45 pm
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 768

Re: PPPoE Client on router A, physical connection to modem on router B

Thank you sri2007. Your post made me realize that I was on the right track. I could not get it working with a Router connected to the modems, so I took your advice and connected a CRS switch, and used SwOS to set up the VLAN access ports and trunk, and it all worked out very well. Thanks again. Set...
by sri2007
Wed Sep 05, 2018 2:05 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 768

Re: PPPoE Client on router A, physical connection to modem on router B

Hi stoser, I'll use a switch in the middle to connect all of your modems (providers), then I'll assign them a single VLAN in access mode and then you'll need to setup PPPoE client interfaces at the Router A only and it will work. Check this image, it's one of our most successful designs that we've b...
by sri2007
Sat Sep 01, 2018 6:02 pm
Forum: General
Topic: How to configure two mikrotik providers?
Replies: 3
Views: 305

Re: How to configure two mikrotik providers?

Hi
@sri2007
Your link did not get trough, so it does not work.
@Jotne, sorry for that, it's fixed now.
by sri2007
Fri Aug 31, 2018 5:52 pm
Forum: Forwarding Protocols
Topic: BGP and fail over
Replies: 3
Views: 744

Re: BGP and fail over

Setting up iBGP: Simply define BGP peers between the two routers with update source being set to the router's loopback IP. That's the most easy way of doing this, you'll need to enable OSPF as the IGP protocol to distribute the loopbacks interface and then you can configure iBGP between them, and a...
by sri2007
Fri Aug 31, 2018 5:49 pm
Forum: Forwarding Protocols
Topic: OSPF filter - need help
Replies: 2
Views: 520

Re: OSPF filter - need help

Theoretical.
If you dont need this route at R2 you should filter it in inbound filter on R2 _and_ this route has to be external.
That means that this route needs to be originated by an ABR (Area Border Router) or an ASBR (Autonomous System Border Router).
by sri2007
Fri Aug 31, 2018 5:46 pm
Forum: Forwarding Protocols
Topic: do you use ip firewall filter for bgp?
Replies: 1
Views: 376

Re: do you use ip firewall filter for bgp?

Hi! According to some vulnerability issues who are coming popular these days, I thing that configure some firewall rules at the input chain is a must, if not, you're Mikrotik will be really easy to compromise using some exploits.
by sri2007
Fri Aug 10, 2018 4:58 pm
Forum: Forwarding Protocols
Topic: OSPF Router ID
Replies: 6
Views: 2533

Re: OSPF Router ID

The Question have been answered but one could put it this way. Say this "number" is just a number. Sure it looks like an IP'adress. BUT for analogy think of it as a Color value. When routers have only few links this is what think and call SIMPLE OSPF network. the reson for this ID is not obvious. B...
by sri2007
Fri Aug 10, 2018 4:53 pm
Forum: Forwarding Protocols
Topic: BGP local pref announcement
Replies: 3
Views: 1506

Re: BGP local pref announcement

Hi, yes that's how local pref works, if you want to set some priority at the router without passing that to the entire iBGP network, then you can use weight.