Community discussions

Search found 182 matches

by sri2007
Thu Sep 19, 2019 1:04 am
Forum: Forwarding Protocols
Topic: [MPLS-TE] Balancing 2+ different bandwidth links [SOLVED]
Replies: 15
Views: 3496

Re: [MPLS-TE] Balancing 2+ different bandwidth links [SOLVED]

+1 Yes please! The load-balancing feature is the only one fixture that stops me to deploy MPLS in my network
by sri2007
Mon Sep 16, 2019 9:00 pm
Forum: The Dude
Topic: export outages to csv
Replies: 4
Views: 1944

Re: export outages to csv

+1 please, that may be a good idea to find statistic information about a device
by sri2007
Mon Sep 16, 2019 7:46 am
Forum: The Dude
Topic: Dude Telegram notification example
Replies: 56
Views: 26612

Re: Dude Telegram notification example

Hello everyone, the code is actually working in RouterOS 6.43.16; but if you want to add a biggest message, you'll need to add %20 instead of a space; so please update the Wiki.

New code from text:
text=Time:%20[Time];%20Device:%20[Device.FirstAddress];%20Status:%20[Service.Status]"
by sri2007
Sat May 25, 2019 1:34 am
Forum: Forwarding Protocols
Topic: How to block neighbours Advertisment
Replies: 6
Views: 3888

Re: How to block neighbours Advertisment

:shock: yep you're right... seems like that allow rule that I've configured in my firewall is useless :( ; however there's a new way of blocking neighbors directly at the /ip neighbors discovery-interface, using interface-lists, the steps are first add a new list named as you want (deny-mndp, it's m...
by sri2007
Tue May 14, 2019 6:33 am
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 684

Re: Jumbo Frames, L2MTU mismatch with RouterOS crashing

No prob!! I think that this is the idea of the forum :) But, yes.. I can't believe it yet, it's been like a week that we did that change and the network has stay stable, interesting point here, I do have some GRE tunnels between cities, with a lower MTU and RoMON enabled before and it still was work...
by sri2007
Mon May 13, 2019 6:17 pm
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 684

Re: Jumbo Frames, L2MTU mismatch with RouterOS crashing

Hi everyone, or at least who read this before and had no idea about a solution; I think that we found the real issue, it was related to RoMON; we had that fixture enabled in our entire network for a long time (when we were using the default L2MTU) and it keeps running with the part of my network wit...
by sri2007
Thu May 02, 2019 11:37 pm
Forum: Forwarding Protocols
Topic: VLAN-interface on VRRP-interface not ping
Replies: 1
Views: 404

Re: VLAN-interface on VRRP-interface not ping

That's because your mixing concepts, a VLAN is in a layer2 domain, and VRRP is in layer3, what that means is that you can create different VLANs interfaces facing your switch, and configuring VRRP over the VLAN instead of the VLAN over the VRRP.
by sri2007
Thu May 02, 2019 11:35 pm
Forum: Forwarding Protocols
Topic: Routing on 2 WAN Interfaces
Replies: 2
Views: 547

Re: Routing on 2 WAN Interfaces

and i have Connection Tracking and setting Routing-Marks ...
And for some reason you haven't shown us any of that, so we have no idea what's happening...
:D x2!
by sri2007
Wed May 01, 2019 8:41 pm
Forum: Forwarding Protocols
Topic: Blocking/Allowing Subnets RIP
Replies: 2
Views: 484

Re: Blocking/Allowing Subnets RIP

I think that best way of achieving your goal will be deploy OSPF at your network, at redesign everything to /30 WANs. But, the main question here will be how will your remote CHRs be connected to your couple Central routers??
by sri2007
Wed May 01, 2019 8:37 pm
Forum: Forwarding Protocols
Topic: Create BGP communities [SOLVED]
Replies: 3
Views: 745

Re: Create BGP communities [SOLVED]

Hello, yes you can set communities using RouterOS easily, those can be done using route-filters, you can check that here:

https://wiki.mikrotik.com/wiki/Manual:R ... ng_filters

Summary version, there is a set-bgp-community & append-bgp-community that can work for you.
by sri2007
Tue Apr 30, 2019 5:46 am
Forum: Forwarding Protocols
Topic: 3 POP BGP with Failover across Wireless network
Replies: 1
Views: 403

Re: 3 POP BGP with Failover across Wireless network

Hello! I've configured that solution before ant it works, you'll need to set up iBGP inside your network and all of your Edge routers with a route reflector in the middle with OSPF as IGP and it can works, also you can try your scripts at EVE-NG or GNS3, that works for me when I have some weird idea...
by sri2007
Tue Apr 30, 2019 5:42 am
Forum: Forwarding Protocols
Topic: OSPF : Default Route Disappearing
Replies: 2
Views: 557

Re: OSPF : Default Route Disappearing

Hi!! I've tried that before too, same result, the default route suddenly disappear, I've changed that to a multi area solution without stub or nasa area type in the middle and everything went fine.
by sri2007
Tue Apr 30, 2019 5:38 am
Forum: Forwarding Protocols
Topic: Output of "/routing bgp advertisements print" is truncated [SOLVED]
Replies: 5
Views: 804

Re: Output of "/routing bgp advertisements print" is truncated [SOLVED]

Hi!! Seems like we're not able to use the export to a file either :( the result is truncated too.
by sri2007
Tue Apr 30, 2019 5:32 am
Forum: Forwarding Protocols
Topic: Valid router to use in a peering point
Replies: 6
Views: 750

Re: Valid router to use in a peering point

Hello!! I think that you should think at the forwarding traffic too, a CCR1009 can handle easily like 4Gbps of traffic if you disable the connection tracking and configure this router as an edge router only, which means BGP / OSPF (probably as the IGP) and that's it, it works really nice!! I've play...
by sri2007
Thu Apr 25, 2019 3:28 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

millenium7, if your WISP grows enough you'll see that an OSPF structured design combined with BGP is a great advantage, I've seen so many networks that grows in many directions became really unstable You can't always structure it the way OSPF wants you to due to its inherently restrictive enterpris...
by sri2007
Thu Apr 25, 2019 3:20 pm
Forum: Forwarding Protocols
Topic: How to implement Balancing PCC with OSPF network
Replies: 5
Views: 541

Re: How to implement Balancing PCC with OSPF network

Got you, then you won't be able to do a load balancing using OSPF or any other protocol between you and your providers, best solution will be PCC, or a most interesting design doing the load balancing based in nodes, like node a is going to be nated only by provider A; and if that goes down, that no...
by sri2007
Thu Apr 25, 2019 4:51 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

At only 7 sites in and 250 routes, we are already looking for a new solution before we grow out of control. The concept of Area0, no area-to-area communication (must go through area0) and all area's must connect to 0, no ability to summarize except at ABR's is just awful for WISP design where the n...
by sri2007
Thu Apr 25, 2019 4:38 am
Forum: Forwarding Protocols
Topic: How to implement Balancing PCC with OSPF network
Replies: 5
Views: 541

Re: How to implement Balancing PCC with OSPF network

Hi!, i don't think that OSPF is designed to be used between service providers, if you want to do that, we'll need more info to help you, basically two main questions; 1. Do you establish any BGP peer between your providers and you?? or 2. Do your providers assign you public IP addresses and your rou...
by sri2007
Thu Apr 25, 2019 4:33 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

No prob amt! Actually I don't have issues related to ECMP, I think that OSPF do the load balancing per connection, and I don't care if the traffic is symmetric (same interface in/out), in my tests the only inconvenience is when my customers need to to a classic bandwidth test using speediest.net, so...
by sri2007
Tue Apr 23, 2019 8:35 pm
Forum: Forwarding Protocols
Topic: Jumbo Frames, L2MTU mismatch with RouterOS crashing
Replies: 3
Views: 684

Jumbo Frames, L2MTU mismatch with RouterOS crashing

Hello everyone! Hope you can help us, and I want to check if I'm wrong or the RouterOS has a bug (currently using 6.42.12 long-term) Our topology consists in like 350 routers deployed around the country, and it's working with OSPF (multitarea) + BGP; everything was going fine, except when we got the...
by sri2007
Tue Apr 23, 2019 7:55 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 1182

Re: LAG 802.3AD slowness

It depends on the ccr1009 model. Not all shares the same block diagram

Enviado desde mi Mi A2 mediante Tapatalk
Got you! thanks!! I've tried that with the CCR1009-7G-1C-1S+ using the 6.42.12 long-term version.
by sri2007
Tue Apr 23, 2019 7:51 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

Hello Brough, answering your questions: Actually, we're handling like 200 wireless links (Airfiber 5XHD / AirFiber24X / Netmetal) deployed around the country, and found an interesting problem in RouterOS, that problem was caused by a L2MTU mismatch (I don't have the reply from the Mikrotik suport te...
by sri2007
Tue Apr 23, 2019 7:38 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

ECMP load-balancing works great too, it's my best solution to deploy a 20gig ring between two cities in the country, or even to aggregate some wireless links (using AirFiber 5xHD) to add them as a single port to increase the total throughput of that node. do you use any mangle rule while using ecmp...
by sri2007
Tue Apr 23, 2019 12:58 am
Forum: Forwarding Protocols
Topic: BGP Multihoming
Replies: 10
Views: 3373

Re: BGP Multihoming

The load balancing scenario that you're looking can be accomplish using those prepends (recommended by ahmadzai), but it can be done by publishing a most specific prefix by one provider and a summarized version of that by the other (as example: 1.1.0.0/24 advertised to ISP A / 1.1.1.0/24 advertised ...
by sri2007
Tue Apr 23, 2019 12:50 am
Forum: Forwarding Protocols
Topic: How to set OSPF cost on two routes on one port. [SOLVED]
Replies: 2
Views: 476

Re: How to set OSPF cost on two routes on one port. [SOLVED]

Hello, the best solution for you will be deploy different VLANs to connect each wireless link; so you'll need to configure the addressing into the VLAN interface directly and the OSPF cost will be attached to that vlan too.
by sri2007
Tue Apr 23, 2019 12:43 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 1182

Re: LAG 802.3AD slowness

Wow, that's interesting, but I've done those bondings using the balanced-xor mode instead of 802.3ad using the first 4 ports of the CCR1009, that config works great it goes up to 3.5Gbps (real traffic) being forwarded between two Mikrotiks (CCR1009 + CRS326) -> that's because the lack of 10gig ports...
by sri2007
Tue Apr 23, 2019 12:36 am
Forum: General
Topic: Site to Site vpn (L2TP and OpenVPN)
Replies: 4
Views: 501

Re: Site to Site vpn (L2TP and OpenVPN)

Actually what sindy told you is true, L2TP & OpenVPN are two totally different protocols, so you'll need to chose one and configure the server and client with the perfect protocol for you, based in my experience, the best server is OpenVPN, it's easy to deploy, it's safe if you add the right SSL Cer...
by sri2007
Tue Apr 23, 2019 12:14 am
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1425

Re: Your experience with larger/diverse Area0 OSPF networks?

Hello guys!! I think that I'm the one who can help you, currently my network is like 350 routers which were deployed under the same backbone area, that network is actually moving like 30gbps of traffic in a Mikrotik only architecture (at the routing level), the entire BGP/OSPF network is actually mo...
by sri2007
Fri Apr 12, 2019 4:55 am
Forum: Forwarding Protocols
Topic: Default route and virtual link
Replies: 5
Views: 1118

Re: Default route and virtual link

It is a known problem that virtual link does not work properly in ROSv6.
Hello mrz, do you know if the issue with virtual link is still present at the last version of ROSv6?
by sri2007
Fri Apr 12, 2019 4:47 am
Forum: Forwarding Protocols
Topic: BGP Distribute default route
Replies: 2
Views: 488

Re: BGP Distribute default route

Hello, you should be able to distribute the default route using the default-originate option at the peer configuration (if you want to distribute that default route every time then choose always; and if you only want to send that route only if the router receives the default route from a provider th...
by sri2007
Thu Jan 31, 2019 10:56 pm
Forum: Forwarding Protocols
Topic: Multihoming and connection tracking
Replies: 5
Views: 747

Re: Multihoming and connection tracking

Hi I currently have that network running successfully without issues related to asymmetric traffic flow. And totally I recommend you to disable connection tracking it will totally improve your router behavior, just be careful if you're using NAT or any firewall rule related to tracking (like matchin...
by sri2007
Sat Dec 01, 2018 10:28 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 2388

Re: ospf summarization help [SOLVED]

ohh, ok got it... so the main question here will be, does the router B have interfaces assigned to each area (I mean area 0, area 1 and area 2); or only each PowerBox has one interface at the backbone area and the other one in the default area? The rule is that only the ABR (area border router) or t...
by sri2007
Sat Dec 01, 2018 7:10 pm
Forum: Forwarding Protocols
Topic: Wrong priority for some routes in bgp
Replies: 4
Views: 941

Re: Wrong priority for some routes in bgp

Hi, can you help us bu posting the filters for each prefix? and the peer configuration too?
by sri2007
Sat Dec 01, 2018 7:02 pm
Forum: Forwarding Protocols
Topic: OSPF - BGP - Route Reflector
Replies: 8
Views: 1427

Re: OSPF - BGP - Route Reflector

HI! I think that the best solution for you will be to work with both protocols in a recursive way, I mean, you'll need to set up OSPF for convergence and loopback distribution only, it won't announce any public IP on it, so you can set up an iBGP session between each router to the RouteReflector (us...
by sri2007
Sat Dec 01, 2018 5:44 pm
Forum: Forwarding Protocols
Topic: ospf summarization help [SOLVED]
Replies: 21
Views: 2388

Re: ospf summarization help [SOLVED]

HI! if you're trying to summarize routes using OSPF, then the PPPoE server will be the ABR (area border router) or ASBR; but you'll need to standardize your subnets, as example PPPoE 1 will have clients at only one range (a.e. 172.16.0.0/24); then you can do a redistribute connected and the add a su...
by sri2007
Sat Dec 01, 2018 5:37 pm
Forum: Forwarding Protocols
Topic: Google Cloud Platform GCP - VPN - BGP [SOLVED]
Replies: 11
Views: 2702

Re: Google Cloud Platform GCP - VPN - BGP help [SOLVED]

hello! If you have already an IPSec Site-to-Site between Google and your Mikrotik then I think that you'll need to create some special routes using policies and rules to reach the remote server, theoretically I think that it is possible, however can you please post the configs at both sites?
by sri2007
Sat Oct 13, 2018 4:24 pm
Forum: Forwarding Protocols
Topic: Routing Traffic from one network to other
Replies: 5
Views: 729

Re: Routing Traffic from one network to other

Hi! I think that you'll need some routes between your devices, can you upload a simple diagram of your network? it may be easiest to understand your problem.
by sri2007
Tue Sep 11, 2018 7:30 pm
Forum: Forwarding Protocols
Topic: PPPoE and DHCP problems
Replies: 9
Views: 692

Re: PPPoE and DHCP problems

Hi, if you're experimenting that i'll check the layer2 domain of your network, is the PPPoE server and the DHCP server running on the same router ?
by sri2007
Tue Sep 11, 2018 5:07 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 846

Re: PPPoE Client on router A, physical connection to modem on router B

Question for you - for that 'switch stack', is it a single switch or a group of switches in some kind of failover configuration? I am using a single switch at this point, a CRS326, as I am still testing. The idea is to add failover once I get it working. Hi! Well, we've developed this design by usi...
by sri2007
Thu Sep 06, 2018 5:03 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 846

Re: PPPoE Client on router A, physical connection to modem on router B

Well that works, but I can tell a new solution for that issue, at the router add as many bridges as providers, then add only VLAN 1 to bridge 1, VLAN 2 to bridge 2 and so on, what’s the idea, if you set up a bridge interface you can manually change your MAC address so it will work too. I’m assuming ...
by sri2007
Wed Sep 05, 2018 5:41 pm
Forum: Forwarding Protocols
Topic: [SOLVED] IBGP over OSPF Single POP ISP Problems
Replies: 2
Views: 647

Re: [SOLVED] IBGP over OSPF Single POP ISP Problems

Hi! I thing that the best solution for you will be testing this new drawing, it's one of our most stable and scalable designs that we've done before. And checking your things: First one: Few things: 1: I had routing loops due to default route problems in ibgp, moving default routing to ospf sorted i...
by sri2007
Wed Sep 05, 2018 5:32 pm
Forum: Forwarding Protocols
Topic: GRE Tunnel Connected Successfully but Cant pint internal IP subnets
Replies: 2
Views: 1542

Re: GRE Tunnel Connected Successfully but Cant pint internal IP subnets

Hello, do you have any firewall rules enabled? The first step for me will be testing that you can reach the remote router by sourcing the local side of that tunnel, if you can do that, then I'll configure that IP as local-address on each GRE tunnel, then you'll need to double check if there is any r...
by sri2007
Wed Sep 05, 2018 1:45 pm
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 846

Re: PPPoE Client on router A, physical connection to modem on router B

Thank you sri2007. Your post made me realize that I was on the right track. I could not get it working with a Router connected to the modems, so I took your advice and connected a CRS switch, and used SwOS to set up the VLAN access ports and trunk, and it all worked out very well. Thanks again. Set...
by sri2007
Wed Sep 05, 2018 2:05 am
Forum: Forwarding Protocols
Topic: PPPoE Client on router A, physical connection to modem on router B
Replies: 10
Views: 846

Re: PPPoE Client on router A, physical connection to modem on router B

Hi stoser, I'll use a switch in the middle to connect all of your modems (providers), then I'll assign them a single VLAN in access mode and then you'll need to setup PPPoE client interfaces at the Router A only and it will work. Check this image, it's one of our most successful designs that we've b...
by sri2007
Sat Sep 01, 2018 6:02 pm
Forum: General
Topic: How to configure two mikrotik providers?
Replies: 3
Views: 333

Re: How to configure two mikrotik providers?

Hi
@sri2007
Your link did not get trough, so it does not work.
@Jotne, sorry for that, it's fixed now.
by sri2007
Fri Aug 31, 2018 5:52 pm
Forum: Forwarding Protocols
Topic: BGP and fail over
Replies: 3
Views: 864

Re: BGP and fail over

Setting up iBGP: Simply define BGP peers between the two routers with update source being set to the router's loopback IP. That's the most easy way of doing this, you'll need to enable OSPF as the IGP protocol to distribute the loopbacks interface and then you can configure iBGP between them, and a...
by sri2007
Fri Aug 31, 2018 5:49 pm
Forum: Forwarding Protocols
Topic: OSPF filter - need help
Replies: 2
Views: 574

Re: OSPF filter - need help

Theoretical.
If you dont need this route at R2 you should filter it in inbound filter on R2 _and_ this route has to be external.
That means that this route needs to be originated by an ABR (Area Border Router) or an ASBR (Autonomous System Border Router).
by sri2007
Fri Aug 31, 2018 5:46 pm
Forum: Forwarding Protocols
Topic: do you use ip firewall filter for bgp?
Replies: 1
Views: 459

Re: do you use ip firewall filter for bgp?

Hi! According to some vulnerability issues who are coming popular these days, I thing that configure some firewall rules at the input chain is a must, if not, you're Mikrotik will be really easy to compromise using some exploits.
by sri2007
Fri Aug 10, 2018 4:58 pm
Forum: Forwarding Protocols
Topic: OSPF Router ID
Replies: 6
Views: 2657

Re: OSPF Router ID

The Question have been answered but one could put it this way. Say this "number" is just a number. Sure it looks like an IP'adress. BUT for analogy think of it as a Color value. When routers have only few links this is what think and call SIMPLE OSPF network. the reson for this ID is not obvious. B...
by sri2007
Fri Aug 10, 2018 4:53 pm
Forum: Forwarding Protocols
Topic: BGP local pref announcement
Replies: 3
Views: 1736

Re: BGP local pref announcement

Hi, yes that's how local pref works, if you want to set some priority at the router without passing that to the entire iBGP network, then you can use weight.
by sri2007
Mon Jun 18, 2018 1:10 pm
Forum: Forwarding Protocols
Topic: HELP - BGP Peer dropping, odd VPN log message
Replies: 3
Views: 635

Re: HELP - BGP Peer dropping, odd VPN log message

Hi, I'll try to upgrade the RouterOS into the most stable bugfix version.
by sri2007
Mon Jun 18, 2018 1:06 pm
Forum: Forwarding Protocols
Topic: BGP Bonding
Replies: 5
Views: 840

Re: BGP Bonding

Hi, I think that you'll need to do some filters at the output chain by setting some BGP attributes and only allowing a single default route as filter in the input-chain, that will work for you.
by sri2007
Mon Jun 18, 2018 12:58 pm
Forum: Forwarding Protocols
Topic: BGP IP Issue
Replies: 4
Views: 698

Re: BGP IP Issue

Yep, you'll need new firewall rules at all of your sites who have any public IP address configured.
by sri2007
Wed Jun 13, 2018 4:23 am
Forum: Forwarding Protocols
Topic: OSPF - How large can a flat network grow?
Replies: 8
Views: 1066

Re: OSPF - How large can a flat network grow?

Hi!! the craziest network that I've seen is about 700subs in a flat bridged/switched one... but we really recommend to everyone move into a routed network instead of a switched one, by using OSPF with BGP, you can configure OSPF as an IGP which can handle everything related to convergence, load bala...
by sri2007
Wed Jun 13, 2018 4:20 am
Forum: Forwarding Protocols
Topic: Help with load balacing
Replies: 4
Views: 729

Re: Help with load balacing

Hi, are those in the same area, can you help us with the OSPF config for both routers?
by sri2007
Wed Jun 13, 2018 4:14 am
Forum: Forwarding Protocols
Topic: Local preference not share among ibgp routers
Replies: 2
Views: 463

Re: Local preference not share among ibgp routers

Hi, I think that you'll need to double check the administrative distance for the default route learned from each ISP, if that's an eBGP then it should be 20 instead of an iBGP distance of 200.
by sri2007
Thu Jun 07, 2018 7:48 pm
Forum: Forwarding Protocols
Topic: MPLS MTU Related . Not equal MTU over multi hops
Replies: 9
Views: 1070

Re: MPLS MTU Related . Not equal MTU over multi hops

IP MTU < MPLS MTU <= L2MTU.
1508 < 1550 <= 1598

are my values wrong here?

thanks,
Not really your values are fine... My fingers are wrong haha
by sri2007
Thu Jun 07, 2018 4:36 pm
Forum: Forwarding Protocols
Topic: MPLS MTU Related . Not equal MTU over multi hops
Replies: 9
Views: 1070

Re: MPLS MTU Related . Not equal MTU over multi hops

Hi, actually there is a rule using different MTU values, IP MTU < MPLS MTU <= L2MTU.
by sri2007
Thu Jun 07, 2018 4:32 pm
Forum: Forwarding Protocols
Topic: Ebgp to IBGP
Replies: 2
Views: 422

Re: Ebgp to IBGP

Just setup your iBGP peers with same AS number.
Yes that will work, i'll also include an OSPF design as an IGP, and also establish the iBGP sessions using loopbacks instead of WANs.
by sri2007
Thu Jun 07, 2018 4:30 pm
Forum: Forwarding Protocols
Topic: BGP performance workaround using route servers
Replies: 3
Views: 936

Re: BGP performance workaround using route servers

Hi alfredo, there is also a different way of improving the BGP convergence with mikrotik v6; and that's using CHR hosted by servers, you can take a look at this idea in the following link:

https://mum.mikrotik.com//presentations ... 817868.pdf
by sri2007
Thu Jun 07, 2018 4:28 pm
Forum: Forwarding Protocols
Topic: Temporarily disable BGP full route feed
Replies: 7
Views: 796

Re: Temporarily disable BGP full route feed

Hi, you don't need to disable the BGP session...
The purpose is to temporarily run single-homed to get a fast boot time. Will filtering still achieve this?
Yes they do, you'lll need filters at the input-chain of that BGP peer by allowing only the default route and discarding everything.
by sri2007
Wed Jun 06, 2018 3:47 pm
Forum: RouterBOARD hardware
Topic: Are MikroTik 10G DAC cables "standard"? [SOLVED]
Replies: 7
Views: 2112

Re: Are MikroTik 10G DAC cables "standard"? [SOLVED]

Hi, according to my experience at 10Gbps DAC, some cables are standard by brand, if you want to connect the mikrotik with an Intel PC, it will probably work; if you're trying to connect different mikrotiks using that DAC the it will definitely work, however if your idea is to connect to a different ...
by sri2007
Wed Jun 06, 2018 3:35 pm
Forum: Forwarding Protocols
Topic: Temporarily disable BGP full route feed
Replies: 7
Views: 796

Re: Temporarily disable BGP full route feed

Hi, you'll need to create some filters discarding everything except the default route, here is a link that you can find information about it:

https://wiki.mikrotik.com/wiki/Manual:R ... ng_filters
by sri2007
Wed Jun 06, 2018 3:23 pm
Forum: Forwarding Protocols
Topic: VPLS: MTU 1500 on interface to CPE
Replies: 2
Views: 419

Re: VPLS: MTU 1500 on interface to CPE

Hi, yes i think that is possible, but only using VPLS tunnels in the middle, if you want to add another header stage like L2TP/IPSec and PPP it will decrease the MTU by default.
by sri2007
Tue Jun 05, 2018 7:53 pm
Forum: Forwarding Protocols
Topic: Remove private ASes with BGP
Replies: 4
Views: 1049

Re: Remove private ASes with BGP

Yes there is an option who removes the private AS: remove-private-as (yes | no; Default: no) If set, then BGP AS-PATH attribute is removed before sending out route update if attribute contains only private AS numbers. removal process happens before routing filters are applied and before local AS num...
by sri2007
Tue Jun 05, 2018 7:51 pm
Forum: Forwarding Protocols
Topic: sip phone being stopped at wan address
Replies: 7
Views: 907

Re: sip phone being stopped at wan address

Hi, have you tried to disable the /ip firewall service-port sip ?
by sri2007
Tue Jun 05, 2018 7:50 pm
Forum: Forwarding Protocols
Topic: OSPF
Replies: 2
Views: 561

Re: OSPF

Hi, i've seen that log before and that's because there is an issue in the OSPF topology, which may be probably be originated by a router with a duplicated IP address, or by a misconfigured OSPF design. Can you help us with more details of your network.
by sri2007
Thu May 31, 2018 5:31 pm
Forum: Beginner Basics
Topic: Link to files on Mikrotik
Replies: 1
Views: 251

Re: Link to files on Mikrotik

Hi, you can access to the files folder using FTP; like ftp://x.x.x.x (i'll check that the ftp service is enabled at the mikrotik)
by sri2007
Thu May 31, 2018 5:30 pm
Forum: SwOS
Topic: LACP CRS317
Replies: 2
Views: 1028

Re: LACP CRS317

Yep, for me too was imposible to accomplish this using SwOS... the LACP was formed but the load balancing wasn't working so the entire traffic was using only one interface. Then we moved this to RouterOS 6.41 which supports bonding using hardware, and it worked fine, until now...
by sri2007
Thu May 31, 2018 5:09 pm
Forum: The Dude
Topic: dude data on more then 1G will cpu 100%
Replies: 2
Views: 626

Re: dude data on more then 1G will cpu 100%

hi, which Mikrotik hosts the Dude Server? Does it have a license installed?
by sri2007
Thu May 31, 2018 5:07 pm
Forum: Forwarding Protocols
Topic: MPLS/VPLS between Remote Multiple MikroTik devices
Replies: 2
Views: 499

Re: MPLS/VPLS between Remote Multiple MikroTik devices

Hi, i think that you'll need to config MPLS over the entire network, which includes your Core routers, if you set up a GRE tunnel, and then the VPLS over that GRE, the header can be so high and that's why you're experimenting that slowness.
by sri2007
Wed May 30, 2018 4:14 pm
Forum: Beginner Basics
Topic: Connecting to an RDP on another subnet
Replies: 4
Views: 341

Re: Connecting to an RDP on another subnet

Hi, I think that I'll try to configure that access point as a bridge instead of router, so you can have everything in the same subnet, which is enough for a home use. But if you want to keep that AP as a router, then yes it's possible to do that, but the main questions will be if this Mikrotik is NA...
by sri2007
Wed May 30, 2018 4:09 pm
Forum: Forwarding Protocols
Topic: [Solved] Routing Protocols not working on hEX 6.42.3 [OSPF/RIP]
Replies: 1
Views: 498

Re: [Solved] Routing Protocols not working on hEX 6.42.3 [OSPF/RIP]

Yes it's really common that some firewall rules drop the hellos for routing protocols, but I've seen some NAT rules that can do the same too by masquerading the packets into a different address.
by sri2007
Wed May 30, 2018 4:07 pm
Forum: Forwarding Protocols
Topic: understanding packets flow
Replies: 2
Views: 786

Re: understanding packets flow

Hi.. and also if you want to take a look a deeper view of the packet flow through RouterOS, then you'll need to check this link:

https://wiki.mikrotik.com/wiki/Manual:Packet_Flow_v6
by sri2007
Tue May 29, 2018 4:14 pm
Forum: Forwarding Protocols
Topic: OSPF bug? with multiple IPs on interface sending hellos with wrong IP
Replies: 3
Views: 636

Re: OSPF bug? with multiple IPs on interface sending hellos with wrong IP

Hi, I'll double check if this router has any NAT rule configured... and check if this NAT rule is not masquerading the OSPF hello packets.
by sri2007
Tue May 29, 2018 4:11 pm
Forum: Forwarding Protocols
Topic: OSPF routes not in route table [SOLVED]
Replies: 2
Views: 1103

Re: OSPF routes not in route table [SOLVED]

Hi, I think that your problem is related to the OSPF filter that you're applying. /routing filter> export add action=accept chain=OSPF-IPv4-Route-Filters distance=200 prefix=192.168.0.0/16 prefix-length=16-24 add action=discard chain=OSPF-IPv4-Route-Filters [admin@crs1.kmp1.domain.net] /routing filt...
by sri2007
Thu May 24, 2018 7:07 pm
Forum: General
Topic: Dynamic DNS inside a LAN
Replies: 35
Views: 4054

Re: Dynamic DNS inside a LAN

Hi, I think that you’ll need an external server with a Public IP address on it, but it’s probable that this dorm router block any VPN packet. So can you test if this works:

http://www.superfreevpn.com
by sri2007
Wed May 23, 2018 5:36 pm
Forum: Beginner Basics
Topic: VLAN trunking and Cisco SVI equivalent
Replies: 1
Views: 613

Re: VLAN trunking and Cisco SVI equivalent

Hi welcome to Mikrotik world! I think that you can have all of the information related to VLANs in the following link:

https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN
by sri2007
Wed May 23, 2018 5:28 pm
Forum: Forwarding Protocols
Topic: OSPF overrides Static Route
Replies: 3
Views: 594

Re: OSPF overrides Static Route

Well, you can configure an entire OSPF scenario without any NAT in the middle... you can also do a load balancing scenario with ECMP (Equal Cost MultiPath) but everything is related with OSPF, I think that you'll only need to find the perfect design with the exact costs at each interface.
by sri2007
Wed May 23, 2018 4:34 pm
Forum: General
Topic: [Solved] Port Forwarding through VPN
Replies: 3
Views: 1897

Re: Port Forwarding through VPN

Hi, what kind of VPN are you configuring??
by sri2007
Wed May 23, 2018 4:28 pm
Forum: RouterBOARD hardware
Topic: bonding
Replies: 5
Views: 768

Re: bonding

Hi, if you have three different PPPoE Clients at your Mikrotik, I think that you can't aggregate them as a single link, the idea of a bonding is to add physically similars ports (like two or more ethernet interfaces) to increase bandwidth by doing load-balancing based on layer2 or layer3 information
by sri2007
Wed May 23, 2018 4:25 pm
Forum: Beginner Basics
Topic: Limiting internet speed of chosen IP's
Replies: 2
Views: 398

Re: Limiting internet speed of chosen IP's

Hi you can accomplish this by using simple queues at your Mikrotik, check at this link for more info about them

https://wiki.mikrotik.com/wiki/Manual:Q ... on_Example
by sri2007
Wed May 23, 2018 4:18 pm
Forum: Forwarding Protocols
Topic: OSPF overrides Static Route
Replies: 3
Views: 594

Re: OSPF overrides Static Route

Hi, if I'm understanding you, you're trying to configure an OSPF Traffic Engineering solution? If not, I'll check the costs in the entire topology, and probably remove any static route in the middle...
by sri2007
Tue May 22, 2018 5:10 pm
Forum: General
Topic: Dynamic DNS inside a LAN
Replies: 35
Views: 4054

Re: Dynamic DNS inside a LAN

mmm yes you're right.. also I found a different way, but you'll need a L2TP or PPTP server on the other side.
by sri2007
Tue May 22, 2018 3:36 pm
Forum: General
Topic: Advanced Routing Failover without Scripting questions:
Replies: 3
Views: 736

Re: Advanced Routing Failover without Scripting questions:

There are several ideas; but the most stable ones that I've used before are: OpenDNS (208.67.222.222 & 208.67.220.220); Level3 (4.2.2.1 & 4.2.2.2) ; Quad9 (9.9.9.9 & 149.112.112.112)
by sri2007
Tue May 22, 2018 3:29 pm
Forum: Forwarding Protocols
Topic: Allow (Ether3 or Media-Server) to pass through all LAN user whether pppoe connected or not
Replies: 1
Views: 327

Re: Allow (Ether3 or Media-Server) to pass through all LAN user whether pppoe connected or not

Hi, I've never had this request in the past, but seems like it is impossible, because that's a layer2 authentication method. So I think that you'll need to split your LAN in different VLANs, and then configuring a PPPoE Server in only one VLAN and keep the rest of those VLANS free of any kind of aut...
by sri2007
Tue May 22, 2018 3:26 pm
Forum: General
Topic: Dynamic DNS inside a LAN
Replies: 35
Views: 4054

Re: Dynamic DNS inside a LAN

Hi, I think that you'll need access to that Dorm router, if that's the one who has the public IP, then you'll need to do some port-forwarding to your own Mikrotik.
by sri2007
Mon May 21, 2018 5:39 pm
Forum: General
Topic: Reduce the collision domain on a LAN...
Replies: 1
Views: 257

Re: Reduce the collision domain on a LAN...

I think that there are two different domains being confused here; if want to split your collision domain, then just add all of your interfaces in a single bridge (collision domain is related to layer2 networks, where in the old times there was a HUB in the middle, so the collision domain was shared ...
by sri2007
Mon May 21, 2018 5:32 pm
Forum: SwOS
Topic: CRS-317 - Does SWoS have a physical advantage over RouterOS
Replies: 7
Views: 4913

Re: CRS-317 - Does SWoS have a physical advantage over RouterOS

Hi I don't think so, nowadays there is a new version which allows you to do lots of stuff using hardware (RouterOS 6.42.x) that's really easy to manage and it allows you to do some stuffs with software too (just keep in mind the CPU limit at really high speeds). Check this link: https://wiki.mikroti...
by sri2007
Mon May 21, 2018 5:27 pm
Forum: General
Topic: Server access from within LAN but using WAN IP address
Replies: 5
Views: 519

Re: Server access from within LAN but using WAN IP address

Hi, quick question... are you trying to reach the APP using any DNS service in the middle? If not, try to add a new NAT rule, instead of using masquerade with an out-interface, you can use a src-nat, by matching the server dst-address.
by sri2007
Fri May 18, 2018 5:18 pm
Forum: General
Topic: IPv6 BGP unreachable nexthop through loopback
Replies: 7
Views: 1043

Re: IPv6 BGP unreachable nexthop through loopback

Or maybe the next solution will be to re-design using WANs only instead of loopbacks, at least until RouterOS 7 arrives :)
by sri2007
Fri May 18, 2018 5:16 pm
Forum: Forwarding Protocols
Topic: one way trafic between bridges
Replies: 4
Views: 709

Re: one way trafic between bridges

Hi! You may be able to configure some bridge-filter rules too:

https://wiki.mikrotik.com/wiki/Manual:I ... e_Firewall

And also, if you're configuring bridges, and you want to filter something, you may need to disable fastpath.
by sri2007
Wed May 16, 2018 4:47 pm
Forum: General
Topic: loopback interfaces and OSPF Areas
Replies: 4
Views: 468

Re: loopback interfaces and OSPF Areas

I really depends on your design... there are so many different scenarios where loopbacks are included, and one of most important ones is to deploy iBGP between internal routers, where the loopbacks are really important. I use loopback interfaces at backbone areas but if use another area with area-id...
by sri2007
Wed May 16, 2018 4:35 pm
Forum: Forwarding Protocols
Topic: Logging into access point remotelt
Replies: 1
Views: 345

Re: Logging into access point remotelt

Hi Bernarda, there are different ways, but you'll need a public IP address in the edge router, then you can enable a VPN server or just port-forwarding, and it will work.
by sri2007
Wed May 16, 2018 4:27 pm
Forum: General
Topic: loopback interfaces and OSPF Areas
Replies: 4
Views: 468

Re: loopback interfaces and OSPF Areas

Hi, depending on your design, but most of the times I'll choose to use the same area for all of the subnets configured in a router.
by sri2007
Wed May 16, 2018 4:18 pm
Forum: Forwarding Protocols
Topic: route,bgp, error cease, subcode=0
Replies: 1
Views: 837

Re: route,bgp, error cease, subcode=0

Good morning, usually those subsides messages means that the BGP session is finished by the remote router, have you considered increasing the timers, in the configuration lines I'm not watching that you're not configuring the keepalive timer, that may be a probable reason why your getting this code,...
by sri2007
Mon May 14, 2018 4:21 pm
Forum: Forwarding Protocols
Topic: Main link swap over
Replies: 3
Views: 431

Re: Main link swap over

Hi! Is there any dynamic routing protocol between your providers and your router, probably BGP??; If not, and you're using only static routes, there is an option called check-gateway, where you can configure kind of smart static routes, where the router is always pinging the destination address, and...
by sri2007
Mon May 14, 2018 4:12 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Cool!!! That's great!!
by sri2007
Fri May 11, 2018 4:49 pm
Forum: Forwarding Protocols
Topic: Filter Spesific OSPF routes
Replies: 11
Views: 898

Re: Filter Spesific OSPF routes

It really depends on the network design, because if all your customers behind the PPPoE will be whithin the same subnet (/24 with several /32), then you only need to advertise the /24 with an aggregate or network command. If not, then I think that there is no other way than redistribute connected
by sri2007
Fri May 11, 2018 3:54 pm
Forum: Forwarding Protocols
Topic: OSPF and anycast IPv4
Replies: 4
Views: 1986

Re: OSPF and anycast IPv4

Hi, yes, it should be the same idea, however if you're planning to use recursive routing complemented with BGP it will probably not work so good, I think that's a bug with Mikrotik.
by sri2007
Fri May 11, 2018 3:51 pm
Forum: General
Topic: Can not redirect to https using web proxy rule
Replies: 8
Views: 3608

Re: Can not redirect to https using web proxy rule

Hi! I think that proxy won't work with HTTPS, it can break all of the security stuffs behind HTTPs and its probably that your browser detects a false positive man-in-the-middle attack.
by sri2007
Fri May 11, 2018 3:47 pm
Forum: Forwarding Protocols
Topic: Port forwarding not working
Replies: 2
Views: 414

Re: Port forwarding not working

Also, are you able to access to those ports internally from any connected PC? Do you have any packet match in the Mikrotik rules? You can also enable log messages for those rules and test if packets are coming and if they are being translated.
by sri2007
Fri May 11, 2018 3:44 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Hi, just disable SPT (set to protocol=none)... but I guess that your wireless link configuration may be blocking something, according to your network diagram (everything in the same bridge), if the ospf connection goes down it shouldn't affect the reachability of your network devices between the sam...
by sri2007
Thu May 10, 2018 4:16 pm
Forum: Forwarding Protocols
Topic: RIP Routing Table
Replies: 1
Views: 595

Re: RIP Routing Table

I think that you'll need to move to OSPF instead of RIP, nowadays OSPF is the industrial standard for dynamic routing and depending on your network, it can work with BGP too
by sri2007
Thu May 10, 2018 4:11 pm
Forum: Forwarding Protocols
Topic: Filter Spesific OSPF routes
Replies: 11
Views: 898

Re: Filter Spesific OSPF routes

HI: But I recommend to you to redistribute PPPoE global addresses with BGP tools. Manage OSPF only for your core network as a transport protocol to redistribute ptp links and your loopbacks That's absolutely true... the most scalable way of advertising networks is with BGP working as an EGP and OSPF...
by sri2007
Wed May 09, 2018 5:56 pm
Forum: Virtualization
Topic: Get Trial License P1
Replies: 2
Views: 1086

Re: Get Trial License P1

Is your Router able to reach the internet? does it have any DNS configured?
by sri2007
Wed May 09, 2018 5:50 pm
Forum: Forwarding Protocols
Topic: Public IP over a tunnel ( SOLVED )
Replies: 34
Views: 7945

Re: Public IP over a tunnel

If your server is at home, and you really want to use a public IP configured at the CHR, then I suggest an EoIP or GRE tunnel between your CHR and a home router, if not, then the L2TP VPN may works with private addressing, and then you'll need to do some dst-nat / src-nat rules at the CHR.
by sri2007
Wed May 09, 2018 5:46 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Got you, that seems like the AirFiber is blocking something in the middle, are they configured as bridge? Do you have any diagram that you can upload here? I just need to understand the Layer3 / Layer2 diagram between both routers and both AirFibers... do you have any log related to bad ethernet neg...
by sri2007
Wed May 09, 2018 5:38 pm
Forum: Forwarding Protocols
Topic: LACP(802.3ad) + Vlan + MPLS - MTU Problem
Replies: 1
Views: 538

Re: LACP(802.3ad) + Vlan + MPLS - MTU Problem

Hi, I think that you'll need to check if your switch support layer2 MTU higher than 1530bytes, usually everything related with MPLS seems to be related to MTU, just remember there are 3 types of MTU: L3MTU, MPLS-MTU and L2MTU; and it must follows this order: L3MTU < MPLS-MTU <= L2MTU
by sri2007
Mon May 07, 2018 4:22 pm
Forum: Forwarding Protocols
Topic: Cisco BGP Link Bandwidth Extended Communities Equivalent Command in Mikrotik
Replies: 5
Views: 835

Re: Cisco BGP Link Bandwidth Extended Communities Equivalent Command in Mikrotik

Until now, I think that the we can do it with some kind of scripting in the middle, which may be sensing lot of parameters, that's only an idea, I've never did that before, but the Transit traffic with unbalanced circuits worked great for me, I've configured that before between 3 circuits, and yes, ...
by sri2007
Mon May 07, 2018 4:14 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Interesting, you may be able to reach your remote wan interface from the local router (WAN1 -> WAN 2), do you have your timers configured with default values?
by sri2007
Mon May 07, 2018 4:07 pm
Forum: Forwarding Protocols
Topic: Creating Communities to apply to BGP
Replies: 5
Views: 695

Re: Creating Communities to apply to BGP

Hi... that's correct, if your provider doesn't support communities, then you don't have too much work, however, have you tried to use prepends? if you're provider doesn't support communities, I think that its local preference value are default for everything (100), you'll need to double check this w...
by sri2007
Fri May 04, 2018 4:18 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Quick question, are you able to reach via Mac-telnet your remote router?? Or do you see that remote router as an LLDP Neighbor (/ip neighbors print) ??
by sri2007
Fri May 04, 2018 4:08 pm
Forum: Forwarding Protocols
Topic: Block traffic between eoip tunnels
Replies: 2
Views: 499

Re: Block traffic between eoip tunnels

Hi, there is also a fixture called filter under bridge that can be used for this. Please check at this link to find more info: https://wiki.mikrotik.com/wiki/Manual:I ... e_Firewall
by sri2007
Wed May 02, 2018 7:54 pm
Forum: Forwarding Protocols
Topic: BGP traffic out peer priority
Replies: 6
Views: 1797

Re: BGP traffic out peer priority

So, there is any option to reach a external peer using the same upstream that they are using to reach me. I have 2 upstreams: Adamo + Telefonica If RETN is reaching me using Telefonica, why my mikrotik is reaching RETN via Adamo? That's telling me that your Mikrotik has a most specific route to rea...
by sri2007
Wed May 02, 2018 7:49 pm
Forum: Forwarding Protocols
Topic: MPLS overload problem
Replies: 4
Views: 1125

Re: MPLS overload problem

MPLS cloud must have only transit routes, not customer routes That's correct, you may need to use OSPF as an IGP which will be the one who can cares about convergence, load balancing, and loopback distribution, and BGP as an EGP distributing your LANs subnets or public blocks. That config is a base...
by sri2007
Wed May 02, 2018 7:44 pm
Forum: Forwarding Protocols
Topic: ospf asymmetric routing / query
Replies: 3
Views: 785

Re: ospf asymmetric routing / query

I think that I can works with a script, but it will involve some work trying to figure it out which circuit is experimenting interference.
by sri2007
Wed May 02, 2018 7:42 pm
Forum: Forwarding Protocols
Topic: iBGP or OSPF between core and edge router
Replies: 5
Views: 880

Re: iBGP or OSPF between core and edge router

Well, I'll try to setup up two RRs instead, and you'll need to configure network or aggregate networks at the PPPoE routers which are the one (I think that they handle a unique /24, is that right?, if you do this then you'll be advertising this public block to all of your routers within this network...
by sri2007
Tue May 01, 2018 4:24 pm
Forum: Forwarding Protocols
Topic: Static routing help needed
Replies: 4
Views: 679

Re: Static routing help needed

And you may need to check the Layer2 Switch in the middle too, i'd check if the plans are properly tagged and the port configuration is correct (between trunks & access)
by sri2007
Tue May 01, 2018 4:16 pm
Forum: Forwarding Protocols
Topic: iBGP or OSPF between core and edge router
Replies: 5
Views: 880

Re: iBGP or OSPF between core and edge router

Hi! In the core pope routers ( considering that those will be dynamic IP address), you can redistribute connected under BGP instance (if you have two separate networks (/24), and all of your customers in the PPPoE 1 will be within the same /24; then you'll only need to advertise the summarize versio...
by sri2007
Mon Apr 30, 2018 5:48 pm
Forum: Forwarding Protocols
Topic: BGP protocol
Replies: 2
Views: 702

Re: BGP protocol

It's signaling other BGP neighbors about networks with some rules for them. Also BGP is path vector protocol, and it's not necessary to learn all topology like OSPF/ISIS. In Internet we don't need it. BGP can pass through many "families" of routes like l2vpn, l3vpn, ipv4 and ipv6. Also you can crea...
by sri2007
Mon Apr 30, 2018 5:46 pm
Forum: Forwarding Protocols
Topic: OSPF PtMP type removes network advertisements?
Replies: 3
Views: 1053

Re: OSPF PtMP type removes network advertisements?

HI, have you tried updating the RouterOS version ?
by sri2007
Mon Apr 30, 2018 5:45 pm
Forum: Forwarding Protocols
Topic: RFC7911
Replies: 2
Views: 498

Re: RFC7911

But if you want to configure a load balancing scenario, OSPF works as an IGP (which supports ECMP), and you need to configure BGP as en EGP, so the OSPF is the one who cares about, quick convergence, load balancing and distribution of internal loopbacks, then you'll need some iBGP sessions between y...
by sri2007
Mon Apr 30, 2018 5:37 pm
Forum: Forwarding Protocols
Topic: How to block neighbours Advertisment
Replies: 6
Views: 3888

Re: How to block neighbours Advertisment

Hi:
Do you mean when your client goes in IP > NEIGHBOR and see your MAC and IP?
If that's it, you can disable the discover:
/ip neighbor discovery set bridge-interface discover=no
that's true, and you can block those packets with a firewall rule too (LLDP works with UDP/5678).
by sri2007
Mon Apr 30, 2018 5:31 pm
Forum: Forwarding Protocols
Topic: OSPF full to down for no reason?
Replies: 23
Views: 2661

Re: OSPF full to down for no reason?

Hi ubikrotik: You'll need to double check if you have configured the entire parameters with OSPF, in order to keep your neighbors up, particularly with the timers (hello / dead interval ), i've worked with AF4x, AF5x, AF24x and i've never seen that behavior, you'll need to upgrade RouterOS and AirOS...
by sri2007
Mon Apr 30, 2018 5:23 pm
Forum: Forwarding Protocols
Topic: iBGP or OSPF between core and edge router
Replies: 5
Views: 880

Re: iBGP or OSPF between core and edge router

Hi faast, what i will do is to avoid redistributions in the entire network, and you may want to work with OSPF as an IGP only for quick convergence, load balancing mechanism (ECMP) and distribution for internal loopbacks, the you'll need to configure BGP as an EGP an it will be only one allowed to m...
by sri2007
Mon Apr 30, 2018 5:13 pm
Forum: Forwarding Protocols
Topic: Mpls ospf and winbox error [SOLVED]
Replies: 5
Views: 874

Re: Mpls ospf and winbox error [SOLVED]

I'll check if all of the path the MTU is configured right, as I told you before, there are three kinds of MTU, and you may setup as follows: - L3 MTU < MPLS MTU <= L2 MTU MPLS MTU can be configured with at least 1508bytes, and you may want to check if Layer2 switches in the middle can handle this fr...
by sri2007
Fri Apr 27, 2018 3:49 pm
Forum: Forwarding Protocols
Topic: Cisco + Mikrotik + OSPF (L2TP)
Replies: 1
Views: 678

Re: Cisco + Mikrotik + OSPF (L2TP)

I think that I'll work with an EoIP or GRE tunnel between them.
by sri2007
Fri Apr 27, 2018 3:44 pm
Forum: Forwarding Protocols
Topic: ospf asymmetric routing / query
Replies: 3
Views: 785

Re: ospf asymmetric routing / query

I've never seen that on any other architectures... but if you have designed your network with OSPF, then you will be able to prevent asymmetric routing (which by the way, in some situations works really great, as example when you want to send the upstream traffic over one link and the downstream tra...
by sri2007
Fri Apr 27, 2018 3:35 pm
Forum: Forwarding Protocols
Topic: Help with load balacing
Replies: 4
Views: 729

Re: Help with load balacing

Seems, like you have configured different costs per interface under /routing ospf interfaces; if you're trying to setup ECMP, you'll need to create two interfaces with same cost between those routers, and please double-check at both sites, because you may have a load balancing for the upstream and a...
by sri2007
Fri Apr 27, 2018 3:32 pm
Forum: Forwarding Protocols
Topic: BGP over GRE
Replies: 1
Views: 458

Re: BGP over GRE

HI MatthiasMerkel... I prefer to design an internal OSPF network which can route my whole network (this may be done with Layer2circuits / EoIP / GRE Tunnels between all DC), once that you have OSPF working, you are able to configure BGP as an EGP, so you can use your publics IPs anywhere and them wi...
by sri2007
Thu Apr 26, 2018 4:04 pm
Forum: Forwarding Protocols
Topic: Mpls ospf and winbox error [SOLVED]
Replies: 5
Views: 874

Re: Mpls ospf and winbox error [SOLVED]

Hi rgear13, I think that you are experimenting some MTU issues, most common errors with MPLS are those, so i'll check that, remember that there are three kinds of MTU, L3MTU, L2MTU and MPLS-MTU, and that must be well configured behind the hole path. You may able to find some extra information at: ht...
by sri2007
Thu Apr 26, 2018 4:00 pm
Forum: Forwarding Protocols
Topic: Inter MIK BGP routing
Replies: 1
Views: 418

Re: Inter MIK BGP routing

HI directlogic, well you have an interesting scenario... first double check the filters and check if you're receiving your new IPs from the 450G in the CCR, if everything is correct at that way, you will need to go to advertisements and check if this router is sending your new prefixes to your provi...
by sri2007
Wed Apr 25, 2018 4:35 pm
Forum: Forwarding Protocols
Topic: announce private ip over bgp or ospf
Replies: 2
Views: 443

Re: announce private ip over bgp or ospf

Hi! I strongly recommend of using BGP for transporting your public IPs, but only as a complementary protocol keeping OSPF as an IGP within your network.
by sri2007
Wed Apr 25, 2018 4:18 pm
Forum: Forwarding Protocols
Topic: OSPF Network - Looking for guidance
Replies: 1
Views: 429

Re: OSPF Network - Looking for guidance

Hi northboy, 1. The best idea is to use your OSPF network as an IGP and then complement this network with BGP (iBGP within your network & eBGP with your providers), then you can control the entire failover process (if a provider goes down or maybe one of your internal circuits goes down too), and yo...
by sri2007
Tue Apr 24, 2018 4:14 pm
Forum: Forwarding Protocols
Topic: VRRP on bridge interface
Replies: 5
Views: 1606

Re: VRRP on bridge interface

Hi, I'll probably double check auth password on both sides, and I could also check if I can see this remote router as a LLDP neighbor too, the only way that two VRRP neighbors won't become master/backup is that they are not able to communicate between them, there are firewall rules that can block th...
by sri2007
Tue Apr 24, 2018 4:11 pm
Forum: Forwarding Protocols
Topic: strange phenomenon ospf and NAT
Replies: 8
Views: 2822

Re: strange phenomenon ospf and NAT

Yep, you must need to check your NAT rules, OSPF is not the only that is affected by NAT, BGP does it too
by sri2007
Tue Apr 24, 2018 4:06 pm
Forum: Forwarding Protocols
Topic: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?
Replies: 11
Views: 2311

Re: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?

Hi,, I think that the best one to do this is a CHR hosted by VMWare or HyperV, please take a look of this video / presentation from MUM at Berlin:

https://www.youtube.com/watch?time_cont ... cgdGA1W_0o
by sri2007
Tue Feb 13, 2018 5:43 pm
Forum: Beginner Basics
Topic: A very noob question about dst-nat rules
Replies: 2
Views: 390

Re: A very noob question about dst-nat rules

Hi zhangxiao:

I shall prefer the option B... If you're able to configure a firewall or nat rule with fewer posible lines, this firewall isn't going to affect the performance of your router
by sri2007
Mon Feb 12, 2018 4:18 pm
Forum: Wireless Networking
Topic: ospf error
Replies: 1
Views: 537

Re: ospf error

Hi eonye.. here is the real answer for that error, this one is a reply to a Mikrotik Support mail: Hello, problem may arise if one peer looses connectivity and reestablish adjacency. In this case sequence numbers are not reset and your mentioned error may appear. Unfortunately there are no fix for t...
by sri2007
Mon Feb 12, 2018 4:17 pm
Forum: Forwarding Protocols
Topic: OSPF - Invalid Sequence Number
Replies: 1
Views: 1150

Re: OSPF - Invalid Sequence Number

Hello SwissWISP here is the real answer for that error, this one is a reply to a Mikrotik Support mail: Hello, problem may arise if one peer looses connectivity and reestablish adjacency. In this case sequence numbers are not reset and your mentioned error may appear. Unfortunately there are no fix ...
by sri2007
Mon Feb 12, 2018 4:15 pm
Forum: Forwarding Protocols
Topic: OSPF - Invalid sequence number / MD5 authentication failed
Replies: 6
Views: 3756

Re: OSPF - Invalid sequence number / MD5 authentication failed

Hello guys... here is the real answer for the OSPF & MD5 authentication error, this one is a reply to a Mikrotik Support mail: Hello, problem may arise if one peer looses connectivity and reestablish adjacency. In this case sequence numbers are not reset and your mentioned error may appear. Unfortun...
by sri2007
Mon Feb 12, 2018 4:14 pm
Forum: Forwarding Protocols
Topic: OSPF with MD5: Invalid sequence number
Replies: 8
Views: 3917

Re: OSPF with MD5: Invalid sequence number

Hello guys... here is the real answer for that error, this one is a reply to a Mikrotik Support mail: Hello, problem may arise if one peer looses connectivity and reestablish adjacency. In this case sequence numbers are not reset and your mentioned error may appear. Unfortunately there are no fix fo...
by sri2007
Sat Feb 10, 2018 3:05 am
Forum: Forwarding Protocols
Topic: Full BGP tables with two upstream ISPs using CHR - Performance question
Replies: 11
Views: 5027

Re: Full BGP tables with two upstream ISPs using CHR - Performance question

Hi guys!! We’ve worked with several CHR as eBGP routers, and those have a good performance, we also recommend to install an hypervisor because you can add any CHR that you require... however, while we wait for RouterOS 7 which may handle BGP in a multicore way, there are some extra awesome routers w...
by sri2007
Fri Feb 02, 2018 11:36 pm
Forum: General
Topic: not able to create EOIP interface running!
Replies: 3
Views: 553

Re: not able to create EOIP interface running!

Hello! I believe that you can ping between those IPs is because you're behind a NAT router from your provider... And if that's true, you won't be able to establish an EoIP tunnel between these routers, the best way that you can get to install a vpn server / client is by using L2TP or PPTP or any oth...
by sri2007
Fri Feb 02, 2018 9:54 pm
Forum: Forwarding Protocols
Topic: OSPF DEFAULT ROUTES
Replies: 3
Views: 562

Re: OSPF DEFAULT ROUTES

You can configure VRF on each interface, and with some route rules you can handle easily what you're trying to do.
by sri2007
Fri Feb 02, 2018 9:47 pm
Forum: Forwarding Protocols
Topic: OSPF drops every 30m
Replies: 6
Views: 884

Re: OSPF drops every 30m

Hello, my first suggestion will be to try pinging each neighbor to discard any issues in that circuit. Is that a fiber or wireless circuit?
by sri2007
Fri Feb 02, 2018 9:40 pm
Forum: Forwarding Protocols
Topic: PPPoE on central router OR on each tower
Replies: 11
Views: 5624

Re: PPPoE on central router OR on each tower

Hello, from my experience the best way of doing this is by handling PPPoE Servers on each tower, but it really depends the amount of subscribers, because if you're trying to queueing 2000 of subscribers per router, then it'll experiment some high cpu peaks in a massive event (as example, some provid...
by sri2007
Wed Jan 24, 2018 10:14 pm
Forum: Forwarding Protocols
Topic: Unable to add instance and area to OSPF interface
Replies: 4
Views: 498

Re: Unable to add instance and area to OSPF interface

You don't. Area is determined by ospf network configuration and instance is determined by area configuration. That's right, you need to configure the area under the instance that you need; then you can configure the network in the area that you configured before. Finally, need to see if the interfa...
by sri2007
Wed Jan 24, 2018 10:10 pm
Forum: Forwarding Protocols
Topic: BGP VRF Route Imports
Replies: 3
Views: 726

Re: BGP VRF Route Imports

Hi, i guess that you're missing some config with the import-export route-distinguishers between both VRFs... Please post the VRF configuration to see if we can help you here...
by sri2007
Wed Jan 17, 2018 5:02 pm
Forum: SwOS
Topic: LAG on SwOS , How I can resloved it.
Replies: 1
Views: 1608

Re: LAG on SwOS , How I can resloved it.

Hello, why are you configuring LAG ports as static? and the second one, to configure a LAG with SwOS it's like a LACP so it has some modes where those switches can negotiate the LAG port: Passive: Place port in listening state, use LACP only when it's countrary port uses active LACP mode Active: Pre...
by sri2007
Wed Jan 17, 2018 4:55 pm
Forum: SwOS
Topic: SwOS MTU
Replies: 7
Views: 3057

Re: SwOS MTU

Hello.. The MTU is not able con be configured in SwOS, however, there is a table which helps to know if a CRS or CSS support jumbo frames. Actually, you can find it here: https://wiki.mikrotik.com/wiki/Manual:CRS_features and here https://wiki.mikrotik.com/wiki/Manual:CRS3xx_series_switches But to m...
by sri2007
Wed Jan 17, 2018 4:50 pm
Forum: SwOS
Topic: stacking MikroTik on SwOS v2.x or RouteOS v6.x how?
Replies: 2
Views: 819

Re: stacking MikroTik on SwOS v2.x or RouteOS v6.x how?

Unfortunately stacking is not available with Mikrotik Switches yet, however you can find that feature with other switches (FS, Dell); and those ones works great with Mikrotik Solutions. We've developed lots of WISPs with those switches.
by sri2007
Wed Jan 17, 2018 4:46 pm
Forum: SwOS
Topic: VLANS on CRS317-1G-16S+
Replies: 3
Views: 930

Re: VLANS on CRS317-1G-16S+

There is no problem with RouterOs in current version 6.41 as far as I know. Never se any cpu hit on it as long as you only do stuff that is currenty supported att the hardware offload (switch chip) level. Once you are in software the cpu's in the boxes is way to weak. In your use case. RouterOS 6.4...
by sri2007
Wed Jan 17, 2018 4:33 pm
Forum: Forwarding Protocols
Topic: Help on Route List
Replies: 3
Views: 488

Re: Help on Route List

Hello, I agree with airbanduk; you need to configure two VRF in that router with two separate interfaces and you can get two different logical routers in the same physical router, this is called MPLS VRF Lite. Hola! Estoy de acuerdo con airbanduk, lo que debes configurar ahí es una VRF en el equipo ...
by sri2007
Tue Jan 16, 2018 5:30 pm
Forum: General
Topic: Need some advice...
Replies: 5
Views: 503

Re: Need some advice...

Hi! I believe that the best option for using VPN is with router that support IPSec hardware encryption (RB750Gr3 for example) that one seems to be a small router but it it's a most powerfull one than the Rb2011.
by sri2007
Tue Jan 16, 2018 5:17 pm
Forum: General
Topic: VLAN Trunking Router / SW / SW
Replies: 6
Views: 1090

Re: VLAN Trunking Router / SW / SW

Hello! In the CCR it's really easy, as Here is what I do: On the firewall: (Assumes Ether2 is the interface you want to trunk. /interface vlan add interface=ether2 name="vlan1" vlan-id=1 add interface=ether2 name="vlan2" vlan-id=2 add interface=ether2 name="vlan3" vlan-id=3 add interface=ether2 name...
by sri2007
Tue Jan 16, 2018 5:12 pm
Forum: Beginner Basics
Topic: Probably a basic issue not able to network across multiple networks and devices
Replies: 4
Views: 402

Re: Probably a basic issue not able to network across multiple networks and devices

Hello tommo4:

You're experiencing a simple routing issue, as ZeroByte told you earlier you need to configure a new static route between your devices...

Can you upload any diagram so we can help you easily??
by sri2007
Tue Jan 16, 2018 5:04 pm
Forum: General
Topic: Block many websites
Replies: 20
Views: 11883

Re: Block many websites

Hi!!! I believe that it can work by configuring your Mikrotik and your network to work with OpenDNS, in that site you can block anything, and really need to do extra things in the Mikrotik, as for example, denying any proxy communication, denying any VPN port, denying UltraSurf and doing a dst-nat t...
by sri2007
Tue Jan 16, 2018 5:00 pm
Forum: Wireless Networking
Topic: Mikrotik WISPs: Where?
Replies: 95
Views: 47210

Re: Mikrotik WISPs: Where?

Hi!! We've created hundred of WISP around the world.. I guess that we've worked in every continent by developing Mikrotik Solutions (Wireless and Core Design)
by sri2007
Tue Jan 16, 2018 4:53 pm
Forum: Forwarding Protocols
Topic: BGP Route Reflectors, how to properly configure??
Replies: 19
Views: 10646

Re: BGP Route Reflectors, how to properly configure??

hello!! yesterday was a busy monday... 1. The RFC explicit saids this: "Usually, a cluster of clients will have a single RR. In that case, the cluster will be identified by the BGP Identifier of the RR. However, this represents a single point of failure so to make it possible to have multiple RRs in...
by sri2007
Fri Jan 12, 2018 10:01 pm
Forum: Forwarding Protocols
Topic: BGP Route Reflectors, how to properly configure??
Replies: 19
Views: 10646

Re: BGP Route Reflectors, how to properly configure??

Actually, according to the RFC 4456 ( https://tools.ietf.org/html/rfc4456 ) it's a must, even when you configure a big network with multiple RR, then you can add different Cluster-IDs. One of the best practices is exactly what you said, each router need to be configured as a route-reflector client f...
by sri2007
Wed Jan 10, 2018 6:56 pm
Forum: Forwarding Protocols
Topic: BGP Route Reflectors, how to properly configure??
Replies: 19
Views: 10646

Re: BGP Route Reflectors, how to properly configure??

You need to configure both Route-reflector in the same cluster ID.
by sri2007
Wed Jan 10, 2018 6:51 pm
Forum: Forwarding Protocols
Topic: Minimal mtu for VPLS
Replies: 5
Views: 1018

Re: Minimal mtu for VPLS

Hello, we suggest to use a MPLS MTU of 1530bytes.
by sri2007
Wed Jan 10, 2018 6:45 pm
Forum: Forwarding Protocols
Topic: ISP Network Extension to another city
Replies: 4
Views: 892

Re: ISP Network Extension to another city

Hello, if you already own a L2 PTP circuit between both locations, then it's as easy as understand that you have a simple cable between both routers, so you don't need to worry about any encapsulation to reach your remote location. Later you can create your own MPLS network over that circuit, and ev...
by sri2007
Wed Jan 10, 2018 6:33 pm
Forum: General
Topic: Port Forwarding Issues
Replies: 1
Views: 222

Re: Port Forwarding Issues

Hello, by reading your post, it suggests me that you have a NAT issue, the best way to solve that is to know all of the ports wich Minecraft uses, i don't believe that the only port is TCP/25565? you can check that with any online port-forwarding tool, and also you can enable logs in the NAT rule wh...
by sri2007
Tue Jan 09, 2018 6:53 pm
Forum: SwOS
Topic: LACP/LAG + VLAN on CSS326-24G-2S+RM SwOS 2.6 (latest)
Replies: 3
Views: 2104

Re: LACP/LAG + VLAN on CSS326-24G-2S+RM SwOS 2.6 (latest)

Hello, Mikrotik is still developing SwOS, that's why you dont see that port as trunk, however, in practice you only need to configure each VLAN into each physical port within the same LAG Trunk, don't forget to disable RSTP too. And it should be working, I've deployed that config in several CSS and ...
by sri2007
Tue Jan 09, 2018 5:48 pm
Forum: SwOS
Topic: VLANS on CRS317-1G-16S+
Replies: 3
Views: 930

Re: VLANS on CRS317-1G-16S+

Hi!! I don't recommend to move into RouterOS, because its probable that you'll experiment some issues regarding to a high CPU usage with high levels of traffic, the best way to do this is in a SWoS version, and you can configure any VLAN in the vlans tab, you can see this link in order to get more i...
by sri2007
Tue Jan 09, 2018 5:34 pm
Forum: Forwarding Protocols
Topic: Best option for transparent L2 tunnel
Replies: 3
Views: 1345

Re: Best option for transparent L2 tunnel

Hello, absolutely the best solution is about using EoIP tunnels, once I configured one of those tunnels between two CCR and the througput was 1Gbps (limited by the gigabit interface that i was using). I've made several test with jperf and bandwithtest and it was 1Gbps of real throughput, that tunnel...
by sri2007
Tue Jan 09, 2018 5:27 pm
Forum: The Dude
Topic: Problem SNMP speed interface
Replies: 7
Views: 3470

Re: Problem SNMP speed interface

Yep, Dude has some issues related to SNMP, because it works in a 32bit world, however if you're using any RouterOS device, you can configure the mastering port to use routeros instead of snmp, and everything works greats, the port speeds are accurate, then conf is like this: bgp port routeros1.JPG A...
by sri2007
Tue Jan 09, 2018 5:16 pm
Forum: The Dude
Topic: Is the new dude production stable now ?
Replies: 7
Views: 1292

Re: Is the new dude production stable now ?

Hello!!! I've used Dude v6 with about 40 maps and 200 devices (routers, switches, access points, DVR, servers) and it works great, it's configured with SNMP, RouterOS, PING and DNS probes. Yes it has some isues (most are easy and you can find solutions in the forum) but in general The Dude is workin...
by sri2007
Tue Jan 09, 2018 5:03 pm
Forum: The Dude
Topic: 10Gbps link showing 4.29Gbps on dude
Replies: 4
Views: 961

Re: 10Gbps link showing 4.29Gbps on dude

Hello, that seems to be an issue related to SNMP, have you try to configure that link's mastering type to RouterOS instead of SNMP?? If yuu have lot's of Mikrotiks been monitoring by Dude, it's a most accurate choice to connect them via RouterOS instead of SNMP, you'll need to create a new user (jus...
by sri2007
Tue Oct 31, 2017 12:07 pm
Forum: Forwarding Protocols
Topic: WinBox is slow with MPLS
Replies: 9
Views: 2238

Re: WinBox is slow with MPLS

Hi! I'm trying to develop an MPLS solution with CCR1072 and CCR1009 routers, and everything seems to be working fine, except by Winbox connections, i've tried everything that you suggested here, but nothing works, i have a MPLS-MTU of 1580, an L2-MTU of 1580 and an L3-MTU of 1500. My network include...
by sri2007
Thu Jul 27, 2017 3:58 am
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 105865

Re: Blacklist Filter update script

Great thanks for your help!! I added a new address-list associated with your domain and it works, thanks for your help! It seems that i'm not banned.
by sri2007
Wed Jul 26, 2017 6:21 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 105865

Re: Blacklist Filter update script

Hi Dave, can you help me to check if my public IP is banned on your list?? The script was working fine, but now i've trying several things to make it work again with your updates, but it allways shows me a dns error. If I post my public IP here, it makes me an easy target :) so, i'm wondering if i c...
by sri2007
Tue Apr 11, 2017 6:37 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 105865

Re: Blacklist Filter update script

Unfortunately, I don't know how to help you with this. I don't see any errors in my server logs. I can only assume that you are getting ssl errors. You should be able to manually install the scripts from the first post.
I dont know why, but it finnally works in my CCR1072, thanks for your help!
by sri2007
Tue Mar 21, 2017 7:32 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 105865

Re: Blacklist Filter update script

Hi! I'm trying to put this rules in a CCR1072, this router has direct connection to the internet without any restriction, but when i tried to fetch the first file got this message: /tool fetch url="https://mikrotikfilters.com/updateBlacklist.rsc" mode=https status: failed failure: connection timeout...