MikroTik

Kaldek

I've fitted a Ubiquiti RJ45 SFP+ module to my CSS326 running SwOS 2.10. This SFP module works but comes up as "multimode fibre" and shows no temperature details.

This is more of an FYI for Mikrotik than a specific complaint.

2020-01-09_17-19-30.png

Kaldek

I will prefer this one Ethernet/SFP+ (Combo Ports) CRS312-4C+8XG-RM

No good for me; I use too many of my 1Gb/s ports. The CRS326 is perfect for my needs.

Kaldek

I have been relying on a CRS125 for about five years but I'm getting to the point where I need a couple of devices to have 10Gb/s connectivity on my LAN. In my example I will have most devices on the network connected to the 1Gb/s ports but my PC and my file server will be connected to the 10Gb/s po...

Kaldek

Well it seems that as usual there's zero information on this and nobody able to assist.

I resorted to mucking about with my network sniffer hosts to stop them ever attempting to obtain an IP address on that interface. It's a hack, but it is what it is.

Kaldek

I have a CRS125-24G-1S with one of the ethernet ports set as a mirror destination that captures traffic from interface 25 (switch1-cpu). Essentially, this captures traffic as it egresses through the router to the Internet (plus it also captures the traffic after it has passed through the CPU and bac...

Kaldek

Any known issues with power consumption using these in a CRS125? The supplied power supply is 12v 2.4 amps I believe. I have a CRS125-24G-1S so there's no WiFi.

Kaldek

I have a CRS125-24G-1S which I just updated to Routerboard firmware 3.41 and then RouterOS 6.41.3. The System-->Routerboard menu is now saying that there is a new firmware version "6.41.3" available. This sounds highly suspicious and incorrect. Can I get someone to confirm if there really is a 6.41....

Kaldek

ur firmware is Hilink or no-hilink?

I don't know what "hilink" is.

Kaldek

I can confirm this problem was resolved by - wait for it - turning my router off and on again.

Reboots didn't help.
Software upgrades to Release Candidate didn't help.

Turning the router off by pulling the power cord was the solution.

*Shrug*

Kaldek

add action=mark-connection chain=prerouting new-connection-mark=lowttl ttl=less-than:60 Awesome! You can probably optimize this statement by adding connection-state=new as it just needs to mark the connection once at startup. Good point - sometimes I forget that it's marking the connection rather t...

Kaldek

I do some alternate routing marks via pre-routing that don't work well with fast-track and make sure that I only fast-track connections with connection-mark=no-mark and routing-table=main. Maybe you can add another mangle before your other mangle setting a connection mark (and passthrough) and then...

Kaldek

I have a CRS125 with RouterOS 6.34.3 and Firmware 3.24. I purchased a Huawei E8372 as it is on the list of supported devices. When connected, it appears as a USB device, but no LTE interface or Port appears. /system resource usb print # DEVICE VENDOR NAME SPEED 0 1:1 Linux 3.3.5 ehci_hcd RB400 EHCI ...

Kaldek

Is the connection always initiated from the lan side? If you have port forwards and the connection is incoming you may need to use dst-address as the filter on the fast-track. Also, when you change the rule, any current connections will still be fast-tracked until they drop off. The connection is o...

Kaldek

I'd ask mikrotik support directly, attach a supout on the email.

Thanks. I'm currently operating without fasttrack and the CPU hasn't spiked over 50% so far. At least that means I have a workaround.

Kaldek

Looks like...

Which RouterOS and firmware version is the CRS running?

RouterOS 6.34.3 and firmware 3.24.

Kaldek

Have you tried something like /ip firewall filter add action=fasttrack-connection chain=forward connection-state=established,related src-address=!192.168.0.51 /ip firewall mangle add action=change-ttl chain=prerouting dst-port=80 new-ttl=set:64 protocol=tcp src-address=192.168.0.51 Yes I did try th...

Kaldek

I have a CRS125 router/switch combo and need to bypass fasttrack for one particular connection. The problem is that one device in my LAN uses IP TTLs of 32 and the target device is over 32 hops away in Europe (I am in Australia). Here's the relevant code. Note that I placed a dedicated "accept" rule...

Kaldek

The simplest things are often the cause, eh.

Sorry for making you chase down a complex and incorrect path.

Kaldek

Thanks for clarifying the ports are not slaves of ether1. I've got no further ideas for you based on my own knowledge, so hopefully others will provide the solution!

Kaldek

Hello

i will post you /interface ethernet print when iam at home

and if then my configuration is wrong can you tell me or configured it for me the right way?

thanks in advance

should i post anything else?

Just send that for now, and try the interface queue trick as well, as mentioned above.

Kaldek

Nope, flag S sets also for standalone and master ports if they are part of bridge. Well that would make sense because it makes them the same L2 network. The whole "slave" nomenclature is a Microtik thing anyway, so if/when they flag an interface with "S" would be totally up to them: Flags: D - dyna...

Kaldek

There is nothing wrong with bridge. Ports 2-5 are in same L2 network only when configured as master/slave. In this configuration they are are standalone. To make them part of L2 local network they should be in bridge with eth6, as are they in this configuration, which is btw factory default. Nope, ...

Kaldek

Master/Slave just controls interface isolation, and as I understand it link bonding basically just stops spanning tree from going nuts for starters, and then balances traffic as a second function. I would think you just set eth1 as master, with eth2 and all other interfaces as slaves to it, then do ...

Kaldek

What do you mean by "capture vlan 3 and vlan 4"? Do you mean you want to do all the routing on the Microtik router rather than inter-VLAN routing on the Cisco switch? If so: #### Make VLANs 2-4 valid on interface ether2, and tag packets as they exit the interface. /interface vlan add name=VLAN2 vlan...

Kaldek

rmmcann is correct, however if your WAN IP is dynamically assigned, you can change the rule to use the incoming interface rather than the IP address: /ip firewall nat add chain=dstnat action=dst-nat to-addresses=<internal IP address> to-ports=<internal server port> protocol=tcp in-interface=<Your WA...

Kaldek

Your bridge configuration is wrong and is causing your DHCP server to be exposed to the Internet interface where your cable modem lives. You have configured the 100Mb/s switch properly by the look of it, with ether6 as a master and ether7-10 as slaves. What I don't see is you configuring ports 2-5 t...

Kaldek

What Van9018 said is exactly right.

Kaldek

Thanks for the replies! But now I am facing a new issue. What do I need to do to configure the router with an ip address which is accessible trough VLAN10 and the pc connected to eth1? Omega This should work. Binding the VLAN interface to ether1-slave-local should be fine as I'm pretty sure this ju...

Kaldek

Are your LAN interfaces and DSL modem interface sharing the same master interface? They should not be sharing the same master interface or they will have L2 access to the DSL modem. The DSL interface should be a master interface with no slave interfaces. The internal network should have one master i...

Kaldek

Here's a diagram of the above config, so people can understand what I was trying to achieve.

VLAN and routing config - public.png

Kaldek

Well since it took Microtik three days to approve my post, I worked it out in the meantime. If you have multiple master ports it looks like sharing VLAN configuration across/between them may not work because, well, they're isolated from each other. My design resulted in me having two master ports. e...

Kaldek

Nooooo! No bridging!!! Do not bridge those interfaces, it does not need to be done and just causes the CPU to have to deal with everything rather than the switch hardware! The CRS platform uses a dedicated hardware switch with many features. In the case of the CRS125-24G this is a Qualcomm Atheros 8...

Kaldek

I have a CRS125-24g-1s-rm running RouterOS 6.30. I have a problem that needs a solution and none of the CRS manuals are helping. My problem is that I have a separate 8 port switch that provides PoE to all of my access points and also to the WiFi radio on the roof which is my connection to my ISP. In...

Search found 33 matches

Ubiquiti RJ-45 SFP+ module shows up as multimode fiber in SwOS 2.10

Re: CRS326-24G-2S+RM able to switch 10Gb/s at wire speed?

CRS326-24G-2S+RM able to switch 10Gb/s at wire speed?

Re: Making a mirror port totally unable to communicate

Making a mirror port totally unable to communicate

Re: Mikrotik VDSL / DSL Modem?

CRS125 reporting that a "6.41.3" firmware version exists [SOLVED]

Re: Huawei E8372 not appearing as LTE interface

Re: Huawei E8372 not appearing as LTE interface

Re: How do I bypass fasttrack for one connection

Re: How do I bypass fasttrack for one connection

Huawei E8372 not appearing as LTE interface

Re: How do I bypass fasttrack for one connection

Re: How do I bypass fasttrack for one connection

Re: How do I bypass fasttrack for one connection

Re: How do I bypass fasttrack for one connection

How do I bypass fasttrack for one connection

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: CRS Need help with switch configuration

Re: VLAN Traffic in MT with L3 Cisco Switch

Re: help with port address translation.

Re: MikroTik_RB2011UiAS-2HnD-IN Internet Configuration + Firewall

Re: Strange DCHP Issue

Re: Issue with VLANs and Trunks

Re: Strange DCHP Issue

Re: Multiple master ports on CRS125-24g-1s-rm and effect on VLANs

Re: Multiple master ports on CRS125-24g-1s-rm and effect on VLANs

Re: Issue with VLANs and Trunks

Multiple master ports on CRS125-24g-1s-rm and effect on VLANs