Community discussions

MikroTik App

Search found 286 matches

by mada3k
Thu Dec 03, 2020 10:53 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 99
Views: 5199

Re: v7.1beta3 [development] is released!

Every new 7-beta release brings amazing features. Lets just hope that they eventually become stable as well :)
by mada3k
Thu Dec 03, 2020 10:49 pm
Forum: RouterOS v7 BETA
Topic: MikroTik does bad WiFi?
Replies: 2
Views: 232

Re: MikroTik does bad WiFi?

I think Mikrotik does good RF design and well made flexible products. But yes, not the fastest.

Many other stuff has newer and faster chipsets, but has shitty software and RF-design.
by mada3k
Fri Nov 27, 2020 6:01 pm
Forum: RouterBOARD hardware
Topic: Ageing wireless cards?
Replies: 2
Views: 503

Re: Ageing wireless cards?

From my experience - Yes, radio-hardware does degrade with age.

I have no proof to back it up.
by mada3k
Thu Nov 26, 2020 9:35 pm
Forum: General
Topic: configure CCR1009-7G-1C 2 svi's, 2 dhcp servers and access port's
Replies: 7
Views: 575

Re: configure CCR1009-7G-1C 2 svi's, 2 dhcp servers and access port's

I agree that you really should't use VLAN ID 1 in a serious envoriment. Here is my take on you config, if I understand correctly ### method 1 ### # separate bridges /interface bridge add name=vlan1 add name=vlan10 # vlan interfaces /interface vlan add interface=ether1 name=ether1.1 vlan-id=1 add int...
by mada3k
Sun Nov 22, 2020 1:43 pm
Forum: RouterBOARD hardware
Topic: Successor to CRS210-8G-2S+ desktop switch?
Replies: 2
Views: 517

Re: Successor to CRS210-8G-2S+ desktop switch?

It's a fantastic price but I agree that SwOS more or less ties the switch to home usage (or maybe very small business)
by mada3k
Fri Nov 20, 2020 9:43 pm
Forum: RouterBOARD hardware
Topic: Enquiry on 100Gbps SFP Router
Replies: 3
Views: 364

Re: Enquiry on 100Gbps SFP Router

100Gbps linecards for telco-grade routers is tremendously expensive for many reasons. I don't think we will se Mikrotik in that segment for a while.

What is possible then is 100G L2 switches with L3 and MPLS capabilities, as the switching ASICs is becoming cheaper.
by mada3k
Thu Nov 19, 2020 6:40 pm
Forum: General
Topic: Ethernet SOHO router
Replies: 5
Views: 303

Re: Ethernet SOHO router

PPPoE is quite CPU heavy to handle. I would definitely go for a RB4011, if you are planning to use that Gigabit.
by mada3k
Thu Nov 12, 2020 9:10 pm
Forum: Forwarding Protocols
Topic: MPLS over l2tp mtu [SOLVED]
Replies: 2
Views: 196

Re: MPLS over l2tp mtu [SOLVED]

MPLS/VPLS doesn't fragment at all. It requires you to have the actual needed L2MTU headroom.
by mada3k
Sun Nov 08, 2020 2:25 pm
Forum: RouterBOARD hardware
Topic: Idea for 1U Core Router with 4xSFP+
Replies: 7
Views: 514

Re: Idea for 1U Core Router with 4xSFP+

ROS v6 x86 is more focused on low-end/embedded x86 hardware. There are generally no high-performance drivers.
by mada3k
Sat Nov 07, 2020 6:44 pm
Forum: General
Topic: Roku and Chromecast not working through Mikrotik
Replies: 2
Views: 252

Re: Roku and Chromecast not working through Mikrotik

Sounds strange. I have Chromecasts, both wired and wireless. Never have any issues.

Not work as in "can't access internet" or "can't be found"?

Do a /export hide-sensitive and post here.
by mada3k
Sat Nov 07, 2020 6:41 pm
Forum: General
Topic: Connecting layer 2 appliances on separated networks
Replies: 4
Views: 316

Re: Connecting layer 2 appliances on separated networks

EoIP and Bridge is probably the answer. Beware that it has adds some overhead so depending on the connection between it' won't be possible to use full 1500 byte frames.
by mada3k
Fri Nov 06, 2020 7:00 pm
Forum: Announcements
Topic: MikroTik newsletter November 2020 (#98)
Replies: 54
Views: 8595

Re: MikroTik newsletter November 2020 (#98)

Are Mikrotik planning to launch products in the 5G backbone/backhaul segment? Or it's just end-user/consumer?
by mada3k
Tue Oct 27, 2020 9:51 pm
Forum: RouterBOARD hardware
Topic: Hardware Firewall?
Replies: 1
Views: 272

Re: Hardware Firewall?

I have no experience of Meraki but Mikrotik doesn't compare to a Fortigate I can say for sure. There simply are no "NGFW" features. The policy/firewall editor is not made for manage hundreds of rules (witch is very likley for an enterprise). For home or small office usage it will do fine. On plus si...
by mada3k
Sun Oct 25, 2020 10:25 am
Forum: RouterBOARD hardware
Topic: Is CCR1009-7G-1C-1S+ Suitable for my needs?
Replies: 6
Views: 377

Re: Is CCR1009-7G-1C-1S+ Suitable for my needs?

No, same thing, routers. It will probably work but it will cost a bit of CPU load.

If you need wire speed LACP/bonding then a switch is the answer. The CRS3xx-series can do LACP/bonding groups.

Do you need 4 Gbps of bandwidth? Can you use the SFP+ port instead maybe?
by mada3k
Sat Oct 24, 2020 1:57 pm
Forum: RouterBOARD hardware
Topic: Is CCR1009-7G-1C-1S+ Suitable for my needs?
Replies: 6
Views: 377

Re: Is CCR1009-7G-1C-1S+ Suitable for my needs?

CCR1009 is not a switch, it's all routed interfaces attached to the CPU, hence all kind of bonding/LACP will be done in software.
by mada3k
Wed Oct 14, 2020 8:47 pm
Forum: RouterBOARD hardware
Topic: Powering Suggestions for ccr1016-12s-1s+ with DC power
Replies: 3
Views: 410

Re: Powering Suggestions for ccr1016-12s-1s+ with DC power

We have some DC-converted CCRs.

If you can live with the custom modification then it works fine to just supply (usually 24V) directly on the board internally.

Beware of -48V (negative) as it's a completly different story and can vary between -42V to -60V or -36V to -76V.
by mada3k
Wed Oct 14, 2020 6:22 pm
Forum: Announcements
Topic: Newsletter 97 (September 2020)
Replies: 86
Views: 14429

Re: Newsletter 97 (September 2020)

... But at same time in Western Europe, North America and any many other countries many many customers want better Wifi (full 11ac with all the benefits) and Wifi 6 NOW And are ready to pay!!! But there are plenty of other WiFi6 stuff on the market if you really need WiFi6. I don't see why Mikrotik...
by mada3k
Sun Oct 11, 2020 11:26 am
Forum: Announcements
Topic: Newsletter 97 (September 2020)
Replies: 86
Views: 14429

Re: Newsletter 97 (September 2020)

I agree, SwitchOS is not really just usable for an enterprise. It's fine for home or lab usage.
by mada3k
Sat Oct 03, 2020 2:32 pm
Forum: RouterOS v7 BETA
Topic: VRF status with RouterOS v7
Replies: 6
Views: 804

Re: VRF status with RouterOS v7

Will VPNv4 still be supported in v7 ?
by mada3k
Sat Oct 03, 2020 10:55 am
Forum: RouterBOARD hardware
Topic: NBN router for Australia
Replies: 4
Views: 357

Re: NBN router for Australia

xDSL is legacy technology. It's just wasted money to put R&D money there.
by mada3k
Sun Sep 27, 2020 12:59 pm
Forum: Forwarding Protocols
Topic: MPLS and MTU
Replies: 5
Views: 600

Re: MPLS and MTU

A full regular Ethernet frame is 1514 bytes.
With VPLS [mpls+vpls+cw] tags thats +12 bytes (=1526)
Then you need a Ethernet frame around it (=1540)

We use 1560 as MPLS-MTU and 1580 as L2MTU.

https://wiki.mikrotik.com/wiki/Manual:M ... uterBoards
by mada3k
Sat Sep 26, 2020 10:55 am
Forum: Announcements
Topic: Newsletter 97 (September 2020)
Replies: 86
Views: 14429

Re: Newsletter 97 (September 2020)

CSS610-8G-2S+IN looks neat.

I think that more products should have pin terminal connector. DC-barrel jacks is not that professional some times.

Why all the talk about 5G? Mikrotik doesn't do any 5G products?
by mada3k
Sat Sep 26, 2020 10:53 am
Forum: General
Topic: Mikrotik to replace our faulty Cisco core switch
Replies: 6
Views: 537

Re: Mikrotik to replace our faulty Cisco core switch

I think that CRS317-1G-16S+ is the closest thing to a Cisco 4900M.

https://wiki.mikrotik.com/wiki/Manual:C ... Offloading
by mada3k
Tue Sep 22, 2020 9:07 pm
Forum: General
Topic: [FEATURE REQUEST] Two Factor Authentication
Replies: 36
Views: 18156

Re: [FEATURE REQUEST] Two Factor Authentication

Google Authenticator is already available in the RouterOS v7 User Manager for testing purposes: [emils@ez_pair7_r1] /user-manager> user/print Flags: X - disabled 0 name="emils" password="test" otp-secret="JBSWY3DPEHPK3PXP" group=default shared-users=1 attributes="" This will allow authentication fo...
by mada3k
Wed Sep 09, 2020 6:26 pm
Forum: RouterBOARD hardware
Topic: Failover solutuion
Replies: 2
Views: 287

Re: Failover solutuion

VRRP needs a working L2 between the routers, either done in software or a switch.

The usual procedure with two BGP providers is to connect them on different physical routers, then run iBGP between them.
by mada3k
Sat Sep 05, 2020 10:30 pm
Forum: RouterBOARD hardware
Topic: HAP AC2 best option for home use
Replies: 13
Views: 2379

Re: HAP AC2 best option for home use

Performance is very dependent on where the access point, or router in this case, is placed. The worst placement is the most common unfortunally - On some shelf/bench with the TV with other equipment. I have a hEX at home and two wAP AC. One placed on the kitchen and the other one in the corridor nex...
by mada3k
Tue Sep 01, 2020 10:41 am
Forum: General
Topic: RouterOS Firewall configuration when using a bridge with multiple VLANs
Replies: 2
Views: 1263

Re: RouterOS Firewall configuration when using a bridge with multiple VLANs

IP Firewall rules is always on L3 interface level. Using firewall rules on a VLAN-aware L2 bridge (without an IP) will have no effect. To protect people from "jumping between VLANs" enable vlan-filtering and frame-types=admit-only-untagged-and-priority-tagged on all client-ports. I'm using VLAN awar...
by mada3k
Mon Aug 31, 2020 11:55 am
Forum: General
Topic: mDNS and WoL across VLANs
Replies: 3
Views: 432

Re: mDNS and WoL across VLANs

mDNS Reflection is a long asked for feature request on RouterOS. But it can be done on any linux-systems (avahi-daemon)
by mada3k
Fri Aug 28, 2020 5:26 pm
Forum: RouterBOARD hardware
Topic: SFP Throught fast ethernet media converter
Replies: 2
Views: 309

Re: SFP Throught fast ethernet media converter

100Mbit over SFP is very special. Not supported on all ports/platforms. Gigabit is the standard.

When using against media converters, disable auto-negotiation and use 1Gbps-FD
by mada3k
Wed Aug 26, 2020 5:36 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 89
Views: 4922

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

In our field we use both. When we buy Cisco, we look at datasheets, whitepapers, manuals, some calls to some sellers and so on, presents an idea and requirements, then we get quotes. Then we require the features to work , or the sellers consultants has to make it work , with or without Cisco. Then w...
by mada3k
Tue Aug 25, 2020 6:03 pm
Forum: General
Topic: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]
Replies: 89
Views: 4922

Re: Mikrotik or NOT!!! Industry standarts say no!! Why? [SOLVED]

Many enterprises is obsessed with 24x7 support from the vendor. If it can't be delivered, the vendor is simply out. Many enterprises will require a unbrella system of some kind. Like Cisco Prime, Juniper Space etc. DUDE is a joke. It's also important to have long-lived product lines, like the Cisco ...
by mada3k
Sun Aug 23, 2020 6:47 pm
Forum: General
Topic: Correct way of switch in RouterOS
Replies: 5
Views: 994

Re: Correct way of switch in RouterOS

Thanks tdw, I have now cleaned up my configuration as you gave example on. Works as good as before.
by mada3k
Sat Aug 22, 2020 9:42 pm
Forum: General
Topic: Correct way of switch in RouterOS
Replies: 5
Views: 994

Re: Correct way of switch in RouterOS

I see. VLAN50 and 59 must reach the CPU since it runs DHCP for VLAN50, and VLAN59 for management. How should the bridge setup look like then? Something like this? /interface bridge port add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=ether1 add bridge=bridge1 frame-types=admit-only-v...
by mada3k
Sat Aug 22, 2020 6:49 pm
Forum: General
Topic: Correct way of switch in RouterOS
Replies: 5
Views: 994

Correct way of switch in RouterOS

Hi, I have a CRS112-8P-4S at home and it's a great little PoE-switch. I'm using the setup as done in Example 1 https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_series_switches_examples#VLAN However, I find the configuration a bit... double and redundant.. /interface ethernet switch egress-vlan-tag a...
by mada3k
Mon Aug 17, 2020 9:57 pm
Forum: RouterBOARD hardware
Topic: Need help picking a MikroTik product for AP setup
Replies: 7
Views: 1086

Re: Need help picking a MikroTik product for AP setup

I have a wAP AC. Works great.
by mada3k
Wed Aug 12, 2020 6:05 pm
Forum: RouterBOARD hardware
Topic: SFP module is extremely hot
Replies: 45
Views: 19781

Re: SFP module is extremely hot

It's strange that some SFP's get extremly hot when plugged in to some host devices. Higher voltage? Clock-frequency? Power-saving incompability?

Some SFP just get very warm, especially GPON, long-reach SM and 10GBase-T transcievers generate a lot of heat by themself regardless of host device.
by mada3k
Sun Aug 09, 2020 2:11 pm
Forum: RouterBOARD hardware
Topic: MikroTik DC power 10Gb switch with lots of ports?
Replies: 5
Views: 1415

Re: MikroTik DC power 10Gb switch with lots of ports?

Yes, it should work to bypass the internal powersupplies, they often supply 12 or 24 volts.
by mada3k
Sat Aug 08, 2020 7:11 pm
Forum: RouterBOARD hardware
Topic: Edgerouter 4/6P/12/12P vs MikroTik RB3011/RB4011/CCR1009-7G-1C-1S+PC (Bell Fibe FTTH)
Replies: 2
Views: 2373

Re: Edgerouter 4/6P/12/12P vs MikroTik RB3011/RB4011/CCR1009-7G-1C-1S+PC (Bell Fibe FTTH)

Well, if you are aiming at such speeds (1Gbit+) then you probably can afford a better router. PPPoE introduces a lot of overhead unfortunally. I don't know any regular vendor that has offload-capability for this (the shitty ISP boxes may) Personally I'm stuck on Cable 100/10 (no ludicrous PPPoE alth...
by mada3k
Fri Aug 07, 2020 2:08 pm
Forum: RouterBOARD hardware
Topic: MikroTik DC power 10Gb switch with lots of ports?
Replies: 5
Views: 1415

Re: MikroTik DC power 10Gb switch with lots of ports?

How about CRS309-1G-8S+IN? Or you need is 10GBase-T ?
by mada3k
Fri Aug 07, 2020 2:06 pm
Forum: RouterBOARD hardware
Topic: 10Gb networking
Replies: 4
Views: 1098

Re: 10Gb networking

There is no specific "uplink"
by mada3k
Mon Aug 03, 2020 9:55 pm
Forum: RouterBOARD hardware
Topic: CCR Recommendation
Replies: 4
Views: 1344

Re: CCR Recommendation

Just as DHCP-server? Probably all of them :)
by mada3k
Mon Jul 20, 2020 12:28 pm
Forum: RouterOS v7 BETA
Topic: CRS317 routing speed with pppoe and L3 offloading
Replies: 6
Views: 1475

Re: CRS317 routing speed with pppoe and L3 offloading

It's insane with ISPs that use PPPoE in such speeds. Customers will spend most of their CPU resources to encap/decap packets. It's just sad.

Not sure that a CCR1009 will do it either. Maybe the RB4011 or new CCR2004 have the horsepower.
by mada3k
Mon Jul 20, 2020 10:44 am
Forum: General
Topic: Rogers now has 100G symmetrical Internet
Replies: 17
Views: 3658

Re: Rogers now has 100G symmetrical Internet

If you can spend the money on a 100Gbps Internet connection, then the cost of the router is no issue.
by mada3k
Sat Jul 18, 2020 12:58 pm
Forum: General
Topic: [Web interface] The WAN IP is not displayed if a VLAN is used.
Replies: 3
Views: 1530

Re: [Web interface] The WAN IP is not displayed if a VLAN is used.

Quickset is a "initial config"-tool. Not to be used for regular changes.
by mada3k
Fri Jul 17, 2020 10:33 am
Forum: RouterBOARD hardware
Topic: RB5011
Replies: 40
Views: 11105

Re: RB5011

Yes, the RB1100:s are strange, no SFP/Combo:s at all but -48V supply. And RB2011 is just old. However, I can see understand why the RB4011 has such a dumb switch-chip. Is not supposed to be used as a switch, only as a port-expander. But then the device is somewhat unsuitable for SoHo-usage. The CCR1...
by mada3k
Tue Jul 14, 2020 1:59 pm
Forum: Announcements
Topic: v6.47.1 [stable] is released!
Replies: 147
Views: 59544

Re: v6.47.1 [stable] is released!

Many other devices only have the bootloader in a 2-4MB SPI Flash, then loads the system from SD or eMMC.
by mada3k
Tue Jul 14, 2020 1:55 pm
Forum: RouterBOARD hardware
Topic: RB5011
Replies: 40
Views: 11105

Re: RB5011

I agree that something is missing between the RB4011 and CCR2004. The RB4011 is a bit more tilted against Home-usage. CCR2004 is a datacenter device. Or, your could make two variants of the same device. One with most Ethernets and DC-jack, one with mostly SFPs and telecom-power. Devices with everyth...
by mada3k
Mon Jul 13, 2020 10:18 am
Forum: General
Topic: CRS125 and VLAN on 1Gbps internet.. many questions
Replies: 13
Views: 2329

Re: CRS125 and VLAN on 1Gbps internet.. many questions

Verify that the traffic really is hardware switched (and not software bridged)... Look under /bridge ports and verify that all ports is "H".

But generally: No, CRS125 is not designed to handle 1Gbps of Firewall/NAT.
by mada3k
Sun Jul 12, 2020 7:36 pm
Forum: Forwarding Protocols
Topic: MPLS labels missing in traceroute output [SOLVED]
Replies: 8
Views: 1837

Re: MPLS labels missing in traceroute output [SOLVED]

No need to use Winbox. The MPLS information will show in both telnet and ssh, but the terminal has to be wide enough.
by mada3k
Sun Jul 12, 2020 7:14 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL Router for UK
Replies: 4
Views: 1245

Re: Mikrotik VDSL Router for UK

Nope, no devices with builtin xDSL or DOCSIS.

Use your current modem bridged or some passtrough mode.
by mada3k
Sun Jul 12, 2020 10:42 am
Forum: General
Topic: VoIP over EoIP
Replies: 2
Views: 710

Re: VoIP over EoIP

What is the reason for using EoIP? Do you need L2 connectivity between all the sites?

If the source addresses change, then you are probably doing some NAT somewhere, and SIP with NAT is always problems.
by mada3k
Sat Jul 11, 2020 10:44 am
Forum: General
Topic: Cannot download at 10 gbps [SOLVED]
Replies: 23
Views: 4021

Re: Cannot download at 10 gbps [SOLVED]

Not sure if it will affect performance, but since you are running the ports bridged, the ip-adress should be put on the bridge.

Like:
/ip address add address=10.3.0.254/24 interface=bridge1 network=10.3.0.0
by mada3k
Fri Jul 10, 2020 10:05 pm
Forum: General
Topic: Cannot download at 10 gbps [SOLVED]
Replies: 23
Views: 4021

Re: Cannot download at 10 gbps [SOLVED]

Well. The CCR10xx series is optimized for many-to-many connections (like in the real world), not maximum host-to-host communication. If you start additional 1-2 iperf sessions then I think you should be able to max it out. What kind of BS answer is that? The test results from MT clearly show the OP...
by mada3k
Fri Jul 10, 2020 10:14 am
Forum: General
Topic: Cannot download at 10 gbps [SOLVED]
Replies: 23
Views: 4021

Re: Cannot download at 10 gbps [SOLVED]

Well. The CCR10xx series is optimized for many-to-many connections (like in the real world), not maximum host-to-host communication. If you start additional 1-2 iperf sessions then I think you should be able to max it out.
by mada3k
Thu Jul 09, 2020 6:13 pm
Forum: RouterBOARD hardware
Topic: PPTP 1000Mbit - which router should I choose?
Replies: 6
Views: 1279

Re: PPTP 1000Mbit - which router should I choose?

Both PPTP and PPPoE is horrible slow. I think you need at least RB4011 or higher.
by mada3k
Wed Jul 08, 2020 12:46 pm
Forum: SwOS
Topic: Can CRS305 with swOS allow you to set sfp port specifically to 2.5g
Replies: 4
Views: 1281

Re: Can CRS305 with swOS allow you to set sfp port specifically to 2.5g

I would not expect to much from a USB based Ethernet adaptor, maybe if it's USB-C/Lightning-based.
by mada3k
Sat Jun 27, 2020 11:36 am
Forum: Announcements
Topic: MikroTik Newsletter June 2020 (#96)
Replies: 29
Views: 9457

Re: MikroTik Newsletter June 2020 (#96)

Great stuff!

GPEN21 looks interesting as very light CPE. Is it running SwOS och RouterOS?
by mada3k
Fri Jun 26, 2020 6:07 pm
Forum: RouterBOARD hardware
Topic: Wall mounted Acces point?
Replies: 7
Views: 1463

Re: Wall mounted Acces point?

I have my wAP AC on the wall. Works great.
by mada3k
Thu Jun 25, 2020 9:16 am
Forum: RouterBOARD hardware
Topic: CCR2004-1G-12S+2XS - Throughput Question
Replies: 13
Views: 2488

Re: CCR2004-1G-12S+2XS - Throughput Question

Somewhere there has to be a tradeoff. >50Gbps forwarding capability for $595 is still a bargain.
by mada3k
Wed Jun 24, 2020 9:10 am
Forum: General
Topic: ROS on A10 AX3400
Replies: 4
Views: 1079

Re: ROS on A10 AX3400

It's a bit sad with all custom appliance platforms, when the support/license runs out, then it's basically scrap. In some cases you can get a Linux-distro working but it's hard with the switch-chips (documentation/SDK is often under NDA).
by mada3k
Mon Jun 22, 2020 9:41 am
Forum: General
Topic: ROS on A10 AX3400
Replies: 4
Views: 1079

Re: ROS on A10 AX3400

Hah, I tried the same on some odd network appliance once, but could not get a link on any interfaces. There was some system-management chip that probably handed that.

All those ports is probably behind a switch-chip/asic and not detected/supported by RouterOS.
by mada3k
Sat Jun 20, 2020 3:14 pm
Forum: Scripting
Topic: Have I been hacked?
Replies: 7
Views: 2015

Re: Have I been hacked?

Either that, or some previous owner that used some home-made hotspot-provisioning scripts.

Make sure that you never expose WinBox, API or other services to Internet or users.
by mada3k
Fri Jun 19, 2020 12:00 pm
Forum: RouterBOARD hardware
Topic: Help me choose hardware for my home
Replies: 6
Views: 1290

Re: Help me choose hardware for my home

I have a similar setup.

I have tied the LTE-interface to a separate VRF and separate VLAN. That VLAN ends up in my main router, where it can be used as backup if needed.
by mada3k
Wed Jun 17, 2020 9:14 pm
Forum: RouterBOARD hardware
Topic: Please make a Gigabit Reverse PoE switch, with 14-24 PoE in ports, 1-2 PoE out ports, and a SFP(+) port
Replies: 6
Views: 2262

Re: Please make a Gigabit Reverse PoE switch, with 14-24 PoE in ports, 1-2 PoE out ports, and a SFP(+) port

Maybe Mikrotik will continue with an Gigabit-version. In fact, I see that problem in Sweden sometimes. Cable providers oversell capacity for dirt cheap on their lousy old long-payed-off coax-networks. Their network is often plauged with groundloops, weather-influence, irregular ping-times and regula...
by mada3k
Tue Jun 16, 2020 10:05 pm
Forum: RouterBOARD hardware
Topic: Random SFP question
Replies: 3
Views: 853

Re: Random SFP question

Basically the most 1Gig SFPs work in a Mikrotik from my experience. I even managed to get old FibreChannel SFPs to run at 1 gigabit.

It's the opposite with 100M SFPs. Those requires certian capabilites in the host. Only a few devices supports 100M SFP, so avoid those if possible.
by mada3k
Tue Jun 16, 2020 9:52 pm
Forum: RouterBOARD hardware
Topic: Please make a Gigabit Reverse PoE switch, with 14-24 PoE in ports, 1-2 PoE out ports, and a SFP(+) port
Replies: 6
Views: 2262

Re: Please make a Gigabit Reverse PoE switch, with 14-24 PoE in ports, 1-2 PoE out ports, and a SFP(+) port

So basically a netPower 15FR with Gigabit and SFP+'s?

I can agree that releasing a 10/100 switch in 2019 is, a bit conservative. However I personally chosen to only have 100/100 at home. Haven't seen any need for anything above that.
by mada3k
Mon Jun 15, 2020 9:06 pm
Forum: Beginner Basics
Topic: CCR1009-7G-1C-1S+PC
Replies: 16
Views: 3345

Re: CCR1009-7G-1C-1S+PC

From experience I can tell that sometimes you need to specify combo-mode=sfp, and for 100M-SFP's you always need to set auto-negotiation=no and speed=100M manually. This is highly dependent on the SFP module used.
by mada3k
Fri Jun 05, 2020 8:59 pm
Forum: General
Topic: SFP modules for CCR1009-7G-1C-1S+
Replies: 1
Views: 607

Re: SFP modules for CCR1009-7G-1C-1S+

LC is the physical connector.

Single-mode or Multi-mode?

"Cisco LX" SFP's usually means 10km Single-mode.
by mada3k
Fri Jun 05, 2020 8:33 pm
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 66182

Re: v7.0beta8 [development] is released!

WOW. Thats som heavy features and updates :shock:
by mada3k
Wed Jun 03, 2020 6:05 pm
Forum: General
Topic: Compal CH7465LG-VM and RB4011iGS+5HacQ2HnD
Replies: 2
Views: 724

Re: Compal CH7465LG-VM and RB4011iGS+5HacQ2HnD

My experience with Compal DOCSIS modems it that when they loose the connection to the headend they switches over to a 192.168.100.0/24 range so you can access the web-admin-page, even when bridged. When the connection is restored it switches back to bridged mode (with the 192.168.100.1 address still...
by mada3k
Tue Jun 02, 2020 10:14 pm
Forum: Forwarding Protocols
Topic: MPLS - Labels dropping after outage
Replies: 6
Views: 1338

Re: MPLS - Labels dropping after outage

Are you using any LDP accept/advertise filters?
by mada3k
Tue Jun 02, 2020 9:45 pm
Forum: Announcements
Topic: v6.47 [stable] is released!
Replies: 349
Views: 100289

Re: v6.47 [stable] is released!

Impressive amount of fixes and features.
by mada3k
Mon Jun 01, 2020 9:52 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: Port Forwarding Wizard/Menu in GUI
Replies: 14
Views: 2857

Re: Feature Request: Port Forwarding Wizard/Menu in GUI

Exactly, if you want a edgemax, but an edgemax. If you want a D-Link, buy that.

It's better for RouterOS to focus on small/medium-ISP and datacenter features.
by mada3k
Mon Jun 01, 2020 7:49 pm
Forum: RouterBOARD hardware
Topic: netPower 16P max total power
Replies: 6
Views: 1602

Re: netPower 16P max total power

I agree, over a certain power level they really should use screw och block style terminals.
by mada3k
Sun May 31, 2020 12:15 pm
Forum: RouterBOARD hardware
Topic: Outdoor RouterBoard
Replies: 1
Views: 527

Re: Outdoor RouterBoard

It's always wise to avoid direct sunlight of course.

Probably not performance but high temperatures will generally decrease the overall lifetime of a device (capacitors will age faster, fans wear out).
by mada3k
Sat May 30, 2020 11:17 am
Forum: RouterBOARD hardware
Topic: CRS317-1G-16S+ is near to death strange log
Replies: 6
Views: 1155

Re: CRS317-1G-16S+ is near to death strange log

Sounds either that some process has died, or the filesystem has gone corrupted.
by mada3k
Wed May 27, 2020 6:24 pm
Forum: RouterOS v7 BETA
Topic: LTE APN with fix IP [SOLVED]
Replies: 13
Views: 2684

Re: LTE APN with fix IP [SOLVED]

Sounds a bit strange that it was shipped with beta software. Sure it hasn't been used before?
by mada3k
Mon May 25, 2020 1:15 pm
Forum: RouterBOARD hardware
Topic: Running hardware portably using DC battery power
Replies: 14
Views: 2736

Re: Running hardware portably using DC battery power

For mobility I would go for power-tool batteries as well. They are light and have great capacity.

SLA is for more suited for permanent installations where weight isn't an issue.
by mada3k
Fri May 22, 2020 9:43 pm
Forum: RouterOS v7 BETA
Topic: V7 questions?
Replies: 34
Views: 7923

Re: V7 questions?

Then you just need to mirror ports to the CPU to monitor the actual traffic.

Otherwise it sounds like you want to build a software based switch/bridge. This will be slow, power-consuming and costly.
by mada3k
Thu May 21, 2020 2:43 pm
Forum: RouterBOARD hardware
Topic: Running hardware portably using DC battery power
Replies: 14
Views: 2736

Re: Running hardware portably using DC battery power

I run a accesspoint and router on a 27.2V float charge voltage supply with two 12V SLA batteries. 2A battery fuse. Both the AP and router has voltage monitor and detects and logs and notifies when voltage drops and goes to low.

Mikrotik is very suitable in this kind of setups with varying DC supply.
by mada3k
Thu May 21, 2020 2:26 pm
Forum: RouterBOARD hardware
Topic: CRS326--CRS326, SFP+ only ~700mbit via 10gbit link. Slow performance or bottleneck?
Replies: 7
Views: 1654

Re: CRS326--CRS326, SFP+ only ~700mbit via 10gbit link. Slow performance or bottleneck?

Thats easy. The switch has not the CPU resources to generate or receive 10Gbps.

You have to test with two beefy servers with 10GbE-NICs and iperf.
by mada3k
Thu May 21, 2020 11:30 am
Forum: The Dude
Topic: Reading Syslog from MT [SOLVED]
Replies: 6
Views: 2117

Re: Reading Syslog from MT [SOLVED]

Have you enabled remote logging?

Example:
/system logging action
set remote remote=192.168.xxx.xxx
/system logging
add action=remote topics=info
add action=remote topics=warning
add action=remote topics=error
add action=remote topics=critical
by mada3k
Thu May 21, 2020 11:03 am
Forum: RouterBOARD hardware
Topic: CCR2004-1G-12S+2XS with more RAM ?
Replies: 15
Views: 4327

Re: CCR2004-1G-12S+2XS with more RAM ?

I agree with guipoletto. The cooling solution is a bit odd. Since both 25G and 10G SFP's might get quite hot, running fans is probably mandatory. But the running fans won't be able to cool the switch ASIC since it has it's fins/radiator on the back. This category of device isn't typically a devices ...
by mada3k
Mon May 18, 2020 7:34 pm
Forum: RouterBOARD hardware
Topic: Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN
Replies: 2
Views: 792

Re: Severe port flapping/reset/unstable in brand new RB4011iGS+5HacQ2HnD-IN

Does the flapping occur if you disable the wireless?

I once had a routerboard that had frequent flaps, but it was the antenna that was placed to close to the board.
by mada3k
Sat May 16, 2020 6:25 pm
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 68
Views: 32509

Re: hardware idea for a multiport switch

I've used them in a few buldings and while the idea and the hardware is great, their management software (nexman) is kind of mediocre. Many industrial and DIN-mounted stuff is horrible from a software and management perspective. The are mostly built to last and not be flexible. And you can't build ...
by mada3k
Sat May 16, 2020 11:13 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 68
Views: 32509

Re: hardware idea for a multiport switch

Small DIN switches.. Wide input DC power. It'd be nice to be able to mount small switches on walls in closets, cabinets, backboards, industrial situations, etc...
+1
by mada3k
Sat May 16, 2020 10:20 am
Forum: RouterBOARD hardware
Topic: How to read registers of QCA8334 in RBFTC11 media convertor through UART?
Replies: 2
Views: 586

Re: How to read registers of QCA8334 in RBFTC11 media convertor through UART?

Not sure of what you are trying to accomplish. This is very out of scope for this forum, but maybe you will find what och seek in the switch chip datasheet
https://github.com/Deoptim/atheros/blob ... asheet.pdf
by mada3k
Fri May 15, 2020 9:06 pm
Forum: RouterBOARD hardware
Topic: Doubt about HW CRS [SOLVED]
Replies: 4
Views: 1837

Re: Doubt about HW CRS [SOLVED]

Of course you can. However you can expect ~20Mbit of IPsec performance on that models.

SwitchOS only supports switching, nothing else.
by mada3k
Fri May 15, 2020 8:30 pm
Forum: RouterBOARD hardware
Topic: Mikrotik Switch with 2,5G or 5G Ports.
Replies: 6
Views: 1778

Re: Mikrotik Switch with 2,5G or 5G Ports.

2.5G and 5G Ethernet is very uncommon.

CRS309-1G-8S+IN with DAC cables is the most sane choise.
by mada3k
Wed May 13, 2020 10:13 pm
Forum: RouterBOARD hardware
Topic: What is your opinion of Mikrotik routers?
Replies: 3
Views: 1069

Re: What is your opinion of Mikrotik routers?

+ Very wide feature-set. Extremely flexible devices. Wipes the floor with segment competitors in pure routing/mpls-features. + Many model to choose from. + Great CLI, tools and scripting! + DC-input and often wide on some models + Lightweight and usable Web-interface + Often very useful interface-mi...
by mada3k
Mon May 11, 2020 9:43 pm
Forum: RouterBOARD hardware
Topic: hAP ac (and some other new rotuers) too small flash
Replies: 62
Views: 19956

Re: hAP ac (and some other new rotuers) too small flash

Mikrotik has promised us that 16M will not be a obstacle for RouterOS 7 or upcomming features. It will, so let just hope that they will package different features wise.
by mada3k
Mon May 11, 2020 7:46 pm
Forum: RouterBOARD hardware
Topic: 10 GIG version of HEX
Replies: 7
Views: 1660

Re: 10 GIG version of HEX

I agree with andriys. CRS305-1G-4S+IN is almost perfect as a 10G CPE.
by mada3k
Sun May 10, 2020 8:35 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 368
Views: 127952

Re: Mikrotik VDSL / DSL Modem?

I don't think it's possible to fit a DOCSIS frontend in a regular SFP. DOCSIS also needs a fair bit of power for the RF-stuff.

Possible in a QSFP, but that would be ridiculous.
by mada3k
Sat May 09, 2020 1:42 pm
Forum: General
Topic: Low TCP throughput over EoIP set at 1500 mtu
Replies: 3
Views: 969

Re: Low TCP throughput over EoIP set at 1500 mtu

Is the link capable of 1542 byte sized frames?
by mada3k
Sat May 09, 2020 12:04 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

So instead of making this an architecture- or chip based problem, it is more like a product specification problem. Probably Cisco have a more rigid (and therefore sometimes more restrictive) featureset of products. But they do serve a different market too. That is true. Sometimes I suspect that Mik...
by mada3k
Fri May 08, 2020 8:38 pm
Forum: RouterBOARD hardware
Topic: RB5011
Replies: 40
Views: 11105

Re: RB5011

Just no.

If you need powerful WiFi, get a proper AP and place it properly.
If you need powerful switch or router, get a proper switch or router.

If you don't care but like fancy numbers and lot of antennas, get a Netgear or D-Link.
by mada3k
Fri May 08, 2020 8:12 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

I would say yes and no. No, it doesn't matter if it's MIPS, PPC, ARMv7, ARMv8 etc. Yes, it does matter when the number of interfaces, power consumption, form-factor or performance is drastically changed [because of a SoC-change]. If your network rely on a device like that has a certain number of int...
by mada3k
Thu May 07, 2020 8:19 pm
Forum: RouterBOARD hardware
Topic: No LTE interface when router tethered to Android phone
Replies: 3
Views: 1360

Re: No LTE interface when router tethered to Android phone

A tethered Phone is not a LTE interface.

Is most often a USB CDC/EEM/NCM or smilar, and the compability will vary.
by mada3k
Wed May 06, 2020 10:06 pm
Forum: RouterBOARD hardware
Topic: CCR2004-1G-12S+2XS with more RAM ?
Replies: 15
Views: 4327

Re: CCR2004-1G-12S+2XS with more RAM ?

Thanks for the picture. Yes the memory is indeed soldered in. Isn't it a bit strange to have both fans and passive radiator on the back? I mean, either you have a fan or you don't. Either you have it in a quiet place (like home/office), or you have it a noisy place (witch is more likely because of t...
by mada3k
Sun May 03, 2020 9:03 pm
Forum: General
Topic: [SOLVED] lobridge disabled by mistake
Replies: 5
Views: 1151

Re: lobridge disabled by mistake

This definitely sounds like a bug or a corruption in the configuration.
by mada3k
Sun May 03, 2020 8:54 pm
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 50
Views: 28058

Re: MikroTik newsletter May 2020 (#95)

@prawira: Why just not buy a simple access point? 99% of all switches ends up in a closet or rack - what's the point of wireless then? Wireless is also more prone to technology changes (n, ac, mimo etc.) but a switch remains.
by mada3k
Sat May 02, 2020 9:35 am
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 50
Views: 28058

Re: MikroTik newsletter May 2020 (#95)

@krafg: Me to. The focus on LTE SOHO boxes generally confuses me. That market is already flooded with cheap alternatives.
by mada3k
Tue Apr 28, 2020 9:30 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

vortex, please stop spamming
by mada3k
Sun Apr 26, 2020 9:59 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

vortex, the " everyone needs 40G/100G at home " forum troll. PC is also worth the money and takes up space in the rack. It’s better to pay for Mikrotik some money for the SSD option or buy an SD card. You will not deny that the presence of an SD card in the CCR1000 is a necessary option. A bog-stand...
by mada3k
Sat Apr 25, 2020 8:35 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

ftp, dude, etc. Using internal 128 mbytes will kill it flash in a little time and divice goes into thrash. I understand Mikrotik routers uses not from a good life, for the same reason I want several uses for one device. Of course it will kill the NAND flash after a while, it's only designed to run ...
by mada3k
Sat Apr 25, 2020 12:30 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

Why the need for SSD storage in a router?


The texts and descriptions feels a bit unpolished. Impressive power consumption and very nice with ECC memory. Looking forward to a block diagram as well.
by mada3k
Sat Apr 25, 2020 12:21 pm
Forum: General
Topic: Transparent L2 Passthrough [SOLVED]
Replies: 5
Views: 2384

Re: Transparent L2 Passthrough [SOLVED]

VPLS has lower MTU overhead. 8 or 12 bytes if I remember correctly.

Some L2 providers have a varying maximal allowed MTU, for example 1526. EoIP will add 42 bytes on typ of the regular 1500 byte frame.
by mada3k
Thu Apr 16, 2020 8:51 pm
Forum: Scripting
Topic: Config Management
Replies: 3
Views: 1737

Re: Config Management

There is Unimus . RouterOS configuration differs a bit from other platforms where you simply can't just apply commands over and over again, or just activate another configuration on the fly. The best apporach is probably (and the one we use when deploying) is to begin with a remove [find] when deali...
by mada3k
Thu Apr 16, 2020 8:29 pm
Forum: RouterBOARD hardware
Topic: LTE - Home Network Setup and Gear
Replies: 5
Views: 2376

Re: LTE - Home Network Setup and Gear

CRS112-8P-4S-IN is nice and can indeed do L3, but not with the performance of the Audience.

You could for example create the following a "LTE uplink" VLAN that goes between the SXT and the Audience.
All clients defaults to the Audience, then the Audience defaults to the SXT. NAT is done at the SXT.
by mada3k
Wed Apr 15, 2020 10:29 pm
Forum: RouterBOARD hardware
Topic: LTE - Home Network Setup and Gear
Replies: 5
Views: 2376

Re: LTE - Home Network Setup and Gear

The SXT LTE6 will probably handle basic NAT and firewall for a LTE connection just fine. I would probably go with Figure 2.

If you need heavier inter-VLAN routing then you could use the Audience, then default out via the SXT.
by mada3k
Wed Apr 15, 2020 10:24 pm
Forum: Forwarding Protocols
Topic: Latency on VPLS tunnel [SOLVED]
Replies: 10
Views: 3784

Re: Latency on VPLS tunnel [SOLVED]

Well. Pro-audio is very sensitive to latency and jitter. Often switches with PtP/IEEE1588 is used to maintain syncronization.

VPLS on RouterOS is done in CPU (as in software) hence it will introduce some latency and jitter, especially under load. It's probably not an issue for regular VoIP or SIP.
by mada3k
Sun Apr 12, 2020 5:58 pm
Forum: RouterBOARD hardware
Topic: Need new hardware switch (based on RB260GS but do not need SFP/PoE)
Replies: 34
Views: 5459

Re: Need new hardware switch (based on GPeR)

So you want a RB260GS without SFP... or a hEX without the "router"?

All this for saving ~$10 ?
by mada3k
Sun Apr 12, 2020 2:28 pm
Forum: Forwarding Protocols
Topic: Is this a normal MikroTik VRF behavior?
Replies: 4
Views: 1916

Re: Is this a normal MikroTik VRF behavior?

Current RouteOS VRF implementation is not true VRF but more "VRF-like" policy routing.
by mada3k
Sun Apr 12, 2020 10:42 am
Forum: The Dude
Topic: Mikrotik denying connections
Replies: 7
Views: 3944

Re: Mikrotik denying connections

Problem is with DUDE on actual devices is that SD-card access is slow, very slow. USB is slow as well.

The best platform for DUDE is CHR.
by mada3k
Fri Apr 10, 2020 6:38 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 368
Views: 127952

Re: Mikrotik VDSL / DSL Modem?

The big ISPs and telco's will keep using shitty boxes that fits their need and compliance. They have no use for RouterOS features at all.

With that said, I not saying that Mikrotik shouldn't have a xDSL-media-converter like product. Most xDSL-routers are horrible in general.
by mada3k
Fri Apr 10, 2020 10:00 am
Forum: RouterBOARD hardware
Topic: Product Request: Coax SFP
Replies: 6
Views: 3527

Re: Product Request: Coax SFP

As ZeroByte says, I think It will be hard to build in all that RF-stuff in a SFP form factor.

Some Cable ISPs only accept their own equipment as well.
by mada3k
Thu Apr 09, 2020 9:43 pm
Forum: RouterBOARD hardware
Topic: hAP ac3 spotted at FCC
Replies: 23
Views: 7459

Re: hAP ac3 spotted at FCC

Doesn't make much difference witch LTE standard it has. Using LTE as home broadband is hideously expensive.
by mada3k
Thu Apr 09, 2020 8:02 pm
Forum: RouterBOARD hardware
Topic: hAP ac3 spotted at FCC
Replies: 23
Views: 7459

Re: hAP ac3 spotted at FCC

Yet another standard home box. Could had an SFP port, at least.
by mada3k
Mon Apr 06, 2020 4:36 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 368
Views: 127952

Re: Mikrotik VDSL / DSL Modem?

Not every country has cheap labour, and it is quicker to replace a box than laying FTTH. Very few people need 10 Gbps at home. This "NG.fast" is made for up to 100 meters, so it would be mostly for FTTB (or right outside). Then they should cut the old copper pair and drag an cheap fibre instead. Or...
by mada3k
Sun Apr 05, 2020 8:32 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 368
Views: 127952

Re: Mikrotik VDSL / DSL Modem?

Personally I think it's insane to keep investing in new advanced equipment for the old copper pairs, Especially when the range is only in a couple of hundreds of meters. When I had ADSL once we had a couple of kilometers to the exchange, then it had it's purpose.
by mada3k
Sun Apr 05, 2020 9:26 am
Forum: RouterBOARD hardware
Topic: HEX VLAN configuration question
Replies: 8
Views: 2499

Re: HEX VLAN configuration question

Then you should probably post you configuration here
by mada3k
Sat Apr 04, 2020 10:02 pm
Forum: RouterBOARD hardware
Topic: Mikrotik VDSL / DSL Modem?
Replies: 368
Views: 127952

Re: Mikrotik VDSL / DSL Modem?

How far does 500Mbps VDSL G.fast reach.. 30 meters? :)
by mada3k
Sat Apr 04, 2020 4:00 pm
Forum: RouterBOARD hardware
Topic: SFP, SFP+ media converters/network extenders ?
Replies: 4
Views: 2218

Re: SFP, SFP+ media converters/network extenders ?

"1000Base-T to SFP" sounds like a media converter. The RB260GS(P) almost does that for the same price as a generic converter. Then you have the RBFTC11.

I don't understand the 40G breakout thing.
by mada3k
Sat Apr 04, 2020 10:40 am
Forum: RouterBOARD hardware
Topic: SFP, SFP+ media converters/network extenders ?
Replies: 4
Views: 2218

Re: SFP, SFP+ media converters/network extenders ?

You mean a SFP+ to 10GBASE-T converter?
by mada3k
Fri Apr 03, 2020 8:32 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: RFC3021 /31 point-to-point support in v7
Replies: 4
Views: 2425

Re: Feature Request: RFC3021 /31 point-to-point support in v7

I don't disagree that /31 would be useful but i'd rather see the time spent on improving IPv6 support.
I agree. IPv4 as a service over a IPv6 network is possible the future.

https://ripe67.ripe.net/presentations/131-ripe2-2.pdf
by mada3k
Fri Apr 03, 2020 7:56 pm
Forum: RouterBOARD hardware
Topic: Anyone using Huawei ME909s-120 mPCIe ?
Replies: 5
Views: 2709

Re: Anyone using Huawei ME909s-120 mPCIe ?

Nope, no such features
by mada3k
Fri Apr 03, 2020 1:47 pm
Forum: RouterBOARD hardware
Topic: Anyone using Huawei ME909s-120 mPCIe ?
Replies: 5
Views: 2709

Re: Anyone using Huawei ME909s-120 mPCIe ?

ME909u-521 works, but have not done any significant settings pin-status: ok registration-status: registered functionality: full manufacturer: Huawei Technologies Co., Ltd. model: ME909u-521 revision: 12.631.07.01.00 ... access-technology: Evolved 3G (LTE)
by mada3k
Sun Mar 29, 2020 12:19 pm
Forum: RouterBOARD hardware
Topic: CCR1009 temperature sensor issue
Replies: 1
Views: 1957

Re: CCR1009 temperature sensor issue

I have also noticed the same behaviour on some units. Have never been able to observe it via CLI - just SNMP.
by mada3k
Sun Mar 29, 2020 12:14 pm
Forum: RouterBOARD hardware
Topic: 10G device needed
Replies: 6
Views: 2834

Re: 10G device needed

A switch with included license can do all that a switch is supposed to do. Nothing to worry about.
by mada3k
Sat Mar 28, 2020 11:45 am
Forum: RouterBOARD hardware
Topic: 10G device needed
Replies: 6
Views: 2834

Re: 10G device needed

RB4011 is not a switch so pass on that.

CRS326 will probably do fine.
by mada3k
Thu Mar 26, 2020 7:08 pm
Forum: Forwarding Protocols
Topic: OSPF loses default-route with virtual-link
Replies: 2
Views: 1512

Re: OSPF loses default-route with virtual-link

Thanks for the quick response. We will do a workaround then.
by mada3k
Tue Mar 24, 2020 9:46 pm
Forum: Forwarding Protocols
Topic: OSPF loses default-route with virtual-link
Replies: 2
Views: 1512

OSPF loses default-route with virtual-link

Hi, I'm not sure if this is a RouterOS behaviour or an OSPF behaviour in general. We have a smaller sub-area that is behind another sub-area. To make this work we use a virtual-link to two of the closest backbone-routers. This works for all standard routes, except for the default route , that is sim...
by mada3k
Sun Mar 22, 2020 12:22 pm
Forum: RouterBOARD hardware
Topic: Problem selecting CCR
Replies: 8
Views: 3320

Re: Problem selecting CCR

It's all depending on the workload and implementation.

A RB4011 might be sufficent for this solution, buy two and you have redundancy as well.
by mada3k
Sun Mar 22, 2020 12:07 pm
Forum: General
Topic: Vlan in "new bridge" configuration
Replies: 24
Views: 4343

Re: Vlan in "new bridge" configuration

by mada3k
Sun Mar 22, 2020 12:05 pm
Forum: RouterOS v7 BETA
Topic: Vlan Traffic Stop running
Replies: 1
Views: 2231

Re: Vlan Traffic Stop running

Well, V7 is still beta.

Does the switch say something? error-disabled like?
by mada3k
Sat Mar 21, 2020 5:14 pm
Forum: The Dude
Topic: The Dude IS Dead, really, isn't it?
Replies: 41
Views: 14498

Re: The Dude IS Dead, really, isn't it?

We tried Dude for a while but realized it was a dead end. I think it should be wise just to end it. Who runs their NMS on an network device anyway. We use NetXMS, ssh-keys and Ansible for management. The "object tool" and event actions is just killer features. It's so far superior. Maybe Mikrotik in...
by mada3k
Fri Mar 20, 2020 5:40 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 firmware bin
Replies: 8
Views: 3143

Re: hAP AC2 firmware bin

It should be possible to extract the bootloader firmware from the software package. Then write it to the SPI Flash at the correct location with a programming tool.
by mada3k
Mon Mar 16, 2020 9:06 pm
Forum: RouterBOARD hardware
Topic: Problem selecting CCR
Replies: 8
Views: 3320

Re: Problem selecting CCR

The level of router/firewall is manly depending on:
1) Speed of external connections, such as Internet.
2) The level of separation between networks (as VLAN separation)
3) Number of clients in general
4) How important it is
by mada3k
Sun Mar 15, 2020 8:32 pm
Forum: Beginner Basics
Topic: VLAN bridge with filter problem (hEX)
Replies: 3
Views: 1677

Re: VLAN bridge with filter problem (hEX)

OK, Seems resonable that vlan-filtering is needed. Adding the bridge as tagged member of itself solved it! Thanks! Here is the result: /interface bridge add comment=bridge name=br0 protocol-mode=none vlan-filtering=yes /interface bridge port add bridge=br0 comment="trunk to ap2" interface=ether3 add...
by mada3k
Sun Mar 15, 2020 5:32 pm
Forum: Beginner Basics
Topic: VLAN bridge with filter problem (hEX)
Replies: 3
Views: 1677

VLAN bridge with filter problem (hEX)

Hi, Previously I used a bunch of vlan-interfaces and a bridge for every vlan, but it become to cluttered. So since some month ago I now use the "single bridge" approach, however I can't get it to work fully. This is my setup: /interface bridge add name=br0 protocol-mode=none /interface bridge port a...
by mada3k
Sun Mar 15, 2020 3:50 pm
Forum: RouterBOARD hardware
Topic: Problem selecting CCR
Replies: 8
Views: 3320

Re: Problem selecting CCR

The CCR1072-1G-8S+ is an 8 port 10Gbit router and is indeed overkill. The CCR1016-12S-1S+ is also a router. So neither might be a good candidate. I'm a bit worried that you don't know what you really need. How many locations/floors? How many ports on each location? Do you need PoE for cameras or pho...
by mada3k
Fri Mar 13, 2020 5:52 pm
Forum: Virtualization
Topic: Virtualization of arm based RouterOS
Replies: 1
Views: 3231

Re: Virtualization of arm based RouterOS

Why?

Virtualizing ARM is more difficult since there is no "golden standard" platform as in the x86-world. QEMU must support the specific SoC to be emulated and it's built-in peripherals.
by mada3k
Wed Mar 11, 2020 3:27 pm
Forum: Wireless Networking
Topic: PLEASE HELP: wAP AC Configuration
Replies: 2
Views: 1680

Re: PLEASE HELP: wAP AC Configuration

To setup an VLAN-interface and then assigning an ip-address: /interface vlan add interface=ether1 name=ether1.39 vlan-id=39 /ip address add address=192.168.39.12/24 interface=ether1.39 If you want to limit management to this interface, then edit the allowed addresses under the /ip services to match ...
by mada3k
Wed Mar 11, 2020 1:20 pm
Forum: Announcements
Topic: MikroTik newsletter March 2020 (#94)
Replies: 40
Views: 32931

Re: MikroTik newsletter March 2020 (#94)

I think the GPEN concept is nice. Running Cat6 to individual apartments is common and far cheaper than terminating single-mode fibre to everyone. However you most likely use optical for the building connection since the major cost is to put the cable in the ground/on poles, not the actual cable, and...
by mada3k
Wed Mar 11, 2020 12:00 pm
Forum: RouterBOARD hardware
Topic: Mikrotik LTE Hardware .. it's a pain
Replies: 6
Views: 3545

Re: Mikrotik LTE Hardware .. it's a pain

The Huawei stick may get shipped pre-loaded with MNO prefered specific settings, then of course it works better.
by mada3k
Tue Mar 10, 2020 9:06 pm
Forum: Announcements
Topic: MikroTik newsletter March 2020 (#94)
Replies: 40
Views: 32931

Re: MikroTik newsletter March 2020 (#94)

Can somebody tell me what market is the CAT12 LTE aiming for? I'm also curious about the logic behind this device. As you say, running an own LTE network is basically impossible in the developed world. Only the multi-national MNO can afford the frequencies. 4G/LTE is always with data-caps, hence of...
by mada3k
Tue Mar 10, 2020 5:40 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 3998

Re: OSPF and multiple areas

We run a multi-area OSPF today and handling approx. 400 routes in total. The network is physically very "ring-like" and that unfortunally has a negative impact on convergance time. We used to do area range/summary before, but that introduced very odd behaviour as going the wrong or sub-optimal paths...
by mada3k
Mon Mar 09, 2020 9:14 pm
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 3998

Re: OSPF and multiple areas

Is stubbing and range/summary mandatory for take advantage of the benefits?

At what level (# of routers, # of routes) is an MPLS+iBGP solution a more logical to use than plain OSPF?
by mada3k
Mon Mar 09, 2020 11:42 am
Forum: Forwarding Protocols
Topic: OSPF and multiple areas
Replies: 9
Views: 3998

Re: OSPF and multiple areas

I'm also curious about this.

We have (at least) two ABRs between backbone and subarea and it seems to work as expected.
by mada3k
Sun Mar 08, 2020 12:02 pm
Forum: RouterBOARD hardware
Topic: What hardware requirement is needed for my Mikrotic router?
Replies: 8
Views: 4017

Re: What hardware requirement is needed for my Mikrotic router?

Same as for the RAM size? I wish 1GB size of the RAM would be enough for my use with 14 users' connections.
For basic NAT, firewall & routing no problems.
by mada3k
Sat Mar 07, 2020 5:59 pm
Forum: General
Topic: Feature requests
Replies: 1280
Views: 294966

Re: Feature requests

  • user: able to add user with password hash.
  • lcd: show custom text and/or image via script on display. This would be very useful for field tech!
  • commit/save/write in some way. Make sure that the configuration has been saved.
  • NHRP and mGRE or something similar for achieve "DMVPN".
by mada3k
Sat Mar 07, 2020 11:34 am
Forum: RouterBOARD hardware
Topic: What hardware requirement is needed for my Mikrotic router?
Replies: 8
Views: 4017

Re: What hardware requirement is needed for my Mikrotic router?

I see, we all hate import fees and taxes. What do you pay for your dual gigabit lines?

But is only 1GB RAM and 512MB NAND storage size enough to my use?
No problem at all. Storage doesn't impose any performance hits
by mada3k
Fri Mar 06, 2020 10:27 am
Forum: RouterBOARD hardware
Topic: What hardware requirement is needed for my Mikrotic router?
Replies: 8
Views: 4017

Re: What hardware requirement is needed for my Mikrotic router?

So you pay for dual 1Gbps lines, but you want a router for <$200 ?

The x86 version has limited hardware support for what I know.
by mada3k
Thu Mar 05, 2020 12:16 pm
Forum: General
Topic: USB, help me ?
Replies: 1
Views: 1360

Re: USB, help me ?

Why are you running v6.10 ??
by mada3k
Thu Mar 05, 2020 10:43 am
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

If we really are talking about multiple 25G and QSFP28 - then the forwarding must be done in hardware on a switch ASIC. No ARM or Intel CPU can shuffle that amounts of data.

It will probably then be a V7-only device with this specific forwarding delegation is implemented.
by mada3k
Tue Mar 03, 2020 12:43 pm
Forum: RouterBOARD hardware
Topic: Just going to leave this here...
Replies: 146
Views: 30566

Re: Just going to leave this here...

Intresting. The ccr2016 variant, AL73400 possibly?

40GBASE-T seems crazy.
by mada3k
Mon Mar 02, 2020 6:06 pm
Forum: Forwarding Protocols
Topic: VRF Management
Replies: 7
Views: 6390

Re: VRF Management

The normal approach is to run the management in the "main" table or "backbone". With that said I know Cisco has the possibility to bind some management services in a separate VRF instance.
by mada3k
Tue Feb 25, 2020 10:33 pm
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

- It is too complicated for a regular home user - It is an opportunity to make mistakes - The hardware setup is suboptimal But no regular home user will choose 10Gbps Internet in a very long time. And if they do, it's most probably a networking-nerd and will get the proper equipment. Not some lame ...
by mada3k
Sun Feb 23, 2020 9:27 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 165
Views: 49815

Re: Feature Request - Wireguard Protocol

Personally, I think that Wireguard is a bit of a joke, since it's hardcoded to use ChaCha20. So basiclly all systems with AES in hardware becomes useless and has to do it in software. Great work there. But what about low-end PC's some said? Well... My Celeron N3150 ITX has AES-NI... So bye bye all h...
by mada3k
Sun Feb 23, 2020 2:10 pm
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

I don't like the ISP boxes, so I need a faster router if I upgrade to gigabit internet and I don't know any other brand offering proper networking equipement with consumer-level pricing. But I don't want to buy a router which will only be useful for upgrading once or that only has 16MB flash. And n...
by mada3k
Fri Feb 21, 2020 4:50 pm
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 20
Views: 6278

Re: Mikrotik hardware accelerated routing

To take advantage of full HW-L3 features on chip you basically have to re-implent a big part of the IP-stack. This is probably fine when making a hardware customized platform, but problematic when you are trying to be generic and have a broad compability in general. However, I think that RouterOS co...
by mada3k
Thu Feb 20, 2020 6:14 pm
Forum: RouterBOARD hardware
Topic: CCR1009 collision and loop
Replies: 7
Views: 3449

Re: CCR1009 collision and loop

So you have created a bridge over two ports? Where does to packet loss occur, between the router and the clients?

Post your configuration "/export compact"
by mada3k
Mon Feb 17, 2020 9:12 pm
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

In my opinion CATV/DOCSIS is obsolete technology. GigabitEthernet is not. Not even FastEthernet.
by mada3k
Sun Feb 16, 2020 2:09 pm
Forum: Announcements
Topic: Future of LTE products, user feedback requested
Replies: 156
Views: 50528

Re: Future of LTE products, user feedback requested

now Chateau with Quectel EG12 The Chinese (as in Huawei) is putting out millions of these kind of CPE devices. Costs next to nothing according to people in the business. Basically gives them away when you are running their LTE equipment, to kill of other competitors. Are you sure you can compete in...
by mada3k
Sun Feb 16, 2020 11:12 am
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

Gigabit ethernet is obsolete.
No, it isn't.

xDSL is obsolete. 3G/HSDPA is obsolete. CATV/Coax and DOCSiS is obsolete.
by mada3k
Sat Feb 15, 2020 3:08 pm
Forum: RouterOS v7 BETA
Topic: Feature request - support more features of RTL8367 chip
Replies: 1
Views: 1869

Re: Feature request - support more features of RTL8367 chip

There is many variations of RTL8367 what I understand. The datasheet you linked is 10 years old as well.
by mada3k
Fri Feb 14, 2020 8:06 pm
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

A. Are you sure that source is able to deliver data with 10Gbs? B. ISPs always oversell bandwith so I'm not shure if they are able to deliver constant multi 10GB traffic to users. Edge routers will limit their throughput. C. 5 sec vs 50 sec for 50GB download .... OMG ... what a difference ... 50 mi...
by mada3k
Wed Feb 12, 2020 8:39 pm
Forum: RouterBOARD hardware
Topic: Ccr 1009 power issue
Replies: 12
Views: 4423

Re: Ccr 1009 power issue

My guess is that is a current sense resistor (to measure power draw) with some very low value.
by mada3k
Tue Feb 11, 2020 8:22 pm
Forum: RouterBOARD hardware
Topic: multigigabit desktop router
Replies: 113
Views: 22163

Re: multigigabit desktop router

Residential 10Gbps is ridiculous.
by mada3k
Mon Feb 10, 2020 9:19 pm
Forum: General
Topic: Report and Monitoring
Replies: 3
Views: 1064

Re: Report and Monitoring

Prometheus+influxdb+graphana is probably the best choise, where you can make aggregates by day/hour etc.

Observium presents very nice looking traffic graphs, but lacks in the reporting.
by mada3k
Sat Feb 08, 2020 5:54 pm
Forum: General
Topic: HW offload and PPPoE - low speed.
Replies: 11
Views: 2365

Re: HW offload and PPPoE - low speed.

PPPoE can never be offloaded by hardware
by mada3k
Sat Feb 08, 2020 3:33 pm
Forum: General
Topic: Request: add user with password hash
Replies: 3
Views: 1441

Request: add user with password hash

And preferably have it visible in configuration as well. Basically all platforms have this since ever. Example: /user add name=johndoe group=write hash-sha256=5d5fda4a9d1d0ee505baef750cdfe379dd0cb861 It's a must when you have multiple devices and you are mandated that all staff shall have their own ...
by mada3k
Thu Jan 30, 2020 9:53 pm
Forum: General
Topic: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquiti Unifi Network Switch
Replies: 31
Views: 4987

Re: Audiophile Level(Low Noise Floor, Silent) Mikrotik vs Ubiquite Unifi Network Switch

I believe in what I really hear. The audio fact is that, The less the jitter is, the better sound(with better imaging, seperation) you will hear. It is all about reducing jitter as low as possible and provide noise free communication(prevent packet resends..) What kind of audio format/protocol are ...
by mada3k
Wed Jan 29, 2020 10:08 pm
Forum: General
Topic: RB750Gr3 l2tp/ipsec unbearably slow
Replies: 22
Views: 6813

Re: RB750Gr3 l2tp/ipsec unbearably slow

I have this problem as well with IPSec policy based tunnel. It works but is dead slow (like kilobits/sec). If I setup a simple IPIP or GRE with simple encryption, it works flawlessly.

I have tried adding the "defconf: ipsec" rules, but makes no difference.
by mada3k
Tue Jan 28, 2020 9:31 pm
Forum: Forwarding Protocols
Topic: MIkrotik BGP Monitoring
Replies: 60
Views: 25393

Re: MIkrotik BGP Monitoring

We monitor BGP and OSPF status with NetXMS built in and SSH commands. We know that we always should have at a number of peers so we set a threshold for it.
/routing bgp peer print count-only where established
/routing ospf neighbor print count-only
by mada3k
Fri Jan 24, 2020 9:57 pm
Forum: RouterBOARD hardware
Topic: Hardware Wishlist
Replies: 18
Views: 6241

Re: Hardware Wishlist

  • DIN mounted sw/ro with PoE. 8-16 Eths and 2-4 SFPs.
  • LTE-router with external antennas. 2-4 Eths.
  • I think it's time for a top-of-the-line x86_64-based core router with several 10G
by mada3k
Fri Jan 24, 2020 9:44 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 195
Views: 37977

Re: CCR1072 watchdog reboot

Connection tracking is a NAT/Firewall feature. I'm not sure that Cisco/Junipers even does connection tracking in that manner.

But of course any device shouldn't reboot by itself.
by mada3k
Mon Dec 23, 2019 9:13 pm
Forum: RouterBOARD hardware
Topic: CCR1072 multicast continuity errors when plugging in both psu`s
Replies: 1
Views: 2650

Re: CCR1072 multicast continuity errors when plugging in both psu`s

Sound very strange. Grounding issue? Bad power supply?
by mada3k
Thu Dec 19, 2019 8:40 pm
Forum: Beginner Basics
Topic: FTTH very slow download speed (upload ok)
Replies: 15
Views: 5013

Re: FTTH very slow download speed (upload ok)

Thats certainly true. plain routing or switching is far simpler than encapsulation, compression and fragmentation.
by mada3k
Wed Dec 18, 2019 2:41 pm
Forum: Beginner Basics
Topic: FTTH very slow download speed (upload ok)
Replies: 15
Views: 5013

Re: FTTH very slow download speed (upload ok)

It's insantiy to use PPPoE in gigabit speeds, what are people thinking...

I don't think the RB2011 can handle 1000Mbps PPPoE traffic. that's a lot of re-framing/fragmentation that needs to be handled in software. For pure IPv4 routing it surly can to much more. Maybe the RB4011 can handle it.
by mada3k
Sun Dec 15, 2019 1:52 pm
Forum: RouterOS v7 BETA
Topic: Speedify Mulit WAN Bonding
Replies: 8
Views: 4095

Re: Speedify Mulit WAN Bonding

Yet another VPN provider...

What is "Speedify"? round-robin bonded openvpn-tunnels?
by mada3k
Fri Dec 13, 2019 10:22 am
Forum: RouterBOARD hardware
Topic: R11e-LTE Windows drivers
Replies: 4
Views: 4383

Re: R11e-LTE Windows drivers

The question is already answered

There are dozens of other LTE cards for laptops on the market.
by mada3k
Thu Dec 12, 2019 6:15 pm
Forum: RouterBOARD hardware
Topic: 3+ Wired, Routable ports + Wifi
Replies: 3
Views: 2690

Re: 3+ Wired, Routable ports + Wifi

As xvo says, the ports is configuable as independent interfaces.
by mada3k
Thu Dec 12, 2019 1:09 pm
Forum: RouterBOARD hardware
Topic: What is your opinion of Mikrotik routers?
Replies: 3
Views: 2987

Re: What is your opinion of Mikrotik routers?

Sure there are, but at a completly different cost both with hardware, licenses, support-agreements and accessories and so on.

You simply have to ask yourself the question, does Mikrotik fullfill the requirements? Can I realize this in a lab?
by mada3k
Tue Dec 10, 2019 4:29 pm
Forum: General
Topic: CCR 1016 always reboot
Replies: 8
Views: 1442

Re: CCR 1016 always reboot

20.7V looks odd. I think it should report 24V
by mada3k
Sun Dec 08, 2019 11:10 am
Forum: RouterBOARD hardware
Topic: Mikrotik hardware accelerated routing
Replies: 20
Views: 6278

Re: Mikrotik hardware accelerated routing

Routing in hardware is a challenge, especially when taking policy rules, firewall, VRF, QoS and NAT in consideration.

MPLS (and Ethernet as well) is far simpler to do in hardware.
by mada3k
Sat Dec 07, 2019 11:03 am
Forum: RouterBOARD hardware
Topic: DIN Mount Gigabit CRS
Replies: 1
Views: 2281

Re: DIN Mount Gigabit CRS

Yes, DIN mounted models would be nice. Not a huge number of ports, maybe 6-10G & 2S. Would fit in smaller cabinets.
by mada3k
Tue Dec 03, 2019 9:58 pm
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 39920

Re: v6.46 [stable] is released!

ccr - improved general system stability;

Any specifics about this?
by mada3k
Tue Nov 19, 2019 2:16 pm
Forum: RouterBOARD hardware
Topic: RB4011iGS+RM WAN port and LAN switching
Replies: 9
Views: 3130

Re: RB4011iGS+RM WAN port and LAN switching

If you are not using any advanced switch-features (VLAN etc.) then the group will be switched at full speed without passing the CPU. No port is meant for WAN, it's up to you to decide. You could group the clients on the two switch-groups in such a way that you minimize the need for passing between t...
by mada3k
Tue Nov 19, 2019 11:11 am
Forum: Forwarding Protocols
Topic: Ethernet forwarding
Replies: 4
Views: 2087

Re: Ethernet forwarding

Don't add an address to the bridge then :)
by mada3k
Sun Nov 17, 2019 3:52 pm
Forum: Forwarding Protocols
Topic: Ethernet forwarding
Replies: 4
Views: 2087

Re: Ethernet forwarding

Sounds like you just want bridge ether2 & ether3. Basiclly a two port switch.

But what is the RB1100 supposed to do?
by mada3k
Mon Nov 11, 2019 10:07 pm
Forum: Forwarding Protocols
Topic: /routing ospf virtual-link
Replies: 3
Views: 2258

Re: /routing ospf virtual-link

virtual-link is for connecting a sub-area (to the backbone) via another sub-area, witch normally isn't possible since all areas needs to be directly adjecent to the backbone-area
by mada3k
Mon Nov 11, 2019 10:38 am
Forum: General
Topic: Replace Cisco 2400 by Mikrotik
Replies: 3
Views: 895

Re: Replace Cisco 2400 by Mikrotik

This is rather common for business internet services. You could just add both networks the WAN-interface on the Mikrotik (x.x.140.178/30 and x.x.141.15/29) i think. If that doesn't work then you could add the /29 to an new loopback/bridge interface. To rule out that the Cisco doesn't do any fancy au...
by mada3k
Sat Nov 09, 2019 9:11 pm
Forum: Forwarding Protocols
Topic: Apple Bonjour across vlans?
Replies: 16
Views: 5671

Re: Apple Bonjour across vlans?

Well. Multicast routing is available on RouterOS with the multicast packet.

Another solution is a mDNS repeater/reflector. This is not yet supported by RouterOS, but can be run on any Linux-machine.
https://linux.die.net/man/5/avahi-daemon.conf
by mada3k
Fri Nov 08, 2019 2:39 pm
Forum: Forwarding Protocols
Topic: Migrate OSPF to OSPF+MPLS+BGP
Replies: 0
Views: 1878

Migrate OSPF to OSPF+MPLS+BGP

We are currently running an OSPF with 4 sub areas. We do have some area range/summarization in place but currently all "edge" networks is within same OSPF instance and is not easily summarized for the moment. We are running MPLS on some links today, for some VPLS tunnels. To speed things up and to t...
by mada3k
Fri Nov 08, 2019 11:07 am
Forum: RouterOS v7 BETA
Topic: Poll: who wants to have a better /export ?
Replies: 17
Views: 4972

Re: Poll: who wants to have a better /export ?

I think private keys should never be exportable, neither cert or ssh.

For public keys it would be nice to be able to have in exportable configuration. This would speed up deployment quite a while for us.
User with hashes would be welcomed as well for the same reason.
by mada3k
Fri Nov 01, 2019 9:16 pm
Forum: General
Topic: Reasons for PPPoE
Replies: 1
Views: 774

Reasons for PPPoE

I'm well aware what PPPoE is and how it works technically. I'm more interested in the practical reasons for using it. Personally I have never been an PPPoE user/client myself. The first broadband connection I experienced was via proprietary wireless, then I got Ethernet over CATV, DOCSIS, ADSL for a...
by mada3k
Thu Oct 31, 2019 10:25 pm
Forum: RouterBOARD hardware
Topic: Mirroring CCR1072
Replies: 2
Views: 2218

Re: Mirroring CCR1072

CCR1072 is not an switch - so no port mirroring is possible.
by mada3k
Tue Oct 29, 2019 12:01 pm
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 43207

Re: v6.45.7 [stable] is released!

"Simply disabling Winbox mitigates all of these attacks." - i couldn't agree more with this approach. i understand that winbox was a key for many happy current RouterOS users to get acquainted with networking, as for many the CLI still kind of scary, and it is still doing it. on the other hand, it ...
by mada3k
Sat Oct 26, 2019 1:05 pm
Forum: RouterBOARD hardware
Topic: Mikrotik based Management Box
Replies: 2
Views: 2233

Re: Mikrotik based Management Box

And of course the hassle of having the correct Java version installed for the KVM your are trying to use... :? But if you have built-in KVM then you probably want to use it. There are already standalone IP-based KVM units on the market for what I know. Many built in IPMI/KVM (Supermicro ones) just u...
by mada3k
Mon Oct 14, 2019 6:23 pm
Forum: Forwarding Protocols
Topic: Static MPLS configuration
Replies: 4
Views: 3318

Re: Static MPLS configuration

I'm also curious about this
by mada3k
Thu Sep 26, 2019 3:37 pm
Forum: RouterBOARD hardware
Topic: MKT router with FXS
Replies: 7
Views: 4124

Re: MKT router with FXS

Personally I'm very against CPE's with built in customer side wireless. CPE's is in many cases only a managed VLAN-aware L2 switch, and for good reasons.

But if Mikrotik decides to make some more CPE-ish models, then FXS and PoE would be useful.
by mada3k
Thu Sep 19, 2019 1:15 pm
Forum: RouterOS v7 BETA
Topic: Torrent client
Replies: 59
Views: 18229

Re: Torrent client

Please put these kind of features in a external packages. Completely unnecessary for the majority of the users and will only end up as an security issue.

Normal people gets an NAS or mini-server to run torrents.
by mada3k
Sun Sep 15, 2019 3:00 pm
Forum: RouterBOARD hardware
Topic: current (up-to-date) dual-band router
Replies: 3
Views: 2107

Re: current (up-to-date) dual-band router

The drawback with super all-in-one devices is that they generally always a tradeoff. Maxed out 5Ghz performance will require almost free-line-of-sight I have a similar same issue. L-shaped appartment in solid concrete. I have one 2.4G+5G and one 5G-only AP in the other corner. hEX in the middle some...
by mada3k
Fri Sep 13, 2019 1:39 pm
Forum: RouterBOARD hardware
Topic: Audience
Replies: 56
Views: 21664

Re: Audience

why usb if there is no print server support in ROS?
because all recent shareable printers today have ethernet or wifi.
by mada3k
Wed Sep 11, 2019 4:41 pm
Forum: General
Topic: Public IP Routing
Replies: 6
Views: 1388

Re: Public IP Routing

Not sure I understand how your setup looks but I mainly see three options

1) Static routes (or dynamic)
2) Bridges & VLAN
3) VPLS or EoIP tunnels.
by mada3k
Tue Aug 27, 2019 9:35 pm
Forum: General
Topic: Request: FEC tunnel types
Replies: 29
Views: 6055

Re: Request: FEC tunnel types

I think many would avoid running VoIP trough tunneling (because it will ad a new layer of jitter and delay). Re-transmisson should always be handled in the application layer, since the application is the only one that knows what to be re-sent.

But I's a cool solution indeed.
by mada3k
Mon Aug 19, 2019 10:32 pm
Forum: RouterBOARD hardware
Topic: CCR1009 temperature sensor issue
Replies: 11
Views: 3994

Re: CCR1009 temperature sensor issue

We also have noticed this behaviour on a couple of CCR1009s.
by mada3k
Wed Aug 07, 2019 3:30 pm
Forum: Announcements
Topic: Newsletter #90
Replies: 55
Views: 25516

Re: Newsletter #90

Amazingly low price on the 40G stuff.
by mada3k
Mon Jul 15, 2019 9:59 pm
Forum: General
Topic: Wrong User and Password 6.45.1
Replies: 8
Views: 3435

Re: Wrong User and Password 6.45.1

RouterOS have done some major changes to the username/password management. I recommend to re-set password all local accounts.
by mada3k
Tue Jun 18, 2019 9:26 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 53
Views: 8840

Re: Radical change coming for home and small business networking

I agree that most DOCSIS/cable CPEs is horrible and they should only focus on converting Ethernet to DOCSIS.

If Mikrotik implents the "micronets"-stack, what guarantee is there it will work with an all-in Arris/Technicolor/whatever-only-ISP and will you be able to modify the ISPs rules anyways?
by mada3k
Tue Jun 18, 2019 6:17 pm
Forum: Announcements
Topic: MikroTik News June 2019 (Issue #89)
Replies: 38
Views: 17859

Re: MikroTik News June 2019 (Issue #89)

LtAP looks really promising but WHY only 16MB of flash? Is a couple dollars really worth sacrificing future compatibility?
by mada3k
Sat Jun 15, 2019 10:42 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 53
Views: 8840

Re: Radical change coming for home and small business networking

So CableLabs will transform the DOCSIS-standard into a propertary SDN concept that will only permit ISP-managed routers/APs? And every client will be micro-managed by the ISP in some way?

Then lets just hope that people will hack the gateways and reverse engineer this stupidness.
by mada3k
Thu Jun 13, 2019 10:05 pm
Forum: General
Topic: Cablelabs Micronets
Replies: 4
Views: 1300

Re: Cablelabs Micronets

I agree that it would be nice if Mikrotik came up with some SDN-SD-WAN -ish orchestration solution. But this area is just so over-hyped for the moment and everyone rushes to be the self proclaimed "leader". It's impossible to support every new SDN-concept or VPN solution that pops up once a week now...
by mada3k
Fri Jun 07, 2019 1:45 pm
Forum: RouterBOARD hardware
Topic: Mikrotik SFP / Cisco
Replies: 3
Views: 1772

Re: Mikrotik SFP / Cisco

The magic "service unsupported-transceiver" command

My experience is that regular 1G MM seems to work fine. Copper SFPs with auto-stuff doesn't. Never tested SFP+.
by mada3k
Tue Jun 04, 2019 10:01 pm
Forum: General
Topic: Feature request: full crypto speedup for MT7621 chipset (e.g. hEX S)
Replies: 9
Views: 2604

Re: Feature request: full crypto speedup for MT7621 chipset (e.g. hEX S)

I assume that there is no OpenSSL hardware encryption engine support :-(
What do you mean by "OpenSSL encryption"? What ciphers are you refering to?
by mada3k
Sun Jun 02, 2019 5:22 pm
Forum: General
Topic: Feature request: full crypto speedup for MT7621 chipset (e.g. hEX S)
Replies: 9
Views: 2604

Re: Feature request: full crypto speedup for MT7621 chipset (e.g. hEX S)

This is the way generally all SoCs with hardware offload is implented and probably RouterOS as well. This is then interfaced to OpenSSL via Linux standard crypto API (see /proc/crypto)

OpenVPN on Linux uses the same standard crypto API if the correct ciphers i used (e.g AES128/256)
by mada3k
Tue May 21, 2019 9:45 pm
Forum: RouterBOARD hardware
Topic: [idea] cAP ax
Replies: 9
Views: 2676

Re: [idea] cAP ax

What is the current market penetration for clients with 802.11ax? Example of phones/laptops?
by mada3k
Sun May 19, 2019 12:19 pm
Forum: RouterBOARD hardware
Topic: Feature Request: CRS317
Replies: 1
Views: 695

Re: Feature Request: CRS317

This is a long wished feature (see Feature requests threads) in general.

Generally 98DX83xx looks live impressive chipsets, to bad it only used as a switch.
by mada3k
Sat May 11, 2019 2:19 pm
Forum: Forwarding Protocols
Topic: KNX Broadcast forwarding between 2 sub-networks
Replies: 1
Views: 2119

Re: KNX Broadcast forwarding between 2 sub-networks

You need to setup a mDNS proxy of some kind. For example use avahi-daemon on a RaspberryPi or OpenWRT-device between the bridges/vlans.
by mada3k
Sat May 11, 2019 2:11 pm
Forum: RouterBOARD hardware
Topic: Need more than one SFP interface at the level of $100 and $200
Replies: 8
Views: 1482

Re: Need more than one SFP interface at the level of $100 and $200

RB1100AHx4 with 2-4 SFP slots would be very helpful.
by mada3k
Mon May 06, 2019 8:15 pm
Forum: General
Topic: Feature request for v7.x
Replies: 282
Views: 76783

Re: Feature request for v7.x

mDNS proxy is very useful, both home and medium-enterprise.
by mada3k
Sat Apr 13, 2019 10:16 pm
Forum: Virtualization
Topic: FreeBSD Bhyve
Replies: 2
Views: 3213

Re: FreeBSD Bhyve

kernel and initrd seems to have moved under /boot recently
grub_run0="linux /boot/vmlinuz-64 crashkernel=16M"
grub_run1="initrd /boot/initrd.rgz"
by mada3k
Thu Apr 11, 2019 11:04 pm
Forum: General
Topic: Feature requests
Replies: 1280
Views: 294966

Re: Feature requests

IEEE1588 and SyncE would be great, but requires specific support in hardware level.

A more stressful issue is the need for BGP RKPI support.
by mada3k
Sun Mar 31, 2019 12:55 pm
Forum: General
Topic: RouterOS v7.0 beta1 - when?
Replies: 613
Views: 192079

Re: RouterOS v7.0 beta1 - when?

I think there's a high risk that some architectures/platforms will be stuck on ROS v6 for flash-size and toolchain reasons. v7 will probably be ARM and x86_64 only, and will probably lack some features thats simply not portable (I guess MPLS- and tunnel stuff).
by mada3k
Fri Mar 29, 2019 8:15 pm
Forum: RouterBOARD hardware
Topic: RB4011 Metal temperature is really hot
Replies: 53
Views: 15821

Re: RB4011 Metal temperature is really hot

I'm sure it's designed to be placed laying down, so the air can pass through the fins.
by mada3k
Tue Mar 26, 2019 10:58 pm
Forum: RouterBOARD hardware
Topic: 1100ah x4 switches are non h/w VLAN-aware?
Replies: 4
Views: 1068

Re: 1100ah x4 switches are non h/w VLAN-aware?

Yes, RTL8367 is a shitty switch-chipset indeed, but It's mainly used as "port-extender"
by mada3k
Tue Mar 19, 2019 9:04 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 28768

Re: v6.44.1 [stable] is released!

MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces. Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly. We'll need to lab this, to provide more granular detail... Thats worrying, But I can't confirm this at home [xxxxxxxx@rba] > /ip neighbor pr ...
by mada3k
Fri Mar 15, 2019 2:51 pm
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 58738

Re: Statement on Vault 7 document release

I wasn't asking for an explanation of netinstall.
by mada3k
Thu Mar 14, 2019 9:57 am
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 58738

Re: Statement on Vault 7 document release

And thats unfortunately a security flaw itself. Preferably the whole system should be replaced on update, but at least the the complete startup-chain (kernel -> init -> rc etc..)

Netinstall is not always possible. Can be very remote or hard to reach devices.
by mada3k
Wed Mar 13, 2019 11:45 am
Forum: Announcements
Topic: Statement on Vault 7 document release
Replies: 92
Views: 58738

Re: Statement on Vault 7 document release

I'm not sure if this is still the case, but: While I agree that a Mikrotik is "secure" by default (ships with firewall enabled and so on) and other vendors gets their exploits as well. Many vendors have their software contained in a single image file (e.g like Cisco, Juniper) that becomes replaced w...
by mada3k
Mon Mar 11, 2019 12:32 pm
Forum: RouterBOARD hardware
Topic: MUM Europe 2019: new hardware
Replies: 66
Views: 20951

Re: MUM Europe 2019: new hardware

1.5km extended ethernet sounds pointless when single-mode SFP's costs next to nothing today.
by mada3k
Wed Mar 06, 2019 6:11 pm
Forum: Announcements
Topic: February Newsletter #87
Replies: 65
Views: 29830

Re: February Newsletter #87

Is it possible that Marvell® Prestera® is the future choice for the CCR-line ?
by mada3k
Tue Mar 05, 2019 8:28 pm
Forum: RouterBOARD hardware
Topic: Burnt Mantboxes and Netmetal
Replies: 1
Views: 612

Re: Burnt Mantboxes and Netmetal

That quite a lot of soot and burn marks. Looks like far more juice than only PoE.
by mada3k
Mon Feb 25, 2019 10:27 am
Forum: RouterBOARD hardware
Topic: RB750GR3 support
Replies: 4
Views: 1425

Re: RB750GR3 support

RB750GR3 handles 100/100 fine. For queues I can't tell.
by mada3k
Sat Feb 23, 2019 11:29 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 68
Views: 32509

Re: hardware idea for a multiport switch

I agree, SFP-ports is important, however I think all ports should be on the same side.
by mada3k
Sun Feb 17, 2019 10:44 am
Forum: RouterBOARD hardware
Topic: Advice me: Hardware for high performance routing
Replies: 5
Views: 1339

Re: Advice me: Hardware for high performance routing

Hyper-V is slow. For 10G+ speeds you should run on bare metal - at least. Also for those speeds I think you have to either put your money big players (e.g Cisco, Juniper, Arista etc. with custom ASICs), or well chosen and tuned x86_64 hardware. CCR1072-1G-8S+ can handle some impressive loads of traf...
by mada3k
Fri Feb 08, 2019 9:32 pm
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 56
Views: 40111

Re: Why people pair UBNT APs with MikroTik routers?

People chooses UniFI/UBNT because
  • Better looks
  • Better range and performance
  • Simplier and better looking WebGUI

And all above is true - but Mikrotik is far better at routing and more in depth functions.
by mada3k
Tue Feb 05, 2019 6:31 pm
Forum: General
Topic: Feature request: MQTT Subscribe/Publish
Replies: 17
Views: 5986

Re: Feature request: MQTT Subscribe/Publish

I'm using NodeRed to parse syslog messages and publish event/values to MQTT (wireless clients/dhcp lease)
by mada3k
Tue Feb 05, 2019 10:27 am
Forum: General
Topic: Decline of Mikrotik?
Replies: 102
Views: 31833

Re: Decline of Mikrotik?

It will at least give some additional protection for the winbox-protocol (that some does over the Internet) that has been exploited several times.
by mada3k
Sat Feb 02, 2019 12:22 pm
Forum: General
Topic: Decline of Mikrotik?
Replies: 102
Views: 31833

Re: Decline of Mikrotik?

I'm also curios (and somewhat worried) where Mikrotik is going nowadays. Trying to compete in the "TR-069 segment" is pointless. Big ISPs only make deals with cheap OEM's like Huawei/Compal/Technicolor where they can control everything. Ubiquti is very strong in "Prosumer" WiFi & WISP solutions. Man...
by mada3k
Wed Jan 30, 2019 6:20 pm
Forum: RouterBOARD hardware
Topic: DAC cables on CCR1036-12G-4S not working.
Replies: 3
Views: 775

Re: DAC cables on CCR1036-12G-4S not working.

CCR1036-12G-4S is gigabit only - not 10G ports.
by mada3k
Thu Jan 17, 2019 9:01 pm
Forum: RouterBOARD hardware
Topic: SFP module is extremely hot
Replies: 45
Views: 19781

Re: SFP module is extremely hot

I also noticed this behavior when mixing certian vendors. Why is that?

Does it feed with to high voltage/current or drive the transciever to fast?
by mada3k
Fri Jan 11, 2019 10:00 pm
Forum: RouterBOARD hardware
Topic: port security mikrotik crs
Replies: 1
Views: 764

Re: port security mikrotik crs

I don't think that RouterOS implents any port-security like RADIUS or 802.1x.

Cisco-style "port-security sticky" would be nice.
by mada3k
Mon Jan 07, 2019 9:29 pm
Forum: RouterBOARD hardware
Topic: MikroTik PWR Line EU - Outdoors [request]
Replies: 4
Views: 1072

Re: MikroTik PWR Line EU - Outdoors [request]

If it's an temporary outdoor setup and the looks doesn't matter, just use armored multimode-fiber or outdoor cat5/6.

I people use this devices at home because running cat5/6 is not an option (concrete walls or rental apartment)
by mada3k
Fri Jan 04, 2019 12:00 pm
Forum: RouterBOARD hardware
Topic: HOW TO GET SIM CARD NUMBER
Replies: 6
Views: 4287

Re: HOW TO GET SIM CARD NUMBER

/interface lte info 0 once

the look for the uicc
by mada3k
Thu Jan 03, 2019 1:13 pm
Forum: RouterBOARD hardware
Topic: LTE modem, public IP
Replies: 2
Views: 901

Re: LTE modem, public IP

I have no experience of ZTE but it should be possible to login on the router (192.168.35.1) and enable pass through mode in some way.