Community discussions

Search found 503 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 11
by Paternot
Fri Mar 08, 2019 11:36 pm
Forum: Beginner Basics
Topic: Routing CCR 1036 and CRS 317
Replies: 2
Views: 130

Re: Routing CCR 1036 and CRS 317

I would guess his firewall is empty - even without NAT rules. The CCRs come without firewall rules.
by Paternot
Fri Mar 08, 2019 11:32 pm
Forum: Announcements
Topic: SwOS version 2.9 released!
Replies: 43
Views: 8509

Re: SwOS version 2.9 released!

@RobertF and @abrodkin SwOS has supported IGMP v1,v2,v3 since v2.5, also many issues have been addressed since then and now in v2.9 there is an additional port option to disable unknown multicast flooding. We are not aware of common IGMP Snooping problems anymore. If you experience problems using I...
by Paternot
Fri Mar 08, 2019 3:34 pm
Forum: Beginner Basics
Topic: Open VPN
Replies: 4
Views: 181

Re: Open VPN

hi, can anyone please advise if the RouterOS Level 4 router with 4 ports (MikroTik RB941-2nD-TC/UK) can be set up with Open VPN so that I can install a VPN of my own choice? thanks Yes, it can. There are some limitations: 1) Its CPU is quite weak. Don't expect much more than 20 Mbps of OpenVpn thro...
by Paternot
Fri Mar 08, 2019 3:19 pm
Forum: Forwarding Protocols
Topic: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?
Replies: 6
Views: 542

Re: should i replace CCR1072 with baltic vengangce? 1072 with 5 full feeds only 5 Gbps?

because I wanted to have a proven, good running solution that I can rely on at BGP. No DIY. Unfortunately, no such router was to be found on the MUM. Also from MT there was nothing new. Very sad ... Well, You can always run a CHR instance - this way You get a powerful x86 CPU to handle the single t...
by Paternot
Thu Mar 07, 2019 12:46 am
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 444
Views: 102836

Re: RouterOS v7.0 beta1 - when?

May not... But others will be borned.
The cycle of RoS?
by Paternot
Wed Mar 06, 2019 5:10 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 33
Views: 5902

Re: Overruns on CSS326-24G-2S+RM

Not my experience. Just looked at one of mine which shows an uptime of 199 days. There is 1 RX Overrun and 0 TX pauses. As I said, nothing faster than 1Gb/s.... But with 199 days uptime You are running 2.8, right? I upgraded from 2.8 to 2.9 (CSS326), and saw the increase in Rx Overrruns and Tx Paus...
by Paternot
Tue Mar 05, 2019 4:05 pm
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 27
Views: 1246

Re: Radical change coming for home and small business networking

Even in Brazil. Its a firmware update and works on existing gear. Even on pre DOCSIS 3.1 according to the webinar. It allows a ISP a new buis model with the ability to charge for each device and service. It also provides really advanced security. All at little cost to the ISP. I completely agree th...
by Paternot
Mon Mar 04, 2019 6:46 am
Forum: General
Topic: Radical change coming for home and small business networking
Replies: 27
Views: 1246

Re: Radical change coming for home and small buisness networking

Because what we need is another way to the ISPs control our internal networks. What could go wrong?
by Paternot
Sat Mar 02, 2019 11:46 pm
Forum: Wireless Networking
Topic: noob considering an ac2 vs. ac - not a performance based comparison, however...
Replies: 1
Views: 234

Re: noob considering an ac2 vs. ac - not a performance based comparison, however...

Gimmie 'the full cancer' - how can I have one device penetrate through all the walls (or closest to it)? You can't. Half the problem is to make the AP signal to reach the clients - here You can get quite high power with relative easy. But the other half is the other way around: to make the client's...
by Paternot
Fri Mar 01, 2019 4:16 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 25850

Re: v6.44 [stable] is released!

Fix is in 6.45beta3
6.45 beta3 already? Wow, You guys are really cranking up the speed!
by Paternot
Fri Mar 01, 2019 4:13 pm
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 444
Views: 102836

Re: RouterOS v7.0 beta1 - when?

There is obviously a huge stumbling block as to why a kernel upgrade has not happened, either in a 6.x version or the unicorn v7. Let’s not forget that Mikrotik is mostly made up of open source software, maybe one or more elements can’t be upgraded to a more recent kernel? My guess is that it’s fas...
by Paternot
Thu Feb 28, 2019 11:58 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 25850

Re: v6.44 [stable] is released!

Updated a CCR1009 and RB4011 without any issues. Great work MT!
Now please make us happy with some BGP improvements in 6.45 :-)
Quote!!

is it true that for the BGP sessions, RouterOS use only one core?
Yes, it is.
by Paternot
Wed Feb 27, 2019 9:48 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 870

Re: Hardware Selection

Paternot, interesting however, the diagram distinctly shows a 10gb link direct to the SFP+ port. Perhaps it would be fair to say that if no other etheports are used (other than WAN) then the SFP+ port may see traffic close to 10Mgb? In other words the router could use that sfp link to another manag...
by Paternot
Wed Feb 27, 2019 8:40 pm
Forum: General
Topic: Hardware Selection
Replies: 14
Views: 870

Re: Hardware Selection

The RB4011 is better bang for the buck bartoz............. same engine better test results and a 10gig port (SFP+) which the 1100 doesnt have and its cheaper. Take a look at the block diagram. Yes, there is one SFP+ cage - but its 10Gb ethernet ports are connected in two groups of five - and each g...
by Paternot
Wed Feb 27, 2019 3:18 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 25850

Re: v6.44 [stable] is released!

Paternot, everything looks good for you. Users menu was removed, each user is automatically converted to an identity and assigned to the peer.
Yes, it all works great - excellent job! I was pointing out to nichky that the upgrade went smooth. :D
by Paternot
Wed Feb 27, 2019 12:59 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 25850

Re: v6.44 [stable] is released!

that was my point User has been replaced with pre-shared-key-xauth user and password. I want to be sure before implement on my clients Working ok after upgrade. I was using pre-shared-key-xauth and password. Yes, the system created that "peer9" out of the blue - but it did it only to have something...
by Paternot
Wed Feb 27, 2019 4:00 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 25850

Re: v6.44 [stable] is released!

Just upgraded to 6.44 /ip ipsec identity add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfandega1 add auth-method=pre-shared-key-xauth generate-policy=port-strict peer=peer9 policy-template-group=redescambo xauth-login=alfand...
by Paternot
Mon Feb 25, 2019 3:16 pm
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 615

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Thats true only for conntrack. Which he is using: the question was about NAT and port forwarding. Since it was a basic question, and he IS using conntrack, seemed better to talk about this possibility. The odds of someone using a stateless firewall in a h...
by Paternot
Mon Feb 25, 2019 2:15 am
Forum: Announcements
Topic: v6.44rc [testing] is released!
Replies: 67
Views: 10035

Re: v6.44rc [testing] is released!

Huh.. Funny thing, trying to upgrade 6.44 beta28 to rc4: [admin@XXXXX-Main] > log print 22:17:21 system,info installed routeros-mipsbe-6.44rc4 22:17:21 system,info installed multicast-6.44rc4 22:17:21 system,error not enough space for upgrade 22:17:21 system,info router rebooted I thought if packag...
by Paternot
Mon Feb 25, 2019 1:47 am
Forum: Beginner Basics
Topic: Routing terms perspective ... which side is which?
Replies: 8
Views: 615

Re: Routing terms perspective ... which side is which?

It is the side that started the connection. Imagine two networks: 10.0.0.0/24 and 10.11.0.0/24 Computer at 10.0.0.2 wants to open a web site, at the address 10.11.0.5. In THIS case, src address is 10.0.2.2, and dst address is 10.11.0.5 Now, imagine you have a web server, at address 10.0.0.2, and som...
by Paternot
Sun Feb 24, 2019 5:06 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

Okay sod if I have something in series, 12v+12V+12v for example then I have to take care of inverter to handle 36v??
Yes, that's about it.
by Paternot
Sat Feb 23, 2019 9:56 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 5049

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
High as in frequentie? Or in channel bandwith? Or db power or what do you mean?
Sorry. Frequency.
by Paternot
Sat Feb 23, 2019 9:55 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

Much thanks Paternot! The issue is noise. If I can provide a noiseless solution that is a bit more inconvenient regarding transport etc, it may be worth it. I will just use one of these cheap babies. ;-) https://www.powertechsystems.eu/home/products/48v-lithium-ion-battery-pack/61ah-48v-lithium-ion...
by Paternot
Sat Feb 23, 2019 7:45 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

If it was for me perhaps but this will be used for official uses by sports organizations. I will be using only certified equipment. In addition I will be powering a laptop and thus my first link to a converter with two ac outlets is appealing. I also came across a dual batter to two female cigarett...
by Paternot
Sat Feb 23, 2019 7:31 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

You are missing the point. #3 is a big black hole mystery, how are you managing this.............. What kind of device are you using to connect between -female socket on poe injector and battery terminals + and - ???? PS yes two 24v batteries in series should do the trick. That is the easiest part....
by Paternot
Sat Feb 23, 2019 7:09 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

By $DEITY, no - much easier than this. 1) You charge the two batteries. At home, I imagine. 2) Take them to where the LHG60 will be used. 3) Connect the adapter between the PoE injector and the batteries terminals. 4) Plug the LHG on the injector. Done. Using 24V You don't have to worry about the bu...
by Paternot
Sat Feb 23, 2019 6:28 pm
Forum: Wireless Networking
Topic: Power Source for Temp Remote Location
Replies: 17
Views: 892

Re: Power Source for Temp Remote Location

You don't need to convert: batteries are DC, and PoE uses DC too. You have to think about voltage. You are talking about the WireDish (https://mikrotik.com/product/wireless_wire_dish), right? Take out the power adapter. It is rated to work between 12 - 57V. Then connect it directly to the DC voltage...
by Paternot
Sat Feb 23, 2019 2:55 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 5049

Re: v6.42.12 [long-term] is released!

Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high? /interface wireless info hw-info wlan_5GHz ranges: 4920-6100/5/a,an20,an40,ac20,ac40,ac80 tx-chains: 0 rx-chains: 0 ...
by Paternot
Thu Feb 21, 2019 1:36 am
Forum: Wireless Networking
Topic: Superchannel on ac radios?
Replies: 4
Views: 344

Re: Superchannel on ac radios?

I've been unable to enable Superchannel on any MikroTik ac radios that we've purchased. My organization is permitted to use 4.9 GHz, and I am trying to set a NetMetal 921UAGS-5SHPacD to 4.9 GHz. I've upgraded the license key to support extra channels, and it shows the "Extra-channels" feature on Sy...
by Paternot
Wed Feb 20, 2019 9:35 pm
Forum: General
Topic: Slow VPN Speeds
Replies: 4
Views: 1974

Re: Slow VPN Speeds

I just purchased a RB750Gr3. So far I love it. The purchase was made because my old router wouldn’t do more than 40Mbps over VPN. When I saw advertisements for the RB750Gr3 doing 400Mb+ over VPN I quickly made the purchase. Problem is I’ve been unable to obtain speeds over 10Mb so far. I have tried...
by Paternot
Fri Feb 15, 2019 1:48 am
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 55
Views: 24528

Re: Why people pair UBNT APs with MikroTik routers?

But all the complains about ARM are wireless related, right? A pure router (a true CCR) could do well, couldn't it? The 4011 has some problems with the FSP+ ports - but they are chipset related, not CPU related. Or I am missing something? https://forum.mikrotik.com/viewtopic.php?f=3&t=138613 Many m...
by Paternot
Thu Feb 14, 2019 10:11 pm
Forum: RouterBOARD hardware
Topic: Why people pair UBNT APs with MikroTik routers?
Replies: 55
Views: 24528

Re: Why people pair UBNT APs with MikroTik routers?

So it seems it's CCR versus ROS7 ... I wonder who's loosing? If this is the case, then Mikrotik urgently needs to introduce new line of high-end routers which will replace current CCR roster, based on some modern platform (I wonder if ARM is that platform). I don't think Mikrotik can survive with t...
by Paternot
Tue Feb 12, 2019 3:02 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 5049

Re: v6.42.12 [long-term] is released!

Usually it is indicated by "("/system routerboard upgrade" required)" added to the specific change log entry. Automatic reboot would just pointlessly increase the total upgrade time necessary for really no benefit. No one can be expected to go through the logs, just to find it out. Why don't we get...
by Paternot
Tue Feb 12, 2019 3:00 pm
Forum: Announcements
Topic: v6.42.12 [long-term] is released!
Replies: 27
Views: 5049

Re: v6.42.12 [long-term] is released!

There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it? Because there is no indication otherwise. Before the firmware number changed only when some upgrade was made to it. Now it is locked with the ROS version. How can we know when to upgrade? That was ...
by Paternot
Fri Jan 25, 2019 9:17 pm
Forum: General
Topic: Slow speeds on fibre with pppoe [SOLVED]
Replies: 4
Views: 498

Re: Slow speeds on fibre with pppoe [SOLVED]

Then highest speed we are able to achieve is about 500-520mbps when running a btest from client to server. We have been told the line mtu is 1500. The negotiated mtu of the pppoe interface is 1480. Are You running the btest client/server on the routers being tested? One shouldn't do it, as the btes...
by Paternot
Wed Jan 23, 2019 6:36 pm
Forum: General
Topic: BTest Server / Bandwidth Test, consistently 1 mbit send direction
Replies: 2
Views: 180

Re: BTest Server / Bandwidth Test, consistently 1 mbit send direction

The CHR instances are limited to 1 Mb/s, when You don't buy a license. I believe it is possible to get a time limited demo license, to test it.
by Paternot
Mon Jan 21, 2019 12:11 pm
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 25
Views: 3169

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router: On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance. That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D Isn't that mainly beca...
by Paternot
Mon Jan 21, 2019 2:59 am
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 25
Views: 3169

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router:

On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance.
That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D
by Paternot
Sat Jan 19, 2019 8:36 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 70593

Re: v6.44beta [testing] is released!

The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. The compatibility table disagrees with You: https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table The S-RJ01 is supported on the CSS/CRS326-24G-2S+ models - and they are passive cooled switc...
by Paternot
Sat Jan 19, 2019 4:09 pm
Forum: RouterBOARD hardware
Topic: Please recommend router as bridge for 3000 concurrent users [SOLVED]
Replies: 9
Views: 886

Re: Please recommend router as bridge for 3000 concurrent users [SOLVED]

Thank you for this suggestion, I have an idea in my mind - since network is already segmented (6 secondary switches) I can try to make it more cost effective by using a pair of CC1036-12G-4S-EM (3 switch per unit) instead of single CCR1072. It will be roughly 2000$ but should handle this situation ...
by Paternot
Sat Jan 19, 2019 3:50 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 70593

Re: v6.44beta [testing] is released!

Does this mean the S-RJ01 is now compatible with the RB4011? The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. Look at the S-RJ01 page. It is only for actively-cooled devices! Hopefully some time, after yet more advances in technology, it will be possible t...
by Paternot
Sat Jan 19, 2019 2:39 am
Forum: Announcements
Topic: Photos of towers and masts
Replies: 49
Views: 11375

Re: Photos of towers and masts

^^^^
You can pay me what you want, you will not get me on that tower :shock: :shock:
Well, what I want to pay may not be so much... :lol:
by Paternot
Tue Jan 15, 2019 11:23 pm
Forum: General
Topic: IPv6 Link-Local Addresses
Replies: 6
Views: 477

Re: IPv6 Link-Local Addresses

IPv6 is completely dependent upon link local: it took over many tasks done by ARP in IPv4. Don't even try to run an IPv6 network without them.
by Paternot
Fri Jan 11, 2019 10:28 pm
Forum: Wireless Networking
Topic: OpenVPN
Replies: 4
Views: 370

Re: OpenVPN

Your IP address 192.168.x.x is a private one - no one will be able to reach it. Your ISP is doing NAT (or CGNAT).

Try to get a public IP address, or see if your ISP do a port forward to you (highly unlikely, but worth a try).
by Paternot
Thu Jan 10, 2019 1:55 am
Forum: SwOS
Topic: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?
Replies: 8
Views: 644

Re: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?

The switch will try to get an IP from DHCP. Failing this, it will revert to 192.168.<don't remember> So. If you have a DHCP server on your network? If yes, can you browse the leases table? Cross check it with your switch MAC address, and use this IP. Failing this (well, Murphy rules), try the defaul...
by Paternot
Wed Jan 09, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 344
Views: 48474

Re: RB4011

But it *does* have the signature MikroTik built-in torch light!
I'm all for bright leds - sometimes they are a life saver. But it would be great if we got these torches with a "mute" option. Something like "/system leds all dim|bright". THAT would be great. :D
by Paternot
Mon Dec 31, 2018 11:10 pm
Forum: General
Topic: Why (not) use Hairpin NAT
Replies: 20
Views: 1061

Re: Why (not) use Hairpin NAT

Edit: People use meth to escape their shitty lives. People speed in their cars because they can't manage their time well. People don't pick their dogs shit up because they're lazy. This is similar - people that have no idea what they're doing have created a solution to a problem they don't understa...
by Paternot
Mon Dec 31, 2018 11:02 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1210

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :) Not all devices have firewall enabled by default. Usually the ones destined to SOHO come with it. The others, don't. My RBD52G (hAP ac2) as prime example of a SOHO dev...
by Paternot
Mon Dec 31, 2018 1:24 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1210

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :)
Not all devices have firewall enabled by default.

Usually the ones destined to SOHO come with it. The others, don't.
by Paternot
Sun Dec 30, 2018 11:13 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 1210

Re: Has this remote ROOT exploit been patched??

For some time default setup in ROS 6.43.x had no firewall. If one did reset with default setup (or received new unit with factory installed ROS of that version), firewall did not exist. ROS version 6.43.8 fixed this problem. His equipment is a switch - its default config doesn't have firewall rules.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 11