Community discussions

Search found 467 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 10
by Paternot
Mon Jan 21, 2019 12:11 pm
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 16
Views: 1642

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router: On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance. That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D Isn't that mainly beca...
by Paternot
Mon Jan 21, 2019 2:59 am
Forum: Virtualization
Topic: Mikrotik CHR speed performance problem
Replies: 16
Views: 1642

Re: Mikrotik CHR speed performance problem

A method to get more speed out of a very busy CHR router:

On the physical computer , in the BIOS , disable hyper-threading & set for maximum performance.
That's official Intel recommendation, if virtualization is used. HyperThreading does more harm than good, in this case. :D
by Paternot
Sat Jan 19, 2019 8:36 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 345
Views: 55824

Re: v6.44beta [testing] is released!

The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. The compatibility table disagrees with You: https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table The S-RJ01 is supported on the CSS/CRS326-24G-2S+ models - and they are passive cooled switc...
by Paternot
Sat Jan 19, 2019 4:09 pm
Forum: RouterBOARD hardware
Topic: Please recommend router as bridge for 3000 concurrent users [SOLVED]
Replies: 9
Views: 567

Re: Please recommend router as bridge for 3000 concurrent users [SOLVED]

Thank you for this suggestion, I have an idea in my mind - since network is already segmented (6 secondary switches) I can try to make it more cost effective by using a pair of CC1036-12G-4S-EM (3 switch per unit) instead of single CCR1072. It will be roughly 2000$ but should handle this situation ...
by Paternot
Sat Jan 19, 2019 3:50 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 345
Views: 55824

Re: v6.44beta [testing] is released!

Does this mean the S-RJ01 is now compatible with the RB4011? The RB4011 is not an actively-cooled device so it will never be compatible with the S-RJ01. Look at the S-RJ01 page. It is only for actively-cooled devices! Hopefully some time, after yet more advances in technology, it will be possible t...
by Paternot
Sat Jan 19, 2019 2:39 am
Forum: Announcements
Topic: Photos of towers and masts
Replies: 48
Views: 10218

Re: Photos of towers and masts

^^^^
You can pay me what you want, you will not get me on that tower :shock: :shock:
Well, what I want to pay may not be so much... :lol:
by Paternot
Tue Jan 15, 2019 11:23 pm
Forum: General
Topic: IPv6 Link-Local Addresses
Replies: 6
Views: 404

Re: IPv6 Link-Local Addresses

IPv6 is completely dependent upon link local: it took over many tasks done by ARP in IPv4. Don't even try to run an IPv6 network without them.
by Paternot
Fri Jan 11, 2019 10:28 pm
Forum: Wireless Networking
Topic: OpenVPN
Replies: 4
Views: 259

Re: OpenVPN

Your IP address 192.168.x.x is a private one - no one will be able to reach it. Your ISP is doing NAT (or CGNAT).

Try to get a public IP address, or see if your ISP do a port forward to you (highly unlikely, but worth a try).
by Paternot
Thu Jan 10, 2019 1:55 am
Forum: SwOS
Topic: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?
Replies: 8
Views: 377

Re: CSS326-24G-2S+RM can't access web GUI - what am I doing wrong?

The switch will try to get an IP from DHCP. Failing this, it will revert to 192.168.<don't remember> So. If you have a DHCP server on your network? If yes, can you browse the leases table? Cross check it with your switch MAC address, and use this IP. Failing this (well, Murphy rules), try the defaul...
by Paternot
Wed Jan 09, 2019 12:39 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 334
Views: 39352

Re: RB4011

But it *does* have the signature MikroTik built-in torch light!
I'm all for bright leds - sometimes they are a life saver. But it would be great if we got these torches with a "mute" option. Something like "/system leds all dim|bright". THAT would be great. :D
by Paternot
Mon Dec 31, 2018 11:10 pm
Forum: General
Topic: Why (not) use Hairpin NAT
Replies: 14
Views: 702

Re: Why (not) use Hairpin NAT

Edit: People use meth to escape their shitty lives. People speed in their cars because they can't manage their time well. People don't pick their dogs shit up because they're lazy. This is similar - people that have no idea what they're doing have created a solution to a problem they don't understa...
by Paternot
Mon Dec 31, 2018 11:02 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 995

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :) Not all devices have firewall enabled by default. Usually the ones destined to SOHO come with it. The others, don't. My RBD52G (hAP ac2) as prime example of a SOHO dev...
by Paternot
Mon Dec 31, 2018 1:24 am
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 995

Re: Has this remote ROOT exploit been patched??

But you can dual boot to RouterOS on this CRS and this should have default firewall. If not then it would be good idea to add it :)
Not all devices have firewall enabled by default.

Usually the ones destined to SOHO come with it. The others, don't.
by Paternot
Sun Dec 30, 2018 11:13 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 995

Re: Has this remote ROOT exploit been patched??

For some time default setup in ROS 6.43.x had no firewall. If one did reset with default setup (or received new unit with factory installed ROS of that version), firewall did not exist. ROS version 6.43.8 fixed this problem. His equipment is a switch - its default config doesn't have firewall rules.
by Paternot
Sun Dec 30, 2018 11:08 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 995

Re: Has this remote ROOT exploit been patched??

No I started initially with 6.43.7 minutes after I turned the power on the first time. The first thing I did after unboxing this router was upgrade to the latest Router OS on December 7th. On December 26th I upgraded again to the now current 6.43.8 and proceeded to try and lock things down. I am st...
by Paternot
Sun Dec 30, 2018 6:04 pm
Forum: General
Topic: Has this remote ROOT exploit been patched??
Replies: 22
Views: 995

Re: Has this remote ROOT exploit been patched??

I setup the CRS328 to the best of my ability, got my network going, changed the Admin password and went about my life. A week later I went back in using winbox to check things. I went to the logs and frankly it scared the hell out of me!!! I saw a constant flow of failed login attempts from IP's al...
by Paternot
Fri Dec 28, 2018 6:31 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 15
Views: 1437

Re: CSS326-24G-2S+RM hangs until power cycle

Then it's either wrong configurations or faulty units. I thought there was something wrong with the firmware. I was on 2.8, now downgraded to 2.7 just in case. I will test it and see but probably will have to wait 6-10 days. I just got one of these and under SWOS it states upgrade 2.9 available but...
by Paternot
Thu Dec 27, 2018 1:58 am
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 15
Views: 1437

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the...
by Paternot
Wed Dec 26, 2018 6:34 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 9
Views: 601

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a prob...
by Paternot
Wed Dec 26, 2018 4:29 pm
Forum: SwOS
Topic: CSS326-24G-2S+RM hangs until power cycle
Replies: 15
Views: 1437

Re: CSS326-24G-2S+RM hangs until power cycle

I have two of these in production, with one 10Gib fiber, one VLAN trunk port and about 4 VLANs each. Rock solid, with an uptime of 56 and 62 days. True, the traffic is light - but even when stress testing I didn't get problems. Maybe some specific configuration, triggering a bug? Or could it be the ...
by Paternot
Wed Dec 26, 2018 4:21 pm
Forum: RouterBOARD hardware
Topic: 2*10gb ports for a CCR ?
Replies: 9
Views: 601

Re: 2*10gb ports for a CCR ?

He is suggesting to make an "router on a stick". With the use of VLANs, and a smart switch, You can use the same 10Gb port to WAN and LAN. But, with this setup, you can't use the full 10Gb - since we would have two streams using the same port. With residential usage I don't think it would be a probl...
by Paternot
Wed Dec 26, 2018 4:16 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 329

Re: Fiber optics SFP+ across HAP AC

so HAP AC can't accept GPON ONU module
This I don't know. What I do know is that it doesn't accept FSP+ modules. If it is an FSP (without the "+") module, it may accept.
by Paternot
Wed Dec 26, 2018 2:32 pm
Forum: RouterBOARD hardware
Topic: Fiber optics SFP+ across HAP AC
Replies: 4
Views: 329

Re: Fiber optics SFP+ across HAP AC

You don't. The hAP AC doesn't have an SFP+ port. It has an SFP (without the +).
by Paternot
Tue Dec 11, 2018 5:44 am
Forum: RouterBOARD hardware
Topic: hardware idea for a multiport switch
Replies: 27
Views: 2232

Re: hardware idea for a multiport switch

Interesting idea. But would it be denser? It is, already, 2U in height. We will need at least another 2U - to keep it "organized" and not break the cables. So, it's a 4U switch already. I'd say 5 or 6U - it's hard to pass all this cables.

Wouldn't be easier to just make a 4U switch?
by Paternot
Sun Dec 09, 2018 10:58 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 334
Views: 39352

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...
by Paternot
Sun Dec 09, 2018 2:18 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 334
Views: 39352

Re: RB4011

We have a link between an RB2011 and an RB260 using two Net Insight NPA0022-LJ11 SFP fiber modules and it works fine no matter if it is configured for autonegotiation or fixed 1G/Fulldup at either end... (before it was configured for autoneg but I have disabled it because we plan to change to a bid...
by Paternot
Wed Dec 05, 2018 9:44 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 345
Views: 55824

Re: v6.44beta [testing] is released!

will still be single-threaded kind of but not exactly Enigmatic affirmation :mrgreen: Normis beeing Normis. :lol: :lol: If I remember correctly, the BGP process will be broken in multiple threads. The system route update itself will be single threaded - but we will have multiple threads doing anoth...
by Paternot
Fri Nov 30, 2018 10:29 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Crowd Funding of v7
Replies: 32
Views: 3724

Re: Crowd Funding of v7

Just for kicks, a paper about multithreaded BGP:

http://www.thinkmind.org/download.php?a ... 4_10_10029
by Paternot
Fri Nov 23, 2018 7:08 pm
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 474

Re: the problem about that extending the port of router

Well, the CRS328 has PoE out at each gigabit port. That was what You wanted, right? A switch to power up to 24 PoE devices? If it is the other way around (a gigabit switch, to be powered by PoE), then the CSS326 will fit. In fact, if you want to power the switch through PoE, the CRS328 will not wor...
by Paternot
Fri Nov 23, 2018 5:23 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Crowd Funding of v7
Replies: 32
Views: 3724

Re: Crowd Funding of v7

I always wonder how you guys decide which way to go, what things to focus on etc... hopefully its not like this :lol:
You owe me a new keyboard. :D
10 minutes laughing, and counting.
by Paternot
Fri Nov 23, 2018 5:16 pm
Forum: SwOS
Topic: Overruns on CSS326-24G-2S+RM
Replies: 23
Views: 4324

Re: Overruns on CSS326-24G-2S+RM

We are currently testing a new SwOS version for release, this version includes more fixes for performance and packet forwarding related issues which previously has been addressed in RouterOS. If you have a CRS series switch and observe the described problem with packet overruns only when using SwOS...
by Paternot
Fri Nov 23, 2018 5:13 pm
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 474

Re: the problem about that extending the port of router

The only Mikrotik switch I remember, with 24 ports and POE, is the CRS328. You will get 24 gigabit ports and 4 SFP+ cages. https://mikrotik.com/product/crs328_24p_4s_rm It have some problems with SWoS 2.8, so You will want to run it with RoS. Other than that, it's working fine for me. Thank you for...
by Paternot
Wed Nov 21, 2018 4:29 am
Forum: General
Topic: Unstable 10Gbit connection of Mikrotik CSS326-24G-2S+RM with Mikrotik S+RJ10 SFP [SOLVED]
Replies: 12
Views: 689

Re: Unstable 10Gbit connection of Mikrotik CSS326-24G-2S+RM with Mikrotik S+RJ10 SFP [SOLVED]

You should use Cat6. Take a look at the SFP+ module brochure:

https://i.mt.lv/cdn/rb_files/sfp_splusr ... 150322.pdf

It clearly says that Cat6 (or Cat7) is needed to achieve 10Gb - and even then, only up to 30 meters.
by Paternot
Sat Nov 17, 2018 3:33 am
Forum: General
Topic: the problem about that extending the port of router
Replies: 8
Views: 474

Re: the problem about that extending the port of router

The only Mikrotik switch I remember, with 24 ports and POE, is the CRS328. You will get 24 gigabit ports and 4 SFP+ cages.

https://mikrotik.com/product/crs328_24p_4s_rm

It have some problems with SWoS 2.8, so You will want to run it with RoS. Other than that, it's working fine for me.
by Paternot
Fri Nov 16, 2018 2:10 pm
Forum: Announcements
Topic: Photos of towers and masts
Replies: 48
Views: 10218

Re: Photos of towers and masts

5x directional antennas (ARC) and 1x 90 degree sector antenna (MTI)
Routerboards in the antennas and as router inside the manholes.
Cool! (pun intended)
by Paternot
Fri Nov 16, 2018 2:08 pm
Forum: SwOS
Topic: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]
Replies: 10
Views: 1939

Re: High Rx MAC Errors and Rx FCS Errors on CRS328-24P-4S+ and CSS326-24G-2S+ [SOLVED]

Support said to use ROS, but I don't want ROS on the 328 because its just a switch and SwOS is much quicker to make changes to vlans, etc
Use RoS. I have one 328, and it solved my problems. I don't like the idea too - but it's better than no 10GiB at all.
by Paternot
Wed Nov 14, 2018 3:31 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 410

Re: CRS 317/328 FCS Errors

Did support solve this for you? I want to add a CSS326 to my CRS328, but worried about the issues you had with the trunk, CRS326 is a lot more expensive just to get ROS (and SwOS works well for a switch). Do you have a DAC cable to try? Could it be FC specific? Support said it will be addressed on ...
by Paternot
Wed Nov 14, 2018 3:30 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 410

Re: CRS 317/328 FCS Errors

I'm afraid that in my case RouterOS works like sh*t. 10G connection between CRS317 and CRS328 is almost unusable so I don't know how to solve this issue. I don't have a CRS317, so I don't know how they behave. The CRS328 have a problem with SFP+ and SwOS - but works with RouterOS. The CSS326 are wo...
by Paternot
Tue Nov 13, 2018 7:22 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 410

Re: CRS 317/328 FCS Errors

I have bad news and good news. Which one do You want first? https://forum.mikrotik.com/viewtopic.php?f=17&t=139155 HAHA, thanks a lot, but I'd like to hear good news first. From what I've read it seems that there's software problem in RouterOS. I'm running ROS 43.4 on all Mikrotik devices. It also ...
by Paternot
Mon Nov 12, 2018 10:16 pm
Forum: General
Topic: CRS 317/328 FCS Errors
Replies: 7
Views: 410

Re: CRS 317/328 FCS Errors

I have bad news and good news. Which one do You want first?

viewtopic.php?f=17&t=139155
by Paternot
Tue Nov 06, 2018 1:17 am
Forum: Beginner Basics
Topic: Meraki MX behind Mikrotik
Replies: 2
Views: 234

Re: Meraki MX behind Mikrotik

Be advised that the CRS328 is a switch, with a very weak CPU attached. If You try to use it to route more than a few hundred megabits it will not handle the load. It can switch at wire speed, it can run thousands of VLANs - but it will do a very poor job routing.
by Paternot
Mon Oct 29, 2018 5:39 am
Forum: General
Topic: IPSec throughput
Replies: 9
Views: 882

Re: IPSec throughput

You saw one core at 100% - but did You found what was using it? I mean, we know there is something saturating one core - but we don't know what it is. Can you test again, and post the usage by core/process?
by Paternot
Sat Oct 27, 2018 5:03 am
Forum: General
Topic: Firewall rules not working after hacker infection
Replies: 4
Views: 335

Re: Firewall rules not working after hacker infection

If your router was compromised, netinstall it from zero. Use a known good export to restore (the backups would be easier - but there is no way to inspect what would be restored to the router), and go from there.

In other words: nuke'm from orbit - it's the only way!
by Paternot
Sun Oct 21, 2018 2:52 pm
Forum: General
Topic: How to choose router (which cpu/ram) for hotel [SOLVED]
Replies: 9
Views: 663

Re: How to choose router (which cpu/ram) for hotel [SOLVED]

By "RoS code" do You mean scripts to run on the router's command line/scheduler? If yes, then they will run on every Mikrotik device. But remember that, as the hardware is different, You may have to adjust it a little. Things like number of internal switches, number of ports, name of ports (SPF vs e...
by Paternot
Sat Oct 13, 2018 5:41 am
Forum: General
Topic: Severe Performance Drop RB3011 [SOLVED]
Replies: 33
Views: 1356

Re: Severe Performance Drop RB3011 [SOLVED]

Going off of MikroTik's test results I figured the 3011 would be more than sufficient: Their test in routing with 25 ip filter rules shows a result of 2,453.1 Mbps. Granted, this is not with queuing. But is queuing really this hard on the available horsepower? For test results that approximate real...
by Paternot
Sat Oct 13, 2018 2:51 am
Forum: SwOS
Topic: CRS328-24P 4S+ -- throughput problems
Replies: 2
Views: 885

Re: CRS328-24P 4S+ -- throughput problems

I have one of this switches too - there is a known problem, with it and SwOS. Mikrotik is aware, and said it will be addressed in future releases. I believe this thread will help You: https://forum.mikrotik.com/viewtopic.php?f=17&t=139155 There is one solution: run RoS, instead of SwOS. I know, I kn...
by Paternot
Sat Oct 13, 2018 2:40 am
Forum: Forwarding Protocols
Topic: RB4011 vs. CCR1009 BGP
Replies: 44
Views: 4399

Re: RB4011 vs. CCR1009 BGP

Yes, we are aware of this peculiarity and we are working also on new routers that have higher power per core, not just many cores. Awesome! Please consider a new CCR with ARM, 12G-4S+ and redudant PSUs. Would be ideal for smaller environments where you have fiber uplinks and access with copper. I w...
by Paternot
Wed Oct 10, 2018 6:24 pm
Forum: General
Topic: Unable to get full gigabit speed on RB750Gr3
Replies: 28
Views: 1824

Re: Unable to get full gigabit speed on RB750Gr3

After a lot of attempts, I found disabling the bridge STP protocol improving the speed, from ~840 Mbps to ~900 Mbps. This is the only thing I found useful now, a lot closer to the max speed of 940 Mbps now. Are You testing the speed with a single connection? Try with more than one (torrent is an op...
by Paternot
Sun Oct 07, 2018 7:55 pm
Forum: General
Topic: Unable to get full gigabit speed on RB750Gr3
Replies: 28
Views: 1824

Re: Unable to get full gigabit speed on RB750Gr3

So now my problem would be whether I need a better model. My RB750Gr3 doesn't use up the CPU and yet it doesn't achieve the full speed, is it my config problem or the hardware limitation? The RB750Gr3 has one CPU. This CPU has two cores. Each core has two threads. So, the CPU has four threads total...
  • 1
  • 2
  • 3
  • 4
  • 5
  • 10