Community discussions

Search found 82 matches

  • 1
  • 2
by jprietove
Wed Jul 17, 2019 11:05 am
Forum: Forwarding Protocols
Topic: OSPF Interface all passive
Replies: 9
Views: 939

Re: OSPF Interface all passive

Well, not exactly because this is not OSPF-v3... it is (sorry for the mistake):
/routing ospf interface add interface=all passive=yes
by jprietove
Wed Jul 17, 2019 9:59 am
Forum: Forwarding Protocols
Topic: OSPF Interface all passive
Replies: 9
Views: 939

Re: OSPF Interface all passive

Not as easy when you have a few hundred vlans. Not bad to script but would be nice to have a simple checkbox to automatically have all interfaces as passive and then add the ones you want.
/routing ospf interfaces add interface=all area=backbone passive=yes
by jprietove
Thu Jun 13, 2019 10:20 am
Forum: General
Topic: Reading NetFlow Data with Python
Replies: 2
Views: 178

Re: Reading NetFlow Data with Python

Take a look at https://code.google.com/archive/p/flowd/

You have a python example code and it works nice!
by jprietove
Mon May 27, 2019 11:42 pm
Forum: General
Topic: Mikrotik CCR 1072 Hang
Replies: 3
Views: 386

Re: Mikrotik CCR 1072 Hang

Any of you are using Ethernet port for something different of managing?

If it's used for routing, firewalling or anything it can hang the router

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Mon May 13, 2019 12:34 pm
Forum: General
Topic: 70m cable with MikroTik
Replies: 8
Views: 622

Re: 70m cable with MikroTik

Cat 5 cable is not suitable for 1Gbps. Use cat 5e or, much better, cat 6

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Tue Apr 23, 2019 10:34 pm
Forum: Forwarding Protocols
Topic: Your experience with larger/diverse Area0 OSPF networks?
Replies: 19
Views: 1092

Re: Your experience with larger/diverse Area0 OSPF networks?

In my opinion you should consider migrate to BGP with ospf. With good planning it's not painful and it's not necessary to get clients without service.


Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Tue Apr 23, 2019 1:09 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 884

Re: LAG 802.3AD slowness

It depends on the ccr1009 model. Not all shares the same block diagram

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Mon Apr 22, 2019 11:28 am
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 884

Re: LAG 802.3AD slowness

Acording to https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Hardware_Offloading only CRS3xxx series supports bonding with hardware offload. It means that other devices do bonding with CPU. CCR1009-7G-1C-1S+PC has 9 cores so it can take 1 Gbps from each G port and bond them in total of ...
by jprietove
Sat Apr 20, 2019 11:28 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 884

Re: LAG 802.3AD slowness

Try using ether 5 and 6, for example. ether 1 to 4 are connected to switch chip and this chip is connected to cpu by 1gbps line. This may be a problem in performance. Check block diagram here: https://i.mt.lv/cdn/rb_files/CCR1009-8G-1S-1Splus-160128140835.png Enviado desde mi Mi A2 mediante Tapatalk
by jprietove
Sat Apr 20, 2019 10:12 pm
Forum: General
Topic: LAG 802.3AD slowness
Replies: 16
Views: 884

Re: LAG 802.3AD slowness

I'm afraid that bonding is hardware offload only in crs3xx series. In CCR series bonding is done on software. But I've reached 2gbps with bonding on ccr1009 in a transit router. I mean, different IP addresses for source and destination. So there should be a problem in your setup. Enviado desde mi Mi...
by jprietove
Sat Apr 20, 2019 5:30 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: CRS326-24G-2S+ Q-in-Q without Service Tag
Replies: 2
Views: 415

Re: CRS326-24G-2S+ Q-in-Q without Service Tag

Follow the examples in https://wiki.mikrotik.com/wiki/Manual:C ... s_switches with ether type 0x8100 in bridge

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Wed Apr 17, 2019 2:30 pm
Forum: Wireless Networking
Topic: BTest vs Internet Speed test
Replies: 4
Views: 529

Re: BTest vs Internet Speed test

I suggest this video from recent MUM Europe 2019 in VIenna:
Understanding throughput: https://youtu.be/zsrdgo0Npc8
by jprietove
Tue Apr 16, 2019 11:28 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1097
Views: 192337

Re: Feature requests - Re Winbox , close all

A feature I would like to see in Winbox is a new selection to close all winbox windows Example - many many windows open in winbox , click close-all and presto they all close and you still have your connected winbox session North Idaho Tom Jones Or I'm not understanding you... or for sure it is the ...
by jprietove
Mon Apr 15, 2019 10:43 pm
Forum: General
Topic: who can I hire to get a export to work as an import an a clone [SOLVED]
Replies: 7
Views: 456

Re: who can I hire to get a export to work as an import an a clone [SOLVED]

Sure a lot of people will be interested. You can also look here for someone near you:

https://mikrotik.com/consultants

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Mon Apr 15, 2019 6:45 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1097
Views: 192337

Re: Feature requests - Re Winbox , close all

A feature I would like to see in Winbox is a new selection to close all winbox windows
Example - many many windows open in winbox , click close-all and presto they all close and you still have your connected winbox session

North Idaho Tom Jones
Isn't it the existing Session -> Close Windows?
by jprietove
Wed Apr 10, 2019 11:17 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 37934

Re: UKNOF 43 CVE

In ipv6 usual prefix is /64. So a local attack will not be filtered by the rules proposed and the number of possible hosts is 2^64 because ipv6 addresses are 128 bit numbers.

Enviado desde mi Mi A2 mediante Tapatalk

by jprietove
Tue Apr 09, 2019 10:17 am
Forum: Beginner Basics
Topic: PPPoe pools - one for all?
Replies: 2
Views: 289

Re: PPPoe pools - one for all?

Yes, you can use the same pool for all the profiles
by jprietove
Thu Apr 04, 2019 8:23 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 37934

Re: UKNOF 43 CVE

I have done several tests with GNS3 using CHR 6.44.2 (stable) and as long as the router has enough memory, it doesn't crash. In my tests, the attack 'steals' around 180 MiB. Using a CHR with 256 MB, system resources shows a total memory of 224 MiB and free-memory of 197 MiB before attack. During the...
by jprietove
Wed Apr 03, 2019 6:11 pm
Forum: General
Topic: Best (free?) network diagram tool
Replies: 3
Views: 353

Re: Best (free?) network diagram tool

I use GNS3 that is more than a diagram tool and you can also try https://draw.io
by jprietove
Tue Apr 02, 2019 8:28 pm
Forum: RouterBOARD hardware
Topic: Port Will Not Negotiate 1Gbps
Replies: 5
Views: 478

Re: Port Will Not Negotiate 1Gbps

I've used that configuration lots of time. No problem at all. Look your cables, connectors, etc. It should be almost 'plug and play'
by jprietove
Mon Apr 01, 2019 11:22 am
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 37934

Re: UKNOF 43 CVE

I have just tested this beta and I confirm that with 300 Mb RAM the router's memory doesn't fill. A CHR with 300 Mb of RAM with OSPF-v3 has 237 Mb of free-memory and during the attack it keeps on around 200 Mb.

Hopefully this fix will be in long-term and current branches soon.
by jprietove
Mon Apr 01, 2019 11:17 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 66305

Re: v6.45beta [testing] is released!

Version 6.45beta23 has been released. What's new in 6.45beta23 (2019-Apr-01 05:51): !) ipv6 - fixed soft lockup when forwarding IPv6 packets; !) ipv6 - fixed soft lockup when processing large IPv6 Neighbor table; ---------------------- Congratulations! I have tested this beta and I confirm that wit...
by jprietove
Sun Mar 31, 2019 12:01 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 37934

Re: UKNOF 43 CVE

This sounds almost exactly the same as what MikroTik will be fixing on Monday.

What would be characters 9, 10, 11, 12 of the md5sum?
Sorry @maznu but I don't get the same md5sum you expected. Maybe mine is a different but correlated attack
by jprietove
Sun Mar 31, 2019 11:03 am
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 37934

Re: UKNOF 43 CVE

I've done my own investigation and I think I can reproduce the problem. First it is important to note that the target of the attack needs not to be the Mikrotik itself: if it is forwarding traffic from an attack, its memory can exhaust and eventually it will reboot. So my lab is similar to this: an ...
by jprietove
Tue Mar 12, 2019 5:40 pm
Forum: Beginner Basics
Topic: CRS 3xxx VLAN configuration
Replies: 2
Views: 267

Re: CRS 3xxx VLAN configuration

Export your config and tell us exactly what you want to achieve
by jprietove
Tue Mar 05, 2019 8:46 pm
Forum: General
Topic: ipv6 strangeness
Replies: 2
Views: 193

Re: ipv6 strangeness

It is not strange, it is called hexadecimal: In the address 2001:db8::33/126 I will look into the last '33'. As it is HEX, in Binary it is 001100 11 The last two bits are not belonging to the prefix, so the prefix is 001100 00 If I write it in HEX again it is 30, os the prefix is 2001:db8::30/126 Th...
by jprietove
Tue Mar 05, 2019 3:19 pm
Forum: Beginner Basics
Topic: Can we create the PPPoE user pool for 500 or 1000?
Replies: 10
Views: 570

Re: Can we create the PPPoE user pool for 500 or 1000?

Pool 10 11 2 has not a next pool

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Sun Mar 03, 2019 5:44 pm
Forum: General
Topic: Taged and untaged to the same interface. [SOLVED]
Replies: 41
Views: 1535

Re: Taged and untaged to the same interface. [SOLVED]

I posted this on my previous answer. Clearly you didn't read it

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Sun Mar 03, 2019 5:16 pm
Forum: General
Topic: Taged and untaged to the same interface. [SOLVED]
Replies: 41
Views: 1535

Re: Taged and untaged to the same interface. [SOLVED]

[admin@R2] > interface bridge vlan add bridge=bridge1 vlan-ids=30 tagged=ether4,ether5 untagged=ether5
failure: interface cannot be in tagged and untagged at the same time

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Sun Mar 03, 2019 4:53 pm
Forum: General
Topic: Taged and untaged to the same interface. [SOLVED]
Replies: 41
Views: 1535

Re: Taged and untaged to the same interface. [SOLVED]

I think you should mark this as solved and forget about it. You asked a question, the answer is simply "no, you can't" and I really don't know why are we still feeding the yroll

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Sun Mar 03, 2019 11:53 am
Forum: General
Topic: Taged and untaged to the same interface. [SOLVED]
Replies: 41
Views: 1535

Re: Taged and untaged to the same interface. [SOLVED]

I don't know exactly what are you asking in this post. One port can be 'tagged' and 'untagged' at the same time for different VLAN-id. Hybrid port is the name. BUT not for the SAME VLAN-ID A hybrid port can be useful in a construction where you have several nodes connected in a dumb switch (not vlan...
by jprietove
Sat Mar 02, 2019 7:12 pm
Forum: General
Topic: How to see what IP is generating traffic over specific port? [SOLVED]
Replies: 2
Views: 273

Re: How to see what IP is generating traffic over specific port? [SOLVED]

Use tool torch

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Thu Feb 21, 2019 5:39 pm
Forum: General
Topic: Security issue when Winbox exposed
Replies: 67
Views: 4938

Re: Security issue when Winbox exposed

No, I haven't missed it: look at the title I have choosen.
by jprietove
Thu Feb 21, 2019 5:25 pm
Forum: General
Topic: Security issue when Winbox exposed
Replies: 67
Views: 4938

Security issue when Winbox exposed

There seems to be an issue that allows bypass firewall and nat if winbox is exposed.
Please read this carefully

https://medium.com/tenable-techblog/mik ... d46398bf24

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Thu Feb 21, 2019 11:49 am
Forum: Beginner Basics
Topic: Mikrotik Packet Tracer
Replies: 3
Views: 506

Re: Mikrotik Packet Tracer

Not analogous but best is: reading, understanding, learning, practicing and a lot of Wireshark
by jprietove
Thu Feb 21, 2019 11:48 am
Forum: General
Topic: I Can't set 802.1p on VLAN for DHCP [probably BUG]
Replies: 7
Views: 454

Re: I Can't set 802.1p on VLAN

Chain should be output. Try this:
/ip firewall mangle
add action=set-priority chain=output new-priority=5 out-interface=vlan2
by jprietove
Wed Feb 06, 2019 2:52 pm
Forum: General
Topic: Severe port flapping on CRS328-24P-4S+ and CRS317-1G-16S+
Replies: 103
Views: 10629

Re: Severe port flapping on CRS328-24P-4S+ and CRS317-1G-16S+

Are any of you using port ether1 or just sfp-plus ports? If you are, remember that "The new Cloud Router Switch 317-1G-16S+RM is a rack-mountable manageable switch with Layer3 features, it has 16 SFP+ ports for high performance 10GbE connectivity and a 1GbE copper port for management. "
by jprietove
Tue Feb 05, 2019 2:31 pm
Forum: General
Topic: High CPU plus Latency plus Packet Drops when bonding with balance-rr
Replies: 11
Views: 1079

Re: High CPU plus Latency plus Packet Drops when bonding with balance-rr

I've been using CCR1016 with bonding in balance_rr with 1.7 Gbps traffic for more than one year, software based (not hardware) and CPU hardly goes more than 5-6%. It would be usefull to know if you are using RouterOS or SwitchOS, which RouterOS/SwitchOS version are you using, an export of your confi...
by jprietove
Thu Jan 31, 2019 2:53 pm
Forum: General
Topic: High CPU plus Latency plus Packet Drops when bonding with balance-rr
Replies: 11
Views: 1079

Re: High CPU plus Latency plus Packet Drops when bonding with balance-rr

What is happening Your router are doing bonding and bridging by software, thats the reason your CPU goes so high. As your traffic is going from only one point to other, the MAC-addresses of all traffic will be the same so if you use layer2 hash, only one path will be choosen. Improving a little Bet...
by jprietove
Thu Jan 31, 2019 10:57 am
Forum: Forwarding Protocols
Topic: Routing filter order
Replies: 11
Views: 2335

Re: Routing filter order

Maybe it's a typo? Look here: /routing bgp peer add address-families=ip,vpnv4 in-filter=casino-in name=up-gcp_casino out-filter=casinio-out remote-address=169.254.0.2 remote-as=65502 ttl=default ^^^^^^^ You wrote casinio-out instead of casino-out
by jprietove
Fri Jan 25, 2019 7:24 pm
Forum: General
Topic: Slow speeds on fibre with pppoe [SOLVED]
Replies: 4
Views: 661

Re: Slow speeds on fibre with pppoe [SOLVED]

Test mtu with ping and no fragment option. VLAN has additional bytes in header so instead of 1480 maybe it's 4 bytes less.


Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Thu Jan 24, 2019 10:34 pm
Forum: General
Topic: Bequant tcp traffic booster
Replies: 3
Views: 394

Re: Bequant tcp traffic booster

Anyone has experience in Bequant's tcp optimizer? http://www.bequant.com/bta.html Probably the same can be done by a Mikrotik CCR although they claim some patented technologies. And if someone can make same, send me a pm and give me a price for a 500Mbp backbone connection. Hello wireless Rudy, I h...
by jprietove
Tue Jan 22, 2019 12:39 pm
Forum: Virtualization
Topic: Proxomox Hosted CHR - IP Configuration
Replies: 2
Views: 383

Re: Proxomox Hosted CHR - IP Configuration

Try this:
/ip address add interface=ether1 address=99.88.9.17 network=99.88.7.180
/ip route add dst-address=0.0.0.0/0 gateway=99.88.7.180
by jprietove
Tue Jan 08, 2019 10:23 pm
Forum: General
Topic: load balancing speed problem
Replies: 2
Views: 370

Re: load balancing speed problem

I think you have been very well answered in the other forum viewtopic.php?p=706857#p706857

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Wed Dec 19, 2018 5:10 pm
Forum: General
Topic: server on cloud - what to install?
Replies: 5
Views: 424

Re: server on cloud - what to install?

In AWS you can select Mikrotik CHR at VM creation time. No need to install Linux or anything else... Just choose Mikrotik CHR instead of Windows, Ubuntu or any other thing

Enviado desde mi Redmi 3 mediante Tapatalk

by jprietove
Wed Dec 05, 2018 7:10 pm
Forum: Forwarding Protocols
Topic: OSPF loses routes after days
Replies: 23
Views: 2088

Re: OSPF loses routes after days

I just checked all my routers. All of the ip, network (same being /32), and router IDs are unique to each router. Try also to change interface network-type. Instead of broadcast, it seems your configuration could be PTMP because it (appears to) has a central Router. This way, the routers will not l...
by jprietove
Wed Dec 05, 2018 4:46 pm
Forum: Forwarding Protocols
Topic: OSPF loses routes after days
Replies: 23
Views: 2088

Re: OSPF loses routes after days

Check if there are several routers with same Id. Check also that router up address in loopback interface is correct, with /32 and network equal to address. Sometimes if configuration is copied from one router and pasted in another, and then the loopback IP is changed, the network remains. For exampl...
by jprietove
Mon Nov 26, 2018 9:55 am
Forum: Beginner Basics
Topic: 3011 update
Replies: 10
Views: 925

Re: 3011 update

Why could you not use the automatic update that ArchilMindiashvili describe above? You can do > System>Packages>> Check For Updates >> Download and install >> Reboot system is updated I can't speak for OP, but there's a legitimate case: when a router doesn't have internet access (for any particular...
by jprietove
Sun Nov 25, 2018 2:21 pm
Forum: General
Topic: IP .2 can't ping out, but it can be pinged. IP .4 acts normal
Replies: 1
Views: 194

Re: IP .2 can't ping out, but it can be pinged. IP .4 acts normal

Try to see what is in ip, ARP. Maybe you have a static assignment for your Mac address and IP address

Enviado desde mi Redmi 3 mediante Tapatalk

  • 1
  • 2