MikroTik

Railander

!) added support for "Cake" and "FQ_Codel" type queues;

very nice!

Railander

With Mikrotik it seems that having possibility to set L2MTU (apart from having max L2 MTU as informational field) is for historical reasons. AFAIK in SwOS you can't set L2MTU any more, it's always set to maximum. Sure, you can set (L3) MTU and is limited by L2MTU ... that makes sense. wish we could...

Railander

anyone? On a layer 2 network you may have another switch that cannot admit frames that are quite as large as what the others can. In that case you may want to limit all switches to an L2MTU equal to the least capable device you have. If you limit the L2MTU to a setting that the least capable device...

Railander

anyone?

Railander

We have complexity issues in our network when trying to make sure OSPF routing remains symmetrical. This is not a problem when there are only 2 nodes in the same broadcast domain (typical router-router connection), but OSPF starts trying to route asymmetrically if there are more than 2 nodes and pat...

Railander

Your question got me wondering, so I thought I'd go read about it. See https://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards. this does not address my question at all. that article is mostly talking about MTU. my question is regarding why there is both L2MTU and MAX L2MTU.

Railander

I don't understand why every single vendor doesn't just set L2MTU to its max possible value out of the box this is exactly what i'm asking. why don't they just ship "actual L2MTU" at the max possible and scrap the "actual L2MTU" altogether, leaving just "max L2MTU"? th...

Railander

anyone?

Railander

Why does both L2MTU and MAX-L2MTU exist?
Wouldn't it be simpler if L2MTU was scrapped and keep only MAX-L2MTU as L2MTU?

Railander

Currently only one bridge can be hardware offloaded on CRS3xx series.

Is this a hardware limitation? If not, any plans to fix it in the future?

Railander

Very happy to see v7 finally coming together.

What's the kernel version?

Railander

as a workaround, ECMP works perfectly with OSPF instead of BGP, assuming your setup allows for it. alternatively, the tip provided by heribertos using routing filters forcing the "Next-Hop-in" to your desired multipath gateways might work, though you'll lose the fully dynamic aspect of BGP...

Railander

i've required this feature several times already. i understand i could use a route reflector to give all my routes back to me and put then with a different routing mark, but that would require a separate router with extra physical connections, which makes no sense as it should be very easy to do a c...

Railander

still cant change any user names.
introduced in 6.43.0

Railander

Don't know if it's already been mentioned, but I can no longer change the name of a user in /user
It's not only the default user, it applies even to newly created users.

> user set admin name=test
failure: user name can't be changed

Railander

I need to know this as well.

Railander

Feature Request: With the use of interface-lists, set customized permissions to which interfaces a user (and preferably also snmp community) can see or make changes to. Some of our clients like to have read access to our routers, but sometimes it's a router supplying more than one client and giving ...

Railander

Do you have connection tracking turned on? how big is your connection tracking table? I found previously that port scanning created many connections to port 445 filling up connection tracking table and causing CPU spikes. Not sure if this is exposed to the Internet or not and whether you are blocki...

Railander

Do you have any masquerade rules? What is your OSPF topology like, is there anything that would cause frequent LSA's like /32 routes for PPP tunnels? Also I am wondering about the bonding - fastpath apparently on works with bonded interfaces on receive, and apparently even then only since RouterOS ...

Railander

OK.. also, good idea to check for certain bad settings that can kill your performance, for instance turning on "Use IP firewall" in the bridge settings kills the CPU, good to identify whether there might be some issue like that.

Good one.
In my case it was already disabled in all routers.

Railander

Trying to experiment with IPFIX instead of NetFlow, my monitoring software reported flows from 1504215292 seconds ago and promptly discarded them. First I thought it was some misconfiguration but after trying to change back to NetFlow and seeing everything working fine, it ocurred to me... As it tur...

Railander

OK.. also BTW I think you misunderstand fastpath - fastpath is automatically active when it is enabled and you have no firewall rules. Fasttrack is kindof a 'fastpath-lite' where you can fastpath some traffic in situations where you need to have firewall rules and other such things. It is not as ef...

Railander

Can you paste your config with the hide sensitive option? What did you learn from the profiler? You should be able to see when a CPU is maxed what process is maxing out that CPU. I need to update RouterOS, the current version in that CCR doesn't support per-core profiling. Will do that later tonigh...

Railander

What volume of traffic are you pushing through these?

5Gbps tops, adding all interfaces.

Railander

We're trying to activate a new peering connection with a partnet but we're being denied because, according to them, our SNMP is answering requests on v3 and this can be abused for DDoS attacks. Here's the results with snmpwalk. [root@dnslookup ~]# snmpwalk -v1 -c public 10.112.194.2 Timeout: No Resp...

Railander

Hello. From checking the logs this might indeed be the problem (the current RouterOS version doesn't support this, I'm yet to update it). http://puu.sh/xoj8D/fd901a6b65.jpg Also, I noticed that disabling IP Flow in this CCR (1016) reduced CPU usage from ~20% to ~15%, while on another CCR (1072) enab...

Railander

We have several CCRs and noticed small levels of packet loss (anywhere from 0.3% upwards of 2%) whenever CPU utilization is above 5%. One thing we noticed is the only scenario the packet loss doesn't happen is when the CCR is using Fast Path for all its traffic. If Fast Path is disabled (firewall ru...

Railander

I'm trying to get both VLAN Trunking and Q-in-Q working at the same time but to no avail. I can do either one just fine, the problem is configuring both at the same time in the same CRS. I cannot find any documentations on how to get it done, the ones for them separately do not help much as the conf...

Railander

Winbox has a bug - in Windows 10 64-bit with Anniversary Update cannot click on buttons inside DialogBoxes. can confirm this bug, though i suspect it's a windows bug rather than winbox. dialog/confirmation boxes cannot be interacted with on windows 10 creators update. examples of such boxes are &qu...

Railander

Railander

based on our own needs here, i'd like to especially have more ports in a single router (given the CPU can handle it). example 1 (medium thoughput, actual router, not CRS): 24 SFP 2 SFP+ example 2 (high throughput): 8 SFP 8 SFP+ example 3 (very high throughput): 8 SFP+ 4 QSFP in all three cases, both...

Railander

did a quick search and only found a very old thread.

Add OID for SFP-specific port information such as:

Rx Power
Wavelength
Link Length
Connector Type
Vendor Name
Vendor Part Number
Vendor Revision
Vendor Serial
Manufacturing Date.

Railander

Thanks!

I didn't test it under load but the queues at least seem to be working.
Another question, is it possible to only limit the /32 host at 25 Mb/s if the /24 network is under full load but if it's using 0 Mb/s let the /32 host use as much as he wants, up to the 100 Mb/s?

Railander

Good evening. I'm having trouble with a certain QoS configuration. I've looked online for the past couple of hours but could not find anything that addresses it. My needs are very simple: I have a bandwidth traffic for a certain network, lets say 100 Mb/s for 10.0.0.0/24 . Keeping that queue above, ...

Search found 34 matches

Re: v7.1beta3 [development] is released!

Re: Why does both L2MTU and MAX-L2MTU exist?

Re: Why does both L2MTU and MAX-L2MTU exist?

Re: Why does both L2MTU and MAX-L2MTU exist?

OSPF avoid asymmetric routing (add cost at both exit and entry)

Re: Why does both L2MTU and MAX-L2MTU exist?

Re: Why does both L2MTU and MAX-L2MTU exist?

Re: Why does both L2MTU and MAX-L2MTU exist?

Why does both L2MTU and MAX-L2MTU exist?

Re: HW Offload CRS 2 bridges

Re: RouterOS v7.0 beta1 - when?

Re: BGP ECMP (multipathing)

Re: How to Copy dynamic Route to another route table

Re: v6.43.1 [stable] is released!

Re: v6.43 [current] is released!

Re: HW Offload CRS 2 bridges

Re: Feature requests

Re: CCR 0.3%+ packet loss whenever above 5% CPU

Re: CCR 0.3%+ packet loss whenever above 5% CPU

Re: CCR 0.3%+ packet loss whenever above 5% CPU

[BUG] IP Flow using IPFIX reports wrong date

Re: CCR 0.3%+ packet loss whenever above 5% CPU

Re: CCR 0.3%+ packet loss whenever above 5% CPU

Re: CCR 0.3%+ packet loss whenever above 5% CPU

SNMP v3 open

Re: CCR 0.3%+ packet loss whenever above 5% CPU

CCR 0.3%+ packet loss whenever above 5% CPU

CRS Q-in-Q + Trunk

Re: Winbox 3.11 released!

Re: RouterOS v7.0 beta1 - when?

Re: Which types of ports would you like to see for a high speed router

Re: Feature requests

Re: Queue priority of IPs within network

Queue priority of IPs within network