Community discussions

Search found 1184 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 24
by savage
Mon Jul 15, 2019 4:23 pm
Forum: Forwarding Protocols
Topic: OSPF state changes on long Ethernet POE leads
Replies: 2
Views: 166

Re: OSPF state changes on long Ethernet POE leads

I would also pin this rather on an underlying ethernet issue. 20+ flaps in 24 hours is a lot.

Ethernet errors, packet loss? anything at all wrong with the links?
by savage
Tue Jul 09, 2019 9:30 am
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 168
Views: 24006

Re: Which types of ports would you like to see for a high speed router

Once per three years is more than enough.
LOL
by savage
Fri Jul 05, 2019 6:07 pm
Forum: General
Topic: IPv6 gre
Replies: 5
Views: 231

Re: IPv6 gre

Thnx for the explanation guys. Makes sense.
by savage
Fri Jul 05, 2019 5:02 pm
Forum: General
Topic: IPv6 gre
Replies: 5
Views: 231

Re: IPv6 gre

What happens if you set do-not-fragment while pinging the IPv4 address? do-not-fragment=yes then as expected, IPv4 fails as well as IPv6 do-not-fragment=no then as expected IPv4 works, but not as expected IPv6 does not. I don't believe do-not-fragment is applied to IPv6 traffic on a IPv4 gre tunnel...
by savage
Fri Jul 05, 2019 4:46 pm
Forum: General
Topic: IPv6 gre
Replies: 5
Views: 231

IPv6 gre

Hi Guys, Two routers, identical configuration: /interface gre add allow-fast-path=no ipsec-secret="blah" local-address=192.168.24.98 mtu=1520 name=gre-tunnel1 remote-address=192.168.24.54 /ipv6 address add address=X:X:X:101::16/126 advertise=no interface=gre-tunnel1 /ip address add address=1.1.1.1/3...
by savage
Thu Jul 04, 2019 9:02 am
Forum: Forwarding Protocols
Topic: OSPF Force path for specific subnet
Replies: 6
Views: 383

Re: OSPF Force path for specific subnet

Static routes. Pretty much all that comes to mind.

OSPF can't manipulate cost per route, only per interface.
by savage
Thu Jun 27, 2019 11:02 am
Forum: Forwarding Protocols
Topic: OSPF Randomly Down Every 2-3 Days
Replies: 1
Views: 424

Re: OSPF Randomly Down Every 2-3 Days

No outages on the L2 circuit? Even briefly (a few seconds) that is long enough for a packet to disappear / be lost?

I've seen similar issues where one router would transmit a packet through a L2 provider circuit, and the packet doesn't get to the remote side, causing OSPF to get confused.
by savage
Mon Jun 24, 2019 10:16 am
Forum: Forwarding Protocols
Topic: OSPF Linux MikroTik
Replies: 3
Views: 604

Re: OSPF Linux MikroTik

I don't believe you'll be able to run OSPF inside AWS. They block Multicast / Broadcasts.

I also believe (not sure if it's fixed yet) that there is/was issues with OSPF over ipip. Not 100% on this, but I recall something like this.
by savage
Thu Jun 13, 2019 9:22 am
Forum: Wireless Networking
Topic: Wi-fi RADIUS Assigned VLAN based on user/password, troubleshooting help
Replies: 5
Views: 394

Re: Wi-fi RADIUS Assigned VLAN based on user/password, troubleshooting help

viewtopic.php?t=119494

Contains in details what is required and what you are missing, and also covers a small bug (which I don't know whether it's fixed yet or not).
by savage
Thu Jun 06, 2019 12:23 pm
Forum: RouterBOARD hardware
Topic: Mikrotik SFP / Cisco
Replies: 3
Views: 448

Mikrotik SFP / Cisco

Hi Guys, Anyone here using the Mikrotik MM / SM SFP modules on Cisco 9200 switches (1G links)? I know there are IOS commands and what not for the Cisco to "make it work" with 3rd party optics - this doesn't guarantee compatibility though. Just figured I'd ask to see whether I can get confirmation of...
by savage
Thu Jun 06, 2019 9:41 am
Forum: Forwarding Protocols
Topic: question about bgp full table from 2 different provider
Replies: 4
Views: 289

Re: question about bgp full table from 2 different provider

And that's precisely the problem with BGP being single threaded in MT.

Unfortunately, there's no way to speed up the time the convergence takes on MT currently. Your stuck at a few minutes of downtime, or alternately, use different routers.
by savage
Thu May 30, 2019 2:36 pm
Forum: Beginner Basics
Topic: Managing two separate subnet with same class addresses
Replies: 9
Views: 436

Re: Managing two separate subnet with same class addresses

Only way to do this without messing things up, is to use a VRF
by savage
Mon May 20, 2019 3:44 pm
Forum: Beginner Basics
Topic: Can mikrotik get all the bandwidth of 100Mbps internet from ISP?
Replies: 13
Views: 832

Re: Can mikrotik get all the bandwidth of 100Mbps internet from ISP?

You are using PPPoE, which has overhead on the protocol.

I don't believe 90Mbps on a 100Mbps PPPoE account, is unrealistic TBH.

EDIT: As you've mentioned as well... Yes, use 1Gbps ports, not 10/100. It does make a difference.
by savage
Mon May 20, 2019 11:31 am
Forum: RouterOS v6 RC and v7 BETA
Topic: weird bgp-filter bug
Replies: 2
Views: 386

Re: weird bgp-filter bug

Filters has been buggy for as long as I can remember. It's not something you want to change and/or update frequently. Refreshing the (bgp) peer, or changing the order of the filter rules, may cause the BGP process to re-read and process the updated filter, but yes. It's kinda a hit and a miss at thi...
by savage
Thu May 16, 2019 3:36 pm
Forum: General
Topic: 70m cable with MikroTik
Replies: 8
Views: 620

Re: 70m cable with MikroTik

At those distances, I would just pull fiber and forget about copper all together.

I've seen many (even CAT6) cables where the copper qty in the cable was low. Errors started to happen from as near as 60m.
by savage
Fri May 10, 2019 11:24 am
Forum: RouterBOARD hardware
Topic: Need more than one SFP interface at the level of $100 and $200
Replies: 8
Views: 602

Re: Need more than one SFP interface at the level of $100 and $200

CRS326
CRS112
CRS305

?
Those are switches, not routers.
by savage
Tue May 08, 2018 12:04 pm
Forum: General
Topic: RADIUS answer ignored
Replies: 4
Views: 475

Re: RADIUS answer ignored

We are also seeing this on CCRs from time to time...
by savage
Thu Mar 29, 2018 2:50 pm
Forum: General
Topic: Winbox Not Detecting RouterBoard
Replies: 31
Views: 5299

Re: Winbox Not Detecting RouterBoard

It's an issue with new ROS default configs & ROS versions shipped, and firmware... I've probably installed over 200 RB750's over the last two months (and other RBs). All of them, I've had to use a specific ethernet port and/or wireless, upgrade ROS, reboot (twice, because after the first reboot disc...
by savage
Tue Mar 13, 2018 1:22 pm
Forum: General
Topic: RADIUS Client - SessionID not globally unique
Replies: 7
Views: 1246

Re: RADIUS Client - SessionID not globally unique

Acct-Session-Id is not globally unique, it is not per NAS unique, and it is not unique across reboots.

https://tools.ietf.org/html/rfc2866#page-15 The RFC makes no requirement for the attribute to be unique.
by savage
Sat Feb 17, 2018 2:44 pm
Forum: General
Topic: interface bonding with SFP+ and Ethernet
Replies: 1
Views: 308

Re: interface bonding with SFP+ and Ethernet

For LACP all interfaces must be of the same speed & duplex.

You can use a SPF+ port, but needs to be a SFP (1G) module, and not a SPF+ (10G) module.

You can run SPF (1G) and copper together in a LACP, no problems there.
by savage
Sat Feb 17, 2018 12:09 pm
Forum: Wireless Networking
Topic: PoE Voltage Drops
Replies: 9
Views: 1106

Re: PoE Voltage Drops

14V at the end of a 130M 24AWG (presumably) cable run is actually quite good. The voltage drop is quite normal over that distance, but it SHOULD be sufficient as the RB's SHOULD operate on 12V. As others suggested, I would also recommend trying a 30V PSU. Just to be safe. My guess however, is that y...
by savage
Wed Feb 14, 2018 8:16 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Where is VRF, Route Rules, and Routing table selector for IPv6
Replies: 1
Views: 520

Re: Where is VRF, Route Rules, and Routing table selector for IPv6

Not yet supported. Many, many, IPv6 stuff isn't fully implemented yet in ROS.

PPP & IPv6 is also severely lacking.
by savage
Wed Jan 17, 2018 5:40 pm
Forum: Wireless Networking
Topic: 60GHz multipoint, share your experience
Replies: 32
Views: 10826

Re: 60GHz multipoint, share your experience

I'm sure it will be resolved in v7 ;)
:lol:
by savage
Thu Dec 14, 2017 5:24 pm
Forum: Wireless Networking
Topic: NV2 sync issues and solutions
Replies: 91
Views: 7841

Re: NV2 sync issues and solutions

I guess us moving into Mimosa was the right decision in the end.
+1

Love it how mikrotik pretty much just don't care.
by savage
Thu Dec 14, 2017 8:41 am
Forum: RouterOS v6 RC and v7 BETA
Topic: [exploit-db.com] MikroTik 6.40.5 ICMP - Denial of Service
Replies: 16
Views: 3378

Re: [exploit-db.com] MikroTik 6.40.5 ICMP - Denial of Service

This is not an exploit.
Yes - that's precisely why the topic says Denial of Service, and not Exploit :lol:

Funny how most devices have things like control plane policing, to limit things like this.
by savage
Mon Dec 11, 2017 10:46 am
Forum: Wireless Networking
Topic: NV2 sync issues and solutions
Replies: 91
Views: 7841

Re: NV2 sync issues and solutions

Further to stop using CCRs in it's entirety (PSU issues, BGP issues), we too, are seriously considering alternatives (Cambium / Mimosa) to Mikrotik on the wireless side. Mikrotik's loosing traction fast. Unless v7 is a magic bullet that gets released, very, very soon... I see tough times ahead for M...
by savage
Sun Dec 10, 2017 6:45 pm
Forum: Forwarding Protocols
Topic: Multiple VPN over single PPPoe-out
Replies: 1
Views: 327

Re: Multiple VPN over single PPPoe-out

Add a null / blackhole route with a high metric. That will catch the traffic when the VPN isn't active. When the VPN becomes active, it will install a route with a lower metric, and the lower metric route will take preference, routing your traffic normally over the VPN.
by savage
Sat Dec 02, 2017 8:47 am
Forum: General
Topic: Forum troubles
Replies: 39
Views: 2472

Re: Forum troubles

Also still frequently seeing DB errors, and waiting minutes (literally) for pages to load...
by savage
Thu Nov 30, 2017 2:01 pm
Forum: General
Topic: Forum troubles
Replies: 39
Views: 2472

Re: Forum troubles

ditto
by savage
Mon Nov 27, 2017 9:04 am
Forum: Wireless Networking
Topic: Nv2 limitations??
Replies: 23
Views: 1912

Re: Nv2 limitations??

So then why we only seeing 20-30Mbps throughput on the APs? :D Back to square one... running a loop here... one more time ; a client with Rx-rate connection rate of 52Mbps will have throughput of more or less 30Mbps when doing bandwidth test. at that moment the total bandwidth available to all clie...
by savage
Sun Nov 26, 2017 9:07 pm
Forum: Wireless Networking
Topic: Nv2 limitations??
Replies: 23
Views: 1912

Re: Nv2 limitations??

. And when it's NOT active, you sit with links with 3% or 5% CCQ, which degrades the performance of the links that IS active... How ? , only active low data rates that are degrading throughput of AP. Thats basic wifi behaviour. Idle connections almost none. So then why we only seeing 20-30Mbps thro...
by savage
Sun Nov 26, 2017 8:38 pm
Forum: Wireless Networking
Topic: Nv2 limitations??
Replies: 23
Views: 1912

Re: Nv2 limitations??

What makes this interesting, is that CCQ drops when the link is idle and there's no traffic. Yet, when there's traffic all CCQs are well over the 80% and we still only get about 30Mbps / 35Mbps. CCQ can only be measured with active traffic. Well... DUH, of course. And when it's NOT active, you sit ...
by savage
Sun Nov 26, 2017 7:21 am
Forum: Wireless Networking
Topic: Nv2 limitations??
Replies: 23
Views: 1912

Re: Nv2 limitations??

We're sitting with the same thing... What makes this interesting, is that CCQ drops when the link is idle and there's no traffic. Yet, when there's traffic all CCQs are well over the 80% and we still only get about 30Mbps / 35Mbps. Given that CCQ drops when links are idle, just how are you supposed ...
by savage
Mon Nov 13, 2017 6:40 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: pppoe-relay
Replies: 29
Views: 17872

Re: Re:

Indeed. And now read what I said, setup the bridges, setup the EoIP tunnel between the MT Box and the PPPoE Server, and it should work. If you get the PPPoE Requests at the MT, there is no reason why you cannot tunnel it to kingdom come, if you so desire. EoIP - it's a trick, it's not a solution. E...
by savage
Sat Nov 11, 2017 2:25 pm
Forum: General
Topic: is address-list timeout broken? [SOLVED]
Replies: 2
Views: 424

Re: is address-list timeout broken? [SOLVED]

Thnx for confirming.
by savage
Sat Nov 11, 2017 1:22 pm
Forum: General
Topic: is address-list timeout broken? [SOLVED]
Replies: 2
Views: 424

is address-list timeout broken? [SOLVED]

Hi,

ROS 6.39.3 (bugfix)...
/ip firewall address-list add address=127.0.0.1 comment="_TEST_" list="test" timeout=00:02:00
Never mind what values I use for timeout, the dynamic rule is created, but after 10 to 20 seconds, the rule is removed again... :o
by savage
Wed Nov 08, 2017 12:24 pm
Forum: General
Topic: Freeradius Sim-Use not working with Mikrotik Hotspot
Replies: 5
Views: 802

Re: Freeradius Sim-Use not working with Mikrotik Hotspot

You can not use simultaneous use without checkrad. If the radius server misses an accounting stop it's not going to close the session. The only way to know whether the session is active or not is to query he nas. These things aren't out of the box configurations. It requires a lot of work and custom...
by savage
Mon Nov 06, 2017 8:24 pm
Forum: Wireless Networking
Topic: What is the point of an 802.11ac router with 10/100 ethernet?
Replies: 10
Views: 1196

Re: What is the point of an 802.11ac router with 10/100 ethernet?

Remember your 300 Mbps speed is in a single direction only, actual traffic will be both ways and a 100 Mbps fullduplex ethernet connection could in theory transfer up to 200 Mbps added. Nice math :) So yes, whilst it's 300mbps in a single direction, a 10/100 port CAN NOT, and NEVER WILL be able to ...
by savage
Mon Nov 06, 2017 8:19 pm
Forum: General
Topic: Freeradius Sim-Use not working with Mikrotik Hotspot
Replies: 5
Views: 802

Re: Freeradius Sim-Use not working with Mikrotik Hotspot

https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/configuration/simultaneous_use You need to *read* this, to understand how it works. It's not just a matter of slapping a few attributes into a radius request. Pay attention especially to section 3 in the documentation, IMPLEMENTATION, a...
by savage
Thu Oct 26, 2017 9:49 am
Forum: Beginner Basics
Topic: Allowing 100 sip connection to pbx
Replies: 5
Views: 718

Re: Allowing 100 sip connection to pbx

Due to the connection-tracking required, I think connection-limit only applies to TCP traffic, not UDP.

I may be wrong on this one, but I'm fairly sure that's what your problem is. You also want to be on the forward chain, not the input chain (your three connection-tracking rules).
by savage
Wed Oct 25, 2017 9:43 am
Forum: General
Topic: Radius timeout limit
Replies: 4
Views: 771

Re: Radius timeout limit

Yes in single authentication, but when you have dual authentication (like one time password - OTP) than we want to give users more time to enter it.... And giving the use time to enter a OTP, has nothing to do with the duration of the AAA *request*. The *request* is only sent AFTER the user entered...
by savage
Tue Oct 24, 2017 6:05 pm
Forum: General
Topic: Radius timeout limit
Replies: 4
Views: 771

Re: Radius timeout limit

Uhm.

20s is WAY to long for a AAA response, by that time, your client would long have given up trying to authenticate. You want to handle AAA within 2 or 3 seconds (tops).
by savage
Thu Oct 12, 2017 8:28 pm
Forum: Wireless Networking
Topic: Quick Q re Station & connect-list
Replies: 0
Views: 366

Quick Q re Station & connect-list

Hi, From the docs (https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#Connect_List) Operation: connect-list rules are always checked sequentially, starting from the first. disabled rules are always ignored. Only the first matching rule is applied. If connect-list does not have any rule that ma...
by savage
Tue Oct 10, 2017 7:59 pm
Forum: General
Topic: Intel SFP+ support?
Replies: 14
Views: 2181

Re: Intel SFP+ support?

Hi, We are using a CCR1072-1G-8S+ as our core router. In the near future we will attach two 10gig links to it with a dualport Intel x710 with sr optics: https://www.intel.com/content/www/us/en/ethernet-products/optics-cables/ethernet-sfp-optics-brief.html?wapkw=intel%20SFP%20%20optics As Intel stat...
by savage
Thu Oct 05, 2017 7:09 pm
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 107
Views: 22349

Re: IPv6 recursive nexthops via iBGP

I gave up on mikrotik when we moved to a dual stack network because of this bug. You can find new Juniper SRX routers pretty cheaply if you look hard. Don’t pay more than 25% of the list cost, though. I'm in the same boat. Can't use MT in my core / borders. MT is definitely not aware of the actual ...
by savage
Wed Oct 04, 2017 8:17 pm
Forum: General
Topic: Internet configuration with CGNAT
Replies: 9
Views: 2230

Re: Internet configuration with CGNAT

/interface vlan add name=wan vlan-id=20 interface=ether1 /ip address add address=100.64.139.40/30 interface=wan /ip route add dst=0.0.0.0/0 gateway=100.64.139.39 /ip firewall nat add chain=srcnat out-interface=wan action=src-nat to-address=62.28.108.38 As you don't have 62.28.108.38 assigned to any...
by savage
Wed Oct 04, 2017 8:12 pm
Forum: General
Topic: Internet configuration with CGNAT
Replies: 9
Views: 2230

Re: Internet configuration with CGNAT

On your WAN Ethernet port... Create a VLAN with VLANID 20 On the VLAN interface, assign 100.64.139.40/30 Add default route to 100.64.139.39 Confirm that you can ping 100.64.139.39 (or at least see the MAC address under /ip arp), if not, there's no point in going further... If you can then; Create lo...
by savage
Sun Oct 01, 2017 6:58 pm
Forum: RouterBOARD hardware
Topic: CCR-1036-8G-2+ Crashing!
Replies: 3
Views: 859

Re: CCR-1036-8G-2+ Crashing!

Do you monitor / graph the power levels of the device?

Sounds to me like it's the PSU failing... Quite a few people suffer from PSU issues on the CCRs, despite MT claiming nothing wrong, problem fixed, new PSU, etc...
by savage
Thu Sep 28, 2017 8:05 pm
Forum: Forwarding Protocols
Topic: Subnetting public /22 with PPPoE and OSPF
Replies: 8
Views: 900

Re: Subnetting public /22 with PPPoE and OSPF

Well, if you want to use /29 as a base pool size and don't want to get painted into a corner because some tower is much more popular, then what you could do is allocate your initial /29 blocks sparsely and then simply increase to /28 at sites requiring it, then /27, etc. Amusing of course that that...
by savage
Sat Sep 23, 2017 5:34 pm
Forum: General
Topic: CCR1009-8G-1S-1Splus with 10gb uplink ?!
Replies: 7
Views: 813

Re: CCR1009-8G-1S-1Splus with 10gb uplink ?!

As long as you're within the 300m distance limitation, yes. No reason why it won't work.
Why 300 meters. With S+31DLC10D single mode sfp+ 10km. It is compatible
Because the OP *specifically* mentions MM fiber?
  • 1
  • 2
  • 3
  • 4
  • 5
  • 24